Index: output/bt_program23.list =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.list (revision 5164) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.list (working copy) @@ -139,31625 +139,31625 @@ 0x7b 000230 call init_lmp 0x7c 000231 ncall lpm_disable_exen_output ,wake 0x7d 000232 call ui_init + 1 -0x7e 000233 arg 0x18 ,temp -0x7f 000234 call p_gpio_set_input_pu -0x80 000235 branch soft_reset + 11 -: 000237 p_soft_reset_2: -0x81 000238 call app_lpm_init ,wake -0x82 000239 call publickey_init -0x83 000240 call lpm_recover_clk ,wake -: 000241 p_sp_cal_loop: -0x84 000242 call sp_calc_sequence -0x85 000243 fetch 1 ,mem_ssp_enable -0x86 000244 branch main_loop ,blank -0x87 000245 fetch 1 ,mem_sp_local_key_invalid -0x88 000246 branch p_sp_cal_loop ,blank -0x89 000247 branch main_loop -: 000249 p_init_param: -0x8a 000250 setarg param_le_version -0x8b 000251 store 3 ,mem_lmp_version -0x8c 000252 setarg param_le_subversion -0x8d 000253 store 2 ,mem_lmp_version + 3 -0x8e 000254 branch init_param + 12 -: 000256 p_lpm_check_wake_lock: -0x8f 000257 rtnmark1 mark_24g -0x90 000258 fetch 1 ,mem_mouse_clear_sensor_data_flag -0x91 000259 beq 0 ,disable_blank -0x92 000260 fetch 1 ,mem_mouse_le_conn_param_reject -0x93 000261 beq le_lpm_disable ,disable_blank -0x94 000262 fetch 2 ,mem_sdp_remote_cid +0x7e 000233 branch soft_reset + 11 +: 000235 p_soft_reset_2: +0x7f 000236 call app_lpm_init ,wake +0x80 000237 call publickey_init +0x81 000238 call lpm_recover_clk ,wake +: 000239 p_sp_cal_loop: +0x82 000240 call sp_calc_sequence +0x83 000241 fetch 1 ,mem_ssp_enable +0x84 000242 branch main_loop ,blank +0x85 000243 fetch 1 ,mem_sp_local_key_invalid +0x86 000244 branch p_sp_cal_loop ,blank +0x87 000245 branch main_loop +: 000247 p_init_param: +0x88 000248 setarg param_le_version +0x89 000249 store 3 ,mem_lmp_version +0x8a 000250 setarg param_le_subversion +0x8b 000251 store 2 ,mem_lmp_version + 3 +0x8c 000252 branch init_param + 12 +: 000254 p_lpm_check_wake_lock: +0x8d 000255 rtnmark1 mark_24g +0x8e 000256 fetch 1 ,mem_mouse_clear_sensor_data_flag +0x8f 000257 beq 0 ,disable_blank +0x90 000258 fetch 1 ,mem_mouse_le_conn_param_reject +0x91 000259 beq le_lpm_disable ,disable_blank +0x92 000260 fetch 2 ,mem_sdp_remote_cid +0x93 000261 nbranch disable_blank ,blank +0x94 000262 fetch 1 ,mem_mouse_wheel_trigger 0x95 000263 nbranch disable_blank ,blank -0x96 000264 fetch 1 ,mem_mouse_wheel_trigger -0x97 000265 nbranch disable_blank ,blank -0x98 000266 branch enable_blank -: 000269 p_g24_dispatch: -0x99 000270 rtnmark0 mark_24g -0x9a 000271 fetch 1 ,mem_24g_conn_sm -0x9b 000272 bbit1 state_24g_pair ,p_g24_pair_dispatch -0x9c 000273 bbit1 state_24g_reconn ,p_g24_reconn_dispatch -0x9d 000274 fetch 1 ,mem_24g_transmit_by_interrupt -0x9e 000275 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt -: 000276 p_g24_transmit_process: -0x9f 000277 call p_g24_txdata_prep -0xa0 000278 nbranch p_g24_nodata_transmit ,user -0xa1 000279 call p_g24_rf_sta_check -: 000280 p_g24_transmit_start: -0xa2 000281 call p_g24_transmit_packet -0xa3 000282 fetch 1 ,mem_24g_pairing_sm -0xa4 000283 rtnne state_24g_pairing_success -0xa5 000284 call power_ctrl_start -0xa6 000285 call g24_long_sleep_shorter_param_update -0xa7 000286 fetch 1 ,mem_mouse_multi_led_state -0xa8 000287 beq on ,p_g24_transmit_by_interrupt_enable -: 000288 p_g24_short_sleep: -0xa9 000289 call p_g24_lpm_wait -0xaa 000290 nrtn user -0xab 000291 call p_clear_wake -0xac 000292 setarg 58000 -: 000293 p_g24_enter_sleep: -0xad 000294 branch g24_lpm_long_sleep2 -: 000296 p_g24_pair_dispatch: -0xae 000297 jam zcode_c0 ,mem_zcode_temp_param0 -0xaf 000298 branch p_zcode_entrance -: 000300 p_g24_reconn_dispatch: -0xb0 000301 jam zcode_70 ,mem_zcode_temp_param0 -0xb1 000302 branch p_zcode_entrance -: 000305 g24_long_sleep_shorter_param_update: -0xb2 000306 fetch 1 ,mem_config_function_enable -0xb3 000307 rtnbit1 enable_sensor_motion_pin -0xb4 000308 setarg g24_long_sleep_step1 -0xb5 000309 store 3 ,mem_24g_enter_hibernate -0xb6 000310 jam 50 ,mem_24g_long_sleep_param_update_timer -0xb7 000311 rtn -: 000313 p_g24_transmit_by_interrupt: -0xb8 000314 jam zcode_d1 ,mem_zcode_temp_param0 -0xb9 000315 branch p_zcode_entrance -: 000318 p_g24_nodata_transmit: -0xba 000319 fetch 1 ,mem_24g_abort_pac -0xbb 000320 call p_g24_send_abort_packet ,blank -: 000321 p_g24_long_sleep: -0xbc 000322 call p_g24_lpm_wait -0xbd 000323 nrtn user -0xbe 000324 fetch 3 ,mem_24g_enter_hibernate -0xbf 000325 branch g24_lpm_long_sleep2 -: 000327 p_g24_send_abort_packet: -0xc0 000328 jam 1 ,mem_24g_abort_pac -0xc1 000329 jam 0 ,mem_24g_rf_hop_ch -0xc2 000330 call p_g24_transmit_rf_ctrl_clear -0xc3 000331 store 1 ,mem_24g_txbuf -0xc4 000332 setarg 0 -0xc5 000333 store 7 ,mem_24g_txbuf + 1 -0xc6 000334 fetch 4 ,mem_24g_device_addr -0xc7 000335 store 4 ,mem_24g_txbuf + 8 -0xc8 000336 jam 12 ,mem_24g_datalen -0xc9 000337 fetch 1 ,mem_24g_data_type -0xca 000338 set1 bit_abort ,pdata -0xcb 000339 store 1 ,mem_24g_data_type -0xcc 000340 call p_g24_txdata_enable_tx -0xcd 000341 branch p_g24_transmit_start -: 000343 p_g24_transmit_rf_sta_init: -0xce 000344 jam 1 ,mem_24g_rf_last_sta -0xcf 000345 jam 0 ,mem_24g_sync_cnt -: 000346 p_g24_transmit_rf_ctrl_clear: -0xd0 000347 fetch 1 ,mem_24g_data_type -0xd1 000348 and_into bits_data ,pdata -0xd2 000349 store 1 ,mem_24g_data_type -0xd3 000350 rtn -: 000352 p_g24_hop_ch_enable: -0xd4 000353 fetch 1 ,mem_24g_data_type -0xd5 000354 set1 bit_hop ,pdata -0xd6 000355 store 1 ,mem_24g_data_type -0xd7 000357 store 1 ,mem_24g_txpayload -0xd8 000358 rtn -: 000360 p_g24_hop_enable_packet: -0xd9 000361 fetch 1 ,mem_24g_data_type -0xda 000362 rtnbit0 bit_hop -: 000363 p_g24_hop_ch_disable: -0xdb 000364 fetch 1 ,mem_24g_data_type -0xdc 000365 set0 bit_hop ,pdata -0xdd 000366 store 1 ,mem_24g_data_type -0xde 000367 store 1 ,mem_24g_txpayload -0xdf 000368 call power_ctrl_pac_succ_decrs -0xe0 000369 branch p_g24_ch -: 000371 p_g24_rf_hop_attemp_again: -0xe1 000372 fetch 1 ,mem_24g_rf_hop_ch -0xe2 000373 bne 1 ,p_g24_transmit_rf_ctrl_clear -: 000374 p_g24_rf_hop_fastly: -0xe3 000375 fetch 1 ,mem_24g_hop_fastly_cnt -0xe4 000376 increase 1 ,pdata -0xe5 000377 store 1 ,mem_24g_hop_fastly_cnt -0xe6 000378 beq 4 ,p_g24_rf_hop_fastly_exit -0xe7 000379 call p_g24_ch -0xe8 000380 jam 2 ,mem_24g_max_retry -: 000381 p_g24_transmit_packet: -0xe9 000382 jam 0 ,mem_24g_retry -: 000383 p_g24_transmit_loop: -0xea 000384 arg param_rx_setup ,timeup -0xeb 000385 until clkn_rt ,meet -0xec 000386 call p_g24_transmit_receive_ack -0xed 000389 nbranch p_g24_retransmit ,sync -0xee 000390 nbranch p_g24_retransmit ,user3 -0xef 000391 call p_g24_txbuf_clear -0xf0 000392 call p_g24_ackpayload_parse -0xf1 000393 call power_ctrl_pac_succ_incrs -: 000394 p_g24_transmit_next_packet: -0xf2 000395 jam 0 ,mem_retry_count -0xf3 000396 fetch 1 ,mem_24g_pid -0xf4 000397 increase 1 ,pdata -0xf5 000398 store 1 ,mem_24g_pid -0xf6 000399 call p_g24_hop_enable_packet -0xf7 000400 fetch 1 ,mem_24g_pairing_sm -0xf8 000401 bne state_24g_pairing_success ,p_g24_paring_mode_start -0xf9 000402 call p_g24_transmit_succ_rf_config -: 000403 p_g24_transmit_abandon: -0xfa 000404 setarg 0 -0xfb 000405 store 4 ,mem_24g_ensure -0xfc 000406 store 1 ,mem_24g_hop_pac_retry -0xfd 000407 rtn -: 000409 p_g24_rf_hop_fastly_exit: -0xfe 000410 call power_ctrl_pac_succ_decrs -0xff 000411 jam 0 ,mem_24g_hop_fastly_cnt -0x100 000412 branch p_g24_transmit_rf_ctrl_clear -: 000414 p_g24_transmit_hop_pac_succ_wo_hop: -0x101 000415 jam 2 ,mem_24g_sync_cnt -: 000416 p_g24_transmit_hop_pac_succ: -0x102 000417 jam 1 ,mem_24g_rf_last_sta -0x103 000418 jam 0 ,mem_24g_rf_hop_ch -0x104 000419 branch p_g24_transmit_rf_ctrl_clear -: 000421 p_g24_transmit_succ_rf_config: -0x105 000422 fetch 1 ,mem_24g_rf_work_stage -0x106 000423 beq 3 ,p_g24_transmit_hop_pac_succ -0x107 000424 fetch 1 ,mem_24g_data_type -0x108 000425 isolate0 bit_hop ,pdata -0x109 000426 branch p_g24_transmit_rf_sta_init ,true -0x10a 000427 fetch 1 ,mem_24g_rf_work_stage -0x10b 000428 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop -0x10c 000429 beq 2 ,p_g24_transmit_hop_pac_succ -0x10d 000430 rtn -: 000432 p_g24_rf_sta_check: -0x10e 000433 fetch 1 ,mem_24g_pairing_sm -0x10f 000434 rtnne state_24g_pairing_success -0x110 000435 call p_g24_rf_laststa_synccnt_check -0x111 000436 ncall p_g24_rf_sync_cnt_check ,user2 -0x112 000437 rtn -: 000439 p_g24_rf_laststa_synccnt_check: -0x113 000440 disable user2 -0x114 000441 fetch 1 ,mem_24g_rf_last_sta -0x115 000442 rtnne 1 -0x116 000443 fetch 1 ,mem_24g_sync_cnt -0x117 000444 rtnne 0 -0x118 000445 jam 1 ,mem_24g_rf_work_stage -0x119 000446 jam 4 ,mem_24g_max_retry -0x11a 000447 branch enable_user2 -: 000449 p_g24_rf_sync_cnt_check: -0x11b 000450 fetch 1 ,mem_24g_sync_cnt -0x11c 000451 branch p_g24_rf_hop_attemp ,blank -0x11d 000452 increase -1 ,pdata -0x11e 000453 store 1 ,mem_24g_sync_cnt -0x11f 000454 jam 2 ,mem_24g_rf_work_stage -0x120 000455 jam 4 ,mem_24g_max_retry -: 000456 p_g24_ch: -0x121 000457 fetcht 1 ,mem_24g_current_ch_number -0x122 000458 fetch 1 ,mem_24g_addr -0x123 000459 and_into 0x03 ,pdata -0x124 000460 mul32 pdata ,4 ,rega -0x125 000461 setarg mem_24g_ch_map1 -0x126 000462 iadd rega ,pdata -0x127 000463 iadd temp ,contr -0x128 000464 ifetch 1 ,contr -0x129 000465 store 1 ,mem_24g_ch -0x12a 000466 increase 1 ,temp -0x12b 000467 and_into 3 ,temp -0x12c 000468 storet 1 ,mem_24g_current_ch_number -0x12d 000469 rtn -: 000471 p_g24_rf_hop_attemp: -0x12e 000472 jam 3 ,mem_24g_rf_work_stage -0x12f 000473 fetch 1 ,mem_24g_rf_hop_ch -0x130 000474 nbranch p_g24_rf_hop_attemp_again ,blank -0x131 000475 jam 2 ,mem_24g_max_retry -0x132 000476 branch p_g24_ch -: 000478 p_g24_txdata_prep: -0x133 000479 fetch 1 ,mem_24g_pairing_sm -0x134 000480 bne state_24g_pairing_success ,p_g24_pairing_sm -: 000481 p_g24_txdata_prep_packeage_data: -0x135 000482 call p_g24_package_data -: 000483 p_g24_txdata_enable_tx: -0x136 000484 call p_g24_transmit_prep -0x137 000485 jam ensure_on_24g ,mem_24g_ensure -0x138 000486 rtn -: 000488 p_g24_package_data: -0x139 000489 fetch 2 ,mem_cb_24g_data -0x13a 000490 call callback_func -0x13b 000491 branch p_g24_accumulate_mouse_data ,user -0x13c 000492 fetch 7 ,mem_24g_txbuf + 1 -0x13d 000493 rtn blank -0x13e 000494 branch enable_user -: 000495 p_g24_accumulate_mouse_data: -0x13f 000496 call p_mouse_data_xy_release -0x140 000497 jam 0 ,mem_24g_abort_pac -0x141 000498 add rega ,1 ,pdata -0x142 000499 store 1 ,mem_24g_datalen -0x143 000500 call p_g24_transmit_rf_ctrl_clear -0x144 000501 store 1 ,mem_24g_txbuf -0x145 000502 ifetcht 1 ,contw -0x146 000503 ifetch 1 ,regb -0x147 000504 ior temp ,pdata -0x148 000505 istore 1 ,contw -0x149 000506 increase 1 ,regb -0x14a 000507 ifetch 4 ,regb -0x14b 000508 istore 4 ,contw -0x14c 000509 increase 4 ,regb -0x14d 000510 arg mem_24g_txbuf + 6 ,contw -0x14e 000511 arg 2 ,loopcnt -: 000512 p_g24_accumulation_loop: -0x14f 000513 ifetch 1 ,regb -0x150 000514 ifetcht 1 ,contw -0x151 000515 iadd temp ,pdata -0x152 000516 istore 1 ,contw -0x153 000517 increase 1 ,regb -0x154 000518 loop p_g24_accumulation_loop -0x155 000519 rtn -: 000521 p_g24_txbuf_clear: -0x156 000522 arg 4 ,loopcnt -0x157 000523 arg mem_24g_txbuf ,contw -0x158 000524 branch memset0 -: 000526 p_g24_transmit_receive_ack: -0x159 000527 disable user3 -0x15a 000528 call p_g24_transmit -0x15b 000533 force 0 ,radio_ctrl -0x15c 000534 fetch 4 ,mem_24g_addr -0x15d 000535 iforce access -0x15e 000536 fetcht 1 ,mem_last_freq -0x15f 000537 call set_freq_rx -0x160 000538 call rf_rx_enable -0x161 000539 call p_g24_receive_rxon -0x162 000540 call p_g24_end_of_packet ,user3 -0x163 000541 rtn -: 000546 p_g24_retransmit: -0x164 000547 fetch 1 ,mem_24g_abort_pac -0x165 000548 nrtn blank -0x166 000549 fetch 2 ,mem_24g_txfail_cnt -0x167 000550 increase 1 ,pdata -0x168 000551 store 2 ,mem_24g_txfail_cnt -0x169 000552 fetch 1 ,mem_24g_txfail_cnt + 1 -0x16a 000553 bbit1 0 ,g24_stop_24g_mode -0x16b 000554 fetch 1 ,mem_24g_pairing_sm -0x16c 000555 bne state_24g_pairing_success ,p_g24_tx_paring_retry -0x16d 000556 call p_g24_tx_hop_ch_process -0x16e 000557 branch p_g24_transmit_loop -: 000559 p_g24_tx_paring_retry: -0x16f 000560 fetch 1 ,mem_24g_txfail_cnt -0x170 000561 rtnne 0xff -: 000562 p_g24_tx_attempt_fail: -0x171 000563 setarg 0 -0x172 000564 store 2 ,mem_24g_txfail_cnt -0x173 000565 branch g24_stop_24g_mode -: 000567 p_g24_tx_fast_hop: -0x174 000568 setarg 240000 -0x175 000569 call sleep -0x176 000570 call power_ctrl_txpower_incrs -0x177 000571 call power_ctrl_pac_succ_decrs -0x178 000572 branch p_g24_ch -: 000574 p_g24_tx_hop_ch_process: -0x179 000575 fetch 1 ,mem_24g_retry -0x17a 000576 sub pdata ,11 ,null -0x17b 000577 nbranch p_g24_tx_fast_hop ,positive -0x17c 000578 increase 1 ,pdata -0x17d 000579 store 1 ,mem_24g_retry -0x17e 000581 beq 6 ,p_g24_hop_ch_disable -0x17f 000583 beq 12 ,p_g24_hop_ch_disable -0x180 000584 rtn -: 000586 p_g24_ackpayload_parse: -0x181 000587 call p_g24_read_len_pid_crc -0x182 000588 fetch 1 ,mem_24g_rxdata_length -0x183 000589 rtn blank -0x184 000590 iforce loopcnt -0x185 000591 arg mem_24g_rxbuf + 2 ,contr -0x186 000592 arg mem_24g_rxpayload ,contw -0x187 000593 branch memcpy -: 000595 p_g24_pair_init: -0x188 000596 jam tx_power_pair ,mem_tx_power -0x189 000597 jam 0 ,mem_24g_pid -0x18a 000598 jam g24_pair_ch ,mem_24g_ch -0x18b 000599 fetch 4 ,mem_24g_paring_addr -: 000600 p_g24_update_addr_and_synccrc8: -0x18c 000601 store 4 ,mem_24g_addr -: 000603 p_g24_syncword_crc8: -0x18d 000604 arg 0 ,rega -0x18e 000605 arg 4 ,loopcnt -0x18f 000606 arg mem_24g_addr ,contr -: 000607 p_g24_syncword_crc8_loop: -0x190 000608 ifetch 1 ,contr -0x191 000609 iadd rega ,rega -0x192 000610 loop p_g24_syncword_crc8_loop -0x193 000611 copy rega ,pdata -0x194 000612 store 2 ,mem_24g_syncword -0x195 000613 fetch 1 ,mem_24g_syncword -0x196 000614 fetcht 1 ,mem_24g_syncword + 1 -0x197 000615 iadd temp ,pdata -0x198 000616 store 1 ,mem_24g_syncword_crc8 -0x199 000617 rtn -: 000619 p_g24_start_pairing_sm1: -0x19a 000621 call p_g24_pair_init -: 000622 p_g24_set_pairing_sm_1: -0x19b 000623 jam state_24g_pairing_1 ,mem_24g_pairing_sm -0x19c 000624 rtn -: 000626 p_g24_pairing_sm: -0x19d 000627 jam zcode_90 ,mem_zcode_temp_param0 -0x19e 000628 branch p_zcode_entrance -: 000630 p_g24_paring_mode_start: -0x19f 000631 call power_ctrl_pac_succ_cnt_init -: 000632 p_g24_paring_mode: -0x1a0 000633 jam zcode_91 ,mem_zcode_temp_param0 -0x1a1 000634 branch p_zcode_entrance -: 000637 p_g24_check_51cmd_stop_24g: -0x1a2 000638 set0 mark_24g ,mark -0x1a3 000639 jam state_24g_stop ,mem_24g_conn_sm -0x1a4 000640 call le_disable -: 000641 p_mouse_disable_g24_pairing_flag: -0x1a5 000642 arg mosue_24g_pairing_flag ,queue -0x1a6 000643 branch mouse_disable_function_flag -: 000645 p_g24_put_data_in_buff: -0x1a7 000646 storet 1 ,mem_24g_datalen -0x1a8 000647 copy temp ,loopcnt -0x1a9 000648 arg mem_24g_txbuf ,contw -0x1aa 000649 copy rega ,contr -0x1ab 000650 branch memcpy -: 000652 p_g24_read_len_pid_crc: -0x1ac 000654 fetch 1 ,mem_24g_rxbuf + 1 -0x1ad 000655 rshift3 pdata ,pdata -0x1ae 000656 store 1 ,mem_24g_rxdata_length -0x1af 000658 increase 1 ,pdata -0x1b0 000659 arg mem_24g_rxbuf + 1 ,contr -0x1b1 000660 iadd contr ,contr -0x1b2 000661 ifetch 3 ,contr -0x1b3 000662 store 3 ,mem_24g_sta_crc -0x1b4 000664 fetch 1 ,mem_24g_rxbuf + 1 -0x1b5 000665 rshift pdata ,pdata -0x1b6 000666 and pdata ,0x03 ,pdata -0x1b7 000667 store 1 ,mem_24g_sta_pid -0x1b8 000668 rtn -: 000670 p_g24_transmit_prep: -0x1b9 000673 fetch 1 ,mem_24g_datalen -0x1ba 000674 increase 2 ,pdata -0x1bb 000675 store 1 ,mem_24g_txlen -0x1bc 000677 fetch 1 ,mem_24g_data_type -0x1bd 000678 store 1 ,mem_24g_txpayload -0x1be 000680 fetch 1 ,mem_24g_datalen -0x1bf 000681 lshift3 pdata ,pdata -0x1c0 000682 fetcht 1 ,mem_24g_pid -0x1c1 000683 and temp ,0x03 ,temp -0x1c2 000684 lshift temp ,temp -0x1c3 000685 ior temp ,pdata -0x1c4 000686 fetcht 1 ,mem_24g_no_ack -0x1c5 000687 iadd temp ,pdata -0x1c6 000688 istore 1 ,contw -0x1c7 000690 fetch 1 ,mem_24g_datalen -0x1c8 000691 iforce loopcnt -0x1c9 000692 arg mem_24g_txbuf ,contr -0x1ca 000693 branch memcpy -: 000712 p_g24_prep: -0x1cb 000713 disable enable_crc -0x1cc 000714 disable enable_white -0x1cd 000715 setarg 0x555555 -0x1ce 000716 iforce crc24_init -0x1cf 000717 fetch 1 ,mem_24g_ch -0x1d0 000718 branch le_prep2 -: 000720 p_g24_receive_rxon: -0x1d1 000723 call p_g24_prep -0x1d2 000724 disable user3 -0x1d3 000725 enable decode_fec0 -0x1d4 000726 enable is_rx -0x1d5 000727 disable is_tx -0x1d6 000728 enable swfine -0x1d7 000729 fetch 2 ,mem_24g_rx_window -0x1d8 000730 iforce stop_watch -0x1d9 000731 correlate null ,timeout -0x1da 000732 nbranch p_g24_sync_timeout ,sync -0x1db 000735 disable decode_fec0 -0x1dc 000736 enable decode_fec1 -0x1dd 000737 enable enable_white -0x1de 000738 enable enable_crc -0x1df 000739 call p_g24_receive_byte -0x1e0 000740 store 1 ,mem_24g_get_syncword_crc8 -0x1e1 000741 fetcht 1 ,mem_24g_syncword_crc8 -0x1e2 000742 isub temp ,null -0x1e3 000743 nbranch p_g24_end_of_packet ,zero -0x1e4 000744 call p_g24_receive_byte -0x1e5 000745 store 1 ,mem_24g_rxbuf -0x1e6 000749 fetch 1 ,mem_24g_rxbuf -0x1e7 000750 fetcht 1 ,mem_24g_data_type -0x1e8 000751 icompare bits_data ,temp -0x1e9 000752 nbranch p_g24_end_of_packet ,true -: 000753 p_g24_receive_skip: -0x1ea 000754 call p_g24_receive_byte -0x1eb 000755 istore 1 ,contw -0x1ec 000756 rshift3 pdata ,pdata -0x1ed 000757 and pdata ,0x1f ,loopcnt -0x1ee 000758 branch p_g24rx_nopayload ,zero -: 000759 p_g24rx_loop: -0x1ef 000760 call p_g24_receive_byte -0x1f0 000761 istore 1 ,contw -0x1f1 000762 loop p_g24rx_loop -: 000763 p_g24rx_nopayload: -0x1f2 000765 copy contw ,rega -0x1f3 000766 call p_g24_receive_byte -0x1f4 000767 store 1 ,mem_rssi_hex_received -0x1f5 000768 copy rega ,contw -0x1f6 000769 parse demod ,bucket ,24 -0x1f7 000770 enable swfine -0x1f8 000771 arg param_sifs ,stop_watch -0x1f9 000772 rshift32 pdata ,pdata -0x1fa 000773 rshift16 pdata ,pdata -0x1fb 000774 istore 3 ,contw -0x1fc 000775 disable decode_fec1 -0x1fd 000776 branch p_g24_end_of_packet ,crc_failed -0x1fe 000779 enable user3 -0x1ff 000780 fetch 1 ,mem_last_freq -0x200 000781 add pdata ,0 ,rega -0x201 000782 call rf_write_freq -0x202 000783 disable decode_fec0 -0x203 000784 call set_sync_on -0x204 000785 fetch 1 ,mem_rssi_hex_received -: 000786 p_rssi_signal: -0x205 000787 copy pdata ,rega -0x206 000788 fetcht 1 ,mem_rssi_signal_index -0x207 000789 setarg mem_rssi_signal_buf -0x208 000790 iadd temp ,contw -0x209 000791 copy rega ,pdata -0x20a 000792 istore 1 ,contw -0x20b 000793 increase 1 ,temp -0x20c 000794 and_into rssi_buf_len_signal ,temp -0x20d 000795 storet 1 ,mem_rssi_signal_index -0x20e 000796 rtn -: 000798 p_g24_receive_byte: -0x20f 000799 parse demod ,bucket ,8 -0x210 000800 rshift3 pwindow ,pdata -0x211 000801 rtn -: 000803 p_g24_sync_timeout: -: 000808 p_g24_end_of_packet: -0x212 000809 disable encode_fec1 -0x213 000810 disable decode_fec1 -0x214 000811 branch end_of_packet -: 000817 p_g24_transmit: -0x215 000818 call le_enable -0x216 000819 fetch 4 ,mem_24g_addr -0x217 000820 iforce access -0x218 000821 call p_g24_prep -0x219 000822 call set_sync_on -0x21a 000823 fetcht 1 ,mem_24g_ch -0x21b 000824 call set_freq_tx -0x21c 000825 set1 txgfsk ,radio_ctrl -0x21d 000826 enable encode_fec0 -0x21e 000827 enable is_tx -0x21f 000828 disable is_rx -0x220 000831 rshift16 access ,pdata -0x221 000832 rshift8 pdata ,pdata -0x222 000833 rshift4 pdata ,pdata -0x223 000834 inject mod ,40 -0x224 000835 disable encode_fec0 -0x225 000836 enable encode_fec1 -0x226 000837 enable enable_white -0x227 000838 enable enable_crc -0x228 000839 fetch 1 ,mem_24g_syncword_crc8 -0x229 000840 inject mod ,8 -0x22a 000841 fetch 1 ,mem_24g_txlen -0x22b 000842 iforce loopcnt -0x22c 000843 arg mem_24g_txpayload ,contr -: 000844 p_g24tr_loop: -0x22d 000845 ifetch 1 ,contr -0x22e 000846 inject mod ,8 -0x22f 000847 loop p_g24tr_loop -0x230 000850 enable enable_parity -0x231 000851 inject mod ,24 -0x232 000852 disable enable_parity -0x233 000853 until null ,tx_clear -0x234 000854 nop 100 -0x235 000855 disable encode_fec0 -0x236 000856 disable encode_fec1 -0x237 000857 rtn -: 000859 p_g24_timer_check: -0x238 000860 call disable_user -0x239 000861 fetcht 4 ,mem_24g_tx_btclk -0x23a 000862 copy clkn_bt ,pdata -0x23b 000863 isub temp ,null -0x23c 000864 ncall g24_timer_timeout ,positive -0x23d 000865 copy pdata ,regb -0x23e 000866 fetch 4 ,mem_24g_tx_btclk -0x23f 000867 fetcht 1 ,mem_24g_interval -0x240 000868 iadd temp ,temp -0x241 000869 copy regb ,pdata -0x242 000870 isub temp ,null -0x243 000871 nrtn positive -0x244 000872 set0 28 ,pdata -0x245 000873 store 4 ,mem_24g_tx_btclk -0x246 000874 branch enable_user -: 000876 p_rssi_average: -0x247 000877 arg 0 ,temp -0x248 000878 arg rssi_buf_len_signal + 1 ,loopcnt -0x249 000879 copy rega ,contr -: 000880 p_rssi_average_loop: -0x24a 000881 ifetch 1 ,contr -0x24b 000882 iadd temp ,temp -0x24c 000883 loop p_rssi_average_loop -0x24d 000884 rshift3 temp ,pdata -0x24e 000885 copy pdata ,temp -0x24f 000886 rtnmark0 mark_24g -0x250 000888 div pdata ,10 -0x251 000889 call wait_div_end -0x252 000890 quotient pdata -0x253 000891 lshift4 pdata ,pdata -0x254 000892 branch clk2bt_next -: 000894 p_mouse_before_lpm: -0x255 000895 rtnmark1 mark_24g -0x256 000896 call p_mouse_le_txbuff_save -0x257 000897 call p_mouse_setgpio_lpm -0x258 000898 fetch 1 ,mem_context -0x259 000899 bbit0 state_inconn ,p_clear_wake -0x25a 000900 fetch 1 ,mem_lpm_current_mult -0x25b 000901 nrtn blank -: 000902 p_clear_wake: -0x25c 000903 setarg 0 -0x25d 000904 store 8 ,mem_gpio_wakeup_low -0x25e 000905 rtn -: 000907 p_g24_lpm_wait: -0x25f 000908 enable user -0x260 000909 call lpo_calibration -0x261 000910 fetch 3 ,mem_clks_per_lpo -0x262 000911 branch disable_user ,blank -0x263 000912 fetch 1 ,mem_lpm_mode -0x264 000913 branch disable_user ,blank -0x265 000914 fetch 1 ,mem_24g_transmit_by_interrupt -0x266 000915 beq g24_tx_timer_int_enable ,disable_user -: 000916 p_mouse_setgpio_lpm: -0x267 000917 call p_mouse_set_sdio_high -0x268 000918 call p_clear_wake -: 000919 p_mouse_setgpio_hibernate: -0x269 000920 call mouse_lpm_before_common -0x26a 000921 fetcht 1 ,mem_flash_ncs_gpio -0x26b 000922 call gpio_out_inactive -0x26c 000923 hfetch 4 ,core_gpio_oe0 -0x26d 000924 hfetcht 4 ,core_gpio_pu0 -0x26e 000925 ior temp ,temp -0x26f 000926 invert temp ,temp -0x270 000927 hstoret 4 ,core_gpio_pd0 -0x271 000928 hfetch 1 ,core_gpio_pd1 -0x272 000929 set0 2 ,pdata -0x273 000930 hstore 1 ,core_gpio_pd1 -0x274 000931 hfetch 1 ,core_gpio_pd2 -0x275 000932 set0 6 ,pdata -0x276 000933 hstore 1 ,core_gpio_pd2 -0x277 000938 hfetch 1 ,core_gpio_pd3 -0x278 000939 set1 0 ,pdata -0x279 000940 hstore 1 ,core_gpio_pd3 -0x27a 000941 hfetch 1 ,core_gpio_pu2 -0x27b 000942 or pdata ,0xc0 ,pdata -0x27c 000943 hstore 1 ,core_gpio_pu2 -0x27d 000944 hfetch 1 ,core_gpio_pd3 -0x27e 000945 and pdata ,0x7f ,pdata -0x27f 000946 hstore 1 ,core_gpio_pd3 -0x280 000949 rtn -: 000951 p_mouse_t_wheel_clear_wake: -0x281 000952 fetcht 1 ,mem_whee_a_data_gpio +0x96 000264 branch enable_blank +: 000267 p_g24_dispatch: +0x97 000268 rtnmark0 mark_24g +0x98 000269 fetch 1 ,mem_24g_conn_sm +0x99 000270 bbit1 state_24g_pair ,p_g24_pair_dispatch +0x9a 000271 bbit1 state_24g_reconn ,p_g24_reconn_dispatch +0x9b 000272 fetch 1 ,mem_24g_transmit_by_interrupt +0x9c 000273 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt +: 000274 p_g24_transmit_process: +0x9d 000275 call p_g24_txdata_prep +0x9e 000276 nbranch p_g24_nodata_transmit ,user +0x9f 000277 call p_g24_rf_sta_check +: 000278 p_g24_transmit_start: +0xa0 000279 call p_g24_transmit_packet +0xa1 000280 fetch 1 ,mem_24g_pairing_sm +0xa2 000281 rtnne state_24g_pairing_success +0xa3 000282 call power_ctrl_start +0xa4 000283 call g24_long_sleep_shorter_param_update +0xa5 000284 fetch 1 ,mem_mouse_multi_led_state +0xa6 000285 beq on ,p_g24_transmit_by_interrupt_enable +: 000286 p_g24_short_sleep: +0xa7 000287 call p_g24_lpm_wait +0xa8 000288 nrtn user +0xa9 000289 call p_clear_wake +0xaa 000290 setarg 58000 +: 000291 p_g24_enter_sleep: +0xab 000292 branch g24_lpm_long_sleep2 +: 000294 p_g24_pair_dispatch: +0xac 000295 jam zcode_c0 ,mem_zcode_temp_param0 +0xad 000296 branch p_zcode_entrance +: 000298 p_g24_reconn_dispatch: +0xae 000299 jam zcode_70 ,mem_zcode_temp_param0 +0xaf 000300 branch p_zcode_entrance +: 000303 g24_long_sleep_shorter_param_update: +0xb0 000304 fetch 1 ,mem_config_function_enable +0xb1 000305 rtnbit1 enable_sensor_motion_pin +0xb2 000306 setarg g24_long_sleep_step1 +0xb3 000307 store 3 ,mem_24g_enter_hibernate +0xb4 000308 jam 20 ,mem_24g_long_sleep_param_update_timer +0xb5 000309 rtn +: 000311 p_g24_transmit_by_interrupt: +0xb6 000312 jam zcode_d1 ,mem_zcode_temp_param0 +0xb7 000313 branch p_zcode_entrance +: 000316 p_g24_nodata_transmit: +0xb8 000317 fetch 1 ,mem_24g_abort_pac +0xb9 000318 call p_g24_send_abort_packet ,blank +: 000319 p_g24_long_sleep: +0xba 000320 call p_g24_lpm_wait +0xbb 000321 nrtn user +0xbc 000322 fetch 3 ,mem_24g_enter_hibernate +0xbd 000323 branch g24_lpm_long_sleep2 +: 000325 p_g24_send_abort_packet: +0xbe 000326 jam 1 ,mem_24g_abort_pac +0xbf 000327 jam 0 ,mem_24g_rf_hop_ch +0xc0 000328 call p_g24_transmit_rf_ctrl_clear +0xc1 000329 store 1 ,mem_24g_txbuf +0xc2 000330 setarg 0 +0xc3 000331 store 7 ,mem_24g_txbuf + 1 +0xc4 000332 fetch 4 ,mem_24g_device_addr +0xc5 000333 store 4 ,mem_24g_txbuf + 8 +0xc6 000334 jam 12 ,mem_24g_datalen +0xc7 000335 fetch 1 ,mem_24g_data_type +0xc8 000336 set1 bit_abort ,pdata +0xc9 000337 store 1 ,mem_24g_data_type +0xca 000338 call p_g24_txdata_enable_tx +0xcb 000339 branch p_g24_transmit_start +: 000341 p_g24_transmit_rf_sta_init: +0xcc 000342 jam 1 ,mem_24g_rf_last_sta +0xcd 000343 jam 0 ,mem_24g_sync_cnt +: 000344 p_g24_transmit_rf_ctrl_clear: +0xce 000345 fetch 1 ,mem_24g_data_type +0xcf 000346 and_into bits_data ,pdata +0xd0 000347 store 1 ,mem_24g_data_type +0xd1 000348 rtn +: 000350 p_g24_hop_ch_enable: +0xd2 000351 fetch 1 ,mem_24g_data_type +0xd3 000352 set1 bit_hop ,pdata +0xd4 000353 store 1 ,mem_24g_data_type +0xd5 000355 store 1 ,mem_24g_txpayload +0xd6 000356 rtn +: 000358 p_g24_hop_enable_packet: +0xd7 000359 fetch 1 ,mem_24g_data_type +0xd8 000360 rtnbit0 bit_hop +: 000361 p_g24_hop_ch_disable: +0xd9 000362 fetch 1 ,mem_24g_data_type +0xda 000363 set0 bit_hop ,pdata +0xdb 000364 store 1 ,mem_24g_data_type +0xdc 000365 store 1 ,mem_24g_txpayload +0xdd 000366 call power_ctrl_pac_succ_decrs +0xde 000367 branch p_g24_ch +: 000369 p_g24_rf_hop_attemp_again: +0xdf 000370 fetch 1 ,mem_24g_rf_hop_ch +0xe0 000371 bne 1 ,p_g24_transmit_rf_ctrl_clear +: 000372 p_g24_rf_hop_fastly: +0xe1 000373 fetch 1 ,mem_24g_hop_fastly_cnt +0xe2 000374 increase 1 ,pdata +0xe3 000375 store 1 ,mem_24g_hop_fastly_cnt +0xe4 000376 beq 4 ,p_g24_rf_hop_fastly_exit +0xe5 000377 call p_g24_ch +0xe6 000378 jam 2 ,mem_24g_max_retry +: 000379 p_g24_transmit_packet: +0xe7 000380 jam 0 ,mem_24g_retry +: 000381 p_g24_transmit_loop: +0xe8 000382 arg param_rx_setup ,timeup +0xe9 000383 until clkn_rt ,meet +0xea 000384 call p_g24_transmit_receive_ack +0xeb 000387 nbranch p_g24_retransmit ,sync +0xec 000388 nbranch p_g24_retransmit ,user3 +0xed 000389 call p_g24_txbuf_clear +0xee 000390 call p_g24_ackpayload_parse +0xef 000391 call power_ctrl_pac_succ_incrs +: 000392 p_g24_transmit_next_packet: +0xf0 000393 jam 0 ,mem_retry_count +0xf1 000394 fetch 1 ,mem_24g_pid +0xf2 000395 increase 1 ,pdata +0xf3 000396 store 1 ,mem_24g_pid +0xf4 000397 call p_g24_hop_enable_packet +0xf5 000398 fetch 1 ,mem_24g_pairing_sm +0xf6 000399 bne state_24g_pairing_success ,p_g24_paring_mode_start +0xf7 000400 call p_g24_transmit_succ_rf_config +: 000401 p_g24_transmit_abandon: +0xf8 000402 setarg 0 +0xf9 000403 store 4 ,mem_24g_ensure +0xfa 000404 store 1 ,mem_24g_hop_pac_retry +0xfb 000405 rtn +: 000407 p_g24_rf_hop_fastly_exit: +0xfc 000408 call power_ctrl_pac_succ_decrs +0xfd 000409 jam 0 ,mem_24g_hop_fastly_cnt +0xfe 000410 branch p_g24_transmit_rf_ctrl_clear +: 000412 p_g24_transmit_hop_pac_succ_wo_hop: +0xff 000413 jam 2 ,mem_24g_sync_cnt +: 000414 p_g24_transmit_hop_pac_succ: +0x100 000415 jam 1 ,mem_24g_rf_last_sta +0x101 000416 jam 0 ,mem_24g_rf_hop_ch +0x102 000417 branch p_g24_transmit_rf_ctrl_clear +: 000419 p_g24_transmit_succ_rf_config: +0x103 000420 fetch 1 ,mem_24g_rf_work_stage +0x104 000421 beq 3 ,p_g24_transmit_hop_pac_succ +0x105 000422 fetch 1 ,mem_24g_data_type +0x106 000423 isolate0 bit_hop ,pdata +0x107 000424 branch p_g24_transmit_rf_sta_init ,true +0x108 000425 fetch 1 ,mem_24g_rf_work_stage +0x109 000426 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop +0x10a 000427 beq 2 ,p_g24_transmit_hop_pac_succ +0x10b 000428 rtn +: 000430 p_g24_rf_sta_check: +0x10c 000431 fetch 1 ,mem_24g_pairing_sm +0x10d 000432 rtnne state_24g_pairing_success +0x10e 000433 call p_g24_rf_laststa_synccnt_check +0x10f 000434 ncall p_g24_rf_sync_cnt_check ,user2 +0x110 000435 rtn +: 000437 p_g24_rf_laststa_synccnt_check: +0x111 000438 disable user2 +0x112 000439 fetch 1 ,mem_24g_rf_last_sta +0x113 000440 rtnne 1 +0x114 000441 fetch 1 ,mem_24g_sync_cnt +0x115 000442 rtnne 0 +0x116 000443 jam 1 ,mem_24g_rf_work_stage +0x117 000444 jam 4 ,mem_24g_max_retry +0x118 000445 branch enable_user2 +: 000447 p_g24_rf_sync_cnt_check: +0x119 000448 fetch 1 ,mem_24g_sync_cnt +0x11a 000449 branch p_g24_rf_hop_attemp ,blank +0x11b 000450 increase -1 ,pdata +0x11c 000451 store 1 ,mem_24g_sync_cnt +0x11d 000452 jam 2 ,mem_24g_rf_work_stage +0x11e 000453 jam 4 ,mem_24g_max_retry +: 000454 p_g24_ch: +0x11f 000455 fetcht 1 ,mem_24g_current_ch_number +0x120 000456 fetch 1 ,mem_24g_addr +0x121 000457 and_into 0x03 ,pdata +0x122 000458 mul32 pdata ,4 ,rega +0x123 000459 setarg mem_24g_ch_map1 +0x124 000460 iadd rega ,pdata +0x125 000461 iadd temp ,contr +0x126 000462 ifetch 1 ,contr +0x127 000463 store 1 ,mem_24g_ch +0x128 000464 increase 1 ,temp +0x129 000465 and_into 3 ,temp +0x12a 000466 storet 1 ,mem_24g_current_ch_number +0x12b 000467 rtn +: 000469 p_g24_rf_hop_attemp: +0x12c 000470 jam 3 ,mem_24g_rf_work_stage +0x12d 000471 fetch 1 ,mem_24g_rf_hop_ch +0x12e 000472 nbranch p_g24_rf_hop_attemp_again ,blank +0x12f 000473 jam 2 ,mem_24g_max_retry +0x130 000474 branch p_g24_ch +: 000476 p_g24_txdata_prep: +0x131 000477 fetch 1 ,mem_24g_pairing_sm +0x132 000478 bne state_24g_pairing_success ,p_g24_pairing_sm +: 000479 p_g24_txdata_prep_packeage_data: +0x133 000480 call p_g24_package_data +: 000481 p_g24_txdata_enable_tx: +0x134 000482 call p_g24_transmit_prep +0x135 000483 jam ensure_on_24g ,mem_24g_ensure +0x136 000484 rtn +: 000486 p_g24_package_data: +0x137 000487 fetch 2 ,mem_cb_24g_data +0x138 000488 call callback_func +0x139 000489 branch p_g24_accumulate_mouse_data ,user +0x13a 000490 fetch 7 ,mem_24g_txbuf + 1 +0x13b 000491 rtn blank +0x13c 000492 branch enable_user +: 000493 p_g24_accumulate_mouse_data: +0x13d 000494 call p_mouse_data_xy_release +0x13e 000495 jam 0 ,mem_24g_abort_pac +0x13f 000496 add rega ,1 ,pdata +0x140 000497 store 1 ,mem_24g_datalen +0x141 000498 call p_g24_transmit_rf_ctrl_clear +0x142 000499 store 1 ,mem_24g_txbuf +0x143 000500 ifetcht 1 ,contw +0x144 000501 ifetch 1 ,regb +0x145 000502 ior temp ,pdata +0x146 000503 istore 1 ,contw +0x147 000504 increase 1 ,regb +0x148 000505 ifetch 4 ,regb +0x149 000506 istore 4 ,contw +0x14a 000507 increase 4 ,regb +0x14b 000508 arg mem_24g_txbuf + 6 ,contw +0x14c 000509 arg 2 ,loopcnt +: 000510 p_g24_accumulation_loop: +0x14d 000511 ifetch 1 ,regb +0x14e 000512 ifetcht 1 ,contw +0x14f 000513 iadd temp ,pdata +0x150 000514 istore 1 ,contw +0x151 000515 increase 1 ,regb +0x152 000516 loop p_g24_accumulation_loop +0x153 000517 rtn +: 000519 p_g24_txbuf_clear: +0x154 000520 arg 4 ,loopcnt +0x155 000521 arg mem_24g_txbuf ,contw +0x156 000522 branch memset0 +: 000524 p_g24_transmit_receive_ack: +0x157 000525 disable user3 +0x158 000526 call p_g24_transmit +0x159 000531 force 0 ,radio_ctrl +0x15a 000532 fetch 4 ,mem_24g_addr +0x15b 000533 iforce access +0x15c 000534 fetcht 1 ,mem_last_freq +0x15d 000535 call set_freq_rx +0x15e 000536 call rf_rx_enable +0x15f 000537 call p_g24_receive_rxon +0x160 000538 call p_g24_end_of_packet ,user3 +0x161 000539 rtn +: 000544 p_g24_retransmit: +0x162 000545 fetch 1 ,mem_24g_abort_pac +0x163 000546 nrtn blank +0x164 000547 fetch 2 ,mem_24g_txfail_cnt +0x165 000548 increase 1 ,pdata +0x166 000549 store 2 ,mem_24g_txfail_cnt +0x167 000550 fetch 1 ,mem_24g_txfail_cnt + 1 +0x168 000551 bbit1 0 ,g24_stop_24g_mode +0x169 000552 fetch 1 ,mem_24g_pairing_sm +0x16a 000553 bne state_24g_pairing_success ,p_g24_tx_paring_retry +0x16b 000554 call p_g24_tx_hop_ch_process +0x16c 000555 branch p_g24_transmit_loop +: 000557 p_g24_tx_paring_retry: +0x16d 000558 fetch 1 ,mem_24g_txfail_cnt +0x16e 000559 rtnne 0xff +: 000560 p_g24_tx_attempt_fail: +0x16f 000561 setarg 0 +0x170 000562 store 2 ,mem_24g_txfail_cnt +0x171 000563 branch g24_stop_24g_mode +: 000565 p_g24_tx_fast_hop: +0x172 000566 call power_ctrl_txpower_incrs +0x173 000567 call power_ctrl_pac_succ_decrs +0x174 000568 branch p_g24_ch +: 000570 p_g24_tx_hop_ch_process: +0x175 000571 fetch 1 ,mem_24g_retry +0x176 000572 sub pdata ,11 ,null +0x177 000573 nbranch p_g24_tx_fast_hop ,positive +0x178 000574 increase 1 ,pdata +0x179 000575 store 1 ,mem_24g_retry +0x17a 000577 beq 6 ,p_g24_hop_ch_disable +0x17b 000579 beq 12 ,p_g24_hop_ch_disable +0x17c 000580 rtn +: 000582 p_g24_ackpayload_parse: +0x17d 000583 call p_g24_read_len_pid_crc +0x17e 000584 fetch 1 ,mem_24g_rxdata_length +0x17f 000585 rtn blank +0x180 000586 iforce loopcnt +0x181 000587 arg mem_24g_rxbuf + 2 ,contr +0x182 000588 arg mem_24g_rxpayload ,contw +0x183 000589 branch memcpy +: 000591 p_g24_pair_init: +0x184 000592 jam tx_power_pair ,mem_tx_power +0x185 000593 jam 0 ,mem_24g_pid +0x186 000594 jam g24_pair_ch ,mem_24g_ch +0x187 000595 fetch 4 ,mem_24g_paring_addr +: 000596 p_g24_update_addr_and_synccrc8: +0x188 000597 store 4 ,mem_24g_addr +: 000599 p_g24_syncword_crc8: +0x189 000600 arg 0 ,rega +0x18a 000601 arg 4 ,loopcnt +0x18b 000602 arg mem_24g_addr ,contr +: 000603 p_g24_syncword_crc8_loop: +0x18c 000604 ifetch 1 ,contr +0x18d 000605 iadd rega ,rega +0x18e 000606 loop p_g24_syncword_crc8_loop +0x18f 000607 copy rega ,pdata +0x190 000608 store 2 ,mem_24g_syncword +0x191 000609 fetch 1 ,mem_24g_syncword +0x192 000610 fetcht 1 ,mem_24g_syncword + 1 +0x193 000611 iadd temp ,pdata +0x194 000612 store 1 ,mem_24g_syncword_crc8 +0x195 000613 rtn +: 000615 p_g24_start_pairing_sm1: +0x196 000617 call p_g24_pair_init +: 000618 p_g24_set_pairing_sm_1: +0x197 000619 jam state_24g_pairing_1 ,mem_24g_pairing_sm +0x198 000620 rtn +: 000622 p_g24_pairing_sm: +0x199 000623 jam zcode_90 ,mem_zcode_temp_param0 +0x19a 000624 branch p_zcode_entrance +: 000626 p_g24_paring_mode_start: +0x19b 000627 call power_ctrl_pac_succ_cnt_init +: 000628 p_g24_paring_mode: +0x19c 000629 jam zcode_91 ,mem_zcode_temp_param0 +0x19d 000630 branch p_zcode_entrance +: 000633 p_g24_check_51cmd_stop_24g: +0x19e 000634 set0 mark_24g ,mark +0x19f 000635 jam state_24g_stop ,mem_24g_conn_sm +0x1a0 000636 call le_disable +: 000637 p_mouse_disable_g24_pairing_flag: +0x1a1 000638 arg mosue_24g_pairing_flag ,queue +0x1a2 000639 branch mouse_disable_function_flag +: 000641 p_g24_put_data_in_buff: +0x1a3 000642 storet 1 ,mem_24g_datalen +0x1a4 000643 copy temp ,loopcnt +0x1a5 000644 arg mem_24g_txbuf ,contw +0x1a6 000645 copy rega ,contr +0x1a7 000646 branch memcpy +: 000648 p_g24_read_len_pid_crc: +0x1a8 000650 fetch 1 ,mem_24g_rxbuf + 1 +0x1a9 000651 rshift3 pdata ,pdata +0x1aa 000652 store 1 ,mem_24g_rxdata_length +0x1ab 000654 increase 1 ,pdata +0x1ac 000655 arg mem_24g_rxbuf + 1 ,contr +0x1ad 000656 iadd contr ,contr +0x1ae 000657 ifetch 3 ,contr +0x1af 000658 store 3 ,mem_24g_sta_crc +0x1b0 000660 fetch 1 ,mem_24g_rxbuf + 1 +0x1b1 000661 rshift pdata ,pdata +0x1b2 000662 and pdata ,0x03 ,pdata +0x1b3 000663 store 1 ,mem_24g_sta_pid +0x1b4 000664 rtn +: 000666 p_g24_transmit_prep: +0x1b5 000669 fetch 1 ,mem_24g_datalen +0x1b6 000670 increase 2 ,pdata +0x1b7 000671 store 1 ,mem_24g_txlen +0x1b8 000673 fetch 1 ,mem_24g_data_type +0x1b9 000674 store 1 ,mem_24g_txpayload +0x1ba 000676 fetch 1 ,mem_24g_datalen +0x1bb 000677 lshift3 pdata ,pdata +0x1bc 000678 fetcht 1 ,mem_24g_pid +0x1bd 000679 and temp ,0x03 ,temp +0x1be 000680 lshift temp ,temp +0x1bf 000681 ior temp ,pdata +0x1c0 000682 fetcht 1 ,mem_24g_no_ack +0x1c1 000683 iadd temp ,pdata +0x1c2 000684 istore 1 ,contw +0x1c3 000686 fetch 1 ,mem_24g_datalen +0x1c4 000687 iforce loopcnt +0x1c5 000688 arg mem_24g_txbuf ,contr +0x1c6 000689 branch memcpy +: 000708 p_g24_prep: +0x1c7 000709 disable enable_crc +0x1c8 000710 disable enable_white +0x1c9 000711 setarg 0x555555 +0x1ca 000712 iforce crc24_init +0x1cb 000713 fetch 1 ,mem_24g_ch +0x1cc 000714 branch le_prep2 +: 000716 p_g24_receive_rxon: +0x1cd 000719 call p_g24_prep +0x1ce 000720 disable user3 +0x1cf 000721 enable decode_fec0 +0x1d0 000722 enable is_rx +0x1d1 000723 disable is_tx +0x1d2 000724 enable swfine +0x1d3 000725 fetch 2 ,mem_24g_rx_window +0x1d4 000726 iforce stop_watch +0x1d5 000727 correlate null ,timeout +0x1d6 000728 nbranch p_g24_sync_timeout ,sync +0x1d7 000731 disable decode_fec0 +0x1d8 000732 enable decode_fec1 +0x1d9 000733 enable enable_white +0x1da 000734 enable enable_crc +0x1db 000735 call p_g24_receive_byte +0x1dc 000736 store 1 ,mem_24g_get_syncword_crc8 +0x1dd 000737 fetcht 1 ,mem_24g_syncword_crc8 +0x1de 000738 isub temp ,null +0x1df 000739 nbranch p_g24_end_of_packet ,zero +0x1e0 000740 call p_g24_receive_byte +0x1e1 000741 store 1 ,mem_24g_rxbuf +0x1e2 000745 fetch 1 ,mem_24g_rxbuf +0x1e3 000746 fetcht 1 ,mem_24g_data_type +0x1e4 000747 icompare bits_data ,temp +0x1e5 000748 nbranch p_g24_end_of_packet ,true +: 000749 p_g24_receive_skip: +0x1e6 000750 call p_g24_receive_byte +0x1e7 000751 istore 1 ,contw +0x1e8 000752 rshift3 pdata ,pdata +0x1e9 000753 and pdata ,0x1f ,loopcnt +0x1ea 000754 branch p_g24rx_nopayload ,zero +: 000755 p_g24rx_loop: +0x1eb 000756 call p_g24_receive_byte +0x1ec 000757 istore 1 ,contw +0x1ed 000758 loop p_g24rx_loop +: 000759 p_g24rx_nopayload: +0x1ee 000761 copy contw ,rega +0x1ef 000762 call p_g24_receive_byte +0x1f0 000763 store 1 ,mem_rssi_hex_received +0x1f1 000764 copy rega ,contw +0x1f2 000765 parse demod ,bucket ,24 +0x1f3 000766 enable swfine +0x1f4 000767 arg param_sifs ,stop_watch +0x1f5 000768 rshift32 pdata ,pdata +0x1f6 000769 rshift16 pdata ,pdata +0x1f7 000770 istore 3 ,contw +0x1f8 000771 disable decode_fec1 +0x1f9 000772 branch p_g24_end_of_packet ,crc_failed +0x1fa 000775 enable user3 +0x1fb 000776 fetch 1 ,mem_last_freq +0x1fc 000777 add pdata ,0 ,rega +0x1fd 000778 call rf_write_freq +0x1fe 000779 disable decode_fec0 +0x1ff 000780 call set_sync_on +0x200 000781 fetch 1 ,mem_rssi_hex_received +: 000782 p_rssi_signal: +0x201 000783 copy pdata ,rega +0x202 000784 fetcht 1 ,mem_rssi_signal_index +0x203 000785 setarg mem_rssi_signal_buf +0x204 000786 iadd temp ,contw +0x205 000787 copy rega ,pdata +0x206 000788 istore 1 ,contw +0x207 000789 increase 1 ,temp +0x208 000790 and_into rssi_buf_len_signal ,temp +0x209 000791 storet 1 ,mem_rssi_signal_index +0x20a 000792 rtn +: 000794 p_g24_receive_byte: +0x20b 000795 parse demod ,bucket ,8 +0x20c 000796 rshift3 pwindow ,pdata +0x20d 000797 rtn +: 000799 p_g24_sync_timeout: +: 000804 p_g24_end_of_packet: +0x20e 000805 disable encode_fec1 +0x20f 000806 disable decode_fec1 +0x210 000807 branch end_of_packet +: 000813 p_g24_transmit: +0x211 000814 call le_enable +0x212 000815 fetch 4 ,mem_24g_addr +0x213 000816 iforce access +0x214 000817 call p_g24_prep +0x215 000818 call set_sync_on +0x216 000819 fetcht 1 ,mem_24g_ch +0x217 000820 call set_freq_tx +0x218 000821 set1 txgfsk ,radio_ctrl +0x219 000822 enable encode_fec0 +0x21a 000823 enable is_tx +0x21b 000824 disable is_rx +0x21c 000827 rshift16 access ,pdata +0x21d 000828 rshift8 pdata ,pdata +0x21e 000829 rshift4 pdata ,pdata +0x21f 000830 inject mod ,40 +0x220 000831 disable encode_fec0 +0x221 000832 enable encode_fec1 +0x222 000833 enable enable_white +0x223 000834 enable enable_crc +0x224 000835 fetch 1 ,mem_24g_syncword_crc8 +0x225 000836 inject mod ,8 +0x226 000837 fetch 1 ,mem_24g_txlen +0x227 000838 iforce loopcnt +0x228 000839 arg mem_24g_txpayload ,contr +: 000840 p_g24tr_loop: +0x229 000841 ifetch 1 ,contr +0x22a 000842 inject mod ,8 +0x22b 000843 loop p_g24tr_loop +0x22c 000846 enable enable_parity +0x22d 000847 inject mod ,24 +0x22e 000848 disable enable_parity +0x22f 000849 until null ,tx_clear +0x230 000850 nop 100 +0x231 000851 disable encode_fec0 +0x232 000852 disable encode_fec1 +0x233 000853 rtn +: 000855 p_g24_timer_check: +0x234 000856 call disable_user +0x235 000857 fetcht 4 ,mem_24g_tx_btclk +0x236 000858 copy clkn_bt ,pdata +0x237 000859 isub temp ,null +0x238 000860 ncall g24_timer_timeout ,positive +0x239 000861 copy pdata ,regb +0x23a 000862 fetch 4 ,mem_24g_tx_btclk +0x23b 000863 fetcht 1 ,mem_24g_interval +0x23c 000864 iadd temp ,temp +0x23d 000865 copy regb ,pdata +0x23e 000866 isub temp ,null +0x23f 000867 nrtn positive +0x240 000868 set0 28 ,pdata +0x241 000869 store 4 ,mem_24g_tx_btclk +0x242 000870 branch enable_user +: 000872 p_rssi_average: +0x243 000873 arg 0 ,temp +0x244 000874 arg rssi_buf_len_signal + 1 ,loopcnt +0x245 000875 copy rega ,contr +: 000876 p_rssi_average_loop: +0x246 000877 ifetch 1 ,contr +0x247 000878 iadd temp ,temp +0x248 000879 loop p_rssi_average_loop +0x249 000880 rshift3 temp ,pdata +0x24a 000881 copy pdata ,temp +0x24b 000882 rtnmark0 mark_24g +0x24c 000884 div pdata ,10 +0x24d 000885 call wait_div_end +0x24e 000886 quotient pdata +0x24f 000887 lshift4 pdata ,pdata +0x250 000888 branch clk2bt_next +: 000890 p_mouse_before_lpm: +0x251 000891 rtnmark1 mark_24g +0x252 000892 call p_mouse_le_txbuff_save +0x253 000893 call p_mouse_setgpio_lpm +0x254 000894 fetch 1 ,mem_context +0x255 000895 bbit0 state_inconn ,p_clear_wake +0x256 000896 fetch 1 ,mem_lpm_current_mult +0x257 000897 nrtn blank +: 000898 p_clear_wake: +0x258 000899 setarg 0 +0x259 000900 store 8 ,mem_gpio_wakeup_low +0x25a 000901 rtn +: 000903 p_g24_lpm_wait: +0x25b 000904 enable user +0x25c 000905 call lpo_calibration +0x25d 000906 fetch 3 ,mem_clks_per_lpo +0x25e 000907 branch disable_user ,blank +0x25f 000908 fetch 1 ,mem_lpm_mode +0x260 000909 branch disable_user ,blank +0x261 000910 fetch 1 ,mem_24g_transmit_by_interrupt +0x262 000911 beq g24_tx_timer_int_enable ,disable_user +: 000912 p_mouse_setgpio_lpm: +0x263 000913 call p_mouse_set_sdio_high +0x264 000914 call p_clear_wake +: 000915 p_mouse_setgpio_hibernate: +0x265 000916 call mouse_lpm_before_common +0x266 000917 fetcht 1 ,mem_flash_ncs_gpio +0x267 000918 call gpio_out_inactive +0x268 000919 hfetch 4 ,core_gpio_oe0 +0x269 000920 hfetcht 4 ,core_gpio_pu0 +0x26a 000921 ior temp ,temp +0x26b 000922 invert temp ,temp +0x26c 000923 hstoret 4 ,core_gpio_pd0 +0x26d 000924 hfetch 1 ,core_gpio_pd1 +0x26e 000925 set0 2 ,pdata +0x26f 000926 hstore 1 ,core_gpio_pd1 +0x270 000927 hfetch 1 ,core_gpio_pd2 +0x271 000928 set0 6 ,pdata +0x272 000929 hstore 1 ,core_gpio_pd2 +0x273 000934 hfetch 1 ,core_gpio_pd3 +0x274 000935 set1 0 ,pdata +0x275 000936 hstore 1 ,core_gpio_pd3 +0x276 000937 hfetch 1 ,core_gpio_pu2 +0x277 000938 or pdata ,0xc0 ,pdata +0x278 000939 hstore 1 ,core_gpio_pu2 +0x279 000940 hfetch 1 ,core_gpio_pd3 +0x27a 000941 and pdata ,0x7f ,pdata +0x27b 000942 hstore 1 ,core_gpio_pd3 +0x27c 000945 rtn +: 000947 p_mouse_t_wheel_clear_wake: +0x27d 000948 fetcht 1 ,mem_whee_a_data_gpio +0x27e 000949 call p_gpio_set_input_pd +0x27f 000950 fetcht 1 ,mem_whee_b_data_gpio +0x280 000951 call p_gpio_set_input_pd +0x281 000952 fetcht 1 ,mem_whee_ta_data_gpio 0x282 000953 call p_gpio_set_input_pd -0x283 000954 fetcht 1 ,mem_whee_b_data_gpio +0x283 000954 fetcht 1 ,mem_whee_tb_data_gpio 0x284 000955 call p_gpio_set_input_pd -0x285 000956 fetcht 1 ,mem_whee_ta_data_gpio -0x286 000957 call p_gpio_set_input_pd -0x287 000958 fetcht 1 ,mem_whee_tb_data_gpio -0x288 000959 call p_gpio_set_input_pd -0x289 000961 fetch 1 ,mem_gpio_wakeup_low -0x28a 000962 and pdata ,0xbf ,pdata -0x28b 000963 store 1 ,mem_gpio_wakeup_low -0x28c 000964 fetch 1 ,mem_gpio_wakeup_low + 2 -0x28d 000965 and pdata ,0x7f ,pdata -0x28e 000966 store 1 ,mem_gpio_wakeup_low + 2 -0x28f 000967 fetch 1 ,mem_gpio_wakeup_low + 3 -0x290 000968 and pdata ,0xe7 ,pdata -0x291 000969 store 1 ,mem_gpio_wakeup_low + 3 -0x292 000970 rtn -: 000978 p_mouse_set_sdio_high: -0x293 000979 fetch 1 ,mem_mouse_init_sensor_reset_flag -0x294 000980 rtn blank -0x295 000981 branch p_mouse_seting_sensor_type -: 000983 p_device_init: -0x296 000984 jam 0x86 ,0x895b -0x297 000985 jam 0xa0 ,0x895c -0x298 000986 call initialize_radio -0x299 000987 call app_lpm_mult_enable -0x29a 000988 call enable_authrom -0x29b 000989 branch p_mouse_spi_init ,wake -: 000990 p_device_wake_from_power: -0x29c 000991 fetch 3 ,mem_le_lap + 3 -0x29d 000992 store 3 ,mem_le_lap_high_3b -0x29e 000993 call p_wake_from_power -0x29f 000995 call p_mouse_switch_hwakeup_bypb -0x2a0 000996 fetcht 1 ,mem_device_flag -0x2a1 000997 fetch 1 ,mem_24g_device_number -0x2a2 000998 isub temp ,null -0x2a3 000999 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero -0x2a4 001002 fetch 1 ,mem_device_flag -0x2a5 001003 beq 0xff ,p_mouse_24g_pair_check -0x2a6 001004 sub pdata ,1 ,null -0x2a7 001005 nbranch p_mouse_check_reconn_target ,zero -: 001006 p_mouse_24g_pair_check: -0x2a8 001007 call p_mouse_check_key_gpio -0x2a9 001008 beq mouse_lm_button ,p_mouse_24g_pairing_button -: 001009 p_mouse_check_reconn_target: -0x2aa 001010 call p_mouse_tx_power_init -0x2ab 001011 call p_mouse_select_device_by_button -0x2ac 001012 arg mem_device1_type ,rega -0x2ad 001013 fetch 1 ,mem_device_flag -0x2ae 001014 fetcht 1 ,mem_24g_device_number -0x2af 001015 isub temp ,null -0x2b0 001016 branch p_mouse_start_24g_mode ,zero -0x2b1 001017 increase -1 ,pdata -0x2b2 001018 mul32 pdata ,29 ,pdata -0x2b3 001019 iadd rega ,rega -0x2b4 001020 ifetch 1 ,rega -0x2b5 001021 store 1 ,mem_xrecord_mode -0x2b6 001025 beq rec_4_mode ,p_mouse4_0_check_reconn_target -0x2b7 001027 rtn -: 001029 p_mouse_tx_power_init: -0x2b8 001030 fetch 1 ,mem_tx_power_temp -0x2b9 001031 store 1 ,mem_tx_power -0x2ba 001032 rtn -: 001033 p_mouse_bt_deepsleep_timerout_adjust: -0x2bb 001034 setarg 0x4650 -0x2bc 001035 store 2 ,mem_mouse_no_data_timeout -0x2bd 001036 rtn -: 001046 p_mouse4_0_check_reconn_target: -0x2be 001047 jam zcode_23 ,mem_zcode_temp_param0 -0x2bf 001048 branch p_zcode_entrance -: 001050 p_le_check_adv_flag: -0x2c0 001051 arg mem_le_adv_data ,rega -: 001052 p_le_check_adv_flag_loop: -0x2c1 001053 ifetch 1 ,rega -0x2c2 001054 rtn blank -0x2c3 001055 iadd contr ,rega -0x2c4 001056 ifetch 1 ,contr -0x2c5 001057 rtneq 0x01 -0x2c6 001058 branch p_le_check_adv_flag_loop -: 001060 p_mouse_le_fast_conn_disable: -0x2c7 001061 jam 0x5a ,mem_mouse_fast_conn_flag -0x2c8 001062 rtn -: 001064 p_mouse_fast_conn_init: -0x2c9 001065 jam 0xff ,mem_mouse_fast_conn_flag -0x2ca 001066 jam 0x34 ,mem_xrecord_mode -0x2cb 001067 fetch 6 ,mem_24g_allpowerful_addr -0x2cc 001068 store 6 ,mem_le_lap -0x2cd 001069 rtn -: 001072 p_mouse_24g_pairing_button: -0x2ce 001073 jam zcode_62 ,mem_zcode_temp_param0 -0x2cf 001074 branch p_zcode_entrance -: 001076 p_mouse_init_sunt: -0x2d0 001077 call p_mouse_spi_init -0x2d1 001078 call mouse_spi_sdio_gpio_pollup -: 001079 p_mouse_init_sensor: -0x2d2 001080 call mouse_read_sensor_id -0x2d3 001081 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge -0x2d4 001082 beq p3065_id1 ,p_mouse_p3065_init_param -0x2d5 001083 call mouse_twspi_reset -0x2d6 001084 nop 1000 -0x2d7 001085 branch p_mouse_init_sensor -: 001087 p_mouse_init_sensor_reset: -0x2d8 001088 jam 1 ,mem_mouse_init_sensor_reset_flag -0x2d9 001089 call spi_ncs_enable -0x2da 001090 call p_mouse_init_sunt -0x2db 001091 branch spi_ncs_disable -: 001093 p_mouse_init_p32xx_id2_judge: -0x2dc 001094 call p_mouse_sensor_poweron -0x2dd 001095 fetch 1 ,mem_sensor_id2 -0x2de 001096 beq p_mx8650 ,p_mouse_mx8650_init_param -0x2df 001098 branch mouse_init_p32xx_id2_judge + 1 -: 001100 p_mouse_mx8650_init_param: -0x2e0 001101 jam mx8650 ,mem_config_sensor_type -0x2e1 001102 arg mem_sensor_8650_init ,regc -0x2e2 001103 call p_sensor_wr_seq -0x2e3 001104 branch p_mouse_dpi_config -: 001106 p_sensor_wr_seq: -0x2e4 001107 ifetch 2 ,regc -0x2e5 001108 arg 0xffff ,temp -0x2e6 001109 isub temp ,null -0x2e7 001110 rtn zero -0x2e8 001111 call twspi_write -0x2e9 001112 increase 2 ,regc -0x2ea 001113 branch p_sensor_wr_seq -: 001120 p_mouse_p3065_init_param: -0x2eb 001121 call p_mouse_sensor_poweron -0x2ec 001122 branch mouse_p3065_init_param -: 001129 p_spid_init_flash: -0x2ed 001130 jam 0x40 ,core_spid_ctrl -0x2ee 001131 jam 0x0 ,core_spid_delay -0x2ef 001132 hfetch 1 ,core_gpio_sel1 -0x2f0 001133 set0 0 ,pdata -0x2f1 001134 set0 1 ,pdata -0x2f2 001135 set1 3 ,pdata -0x2f3 001136 set0 4 ,pdata -0x2f4 001137 hstore 1 ,core_gpio_sel1 -0x2f5 001138 setarg 0 -0x2f6 001139 store 4 ,mem_spid_tbuf -0x2f7 001140 hfetch 1 ,core_gpio_pd3 -0x2f8 001141 set0 0 ,pdata -0x2f9 001142 hstore 1 ,core_gpio_pd3 -0x2fa 001143 rtn -: 001145 p_mouse_load_flash_info_check: -0x2fb 001146 call p_flash_release_deep_power_down -0x2fc 001147 call mouse_load_flash_flag -0x2fd 001148 fetch 2 ,mem_store_flag -0x2fe 001149 arg eeprom_init_flag ,temp -0x2ff 001150 isub temp ,null -0x300 001151 branch p_mouse_load_flash_device_info ,zero -0x301 001152 storet 2 ,mem_store_flag -0x302 001153 call mouse_ble_init_address -0x303 001156 fetch 4 ,mem_mouse_24g_addr_init -0x304 001157 store 4 ,mem_mouse_24g_addr -0x305 001158 store 4 ,mem_24g_addr -: 001159 p_mouse_store_flash_device_info: -0x306 001160 call p_mouse_adc_read_timeout -0x307 001161 fetch 2 ,mem_mouse_vdd_now_vol -0x308 001162 branch p_mouse_store_flash_device_info ,blank -0x309 001163 fetch 1 ,mem_adc_power_flag -0x30a 001164 bbit1 1 ,app_enter_hibernate -0x30b 001165 call p_flash_release_deep_power_down -0x30c 001166 call p_flash_erase_sector -0x30d 001167 call p_flash_write_enable -0x30e 001168 call p_mouse_information_flash_parameters -0x30f 001169 call p_spid_write_flash -0x310 001170 call p_wait_flash_done -0x311 001171 call p_mouse_store_flash_dpi -: 001172 p_mouse_store_random_addr_increase_count: -0x312 001173 call p_spid_init_flash -0x313 001174 call p_flash_write_enable -0x314 001175 arg 2 ,temp -0x315 001176 arg mem_random_addr_increase_count ,rega -0x316 001177 arg mouse_random_addr_count_eeprom_offset ,regb -0x317 001178 call p_mouse_store_flash_comm -0x318 001179 call p_flash_deep_power_down -: 001180 p_mouse_spi_init: -0x319 001181 jam 0x76 ,mem_spi_init_clk -0x31a 001182 branch mouse_spi_init -: 001184 p_mouse_store_flash_dpi: -0x31b 001185 call p_spid_init_flash -0x31c 001186 call p_flash_write_enable -0x31d 001187 arg 1 ,temp -0x31e 001188 arg mem_mouse_dpi ,rega -0x31f 001189 arg mouse_dpi_eeprom_offect ,regb -: 001190 p_mouse_store_flash_comm: -0x320 001191 fetch 3 ,mem_flash_base -0x321 001192 iadd regb ,pdata -0x322 001193 call p_spid_write_flash -0x323 001194 branch p_wait_flash_done -: 001196 p_flash_erase_sector: -0x324 001197 fetch 3 ,mem_flash_base -0x325 001198 store 3 ,mem_spi_write_addr -0x326 001199 call p_flash_write_enable -0x327 001200 call flash_erase_sector + 3 -: 001201 p_wait_flash_done: -0x328 001202 call p_flash_read_status -0x329 001203 bbit1 flash_status_wip ,p_wait_flash_done -0x32a 001204 rtn -: 001206 p_flash_read_status: -0x32b 001207 setarg mem_spid_rbuf -0x32c 001208 hstore 2 ,core_spid_rxaddr -0x32d 001209 setarg flash_read_satus -0x32e 001210 force 1 ,temp -0x32f 001211 store 1 ,mem_spid_tbuf -0x330 001212 setarg mem_spid_tbuf -0x331 001213 hstore 2 ,core_spid_txaddr -0x332 001214 branch spid_read_regs + 2 -: 001216 p_flash_write_enable: -0x333 001217 call spid_unlock_flash -0x334 001218 call p_flash_read_status -0x335 001219 bbit0 flash_status_wel ,p_flash_write_enable + 1 -0x336 001220 rtn -: 001223 p_spid_write_flash: -0x337 001224 copy pdata ,regc -0x338 001225 copy rega ,pdata -0x339 001226 increase -4 ,pdata -0x33a 001227 copy pdata ,regb -0x33b 001228 ifetch 4 ,regb -0x33c 001229 store 4 ,mem_write_flash_head_temp -0x33d 001230 copy regc ,pdata -0x33e 001231 call spid_write_flash -0x33f 001232 fetch 4 ,mem_write_flash_head_temp -0x340 001233 istore 4 ,regb -0x341 001234 rtn -: 001236 p_mouse_information_flash_parameters: -0x342 001237 setarg mem_mouse_information_end -0x343 001238 arg mem_mouse_information_start ,temp -0x344 001239 isub temp ,temp -0x345 001240 fetch 3 ,mem_flash_base -0x346 001241 arg mem_mouse_information_start ,rega -0x347 001242 rtn -: 001249 p_mouse_load_flash_device_info: -0x348 001251 call p_flash_release_deep_power_down -0x349 001252 call p_mouse_information_flash_parameters -0x34a 001253 call spid_read_flash -0x34b 001254 call p_mouse_load_random_addr_increase_count -0x34c 001255 call p_mouse_load_dpi_from_flash -0x34d 001256 call mouse_select_reconn_device -0x34e 001257 fetch 4 ,mem_mouse_24g_addr -0x34f 001258 store 4 ,mem_24g_addr -0x350 001259 rtn -: 001261 p_flash_deep_power_down: -0x351 001262 jam flash_command_deep_power_down ,mem_temp -: 001263 p_spid_write_flash_cmd: -0x352 001264 call p_spid_init_flash -0x353 001265 call delay_nop100 -0x354 001266 arg mem_write_flash_head_temp ,rega -0x355 001267 fetcht 1 ,mem_temp -0x356 001268 call spid_write_flash_common -0x357 001269 branch delay_nop100 -: 001271 p_flash_release_deep_power_down: -0x358 001272 jam flash_command_release_deep_power_down ,mem_temp -0x359 001273 branch p_spid_write_flash_cmd -: 001276 p_mouse_load_random_addr_increase_count: -0x35a 001277 call p_flash_release_deep_power_down -0x35b 001278 arg 2 ,temp -0x35c 001279 arg mem_random_addr_increase_count ,rega -0x35d 001280 arg mouse_random_addr_count_eeprom_offset ,regb -: 001281 p_mouse_load_flash_comm: -0x35e 001282 fetch 3 ,mem_flash_base -0x35f 001283 iadd regb ,pdata -0x360 001284 branch spid_read_flash -: 001286 p_mouse_load_dpi_from_flash: -0x361 001287 call p_flash_release_deep_power_down -0x362 001288 arg 1 ,temp -0x363 001289 arg mem_mouse_dpi ,rega -0x364 001290 arg mouse_dpi_eeprom_offect ,regb -0x365 001291 branch p_mouse_load_flash_comm -: 001295 p_mouse_start_24g_mode: -0x366 001298 jam 1 ,mem_device_flag -0x367 001299 call p_mouse_mode_24g_device_multi_led_on -: 001300 p_g24_start_24g_mode: -0x368 001301 jam zcode_60 ,mem_zcode_temp_param0 -0x369 001302 branch p_zcode_entrance -: 001304 p_g24_auto_pair_start: -0x36a 001305 call p_mouse_discovery_multi_led_blink -0x36b 001306 jam zcode_61 ,mem_zcode_temp_param0 -0x36c 001307 branch p_zcode_entrance -: 001312 p_pdata_0xff_check: -0x36d 001313 call enable_user -0x36e 001314 setarg 0xffff -: 001315 p_pdata_0xff_check_loop: -0x36f 001316 ifetcht 2 ,contr -0x370 001317 isub temp ,null -0x371 001318 ncall disable_user ,zero -0x372 001319 loop p_pdata_0xff_check_loop -0x373 001320 rtn -: 001322 p_mouse_g24_package_data: -0x374 001323 call mouse_g24_package_data -0x375 001324 fetch 2 ,mem_mouse_z -0x376 001325 rtn blank -: 001326 p_g24_transmit_by_interrupt_enable: -0x377 001327 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt -0x378 001328 setarg 0 -0x379 001329 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0x37a 001330 rtn -: 001332 p_mouse_le_txbuff_save: -0x37b 001333 arg mem_le_tx_buffer0 ,contr -0x37c 001334 arg mem_le_tx_buffer0_omemalloc ,contw +0x285 000957 fetch 1 ,mem_gpio_wakeup_low +0x286 000958 and pdata ,0xbf ,pdata +0x287 000959 store 1 ,mem_gpio_wakeup_low +0x288 000960 fetch 1 ,mem_gpio_wakeup_low + 2 +0x289 000961 and pdata ,0x7f ,pdata +0x28a 000962 store 1 ,mem_gpio_wakeup_low + 2 +0x28b 000963 fetch 1 ,mem_gpio_wakeup_low + 3 +0x28c 000964 and pdata ,0xe7 ,pdata +0x28d 000965 store 1 ,mem_gpio_wakeup_low + 3 +0x28e 000966 rtn +: 000974 p_mouse_set_sdio_high: +0x28f 000975 fetch 1 ,mem_mouse_init_sensor_reset_flag +0x290 000976 rtn blank +0x291 000977 branch p_mouse_seting_sensor_type +: 000979 p_device_init: +0x292 000980 jam 0x86 ,0x895b +0x293 000981 jam 0xa0 ,0x895c +0x294 000982 call initialize_radio +0x295 000983 call app_lpm_mult_enable +0x296 000984 call enable_authrom +0x297 000985 branch p_mouse_spi_init ,wake +: 000986 p_device_wake_from_power: +0x298 000987 fetch 3 ,mem_le_lap + 3 +0x299 000988 store 3 ,mem_le_lap_high_3b +0x29a 000989 call p_wake_from_power +0x29b 000991 call p_mouse_switch_hwakeup_bypb +0x29c 000992 fetcht 1 ,mem_device_flag +0x29d 000993 fetch 1 ,mem_24g_device_number +0x29e 000994 isub temp ,null +0x29f 000995 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero +0x2a0 000998 fetch 1 ,mem_device_flag +0x2a1 000999 beq 0xff ,p_mouse_24g_pair_check +0x2a2 001000 sub pdata ,1 ,null +0x2a3 001001 nbranch p_mouse_check_reconn_target ,zero +: 001002 p_mouse_24g_pair_check: +0x2a4 001003 call p_mouse_check_key_gpio +0x2a5 001004 beq mouse_lm_button ,p_mouse_24g_pairing_button +: 001005 p_mouse_check_reconn_target: +0x2a6 001006 call p_mouse_tx_power_init +0x2a7 001007 call p_mouse_select_device_by_button +0x2a8 001008 arg mem_device1_type ,rega +0x2a9 001009 fetch 1 ,mem_device_flag +0x2aa 001010 fetcht 1 ,mem_24g_device_number +0x2ab 001011 isub temp ,null +0x2ac 001012 branch p_mouse_start_24g_mode ,zero +0x2ad 001013 increase -1 ,pdata +0x2ae 001014 mul32 pdata ,29 ,pdata +0x2af 001015 iadd rega ,rega +0x2b0 001016 ifetch 1 ,rega +0x2b1 001017 store 1 ,mem_xrecord_mode +0x2b2 001021 beq rec_4_mode ,p_mouse4_0_check_reconn_target +0x2b3 001023 rtn +: 001025 p_mouse_tx_power_init: +0x2b4 001026 fetch 1 ,mem_tx_power_temp +0x2b5 001027 store 1 ,mem_tx_power +0x2b6 001028 rtn +: 001029 p_mouse_bt_deepsleep_timerout_adjust: +0x2b7 001030 setarg 0x4650 +0x2b8 001031 store 2 ,mem_mouse_no_data_timeout +0x2b9 001032 rtn +: 001042 p_mouse4_0_check_reconn_target: +0x2ba 001043 jam zcode_23 ,mem_zcode_temp_param0 +0x2bb 001044 branch p_zcode_entrance +: 001046 p_le_check_adv_flag: +0x2bc 001047 arg mem_le_adv_data ,rega +: 001048 p_le_check_adv_flag_loop: +0x2bd 001049 ifetch 1 ,rega +0x2be 001050 rtn blank +0x2bf 001051 iadd contr ,rega +0x2c0 001052 ifetch 1 ,contr +0x2c1 001053 rtneq 0x01 +0x2c2 001054 branch p_le_check_adv_flag_loop +: 001056 p_mouse_le_fast_conn_disable: +0x2c3 001057 jam 0x5a ,mem_mouse_fast_conn_flag +0x2c4 001058 rtn +: 001060 p_mouse_fast_conn_init: +0x2c5 001061 jam 0xff ,mem_mouse_fast_conn_flag +0x2c6 001062 jam 0x34 ,mem_xrecord_mode +0x2c7 001063 fetch 6 ,mem_24g_allpowerful_addr +0x2c8 001064 store 6 ,mem_le_lap +0x2c9 001065 rtn +: 001068 p_mouse_24g_pairing_button: +0x2ca 001069 jam zcode_62 ,mem_zcode_temp_param0 +0x2cb 001070 branch p_zcode_entrance +: 001072 p_mouse_init_sunt: +0x2cc 001073 call p_mouse_spi_init +0x2cd 001074 call mouse_spi_sdio_gpio_pollup +: 001075 p_mouse_init_sensor: +0x2ce 001076 call mouse_read_sensor_id +0x2cf 001077 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge +0x2d0 001078 beq p3065_id1 ,p_mouse_p3065_init_param +0x2d1 001079 call mouse_twspi_reset +0x2d2 001080 nop 1000 +0x2d3 001081 branch p_mouse_init_sensor +: 001083 p_mouse_init_sensor_reset: +0x2d4 001084 jam 1 ,mem_mouse_init_sensor_reset_flag +0x2d5 001085 call spi_ncs_enable +0x2d6 001086 call p_mouse_init_sunt +0x2d7 001087 branch spi_ncs_disable +: 001089 p_mouse_init_p32xx_id2_judge: +0x2d8 001090 call p_mouse_sensor_poweron +0x2d9 001091 fetch 1 ,mem_sensor_id2 +0x2da 001092 beq p_mx8650 ,p_mouse_mx8650_init_param +0x2db 001094 branch mouse_init_p32xx_id2_judge + 1 +: 001096 p_mouse_mx8650_init_param: +0x2dc 001097 jam mx8650 ,mem_config_sensor_type +0x2dd 001098 arg mem_sensor_8650_init ,regc +0x2de 001099 call p_sensor_wr_seq +0x2df 001100 branch p_mouse_dpi_config +: 001102 p_sensor_wr_seq: +0x2e0 001103 ifetch 2 ,regc +0x2e1 001104 arg 0xffff ,temp +0x2e2 001105 isub temp ,null +0x2e3 001106 rtn zero +0x2e4 001107 call twspi_write +0x2e5 001108 increase 2 ,regc +0x2e6 001109 branch p_sensor_wr_seq +: 001116 p_mouse_p3065_init_param: +0x2e7 001117 call p_mouse_sensor_poweron +0x2e8 001118 branch mouse_p3065_init_param +: 001125 p_spid_init_flash: +0x2e9 001126 jam 0x40 ,core_spid_ctrl +0x2ea 001127 jam 0x0 ,core_spid_delay +0x2eb 001128 hfetch 1 ,core_gpio_sel1 +0x2ec 001129 set0 0 ,pdata +0x2ed 001130 set0 1 ,pdata +0x2ee 001131 set1 3 ,pdata +0x2ef 001132 set0 4 ,pdata +0x2f0 001133 hstore 1 ,core_gpio_sel1 +0x2f1 001134 setarg 0 +0x2f2 001135 store 4 ,mem_spid_tbuf +0x2f3 001136 hfetch 1 ,core_gpio_pd3 +0x2f4 001137 set0 0 ,pdata +0x2f5 001138 hstore 1 ,core_gpio_pd3 +0x2f6 001139 rtn +: 001141 p_mouse_load_flash_info_check: +0x2f7 001142 call p_flash_release_deep_power_down +0x2f8 001143 call mouse_load_flash_flag +0x2f9 001144 fetch 2 ,mem_store_flag +0x2fa 001145 arg eeprom_init_flag ,temp +0x2fb 001146 isub temp ,null +0x2fc 001147 branch p_mouse_load_flash_device_info ,zero +0x2fd 001148 storet 2 ,mem_store_flag +0x2fe 001149 call mouse_ble_init_address +0x2ff 001152 fetch 4 ,mem_mouse_24g_addr_init +0x300 001153 store 4 ,mem_mouse_24g_addr +0x301 001154 store 4 ,mem_24g_addr +: 001155 p_mouse_store_flash_device_info: +0x302 001156 call p_mouse_adc_read_timeout +0x303 001157 fetch 2 ,mem_mouse_vdd_now_vol +0x304 001158 branch p_mouse_store_flash_device_info ,blank +0x305 001159 fetch 1 ,mem_adc_power_flag +0x306 001160 bbit1 1 ,app_enter_hibernate +0x307 001161 call p_flash_release_deep_power_down +0x308 001162 call p_flash_erase_sector +0x309 001163 call p_flash_write_enable +0x30a 001164 call p_mouse_information_flash_parameters +0x30b 001165 call p_spid_write_flash +0x30c 001166 call p_wait_flash_done +0x30d 001167 call p_mouse_store_flash_dpi +: 001168 p_mouse_store_random_addr_increase_count: +0x30e 001169 call p_spid_init_flash +0x30f 001170 call p_flash_write_enable +0x310 001171 arg 2 ,temp +0x311 001172 arg mem_random_addr_increase_count ,rega +0x312 001173 arg mouse_random_addr_count_eeprom_offset ,regb +0x313 001174 call p_mouse_store_flash_comm +0x314 001175 call p_flash_deep_power_down +: 001176 p_mouse_spi_init: +0x315 001177 jam 0x76 ,mem_spi_init_clk +0x316 001178 branch mouse_spi_init +: 001180 p_mouse_store_flash_dpi: +0x317 001181 call p_spid_init_flash +0x318 001182 call p_flash_write_enable +0x319 001183 arg 1 ,temp +0x31a 001184 arg mem_mouse_dpi ,rega +0x31b 001185 arg mouse_dpi_eeprom_offect ,regb +: 001186 p_mouse_store_flash_comm: +0x31c 001187 fetch 3 ,mem_flash_base +0x31d 001188 iadd regb ,pdata +0x31e 001189 call p_spid_write_flash +0x31f 001190 branch p_wait_flash_done +: 001192 p_flash_erase_sector: +0x320 001193 fetch 3 ,mem_flash_base +0x321 001194 store 3 ,mem_spi_write_addr +0x322 001195 call p_flash_write_enable +0x323 001196 call flash_erase_sector + 3 +: 001197 p_wait_flash_done: +0x324 001198 call p_flash_read_status +0x325 001199 bbit1 flash_status_wip ,p_wait_flash_done +0x326 001200 rtn +: 001202 p_flash_read_status: +0x327 001203 setarg mem_spid_rbuf +0x328 001204 hstore 2 ,core_spid_rxaddr +0x329 001205 setarg flash_read_satus +0x32a 001206 force 1 ,temp +0x32b 001207 store 1 ,mem_spid_tbuf +0x32c 001208 setarg mem_spid_tbuf +0x32d 001209 hstore 2 ,core_spid_txaddr +0x32e 001210 branch spid_read_regs + 2 +: 001212 p_flash_write_enable: +0x32f 001213 call spid_unlock_flash +0x330 001214 call p_flash_read_status +0x331 001215 bbit0 flash_status_wel ,p_flash_write_enable + 1 +0x332 001216 rtn +: 001219 p_spid_write_flash: +0x333 001220 copy pdata ,regc +0x334 001221 copy rega ,pdata +0x335 001222 increase -4 ,pdata +0x336 001223 copy pdata ,regb +0x337 001224 ifetch 4 ,regb +0x338 001225 store 4 ,mem_write_flash_head_temp +0x339 001226 copy regc ,pdata +0x33a 001227 call spid_write_flash +0x33b 001228 fetch 4 ,mem_write_flash_head_temp +0x33c 001229 istore 4 ,regb +0x33d 001230 rtn +: 001232 p_mouse_information_flash_parameters: +0x33e 001233 setarg mem_mouse_information_end +0x33f 001234 arg mem_mouse_information_start ,temp +0x340 001235 isub temp ,temp +0x341 001236 fetch 3 ,mem_flash_base +0x342 001237 arg mem_mouse_information_start ,rega +0x343 001238 rtn +: 001245 p_mouse_load_flash_device_info: +0x344 001247 call p_flash_release_deep_power_down +0x345 001248 call p_mouse_information_flash_parameters +0x346 001249 call spid_read_flash +0x347 001250 call p_mouse_load_random_addr_increase_count +0x348 001251 call p_mouse_load_dpi_from_flash +0x349 001252 call mouse_select_reconn_device +0x34a 001253 fetch 4 ,mem_mouse_24g_addr +0x34b 001254 store 4 ,mem_24g_addr +0x34c 001255 rtn +: 001257 p_flash_deep_power_down: +0x34d 001258 jam flash_command_deep_power_down ,mem_temp +: 001259 p_spid_write_flash_cmd: +0x34e 001260 call p_spid_init_flash +0x34f 001261 call delay_nop100 +0x350 001262 arg mem_write_flash_head_temp ,rega +0x351 001263 fetcht 1 ,mem_temp +0x352 001264 call spid_write_flash_common +0x353 001265 branch delay_nop100 +: 001267 p_flash_release_deep_power_down: +0x354 001268 jam flash_command_release_deep_power_down ,mem_temp +0x355 001269 branch p_spid_write_flash_cmd +: 001272 p_mouse_load_random_addr_increase_count: +0x356 001273 call p_flash_release_deep_power_down +0x357 001274 arg 2 ,temp +0x358 001275 arg mem_random_addr_increase_count ,rega +0x359 001276 arg mouse_random_addr_count_eeprom_offset ,regb +: 001277 p_mouse_load_flash_comm: +0x35a 001278 fetch 3 ,mem_flash_base +0x35b 001279 iadd regb ,pdata +0x35c 001280 branch spid_read_flash +: 001282 p_mouse_load_dpi_from_flash: +0x35d 001283 call p_flash_release_deep_power_down +0x35e 001284 arg 1 ,temp +0x35f 001285 arg mem_mouse_dpi ,rega +0x360 001286 arg mouse_dpi_eeprom_offect ,regb +0x361 001287 branch p_mouse_load_flash_comm +: 001291 p_mouse_start_24g_mode: +0x362 001294 jam 1 ,mem_device_flag +0x363 001295 call p_mouse_mode_24g_device_multi_led_on +: 001296 p_g24_start_24g_mode: +0x364 001297 jam zcode_60 ,mem_zcode_temp_param0 +0x365 001298 branch p_zcode_entrance +: 001300 p_g24_auto_pair_start: +0x366 001301 call p_mouse_discovery_multi_led_blink +0x367 001302 jam zcode_61 ,mem_zcode_temp_param0 +0x368 001303 branch p_zcode_entrance +: 001308 p_pdata_0xff_check: +0x369 001309 call enable_user +0x36a 001310 setarg 0xffff +: 001311 p_pdata_0xff_check_loop: +0x36b 001312 ifetcht 2 ,contr +0x36c 001313 isub temp ,null +0x36d 001314 ncall disable_user ,zero +0x36e 001315 loop p_pdata_0xff_check_loop +0x36f 001316 rtn +: 001318 p_mouse_g24_package_data: +0x370 001319 call mouse_g24_package_data +0x371 001320 fetch 2 ,mem_mouse_z +0x372 001321 rtn blank +: 001322 p_g24_transmit_by_interrupt_enable: +0x373 001323 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt +0x374 001324 setarg 0 +0x375 001325 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0x376 001326 rtn +: 001328 p_mouse_le_txbuff_save: +0x377 001329 arg mem_le_tx_buffer0 ,contr +0x378 001330 arg mem_le_tx_buffer0_omemalloc ,contw +0x379 001331 call p_mouse_le_txbuff_copy +0x37a 001332 arg mem_le_tx_buffer1 ,contr +0x37b 001333 call p_mouse_le_txbuff_copy +0x37c 001334 arg mem_le_tx_buffer2 ,contr 0x37d 001335 call p_mouse_le_txbuff_copy -0x37e 001336 arg mem_le_tx_buffer1 ,contr -0x37f 001337 call p_mouse_le_txbuff_copy -0x380 001338 arg mem_le_tx_buffer2 ,contr -0x381 001339 call p_mouse_le_txbuff_copy -0x382 001340 arg mem_le_tx_buffer3 ,contr -: 001341 p_mouse_le_txbuff_copy: -0x383 001342 arg 27 ,loopcnt -0x384 001343 branch memcpy -: 001345 p_mouse_le_txbuff_load: -0x385 001346 arg mem_le_tx_buffer0_omemalloc ,contr -0x386 001347 arg mem_le_tx_buffer0 ,contw +0x37e 001336 arg mem_le_tx_buffer3 ,contr +: 001337 p_mouse_le_txbuff_copy: +0x37f 001338 arg 27 ,loopcnt +0x380 001339 branch memcpy +: 001341 p_mouse_le_txbuff_load: +0x381 001342 arg mem_le_tx_buffer0_omemalloc ,contr +0x382 001343 arg mem_le_tx_buffer0 ,contw +0x383 001344 call p_mouse_le_txbuff_copy +0x384 001345 arg mem_le_tx_buffer1 ,contw +0x385 001346 call p_mouse_le_txbuff_copy +0x386 001347 arg mem_le_tx_buffer2 ,contw 0x387 001348 call p_mouse_le_txbuff_copy -0x388 001349 arg mem_le_tx_buffer1 ,contw -0x389 001350 call p_mouse_le_txbuff_copy -0x38a 001351 arg mem_le_tx_buffer2 ,contw -0x38b 001352 call p_mouse_le_txbuff_copy -0x38c 001353 arg mem_le_tx_buffer3 ,contw -0x38d 001354 branch p_mouse_le_txbuff_copy -: 001356 p_mouse_le: -0x38e 001357 call le_fifo_check_nearly_full -0x38f 001358 nrtn blank -0x390 001359 fetch 1 ,mem_mouse_fast_conn_flag -0x391 001360 beq 0xff ,p_mouse_le_next -0x392 001361 fetch 1 ,mem_le_connect_status_flag -0x393 001362 and pdata ,0x03 ,pdata -0x394 001363 rtnne 0x03 -: 001364 p_mouse_le_next: -0x395 001365 fetch 1 ,mem_mouse_clear_sensor_data_flag -0x396 001366 call p_mouse_clear_sensor_data ,blank -0x397 001367 fetch mouse_flag_len ,mem_mouse_flag -0x398 001368 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet -0x399 001369 call mouse_motion -0x39a 001370 nrtn user -0x39b 001371 call p_mouse_le_current_mult_update -0x39c 001372 call p_mouse_data_xy_release -0x39d 001373 call p_mouse_wheel_trigger -: 001374 p_mouse_data_push: -0x39e 001375 arg mem_mouse_key ,rega -0x39f 001376 call queue_push -0x3a0 001377 call p_mouse_queue_increase ,user -0x3a1 001378 rtn -: 001380 p_mouse_le_current_mult_update: -0x3a2 001383 jam 8 ,mem_lpm_mult -0x3a3 001384 jam 30 ,mem_mouse_le_current_mult_timer -0x3a4 001385 rtn -: 001387 p_mouse_data_xy_release: -0x3a5 001390 fetch 1 ,mem_mouse_long_mult_flag -0x3a6 001391 rtnne 1 -0x3a7 001392 setarg 0 -0x3a8 001393 store 1 ,mem_mouse_long_mult_flag -0x3a9 001394 store 4 ,mem_mouse_x -0x3aa 001395 branch p_mouse_init_sensor_reset -: 001397 p_mouse_data_init: -0x3ab 001398 jam 7 ,mem_mouse_data_queue -0x3ac 001399 jam 4 ,mem_mouse_data_queue + 1 -0x3ad 001400 setarg mem_mouse_data_queue -0x3ae 001401 store 2 ,mem_queue_ptr -0x3af 001402 branch queue_init -: 001404 p_mouse_queue_increase: -0x3b0 001405 fetch 1 ,mem_mouse_data_queue_num -0x3b1 001406 increase 1 ,pdata -0x3b2 001407 store 1 ,mem_mouse_data_queue_num -0x3b3 001408 rtn -: 001410 p_mouse_data_pull: -0x3b4 001411 arg mem_mouse_key ,rega -0x3b5 001412 call queue_pop -0x3b6 001413 branch p_mouse_fill_data_le ,user -0x3b7 001414 rtn -: 001416 p_mouse_fill_data_le: -0x3b8 001417 call le_clear_md -0x3b9 001418 fetch 1 ,mem_mouse_data_queue_num -0x3ba 001419 sub pdata ,1 ,null -0x3bb 001420 ncall le_set_md ,positive -0x3bc 001421 fetch 1 ,mem_mouse_data_queue_num -0x3bd 001422 rtn blank -0x3be 001423 increase -1 ,pdata -0x3bf 001424 store 1 ,mem_mouse_data_queue_num -0x3c0 001425 branch mouse_fill_data_le -: 001431 p_mouse_wheel_trigger: -0x3c1 001432 fetch 2 ,mem_mouse_z -0x3c2 001433 rtn blank -0x3c3 001434 jam 1 ,mem_mouse_wheel_trigger -0x3c4 001435 jam 10 ,mem_mouse_wheel_trigger_timer -0x3c5 001436 rtn -: 001438 p_mouse_bt: -0x3c6 001439 rtn attempt -0x3c7 001440 fetch 1 ,mem_app_handshake_flag -0x3c8 001441 rtn blank -0x3c9 001442 call l2cap_malloc_is_fifo_nearly_full -0x3ca 001443 nrtn blank -0x3cb 001444 fetch 1 ,mem_mouse_clear_sensor_data_flag -0x3cc 001445 call p_mouse_clear_sensor_data ,blank -0x3cd 001446 fetch mouse_flag_len ,mem_mouse_flag -0x3ce 001447 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data -0x3cf 001448 bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data -0x3d0 001449 call mouse_motion -0x3d1 001450 nrtn user -0x3d2 001451 call p_mouse_le_current_mult_update -0x3d3 001452 call p_mouse_data_xy_release -0x3d4 001453 call p_mouse_wheel_trigger -0x3d5 001454 fetch 1 ,mem_mouse_bt_boot_mode -0x3d6 001455 beq 1 ,p_mouse_send_data_boot_mode -0x3d7 001456 fetch 1 ,mem_mouse_bt_send_first_package_flag -0x3d8 001457 rtn blank -0x3d9 001458 branch mouse_send_data -: 001460 p_mouse_send_data_boot_mode: -0x3da 001461 fetch 1 ,mem_mouse_key -0x3db 001462 store 1 ,mem_mouse_bt_boot_data -0x3dc 001463 fetch 1 ,mem_mouse_x -0x3dd 001464 istore 1 ,contw -0x3de 001465 fetch 1 ,mem_mouse_y -0x3df 001466 istore 1 ,contw -0x3e0 001467 fetch 2 ,mem_mouse_z -0x3e1 001468 istore 2 ,contw -0x3e2 001470 arg 7 ,rega -0x3e3 001471 call hid_malloc_tx_buff -0x3e4 001472 fetch 2 ,mem_hid_int_remote_cid -0x3e5 001473 istore 2 ,contw -0x3e6 001474 setarg 0x02a1 -0x3e7 001475 istore 2 ,contw -0x3e8 001476 fetch 5 ,mem_mouse_bt_boot_data -0x3e9 001477 istore 5 ,contw -0x3ea 001478 rtn -: 001480 p_mouse_clear_sensor_data: -0x3eb 001481 jam 1 ,mem_mouse_clear_sensor_data_flag -0x3ec 001482 call le_set_config_more_data -0x3ed 001483 branch p_mouse_init_sensor_reset -: 001485 p_mouse_idle: -0x3ee 001486 call ui_check_paring_button -0x3ef 001487 call p_mouse_dpi_check -0x3f0 001488 branch p_mouse_wheel_check -: 001490 p_mouse_wheel_check: -0x3f1 001491 call p_mouse_t_wheel_scan -0x3f2 001492 call mouse_wheel_scan -0x3f3 001493 branch mouse_wheel_check + 3 -: 001495 p_mouse_t_wheel_scan: -0x3f4 001496 hfetch 1 ,core_gpio_pu2 -0x3f5 001497 set1 7 ,pdata -0x3f6 001498 hstore 1 ,core_gpio_pu2 -0x3f7 001499 hfetch 1 ,core_gpio_pu0 -0x3f8 001500 set1 6 ,pdata -0x3f9 001501 hstore 1 ,core_gpio_pu0 -0x3fa 001502 arg 0 ,rega -0x3fb 001503 fetcht 1 ,mem_whee_ta_data_gpio -0x3fc 001504 call gpio_get_bit -0x3fd 001505 setflag true ,0 ,rega -0x3fe 001506 fetcht 1 ,mem_whee_tb_data_gpio -0x3ff 001507 call gpio_get_bit -0x400 001508 setflag true ,1 ,rega -0x401 001509 copy rega ,pdata -0x402 001510 store 1 ,mem_wheel_tb_new_pinlevel -0x403 001511 beq 0x01 ,p_mouse_t_wheel_scan_judge1 -0x404 001512 beq 0x02 ,p_mouse_t_wheel_scan_judge2 -0x405 001513 fetch 1 ,mem_wheel_tog -0x406 001514 bbit1 7 ,p_mouse_t_wheel_scan_judge3 -0x407 001515 rtn -: 001517 p_mouse_t_wheel_scan_judge1: -0x408 001518 fetch 1 ,mem_wheel_tb_old_pinlevel -0x409 001519 beq 0 ,p_mouse_t_wheel_scan_judge11 -0x40a 001520 beq 3 ,p_mouse_t_wheel_scan_judge12 -0x40b 001521 rtn -: 001522 p_mouse_t_wheel_scan_judge2: -0x40c 001523 fetch 1 ,mem_wheel_tb_old_pinlevel -0x40d 001524 beq 0 ,p_mouse_t_wheel_scan_judge21 -0x40e 001525 beq 3 ,p_mouse_t_wheel_scan_judge22 +0x388 001349 arg mem_le_tx_buffer3 ,contw +0x389 001350 branch p_mouse_le_txbuff_copy +: 001352 p_mouse_le: +0x38a 001353 call le_fifo_check_nearly_full +0x38b 001354 nrtn blank +0x38c 001355 fetch 1 ,mem_mouse_fast_conn_flag +0x38d 001356 beq 0xff ,p_mouse_le_next +0x38e 001357 fetch 1 ,mem_le_connect_status_flag +0x38f 001358 and pdata ,0x03 ,pdata +0x390 001359 rtnne 0x03 +: 001360 p_mouse_le_next: +0x391 001361 fetch 1 ,mem_mouse_clear_sensor_data_flag +0x392 001362 call p_mouse_clear_sensor_data ,blank +0x393 001363 fetch mouse_flag_len ,mem_mouse_flag +0x394 001364 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +0x395 001365 call mouse_motion +0x396 001366 nrtn user +0x397 001367 call p_mouse_le_current_mult_update +0x398 001368 call p_mouse_data_xy_release +0x399 001369 call p_mouse_wheel_trigger +: 001370 p_mouse_data_push: +0x39a 001371 arg mem_mouse_key ,rega +0x39b 001372 call queue_push +0x39c 001373 call p_mouse_queue_increase ,user +0x39d 001374 rtn +: 001376 p_mouse_le_current_mult_update: +0x39e 001379 jam 8 ,mem_lpm_mult +0x39f 001380 jam 30 ,mem_mouse_le_current_mult_timer +0x3a0 001381 rtn +: 001383 p_mouse_data_xy_release: +0x3a1 001384 fetch 1 ,mem_config_function_enable +0x3a2 001385 rtnbit1 enable_sensor_motion_pin +0x3a3 001386 fetch 1 ,mem_mouse_long_mult_flag +0x3a4 001387 rtnne 1 +0x3a5 001388 setarg 0 +0x3a6 001389 store 1 ,mem_mouse_long_mult_flag +0x3a7 001390 store 4 ,mem_mouse_x +0x3a8 001391 branch p_mouse_init_sensor_reset +: 001393 p_mouse_data_init: +0x3a9 001394 jam 7 ,mem_mouse_data_queue +0x3aa 001395 jam 4 ,mem_mouse_data_queue + 1 +0x3ab 001396 setarg mem_mouse_data_queue +0x3ac 001397 store 2 ,mem_queue_ptr +0x3ad 001398 branch queue_init +: 001400 p_mouse_queue_increase: +0x3ae 001401 fetch 1 ,mem_mouse_data_queue_num +0x3af 001402 increase 1 ,pdata +0x3b0 001403 store 1 ,mem_mouse_data_queue_num +0x3b1 001404 rtn +: 001406 p_mouse_data_pull: +0x3b2 001407 arg mem_mouse_key ,rega +0x3b3 001408 call queue_pop +0x3b4 001409 branch p_mouse_fill_data_le ,user +0x3b5 001410 rtn +: 001412 p_mouse_fill_data_le: +0x3b6 001413 call le_clear_md +0x3b7 001414 fetch 1 ,mem_mouse_data_queue_num +0x3b8 001415 sub pdata ,1 ,null +0x3b9 001416 ncall le_set_md ,positive +0x3ba 001417 fetch 1 ,mem_mouse_data_queue_num +0x3bb 001418 rtn blank +0x3bc 001419 increase -1 ,pdata +0x3bd 001420 store 1 ,mem_mouse_data_queue_num +0x3be 001421 branch mouse_fill_data_le +: 001427 p_mouse_wheel_trigger: +0x3bf 001428 fetch 2 ,mem_mouse_z +0x3c0 001429 rtn blank +0x3c1 001430 jam 1 ,mem_mouse_wheel_trigger +0x3c2 001431 jam 10 ,mem_mouse_wheel_trigger_timer +0x3c3 001432 rtn +: 001434 p_mouse_bt: +0x3c4 001435 rtn attempt +0x3c5 001436 fetch 1 ,mem_app_handshake_flag +0x3c6 001437 rtn blank +0x3c7 001438 call l2cap_malloc_is_fifo_nearly_full +0x3c8 001439 nrtn blank +0x3c9 001440 fetch 1 ,mem_mouse_clear_sensor_data_flag +0x3ca 001441 call p_mouse_clear_sensor_data ,blank +0x3cb 001442 fetch mouse_flag_len ,mem_mouse_flag +0x3cc 001443 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +0x3cd 001444 bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data +0x3ce 001445 call mouse_motion +0x3cf 001446 nrtn user +0x3d0 001447 call p_mouse_le_current_mult_update +0x3d1 001448 call p_mouse_data_xy_release +0x3d2 001449 call p_mouse_wheel_trigger +0x3d3 001450 fetch 1 ,mem_mouse_bt_boot_mode +0x3d4 001451 beq 1 ,p_mouse_send_data_boot_mode +0x3d5 001452 fetch 1 ,mem_mouse_bt_send_first_package_flag +0x3d6 001453 rtn blank +0x3d7 001454 branch mouse_send_data +: 001456 p_mouse_send_data_boot_mode: +0x3d8 001457 fetch 1 ,mem_mouse_key +0x3d9 001458 store 1 ,mem_mouse_bt_boot_data +0x3da 001459 fetch 1 ,mem_mouse_x +0x3db 001460 istore 1 ,contw +0x3dc 001461 fetch 1 ,mem_mouse_y +0x3dd 001462 istore 1 ,contw +0x3de 001463 fetch 2 ,mem_mouse_z +0x3df 001464 istore 2 ,contw +0x3e0 001466 arg 7 ,rega +0x3e1 001467 call hid_malloc_tx_buff +0x3e2 001468 fetch 2 ,mem_hid_int_remote_cid +0x3e3 001469 istore 2 ,contw +0x3e4 001470 setarg 0x02a1 +0x3e5 001471 istore 2 ,contw +0x3e6 001472 fetch 5 ,mem_mouse_bt_boot_data +0x3e7 001473 istore 5 ,contw +0x3e8 001474 rtn +: 001476 p_mouse_clear_sensor_data: +0x3e9 001477 jam 1 ,mem_mouse_clear_sensor_data_flag +0x3ea 001478 call le_set_config_more_data +0x3eb 001479 branch p_mouse_init_sensor_reset +: 001481 p_mouse_idle: +0x3ec 001482 call ui_check_paring_button +0x3ed 001483 call p_mouse_dpi_check +0x3ee 001484 branch p_mouse_wheel_check +: 001486 p_mouse_wheel_check: +0x3ef 001487 call p_mouse_t_wheel_scan +0x3f0 001488 call mouse_wheel_scan +0x3f1 001489 branch mouse_wheel_check + 3 +: 001491 p_mouse_t_wheel_scan: +0x3f2 001492 hfetch 1 ,core_gpio_pu2 +0x3f3 001493 set1 7 ,pdata +0x3f4 001494 hstore 1 ,core_gpio_pu2 +0x3f5 001495 hfetch 1 ,core_gpio_pu0 +0x3f6 001496 set1 6 ,pdata +0x3f7 001497 hstore 1 ,core_gpio_pu0 +0x3f8 001498 arg 0 ,rega +0x3f9 001499 fetcht 1 ,mem_whee_ta_data_gpio +0x3fa 001500 call gpio_get_bit +0x3fb 001501 setflag true ,0 ,rega +0x3fc 001502 fetcht 1 ,mem_whee_tb_data_gpio +0x3fd 001503 call gpio_get_bit +0x3fe 001504 setflag true ,1 ,rega +0x3ff 001505 copy rega ,pdata +0x400 001506 store 1 ,mem_wheel_tb_new_pinlevel +0x401 001507 beq 0x01 ,p_mouse_t_wheel_scan_judge1 +0x402 001508 beq 0x02 ,p_mouse_t_wheel_scan_judge2 +0x403 001509 fetch 1 ,mem_wheel_tog +0x404 001510 bbit1 7 ,p_mouse_t_wheel_scan_judge3 +0x405 001511 rtn +: 001513 p_mouse_t_wheel_scan_judge1: +0x406 001514 fetch 1 ,mem_wheel_tb_old_pinlevel +0x407 001515 beq 0 ,p_mouse_t_wheel_scan_judge11 +0x408 001516 beq 3 ,p_mouse_t_wheel_scan_judge12 +0x409 001517 rtn +: 001518 p_mouse_t_wheel_scan_judge2: +0x40a 001519 fetch 1 ,mem_wheel_tb_old_pinlevel +0x40b 001520 beq 0 ,p_mouse_t_wheel_scan_judge21 +0x40c 001521 beq 3 ,p_mouse_t_wheel_scan_judge22 +0x40d 001522 rtn +: 001524 p_mouse_t_wheel_scan_judge11: +0x40e 001525 jam 0x82 ,mem_wheel_tog 0x40f 001526 rtn -: 001528 p_mouse_t_wheel_scan_judge11: -0x410 001529 jam 0x82 ,mem_wheel_tog -0x411 001530 rtn -: 001531 p_mouse_t_wheel_scan_judge12: -0x412 001532 jam 0x81 ,mem_wheel_tog -0x413 001533 rtn -: 001534 p_mouse_t_wheel_scan_judge21: -0x414 001535 jam 0x80 ,mem_wheel_tog -0x415 001536 rtn -: 001537 p_mouse_t_wheel_scan_judge22: -0x416 001538 jam 0x83 ,mem_wheel_tog -0x417 001539 rtn -: 001540 p_mouse_t_wheel_scan_judge3: -0x418 001541 fetch 1 ,mem_wheel_tog -0x419 001542 set0 7 ,pdata -0x41a 001543 store 1 ,mem_wheel_tog -0x41b 001544 beq 0 ,p_mouse_t_wheel_scan_judge30 -0x41c 001545 beq 1 ,p_mouse_t_wheel_scan_judge31 -0x41d 001546 beq 2 ,p_mouse_t_wheel_scan_judge32 -0x41e 001547 beq 3 ,p_mouse_t_wheel_scan_judge33 -0x41f 001548 rtn -: 001550 p_mouse_t_wheel_scan_judge30: -0x420 001551 fetch 1 ,mem_wheel_tb_new_pinlevel -0x421 001552 beq 3 ,p_mouse_wheel_t_forward -0x422 001553 rtn -: 001554 p_mouse_t_wheel_scan_judge31: -0x423 001555 fetch 1 ,mem_wheel_tb_new_pinlevel -0x424 001556 beq 0 ,p_mouse_wheel_t_forward -0x425 001557 rtn -: 001558 p_mouse_t_wheel_scan_judge32: -0x426 001559 fetch 1 ,mem_wheel_tb_new_pinlevel -0x427 001560 beq 3 ,p_mouse_wheel_t_back -0x428 001561 rtn -: 001562 p_mouse_t_wheel_scan_judge33: -0x429 001563 fetch 1 ,mem_wheel_tb_new_pinlevel -0x42a 001564 beq 0 ,p_mouse_wheel_t_back -0x42b 001565 rtn -: 001567 p_mouse_wheel_t_forward: -0x42c 001568 jam 0 ,mem_mouse_tz_data_count1 -0x42d 001569 fetch 1 ,mem_mouse_tz_data -0x42e 001570 increase 1 ,pdata -0x42f 001571 store 1 ,mem_mouse_tz_data -0x430 001572 rtn -: 001574 p_mouse_wheel_t_back: -0x431 001575 jam 0 ,mem_mouse_tz_data_count -0x432 001576 fetch 1 ,mem_mouse_tz_data -0x433 001577 increase -1 ,pdata -0x434 001578 store 1 ,mem_mouse_tz_data -0x435 001579 rtn -: 001581 p_mouse_comm_gpio_config: -0x436 001582 fetcht 1 ,mem_mouse_comm_gpio -0x437 001583 rtneq 0xff -0x438 001584 branch p_gpio_set_input_pu -: 001585 p_mouse_dpi_check: -0x439 001586 call p_mouse_comm_gpio_config -0x43a 001587 fetcht 1 ,mem_dpi_button_gpio -0x43b 001588 call p_gpio_set_input_pd -0x43c 001589 fetcht 1 ,mem_dpi_button_gpio -0x43d 001590 call gpio_get_bit -0x43e 001591 branch p_mouse_dpi_up ,true -0x43f 001592 call p_gpio_set_input_pu -: 001593 p_mouse_dpi_down: -0x440 001594 fetch 1 ,mem_mouse_dpi_button_state -0x441 001595 rtneq dpi_button_state_down -0x442 001596 jam dpi_button_state_down ,mem_mouse_dpi_button_state -0x443 001597 fetch 1 ,mem_mouse_dpi -0x444 001598 increase 1 ,pdata -0x445 001599 and pdata ,0x03 ,pdata -0x446 001600 store 1 ,mem_mouse_dpi -0x447 001601 increase 2 ,pdata -0x448 001602 store 1 ,mem_mouse_multi_led_blink_count -0x449 001603 call p_mouse_dpi_multi_led_blink -0x44a 001604 branch mouse_seting_dpi -: 001605 p_mouse_dpi_up: -0x44b 001606 call p_gpio_set_input_pu -0x44c 001607 branch mouse_dpi_up -: 001609 p_mouse_priority_bb_event: -0x44d 001610 copy regc ,pdata -0x44e 001611 beq bt_evt_le_connected ,p_mouse_le_bb_event_connected -0x44f 001612 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected -0x450 001613 beq bt_evt_le_enc_info ,p_mouse_le_enc_info -0x451 001614 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt -0x452 001615 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved -0x453 001616 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed -0x454 001617 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout -0x455 001618 beq bt_evt_switch_not_accept ,app_bt_role_switch -0x456 001619 beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept -0x457 001620 beq bt_evt_bb_connected ,p_mouse_bb_event_connected -0x458 001621 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected -0x459 001622 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check -0x45a 001623 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete -0x45b 001624 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail -0x45c 001625 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success -0x45d 001626 branch mouse_priority_bb_event + 1 -: 001628 p_mouse_le_bb_event_connected: -0x45e 001629 jam zcode_d0 ,mem_zcode_temp_param0 -0x45f 001630 branch p_zcode_entrance -: 001632 p_mouse_le_bb_disconnected: -0x460 001633 call p_mouse_sensor_powerdown_check -0x461 001634 jam zcode_a2 ,mem_zcode_temp_param0 -0x462 001635 branch p_zcode_entrance -: 001637 p_mouse_le_enc_info: -: 001638 p_app_updata_le_param: -0x463 001639 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x464 001640 branch ui_ipc_send_cmd -: 001642 p_mouse_le_ll_start_encryt: -0x465 001643 jam zcode_b3 ,mem_zcode_temp_param0 +: 001527 p_mouse_t_wheel_scan_judge12: +0x410 001528 jam 0x81 ,mem_wheel_tog +0x411 001529 rtn +: 001530 p_mouse_t_wheel_scan_judge21: +0x412 001531 jam 0x80 ,mem_wheel_tog +0x413 001532 rtn +: 001533 p_mouse_t_wheel_scan_judge22: +0x414 001534 jam 0x83 ,mem_wheel_tog +0x415 001535 rtn +: 001536 p_mouse_t_wheel_scan_judge3: +0x416 001537 fetch 1 ,mem_wheel_tog +0x417 001538 set0 7 ,pdata +0x418 001539 store 1 ,mem_wheel_tog +0x419 001540 beq 0 ,p_mouse_t_wheel_scan_judge30 +0x41a 001541 beq 1 ,p_mouse_t_wheel_scan_judge31 +0x41b 001542 beq 2 ,p_mouse_t_wheel_scan_judge32 +0x41c 001543 beq 3 ,p_mouse_t_wheel_scan_judge33 +0x41d 001544 rtn +: 001546 p_mouse_t_wheel_scan_judge30: +0x41e 001547 fetch 1 ,mem_wheel_tb_new_pinlevel +0x41f 001548 beq 3 ,p_mouse_wheel_t_forward +0x420 001549 rtn +: 001550 p_mouse_t_wheel_scan_judge31: +0x421 001551 fetch 1 ,mem_wheel_tb_new_pinlevel +0x422 001552 beq 0 ,p_mouse_wheel_t_forward +0x423 001553 rtn +: 001554 p_mouse_t_wheel_scan_judge32: +0x424 001555 fetch 1 ,mem_wheel_tb_new_pinlevel +0x425 001556 beq 3 ,p_mouse_wheel_t_back +0x426 001557 rtn +: 001558 p_mouse_t_wheel_scan_judge33: +0x427 001559 fetch 1 ,mem_wheel_tb_new_pinlevel +0x428 001560 beq 0 ,p_mouse_wheel_t_back +0x429 001561 rtn +: 001563 p_mouse_wheel_t_forward: +0x42a 001564 jam 0 ,mem_mouse_tz_data_count1 +0x42b 001565 fetch 1 ,mem_mouse_tz_data +0x42c 001566 increase 1 ,pdata +0x42d 001567 store 1 ,mem_mouse_tz_data +0x42e 001568 rtn +: 001570 p_mouse_wheel_t_back: +0x42f 001571 jam 0 ,mem_mouse_tz_data_count +0x430 001572 fetch 1 ,mem_mouse_tz_data +0x431 001573 increase -1 ,pdata +0x432 001574 store 1 ,mem_mouse_tz_data +0x433 001575 rtn +: 001577 p_mouse_comm_gpio_config: +0x434 001578 fetcht 1 ,mem_mouse_comm_gpio +0x435 001579 rtneq 0xff +0x436 001580 branch p_gpio_set_input_pu +: 001581 p_mouse_dpi_check: +0x437 001582 call p_mouse_comm_gpio_config +0x438 001583 fetcht 1 ,mem_dpi_button_gpio +0x439 001584 call p_gpio_set_input_pd +0x43a 001585 fetcht 1 ,mem_dpi_button_gpio +0x43b 001586 call gpio_get_bit +0x43c 001587 branch p_mouse_dpi_up ,true +0x43d 001588 call p_gpio_set_input_pu +: 001589 p_mouse_dpi_down: +0x43e 001590 fetch 1 ,mem_mouse_dpi_button_state +0x43f 001591 rtneq dpi_button_state_down +0x440 001592 jam dpi_button_state_down ,mem_mouse_dpi_button_state +0x441 001593 fetch 1 ,mem_mouse_dpi +0x442 001594 increase 1 ,pdata +0x443 001595 and pdata ,0x03 ,pdata +0x444 001596 store 1 ,mem_mouse_dpi +0x445 001597 increase 2 ,pdata +0x446 001598 store 1 ,mem_mouse_multi_led_blink_count +0x447 001599 call p_mouse_dpi_multi_led_blink +0x448 001600 branch mouse_seting_dpi +: 001601 p_mouse_dpi_up: +0x449 001602 call p_gpio_set_input_pu +0x44a 001603 branch mouse_dpi_up +: 001605 p_mouse_priority_bb_event: +0x44b 001606 copy regc ,pdata +0x44c 001607 beq bt_evt_le_connected ,p_mouse_le_bb_event_connected +0x44d 001608 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected +0x44e 001609 beq bt_evt_le_enc_info ,p_mouse_le_enc_info +0x44f 001610 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt +0x450 001611 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved +0x451 001612 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed +0x452 001613 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout +0x453 001614 beq bt_evt_switch_not_accept ,app_bt_role_switch +0x454 001615 beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept +0x455 001616 beq bt_evt_bb_connected ,p_mouse_bb_event_connected +0x456 001617 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected +0x457 001618 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check +0x458 001619 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete +0x459 001620 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail +0x45a 001621 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success +0x45b 001622 branch mouse_priority_bb_event + 1 +: 001624 p_mouse_le_bb_event_connected: +0x45c 001625 jam zcode_d0 ,mem_zcode_temp_param0 +0x45d 001626 branch p_zcode_entrance +: 001628 p_mouse_le_bb_disconnected: +0x45e 001629 call p_mouse_sensor_powerdown_check +0x45f 001630 jam zcode_a2 ,mem_zcode_temp_param0 +0x460 001631 branch p_zcode_entrance +: 001633 p_mouse_le_enc_info: +: 001634 p_app_updata_le_param: +0x461 001635 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x462 001636 branch ui_ipc_send_cmd +: 001638 p_mouse_le_ll_start_encryt: +0x463 001639 jam zcode_b3 ,mem_zcode_temp_param0 +0x464 001640 branch p_zcode_entrance +: 001642 p_mouse_le_conn_param_update_rsp_recieved: +0x465 001643 jam zcode_a1 ,mem_zcode_temp_param0 0x466 001644 branch p_zcode_entrance -: 001646 p_mouse_le_conn_param_update_rsp_recieved: -0x467 001647 jam zcode_a1 ,mem_zcode_temp_param0 -0x468 001648 branch p_zcode_entrance -: 001651 p_mouse_bb_event_reconn_timeout: -: 001652 p_mouse_bb_event_reconn_failed: -0x469 001653 jam zcode_a3 ,mem_zcode_temp_param0 +: 001647 p_mouse_bb_event_reconn_timeout: +: 001648 p_mouse_bb_event_reconn_failed: +0x467 001649 jam zcode_a3 ,mem_zcode_temp_param0 +0x468 001650 branch p_zcode_entrance +: 001652 p_mouse_irtual_cable_unplug: +0x469 001653 jam zcode_71 ,mem_zcode_temp_param0 0x46a 001654 branch p_zcode_entrance -: 001656 p_mouse_irtual_cable_unplug: -0x46b 001657 jam zcode_71 ,mem_zcode_temp_param0 +: 001656 p_mouse_sniff_not_accept: +0x46b 001657 jam zcode_b1 ,mem_zcode_temp_param0 0x46c 001658 branch p_zcode_entrance -: 001660 p_mouse_sniff_not_accept: -0x46d 001661 jam zcode_b1 ,mem_zcode_temp_param0 -0x46e 001662 branch p_zcode_entrance -: 001664 p_mouse_bb_event_connected: -0x46f 001665 jam 0 ,mem_mouse_connected_state -0x470 001666 jam 0 ,mem_mouse_send_switch_req_timer -0x471 001667 call p_mouse_init_sensor_reset -0x472 001668 branch mouse_stop_discovery -: 001670 p_mouse_bb_event_disconnected: -0x473 001671 call p_mouse_sensor_powerdown_check -0x474 001672 jam zcode_b4 ,mem_zcode_temp_param0 +: 001660 p_mouse_bb_event_connected: +0x46d 001661 jam 0 ,mem_mouse_connected_state +0x46e 001662 jam 0 ,mem_mouse_send_switch_req_timer +0x46f 001663 call p_mouse_init_sensor_reset +0x470 001664 branch mouse_stop_discovery +: 001666 p_mouse_bb_event_disconnected: +0x471 001667 call p_mouse_sensor_powerdown_check +0x472 001668 jam zcode_b4 ,mem_zcode_temp_param0 +0x473 001669 branch p_zcode_entrance +: 001671 p_mouse_enter_sniff_check: +0x474 001672 jam zcode_b2 ,mem_zcode_temp_param0 0x475 001673 branch p_zcode_entrance -: 001675 p_mouse_enter_sniff_check: -0x476 001676 jam zcode_b2 ,mem_zcode_temp_param0 -0x477 001677 branch p_zcode_entrance -: 001679 p_mouse_24g_pairing_complete: -0x478 001680 call p_mouse_discovey_led_blink_off -0x479 001681 jam 0 ,mem_mouse_connected_state -0x47a 001682 call p_mouse_init_sensor_reset -0x47b 001683 jam zcode_92 ,mem_zcode_temp_param0 -0x47c 001684 branch p_zcode_entrance -: 001686 p_mouse_24g_attempt_fail: -0x47d 001687 jam 1 ,mem_mouse_connected_state -0x47e 001688 jam 10 ,mem_mouse_multi_led_blink_count -0x47f 001689 call p_mouse_dpi_multi_led_blink -0x480 001691 call p_mouse_sensor_powerdown_check -0x481 001693 jam zcode_a0 ,mem_zcode_temp_param0 -0x482 001694 branch p_zcode_entrance -: 001696 p_mouse_24g_attempt_success: -0x483 001697 call p_mouse_multi_led_blink_off -0x484 001698 call p_mouse_mode_24g_device_multi_led_on -0x485 001699 jam 0 ,mem_mouse_connected_state -0x486 001701 call p_mouse_init_sensor_reset -: 001702 p_mouse_24g_no_data_timer_init: -0x487 001703 branch mouse_no_data_timer_init -: 001705 p_mouse_before_hibernate: -0x488 001706 call p_mouse_sensor_powerdown_check -0x489 001707 jam zcode_a4 ,mem_zcode_temp_param0 -0x48a 001708 branch p_zcode_entrance -: 001710 p_mouse_sensor_powerdown_check: -0x48b 001711 fetch 1 ,mem_mouse_init_sensor_reset_flag -0x48c 001712 rtn blank -0x48d 001713 jam 0 ,mem_mouse_init_sensor_reset_flag -: 001714 p_mouse_sensor_powerdown: -0x48e 001715 call p_mouse_init_sunt -0x48f 001716 setarg 0x0806 -0x490 001721 branch twspi_write -: 001723 p_mouse_bb_event_timer: -0x491 001724 call p_mouse_adc_read -0x492 001725 call p_mouse_low_voltage_led_timer -0x493 001726 call p_mouse_wheel_trigger_timer -0x494 001727 call p_mouse_select_device_by_button -0x495 001728 call mouse_check_discovery_timeout_timer -0x496 001729 call mouse_check_no_data_timeout_timer -0x497 001731 call p_mouse_g24_stop_mode_timeout_timer -0x498 001732 call p_mouse_check_direct_timeout_timer -0x499 001733 call p_mouse_le_enable_att_list_timer -0x49a 001734 call p_mouse_le_current_mult_update_timer -0x49b 001735 call p_le_send_smp_security_request_timer -0x49c 001736 call p_mouse_send_switch_req_timer -0x49d 001737 call mouse_check_hid_handshake_timer -0x49e 001738 call p_mouse_bt_check_sniff_req_timeout_timer -0x49f 001739 branch p_mouse_multi_led_blink_timer -: 001742 p_mouse_send_switch_req_timer: -0x4a0 001743 arg mem_mouse_send_switch_req_timer ,regc -0x4a1 001744 arg host_create_conn_resend ,regb -0x4a2 001745 branch timer_single_step -: 001747 p_mouse_bt_check_sniff_req_timeout_timer: -0x4a3 001748 arg mem_mouse_bt_send_first_package_timer ,regc -0x4a4 001749 arg p_mouse_bt_send_first_package ,regb -0x4a5 001750 branch timer_single_step -: 001751 p_mouse_bt_send_first_package: -0x4a6 001752 jam 1 ,mem_mouse_bt_send_first_package_flag -0x4a7 001753 rtn -: 001756 p_mouse_le_enable_att_list_timer: -0x4a8 001757 arg mem_le_start_encrypt_timer ,regc -0x4a9 001758 arg mouse_le_write_enable ,regb -0x4aa 001759 branch timer_single_step -: 001761 p_mouse_check_direct_timeout_timer: -0x4ab 001762 arg mem_mouse_direct_timer ,regc -0x4ac 001763 arg p_mouse_check_direct_timeout ,regb -0x4ad 001764 branch timer_single_step_2b -: 001765 p_mouse_check_direct_timeout: -0x4ae 001766 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -0x4af 001767 nrtn blank -0x4b0 001768 branch mouse_check_direct_timeout -: 001770 p_mouse_le_current_mult_update_timer: -0x4b1 001771 arg mem_mouse_le_current_mult_timer ,regc -0x4b2 001772 arg p_mouse_le_current_mult_reinit ,regb -0x4b3 001773 branch timer_single_step -: 001774 p_mouse_le_current_mult_reinit: -0x4b4 001775 fetch 1 ,mem_lpm_mult_init -0x4b5 001776 store 1 ,mem_lpm_mult -0x4b6 001777 rtn -: 001779 p_le_send_smp_security_request_timer: -0x4b7 001780 fetch 1 ,mem_mouse_le_bb_connected_flag -0x4b8 001781 rtn blank -0x4b9 001782 arg mem_mouse_send_secutiry_request_timer ,regc -0x4ba 001783 arg p_le_pairing_sm_start_check ,regb -0x4bb 001784 branch timer_single_step -: 001785 p_le_pairing_sm_start_check: -0x4bc 001786 fetch 1 ,mem_le_send_security_request_flag -0x4bd 001787 nrtn blank -0x4be 001788 branch le_pairing_sm_start -: 001790 p_mouse_wheel_trigger_timer: -0x4bf 001791 arg mem_mouse_wheel_trigger_timer ,regc -0x4c0 001792 arg p_mouse_wheel_trigger_disable ,regb -0x4c1 001793 branch timer_single_step -: 001794 p_mouse_wheel_trigger_disable: -0x4c2 001795 jam 0 ,mem_mouse_wheel_trigger -0x4c3 001796 rtn -: 001798 p_mouse_g24_long_sleep_param_update_timer: -0x4c4 001799 arg mem_24g_long_sleep_param_update_timer ,regc -0x4c5 001800 arg p_mouse_g24_long_sleep_normal_param ,regb -0x4c6 001801 branch timer_single_step -: 001802 p_mouse_g24_long_sleep_normal_param: -0x4c7 001803 setarg g24_long_sleep_step3 -0x4c8 001804 store 3 ,mem_24g_enter_hibernate -: 001805 p_mouse_long_mult_flag_enable: -0x4c9 001806 jam 1 ,mem_mouse_long_mult_flag -0x4ca 001807 rtn -: 001809 p_mouse_g24_stop_mode_timeout_timer: -0x4cb 001810 arg mem_24g_stop_g24_mode_timeout ,regc -0x4cc 001811 arg p_mouse_g24_stop_mode_timeout ,regb -0x4cd 001812 branch timer_single_step_2b -: 001813 p_mouse_g24_stop_mode_timeout: -0x4ce 001814 jam 1 ,mem_24g_stop_g24_mode -0x4cf 001815 rtn -: 001846 p_mouse_bt_discovery_timer: -0x4d0 001847 arg mem_select_ui_button_count ,regc -0x4d1 001848 arg p_mouse_long_button_bt_discovery ,regb -0x4d2 001849 branch timer_single_step -: 001850 p_mouse_long_button_bt_discovery: -0x4d3 001851 jam on ,mem_select_device_button_statue_bt_discovery -0x4d4 001852 fetcht 1 ,mem_device_flag -0x4d5 001853 fetch 1 ,mem_24g_device_number -0x4d6 001854 isub temp ,null -0x4d7 001855 rtn zero -0x4d8 001856 fetch 2 ,mem_ui_state_map -0x4d9 001857 isolate1 ui_state_ble_adv ,pdata -0x4da 001858 call mouse_stop_le_adv ,true -0x4db 001859 fetch 2 ,mem_ui_state_map -0x4dc 001860 isolate1 ui_state_bt_reconnect ,pdata -0x4dd 001861 call mouse_cancel_reconnect ,true -0x4de 001862 branch mouse_long_button_bt_discovry -: 001865 p_mouse_get_select_state: -0x4df 001866 fetcht 1 ,mem_config_select_device_button_gpio -0x4e0 001867 call p_gpio_set_input_pu -0x4e1 001868 fetcht 1 ,mem_config_select_device_button_gpio -0x4e2 001869 branch gpio_get_bit -: 001871 p_mouse_select_device_by_button: -0x4e3 001872 call p_mouse_get_select_state -0x4e4 001873 nbranch p_mouse_select_device_button_up ,true -: 001874 p_mouse_select_device_button_down: -0x4e5 001875 call p_mouse_bt_discovery_timer -0x4e6 001876 fetch 1 ,mem_select_device_button_statue -0x4e7 001877 rtneq pb_button_state_down -0x4e8 001878 jam pb_button_state_down ,mem_select_device_button_statue -0x4e9 001879 fetch 2 ,mem_mouse_direct_timeout -0x4ea 001880 store 2 ,mem_mouse_direct_timer -0x4eb 001881 force page_length_timer ,queue -0x4ec 001882 fetch 2 ,mem_page_to -0x4ed 001883 branch timer_init -: 001885 p_mouse_select_device_button_up: -0x4ee 001886 fetch 1 ,mem_mouse_select_device_button_wakeup_flag -0x4ef 001887 nbranch p_mouse_select_button_wakeup_firstup ,blank -0x4f0 001888 fetch 1 ,mem_select_device_button_statue -0x4f1 001889 rtneq pb_button_state_up -0x4f2 001890 fetch 1 ,mem_select_ui_button_count -0x4f3 001891 sub pdata ,20 ,null -0x4f4 001892 ncall p_mouse_ready_reconnection_by_button ,positive -0x4f5 001894 fetch 1 ,mem_ui_button_timeout -0x4f6 001895 store 1 ,mem_select_ui_button_count -0x4f7 001896 jam pb_button_state_up ,mem_select_device_button_statue -0x4f8 001897 rtn -: 001899 p_mouse_ready_reconnection_by_button: -0x4f9 001900 call p_mouse_switch_device_flag -0x4fa 001901 jam 0 ,mem_link_key_exists -0x4fb 001902 call p_mouse_store_flash_device_info -0x4fc 001905 fetch mouse_flag_len ,mem_mouse_flag -0x4fd 001906 rtneq mouse_bt_discovery_button_long_down_flag -0x4fe 001907 branch mouse_set_reconnection -: 001909 p_mouse_switch_device_flag: -0x4ff 001910 fetcht 1 ,mem_device_flag -0x500 001911 increase 1 ,temp -0x501 001912 fetch 1 ,mem_device_number -0x502 001913 isub temp ,null -0x503 001914 ncall mouse_select_device_count_clean ,positive -0x504 001915 storet 1 ,mem_device_flag -0x505 001916 rtn -: 001918 p_mouse_select_button_wakeup_firstup: -0x506 001919 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0x507 001920 jam pb_button_state_up ,mem_select_device_button_statue -0x508 001921 jam on ,mem_mouse_multi_led_blink_enable -0x509 001922 rtn -: 001924 p_mouse_le_bb_disconnected_led_blink_set: -0x50a 001925 jam 1 ,mem_mouse_connected_state -0x50b 001926 jam 10 ,mem_mouse_multi_led_blink_count -0x50c 001927 branch p_mouse_dpi_multi_led_blink -: 001960 p_mouse_adc_read: -0x50d 001963 fetch 2 ,mem_mouse_multi_led_blink_count -0x50e 001964 nrtn blank -0x50f 001965 fetch 1 ,mem_mouse_wheel_trigger -0x510 001966 nrtn blank -0x511 001967 fetch 1 ,mem_adc_read_timer -0x512 001968 increase 1 ,pdata -0x513 001969 store 1 ,mem_adc_read_timer -0x514 001970 sub pdata ,10 ,null -0x515 001971 rtn positive -: 001972 p_mouse_adc_read_timeout: -0x516 001973 call adc_init_data -0x517 001974 jam 0 ,mem_adc_read_timer -0x518 001975 call p_adc_set_mode -0x519 001976 call vdd_calculate_by_mode -0x51a 001977 mul32 pdata ,3 ,pdata -0x51b 001978 arg 0x0f ,temp -0x51c 001979 isub temp ,pdata -0x51d 001980 sub pdata ,0x64 ,null -0x51e 001981 call p_mouse_vdd_decrease ,positive -0x51f 001982 store 2 ,mem_mouse_vdd_now_vol -0x520 001983 arg mem_mouse_vdd_calculate_set ,rega -0x521 001986 branch p_mouse_adc_read_next -: 001989 p_mouse_adc_read_next: -0x522 001990 call p_adc_bat_percent_lowpower_out -0x523 001991 fetch 1 ,mem_adc_power_flag -0x524 001992 bbit1 1 ,app_enter_hibernate -0x525 001993 bbit0 0 ,p_mouse_adc_no_low_voltage -0x526 001994 jam 1 ,mem_mouse_adc_last_low_voltage_flag -0x527 001995 branch mouse_adc_low_voltage -: 001997 p_mouse_adc_no_low_voltage: -0x528 001998 call mouse_adc_no_low_voltage -0x529 001999 fetch 1 ,mem_mouse_adc_last_low_voltage_flag -0x52a 002000 rtn blank -0x52b 002001 jam 0 ,mem_mouse_adc_last_low_voltage_flag -0x52c 002002 branch p_mouse_multi_led_off -: 002004 p_mouse_vdd_decrease: -0x52d 002005 arg 0x05 ,temp -0x52e 002006 isub temp ,pdata -0x52f 002007 rtn -: 002009 p_adc_set_mode: -: 002013 p_adc_check_gpio: -0x530 002014 hfetch 1 ,core_gpio_pu0 -0x531 002015 set0 5 ,pdata -0x532 002016 hstore 1 ,core_gpio_pu0 -0x533 002017 call adc_check_gpio -0x534 002018 hfetch 1 ,core_gpio_pu0 -0x535 002019 set1 5 ,pdata -0x536 002020 hstore 1 ,core_gpio_pu0 -0x537 002021 rtn -: 002023 p_adc_bat_percent_lowpower_out: -0x538 002024 ifetch 8 ,rega -0x539 002025 store 8 ,mem_pdatatemp -0x53a 002026 fetcht 2 ,mem_pdatatemp + 2 -0x53b 002027 fetch 2 ,mem_pdatatemp + 6 -0x53c 002028 isub temp ,null -0x53d 002029 nbranch adc_set_no_power_flag ,positive -0x53e 002030 fetcht 2 ,mem_pdatatemp + 4 -0x53f 002031 isub temp ,null -0x540 002032 nbranch adc_set_low_power_flag ,positive -: 002033 p_adc_clear_low_power_flag: -0x541 002034 fetch 1 ,mem_adc_power_flag -0x542 002035 set0 0 ,pdata -0x543 002036 store 1 ,mem_adc_power_flag -0x544 002037 rtn -: 002039 p_mouse_low_voltage_led_timer: -0x545 002040 fetch mouse_flag_len ,mem_mouse_flag -0x546 002041 rtnbit0 mouse_low_voltage_flag -0x547 002042 fetch 2 ,mem_ui_state_map -0x548 002043 rtnbit1 ui_state_ble_adv -0x549 002044 rtnbit1 ui_state_bt_discovery -0x54a 002045 fetch 2 ,mem_mouse_multi_led_blink_count -0x54b 002046 nrtn blank -0x54c 002047 fetch 1 ,mem_adc_low_volatage_led_timer_count -0x54d 002048 pincrease 1 -0x54e 002049 store 1 ,mem_adc_low_volatage_led_timer_count -0x54f 002050 sub pdata ,30 ,null -0x550 002051 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive -0x551 002052 sub pdata ,10 ,null -0x552 002053 branch p_mouse_multi_led_on ,positive -0x553 002054 branch p_mouse_multi_led_off -: 002055 p_mouse_adc_low_volatage_led_timer_count_clean: -0x554 002056 jam 1 ,mem_adc_low_volatage_led_timer_count -0x555 002057 rtn -: 002060 p_mouse_sensor_poweron: -0x556 002061 call p_mouse_spi_init -0x557 002062 setarg 0x8006 -0x558 002063 call twspi_write -0x559 002064 nop 12000 -0x55a 002065 arg mem_sensor_poweron_init ,regc -0x55b 002066 call p_sensor_wr_seq -: 002067 p_mouse_dpi_config: -0x55c 002068 fetch 1 ,mem_mouse_dpi -0x55d 002069 bne 0xff ,p_mouse_seting_dpi -: 002070 p_mouse_dpi_config_default: -0x55e 002071 fetch 1 ,mem_config_sensor_motion -0x55f 002072 store 1 ,mem_mouse_dpi -: 002073 p_mouse_seting_dpi: -: 002074 p_mouse_seting_sensor_type: -0x560 002075 fetch 1 ,mem_config_sensor_type -0x561 002076 beq p3212 ,p_mouse_seting_3212_dpi -0x562 002077 beq p3065_xy ,p_mouse_seting_3065xy_dpi -0x563 002078 beq mx8650 ,p_mouse_seting_3065xy_dpi -: 002080 p_mouse_seting_3205_dpi: -0x564 002081 fetch 1 ,mem_mouse_dpi -0x565 002082 sub pdata ,mouse_dpi_level2 ,null -0x566 002083 call p_mouse_3205_dpi_recount ,zero -0x567 002084 fetch 1 ,mem_mouse_dpi -0x568 002085 beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 -0x569 002086 beq mouse_dpi_level4 ,mouse_set_cpi3 -0x56a 002087 branch mouse_set_cpi2 -: 002088 p_mouse_3205_dpi_recount: -0x56b 002089 jam mouse_dpi_level3 ,mem_mouse_dpi -0x56c 002090 rtn -: 002091 p_mouse_3205_set_cpi1: -0x56d 002092 fetch 1 ,mem_320x_dpi_1 -0x56e 002093 increase -1 ,pdata -0x56f 002094 branch mouse_p3205_dpi -: 002096 p_mouse_seting_3065xy_dpi: -0x570 002097 fetch 1 ,mem_mouse_dpi -0x571 002098 sub pdata ,mouse_dpi_level2 ,null -0x572 002099 call p_mouse_3205_dpi_recount ,zero -0x573 002100 fetch 1 ,mem_mouse_dpi -0x574 002101 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 -0x575 002102 beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 -: 002103 p_mouse_3065xy_set_cpi3: -0x576 002104 fetch 1 ,mem_3065xy_dpi_3 -: 002105 p_mouse_dpi_store: -0x577 002106 store 1 ,mem_mouse_cpi_count -0x578 002107 branch mouse_p3205_dpi + 3 -: 002108 p_mouse_3065xy_set_cpi1: -0x579 002109 fetch 1 ,mem_3065xy_dpi_1 -0x57a 002110 branch p_mouse_dpi_store -: 002111 p_mouse_3065xy_set_cpi4: -0x57b 002112 fetch 1 ,mem_3065xy_dpi_4 -0x57c 002113 branch p_mouse_dpi_store -: 002126 p_mouse_seting_3212_dpi: -0x57d 002127 fetch 1 ,mem_mouse_dpi -0x57e 002128 sub pdata ,mouse_dpi_level2 ,null -0x57f 002129 call p_mouse_3205_dpi_recount ,zero -0x580 002130 fetch 1 ,mem_mouse_dpi -0x581 002131 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 -0x582 002132 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 -0x583 002133 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 -0x584 002134 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 -0x585 002135 branch mouse_set_p3212_cpi2 -: 002137 p_mouse_motion: -0x586 002138 disable user -0x587 002139 setarg 0 -0x588 002140 store 6 ,mem_mouse_x -0x589 002141 call p_mouse_cheak_sensor_data -0x58a 002142 call p_mouse_set_sdio_high -0x58b 002143 call mouse_zwheel -0x58c 002144 call mouse_t_zwheel -0x58d 002145 call p_mouse_key -0x58e 002146 call p_mouse_data_zoom -0x58f 002147 nrtn user -0x590 002148 branch mouse_motion + 9 -: 002150 p_mouse_cheak_sensor_data: -0x591 002151 fetch 1 ,mem_spi_write_flash_sm -0x592 002152 rtnne flash_sm_no_buys -0x593 002153 fetch 1 ,mem_config_sensor_type -0x594 002154 beq p3212 ,p_mouse_p3212_sensor_motion -0x595 002155 beq p3610 ,p_mouse_p3610_sensor_motion -0x596 002161 branch p_mouse_p32xx_sensor_motion -: 002162 p_mouse_p3212_sensor_motion: -0x597 002163 call mouse_clear_sensor_data -0x598 002164 branch mouse_p3212_sensor_motion_next -: 002165 p_mouse_p3610_sensor_motion: -0x599 002166 disable user -0x59a 002167 branch mouse_p3610_sensor_motion + 4 -: 002168 p_mouse_p32xx_sensor_motion: -0x59b 002169 call mouse_clear_sensor_data -0x59c 002170 disable user -0x59d 002171 branch mouse_p32xx_sensor_motion_2 -: 002173 p_mouse_data_zoom: -0x59e 002174 fetch 1 ,mem_config_sensor_type -0x59f 002175 rtnne p3212 -0x5a0 002176 fetch 1 ,mem_mouse_dpi -0x5a1 002177 rtnne mouse_dpi_level4 -0x5a2 002178 fetch 2 ,mem_mouse_x -0x5a3 002179 call p_mouse_1600_zoom -0x5a4 002180 store 2 ,mem_mouse_x -0x5a5 002181 fetch 2 ,mem_mouse_y -0x5a6 002182 call p_mouse_1600_zoom -0x5a7 002183 store 2 ,mem_mouse_y -0x5a8 002184 rtn -: 002186 p_mouse_1600_zoom: -0x5a9 002187 bbit1 11 ,p_mouse_xy_inverse -0x5aa 002188 bbit0 11 ,p_mouse_xy_zoom_3200 -0x5ab 002189 rtn -: 002191 p_mouse_xy_inverse: -0x5ac 002192 sub pdata ,0 ,pdata -0x5ad 002193 call p_mouse_xy_zoom_3200 -0x5ae 002194 sub pdata ,0 ,pdata -0x5af 002195 rtn -: 002197 p_mouse_xy_zoom_3200: -0x5b0 002198 iadd pdata ,pdata -0x5b1 002199 branch p_mouse_xy_zoom_store -: 002201 p_mouse_xy_zoom_store: -0x5b2 002202 store 2 ,mem_mouse_temp_data -0x5b3 002203 fetch 1 ,mem_mouse_temp_data + 1 -0x5b4 002204 sub pdata ,0x7 ,null -0x5b5 002205 ncall p_mouse_xy_forward_overflow ,positive -0x5b6 002206 fetch 2 ,mem_mouse_temp_data -0x5b7 002207 rtn -: 002209 p_mouse_xy_forward_overflow: -0x5b8 002210 setarg 0x7ff -0x5b9 002211 store 2 ,mem_mouse_temp_data -0x5ba 002212 rtn -: 002214 p_mouse_key: -0x5bb 002215 call p_mouse_check_key_gpio -0x5bc 002216 branch mouse_key + 1 -: 002218 p_mouse_check_key_gpio: -0x5bd 002219 arg 0 ,rega -0x5be 002220 call p_mouse_check_lkey_gpio -0x5bf 002225 branch mouse_check_key_gpio_output -: 002227 p_mouse_check_lkey_gpio: -0x5c0 002228 fetcht 1 ,mem_lbutton_gpio -0x5c1 002229 call p_gpio_set_input_pu -0x5c2 002230 fetcht 1 ,mem_lbutton_gpio -0x5c3 002231 call gpio_get_bit -0x5c4 002232 setflag true ,0 ,rega -: 002234 p_mouse_check_rkey_gpio: -0x5c5 002235 fetcht 1 ,mem_rbutton_gpio -0x5c6 002236 call p_gpio_set_input_pu -0x5c7 002237 fetcht 1 ,mem_rbutton_gpio -0x5c8 002238 call gpio_get_bit -0x5c9 002239 setflag true ,1 ,rega -: 002241 p_mouse_check_mkey_gpio: -0x5ca 002242 fetcht 1 ,mem_mbutton_gpio -0x5cb 002243 call p_gpio_set_input_pu -0x5cc 002244 fetcht 1 ,mem_mbutton_gpio -0x5cd 002245 call gpio_get_bit -0x5ce 002246 setflag true ,2 ,rega -: 002248 p_mouse_check_bk_key_gpio: -0x5cf 002249 call p_mouse_comm_gpio_config -0x5d0 002250 fetcht 1 ,mem_bk_button_gpio -0x5d1 002251 call p_gpio_set_input_pd -0x5d2 002252 fetcht 1 ,mem_bk_button_gpio -0x5d3 002253 call gpio_get_bit -0x5d4 002254 nsetflag true ,3 ,rega -0x5d5 002255 call p_gpio_set_input_pu -: 002256 p_mouse_check_fw_key_gpio: -0x5d6 002257 call p_mouse_comm_gpio_config -0x5d7 002258 fetcht 1 ,mem_fw_button_gpio -0x5d8 002259 call p_gpio_set_input_pd -0x5d9 002260 fetcht 1 ,mem_fw_button_gpio -0x5da 002261 call gpio_get_bit -0x5db 002262 nsetflag true ,4 ,rega -: 002263 p_gpio_set_input_pu: -0x5dc 002264 set1 gpio_active_bit ,temp -: 002265 p_gpio_set_input_pu1: -0x5dd 002266 arg core_gpio_pu0 ,contw -0x5de 002267 call gpio_set_bit +: 001675 p_mouse_24g_pairing_complete: +0x476 001676 call p_mouse_discovey_led_blink_off +0x477 001677 jam 0 ,mem_mouse_connected_state +0x478 001678 call p_mouse_init_sensor_reset +0x479 001679 jam zcode_92 ,mem_zcode_temp_param0 +0x47a 001680 branch p_zcode_entrance +: 001682 p_mouse_24g_attempt_fail: +0x47b 001683 jam 1 ,mem_mouse_connected_state +0x47c 001684 jam 10 ,mem_mouse_multi_led_blink_count +0x47d 001685 call p_mouse_dpi_multi_led_blink +0x47e 001687 call p_mouse_sensor_powerdown_check +0x47f 001689 jam zcode_a0 ,mem_zcode_temp_param0 +0x480 001690 branch p_zcode_entrance +: 001692 p_mouse_24g_attempt_success: +0x481 001693 call p_mouse_multi_led_blink_off +0x482 001694 call p_mouse_mode_24g_device_multi_led_on +0x483 001695 jam 0 ,mem_mouse_connected_state +0x484 001697 call p_mouse_init_sensor_reset +: 001698 p_mouse_24g_no_data_timer_init: +0x485 001699 branch mouse_no_data_timer_init +: 001701 p_mouse_before_hibernate: +0x486 001702 call p_mouse_sensor_powerdown_check +0x487 001703 jam zcode_a4 ,mem_zcode_temp_param0 +0x488 001704 branch p_zcode_entrance +: 001706 p_mouse_sensor_powerdown_check: +0x489 001707 fetch 1 ,mem_mouse_init_sensor_reset_flag +0x48a 001708 rtn blank +0x48b 001709 jam 0 ,mem_mouse_init_sensor_reset_flag +: 001710 p_mouse_sensor_powerdown: +0x48c 001711 call p_mouse_init_sunt +0x48d 001712 setarg 0x0806 +0x48e 001717 branch twspi_write +: 001719 p_mouse_bb_event_timer: +0x48f 001720 call p_mouse_adc_read +0x490 001721 call p_mouse_low_voltage_led_timer +0x491 001722 call p_mouse_wheel_trigger_timer +0x492 001723 call p_mouse_select_device_by_button +0x493 001724 call mouse_check_discovery_timeout_timer +0x494 001725 call mouse_check_no_data_timeout_timer +0x495 001727 call p_mouse_g24_stop_mode_timeout_timer +0x496 001728 call p_mouse_check_direct_timeout_timer +0x497 001729 call p_mouse_le_enable_att_list_timer +0x498 001730 call p_mouse_le_current_mult_update_timer +0x499 001731 call p_le_send_smp_security_request_timer +0x49a 001732 call p_mouse_send_switch_req_timer +0x49b 001733 call mouse_check_hid_handshake_timer +0x49c 001734 call p_mouse_bt_check_sniff_req_timeout_timer +0x49d 001735 branch p_mouse_multi_led_blink_timer +: 001738 p_mouse_send_switch_req_timer: +0x49e 001739 arg mem_mouse_send_switch_req_timer ,regc +0x49f 001740 arg host_create_conn_resend ,regb +0x4a0 001741 branch timer_single_step +: 001743 p_mouse_bt_check_sniff_req_timeout_timer: +0x4a1 001744 arg mem_mouse_bt_send_first_package_timer ,regc +0x4a2 001745 arg p_mouse_bt_send_first_package ,regb +0x4a3 001746 branch timer_single_step +: 001747 p_mouse_bt_send_first_package: +0x4a4 001748 jam 1 ,mem_mouse_bt_send_first_package_flag +0x4a5 001749 rtn +: 001752 p_mouse_le_enable_att_list_timer: +0x4a6 001753 arg mem_le_start_encrypt_timer ,regc +0x4a7 001754 arg mouse_le_write_enable ,regb +0x4a8 001755 branch timer_single_step +: 001757 p_mouse_check_direct_timeout_timer: +0x4a9 001758 arg mem_mouse_direct_timer ,regc +0x4aa 001759 arg p_mouse_check_direct_timeout ,regb +0x4ab 001760 branch timer_single_step_2b +: 001761 p_mouse_check_direct_timeout: +0x4ac 001762 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +0x4ad 001763 nrtn blank +0x4ae 001764 branch mouse_check_direct_timeout +: 001766 p_mouse_le_current_mult_update_timer: +0x4af 001767 arg mem_mouse_le_current_mult_timer ,regc +0x4b0 001768 arg p_mouse_le_current_mult_reinit ,regb +0x4b1 001769 branch timer_single_step +: 001770 p_mouse_le_current_mult_reinit: +0x4b2 001771 fetch 1 ,mem_lpm_mult_init +0x4b3 001772 store 1 ,mem_lpm_mult +0x4b4 001773 rtn +: 001775 p_le_send_smp_security_request_timer: +0x4b5 001776 fetch 1 ,mem_mouse_le_bb_connected_flag +0x4b6 001777 rtn blank +0x4b7 001778 arg mem_mouse_send_secutiry_request_timer ,regc +0x4b8 001779 arg p_le_pairing_sm_start_check ,regb +0x4b9 001780 branch timer_single_step +: 001781 p_le_pairing_sm_start_check: +0x4ba 001782 fetch 1 ,mem_le_send_security_request_flag +0x4bb 001783 nrtn blank +0x4bc 001784 branch le_pairing_sm_start +: 001786 p_mouse_wheel_trigger_timer: +0x4bd 001787 arg mem_mouse_wheel_trigger_timer ,regc +0x4be 001788 arg p_mouse_wheel_trigger_disable ,regb +0x4bf 001789 branch timer_single_step +: 001790 p_mouse_wheel_trigger_disable: +0x4c0 001791 jam 0 ,mem_mouse_wheel_trigger +0x4c1 001792 rtn +: 001794 p_mouse_g24_long_sleep_param_update_timer: +0x4c2 001795 arg mem_24g_long_sleep_param_update_timer ,regc +0x4c3 001796 arg p_mouse_g24_long_sleep_normal_param ,regb +0x4c4 001797 branch timer_single_step +: 001798 p_mouse_g24_long_sleep_normal_param: +0x4c5 001799 setarg g24_long_sleep_step3 +0x4c6 001800 store 3 ,mem_24g_enter_hibernate +: 001801 p_mouse_long_mult_flag_enable: +0x4c7 001802 jam 1 ,mem_mouse_long_mult_flag +0x4c8 001803 rtn +: 001805 p_mouse_g24_stop_mode_timeout_timer: +0x4c9 001806 arg mem_24g_stop_g24_mode_timeout ,regc +0x4ca 001807 arg p_mouse_g24_stop_mode_timeout ,regb +0x4cb 001808 branch timer_single_step_2b +: 001809 p_mouse_g24_stop_mode_timeout: +0x4cc 001810 jam 1 ,mem_24g_stop_g24_mode +0x4cd 001811 rtn +: 001842 p_mouse_bt_discovery_timer: +0x4ce 001843 arg mem_select_ui_button_count ,regc +0x4cf 001844 arg p_mouse_long_button_bt_discovery ,regb +0x4d0 001845 branch timer_single_step +: 001846 p_mouse_long_button_bt_discovery: +0x4d1 001847 jam on ,mem_select_device_button_statue_bt_discovery +0x4d2 001848 fetcht 1 ,mem_device_flag +0x4d3 001849 fetch 1 ,mem_24g_device_number +0x4d4 001850 isub temp ,null +0x4d5 001851 rtn zero +0x4d6 001852 fetch 2 ,mem_ui_state_map +0x4d7 001853 isolate1 ui_state_ble_adv ,pdata +0x4d8 001854 call mouse_stop_le_adv ,true +0x4d9 001855 fetch 2 ,mem_ui_state_map +0x4da 001856 isolate1 ui_state_bt_reconnect ,pdata +0x4db 001857 call mouse_cancel_reconnect ,true +0x4dc 001858 branch mouse_long_button_bt_discovry +: 001861 p_mouse_get_select_state: +0x4dd 001862 fetcht 1 ,mem_config_select_device_button_gpio +0x4de 001863 call p_gpio_set_input_pu +0x4df 001864 fetcht 1 ,mem_config_select_device_button_gpio +0x4e0 001865 branch gpio_get_bit +: 001867 p_mouse_select_device_by_button: +0x4e1 001868 call p_mouse_get_select_state +0x4e2 001869 nbranch p_mouse_select_device_button_up ,true +: 001870 p_mouse_select_device_button_down: +0x4e3 001871 call p_mouse_bt_discovery_timer +0x4e4 001872 fetch 1 ,mem_select_device_button_statue +0x4e5 001873 rtneq pb_button_state_down +0x4e6 001874 jam pb_button_state_down ,mem_select_device_button_statue +0x4e7 001875 fetch 2 ,mem_mouse_direct_timeout +0x4e8 001876 store 2 ,mem_mouse_direct_timer +0x4e9 001877 force page_length_timer ,queue +0x4ea 001878 fetch 2 ,mem_page_to +0x4eb 001879 branch timer_init +: 001881 p_mouse_select_device_button_up: +0x4ec 001882 fetch 1 ,mem_mouse_select_device_button_wakeup_flag +0x4ed 001883 nbranch p_mouse_select_button_wakeup_firstup ,blank +0x4ee 001884 fetch 1 ,mem_select_device_button_statue +0x4ef 001885 rtneq pb_button_state_up +0x4f0 001886 fetch 1 ,mem_select_ui_button_count +0x4f1 001887 sub pdata ,20 ,null +0x4f2 001888 ncall p_mouse_ready_reconnection_by_button ,positive +0x4f3 001890 fetch 1 ,mem_ui_button_timeout +0x4f4 001891 store 1 ,mem_select_ui_button_count +0x4f5 001892 jam pb_button_state_up ,mem_select_device_button_statue +0x4f6 001893 rtn +: 001895 p_mouse_ready_reconnection_by_button: +0x4f7 001896 call p_mouse_switch_device_flag +0x4f8 001897 jam 0 ,mem_link_key_exists +0x4f9 001898 call p_mouse_store_flash_device_info +0x4fa 001901 fetch mouse_flag_len ,mem_mouse_flag +0x4fb 001902 rtneq mouse_bt_discovery_button_long_down_flag +0x4fc 001903 branch mouse_set_reconnection +: 001905 p_mouse_switch_device_flag: +0x4fd 001906 fetcht 1 ,mem_device_flag +0x4fe 001907 increase 1 ,temp +0x4ff 001908 fetch 1 ,mem_device_number +0x500 001909 isub temp ,null +0x501 001910 ncall mouse_select_device_count_clean ,positive +0x502 001911 storet 1 ,mem_device_flag +0x503 001912 rtn +: 001914 p_mouse_select_button_wakeup_firstup: +0x504 001915 jam 0 ,mem_mouse_select_device_button_wakeup_flag +0x505 001916 jam pb_button_state_up ,mem_select_device_button_statue +0x506 001917 jam on ,mem_mouse_multi_led_blink_enable +0x507 001918 rtn +: 001920 p_mouse_le_bb_disconnected_led_blink_set: +0x508 001921 jam 1 ,mem_mouse_connected_state +0x509 001922 jam 10 ,mem_mouse_multi_led_blink_count +0x50a 001923 branch p_mouse_dpi_multi_led_blink +: 001956 p_mouse_adc_read: +0x50b 001959 fetch 2 ,mem_mouse_multi_led_blink_count +0x50c 001960 nrtn blank +0x50d 001961 fetch 1 ,mem_mouse_wheel_trigger +0x50e 001962 nrtn blank +0x50f 001963 fetch 1 ,mem_adc_read_timer +0x510 001964 increase 1 ,pdata +0x511 001965 store 1 ,mem_adc_read_timer +0x512 001966 sub pdata ,10 ,null +0x513 001967 rtn positive +: 001968 p_mouse_adc_read_timeout: +0x514 001969 call adc_init_data +0x515 001970 jam 0 ,mem_adc_read_timer +0x516 001971 call p_adc_set_mode +0x517 001972 call vdd_calculate_by_mode +0x518 001973 mul32 pdata ,3 ,pdata +0x519 001974 arg 0x0f ,temp +0x51a 001975 isub temp ,pdata +0x51b 001976 sub pdata ,0x64 ,null +0x51c 001977 call p_mouse_vdd_decrease ,positive +0x51d 001978 store 2 ,mem_mouse_vdd_now_vol +0x51e 001979 arg mem_mouse_vdd_calculate_set ,rega +0x51f 001982 branch p_mouse_adc_read_next +: 001985 p_mouse_adc_read_next: +0x520 001986 call p_adc_bat_percent_lowpower_out +0x521 001987 fetch 1 ,mem_adc_power_flag +0x522 001988 bbit1 1 ,app_enter_hibernate +0x523 001989 bbit0 0 ,p_mouse_adc_no_low_voltage +0x524 001990 jam 1 ,mem_mouse_adc_last_low_voltage_flag +0x525 001991 branch mouse_adc_low_voltage +: 001993 p_mouse_adc_no_low_voltage: +0x526 001994 call mouse_adc_no_low_voltage +0x527 001995 fetch 1 ,mem_mouse_adc_last_low_voltage_flag +0x528 001996 rtn blank +0x529 001997 jam 0 ,mem_mouse_adc_last_low_voltage_flag +0x52a 001998 branch p_mouse_multi_led_off +: 002000 p_mouse_vdd_decrease: +0x52b 002001 arg 0x05 ,temp +0x52c 002002 isub temp ,pdata +0x52d 002003 rtn +: 002005 p_adc_set_mode: +: 002009 p_adc_check_gpio: +0x52e 002010 hfetch 1 ,core_gpio_pu0 +0x52f 002011 set0 5 ,pdata +0x530 002012 hstore 1 ,core_gpio_pu0 +0x531 002013 call adc_check_gpio +0x532 002014 hfetch 1 ,core_gpio_pu0 +0x533 002015 set1 5 ,pdata +0x534 002016 hstore 1 ,core_gpio_pu0 +0x535 002017 rtn +: 002019 p_adc_bat_percent_lowpower_out: +0x536 002020 ifetch 8 ,rega +0x537 002021 store 8 ,mem_pdatatemp +0x538 002022 fetcht 2 ,mem_pdatatemp + 2 +0x539 002023 fetch 2 ,mem_pdatatemp + 6 +0x53a 002024 isub temp ,null +0x53b 002025 nbranch adc_set_no_power_flag ,positive +0x53c 002026 fetcht 2 ,mem_pdatatemp + 4 +0x53d 002027 isub temp ,null +0x53e 002028 nbranch adc_set_low_power_flag ,positive +: 002029 p_adc_clear_low_power_flag: +0x53f 002030 fetch 1 ,mem_adc_power_flag +0x540 002031 set0 0 ,pdata +0x541 002032 store 1 ,mem_adc_power_flag +0x542 002033 rtn +: 002035 p_mouse_low_voltage_led_timer: +0x543 002036 fetch mouse_flag_len ,mem_mouse_flag +0x544 002037 rtnbit0 mouse_low_voltage_flag +0x545 002038 fetch 2 ,mem_ui_state_map +0x546 002039 rtnbit1 ui_state_ble_adv +0x547 002040 rtnbit1 ui_state_bt_discovery +0x548 002041 fetch 2 ,mem_mouse_multi_led_blink_count +0x549 002042 nrtn blank +0x54a 002043 fetch 1 ,mem_adc_low_volatage_led_timer_count +0x54b 002044 pincrease 1 +0x54c 002045 store 1 ,mem_adc_low_volatage_led_timer_count +0x54d 002046 sub pdata ,30 ,null +0x54e 002047 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive +0x54f 002048 sub pdata ,10 ,null +0x550 002049 branch p_mouse_multi_led_on ,positive +0x551 002050 branch p_mouse_multi_led_off +: 002051 p_mouse_adc_low_volatage_led_timer_count_clean: +0x552 002052 jam 1 ,mem_adc_low_volatage_led_timer_count +0x553 002053 rtn +: 002056 p_mouse_sensor_poweron: +0x554 002057 call p_mouse_spi_init +0x555 002058 setarg 0x8006 +0x556 002059 call twspi_write +0x557 002060 nop 12000 +0x558 002061 arg mem_sensor_poweron_init ,regc +0x559 002062 call p_sensor_wr_seq +: 002063 p_mouse_dpi_config: +0x55a 002064 fetch 1 ,mem_mouse_dpi +0x55b 002065 bne 0xff ,p_mouse_seting_dpi +: 002066 p_mouse_dpi_config_default: +0x55c 002067 fetch 1 ,mem_config_sensor_motion +0x55d 002068 store 1 ,mem_mouse_dpi +: 002069 p_mouse_seting_dpi: +: 002070 p_mouse_seting_sensor_type: +0x55e 002071 fetch 1 ,mem_config_sensor_type +0x55f 002072 beq p3212 ,p_mouse_seting_3212_dpi +0x560 002073 beq p3065_xy ,p_mouse_seting_3065xy_dpi +0x561 002074 beq mx8650 ,p_mouse_seting_3065xy_dpi +: 002076 p_mouse_seting_3205_dpi: +0x562 002077 fetch 1 ,mem_mouse_dpi +0x563 002078 sub pdata ,mouse_dpi_level2 ,null +0x564 002079 call p_mouse_3205_dpi_recount ,zero +0x565 002080 fetch 1 ,mem_mouse_dpi +0x566 002081 beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 +0x567 002082 beq mouse_dpi_level4 ,mouse_set_cpi3 +0x568 002083 branch mouse_set_cpi2 +: 002084 p_mouse_3205_dpi_recount: +0x569 002085 jam mouse_dpi_level3 ,mem_mouse_dpi +0x56a 002086 rtn +: 002087 p_mouse_3205_set_cpi1: +0x56b 002088 fetch 1 ,mem_320x_dpi_1 +0x56c 002089 increase -1 ,pdata +0x56d 002090 branch mouse_p3205_dpi +: 002092 p_mouse_seting_3065xy_dpi: +0x56e 002093 fetch 1 ,mem_mouse_dpi +0x56f 002094 sub pdata ,mouse_dpi_level2 ,null +0x570 002095 call p_mouse_3205_dpi_recount ,zero +0x571 002096 fetch 1 ,mem_mouse_dpi +0x572 002097 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 +0x573 002098 beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 +: 002099 p_mouse_3065xy_set_cpi3: +0x574 002100 fetch 1 ,mem_3065xy_dpi_3 +: 002101 p_mouse_dpi_store: +0x575 002102 store 1 ,mem_mouse_cpi_count +0x576 002103 branch mouse_p3205_dpi + 3 +: 002104 p_mouse_3065xy_set_cpi1: +0x577 002105 fetch 1 ,mem_3065xy_dpi_1 +0x578 002106 branch p_mouse_dpi_store +: 002107 p_mouse_3065xy_set_cpi4: +0x579 002108 fetch 1 ,mem_3065xy_dpi_4 +0x57a 002109 branch p_mouse_dpi_store +: 002122 p_mouse_seting_3212_dpi: +0x57b 002123 fetch 1 ,mem_mouse_dpi +0x57c 002124 sub pdata ,mouse_dpi_level2 ,null +0x57d 002125 call p_mouse_3205_dpi_recount ,zero +0x57e 002126 fetch 1 ,mem_mouse_dpi +0x57f 002127 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +0x580 002128 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +0x581 002129 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +0x582 002130 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 +0x583 002131 branch mouse_set_p3212_cpi2 +: 002133 p_mouse_motion: +0x584 002134 disable user +0x585 002135 setarg 0 +0x586 002136 store 6 ,mem_mouse_x +0x587 002137 call p_mouse_cheak_sensor_data +0x588 002138 call p_mouse_set_sdio_high +0x589 002139 call mouse_zwheel +0x58a 002140 call mouse_t_zwheel +0x58b 002141 call p_mouse_key +0x58c 002142 call p_mouse_data_zoom +0x58d 002143 nrtn user +0x58e 002144 branch mouse_motion + 9 +: 002146 p_mouse_cheak_sensor_data: +0x58f 002147 fetch 1 ,mem_spi_write_flash_sm +0x590 002148 rtnne flash_sm_no_buys +0x591 002149 fetch 1 ,mem_config_sensor_type +0x592 002150 beq p3212 ,p_mouse_p3212_sensor_motion +0x593 002151 beq p3610 ,p_mouse_p3610_sensor_motion +0x594 002157 branch p_mouse_p32xx_sensor_motion +: 002158 p_mouse_p3212_sensor_motion: +0x595 002159 call mouse_clear_sensor_data +0x596 002160 branch mouse_p3212_sensor_motion_next +: 002161 p_mouse_p3610_sensor_motion: +0x597 002162 disable user +0x598 002163 branch mouse_p3610_sensor_motion + 4 +: 002164 p_mouse_p32xx_sensor_motion: +0x599 002165 call mouse_clear_sensor_data +0x59a 002166 disable user +0x59b 002167 branch mouse_p32xx_sensor_motion_2 +: 002169 p_mouse_data_zoom: +0x59c 002170 fetch 1 ,mem_config_sensor_type +0x59d 002171 rtnne p3212 +0x59e 002172 fetch 1 ,mem_mouse_dpi +0x59f 002173 rtnne mouse_dpi_level4 +0x5a0 002174 fetch 2 ,mem_mouse_x +0x5a1 002175 call p_mouse_1600_zoom +0x5a2 002176 store 2 ,mem_mouse_x +0x5a3 002177 fetch 2 ,mem_mouse_y +0x5a4 002178 call p_mouse_1600_zoom +0x5a5 002179 store 2 ,mem_mouse_y +0x5a6 002180 rtn +: 002182 p_mouse_1600_zoom: +0x5a7 002183 bbit1 11 ,p_mouse_xy_inverse +0x5a8 002184 bbit0 11 ,p_mouse_xy_zoom_3200 +0x5a9 002185 rtn +: 002187 p_mouse_xy_inverse: +0x5aa 002188 sub pdata ,0 ,pdata +0x5ab 002189 call p_mouse_xy_zoom_3200 +0x5ac 002190 sub pdata ,0 ,pdata +0x5ad 002191 rtn +: 002193 p_mouse_xy_zoom_3200: +0x5ae 002194 iadd pdata ,pdata +0x5af 002195 branch p_mouse_xy_zoom_store +: 002197 p_mouse_xy_zoom_store: +0x5b0 002198 store 2 ,mem_mouse_temp_data +0x5b1 002199 fetch 1 ,mem_mouse_temp_data + 1 +0x5b2 002200 sub pdata ,0x7 ,null +0x5b3 002201 ncall p_mouse_xy_forward_overflow ,positive +0x5b4 002202 fetch 2 ,mem_mouse_temp_data +0x5b5 002203 rtn +: 002205 p_mouse_xy_forward_overflow: +0x5b6 002206 setarg 0x7ff +0x5b7 002207 store 2 ,mem_mouse_temp_data +0x5b8 002208 rtn +: 002210 p_mouse_key: +0x5b9 002211 call p_mouse_check_key_gpio +0x5ba 002212 branch mouse_key + 1 +: 002214 p_mouse_check_key_gpio: +0x5bb 002215 arg 0 ,rega +0x5bc 002216 call p_mouse_check_lkey_gpio +0x5bd 002221 branch mouse_check_key_gpio_output +: 002223 p_mouse_check_lkey_gpio: +0x5be 002224 fetcht 1 ,mem_lbutton_gpio +0x5bf 002225 call p_gpio_set_input_pu +0x5c0 002226 fetcht 1 ,mem_lbutton_gpio +0x5c1 002227 call gpio_get_bit +0x5c2 002228 setflag true ,0 ,rega +: 002230 p_mouse_check_rkey_gpio: +0x5c3 002231 fetcht 1 ,mem_rbutton_gpio +0x5c4 002232 call p_gpio_set_input_pu +0x5c5 002233 fetcht 1 ,mem_rbutton_gpio +0x5c6 002234 call gpio_get_bit +0x5c7 002235 setflag true ,1 ,rega +: 002237 p_mouse_check_mkey_gpio: +0x5c8 002238 fetcht 1 ,mem_mbutton_gpio +0x5c9 002239 call p_gpio_set_input_pu +0x5ca 002240 fetcht 1 ,mem_mbutton_gpio +0x5cb 002241 call gpio_get_bit +0x5cc 002242 setflag true ,2 ,rega +: 002244 p_mouse_check_bk_key_gpio: +0x5cd 002245 call p_mouse_comm_gpio_config +0x5ce 002246 fetcht 1 ,mem_bk_button_gpio +0x5cf 002247 call p_gpio_set_input_pd +0x5d0 002248 fetcht 1 ,mem_bk_button_gpio +0x5d1 002249 call gpio_get_bit +0x5d2 002250 nsetflag true ,3 ,rega +0x5d3 002251 call p_gpio_set_input_pu +: 002252 p_mouse_check_fw_key_gpio: +0x5d4 002253 call p_mouse_comm_gpio_config +0x5d5 002254 fetcht 1 ,mem_fw_button_gpio +0x5d6 002255 call p_gpio_set_input_pd +0x5d7 002256 fetcht 1 ,mem_fw_button_gpio +0x5d8 002257 call gpio_get_bit +0x5d9 002258 nsetflag true ,4 ,rega +: 002259 p_gpio_set_input_pu: +0x5da 002260 set1 gpio_active_bit ,temp +: 002261 p_gpio_set_input_pu1: +0x5db 002262 arg core_gpio_pu0 ,contw +0x5dc 002263 call gpio_set_bit +0x5dd 002264 set0 gpio_active_bit ,temp +0x5de 002265 branch p_gpio_set_input_pd4 +: 002267 p_gpio_set_input_pd: 0x5df 002268 set0 gpio_active_bit ,temp -0x5e0 002269 branch p_gpio_set_input_pd4 -: 002271 p_gpio_set_input_pd: -0x5e1 002272 set0 gpio_active_bit ,temp -0x5e2 002273 arg core_gpio_pu0 ,contw -0x5e3 002274 call gpio_set_bit -0x5e4 002275 set1 gpio_active_bit ,temp -: 002276 p_gpio_set_input_pd4: -0x5e5 002277 arg core_gpio_pd0 ,contw -0x5e6 002278 branch gpio_set_high_impedance + 4 -: 002300 p_mouse_bb_event_discovery_btn: -0x5e7 002302 isolate1 mark_24g ,mark -0x5e8 002303 call p_g24_check_51cmd_stop_24g ,true -0x5e9 002304 branch mouse_bb_event_discovery_btn + 1 -: 002306 p_le_addr_random_config: -0x5ea 002307 jam zcode_81 ,mem_zcode_temp_param0 +0x5e0 002269 arg core_gpio_pu0 ,contw +0x5e1 002270 call gpio_set_bit +0x5e2 002271 set1 gpio_active_bit ,temp +: 002272 p_gpio_set_input_pd4: +0x5e3 002273 arg core_gpio_pd0 ,contw +0x5e4 002274 branch gpio_set_high_impedance + 4 +: 002296 p_mouse_bb_event_discovery_btn: +0x5e5 002298 isolate1 mark_24g ,mark +0x5e6 002299 call p_g24_check_51cmd_stop_24g ,true +0x5e7 002300 branch mouse_bb_event_discovery_btn + 1 +: 002302 p_le_addr_random_config: +0x5e8 002303 jam zcode_81 ,mem_zcode_temp_param0 +0x5e9 002304 branch p_zcode_entrance +: 002306 p_mouse_start_discovery: +0x5ea 002307 jam zcode_50 ,mem_zcode_temp_param0 0x5eb 002308 branch p_zcode_entrance -: 002310 p_mouse_start_discovery: -0x5ec 002311 jam zcode_50 ,mem_zcode_temp_param0 -0x5ed 002312 branch p_zcode_entrance -: 002314 p_le_adv_data_update: -0x5ee 002315 arg mem_le_adv_data + 11 ,contw -0x5ef 002316 arg 19 ,loopcnt -0x5f0 002317 call memcpy -0x5f1 002318 branch le_modified_name_adv -: 002320 p_mouse_stop_discovery: -0x5f2 002321 call p_mouse_discovey_led_blink_off -0x5f3 002322 setarg 0 -0x5f4 002323 store 2 ,mem_mouse_discovery_timer -0x5f5 002324 store 1 ,mem_mouse_blink_count -0x5f6 002325 call p_mouse_init_sensor_reset -0x5f7 002326 branch mouse_stop_discovery + 1 -: 002328 p_le_slave_match: -0x5f8 002329 fetch 1 ,mem_le_md_count -0x5f9 002330 pincrease 1 -0x5fa 002331 store 1 ,mem_le_md_count -0x5fb 002332 beq le_md_max_count ,le_slave_cont -0x5fc 002333 call le_acknowledge -0x5fd 002334 call le_prepare_tx -0x5fe 002335 call power_ctrl_start -0x5ff 002336 branch le_slave_match + 7 -: 002338 p_le_next_adv_channel: -0x600 002339 fetch 1 ,mem_le_ch_mapped -0x601 002340 increase 1 ,pdata -0x602 002341 store 1 ,mem_le_ch_mapped -0x603 002342 rtnne 40 -0x604 002343 jam 37 ,mem_le_ch_mapped -0x605 002344 rtn -: 002346 p_le_receive_skip: -0x606 002347 call save_rssi -0x607 002348 call p_rssi_signal -0x608 002349 branch le_receive_skip + 2 -: 002351 p_le_update_param: -0x609 002352 jam zcode_40 ,mem_zcode_temp_param0 +: 002310 p_le_adv_data_update: +0x5ec 002311 arg mem_le_adv_data + 11 ,contw +0x5ed 002312 arg 19 ,loopcnt +0x5ee 002313 call memcpy +0x5ef 002314 branch le_modified_name_adv +: 002316 p_mouse_stop_discovery: +0x5f0 002317 call p_mouse_discovey_led_blink_off +0x5f1 002318 setarg 0 +0x5f2 002319 store 2 ,mem_mouse_discovery_timer +0x5f3 002320 store 1 ,mem_mouse_blink_count +0x5f4 002321 call p_mouse_init_sensor_reset +0x5f5 002322 branch mouse_stop_discovery + 1 +: 002324 p_le_slave_match: +0x5f6 002325 fetch 1 ,mem_le_md_count +0x5f7 002326 pincrease 1 +0x5f8 002327 store 1 ,mem_le_md_count +0x5f9 002328 beq le_md_max_count ,le_slave_cont +0x5fa 002329 call le_acknowledge +0x5fb 002330 call le_prepare_tx +0x5fc 002331 call power_ctrl_start +0x5fd 002332 branch le_slave_match + 7 +: 002334 p_le_next_adv_channel: +0x5fe 002335 fetch 1 ,mem_le_ch_mapped +0x5ff 002336 increase 1 ,pdata +0x600 002337 store 1 ,mem_le_ch_mapped +0x601 002338 rtnne 40 +0x602 002339 jam 37 ,mem_le_ch_mapped +0x603 002340 rtn +: 002342 p_le_receive_skip: +0x604 002343 call save_rssi +0x605 002344 call p_rssi_signal +0x606 002345 branch le_receive_skip + 2 +: 002347 p_le_update_param: +0x607 002348 jam zcode_40 ,mem_zcode_temp_param0 +0x608 002349 branch p_zcode_entrance +: 002351 p_le_update_channel_map: +0x609 002352 jam zcode_41 ,mem_zcode_temp_param0 0x60a 002353 branch p_zcode_entrance -: 002355 p_le_update_channel_map: -0x60b 002356 jam zcode_41 ,mem_zcode_temp_param0 -0x60c 002357 branch p_zcode_entrance -: 002359 p_le_prepare_tx: -0x60d 002360 fetch 1 ,mem_le_arq -0x60e 002361 bbit1 wak ,p_le_prepare_tx_wak -0x60f 002362 call power_ctrl_pac_succ_incrs -0x610 002363 fetch 1 ,mem_empty_count -0x611 002364 nbranch p_le_send_empyt ,blank -0x612 002365 fetch 1 ,mem_le_state -0x613 002366 bbit0 lestate_encryption ,p_le_tx_4 -0x614 002367 fetch 1 ,mem_le_rxbuf + 1 -0x615 002368 branch p_le_tx_4 ,blank -0x616 002369 branch le_send_empty -: 002370 p_le_send_empyt: -0x617 002371 fetch 1 ,mem_empty_count -0x618 002372 increase -1 ,pdata -0x619 002373 store 1 ,mem_empty_count -0x61a 002374 branch le_send_empty -: 002375 p_le_tx_4: -0x61b 002376 fetch 1 ,mem_le_pairing_state -0x61c 002377 bne flag_le_pairing_after_auth ,p_in_le_tx_4 -0x61d 002378 jam 3 ,mem_empty_count -: 002379 p_in_le_tx_4: -0x61e 002380 call le_fifo_check_nearly_full -0x61f 002381 call p_mouse_data_pull ,blank -0x620 002382 branch le_prepare_tx + 4 -: 002384 p_le_check_tx_retransmit_setmd: -0x621 002385 fetch 1 ,mem_le_connect_status_flag -0x622 002386 and pdata ,0x03 ,pdata -0x623 002387 rtnne 0x03 -0x624 002388 fetch 1 ,mem_mouse_data_queue_num -0x625 002389 rtn blank -0x626 002390 fetch 1 ,mem_le_txlen -0x627 002391 rtn blank -0x628 002392 fetch 1 ,mem_le_txheader -0x629 002393 set1 md ,pdata -0x62a 002394 store 1 ,mem_le_txheader -0x62b 002395 branch le_set_md -: 002408 p_le_prepare_tx_wak: -0x62c 002409 call p_le_check_tx_retransmit_setmd -: 002410 p_le_power_ctrl_pac_succ_decrs: -: 002411 power_ctrl_pac_succ_decrs: -0x62d 002412 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x62e 002413 sub pdata ,2 ,null -0x62f 002414 ncall power_ctrl_pac_succ_cnt_reinit ,positive -0x630 002415 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x631 002416 rtneq 0 -0x632 002417 increase -1 ,pdata -0x633 002418 store 1 ,mem_power_ctrl_pac_succ_cnt -0x634 002419 rtn -: 002421 p_mouse_le_reconn_write_enable_timer_reinit: -0x635 002422 fetch 1 ,mem_mouse_le_reconnect_flag -0x636 002423 rtn blank -0x637 002424 fetch 1 ,mem_le_connect_status_flag -0x638 002425 and pdata ,0x03 ,pdata -0x639 002426 rtneq 0x03 -0x63a 002427 jam 10 ,mem_le_start_encrypt_timer -0x63b 002428 rtn -: 002430 p_le_parse: -0x63c 002431 rtnmark1 mark_old_packet -0x63d 002432 call le_fifo_check_full -0x63e 002433 nrtn blank -0x63f 002434 fetch 1 ,mem_le_rxbuf -0x640 002435 and pdata ,0x3 ,pdata -0x641 002436 store 1 ,mem_le_packet_llid -0x642 002437 ifetch 1 ,contr -0x643 002438 and pdata ,0x1f ,pdata -0x644 002439 store 1 ,mem_le_packet_size -0x645 002440 rtn blank -0x646 002441 copy contr ,pdata -0x647 002442 store 2 ,mem_le_payload_ptr -0x648 002443 fetch 1 ,mem_le_packet_llid -0x649 002444 beq llid_le_ll ,p_le_parse_ll -0x64a 002445 branch le_parse_l2cap -: 002446 p_le_parse_ll: -0x64b 002447 fetch 1 ,mem_le_rxbuf + 2 -0x64c 002448 beq ll_channel_map_req ,p_le_parse_channel_map_req -0x64d 002449 branch le_parse_ll + 1 -: 002450 p_le_parse_channel_map_req: -0x64e 002451 ifetch 5 ,contr -0x64f 002452 store 5 ,mem_le_new_map -0x650 002453 ifetch 2 ,contr -0x651 002454 store 2 ,mem_le_instant -0x652 002455 branch le_parse_channel_map_req + 7 -: 002457 p_le_parse_l2cap: -0x653 002458 ifetch 2 ,contr -0x654 002459 beq le_l2cap_cid_att ,p_le_parse_att -0x655 002460 beq le_l2cap_cid_smp ,p_le_parse_smp -0x656 002461 branch le_parse_l2cap + 11 -: 002462 p_le_parse_att: -0x657 002463 call store_contr -0x658 002464 call p_mouse_le_reconn_write_enable_timer_reinit -0x659 002465 call get_contr -0x65a 002466 ifetch 3 ,contr -0x65b 002467 store 3 ,mem_le_att_opcode -0x65c 002468 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request -0x65d 002469 rshift8 pdata ,temp -0x65e 002470 sub temp ,0x24 ,null -0x65f 002471 branch p_le_parse_att1 ,positive -0x660 002472 arg mem_mouse_le_uuid_sup ,temp -0x661 002473 storet 2 ,mem_ui_le_uuid_table -0x662 002474 call le_parse_att + 2 -0x663 002475 setarg 0x8e7a -0x664 002476 store 2 ,mem_ui_le_uuid_table -0x665 002477 rtn -: 002479 p_le_parse_att_read_by_group_type_request: -0x666 002480 call le_parse_att_read_by_group_type_request -0x667 002481 call le_fifo_get_last_tx_ptr -0x668 002482 increase 7 ,contr -0x669 002483 ifetch 1 ,contr -0x66a 002484 rtnne attop_read_by_group_type_response -0x66b 002485 increase 5 ,contr -0x66c 002486 ifetch 2 ,contr -0x66d 002487 arg uuid_service_hids ,temp -0x66e 002488 isub temp ,null -0x66f 002489 nrtn zero -0x670 002490 increase -4 ,contr -0x671 002491 setarg 0x2b -0x672 002492 istore 2 ,contr -0x673 002493 rtn -: 002495 p_le_parse_att1: -0x674 002496 beq attop_read_request ,p_le_parse_att_read_request -0x675 002497 beq attop_write_request ,p_le_parse_att_write_request -0x676 002498 branch le_parse_att + 2 -: 002499 p_le_parse_att_read_request: -0x677 002500 fetcht 2 ,mem_le_att_handle -0x678 002501 fetch 1 ,mem_le_configuration -0x679 002502 bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth -: 002503 p_le_send_att_read_response: -0x67a 002504 fetch 2 ,mem_le_att_handle -0x67b 002505 beq 0x13 ,le_send_att_error_response_notfound -0x67c 002506 fetcht 2 ,mem_le_att_handle -0x67d 002507 branch le_send_att_read_response -: 002508 p_le_send_att_read_response_check_auth: -0x67e 002509 fetch 2 ,mem_le_pairing_handle -0x67f 002510 isub temp ,null -0x680 002511 nbranch p_le_send_att_read_response ,zero -0x681 002512 call le_check_encrypt_state -0x682 002513 nbranch p_le_send_att_read_response ,user -0x683 002514 jam att_err_insufficient_authentication ,mem_le_err_code -0x684 002515 branch le_send_att_error_response -: 002517 p_le_parse_att_write_request: -0x685 002518 copy contr ,rega -0x686 002519 fetch 2 ,mem_le_l2cap_size -0x687 002520 add pdata ,-3 ,regb -0x688 002521 call le_writeatt_cb -0x689 002522 fetch 1 ,mem_mouse_fast_conn_flag -0x68a 002523 beq 0xff ,le_send_att_write_response_check_auth -0x68b 002524 fetch 1 ,mem_mouse_le_reconnect_flag -0x68c 002525 branch le_send_att_write_response_check_auth ,blank -0x68d 002526 fetch 1 ,mem_le_connect_status_flag -0x68e 002527 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth -0x68f 002528 setarg 0x001a -0x690 002529 fetcht 2 ,mem_le_att_handle -0x691 002530 isub temp ,null -0x692 002531 nbranch le_send_att_write_response_check_auth ,zero -0x693 002532 jam att_err_insufficient_authentication ,mem_le_err_code -0x694 002533 branch le_send_att_error_response -: 002535 p_le_parse_smp: -0x695 002536 ifetch 1 ,contr -0x696 002537 beq smp_pairing_request ,p_le_parse_smp_pairing_request -0x697 002538 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed -0x698 002539 branch le_parse_smp + 2 -: 002541 p_le_parse_smp_pairing_request: -0x699 002542 jam 1 ,mem_le_send_security_request_flag -0x69a 002543 branch le_parse_smp_pairing_request -: 002545 p_le_parse_smp_pairing_failed: -0x69b 002546 jam zcode_82 ,mem_zcode_temp_param0 -0x69c 002547 branch p_zcode_entrance -: 002549 p_le_adv_not_match: -0x69d 002550 fetch 1 ,mem_le_ch_mapped -0x69e 002551 bne 39 ,le_adv_loop -0x69f 002553 random pdata -0x6a0 002554 arg 0x1ff ,temp -0x6a1 002555 iand temp ,pdata -0x6a2 002556 add pdata ,250 ,pdata -0x6a3 002557 call delay -0x6a4 002558 arg le_adv_interval_timer ,queue -0x6a5 002559 fetch 2 ,mem_le_adv_interval -0x6a6 002560 branch timer_init -: 002568 p_le_lpm_setmult: -0x6a7 002569 disable wake -0x6a8 002570 branch p_le_lpm_set_mult_attempt ,attempt -0x6a9 002571 nbranch le_lpm_lost ,match -: 002572 p_le_lpm_set_mult_attempt: -0x6aa 002573 call lpm_match -0x6ab 002574 fetch 2 ,mem_rx_window_sniff -0x6ac 002575 store 2 ,mem_le_receive_window -0x6ad 002576 fetch 1 ,mem_le_connect_status_flag -0x6ae 002577 compare 3 ,pdata ,3 -0x6af 002578 nbranch lpm_mult_short ,true -0x6b0 002579 branch le_lpm_set_mult_attempt + 3 -: 002581 p_le_mouse_bb_event_connect_complete: -0x6b1 002582 jam zcode_42 ,mem_zcode_temp_param0 -0x6b2 002583 branch p_zcode_entrance -: 002585 p_twspi_reset: -0x6b3 002586 hfetch 1 ,core_gpio_out3 -0x6b4 002587 and_into 0xfd ,pdata -0x6b5 002588 hstore 1 ,core_gpio_out3 -0x6b6 002589 hfetcht 1 ,core_gpio_oe3 -0x6b7 002590 or_into 0x2 ,temp -0x6b8 002591 hstoret 1 ,core_gpio_oe3 -0x6b9 002592 call twspi_disable -0x6ba 002593 and_into 0xfd ,temp -0x6bb 002594 nop 13 -0x6bc 002595 call p_twspi_enable -0x6bd 002596 hstoret 1 ,core_gpio_oe3 -0x6be 002597 rtn -: 002599 p_spid_init: -0x6bf 002600 call spid_init_common -: 002601 p_twspi_enable: -0x6c0 002602 hfetch 1 ,core_gpio_sel1 -0x6c1 002603 set1 0 ,pdata -0x6c2 002604 set0 1 ,pdata -0x6c3 002605 set0 3 ,pdata -0x6c4 002606 hstore 1 ,core_gpio_sel1 -0x6c5 002607 rtn -: 002652 p_quit_connection_cont: -0x6c6 002656 call app_disconn_reason_collect_bt -0x6c7 002657 call sniff_exit -0x6c8 002658 jam bt_evt_bb_disconnected ,mem_fifo_temp -0x6c9 002659 call ui_ipc_send_event -0x6ca 002660 call init_lmp_work -0x6cb 002661 call l2cap_init_work -0x6cc 002662 branch quit_connection_cont + 8 -: 002664 p_prepare_tx: -0x6cd 002665 fetch 1 ,mem_state -0x6ce 002666 isolate1 state_inconn ,pdata -0x6cf 002667 call p_bt_power_ctrl ,true -0x6d0 002668 branch prepare_tx + 1 -: 002669 p_bt_power_ctrl: -0x6d1 002670 fetch 1 ,mem_arq -0x6d2 002671 isolate1 wack ,pdata -0x6d3 002672 call power_ctrl_pac_succ_decrs ,true -0x6d4 002673 ncall power_ctrl_pac_succ_incrs ,true -: 002674 power_ctrl_start: -0x6d5 002675 fetch 2 ,mem_ui_state_map -0x6d6 002676 rtnbit1 ui_state_ble_adv -0x6d7 002677 rtnbit1 ui_state_bt_reconnect -0x6d8 002678 rtnbit1 ui_state_bt_discovery -0x6d9 002680 arg mem_rssi_signal_buf ,rega -0x6da 002681 call p_rssi_average -0x6db 002682 storet 1 ,mem_rssi_avg_received -0x6dc 002684 setarg rssi_dis_max_24g -0x6dd 002685 bmark1 mark_24g ,power_ctrl_start_next -0x6de 002686 setarg rssi_dis_max_ble -: 002687 power_ctrl_start_next: -0x6df 002688 isub temp ,null -0x6e0 002689 nbranch power_ctrl_txpower_incrs_force ,positive -0x6e1 002691 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x6e2 002692 sub pdata ,2 ,null -0x6e3 002693 nbranch power_ctrl_txpower_decrs_check ,positive -0x6e4 002694 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x6e5 002695 beq 0 ,power_ctrl_txpower_incrs -0x6e6 002696 rtn -: 002698 p_slave_conn_recv_packet: -0x6e7 002699 call slave_receive_master_slot -0x6e8 002700 nbranch shutdown_radio ,sync -0x6e9 002701 call save_rssi -0x6ea 002702 call p_rssi_signal -0x6eb 002703 branch slave_conn_recv_packet + 4 -: 002705 p_lpm_dispatch: -0x6ec 002706 rtnmark1 mark_24g -0x6ed 002707 call lpo_calibration -0x6ee 002708 fetch 3 ,mem_clks_per_lpo -0x6ef 002709 rtn blank -0x6f0 002710 fetch 1 ,mem_lpm_mode -0x6f1 002711 rtn blank -0x6f2 002712 fetch 1 ,mem_mouse_multi_led_on_timer -0x6f3 002713 nrtn blank -0x6f4 002715 fetch 1 ,mem_ssp_enable -0x6f5 002716 branch p_lpm_dispatch_next ,blank -0x6f6 002717 fetch 1 ,mem_sp_local_key_invalid -0x6f7 002718 rtn blank -: 002719 p_lpm_dispatch_next: -0x6f8 002720 fetch 1 ,mem_le_sc_calc -0x6f9 002721 nrtn blank -0x6fa 002722 call lpm_check_wake_lock -0x6fb 002723 nrtn blank -0x6fc 002724 fetch 1 ,mem_context -0x6fd 002725 compare 3 ,pdata ,0x7 -0x6fe 002726 nbranch lpm_dispatch_unconn ,true -0x6ff 002727 fetch 2 ,mem_context + coffset_tsniff -0x700 002728 arg 0xffff ,temp -0x701 002729 isub temp ,null -0x702 002730 rtn zero -0x703 002731 branch lpm_dispatch_next + 9 -: 002733 p_lpm_set_mult: -0x704 002734 disable wake -0x705 002735 fetch 1 ,mem_state -0x706 002736 rtnbit0 state_insniff -0x707 002737 nbranch lpm_not_match ,match -0x708 002738 call lpm_match -0x709 002739 fetch 2 ,mem_rx_window_sniff -0x70a 002740 store 2 ,mem_rx_window -0x70b 002741 fetch 1 ,mem_arq -0x70c 002742 bbit1 wack ,lpm_mult_short -0x70d 002743 bmark0 mark_lpm_mult_enable ,lpm_mult_short -0x70e 002744 call l2cap_malloc_is_fifo_empty -0x70f 002745 nbranch lpm_mult_short ,blank -0x710 002746 call p_lpm_set_attemp_timeout ,blank -0x711 002747 branch lpm_set_mult + 13 -: 002748 p_lpm_set_attemp_timeout: -0x712 002749 jam 1 ,mem_current_sniff_attempt -0x713 002750 jam 0 ,mem_current_sniff_timeout -0x714 002751 rtn -: 002753 p_mouse_bb_disconnected: -0x715 002754 fetch 1 ,mem_mouse_multi_led_blink_count -0x716 002755 nrtn blank -0x717 002757 jam zcode_10 ,mem_zcode_temp_param0 -0x718 002758 branch p_zcode_entrance -: 002889 p_check_51cmd_once_continue: -0x719 002890 call lmo_fifo_check -0x71a 002891 nbranch check_51cmd_restore ,blank -0x71b 002892 fetch 1 ,mem_fifo_temp -0x71c 002893 bmark0 mark_context ,check_51cmd_check_idle -0x71d 002894 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info -0x71e 002895 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info -0x71f 002896 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param -0x720 002897 branch check_51cmd_once_continue + 2 -: 002899 p_check_51cmd_ble_update_connect_param: -0x721 002900 call le_fifo_check_full -0x722 002901 nrtn blank -0x723 002902 branch le_l2cap_tx_update_req -: 002904 p_flash_store_le_reconn_info: -0x724 002905 jam rec_4_mode ,mem_record_bt_mode -0x725 002906 fetch 6 ,mem_le_plap -0x726 002907 branch p_flash_store_reconn_info -: 002908 p_flash_store_bd_reconn_info: -0x727 002909 jam rec_3_mode ,mem_record_bt_mode -0x728 002910 fetch 6 ,mem_plap -: 002911 p_flash_store_reconn_info: -0x729 002912 store 6 ,mem_temp_lap -: 002913 p_mouse_store_remote_bdaddr: -0x72a 002914 fetch mouse_flag_len ,mem_mouse_flag -0x72b 002915 rtnbit0 mouse_store_eeprom_flag -0x72c 002916 arg mouse_store_eeprom_flag ,queue -0x72d 002917 call mouse_disable_function_flag -0x72e 002918 call mouse_check_device_addr -: 002919 p_mouse_unplug_clean_bdaddr: -0x72f 002920 call mouse_before_store_reconn_info -0x730 002921 branch p_mouse_store_flash_device_info -: 002923 p_mouse_multi_led_blink_timer: -0x731 002924 fetch 1 ,mem_mouse_multi_led_blink_enable -0x732 002925 rtn blank -0x733 002926 fetch 1 ,mem_mouse_multi_led_type -0x734 002927 beq multi_led_on ,p_mouse_multi_led_type_on -0x735 002928 beq multi_led_blink ,p_mouse_multi_led_type_blink -0x736 002929 rtn -: 002931 p_mouse_multi_led_type_on: -0x737 002932 call p_mouse_multi_led_on -0x738 002933 fetch 1 ,mem_mouse_multi_led_on_timer -0x739 002934 increase 1 ,pdata -0x73a 002935 store 1 ,mem_mouse_multi_led_on_timer -0x73b 002936 fetcht 1 ,mem_mouse_multi_led_on_timer_init -0x73c 002937 isub temp ,null -0x73d 002938 call p_mouse_multi_led_off_poweron2s ,zero -0x73e 002939 rtn -: 002940 p_mouse_multi_led_off_poweron2s: -0x73f 002941 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0x740 002942 branch p_mouse_multi_led_off -: 002944 p_mouse_multi_led_type_blink: -0x741 002945 fetch 1 ,mem_mouse_multi_led_blink_timer -0x742 002946 increase -1 ,pdata -0x743 002947 store 1 ,mem_mouse_multi_led_blink_timer -0x744 002948 nrtn blank -0x745 002949 fetch 1 ,mem_mouse_multi_led_blink_timer_init -0x746 002950 store 1 ,mem_mouse_multi_led_blink_timer -0x747 002951 fetch 1 ,mem_mouse_multi_led_blink_count_limited -0x748 002952 branch p_mouse_multi_led_blink_count_no_limited ,blank -0x749 002953 fetch 1 ,mem_mouse_multi_led_blink_count -0x74a 002954 branch p_mouse_multi_led_blink_off ,blank -0x74b 002955 increase -1 ,pdata -0x74c 002956 store 1 ,mem_mouse_multi_led_blink_count -: 002957 p_mouse_multi_led_blink_count_no_limited: -0x74d 002958 fetch 1 ,mem_mouse_multi_led_state -0x74e 002959 beq on ,p_mouse_multi_led_off -0x74f 002960 beq off ,p_mouse_multi_led_on -0x750 002961 rtn -: 002963 p_mouse_multi_led_on: -0x751 002964 jam on ,mem_mouse_multi_led_state -0x752 002965 fetch 1 ,mem_device_flag -0x753 002966 beq 1 ,p_mouse_multi_24g_led_on -0x754 002967 beq 2 ,p_mouse_multi_bt_led_on -0x755 002968 branch p_mouse_multi_ble_led_on -: 002969 p_mouse_multi_bt_led_on: -0x756 002970 branch mouse_device2_led_on -: 002972 p_mouse_multi_24g_led_on: -0x757 002973 branch mouse_device1_led_on -: 002975 p_mouse_multi_ble_led_on: -0x758 002976 branch mouse_device3_led_on -: 002978 p_mouse_discovey_led_blink_off: -0x759 002979 fetch 1 ,mem_mouse_multi_led_on_timer -0x75a 002980 nrtn blank -0x75b 002981 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -0x75c 002982 nrtn blank -: 002983 p_mouse_multi_led_blink_off: -0x75d 002984 setarg 0 -0x75e 002985 store 3 ,mem_mouse_multi_led_blink_timer -: 002986 p_mouse_multi_led_off: -0x75f 002987 fetch 1 ,mem_mouse_multi_led_blink_count -0x760 002988 nbranch p_mouse_multi_led_off_wait_blink_over ,blank -0x761 002989 jam 0 ,mem_mouse_multi_led_blink_enable -0x762 002990 jam 0 ,mem_mouse_multi_led_type -: 002991 p_mouse_multi_led_off_wait_blink_over: -0x763 002992 jam 0 ,mem_mouse_multi_led_on_timer -0x764 002993 jam off ,mem_mouse_multi_led_state -0x765 002997 call mouse_devce_led_off + 1 -0x766 002999 fetch 1 ,mem_mouse_multi_led_blink_count -0x767 003000 nrtn blank -0x768 003002 fetch 1 ,mem_mouse_connected_state -0x769 003003 nbranch app_enter_hibernate ,blank -0x76a 003004 rtn -: 003006 p_mouse_dpi_multi_led_blink: -0x76b 003007 jam 3 ,mem_mouse_multi_led_blink_timer_init -0x76c 003008 jam 1 ,mem_mouse_multi_led_blink_count_limited -0x76d 003009 branch p_mouse_multi_led_blink_enable -: 003011 p_mouse_mode_bt_device_multi_led_on: -: 003012 p_mouse_mode_24g_device_multi_led_on: -0x76e 003013 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag -0x76f 003014 jam on ,mem_mouse_multi_led_blink_enable -0x770 003015 jam multi_led_on ,mem_mouse_multi_led_type -0x771 003016 jam 0 ,mem_mouse_multi_led_on_timer -0x772 003017 rtn -: 003019 p_mouse_discovery_multi_led_blink: -0x773 003020 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0x774 003021 jam 3 ,mem_mouse_multi_led_blink_timer_init -0x775 003022 jam 0 ,mem_mouse_multi_led_blink_count_limited -0x776 003023 jam 1 ,mem_mouse_multi_led_blink_count -: 003024 p_mouse_multi_led_blink_enable: -0x777 003025 jam 5 ,mem_mouse_multi_led_blink_timer -0x778 003026 jam on ,mem_mouse_multi_led_blink_enable -0x779 003027 jam multi_led_blink ,mem_mouse_multi_led_type -0x77a 003028 rtn -: 003030 power_ctrl_pac_succ_cnt_init: -0x77b 003031 jam 1 ,mem_power_ctrl_level -0x77c 003032 jam 0 ,mem_power_ctrl_pac_succ_cnt -0x77d 003033 rtn -: 003034 power_ctrl_pac_succ_incrs: -0x77e 003035 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x77f 003036 increase 1 ,pdata -0x780 003037 store 1 ,mem_power_ctrl_pac_succ_cnt +: 002355 p_le_prepare_tx: +0x60b 002356 fetch 1 ,mem_le_arq +0x60c 002357 bbit1 wak ,p_le_prepare_tx_wak +0x60d 002358 call power_ctrl_pac_succ_incrs +0x60e 002359 fetch 1 ,mem_empty_count +0x60f 002360 nbranch p_le_send_empyt ,blank +0x610 002361 fetch 1 ,mem_le_state +0x611 002362 bbit0 lestate_encryption ,p_le_tx_4 +0x612 002363 fetch 1 ,mem_le_rxbuf + 1 +0x613 002364 branch p_le_tx_4 ,blank +0x614 002365 branch le_send_empty +: 002366 p_le_send_empyt: +0x615 002367 fetch 1 ,mem_empty_count +0x616 002368 increase -1 ,pdata +0x617 002369 store 1 ,mem_empty_count +0x618 002370 branch le_send_empty +: 002371 p_le_tx_4: +0x619 002372 fetch 1 ,mem_le_pairing_state +0x61a 002373 bne flag_le_pairing_after_auth ,p_in_le_tx_4 +0x61b 002374 jam 3 ,mem_empty_count +: 002375 p_in_le_tx_4: +0x61c 002376 call le_fifo_check_nearly_full +0x61d 002377 call p_mouse_data_pull ,blank +0x61e 002378 branch le_prepare_tx + 4 +: 002380 p_le_check_tx_retransmit_setmd: +0x61f 002381 fetch 1 ,mem_le_connect_status_flag +0x620 002382 and pdata ,0x03 ,pdata +0x621 002383 rtnne 0x03 +0x622 002384 fetch 1 ,mem_mouse_data_queue_num +0x623 002385 rtn blank +0x624 002386 fetch 1 ,mem_le_txlen +0x625 002387 rtn blank +0x626 002388 fetch 1 ,mem_le_txheader +0x627 002389 set1 md ,pdata +0x628 002390 store 1 ,mem_le_txheader +0x629 002391 branch le_set_md +: 002404 p_le_prepare_tx_wak: +0x62a 002405 call p_le_check_tx_retransmit_setmd +: 002406 p_le_power_ctrl_pac_succ_decrs: +: 002407 power_ctrl_pac_succ_decrs: +0x62b 002408 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x62c 002409 sub pdata ,2 ,null +0x62d 002410 ncall power_ctrl_pac_succ_cnt_reinit ,positive +0x62e 002411 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x62f 002412 rtneq 0 +0x630 002413 increase -1 ,pdata +0x631 002414 store 1 ,mem_power_ctrl_pac_succ_cnt +0x632 002415 rtn +: 002417 p_mouse_le_reconn_write_enable_timer_reinit: +0x633 002418 fetch 1 ,mem_mouse_le_reconnect_flag +0x634 002419 rtn blank +0x635 002420 fetch 1 ,mem_le_connect_status_flag +0x636 002421 and pdata ,0x03 ,pdata +0x637 002422 rtneq 0x03 +0x638 002423 jam 10 ,mem_le_start_encrypt_timer +0x639 002424 rtn +: 002426 p_le_parse: +0x63a 002427 rtnmark1 mark_old_packet +0x63b 002428 call le_fifo_check_full +0x63c 002429 nrtn blank +0x63d 002430 fetch 1 ,mem_le_rxbuf +0x63e 002431 and pdata ,0x3 ,pdata +0x63f 002432 store 1 ,mem_le_packet_llid +0x640 002433 ifetch 1 ,contr +0x641 002434 and pdata ,0x1f ,pdata +0x642 002435 store 1 ,mem_le_packet_size +0x643 002436 rtn blank +0x644 002437 copy contr ,pdata +0x645 002438 store 2 ,mem_le_payload_ptr +0x646 002439 fetch 1 ,mem_le_packet_llid +0x647 002440 beq llid_le_ll ,p_le_parse_ll +0x648 002441 branch le_parse_l2cap +: 002442 p_le_parse_ll: +0x649 002443 fetch 1 ,mem_le_rxbuf + 2 +0x64a 002444 beq ll_channel_map_req ,p_le_parse_channel_map_req +0x64b 002445 branch le_parse_ll + 1 +: 002446 p_le_parse_channel_map_req: +0x64c 002447 ifetch 5 ,contr +0x64d 002448 store 5 ,mem_le_new_map +0x64e 002449 ifetch 2 ,contr +0x64f 002450 store 2 ,mem_le_instant +0x650 002451 branch le_parse_channel_map_req + 7 +: 002453 p_le_parse_l2cap: +0x651 002454 ifetch 2 ,contr +0x652 002455 beq le_l2cap_cid_att ,p_le_parse_att +0x653 002456 beq le_l2cap_cid_smp ,p_le_parse_smp +0x654 002457 branch le_parse_l2cap + 11 +: 002458 p_le_parse_att: +0x655 002459 call store_contr +0x656 002460 call p_mouse_le_reconn_write_enable_timer_reinit +0x657 002461 call get_contr +0x658 002462 ifetch 3 ,contr +0x659 002463 store 3 ,mem_le_att_opcode +0x65a 002464 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request +0x65b 002465 rshift8 pdata ,temp +0x65c 002466 sub temp ,0x24 ,null +0x65d 002467 branch p_le_parse_att1 ,positive +0x65e 002468 arg mem_mouse_le_uuid_sup ,temp +0x65f 002469 storet 2 ,mem_ui_le_uuid_table +0x660 002470 call le_parse_att + 2 +0x661 002471 setarg 0x8e7a +0x662 002472 store 2 ,mem_ui_le_uuid_table +0x663 002473 rtn +: 002475 p_le_parse_att_read_by_group_type_request: +0x664 002476 call le_parse_att_read_by_group_type_request +0x665 002477 call le_fifo_get_last_tx_ptr +0x666 002478 increase 7 ,contr +0x667 002479 ifetch 1 ,contr +0x668 002480 rtnne attop_read_by_group_type_response +0x669 002481 increase 5 ,contr +0x66a 002482 ifetch 2 ,contr +0x66b 002483 arg uuid_service_hids ,temp +0x66c 002484 isub temp ,null +0x66d 002485 nrtn zero +0x66e 002486 increase -4 ,contr +0x66f 002487 setarg 0x2b +0x670 002488 istore 2 ,contr +0x671 002489 rtn +: 002491 p_le_parse_att1: +0x672 002492 beq attop_read_request ,p_le_parse_att_read_request +0x673 002493 beq attop_write_request ,p_le_parse_att_write_request +0x674 002494 branch le_parse_att + 2 +: 002495 p_le_parse_att_read_request: +0x675 002496 fetcht 2 ,mem_le_att_handle +0x676 002497 fetch 1 ,mem_le_configuration +0x677 002498 bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth +: 002499 p_le_send_att_read_response: +0x678 002500 fetch 2 ,mem_le_att_handle +0x679 002501 beq 0x13 ,le_send_att_error_response_notfound +0x67a 002502 fetcht 2 ,mem_le_att_handle +0x67b 002503 branch le_send_att_read_response +: 002504 p_le_send_att_read_response_check_auth: +0x67c 002505 fetch 2 ,mem_le_pairing_handle +0x67d 002506 isub temp ,null +0x67e 002507 nbranch p_le_send_att_read_response ,zero +0x67f 002508 call le_check_encrypt_state +0x680 002509 nbranch p_le_send_att_read_response ,user +0x681 002510 jam att_err_insufficient_authentication ,mem_le_err_code +0x682 002511 branch le_send_att_error_response +: 002513 p_le_parse_att_write_request: +0x683 002514 copy contr ,rega +0x684 002515 fetch 2 ,mem_le_l2cap_size +0x685 002516 add pdata ,-3 ,regb +0x686 002517 call le_writeatt_cb +0x687 002518 fetch 1 ,mem_mouse_fast_conn_flag +0x688 002519 beq 0xff ,le_send_att_write_response_check_auth +0x689 002520 fetch 1 ,mem_mouse_le_reconnect_flag +0x68a 002521 branch le_send_att_write_response_check_auth ,blank +0x68b 002522 fetch 1 ,mem_le_connect_status_flag +0x68c 002523 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth +0x68d 002524 setarg 0x001a +0x68e 002525 fetcht 2 ,mem_le_att_handle +0x68f 002526 isub temp ,null +0x690 002527 nbranch le_send_att_write_response_check_auth ,zero +0x691 002528 jam att_err_insufficient_authentication ,mem_le_err_code +0x692 002529 branch le_send_att_error_response +: 002531 p_le_parse_smp: +0x693 002532 ifetch 1 ,contr +0x694 002533 beq smp_pairing_request ,p_le_parse_smp_pairing_request +0x695 002534 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed +0x696 002535 branch le_parse_smp + 2 +: 002537 p_le_parse_smp_pairing_request: +0x697 002538 jam 1 ,mem_le_send_security_request_flag +0x698 002539 branch le_parse_smp_pairing_request +: 002541 p_le_parse_smp_pairing_failed: +0x699 002542 jam zcode_82 ,mem_zcode_temp_param0 +0x69a 002543 branch p_zcode_entrance +: 002545 p_le_adv_not_match: +0x69b 002546 fetch 1 ,mem_le_ch_mapped +0x69c 002547 bne 39 ,le_adv_loop +0x69d 002549 random pdata +0x69e 002550 arg 0x1ff ,temp +0x69f 002551 iand temp ,pdata +0x6a0 002552 add pdata ,250 ,pdata +0x6a1 002553 call delay +0x6a2 002554 arg le_adv_interval_timer ,queue +0x6a3 002555 fetch 2 ,mem_le_adv_interval +0x6a4 002556 branch timer_init +: 002564 p_le_lpm_setmult: +0x6a5 002565 disable wake +0x6a6 002566 branch p_le_lpm_set_mult_attempt ,attempt +0x6a7 002567 nbranch le_lpm_lost ,match +: 002568 p_le_lpm_set_mult_attempt: +0x6a8 002569 call lpm_match +0x6a9 002570 fetch 2 ,mem_rx_window_sniff +0x6aa 002571 store 2 ,mem_le_receive_window +0x6ab 002572 fetch 1 ,mem_le_connect_status_flag +0x6ac 002573 compare 3 ,pdata ,3 +0x6ad 002574 nbranch lpm_mult_short ,true +0x6ae 002575 branch le_lpm_set_mult_attempt + 3 +: 002577 p_le_mouse_bb_event_connect_complete: +0x6af 002578 jam zcode_42 ,mem_zcode_temp_param0 +0x6b0 002579 branch p_zcode_entrance +: 002581 p_twspi_reset: +0x6b1 002582 hfetch 1 ,core_gpio_out3 +0x6b2 002583 and_into 0xfd ,pdata +0x6b3 002584 hstore 1 ,core_gpio_out3 +0x6b4 002585 hfetcht 1 ,core_gpio_oe3 +0x6b5 002586 or_into 0x2 ,temp +0x6b6 002587 hstoret 1 ,core_gpio_oe3 +0x6b7 002588 call twspi_disable +0x6b8 002589 and_into 0xfd ,temp +0x6b9 002590 nop 13 +0x6ba 002591 call p_twspi_enable +0x6bb 002592 hstoret 1 ,core_gpio_oe3 +0x6bc 002593 rtn +: 002595 p_spid_init: +0x6bd 002596 call spid_init_common +: 002597 p_twspi_enable: +0x6be 002598 hfetch 1 ,core_gpio_sel1 +0x6bf 002599 set1 0 ,pdata +0x6c0 002600 set0 1 ,pdata +0x6c1 002601 set0 3 ,pdata +0x6c2 002602 hstore 1 ,core_gpio_sel1 +0x6c3 002603 rtn +: 002648 p_quit_connection_cont: +0x6c4 002652 call app_disconn_reason_collect_bt +0x6c5 002653 call sniff_exit +0x6c6 002654 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x6c7 002655 call ui_ipc_send_event +0x6c8 002656 call init_lmp_work +0x6c9 002657 call l2cap_init_work +0x6ca 002658 branch quit_connection_cont + 8 +: 002660 p_prepare_tx: +0x6cb 002661 fetch 1 ,mem_state +0x6cc 002662 isolate1 state_inconn ,pdata +0x6cd 002663 call p_bt_power_ctrl ,true +0x6ce 002664 branch prepare_tx + 1 +: 002665 p_bt_power_ctrl: +0x6cf 002666 fetch 1 ,mem_arq +0x6d0 002667 isolate1 wack ,pdata +0x6d1 002668 call power_ctrl_pac_succ_decrs ,true +0x6d2 002669 ncall power_ctrl_pac_succ_incrs ,true +: 002670 power_ctrl_start: +0x6d3 002671 fetch 2 ,mem_ui_state_map +0x6d4 002672 rtnbit1 ui_state_ble_adv +0x6d5 002673 rtnbit1 ui_state_bt_reconnect +0x6d6 002674 rtnbit1 ui_state_bt_discovery +0x6d7 002676 arg mem_rssi_signal_buf ,rega +0x6d8 002677 call p_rssi_average +0x6d9 002678 storet 1 ,mem_rssi_avg_received +0x6da 002680 setarg rssi_dis_max_24g +0x6db 002681 bmark1 mark_24g ,power_ctrl_start_next +0x6dc 002682 setarg rssi_dis_max_ble +: 002683 power_ctrl_start_next: +0x6dd 002684 isub temp ,null +0x6de 002685 nbranch power_ctrl_txpower_incrs_force ,positive +0x6df 002687 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x6e0 002688 sub pdata ,2 ,null +0x6e1 002689 nbranch power_ctrl_txpower_decrs_check ,positive +0x6e2 002690 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x6e3 002691 beq 0 ,power_ctrl_txpower_incrs +0x6e4 002692 rtn +: 002694 p_slave_conn_recv_packet: +0x6e5 002695 call slave_receive_master_slot +0x6e6 002696 nbranch shutdown_radio ,sync +0x6e7 002697 call save_rssi +0x6e8 002698 call p_rssi_signal +0x6e9 002699 branch slave_conn_recv_packet + 4 +: 002701 p_lpm_dispatch: +0x6ea 002702 rtnmark1 mark_24g +0x6eb 002703 call lpo_calibration +0x6ec 002704 fetch 3 ,mem_clks_per_lpo +0x6ed 002705 rtn blank +0x6ee 002706 fetch 1 ,mem_lpm_mode +0x6ef 002707 rtn blank +0x6f0 002708 fetch 1 ,mem_mouse_multi_led_on_timer +0x6f1 002709 nrtn blank +0x6f2 002711 fetch 1 ,mem_ssp_enable +0x6f3 002712 branch p_lpm_dispatch_next ,blank +0x6f4 002713 fetch 1 ,mem_sp_local_key_invalid +0x6f5 002714 rtn blank +: 002715 p_lpm_dispatch_next: +0x6f6 002716 fetch 1 ,mem_le_sc_calc +0x6f7 002717 nrtn blank +0x6f8 002718 call lpm_check_wake_lock +0x6f9 002719 nrtn blank +0x6fa 002720 fetch 1 ,mem_context +0x6fb 002721 compare 3 ,pdata ,0x7 +0x6fc 002722 nbranch lpm_dispatch_unconn ,true +0x6fd 002723 fetch 2 ,mem_context + coffset_tsniff +0x6fe 002724 arg 0xffff ,temp +0x6ff 002725 isub temp ,null +0x700 002726 rtn zero +0x701 002727 branch lpm_dispatch_next + 9 +: 002729 p_lpm_set_mult: +0x702 002730 disable wake +0x703 002731 fetch 1 ,mem_state +0x704 002732 rtnbit0 state_insniff +0x705 002733 nbranch lpm_not_match ,match +0x706 002734 call lpm_match +0x707 002735 fetch 2 ,mem_rx_window_sniff +0x708 002736 store 2 ,mem_rx_window +0x709 002737 fetch 1 ,mem_arq +0x70a 002738 bbit1 wack ,lpm_mult_short +0x70b 002739 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x70c 002740 call l2cap_malloc_is_fifo_empty +0x70d 002741 nbranch lpm_mult_short ,blank +0x70e 002742 call p_lpm_set_attemp_timeout ,blank +0x70f 002743 branch lpm_set_mult + 13 +: 002744 p_lpm_set_attemp_timeout: +0x710 002745 jam 1 ,mem_current_sniff_attempt +0x711 002746 jam 0 ,mem_current_sniff_timeout +0x712 002747 rtn +: 002749 p_mouse_bb_disconnected: +0x713 002750 fetch 1 ,mem_mouse_multi_led_blink_count +0x714 002751 nrtn blank +0x715 002753 jam zcode_10 ,mem_zcode_temp_param0 +0x716 002754 branch p_zcode_entrance +: 002885 p_check_51cmd_once_continue: +0x717 002886 call lmo_fifo_check +0x718 002887 nbranch check_51cmd_restore ,blank +0x719 002888 fetch 1 ,mem_fifo_temp +0x71a 002889 bmark0 mark_context ,check_51cmd_check_idle +0x71b 002890 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info +0x71c 002891 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info +0x71d 002892 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param +0x71e 002893 branch check_51cmd_once_continue + 2 +: 002895 p_check_51cmd_ble_update_connect_param: +0x71f 002896 call le_fifo_check_full +0x720 002897 nrtn blank +0x721 002898 branch le_l2cap_tx_update_req +: 002900 p_flash_store_le_reconn_info: +0x722 002901 jam rec_4_mode ,mem_record_bt_mode +0x723 002902 fetch 6 ,mem_le_plap +0x724 002903 branch p_flash_store_reconn_info +: 002904 p_flash_store_bd_reconn_info: +0x725 002905 jam rec_3_mode ,mem_record_bt_mode +0x726 002906 fetch 6 ,mem_plap +: 002907 p_flash_store_reconn_info: +0x727 002908 store 6 ,mem_temp_lap +: 002909 p_mouse_store_remote_bdaddr: +0x728 002910 fetch mouse_flag_len ,mem_mouse_flag +0x729 002911 rtnbit0 mouse_store_eeprom_flag +0x72a 002912 arg mouse_store_eeprom_flag ,queue +0x72b 002913 call mouse_disable_function_flag +0x72c 002914 call mouse_check_device_addr +: 002915 p_mouse_unplug_clean_bdaddr: +0x72d 002916 call mouse_before_store_reconn_info +0x72e 002917 branch p_mouse_store_flash_device_info +: 002919 p_mouse_multi_led_blink_timer: +0x72f 002920 fetch 1 ,mem_mouse_multi_led_blink_enable +0x730 002921 rtn blank +0x731 002922 fetch 1 ,mem_mouse_multi_led_type +0x732 002923 beq multi_led_on ,p_mouse_multi_led_type_on +0x733 002924 beq multi_led_blink ,p_mouse_multi_led_type_blink +0x734 002925 rtn +: 002927 p_mouse_multi_led_type_on: +0x735 002928 call p_mouse_multi_led_on +0x736 002929 fetch 1 ,mem_mouse_multi_led_on_timer +0x737 002930 increase 1 ,pdata +0x738 002931 store 1 ,mem_mouse_multi_led_on_timer +0x739 002932 fetcht 1 ,mem_mouse_multi_led_on_timer_init +0x73a 002933 isub temp ,null +0x73b 002934 call p_mouse_multi_led_off_poweron2s ,zero +0x73c 002935 rtn +: 002936 p_mouse_multi_led_off_poweron2s: +0x73d 002937 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +0x73e 002938 branch p_mouse_multi_led_off +: 002940 p_mouse_multi_led_type_blink: +0x73f 002941 fetch 1 ,mem_mouse_multi_led_blink_timer +0x740 002942 increase -1 ,pdata +0x741 002943 store 1 ,mem_mouse_multi_led_blink_timer +0x742 002944 nrtn blank +0x743 002945 fetch 1 ,mem_mouse_multi_led_blink_timer_init +0x744 002946 store 1 ,mem_mouse_multi_led_blink_timer +0x745 002947 fetch 1 ,mem_mouse_multi_led_blink_count_limited +0x746 002948 branch p_mouse_multi_led_blink_count_no_limited ,blank +0x747 002949 fetch 1 ,mem_mouse_multi_led_blink_count +0x748 002950 branch p_mouse_multi_led_blink_off ,blank +0x749 002951 increase -1 ,pdata +0x74a 002952 store 1 ,mem_mouse_multi_led_blink_count +: 002953 p_mouse_multi_led_blink_count_no_limited: +0x74b 002954 fetch 1 ,mem_mouse_multi_led_state +0x74c 002955 beq on ,p_mouse_multi_led_off +0x74d 002956 beq off ,p_mouse_multi_led_on +0x74e 002957 rtn +: 002959 p_mouse_multi_led_on: +0x74f 002960 jam on ,mem_mouse_multi_led_state +0x750 002961 fetch 1 ,mem_device_flag +0x751 002962 beq 1 ,p_mouse_multi_24g_led_on +0x752 002963 beq 2 ,p_mouse_multi_bt_led_on +0x753 002964 branch p_mouse_multi_ble_led_on +: 002965 p_mouse_multi_bt_led_on: +0x754 002966 branch mouse_device2_led_on +: 002968 p_mouse_multi_24g_led_on: +0x755 002969 branch mouse_device1_led_on +: 002971 p_mouse_multi_ble_led_on: +0x756 002972 branch mouse_device3_led_on +: 002974 p_mouse_discovey_led_blink_off: +0x757 002975 fetch 1 ,mem_mouse_multi_led_on_timer +0x758 002976 nrtn blank +0x759 002977 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +0x75a 002978 nrtn blank +: 002979 p_mouse_multi_led_blink_off: +0x75b 002980 setarg 0 +0x75c 002981 store 3 ,mem_mouse_multi_led_blink_timer +: 002982 p_mouse_multi_led_off: +0x75d 002983 fetch 1 ,mem_mouse_multi_led_blink_count +0x75e 002984 nbranch p_mouse_multi_led_off_wait_blink_over ,blank +0x75f 002985 jam 0 ,mem_mouse_multi_led_blink_enable +0x760 002986 jam 0 ,mem_mouse_multi_led_type +: 002987 p_mouse_multi_led_off_wait_blink_over: +0x761 002988 jam 0 ,mem_mouse_multi_led_on_timer +0x762 002989 jam off ,mem_mouse_multi_led_state +0x763 002993 call mouse_devce_led_off + 1 +0x764 002995 fetch 1 ,mem_mouse_multi_led_blink_count +0x765 002996 nrtn blank +0x766 002998 fetch 1 ,mem_mouse_connected_state +0x767 002999 nbranch app_enter_hibernate ,blank +0x768 003000 rtn +: 003002 p_mouse_dpi_multi_led_blink: +0x769 003003 jam 3 ,mem_mouse_multi_led_blink_timer_init +0x76a 003004 jam 1 ,mem_mouse_multi_led_blink_count_limited +0x76b 003005 branch p_mouse_multi_led_blink_enable +: 003007 p_mouse_mode_bt_device_multi_led_on: +: 003008 p_mouse_mode_24g_device_multi_led_on: +0x76c 003009 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag +0x76d 003010 jam on ,mem_mouse_multi_led_blink_enable +0x76e 003011 jam multi_led_on ,mem_mouse_multi_led_type +0x76f 003012 jam 0 ,mem_mouse_multi_led_on_timer +0x770 003013 rtn +: 003015 p_mouse_discovery_multi_led_blink: +0x771 003016 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +0x772 003017 jam 3 ,mem_mouse_multi_led_blink_timer_init +0x773 003018 jam 0 ,mem_mouse_multi_led_blink_count_limited +0x774 003019 jam 1 ,mem_mouse_multi_led_blink_count +: 003020 p_mouse_multi_led_blink_enable: +0x775 003021 jam 5 ,mem_mouse_multi_led_blink_timer +0x776 003022 jam on ,mem_mouse_multi_led_blink_enable +0x777 003023 jam multi_led_blink ,mem_mouse_multi_led_type +0x778 003024 rtn +: 003026 power_ctrl_pac_succ_cnt_init: +0x779 003027 jam 1 ,mem_power_ctrl_level +0x77a 003028 jam 0 ,mem_power_ctrl_pac_succ_cnt +0x77b 003029 rtn +: 003030 power_ctrl_pac_succ_incrs: +0x77c 003031 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x77d 003032 increase 1 ,pdata +0x77e 003033 store 1 ,mem_power_ctrl_pac_succ_cnt +0x77f 003034 rtn +: 003036 power_ctrl_pac_succ_cnt_reinit: +0x780 003037 jam 3 ,mem_power_ctrl_pac_succ_cnt 0x781 003038 rtn -: 003040 power_ctrl_pac_succ_cnt_reinit: -0x782 003041 jam 3 ,mem_power_ctrl_pac_succ_cnt -0x783 003042 rtn -: 003044 power_ctrl_txpower_decrs_check: -0x784 003045 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x785 003046 rtnne 32 -0x786 003047 jam 0 ,mem_power_ctrl_pac_succ_cnt -: 003048 power_ctrl_txpower_decrs: -0x787 003049 fetcht 1 ,mem_rssi_avg_received -0x788 003050 setarg rssi_dis_min_24g -0x789 003051 bmark1 mark_24g ,power_ctrl_txpower_decrs_next -0x78a 003052 setarg rssi_dis_min_ble -: 003053 power_ctrl_txpower_decrs_next: -0x78b 003054 isub temp ,null -0x78c 003055 nrtn positive -0x78d 003056 fetch 1 ,mem_power_ctrl_level -0x78e 003057 beq 0 ,power_ctrl_decrs_level0 -0x78f 003058 increase -1 ,pdata -0x790 003059 store 1 ,mem_power_ctrl_level -0x791 003060 beq 0 ,power_ctrl_decrs_level0 -: 003061 power_ctrl_decrs_level1: -: 003062 power_ctrl_incrs_level1: -0x792 003063 jam tx_power_0db ,mem_tx_power -0x793 003064 rtn -: 003066 power_ctrl_txpower_incrs_force: -0x794 003067 jam 0 ,mem_power_ctrl_pac_succ_cnt -: 003068 power_ctrl_txpower_incrs: -0x795 003069 fetch 1 ,mem_power_ctrl_level -0x796 003070 beq 2 ,power_ctrl_incrs_level2 -0x797 003071 increase 1 ,pdata -0x798 003072 store 1 ,mem_power_ctrl_level -0x799 003073 beq 1 ,power_ctrl_incrs_level1 -: 003074 power_ctrl_incrs_level2: -0x79a 003075 jam tx_power_5db ,mem_tx_power +: 003040 power_ctrl_txpower_decrs_check: +0x782 003041 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x783 003042 rtnne 32 +0x784 003043 jam 0 ,mem_power_ctrl_pac_succ_cnt +: 003044 power_ctrl_txpower_decrs: +0x785 003045 fetcht 1 ,mem_rssi_avg_received +0x786 003046 setarg rssi_dis_min_24g +0x787 003047 bmark1 mark_24g ,power_ctrl_txpower_decrs_next +0x788 003048 setarg rssi_dis_min_ble +: 003049 power_ctrl_txpower_decrs_next: +0x789 003050 isub temp ,null +0x78a 003051 nrtn positive +0x78b 003052 fetch 1 ,mem_power_ctrl_level +0x78c 003053 beq 0 ,power_ctrl_decrs_level0 +0x78d 003054 increase -1 ,pdata +0x78e 003055 store 1 ,mem_power_ctrl_level +0x78f 003056 beq 0 ,power_ctrl_decrs_level0 +: 003057 power_ctrl_decrs_level1: +: 003058 power_ctrl_incrs_level1: +0x790 003059 jam tx_power_0db ,mem_tx_power +0x791 003060 rtn +: 003062 power_ctrl_txpower_incrs_force: +0x792 003063 jam 0 ,mem_power_ctrl_pac_succ_cnt +: 003064 power_ctrl_txpower_incrs: +0x793 003065 fetch 1 ,mem_power_ctrl_level +0x794 003066 beq 2 ,power_ctrl_incrs_level2 +0x795 003067 increase 1 ,pdata +0x796 003068 store 1 ,mem_power_ctrl_level +0x797 003069 beq 1 ,power_ctrl_incrs_level1 +: 003070 power_ctrl_incrs_level2: +0x798 003071 jam tx_power_5db ,mem_tx_power +0x799 003072 rtn +: 003074 power_ctrl_decrs_level0: +0x79a 003075 jam tx_power_f5db ,mem_tx_power 0x79b 003076 rtn -: 003078 power_ctrl_decrs_level0: -0x79c 003079 jam tx_power_f5db ,mem_tx_power -0x79d 003080 rtn -: 003083 p_set_freq_tx: -0x79e 003084 storet 1 ,mem_last_freq -0x79f 003085 add temp ,0 ,rega -0x7a0 003086 call rf_write_freq -0x7a1 003087 setarg param_pll_setup -0x7a2 003088 call sleep -: 003089 p_rf_tx_enable: -0x7a3 003090 jam 0x1 ,rfen_adc -0x7a4 003091 jam 0x3c ,rfen_rx -0x7a5 003092 jam 0xe0 ,rfen_tx -0x7a6 003093 nop 10 -0x7a7 003094 jam 0x01 ,rfen_mdm -0x7a8 003095 jam 0x3d ,rfen_mdm -0x7a9 003096 nop 10 -0x7aa 003097 jam 0xb7 ,rfen_sn -0x7ab 003098 nop 10 -0x7ac 003099 jam 0x7d ,rfen_mdm -0x7ad 003100 fetch 1 ,mem_tx_power -0x7ae 003103 beq tx_power_5db ,p_set_tx_power_5db -0x7af 003105 beq tx_power_f5db ,p_set_tx_power_f5db -0x7b0 003106 beq tx_power_pair ,p_set_tx_power_pair -: 003108 p_set_tx_power_0db: -0x7b1 003109 call p_rx_low_sens -0x7b2 003111 jam 0xd0 ,0x8955 -0x7b3 003112 jam 0xe0 ,0x8956 -0x7b4 003114 jam 0x6c ,0x8958 -0x7b5 003116 branch set_tx_power_0db -: 003128 p_set_tx_power_5db: -0x7b6 003130 jam 0xfb ,0x894c -0x7b7 003131 jam 0xef ,0x894d -0x7b8 003132 jam 0xec ,0x894e -0x7b9 003133 jam 0x5e ,0x894f -0x7ba 003136 jam 0xd0 ,0x8955 -0x7bb 003137 jam 0xe0 ,0x8956 -0x7bc 003139 jam 0x3c ,0x8958 -0x7bd 003141 branch set_tx_power_5db -: 003153 p_set_tx_power_f5db: -0x7be 003154 call p_rx_low_sens -0x7bf 003156 jam 0xd0 ,0x8955 -0x7c0 003157 jam 0xc0 ,0x8956 -0x7c1 003159 jam 0x6c ,0x8958 -0x7c2 003161 branch set_tx_power_f5db -: 003163 p_rx_low_sens: -0x7c3 003164 jam 0x5b ,0x894c -0x7c4 003165 jam 0x96 ,0x894d -0x7c5 003166 jam 0x2c ,0x894e -0x7c6 003167 jam 0x46 ,0x894f -0x7c7 003168 rtn -: 003177 p_set_tx_power_pair: -0x7c8 003179 jam 0xc0 ,0x8956 -0x7c9 003180 jam 0xd0 ,0x8955 -0x7ca 003181 rtn -: 003183 p_shutdown_radio: -0x7cb 003184 force 8 ,radio_ctrl -0x7cc 003185 branch shutdown_radio + 1 -: 003194 p_zcode_entrance: -0x7cd 003195 fetcht 1 ,mem_zcode_temp_param0 -0x7ce 003196 rshift4 temp ,temp -0x7cf 003197 fetch 1 ,mem_zcode_current_number -0x7d0 003198 isub temp ,null -0x7d1 003199 branch p_zcode_run ,zero -0x7d2 003200 storet 1 ,mem_zcode_current_number -0x7d3 003201 increase 1 ,temp -0x7d4 003202 setarg zcode_buff_size -0x7d5 003203 imul32 temp ,temp -0x7d6 003204 fetch 3 ,mem_xip_flash_offset -0x7d7 003205 isub temp ,pdata -0x7d8 003207 fetcht 3 ,mem_flash_start_addr -0x7d9 003208 iadd temp ,pdata -0x7da 003209 increase -5 ,pdata -0x7db 003210 store 3 ,mem_flash_address -0x7dc 003212 call p_flash_release_deep_power_down -: 003213 p_zcode_read_loop: -0x7dd 003214 fetch 3 ,mem_flash_address -0x7de 003215 arg zcode_buff_size ,temp -0x7df 003216 arg mem_zcode_buff ,rega -0x7e0 003217 call spid_read_flash -0x7e1 003219 fetch 4 ,mem_zcode_buff -0x7e2 003220 fetcht 4 ,mem_zcode_head -0x7e3 003221 isub temp ,null -0x7e4 003222 nbranch p_zcode_read_loop ,zero -0x7e5 003224 call p_mouse_spi_init -0x7e6 003226 setarg mem_zcode_buff -0x7e7 003227 store 2 ,mem_patch_ptr -0x7e8 003228 jam zcode_code_size ,mem_patch_len -0x7e9 003229 call load_ucode -0x7ea 003230 setarg 0 -0x7eb 003231 store 4 ,mem_patch_ptr -: 003232 p_zcode_run: -0x7ec 003233 fetch 1 ,mem_zcode_temp_param0 -0x7ed 003234 branch p_zcode +: 003079 p_set_freq_tx: +0x79c 003080 storet 1 ,mem_last_freq +0x79d 003081 add temp ,0 ,rega +0x79e 003082 call rf_write_freq +0x79f 003083 setarg param_pll_setup +0x7a0 003084 call sleep +: 003085 p_rf_tx_enable: +0x7a1 003086 jam 0x1 ,rfen_adc +0x7a2 003087 jam 0x3c ,rfen_rx +0x7a3 003088 jam 0xe0 ,rfen_tx +0x7a4 003089 nop 10 +0x7a5 003090 jam 0x01 ,rfen_mdm +0x7a6 003091 jam 0x3d ,rfen_mdm +0x7a7 003092 nop 10 +0x7a8 003093 jam 0xb7 ,rfen_sn +0x7a9 003094 nop 10 +0x7aa 003095 jam 0x7d ,rfen_mdm +0x7ab 003096 fetch 1 ,mem_tx_power +0x7ac 003099 beq tx_power_5db ,p_set_tx_power_5db +0x7ad 003101 beq tx_power_f5db ,p_set_tx_power_f5db +0x7ae 003102 beq tx_power_pair ,p_set_tx_power_pair +: 003104 p_set_tx_power_0db: +0x7af 003105 call p_rx_low_sens +0x7b0 003107 jam 0xd0 ,0x8955 +0x7b1 003108 jam 0xe0 ,0x8956 +0x7b2 003110 jam 0x6c ,0x8958 +0x7b3 003112 branch set_tx_power_0db +: 003124 p_set_tx_power_5db: +0x7b4 003126 jam 0xfb ,0x894c +0x7b5 003127 jam 0xef ,0x894d +0x7b6 003128 jam 0xec ,0x894e +0x7b7 003129 jam 0x5e ,0x894f +0x7b8 003132 jam 0xd0 ,0x8955 +0x7b9 003133 jam 0xe0 ,0x8956 +0x7ba 003135 jam 0x3c ,0x8958 +0x7bb 003137 branch set_tx_power_5db +: 003149 p_set_tx_power_f5db: +0x7bc 003150 call p_rx_low_sens +0x7bd 003152 jam 0xd0 ,0x8955 +0x7be 003153 jam 0xc0 ,0x8956 +0x7bf 003155 jam 0x6c ,0x8958 +0x7c0 003157 branch set_tx_power_f5db +: 003159 p_rx_low_sens: +0x7c1 003160 jam 0x5b ,0x894c +0x7c2 003161 jam 0x96 ,0x894d +0x7c3 003162 jam 0x2c ,0x894e +0x7c4 003163 jam 0x46 ,0x894f +0x7c5 003164 rtn +: 003173 p_set_tx_power_pair: +0x7c6 003175 jam 0xc0 ,0x8956 +0x7c7 003176 jam 0xd0 ,0x8955 +0x7c8 003177 rtn +: 003179 p_shutdown_radio: +0x7c9 003180 force 8 ,radio_ctrl +0x7ca 003181 branch shutdown_radio + 1 +: 003190 p_zcode_entrance: +0x7cb 003191 fetcht 1 ,mem_zcode_temp_param0 +0x7cc 003192 rshift4 temp ,temp +0x7cd 003193 fetch 1 ,mem_zcode_current_number +0x7ce 003194 isub temp ,null +0x7cf 003195 branch p_zcode_run ,zero +0x7d0 003196 storet 1 ,mem_zcode_current_number +0x7d1 003197 increase 1 ,temp +0x7d2 003198 setarg zcode_buff_size +0x7d3 003199 imul32 temp ,temp +0x7d4 003200 fetch 3 ,mem_xip_flash_offset +0x7d5 003201 isub temp ,pdata +0x7d6 003203 fetcht 3 ,mem_flash_start_addr +0x7d7 003204 iadd temp ,pdata +0x7d8 003205 increase -5 ,pdata +0x7d9 003206 store 3 ,mem_flash_address +0x7da 003208 call p_flash_release_deep_power_down +: 003209 p_zcode_read_loop: +0x7db 003210 fetch 3 ,mem_flash_address +0x7dc 003211 arg zcode_buff_size ,temp +0x7dd 003212 arg mem_zcode_buff ,rega +0x7de 003213 call spid_read_flash +0x7df 003215 fetch 4 ,mem_zcode_buff +0x7e0 003216 fetcht 4 ,mem_zcode_head +0x7e1 003217 isub temp ,null +0x7e2 003218 nbranch p_zcode_read_loop ,zero +0x7e3 003220 call p_mouse_spi_init +0x7e4 003222 setarg mem_zcode_buff +0x7e5 003223 store 2 ,mem_patch_ptr +0x7e6 003224 jam zcode_code_size ,mem_patch_len +0x7e7 003225 call load_ucode +0x7e8 003226 setarg 0 +0x7e9 003227 store 4 ,mem_patch_ptr +: 003228 p_zcode_run: +0x7ea 003229 fetch 1 ,mem_zcode_temp_param0 +0x7eb 003230 branch p_zcode org 0x2000 -: 003251 start: -0x2000 003252 call lpmstate -: 003254 soft_reset: -0x2001 003255 bpatch patch00_0 ,mem_patch00 -0x2002 003256 clear_stack -0x2003 003257 call spi_ncs_gpio_init -0x2004 003258 call initialize_radio -0x2005 003259 call iicd_init_12m -0x2006 003260 call init_param -0x2007 003261 call l2cap_init -0x2008 003262 bpatch patch00_1 ,mem_patch00 -0x2009 003263 call rfcomm_init -0x200a 003264 call init_lmp -0x200b 003265 call ui_init -0x200c 003266 call app_init -0x200d 003267 ncall load_chip_option ,wake -0x200e 003268 bpatch patch00_2 ,mem_patch00 -0x200f 003269 call app_lpm_init ,wake -0x2010 003270 call publickey_init -0x2011 003271 call lpm_recover_clk ,wake -: 003272 main_loop: -0x2012 003273 bpatch patch00_3 ,mem_patch00 -0x2013 003274 call sp_calc_sequence -0x2014 003275 call sp_calc_sequence_256 -0x2015 003276 call sp_calc_sequence_256_check -0x2016 003277 call le_dispatch -0x2017 003278 bpatch patch00_4 ,mem_patch00 -0x2018 003279 call idle_dispatch -0x2019 003280 call app_process_idle -0x201a 003281 call inquiry_dispatch -0x201b 003282 call inquiry_scan_dispatch -0x201c 003283 call page_scan_dispatch -0x201d 003284 call connection_dispatch -0x201e 003285 call lpm_dispatch -0x201f 003286 call g24_dispatch -0x2020 003287 branch main_loop -: 003289 connection_dispatch: -0x2021 003290 call connection_incontext -0x2022 003291 rtnmark0 mark_context -0x2023 003292 set0 mark_context ,mark -0x2024 003293 call context_save -0x2025 003294 branch le_disable -: 003296 connection_incontext: -0x2026 003297 bpatch patch00_5 ,mem_patch00 -0x2027 003298 call context_search_insniff -0x2028 003299 nbranch connection_nosniff ,zero -0x2029 003300 call context_load -0x202a 003301 add rega ,coffset_mode ,contr -0x202b 003302 ifetch 1 ,contr -0x202c 003303 bbit1 mode_le ,le_conn_dispatch -0x202d 003304 bbit1 mode_master ,master_dispatch -0x202e 003305 branch slave_dispatch -: 003306 connection_nosniff: -0x202f 003307 call context_get_next -0x2030 003308 copy loopcnt ,null -0x2031 003309 rtn zero -0x2032 003310 call context_load -0x2033 003311 fetch 1 ,mem_state -0x2034 003312 bbit1 state_inpage ,master_page -0x2035 003313 fetch 1 ,mem_mode -0x2036 003314 bbit1 mode_master ,master_dispatch -0x2037 003315 branch slave_dispatch -: 003323 idle_dispatch: -0x2038 003324 fetch 1 ,mem_hci_cmd -0x2039 003325 rtn blank -0x203a 003326 beq hci_cmd_inquiry ,idle_inquiry -0x203b 003327 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel -0x203c 003328 beq hci_cmd_remote_name_req ,idle_remote_name_req -0x203d 003329 beq hci_cmd_create_conn ,idle_create_conn -0x203e 003330 beq hci_cmd_le_create_conn ,idle_le_create_conn -0x203f 003331 call context_search_conn_handle -0x2040 003332 rtn zero -0x2041 003333 call context_search_plap -0x2042 003334 rtn zero -: 003335 idle_exit: -0x2043 003336 jam 0 ,mem_hci_cmd -0x2044 003337 rtn -: 003339 idle_le_create_conn: -0x2045 003340 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn -0x2046 003341 jam 0 ,mem_hci_cmd -0x2047 003342 rtn -: 003344 idle_inquiry: -0x2048 003345 set1 mark_inquiry_on ,mark -0x2049 003346 set0 mark_inquiry_trainb ,mark -0x204a 003347 jam param_ninquiry ,mem_ninqy_index -0x204b 003348 jam 31 ,mem_nfreq_index_inq -0x204c 003349 branch idle_exit -: 003351 idle_inquiry_cancel: -0x204d 003352 set0 mark_inquiry_on ,mark -0x204e 003353 force 0 ,stop_watch -0x204f 003354 branch idle_exit -: 003356 idle_remote_name_req: -0x2050 003357 call context_search_plap -0x2051 003358 rtn zero -0x2052 003359 force lmp_name_req ,temp -0x2053 003360 jam 5 ,mem_nameres_cnt -0x2054 003361 branch idle_start_page -: 003363 idle_create_conn: -0x2055 003364 bpatch patch00_6 ,mem_patch00 -: 003365 idle_create_conn_device: -0x2056 003366 fetch 6 ,mem_hci_plap -0x2057 003367 branch idle_exit ,blank -0x2058 003368 jam reconnect_hid ,memui_reconnect_mode -0x2059 003370 jam conn_sm_wait_features_res ,mem_conn_sm -0x205a 003371 branch idle_create_conn_cont -: 003373 idle_create_conn_cont: -0x205b 003374 force lmp_version_req ,temp -: 003375 idle_start_page: -0x205c 003376 bpatch patch00_7 ,mem_patch00 -0x205d 003377 fetch 1 ,mem_page_mode -0x205e 003378 branch idle_page_mode_r0 ,blank -0x205f 003379 lshift3 pdata ,pdata -0x2060 003380 lshift4 pdata ,pdata -0x2061 003381 increase -1 ,pdata -: 003382 idle_page_mode_r0: -0x2062 003383 store 1 ,mem_npage -0x2063 003384 store 1 ,mem_npage_index -0x2064 003385 jam 31 ,mem_nfreq_index_page -0x2065 003386 set0 mark_page_trainb ,mark -0x2066 003387 call context_new -0x2067 003388 nbranch idle_page_fail ,zero -0x2068 003389 call get_free_amaddr -0x2069 003390 store 1 ,mem_amaddr -0x206a 003391 storet 1 ,mem_lmo_opcode2 -0x206b 003392 fetch 6 ,mem_hci_plap -0x206c 003393 store 6 ,mem_plap -0x206d 003394 bpatch patch01_0 ,mem_patch01 -0x206e 003395 call timer_reinit -0x206f 003396 force 0 ,pdata -0x2070 003397 compare lmp_name_req ,temp ,0xff -0x2071 003398 nsetflag true ,state_init_seq ,pdata -0x2072 003399 set1 state_inpage ,pdata -0x2073 003400 store 1 ,mem_state -0x2074 003401 jam bt_evt_reconn_started ,mem_fifo_temp -0x2075 003402 call ui_ipc_send_event -0x2076 003403 force 0 ,pdata -0x2077 003404 setflag true ,smap_name_req ,pdata -0x2078 003405 store 1 ,mem_state_map -0x2079 003406 setarg 0 -0x207a 003407 set1 mode_master ,pdata -0x207b 003408 store 1 ,mem_mode -0x207c 003409 enable master -0x207d 003410 call context_save -0x207e 003411 disable master -0x207f 003412 force page_length_timer ,queue -0x2080 003413 fetch 2 ,mem_page_to -0x2081 003414 call timer_init -0x2082 003415 branch idle_exit -: 003416 idle_page_fail: -0x2083 003417 bpatch patch01_1 ,mem_patch01 -0x2084 003418 fetch 6 ,mem_hci_plap -0x2085 003419 store 6 ,mem_plap -0x2086 003420 compare lmp_name_req ,temp ,0xff -0x2087 003421 branch idle_name_fail ,true -0x2088 003422 branch idle_exit -: 003423 idle_name_fail: -0x2089 003424 arg mem_tmp_buffer ,contw -0x208a 003425 arg 8 ,loopcnt -0x208b 003426 call memset0 -0x208c 003427 jam bt_evt_reconn_failed ,mem_fifo_temp -0x208d 003428 call ui_ipc_send_event -0x208e 003429 branch idle_exit -: 003436 inquiry_dispatch: -0x208f 003437 rtnmark0 mark_inquiry_on -0x2090 003438 force inquiry_length_timer ,queue -0x2091 003439 call timer_check -0x2092 003440 nsetflag blank ,mark_inquiry_on ,mark -0x2093 003441 nbranch inquiry_start ,blank -0x2094 003442 rtn -: 003446 inquiry_start: -0x2095 003447 bpatch patch01_2 ,mem_patch01 -0x2096 003448 fetcht 2 ,mem_inq_window -0x2097 003449 force 4 ,queue -0x2098 003450 call sniff_check_window -0x2099 003451 rtn user -0x209a 003452 call afh_clear -0x209b 003453 force 0 ,freq_mode -: 003454 inquiry_restart: -0x209c 003455 rtn timeout -0x209d 003456 set0 mark_fhs_already_good ,mark -0x209e 003457 set0 mark_fhs_eir ,mark -: 003458 inquiry_rx_restart: -0x209f 003459 add clkn_bt ,1 ,bt_clk -0x20a0 003460 isolate1 mark_inquiry_trainb ,mark -0x20a1 003461 setflag true ,2 ,freq_mode -0x20a2 003462 compare 0x00 ,bt_clk ,0x02 -0x20a3 003463 nbranch inquiry_receive ,true -: 003465 inquiry_transmit: -0x20a4 003466 bpatch patch01_3 ,mem_patch01 -0x20a5 003467 fetch 1 ,mem_inquiry_transmit -0x20a6 003468 increase 1 ,pdata -0x20a7 003469 store 1 ,mem_inquiry_transmit -0x20a8 003470 call fetch_giac -0x20a9 003471 call tx_radio_freq -0x20aa 003472 call fetch_diac -0x20ab 003473 call start_transmitter -0x20ac 003474 call start_tx_native -0x20ad 003475 call send_access_word -0x20ae 003476 call end_of_packet -0x20af 003477 call inquiry_check_train -0x20b0 003478 branch inquiry_restart -: 003480 inquiry_check_train: -0x20b1 003481 bpatch patch01_4 ,mem_patch01 -0x20b2 003482 fetch 1 ,mem_nfreq_index_inq -0x20b3 003483 increase -1 ,pdata -0x20b4 003484 store 1 ,mem_nfreq_index_inq -0x20b5 003485 rtn positive -0x20b6 003486 jam 31 ,mem_nfreq_index_inq -0x20b7 003487 fetch 1 ,mem_ninqy_index -0x20b8 003488 increase -1 ,pdata -0x20b9 003489 store 1 ,mem_ninqy_index -0x20ba 003490 rtn positive -0x20bb 003491 setflip mark_inquiry_trainb ,mark -0x20bc 003492 jam param_ninquiry ,mem_ninqy_index -0x20bd 003493 rtn -: 003495 inquiry_receive: -0x20be 003496 bpatch patch01_5 ,mem_patch01 -0x20bf 003497 call fetch_giac -0x20c0 003498 call rx_radio_freq -0x20c1 003499 call fetch_diac -0x20c2 003500 call start_rx_native -0x20c3 003501 call start_receiver -0x20c4 003502 call wait_access_clkn_rt -0x20c5 003503 branch inquiry_sync ,sync -0x20c6 003504 call inquiry_check_train -0x20c7 003505 branch inquiry_rx_restart -: 003506 inquiry_sync: -0x20c8 003507 bpatch patch01_6 ,mem_patch01 -0x20c9 003508 call save_rssi -0x20ca 003509 call scan_mode_whiten -0x20cb 003510 call receive_packet_whitened -0x20cc 003511 set0 mark_rxbuf_inuse ,mark -0x20cd 003512 rtnmark0 mark_fhs_already_good -: 003513 inquiry_receive_rtn: -0x20ce 003514 bpatch patch01_7 ,mem_patch01 -: 003515 inquiry_receive_eir_rtn: -0x20cf 003516 fetch 1 ,mem_inquiry_rcv -0x20d0 003517 increase 1 ,pdata -0x20d1 003518 store 1 ,mem_inquiry_rcv -0x20d2 003519 rtn -: 003527 master_page: -0x20d3 003528 bpatch patch02_0 ,mem_patch02 -0x20d4 003529 enable master -0x20d5 003530 enable clknt -0x20d6 003531 fetch 2 ,mem_page_interval -0x20d7 003532 branch master_page_no_interval ,blank -0x20d8 003533 force page_interval_timer ,queue -0x20d9 003534 call timer_check -0x20da 003535 nrtn blank -: 003536 master_page_no_interval: -0x20db 003537 bpatch patch02_1 ,mem_patch02 -0x20dc 003538 fetcht 2 ,mem_page_window -0x20dd 003539 force 40 ,queue -0x20de 003540 call sniff_check_window -0x20df 003541 branch page_exit ,user -0x20e0 003542 force page_length_timer ,queue -0x20e1 003543 call timer_check -0x20e2 003544 nbranch page_start ,blank -0x20e3 003545 fetch 1 ,mem_state_map -0x20e4 003546 bbit1 smap_name_req ,master_npage_timeout -0x20e5 003547 branch master_page_timeout -: 003548 master_npage_timeout: -0x20e6 003549 arg mem_tmp_buffer ,contw -0x20e7 003550 arg 8 ,loopcnt -0x20e8 003551 call memset0 -: 003552 master_page_timeout: -0x20e9 003553 bpatch patch02_2 ,mem_patch02 -0x20ea 003554 jam 0 ,mem_state -0x20eb 003555 call init_lmp_work -0x20ec 003556 jam 0 ,memui_reconnect_mode -0x20ed 003557 jam bt_evt_reconn_page_timeout ,mem_fifo_temp -0x20ee 003558 call ui_ipc_send_event -0x20ef 003559 branch page_exit -: 003561 page_start: -0x20f0 003562 bpatch patch02_3 ,mem_patch02 -0x20f1 003563 force 0 ,timeup -0x20f2 003564 until clkn_rt ,meet -0x20f3 003565 fetch 1 ,mem_page_clk -0x20f4 003566 increase -1 ,pdata -0x20f5 003567 ixor clkn_bt ,pdata -0x20f6 003568 compare 0 ,pdata ,3 -0x20f7 003569 nbranch page_start ,true -0x20f8 003570 deposit am_addr -0x20f9 003571 store 1 ,mem_fhs_am_addr -0x20fa 003572 force 0 ,n_tx_slot -0x20fb 003573 force 0 ,freq_mode -: 003575 page_restart: -0x20fc 003576 bpatch patch02_4 ,mem_patch02 -0x20fd 003577 branch page_exit ,timeout -0x20fe 003578 call fetch_page_bt_adr -0x20ff 003579 arg param_rf_setup ,timeup -0x2100 003580 until clkn_rt ,meet -: 003581 page_rx_restart: -0x2101 003582 bpatch patch02_5 ,mem_patch02 -0x2102 003583 fetch 4 ,mem_page_clk -0x2103 003584 iforce bt_clk -0x2104 003585 increase 1 ,pdata -0x2105 003586 store 4 ,mem_page_clk -0x2106 003587 isolate1 mark_page_trainb ,mark -0x2107 003588 setflag true ,2 ,freq_mode -0x2108 003589 compare 0x00 ,bt_clk ,0x02 -0x2109 003590 nbranch page_receive ,true -0x210a 003591 fetch 1 ,mem_page_transmit -0x210b 003592 increase 1 ,pdata -0x210c 003593 store 1 ,mem_page_transmit -0x210d 003594 call tx_radio_freq -0x210e 003595 call start_transmitter -0x210f 003596 call start_tx_native -0x2110 003597 call send_access_word -0x2111 003598 call end_of_packet -0x2112 003599 call page_check_train -0x2113 003600 branch page_restart -: 003601 page_exit: -0x2114 003602 bpatch patch02_6 ,mem_patch02 -0x2115 003603 disable master -0x2116 003604 fetch 2 ,mem_page_interval -0x2117 003605 rtn blank -0x2118 003606 force page_interval_timer ,queue -0x2119 003607 branch timer_init -: 003609 page_check_train: -0x211a 003610 bpatch patch02_7 ,mem_patch02 -0x211b 003611 fetch 1 ,mem_nfreq_index_page -0x211c 003612 increase -1 ,pdata -0x211d 003613 store 1 ,mem_nfreq_index_page -0x211e 003614 rtn positive -0x211f 003615 jam 31 ,mem_nfreq_index_page -0x2120 003616 fetch 1 ,mem_npage_index -0x2121 003617 increase -1 ,pdata -0x2122 003618 store 1 ,mem_npage_index -0x2123 003619 rtn positive -0x2124 003620 setflip mark_page_trainb ,mark -0x2125 003621 fetch 1 ,mem_npage -0x2126 003622 store 1 ,mem_npage_index -0x2127 003623 rtn -: 003625 page_receive: -0x2128 003626 bpatch patch03_0 ,mem_patch03 -0x2129 003627 call rx_radio_freq -0x212a 003628 call start_rx_native -0x212b 003629 call start_receiver -0x212c 003630 call wait_access_clkn_rt -0x212d 003631 branch page_sync ,sync -0x212e 003632 call page_check_train -0x212f 003633 branch page_rx_restart -: 003634 page_sync: -0x2130 003635 call end_of_packet -0x2131 003636 fetch 1 ,mem_page_rcv -0x2132 003637 increase 1 ,pdata -0x2133 003638 store 1 ,mem_page_rcv -0x2134 003639 force 0 ,stop_watch -0x2135 003640 fetch 4 ,mem_page_clk -: 003641 page_send_fhs: -0x2136 003642 bpatch patch03_1 ,mem_patch03 -0x2137 003643 call rf_setup_time_master_slot -0x2138 003644 call fetch_page_bt_adr -0x2139 003645 increase 1 ,n_tx_slot -: 003646 page_send_fhs_continue: -0x213a 003647 and_into 0x1fd ,bt_clk -0x213b 003648 and_into 0x1fc ,freq_mode -0x213c 003649 call tx_radio_freq -0x213d 003650 call start_transmitter -0x213e 003651 call start_tx_native -0x213f 003652 call send_access_word -0x2140 003653 deposit clkn_bt -0x2141 003654 store 4 ,mem_clkn_bt -0x2142 003655 force 0 ,am_addr -0x2143 003656 force type_fhs ,type -0x2144 003657 call scan_mode_whiten -0x2145 003658 call transmit_packet_whitened -: 003659 page_wait_fhs_reply: -0x2146 003660 bpatch patch03_2 ,mem_patch03 -0x2147 003661 call rf_setup_time_slave_slot -0x2148 003662 or_into 0x02 ,bt_clk -0x2149 003663 and_into 0x1fc ,freq_mode -0x214a 003664 call rx_radio_freq -0x214b 003665 call start_rx_native -0x214c 003666 call start_receiver -0x214d 003667 call wait_access_clkn_rt -0x214e 003668 call end_of_packet ,sync -0x214f 003669 branch page_wait_fhs_reply_ok ,sync -0x2150 003670 fetch 1 ,mem_fhs_wait_counter -0x2151 003671 branch page_restart ,blank -0x2152 003672 increase -1 ,pdata -0x2153 003673 store 1 ,mem_fhs_wait_counter -0x2154 003674 branch page_send_fhs -: 003676 page_wait_fhs_reply_ok: -0x2155 003677 bpatch patch03_3 ,mem_patch03 -0x2156 003678 fetch 1 ,mem_page_rcv_fhs -0x2157 003679 increase 1 ,pdata -0x2158 003680 store 1 ,mem_page_rcv_fhs -0x2159 003681 call prepare_newconn -: 003682 master_newconn_loop: -0x215a 003683 call master_newconn_once -0x215b 003684 branch newconn_poll_responded ,sync -0x215c 003685 call new_conn_timeout -0x215d 003686 nbranch master_newconn_loop ,blank -0x215e 003687 branch page_restart -: 003689 newconn_poll_responded: -0x215f 003690 bpatch patch03_4 ,mem_patch03 -0x2160 003691 fetch 1 ,mem_state -0x2161 003692 set0 state_inpage ,pdata -0x2162 003693 store 1 ,mem_state -0x2163 003694 call newconn_init -0x2164 003695 disable master -0x2165 003696 rtn -: 003699 master_dispatch: -0x2166 003700 bpatch patch03_5 ,mem_patch03 -0x2167 003701 enable master -0x2168 003702 enable clknt -0x2169 003703 call role_switch_master -0x216a 003704 rtn user -0x216b 003705 call check_bt_disabled -0x216c 003706 call rf_setup_time_master_slot -0x216d 003707 add clkn_bt ,1 ,bt_clk -0x216e 003708 call fetch_self_bt_adr -0x216f 003709 force 0x03 ,freq_mode -0x2170 003710 call scheduler_tx_l2cap_pkt -0x2171 003711 call prepare_tx -0x2172 003712 call tx_radio_freq -0x2173 003713 call start_transmitter -0x2174 003714 call start_tx_native -0x2175 003715 call send_access_word -0x2176 003716 call transmit_packet -: 003717 master_loop: -0x2177 003718 bpatch patch03_6 ,mem_patch03 -0x2178 003719 call parse_lmp -0x2179 003720 call master_conn_recv_packet -0x217a 003721 nbranch master_notmatch ,match -0x217b 003722 call supervision_flush -0x217c 003723 call parse_l2cap -0x217d 003724 fetch 1 ,mem_master_rcvcnt -0x217e 003725 increase 1 ,pdata -0x217f 003726 store 1 ,mem_master_rcvcnt -: 003727 master_notmatch: -0x2180 003728 bpatch patch03_7 ,mem_patch03 -0x2181 003729 call scheduler_process -0x2182 003730 call check_master_disconnect -0x2183 003731 nrtn master -0x2184 003732 call check_attempt -0x2185 003733 nbranch master_attempt ,blank -: 003734 master_exit: -0x2186 003735 disable master -0x2187 003736 rtn -: 003738 master_attempt: -0x2188 003739 call prepare_tx -0x2189 003740 call master_conn_send_packet -0x218a 003741 branch master_loop -: 003744 check_master_disconnect: -0x218b 003745 branch check_master_match ,match -0x218c 003746 call supervision_update -0x218d 003747 branch master_disconnect ,positive -: 003748 check_master_match: -0x218e 003749 call check_disconnect_timeout -0x218f 003750 nbranch master_disconnect ,user -0x2190 003751 fetch 1 ,mem_state_map -0x2191 003752 rtnbit0 smap_name_req -0x2192 003753 rtnbit1 smap_name_res -0x2193 003754 fetch 1 ,mem_op -0x2194 003755 rtnbit1 op_disconn -0x2195 003756 call conn_timer_expired -0x2196 003757 nrtn blank -0x2197 003758 fetch 1 ,mem_nameres_cnt -0x2198 003759 increase -1 ,pdata -0x2199 003760 store 1 ,mem_nameres_cnt -0x219a 003761 nrtn blank -0x219b 003762 branch lmp_disconnect -: 003764 master_disconnect: -0x219c 003765 bpatch patch04_0 ,mem_patch04 -0x219d 003766 call quit_connection -0x219e 003767 disable master -0x219f 003768 fetch 1 ,mem_state_map -0x21a0 003769 bbit1 smap_name_req ,master_name_disconnect -0x21a1 003770 rtn -: 003772 master_name_disconnect: -0x21a2 003773 fetch 1 ,mem_state_map -0x21a3 003774 rtnbit1 smap_name_res -: 003775 master_name_error: -0x21a4 003776 arg mem_tmp_buffer ,contw -0x21a5 003777 arg 8 ,loopcnt -0x21a6 003778 branch memset0 -: 003780 check_disconnect_timeout: -0x21a7 003781 bpatch patch04_1 ,mem_patch04 -0x21a8 003782 enable user -0x21a9 003783 fetch 1 ,mem_op -0x21aa 003784 rtnbit0 op_disconn -0x21ab 003785 call conn_timer_expired -0x21ac 003786 nrtn blank -0x21ad 003787 branch disable_user -: 003789 conn_timer_expired: -0x21ae 003790 fetch 1 ,mem_conn_timer -0x21af 003791 increase -1 ,pdata -0x21b0 003792 store 1 ,mem_conn_timer -0x21b1 003793 rtn -: 003795 linkkey_ready: -0x21b2 003796 bpatch patch04_2 ,mem_patch04 -0x21b3 003797 fetch 1 ,mem_state -0x21b4 003798 bbit1 state_linkkey ,linkkey_set -0x21b5 003799 fetch 1 ,mem_pairing_auth -0x21b6 003800 branch linkkey_set ,blank -0x21b7 003801 jam defalt_pairing_auth ,mem_pairing_auth -0x21b8 003802 jam bt_evt_linkkey_generate ,mem_fifo_temp -0x21b9 003803 call ui_ipc_send_event -0x21ba 003804 branch linkkey_set -: 003805 linkkey_set: -0x21bb 003806 bpatch patch04_3 ,mem_patch04 -0x21bc 003807 call context_traverse_linkkey -0x21bd 003808 fetch 1 ,mem_state -0x21be 003809 set1 state_linkkey ,pdata -0x21bf 003810 store 1 ,mem_state -0x21c0 003811 jam 1 ,mem_link_key_exists -0x21c1 003812 fetch 1 ,mem_conn_sm -0x21c2 003813 bne conn_sm_pairing ,linkkey_set_continue -: 003814 linkkey_set_continue: -0x21c3 003815 rtn -: 003817 generate_linkkey_continue: -0x21c4 003818 jam pairing_auth ,mem_pairing_auth -: 003819 clear_linkstate: -0x21c5 003820 fetch 1 ,mem_state -0x21c6 003821 set0 state_linkkey ,pdata -0x21c7 003822 store 1 ,mem_state -0x21c8 003823 rtn -: 003827 role_switch_check: -0x21c9 003828 bpatch patch04_4 ,mem_patch04 -0x21ca 003829 disable user -0x21cb 003830 fetch 2 ,mem_tsniff -0x21cc 003831 arg 0xffff ,temp -0x21cd 003832 isub temp ,null -0x21ce 003833 nrtn zero -0x21cf 003834 fetch 4 ,mem_sniff_anchor -0x21d0 003835 branch role_switch_clkn ,clknt -0x21d1 003836 isub clke_bt ,pdata -0x21d2 003837 branch role_switch_clke -: 003838 role_switch_clkn: -0x21d3 003839 isub clkn_bt ,pdata -: 003840 role_switch_clke: -0x21d4 003841 sub pdata ,4 ,null -0x21d5 003842 nrtn positive -0x21d6 003843 force 0 ,pdata -0x21d7 003844 store 2 ,mem_tsniff -0x21d8 003845 branch enable_user -: 003849 role_switch_prepare: -0x21d9 003850 copy pdata ,temp -0x21da 003851 bpatch patch04_5 ,mem_patch04 -0x21db 003852 storet 4 ,mem_sniff_anchor -: 003853 role_switch_prepare0: -0x21dc 003854 jam switch_flag_accept ,mem_switch_flag -0x21dd 003855 setarg 0xffff -0x21de 003856 store 2 ,mem_tsniff -0x21df 003857 jam 1 ,mem_sniff_attempt -0x21e0 003858 rtn -: 003861 role_switch_master: -0x21e1 003862 bpatch patch04_6 ,mem_patch04 -0x21e2 003863 call role_switch_check -0x21e3 003864 nrtn user -0x21e4 003865 disable user -0x21e5 003866 jam param_newconnto ,mem_newconnto_counter -0x21e6 003867 set0 mark_fhs_already_good ,mark -: 003868 roles_waitfhs_loop: -0x21e7 003869 call rf_setup_time_master_slot -0x21e8 003870 call master_recv_packet -0x21e9 003871 bmark1 mark_fhs_already_good ,roles_replyto_fhs -0x21ea 003872 call new_conn_timeout -0x21eb 003873 nbranch roles_waitfhs_loop ,blank -: 003874 role_switch_fail_master: -0x21ec 003875 bpatch patch04_7 ,mem_patch04 -0x21ed 003876 disable user -0x21ee 003877 deposit clkn_bt -0x21ef 003878 store 4 ,mem_next_btclk -0x21f0 003879 enable clknt -0x21f1 003880 enable master -0x21f2 003881 jam bt_evt_switch_fail_master ,mem_fifo_temp -0x21f3 003882 branch ui_ipc_send_event -: 003884 roles_replyto_fhs: -0x21f4 003885 bpatch patch05_0 ,mem_patch05 -0x21f5 003886 call rf_setup_time_slave_slot -0x21f6 003887 arg type_id ,type -0x21f7 003888 call master_send_packet -0x21f8 003889 disable clknt -0x21f9 003890 disable master -0x21fa 003891 call apply_switch_clke -0x21fb 003892 call prepare_newconn -: 003893 roles_newconns_loop: -0x21fc 003894 bpatch patch05_1 ,mem_patch05 -0x21fd 003895 call slave_newconn_once -0x21fe 003896 branch roles_newconns_responded ,match -0x21ff 003897 call new_conn_timeout -0x2200 003898 nbranch roles_newconns_loop ,blank -0x2201 003899 branch role_switch_fail_master -: 003900 roles_newconns_responded: -0x2202 003901 fetch 1 ,mem_mode -0x2203 003902 set0 mode_master ,pdata -0x2204 003903 store 1 ,mem_mode -0x2205 003904 call supervision_flush -0x2206 003905 call calc_clke_offset -0x2207 003906 enable user -0x2208 003907 jam bt_evt_switch_success_master ,mem_fifo_temp -0x2209 003908 branch ui_ipc_send_event -: 003913 context_load: -0x220a 003914 bpatch patch05_2 ,mem_patch05 -0x220b 003915 set1 mark_context ,mark -0x220c 003916 deposit rega -0x220d 003917 store 2 ,mem_context_ptr -0x220e 003918 force context_size ,loopcnt -0x220f 003919 arg mem_le_state ,contw -0x2210 003920 add rega ,coffset_mode ,contr -0x2211 003921 ifetch 1 ,contr -0x2212 003922 copy rega ,contr -0x2213 003923 bbit1 mode_le ,memcpy -0x2214 003924 arg mem_state ,contw -0x2215 003925 call memcpy -0x2216 003926 disable attempt -0x2217 003927 fetch 1 ,mem_amaddr -0x2218 003928 iforce am_addr -0x2219 003929 jam 1 ,mem_current_sniff_attempt -0x221a 003930 branch context_load_master ,master -0x221b 003931 jam 1 ,mem_current_sniff_attempt -: 003932 context_load_master: -0x221c 003933 fetch 1 ,mem_state -0x221d 003934 rtnbit0 state_insniff -0x221e 003935 fetch 1 ,mem_sniff_attempt -0x221f 003936 store 1 ,mem_current_sniff_attempt -0x2220 003937 fetch 1 ,mem_sniff_timeout -0x2221 003938 store 1 ,mem_current_sniff_timeout -0x2222 003939 rtn -: 003941 context_save: -0x2223 003942 bpatch patch05_3 ,mem_patch05 -0x2224 003943 fetch 2 ,mem_context_ptr -0x2225 003944 iforce contw -0x2226 003945 force context_size ,loopcnt -0x2227 003946 arg mem_le_state ,contr -0x2228 003947 branch memcpy ,le -0x2229 003948 arg mem_state ,contr -0x222a 003949 branch memcpy -: 003953 context_get_next: -0x222b 003954 arg context_num ,loopcnt -0x222c 003955 fetcht 1 ,mem_current_context -: 003956 context_get_next_loop: -0x222d 003957 increase 1 ,temp -0x222e 003958 compare context_num ,temp ,0xff -0x222f 003959 nbranch context_get_next_cont ,true -0x2230 003960 arg 0 ,temp -: 003961 context_get_next_cont: -0x2231 003962 storet 1 ,mem_current_context -0x2232 003963 mul32 temp ,context_size ,pdata -0x2233 003964 arg mem_context ,rega -0x2234 003965 iadd rega ,rega -0x2235 003966 ifetch 1 ,rega -0x2236 003967 bbit1 state_insniff ,context_get_next_sniff -0x2237 003968 rtnbit1 state_inconn -0x2238 003969 rtnbit1 state_inpage -: 003970 context_get_next_sniff: -0x2239 003971 loop context_get_next_loop -0x223a 003972 rtn -: 003974 context_new: -0x223b 003975 bpatch patch05_4 ,mem_patch05 -0x223c 003976 arg context_search_empty ,regc -0x223d 003977 call context_search -0x223e 003978 nrtn zero -0x223f 003979 deposit rega -0x2240 003980 store 2 ,mem_context_ptr -0x2241 003981 force 0 ,null -0x2242 003982 rtn -: 003986 context_check_all_wack: -0x2243 003987 call check_esco_amaddr -0x2244 003988 branch context_check_esco_wack ,true -0x2245 003989 fetch 2 ,mem_context_ptr -0x2246 003990 add pdata ,coffset_arq ,contw -0x2247 003991 fetch 1 ,mem_arq -0x2248 003992 istore 1 ,contw -0x2249 003993 arg context_check_a_wack ,regc -0x224a 003994 branch context_search -: 003996 context_check_esco_wack: -0x224b 003997 fetch 1 ,mem_arq -0x224c 003998 isolate1 wack ,pdata -0x224d 003999 branch context_esco_wack ,true -0x224e 004000 force 1 ,null -0x224f 004001 rtn -: 004002 context_esco_wack: -0x2250 004003 force 0 ,null -0x2251 004004 rtn -: 004007 context_check_idle: -0x2252 004008 arg context_check_inconn ,regc -0x2253 004009 branch context_search -: 004011 context_traverse_linkkey: -0x2254 004012 fetcht 2 ,mem_context_ptr -0x2255 004013 arg context_traverse_clearkey ,regc -0x2256 004014 branch context_search -: 004018 context_search_conn_handle: -0x2257 004019 fetcht 1 ,mem_hci_conn_handle -: 004020 context_search_conn_handle2: -0x2258 004021 arg context_search_handle ,regc -0x2259 004022 branch context_search -: 004024 context_search_plap: -0x225a 004025 bpatch patch05_5 ,mem_patch05 -0x225b 004026 fetcht 6 ,mem_hci_plap -: 004027 context_search_plap2: -0x225c 004028 arg context_search_lap ,regc -0x225d 004029 branch context_search -: 004031 context_search_insniff: -0x225e 004032 arg context_search_sniff ,regc -0x225f 004033 branch context_search -: 004035 context_search_sniff_window: -0x2260 004036 arg context_search_window ,regc -: 004037 context_search: -0x2261 004038 bpatch patch05_6 ,mem_patch05 -0x2262 004039 arg mem_context ,rega -0x2263 004040 arg context_num ,loopcnt -: 004041 context_search_loop: -0x2264 004042 ifetch 1 ,rega -0x2265 004043 copy regc ,pc -: 004044 context_search_next: -0x2266 004045 increase context_size ,rega -0x2267 004046 loop context_search_loop -0x2268 004047 force 1 ,null -0x2269 004048 rtn -: 004050 context_search_empty: -0x226a 004051 bbit1 state_inconn ,context_search_next -0x226b 004052 bbit1 state_inpage ,context_search_next -0x226c 004053 force 0 ,null -0x226d 004054 rtn -: 004056 context_search_lap: -0x226e 004057 bbit1 state_inpage ,context_search_lap_cont -0x226f 004058 bbit0 state_inconn ,context_search_next -: 004059 context_search_lap_cont: -0x2270 004060 add rega ,coffset_plap ,contr -0x2271 004061 ifetch 6 ,contr -0x2272 004062 isub temp ,null -0x2273 004063 rtn zero -0x2274 004064 branch context_search_next -: 004066 context_search_handle: -0x2275 004067 bbit0 state_inconn ,context_search_next -0x2276 004068 add rega ,coffset_conn_handle ,contr -0x2277 004069 ifetch 1 ,contr -0x2278 004070 isub temp ,null -0x2279 004071 rtn zero -0x227a 004072 branch context_search_next -: 004074 context_search_sniff: -0x227b 004075 bbit0 state_insniff ,context_search_next -: 004076 context_search_sniff_loop: -0x227c 004077 call context_get_anchor -0x227d 004078 call sign_pdata_temp -0x227e 004079 isub temp ,pdata -0x227f 004080 increase 1 ,pdata -0x2280 004081 branch context_search_sniff_miss ,positive -0x2281 004082 copy contr ,regb -0x2282 004083 store 9 ,mem_temp -0x2283 004084 fetch 1 ,mem_le_sc_calc -0x2284 004085 nbranch context_search_sniff_sc ,blank -0x2285 004086 fetch 9 ,mem_temp -0x2286 004087 copy regb ,contr -0x2287 004088 increase 5 ,pdata -0x2288 004089 branch context_search_meet1 -: 004090 context_search_sniff_sc: -0x2289 004091 fetch 9 ,mem_temp -0x228a 004092 copy regb ,contr -0x228b 004093 increase 20 ,pdata -: 004094 context_search_meet1: -0x228c 004095 nbranch context_search_next ,positive -: 004096 context_search_meet: -0x228d 004097 copy temp ,bt_clk -0x228e 004098 call context_next_anchor -0x228f 004099 force 0 ,null -0x2290 004100 rtn -: 004103 context_search_sniff_miss: -0x2291 004104 iforce regb -0x2292 004105 add rega ,coffset_tsniff ,contr -0x2293 004106 ifetch 2 ,contr -0x2294 004107 branch context_search_meet ,blank -0x2295 004108 call context_next_anchor -0x2296 004109 branch context_search_sniff_loop -: 004111 sign_pdata_temp: -0x2297 004112 rshift16 pdata ,timeup -0x2298 004113 rshift8 timeup ,timeup -0x2299 004114 branch sign_pdata_temp_p0 ,zero -0x229a 004115 compare 0xf ,timeup ,0xf -0x229b 004116 nrtn true -0x229c 004117 rshift16 temp ,timeup -0x229d 004118 rshift8 timeup ,timeup -0x229e 004119 nrtn zero -0x229f 004120 set1 28 ,temp -0x22a0 004121 rtn -: 004122 sign_pdata_temp_p0: -0x22a1 004123 rshift16 temp ,timeup -0x22a2 004124 rshift8 timeup ,timeup -0x22a3 004125 compare 0xf ,timeup ,0xf -0x22a4 004126 nrtn true -0x22a5 004127 set1 28 ,pdata -0x22a6 004128 rtn -: 004130 context_check_inconn: -0x22a7 004131 bbit0 state_inconn ,context_search_next -0x22a8 004132 force 0 ,null -0x22a9 004133 rtn -: 004135 context_check_a_wack: -0x22aa 004136 bbit0 state_inconn ,context_search_next -0x22ab 004137 add rega ,coffset_mode ,contr -0x22ac 004138 ifetch 1 ,contr -0x22ad 004139 bbit1 mode_le ,context_search_next -0x22ae 004140 add rega ,coffset_arq ,contr -0x22af 004141 ifetch 1 ,contr -0x22b0 004142 bbit0 wack ,context_search_next -0x22b1 004143 force 0 ,null -0x22b2 004144 rtn -: 004146 context_get_anchor: -0x22b3 004147 add rega ,coffset_mode ,contr -0x22b4 004148 ifetcht 1 ,contr -0x22b5 004149 deposit clkn_bt -0x22b6 004150 isolate1 mode_master ,temp -0x22b7 004151 add rega ,coffset_sniff_anchor ,contr -0x22b8 004152 ifetcht 4 ,contr -0x22b9 004153 rtn true -0x22ba 004154 add rega ,coffset_clk_offset ,contr -0x22bb 004155 ifetch 6 ,contr -0x22bc 004156 call calc_clke2 -0x22bd 004157 deposit clke_bt -0x22be 004158 rtn -: 004160 context_next_anchor: -0x22bf 004161 add rega ,coffset_tsniff ,contr -0x22c0 004162 add rega ,coffset_sniff_anchor ,contw -0x22c1 004163 ifetch 2 ,contr -0x22c2 004164 iadd temp ,timeup -0x22c3 004165 deposit timeup -0x22c4 004166 istore 4 ,contw -0x22c5 004167 branch le_context_nexthop -: 004170 context_search_window: -0x22c6 004171 bbit0 state_insniff ,context_search_next -0x22c7 004172 call context_get_anchor -0x22c8 004173 iadd stop_watch ,pdata -0x22c9 004174 iadd stop_watch ,pdata -0x22ca 004175 iadd queue ,pdata -0x22cb 004176 isub temp ,null -0x22cc 004177 nbranch context_search_next ,positive -0x22cd 004178 force 0 ,null -0x22ce 004179 rtn -: 004181 context_traverse_clearkey: -0x22cf 004182 bbit0 state_inconn ,context_search_next -0x22d0 004183 deposit temp -0x22d1 004184 isub rega ,null -0x22d2 004185 branch context_search_next ,null -0x22d3 004186 add rega ,coffset_mode ,contr -0x22d4 004187 ifetch 1 ,contr -0x22d5 004188 bbit1 mode_le ,context_search_next -0x22d6 004189 ifetch 1 ,rega -0x22d7 004190 set0 state_linkkey ,pdata -0x22d8 004191 istore 1 ,rega -0x22d9 004192 branch context_search_next -: 004195 master_conn_send_packet: -0x22da 004196 bpatch patch05_7 ,mem_patch05 -0x22db 004197 call rf_setup_time_master_slot -: 004198 master_send_packet: -0x22dc 004199 add clkn_bt ,1 ,bt_clk -0x22dd 004200 call fetch_self_bt_adr -0x22de 004201 force 0x03 ,freq_mode -0x22df 004202 call tx_radio_freq -0x22e0 004203 call start_transmitter -0x22e1 004204 call start_tx_native -0x22e2 004205 call send_access_word -0x22e3 004206 branch transmit_packet -: 004208 master_conn_recv_packet: -0x22e4 004209 bpatch patch06_0 ,mem_patch06 -0x22e5 004210 call rf_setup_time_slave_slot -: 004211 master_recv_packet: -0x22e6 004212 add clkn_bt ,1 ,bt_clk -0x22e7 004213 call fetch_self_bt_adr -0x22e8 004214 force 0x03 ,freq_mode -0x22e9 004215 call rx_radio_freq -0x22ea 004216 call init_rx_packet_flags -0x22eb 004217 call prep_crypt -0x22ec 004218 call start_rx_native -0x22ed 004219 call start_receiver -: 004220 master_rx_conn_finish_packet: -0x22ee 004221 call wait_access_clkn_rt -0x22ef 004222 nrtn sync -0x22f0 004223 call save_rssi -0x22f1 004224 branch receive_packet -: 004228 master_newconn_once: -0x22f2 004229 bpatch patch06_1 ,mem_patch06 -0x22f3 004230 fetch 1 ,mem_fhs_am_addr -0x22f4 004231 iforce am_addr -0x22f5 004232 force type_poll ,type -0x22f6 004233 call master_conn_send_packet -0x22f7 004234 branch master_conn_recv_packet -: 004245 inquiry_scan_dispatch: -0x22f8 004246 fetch 1 ,mem_scan_mode -0x22f9 004247 rtnbit0 inq_scan_mode -0x22fa 004248 force iscan_interval_timer ,queue -0x22fb 004249 call timer_check -0x22fc 004250 nrtn blank -0x22fd 004251 fetcht 2 ,mem_iscan_window -0x22fe 004252 force 4 ,queue -0x22ff 004253 call sniff_check_window -0x2300 004254 rtn user -0x2301 004255 call inquiry_scan_start -0x2302 004256 force iscan_interval_timer ,queue -0x2303 004257 fetch 2 ,mem_iscan_interval -0x2304 004258 nbranch timer_init ,sync -0x2305 004259 random pdata -0x2306 004260 iand mask3ff ,pdata -0x2307 004261 branch timer_init -: 004264 inquiry_scan_start: -0x2308 004265 bpatch patch06_2 ,mem_patch06 -0x2309 004266 jam 0 ,mem_fhs_am_addr -0x230a 004267 disable clknt -0x230b 004268 disable attempt -0x230c 004269 call afh_clear -0x230d 004270 and clkn_bt ,0x1fc ,bt_clk -0x230e 004271 force 0x01 ,freq_mode -0x230f 004272 call fetch_giac -0x2310 004273 call rx_radio_freq -0x2311 004274 setflip mark_inquiry_state ,mark -0x2312 004275 fetch 1 ,mem_inquiryscan_waitcnt -0x2313 004276 increase 1 ,pdata -0x2314 004277 store 1 ,mem_inquiryscan_waitcnt -0x2315 004278 call fetch_diac -0x2316 004279 call start_receiver -0x2317 004280 call wait_access_forever -0x2318 004281 nrtn sync -0x2319 004282 bpatch patch06_3 ,mem_patch06 -0x231a 004283 force 0 ,stop_watch -0x231b 004284 call shutdown_radio -0x231c 004285 fetch 1 ,mem_inquiryscan_rcvcnt -0x231d 004286 increase 1 ,pdata -0x231e 004287 store 1 ,mem_inquiryscan_rcvcnt -0x231f 004288 call fetch_giac -0x2320 004289 call rf_setup_time_slave_slot -0x2321 004290 or_into 0x002 ,bt_clk -0x2322 004291 force 0x01 ,freq_mode -0x2323 004292 call tx_radio_freq -0x2324 004293 call fetch_diac -0x2325 004294 call start_transmitter -0x2326 004295 call start_tx_external -0x2327 004296 deposit clkn_bt -0x2328 004297 store 4 ,mem_clkn_bt -0x2329 004298 call send_access_word -0x232a 004299 force type_fhs ,type -0x232b 004300 force 0 ,am_addr -0x232c 004301 call scan_mode_whiten -0x232d 004302 call transmit_packet_whitened -0x232e 004303 call send_eir -0x232f 004304 and_into 0x1fd ,bt_clk -0x2330 004305 increase 1 ,n_tx_slot -0x2331 004306 rtn -: 004308 send_eir: -0x2332 004309 bpatch patch06_4 ,mem_patch06 -0x2333 004310 fetch 1 ,mem_eir_enable -0x2334 004311 rtn blank -0x2335 004312 arg mem_eir ,contw -0x2336 004313 fetch 1 ,mem_local_name_length -0x2337 004314 copy pdata ,loopcnt -0x2338 004315 increase 1 ,pdata -0x2339 004316 istore 1 ,contw -0x233a 004317 copy contw ,temp -0x233b 004318 increase 1 ,pdata -0x233c 004319 store 2 ,mem_tx_len -0x233d 004320 copy temp ,contw -0x233e 004321 setarg 0x09 -0x233f 004322 istore 1 ,contw -0x2340 004323 arg mem_local_name ,contr -0x2341 004324 call memcpy -0x2342 004326 arg mem_all_uuid_128bits ,regc -0x2343 004327 arg 4 ,loopcnt -0x2344 004328 call get_all_uuid -0x2345 004329 arg mem_all_uuid_16bits ,regc -0x2346 004330 arg 1 ,loopcnt -0x2347 004331 call get_all_uuid -0x2348 004333 force type_dm3 ,type -0x2349 004334 jam 2 ,mem_tx_lch -0x234a 004335 setarg mem_eir -0x234b 004336 store 2 ,mem_txptr -0x234c 004337 call rf_setup_time_slave_slot -0x234d 004338 call tx_radio_freq -0x234e 004339 call start_transmitter -0x234f 004340 call start_tx_external -0x2350 004341 call send_access_word -0x2351 004342 call scan_mode_whiten -0x2352 004343 call transmit_packet_whitened -0x2353 004344 rtn -: 004347 get_all_uuid: -0x2354 004348 copy contw ,temp -0x2355 004349 copy regc ,contr -0x2356 004350 ifetch 1 ,contr -0x2357 004351 rtn blank -: 004352 lshift_loop: -0x2358 004353 lshift pdata ,pdata -0x2359 004354 loop lshift_loop -0x235a 004355 copy pdata ,rega -0x235b 004356 increase 2 ,pdata -0x235c 004357 copy pdata ,queue -0x235d 004358 fetch 2 ,mem_tx_len -0x235e 004359 iadd queue ,pdata -0x235f 004360 store 2 ,mem_tx_len -0x2360 004361 copy temp ,contw -0x2361 004362 copy rega ,pdata -0x2362 004363 increase 1 ,pdata -0x2363 004364 istore 1 ,contw -0x2364 004365 copy regc ,contr -0x2365 004366 ifetch 1 ,contr -0x2366 004367 ifetch 1 ,contr -0x2367 004368 istore 1 ,contw -0x2368 004369 copy rega ,loopcnt -0x2369 004370 branch memcpy -: 004376 page_scan_dispatch: -0x236a 004377 fetch 1 ,mem_scan_mode -0x236b 004378 rtnbit0 page_scan_mode -0x236c 004379 force pscan_interval_timer ,queue -0x236d 004380 call timer_check -0x236e 004381 nrtn blank -0x236f 004382 fetcht 2 ,mem_pscan_window -0x2370 004383 force 40 ,queue -0x2371 004384 call sniff_check_window -0x2372 004385 rtn user -0x2373 004386 force 0 ,am_addr -0x2374 004387 jam param_pagerespto ,mem_fhs_wait_counter -0x2375 004388 set0 mark_fhs_already_good ,mark -0x2376 004389 call page_scan_start -0x2377 004390 force pscan_interval_timer ,queue -0x2378 004391 fetch 2 ,mem_pscan_interval -0x2379 004392 branch timer_init -: 004395 page_scan_start: -0x237a 004396 bpatch patch06_5 ,mem_patch06 -0x237b 004397 disable clknt -0x237c 004398 call afh_clear -0x237d 004399 fetch 1 ,mem_pagescan_waitcnt -0x237e 004400 increase 1 ,pdata -0x237f 004401 store 1 ,mem_pagescan_waitcnt -0x2380 004402 force 0 ,n_tx_slot -0x2381 004403 call fetch_self_bt_adr -0x2382 004404 add clkn_bt ,1 ,bt_clk -0x2383 004405 force 0x02 ,freq_mode -0x2384 004406 bpatch patch06_6 ,mem_patch06 -0x2385 004407 call rx_radio_freq -0x2386 004408 call start_receiver -0x2387 004409 call wait_access_forever -0x2388 004410 nrtn sync -0x2389 004411 call shutdown_radio -0x238a 004412 fetch 1 ,mem_pagescan_rcvcnt -0x238b 004413 increase 1 ,pdata -0x238c 004414 store 1 ,mem_pagescan_rcvcnt -0x238d 004415 force 0 ,stop_watch -0x238e 004416 call rf_setup_time_slave_slot -0x238f 004417 or_into 0x002 ,bt_clk -0x2390 004418 force 0x01 ,freq_mode -0x2391 004419 call tx_radio_freq -0x2392 004420 call start_transmitter -0x2393 004421 call start_tx_external -0x2394 004422 call send_access_word -0x2395 004423 call end_of_packet -0x2396 004424 force 0 ,am_addr -0x2397 004425 arg param_rf_setup ,timeup -0x2398 004426 until clke_rt ,meet -0x2399 004427 or_into 0x03 ,clke_bt -0x239a 004428 and_into 0x1fd ,bt_clk -: 004429 page_scan_wait_fhs_restart: -0x239b 004430 bpatch patch06_7 ,mem_patch06 -0x239c 004431 increase 1 ,n_tx_slot -0x239d 004432 call rx_radio_freq -0x239e 004433 call start_receiver -0x239f 004434 call wait_access_mhalfbnd -0x23a0 004435 nbranch page_scan_wait_fhs_again ,sync -0x23a1 004436 call scan_mode_whiten -0x23a2 004437 call receive_packet_whitened -0x23a3 004438 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs -: 004439 page_scan_wait_fhs_again: -0x23a4 004440 bpatch patch07_0 ,mem_patch07 -0x23a5 004441 fetch 1 ,mem_fhs_wait_counter -0x23a6 004442 rtn blank -0x23a7 004443 increase -1 ,pdata -0x23a8 004444 store 1 ,mem_fhs_wait_counter -0x23a9 004445 call rf_setup_time_master_slot -0x23aa 004446 branch page_scan_wait_fhs_restart -: 004449 page_scan_reply_to_fhs: -0x23ab 004450 bpatch patch07_1 ,mem_patch07 -0x23ac 004451 set0 1 ,clke_bt -0x23ad 004452 set1 0 ,clke_bt -0x23ae 004453 fetch 1 ,mem_pagescan_rcvfhscnt -0x23af 004454 increase 1 ,pdata -0x23b0 004455 store 1 ,mem_pagescan_rcvfhscnt -0x23b1 004456 call rf_setup_time_slave_slot -0x23b2 004457 or_into 0x02 ,bt_clk -0x23b3 004458 call tx_radio_freq -0x23b4 004459 call start_transmitter -0x23b5 004460 call start_tx_external -0x23b6 004461 call send_access_word -0x23b7 004462 call end_of_packet -: 004463 slave_apply_clke_bt: -0x23b8 004464 compare 0x03 ,clke_bt ,0x03 -0x23b9 004465 branch slave_apply_clke_bt_now ,true -0x23ba 004466 until null ,mhalfbnd -0x23bb 004467 branch slave_apply_clke_bt -: 004468 slave_apply_clke_bt_now: -0x23bc 004469 fetch 4 ,mem_clke_bt -0x23bd 004470 or_into 0x03 ,pdata -0x23be 004471 icopy clke_bt -: 004473 start_slave_connection: -0x23bf 004474 bpatch patch07_2 ,mem_patch07 -0x23c0 004475 fetch 6 ,extm_lap -0x23c1 004476 store 6 ,mem_plap -0x23c2 004477 call prepare_newconn -: 004478 slave_newconn_loop: -0x23c3 004479 call slave_newconn_once -0x23c4 004480 branch sconn_successful ,match -0x23c5 004481 call new_conn_timeout -0x23c6 004482 nbranch slave_newconn_loop ,blank -0x23c7 004483 rtn -: 004486 sconn_successful: -0x23c8 004487 bpatch patch07_3 ,mem_patch07 -0x23c9 004488 call newconn_init -0x23ca 004489 call context_new -0x23cb 004490 nrtn zero -0x23cc 004491 jam 0 ,mem_mode -0x23cd 004492 call calc_clke_offset -0x23ce 004493 branch context_save -: 004498 slave_dispatch: -0x23cf 004499 bpatch patch07_4 ,mem_patch07 -0x23d0 004500 call calc_clke -0x23d1 004501 call role_switch_slave -0x23d2 004502 rtn user -: 004503 slave_loop: -0x23d3 004504 bpatch patch07_5 ,mem_patch07 -0x23d4 004505 call check_bt_disabled -0x23d5 004506 call scheduler_process -0x23d6 004507 call slave_conn_recv_packet -0x23d7 004508 nbranch slave_notmatch ,match -0x23d8 004509 call supervision_flush -0x23d9 004510 call scheduler_tx_l2cap_pkt -0x23da 004511 call prepare_tx -0x23db 004512 call slave_conn_send_packet -0x23dc 004513 call parse_l2cap -0x23dd 004514 call parse_lmp -0x23de 004515 fetch 1 ,mem_slave_rcvcnt -0x23df 004516 increase 1 ,pdata -0x23e0 004517 store 1 ,mem_slave_rcvcnt -0x23e1 004518 call calc_clke_offset -: 004519 slave_notmatch: -0x23e2 004520 bpatch patch07_6 ,mem_patch07 -0x23e3 004521 call lpm_set_mult -0x23e4 004522 call supervision_update -0x23e5 004523 branch slave_disconnect ,positive -0x23e6 004524 call check_disconnect_timeout -0x23e7 004525 nbranch slave_disconnect ,user -0x23e8 004526 call check_attempt -0x23e9 004527 nbranch slave_loop ,blank -0x23ea 004528 rtn -: 004530 slave_disconnect: -0x23eb 004531 bpatch patch07_7 ,mem_patch07 -0x23ec 004532 jam 0 ,mem_tester_emulate -0x23ed 004533 jam 0 ,mem_debug_config -0x23ee 004534 call quit_connection -0x23ef 004535 set0 mark_testmode ,mark -0x23f0 004536 call test_enable_white -0x23f1 004537 fetch 1 ,mem_state -0x23f2 004538 rtn -: 004541 role_switch_slave: -0x23f3 004542 bpatch patch08_0 ,mem_patch08 -0x23f4 004543 call role_switch_check -0x23f5 004544 nrtn user -0x23f6 004545 copy am_addr ,temp -0x23f7 004546 call get_free_amaddr -0x23f8 004547 store 1 ,mem_fhs_am_addr -0x23f9 004548 copy temp ,am_addr -0x23fa 004549 jam param_newconnto ,mem_newconnto_counter -: 004550 roles_sendfhs_loop: -0x23fb 004551 bpatch patch08_1 ,mem_patch08 -0x23fc 004552 call rf_setup_time_master_slot -0x23fd 004553 force type_fhs ,type -0x23fe 004554 call slave_send_access -0x23ff 004555 deposit clkn_bt -0x2400 004556 store 4 ,mem_clkn_bt -0x2401 004557 call transmit_packet -0x2402 004558 call rf_setup_time_slave_slot -0x2403 004559 enable user3 -0x2404 004560 call slave_receive_access -0x2405 004561 branch roles_got_fhs_reply ,sync -0x2406 004562 call shutdown_radio -0x2407 004563 call new_conn_timeout -0x2408 004564 nbranch roles_sendfhs_loop ,blank -0x2409 004565 rtnmark0 mark_accept_switch -0x240a 004566 jam lmp_slot_offset ,mem_lmo_opcode2 -0x240b 004567 set1 mark_switch_initiated ,mark -0x240c 004568 rtn -: 004569 roles_got_fhs_reply: -0x240d 004570 enable clknt -0x240e 004571 call prepare_newconn -0x240f 004572 call afh_clear -: 004573 roles_newconn_loop: -0x2410 004574 bpatch patch08_2 ,mem_patch08 -0x2411 004575 call master_newconn_once -0x2412 004576 branch roles_newconn_responded ,sync -0x2413 004577 call new_conn_timeout -0x2414 004578 nbranch roles_newconn_loop ,blank -0x2415 004579 disable clknt -0x2416 004580 deposit clke_bt -0x2417 004581 store 4 ,mem_next_btclk -0x2418 004582 rtn -: 004583 roles_newconn_responded: -0x2419 004584 enable master -0x241a 004585 bmark0 mark_accept_switch ,roles_newconn_nolmp -0x241b 004586 set0 mark_accept_switch ,mark -0x241c 004587 jam lmp_accepted ,mem_lmo_opcode2 -0x241d 004588 jam lmp_host_connection_req ,mem_lmi_opcode2 -0x241e 004589 call tid_set_reply -: 004590 roles_newconn_nolmp: -0x241f 004591 deposit am_addr -0x2420 004592 store 1 ,mem_amaddr -0x2421 004593 force 0 ,pdata -0x2422 004594 store 6 ,mem_clk_offset -0x2423 004595 fetch 1 ,mem_mode -0x2424 004596 set1 mode_master ,pdata -0x2425 004597 store 1 ,mem_mode -0x2426 004598 call supervision_flush -0x2427 004599 disable master -0x2428 004600 enable user -0x2429 004601 rtn -: 004605 init_rx_packet_flags: -0x242a 004606 bpatch patch08_3 ,mem_patch08 -0x242b 004607 disable match -0x242c 004608 set0 mark_loopback ,mark -0x242d 004609 set0 mark_am_addr_broadcast ,mark -0x242e 004610 set0 mark_longpacket ,mark -0x242f 004611 set0 mark_old_packet ,mark -0x2430 004612 fetch 1 ,mem_arq -0x2431 004613 set0 arqnx ,pdata -0x2432 004614 set1 flowx ,pdata -0x2433 004615 store 1 ,mem_arq -0x2434 004616 rtn -: 004618 prepare_newconn: -0x2435 004619 bpatch patch08_4 ,mem_patch08 -0x2436 004620 jam param_newconnto ,mem_newconnto_counter -0x2437 004621 jam param_newconn_arq ,mem_arq -0x2438 004622 fetch 2 ,mem_rx_window_init -0x2439 004623 store 2 ,mem_rx_window -0x243a 004624 deposit clkn_bt -0x243b 004625 store 4 ,mem_next_btclk -0x243c 004626 rtn clknt -0x243d 004627 deposit clke_bt -0x243e 004628 store 4 ,mem_next_btclk -0x243f 004629 rtn -: 004631 newconn_init: -0x2440 004632 bpatch patch08_5 ,mem_patch08 -0x2441 004633 call init_lmp_reinit -0x2442 004634 call new_conn_handle -0x2443 004635 store 1 ,mem_conn_handle -0x2444 004636 setarg 0 -0x2445 004637 store 2 ,mem_l2cap_rxbuff1_len -0x2446 004638 setarg param_supervision_to -0x2447 004639 store 2 ,mem_supervision_to -0x2448 004640 fetch 1 ,mem_state -0x2449 004641 set1 state_inconn ,pdata -0x244a 004642 store 1 ,mem_state -0x244b 004643 jam 0 ,mem_op -0x244c 004644 jam 0 ,mem_state_map -0x244d 004645 jam 0 ,mem_lpm_current_mult -0x244e 004646 branch supervision_flush -: 004649 clear_linkkey: -0x244f 004650 bpatch patch08_6 ,mem_patch08 -0x2450 004651 force 0 ,pdata -0x2451 004652 store 8 ,mem_link_key -0x2452 004653 istore 8 ,contw -0x2453 004654 call clear_linkstate -0x2454 004655 branch context_traverse_linkkey -: 004657 new_conn_timeout: -0x2455 004658 fetch 1 ,mem_newconnto_counter -0x2456 004659 increase -1 ,pdata -0x2457 004660 store 1 ,mem_newconnto_counter -0x2458 004661 rtn -: 004663 new_conn_handle: -0x2459 004664 fetch 1 ,mem_handle_num -0x245a 004665 increase 1 ,pdata -0x245b 004666 store 1 ,mem_handle_num -0x245c 004667 rtn -: 004670 quit_connection: -0x245d 004671 bpatch patch08_7 ,mem_patch08 -0x245e 004672 fetch 1 ,mem_hci_cmd -0x245f 004673 beq hci_cmd_remote_name_req ,quit_connection_name -0x2460 004674 fetch 1 ,mem_lmp_to_send -0x2461 004675 bne lmp_name_req ,quit_connection_cont -: 004676 quit_connection_name: -0x2462 004677 call cmd_check_plap -0x2463 004678 nbranch quit_connection_cont ,zero -0x2464 004679 call master_name_error -0x2465 004680 jam 0 ,mem_hci_cmd -: 004681 quit_connection_cont: -0x2466 004682 bpatch patch09_0 ,mem_patch09 -0x2467 004683 call app_disconn_reason_collect_bt -0x2468 004684 call sniff_exit -0x2469 004685 jam bt_evt_bb_disconnected ,mem_fifo_temp -0x246a 004686 call ui_ipc_send_event -0x246b 004687 call init_lmp_work -0x246c 004688 call l2cap_init_work -0x246d 004689 call sp_initialize -0x246e 004690 fetch 1 ,mem_state -0x246f 004691 set0 state_inconn -0x2470 004692 store 1 ,mem_state -0x2471 004693 jam 0 ,memui_reconnect_mode -0x2472 004695 fetch 1 ,mem_state_map -0x2473 004696 compare 0x0 ,pdata ,0xc0 -0x2474 004697 branch quit_connection_not_clear_mark ,true -0x2475 004698 set0 mark_rxbuf_inuse ,mark -: 004699 quit_connection_not_clear_mark: -0x2476 004700 fetch 1 ,mem_arq -0x2477 004701 bbit0 wack ,quit_connection_not_clear_tx -: 004702 quit_connection_not_clear_tx: -0x2478 004703 fetch 1 ,mem_op -0x2479 004704 rtnbit0 op_txl2cap -0x247a 004705 set0 mark_tx_l2cap ,mark -0x247b 004706 rtn -: 004708 slave_newconn_once: -0x247c 004709 bpatch patch09_1 ,mem_patch09 -0x247d 004710 fetch 1 ,extm_newconn_am_addr -0x247e 004711 rtn blank -0x247f 004712 icopy am_addr -0x2480 004713 call slave_conn_recv_packet -0x2481 004714 nrtn match -0x2482 004715 force type_null ,type -0x2483 004716 call slave_conn_send_packet -0x2484 004717 deposit am_addr -0x2485 004718 store 1 ,mem_amaddr -0x2486 004719 force 0 ,pdata -0x2487 004720 store 1 ,extm_newconn_am_addr -0x2488 004721 rtn -: 004727 prepare_tx: -0x2489 004728 bpatch patch09_2 ,mem_patch09 -0x248a 004729 fetch 1 ,mem_state -0x248b 004730 bbit0 state_insco ,prepare_tx_not_sco -0x248c 004731 force type_hv3 ,type -0x248d 004732 bmark0 mark_esco ,prepare_tx_not_esco -0x248e 004733 call check_esco_amaddr -0x248f 004734 nbranch prepare_tx_not_sco ,true -0x2490 004735 branch prepare_tx_not_sco ,attempt -0x2491 004736 call set_wait_ack -0x2492 004737 setarg 2 -0x2493 004738 store 2 ,mem_retransmission_cnt -0x2494 004739 rtn -: 004740 prepare_tx_not_esco: -0x2495 004741 nrtn attempt -: 004742 prepare_tx_not_sco: -0x2496 004743 bpatch patch09_3 ,mem_patch09 -0x2497 004744 call context_check_all_wack -0x2498 004745 nbranch prepare_tx_no_retransmit ,zero -0x2499 004746 fetch 1 ,mem_arq -0x249a 004747 bbit0 wack ,prepare_tx_pollnull -: 004748 prepare_tx_retransmit: -0x249b 004749 bmark1 mark_loopback ,prepare_tx_loopback -0x249c 004750 fetch 1 ,mem_debug_config -0x249d 004751 bbit1 debug_tx_pattern ,prepare_tx_txpat -0x249e 004752 fetch 2 ,mem_retransmission_cnt -0x249f 004753 increase -1 ,pdata -0x24a0 004754 store 2 ,mem_retransmission_cnt -0x24a1 004755 branch prepare_tx_nomore_retransmit ,blank -0x24a2 004756 fetch 1 ,mem_last_type -0x24a3 004757 iforce type -0x24a4 004758 rtn -: 004760 prepare_tx_nomore_retransmit: -0x24a5 004761 bpatch patch09_4 ,mem_patch09 -0x24a6 004762 call clear_got_tx -: 004763 prepare_tx_no_retransmit: -0x24a7 004764 call check_esco_amaddr -0x24a8 004765 branch prepare_tx_pollnull ,true -0x24a9 004766 call send_lmp -0x24aa 004767 branch prepare_tx_sendlmp ,user -0x24ab 004768 fetch 1 ,mem_op -0x24ac 004769 bbit1 op_txl2cap ,prepare_tx_sendl2cap -0x24ad 004770 bmark1 mark_loopback ,prepare_tx_loopback -0x24ae 004771 fetch 1 ,mem_debug_config -0x24af 004772 bbit1 debug_tx_pattern ,prepare_tx_txpat -: 004773 prepare_tx_pollnull: -0x24b0 004774 force type_poll ,type -0x24b1 004775 rtn master -0x24b2 004776 force type_null ,type -0x24b3 004777 rtn -: 004778 prepare_tx_loopback: -0x24b4 004779 bpatch patch09_5 ,mem_patch09 -0x24b5 004780 fetch 1 ,mem_rx_type -0x24b6 004781 iforce type -0x24b7 004782 rtnne 1 -0x24b8 004783 force type_null ,type -0x24b9 004784 rtn -: 004785 prepare_tx_txpat: -0x24ba 004786 fetch 1 ,test_mode_packet_type -0x24bb 004787 and pdata ,0xf ,type -0x24bc 004788 set1 mark_loopback ,mark -0x24bd 004789 rtn -: 004790 prepare_tx_sendlmp: -0x24be 004791 force type_lmp ,type -0x24bf 004792 branch set_wait_ack -: 004793 prepare_tx_sendl2cap: -0x24c0 004794 call tx_l2cap_type -: 004796 set_wait_ack: -0x24c1 004797 bpatch patch09_6 ,mem_patch09 -0x24c2 004798 fetcht 1 ,mem_arq -0x24c3 004799 set1 wack ,temp -0x24c4 004800 storet 1 ,mem_arq -0x24c5 004801 deposit type -0x24c6 004802 store 1 ,mem_last_type -0x24c7 004803 setarg 0xffff -0x24c8 004804 store 2 ,mem_retransmission_cnt -0x24c9 004805 rtn -: 004807 tx_l2cap_type: -0x24ca 004808 bpatch patch09_7 ,mem_patch09 -0x24cb 004809 fetch 1 ,mem_state_map -0x24cc 004810 isolate1 smap_edr ,pdata -0x24cd 004811 fetch 2 ,mem_tx_len -0x24ce 004812 branch tx_l2cap_type_edr ,true -0x24cf 004813 force type_dm1 ,type -0x24d0 004814 sub pdata ,17 ,null -0x24d1 004815 rtn positive -0x24d2 004816 force type_dh1 ,type -0x24d3 004817 sub pdata ,27 ,null -0x24d4 004818 rtn positive -0x24d5 004819 force type_dm3 ,type -0x24d6 004820 sub pdata ,121 ,null -0x24d7 004821 rtn positive -0x24d8 004822 force type_dh3 ,type -0x24d9 004823 sub pdata ,183 ,null -0x24da 004824 rtn positive -0x24db 004825 force type_dm5 ,type -0x24dc 004826 sub pdata ,224 ,null -0x24dd 004827 rtn positive -0x24de 004828 force type_dh5 ,type -0x24df 004829 rtn -: 004830 tx_l2cap_type_edr: -0x24e0 004831 force type_dm1 ,type -0x24e1 004832 sub pdata ,17 ,null -0x24e2 004833 rtn positive -0x24e3 004834 force type_dh1 ,type -0x24e4 004835 sub pdata ,54 ,null -0x24e5 004836 rtn positive -0x24e6 004837 force type_dm3 ,type -0x24e7 004838 arg 367 ,temp -0x24e8 004839 isub temp ,null -0x24e9 004840 nrtn positive -0x24ea 004841 force type_dm5 ,type -0x24eb 004842 arg 679 ,temp -0x24ec 004843 isub temp ,null -0x24ed 004844 nrtn positive -0x24ee 004845 force type_dh5 ,type -0x24ef 004846 rtn -: 004855 slave_receive_master_slot: -0x24f0 004856 fetch 1 ,mem_state -0x24f1 004857 bbit0 state_insniff ,slave_receive_notsniff -0x24f2 004858 fetch 2 ,mem_tsniff -0x24f3 004859 branch slave_receive_notsniff ,blank -0x24f4 004860 nbranch slave_receive_sniff ,attempt -: 004861 slave_receive_notsniff: -0x24f5 004862 call rf_setup_time_master_slot -: 004863 slave_receive_access: -0x24f6 004864 add clke_bt ,1 ,bt_clk -: 004865 slave_receive_sniff: -0x24f7 004866 enable swfine -0x24f8 004867 fetch 2 ,mem_rx_window -0x24f9 004868 rshift pdata ,pdata -0x24fa 004869 arg param_pll_setup ,temp -0x24fb 004870 iadd temp ,pdata -0x24fc 004871 call ahead_window -0x24fd 004872 call fetch_extm_bt_adr -0x24fe 004873 force 0x03 ,freq_mode -0x24ff 004874 call rx_radio_freq -0x2500 004875 call init_rx_packet_flags -0x2501 004876 call prep_crypt -0x2502 004877 bpatch patch0a_0 ,mem_patch0a -0x2503 004878 fetch 2 ,mem_rx_window -0x2504 004879 rshift pdata ,pdata -0x2505 004880 call ahead_window -0x2506 004881 call start_receiver -0x2507 004882 enable decode_fec0 -0x2508 004883 fetch 2 ,mem_rx_window -0x2509 004884 arg param_clke_cal ,temp -0x250a 004885 iadd temp ,stop_watch -0x250b 004886 correlate null ,timeout -0x250c 004887 copy clke ,temp -0x250d 004888 storet 6 ,mem_sync_clke -0x250e 004889 disable decode_fec0 -0x250f 004890 nrtn sync -0x2510 004891 arg param_clke_cal ,clke_rt -0x2511 004892 copy bt_clk ,clke_bt -0x2512 004893 branch lpm_adjust_clk ,wake -0x2513 004894 rtn -: 004897 slave_conn_recv_packet: -0x2514 004898 bpatch patch0a_1 ,mem_patch0a -0x2515 004899 call slave_receive_master_slot -0x2516 004900 nbranch shutdown_radio ,sync -0x2517 004901 call save_rssi -0x2518 004902 bmark0 mark_testmode ,receive_packet -0x2519 004903 fetch 2 ,mem_tst_pktcnt_sync -0x251a 004904 increase 1 ,pdata -0x251b 004905 store 2 ,mem_tst_pktcnt_sync -: 004906 receive_packet: -0x251c 004907 rshift bt_clk ,temp -0x251d 004908 or temp ,0x40 ,white_init -: 004909 receive_packet_whitened: -0x251e 004910 bpatch patch0a_2 ,mem_patch0a -0x251f 004911 enable enable_white -0x2520 004912 enable enable_hec -0x2521 004913 enable decode_fec1 -0x2522 004914 parse demod ,bucket ,3 -0x2523 004915 rshift8 pwindow ,pdata -0x2524 004916 store 1 ,mem_temp_am_addr -0x2525 004917 parse demod ,bucket ,4 -0x2526 004918 inject bucket ,7 -0x2527 004919 copy pwindow ,pdata -0x2528 004920 store 1 ,mem_rx_type -0x2529 004921 parse demod ,bucket ,3 -0x252a 004922 rshift8 pwindow ,pdata -0x252b 004923 store 1 ,mem_temp_arq -0x252c 004924 fetch 1 ,mem_rx_type -0x252d 004925 sub pdata ,3 ,null -0x252e 004926 branch receive_packet_noedr ,positive -0x252f 004927 beq 7 ,receive_packet_noedr -0x2530 004928 fetch 1 ,mem_state_map -0x2531 004929 isolate1 smap_edr ,pdata -0x2532 004930 setflag true ,psk ,radio_ctrl -: 004931 receive_packet_noedr: -0x2533 004932 bpatch patch0a_3 ,mem_patch0a -0x2534 004933 parse demod ,bucket ,8 -0x2535 004934 disable decode_fec1 -0x2536 004935 disable enable_hec -0x2537 004936 branch error_header ,crc_failed -0x2538 004937 bmark0 mark_testmode ,receive_packet_amchk -0x2539 004938 fetch 2 ,mem_tst_pktcnt_hec -0x253a 004939 increase 1 ,pdata -0x253b 004940 store 2 ,mem_tst_pktcnt_hec -: 004941 receive_packet_amchk: -0x253c 004942 bpatch patch0a_4 ,mem_patch0a -0x253d 004943 fetch 1 ,mem_temp_am_addr -0x253e 004944 compare 0 ,pdata ,0x07 -0x253f 004945 setflag true ,mark_am_addr_broadcast ,mark -0x2540 004946 branch am_addr_ok ,true -0x2541 004947 icompare 0x07 ,am_addr -0x2542 004948 branch am_addr_match ,true -0x2543 004949 bmark0 mark_esco ,end_of_packet -0x2544 004950 fetcht 1 ,mem_saved_amaddr -0x2545 004951 icompare 0x7 ,temp -0x2546 004952 nbranch end_of_packet ,true -0x2547 004953 fetch 1 ,mem_arq -0x2548 004954 set0 arqnx ,pdata -0x2549 004955 set1 flowx ,pdata -0x254a 004956 store 1 ,mem_arq -: 004957 am_addr_match: -0x254b 004958 enable match -: 004959 am_addr_ok: -0x254c 004960 bpatch patch0a_5 ,mem_patch0a -0x254d 004961 fetch 1 ,mem_rx_type -0x254e 004962 icopy type -0x254f 004963 bmark1 mark_am_addr_broadcast ,arqn_bypass -0x2550 004964 fetcht 1 ,mem_temp_arq -0x2551 004965 fetch 1 ,mem_arq -0x2552 004966 set0 flow ,pdata -0x2553 004967 isolate1 flow ,temp -0x2554 004968 setflag true ,flow ,pdata -0x2555 004969 isolate1 arqn ,temp -0x2556 004970 setflag true ,arqn ,pdata -0x2557 004971 store 1 ,mem_arq -0x2558 004972 isolate0 arqn ,temp -0x2559 004973 branch arqn_bypass ,true -0x255a 004974 call clear_got_tx -: 004975 arqn_bypass: -0x255b 004976 bpatch patch0a_6 ,mem_patch0a -0x255c 004977 arg 0 ,temp -0x255d 004978 call reserve_slot -0x255e 004979 and type ,0xf ,pdata -0x255f 004980 beq type_poll ,process_poll -0x2560 004981 beq type_null ,end_of_packet -0x2561 004982 beq type_fhs ,process_fhs -0x2562 004983 fetcht 1 ,mem_temp_arq -0x2563 004984 fetch 1 ,mem_arq -0x2564 004985 icompare 0x04 ,temp -0x2565 004986 nbranch rx_type_dispatch ,true -0x2566 004987 bmark0 mark_am_addr_broadcast ,failed_seqn -0x2567 004988 bbit0 bcast1 ,rx_type_dispatch -: 004989 failed_seqn: -0x2568 004990 set1 mark_old_packet ,mark -: 004991 rx_type_dispatch: -0x2569 004992 bpatch patch0a_7 ,mem_patch0a -0x256a 004993 deposit type -0x256b 004994 beq type_dm1 ,process_dm1 -0x256c 004995 beq type_dh1 ,process_dh1 -0x256d 004996 beq type_hv3 ,process_hev -0x256e 004997 beq type_3dh1 ,process_3dh1 -0x256f 004998 arg 4 ,temp -0x2570 004999 call reserve_slot -0x2571 005000 beq type_dm3 ,process_dm3 -0x2572 005001 beq type_dh3 ,process_dh3 -0x2573 005002 arg 8 ,temp -0x2574 005003 call reserve_slot -0x2575 005004 beq type_dm5 ,process_dm5 -0x2576 005005 beq type_dh5 ,process_dh5 -0x2577 005006 rtn -: 005009 process_hev: -0x2578 005010 bpatch patch0b_0 ,mem_patch0b -0x2579 005011 enable decode_fec0 -0x257a 005012 enable enable_crc -0x257b 005013 enable encrypt -0x257c 005014 arg mem_sco_ibuf ,contw -0x257d 005015 force 30 ,loopcnt -: 005016 process_hev_loop: -0x257e 005017 parse demod ,bucket ,8 -0x257f 005018 rshift3 pwindow ,pdata -0x2580 005019 istore 1 ,contw -0x2581 005020 loop process_hev_loop -0x2582 005021 bmark0 mark_esco ,end_of_packet -0x2583 005022 parse demod ,bucket ,16 -0x2584 005023 nsetflag crc_failed ,mark_esco_rxok ,mark -0x2585 005024 branch error_payload ,crc_failed -0x2586 005025 branch ack_payload -: 005028 process_poll: -0x2587 005029 branch end_of_packet -: 005031 process_dm3: -: 005032 process_dm5: -0x2588 005033 set1 mark_longpacket ,mark -: 005034 process_dm1: -0x2589 005035 enable decode_fec2 -0x258a 005036 branch process_dmh -: 005038 process_dh3: -: 005039 process_dh5: -0x258b 005040 set1 mark_longpacket ,mark -: 005041 process_3dh1: -0x258c 005042 set1 psk3m ,radio_ctrl -: 005043 process_dh1: -0x258d 005044 enable decode_fec0 -: 005045 process_dmh: -0x258e 005046 bpatch patch0b_1 ,mem_patch0b -0x258f 005047 bmark1 mark_rxbuf_inuse ,end_of_packet -0x2590 005048 isolate0 psk ,radio_ctrl -0x2591 005049 branch process_dmh_noedr ,true -0x2592 005050 disable enable_white -0x2593 005051 enable decode_fec0 -0x2594 005052 disable decode_fec2 -0x2595 005053 add clkn_bt ,2 ,timeup -0x2596 005054 correlate clkn_bt ,meet -0x2597 005055 nbranch error_payload ,sync -0x2598 005056 set1 mark_longpacket ,mark -0x2599 005057 enable enable_white -: 005058 process_dmh_noedr: -0x259a 005059 bpatch patch0b_2 ,mem_patch0b -0x259b 005060 enable encrypt -0x259c 005061 enable enable_crc -0x259d 005062 parse demod ,bucket ,3 -0x259e 005063 rshift8 pwindow ,pdata -0x259f 005064 store 1 ,mem_lch_code -0x25a0 005065 parse demod ,bucket ,5 -0x25a1 005066 bmark1 mark_longpacket ,process_dmh_long -0x25a2 005067 rshift3 pwindow ,loopcnt -0x25a3 005068 rshift3 loopcnt ,loopcnt -0x25a4 005069 branch process_dmh_common -: 005070 process_dmh_long: -0x25a5 005071 parse demod ,bucket ,5 -0x25a6 005072 rshift pwindow ,loopcnt -0x25a7 005073 parse demod ,bucket ,3 -: 005074 process_dmh_common: -0x25a8 005075 bpatch patch0b_3 ,mem_patch0b -0x25a9 005076 deposit loopcnt -0x25aa 005077 store 2 ,mem_len -0x25ab 005078 branch process_dmh_data_end ,blank -0x25ac 005079 isub mask3ff ,null -0x25ad 005080 branch error_payload ,positive -0x25ae 005081 bpatch patch0b_4 ,mem_patch0b -0x25af 005082 set0 mark_fhs_eir ,mark -0x25b0 005083 fetch 1 ,mem_lch_code -0x25b1 005084 and_into 0x03 ,pdata -0x25b2 005085 arg mem_rxbuf ,contw -0x25b3 005086 beq llid_lmp ,process_lmp -0x25b4 005087 bmark1 mark_testmode ,process_dmh_data -0x25b5 005089 fetch 1 ,mem_lch_code -0x25b6 005090 and_into 0x03 ,pdata -0x25b7 005091 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt -0x25b8 005092 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt -0x25b9 005093 branch error_payload -: 005095 process_lmp: -0x25ba 005096 fetch 2 ,mem_len -0x25bb 005097 sub pdata ,0x70 ,null -0x25bc 005098 nbranch error_payload ,positive -0x25bd 005099 bmark1 mark_old_packet ,ack_payload -0x25be 005100 branch process_dmh_data -: 005103 process_dmh_data_l2cap_start_pkt: -0x25bf 005104 bpatch patch0b_5 ,mem_patch0b -0x25c0 005105 bmark1 mark_old_packet ,ack_payload -0x25c1 005106 fetch 2 ,mem_len -0x25c2 005107 arg 0x2e0 ,temp -0x25c3 005108 isub temp ,null -0x25c4 005109 branch error_payload ,positive -0x25c5 005110 fetch 1 ,mem_l2cap_rxbuff_inuse -0x25c6 005111 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 -0x25c7 005112 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 -0x25c8 005113 branch end_of_packet -: 005114 process_dmh_data_into_buff1: -0x25c9 005115 jam 1 ,mem_l2cap_rxbuff_new -0x25ca 005116 fetch 2 ,mem_l2cap_rxbuff1_len -0x25cb 005117 bne 0 ,end_of_packet -0x25cc 005118 arg mem_l2cap_rxbuff1 ,contw -0x25cd 005119 branch process_dmh_data -: 005120 process_dmh_data_into_buff2: -0x25ce 005121 jam 2 ,mem_l2cap_rxbuff_new -0x25cf 005122 fetch 2 ,mem_l2cap_rxbuff2_len -0x25d0 005123 bne 0 ,end_of_packet -0x25d1 005124 arg mem_l2cap_rxbuff2 ,contw -0x25d2 005125 branch process_dmh_data -: 005127 process_dmh_data_l2cap_continue_pkt: -0x25d3 005128 bpatch patch0b_6 ,mem_patch0b -0x25d4 005129 bmark1 mark_old_packet ,ack_payload -0x25d5 005130 fetch 2 ,mem_len -0x25d6 005131 arg 0x2e0 ,temp -0x25d7 005132 isub temp ,null -0x25d8 005133 branch error_payload ,positive -0x25d9 005134 fetch 1 ,mem_l2cap_rxbuff_new -0x25da 005135 beq 1 ,process_dmh_data_l2cap_continue_pkt1 -0x25db 005136 beq 2 ,process_dmh_data_l2cap_continue_pkt2 -0x25dc 005137 branch end_of_packet -: 005138 process_dmh_data_l2cap_continue_pkt1: -0x25dd 005139 arg mem_l2cap_rxbuff1 ,contw -0x25de 005140 fetch 2 ,mem_l2cap_rxbuff1_len -0x25df 005141 iadd contw ,contw -0x25e0 005142 branch process_dmh_data -: 005143 process_dmh_data_l2cap_continue_pkt2: -0x25e1 005144 arg mem_l2cap_rxbuff2 ,contw -0x25e2 005145 fetch 2 ,mem_l2cap_rxbuff2_len -0x25e3 005146 iadd contw ,contw -: 005147 process_dmh_data: -0x25e4 005148 parse demod ,bucket ,8 -0x25e5 005149 rshift3 pwindow ,pdata -0x25e6 005150 istore 1 ,contw -0x25e7 005151 loop process_dmh_data -: 005152 process_dmh_data_end: -0x25e8 005153 bpatch patch0b_7 ,mem_patch0b -0x25e9 005154 parse demod ,bucket ,16 -0x25ea 005155 branch error_payload_crc ,crc_failed -0x25eb 005156 fetch 1 ,mem_l2cap_flow_ctrl_flag -0x25ec 005157 beq l2cap_flow_ctrl_enable ,end_of_packet -0x25ed 005158 bmark1 mark_testmode ,process_dmh_cont -0x25ee 005159 bmark1 mark_old_packet ,redundant_payload -0x25ef 005160 fetch 1 ,mem_lch_code -0x25f0 005161 compare 3 ,pdata ,3 -0x25f1 005162 branch process_dmh_cont ,true -0x25f2 005163 fetch 2 ,mem_len -0x25f3 005164 branch process_dmh_cont ,blank -0x25f4 005165 bpatch patch0c_0 ,mem_patch0c -0x25f5 005166 fetch 1 ,mem_l2cap_rxbuff_new -0x25f6 005167 beq 1 ,process_l2cap_pass_crc_buff1 -0x25f7 005168 beq 2 ,process_l2cap_pass_crc_buff2 -0x25f8 005169 branch assert -: 005170 process_l2cap_pass_crc_buff1: -0x25f9 005171 fetch 2 ,mem_l2cap_rxbuff1_len -0x25fa 005172 fetcht 2 ,mem_len -0x25fb 005173 iadd temp ,pdata -0x25fc 005174 store 2 ,mem_l2cap_rxbuff1_len -0x25fd 005175 beq 0 ,assert -0x25fe 005176 fetcht 2 ,mem_l2cap_rxbuff1 -0x25ff 005177 increase 4 ,temp -0x2600 005178 isub temp ,null -0x2601 005179 call l2cap_buff1_inuse ,zero -0x2602 005180 branch process_dmh_cont -: 005181 process_l2cap_pass_crc_buff2: -0x2603 005182 fetch 2 ,mem_l2cap_rxbuff2_len -0x2604 005183 fetcht 2 ,mem_len -0x2605 005184 iadd temp ,pdata -0x2606 005185 store 2 ,mem_l2cap_rxbuff2_len -0x2607 005186 beq 0 ,assert -0x2608 005187 fetcht 2 ,mem_l2cap_rxbuff2 -0x2609 005188 add temp ,4 ,temp -0x260a 005189 isub temp ,null -0x260b 005190 call l2cap_buff2_inuse ,zero -0x260c 005191 branch process_dmh_cont -: 005192 process_dmh_cont: -0x260d 005193 bpatch patch0c_1 ,mem_patch0c -0x260e 005194 fetcht 1 ,mem_state_map -0x260f 005195 fetch 1 ,mem_lch_code -0x2610 005196 compare 3 ,pdata ,0x03 -0x2611 005197 setflag true ,smap_rxlmp ,temp -0x2612 005198 nsetflag true ,smap_rxl2cap ,temp -0x2613 005199 storet 1 ,mem_state_map -0x2614 005200 nbranch process_dmh_cont_rxbuf_not_use ,true -0x2615 005201 set1 mark_rxbuf_inuse ,mark -: 005202 process_dmh_cont_rxbuf_not_use: -0x2616 005203 bmark0 mark_testmode ,ack_payload -0x2617 005204 isolate1 smap_rxlmp ,temp -0x2618 005205 branch ack_payload ,true -0x2619 005206 fetch 2 ,mem_tst_pktcnt_crc -0x261a 005207 increase 1 ,pdata -0x261b 005208 store 2 ,mem_tst_pktcnt_crc -0x261c 005209 set1 mark_loopback ,mark -0x261d 005210 set0 smap_rxl2cap ,temp -0x261e 005211 set0 mark_rxbuf_inuse ,mark -0x261f 005212 storet 1 ,mem_state_map -: 005213 ack_payload: -0x2620 005214 bpatch patch0c_2 ,mem_patch0c -0x2621 005215 fetcht 1 ,mem_temp_arq -0x2622 005216 fetch 1 ,mem_arq -0x2623 005217 set1 arqnx ,pdata -0x2624 005218 isolate1 seqn ,temp -0x2625 005219 setflag true ,seqn ,pdata -0x2626 005220 isolate1 mark_am_addr_broadcast ,mark -0x2627 005221 setflag true ,bcast1 ,pdata -0x2628 005222 store 1 ,mem_arq -0x2629 005223 fetch 2 ,mem_len -0x262a 005224 nbranch end_of_packet ,blank -0x262b 005225 fetch 1 ,mem_state_map -0x262c 005226 set0 smap_rxl2cap ,pdata -0x262d 005227 store 1 ,mem_state_map -0x262e 005228 fetch 1 ,mem_lch_code -0x262f 005229 compare 0x01 ,pdata ,0x07 -0x2630 005231 branch end_of_packet -: 005233 error_header: -0x2631 005234 bpatch patch0c_3 ,mem_patch0c -0x2632 005235 disable match -0x2633 005236 fetch 2 ,mem_rx_hec_err -0x2634 005237 increase 1 ,pdata -0x2635 005238 store 2 ,mem_rx_hec_err -0x2636 005239 branch end_of_packet -: 005240 error_payload_crc: -0x2637 005241 fetch 2 ,mem_rx_crc_err -0x2638 005242 increase 1 ,pdata -0x2639 005243 store 2 ,mem_rx_crc_err -0x263a 005244 call discard_pkt -0x263b 005245 bmark0 mark_testmode ,error_payload -0x263c 005246 set1 mark_loopback ,mark -: 005247 error_payload: -0x263d 005248 branch end_of_packet -: 005250 discard_pkt: -0x263e 005251 bpatch patch0c_4 ,mem_patch0c -0x263f 005252 fetch 1 ,mem_lch_code -0x2640 005253 compare 3 ,pdata ,0x03 -0x2641 005254 nbranch discard_pkt_l2cap ,true -: 005255 discard_pkt_lmp: -0x2642 005256 fetcht 1 ,mem_state_map -0x2643 005257 set0 smap_rxlmp ,temp -0x2644 005258 storet 1 ,mem_state_map -0x2645 005259 rtn -: 005260 discard_pkt_l2cap: -0x2646 005263 fetcht 1 ,mem_state_map -0x2647 005264 set0 smap_rxl2cap ,temp -0x2648 005265 storet 1 ,mem_state_map -0x2649 005266 branch h4_send_acl_trigger_clear -: 005268 redundant_payload: -0x264a 005269 fetch 1 ,mem_arq -0x264b 005270 set1 arqnx ,pdata -0x264c 005271 store 1 ,mem_arq -: 005272 end_of_packet: -0x264d 005273 bpatch patch0c_5 ,mem_patch0c -0x264e 005274 disable encode_fec0 -0x264f 005275 disable encode_fec2 -0x2650 005276 disable decode_fec0 -0x2651 005277 disable decode_fec2 -0x2652 005278 disable enable_crc -0x2653 005279 disable encrypt -0x2654 005280 disable enable_white -0x2655 005281 branch shutdown_radio ,is_rx -0x2656 005282 until null ,tx_clear -0x2657 005283 nop 100 -0x2658 005284 branch shutdown_radio -: 005286 process_fhs: -0x2659 005287 bpatch patch0c_6 ,mem_patch0c -0x265a 005288 enable enable_crc -0x265b 005289 enable decode_fec2 -0x265c 005290 parse demod ,bucket ,72 -0x265d 005291 isolate1 58 ,pdata -0x265e 005292 setflag true ,mark_fhs_eir ,mark -0x265f 005293 copy bt_adr ,temp -0x2660 005294 ialigned bt_adr -0x2661 005295 ialigned fhs0 -0x2662 005296 pulse recalc -0x2663 005297 setsect 2 ,0xfffff -0x2664 005298 setsect 3 ,0x0ffff -0x2665 005299 nop 32 -0x2666 005300 iverify fhs_parity -0x2667 005301 deposit lap -0x2668 005302 store 3 ,extm_lap -0x2669 005303 deposit uap -0x266a 005304 store 1 ,extm_uap -0x266b 005305 copy temp ,bt_adr -0x266c 005306 branch fhs_parity_ok ,true -0x266d 005307 branch error_payload -: 005308 fhs_parity_ok: -0x266e 005309 bpatch patch0c_7 ,mem_patch0c -0x266f 005310 parse demod ,bucket ,72 -0x2670 005311 ialigned fhs1 -0x2671 005312 ialigned am_addr -0x2672 005313 ialigned nap -0x2673 005314 ialigned regb -0x2674 005315 force 0 ,pdata -0x2675 005316 parse demod ,bucket ,16 -0x2676 005317 branch error_payload ,crc_failed -0x2677 005318 setarg 0x0ffffffc -0x2678 005319 iand regb ,pdata -0x2679 005320 store 4 ,mem_clke_bt -0x267a 005321 deposit fhs_class -0x267b 005322 store 3 ,extm_class -0x267c 005323 deposit fhs_misc -0x267d 005324 store 1 ,extm_fhs_misc -0x267e 005325 deposit am_addr -0x267f 005326 store 1 ,extm_newconn_am_addr -0x2680 005327 deposit nap -0x2681 005328 store 2 ,extm_nap -0x2682 005329 deposit bt_clk -0x2683 005330 inject rxf ,32 -0x2684 005331 compare type_fhs ,type ,0x0f -0x2685 005332 setflag true ,mark_fhs_already_good ,mark -0x2686 005333 branch end_of_packet -: 005335 clear_got_tx: -0x2687 005336 bpatch patch0d_0 ,mem_patch0d -0x2688 005337 fetch 1 ,mem_arq -0x2689 005338 rtnbit0 wack -0x268a 005339 set0 wack ,pdata -0x268b 005340 setflip seqnx ,pdata -0x268c 005341 store 1 ,mem_arq -0x268d 005342 fetch 1 ,mem_last_type -0x268e 005343 beq type_lmp ,clear_got_txlmp -0x268f 005344 rtneq type_hv3 -0x2690 005345 fetch 1 ,mem_op -0x2691 005346 rtnbit0 op_txl2cap ,pdata -0x2692 005347 set0 op_txl2cap ,pdata -0x2693 005348 set1 op_pkt_comp ,pdata -0x2694 005349 store 1 ,mem_op -0x2695 005350 set0 mark_tx_l2cap ,mark -0x2696 005351 fetch 2 ,mem_l2cap_tx_multi_offset -0x2697 005352 nrtn blank -0x2698 005353 fetch 1 ,mem_op -0x2699 005354 set0 op_pkt_comp ,pdata -0x269a 005355 store 1 ,mem_op -0x269b 005356 branch l2cap_malloc_free -: 005358 clear_got_txlmp: -0x269c 005359 bpatch patch0d_1 ,mem_patch0d -0x269d 005360 fetch 1 ,mem_lmo_header_opcode -0x269e 005361 rshift pdata ,pdata -0x269f 005362 beq lmp_start_encryption_req ,start_encryption -0x26a0 005363 beq lmp_stop_encryption_req ,stop_encryption -0x26a1 005364 beq lmp_unsniff_req ,sniff_exit -0x26a2 005365 beq lmp_escape ,clear_lmp_escape -0x26a3 005366 rtnne lmp_accepted -0x26a4 005367 fetch 1 ,mem_lmo_payload -0x26a5 005368 beq lmp_sco_link_req ,sco_link_req_by_slave -0x26a6 005369 beq lmp_start_encryption_req ,clear_send_setup_complete -0x26a7 005370 rtn -: 005372 clear_lmp_escape: -0x26a8 005373 fetch 1 ,mem_lmo_payload -0x26a9 005374 set1 7 ,pdata -0x26aa 005375 rtn -: 005376 clear_send_setup_complete: -0x26ab 005377 rtn master -0x26ac 005378 fetch 1 ,mem_state -0x26ad 005379 rtnbit1 state_conn_comp -0x26ae 005380 jam lmp_setup_complete ,mem_lmo_opcode2 -0x26af 005381 rtn -: 005384 sco_link_req_by_slave: -0x26b0 005385 rtn master -0x26b1 005386 fetch 1 ,mem_mode -0x26b2 005387 isolate1 send_sco_when_slave ,pdata -0x26b3 005388 branch clean_mem_mode ,true -0x26b4 005390 rtn -: 005391 clean_mem_mode: -0x26b5 005392 set0 send_sco_when_slave ,pdata -0x26b6 005393 store 1 ,mem_mode -0x26b7 005394 rtn -: 005396 start_encryption: -0x26b8 005397 bpatch patch0d_2 ,mem_patch0d -0x26b9 005398 fetch 1 ,mem_state_map -0x26ba 005399 set1 smap_encryption ,pdata -0x26bb 005400 store 1 ,mem_state_map -0x26bc 005401 jam 1 ,core_encrypt -0x26bd 005402 fetch 1 ,mem_state -0x26be 005403 isolate1 state_conn_comp ,pdata -0x26bf 005404 rtn -: 005406 stop_encryption: -0x26c0 005407 bpatch patch0d_3 ,mem_patch0d -0x26c1 005408 fetch 1 ,mem_state_map -0x26c2 005409 set0 smap_encryption ,pdata -0x26c3 005410 store 1 ,mem_state_map -0x26c4 005411 jam 0 ,core_encrypt -0x26c5 005412 rtn -: 005415 sniff_init: -0x26c6 005416 bpatch patch0d_4 ,mem_patch0d -0x26c7 005417 copy clkn_bt ,pdata -0x26c8 005418 store 4 ,mem_lpm_delay_after_sniff -0x26c9 005419 add clkn_bt ,3 ,rega -0x26ca 005420 branch sniff_init_master ,master -0x26cb 005421 add clke_bt ,3 ,rega -: 005422 sniff_init_master: -0x26cc 005423 fetcht 2 ,mem_tsniff -0x26cd 005424 deposit rega -0x26ce 005425 set0 27 ,pdata -0x26cf 005426 idiv temp -0x26d0 005427 fetch 2 ,mem_dsniff -0x26d1 005428 call wait_div_end -0x26d2 005429 remainder regc -0x26d3 005430 isub regc ,pdata -0x26d4 005431 branch sniff_init_nowrap ,positive -0x26d5 005432 iadd temp ,pdata -: 005433 sniff_init_nowrap: -0x26d6 005434 iadd rega ,pdata -0x26d7 005435 store 4 ,mem_sniff_anchor -0x26d8 005436 jam switch_flag_init ,mem_switch_flag -0x26d9 005437 fetch 1 ,mem_state -0x26da 005438 set1 state_insniff ,pdata -0x26db 005439 store 1 ,mem_state -0x26dc 005440 fetch 1 ,mem_sniff_attempt -0x26dd 005441 store 1 ,mem_current_sniff_attempt -0x26de 005442 setarg 0 -0x26df 005443 store 3 ,mem_sniff_rcv -0x26e0 005444 store 3 ,mem_sniff_lost -0x26e1 005445 store 1 ,mem_sniff_unint_lost -0x26e2 005446 jam bt_evt_enter_sniff ,mem_fifo_temp -0x26e3 005447 call ui_ipc_send_event -0x26e4 005448 fetch 2 ,mem_rx_window_sniff -0x26e5 005449 store 2 ,mem_rx_window -0x26e6 005450 nrtn master -0x26e7 005451 add am_addr ,-1 ,queue -0x26e8 005452 rtn -: 005454 sniff_exit: -0x26e9 005455 bpatch patch0d_5 ,mem_patch0d -0x26ea 005456 fetch 1 ,mem_state -0x26eb 005457 rtnbit0 state_insniff -0x26ec 005458 set0 state_insniff ,pdata -0x26ed 005459 store 1 ,mem_state -0x26ee 005460 fetch 2 ,mem_rx_window_init -0x26ef 005461 store 2 ,mem_rx_window -0x26f0 005462 disable wake -0x26f1 005463 jam bt_evt_exit_sniff ,mem_fifo_temp -0x26f2 005464 branch ui_ipc_send_event -: 005467 check_attempt: -0x26f3 005468 bpatch patch0d_6 ,mem_patch0d -0x26f4 005469 enable attempt -0x26f5 005470 fetch 1 ,mem_state -0x26f6 005471 bbit1 state_insniff ,check_attempt_sniff -0x26f7 005472 rtnmark1 mark_testmode -0x26f8 005473 fetch 1 ,mem_arq -0x26f9 005474 rtnbit1 wack -0x26fa 005475 fetch 1 ,mem_lmp_to_send -0x26fb 005476 nrtn blank -0x26fc 005477 fetch 1 ,mem_op -0x26fd 005478 rtnbit1 op_txl2cap -: 005479 check_attempt_nomore: -0x26fe 005480 force 0 ,pdata -0x26ff 005481 rtn -: 005483 check_attempt_sniff: -0x2700 005484 bbit0 state_insco ,check_attempt_not_sco -0x2701 005485 fetch 1 ,mem_current_sniff_attempt -0x2702 005486 beq 2 ,check_attempt_sniff_restore_sco -0x2703 005487 fetch 1 ,mem_arq -0x2704 005488 bbit1 wack ,check_attempt_notimeout -0x2705 005489 bmark0 mark_esco_rxok ,check_attempt_notimeout -: 005490 check_attempt_sniff_restore_sco: -0x2706 005491 nbranch check_attempt_notimeout ,master -0x2707 005492 fetch 1 ,mem_lmp_to_send -0x2708 005493 nbranch check_attempt_notimeout ,blank -: 005494 check_attempt_sco_master: -0x2709 005495 fetch 1 ,mem_sco_poll -0x270a 005496 increase -1 ,pdata -0x270b 005497 store 1 ,mem_sco_poll -0x270c 005498 nbranch check_attempt_nomore ,blank -0x270d 005499 jam param_sco_poll ,mem_sco_poll -0x270e 005500 branch check_attempt_notimeout -: 005507 check_attempt_not_sco: -0x270f 005508 fetch 1 ,mem_current_sniff_attempt -0x2710 005509 bne 1 ,check_attempt_notimeout -0x2711 005510 fetch 1 ,mem_current_sniff_timeout -0x2712 005511 branch check_attempt_notimeout ,blank -0x2713 005512 increase -1 ,pdata -0x2714 005513 store 1 ,mem_current_sniff_timeout -0x2715 005514 fetch 1 ,mem_arq -0x2716 005515 rtnbit1 wack -0x2717 005516 nrtn match -: 005517 check_attempt_notimeout: -0x2718 005518 fetch 1 ,mem_current_sniff_attempt -0x2719 005519 increase -1 ,pdata -0x271a 005520 store 1 ,mem_current_sniff_attempt -0x271b 005521 rtn -: 005532 sniff_check_window: -0x271c 005533 bpatch patch0d_7 ,mem_patch0d -0x271d 005534 disable swfine -0x271e 005535 copy temp ,stop_watch -0x271f 005536 call context_search_sniff_window -0x2720 005537 disable user -0x2721 005538 nrtn zero -0x2722 005539 force 0 ,stop_watch -0x2723 005540 enable user -0x2724 005541 rtn -: 005544 check_esco_amaddr: -0x2725 005545 fetch 1 ,mem_esco_addr -0x2726 005546 icompare 0xff ,am_addr -0x2727 005547 rtn -: 005550 parse_l2cap: -0x2728 005551 bpatch patch0e_0 ,mem_patch0e -0x2729 005552 set0 mark_rxbuf_inuse ,mark -: 005553 parse_l2cap_cont: -0x272a 005554 jam l2cap_rx_clear ,mem_l2cap_rx_done -0x272b 005555 fetch 1 ,mem_l2cap_rxbuff_inuse -0x272c 005556 rtn blank -0x272d 005557 isolate1 l2cap_inuse_buff1 ,pdata -0x272e 005558 arg mem_l2cap_rxbuff1 ,contr -0x272f 005559 call process_rx_l2cap_pkt ,true -0x2730 005560 bpatch patch0e_1 ,mem_patch0e -0x2731 005561 fetch 1 ,mem_l2cap_rx_done -0x2732 005562 beq l2cap_rx_done ,parse_l2cap_release_buff1 -0x2733 005564 jam l2cap_rx_clear ,mem_l2cap_rx_done -0x2734 005565 fetch 1 ,mem_l2cap_rxbuff_inuse -0x2735 005566 rtnbit0 l2cap_inuse_buff2 -0x2736 005567 arg mem_l2cap_rxbuff2 ,contr -0x2737 005568 call process_rx_l2cap_pkt -0x2738 005569 fetch 1 ,mem_l2cap_rx_done -0x2739 005570 beq l2cap_rx_done ,parse_l2cap_release_buff2 -0x273a 005571 rtn -: 005573 parse_l2cap_release_buff1: -0x273b 005574 fetch 1 ,mem_l2cap_rxbuff_inuse -0x273c 005575 set0 l2cap_inuse_buff1 ,pdata -0x273d 005576 store 1 ,mem_l2cap_rxbuff_inuse -0x273e 005577 setarg 0 -0x273f 005578 store 2 ,mem_l2cap_rxbuff1_len -0x2740 005579 rtn -: 005580 parse_l2cap_release_buff2: -0x2741 005581 fetch 1 ,mem_l2cap_rxbuff_inuse -0x2742 005582 set0 l2cap_inuse_buff2 ,pdata -0x2743 005583 store 1 ,mem_l2cap_rxbuff_inuse -0x2744 005584 setarg 0 -0x2745 005585 store 2 ,mem_l2cap_rxbuff2_len -0x2746 005586 rtn -: 005588 l2cap_buff1_inuse: -0x2747 005589 fetch 1 ,mem_l2cap_rxbuff_inuse -0x2748 005590 set1 l2cap_inuse_buff1 ,pdata -0x2749 005591 store 1 ,mem_l2cap_rxbuff_inuse -0x274a 005592 rtn -: 005594 l2cap_buff2_inuse: -0x274b 005595 fetch 1 ,mem_l2cap_rxbuff_inuse -0x274c 005596 set1 l2cap_inuse_buff2 ,pdata -0x274d 005597 store 1 ,mem_l2cap_rxbuff_inuse -0x274e 005598 rtn -: 005604 slave_send_access: -0x274f 005605 bpatch patch0e_2 ,mem_patch0e -0x2750 005606 add clke_bt ,1 ,bt_clk -0x2751 005607 call fetch_extm_bt_adr -0x2752 005608 force 0x03 ,freq_mode -0x2753 005609 call tx_radio_freq -0x2754 005610 call start_transmitter -0x2755 005611 call start_tx_external -0x2756 005612 branch send_access_word -: 005615 slave_conn_send_packet: -0x2757 005616 bpatch patch0e_3 ,mem_patch0e -0x2758 005617 call rf_setup_time_slave_slot -0x2759 005618 deposit clke_bt -0x275a 005619 fetcht 4 ,mem_next_btclk -0x275b 005620 isub temp ,pdata -0x275c 005621 rtnne 1 -0x275d 005622 compare type_null ,type ,0x1f -0x275e 005623 nbranch slave_conn_send_access ,true -0x275f 005624 fetch 1 ,mem_rx_type -0x2760 005625 rtn blank -: 005626 slave_conn_send_access: -0x2761 005627 call slave_send_access -: 005628 transmit_packet: -0x2762 005629 compare type_id ,type ,0x1f -0x2763 005630 branch end_of_packet ,true -0x2764 005631 rshift bt_clk ,temp -0x2765 005632 or temp ,0x40 ,white_init -: 005633 transmit_packet_whitened: -0x2766 005634 bpatch patch0e_4 ,mem_patch0e -0x2767 005635 enable enable_white -0x2768 005636 enable enable_hec -0x2769 005637 enable encode_fec1 -0x276a 005638 set0 mark_longpacket ,mark -0x276b 005639 deposit am_addr -0x276c 005640 inject mod ,3 -0x276d 005641 deposit type -0x276e 005642 inject mod ,4 -0x276f 005643 fetch 1 ,mem_arq -0x2770 005644 inject bucket ,4 -0x2771 005645 inject mod ,3 -0x2772 005646 enable enable_parity -0x2773 005647 inject mod ,8 -0x2774 005648 disable encode_fec1 -0x2775 005649 disable enable_parity -0x2776 005650 disable enable_hec -0x2777 005651 set0 psk3m ,radio_ctrl -0x2778 005652 arg 0 ,temp -0x2779 005653 call reserve_slot -0x277a 005654 bpatch patch0e_5 ,mem_patch0e -0x277b 005655 and type ,0x1f ,pdata -0x277c 005656 beq type_lmp ,transmit_lmp -0x277d 005657 beq type_null ,end_of_packet -0x277e 005658 beq type_poll ,end_of_packet -0x277f 005659 beq type_fhs ,transmit_fhs -0x2780 005660 beq type_dm1 ,transmit_dm1 -0x2781 005661 beq type_dh1 ,transmit_dh1 -0x2782 005662 beq type_hv3 ,transmit_hev -0x2783 005663 beq type_3dh1 ,transmit_3dh1 -0x2784 005664 arg 4 ,temp -0x2785 005665 call reserve_slot -0x2786 005666 beq type_dm3 ,transmit_dm3 -0x2787 005667 beq type_dh3 ,transmit_dh3 -0x2788 005668 arg 8 ,temp -0x2789 005669 call reserve_slot -0x278a 005670 beq type_dh5 ,transmit_dh5 -0x278b 005671 branch transmit_dm5 -: 005674 transmit_hev: -0x278c 005675 bpatch patch0e_6 ,mem_patch0e -0x278d 005676 enable encode_fec0 -0x278e 005677 enable enable_crc -0x278f 005678 enable encrypt -0x2790 005679 force 30 ,loopcnt -0x2791 005680 arg mem_sco_obuf ,contr -: 005681 transmit_ev_loop: -0x2792 005682 ifetch 1 ,contr -0x2793 005683 inject mod ,8 -0x2794 005684 loop transmit_ev_loop -0x2795 005685 bmark1 mark_esco ,transmit_end -0x2796 005686 branch end_of_packet -: 005688 transmit_fhs: -0x2797 005689 bpatch patch0e_7 ,mem_patch0e -0x2798 005690 fetch 1 ,mem_fhs_am_addr -0x2799 005691 icopy am_addr -0x279a 005692 fetch 1 ,mem_fhs_misc -0x279b 005693 icopy fhs_misc -0x279c 005694 fetch 3 ,mem_class -0x279d 005695 icopy fhs_class -0x279e 005696 fetch 2 ,mem_nap -0x279f 005697 icopy nap -0x27a0 005698 enable enable_crc -0x27a1 005699 enable encode_fec2 -0x27a2 005700 copy bt_adr ,rega -0x27a3 005701 call fetch_self_bt_adr -0x27a4 005702 pulse recalc -0x27a5 005703 nop 32 -0x27a6 005704 copy bt_clk ,timeup -0x27a7 005705 fetch 4 ,mem_clkn_bt -0x27a8 005706 icopy bt_clk -0x27a9 005707 preload fhs0 -0x27aa 005708 set1 58 ,pdata -0x27ab 005709 inject mod ,72 -0x27ac 005710 preload fhs1 -0x27ad 005711 inject mod ,72 -0x27ae 005712 copy timeup ,bt_clk -0x27af 005713 copy rega ,bt_adr -0x27b0 005714 enable enable_parity -0x27b1 005715 inject mod ,16 -0x27b2 005716 disable enable_parity -0x27b3 005717 branch end_of_packet -: 005719 transmit_lmp: -0x27b4 005720 bpatch patch0f_0 ,mem_patch0f -0x27b5 005721 enable encrypt -0x27b6 005722 enable enable_crc -0x27b7 005723 enable encode_fec2 -0x27b8 005724 fetch 1 ,mem_lmo_header_length -0x27b9 005725 and pdata ,0x1f8 ,temp -0x27ba 005726 arg mem_lmo_header_length ,contr -0x27bb 005727 increase 8 ,temp -: 005728 transmit_lmp_loop: -0x27bc 005729 add temp ,-72 ,regc -0x27bd 005730 nbranch transmit_lmp_finish ,positive -0x27be 005731 ifetch 9 ,contr -0x27bf 005732 inject mod ,72 -0x27c0 005733 copy regc ,temp -0x27c1 005734 branch transmit_lmp_loop -: 005735 transmit_lmp_finish: -0x27c2 005736 ifetch 9 ,contr -0x27c3 005737 iinject mod ,temp -0x27c4 005738 branch transmit_end -: 005740 transmit_dm1: -0x27c5 005741 enable encode_fec2 -0x27c6 005742 branch transmit_dmh -: 005743 transmit_dm3: -: 005744 transmit_dm5: -0x27c7 005745 enable encode_fec2 -0x27c8 005746 set1 mark_longpacket ,mark -0x27c9 005747 branch transmit_dmh -: 005749 transmit_3dh1: -0x27ca 005750 set1 psk3m ,radio_ctrl -: 005751 transmit_dh1: -0x27cb 005752 enable encode_fec0 -0x27cc 005753 branch transmit_dmh -: 005755 transmit_dh3: -: 005756 transmit_dh5: -0x27cd 005757 set1 psk3m ,radio_ctrl -0x27ce 005758 enable encode_fec0 -0x27cf 005759 set1 mark_longpacket ,mark -: 005761 transmit_dmh: -0x27d0 005762 bpatch patch0f_1 ,mem_patch0f -0x27d1 005763 fetch 1 ,mem_state_map -0x27d2 005764 bbit0 smap_edr ,transmit_noedr -0x27d3 005765 sub type ,3 ,null -0x27d4 005766 branch transmit_noedr ,positive -0x27d5 005767 disable encrypt -0x27d6 005768 disable encode_fec2 -0x27d7 005769 enable encode_fec0 -0x27d8 005770 disable enable_white -0x27d9 005771 set1 psk ,radio_ctrl -0x27da 005772 isolate1 psk3m ,radio_ctrl -0x27db 005773 branch transmit_edr3m ,true -0x27dc 005774 setarg 0xabeee -0x27dd 005775 inject mod ,20 -0x27de 005776 branch transmit_edr_sync_end -: 005777 transmit_edr3m: -0x27df 005778 setarg 0x5faeba -0x27e0 005779 inject mod ,24 -0x27e1 005780 setarg 0x12 -0x27e2 005781 inject mod ,6 -: 005782 transmit_edr_sync_end: -0x27e3 005783 enable enable_white -0x27e4 005784 set1 mark_longpacket ,mark -: 005785 transmit_noedr: -0x27e5 005786 enable encrypt -0x27e6 005787 enable enable_crc -0x27e7 005788 bmark1 mark_loopback ,transmit_loopback -0x27e8 005789 fetch 1 ,mem_tx_lch -0x27e9 005790 inject mod ,3 -0x27ea 005791 fetch 2 ,mem_tx_len -0x27eb 005792 iforce loopcnt -0x27ec 005793 bmark1 mark_longpacket ,transmit_long -0x27ed 005794 inject mod ,5 -0x27ee 005795 branch transmit_stuff -: 005796 transmit_long: -0x27ef 005797 inject mod ,13 -: 005798 transmit_stuff: -0x27f0 005799 deposit loopcnt -0x27f1 005800 branch transmit_end ,blank -0x27f2 005801 fetch 2 ,mem_txptr -0x27f3 005802 iforce contr -: 005803 transmit_stuff_loop: -0x27f4 005804 ifetch 1 ,contr -0x27f5 005805 inject mod ,8 -0x27f6 005806 loop transmit_stuff_loop -: 005809 transmit_end: -0x27f7 005810 enable enable_parity -0x27f8 005811 inject mod ,16 -0x27f9 005812 disable enable_parity -0x27fa 005813 call set_wait_ack -0x27fb 005814 fetch 1 ,mem_state_map -0x27fc 005815 bbit0 smap_edr ,end_of_packet -0x27fd 005816 force 0 ,pdata -0x27fe 005817 inject mod ,6 -0x27ff 005818 branch end_of_packet -: 005821 transmit_loopback: -0x2800 005822 bpatch patch0f_2 ,mem_patch0f -0x2801 005823 bmark1 mark_longpacket ,transmit_loopback_long -: 005824 transmit_loopback_short: -0x2802 005825 fetch 1 ,mem_lch_code -0x2803 005826 inject mod ,3 -0x2804 005827 fetch 1 ,mem_len -0x2805 005828 iforce regc -0x2806 005829 inject mod ,5 -0x2807 005830 branch transmit_loopback_cont -: 005831 transmit_loopback_long: -0x2808 005832 fetch 1 ,mem_lch_code -0x2809 005833 inject mod ,3 -0x280a 005834 fetch 2 ,mem_len -0x280b 005835 iforce regc -0x280c 005836 inject mod ,13 -: 005837 transmit_loopback_cont: -0x280d 005838 arg mem_rxbuf ,contr -: 005839 transmit_loopback_loop: -0x280e 005840 copy regc ,null -0x280f 005841 branch transmit_loopback_end ,zero -0x2810 005842 ifetch 1 ,contr -0x2811 005843 inject mod ,8 -0x2812 005844 increase -1 ,regc -0x2813 005845 branch transmit_loopback_loop -: 005846 transmit_loopback_end: -0x2814 005847 fetch 2 ,mem_tst_pktcnt_dmh -0x2815 005848 increase 1 ,pdata -0x2816 005849 store 2 ,mem_tst_pktcnt_dmh -0x2817 005850 branch transmit_end -: 005853 apply_switch_clke: -0x2818 005854 fetch 4 ,mem_clke_bt -0x2819 005855 add pdata ,7 ,rega -0x281a 005856 fetch 2 ,mem_slot_offset -0x281b 005857 nbranch apply_switch_nozero ,blank -0x281c 005858 increase -3 ,rega -0x281d 005859 branch apply_switch_wait_loop -: 005860 apply_switch_nozero: -0x281e 005861 mul32 pdata ,12 ,pdata -0x281f 005862 hfetcht 2 ,core_halfslot -0x2820 005863 increase 1 ,temp -: 005864 apply_switch_loop: -0x2821 005865 isub temp ,pdata -0x2822 005866 nbranch apply_switch_bt ,positive -0x2823 005867 increase -1 ,rega -0x2824 005868 branch apply_switch_loop -: 005869 apply_switch_bt: -0x2825 005870 sub pdata ,0 ,pdata -: 005871 apply_switch_wait_loop: -0x2826 005872 until null ,oneslot -0x2827 005873 compare 0 ,clkn_bt ,3 -0x2828 005874 nbranch apply_switch_wait_loop ,true -0x2829 005875 iforce clke_rt -0x282a 005876 copy rega ,clke_bt -0x282b 005877 iforce clke_rt -0x282c 005878 rtn -: 005881 calc_slot_offset: -0x282d 005882 bpatch patch0f_3 ,mem_patch0f -0x282e 005883 until null ,halfslot -0x282f 005884 deposit clke -0x2830 005885 iforce contr -0x2831 005886 rshift16 ,pdata ,pdata -0x2832 005887 isub clkn_bt ,loopcnt -0x2833 005888 and_into 3 ,loopcnt -0x2834 005889 nbranch calc_bt_portion ,zero -0x2835 005890 force 0 ,pdata -0x2836 005891 branch calc_skip_bt -: 005892 calc_bt_portion: -0x2837 005893 arg 3750 ,temp -0x2838 005894 force 0 ,pdata -: 005895 calc_slot_offset_loop: -0x2839 005896 iadd temp ,pdata -0x283a 005897 loop calc_slot_offset_loop -: 005898 calc_skip_bt: -0x283b 005899 iadd contr ,pdata -0x283c 005900 div pdata ,12 -0x283d 005901 call wait_div_end -0x283e 005902 quotient pdata -0x283f 005903 store 2 ,mem_slot_offset -0x2840 005904 rtn -: 005906 calc_clke_offset: -0x2841 005907 bpatch patch0f_4 ,mem_patch0f -0x2842 005908 deposit clke -0x2843 005909 copy clkn ,temp -0x2844 005910 isub temp ,null -0x2845 005911 nsetflag positive ,44 ,pdata -0x2846 005912 isub temp ,temp -0x2847 005913 setarg 3750 -0x2848 005914 isolate0 15 ,temp -0x2849 005915 branch calc_clke_pos ,true -0x284a 005916 setarg -61786 -0x284b 005917 iadd temp ,temp -: 005918 calc_clke_pos: -0x284c 005919 storet 6 ,mem_le_clk_offset -0x284d 005920 rtn le -0x284e 005921 storet 6 ,mem_clk_offset -0x284f 005922 rtn -: 005924 calc_clke: -0x2850 005925 disable clknt -0x2851 005926 fetch 6 ,mem_le_clk_offset -0x2852 005927 branch calc_clke2 ,le -0x2853 005928 fetch 6 ,mem_clk_offset -: 005929 calc_clke2: -0x2854 005930 iadd clkn ,alarm -0x2855 005931 increase 10 ,alarm -0x2856 005932 setarg 3750 -0x2857 005933 isub alarm ,pdata -0x2858 005934 isolate0 15 ,pdata -0x2859 005935 branch calc_clke_pos_adj ,true -0x285a 005936 setarg 0xf15a -0x285b 005937 iadd alarm ,alarm -: 005938 calc_clke_pos2: -0x285c 005939 copy alarm ,clke -0x285d 005940 rtn -: 005941 calc_clke_pos_adj: -0x285e 005942 force 0 ,null -0x285f 005943 branch calc_clke_pos2 -: 005950 calc_radio_freq: -0x2860 005951 bpatch patch0f_5 ,mem_patch0f -0x2861 005952 call set_sync_on -0x2862 005953 copy bt_clk ,pdata -0x2863 005954 and_into 0x180 ,pdata -0x2864 005955 compare 3 ,freq_mode ,0x07 -0x2865 005956 nbranch freq_not_connection ,true -0x2866 005957 rshift3 pdata ,pdata -0x2867 005958 iadd freq_index ,pdata -0x2868 005959 branch do_hop_mod_now -: 005960 freq_not_connection: -0x2869 005961 copy freq_index ,pdata -: 005962 do_hop_mod_now: -0x286a 005963 div pdata ,79 -0x286b 005964 pulse recalc -0x286c 005965 call wait_div_end -0x286d 005966 remainder rega -0x286e 005967 add rega ,-40 ,temp -0x286f 005968 branch odd_half ,positive -0x2870 005969 lshift rega ,temp -0x2871 005970 branch freq_result -: 005971 odd_half: -0x2872 005972 lshift temp ,temp -0x2873 005973 increase 1 ,temp -: 005974 freq_result: -0x2874 005975 bpatch patch0f_6 ,mem_patch0f -0x2875 005976 fetch 1 ,mem_mode -0x2876 005977 bbit0 afh_change ,afh_process_con -: 005978 afh_process_0: -0x2877 005979 fetch 4 ,mem_afh_instant -0x2878 005980 isub bt_clk ,null -0x2879 005981 branch afh_process_con ,positive -0x287a 005982 call afh_clear -0x287b 005983 fetch 1 ,mem_afh_new_mod -0x287c 005984 rtn blank -0x287d 005985 fetch 1 ,mem_mode -0x287e 005986 set1 afh_enable ,pdata -0x287f 005987 store 1 ,mem_mode -0x2880 005988 fetch 5 ,mem_afh_map_new -0x2881 005989 store 5 ,mem_afh_map_lo -0x2882 005990 ifetch 5 ,contr -0x2883 005991 store 5 ,mem_afh_map_hi -0x2884 005992 call afh_process_freq_map -: 005993 afh_process_con: -0x2885 005994 fetch 1 ,mem_mode -0x2886 005995 rtnbit0 afh_enable -0x2887 005996 isolate1 1 ,bt_clk -0x2888 005997 branch afh_same_channel ,true -0x2889 005998 rshift3 temp ,rega -0x288a 005999 and temp ,7 ,queue -0x288b 006000 setarg mem_afh_map_lo -0x288c 006001 iadd rega ,rega -0x288d 006002 ifetch 1 ,rega -0x288e 006003 qisolate0 pdata -0x288f 006004 branch afh_process_1 ,true -0x2890 006005 deposit temp -0x2891 006006 branch afh_process_end -: 006007 afh_process_1: -0x2892 006008 fetch 1 ,mem_afh_used -0x2893 006009 iforce regb -0x2894 006010 deposit bt_clk -0x2895 006011 and_into 0x180 ,pdata -0x2896 006012 rshift3 pdata ,pdata -0x2897 006013 iadd freq_index ,pdata -0x2898 006014 idiv regb -0x2899 006015 setarg mem_afh_map -0x289a 006016 call wait_div_end -0x289b 006017 remainder rega -0x289c 006018 iadd rega ,contr -0x289d 006019 ifetch 1 ,contr -: 006020 afh_process_end: -0x289e 006021 store 1 ,mem_afh_index -0x289f 006022 iforce temp -0x28a0 006023 rtn -: 006025 afh_same_channel: -0x28a1 006026 fetch 1 ,mem_afh_index -0x28a2 006027 iforce temp -0x28a3 006028 rtn -: 006030 afh_clear: -0x28a4 006031 fetch 1 ,mem_mode -0x28a5 006032 set0 afh_enable ,pdata -0x28a6 006033 set0 afh_change ,pdata -0x28a7 006034 store 1 ,mem_mode -0x28a8 006035 rtn -: 006041 afh_process_freq_map: -0x28a9 006042 bpatch patch0f_7 ,mem_patch0f -0x28aa 006043 arg mem_afh_map ,contw -0x28ab 006044 force 10 ,loopcnt -0x28ac 006045 call memset0 -0x28ad 006046 arg mem_afh_map ,contw -0x28ae 006047 force 0 ,regc -0x28af 006048 force 2 ,queue -: 006049 process_freq_3: -0x28b0 006050 fetch 5 ,mem_afh_map_lo -0x28b1 006051 iforce temp -0x28b2 006052 compare 2 ,queue ,0xff -0x28b3 006053 branch process_freq_1 ,true -0x28b4 006054 rshift temp ,temp -: 006055 process_freq_1: -0x28b5 006056 isolate0 0 ,temp -0x28b6 006057 branch process_freq_0 ,true -0x28b7 006058 deposit regc -0x28b8 006059 istore 1 ,contw -: 006060 process_freq_0: -0x28b9 006061 rshift2 temp ,temp -0x28ba 006062 increase 2 ,regc -0x28bb 006063 compare 40 ,regc ,0xfe -0x28bc 006064 nbranch process_freq_2 ,true -0x28bd 006065 fetch 5 ,mem_afh_map_hi -0x28be 006066 iforce temp -0x28bf 006067 compare 2 ,queue ,0xff -0x28c0 006068 branch process_freq_2 ,true -0x28c1 006069 rshift temp ,temp -: 006070 process_freq_2: -0x28c2 006071 sub regc ,78 ,null -0x28c3 006072 branch process_freq_1 ,positive -0x28c4 006073 force 1 ,regc -0x28c5 006074 increase -1 ,queue -0x28c6 006075 nbranch process_freq_3 ,zero -0x28c7 006076 arg mem_afh_map ,rega -0x28c8 006077 deposit contw -0x28c9 006078 isub rega ,pdata -0x28ca 006079 store 1 ,mem_afh_used -0x28cb 006080 rtn -: 006082 rx_radio_freq: -0x28cc 006083 bpatch patch10_0 ,mem_patch10 -0x28cd 006084 call calc_radio_freq -0x28ce 006085 fetch 1 ,mem_debug_config -0x28cf 006086 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now -0x28d0 006087 fetcht 1 ,mem_rx_fixed_freq -: 006088 rx_radio_freq_now: -0x28d1 006089 branch set_freq_rx -: 006092 tx_radio_freq: -0x28d2 006093 bpatch patch10_1 ,mem_patch10 -0x28d3 006094 call calc_radio_freq -0x28d4 006095 fetch 1 ,mem_debug_config -0x28d5 006096 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now -0x28d6 006097 fetcht 1 ,mem_tx_fixed_freq -: 006098 tx_radio_freq_now: -0x28d7 006099 branch set_freq_tx -: 006102 fetch_giac: -0x28d8 006103 force 0 ,uap -0x28d9 006104 fetch 3 ,mem_glap -0x28da 006105 iforce lap -0x28db 006106 rtn -: 006108 fetch_page_bt_adr: -0x28dc 006109 bpatch patch10_2 ,mem_patch10 -0x28dd 006110 fetch 1 ,mem_hci_puap -0x28de 006111 icopy uap -0x28df 006112 fetch 3 ,mem_hci_plap -0x28e0 006113 icopy lap -0x28e1 006114 rtn -: 006116 fetch_self_bt_adr: -0x28e2 006117 bpatch patch10_3 ,mem_patch10 -0x28e3 006118 fetch 2 ,mem_nap -0x28e4 006119 icopy nap -0x28e5 006120 fetch 1 ,mem_uap -0x28e6 006121 icopy uap -0x28e7 006122 fetch 3 ,mem_lap -0x28e8 006123 icopy lap -0x28e9 006124 rtn -: 006126 fetch_extm_bt_adr: -0x28ea 006127 bpatch patch10_4 ,mem_patch10 -0x28eb 006128 fetch 2 ,mem_pnap -0x28ec 006129 icopy nap -0x28ed 006130 fetch 1 ,mem_puap -0x28ee 006131 icopy uap -0x28ef 006132 fetch 3 ,mem_plap -0x28f0 006133 icopy lap -0x28f1 006134 rtn -: 006137 fetch_diac: -0x28f2 006138 bmark1 mark_all_diac ,fetch_diac_do -0x28f3 006139 rtnmark0 mark_inquiry_state -0x28f4 006140 rtnmark0 mark_periodical_diac -: 006141 fetch_diac_do: -0x28f5 006142 and_into -256 ,lap -0x28f6 006143 pulse recalc -0x28f7 006144 nop 32 -0x28f8 006145 rtn -: 006148 shutdown_radio: -0x28f9 006149 bpatch patch10_5 ,mem_patch10 -0x28fa 006150 branch shutdown_radio0 ,is_rx -0x28fb 006151 jam 0xd4 ,rf_tx_pa_ib -0x28fc 006152 nop 4 -0x28fd 006153 jam 0xd2 ,rf_tx_pa_ib -0x28fe 006154 nop 4 -0x28ff 006155 jam 0xd1 ,rf_tx_pa_ib -0x2900 006156 nop 4 -0x2901 006157 fetch 1 ,mem_tx_power -0x2902 006158 beq tx_power_0db ,shutdown_radio_0db -0x2903 006159 beq tx_power_3db ,shutdown_radio_3db -0x2904 006160 beq tx_power_5db ,shutdown_radio_5db -0x2905 006161 beq tx_power_f3db ,shutdown_radio_f3db -0x2906 006162 beq tx_power_f5db ,shutdown_radio_f5db -0x2907 006163 beq tx_power_pair ,shutdown_radio_pair -: 006164 shutdown_radio_5db: -: 006165 shutdown_radio_0db: -0x2908 006166 jam 0xd0 ,rf_tx_pa_ib -0x2909 006167 jam 0xe0 ,rf_tx_pa_gc -: 006168 shutdown_radio0: -0x290a 006169 force 0 ,radio_ctrl -0x290b 006170 disable is_rx -0x290c 006171 disable is_tx -0x290d 006172 pulse packet_end -0x290e 006173 jam 0x0 ,rfen_mdm -0x290f 006174 jam 0x0 ,rfen_tx -0x2910 006175 jam 0x0 ,rfen_rx -0x2911 006176 jam 0 ,rfen_sn -0x2912 006177 jam 0x70 ,rfen_msc -0x2913 006178 jam 0x0 ,rfen_adc -0x2914 006179 rtn -: 006181 shutdown_radio_pair: -: 006182 shutdown_radio_f5db: -: 006183 shutdown_radio_f3db: -: 006184 shutdown_radio_3db: -0x2915 006185 jam 0xd0 ,rf_tx_pa_ib -0x2916 006186 jam 0xc0 ,rf_tx_pa_gc -0x2917 006187 branch shutdown_radio0 -: 006189 set_sync_on: -0x2918 006190 bpatch patch10_6 ,mem_patch10 -0x2919 006191 jam 0x0 ,rfen_mdm -0x291a 006192 jam 0x0 ,rfen_tx -0x291b 006193 jam 0x18 ,rfen_rx -0x291c 006194 jam 0xa7 ,rfen_sn -0x291d 006195 jam 0x7f ,rfen_msc -0x291e 006196 rtn -: 006198 set_freq_rx: -0x291f 006199 bpatch patch10_7 ,mem_patch10 -0x2920 006201 storet 1 ,mem_last_freq -0x2921 006202 add temp ,rx_freq_offset ,rega -0x2922 006203 jam 0x07 ,rf_balun_ctrim -0x2923 006204 branch rf_write_freq -: 006205 rf_rx_enable: -0x2924 006206 bpatch patch11_0 ,mem_patch11 -0x2925 006207 jam 0xcf ,rfen_tx -0x2926 006208 nop 10 -0x2927 006209 jam 0xff ,rfen_rx -0x2928 006210 jam 0xaf ,rfen_sn -0x2929 006211 jam 0xff ,rfen_msc -0x292a 006212 nop 10 -0x292b 006213 jam 0xa0 ,rfen_mdm -0x292c 006214 rtn -: 006216 set_freq_tx_offset: -0x292d 006217 fetch 1 ,mem_250k_freq_enable -0x292e 006218 branch set_freq_tx_2m_offset ,blank -: 006219 set_freq_tx_0m_offset: -0x292f 006220 add temp ,2 ,rega -0x2930 006221 rtn -: 006222 set_freq_tx_2m_offset: -0x2931 006223 add temp ,0 ,rega -0x2932 006224 rtn -: 006226 set_freq_tx: -0x2933 006227 bpatch patch11_1 ,mem_patch11 -0x2934 006228 storet 1 ,mem_last_freq -0x2935 006229 call set_freq_tx_offset -0x2936 006230 call rf_write_freq -0x2937 006231 setarg param_pll_setup -0x2938 006232 call sleep -: 006233 txon: -0x2939 006234 jam 0x1 ,rfen_adc -0x293a 006235 jam 0x3c ,rfen_rx -0x293b 006236 jam 0xe0 ,rfen_tx -0x293c 006237 jam 0x12 ,rf_balun_ctrim -0x293d 006238 nop 10 -0x293e 006239 jam 0x01 ,rfen_mdm -0x293f 006240 jam 0x3d ,rfen_mdm -0x2940 006241 nop 10 -0x2941 006242 jam 0xb7 ,rfen_sn -0x2942 006243 nop 10 -0x2943 006244 jam 0x7f ,rfen_mdm -: 006245 txon_power_select: -0x2944 006246 fetch 1 ,mem_tx_power -0x2945 006247 beq tx_power_0db ,set_tx_power_0db -0x2946 006248 beq tx_power_3db ,set_tx_power_3db -0x2947 006249 beq tx_power_5db ,set_tx_power_5db -0x2948 006250 beq tx_power_f3db ,set_tx_power_f3db -0x2949 006251 beq tx_power_f5db ,set_tx_power_f5db -0x294a 006252 beq tx_power_pair ,set_tx_power_pair -: 006253 set_tx_power_0db: -0x294b 006254 jam 0xf0 ,rf_tx_pa_gc -0x294c 006255 call txon_common -0x294d 006256 jam 0xd8 ,rf_tx_pa_ib -0x294e 006257 rtn -: 006259 set_tx_power_3db: -0x294f 006260 jam 0xdf ,rf_tx_pa_gc -0x2950 006261 call txon_common -0x2951 006262 jam 0xdf ,rf_tx_pa_ib -0x2952 006263 rtn -: 006265 set_tx_power_5db: -0x2953 006266 jam 0xff ,rf_tx_pa_gc -0x2954 006267 call txon_common -0x2955 006268 jam 0xdf ,rf_tx_pa_ib -0x2956 006269 rtn -: 006270 set_tx_power_f3db: -0x2957 006271 jam 0xce ,rf_tx_pa_gc -0x2958 006272 call txon_common -0x2959 006273 jam 0xd8 ,rf_tx_pa_ib -0x295a 006274 rtn -: 006276 set_tx_power_f5db: -0x295b 006277 jam 0xcb ,rf_tx_pa_gc -0x295c 006278 call txon_common -0x295d 006279 jam 0xd8 ,rf_tx_pa_ib -0x295e 006280 rtn -: 006282 set_tx_power_pair: -0x295f 006283 jam 0xd0 ,rf_tx_pa_ib -0x2960 006284 jam 0xc0 ,rf_tx_pa_gc -0x2961 006285 jam 0x4c ,0x8957 -0x2962 006286 jam 0x6c ,0x8958 -0x2963 006287 jam 0x50 ,0x8959 -0x2964 006288 rtn -: 006290 txon_common: -0x2965 006291 nop 4 -0x2966 006292 jam 0xd1 ,rf_tx_pa_ib -0x2967 006293 nop 4 -0x2968 006294 jam 0xd2 ,rf_tx_pa_ib -0x2969 006295 nop 4 -0x296a 006296 jam 0xd4 ,rf_tx_pa_ib -0x296b 006297 rtn -: 006300 initialize_radio: -0x296c 006301 jam clksel_rc ,core_clksel -: 006302 initialize_radio_wait: -0x296d 006303 fetch 2 ,mem_rf_init_ptr -0x296e 006304 bbit0 14 ,initialize_radio_wait -0x296f 006305 iforce contr -0x2970 006306 arg 0x8900 ,temp -: 006307 initialize_radio_loop: -0x2971 006308 ifetch 1 ,contr -0x2972 006309 beq 0xff ,initialize_radio_cont -0x2973 006310 ior temp ,contw -0x2974 006311 ifetch 1 ,contr -0x2975 006312 istore 1 ,contw -0x2976 006313 branch initialize_radio_loop -: 006314 initialize_radio_cont: -0x2977 006315 bpatch patch11_2 ,mem_patch11 -0x2978 006316 call lpm_cal_xtal_startup -0x2979 006317 call switchto_dpllclk -0x297a 006319 setarg param_dpll_start_delay -0x297b 006320 iadd clkn_bt ,pdata -0x297c 006321 store 4 ,mem_dpll_clkn -0x297d 006322 set1 reset ,radio_ctrl -0x297e 006323 force 0 ,radio_ctrl -0x297f 006324 ncall do_rccal ,wake -0x2980 006325 branch set_rccal -: 006328 rf_write_freq: -0x2981 006329 bpatch patch11_3 ,mem_patch11 -0x2982 006330 setarg 2400 -0x2983 006331 iadd rega ,temp -0x2984 006332 fetch 1 ,mem_fcomp_mul -0x2985 006333 jam 0x04 ,rf_pll_rstn -0x2986 006334 imul32 temp ,pdata -0x2987 006335 fetcht 1 ,mem_fcomp_div -0x2988 006336 idiv temp -0x2989 006337 call wait_div_end -0x298a 006338 quotient rega -0x298b 006339 remainder pdata -0x298c 006340 lshift16 pdata ,pdata -0x298d 006341 lshift4 pdata ,pdata -0x298e 006342 idiv temp -0x298f 006343 call wait_div_end -0x2990 006344 quotient pdata -0x2991 006345 lshift8 pdata ,pdata -0x2992 006346 lshift pdata ,pdata -0x2993 006347 ior rega ,pdata -0x2994 006348 hstore 4 ,rf_pll_intg -0x2995 006349 jam 0x44 ,rf_pll_rstn -0x2996 006350 jam 0xc4 ,rf_pll_rstn -0x2997 006351 rtn -: 006354 do_rccal: -0x2998 006355 bpatch patch11_4 ,mem_patch11 -0x2999 006356 jam 0x02 ,rfen_adc -0x299a 006357 setarg 250000 -0x299b 006358 call sleep -0x299c 006359 jam 0x7f ,rfen_rx -0x299d 006360 nop 130 -0x299e 006361 jam 0x30 ,rf_rccal_ctrl -0x299f 006362 jam 0xd0 ,rfen_tx -0x29a0 006363 jam 0x70 ,rf_rccal_ctrl -0x29a1 006364 jam 0xf0 ,rf_rccal_ctrl -0x29a2 006365 force 50 ,loopcnt -: 006366 do_rccal_loop: -0x29a3 006367 hfetch 1 ,rf_rccal_result -0x29a4 006368 bbit1 5 ,do_rccal_end -0x29a5 006369 loop do_rccal_loop -: 006370 do_rccal_end: -0x29a6 006371 store 1 ,mem_rf_rccal -0x29a7 006372 jam 0 ,rfen_tx -0x29a8 006373 jam 0 ,rfen_rx -0x29a9 006374 jam 0x00 ,rfen_adc -0x29aa 006375 rtn -: 006377 set_rccal: -0x29ab 006378 bpatch patch11_5 ,mem_patch11 -0x29ac 006379 fetch 1 ,mem_rf_rccal -0x29ad 006380 set1 5 ,pdata -0x29ae 006381 hstore 1 ,rf_rccal_ctrl -0x29af 006382 hfetcht 1 ,rf_bpf_ctrim -0x29b0 006383 and_into 7 ,temp -0x29b1 006384 lshift3 pdata ,pdata -0x29b2 006385 ior temp ,pdata -0x29b3 006386 hstore 1 ,rf_bpf_ctrim -0x29b4 006387 hfetch 1 ,rf_bpf_ib -0x29b5 006388 set0 bpf_rccal ,pdata -0x29b6 006389 hstore 1 ,rf_bpf_ib -0x29b7 006390 hfetch 1 ,rf_adc_rccal -0x29b8 006391 set0 adc_rccal ,pdata -0x29b9 006392 hstore 1 ,rf_adc_rccal -0x29ba 006393 rtn -: 006395 save_rssi: -0x29bb 006396 bpatch patch11_6 ,mem_patch11 -0x29bc 006397 hfetch 2 ,rf_afc_d2a -0x29bd 006398 rshift4 pdata ,pdata -0x29be 006399 rshift3 pdata ,pdata -0x29bf 006400 sub pdata ,0 ,pdata -: 006401 bcd: -0x29c0 006402 and_into 0xff ,pdata -0x29c1 006403 div pdata ,10 -0x29c2 006404 call wait_div_end -0x29c3 006405 quotient pdata -0x29c4 006406 lshift4 pdata ,pdata -0x29c5 006407 remainder temp -0x29c6 006408 ior temp ,pdata -0x29c7 006409 store 1 ,mem_rssi -0x29c8 006410 rtn -: 006413 switchto_dpllclk: -0x29c9 006414 jam clksel_rc ,core_clksel -0x29ca 006415 hfetch 1 ,rf_clkpll_frac + 2 -0x29cb 006416 set0 4 ,pdata -0x29cc 006417 set0 5 ,pdata -0x29cd 006418 hstore 1 ,rf_clkpll_frac + 2 -0x29ce 006419 jam 0x00 ,rfen_ck -0x29cf 006420 jam 0x00 ,rfen_msc -0x29d0 006421 jam 0x70 ,rfen_msc -0x29d1 006422 jam 0xff ,rfen_ck -0x29d2 006423 hfetch 1 ,rf_clkpll_frac + 2 -0x29d3 006424 set1 4 ,pdata -0x29d4 006425 set1 5 ,pdata -0x29d5 006426 hstore 1 ,rf_clkpll_frac + 2 -0x29d6 006427 call init_lpm_ctrl -0x29d7 006428 hfetch 1 ,rf_clkpll_int -0x29d8 006429 set1 7 ,pdata -0x29d9 006430 hstore 1 ,rf_clkpll_int -0x29da 006431 set0 7 ,pdata -0x29db 006432 hstore 1 ,rf_clkpll_int -0x29dc 006433 set1 7 ,pdata -0x29dd 006434 hstore 1 ,rf_clkpll_int -0x29de 006435 jam clksel_dpll ,core_clksel -0x29df 006436 nop 1 -0x29e0 006437 jam clksel_xtal ,core_clksel -0x29e1 006438 hfetch 1 ,rf_clkpll_frac + 2 -0x29e2 006439 and_into 0xcf ,pdata -0x29e3 006440 hstore 1 ,rf_clkpll_frac + 2 -0x29e4 006441 or_into 0x30 ,pdata -0x29e5 006442 hstore 1 ,rf_clkpll_frac + 2 -0x29e6 006443 rtn -: 006446 xtal_fast_wake: -0x29e7 006447 setarg 0xf0f -0x29e8 006448 branch lpm_write_config -: 006450 init_lpm_ctrl: -0x29e9 006451 setarg 0x80f -0x29ea 006452 branch lpm_write_config -: 006456 start_receiver: -0x29eb 006457 bpatch patch11_7 ,mem_patch11 -0x29ec 006458 call rf_rx_enable -0x29ed 006459 disable is_tx -0x29ee 006460 enable is_rx -0x29ef 006461 pulse init_encrypt -0x29f0 006462 rtn -: 006464 prep_crypt: -0x29f1 006465 bpatch patch12_0 ,mem_patch12 -0x29f2 006466 fetch 1 ,mem_state_map -0x29f3 006467 isolate1 smap_encryption ,pdata -0x29f4 006468 setflag true ,0 ,pdata -0x29f5 006469 hstore 1 ,core_encrypt -0x29f6 006470 arg mem_kc ,contr -0x29f7 006471 ifetch 9 ,contr -0x29f8 006472 iforce kc_ls -0x29f9 006473 ifetch 7 ,contr -0x29fa 006474 iforce kc_ms -0x29fb 006475 fetch 1 ,mem_key_size -0x29fc 006476 add pdata ,-1 ,g1l -0x29fd 006477 pulse kc_p_activate -0x29fe 006478 rtn -: 006480 wait_access_end: -0x29ff 006481 deposit clke -0x2a00 006482 store 6 ,mem_sync_clke -0x2a01 006483 disable decode_fec0 -0x2a02 006484 nbranch shutdown_radio ,sync -0x2a03 006485 arg param_clke_cal ,clke_rt -0x2a04 006486 increase 1 ,clke_bt -0x2a05 006487 and_into 0x1fc ,clke_bt -0x2a06 006488 rtn -: 006492 wait_access_mhalfbnd: -0x2a07 006493 enable decode_fec0 -: 006494 wait_access_mhalfbnd_correlate: -0x2a08 006495 correlate null ,mhalfbnd -0x2a09 006496 branch wait_access_end ,sync -0x2a0a 006497 compare 0x02 ,clke_bt ,0x02 -0x2a0b 006498 nbranch wait_access_mhalfbnd_correlate ,true -0x2a0c 006499 branch wait_access_end -: 006501 wait_access_clkn_rt: -0x2a0d 006502 bpatch patch12_1 ,mem_patch12 -0x2a0e 006503 arg param_conn_access ,timeup -0x2a0f 006504 enable decode_fec0 -0x2a10 006505 correlate clkn_rt ,meet -0x2a11 006506 disable decode_fec0 -0x2a12 006507 nbranch shutdown_radio ,sync -0x2a13 006508 rtn -: 006510 wait_access_forever: -0x2a14 006511 bpatch patch12_2 ,mem_patch12 -0x2a15 006512 enable decode_fec0 -0x2a16 006513 correlate null ,timeout -0x2a17 006514 disable decode_fec0 -0x2a18 006515 nbranch shutdown_radio ,sync -0x2a19 006516 arg param_clke_cal ,clke_rt -0x2a1a 006517 and_into 0x1fc ,clke_bt -0x2a1b 006518 rtn -: 006521 reserve_slot: -0x2a1c 006522 bpatch patch12_3 ,mem_patch12 -0x2a1d 006523 iforce rega -0x2a1e 006524 deposit bt_clk -0x2a1f 006525 iadd temp ,timeup -0x2a20 006526 copy timeup ,pdata -0x2a21 006527 store 4 ,mem_next_btclk -0x2a22 006528 deposit rega -0x2a23 006529 rtn -: 006532 ahead_window: -0x2a24 006533 copy pdata ,temp -0x2a25 006534 bpatch patch12_4 ,mem_patch12 -0x2a26 006535 copy temp ,pdata -0x2a27 006536 call clk2bt -0x2a28 006537 lshift16 bt_clk ,pdata -0x2a29 006538 set1 44 ,pdata -0x2a2a 006539 call clk_diff -0x2a2b 006540 set0 44 ,pdata -0x2a2c 006541 call get_clk -0x2a2d 006542 call clk_diff -0x2a2e 006543 rtn user -0x2a2f 006544 call clk2rt -0x2a30 006545 iforce stop_watch -0x2a31 006546 until null ,timeout -0x2a32 006547 rtn -: 006550 setup_clk: -0x2a33 006551 bpatch patch12_5 ,mem_patch12 -0x2a34 006552 branch setup_clkn ,clknt -0x2a35 006553 until clke_rt ,meet -: 006554 skip_setup_clke: -0x2a36 006555 copy clke_bt ,temp -0x2a37 006556 branch setup_clknbt -: 006557 setup_clkn: -0x2a38 006558 branch skip_setup_clkn ,attempt -0x2a39 006559 until clkn_rt ,meet -: 006560 skip_setup_clkn: -0x2a3a 006561 copy clkn_bt ,temp -: 006562 setup_clknbt: -0x2a3b 006563 branch setup_clk11 ,user -0x2a3c 006564 compare 1 ,temp ,3 -0x2a3d 006565 nbranch setup_clk ,true -: 006566 setup_complete: -0x2a3e 006567 bpatch patch12_6 ,mem_patch12 -0x2a3f 006568 fetch 1 ,mem_state -0x2a40 006569 rtnbit0 state_inconn -0x2a41 006570 fetch 4 ,mem_next_btclk -0x2a42 006571 isub temp ,pdata -0x2a43 006572 nrtn positive -0x2a44 006573 sub pdata ,0xff ,null -0x2a45 006574 branch setup_clk ,positive -0x2a46 006575 rtn -: 006576 setup_clk11: -0x2a47 006577 compare 3 ,temp ,3 -0x2a48 006578 nbranch setup_clk ,true -0x2a49 006579 branch setup_complete -: 006581 rf_setup_time: -0x2a4a 006582 bpatch patch12_7 ,mem_patch12 -0x2a4b 006583 arg param_rf_setup ,timeup -0x2a4c 006584 branch setup_clk -: 006586 rf_setup_time_slave_slot: -0x2a4d 006587 disable user -0x2a4e 006588 branch rf_setup_time -: 006590 rf_setup_time_master_slot: -0x2a4f 006591 enable user -0x2a50 006592 branch rf_setup_time -: 006594 start_transmitter: -0x2a51 006595 bpatch patch13_0 ,mem_patch13 -0x2a52 006596 call prep_crypt -0x2a53 006597 disable is_rx -0x2a54 006598 enable is_tx -0x2a55 006599 rtn -: 006603 start_tx_native: -0x2a56 006604 bpatch patch13_1 ,mem_patch13 -0x2a57 006605 arg param_tx_setup ,timeup -0x2a58 006606 until clkn_rt ,meet -0x2a59 006607 pulse init_encrypt -0x2a5a 006608 rtn -: 006610 start_rx_native: -0x2a5b 006611 bpatch patch13_2 ,mem_patch13 -0x2a5c 006612 arg param_rx_setup ,timeup -0x2a5d 006613 until clkn_rt ,meet -0x2a5e 006614 rtn -: 006617 start_tx_external: -0x2a5f 006618 bpatch patch13_3 ,mem_patch13 -0x2a60 006619 arg param_tx_setup ,timeup -0x2a61 006620 until clke_rt ,meet -0x2a62 006621 pulse init_encrypt -0x2a63 006622 rtn -: 006624 send_access_word: -0x2a64 006625 bpatch patch13_4 ,mem_patch13 -0x2a65 006626 preload access -0x2a66 006627 enable encode_fec0 -0x2a67 006628 set1 txgfsk ,radio_ctrl -0x2a68 006629 inject mod ,72 -0x2a69 006630 disable encode_fec0 -0x2a6a 006631 rtn -: 006634 scan_mode_whiten: -0x2a6b 006635 copy xin ,temp -0x2a6c 006636 or_into 0x60 ,temp -0x2a6d 006637 copy temp ,white_init -0x2a6e 006638 rtn -: 006643 get_free_amaddr: -0x2a6f 006644 bpatch patch13_5 ,mem_patch13 -0x2a70 006645 fetch 1 ,mem_current_amaddr -0x2a71 006646 increase 1 ,pdata -0x2a72 006647 bne param_esco_addr ,get_free_amaddr_cont -0x2a73 006648 force 1 ,pdata -: 006649 get_free_amaddr_cont: -0x2a74 006650 store 1 ,mem_current_amaddr -0x2a75 006651 iforce am_addr -0x2a76 006652 rtn -: 006654 get_clk: -0x2a77 006655 copy clkn ,temp -0x2a78 006656 rtn master -0x2a79 006657 copy clke ,temp -0x2a7a 006658 rtn -: 006660 get_clkbt: -0x2a7b 006661 deposit clkn_bt -0x2a7c 006662 rtn master -0x2a7d 006663 deposit clke_bt -0x2a7e 006664 rtn -: 006667 supervision_update: -0x2a7f 006668 bpatch patch13_6 ,mem_patch13 -0x2a80 006669 fetcht 4 ,mem_supervision_timer -0x2a81 006670 call get_clkbt -0x2a82 006671 isub temp ,timeup -0x2a83 006672 deposit timeup -0x2a84 006673 fetcht 2 ,mem_supervision_to -0x2a85 006674 lshift temp ,temp -0x2a86 006675 isub temp ,pdata -0x2a87 006676 rtn -: 006678 supervision_flush: -0x2a88 006679 bpatch patch13_7 ,mem_patch13 -0x2a89 006680 call get_clkbt -0x2a8a 006681 store 4 ,mem_supervision_timer -0x2a8b 006682 rtn -: 006684 assert: -0x2a8c 006685 bpatch patch14_0 ,mem_patch14 -0x2a8d 006686 branch assert -: 006688 loop: -0x2a8e 006689 branch loop -: 006691 sleep: -0x2a8f 006692 rtn blank -0x2a90 006694 rshift pdata ,pdata -0x2a91 006695 increase -3 ,pdata -: 006696 sleep_loop: -0x2a92 006697 increase -1 ,pdata -0x2a93 006698 nbranch sleep_loop ,zero -0x2a94 006699 force 0 ,pdata -0x2a95 006700 rtn -: 006704 init_param: -0x2a96 006706 arg 0x10 ,loopcnt -0x2a97 006707 arg 0 ,contw -0x2a98 006708 call memset0 -0x2a99 006709 arg mem_le_state ,contw -0x2a9a 006710 arg 10 ,loopcnt -0x2a9b 006711 call memset0 -0x2a9c 006712 jam 0 ,mem_sp_calc -0x2a9d 006713 jam 0 ,mem_fifo_temp -0x2a9e 006714 jam 0 ,mem_le_testtype -0x2a9f 006715 jam 0 ,mem_debug_config -0x2aa0 006716 jam 0 ,mem_lmp_conn_state -0x2aa1 006717 bpatch patch14_1 ,mem_patch14 -0x2aa2 006718 jam 0 ,mem_connection_options -0x2aa3 006719 jam 0 ,mem_tester_emulate -0x2aa4 006720 jam 0 ,mem_tester_cnt -0x2aa5 006721 setarg param_glap -0x2aa6 006722 store 3 ,mem_glap -0x2aa7 006723 setarg param_acl_pktlen -0x2aa8 006724 store 2 ,mem_acl_pktlen -0x2aa9 006725 jam param_sco_pktlen ,mem_sco_pktlen -0x2aaa 006726 jam param_acl_pktcnt ,mem_acl_pktcnt -0x2aab 006727 jam param_sco_pktcnt ,mem_sco_pktcnt -0x2aac 006728 setarg param_hci_version -0x2aad 006729 store 3 ,mem_hci_version -0x2aae 006734 jam 0x60 ,mem_fhs_misc -0x2aaf 006735 jam param_max_slot ,mem_max_slot -0x2ab0 006736 jam 0x02 ,mem_fw_ver -0x2ab1 006737 fetch 1 ,mem_ssp_enable -0x2ab2 006738 ncall init_memp ,blank -0x2ab3 006739 fetch 1 ,mem_le_secure_connect_enable -0x2ab4 006740 ncall init_memp_256 ,blank -0x2ab5 006741 bpatch patch14_2 ,mem_patch14 -0x2ab6 006742 rtn wake -0x2ab7 006743 setarg 0 -0x2ab8 006744 store 2 ,mem_tx_len -0x2ab9 006745 rshift clkn_bt ,pdata -0x2aba 006746 store 4 ,mem_last_clkn -0x2abb 006747 rtn -: 006754 lpmstate: -0x2abc 006755 setarg 0xee21 -0x2abd 006756 hstore 2 ,core_clkoff -0x2abe 006757 hfetch 4 ,core_gpio_in -0x2abf 006758 store 4 ,mem_saved_gpio_in -0x2ac0 006759 hfetch 1 ,core_lpm_ldocnt -0x2ac1 006760 store 1 ,mem_wakup_from_power_flag -0x2ac2 006761 bbit0 gpio_latch ,loadcode -0x2ac3 006762 enable wake -0x2ac4 006763 bbit0 cold_wake ,lpmwake -0x2ac5 006764 disable wake -0x2ac6 006765 deposit auxcnt -0x2ac7 006766 nbranch lpmwake ,blank -0x2ac8 006767 hfetch 1 ,core_lpm_ctrl + 3 -0x2ac9 006768 bbit1 reload_code ,lpmwake -0x2aca 006769 arg param_hibernate_clks ,temp -0x2acb 006770 branch lpm_enter_sleep -: 006771 lpmwake: -0x2acc 006772 hfetch 3 ,core_lpm_xtalcnt -0x2acd 006773 hstore 3 ,core_lpm_reg -0x2ace 006774 ifetch 1 ,contr -0x2acf 006775 or_into isogate_mask ,pdata -0x2ad0 006776 istore 1 ,contw -0x2ad1 006777 call lpm_write_ctrl2 -0x2ad2 006778 hfetch 1 ,core_lpm_isogate -0x2ad3 006779 set1 enable_retmem ,pdata -0x2ad4 006780 hstore 1 ,core_lpm_isogate -0x2ad5 006781 call lpm_write_ctrl2 -0x2ad6 006782 call lpm_load_context ,wake -0x2ad7 006783 hfetch 1 ,core_lpm_reg + 2 -0x2ad8 006784 set0 gpio_latch ,pdata -0x2ad9 006785 hstore 1 ,core_lpm_reg + 2 -0x2ada 006786 call lpm_write_ctrl2 -0x2adb 006787 nbranch loadcode ,wake -0x2adc 006788 rtnmark0 mark_otp_encrypt -0x2add 006789 jam lock_otp ,core_misc_ctrl -0x2ade 006790 rtn -: 006792 lpm_load_context: -0x2adf 006793 fetch 1 ,mem_saved_spidctrl -0x2ae0 006794 hstore 1 ,core_spid_ctrl -0x2ae1 006795 fetch 3 ,mem_saved_gsel -0x2ae2 006796 hstore 3 ,core_gpio_sel -0x2ae3 006797 fetch 4 ,mem_saved_gpio + 4 -0x2ae4 006798 hstore 4 ,core_gpio_out0 -0x2ae5 006799 fetch 4 ,mem_saved_gpio -0x2ae6 006800 hstore 4 ,core_gpio_oe0 -0x2ae7 006801 fetch 8 ,mem_saved_gpio + 8 -0x2ae8 006802 hstore 8 ,core_gpio_pu0 -0x2ae9 006803 fetch 8 ,mem_saved_mark -0x2aea 006804 iforce mark -0x2aeb 006805 hfetch 8 ,core_gpio_wakeup_low -0x2aec 006806 store 8 ,mem_gpio_wakeup_low -0x2aed 006807 call load_ucode -0x2aee 006808 rtn -: 006810 lpm_save_context: -0x2aef 006811 deposit mark -0x2af0 006812 store 8 ,mem_saved_mark -0x2af1 006813 hfetch 8 ,core_gpio_oe0 -0x2af2 006814 store 8 ,mem_saved_gpio -0x2af3 006815 ifetch 8 ,contr -0x2af4 006816 istore 8 ,contw -0x2af5 006817 hfetch 3 ,core_gpio_sel -0x2af6 006818 store 3 ,mem_saved_gsel -0x2af7 006819 hfetch 1 ,core_spid_ctrl -0x2af8 006820 store 1 ,mem_saved_spidctrl -0x2af9 006821 branch lpm_write_gpio_wakeup -: 006823 lpo_calibration: -0x2afa 006824 hfetch 1 ,core_bist_ctrl -0x2afb 006825 nbranch lpo_cal_inited ,blank -0x2afc 006826 fetch 3 ,mem_clks_per_lpo -0x2afd 006827 nrtn blank -0x2afe 006828 jam 0xc0 ,core_bist_ctrl -0x2aff 006829 jam ccnt_start ,core_misc_ctrl -: 006830 lpo_cal_inited: -0x2b00 006831 hfetch 1 ,core_perf_status -0x2b01 006832 rtnbit0 1 -0x2b02 006833 hfetch 3 ,core_clk_counter -0x2b03 006834 store 3 ,mem_clks_per_lpo -0x2b04 006835 rtn -: 006839 lpm_adjust_clk: -0x2b05 006840 bpatch patch14_3 ,mem_patch14 -0x2b06 006841 deposit clke -0x2b07 006842 call clk_diff_rt -0x2b08 006843 fetcht 4 ,mem_sleep_counter_all -0x2b09 006844 sub temp ,0xff ,null -0x2b0a 006845 rtn positive -0x2b0b 006846 lshift8 pdata ,pdata -0x2b0c 006847 lshift4 pdata ,pdata -0x2b0d 006848 idiv temp -0x2b0e 006849 call wait_div_end -0x2b0f 006850 quotient pdata -0x2b10 006851 arg param_lpm_adjmax ,temp -0x2b11 006852 call ceiling -0x2b12 006853 store 1 ,mem_lpm_adjust -0x2b13 006854 nbranch lpm_adjust_positive ,user -0x2b14 006855 sub pdata ,0 ,pdata -: 006856 lpm_adjust_positive: -0x2b15 006857 fetcht 3 ,mem_clks_per_lpo -0x2b16 006858 iadd temp ,pdata -0x2b17 006859 store 3 ,mem_clks_per_lpo -: 006860 lpm_clear_counter: -0x2b18 006861 setarg 0 -0x2b19 006862 store 4 ,mem_sleep_counter_all -0x2b1a 006863 rtn -: 006867 lpm_doze: -0x2b1b 006868 fetch 1 ,mem_lpm_config + 2 -0x2b1c 006869 set1 reload_code ,pdata -0x2b1d 006870 store 1 ,mem_lpm_config + 2 -0x2b1e 006871 branch lpm_hibernate_normal -: 006875 lpm_hibernate: -0x2b1f 006876 arg param_hibernate_clks ,temp -0x2b20 006877 fetch 1 ,mem_lpm_config + 1 -0x2b21 006878 set0 7 ,pdata -0x2b22 006879 store 1 ,mem_lpm_config + 1 -: 006880 lpm_hibernate_normal: -0x2b23 006881 bpatch patch14_4 ,mem_patch14 -0x2b24 006882 call lpm_write_gpio_wakeup -0x2b25 006883 fetch 1 ,mem_lpm_hibernate_switch -0x2b26 006884 store 1 ,mem_lpm_xtalcnt + 4 -0x2b27 006885 fetch 1 ,mem_lpm_xtalcnt + 2 -0x2b28 006886 set1 cold_wake ,pdata -0x2b29 006887 store 1 ,mem_lpm_xtalcnt + 2 -: 006890 lpm_sleep: -0x2b2a 006891 bpatch patch14_5 ,mem_patch14 -0x2b2b 006892 call xtal_fast_wake -0x2b2c 006893 fetch 4 ,mem_sleep_counter_all -0x2b2d 006894 iadd temp ,pdata -0x2b2e 006895 store 4 ,mem_sleep_counter_all -0x2b2f 006896 call lpm_save_context -0x2b30 006897 fetch 5 ,mem_lpm_xtalcnt -0x2b31 006898 hstore 4 ,core_lpm_reg -0x2b32 006899 rshift32 pdata ,rega -0x2b33 006900 until null ,lpo_edge -0x2b34 006901 deposit clkn -0x2b35 006902 store 6 ,mem_sleep_clkn -0x2b36 006903 jam lpmreg_sel_ctrl2 ,core_lpm_wr -0x2b37 006904 until null ,lpo_edge -0x2b38 006905 until null ,lpo_edge -0x2b39 006906 deposit rega -0x2b3a 006907 hstore 1 ,core_lpm_isogate -0x2b3b 006908 jam lpmreg_sel_ctrl2 ,core_lpm_wr -: 006909 lpm_enter_sleep: -0x2b3c 006910 until null ,lpo_edge -0x2b3d 006911 until null ,lpo_edge -0x2b3e 006912 hstoret 4 ,core_lpm_reg -0x2b3f 006913 jam lpmreg_sel_counter ,core_lpm_wr -0x2b40 006914 until null ,never -: 006919 lpm_recover_clk: -0x2b41 006920 bpatch patch14_6 ,mem_patch14 -0x2b42 006921 setarg 0 -0x2b43 006922 copy auxcnt ,null -0x2b44 006923 branch lpm_recover_timeout ,zero -0x2b45 006924 hfetch 1 ,core_lpm_xtalcnt -0x2b46 006925 hfetcht 1 ,core_lpm_buckcnt -0x2b47 006926 isub temp ,null -0x2b48 006927 branch lpm_recover_xtal ,positive -0x2b49 006928 deposit temp -: 006929 lpm_recover_xtal: -0x2b4a 006930 isub auxcnt ,pdata -0x2b4b 006931 increase 1 ,pdata -: 006932 lpm_recover_timeout: -0x2b4c 006933 increase 8 ,pdata -0x2b4d 006934 until null ,lpo_edge -0x2b4e 006935 iadd lpo_time ,pdata -0x2b4f 006936 fetcht 4 ,mem_sleep_counter -0x2b50 006937 iadd temp ,pdata -0x2b51 006938 fetcht 3 ,mem_clks_per_lpo -0x2b52 006939 imul32 temp ,pdata -0x2b53 006940 rshift8 pdata ,pdata -0x2b54 006941 rshift4 pdata ,pdata -0x2b55 006942 increase param_lpm_fix ,pdata -0x2b56 006943 arg 3750 ,temp -0x2b57 006944 idiv temp -0x2b58 006945 call wait_div_end -0x2b59 006946 quotient pdata -0x2b5a 006947 lshift16 pdata ,pdata -0x2b5b 006948 remainder temp -0x2b5c 006949 ior temp ,pdata -0x2b5d 006950 fetcht 6 ,mem_sleep_clkn -0x2b5e 006951 call clk_add -0x2b5f 006952 copy temp ,clkn -0x2b60 006953 fetch 6 ,mem_context + coffset_clk_offset -0x2b61 006954 call calc_clke2 -0x2b62 006955 deposit clke -0x2b63 006956 store 6 ,mem_pdatatemp -0x2b64 006957 deposit auxcnt -0x2b65 006958 istore 1 ,contw -0x2b66 006959 hfetch 1 ,core_gpio_in1 -0x2b67 006960 or_into 0xf0 ,pdata -0x2b68 006961 istore 1 ,contw -0x2b69 006962 rtn -: 006964 lpm_dispatch: -0x2b6a 006965 bpatch patch14_7 ,mem_patch14 -0x2b6b 006966 call lpo_calibration -0x2b6c 006967 fetch 3 ,mem_clks_per_lpo -0x2b6d 006968 rtn blank -0x2b6e 006969 fetch 1 ,mem_lpm_mode -0x2b6f 006970 rtn blank -0x2b70 006971 fetch 1 ,mem_ssp_enable -0x2b71 006972 branch lpm_dispatch_next ,blank -0x2b72 006973 fetch 1 ,mem_sp_local_key_invalid -0x2b73 006974 rtn blank -: 006975 lpm_dispatch_next: -0x2b74 006976 fetch 1 ,mem_le_sc_calc -0x2b75 006977 nrtn blank -0x2b76 006978 call lpm_check_wake_lock -0x2b77 006979 nrtn blank -0x2b78 006980 fetch 1 ,mem_context -0x2b79 006981 compare 3 ,pdata ,0x7 -0x2b7a 006982 nbranch lpm_dispatch_unconn ,true -0x2b7b 006983 fetch 2 ,mem_context + coffset_tsniff -0x2b7c 006984 rtn blank -0x2b7d 006985 rtn wake -0x2b7e 006986 bpatch patch15_0 ,mem_patch15 -: 006987 lpm_dispatch_next2: -0x2b7f 006988 fetcht 1 ,mem_lpm_current_mult -0x2b80 006989 fetch 2 ,mem_context + coffset_tsniff -0x2b81 006990 imul32 temp ,pdata -0x2b82 006991 rshift4 temp ,temp -0x2b83 006992 rshift2 temp ,temp -0x2b84 006993 isub temp ,pdata -0x2b85 006994 fetcht 4 ,mem_context + coffset_sniff_anchor -0x2b86 006995 iadd temp ,pdata -0x2b87 006996 fetcht 1 ,mem_lpm_overhead -0x2b88 006997 isub temp ,pdata -0x2b89 006998 lshift16 pdata ,alarm -0x2b8a 006999 bpatch patch15_1 ,mem_patch15 -0x2b8b 007000 fetch 2 ,mem_context + coffset_rx_window -0x2b8c 007001 rshift pdata ,pdata -0x2b8d 007002 call clk2bt -0x2b8e 007003 deposit alarm -0x2b8f 007004 call clk_diff -0x2b90 007005 copy clke ,temp -0x2b91 007006 call clk_diff_rt -0x2b92 007007 rtn user -: 007008 lpm_dispatch_sleep: -0x2b93 007009 call clk2lpo -: 007010 lpm_dispatch_lpo: -0x2b94 007011 bpatch patch15_2 ,mem_patch15 -0x2b95 007012 fetch 1 ,mem_lpm_xtalcnt -0x2b96 007013 isub temp ,null -0x2b97 007014 branch lpm_clear_counter ,positive -0x2b98 007015 storet 4 ,mem_sleep_counter -0x2b99 007016 call app_will_enter_lpm -0x2b9a 007017 call l2cap_lpm_save_txbuf -0x2b9b 007018 fetcht 4 ,mem_sleep_counter -0x2b9c 007019 branch lpm_sleep -: 007021 lpm_dispatch_unconn: -0x2b9d 007022 bpatch patch15_3 ,mem_patch15 -0x2b9e 007023 fetch 1 ,mem_context -0x2b9f 007024 rtnbit1 state_inconn -0x2ba0 007025 rtnbit1 state_inpage -0x2ba1 007026 fetch 1 ,mem_ssp_enable -0x2ba2 007027 branch lpm_unconn_nossp ,blank -0x2ba3 007028 fetch 1 ,mem_sp_local_key_invalid -0x2ba4 007029 rtn blank -: 007030 lpm_unconn_nossp: -0x2ba5 007031 bpatch patch15_4 ,mem_patch15 -0x2ba6 007032 fetch 1 ,mem_le_adv_enable -0x2ba7 007033 nbranch lpm_unconn_cont ,blank -0x2ba8 007034 fetch 1 ,mem_scan_mode -0x2ba9 007035 rtn blank -: 007036 lpm_unconn_cont: -0x2baa 007037 fetch 2 ,mem_lpm_interval -0x2bab 007038 rtn blank -: 007039 lpm_sleep_btclk: -0x2bac 007040 fetcht 1 ,mem_lpm_overhead -0x2bad 007041 isub temp ,pdata -0x2bae 007042 arg 7500 ,temp -0x2baf 007043 imul32 temp ,pdata -0x2bb0 007044 branch lpm_dispatch_sleep -: 007046 lpm_set_mult: -0x2bb1 007047 bpatch patch15_5 ,mem_patch15 -0x2bb2 007048 disable wake -0x2bb3 007049 fetch 1 ,mem_state -0x2bb4 007050 rtnbit0 state_insniff -0x2bb5 007051 nbranch lpm_not_match ,match -0x2bb6 007052 call lpm_match -0x2bb7 007053 fetch 2 ,mem_rx_window_sniff -0x2bb8 007054 store 2 ,mem_rx_window -0x2bb9 007055 fetch 1 ,mem_arq -0x2bba 007056 bbit1 wack ,lpm_mult_short -0x2bbb 007057 bmark0 mark_lpm_mult_enable ,lpm_mult_short -0x2bbc 007058 call l2cap_malloc_is_fifo_empty -0x2bbd 007059 nbranch lpm_mult_short ,blank -0x2bbe 007060 fetch 1 ,mem_classic_bt_flag -0x2bbf 007061 bbit1 short_mult_flag ,lpm_mult_short -: 007062 lpm_mult_wait_timeout: -0x2bc0 007063 jam 0 ,mem_lpm_current_mult -0x2bc1 007064 bmark0 mark_lpm_mult_enable ,lpm_mult_short -0x2bc2 007065 fetch 1 ,mem_lpm_mult_cnt -0x2bc3 007066 branch lpm_mult_long ,blank -0x2bc4 007067 increase -1 ,pdata -0x2bc5 007068 store 1 ,mem_lpm_mult_cnt -0x2bc6 007069 rtn -: 007072 classic_bt_set_mult_short_flag: -0x2bc7 007073 arg short_mult_flag ,queue -0x2bc8 007074 branch classic_bluetooth_set_flag -: 007076 classic_bt_clr_mult_short_flag: -0x2bc9 007077 arg short_mult_flag ,queue -0x2bca 007078 branch classic_bluetooth_clr_flag -: 007082 lpm_match: -0x2bcb 007083 jam 0 ,mem_sniff_unint_lost -0x2bcc 007084 fetch 3 ,mem_sniff_rcv -0x2bcd 007085 increase 1 ,pdata -0x2bce 007086 store 3 ,mem_sniff_rcv -0x2bcf 007087 rtn -: 007089 lpm_not_match: -0x2bd0 007090 bpatch patch15_6 ,mem_patch15 -0x2bd1 007091 fetcht 2 ,mem_rx_window_sniff -0x2bd2 007092 rshift temp ,temp -0x2bd3 007093 fetch 2 ,mem_rx_window -0x2bd4 007094 iadd temp ,pdata -0x2bd5 007095 store 2 ,mem_rx_window -: 007096 lpm_lost: -0x2bd6 007097 jam 0 ,mem_lpm_current_mult -0x2bd7 007098 fetch 3 ,mem_sniff_lost -0x2bd8 007099 increase 1 ,pdata -0x2bd9 007100 store 3 ,mem_sniff_lost -0x2bda 007101 fetch 1 ,mem_sniff_unint_lost -0x2bdb 007102 increase 1 ,pdata -0x2bdc 007103 store 1 ,mem_sniff_unint_lost -0x2bdd 007104 rtn -: 007106 lpm_mult_short: -0x2bde 007107 jam 0 ,mem_lpm_current_mult -0x2bdf 007108 fetch 1 ,mem_lpm_mult_timeout -0x2be0 007109 store 1 ,mem_lpm_mult_cnt -0x2be1 007110 rtn -: 007112 lpm_mult_long: -0x2be2 007113 fetcht 1 ,mem_lpm_mult -0x2be3 007114 storet 1 ,mem_lpm_current_mult -0x2be4 007115 rtn -: 007117 lpm_cal_xtal_startup: -0x2be5 007118 bpatch patch15_7 ,mem_patch15 -0x2be6 007119 fetch 1 ,mem_lpm_xtalcnt -0x2be7 007120 nrtn blank -0x2be8 007121 jam clksel_rc ,core_clksel -0x2be9 007122 setarg 0xf0c -0x2bea 007123 call lpm_write_config -0x2beb 007124 setarg 200000 -0x2bec 007125 call sleep -0x2bed 007126 until null ,lpo_edge -0x2bee 007127 copy lpo_time ,alarm -0x2bef 007128 call xtal_fast_wake -0x2bf0 007129 jam clksel_xtal ,core_clksel -0x2bf1 007130 nop 10 -0x2bf2 007131 until null ,lpo_edge -0x2bf3 007132 deposit lpo_time -0x2bf4 007133 isub alarm ,pdata -0x2bf5 007134 increase 0x30 ,pdata -0x2bf6 007135 arg 0xff ,temp -0x2bf7 007136 call ceiling -0x2bf8 007137 store 1 ,mem_lpm_xtalcnt -0x2bf9 007138 nop 30000 -0x2bfa 007139 nop 30000 -0x2bfb 007140 nop 30000 -0x2bfc 007141 rtn -: 007143 lpm_cal_xtal_startup_by_snooze: -0x2bfd 007144 fetch 1 ,mem_lpm_xtalcnt -0x2bfe 007145 nrtn blank -0x2bff 007146 jam 0xff ,core_xtal_stable_time -0x2c00 007147 jam clksel_rc ,core_clksel -0x2c01 007148 call xtal_fast_wake -0x2c02 007149 setarg 1000 -0x2c03 007150 iadd lpo_time ,alarm -0x2c04 007151 snooze -0x2c05 007152 deposit lpo_time -0x2c06 007153 nop 12000 -0x2c07 007154 nop 12000 -0x2c08 007155 nop 12000 -0x2c09 007156 nop 12000 -0x2c0a 007157 nop 12000 -0x2c0b 007158 nop 12000 -0x2c0c 007159 nop 12000 -0x2c0d 007160 nop 12000 -0x2c0e 007161 nop 12000 -0x2c0f 007162 isub alarm ,pdata -0x2c10 007163 add pdata ,0x30 ,pdata -0x2c11 007164 arg 0xff ,temp -0x2c12 007165 call ceiling -0x2c13 007166 store 1 ,mem_lpm_xtalcnt -0x2c14 007167 nop 30000 -0x2c15 007168 nop 30000 -0x2c16 007169 nop 30000 -0x2c17 007170 rtn -: 007175 lpm_write_config: -0x2c18 007176 arg 0xfff ,contw -0x2c19 007177 iand contw ,contw -0x2c1a 007178 fetch 1 ,mem_lpm_config -0x2c1b 007179 and_into 0xf0 ,pdata -0x2c1c 007180 lshift8 pdata ,pdata -0x2c1d 007181 ior contw ,pdata -0x2c1e 007182 hstore 2 ,core_lpm_reg -0x2c1f 007183 ifetch 2 ,contr -0x2c20 007184 istore 2 ,contw -: 007186 lpm_write_ctrl: -0x2c21 007187 setarg lpmreg_sel_ctrl -0x2c22 007188 branch lpm_write -: 007190 lpm_write_ctrl2: -0x2c23 007191 setarg lpmreg_sel_ctrl2 -: 007192 lpm_write: -0x2c24 007193 until null ,lpo_edge -0x2c25 007194 hstore 1 ,core_lpm_wr -0x2c26 007195 until null ,lpo_edge -0x2c27 007196 until null ,lpo_edge -0x2c28 007197 rtn -: 007200 lpm_write_gpio_wakeup: -0x2c29 007201 bpatch patch16_0 ,mem_patch16 -0x2c2a 007202 fetch 4 ,mem_gpio_wakeup_low -0x2c2b 007203 hstore 4 ,core_lpm_reg -0x2c2c 007204 setarg lpmreg_sel_gpiolow -0x2c2d 007205 call lpm_write -0x2c2e 007206 fetch 4 ,mem_gpio_wakeup_high -0x2c2f 007207 hstore 4 ,core_lpm_reg -0x2c30 007208 setarg lpmreg_sel_gpiohigh -0x2c31 007209 branch lpm_write -: 007211 lpm_get_wake_lock: -0x2c32 007212 fetch 2 ,mem_lpm_wake_lock -0x2c33 007213 qset1 pdata -0x2c34 007214 store 2 ,mem_lpm_wake_lock -0x2c35 007215 rtn -: 007217 lpm_put_wake_lock: -0x2c36 007218 fetch 2 ,mem_lpm_wake_lock -0x2c37 007219 qset0 pdata -0x2c38 007220 store 2 ,mem_lpm_wake_lock -0x2c39 007221 rtn -: 007225 lpm_check_wake_lock: -0x2c3a 007226 bpatch patch16_1 ,mem_patch16 -0x2c3b 007227 call app_check_wake_lock -0x2c3c 007228 fetch 2 ,mem_lpm_wake_lock -0x2c3d 007229 copy pdata ,rega -0x2c3e 007230 fetch 1 ,mem_state_map -0x2c3f 007231 isolate1 smap_rxlmp ,pdata -0x2c40 007232 setflag true ,wake_lock_lmp_rx ,rega -0x2c41 007233 fetch 1 ,mem_lmo_opcode1 -0x2c42 007234 fetcht 1 ,mem_lmo_opcode2 -0x2c43 007235 iadd temp ,pdata -0x2c44 007236 fetcht 1 ,mem_lmp_to_send -0x2c45 007237 iadd temp ,pdata -0x2c46 007238 nsetflag blank ,wake_lock_lmp_tx ,rega -0x2c47 007239 fetch 1 ,mem_le_tx_buff_used -0x2c48 007240 nsetflag blank ,wake_lock_ble_tx ,rega -0x2c49 007241 fetch 2 ,mem_l2cap_rxbuff1_len -0x2c4a 007242 fetcht 2 ,mem_l2cap_rxbuff2_len -0x2c4b 007243 iadd temp ,pdata -0x2c4c 007244 nsetflag blank ,wake_lock_l2cap_rx ,rega -0x2c4d 007245 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 -0x2c4e 007246 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega -0x2c4f 007247 fetch util_fifo_len ,mem_ipc_fifo_c512bt -0x2c50 007248 nsetflag blank ,wake_lock_ipc_c512bt ,rega -0x2c51 007249 fetch 1 ,mem_hci_cmd -0x2c52 007250 nsetflag blank ,wake_lock_cmd ,rega -0x2c53 007251 fetch 1 ,mem_device_option -0x2c54 007252 compare dvc_op_module ,pdata ,0xff -0x2c55 007253 call lpm_uart_wake_lock ,true -0x2c56 007254 setarg -8 -0x2c57 007255 iand rega ,rega -0x2c58 007256 copy rega ,pdata -0x2c59 007257 store 2 ,mem_lpm_wake_lock -0x2c5a 007258 rtn -: 007260 lpm_uart_wake_lock: -0x2c5b 007261 hfetch 2 ,core_uart_rxitems -0x2c5c 007262 nsetflag blank ,wake_lock_uart_rx ,rega -0x2c5d 007263 hfetch 2 ,core_uart_txitems -0x2c5e 007264 nsetflag blank ,wake_lock_uart_tx ,rega -0x2c5f 007265 rtn -: 007267 lpm_shut_down: -0x2c60 007268 hfetch 4 ,core_lpm_ctrl -0x2c61 007269 set0 27 ,pdata -0x2c62 007270 hstore 4 ,core_lpm_reg -0x2c63 007271 call lpm_write_ctrl -0x2c64 007272 branch assert -: 007274 lpm_disable_exen_output: -0x2c65 007275 hfetch 4 ,core_lpm_xtalcnt -0x2c66 007276 set0 20 ,pdata -0x2c67 007277 hstore 4 ,core_lpm_reg -0x2c68 007278 branch lpm_write_ctrl2 -: 007280 check_bt_disabled: -0x2c69 007281 fetch 2 ,mem_chip_functions -0x2c6a 007282 bbit1 bt_disabled ,assert -0x2c6b 007283 rtn -: 007284 check_ble_disabled: -0x2c6c 007285 fetch 2 ,mem_chip_functions -0x2c6d 007286 bbit1 ble_disabled ,assert -0x2c6e 007287 rtn -: 007288 check_module_disabled: -0x2c6f 007289 fetch 2 ,mem_chip_functions -0x2c70 007290 bbit1 module_disable ,assert -0x2c71 007291 rtn -: 007352 g24_dispatch: -0x2c72 007353 bpatch patch16_2 ,mem_patch16 -0x2c73 007354 call g24_head_ptr2regc -0x2c74 007355 add regc ,offset_24g_mode ,regb -0x2c75 007356 ifetch 1 ,regb -0x2c76 007358 rtneq disable_24g -0x2c77 007359 beq tx_24g ,g24_transmit_process -0x2c78 007360 beq rx_24g ,g24_receive_process -0x2c79 007361 rtn -: 007363 g24_head_ptr2regc: -0x2c7a 007364 fetcht 2 ,mem_24g_head_ptr -0x2c7b 007365 copy temp ,regc -0x2c7c 007366 rtn -: 007368 g24_receive_process_init: -0x2c7d 007369 call g24_receive_init -0x2c7e 007370 branch g24_mode_switch_init -: 007372 g24_receive_process: -0x2c7f 007373 call g24_mode_switch -0x2c80 007374 call g24_dongle_work_mode_auto -0x2c81 007375 call g24_dongle_bind_mode_auto -0x2c82 007376 branch g24_dongle_search_mode_auto -: 007379 g24_pair_init: -0x2c83 007382 call g24_set0_mem_pid -0x2c84 007383 setarg g24_pair_ch -0x2c85 007384 call g24_store_mem_ch -0x2c86 007385 call g24_store_mem_pair_txpower -0x2c87 007388 add regc ,offset_24g_paring_addr ,rega -0x2c88 007389 ifetch 4 ,rega -0x2c89 007390 branch g24_store_mem_addr -: 007392 g24_ch: -0x2c8a 007393 call g24_head_ptr2regc -0x2c8b 007394 add regc ,offset_24g_current_ch_number ,regb -0x2c8c 007395 ifetcht 1 ,regb -0x2c8d 007397 call g24_ch_temp_incre_size4 -0x2c8e 007398 add regc ,offset_24g_current_ch_number ,contw -0x2c8f 007400 branch g24_contw_istoret_1byte -: 007402 g24_ch_temp_incre_size4: -0x2c90 007403 call g24_ch_calc -0x2c91 007404 increase 1 ,temp -0x2c92 007405 and_into 3 ,temp -0x2c93 007406 rtn -: 007408 g24_ch_calc: -0x2c94 007409 add regc ,offset_24g_addr ,regb -0x2c95 007410 ifetch 1 ,regb -0x2c96 007412 and_into 0x03 ,pdata -0x2c97 007413 mul32 pdata ,4 ,rega -0x2c98 007414 add regc ,offset_24g_ch_map1 ,pdata -0x2c99 007416 iadd rega ,pdata -0x2c9a 007417 iadd temp ,contr -0x2c9b 007418 ifetch 1 ,contr -0x2c9c 007420 branch g24_store_mem_ch -: 007422 g24_set_device_addr: -0x2c9d 007423 call g24_store_mem_tx_power_temp -0x2c9e 007424 call otp_enable_chgpump -0x2c9f 007425 setarg 0x7e2 -0x2ca0 007426 arg mem_temp ,rega -0x2ca1 007427 arg 4 ,temp -0x2ca2 007428 call otpd_read_data -0x2ca3 007429 call otp_disable_chgpump -0x2ca4 007430 fetch 4 ,mem_temp -0x2ca5 007431 call g24_store_mem_device_addr -0x2ca6 007433 nrtn blank -0x2ca7 007434 fetch 4 ,mem_lap -0x2ca8 007436 branch g24_store_mem_device_addr -: 007438 g24_transmit_rf_sta_init: -0x2ca9 007439 call g24_set1_mem_rf_last_sta -0x2caa 007441 setarg 0 -0x2cab 007442 call g24_store_mem_sync_cnt -: 007444 g24_transmit_rf_ctrl_clear: -0x2cac 007445 call g24_fetch_mem_data_type -0x2cad 007447 and_into bits_data ,pdata -0x2cae 007449 branch g24_store_mem_data_type -: 007451 g24_hop_ch_enable: -0x2caf 007452 call g24_fetch_mem_data_type -0x2cb0 007454 set1 bit_hop ,pdata -0x2cb1 007455 call g24_store_mem_data_type -0x2cb2 007458 branch g24_store_mem_txpayload -: 007460 g24_transmit_hop_pac_fail: -0x2cb3 007461 call g24_fetch_mem_rf_work_stage -0x2cb4 007463 beq 1 ,g24_transmit_hop_pac_fail_wo_hop -0x2cb5 007464 beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 -0x2cb6 007465 rtn -: 007467 g24_transmit_hop_pac_fail_wo_hop: -0x2cb7 007468 call g24_set2_mem_sync_cnt -: 007470 g24_transmit_hop_pac_fail_stage1: -0x2cb8 007471 add regc ,offset_24g_hop_pac_retry ,contw -0x2cb9 007472 call g24_mem_set0 -0x2cba 007474 call g24_store_mem_rf_last_sta -0x2cbb 007476 branch g24_transmit_rf_ctrl_clear -: 007478 g24_transmit_hop_pac_fail_hop_stage2: -0x2cbc 007479 call g24_set0_mem_rf_hop_ch -0x2cbd 007481 branch g24_transmit_hop_pac_fail_stage1 -: 007483 g24_transmit_pac_fail_hop_stage3: -0x2cbe 007484 add regc ,offset_24g_txfail_cnt ,rega -0x2cbf 007485 ifetch 1 ,rega -0x2cc0 007487 increase 1 ,pdata -0x2cc1 007488 add regc ,offset_24g_txfail_cnt ,contw -0x2cc2 007489 istore 1 ,contw -0x2cc3 007491 beq 0x20 ,g24_tx_attempt_fail -0x2cc4 007492 call g24_fetch_mem_rf_hop_ch -0x2cc5 007494 beq 1 ,g24_rf_hop_fastly -0x2cc6 007495 setarg 1 -0x2cc7 007496 call g24_store_mem_rf_hop_ch -: 007498 g24_rf_hop_attemp_again: -0x2cc8 007499 call g24_fetch_mem_rf_hop_ch -0x2cc9 007501 bne 1 ,g24_transmit_rf_ctrl_clear -: 007502 g24_rf_hop_fastly: -0x2cca 007503 add regc ,offset_24g_hop_fastly_cnt ,rega -0x2ccb 007504 ifetch 1 ,rega -0x2ccc 007506 increase 1 ,pdata -0x2ccd 007507 call g24_store_mem_hop_fastly_cnt -0x2cce 007509 beq 4 ,g24_rf_hop_fastly_exit -0x2ccf 007510 call g24_ch -0x2cd0 007511 call g24_set2_mem_max_retry -0x2cd1 007513 branch g24_transmit_packet -: 007515 g24_rf_hop_fastly_exit: -0x2cd2 007516 call g24_set0_mem_hop_fastly_cnt -0x2cd3 007518 branch g24_transmit_rf_ctrl_clear -: 007520 g24_set0_mem_hop_fastly_cnt: -0x2cd4 007521 setarg 0 -: 007522 g24_store_mem_hop_fastly_cnt: -0x2cd5 007523 add regc ,offset_24g_hop_fastly_cnt ,contw -0x2cd6 007524 branch g24_contw_istore_1byte -: 007526 g24_transmit_hop_pac_succ_wo_hop: -0x2cd7 007527 call g24_set2_mem_sync_cnt -: 007529 g24_transmit_hop_pac_succ: -0x2cd8 007530 call g24_set0_mem_rf_hop_ch -0x2cd9 007532 call g24_set1_mem_rf_last_sta -0x2cda 007534 branch g24_transmit_rf_ctrl_clear -: 007536 g24_transmit_succ_rf_config: -0x2cdb 007537 call g24_fetch_mem_rf_work_stage -0x2cdc 007539 beq 3 ,g24_transmit_hop_pac_succ -0x2cdd 007540 call g24_fetch_mem_data_type -0x2cde 007542 isolate0 bit_hop ,pdata -0x2cdf 007543 branch g24_transmit_rf_sta_init ,true -0x2ce0 007544 call g24_fetch_mem_rf_work_stage -0x2ce1 007546 beq 1 ,g24_transmit_hop_pac_succ_wo_hop -0x2ce2 007547 beq 2 ,g24_transmit_hop_pac_succ -0x2ce3 007548 rtn -: 007550 g24_rf_sta_check: -0x2ce4 007551 call g24_fetch_mem_pairing_sm -0x2ce5 007553 rtnne state_24g_pairing_success -0x2ce6 007554 call g24_rf_laststa_synccnt_check -0x2ce7 007555 ncall g24_rf_sync_cnt_check ,user2 -0x2ce8 007556 rtn -: 007558 g24_rf_laststa_synccnt_check: -0x2ce9 007559 disable user2 -0x2cea 007560 add regc ,offset_24g_rf_last_sta ,rega -0x2ceb 007561 ifetch 1 ,rega -0x2cec 007563 rtnne 1 -0x2ced 007564 add regc ,offset_24g_sync_cnt ,rega -0x2cee 007565 ifetch 1 ,rega -0x2cef 007567 rtnne 0 -0x2cf0 007568 setarg 1 -0x2cf1 007569 call g24_store_mem_rf_work_stage -0x2cf2 007571 call g24_set4_mem_max_retry -0x2cf3 007573 branch enable_user2 -: 007575 g24_rf_sync_cnt_check: -0x2cf4 007576 add regc ,offset_24g_sync_cnt ,rega -0x2cf5 007577 ifetch 1 ,rega -0x2cf6 007579 branch g24_rf_hop_attemp ,blank -0x2cf7 007580 increase -1 ,pdata -0x2cf8 007581 call g24_store_mem_sync_cnt -0x2cf9 007583 setarg 2 -0x2cfa 007584 call g24_store_mem_rf_work_stage -0x2cfb 007586 call g24_ch -0x2cfc 007588 branch g24_set4_mem_max_retry -: 007590 g24_store_mem_rf_work_stage: -0x2cfd 007591 add regc ,offset_24g_rf_work_stage ,contw -0x2cfe 007592 branch g24_contw_istore_1byte -: 007595 g24_rf_hop_attemp: -0x2cff 007596 setarg 3 -0x2d00 007597 call g24_store_mem_rf_work_stage -0x2d01 007599 call g24_fetch_mem_rf_hop_ch -0x2d02 007601 nbranch g24_rf_hop_attemp_again ,blank -0x2d03 007602 call g24_ch -: 007604 g24_set2_mem_max_retry: -0x2d04 007605 setarg 2 -0x2d05 007606 branch g24_store_mem_max_retry -: 007608 g24_transmit_process: -0x2d06 007609 rtnmark0 mark_24g -0x2d07 007610 set1 mark_24g_conext ,mark -0x2d08 007611 bpatch patch16_3 ,mem_patch16 -0x2d09 007612 add regc ,offset_24g_tx_without_int ,rega -0x2d0a 007613 ifetch 1 ,rega -0x2d0b 007615 beq 1 ,g24_transmit_without_int -0x2d0c 007616 call g24_timer_check -0x2d0d 007617 nbranch g24_transmit_exit ,user -0x2d0e 007618 call g24_interval_calibrate -: 007619 g24_transmit_without_int: -0x2d0f 007620 add regc ,offset_24g_tx_without_int ,contw -0x2d10 007621 call g24_mem_set0 -0x2d11 007623 call g24_txdata_prep -0x2d12 007624 nbranch g24_enter_lpm ,user -0x2d13 007625 call g24_rf_sta_check -: 007626 g24_transmit_start: -0x2d14 007627 call g24_transmit_packet -0x2d15 007628 call g24_power_ctrl -: 007629 g24_transmit_exit: -0x2d16 007630 set0 mark_24g_conext ,mark -0x2d17 007631 rtn -: 007633 g24_timer_timeout: -0x2d18 007634 rtn zero -0x2d19 007635 set1 28 ,pdata -0x2d1a 007636 rtn -: 007638 g24_interval_calibrate: -0x2d1b 007639 add regc ,offset_24g_pac_index ,rega -0x2d1c 007640 ifetch 1 ,rega -0x2d1d 007642 increase 1 ,pdata -0x2d1e 007643 add regc ,offset_24g_pac_index ,contw -0x2d1f 007644 istore 1 ,contw -0x2d20 007646 beq 4 ,g24_interval_max -0x2d21 007647 beq 5 ,g24_interval_min -0x2d22 007648 rtn -: 007649 g24_interval_max: -0x2d23 007650 add regc ,offset_24g_interval_max ,rega -0x2d24 007651 ifetch 1 ,rega -: 007653 g24_interval_update: -0x2d25 007655 add regc ,offset_24g_interval ,contw -0x2d26 007656 branch g24_contw_istore_1byte -: 007658 g24_interval_min: -0x2d27 007659 add regc ,offset_24g_pac_index ,contw -0x2d28 007660 call g24_mem_set0 -0x2d29 007662 add regc ,offset_24g_interval_min ,rega -0x2d2a 007663 ifetch 1 ,rega -0x2d2b 007665 branch g24_interval_update -: 007667 g24_txdata_prep: -0x2d2c 007668 call g24_fetch_mem_pairing_sm -0x2d2d 007670 bne state_24g_pairing_success ,g24_pairing_sm -0x2d2e 007671 bpatch patch16_4 ,mem_patch16 -0x2d2f 007672 call g24_package_data -0x2d30 007673 nbranch g24_txdata_last_pac ,user -0x2d31 007674 call g24_transmit_prep -0x2d32 007675 call g24_power_ctrl_pac_incrs -: 007676 g24_txdata_enable_tx: -0x2d33 007678 setarg ensure_on_24g -: 007679 g24_store_mem_ensure: -0x2d34 007680 add regc ,offset_24g_ensure ,contw -0x2d35 007681 branch g24_contw_istore_1byte -: 007683 g24_txdata_last_pac: -0x2d36 007684 add regc ,offset_24g_ensure ,rega -0x2d37 007685 ifetch 1 ,rega -0x2d38 007687 beq ensure_on_24g ,enable_user -0x2d39 007688 rtn -: 007690 g24_package_data: -0x2d3a 007692 add regc ,offset_24g_cb_data ,temp -0x2d3b 007693 ifetch 2 ,temp -0x2d3c 007695 call callback_func -0x2d3d 007696 nrtn user -0x2d3e 007697 copy rega ,pdata -0x2d3f 007698 store 1 ,mem_rega -0x2d40 007699 add regc ,offset_24g_abort_pac ,contw -0x2d41 007700 call g24_mem_set0 -0x2d42 007702 call g24_transmit_rf_ctrl_clear -0x2d43 007703 store 1 ,mem_24g_common_temp -0x2d44 007704 fetch 1 ,mem_rega -0x2d45 007705 copy pdata ,rega -0x2d46 007706 add rega ,1 ,temp -0x2d47 007707 arg mem_24g_common_temp + 1 ,contw -0x2d48 007708 copy rega ,loopcnt -0x2d49 007709 copy regb ,contr -0x2d4a 007710 call memcpy -0x2d4b 007711 arg mem_24g_common_temp ,rega -: 007712 g24_put_data_in_buff: -0x2d4c 007713 rtnmark0 mark_24g_conext -0x2d4d 007714 add regc ,offset_24g_datalen ,contw -0x2d4e 007715 istoret 1 ,contw -0x2d4f 007717 copy temp ,loopcnt -0x2d50 007718 add regc ,offset_24g_txbuf ,contw -0x2d51 007720 copy rega ,contr -0x2d52 007721 branch memcpy -: 007723 g24_transmit_prep: -0x2d53 007725 add regc ,offset_24g_datalen ,rega -0x2d54 007726 ifetch 1 ,rega -0x2d55 007728 increase 2 ,pdata -0x2d56 007729 add regc ,offset_24g_txlen ,contw -0x2d57 007730 istore 1 ,contw -0x2d58 007733 call g24_fetch_mem_data_type -0x2d59 007735 call g24_store_mem_txpayload -0x2d5a 007738 add regc ,offset_24g_datalen ,rega -0x2d5b 007739 ifetch 1 ,rega -0x2d5c 007741 lshift3 pdata ,pdata -0x2d5d 007742 add regc ,offset_24g_pid ,rega -0x2d5e 007743 ifetcht 1 ,rega -0x2d5f 007745 and temp ,0x03 ,temp -0x2d60 007746 lshift temp ,temp -0x2d61 007747 ior temp ,pdata -0x2d62 007748 add regc ,offset_24g_no_ack ,rega -0x2d63 007749 ifetcht 1 ,rega -0x2d64 007751 iadd temp ,pdata -0x2d65 007752 istore 1 ,contw -0x2d66 007754 add regc ,offset_24g_datalen ,rega -0x2d67 007755 ifetch 1 ,rega -0x2d68 007757 iforce loopcnt -0x2d69 007758 add regc ,offset_24g_txbuf ,contr -0x2d6a 007760 branch memcpy -: 007762 g24_send_abort_packet: -0x2d6b 007763 call g24_set1_mem_abort_pac -0x2d6c 007765 call g24_set0_mem_rf_hop_ch -0x2d6d 007767 call g24_power_ctrl_reinit -0x2d6e 007768 call g24_transmit_rf_ctrl_clear -0x2d6f 007769 store 1 ,mem_24g_common_temp -0x2d70 007770 call g24_put_data_in_buff_pre -0x2d71 007771 call g24_fetch_mem_data_type -0x2d72 007773 set1 bit_abort ,pdata -0x2d73 007774 call g24_store_mem_data_type -0x2d74 007776 call g24_transmit_prep -0x2d75 007777 call g24_txdata_enable_tx -0x2d76 007778 branch g24_transmit_start -: 007780 g24_put_data_in_buff_pre: -0x2d77 007781 store 1 ,mem_24g_common_temp + 1 -0x2d78 007782 call g24_fetch_mem_device_addr -0x2d79 007784 store 4 ,mem_24g_common_temp + 2 -0x2d7a 007785 arg 6 ,temp -0x2d7b 007786 arg mem_24g_common_temp ,rega -0x2d7c 007787 branch g24_put_data_in_buff -: 007789 g24_enter_lpm: -0x2d7d 007790 add regc ,offset_24g_abort_pac ,rega -0x2d7e 007791 ifetch 1 ,rega -0x2d7f 007793 branch g24_send_abort_packet ,blank -: 007794 g24_enter_lpm_prepare: -0x2d80 007796 add regc ,offset_24g_cb_lpm_prepare ,rega -0x2d81 007797 ifetch 2 ,rega -0x2d82 007799 branch callback_func -: 007801 g24_lpm_long_sleep: -0x2d83 007802 call g24_head_ptr2regc -0x2d84 007804 call lpo_calibration -0x2d85 007805 fetch 3 ,mem_clks_per_lpo -0x2d86 007806 rtn blank -0x2d87 007807 add regc ,offset_24g_cb_lpm_before ,temp -0x2d88 007808 ifetch 2 ,temp -0x2d89 007810 call callback_func -0x2d8a 007811 add regc ,offset_24g_enter_hibernate ,temp -0x2d8b 007812 ifetch 8 ,temp -: 007813 g24_lpm_long_sleep2: -0x2d8c 007814 call clk2lpo -0x2d8d 007815 storet 4 ,mem_sleep_counter -0x2d8e 007816 branch lpm_sleep -: 007818 g24_transmit_packet: -0x2d8f 007819 call g24_head_ptr2regc -0x2d90 007820 add regc ,offset_24g_retry ,contw -0x2d91 007821 call g24_mem_set0 -: 007823 g24_transmit_loop: -0x2d92 007824 call g24_transmit_receive_ack -0x2d93 007825 nbranch g24_retransmit ,sync -0x2d94 007826 nbranch g24_retransmit ,user3 -0x2d95 007827 call g24_ackpayload_parse -0x2d96 007828 call g24_power_ctrl_ack_incrs -: 007829 g24_transmit_next_packet: -0x2d97 007830 call g24_head_ptr2regc -0x2d98 007831 add regc ,offset_24g_pid ,rega -0x2d99 007832 ifetch 1 ,rega -0x2d9a 007834 increase 1 ,pdata -0x2d9b 007835 call g24_store_mem_pid -0x2d9c 007837 call g24_fetch_mem_pairing_sm -0x2d9d 007839 bne state_24g_pairing_success ,g24_paring_mode -0x2d9e 007840 call g24_transmit_succ_rf_config -: 007841 g24_transmit_abandon: -0x2d9f 007842 setarg 0 -0x2da0 007843 add regc ,offset_24g_txfail_cnt ,contw -0x2da1 007844 istore 2 ,contw -0x2da2 007848 setarg ensure_off_24g -0x2da3 007849 branch g24_store_mem_ensure -: 007852 g24_transmit_receive_ack: -0x2da4 007853 disable user3 -0x2da5 007854 call g24_transmit -0x2da6 007855 call g24_head_ptr2regc -0x2da7 007856 add regc ,offset_24g_no_ack ,rega -0x2da8 007857 ifetch 1 ,rega -0x2da9 007859 beq no_ack_24g ,g24_transmit_no_ack -0x2daa 007860 call g24_receive_packet -0x2dab 007861 branch g24_end_of_packet -: 007862 g24_transmit_no_ack: -0x2dac 007863 call g24_end_of_packet -0x2dad 007864 branch g24_transmit_next_packet -: 007867 g24_retransmit: -0x2dae 007868 bpatch patch16_5 ,mem_patch16 -0x2daf 007869 add regc ,offset_24g_get_ack_fail ,rega -0x2db0 007870 ifetch 1 ,rega -0x2db1 007872 increase 1 ,pdata -0x2db2 007873 add regc ,offset_24g_get_ack_fail ,contw -0x2db3 007874 istore 1 ,contw -0x2db4 007876 call g24_fetch_mem_pairing_sm -0x2db5 007878 bne state_24g_pairing_success ,g24_tx_paring_retry -0x2db6 007879 add regc ,offset_24g_retry ,rega -0x2db7 007880 ifetcht 1 ,rega -0x2db8 007882 increase 1 ,temp -0x2db9 007883 add regc ,offset_24g_retry ,contw -0x2dba 007884 istoret 1 ,contw -0x2dbb 007886 add regc ,offset_24g_max_retry ,rega -0x2dbc 007887 ifetch 1 ,rega -0x2dbd 007889 isub temp ,pdata -0x2dbe 007890 nbranch g24_transmit_loop ,blank -0x2dbf 007891 bpatch patch16_6 ,mem_patch16 -0x2dc0 007892 call g24_fetch_mem_rf_work_stage -0x2dc1 007894 beq 3 ,g24_transmit_pac_fail_hop_stage3 -0x2dc2 007895 add regc ,offset_24g_hop_pac_retry ,rega -0x2dc3 007896 ifetch 1 ,rega -0x2dc4 007898 increase 1 ,pdata -0x2dc5 007899 add regc ,offset_24g_hop_pac_retry ,contw -0x2dc6 007900 istore 1 ,contw -0x2dc7 007902 beq 2 ,g24_transmit_hop_pac_fail -0x2dc8 007903 call g24_hop_ch_enable -0x2dc9 007904 setarg 1 -0x2dca 007905 call g24_store_mem_max_retry -0x2dcb 007907 branch g24_transmit_packet -: 007909 g24_tx_paring_retry: -0x2dcc 007910 add regc ,offset_24g_get_ack_fail ,rega -0x2dcd 007911 ifetch 1 ,rega -0x2dce 007913 rtnne 0xff -0x2dcf 007914 add regc ,offset_24g_get_ack_fail ,contw -0x2dd0 007915 call g24_mem_set0 -0x2dd1 007917 branch g24_stop_24g_mode -: 007919 g24_tx_attempt_fail: -0x2dd2 007920 add regc ,offset_24g_txfail_cnt ,contw -0x2dd3 007921 call g24_mem_set0 -: 007923 g24_stop_24g_mode: -0x2dd4 007924 jam bt_evt_24g_attempt_fail ,mem_fifo_temp -0x2dd5 007925 branch ui_ipc_send_event -: 007927 g24_ackpayload_parse: -0x2dd6 007928 call g24_read_len_pid_crc -0x2dd7 007929 add regc ,offset_24g_rxdata_length ,rega -0x2dd8 007930 ifetch 1 ,rega -0x2dd9 007932 rtn blank -0x2dda 007933 iforce loopcnt -0x2ddb 007934 add regc ,offset_24g_rxbuf_add2 ,contr -0x2ddc 007936 add regc ,offset_24g_rxpayload ,contw -0x2ddd 007938 branch memcpy -: 007941 g24_read_len_pid_crc: -0x2dde 007943 call g24_fetch_mem_rxbuf_add1 -0x2ddf 007945 rshift3 pdata ,pdata -0x2de0 007946 add regc ,offset_24g_rxdata_length ,contw -0x2de1 007947 istore 1 ,contw -0x2de2 007950 increase 1 ,pdata -0x2de3 007951 add regc ,offset_24g_rxbuf_add1 ,contr -0x2de4 007953 iadd contr ,contr -0x2de5 007954 ifetch 3 ,contr -0x2de6 007955 add regc ,offset_24g_sta_crc ,contw -0x2de7 007956 istore 3 ,contw -0x2de8 007959 call g24_fetch_mem_rxbuf_add1 -0x2de9 007961 rshift pdata ,pdata -0x2dea 007962 and pdata ,0x03 ,pdata -0x2deb 007963 add regc ,offset_24g_sta_pid ,contw -0x2dec 007964 istore 1 ,contw -0x2ded 007966 rtn -: 007968 g24_prep: -0x2dee 007969 disable enable_crc -0x2def 007970 disable enable_white -0x2df0 007971 setarg 0x555555 -0x2df1 007972 iforce crc24_init -0x2df2 007973 rtn -: 007975 g24_set_freq_tx: -0x2df3 007976 call set_sync_on -0x2df4 007977 add regc ,offset_24g_ch ,rega -0x2df5 007978 ifetcht 1 ,rega -0x2df6 007980 branch set_freq_tx -: 007982 g24_transmit: -0x2df7 007983 call g24_prep -0x2df8 007984 call g24_set_freq_tx -0x2df9 007985 set1 txgfsk ,radio_ctrl -0x2dfa 007986 enable encode_fec0 -0x2dfb 007987 enable is_tx -0x2dfc 007988 disable is_rx -0x2dfd 007989 call le_enable -0x2dfe 007990 call g24_fetch_mem_addr -0x2dff 007992 iforce access -0x2e00 007993 inject mod ,32 -0x2e01 007994 enable enable_crc -0x2e02 007995 add regc ,offset_24g_txlen ,rega -0x2e03 007996 ifetch 1 ,rega -0x2e04 007998 iforce loopcnt -0x2e05 007999 add regc ,offset_24g_txpayload ,contr -: 008001 g24tr_loop: -0x2e06 008002 ifetch 1 ,contr -0x2e07 008003 inject mod ,8 -0x2e08 008004 loop g24tr_loop -0x2e09 008005 enable enable_parity -0x2e0a 008006 inject mod ,24 -0x2e0b 008007 disable enable_parity -0x2e0c 008008 until null ,tx_clear -0x2e0d 008009 bpatch patch16_7 ,mem_patch16 -0x2e0e 008010 nop 100 -0x2e0f 008011 disable encode_fec0 -0x2e10 008012 rtn -: 008014 g24_receive_packet: -0x2e11 008015 disable user3 -0x2e12 008016 force 0 ,radio_ctrl -0x2e13 008017 add regc ,offset_24g_ch ,rega -0x2e14 008018 ifetcht 1 ,rega -0x2e15 008020 call set_freq_rx -0x2e16 008021 call rf_rx_enable -: 008022 g24_receive_rxon: -0x2e17 008023 call g24_prep -0x2e18 008024 enable decode_fec0 -0x2e19 008025 enable is_rx -0x2e1a 008026 disable is_tx -0x2e1b 008027 call le_enable -0x2e1c 008028 call g24_fetch_mem_addr -0x2e1d 008030 iforce access -0x2e1e 008031 enable swfine -0x2e1f 008032 add regc ,offset_24g_rx_window ,rega -0x2e20 008033 ifetch 2 ,rega -0x2e21 008035 iforce stop_watch -0x2e22 008036 correlate null ,timeout -0x2e23 008037 nbranch g24_sync_timeout ,sync -0x2e24 008038 enable enable_crc -0x2e25 008039 parse demod ,bucket ,8 -0x2e26 008040 rshift3 pwindow ,pdata -0x2e27 008041 add regc ,offset_24g_rxbuf ,contw -0x2e28 008042 istore 1 ,contw -0x2e29 008044 add regc ,offset_24g_mode ,rega -0x2e2a 008045 ifetch 1 ,rega -0x2e2b 008047 beq rx_24g ,g24_receive_skip -0x2e2c 008048 bpatch patch17_0 ,mem_patch17 -0x2e2d 008049 add regc ,offset_24g_rxbuf ,rega -0x2e2e 008050 ifetch 1 ,rega -0x2e2f 008052 add regc ,offset_24g_data_type ,rega -0x2e30 008053 ifetcht 1 ,rega -0x2e31 008055 icompare bits_data ,temp -0x2e32 008056 nbranch g24_end_of_packet ,true -: 008057 g24_receive_skip: -0x2e33 008058 parse demod ,bucket ,8 -0x2e34 008059 rshift3 pwindow ,pdata -0x2e35 008060 istore 1 ,contw -0x2e36 008061 rshift3 pdata ,pdata -0x2e37 008062 and pdata ,0x1f ,loopcnt -0x2e38 008063 branch g24rx_nopayload ,zero -: 008064 g24rx_loop: -0x2e39 008065 parse demod ,bucket ,8 -0x2e3a 008066 rshift3 pwindow ,pdata -0x2e3b 008067 istore 1 ,contw -0x2e3c 008068 loop g24rx_loop -: 008069 g24rx_nopayload: -0x2e3d 008070 parse demod ,bucket ,24 -0x2e3e 008071 rshift32 pdata ,pdata -0x2e3f 008072 rshift16 pdata ,pdata -0x2e40 008073 istore 3 ,contw -0x2e41 008074 branch g24_end_of_packet ,crc_failed -0x2e42 008075 enable user3 -0x2e43 008076 disable decode_fec0 -0x2e44 008077 rtn -: 008080 g24_end_of_packet: -0x2e45 008081 disable encode_fec0 -0x2e46 008082 disable decode_fec0 -0x2e47 008083 disable enable_crc -0x2e48 008084 disable enable_white -0x2e49 008085 branch shutdown_radio ,is_rx -0x2e4a 008086 until null ,tx_clear -0x2e4b 008087 nop 100 -0x2e4c 008088 branch shutdown_radio -: 008090 g24_sync_timeout: -0x2e4d 008091 call rssi_noise -0x2e4e 008092 branch g24_end_of_packet -: 008094 rssi_noise: -0x2e4f 008095 call save_rssi -0x2e50 008096 rtn blank -0x2e51 008097 add regc ,offset_rssi_noise_index ,rega -0x2e52 008098 ifetcht 1 ,rega -0x2e53 008100 arg mem_rssi_noise_buffer ,rega -0x2e54 008102 call rssi_noise_store -0x2e55 008103 add regc ,offset_rssi_noise_index ,contw -: 008105 g24_contw_istoret_1byte: -0x2e56 008106 istoret 1 ,contw -0x2e57 008107 rtn -: 008109 rssi_noise_store: -0x2e58 008110 arg rssi_buf_len_noise ,regb -0x2e59 008111 branch rssi_store -: 008129 rssi_store: -0x2e5a 008130 copy rega ,pdata -0x2e5b 008131 iadd temp ,contw -0x2e5c 008132 fetch 1 ,mem_rssi -0x2e5d 008133 istore 1 ,contw -0x2e5e 008134 increase 1 ,temp -0x2e5f 008135 copy regb ,pdata -0x2e60 008136 iand_into temp -0x2e61 008137 rtn -: 008139 rssi_average: -0x2e62 008140 arg 0 ,temp -0x2e63 008141 copy rega ,contr -: 008142 rssi_average_loop: -0x2e64 008143 ifetch 1 ,contr -0x2e65 008144 iadd temp ,temp -0x2e66 008145 loop rssi_average_loop -0x2e67 008146 rshift8 temp ,temp -0x2e68 008147 rtn -: 008149 g24_power_ctrl_init: -0x2e69 008150 call g24_head_ptr2regc -0x2e6a 008151 call g24_power_ctrl_incrs_level1 -0x2e6b 008152 setarg 1 -0x2e6c 008153 call g24_store_mem_power_ctrl_level -: 008155 g24_power_ctrl_reinit: -0x2e6d 008156 setarg 0 -0x2e6e 008157 call g24_store_mem_power_ctrl_pac -0x2e6f 008159 istore 1 ,contw -0x2e70 008161 rtn -: 008163 g24_power_ctrl_pac_incrs: -0x2e71 008164 call g24_fetch_mem_power_ctrl_pac -0x2e72 008166 increase 1 ,pdata -: 008167 g24_store_mem_power_ctrl_pac: -0x2e73 008169 add regc ,offset_power_ctrl_packet_cnt ,contw -0x2e74 008170 branch g24_contw_istore_1byte -: 008172 g24_power_ctrl_ack_incrs: -0x2e75 008175 add regc ,offset_power_ctrl_ack_cnt ,rega -0x2e76 008176 ifetch 1 ,rega -0x2e77 008177 increase 1 ,pdata -0x2e78 008178 add regc ,offset_power_ctrl_ack_cnt ,contw -0x2e79 008179 branch g24_contw_istore_1byte -: 008181 g24_power_ctrl: -0x2e7a 008182 bpatch patch17_1 ,mem_patch17 -0x2e7b 008183 call g24_fetch_mem_power_ctrl_pac -0x2e7c 008185 sub pdata ,power_ctrl_max_packet_cnt ,null -0x2e7d 008186 rtn positive -0x2e7e 008187 add regc ,offset_power_ctrl_ack_cnt ,rega -0x2e7f 008188 ifetcht 1 ,rega -0x2e80 008190 isub temp ,temp -0x2e81 008191 call g24_power_ctrl_reinit -0x2e82 008192 setarg offset_power_ctrl_threshold_up -0x2e83 008193 iadd regc ,rega -0x2e84 008194 ifetch 1 ,rega -0x2e85 008196 isub temp ,null -0x2e86 008197 nbranch g24_power_ctrl_incrs ,positive -0x2e87 008198 setarg offset_power_ctrl_threshold_down -0x2e88 008199 iadd regc ,rega -0x2e89 008200 ifetch 1 ,rega -0x2e8a 008202 isub temp ,null -0x2e8b 008203 branch g24_power_ctrl_decrs ,positive -0x2e8c 008204 rtn -: 008206 g24_power_ctrl_incrs: -0x2e8d 008207 add regc ,offset_power_ctrl_level ,rega -0x2e8e 008208 ifetch 1 ,rega -0x2e8f 008210 beq 2 ,g24_power_ctrl_incrs_level2 -0x2e90 008211 increase 1 ,pdata -0x2e91 008212 call g24_store_mem_power_ctrl_level -0x2e92 008214 beq 1 ,g24_power_ctrl_incrs_level1 -: 008215 g24_power_ctrl_incrs_level2: -0x2e93 008216 setarg power_ctrl_losspac_thresh_up2 -0x2e94 008217 call g24_store_mem_power_ctrl_threshold_up -0x2e95 008219 setarg power_ctrl_losspac_thresh_down2 -0x2e96 008220 call g24_store_mem_power_ctrl_threshold_down -0x2e97 008223 add regc ,offset_power_ctrl_txpwr_level2 ,rega -0x2e98 008225 branch g24_ifetch_rega_store_mem_txpower -: 008227 g24_power_ctrl_decrs: -0x2e99 008228 add regc ,offset_power_ctrl_level ,rega -0x2e9a 008229 ifetch 1 ,rega -0x2e9b 008231 beq 0 ,g24_power_ctrl_decrs_level0 -0x2e9c 008232 increase -1 ,pdata -0x2e9d 008233 call g24_store_mem_power_ctrl_level -0x2e9e 008235 beq 0 ,g24_power_ctrl_decrs_level0 -: 008236 g24_power_ctrl_decrs_level1: -: 008239 g24_power_ctrl_incrs_level1: -0x2e9f 008240 setarg power_ctrl_losspac_thresh_up1 -0x2ea0 008241 call g24_store_mem_power_ctrl_threshold_up -0x2ea1 008243 setarg power_ctrl_losspac_thresh_down1 -0x2ea2 008244 call g24_store_mem_power_ctrl_threshold_down -0x2ea3 008247 setarg offset_power_ctrl_txpwr_level1 -: 008248 g24_iadd_offset_mem_txpower: -0x2ea4 008249 iadd regc ,rega -: 008250 g24_ifetch_rega_store_mem_txpower: -0x2ea5 008251 ifetch 1 ,rega -0x2ea6 008253 branch g24_store_mem_txpower -: 008255 g24_power_ctrl_decrs_level0: -0x2ea7 008258 setarg power_ctrl_losspac_thresh_up0 -0x2ea8 008259 call g24_store_mem_power_ctrl_threshold_up -0x2ea9 008261 setarg power_ctrl_losspac_thresh_down0 -0x2eaa 008262 call g24_store_mem_power_ctrl_threshold_down -0x2eab 008265 setarg offset_power_ctrl_txpwr_level0 -0x2eac 008267 branch g24_iadd_offset_mem_txpower -: 008281 g24_start_pairing_sm1: -0x2ead 008282 set1 mark_24g ,mark -0x2eae 008283 call g24_pair_init -: 008284 g24_set_pairing_sm_1: -0x2eaf 008286 setarg state_24g_pairing_1 -0x2eb0 008287 branch g24_store_mem_pairing_sm -: 008289 g24_pairing_sm: -0x2eb1 008290 add regc ,offset_24g_ensure ,rega -0x2eb2 008291 ifetch 1 ,rega -0x2eb3 008293 beq ensure_on_24g ,enable_user -0x2eb4 008294 call g24_fetch_mem_pairing_sm -0x2eb5 008296 beq state_24g_pairing_1 ,g24_pairing_sm_1 -0x2eb6 008297 beq state_24g_pairing_2 ,g24_pairing_sm_2 -0x2eb7 008298 beq state_24g_pairing_3 ,g24_pairing_sm_3 -0x2eb8 008299 branch assert -: 008301 g24_pairing_sm_1: -0x2eb9 008302 setarg state_24g_pairing_1_waiting_ack -0x2eba 008303 call g24_store_mem_pairing_sm -0x2ebb 008305 jam 0xaa ,mem_24g_common_temp -0x2ebc 008306 branch g24_pairing_sm_common -: 008307 g24_pairing_sm_2: -0x2ebd 008308 setarg state_24g_pairing_2_waiting_ack -0x2ebe 008309 call g24_store_mem_pairing_sm -0x2ebf 008311 jam 0x55 ,mem_24g_common_temp -0x2ec0 008312 branch g24_pairing_sm_common -: 008313 g24_pairing_sm_3: -0x2ec1 008314 setarg state_24g_pairing_3_waiting_ack -0x2ec2 008315 call g24_store_mem_pairing_sm -0x2ec3 008317 jam 0x22 ,mem_24g_common_temp -: 008318 g24_pairing_sm_common: -0x2ec4 008319 call g24_fetch_mem_data_type -0x2ec5 008321 and_into bits_data ,pdata -0x2ec6 008322 store 1 ,mem_24g_common_temp + 1 -0x2ec7 008323 call g24_fetch_mem_device_addr -0x2ec8 008325 store 4 ,mem_24g_common_temp + 2 -: 008326 g24_put_pairing_data_in_buff: -0x2ec9 008327 jam 0 ,mem_24g_common_temp + 6 -0x2eca 008328 arg mem_24g_common_temp ,rega -0x2ecb 008329 arg 7 ,temp -0x2ecc 008330 call g24_put_data_in_buff -0x2ecd 008331 call g24_transmit_prep -0x2ece 008332 call g24_txdata_enable_tx -0x2ecf 008333 branch enable_user -: 008335 g24_paring_mode: -0x2ed0 008336 call g24_fetch_mem_pairing_sm -0x2ed1 008338 rtneq state_24g_pairing_success -0x2ed2 008339 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack -0x2ed3 008340 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack -0x2ed4 008341 beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack -0x2ed5 008342 rtn -: 008344 g24_pairing_sm_1_waiting_ack: -0x2ed6 008345 setarg state_24g_pairing_2 -0x2ed7 008346 call g24_store_mem_pairing_sm -0x2ed8 008348 branch g24_transmit_abandon -: 008349 g24_pairing_sm_2_waiting_ack: -0x2ed9 008350 setarg state_24g_pairing_3 -0x2eda 008351 call g24_store_mem_pairing_sm -0x2edb 008353 branch g24_transmit_abandon -: 008354 g24_pairing_sm_3_waiting_ack: -0x2edc 008355 setarg state_24g_pairing_success -0x2edd 008356 call g24_store_mem_pairing_sm -0x2ede 008358 jam bt_evt_24g_pairing_complete ,mem_fifo_temp -0x2edf 008359 call ui_ipc_send_event -0x2ee0 008360 add regc ,offset_24g_rxpayload_add2 ,rega -0x2ee1 008361 ifetch 4 ,rega -0x2ee2 008363 call g24_store_mem_addr -0x2ee3 008365 branch g24_transmit_abandon -: 008367 g24_auto_pair_start: -0x2ee4 008368 set0 mark_24g ,mark -0x2ee5 008369 call g24_auto_pair_set_device_info -0x2ee6 008370 call g24_tx_attemp_data_prep -: 008371 g24_auto_pair_restart: -0x2ee7 008372 call g24_set0_mem_check_dongle_times -: 008373 g24_auto_pair_start_loop: -0x2ee8 008374 nop 2000 -0x2ee9 008375 call g24_fetch_mem_check_dongle_times -0x2eea 008376 beq 0xff ,g24_stop_24g_mode -0x2eeb 008377 call g24_transmit_receive_ack -0x2eec 008378 nbranch g24_auto_pair_retry ,sync -0x2eed 008379 nbranch g24_auto_pair_retry ,user3 -0x2eee 008380 call g24_ackpayload_parse -0x2eef 008381 call g24_head_ptr2regc -0x2ef0 008382 add regc ,offset_24g_paring_addr ,rega -0x2ef1 008383 ifetcht 4 ,rega -0x2ef2 008384 call g24_fetch_mem_addr_isub_temp -0x2ef3 008385 branch g24_start_pairing_sm1 ,zero -0x2ef4 008386 call g24_head_ptr2regc -0x2ef5 008387 add regc ,offset_24g_rxpayload_add2 ,rega -0x2ef6 008388 ifetch 4 ,rega -0x2ef7 008389 beq 0 ,g24_auto_pair_restart -0x2ef8 008390 call g24_store_mem_addr -0x2ef9 008391 branch g24_tx_attemp_dongle_succ -: 008393 g24_auto_pair_retry: -0x2efa 008394 call g24_fetch_mem_check_dongle_times -0x2efb 008395 increase 1 ,pdata -0x2efc 008396 call g24_store_mem_check_dongle_times -0x2efd 008398 call g24_fetch_mem_auto_paring_switch -0x2efe 008399 increase 1 ,pdata -0x2eff 008400 and_into 1 ,pdata -0x2f00 008401 call g24_store_mem_auto_paring_switch -0x2f01 008402 beq 0 ,g24_auto_pair_device_attemp -0x2f02 008403 beq 1 ,g24_auto_pair_pair_attemp -0x2f03 008404 rtn -: 008406 g24_fetch_mem_auto_paring_switch: -0x2f04 008407 setarg offset_24g_auto_pair_switch -0x2f05 008408 branch g24_set_rega_ifetch_1byte -: 008409 g24_store_mem_auto_paring_switch: -0x2f06 008410 arg offset_24g_auto_pair_switch ,rega -0x2f07 008411 branch g24_set_contw_with_regb_store_1byte -: 008413 g24_auto_pair_set_device_info: -0x2f08 008414 call g24_store_mem_tx_power -0x2f09 008415 call g24_fetch_mem_device_addr -0x2f0a 008416 call g24_store_mem_addr -0x2f0b 008417 branch g24_ch -: 008419 g24_auto_pair_device_attemp: -0x2f0c 008420 call g24_auto_pair_set_device_info -0x2f0d 008421 branch g24_auto_pair_start_loop -: 008423 g24_auto_pair_pair_attemp: -0x2f0e 008424 call g24_pair_init -0x2f0f 008425 branch g24_auto_pair_start_loop -: 008428 g24_start_24g_mode: -0x2f10 008429 set0 mark_24g ,mark -0x2f11 008430 call g24_ch -0x2f12 008431 call g24_fetch_mem_pairing_sm -0x2f13 008433 rtnne state_24g_pairing_success -0x2f14 008434 call g24_tx_attemp_data_prep -0x2f15 008435 call g24_set0_mem_check_dongle_times -: 008437 g24_tx_attemp_dongle_loop: -0x2f16 008438 nop 2000 -0x2f17 008439 call g24_fetch_mem_check_dongle_times -0x2f18 008441 beq 0xff ,g24_stop_24g_mode -0x2f19 008442 call g24_transmit_receive_ack -0x2f1a 008443 nbranch g24_attemp_txdata_retry ,sync -0x2f1b 008444 nbranch g24_attemp_txdata_retry ,user3 -: 008445 g24_tx_attemp_dongle_succ: -0x2f1c 008446 set1 mark_24g ,mark -0x2f1d 008447 call g24_set0_mem_check_dongle_times -0x2f1e 008448 setarg state_24g_pairing_success -0x2f1f 008449 call g24_store_mem_pairing_sm -: 008451 g24_app_tx_attempt_success: -0x2f20 008452 jam bt_evt_24g_attempt_success ,mem_fifo_temp -0x2f21 008453 branch ui_ipc_send_event -: 008455 g24_tx_attemp_data_prep: -0x2f22 008456 set1 mark_24g_conext ,mark -0x2f23 008457 jam 0xff ,mem_24g_common_temp -0x2f24 008458 call g24_fetch_mem_data_type -0x2f25 008460 call g24_put_data_in_buff_pre -0x2f26 008461 branch g24_transmit_prep -: 008463 g24_attemp_txdata_retry: -0x2f27 008464 call g24_fetch_mem_check_dongle_times -0x2f28 008466 increase 1 ,pdata -0x2f29 008467 call g24_store_mem_check_dongle_times -0x2f2a 008469 call g24_ch -0x2f2b 008470 branch g24_tx_attemp_dongle_loop -: 008472 g24_check_51cmd_start_24g: -0x2f2c 008473 call g24_store_mem_tx_power -0x2f2d 008476 setarg state_24g_pairing_success -0x2f2e 008477 call g24_store_mem_pairing_sm -0x2f2f 008479 branch g24_start_24g_mode -: 008488 dongle_init: -0x2f30 008489 bpatch patch17_2 ,mem_patch17 -0x2f31 008490 call g24_head_ptr2regc -0x2f32 008491 setarg dongle_rxdata_type1 -0x2f33 008492 add regc ,offset_24g_cb_rxdata_type1 ,contw -0x2f34 008493 istore 2 ,contw -0x2f35 008495 call g24_receive_init -0x2f36 008496 call usb_init -0x2f37 008497 call g24_fetch_mem_pair_mode -0x2f38 008499 bpatch patch17_3 ,mem_patch17 -0x2f39 008500 beq 0x00 ,dongle_auto_bind -0x2f3a 008501 beq 0x01 ,dongle_pc_bind -0x2f3b 008502 beq 0x0f ,dongle_all_powerful -0x2f3c 008503 branch assert -: 008505 g24_receive_init: -0x2f3d 008506 call g24_store_mem_tx_power_temp -0x2f3e 008507 arg 0x80 ,loopcnt -0x2f3f 008508 arg mem_rssi_noise_buffer ,contw -0x2f40 008509 branch memset0 -: 008511 dongle_all_powerful: -0x2f41 008512 call dongle_check_mode -: 008513 dongle_all_powerful_loop: -0x2f42 008514 call g24_dongle_work_mode -0x2f43 008515 call usb_isr -0x2f44 008516 branch dongle_all_powerful_loop -: 008518 dongle_pc_bind: -0x2f45 008519 bpatch patch17_4 ,mem_patch17 -0x2f46 008520 call dongle_check_mode -: 008521 dongle_pc_bind_loop: -0x2f47 008522 call g24_dongle_work_mode -0x2f48 008523 call g24_dongle_bind_mode -0x2f49 008524 call usb_isr -0x2f4a 008525 call dongle_usb_dispatch -0x2f4b 008526 branch dongle_pc_bind_loop -: 008528 dongle_check_mode: -0x2f4c 008532 call g24_set_work_mem_dongle_work_mode -0x2f4d 008533 call g24_set0_mem_dongle_mode_init -0x2f4e 008534 branch g24_set0_mem_ackpayload_enable -: 008536 g24_dongle_work_mode: -0x2f4f 008537 call g24_fetch_mem_dongle_work_mode -0x2f50 008539 rtnne dongle_work -: 008540 g24_dongle_work_mode_start: -0x2f51 008541 call g24_dongle_work_init -0x2f52 008542 call g24_ch_process -0x2f53 008543 call g24_receive_packet_start -0x2f54 008544 branch g24_blank_data_process -: 008546 g24_dongle_work_init: -0x2f55 008547 call g24_fetch_mem_dongle_mode_init -0x2f56 008549 rtnbit1 dongle_work -0x2f57 008550 set1 dongle_work ,pdata -0x2f58 008551 call g24_store_mem_dongle_mode_init -0x2f59 008553 call g24_store_mem_tx_power -0x2f5a 008556 call g24_set0_mem_ackpayload_enable -0x2f5b 008558 jam 0 ,mem_usb_tx_enable -0x2f5c 008559 call g24_set1_mem_abort_pac -0x2f5d 008561 call g24_dongle_init -: 008562 g24_rx_interrupt_clear: -0x2f5e 008563 add regc ,offset_24g_rxbuf ,contw -0x2f5f 008565 arg 66 ,loopcnt -0x2f60 008566 branch clear_mem -: 008568 g24_dongle_init: -0x2f61 008569 call g24_set0_mem_pid -0x2f62 008571 call g24_fetch_mem_rx_addr -0x2f63 008573 call g24_store_mem_addr -0x2f64 008575 branch g24_ch -: 008577 g24_ch_process: -0x2f65 008578 bpatch patch17_5 ,mem_patch17 -0x2f66 008579 call g24_fetch_mem_abort_pac -0x2f67 008581 beq 1 ,g24_noise_rssi -0x2f68 008582 call g24_fetch_mem_hop_pac -0x2f69 008584 beq 1 ,g24_ch -0x2f6a 008585 setarg offset_24g_hop_btclk -0x2f6b 008586 iadd regc ,rega -0x2f6c 008587 ifetcht 4 ,rega -0x2f6d 008589 copy clkn_bt ,pdata -0x2f6e 008590 isub temp ,null -0x2f6f 008591 ncall g24_timer_timeout ,positive -0x2f70 008592 copy pdata ,regb -0x2f71 008593 setarg offset_24g_hop_btclk -0x2f72 008594 iadd regc ,rega -0x2f73 008595 ifetch 4 ,rega -0x2f74 008596 copy pdata ,temp -0x2f75 008598 setarg offset_24g_hop_interval -0x2f76 008599 iadd regc ,rega -0x2f77 008600 copy temp ,pdata -0x2f78 008601 ifetcht 1 ,rega -0x2f79 008603 iadd temp ,temp -0x2f7a 008604 copy regb ,pdata -0x2f7b 008605 isub temp ,null -0x2f7c 008606 nrtn positive -0x2f7d 008607 set0 28 ,pdata -0x2f7e 008608 setarg offset_24g_hop_btclk -0x2f7f 008609 iadd regc ,contw -0x2f80 008610 istore 4 ,contw -: 008612 g24_ch_update: -0x2f81 008613 call g24_ch -0x2f82 008614 call g24_fetch_mem_rf_laststa -0x2f83 008616 increase 1 ,pdata -0x2f84 008617 call g24_store_mem_rf_laststa -0x2f85 008619 rtnne 2 -0x2f86 008620 call g24_set0_mem_rf_laststa -0x2f87 008624 branch g24_set1_mem_abort_pac -: 008626 g24_ch_timer_reinit: -0x2f88 008627 copy clkn_bt ,pdata -0x2f89 008628 arg offset_24g_hop_btclk ,rega -0x2f8a 008629 call g24_set_contw_with_temp -0x2f8b 008630 istore 4 ,contw -0x2f8c 008634 branch g24_set0_mem_rf_laststa -: 008636 g24_noise_rssi: -0x2f8d 008637 arg mem_rssi_noise_buffer ,rega -0x2f8e 008638 call g24_noise_rssi_average -0x2f8f 008639 add regc ,offset_rssi_noise_avg ,contw -0x2f90 008640 istoret 1 ,contw -0x2f91 008642 sub temp ,rssi_thresh_noise ,null -0x2f92 008643 nrtn positive -0x2f93 008644 branch g24_ch -: 008646 g24_noise_rssi_average: -0x2f94 008647 arg rssi_buf_len_noise + 1 ,loopcnt -0x2f95 008648 branch rssi_average -: 008650 g24_blank_data_process: -0x2f96 008651 call g24_ms_blank_data -0x2f97 008652 call g24_kb_blank_data -0x2f98 008653 branch g24_kb_mul_blank_data -: 008655 g24_ms_blank_data: -0x2f99 008656 setarg offset_24g_ms_blank_data_enable -0x2f9a 008657 call g24_set_rega_ifetch_1byte -0x2f9b 008659 rtn blank -0x2f9c 008660 arg timer_ms_blank ,queue -0x2f9d 008661 call timer_check -0x2f9e 008662 nrtn blank -0x2f9f 008663 call g24_set0_mem_ms_blank_data_enable -: 008665 g24_ms_blank_data_2usb: -0x2fa0 008666 setarg ms_report_id -0x2fa1 008667 store 1 ,mem_usb_mouse_data -0x2fa2 008668 setarg 0 -0x2fa3 008669 istore 7 ,contw -0x2fa4 008670 branch g24_data_type1_usbtx_enable -: 008672 g24_kb_blank_data: -0x2fa5 008673 setarg offset_24g_kb_blank_data_enable -0x2fa6 008674 call g24_set_rega_ifetch_1byte -0x2fa7 008676 rtn blank -0x2fa8 008677 arg timer_kb_blank ,queue -0x2fa9 008678 call timer_check -0x2faa 008679 nrtn blank -0x2fab 008680 call g24_set0_mem_kb_blank_data_enable -: 008682 g24_kb_blank_data_2usb: -0x2fac 008683 arg mem_usb_kb_data ,contw -0x2fad 008684 arg 2 ,loopcnt -0x2fae 008685 call memset0 -0x2faf 008686 jam kb_normal_report_id ,mem_usb_kb_data -0x2fb0 008687 branch g24_kb_data_into_ep1_fifo -: 008689 g24_kb_mul_blank_data: -0x2fb1 008690 setarg offset_24g_kb_mul_blank_data_enable -0x2fb2 008691 call g24_set_rega_ifetch_1byte -0x2fb3 008693 rtn blank -0x2fb4 008694 arg timer_kb_mul_blank ,queue -0x2fb5 008695 call timer_check -0x2fb6 008696 nrtn blank -0x2fb7 008697 call g24_set0_mem_kb_mul_blank_data_enable -: 008699 g24_kb_mul_blank_data_2usb: -0x2fb8 008700 arg mem_usb_kb_multikey ,contw -0x2fb9 008701 arg 2 ,loopcnt -0x2fba 008702 call memset0 -0x2fbb 008703 jam kb_multikey_report_id ,mem_usb_kb_multikey -0x2fbc 008704 branch g24_kb_mul_data_into_ep2_fifo -: 008706 g24_dongle_bind_mode: -0x2fbd 008707 call g24_fetch_mem_dongle_work_mode -0x2fbe 008709 rtnne dongle_bind -0x2fbf 008710 call g24_dongle_bind_init -0x2fc0 008711 branch g24_dongle_bind_data_process -: 008713 g24_dongle_bind_init: -0x2fc1 008714 call g24_fetch_mem_dongle_mode_init -0x2fc2 008716 rtnbit1 dongle_bind -0x2fc3 008717 set1 dongle_bind ,pdata -0x2fc4 008718 call g24_store_mem_dongle_mode_init -0x2fc5 008720 call g24_set1_mem_ackpayload_enable -0x2fc6 008722 call g24_pair_init -0x2fc7 008723 setarg 0 -0x2fc8 008724 arg offset_dongle_ms_bind_step ,rega -0x2fc9 008725 call g24_set_contw_with_temp -0x2fca 008727 branch g24_contw_istore_3byte -: 008729 g24_dongle_bind_data_process: -0x2fcb 008730 call g24_receive_transmit_ack -0x2fcc 008731 nbranch g24_rx_interrupt_clear ,user3 -0x2fcd 008732 add regc ,offset_24g_rxbuf ,contr -0x2fce 008733 setarg offset_24g_rxdata_temp -0x2fcf 008734 iadd regc ,contw -0x2fd0 008735 arg 8 ,loopcnt -0x2fd1 008736 call memcpy -0x2fd2 008737 setarg offset_24g_rxdata_temp_add2 -0x2fd3 008738 call g24_set_rega_ifetch_1byte -0x2fd4 008739 beq datatype_bind ,g24_dongle_bind_first_step -0x2fd5 008740 beq datatype_config ,g24_dongle_bind_second_step -0x2fd6 008741 beq datatype_ok ,g24_dongle_bind_third_step -0x2fd7 008742 beq 0xff ,g24_data_attemp -0x2fd8 008743 branch g24_rx_interrupt_clear -: 008745 g24_dongle_bind_first_step: -0x2fd9 008746 call g24_fetch_mem_rxdata_temp_add3_1byte -0x2fda 008747 beq bind_mouse ,g24_dongle_bind_first_step_mouse -0x2fdb 008748 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard -0x2fdc 008749 rtn -: 008750 g24_dongle_bind_first_step_mouse: -0x2fdd 008751 setarg 1 -0x2fde 008752 call g24_store_mem_ms_bind_step -: 008754 g24_dongle_bind_ms_payload_cfg: -0x2fdf 008755 setarg datatype_mouse -0x2fe0 008756 call g24_store_mem_bind_payload -: 008758 g24_dongle_bind_payload_cfg: -0x2fe1 008759 setarg 0x80 -0x2fe2 008760 arg offset_24g_bind_payload_add1 ,rega -0x2fe3 008761 call g24_set_contw_with_regb_store_1byte -0x2fe4 008763 call g24_fetch_mem_rx_addr -0x2fe5 008765 arg offset_24g_bind_payload_add2 ,rega -0x2fe6 008766 call g24_set_contw_with_temp -0x2fe7 008768 branch g24_contw_istore_4byte -: 008770 g24_dongle_bind_first_step_keyboard: -0x2fe8 008771 setarg 1 -0x2fe9 008772 call g24_store_mem_kb_bind_step -: 008774 g24_dongle_bind_kb_payload_cfg: -0x2fea 008775 setarg datatype_keyboard -0x2feb 008776 call g24_store_mem_bind_payload -0x2fec 008778 branch g24_dongle_bind_payload_cfg -: 008780 g24_dongle_bind_second_step: -0x2fed 008781 call g24_fetch_mem_rxdata_temp_add3_1byte -0x2fee 008782 beq bind_mouse ,g24_dongle_bind_second_step_mouse -0x2fef 008783 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard -0x2ff0 008784 rtn -: 008785 g24_dongle_bind_second_step_mouse: -0x2ff1 008786 call g24_dongle_bind_ms_payload_cfg -0x2ff2 008787 setarg offset_dongle_ms_bind_step -0x2ff3 008788 call g24_set_rega_ifetch_1byte -0x2ff4 008790 beq 1 ,g24_dongle_ms_bind_step_set2 -0x2ff5 008791 rtn -: 008792 g24_dongle_ms_bind_step_set2: -0x2ff6 008793 setarg 2 -: 008795 g24_store_mem_ms_bind_step: -0x2ff7 008796 arg offset_dongle_ms_bind_step ,rega -0x2ff8 008797 branch g24_set_contw_with_regb_store_1byte -: 008799 g24_dongle_bind_second_step_keyboard: -0x2ff9 008800 call g24_dongle_bind_kb_payload_cfg -0x2ffa 008801 setarg offset_dongle_kb_bind_step -0x2ffb 008802 call g24_set_rega_ifetch_1byte -0x2ffc 008804 beq 1 ,g24_dongle_kb_bind_step_set2 -0x2ffd 008805 rtn -: 008806 g24_dongle_kb_bind_step_set2: -0x2ffe 008807 setarg 2 -: 008809 g24_store_mem_kb_bind_step: -0x2fff 008810 arg offset_dongle_kb_bind_step ,rega -0x3000 008811 branch g24_set_contw_with_regb_store_1byte -: 008813 g24_dongle_bind_third_step: -0x3001 008814 call g24_fetch_mem_rxdata_temp_add3_1byte -0x3002 008815 beq bind_mouse ,g24_dongle_bind_third_step_mouse -0x3003 008816 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard -0x3004 008817 rtn -: 008818 g24_dongle_bind_third_step_mouse: -0x3005 008819 setarg offset_dongle_ms_bind_step -0x3006 008820 call g24_set_rega_ifetch_1byte -0x3007 008822 beq 2 ,g24_dongle_ms_bind_step_success -0x3008 008823 rtn -: 008824 g24_dongle_ms_bind_step_success: -0x3009 008825 call g24_fetch_mem_bind_device_status -0x300a 008827 or_into 0x01 ,pdata -0x300b 008828 call g24_store_mem_bind_device_status -: 008830 g24_dongle_bind_exit: -0x300c 008831 setarg 0 -0x300d 008832 setarg offset_dongle_ms_bind_step -0x300e 008833 iadd regc ,contw -0x300f 008834 istore 2 ,contw -0x3010 008835 branch g24_rx_interrupt_clear -: 008837 g24_dongle_bind_third_step_keyboard: -0x3011 008838 setarg offset_dongle_kb_bind_step -0x3012 008839 call g24_set_rega_ifetch_1byte -0x3013 008841 bne 0 ,g24_dongle_kb_bind_step_success -0x3014 008842 rtn -: 008843 g24_dongle_kb_bind_step_success: -0x3015 008844 call g24_fetch_mem_bind_device_status -0x3016 008846 or_into 0x02 ,pdata -0x3017 008847 call g24_store_mem_bind_device_status -0x3018 008849 branch g24_dongle_bind_exit -: 008852 dongle_usb_dispatch: -0x3019 008853 fetch 1 ,mem_usb0_get_set_report -0x301a 008854 rtn blank -0x301b 008855 jam 0 ,mem_usb0_get_set_report -0x301c 008856 fetch 2 ,mem_usb_setup_bvalue_temp -0x301d 008857 arg pc_set_report ,temp -0x301e 008858 isub temp ,null -0x301f 008859 nrtn zero -0x3020 008861 fetch 1 ,mem_usb0_set_report_data -0x3021 008862 rtnne pc_report_id -0x3022 008863 fetch 1 ,mem_usb0_set_report_data + 1 -0x3023 008864 bpatch patch17_6 ,mem_patch17 -0x3024 008865 beq command_mode ,dongle_dispose_cmd_mode -0x3025 008866 beq command_bind ,dongle_dispose_cmd_bind -0x3026 008867 beq command_current_project ,dongle_dispose_cmd_current_project -0x3027 008868 beq command_current_mode ,dongle_dispose_cmd_current_mode -0x3028 008869 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version -0x3029 008870 beq command_user_defined ,dongle_dispose_cmd_user_defined -: 008871 usb0_data_ready_report_set0: -0x302a 008872 jam 0 ,mem_usb0_data_ready_report -0x302b 008873 rtn -: 008874 dongle_dispose_cmd_bind: -0x302c 008875 fetch 1 ,mem_usb0_set_report_data + 2 -0x302d 008876 beq com_bind_get ,dongle_dispose_cmd_get_bind -0x302e 008877 beq com_bind_exit ,dongle_dispose_cmd_exit_bind -0x302f 008878 beq com_read_mode ,dongle_dispose_cmd_read_mode -0x3030 008879 branch usb0_data_ready_report_set0 -: 008880 dongle_dispose_cmd_get_bind: -0x3031 008881 call g24_fetch_mem_bind_device_status -0x3032 008883 store 1 ,mem_usb0_get_report_data + 1 -0x3033 008884 branch usb0_data_ready_report_set1 -: 008885 dongle_dispose_cmd_exit_bind: -0x3034 008886 call g24_set_work_mem_dongle_work_mode -0x3035 008888 call g24_set0_mem_dongle_mode_init -0x3036 008890 call g24_fetch_mem_bind_device_status -0x3037 008892 store 1 ,mem_usb0_get_report_data + 1 -0x3038 008893 branch usb0_data_ready_report_set1 -: 008895 dongle_dispose_cmd_read_mode: -: 008896 dongle_dispose_in_bind_mode: -0x3039 008897 jam command_bind ,mem_usb0_get_report_data + 1 -0x303a 008898 branch usb0_data_ready_report_set1 -: 008900 dongle_dispose_cmd_mode: -0x303b 008901 fetch 1 ,mem_usb0_set_report_data + 2 -0x303c 008902 beq com_mode_bind ,dongle_enter_bind_mode -0x303d 008904 branch usb0_data_ready_report_set0 -: 008905 dongle_enter_bind_mode: -0x303e 008908 call g24_bind_mode_enable -: 008909 usb0_data_ready_report_set1: -0x303f 008910 jam 1 ,mem_usb0_data_ready_report -0x3040 008911 rtn -: 008916 dongle_dispose_cmd_current_project: -0x3041 008917 jam product_id ,mem_usb0_get_report_data + 1 -0x3042 008918 branch usb0_data_ready_report_set1 -: 008920 dongle_dispose_cmd_current_mode: -0x3043 008921 call g24_fetch_mem_dongle_work_mode -0x3044 008923 beq dongle_work ,dongle_dispose_in_work_mode -0x3045 008924 beq dongle_bind ,dongle_dispose_in_bind_mode -0x3046 008926 rtn -: 008927 dongle_dispose_in_work_mode: -0x3047 008928 jam command_mode ,mem_usb0_get_report_data + 1 -0x3048 008929 branch usb0_data_ready_report_set1 -: 008934 dongle_dispose_cmd_current_fw_version: -0x3049 008935 jam fw_version0 ,mem_usb0_get_report_data + 1 -0x304a 008936 jam fw_version1 ,mem_usb0_get_report_data + 2 -0x304b 008937 jam fw_version2 ,mem_usb0_get_report_data + 3 -0x304c 008938 branch usb0_data_ready_report_set1 -: 008940 dongle_dispose_cmd_user_defined: -0x304d 008942 call g24_set1_mem_ackpayload_enable -0x304e 008943 fetch 1 ,mem_usb0_set_report_data + 2 -0x304f 008944 increase 2 ,pdata -0x3050 008945 copy pdata ,loopcnt -0x3051 008946 arg mem_usb0_set_report_data ,contr -0x3052 008947 setarg offset_24g_ackpayload -0x3053 008948 iadd regc ,contw -0x3054 008949 branch memcpy -: 008952 dongle_auto_bind: -0x3055 008953 bpatch patch17_7 ,mem_patch17 -0x3056 008954 call g24_mode_switch_init -: 008955 dongle_auto_bind_loop: -0x3057 008956 call g24_receive_process -0x3058 008957 call usb_isr -0x3059 008958 branch dongle_auto_bind_loop -: 008960 g24_dongle_work_mode_auto: -0x305a 008961 call g24_fetch_mem_dongle_work_mode -0x305b 008963 rtnne dongle_work -0x305c 008964 call g24_dongle_work_mode_start -0x305d 008965 branch g24_rx_nodata_process -: 008967 g24_dongle_bind_mode_auto: -0x305e 008968 call g24_fetch_mem_dongle_work_mode -0x305f 008970 rtnne dongle_bind -0x3060 008971 call g24_dongle_bind_init -0x3061 008972 call g24_dongle_bind_data_process -0x3062 008973 call g24_fetch_mem_bind_device_status -0x3063 008975 rtn blank -0x3064 008976 call g24_set0_mem_mode_switch -0x3065 008978 call dongle_check_mode -0x3066 008979 call g24_enable_nodata_timer -: 008980 g24_timer_init: -0x3067 008981 setarg 0 -0x3068 008982 add regc ,offset_24g_tx_btclk ,contw -0x3069 008984 branch g24_contw_istore_4byte -: 008986 g24_timer_check: -0x306a 008987 call disable_user -0x306b 008988 add regc ,offset_24g_tx_btclk ,rega -0x306c 008989 ifetcht 4 ,rega -0x306d 008991 copy clkn_bt ,pdata -0x306e 008992 isub temp ,null -0x306f 008993 ncall g24_timer_timeout ,positive -0x3070 008994 copy pdata ,regb -0x3071 008995 add regc ,offset_24g_tx_btclk ,rega -0x3072 008996 ifetch 4 ,rega -0x3073 008998 add regc ,offset_24g_interval ,rega -0x3074 008999 ifetcht 1 ,rega -0x3075 009001 iadd temp ,temp -0x3076 009002 copy regb ,pdata -0x3077 009003 isub temp ,null -0x3078 009004 nrtn positive -0x3079 009005 set0 28 ,pdata -0x307a 009006 add regc ,offset_24g_tx_btclk ,contw -0x307b 009007 istore 4 ,contw -0x307c 009009 branch enable_user -: 009011 g24_mode_switch_init: -0x307d 009012 setarg 1 -0x307e 009013 call g24_store_mem_mode_switch -0x307f 009015 call g24_set0_mem_time_slice -0x3080 009017 setarg 0xff -0x3081 009018 add regc ,offset_24g_interval ,contw -0x3082 009019 istore 1 ,contw -0x3083 009021 branch g24_timer_init -: 009023 g24_mode_switch: -0x3084 009024 setarg offset_24g_mode_switch -0x3085 009025 call g24_set_rega_ifetch_1byte -0x3086 009027 rtn blank -0x3087 009028 call g24_timer_check -0x3088 009029 nrtn user -0x3089 009030 call g24_fetch_mem_time_slice -0x308a 009032 increase 1 ,pdata -0x308b 009033 and_into 1 ,pdata -0x308c 009034 call g24_store_mem_time_slice -0x308d 009036 beq 0 ,dongle_check_mode -0x308e 009037 beq 1 ,g24_bind_mode_enable -0x308f 009038 rtn -: 009040 g24_bind_mode_enable: -0x3090 009044 setarg dongle_bind -0x3091 009045 call g24_store_mem_dongle_work_mode -0x3092 009046 branch g24_set0_mem_dongle_mode_init -: 009048 g24_enable_nodata_timer: -0x3093 009049 setarg 1 -0x3094 009050 call g24_store_mem_nodata_timer_enable -: 009052 g24_enable_nodata_timer_init: -0x3095 009053 setarg timer_nodata_delay -0x3096 009054 arg timer_nodata ,queue -0x3097 009055 branch timer_init -: 009057 g24_rx_nodata_process: -0x3098 009058 call g24_fetch_mem_nodata_timer_enable -0x3099 009060 rtn blank -0x309a 009061 arg timer_nodata ,queue -0x309b 009062 call timer_check -0x309c 009063 nrtn blank -0x309d 009064 call g24_set0_mem_nodata_timer_enable -0x309e 009067 setarg dongle_search -0x309f 009068 call g24_store_mem_dongle_work_mode -0x30a0 009070 call g24_set0_mem_dongle_mode_init -0x30a1 009072 branch g24_rx_interrupt_clear -: 009074 g24_dongle_search_mode_auto: -0x30a2 009075 bpatch patch18_0 ,mem_patch18 -0x30a3 009076 call g24_fetch_mem_dongle_work_mode -0x30a4 009078 rtnne dongle_search -0x30a5 009079 call g24_dongle_search_mode_init -0x30a6 009080 call g24_rx_auto_addr_ch_search -0x30a7 009081 call g24_receive_transmit_ack -0x30a8 009082 nbranch g24_rx_interrupt_clear ,user3 -0x30a9 009084 call g24_dongle_search_addr_check -0x30aa 009085 call g24_receive_packet_parse ,zero -0x30ab 009089 call dongle_check_mode -0x30ac 009090 call g24_fetch_mem_dongle_mode_init -0x30ad 009092 set1 dongle_work ,pdata -0x30ae 009093 call g24_store_mem_dongle_mode_init -0x30af 009095 call g24_rx_interrupt_clear -0x30b0 009096 call g24_enable_nodata_timer -0x30b1 009097 call g24_dongle_search_addr_check -0x30b2 009098 branch g24_dg_ch_num_reinit ,zero -0x30b3 009099 setarg offset_24g_kb_addr -0x30b4 009100 call g24_set_rega_ifetcht_4byte -0x30b5 009102 call g24_fetch_mem_addr_isub_temp -0x30b6 009103 branch g24_kb_ch_num_reinit ,zero -0x30b7 009104 setarg offset_24g_mouse_addr -0x30b8 009105 call g24_set_rega_ifetcht_4byte -0x30b9 009107 call g24_fetch_mem_addr_isub_temp -0x30ba 009108 branch g24_ms_ch_num_reinit ,zero -0x30bb 009109 rtn -: 009111 g24_dongle_search_addr_check: -0x30bc 009112 setarg offset_24g_rx_addr -0x30bd 009113 call g24_set_rega_ifetcht_4byte -: 009115 g24_fetch_mem_addr_isub_temp: -0x30be 009116 call g24_fetch_mem_addr -0x30bf 009118 isub temp ,null -0x30c0 009119 rtn -: 009121 g24_dg_ch_num_reinit: -0x30c1 009122 setarg offset_24g_dg_ch_number -0x30c2 009123 call g24_set_rega_ifetch_1byte -: 009125 g24_current_ch_num_reinit: -0x30c3 009127 add regc ,offset_24g_current_ch_number ,contw -0x30c4 009128 branch g24_contw_istore_1byte -: 009130 g24_kb_ch_num_reinit: -0x30c5 009131 setarg offset_24g_kb_ch_number -0x30c6 009132 call g24_set_rega_ifetch_1byte -0x30c7 009134 branch g24_current_ch_num_reinit -: 009135 g24_ms_ch_num_reinit: -0x30c8 009136 setarg offset_24g_ms_ch_number -0x30c9 009137 call g24_set_rega_ifetch_1byte -0x30ca 009139 branch g24_current_ch_num_reinit -: 009141 g24_dongle_search_mode_init: -0x30cb 009142 call g24_fetch_mem_dongle_mode_init -0x30cc 009144 rtnbit1 dongle_search -0x30cd 009145 set1 dongle_search ,pdata -0x30ce 009146 call g24_store_mem_dongle_mode_init -0x30cf 009148 call g24_set0_mem_time_slice -0x30d0 009150 call g24_set1_mem_ackpayload_enable -0x30d1 009152 setarg 0 -0x30d2 009153 add regc ,offset_rssi_noise_dg_index ,contw -0x30d3 009154 istore 3 ,contw -0x30d4 009156 arg offset_24g_dg_config_ch_once ,rega -0x30d5 009157 call g24_set_contw_with_temp -0x30d6 009158 istore 7 ,contw -0x30d7 009161 call g24_dongle_search_addr_check -0x30d8 009162 nrtn zero -0x30d9 009163 add regc ,offset_24g_current_ch_number ,rega -0x30da 009164 ifetch 1 ,rega -0x30db 009166 arg offset_24g_dg_ch_number ,rega -0x30dc 009167 call g24_set_contw_with_regb_store_1byte -0x30dd 009169 add regc ,offset_24g_ch ,rega -0x30de 009170 ifetch 1 ,rega -0x30df 009173 branch g24_store_mem_dg_last_ch -: 009175 g24_rx_auto_addr_ch_search: -0x30e0 009176 bpatch patch18_1 ,mem_patch18 -0x30e1 009177 call g24_fetch_mem_time_slice -0x30e2 009179 increase 1 ,pdata -0x30e3 009180 and_into 3 ,pdata -0x30e4 009181 call g24_store_mem_time_slice -0x30e5 009184 beq 0 ,g24_rx_auto_bind_config_kb -0x30e6 009185 beq 1 ,g24_rx_auto_bind_config_dongle -0x30e7 009186 beq 2 ,g24_rx_auto_bind_config_mouse -0x30e8 009187 beq 3 ,g24_rx_auto_bind_config_dongle -0x30e9 009188 rtn -: 009190 g24_rx_auto_bind_config_mouse: -0x30ea 009191 call g24_dongle_bind_ms_payload_cfg -0x30eb 009192 setarg offset_24g_mouse_addr -0x30ec 009193 call g24_set_rega_ifetch_4byte -0x30ed 009195 branch g24_rx_auto_addr_ch_search ,blank -0x30ee 009196 call g24_store_mem_addr -0x30ef 009198 setarg offset_24g_ms_config_ch_once -0x30f0 009199 call g24_set_rega_ifetch_1byte -0x30f1 009201 call g24_ms_config_ch_once ,blank -0x30f2 009202 setarg offset_24g_ms_last_ch -0x30f3 009203 call g24_set_rega_ifetch_1byte -0x30f4 009205 call g24_store_mem_ch -0x30f5 009207 add regc ,offset_rssi_noise_ms_index ,rega -0x30f6 009208 ifetcht 1 ,rega -0x30f7 009210 arg mem_rssi_noise_ms_buffer ,rega -0x30f8 009211 call rssi_noise_store -0x30f9 009212 add regc ,offset_rssi_noise_ms_index ,contw -0x30fa 009213 istoret 1 ,contw -0x30fb 009215 call g24_noise_rssi_average -0x30fc 009216 add regc ,offset_rssi_noise_ms_avg ,contw -0x30fd 009217 istoret 1 ,contw -0x30fe 009219 sub temp ,rssi_thresh_noise ,null -0x30ff 009220 nrtn positive -0x3100 009221 setarg offset_24g_ms_ch_number -0x3101 009222 call g24_set_rega_ifetcht_1byte -0x3102 009224 call g24_ch_temp_incre_size4 -0x3103 009225 arg offset_24g_ms_ch_number ,rega -0x3104 009226 call g24_set_contw_with_regb2 -0x3105 009227 istoret 1 ,contw -: 009229 g24_store_mem_ms_last_ch: -0x3106 009231 arg offset_24g_ms_last_ch ,rega -0x3107 009232 branch g24_set_contw_with_regb_store_1byte -: 009234 g24_ms_config_ch_once: -0x3108 009235 setarg 1 -0x3109 009236 arg offset_24g_ms_config_ch_once ,rega -0x310a 009237 call g24_set_contw_with_regb_store_1byte -0x310b 009239 arg 0 ,temp -0x310c 009240 call g24_ch_calc -0x310d 009243 branch g24_store_mem_ms_last_ch -: 009245 g24_rx_auto_bind_config_kb: -0x310e 009246 call g24_dongle_bind_kb_payload_cfg -0x310f 009247 setarg offset_24g_kb_addr -0x3110 009248 call g24_set_rega_ifetch_4byte -0x3111 009250 branch g24_rx_auto_addr_ch_search ,blank -0x3112 009251 call g24_store_mem_addr -0x3113 009253 setarg offset_24g_kb_config_ch_once -0x3114 009254 call g24_set_rega_ifetch_1byte -0x3115 009256 call g24_kb_config_ch_once ,blank -0x3116 009257 setarg offset_24g_kb_last_ch -0x3117 009258 call g24_set_rega_ifetch_1byte -0x3118 009260 call g24_store_mem_ch -0x3119 009262 add regc ,offset_rssi_noise_kb_index ,rega -0x311a 009263 ifetcht 1 ,rega -0x311b 009265 arg mem_rssi_noise_kb_buffer ,rega -0x311c 009266 call rssi_noise_store -0x311d 009267 add regc ,offset_rssi_noise_kb_index ,contw -0x311e 009268 istoret 1 ,contw -0x311f 009270 call g24_noise_rssi_average -0x3120 009271 add regc ,offset_rssi_noise_kb_avg ,contw -0x3121 009272 istoret 1 ,contw -0x3122 009274 sub temp ,rssi_thresh_noise ,null -0x3123 009275 nrtn positive -0x3124 009276 setarg offset_24g_kb_ch_number -0x3125 009277 call g24_set_rega_ifetcht_1byte -0x3126 009279 call g24_ch_temp_incre_size4 -0x3127 009280 arg offset_24g_kb_ch_number ,rega -0x3128 009281 call g24_set_contw_with_regb2 -0x3129 009282 istoret 1 ,contw -: 009284 g24_store_mem_kb_last_ch: -0x312a 009286 arg offset_24g_kb_last_ch ,rega -0x312b 009287 branch g24_set_contw_with_regb_store_1byte -: 009289 g24_kb_config_ch_once: -0x312c 009290 setarg 1 -0x312d 009291 arg offset_24g_kb_config_ch_once ,rega -0x312e 009292 call g24_set_contw_with_regb_store_1byte -0x312f 009294 arg 0 ,temp -0x3130 009295 call g24_ch_calc -0x3131 009298 branch g24_store_mem_kb_last_ch -: 009300 g24_rx_auto_bind_config_dongle: -0x3132 009301 call g24_dongle_bind_ms_payload_cfg -0x3133 009302 call g24_fetch_mem_rx_addr -0x3134 009304 call g24_store_mem_addr -0x3135 009306 setarg offset_24g_dg_config_ch_once -0x3136 009307 call g24_set_rega_ifetch_1byte -0x3137 009309 call g24_dg_config_ch_once ,blank -0x3138 009310 call g24_dg_store_config_ch -0x3139 009311 add regc ,offset_rssi_noise_dg_index ,rega -0x313a 009312 ifetcht 1 ,rega -0x313b 009314 arg mem_rssi_noise_dg_buffer ,rega -0x313c 009315 call rssi_noise_store -0x313d 009316 add regc ,offset_rssi_noise_dg_index ,contw -0x313e 009317 istoret 1 ,contw -0x313f 009319 call g24_noise_rssi_average -0x3140 009320 add regc ,offset_rssi_noise_dg_avg ,contw -0x3141 009321 istoret 1 ,contw -0x3142 009323 sub temp ,rssi_thresh_noise ,null -0x3143 009324 nrtn positive -0x3144 009325 setarg offset_24g_dg_ch_number -0x3145 009326 call g24_set_rega_ifetcht_1byte -0x3146 009328 call g24_ch_temp_incre_size4 -0x3147 009329 arg offset_24g_dg_ch_number ,rega -0x3148 009330 call g24_set_contw_with_regb2 -0x3149 009331 istoret 1 ,contw -: 009333 g24_store_mem_dg_last_ch: -0x314a 009336 arg offset_24g_dg_last_ch ,rega -0x314b 009337 branch g24_set_contw_with_regb_store_1byte -: 009340 g24_dg_config_ch_once: -0x314c 009345 setarg 1 -0x314d 009346 arg offset_24g_dg_config_ch_once ,rega -0x314e 009347 call g24_set_contw_with_regb_store_1byte -: 009348 g24_dg_store_config_ch: -0x314f 009349 setarg offset_24g_dg_last_ch -0x3150 009350 call g24_set_rega_ifetch_1byte -0x3151 009351 branch g24_store_mem_ch -: 009354 g24_transmit_ack: -0x3152 009356 add regc ,offset_24g_rxbuf ,rega -0x3153 009357 ifetch 1 ,rega -0x3154 009359 call g24_store_mem_data_type -0x3155 009362 call g24_read_len_pid_crc -0x3156 009364 call g24_fetch_mem_rxbuf_add1 -0x3157 009366 isolate1 bit_ack_24g ,pdata -0x3158 009367 branch g24tx_no_ack ,true -: 009368 g24tx_with_ack: -0x3159 009369 call g24_ackpayload_prep -0x315a 009370 call g24_transmit_prep -0x315b 009371 call g24_transmit -: 009372 g24tx_no_ack: -0x315c 009373 branch g24_end_of_packet -: 009375 g24_ackpayload_prep: -0x315d 009376 bpatch patch18_2 ,mem_patch18 -0x315e 009377 add regc ,offset_24g_datalen ,contw -0x315f 009378 call g24_mem_set0 -0x3160 009380 setarg offset_24g_ackpayload_enable -0x3161 009381 call g24_set_rega_ifetch_1byte -0x3162 009383 rtn blank -0x3163 009384 setarg 0x06 -0x3164 009385 add regc ,offset_24g_datalen ,contw -0x3165 009386 istore 1 ,contw -0x3166 009388 arg 0x06 ,loopcnt -0x3167 009389 setarg offset_24g_bind_payload -0x3168 009390 iadd regc ,contr -0x3169 009392 add regc ,offset_24g_txbuf ,contw -0x316a 009394 branch memcpy -: 009397 g24_receive_packet_start: -0x316b 009398 call g24_receive_transmit_ack -0x316c 009399 nbranch g24_rx_interrupt_clear ,user3 -0x316d 009400 branch g24_receive_packet_parse -: 009402 g24_receive_transmit_ack: -0x316e 009403 call g24_rx_interrupt_clear -0x316f 009404 call g24_receive_packet -0x3170 009405 nrtn user3 -0x3171 009406 branch g24_transmit_ack -: 009408 g24_receive_packet_parse: -0x3172 009409 bpatch patch18_3 ,mem_patch18 -0x3173 009410 call g24_receive_packet_parse_pid_crc -0x3174 009411 nbranch g24_rx_interrupt_clear ,user -0x3175 009412 add regc ,offset_24g_rxdata_length ,rega -0x3176 009413 ifetch 1 ,rega -0x3177 009415 branch g24_rx_interrupt_clear ,blank -0x3178 009416 increase 2 ,pdata -0x3179 009417 iforce loopcnt -0x317a 009418 add regc ,offset_24g_rxbuf ,contr -0x317b 009420 setarg offset_24g_rxdata_temp -0x317c 009421 iadd regc ,contw -0x317d 009423 call memcpy -0x317e 009424 call g24_set0_mem_mode_switch -0x317f 009426 call g24_fetch_mem_pair_mode -0x3180 009428 call g24_enable_nodata_timer ,blank -0x3181 009429 setarg offset_24g_rxdata_temp_add2 -0x3182 009430 call g24_set_rega_ifetch_1byte -0x3183 009432 beq 0x01 ,g24_data_type1 -0x3184 009433 beq 0x02 ,g24_data_type2 -0x3185 009434 beq 0x03 ,g24_data_type3 -0x3186 009435 beq 0xff ,g24_data_attemp -0x3187 009436 branch g24_rx_interrupt_clear -: 009438 g24_receive_packet_parse_pid_crc: -0x3188 009439 call g24_head_ptr2regc -0x3189 009440 call disable_user -0x318a 009441 add regc ,offset_24g_sta_pid ,rega -0x318b 009442 ifetch 1 ,rega -0x318c 009444 add regc ,offset_24g_last_pid ,rega -0x318d 009445 ifetcht 1 ,rega -0x318e 009447 isub temp ,null -0x318f 009448 ncall enable_user ,zero -0x3190 009449 add regc ,offset_24g_sta_pid ,rega -0x3191 009450 ifetch 1 ,rega -0x3192 009452 add regc ,offset_24g_last_pid ,contw -0x3193 009453 istore 1 ,contw -0x3194 009455 add regc ,offset_24g_sta_crc ,rega -0x3195 009456 ifetch 3 ,rega -0x3196 009458 add regc ,offset_24g_last_crc ,rega -0x3197 009459 ifetcht 3 ,rega -0x3198 009461 isub temp ,null -0x3199 009462 ncall enable_user ,zero -0x319a 009463 add regc ,offset_24g_sta_crc ,rega -0x319b 009464 ifetch 3 ,rega -0x319c 009466 add regc ,offset_24g_last_crc ,contw -0x319d 009468 branch g24_contw_istore_3byte -: 009470 g24_data_type1: -0x319e 009471 call g24_ch_timer_reinit -0x319f 009472 call g24_fetch_mem_abort_pac -0x31a0 009473 store 1 ,mem_temp -0x31a1 009475 call g24_fetcht_mem_rxdata_temp -0x31a2 009476 fetch 1 ,mem_temp -0x31a3 009478 isolate1 bit_abort ,temp -0x31a4 009479 setflag true ,0 ,pdata -0x31a5 009480 add regc ,offset_24g_abort_pac ,contw -0x31a6 009481 istore 1 ,contw -0x31a7 009483 beq 1 ,g24_data_attemp_mouse -0x31a8 009484 call g24_fetch_mem_hop_pac -0x31a9 009486 call g24_fetcht_mem_rxdata_temp -0x31aa 009488 isolate1 bit_hop ,temp -0x31ab 009489 setflag true ,0 ,pdata -0x31ac 009490 call g24_store_mem_hop_pac -0x31ad 009492 add regc ,offset_24g_cb_rxdata_type1 ,rega -0x31ae 009493 ifetch 2 ,rega -0x31af 009495 branch callback_func -: 009497 dongle_rxdata_type1: -0x31b0 009498 setarg ms_report_id -0x31b1 009499 store 1 ,mem_usb_mouse_data -0x31b2 009500 call g24_fetch_mem_rxdata_temp_add3_7byte -0x31b3 009502 istore 7 ,contw -0x31b4 009503 call g24_fetch_mem_rxdata_temp_add3_7byte -0x31b5 009505 ncall g24_ms_enable_blank_data_forcibly ,blank -0x31b6 009506 call g24_fetch_mem_rxdata_temp_add3_7byte -0x31b7 009508 call g24_ms_disable_blank_data_forcibly ,blank -: 009509 g24_data_type1_usbtx_enable: -0x31b8 009510 jam usb_ep2_ms ,mem_usb_ep2_data -: 009511 g24_data_type1_usbtx_enable_ep2: -0x31b9 009512 fetch 1 ,mem_usb_tx_enable -0x31ba 009513 set1 2 ,pdata -0x31bb 009514 store 1 ,mem_usb_tx_enable -0x31bc 009515 rtn -: 009517 g24_ms_enable_blank_data_forcibly: -0x31bd 009518 setarg 1 -0x31be 009519 call g24_store_mem_ms_blank_data_enable -: 009521 g24_ms_enable_blank_data_timer: -0x31bf 009522 setarg timer_ms_blank_delay -0x31c0 009523 arg timer_ms_blank ,queue -0x31c1 009524 branch timer_init -: 009525 g24_ms_disable_blank_data_forcibly: -0x31c2 009526 call g24_set0_mem_ms_blank_data_enable -: 009528 g24_ms_disable_blank_data_timer: -0x31c3 009529 setarg 0 -0x31c4 009530 arg timer_ms_blank ,queue -0x31c5 009531 branch timer_init -: 009533 g24_data_type2: -0x31c6 009534 call g24_fetcht_mem_rxdata_temp -0x31c7 009536 isolate1 bit_abort ,temp -0x31c8 009537 branch g24_data_attemp_kbd ,true -0x31c9 009538 arg mem_usb_kb_data ,contw -0x31ca 009539 call g24_data_type2_reverse_data -0x31cb 009540 fetch 8 ,mem_usb_kb_data -0x31cc 009541 ncall g24_kb_enable_blank_data_forcibly ,blank -0x31cd 009542 fetch 8 ,mem_usb_kb_data -0x31ce 009543 call g24_kb_disable_blank_data_forcibly ,blank -0x31cf 009544 call g24_head_ptr2regc -0x31d0 009545 fetch 8 ,mem_usb_kb_data -0x31d1 009546 arg offset_24g_kb_data_sta_data ,rega -0x31d2 009547 call g24_set_contw_with_temp -0x31d3 009548 istore 8 ,contw -0x31d4 009550 setarg offset_24g_kb_data_last_data -0x31d5 009551 iadd regc ,rega -0x31d6 009552 ifetcht 8 ,rega -0x31d7 009554 isub temp ,null -0x31d8 009555 ncall g24_kb_data_dispose ,zero -0x31d9 009556 setarg offset_24g_kb_data_sta_data -0x31da 009557 iadd regc ,rega -0x31db 009558 ifetch 8 ,rega -0x31dc 009560 arg offset_24g_kb_data_last_data ,rega -0x31dd 009561 call g24_set_contw_with_temp -0x31de 009562 istore 8 ,contw -0x31df 009564 branch g24_rx_interrupt_clear -: 009566 g24_data_type2_reverse_data: -0x31e0 009567 setarg offset_24g_rxdata_temp_add2 -0x31e1 009568 iadd regc ,contr -0x31e2 009570 arg 9 ,loopcnt -0x31e3 009571 branch reverse_byte -: 009573 g24_kb_enable_blank_data_forcibly: -0x31e4 009574 setarg 1 -0x31e5 009575 call g24_store_mem_kb_blank_data_enable -: 009577 g24_kb_enable_blank_data_timer: -0x31e6 009578 setarg timer_kb_blank_delay -0x31e7 009579 arg timer_kb_blank ,queue -0x31e8 009580 branch timer_init -: 009582 g24_kb_disable_blank_data_forcibly: -0x31e9 009583 call g24_set0_mem_kb_blank_data_enable -: 009585 g24_kb_disable_blank_data_timer: -0x31ea 009586 setarg 0 -0x31eb 009587 arg timer_kb_blank ,queue -0x31ec 009588 branch timer_init -: 009590 g24_kb_data_dispose: -: 009591 g24_kb_data_into_ep1_fifo: -0x31ed 009592 jam usb_ep1_kb ,mem_usb_ep1_data -0x31ee 009593 fetch 1 ,mem_usb_tx_enable -0x31ef 009594 set1 1 ,pdata -0x31f0 009595 store 1 ,mem_usb_tx_enable -0x31f1 009596 rtn -: 009598 g24_data_type3: -0x31f2 009599 arg mem_usb_kb_multikey ,contw -0x31f3 009600 call g24_data_type2_reverse_data -0x31f4 009601 fetch 2 ,mem_usb_kb_multikey + 1 -0x31f5 009602 ncall g24_kb_mul_enable_blank_data_forcibly ,blank -0x31f6 009603 fetch 2 ,mem_usb_kb_multikey + 1 -0x31f7 009604 call g24_kb_mul_disable_blank_data_forcibly ,blank -0x31f8 009605 call g24_head_ptr2regc -0x31f9 009606 fetch 3 ,mem_usb_kb_multikey -0x31fa 009607 arg offset_24g_kb_multikey_sta_data ,rega -0x31fb 009608 call g24_set_contw_with_temp_store_3byte -0x31fc 009610 setarg offset_24g_kb_multikey_last_data -0x31fd 009611 iadd regc ,rega -0x31fe 009612 ifetcht 3 ,rega -0x31ff 009614 isub temp ,null -0x3200 009615 ncall g24_kb_mul_data_into_ep2_fifo ,zero -0x3201 009616 setarg offset_24g_kb_multikey_sta_data -0x3202 009617 iadd regc ,rega -0x3203 009618 ifetch 3 ,rega -0x3204 009620 arg offset_24g_kb_multikey_last_data ,rega -0x3205 009621 call g24_set_contw_with_temp_store_3byte -0x3206 009623 branch g24_rx_interrupt_clear -: 009625 g24_kb_mul_data_into_ep2_fifo: -0x3207 009626 jam usb_ep2_multikey ,mem_usb_ep2_data -0x3208 009627 branch g24_data_type1_usbtx_enable_ep2 -: 009629 g24_kb_mul_enable_blank_data_forcibly: -0x3209 009630 setarg 1 -0x320a 009631 call g24_store_mem_kb_mul_blank_data_enable -: 009633 g24_kb_mul_enable_blank_data_timer: -0x320b 009634 setarg timer_kb_mul_blank_delay -0x320c 009635 arg timer_kb_mul_blank ,queue -0x320d 009636 branch timer_init -: 009638 g24_kb_mul_disable_blank_data_forcibly: -0x320e 009639 call g24_set0_mem_kb_mul_blank_data_enable -: 009641 g24_kb_mul_disable_blank_data_timer: -0x320f 009642 setarg 0 -0x3210 009643 arg timer_kb_mul_blank ,queue -0x3211 009644 branch timer_init -: 009646 g24_data_attemp: -0x3212 009647 call g24_fetch_mem_rxdata_temp_add3_1byte -0x3213 009649 beq datatype_mouse ,g24_data_attemp_mouse -0x3214 009650 beq datatype_keyboard ,g24_data_attemp_kbd -0x3215 009651 rtn -: 009652 g24_data_attemp_mouse: -0x3216 009653 setarg offset_24g_rxdata_temp_add4 -0x3217 009654 call g24_set_rega_ifetch_4byte -0x3218 009655 arg offset_24g_mouse_addr ,rega -0x3219 009656 call g24_set_contw_with_temp -0x321a 009659 branch g24_contw_istore_4byte -: 009661 g24_data_attemp_kbd: -0x321b 009662 setarg offset_24g_rxdata_temp_add4 -0x321c 009663 call g24_set_rega_ifetch_4byte -0x321d 009664 arg offset_24g_kb_addr ,rega -0x321e 009665 call g24_set_contw_with_temp -0x321f 009668 branch g24_contw_istore_4byte -: 009670 g24_store_mem_24g_mode: -0x3220 009671 call g24_head_ptr2regc -0x3221 009672 add regc ,offset_24g_mode ,contw -0x3222 009673 istore 1 ,contw -0x3223 009674 rtn -: 009676 g24_fetch_mem_device_addr: -0x3224 009677 call g24_head_ptr2regc -0x3225 009678 add regc ,offset_24g_device_addr ,rega -0x3226 009679 branch g24_rega_ifetch_4byte -: 009680 g24_store_mem_device_addr: -0x3227 009681 call g24_head_ptr2regc -0x3228 009682 add regc ,offset_24g_device_addr ,contw -0x3229 009683 branch g24_contw_istore_4byte -: 009685 g24_fetch_mem_addr: -0x322a 009686 add regc ,offset_24g_addr ,rega -0x322b 009687 branch g24_rega_ifetch_4byte -: 009688 g24_store_mem_addr: -0x322c 009689 add regc ,offset_24g_addr ,contw -: 009690 g24_contw_istore_4byte: -0x322d 009691 istore 4 ,contw -0x322e 009692 rtn -: 009694 g24_store_mem_ch: -0x322f 009695 add regc ,offset_24g_ch ,contw -0x3230 009696 branch g24_contw_istore_1byte -: 009698 g24_set0_mem_pid: -0x3231 009699 setarg 0 -: 009700 g24_store_mem_pid: -0x3232 009701 call g24_head_ptr2regc -0x3233 009702 add regc ,offset_24g_pid ,contw -0x3234 009703 branch g24_contw_istore_1byte -: 009705 g24_store_mem_txpayload: -0x3235 009706 add regc ,offset_24g_txpayload ,contw -0x3236 009707 branch g24_contw_istore_1byte -: 009709 g24_set4_mem_max_retry: -0x3237 009710 setarg 4 -: 009711 g24_store_mem_max_retry: -0x3238 009712 add regc ,offset_24g_max_retry ,contw -0x3239 009713 branch g24_contw_istore_1byte -: 009715 g24_fetch_mem_data_type: -0x323a 009716 add regc ,offset_24g_data_type ,rega -0x323b 009717 branch g24_rega_ifetch_1byte -: 009718 g24_store_mem_data_type: -0x323c 009719 add regc ,offset_24g_data_type ,contw -0x323d 009720 branch g24_contw_istore_1byte -: 009722 g24_set2_mem_sync_cnt: -0x323e 009723 setarg 2 -: 009724 g24_store_mem_sync_cnt: -0x323f 009725 add regc ,offset_24g_sync_cnt ,contw -0x3240 009726 branch g24_contw_istore_1byte -: 009728 g24_set1_mem_rf_last_sta: -0x3241 009729 setarg 1 -: 009730 g24_store_mem_rf_last_sta: -0x3242 009731 call g24_head_ptr2regc -0x3243 009732 add regc ,offset_24g_rf_last_sta ,contw -0x3244 009733 branch g24_contw_istore_1byte -: 009735 g24_fetch_mem_hop_pac: -0x3245 009736 call g24_head_ptr2regc -0x3246 009737 add regc ,offset_24g_hop_pac ,rega -0x3247 009738 branch g24_rega_ifetch_1byte -: 009739 g24_set1_mem_hop_pac: -0x3248 009740 setarg 1 -: 009741 g24_store_mem_hop_pac: -0x3249 009742 call g24_head_ptr2regc -0x324a 009743 add regc ,offset_24g_hop_pac ,contw -0x324b 009744 branch g24_contw_istore_1byte -: 009746 g24_fetch_mem_abort_pac: -0x324c 009747 call g24_head_ptr2regc -0x324d 009748 add regc ,offset_24g_abort_pac ,rega -0x324e 009749 branch g24_rega_ifetch_1byte -: 009750 g24_set1_mem_abort_pac: -0x324f 009751 setarg 1 -: 009752 g24_store_mem_abort_pac: -0x3250 009753 call g24_head_ptr2regc -0x3251 009754 add regc ,offset_24g_abort_pac ,contw -0x3252 009755 branch g24_contw_istore_1byte -: 009757 g24_fetch_mem_pairing_sm: -0x3253 009758 call g24_head_ptr2regc -0x3254 009759 add regc ,offset_24g_pairing_sm ,rega -0x3255 009760 branch g24_rega_ifetch_1byte -: 009761 g24_store_mem_pairing_sm: -0x3256 009762 add regc ,offset_24g_pairing_sm ,contw -0x3257 009763 branch g24_contw_istore_1byte -: 009765 g24_fetch_mem_rf_hop_ch: -0x3258 009766 add regc ,offset_24g_rf_hop_ch ,rega -0x3259 009767 branch g24_rega_ifetch_1byte -: 009768 g24_set0_mem_rf_hop_ch: -0x325a 009769 setarg 0 -: 009770 g24_store_mem_rf_hop_ch: -0x325b 009771 add regc ,offset_24g_rf_hop_ch ,contw -0x325c 009772 branch g24_contw_istore_1byte -: 009774 g24_fetch_mem_rf_work_stage: -0x325d 009775 add regc ,offset_24g_rf_work_stage ,rega -0x325e 009776 branch g24_rega_ifetch_1byte -: 009778 g24_fetch_mem_rxbuf_add1: -0x325f 009779 add regc ,offset_24g_rxbuf_add1 ,rega -0x3260 009780 branch g24_rega_ifetch_1byte -: 009782 g24_fetch_mem_check_dongle_times: -0x3261 009783 add regc ,offset_24g_check_dongle_times ,rega -0x3262 009784 branch g24_rega_ifetch_1byte -: 009785 g24_set0_mem_check_dongle_times: -0x3263 009786 setarg 0 -: 009787 g24_store_mem_check_dongle_times: -0x3264 009788 call g24_head_ptr2regc -0x3265 009789 add regc ,offset_24g_check_dongle_times ,contw -0x3266 009790 branch g24_contw_istore_1byte -: 009792 g24_store_mem_tx_power: -0x3267 009793 call g24_head_ptr2regc -0x3268 009794 add regc ,offset_tx_power_temp ,rega -0x3269 009795 ifetch 1 ,rega -: 009796 g24_store_mem_txpower: -0x326a 009797 store 1 ,mem_tx_power -0x326b 009798 rtn -: 009800 g24_store_mem_tx_power_temp: -0x326c 009801 call g24_head_ptr2regc -0x326d 009802 fetch 1 ,mem_tx_power -0x326e 009804 add regc ,offset_tx_power_temp ,contw -0x326f 009805 branch g24_contw_istore_1byte -: 009807 g24_fetch_mem_power_ctrl_pac: -0x3270 009808 add regc ,offset_power_ctrl_packet_cnt ,rega -0x3271 009809 branch g24_rega_ifetch_1byte -: 009811 g24_store_mem_power_ctrl_level: -0x3272 009812 add regc ,offset_power_ctrl_level ,contw -0x3273 009813 branch g24_contw_istore_1byte -: 009815 g24_fetcht_mem_rxdata_temp: -0x3274 009816 setarg offset_24g_rxdata_temp -: 009817 g24_set_rega_ifetcht_1byte: -0x3275 009818 iadd regc ,rega -0x3276 009819 ifetcht 1 ,rega -0x3277 009820 rtn -: 009822 g24_fetch_mem_rf_laststa: -0x3278 009823 setarg offset_24g_rf_laststa -0x3279 009824 branch g24_set_rega_ifetch_1byte -: 009825 g24_set0_mem_rf_laststa: -0x327a 009826 setarg 0 -: 009827 g24_store_mem_rf_laststa: -0x327b 009828 arg offset_24g_rf_laststa ,rega -0x327c 009829 branch g24_set_contw_with_regb_store_1byte -: 009831 g24_fetch_mem_rx_addr: -0x327d 009832 setarg offset_24g_rx_addr -: 009833 g24_set_rega_ifetch_4byte: -0x327e 009834 call g24_set_rega -: 009835 g24_rega_ifetch_4byte: -0x327f 009836 ifetch 4 ,rega -0x3280 009837 rtn -: 009839 g24_fetch_mem_time_slice: -0x3281 009840 setarg offset_24g_time_slice -0x3282 009841 branch g24_set_rega_ifetch_1byte -: 009842 g24_set0_mem_time_slice: -0x3283 009843 setarg 0 -: 009844 g24_store_mem_time_slice: -0x3284 009845 arg offset_24g_time_slice ,rega -0x3285 009846 branch g24_set_contw_with_regb_store_1byte -: 009848 g24_set0_mem_mode_switch: -0x3286 009849 setarg 0 -: 009850 g24_store_mem_mode_switch: -0x3287 009851 arg offset_24g_mode_switch ,rega -0x3288 009852 branch g24_set_contw_with_regb_store_1byte -: 009854 g24_store_mem_bind_payload: -0x3289 009855 arg offset_24g_bind_payload ,rega -0x328a 009856 branch g24_set_contw_with_regb_store_1byte -: 009858 g24_fetch_mem_bind_device_status: -0x328b 009859 setarg offset_dongle_bind_device_status -0x328c 009860 branch g24_set_rega_ifetch_1byte -: 009861 g24_store_mem_bind_device_status: -0x328d 009862 arg offset_dongle_bind_device_status ,rega -0x328e 009863 branch g24_set_contw_with_regb_store_1byte -: 009865 g24_fetch_mem_dongle_work_mode: -0x328f 009866 setarg offset_dongle_work_mode -0x3290 009867 branch g24_set_rega_ifetch_1byte -: 009868 g24_set_work_mem_dongle_work_mode: -0x3291 009869 setarg dongle_work -: 009870 g24_store_mem_dongle_work_mode: -0x3292 009871 arg offset_dongle_work_mode ,rega -0x3293 009872 branch g24_set_contw_with_regb_store_1byte -: 009874 g24_fetch_mem_dongle_mode_init: -0x3294 009875 setarg offset_dongle_mode_init -0x3295 009876 branch g24_set_rega_ifetch_1byte -: 009877 g24_set0_mem_dongle_mode_init: -0x3296 009878 setarg clear_init -: 009879 g24_store_mem_dongle_mode_init: -0x3297 009880 arg offset_dongle_mode_init ,rega -0x3298 009881 branch g24_set_contw_with_regb_store_1byte -: 009883 g24_set0_mem_ackpayload_enable: -0x3299 009884 setarg 0 -: 009885 g24_store_mem_ackpayload_enable: -0x329a 009886 arg offset_24g_ackpayload_enable ,rega -0x329b 009887 branch g24_set_contw_with_regb_store_1byte -: 009888 g24_set1_mem_ackpayload_enable: -0x329c 009889 setarg 1 -0x329d 009890 branch g24_store_mem_ackpayload_enable -: 009892 g24_fetch_mem_rxdata_temp_add3_7byte: -0x329e 009893 setarg offset_24g_rxdata_temp_add3 -0x329f 009894 call g24_set_rega -0x32a0 009895 ifetch 7 ,rega -0x32a1 009896 rtn -: 009898 g24_fetch_mem_nodata_timer_enable: -0x32a2 009899 setarg offset_24g_nodata_timer_enable -0x32a3 009900 branch g24_set_rega_ifetch_1byte -: 009901 g24_set0_mem_nodata_timer_enable: -0x32a4 009902 setarg 0 -: 009903 g24_store_mem_nodata_timer_enable: -0x32a5 009904 arg offset_24g_nodata_timer_enable ,rega -0x32a6 009905 branch g24_set_contw_with_regb_store_1byte -: 009907 g24_set0_mem_ms_blank_data_enable: -0x32a7 009908 setarg 0 -: 009909 g24_store_mem_ms_blank_data_enable: -0x32a8 009910 arg offset_24g_ms_blank_data_enable ,rega -0x32a9 009911 branch g24_set_contw_with_regb_store_1byte -: 009913 g24_set0_mem_kb_blank_data_enable: -0x32aa 009914 setarg 0 -: 009915 g24_store_mem_kb_blank_data_enable: -0x32ab 009916 arg offset_24g_kb_blank_data_enable ,rega -0x32ac 009917 branch g24_set_contw_with_regb_store_1byte -: 009919 g24_set0_mem_kb_mul_blank_data_enable: -0x32ad 009920 setarg 0 -: 009921 g24_store_mem_kb_mul_blank_data_enable: -0x32ae 009922 arg offset_24g_kb_mul_blank_data_enable ,rega -0x32af 009923 branch g24_set_contw_with_regb_store_1byte -: 009925 g24_store_mem_power_ctrl_threshold_up: -0x32b0 009926 arg offset_power_ctrl_threshold_up ,rega -0x32b1 009927 branch g24_set_contw_with_regb_store_1byte -: 009929 g24_store_mem_power_ctrl_threshold_down: -0x32b2 009930 arg offset_power_ctrl_threshold_down ,rega -: 009931 g24_set_contw_with_regb_store_1byte: -0x32b3 009932 call g24_set_contw_with_regb -: 009933 g24_contw_istore_1byte: -0x32b4 009934 istore 1 ,contw -0x32b5 009935 rtn -: 009937 g24_fetch_mem_pair_mode: -0x32b6 009938 setarg offset_24g_pair_mode -0x32b7 009939 branch g24_set_rega_ifetch_1byte -: 009941 g24_store_mem_pair_mode: -0x32b8 009942 arg offset_24g_pair_mode ,rega -0x32b9 009943 branch g24_set_contw_with_regb_store_1byte -: 009945 g24_store_mem_pair_txpower: -0x32ba 009946 setarg offset_24g_pair_txpower -0x32bb 009947 call g24_set_rega_ifetch_1byte -0x32bc 009948 branch g24_store_mem_txpower -: 009950 g24_fetch_mem_rxdata_temp_add3_1byte: -0x32bd 009951 setarg offset_24g_rxdata_temp_add3 -0x32be 009952 branch g24_set_rega_ifetch_1byte -: 009954 g24_set_contw_with_temp: -0x32bf 009955 copy pdata ,temp -0x32c0 009956 copy rega ,pdata -0x32c1 009957 iadd regc ,contw -0x32c2 009958 copy temp ,pdata -0x32c3 009959 rtn -: 009961 g24_set_contw_with_temp_store_3byte: -0x32c4 009962 call g24_set_contw_with_temp -: 009963 g24_contw_istore_3byte: -0x32c5 009964 istore 3 ,contw -0x32c6 009965 rtn -: 009967 g24_set_contw_with_regb: -0x32c7 009968 call g24_head_ptr2regc -: 009969 g24_set_contw_with_regb2: -0x32c8 009970 copy pdata ,regb -0x32c9 009971 copy rega ,pdata -0x32ca 009972 iadd regc ,contw -0x32cb 009973 copy regb ,pdata -0x32cc 009974 rtn -: 009976 g24_set_rega: -0x32cd 009977 call g24_head_ptr2regc -0x32ce 009978 iadd regc ,rega -0x32cf 009979 rtn -: 009981 g24_set_rega_ifetch_1byte: -0x32d0 009982 call g24_set_rega -: 009983 g24_rega_ifetch_1byte: -0x32d1 009984 ifetch 1 ,rega -0x32d2 009985 rtn -: 009987 g24_set_rega_ifetcht_4byte: -0x32d3 009988 call g24_set_rega -0x32d4 009989 ifetcht 4 ,rega -0x32d5 009990 rtn -: 009992 g24_mem_set0: -0x32d6 009993 setarg 0 -0x32d7 009994 branch g24_contw_istore_1byte -: 009998 app_init: -0x32d8 009999 bpatch patch18_4 ,mem_patch18 -0x32d9 010000 fetch 1 ,mem_device_option -0x32da 010001 branch app_init ,blank -0x32db 010003 beq dvc_op_dongle ,dongle_init -0x32dc 010004 beq dvc_op_antilost ,antilost_init -0x32dd 010005 beq dvc_op_shutter ,shutter_init -0x32de 010006 beq dvc_op_module ,module_init -0x32df 010007 beq dvc_op_car ,car_init -0x32e0 010008 beq dvc_op_remote_car ,remote_car_init -0x32e1 010009 bbit1 dvc_op_mouse ,mouse_init -0x32e2 010010 rtn -: 010012 app_lpm_init: -0x32e3 010013 bpatch patch18_5 ,mem_patch18 -0x32e4 010014 jam 0 ,mem_tester_emulate -0x32e5 010015 jam 0 ,mem_debug_config -0x32e6 010016 jam 0 ,mem_lch_code -0x32e7 010017 setarg 0 -0x32e8 010018 store 5 ,mem_sp_state_start -0x32e9 010019 fetch 1 ,mem_device_option -0x32ea 010020 branch app_lpm_init ,blank -0x32eb 010021 beq dvc_op_module ,module_lpm_init -: 010022 app_lpm_init0: -0x32ec 010023 rtn -: 010026 app_process_idle: -0x32ed 010027 call ui_dispatch -0x32ee 010028 call check_51cmd -0x32ef 010029 call app_process_bb_event -0x32f0 010030 fetch 2 ,mem_cb_idle_process -0x32f1 010031 branch callback_func -: 010033 app_process_bt: -0x32f2 010034 fetch 2 ,mem_cb_bt_process -0x32f3 010035 branch callback_func -: 010037 app_process_ble: -0x32f4 010038 fetch 2 ,mem_cb_le_process -0x32f5 010039 branch callback_func -: 010041 app_process_bb_event: -0x32f6 010042 bpatch patch18_6 ,mem_patch18 -0x32f7 010044 arg mem_ipc_fifo_bt2c51 ,rega -0x32f8 010045 call fifo_out -0x32f9 010046 rtn blank -0x32fa 010048 copy pdata ,regc -0x32fb 010049 call app_event_normal_process -0x32fc 010050 branch app_process_bb_event_priority -: 010052 app_discard_event: -0x32fd 010053 arg 0 ,regc -0x32fe 010054 rtn -: 010059 app_event_normal_process: -0x32ff 010060 beq bt_evt_bb_connected ,app_evt_bt_conn -0x3300 010061 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed -0x3301 010062 beq bt_evt_setup_complete ,app_evt_setup_complete -0x3302 010063 beq bt_evt_hid_handshake ,app_evt_hid_handshake -0x3303 010064 beq bt_evt_hid_connected ,app_bb_event_hid_connected -0x3304 010065 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed -0x3305 010066 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn -0x3306 010067 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed -0x3307 010068 beq bt_evt_le_connected ,app_le_event_bb_connected -0x3308 010069 beq bt_evt_le_disconnected ,app_le_event_bb_disconn -0x3309 010070 beq bt_evt_reconn_started ,app_event_reconn_start -0x330a 010071 beq bt_evt_enter_sniff ,app_event_enter_sniff -0x330b 010072 beq bt_evt_exit_sniff ,app_event_exit_sniff -0x330c 010074 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused -0x330d 010075 beq bt_evt_linkkey_generate ,app_event_linkkey_generate -0x330e 010076 beq bt_evt_switch_fail_master ,app_event_switch_fail_master -0x330f 010077 beq bt_evt_switch_success_master ,app_event_switch_success -0x3310 010078 rtn -: 010081 app_evt_bt_conn: -0x3311 010082 fetch 2 ,mem_ui_state_map -0x3312 010083 set1 ui_state_bt_connected ,pdata -0x3313 010084 store 2 ,mem_ui_state_map -0x3314 010085 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3315 010086 set0 app_disc_by_button ,pdata -0x3316 010087 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3317 010088 rtn -: 010090 app_event_switch_success: -0x3318 010091 jam 0 ,mem_switch_fail_master_count -0x3319 010092 rtn -: 010094 app_event_switch_fail_master: -0x331a 010095 fetch 1 ,mem_switch_fail_master_count -0x331b 010096 increase 1 ,pdata -0x331c 010097 store 1 ,mem_switch_fail_master_count -0x331d 010098 sub pdata ,1 ,null -0x331e 010099 branch app_bt_role_switch ,positive -0x331f 010100 jam 0 ,mem_switch_fail_master_count -0x3320 010101 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3321 010102 set1 app_disc_switch_fail ,pdata -0x3322 010103 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3323 010104 branch app_bt_disconnect -: 010106 app_process_bb_event_priority: -0x3324 010107 fetch 2 ,mem_cb_bb_event_process -0x3325 010108 branch callback_func -: 010110 app_check_wake_lock: -0x3326 010111 fetch 2 ,mem_cb_check_wakelock -0x3327 010112 branch callback_func -: 010114 app_will_enter_lpm: -0x3328 010115 fetch 2 ,mem_cb_before_lpm -0x3329 010116 branch callback_func -: 010118 app_event_linkkey_generate: -0x332a 010119 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x332b 010120 set1 app_disc_after_pairing ,pdata -0x332c 010121 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x332d 010122 branch app_bt_store_reconn_info -: 010124 app_event_reconn_start: -0x332e 010125 fetch 2 ,mem_ui_state_map -0x332f 010126 set1 ui_state_bt_reconnect ,pdata -0x3330 010127 store 2 ,mem_ui_state_map -0x3331 010128 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3332 010129 set1 app_disc_after_reconn ,pdata -0x3333 010130 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3334 010131 rtn -: 010133 app_evt_setup_complete: -0x3335 010134 fetch 2 ,mem_ui_state_map -0x3336 010135 set1 ui_state_bt_setup_complete ,pdata -0x3337 010136 store 2 ,mem_ui_state_map -0x3338 010137 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3339 010138 set1 app_disc_after_setup_done ,pdata -0x333a 010139 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x333b 010140 rtn -: 010142 app_evt_hid_handshake: -0x333c 010143 fetch 2 ,mem_ui_state_map -0x333d 010144 set1 ui_state_bt_hid_handshake ,pdata -0x333e 010145 store 2 ,mem_ui_state_map -0x333f 010146 rtn -: 010148 app_event_enter_sniff: -0x3340 010149 fetch 2 ,mem_ui_state_map -0x3341 010150 set1 ui_state_bt_sniff ,pdata -0x3342 010151 store 2 ,mem_ui_state_map -0x3343 010152 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3344 010153 set1 app_disc_after_sniff ,pdata -0x3345 010154 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3346 010155 rtn -: 010157 app_event_exit_sniff: -0x3347 010158 fetch 2 ,mem_ui_state_map -0x3348 010159 set0 ui_state_bt_sniff ,pdata -0x3349 010160 store 2 ,mem_ui_state_map -0x334a 010161 rtn -: 010163 app_le_event_bb_connected: -0x334b 010164 fetch 2 ,mem_ui_state_map -0x334c 010165 set1 ui_state_ble_connected ,pdata -0x334d 010166 store 2 ,mem_ui_state_map -0x334e 010167 rtn -: 010169 app_le_event_bb_disconn: -0x334f 010170 fetch 2 ,mem_ui_state_map -0x3350 010171 set0 ui_state_ble_connected ,pdata -0x3351 010172 store 2 ,mem_ui_state_map -0x3352 010173 branch app_lpm_mult_disable -: 010175 app_bb_event_hid_connected: -0x3353 010176 fetch 2 ,mem_ui_state_map -0x3354 010177 set1 ui_state_bt_hid_conn ,pdata -0x3355 010178 store 2 ,mem_ui_state_map -0x3356 010179 rtn -: 010181 app_evt_button_long_pressed: -0x3357 010182 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3358 010183 set1 app_disc_by_button ,pdata -0x3359 010184 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x335a 010185 rtn -: 010187 app_event_ml2cap_conn_refused: -0x335b 010188 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x335c 010189 set1 app_disc_l2cap_refused ,pdata -0x335d 010190 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x335e 010191 branch app_bt_disconnect -: 010194 app_evt_timer: -0x335f 010195 bpatch patch18_7 ,mem_patch18 -0x3360 010196 store 1 ,mem_app_evt_timer_count -: 010197 app_evt_100ms_loop: -0x3361 010198 fetch 1 ,mem_app_evt_timer_count -0x3362 010199 rtn blank -0x3363 010200 increase -1 ,pdata -0x3364 010201 store 1 ,mem_app_evt_timer_count -0x3365 010202 call ui_button_polling -0x3366 010203 call app_lpm_wake_auto_lock_timer -0x3367 010204 call app_unsniff_delay_timer -0x3368 010205 call app_discovery_timer -0x3369 010206 call flash_write_spi_sm_timer -0x336a 010207 fetch 2 ,mem_cb_event_timer -0x336b 010208 call callback_func -0x336c 010209 branch app_evt_100ms_loop -: 010214 timer_single_step: -0x336d 010215 ifetch 1 ,regc -0x336e 010216 rtn blank -0x336f 010217 pincrease -1 -0x3370 010218 istore 1 ,regc -0x3371 010219 nrtn blank -0x3372 010220 copy regb ,pdata -0x3373 010221 branch callback_func -: 010225 timer_single_step_2b: -0x3374 010226 ifetch 2 ,regc -0x3375 010227 rtn blank -0x3376 010228 pincrease -1 -0x3377 010229 istore 2 ,regc -0x3378 010230 nrtn blank -0x3379 010231 copy regb ,pdata -0x337a 010232 branch callback_func -: 010234 app_power_timer: -0x337b 010235 fetcht 2 ,mem_power_param_ptr -0x337c 010236 add temp ,power_timer_offset ,regc -0x337d 010237 arg app_power_timer_timeout ,regb -0x337e 010238 branch timer_single_step -: 010240 app_power_timer_timeout: -0x337f 010241 call app_got_power_state_common -0x3380 010242 beq power_starting ,app_enter_power_stanby_state -: 010243 app_enter_power_off_state: -0x3381 010244 branch app_enter_hibernate -: 010245 app_enter_power_stanby_state: -0x3382 010246 setarg power_standby -0x3383 010247 istore 1 ,regc -0x3384 010248 add temp ,power_standby_cb_offset ,regb -: 010249 app_power_cb_common: -0x3385 010250 ifetch 2 ,regb -0x3386 010251 branch callback_func -: 010253 app_unsniff_delay_timer: -0x3387 010254 arg mem_unsniff2sniff_timer_count ,regc -0x3388 010255 arg app_unsniff_delay_timeout ,regb -0x3389 010256 branch timer_single_step -: 010258 app_unsniff_delay_timeout: -0x338a 010259 call context_check_idle -0x338b 010260 branch app_bt_enter_sniff ,zero -0x338c 010261 rtn -: 010264 app_discovery_timer: -0x338d 010265 arg mem_discovery_timeout_timer_count ,regc -0x338e 010266 arg app_discovery_timeout ,regb -0x338f 010267 branch timer_single_step_2b -: 010269 app_discovery_timeout: -0x3390 010270 call app_bt_stop_discovery -0x3391 010271 call app_led_off -0x3392 010272 fetch 2 ,mem_cb_discovry_timeout -0x3393 010273 branch callback_func -: 010276 app_bb_event_reconn_failed: -0x3394 010277 call app_disconn_reason_flag_clear -: 010278 app_clear_reconnect_flag: -0x3395 010279 fetch 2 ,mem_ui_state_map -0x3396 010280 set0 ui_state_bt_reconnect ,pdata -0x3397 010281 store 2 ,mem_ui_state_map -0x3398 010282 rtn -: 010284 app_bb_event_bb_disconn: -0x3399 010285 jam 0 ,mem_unsniff2sniff_timer_count -0x339a 010286 fetch 2 ,mem_ui_state_map -0x339b 010287 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn -0x339c 010288 isolate0 ui_state_bt_setup_complete ,pdata -0x339d 010289 call app_discard_event ,true -: 010290 app_bb_event_bb_reconn_disconn: -0x339e 010291 bpatch patch19_0 ,mem_patch19 -0x339f 010292 fetch 2 ,mem_ui_state_map -0x33a0 010293 set0 ui_state_bt_connected ,pdata -0x33a1 010294 set0 ui_state_bt_setup_complete ,pdata -0x33a2 010295 set0 ui_state_bt_hid_conn ,pdata -0x33a3 010296 set0 ui_state_bt_hid_handshake ,pdata -0x33a4 010297 set0 ui_state_bt_reconnect ,pdata -0x33a5 010298 store 2 ,mem_ui_state_map -0x33a6 010299 branch app_lpm_mult_disable -: 010301 app_bb_hibernate: -0x33a7 010302 call app_disconn_reason_clear -0x33a8 010303 branch app_enter_hibernate -: 010306 app_disconn_reason_clear: -0x33a9 010307 setarg 0 -0x33aa 010308 store app_disc_rsn_size ,mem_app_disconn_reason -0x33ab 010309 rtn -: 010310 app_disconn_reason_flag_clear: -0x33ac 010311 setarg 0 -0x33ad 010312 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33ae 010313 rtn -: 010315 app_disconn_reason_collect_bt: -0x33af 010316 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b0 010317 store app_disc_rsn_size ,mem_app_disconn_reason -0x33b1 010318 setarg 0 -0x33b2 010319 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b3 010320 rtn -: 010322 app_disconn_reason_collect_ble: -0x33b4 010323 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b5 010324 set1 app_disc_ble ,pdata -0x33b6 010325 store app_disc_rsn_size ,mem_app_disconn_reason -0x33b7 010326 setarg 0 -0x33b8 010327 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b9 010328 rtn -: 010336 app_check_sniff: -0x33ba 010337 fetch 1 ,mem_ui_state_map -0x33bb 010338 isolate1 ui_state_bt_sniff ,pdata -0x33bc 010339 rtn -: 010347 app_initflag_store: -0x33bd 010348 setarg eeprom_init_flag -: 010349 app_flag_store: -0x33be 010350 store 2 ,mem_timeup -0x33bf 010351 bpatch patch19_1 ,mem_patch19 -0x33c0 010352 arg 2 ,temp -0x33c1 010353 arg mem_timeup ,rega -0x33c2 010354 arg eeprom_module_init_flag ,regb -0x33c3 010355 branch iicd_write_eep_data -: 010358 app_initflag_check: -0x33c4 010359 bpatch patch19_2 ,mem_patch19 -0x33c5 010360 arg 2 ,temp -0x33c6 010361 arg mem_pdatatemp ,rega -0x33c7 010362 arg eeprom_module_init_flag ,regb -0x33c8 010363 call iicd_read_eep_data -0x33c9 010364 fetch 2 ,mem_pdatatemp -0x33ca 010365 arg eeprom_init_flag ,temp -0x33cb 010366 isub temp ,null -0x33cc 010367 rtn -: 010370 app_start_auto_sniff: -0x33cd 010371 fetch 1 ,mem_unsniff2sniff_timer -0x33ce 010372 store 1 ,mem_unsniff2sniff_timer_count -0x33cf 010373 rtn -: 010375 app_get_lpm_wake_lock: -0x33d0 010376 arg wake_lock_app ,queue -0x33d1 010377 branch lpm_get_wake_lock -: 010379 app_put_lpm_wake_lock: -0x33d2 010380 arg wake_lock_app ,queue -0x33d3 010381 branch lpm_put_wake_lock -: 010383 app_lpm_wake_auto_lock: -0x33d4 010384 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer -0x33d5 010385 branch app_get_lpm_wake_lock -: 010387 app_lpm_wake_auto_lock_timer: -0x33d6 010388 arg mem_wake_up_delay_timer ,regc -0x33d7 010389 arg app_put_lpm_wake_lock ,regb -0x33d8 010390 branch timer_single_step -: 010392 app_l2cap_flow_control_enable: -0x33d9 010393 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag -0x33da 010394 rtn -: 010396 app_l2cap_flow_control_disable: -0x33db 010397 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag -0x33dc 010398 rtn -: 010400 app_bt_set_pincode: -0x33dd 010401 jam bt_cmd_set_pin_code ,mem_fifo_temp -0x33de 010402 branch ui_ipc_send_cmd -: 010404 app_bt_role_switch: -0x33df 010405 jam bt_cmd_role_switch ,mem_fifo_temp -0x33e0 010406 branch ui_ipc_send_cmd -: 010408 app_bt_start_reconnect: -0x33e1 010409 bpatch patch19_3 ,mem_patch19 -0x33e2 010410 fetch 1 ,mem_app_connection_options -0x33e3 010411 store 1 ,mem_connection_options -0x33e4 010412 jam app_flag_reconnect ,mem_reconnect_flag -0x33e5 010413 jam bt_cmd_reconnect ,mem_fifo_temp -0x33e6 010414 branch ui_ipc_send_cmd -: 010416 app_bt_reconnect_cancel: -0x33e7 010417 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp -0x33e8 010418 branch ui_ipc_send_cmd -: 010420 app_bt_disconnect: -0x33e9 010421 jam bt_cmd_disconnect ,mem_fifo_temp -0x33ea 010422 branch ui_ipc_send_cmd -: 010424 app_bt_start_discovery_short: -0x33eb 010425 fetch 2 ,mem_discovery_timeout -0x33ec 010426 store 2 ,mem_discovery_timeout_timer_count -: 010427 app_bt_start_discovery_led_blink: -0x33ed 010428 call app_led_start_blink -: 010429 app_bt_start_discovery: -0x33ee 010430 jam bt_cmd_start_discovery ,mem_fifo_temp -0x33ef 010431 branch ui_ipc_send_cmd -: 010433 app_bt_stop_discovery: -0x33f0 010434 setarg 0 -0x33f1 010435 store 2 ,mem_discovery_timeout_timer_count -0x33f2 010436 jam bt_cmd_stop_discovery ,mem_fifo_temp -0x33f3 010437 branch ui_ipc_send_cmd -: 010439 app_ble_start_direct_adv: -0x33f4 010440 jam bt_cmd_start_direct_adv ,mem_fifo_temp -0x33f5 010441 branch ui_ipc_send_cmd -: 010443 app_ble_stop_direct_adv: -0x33f6 010444 jam bt_cmd_stop_direct_adv ,mem_fifo_temp -0x33f7 010445 branch ui_ipc_send_cmd -: 010447 app_ble_stop_adv: -0x33f8 010448 jam bt_cmd_stop_adv ,mem_fifo_temp -0x33f9 010449 branch ui_ipc_send_cmd -: 010451 app_ble_start_adv: -0x33fa 010452 jam bt_cmd_start_adv ,mem_fifo_temp -0x33fb 010453 branch ui_ipc_send_cmd -: 010455 app_ble_start_scan: -0x33fc 010456 jam bt_cmd_le_start_scan ,mem_fifo_temp -0x33fd 010457 branch ui_ipc_send_cmd -: 010459 app_ble_stop_scan: -0x33fe 010460 jam bt_cmd_le_stop_scan ,mem_fifo_temp -0x33ff 010461 branch ui_ipc_send_cmd -: 010463 app_ble_start_conn: -0x3400 010464 jam bt_cmd_le_start_conn ,mem_fifo_temp -0x3401 010465 branch ui_ipc_send_cmd -: 010467 app_ble_disconnect: -0x3402 010468 jam bt_cmd_le_disconnect ,mem_fifo_temp -0x3403 010469 branch ui_ipc_send_cmd -: 010471 app_led_start_blink: -0x3404 010472 jam bt_cmd_led_blink ,mem_fifo_temp -0x3405 010473 branch ui_ipc_send_cmd -: 010475 app_led_on: -0x3406 010476 jam bt_cmd_led_on ,mem_fifo_temp -0x3407 010477 branch ui_ipc_send_cmd -: 010479 app_led_stop_blink: -: 010480 app_led_off: -0x3408 010481 jam bt_cmd_led_off ,mem_fifo_temp -0x3409 010482 branch ui_ipc_send_cmd -: 010484 app_enter_hibernate: -0x340a 010485 jam bt_cmd_enter_hibernate ,mem_fifo_temp -0x340b 010486 branch ui_ipc_send_cmd -: 010488 app_bt_sniff_exit: -0x340c 010489 jam bt_cmd_exit_sniff ,mem_fifo_temp -0x340d 010490 branch ui_ipc_send_cmd -: 010492 app_bt_enter_sniff: -0x340e 010493 jam bt_cmd_enter_sniff ,mem_fifo_temp -0x340f 010494 branch ui_ipc_send_cmd -: 010496 app_ble_store_reconn_info: -0x3410 010497 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp -0x3411 010498 branch ui_ipc_send_cmd -: 010500 app_bt_store_reconn_info: -0x3412 010501 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp -0x3413 010502 branch ui_ipc_send_cmd -: 010504 app_store_reconn_info: -0x3414 010505 jam bt_cmd_store_reconn_info ,mem_fifo_temp -0x3415 010506 branch ui_ipc_send_cmd -: 010508 app_lpm_mult_enable: -0x3416 010509 set1 mark_lpm_mult_enable ,mark -0x3417 010510 rtn -: 010512 app_lpm_mult_disable: -0x3418 010513 set0 mark_lpm_mult_enable ,mark -0x3419 010514 rtn -: 010534 app_button_long_pressed: -0x341a 010535 call app_got_power_state_common -0x341b 010536 beq power_standby ,app_power_shutting_down -: 010537 app_power_starting: -0x341c 010538 setarg power_starting -0x341d 010539 istore 1 ,regc -0x341e 010540 add temp ,power_starting_timeout_offset ,rega -0x341f 010541 add temp ,power_starting_cb_offset ,regb -: 010542 app_power_common: -0x3420 010543 ifetcht 1 ,rega -0x3421 010544 increase 1 ,regc -0x3422 010545 istoret 1 ,regc -0x3423 010546 branch app_power_cb_common -: 010548 app_power_shutting_down: -0x3424 010549 setarg power_off -0x3425 010550 istore 1 ,regc -0x3426 010551 fetch 2 ,mem_ui_state_map -0x3427 010552 bbit0 ui_state_ble_connected ,app_power_off_end -0x3428 010553 call app_ble_disconnect -: 010554 app_power_off_end: -0x3429 010555 fetcht 2 ,mem_power_param_ptr -0x342a 010556 add temp ,power_off_timeout_offset ,rega -0x342b 010557 add temp ,power_off_cb_offset ,regb -0x342c 010558 branch app_power_common -: 010560 app_got_power_state_common: -0x342d 010561 fetcht 2 ,mem_power_param_ptr -0x342e 010562 add temp ,power_state_offset ,regc -0x342f 010563 ifetch 1 ,regc -0x3430 010564 rtn -: 010566 app_event_button_up: -0x3431 010567 call app_got_power_state_common -0x3432 010568 bne power_off ,app_power_release -0x3433 010569 branch app_enter_hibernate -: 010570 app_power_release: -0x3434 010571 add temp ,ui_butten_up_cb_offset ,regb -0x3435 010572 branch app_power_cb_common -: 010574 antilost_init: -0x3436 010575 rtn wake -0x3437 010576 jam 0x00 ,core_gpio_sel1 -0x3438 010577 setarg antilost_le_before_hibernate -0x3439 010578 store 2 ,mem_cb_before_hibernate -0x343a 010579 setarg keyscan_process_lpm_before -0x343b 010580 store 2 ,mem_cb_before_lpm -0x343c 010581 setarg antilost_idle_process -0x343d 010582 store 2 ,mem_cb_idle_process -0x343e 010583 setarg antilost_le_conn_process -0x343f 010584 store 2 ,mem_cb_le_process -0x3440 010585 setarg antilost_bb_event_process -0x3441 010586 store 2 ,mem_cb_bb_event_process -0x3442 010587 setarg antilost_le_bb_event_timer -0x3443 010588 store 2 ,mem_cb_event_timer -0x3444 010589 setarg antilost_le_notification -0x3445 010590 store 2 ,mem_cb_ble_transmit -0x3446 010591 setarg antilost_lpm_lock_process -0x3447 010592 store 2 ,mem_cb_check_wakelock -0x3448 010593 setarg antilost_le_receive_data_process -0x3449 010594 store 2 ,mem_cb_att_write -0x344a 010595 bpatch patch19_4 ,mem_patch19 -0x344b 010596 call antilost_buzzer_pwm_init -0x344c 010597 call keyscan_key_init -0x344d 010598 call antilost_adc_init -0x344e 010599 call ui_led_init_global -0x344f 010600 call ui_button_init -0x3450 010601 setarg antilost_key_up_down -0x3451 010602 store 2 ,mem_cb_antl_key -0x3452 010603 setarg antilost_power_off_cb -0x3453 010604 store 2 ,mem_antl_power_off_cb -0x3454 010605 setarg antilost_power_starting_cb -0x3455 010606 store 2 ,mem_antl_power_starting_cb -0x3456 010607 setarg antilost_power_standby_cb -0x3457 010608 store 2 ,mem_antl_power_standby_cb -0x3458 010609 setarg antilost_led_on_cb -0x3459 010610 store 2 ,mem_antl_led_cb_on -0x345a 010611 setarg antilost_led_off_cb -0x345b 010612 store 2 ,mem_antl_led_cb_off -0x345c 010613 setarg antilost_buzzer_on -0x345d 010614 store 2 ,mem_antl_buzzer_cb_on -0x345e 010615 setarg antilost_buzzer_off -0x345f 010616 store 2 ,mem_antl_buzzer_cb_off -0x3460 010617 fetch 2 ,mem_ui_state_map -0x3461 010618 rtnbit1 ui_state_btn_down -0x3462 010619 branch app_enter_hibernate -: 010621 antilost_le_before_hibernate: -0x3463 010622 call antilost_led_buzzer_stop_blink -0x3464 010623 branch app_enter_hibernate -: 010625 antilost_le_notification: -0x3465 010626 call le_fifo_check_nearly_full -0x3466 010627 nrtn blank -0x3467 010628 arg mem_temp_block5 ,rega -0x3468 010629 call queue_pop -0x3469 010630 nrtn user -0x346a 010631 arg mem_temp_block5 ,contr -0x346b 010632 branch le_send_notify_from_list -: 010634 antilost_power_standby_cb: -0x346c 010635 fetch 2 ,mem_antl_le_sleep_timeout -0x346d 010636 store 2 ,mem_antl_le_sleep_timer -0x346e 010637 jam 1 ,mem_antl_key_scan_enable -0x346f 010638 branch antilost_fast_adv_start -: 010640 antilost_lpm_lock_process: -0x3470 010641 fetch 1 ,mem_antl_key_state -0x3471 010642 beq 1 ,antilost_lpm_ctrl_for_led_buzzer -0x3472 010643 fetch 2 ,mem_ui_state_map -0x3473 010644 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer -0x3474 010645 fetch 1 ,mem_antl_lost_mode -0x3475 010646 beq 1 ,app_get_lpm_wake_lock -0x3476 010647 fetch 1 ,mem_antl_queue_curr_num -0x3477 010648 nbranch app_get_lpm_wake_lock ,blank -0x3478 010649 branch app_put_lpm_wake_lock -: 010651 antilost_lpm_ctrl_for_led_buzzer: -0x3479 010652 fetch 1 ,mem_antl_led_state -0x347a 010653 fetcht 1 ,mem_antl_buzzer_state -0x347b 010654 ior temp ,pdata -0x347c 010655 beq 1 ,app_get_lpm_wake_lock -0x347d 010656 branch app_put_lpm_wake_lock -: 010658 antilost_bb_event_process: -0x347e 010659 copy regc ,pdata -0x347f 010660 beq bt_evt_button_up ,app_event_button_up -0x3480 010661 beq bt_evt_button_long_pressed ,app_button_long_pressed -0x3481 010662 beq bt_evt_le_connected ,antilost_le_process_conn -0x3482 010663 beq bt_evt_le_disconnected ,antilost_le_process_discon -0x3483 010664 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved -0x3484 010665 rtn -: 010666 antilost_le_conn_param_update_rsp_recieved: -0x3485 010667 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x3486 010668 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected -: 010669 antilost_le_conn_param_accepted: -0x3487 010670 fetch 2 ,mem_le_new_connslavelatency -0x3488 010671 branch antilost_master_nonsupport_latency ,blank -: 010672 antilost_le_conn_param_updata_procedure_sucsess: -0x3489 010673 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state -0x348a 010674 jam 60 ,mem_antl_conn_update_timer -0x348b 010675 rtn -: 010677 antilost_le_conn_param_rejected: -0x348c 010678 fetch 2 ,mem_le_latency -0x348d 010679 branch antilost_conn_param_updata_procedure_faild ,blank -: 010680 antilost_conn_param_retransimiting: -0x348e 010681 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state -0x348f 010682 fetcht 2 ,mem_interval_increment -0x3490 010683 fetch 2 ,mem_le_interval_min -0x3491 010684 iadd temp ,pdata -0x3492 010685 store 2 ,mem_le_interval_min -0x3493 010686 copy pdata ,rega -0x3494 010687 fetch 2 ,mem_le_interval_max -0x3495 010688 iadd temp ,pdata -0x3496 010689 store 2 ,mem_le_interval_max -0x3497 010690 iadd rega ,pdata -0x3498 010691 rshift pdata ,temp -0x3499 010692 fetch 2 ,mem_antl_le_unnormal_interval_max -0x349a 010693 idiv temp -0x349b 010694 call wait_div_end -0x349c 010695 quotient pdata -0x349d 010696 store 2 ,mem_le_latency -0x349e 010697 jam 1 ,mem_antl_send_updata_le_param_timer -0x349f 010698 rtn -: 010699 antilost_conn_param_updata_procedure_faild: -0x34a0 010700 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state -0x34a1 010701 rtn -: 010703 antilost_master_nonsupport_latency: -0x34a2 010704 jam 0 ,mem_lpm_mult -0x34a3 010705 jam 0 ,mem_antl_send_updata_le_param_timer -0x34a4 010706 fetch 2 ,mem_le_new_conninterval -0x34a5 010707 fetcht 2 ,mem_antl_le_unnormal_interval_min -0x34a6 010708 isub temp ,null -0x34a7 010709 setflag positive ,0 ,rega -0x34a8 010710 fetch 2 ,mem_antl_le_unnormal_interval_max -0x34a9 010711 fetcht 2 ,mem_le_new_conninterval -0x34aa 010712 isub temp ,pdata -0x34ab 010713 setflag positive ,1 ,rega -0x34ac 010714 compare 0x03 ,rega ,0x03 -0x34ad 010715 rtn true -0x34ae 010716 fetch 8 ,mem_antl_le_unnormal_interval_min -0x34af 010717 store 8 ,mem_le_interval_min -0x34b0 010718 jam 1 ,mem_antl_send_updata_le_param_timer -0x34b1 010719 rtn -: 010722 antilost_le_bb_event_timer: -0x34b2 010724 call app_power_timer -0x34b3 010725 call antilost_double_click_timer -0x34b4 010726 call antilost_le_fast_adv_timer -0x34b5 010727 call antilost_le_sleep_timer -0x34b6 010728 call antilost_app_updata_le_param_timer -0x34b7 010729 call antilost_conn_update_timer -0x34b8 010730 branch antilost_adc_check_timer -: 010733 antilost_double_click_timer: -0x34b9 010734 arg mem_double_click_timer ,regc -0x34ba 010735 arg antilost_double_click_timeout ,regb -0x34bb 010736 branch timer_single_step -: 010737 antilost_double_click_timeout: -0x34bc 010738 jam 0 ,mem_butten_click_cnt -0x34bd 010739 rtn -: 010740 antilost_le_fast_adv_timer: -0x34be 010741 arg mem_antl_fast_adv_timer ,regc -0x34bf 010742 arg antilost_le_fast_adv_timeout ,regb -0x34c0 010743 branch timer_single_step_2b -: 010744 antilost_le_fast_adv_timeout: -0x34c1 010745 arg mem_antl_slow_adv_led_style ,regc -0x34c2 010746 arg mem_antl_slow_adv_lpm_interval ,regb -0x34c3 010747 branch antilost_adv_start_common -: 010750 antilost_conn_update_timer: -0x34c4 010751 arg mem_antl_conn_update_timer ,regc -0x34c5 010752 arg antilost_conn_update_timer_time_out ,regb -0x34c6 010753 branch timer_single_step -: 010755 antilost_conn_update_timer_time_out: -0x34c7 010756 fetch 2 ,mem_le_latency -0x34c8 010757 store 1 ,mem_lpm_mult -0x34c9 010758 rtn -: 010759 antilost_app_updata_le_param_timer: -0x34ca 010760 arg mem_antl_send_updata_le_param_timer ,regc -0x34cb 010761 arg antilost_app_updata_le_param_timeout ,regb -0x34cc 010762 branch timer_single_step -: 010763 antilost_app_updata_le_param_timeout: -0x34cd 010764 fetch 1 ,mem_le_state -0x34ce 010765 compare 0 ,pdata ,0x60 -0x34cf 010766 nbranch antilost_wait_for_updata_param_instant_expire ,true -0x34d0 010767 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state -0x34d1 010768 call app_lpm_mult_enable -0x34d2 010769 branch le_l2cap_tx_update_req -: 010770 antilost_wait_for_updata_param_instant_expire: -0x34d3 010771 jam 1 ,mem_antl_send_updata_le_param_timer -0x34d4 010772 rtn -: 010774 antilost_le_sleep_timer: -0x34d5 010775 arg mem_antl_le_sleep_timer ,regc -0x34d6 010776 arg antilost_le_sleep_timer_timeout ,regb -0x34d7 010777 branch timer_single_step_2b -: 010780 antilost_le_sleep_timer_timeout: -0x34d8 010781 branch app_button_long_pressed -: 010783 antilost_adc_check_timer: -0x34d9 010786 arg mem_adc_timer ,regc -0x34da 010787 arg antilost_adc_check_timer_timeout ,regb -0x34db 010788 branch timer_single_step_2b -: 010789 antilost_adc_check_timer_timeout: -0x34dc 010790 fetch 2 ,mem_adc_timeout -0x34dd 010791 store 2 ,mem_adc_timer -0x34de 010792 branch antilost_battery_process -: 010795 antilost_le_process_conn: -0x34df 010796 fetch 2 ,mem_adc_timeout -0x34e0 010797 store 2 ,mem_adc_timer -0x34e1 010798 setarg 0 -0x34e2 010799 store 2 ,mem_antl_fast_adv_timer -0x34e3 010800 store 2 ,mem_antl_le_sleep_timer -0x34e4 010801 call antilost_alert_off -0x34e5 010802 call antilost_led_buzzer_stop_blink -0x34e6 010803 jam 0 ,mem_lpm_mult -0x34e7 010804 branch app_ble_stop_adv -: 010807 antilost_le_process_discon: -0x34e8 010810 setarg 0 -0x34e9 010811 store 4 ,mem_adc_timer -0x34ea 010812 store 3 ,mem_antl_conn_updata_procedure_state -0x34eb 010813 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x34ec 010815 jam 1 ,mem_alarm_config_notfy_cnt -0x34ed 010816 fetch 2 ,mem_antl_le_sleep_timeout -0x34ee 010817 store 2 ,mem_antl_le_sleep_timer -0x34ef 010818 call queue_init -0x34f0 010819 fetch 1 ,mem_antl_power_state -0x34f1 010820 rtneq power_off -0x34f2 010821 call antilost_fast_adv_start -0x34f3 010822 branch antilost_on_off_alarm_after_disconn -: 010825 antilost_le_conn_process: -0x34f4 010827 branch antilost_key_process -: 010829 antilost_idle_process: -0x34f5 010831 fetch 1 ,mem_antl_power_state -0x34f6 010832 rtnne power_standby -0x34f7 010833 branch antilost_key_process -: 010838 antilost_power_starting_cb: -0x34f8 010839 arg mem_antl_power_starting_buzzer_style ,regc -0x34f9 010840 call antilost_buzzer_configuration -0x34fa 010841 arg mem_antl_power_starting_led_style ,regc -: 010842 antilost_power_common: -0x34fb 010843 branch antilost_led_configuration -: 010845 antilost_power_off_cb: -0x34fc 010846 jam off ,mem_le_adv_enable -0x34fd 010847 arg mem_antl_power_off_buzzer_style ,regc -0x34fe 010848 call antilost_buzzer_configuration -0x34ff 010849 arg mem_antl_power_off_led_style ,regc -0x3500 010850 branch antilost_power_common -: 010852 antilost_le_receive_data_process: -0x3501 010853 fetch 1 ,mem_le_att_opcode -0x3502 010854 beq attop_write_request ,antilost_le_parse_att_write_request -0x3503 010855 rtn -: 010856 antilost_le_parse_att_write_request: -0x3504 010857 fetch 2 ,mem_le_att_handle -0x3505 010859 beq new_spec_write_handle ,antilost_cmd_parse_for_application -0x3506 010860 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time -0x3507 010861 rtn -: 010866 antilost_key_process: -0x3508 010867 fetch 1 ,mem_antl_key_scan_enable -0x3509 010868 rtn blank -0x350a 010869 branch keyscan_key_process -: 010873 antilost_key_up_down: -0x350b 010874 copy rega ,pdata -0x350c 010875 branch antilost_key_is_up ,blank -: 010876 antilost_key_is_down: -0x350d 010877 copy queue ,pdata -0x350e 010878 beq 0 ,antilost_key0_down -0x350f 010879 rtn -: 010880 antilost_key_is_up: -0x3510 010881 copy queue ,pdata -0x3511 010882 beq 0 ,antilost_key0_up -0x3512 010883 rtn -: 010885 antilost_key0_down: -0x3513 010886 jam 1 ,mem_antl_key_state -0x3514 010887 arg mem_antl_key_buzzer_style ,regc -0x3515 010888 call antilost_buzzer_configuration -0x3516 010889 arg mem_antl_key_led_style ,regc -0x3517 010890 call antilost_led_configuration -0x3518 010891 fetch 2 ,mem_ui_state_map -0x3519 010892 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn -0x351a 010893 branch antilost_butten_down_after_conn -: 010895 antilost_key0_up: -0x351b 010896 jam 0 ,mem_antl_key_state -0x351c 010897 branch antilost_double_click_timer_init -: 010901 antilost_double_click_timer_init: -0x351d 010902 fetch 1 ,mem_butten_click_cnt -0x351e 010903 rtnne 1 -0x351f 010904 jam 5 ,mem_double_click_timer -0x3520 010905 rtn -: 010907 antilost_butten_down_after_conn: -0x3521 010908 fetch 1 ,mem_butten_click_cnt -0x3522 010909 pincrease 1 -0x3523 010910 store 1 ,mem_butten_click_cnt -0x3524 010911 beq 1 ,antilost_click_once -0x3525 010912 beq 2 ,antilost_click_twice -0x3526 010913 rtn -: 010914 antilost_click_once: -0x3527 010915 call antilost_alert_off -0x3528 010916 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 -0x3529 010917 arg mem_antl_key0_press ,regc -0x352a 010918 branch antilost_prepare_data_and_send -: 010919 antilost_click_twice: -0x352b 010920 jam 0 ,mem_butten_click_cnt -0x352c 010921 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 -0x352d 010922 arg mem_antl_key0_press ,regc -0x352e 010923 call antilost_prepare_data_and_send -0x352f 010924 fetch 1 ,mem_antl_lost_mode -0x3530 010925 beq 1 ,antilost_alert_on -0x3531 010926 rtn -: 010928 antilost_butten_down_while_disconn: -0x3532 010929 fetch 2 ,mem_antl_le_sleep_timeout -0x3533 010930 store 2 ,mem_antl_le_sleep_timer -0x3534 010931 call antilost_alert_off -0x3535 010932 branch antilost_fast_adv_start -: 010935 antilost_cmd_parse_for_application: -0x3536 010936 bpatch patch19_5 ,mem_patch19 -0x3537 010937 call le_app_receive_data -0x3538 010938 ifetch 1 ,rega -0x3539 010939 beq opcode3_antl_start_alram ,antilost_on_of_alram -0x353a 010940 beq opcode7_antl_config_alram ,antilost_configuration_for_alram -0x353b 010941 rtn -: 010943 antilost_on_of_alram: -0x353c 010944 fetch 1 ,mem_antl_lost_mode -0x353d 010945 beq anti_le_alarm_off ,antilost_alert_on -0x353e 010946 beq anti_le_alarm_on ,antilost_alert_off -0x353f 010947 rtn -: 010949 antilost_configuration_for_alram: -0x3540 010950 ifetch 1 ,regb -0x3541 010951 beq 1 ,antilost_set_start_alarm_after_disconn -0x3542 010952 beq 0 ,antilost_set_no_alarm_after_disconn -0x3543 010953 rtn -: 010960 antilost_prepare_data_and_send: -0x3544 010961 bpatch patch19_6 ,mem_patch19 -0x3545 010962 fetch 1 ,mem_client_characteristic_configuration_descriptor -0x3546 010963 isolate1 notification_enable_bit ,pdata -0x3547 010964 nrtn true -0x3548 010965 add regc ,6 ,contr -0x3549 010966 ifetch 2 ,contr -0x354a 010967 byteswap pdata ,pdata -0x354b 010968 add pdata ,5 ,loopcnt -0x354c 010969 add regc ,3 ,contr -0x354d 010970 call calc_check_sum_start -0x354e 010971 istore 1 ,contr -0x354f 010972 copy regc ,rega -0x3550 010973 branch queue_push -: 010979 antilost_alert_on: -0x3551 010980 fetch 1 ,mem_antl_power_state -0x3552 010981 rtn blank -0x3553 010982 jam 1 ,mem_antl_lost_mode -0x3554 010983 arg mem_antl_alert_buzzer_stlye ,regc -0x3555 010984 call antilost_buzzer_configuration -0x3556 010985 arg mem_antl_alert_led_stlye ,regc -0x3557 010986 call antilost_led_configuration -0x3558 010987 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 -0x3559 010988 jam 1 ,mem_antl_key0_release + 8 -0x355a 010989 arg mem_antl_key0_release ,regc -0x355b 010990 branch antilost_prepare_data_and_send -: 010991 antilost_alert_off: -0x355c 010992 fetch 1 ,mem_antl_lost_mode -0x355d 010993 rtn blank -0x355e 010994 jam 0 ,mem_antl_lost_mode -0x355f 010995 call antilost_led_buzzer_stop_blink -0x3560 010996 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 -0x3561 010997 jam 0 ,mem_antl_key0_release + 8 -0x3562 010998 arg mem_antl_key0_release ,regc -0x3563 010999 branch antilost_prepare_data_and_send -: 011001 antilost_set_start_alarm_after_disconn: -0x3564 011002 jam 1 ,mem_alarm_config -0x3565 011003 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 -0x3566 011004 jam 1 ,mem_antl_key0_release + 8 -0x3567 011005 arg mem_antl_key0_release ,regc -0x3568 011006 branch antilost_prepare_data_and_send -: 011007 antilost_set_no_alarm_after_disconn: -0x3569 011008 jam 0 ,mem_alarm_config -0x356a 011009 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 -0x356b 011010 jam 0 ,mem_antl_key0_release + 8 -0x356c 011011 arg mem_antl_key0_release ,regc -0x356d 011012 branch antilost_prepare_data_and_send -: 011013 antilost_on_off_alarm_after_disconn: -0x356e 011014 fetch 1 ,mem_alarm_config -0x356f 011015 rtn blank -0x3570 011016 branch antilost_alert_on -: 011018 antilost_notify_alarm_config_first_time: -0x3571 011019 ifetch 2 ,rega -0x3572 011020 store 2 ,mem_client_characteristic_configuration_descriptor -0x3573 011021 isolate1 notification_enable_bit ,pdata -0x3574 011022 nrtn true -0x3575 011023 fetch 1 ,mem_alarm_config_notfy_cnt -0x3576 011024 rtn blank -0x3577 011025 jam 0 ,mem_alarm_config_notfy_cnt -0x3578 011026 fetch 8 ,mem_antl_le_interval_min -0x3579 011027 store 8 ,mem_le_interval_min -0x357a 011028 jam 2 ,mem_antl_send_updata_le_param_timer -0x357b 011029 call antilost_battery_process -0x357c 011030 call antilost_battery_calculate_end -0x357d 011031 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 -0x357e 011032 fetch 1 ,mem_alarm_config -0x357f 011033 store 1 ,mem_antl_key0_release + 8 -0x3580 011034 arg mem_antl_key0_release ,regc -0x3581 011035 branch antilost_prepare_data_and_send -: 011039 antilost_buzzer_configuration: -0x3582 011040 arg 1 ,rega -0x3583 011041 branch antilost_configuration_common -: 011042 antilost_led_configuration: -0x3584 011043 arg 0 ,rega -: 011044 antilost_configuration_common: -0x3585 011045 branch antilost_led_buzzer_style_configuration -: 011047 antilost_led_buzzer_stop_blink: -0x3586 011048 arg 0 ,rega -0x3587 011049 call ui_led_blink_stop_global -0x3588 011050 arg 1 ,rega -0x3589 011051 call ui_led_blink_stop_global -0x358a 011052 fetch 1 ,mem_buzzer_pwm_conf -0x358b 011053 branch pwm_disable -: 011055 antilost_led_buzzer_style_configuration: -0x358c 011056 call calc_curr_struct_prt -0x358d 011057 arg 7 ,loopcnt -0x358e 011058 branch ui_led_set_style_global + 2 -: 011062 antilost_fast_adv_start: -0x358f 011063 arg mem_antl_fast_adv_led_style ,regc -0x3590 011064 arg mem_antl_lpm_interval ,regb -: 011065 antilost_adv_start_common: -0x3591 011066 call antilost_adv_interval_lpm_interval_set -0x3592 011067 call antilost_led_configuration -0x3593 011068 fetch 2 ,mem_antl_fast_adv_timeout -0x3594 011069 store 2 ,mem_antl_fast_adv_timer -0x3595 011070 branch app_ble_start_adv -: 011072 antilost_adv_interval_lpm_interval_set: -0x3596 011073 ifetch 2 ,regb -0x3597 011074 store 2 ,mem_lpm_interval -0x3598 011075 ifetch 2 ,contr -0x3599 011076 store 2 ,mem_le_adv_interval -0x359a 011077 rtn -: 011079 antilost_buzzer_pwm_init: -0x359b 011080 arg 0 ,rega -0x359c 011081 call pwm_init -0x359d 011082 fetch 6 ,mem_buzzer_pwm_conf -0x359e 011083 store 6 ,mem_pdatatemp -0x359f 011084 call pwm_out_set -0x35a0 011085 fetch 1 ,mem_buzzer_pwm_conf -0x35a1 011086 branch pwm_disable -: 011088 antilost_led_on_cb: -0x35a2 011089 jam 1 ,mem_antl_led_state -0x35a3 011090 rtn -: 011091 antilost_led_off_cb: -0x35a4 011092 jam 0 ,mem_antl_led_state -0x35a5 011093 rtn -: 011097 antilost_buzzer_off: -0x35a6 011098 jam 0 ,mem_antl_buzzer_state -0x35a7 011099 fetch 1 ,mem_buzzer_pwm_conf -0x35a8 011100 branch pwm_disable -: 011102 antilost_buzzer_on: -0x35a9 011103 jam 1 ,mem_antl_buzzer_state -0x35aa 011104 fetch 6 ,mem_buzzer_pwm_conf -0x35ab 011105 store 6 ,mem_pdatatemp -0x35ac 011106 branch pwm_out_set -: 011110 antilost_adc_init: -0x35ad 011111 jam 0 ,mem_adc_config_flag -0x35ae 011112 branch adc_init_data -: 011114 antilost_battery_process: -0x35af 011115 call adc_set_mode -0x35b0 011116 call vdd_calculate_by_mode -0x35b1 011117 store 2 ,mem_battery_current_voltage -0x35b2 011118 arg mem_battery_calculate_set ,rega -0x35b3 011119 call adc_bat_percent_lowpower_out -0x35b4 011120 store 1 ,mem_voltage_remain_percent -0x35b5 011121 beq 0 ,antilost_low_battery -0x35b6 011122 sub pdata ,0x64 ,null -0x35b7 011123 nbranch antilost_full_battery ,positive -0x35b8 011124 store 1 ,mem_antl_key0_release + 8 -: 011125 antilost_battery_calculate_end: -0x35b9 011126 jam opcode5_batter_information ,mem_antl_key0_release + 5 -0x35ba 011127 arg mem_antl_key0_release ,regc -0x35bb 011128 branch antilost_prepare_data_and_send -: 011129 antilost_full_battery: -0x35bc 011130 jam 100 ,mem_antl_key0_release + 8 -0x35bd 011131 branch antilost_battery_calculate_end -: 011133 antilost_low_battery: -0x35be 011134 branch app_button_long_pressed -: 011138 car_init: -0x35bf 011139 rtn wake -0x35c0 011140 hfetch 1 ,core_gpio_sel1 -0x35c1 011141 and_into 0xf0 ,pdata -0x35c2 011142 hstore 1 ,core_gpio_sel1 -0x35c3 011143 setarg car_le_before_hibernate -0x35c4 011144 store 2 ,mem_cb_before_hibernate -0x35c5 011146 setarg car_le_process_lpm_before -0x35c6 011147 store 2 ,mem_cb_before_lpm -0x35c7 011149 setarg app_enter_hibernate -0x35c8 011150 store 2 ,mem_cb_discovry_timeout -0x35c9 011152 setarg car_scale_process_idle -0x35ca 011153 store 2 ,mem_cb_idle_process -0x35cb 011155 setarg car_scale_process_bb_event -0x35cc 011156 store 2 ,mem_cb_bb_event_process -0x35cd 011158 setarg app_get_lpm_wake_lock -0x35ce 011159 store 2 ,mem_cb_check_wakelock -0x35cf 011161 setarg car_le_receive_data -0x35d0 011162 store 2 ,mem_cb_att_write -0x35d1 011164 setarg car_le_bb_event_timer -0x35d2 011165 store 2 ,mem_cb_event_timer -0x35d3 011167 call g24_head_ptr2regc -0x35d4 011168 setarg car_24g_receive_data -0x35d5 011169 add regc ,offset_24g_cb_rxdata_type1 ,contw -0x35d6 011170 istore 2 ,contw -0x35d7 011172 setarg car_power_off_signal -0x35d8 011173 store 2 ,mem_remote_car_power_off_cb -0x35d9 011175 setarg car_soft_switch_power_on_signal -0x35da 011176 store 2 ,mem_remote_car_power_standby_cb -0x35db 011178 bpatch patch19_7 ,mem_patch19 -0x35dc 011179 call car_init_environment -0x35dd 011180 call queue_init -0x35de 011181 jam 2 ,mem_lpm_mult -0x35df 011182 jam power_on ,mem_car_24g_received_pac -0x35e0 011183 fetch 1 ,mem_car_config_soft_switch_enable -0x35e1 011184 store 1 ,mem_car_hard_soft_switch -0x35e2 011185 beq hard_switch ,car_hard_switch_power_on_signal -0x35e3 011186 fetch 1 ,mem_car_config_soft_switch_gpio -0x35e4 011187 store 1 ,mem_ui_button_gpio -0x35e5 011188 jam off ,mem_le_adv_enable -: 011189 car_soft_switch_power_on_init: -0x35e6 011190 call car_ui_led_init -0x35e7 011191 call ui_button_init -0x35e8 011192 call ui_button_polling -0x35e9 011193 jam power_starting ,mem_car_power_state -0x35ea 011194 fetch 2 ,mem_ui_state_map -0x35eb 011195 rtnbit1 ui_state_btn_down -0x35ec 011196 branch app_enter_hibernate -: 011198 car_power_off_signal: -0x35ed 011199 branch car_ui_led_init -: 011201 car_hard_switch_power_on_signal: -0x35ee 011202 jam power_standby ,mem_car_power_state -: 011203 car_soft_switch_power_on_signal: -0x35ef 011204 jam on ,mem_le_adv_enable -0x35f0 011205 call car_ui_led_init -0x35f1 011206 arg 0 ,rega -0x35f2 011207 call ui_led_blink_start_global -0x35f3 011209 setarg fast_adv_interval_value_car -0x35f4 011210 call shutter_ble_adv_interval_set -: 011211 car_le_modified_name_adv: -0x35f5 011212 arg mem_le_name + 7 ,contw -0x35f6 011213 fetch 1 ,mem_le_lap -: 011214 car_name_loop: -0x35f7 011215 and pdata ,0xF0 ,temp -0x35f8 011216 rshift4 temp ,temp -0x35f9 011217 call car_hex_to_ascii -0x35fa 011218 istoret 1 ,contw -0x35fb 011219 and pdata ,0x0F ,temp -0x35fc 011220 call car_hex_to_ascii -0x35fd 011221 istoret 1 ,contw -0x35fe 011222 call le_modified_name_att_list -0x35ff 011223 fetcht 1 ,mem_le_name_len -0x3600 011224 copy temp ,loopcnt -0x3601 011225 arg mem_le_adv_data + 2 ,contw -0x3602 011226 arg mem_le_name ,contr -0x3603 011227 call memcpy -: 011228 car_le_modified_name_scan: -0x3604 011229 fetcht 1 ,mem_le_name_len -0x3605 011230 copy temp ,loopcnt -0x3606 011231 arg mem_le_scan_data + 2 ,contw -0x3607 011232 arg mem_le_name ,contr -0x3608 011233 branch memcpy -: 011234 car_hex_to_ascii: -0x3609 011235 sub temp ,9 ,null -0x360a 011236 branch car_hex_num ,positive -0x360b 011237 add temp ,55 ,temp -0x360c 011238 rtn -: 011239 car_hex_num: -0x360d 011240 add temp ,48 ,temp -0x360e 011241 rtn -: 011243 car_ui_led_init: -0x360f 011244 fetch 1 ,mem_car_config_blood_led1_gpio -0x3610 011245 bne invalid_pin_num ,car_blood_led_gpio_set -: 011246 car_ui_led_init_1: -0x3611 011247 fetch 1 ,mem_car_config_pairing_led_gpio -0x3612 011248 bne invalid_pin_num ,car_pairing_led_gpio_set -: 011249 car_ui_led_init_2: -0x3613 011250 fetch 1 ,mem_car_config_low_voltage_led_gpio -0x3614 011251 bne invalid_pin_num ,car_low_voltage_led_gpio_set -: 011252 car_ui_led_init_3: -0x3615 011253 fetch 1 ,mem_car_led_num -0x3616 011254 copy pdata ,loopcnt -0x3617 011255 setarg mem_car_led_map -0x3618 011256 copy pdata ,rega -: 011257 car_in_lp1: -0x3619 011258 copy rega ,contr -0x361a 011259 ifetch 1 ,contr -0x361b 011260 copy contr ,rega -0x361c 011261 beq invalid_pin_num ,car_in_lp1_end -0x361d 011262 copy pdata ,temp -0x361e 011263 call gpio_config_output -: 011264 car_in_lp1_end: -0x361f 011265 loop car_in_lp1 -: 011266 car_ui_led_init_end: -0x3620 011267 rtn -: 011268 car_blood_led_gpio_set: -0x3621 011269 fetch 8 ,mem_car_config_blood_led1_gpio -0x3622 011270 store 8 ,mem_car_led_map + 2 -0x3623 011271 branch car_ui_led_init_1 -: 011272 car_pairing_led_gpio_set: -0x3624 011273 store 1 ,mem_car_led_map -0x3625 011274 branch car_ui_led_init_2 -: 011275 car_low_voltage_led_gpio_set: -0x3626 011276 store 1 ,mem_car_led_map + 1 -0x3627 011277 branch car_ui_led_init_3 -: 011280 car_init_environment: -0x3628 011281 arg 0 ,rega -0x3629 011282 call pwm_init -0x362a 011283 call car_ir_rx_init -0x362b 011284 call g24_receive_process_init -0x362c 011285 branch car_init_adc_hvin -: 011287 car_init_adc_hvin: -0x362d 011288 jam 100 ,mem_car_notify_vdd_value_last -0x362e 011289 fetch 1 ,mem_car_config_low_voltage_led_gpio -0x362f 011290 store 1 ,mem_car_style2_struct_led_gpio -0x3630 011291 branch adc_init_data -: 011293 car_le_before_hibernate: -0x3631 011294 call gpio_set_before_lpm_common -0x3632 011295 branch keyscan_process_lpm_before -: 011297 car_le_process_lpm_before: -0x3633 011298 branch keyscan_process_lpm_before -: 011300 car_key_scan_process: -0x3634 011303 branch keyscan_key_process -: 011305 car_scale_process_idle: -0x3635 011306 call car_le_send_packet -0x3636 011307 call car_ir_receive_process -0x3637 011308 call car_g24_status_process -0x3638 011309 branch car_key_scan_process -: 011311 car_g24_status_process: -0x3639 011312 fetch 2 ,mem_ui_state_map -0x363a 011313 rtnbit1 ui_state_ble_connected -0x363b 011314 fetch 1 ,mem_car_24g_received_pac -0x363c 011315 beq work_paired ,car_g24_connected_event -0x363d 011316 rtn -: 011317 car_g24_connected_event: -0x363e 011318 fetch 1 ,mem_car_24g_status -0x363f 011319 rtneq work_paired -0x3640 011320 jam work_paired ,mem_car_24g_status -0x3641 011321 branch car_g24_connected -: 011323 car_le_send_packet: -0x3642 011324 fetch 2 ,mem_ui_state_map -0x3643 011325 rtnbit0 ui_state_ble_connected -0x3644 011326 call le_fifo_check_nearly_full -0x3645 011327 nrtn blank -0x3646 011328 arg mem_car_pop_queue_buff ,rega -0x3647 011329 call queue_pop -0x3648 011330 nrtn user -0x3649 011331 arg mem_car_pop_queue_buff ,contr -0x364a 011332 branch le_send_notify_from_list -: 011334 car_scale_process_bb_event: -0x364b 011335 copy regc ,pdata -0x364c 011336 beq bt_evt_button_up ,app_event_button_up -0x364d 011337 beq bt_evt_button_long_pressed ,app_button_long_pressed -0x364e 011338 beq bt_evt_le_connected ,car_scale_event_le_conn -0x364f 011339 beq bt_evt_le_disconnected ,car_scale_event_le_discon -0x3650 011340 rtn -: 011342 car_scale_event_le_conn: -0x3651 011343 setarg disable_24g -0x3652 011344 call g24_store_mem_24g_mode -0x3653 011345 branch car_scale_process_conn -: 011346 car_g24_connected: -0x3654 011347 fetch 2 ,mem_car_24g_no_data_timeout_count -0x3655 011348 store 2 ,mem_car_24g_no_data_timeout_timer -: 011349 car_scale_process_conn: -0x3656 011350 jam 0x14 ,mem_car_notify_vdd_timer -0x3657 011351 jam 0 ,mem_lpm_mode -0x3658 011352 call app_ble_stop_adv -0x3659 011353 call app_lpm_mult_enable -0x365a 011354 fetch 1 ,mem_car_config_pairing_led_conn_status -0x365b 011355 beq 0x01 ,car_pairing_led_conn_status_setting -: 011356 car_scale_process_conn_next: -0x365c 011357 arg 0 ,rega -0x365d 011358 branch ui_led_on_global -: 011359 car_pairing_led_conn_status_setting: -0x365e 011360 arg 0 ,rega -0x365f 011361 branch ui_led_blink_stop_global -: 011363 car_scale_event_le_discon: -0x3660 011364 setarg rx_24g -0x3661 011365 call g24_store_mem_24g_mode -: 011366 car_g24_disconnect: -0x3662 011367 setarg 0 -0x3663 011368 store 5 ,mem_car_led_control -0x3664 011369 setarg 4 -0x3665 011370 call pwm_disable -0x3666 011371 setarg 5 -0x3667 011372 call pwm_disable -0x3668 011373 setarg 20 -0x3669 011374 call pwm_disable -0x366a 011375 setarg 21 -0x366b 011376 call pwm_disable -0x366c 011377 setarg 22 -0x366d 011378 call pwm_disable -0x366e 011379 setarg 7 -0x366f 011380 call pwm_disable -0x3670 011381 call queue_init -0x3671 011382 jam 10 ,mem_motor1_speed -0x3672 011383 jam 10 ,mem_motor2_speed -0x3673 011384 jam 10 ,mem_motor3_speed -0x3674 011386 jam 2 ,mem_lpm_mult -0x3675 011387 arg 0 ,rega -0x3676 011388 call ui_led_blink_start_global -0x3677 011390 setarg fast_adv_interval_value_car -0x3678 011391 call shutter_ble_adv_interval_set -0x3679 011392 branch app_ble_start_adv -: 011394 car_le_bb_event_timer: -0x367a 011396 call car_moto1_blank_data_timer -0x367b 011397 call car_moto2_blank_data_timer -0x367c 011398 call car_moto3_blank_data_timer -0x367d 011399 call app_power_timer -0x367e 011400 call car_led_control_timer -0x367f 011401 call car_notify_vdd_timer -0x3680 011402 call car_24g_no_data_timeout_timer -0x3681 011403 call car_ir_breakdown_timer -0x3682 011404 branch car_attack_shake_timer -: 011406 car_ir_breakdown_timer: -0x3683 011407 arg mem_car_ir_breakdown_check_timer ,regc -0x3684 011408 arg car_ir_breakdown_timeout ,regb -0x3685 011409 branch timer_single_step -: 011410 car_ir_breakdown_timeout: -0x3686 011411 call car_ir_gpio_get_status -0x3687 011412 nrtn true -0x3688 011413 jam 1 ,mem_car_ir_breakdown_flag -0x3689 011414 rtn -: 011416 car_24g_no_data_timeout_timer: -0x368a 011417 arg mem_car_24g_no_data_timeout_timer ,regc -0x368b 011418 arg car_24g_no_data_timer_timeout ,regb -0x368c 011419 branch timer_single_step_2b -: 011420 car_24g_no_data_timer_timeout: -0x368d 011421 jam work_search ,mem_car_24g_status -0x368e 011422 branch car_g24_disconnect -: 011424 car_attack_shake_timer: -0x368f 011425 arg mem_car_attack_shake_timer ,regc -0x3690 011426 arg car_attack_shake ,regb -0x3691 011427 branch timer_single_step -: 011428 car_attack_shake: -0x3692 011429 fetch 1 ,mem_car_attack_shake_flag -0x3693 011430 branch car_attack_shake_stop ,blank -0x3694 011431 jam 2 ,mem_car_attack_shake_timer -0x3695 011432 jam 0 ,mem_car_attack_shake_flag -0x3696 011433 setarg 0x0a02 -0x3697 011434 store 2 ,mem_le_receive_payload -0x3698 011435 fetch 1 ,mem_car_config_device_select -0x3699 011436 beq device_battle_tank ,car_attack_shake_front_battle_tank -: 011437 car_attack_shake_front_battle_car: -0x369a 011438 branch car_motor_control -: 011439 car_attack_shake_front_battle_tank: -0x369b 011440 setarg 0x0a02 -0x369c 011441 store 2 ,mem_le_receive_payload + 2 -0x369d 011442 branch car_motor_control -: 011443 car_attack_shake_stop: -0x369e 011444 setarg 0 -0x369f 011445 store 4 ,mem_le_receive_payload -0x36a0 011446 branch car_motor_control -: 011448 car_notify_vdd_timer: -0x36a1 011449 fetch 1 ,mem_car_config_bat_notify_enable -0x36a2 011450 rtn blank -0x36a3 011451 fetch 2 ,mem_ui_state_map -0x36a4 011452 bbit0 ui_state_ble_connected ,car_low_bat_led_off -0x36a5 011453 arg mem_car_notify_vdd_timer ,regc -0x36a6 011454 arg car_notify_vdd ,regb -0x36a7 011455 branch timer_single_step -: 011456 car_notify_vdd: -0x36a8 011457 fetch 1 ,mem_car_notify_vdd_count -0x36a9 011458 store 1 ,mem_car_notify_vdd_timer -0x36aa 011459 fetch 1 ,mem_car_working_flag -0x36ab 011460 nrtn blank -: 011461 car_read_hvin: -0x36ac 011462 call adc_set_mode -0x36ad 011463 call vdd_calculate_by_mode -0x36ae 011464 store 2 ,mem_vdd_now_vol -0x36af 011465 arg mem_vdd_calculate_set ,rega -0x36b0 011466 call adc_bat_percent_lowpower_out -0x36b1 011467 fetcht 1 ,mem_car_notify_vdd_value_last -0x36b2 011468 isub temp ,null -0x36b3 011469 branch car_notify_vdd_next2 ,positive -0x36b4 011470 store 1 ,mem_car_notify_vdd_value_last -0x36b5 011471 copy pdata ,temp -: 011472 car_notify_vdd_next2: -0x36b6 011473 storet 1 ,mem_car_notify_vdd_percent -0x36b7 011474 fetch 1 ,mem_car_config_low_voltage_percent -0x36b8 011475 isub temp ,null -0x36b9 011476 call car_enter_low_bat ,positive -0x36ba 011477 storet 1 ,mem_notify_bat_payload -0x36bb 011478 arg 6 ,loopcnt -0x36bc 011479 arg mem_notify_bat_head ,contr -0x36bd 011480 call calc_check_sum_start -0x36be 011481 store 1 ,mem_notify_bat_check_sum -0x36bf 011482 arg mem_notify_bat_packet ,rega -0x36c0 011483 branch queue_push -: 011484 car_enter_low_bat: -0x36c1 011485 fetch 1 ,mem_low_bat_flag -0x36c2 011486 nrtn blank -0x36c3 011487 jam 1 ,mem_low_bat_flag -0x36c4 011488 arg 1 ,rega -0x36c5 011489 branch ui_led_blink_start_global -: 011490 car_low_bat_led_off: -0x36c6 011491 arg 1 ,rega -0x36c7 011492 branch ui_led_blink_stop_global -: 011494 car_led_control_timer: -0x36c8 011495 arg mem_car_led_control_timer ,regc -0x36c9 011496 arg car_led_control ,regb -0x36ca 011497 branch timer_single_step -: 011498 car_led_control: -0x36cb 011499 jam 5 ,mem_car_led_control_timer -0x36cc 011500 jam 0 ,mem_car_led_no -0x36cd 011501 fetch 1 ,mem_car_led_blink_status -0x36ce 011502 beq led_on ,car_led_control_blink_off -0x36cf 011503 beq led_off ,car_led_control_blink_on -: 011504 car_led_control_set: -0x36d0 011505 arg mem_car_led_control ,contr -0x36d1 011506 copy contr ,rega -0x36d2 011507 arg 8 ,loopcnt -: 011508 car_led_control_timer_next: -0x36d3 011509 copy rega ,contr -0x36d4 011510 ifetch 1 ,contr -0x36d5 011511 copy contr ,rega -0x36d6 011512 beq led_off ,car_led_control_off -0x36d7 011513 beq led_on ,car_led_control_on -0x36d8 011514 beq led_blink ,car_led_control_blink -: 011515 car_led_control_timer_next_2: -0x36d9 011516 fetch 1 ,mem_car_led_no -0x36da 011517 increase 1 ,pdata -0x36db 011518 store 1 ,mem_car_led_no -0x36dc 011519 loop car_led_control_timer_next -0x36dd 011520 rtn -: 011521 car_led_switch: -0x36de 011522 fetch 1 ,mem_car_led_no -0x36df 011523 arg mem_car_config_blood_led_gpio ,regb -0x36e0 011524 iadd regb ,regb -0x36e1 011525 ifetcht 1 ,regb -0x36e2 011526 rtn -: 011527 car_led_control_off: -0x36e3 011528 call car_led_switch -0x36e4 011529 call gpio_out_inactive -0x36e5 011530 branch car_led_control_timer_next_2 -: 011531 car_led_control_on: -0x36e6 011532 call car_led_switch -0x36e7 011533 call gpio_out_active -0x36e8 011534 branch car_led_control_timer_next_2 -: 011535 car_led_control_blink: -0x36e9 011536 fetch 1 ,mem_car_led_blink_status -0x36ea 011537 beq led_on ,car_led_control_off -0x36eb 011538 branch car_led_control_on -: 011539 car_led_control_blink_on: -0x36ec 011540 jam led_on ,mem_car_led_blink_status -0x36ed 011541 branch car_led_control_set -: 011542 car_led_control_blink_off: -0x36ee 011543 jam led_off ,mem_car_led_blink_status -0x36ef 011544 branch car_led_control_set -: 011548 calc_check_sum_start: -0x36f0 011549 arg 0 ,rega -: 011550 calc_check_sum_loop: -0x36f1 011551 ifetch 1 ,contr -0x36f2 011552 iadd rega ,rega -0x36f3 011553 loop calc_check_sum_loop -: 011554 calc_check_sum_and: -0x36f4 011555 and rega ,0xff ,pdata -0x36f5 011556 rtn -: 011558 car_le_receive_data: -0x36f6 011559 fetch 1 ,mem_le_att_opcode -0x36f7 011560 beq attop_write_request ,car_le_parse_att_write_request -0x36f8 011561 rtn -: 011562 car_le_parse_att_write_request: -0x36f9 011563 fetch 2 ,mem_le_att_handle -0x36fa 011564 beq att_car_control_handle ,car_control_le_receive -0x36fb 011565 rtn -: 011577 le_app_receive_data: -0x36fc 011578 bpatch patch1a_0 ,mem_patch1a -0x36fd 011579 ifetch 5 ,rega -0x36fe 011580 store 5 ,mem_app_receive_temp -0x36ff 011581 fetch 2 ,mem_app_receive_temp -0x3700 011582 arg le_receive_packet_head ,temp -0x3701 011583 isub temp ,null -0x3702 011584 nrtn zero -0x3703 011585 fetch 2 ,mem_app_receive_temp + 3 -0x3704 011586 byteswap pdata ,pdata -0x3705 011587 store 2 ,mem_app_receive_temp + 3 -0x3706 011588 copy pdata ,loopcnt -0x3707 011589 increase 5 ,rega -0x3708 011590 copy rega ,contr -0x3709 011591 arg mem_app_receive_temp + 5 ,contw -0x370a 011592 call memcpy -0x370b 011593 ifetch 1 ,contr -0x370c 011594 store 1 ,mem_app_receive_temp + 15 -0x370d 011595 arg mem_app_receive_temp + 2 ,rega -0x370e 011596 arg mem_app_receive_temp + 5 ,regb -0x370f 011597 rtn -: 011599 car_control_le_receive: -0x3710 011600 setarg 0 -0x3711 011601 store 5 ,mem_le_receive_payload -0x3712 011602 store 5 ,mem_le_receive_payload + 5 -0x3713 011603 call le_app_receive_data -0x3714 011604 copy regb ,contr -0x3715 011605 arg mem_le_receive_payload ,contw -0x3716 011606 arg 10 ,loopcnt -0x3717 011607 call memcpy -: 011608 car_receive_cmd_select: -0x3718 011609 bpatch patch1a_1 ,mem_patch1a -0x3719 011610 ifetch 1 ,rega -0x371a 011611 beq car_cmd_old_car_control ,car_drive_old -0x371b 011612 beq car_cmd_old_speed_control ,car_speed_set_old -0x371c 011613 beq car_cmd_l_r_motor_control ,car_motor_control -0x371d 011614 beq car_cmd_f_b_motor_control ,car_motor_control -0x371e 011615 beq car_cmd_ir_control ,car_ir_data_rx_from_app -0x371f 011616 beq car_cmd_led_control ,car_led_control_receive -0x3720 011617 beq car_cmd_device_info ,car_info_request -0x3721 011618 rtn -: 011620 car_24g_receive_data: -0x3722 011621 fetch 2 ,mem_ui_state_map -0x3723 011622 rtnbit1 ui_state_ble_connected -0x3724 011624 fetch 2 ,mem_car_24g_no_data_timeout_count -0x3725 011625 store 2 ,mem_car_24g_no_data_timeout_timer -0x3726 011627 jam work_paired ,mem_car_24g_received_pac -0x3727 011629 setarg offset_24g_rxdata_temp_add3 -0x3728 011630 call g24_set_rega -0x3729 011631 call car_control_le_receive -0x372a 011633 fetch 1 ,mem_app_receive_temp + 2 -0x372b 011634 beq car_cmd_l_r_motor_control ,car_24g_receive_data_next -0x372c 011635 beq car_cmd_f_b_motor_control ,car_24g_receive_data_next -0x372d 011636 rtn -: 011637 car_24g_receive_data_next: -0x372e 011638 fetch 1 ,mem_le_receive_payload -0x372f 011639 ncall car_moto1_enable_blank_data_timer ,blank -0x3730 011640 fetch 1 ,mem_le_receive_payload + 2 -0x3731 011641 ncall car_moto2_enable_blank_data_timer ,blank -0x3732 011642 fetch 1 ,mem_le_receive_payload + 4 -0x3733 011643 ncall car_moto3_enable_blank_data_timer ,blank -0x3734 011644 rtn -: 011646 car_moto1_enable_blank_data_timer: -0x3735 011647 jam 5 ,mem_car_moto1_blank_timer -0x3736 011648 rtn -: 011649 car_moto2_enable_blank_data_timer: -0x3737 011650 jam 5 ,mem_car_moto2_blank_timer -0x3738 011651 rtn -: 011652 car_moto3_enable_blank_data_timer: -0x3739 011653 jam 5 ,mem_car_moto3_blank_timer -0x373a 011654 rtn -: 011656 car_moto1_blank_data_timer: -0x373b 011657 arg mem_car_moto1_blank_timer ,regc -0x373c 011658 arg car_moto1_blank_data ,regb -0x373d 011659 branch timer_single_step -: 011660 car_moto2_blank_data_timer: -0x373e 011661 arg mem_car_moto2_blank_timer ,regc -0x373f 011662 arg car_moto2_blank_data ,regb -0x3740 011663 branch timer_single_step -: 011664 car_moto3_blank_data_timer: -0x3741 011665 arg mem_car_moto3_blank_timer ,regc -0x3742 011666 arg car_moto3_blank_data ,regb -0x3743 011667 branch timer_single_step -: 011669 car_moto1_blank_data: -0x3744 011670 jam 0 ,mem_le_receive_payload -0x3745 011671 branch car_motor_control -: 011672 car_moto2_blank_data: -0x3746 011673 jam 0 ,mem_le_receive_payload + 2 -0x3747 011674 branch car_motor_control -: 011675 car_moto3_blank_data: -0x3748 011676 jam 0 ,mem_le_receive_payload + 4 -0x3749 011677 branch car_motor_control -: 011682 car_drive_old: -0x374a 011683 call car_left_right_control_old -0x374b 011684 branch car_front_back_control_old -: 011685 car_left_right_control_old: -0x374c 011686 fetch 1 ,mem_le_receive_payload -0x374d 011687 store 1 ,mem_motor2_status -0x374e 011688 branch car_motor2_control -: 011689 car_front_back_control_old: -0x374f 011690 fetch 1 ,mem_motor1_speed -0x3750 011691 call car_reset_old_speed -0x3751 011692 fetch 1 ,mem_le_receive_payload + 1 -0x3752 011693 store 1 ,mem_motor1_status -0x3753 011694 branch car_motor1_control -: 011695 car_reset_old_speed: -0x3754 011696 beq speed_level_2 ,car_reset_old_speed2 -0x3755 011697 beq speed_level_3 ,car_reset_old_speed3 -0x3756 011698 store 1 ,mem_motor1_speed -0x3757 011699 rtn -: 011700 car_reset_old_speed2: -0x3758 011701 jam speed_level_5 ,mem_motor1_speed -0x3759 011702 rtn -: 011703 car_reset_old_speed3: -0x375a 011704 jam speed_level_10 ,mem_motor1_speed -0x375b 011705 rtn -: 011706 car_speed_set_old: -0x375c 011707 fetch 1 ,mem_le_receive_payload -0x375d 011708 call car_reset_old_speed -0x375e 011709 fetch 1 ,mem_motor1_speed -0x375f 011710 call car_motor_speed_duty_setting -0x3760 011711 call car_motor_speed_duty_transform -0x3761 011712 branch pwm_pwm0_duty_set -: 011714 car_motor_control: -0x3762 011715 fetch 1 ,mem_car_24g_go_die_flag -0x3763 011716 nrtn blank -0x3764 011717 fetch 6 ,mem_le_receive_payload -0x3765 011718 store 6 ,mem_motor1_status -0x3766 011719 fetch 1 ,mem_motor1_speed -0x3767 011720 fetcht 1 ,mem_motor2_speed -0x3768 011721 iand temp ,pdata -0x3769 011722 fetcht 1 ,mem_motor3_speed -0x376a 011723 iand temp ,pdata -0x376b 011724 call car_motor_working_flag ,blank -0x376c 011725 bpatch patch1a_2 ,mem_patch1a -0x376d 011726 call car_motor1_control -0x376e 011727 call car_motor2_control -0x376f 011728 branch car_motor3_control -: 011729 car_motor1_control: -0x3770 011730 arg mem_motor1_pwm_set ,regb -0x3771 011731 arg mem_motor1_status ,contr -0x3772 011732 branch car_motor_status_select -: 011733 car_motor2_control: -0x3773 011734 arg mem_motor2_pwm_set ,regb -0x3774 011735 arg mem_motor2_status ,contr -0x3775 011736 branch car_motor_status_select -: 011737 car_motor3_control: -0x3776 011738 arg mem_motor3_pwm_set ,regb -0x3777 011739 arg mem_motor3_status ,contr -0x3778 011740 branch car_motor_status_select -: 011741 car_motor_working_flag: -0x3779 011742 jam 0 ,mem_car_working_flag -0x377a 011743 rtn -: 011745 car_motor_status_select: -0x377b 011746 ifetch 1 ,contr -0x377c 011747 beq motor_stop ,car_motor_stop -0x377d 011748 beq go_front ,car_motor_positive -0x377e 011749 beq go_back ,car_motor_negative -0x377f 011750 rtn -: 011751 car_motor_positive: -0x3780 011752 jam 0 ,mem_motor_select_p_n -0x3781 011753 branch car_motor_negative + 1 -: 011754 car_motor_negative: -0x3782 011755 jam 1 ,mem_motor_select_p_n -0x3783 011756 ifetch 1 ,contr -0x3784 011757 store 1 ,mem_car_motor_speed -0x3785 011758 ifetch 8 ,regb -0x3786 011759 branch car_motor_work -: 011761 car_motor_stop: -0x3787 011762 ifetch 1 ,regb -0x3788 011763 call pwm_disable -0x3789 011764 increase 1 ,regb -0x378a 011765 ifetch 1 ,regb -0x378b 011766 branch pwm_disable -: 011767 car_motor_work: -0x378c 011768 store 8 ,mem_motor_pwm_pin1_set -0x378d 011769 jam 1 ,mem_car_working_flag -0x378e 011770 fetch 1 ,mem_motor_select_p_n -0x378f 011771 beq 0 ,car_motor_select_positive -: 011772 car_motor_select_negative: -0x3790 011773 fetch 1 ,mem_motor_pwm_pin2_set -0x3791 011774 store 1 ,mem_motor_pwm_pin_set -0x3792 011775 fetch 1 ,mem_motor_pwm_pin1_set -: 011776 car_motor_work_next: -0x3793 011777 call pwm_disable -0x3794 011778 fetch 1 ,mem_car_motor_speed -0x3795 011779 call car_motor_speed_duty_setting -0x3796 011780 store 1 ,mem_motor_pwm_dute_set -0x3797 011781 fetch 6 ,mem_motor_pwm_pin_set -0x3798 011782 store 6 ,mem_pdatatemp -0x3799 011783 branch pwm_out_set -: 011784 car_motor_select_positive: -0x379a 011785 fetch 1 ,mem_motor_pwm_pin1_set -0x379b 011786 store 1 ,mem_motor_pwm_pin_set -0x379c 011787 fetch 1 ,mem_motor_pwm_pin2_set -0x379d 011788 branch car_motor_work_next -: 011790 car_motor_speed_duty_setting: -0x379e 011791 mul32 pdata ,5 ,pdata -0x379f 011792 add pdata ,50 ,pdata -0x37a0 011793 rtn -: 011794 car_motor_speed_duty_transform: -0x37a1 011795 arg 12000 ,temp -0x37a2 011796 imul32 temp ,pdata -0x37a3 011797 div pdata ,100 -0x37a4 011798 call wait_div_end -0x37a5 011799 quotient temp -0x37a6 011800 copy temp ,rega -0x37a7 011801 setarg 12000 -0x37a8 011802 isub temp ,regb -0x37a9 011803 rtn -: 011806 car_ir_init: -0x37aa 011807 hfetch 1 ,core_gpio_sel2 -0x37ab 011808 set1 2 ,pdata -0x37ac 011809 hstore 1 ,core_gpio_sel2 -0x37ad 011810 setarg 158 -0x37ae 011811 hstore 2 ,core_pwm_pcnt4 -0x37af 011812 hstore 2 ,core_pwm_ncnt4 -0x37b0 011813 rtn -: 011815 car_ir_data_rx_from_app: -0x37b1 011816 fetch 1 ,mem_car_24g_go_die_flag -0x37b2 011817 nrtn blank -0x37b3 011818 fetch 2 ,mem_le_receive_payload -0x37b4 011819 store 2 ,mem_ir_data -0x37b5 011820 fetch 1 ,mem_car_24g_status -0x37b6 011821 bne work_paired ,car_ir_data_tx -0x37b7 011822 fetch 2 ,mem_le_lap -0x37b8 011823 store 2 ,mem_ir_data -: 011824 car_ir_data_tx: -0x37b9 011825 bpatch patch1a_3 ,mem_patch1a -0x37ba 011826 call car_ir_init -0x37bb 011827 call car_ir_enable -0x37bc 011828 setarg 48000 -0x37bd 011829 call sleep -0x37be 011830 call car_ir_disable -0x37bf 011831 setarg 7200 -0x37c0 011832 call sleep -0x37c1 011833 arg 16 ,loopcnt -: 011834 car_ir_send_loop: -0x37c2 011835 call car_ir_enable -0x37c3 011836 fetch 2 ,mem_ir_data -0x37c4 011837 bbit1 0 ,car_ir_is_bit1 -0x37c5 011838 setarg 7200 -0x37c6 011839 call sleep -0x37c7 011840 call car_ir_disable -0x37c8 011841 branch car_ir_wait_finish -: 011843 car_ir_is_bit1: -0x37c9 011844 setarg 14400 -0x37ca 011845 call sleep -0x37cb 011846 call car_ir_disable -: 011847 car_ir_wait_finish: -0x37cc 011848 setarg 7200 -0x37cd 011849 call sleep -0x37ce 011850 fetch 2 ,mem_ir_data -0x37cf 011851 rshift pdata ,pdata -0x37d0 011852 store 2 ,mem_ir_data -0x37d1 011853 loop car_ir_send_loop -0x37d2 011855 jam 2 ,mem_car_attack_shake_timer -0x37d3 011856 jam 1 ,mem_car_attack_shake_flag -0x37d4 011857 setarg 0x0a01 -0x37d5 011858 store 2 ,mem_le_receive_payload -0x37d6 011859 fetch 1 ,mem_car_config_device_select -0x37d7 011860 beq device_battle_tank ,car_attack_shake_back_battle_tank -: 011861 car_attack_shake_back_battle_car: -0x37d8 011862 branch car_motor_control -: 011863 car_attack_shake_back_battle_tank: -0x37d9 011864 setarg 0x0a01 -0x37da 011865 store 2 ,mem_le_receive_payload + 2 -0x37db 011866 branch car_motor_control -: 011868 car_ir_enable: -0x37dc 011869 hfetch 1 ,core_gpio_key2 -0x37dd 011870 or_into 0x40 ,pdata -0x37de 011871 hstore 1 ,core_gpio_key2 -0x37df 011872 rtn -: 011873 car_ir_disable: -0x37e0 011874 hfetch 1 ,core_gpio_key2 -0x37e1 011875 and_into 0xbf ,pdata -0x37e2 011876 hstore 1 ,core_gpio_key2 -0x37e3 011877 rtn -: 011879 car_ir_rx_init: -0x37e4 011880 fetch 1 ,mem_car_config_ir_enable -0x37e5 011881 rtneq 0x00 -0x37e6 011882 call lpm_disable_exen_output -0x37e7 011883 fetcht 1 ,mem_car_config_ir_rx_gpio -0x37e8 011884 storet 1 ,mem_ir_rx_gpio -0x37e9 011885 call gpio_config_input -0x37ea 011886 call car_ir_gpio_get_status -0x37eb 011887 nrtn true -0x37ec 011888 jam 1 ,mem_car_ir_breakdown_check_timer -0x37ed 011889 rtn -: 011891 car_ir_receive_process: -0x37ee 011892 fetch 1 ,mem_car_config_ir_enable -0x37ef 011893 rtneq flag_ir_disable -0x37f0 011894 fetch 1 ,mem_car_ir_breakdown_flag -0x37f1 011895 nrtn blank -0x37f2 011896 fetch 2 ,mem_ui_state_map -0x37f3 011897 bbit1 ui_state_ble_connected ,car_ir_receive_process_next -0x37f4 011898 fetch 1 ,mem_car_24g_status -0x37f5 011899 rtnne work_paired -: 011900 car_ir_receive_process_next: -0x37f6 011901 bpatch patch1a_4 ,mem_patch1a -0x37f7 011902 call car_ir_gpio_get_status -0x37f8 011903 nrtn true -0x37f9 011904 setarg 36000 -0x37fa 011905 call sleep -0x37fb 011906 call car_ir_gpio_get_status -0x37fc 011907 nrtn true -0x37fd 011908 call car_ir_clk_get -: 011909 car_ir_packet_head_wait_end: -0x37fe 011910 call car_ir_clk_check -0x37ff 011911 nrtn positive -0x3800 011912 call car_ir_gpio_get_status -0x3801 011913 branch car_ir_packet_head_wait_end ,true -0x3802 011914 arg 0 ,rega -0x3803 011915 arg 16 ,loopcnt -0x3804 011916 call car_ir_clk_get -: 011917 car_ir_receive_process_loop: -0x3805 011918 call car_ir_clk_check -0x3806 011919 nrtn positive -0x3807 011920 call car_ir_gpio_get_status -0x3808 011921 nbranch car_ir_receive_process_loop ,true -0x3809 011922 setarg 10800 -0x380a 011923 call sleep -0x380b 011924 call car_ir_gpio_get_status -0x380c 011925 branch car_ir_get_bit1 ,true -: 011926 car_ir_get_bit0: -0x380d 011927 setarg 0 -0x380e 011928 rshift rega ,rega -0x380f 011929 ior rega ,rega -0x3810 011930 loop car_ir_receive_process_loop -0x3811 011931 branch car_ir_receive_process_end -: 011932 car_ir_get_bit1: -0x3812 011933 setarg 0x8000 -0x3813 011934 rshift rega ,rega -0x3814 011935 ior rega ,rega -0x3815 011936 call car_ir_clk_get -: 011937 car_ir_get_bit1_wait_low_end: -0x3816 011938 call car_ir_clk_check -0x3817 011939 nrtn positive -0x3818 011940 call car_ir_gpio_get_status -0x3819 011941 branch car_ir_get_bit1_wait_low_end ,true -0x381a 011942 loop car_ir_receive_process_loop -: 011943 car_ir_receive_process_end: -0x381b 011944 bpatch patch1a_5 ,mem_patch1a -0x381c 011945 copy rega ,pdata -0x381d 011946 store 2 ,mem_ir_rx_buf -0x381e 011947 store 2 ,mem_ir_notify_data + 8 -0x381f 011948 fetch 1 ,mem_car_24g_status -0x3820 011949 beq work_paired ,car_ir_24g_receive_attack -: 011950 car_ir_data_notify: -0x3821 011951 arg 0x07 ,loopcnt -0x3822 011952 arg mem_ir_notify_data_head ,contr -0x3823 011953 call calc_check_sum_start -0x3824 011954 store 1 ,mem_ir_notify_data_check_sum -0x3825 011955 arg mem_ir_notify_data ,rega -0x3826 011956 branch queue_push -: 011958 car_ir_24g_receive_attack: -0x3827 011959 fetch 1 ,mem_car_24g_ir_receive_attack_count -0x3828 011960 increase 1 ,pdata -0x3829 011961 store 1 ,mem_car_24g_ir_receive_attack_count -0x382a 011962 div pdata ,2 -0x382b 011963 call wait_div_end -0x382c 011964 quotient temp -0x382d 011965 remainder pdata -0x382e 011966 nbranch car_ir_24g_receive_attack_blink ,blank -: 011967 car_ir_24g_receive_attack_off: -0x382f 011968 fetch 1 ,mem_car_config_led_num -0x3830 011969 isub temp ,null -0x3831 011970 call car_ir_24g_go_die ,zero -0x3832 011971 arg mem_car_led_control ,pdata -0x3833 011972 increase -1 ,temp -0x3834 011973 iadd temp ,rega -0x3835 011974 arg 0 ,pdata -0x3836 011975 istore 1 ,rega -0x3837 011976 rtn -: 011977 car_ir_24g_receive_attack_blink: -0x3838 011978 arg mem_car_led_control ,pdata -0x3839 011979 iadd temp ,rega -0x383a 011980 arg 2 ,pdata -0x383b 011981 istore 1 ,rega -0x383c 011982 rtn -: 011983 car_ir_24g_go_die: -0x383d 011984 jam 1 ,mem_car_24g_go_die_flag -0x383e 011985 rtn -: 011986 car_ir_clk_get: -0x383f 011987 copy clkn_bt ,pdata -0x3840 011988 store 4 ,mem_ir_receive_clkn -0x3841 011989 rtn -: 011990 car_ir_clk_check: -0x3842 011991 copy clkn_bt ,pdata -0x3843 011992 fetcht 4 ,mem_ir_receive_clkn -0x3844 011993 isub temp ,pdata -0x3845 011994 sub pdata ,200 ,null -0x3846 011995 rtn -: 011997 car_ir_gpio_get_status: -0x3847 011998 fetcht 1 ,mem_ir_rx_gpio -0x3848 011999 branch gpio_get_bit -: 012001 car_led_control_receive: -0x3849 012002 fetch 8 ,mem_le_receive_payload -0x384a 012003 store 8 ,mem_car_led_control -0x384b 012004 rtn -: 012006 car_info_request: -0x384c 012007 fetch 1 ,mem_car_config_device_select -0x384d 012008 store 1 ,mem_car_info_request_payload -0x384e 012009 fetch 1 ,mem_car_config_motor_layout -0x384f 012010 store 1 ,mem_car_info_request_payload + 1 -0x3850 012011 fetch 1 ,mem_car_config_ir_enable -0x3851 012012 store 1 ,mem_car_info_request_payload + 2 -0x3852 012013 arg 13 ,loopcnt -0x3853 012014 arg mem_car_info_request_head ,contr -0x3854 012015 call calc_check_sum_start -0x3855 012016 store 1 ,mem_car_info_request_checksum -0x3856 012017 arg mem_car_info_request ,rega -0x3857 012018 branch queue_push -: 012024 light_init: -0x3858 012025 call clear_eeprom_size_2k -0x3859 012026 jam 0x7a ,mem_curr_packet_num -0x385a 012027 call light_load_controler_list -0x385b 012028 call light_init_crr_cmd_count -0x385c 012029 setarg light_pairing_timer -0x385d 012030 store 2 ,mem_cb_event_timer -0x385e 012031 arg 0 ,rega -0x385f 012032 branch pwm_init -: 012034 light_pairing_timer: -0x3860 012035 fetch 2 ,mem_light_pairing_timer -0x3861 012036 rtn blank -0x3862 012037 increase -1 ,pdata -0x3863 012038 store 2 ,mem_light_pairing_timer -0x3864 012039 rtnne 0 -0x3865 012040 jam 0 ,mem_light_pairing_enable -0x3866 012041 rtn -: 012043 light_init_crr_cmd_count: -0x3867 012044 bpatch patch1a_6 ,mem_patch1a -0x3868 012045 fetch 1 ,mem_light_next_record -0x3869 012046 sub pdata ,40 ,null -0x386a 012047 rtn positive -0x386b 012048 jam 0 ,mem_light_next_record -0x386c 012049 rtn -: 012051 light_load_controler_list: -0x386d 012052 arg mem_light_next_record ,rega -0x386e 012053 arg 0 ,regb -0x386f 012054 arg 81 ,temp -0x3870 012055 branch iicd_read_eep_data -: 012058 light_find_controler_pairing: -0x3871 012059 disable user -0x3872 012060 fetch 1 ,mem_light_cnum -0x3873 012061 copy pdata ,loopcnt -0x3874 012063 arg mem_light_clist ,rega -0x3875 012064 copy regc ,regb -: 012065 light_find_controler_pairing_loop: -0x3876 012066 bpatch patch1a_7 ,mem_patch1a -0x3877 012067 call light_compare_addr_record -0x3878 012068 branch enable_user ,zero -: 012069 light_find_single_pairing_diff: -0x3879 012070 increase 4 ,rega -0x387a 012071 loop light_find_controler_pairing_loop -0x387b 012072 rtn -: 012075 light_compare_addr_record: -0x387c 012076 bpatch patch1b_0 ,mem_patch1b -0x387d 012077 ifetch 3 ,rega -0x387e 012078 ifetcht 3 ,regb -0x387f 012079 isub temp ,null -0x3880 012080 rtn -: 012082 light_compare_single_record: -0x3881 012083 bpatch patch1b_1 ,mem_patch1b -0x3882 012084 ifetch 3 ,rega -0x3883 012085 ifetcht 3 ,regb -0x3884 012086 isub temp ,null -0x3885 012087 nrtn zero -0x3886 012088 ifetch 1 ,contr -0x3887 012089 sub pdata ,0 ,null -0x3888 012090 rtn zero -0x3889 012091 add rega ,3 ,contr -0x388a 012092 ifetcht 1 ,contr -0x388b 012093 isub temp ,null -0x388c 012094 rtn -: 012097 light_find_controler_cmd: -0x388d 012098 bpatch patch1b_2 ,mem_patch1b -0x388e 012099 disable user -0x388f 012100 fetch 1 ,mem_light_cnum -0x3890 012101 copy pdata ,loopcnt -0x3891 012103 arg mem_light_clist ,rega -0x3892 012104 copy regc ,regb -: 012105 light_find_controler_cmd_loop: -0x3893 012106 call light_compare_single_record -0x3894 012107 branch enable_user ,zero -0x3895 012108 increase 4 ,rega -0x3896 012109 loop light_find_controler_cmd_loop -0x3897 012110 rtn -: 012113 light_recv_adv: -0x3898 012114 fetch 1 ,mem_le_scanrsp_rcv -0x3899 012115 increase 1 ,pdata -0x389a 012116 store 1 ,mem_le_scanrsp_rcv -0x389b 012117 arg mem_le_rxbuf + 12 ,regc -: 012119 light_anylize_command: -0x389c 012120 ifetch 2 ,regc -0x389d 012121 arg 0x55aa ,temp -0x389e 012122 isub temp ,null -0x389f 012123 nrtn zero -0x38a0 012124 copy contr ,regc -0x38a1 012125 ifetcht 3 ,regc -0x38a2 012126 setarg 0xffffff -0x38a3 012127 isub temp ,null -0x38a4 012128 branch light_parse_cmd ,zero -0x38a5 012129 call light_find_controler_cmd -0x38a6 012130 branch light_parse_cmd ,user -0x38a7 012131 rtn -: 012133 light_parse_cmd: -0x38a8 012134 bpatch patch1b_3 ,mem_patch1b -0x38a9 012135 increase 4 ,regc -0x38aa 012136 ifetch 1 ,regc -0x38ab 012137 fetcht 1 ,mem_curr_packet_num -0x38ac 012138 isub temp ,null -0x38ad 012139 rtn zero -0x38ae 012140 store 1 ,mem_curr_packet_num -0x38af 012141 fetch 1 ,mem_le_req_rcv -0x38b0 012142 increase 1 ,pdata -0x38b1 012143 store 1 ,mem_le_req_rcv -0x38b2 012145 increase 1 ,regc -0x38b3 012146 ifetch 1 ,regc -0x38b4 012147 store 1 ,mem_light_crr_cmd_count -0x38b5 012148 copy pdata ,loopcnt -0x38b6 012149 rtn blank -: 012150 light_parse_cmd_loop: -0x38b7 012151 ifetch 1 ,contr -0x38b8 012152 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 -0x38b9 012153 beq light_cmd_pwm1 ,light_parse_cmd_pwm1 -0x38ba 012154 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 -0x38bb 012155 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 -0x38bc 012156 beq light_cmd_pwm4 ,light_parse_cmd_pwm4 -0x38bd 012157 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 -0x38be 012158 beq light_cmd_auto_mode ,light_parse_auto_mode -0x38bf 012159 beq light_cmd_pairing ,light_parse_pairing -0x38c0 012160 loop light_parse_cmd_loop -0x38c1 012161 rtn -: 012163 light_parse_cmd_pwm0: -0x38c2 012164 copy contr ,regc -0x38c3 012165 fetch 1 ,mem_light_pwm0 -0x38c4 012166 store 1 ,mem_pdatatemp -0x38c5 012167 arg 0 ,temp -: 012168 light_parse_cmd_pwm_common: -0x38c6 012169 storet 1 ,mem_pdatatemp + 1 -0x38c7 012170 setarg 10000 -0x38c8 012171 store 3 ,mem_pdatatemp + 2 -0x38c9 012172 ifetch 1 ,regc -0x38ca 012173 store 1 ,mem_pdatatemp + 5 -0x38cb 012174 call pwm_out_set -0x38cc 012175 and regc ,1 ,contr -0x38cd 012176 loop light_parse_cmd_loop -0x38ce 012177 rtn -: 012178 light_parse_cmd_pwm1: -0x38cf 012179 copy regc ,contr -0x38d0 012180 fetch 1 ,mem_light_pwm1 -0x38d1 012181 store 1 ,mem_pdatatemp -0x38d2 012182 arg 1 ,temp -0x38d3 012183 branch light_parse_cmd_pwm_common -: 012184 light_parse_cmd_pwm2: -0x38d4 012185 copy regc ,contr -0x38d5 012186 fetch 1 ,mem_light_pwm2 -0x38d6 012187 store 1 ,mem_pdatatemp -0x38d7 012188 arg 2 ,temp -0x38d8 012189 branch light_parse_cmd_pwm_common -: 012190 light_parse_cmd_pwm3: -0x38d9 012191 copy regc ,contr -0x38da 012192 fetch 1 ,mem_light_pwm3 -0x38db 012193 store 1 ,mem_pdatatemp -0x38dc 012194 arg 3 ,temp -0x38dd 012195 branch light_parse_cmd_pwm_common -: 012196 light_parse_cmd_pwm4: -0x38de 012197 copy regc ,contr -0x38df 012198 fetch 1 ,mem_light_pwm4 -0x38e0 012199 store 1 ,mem_pdatatemp -0x38e1 012200 arg 4 ,temp -0x38e2 012201 branch light_parse_cmd_pwm_common -: 012202 light_parse_cmd_pwm5: -0x38e3 012203 copy regc ,contr -0x38e4 012204 fetch 1 ,mem_light_pwm5 -0x38e5 012205 store 1 ,mem_pdatatemp -0x38e6 012206 arg 5 ,temp -0x38e7 012207 branch light_parse_cmd_pwm_common -: 012209 light_parse_auto_mode: -0x38e8 012210 ifetch 1 ,contr -0x38e9 012211 rtn -: 012213 light_parse_pairing: -0x38ea 012214 copy contr ,regc -0x38eb 012215 fetch 1 ,mem_light_pairing_enable -0x38ec 012216 bne 1 ,light_parse_pairing_abandon -0x38ed 012217 call update_controler_list -: 012218 light_parse_pairing_abandon: -0x38ee 012219 and regc ,4 ,contr -0x38ef 012220 rtn -: 012221 update_controler_list: -0x38f0 012222 bpatch patch1b_4 ,mem_patch1b -0x38f1 012223 call light_find_controler_pairing -0x38f2 012224 branch update_conrtoler_list_found ,user -0x38f3 012225 fetch 1 ,mem_light_next_record -0x38f4 012226 copy pdata ,temp -0x38f5 012227 increase 1 ,pdata -0x38f6 012228 store 1 ,mem_light_next_record -0x38f7 012229 call light_init_crr_cmd_count -0x38f8 012230 lshift2 temp ,temp -0x38f9 012231 setarg mem_light_clist -0x38fa 012232 iadd temp ,contw -0x38fb 012233 ifetch 4 ,regc -0x38fc 012234 istore 4 ,contw -0x38fd 012235 branch update_conrtoler_store_list -: 012236 update_conrtoler_list_found: -0x38fe 012237 add regc ,3 ,contr -0x38ff 012238 ifetch 1 ,contr -0x3900 012239 rtn blank -0x3901 012240 ifetch 4 ,regc -0x3902 012241 istore 4 ,rega -: 012242 update_conrtoler_store_list: -0x3903 012243 arg mem_light_next_record ,rega -0x3904 012244 arg 0 ,regb -0x3905 012245 arg 81 ,temp -0x3906 012246 branch iicd_write_eep_data -: 012250 lightc_init: -0x3907 012254 fetcht 1 ,mem_lightc_led_gpio -0x3908 012255 call gpio_out_inactive -0x3909 012256 rtn -: 012259 lightc_dispatch: -0x390a 012262 fetcht 1 ,mem_lightc_led_gpio -0x390b 012263 call gpio_out_active -0x390c 012266 fetcht 1 ,mem_lightc_led_gpio -0x390d 012267 call gpio_out_inactive -0x390e 012270 call lightc_start_adv -0x390f 012272 fetch 1 ,mem_adv_time -0x3910 012273 nrtn blank -0x3911 012275 call lpm_write_gpio_wakeup -0x3912 012276 hfetch 4 ,core_lpm_ctrl -0x3913 012277 set0 15 ,pdata -0x3914 012278 hstore 4 ,core_lpm_reg -0x3915 012279 call lpm_write_ctrl -0x3916 012280 arg param_hibernate_clks ,temp -0x3917 012281 branch lpm_sleep -: 012283 lightc_adv: -0x3918 012284 fetch 1 ,mem_adv_time -0x3919 012285 branch le_adv_loop_tx ,blank -0x391a 012286 increase -1 ,pdata -0x391b 012287 store 1 ,mem_adv_time -0x391c 012288 branch le_adv_loop_tx -: 012290 lightc_start_adv: -0x391d 012291 mul32 pdata ,20 ,pdata -0x391e 012292 arg mem_cmd0_string ,contr -0x391f 012293 iadd contr ,contr -0x3920 012294 ifetch 1 ,contr -0x3921 012295 rtn blank -0x3922 012296 copy pdata ,rega -0x3923 012297 copy rega ,loopcnt -0x3924 012298 arg mem_le_adv_data + 2 ,contw -0x3925 012299 call memcpy -0x3926 012300 copy rega ,pdata -0x3927 012301 increase 2 ,pdata -0x3928 012302 store 1 ,mem_le_adv_data_len -0x3929 012303 rtn -: 012310 module_init: -0x392a 012312 rtn wake -0x392b 012313 call le_modified_name -0x392c 012314 call adc_init_data -0x392d 012315 setarg module_process_idle -0x392e 012316 store 2 ,mem_cb_idle_process -0x392f 012317 setarg module_bt_conn_process -0x3930 012318 store 2 ,mem_cb_bt_process -0x3931 012319 setarg module_process_bb_event -0x3932 012320 store 2 ,mem_cb_bb_event_process -0x3933 012321 setarg module_le_conn_process -0x3934 012322 store 2 ,mem_cb_le_process -0x3935 012323 setarg module_lpm_lock -0x3936 012324 store 2 ,mem_cb_check_wakelock -0x3937 012325 setarg module_hci_cmd_transmit_le_notify -0x3938 012326 store 2 ,mem_cb_ble_transmit -0x3939 012327 setarg module_hci_event_receive_spp_data -0x393a 012328 store 2 ,mem_cb_receive_spp_data -0x393b 012329 setarg module_le_receive_data -0x393c 012330 store 2 ,mem_cb_att_write -0x393d 012331 setarg module_bb_event_timer -0x393e 012332 store 2 ,mem_cb_event_timer -0x393f 012334 call module_spp_clear_last_transmite_clock -0x3940 012335 bpatch patch1b_5 ,mem_patch1b -0x3941 012336 call module_lpm_uart_init -0x3942 012337 call module_gpio_init -0x3943 012338 call check_module_disabled -0x3944 012339 branch module_hci_event_enter_standby_mode -: 012342 module_lpm_uart_init: -0x3945 012343 fetch 4 ,mem_module_uart_rx_buffer -0x3946 012344 hstore 4 ,core_uart_rsaddr -0x3947 012346 fetch 4 ,mem_module_uart_tx_buffer -0x3948 012347 hstore 4 ,core_uart_tsaddr -0x3949 012349 hfetch 1 ,core_gpio_sel1 -0x394a 012350 or_into 0x04 ,pdata -0x394b 012351 and_into 0xfc ,pdata -0x394c 012352 hstore 1 ,core_gpio_sel1 -0x394d 012353 jam 0x00 ,core_uart_ctrl -0x394e 012355 fetch 2 ,mem_module_uart_rx_buffer -0x394f 012356 hstore 2 ,core_uart_rrptr -0x3950 012357 fetch 2 ,mem_module_uart_tx_buffer -0x3951 012358 hstore 2 ,core_uart_twptr -0x3952 012359 hstore 2 ,core_uart_trptrp -0x3953 012361 hfetch 4 ,core_gpio_pu0 -0x3954 012362 set1 7 ,pdata -0x3955 012363 hstore 4 ,core_gpio_pu0 -0x3956 012365 hfetch 2 ,core_clkoff -0x3957 012366 set0 clock_off_uart ,pdata -0x3958 012367 hstore 2 ,core_clkoff -0x3959 012368 call uart_set_baud_by_mem -0x395a 012369 jam uartclk_crystal ,core_uart_clksel -0x395b 012370 jam uart_ctrl_h4 ,core_uart_ctrl -0x395c 012372 fetch 1 ,mem_module_flag -0x395d 012373 isolate1 module_flag_uart_flow_control ,pdata -0x395e 012374 hfetcht 1 ,core_uart_ctrl -0x395f 012375 setflag true ,4 ,temp -0x3960 012376 hstoret 1 ,core_uart_ctrl -0x3961 012377 rtn -: 012381 module_lpm_init: -0x3962 012382 call module_spp_clear_last_transmite_clock -0x3963 012383 branch module_lpm_uart_init -: 012386 module_gpio_init: -0x3964 012391 fetcht 1 ,mem_module_connect_state_gpio -0x3965 012392 call gpio_config_output -0x3966 012393 call module_set_conn_pin_low -0x3967 012395 fetcht 1 ,mem_module_wake_up_gpio -0x3968 012396 branch gpio_config_input -: 012398 module_lpm_lock: -0x3969 012399 fetcht 1 ,mem_module_wake_up_gpio -0x396a 012400 call gpio_get_bit -0x396b 012401 nbranch app_put_lpm_wake_lock ,true -0x396c 012402 branch app_get_lpm_wake_lock -: 012405 module_le_conn_process: -0x396d 012406 rtn -: 012408 module_bt_conn_process: -0x396e 012409 call module_spp_enter_sniff -0x396f 012410 branch module_control_air_flow -: 012412 module_spp_enter_sniff: -0x3970 012413 fetch 1 ,mem_ui_state_map -0x3971 012414 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock -0x3972 012415 bpatch patch1b_6 ,mem_patch1b -0x3973 012416 setarg 0x3eff -0x3974 012417 fetcht 4 ,mem_last_transmite_clock -0x3975 012418 iadd temp ,temp -0x3976 012419 copy clkn_bt ,pdata -0x3977 012420 isub temp ,null -0x3978 012421 nrtn positive -0x3979 012422 fetch 2 ,mem_ui_state_map -0x397a 012423 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock -0x397b 012424 fetch 1 ,mem_module_flag -0x397c 012425 rtnbit1 moudle_task_sniff -0x397d 012426 call module_set_sniff_task_flag -0x397e 012427 call app_bt_enter_sniff -: 012428 module_spp_clear_last_transmite_clock: -0x397f 012429 copy clkn_bt ,pdata -0x3980 012430 store 4 ,mem_last_transmite_clock -0x3981 012431 rtn -: 012434 module_process_idle: -0x3982 012435 call module_control_air_flow -0x3983 012436 call l2cap_malloc_is_fifo_full -0x3984 012437 nrtn blank -0x3985 012438 branch module_process -: 012441 module_process_bb_event: -0x3986 012442 copy regc ,pdata -0x3987 012443 beq bt_evt_bb_connected ,module_process_bb_conn -0x3988 012444 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned -0x3989 012445 beq bt_evt_reconn_failed ,module_process_reconn_fail -0x398a 012446 beq bt_evt_setup_complete ,module_process_setup_complete -0x398b 012447 beq bt_evt_spp_connected ,module_process_spp_connected -0x398c 012448 beq bt_evt_spp_disconnected ,module_process_spp_disconnected -0x398d 012449 beq bt_evt_pincode_req ,module_process_evt_pincode_req -0x398e 012450 beq bt_evt_enter_sniff ,module_process_enter_sniff -0x398f 012451 beq bt_evt_exit_sniff ,module_process_exit_sniff -0x3990 012452 beq bt_evt_reconn_page_timeout ,module_process_page_time_out -0x3991 012453 beq bt_evt_le_connected ,module_process_le_conn -0x3992 012454 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn -0x3993 012455 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept -0x3994 012456 beq bt_evt_unsniff_accept ,module_process_unsniff_accept -0x3995 012457 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept -0x3996 012458 beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail -0x3997 012459 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success -0x3998 012460 beq bt_evt_le_start_enc ,module_hci_event_start_enc -0x3999 012461 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc -0x399a 012462 beq bt_evt_le_tk_generate ,module_hci_event_le_tk -0x399b 012463 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate -0x399c 012464 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode -0x399d 012465 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail -0x399e 012466 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success -0x399f 012467 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey -0x39a0 012468 beq bt_evt_store_nvram ,module_hci_event_store_device -0x39a1 012469 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost -0x39a2 012470 rtn -: 012473 module_process_bb_event_disconned: -0x39a3 012474 call module_spp_clear_last_transmite_clock -0x39a4 012475 fetch 1 ,mem_flag_pairing_state -0x39a5 012476 ncall module_hci_event_bt_pairing_fail ,blank -0x39a6 012477 call module_disconn_start -0x39a7 012478 fetch 2 ,mem_ui_state_map -0x39a8 012479 rtnbit0 ui_state_bt_spp_conn -0x39a9 012480 branch module_spp_disconnected -: 012482 module_process_spp_connected: -0x39aa 012483 fetch 2 ,mem_ui_state_map -0x39ab 012484 set1 ui_state_bt_spp_conn ,pdata -0x39ac 012485 store 2 ,mem_ui_state_map -0x39ad 012486 fetch 1 ,mem_module_spp_lpm_mult -0x39ae 012487 store 1 ,mem_lpm_mult -0x39af 012488 call module_set_conn_pin_low -0x39b0 012489 branch module_hci_event_spp_connect -: 012491 module_process_spp_disconnected: -: 012493 module_spp_disconnected: -0x39b1 012494 fetch 2 ,mem_ui_state_map -0x39b2 012495 rtnbit0 ui_state_bt_spp_conn -0x39b3 012496 set0 ui_state_bt_spp_conn ,pdata -0x39b4 012497 store 2 ,mem_ui_state_map -0x39b5 012498 branch module_hci_event_spp_disconnect -: 012501 module_process_enter_sniff: -: 012503 module_sniff_param_check: -0x39b6 012504 call module_spp_clear_last_transmite_clock -0x39b7 012507 fetch 2 ,mem_context + coffset_tsniff -0x39b8 012508 rshift pdata ,pdata -0x39b9 012509 fetcht 2 ,mem_sniff_param_interval -0x39ba 012510 isub temp ,null -0x39bb 012511 nbranch module_sniff_param_check_unsniff ,zero -0x39bc 012512 branch app_lpm_mult_enable -: 012513 module_sniff_param_check_unsniff: -0x39bd 012514 fetch 1 ,mem_module_flag -0x39be 012515 rtnbit1 moudle_task_unsniff -0x39bf 012516 hfetch 2 ,core_uart_rxitems -0x39c0 012517 ncall module_set_unsniff_task_flag ,blank -0x39c1 012518 branch app_bt_sniff_exit -: 012520 module_process_exit_sniff: -0x39c2 012521 call module_clear_sniff_task_flag -0x39c3 012522 branch app_lpm_mult_disable -: 012524 module_process_setup_complete: -0x39c4 012525 call module_spp_clear_last_transmite_clock -0x39c5 012526 branch module_conn_start -: 012528 module_process_bb_even_le_disconn: -0x39c6 012529 call le_clr_config_more_data -0x39c7 012530 call module_disconn_start -0x39c8 012531 branch module_hci_event_le_disconnect -: 012533 module_process_evt_pincode_req: -0x39c9 012534 branch app_bt_set_pincode -: 012537 module_process_sniff_not_accept: -0x39ca 012538 branch module_clear_sniff_task_flag -: 012541 module_process_unsniff_accept: -0x39cb 012542 fetch 1 ,mem_module_flag -0x39cc 012543 bbit0 moudle_task_unsniff ,app_bt_enter_sniff -0x39cd 012544 branch module_clear_unsniff_task_flag -: 012547 module_process_unsniff_not_accept: -0x39ce 012548 branch module_clear_unsniff_task_flag -: 012551 module_process_le_conn: -0x39cf 012552 call le_send_att_exchange_mtu_requset -0x39d0 012553 call module_conn_start -0x39d1 012554 fetch 1 ,mem_module_le_lpm_mult -0x39d2 012555 store 1 ,mem_lpm_mult -0x39d3 012556 branch module_hci_event_le_connect -: 012559 module_process_bb_conn: -0x39d4 012560 jam 0 ,mem_flag_mode_ssp_pin -0x39d5 012561 call module_clear_sniff_task_flag -0x39d6 012562 branch module_clear_unsniff_task_flag -: 012564 module_process_page_time_out: -: 012565 module_process_reconn_fail: -: 012566 module_disconn_start: -0x39d7 012567 call module_start_adv_discovery_by_command -0x39d8 012568 branch module_set_conn_pin_high -: 012571 module_process_ble_ltk_lost: -0x39d9 012572 call le_send_reject_ind -0x39da 012573 branch le_send_smp_security_request -: 012576 module_set_conn_pin_high: -0x39db 012577 fetcht 1 ,mem_module_connect_state_gpio -0x39dc 012578 branch gpio_out_active -: 012580 module_conn_start: -0x39dd 012581 call module_stop_adv_discovery -0x39de 012582 branch module_set_conn_pin_low -: 012584 module_stop_adv_discovery: -0x39df 012585 fetch 1 ,mem_module_state -0x39e0 012586 isolate1 moudle_state_bt_bit ,pdata -0x39e1 012587 call app_bt_stop_discovery ,true -0x39e2 012588 fetch 1 ,mem_module_state -0x39e3 012589 isolate1 moudle_state_ble_bit ,pdata -0x39e4 012590 call app_ble_stop_adv ,true -0x39e5 012591 rtn -: 012592 module_set_conn_pin_low: -0x39e6 012593 fetcht 1 ,mem_module_connect_state_gpio -0x39e7 012594 branch gpio_out_inactive -: 012596 module_process_with_credit: -0x39e8 012597 fetch 1 ,mem_credit_flag -0x39e9 012598 rtneq credit_disable -0x39ea 012599 branch rfcomm_send_uih_without_payload -: 012601 module_process: -0x39eb 012602 hfetch 1 ,core_uart_status -0x39ec 012603 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit -0x39ed 012604 call uartd_prepare_rx -0x39ee 012605 ifetch 1 ,contru -0x39ef 012606 bne 0x01 ,module_hci_in_excp -0x39f0 012607 hfetch 2 ,core_uart_rxitems -0x39f1 012608 sub pdata ,2 ,null -0x39f2 012609 rtn positive -0x39f3 012610 ifetch 1 ,contru -0x39f4 012611 store 1 ,mem_module_uart_opcode -0x39f5 012612 ifetcht 1 ,contru -0x39f6 012613 copy contru ,rega -0x39f7 012614 storet 1 ,mem_module_uart_len -0x39f8 012615 add temp ,3 ,temp -0x39f9 012616 hfetch 2 ,core_uart_rxitems -0x39fa 012617 isub temp ,temp -0x39fb 012618 nrtn positive -0x39fc 012619 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x39fd 012620 call module_hci_cmd_control -0x39fe 012621 fetch 1 ,mem_module_temp_nl_discard_packet -0x39ff 012622 rtneq hci_not_discard_packet -0x3a00 012623 branch module_hci_dicard_packet -: 012625 module_hci_in_excp: -0x3a01 012626 call delay_10ms -0x3a02 012627 call module_hci_event_invalid_packet -0x3a03 012628 branch module_hci_release_except -: 012631 module_hci_release_except: -0x3a04 012632 bpatch patch1b_7 ,mem_patch1b -0x3a05 012633 hfetch 2 ,core_uart_rxitems -0x3a06 012634 rtn blank -0x3a07 012635 call uartd_prepare_rx -0x3a08 012636 ifetch 1 ,contru -0x3a09 012637 sub pdata ,0x01 ,null -0x3a0a 012638 ncall module_hci_dicard_bytes ,zero -0x3a0b 012639 nbranch module_hci_release_except ,zero -0x3a0c 012640 ifetch 1 ,contru -0x3a0d 012641 rtneq hci_cmd_spp_data_req -0x3a0e 012642 rtneq hci_cmd_set_credit_given -0x3a0f 012643 increase -1 ,contru -0x3a10 012644 call module_hci_dicard_bytes -0x3a11 012645 branch module_hci_release_except -: 012647 module_hci_dicard_packet: -0x3a12 012648 call uartd_prepare_rx -0x3a13 012649 increase 2 ,contru -0x3a14 012650 ifetch 1 ,contru -0x3a15 012651 iadd contru ,contru -: 012652 module_hci_dicard_bytes: -0x3a16 012653 branch uartd_rxdone -: 012656 module_hci_cmd_control: -0x3a17 012657 bpatch patch1c_0 ,mem_patch1c -0x3a18 012658 fetch 1 ,mem_module_uart_opcode -0x3a19 012659 beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr -0x3a1a 012660 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr -0x3a1b 012661 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility -0x3a1c 012662 beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name -0x3a1d 012663 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name -0x3a1e 012664 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data -0x3a1f 012665 beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data -0x3a20 012666 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status -0x3a21 012667 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode -0x3a22 012668 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode -0x3a23 012669 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode -0x3a24 012670 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud -0x3a25 012671 beq hci_cmd_version_req ,module_hci_cmd_version_request -0x3a26 012672 beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect -0x3a27 012673 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect -0x3a28 012674 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram -0x3a29 012675 beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey -0x3a2a 012676 beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given -0x3a2b 012677 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv -0x3a2c 012678 beq hci_cmd_power_req ,module_hci_cmd_power_request -0x3a2d 012679 beq hci_cmd_power_set ,module_hci_cmd_power_set -0x3a2e 012680 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry -0x3a2f 012681 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio -0x3a30 012682 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio -0x3a31 012683 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode -0x3a32 012684 beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data -0x3a33 012685 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data -0x3a34 012686 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req -0x3a35 012687 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter -0x3a36 012688 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing -0x3a37 012689 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio -0x3a38 012690 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power -0x3a39 012691 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey -0x3a3a 012692 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag -0x3a3b 012693 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip -0x3a3c 012694 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey -0x3a3d 012695 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm -0x3a3e 012696 branch module_hci_event_receive_invalid_cmd -: 012701 module_hci_cmd_set_bt_addr: -0x3a3f 012702 fetch 1 ,mem_module_uart_len -0x3a40 012703 bne 6 ,module_hci_event_receive_invalid_cmd -0x3a41 012704 ifetch 6 ,contru -0x3a42 012705 store 6 ,mem_lap -0x3a43 012706 branch module_hci_event_receive_valid_cmd -: 012709 module_hci_cmd_set_le_addr: -0x3a44 012710 fetch 1 ,mem_module_uart_len -0x3a45 012711 bne 6 ,module_hci_event_receive_invalid_cmd -0x3a46 012712 ifetch 6 ,contru -0x3a47 012713 store 6 ,mem_le_lap -0x3a48 012714 branch module_hci_event_receive_valid_cmd -: 012718 module_hci_cmd_set_visibility: -0x3a49 012719 fetch 1 ,mem_module_uart_len -0x3a4a 012720 bne 1 ,module_hci_event_receive_invalid_cmd -0x3a4b 012721 copy rega ,contru -0x3a4c 012722 call module_hci_event_receive_valid_cmd -0x3a4d 012723 ifetcht 1 ,contru -0x3a4e 012724 storet 1 ,mem_module_bluetooth_stauts_by_command -0x3a4f 012725 fetch 2 ,mem_ui_state_map -0x3a50 012726 rtnbit1 ui_state_ble_connected -0x3a51 012727 rtnbit1 ui_state_bt_connected -: 012728 module_start_adv_discovery_by_command: -0x3a52 012729 fetch 1 ,mem_module_state -0x3a53 012730 isolate1 moudle_state_bt_bit ,pdata -0x3a54 012731 nbranch moudle_start_adv_by_command ,true -0x3a55 012732 fetcht 1 ,mem_module_bluetooth_stauts_by_command -0x3a56 012733 and temp ,0x03 ,pdata -0x3a57 012734 store 1 ,mem_scan_mode -: 012735 moudle_start_adv_by_command: -0x3a58 012736 fetch 1 ,mem_module_state -0x3a59 012737 isolate1 moudle_state_ble_bit ,pdata -0x3a5a 012738 nrtn true -0x3a5b 012739 fetcht 1 ,mem_module_bluetooth_stauts_by_command -0x3a5c 012740 isolate1 2 ,temp -0x3a5d 012741 branch app_ble_start_adv ,true -0x3a5e 012742 branch app_ble_stop_adv -: 012746 module_hci_cmd_set_bt_name: -0x3a5f 012747 fetch 1 ,mem_module_uart_len -0x3a60 012748 sub pdata ,67 ,null -0x3a61 012749 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3a62 012750 store 1 ,mem_local_name_length -0x3a63 012751 arg 8 ,loopcnt -0x3a64 012752 call memset0 -0x3a65 012753 fetch 1 ,mem_module_uart_len -0x3a66 012754 copy pdata ,loopcnt -0x3a67 012755 copy rega ,contru -0x3a68 012756 arg mem_local_name ,contw -0x3a69 012757 call uart_copy_rx_bytes_fast -0x3a6a 012758 branch module_hci_event_receive_valid_cmd -: 012762 module_hci_cmd_set_le_name: -0x3a6b 012763 fetch 1 ,mem_module_uart_len -0x3a6c 012764 sub pdata ,29 ,null -0x3a6d 012765 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3a6e 012766 store 1 ,mem_le_name_len -0x3a6f 012767 copy pdata ,loopcnt -0x3a70 012768 copy rega ,contru -0x3a71 012769 arg mem_le_name ,contw -0x3a72 012770 call uart_copy_rx_bytes_fast -0x3a73 012771 call le_modified_name -0x3a74 012772 branch module_hci_event_receive_valid_cmd -: 012776 module_hci_cmd_receive_spp_data: -0x3a75 012777 fetch 1 ,mem_ui_state_map -0x3a76 012778 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd -0x3a77 012779 call app_check_sniff -0x3a78 012780 branch module_hci_cmd_spp_exit_sniff ,true -0x3a79 012781 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3a7a 012783 call module_spp_clear_last_transmite_clock -0x3a7b 012784 fetch 1 ,mem_remote_credits -0x3a7c 012785 rtn blank -0x3a7d 012786 fetch 2 ,mem_nl_rx_len_all -0x3a7e 012787 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all -0x3a7f 012788 fetch 1 ,mem_module_uart_len -0x3a80 012789 store 2 ,mem_nl_rx_len_all -0x3a81 012791 copy rega ,contru -0x3a82 012794 copy contru ,pdata -0x3a83 012795 store 2 ,mem_nl_rx_data_src -: 012796 module_hci_cmd_pass_init_ng_rx_len_all: -0x3a84 012797 call module_hci_cmd_get_current_packet_len_and_remain_len -0x3a85 012798 branch spp_tx_rfcomm_packet -: 012800 module_hci_cmd_spp_exit_sniff: -0x3a86 012801 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3a87 012802 branch module_exit_sniff -: 012804 module_hci_cmd_get_current_packet_len_and_remain_len: -0x3a88 012805 call module_hci_cmd_get_current_patcket_len -0x3a89 012806 fetch 2 ,mem_nl_rx_len_all -0x3a8a 012807 fetcht 2 ,mem_current_packet_length -0x3a8b 012808 isub temp ,pdata -0x3a8c 012809 store 2 ,mem_nl_rx_len_all -0x3a8d 012810 rtn -: 012812 module_hci_cmd_get_current_patcket_len: -0x3a8e 012813 fetch 2 ,mem_nl_rx_len_all -0x3a8f 012814 arg dm_refcom_buff_len ,temp -0x3a90 012815 call not_greater_than -0x3a91 012816 fetcht 2 ,mem_rfcomm_max_frame_size -0x3a92 012817 call not_greater_than -0x3a93 012818 fetcht 2 ,mem_pn_max_frame_size -0x3a94 012819 call not_greater_than -0x3a95 012820 store 2 ,mem_current_packet_length -0x3a96 012821 rtn -: 012823 module_hci_command_tx_spp_tx_complete: -0x3a97 012824 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x3a98 012825 jam hci_cmd_spp_data_req ,mem_module_uart_opcode -0x3a99 012826 branch module_hci_event_receive_valid_cmd -: 012830 module_hci_cmd_receive_le_data: -0x3a9a 012831 fetch 2 ,mem_ui_state_map -0x3a9b 012832 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd -0x3a9c 012833 call module_check_ble_encrypt_state -0x3a9d 012834 branch module_hci_event_receive_invalid_cmd ,user -0x3a9e 012835 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3a9f 012836 fetch 1 ,mem_module_flag -0x3aa0 012837 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish -0x3aa1 012838 fetch 1 ,mem_module_hci_notify_len -0x3aa2 012839 nrtn blank -0x3aa3 012840 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x3aa4 012841 ifetch 2 ,contru -0x3aa5 012842 store 2 ,mem_module_hci_notify_handle -0x3aa6 012843 copy contru ,pdata -0x3aa7 012844 store 2 ,mem_module_hci_nofiy_addr -0x3aa8 012845 fetch 1 ,mem_module_uart_len -0x3aa9 012846 pincrease -2 -0x3aaa 012847 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3aab 012848 branch module_hci_event_receive_invalid_cmd ,zero -0x3aac 012849 store 1 ,mem_module_hci_notify_len -0x3aad 012850 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3aae 012851 call le_set_config_more_data -0x3aaf 012852 call module_hci_cmd_transmit_le_notify -0x3ab0 012853 call module_hci_cmd_transmit_le_notify -0x3ab1 012854 call module_hci_cmd_transmit_le_notify -0x3ab2 012855 fetch 1 ,mem_module_flag -0x3ab3 012856 rtnbit0 module_flag_ble_data_finish -: 012857 module_hci_cmd_receive_le_data_finish: -0x3ab4 012858 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x3ab5 012859 call module_clear_le_tx_data_flag -0x3ab6 012860 branch module_hci_event_receive_valid_cmd -: 012862 module_hci_cmd_transmit_le_notify: -0x3ab7 012863 fetch 1 ,mem_module_hci_notify_len -0x3ab8 012864 rtn blank -0x3ab9 012865 call le_fifo_check_nearly_full -0x3aba 012866 nrtn blank -0x3abb 012867 call module_get_le_remote_mtu -0x3abc 012868 bpatch patch1c_1 ,mem_patch1c -0x3abd 012869 add temp ,-3 ,pdata -0x3abe 012870 fetcht 1 ,mem_module_hci_notify_len -0x3abf 012871 call not_greater_than -0x3ac0 012872 copy pdata ,rega -0x3ac1 012873 copy temp ,pdata -0x3ac2 012874 isub rega ,pdata -0x3ac3 012875 store 1 ,mem_module_hci_notify_len -0x3ac4 012876 fetcht 2 ,mem_module_hci_notify_handle -0x3ac5 012877 call le_att_malloc_tx_notify -0x3ac6 012878 fetch 2 ,mem_module_hci_nofiy_addr -0x3ac7 012879 copy pdata ,contru -0x3ac8 012880 copy rega ,loopcnt -0x3ac9 012881 call uart_copy_rx_bytes_fast -0x3aca 012882 copy contru ,pdata -0x3acb 012883 store 2 ,mem_module_hci_nofiy_addr -0x3acc 012884 fetch 1 ,mem_module_hci_notify_len -0x3acd 012885 nrtn blank -0x3ace 012886 branch module_set_le_tx_data_flag -: 012890 module_get_le_remote_mtu: -0x3acf 012891 arg 0x17 ,temp -0x3ad0 012892 fetch 1 ,mem_module_flag -0x3ad1 012893 rtnbit1 module_flag_ble_send_mtu23 -0x3ad2 012894 fetcht 2 ,mem_le_remote_mtu -0x3ad3 012895 rtn -: 012897 module_check_ble_encrypt_state: -0x3ad4 012898 fetch 1 ,mem_module_flag -0x3ad5 012899 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state -0x3ad6 012900 branch disable_user -: 012904 module_hci_cmd_inquire_status: -0x3ad7 012905 branch module_hci_event_status_res -: 012909 module_hci_cmd_set_pairing_mode: -0x3ad8 012910 copy rega ,contru -0x3ad9 012911 ifetch 1 ,contru -0x3ada 012912 beq pairing_pincode ,module_hci_pairing_pincode_mode -0x3adb 012913 beq pairing_justwork ,module_hci_pairing_just_work_mode -0x3adc 012914 beq pairing_passkey ,module_hci_pairing_passkey -0x3add 012915 beq pairing_confirm ,module_hci_pairing_numeric_comparison -0x3ade 012916 branch module_hci_event_receive_invalid_cmd -: 012917 module_hci_pairing_pincode_mode: -0x3adf 012918 call ssp_disable -0x3ae0 012919 jam 0 ,mem_ssp_enable -0x3ae1 012920 branch module_hci_event_receive_valid_cmd -: 012921 module_hci_pairing_just_work_mode: -0x3ae2 012922 setarg ssp_mode_just_work_io_cap_data -: 012923 module_hci_sspairing_mode: -0x3ae3 012924 store 3 ,mem_sp_iocap_local -0x3ae4 012925 store 1 ,mem_ssp_mode_flag -0x3ae5 012926 call ssp_enable -0x3ae6 012927 jam 1 ,mem_ssp_enable -0x3ae7 012928 branch module_hci_event_receive_valid_cmd -: 012929 module_hci_pairing_passkey: -0x3ae8 012930 setarg ssp_mode_passkey_io_cap_data -0x3ae9 012931 branch module_hci_sspairing_mode -: 012933 module_hci_pairing_numeric_comparison: -0x3aea 012934 setarg ssp_mode_ssp_pin_io_cap_data -0x3aeb 012935 branch module_hci_sspairing_mode -: 012938 module_hci_cmd_set_pincode: -0x3aec 012939 fetch 1 ,mem_module_uart_len -0x3aed 012940 sub pdata ,16 ,null -0x3aee 012941 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3aef 012942 store 1 ,mem_pin_length -0x3af0 012943 copy pdata ,loopcnt -0x3af1 012944 arg mem_pin ,contw -0x3af2 012945 call uart_copy_rx_bytes -0x3af3 012946 branch module_hci_event_receive_valid_cmd -: 012950 module_hci_cmd_set_uart_control_mode: -0x3af4 012951 copy rega ,contru -0x3af5 012952 ifetch 1 ,contru -0x3af6 012953 hfetcht 1 ,core_uart_ctrl -0x3af7 012954 nsetflag blank ,4 ,temp -0x3af8 012955 hstoret 1 ,core_uart_ctrl -0x3af9 012956 branch module_hci_event_receive_valid_cmd -: 012960 module_hci_cmd_set_uart_baud: -0x3afa 012961 fetch 1 ,mem_module_uart_len -0x3afb 012962 copy pdata ,loopcnt -0x3afc 012963 copy rega ,contru -0x3afd 012964 call string2dec_from_uart -0x3afe 012965 setarg uart_clk_24 -0x3aff 012966 idiv temp -0x3b00 012967 call wait_div_end -0x3b01 012968 quotient pdata -: 012969 module_hci_cmd_set_uart_baud_ok: -0x3b02 012970 store uart_baud_len ,mem_baud -0x3b03 012971 call module_hci_event_receive_valid_cmd -0x3b04 012972 call wait_uarttx -0x3b05 012973 branch uart_set_baud_by_mem -: 012977 module_hci_cmd_version_request: -0x3b06 012978 arg 2 ,rega -0x3b07 012979 arg mem_soft_version_num ,regb -0x3b08 012980 arg 0 ,temp -0x3b09 012981 branch module_hci_event_set_cmd -: 012982 module_hci_event_set_cmd_send_response: -0x3b0a 012983 store 2 ,mem_event_cmd_response_content -0x3b0b 012984 arg mem_event_cmd_response_content ,regb -0x3b0c 012985 arg 0 ,temp -0x3b0d 012986 branch module_hci_event_set_cmd -: 012990 module_hci_cmd_bt_disconnect: -0x3b0e 012991 fetch 2 ,mem_ui_state_map -0x3b0f 012992 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd -: 012993 module_hci_cmd_bt_disconnect_doing: -0x3b10 012994 call module_hci_event_receive_valid_cmd -0x3b11 012995 branch app_bt_disconnect -: 012999 module_hci_cmd_ble_disconnect: -0x3b12 013000 fetch 2 ,mem_ui_state_map -0x3b13 013001 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd -: 013002 module_hci_cmd_ble_disconnect_doing: -0x3b14 013003 call module_hci_event_receive_valid_cmd -0x3b15 013004 branch app_ble_disconnect -: 013010 module_hci_cmd_set_nvram: -0x3b16 013011 fetch 1 ,mem_module_uart_len -0x3b17 013012 copy pdata ,loopcnt -0x3b18 013013 copy rega ,contru -0x3b19 013014 fetch 2 ,mem_nv_data_ptr -0x3b1a 013015 icopy contw -0x3b1b 013016 call uart_copy_rx_bytes_fast -0x3b1c 013017 branch module_hci_event_receive_valid_cmd -: 013021 module_hci_cmd_confirm_gkey: -0x3b1d 013022 fetch 1 ,mem_ui_state_map -0x3b1e 013023 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd -0x3b1f 013024 ifetch 1 ,contru -0x3b20 013025 fetcht 1 ,mem_flag_mode_ssp_pin -0x3b21 013026 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp -0x3b22 013027 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp -0x3b23 013028 storet 1 ,mem_flag_mode_ssp_pin -0x3b24 013030 call module_hci_event_receive_valid_cmd -0x3b25 013032 fetch 1 ,mem_flag_mode_ssp_pin -0x3b26 013033 bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 -0x3b27 013034 rtn -: 013036 dhkey_not_accept: -0x3b28 013037 jam 0 ,mem_flag_mode_ssp_pin -0x3b29 013038 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp -0x3b2a 013039 branch ui_ipc_send_cmd -: 013042 module_hci_cmd_spp_number_comparison_result_is1: -0x3b2b 013043 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed -0x3b2c 013044 branch dhkey_not_accept -: 013048 module_hci_cmd_set_credit_given: -0x3b2d 013049 fetch 1 ,mem_ui_state_map -0x3b2e 013050 rtnbit0 ui_state_bt_spp_conn -0x3b2f 013051 fetch 1 ,mem_credit_flag -0x3b30 013052 rtneq credit_disable -0x3b31 013053 ifetch 1 ,contru -0x3b32 013054 fetcht 1 ,mem_credit_given -0x3b33 013055 iadd temp ,temp -0x3b34 013056 storet 1 ,mem_credit_given -0x3b35 013057 rtn -: 013061 module_hci_cmd_auto_adv: -0x3b36 013062 arg 0x40 ,loopcnt -0x3b37 013063 arg mem_le_adv_data_len ,contw -0x3b38 013064 call clear_mem -0x3b39 013065 setarg 0 -0x3b3a 013066 store 1 ,mem_regb -0x3b3b 013067 copy rega ,contru -: 013068 module_hci_cmd_auto_adv_loop: -0x3b3c 013069 copy contru ,pdata -0x3b3d 013070 store 2 ,mem_regc -0x3b3e 013071 call module_hci_cmd_auto_adv_adv_analys -0x3b3f 013073 fetch 1 ,mem_regb -0x3b40 013074 fetcht 1 ,mem_temp -0x3b41 013075 increase 1 ,temp -0x3b42 013076 iadd temp ,pdata -0x3b43 013077 store 1 ,mem_regb -0x3b44 013079 sub pdata ,31 ,null -0x3b45 013080 nbranch module_hci_cmd_auto_adv_store_scan ,positive -: 013081 module_hci_cmd_auto_adv_store_adv: -0x3b46 013082 fetcht 1 ,mem_le_adv_data_len -0x3b47 013083 setarg mem_le_adv_data -0x3b48 013084 iadd temp ,pdata -0x3b49 013085 store 2 ,mem_contw -0x3b4a 013086 fetcht 1 ,mem_temp -0x3b4b 013087 increase 1 ,temp -0x3b4c 013088 fetch 1 ,mem_le_adv_data_len -0x3b4d 013089 iadd temp ,pdata -0x3b4e 013090 store 1 ,mem_le_adv_data_len -0x3b4f 013091 branch module_hci_cmd_auto_adv_store_common -: 013092 module_hci_cmd_auto_adv_store_scan: -0x3b50 013093 fetcht 1 ,mem_le_scan_data_len -0x3b51 013094 setarg mem_le_scan_data -0x3b52 013095 iadd temp ,pdata -0x3b53 013096 store 2 ,mem_contw -0x3b54 013097 fetcht 1 ,mem_temp -0x3b55 013098 increase 1 ,temp -0x3b56 013099 fetch 1 ,mem_le_scan_data_len -0x3b57 013100 iadd temp ,pdata -0x3b58 013101 store 1 ,mem_le_scan_data_len -: 013102 module_hci_cmd_auto_adv_store_common: -0x3b59 013103 fetch 2 ,mem_contw -0x3b5a 013104 copy pdata ,contw -0x3b5b 013105 fetch 2 ,mem_regc -0x3b5c 013106 copy pdata ,contru -0x3b5d 013108 copy temp ,loopcnt -0x3b5e 013109 call uart_copy_rx_bytes_fast -0x3b5f 013111 fetch 1 ,mem_module_uart_len -0x3b60 013112 fetcht 1 ,mem_regb -0x3b61 013113 isub temp ,null -0x3b62 013114 nbranch module_hci_cmd_auto_adv_loop ,zero -0x3b63 013115 branch module_hci_event_receive_valid_cmd -: 013118 module_hci_cmd_auto_adv_adv_analys: -0x3b64 013119 ifetch 1 ,contru -0x3b65 013120 store 1 ,mem_temp -0x3b66 013121 ifetch 1 ,contru -0x3b67 013122 store 1 ,mem_rega -0x3b68 013123 rtn -: 013127 module_hci_cmd_power_request: -0x3b69 013128 arg 0 ,temp -0x3b6a 013129 arg 2 ,rega -0x3b6b 013130 fetch 2 ,mem_module_vdd_quotient -0x3b6c 013131 store 2 ,mem_event_cmd_response_content -0x3b6d 013132 arg mem_event_cmd_response_content ,regb -0x3b6e 013133 branch module_hci_event_set_cmd -: 013137 module_hci_cmd_power_set: -0x3b6f 013138 fetch 1 ,mem_module_uart_len -0x3b70 013139 bne 1 ,module_hci_event_receive_invalid_cmd -0x3b71 013140 ifetch 1 ,contru -0x3b72 013141 store 1 ,mem_module_read_vdd_flag -0x3b73 013142 setarg 0x00 -0x3b74 013143 store 2 ,mem_module_vdd_quotient -0x3b75 013144 branch module_hci_event_receive_valid_cmd -: 013148 module_hci_cmd_passkey_entry: -0x3b76 013149 ifetch 4 ,contru -0x3b77 013150 store 4 ,mem_pin -0x3b78 013151 jam 4 ,mem_pin_length -0x3b79 013152 jam 0 ,mem_authentication_passkey_times -0x3b7a 013153 call module_hci_event_receive_valid_cmd -0x3b7b 013154 branch authentication_passkey -: 013158 module_hci_cmd_set_gpio: -0x3b7c 013159 fetch 1 ,mem_module_uart_len -0x3b7d 013160 bne 3 ,module_hci_event_receive_invalid_cmd -0x3b7e 013161 ifetch 1 ,contru -0x3b7f 013162 beq hci_cmd_config_gpio_input ,module_set_gpio_input -0x3b80 013163 beq hci_cmd_config_gpio_output ,module_set_gpio_output -0x3b81 013164 branch module_hci_event_receive_invalid_cmd -: 013166 module_set_gpio_input: -0x3b82 013167 ifetcht 1 ,contru -0x3b83 013168 ifetch 1 ,contru -0x3b84 013169 beq gpio_input_high_impedance ,module_set_gpio_high_impedance -0x3b85 013170 nsetflag blank ,7 ,temp -0x3b86 013171 call gpio_config_input -0x3b87 013172 branch module_hci_event_receive_valid_cmd -: 013174 module_set_gpio_high_impedance: -0x3b88 013175 call gpio_set_high_impedance -0x3b89 013176 branch module_hci_event_receive_valid_cmd -: 013178 module_set_gpio_output: -0x3b8a 013179 ifetcht 1 ,contru -0x3b8b 013180 call gpio_config_output0 -0x3b8c 013181 ifetch 1 ,contru -0x3b8d 013182 isolate1 0 ,pdata -0x3b8e 013183 call gpio_out_flag -0x3b8f 013184 branch module_hci_event_receive_valid_cmd -: 013188 module_hci_cmd_read_gpio: -0x3b90 013189 fetch 1 ,mem_module_uart_len -0x3b91 013190 bne 1 ,module_hci_event_receive_invalid_cmd -0x3b92 013191 ifetcht 1 ,contru -0x3b93 013192 call gpio_get_bit -0x3b94 013193 setarg 0x0 -0x3b95 013194 nsetflag true ,0 ,pdata -0x3b96 013195 arg 1 ,rega -0x3b97 013196 branch module_hci_event_set_cmd_send_response -: 013200 module_hci_cmd_le_set_pairing_mode: -0x3b98 013201 copy rega ,contru -0x3b99 013202 ifetch 1 ,contru -0x3b9a 013203 copy pdata ,temp -0x3b9b 013204 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork -0x3b9c 013205 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric -0x3b9d 013206 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey -0x3b9e 013207 store 1 ,mem_le_pairing_mode -0x3b9f 013208 beq le_pairing_mode_none ,module_le_set_no_pairing -0x3ba0 013209 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work -0x3ba1 013210 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey -0x3ba2 013211 branch module_hci_event_receive_invalid_cmd -: 013213 module_le_set_pairing_mode_secure_justwork: -0x3ba3 013214 fetch 1 ,mem_le_secure_connect_enable -0x3ba4 013215 branch module_hci_event_receive_invalid_cmd ,blank -0x3ba5 013216 storet 1 ,mem_le_pairing_mode -0x3ba6 013217 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x3ba7 013218 branch module_le_set_noinputnooutput -: 013219 module_le_set_pairing_mode_secure_numeric: -0x3ba8 013220 fetch 1 ,mem_le_secure_connect_enable -0x3ba9 013221 branch module_hci_event_receive_invalid_cmd ,blank -0x3baa 013222 storet 1 ,mem_le_pairing_mode -0x3bab 013223 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x3bac 013224 jam flag_iocap_displayyesno ,mem_le_pres_iocap -0x3bad 013225 branch module_hci_event_receive_valid_cmd -: 013226 module_le_set_pairing_mode_secure_passkey: -0x3bae 013227 fetch 1 ,mem_le_secure_connect_enable -0x3baf 013228 branch module_hci_event_receive_invalid_cmd ,blank -0x3bb0 013229 storet 1 ,mem_le_pairing_mode -0x3bb1 013230 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x3bb2 013231 branch module_le_set_displayonly -: 013232 module_le_set_no_pairing: -0x3bb3 013233 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth -: 013234 module_le_set_noinputnooutput: -0x3bb4 013235 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap -0x3bb5 013236 branch module_hci_event_receive_valid_cmd -: 013237 module_le_set_pairing_mode_lagacy_just_work: -0x3bb6 013238 jam flag_le_bonding_mitm ,mem_le_pres_auth -0x3bb7 013239 branch module_le_set_noinputnooutput -: 013240 module_le_set_pairing_mode_lagacy_passkey: -0x3bb8 013241 jam flag_le_bonding_mitm ,mem_le_pres_auth -: 013242 module_le_set_displayonly: -0x3bb9 013243 jam flag_iocap_displayonly ,mem_le_pres_iocap -0x3bba 013244 branch module_hci_event_receive_valid_cmd -: 013248 module_hci_cmd_le_set_adv_data: -0x3bbb 013249 fetch 1 ,mem_module_uart_len -0x3bbc 013250 sub pdata ,31 ,null -0x3bbd 013251 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3bbe 013252 store 1 ,mem_le_adv_data_len -0x3bbf 013253 copy pdata ,loopcnt -0x3bc0 013254 copy rega ,contru -0x3bc1 013255 arg mem_le_adv_data ,contw -0x3bc2 013256 call uart_copy_rx_bytes_fast -0x3bc3 013257 branch module_hci_event_receive_valid_cmd -: 013261 module_hci_cmd_le_set_scan_data: -0x3bc4 013262 fetch 1 ,mem_module_uart_len -0x3bc5 013263 sub pdata ,31 ,null -0x3bc6 013264 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3bc7 013265 store 1 ,mem_le_scan_data_len -0x3bc8 013266 copy pdata ,loopcnt -0x3bc9 013267 copy rega ,contru -0x3bca 013268 arg mem_le_scan_data ,contw -0x3bcb 013269 call uart_copy_rx_bytes_fast -0x3bcc 013270 branch module_hci_event_receive_valid_cmd -: 013274 module_hci_cmd_le_send_conn_update_req: -0x3bcd 013275 fetch 2 ,mem_ui_state_map -0x3bce 013276 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd -0x3bcf 013277 fetch 1 ,mem_module_uart_len -0x3bd0 013278 bne 0x08 ,module_hci_event_receive_invalid_cmd -0x3bd1 013279 copy rega ,contru -0x3bd2 013280 ifetch 8 ,contru -0x3bd3 013281 store 8 ,mem_le_interval_min -0x3bd4 013282 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x3bd5 013283 call ui_ipc_send_cmd -0x3bd6 013284 branch module_hci_event_receive_valid_cmd -: 013288 module_hci_cmd_set_le_adv_parameter: -0x3bd7 013289 ifetch 2 ,contru -0x3bd8 013290 store 2 ,mem_le_adv_interval -0x3bd9 013291 branch module_hci_event_receive_valid_cmd -: 013295 module_hci_cmd_le_start_pairing: -0x3bda 013296 fetch 1 ,mem_le_pairing_mode -0x3bdb 013297 branch module_hci_event_receive_invalid_cmd ,blank -0x3bdc 013298 fetch 1 ,mem_le_pairing_state -0x3bdd 013299 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd -0x3bde 013300 fetch 1 ,mem_le_enc_state -0x3bdf 013301 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd -0x3be0 013302 call check_51cmd_le_smp_sec_req -0x3be1 013303 branch module_hci_event_receive_valid_cmd -: 013307 module_hci_cmd_set_wake_gpio: -0x3be2 013308 fetch 1 ,mem_module_uart_len -0x3be3 013309 bne 5 ,module_hci_event_receive_invalid_cmd -0x3be4 013310 ifetch 1 ,contru -0x3be5 013311 store 1 ,mem_module_mcu_wake_pin -0x3be6 013312 ifetch 4 ,contru -0x3be7 013313 store 4 ,mem_module_mcu_wake_delay_us -0x3be8 013314 fetcht 1 ,mem_module_mcu_wake_pin -0x3be9 013315 call gpio_config_output -0x3bea 013316 call module_set_mcu_wake_pin_low -0x3beb 013317 branch module_hci_event_receive_valid_cmd -: 013321 module_hci_cmd_set_tx_power: -0x3bec 013322 fetch 1 ,mem_module_uart_len -0x3bed 013323 bne 0x01 ,module_hci_event_receive_invalid_cmd -0x3bee 013324 ifetch 1 ,contru -0x3bef 013325 store 1 ,mem_tx_power -0x3bf0 013326 branch module_hci_event_receive_valid_cmd -: 013330 module_hci_cmd_le_confirm_gkey: -0x3bf1 013331 ifetch 1 ,contru -0x3bf2 013332 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail -0x3bf3 013333 fetch 1 ,mem_le_secure_connect_state -0x3bf4 013334 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok -0x3bf5 013335 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok -0x3bf6 013336 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok -0x3bf7 013337 branch module_hci_event_receive_invalid_cmd -: 013338 module_hci_cmd_le_confirm_gkey_ok: -0x3bf8 013339 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag -0x3bf9 013340 branch module_hci_event_receive_valid_cmd -: 013342 module_hci_cmd_le_confirm_gkey_fail: -0x3bfa 013343 call le_send_pairing_confirm_value_failed -0x3bfb 013344 branch module_hci_event_receive_valid_cmd -: 013348 module_hci_cmd_set_reject_justwork_flag: -0x3bfc 013349 fetch 1 ,mem_module_uart_len -0x3bfd 013350 bne 0x01 ,module_hci_event_receive_invalid_cmd -0x3bfe 013351 call module_hci_event_receive_valid_cmd -0x3bff 013352 ifetch 1 ,contru -0x3c00 013353 branch classic_bt_clr_reject_justwork_flag ,blank -0x3c01 013354 branch classic_bt_set_reject_justwork_flag -: 013358 module_hci_cmd_reset_chip: -0x3c02 013359 call module_hci_event_receive_valid_cmd -0x3c03 013360 call wait_uarttx -0x3c04 013361 jam 0x01 ,core_reset -0x3c05 013362 branch loop -: 013366 module_hci_cmd_le_set_fixed_passkey: -0x3c06 013367 fetch 1 ,mem_module_uart_len -0x3c07 013368 beq 0 ,module_hci_event_receive_invalid_cmd -0x3c08 013369 ifetch 1 ,contru -0x3c09 013370 branch module_hci_cmd_le_set_random_passkey ,blank -0x3c0a 013371 fetch 1 ,mem_module_uart_len -0x3c0b 013372 bne 5 ,module_hci_event_receive_invalid_cmd -0x3c0c 013373 ifetch 4 ,contru -0x3c0d 013374 arg 1000000 ,temp -0x3c0e 013375 isub temp ,null -0x3c0f 013376 branch module_hci_event_receive_invalid_cmd ,positive -0x3c10 013377 store 4 ,mem_le_tk -0x3c11 013378 call le_set_config_fixed_tk -0x3c12 013379 branch module_hci_event_receive_valid_cmd -: 013381 module_hci_cmd_le_set_random_passkey: -0x3c13 013382 call le_clr_config_fixed_tk -0x3c14 013383 branch module_hci_event_receive_valid_cmd -: 013387 module_hci_test_cmde_close_lpm: -0x3c15 013388 jam 0 ,mem_lpm_mode -0x3c16 013389 branch module_hci_event_receive_valid_cmd -: 013394 module_hci_event_receive_invalid_cmd: -0x3c17 013395 arg 1 ,temp -0x3c18 013396 arg 0 ,rega -0x3c19 013397 branch module_hci_event_set_cmd -: 013400 module_hci_event_receive_valid_cmd: -0x3c1a 013401 arg 0 ,temp -0x3c1b 013402 arg 0 ,rega -0x3c1c 013403 branch module_hci_event_set_cmd -: 013407 module_hci_event_spp_connect: -0x3c1d 013408 jam hci_event_spp_conn_rep ,mem_module_uart_opcode -0x3c1e 013409 branch module_hci_event_enter_standby_mode_len0 -: 013413 module_hci_event_le_connect: -0x3c1f 013414 jam hci_event_le_conn_rep ,mem_module_uart_opcode -0x3c20 013415 branch module_hci_event_enter_standby_mode_len0 -: 013419 module_hci_event_spp_disconnect: -0x3c21 013420 jam hci_event_spp_dis_rep ,mem_module_uart_opcode -0x3c22 013421 branch module_hci_event_enter_standby_mode_len0 -: 013425 module_hci_event_le_disconnect: -0x3c23 013426 jam hci_event_le_dis_rep ,mem_module_uart_opcode -0x3c24 013427 branch module_hci_event_enter_standby_mode_len0 -: 013435 module_hci_event_set_cmd: -0x3c25 013436 fetch 1 ,mem_module_uart_opcode -0x3c26 013437 copy pdata ,regc -0x3c27 013438 jam hci_event_cmd_res ,mem_module_uart_opcode -0x3c28 013439 setarg 2 -0x3c29 013440 iadd rega ,pdata -0x3c2a 013441 call module_hci_prepare_tx -0x3c2b 013442 copy regc ,pdata -0x3c2c 013443 istore 1 ,contwu -0x3c2d 013444 istoret 1 ,contwu -0x3c2e 013445 copy rega ,loopcnt -0x3c2f 013446 copy regb ,contr -0x3c30 013447 call uart_copy_tx_bytes -0x3c31 013448 branch uartd_send -: 013452 module_hci_event_receive_spp_data: -0x3c32 013454 call module_spp_clear_last_transmite_clock -0x3c33 013455 jam hci_event_spp_data_rep ,mem_module_uart_opcode -0x3c34 013456 fetch 1 ,mem_current_length -0x3c35 013457 rtn blank -0x3c36 013458 call module_hci_prepare_tx -0x3c37 013459 fetch 1 ,mem_current_length -0x3c38 013460 copy pdata ,loopcnt -0x3c39 013461 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x3c3a 013462 copy pdata ,contr -0x3c3b 013463 call uart_copy_tx_bytes_fast -0x3c3c 013464 branch uartd_send -: 013468 module_hci_event_receive_le_data: -0x3c3d 013469 jam hci_event_le_data_rep ,mem_module_uart_opcode -0x3c3e 013470 fetch 1 ,mem_module_le_rx_data_len -0x3c3f 013471 icopy loopcnt -0x3c40 013472 increase 2 ,pdata -0x3c41 013473 call module_hci_prepare_tx -0x3c42 013474 fetch 2 ,mem_module_le_rx_data_handle -0x3c43 013475 istore 2 ,contwu -0x3c44 013476 fetch 2 ,mem_module_le_rx_data_address -0x3c45 013477 icopy contr -0x3c46 013478 call uart_copy_tx_bytes_fast -0x3c47 013479 branch uartd_send -: 013483 module_hci_event_enter_standby_mode: -0x3c48 013484 jam hci_event_standby_rep ,mem_module_uart_opcode -: 013485 module_hci_event_enter_standby_mode_len0: -0x3c49 013486 setarg 0 -0x3c4a 013487 call module_hci_prepare_tx -0x3c4b 013488 branch uartd_send -: 013492 module_hci_event_status_res: -0x3c4c 013493 jam hci_event_status_res ,mem_module_uart_opcode -0x3c4d 013494 setarg 1 -0x3c4e 013495 call module_hci_prepare_tx -0x3c4f 013497 call module_hci_read_bt_status -0x3c50 013499 fetch 2 ,mem_ui_state_map -0x3c51 013500 arg ui_state_bt_hid_conn ,queue -0x3c52 013501 qisolate1 pdata -0x3c53 013502 setflag true ,3 ,temp -0x3c54 013504 arg ui_state_ble_connected ,queue -0x3c55 013505 qisolate1 pdata -0x3c56 013506 setflag true ,5 ,temp -0x3c57 013508 fetch 1 ,mem_ui_state_map -0x3c58 013509 arg ui_state_bt_spp_conn ,queue -0x3c59 013510 qisolate1 pdata -0x3c5a 013511 setflag true ,4 ,temp -0x3c5b 013513 istoret 1 ,contwu -0x3c5c 013514 branch uartd_send -: 013518 module_hci_read_bt_status: -0x3c5d 013519 arg 0 ,temp -0x3c5e 013520 fetch 1 ,mem_scan_mode -0x3c5f 013521 arg inq_scan_mode ,queue -0x3c60 013522 qisolate1 pdata -0x3c61 013523 setflag true ,0 ,temp -0x3c62 013524 arg page_scan_mode ,queue -0x3c63 013525 qisolate1 pdata -0x3c64 013526 setflag true ,1 ,temp -0x3c65 013528 fetch 1 ,mem_le_adv_enable -0x3c66 013529 arg 0 ,queue -0x3c67 013530 qisolate1 pdata -0x3c68 013531 setflag true ,2 ,temp -0x3c69 013532 rtn -: 013536 module_hci_event_store_device: -0x3c6a 013537 jam hci_event_nvram_rep ,mem_module_uart_opcode -0x3c6b 013538 fetch 1 ,mem_nv_data_number -0x3c6c 013539 mul32 pdata ,34 ,pdata -0x3c6d 013540 icopy loopcnt -0x3c6e 013541 call module_hci_prepare_tx -0x3c6f 013542 fetch 2 ,mem_nv_data_ptr -0x3c70 013543 icopy contr -0x3c71 013544 call uart_copy_tx_bytes_fast -0x3c72 013545 branch uartd_send -: 013549 module_hci_event_gkey_generate: -0x3c73 013550 jam hci_event_gkey ,mem_module_uart_opcode -0x3c74 013551 setarg 4 -0x3c75 013552 call module_hci_prepare_tx -0x3c76 013553 fetch 4 ,mem_gkey -0x3c77 013554 istore 4 ,contwu -0x3c78 013555 branch uartd_send -: 013559 module_hci_event_invalid_packet: -0x3c79 013560 jam hci_event_invalid_packet ,mem_module_uart_opcode -0x3c7a 013561 hfetch 2 ,core_uart_rxitems -0x3c7b 013562 arg 0xff ,temp -0x3c7c 013563 call not_greater_than -0x3c7d 013564 copy pdata ,loopcnt -0x3c7e 013565 call module_hci_prepare_tx -0x3c7f 013566 call uartd_prepare_rx -0x3c80 013567 call uart_copy_rx2tx -0x3c81 013568 branch uartd_send -: 013572 module_hci_event_passkey_entry_mode: -0x3c82 013573 jam hci_event_get_passkey ,mem_module_uart_opcode -0x3c83 013574 branch module_hci_event_enter_standby_mode_len0 -: 013578 module_hci_event_le_tk: -0x3c84 013579 jam hci_event_le_tk ,mem_module_uart_opcode -0x3c85 013580 setarg 4 -0x3c86 013581 call module_hci_prepare_tx -0x3c87 013582 fetch 4 ,mem_le_tk -0x3c88 013583 istore 4 ,contwu -0x3c89 013584 branch uartd_send -: 013588 module_hci_event_le_pairing_fail: -0x3c8a 013589 arg flag_ble_pairing_fail ,rega -0x3c8b 013590 branch module_hci_event_pairing_completed -: 013592 module_hci_event_le_pairing_success: -0x3c8c 013593 arg flag_ble_pairing_success ,rega -0x3c8d 013594 branch module_hci_event_pairing_completed -: 013596 module_hci_event_bt_pairing_fail: -0x3c8e 013597 arg flag_bt_pairing_fail ,rega -0x3c8f 013598 branch module_hci_event_pairing_completed -: 013600 module_hci_event_bt_pairing_success: -0x3c90 013601 arg flag_bt_pairing_success ,rega -: 013603 module_hci_event_pairing_completed: -0x3c91 013604 jam 0 ,mem_flag_mode_ssp_pin -0x3c92 013605 jam hci_event_le_pairing_state ,mem_module_uart_opcode -0x3c93 013606 setarg 2 -0x3c94 013607 call module_hci_prepare_tx -0x3c95 013608 copy rega ,pdata -0x3c96 013609 istore 2 ,contwu -0x3c97 013610 branch uartd_send -: 013614 module_hci_event_pause_enc: -0x3c98 013615 arg flag_event_pause_enc ,regc -0x3c99 013616 branch module_hci_event_enc -: 013618 module_hci_event_start_enc: -0x3c9a 013619 arg flag_event_start_enc ,regc -: 013621 module_hci_event_enc: -0x3c9b 013622 jam hci_event_le_encryption_state ,mem_module_uart_opcode -0x3c9c 013623 setarg 1 -0x3c9d 013624 call module_hci_prepare_tx -0x3c9e 013625 copy regc ,pdata -0x3c9f 013626 istore 1 ,contwu -0x3ca0 013627 branch uartd_send -: 013631 module_hci_event_le_gkey: -0x3ca1 013632 jam hci_event_le_gkey ,mem_module_uart_opcode -0x3ca2 013633 setarg 4 -0x3ca3 013634 call module_hci_prepare_tx -0x3ca4 013635 fetch 4 ,mem_gkey -0x3ca5 013636 istore 4 ,contwu -0x3ca6 013637 branch uartd_send -: 013648 module_hci_prepare_tx: -0x3ca7 013649 jam 0x02 ,mem_module_uart_cmd -0x3ca8 013650 store 1 ,mem_module_uart_len -0x3ca9 013651 storet 8 ,mem_temp -0x3caa 013652 bpatch patch1c_2 ,mem_patch1c -0x3cab 013653 call module_set_mcu_wake_pin_high_delay -0x3cac 013654 fetcht 8 ,mem_temp -0x3cad 013655 call uartd_prepare_tx -0x3cae 013656 fetch 3 ,mem_module_uart_cmd -0x3caf 013657 istore 3 ,contwu -0x3cb0 013658 rtn -: 013661 module_set_mcu_wake_pin_high_delay: -0x3cb1 013662 call module_check_mcu_wake_pin_high -0x3cb2 013663 rtn true -: 013664 module_set_mcu_wake_pin_h_delay: -0x3cb3 013665 call module_set_mcu_wake_pin_high -0x3cb4 013666 fetch 4 ,mem_module_mcu_wake_delay_us -0x3cb5 013667 rshift2 pdata ,pdata -0x3cb6 013668 rtn blank -0x3cb7 013669 branch delay -: 013671 module_set_mcu_wake_pin_high: -0x3cb8 013673 fetcht 1 ,mem_module_mcu_wake_pin -0x3cb9 013674 branch gpio_out_active -: 013676 module_check_mcu_wake_pin_high: -0x3cba 013677 fetcht 1 ,mem_module_mcu_wake_pin -0x3cbb 013678 branch gpio_check_active -: 013680 module_set_mcu_wake_pin_low: -0x3cbc 013681 fetcht 1 ,mem_module_mcu_wake_pin -0x3cbd 013682 branch gpio_out_inactive -: 013685 delay: -0x3cbe 013686 increase -1 ,pdata -0x3cbf 013687 nop 38 -0x3cc0 013688 nbranch delay ,blank -0x3cc1 013689 rtn -: 013698 module_le_receive_data: -0x3cc2 013699 call module_check_ble_encrypt_state -0x3cc3 013700 rtn user -0x3cc4 013701 copy rega ,pdata -0x3cc5 013702 store 2 ,mem_module_le_rx_data_address -0x3cc6 013703 copy regb ,pdata -0x3cc7 013704 store 1 ,mem_module_le_rx_data_len -0x3cc8 013705 fetch 2 ,mem_le_att_handle -0x3cc9 013706 fetcht 2 ,mem_module_data_write_handle -0x3cca 013707 isub temp ,null -0x3ccb 013708 branch module_le_receive_data_ok ,zero -0x3ccc 013709 fetcht 2 ,mem_module_data_write_handle2 -0x3ccd 013710 isub temp ,null -0x3cce 013711 nrtn zero -: 013712 module_le_receive_data_ok: -0x3ccf 013713 store 2 ,mem_module_le_rx_data_handle -0x3cd0 013714 branch module_hci_event_receive_le_data -: 013719 module_exit_sniff: -0x3cd1 013720 fetch 1 ,mem_module_flag -0x3cd2 013721 rtnbit1 moudle_task_unsniff -0x3cd3 013722 call module_set_unsniff_task_flag -0x3cd4 013723 branch app_bt_sniff_exit -: 013726 module_set_lpm_mult_2: -0x3cd5 013727 jam 2 ,mem_lpm_mult -0x3cd6 013728 rtn -: 013732 module_bb_event_timer: -0x3cd7 013733 branch module_read_vdd_timer -: 013735 module_read_vdd_timer: -0x3cd8 013736 fetch 1 ,mem_module_read_vdd_flag -0x3cd9 013737 rtn blank -0x3cda 013738 fetch 1 ,mem_module_read_vdd_count -0x3cdb 013739 rtn blank -0x3cdc 013740 increase -1 ,pdata -0x3cdd 013741 store 1 ,mem_module_read_vdd_count -0x3cde 013742 nrtn blank -0x3cdf 013743 jam flag_module_read_vdd_count ,mem_module_read_vdd_count -0x3ce0 013744 call adc_set_mode -0x3ce1 013745 call vdd_calculate_by_mode -0x3ce2 013746 div pdata ,0x64 -0x3ce3 013747 call wait_div_end -0x3ce4 013748 quotient pdata -0x3ce5 013749 remainder temp -0x3ce6 013750 store 1 ,mem_module_vdd_quotient -0x3ce7 013751 storet 1 ,mem_module_vdd_remainder -0x3ce8 013752 rtn -: 013755 module_control_air_flow: -0x3ce9 013756 call check_uart_tx_buff -0x3cea 013757 branch app_l2cap_flow_control_enable ,positive -0x3ceb 013758 branch app_l2cap_flow_control_disable -: 013762 module_set_sniff_task_flag: -0x3cec 013763 arg moudle_task_sniff ,queue -0x3ced 013764 branch module_set_state -: 013766 module_clear_sniff_task_flag: -0x3cee 013767 arg moudle_task_sniff ,queue -0x3cef 013768 branch module_clr_state -: 013770 module_set_unsniff_task_flag: -0x3cf0 013771 arg moudle_task_unsniff ,queue -0x3cf1 013772 branch module_set_state -: 013774 module_clear_unsniff_task_flag: -0x3cf2 013775 arg moudle_task_unsniff ,queue -0x3cf3 013776 branch module_clr_state -: 013778 module_set_le_tx_data_flag: -0x3cf4 013779 arg module_flag_ble_data_finish ,queue -0x3cf5 013780 branch module_set_state -: 013782 module_clear_le_tx_data_flag: -0x3cf6 013783 arg module_flag_ble_data_finish ,queue -0x3cf7 013784 branch module_clr_state -: 013786 module_clr_state: -0x3cf8 013787 fetch 1 ,mem_module_flag -0x3cf9 013788 qset0 pdata -0x3cfa 013789 store 1 ,mem_module_flag -0x3cfb 013790 rtn -: 013792 module_set_state: -0x3cfc 013793 fetch 1 ,mem_module_flag -0x3cfd 013794 qset1 pdata -0x3cfe 013795 store 1 ,mem_module_flag -0x3cff 013796 rtn -: 013806 mouse_init: -0x3d00 013807 call mouse_setting_config -0x3d01 013808 call spi_ncs_enable -0x3d02 013809 call mouse_init_sunt -0x3d03 013810 call mouse_dpi_config -0x3d04 013811 call spi_ncs_disable -0x3d05 013812 rtn wake -0x3d06 013813 call mouse_cheak_enable_usb -0x3d07 013814 call mouse_cb_fuction -0x3d08 013817 fetch mouse_flag_len ,mem_mouse_flag -0x3d09 013818 rtnbit1 mouse_enable_usb -0x3d0a 013819 call mouse_wakeup_from_power -0x3d0b 013820 rtnmark1 mark_24g -0x3d0c 013821 fetch 2 ,mem_ui_state_map -0x3d0d 013822 bbit1 ui_state_btn_down ,mouse_start_discovery -0x3d0e 013823 branch mouse_check_reconn_target -: 013826 mouse_delay_4s: -0x3d0f 013827 fetch mouse_flag_len ,mem_mouse_flag -0x3d10 013828 rtnbit0 mouse_enable_init_delay -0x3d11 013829 arg 20 ,loopcnt -: 013830 mouse_delay_20ms: -0x3d12 013831 setarg 200000 -0x3d13 013832 call sleep -0x3d14 013833 loop delay_10ms -0x3d15 013834 rtn -: 013837 mouse_cheak_enable_usb: -0x3d16 013838 fetch mouse_flag_len ,mem_mouse_flag -0x3d17 013839 rtnbit0 mouse_enable_usb -0x3d18 013840 branch usb_init -: 013843 mouse_cb_fuction: -0x3d19 013844 setarg mouse_le -0x3d1a 013845 store 2 ,mem_cb_le_process -0x3d1b 013846 setarg mouse_send_process -0x3d1c 013847 store 2 ,mem_cb_bt_process -0x3d1d 013848 setarg mouse_process_lpm_before -0x3d1e 013849 store 2 ,mem_cb_before_lpm -0x3d1f 013850 setarg mouse_priority_bb_event -0x3d20 013851 store 2 ,mem_cb_bb_event_process -0x3d21 013852 setarg mouse_idle -0x3d22 013853 store 2 ,mem_cb_idle_process -0x3d23 013854 setarg mouse_before_hibernate -0x3d24 013855 store 2 ,mem_cb_before_hibernate -0x3d25 013856 setarg le_mouse_bb_event_connect_complete -0x3d26 013857 store 2 ,mem_cb_att_write -0x3d27 013859 call g24_head_ptr2regc -0x3d28 013860 setarg mouse_g24_package_data -0x3d29 013861 add regc ,offset_24g_cb_data ,contw -0x3d2a 013862 istore 2 ,contw -0x3d2b 013863 setarg mouse_g24_enter_lpm -0x3d2c 013864 add regc ,offset_24g_cb_lpm_prepare ,contw -0x3d2d 013865 istore 2 ,contw -0x3d2e 013866 setarg mouse_lpm_before_common -0x3d2f 013867 add regc ,offset_24g_cb_lpm_before ,contw -0x3d30 013868 istore 2 ,contw -0x3d31 013870 setarg mouse_bb_event_timer -0x3d32 013871 store 2 ,mem_cb_event_timer -0x3d33 013872 setarg mouse_spi_write_flash_cb -0x3d34 013873 store 2 ,mem_cb_spi_flash_write_complate -0x3d35 013874 rtn -: 013875 mouse_spi_write_flash_cb: -: 013876 mouse_spi_init: -0x3d36 013877 fetch mouse_flag_len ,mem_mouse_flag -0x3d37 013878 bbit0 mouse_enable_spi2 ,spid_init -0x3d38 013879 branch spid_init2 -: 013881 mouse_setting_config: -0x3d39 013882 rtn wake -0x3d3a 013883 call g24_set_device_addr -0x3d3b 013884 call mouse_gpio_init -0x3d3c 013885 call mouse_param_init -0x3d3d 013886 call mouse_adc_init -0x3d3e 013887 call le_set_config_fixed_ltk -0x3d3f 013888 call le_set_justwork -0x3d40 013889 call le_set_fixed_ltk -0x3d41 013890 call le_set_config_read_authentication -0x3d42 013891 fetch mouse_flag_len ,mem_mouse_flag -0x3d43 013892 bbit1 mouse_enable_eeprom ,mouse_init_iic -0x3d44 013893 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak -0x3d45 013894 rtn -: 013896 mouse_init_iic: -0x3d46 013897 call iic_init_390k -0x3d47 013898 fetch mouse_flag_len ,mem_mouse_flag -0x3d48 013899 isolate1 mouse_enable_2k_eeprom ,pdata -0x3d49 013900 ncall clear_eeprom_size_2k ,true -0x3d4a 013901 call mouse_load_eeprom_dpi -0x3d4b 013902 call mouse_init_environment -0x3d4c 013903 call mouse_set_24g_addr_eeprom -0x3d4d 013904 branch iicd_read_eep_data -: 013906 mouse_wakeup_from_power: -0x3d4e 013907 fetch mouse_flag_len ,mem_mouse_flag -0x3d4f 013908 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power -0x3d50 013909 fetch 1 ,mem_wakup_from_power_flag -0x3d51 013910 isolate0 gpio_latch ,pdata -0x3d52 013911 nrtn true -: 013912 mouse_wakeup_no_from_power: -0x3d53 013913 fetch 1 ,mem_reconn_times_init -0x3d54 013914 store 1 ,mem_reconn_times -0x3d55 013915 fetch 1 ,mem_config_function_enable -0x3d56 013916 rtnbit1 enable_select_device_by_switch -: 013917 mouse_start_24g_mode: -0x3d57 013918 fetch mouse_flag_len ,mem_mouse_flag -0x3d58 013919 rtnbit0 mouse_enable_24g -0x3d59 013920 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start -0x3d5a 013921 branch g24_check_51cmd_start_24g -: 013922 le_mouse_bb_event_connect_complete: -0x3d5b 013923 fetch 1 ,mem_le_att_handle -0x3d5c 013924 sub pdata ,26 ,pdata -0x3d5d 013925 nrtn zero -0x3d5e 013926 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x3d5f 013927 call ui_ipc_send_cmd -: 013928 mouse_le_write_enable: -0x3d60 013929 arg write_req_enable_flag ,queue -0x3d61 013930 branch mouse_le_enable_connect_flag -: 013932 mouse_dpi_up: -0x3d62 013933 fetch 1 ,mem_mouse_dpi_button_state -0x3d63 013934 rtneq dpi_button_state_up -0x3d64 013935 jam dpi_button_state_up ,mem_mouse_dpi_button_state -0x3d65 013936 rtn -: 013937 mouse_dpi_config: -0x3d66 013938 fetch 1 ,mem_config_sensor_motion -0x3d67 013939 and pdata ,0x0f ,pdata -0x3d68 013940 store 1 ,mem_mouse_dpi -0x3d69 013941 branch mouse_seting_dpi + 2 -: 013944 mouse_dpi_cheak: -0x3d6a 013945 fetcht 1 ,mem_dpi_button_gpio -0x3d6b 013946 call gpio_get_bit -0x3d6c 013947 nbranch mouse_dpi_up ,true -: 013948 mouse_dpi_down: -0x3d6d 013949 fetch 1 ,mem_mouse_dpi_button_state -0x3d6e 013950 rtneq dpi_button_state_down -0x3d6f 013951 jam dpi_button_state_down ,mem_mouse_dpi_button_state -0x3d70 013952 fetch 1 ,mem_mouse_dpi -0x3d71 013953 increase 1 ,pdata -0x3d72 013954 and pdata ,0x03 ,pdata -0x3d73 013955 store 1 ,mem_mouse_dpi -0x3d74 013956 call mouse_seting_dpi -0x3d75 013957 fetch mouse_flag_len ,mem_mouse_flag -0x3d76 013958 bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi -0x3d77 013959 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi -0x3d78 013960 rtn -: 013961 mouse_before_store_flash_cpi: -0x3d79 013962 arg mouse_spi2_clk_gpio ,temp -0x3d7a 013963 call gpio_config_output -0x3d7b 013964 arg mouse_spi2_sdio_gpio ,temp -0x3d7c 013965 call gpio_config_output -0x3d7d 013966 branch mouse_store_flash_device_info -: 013968 mouse_seting_dpi: -0x3d7e 013969 bpatch patch1c_3 ,mem_patch1c -0x3d7f 013970 call mosue_dpi_led_blink_init -0x3d80 013971 fetch 1 ,mem_config_sensor_type -0x3d81 013972 beq p3610 ,mouse_seting_3610_dpi -0x3d82 013973 beq p3212 ,mouse_seting_3212_dpi -0x3d83 013974 fetch 1 ,mem_mouse_dpi -0x3d84 013975 beq mouse_dpi_level1 ,mouse_set_cpi1 -0x3d85 013976 beq mouse_dpi_level2 ,mouse_set_cpi2 -0x3d86 013977 beq mouse_dpi_level3 ,mouse_set_cpi3 -0x3d87 013978 beq mouse_dpi_level4 ,mouse_set_cpi4 -: 013979 mouse_set_cpi2: -0x3d88 013980 fetch 1 ,mem_320x_dpi_2 -0x3d89 013981 branch mouse_p3205_dpi -: 013982 mouse_set_cpi1: -0x3d8a 013983 fetch 1 ,mem_320x_dpi_1 -0x3d8b 013984 branch mouse_p3205_dpi -: 013985 mouse_set_cpi3: -0x3d8c 013986 fetch 1 ,mem_320x_dpi_3 -0x3d8d 013987 branch mouse_p3205_dpi -: 013988 mouse_set_cpi4: -0x3d8e 013989 fetch 1 ,mem_320x_dpi_4 -0x3d8f 013990 branch mouse_p3205_dpi -: 013991 moue_seting_cpi_count: -0x3d90 013992 fetch 1 ,mem_config_sensor_type -0x3d91 013993 rtneq p3065_xy -0x3d92 013994 fetch 1 ,mem_mouse_cpi_count -0x3d93 013995 increase 1 ,pdata -0x3d94 013996 store 1 ,mem_mouse_cpi_count -0x3d95 013997 rtn -: 013999 mouse_seting_3212_dpi: -0x3d96 014000 fetch 1 ,mem_mouse_dpi -0x3d97 014001 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 -0x3d98 014002 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 -0x3d99 014003 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 -0x3d9a 014004 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 -: 014005 mouse_set_p3212_cpi2: -0x3d9b 014006 fetch 1 ,mem_3212_dpi_2 -0x3d9c 014007 branch mouse_p3212_dpi -: 014008 mouse_set_p3212_cpi1: -0x3d9d 014009 fetch 1 ,mem_3212_dpi_1 -0x3d9e 014010 branch mouse_p3212_dpi -: 014011 mouse_set_p3212_cpi3: -0x3d9f 014012 fetch 1 ,mem_3212_dpi_3 -0x3da0 014013 branch mouse_p3212_dpi -: 014014 mouse_set_p3212_cpi4: -0x3da1 014015 fetch 1 ,mem_3212_dpi_4 -: 014016 mouse_p3212_dpi: -0x3da2 014017 store 1 ,mem_mouse_cpi_count -0x3da3 014018 lshift8 pdata ,pdata -0x3da4 014019 copy pdata ,rega -0x3da5 014020 add pdata ,mouse_p3212_dpi_xaddress ,pdata -0x3da6 014021 call twspi_write -0x3da7 014022 copy rega ,pdata -0x3da8 014023 add pdata ,mouse_p3212_dpi_yaddress ,pdata -0x3da9 014024 branch twspi_write -: 014026 mouse_seting_3610_dpi: -0x3daa 014027 fetch 1 ,mem_mouse_dpi -0x3dab 014028 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 -0x3dac 014029 beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 -0x3dad 014030 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 -0x3dae 014031 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 -: 014032 mouse_set_p3610_cpi2: -0x3daf 014033 fetch 1 ,mem_3610_dpi_2 -0x3db0 014034 branch mouse_p3610_dpi -: 014035 mouse_set_p3610_cpi1: -0x3db1 014036 fetch 1 ,mem_3610_dpi_1 -0x3db2 014037 branch mouse_p3610_dpi -: 014038 mouse_set_p3610_cpi3: -0x3db3 014039 fetch 1 ,mem_3610_dpi_3 -0x3db4 014040 branch mouse_p3610_dpi -: 014041 mouse_set_p3610_cpi4: -0x3db5 014042 fetch 1 ,mem_3610_dpi_4 -: 014043 mouse_p3610_dpi: -0x3db6 014044 store 1 ,mem_mouse_cpi_count -0x3db7 014045 call mouse_spi_sdio_gpio_pollup -0x3db8 014046 fetch 1 ,mem_mouse_cpi_count -: 014047 mouse_reset_p3610_dpi: -0x3db9 014048 add pdata ,0x80 ,pdata -0x3dba 014049 lshift8 pdata ,pdata -0x3dbb 014050 add pdata ,mouse_p3610_dpi_address ,pdata -0x3dbc 014051 copy pdata ,rega -0x3dbd 014052 branch mouse_set_sensor_reg -: 014054 mouse_p3205_dpi: -0x3dbe 014055 store 1 ,mem_mouse_cpi_count -0x3dbf 014056 call moue_seting_cpi_count -0x3dc0 014057 fetch 1 ,mem_mouse_cpi_count -0x3dc1 014058 setarg mouse_dpi_address -0x3dc2 014059 call twspi_read -0x3dc3 014060 and pdata ,0xf8 ,temp -0x3dc4 014061 fetch 1 ,mem_mouse_cpi_count -0x3dc5 014062 iadd temp ,pdata -0x3dc6 014063 lshift8 pdata ,pdata -0x3dc7 014064 add pdata ,mouse_dpi_address ,pdata -0x3dc8 014065 branch twspi_write -: 014068 mouse_init_environment: -0x3dc9 014069 call app_initflag_check -0x3dca 014070 branch mouse_eeprom_load_recon_info ,zero -0x3dcb 014071 call mouse_ble_init_address -0x3dcc 014072 call mouse_store_eeprom_device_info -0x3dcd 014073 branch app_initflag_store -: 014076 mouse_24g_pairing_button: -0x3dce 014077 fetch 2 ,mem_24g_pairing_timer_count -0x3dcf 014078 rtn blank -0x3dd0 014079 fetch mouse_flag_len ,mem_mouse_flag -0x3dd1 014080 rtnbit0 mouse_enable_24g -0x3dd2 014081 rtnbit1 mosue_24g_pairing_flag -0x3dd3 014082 rtnmark1 mark_24g -0x3dd4 014083 call mouse_check_key_gpio -0x3dd5 014084 rtnne mouse_lmr_button -0x3dd6 014085 call mouse_devce_led_off -0x3dd7 014086 arg mosue_24g_pairing_flag ,queue -0x3dd8 014087 call mouse_enable_function_flag -0x3dd9 014088 setarg 0 -0x3dda 014089 store 2 ,mem_mouse_direct_timer -0x3ddb 014090 store 1 ,mem_mouse_send_blank_timer -0x3ddc 014091 call g24_set0_mem_check_dongle_times -0x3ddd 014093 fetch 2 ,mem_ui_state_map -0x3dde 014094 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect -0x3ddf 014095 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x3de0 014096 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x3de1 014097 call mouse_stop_discovery -0x3de2 014098 branch g24_start_pairing_sm1 -: 014101 mouse_idle: -0x3de3 014102 call mouse_24g_pairing_button -0x3de4 014103 call ui_check_paring_button -0x3de5 014104 call mouse_dpi_cheak -0x3de6 014105 call mouse_usb_isr -0x3de7 014106 call mouse_wheel_check -0x3de8 014107 branch mouse_usb_mode -: 014108 mouse_usb_isr: -0x3de9 014109 fetch mouse_flag_len ,mem_mouse_flag -0x3dea 014110 rtnbit0 mouse_enable_usb -0x3deb 014111 call usb_isr -0x3dec 014112 branch usb_offline_state -: 014114 mouse_cheak_usb: -0x3ded 014115 hfetch 1 ,core_usb_addr -0x3dee 014116 bbit0 7 ,mouse_usb_no_exsit -0x3def 014117 bbit1 7 ,mouse_usb_exsit -0x3df0 014118 rtn -: 014119 mouse_usb_no_exsit: -0x3df1 014120 fetch 1 ,mem_usb_addr -0x3df2 014121 rtnbit0 7 -0x3df3 014122 branch soft_reset_chip -: 014123 mouse_usb_exsit: -0x3df4 014124 fetch 1 ,mem_usb_addr -0x3df5 014125 rtnbit1 7 -0x3df6 014126 branch mouse_stop_bluetooth_mode -: 014128 mouse_usb_mode: -0x3df7 014129 call mouse_cheak_usb -0x3df8 014130 hfetch 1 ,core_usb_addr -0x3df9 014131 store 1 ,mem_usb_addr -0x3dfa 014132 rtnbit0 7 -0x3dfb 014133 call mouse_clkn_check -0x3dfc 014134 fetch 4 ,mem_btclk_sensor -0x3dfd 014135 fetcht 1 ,mem_wire_usb_interval -0x3dfe 014136 iadd temp ,temp -0x3dff 014137 copy clkn_bt ,pdata -0x3e00 014138 isub temp ,null -0x3e01 014139 nrtn positive -0x3e02 014140 store 4 ,mem_btclk_sensor -0x3e03 014141 call mouse_motion -0x3e04 014142 nrtn user -0x3e05 014143 jam 4 ,mem_usb_tx_enable -0x3e06 014144 branch mouse_wired_to_usb -: 014146 mouse_clkn_check: -0x3e07 014147 fetcht 4 ,mem_btclk_sensor -0x3e08 014148 copy clkn_bt ,pdata -0x3e09 014149 isub temp ,null -0x3e0a 014150 ncall mouse_clkn_timeout ,positive -0x3e0b 014151 rtn -: 014152 mouse_clkn_timeout: -0x3e0c 014153 setarg 0 -0x3e0d 014154 store 4 ,mem_btclk_sensor -0x3e0e 014155 rtn -: 014159 mouse_wired_to_usb: -0x3e0f 014160 fetch 1 ,mem_usb_tx_enable -0x3e10 014161 rtnbit0 2 -0x3e11 014162 branch mouse_data_push -: 014163 mouse_data_push: -0x3e12 014164 hfetch 1 ,core_usb_addr -0x3e13 014165 rtnbit0 7 -0x3e14 014166 jam usb_ep2_ms ,mem_usb_ep2_data -0x3e15 014167 setarg ms_report_id -0x3e16 014168 store 1 ,mem_usb_mouse_data -0x3e17 014169 fetch 7 ,mem_mouse_key -0x3e18 014170 istore 7 ,contw -0x3e19 014171 rtn -: 014174 mouse_enable_clock_qdecoder: -0x3e1a 014175 hfetch 2 ,core_clkoff -0x3e1b 014176 set0 clock_off_qdecoder ,pdata -0x3e1c 014177 hstore 2 ,core_clkoff -0x3e1d 014178 rtn -: 014180 mouse_param_init: -0x3e1e 014181 setarg 0x8c00 -0x3e1f 014182 store 2 ,mem_ui_uuid_table -0x3e20 014183 setarg 0x8e7a -0x3e21 014184 store 2 ,mem_ui_le_uuid_table -0x3e22 014185 setarg 0x2402 -0x3e23 014186 store 2 ,mem_fcomp_mul -0x3e24 014187 setarg 0x2580 -0x3e25 014188 store 3 ,mem_class -0x3e26 014189 jam 3 ,mem_lpm_mult_timeout -0x3e27 014190 jam 8 ,mem_lpm_overhead -0x3e28 014191 jam dpi_button_state_up ,mem_select_device_button_statue -0x3e29 014192 setarg 0x0200 -0x3e2a 014193 store 2 ,mem_lpm_interval -0x3e2b 014194 jam 0x17 ,mem_le_local_mtu -0x3e2c 014195 jam 0x17 ,mem_le_remote_mtu -0x3e2d 014197 setarg 0x0a77 -0x3e2e 014198 store 2 ,mem_spi_init_clk -0x3e2f 014214 setsect 0 ,0x306 -0x3e30 014215 setsect 1 ,0x4440 -0x3e31 014216 setsect 2 ,0x10000 -0x3e32 014217 setsect 3 ,0x4408 -0x3e33 014218 store 9 ,mem_all_uuid_16bits -0x3e34 014219 setsect 0 ,0x1224 -0x3e35 014220 setsect 1 ,0x4000 -0x3e36 014221 setsect 2 ,0x0 -0x3e37 014222 istore 5 ,contw -0x3e38 014224 setsect 0 ,0x3ffff -0x3e39 014225 setsect 1 ,0x2fe23 -0x3e3a 014226 setsect 2 ,0x199d9 -0x3e3b 014227 setsect 3 ,0x20d -0x3e3c 014228 store 8 ,mem_features -0x3e3d 014230 setarg 0x012c -0x3e3e 014231 store 2 ,mem_24g_pairing_timer_count -0x3e3f 014232 call le_modified_name -0x3e40 014233 fetch mouse_flag_len ,mem_mouse_flag -0x3e41 014234 rtnbit0 mouse_enable_gpio_control_adc_sensor -0x3e42 014235 call mouse_sensor_set_angle -0x3e43 014236 branch mouse_select_adc -: 014238 mouse_sensor_set_angle: -0x3e44 014239 fetcht 1 ,mem_select_sensor_angle_gpio -0x3e45 014240 call gpio_config_input -0x3e46 014241 fetcht 1 ,mem_select_sensor_angle_gpio -0x3e47 014242 call gpio_get_bit -0x3e48 014243 jam mouse_3clk_angle ,mem_config_sensor_angle -0x3e49 014244 rtn true -0x3e4a 014245 jam mouse_12clk_angle ,mem_config_sensor_angle -0x3e4b 014246 rtn -: 014248 mouse_select_adc: -0x3e4c 014249 fetcht 1 ,mem_select_adc_gpio -0x3e4d 014250 call gpio_config_input -0x3e4e 014251 fetcht 1 ,mem_select_adc_gpio -0x3e4f 014252 call gpio_get_bit -0x3e50 014253 jam adc_config_vinlpm ,mem_adc_config_flag -0x3e51 014254 rtn true -0x3e52 014255 jam adc_config_gpio ,mem_adc_config_flag -0x3e53 014256 rtn -: 014259 mouse_adc_init: -0x3e54 014260 fetch 1 ,mem_adc_config_flag -0x3e55 014261 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm -0x3e56 014262 beq adc_config_hvin ,mouse_adc_init_data_hvin -0x3e57 014263 beq adc_config_gpio ,mouse_adc_init_data_io -0x3e58 014264 branch mouse_adc_init_data_vinlpm -: 014266 mouse_adc_init_data_vinlpm: -0x3e59 014267 fetcht 2 ,mem_2v_adc_vinlpm_data -0x3e5a 014268 fetch 2 ,mem_3v_adc_vinlpm_data -0x3e5b 014269 isub temp ,pdata -0x3e5c 014270 mul32 pdata ,20 ,pdata -0x3e5d 014271 div pdata ,100 -0x3e5e 014272 call wait_div_end -0x3e5f 014273 quotient pdata -0x3e60 014274 store 2 ,mem_adc_reference_voltage -0x3e61 014275 rtn -: 014276 mouse_adc_init_data_hvin: -0x3e62 014277 fetcht 2 ,mem_1v_adc_hvin_data -0x3e63 014278 fetch 2 ,mem_5v_adc_hvin_data -0x3e64 014279 isub temp ,pdata -0x3e65 014280 mul32 pdata ,230 ,pdata -0x3e66 014281 div pdata ,400 -0x3e67 014282 call wait_div_end -0x3e68 014283 quotient pdata -0x3e69 014284 store 2 ,mem_adc_reference_voltage -0x3e6a 014285 rtn -: 014286 mouse_adc_init_data_io: -0x3e6b 014287 fetch 2 ,mem_1v_adc_io_data -0x3e6c 014288 store 2 ,mem_adc_reference_voltage -0x3e6d 014289 rtn -: 014290 mouse_gpio_init: -0x3e6e 014291 fetcht 1 ,mem_eeprom_wp_gpio -0x3e6f 014292 call gpio_config_output -0x3e70 014293 call usb_offline_check_init -0x3e71 014294 fetcht 1 ,mem_lbutton_gpio -0x3e72 014295 call gpio_config_input -0x3e73 014296 fetcht 1 ,mem_rbutton_gpio -0x3e74 014297 call gpio_config_input -0x3e75 014298 fetcht 1 ,mem_mbutton_gpio -0x3e76 014299 call gpio_config_input -0x3e77 014300 fetcht 1 ,mem_sensor_data_gpio -0x3e78 014301 call gpio_config_input -0x3e79 014303 fetcht 1 ,mem_sensor_reset_gpio -0x3e7a 014304 call gpio_config_output -0x3e7b 014306 fetcht 1 ,mem_whee_a_data_gpio -0x3e7c 014307 call gpio_config_input -0x3e7d 014309 fetcht 1 ,mem_whee_b_data_gpio -0x3e7e 014310 call gpio_config_input -0x3e7f 014312 fetcht 1 ,mem_whee_ta_data_gpio -0x3e80 014313 call gpio_config_input -0x3e81 014314 fetcht 1 ,mem_whee_tb_data_gpio -0x3e82 014315 call gpio_config_input -0x3e83 014317 fetcht 1 ,mem_bk_button_gpio -0x3e84 014318 call gpio_config_input -0x3e85 014319 fetcht 1 ,mem_fw_button_gpio -0x3e86 014320 call gpio_config_input -0x3e87 014322 fetcht 1 ,mem_config_low_voltage_alarm_gpio -0x3e88 014323 call gpio_config_output -0x3e89 014325 fetcht 1 ,mem_config_device1_led_gpio -0x3e8a 014326 call gpio_config_output -0x3e8b 014328 fetcht 1 ,mem_config_device2_led_gpio -0x3e8c 014329 call gpio_config_output -0x3e8d 014331 fetcht 1 ,mem_config_device3_led_gpio -0x3e8e 014332 call gpio_config_output -0x3e8f 014334 fetcht 1 ,mem_dpi_led_gpio -0x3e90 014335 call gpio_config_output -0x3e91 014337 fetcht 1 ,mem_config_select_device_button_gpio -0x3e92 014338 call gpio_config_input -0x3e93 014340 fetcht 1 ,mem_config_bt_button_gpio -0x3e94 014341 call gpio_config_input -0x3e95 014343 fetcht 1 ,mem_dpi_button_gpio -0x3e96 014344 branch gpio_config_input -: 014346 mouse_wheel_gpio_set_wake: -0x3e97 014347 fetcht 1 ,mem_whee_a_data_gpio -0x3e98 014348 call gpio_set_wake_by_current_state -0x3e99 014349 fetcht 1 ,mem_whee_b_data_gpio -0x3e9a 014350 call gpio_set_wake_by_current_state -0x3e9b 014351 fetcht 1 ,mem_whee_ta_data_gpio -0x3e9c 014352 call gpio_set_wake_by_current_state -0x3e9d 014353 fetcht 1 ,mem_whee_tb_data_gpio -0x3e9e 014354 branch gpio_set_wake_by_current_state -: 014356 mouse_before_hibernate_wheel_gpio_set: -0x3e9f 014357 fetcht 1 ,mem_whee_a_data_gpio -0x3ea0 014358 call mouse_gpio_set_pupd_by_input -0x3ea1 014359 fetcht 1 ,mem_whee_b_data_gpio -0x3ea2 014360 call mouse_gpio_set_pupd_by_input -0x3ea3 014361 fetcht 1 ,mem_whee_ta_data_gpio -0x3ea4 014362 call mouse_gpio_set_pupd_by_input -0x3ea5 014363 fetcht 1 ,mem_whee_tb_data_gpio -0x3ea6 014364 branch mouse_gpio_set_pupd_by_input -: 014366 mouse_gpio_set_pupd_by_input: -0x3ea7 014367 sub temp ,ui_button_gpio_disable ,null -0x3ea8 014368 rtn zero -0x3ea9 014369 and temp ,0x7f ,queue -0x3eaa 014370 hfetch 4 ,core_gpio_in -0x3eab 014371 qisolate1 pdata -0x3eac 014372 hfetch 4 ,core_gpio_pu0 -0x3ead 014373 qsetflag true ,pdata -0x3eae 014374 hstore 4 ,core_gpio_pu0 -0x3eaf 014375 hfetch 4 ,core_gpio_pd0 -0x3eb0 014376 nqsetflag true ,pdata -0x3eb1 014377 hstore 4 ,core_gpio_pd0 -0x3eb2 014378 rtn -: 014380 mouse_before_hibernate: -0x3eb3 014381 enable user -0x3eb4 014382 hfetch 4 ,0x8138 -0x3eb5 014383 setflag user ,26 ,pdata -0x3eb6 014384 hstore 4 ,core_lpm_reg -0x3eb7 014385 call lpm_write_ctrl -0x3eb8 014386 call mouse_devce_led_off -0x3eb9 014387 call mouse_before_hibernate_wheel_gpio_set -0x3eba 014389 branch mouse_lpm_before_common -: 014393 mouse_process_lpm_before: -0x3ebb 014394 call mouse_lpm_before_common -0x3ebc 014395 fetch 1 ,mem_lpm_current_mult -0x3ebd 014396 nrtn blank -0x3ebe 014397 branch gpio_clr_wake -: 014399 mouse_lpm_before_common: -0x3ebf 014400 call mouse_wheel_check -0x3ec0 014401 arg mouse_spi1_clk_gpio ,temp -0x3ec1 014402 fetch mouse_flag_len ,mem_mouse_flag -0x3ec2 014403 isolate1 mouse_enable_spi2 ,pdata -0x3ec3 014404 call mouse_spi_clk_gpio ,true -0x3ec4 014405 call gpio_config_output -0x3ec5 014406 call twspi_disable -0x3ec6 014410 fetcht 1 ,mem_lbutton_gpio -0x3ec7 014411 call gpio_set_wake_by_current_state -0x3ec8 014412 fetcht 1 ,mem_rbutton_gpio -0x3ec9 014413 call gpio_set_wake_by_current_state -0x3eca 014414 fetcht 1 ,mem_mbutton_gpio -0x3ecb 014415 call gpio_set_wake_by_current_state -0x3ecc 014417 fetcht 1 ,mem_bk_button_gpio -0x3ecd 014418 call gpio_set_wake_by_current_state -0x3ece 014419 fetcht 1 ,mem_fw_button_gpio -0x3ecf 014420 call gpio_set_wake_by_current_state -0x3ed0 014421 fetcht 1 ,mem_dpi_button_gpio -0x3ed1 014422 call gpio_set_wake_by_current_state -0x3ed2 014423 fetcht 1 ,mem_config_select_device_button_gpio -0x3ed3 014424 call gpio_set_wake_by_current_state -0x3ed4 014425 fetcht 1 ,mem_whee_a_data_gpio -0x3ed5 014426 call gpio_set_wake_by_current_state -0x3ed6 014427 fetcht 1 ,mem_whee_b_data_gpio -0x3ed7 014428 call gpio_set_wake_by_current_state -0x3ed8 014429 fetcht 1 ,mem_whee_ta_data_gpio -0x3ed9 014430 call gpio_set_wake_by_current_state -0x3eda 014431 fetcht 1 ,mem_whee_tb_data_gpio -0x3edb 014432 call gpio_set_wake_by_current_state -0x3edc 014433 fetcht 1 ,mem_sensor_data_gpio -0x3edd 014434 branch gpio_set_wake -: 014438 mouse_spi_clk_gpio: -0x3ede 014439 arg mouse_spi2_clk_gpio ,temp -0x3edf 014440 rtn -: 014442 mouse_wheel_check: -0x3ee0 014443 bpatch patch1c_4 ,mem_patch1c -0x3ee1 014444 call mouse_t_wheel_scan -0x3ee2 014445 call mouse_wheel_scan -0x3ee3 014446 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3ee4 014447 fetcht 1 ,mem_wheel_tb_old_pinlevel -0x3ee5 014448 store 1 ,mem_wheel_tb_old_pinlevel -0x3ee6 014449 isub temp ,null -0x3ee7 014450 nbranch app_lpm_wake_auto_lock ,zero -0x3ee8 014451 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3ee9 014452 fetcht 1 ,mem_mwheel_b_old_pinlevel -0x3eea 014453 store 1 ,mem_mwheel_b_old_pinlevel -0x3eeb 014454 isub temp ,null -0x3eec 014455 nbranch app_lpm_wake_auto_lock ,zero -0x3eed 014456 rtn -: 014457 mouse_t_wheel_scan: -0x3eee 014458 fetch 1 ,mem_whee_ta_data_gpio -0x3eef 014459 rtneq gpio_disable -0x3ef0 014460 arg 0 ,rega -0x3ef1 014461 fetcht 1 ,mem_whee_ta_data_gpio -0x3ef2 014462 call gpio_get_bit -0x3ef3 014463 setflag true ,0 ,rega -0x3ef4 014464 fetcht 1 ,mem_whee_tb_data_gpio -0x3ef5 014465 call gpio_get_bit -0x3ef6 014466 setflag true ,1 ,rega -0x3ef7 014467 copy rega ,pdata -0x3ef8 014468 store 1 ,mem_wheel_tb_new_pinlevel -0x3ef9 014469 beq 0x01 ,mouse_t_wheel_scan_judge1 -0x3efa 014470 beq 0x02 ,mouse_t_wheel_scan_judge2 -0x3efb 014471 fetch 1 ,mem_wheel_tog -0x3efc 014472 bbit1 7 ,mouse_t_wheel_scan_judge3 -0x3efd 014473 rtn -: 014475 mouse_t_wheel_scan_judge1: -0x3efe 014476 fetch 1 ,mem_wheel_tb_old_pinlevel -0x3eff 014477 beq 0 ,mouse_t_wheel_scan_judge11 -0x3f00 014478 beq 3 ,mouse_t_wheel_scan_judge12 -0x3f01 014479 rtn -: 014480 mouse_t_wheel_scan_judge2: -0x3f02 014481 fetch 1 ,mem_wheel_tb_old_pinlevel -0x3f03 014482 beq 0 ,mouse_t_wheel_scan_judge21 -0x3f04 014483 beq 3 ,mouse_t_wheel_scan_judge22 -0x3f05 014484 rtn -: 014485 mouse_t_wheel_scan_judge11: -0x3f06 014486 jam 0x82 ,mem_wheel_tog -0x3f07 014487 rtn -: 014488 mouse_t_wheel_scan_judge12: -0x3f08 014489 jam 0x81 ,mem_wheel_tog -0x3f09 014490 rtn -: 014491 mouse_t_wheel_scan_judge21: -0x3f0a 014492 jam 0x80 ,mem_wheel_tog -0x3f0b 014493 rtn -: 014494 mouse_t_wheel_scan_judge22: -0x3f0c 014495 jam 0x83 ,mem_wheel_tog -0x3f0d 014496 rtn -: 014497 mouse_t_wheel_scan_judge3: -0x3f0e 014498 fetch 1 ,mem_wheel_tog -0x3f0f 014499 set0 7 ,pdata -0x3f10 014500 store 1 ,mem_wheel_tog -0x3f11 014501 beq 0 ,mouse_t_wheel_scan_judge30 -0x3f12 014502 beq 1 ,mouse_t_wheel_scan_judge31 -0x3f13 014503 beq 2 ,mouse_t_wheel_scan_judge32 -0x3f14 014504 beq 3 ,mouse_t_wheel_scan_judge33 -0x3f15 014505 rtn -: 014506 mouse_t_wheel_scan_judge30: -0x3f16 014507 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f17 014508 beq 3 ,mouse_wheel_t_forward -0x3f18 014509 rtn -: 014510 mouse_t_wheel_scan_judge31: -0x3f19 014511 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f1a 014512 beq 0 ,mouse_wheel_t_forward -0x3f1b 014513 rtn -: 014514 mouse_t_wheel_scan_judge32: -0x3f1c 014515 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f1d 014516 beq 3 ,mouse_wheel_t_back -0x3f1e 014517 rtn -: 014518 mouse_t_wheel_scan_judge33: -0x3f1f 014519 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f20 014520 beq 0 ,mouse_wheel_t_back -0x3f21 014521 rtn -: 014522 mouse_wheel_t_forward: -0x3f22 014523 fetch 1 ,mem_mouse_tz_data_count1 -0x3f23 014524 increase 1 ,pdata -0x3f24 014525 store 1 ,mem_mouse_tz_data_count1 -0x3f25 014526 sub pdata ,1 ,null -0x3f26 014527 rtn positive -0x3f27 014528 jam 0 ,mem_mouse_tz_data_count1 -0x3f28 014529 fetch 1 ,mem_mouse_tz_data -0x3f29 014530 increase 1 ,pdata -0x3f2a 014531 store 1 ,mem_mouse_tz_data -0x3f2b 014532 rtn -: 014533 mouse_wheel_t_back: -0x3f2c 014534 fetch 1 ,mem_mouse_tz_data_count -0x3f2d 014535 increase 1 ,pdata -0x3f2e 014536 store 1 ,mem_mouse_tz_data_count -0x3f2f 014537 sub pdata ,1 ,null -0x3f30 014538 rtn positive -0x3f31 014539 jam 0 ,mem_mouse_tz_data_count -0x3f32 014540 fetch 1 ,mem_mouse_tz_data -0x3f33 014541 increase -1 ,pdata -0x3f34 014542 store 1 ,mem_mouse_tz_data -0x3f35 014543 rtn -: 014546 mouse_wheel_scan: -0x3f36 014547 fetch 1 ,mem_whee_a_data_gpio -0x3f37 014548 rtneq gpio_disable -0x3f38 014549 arg 0 ,rega -0x3f39 014550 fetcht 1 ,mem_whee_a_data_gpio -0x3f3a 014551 call gpio_get_bit -0x3f3b 014552 setflag true ,0 ,rega -0x3f3c 014553 fetcht 1 ,mem_whee_b_data_gpio -0x3f3d 014554 call gpio_get_bit -0x3f3e 014555 setflag true ,1 ,rega -0x3f3f 014556 copy rega ,pdata -0x3f40 014557 store 1 ,mem_mwheel_b_new_pinlevel -0x3f41 014558 beq 0x01 ,mouse_wheel_scan_judge1 -0x3f42 014559 beq 0x02 ,mouse_wheel_scan_judge2 -0x3f43 014560 fetch 1 ,mem_mwheel_tog -0x3f44 014561 bbit1 7 ,mouse_wheel_scan_judge3 -0x3f45 014562 rtn -: 014564 mouse_wheel_scan_judge1: -0x3f46 014565 fetch 1 ,mem_mwheel_b_old_pinlevel -0x3f47 014566 beq 0 ,mouse_wheel_scan_judge11 -0x3f48 014567 beq 3 ,mouse_wheel_scan_judge12 -0x3f49 014568 rtn -: 014569 mouse_wheel_scan_judge2: -0x3f4a 014570 fetch 1 ,mem_mwheel_b_old_pinlevel -0x3f4b 014571 beq 0 ,mouse_wheel_scan_judge21 -0x3f4c 014572 beq 3 ,mouse_wheel_scan_judge22 -0x3f4d 014573 rtn -: 014574 mouse_wheel_scan_judge11: -0x3f4e 014575 jam 0x82 ,mem_mwheel_tog -0x3f4f 014576 rtn -: 014577 mouse_wheel_scan_judge12: -0x3f50 014578 jam 0x81 ,mem_mwheel_tog -0x3f51 014579 rtn -: 014580 mouse_wheel_scan_judge21: -0x3f52 014581 jam 0x80 ,mem_mwheel_tog -0x3f53 014582 rtn -: 014583 mouse_wheel_scan_judge22: -0x3f54 014584 jam 0x83 ,mem_mwheel_tog -0x3f55 014585 rtn -: 014586 mouse_wheel_scan_judge3: -0x3f56 014587 fetch 1 ,mem_mwheel_tog -0x3f57 014588 set0 7 ,pdata -0x3f58 014589 store 1 ,mem_mwheel_tog -0x3f59 014590 beq 0 ,mouse_wheel_scan_judge30 -0x3f5a 014591 beq 1 ,mouse_wheel_scan_judge31 -0x3f5b 014592 beq 2 ,mouse_wheel_scan_judge32 -0x3f5c 014593 beq 3 ,mouse_wheel_scan_judge33 -0x3f5d 014594 rtn -: 014595 mouse_wheel_scan_judge30: -0x3f5e 014596 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f5f 014597 beq 3 ,mouse_wheel_forward -0x3f60 014598 rtn -: 014599 mouse_wheel_scan_judge31: -0x3f61 014600 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f62 014601 beq 0 ,mouse_wheel_forward -0x3f63 014602 rtn -: 014603 mouse_wheel_scan_judge32: -0x3f64 014604 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f65 014605 beq 3 ,mouse_wheel_back -0x3f66 014606 rtn -: 014607 mouse_wheel_scan_judge33: -0x3f67 014608 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f68 014609 beq 0 ,mouse_wheel_back -0x3f69 014610 rtn -: 014611 mouse_wheel_forward: -0x3f6a 014612 jam 0 ,mem_mouse_z_data_count1 -0x3f6b 014613 fetch 1 ,mem_mouse_z_data -0x3f6c 014614 increase 1 ,pdata -0x3f6d 014615 store 1 ,mem_mouse_z_data -0x3f6e 014616 rtn -: 014617 mouse_wheel_back: -0x3f6f 014618 jam 0 ,mem_mouse_z_data_count -0x3f70 014619 fetch 1 ,mem_mouse_z_data -0x3f71 014620 increase -1 ,pdata -0x3f72 014621 store 1 ,mem_mouse_z_data -0x3f73 014622 rtn -: 014625 mouse_hid_connected: -0x3f74 014626 setarg hid_handshake_timeout -0x3f75 014627 store 1 ,mem_hid_handshake_timer_count -0x3f76 014628 rtn -: 014630 mouse_send_process: -0x3f77 014631 fetch 1 ,mem_app_handshake_flag -0x3f78 014632 rtn blank -0x3f79 014633 call l2cap_malloc_is_fifo_nearly_full -0x3f7a 014634 nrtn blank -0x3f7b 014635 fetch mouse_flag_len ,mem_mouse_flag -0x3f7c 014636 bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data -0x3f7d 014637 bbit1 mouse_select_device_flag ,mouse_send_empty_data -0x3f7e 014638 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data -0x3f7f 014639 call mouse_motion -0x3f80 014640 nrtn user -: 014641 mouse_send_data: -0x3f81 014642 arg 9 ,rega -0x3f82 014643 call hid_malloc_tx_buff -0x3f83 014644 fetch 2 ,mem_hid_int_remote_cid -0x3f84 014645 istore 2 ,contw -0x3f85 014646 setarg 0x02a1 -0x3f86 014647 istore 2 ,contw -0x3f87 014648 fetch 7 ,mem_mouse_key -0x3f88 014649 istore 7 ,contw -0x3f89 014650 rtn -: 014653 mouse_send_empty_data: -0x3f8a 014654 setarg 0 -0x3f8b 014655 store 7 ,mem_mouse_key -0x3f8c 014656 branch mouse_send_data -: 014659 mouse_no_data_timer_init: -0x3f8d 014660 fetch 2 ,mem_mouse_no_data_timeout -0x3f8e 014661 store 2 ,mem_mouse_no_data_timer -0x3f8f 014662 rtn -: 014665 mouse_fill_data_le: -0x3f90 014666 bpatch patch1c_5 ,mem_patch1c -0x3f91 014667 arg 7 ,rega -0x3f92 014668 fetcht 2 ,mem_le_notify_handle -0x3f93 014669 call le_att_malloc_tx_notify -0x3f94 014670 fetch 7 ,mem_mouse_key -0x3f95 014671 istore 7 ,contw -0x3f96 014672 rtn -: 014674 mouse_motion: -0x3f97 014675 bpatch patch1c_6 ,mem_patch1c -0x3f98 014676 disable user -0x3f99 014677 setarg 0 -0x3f9a 014678 store 6 ,mem_mouse_x -0x3f9b 014679 call mouse_cheak_sensor_data -0x3f9c 014680 call mouse_zwheel -0x3f9d 014681 call mouse_t_zwheel -0x3f9e 014682 call mouse_key -0x3f9f 014683 nrtn user -0x3fa0 014684 call mouse_no_data_timer_init -0x3fa1 014685 arg mouse_statue_up_flag ,queue -0x3fa2 014686 branch mouse_enable_function_flag -: 014688 motion_6clk_direction_dispose: -0x3fa3 014689 fetch 2 ,mem_mouse_x -0x3fa4 014690 sub pdata ,0 ,pdata -0x3fa5 014691 store 2 ,mem_mouse_x -0x3fa6 014692 branch enable_user -: 014693 motion_12clk_direction_dispose: -0x3fa7 014694 fetch 2 ,mem_mouse_y -0x3fa8 014695 sub pdata ,0 ,pdata -0x3fa9 014696 store 2 ,mem_mouse_y -0x3faa 014697 branch enable_user -: 014698 motion_9clk_direction_dispose: -0x3fab 014699 fetch 2 ,mem_mouse_y -0x3fac 014700 sub pdata ,0 ,pdata -0x3fad 014701 store 2 ,mem_mouse_y -0x3fae 014702 fetch 2 ,mem_mouse_x -0x3faf 014703 sub pdata ,0 ,pdata -0x3fb0 014704 store 2 ,mem_mouse_x -0x3fb1 014705 call mouse_sensor_data_swap_places -0x3fb2 014706 branch enable_user -: 014707 motion_3clk_direction_dispose: -0x3fb3 014708 call mouse_sensor_data_swap_places -0x3fb4 014709 branch enable_user -: 014710 mouse_cheak_sensor_data: -0x3fb5 014711 fetch 1 ,mem_spi_write_flash_sm -0x3fb6 014712 rtnne flash_sm_no_buys -0x3fb7 014713 fetch 1 ,mem_config_sensor_type -0x3fb8 014714 beq p3205 ,mouse_p32xx_sensor_motion -0x3fb9 014715 beq p3065 ,mouse_p32xx_sensor_motion -0x3fba 014716 beq ka8 ,mouse_p32xx_sensor_motion -0x3fbb 014717 beq p3204 ,mouse_p32xx_sensor_motion -0x3fbc 014718 beq p3212 ,mouse_p3212_sensor_motion -0x3fbd 014719 beq p3610 ,mouse_p3610_sensor_motion -0x3fbe 014720 beq p3065_xy ,mouse_p32xx_sensor_motion -0x3fbf 014721 branch mouse_p32xx_sensor_motion -: 014723 mouse_clear_sensor_data: -0x3fc0 014724 fetch 1 ,mem_mouse_move_flag -0x3fc1 014725 call mouse_read_sensor_common ,blank -0x3fc2 014726 jam 1 ,mem_mouse_move_flag -0x3fc3 014727 rtn -: 014730 mouse_p3212_sensor_motion: -0x3fc4 014731 call mouse_clear_sensor_data -0x3fc5 014732 fetcht 1 ,mem_sensor_data_gpio -0x3fc6 014733 call gpio_get_bit -0x3fc7 014734 nrtn true -: 014735 mouse_p3212_sensor_motion_next: -0x3fc8 014736 setarg pan_reg_pid_l -0x3fc9 014737 call twspi_read -0x3fca 014738 bne p32xx_id1 ,mouse_twspi_reset -0x3fcb 014739 setarg pan_reg_motion_staus -0x3fcc 014740 call twspi_read -0x3fcd 014741 rtnbit0 7 -0x3fce 014742 call mouse_read_sensor_common -0x3fcf 014743 call mouse_read_3212sensor_xy_high -0x3fd0 014744 store 1 ,mem_mouse_xy_h -0x3fd1 014745 rshift4 pdata ,pdata -0x3fd2 014746 call extsign_bit3 -0x3fd3 014747 store 1 ,mem_mouse_x + 1 -0x3fd4 014748 fetch 1 ,mem_mouse_xy_h -0x3fd5 014749 and pdata ,0x0f ,pdata -0x3fd6 014750 call extsign_bit3 -0x3fd7 014751 store 1 ,mem_mouse_y + 1 -0x3fd8 014752 fetch 1 ,mem_config_sensor_angle -0x3fd9 014753 beq mouse_6clk_angle ,motion_6clk_direction_dispose -0x3fda 014754 beq mouse_9clk_angle ,motion_9clk_direction_dispose -0x3fdb 014755 beq mouse_12clk_angle ,motion_12clk_direction_dispose -0x3fdc 014756 beq mouse_3clk_angle ,motion_3clk_direction_dispose -0x3fdd 014757 rtn -: 014759 mouse_read_3212sensor_xy_high: -0x3fde 014760 setarg 0x12 -0x3fdf 014761 branch twspi_read -: 014763 mouse_p3065_judge: -0x3fe0 014764 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 -0x3fe1 014765 branch mouse_twspi_reset -: 014767 mouse_p32xx_sensor_motion: -0x3fe2 014768 call mouse_clear_sensor_data -0x3fe3 014769 disable user -0x3fe4 014770 fetcht 1 ,mem_sensor_data_gpio -0x3fe5 014771 call gpio_get_bit -0x3fe6 014772 nrtn true -: 014773 mouse_p32xx_sensor_motion_2: -0x3fe7 014774 setarg pan_reg_pid_l -0x3fe8 014775 call twspi_read -0x3fe9 014776 bne p32xx_id1 ,mouse_p3065_judge -: 014777 mouse_p32xx_sensor_motion_1: -0x3fea 014778 setarg pan_reg_motion_staus -0x3feb 014779 call twspi_read -0x3fec 014780 rtnbit0 7 -0x3fed 014781 call mouse_read_sensor_common -0x3fee 014782 fetch 1 ,mem_mouse_x -0x3fef 014783 call extsign -0x3ff0 014784 store 2 ,mem_mouse_x -0x3ff1 014785 fetch 1 ,mem_mouse_y -0x3ff2 014786 call extsign -0x3ff3 014787 store 2 ,mem_mouse_y -0x3ff4 014788 fetch 1 ,mem_config_sensor_angle -0x3ff5 014789 beq mouse_6clk_angle ,motion32xx_6clk_direction_selection -0x3ff6 014790 beq mouse_9clk_angle ,motion32xx_9clk_direction_selection -0x3ff7 014791 beq mouse_12clk_angle ,motion32xx_12clk_direction_selection -0x3ff8 014792 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection -0x3ff9 014793 rtn -: 014795 motion32xx_6clk_direction_selection: -0x3ffa 014796 call motion_6clk_direction_dispose -0x3ffb 014797 branch mouse_sensor_sdio_low -: 014798 motion32xx_9clk_direction_selection: -0x3ffc 014799 call motion_9clk_direction_dispose -0x3ffd 014800 branch mouse_sensor_sdio_low -: 014801 motion32xx_12clk_direction_selection: -0x3ffe 014802 call motion_12clk_direction_dispose -0x3fff 014803 branch mouse_sensor_sdio_low -: 014804 motion32xx_3clk_direction_selection: -0x4000 014805 call motion_3clk_direction_dispose -0x4001 014806 branch mouse_sensor_sdio_low -: 014808 mouse_sensor_data_swap_places: -0x4002 014809 fetch 2 ,mem_mouse_y -0x4003 014810 fetcht 2 ,mem_mouse_x -0x4004 014811 store 2 ,mem_mouse_x -0x4005 014812 storet 2 ,mem_mouse_y -0x4006 014813 rtn -: 014815 mouse_p3610sensor_read: -0x4007 014816 call spi_ncs_enable -0x4008 014817 nop 100 -0x4009 014818 copy regb ,pdata -0x400a 014819 call twspi_read -0x400b 014820 copy pdata ,regb -0x400c 014821 call spi_ncs_disable -0x400d 014822 nop 100 -0x400e 014823 copy regb ,pdata -0x400f 014824 rtn -: 014825 mouse_p3610_sensor_motion: -0x4010 014826 disable user -0x4011 014827 fetcht 1 ,mem_sensor_data_gpio -0x4012 014828 call gpio_get_bit -0x4013 014829 nrtn true -0x4014 014830 arg pan_reg_motion_staus ,regb -0x4015 014831 call mouse_p3610sensor_read -0x4016 014832 rtnbit0 7 -0x4017 014833 arg pan_reg_pid_l ,regb -0x4018 014834 call mouse_p3610sensor_read -0x4019 014835 store 1 ,mem_sensor_id1 -0x401a 014836 bne p3610_id1 ,mouse_init_3610sensor_reset -0x401b 014837 fetch 1 ,mem_mouse_move_flag -0x401c 014838 call mouse_read_sensor3610_data ,blank -0x401d 014839 jam 1 ,mem_mouse_move_flag -0x401e 014840 call mouse_read_sensor3610_data -0x401f 014841 fetch 1 ,mem_mouse_xy_h -0x4020 014842 rshift4 pdata ,pdata -0x4021 014843 call extsign_bit3 -0x4022 014844 store 1 ,mem_mouse_x + 1 -0x4023 014845 fetch 1 ,mem_mouse_xy_h -0x4024 014846 and pdata ,0x0f ,pdata -0x4025 014847 call extsign_bit3 -0x4026 014848 store 1 ,mem_mouse_y + 1 -0x4027 014849 fetch 1 ,mem_config_sensor_angle -0x4028 014850 beq 0 ,motion3610_6clk_direction_selection -0x4029 014851 beq 1 ,motion3610_9clk_direction_selection -0x402a 014852 beq 2 ,motion3610_12clk_direction_selection -0x402b 014853 beq 3 ,motion3610_3clk_direction_selection -0x402c 014854 rtn -: 014856 mouse_3610_smart_select: -0x402d 014857 fetch 1 ,mem_sensor_smart_flag -0x402e 014858 beq p3610_smart_enable ,mouse_3610_smart_disable -0x402f 014859 beq p3610_smart_disable ,mouse_3610_smart_enable -0x4030 014860 rtn -: 014863 motion3610_6clk_direction_selection: -0x4031 014864 call motion_6clk_direction_dispose -0x4032 014865 branch mouse_3610_smart_select -: 014867 motion3610_12clk_direction_selection: -0x4033 014868 call motion_12clk_direction_dispose -0x4034 014869 branch mouse_3610_smart_select -: 014871 motion3610_9clk_direction_selection: -0x4035 014872 call motion_9clk_direction_dispose -0x4036 014873 branch mouse_3610_smart_select -: 014875 motion3610_3clk_direction_selection: -0x4037 014876 call motion_3clk_direction_dispose -0x4038 014877 branch mouse_3610_smart_select -: 014879 mouse_read_sensor3610_data: -0x4039 014880 call spi_ncs_enable -0x403a 014881 call mouse_read_sensor_common -0x403b 014882 arg 5 ,pdata -0x403c 014883 call twspi_read -0x403d 014884 store 1 ,mem_mouse_xy_h -0x403e 014885 arg 7 ,pdata -0x403f 014886 call twspi_read -0x4040 014887 store 1 ,mem_sensor_shutter_hi -0x4041 014888 arg 8 ,pdata -0x4042 014889 call twspi_read -0x4043 014890 store 1 ,mem_sensor_shutter_lo -0x4044 014891 branch spi_ncs_disable -: 014894 mouse_3610_smart_enable: -0x4045 014895 fetch 1 ,mem_sensor_shutter_hi -0x4046 014896 rtnne 0 -0x4047 014897 fetch 1 ,mem_sensor_shutter_lo -0x4048 014898 sub pdata ,45 ,null -0x4049 014899 rtn positive -0x404a 014900 jam p3610_smart_enable ,mem_sensor_smart_flag -0x404b 014901 setarg 0xba41 -0x404c 014902 call sensor_write -0x404d 014903 setarg 0x0032 -0x404e 014904 call sensor_write -0x404f 014905 setarg 0xb541 -0x4050 014906 branch sensor_write -: 014907 mouse_3610_smart_disable: -0x4051 014908 fetch 1 ,mem_sensor_shutter_hi -0x4052 014909 rtnne 0 -0x4053 014910 fetch 1 ,mem_sensor_shutter_lo -0x4054 014911 sub pdata ,45 ,null -0x4055 014912 nrtn positive -0x4056 014913 jam p3610_smart_disable ,mem_sensor_smart_flag -0x4057 014914 setarg 0xba41 -0x4058 014915 call sensor_write -0x4059 014916 setarg 0x8032 -0x405a 014917 call sensor_write -0x405b 014918 setarg 0xb541 -0x405c 014919 branch sensor_write -: 014923 mouse_read_sensor_common: -0x405d 014924 arg pan_reg_delta_x ,pdata -0x405e 014925 call twspi_read -0x405f 014926 store 2 ,mem_mouse_x -0x4060 014927 arg pan_reg_delta_y ,pdata -0x4061 014928 call twspi_read -0x4062 014929 store 2 ,mem_mouse_y -0x4063 014930 rtn -: 014932 mouse_set_qdecoder_x: -0x4064 014933 arg mouse_default_xa_gpio ,temp -0x4065 014934 call gpio_config_input -0x4066 014935 arg mouse_default_xa_gpio ,temp -0x4067 014936 call gpio_get_bit -0x4068 014937 rtn true -0x4069 014938 hfetch 1 ,core_qdec_cntx -0x406a 014939 set1 4 ,pdata -0x406b 014940 hstore 1 ,core_qdec_cntx -0x406c 014941 rtn -: 014943 mouse_hardware_zwheel: -0x406d 014944 fetcht 1 ,mem_mouse_z_data -0x406e 014945 hfetch 1 ,core_qdec_cntx -0x406f 014946 iadd temp ,pdata -0x4070 014947 rtn blank -0x4071 014948 store 1 ,mem_mouse_z -0x4072 014949 jam 0 ,mem_mouse_z_data -0x4073 014950 branch enable_user -: 014951 mouse_hardware_zwheel_beforelpm: -0x4074 014952 fetcht 1 ,mem_mouse_z_data -0x4075 014953 hfetch 1 ,core_qdec_cntx -0x4076 014954 iadd temp ,pdata -0x4077 014955 store 1 ,mem_mouse_z_data -0x4078 014956 rtn -: 014957 mouse_zwheel: -0x4079 014958 fetch 1 ,mem_mouse_z_data -0x407a 014959 rtn blank -0x407b 014960 store 1 ,mem_mouse_z -0x407c 014961 jam 0 ,mem_mouse_z_data -0x407d 014962 branch enable_user -: 014964 mouse_t_zwheel: -0x407e 014965 fetch 1 ,mem_mouse_tz_data -0x407f 014966 rtn blank -0x4080 014967 store 1 ,mem_mouse_tz -0x4081 014968 jam 0 ,mem_mouse_tz_data -0x4082 014969 branch enable_user -: 014971 mouse_check_key_gpio: -0x4083 014972 arg 0 ,rega -0x4084 014973 fetcht 1 ,mem_lbutton_gpio -0x4085 014974 call gpio_get_bit -0x4086 014975 setflag true ,0 ,rega -0x4087 014976 fetcht 1 ,mem_rbutton_gpio -0x4088 014977 call gpio_get_bit -0x4089 014978 setflag true ,1 ,rega -0x408a 014979 fetcht 1 ,mem_mbutton_gpio -0x408b 014980 call gpio_get_bit -0x408c 014981 setflag true ,2 ,rega -0x408d 014982 call mouse_check_s_key_gpio -: 014983 mouse_check_key_gpio_output: -0x408e 014984 copy rega ,pdata -0x408f 014985 rtn -: 014986 mouse_check_s_key_gpio: -0x4090 014987 fetch 1 ,mem_bk_button_gpio -0x4091 014988 rtneq gpio_disable -0x4092 014989 fetcht 1 ,mem_bk_button_gpio -0x4093 014990 call gpio_get_bit -0x4094 014991 setflag true ,3 ,rega -0x4095 014992 fetcht 1 ,mem_fw_button_gpio -0x4096 014993 call gpio_get_bit -0x4097 014994 setflag true ,4 ,rega -0x4098 014995 rtn -: 014997 mouse_key: -0x4099 014998 call mouse_check_key_gpio -0x409a 014999 call mouse_set_mult -0x409b 015000 call mouse_24g_key -0x409c 015001 copy rega ,pdata -0x409d 015002 fetcht 1 ,mem_mouse_key -0x409e 015003 store 1 ,mem_mouse_key -0x409f 015004 ixor temp ,pdata -0x40a0 015005 sub pdata ,0 ,null -0x40a1 015006 rtn zero -0x40a2 015007 branch enable_user -: 015009 mouse_24g_key: -0x40a3 015010 rtnmark0 mark_24g -0x40a4 015011 copy rega ,pdata -0x40a5 015012 rtn blank -0x40a6 015013 store 1 ,mem_mouse_key -0x40a7 015014 branch enable_user -: 015017 mouse_set_mult: -0x40a8 015018 fetch 2 ,mem_ui_state_map -0x40a9 015019 bbit1 ui_state_ble_connected ,mouse_set_ble_mult -0x40aa 015020 fetch 2 ,mem_ui_state_map -0x40ab 015021 bbit1 ui_state_bt_connected ,mouse_set_bt_mult -0x40ac 015022 rtn -: 015023 mouse_set_ble_mult: -0x40ad 015024 copy rega ,pdata -0x40ae 015025 nbranch le_set_config_short_mult ,blank -0x40af 015026 branch le_clr_config_short_mult -: 015027 mouse_set_bt_mult: -0x40b0 015028 copy rega ,pdata -0x40b1 015029 nbranch classic_bt_set_mult_short_flag ,blank -0x40b2 015030 branch classic_bt_clr_mult_short_flag -: 015033 mouse_sensor_sdio_low: -0x40b3 015034 bpatch patch1c_7 ,mem_patch1c -0x40b4 015035 arg mouse_spi1_sdio_gpio ,temp -0x40b5 015036 fetch mouse_flag_len ,mem_mouse_flag -0x40b6 015037 isolate1 mouse_enable_spi2 ,pdata -0x40b7 015038 call mouse_sensor_sdio_low2 ,true -0x40b8 015039 call gpio_get_bit -0x40b9 015040 rtn true -0x40ba 015041 setarg 0x0a -0x40bb 015042 call twspi_read -0x40bc 015043 nop 1000 -0x40bd 015044 branch mouse_sensor_sdio_low -: 015045 mouse_sensor_sdio_low2: -0x40be 015046 arg mouse_spi2_sdio_gpio ,temp -0x40bf 015047 rtn -: 015049 mouse_spi_sdio_gpio_pollup: -0x40c0 015050 fetch mouse_flag_len ,mem_mouse_flag -0x40c1 015051 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup -: 015052 mouse_spi1_sdio_gpio_pollup: -0x40c2 015053 arg mouse_spi1_sdio_gpio ,temp -0x40c3 015054 branch gpio_config_input_without_wake -: 015055 mouse_spi2_sdio_gpio_pollup: -0x40c4 015056 arg mouse_spi2_sdio_gpio ,temp -0x40c5 015057 branch gpio_config_input_without_wake -: 015060 mouse_init_sunt: -0x40c6 015061 call mouse_spi_init -0x40c7 015062 rtn wake -0x40c8 015063 call mouse_spi_sdio_gpio_pollup -0x40c9 015064 fetch 1 ,mem_config_sensor_type -0x40ca 015065 beq p3610 ,mouse_init_3610sensor -: 015066 mouse_init_sensor: -0x40cb 015067 call mouse_read_sensor_id -0x40cc 015068 beq p32xx_id1 ,mouse_init_p32xx_id2_judge -0x40cd 015069 beq p3065_id1 ,mouse_p3065_init_param -0x40ce 015070 call mouse_twspi_reset -0x40cf 015071 nop 1000 -0x40d0 015072 branch mouse_init_sensor -: 015073 mouse_twspi_reset: -0x40d1 015074 bpatch patch1d_0 ,mem_patch1d -0x40d2 015075 fetch mouse_flag_len ,mem_mouse_flag -0x40d3 015076 bbit1 mouse_enable_spi2 ,twspi_reset2 -0x40d4 015077 branch twspi_reset -: 015079 mouse_init_3610sensor: -0x40d5 015080 call mouse_read_sensor_id -0x40d6 015081 beq p3610_id1 ,mouse_init_p3610 -0x40d7 015082 call mouse_init_3610sensor_reset -0x40d8 015083 branch mouse_init_3610sensor -: 015085 mouse_read_sensor_id: -0x40d9 015086 setarg pan_reg_pid_h -0x40da 015087 call twspi_read -0x40db 015088 store 1 ,mem_sensor_id2 -0x40dc 015089 setarg pan_reg_pid_l -0x40dd 015090 call twspi_read -0x40de 015091 store 1 ,mem_sensor_id1 -0x40df 015092 rtn -: 015093 mouse_init_p32xx_id2_judge: -0x40e0 015094 fetch 1 ,mem_sensor_id2 -0x40e1 015095 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param -0x40e2 015096 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param -0x40e3 015097 beq p3212_id2 ,mouse_3212_init_param -0x40e4 015098 beq pka8_id2 ,mouse_ka8_init_param -0x40e5 015099 rtn -: 015100 mouse_ka8_init_param: -0x40e6 015101 jam ka8 ,mem_config_sensor_type -0x40e7 015102 rtn -: 015103 mouse_p3065xy_init_param: -0x40e8 015104 jam p3065_xy ,mem_config_sensor_type -0x40e9 015105 rtn -: 015106 mouse_p3065_init_param: -0x40ea 015107 fetch 1 ,mem_sensor_id2 -0x40eb 015108 beq p3065_xy_id2 ,mouse_p3065xy_init_param -0x40ec 015109 jam p3065 ,mem_config_sensor_type -0x40ed 015110 rtn -: 015111 mouse_3212_init_param: -0x40ee 015112 jam p3212 ,mem_config_sensor_type -0x40ef 015113 call mouse_sensor_disable_wp -0x40f0 015114 setarg 0x3426 -0x40f1 015115 call twspi_write -0x40f2 015116 setarg 0x0419 -0x40f3 015117 call twspi_write -: 015118 mouse_sensor_enable_wp: -0x40f4 015119 setarg 0x0009 -0x40f5 015120 branch twspi_write -: 015121 mouse_sensor_disable_wp: -0x40f6 015122 setarg 0x5a09 -0x40f7 015123 branch twspi_write -: 015125 mouse_3204_3l_init_param: -0x40f8 015126 jam p3204 ,mem_config_sensor_type -0x40f9 015127 call mouse_sensor_disable_wp -0x40fa 015128 setarg 0x0f0d -0x40fb 015129 call twspi_write -0x40fc 015130 setarg 0xe31d -0x40fd 015131 call twspi_write -0x40fe 015132 setarg 0xd27d -0x40ff 015133 call twspi_write -0x4100 015134 call mouse_32xx_init_param -0x4101 015135 branch mouse_32xx_init_param_1 -: 015137 mouse_32xx_init_param: -0x4102 015138 setarg 0x351b -0x4103 015139 call twspi_write -0x4104 015140 setarg 0xb428 -0x4105 015141 call twspi_write -0x4106 015142 setarg 0x4629 -0x4107 015143 call twspi_write -0x4108 015144 setarg 0x962a -0x4109 015145 call twspi_write -0x410a 015146 setarg 0x8c2b -0x410b 015147 call twspi_write -0x410c 015148 setarg 0x6e2c -0x410d 015149 call twspi_write -0x410e 015150 setarg 0x642d -0x410f 015151 call twspi_write -0x4110 015152 setarg 0x5f38 -0x4111 015153 call twspi_write -0x4112 015154 setarg 0x0f39 -0x4113 015155 call twspi_write -0x4114 015156 setarg 0x323a -0x4115 015157 call twspi_write -0x4116 015158 setarg 0x473b -0x4117 015159 call twspi_write -0x4118 015160 setarg 0x1042 -0x4119 015161 branch twspi_write -: 015162 mouse_32xx_init_param_1: -0x411a 015163 setarg 0x2e54 -0x411b 015164 call twspi_write -0x411c 015165 setarg 0xf255 -0x411d 015166 call twspi_write -0x411e 015167 setarg 0xf461 -0x411f 015168 call twspi_write -0x4120 015169 setarg 0x7063 -0x4121 015170 call twspi_write -0x4122 015171 setarg 0x5275 -0x4123 015172 call twspi_write -0x4124 015173 setarg 0x4176 -0x4125 015174 call twspi_write -0x4126 015175 setarg 0xed77 -0x4127 015176 call twspi_write -0x4128 015177 setarg 0x2378 -0x4129 015178 call twspi_write -0x412a 015179 setarg 0x4679 -0x412b 015180 call twspi_write -0x412c 015181 setarg 0xe57a -0x412d 015182 call twspi_write -0x412e 015183 setarg 0x487c -0x412f 015184 call twspi_write -0x4130 015185 setarg 0x777e -0x4131 015186 call twspi_write -0x4132 015187 setarg 0x017f -0x4133 015188 call twspi_write -0x4134 015189 setarg 0x000b -0x4135 015190 call twspi_write -0x4136 015191 setarg 0x007f -0x4137 015192 call twspi_write -0x4138 015193 branch mouse_sensor_enable_wp -: 015196 mouse_3205_3t_init_param: -0x4139 015197 jam p3205 ,mem_config_sensor_type -0x413a 015198 call mouse_sensor_disable_wp -0x413b 015199 setarg 0x100d -0x413c 015200 call twspi_write -0x413d 015201 setarg 0xed1d -0x413e 015202 call twspi_write -0x413f 015203 setarg 0x807d -0x4140 015204 call twspi_write -0x4141 015205 call mouse_32xx_init_param -0x4142 015206 setarg 0x0943 -0x4143 015207 call twspi_write -0x4144 015208 branch mouse_32xx_init_param_1 -: 015211 mouse_init_3610sensor_reset: -0x4145 015212 fetcht 1 ,mem_sensor_reset_gpio -0x4146 015213 call gpio_out_active -0x4147 015214 call delay_10ms -0x4148 015215 fetcht 1 ,mem_sensor_reset_gpio -0x4149 015216 call gpio_out_inactive -0x414a 015217 branch delay_10ms -: 015219 mouse_init_p3610: -0x414b 015220 jam p3610 ,mem_config_sensor_type -0x414c 015221 setarg 0xba41 -0x414d 015222 call sensor_write -0x414e 015223 setarg 0x0d11 -0x414f 015224 call sensor_write -0x4150 015225 setarg 0x041b -0x4151 015226 call sensor_write -0x4152 015227 setarg 0x041c -0x4153 015228 call sensor_write -0x4154 015229 setarg 0x0f1d -0x4155 015230 call sensor_write -0x4156 015231 setarg 0x0032 -0x4157 015232 call sensor_write -0x4158 015233 setarg 0xb541 -0x4159 015234 branch sensor_write -: 015238 mouse_set_sensor_reg: -0x415a 015239 setarg 0xba41 -0x415b 015240 call sensor_write -0x415c 015241 nop 4000 -0x415d 015242 setarg 0xff7f -0x415e 015243 call sensor_write -0x415f 015244 copy rega ,pdata -0x4160 015245 call sensor_write -0x4161 015246 setarg 0x007f -0x4162 015247 call sensor_write -0x4163 015248 setarg 0xb541 -0x4164 015249 branch sensor_write -: 015251 extsign: -0x4165 015252 rtnbit0 7 -0x4166 015253 arg 0xff00 ,temp -0x4167 015254 ior temp ,pdata -0x4168 015255 rtn -: 015257 extsign_bit3: -0x4169 015258 rtnbit0 3 -0x416a 015259 arg 0xf0 ,temp -0x416b 015260 ior temp ,pdata -0x416c 015261 rtn -: 015264 mouse_le: -0x416d 015265 call le_fifo_check_nearly_full -0x416e 015266 nrtn blank -0x416f 015267 fetch 1 ,mem_le_connect_status_flag -0x4170 015268 and pdata ,0x03 ,pdata -0x4171 015269 rtnne 0x03 -0x4172 015270 fetch mouse_flag_len ,mem_mouse_flag -0x4173 015271 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet -0x4174 015272 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet -0x4175 015273 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet -0x4176 015274 call mouse_motion -0x4177 015275 nrtn user -0x4178 015276 branch mouse_fill_data_le -: 015278 mouse_le_send_empty_packet: -0x4179 015279 setarg 0 -0x417a 015280 store 7 ,mem_mouse_key -0x417b 015281 branch mouse_fill_data_le -: 015283 mouse_priority_bb_event: -0x417c 015284 copy regc ,pdata -0x417d 015285 beq bt_evt_le_connected ,mouse_le_bb_event_connected -0x417e 015286 beq bt_evt_bb_connected ,mouse_stop_discovery -0x417f 015287 beq bt_evt_le_disconnected ,mouse_bb_disconnected -0x4180 015288 beq bt_evt_bb_disconnected ,mouse_bb_disconnected -0x4181 015289 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete -0x4182 015290 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn -0x4183 015291 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake -0x4184 015292 beq bt_evt_hid_connected ,mouse_bt_hid_connected -0x4185 015293 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed -0x4186 015294 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout -0x4187 015295 beq bt_evt_pincode_req ,mouse_bb_event_pincode -0x4188 015296 beq bt_evt_remote_unsniff ,app_start_auto_sniff -0x4189 015297 beq bt_evt_le_pairing_success ,mouse_le_pairing_success -0x418a 015298 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt -0x418b 015299 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete -0x418c 015300 beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug -0x418d 015301 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete -0x418e 015302 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail -0x418f 015303 beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success -0x4190 015304 rtn -: 015307 mouse_le_pairing_complete: -0x4191 015308 branch app_ble_store_reconn_info -: 015310 mouse_24g_attempt_fail: -0x4192 015311 jam 1 ,mem_mouse_24g_enter_lpm_enable -0x4193 015312 fetch 1 ,mem_reconn_times -0x4194 015313 nbranch mouse_polling_device ,blank -0x4195 015314 fetch 1 ,mem_device_flag -0x4196 015315 fetcht 1 ,mem_24g_device_number -0x4197 015316 isub temp ,null -0x4198 015317 branch app_enter_hibernate ,zero -0x4199 015318 rtn -: 015319 mouse_24g_attempt_success: -0x419a 015320 jam 1 ,mem_mouse_24g_enter_lpm_enable -0x419b 015321 rtn -: 015322 mouse_24g_pairing_complete: -0x419c 015323 jam 1 ,mem_mouse_24g_enter_lpm_enable -0x419d 015324 arg mosue_24g_pairing_flag ,queue -0x419e 015325 call mouse_disable_function_flag -0x419f 015326 setarg 0 -0x41a0 015327 store 2 ,mem_24g_pairing_timer_count -0x41a1 015328 jam 0 ,mem_mouse_move_flag -0x41a2 015330 fetch 1 ,mem_config_sensor_type -0x41a3 015331 sub pdata ,p3610 ,null -0x41a4 015332 call mouse_read_sensor3610_data ,zero -0x41a5 015333 ncall mouse_read_sensor_common ,zero -0x41a6 015335 fetch 1 ,mouse_flag_len ,mem_mouse_flag -0x41a7 015336 bbit1 mouse_enable_flash ,mouse_store_flash_24g_address -0x41a8 015337 call mouse_set_24g_addr_eeprom -0x41a9 015338 branch iicd_write_protect_eep_data -: 015340 mouse_set_24g_addr_eeprom: -0x41aa 015341 call g24_head_ptr2regc -0x41ab 015342 add regc ,offset_24g_addr ,rega -0x41ac 015343 arg mouse_g24_addr_eeprom_offect ,regb -0x41ad 015344 arg 4 ,temp -0x41ae 015345 rtn -: 015347 mouse_store_flash_24g_address: -0x41af 015348 call g24_head_ptr2regc -0x41b0 015349 add regc ,offset_24g_addr ,regb -0x41b1 015350 ifetch 1 ,regb -0x41b2 015351 store 1 ,mem_mouse_24g_addr -0x41b3 015352 branch mouse_store_flash_device_info -: 015355 mouse_le_pairing_success: -0x41b4 015356 arg ll_pairing_success_flag ,queue -0x41b5 015357 branch mouse_le_enable_connect_flag -: 015358 mouse_le_ll_start_encryt: -0x41b6 015359 jam 2 ,mem_le_start_encrypt_timer -0x41b7 015360 arg ll_start_enc_flag ,queue -0x41b8 015361 branch mouse_le_enable_connect_flag -: 015364 mouse_le_enable_connect_flag: -0x41b9 015365 fetch 1 ,mem_le_connect_status_flag -0x41ba 015366 qset1 pdata -0x41bb 015367 store 1 ,mem_le_connect_status_flag -0x41bc 015368 rtn -: 015370 mouse_le_disable_connect_flag: -0x41bd 015371 fetch 1 ,mem_le_connect_status_flag -0x41be 015372 qset0 pdata -0x41bf 015373 store 1 ,mem_le_connect_status_flag -0x41c0 015374 rtn -: 015375 mouse_le_clean_connect_flag: -0x41c1 015376 jam 0 ,mem_le_connect_status_flag -0x41c2 015377 rtn -: 015379 mouse_le_bb_event_connected: -0x41c3 015380 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x41c4 015381 set0 app_disc_by_button ,pdata -0x41c5 015382 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x41c6 015383 setarg 0 -0x41c7 015384 store 2 ,mem_mouse_direct_timer -0x41c8 015385 call mouse_no_data_timer_init -0x41c9 015386 branch mouse_stop_discovery -: 015388 mouse_bb_event_pincode: -0x41ca 015389 call pincode_reinit -0x41cb 015390 branch app_bt_set_pincode -: 015391 mouse_bb_event_reconn_timeout: -: 015392 mouse_bb_event_reconn_failed: -0x41cc 015393 fetch 1 ,mem_reconn_times -0x41cd 015394 nbranch mouse_polling_device ,blank -0x41ce 015395 fetch 2 ,mem_ui_state_map -0x41cf 015396 bbit1 ui_state_btn_down ,mouse_start_discovery -0x41d0 015397 fetch mouse_flag_len ,mem_mouse_flag -0x41d1 015398 bbit1 mouse_select_device_flag ,mouse_soft_reset -0x41d2 015399 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery -0x41d3 015400 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 -0x41d4 015401 branch app_bb_hibernate -: 015404 mouse_bt_hid_connected: -0x41d5 015405 branch mouse_hid_connected -: 015407 mouse_bt_event_setup_complete: -0x41d6 015408 rtn -: 015410 mouse_soft_reset: -0x41d7 015411 call mouse_select_device_enable -0x41d8 015412 branch soft_reset_chip -: 015414 mouse_bb_disconnected: -0x41d9 015415 bpatch patch1d_1 ,mem_patch1d -0x41da 015416 call mouse_bb_discon_clear_stack -0x41db 015417 fetch mouse_flag_len ,mem_mouse_flag -0x41dc 015418 bbit1 mouse_select_device_flag ,mouse_soft_reset -0x41dd 015419 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 -0x41de 015420 fetch 1 ,mem_reconn_times -0x41df 015421 nbranch mouse_polling_device ,blank -0x41e0 015422 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x41e1 015423 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn -0x41e2 015424 bbit1 app_disc_by_button ,app_disconn_reason_clear -0x41e3 015425 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing -0x41e4 015426 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate -0x41e5 015427 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate -0x41e6 015428 branch mouse_start_discovery -: 015429 mouse_bb_discon_clear_stack: -0x41e7 015430 setarg 0 -0x41e8 015431 store 8 ,mem_wheel_tb_old_pinlevel -0x41e9 015432 istore 4 ,contw -0x41ea 015433 jam 0 ,mem_mouse_send_blank_timer -0x41eb 015434 jam 0 ,mem_mouse_move_flag -0x41ec 015435 jam app_handshake_null ,mem_app_handshake_flag -0x41ed 015436 jam 0 ,mem_ltk_exists -0x41ee 015437 rtn -: 015439 mouse_event_light_state_pairing: -0x41ef 015440 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate -0x41f0 015441 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate -0x41f1 015442 branch mouse_start_discovery -: 015443 mouse_event_light_state_hibernate: -0x41f2 015444 fetch 2 ,mem_ui_state_map -0x41f3 015445 bbit1 ui_state_btn_down ,mouse_start_discovery -0x41f4 015446 branch app_bb_hibernate -: 015448 mouse4_0_event_bb_disconn: -0x41f5 015449 call mouse_le_clean_connect_flag -0x41f6 015450 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x41f7 015451 bbit1 app_disc_by_button ,app_disconn_reason_clear -0x41f8 015452 branch app_bb_hibernate -: 015454 mouse_bb_event_timer: -0x41f9 015455 call mouse_adc_read -0x41fa 015456 call mouse_24g_delay_timer -0x41fb 015457 call mouse_ban_24g_pairing_timer -0x41fc 015458 call mouse_dpi_led_blink_delay_timer -0x41fd 015459 call mouse_statue_up_timer -0x41fe 015461 call mouse_statue_cheak_timer -0x41ff 015462 call mouse_select_device -0x4200 015463 call mouse_bt_discovery_cheak -0x4201 015464 call mouse_low_voltage_led_timer -0x4202 015465 call mouse_sensor_led_contrl_timer -0x4203 015466 call mouse_check_hid_handshake_timer -0x4204 015467 call mouse_check_discovery_timeout_timer -0x4205 015468 call mouse_check_direct_timeout_timer -0x4206 015469 call mouse_check_no_data_timeout_timer -0x4207 015470 call mouse_check_mouse_state_timer -0x4208 015471 branch mouse_le_enable_att_list_timer -: 015475 mouse_sensor_led_contrl_timer: -0x4209 015476 fetch 1 ,mem_mouse_sensor_timer_count -0x420a 015477 rtn blank -0x420b 015478 increase -1 ,pdata -0x420c 015479 store 1 ,mem_mouse_sensor_timer_count -0x420d 015480 nrtn blank -0x420e 015481 branch mouse_sensor_led_contrl -: 015482 mouse_sensor_led_contrl: -0x420f 015483 fetch 1 ,mem_sensor_led_style -0x4210 015484 rtneq ui_led_state_blink_stop -0x4211 015485 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking -: 015486 mouse_sensor_led_blink_state_lighting: -0x4212 015487 call mouse_sensor_led_on -0x4213 015488 jam ui_led_state_blink_darking ,mem_sensor_led_style -0x4214 015489 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count -0x4215 015490 rtn -: 015491 mouse_sensor_led_blink_state_darking: -0x4216 015492 call mouse_sensor_led_off -0x4217 015493 jam ui_led_state_blink_lighting ,mem_sensor_led_style -0x4218 015494 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count -0x4219 015495 rtn -: 015497 mouse_sensor_led_blink_stop: -: 015498 mouse_sensor_reset: -0x421a 015499 setarg 0x8006 -0x421b 015500 call twspi_write -0x421c 015501 nop 1000 -0x421d 015502 jam 0x00 ,mem_mouse_sensor_timer_count -0x421e 015503 jam ui_led_state_blink_stop ,mem_sensor_led_style -0x421f 015504 branch mouse_init_p32xx_id2_judge -: 015506 mouse_p3212sensor_led_on: -0x4220 015507 setarg 0xa006 -0x4221 015508 call twspi_write -0x4222 015509 setarg 0xa005 -0x4223 015510 branch twspi_write -: 015511 mouse_sensor_led_on_global: -0x4224 015512 jam 0 ,mem_mouse_sensor_timer_count -: 015513 mouse_sensor_led_on: -0x4225 015514 fetch 1 ,mem_config_sensor_type -0x4226 015515 beq p3212 ,mouse_p3212sensor_led_on -0x4227 015516 setarg 0x0106 -0x4228 015517 call twspi_write -0x4229 015518 setarg 0xa105 -0x422a 015519 branch twspi_write -: 015521 mouse_sensor_led_off_global: -0x422b 015522 jam 0 ,mem_mouse_sensor_timer_count -: 015523 mouse_sensor_led_off: -0x422c 015524 setarg 0x0906 -0x422d 015525 branch twspi_write -: 015526 mouse_sensor_start_blink: -0x422e 015527 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count -0x422f 015528 jam ui_led_state_blink_start ,mem_sensor_led_style -0x4230 015529 rtn -: 015531 mouse_check_hid_handshake_timer: -0x4231 015532 arg mem_hid_handshake_timer_count ,regc -0x4232 015533 arg mouse_bt_hid_handshake ,regb -0x4233 015534 branch timer_single_step -: 015536 mouse_check_discovery_timeout_timer: -0x4234 015537 arg mem_mouse_discovery_timer ,regc -0x4235 015538 arg mouse_check_discovery_timeout ,regb -0x4236 015539 branch timer_single_step_2b -: 015541 mouse_check_direct_timeout_timer: -0x4237 015542 arg mem_mouse_direct_timer ,regc -0x4238 015543 arg mouse_check_direct_timeout ,regb -0x4239 015544 branch timer_single_step_2b -: 015546 mouse_check_no_data_timeout_timer: -0x423a 015547 arg mem_mouse_no_data_timer ,regc -0x423b 015548 arg mouse_check_no_data_timeout ,regb -0x423c 015549 branch timer_single_step_2b -: 015551 mouse_check_mouse_state_timer: -0x423d 015552 arg mem_mouse_statue_led_timer ,regc -0x423e 015553 arg mouse_statue_led_off ,regb -0x423f 015554 branch timer_single_step -: 015558 mouse_le_enable_att_list_timer: -0x4240 015559 arg mem_le_start_encrypt_timer ,regc -0x4241 015560 arg mouse_le_enable_att_list ,regb -0x4242 015561 branch timer_single_step -: 015563 mouse_24g_delay_timer: -0x4243 015564 arg mem_24g_enter_lpm_timer ,regc -0x4244 015565 arg mouse_24g_delay ,regb -0x4245 015566 branch timer_single_step -: 015568 mouse_ban_24g_pairing_timer: -0x4246 015569 arg mem_24g_pairing_timer_count ,regc -0x4247 015570 arg mouse_ban_24g_pairing ,regb -0x4248 015571 branch timer_single_step_2b -: 015572 mouse_ban_24g_pairing: -: 015573 mouse_24g_delay: -0x4249 015574 rtn -: 015577 mosue_dpi_led_blink_init: -0x424a 015578 fetch mouse_flag_len ,mem_mouse_flag -0x424b 015579 rtnbit0 mouse_enable_dpi_led_blink -0x424c 015580 jam 10 ,mem_mouse_dpi_led_delay_count -0x424d 015581 fetch 1 ,mem_dpi_led_gpio -0x424e 015582 store 1 ,mem_mouse_struct_led_gpio -0x424f 015583 rtn -: 015586 mouse_dpi_led_blink_delay_timer: -0x4250 015587 arg mem_mouse_dpi_led_delay_count ,regc -0x4251 015588 arg mouse_dpi_led_setting ,regb -0x4252 015589 branch timer_single_step -: 015590 mouse_dpi_led_setting: -0x4253 015591 fetch 1 ,mem_dpi_led_gpio -0x4254 015592 store 1 ,mem_mouse_struct_led_gpio -0x4255 015593 setarg led_dpi_blink -0x4256 015594 store 2 ,mem_mouse_on_time -0x4257 015595 store 2 ,mem_mouse_off_time -0x4258 015596 arg 0 ,rega -0x4259 015597 fetcht 1 ,mem_mouse_dpi -0x425a 015598 increase 1 ,temp -0x425b 015599 storet 1 ,mem_mouse_blink_count -0x425c 015600 jam ui_led_state_blink_start ,mem_mouse_led_type -0x425d 015601 rtn -: 015603 mouse_le_enable_att_list: -0x425e 015604 fetch 1 ,mem_le_connect_status_flag -0x425f 015605 rtnbit1 ll_pairing_success_flag -0x4260 015606 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x4261 015607 call ui_ipc_send_cmd -0x4262 015608 arg write_req_enable_flag ,queue -0x4263 015609 branch mouse_le_enable_connect_flag -: 015612 mouse_check_discovery_timeout: -0x4264 015613 call mouse_stop_discovery -0x4265 015614 branch app_enter_hibernate -: 015616 mouse_check_direct_timeout: -0x4266 015617 call app_ble_stop_direct_adv -0x4267 015618 fetch 1 ,mem_reconn_times -0x4268 015619 nbranch mouse_polling_device ,blank -0x4269 015620 branch app_enter_hibernate -: 015622 mouse_check_no_data_timeout: -0x426a 015623 bmark1 mark_24g ,check_51cmd_hibernate -0x426b 015624 branch mouse_disconnect -: 015628 mouse_bb_event_discovery_btn: -0x426c 015629 bpatch patch1d_2 ,mem_patch1d -0x426d 015630 jam 0 ,mem_mouse_send_blank_timer -0x426e 015631 call mouse_disconnect -0x426f 015632 call mouse_le_clean_connect_flag -0x4270 015633 branch mouse_start_discovery -: 015637 mouse3_0_check_reconn_target: -0x4271 015638 fetch 6 ,mem_hci_plap -0x4272 015639 branch app_bt_start_discovery_short ,blank -0x4273 015640 call mouse_reconn_setting_led_gpio -0x4274 015641 jam 0x17 ,mem_connection_options -0x4275 015642 fetch 1 ,mem_ssp_enable -0x4276 015643 nbranch app_bt_start_reconnect ,blank -0x4277 015644 jam 0x04 ,mem_connection_options -0x4278 015645 branch app_bt_start_reconnect -: 015647 mouse4_0_check_reconn_target: -0x4279 015648 fetch 2 ,mem_mouse_direct_timeout -0x427a 015649 store 2 ,mem_mouse_direct_timer -0x427b 015650 call mouse_reconn_setting_led_gpio -0x427c 015651 call app_lpm_mult_disable -0x427d 015652 branch check_51cmd_adv -: 015654 mouse_reconn_setting_led_gpio: -0x427e 015655 setarg led_reconnect_blink -0x427f 015656 store 2 ,mem_mouse_on_time -0x4280 015657 store 2 ,mem_mouse_off_time -0x4281 015658 branch mouse_setting_led_gpio_comman -: 015660 mouse_discover_setting_led_gpio: -0x4282 015661 setarg led_discovery_blink -0x4283 015662 store 2 ,mem_mouse_on_time -0x4284 015663 store 2 ,mem_mouse_off_time -: 015664 mouse_setting_led_gpio_comman: -0x4285 015665 fetch 1 ,mem_device_flag -0x4286 015666 beq mode_bt_device1 ,mouse_device_led1 -0x4287 015667 beq mode_bt_device2 ,mouse_device_led2 -0x4288 015668 beq mode_bt_device3 ,mouse_device_led3 -0x4289 015669 rtn -: 015670 mouse_device_led1: -0x428a 015671 fetch 1 ,mem_config_device1_led_gpio -0x428b 015672 branch mouse_led_blink -: 015673 mouse_device_led2: -0x428c 015674 fetch 1 ,mem_config_device2_led_gpio -0x428d 015675 branch mouse_led_blink -: 015676 mouse_device_led3: -0x428e 015677 fetch 1 ,mem_config_device3_led_gpio -: 015678 mouse_led_blink: -0x428f 015679 store 1 ,mem_temp -0x4290 015680 call mouse_devce_led_off -0x4291 015681 fetch 1 ,mem_temp -0x4292 015682 store 1 ,mem_mouse_struct_led_gpio -0x4293 015683 arg 0 ,rega -0x4294 015684 jam ui_led_state_blink_start ,mem_mouse_led_type -0x4295 015685 branch ui_led_blink_start_global -: 015687 mouse_led_off: -0x4296 015688 arg 0 ,rega -0x4297 015689 branch ui_led_off_global -: 015690 mouse_led_on: -0x4298 015691 arg 0 ,rega -0x4299 015692 branch ui_led_on_global -: 015694 mouse4_0_bb_event_discovery_btn: -0x429a 015695 branch mouse_le_clean_connect_flag -: 015697 mouse_bt_hid_handshake: -0x429b 015698 jam app_handshake_done ,mem_app_handshake_flag -0x429c 015699 call app_lpm_mult_enable -0x429d 015700 call app_bt_store_reconn_info -0x429e 015701 setarg 0 -0x429f 015702 store 2 ,mem_discovery_timeout_timer_count -0x42a0 015703 store 1 ,mem_hid_handshake_timer_count -0x42a1 015704 branch app_bt_enter_sniff -: 015706 mouse_check_reconn_target: -0x42a2 015707 call mouse_cheak_select_device_by_switch -0x42a3 015708 fetch 1 ,mem_device_flag -0x42a4 015709 fetcht 1 ,mem_24g_device_number -0x42a5 015710 isub temp ,null -0x42a6 015711 branch mouse_connect_24g_mode ,zero -0x42a7 015712 fetch 1 ,mem_xrecord_mode -0x42a8 015713 beq rec_3_mode ,mouse3_0_check_reconn_target -0x42a9 015714 beq rec_4_mode ,mouse4_0_check_reconn_target -0x42aa 015715 branch mouse_start_discovery -: 015716 mouse_connect_24g_mode: -0x42ab 015717 call mouse_start_24g_mode -0x42ac 015718 rtnmark1 mark_24g -0x42ad 015719 fetch 1 ,mem_reconn_times -0x42ae 015720 nbranch mouse_polling_device ,blank -0x42af 015721 rtn -: 015723 mouse_start_discovery: -0x42b0 015724 bpatch patch1d_3 ,mem_patch1d -0x42b1 015725 fetch 2 ,mem_ui_state_map -0x42b2 015726 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom -0x42b3 015727 fetch mouse_flag_len ,mem_mouse_flag -0x42b4 015728 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom -0x42b5 015729 random pdata -0x42b6 015730 store 1 ,mem_le_lap + 1 -: 015731 mouse_start_discovery_norandom: -0x42b7 015732 call app_lpm_mult_disable -0x42b8 015733 fetch 2 ,mem_discovery_timeout -0x42b9 015734 store 2 ,mem_mouse_discovery_timer -0x42ba 015735 jam 6 ,mem_connection_options -0x42bb 015736 setarg 0 -0x42bc 015737 store 2 ,mem_mouse_no_data_timer -0x42bd 015738 store 2 ,mem_mouse_direct_timer -0x42be 015739 arg mouse_store_eeprom_flag ,queue -0x42bf 015740 call mouse_enable_function_flag -0x42c0 015741 call mouse_bt_discovery_button_down_disable -0x42c1 015742 fetch 1 ,mem_device_option -0x42c2 015743 isolate1 mode_4_mouse ,pdata -0x42c3 015744 call check_51cmd_adv ,true -0x42c4 015745 fetch 1 ,mem_device_option -0x42c5 015746 isolate1 mode_3_mouse ,pdata -0x42c6 015747 call check_51cmd_start_discovery ,true -0x42c7 015748 fetch mouse_flag_len ,mem_mouse_flag -0x42c8 015749 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink -0x42c9 015750 branch mouse_discover_setting_led_gpio -: 015752 mouse_stop_discovery: -0x42ca 015753 bpatch patch1d_4 ,mem_patch1d -0x42cb 015754 fetch 1 ,mem_device_option -0x42cc 015755 isolate1 mode_4_mouse ,pdata -0x42cd 015756 call mouse_stop_le_adv ,true -0x42ce 015757 fetch 1 ,mem_device_option -0x42cf 015758 isolate1 mode_3_mouse ,pdata -0x42d0 015759 call mouse_stop_bt3_discovery ,true -0x42d1 015760 fetch mouse_flag_len ,mem_mouse_flag -0x42d2 015761 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop -0x42d3 015762 branch mouse_devce_led_off -: 015763 mouse_stop_le_adv: -0x42d4 015764 setarg 0 -0x42d5 015765 store 2 ,mem_mouse_direct_timer -0x42d6 015766 branch check_51cmd_stop_adv -: 015767 mouse_stop_bt3_discovery: -0x42d7 015768 setarg 0 -0x42d8 015769 store 2 ,mem_mouse_discovery_timer -0x42d9 015770 branch check_51cmd_stop_discovery -: 015776 mouse_store_remote_bdaddr: -0x42da 015777 fetch mouse_flag_len ,mem_mouse_flag -0x42db 015778 rtnbit0 mouse_store_eeprom_flag -0x42dc 015779 arg mouse_store_eeprom_flag ,queue -0x42dd 015780 call mouse_disable_function_flag -0x42de 015781 call mouse_check_device_addr -: 015782 mouse_unplug_clean_bdaddr: -0x42df 015783 call mouse_before_store_reconn_info -0x42e0 015784 fetch mouse_flag_len ,mem_mouse_flag -0x42e1 015785 bbit1 mouse_enable_flash ,mouse_store_flash_device_info -0x42e2 015786 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info -0x42e3 015787 rtn -: 015788 mouse_store_eeprom_device_info: -0x42e4 015789 arg 88 ,temp -0x42e5 015790 arg mem_device_flag ,rega -0x42e6 015791 arg mouse_info_eeprom_offect ,regb -0x42e7 015792 branch iicd_write_protect_eep_data -: 015794 mouse_check_device_addr: -0x42e8 015795 fetch 1 ,mem_record_bt_mode -0x42e9 015796 beq rec_4_mode ,mouse_check_le_device_addr -0x42ea 015797 beq rec_3_mode ,mouse_check_bt_device_addr -0x42eb 015798 rtn -: 015799 mouse_check_le_device_addr: -0x42ec 015800 store 1 ,mem_device_addr_temp -0x42ed 015801 fetch 6 ,mem_le_plap -0x42ee 015802 branch mouse_check_bt_device_addr_common -: 015803 mouse_check_bt_device_addr: -0x42ef 015804 store 1 ,mem_device_addr_temp -0x42f0 015805 fetch 6 ,mem_plap -: 015806 mouse_check_bt_device_addr_common: -0x42f1 015807 store 6 ,mem_device_addr_temp + 1 -0x42f2 015808 fetch 7 ,mem_device_addr_temp -0x42f3 015809 arg mem_device1_type ,contr -0x42f4 015810 arg 3 ,loopcnt -: 015811 mouse_check_device_addr_end: -0x42f5 015812 ifetcht 7 ,contr -0x42f6 015813 isub temp ,null -0x42f7 015814 branch mouse_clean_addr ,zero -0x42f8 015815 increase 22 ,contr -0x42f9 015816 loop mouse_check_device_addr_end -0x42fa 015817 rtn -: 015818 mouse_before_store_reconn_info: -0x42fb 015819 arg mem_device1_type ,rega -0x42fc 015820 fetch 1 ,mem_device_flag -0x42fd 015821 increase -1 ,pdata -0x42fe 015822 mul32 pdata ,29 ,pdata -0x42ff 015823 iadd rega ,rega -0x4300 015824 fetch 1 ,mem_record_bt_mode -0x4301 015825 istore 1 ,rega -0x4302 015826 beq rec_4_mode ,mouse_store_le_device -0x4303 015827 beq rec_3_mode ,mouse_store_bt_device -0x4304 015828 rtn -: 015830 mouse_store_le_device: -0x4305 015831 fetch 6 ,mem_le_plap -0x4306 015832 istore 6 ,contw -0x4307 015833 arg mem_le_ltk ,contr -0x4308 015834 call memcpy16 -0x4309 015835 fetch 6 ,mem_le_lap -0x430a 015836 istore 6 ,contw -0x430b 015837 rtn -: 015838 mouse_store_bt_device: -0x430c 015839 fetch 6 ,mem_plap -0x430d 015840 istore 6 ,contw -0x430e 015841 arg mem_link_key ,contr -0x430f 015842 branch memcpy16 -: 015844 mouse_clean_addr: -0x4310 015845 increase -6 ,contr -0x4311 015846 copy contr ,contw -0x4312 015847 fetcht 6 ,mem_device_addr_temp + 1 -0x4313 015848 increase 3 ,temp -0x4314 015849 istoret 6 ,contw -0x4315 015850 rtn -: 015854 mouse_eeprom_load_recon_info: -0x4316 015855 arg 88 ,temp -0x4317 015856 arg mem_device_flag ,rega -0x4318 015857 arg mouse_info_eeprom_offect ,regb -0x4319 015858 call iicd_read_eep_data -: 015859 mouse_select_reconn_device: -0x431a 015860 arg mem_device1_type ,rega -0x431b 015861 fetch 1 ,mem_device_flag -0x431c 015862 fetcht 1 ,mem_24g_device_number -0x431d 015863 isub temp ,null -0x431e 015864 rtn zero -0x431f 015865 increase -1 ,pdata -0x4320 015866 mul32 pdata ,29 ,pdata -0x4321 015867 iadd rega ,rega -0x4322 015868 ifetch 1 ,rega -0x4323 015869 store 1 ,mem_xrecord_mode -0x4324 015870 beq rec_3_mode ,mouse_load_bt_device -0x4325 015871 beq rec_4_mode ,mouse_load_le_device -0x4326 015872 rtn -: 015874 mouse_load_bt_device: -0x4327 015875 ifetch 6 ,contr -: 015876 mouse_load_bt_device_end: -0x4328 015877 store 6 ,mem_hci_plap -0x4329 015878 arg mem_link_key ,contw -0x432a 015879 call memcpy16 -0x432b 015880 branch check_link_key_load -: 015882 mouse_load_le_device: -0x432c 015883 ifetch 6 ,contr -: 015884 mouse_load_le_device_end: -0x432d 015885 store 6 ,mem_hci_plap -0x432e 015886 arg mem_le_ltk ,contw -0x432f 015887 call memcpy16 -0x4330 015888 ifetch 6 ,contr -0x4331 015889 store 6 ,mem_le_lap -0x4332 015890 rtn -: 015893 mouse_select_device: -0x4333 015894 fetch 1 ,mem_config_function_enable -0x4334 015895 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button -0x4335 015896 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch -0x4336 015897 branch mouse_select_device_by_combination_key -: 015899 mouse_select_device_by_combination_key: -0x4337 015900 call mouse_check_key_gpio -0x4338 015901 beq mouse_rm_button ,mouse_select_device_commbination_key_down -: 015902 mouse_select_device_commbination_key_up: -0x4339 015903 jam 30 ,mem_combination_select_device_count -0x433a 015904 fetch 1 ,mem_select_device_button_statue -0x433b 015905 rtneq dpi_button_state_up -0x433c 015906 jam dpi_button_state_up ,mem_select_device_button_statue -0x433d 015907 rtn -: 015909 mouse_select_device_commbination_key_down: -0x433e 015910 call mouse_combination_select_device_timer -0x433f 015911 fetch 1 ,mem_select_device_button_statue -0x4340 015912 rtneq dpi_button_state_down -0x4341 015913 jam dpi_button_state_down ,mem_select_device_button_statue -0x4342 015914 branch mouse_select_device_enable -: 015916 mouse_combination_select_device_timer: -0x4343 015917 fetch 1 ,mem_combination_select_device_count -0x4344 015918 rtn blank -0x4345 015919 pincrease -1 -0x4346 015920 store 1 ,mem_combination_select_device_count -0x4347 015921 nrtn blank -0x4348 015922 branch mouse_ready_reconnection_by_button -: 015924 mouse_select_device_by_button: -0x4349 015925 fetch 1 ,mem_config_select_device_button_gpio -0x434a 015926 rtneq gpio_disable -0x434b 015927 fetcht 1 ,mem_config_select_device_button_gpio -0x434c 015928 call gpio_get_bit -0x434d 015929 branch mouse_select_device_button_down ,true -: 015930 mouse_select_device_button_up: -0x434e 015931 fetch 1 ,mem_select_device_button_statue -0x434f 015932 rtneq dpi_button_state_up -0x4350 015933 jam dpi_button_state_up ,mem_select_device_button_statue -0x4351 015934 fetch mouse_flag_len ,mem_mouse_flag -0x4352 015935 rtnbit1 mouse_long_bt_button_flag -0x4353 015936 branch mouse_ready_reconnection_by_button -: 015938 mouse_select_device_button_down: -0x4354 015939 fetch 1 ,mem_select_device_button_statue -0x4355 015940 rtneq dpi_button_state_down -0x4356 015941 jam dpi_button_state_down ,mem_select_device_button_statue -0x4357 015942 arg mouse_long_bt_button_flag ,queue -0x4358 015943 branch mouse_disable_function_flag -: 015947 mouse_select_device_by_switch: -0x4359 015948 fetch 1 ,mouse_flag_len ,mem_mouse_flag -0x435a 015949 rtnbit0 enable_select_device_by_switch -0x435b 015950 fetch 1 ,mem_device_flag -0x435c 015951 beq mode_bt_device1 ,mouse_select1_device -0x435d 015952 beq mode_24g_device ,mouse_select2_device -0x435e 015953 rtn -: 015954 mouse_cheak_select_device_by_switch: -0x435f 015955 fetch 1 ,mouse_flag_len ,mem_mouse_flag -0x4360 015956 rtnbit0 enable_select_device_by_switch -0x4361 015957 fetcht 1 ,mem_config_select_device_button_gpio -0x4362 015958 call gpio_get_bit -0x4363 015959 branch mouse_cheak_select_24gdevice ,true -: 015960 mouse_select_btdevice: -0x4364 015961 jam mode_bt_device1 ,mem_device_flag -0x4365 015962 rtn -: 015963 mouse_cheak_select_24gdevice: -0x4366 015964 fetch 1 ,mem_24g_device_number -0x4367 015965 store 1 ,mem_device_flag -0x4368 015966 rtn -: 015967 mouse_select1_device: -0x4369 015968 fetcht 1 ,mem_config_select_device_button_gpio -0x436a 015969 nbranch mouse_ready_reconnection_by_button ,true -0x436b 015970 rtn -: 015971 mouse_select2_device: -0x436c 015972 fetcht 1 ,mem_config_select_device_button_gpio -0x436d 015973 call gpio_get_bit -0x436e 015974 branch mouse_select_device_button_down ,true -0x436f 015975 rtn -: 015980 mouse_ready_reconnection_by_button: -0x4370 015981 fetcht 1 ,mem_device_flag -0x4371 015982 increase 1 ,temp -0x4372 015983 fetch 1 ,mem_device_number -0x4373 015984 isub temp ,null -0x4374 015985 ncall mouse_select_device_count_clean ,positive -0x4375 015986 storet 1 ,mem_device_flag -0x4376 015987 jam 0 ,mem_link_key_exists -0x4377 015988 call mouse_store_device_number2eeprom -0x4378 015989 call mouse_select_device_enable -0x4379 015991 branch mouse_set_reconnection -: 015993 mouse_store_device_number2eeprom: -0x437a 015994 arg 1 ,temp -0x437b 015995 arg mem_device_flag ,rega -0x437c 015996 arg 0 ,regb -0x437d 015997 branch iicd_write_eep_data -: 015999 mouse_set_reconnection: -0x437e 016000 call mouse_stop_bluetooth_mode -0x437f 016001 call mouse_select_device_disable -0x4380 016002 branch mouse_soft_reset -: 016003 mouse_stop_bluetooth_mode: -0x4381 016004 fetch 2 ,mem_ui_state_map -0x4382 016005 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect -0x4383 016006 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x4384 016007 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x4385 016008 branch mouse_stop_discovery -: 016010 mouse_disconnect: -0x4386 016011 bpatch patch1d_5 ,mem_patch1d -0x4387 016012 setarg 0 -0x4388 016013 store 2 ,mem_mouse_no_data_timer -0x4389 016014 fetch 2 ,mem_ui_state_map -0x438a 016015 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x438b 016016 fetch 2 ,mem_ui_state_map -0x438c 016017 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x438d 016018 rtn -: 016020 mouse_irtual_cable_unplug: -0x438e 016021 setarg 0x01 -0x438f 016022 store 6 ,mem_plap -0x4390 016023 jam rec_3_mode ,mem_record_bt_mode -0x4391 016024 branch mouse_unplug_clean_bdaddr -: 016027 mouse_cancel_reconnect: -0x4392 016028 call mouse_bt_cannel_reconn_enable -0x4393 016029 branch check_51cmd_bb_reconn_cancel -: 016031 mouse_bt_discovery_by_button: -0x4394 016032 fetch 1 ,mem_config_bt_button_gpio -0x4395 016033 rtneq gpio_disable -0x4396 016034 fetcht 1 ,mem_config_bt_button_gpio -0x4397 016035 call gpio_get_bit -0x4398 016036 branch mouse_bt_discovery_button_down ,true -: 016037 mouse_bt_discovery_button_up: -0x4399 016038 fetch 1 ,mem_ui_button_timeout -0x439a 016039 store 1 ,mem_combination_ui_button_count -0x439b 016040 fetch 1 ,mem_bt_discovey_button_statue -0x439c 016041 rtneq dpi_button_state_up -0x439d 016042 jam dpi_button_state_up ,mem_bt_discovey_button_statue -0x439e 016043 branch mouse_bt_discovery_button_down_disable -: 016044 mouse_bt_discovery_button_down: -0x439f 016045 call mouse_bt_discovry_timer -0x43a0 016046 fetch 1 ,mem_bt_discovey_button_statue -0x43a1 016047 rtneq dpi_button_state_down -0x43a2 016048 jam dpi_button_state_down ,mem_bt_discovey_button_statue -0x43a3 016049 call check_51cmd_bb_reconn_cancel -0x43a4 016050 branch mouse_bt_discovery_button_down_enable -: 016053 mouse_bt_discovery_cheak: -0x43a5 016054 fetch 1 ,mem_config_function_enable -0x43a6 016055 bbit1 enable_bt_button ,mouse_bt_discovery_by_button -: 016056 mouse_bt_discovery_commbination_key: -0x43a7 016057 call mouse_check_key_gpio -0x43a8 016058 beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down -: 016059 mouse_bt_discovery_commbination_key_up: -0x43a9 016060 fetch 1 ,mem_ui_button_timeout -0x43aa 016061 store 1 ,mem_combination_ui_button_count -0x43ab 016062 fetch 1 ,mem_bt_discovey_button_statue -0x43ac 016063 rtneq dpi_button_state_up -0x43ad 016064 jam dpi_button_state_up ,mem_bt_discovey_button_statue -0x43ae 016065 branch mouse_bt_discovery_button_down_disable -: 016068 mouse_bt_discovery_commbination_key_down: -0x43af 016069 call mouse_bt_discovry_timer -0x43b0 016070 fetch 1 ,mem_bt_discovey_button_statue -0x43b1 016071 rtneq dpi_button_state_down -0x43b2 016072 jam dpi_button_state_down ,mem_bt_discovey_button_statue -0x43b3 016073 call check_51cmd_bb_reconn_cancel -0x43b4 016074 branch mouse_bt_discovery_button_down_enable -: 016076 mouse_bt_discovry_timer: -0x43b5 016077 arg mem_combination_ui_button_count ,regc -0x43b6 016078 arg mouse_long_button_bt_discovry ,regb -0x43b7 016079 branch timer_single_step -: 016081 mouse_long_button_bt_discovry: -0x43b8 016082 arg mouse_long_bt_button_flag ,queue -0x43b9 016083 call mouse_enable_function_flag -0x43ba 016084 call app_evt_button_long_pressed -0x43bb 016085 branch mouse_bb_event_discovery_btn -: 016088 mouse_cpi_enable: -0x43bc 016089 arg mouse_cpi_flag ,queue -0x43bd 016090 branch mouse_enable_function_flag -: 016091 mouse_cpi_disable: -0x43be 016092 arg mouse_cpi_flag ,queue -0x43bf 016093 branch mouse_disable_function_flag -: 016094 mouse_select_device_enable: -0x43c0 016095 arg mouse_select_device_flag ,queue -0x43c1 016096 branch mouse_enable_function_flag -: 016097 mouse_select_device_disable: -0x43c2 016098 arg mouse_select_device_flag ,queue -0x43c3 016099 branch mouse_disable_function_flag -: 016100 mouse_bt_cannel_reconn_enable: -0x43c4 016101 arg mouse_bt_cannel_reconn_flag ,queue -0x43c5 016102 branch mouse_enable_function_flag -: 016103 mouse_bt_cannel_reconn_disable: -0x43c6 016104 arg mouse_bt_cannel_reconn_flag ,queue -0x43c7 016105 branch mouse_disable_function_flag -: 016106 mouse_bt_discovery_button_down_enable: -0x43c8 016107 arg mouse_bt_discovery_button_down_flag ,queue -0x43c9 016108 branch mouse_enable_function_flag -: 016109 mouse_bt_discovery_button_down_disable: -0x43ca 016110 arg mouse_bt_discovery_button_down_flag ,queue -0x43cb 016111 branch mouse_disable_function_flag -: 016115 mouse_select_device_count_clean: -0x43cc 016116 arg 1 ,temp -0x43cd 016117 rtn -: 016119 mouse_enable_function_flag: -0x43ce 016120 fetch mouse_flag_len ,mem_mouse_flag -0x43cf 016121 qset1 pdata -0x43d0 016122 store mouse_flag_len ,mem_mouse_flag -0x43d1 016123 rtn -: 016125 mouse_disable_function_flag: -0x43d2 016126 fetch mouse_flag_len ,mem_mouse_flag -0x43d3 016127 qset0 pdata -0x43d4 016128 store mouse_flag_len ,mem_mouse_flag -0x43d5 016129 rtn -: 016131 mouse_adc_read: -0x43d6 016132 fetch mouse_flag_len ,mem_mouse_flag -0x43d7 016133 rtnbit0 mouse_enable_adc -0x43d8 016134 fetch 1 ,mem_adc_read_timer -0x43d9 016135 increase 1 ,pdata -0x43da 016136 store 1 ,mem_adc_read_timer -0x43db 016137 sub pdata ,10 ,null -0x43dc 016138 rtn positive -0x43dd 016139 jam 0 ,mem_adc_read_timer -0x43de 016140 call adc_set_mode -0x43df 016141 call vdd_calculate_by_mode -0x43e0 016142 store 2 ,mem_mouse_vdd_now_vol -0x43e1 016143 arg mem_mouse_vdd_calculate_set ,rega -0x43e2 016144 call adc_bat_percent_lowpower_out -0x43e3 016145 fetch 1 ,mem_adc_power_flag -0x43e4 016146 bbit1 1 ,mouse_power_down -0x43e5 016147 bbit0 0 ,mouse_adc_no_low_voltage -0x43e6 016148 branch mouse_adc_low_voltage -: 016149 mouse_adc_low_voltage: -0x43e7 016150 arg mouse_low_voltage_flag ,queue -0x43e8 016151 branch mouse_enable_function_flag -: 016152 mouse_adc_no_low_voltage: -0x43e9 016153 arg mouse_low_voltage_flag ,queue -0x43ea 016154 branch mouse_disable_function_flag -: 016156 mouse_low_voltage_led_timer: -0x43eb 016157 fetch mouse_flag_len ,mem_mouse_flag -0x43ec 016158 rtnbit0 mouse_low_voltage_flag -0x43ed 016159 fetch 1 ,mem_config_low_voltage_alarm_gpio -0x43ee 016160 store 1 ,mem_mouse_struct_led_gpio -0x43ef 016161 fetch 1 ,mem_adc_low_volatage_led_timer_count -0x43f0 016162 pincrease 1 -0x43f1 016163 store 1 ,mem_adc_low_volatage_led_timer_count -0x43f2 016164 sub pdata ,20 ,null -0x43f3 016165 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive -0x43f4 016166 beq 2 ,mouse_low_voltage_led_on -0x43f5 016167 beq 4 ,mouse_low_voltage_led_off -0x43f6 016168 beq 6 ,mouse_low_voltage_led_on -0x43f7 016169 beq 8 ,mouse_low_voltage_led_off -0x43f8 016170 rtn -: 016171 mouse_adc_low_volatage_led_timer_count_clean: -0x43f9 016172 jam 1 ,mem_adc_low_volatage_led_timer_count -0x43fa 016173 branch mouse_low_voltage_led_off -: 016174 mouse_low_voltage_led_on: -0x43fb 016175 arg 0 ,rega -0x43fc 016176 jam ui_led_state_lighting ,mem_mouse_led_type -0x43fd 016177 branch ui_led_on_global -: 016178 mouse_low_voltage_led_off: -0x43fe 016179 arg 0 ,rega -0x43ff 016180 jam ui_led_state_lighting ,mem_mouse_led_type -0x4400 016181 branch ui_led_off_global -: 016183 mouse_g24_package_data: -0x4401 016184 call mouse_motion -0x4402 016185 nrtn user -0x4403 016186 arg 7 ,rega -0x4404 016187 arg mem_mouse_key ,regb -0x4405 016188 rtn -: 016190 mouse_g24_enter_lpm: -0x4406 016191 fetch 1 ,mem_mouse_24g_enter_lpm_enable -0x4407 016192 rtn blank -0x4408 016194 fetcht 1 ,mem_dpi_button_gpio -0x4409 016195 call gpio_get_bit -0x440a 016196 call mouse_24g_dpi_delay_init ,true -0x440b 016197 fetch 1 ,mem_24g_enter_lpm_timer -0x440c 016198 nrtn blank -0x440d 016199 call mouse_check_key_gpio -0x440e 016200 nrtn blank -0x440f 016201 branch g24_lpm_long_sleep -: 016203 mouse_24g_dpi_delay_init: -0x4410 016204 fetch 1 ,mem_dpi_button_gpio -0x4411 016205 rtneq ui_button_gpio_disable -0x4412 016206 jam 10 ,mem_24g_enter_lpm_timer -0x4413 016207 rtn -: 016210 mouse_load_flash_info_cheak: -0x4414 016211 call mouse_load_flash_flag -0x4415 016212 fetch 2 ,mem_store_flag -0x4416 016213 arg eeprom_init_flag ,temp -0x4417 016214 isub temp ,null -0x4418 016215 branch mouse_load_flash_device_info ,zero -0x4419 016216 storet 2 ,mem_store_flag -0x441a 016217 call mouse_ble_init_address -0x441b 016218 branch mouse_store_flash_device_info -: 016219 mouse_ble_init_address: -0x441c 016220 fetch 6 ,mem_le_lap -0x441d 016221 store 6 ,mem_device1_locall_addr -0x441e 016222 add pdata ,0x0100 ,pdata -0x441f 016223 store 6 ,mem_device2_locall_addr -0x4420 016224 add pdata ,0x0100 ,pdata -0x4421 016225 store 6 ,mem_device3_locall_addr -0x4422 016226 rtn -: 016229 mouse_load_flash_flag: -0x4423 016230 setarg mem_store_flag -0x4424 016231 arg mem_mouse_information_start ,temp -0x4425 016232 isub temp ,temp -0x4426 016233 fetch 3 ,mem_flash_base -0x4427 016234 iadd temp ,pdata -0x4428 016235 arg 2 ,temp -0x4429 016236 arg mem_store_flag ,rega -0x442a 016237 branch spid_read_flash -: 016240 mouse_load_flash_device_info: -0x442b 016241 setarg mem_mouse_information_end -0x442c 016242 arg mem_mouse_information_start ,temp -0x442d 016243 isub temp ,temp -0x442e 016244 fetch 3 ,mem_flash_base -0x442f 016245 arg mem_mouse_information_start ,rega -0x4430 016246 call spid_read_flash -0x4431 016247 call mouse_select_reconn_device -0x4432 016248 fetch 4 ,mem_mouse_24g_addr -0x4433 016249 call g24_head_ptr2regc -0x4434 016250 branch g24_store_mem_addr -: 016252 mouse_store_flash_device_info: -0x4435 016253 setarg mem_mouse_information_end -0x4436 016254 arg mem_mouse_information_start ,temp -0x4437 016255 isub temp ,temp -0x4438 016256 arg mem_mouse_information_start ,rega -0x4439 016257 fetch 3 ,mem_flash_base -0x443a 016258 branch flash_write -: 016260 mouse_store_eerpom_dpi: -0x443b 016261 arg 1 ,temp -0x443c 016262 arg mem_mouse_dpi ,rega -0x443d 016263 arg mouse_dpi_eeprom_offect ,regb -0x443e 016264 branch iicd_write_protect_eep_data -: 016266 mouse_load_eeprom_dpi: -0x443f 016267 arg 1 ,temp -0x4440 016268 arg mem_mouse_dpi ,rega -0x4441 016269 arg mouse_dpi_eeprom_offect ,regb -0x4442 016270 branch iicd_read_eep_data -: 016272 mouse_statue_cheak_timer: -0x4443 016273 rtnmark1 mark_24g -0x4444 016274 fetch mouse_flag_len ,mem_mouse_flag -0x4445 016275 rtnbit0 mouse_enable_statue_up -0x4446 016276 fetch 1 ,mem_mouse_1step_up_count -0x4447 016277 pincrease 1 -0x4448 016278 and pdata ,0x07 ,pdata -0x4449 016279 store 1 ,mem_mouse_1step_up_count -0x444a 016280 rtnne 0x07 -0x444b 016281 fetch 2 ,mem_ui_state_map -0x444c 016282 bbit1 ui_state_bt_connected ,mouse_check_statue_up -0x444d 016283 bbit1 ui_state_ble_connected ,mouse_check_statue_up -0x444e 016284 rtn -: 016289 mouse_check_statue_up: -0x444f 016290 bpatch patch1d_6 ,mem_patch1d -0x4450 016291 fetch 1 ,mem_mouse_2step_up_count -0x4451 016292 nrtn blank -0x4452 016293 fetch mouse_flag_len ,mem_mouse_flag -0x4453 016294 rtnbit0 mouse_statue_up_flag -0x4454 016295 fetch 1 ,mem_sensor_squal_reg -0x4455 016296 call sensor_read -0x4456 016297 store 1 ,mem_sensor_iqc -0x4457 016298 sub pdata ,0x10 ,null -0x4458 016299 branch mouse_statue_up_timer_init ,positive -0x4459 016300 jam 0 ,mem_mouse_2step_up_count -0x445a 016301 rtn -: 016303 mouse_statue_up_timer_init: -0x445b 016304 jam 30 ,mem_mouse_2step_up_count -0x445c 016305 rtn -: 016306 mouse_statue_up_timer: -0x445d 016307 arg mem_mouse_2step_up_count ,regc -0x445e 016308 arg mouse_statue_up ,regb -0x445f 016309 branch timer_single_step -: 016311 mouse_statue_up: -0x4460 016312 fetch 1 ,mem_sensor_squal_reg -0x4461 016313 call twspi_read -0x4462 016314 sub pdata ,0x10 ,null -0x4463 016315 nrtn positive -0x4464 016316 fetch mouse_flag_len ,mem_mouse_flag -0x4465 016317 rtnbit0 mouse_statue_up_flag -0x4466 016318 arg mouse_statue_up_flag ,queue -0x4467 016319 call mouse_disable_function_flag -0x4468 016320 jam 0 ,mem_lpm_mult -0x4469 016321 jam 30 ,mem_mouse_statue_led_timer -0x446a 016322 call mouse_devce_led_off -0x446b 016323 fetch mouse_flag_len ,mem_mouse_flag -0x446c 016324 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up -: 016325 mouse_two_device_statue_up: -0x446d 016326 fetch 1 ,mem_device_flag -0x446e 016327 beq mode_bt_device1 ,mouse_device1_led_on -0x446f 016328 beq mode_bt_device2 ,mouse_device_blink_led_init -0x4470 016329 rtn -: 016330 mouse_three_device_statue_up: -0x4471 016331 fetch 1 ,mem_device_flag -0x4472 016332 beq mode_bt_device1 ,mouse_device1_led_on -0x4473 016333 beq mode_bt_device2 ,mouse_device2_led_on -0x4474 016334 beq mode_bt_device3 ,mouse_device3_led_on -0x4475 016335 rtn -: 016337 mouse_device_blink_led_init: -0x4476 016338 fetch 1 ,mem_config_device1_led_gpio -0x4477 016339 branch mouse_led_blink -: 016343 mouse_statue_led_off: -0x4478 016344 jam 0x20 ,mem_lpm_mult -0x4479 016345 branch mouse_devce_led_off -: 016349 mouse_devce1_led_off: -0x447a 016350 fetch 1 ,mem_config_device1_led_gpio -0x447b 016351 rtneq gpio_disable -0x447c 016352 store 1 ,mem_mouse_struct_led_gpio -0x447d 016353 branch mouse_led_off -: 016355 mouse_devce2_led_off: -0x447e 016356 fetch 1 ,mem_config_device2_led_gpio -0x447f 016357 rtneq gpio_disable -0x4480 016358 store 1 ,mem_mouse_struct_led_gpio -0x4481 016359 branch mouse_led_off -: 016361 mouse_devce_led_off: -0x4482 016362 call mouse_led_off -0x4483 016363 call mouse_devce1_led_off -0x4484 016364 call mouse_devce2_led_off -: 016365 mouse_devce3_led_off: -0x4485 016366 fetch 1 ,mem_config_device3_led_gpio -0x4486 016367 rtneq gpio_disable -0x4487 016368 store 1 ,mem_mouse_struct_led_gpio -0x4488 016369 branch mouse_led_off -: 016371 mouse_device1_led_on: -0x4489 016372 fetch 1 ,mem_config_device1_led_gpio -0x448a 016373 store 1 ,mem_mouse_struct_led_gpio -0x448b 016374 branch mouse_led_on -: 016375 mouse_device2_led_on: -0x448c 016376 fetch 1 ,mem_config_device2_led_gpio -0x448d 016377 store 1 ,mem_mouse_struct_led_gpio -0x448e 016378 branch mouse_led_on -: 016379 mouse_device3_led_on: -0x448f 016380 fetch 1 ,mem_config_device3_led_gpio -0x4490 016381 store 1 ,mem_mouse_struct_led_gpio -0x4491 016382 branch mouse_led_on -: 016386 mouse_polling_device: -0x4492 016387 bpatch patch1d_7 ,mem_patch1d -0x4493 016388 fetch 1 ,mem_reconn_times -0x4494 016389 increase -1 ,pdata -0x4495 016390 store 1 ,mem_reconn_times -0x4496 016391 fetcht 1 ,mem_device_flag -0x4497 016392 increase 1 ,temp -0x4498 016393 fetch 1 ,mem_device_number -0x4499 016394 isub temp ,null -0x449a 016395 ncall mouse_select_device_count_clean ,positive -0x449b 016396 storet 1 ,mem_device_flag -0x449c 016397 jam 0 ,mem_link_key_exists -0x449d 016398 call mouse_store_device_number2eeprom -0x449e 016399 call mouse_before_store_reconn_info -0x449f 016400 branch mouse_check_reconn_target -: 016402 mouse_power_down: -0x44a0 016403 call mouse_devce_led_off -0x44a1 016404 setarg 0 -0x44a2 016405 store 8 ,mem_gpio_wakeup_low -0x44a3 016406 branch lpm_hibernate -: 016417 remote_car_init: -0x44a4 016418 rtn wake -0x44a5 016419 hfetch 1 ,core_gpio_sel1 -0x44a6 016420 and_into 0xf0 ,pdata -0x44a7 016421 hstore 1 ,core_gpio_sel1 -0x44a8 016422 call keyscan_key_init -0x44a9 016423 setarg remote_car_le_before_hibernate -0x44aa 016424 store 2 ,mem_cb_before_hibernate -0x44ab 016426 setarg remote_car_process_lpm_before -0x44ac 016427 store 2 ,mem_cb_before_lpm -0x44ad 016429 setarg remote_car_scale_process_idle -0x44ae 016430 store 2 ,mem_cb_idle_process -0x44af 016432 setarg remote_car_scale_process_bb_event -0x44b0 016433 store 2 ,mem_cb_bb_event_process -0x44b1 016435 setarg app_get_lpm_wake_lock -0x44b2 016436 store 2 ,mem_cb_check_wakelock -0x44b3 016438 call g24_head_ptr2regc -0x44b4 016439 setarg remote_car_g24_package_data -0x44b5 016440 add regc ,offset_24g_cb_data ,contw -0x44b6 016441 istore 2 ,contw -0x44b7 016443 setarg remote_car_g24_enter_lpm -0x44b8 016444 add regc ,offset_24g_cb_lpm_prepare ,contw -0x44b9 016445 istore 2 ,contw -0x44ba 016447 setarg remote_car_process_lpm_before -0x44bb 016448 add regc ,offset_24g_cb_lpm_before ,contw -0x44bc 016449 istore 2 ,contw -0x44bd 016451 setarg remote_car_event_timer -0x44be 016452 store 2 ,mem_cb_event_timer -0x44bf 016454 setarg remote_car_power_off_signal -0x44c0 016455 store 2 ,mem_remote_car_power_off_cb -0x44c1 016457 setarg remote_car_soft_switch_power_on_signal -0x44c2 016458 store 2 ,mem_remote_car_power_standby_cb -0x44c3 016460 setarg remote_car_send_key_data -0x44c4 016461 store 2 ,mem_cb_remote_car_keyscan -0x44c5 016463 bpatch patch1e_0 ,mem_patch1e -0x44c6 016464 call remote_car_init_environment -0x44c7 016465 call queue_init -0x44c8 016466 jam 2 ,mem_lpm_mult -0x44c9 016467 fetch 1 ,mem_remote_car_config_soft_switch_enable -0x44ca 016468 store 1 ,mem_remote_car_hard_soft_switch -0x44cb 016469 beq hard_switch ,remote_car_hard_switch_power_on_signal -0x44cc 016470 fetch 1 ,mem_remote_car_config_soft_switch_gpio -0x44cd 016471 store 1 ,mem_ui_button_gpio -: 016472 remote_car_soft_switch_power_on_init: -0x44ce 016473 call remote_car_ui_led_init -0x44cf 016474 call ui_button_init -0x44d0 016475 call ui_button_polling -0x44d1 016476 jam power_starting ,mem_remote_car_power_state -0x44d2 016477 fetch 2 ,mem_ui_state_map -0x44d3 016478 rtnbit1 ui_state_btn_down -0x44d4 016479 branch app_enter_hibernate -: 016483 remote_car_hard_switch_power_on_signal: -0x44d5 016484 jam power_standby ,mem_remote_car_power_state -: 016485 remote_car_soft_switch_power_on_signal: -0x44d6 016486 call remote_car_ui_led_init -0x44d7 016488 arg 0 ,rega -0x44d8 016489 call ui_led_blink_start_global -: 016490 remote_car_connect_24g_mode: -0x44d9 016491 branch g24_auto_pair_start -: 016493 remote_car_power_off_signal: -0x44da 016494 branch remote_car_ui_led_init -: 016496 remote_car_ui_led_init: -0x44db 016497 bpatch patch1e_1 ,mem_patch1e -0x44dc 016498 fetch 1 ,mem_remote_car_config_connect_led_gpio -0x44dd 016499 bne invalid_pin_num ,remote_car_pairing_led_gpio_set -: 016500 remote_car_ui_led_init_1: -0x44de 016501 fetcht 1 ,mem_remote_car_led_map -0x44df 016502 branch gpio_config_output -: 016503 remote_car_pairing_led_gpio_set: -0x44e0 016504 store 1 ,mem_remote_car_led_map -0x44e1 016505 branch remote_car_ui_led_init_1 -: 016508 remote_car_init_environment: -0x44e2 016509 call g24_set_device_addr -0x44e3 016510 fetch 2 ,mem_remote_car_no_data_timeout -0x44e4 016511 store 2 ,mem_remote_car_no_data_timer -0x44e5 016512 branch remote_car_get_adc_default_data -: 016514 remote_car_le_before_hibernate: -: 016519 remote_car_in_enter_hibernate: -0x44e6 016520 call gpio_set_before_lpm_common -0x44e7 016521 call remote_car_process_lpm_before -0x44e8 016522 branch app_enter_hibernate -: 016524 remote_car_process_lpm_before: -0x44e9 016525 branch keyscan_process_lpm_before -: 016527 remote_car_g24_enter_lpm: -0x44ea 016528 fetch 1 ,mem_remote_car_24g_enter_lpm_enable -0x44eb 016529 rtn blank -0x44ec 016531 branch g24_lpm_long_sleep -: 016533 remote_car_process_auto_pair_exit: -0x44ed 016534 rtn -: 016536 remote_car_key_scan_process: -0x44ee 016537 branch keyscan_key_process -: 016539 remote_car_scale_process_idle: -0x44ef 016540 call remote_car_rocker_process -0x44f0 016541 call remote_car_24g_status_process -0x44f1 016542 branch remote_car_key_scan_process -: 016544 remote_car_scale_process_bb_event: -0x44f2 016545 copy regc ,pdata -0x44f3 016546 beq bt_evt_button_up ,app_event_button_up -0x44f4 016547 beq bt_evt_button_long_pressed ,app_button_long_pressed -0x44f5 016548 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete -0x44f6 016549 beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success -0x44f7 016550 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail -0x44f8 016551 rtn -: 016553 remote_car_24g_attempt_fail: -0x44f9 016554 jam 1 ,mem_remote_car_24g_enter_lpm_enable -0x44fa 016555 rtn -: 016557 remote_car_24g_pairing_complete: -0x44fb 016558 jam 1 ,mem_remote_car_24g_enter_lpm_enable -0x44fc 016559 jam work_paired ,mem_remote_car_24g_auto_work_step -0x44fd 016560 jam work_paired ,mem_remote_car_24g_pair_success_flag -0x44fe 016561 rtn -: 016563 remote_car_24g_attempt_success: -0x44ff 016564 jam 1 ,mem_remote_car_24g_enter_lpm_enable -0x4500 016565 jam work_paired ,mem_remote_car_24g_auto_work_step -0x4501 016566 jam work_paired ,mem_remote_car_24g_pair_success_flag -0x4502 016567 rtn -: 016569 remote_car_24g_status_process: -0x4503 016570 fetch 1 ,mem_remote_car_24g_auto_work_step -0x4504 016571 rtneq power_on -0x4505 016572 fetch 1 ,mem_remote_car_24g_status -0x4506 016573 rtneq work_paired -0x4507 016574 jam work_paired ,mem_remote_car_24g_status -: 016575 remote_car_scale_process_paired: -0x4508 016576 arg 0 ,rega -0x4509 016577 branch ui_led_off_global -: 016578 remote_car_scale_process_shutdown: -0x450a 016579 arg 0 ,rega -0x450b 016580 call ui_led_off_global -0x450c 016581 call remote_car_ui_led_init -0x450d 016582 branch app_enter_hibernate -: 016584 remote_car_event_timer: -0x450e 016585 call app_power_timer -0x450f 016586 branch remote_car_no_data_timer -: 016588 remote_car_no_data_timer: -0x4510 016589 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable -0x4511 016590 rtn blank -0x4512 016591 arg mem_remote_car_no_data_timer ,regc -0x4513 016592 arg remote_car_scale_process_shutdown ,regb -0x4514 016593 branch timer_single_step_2b -: 016596 remote_car_get_adc_default_data: -0x4515 016597 call remote_car_rocker_get_x -0x4516 016598 storet 2 ,mem_current_vdd_value_default_mid_x -0x4517 016599 call remote_car_rocker_get_y -0x4518 016600 storet 2 ,mem_current_vdd_value_default_mid_y -0x4519 016601 rtn -: 016602 remote_car_rocker_data_get: -: 016603 remote_car_rocker_get_x: -0x451a 016604 fetch 2 ,mem_current_vdd_value_default_mid_x -0x451b 016605 store 2 ,mem_current_vdd_value_default_mid_temp -0x451c 016606 call remote_car_get_adc_from_gpio6 -0x451d 016607 call remote_car_rocker_get_value -0x451e 016608 store 1 ,mem_rocker_status -: 016609 remote_car_rocker_get_y: -0x451f 016610 fetch 2 ,mem_current_vdd_value_default_mid_y -0x4520 016611 store 2 ,mem_current_vdd_value_default_mid_temp -0x4521 016612 call remote_car_get_adc_from_gpio7 -0x4522 016613 call remote_car_rocker_get_value -0x4523 016614 store 1 ,mem_rocker_status + 1 -0x4524 016615 rtn -: 016616 remote_car_rocker_get_value: -0x4525 016617 fetch 2 ,mem_current_vdd_default_range -0x4526 016618 copy pdata ,rega -0x4527 016619 fetch 2 ,mem_current_vdd_value_default_mid_temp -0x4528 016620 call remote_car_rocker_mid_value_adjust -0x4529 016621 fetch 1 ,mem_rocker_work_status -0x452a 016622 nbranch remote_car_rocker_translate_key ,blank -0x452b 016623 nrtn positive -0x452c 016624 fetcht 2 ,mem_current_vdd_value_default_mid_temp -0x452d 016625 rtn -: 016626 remote_car_rocker_mid_value_adjust: -0x452e 016627 isub temp ,pdata -0x452f 016628 branch remote_car_rocker_mid_adjust_positive ,positive -0x4530 016629 sub pdata ,0 ,pdata -0x4531 016630 jam 1 ,mem_rocker_negative_flag -0x4532 016631 isub rega ,null -0x4533 016632 rtn -: 016633 remote_car_rocker_mid_adjust_positive: -0x4534 016634 jam 0 ,mem_rocker_negative_flag -0x4535 016635 isub rega ,null -0x4536 016636 rtn -: 016637 remote_car_rocker_translate_key: -0x4537 016638 nbranch remote_car_rocker_middle_key ,positive -0x4538 016639 fetch 1 ,mem_rocker_negative_flag -0x4539 016640 nbranch remote_car_rocker_negative_key ,blank -: 016641 remote_car_rocker_positive_key: -0x453a 016642 setarg rocker_positive_key -0x453b 016643 rtn -: 016644 remote_car_rocker_negative_key: -0x453c 016645 setarg rocker_negative_key -0x453d 016646 rtn -: 016647 remote_car_rocker_middle_key: -0x453e 016648 setarg rocker_middle_key -0x453f 016649 rtn -: 016650 remote_car_get_adc_from_gpio6: -0x4540 016651 jam 0x33 ,mem_adc_channel -0x4541 016652 branch adc_set_mode -: 016653 remote_car_get_adc_from_gpio7: -0x4542 016654 jam 0x34 ,mem_adc_channel -0x4543 016655 branch adc_set_mode -: 016658 remote_car_rocker_process: -0x4544 016659 fetch 1 ,mem_remote_car_config_check_way -0x4545 016660 rtnne car_remote_check_rocker -: 016661 remote_car_read_rocker_check_start: -0x4546 016662 bpatch patch1e_2 ,mem_patch1e -0x4547 016663 jam 1 ,mem_rocker_work_status -0x4548 016664 call remote_car_rocker_data_get -0x4549 016665 fetch 2 ,mem_rocker_status -0x454a 016666 fetcht 2 ,mem_rocker_last_status -0x454b 016667 isub temp ,null -0x454c 016668 rtn zero -0x454d 016669 store 2 ,mem_rocker_last_status -0x454e 016670 call remote_car_rocker_x_to_key -0x454f 016671 branch remote_car_rocker_y_to_key -: 016673 remote_car_rocker_x_to_key: -0x4550 016674 fetch 1 ,mem_rocker_x_status -0x4551 016675 branch rocker_to_queue_set_0 ,blank -0x4552 016676 increase -1 ,pdata -0x4553 016677 branch remote_car_rocker_to_key -: 016678 remote_car_rocker_y_to_key: -0x4554 016679 fetch 1 ,mem_rocker_y_status -0x4555 016680 branch rocker_to_queue_set_2 ,blank -0x4556 016681 increase 1 ,pdata -: 016682 remote_car_rocker_to_key: -0x4557 016683 copy pdata ,queue -0x4558 016684 arg 1 ,rega -0x4559 016685 branch remote_car_send_key_data -: 016687 rocker_to_queue_set_0: -0x455a 016688 arg 0 ,queue -0x455b 016689 arg 0 ,rega -0x455c 016690 branch remote_car_send_key_data -: 016691 rocker_to_queue_set_2: -0x455d 016692 arg 2 ,queue -0x455e 016693 arg 0 ,rega -0x455f 016694 branch remote_car_send_key_data -: 016696 remote_car_send_key_data: -0x4560 016697 copy rega ,pdata -0x4561 016698 store 1 ,mem_remote_key_status -0x4562 016699 fetch 1 ,mem_remote_car_24g_auto_work_step -0x4563 016700 beq power_on ,g24_auto_pair_start -0x4564 016701 fetch 2 ,mem_remote_car_no_data_timeout -0x4565 016702 store 2 ,mem_remote_car_no_data_timer -0x4566 016703 fetch 1 ,mem_remote_key_status -0x4567 016704 branch remote_car_key_is_release ,blank -: 016705 remote_car_key_is_press: -0x4568 016706 bpatch patch1e_3 ,mem_patch1e -0x4569 016707 arg 0 ,rega -0x456a 016708 call ui_led_on_global -: 016709 remote_car_attack_key_press: -0x456b 016710 copy queue ,pdata -0x456c 016711 beq 4 ,remote_car_send_attack_key4_press -0x456d 016712 beq 5 ,remote_car_send_attack_key5_press -0x456e 016713 beq 6 ,remote_car_send_fire_key6_press -: 016716 remote_car_motor_key_press: -0x456f 016717 call remote_car_device_layout_select -0x4570 016718 beq control_f_b_ten ,remote_car_single_motor_key_is_press -0x4571 016719 beq control_l_r_ten ,remote_car_double_motor_key_press -0x4572 016720 beq control_l_r_lr ,remote_car_single_motor_key_is_press -0x4573 016721 rtn -: 016723 remote_car_single_motor_key_is_press: -0x4574 016724 copy queue ,pdata -0x4575 016725 beq 0 ,remote_car_send_motor1_key0_press -0x4576 016726 beq 1 ,remote_car_send_motor1_key1_press -0x4577 016727 beq 2 ,remote_car_send_motor2_key2_press -0x4578 016728 beq 3 ,remote_car_send_motor2_key3_press -0x4579 016729 rtn -: 016731 remote_car_double_motor_key_press: -0x457a 016732 copy queue ,pdata -0x457b 016733 beq 0 ,remote_car_send_double_motor_key0_press -0x457c 016734 beq 1 ,remote_car_send_double_motor_key1_press -0x457d 016735 beq 2 ,remote_car_send_double_motor_key2_press -0x457e 016736 beq 3 ,remote_car_send_double_motor_key3_press -0x457f 016737 rtn -: 016739 remote_car_key_is_release: -0x4580 016740 bpatch patch1e_4 ,mem_patch1e -0x4581 016741 arg 0 ,rega -0x4582 016742 call ui_led_off_global -: 016743 remote_car_attack_key_release: -0x4583 016744 copy queue ,pdata -0x4584 016745 beq 4 ,remote_car_send_attack_key4_rel -0x4585 016746 beq 5 ,remote_car_send_attack_key5_rel -: 016749 remote_car_motor_key_release: -0x4586 016750 call remote_car_device_layout_select -0x4587 016751 beq control_f_b_ten ,remote_car_single_motor_key_rel -0x4588 016752 beq control_l_r_ten ,remote_car_double_motor_key_rel -0x4589 016753 beq control_l_r_lr ,remote_car_single_motor_key_rel -0x458a 016754 rtn -: 016756 remote_car_device_layout_select: -0x458b 016757 fetch 1 ,mem_remote_car_config_layout -0x458c 016758 fetcht 1 ,mem_remote_car_config_key_map -0x458d 016759 ior temp ,pdata -0x458e 016760 rtn -: 016763 remote_car_send_motor1_key0_press: -0x458f 016764 jam motor_positive ,mem_remote_car_24g_motor1_payload -0x4590 016765 branch remote_car_send_key -: 016766 remote_car_send_motor1_key1_press: -0x4591 016767 jam motor_negative ,mem_remote_car_24g_motor1_payload -0x4592 016768 branch remote_car_send_key -: 016769 remote_car_send_motor2_key2_press: -0x4593 016770 jam motor_positive ,mem_remote_car_24g_motor2_payload -0x4594 016771 branch remote_car_send_key -: 016772 remote_car_send_motor2_key3_press: -0x4595 016773 jam motor_negative ,mem_remote_car_24g_motor2_payload -0x4596 016774 branch remote_car_send_key -: 016777 remote_car_send_double_motor_key0_press: -0x4597 016778 jam motor_positive ,mem_remote_car_24g_motor1_payload -0x4598 016779 jam motor_positive ,mem_remote_car_24g_motor2_payload -0x4599 016780 branch remote_car_send_key -: 016781 remote_car_send_double_motor_key1_press: -0x459a 016782 jam motor_negative ,mem_remote_car_24g_motor1_payload -0x459b 016783 jam motor_negative ,mem_remote_car_24g_motor2_payload -0x459c 016784 branch remote_car_send_key -: 016785 remote_car_send_double_motor_key2_press: -0x459d 016786 jam motor_negative ,mem_remote_car_24g_motor1_payload -0x459e 016787 jam motor_positive ,mem_remote_car_24g_motor2_payload -0x459f 016788 branch remote_car_send_key -: 016789 remote_car_send_double_motor_key3_press: -0x45a0 016790 jam motor_positive ,mem_remote_car_24g_motor1_payload -0x45a1 016791 jam motor_negative ,mem_remote_car_24g_motor2_payload -0x45a2 016792 branch remote_car_send_key -: 016795 remote_car_send_attack_key4_press: -0x45a3 016796 jam motor_positive ,mem_remote_car_24g_motor3_payload -0x45a4 016797 branch remote_car_send_key -: 016798 remote_car_send_attack_key5_press: -0x45a5 016799 jam motor_negative ,mem_remote_car_24g_motor3_payload -0x45a6 016800 branch remote_car_send_key -: 016802 remote_car_send_fire_key6_press: -0x45a7 016803 jam 0x01 ,mem_remote_car_24g_fire_send_payload -0x45a8 016804 branch remote_car_send_attack -: 016806 remote_car_single_motor_key_rel: -0x45a9 016807 copy queue ,pdata -0x45aa 016808 beq 0 ,remote_car_send_motor1_key0_rel -0x45ab 016809 beq 1 ,remote_car_send_motor1_key1_rel -0x45ac 016810 beq 2 ,remote_car_send_motor2_key2_rel -0x45ad 016811 beq 3 ,remote_car_send_motor2_key3_rel -0x45ae 016812 rtn -: 016814 remote_car_double_motor_key_rel: -0x45af 016815 copy queue ,pdata -0x45b0 016816 beq 0 ,remote_car_send_double_motor_key0_rel -0x45b1 016817 beq 1 ,remote_car_send_double_motor_key1_rel -0x45b2 016818 beq 2 ,remote_car_send_double_motor_key2_rel -0x45b3 016819 beq 3 ,remote_car_send_double_motor_key3_rel -0x45b4 016820 rtn -: 016822 remote_car_send_motor1_key0_rel: -: 016823 remote_car_send_motor1_key1_rel: -0x45b5 016824 jam motor_stop ,mem_remote_car_24g_motor1_payload -0x45b6 016825 branch remote_car_send_key -: 016826 remote_car_send_motor2_key2_rel: -: 016827 remote_car_send_motor2_key3_rel: -0x45b7 016828 jam motor_stop ,mem_remote_car_24g_motor2_payload -0x45b8 016829 branch remote_car_send_key -: 016831 remote_car_send_double_motor_key0_rel: -: 016832 remote_car_send_double_motor_key1_rel: -: 016833 remote_car_send_double_motor_key2_rel: -: 016834 remote_car_send_double_motor_key3_rel: -0x45b9 016835 jam motor_stop ,mem_remote_car_24g_motor1_payload -0x45ba 016836 jam motor_stop ,mem_remote_car_24g_motor2_payload -0x45bb 016837 branch remote_car_send_key -: 016839 remote_car_send_attack_key4_rel: -: 016840 remote_car_send_attack_key5_rel: -0x45bc 016841 jam motor_stop ,mem_remote_car_24g_motor3_payload -0x45bd 016842 branch remote_car_send_key -: 016844 remote_car_send_key: -0x45be 016845 arg mem_remote_car_24g_motor_packet ,rega -0x45bf 016846 branch queue_push -: 016847 remote_car_send_attack: -0x45c0 016848 arg mem_remote_car_24g_fire_packet ,rega -0x45c1 016849 branch queue_push -: 016851 remote_car_g24_package_data: -0x45c2 016852 fetch 1 ,mem_remote_car_24g_pair_success_flag -0x45c3 016853 beq work_paired ,remote_car_g24_send_empty -0x45c4 016854 arg mem_remote_car_24g_tx_temp ,rega -0x45c5 016855 call queue_pop -0x45c6 016856 nbranch remote_car_moto_data ,user -: 016857 remote_car_g24_package_data_continue: -0x45c7 016858 arg mem_remote_car_24g_tx_temp ,contr -0x45c8 016859 ifetch 1 ,contr -0x45c9 016860 copy pdata ,rega -0x45ca 016861 arg mem_remote_car_24g_tx_temp + 1 ,regb -0x45cb 016864 rtn -: 016866 remote_car_g24_send_empty: -0x45cc 016867 jam 0 ,mem_remote_car_24g_pair_success_flag -0x45cd 016868 enable user -0x45ce 016869 arg 1 ,rega -0x45cf 016870 arg mem_remote_car_empty_packet ,regb -0x45d0 016871 rtn -: 016873 remote_car_moto_data: -0x45d1 016874 fetch 1 ,mem_remote_car_24g_tx_temp + 3 -0x45d2 016875 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next -0x45d3 016876 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next -0x45d4 016877 rtn -: 016878 remote_car_moto_data_next: -0x45d5 016879 fetch 1 ,mem_remote_car_24g_tx_temp + 6 -0x45d6 016880 nbranch remote_car_moto_data_enable_user ,blank -0x45d7 016881 fetch 1 ,mem_remote_car_24g_tx_temp + 8 -0x45d8 016882 nbranch remote_car_moto_data_enable_user ,blank -0x45d9 016883 fetch 1 ,mem_remote_car_24g_tx_temp + 10 -0x45da 016884 nbranch remote_car_moto_data_enable_user ,blank -0x45db 016885 rtn -: 016886 remote_car_moto_data_enable_user: -0x45dc 016887 enable user -0x45dd 016888 branch remote_car_g24_package_data_continue -: 016896 shutter_init: -0x45de 016897 rtn wake -0x45df 016898 hfetch 1 ,core_gpio_sel1 -0x45e0 016899 and_into 0xfc ,pdata -0x45e1 016900 hstore 1 ,core_gpio_sel1 -0x45e2 016901 setarg shutter_le_before_hibernate -0x45e3 016902 store 2 ,mem_cb_before_hibernate -0x45e4 016904 setarg shutter_process_lpm_before -0x45e5 016905 store 2 ,mem_cb_before_lpm -0x45e6 016907 setarg app_enter_hibernate -0x45e7 016908 store 2 ,mem_cb_discovry_timeout -0x45e8 016910 setarg shutter_process_idle -0x45e9 016911 store 2 ,mem_cb_idle_process -0x45ea 016913 setarg shutter_process_bb_event -0x45eb 016914 store 2 ,mem_cb_bb_event_process -0x45ec 016916 setarg shutter_le_scale_lpm_lock -0x45ed 016917 store 2 ,mem_cb_check_wakelock -0x45ee 016919 setarg ble_shutter_receive_data -0x45ef 016920 store 2 ,mem_cb_att_write -0x45f0 016922 setarg shutter_le_bb_event_timer -0x45f1 016923 store 2 ,mem_cb_event_timer -0x45f2 016925 setarg shutter_key_change -0x45f3 016926 store 2 ,mem_cb_shutter_keycan -0x45f4 016928 setarg shutter_soft_swtich_power_on -0x45f5 016929 store 2 ,mem_shutter_soft_switch_poweron_callback_function -0x45f6 016930 setarg shutter_soft_swtich_power_off -0x45f7 016931 store 2 ,mem_shutter_soft_switch_poweroff_callback_function -0x45f8 016933 call le_modified_name -0x45f9 016934 call shutter_load_bluetooth_config_by_user_config -0x45fa 016935 call shutter_init_bluetooth_config -0x45fb 016936 call shutter_init_param -0x45fc 016937 call keyscan_key_init -0x45fd 016938 call shutter_load_buffer_config_form_datarom -0x45fe 016939 call queue_init -0x45ff 016940 call ui_led_init_global -0x4600 016941 call shutter_load_bluetooth_config -0x4601 016942 call shutter_load_bluetooth_config_by_eeprom -0x4602 016944 bpatch patch1e_5 ,mem_patch1e -0x4603 016945 call classic_shutter_load_reconn_info -0x4604 016946 fetch 1 ,mem_shutter_hard_soft_switch_case -0x4605 016947 beq hard_switch ,shutter_hart_swtich_power_on -0x4606 016948 fetch 1 ,mem_shutter_soft_switch_button_gpio -0x4607 016949 store 1 ,mem_ui_button_gpio -0x4608 016950 branch ui_soft_swtich_init -: 016953 shutter_hart_swtich_power_on: -0x4609 016954 jam ui_button_gpio_disable ,mem_ui_button_gpio -0x460a 016955 jam ss_state_power_on ,mem_shutter_soft_switch_power_state -0x460b 016956 branch shutter_start_reconnect -: 016960 shutter_le_scale_lpm_lock: -0x460c 016961 fetch 1 ,mem_shutter_soft_switch_power_state -0x460d 016962 beq ss_state_power_off ,app_get_lpm_wake_lock -0x460e 016963 call l2cap_malloc_get_full_map -0x460f 016964 fetch 1 ,mem_used_map -0x4610 016965 nbranch app_get_lpm_wake_lock ,blank -0x4611 016966 branch app_put_lpm_wake_lock -: 016970 shutter_process_bb_event: -0x4612 016971 copy regc ,pdata -0x4613 016973 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect -0x4614 016974 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect -0x4615 016975 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed -0x4616 016976 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete -0x4617 016977 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect -0x4618 016978 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect -0x4619 016979 beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake -0x461a 016980 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout -0x461b 016981 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug -0x461c 016982 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff -0x461d 016983 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information -0x461e 016985 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect -0x461f 016986 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect -0x4620 016987 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete -0x4621 016988 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response -0x4622 016990 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press -0x4623 016991 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down -0x4624 016992 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up -0x4625 016993 rtn -: 016998 classic_shutter_process_baseband_connect: -0x4626 016999 jam 0 ,mem_classic_shutter_hid_disconn_count -0x4627 017000 jam 0 ,mem_classic_shutter_cable_unplug_conut -0x4628 017001 rtn -: 017004 classic_shutter_process_baseband_disconnect: -0x4629 017005 call classic_shutter_disconnect_clear_flag -0x462a 017006 branch classic_shutter_process_reconnect_failed -: 017008 classic_shutter_disconnect_clear_flag: -0x462b 017009 jam app_handshake_null ,mem_app_handshake_flag -0x462c 017010 jam 0 ,mem_hid_handshake_timer_count -0x462d 017011 jam 0 ,mem_unsniff2sniff_timer_count -0x462e 017012 jam 0 ,mem_classic_shutter_cable_unplug_conut -0x462f 017013 jam 0 ,mem_classic_shutter_hid_disconn_count -0x4630 017014 branch queue_init -: 017017 classic_shutter_process_reconnect_failed: -0x4631 017018 call app_disconn_reason_clear -0x4632 017019 branch shutter_start_bluetooth_discovery -: 017022 classic_shutter_process_setup_complete: -0x4633 017023 call shutter_stop_bluetooth_discovery -0x4634 017024 branch app_led_stop_blink -: 017027 classic_shutter_process_hid_connect: -0x4635 017028 setarg hid_handshake_timeout -0x4636 017029 store 1 ,mem_hid_handshake_timer_count -0x4637 017030 rtn -: 017033 classic_shutter_process_hid_disconnect: -0x4638 017034 jam 0 ,mem_classic_shutter_cable_unplug_conut -0x4639 017035 setarg flag_shutter_hid_disconn_timeout -0x463a 017036 store 1 ,mem_classic_shutter_hid_disconn_count -0x463b 017037 rtn -: 017040 classic_shutter_process_hid_handshake: -0x463c 017041 fetch 1 ,mem_app_handshake_flag -0x463d 017042 rtneq app_handshake_done -0x463e 017043 jam app_handshake_done ,mem_app_handshake_flag -0x463f 017044 call app_lpm_mult_enable -0x4640 017045 call app_store_reconn_info -0x4641 017046 call shutter_stop_bluetooth_discovery -0x4642 017047 call app_led_off -0x4643 017048 branch app_bt_enter_sniff -: 017051 classic_shutter_process_reconnect_page_timeout: -0x4644 017052 branch classic_shutter_process_reconnect_failed -: 017055 classic_shutter_process_virtual_cable_unplug: -0x4645 017056 setarg flag_shutter_cable_unplug_timeout -0x4646 017057 store 1 ,mem_classic_shutter_cable_unplug_conut -0x4647 017058 rtn -: 017061 classic_shutter_process_remote_unsniff: -0x4648 017062 branch app_start_auto_sniff -: 017066 classic_shutter_process_store_reconnect_information: -0x4649 017067 arg nvram_eeprom_offset ,regb -0x464a 017068 fetch 1 ,mem_nv_data_number -0x464b 017069 mul32 pdata ,34 ,temp -0x464c 017070 fetch 2 ,mem_nv_data_ptr -0x464d 017071 copy pdata ,rega -0x464e 017072 branch iicd_write_eep_data -: 017074 classic_shutter_load_reconn_info: -0x464f 017075 arg nvram_eeprom_offset ,regb -0x4650 017076 fetch 1 ,mem_shutter_bluetooth_type -0x4651 017077 rtnbit0 classic_shutter -0x4652 017078 fetch 1 ,mem_nv_data_number -0x4653 017079 rtn blank -0x4654 017080 mul32 pdata ,34 ,temp -0x4655 017081 fetch 2 ,mem_nv_data_ptr -0x4656 017082 copy pdata ,rega -0x4657 017083 branch iicd_read_eep_data -: 017087 ble_shutter_process_baseband_connect: -0x4658 017088 call shutter_stop_bluetooth_discovery -0x4659 017089 setarg 0 -0x465a 017090 store 2 ,mem_ble_shutter_reconn_timer -0x465b 017091 branch app_led_off -: 017094 ble_shutter_process_baseband_disconnect: -0x465c 017095 call queue_init -0x465d 017096 jam 0 ,mem_ble_shutter_enable_notify -0x465e 017097 branch shutter_start_reconnect -: 017100 ble_shutter_process_reconnect_complete: -0x465f 017101 call queue_init -0x4660 017102 jam 1 ,mem_ble_shutter_enable_notify -0x4661 017103 fetch 8 ,mem_ble_shutter_interval_min -0x4662 017104 store 8 ,mem_le_interval_min -0x4663 017105 call app_lpm_mult_enable -0x4664 017106 branch le_l2cap_tx_update_req -: 017109 ble_shutter_process_parse_connect_parameter_update_response: -0x4665 017110 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x4666 017111 rtneq ble_signaling_connect_parameter_update_accepted -0x4667 017112 fetch 8 ,mem_ble_shutter_interval_min_new -0x4668 017113 rtn blank -0x4669 017114 store 8 ,mem_le_interval_min -0x466a 017115 branch le_l2cap_tx_update_req -: 017119 shutter_process_soft_swtich_button_long_press: -0x466b 017120 branch ui_soft_switch_botton_long_press -: 017122 shutter_process_soft_swtich_button_down: -0x466c 017123 fetch 1 ,mem_shutter_hard_soft_switch_case -0x466d 017124 rtneq hard_switch -0x466e 017125 fetch 1 ,mem_shutter_soft_switch_power_state -0x466f 017126 rtnne ss_state_power_on -0x4670 017127 call shutter_store_currenct_led_state -0x4671 017128 branch app_led_on -: 017130 shutter_store_currenct_led_state: -0x4672 017131 jam 1 ,mem_shutter_soft_swtich_botton_down -0x4673 017132 arg 11 ,loopcnt -0x4674 017133 arg mem_shutter_soft_swtich_led_struct_temp ,contw -0x4675 017134 arg mem_shutter_led_struct_app_led ,contr -0x4676 017135 branch memcpy -: 017137 shutter_process_soft_swtich_button_up: -0x4677 017138 fetch 1 ,mem_shutter_hard_soft_switch_case -0x4678 017139 rtneq hard_switch -0x4679 017140 fetch 1 ,mem_shutter_soft_switch_power_state -0x467a 017141 beq ss_state_power_on ,shutter_load_currenct_led_state -0x467b 017142 branch ui_soft_switch_botton_up -: 017144 shutter_load_currenct_led_state: -0x467c 017145 fetch 1 ,mem_shutter_soft_swtich_botton_down -0x467d 017146 rtnne 1 -0x467e 017147 jam 0 ,mem_shutter_soft_swtich_botton_down -0x467f 017148 fetch 2 ,mem_ui_state_map -0x4680 017149 bbit1 ui_state_bt_connected ,app_led_off -0x4681 017150 bbit1 ui_state_ble_connected ,app_led_off -0x4682 017151 arg 11 ,loopcnt -0x4683 017152 arg mem_shutter_soft_swtich_led_struct_temp ,contr -0x4684 017153 arg mem_shutter_led_struct_app_led ,contw -0x4685 017154 branch memcpy -: 017159 shutter_le_bb_event_timer: -0x4686 017161 call shutter_check_sleep_timer -0x4687 017164 call shutter_check_power_off_timer -0x4688 017167 call classic_shutter_check_unplug_timer -0x4689 017168 call classic_shutter_hid_handshake_timer -0x468a 017169 call classic_shutter_hid_disconn_timer -0x468b 017172 branch ble_shutter_reconn_timer -: 017176 shutter_check_sleep_timer: -0x468c 017177 arg mem_shutter_sleep_timer ,regc -0x468d 017178 arg shutter_sleep_timeout ,regb -0x468e 017179 branch timer_single_step_2b -: 017180 shutter_sleep_timeout: -0x468f 017181 jam ss_state_power_off ,mem_shutter_soft_switch_power_state -0x4690 017182 call app_led_off -0x4691 017183 call shutter_disconnect_current_connection -0x4692 017184 branch shutter_wait_power_off -: 017187 shutter_check_power_off_timer: -0x4693 017188 arg mem_shutter_power_off_timer ,regc -0x4694 017189 arg shutter_check_power_off_timeout ,regb -0x4695 017190 branch timer_single_step -: 017192 shutter_check_power_off_timeout: -0x4696 017193 fetch 2 ,mem_ui_state_map -0x4697 017194 bbit1 ui_state_ble_connected ,shutter_wait_power_off -0x4698 017195 bbit1 ui_state_bt_connected ,shutter_wait_power_off -0x4699 017196 fetch 1 ,mem_shutter_led_struct_app_led_type -0x469a 017197 beq ui_led_state_blink_start ,shutter_wait_power_off -0x469b 017198 beq ui_led_state_blink_lighting ,shutter_wait_power_off -0x469c 017199 beq ui_led_state_blink_darking ,shutter_wait_power_off -0x469d 017200 branch app_enter_hibernate -: 017204 classic_shutter_check_unplug_timer: -0x469e 017205 arg mem_classic_shutter_cable_unplug_conut ,regc -0x469f 017206 arg classic_shutter_unplug_timeout ,regb -0x46a0 017207 branch timer_single_step -: 017209 classic_shutter_unplug_timeout: -0x46a1 017210 fetch 1 ,mem_control_tasks -0x46a2 017211 set1 l2cap_disconnect_interrupt ,pdata -0x46a3 017212 set1 l2cap_disconnect_control ,pdata -0x46a4 017213 store 1 ,mem_control_tasks -0x46a5 017214 rtn -: 017216 classic_shutter_hid_handshake_timer: -0x46a6 017217 arg mem_hid_handshake_timer_count ,regc -0x46a7 017218 arg classic_shutter_process_hid_handshake ,regb -0x46a8 017219 branch timer_single_step -: 017221 classic_shutter_hid_disconn_timer: -0x46a9 017222 arg mem_classic_shutter_hid_disconn_count ,regc -0x46aa 017223 arg app_bt_disconnect ,regb -0x46ab 017224 branch timer_single_step -: 017229 ble_shutter_reconn_timer: -0x46ac 017230 fetch 1 ,mem_shutter_soft_switch_power_state -0x46ad 017231 rtnne ss_state_power_on -0x46ae 017232 arg mem_ble_shutter_reconn_timer ,regc -0x46af 017233 arg shutter_start_bluetooth_discovery ,regb -0x46b0 017234 branch timer_single_step_2b -: 017237 shutter_process_idle: -0x46b1 017238 call shutter_send_data_to_master -0x46b2 017239 branch keyscan_key_process -: 017242 shutter_process_lpm_before: -0x46b3 017243 branch keyscan_process_lpm_before -: 017245 shutter_le_before_hibernate: -0x46b4 017246 call gpio_set_before_lpm_common -0x46b5 017247 branch shutter_process_lpm_before -: 017253 shutter_stop_bluetooth_discovery: -0x46b6 017254 fetch 1 ,mem_shutter_bluetooth_type -0x46b7 017255 bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery -0x46b8 017256 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery -0x46b9 017257 rtn -: 017259 ble_shutter_stop_bluetooth_discovery: -0x46ba 017260 fetch 2 ,mem_ble_shutter_connect_timeout -0x46bb 017261 store 2 ,mem_shutter_sleep_timeout -0x46bc 017262 store 2 ,mem_shutter_sleep_timer -0x46bd 017263 branch app_ble_stop_adv -: 017265 classic_shutter_stop_bluetooth_discovery: -0x46be 017266 fetch 2 ,mem_classic_shutter_connect_timeout -0x46bf 017267 store 2 ,mem_shutter_sleep_timeout -0x46c0 017268 store 2 ,mem_shutter_sleep_timer -0x46c1 017269 branch app_bt_stop_discovery -: 017271 shutter_start_bluetooth_discovery: -0x46c2 017272 fetch 1 ,mem_shutter_soft_switch_power_state -0x46c3 017273 rtnne ss_state_power_on -0x46c4 017274 fetch 1 ,mem_shutter_bluetooth_type -0x46c5 017275 bbit1 classic_shutter ,classic_shutter_start_discovery -0x46c6 017276 bbit1 ble_shutter ,ble_shutter_start_discovery -0x46c7 017277 rtn -: 017279 classic_shutter_start_discovery: -0x46c8 017280 fetch 2 ,mem_classic_shutter_discovery_timeout , -0x46c9 017281 store 2 ,mem_shutter_sleep_timeout -0x46ca 017282 store 2 ,mem_shutter_sleep_timer -0x46cb 017283 branch app_bt_start_discovery_short -: 017285 ble_shutter_start_discovery: -0x46cc 017286 fetch 2 ,mem_ui_state_map -0x46cd 017287 rtnbit1 ui_state_ble_connected -0x46ce 017288 fetch 2 ,mem_ble_shutter_discovery_timeout -0x46cf 017289 store 2 ,mem_shutter_sleep_timeout -0x46d0 017290 store 2 ,mem_shutter_sleep_timer -0x46d1 017291 fetch 2 ,mem_ble_shutter_discovery_adv_interval -0x46d2 017292 call shutter_ble_adv_interval_set -0x46d3 017293 call app_led_start_blink -0x46d4 017294 fetch 4 ,mem_ble_shutter_discovery_blink_on_time -0x46d5 017295 store 4 ,mem_shutter_led_struct_app_led_on_time -0x46d6 017296 fetch 2 ,mem_ui_state_map -0x46d7 017297 rtnbit1 ui_state_ble_adv -0x46d8 017298 branch app_ble_start_adv -: 017301 shutter_start_reconnect: -0x46d9 017302 fetch 1 ,mem_shutter_soft_switch_power_state -0x46da 017303 rtnne ss_state_power_on -0x46db 017304 fetch 1 ,mem_shutter_bluetooth_type -0x46dc 017305 bbit1 classic_shutter ,classic_shutter_start_reconnect -0x46dd 017306 bbit1 ble_shutter ,ble_shutter_start_reconnect -0x46de 017307 rtn -: 017309 classic_shutter_start_reconnect: -0x46df 017310 call app_check_reconn_target -0x46e0 017311 branch shutter_start_bluetooth_discovery ,blank -0x46e1 017312 call app_led_on -0x46e2 017313 call app_bt_stop_discovery -0x46e3 017314 branch app_bt_start_reconnect -: 017316 ble_shutter_start_reconnect: -0x46e4 017317 fetch 2 ,mem_ble_shutter_reconn_timer -0x46e5 017318 fetcht 2 ,mem_ble_shutter_reconn_timeout -0x46e6 017319 storet 2 ,mem_ble_shutter_reconn_timer -0x46e7 017320 nrtn blank -0x46e8 017321 fetch 2 ,mem_ble_shutter_reconn_dav_interval -0x46e9 017322 call shutter_ble_adv_interval_set -0x46ea 017323 call app_led_start_blink -0x46eb 017324 fetch 4 ,mem_ble_shutter_reconn_blink_on_time -0x46ec 017325 store 4 ,mem_shutter_led_struct_app_led_on_time -0x46ed 017326 fetch 2 ,mem_ui_state_map -0x46ee 017327 rtnbit1 ui_state_ble_adv -0x46ef 017328 branch app_ble_start_adv -: 017331 shutter_ble_adv_interval_set: -0x46f0 017332 store 2 ,mem_lpm_interval -0x46f1 017333 increase -4 ,pdata -0x46f2 017334 store 2 ,mem_le_adv_interval -0x46f3 017335 rtn -: 017338 shutter_disconnect_current_connection: -0x46f4 017339 fetch 2 ,mem_ui_state_map -0x46f5 017340 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x46f6 017341 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x46f7 017342 branch shutter_stop_bluetooth_discovery -: 017346 app_check_reconn_target: -0x46f8 017347 fetch 1 ,mem_nv_data_number -0x46f9 017348 copy pdata ,loopcnt -0x46fa 017349 fetch 2 ,mem_nv_data_ptr -0x46fb 017350 copy pdata ,rega -: 017351 app_check_reconn_target_loop: -0x46fc 017352 ifetch 2 ,rega -0x46fd 017353 beq 0 ,found_reconn_device -0x46fe 017354 increase nv_data_len ,rega -0x46ff 017355 loop app_check_reconn_target_loop -0x4700 017356 branch enable_blank -: 017358 found_reconn_device: -0x4701 017359 ifetch 6 ,contr -0x4702 017360 store 6 ,mem_hci_plap -0x4703 017361 increase 10 ,contr -0x4704 017362 arg mem_link_key ,contw -0x4705 017363 call memcpy16 -0x4706 017364 call check_link_key_load -0x4707 017365 branch disable_blank -: 017371 shutter_check_data_enable: -0x4708 017372 call disable_user -0x4709 017373 fetch 2 ,mem_ui_state_map -0x470a 017374 bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable -0x470b 017375 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable -0x470c 017376 rtn -: 017378 shutter_check_bt_data_enable: -0x470d 017379 fetch 1 ,mem_hid_interrupt_state -0x470e 017380 rtnne 0x3f -0x470f 017381 branch enable_user -: 017383 shutter_check_ble_data_enable: -0x4710 017384 fetch 1 ,mem_ble_shutter_enable_notify -0x4711 017385 rtn blank -0x4712 017386 branch enable_user -: 017391 shutter_check_bluetooth_conn: -0x4713 017392 call disable_user -0x4714 017393 fetch 2 ,mem_ui_state_map -0x4715 017394 rtnbit1 ui_state_bt_connected -0x4716 017395 rtnbit1 ui_state_ble_connected -0x4717 017396 branch enable_user -: 017400 shutter_change_bluetooth_status_bt_disconn: -0x4718 017401 fetch 1 ,mem_shutter_bluetooth_type -0x4719 017402 bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn -0x471a 017403 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn -0x471b 017404 rtn -: 017406 classic_shutter_change_bluetooth_status_bt_disconn: -0x471c 017407 fetch 1 ,mem_scan_mode -0x471d 017408 rtnne 0x03 -0x471e 017409 branch shutter_start_reconnect -: 017411 ble_shutter_change_bluetooth_status_bt_disconn: -0x471f 017412 branch shutter_start_reconnect -: 017415 shutter_check_send_data: -0x4720 017416 disable user2 -0x4721 017417 fetch 2 ,mem_shutter_sleep_timeout -0x4722 017418 store 2 ,mem_shutter_sleep_timer -0x4723 017420 call shutter_check_bluetooth_conn -0x4724 017421 branch shutter_change_bluetooth_status_bt_disconn ,user -0x4725 017423 call shutter_check_data_enable -0x4726 017424 nrtn user -0x4727 017425 enable user2 -0x4728 017426 rtn -: 017430 shutter_key_change: -0x4729 017431 call shutter_check_send_data -0x472a 017432 nrtn user2 -0x472b 017433 deposit rega -0x472c 017434 branch shutter_key_release ,blank -: 017435 shutter_key_press: -0x472d 017436 call app_led_on -0x472e 017437 arg mem_key0_press ,regc -0x472f 017438 branch push_queue_press_or_release -: 017440 shutter_key_release: -0x4730 017441 call app_led_off -0x4731 017442 arg mem_key0_release ,regc -: 017444 push_queue_press_or_release: -0x4732 017445 arg max_queue_num ,pdata -0x4733 017446 imul32 queue ,pdata -0x4734 017447 iadd regc ,regc -: 017450 push_buffer_in_queue: -0x4735 017451 ifetch 1 ,regc -0x4736 017452 rtn blank -0x4737 017453 call queue_push_one_byte -0x4738 017454 increase 1 ,regc -0x4739 017455 branch push_buffer_in_queue -: 017458 shutter_send_data_to_master: -0x473a 017459 fetch 2 ,mem_ui_state_map -0x473b 017460 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data -0x473c 017461 bbit1 ui_state_bt_connected ,pop_queue_to_classic_data -0x473d 017462 rtn -: 017464 pop_queue_to_ble_data: -0x473e 017465 call le_fifo_check_nearly_full -0x473f 017466 nrtn blank -0x4740 017467 call queue_pop_one_byte -0x4741 017468 nrtn user -0x4742 017469 pincrease -1 -0x4743 017470 mul32 pdata ,shutter_ble_data_buffer ,pdata -0x4744 017471 arg mem_ble_data_buffer1 ,temp -0x4745 017472 iadd temp ,contr -: 017473 le_send_notify_from_list: -0x4746 017474 ifetch 1 ,contr -0x4747 017475 copy pdata ,rega -0x4748 017476 ifetcht 2 ,contr -0x4749 017477 call store_contr -0x474a 017478 call le_att_malloc_tx_notify -0x474b 017479 copy rega ,loopcnt -0x474c 017480 call get_contr -0x474d 017481 branch memcpy -: 017484 pop_queue_to_classic_data: -0x474e 017485 call l2cap_malloc_is_fifo_nearly_full -0x474f 017486 nrtn blank -0x4750 017487 call queue_pop_one_byte -0x4751 017488 nrtn user -0x4752 017489 pincrease -1 -0x4753 017490 mul32 pdata ,shutter_classic_data_buffer ,pdata -0x4754 017491 arg mem_classic_data_buffer1 ,temp -0x4755 017492 iadd temp ,contr -0x4756 017493 ifetch 5 ,contr -0x4757 017494 store 5 ,mem_classic_data_buffer -: 017495 classic_send_hid_data: -0x4758 017496 fetch 1 ,mem_classic_data_buffer -0x4759 017497 copy pdata ,rega -0x475a 017498 call hid_malloc_tx_buff -0x475b 017499 fetch 2 ,mem_hid_int_remote_cid -0x475c 017500 istore 2 ,contw -0x475d 017501 setarg 0xa1 -0x475e 017502 istore 1 ,contw -0x475f 017503 fetch 4 ,mem_classic_data_buffer + 1 -0x4760 017504 istore 9 ,contw -0x4761 017505 rtn -: 017509 queue_push_one_byte: -0x4762 017510 store 1 ,mem_pdatatemp -0x4763 017511 arg mem_pdatatemp ,rega -0x4764 017512 branch queue_push -: 017514 queue_pop_one_byte: -0x4765 017515 arg mem_pdatatemp ,rega -0x4766 017516 call queue_pop -0x4767 017517 nrtn user -0x4768 017518 fetch 1 ,mem_pdatatemp -0x4769 017519 rtn -: 017522 ble_shutter_receive_data: -0x476a 017523 fetch 2 ,mem_le_att_handle -0x476b 017524 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete -0x476c 017525 rtn -: 017527 shutter_init_param: -0x476d 017528 setarg 0x02 -0x476e 017529 store 1 ,mem_shutter_power_off_timeout -0x476f 017531 setarg 0x00200008 -0x4770 017532 store 4 ,mem_ble_shutter_interval_min -0x4771 017533 setarg 0x012c0005 -0x4772 017534 istore 4 ,contw -0x4773 017537 jam 0x17 ,mem_le_local_mtu -0x4774 017540 setarg 0x1b -0x4775 017541 store 2 ,mem_le_pairing_handle -0x4776 017542 call le_set_config_fixed_ltk -0x4777 017543 call le_set_fixed_ltk -0x4778 017544 call le_set_justwork -0x4779 017545 branch le_set_config_read_authentication -: 017548 shutter_load_buffer_config_form_datarom: -0x477a 017550 arg ble_key_value_list_size ,loopcnt -0x477b 017551 arg mem_ble_data_buffer1 ,contw -0x477c 017552 arg ble_shutter_key_value_list ,contr -0x477d 017553 call memcpy_fast -0x477e 017554 arg bt_key_value_list_size ,loopcnt -0x477f 017555 arg mem_classic_data_buffer1 ,contw -0x4780 017556 arg classic_shutter_key_value_list ,contr -0x4781 017557 branch memcpy_fast -: 017560 shutter_load_ble_gatt_form_datarom: -0x4782 017561 arg ble_gatt_list_size ,loopcnt -0x4783 017562 arg ble_shutter_gatt_list ,contr -0x4784 017563 branch memcpy_fast -: 017566 shutter_load_bt_sdp_form_datarom: -0x4785 017567 arg bt_sdp_list_size ,loopcnt -0x4786 017568 arg classic_shutter_sdp_list ,contr -0x4787 017569 branch memcpy_fast -: 017573 shutter_init_bluetooth_config: -0x4788 017574 call shutter_check_load_config_flag -0x4789 017575 nrtn user -0x478a 017576 fetch 1 ,mem_shutter_config_select_gpio1 -0x478b 017577 call shutter_init_bluetooth_config_gpio_input -0x478c 017578 fetch 1 ,mem_shutter_config_select_gpio2 -0x478d 017579 call shutter_init_bluetooth_config_gpio_input -0x478e 017580 fetch 1 ,mem_shutter_config_select_gpio3 -0x478f 017581 branch shutter_init_bluetooth_config_gpio_input -: 017583 shutter_init_bluetooth_config_gpio_input: -0x4790 017584 rtn blank -0x4791 017585 or pdata ,0x80 ,temp -0x4792 017586 branch gpio_config_input_nowake -: 017589 shutter_load_bluetooth_config: -0x4793 017590 call shutter_check_load_config_flag -0x4794 017591 nrtn user -0x4795 017592 call shutter_load_bluetooth_config_label -0x4796 017593 branch shutter_load_bluetooth_config_by_otp -: 017595 shutter_load_bluetooth_config_label: -0x4797 017596 arg 0 ,rega -0x4798 017597 fetch 1 ,mem_shutter_config_select_gpio1 -0x4799 017598 call shutter_load_bluetooth_config_read_gpio_input -0x479a 017599 nsetflag blank ,0 ,rega -0x479b 017600 fetch 1 ,mem_shutter_config_select_gpio2 -0x479c 017601 call shutter_load_bluetooth_config_read_gpio_input -0x479d 017602 nsetflag blank ,1 ,rega -0x479e 017603 fetch 1 ,mem_shutter_config_select_gpio3 -0x479f 017604 call shutter_load_bluetooth_config_read_gpio_input -0x47a0 017605 nsetflag blank ,2 ,rega -0x47a1 017606 copy rega ,pdata -0x47a2 017607 store 1 ,mem_shutter_config_label -0x47a3 017608 fetch 1 ,mem_shutter_config_size -0x47a4 017609 imul32 rega ,pdata -0x47a5 017610 fetcht 2 ,mem_shutter_config_otp_base_address -0x47a6 017611 iadd temp ,pdata -0x47a7 017612 store 2 ,mem_shutter_config_otp_addr -0x47a8 017613 rtn -: 017615 shutter_load_bluetooth_config_read_gpio_input: -0x47a9 017616 rtn blank -0x47aa 017617 or pdata ,0x80 ,temp -0x47ab 017618 call gpio_get_bit -0x47ac 017619 nbranch enable_blank ,true -0x47ad 017620 branch disable_blank -: 017623 shutter_check_load_config_flag: -0x47ae 017624 call disable_user -0x47af 017625 fetch 1 ,mem_shutter_config_user_size -0x47b0 017626 nrtn blank -0x47b1 017627 fetch 1 ,mem_shutter_config_enable -0x47b2 017628 rtn blank -0x47b3 017629 branch enable_user -: 017632 shutter_load_bluetooth_config_by_otp: -0x47b4 017633 call otp_enable_chgpump -0x47b5 017634 fetch 2 ,mem_shutter_config_otp_addr -0x47b6 017635 arg mem_shutter_config_data_temp ,rega -0x47b7 017636 fetcht 1 ,mem_shutter_config_size -0x47b8 017637 call otpd_read_data -0x47b9 017638 call otp_disable_chgpump -: 017639 shutter_load_bluetooth_config_store_name: -0x47ba 017640 fetch 1 ,mem_shutter_config_data_temp -0x47bb 017641 copy pdata ,loopcnt -0x47bc 017642 store 1 ,mem_le_name_len -0x47bd 017643 call memcpy_fast -0x47be 017644 fetch 1 ,mem_shutter_config_data_temp -0x47bf 017645 copy pdata ,loopcnt -0x47c0 017646 store 1 ,mem_local_name_length -0x47c1 017647 call memcpy_fast -0x47c2 017648 ifetch 1 ,contr -0x47c3 017649 store 1 ,mem_shutter_key_num -0x47c4 017650 ifetch 1 ,contr -0x47c5 017651 store 1 ,mem_shutter_hard_soft_switch_case -0x47c6 017652 rtn -: 017655 shutter_load_bluetooth_config_by_eeprom: -0x47c7 017656 fetch 1 ,mem_shutter_bluetooth_type -0x47c8 017657 rtnbit0 classic_shutter -0x47c9 017658 arg 3 ,temp -0x47ca 017659 fetch 2 ,mem_shutter_config_eeprom_offset_addr -0x47cb 017660 copy pdata ,regb -0x47cc 017661 arg mem_shutter_config_eeprom_start_flag ,rega -0x47cd 017662 call iicd_read_eep_data -0x47ce 017663 fetcht 2 ,mem_shutter_config_eeprom_start_flag -0x47cf 017664 setarg shutter_eeprom_config_crc -0x47d0 017665 isub temp ,null -0x47d1 017666 nrtn zero -0x47d2 017667 fetch 1 ,mem_shutter_config_user_size -0x47d3 017668 rtn blank -0x47d4 017669 copy pdata ,temp -0x47d5 017670 fetch 2 ,mem_shutter_config_eeprom_offset_addr -0x47d6 017671 add pdata ,3 ,regb -0x47d7 017672 arg mem_shutter_config_data_temp ,rega -0x47d8 017673 call iicd_read_eep_data -0x47d9 017674 branch shutter_store_config -: 017676 shutter_load_bluetooth_config_by_user_config: -0x47da 017677 fetch 2 ,mem_shutter_config_user_otp_address -0x47db 017678 rtn blank -0x47dc 017679 call otp_enable_chgpump -0x47dd 017680 arg 1 ,temp -0x47de 017681 arg mem_shutter_config_user_size ,rega -0x47df 017682 call otpd_read_data -0x47e0 017684 fetch 1 ,mem_shutter_config_user_size -0x47e1 017685 rtn blank -0x47e2 017687 fetch 2 ,mem_shutter_config_user_otp_address -0x47e3 017688 pincrease 1 -0x47e4 017689 arg mem_shutter_config_data_temp ,rega -0x47e5 017690 fetcht 1 ,mem_shutter_config_user_size -0x47e6 017691 call otpd_read_data -0x47e7 017692 call otp_disable_chgpump -: 017693 shutter_store_config: -0x47e8 017694 call shutter_load_bluetooth_config_store_name -: 017695 shutter_load_bluetooth_config_custom: -0x47e9 017696 ifetch 2 ,contr -0x47ea 017697 rtn blank -0x47eb 017698 copy pdata ,contw -0x47ec 017699 ifetcht 1 ,contr -0x47ed 017700 copy temp ,loopcnt -0x47ee 017701 call memcpy -0x47ef 017702 branch shutter_load_bluetooth_config_custom -: 017706 shutter_random_mac_addr: -0x47f0 017707 fetch 1 ,mem_shutter_bluetooth_type -0x47f1 017708 rtnbit0 classic_shutter -0x47f2 017709 fetch 2 ,mem_classic_shutter_random_mac_offset_addr -0x47f3 017710 copy pdata ,regb -0x47f4 017711 arg 4 ,temp -0x47f5 017712 arg mem_shutter_random_mac_data_temp ,rega -0x47f6 017713 call iicd_read_eep_data -0x47f7 017714 fetch 1 ,mem_shutter_random_mac_data_temp -0x47f8 017715 bne 1 ,shutter_write_random_mac_addr_to_eeprom -: 017716 shutter_write_random_mac_addr_to_eeprom: -0x47f9 017717 setarg 1 -0x47fa 017718 store 1 ,mem_shutter_random_mac_data_temp -0x47fb 017719 force 3 ,loopcnt -0x47fc 017720 call generate_random_loop -0x47fd 017721 fetch 2 ,mem_classic_shutter_random_mac_offset_addr -0x47fe 017722 copy pdata ,regb -0x47ff 017723 arg 4 ,temp -0x4800 017724 arg mem_shutter_random_mac_data_temp ,rega -0x4801 017725 call iicd_write_eep_data -: 017726 shutter_write_random_mac_addr: -0x4802 017727 fetch 3 ,mem_shutter_random_mac_data_temp + 1 -0x4803 017728 store 3 ,mem_lap -0x4804 017729 store 3 ,mem_le_lap -0x4805 017730 rtn -: 017733 shutter_soft_swtich_power_on: -0x4806 017734 branch shutter_start_reconnect -: 017737 shutter_soft_swtich_power_off: -0x4807 017738 arg 0 ,rega -0x4808 017739 arg mem_shutter_power_off_led_style ,regc -0x4809 017740 call ui_led_set_style_global -0x480a 017741 call shutter_disconnect_current_connection -: 017742 shutter_wait_power_off: -0x480b 017743 fetch 1 ,mem_shutter_power_off_timeout -0x480c 017744 store 1 ,mem_shutter_power_off_timer -0x480d 017745 rtn -: 017749 ui_soft_swtich_init: -0x480e 017750 setarg ss_state_power_up -0x480f 017751 call ui_soft_swtich_init_power_on_time -0x4810 017752 jam ui_button_state_up ,mem_ui_button_last_state -0x4811 017753 call ui_button_init -0x4812 017754 call ui_button_polling -0x4813 017755 fetch 2 ,mem_ui_state_map -0x4814 017756 rtnbit1 ui_state_btn_down -0x4815 017757 branch app_enter_hibernate -: 017759 ui_soft_swtich_init_power_on_time: -0x4816 017760 fetcht 2 ,mem_power_param_ptr -0x4817 017761 istore 1 ,temp -0x4818 017762 ifetch 1 ,contw -0x4819 017763 store 1 ,mem_ui_button_timeout -0x481a 017764 rtn -: 017767 ui_soft_switch_botton_up: -0x481b 017768 fetch 2 ,mem_power_param_ptr -0x481c 017769 ifetch 1 ,pdata -0x481d 017770 rtnne ss_state_power_up -0x481e 017771 branch app_enter_hibernate -: 017774 ui_soft_switch_botton_long_press: -0x481f 017775 fetcht 2 ,mem_power_param_ptr -0x4820 017776 ifetch 1 ,temp -0x4821 017777 beq ss_state_power_on ,ui_soft_switch_power_off -: 017778 ui_soft_switch_power_on: -0x4822 017779 setarg ss_state_power_on -0x4823 017780 fetcht 2 ,mem_power_param_ptr -0x4824 017781 istore 1 ,temp -0x4825 017782 add temp ,ss_power_off_time ,contr -0x4826 017783 ifetch 1 ,contr -0x4827 017784 istore 1 ,mem_ui_button_timeout -0x4828 017785 ifetch 2 ,contr -0x4829 017786 branch callback_func -: 017788 ui_soft_switch_power_off: -0x482a 017789 setarg ss_state_power_off -0x482b 017790 call ui_soft_swtich_init_power_on_time -0x482c 017791 add temp ,ss_power_off_cb ,contr -0x482d 017792 ifetch 2 ,contr -0x482e 017793 branch app_enter_hibernate ,blank -0x482f 017794 branch callback_func -: 017800 shutter_byteswap: -0x4830 017801 store 6 ,mem_tmp_buffer -0x4831 017802 fetch 1 ,mem_tmp_buffer -0x4832 017803 store 1 ,mem_tmp_buffer + 11 -0x4833 017804 ifetch 1 ,contr -0x4834 017805 store 1 ,mem_tmp_buffer + 10 -0x4835 017806 ifetch 1 ,contr -0x4836 017807 store 1 ,mem_tmp_buffer + 9 -0x4837 017808 ifetch 1 ,contr -0x4838 017809 store 1 ,mem_tmp_buffer + 8 -0x4839 017810 ifetch 1 ,contr -0x483a 017811 store 1 ,mem_tmp_buffer + 7 -0x483b 017812 ifetch 1 ,contr -0x483c 017813 store 1 ,mem_tmp_buffer + 6 -0x483d 017814 fetch 6 ,mem_tmp_buffer + 6 -0x483e 017815 rtn -: 017817 shutter_random_addr_by_otp: -0x483f 017818 call load_adc_init -0x4840 017819 fetch 1 ,mem_1v_adc_io_data -0x4841 017820 store 1 ,mem_le_lap -0x4842 017821 fetch 1 ,mem_5v_adc_hvin_data -0x4843 017822 istore 1 ,contw -0x4844 017823 fetch 1 ,mem_3v_adc_vinlpm_data -0x4845 017824 istore 1 ,contw -0x4846 017825 fetch 3 ,mem_le_lap -0x4847 017826 store 3 ,mem_lap -0x4848 017827 rtn -: 017839 sim_iic_read_eep_data: -0x4849 017840 fetch 2 ,mem_eeprom_base -0x484a 017841 iadd regb ,pdata -0x484b 017842 byteswap pdata ,pdata -0x484c 017843 store 2 ,mem_addr_mi -0x484d 017844 copy temp ,regb -0x484e 017846 call sim_iic_start -0x484f 017847 setarg 0xa0 -0x4850 017848 call sim_iic_send_byte -0x4851 017849 fetch 1 ,mem_addr_mi -0x4852 017850 call sim_iic_send_byte -0x4853 017851 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k -0x4854 017852 fetch 1 ,mem_addr_mi + 1 -0x4855 017853 call sim_iic_send_byte -: 017854 sim_iic_read_eep_data_2k: -0x4856 017855 call sim_iic_stop -0x4857 017857 call sim_iic_start -0x4858 017858 setarg 0xa1 -0x4859 017859 call sim_iic_send_byte -: 017861 sim_iic_read_eep_data_loop: -0x485a 017862 call sim_iic_read_byte -0x485b 017863 istore 1 ,rega -0x485c 017864 increase 1 ,rega -0x485d 017865 increase -1 ,regb -0x485e 017866 nbranch sim_iic_read_eep_data_loop ,zero -0x485f 017867 branch sim_iic_stop -: 017878 sim_iic_write_eep_data: -0x4860 017879 byteswap regb ,pdata -0x4861 017880 store 2 ,mem_addr_mi -0x4862 017881 copy temp ,regb -0x4863 017883 call sim_iic_start -0x4864 017884 setarg 0xa0 -0x4865 017885 call sim_iic_send_byte -0x4866 017887 fetch 1 ,mem_addr_mi -0x4867 017888 call sim_iic_send_byte -0x4868 017889 bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop -0x4869 017890 fetch 1 ,mem_addr_mi + 1 -0x486a 017891 call sim_iic_send_byte -: 017892 sim_iic_write_eep_data_loop: -0x486b 017893 ifetch 1 ,rega -0x486c 017894 call sim_iic_send_byte -0x486d 017895 increase 1 ,rega -0x486e 017896 increase -1 ,regb -0x486f 017897 nbranch sim_iic_write_eep_data_loop ,zero -0x4870 017898 branch sim_iic_stop -: 017902 sim_iic_wait_ack: -0x4871 017903 arg 10 ,loopcnt -0x4872 017904 call sim_iic_release_sda -0x4873 017905 call sim_iic_scl_output_high -0x4874 017906 call sim_iic_delay -: 017907 sim_iic_wait_ack_loop: -0x4875 017908 call sim_iic_read_sda_level -0x4876 017909 branch sim_iic_scl_output_low ,blank -0x4877 017910 loop sim_iic_wait_ack_loop -0x4878 017911 branch sim_iic_scl_output_low -: 017915 sim_iic_ack_slave: -0x4879 017916 call sim_iic_scl_output_low -0x487a 017917 call sim_iic_sda_output_low -0x487b 017918 call sim_iic_delay -0x487c 017919 call sim_iic_scl_output_high -0x487d 017920 call sim_iic_delay -0x487e 017921 branch sim_iic_scl_output_low -: 017926 sim_iic_read_byte: -0x487f 017927 arg 8 ,loopcnt -0x4880 017928 arg 0 ,regc -0x4881 017929 call sim_iic_release_sda -: 017930 sim_iic_read_byte_loop: -0x4882 017931 call sim_iic_scl_output_high -0x4883 017932 call sim_iic_delay -0x4884 017933 lshift regc ,regc -0x4885 017934 call sim_iic_read_sda_level -0x4886 017935 iadd regc ,regc -0x4887 017936 call sim_iic_delay -0x4888 017937 call sim_iic_scl_output_low -0x4889 017938 loop sim_iic_read_byte_loop -0x488a 017939 call sim_iic_ack_slave -0x488b 017940 copy regc ,pdata -0x488c 017941 rtn -: 017945 sim_iic_send_byte: -0x488d 017946 arg 8 ,loopcnt -0x488e 017947 copy pdata ,regc -0x488f 017948 call sim_iic_scl_output_low -: 017949 sim_iic_send_byte_loop: -0x4890 017950 isolate1 7 ,regc -0x4891 017951 call sim_iic_sda_output_high ,true -0x4892 017952 ncall sim_iic_sda_output_low ,true -0x4893 017953 lshift regc ,regc -0x4894 017954 call sim_iic_delay -0x4895 017955 call sim_iic_scl_output_high -0x4896 017956 call sim_iic_delay -0x4897 017957 call sim_iic_scl_output_low -0x4898 017958 call sim_iic_delay -0x4899 017959 loop sim_iic_send_byte_loop -0x489a 017960 branch sim_iic_wait_ack -: 017964 sim_iic_start: -0x489b 017965 call sim_iic_sda_output_high -0x489c 017966 call sim_iic_scl_output_high -0x489d 017967 call sim_iic_delay -0x489e 017968 call sim_iic_sda_output_low -0x489f 017969 call sim_iic_delay -0x48a0 017970 branch sim_iic_scl_output_low -: 017974 sim_iic_stop: -0x48a1 017975 call sim_iic_sda_output_low -0x48a2 017976 call sim_iic_scl_output_high -0x48a3 017977 call sim_iic_delay -0x48a4 017978 call sim_iic_sda_output_high -0x48a5 017979 branch sim_iic_delay -: 017983 sim_iic_scl_output_high: -0x48a6 017984 enable user -0x48a7 017985 fetch 1 ,sim_iic_scl_gpio_num -0x48a8 017986 branch sim_iic_config_gpio -: 017989 sim_iic_scl_output_low: -0x48a9 017990 disable user -0x48aa 017991 fetch 1 ,sim_iic_scl_gpio_num -0x48ab 017992 branch sim_iic_config_gpio -: 017995 sim_iic_sda_output_high: -0x48ac 017996 enable user -0x48ad 017997 fetch 1 ,sim_iic_sda_gpio_num -0x48ae 017998 branch sim_iic_config_gpio -: 018001 sim_iic_sda_output_low: -0x48af 018002 disable user -0x48b0 018003 fetch 1 ,sim_iic_sda_gpio_num -0x48b1 018004 branch sim_iic_config_gpio -: 018009 sim_iic_config_gpio: -0x48b2 018010 and pdata ,0x07 ,queue -0x48b3 018011 rshift3 pdata ,pdata -0x48b4 018012 arg core_gpio_oe0 ,temp -0x48b5 018013 iadd temp ,temp -0x48b6 018014 ifetch 1 ,temp -0x48b7 018015 qset1 pdata -0x48b8 018016 istore 1 ,temp -0x48b9 018017 increase 4 ,temp -0x48ba 018018 ifetch 1 ,temp -0x48bb 018019 qsetflag user ,pdata -0x48bc 018020 istore 1 ,temp -0x48bd 018021 rtn -: 018024 sim_iic_release_sda: -0x48be 018025 fetch 1 ,sim_iic_sda_gpio_num -0x48bf 018026 and pdata ,0x07 ,queue -0x48c0 018027 rshift3 pdata ,pdata -0x48c1 018028 arg core_gpio_oe0 ,temp -0x48c2 018029 iadd temp ,temp -0x48c3 018030 ifetch 1 ,temp -0x48c4 018031 qset0 pdata -0x48c5 018032 istore 1 ,temp -0x48c6 018033 rtn -: 018038 sim_iic_read_sda_level: -0x48c7 018039 nop 4 -0x48c8 018040 fetch 1 ,sim_iic_sda_gpio_num -0x48c9 018041 and pdata ,0x07 ,queue -0x48ca 018042 rshift3 pdata ,pdata -0x48cb 018043 arg core_gpio_in ,temp -0x48cc 018044 iadd temp ,temp -0x48cd 018045 setarg 0 -0x48ce 018046 ifetcht 1 ,temp -0x48cf 018047 qisolate1 temp -0x48d0 018048 setflag true ,0 ,pdata -0x48d1 018049 rtn -: 018052 sim_iic_delay: -0x48d2 018054 rtn -: 018060 usb_isr: -0x48d3 018061 bpatch patch1e_6 ,mem_patch1e -0x48d4 018062 hfetch 1 ,core_usb_status -0x48d5 018063 isolate1 7 ,pdata -0x48d6 018064 call usb_init ,true -0x48d7 018065 call usb_nak_state_judge -0x48d8 018066 hfetch 1 ,core_usb_status -0x48d9 018067 store 1 ,mem_usb_status -0x48da 018068 hfetch 1 ,core_usb_fifo_empty -0x48db 018069 store 1 ,mem_usb_fifo_empty -0x48dc 018070 hstore 1 ,core_usb_fifo_empty -0x48dd 018071 pinvert -0x48de 018072 fetcht 1 ,mem_usb_tx_wait -0x48df 018073 iand temp ,pdata -0x48e0 018074 store 1 ,mem_usb_tx_wait -0x48e1 018075 jam 0xe0 ,core_usb_status -0x48e2 018076 fetch 1 ,mem_usb_fifo_empty -0x48e3 018077 compare 0x1 ,pdata ,0x1 -0x48e4 018078 call usb0_fifo_empty ,true -0x48e5 018079 fetch 1 ,mem_usb_status -0x48e6 018080 compare 0x1 ,pdata ,0x1 -0x48e7 018081 call usb_status1 ,true -0x48e8 018082 call usb_tx -0x48e9 018083 branch usb_nak_state -: 018085 usb_init: -0x48ea 018086 bpatch patch1e_7 ,mem_patch1e -0x48eb 018087 call usb_init_param -0x48ec 018088 jam 0x00 ,core_usb_config -0x48ed 018089 nop 10000 -0x48ee 018090 jam 0xc0 ,core_usb_trig -0x48ef 018091 hfetch 2 ,core_clkoff -0x48f0 018092 set0 clock_off_usb ,pdata -0x48f1 018093 hstore 2 ,core_clkoff -0x48f2 018094 jam 0x3c ,core_usb_config -0x48f3 018095 jam 0xff ,core_usb_status -0x48f4 018096 jam 0xff ,core_usb_fifo_empty -0x48f5 018097 jam 0 ,core_usb_addr -0x48f6 018098 jam dev_default ,mem_usb0_state -0x48f7 018099 setarg mem_usb_clear_mem_end -0x48f8 018100 arg mem_usb_clear_mem_start ,contw -0x48f9 018101 isub contw ,loopcnt -0x48fa 018102 branch clear_mem -: 018104 usb_offline_check_init: -0x48fb 018105 fetcht 1 ,mem_usb_offline_check_gpio -0x48fc 018106 branch gpio_config_input -: 018107 usb_offline_state: -0x48fd 018108 fetch 1 ,mem_usb_device_enumeration_endflag -0x48fe 018109 rtn blank -0x48ff 018110 fetcht 1 ,mem_usb_offline_check_gpio -0x4900 018111 call gpio_get_bit -0x4901 018112 branch usb_init ,true -0x4902 018113 rtn -: 018116 usb_nak_state: -0x4903 018117 arg timer_nak ,queue -0x4904 018118 call timer_check -0x4905 018119 nrtn blank -0x4906 018120 fetch 1 ,mem_usb_wakestate_onetime_flag -0x4907 018121 nrtn blank -0x4908 018122 fetch 1 ,mem_usb_device_enumeration_endflag -0x4909 018123 ncall usb_mac_wakeup_judge ,blank -0x490a 018124 rtn -: 018126 usb_mem_devicedesc_init: -0x490b 018127 arg mem_devicedesc ,contw -0x490c 018128 setsect 0 ,0x11212 -0x490d 018129 setsect 1 ,0x8000 -0x490e 018130 setsect 2 ,0x0 -0x490f 018131 setsect 3 ,0x10000 -0x4910 018132 istore 9 ,contw -0x4911 018133 setsect 0 ,0x22412 -0x4912 018134 setsect 1 ,0x8604 -0x4913 018135 setsect 2 ,0x1000 -0x4914 018136 setsect 3 ,0x8 -0x4915 018137 istore 9 ,contw -0x4916 018138 setsect 0 ,0x1 -0x4917 018139 istore 1 ,contw -0x4918 018140 rtn -: 018142 usb_init_param: -0x4919 018143 jam 2 ,mem_usb0_state -0x491a 018144 setarg 0x0 -0x491b 018145 store 1 ,mem_remain -0x491c 018146 store 2 ,mem_usb_zero_packet -0x491d 018147 pincrease 1 -0x491e 018148 store 2 ,mem_usb_ones_packet -0x491f 018149 pincrease 1 -0x4920 018150 store 2 ,mem_usb_two_packet -0x4921 018151 setarg hid_kbdata_addr -0x4922 018152 store 2 ,mem_hidreportdesc_kb -0x4923 018153 setarg hid_msdata_addr -0x4924 018154 store 2 ,mem_hidreportdesc_m -0x4925 018155 arg mem_confdesc ,contw -0x4926 018156 arg hid_confdata_addr ,contr -0x4927 018157 call memcpy64 -0x4928 018158 fetch 1 ,mem_usb_tx_interval -0x4929 018159 ncall usb_tx_interval_config ,blank -0x492a 018160 branch usb_mem_devicedesc_init -: 018162 usb_tx_interval_config: -0x492b 018163 store 1 ,mem_confdesc + 34 -0x492c 018164 store 1 ,mem_confdesc + 59 -0x492d 018165 rtn -: 018166 usb_nak_state_judge: -0x492e 018167 hfetch 1 ,core_usb_status -0x492f 018168 bbit1 usb_status_nak ,usb_nak_state_timer_init -0x4930 018169 rtn -: 018171 usb_nak_state_timer_init: -0x4931 018172 call usb0_attached_state_judge -0x4932 018173 call timer_reinit -0x4933 018174 setarg timer_nak_delay -0x4934 018175 arg timer_nak ,queue -0x4935 018176 branch timer_init -: 018178 usb0_attached_state_judge: -0x4936 018179 fetch 1 ,mem_usb_state -0x4937 018180 bne usb_connected ,usb_clear_halt_dispose -0x4938 018181 jam 0 ,mem_usb_wakestate_onetime_flag -0x4939 018182 jam 0 ,mem_usb_mac_wakeup_trig -0x493a 018183 rtn -: 018184 usb_clear_halt_dispose: -0x493b 018185 fetch 1 ,mem_usb_clear_halt -0x493c 018186 rtn blank -0x493d 018187 jam 0 ,mem_usb_clear_halt -0x493e 018188 jam usb_connected ,mem_usb_state -0x493f 018189 jam 1 ,mem_usb_device_enumeration_endflag -0x4940 018190 rtn -: 018192 usb0_fifo_empty: -0x4941 018193 jam 0x1 ,core_usb_fifo_empty -0x4942 018194 branch usb0_tx -: 018196 usb_rx_no_data: -0x4943 018197 fetch 1 ,mem_usb_status -0x4944 018198 bbit1 usb_status_setup ,usb_class_type -0x4945 018199 rtn -: 018201 usb_rx_read: -0x4946 018202 hfetch 1 ,core_usb_ep -0x4947 018203 istore 1 ,contw -0x4948 018204 loop usb_rx_read -0x4949 018205 rtn -: 018207 usb_status1: -0x494a 018208 bpatch patch1f_0 ,mem_patch1f -0x494b 018209 jam 0x11 ,core_usb_status -0x494c 018210 hfetch 1 ,core_usb_ep_len -0x494d 018211 store 1 ,mem_usb_read_len -0x494e 018212 copy pdata ,loopcnt -0x494f 018213 branch usb_rx_no_data ,blank -0x4950 018214 arg mem_usb_setup ,contw -0x4951 018215 call usb_rx_read -0x4952 018216 fetch 1 ,mem_usb_read_len -0x4953 018217 sub pdata ,7 ,null -0x4954 018218 rtn positive -: 018219 usb_class_type: -0x4955 018220 fetch 1 ,mem_usb_setup_bmrequesttype -0x4956 018221 and_into 0x80 ,pdata -0x4957 018222 beq in_device ,usb_in_device -0x4958 018223 beq out_device ,usb_out_device -0x4959 018224 branch assert -: 018226 usb_in_device: -0x495a 018227 fetch 1 ,mem_usb_setup_bmrequesttype -0x495b 018228 rshift4 pdata ,pdata -0x495c 018229 rshift pdata ,pdata -0x495d 018230 and_into 0x03 ,pdata -0x495e 018231 beq standard_req ,usb_in_standard_req -0x495f 018232 beq class_req ,usb_in_class_req -0x4960 018233 beq manufacturer_req ,usb_in_manufacturer_req -0x4961 018234 branch assert -: 018236 usb_out_device: -0x4962 018237 fetch 1 ,mem_usb_setup_bmrequesttype -0x4963 018238 rshift4 pdata ,pdata -0x4964 018239 rshift pdata ,pdata -0x4965 018240 and_into 0x03 ,pdata -0x4966 018241 beq standard_req ,usb_out_standard_req -0x4967 018242 beq class_req ,usb_out_class_req -0x4968 018243 beq manufacturer_req ,usb_out_manufacturer_req -0x4969 018244 branch assert -: 018246 usb_in_standard_req: -0x496a 018247 fetch 1 ,mem_usb_setup_brequest -0x496b 018248 beq get_configuration ,usb0_request_get_configuration -0x496c 018249 beq get_descriptor ,usb0_request_get_descriptor -0x496d 018250 beq get_interface ,usb0_request_get_interface -0x496e 018251 beq get_status ,usb0_request_get_status -0x496f 018252 branch usb0_force_stall -: 018254 usb_in_class_req: -0x4970 018255 fetch 1 ,mem_usb_setup_brequest -0x4971 018256 beq get_idle ,usb_get_idle -0x4972 018257 beq get_report ,usb_get_report -0x4973 018258 beq get_protocol ,usb_get_protocol_req -0x4974 018259 branch usb0_force_stall -: 018261 usb_in_manufacturer_req: -0x4975 018262 branch usb0_force_stall -: 018264 usb_out_standard_req: -0x4976 018265 fetch 1 ,mem_usb_setup_brequest -0x4977 018266 beq clear_feature ,usb0_request_clear_feature -0x4978 018267 beq set_feature ,usb0_request_set_feature -0x4979 018268 beq set_address ,usb0_request_set_address -0x497a 018269 beq set_configuration ,usb0_request_set_configuration -0x497b 018270 beq set_interface ,usb0_request_set_interface -0x497c 018271 beq set_descriptor ,usb0_force_stall -0x497d 018272 branch usb0_force_stall -: 018274 usb_out_class_req: -0x497e 018275 fetch 1 ,mem_usb_setup_brequest -0x497f 018276 beq set_idle ,usb_set_idle -0x4980 018277 beq set_report ,usb_set_report -0x4981 018278 beq set_protocol ,usb_set_protocol_req -0x4982 018279 branch usb0_force_stall -: 018281 usb_out_manufacturer_req: -0x4983 018282 branch usb0_force_stall -: 018284 usb0_force_stall: -0x4984 018285 hfetch 1 ,core_usb_stall -0x4985 018286 set1 0 ,pdata -0x4986 018287 hstore 1 ,core_usb_stall -0x4987 018288 branch usb0_reply_zerolen -: 018290 usb0_reply_zerolen: -0x4988 018291 jam 0x40 ,core_usb_clear -0x4989 018292 rtn -: 018294 usb0_request_get_configuration: -0x498a 018295 fetch 1 ,mem_usb_setup_bmrequesttype -0x498b 018296 bne in_device ,usb0_force_stall -0x498c 018297 fetch 1 ,mem_usb_setup_windex -0x498d 018298 bne 0 ,usb0_force_stall -0x498e 018299 fetch 1 ,mem_usb_setup_windex + 1 -0x498f 018300 bne 0 ,usb0_force_stall -0x4990 018301 fetch 1 ,mem_usb_setup_blength -0x4991 018302 bne 1 ,usb0_force_stall -0x4992 018303 fetch 1 ,mem_usb_setup_blengthh -0x4993 018304 bne 0 ,usb0_force_stall -0x4994 018305 fetch 1 ,mem_usb_setup_bvalue -0x4995 018306 bne 0 ,usb0_force_stall -0x4996 018307 fetch 1 ,mem_usb_setup_bvalue + 1 -0x4997 018308 bne 0 ,usb0_force_stall -0x4998 018309 fetch 1 ,mem_usb0_state -0x4999 018310 beq dev_configured ,usb0_request_get_cfg_dev_cfg -0x499a 018311 beq dev_address ,usb0_request_get_cfg_dev_addr -0x499b 018312 branch usb0_force_stall -: 018314 usb0_request_get_cfg_dev_cfg: -0x499c 018315 arg 1 ,regb -0x499d 018316 branch usb_send_ones_packet -: 018318 usb0_request_get_cfg_dev_addr: -0x499e 018319 arg 1 ,regb -0x499f 018320 branch usb_send_zero_packet -: 018322 usb0_request_get_descriptor: -0x49a0 018323 bpatch patch1f_1 ,mem_patch1f -0x49a1 018324 set0 mark_isstr ,mark -0x49a2 018325 fetch 1 ,mem_usb_setup_bvalueh -0x49a3 018326 beq dsc_device ,dsc_device_info -0x49a4 018327 beq dsc_config ,dsc_config_info -0x49a5 018328 beq dsc_string ,dsc_string_info -0x49a6 018329 beq dsc_hid ,dsc_hid_info -0x49a7 018330 beq dsc_hid_report ,dsc_hid_report_info -0x49a8 018331 branch usb0_force_stall -: 018333 dsc_hid_info: -0x49a9 018334 jam 0 ,mem_usb_get_protocol_flag -0x49aa 018335 fetch 1 ,mem_usb_setup_windex -0x49ab 018336 beq 0 ,dsc_hid_info_interface0 -0x49ac 018337 beq 1 ,dsc_hid_info_interface1 -0x49ad 018338 branch usb0_force_stall -: 018340 dsc_hid_info_interface0: -0x49ae 018341 arg mem_confdesc + 19 ,rega -0x49af 018342 ifetch 1 ,rega -0x49b0 018343 iforce regb -0x49b1 018344 branch usb0_respond -: 018346 dsc_hid_info_interface1: -0x49b2 018347 arg mem_confdesc + 44 ,rega -0x49b3 018348 ifetch 1 ,rega -0x49b4 018349 iforce regb -0x49b5 018350 branch usb0_respond -: 018352 dsc_device_info: -0x49b6 018356 fetch 1 ,mem_usb_set_high_addr_flag -0x49b7 018357 ncall usb_set_high_addr ,blank -0x49b8 018358 setarg mem_devicedesc -0x49b9 018359 fetcht 1 ,mem_devicedesc -: 018360 dsc_info_set_data_len: -0x49ba 018361 store 2 ,mem_dsc_info_data_pointer -0x49bb 018362 storet 1 ,mem_dsc_info_len -0x49bc 018363 fetch 1 ,mem_usb_setup_blength -0x49bd 018364 isub temp ,null -0x49be 018365 nbranch dsc_info_set_current_data_len ,positive -: 018366 dsc_info_set_initial_data_len: -0x49bf 018367 fetch 1 ,mem_dsc_info_len -: 018368 dsc_info_set_data_size_completed: -0x49c0 018369 iforce regb -0x49c1 018370 fetch 2 ,mem_dsc_info_data_pointer -0x49c2 018371 add pdata ,1 ,pdata -0x49c3 018372 iforce rega -0x49c4 018373 branch usb0_respond -: 018374 dsc_info_set_current_data_len: -0x49c5 018375 fetch 1 ,mem_usb_setup_blength -0x49c6 018376 branch dsc_info_set_data_size_completed -: 018378 usb_set_high_addr: -0x49c7 018379 hfetch 1 ,core_usb_addr -0x49c8 018380 ncall usb0_set_addr ,blank -0x49c9 018381 jam 0 ,mem_usb_set_high_addr_flag -0x49ca 018382 rtn -: 018383 usb0_set_addr: -0x49cb 018384 hfetch 1 ,core_usb_addr -0x49cc 018385 set1 7 ,pdata -0x49cd 018386 hstore 1 ,core_usb_addr -0x49ce 018387 rtn -: 018389 dsc_config_info: -0x49cf 018390 setarg mem_confdesc -0x49d0 018391 fetcht 1 ,mem_confdesc -0x49d1 018392 branch dsc_info_set_data_len -: 018394 dsc_string_info: -0x49d2 018395 fetch 1 ,mem_usb_setup_bvalue -0x49d3 018396 sub pdata ,3 ,null -0x49d4 018397 nbranch usb0_force_stall ,positive -0x49d5 018398 fetch 1 ,mem_usb_setup_bvalue -0x49d6 018399 arg mem_string0 ,rega -0x49d7 018400 beq 0 ,usb0_respond_length -0x49d8 018401 set1 mark_isstr ,mark -0x49d9 018402 arg mem_string1 ,rega -0x49da 018403 beq 1 ,usb0_respond_length -0x49db 018404 arg mem_string2 ,rega -0x49dc 018405 beq 2 ,usb0_respond_length -0x49dd 018406 arg mem_string3 ,rega -0x49de 018407 beq 3 ,usb0_respond_length -0x49df 018408 rtn -: 018410 dsc_hid_report_info: -0x49e0 018411 fetch 2 ,mem_usb_setup_windex -0x49e1 018412 beq 1 ,dsc_hid_report_info0 -0x49e2 018413 fetch 2 ,mem_hidreportdesc_kb -0x49e3 018414 copy pdata ,rega -0x49e4 018416 branch usb0_respond_length -: 018417 dsc_hid_report_info0: -0x49e5 018418 jam 1 ,mem_usb_device_enumeration_endflag -0x49e6 018419 jam usb_got_report_req ,mem_usb_state -0x49e7 018420 fetch 2 ,mem_hidreportdesc_m -0x49e8 018421 copy pdata ,rega -0x49e9 018423 branch usb0_respond_length -: 018426 usb0_request_get_interface: -0x49ea 018427 fetch 1 ,mem_usb0_state -0x49eb 018428 bne dev_configured ,usb0_force_stall -0x49ec 018429 fetch 1 ,mem_usb_setup_bmrequesttype -0x49ed 018430 bne in_interface ,usb0_force_stall -0x49ee 018431 fetch 1 ,mem_usb_setup_bvalue -0x49ef 018432 bne 0 ,usb0_force_stall -0x49f0 018433 fetch 1 ,mem_usb_setup_bvalueh -0x49f1 018434 bne 0 ,usb0_force_stall -0x49f2 018435 fetch 1 ,mem_usb_setup_blength -0x49f3 018436 bne 1 ,usb0_force_stall -0x49f4 018437 fetch 1 ,mem_usb_setup_blengthh -0x49f5 018438 bne 0 ,usb0_force_stall -0x49f6 018439 fetch 1 ,mem_usb_setup_windex -0x49f7 018440 bne 0 ,usb0_force_stall -0x49f8 018441 fetch 1 ,mem_usb_setup_windex + 1 -0x49f9 018442 bne 0 ,usb0_force_stall -0x49fa 018443 arg 1 ,regb -0x49fb 018444 branch usb_send_zero_packet -: 018447 usb0_request_get_status: -0x49fc 018448 fetch 1 ,mem_usb0_state -0x49fd 018449 beq dev_default ,usb0_force_stall -0x49fe 018450 fetch 1 ,mem_usb_setup_bvalue -0x49ff 018451 bne 0 ,usb0_force_stall -0x4a00 018452 fetch 1 ,mem_usb_setup_bvalueh -0x4a01 018453 bne 0 ,usb0_force_stall -0x4a02 018454 fetch 1 ,mem_usb_setup_blength -0x4a03 018455 bne 2 ,usb0_force_stall -0x4a04 018456 fetch 1 ,mem_usb_setup_blengthh -0x4a05 018457 bne 0 ,usb0_force_stall -0x4a06 018458 fetch 1 ,mem_usb_setup_windex + 1 -0x4a07 018459 bne 0 ,usb0_force_stall -0x4a08 018460 fetch 1 ,mem_usb_setup_bmrequesttype -0x4a09 018461 beq in_device ,usb0_get_status_in_device -0x4a0a 018462 beq in_interface ,usb0_get_status_in_interface -0x4a0b 018463 beq in_endpoint ,usb0_get_status_in_endpoint -0x4a0c 018464 branch usb0_force_stall -: 018466 usb0_get_status_in_device: -0x4a0d 018467 fetch 1 ,mem_usb_setup_windex -0x4a0e 018468 bne 0 ,usb0_force_stall -0x4a0f 018469 arg 2 ,regb -0x4a10 018470 fetch 1 ,mem_usb_remote_wakeup -0x4a11 018471 beq 0x01 ,usb_send_two_packet -: 018473 usb_send_zero_packet: -0x4a12 018474 arg mem_usb_zero_packet ,rega -0x4a13 018475 branch usb0_respond -: 018476 usb_send_ones_packet: -0x4a14 018477 arg mem_usb_ones_packet ,rega -0x4a15 018478 branch usb0_respond -: 018479 usb_send_two_packet: -0x4a16 018480 arg mem_usb_two_packet ,rega -0x4a17 018481 branch usb0_respond -: 018483 usb0_get_status_in_interface: -0x4a18 018484 fetch 1 ,mem_usb0_state -0x4a19 018485 bne dev_configured ,usb0_force_stall -0x4a1a 018486 arg 2 ,regb -0x4a1b 018487 branch usb_send_zero_packet -: 018489 usb0_get_status_in_endpoint: -0x4a1c 018490 fetch 1 ,mem_usb0_state -0x4a1d 018491 bne dev_configured ,usb0_force_stall -0x4a1e 018492 fetch 1 ,mem_usb_setup_windex -0x4a1f 018493 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 -0x4a20 018494 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 -0x4a21 018495 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 -0x4a22 018496 and_into 0x7f ,pdata -0x4a23 018497 beq 0x00 ,usb0_get_status_in_ep_in_ep0 -0x4a24 018498 branch usb0_force_stall -: 018500 usb0_get_status_in_ep_in_ep0: -0x4a25 018501 fetch 1 ,mem_usb_ep0_stall_status -: 018502 usb0_get_status_in_ep_in_ack: -0x4a26 018503 arg 2 ,regb -0x4a27 018504 beq 1 ,usb_send_ones_packet -0x4a28 018505 branch usb_send_zero_packet -: 018506 usb0_get_status_in_ep_in_ep1: -0x4a29 018507 fetch 1 ,mem_usb_ep1_stall_status -0x4a2a 018508 branch usb0_get_status_in_ep_in_ack -: 018509 usb0_get_status_in_ep_in_ep2: -0x4a2b 018510 fetch 1 ,mem_usb_ep2_stall_status -0x4a2c 018511 branch usb0_get_status_in_ep_in_ack -: 018512 usb0_get_status_in_ep_in_ep3: -0x4a2d 018513 fetch 1 ,mem_usb_ep3_stall_status -0x4a2e 018514 branch usb0_get_status_in_ep_in_ack -: 018516 usb_get_idle: -0x4a2f 018517 jam 1 ,mem_usb_idle_flag -0x4a30 018518 arg mem_usb_idle_rate ,rega -0x4a31 018519 arg 1 ,regb -0x4a32 018520 branch usb0_respond -: 018522 usb_get_report: -0x4a33 018523 fetch 2 ,mem_usb_setup_bvalue -0x4a34 018524 arg pc_get_report ,temp -0x4a35 018525 isub temp ,null -0x4a36 018526 nbranch usb0_force_stall ,zero -0x4a37 018527 set0 mark_isstr ,mark -: 018528 usb_get_report_dispose: -0x4a38 018529 fetch 1 ,mem_usb0_data_ready_report -0x4a39 018530 nbranch usb_get_report_data_success ,blank -0x4a3a 018531 jam pc_get_nondata ,mem_usb0_get_report_data -: 018532 usb_get_report_send_data: -0x4a3b 018533 fetch 1 ,mem_usb_setup_blength -0x4a3c 018534 iforce regb -0x4a3d 018535 arg mem_usb0_get_report_data ,rega -0x4a3e 018536 call usb0_respond -: 018537 usb_get_report_data_release: -0x4a3f 018538 arg mem_usb0_get_report_data ,contw -0x4a40 018539 arg 8 ,loopcnt -0x4a41 018540 branch memset0 -: 018541 usb_get_report_data_success: -0x4a42 018542 jam 0 ,mem_usb0_data_ready_report -0x4a43 018543 jam pc_get_data ,mem_usb0_get_report_data -0x4a44 018544 branch usb_get_report_send_data -: 018546 usb_get_protocol_req: -0x4a45 018547 fetch 1 ,mem_usb_setup_blength -0x4a46 018548 bne 1 ,usb0_force_stall -0x4a47 018549 jam 1 ,mem_usb_get_protocol_flag -0x4a48 018550 arg 1 ,regb -0x4a49 018551 fetch 1 ,mem_usb_set_protocol_value -0x4a4a 018552 beq 0 ,usb_get_report_protocol -0x4a4b 018553 beq 1 ,usb_get_boot_protocol -0x4a4c 018554 branch usb_send_zero_packet -: 018555 usb_get_report_protocol: -0x4a4d 018556 branch usb_send_ones_packet -: 018557 usb_get_boot_protocol: -0x4a4e 018558 branch usb_send_zero_packet -: 018563 usb0_request_clear_feature: -0x4a4f 018564 fetch 1 ,mem_usb0_state -0x4a50 018565 bne dev_configured ,usb0_force_stall -0x4a51 018566 fetch 1 ,mem_usb_setup_blength -0x4a52 018567 bne 0 ,usb0_force_stall -0x4a53 018568 fetch 1 ,mem_usb_setup_blengthh -0x4a54 018569 bne 0 ,usb0_force_stall -0x4a55 018570 fetch 1 ,mem_usb_setup_bvalueh -0x4a56 018571 bne 0 ,usb0_force_stall -0x4a57 018572 fetch 1 ,mem_usb_setup_windex + 1 -0x4a58 018573 bne 0 ,usb0_force_stall -0x4a59 018574 fetch 1 ,mem_usb_setup_bmrequesttype -0x4a5a 018575 beq out_device ,usb0_request_clear_feature_out_device -0x4a5b 018576 beq out_interface ,usb0_request_clear_feature_out_interface -0x4a5c 018577 beq out_endpoint ,usb0_request_clear_feature_out_endpoint -0x4a5d 018578 branch usb0_force_stall -: 018580 usb0_request_clear_feature_out_device: -0x4a5e 018581 fetch 1 ,mem_usb_setup_bvalue -0x4a5f 018582 bne device_remote_wakeup ,usb0_force_stall -0x4a60 018583 hfetch 1 ,core_usb_config -0x4a61 018584 set0 7 ,pdata -0x4a62 018585 hstore 1 ,core_usb_config -0x4a63 018586 jam 0 ,mem_usb_remote_wakeup -0x4a64 018587 jam 1 ,mem_usb_clear_remote_wakeup -0x4a65 018588 branch usb0_reply_zerolen -: 018590 usb0_request_clear_feature_out_interface: -0x4a66 018591 branch usb0_force_stall -: 018593 usb0_request_clear_feature_out_endpoint: -0x4a67 018594 fetch 1 ,mem_usb_setup_bvalue -0x4a68 018595 bne endpoint_halt ,usb0_force_stall -0x4a69 018596 fetch 1 ,mem_usb_setup_windex -0x4a6a 018597 beq in_ep1 ,usb0_force_stall_ep1_in_off -0x4a6b 018598 beq in_ep2 ,usb0_force_stall_ep2_in_off -0x4a6c 018599 beq in_ep3 ,usb0_force_stall_ep3_in_off -0x4a6d 018600 and_into 0x7f ,pdata -0x4a6e 018601 beq 0x00 ,usb0_force_stall_ep0_in_off -0x4a6f 018602 branch usb0_force_stall -: 018604 usb0_force_stall_ep0_in_off: -0x4a70 018605 jam 0 ,mem_usb_ep0_stall_status -0x4a71 018606 branch usb0_reply_zerolen -: 018607 usb0_force_stall_ep1_in_off: -0x4a72 018608 jam 0 ,mem_usb_ep1_stall_status -: 018609 usb0_force_stall_ep1_in_off_reply: -0x4a73 018610 jam 1 ,mem_usb_clear_halt -0x4a74 018611 branch usb0_reply_zerolen -: 018612 usb0_force_stall_ep2_in_off: -0x4a75 018613 jam 0 ,mem_usb_ep2_stall_status -0x4a76 018614 branch usb0_force_stall_ep1_in_off_reply -: 018615 usb0_force_stall_ep3_in_off: -0x4a77 018616 jam 0 ,mem_usb_ep3_stall_status -0x4a78 018617 branch usb0_force_stall_ep1_in_off_reply -: 018620 usb0_request_set_feature: -0x4a79 018621 fetch 1 ,mem_usb_setup_blength -0x4a7a 018622 bne 0 ,usb0_force_stall -0x4a7b 018623 fetch 1 ,mem_usb_setup_blengthh -0x4a7c 018624 bne 0 ,usb0_force_stall -0x4a7d 018625 fetch 1 ,mem_usb_setup_bmrequesttype -0x4a7e 018626 beq out_device ,usb0_request_set_feature_out_device -0x4a7f 018627 beq out_interface ,usb0_request_set_feature_out_interface -0x4a80 018628 beq out_endpoint ,usb0_request_set_feature_out_endpoint -0x4a81 018629 branch usb0_force_stall -: 018631 usb0_request_set_feature_out_device: -0x4a82 018632 fetch 1 ,mem_usb_setup_bvalue -0x4a83 018633 bne device_remote_wakeup ,usb0_force_stall -0x4a84 018634 hfetch 1 ,core_usb_config -0x4a85 018635 set1 7 ,pdata -0x4a86 018636 hstore 1 ,core_usb_config -0x4a87 018637 jam 1 ,mem_usb_remote_wakeup -0x4a88 018638 jam usb_sleep ,mem_usb_state -0x4a89 018639 jam 0 ,mem_usb_tx_win_enable -0x4a8a 018640 call usb0_reply_zerolen -: 018641 usb_wakeup_timer_reinit: -0x4a8b 018642 call timer_reinit -0x4a8c 018643 setarg timer_wakeup_delay -0x4a8d 018644 arg timer_wakeup ,queue -0x4a8e 018645 branch timer_init -: 018647 usb0_request_set_feature_out_interface: -0x4a8f 018648 branch usb0_force_stall -: 018650 usb0_request_set_feature_out_endpoint: -0x4a90 018651 fetch 1 ,mem_usb_setup_bvalue -0x4a91 018652 bne endpoint_halt ,usb0_force_stall -0x4a92 018653 fetch 1 ,mem_usb_setup_bvalueh -0x4a93 018654 bne 0 ,usb0_force_stall -0x4a94 018655 fetch 1 ,mem_usb_setup_windex -0x4a95 018656 beq in_ep1 ,usb0_force_stall_ep1_in_on -0x4a96 018657 beq in_ep2 ,usb0_force_stall_ep2_in_on -0x4a97 018658 beq in_ep3 ,usb0_force_stall_ep3_in_on -0x4a98 018659 and_into 0x7f ,pdata -0x4a99 018660 beq 0x00 ,usb0_force_stall_ep0_in_on -0x4a9a 018661 branch usb0_force_stall -: 018663 usb0_force_stall_ep0_in_on: -0x4a9b 018664 jam 1 ,mem_usb_ep0_stall_status -0x4a9c 018665 branch usb0_reply_zerolen -: 018666 usb0_force_stall_ep1_in_on: -0x4a9d 018667 jam 1 ,mem_usb_ep1_stall_status -0x4a9e 018668 branch usb0_reply_zerolen -: 018669 usb0_force_stall_ep2_in_on: -0x4a9f 018670 jam 1 ,mem_usb_ep2_stall_status -0x4aa0 018671 branch usb0_reply_zerolen -: 018672 usb0_force_stall_ep3_in_on: -0x4aa1 018673 jam 1 ,mem_usb_ep3_stall_status -0x4aa2 018674 branch usb0_reply_zerolen -: 018677 usb0_request_set_address: -0x4aa3 018678 fetch 1 ,mem_usb_setup_bmrequesttype -0x4aa4 018679 bne out_device ,usb0_force_stall -0x4aa5 018680 fetch 1 ,mem_usb_setup_windex -0x4aa6 018681 bne 0 ,usb0_force_stall -0x4aa7 018682 fetch 1 ,mem_usb_setup_windex + 1 -0x4aa8 018683 bne 0 ,usb0_force_stall -0x4aa9 018684 fetch 1 ,mem_usb_setup_blength -0x4aaa 018685 bne 0 ,usb0_force_stall -0x4aab 018686 fetch 1 ,mem_usb_setup_blengthh -0x4aac 018687 bne 0 ,usb0_force_stall -0x4aad 018688 fetch 1 ,mem_usb_setup_bvalueh -0x4aae 018689 bne 0 ,usb0_force_stall -0x4aaf 018690 fetch 1 ,mem_usb_setup_bvalue -0x4ab0 018691 and_into 0x80 ,pdata -0x4ab1 018692 bne 0 ,usb0_force_stall -0x4ab2 018693 fetch 1 ,mem_usb_setup_bvalue -0x4ab3 018694 bne 0 ,usb_usb0_state_set_dev_addr -: 018695 usb_usb0_state_set_dev_default: -0x4ab4 018696 jam dev_default ,mem_usb0_state -: 018697 usb0_request_set_wait_address: -0x4ab5 018698 fetch 1 ,mem_usb_setup_bvalue -0x4ab6 018699 hstore 1 ,core_usb_addr -0x4ab7 018700 call usb0_reply_zerolen -0x4ab8 018701 jam 1 ,mem_usb_set_high_addr_flag -0x4ab9 018702 rtn -: 018703 usb_usb0_state_set_dev_addr: -0x4aba 018704 jam dev_address ,mem_usb0_state -0x4abb 018705 branch usb0_request_set_wait_address -: 018708 usb0_request_set_configuration: -0x4abc 018709 fetch 1 ,mem_usb0_state -0x4abd 018710 beq dev_default ,usb0_force_stall -0x4abe 018711 fetch 1 ,mem_usb_setup_bmrequesttype -0x4abf 018712 bne out_device ,usb0_force_stall -0x4ac0 018713 fetch 1 ,mem_usb_setup_windex -0x4ac1 018714 bne 0 ,usb0_force_stall -0x4ac2 018715 fetch 1 ,mem_usb_setup_windex + 1 -0x4ac3 018716 bne 0 ,usb0_force_stall -0x4ac4 018717 fetch 1 ,mem_usb_setup_blength -0x4ac5 018718 bne 0 ,usb0_force_stall -0x4ac6 018719 fetch 1 ,mem_usb_setup_blengthh -0x4ac7 018720 bne 0 ,usb0_force_stall -0x4ac8 018721 fetch 1 ,mem_usb_setup_bvalue + 1 -0x4ac9 018722 bne 0 ,usb0_force_stall -0x4aca 018723 fetch 1 ,mem_usb_setup_bvalue -0x4acb 018724 sub pdata ,usb_max_num_cfg ,null -0x4acc 018725 nbranch usb0_force_stall ,positive -0x4acd 018726 fetch 1 ,mem_usb0_state -0x4ace 018727 beq dev_address ,usb0_request_set_cfg_addr_state -0x4acf 018728 beq dev_configured ,usb0_request_set_cfg_cfg_state -0x4ad0 018729 branch usb0_force_stall -: 018731 usb0_request_set_cfg_addr_state: -: 018732 usb0_request_set_cfg_cfg_state: -0x4ad1 018733 fetch 1 ,mem_usb_setup_bvalue -0x4ad2 018734 beq 0 ,usb0_request_set_cfg_stay_addr_state -0x4ad3 018735 jam dev_configured ,mem_usb0_state -0x4ad4 018736 branch usb0_reply_zerolen -: 018737 usb0_request_set_cfg_stay_addr_state: -0x4ad5 018738 jam dev_address ,mem_usb0_state -0x4ad6 018739 branch usb0_reply_zerolen -: 018742 usb0_request_set_interface: -0x4ad7 018743 fetch 1 ,mem_usb0_state -0x4ad8 018744 bne dev_configured ,usb0_force_stall -0x4ad9 018745 fetch 1 ,mem_usb_setup_bmrequesttype -0x4ada 018746 bne out_interface ,usb0_force_stall -0x4adb 018747 fetch 1 ,mem_usb_setup_bvalue -0x4adc 018748 bne 0 ,usb0_force_stall -0x4add 018749 fetch 1 ,mem_usb_setup_bvalueh -0x4ade 018750 bne 0 ,usb0_force_stall -0x4adf 018751 fetch 1 ,mem_usb_setup_blength -0x4ae0 018752 bne 0 ,usb0_force_stall -0x4ae1 018753 fetch 1 ,mem_usb_setup_blengthh -0x4ae2 018754 bne 0 ,usb0_force_stall -0x4ae3 018755 fetch 1 ,mem_usb_setup_windex -0x4ae4 018756 bne 0 ,usb0_force_stall -0x4ae5 018757 fetch 1 ,mem_usb_setup_windex + 1 -0x4ae6 018758 bne 0 ,usb0_force_stall -0x4ae7 018759 branch usb0_reply_zerolen -: 018762 usb_set_idle: -0x4ae8 018763 jam 1 ,mem_usb_idle_flag -0x4ae9 018764 fetch 1 ,mem_usb_setup_bvalueh -0x4aea 018765 store 1 ,mem_usb_idle_rate -0x4aeb 018766 fetch 1 ,mem_usb_setup_windex -0x4aec 018767 sub pdata ,1 ,null -0x4aed 018768 call usb_clear_remote_wakeup_set0 ,zero -0x4aee 018769 fetch 1 ,mem_usb_state -0x4aef 018770 bne usb_resume ,usb0_reply_zerolen -0x4af0 018771 jam usb_connected ,mem_usb_state -0x4af1 018772 call usb0_reply_zerolen -0x4af2 018773 nop 30000 -0x4af3 018774 nop 30000 -0x4af4 018775 rtn -: 018776 usb_clear_remote_wakeup_set0: -0x4af5 018777 jam 1 ,mem_usb_device_enumeration_endflag -0x4af6 018778 jam 0 ,mem_usb_clear_remote_wakeup -0x4af7 018779 jam usb_resume ,mem_usb_state -0x4af8 018780 rtn -: 018783 usb_set_report: -0x4af9 018784 jam 1 ,mem_usb0_get_set_report -0x4afa 018785 call usb_set_report_resume_judge -0x4afb 018786 fetch 2 ,mem_usb_setup_bvalue -0x4afc 018787 store 2 ,mem_usb_setup_bvalue_temp -0x4afd 018788 fetch 1 ,mem_usb_setup_blength -0x4afe 018789 iforce loopcnt -0x4aff 018790 arg mem_usb0_setup ,contr -0x4b00 018791 arg mem_usb0_set_report_data ,contw -0x4b01 018792 call memcpy -0x4b02 018793 branch usb0_reply_zerolen -: 018795 usb_set_report_resume_judge: -0x4b03 018796 fetch 2 ,mem_usb_setup_bvalue -0x4b04 018797 arg pc_set_report_bvalue ,temp -0x4b05 018798 isub temp ,null -0x4b06 018799 nrtn zero -0x4b07 018800 fetch 2 ,mem_usb_setup_windex -0x4b08 018801 arg pc_set_report_windex ,temp -0x4b09 018802 isub temp ,null -0x4b0a 018803 nrtn zero -0x4b0b 018804 fetch 2 ,mem_usb_setup_blength -0x4b0c 018805 arg pc_set_report_blength ,temp -0x4b0d 018806 isub temp ,null -0x4b0e 018807 nrtn zero -0x4b0f 018808 jam 1 ,mem_usb_tx_win_enable -0x4b10 018809 rtn -: 018812 usb_set_protocol_req: -0x4b11 018813 fetch 1 ,mem_usb_setup_blength -0x4b12 018814 bne 0 ,usb0_force_stall -0x4b13 018815 fetch 1 ,mem_usb_setup_bvalue -0x4b14 018816 beq boot_protocol ,usb_set_boot_protocol -0x4b15 018817 beq report_protocol ,usb_set_report_protocol -0x4b16 018818 branch usb0_force_stall -: 018819 usb_set_boot_protocol: -0x4b17 018820 jam 0 ,mem_usb_set_protocol_status -0x4b18 018821 jam 1 ,mem_usb_set_protocol_value -0x4b19 018822 branch usb0_reply_zerolen -: 018823 usb_set_report_protocol: -0x4b1a 018824 jam 1 ,mem_usb_tx_mac_enable -0x4b1b 018825 jam 1 ,mem_usb_set_protocol_status -0x4b1c 018826 jam 0 ,mem_usb_set_protocol_value -0x4b1d 018827 branch usb0_reply_zerolen -: 018830 usb0_respond_length: -0x4b1e 018831 ifetch 1 ,rega -0x4b1f 018832 iforce regb -0x4b20 018833 increase 1 ,rega -: 018835 usb0_respond: -0x4b21 018836 bpatch patch1f_2 ,mem_patch1f -0x4b22 018837 bmark0 mark_isstr ,usb0_respond0 -0x4b23 018838 add regb ,1 ,pdata -0x4b24 018839 lshift pdata ,pdata -0x4b25 018840 hstore 1 ,core_usb_dfifo0 -0x4b26 018841 jam 3 ,core_usb_dfifo0 -0x4b27 018842 fetch 1 ,mem_usb_setup_blength -0x4b28 018843 increase -2 ,pdata -0x4b29 018844 rshift pdata ,pdata -0x4b2a 018845 store 1 ,mem_usb_setup_blength -0x4b2b 018846 beq 0 ,usb_no_respond_data -: 018847 usb0_respond0: -0x4b2c 018848 fetch 2 ,mem_usb_setup_blength -0x4b2d 018849 isub regb ,null -0x4b2e 018850 branch usb0_respond1 ,positive -0x4b2f 018851 copy pdata ,regb -: 018852 usb0_respond1: -0x4b30 018853 deposit rega -0x4b31 018854 store 2 ,mem_bufptr -0x4b32 018855 deposit regb -0x4b33 018856 store 1 ,mem_remain -0x4b34 018857 branch usb0_tx -: 018859 usb_no_respond_data: -0x4b35 018860 arg 0 ,queue -0x4b36 018861 branch usb_trig -: 018864 usb0_tx: -0x4b37 018865 bpatch patch1f_3 ,mem_patch1f -0x4b38 018866 fetch 1 ,mem_remain -0x4b39 018867 rtn blank -0x4b3a 018868 copy pdata ,loopcnt -0x4b3b 018869 sub pdata ,ep0_packet_size ,null -0x4b3c 018870 branch usb0_tx_info ,positive -0x4b3d 018871 arg ep0_packet_size ,loopcnt -: 018872 usb0_tx_info: -0x4b3e 018873 fetch 1 ,mem_remain -0x4b3f 018874 isub loopcnt ,pdata -0x4b40 018875 store 1 ,mem_remain -0x4b41 018876 fetch 2 ,mem_bufptr -0x4b42 018877 copy pdata ,contr -: 018878 usb0_tx0: -0x4b43 018879 ifetch 1 ,contr -0x4b44 018880 hstore 1 ,core_usb_dfifo0 -0x4b45 018881 bmark0 mark_isstr ,usb0_tx1 -0x4b46 018882 jam 0 ,core_usb_dfifo0 -: 018883 usb0_tx1: -0x4b47 018884 loop usb0_tx0 -0x4b48 018885 copy contr ,pdata -0x4b49 018886 store 2 ,mem_bufptr -0x4b4a 018887 arg 0 ,queue -0x4b4b 018888 call usb_trig -0x4b4c 018889 fetch 1 ,mem_remain -0x4b4d 018890 nrtn blank -0x4b4e 018891 fetch 1 ,mem_usb_state -0x4b4f 018892 rtnne usb_got_report_req -0x4b50 018893 jam usb_connected ,mem_usb_state -0x4b51 018894 rtn -: 018897 usb_tx_ep1: -0x4b52 018898 arg core_usb_dfifo1 ,rega -0x4b53 018899 arg 1 ,queue -: 018900 usb_tx_loop: -0x4b54 018901 ifetch 1 ,contr -0x4b55 018902 istore 1 ,rega -0x4b56 018903 loop usb_tx_loop -: 018904 usb_trig: -0x4b57 018905 setarg 0 -0x4b58 018906 qset1 pdata -0x4b59 018907 hstore 1 ,core_usb_trig -0x4b5a 018908 fetcht 1 ,mem_usb_tx_wait -0x4b5b 018909 ior temp ,pdata -0x4b5c 018910 store 1 ,mem_usb_tx_wait -0x4b5d 018911 rtn -: 018913 usb_tx_ep2: -0x4b5e 018914 arg 2 ,queue -0x4b5f 018915 arg core_usb_dfifo2 ,rega -0x4b60 018916 branch usb_tx_loop -: 018918 usb_tx: -0x4b61 018919 bpatch patch1f_4 ,mem_patch1f -0x4b62 018920 fetch 1 ,mem_usb_tx_enable -0x4b63 018921 rtn blank -0x4b64 018922 fetch 1 ,mem_usb_tx_wait -0x4b65 018923 nbranch usb_inwake_state_tx_dispose ,blank -0x4b66 018924 fetch 1 ,mem_usb_device_enumeration_endflag -0x4b67 018925 branch usb_tx_fifo_release ,blank -0x4b68 018926 fetch 1 ,mem_usb_state -0x4b69 018927 beq usb_sleep ,usb_windows_wakeup -0x4b6a 018928 bne usb_connected ,usb_tx_fifo_release -0x4b6b 018929 fetch 1 ,mem_usb_clear_remote_wakeup -0x4b6c 018930 nbranch usb_tx_fifo_release ,blank -0x4b6d 018931 call usb_tx_data_ep1 -0x4b6e 018932 branch usb_tx_data_ep2 -: 018934 usb_tx_data_ep1: -0x4b6f 018935 fetch 1 ,mem_usb_tx_enable -0x4b70 018936 rtnbit0 1 -0x4b71 018937 fetch 1 ,mem_usb_tx_wait -0x4b72 018938 rtnbit1 1 -0x4b73 018939 fetch 1 ,mem_usb_tx_enable -0x4b74 018940 set0 1 ,pdata -0x4b75 018941 store 1 ,mem_usb_tx_enable -0x4b76 018942 fetch 1 ,mem_usb_ep1_data -0x4b77 018943 rtn blank -0x4b78 018944 beq usb_ep1_kb ,usb_tx_kb_normal_data -0x4b79 018945 branch assert -: 018947 usb_tx_data_ep2: -0x4b7a 018948 fetch 1 ,mem_usb_tx_enable -0x4b7b 018949 rtnbit0 2 -0x4b7c 018950 fetch 1 ,mem_usb_tx_wait -0x4b7d 018951 rtnbit1 2 -0x4b7e 018952 fetch 1 ,mem_usb_tx_enable -0x4b7f 018953 set0 2 ,pdata -0x4b80 018954 store 1 ,mem_usb_tx_enable -0x4b81 018955 fetch 1 ,mem_usb_ep2_data -0x4b82 018956 rtn blank -0x4b83 018957 beq usb_ep2_ms ,usb_tx_ms_data -0x4b84 018958 beq usb_ep2_multikey ,usb_tx_kb_multikey_data -0x4b85 018959 branch assert -: 018961 usb_tx_fifo_release: -0x4b86 018963 arg mem_usb_mouse_data ,contw -0x4b87 018964 arg 6 ,loopcnt -0x4b88 018965 branch memset0 -: 018967 usb_tx_ms_data: -0x4b89 018968 fetch 1 ,mem_usb_idle_flag -0x4b8a 018969 fetcht 1 ,mem_usb_get_protocol_flag -0x4b8b 018970 iand temp ,pdata -0x4b8c 018971 branch usb_tx_ms_data_normal_mode ,blank -0x4b8d 018972 fetcht 1 ,mem_usb_set_protocol_status -0x4b8e 018973 iadd temp ,pdata -0x4b8f 018974 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode -0x4b90 018975 branch usb_tx_ms_data_normal_mode -: 018977 usb_tx_ms_data_mac_boot_mode: -0x4b91 018978 jam 0 ,mem_usb_ep2_data -: 018979 usb_tx_ms_data_mac_boot_regroup: -0x4b92 018980 fetch 1 ,mem_usb_mouse_data + 1 -0x4b93 018981 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey -0x4b94 018982 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey -0x4b95 018983 fetch 1 ,mem_usb_mouse_data + 1 -0x4b96 018984 store 1 ,mem_usb_mouse_data -0x4b97 018985 fetch 1 ,mem_usb_mouse_data + 2 -0x4b98 018986 istore 1 ,contw -0x4b99 018987 fetch 1 ,mem_usb_mouse_data + 4 -0x4b9a 018988 istore 1 ,contw -0x4b9b 018989 fetch 1 ,mem_usb_mouse_data + 6 -0x4b9c 018990 istore 1 ,contw -0x4b9d 018991 arg 4 ,loopcnt -0x4b9e 018992 arg mem_usb_mouse_data ,contr -0x4b9f 018993 branch usb_tx_ep2 -: 018995 usb_tx_ms_data_normal_mode: -0x4ba0 018996 jam 0 ,mem_usb_ep2_data -: 018997 usb_tx_mac_boot_ms_regroup_r_or_lrkey: -0x4ba1 018998 arg 8 ,loopcnt -0x4ba2 018999 arg mem_usb_mouse_data ,contr -0x4ba3 019000 branch usb_tx_ep2 -: 019002 usb_tx_kb_multikey_data: -0x4ba4 019003 jam 0 ,mem_usb_ep2_data -0x4ba5 019004 arg 3 ,loopcnt -0x4ba6 019005 arg mem_usb_kb_multikey ,contr -0x4ba7 019006 branch usb_tx_ep2 -: 019008 usb_tx_kb_normal_data: -0x4ba8 019009 jam 0 ,mem_usb_ep1_data -0x4ba9 019010 arg 8 ,loopcnt -0x4baa 019011 arg mem_usb_kb_data ,contr -0x4bab 019012 branch usb_tx_ep1 -: 019014 usb_inwake_state_tx_dispose: -0x4bac 019015 fetch 1 ,mem_usb_state -0x4bad 019016 beq usb_sleep ,usb_clear_tx_wait -0x4bae 019017 beq usb_connected ,usb_mac_wakeup_trig -0x4baf 019018 rtn -: 019019 usb_clear_tx_wait: -0x4bb0 019020 jam 0 ,mem_usb_tx_wait -0x4bb1 019021 rtn -: 019022 usb_mac_wakeup_trig: -0x4bb2 019023 hfetch 1 ,core_usb_config -0x4bb3 019024 set1 7 ,pdata -0x4bb4 019025 hstore 1 ,core_usb_config -0x4bb5 019026 jam 1 ,mem_usb_mac_wakeup_trig -0x4bb6 019027 rtn -: 019029 usb_mac_wakeup_judge: -0x4bb7 019030 fetch 1 ,mem_usb_state -0x4bb8 019031 rtneq usb_sleep -0x4bb9 019032 beq usb_connected ,usb_mac_wakeup -0x4bba 019033 rtn -: 019034 usb_mac_wakeup: -0x4bbb 019035 fetch 1 ,mem_usb_mac_wakeup_trig -0x4bbc 019036 rtn blank -0x4bbd 019037 jam 1 ,mem_usb_wakestate_onetime_flag -0x4bbe 019038 branch usb_wakeup -: 019040 usb_windows_wakeup: -0x4bbf 019041 arg timer_wakeup ,queue -0x4bc0 019042 call timer_check -0x4bc1 019043 nrtn blank -: 019044 usb_wakeup: -0x4bc2 019045 hfetch 1 ,core_usb_config -0x4bc3 019046 rtnbit0 7 -0x4bc4 019047 jam 0xfc ,core_usb_config -0x4bc5 019048 nop 30000 -0x4bc6 019049 jam 0x3c ,core_usb_config -0x4bc7 019050 rtn -: 019057 hci_rx_h4: -0x4bc8 019058 bpatch patch1f_5 ,mem_patch1f -0x4bc9 019059 fetch 1 ,mem_hci_cmd -0x4bca 019060 nrtn blank -: 019061 hci_rx_h4_1: -0x4bcb 019062 call hci_h4_parse_packet -0x4bcc 019063 ncall h4_rx_discard_packet ,user -0x4bcd 019064 rtn -: 019066 hci_h4_parse_packet: -0x4bce 019067 bpatch patch1f_6 ,mem_patch1f -0x4bcf 019068 copy contru ,rega -0x4bd0 019069 arg 4 ,temp -0x4bd1 019070 ifetch 1 ,contru -0x4bd2 019071 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len -0x4bd3 019072 increase 1 ,temp -0x4bd4 019073 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len -0x4bd5 019074 copy contru ,pdata -0x4bd6 019075 hstore 2 ,core_uart_rrptr -0x4bd7 019076 rtn -: 019077 hci_h4_parse_packet_wait_len: -0x4bd8 019078 hfetch 2 ,core_uart_rxitems -0x4bd9 019079 isub temp ,null -0x4bda 019080 nbranch hci_h4_parse_packet_wait_len ,positive -0x4bdb 019082 disable user -0x4bdc 019083 copy rega ,contru -0x4bdd 019084 call h4_get_rx_payload_len -0x4bde 019085 iadd temp ,temp -: 019086 hci_h4_parse_packet_wait: -0x4bdf 019087 hfetch 2 ,core_uart_rxitems -0x4be0 019088 isub temp ,null -0x4be1 019089 nbranch hci_h4_parse_packet_wait ,positive -0x4be2 019090 copy rega ,contru -0x4be3 019091 ifetch 1 ,contru -0x4be4 019092 beq hci_h4_type_cmd ,process_hci_cmd -0x4be5 019093 branch assert -: 019095 h4_rx_discard_packet: -0x4be6 019096 bpatch patch1f_7 ,mem_patch1f -0x4be7 019097 hfetch 2 ,core_uart_rrptr -0x4be8 019098 iforce contru -0x4be9 019099 call h4_get_rx_payload_len -0x4bea 019100 iadd contru ,contru -0x4beb 019101 deposit contru -0x4bec 019102 hstore 2 ,core_uart_rrptr -0x4bed 019103 rtn -: 019108 h4_get_rx_payload_len: -0x4bee 019109 ifetch 1 ,contru -0x4bef 019110 increase 2 ,contru -0x4bf0 019111 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl -0x4bf1 019112 ifetch 1 ,contru -0x4bf2 019113 rtn -: 019114 h4_get_rx_payload_len_acl: -0x4bf3 019115 ifetch 2 ,contru -0x4bf4 019116 rtn -: 019118 h4_get_tx_ptr: -0x4bf5 019119 hfetch 2 ,core_uart_twptr -0x4bf6 019120 increase -5 ,contwu -0x4bf7 019121 iadd contwu ,contwu -0x4bf8 019122 rtn -: 019124 h4_send_packet_event: -0x4bf9 019125 arg hci_h4_type_event ,temp -0x4bfa 019126 branch h4_send_packet -: 019127 h4_send_packet_acl: -0x4bfb 019128 arg hci_h4_type_acl ,temp -: 019129 h4_send_packet: -0x4bfc 019130 bpatchx patch20_0 ,mem_patch20 -0x4bfd 019131 increase 1 ,loopcnt -0x4bfe 019132 hfetch 2 ,core_uart_twptr -0x4bff 019133 copy pdata ,contwu -0x4c00 019134 copy loopcnt ,pdata -0x4c01 019135 istoret 1 ,contwu -0x4c02 019136 increase -1 ,pdata -0x4c03 019137 iadd contwu ,contwu -0x4c04 019138 copy contwu ,pdata -0x4c05 019139 store 2 ,mem_hci_acl_tx_trigger_wptr -0x4c06 019140 copy temp ,pdata -0x4c07 019141 rtneq hci_h4_type_acl -0x4c08 019142 fetch 2 ,mem_hci_acl_tx_trigger_wptr -0x4c09 019143 hstore 2 ,core_uart_twptr -0x4c0a 019144 branch h4_send_acl_trigger_clear -: 019147 h4_send_acl_trigger_clear: -0x4c0b 019148 setarg 0 -0x4c0c 019149 store 2 ,mem_hci_acl_tx_trigger_wptr -0x4c0d 019150 rtn -: 019157 hci_init: -0x4c0e 019158 rtn wake -0x4c0f 019159 setarg hci_idle_dispatch -0x4c10 019160 store 2 ,mem_cb_idle_process -0x4c11 019162 setarg uart_baud_115200 -0x4c12 019163 store uart_baud_len ,mem_baud -: 019164 hci_lpm_init: -0x4c13 019165 setarg mem_h5rx_buf -0x4c14 019166 hstore 2 ,core_uart_rsaddr -0x4c15 019167 setarg mem_h5rx_buf_end -0x4c16 019168 hstore 2 ,core_uart_readdr -0x4c17 019169 setarg mem_h5tx_buf -0x4c18 019170 hstore 2 ,core_uart_tsaddr -0x4c19 019171 call hci_sel_init -: 019172 hci_reinit: -0x4c1a 019173 jam 0x0 ,core_uart_ctrl -0x4c1b 019174 setarg mem_h5tx_buf -0x4c1c 019175 hstore 2 ,core_uart_twptr -0x4c1d 019176 hstore 2 ,core_uart_trptrp -0x4c1e 019177 setarg mem_h5rx_buf -0x4c1f 019178 hstore 2 ,core_uart_rrptr -0x4c20 019179 store 2 ,mem_h5rx_rptr -: 019180 hci_init_common: -0x4c21 019181 hfetch 2 ,core_clkoff -0x4c22 019182 set0 clock_off_uart ,pdata -0x4c23 019183 hstore 2 ,core_clkoff -0x4c24 019184 call uart_set_baud_by_mem -0x4c25 019185 jam uartclk_dpll ,core_uart_clksel -0x4c26 019186 jam uart_ctrl_h4 ,core_uart_ctrl -0x4c27 019187 rtn -: 019189 hci_sel_init: -0x4c28 019190 setarg mem_h5tx_buf_end -0x4c29 019191 hstore 2 ,core_uart_teaddr -0x4c2a 019192 hfetch 1 ,core_gpio_sel1 -0x4c2b 019193 or_into 0x07 ,pdata -0x4c2c 019194 hstore 1 ,core_gpio_sel1 -0x4c2d 019195 rtn -: 019198 hci_rx_packet: -0x4c2e 019199 bpatchx patch20_1 ,mem_patch20 -0x4c2f 019200 hfetch 1 ,core_uart_status -0x4c30 019201 iforce regb -0x4c31 019202 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont -0x4c32 019203 hfetch 2 ,core_uart_rxitems -0x4c33 019204 iforce regc -0x4c34 019205 arg 0x44f ,temp -0x4c35 019206 isub temp ,null -0x4c36 019207 nrtn zero -: 019208 hci_rx_packet_cont: -0x4c37 019209 hfetch 2 ,core_uart_rrptr -0x4c38 019210 iforce contru -0x4c39 019211 branch hci_rx_h4 -: 019213 uart_send_byte: -0x4c3a 019214 hfetcht 1 ,core_uart_status -0x4c3b 019215 isolate1 6 ,temp -0x4c3c 019216 branch uart_send_byte ,true -0x4c3d 019217 hstore 1 ,core_uart_txd -0x4c3e 019218 rtn -: 019220 process_hci_cmd: -0x4c3f 019221 bpatchx patch20_2 ,mem_patch20 -0x4c40 019222 fetch 1 ,mem_hci_cmd -0x4c41 019223 branch process_hci_cmd_cont ,blank -0x4c42 019224 enable user -0x4c43 019225 rtn -: 019226 process_hci_cmd_cont: -0x4c44 019227 ifetch 2 ,contru -0x4c45 019228 iforce alarm -0x4c46 019229 iforce queue -0x4c47 019230 ifetch 1 ,contru -0x4c48 019231 iforce temp -0x4c49 019232 rshift2 alarm ,pdata -0x4c4a 019233 rshift8 pdata ,pdata -0x4c4b 019234 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific -0x4c4c 019235 rtn -: 019238 phci_grp_vendor_specific: -0x4c4d 019239 bpatchx patch20_3 ,mem_patch20 -0x4c4e 019240 deposit queue -0x4c4f 019241 beq hci_vendor_cmd_reset ,hci_normal_reply -0x4c50 019242 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid -0x4c51 019243 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud -0x4c52 019244 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch -0x4c53 019245 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done -0x4c54 019246 beq hci_vendor_cmd_echo ,hci_normal_reply -0x4c55 019247 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr -0x4c56 019248 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm -0x4c57 019250 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem -0x4c58 019251 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep -0x4c59 019252 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init -0x4c5a 019253 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec -0x4c5b 019254 branch hci_normal_reply -: 019256 phci_grp_vendor_enter_lpm: -0x4c5c 019257 call hci_normal_reply -0x4c5d 019258 call wait_uarttx -0x4c5e 019259 call gpio_pu_uart_tx -: 019260 hci_enter_lpm: -0x4c5f 019261 call app_put_lpm_wake_lock -0x4c60 019262 call app_l2cap_flow_control_enable -0x4c61 019263 branch gpio_rx_config_input_with_pu -: 019265 hci_exit_lpm: -0x4c62 019266 jam hci_rx_ready ,mem_hci_lt_rx_state -0x4c63 019267 call app_get_lpm_wake_lock -0x4c64 019268 call hci_lpm_init -0x4c65 019269 branch app_l2cap_flow_control_disable -: 019271 phci_grp_vendor_chipid: -0x4c66 019272 call hci_get_cmd_complete_ptr -0x4c67 019273 hfetch 2 ,core_chipid -0x4c68 019274 istore 2 ,contwu -0x4c69 019275 force 6 ,loopcnt -0x4c6a 019276 branch hci_command_complete -: 019278 phci_grp_vendor_baud: -0x4c6b 019279 ifetch 2 ,contru -0x4c6c 019280 store 2 ,mem_baud -0x4c6d 019281 hstore 2 ,core_uart_baud -0x4c6e 019282 rtn -: 019285 phci_grp_vendor_patch_common: -0x4c6f 019287 ifetch 1 ,contru -0x4c70 019288 copy pdata ,temp -0x4c71 019289 hstore 1 ,core_ucode_low -0x4c72 019290 ifetch 1 ,contru -0x4c73 019291 iadd temp ,temp -0x4c74 019292 set1 7 ,pdata -0x4c75 019293 hstore 1 ,core_ucode_ctrl -0x4c76 019294 ifetch 1 ,contru -0x4c77 019295 iadd temp ,temp -0x4c78 019296 copy pdata ,loopcnt -0x4c79 019297 rtn -: 019299 phci_grp_vendor_patch: -0x4c7a 019300 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad -0x4c7b 019301 call phci_grp_vendor_patch_common -: 019302 phci_grp_vendor_patch_loop: -0x4c7c 019303 ifetch 1 ,contru -0x4c7d 019304 hstore 1 ,core_ucode_data -0x4c7e 019305 iadd temp ,temp -0x4c7f 019306 loop phci_grp_vendor_patch_loop -: 019307 phci_grp_vendor_patch_check_sum: -0x4c80 019308 and temp ,0xff ,temp -0x4c81 019309 ifetch 1 ,contru -0x4c82 019310 isub temp ,null -0x4c83 019311 nbranch phci_grp_vendor_patch_bad ,zero -0x4c84 019312 branch hci_normal_reply -: 019315 phci_grp_vendor_patch_sec: -0x4c85 019316 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad -0x4c86 019317 call phci_grp_vendor_patch_common -0x4c87 019318 store 8 ,mem_pdatatemp -: 019319 phci_grp_vendor_patch_sec_loop: -0x4c88 019320 call do_aes_cbc -0x4c89 019321 arg 16 ,loopcnt -0x4c8a 019322 arg mem_temp_block0 ,contw -0x4c8b 019323 call load_uart_sum_loop -0x4c8c 019324 storet 8 ,mem_temp -0x4c8d 019325 arg mem_temp_block2 ,contw -0x4c8e 019326 call store_aes_result -0x4c8f 019327 arg mem_temp_block2 ,rega -0x4c90 019328 arg mem_temp_block0 ,regb -0x4c91 019329 arg mem_temp_block3 ,contw -0x4c92 019330 call xor16 -0x4c93 019331 arg 16 ,loopcnt -0x4c94 019332 arg mem_temp_block3 ,contr -0x4c95 019333 call load_ucode_only_loop -0x4c96 019334 fetcht 8 ,mem_temp -0x4c97 019335 fetch 8 ,mem_pdatatemp -0x4c98 019336 increase -16 ,pdata -0x4c99 019337 store 8 ,mem_pdatatemp -0x4c9a 019338 nbranch phci_grp_vendor_patch_sec_loop ,blank -0x4c9b 019339 branch phci_grp_vendor_patch_check_sum -: 019341 load_ucode_only_loop: -0x4c9c 019342 ifetch 1 ,contr -0x4c9d 019343 hstore 1 ,core_ucode_data -0x4c9e 019344 loop load_ucode_only_loop -0x4c9f 019345 rtn -: 019347 load_uart_sum_loop: -0x4ca0 019348 ifetch 1 ,contru -0x4ca1 019349 istore 1 ,contw -0x4ca2 019350 iadd temp ,temp -0x4ca3 019351 loop load_uart_sum_loop -0x4ca4 019352 rtn -: 019354 phci_grp_vendor_patch_sec_init: -0x4ca5 019355 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad -0x4ca6 019356 arg 0 ,temp -0x4ca7 019357 arg 16 ,loopcnt -0x4ca8 019358 arg mem_temp_block0 ,contw -0x4ca9 019359 call load_uart_sum_loop -0x4caa 019360 hfetch 1 ,core_gpio_key2 -0x4cab 019361 and_into 0xfd ,pdata -0x4cac 019362 hstore 1 ,core_gpio_key2 -0x4cad 019363 arg mem_temp_block0 ,contr -0x4cae 019364 arg 16 ,loopcnt -0x4caf 019365 call aes_load_data -0x4cb0 019366 call aes_init -0x4cb1 019367 call aes_clear_data -0x4cb2 019368 branch phci_grp_vendor_patch_check_sum -: 019371 phci_grp_vendor_done: -0x4cb3 019372 arg 0x20 ,loopcnt -0x4cb4 019373 arg mem_patch00 ,contw -0x4cb5 019374 arg 0 ,temp -: 019375 phci_grp_vendor_done_loop: -0x4cb6 019376 ifetch 1 ,contru -0x4cb7 019377 istore 1 ,contw -0x4cb8 019378 iadd temp ,temp -0x4cb9 019379 loop phci_grp_vendor_done_loop -0x4cba 019380 and temp ,0xff ,temp -0x4cbb 019381 ifetch 1 ,contru -0x4cbc 019382 isub temp ,null -0x4cbd 019383 nbranch phci_grp_vendor_patch_bad ,zero -0x4cbe 019384 jam 0 ,core_ucode_ctrl -0x4cbf 019385 call hci_normal_reply -0x4cc0 019386 call h4_rx_discard_packet -0x4cc1 019387 call clear_key_buf -0x4cc2 019388 call wait_uarttx -0x4cc3 019389 branch soft_reset -: 019391 phci_grp_vendor_patch_bad: -0x4cc4 019392 jam 0 ,core_ucode_ctrl -0x4cc5 019393 branch start -: 019395 phci_grp_vendor_bdaddr: -0x4cc6 019396 ifetch 6 ,contru -0x4cc7 019397 store 6 ,mem_lap -0x4cc8 019398 branch hci_normal_reply -: 019401 phci_grp_vendor_mem: -0x4cc9 019402 ifetch 1 ,contru -0x4cca 019403 store 1 ,mem_hci_curr_len -0x4ccb 019404 copy pdata ,loopcnt -0x4ccc 019405 ifetch 2 ,contru -0x4ccd 019406 store 2 ,mem_hci_curr_target -0x4cce 019407 copy pdata ,contw -0x4ccf 019408 call uart_copy_rx_bytes -0x4cd0 019409 branch hci_normal_reply -: 019412 phci_grp_vendor_eep: -0x4cd1 019413 ifetch 1 ,contru -0x4cd2 019414 store 1 ,mem_hci_curr_len -0x4cd3 019415 copy pdata ,loopcnt -0x4cd4 019416 ifetch 2 ,contru -0x4cd5 019417 store 2 ,mem_hci_curr_target -0x4cd6 019418 arg mem_l2cap_rxbuff1 ,contw -0x4cd7 019419 call uart_copy_rx_bytes -0x4cd8 019420 fetcht 1 ,mem_hci_curr_len -0x4cd9 019421 arg mem_l2cap_rxbuff1 ,rega -0x4cda 019422 fetch 2 ,mem_hci_curr_target -0x4cdb 019423 branch iicd_write_ota_data -: 019428 hci_normal_reply: -0x4cdc 019429 force 4 ,loopcnt -: 019430 hci_command_complete: -0x4cdd 019431 call hci_get_payload_ptr -0x4cde 019432 force 0x1 ,pdata -0x4cdf 019433 istore 1 ,contwu -0x4ce0 019434 deposit alarm -0x4ce1 019435 istore 3 ,contwu -0x4ce2 019436 force hci_event_command_complete ,queue -: 019437 hci_send_event: -0x4ce3 019438 bpatchx patch20_4 ,mem_patch20 -0x4ce4 019439 call hci_get_packet_ptr -0x4ce5 019440 deposit queue -0x4ce6 019441 istore 1 ,contwu -0x4ce7 019442 deposit loopcnt -0x4ce8 019443 istore 1 ,contwu -: 019444 hci_send_event_raw: -0x4ce9 019445 force 5 ,queue -0x4cea 019446 increase 2 ,loopcnt -: 019447 hci_send_packet: -0x4ceb 019448 branch h4_send_packet_event -: 019450 hci_send_commu_ready_event: -0x4cec 019451 force hci_event_vendor_specific ,queue -0x4ced 019452 call hci_get_payload_ptr -0x4cee 019453 setarg hci_vendor_event_commu_ready -0x4cef 019454 istore 1 ,contwu -0x4cf0 019455 force 1 ,loopcnt -0x4cf1 019456 branch hci_send_event -: 019458 hci_get_cmd_complete_ptr: -0x4cf2 019459 force 12 ,contwu -0x4cf3 019460 branch hci_get_tx_ptr -: 019462 hci_get_payload_ptr: -0x4cf4 019463 force 8 ,contwu -0x4cf5 019464 branch hci_get_tx_ptr -: 019466 hci_get_packet_ptr: -0x4cf6 019467 force 6 ,contwu -: 019468 hci_get_tx_ptr: -0x4cf7 019469 branch h4_get_tx_ptr -: 019473 calc_tx_crc16: -0x4cf8 019474 pulse crc16 -0x4cf9 019475 enable enable_crc -: 019476 crcloop: -0x4cfa 019477 ifetch 1 ,contwu -0x4cfb 019478 inject bucket ,8 -0x4cfc 019479 loop crcloop -0x4cfd 019480 enable enable_parity -0x4cfe 019481 inject bucket ,16 -0x4cff 019482 disable enable_parity -0x4d00 019483 disable enable_crc -0x4d01 019484 disable crc16 -0x4d02 019485 byteswap pdata ,pdata -0x4d03 019486 rtn -: 019490 cmd_exit: -0x4d04 019491 jam 0 ,mem_hci_cmd -0x4d05 019492 rtn -: 019493 cmd_check_plap: -0x4d06 019494 fetch 6 ,mem_hci_plap -0x4d07 019495 fetcht 6 ,mem_plap -0x4d08 019496 isub temp ,null -0x4d09 019497 rtn -: 019502 cmd_pair: -0x4d0a 019503 fetch 1 ,mem_op -0x4d0b 019504 bbit1 op_inrand_req ,cmd_pair_passive -0x4d0c 019505 call tid_initiate -0x4d0d 019506 jam lmp_in_rand ,mem_lmo_opcode2 -0x4d0e 019507 branch cmd_exit -: 019508 cmd_pair_passive: -0x4d0f 019509 set0 op_inrand_req ,pdata -0x4d10 019510 store 1 ,mem_op -0x4d11 019511 call lmp_accept_inrand -0x4d12 019512 setarg 0 -0x4d13 019513 setflag master ,smap_lmptid ,pdata -0x4d14 019514 store 1 ,mem_lmo_tid2 -0x4d15 019515 branch cmd_exit -0x4d16 019516 rtn -: 019517 cmd_in_sniff: -0x4d17 019518 jam lmp_sniff_req ,mem_lmo_opcode2 -0x4d18 019519 arg mem_sniff_payload ,contw -0x4d19 019520 setarg 0 -0x4d1a 019521 isolate1 27 ,clke_bt -0x4d1b 019522 setflag true ,1 ,pdata -0x4d1c 019523 istore 1 ,contw -0x4d1d 019524 setarg 0 -0x4d1e 019525 istore 2 ,contw -0x4d1f 019526 fetch 2 ,mem_sniff_param_interval -0x4d20 019527 istore 2 ,contw -0x4d21 019528 fetch 1 ,mem_sniff_param_attempt -0x4d22 019529 istore 2 ,contw -0x4d23 019530 fetch 1 ,mem_sniff_param_timeout -0x4d24 019531 istore 2 ,contw -0x4d25 019532 branch cmd_exit -: 019534 cmd_exit_sniff: -0x4d26 019535 jam lmp_unsniff_req ,mem_lmo_opcode2 -0x4d27 019536 branch cmd_exit -: 019538 hci_idle_dispatch: -0x4d28 019539 call gpio_check_uart_state -0x4d29 019540 rtn true -0x4d2a 019541 arg uart_wakeup_rx ,temp -0x4d2b 019542 call gpio_get_bit -0x4d2c 019543 nbranch uart_wake_up ,true -0x4d2d 019544 jam hci_rx_wake ,mem_hci_lt_rx_state -0x4d2e 019545 rtn -: 019546 uart_wake_up: -0x4d2f 019547 fetch 1 ,mem_hci_lt_rx_state -0x4d30 019548 rtnne hci_rx_wake -0x4d31 019549 call hci_exit_lpm -0x4d32 019550 branch hci_send_commu_ready_event -: 019564 hid_rx_process: -0x4d33 019565 bpatchx patch20_5 ,mem_patch20 -0x4d34 019566 fetch 2 ,mem_l2cap_payload_ptr -0x4d35 019567 copy pdata ,contr -0x4d36 019568 ifetch 1 ,contr -0x4d37 019569 and pdata ,0x0f ,temp -0x4d38 019570 rshift4 pdata ,pdata -0x4d39 019571 beq hid_type_set_idle ,hid_rx_process_handshake -0x4d3a 019572 beq hid_type_set_protocol ,hid_rx_process_handshake -0x4d3b 019573 beq hid_type_data ,hid_rx_process_data -0x4d3c 019574 beq hid_type_set_report ,hid_rx_process_set_report -0x4d3d 019575 beq hid_type_control ,hid_rx_process_hid_control -0x4d3e 019576 rtn -: 019578 hid_rx_process_hid_control: -0x4d3f 019579 copy temp ,pdata -0x4d40 019580 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug -0x4d41 019581 beq hid_control_p_suspend ,hid_rx_process_suspend -0x4d42 019582 rtn -: 019584 hid_rx_process_virtual_cable_unplug: -0x4d43 019585 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp -0x4d44 019586 call ui_ipc_send_event -0x4d45 019587 fetch 1 ,mem_device_option -0x4d46 019588 rtnbit0 dvc_op_mouse -0x4d47 019589 copy temp ,pdata -0x4d48 019590 beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug -0x4d49 019591 rtn -: 019592 hid_rx_process_suspend: -0x4d4a 019593 rtn -: 019595 hid_rx_process_set_report: -0x4d4b 019596 call hid_rx_process_data -0x4d4c 019597 arg 0x01 ,rega -0x4d4d 019598 call hid_malloc_tx_buff -0x4d4e 019599 fetch 2 ,mem_hid_ctrl_remote_cid -0x4d4f 019600 istore 2 ,contw -0x4d50 019601 setarg 0x00 -0x4d51 019602 istore 1 ,contw -0x4d52 019603 rtn -: 019605 hid_rx_process_handshake: -0x4d53 019606 arg 1 ,rega -0x4d54 019607 call hid_malloc_tx_buff -0x4d55 019608 fetch 2 ,mem_hid_ctrl_remote_cid -0x4d56 019609 istore 2 ,contw -0x4d57 019610 setarg 0 -0x4d58 019611 istore 1 ,contw -0x4d59 019612 jam 1 ,mem_ui_data_txbuff_length -0x4d5a 019613 fetch 1 ,mem_hid_control_state -0x4d5b 019614 set1 l2cap_channel_hid_handshake_done -0x4d5c 019615 store 1 ,mem_hid_control_state -0x4d5d 019616 jam bt_evt_hid_handshake ,mem_fifo_temp -0x4d5e 019617 branch ui_ipc_send_event -: 019619 hid_rx_process_data: -0x4d5f 019620 ifetch 1 ,contr -0x4d60 019621 beq hid_report_id_kb ,hid_rx_process_data_hid_kb -0x4d61 019622 rtn -: 019624 hid_rx_process_data_hid_kb: -0x4d62 019625 rtn -: 019628 hid_malloc_tx_buff: -0x4d63 019629 call l2cap_malloc -0x4d64 019630 copy rega ,temp -0x4d65 019631 storet 1 ,mem_ui_data_txbuff_length -0x4d66 019632 copy pdata ,contw -0x4d67 019633 copy rega ,pdata -0x4d68 019634 istore 2 ,contw -0x4d69 019635 rtn -: 019652 l2cap_init: -0x4d6a 019653 branch l2cap_init_wake ,wake -: 019654 l2cap_init_work: -0x4d6b 019655 setarg mem_l2cap_xmem_end -0x4d6c 019656 arg mem_l2cap_xmem_start ,contw -0x4d6d 019657 isub contw ,loopcnt -0x4d6e 019658 call clear_mem -: 019659 l2cap_init_wake: -0x4d6f 019660 bpatchx patch20_6 ,mem_patch20 -0x4d70 019661 setarg mem_sdp_mem_end -0x4d71 019662 arg mem_sdp_mem_start ,contw -0x4d72 019663 isub contw ,loopcnt -0x4d73 019664 call clear_mem -0x4d74 019665 setarg mem_l2cap_mem_end -0x4d75 019666 arg mem_l2cap_mem_start ,contw -0x4d76 019667 isub contw ,loopcnt -0x4d77 019668 call clear_mem -0x4d78 019669 branch l2cap_lpm_load_txbuf -: 019671 process_rx_l2cap_pkt: -0x4d79 019672 bpatchx patch20_7 ,mem_patch20 -0x4d7a 019673 copy contr ,temp -0x4d7b 019676 copy temp ,contr -0x4d7c 019677 ifetch 2 ,contr -0x4d7d 019678 store 2 ,mem_l2cap_rx_pkt_length -0x4d7e 019679 ifetch 2 ,contr -0x4d7f 019680 store 2 ,mem_l2cap_rx_cid -0x4d80 019681 deposit contr -0x4d81 019682 store 2 ,mem_l2cap_payload_ptr -0x4d82 019683 fetch 1 ,memui_reconnect_mode -0x4d83 019684 beq no_reconnection ,l2cap_rx_multiplexing -0x4d84 019685 branch ml2cap_rx_multiplexing -: 019687 l2cap_rx_multiplexing: -0x4d85 019688 fetch 2 ,mem_l2cap_rx_pkt_length -0x4d86 019689 branch l2cap_rx_reset_state ,blank -0x4d87 019690 bpatchx patch21_0 ,mem_patch21 -0x4d88 019691 fetch 1 ,mem_l2cap_rx_cid -0x4d89 019692 beq l2cap_signal_channel ,l2cap_call_proc_signal -: 019693 l2cap_rx_multiplexing0: -0x4d8a 019694 beq l2cap_sdp_channel ,l2cap_call_proc_sdp -0x4d8b 019695 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm -0x4d8c 019696 beq l2cap_hid_control_channel ,l2cap_call_proc_hid -0x4d8d 019697 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid -0x4d8e 019698 branch l2cap_rx_reset_state -: 019700 l2cap_check_map: -0x4d8f 019703 bpatchx patch21_1 ,mem_patch21 -0x4d90 019704 call l2cap_malloc_get_full_map -0x4d91 019705 fetch 1 ,mem_used_map -0x4d92 019706 beq 0 ,set_pdata_0 -0x4d93 019707 beq 1 ,set_pdata_0 -0x4d94 019708 beq 2 ,set_pdata_0 -0x4d95 019709 beq 3 ,set_pdata_0 -0x4d96 019710 beq 0x81 ,set_pdata_0 -0x4d97 019711 beq 0xc0 ,set_pdata_0 -0x4d98 019712 beq 0x80 ,set_pdata_0 -0x4d99 019713 beq 0x40 ,set_pdata_0 -0x4d9a 019714 rtn -: 019716 set_pdata_0: -0x4d9b 019717 setarg 0 -0x4d9c 019718 rtn -: 019721 l2cap_call_proc_signal: -0x4d9d 019722 call l2cap_check_map -0x4d9e 019723 nrtn blank -: 019724 l2cap_call_proc_signal0: -0x4d9f 019725 call l2cap_malloc_signal_channel -0x4da0 019726 call l2cap_process_signal_pkt -0x4da1 019727 fetcht 2 ,mem_l2cap_signal_tx_length -0x4da2 019728 branch l2cap_call_proc_no_reply ,blank -0x4da3 019729 call l2cap_get_signal_tx_buff -0x4da4 019730 fetch 2 ,mem_l2cap_signal_tx_length -0x4da5 019731 istore 2 ,contw -0x4da6 019732 force l2cap_signal_channel ,pdata -0x4da7 019733 istore 2 ,contw -0x4da8 019734 branch l2cap_rx_reset_state -: 019736 l2cap_call_proc_sigal_pending: -0x4da9 019737 fetch 1 ,mem_l2cap_pending_item -0x4daa 019738 rtn blank -0x4dab 019739 copy pdata ,rega -0x4dac 019740 bpatchx patch21_2 ,mem_patch21 -0x4dad 019741 fetch 4 ,mem_l2cap_sdpres_delay_time -0x4dae 019742 arg 0x100 ,temp -0x4daf 019743 iadd temp ,temp -0x4db0 019744 copy clkn_bt ,pdata -0x4db1 019745 isub temp ,null -0x4db2 019746 nrtn positive -0x4db3 019747 jam 0 ,mem_l2cap_pending_item -0x4db4 019748 copy rega ,pdata -0x4db5 019749 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ -0x4db6 019750 branch assert -: 019751 l2cap_sdp_conn_succ: -0x4db7 019752 arg 0 ,debug -0x4db8 019753 call l2cap_malloc_signal_channel -0x4db9 019754 call restore_l2cap_req_param -0x4dba 019755 call l2cap_get_signal_tx_payload -0x4dbb 019756 call save_cont_pointers -0x4dbc 019757 call send_connection_sdp_res -0x4dbd 019758 call l2cap_get_signal_tx_buff -0x4dbe 019760 setarg 0x000c -0x4dbf 019761 istore 2 ,contw -0x4dc0 019762 force l2cap_signal_channel ,pdata -0x4dc1 019763 istore 2 ,contw -0x4dc2 019764 branch l2cap_rx_reset_state -: 019768 l2cap_reset_sdp_map: -0x4dc3 019769 bpatchx patch21_3 ,mem_patch21 -0x4dc4 019770 fetch 2 ,mem_sdp_tx_pkt_length -0x4dc5 019771 increase 4 ,pdata -0x4dc6 019772 rshift4 pdata ,pdata -0x4dc7 019773 rshift3 pdata ,pdata -0x4dc8 019774 add pdata ,1 ,temp -0x4dc9 019775 arg mem_tx_fifo3 ,contr -0x4dca 019776 ifetch 3 ,contr -0x4dcb 019777 rtn blank -0x4dcc 019778 store 3 ,mem_tx_fifo_map_temp -0x4dcd 019779 fetch 1 ,mem_tx_fifo_map_temp -0x4dce 019780 copy pdata ,rega -0x4dcf 019781 call check_l2cap_map -0x4dd0 019782 copy regb ,pdata -0x4dd1 019783 store 1 ,mem_tx_fifo3 -0x4dd2 019784 rtn -: 019786 check_l2cap_map: -0x4dd3 019787 arg 0 ,queue -0x4dd4 019788 arg 0 ,regb -: 019790 check_l2cap_map_loop: -0x4dd5 019791 sub queue ,7 ,null -0x4dd6 019792 nrtn positive -0x4dd7 019793 qisolate1 rega -0x4dd8 019794 branch check_l2cap_map_used ,true -0x4dd9 019795 branch check_l2cap_map_used2 -: 019797 check_l2cap_map_used: -0x4dda 019798 copy temp ,pdata -0x4ddb 019799 branch check_l2cap_map_used2 ,blank -0x4ddc 019800 qset1 regb -0x4ddd 019801 increase -1 ,temp -: 019803 check_l2cap_map_used2: -0x4dde 019804 increase 1 ,queue -0x4ddf 019805 branch check_l2cap_map_loop -: 019807 l2cap_call_proc_sdp: -0x4de0 019808 call l2cap_malloc_is_fifo_empty -0x4de1 019809 nrtn blank -0x4de2 019810 call l2cap_check_map -0x4de3 019811 nrtn blank -0x4de4 019812 call l2cap_malloc_sdp_channel -0x4de5 019813 call sdp_process -0x4de6 019814 call l2cap_reset_sdp_map -0x4de7 019815 branch l2cap_call_proc_sdp_common -: 019818 ml2cap_call_proc_sdp: -0x4de8 019819 call l2cap_malloc_is_fifo_empty -0x4de9 019820 nrtn blank -0x4dea 019821 call l2cap_malloc_sdp_channel -0x4deb 019822 call sdp_process -: 019823 l2cap_call_proc_sdp_common: -0x4dec 019824 call l2cap_get_sdp_tx_buff -0x4ded 019825 fetch 2 ,mem_sdp_tx_pkt_length -0x4dee 019826 branch l2cap_call_proc_no_reply ,blank -0x4def 019827 istore 2 ,contw -0x4df0 019828 fetch 2 ,mem_sdp_remote_cid -0x4df1 019829 istore 2 ,contw -0x4df2 019830 branch l2cap_rx_reset_state -: 019832 l2cap_call_proc_hid: -0x4df3 019833 call hid_rx_process -0x4df4 019834 branch l2cap_rx_reset_state -: 019836 l2cap_call_proc_rfcomm: -0x4df5 019837 bpatchx patch21_4 ,mem_patch21 -0x4df6 019838 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag -0x4df7 019839 call rfcomm_rx_process -0x4df8 019840 fetch 1 ,mem_rfcomm_malloc_fail_flag -0x4df9 019841 rtneq rfcomm_malloc_fail -0x4dfa 019842 branch l2cap_rx_reset_state -: 019843 l2cap_call_proc_no_reply: -0x4dfb 019844 call l2cap_malloc_discard -: 019846 l2cap_rx_reset_state: -0x4dfc 019847 setarg 0 -0x4dfd 019848 store 2 ,mem_l2cap_rx_pkt_length -0x4dfe 019849 store 2 ,mem_l2cap_rx_cid -0x4dff 019850 jam l2cap_rx_done ,mem_l2cap_rx_done -0x4e00 019851 rtn -: 019853 l2cap_process_signal_pkt: -0x4e01 019854 bpatchx patch21_5 ,mem_patch21 -0x4e02 019855 call l2cap_get_signal_tx_payload -0x4e03 019856 force 0 ,regb -0x4e04 019857 fetch 2 ,mem_l2cap_rx_pkt_length -0x4e05 019858 copy pdata ,regc -0x4e06 019859 fetch 2 ,mem_l2cap_payload_ptr -0x4e07 019860 iforce contr -: 019861 l2cap_process_signal_pkt_loop: -0x4e08 019862 call l2cap_process_one_signal -0x4e09 019863 deposit regc -0x4e0a 019864 increase -4 ,regc -0x4e0b 019865 increase -4 ,pdata -0x4e0c 019866 nbranch l2cap_process_signal_pkt_loop ,blank -0x4e0d 019867 copy regb ,pdata -0x4e0e 019868 store 2 ,mem_l2cap_signal_tx_length -0x4e0f 019869 rtn -: 019871 l2cap_process_one_signal: -0x4e10 019872 bpatchx patch21_6 ,mem_patch21 -0x4e11 019873 ifetch 1 ,contr -0x4e12 019874 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject -0x4e13 019875 beq signal_connect_req ,l2cap_proc_signal_connect_req -0x4e14 019876 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp -0x4e15 019877 beq signal_config_req ,l2cap_proc_signal_config_req -0x4e16 019878 beq signal_config_rsp ,l2cap_proc_signal_config_rsp -0x4e17 019879 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req -0x4e18 019880 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp -0x4e19 019881 beq signal_echo_req ,l2cap_proc_signal_echo_req -0x4e1a 019882 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp -0x4e1b 019883 beq signal_info_req ,l2cap_proc_signal_info_req -0x4e1c 019884 beq signal_info_rsp ,l2cap_proc_signal_info_rsp -0x4e1d 019885 call l2cap_reject_command -: 019886 l2cap_process_one_signal_rtn: -0x4e1e 019887 rtn -: 019889 l2cap_proc_signal_info_req: -0x4e1f 019890 ifetch 1 ,contr -0x4e20 019891 copy pdata ,queue -0x4e21 019892 ifetch 2 ,contr -0x4e22 019893 copy pdata ,rega -0x4e23 019894 copy regc ,pdata -0x4e24 019895 isub rega ,regc -0x4e25 019896 setarg signal_info_rsp -0x4e26 019897 istore 1 ,contw -0x4e27 019898 copy queue ,pdata -0x4e28 019899 istore 1 ,contw -0x4e29 019900 ifetch 2 ,contr -: 019901 l2cap_proc_signal_info_req_reply: -0x4e2a 019902 beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext -0x4e2b 019903 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix -0x4e2c 019904 rtn -: 019905 l2cap_proc_signal_info_req_ext: -0x4e2d 019906 setarg 0x020008 -0x4e2e 019907 istore 6 ,contw -0x4e2f 019908 setarg 0x0280 -0x4e30 019909 istore 4 ,contw -0x4e31 019910 force 12 ,pdata -0x4e32 019911 branch l2cap_proc_signal_info_req_common -: 019912 l2cap_proc_signal_info_req_fix: -0x4e33 019913 setarg 0x3000c -0x4e34 019914 istore 6 ,contw -0x4e35 019915 setarg 0x0006 -0x4e36 019916 istore 8 ,contw -0x4e37 019917 force 16 ,pdata -: 019918 l2cap_proc_signal_info_req_common: -0x4e38 019919 iadd regb ,regb -0x4e39 019920 branch l2cap_process_one_signal_rtn -: 019922 ml2cap_proc_signal_info_req: -0x4e3a 019923 ifetch 1 ,contr -0x4e3b 019924 copy pdata ,queue -0x4e3c 019925 ifetch 2 ,contr -0x4e3d 019926 copy pdata ,rega -0x4e3e 019927 ifetch 2 ,contr -0x4e3f 019928 store 2 ,mem_temp -0x4e40 019929 copy regc ,pdata -0x4e41 019930 isub rega ,regc -0x4e42 019931 call l2cap_get_signal_tx_payload -0x4e43 019932 setarg signal_info_rsp -0x4e44 019933 istore 1 ,contw -0x4e45 019934 copy queue ,pdata -0x4e46 019935 istore 1 ,contw -0x4e47 019936 fetch 2 ,mem_temp -0x4e48 019937 branch l2cap_proc_signal_info_req_reply -: 019941 l2cap_proc_signal_cmd_reject: -0x4e49 019942 ifetch 1 ,contr -0x4e4a 019943 copy pdata ,queue -0x4e4b 019944 ifetch 2 ,contr -0x4e4c 019945 copy pdata ,rega -0x4e4d 019946 iadd contr ,contr -0x4e4e 019947 copy regc ,pdata -0x4e4f 019948 isub rega ,regc -: 019949 l2cap_proc_signal_cmd_reject_rtn: -0x4e50 019950 branch l2cap_process_one_signal_rtn -: 019952 l2cap_proc_signal_connect_req: -0x4e51 019953 call save_cont_pointers -0x4e52 019956 call load_cont_pointers -0x4e53 019957 arg 0 ,debug -0x4e54 019958 ifetch 1 ,contr -0x4e55 019959 copy pdata ,queue -0x4e56 019960 ifetch 2 ,contr -0x4e57 019961 copy pdata ,rega -0x4e58 019962 ifetch 2 ,contr -0x4e59 019963 copy pdata ,temp -0x4e5a 019964 ifetch 2 ,contr -0x4e5b 019965 copy pdata ,timeup -0x4e5c 019966 bpatchx patch21_7 ,mem_patch21 -0x4e5d 019967 copy temp ,pdata -0x4e5e 019968 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp -0x4e5f 019969 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm -0x4e60 019970 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl -0x4e61 019971 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int -0x4e62 019972 call l2cap_reject_command -0x4e63 019973 branch l2cap_proc_signal_connect_req_rtn -: 019975 l2cap_proc_signal_connect_req_sdp: -0x4e64 019976 call save_cont_pointers -0x4e65 019977 arg l2cap_sdp_channel ,temp -0x4e66 019978 fetch 2 ,mem_sdp_remote_cid -0x4e67 019979 nbranch already_connected ,blank -0x4e68 019980 copy timeup ,pdata -0x4e69 019981 store 2 ,mem_sdp_remote_cid -0x4e6a 019982 copy clkn_bt ,pdata -0x4e6b 019983 store 4 ,mem_l2cap_sdpres_delay_time -0x4e6c 019984 call store_l2cap_req_param -0x4e6d 019985 branch send_connection_pending -: 019987 store_l2cap_req_param: -0x4e6e 019988 storet 2 ,mem_psm -0x4e6f 019989 deposit timeup -0x4e70 019990 store 2 ,mem_scid -0x4e71 019991 deposit rega -0x4e72 019992 store 2 ,mem_cmd_length -0x4e73 019993 deposit regb -0x4e74 019994 store 2 ,mem_tt2 -0x4e75 019995 deposit regc -0x4e76 019996 store 2 ,mem_tt3 -0x4e77 019997 deposit queue -0x4e78 019998 store 2 ,mem_id -0x4e79 019999 rtn -: 020001 restore_l2cap_req_param: -0x4e7a 020002 fetcht 2 ,mem_psm -0x4e7b 020003 fetch 2 ,mem_scid -0x4e7c 020004 copy pdata ,timeup -0x4e7d 020005 fetch 2 ,mem_cmd_length -0x4e7e 020006 copy pdata ,rega -0x4e7f 020007 fetch 2 ,mem_tt2 -0x4e80 020008 copy pdata ,regb -0x4e81 020009 fetch 2 ,mem_tt3 -0x4e82 020010 copy pdata ,regc -0x4e83 020011 fetch 2 ,mem_id -0x4e84 020012 copy pdata ,queue -0x4e85 020013 rtn -: 020015 l2cap_proc_signal_connect_req_rfcomm: -0x4e86 020016 call save_cont_pointers -0x4e87 020017 setarg l2cap_rfcomm_channel -0x4e88 020018 arg l2cap_rfcomm_channel ,temp -0x4e89 020019 fetch 2 ,mem_rfcomm_remote_cid -0x4e8a 020020 nbranch already_connected ,blank -0x4e8b 020021 copy timeup ,pdata -0x4e8c 020022 store 2 ,mem_rfcomm_remote_cid -0x4e8d 020023 fetch 1 ,mem_rfcomm_state -0x4e8e 020024 set1 l2cap_channel_state_conn_req ,pdata -0x4e8f 020025 set1 l2cap_channel_state_conn_res ,pdata -0x4e90 020026 store 1 ,mem_rfcomm_state -0x4e91 020027 branch send_connection_res -: 020028 l2cap_proc_signal_connect_req_hid_ctrl: -0x4e92 020029 call save_cont_pointers -0x4e93 020030 arg l2cap_hid_control_channel ,temp -0x4e94 020031 fetch 2 ,mem_hid_ctrl_remote_cid -0x4e95 020032 nbranch already_connected ,blank -0x4e96 020033 copy timeup ,pdata -0x4e97 020034 store 2 ,mem_hid_ctrl_remote_cid -0x4e98 020035 fetch 1 ,mem_hid_control_state -0x4e99 020036 set1 l2cap_channel_state_conn_req ,pdata -0x4e9a 020037 set1 l2cap_channel_state_conn_res ,pdata -0x4e9b 020038 store 1 ,mem_hid_control_state -0x4e9c 020039 branch send_connection_res -: 020040 l2cap_proc_signal_connect_req_hid_int: -0x4e9d 020041 call save_cont_pointers -0x4e9e 020042 deposit clke -0x4e9f 020043 arg l2cap_hid_interrupt_channel ,temp -0x4ea0 020044 fetch 2 ,mem_hid_int_remote_cid -0x4ea1 020045 nbranch already_connected ,blank -0x4ea2 020046 copy timeup ,pdata -0x4ea3 020047 store 2 ,mem_hid_int_remote_cid -0x4ea4 020048 fetch 1 ,mem_hid_interrupt_state -0x4ea5 020049 set1 l2cap_channel_state_conn_req ,pdata -0x4ea6 020050 set1 l2cap_channel_state_conn_res ,pdata -0x4ea7 020051 store 1 ,mem_hid_interrupt_state -0x4ea8 020052 branch send_connection_res -: 020054 send_connection_pending: -0x4ea9 020055 setarg l2cap_connect_pending -0x4eaa 020056 store 2 ,meml2cap_t1 -0x4eab 020057 jam l2cap_sdp_channel ,mem_l2cap_pending_item -0x4eac 020058 branch send_connection_res0 -: 020059 send_connection_sdp_res: -0x4ead 020060 fetch 1 ,mem_sdp_state -0x4eae 020061 set1 l2cap_channel_state_conn_req ,pdata -0x4eaf 020062 set1 l2cap_channel_state_conn_res ,pdata -0x4eb0 020063 store 1 ,mem_sdp_state -: 020064 send_connection_res: -0x4eb1 020065 setarg l2cap_connect_successful -0x4eb2 020066 store 2 ,meml2cap_t1 -: 020067 send_connection_res0: -0x4eb3 020068 bpatchx patch22_0 ,mem_patch22 -0x4eb4 020069 call load_cont_pointers -0x4eb5 020070 setarg signal_connect_rsp -0x4eb6 020071 istore 1 ,contw -0x4eb7 020072 copy queue ,pdata -0x4eb8 020073 istore 1 ,contw -0x4eb9 020074 setarg 0x0008 -0x4eba 020075 istore 2 ,contw -0x4ebb 020076 copy temp ,pdata -0x4ebc 020077 istore 2 ,contw -0x4ebd 020078 copy timeup ,pdata -0x4ebe 020079 istore 2 ,contw -0x4ebf 020080 fetch 2 ,meml2cap_t1 -0x4ec0 020081 beq l2cap_connect_pending ,connect_pending -0x4ec1 020082 isolate0 0 ,debug -0x4ec2 020083 branch connect_suc ,true -0x4ec3 020084 setarg l2cap_connect_refused_no_resources -: 020085 connect_suc: -0x4ec4 020086 istore 2 ,contw -0x4ec5 020087 force 0x0000 ,pdata -0x4ec6 020088 istore 2 ,contw -0x4ec7 020089 setarg 12 -0x4ec8 020090 branch connect_req_update_byte_counts -: 020091 connect_pending: -0x4ec9 020092 istore 2 ,contw -0x4eca 020093 force 0x0002 ,pdata -0x4ecb 020094 istore 2 ,contw -0x4ecc 020095 setarg 12 -0x4ecd 020096 branch connect_req_update_byte_counts -: 020098 already_connected: -0x4ece 020099 set1 0 ,debug -0x4ecf 020100 branch send_connection_res -: 020101 connect_req_update_byte_counts: -0x4ed0 020102 iadd regb ,regb -0x4ed1 020103 copy regc ,pdata -0x4ed2 020104 isub rega ,regc -0x4ed3 020105 branch l2cap_proc_signal_connect_req_rtn -: 020106 l2cap_proc_signal_connect_req_rtn: -0x4ed4 020107 branch l2cap_process_one_signal_rtn -: 020109 l2cap_proc_signal_connect_rsp: -0x4ed5 020110 ifetch 1 ,contr -0x4ed6 020111 copy pdata ,queue -0x4ed7 020112 ifetch 2 ,contr -0x4ed8 020113 copy pdata ,rega -0x4ed9 020114 copy regc ,pdata -0x4eda 020115 isub rega ,regc -0x4edb 020116 ifetch 2 ,contr -0x4edc 020117 copy pdata ,timeup -0x4edd 020118 ifetch 2 ,contr -0x4ede 020119 copy pdata ,temp -0x4edf 020120 bpatchx patch22_1 ,mem_patch22 -0x4ee0 020121 setarg l2cap_sdp_channel -0x4ee1 020122 isub temp ,null -0x4ee2 020123 branch l2cap_proc_signal_connect_rsp_sdp ,zero -0x4ee3 020124 setarg l2cap_rfcomm_channel -0x4ee4 020125 isub temp ,null -0x4ee5 020126 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero -0x4ee6 020127 setarg l2cap_hid_control_channel -0x4ee7 020128 isub temp ,null -0x4ee8 020129 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero -0x4ee9 020130 setarg l2cap_hid_interrupt_channel -0x4eea 020131 isub temp ,null -0x4eeb 020132 branch l2cap_proc_signal_connect_rsp_hid_int ,zero -0x4eec 020133 rtn -: 020135 l2cap_proc_signal_connect_rsp_sdp: -0x4eed 020136 copy timeup ,pdata -0x4eee 020137 store 2 ,mem_sdp_remote_cid -0x4eef 020138 fetch 1 ,mem_sdp_state -0x4ef0 020139 set1 l2cap_channel_state_conn_res ,pdata -0x4ef1 020140 store 1 ,mem_sdp_state -0x4ef2 020141 branch l2cap_process_one_signal_rtn -: 020142 l2cap_proc_signal_connect_rsp_rfcomm: -0x4ef3 020143 copy timeup ,pdata -0x4ef4 020144 store 2 ,mem_rfcomm_remote_cid -0x4ef5 020145 fetch 1 ,mem_rfcomm_state -0x4ef6 020146 set1 l2cap_channel_state_conn_res ,pdata -0x4ef7 020147 store 1 ,mem_rfcomm_state -0x4ef8 020148 rtn -: 020149 l2cap_proc_signal_connect_rsp_hid_int: -0x4ef9 020150 copy timeup ,pdata -0x4efa 020151 store 2 ,mem_hid_ctrl_remote_cid -0x4efb 020152 fetch 1 ,mem_hid_interrupt_state -0x4efc 020153 set1 l2cap_channel_state_conn_res ,pdata -0x4efd 020154 store 1 ,mem_hid_interrupt_state -0x4efe 020155 rtn -: 020156 l2cap_proc_signal_connect_rsp_hid_ctrl: -0x4eff 020157 copy timeup ,pdata -0x4f00 020158 store 2 ,mem_hid_int_remote_cid -0x4f01 020159 fetch 1 ,mem_hid_control_state -0x4f02 020160 set1 l2cap_channel_state_conn_res ,pdata -0x4f03 020161 store 1 ,mem_hid_control_state -0x4f04 020162 rtn -: 020164 l2cap_proc_signal_config_req: -0x4f05 020165 ifetch 1 ,contr -0x4f06 020166 copy pdata ,queue -0x4f07 020167 ifetch 2 ,contr -0x4f08 020168 copy pdata ,rega -0x4f09 020169 copy regc ,pdata -0x4f0a 020170 isub rega ,regc -0x4f0b 020171 ifetch 2 ,contr -0x4f0c 020172 copy pdata ,temp -0x4f0d 020173 copy temp ,rega -0x4f0e 020174 bpatchx patch22_2 ,mem_patch22 -0x4f0f 020175 setarg l2cap_sdp_channel -0x4f10 020176 isub temp ,null -0x4f11 020177 branch l2cap_proc_signal_config_req_sdp ,zero -0x4f12 020178 setarg l2cap_rfcomm_channel -0x4f13 020179 isub temp ,null -0x4f14 020180 branch l2cap_proc_signal_config_req_rfcomm ,zero -0x4f15 020181 setarg l2cap_hid_control_channel -0x4f16 020182 isub temp ,null -0x4f17 020183 branch l2cap_proc_signal_config_req_hid_ctrl ,zero -0x4f18 020184 setarg l2cap_hid_interrupt_channel -0x4f19 020185 isub temp ,null -0x4f1a 020186 branch l2cap_proc_signal_config_req_hid_int ,zero -0x4f1b 020187 branch l2cap_reject_command -: 020189 l2cap_proc_signal_config_req_sdp: -0x4f1c 020190 copy contw ,timeup -0x4f1d 020191 fetch 1 ,mem_sdp_state -0x4f1e 020192 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f1f 020193 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f20 020195 store 1 ,mem_sdp_state -0x4f21 020196 copy timeup ,contw -0x4f22 020197 arg l2cap_sdp_channel ,timeup -0x4f23 020198 fetch 2 ,mem_sdp_remote_cid -0x4f24 020199 copy pdata ,temp -0x4f25 020200 branch l2cap_send_config_rsp -: 020201 l2cap_proc_signal_config_req_hid_ctrl: -0x4f26 020202 copy contw ,timeup -0x4f27 020203 fetch 1 ,mem_hid_control_state -0x4f28 020204 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f29 020205 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f2a 020207 store 1 ,mem_hid_control_state -0x4f2b 020208 copy timeup ,contw -0x4f2c 020209 arg l2cap_hid_control_channel ,timeup -0x4f2d 020210 fetch 2 ,mem_hid_ctrl_remote_cid -0x4f2e 020211 copy pdata ,temp -0x4f2f 020212 branch l2cap_send_config_rsp -: 020213 l2cap_proc_signal_config_req_hid_int: -0x4f30 020214 copy contw ,timeup -0x4f31 020215 fetch 1 ,mem_hid_interrupt_state -0x4f32 020216 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f33 020217 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f34 020219 store 1 ,mem_hid_interrupt_state -0x4f35 020220 copy timeup ,contw -0x4f36 020221 arg l2cap_hid_interrupt_channel ,timeup -0x4f37 020222 fetch 2 ,mem_hid_int_remote_cid -0x4f38 020223 copy pdata ,temp -0x4f39 020224 branch l2cap_send_config_rsp -: 020225 l2cap_proc_signal_config_req_rfcomm: -0x4f3a 020226 copy contw ,timeup -0x4f3b 020227 fetch 1 ,mem_rfcomm_state -0x4f3c 020228 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f3d 020229 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f3e 020231 store 1 ,mem_rfcomm_state -0x4f3f 020233 copy timeup ,contw -0x4f40 020234 arg l2cap_rfcomm_channel ,timeup -0x4f41 020235 fetch 2 ,mem_rfcomm_remote_cid -0x4f42 020236 copy pdata ,temp -: 020237 l2cap_send_config_rsp: -0x4f43 020238 bpatchx patch22_3 ,mem_patch22 -0x4f44 020239 setarg signal_config_rsp -0x4f45 020240 istore 1 ,contw -0x4f46 020241 copy queue ,pdata -0x4f47 020242 istore 1 ,contw -0x4f48 020243 setarg 0x0006 -0x4f49 020244 istore 2 ,contw -0x4f4a 020245 copy temp ,pdata -0x4f4b 020246 istore 2 ,contw -0x4f4c 020247 force 0x00 ,pdata -0x4f4d 020248 istore 2 ,contw -0x4f4e 020249 force l2cap_config_success ,pdata -0x4f4f 020250 istore 2 ,contw -0x4f50 020251 force 10 ,pdata -0x4f51 020252 iadd regb ,regb -0x4f52 020254 storet 2 ,mem_config_req_dest_cid -0x4f53 020255 copy queue ,pdata -0x4f54 020256 store 1 ,mem_config_identifier -0x4f55 020257 force l2cap_sdp_channel ,pdata -0x4f56 020258 icompare 0xff ,timeup -0x4f57 020259 branch l2cap_send_config_rsp_is_sdp ,true -0x4f58 020260 increase 1 ,pdata -: 020261 l2cap_send_config_rsp_is_sdp: -0x4f59 020263 rtn -: 020264 l2cap_check_channel_state: -0x4f5a 020265 disable user -0x4f5b 020266 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata -0x4f5c 020267 rtnbit0 l2cap_channel_state_conn_req ,pdata -0x4f5d 020268 rtnbit0 l2cap_channel_state_conn_res ,pdata -0x4f5e 020269 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x4f5f 020270 copy contr ,contw -0x4f60 020271 increase -1 ,contw -0x4f61 020272 istore 1 ,contw -0x4f62 020273 enable user -0x4f63 020274 rtn -: 020275 l2cap_send_config_req: -: 020276 l2cap_send_config_req_sdp: -0x4f64 020277 fetch 1 ,mem_sdp_state -0x4f65 020278 call l2cap_check_channel_state -0x4f66 020279 nbranch l2cap_send_config_req_rfcomm ,user -0x4f67 020280 jam l2cap_sdp_channel ,mem_send_config_req -0x4f68 020281 fetch 2 ,mem_sdp_remote_cid -0x4f69 020282 store 2 ,mem_config_req_dest_cid -0x4f6a 020283 branch l2cap_generate_config_req -: 020284 l2cap_send_config_req_rfcomm: -0x4f6b 020285 fetch 1 ,mem_rfcomm_state -0x4f6c 020286 call l2cap_check_channel_state -0x4f6d 020287 nbranch l2cap_send_config_req_hid_ctrl ,user -0x4f6e 020288 jam l2cap_rfcomm_channel ,mem_send_config_req -0x4f6f 020289 fetch 2 ,mem_rfcomm_remote_cid -0x4f70 020290 store 2 ,mem_config_req_dest_cid -0x4f71 020291 branch l2cap_generate_config_req -: 020292 l2cap_send_config_req_hid_ctrl: -0x4f72 020293 fetch 1 ,mem_hid_control_state -0x4f73 020294 call l2cap_check_channel_state -0x4f74 020295 nbranch l2cap_send_config_req_hid_int ,user -0x4f75 020296 jam l2cap_hid_control_channel ,mem_send_config_req -0x4f76 020297 fetch 2 ,mem_hid_ctrl_remote_cid -0x4f77 020298 store 2 ,mem_config_req_dest_cid -0x4f78 020299 branch l2cap_generate_config_req -: 020300 l2cap_send_config_req_hid_int: -0x4f79 020301 fetch 1 ,mem_hid_interrupt_state -0x4f7a 020302 call l2cap_check_channel_state -0x4f7b 020303 nrtn user -0x4f7c 020304 jam l2cap_hid_interrupt_channel ,mem_send_config_req -0x4f7d 020305 fetch 2 ,mem_hid_int_remote_cid -0x4f7e 020306 store 2 ,mem_config_req_dest_cid -: 020309 l2cap_generate_config_req: -0x4f7f 020310 bpatchx patch22_4 ,mem_patch22 -0x4f80 020311 call l2cap_get_req_id -0x4f81 020312 call l2cap_malloc_signal_channel -0x4f82 020313 force 0 ,regb -0x4f83 020314 call l2cap_get_signal_tx_payload -0x4f84 020315 force signal_config_req ,pdata -0x4f85 020316 istore 1 ,contw -0x4f86 020317 fetch 1 ,mem_ml2cap_comm_id -0x4f87 020318 istore 1 ,contw -0x4f88 020319 setarg 0x0008 -0x4f89 020320 istore 2 ,contw -0x4f8a 020321 fetch 2 ,mem_config_req_dest_cid -0x4f8b 020322 istore 2 ,contw -0x4f8c 020323 setarg 0x0000 -0x4f8d 020324 istore 2 ,contw -0x4f8e 020325 force 1 ,pdata -0x4f8f 020326 istore 1 ,contw -0x4f90 020327 force 2 ,pdata -0x4f91 020328 istore 1 ,contw -0x4f92 020329 fetch 1 ,mem_send_config_req -0x4f93 020330 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm -0x4f94 020331 setarg l2cap_config_mtu_sdp -0x4f95 020332 istore 2 ,contw -0x4f96 020333 branch l2cap_generate_config_req_done -: 020334 l2cap_generate_config_req_rfcomm: -0x4f97 020335 setarg l2cap_config_mtu_rfcomm -0x4f98 020336 istore 2 ,contw -: 020337 l2cap_generate_config_req_done: -0x4f99 020338 arg 0x0c ,temp -0x4f9a 020339 storet 2 ,mem_l2cap_signal_tx_length -0x4f9b 020340 call l2cap_get_signal_tx_buff -0x4f9c 020341 fetch 2 ,mem_l2cap_signal_tx_length -0x4f9d 020342 istore 2 ,contw -0x4f9e 020343 force l2cap_signal_channel ,pdata -0x4f9f 020344 istore 2 ,contw -0x4fa0 020345 jam 0 ,mem_send_config_req -: 020346 l2cap_proc_signal_config_req_rtn: -0x4fa1 020347 branch l2cap_process_one_signal_rtn -: 020349 l2cap_proc_signal_config_rsp: -0x4fa2 020350 increase 1 ,contr -0x4fa3 020351 ifetch 2 ,contr -0x4fa4 020352 copy pdata ,rega -0x4fa5 020353 copy regc ,pdata -0x4fa6 020354 isub rega ,regc -0x4fa7 020355 ifetch 2 ,contr -0x4fa8 020356 copy pdata ,rega -0x4fa9 020357 bpatchx patch22_5 ,mem_patch22 -0x4faa 020358 setarg l2cap_sdp_channel -0x4fab 020359 isub rega ,null -0x4fac 020360 branch l2cap_proc_signal_config_rsp_sdp ,zero -0x4fad 020361 setarg l2cap_rfcomm_channel -0x4fae 020362 isub rega ,null -0x4faf 020363 branch l2cap_proc_signal_config_rsp_rfcomm ,zero -0x4fb0 020364 setarg l2cap_hid_control_channel -0x4fb1 020365 isub rega ,null -0x4fb2 020366 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero -0x4fb3 020367 setarg l2cap_hid_interrupt_channel -0x4fb4 020368 isub rega ,null -0x4fb5 020369 branch l2cap_proc_signal_config_rsp_hid_int ,zero -0x4fb6 020370 increase 2 ,contr -0x4fb7 020371 ifetch 2 ,contr -0x4fb8 020372 iforce null -0x4fb9 020373 branch l2cap_process_one_signal_rtn -: 020374 l2cap_proc_signal_config_rsp_sdp: -0x4fba 020375 fetch 1 ,mem_sdp_state -0x4fbb 020376 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fbc 020377 store 1 ,mem_sdp_state -0x4fbd 020378 branch l2cap_process_one_signal_rtn -: 020379 l2cap_proc_signal_config_rsp_rfcomm: -0x4fbe 020380 fetch 1 ,mem_rfcomm_state -0x4fbf 020381 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fc0 020382 store 1 ,mem_rfcomm_state -0x4fc1 020383 branch l2cap_process_one_signal_rtn -: 020384 l2cap_proc_signal_config_rsp_hid_ctrl: -0x4fc2 020385 fetch 1 ,mem_hid_control_state -0x4fc3 020386 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fc4 020387 store 1 ,mem_hid_control_state -0x4fc5 020388 branch l2cap_process_one_signal_rtn -: 020389 l2cap_proc_signal_config_rsp_hid_int: -0x4fc6 020390 fetch 1 ,mem_hid_interrupt_state -0x4fc7 020391 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fc8 020392 store 1 ,mem_hid_interrupt_state -0x4fc9 020393 jam bt_evt_hid_connected ,mem_fifo_temp -0x4fca 020394 branch ui_ipc_send_event -: 020398 l2cap_proc_signal_disconnect_req: -0x4fcb 020399 ifetch 1 ,contr -0x4fcc 020400 copy pdata ,queue -0x4fcd 020401 ifetch 2 ,contr -0x4fce 020402 copy pdata ,rega -0x4fcf 020403 copy regc ,pdata -0x4fd0 020404 isub rega ,regc -0x4fd1 020405 ifetch 2 ,contr -0x4fd2 020406 copy pdata ,rega -0x4fd3 020407 ifetch 2 ,contr -0x4fd4 020408 copy pdata ,timeup -0x4fd5 020409 copy rega ,temp -0x4fd6 020410 call save_cont_pointers -0x4fd7 020411 bpatchx patch22_6 ,mem_patch22 -0x4fd8 020412 setarg l2cap_sdp_channel -0x4fd9 020413 isub temp ,null -0x4fda 020414 branch l2cap_proc_signal_disconnect_req_sdp ,zero -0x4fdb 020415 setarg l2cap_rfcomm_channel -0x4fdc 020416 isub temp ,null -0x4fdd 020417 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero -0x4fde 020418 setarg l2cap_hid_control_channel -0x4fdf 020419 isub temp ,null -0x4fe0 020420 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero -0x4fe1 020421 setarg l2cap_hid_interrupt_channel -0x4fe2 020422 isub temp ,null -0x4fe3 020423 branch l2cap_proc_signal_disconnect_req_hid_int ,zero -0x4fe4 020424 call l2cap_reject_command -0x4fe5 020425 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020426 l2cap_proc_signal_disconnect_req_hid_ctrl: -0x4fe6 020427 copy timeup ,temp -0x4fe7 020428 fetch 2 ,mem_hid_ctrl_remote_cid -0x4fe8 020429 isub temp ,null -0x4fe9 020430 branch l2cap_disconnect_hid_control_now ,zero -0x4fea 020431 call l2cap_reject_command -0x4feb 020432 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020433 l2cap_proc_signal_disconnect_req_hid_int: -0x4fec 020434 copy timeup ,temp -0x4fed 020435 fetch 2 ,mem_hid_int_remote_cid -0x4fee 020436 isub temp ,null -0x4fef 020437 branch l2cap_disconnect_hid_interrupt_now ,zero -0x4ff0 020438 call l2cap_reject_command -0x4ff1 020439 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020441 l2cap_proc_signal_disconnect_req_sdp: -0x4ff2 020442 copy timeup ,temp -0x4ff3 020443 fetch 2 ,mem_sdp_remote_cid -0x4ff4 020444 isub temp ,null -0x4ff5 020445 branch l2cap_disconnect_sdp_now ,zero -0x4ff6 020446 call l2cap_reject_command -0x4ff7 020447 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020448 l2cap_disconnect_hid_control_now: -0x4ff8 020449 call l2cap_reset_hid_ctrl_state -0x4ff9 020450 branch l2cap_send_disconnect_rsp_pkt -: 020451 l2cap_disconnect_hid_interrupt_now: -0x4ffa 020452 call l2cap_reset_hid_int_state -0x4ffb 020453 fetch 2 ,mem_hid_ctrl_remote_cid -0x4ffc 020454 branch l2cap_send_disconnect_rsp_pkt ,blank -0x4ffd 020462 branch l2cap_send_disconnect_rsp_pkt -: 020464 l2cap_disconnect_sdp_now: -0x4ffe 020465 call l2cap_reset_sdp_channel_state -0x4fff 020466 fetch 1 ,mem_upper_sm_ss -0x5000 020467 nbranch l2cap_send_disconnect_rsp_pkt ,blank -0x5001 020470 branch l2cap_send_disconnect_rsp_pkt -: 020471 l2cap_proc_signal_disconnect_req_rfcomm: -0x5002 020472 copy timeup ,temp -0x5003 020473 fetch 2 ,mem_rfcomm_remote_cid -0x5004 020474 isub temp ,null -0x5005 020475 branch l2cap_disconnect_rfcomm_now ,zero -0x5006 020476 call l2cap_reject_command -0x5007 020477 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020478 l2cap_disconnect_rfcomm_now: -0x5008 020479 call l2cap_reset_rfcomm_channel_state -0x5009 020480 branch l2cap_send_disconnect_rsp_pkt -: 020481 l2cap_send_disconnect_rsp_pkt: -0x500a 020482 call load_cont_pointers -0x500b 020483 setarg signal_disconnect_rsp -0x500c 020484 istore 1 ,contw -0x500d 020485 copy queue ,pdata -0x500e 020486 istore 1 ,contw -0x500f 020487 setarg 0x0004 -0x5010 020488 istore 2 ,contw -0x5011 020489 copy rega ,pdata -0x5012 020490 istore 2 ,contw -0x5013 020491 copy timeup ,pdata -0x5014 020492 istore 2 ,contw -0x5015 020493 force 8 ,pdata -0x5016 020494 branch l2cap_proc_signal_disconnect_req_rtn -: 020495 l2cap_proc_signal_disconnect_req_err_rtn: -0x5017 020496 call load_cont_pointers -0x5018 020497 branch l2cap_proc_signal_disconnect_req_rtn -: 020498 l2cap_proc_signal_disconnect_req_rtn: -0x5019 020499 iadd regb ,regb -0x501a 020500 branch l2cap_process_one_signal_rtn -: 020501 l2cap_proc_signal_disconnect_rsp: -0x501b 020502 ifetch 1 ,contr -0x501c 020503 copy pdata ,queue -0x501d 020504 ifetch 2 ,contr -0x501e 020505 copy pdata ,rega -0x501f 020506 copy regc ,pdata -0x5020 020507 isub rega ,regc -0x5021 020508 ifetch 2 ,contr -0x5022 020509 copy pdata ,timeup -0x5023 020510 ifetch 2 ,contr -0x5024 020511 copy pdata ,temp -0x5025 020512 call save_cont_pointers -0x5026 020513 bpatchx patch22_7 ,mem_patch22 -0x5027 020514 setarg l2cap_sdp_channel -0x5028 020515 isub temp ,null -0x5029 020516 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero -0x502a 020517 setarg l2cap_rfcomm_channel -0x502b 020518 isub temp ,null -0x502c 020519 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero -0x502d 020520 setarg l2cap_hid_control_channel -0x502e 020521 isub temp ,null -0x502f 020522 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero -0x5030 020523 setarg l2cap_hid_interrupt_channel -0x5031 020524 isub temp ,null -0x5032 020525 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero -0x5033 020526 call l2cap_reject_command -0x5034 020527 branch l2cap_proc_signal_disconnect_rsp_err_rtn -: 020528 l2cap_proc_signal_disconnect_rsp_sdp: -0x5035 020529 copy temp ,rega -0x5036 020530 copy timeup ,temp -0x5037 020531 fetch 2 ,mem_sdp_remote_cid -0x5038 020532 isub temp ,null -0x5039 020533 call l2cap_reset_sdp_channel_state ,zero -0x503a 020534 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020535 l2cap_proc_signal_disconnect_rsp_rfcomm: -0x503b 020536 copy temp ,rega -0x503c 020537 copy timeup ,temp -0x503d 020538 fetch 2 ,mem_rfcomm_remote_cid -0x503e 020539 isub temp ,null -0x503f 020540 call l2cap_reset_rfcomm_channel_state ,zero -0x5040 020541 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020542 l2cap_proc_signal_disconnect_rsp_hid_ctrl: -0x5041 020543 copy temp ,rega -0x5042 020544 copy timeup ,temp -0x5043 020545 fetch 2 ,mem_hid_ctrl_remote_cid -0x5044 020546 isub temp ,null -0x5045 020547 call l2cap_reset_hid_ctrl_state ,zero -0x5046 020548 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020549 l2cap_proc_signal_disconnect_rsp_hid_int: -0x5047 020550 copy temp ,rega -0x5048 020551 copy timeup ,temp -0x5049 020552 fetch 2 ,mem_hid_int_remote_cid -0x504a 020553 isub temp ,null -0x504b 020554 call l2cap_reset_hid_int_state ,zero -0x504c 020555 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020556 l2cap_proc_signal_disconnect_rsp_rtn: -0x504d 020557 call load_cont_pointers -0x504e 020558 branch l2cap_process_one_signal_rtn -: 020559 l2cap_proc_signal_disconnect_rsp_err_rtn: -0x504f 020560 branch l2cap_process_one_signal_rtn -: 020563 l2cap_proc_signal_echo_req: -0x5050 020564 ifetch 1 ,contr -0x5051 020565 copy pdata ,queue -0x5052 020566 ifetch 2 ,contr -0x5053 020567 copy pdata ,rega -0x5054 020568 iadd contr ,contr -0x5055 020569 setarg 9 -0x5056 020570 istore 1 ,contw -0x5057 020571 copy queue ,pdata -0x5058 020572 istore 1 ,contw -0x5059 020573 force 0x0000 ,pdata -0x505a 020574 istore 2 ,contw -0x505b 020575 force 4 ,pdata -0x505c 020576 iadd regb ,regb -0x505d 020577 copy regc ,pdata -0x505e 020578 isub rega ,regc -0x505f 020579 branch l2cap_process_one_signal_rtn -: 020580 l2cap_proc_signal_echo_rsp: -0x5060 020581 branch l2cap_process_one_signal_rtn -: 020583 l2cap_proc_signal_info_rsp: -0x5061 020584 branch l2cap_process_one_signal_rtn -: 020585 l2cap_reject_command: -0x5062 020586 force 0 ,regb -0x5063 020587 call l2cap_get_signal_tx_payload -0x5064 020588 setarg signal_cmd_reject -0x5065 020589 istore 1 ,contw -0x5066 020590 copy queue ,pdata -0x5067 020591 istore 1 ,contw -0x5068 020592 setarg 2 -0x5069 020593 istore 2 ,contw -0x506a 020594 setarg cmd_not_understood -0x506b 020595 istore 2 ,contw -0x506c 020596 increase 6 ,regb -0x506d 020597 arg 4 ,regc -0x506e 020598 branch l2cap_process_one_signal_rtn -: 020602 l2cap_reset_rfcomm_channel_state: -0x506f 020603 setarg 0 -0x5070 020604 store 2 ,mem_rfcomm_tx_pkt_length -0x5071 020605 store 2 ,mem_rfcomm_remote_cid -0x5072 020606 jam 0 ,mem_rfcomm_state -0x5073 020607 rtn -: 020608 l2cap_reset_sdp_channel_state: -0x5074 020609 setarg 0 -0x5075 020610 store 2 ,mem_sdp_tx_pkt_length -0x5076 020611 store 2 ,mem_sdp_remote_cid -0x5077 020612 jam 0 ,mem_sdp_state -0x5078 020613 rtn -: 020614 l2cap_reset_hid_ctrl_state: -0x5079 020615 setarg 0 -0x507a 020616 store 2 ,mem_hid_ctrl_remote_cid -0x507b 020617 jam 0 ,mem_hid_control_state -0x507c 020618 fetch 1 ,mem_hid_interrupt_state -0x507d 020619 beq 0 ,l2cap_reset_hid_disconnected -0x507e 020620 rtn -: 020622 l2cap_reset_hid_int_state: -0x507f 020623 setarg 0 -0x5080 020624 store 2 ,mem_hid_int_remote_cid -0x5081 020625 jam 0 ,mem_hid_interrupt_state -0x5082 020626 fetch 1 ,mem_hid_control_state -0x5083 020627 beq 0 ,l2cap_reset_hid_disconnected -0x5084 020628 rtn -: 020630 l2cap_reset_hid_disconnected: -0x5085 020631 jam bt_evt_hid_disconnected ,mem_fifo_temp -0x5086 020632 branch ui_ipc_send_event -: 020634 l2cap_disconnect_interrupt_req: -0x5087 020635 fetch 1 ,mem_control_tasks -0x5088 020636 set0 l2cap_disconnect_interrupt ,pdata -0x5089 020637 store 1 ,mem_control_tasks -0x508a 020638 fetch 2 ,mem_hid_int_remote_cid -0x508b 020639 rtn blank -0x508c 020640 call l2cap_malloc_signal_channel -0x508d 020641 fetch 2 ,mem_hid_int_remote_cid -0x508e 020642 copy pdata ,rega -0x508f 020643 force l2cap_hid_interrupt_channel ,regb -0x5090 020644 branch l2cap_generate_disconnect_req -: 020645 l2cap_disconnect_control_req: -0x5091 020646 fetch 1 ,mem_control_tasks -0x5092 020647 set0 l2cap_disconnect_control ,pdata -0x5093 020648 store 1 ,mem_control_tasks -0x5094 020649 fetch 2 ,mem_hid_ctrl_remote_cid -0x5095 020650 rtn blank -0x5096 020651 call l2cap_malloc_signal_channel -0x5097 020652 fetch 2 ,mem_hid_ctrl_remote_cid -0x5098 020653 copy pdata ,rega -0x5099 020654 force l2cap_hid_control_channel ,regb -: 020655 l2cap_generate_disconnect_req: -0x509a 020656 call l2cap_get_req_id -0x509b 020657 call l2cap_get_signal_tx_payload -0x509c 020658 force signal_disconnect_req ,pdata -0x509d 020659 istore 1 ,contw -0x509e 020660 fetch 1 ,mem_ml2cap_comm_id -0x509f 020661 istore 1 ,contw -0x50a0 020662 setarg 0x0004 -0x50a1 020663 istore 2 ,contw -0x50a2 020664 copy rega ,pdata -0x50a3 020665 istore 2 ,contw -0x50a4 020666 copy regb ,pdata -0x50a5 020667 istore 2 ,contw -0x50a6 020668 force 0x08 ,temp -0x50a7 020669 branch ml2cap_send_signal -: 020671 ml2cap_send_signal_connect_req: -0x50a8 020672 bpatchx patch23_0 ,mem_patch23 -0x50a9 020673 call l2cap_get_req_id -0x50aa 020674 call l2cap_get_signal_tx_payload -0x50ab 020675 setarg signal_connect_req -0x50ac 020676 istore 1 ,contw -0x50ad 020677 fetch 1 ,mem_ml2cap_comm_id -0x50ae 020678 istore 1 ,contw -0x50af 020679 setarg 0x0004 -0x50b0 020680 istore 2 ,contw -0x50b1 020681 copy temp ,pdata -0x50b2 020682 istore 2 ,contw -0x50b3 020683 copy timeup ,pdata -0x50b4 020684 istore 2 ,contw -0x50b5 020685 arg 8 ,temp -0x50b6 020686 branch ml2cap_send_signal -: 020687 ml2cap_send_signal_config_req: -0x50b7 020688 bpatchx patch23_1 ,mem_patch23 -0x50b8 020689 call l2cap_get_req_id -0x50b9 020690 call l2cap_get_signal_tx_payload -0x50ba 020691 setarg signal_config_req -0x50bb 020692 istore 1 ,contw -0x50bc 020693 fetch 1 ,mem_ml2cap_comm_id -0x50bd 020694 istore 1 ,contw -0x50be 020695 setarg 0x0008 -0x50bf 020696 istore 2 ,contw -0x50c0 020698 copy temp ,pdata -0x50c1 020700 istore 2 ,contw -0x50c2 020701 setarg 0x0000 -0x50c3 020702 istore 2 ,contw -0x50c4 020703 setarg 0x01 -0x50c5 020704 istore 1 ,contw -0x50c6 020705 setarg 0x02 -0x50c7 020706 istore 1 ,contw -0x50c8 020707 setarg l2cap_config_mtu_rfcomm -0x50c9 020708 istore 2 ,contw -0x50ca 020709 arg 0xc ,temp -0x50cb 020710 branch ml2cap_send_signal -: 020711 ml2cap_send_signal_disconn_req: -0x50cc 020712 bpatchx patch23_2 ,mem_patch23 -0x50cd 020713 call l2cap_get_req_id -0x50ce 020714 call l2cap_get_signal_tx_payload -0x50cf 020715 setarg signal_disconnect_req -0x50d0 020716 istore 1 ,contw -0x50d1 020717 fetch 1 ,mem_ml2cap_comm_id -0x50d2 020718 increase 1 ,pdata -0x50d3 020719 copy contw ,rega -0x50d4 020720 store 1 ,mem_ml2cap_comm_id -0x50d5 020721 copy rega ,contw -0x50d6 020722 istore 1 ,contw -0x50d7 020723 setarg 0x0004 -0x50d8 020724 istore 2 ,contw -0x50d9 020725 copy temp ,pdata -0x50da 020726 istore 2 ,contw -0x50db 020727 copy timeup ,pdata -0x50dc 020728 istore 2 ,contw -0x50dd 020729 arg 0x8 ,temp -: 020732 ml2cap_send_signal: -0x50de 020733 storet 2 ,mem_l2cap_signal_tx_length -0x50df 020734 copy temp ,pdata -0x50e0 020735 branch l2cap_malloc_discard ,blank -0x50e1 020736 call l2cap_get_signal_tx_buff -0x50e2 020737 fetch 2 ,mem_l2cap_signal_tx_length -0x50e3 020738 istore 2 ,contw -0x50e4 020739 force l2cap_signal_channel ,pdata -0x50e5 020740 istore 2 ,contw -0x50e6 020741 rtn -: 020743 msdp_send_req_done: -0x50e7 020744 fetch 2 ,mem_sdp_tx_pkt_length -0x50e8 020745 branch assert ,blank -0x50e9 020746 call l2cap_get_sdp_tx_buff -0x50ea 020747 fetch 2 ,mem_sdp_tx_pkt_length -0x50eb 020748 istore 2 ,contw -0x50ec 020749 fetch 2 ,mem_sdp_remote_cid -0x50ed 020750 istore 2 ,contw -0x50ee 020751 rtn -: 020752 ml2cap_rx_multiplexing: -0x50ef 020753 fetch 2 ,mem_l2cap_rx_pkt_length -0x50f0 020754 branch l2cap_rx_reset_state ,blank -0x50f1 020755 bpatchx patch23_3 ,mem_patch23 -0x50f2 020756 fetch 1 ,mem_l2cap_rx_cid -0x50f3 020757 beq l2cap_signal_channel ,ml2cap_call_proc_signal -0x50f4 020758 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp -0x50f5 020759 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm -0x50f6 020760 beq l2cap_hid_control_channel ,l2cap_call_proc_hid -0x50f7 020761 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid -0x50f8 020762 branch l2cap_rx_reset_state -: 020764 ml2cap_call_proc_signal: -0x50f9 020765 bpatchx patch23_4 ,mem_patch23 -0x50fa 020766 call l2cap_malloc_signal_channel -0x50fb 020767 force 0 ,regb -0x50fc 020768 call l2cap_get_signal_tx_payload -0x50fd 020769 copy pdata ,contw -0x50fe 020770 fetch 2 ,mem_l2cap_rx_pkt_length -0x50ff 020771 copy pdata ,regc -0x5100 020772 fetch 2 ,mem_l2cap_payload_ptr -0x5101 020773 iforce contr -: 020774 ml2cap_proc_one_comm_loop: -0x5102 020775 call ml2cap_proc_one_comm -0x5103 020776 increase -4 ,regc -0x5104 020777 nbranch ml2cap_proc_one_comm_loop ,zero -0x5105 020778 copy regb ,temp -0x5106 020779 call ml2cap_send_signal -0x5107 020780 branch l2cap_rx_reset_state -: 020782 ml2cap_proc_one_comm: -0x5108 020783 ifetch 1 ,contr -0x5109 020784 beq signal_connect_req ,ml2cap_proc_signal_connect_req -0x510a 020785 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject -0x510b 020786 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp -0x510c 020787 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp -0x510d 020788 beq signal_config_req ,ml2cap_proc_signal_config_req -0x510e 020789 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp -0x510f 020790 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req -0x5110 020791 beq signal_echo_req ,l2cap_proc_signal_echo_req -0x5111 020792 beq signal_info_req ,ml2cap_proc_signal_info_req -0x5112 020793 branch ml2cap_proc_send_reject -: 020795 ml2cap_proc_signal_connect_req: -0x5113 020796 call save_cont_pointers -0x5114 020798 call load_cont_pointers -0x5115 020799 branch l2cap_proc_signal_connect_req -: 020800 ml2cap_proc_signal_cmd_reject: -0x5116 020801 ifetch 1 ,contr -0x5117 020802 copy pdata ,queue -0x5118 020803 ifetch 2 ,contr -0x5119 020804 copy pdata ,rega -0x511a 020805 copy regc ,pdata -0x511b 020806 isub rega ,regc -: 020807 mvptr: -0x511c 020808 ifetch 1 ,contr -0x511d 020809 increase -1 ,rega -0x511e 020810 nbranch mvptr ,zero -0x511f 020811 rtn -: 020812 ml2cap_proc_signal_connect_rsp: -0x5120 020813 ifetch 1 ,contr -0x5121 020814 copy pdata ,queue -0x5122 020815 ifetch 2 ,contr -0x5123 020816 copy pdata ,rega -0x5124 020817 ifetch 2 ,contr -0x5125 020818 copy pdata ,timeup -0x5126 020819 ifetch 2 ,contr -0x5127 020820 copy pdata ,temp -0x5128 020821 ifetch 2 ,contr -0x5129 020822 sub pdata ,0 ,null -0x512a 020823 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero -0x512b 020824 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result -0x512c 020825 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result -0x512d 020826 branch ml2cap_proc_signal_connect_rsp_mnosucc -: 020827 ml2cap_proc_signal_connect_refused_result: -0x512e 020828 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp -0x512f 020829 call ui_ipc_send_event -: 020830 ml2cap_proc_signal_connect_rsp_mnosucc: -0x5130 020831 ifetch 2 ,contr -0x5131 020832 branch mnosucc -: 020833 ml2cap_proc_signal_connect_rsp_sucessful: -0x5132 020834 call save_cont_pointers -0x5133 020838 bpatchx patch23_5 ,mem_patch23 -0x5134 020839 setarg l2cap_sdp_channel -0x5135 020840 isub temp ,null -0x5136 020841 branch ml2cap_proc_signal_connect_rsp_sdp ,zero -0x5137 020842 setarg l2cap_rfcomm_channel -0x5138 020843 isub temp ,null -0x5139 020844 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero -0x513a 020845 setarg l2cap_hid_interrupt_channel -0x513b 020846 isub temp ,null -0x513c 020847 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero -0x513d 020848 setarg l2cap_hid_control_channel -0x513e 020849 isub temp ,null -0x513f 020850 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero -0x5140 020851 branch mnosucc -: 020852 ml2cap_proc_signal_connect_rsp_sdp: -0x5141 020853 copy timeup ,pdata -0x5142 020854 store 2 ,mem_sdp_remote_cid -0x5143 020855 fetch 1 ,mem_sdp_state -0x5144 020856 set1 l2cap_channel_state_conn_res -0x5145 020857 store 1 ,mem_sdp_state -0x5146 020858 branch mnosucc1 -: 020859 ml2cap_proc_signal_connect_rsp_rfcomm: -0x5147 020860 copy timeup ,pdata -0x5148 020861 store 2 ,mem_rfcomm_remote_cid -0x5149 020862 fetch 1 ,mem_rfcomm_state -0x514a 020863 set1 l2cap_channel_state_conn_res -0x514b 020864 store 1 ,mem_rfcomm_state -0x514c 020865 branch mnosucc1 -: 020866 ml2cap_proc_signal_connect_rsp_hid_ctrl: -0x514d 020867 copy timeup ,pdata -0x514e 020868 store 2 ,mem_hid_ctrl_remote_cid -0x514f 020869 fetch 1 ,mem_hid_control_state -0x5150 020870 set1 l2cap_channel_state_conn_res -0x5151 020871 store 1 ,mem_hid_control_state -0x5152 020872 branch mnosucc1 -: 020873 ml2cap_proc_signal_connect_rsp_hid_int: -0x5153 020874 copy timeup ,pdata -0x5154 020875 store 2 ,mem_hid_int_remote_cid -0x5155 020876 fetch 1 ,mem_hid_interrupt_state -0x5156 020877 set1 l2cap_channel_state_conn_res -0x5157 020878 store 1 ,mem_hid_interrupt_state -: 020881 mnosucc1: -0x5158 020882 call load_cont_pointers -: 020883 mnosucc: -0x5159 020884 copy regc ,pdata -0x515a 020885 isub rega ,regc -0x515b 020886 rtn -: 020888 ml2cap_proc_signal_config_rsp: -0x515c 020889 ifetch 1 ,contr -0x515d 020890 copy pdata ,queue -0x515e 020891 ifetch 2 ,contr -0x515f 020892 copy pdata ,rega -0x5160 020893 copy regc ,pdata -0x5161 020894 isub rega ,regc -0x5162 020895 ifetch 2 ,contr -0x5163 020896 copy pdata ,timeup -0x5164 020897 ifetch 2 ,contr -0x5165 020898 ifetch 2 ,contr -0x5166 020899 nbranch mcrsdone1 ,blank -0x5167 020900 call save_cont_pointers -0x5168 020904 copy timeup ,temp -0x5169 020905 bpatchx patch23_6 ,mem_patch23 -0x516a 020906 setarg l2cap_sdp_channel -0x516b 020907 isub temp ,null -0x516c 020908 branch ml2cap_proc_signal_config_rsp_sdp ,zero -0x516d 020909 setarg l2cap_rfcomm_channel -0x516e 020910 isub temp ,null -0x516f 020911 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero -0x5170 020912 setarg l2cap_hid_control_channel -0x5171 020913 isub temp ,null -0x5172 020914 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero -0x5173 020915 setarg l2cap_hid_interrupt_channel -0x5174 020916 isub temp ,null -0x5175 020917 branch ml2cap_proc_signal_config_rsp_hid_int ,zero -: 020918 ml2cap_proc_signal_config_rsp_sdp: -0x5176 020919 fetch 1 ,mem_sdp_state -0x5177 020920 set1 l2cap_channel_state_rcv_cfg_res -0x5178 020921 store 1 ,mem_sdp_state -0x5179 020922 rtn -: 020923 ml2cap_proc_signal_config_rsp_rfcomm: -0x517a 020924 fetch 1 ,mem_rfcomm_state -0x517b 020925 set1 l2cap_channel_state_rcv_cfg_res -0x517c 020926 store 1 ,mem_rfcomm_state -0x517d 020927 rtn -: 020928 ml2cap_proc_signal_config_rsp_hid_ctrl: -0x517e 020929 fetch 1 ,mem_hid_control_state -0x517f 020930 set1 l2cap_channel_state_rcv_cfg_res -0x5180 020931 store 1 ,mem_hid_control_state -0x5181 020932 rtn -: 020933 ml2cap_proc_signal_config_rsp_hid_int: -0x5182 020934 fetch 1 ,mem_hid_interrupt_state -0x5183 020935 set1 l2cap_channel_state_rcv_cfg_res -0x5184 020936 store 1 ,mem_hid_interrupt_state -0x5185 020937 jam bt_evt_hid_connected ,mem_fifo_temp -0x5186 020938 branch ui_ipc_send_event -: 020941 mcfrsdone: -0x5187 020942 call load_cont_pointers -: 020943 mcrsdone1: -0x5188 020944 increase -6 ,rega -: 020945 mloop2: -0x5189 020946 branch mcrsdone ,zero -0x518a 020947 increase 1 ,contr -0x518b 020948 increase -1 ,rega -0x518c 020949 branch mloop2 -: 020950 mcrsdone: -0x518d 020951 rtn -: 020952 ml2cap_proc_signal_config_req: -0x518e 020953 ifetch 1 ,contr -0x518f 020954 copy pdata ,queue -0x5190 020955 ifetch 2 ,contr -0x5191 020956 copy pdata ,rega -0x5192 020957 copy regc ,pdata -0x5193 020958 isub rega ,regc -0x5194 020959 ifetch 2 ,contr -0x5195 020960 increase 2 ,contr -0x5196 020961 copy pdata ,temp -0x5197 020962 setarg signal_config_rsp -0x5198 020963 istore 1 ,contw -0x5199 020964 copy queue ,pdata -0x519a 020965 istore 1 ,contw -0x519b 020966 increase 2 ,rega -0x519c 020967 copy rega ,pdata -0x519d 020968 istore 2 ,contw -0x519e 020969 call save_cont_pointers -0x519f 020970 bpatchx patch23_7 ,mem_patch23 -0x51a0 020971 setarg l2cap_sdp_channel -0x51a1 020972 isub temp ,null -0x51a2 020973 branch ml2cap_proc_signal_config_req_sdp ,zero -0x51a3 020974 setarg l2cap_rfcomm_channel -0x51a4 020975 isub temp ,null -0x51a5 020976 branch ml2cap_proc_signal_config_req_rfcomm ,zero -0x51a6 020977 setarg l2cap_hid_control_channel -0x51a7 020978 isub temp ,null -0x51a8 020979 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero -0x51a9 020980 setarg l2cap_hid_interrupt_channel -0x51aa 020981 isub temp ,null -0x51ab 020982 branch ml2cap_proc_signal_config_req_hid_int ,zero -0x51ac 020983 branch mcfgrq_done -: 020984 ml2cap_proc_signal_config_req_sdp: -0x51ad 020985 fetch 1 ,mem_sdp_state -0x51ae 020986 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51af 020987 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51b0 020988 store 1 ,mem_sdp_state -0x51b1 020989 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq -0x51b2 020990 fetcht 1 ,mem_control_tasks -0x51b3 020991 set1 l2cap_init_config_req ,temp -0x51b4 020992 storet 1 ,mem_control_tasks -0x51b5 020993 copy queue ,pdata -0x51b6 020994 increase 1 ,pdata -0x51b7 020995 store 1 ,mem_config_identifier -0x51b8 020996 fetch 1 ,mem_sdp_state -0x51b9 020997 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x51ba 020998 store 1 ,mem_sdp_state -: 020999 ml2cap_proc_signal_config_req_sdp_nsndreq: -0x51bb 021000 fetch 2 ,mem_sdp_remote_cid -0x51bc 021001 store 2 ,mem_config_req_dest_cid -0x51bd 021002 branch mcfgrq_done -: 021003 ml2cap_proc_signal_config_req_rfcomm: -0x51be 021004 fetch 1 ,mem_rfcomm_state -0x51bf 021005 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51c0 021006 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51c1 021007 store 1 ,mem_rfcomm_state -0x51c2 021008 fetch 2 ,mem_rfcomm_remote_cid -0x51c3 021009 branch mcfgrq_done -: 021010 ml2cap_proc_signal_config_req_hid_ctrl: -0x51c4 021011 fetch 1 ,mem_hid_control_state -0x51c5 021012 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51c6 021013 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51c7 021014 store 1 ,mem_hid_control_state -0x51c8 021015 fetch 2 ,mem_hid_ctrl_remote_cid -0x51c9 021016 branch mcfgrq_done -: 021017 ml2cap_proc_signal_config_req_hid_int: -0x51ca 021018 fetch 1 ,mem_hid_interrupt_state -0x51cb 021019 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51cc 021020 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51cd 021021 store 1 ,mem_hid_interrupt_state -0x51ce 021022 fetch 2 ,mem_hid_int_remote_cid -: 021025 mcfgrq_done: -0x51cf 021026 copy pdata ,timeup -0x51d0 021027 call load_cont_pointers -0x51d1 021029 copy timeup ,pdata -0x51d2 021031 istore 2 ,contw -0x51d3 021032 force 0x0000 ,pdata -0x51d4 021033 istore 2 ,contw -0x51d5 021034 force 0x0000 ,pdata -0x51d6 021035 istore 2 ,contw -0x51d7 021036 force 10 ,pdata -0x51d8 021037 iadd regb ,regb -0x51d9 021038 increase -6 ,rega -: 021039 mloop1: -0x51da 021040 branch mcrqdone ,zero -0x51db 021041 ifetch 1 ,contr -0x51dc 021042 istore 1 ,contw -0x51dd 021043 increase 1 ,regb -0x51de 021044 increase -1 ,rega -0x51df 021045 branch mloop1 -: 021046 mcrqdone: -0x51e0 021047 rtn -: 021048 ml2cap_proc_signal_disconn_req: -0x51e1 021049 ifetch 1 ,contr -0x51e2 021050 copy pdata ,queue -0x51e3 021051 ifetch 2 ,contr -0x51e4 021052 copy pdata ,rega -0x51e5 021053 copy regc ,pdata -0x51e6 021054 isub rega ,regc -0x51e7 021056 ifetch 2 ,contr -0x51e8 021057 copy pdata ,rega -0x51e9 021058 ifetch 2 ,contr -0x51ea 021059 copy pdata ,timeup -0x51eb 021060 call save_cont_pointers -0x51ec 021061 bpatchx patch24_0 ,mem_patch24 -0x51ed 021062 setarg l2cap_sdp_channel -0x51ee 021063 copy rega ,temp -0x51ef 021064 isub temp ,null -0x51f0 021065 branch ml2cap_proc_signal_disconn_sdp ,zero -0x51f1 021066 setarg l2cap_hid_control_channel -0x51f2 021067 copy rega ,temp -0x51f3 021068 isub temp ,null -0x51f4 021069 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero -0x51f5 021070 setarg l2cap_hid_interrupt_channel -0x51f6 021071 copy rega ,temp -0x51f7 021072 isub temp ,null -0x51f8 021073 branch ml2cap_proc_signal_disconn_hid_int ,zero -0x51f9 021074 branch mclsrfc -: 021075 ml2cap_proc_signal_disconn_sdp: -0x51fa 021076 setarg 0x0000 -0x51fb 021077 store 2 ,mem_sdp_tx_pkt_length -0x51fc 021078 store 2 ,mem_sdp_remote_cid -0x51fd 021079 store 1 ,mem_sdp_state -0x51fe 021080 branch mclssdp -: 021081 ml2cap_proc_signal_disconn_hid_ctrl: -0x51ff 021082 call l2cap_reset_hid_ctrl_state -0x5200 021083 branch mclssdp -: 021084 ml2cap_proc_signal_disconn_hid_int: -0x5201 021085 call l2cap_reset_hid_int_state -0x5202 021091 branch mclssdp -: 021092 mclsrfc: -0x5203 021093 setarg 0x0000 -0x5204 021094 store 2 ,mem_rfcomm_tx_pkt_length -: 021095 mclssdp: -0x5205 021096 call load_cont_pointers -0x5206 021097 setarg signal_disconnect_rsp -0x5207 021098 istore 1 ,contw -0x5208 021099 copy queue ,pdata -0x5209 021100 istore 1 ,contw -0x520a 021101 setarg 0x0004 -0x520b 021102 istore 2 ,contw -0x520c 021103 copy rega ,pdata -0x520d 021104 istore 2 ,contw -0x520e 021105 copy timeup ,pdata -0x520f 021106 istore 2 ,contw -0x5210 021107 force 8 ,pdata -0x5211 021108 iadd regb ,regb -0x5212 021109 rtn -: 021111 ml2cap_proc_signal_disconn_rsp: -0x5213 021112 ifetch 1 ,contr -0x5214 021113 copy pdata ,queue -0x5215 021114 ifetch 2 ,contr -0x5216 021115 copy pdata ,rega -0x5217 021116 ifetch 2 ,contr -0x5218 021117 copy pdata ,timeup -0x5219 021118 ifetch 2 ,contr -0x521a 021119 copy pdata ,temp -0x521b 021120 call save_cont_pointers -0x521c 021121 bpatchx patch24_1 ,mem_patch24 -0x521d 021122 fetch 1 ,mem_ml2cap_comm_id -0x521e 021123 icompare 0xff ,queue -0x521f 021124 nbranch mdisdone ,true -0x5220 021125 setarg l2cap_sdp_channel -0x5221 021126 isub temp ,null -0x5222 021127 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero -0x5223 021128 setarg l2cap_rfcomm_channel -0x5224 021129 isub temp ,null -0x5225 021130 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero -0x5226 021131 branch mdisdone -: 021132 ml2cap_proc_signal_disconn_rsp_sdp: -0x5227 021133 jam 0 ,mem_sdp_remote_cid -0x5228 021134 jam 0 ,mem_sdp_state -0x5229 021135 branch mdisdone -: 021136 ml2cap_proc_signal_disconn_rsp_rfcomm: -: 021139 mdisdone: -0x522a 021140 call load_cont_pointers -0x522b 021141 copy regc ,pdata -0x522c 021142 isub rega ,regc -0x522d 021143 rtn -: 021145 ml2cap_proc_send_reject: -0x522e 021146 setarg signal_cmd_reject -0x522f 021147 istore 1 ,contw -0x5230 021148 ifetch 1 ,contr -0x5231 021149 istore 1 ,contw -0x5232 021150 setarg 0x0002 -0x5233 021151 istore 2 ,contw -0x5234 021152 setarg 0x0000 -0x5235 021153 istore 2 ,contw -0x5236 021154 setarg 0x0006 -0x5237 021155 iadd regb ,regb -0x5238 021156 force 4 ,regc -0x5239 021157 rtn -: 021160 l2cap_get_req_id: -0x523a 021161 fetch 1 ,mem_ml2cap_comm_id -0x523b 021162 increase 1 ,pdata -0x523c 021163 bne 0 ,l2cap_get_req_id_ok -0x523d 021164 increase 1 ,pdata -: 021165 l2cap_get_req_id_ok: -0x523e 021166 store 1 ,mem_ml2cap_comm_id -0x523f 021167 rtn -: 021177 l2cap_malloc: -0x5240 021178 bpatchx patch24_2 ,mem_patch24 -0x5241 021179 arg 0 ,regb -0x5242 021180 call l2cap_malloc_is_fifo_full -0x5243 021181 nbranch assert ,blank -0x5244 021182 call l2cap_malloc_get_full_map -0x5245 021183 arg mem_tx_buff0 ,regb -0x5246 021184 arg 0 ,queue -: 021185 l2cap_malloc_loop: -0x5247 021186 fetcht 1 ,mem_used_map -0x5248 021187 qisolate1 temp -0x5249 021188 branch l2cap_malloc_next ,true -0x524a 021189 call l2cap_malloc_enough -0x524b 021190 sub timeup ,0 ,null -0x524c 021191 branch l2cap_malloc_next ,positive -0x524d 021192 call l2cap_malloc_into_fifo -0x524e 021193 branch l2cap_malloc_rtn -: 021194 l2cap_malloc_next: -0x524f 021195 increase 128 ,regb -0x5250 021196 increase 1 ,queue -0x5251 021197 setarg 8 -0x5252 021198 isub queue ,null -0x5253 021199 branch l2cap_malloc_loop ,positive -0x5254 021200 arg 0 ,regb -: 021201 l2cap_malloc_rtn: -0x5255 021202 copy regb ,pdata -0x5256 021203 branch assert ,blank -0x5257 021204 rtn -: 021212 l2cap_malloc_fifo_out: -0x5258 021213 bpatchx patch24_3 ,mem_patch24 -0x5259 021214 call l2cap_malloc_fifo_get_first_ptr -0x525a 021215 increase 1 ,contr -0x525b 021216 ifetch 2 ,contr -0x525c 021217 rtn -: 021223 l2cap_malloc_free: -0x525d 021224 bpatchx patch24_4 ,mem_patch24 -0x525e 021225 call l2cap_malloc_fifo_get_first_ptr -0x525f 021226 copy contr ,contw -0x5260 021227 copy contr ,temp -0x5261 021228 setarg 0 -0x5262 021229 istore 3 ,contw -0x5263 021230 rtn -: 021235 l2cap_malloc_discard: -0x5264 021236 bpatchx patch24_5 ,mem_patch24 -0x5265 021237 call l2cap_malloc_is_fifo_empty -0x5266 021238 branch assert ,blank -0x5267 021239 fetch 3 ,mem_tx_fifo2 -0x5268 021240 store 3 ,mem_tx_fifo3 -0x5269 021241 fetch 3 ,mem_tx_fifo1 -0x526a 021242 store 3 ,mem_tx_fifo2 -0x526b 021243 fetch 3 ,mem_tx_fifo0 -0x526c 021244 store 3 ,mem_tx_fifo1 -0x526d 021245 rtn -: 021251 l2cap_malloc_is_fifo_full: -0x526e 021252 bpatchx patch24_6 ,mem_patch24 -0x526f 021253 fetch 3 ,mem_tx_fifo0 -0x5270 021254 rtn -: 021260 l2cap_malloc_is_fifo_nearly_full: -0x5271 021261 bpatchx patch24_7 ,mem_patch24 -0x5272 021262 fetch 3 ,mem_tx_fifo1 -0x5273 021263 rtn -: 021269 l2cap_malloc_is_fifo_empty: -0x5274 021270 bpatchx patch25_0 ,mem_patch25 -0x5275 021271 fetch 3 ,mem_tx_fifo3 -0x5276 021272 rtn -: 021277 l2cap_malloc_fifo_get_first_ptr: -0x5277 021278 call l2cap_malloc_is_fifo_empty -0x5278 021279 branch assert ,blank -0x5279 021280 arg mem_tx_fifo0 ,contr -: 021281 l2cap_malloc_free_loop: -0x527a 021282 ifetch 3 ,contr -0x527b 021283 branch l2cap_malloc_free_loop ,blank -0x527c 021284 increase -3 ,contr -0x527d 021285 rtn -: 021292 l2cap_malloc_get_full_map: -0x527e 021293 bpatchx patch25_1 ,mem_patch25 -0x527f 021294 arg 4 ,loopcnt -0x5280 021295 arg mem_tx_fifo0_map ,contr -0x5281 021296 arg 0 ,temp -: 021297 l2cap_malloc_get_full_map_loop: -0x5282 021298 ifetch 3 ,contr -0x5283 021299 and pdata ,0xff ,pdata -0x5284 021300 ior temp ,temp -0x5285 021301 loop l2cap_malloc_get_full_map_loop -0x5286 021302 storet 1 ,mem_used_map -0x5287 021303 rtn -: 021311 l2cap_malloc_into_fifo: -0x5288 021312 bpatchx patch25_2 ,mem_patch25 -0x5289 021313 call l2cap_malloc_is_fifo_full -0x528a 021314 nbranch assert ,blank -0x528b 021315 call l2cap_malloc_is_fifo_empty -0x528c 021316 branch l2cap_malloc_into_fifo_no_push ,blank -0x528d 021317 fetch 3 ,mem_tx_fifo1 -0x528e 021318 store 3 ,mem_tx_fifo0 -0x528f 021319 ifetch 3 ,contr -0x5290 021320 istore 3 ,contw -0x5291 021321 ifetch 3 ,contr -0x5292 021322 istore 3 ,contw -0x5293 021323 setarg 0 -0x5294 021324 istore 3 ,contw -: 021325 l2cap_malloc_into_fifo_no_push: -0x5295 021326 arg 0 ,temp -0x5296 021327 copy timeup ,pdata -0x5297 021328 iadd queue ,pdata -: 021329 l2cap_malloc_into_fifo_loop: -0x5298 021330 qset1 temp -0x5299 021331 increase 1 ,queue -0x529a 021332 isub queue ,null -0x529b 021333 nbranch l2cap_malloc_into_fifo_loop ,zero -0x529c 021335 lshift8 regb ,pdata -0x529d 021336 ior temp ,pdata -0x529e 021337 store 3 ,mem_tx_fifo3 -0x529f 021338 rtn -: 021348 l2cap_malloc_enough: -0x52a0 021349 bpatchx patch25_3 ,mem_patch25 -0x52a1 021350 call l2cap_malloc_get_full_map -0x52a2 021351 copy queue ,regc -0x52a3 021352 arg 0 ,temp -0x52a4 021353 arg 0 ,timeup -: 021355 l2cap_malloc_enough_loop: -0x52a5 021356 copy queue ,pdata -0x52a6 021357 beq 8 ,l2cap_malloc_enough_end -0x52a7 021358 fetch 1 ,mem_used_map -0x52a8 021359 qisolate1 pdata -0x52a9 021360 branch l2cap_malloc_enough_end ,true -0x52aa 021361 increase 128 ,temp -0x52ab 021362 increase 1 ,queue -0x52ac 021363 copy rega ,pdata -0x52ad 021364 isub temp ,null -0x52ae 021365 branch l2cap_malloc_enough_end ,zero -0x52af 021366 branch l2cap_malloc_enough_loop ,positive -: 021367 l2cap_malloc_enough_end: -0x52b0 021368 copy temp ,pdata -0x52b1 021369 isub rega ,null -0x52b2 021370 nbranch l2cap_malloc_enough_rtn ,positive -0x52b3 021371 copy queue ,pdata -0x52b4 021372 copy regc ,temp -0x52b5 021373 isub temp ,timeup -: 021374 l2cap_malloc_enough_rtn: -0x52b6 021375 copy regc ,queue -0x52b7 021376 rtn -: 021379 l2cap_malloc_signal_channel: -0x52b8 021380 bpatchx patch25_4 ,mem_patch25 -0x52b9 021381 arg l2cap_signal_malloc_size ,rega -0x52ba 021382 call l2cap_malloc -0x52bb 021383 store 2 ,mem_l2cap_signal_tx_buff_ptr -0x52bc 021384 increase 4 ,pdata -0x52bd 021385 store 2 ,mem_l2cap_signal_tx_payload_ptr -0x52be 021386 setarg 0 -0x52bf 021387 store 2 ,mem_l2cap_signal_tx_length -0x52c0 021388 rtn -: 021390 l2cap_get_signal_tx_buff: -0x52c1 021391 fetch 2 ,mem_l2cap_signal_tx_buff_ptr -0x52c2 021392 branch l2cap_util_pdata_to_contw -: 021394 l2cap_get_signal_tx_payload: -0x52c3 021395 fetch 2 ,mem_l2cap_signal_tx_payload_ptr -0x52c4 021396 branch l2cap_util_pdata_to_contw -: 021399 l2cap_malloc_sdp_channel: -0x52c5 021400 bpatchx patch25_5 ,mem_patch25 -0x52c6 021401 arg sdp_malloc_size ,rega -0x52c7 021402 call l2cap_malloc -0x52c8 021403 store 2 ,mem_sdp_tx_buff_ptr -0x52c9 021404 increase 4 ,pdata -0x52ca 021405 store 2 ,mem_sdp_tx_payload_ptr -0x52cb 021406 setarg 0 -0x52cc 021407 store 2 ,mem_sdp_tx_pkt_length -0x52cd 021408 rtn -: 021410 l2cap_get_sdp_tx_buff: -0x52ce 021411 fetch 2 ,mem_sdp_tx_buff_ptr -0x52cf 021412 branch l2cap_util_pdata_to_contw -: 021414 l2cap_get_sdp_tx_payload: -0x52d0 021415 fetch 2 ,mem_sdp_tx_payload_ptr -0x52d1 021416 branch l2cap_util_pdata_to_contw -: 021419 l2cap_malloc_rfcomm_channel: -0x52d2 021420 bpatchx patch25_6 ,mem_patch25 -0x52d3 021421 call push_stack -0x52d4 021422 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag -0x52d5 021423 call l2cap_malloc_is_fifo_full -0x52d6 021424 nrtn blank -0x52d7 021425 arg rfcomm_malloc_size ,rega -0x52d8 021426 call l2cap_malloc -0x52d9 021427 store 2 ,mem_rfcomm_tx_buff_ptr -0x52da 021428 increase 4 ,pdata -0x52db 021429 store 2 ,mem_rfcomm_tx_payload_ptr -0x52dc 021430 setarg 0 -0x52dd 021431 store 2 ,mem_rfcomm_tx_pkt_length -0x52de 021432 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag -0x52df 021433 branch pop_stack -: 021435 l2cap_get_rfcomm_tx_buff: -0x52e0 021436 fetch 2 ,mem_rfcomm_tx_buff_ptr -0x52e1 021437 branch l2cap_util_pdata_to_contw -: 021439 l2cap_util_pdata_to_contw: -0x52e2 021440 branch assert ,blank -0x52e3 021441 copy pdata ,contw -0x52e4 021442 rtn -: 021445 l2cap_lpm_save_calc_len: -0x52e5 021446 bpatchx patch25_7 ,mem_patch25 -0x52e6 021447 arg 0 ,regb -0x52e7 021448 arg mem_tx_fifo0_map ,rega -0x52e8 021449 increase -2 ,rega -: 021450 l2cap_lpm_save_calc_len_loop: -0x52e9 021451 increase 2 ,rega -0x52ea 021452 setarg mem_tx_fifo_end -0x52eb 021453 isub rega ,null -0x52ec 021454 branch l2cap_lpm_save_calc_len_end ,zero -0x52ed 021455 ifetch 1 ,rega -0x52ee 021456 increase 1 ,rega -0x52ef 021457 branch l2cap_lpm_save_calc_len_loop ,blank -0x52f0 021458 ifetcht 2 ,rega -0x52f1 021459 ifetch 2 ,temp -0x52f2 021460 iadd regb ,regb -0x52f3 021461 increase 4 ,regb -0x52f4 021462 branch l2cap_lpm_save_calc_len_loop -: 021463 l2cap_lpm_save_calc_len_end: -0x52f5 021464 copy regb ,pdata -0x52f6 021465 rtn -: 021468 l2cap_lpm_get_wake_lock: -0x52f7 021469 arg wake_lock_l2cap_tx ,queue -0x52f8 021470 branch lpm_get_wake_lock -: 021472 l2cap_lpm_put_wake_lock: -0x52f9 021473 arg wake_lock_l2cap_tx ,queue -0x52fa 021474 branch lpm_put_wake_lock -: 021476 l2cap_lpm_save_txbuf: -0x52fb 021477 bpatchx patch26_0 ,mem_patch26 -0x52fc 021478 call l2cap_malloc_get_full_map -0x52fd 021479 fetch 1 ,mem_used_map -0x52fe 021480 rtn blank -0x52ff 021481 call l2cap_lpm_save_calc_len -0x5300 021482 arg l2cap_lpm_txbuf_len ,temp -0x5301 021483 isub temp ,null -0x5302 021484 branch l2cap_lpm_get_wake_lock ,positive -0x5303 021485 call l2cap_lpm_put_wake_lock -0x5304 021486 arg mem_l2cap_lpm_txbuf ,contw -0x5305 021487 arg mem_tx_fifo0 ,rega -: 021488 l2cap_lpm_save_txbuf_loop: -0x5306 021489 setarg mem_tx_fifo_end -0x5307 021490 isub rega ,null -0x5308 021491 rtn zero -0x5309 021492 ifetch 1 ,rega -0x530a 021493 increase 1 ,rega -0x530b 021494 nbranch l2cap_lpm_save_txbuf_nempty ,blank -0x530c 021495 istore 2 ,contw -0x530d 021496 increase 2 ,rega -0x530e 021497 branch l2cap_lpm_save_txbuf_loop -: 021498 l2cap_lpm_save_txbuf_nempty: -0x530f 021499 ifetch 2 ,rega -0x5310 021500 increase 2 ,rega -0x5311 021501 copy pdata ,contr -0x5312 021502 ifetch 2 ,contr -0x5313 021503 istore 2 ,contw -0x5314 021504 copy pdata ,loopcnt -0x5315 021505 increase 2 ,loopcnt -0x5316 021506 call memcpy -0x5317 021507 branch l2cap_lpm_save_txbuf_loop -: 021509 l2cap_lpm_load_txbuf: -0x5318 021510 bpatchx patch26_1 ,mem_patch26 -0x5319 021511 call l2cap_malloc_get_full_map -0x531a 021512 fetch 1 ,mem_used_map -0x531b 021513 rtn blank -0x531c 021514 arg mem_tx_fifo0_ptr ,rega -0x531d 021515 increase -3 ,rega -0x531e 021516 arg mem_l2cap_lpm_txbuf ,contr -: 021517 l2cap_lpm_load_txbuf_loop: -0x531f 021518 increase 3 ,rega -0x5320 021519 setarg mem_tx_fifo_end + 1 -0x5321 021520 isub rega ,null -0x5322 021521 rtn zero -0x5323 021522 ifetch 2 ,contr -0x5324 021523 branch l2cap_lpm_load_txbuf_loop ,blank -0x5325 021524 increase 4 ,pdata -0x5326 021525 copy pdata ,loopcnt -0x5327 021526 copy contr ,regb -0x5328 021527 ifetch 2 ,rega -0x5329 021528 copy pdata ,contw -0x532a 021529 copy regb ,contr -0x532b 021530 increase -2 ,contr -0x532c 021531 call memcpy -0x532d 021532 branch l2cap_lpm_load_txbuf_loop -: 021542 le_init_conn: -0x532e 021543 bpatchx patch26_2 ,mem_patch26 -0x532f 021544 disable wake -0x5330 021545 jam 1 ,mem_le_conn_handle -0x5331 021546 jam 3 ,mem_le_state -0x5332 021547 jam 1 ,mem_le_arq -0x5333 021548 setarg -1 -0x5334 021549 store 2 ,mem_le_event_count -0x5335 021550 force 0 ,pdata -0x5336 021551 store 1 ,mem_le_ch -0x5337 021552 store 1 ,mem_le_op -0x5338 021553 store 3 ,mem_sniff_rcv -0x5339 021554 store 3 ,mem_sniff_lost -0x533a 021555 store 5 ,mem_le_pcnt_tx -0x533b 021556 set1 39 ,pdata -0x533c 021557 store 5 ,mem_le_pcnt_rx -0x533d 021558 jam 1 ,mem_le_txheader -0x533e 021559 jam 0 ,mem_le_txlen -0x533f 021560 branch le_supervision_flush -: 021562 le_init_master: -0x5340 021563 bpatchx patch26_3 ,mem_patch26 -0x5341 021564 enable master -0x5342 021565 jam lemode_master ,mem_le_mode -0x5343 021566 jam 1 ,mem_le_att_handle -0x5344 021567 jam 1 ,mem_le_search_handle_start -0x5345 021568 setarg 0xffff -0x5346 021569 store 2 ,mem_le_search_handle_end -0x5347 021570 force 0 ,pdata -0x5348 021571 store 5 ,mem_le_pcnt_rx -0x5349 021572 set1 39 ,pdata -0x534a 021573 store 5 ,mem_le_pcnt_tx -0x534b 021574 branch le_init_conn -: 021577 le_init_slave: -0x534c 021578 bpatchx patch26_4 ,mem_patch26 -0x534d 021579 disable master -0x534e 021580 setarg 0x17 -0x534f 021581 store 2 ,mem_le_remote_mtu -0x5350 021582 jam lemode_slave ,mem_le_mode -0x5351 021583 jam 0 ,mem_le_adv_enable -0x5352 021584 jam 0 ,mem_lpm_current_mult -0x5353 021585 jam flag_le_pairing_null ,mem_le_pairing_state -0x5354 021586 jam flag_le_enc_null ,mem_le_enc_state -0x5355 021587 fetch 2 ,mem_le_superto -0x5356 021588 store 2 ,mem_le_init_superto -0x5357 021589 fetch 2 ,mem_le_tsniff -0x5358 021590 mul32 pdata ,5 ,pdata -0x5359 021591 rshift4 pdata ,pdata -0x535a 021592 store 2 ,mem_le_superto -0x535b 021593 branch le_init_conn -: 021599 le_dispatch: -0x535c 021600 call le_enable -0x535d 021601 call le_scan -0x535e 021602 call le_adv -0x535f 021603 branch le_disable -: 021605 le_conn_dispatch: -0x5360 021606 bpatchx patch26_5 ,mem_patch26 -0x5361 021607 call le_enable -0x5362 021608 call app_process_ble -0x5363 021609 fetch 1 ,mem_le_mode -0x5364 021610 beq lemode_master ,le_master_dispatch -0x5365 021611 branch le_slave_dispatch -: 021617 le_master_dispatch: -0x5366 021618 bpatchx patch26_6 ,mem_patch26 -0x5367 021619 enable master -0x5368 021620 call le_supervision_update -0x5369 021621 branch le_master_disconn ,positive -0x536a 021622 call check_ble_disabled -0x536b 021623 call le_setup -0x536c 021624 call le_prepare_tx -0x536d 021625 disable match -0x536e 021626 call le_transmit_receive_sifs -0x536f 021627 nrtn match -0x5370 021628 bpatchx patch26_7 ,mem_patch26 -0x5371 021629 fetch 1 ,mem_le_conn_rcv -0x5372 021630 increase 1 ,pdata -0x5373 021631 store 1 ,mem_le_conn_rcv -0x5374 021632 call le_acknowledge -0x5375 021633 disable master -0x5376 021634 rtn -: 021636 le_master_disconn: -0x5377 021637 call le_disconnect -0x5378 021638 disable master -0x5379 021639 rtn -: 021644 le_slave_dispatch: -0x537a 021645 bpatchx patch27_0 ,mem_patch27 -0x537b 021646 jam 0 ,mem_le_md_count -0x537c 021647 call sp_calc_sequence_256 -0x537d 021648 call le_secure_connect_sm -0x537e 021649 disable attempt -0x537f 021650 call le_supervision_update -0x5380 021651 branch le_slave_disconn ,positive -0x5381 021652 call check_ble_disabled -0x5382 021653 call le_setup -0x5383 021654 call le_receive_slave -0x5384 021655 nbranch le_slave_unsync ,sync -0x5385 021656 call le_got_first_packet -0x5386 021657 branch le_slave_match ,match -0x5387 021658 branch le_slave_cont -: 021661 le_slave_match: -0x5388 021662 bpatchx patch27_1 ,mem_patch27 -0x5389 021663 fetch 1 ,mem_le_md_count -0x538a 021664 pincrease 1 -0x538b 021665 store 1 ,mem_le_md_count -0x538c 021666 beq le_md_max_count ,le_slave_cont -0x538d 021667 call le_acknowledge -0x538e 021668 call le_prepare_tx -0x538f 021669 call le_transmit_norx -0x5390 021670 call le_parse -0x5391 021671 fetch 2 ,mem_cb_ble_transmit -0x5392 021672 call callback_func -0x5393 021673 call le_check_md -0x5394 021674 branch le_slave_more_data ,user -: 021675 le_slave_cont: -0x5395 021676 bpatchx patch27_2 ,mem_patch27 -0x5396 021677 call le_pairing_sm -0x5397 021678 call le_check_paring_time -0x5398 021679 call check_51cmd -0x5399 021680 fetch 1 ,mem_le_op -0x539a 021681 bbit1 op_disconn ,le_slave_disconn -: 021682 le_slave_unsync: -0x539b 021683 bpatchx patch27_3 ,mem_patch27 -0x539c 021684 call le_lpm_set_mult -0x539d 021685 call le_update_channel_map -0x539e 021686 call le_update_param -0x539f 021687 branch calc_clke_offset -: 021690 le_check_md: -0x53a0 021691 disable user -0x53a1 021692 bmark1 mark_ble_rx_md ,enable_user -0x53a2 021693 bmark1 mark_ble_tx_md ,enable_user -0x53a3 021694 rtn -: 021697 le_slave_more_data: -0x53a4 021698 bpatchx patch27_4 ,mem_patch27 -0x53a5 021699 enable attempt -0x53a6 021700 call le_transmit_receive_sifs_notx -0x53a7 021701 branch le_slave_match ,match -0x53a8 021702 branch le_slave_cont -: 021704 le_slave_disconn: -: 021707 le_disconnect: -0x53a9 021708 bpatchx patch27_5 ,mem_patch27 -0x53aa 021709 call le_clear_connection_info -0x53ab 021710 call app_disconn_reason_collect_ble -0x53ac 021711 call sp_initialize_256 -0x53ad 021712 jam bt_evt_le_disconnected ,mem_fifo_temp -0x53ae 021713 branch ui_ipc_send_event -: 021715 le_clear_connection_info: -0x53af 021716 setarg 0 -0x53b0 021717 store 9 ,mem_le_tx_buff_used -0x53b1 021718 jam 0 ,mem_le_conn_handle -0x53b2 021719 jam lemode_idle ,mem_le_mode -0x53b3 021720 jam 0 ,mem_le_state -0x53b4 021721 jam flag_le_enc_null ,mem_le_enc_state -0x53b5 021722 jam flag_le_pairing_null ,mem_le_pairing_state -0x53b6 021723 rtn -: 021725 le_got_first_packet: -0x53b7 021726 bpatchx patch27_6 ,mem_patch27 -0x53b8 021727 fetch 1 ,mem_le_conn_rcv -0x53b9 021728 increase 1 ,pdata -0x53ba 021729 store 1 ,mem_le_conn_rcv -0x53bb 021730 fetch 1 ,mem_le_state -0x53bc 021731 rtnbit1 lestate_got_first_packet -0x53bd 021732 set1 lestate_got_first_packet -0x53be 021733 store 1 ,mem_le_state -0x53bf 021734 fetch 2 ,mem_le_init_superto -0x53c0 021735 store 2 ,mem_le_superto -0x53c1 021736 setarg 0 -0x53c2 021737 store 4 ,mem_le_transmit_window -0x53c3 021738 rtn -: 021741 le_enable: -0x53c4 021742 bpatchx patch27_7 ,mem_patch27 -0x53c5 021743 jam 0x36 ,rf_adc_goff -0x53c6 021744 jam 0x5f ,rf_agc_nsat -0x53c7 021745 enable le -0x53c8 021746 jam 7 ,rfen_ulp -0x53c9 021747 call check_ble_disabled -0x53ca 021748 fetch 1 ,mem_250k_freq_enable -0x53cb 021749 rtn blank -0x53cc 021750 jam 0xb8 ,rf_iq_gain -0x53cd 021751 rtn -: 021753 le_disable: -0x53ce 021754 bpatchx patch28_0 ,mem_patch28 -0x53cf 021755 jam 0x2e ,rf_adc_goff -0x53d0 021756 jam 0xff ,rf_agc_nsat -0x53d1 021757 disable le -0x53d2 021758 jam 3 ,rfen_ulp -0x53d3 021759 arg 0 ,stop_watch -0x53d4 021760 rtn -: 021762 le_prep: -0x53d5 021763 disable enable_crc -0x53d6 021764 disable enable_white -0x53d7 021765 fetch 3 ,mem_le_crcinit -0x53d8 021766 iforce crc24_init -0x53d9 021767 fetch 1 ,mem_le_ch_mapped -: 021768 le_prep2: -0x53da 021769 reverse pdata ,temp -0x53db 021770 set1 1 ,temp -0x53dc 021771 rshift temp ,white_init -0x53dd 021772 rtn -: 021775 lerx_setfreq: -0x53de 021776 call le_setfreq -0x53df 021777 call set_freq_rx -0x53e0 021778 setarg param_pll_setup -0x53e1 021779 call sleep -0x53e2 021780 branch rf_rx_enable -: 021782 letx_setfreq: -0x53e3 021783 branch txon ,match -: 021784 letx_setfreq0: -0x53e4 021785 call le_setfreq -0x53e5 021786 branch set_freq_tx -: 021787 le_setfreq: -0x53e6 021788 bpatchx patch28_1 ,mem_patch28 -0x53e7 021789 call set_sync_on -0x53e8 021790 fetch 1 ,mem_le_testtype -0x53e9 021791 nbranch le_ctf_test ,blank -0x53ea 021792 fetch 1 ,mem_le_ch_mapped -0x53eb 021793 sub pdata ,36 ,null -0x53ec 021794 branch le_ctf_normal ,positive -0x53ed 021795 force 0 ,temp -0x53ee 021796 rtneq 37 -0x53ef 021797 force 24 ,temp -0x53f0 021798 rtneq 38 -0x53f1 021799 force 78 ,temp -0x53f2 021800 rtn -: 021802 le_ctf_normal: -0x53f3 021803 sub pdata ,10 ,null -0x53f4 021804 branch le_ctf_low ,positive -0x53f5 021805 increase 1 ,pdata -: 021807 le_ctf_low: -0x53f6 021808 lshift pdata ,pdata -0x53f7 021809 add pdata ,2 ,temp -0x53f8 021810 rtn -: 021812 le_ctf_test: -0x53f9 021813 fetch 1 ,mem_le_ch_mapped -0x53fa 021814 lshift pdata ,temp -0x53fb 021815 rtn -: 021817 le_sca_map: -0x53fc 021818 arg 500 ,temp -0x53fd 021819 rtn blank -0x53fe 021820 arg 250 ,temp -0x53ff 021821 rtneq 1 -0x5400 021822 arg 150 ,temp -0x5401 021823 rtneq 2 -0x5402 021824 arg 100 ,temp -0x5403 021825 rtneq 3 -0x5404 021826 arg 75 ,temp -0x5405 021827 rtneq 4 -0x5406 021828 arg 50 ,temp -0x5407 021829 rtneq 5 -0x5408 021830 arg 40 ,temp -0x5409 021831 rtneq 6 -0x540a 021832 arg 20 ,temp -0x540b 021833 rtn -: 021837 le_adv_access: -0x540c 021838 setarg 0x8e89be -0x540d 021839 lshift8 pdata ,pdata -0x540e 021840 or_into 0xd6 ,pdata -0x540f 021841 iforce access -0x5410 021842 setarg 0x555555 -0x5411 021843 store 3 ,mem_le_crcinit -0x5412 021844 rtn -: 021846 le_setup: -0x5413 021847 bpatchx patch28_2 ,mem_patch28 -0x5414 021848 enable swfine -0x5415 021849 fetch 4 ,mem_le_access -0x5416 021850 iforce access -0x5417 021851 call le_map_channel -0x5418 021852 setarg 0x200 -0x5419 021853 branch le_setup_master ,master -0x541a 021854 fetch 2 ,mem_le_receive_window -0x541b 021855 rshift pdata ,pdata -: 021856 le_setup_master: -0x541c 021857 arg param_pll_setup ,temp -0x541d 021858 iadd temp ,pdata -0x541e 021859 call ahead_window -0x541f 021860 deposit clke -0x5420 021861 store 6 ,mem_le_rxon_ts -0x5421 021862 rtn -: 021864 le_next_adv_channel: -0x5422 021865 bpatchx patch28_3 ,mem_patch28 -0x5423 021866 fetch 1 ,mem_le_ch_mapped -0x5424 021867 beq 37 ,le_next_adv_channel_curr_channel_37 -0x5425 021868 beq 38 ,le_next_adv_channel_curr_channel_38 -0x5426 021869 beq 39 ,le_next_adv_channel_curr_channel_39 -0x5427 021870 branch le_next_adv_channel_curr_channel_39 -: 021872 le_next_adv_channel_curr_channel_37: -0x5428 021873 fetcht 1 ,mem_le_adv_channel_map -0x5429 021874 isolate1 bit_adv_channel_map_38 ,temp -0x542a 021875 branch set_le_next_adv_channel_38 ,true -0x542b 021876 isolate1 bit_adv_channel_map_39 ,temp -0x542c 021877 branch set_le_next_adv_channel_39 ,true -0x542d 021878 branch set_le_next_adv_channel_37 -: 021881 le_next_adv_channel_curr_channel_38: -0x542e 021882 fetcht 1 ,mem_le_adv_channel_map -0x542f 021883 isolate1 bit_adv_channel_map_39 ,temp -0x5430 021884 branch set_le_next_adv_channel_39 ,true -0x5431 021885 isolate1 bit_adv_channel_map_37 ,temp -0x5432 021886 branch set_le_next_adv_channel_37 ,true -0x5433 021887 branch set_le_next_adv_channel_38 -: 021890 le_next_adv_channel_curr_channel_39: -0x5434 021891 fetcht 1 ,mem_le_adv_channel_map -0x5435 021892 isolate1 bit_adv_channel_map_37 ,temp -0x5436 021893 branch set_le_next_adv_channel_37 ,true -0x5437 021894 isolate1 bit_adv_channel_map_38 ,temp -0x5438 021895 branch set_le_next_adv_channel_38 ,true -0x5439 021896 branch set_le_next_adv_channel_39 -: 021900 set_le_next_adv_channel_37: -0x543a 021901 jam 37 ,mem_le_ch_mapped -0x543b 021902 fetch 1 ,mem_le_adv_channel_map_temp -0x543c 021903 set1 bit_adv_channel_map_37 ,pdata -0x543d 021904 store 1 ,mem_le_adv_channel_map_temp -0x543e 021905 rtn -: 021907 set_le_next_adv_channel_38: -0x543f 021908 jam 38 ,mem_le_ch_mapped -0x5440 021909 fetch 1 ,mem_le_adv_channel_map_temp -0x5441 021910 set1 bit_adv_channel_map_38 ,pdata -0x5442 021911 store 1 ,mem_le_adv_channel_map_temp -0x5443 021912 rtn -: 021914 set_le_next_adv_channel_39: -0x5444 021915 jam 39 ,mem_le_ch_mapped -0x5445 021916 fetch 1 ,mem_le_adv_channel_map_temp -0x5446 021917 set1 bit_adv_channel_map_39 ,pdata -0x5447 021918 store 1 ,mem_le_adv_channel_map_temp -0x5448 021919 rtn -: 021923 le_context_nexthop: -0x5449 021924 bpatchx patch28_4 ,mem_patch28 -0x544a 021925 add rega ,coffset_mode ,contr -0x544b 021926 ifetch 1 ,contr -0x544c 021927 rtnbit0 mode_le -0x544d 021928 add rega ,coffset_le_event_cnt ,contw -0x544e 021929 ifetch 2 ,contw -0x544f 021930 increase 1 ,pdata -0x5450 021931 istore 2 ,contw -0x5451 021932 add rega ,coffset_le_hop ,contr -0x5452 021933 ifetch 1 ,contr -0x5453 021934 add rega ,coffset_le_ch ,contw -0x5454 021935 ifetcht 1 ,contw -0x5455 021936 iadd temp ,pdata -0x5456 021937 sub pdata ,36 ,null -0x5457 021938 branch le_nexthop_nowrap ,positive -0x5458 021939 increase -37 ,pdata -: 021940 le_nexthop_nowrap: -0x5459 021941 istore 1 ,contw -0x545a 021942 rtn -: 021945 le_calc_channel_map: -0x545b 021946 bpatchx patch28_5 ,mem_patch28 -0x545c 021947 fetch 5 ,mem_le_channel_map -0x545d 021948 force 0 ,temp -0x545e 021949 force 37 ,loopcnt -: 021950 le_count_channels_loop: -0x545f 021951 bbit0 0 ,le_count_channels_notused -0x5460 021952 increase 1 ,temp -: 021953 le_count_channels_notused: -0x5461 021954 rshift pdata ,pdata -0x5462 021955 loop le_count_channels_loop -0x5463 021956 add temp ,-1 ,pdata -0x5464 021957 store 1 ,mem_le_channels -0x5465 021958 rtn -: 021960 le_map_channel: -0x5466 021961 bpatchx patch28_6 ,mem_patch28 -0x5467 021962 fetch 1 ,mem_le_ch -0x5468 021963 iforce queue -0x5469 021964 fetcht 5 ,mem_le_channel_map -0x546a 021965 qisolate1 temp -0x546b 021966 branch le_map_channel_end ,true -: 021967 le_map_channel_next: -0x546c 021968 bpatchx patch28_7 ,mem_patch28 -0x546d 021969 fetch 1 ,mem_le_channels -0x546e 021970 isub queue ,pdata -0x546f 021971 branch le_map_channel_cont ,positive -0x5470 021972 sub pdata ,-1 ,queue -0x5471 021973 branch le_map_channel_next -: 021974 le_map_channel_cont: -0x5472 021975 copy queue ,loopcnt -0x5473 021976 force 0 ,queue -: 021977 le_map_channel_loop: -0x5474 021978 qisolate1 temp -0x5475 021979 branch le_map_channel_skip ,true -0x5476 021980 increase 1 ,loopcnt -: 021981 le_map_channel_skip: -0x5477 021982 deposit loopcnt -0x5478 021983 branch le_map_channel_end ,blank -0x5479 021984 increase 1 ,queue -0x547a 021985 increase -1 ,loopcnt -0x547b 021986 branch le_map_channel_loop -: 021987 le_map_channel_end: -0x547c 021988 deposit queue -0x547d 021989 store 1 ,mem_le_ch_mapped -0x547e 021990 rtn -: 021993 le_wait_tx: -0x547f 021994 branch le_wait_master ,master -0x5480 021995 until null ,timeout -0x5481 021996 rtn -: 021998 le_wait_master: -0x5482 021999 arg 0xea0 ,timeup -0x5483 022000 until clkn_rt ,meet -0x5484 022001 rtn -: 022003 le_receive_adv: -0x5485 022004 disable swfine -0x5486 022005 fetch 2 ,mem_le_scan_window -0x5487 022006 copy pdata ,timeup -0x5488 022007 branch le_receive_packet -: 022010 le_receive_slave: -0x5489 022011 bpatchx patch29_0 ,mem_patch29 -0x548a 022012 enable swfine -0x548b 022013 fetch 2 ,mem_le_receive_window -0x548c 022014 fetcht 4 ,mem_le_transmit_window -0x548d 022015 iadd temp ,timeup -: 022016 le_receive_packet: -0x548e 022017 call lerx_setfreq -: 022018 le_receive_rxon: -0x548f 022019 bpatchx patch29_1 ,mem_patch29 -0x5490 022020 call le_prep -0x5491 022021 disable match -0x5492 022022 enable decode_fec0 -0x5493 022023 enable is_rx -0x5494 022024 disable is_tx -0x5495 022025 copy timeup ,stop_watch -0x5496 022026 correlate null ,timeout -0x5497 022027 branch le_receive_on_attempt ,attempt -0x5498 022028 copy clke ,temp -0x5499 022029 storet 6 ,mem_sync_clke -: 022030 le_receive_on_attempt: -0x549a 022031 nbranch end_of_packet ,sync -0x549b 022032 branch le_receive_skip ,attempt -0x549c 022033 arg param_clke_cal_le ,clke_rt -0x549d 022034 copy bt_clk ,clke_bt -0x549e 022035 fetch 1 ,mem_le_state -0x549f 022036 bbit0 lestate_got_first_packet ,le_receive_skip -0x54a0 022037 call lpm_adjust_clk ,wake -: 022038 le_receive_skip: -0x54a1 022039 bpatchx patch29_2 ,mem_patch29 -0x54a2 022040 call save_rssi -0x54a3 022041 enable enable_white -0x54a4 022042 enable enable_crc -0x54a5 022043 parse demod ,bucket ,8 -0x54a6 022044 rshift3 pwindow ,pdata -0x54a7 022045 store 1 ,mem_le_rxbuf -0x54a8 022046 parse demod ,bucket ,8 -0x54a9 022047 rshift3 pwindow ,pdata -0x54aa 022048 istore 1 ,contw -0x54ab 022049 and pdata ,0x3f ,loopcnt -0x54ac 022050 branch lerx_nopayload ,zero -: 022052 lerx_loop: -0x54ad 022053 parse demod ,bucket ,8 -0x54ae 022054 rshift3 pwindow ,pdata -0x54af 022055 istore 1 ,contw -0x54b0 022056 loop lerx_loop -: 022058 lerx_nopayload: -0x54b1 022059 bpatchx patch29_3 ,mem_patch29 -0x54b2 022060 parse demod ,bucket ,24 -0x54b3 022061 enable swfine -0x54b4 022062 arg param_sifs ,stop_watch -0x54b5 022063 rshift32 pdata ,pdata -0x54b6 022064 rshift16 pdata ,pdata -0x54b7 022065 istore 3 ,contw -0x54b8 022066 branch end_of_packet ,crc_failed -0x54b9 022067 enable match -0x54ba 022068 fetch 1 ,mem_last_freq -0x54bb 022069 add pdata ,0 ,rega -0x54bc 022070 call rf_write_freq -0x54bd 022071 disable decode_fec0 -0x54be 022072 branch set_sync_on -: 022074 le_transmit_receive_sifs: -0x54bf 022075 bpatchx patch29_4 ,mem_patch29 -0x54c0 022076 call le_transmit -: 022077 le_transmit_receive_sifs_notx: -0x54c1 022078 fetcht 1 ,mem_last_freq -0x54c2 022079 call set_freq_rx -0x54c3 022080 call rf_rx_enable -0x54c4 022081 enable swfine -0x54c5 022082 arg 5500 ,timeup -0x54c6 022083 branch le_receive_rxon -: 022085 le_transmit_norx: -0x54c7 022086 call le_transmit -0x54c8 022087 branch end_of_packet -: 022089 le_transmit: -0x54c9 022090 bpatchx patch29_5 ,mem_patch29 -0x54ca 022091 call le_prep -0x54cb 022092 call letx_setfreq -0x54cc 022093 branch le_transmit0 -: 022095 le_transmit0: -0x54cd 022096 set1 txgfsk ,radio_ctrl -0x54ce 022097 enable encode_fec0 -0x54cf 022098 enable is_tx -0x54d0 022099 disable is_rx -0x54d1 022100 call le_wait_tx -0x54d2 022101 rshift16 access ,pdata -0x54d3 022102 rshift8 pdata ,pdata -0x54d4 022103 rshift4 pdata ,pdata -0x54d5 022104 inject mod ,40 -0x54d6 022105 enable enable_white -0x54d7 022106 enable enable_crc -0x54d8 022107 bpatchx patch29_6 ,mem_patch29 -0x54d9 022108 fetch 1 ,mem_le_txheader -0x54da 022109 inject mod ,8 -0x54db 022110 ifetch 1 ,contr -0x54dc 022111 and pdata ,0x3f ,loopcnt -0x54dd 022112 inject mod ,8 -0x54de 022113 branch letr_nopayload ,zero -: 022114 letr_loop: -0x54df 022115 ifetch 1 ,contr -0x54e0 022116 inject mod ,8 -0x54e1 022117 loop letr_loop -: 022119 letr_nopayload: -0x54e2 022120 enable enable_parity -0x54e3 022121 inject mod ,24 -0x54e4 022122 disable enable_parity -0x54e5 022123 until null ,tx_clear -0x54e6 022124 nop 100 -0x54e7 022125 disable encode_fec0 -0x54e8 022126 rtn -: 022128 le_send_adv_ind: -0x54e9 022129 bpatchx patch29_7 ,mem_patch29 -0x54ea 022130 fetch 1 ,mem_le_adv_type -0x54eb 022131 beq adv_direct_ind ,le_send_adv_direct_ind -0x54ec 022132 fetch 1 ,mem_le_adv_own_addr_type -0x54ed 022133 lshift4 pdata ,pdata -0x54ee 022134 lshift2 pdata ,pdata -0x54ef 022135 store 1 ,mem_le_txheader -0x54f0 022136 fetcht 1 ,mem_le_adv_data_len -0x54f1 022137 add temp ,6 ,pdata -0x54f2 022138 store 1 ,mem_le_txlen -0x54f3 022139 fetch 6 ,mem_le_lap -0x54f4 022140 store 6 ,mem_le_txpayload -0x54f5 022141 copy temp ,loopcnt -0x54f6 022142 arg mem_le_adv_data ,contr -0x54f7 022143 call memcpy_fast -0x54f8 022144 branch le_send_adv_transmit -: 022145 le_send_adv_direct_ind: -0x54f9 022146 fetch 1 ,mem_le_adv_direct_addr_type -0x54fa 022147 lshift4 pdata ,pdata -0x54fb 022148 lshift2 pdata ,pdata -0x54fc 022149 increase 1 ,pdata -0x54fd 022150 store 1 ,mem_le_txheader -0x54fe 022151 setarg 12 -0x54ff 022152 store 1 ,mem_le_txlen -0x5500 022153 fetch 6 ,mem_le_lap -0x5501 022154 store 6 ,mem_le_txpayload -0x5502 022155 fetch 6 ,mem_hci_plap -0x5503 022156 istore 6 ,contw -: 022157 le_send_adv_transmit: -0x5504 022158 bpatchx patch2a_0 ,mem_patch2a -0x5505 022159 fetch 1 ,mem_le_adv_transmit -0x5506 022160 increase 1 ,pdata -0x5507 022161 store 1 ,mem_le_adv_transmit -0x5508 022162 arg 1800 ,stop_watch -0x5509 022163 disable match -0x550a 022164 branch le_transmit_receive_sifs -: 022166 le_send_scan_request: -0x550b 022167 bpatchx patch2a_1 ,mem_patch2a -0x550c 022168 fetch 1 ,mem_le_scan_type -0x550d 022169 rtnne le_scan_type_active -0x550e 022170 fetch 1 ,mem_le_adv_transmit -0x550f 022171 increase 1 ,pdata -0x5510 022172 store 1 ,mem_le_adv_transmit -0x5511 022173 arg 0x0c03 ,temp -0x5512 022174 fetch 1 ,mem_le_scan_own_addr_type -0x5513 022175 nsetflag blank ,le_sender_addr_bit ,temp -0x5514 022176 copy rega ,pdata -0x5515 022177 nsetflag blank ,le_receiver_addr_bit ,temp -0x5516 022178 storet 2 ,mem_le_txheader -0x5517 022179 fetch 6 ,mem_le_lap -0x5518 022180 istore 6 ,contw -0x5519 022181 fetch 6 ,mem_le_plap -0x551a 022182 istore 6 ,contw -0x551b 022183 branch le_transmit_receive_sifs -: 022186 le_send_scan_response: -0x551c 022187 bpatchx patch2a_2 ,mem_patch2a -0x551d 022188 arg scan_rsp ,temp -0x551e 022189 fetch 1 ,mem_le_adv_own_addr_type -0x551f 022190 nsetflag blank ,le_sender_addr_bit ,temp -0x5520 022191 storet 1 ,mem_le_txheader -0x5521 022192 fetcht 1 ,mem_le_scan_data_len -0x5522 022193 add temp ,6 ,pdata -0x5523 022194 store 1 ,mem_le_txlen -0x5524 022195 fetch 6 ,mem_le_lap -0x5525 022196 store 6 ,mem_le_txpayload -0x5526 022197 arg mem_le_scan_data ,contr -0x5527 022198 copy temp ,loopcnt -0x5528 022199 call memcpy_fast -0x5529 022200 call le_transmit_norx -0x552a 022201 branch le_adv_not_match -: 022203 le_connect_request: -0x552b 022204 bpatchx patch2a_3 ,mem_patch2a -0x552c 022205 force -1 ,pdata -0x552d 022206 setsect 2 ,1 -0x552e 022207 store 5 ,mem_le_channel_map -0x552f 022208 call le_calc_channel_map -0x5530 022209 force 4 ,loopcnt -0x5531 022210 arg mem_le_access ,contw -0x5532 022211 call generate_random_loop -0x5533 022212 fetch 2 ,mem_le_timeout -0x5534 022213 store 2 ,mem_le_superto -: 022214 le_con_req_hop_retry: -0x5535 022215 random pdata -0x5536 022216 and_into 0xf ,pdata -0x5537 022217 sub pdata ,4 ,null -0x5538 022218 branch le_con_req_hop_retry ,positive -0x5539 022219 store 1 ,mem_le_hop -0x553a 022220 store 1 ,mem_tmp1 -0x553b 022221 bpatchx patch2a_4 ,mem_patch2a -0x553c 022222 fetcht 2 ,mem_le_conn_interval -0x553d 022223 storet 2 ,mem_le_tsniff -0x553e 022224 copy temp ,regc -0x553f 022225 add clkn_bt ,7 ,pdata -0x5540 022226 idiv regc -0x5541 022227 call wait_div_end -0x5542 022228 remainder rega -0x5543 022229 isub rega ,pdata -0x5544 022230 iadd regc ,pdata -0x5545 022231 fetcht 2 ,mem_le_dsniff -0x5546 022232 iadd temp ,pdata -0x5547 022233 store 4 ,mem_le_anchor -0x5548 022234 isub clkn_bt ,rega -0x5549 022235 increase -6 ,rega -0x554a 022236 arg 0x2205 ,regb -0x554b 022237 fetch 1 ,mem_le_conn_own_addr_type -0x554c 022238 nsetflag blank ,le_sender_addr_bit ,regb -0x554d 022239 fetch 1 ,mem_le_conn_peer_addr_type -0x554e 022240 nsetflag blank ,le_receiver_addr_bit ,regb -0x554f 022241 copy regb ,pdata -0x5550 022242 store 2 ,mem_le_txheader -0x5551 022243 fetch 6 ,mem_le_lap -0x5552 022244 istore 6 ,contw -0x5553 022245 fetch 6 ,mem_le_plap -0x5554 022246 istore 6 ,contw -0x5555 022247 fetch 4 ,mem_le_access -0x5556 022248 istore 4 ,contw -0x5557 022249 random pdata -0x5558 022250 istore 2 ,contw -0x5559 022251 random pdata -0x555a 022252 istore 1 ,contw -0x555b 022253 force 2 ,pdata -0x555c 022254 istore 1 ,contw -0x555d 022255 rshift2 rega ,pdata -0x555e 022256 istore 2 ,contw -0x555f 022257 rshift2 regc ,pdata -0x5560 022258 istore 2 ,contw -0x5561 022259 bpatchx patch2a_5 ,mem_patch2a -0x5562 022260 setarg 0 -0x5563 022261 istore 2 ,contw -0x5564 022262 fetch 2 ,mem_le_timeout -0x5565 022263 istore 2 ,contw -0x5566 022264 fetch 5 ,mem_le_channel_map -0x5567 022265 istore 5 ,contw -0x5568 022266 fetch 1 ,mem_le_hop -0x5569 022267 arg param_le_sca ,temp -0x556a 022268 ior temp ,pdata -0x556b 022269 istore 1 ,contw -0x556c 022270 call le_transmit_norx -0x556d 022271 setarg mem_le_txheader -0x556e 022272 add pdata ,18 ,contr -0x556f 022273 ifetch 3 ,contr -0x5570 022274 store 3 ,mem_le_crcinit -0x5571 022275 rtn -: 022277 le_init_adv: -0x5572 022278 bpatchx patch2a_6 ,mem_patch2a -0x5573 022279 disable master -0x5574 022280 branch le_adv_access -: 022284 le_update_param: -0x5575 022285 fetch 1 ,mem_le_state -0x5576 022286 rtnbit0 lestate_update_param -0x5577 022287 fetch 2 ,mem_le_event_count -0x5578 022288 fetcht 2 ,mem_le_instant -0x5579 022289 isub temp ,pdata -0x557a 022290 nrtn positive -0x557b 022291 store 2 ,mem_pdatatemp -0x557c 022292 bpatchx patch2a_7 ,mem_patch2a -0x557d 022293 fetch 1 ,mem_le_state -0x557e 022294 set0 lestate_update_param ,pdata -0x557f 022295 set0 lestate_got_first_packet ,pdata -0x5580 022296 store 1 ,mem_le_state -0x5581 022297 fetch 4 ,mem_le_anchor -0x5582 022298 fetcht 2 ,mem_le_tsniff -0x5583 022299 storet 2 ,mem_temp -0x5584 022300 isub temp ,rega -0x5585 022301 bpatchx patch2b_0 ,mem_patch2b -0x5586 022302 fetch 1 ,mem_le_new_param -0x5587 022303 store 1 ,mem_le_window_size -0x5588 022304 ifetcht 2 ,contr -0x5589 022305 ifetch 2 ,contr -0x558a 022306 lshift2 pdata ,pdata -0x558b 022307 store 2 ,mem_le_tsniff -0x558c 022308 lshift2 temp ,temp -0x558d 022309 iadd temp ,pdata -0x558e 022310 ifetcht 4 ,contr -0x558f 022311 storet 4 ,mem_le_slave_latency -0x5590 022312 iadd rega ,pdata -0x5591 022313 copy pdata ,regab -0x5592 022314 fetch 2 ,mem_le_tsniff -0x5593 022315 fetcht 2 ,mem_temp -0x5594 022316 isub temp ,pdata -0x5595 022317 fetcht 2 ,mem_pdatatemp -0x5596 022318 imul32 temp ,pdata -0x5597 022319 iadd regab ,pdata -0x5598 022320 store 4 ,mem_le_anchor -0x5599 022321 call le_receive_window_size -0x559a 022322 fetch 2 ,mem_le_superto -0x559b 022323 store 2 ,mem_le_init_superto -0x559c 022324 rtn -: 022327 le_update_channel_map: -0x559d 022328 bpatchx patch2b_1 ,mem_patch2b -0x559e 022329 fetch 1 ,mem_le_state -0x559f 022330 rtnbit0 lestate_update_map -0x55a0 022331 fetch 2 ,mem_le_event_count -0x55a1 022332 fetcht 2 ,mem_le_instant -0x55a2 022333 isub temp ,pdata -0x55a3 022334 nrtn positive -0x55a4 022335 fetch 1 ,mem_le_state -0x55a5 022336 set0 lestate_update_map ,pdata -0x55a6 022337 store 1 ,mem_le_state -0x55a7 022338 fetch 5 ,mem_le_new_map -0x55a8 022339 store 5 ,mem_le_channel_map -0x55a9 022340 branch le_calc_channel_map -: 022343 le_acknowledge: -0x55aa 022344 bpatchx patch2b_2 ,mem_patch2b -0x55ab 022345 call le_supervision_flush -0x55ac 022346 call le_check_wak -0x55ad 022347 fetch 1 ,mem_le_rxbuf -0x55ae 022348 isolate1 md ,pdata -0x55af 022349 setflag true ,mark_ble_rx_md ,mark -0x55b0 022350 rshift pdata ,pdata -0x55b1 022351 ixor temp ,pdata -0x55b2 022352 isolate1 nesn ,pdata -0x55b3 022353 setflag true ,mark_old_packet ,mark -0x55b4 022354 rtnmark1 mark_old_packet -0x55b5 022355 fetch 1 ,mem_le_rxbuf + 1 -0x55b6 022356 branch le_ack_unenc ,blank -0x55b7 022357 fetch 1 ,mem_le_state -0x55b8 022358 bbit0 lestate_encryption ,le_ack_unenc -0x55b9 022359 call load_sk -0x55ba 022360 call le_decrypt -0x55bb 022361 nrtn blank -: 022362 le_ack_unenc: -0x55bc 022363 fetcht 1 ,mem_le_arq -0x55bd 022364 setflip nesn ,temp -0x55be 022365 storet 1 ,mem_le_arq -0x55bf 022366 rtn -: 022369 le_check_wak: -0x55c0 022370 bpatchx patch2b_3 ,mem_patch2b -0x55c1 022371 fetcht 1 ,mem_le_arq -0x55c2 022372 isolate0 wak ,temp -0x55c3 022373 rtn true -0x55c4 022374 fetch 1 ,mem_le_rxbuf -0x55c5 022375 lshift pdata ,pdata -0x55c6 022376 ixor temp ,pdata -0x55c7 022377 rtnbit0 sn -0x55c8 022378 set0 wak ,temp -0x55c9 022379 setflip sn ,temp -0x55ca 022380 storet 1 ,mem_le_arq -0x55cb 022381 compare 3 ,temp ,3 -0x55cc 022382 nrtn true -0x55cd 022383 fetch 1 ,mem_le_txpayload -0x55ce 022384 beq ll_start_enc_req ,le_set_enc -0x55cf 022385 fetch 1 ,mem_le_enc_state -0x55d0 022386 beq flag_le_enc_pause ,le_clear_enc -0x55d1 022387 rtn -: 022390 le_set_enc: -0x55d2 022391 fetch 1 ,mem_le_state -0x55d3 022392 set1 lestate_encryption ,pdata -0x55d4 022393 store 1 ,mem_le_state -0x55d5 022394 rtn -: 022396 le_clear_enc: -0x55d6 022397 bpatchx patch2b_4 ,mem_patch2b -0x55d7 022398 jam flag_le_enc_null ,mem_le_enc_state -0x55d8 022399 arg 0 ,pdata -0x55d9 022400 store 4 ,mem_le_last_mic -0x55da 022401 store 5 ,mem_le_pcnt_tx -0x55db 022402 set1 39 ,pdata -0x55dc 022403 store 5 ,mem_le_pcnt_rx -0x55dd 022404 fetch 1 ,mem_le_state -0x55de 022405 set0 lestate_encryption ,pdata -0x55df 022406 store 1 ,mem_le_state -0x55e0 022407 rtn -: 022410 le_wait_adv: -0x55e1 022411 bpatchx patch2b_5 ,mem_patch2b -0x55e2 022412 call le_next_adv_channel -0x55e3 022413 call le_receive_adv -0x55e4 022414 fetch 1 ,mem_le_adv_waitcnt -0x55e5 022415 increase 1 ,pdata -0x55e6 022416 store 1 ,mem_le_adv_waitcnt -0x55e7 022417 rtn -: 022420 le_scan: -0x55e8 022421 bpatchx patch2b_6 ,mem_patch2b -0x55e9 022422 fetch 1 ,mem_le_scan_enable -0x55ea 022423 rtnne le_scan_enable -0x55eb 022424 arg le_scan_interval_timer ,queue -0x55ec 022425 call timer_check -0x55ed 022426 nrtn blank -0x55ee 022427 fetch 2 ,mem_le_scan_interval -0x55ef 022428 fetcht 2 ,mem_le_scan_window -0x55f0 022429 isub temp ,pdata -0x55f1 022430 arg le_scan_interval_timer ,queue -0x55f2 022431 call timer_init -0x55f3 022432 disable master -0x55f4 022433 call le_init_adv -0x55f5 022434 call le_wait_adv -0x55f6 022435 nrtn match -0x55f7 022436 bpatchx patch2b_7 ,mem_patch2b -0x55f8 022437 fetch 6 ,mem_le_rxbuf + 2 -0x55f9 022438 store 6 ,mem_le_plap -0x55fa 022441 fetch 1 ,mem_le_adv_rcv -0x55fb 022442 increase 1 ,pdata -0x55fc 022443 store 1 ,mem_le_adv_rcv -0x55fd 022444 call le_create_conn -0x55fe 022445 rtn master -0x55ff 022446 call le_send_scan_request -0x5600 022447 nrtn match -0x5601 022448 bpatchx patch2c_0 ,mem_patch2c -0x5602 022449 fetch 1 ,mem_le_scanrsp_rcv -0x5603 022450 increase 1 ,pdata -0x5604 022451 store 1 ,mem_le_scanrsp_rcv -0x5605 022452 fetch 9 ,mem_le_rxbuf + 8 -0x5606 022453 store 9 ,mem_tmp_buffer -0x5607 022454 rtn -: 022456 le_create_conn: -0x5608 022457 bpatchx patch2c_1 ,mem_patch2c -0x5609 022458 fetch 1 ,mem_cmd_le_create_conn -0x560a 022459 rtnne hci_cmd_le_create_conn -0x560b 022460 fetch 6 ,mem_le_plap -0x560c 022461 fetcht 6 ,mem_le_conn_peer_addr -0x560d 022462 isub temp ,null -0x560e 022463 nrtn zero -0x560f 022464 call context_new -0x5610 022465 nrtn zero -0x5611 022466 call le_connect_request -0x5612 022467 call le_init_master -0x5613 022468 bpatchx patch2c_2 ,mem_patch2c -0x5614 022469 jam 0 ,mem_hci_cmd -0x5615 022470 jam 0 ,mem_le_peer_sca -0x5616 022471 jam 0 ,mem_le_scan_enable -0x5617 022472 jam 0 ,mem_cmd_le_create_conn -0x5618 022473 branch context_save -: 022475 le_scan_check_sender_addr_type: -0x5619 022476 arg 1 ,rega -0x561a 022477 fetch 1 ,mem_le_rxbuf -0x561b 022478 rtnbit1 le_sender_addr_bit -0x561c 022479 arg 0 ,rega -0x561d 022480 rtn -: 022484 le_prepare_tx: -0x561e 022485 bpatchx patch2c_3 ,mem_patch2c -0x561f 022486 fetch 1 ,mem_le_arq -0x5620 022487 rtnbit1 wak -0x5621 022488 call le_check_tx_md -0x5622 022489 call le_fifo_get_first_tx_ptr -0x5623 022490 branch le_send_empty ,blank -0x5624 022491 ifetch 1 ,contr -0x5625 022492 ifetcht 1 ,contr -0x5626 022493 copy temp ,rega -0x5627 022494 isub rega ,pdata -0x5628 022495 arg le_max_paket_len ,temp -0x5629 022496 call not_greater_than -0x562a 022497 copy pdata ,temp -0x562b 022498 ifetch 1 ,contr -0x562c 022499 copy pdata ,type -0x562d 022500 copy rega ,pdata -0x562e 022501 iadd contr ,contr -0x562f 022502 arg mem_le_txpayload ,contw -0x5630 022503 copy temp ,loopcnt -0x5631 022504 call memcpy -0x5632 022505 call le_update_tx_type -0x5633 022506 call le_send_packet -0x5634 022508 call le_fifo_get_first_tx_ptr -0x5635 022509 ifetch 1 ,contr -0x5636 022510 copy pdata ,rega -0x5637 022511 copy contr ,regc -0x5638 022512 ifetcht 1 ,contr -0x5639 022513 copy temp ,regb -0x563a 022514 isub regb ,pdata -0x563b 022515 arg le_max_paket_len ,temp -0x563c 022516 call not_greater_than -0x563d 022517 iadd regb ,pdata -0x563e 022518 istore 1 ,regc -0x563f 022519 isub rega ,null -0x5640 022520 nrtn zero -0x5641 022521 branch le_fifo_release_first_node -: 022524 le_check_tx_md: -0x5642 022525 call le_check_continue -0x5643 022526 rtnmark1 mark_ble_tx_md -0x5644 022527 fetch 1 ,mem_le_configuration -0x5645 022528 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md -0x5646 022529 call le_fifo_get_second_tx_ptr -0x5647 022530 branch le_clear_md ,blank -0x5648 022531 branch le_set_md -: 022534 le_check_continue: -0x5649 022535 call le_fifo_get_first_tx_ptr -0x564a 022536 branch le_clear_md ,blank -0x564b 022537 ifetch 1 ,contr -0x564c 022538 ifetcht 1 ,contr -0x564d 022539 isub temp ,pdata -0x564e 022540 sub pdata ,le_max_paket_len ,null -0x564f 022541 branch le_clear_md ,positive -: 022542 le_set_md: -0x5650 022543 set1 mark_ble_tx_md ,mark -0x5651 022544 rtn -: 022546 le_clear_md: -0x5652 022547 set0 mark_ble_tx_md ,mark -0x5653 022548 rtn -: 022550 le_update_tx_type: -0x5654 022551 copy rega ,pdata -0x5655 022552 rtn blank -0x5656 022553 arg llid_continue ,type -0x5657 022554 rtn -: 022557 le_att_check_notification_enable: -0x5658 022558 bpatchx patch2c_4 ,mem_patch2c -0x5659 022559 increase 1 ,temp -0x565a 022560 call le_att_get_handle_ptr -0x565b 022561 increase -2 ,contr -0x565c 022562 ifetch 2 ,contr -0x565d 022563 arg client_charactertic_configuration ,temp -0x565e 022564 isub temp ,null -0x565f 022565 nrtn zero -0x5660 022566 increase 1 ,contr -0x5661 022567 copy contr ,rega -0x5662 022568 ifetch 1 ,contr -0x5663 022569 rtn -: 022572 le_send_empty: -0x5664 022573 force 0 ,temp -0x5665 022574 force 1 ,type -: 022576 le_send_packet: -0x5666 022577 bpatchx patch2c_5 ,mem_patch2c -0x5667 022578 storet 1 ,mem_le_txlen -0x5668 022579 fetcht 1 ,mem_le_arq -0x5669 022580 set1 wak ,temp -0x566a 022581 and temp ,0xfc ,pdata -0x566b 022582 ior type ,pdata -0x566c 022583 store 1 ,mem_le_arq -0x566d 022584 and_into 0x1f ,pdata -0x566e 022585 isolate1 mark_ble_tx_md ,mark -0x566f 022586 setflag true ,md ,pdata -0x5670 022587 store 1 ,mem_le_txheader -0x5671 022589 fetch 1 ,mem_le_txheader -0x5672 022590 compare 1 ,type ,3 -0x5673 022591 nbranch le_send_no_txlen ,true -0x5674 022592 fetch 1 ,mem_le_txlen -0x5675 022593 rtn blank -: 022594 le_send_no_txlen: -0x5676 022595 fetch 1 ,mem_le_state -0x5677 022596 rtnbit0 lestate_encryption -0x5678 022597 call load_sk -0x5679 022598 branch le_encrypt -: 022601 get_lpm_wake_ble_rx_lock: -0x567a 022602 arg wake_lock_ble_rx ,queue -0x567b 022603 branch lpm_get_wake_lock -: 022605 put_lpm_wake_ble_rx_lock: -0x567c 022606 arg wake_lock_ble_rx ,queue -0x567d 022607 branch lpm_put_wake_lock -: 022610 le_parse: -0x567e 022611 bpatchx patch2c_6 ,mem_patch2c -0x567f 022612 rtnmark1 mark_old_packet -0x5680 022613 call le_fifo_check_full -0x5681 022614 nrtn blank -0x5682 022615 fetch 1 ,mem_le_rxbuf -0x5683 022616 and pdata ,0x3 ,pdata -0x5684 022617 store 1 ,mem_le_packet_llid -0x5685 022618 ifetch 1 ,contr -0x5686 022619 and pdata ,0x1f ,pdata -0x5687 022620 store 1 ,mem_le_packet_size -0x5688 022621 rtn blank -0x5689 022622 copy contr ,pdata -0x568a 022623 store 2 ,mem_le_payload_ptr -0x568b 022624 fetch 1 ,mem_le_packet_llid -0x568c 022625 beq llid_le_ll ,le_parse_ll -: 022626 le_parse_l2cap: -0x568d 022627 call le_check_l2cap_complete -0x568e 022628 nbranch get_lpm_wake_ble_rx_lock ,user -0x568f 022629 call put_lpm_wake_ble_rx_lock -0x5690 022630 fetch 2 ,mem_le_payload_ptr -0x5691 022631 copy pdata ,contr -0x5692 022632 ifetch 2 ,contr -0x5693 022633 store 2 ,mem_le_l2cap_size -0x5694 022634 bpatchx patch2c_7 ,mem_patch2c -0x5695 022635 ifetch 2 ,contr -0x5696 022636 beq le_l2cap_cid_att ,le_parse_att -0x5697 022637 beq le_l2cap_cid_smp ,le_parse_smp -0x5698 022638 beq le_l2cap_cid_signal ,le_parse_signaling -0x5699 022639 rtn -: 022642 le_check_l2cap_complete: -0x569a 022643 fetch 1 ,mem_le_packet_llid -0x569b 022644 beq llid_start ,le_check_l2cap_llid_start -0x569c 022645 beq llid_continue ,le_check_l2cap_llid_continue -0x569d 022646 rtn -: 022651 le_check_l2cap_cid_legal: -0x569e 022652 call enable_user -0x569f 022653 arg le_l2cap_cid_att ,temp -0x56a0 022654 isub pdata ,null -0x56a1 022655 rtn zero -0x56a2 022656 arg le_l2cap_cid_signal ,temp -0x56a3 022657 isub pdata ,null -0x56a4 022658 rtn zero -0x56a5 022659 arg le_l2cap_cid_smp ,temp -0x56a6 022660 isub pdata ,null -0x56a7 022661 rtn zero -0x56a8 022662 branch disable_user -: 022665 le_check_l2cap_llid_start: -0x56a9 022666 fetch 2 ,mem_le_payload_ptr -0x56aa 022667 copy pdata ,contr -0x56ab 022668 ifetch 2 ,contr -0x56ac 022669 store 2 ,mem_le_l2cap_size -0x56ad 022670 ifetch 2 ,contr -0x56ae 022671 call le_check_l2cap_cid_legal -0x56af 022672 nrtn user -0x56b0 022673 fetcht 1 ,mem_le_packet_size -0x56b1 022674 storet 1 ,mem_le_packet_len_recved -0x56b2 022675 fetch 2 ,mem_le_l2cap_size -0x56b3 022676 increase 4 ,pdata -0x56b4 022677 isub temp ,null -0x56b5 022678 branch enable_user ,zero -0x56b6 022679 fetch 1 ,mem_le_packet_size -0x56b7 022680 copy pdata ,loopcnt -0x56b8 022681 arg mem_le_l2capbuf ,contw -0x56b9 022682 fetch 2 ,mem_le_payload_ptr -0x56ba 022683 copy pdata ,contr -0x56bb 022684 call memcpy -0x56bc 022685 branch disable_user -: 022690 le_check_l2cap_continue_legal: -0x56bd 022691 call enable_user -0x56be 022692 fetch 1 ,mem_le_packet_len_recved -0x56bf 022693 nrtn blank -0x56c0 022694 branch disable_user -: 022696 le_check_l2cap_llid_continue: -0x56c1 022697 call le_check_l2cap_continue_legal -0x56c2 022698 nrtn user -0x56c3 022699 fetch 1 ,mem_le_packet_len_recved -0x56c4 022700 arg mem_le_l2capbuf ,contw -0x56c5 022701 iadd contw ,rega -0x56c6 022702 fetcht 1 ,mem_le_packet_size -0x56c7 022703 iadd temp ,pdata -0x56c8 022704 store 1 ,mem_le_packet_len_recved -0x56c9 022705 fetch 1 ,mem_le_packet_size -0x56ca 022706 copy pdata ,loopcnt -0x56cb 022707 copy rega ,contw -0x56cc 022708 fetch 2 ,mem_le_payload_ptr -0x56cd 022709 copy pdata ,contr -0x56ce 022710 call memcpy_fast -0x56cf 022711 setarg mem_le_l2capbuf -0x56d0 022712 store 2 ,mem_le_payload_ptr -0x56d1 022713 fetch 2 ,mem_le_l2cap_size -0x56d2 022714 increase 4 ,pdata -0x56d3 022715 fetcht 1 ,mem_le_packet_len_recved -0x56d4 022716 isub temp ,null -0x56d5 022717 branch enable_user ,zero -0x56d6 022718 branch disable_user -: 022724 le_get_search_att_type: -0x56d7 022725 call store_contr -0x56d8 022726 arg mem_le_search_att_type_length ,contw -: 022727 le_get_search_common: -0x56d9 022728 fetch 2 ,mem_le_l2cap_size -0x56da 022729 increase -5 ,pdata -: 022730 le_get_search_common2: -0x56db 022731 istore 1 ,contw -0x56dc 022732 copy pdata ,loopcnt -0x56dd 022733 call get_contr -0x56de 022734 branch memcpy_fast -: 022736 le_get_search_att_uuid: -0x56df 022737 call store_contr -0x56e0 022738 arg mem_le_search_uuid_length ,contw -0x56e1 022739 branch le_get_search_common -: 022743 le_writeatt_cb: -0x56e2 022744 fetch 2 ,mem_cb_att_write -0x56e3 022745 branch callback_func -: 022747 le_supervision_update: -0x56e4 022748 fetcht 4 ,mem_le_supervision_timer -0x56e5 022749 call get_clkbt -0x56e6 022750 isub temp ,timeup -0x56e7 022751 deposit timeup -0x56e8 022752 fetcht 2 ,mem_le_superto -0x56e9 022753 lshift4 temp ,temp -0x56ea 022754 lshift temp ,temp -0x56eb 022755 isub temp ,pdata -0x56ec 022756 rtn -: 022758 le_supervision_flush: -0x56ed 022759 call get_clkbt -0x56ee 022760 store 4 ,mem_le_supervision_timer -0x56ef 022761 rtn -: 022764 le_adv: -0x56f0 022765 jam 36 ,mem_le_ch_mapped -0x56f1 022766 jam 0 ,mem_le_adv_channel_map_temp -: 022767 le_adv_loop: -0x56f2 022768 bpatchx patch2d_0 ,mem_patch2d -0x56f3 022769 fetch 1 ,mem_le_adv_enable -0x56f4 022770 rtn blank -0x56f5 022771 arg le_adv_interval_timer ,queue -0x56f6 022772 call timer_check -0x56f7 022773 nrtn blank -0x56f8 022774 bpatchx patch2d_1 ,mem_patch2d -: 022775 le_adv_loop_tx: -0x56f9 022776 disable master -0x56fa 022777 enable swfine -0x56fb 022778 call le_init_adv -0x56fc 022779 call le_next_adv_channel -0x56fd 022780 call le_send_adv_ind -0x56fe 022781 nbranch le_adv_not_match ,match -0x56ff 022782 fetch 1 ,mem_le_req_rcv -0x5700 022783 increase 1 ,pdata -0x5701 022784 store 1 ,mem_le_req_rcv -0x5702 022785 fetch 1 ,mem_le_rxbuf -0x5703 022786 and pdata ,0x0f ,pdata -0x5704 022787 beq scan_req ,le_send_scan_response -0x5705 022788 beq connect_req ,le_parse_connect_req -: 022789 le_adv_not_match: -0x5706 022790 bpatchx patch2d_2 ,mem_patch2d -0x5707 022791 random pdata -0x5708 022792 arg 0x1ff ,temp -0x5709 022793 iand temp ,pdata -0x570a 022794 add pdata ,250 ,pdata -0x570b 022795 call delay -0x570c 022796 fetch 1 ,mem_le_adv_channel_map_temp -0x570d 022797 fetcht 1 ,mem_le_adv_channel_map -0x570e 022798 isub temp ,null -0x570f 022799 nbranch le_adv_loop ,zero -0x5710 022800 arg le_adv_interval_timer ,queue -0x5711 022801 fetch 2 ,mem_le_adv_interval -0x5712 022802 branch timer_init -: 022805 le_receive_window_size: -0x5713 022806 bpatchx patch2d_3 ,mem_patch2d -0x5714 022807 fetch 1 ,mem_le_peer_sca -0x5715 022808 call le_sca_map -0x5716 022809 fetch 2 ,mem_le_tsniff -0x5717 022810 imul32 temp ,pdata -0x5718 022811 arg 375 ,temp -0x5719 022812 imul32 temp ,pdata -0x571a 022813 arg 100000 ,temp -0x571b 022814 idiv temp -0x571c 022815 fetch 1 ,mem_le_window_size -0x571d 022816 arg 20000 ,temp -0x571e 022817 imul32 temp ,pdata -0x571f 022818 iadd temp ,pdata -0x5720 022819 store 4 ,mem_le_transmit_window -0x5721 022820 bpatchx patch2d_4 ,mem_patch2d -0x5722 022821 fetch 2 ,mem_rx_window_sniff -0x5723 022822 call wait_div_end -0x5724 022823 quotient temp -0x5725 022824 iadd temp ,pdata -0x5726 022825 store 2 ,mem_le_receive_window -0x5727 022826 rtn -: 022828 le_parse_connect_req: -0x5728 022829 bpatchx patch2d_5 ,mem_patch2d -0x5729 022830 fetch 6 ,mem_le_rxbuf + 8 -0x572a 022831 fetcht 6 ,mem_le_lap -0x572b 022832 isub temp ,null -0x572c 022833 nrtn zero -0x572d 022834 call le_scan_check_sender_addr_type -0x572e 022835 copy rega ,pdata -0x572f 022836 store 1 ,mem_le_conn_peer_addr_type -0x5730 022837 fetch 7 ,mem_le_rxbuf + 21 -0x5731 022838 store 7 ,mem_tmp_buffer -0x5732 022839 ifetch 8 ,contr -0x5733 022840 istore 8 ,contw -0x5734 022841 fetch 6 ,mem_le_rxbuf + 2 -0x5735 022842 store 6 ,mem_le_plap -0x5736 022843 increase 6 ,contr -0x5737 022844 ifetch 8 ,contr -0x5738 022845 store 8 ,mem_le_access -0x5739 022846 ifetcht 2 ,contr -0x573a 022847 bpatchx patch2d_6 ,mem_patch2d -0x573b 022848 lshift2 temp ,temp -0x573c 022849 ifetch 2 ,contr -0x573d 022850 lshift2 pdata ,pdata -0x573e 022851 store 2 ,mem_le_tsniff -0x573f 022852 store 4 ,mem_le_anchor -0x5740 022853 isub temp ,pdata -0x5741 022854 add pdata ,-2 ,clke_bt -0x5742 022855 ifetch 9 ,contr -0x5743 022856 store 9 ,mem_le_slave_latency -0x5744 022857 bpatchx patch2d_7 ,mem_patch2d -0x5745 022858 ifetch 1 ,contr -0x5746 022859 rshift4 pdata ,temp -0x5747 022860 rshift temp ,temp -0x5748 022861 storet 1 ,mem_le_peer_sca -0x5749 022862 and_into 0x1f ,pdata -0x574a 022863 store 1 ,mem_le_hop -0x574b 022864 call le_receive_window_size -0x574c 022865 call le_calc_channel_map -0x574d 022866 call le_init_slave -0x574e 022867 call context_new -0x574f 022868 nrtn zero -0x5750 022869 bpatchx patch2e_0 ,mem_patch2e -0x5751 022870 call calc_clke_offset -0x5752 022871 call le_l2cap_reset_signaling_identifier -0x5753 022872 jam bt_evt_le_connected ,mem_fifo_temp -0x5754 022873 call ui_ipc_send_event -0x5755 022874 branch context_save -: 022877 le_init_attlist_search: -0x5756 022878 bpatchx patch2e_1 ,mem_patch2e -0x5757 022879 fetch 2 ,mem_le_search_handle_start -0x5758 022880 iforce regb -0x5759 022881 fetch 2 ,mem_le_search_handle_end -0x575a 022882 iforce regc -0x575b 022883 fetch 2 ,mem_ui_le_uuid_table -0x575c 022884 iforce contr -0x575d 022885 enable user -0x575e 022886 rtn -: 022889 le_att_handle_inrange: -0x575f 022890 ifetch 2 ,contr -0x5760 022891 rtn blank -0x5761 022892 isub regb ,null -0x5762 022893 nrtn positive -0x5763 022894 isub regc ,null -0x5764 022895 rtn zero -0x5765 022896 branch le_att_handle_blank ,positive -0x5766 022897 force 1 ,null -0x5767 022898 rtn -: 022899 le_att_handle_blank: -0x5768 022900 force 0 ,pdata -0x5769 022901 rtn -: 022905 le_att_get_handle_ptr: -0x576a 022906 call le_att_get_handle_ptr2 -0x576b 022907 branch le_att_get_handle_ptr_found ,zero -0x576c 022908 rtn -: 022910 le_att_get_handle_ptr2: -0x576d 022911 bpatchx patch2e_2 ,mem_patch2e -0x576e 022912 fetch 2 ,mem_ui_le_uuid_table -0x576f 022913 iforce contr -: 022914 le_att_get_handle_loop1: -0x5770 022915 ifetch 2 ,contr -0x5771 022916 rtn blank -0x5772 022917 isub temp ,null -0x5773 022918 rtn zero -0x5774 022919 ifetch 1 ,contr -0x5775 022920 iadd contr ,contr -0x5776 022921 ifetch 1 ,contr -0x5777 022922 iadd contr ,contr -0x5778 022923 branch le_att_get_handle_loop1 -: 022924 le_att_get_handle_ptr_found: -0x5779 022925 ifetch 1 ,contr -0x577a 022926 iadd contr ,contr -0x577b 022927 rtn -: 022931 le_att_get_short_uuid_ptr: -0x577c 022932 bpatchx patch2e_3 ,mem_patch2e -0x577d 022933 fetch 2 ,mem_ui_le_uuid_table -0x577e 022934 iforce contr -: 022935 le_att_get_short_uuid_loop: -0x577f 022936 ifetch 2 ,contr -0x5780 022937 rtn blank -0x5781 022938 ifetch 1 ,contr -0x5782 022939 iadd contr ,contr -0x5783 022940 increase -2 ,contr -0x5784 022941 ifetch 2 ,contr -0x5785 022942 isub temp ,null -0x5786 022943 rtn zero -0x5787 022944 ifetch 1 ,contr -0x5788 022945 iadd contr ,contr -0x5789 022946 branch le_att_get_short_uuid_loop -: 022950 le_att_get_handle_info_from_ptr: -0x578a 022951 fetch 2 ,mem_le_cur_attlist_start_ptr -0x578b 022952 branch le_att_get_handle_info_fast -: 022954 le_att_get_handle_info: -0x578c 022955 bpatchx patch2e_4 ,mem_patch2e -0x578d 022956 fetch 2 ,mem_ui_le_uuid_table -: 022957 le_att_get_handle_info_fast: -0x578e 022958 iforce contr -0x578f 022959 copy temp ,rega -: 022960 le_att_get_handle_loop: -0x5790 022961 ifetch 2 ,contr -0x5791 022962 branch le_att_unfind_handle ,blank -0x5792 022963 isub rega ,null -0x5793 022964 branch le_att_finded_handle ,zero -0x5794 022965 ifetch 1 ,contr -0x5795 022966 iadd contr ,contr -0x5796 022967 ifetch 1 ,contr -0x5797 022968 iadd contr ,contr -0x5798 022969 branch le_att_get_handle_loop -: 022970 le_att_unfind_handle: -0x5799 022971 branch disable_blank -: 022973 le_att_finded_handle: -0x579a 022974 ifetch 1 ,contr -0x579b 022975 store 1 ,mem_le_cur_uuid_length -0x579c 022976 copy pdata ,loopcnt -0x579d 022977 arg mem_le_cur_uuid ,contw -0x579e 022978 call memcpy_fast -0x579f 022979 ifetch 1 ,contr -0x57a0 022980 store 1 ,mem_le_curr_att_len -0x57a1 022981 call store_contr -0x57a2 022982 branch enable_blank -: 022985 le_modified_name: -0x57a3 022986 bpatchx patch2e_5 ,mem_patch2e -0x57a4 022987 call le_modified_name_att_list -0x57a5 022988 branch le_modified_name_adv -: 022990 le_modified_name_att_list: -0x57a6 022991 arg uuid_chrctr_device_name ,temp -0x57a7 022992 call le_att_get_short_uuid_ptr -0x57a8 022993 rtn blank -0x57a9 022994 ifetch 1 ,contr -0x57aa 022995 copy contr ,contw -0x57ab 022996 fetcht 1 ,mem_le_name_len -0x57ac 022997 copy temp ,loopcnt -0x57ad 022998 isub temp ,null -0x57ae 022999 nbranch le_name_length_longer_than_att ,positive -0x57af 023000 isub temp ,temp -0x57b0 023001 arg mem_le_name ,contr -0x57b1 023002 call memcpy -0x57b2 023003 copy temp ,loopcnt -0x57b3 023004 ncall memcpy_empty ,zero -0x57b4 023005 rtn -: 023006 le_name_length_longer_than_att: -0x57b5 023007 copy pdata ,loopcnt -0x57b6 023008 arg mem_le_name ,contr -0x57b7 023009 branch memcpy_fast -: 023012 le_modified_name_adv: -0x57b8 023013 arg mem_le_adv_data_len + 32 ,regc -0x57b9 023014 arg mem_le_adv_data ,rega -0x57ba 023015 call le_modified_name_adv_and_scan -0x57bb 023016 setarg 0 -0x57bc 023017 setflag user ,0 ,pdata -0x57bd 023018 store 1 ,mem_pdatatemp -0x57be 023019 arg mem_le_scan_data_len + 32 ,regc -0x57bf 023020 arg mem_le_scan_data ,rega -0x57c0 023021 call le_modified_name_adv_and_scan -0x57c1 023022 rtn user -0x57c2 023023 fetch 1 ,mem_pdatatemp -0x57c3 023024 branch assert ,blank -0x57c4 023025 rtn -: 023028 le_modified_name_adv_and_scan: -0x57c5 023029 bpatchx patch2e_6 ,mem_patch2e -0x57c6 023030 call enable_user -0x57c7 023031 call clear_temp_block -0x57c8 023032 arg 0 ,regb -0x57c9 023033 arg mem_le_data_temp ,contw -0x57ca 023034 call le_modified_name_adv_loop -0x57cb 023035 fetch 1 ,mem_le_name_len -0x57cc 023036 add pdata ,1 ,temp -0x57cd 023037 iadd regb ,rega -0x57ce 023038 increase 2 ,rega -0x57cf 023039 sub rega ,0x1f ,null -0x57d0 023040 nbranch le_modified_name_adv_and_scan_name_overflow ,positive -0x57d1 023041 istoret 1 ,contw -0x57d2 023042 arg gap_adtype_local_name_complete ,temp -0x57d3 023043 istoret 1 ,contw -0x57d4 023044 iforce loopcnt -0x57d5 023045 call memcpy_fast -0x57d6 023046 copy rega ,regb -: 023047 le_modified_name_adv_and_scan_store_data: -0x57d7 023048 deposit regb -0x57d8 023049 store 1 ,mem_le_data_len_temp -0x57d9 023050 arg mem_le_data_len_temp ,contr -0x57da 023051 setarg -32 -0x57db 023052 iadd regc ,contw -0x57dc 023053 branch memcpy32 -: 023055 le_modified_name_adv_and_scan_name_overflow: -0x57dd 023056 call disable_user -0x57de 023057 branch le_modified_name_adv_and_scan_store_data -: 023059 le_modified_name_adv_loop: -0x57df 023060 ifetch 1 ,rega -0x57e0 023061 rtn blank -0x57e1 023062 pincrease 1 -0x57e2 023063 ifetcht 1 ,contr -0x57e3 023064 sub temp ,gap_adtype_local_name_complete ,null -0x57e4 023065 branch le_modified_name_adv_found_name ,zero -0x57e5 023066 iadd regb ,regb -0x57e6 023067 copy rega ,contr -0x57e7 023068 iforce loopcnt -0x57e8 023069 call memcpy_fast -0x57e9 023070 copy contr ,rega -: 023071 le_modified_name_adv_loop2: -0x57ea 023072 deposit rega -0x57eb 023073 isub regc ,null -0x57ec 023074 rtn positive -0x57ed 023075 branch le_modified_name_adv_loop -: 023077 le_modified_name_adv_found_name: -0x57ee 023078 iadd rega ,rega -0x57ef 023079 branch le_modified_name_adv_loop2 -: 023082 memcpy_empty: -0x57f0 023083 setarg space -0x57f1 023084 istore 1 ,contw -0x57f2 023085 loop memcpy_empty -0x57f3 023086 rtn -: 023089 le_lpm_set_mult: -0x57f4 023090 bpatchx patch2e_7 ,mem_patch2e -0x57f5 023091 disable wake -0x57f6 023092 branch le_lpm_set_mult_attempt ,attempt -0x57f7 023093 nbranch le_lpm_lost ,match -: 023094 le_lpm_set_mult_attempt: -0x57f8 023095 call lpm_match -0x57f9 023096 fetch 2 ,mem_rx_window_sniff -0x57fa 023097 store 2 ,mem_le_receive_window -0x57fb 023099 nbranch lpm_mult_short ,match -0x57fc 023100 bmark1 mark_old_packet ,lpm_mult_short -0x57fd 023102 fetch 1 ,mem_le_packet_size -0x57fe 023103 nbranch lpm_mult_short ,blank -0x57ff 023104 fetch 1 ,mem_le_txlen -0x5800 023105 nbranch lpm_mult_short ,blank -0x5801 023107 fetch 1 ,mem_le_configuration -0x5802 023108 bbit1 bit_ble_short_mult ,lpm_mult_short -0x5803 023110 fetch 1 ,mem_le_state -0x5804 023111 bbit1 lestate_update_param ,lpm_mult_short -0x5805 023112 branch lpm_mult_wait_timeout -: 023114 le_lpm_lost: -0x5806 023115 fetcht 2 ,mem_rx_window_sniff -0x5807 023116 rshift temp ,temp -0x5808 023117 fetch 2 ,mem_le_receive_window -0x5809 023118 iadd temp ,pdata -0x580a 023119 store 2 ,mem_le_receive_window -0x580b 023120 branch lpm_lost -: 023123 le_set_config_fixed_tk: -0x580c 023124 arg bit_ble_passkey_fixed_key ,queue -0x580d 023125 branch le_set_config -: 023127 le_clr_config_fixed_tk: -0x580e 023128 arg bit_ble_passkey_fixed_key ,queue -0x580f 023129 branch le_clr_config -: 023131 le_set_config_fixed_ltk: -0x5810 023132 arg bit_ble_pairing_fixed_ltk ,queue -0x5811 023133 branch le_set_config -: 023135 le_clr_config_fixed_ltk: -0x5812 023136 arg bit_ble_pairing_fixed_ltk ,queue -0x5813 023137 branch le_clr_config -: 023139 le_set_config_more_data: -0x5814 023140 arg bit_ble_transmit_packet_by_md ,queue -0x5815 023141 branch le_set_config -: 023143 le_clr_config_more_data: -0x5816 023144 arg bit_ble_transmit_packet_by_md ,queue -0x5817 023145 branch le_clr_config -: 023147 le_set_config_read_authentication: -0x5818 023148 arg bit_ble_read_auth ,queue -0x5819 023149 branch le_set_config -: 023151 le_clr_config_read_authentication: -0x581a 023152 arg bit_ble_read_auth ,queue -0x581b 023153 branch le_clr_config -: 023155 le_set_config_write_authentication: -0x581c 023156 arg bit_ble_write_auth ,queue -0x581d 023157 branch le_set_config -: 023159 le_clr_config_write_authentication: -0x581e 023160 arg bit_ble_write_auth ,queue -0x581f 023161 branch le_clr_config -: 023163 le_set_config_short_mult: -0x5820 023164 arg bit_ble_short_mult ,queue -0x5821 023165 branch le_set_config -: 023167 le_clr_config_short_mult: -0x5822 023168 arg bit_ble_short_mult ,queue -0x5823 023169 branch le_clr_config -: 023172 le_set_config: -0x5824 023173 fetch 1 ,mem_le_configuration -0x5825 023174 qset1 pdata -0x5826 023175 store 1 ,mem_le_configuration -0x5827 023176 rtn -: 023178 le_clr_config: -0x5828 023179 fetch 1 ,mem_le_configuration -0x5829 023180 qset0 pdata -0x582a 023181 store 1 ,mem_le_configuration -0x582b 023182 rtn -: 023184 le_set_fixed_ltk: -0x582c 023185 setarg 0x112233 -0x582d 023186 store 3 ,mem_le_fixed_ltk -0x582e 023187 setarg 0x445566 -0x582f 023188 istore 3 ,contw -0x5830 023189 setarg 0x778899 -0x5831 023190 istore 3 ,contw -0x5832 023191 setarg 0x001122 -0x5833 023192 istore 3 ,contw -0x5834 023193 setarg 0x334455 -0x5835 023194 istore 3 ,contw -0x5836 023195 setarg 0x66 -0x5837 023196 istore 1 ,contw -0x5838 023197 rtn -: 023200 le_set_justwork: -0x5839 023201 setarg 0x01000302 -0x583a 023202 store 4 ,mem_le_pres -0x583b 023203 setarg 0x010010 -0x583c 023204 store 3 ,mem_le_pres_max_keysize -0x583d 023205 jam 1 ,mem_le_pairing_mode -0x583e 023206 rtn -: 023210 le_fifo_malloc_tx_empty: -0x583f 023211 arg 0 ,rega -0x5840 023212 arg llid_empty ,type -0x5841 023213 branch le_fifo_malloc_tx -: 023217 le_fifo_malloc_tx_ll: -0x5842 023218 arg llid_le_ll ,type -0x5843 023219 call le_fifo_malloc_tx -0x5844 023220 copy regb ,pdata -0x5845 023221 istore 1 ,contw -0x5846 023222 rtn -: 023226 le_fifo_malloc_tx_l2cap: -0x5847 023227 force llid_l2cap_start ,type -0x5848 023228 increase 4 ,rega -0x5849 023229 call le_fifo_malloc_tx -0x584a 023230 increase -4 ,rega -0x584b 023231 copy rega ,pdata -0x584c 023232 istore 2 ,contw -0x584d 023233 copy regb ,pdata -0x584e 023234 istore 2 ,contw -0x584f 023235 rtn -: 023239 le_fifo_malloc_tx: -0x5850 023240 sub rega ,240 ,null -0x5851 023241 nbranch assert ,positive -0x5852 023242 fetch 1 ,mem_le_tx_buff_used -0x5853 023243 arg 1 ,temp -0x5854 023244 arg le_tx_buff_count ,loopcnt -: 023245 le_fifo_malloc_tx_loop: -0x5855 023246 iand temp ,null -0x5856 023247 branch le_fifo_malloc_tx_got_empty ,zero -0x5857 023248 lshift temp ,temp -0x5858 023249 loop le_fifo_malloc_tx_loop -0x5859 023250 branch assert -: 023251 le_fifo_malloc_tx_got_empty: -0x585a 023252 ixor temp ,pdata -0x585b 023253 store 1 ,mem_le_tx_buff_used -0x585c 023254 sub loopcnt ,le_tx_buff_count ,pdata -0x585d 023255 lshift4 pdata ,pdata -0x585e 023256 lshift4 pdata ,pdata -0x585f 023257 arg mem_le_tx_buffer0 ,temp -0x5860 023258 iadd temp ,temp -: 023259 le_fifo_tx_find_empty_ptr: -0x5861 023260 arg 0 ,loopcnt -0x5862 023261 arg mem_le_tx_ptr0 ,contr -: 023262 le_fifo_tx_find_empty_ptr_loop: -0x5863 023263 ifetch 2 ,contr -0x5864 023264 branch le_fifo_tx_found_empty_ptr ,blank -0x5865 023265 copy loopcnt ,pdata -0x5866 023266 increase 1 ,loopcnt -0x5867 023267 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop -0x5868 023268 branch assert -: 023271 le_fifo_tx_found_empty_ptr: -0x5869 023272 increase -2 ,contr -0x586a 023273 istoret 2 ,contr -0x586b 023274 copy temp ,contw -0x586c 023275 copy rega ,pdata -0x586d 023276 istore 1 ,contw -0x586e 023277 setarg 0 -0x586f 023278 istore 1 ,contw -0x5870 023279 copy type ,pdata -0x5871 023280 istore 1 ,contw -0x5872 023281 rtn -: 023285 le_fifo_get_first_tx_ptr: -0x5873 023286 fetch 2 ,mem_le_tx_ptr0 -0x5874 023287 copy pdata ,contr -0x5875 023288 rtn -: 023290 le_fifo_get_second_tx_ptr: -0x5876 023291 fetch 2 ,mem_le_tx_ptr1 -0x5877 023292 copy pdata ,contr -0x5878 023293 rtn -: 023295 le_fifo_get_last_tx_ptr: -0x5879 023296 call le_fifo_get_last_tx_ptr0 -0x587a 023297 copy pdata ,contr -0x587b 023298 rtn -: 023299 le_fifo_get_last_tx_ptr0: -0x587c 023300 fetch 2 ,mem_le_tx_ptr3 -0x587d 023301 nrtn blank -0x587e 023302 fetch 2 ,mem_le_tx_ptr2 -0x587f 023303 nrtn blank -0x5880 023304 fetch 2 ,mem_le_tx_ptr1 -0x5881 023305 nrtn blank -0x5882 023306 fetch 2 ,mem_le_tx_ptr0 -0x5883 023307 rtn -: 023309 le_fifo_get_first_l2cap_ptr: -0x5884 023310 call le_fifo_get_first_tx_ptr -0x5885 023311 increase 3 ,contr -0x5886 023312 rtn -: 023314 le_fifo_get_first_att_ptr: -0x5887 023315 call le_fifo_get_first_tx_ptr -0x5888 023316 increase 7 ,contr -0x5889 023317 rtn -: 023319 le_fifo_get_last_att_ptr: -0x588a 023320 call le_fifo_get_last_tx_ptr -0x588b 023321 increase 7 ,contr -0x588c 023322 rtn -: 023324 le_fifo_get_last_l2cap_ptr: -0x588d 023325 call le_fifo_get_last_tx_ptr -0x588e 023326 increase 3 ,contr -0x588f 023327 rtn -: 023331 le_fifo_check_full: -0x5890 023332 fetch 2 ,mem_le_tx_ptr3 -0x5891 023333 rtn -: 023336 le_fifo_check_nearly_full: -0x5892 023337 fetch 2 ,mem_le_tx_ptr2 -0x5893 023338 rtn -: 023341 le_fifo_check_empty: -0x5894 023342 fetch 2 ,mem_le_tx_ptr0 -0x5895 023343 rtn -: 023346 le_fifo_release_first_node: -0x5896 023347 fetch 2 ,mem_le_tx_ptr0 -0x5897 023348 arg mem_le_tx_buffer0 ,temp -0x5898 023349 isub temp ,pdata -0x5899 023350 rshift4 pdata ,pdata -0x589a 023351 rshift4 pdata ,queue -0x589b 023352 fetch 1 ,mem_le_tx_buff_used -0x589c 023353 qset0 pdata -0x589d 023354 store 1 ,mem_le_tx_buff_used -0x589e 023355 arg 0 ,loopcnt -: 023356 le_fifo_release_first_node_loop: -0x589f 023357 lshift loopcnt ,pdata -0x58a0 023358 arg mem_le_tx_ptr1 ,temp -0x58a1 023359 iadd temp ,temp -0x58a2 023360 ifetch 2 ,temp -0x58a3 023361 increase -2 ,temp -0x58a4 023362 istore 2 ,temp -0x58a5 023363 copy loopcnt ,pdata -0x58a6 023364 increase 1 ,loopcnt -0x58a7 023365 bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop -0x58a8 023366 setarg 0 -0x58a9 023367 istore 2 ,temp -0x58aa 023368 rtn -: 023374 le_parse_att: -0x58ab 023375 ifetch 3 ,contr -0x58ac 023376 store 3 ,mem_le_att_opcode -0x58ad 023377 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request -0x58ae 023378 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response -0x58af 023379 beq attop_find_information_request ,le_parse_att_find_information_request -0x58b0 023380 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request -0x58b1 023381 beq attop_read_by_type_request ,le_parse_att_read_by_type_request -0x58b2 023382 beq attop_read_request ,le_parse_att_read_request -0x58b3 023383 beq attop_read_blob_request ,le_parse_att_read_blob_request -0x58b4 023384 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request -0x58b5 023385 beq attop_write_request ,le_parse_att_write_request -0x58b6 023386 beq attop_prepare_write_request ,le_parse_att_prepare_write_request -0x58b7 023387 beq attop_execute_write_request ,le_parse_att_execute_write_request -0x58b8 023388 beq attop_write_command ,le_parse_att_write_command -0x58b9 023389 rtn -: 023392 le_send_att_exchange_mtu_requset: -0x58ba 023393 force 3 ,rega -0x58bb 023394 call le_fifo_malloc_tx_l2cap_gatt -0x58bc 023395 setarg attop_exchange_mtu_request -0x58bd 023396 istore 1 ,contw -0x58be 023397 fetch 2 ,mem_le_local_mtu -0x58bf 023398 istore 2 ,contw -0x58c0 023399 rtn -: 023402 le_parse_att_exchange_mtu_request: -0x58c1 023403 call le_parse_att_exchange_mtu_response -: 023404 le_send_att_exchange_mtu_response: -0x58c2 023405 force 3 ,rega -0x58c3 023406 call le_fifo_malloc_tx_l2cap_gatt -0x58c4 023407 setarg attop_exchange_mtu_response -0x58c5 023408 istore 1 ,contw -0x58c6 023409 fetch 2 ,mem_le_local_mtu -0x58c7 023410 istore 2 ,contw -0x58c8 023411 rtn -: 023413 le_parse_att_exchange_mtu_response: -0x58c9 023414 rshift8 pdata ,pdata -0x58ca 023415 store 2 ,mem_le_remote_mtu -0x58cb 023416 rtn -: 023418 le_parse_att_find_information_request: -0x58cc 023419 call le_get_search_handle_start_end_common -0x58cd 023420 call enable_user -0x58ce 023421 branch le_send_att_find_information_response -: 023423 le_send_att_find_information_response: -0x58cf 023424 arg 3 ,timeup -0x58d0 023425 call le_init_attlist_search -: 023426 le_send_att_find_information_res_loop: -0x58d1 023427 call le_att_handle_inrange -0x58d2 023428 branch le_send_att_find_information_res_end ,blank -0x58d3 023429 nbranch le_send_att_find_information_res_next ,positive -0x58d4 023430 increase -2 ,contr -0x58d5 023431 call store_contr -0x58d6 023432 call get_contw -0x58d7 023433 nbranch le_send_att_find_information_res_store_info ,user -0x58d8 023434 call push_stack_rega_b_c -0x58d9 023435 call disable_user -0x58da 023436 force 20 ,rega -0x58db 023437 call le_fifo_malloc_tx_l2cap_gatt -0x58dc 023438 call pop_stack_rega_b_c -0x58dd 023439 setarg attop_find_information_response -0x58de 023440 istore 1 ,contw -0x58df 023441 setarg uuid_size_16bit -0x58e0 023442 istore 1 ,contw -: 023443 le_send_att_find_information_res_store_info: -0x58e1 023444 call get_contr -0x58e2 023445 ifetch 2 ,contr -0x58e3 023446 istore 2 ,contw -0x58e4 023447 ifetch 1 ,contr -0x58e5 023448 copy pdata ,loopcnt -0x58e6 023449 call memcpy -0x58e7 023450 call store_contw -0x58e8 023451 increase -1 ,timeup -0x58e9 023452 branch le_send_att_find_information_res_end ,zero -: 023453 le_send_att_find_information_res_cont: -0x58ea 023454 ifetch 1 ,contr -0x58eb 023455 iadd contr ,contr -0x58ec 023456 branch le_send_att_find_information_res_loop -: 023457 le_send_att_find_information_res_next: -0x58ed 023458 ifetch 1 ,contr -0x58ee 023459 iadd contr ,contr -0x58ef 023460 branch le_send_att_find_information_res_cont -: 023461 le_send_att_find_information_res_end: -0x58f0 023462 branch le_send_att_error_response_notfound ,user -0x58f1 023463 branch le_send_auto_len_by_mem -: 023466 le_parse_att_find_by_type_value_request: -0x58f2 023467 call le_get_search_handle_start_end_common -0x58f3 023468 ifetch 2 ,contr -0x58f4 023469 store 2 ,mem_le_search_uuid -0x58f5 023470 call store_contr -0x58f6 023471 arg mem_le_search_att_type_length ,contw -0x58f7 023472 fetch 2 ,mem_le_l2cap_size -0x58f8 023473 increase -7 ,pdata -0x58f9 023474 call le_get_search_common2 -0x58fa 023475 branch le_send_att_find_by_type_value_response -: 023478 le_start_end_handle_check_1: -0x58fb 023479 disable user -0x58fc 023480 fetcht 2 ,mem_le_search_handle_start -0x58fd 023481 fetch 2 ,mem_le_search_handle_end -0x58fe 023482 isub temp ,null -0x58ff 023483 nbranch le_start_end_handle_check_1_fail ,positive -0x5900 023484 deposit temp -0x5901 023485 rtnne 0 -: 023486 le_start_end_handle_check_1_fail: -0x5902 023487 enable user -0x5903 023488 jam att_err_invalid_handle ,mem_le_err_code -0x5904 023489 branch le_send_att_error_response -: 023492 le_send_att_find_by_type_value_response: -0x5905 023493 call le_start_end_handle_check_1 -0x5906 023494 rtn user -0x5907 023495 fetcht 2 ,mem_le_search_uuid -0x5908 023496 setarg uuid_gatt_primary_service -0x5909 023497 isub temp ,null -0x590a 023498 branch le_send_att_find_by_type_value_res_primary ,zero -0x590b 023499 branch le_send_att_error_response_notfound -: 023502 le_send_att_find_by_type_value_res_primary: -0x590c 023503 jam le_find_by_type_val_res_not_found ,mem_le_search_res -0x590d 023504 fetcht 2 ,mem_le_search_handle_start -0x590e 023505 storet 2 ,mem_temp -0x590f 023506 call le_att_get_handle_info -0x5910 023507 nbranch le_send_att_error_response_notfound ,blank -: 023508 le_send_att_find_primary_search_loop: -0x5911 023509 fetcht 2 ,mem_temp -0x5912 023510 call le_att_get_handle_info -0x5913 023511 nbranch le_send_att_error_response_notfound2 ,blank -0x5914 023512 copy contr ,rega -0x5915 023513 fetch 1 ,mem_le_curr_att_len -0x5916 023514 copy pdata ,loopcnt -0x5917 023515 fetcht 1 ,mem_le_search_att_type_length -0x5918 023516 isub temp ,null -0x5919 023517 nbranch le_send_att_find_primary_search_loop1 ,zero -0x591a 023518 arg mem_le_search_att_type ,regb -0x591b 023519 call string_compare -0x591c 023521 branch le_send_att_find_primary_search_end_start_handle_found ,zero -0x591d 023523 fetch 2 ,mem_le_cur_uuid -0x591e 023524 fetcht 2 ,mem_le_search_uuid -0x591f 023525 isub temp ,null -0x5920 023526 branch le_send_att_find_primary_search_end_ending_handle_found ,zero -: 023527 le_send_att_find_primary_search_loop1: -0x5921 023528 fetch 2 ,mem_temp -0x5922 023529 increase 1 ,pdata -0x5923 023530 store 2 ,mem_temp -0x5924 023531 branch le_send_att_find_primary_search_loop -: 023533 le_send_att_error_response_notfound2: -0x5925 023534 fetch 1 ,mem_le_search_res -0x5926 023535 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found -0x5927 023536 branch le_send_att_error_response_notfound -: 023539 le_send_att_find_primary_search_end_start_handle_found: -0x5928 023540 fetch 2 ,mem_le_cur_uuid -0x5929 023541 fetcht 2 ,mem_le_search_uuid -0x592a 023542 isub temp ,null -0x592b 023543 nbranch le_send_att_find_primary_search_loop1 ,zero -0x592c 023544 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res -0x592d 023546 fetcht 2 ,mem_temp -0x592e 023547 storet 2 ,mem_le_cur_handle_start -0x592f 023548 branch le_send_att_find_primary_search_loop1 -: 023550 le_send_att_find_primary_search_end_ending_handle_found: -0x5930 023551 fetch 1 ,mem_le_search_res -0x5931 023552 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 -0x5932 023553 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res -0x5933 023554 fetcht 2 ,mem_temp -0x5934 023555 increase -1 ,temp -0x5935 023556 storet 2 ,mem_le_cur_handle_end -: 023558 le_send_att_find_primary_search_end: -0x5936 023559 arg 5 ,rega -0x5937 023560 call le_fifo_malloc_tx_l2cap_gatt -0x5938 023561 setarg attop_find_by_type_value_response -0x5939 023562 istore 1 ,contw -0x593a 023563 fetch 2 ,mem_le_cur_handle_start -0x593b 023564 istore 2 ,contw -0x593c 023565 fetch 2 ,mem_le_cur_handle_end -0x593d 023566 istore 2 ,contw -0x593e 023567 rtn -: 023571 le_parse_att_read_by_type_request: -0x593f 023572 call le_get_search_handle_start_end_common -0x5940 023573 call le_get_search_att_uuid -0x5941 023574 branch le_send_att_read_by_type_response -: 023576 le_send_att_read_by_type_response: -0x5942 023577 fetcht 2 ,mem_le_search_handle_start -0x5943 023578 storet 2 ,mem_temp -0x5944 023579 call le_init_attlist_search -0x5945 023580 call le_att_get_handle_ptr2 -0x5946 023581 increase -2 ,contr -0x5947 023582 copy contr ,pdata -0x5948 023583 store 2 ,mem_le_cur_attlist_start_ptr -0x5949 023585 fetcht 2 ,mem_le_search_uuid -0x594a 023586 setarg uuid_chrctr_device_name -0x594b 023587 isub temp ,null -0x594c 023588 branch le_send_att_read_by_type_res_device_name ,zero -0x594d 023589 setarg uuid_gatt_characteristic -0x594e 023590 isub temp ,null -0x594f 023591 nbranch le_send_att_read_by_type_res_not_characteristic ,zero -0x5950 023592 arg 2 ,timeup -: 023593 le_send_att_read_by_type_response_loop: -0x5951 023594 call le_att_check_handle_end -0x5952 023595 nbranch le_send_att_read_by_type_response_end ,positive -0x5953 023596 fetcht 2 ,mem_temp -0x5954 023597 call le_att_get_handle_info_from_ptr -0x5955 023598 beq 1 ,le_send_att_read_by_type_response_end -0x5956 023599 call le_att_same_uuid -0x5957 023600 nbranch le_send_att_read_by_type_response_next_handle ,zero -0x5958 023601 nbranch le_send_att_read_by_type_res_found_next ,user -0x5959 023602 disable user -0x595a 023603 arg 20 ,rega -0x595b 023604 call le_fifo_malloc_tx_l2cap_gatt -0x595c 023605 setarg attop_read_by_type_response -0x595d 023606 istore 1 ,contw -0x595e 023607 copy contw ,alarm -0x595f 023608 increase 1 ,contw -0x5960 023610 call le_send_att_read_by_type_write_properties -0x5961 023611 call le_att_next_handle -0x5962 023612 call le_att_get_handle_info_from_ptr -0x5963 023613 call le_send_att_read_by_type_write_uuid -0x5964 023614 fetch 1 ,mem_le_cur_uuid_length -0x5965 023615 increase 5 ,pdata -0x5966 023616 istore 1 ,alarm -0x5967 023617 fetch 1 ,mem_le_cur_uuid_length -0x5968 023618 beq 16 ,le_send_att_read_by_type_response_end -0x5969 023619 increase -1 ,timeup -0x596a 023620 branch le_send_att_read_by_type_response_end ,zero -: 023621 le_send_att_read_by_type_response_next_handle: -0x596b 023622 call le_att_next_handle -0x596c 023623 branch le_send_att_read_by_type_response_loop -: 023624 le_send_att_read_by_type_response_end: -0x596d 023625 branch le_send_att_error_response_notfound ,user -0x596e 023626 branch le_send_auto_len_by_mem -: 023628 le_send_att_read_by_type_res_found_next: -0x596f 023629 call le_store_att_record -0x5970 023630 call le_att_next_handle -0x5971 023631 call le_att_get_handle_info_from_ptr -0x5972 023632 fetch 1 ,mem_le_cur_uuid_length -0x5973 023633 beq 16 ,le_send_att_read_by_type_response_end -0x5974 023635 call get_contw -0x5975 023636 fetch 2 ,mem_temp -0x5976 023637 increase -1 ,pdata -0x5977 023638 istore 2 ,contw -0x5978 023639 call le_write_att_record_common -0x5979 023640 call le_send_att_read_by_type_write_uuid -0x597a 023641 increase -1 ,timeup -0x597b 023642 branch le_send_att_read_by_type_response_end ,zero -0x597c 023643 branch le_send_att_read_by_type_response_next_handle -: 023646 le_send_att_read_by_type_write_properties: -0x597d 023647 fetch 2 ,mem_temp -0x597e 023648 istore 2 ,contw -0x597f 023650 fetch 1 ,mem_le_curr_att_len -0x5980 023651 copy pdata ,loopcnt -0x5981 023652 call get_contr -0x5982 023653 call memcpy_fast -0x5983 023654 branch store_contw -: 023655 le_send_att_read_by_type_write_uuid: -0x5984 023656 call get_contw -0x5985 023657 fetch 2 ,mem_temp -0x5986 023658 istore 2 ,contw -0x5987 023659 call store_contw -0x5988 023660 fetch 1 ,mem_le_cur_uuid_length -0x5989 023661 copy pdata ,loopcnt -0x598a 023662 call get_contw -0x598b 023663 call get_contr -0x598c 023664 isub loopcnt ,contr -0x598d 023665 increase -1 ,contr -0x598e 023666 call memcpy_fast -0x598f 023667 branch store_contw -: 023671 le_send_att_read_by_type_res_not_characteristic: -0x5990 023672 fetcht 2 ,mem_le_search_handle_start -0x5991 023673 storet 2 ,mem_temp -: 023674 le_send_att_read_by_type_res_not_char_loop: -0x5992 023675 call le_att_check_handle_end -0x5993 023676 nbranch le_send_att_error_response_notfound ,positive -0x5994 023677 call le_att_get_handle_info_from_ptr -0x5995 023678 beq 1 ,le_send_att_error_response_notfound -0x5996 023679 call le_att_same_uuid -0x5997 023680 nbranch le_send_att_read_by_type_res_not_char_next ,zero -: 023682 le_send_att_read_by_type_res_not_char_common: -0x5998 023683 arg 20 ,rega -0x5999 023684 call le_fifo_malloc_tx_l2cap_gatt -0x599a 023685 setarg attop_read_by_type_response -0x599b 023686 istore 1 ,contw -0x599c 023687 fetch 1 ,mem_le_curr_att_len -0x599d 023688 copy pdata ,loopcnt -0x599e 023689 increase 2 ,pdata -0x599f 023690 istore 1 ,contw -0x59a0 023691 fetch 2 ,mem_temp -0x59a1 023692 istore 2 ,contw -0x59a2 023693 call get_contr -0x59a3 023694 call memcpy_fast -0x59a4 023695 call store_contw -0x59a5 023696 branch le_send_auto_len_by_mem -: 023698 le_send_att_read_by_type_res_not_char_next: -0x59a6 023699 call le_att_next_handle -0x59a7 023700 branch le_send_att_read_by_type_res_not_char_loop -: 023703 le_send_att_read_by_type_res_device_name: -0x59a8 023704 arg uuid_chrctr_device_name ,temp -0x59a9 023705 call le_att_get_short_uuid_ptr -0x59aa 023706 rtn blank -0x59ab 023707 increase -5 ,contr -0x59ac 023708 ifetch 2 ,contr -0x59ad 023709 store 2 ,mem_temp -0x59ae 023710 arg 20 ,rega -0x59af 023711 call le_fifo_malloc_tx_l2cap_gatt -0x59b0 023712 setarg attop_read_by_type_response -0x59b1 023713 istore 1 ,contw -0x59b2 023714 fetch 1 ,mem_le_name_len -0x59b3 023715 copy pdata ,loopcnt -0x59b4 023716 increase 2 ,pdata -0x59b5 023717 istore 1 ,contw -0x59b6 023718 fetch 2 ,mem_temp -0x59b7 023719 istore 2 ,contw -0x59b8 023720 arg mem_le_name ,contr -0x59b9 023721 call memcpy_fast -0x59ba 023722 call store_contw -0x59bb 023723 branch le_send_auto_len_by_mem -: 023727 le_parse_att_read_request: -0x59bc 023728 fetcht 2 ,mem_le_att_handle -0x59bd 023729 fetch 1 ,mem_le_configuration -0x59be 023730 bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth -: 023732 le_send_att_read_response: -0x59bf 023733 call le_att_get_handle_ptr -0x59c0 023734 branch le_send_att_error_response_notfound ,blank -0x59c1 023735 increase -2 ,contr -0x59c2 023736 ifetch 2 ,contr -0x59c3 023737 arg uuid_chrctr_device_name ,temp -0x59c4 023738 isub temp ,null -0x59c5 023739 branch le_send_device_name ,zero -0x59c6 023740 ifetch 1 ,contr -0x59c7 023741 sub pdata ,22 ,null -0x59c8 023742 branch le_send_att_read_response_less ,positive -0x59c9 023743 force 22 ,pdata -: 023744 le_send_att_read_response_less: -0x59ca 023745 copy pdata ,regc -0x59cb 023746 call store_contr -0x59cc 023747 add regc ,1 ,rega -0x59cd 023748 call le_fifo_malloc_tx_l2cap_gatt -0x59ce 023749 setarg attop_read_response -0x59cf 023750 istore 1 ,contw -0x59d0 023751 copy regc ,loopcnt -0x59d1 023752 call get_contr -0x59d2 023753 branch memcpy -: 023755 le_send_device_name: -0x59d3 023756 call store_contr -0x59d4 023757 fetch 1 ,mem_le_name_len -0x59d5 023758 add pdata ,1 ,rega -0x59d6 023759 call le_fifo_malloc_tx_l2cap_gatt -0x59d7 023760 setarg attop_read_response -0x59d8 023761 istore 1 ,contw -0x59d9 023762 fetch 1 ,mem_le_name_len -0x59da 023763 copy pdata ,loopcnt -0x59db 023764 arg mem_le_name ,contr -0x59dc 023765 branch memcpy -: 023768 le_send_att_read_response_check_auth: -0x59dd 023769 fetch 2 ,mem_le_pairing_handle -0x59de 023770 isub temp ,null -0x59df 023771 nbranch le_send_att_read_response ,zero -0x59e0 023773 call le_check_encrypt_state -0x59e1 023774 nbranch le_send_att_read_response ,user -0x59e2 023775 jam att_err_insufficient_authentication ,mem_le_err_code -0x59e3 023776 branch le_send_att_error_response -: 023779 le_parse_att_read_blob_request: -0x59e4 023780 ifetch 2 ,contr -0x59e5 023781 store 2 ,mem_le_att_offset -: 023782 le_send_att_read_blob_response: -0x59e6 023783 arg 20 ,rega -0x59e7 023784 call le_fifo_malloc_tx_l2cap_gatt -0x59e8 023785 setarg attop_read_blob_response -0x59e9 023786 istore 1 ,contw -0x59ea 023787 fetch 2 ,mem_le_att_offset -0x59eb 023788 iforce rega -0x59ec 023789 fetcht 2 ,mem_le_att_handle -0x59ed 023790 call le_att_get_handle_ptr -0x59ee 023791 branch le_send_att_error_response_notfound ,blank -0x59ef 023792 ifetch 1 ,contr -0x59f0 023793 isub rega ,loopcnt -0x59f1 023794 nbranch le_send_att_error_response_notfound ,positive -0x59f2 023795 sub loopcnt ,22 ,null -0x59f3 023796 branch le_send_att_read_blob_response_less ,positive -0x59f4 023797 force 22 ,loopcnt -: 023798 le_send_att_read_blob_response_less: -0x59f5 023799 deposit rega -0x59f6 023800 iadd contr ,contr -0x59f7 023801 call memcpy_fast -0x59f8 023802 call store_contw -0x59f9 023803 branch le_send_auto_len_by_mem -: 023806 le_parse_att_read_by_group_type_request: -0x59fa 023807 call le_get_search_handle_start_end_common -0x59fb 023808 call le_get_search_att_type -0x59fc 023809 branch le_send_att_read_by_group_type_response -: 023814 le_send_att_read_by_group_type_response: -0x59fd 023815 arg 2 ,timeup -0x59fe 023816 fetcht 2 ,mem_le_search_handle_start -0x59ff 023820 storet 2 ,mem_temp -0x5a00 023821 call le_init_attlist_search -0x5a01 023822 call le_att_get_handle_ptr2 -0x5a02 023823 increase -2 ,contr -0x5a03 023824 copy contr ,pdata -0x5a04 023825 store 2 ,mem_le_cur_attlist_start_ptr -: 023826 le_send_att_read_by_group_type_response_loop: -0x5a05 023827 call le_att_check_handle_end -0x5a06 023828 nbranch le_send_att_read_by_group_type_end0 ,positive -0x5a07 023829 fetcht 2 ,mem_temp -0x5a08 023830 call le_att_get_handle_info_from_ptr -0x5a09 023831 beq 1 ,le_send_att_read_by_group_type_end1 -0x5a0a 023833 call le_att_same_type -0x5a0b 023834 nbranch le_send_att_read_by_group_type_next_handle ,zero -0x5a0c 023835 copy timeup ,pdata -0x5a0d 023836 beq 0 ,le_send_att_read_by_group_type_end1 -0x5a0e 023837 nbranch le_send_att_read_by_group_type_store_write_record ,user -0x5a0f 023838 disable user -0x5a10 023840 arg 20 ,rega -0x5a11 023841 call le_fifo_malloc_tx_l2cap_gatt -0x5a12 023842 setarg attop_read_by_group_type_response -0x5a13 023843 istore 1 ,contw -0x5a14 023844 fetch 1 ,mem_le_curr_att_len -0x5a15 023845 increase 4 ,pdata -0x5a16 023846 istore 1 ,contw -0x5a17 023847 call store_contw -0x5a18 023848 branch le_send_att_read_by_group_type_store_record -: 023849 le_send_att_read_by_group_type_store_write_record: -0x5a19 023850 fetch 1 ,mem_le_curr_att_len -0x5a1a 023851 beq 16 ,le_send_att_read_by_group_type_end1 -0x5a1b 023852 fetch 2 ,mem_temp -0x5a1c 023853 increase -1 ,pdata -0x5a1d 023854 store 2 ,mem_le_cur_handle_end -0x5a1e 023855 call le_write_att_record -: 023856 le_send_att_read_by_group_type_store_record: -0x5a1f 023857 fetch 2 ,mem_temp -0x5a20 023858 store 2 ,mem_le_cur_handle_start -0x5a21 023859 call le_store_att_record -0x5a22 023860 increase -1 ,timeup -: 023862 le_send_att_read_by_group_type_next_handle: -0x5a23 023863 call le_att_next_handle -0x5a24 023864 branch le_send_att_read_by_group_type_response_loop -: 023866 le_send_att_read_by_group_type_end0: -0x5a25 023867 fetch 2 ,mem_temp -0x5a26 023868 store 2 ,mem_le_cur_handle_end -0x5a27 023869 branch le_send_att_read_by_group_type_end_common -: 023870 le_send_att_read_by_group_type_end1: -0x5a28 023871 fetch 2 ,mem_temp -0x5a29 023872 increase -1 ,pdata -0x5a2a 023873 store 2 ,mem_le_cur_handle_end -0x5a2b 023874 branch le_send_att_read_by_group_type_end_common -: 023875 le_send_att_read_by_group_type_end_common: -0x5a2c 023876 branch le_send_att_error_response_notfound ,user -0x5a2d 023877 call le_write_att_record -0x5a2e 023878 branch le_send_auto_len_by_mem -: 023883 le_parse_att_write_request: -0x5a2f 023884 copy contr ,rega -0x5a30 023885 fetch 2 ,mem_le_l2cap_size -0x5a31 023886 add pdata ,-3 ,regb -0x5a32 023887 call le_writeatt_cb -: 023888 le_send_att_write_response_check_auth: -0x5a33 023889 fetch 1 ,mem_le_configuration -0x5a34 023890 bbit0 bit_ble_write_auth ,le_send_att_write_response -0x5a35 023892 fetcht 2 ,mem_le_att_handle -0x5a36 023893 fetch 2 ,mem_le_pairing_handle -0x5a37 023894 isub temp ,null -0x5a38 023895 nbranch le_send_att_write_response ,zero -0x5a39 023896 call le_check_encrypt_state -0x5a3a 023897 nbranch le_send_att_write_response ,user -0x5a3b 023898 jam att_err_insufficient_authentication ,mem_le_err_code -0x5a3c 023899 branch le_send_att_error_response -: 023901 le_send_att_write_response: -0x5a3d 023902 force 1 ,rega -0x5a3e 023903 call le_fifo_malloc_tx_l2cap_gatt -0x5a3f 023904 setarg attop_write_response -0x5a40 023905 istore 1 ,contw -0x5a41 023906 rtn -: 023908 le_check_encrypt_state: -0x5a42 023909 call disable_user -0x5a43 023910 fetch 1 ,mem_le_pairing_mode -0x5a44 023911 rtneq le_pairing_mode_none -0x5a45 023912 fetch 1 ,mem_context -0x5a46 023913 rtnbit1 lestate_encryption -0x5a47 023914 branch enable_user -: 023917 le_parse_att_prepare_write_request: -0x5a48 023918 add contr ,2 ,rega -0x5a49 023919 fetch 2 ,mem_le_l2cap_size -0x5a4a 023920 add pdata ,-5 ,regb -0x5a4b 023921 call le_writeatt_cb -0x5a4c 023922 branch le_send_att_prepare_write_response -: 023925 le_send_att_prepare_write_response: -0x5a4d 023926 fetch 2 ,mem_le_l2cap_size -0x5a4e 023927 copy pdata ,rega -0x5a4f 023928 call le_fifo_malloc_tx_l2cap_gatt -0x5a50 023929 setarg attop_prepare_write_response -0x5a51 023930 istore 1 ,contw -0x5a52 023931 fetch 2 ,mem_le_att_handle -0x5a53 023932 istore 2 ,contw -0x5a54 023933 fetch 2 ,mem_le_l2cap_size -0x5a55 023934 add pdata ,-5 ,loopcnt -0x5a56 023935 fetch 2 ,mem_le_payload_ptr -0x5a57 023936 add pdata ,7 ,contr -0x5a58 023937 ifetch 2 ,contr -0x5a59 023938 istore 2 ,contw -0x5a5a 023939 branch memcpy_fast -: 023943 le_parse_att_execute_write_request: -: 023945 le_send_att_execute_write_response: -0x5a5b 023946 force 1 ,rega -0x5a5c 023947 call le_fifo_malloc_tx_l2cap_gatt -0x5a5d 023948 setarg attop_execute_write_response -0x5a5e 023949 istore 1 ,contw -0x5a5f 023950 rtn -: 023954 le_parse_att_write_command: -0x5a60 023955 copy contr ,rega -0x5a61 023956 fetch 2 ,mem_le_l2cap_size -0x5a62 023957 add pdata ,-3 ,regb -0x5a63 023958 branch le_writeatt_cb -: 023963 le_att_malloc_tx_notify: -0x5a64 023964 copy temp ,regc -0x5a65 023965 increase 3 ,rega -0x5a66 023966 call le_fifo_malloc_tx_l2cap_gatt -0x5a67 023967 increase -3 ,rega -0x5a68 023968 setarg attop_handle_value_notification -0x5a69 023969 istore 1 ,contw -0x5a6a 023970 copy regc ,temp -0x5a6b 023971 istoret 2 ,contw -0x5a6c 023972 rtn -: 023975 le_att_malloc_tx_indication: -0x5a6d 023976 copy temp ,regc -0x5a6e 023977 increase 3 ,rega -0x5a6f 023978 call le_fifo_malloc_tx_l2cap_gatt -0x5a70 023979 increase -3 ,rega -0x5a71 023980 setarg attop_handle_value_indication -0x5a72 023981 istore 1 ,contw -0x5a73 023982 copy regc ,temp -0x5a74 023983 istoret 2 ,contw -0x5a75 023984 rtn -: 023989 le_send_att_error_response_notfound: -0x5a76 023990 jam att_err_attribute_not_found ,mem_le_err_code -: 023991 le_send_att_error_response: -0x5a77 023992 force 5 ,rega -0x5a78 023993 call le_fifo_malloc_tx_l2cap_gatt -0x5a79 023994 setarg attop_error_response -0x5a7a 023995 istore 1 ,contw -0x5a7b 023996 fetch 1 ,mem_le_att_opcode -0x5a7c 023997 istore 1 ,contw -0x5a7d 023998 fetch 2 ,mem_le_att_handle -0x5a7e 023999 istore 2 ,contw -0x5a7f 024000 fetch 1 ,mem_le_err_code -0x5a80 024001 istore 1 ,contw -0x5a81 024002 rtn -: 024005 le_fifo_malloc_tx_l2cap_gatt: -0x5a82 024006 force le_l2cap_cid_att ,regb -0x5a83 024007 branch le_fifo_malloc_tx_l2cap -: 024010 le_att_next_handle: -0x5a84 024011 fetcht 2 ,mem_temp -0x5a85 024012 increase 1 ,temp -0x5a86 024013 storet 2 ,mem_temp -0x5a87 024014 rtn -: 024016 le_att_check_handle_end: -0x5a88 024017 fetcht 2 ,mem_temp -0x5a89 024018 fetch 2 ,mem_le_search_handle_end -0x5a8a 024019 isub temp ,null -0x5a8b 024020 rtn -: 024023 le_att_same_type: -0x5a8c 024024 fetcht 1 ,mem_le_search_att_type_length -0x5a8d 024025 arg mem_le_search_att_type ,rega -: 024026 le_att_check_same_common: -0x5a8e 024027 fetch 1 ,mem_le_cur_uuid_length -0x5a8f 024028 copy pdata ,loopcnt -0x5a90 024029 isub temp ,null -0x5a91 024030 nrtn zero -0x5a92 024031 arg mem_le_cur_uuid ,regb -0x5a93 024032 branch string_compare -: 024034 le_att_same_uuid: -0x5a94 024035 fetcht 1 ,mem_le_search_uuid_length -0x5a95 024036 arg mem_le_search_uuid ,rega -0x5a96 024037 branch le_att_check_same_common -: 024040 le_store_att_record: -0x5a97 024041 fetch 1 ,mem_le_curr_att_len -0x5a98 024042 store 1 ,mem_tmp_buffer -0x5a99 024043 copy pdata ,loopcnt -0x5a9a 024044 call get_contr -0x5a9b 024045 branch memcpy_fast -: 024048 le_write_att_record: -0x5a9c 024049 call get_contw -0x5a9d 024050 fetch 2 ,mem_le_cur_handle_start -0x5a9e 024051 istore 2 ,contw -0x5a9f 024052 fetch 2 ,mem_le_cur_handle_end -0x5aa0 024053 istore 2 ,contw -: 024054 le_write_att_record_common: -0x5aa1 024055 fetch 1 ,mem_tmp_buffer -0x5aa2 024056 copy pdata ,loopcnt -0x5aa3 024057 call memcpy_fast -0x5aa4 024058 branch store_contw -: 024062 le_send_auto_len_by_mem: -0x5aa5 024063 call get_contw -0x5aa6 024064 call le_fifo_get_last_att_ptr -0x5aa7 024065 copy contw ,pdata -0x5aa8 024066 isub contr ,rega -0x5aa9 024067 call le_fifo_get_last_l2cap_ptr -0x5aaa 024068 copy rega ,pdata -0x5aab 024069 istore 2 ,contr -0x5aac 024070 increase 4 ,rega -0x5aad 024071 call le_fifo_get_last_tx_ptr -0x5aae 024072 copy rega ,pdata -0x5aaf 024073 istore 1 ,contr -0x5ab0 024074 rtn -: 024077 le_get_search_handle_start_end_common: -0x5ab1 024078 rshift8 pdata ,pdata -0x5ab2 024079 store 2 ,mem_le_search_handle_start -0x5ab3 024080 ifetch 2 ,contr -0x5ab4 024081 store 2 ,mem_le_search_handle_end -0x5ab5 024082 rtn -: 024087 le_parse_signaling: -0x5ab6 024088 ifetch 1 ,contr -0x5ab7 024089 ifetcht 1 ,contr -0x5ab8 024090 ifetcht 2 ,contr -0x5ab9 024091 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp -0x5aba 024092 rtn -: 024093 le_l2cap_parse_conn_parameter_update_rsp: -0x5abb 024094 ifetch 2 ,contr -0x5abc 024095 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x5abd 024096 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp -0x5abe 024097 branch ui_ipc_send_event -: 024103 le_l2cap_tx_update_req: -0x5abf 024104 arg 0x0c ,rega -0x5ac0 024105 arg l2cap_connection_parameter_update_request ,regc -0x5ac1 024106 call le_fifo_malloc_tx_l2cap_signaling -0x5ac2 024107 setarg 0x08 -0x5ac3 024108 istore 2 ,contw -0x5ac4 024109 fetch 8 ,mem_le_interval_min -0x5ac5 024110 istore 8 ,contw -0x5ac6 024111 rtn -: 024115 le_fifo_malloc_tx_l2cap_signaling: -0x5ac7 024116 call le_l2cap_update_signaling_identifier -0x5ac8 024117 arg le_l2cap_cid_signal ,regb -0x5ac9 024118 call le_fifo_malloc_tx_l2cap -0x5aca 024119 copy regc ,pdata -0x5acb 024120 istore 1 ,contw -0x5acc 024121 fetch 1 ,mem_le_signaling_identifier -0x5acd 024122 istore 1 ,contw -0x5ace 024123 rtn -: 024126 le_l2cap_update_signaling_identifier: -0x5acf 024127 fetch 1 ,mem_le_signaling_identifier -0x5ad0 024129 pincrease 1 -0x5ad1 024130 store 1 ,mem_le_signaling_identifier -0x5ad2 024131 rtnne 0 -: 024133 le_l2cap_reset_signaling_identifier: -0x5ad3 024134 jam 1 ,mem_le_signaling_identifier -0x5ad4 024135 rtn -: 024140 le_pairing_mode_init: -0x5ad5 024141 fetch 1 ,mem_le_pairing_mode -0x5ad6 024142 beq le_pairing_mode_none ,le_set_no_pairing -0x5ad7 024143 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work -0x5ad8 024144 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey -0x5ad9 024145 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork -0x5ada 024146 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric -0x5adb 024147 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey -0x5adc 024148 rtn -: 024150 le_set_pairing_mode_secure_justwork: -0x5add 024151 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x5ade 024152 branch le_set_noinputnooutput -: 024153 le_set_pairing_mode_secure_numeric: -0x5adf 024154 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x5ae0 024155 jam flag_iocap_displayyesno ,mem_le_pres_iocap -0x5ae1 024156 rtn -: 024157 le_set_pairing_mode_secure_passkey: -0x5ae2 024158 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x5ae3 024159 branch le_set_displayonly -: 024160 le_set_no_pairing: -0x5ae4 024161 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth -: 024162 le_set_noinputnooutput: -0x5ae5 024163 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap -0x5ae6 024164 rtn -: 024165 le_set_pairing_mode_lagacy_just_work: -0x5ae7 024166 jam flag_le_bonding_mitm ,mem_le_pres_auth -0x5ae8 024167 branch le_set_noinputnooutput -: 024168 le_set_pairing_mode_lagacy_passkey: -0x5ae9 024169 jam flag_le_bonding_mitm ,mem_le_pres_auth -: 024170 le_set_displayonly: -0x5aea 024171 jam flag_iocap_displayonly ,mem_le_pres_iocap -0x5aeb 024172 rtn -: 024175 le_secure_connection_enable: -0x5aec 024176 fetch 1 ,mem_le_pres_auth -0x5aed 024177 set1 le_auth_secure_connection_pairing_bit ,pdata -0x5aee 024178 store 1 ,mem_le_pres_auth -0x5aef 024179 rtn -: 024180 le_secure_connection_disable: -0x5af0 024181 fetch 1 ,mem_le_pres_auth -0x5af1 024182 set0 le_auth_secure_connection_pairing_bit ,pdata -0x5af2 024183 store 1 ,mem_le_pres_auth -0x5af3 024184 rtn -: 024186 le_parse_smp: -0x5af4 024187 ifetch 1 ,contr -0x5af5 024188 beq smp_pairing_request ,le_parse_smp_pairing_request -0x5af6 024190 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm -0x5af7 024191 beq smp_pairing_random ,le_parse_smp_pairing_random -0x5af8 024192 beq smp_pairing_failed ,le_parse_smp_pairing_failed -0x5af9 024193 beq smp_encryption_information ,le_parse_smp_encryption_information -0x5afa 024194 beq smp_master_identification ,le_parse_smp_master_identification -0x5afb 024195 beq smp_identity_information ,le_parse_smp_identity_information -0x5afc 024196 beq smp_identity_address_information ,le_parse_smp_identity_address_information -0x5afd 024197 beq smp_signing_information ,le_parse_smp_signing_information -0x5afe 024198 beq smp_security_request ,le_parse_smp_security_request -0x5aff 024199 beq smp_pairing_public_key ,le_parse_smp_public_key -0x5b00 024200 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check -0x5b01 024201 rtn -: 024205 le_send_smp_security_request: -0x5b02 024206 force 2 ,rega -0x5b03 024207 call le_fifo_malloc_tx_l2cap_smp -0x5b04 024208 setarg smp_security_request -0x5b05 024209 istore 1 ,contw -0x5b06 024210 fetch 1 ,mem_le_pres_auth -0x5b07 024211 istore 1 ,contw -0x5b08 024212 rtn -: 024214 le_parse_smp_pairing_request: -0x5b09 024215 store 1 ,mem_le_preq -0x5b0a 024216 ifetch 6 ,contr -0x5b0b 024217 istore 6 ,contw -0x5b0c 024218 fetch 1 ,mem_le_pairing_mode -0x5b0d 024219 beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing -0x5b0e 024220 call le_send_smp_pairing_response -0x5b0f 024221 call le_check_master_support_secure_connect -0x5b10 024222 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state -0x5b11 024223 fetch 1 ,mem_le_preq_iocap -0x5b12 024224 beq flag_iocap_displayonly ,le_set_tk_0 -0x5b13 024225 beq flag_iocap_displayyesno ,le_set_tk_0 -0x5b14 024226 beq flag_iocap_noinputnooutput ,le_set_tk_0 -0x5b15 024227 fetch 1 ,mem_le_pairing_mode -0x5b16 024228 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey -0x5b17 024229 rtneq le_pairing_mode_secure_connect_passkey -: 024230 le_set_tk_0: -0x5b18 024231 arg 0 ,pdata -0x5b19 024232 store 4 ,mem_le_tk -0x5b1a 024233 rtn -: 024235 le_parse_smp_pairing_req_passkey: -0x5b1b 024236 fetch 1 ,mem_le_configuration -0x5b1c 024237 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey -: 024238 le_genernate_tk: -0x5b1d 024239 arg mem_le_tk ,rega -0x5b1e 024240 copy rega ,contw -0x5b1f 024241 arg 3 ,loopcnt -0x5b20 024242 call generate_random_loop -0x5b21 024243 fetch 2 ,mem_le_tk + 2 -0x5b22 024244 and_into 0x7 ,pdata -0x5b23 024245 store 2 ,mem_le_tk + 2 -: 024246 le_parse_smp_pairing_req_fixed_passkey: -0x5b24 024247 jam bt_evt_le_tk_generate ,mem_fifo_temp -0x5b25 024248 branch ui_ipc_send_event -: 024250 le_check_master_support_secure_connect: -0x5b26 024251 fetch 1 ,mem_le_preq_auth -0x5b27 024252 rtnbit1 le_auth_secure_connection_pairing_bit -0x5b28 024253 fetch 1 ,mem_le_pairing_mode -0x5b29 024254 rtnbit0 le_pairing_mode_secure_connect_bit -0x5b2a 024255 branch app_ble_disconnect -: 024257 le_send_smp_pairing_response: -0x5b2b 024258 force 7 ,rega -0x5b2c 024259 call le_fifo_malloc_tx_l2cap_smp -0x5b2d 024260 fetch 7 ,mem_le_pres -0x5b2e 024261 istore 7 ,contw -0x5b2f 024262 rtn -: 024265 le_parse_smp_pairing_confirm: -0x5b30 024266 copy contr ,rega -0x5b31 024267 fetch 1 ,mem_le_pairing_mode -0x5b32 024268 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey -0x5b33 024269 copy rega ,contr -0x5b34 024270 arg mem_le_rconfirm ,contw -0x5b35 024271 call memcpy16 -0x5b36 024272 branch le_send_smp_pairing_confirm -: 024273 le_parse_smp_pairing_confirm_secure_passkey: -0x5b37 024274 copy rega ,contr -0x5b38 024275 arg mem_le_rconfirm ,contw -0x5b39 024276 call memcpy16 -0x5b3a 024277 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5b3b 024278 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state -0x5b3c 024279 rtn -: 024282 le_send_smp_pairing_confirm: -0x5b3d 024283 fetch 1 ,mem_le_pairing_mode -0x5b3e 024284 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc -0x5b3f 024285 call generate_confirm -0x5b40 024286 force 17 ,rega -0x5b41 024287 call le_fifo_malloc_tx_l2cap_smp -0x5b42 024288 setarg smp_pairing_confirm -0x5b43 024289 istore 1 ,contw -0x5b44 024290 branch store_aes_result -: 024293 le_send_smp_pairing_confirm_sc: -0x5b45 024294 arg mem_le_srand ,contw -0x5b46 024295 call generate_random -0x5b47 024296 call function_f4_cb -0x5b48 024297 force 17 ,rega -0x5b49 024298 call le_fifo_malloc_tx_l2cap_smp -0x5b4a 024299 setarg smp_pairing_confirm -0x5b4b 024300 istore 1 ,contw -0x5b4c 024301 branch load_inverse_result -: 024305 le_parse_smp_pairing_random: -0x5b4d 024306 copy contr ,rega -0x5b4e 024307 fetch 1 ,mem_le_pairing_mode -0x5b4f 024308 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc -0x5b50 024309 copy rega ,contr -0x5b51 024310 call authenticate_rconfirm -0x5b52 024311 branch le_parse_smp_pairing_random_success ,zero -: 024312 le_send_pairing_confirm_value_failed: -0x5b53 024313 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason -: 024314 le_send_pairing_failed: -0x5b54 024315 force 2 ,rega -0x5b55 024316 call le_fifo_malloc_tx_l2cap_smp -0x5b56 024317 setarg smp_pairing_failed -0x5b57 024318 istore 1 ,contw -0x5b58 024319 fetch 1 ,mem_le_ll_pairing_fail_reason -0x5b59 024320 istore 1 ,contw -: 024321 le_parse_smp_pairing_failed: -0x5b5a 024322 force smp_pairing_timer ,queue -0x5b5b 024323 call timer_stop -0x5b5c 024324 jam flag_le_pairing_null ,mem_le_pairing_state -0x5b5d 024325 jam bt_evt_le_pairing_fail ,mem_fifo_temp -0x5b5e 024326 branch ui_ipc_send_event -: 024328 le_smp_pairing_fail_reason_not_support_pairing: -0x5b5f 024329 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason -0x5b60 024330 branch le_send_pairing_failed -: 024333 le_parse_smp_pairing_random_sc: -0x5b61 024334 arg mem_le_mrand ,contw -0x5b62 024335 copy rega ,contr -0x5b63 024336 call memcpy16 -0x5b64 024337 fetch 1 ,mem_le_pairing_mode -0x5b65 024338 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey -0x5b66 024339 call function_g2 -0x5b67 024342 call le_send_smp_pairing_random -0x5b68 024343 fetch 1 ,mem_le_pairing_mode -0x5b69 024344 rtnne le_pairing_mode_secure_connect_numeric -0x5b6a 024345 jam bt_evt_le_gkey_generate ,mem_fifo_temp -0x5b6b 024346 branch ui_ipc_send_event -: 024348 le_parse_smp_pairing_random_sc_passkey: -0x5b6c 024349 call function_f4_ca -0x5b6d 024350 arg mem_aes_cmac_temp ,contw -0x5b6e 024351 call load_inverse_result -0x5b6f 024352 arg mem_aes_cmac_temp ,rega -0x5b70 024353 arg mem_le_rconfirm ,regb -0x5b71 024354 arg 16 ,loopcnt -0x5b72 024355 call string_compare -0x5b73 024356 nbranch le_send_pairing_confirm_value_failed ,zero -0x5b74 024357 branch le_send_smp_pairing_random -: 024359 le_parse_smp_pairing_random_success: -0x5b75 024360 call generate_stk -0x5b76 024361 jam bt_evt_le_pairing_success ,mem_fifo_temp -0x5b77 024362 call ui_ipc_send_event -0x5b78 024363 jam 1 ,mem_ltk_exists -0x5b79 024364 jam flag_le_pairing_after_auth ,mem_le_pairing_state -: 024366 le_send_smp_pairing_random: -0x5b7a 024367 force 17 ,rega -0x5b7b 024368 call le_fifo_malloc_tx_l2cap_smp -0x5b7c 024369 setarg smp_pairing_random -0x5b7d 024370 istore 1 ,contw -0x5b7e 024371 arg mem_le_srand ,contr -0x5b7f 024372 branch memcpy16 -: 024374 le_parse_smp_encryption_information: -0x5b80 024375 arg mem_le_peer_ltk ,contw -0x5b81 024376 branch memcpy16 -: 024378 le_send_smp_encryption_information: -0x5b82 024379 force 17 ,rega -0x5b83 024380 call le_fifo_malloc_tx_l2cap_smp -0x5b84 024381 setarg smp_encryption_information -0x5b85 024382 istore 1 ,contw -0x5b86 024383 fetch 1 ,mem_le_configuration -0x5b87 024384 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk -0x5b88 024385 arg mem_le_ltk ,contr -0x5b89 024386 branch memcpy16 -: 024388 le_send_fixed_ltk: -0x5b8a 024389 arg mem_le_fixed_ltk ,contr -0x5b8b 024390 branch memcpy16 -: 024393 le_send_smp_master_identification: -0x5b8c 024394 arg mem_le_ediv ,contw -0x5b8d 024395 force 10 ,loopcnt -0x5b8e 024396 call generate_random_loop -0x5b8f 024397 force 11 ,rega -0x5b90 024398 call le_fifo_malloc_tx_l2cap_smp -0x5b91 024399 setarg smp_master_identification -0x5b92 024400 istore 1 ,contw -0x5b93 024401 fetch 2 ,mem_le_ediv -0x5b94 024402 istore 2 ,contw -0x5b95 024403 fetch 8 ,mem_le_rand -0x5b96 024404 istore 8 ,contw -0x5b97 024405 rtn -: 024407 le_send_smp_identity_information: -0x5b98 024408 force 17 ,rega -0x5b99 024409 call le_fifo_malloc_tx_l2cap_smp -0x5b9a 024410 setarg smp_identity_information -0x5b9b 024411 istore 1 ,contw -0x5b9c 024412 setarg 0 -0x5b9d 024413 istore 8 ,contw -0x5b9e 024414 istore 8 ,contw -0x5b9f 024415 rtn -: 024418 le_send_smp_identity_address_information: -0x5ba0 024419 force 8 ,rega -0x5ba1 024420 call le_fifo_malloc_tx_l2cap_smp -0x5ba2 024421 setarg smp_identity_address_information -0x5ba3 024422 istore 1 ,contw -0x5ba4 024423 fetch 1 ,mem_le_conn_own_addr_type -0x5ba5 024424 istore 1 ,contw -0x5ba6 024425 fetch 6 ,mem_le_lap -0x5ba7 024426 istore 6 ,contw -0x5ba8 024427 rtn -: 024430 le_send_pairing_fail_unspecified_reason: -0x5ba9 024431 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason -0x5baa 024432 branch le_send_pairing_failed -: 024434 le_check_init_key_distribution: -0x5bab 024435 fetch 1 ,mem_le_pres_init_key_distribution -0x5bac 024436 fetcht 1 ,mem_le_pres_init_key_distribution -0x5bad 024437 iand temp ,pdata -0x5bae 024438 rtn -: 024440 le_parse_smp_identity_information: -0x5baf 024441 arg mem_le_irk ,contw -0x5bb0 024442 call memcpy16 -0x5bb1 024443 call le_check_init_key_distribution -0x5bb2 024444 isolate0 le_initator_irk_bit ,pdata -0x5bb3 024445 branch le_send_pairing_fail_unspecified_reason ,true -0x5bb4 024446 fetch 1 ,mem_device_option -0x5bb5 024447 rtnne dvc_op_module -0x5bb6 024448 call le_check_master_addr_type -0x5bb7 024449 nrtn user -0x5bb8 024450 branch app_ble_store_reconn_info -: 024453 le_check_master_addr_type: -0x5bb9 024454 call disable_user -0x5bba 024455 fetch 1 ,mem_le_conn_peer_addr_type -0x5bbb 024456 rtneq master_public_addr -0x5bbc 024457 fetch 1 ,mem_le_plap + 5 -0x5bbd 024458 compare 0xc0 ,pdata ,0xc0 -0x5bbe 024459 rtn true -0x5bbf 024460 branch enable_user -: 024462 le_parse_smp_identity_address_information: -0x5bc0 024463 call le_check_init_key_distribution -0x5bc1 024464 isolate0 le_initator_irk_bit ,pdata -0x5bc2 024465 branch le_send_pairing_fail_unspecified_reason ,true -0x5bc3 024466 rtn -: 024468 le_parse_smp_master_identification: -: 024469 le_parse_smp_signing_information: -: 024470 le_parse_smp_security_request: -0x5bc4 024471 rtn -: 024473 le_parse_smp_public_key: -0x5bc5 024474 arg mem_le_pubkey_remote_x_256 ,contw -0x5bc6 024475 call memcpy64 -0x5bc7 024476 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5bc8 024477 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state -0x5bc9 024478 rtn -: 024480 le_parse_smp_dhkey_check: -0x5bca 024481 arg mem_sp_confirm_remote ,contw -0x5bcb 024482 call memcpy16 -0x5bcc 024483 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state -0x5bcd 024484 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5bce 024485 rtn -: 024487 le_send_smp_pairing_public_key: -0x5bcf 024488 force 65 ,rega -0x5bd0 024489 call le_fifo_malloc_tx_l2cap_smp -0x5bd1 024490 setarg smp_pairing_public_key -0x5bd2 024491 istore 1 ,contw -0x5bd3 024492 arg mem_le_pubkey_local_x_256 ,contr -0x5bd4 024493 branch memcpy64 -: 024495 le_send_smp_pairing_dhkey_check: -0x5bd5 024496 call function_f6_eb -0x5bd6 024497 force 17 ,rega -0x5bd7 024498 call le_fifo_malloc_tx_l2cap_smp -0x5bd8 024499 setarg smp_pairing_dhkey_check -0x5bd9 024500 istore 1 ,contw -0x5bda 024501 branch load_inverse_result -: 024504 le_check_paring_time: -0x5bdb 024505 fetch 1 ,mem_le_pairing_state -0x5bdc 024506 rtneq flag_le_pairing_end -0x5bdd 024507 arg flag_le_pairing_rcv_pairing_req ,temp -0x5bde 024508 isub temp ,null -0x5bdf 024509 nrtn positive -0x5be0 024510 arg smp_pairing_timer ,queue -0x5be1 024511 call timer_check -0x5be2 024512 nrtn blank -0x5be3 024513 branch le_send_pairing_fail_unspecified_reason -: 024515 le_pairing_sm: -0x5be4 024516 bpatchx patch2f_0 ,mem_patch2f -0x5be5 024517 fetch 1 ,mem_le_pairing_state -0x5be6 024518 beq flag_le_pairing_null ,le_pairing_sm_null -0x5be7 024519 beq flag_le_pairing_start ,le_pairing_sm_start -0x5be8 024520 beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req -0x5be9 024521 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req -0x5bea 024522 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth -0x5beb 024523 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information -0x5bec 024524 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification -0x5bed 024525 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information -0x5bee 024526 rtn -: 024528 le_pairing_sm_null: -: 024529 le_pairing_sm_send_sec_req: -0x5bef 024530 fetch 1 ,mem_le_enc_state -0x5bf0 024531 rtnne flag_le_send_start_enc_rsp -0x5bf1 024532 jam flag_le_enc_end ,mem_le_enc_state -0x5bf2 024533 jam flag_le_pairing_end ,mem_le_pairing_state -0x5bf3 024534 jam bt_evt_le_reconnect_complete ,mem_fifo_temp -0x5bf4 024535 branch ui_ipc_send_event -: 024538 le_pairing_sm_start: -0x5bf5 024539 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state -0x5bf6 024540 branch le_send_smp_security_request -: 024542 le_pairing_sm_rcv_pairing_req: -0x5bf7 024543 jam flag_le_pairing_auth ,mem_le_pairing_state -0x5bf8 024544 setarg timer_smp_pairing_timeout -0x5bf9 024545 arg smp_pairing_timer ,queue -0x5bfa 024546 branch timer_init -: 024548 le_pairing_sm_after_auth: -0x5bfb 024549 fetch 1 ,mem_le_enc_state -0x5bfc 024550 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc -0x5bfd 024551 rtn -: 024553 le_pairing_sm_after_auth_start_enc: -0x5bfe 024554 jam flag_le_paring_send_enc_information ,mem_le_pairing_state -0x5bff 024555 jam bt_evt_le_enc_info ,mem_fifo_temp -0x5c00 024556 call ui_ipc_send_event -0x5c01 024557 call le_send_smp_encryption_information -0x5c02 024558 fetch 1 ,mem_device_option -0x5c03 024559 rtnne dvc_op_module -0x5c04 024560 call le_check_master_addr_type -0x5c05 024561 rtn user -0x5c06 024562 branch app_ble_store_reconn_info -: 024565 le_pairng_sm_send_enc_information: -0x5c07 024566 jam flag_le_paring_send_master_identification ,mem_le_pairing_state -0x5c08 024567 branch le_send_smp_master_identification -: 024569 le_pairng_sm_send_master_indentification: -0x5c09 024570 fetch 1 ,mem_le_preq_resp_key_distribution -0x5c0a 024571 fetcht 1 ,mem_le_pres_resp_key_distribution -0x5c0b 024572 iand temp ,pdata -0x5c0c 024573 isolate0 le_initator_irk_bit ,pdata -0x5c0d 024574 branch le_parse_start_enc_rsp_after_auth_end ,true -0x5c0e 024575 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state -0x5c0f 024576 branch le_send_smp_identity_information -: 024578 le_pairng_sm_send_indentity_information: -0x5c10 024579 call le_send_smp_identity_address_information -0x5c11 024580 branch le_parse_start_enc_rsp_after_auth_end -: 024583 le_parse_start_enc_rsp_after_auth_end: -0x5c12 024584 force smp_pairing_timer ,queue -0x5c13 024585 call timer_stop -0x5c14 024586 jam flag_le_enc_end ,mem_le_enc_state -0x5c15 024587 jam flag_le_pairing_end ,mem_le_pairing_state -0x5c16 024588 jam bt_evt_le_pairing_complete ,mem_fifo_temp -0x5c17 024589 branch ui_ipc_send_event -: 024593 le_secure_connect_sm: -0x5c18 024594 bpatchx patch2f_1 ,mem_patch2f -0x5c19 024595 fetch 1 ,mem_le_pairing_mode -0x5c1a 024596 rtnbit0 le_pairing_mode_secure_connect_bit -0x5c1b 024597 fetch 1 ,mem_le_secure_connect_flag -0x5c1c 024598 rtnne le_sp_flag_commit_256 -0x5c1d 024599 jam sp_flag_standby ,mem_le_secure_connect_flag -0x5c1e 024600 fetch 1 ,mem_le_secure_connect_state -0x5c1f 024601 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key -0x5c20 024602 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key -0x5c21 024603 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key -0x5c22 024604 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey -0x5c23 024605 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey -0x5c24 024606 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm -0x5c25 024607 rtn -: 024610 le_sc_sm_passkey_wait_confirm: -0x5c26 024611 fetch 1 ,mem_authentication_passkey_times -0x5c27 024612 copy pdata ,queue -0x5c28 024613 increase 1 ,pdata -0x5c29 024614 store 1 ,mem_authentication_passkey_times -0x5c2a 024615 fetch 4 ,mem_le_tk -0x5c2b 024616 qisolate1 pdata -0x5c2c 024617 setarg 0x80 -0x5c2d 024618 setflag true ,0 ,pdata -0x5c2e 024619 store 1 ,mem_passkey_1bit -0x5c2f 024620 branch le_sc_sm_ready_send_pairing_confirm -: 024622 le_sc_sm_wait_confirm_gkey: -0x5c30 024623 fetch 1 ,mem_le_sc_confirm_gkey_flag -0x5c31 024624 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag -0x5c32 024625 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok -0x5c33 024626 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c34 024627 rtn -: 024629 le_sc_confirm_gkey_ok: -0x5c35 024630 jam bt_evt_le_pairing_success ,mem_fifo_temp -0x5c36 024631 call ui_ipc_send_event -0x5c37 024632 jam flag_le_pairing_after_auth ,mem_le_pairing_state -0x5c38 024633 branch le_send_smp_pairing_dhkey_check -: 024635 le_sc_sm_receive_dhkey: -0x5c39 024636 fetch 1 ,mem_sp_dhkey_invalid -0x5c3a 024637 beq sp_key_valid_256 ,le_dhkey_ready -0x5c3b 024638 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c3c 024639 rtn -: 024641 le_dhkey_ready: -0x5c3d 024642 call function_f5 -0x5c3e 024646 fetch 1 ,mem_le_pairing_mode -0x5c3f 024647 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common -0x5c40 024648 call le_set_tk_0 -: 024649 le_dhkey_ready_common: -0x5c41 024650 call function_f6_ea -0x5c42 024651 arg mem_aes_cmac_temp ,rega -0x5c43 024652 arg mem_sp_confirm_remote ,regb -0x5c44 024653 arg 16 ,loopcnt -0x5c45 024654 call string_compare -0x5c46 024655 branch le_dhkey_check_ok ,zero -: 024656 le_dhkey_check_fail: -0x5c47 024657 jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason -0x5c48 024658 branch le_send_pairing_failed -: 024661 le_dhkey_check_ok: -0x5c49 024662 call sp_calc_check_publickey_256 -0x5c4a 024663 nbranch le_dhkey_check_fail ,zero -0x5c4b 024664 jam 1 ,mem_ltk_exists -0x5c4c 024665 fetch 1 ,mem_le_pairing_mode -0x5c4d 024666 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok -0x5c4e 024667 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok -0x5c4f 024668 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c50 024669 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state -0x5c51 024670 rtn -: 024672 le_sc_sm_send_public_key: -0x5c52 024673 fetch 1 ,mem_le_pairing_mode -0x5c53 024674 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey -0x5c54 024675 jam 0 ,mem_passkey_1bit -: 024676 le_sc_sm_ready_send_pairing_confirm: -0x5c55 024677 branch le_send_smp_pairing_confirm -: 024679 le_sc_sm_send_public_key_passkey: -0x5c56 024683 jam 0 ,mem_authentication_passkey_times -0x5c57 024684 branch le_parse_smp_pairing_req_passkey -: 024687 le_sc_sm_receive_public_key: -0x5c58 024688 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c59 024689 fetch 1 ,mem_le_sc_local_key_invalid -0x5c5a 024690 beq sp_key_valid_256 ,le_public_key_ready -0x5c5b 024692 rtn -: 024694 le_public_key_ready: -0x5c5c 024695 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state -0x5c5d 024696 jam sp_key_invalid ,mem_sp_dhkey_invalid -0x5c5e 024697 branch sp_dhkey_calc_256 -: 024699 le_sc_sm_wait_send_public_key: -0x5c5f 024700 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c60 024701 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state -0x5c61 024702 branch le_send_smp_pairing_public_key -: 024706 le_fifo_malloc_tx_l2cap_smp: -0x5c62 024707 force le_l2cap_cid_smp ,regb -0x5c63 024708 branch le_fifo_malloc_tx_l2cap -: 024712 le_parse_ll: -0x5c64 024713 fetch 1 ,mem_le_rxbuf + 2 -0x5c65 024714 beq ll_connection_update_req ,le_parse_connection_update_req -0x5c66 024715 beq ll_channel_map_req ,le_parse_channel_map_req -0x5c67 024716 beq ll_terminate_ind ,le_parse_terminate_ind -0x5c68 024717 beq ll_enc_req ,le_parse_enc_req -0x5c69 024718 beq ll_enc_rsp ,le_parse_enc_rsp -0x5c6a 024719 beq ll_start_enc_req ,le_parse_start_enc_req -0x5c6b 024720 beq ll_start_enc_rsp ,le_parse_start_enc_rsp -0x5c6c 024721 beq ll_unknown_rsp ,le_parse_unknown_rsp -0x5c6d 024722 beq ll_feature_req ,le_parse_feature_req -0x5c6e 024723 beq ll_feature_rsp ,le_parse_feature_rsp -0x5c6f 024724 beq ll_pause_enc_req ,le_parse_pause_enc_req -0x5c70 024725 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp -0x5c71 024726 beq ll_version_ind ,le_parse_version_ind -0x5c72 024727 beq ll_reject_ind ,le_parse_reject_ind -0x5c73 024728 beq ll_ping_req ,le_parse_ping_req -0x5c74 024729 beq ll_ping_rsp ,le_parse_ping_rsp -0x5c75 024730 arg 2 ,rega -0x5c76 024731 arg ll_unknown_rsp ,regb -0x5c77 024732 call le_fifo_malloc_tx_ll -0x5c78 024733 fetch 1 ,mem_le_rxbuf + 2 -0x5c79 024734 istore 1 ,contw -0x5c7a 024735 rtn -: 024738 le_parse_connection_update_req: -0x5c7b 024739 ifetch 9 ,contr -0x5c7c 024740 store 9 ,mem_le_new_param -0x5c7d 024741 ifetch 2 ,contr -0x5c7e 024742 store 2 ,mem_le_instant -0x5c7f 024743 fetch 1 ,mem_le_state -0x5c80 024744 set1 lestate_update_param ,pdata -0x5c81 024745 store 1 ,mem_le_state -0x5c82 024746 rtn -: 024748 le_parse_channel_map_req: -0x5c83 024749 ifetch 5 ,contr -0x5c84 024750 store 5 ,mem_le_new_map -0x5c85 024751 ifetch 2 ,contr -0x5c86 024752 store 2 ,mem_le_instant -0x5c87 024753 fetcht 2 ,mem_le_event_count -0x5c88 024754 isub temp ,null -0x5c89 024755 nbranch le_parse_terminate_ind ,positive -0x5c8a 024756 fetch 1 ,mem_le_state -0x5c8b 024757 set1 lestate_update_map ,pdata -0x5c8c 024758 store 1 ,mem_le_state -0x5c8d 024759 rtn -: 024762 le_parse_terminate_ind: -0x5c8e 024763 setarg 20 -0x5c8f 024764 store 2 ,mem_le_superto -0x5c90 024765 store 2 ,mem_le_init_superto -0x5c91 024766 rtn -: 024768 le_send_terminate_ind_user_terminated: -0x5c92 024769 arg error_remote_user_terminated_connection ,regc -: 024772 le_send_terminate_ind: -0x5c93 024773 arg 2 ,rega -0x5c94 024774 arg ll_terminate_ind ,regb -0x5c95 024775 call le_fifo_malloc_tx_ll -0x5c96 024776 copy regc ,pdata -0x5c97 024777 istore 1 ,contw -0x5c98 024778 rtn -: 024780 le_parse_feature_req: -: 024782 le_send_feature_rsp: -0x5c99 024783 arg 9 ,rega -0x5c9a 024784 arg ll_feature_rsp ,regb -0x5c9b 024785 call le_fifo_malloc_tx_ll -0x5c9c 024786 setarg param_le_features -0x5c9d 024787 istore 8 ,contw -0x5c9e 024788 rtn -: 024791 le_parse_version_ind: -0x5c9f 024792 rtn master -: 024793 le_send_version_ind: -0x5ca0 024794 arg 6 ,rega -0x5ca1 024795 arg ll_version_ind ,regb -0x5ca2 024796 call le_fifo_malloc_tx_ll -0x5ca3 024797 fetch 5 ,mem_lmp_version -0x5ca4 024798 istore 5 ,contw -0x5ca5 024799 rtn -: 024802 le_parse_ping_req: -0x5ca6 024803 arg ll_ping_rsp ,regb -0x5ca7 024804 branch le_send_ll_one_lenth -: 024807 le_send_ll_one_lenth: -0x5ca8 024808 arg 1 ,rega -0x5ca9 024809 branch le_fifo_malloc_tx_ll -: 024812 le_parse_enc_req: -0x5caa 024813 ifetch 8 ,contr -0x5cab 024814 store 8 ,mem_le_rand -0x5cac 024815 ifetch 2 ,contr -0x5cad 024816 store 2 ,mem_le_ediv -0x5cae 024817 ifetch 8 ,contr -0x5caf 024818 store 8 ,mem_le_skdm -0x5cb0 024819 ifetch 4 ,contr -0x5cb1 024820 store 4 ,mem_le_ivm -0x5cb2 024821 call le_send_enc_rsp -0x5cb3 024822 bpatchx patch2f_2 ,mem_patch2f -0x5cb4 024823 fetch 1 ,mem_le_pairing_state -0x5cb5 024824 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth -0x5cb6 024825 fetch 1 ,mem_le_configuration -0x5cb7 024826 bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk -0x5cb8 024827 fetch 1 ,mem_nv_data_number -0x5cb9 024828 ncall load_device_list_mode_4 ,blank -0x5cba 024829 fetch 1 ,mem_ltk_exists -0x5cbb 024830 beq 0 ,le_ltk_lost -: 024831 le_parse_enc_req_after_auth: -0x5cbc 024832 jam flag_le_rcv_enc_start ,mem_le_enc_state -0x5cbd 024833 call le_send_start_enc_req -0x5cbe 024834 branch generate_sk -: 024836 le_parse_enc_req_fixed_ltk: -0x5cbf 024837 jam 1 ,mem_ltk_exists -0x5cc0 024838 arg mem_le_fixed_ltk ,contr -0x5cc1 024839 arg mem_le_ltk ,contw -0x5cc2 024840 call memcpy16 -0x5cc3 024841 branch le_parse_enc_req_after_auth -: 024844 le_ltk_lost: -0x5cc4 024845 bpatchx patch2f_3 ,mem_patch2f -0x5cc5 024846 jam flag_le_enc_null ,mem_le_enc_state -0x5cc6 024847 jam flag_le_enc_null ,mem_le_pairing_state -0x5cc7 024848 jam bt_evt_le_ltk_lost ,mem_fifo_temp -0x5cc8 024849 branch ui_ipc_send_event -: 024851 le_send_reject_ind: -0x5cc9 024852 arg 2 ,rega -0x5cca 024853 arg ll_reject_ind ,regb -0x5ccb 024854 call le_fifo_malloc_tx_ll -0x5ccc 024855 setarg le_err_pin_or_key_missing -0x5ccd 024856 istore 1 ,contw -0x5cce 024857 rtn -: 024859 le_send_enc_rsp: -0x5ccf 024860 arg mem_le_skds ,contw -0x5cd0 024861 force 8 ,loopcnt -0x5cd1 024862 call generate_random_loop -0x5cd2 024863 arg mem_le_ivs ,contw -0x5cd3 024864 force 4 ,loopcnt -0x5cd4 024865 call generate_random_loop -0x5cd5 024866 arg 13 ,rega -0x5cd6 024867 arg ll_enc_rsp ,regb -0x5cd7 024868 call le_fifo_malloc_tx_ll -0x5cd8 024869 fetch 8 ,mem_le_skds -0x5cd9 024870 istore 8 ,contw -0x5cda 024871 fetch 4 ,mem_le_ivs -0x5cdb 024872 istore 4 ,contw -0x5cdc 024873 rtn -: 024875 le_send_start_enc_req: -0x5cdd 024876 arg ll_start_enc_req ,regb -0x5cde 024877 branch le_send_ll_one_lenth -: 024879 le_send_start_enc_rsp: -0x5cdf 024880 arg ll_start_enc_rsp ,regb -0x5ce0 024881 branch le_send_ll_one_lenth -: 024884 le_parse_enc_rsp: -0x5ce1 024885 ifetch 8 ,contr -0x5ce2 024886 store 8 ,mem_le_skds -0x5ce3 024887 ifetch 4 ,contr -0x5ce4 024888 store 4 ,mem_le_ivs -0x5ce5 024889 branch generate_sk -: 024891 le_parse_start_enc_req: -0x5ce6 024892 fetch 1 ,mem_le_state -0x5ce7 024893 set1 lestate_encryption ,pdata -0x5ce8 024894 store 1 ,mem_le_state -0x5ce9 024895 rtn -: 024897 le_parse_start_enc_rsp: -0x5cea 024898 rtn master -0x5ceb 024899 jam bt_evt_le_start_enc ,mem_fifo_temp -0x5cec 024900 call ui_ipc_send_event -0x5ced 024901 jam flag_le_send_start_enc_rsp ,mem_le_enc_state -0x5cee 024902 branch le_send_start_enc_rsp -: 024904 le_parse_pause_enc_req: -0x5cef 024905 jam flag_le_enc_pause ,mem_le_enc_state -0x5cf0 024906 call le_send_pause_enc_rsp -0x5cf1 024907 jam bt_evt_le_pause_enc ,mem_fifo_temp -0x5cf2 024908 branch ui_ipc_send_event -: 024910 le_send_pause_enc_rsp: -0x5cf3 024911 arg ll_pause_enc_rsp ,regb -0x5cf4 024912 branch le_send_ll_one_lenth -: 024915 le_parse_feature_rsp: -: 024916 le_parse_unknown_rsp: -: 024917 le_parse_pause_enc_rsp: -: 024918 le_parse_reject_ind: -: 024919 le_parse_ping_rsp: -0x5cf5 024920 rtn -: 024927 init_lmp: -0x5cf6 024928 rtn wake -: 024929 init_lmp_work: -0x5cf7 024930 bpatchx patch2f_4 ,mem_patch2f -0x5cf8 024931 setarg 0 -0x5cf9 024932 store 1 ,mem_lmp_to_send -0x5cfa 024933 store 1 ,mem_conn_sm -0x5cfb 024934 store 1 ,mem_lmo_opcode1 -0x5cfc 024935 store 1 ,mem_lmo_opcode2 -0x5cfd 024936 store 1 ,mem_esco_addr -0x5cfe 024937 store 1 ,mem_auth_enable -0x5cff 024938 store 1 ,mem_connection_options -0x5d00 024939 store 1 ,mem_pairing_auth -0x5d01 024940 jam switch_flag_init ,mem_switch_flag -0x5d02 024941 jam 0 ,mem_switch_fail_master_count -0x5d03 024942 jam null_encryp ,mem_wait_encryption -: 024943 init_lmp_reinit: -0x5d04 024944 jam 0 ,mem_pairing_auth -0x5d05 024945 jam 0 ,mem_sp_localsm -0x5d06 024946 jam 0 ,mem_lmp_conn_state -: 024948 parse_rx_done: -0x5d07 024949 rtn -: 024951 parse_lmp: -0x5d08 024952 bpatchx patch2f_5 ,mem_patch2f -0x5d09 024953 call setlocalsm_master ,master -0x5d0a 024954 ncall setlocalsm_slave ,master -0x5d0b 024955 call lmo_fifo_check -0x5d0c 024956 nrtn blank -0x5d0d 024957 fetch 1 ,mem_state_map -0x5d0e 024958 rtnbit0 smap_rxlmp -0x5d0f 024959 set0 smap_rxlmp ,pdata -0x5d10 024960 set0 mark_rxbuf_inuse ,mark -0x5d11 024961 store 1 ,mem_state_map -0x5d12 024962 fetch 1 ,mem_rxbuf -0x5d13 024963 fetcht 1 ,mem_state_map -0x5d14 024964 isolate1 smap_lmptidinit ,pdata -0x5d15 024965 setflag true ,smap_lmptid ,temp -0x5d16 024966 storet 1 ,mem_state_map -0x5d17 024967 and_into 0x2 ,temp -0x5d18 024968 storet 1 ,mem_lmo_tid2 -0x5d19 024969 fetcht 1 ,mem_state_map -0x5d1a 024970 rshift pdata ,pdata -0x5d1b 024971 store 1 ,mem_lmi_opcode2 -0x5d1c 024972 bpatchx patch2f_6 ,mem_patch2f -0x5d1d 024973 fetch 1 ,mem_lmi_opcode2 -0x5d1e 024974 beq lmp_escape ,parse_lmp_escape -0x5d1f 024975 beq lmp_accepted ,parse_lmp_accepted -0x5d20 024976 beq lmp_not_accepted ,parse_lmp_not_accepted -0x5d21 024977 beq lmp_set_afh ,parse_lmp_set_afh -0x5d22 024978 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req -0x5d23 024979 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req -0x5d24 024980 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key -0x5d25 024981 beq lmp_auto_rate ,parse_lmp_auto_rate -0x5d26 024982 beq lmp_test_control ,parse_lmp_test_control -0x5d27 024983 beq lmp_test_activate ,parse_lmp_test_activate -0x5d28 024984 beq lmp_setup_complete ,parse_lmp_setup_complete -0x5d29 024985 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout -0x5d2a 024986 beq lmp_features_req ,parse_lmp_features_req -0x5d2b 024987 beq lmp_host_connection_req ,parse_lmp_conn_req -0x5d2c 024988 beq lmp_version_req ,parse_lmp_version_req -0x5d2d 024989 beq lmp_version_res ,parse_lmp_version_res -0x5d2e 024990 beq lmp_detach ,parse_lmp_detach -0x5d2f 024991 beq lmp_max_slot ,parse_lmp_max_slot -0x5d30 024992 beq lmp_max_slot_req ,parse_lmp_max_slot_req -0x5d31 024993 beq lmp_name_req ,parse_lmp_name_req -0x5d32 024994 beq lmp_name_res ,parse_lmp_name_res -0x5d33 024995 beq lmp_features_res ,parse_lmp_features_res -0x5d34 024996 beq lmp_comb_key ,parse_lmp_comb_key -0x5d35 024997 beq lmp_au_rand ,parse_lmp_au_rand -0x5d36 024998 beq lmp_in_rand ,parse_lmp_in_rand -0x5d37 024999 beq lmp_sres ,parse_lmp_sres -0x5d38 025000 beq lmp_incr_power_req ,parse_lmp_incr_power -0x5d39 025001 beq lmp_decr_power_req ,parse_lmp_decr_power -0x5d3a 025002 beq lmp_max_power ,parse_lmp_max_power -0x5d3b 025003 beq lmp_min_power ,parse_lmp_min_power -0x5d3c 025004 beq lmp_page_mode_req ,parse_lmp_page_mode_req -0x5d3d 025005 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req -0x5d3e 025006 beq lmp_preferred_rate ,parse_lmp_preferred_rate -0x5d3f 025007 beq lmp_slot_offset ,parse_lmp_slot_offset -0x5d40 025008 beq lmp_sniff_req ,parse_lmp_sniff_req -0x5d41 025009 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req -0x5d42 025010 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req -0x5d43 025011 beq lmp_switch_req ,parse_lmp_switch_req -0x5d44 025012 beq lmp_temp_rand ,parse_lmp_temp_rand -0x5d45 025013 beq lmp_temp_key ,parse_lmp_temp_key -0x5d46 025014 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req -0x5d47 025015 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res -0x5d48 025016 beq lmp_unit_key ,parse_lmp_unit_key -0x5d49 025017 beq lmp_unsniff_req ,parse_lmp_unsniff_req -0x5d4a 025018 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key -0x5d4b 025019 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header -0x5d4c 025020 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload -0x5d4d 025021 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm -0x5d4e 025022 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number -0x5d4f 025023 beq lmp_dhkey_check ,parse_dhkey_check -0x5d50 025024 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res -0x5d51 025025 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req -: 025028 reject_unknown_packet: -0x5d52 025029 jam unknown_lmp_pdu ,mem_lmo_reason2 -: 025030 reject_lmp_packet: -0x5d53 025031 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5d54 025032 rtn -: 025034 parse_lmp_clkoffset_req: -0x5d55 025035 jam lmp_clkoffset_res ,mem_lmo_opcode2 -0x5d56 025036 rtn -: 025038 parse_enc_key_size_mask_req: -0x5d57 025039 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 -0x5d58 025040 rtn -: 025042 parse_lmp_set_afh: -0x5d59 025043 fetch 4 ,mem_rxbuf + 1 -0x5d5a 025044 lshift pdata ,pdata -0x5d5b 025045 store 4 ,mem_afh_instant -0x5d5c 025046 fetch 1 ,mem_rxbuf + 5 -0x5d5d 025047 store 1 ,mem_afh_new_mod -0x5d5e 025048 fetch 5 ,mem_rxbuf + 6 -0x5d5f 025049 store 5 ,mem_afh_map_new -0x5d60 025050 fetch 5 ,mem_rxbuf + 11 -0x5d61 025051 istore 5 ,contw -0x5d62 025052 fetch 1 ,mem_mode -0x5d63 025053 set1 afh_change ,pdata -0x5d64 025054 store 1 ,mem_mode -0x5d65 025055 rtn -: 025056 parse_lmp_escape: -0x5d66 025057 bpatchx patch2f_7 ,mem_patch2f -0x5d67 025058 fetch 1 ,mem_rxbuf + 1 -0x5d68 025059 set1 7 ,pdata -0x5d69 025060 store 1 ,mem_lmi_opcode2 -0x5d6a 025061 beq lmp_ext_accepted ,parse_lmpext_accepted -0x5d6b 025062 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted -0x5d6c 025063 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req -0x5d6d 025064 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res -0x5d6e 025065 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req -0x5d6f 025066 beq lmp_ext_features_req ,parse_lmpext_features_req -0x5d70 025067 beq lmp_ext_features_res ,parse_lmpext_features_res -0x5d71 025068 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req -0x5d72 025069 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt -0x5d73 025070 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt -0x5d74 025071 beq lmp_io_cap_req ,parse_lmpext_iocap_req -0x5d75 025072 beq lmp_io_cap_res ,parse_lmpext_iocap_res -0x5d76 025073 rtneq lmp_ext_features_res -: 025076 reject_unknown_ext_packet: -0x5d77 025077 jam lmp_not_accepted_ext ,mem_lmo_opcode2 -0x5d78 025078 jam unknown_lmp_pdu ,mem_lmo_reason2 -0x5d79 025080 rtn -: 025081 parse_lmpext_chn_classification_req: -0x5d7a 025082 jam lmp_not_accepted_ext ,mem_lmo_opcode2 -0x5d7b 025083 jam not_support_chn_classification ,mem_lmo_reason2 -0x5d7c 025084 rtn -: 025086 parse_lmpext_iocap_req: -0x5d7d 025087 call iocap_lmpext_load -0x5d7e 025088 jam lmp_io_cap_res ,mem_lmo_opcode2 -0x5d7f 025089 rtn -: 025091 parse_lmpext_iocap_res: -0x5d80 025092 call iocap_lmpext_load -0x5d81 025093 branch iocap_lmpext_common -: 025095 iocap_lmpext_load: -0x5d82 025096 arg mem_sp_iocap_remote ,contw -0x5d83 025097 fetch 3 ,mem_rxbuf + 2 -0x5d84 025098 istore 3 ,contw -0x5d85 025099 rtn -: 025101 iocap_lmpext_common: -0x5d86 025102 branch master_set_mem_master_sp_flag ,true -0x5d87 025103 rtn -: 025104 parse_lmpext_accepted: -0x5d88 025105 fetch 1 ,mem_rxbuf + 3 -0x5d89 025106 set1 7 ,pdata -0x5d8a 025107 store 1 ,mem_lmi_accepted_opcode -0x5d8b 025108 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt -0x5d8c 025109 rtn -: 025112 parse_lmpext_not_accepted: -0x5d8d 025113 fetch 1 ,mem_rxbuf + 3 -0x5d8e 025114 set1 7 ,pdata -0x5d8f 025115 store 1 ,mem_lmi_accepted_opcode -0x5d90 025116 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt -0x5d91 025117 rtn -: 025119 parse_lmpext_accepted_ptt: -0x5d92 025120 fetch 1 ,mem_ptt -0x5d93 025121 fetcht 1 ,mem_state_map -0x5d94 025122 nsetflag blank ,smap_edr ,temp -0x5d95 025123 storet 1 ,mem_state_map -: 025124 parse_lmpext_not_accepted_ptt: -0x5d96 025125 fetch 1 ,mem_state -0x5d97 025126 rtnbit0 state_init_seq -0x5d98 025127 set0 state_init_seq ,pdata -0x5d99 025128 store 1 ,mem_state -0x5d9a 025129 fetch 1 ,mem_auth_enable -0x5d9b 025130 nrtn blank -0x5d9c 025131 jam lmp_setup_complete ,mem_lmo_opcode2 -0x5d9d 025132 rtn -: 025134 parse_lmpext_pause_encrypt: -0x5d9e 025135 nbranch parse_lmpext_pause_encrypt_slave ,master -0x5d9f 025136 jam lmp_stop_encryption_req ,mem_lmo_opcode2 -0x5da0 025137 branch tid_reply -: 025139 parse_lmpext_pause_encrypt_slave: -0x5da1 025140 jam lmp_pause_encryption_req ,mem_lmo_opcode2 -0x5da2 025141 rtn -: 025143 parse_lmpext_resume_encrypt: -0x5da3 025146 call tid_reply -0x5da4 025147 branch lmp_start_encryption -: 025149 parse_lmpext_features_req: -0x5da5 025150 jam lmp_ext_features_res ,mem_lmo_opcode2 -0x5da6 025151 rtn -: 025153 parse_lmpext_features_res: -0x5da7 025154 fetcht 1 ,mem_rxbuf + 4 -0x5da8 025155 and temp ,0x1 ,temp -0x5da9 025156 storet 1 ,mem_remote_sppcap -0x5daa 025157 fetch 1 ,mem_hci_cmd -0x5dab 025158 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci -0x5dac 025159 jam 0 ,mem_hci_cmd -: 025160 parse_lmpext_features_res_not_hci: -0x5dad 025161 fetch 1 ,mem_conn_sm -0x5dae 025162 rtnne conn_sm_wait_features_ext -0x5daf 025163 jam conn_sm_send_conn_req ,mem_conn_sm -0x5db0 025164 branch process_conn_sm -: 025166 parse_lmp_accepted: -0x5db1 025167 bpatchx patch30_0 ,mem_patch30 -0x5db2 025168 fetch 1 ,mem_rxbuf + 1 -0x5db3 025169 store 1 ,mem_lmi_accepted_opcode -0x5db4 025170 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn -0x5db5 025171 beq lmp_in_rand ,parse_lmp_accepted_inrand -0x5db6 025172 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode -0x5db7 025173 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize -0x5db8 025174 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc -0x5db9 025175 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc -0x5dba 025176 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req -0x5dbb 025177 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req -0x5dbc 025178 beq lmp_switch_req ,parse_lmp_accepted_switch -0x5dbd 025180 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header -0x5dbe 025181 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload -0x5dbf 025182 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number -0x5dc0 025183 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check -0x5dc1 025184 rtn -: 025186 parse_lmp_not_accepted: -0x5dc2 025187 bpatchx patch30_1 ,mem_patch30 -0x5dc3 025188 fetch 1 ,mem_rxbuf + 1 -0x5dc4 025189 store 1 ,mem_lmi_accepted_opcode -0x5dc5 025190 beq lmp_name_req ,parse_lmp_not_accepted_name_req -0x5dc6 025191 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn -0x5dc7 025192 beq lmp_au_rand ,parse_lmp_not_accepted_aurand -0x5dc8 025193 beq lmp_in_rand ,parse_lmp_not_accepted_inrand -0x5dc9 025194 beq lmp_switch_req ,parse_lmp_not_accepted_switch -0x5dca 025196 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number -0x5dcb 025197 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check -0x5dcc 025198 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req -0x5dcd 025199 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req -0x5dce 025200 rtn -: 025202 parse_lmp_accepted_switch: -0x5dcf 025203 jam bt_evt_switch_accept ,mem_fifo_temp -0x5dd0 025204 call ui_ipc_send_event -0x5dd1 025205 branch role_switch_prepare0 -: 025206 parse_lmp_not_accepted_switch: -0x5dd2 025207 jam bt_evt_switch_not_accept ,mem_fifo_temp -0x5dd3 025208 call ui_ipc_send_event -0x5dd4 025209 jam switch_flag_not_accept ,mem_switch_flag -0x5dd5 025210 setarg timer_switch_waite -0x5dd6 025211 arg switch_wait_timer ,queue -0x5dd7 025212 branch timer_init -: 025215 parse_lmp_accepted_hostconn: -0x5dd8 025218 fetch 1 ,mem_lmp_conn_state -0x5dd9 025219 set1 received_conn_req ,pdata -0x5dda 025220 store 1 ,mem_lmp_conn_state -0x5ddb 025221 jam bt_evt_bb_connected ,mem_fifo_temp -0x5ddc 025222 call ui_ipc_send_event -0x5ddd 025223 jam lmp_packet_type_table_req ,mem_lmo_opcode2 -: 025225 parse_lmp_accepted_hostconn_ctn: -0x5dde 025227 fetch 1 ,mem_conn_sm -0x5ddf 025228 bne conn_sm_wait_conn_accept ,parse_rx_done -0x5de0 025231 jam conn_sm_auth_pair ,mem_conn_sm -0x5de1 025232 rtn -: 025240 parse_lmp_not_accepted_hostconn: -0x5de2 025241 jam acl_connection_already_exists ,mem_disconn_reason_send -0x5de3 025242 jam lmp_detach ,mem_lmo_opcode2 -0x5de4 025244 jam conn_sm_standby ,mem_conn_sm -0x5de5 025246 branch parse_rx_done ,true -0x5de6 025247 rtn -: 025249 parse_lmp_accepted_inrand: -0x5de7 025250 fetch 1 ,mem_link_key_exists -0x5de8 025251 nrtn blank -0x5de9 025252 call clear_linkkey -0x5dea 025253 call lmp_generate_key -0x5deb 025254 rtn master -0x5dec 025255 set1 mark_slave_in_rand_accepted ,mark -0x5ded 025256 rtn -: 025258 parse_lmp_accepted_enc_mode: -0x5dee 025259 nrtn master -0x5def 025260 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 -0x5df0 025261 fetch 1 ,mem_state_map -0x5df1 025262 rtnbit0 smap_encryption -0x5df2 025263 jam lmp_stop_encryption_req ,mem_lmo_opcode2 -0x5df3 025264 rtn -: 025266 parse_lmp_accepted_enc_keysize: -0x5df4 025267 branch lmp_start_encryption -: 025269 parse_lmp_accepted_start_enc: -0x5df5 025270 call send_create_conn_start_l2cap_timer_sm -0x5df6 025271 fetch 1 ,mem_state -0x5df7 025272 rtnbit1 state_conn_comp -0x5df8 025273 jam lmp_setup_complete ,mem_lmo_opcode2 -0x5df9 025274 fetch 1 ,mem_conn_sm -0x5dfa 025275 rtnne conn_sm_encrypt_wait -0x5dfb 025276 jam conn_sm_encrypt_wait_clear ,mem_conn_sm -0x5dfc 025277 rtn -: 025279 parse_lmp_accepted_stop_enc: -0x5dfd 025287 rtn -: 025289 parse_lmp_not_accepted_aurand: -: 025290 parse_lmp_not_accepted_aurand_send_detach: -0x5dfe 025291 jam lmp_detach ,mem_lmo_opcode2 -0x5dff 025292 jam other_end_terminated ,mem_disconn_reason_send -0x5e00 025293 rtn -: 025295 parse_lmp_not_accepted_inrand: -0x5e01 025296 fetch 1 ,mem_rxbuf + 2 -0x5e02 025297 beq key_missing ,parse_lmp_inrand_key_missing -0x5e03 025298 rtnne pairing_not_allowed -0x5e04 025299 jam pairing_not_allowed ,mem_disconn_reason_send -0x5e05 025300 jam lmp_detach ,mem_lmo_opcode2 -0x5e06 025301 rtn -: 025302 parse_lmp_inrand_key_missing: -0x5e07 025303 jam key_missing ,mem_disconn_reason_send -0x5e08 025304 jam lmp_detach ,mem_lmo_opcode2 -0x5e09 025305 rtn -: 025307 parse_lmp_not_accepted_name_req: -0x5e0a 025308 rtn -: 025310 parse_lmp_not_accepted_simple_pairing_number: -0x5e0b 025311 jam sp_stat_null ,mem_sp_state -0x5e0c 025312 jam lmp_detach ,mem_lmo_opcode2 -0x5e0d 025313 branch parse_rx_done -: 025315 parse_lmp_not_accepted_dhkey_check: -0x5e0e 025316 jam sp_stat_null ,mem_sp_state -0x5e0f 025317 jam lmp_detach ,mem_lmo_opcode2 -0x5e10 025318 branch parse_rx_done -: 025319 parse_lmp_not_accepted_unsniff_req: -0x5e11 025320 jam bt_evt_unsniff_not_accept ,mem_fifo_temp -0x5e12 025321 branch ui_ipc_send_event -: 025323 parse_lmp_accepted_unsniff_req: -0x5e13 025324 jam bt_evt_unsniff_accept ,mem_fifo_temp -0x5e14 025325 call ui_ipc_send_event -0x5e15 025326 branch sniff_exit -: 025328 parse_lmp_accepted_sniff_req: -0x5e16 025329 jam bt_evt_sniff_accept ,mem_fifo_temp -0x5e17 025330 call ui_ipc_send_event -0x5e18 025331 setarg 0 -0x5e19 025332 store 2 ,mem_dsniff -0x5e1a 025333 fetch 2 ,mem_sniff_param_interval -0x5e1b 025334 lshift pdata ,pdata -0x5e1c 025335 store 2 ,mem_tsniff -0x5e1d 025336 fetch 1 ,mem_sniff_param_attempt -0x5e1e 025337 store 1 ,mem_sniff_attempt -0x5e1f 025338 fetch 1 ,mem_sniff_param_timeout -0x5e20 025339 store 1 ,mem_sniff_timeout -0x5e21 025340 branch sniff_init -: 025342 parse_lmp_not_acdcept_sniff_req: -0x5e22 025343 jam bt_evt_sniff_not_accept ,mem_fifo_temp -0x5e23 025344 branch ui_ipc_send_event -: 025346 parse_lmp_crypt_key: -0x5e24 025347 fetcht 1 ,mem_rxbuf + 1 -0x5e25 025348 storet 1 ,mem_key_size -0x5e26 025349 branch accept_lmp_msg -: 025351 parse_lmp_setup_complete: -0x5e27 025352 fetch 1 ,mem_lmp_conn_state -0x5e28 025353 set1 received_setup_complete ,pdata -0x5e29 025354 store 1 ,mem_lmp_conn_state -0x5e2a 025355 rtnbit1 sent_setup_complete -0x5e2b 025356 jam lmp_setup_complete ,mem_lmo_opcode2 -0x5e2c 025357 branch parse_rx_done -: 025359 parse_lmp_max_slot: -0x5e2d 025362 rtn -: 025364 parse_lmp_max_slot_req: -0x5e2e 025365 fetch 1 ,mem_max_slot -0x5e2f 025366 fetcht 1 ,mem_rxbuf + 1 -0x5e30 025367 isub temp ,null -0x5e31 025369 branch accept_lmp_msg ,positive -0x5e32 025370 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5e33 025371 jam unspecified_error ,mem_lmo_reason2 -0x5e34 025372 jam lmp_max_slot_req ,mem_lmi_opcode2 -0x5e35 025373 rtn -: 025375 parse_lmp_detach: -0x5e36 025376 call prepare_disconnect -0x5e37 025377 branch accept_lmp_msg -: 025379 accept_lmp_msg: -0x5e38 025380 jam lmp_accepted ,mem_lmo_opcode2 -0x5e39 025381 rtn -: 025383 parse_lmp_incr_power: -0x5e3a 025384 jam lmp_max_power ,mem_lmo_opcode2 -0x5e3b 025385 rtn -: 025387 parse_lmp_decr_power: -0x5e3c 025388 jam lmp_min_power ,mem_lmo_opcode2 -0x5e3d 025389 rtn -: 025391 parse_lmp_version_res: -0x5e3e 025392 fetch 1 ,mem_conn_sm -0x5e3f 025393 rtneq conn_sm_wait_version -0x5e40 025395 jam conn_sm_send_features ,mem_conn_sm -0x5e41 025397 rtn -: 025400 parse_lmp_auto_rate: -0x5e42 025401 rtn -: 025403 parse_lmp_in_rand: -0x5e43 025404 call lmp_copy_rand -0x5e44 025405 jam pincode_state_wait_pincode ,mem_pincode_state -0x5e45 025406 jam bt_evt_pincode_req ,mem_fifo_temp -0x5e46 025407 call ui_ipc_send_event -0x5e47 025409 call tid_check -0x5e48 025410 nbranch lmp_accept_inrand ,true -0x5e49 025412 nbranch parse_lmp_inrand_res ,master -0x5e4a 025413 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5e4b 025414 jam lmp_in_rand ,mem_lmi_opcode2 -0x5e4c 025415 jam transaction_collision ,mem_lmo_reason2 -0x5e4d 025416 rtn -: 025417 parse_lmp_inrand_res: -0x5e4e 025418 fetch 1 ,mem_op -0x5e4f 025419 set1 op_inrand_req ,pdata -0x5e50 025420 store 1 ,mem_op -0x5e51 025421 rtn -: 025424 pop_tid_follow: -0x5e52 025425 fetcht 1 ,mem_state_map -0x5e53 025426 nsetflag blank ,smap_lmptid ,temp -0x5e54 025427 storet 1 ,mem_state_map -0x5e55 025428 rtn -: 025431 push_tid_follow: -0x5e56 025432 fetch 1 ,mem_lmo_tid2 -0x5e57 025433 rshift pdata ,pdata -0x5e58 025434 and_into 1 ,pdata -0x5e59 025435 rtn -: 025437 parse_lmp_au_rand_moudle: -0x5e5a 025438 fetch 1 ,mem_nv_data_number -0x5e5b 025439 rtn blank -0x5e5c 025440 fetch 1 ,mem_pairing_auth -0x5e5d 025441 call load_device_list ,blank -0x5e5e 025442 rtn -: 025444 parse_lmp_au_rand: -0x5e5f 025445 call parse_lmp_au_rand_moudle -0x5e60 025446 call push_tid_follow -0x5e61 025447 store 1 ,mem_sres_tid -0x5e62 025448 call lmp_copy_rand -0x5e63 025449 jam lmp_sres ,mem_lmo_opcode2 -0x5e64 025450 fetch 1 ,mem_link_key_exists -0x5e65 025451 nrtn blank -0x5e66 025452 fetch 1 ,mem_state -0x5e67 025453 rtnbit1 state_combkey -0x5e68 025454 jam key_missing ,mem_lmo_reason2 -0x5e69 025455 branch reject_lmp_packet -: 025457 parse_lmp_sres: -0x5e6a 025458 arg mem_plap ,rega -0x5e6b 025459 call function_e1 -0x5e6c 025460 fetch 4 ,mem_rxbuf + 1 -0x5e6d 025461 fetcht 4 ,mem_input_store -0x5e6e 025462 isub temp ,null -0x5e6f 025463 branch authentication_ok ,zero -0x5e70 025464 jam lmp_detach ,mem_lmo_opcode2 -0x5e71 025465 jam authentication_failure_error ,mem_disconn_reason_send -0x5e72 025466 rtn -: 025467 authentication_ok: -0x5e73 025468 call authentication_ok_common -0x5e74 025469 fetch 1 ,mem_ssp_enable -0x5e75 025470 branch pairing_success ,blank -0x5e76 025471 rtn -: 025474 authentication_ok_common: -0x5e77 025475 call copy_aco -0x5e78 025476 call linkkey_ready -0x5e79 025477 fetch 1 ,mem_op -0x5e7a 025478 isolate1 op_auth_req ,pdata -0x5e7b 025479 set0 op_auth_req ,pdata -0x5e7c 025480 store 1 ,mem_op -0x5e7d 025481 fetch 1 ,mem_conn_sm -0x5e7e 025482 beq conn_sm_auth_wait ,authentication_ok_conn_sm -0x5e7f 025483 beq conn_sm_pairing_wait ,authentication_ok_conn_sm -0x5e80 025484 rtn -: 025485 authentication_ok_conn_sm: -0x5e81 025486 fetch 1 ,mem_pairing_auth -0x5e82 025487 rtnne defalt_pairing_auth -0x5e83 025488 fetch 1 ,mem_state_map -0x5e84 025489 rtnbit1 smap_encryption -0x5e85 025490 branch host_create_conn_encrypt -: 025492 parse_lmp_comb_key: -0x5e86 025493 arg mem_rxbuf + 1 ,rega -0x5e87 025494 arg mem_kinit ,regb -0x5e88 025495 arg mem_random_number ,contw -0x5e89 025496 call xor16 -0x5e8a 025497 arg mem_plap ,rega -0x5e8b 025498 call generate_linkkey -0x5e8c 025499 jam lmp_au_rand ,mem_lmo_opcode2 -0x5e8d 025500 fetch 1 ,mem_state -0x5e8e 025501 bbit0 state_combkey ,lmp_generate_key -0x5e8f 025502 rtn -: 025504 parse_lmp_name_res: -0x5e90 025505 fetch 2 ,mem_len -0x5e91 025506 add pdata ,-3 ,loopcnt -0x5e92 025507 fetcht 1 ,mem_rxbuf + 1 -0x5e93 025508 setarg mem_tmp_buffer -0x5e94 025509 iadd temp ,contw -0x5e95 025510 arg mem_rxbuf + 3 ,contr -0x5e96 025511 call memcpy -0x5e97 025512 fetcht 1 ,mem_name_offset -0x5e98 025513 fetch 1 ,mem_rxbuf + 2 -0x5e99 025514 isub temp ,pdata -0x5e9a 025515 sub pdata ,14 ,null -0x5e9b 025516 branch parse_lmp_name_res_end ,positive -0x5e9c 025517 add temp ,14 ,pdata -0x5e9d 025518 store 1 ,mem_name_offset -0x5e9e 025519 jam lmp_name_req ,mem_lmo_opcode2 -0x5e9f 025520 rtn -: 025521 parse_lmp_name_res_end: -0x5ea0 025522 fetch 1 ,mem_state_map -0x5ea1 025523 set1 smap_name_res ,pdata -0x5ea2 025524 store 1 ,mem_state_map -0x5ea3 025525 bbit1 smap_name_req ,lmp_disconnect -0x5ea4 025526 rtn -: 025527 parse_lmp_name_req: -0x5ea5 025528 fetch 1 ,mem_rxbuf + 1 -0x5ea6 025529 store 1 ,mem_lmi_opcode2 -0x5ea7 025530 jam lmp_name_res ,mem_lmo_opcode2 -0x5ea8 025531 rtn -: 025533 parse_lmp_conn_req: -0x5ea9 025534 branch accept_lmp_msg -: 025536 parse_lmp_timing_accuracy_req: -0x5eaa 025537 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 -0x5eab 025538 rtn -: 025540 parse_lmp_features_req: -0x5eac 025541 jam lmp_features_res ,mem_lmo_opcode2 -0x5ead 025542 rtn -: 025544 parse_lmp_version_req: -0x5eae 025545 jam lmp_version_res ,mem_lmo_opcode2 -0x5eaf 025546 rtn -: 025548 parse_lmp_supervision_timeout: -0x5eb0 025551 rtn -: 025555 parse_lmp_sniff_subrating_req: -0x5eb1 025556 fetch 2 ,mem_tsniff -0x5eb2 025557 iforce temp -0x5eb3 025558 fetch 1 ,mem_rxbuf + 2 -0x5eb4 025559 store 1 ,mem_subsniff_rate -0x5eb5 025560 imul32 temp ,temp -0x5eb6 025561 fetch 2 ,mem_rxbuf + 3 -0x5eb7 025562 lshift pdata ,pdata -0x5eb8 025563 store 2 ,mem_subsniff_tcmax -0x5eb9 025564 fetch 4 ,mem_rxbuf + 5 -0x5eba 025565 lshift pdata ,pdata -0x5ebb 025566 store 4 ,mem_subsniff_instant -0x5ebc 025568 deposit temp -0x5ebd 025569 store 2 ,mem_subsniff_tsniff -0x5ebe 025570 rtn -: 025571 parse_lmpext_packet_type_table_req: -0x5ebf 025572 fetcht 1 ,mem_ptt -0x5ec0 025573 fetch 1 ,mem_rxbuf + 2 -0x5ec1 025574 ixor temp ,null -0x5ec2 025575 nbranch reject_unknown_ext_packet ,zero -0x5ec3 025576 isolate1 0 ,pdata -0x5ec4 025577 fetch 1 ,mem_state_map -0x5ec5 025578 setflag true ,smap_edr ,pdata -0x5ec6 025579 store 1 ,mem_state_map -0x5ec7 025580 jam lmp_ext_accepted ,mem_lmo_opcode2 -0x5ec8 025581 jam lmp_packet_type_table_req ,mem_lmi_opcode2 -0x5ec9 025582 rtn -: 025585 parse_lmp_sniff_subrating_res: -: 025586 parse_lmp_preferred_rate: -: 025587 parse_lmp_max_power: -: 025588 parse_lmp_min_power: -0x5eca 025589 rtn -: 025590 parse_lmp_page_mode_req: -0x5ecb 025592 branch accept_lmp_msg -: 025593 parse_lmp_page_scan_mode_req: -0x5ecc 025596 branch accept_lmp_msg -: 025600 parse_lmp_slot_offset: -0x5ecd 025601 fetch 2 ,mem_rxbuf + 1 -0x5ece 025602 store 2 ,mem_slot_offset -0x5ecf 025603 rtn -: 025605 parse_lmp_sniff_req_check_sniff_para: -0x5ed0 025606 fetch 2 ,mem_rxbuf + 4 -0x5ed1 025607 fetcht 1 ,mem_lpm_mult -0x5ed2 025608 imul32 temp ,pdata -0x5ed3 025609 arg 0x640 ,temp -0x5ed4 025610 isub temp ,null -0x5ed5 025612 rtn -: 025614 parse_lmp_sniff_req: -0x5ed6 025615 fetch 2 ,mem_rxbuf + 6 -0x5ed7 025616 branch lmp_reject_sniff ,blank -0x5ed8 025617 call parse_lmp_sniff_req_check_sniff_para -0x5ed9 025618 branch lmp_reject_sniff ,positive -0x5eda 025619 fetch 1 ,mem_device_option -0x5edb 025620 sub pdata ,dvc_op_module ,null -0x5edc 025621 call module_set_lpm_mult_2 ,zero -0x5edd 025622 fetch 1 ,mem_state -0x5ede 025623 bbit1 state_insniff ,lmp_reject_sniff -0x5edf 025624 fetch 2 ,mem_rxbuf + 2 -0x5ee0 025625 lshift pdata ,pdata -0x5ee1 025626 store 2 ,mem_dsniff -0x5ee2 025627 fetch 2 ,mem_rxbuf + 4 -0x5ee3 025628 lshift pdata ,pdata -0x5ee4 025629 store 2 ,mem_tsniff -0x5ee5 025630 fetch 2 ,mem_rxbuf + 6 -0x5ee6 025631 store 1 ,mem_sniff_attempt -0x5ee7 025632 iforce temp -0x5ee8 025633 fetch 2 ,mem_rxbuf + 8 -0x5ee9 025634 store 1 ,mem_sniff_timeout -0x5eea 025635 isub temp ,null -0x5eeb 025636 nbranch set_big_value_to_attempt ,positive -0x5eec 025637 store 1 ,mem_sniff_attempt -: 025638 set_big_value_to_attempt: -0x5eed 025640 jam lmp_accepted ,mem_lmo_opcode2 -0x5eee 025641 jam lmp_sniff_req ,mem_lmi_opcode2 -0x5eef 025642 rtn -: 025644 lmp_reject_sniff: -0x5ef0 025645 jam pdu_not_allowed ,mem_lmo_reason2 -0x5ef1 025646 branch reject_lmp_packet -: 025648 parse_lmp_start_encryption_req: -0x5ef2 025649 call accept_lmp_msg -0x5ef3 025650 call lmp_copy_rand -0x5ef4 025651 call function_e3 -0x5ef5 025652 branch start_encryption -: 025654 parse_lmp_stop_encryption_req: -0x5ef6 025655 call accept_lmp_msg -0x5ef7 025656 branch stop_encryption -: 025659 parse_lmp_switch_req: -0x5ef8 025660 fetch 4 ,mem_rxbuf + 1 -0x5ef9 025661 lshift pdata ,pdata -0x5efa 025663 branch parse_lmp_switch_accept ,master -0x5efb 025664 fetcht 1 ,mem_link_key_exists -0x5efc 025665 nbranch parse_lmp_switch_req_clear_mark ,blank -: 025666 parse_lmp_switch_req_not_accept: -0x5efd 025667 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5efe 025668 jam lmp_switch_req ,mem_lmi_opcode2 -0x5eff 025669 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f00 025670 rtn -: 025671 parse_lmp_switch_req_clear_mark: -0x5f01 025672 jam lmp_slot_offset ,mem_lmo_opcode2 -0x5f02 025673 jam 0 ,mem_conn_sm -0x5f03 025674 branch role_switch_prepare -: 025676 parse_lmp_switch_accept: -0x5f04 025677 call role_switch_prepare -0x5f05 025678 set1 mark_reconn_recieve_switch ,mark -0x5f06 025679 fetch 1 ,mem_connection_options -0x5f07 025680 set0 connection_switch ,pdata -0x5f08 025681 store 1 ,mem_connection_options -0x5f09 025682 branch accept_lmp_msg -: 025686 parse_lmp_temp_rand: -: 025687 parse_lmp_temp_key: -: 025688 parse_lmp_timing_accuracy_res: -: 025689 parse_lmp_unit_key: -: 025690 parse_lmp_use_semi_permanend_key: -0x5f0a 025691 rtn -: 025694 parse_lmp_unsniff_req: -0x5f0b 025695 jam lmp_accepted ,mem_lmo_opcode2 -0x5f0c 025696 jam lmp_unsniff_req ,mem_lmi_opcode2 -0x5f0d 025697 jam bt_evt_remote_unsniff ,mem_fifo_temp -0x5f0e 025698 call ui_ipc_send_event -0x5f0f 025699 branch sniff_exit -: 025701 parse_lmp_encapsulated_header: -0x5f10 025702 fetch 1 ,mem_rxbuf + 1 -0x5f11 025703 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject -0x5f12 025704 fetch 1 ,mem_rxbuf + 2 -0x5f13 025705 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject -0x5f14 025706 fetch 1 ,mem_rxbuf + 3 -0x5f15 025707 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject -0x5f16 025708 call check_localsm -0x5f17 025709 branch parse_lmp_encapsulated_header_master ,true -0x5f18 025710 jam sp_stat_key_recv ,mem_sp_state -: 025711 parse_lmp_encapsulated_header_master: -0x5f19 025712 jam lmp_accepted ,mem_lmo_opcode2 -0x5f1a 025713 jam lmp_encapsulated_header ,mem_lmi_opcode2 -0x5f1b 025714 branch parse_rx_done -: 025716 parse_lmp_encapsulated_header_reject: -0x5f1c 025717 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f1d 025718 branch reject_lmp_packet -: 025720 parse_lmp_accepted_encapsulated_header: -0x5f1e 025723 jam lmp_encapsulated_payload ,mem_lmo_opcode2 -0x5f1f 025725 rtn -: 025726 parse_lmp_accepted_simple_pairing_number: -0x5f20 025727 fetch 1 ,mem_ssp_mode_flag -0x5f21 025728 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin -0x5f22 025729 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey -: 025730 parse_lmp_accepted_simple_pairing_number_common: -0x5f23 025731 call check_localsm -0x5f24 025732 rtn true -0x5f25 025733 jam sp_stat_confirm_recv ,mem_sp_state -0x5f26 025734 rtn -: 025736 parse_lmp_accepted_simple_pairing_number_ssp_pin: -0x5f27 025737 call g_noninit_number_confirm -0x5f28 025738 jam bt_evt_bt_gkey_generate ,mem_fifo_temp -0x5f29 025739 call ui_ipc_send_event -0x5f2a 025740 branch parse_lmp_accepted_simple_pairing_number_common -: 025743 parse_lmp_accepted_simple_pairing_number_passkey: -0x5f2b 025744 call check_localsm -0x5f2c 025745 rtn true -0x5f2d 025746 fetch 1 ,mem_authentication_passkey_times -0x5f2e 025747 beq 19 ,authentication_passkey_end -0x5f2f 025748 increase 1 ,pdata -0x5f30 025749 store 1 ,mem_authentication_passkey_times -: 025752 authentication_passkey: -0x5f31 025753 jam sp_flag_commit ,mem_sp_flag -0x5f32 025754 jam sp_stat_commit_calc ,mem_sp_state -0x5f33 025755 fetch 1 ,mem_authentication_passkey_times -0x5f34 025756 copy pdata ,queue -0x5f35 025757 fetch 6 ,mem_pin -0x5f36 025758 qisolate1 pdata -0x5f37 025759 setarg 0x80 -0x5f38 025760 setflag true ,0 ,pdata -0x5f39 025761 store 1 ,mem_passkey_1bit -0x5f3a 025762 rtn -: 025764 authentication_passkey_end: -0x5f3b 025765 jam sp_stat_confirm_recv ,mem_sp_state -0x5f3c 025766 rtn -: 025768 parse_lmp_accepted_dhkey_check: -0x5f3d 025769 call parse_lmp_accepted_dhkey_check_common -: 025770 pairing_success: -0x5f3e 025771 fetch 1 ,mem_flag_pairing_state -0x5f3f 025772 rtn blank -0x5f40 025773 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state -0x5f41 025774 jam bt_evt_bt_pairing_success ,mem_fifo_temp -0x5f42 025775 branch ui_ipc_send_event -: 025778 parse_lmp_accepted_dhkey_check_common: -0x5f43 025780 call check_localsm -0x5f44 025781 ncall g_noninit ,true -0x5f45 025782 call g_init ,true -0x5f46 025783 call check_localsm -0x5f47 025784 rtn true -0x5f48 025785 jam sp_stat_link_key_calc ,mem_sp_state -0x5f49 025786 jam sp_flag_commit ,mem_sp_flag -0x5f4a 025787 rtn -: 025789 parse_simple_pairing_confirm: -0x5f4b 025790 arg mem_sp_confirm_remote ,contw -0x5f4c 025791 arg mem_rxbuf + 1 ,contr -0x5f4d 025792 call memcpy16 -0x5f4e 025793 fetch 1 ,mem_ssp_mode_flag -0x5f4f 025794 rtneq ssp_mode_passkey_entry_flag -0x5f50 025795 branch master_set_mem_master_sp_flag -: 025797 parse_lmp_encapsulated_payload: -0x5f51 025798 fetch 1 ,mem_master_sp_state -0x5f52 025799 beq sp_stat_random_send ,parse_encapsulated_payload_master -0x5f53 025800 fetch 1 ,mem_sp_state -0x5f54 025801 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject -: 025802 parse_encapsulated_payload_master: -0x5f55 025803 fetch 1 ,mem_sp_remote_key_recv_count -0x5f56 025804 sub pdata ,0x20 ,contw -0x5f57 025805 nbranch parse_lmp_encapsulated_payload_reject ,positive -0x5f58 025806 arg mem_sp_pubkey_remote ,contw -0x5f59 025807 iadd contw ,contw -0x5f5a 025808 fetch 8 ,mem_rxbuf + 1 -0x5f5b 025809 istore 8 ,contw -0x5f5c 025810 fetch 8 ,mem_rxbuf + 9 -0x5f5d 025811 istore 8 ,contw -0x5f5e 025812 fetch 1 ,mem_sp_remote_key_recv_count -0x5f5f 025813 increase 16 ,pdata -0x5f60 025814 store 1 ,mem_sp_remote_key_recv_count -0x5f61 025815 bne encapsulated_len_p192 ,accept_lmp_msg -: 025816 parse_lmp_encapsulated_payload_completed: -0x5f62 025817 call check_localsm -0x5f63 025818 branch accept_lmp_msg ,true -0x5f64 025819 jam sp_key_valid ,mem_sp_remote_key_invalid -0x5f65 025820 jam sp_stat_key_generate ,mem_sp_state -0x5f66 025821 jam sp_flag_commit ,mem_sp_flag -0x5f67 025822 branch accept_lmp_msg -: 025823 parse_lmp_encapsulated_payload_reject: -0x5f68 025824 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f69 025825 branch reject_lmp_packet -: 025826 parse_lmp_accepted_encapsulated_payload: -0x5f6a 025827 fetch 1 ,mem_sp_local_key_send_count -0x5f6b 025828 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted -0x5f6c 025829 jam lmp_encapsulated_payload ,mem_lmo_opcode2 -0x5f6d 025830 branch parse_rx_done -: 025832 parse_lmp_encapsulated_payload_all_accepted: -0x5f6e 025833 call check_localsm -0x5f6f 025834 branch parse_lmp_encapsulated_payload_all_accepted_master ,true -0x5f70 025835 fetch 1 ,mem_ssp_mode_flag -0x5f71 025836 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey -0x5f72 025837 jam sp_flag_commit ,mem_sp_flag -0x5f73 025838 jam sp_stat_commit_calc ,mem_sp_state -0x5f74 025839 branch parse_rx_done -: 025841 parse_lmp_encapsulated_payload_all_accepted_get_passkey: -0x5f75 025842 jam bt_evt_bt_get_passkey ,mem_fifo_temp -0x5f76 025843 branch ui_ipc_send_event -: 025846 parse_lmp_encapsulated_payload_all_accepted_master: -0x5f77 025848 branch parse_rx_done -: 025850 parse_lmp_simple_pairing_number: -0x5f78 025851 fetch 1 ,mem_master_sp_state -0x5f79 025852 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master -0x5f7a 025853 fetch 1 ,mem_sp_state -0x5f7b 025854 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject -: 025855 parse_lmp_simple_pairing_number_master: -0x5f7c 025856 arg mem_sp_random_remote ,contw -0x5f7d 025857 fetch 8 ,mem_rxbuf + 1 -0x5f7e 025858 istore 8 ,contw -0x5f7f 025859 fetch 8 ,mem_rxbuf + 9 -0x5f80 025860 istore 8 ,contw -0x5f81 025861 call check_localsm -0x5f82 025862 branch parse_lmp_simple_pairing_number_master0 ,true -0x5f83 025863 jam sp_stat_random_send ,mem_sp_state -0x5f84 025864 jam sp_flag_commit ,mem_sp_flag -0x5f85 025865 branch accept_lmp_msg -: 025866 parse_lmp_simple_pairing_number_master0: -0x5f86 025867 jam sp_stat_commit_calc ,mem_master_sp_state -0x5f87 025868 branch master_set_mem_master_sp_flag -: 025871 parse_lmp_simple_pairing_number_reject: -0x5f88 025872 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f89 025873 branch reject_lmp_packet -: 025875 parse_dhkey_check: -0x5f8a 025876 fetch 1 ,mem_master_sp_state -0x5f8b 025877 beq sp_stat_confirm_send ,parse_dhkey_check_master -0x5f8c 025878 fetch 1 ,mem_sp_state -0x5f8d 025879 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject -: 025880 parse_dhkey_check_master: -0x5f8e 025881 arg mem_sp_check_result ,contw -0x5f8f 025882 arg mem_rxbuf + 1 ,contr -0x5f90 025883 call memcpy16 -0x5f91 025884 call check_localsm -0x5f92 025885 branch parse_dhkey_check_master0 ,true -0x5f93 025886 fetch 1 ,mem_ssp_mode_flag -0x5f94 025887 beq ssp_mode_ssp_pin_flag ,number_comparison_mode -: 025888 number_comparison_successed: -0x5f95 025889 jam 0 ,mem_flag_mode_ssp_pin -0x5f96 025890 jam sp_stat_confirm_check ,mem_sp_state -0x5f97 025891 jam sp_flag_commit ,mem_sp_flag -0x5f98 025892 jam lmp_dhkey_check ,mem_lmi_opcode2 -0x5f99 025893 branch parse_rx_done -: 025895 parse_dhkey_check_master0: -0x5f9a 025896 jam sp_stat_confirm_check ,mem_master_sp_state -0x5f9b 025897 jam sp_flag_commit ,mem_master_sp_flag -0x5f9c 025898 branch parse_rx_done -: 025899 parse_lmp_dhkey_check_reject: -0x5f9d 025900 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f9e 025901 branch reject_lmp_packet -: 025903 number_comparison_mode: -0x5f9f 025904 fetch 1 ,mem_flag_mode_ssp_pin -0x5fa0 025905 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result -0x5fa1 025906 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata -0x5fa2 025907 store 1 ,mem_flag_mode_ssp_pin -0x5fa3 025908 rtn -: 025910 comparison_result: -0x5fa4 025911 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed -0x5fa5 025912 jam 0 ,mem_flag_mode_ssp_pin -0x5fa6 025913 branch parse_lmp_dhkey_check_reject -: 025916 parse_lmp_clkoffset_res: -0x5fa7 025917 branch parse_rx_done -: 025919 parse_lmp_encryption_mode_req: -0x5fa8 025920 fetch 1 ,mem_connection_options -0x5fa9 025921 set0 connection_encrypt -0x5faa 025922 store 1 ,mem_connection_options -0x5fab 025923 call accept_lmp_msg -0x5fac 025924 nrtn master -0x5fad 025925 fetch 1 ,mem_rxbuf + 1 -0x5fae 025926 fetcht 1 ,mem_op -0x5faf 025927 setflag blank ,op_stop_enc ,temp -0x5fb0 025928 nsetflag blank ,op_start_enc ,temp -0x5fb1 025929 storet 1 ,mem_op -0x5fb2 025930 rtn -: 025932 parse_lmp_features_res: -0x5fb3 025933 fetcht 8 ,mem_rxbuf + 1 -: 025934 parse_lmp_features_res_not_hci: -0x5fb4 025935 fetch 1 ,mem_conn_sm -0x5fb5 025936 rtnne conn_sm_wait_features_res -0x5fb6 025938 fetch 1 ,mem_connection_options -0x5fb7 025939 bbit0 connection_feature_ext ,parse_lmp_send_conn -0x5fb8 025941 jam conn_sm_send_features_ext ,mem_conn_sm -0x5fb9 025942 rtn -: 025943 parse_lmp_send_conn: -0x5fba 025944 jam conn_sm_send_conn_req ,mem_conn_sm -0x5fbb 025945 rtn -: 025946 parse_lmp_test_activate: -0x5fbc 025947 fetch 1 ,mem_debug_config -0x5fbd 025948 store 1 ,mem_test_mode_old_debug_config -0x5fbe 025949 jam lmp_accepted ,mem_lmo_opcode2 -0x5fbf 025950 jam lmp_test_activate ,mem_lmi_opcode2 -0x5fc0 025951 rtn -: 025952 parse_lmp_test_control: -0x5fc1 025955 jam lmp_accepted ,mem_lmo_opcode2 -0x5fc2 025956 jam lmp_test_control ,mem_lmi_opcode2 -0x5fc3 025957 force 9 ,loopcnt -0x5fc4 025958 arg mem_rxbuf + 1 ,contr -0x5fc5 025959 arg mem_temp_payload ,contw -: 025960 parse_lmp_test_xor: -0x5fc6 025961 ifetch 1 ,contr -0x5fc7 025962 xor_into 0x55 ,pdata -0x5fc8 025963 istore 1 ,contw -0x5fc9 025964 loop parse_lmp_test_xor -0x5fca 025965 fetch 1 ,test_mode_scenario -0x5fcb 025966 fetcht 1 ,mem_tester_emulate -0x5fcc 025967 set0 tester_no_whitening ,temp -0x5fcd 025968 set0 tester_pattern_test ,temp -0x5fce 025969 beq exit_test_mode ,parse_lmp_test_control_exit -0x5fcf 025970 beq pause_test_mode ,parse_lmp_test_control_pause -0x5fd0 025971 beq closed_loop_back_acl ,parse_lmp_test_control_loopback -0x5fd1 025972 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite -0x5fd2 025973 beq closed_loop_back_sco ,parse_lmp_test_control_loopback -0x5fd3 025974 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite -0x5fd4 025975 beq zero_pattern ,parse_lmp_test_control_pattern -0x5fd5 025976 beq one_pattern ,parse_lmp_test_control_pattern -0x5fd6 025977 beq alt_pattern ,parse_lmp_test_control_pattern -0x5fd7 025978 beq alt2_pattern ,parse_lmp_test_control_pattern -0x5fd8 025979 beq pseudorandom ,parse_lmp_test_control_pattern -0x5fd9 025980 rtn -: 025981 parse_lmp_test_control_exit: -0x5fda 025983 fetch 1 ,mem_tester_emulate -0x5fdb 025984 set1 tester_exit ,pdata -0x5fdc 025985 set1 tester_change ,pdata -0x5fdd 025986 store 1 ,mem_tester_emulate -0x5fde 025987 rtn -: 025988 parse_lmp_test_control_pattern: -0x5fdf 025989 set1 tester_pattern_test ,temp -0x5fe0 025990 jam 5 ,mem_lch_code -0x5fe1 025991 fetch 2 ,test_mode_data_length -0x5fe2 025992 iforce loopcnt -0x5fe3 025993 store 2 ,mem_len -0x5fe4 025994 arg mem_rxbuf ,contw -0x5fe5 025995 call pn9 -: 025996 parse_lmp_test_control_loopback_nowhite: -0x5fe6 025997 set1 tester_no_whitening ,temp -: 025998 parse_lmp_test_control_loopback: -0x5fe7 025999 set1 tester_change ,temp -0x5fe8 026000 force 0 ,pdata -0x5fe9 026001 store 1 ,mem_slave_rcvcnt -0x5fea 026002 store 2 ,mem_tst_pktcnt_crc -0x5feb 026003 store 2 ,mem_tst_pktcnt_dmh -0x5fec 026004 store 2 ,mem_tst_pktcnt_hec -0x5fed 026005 store 2 ,mem_tst_pktcnt_sync -0x5fee 026006 fetch 1 ,test_mode_hopping_mode -0x5fef 026007 compare fixed_freq ,pdata ,0xff -0x5ff0 026008 setflag true ,tester_fixed_freq ,temp -0x5ff1 026009 storet 1 ,mem_tester_emulate -0x5ff2 026010 rtn -: 026012 parse_lmp_test_control_pause: -0x5ff3 026013 set0 mark_testmode ,mark -0x5ff4 026014 jam 0 ,mem_tester_emulate -0x5ff5 026015 fetch 1 ,mem_debug_config -0x5ff6 026016 set0 debug_tx_pattern ,pdata -0x5ff7 026017 store 1 ,mem_debug_config -0x5ff8 026018 rtn -: 026024 lmp_copy_rand: -0x5ff9 026025 arg mem_rxbuf + 1 ,contr -0x5ffa 026026 arg mem_random_number ,contw -0x5ffb 026027 branch memcpy16 -: 026029 lmp_generate_key: -0x5ffc 026030 jam lmp_comb_key ,mem_lmo_opcode2 -0x5ffd 026031 rtn -: 026033 lmp_start_encryption: -0x5ffe 026034 nrtn master -0x5fff 026035 jam lmp_start_encryption_req ,mem_lmo_opcode2 -0x6000 026036 rtn -: 026038 lmp_accept_inrand: -0x6001 026039 arg mem_lap ,rega -0x6002 026040 call generate_kinit -0x6003 026041 jam lmp_accepted ,mem_lmo_opcode2 -0x6004 026042 jam lmp_in_rand ,mem_lmi_opcode2 -0x6005 026043 rtn -: 026045 lmp_disconnect: -0x6006 026046 jam 10 ,mem_conn_timer -0x6007 026047 jam lmp_detach ,mem_lmo_opcode2 -0x6008 026048 jam local_host ,mem_disconn_reason_send -0x6009 026049 rtn -: 026055 send_lmp: -0x600a 026056 bpatchx patch30_2 ,mem_patch30 -0x600b 026057 disable user -0x600c 026058 call lmo_fifo_process -0x600d 026059 fetch 1 ,mem_lmp_to_send -0x600e 026060 rtn blank -0x600f 026065 bbit1 7 ,send_lmp_escape -: 026066 send_lmp0: -0x6010 026067 beq lmp_name_req ,send_lmp_name_req -0x6011 026068 beq lmp_name_res ,send_lmp_name_res -0x6012 026069 beq lmp_accepted ,send_lmp_accepted -0x6013 026070 beq lmp_not_accepted ,send_lmp_not_accepted -0x6014 026071 beq lmp_features_req ,send_lmp_features_req -0x6015 026072 beq lmp_features_res ,send_lmp_features_res -0x6016 026073 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res -0x6017 026074 beq lmp_version_req ,send_lmp_version_req -0x6018 026075 beq lmp_version_res ,send_lmp_version_res -0x6019 026076 beq lmp_setup_complete ,send_lmp_setup_complete -0x601a 026077 beq lmp_supervision_timeout ,send_lmp_superto -0x601b 026078 beq lmp_host_connection_req ,send_lmp_no_payload -0x601c 026079 beq lmp_in_rand ,send_lmp_inrand -0x601d 026080 beq lmp_comb_key ,send_lmp_comb_key -0x601e 026081 beq lmp_au_rand ,send_lmp_aurand -0x601f 026082 beq lmp_sres ,send_lmp_sres -0x6020 026083 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req -0x6021 026084 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req -0x6022 026085 beq lmp_start_encryption_req ,send_lmp_start_encryption -0x6023 026086 beq lmp_detach ,send_lmp_detach -0x6024 026087 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req -0x6025 026088 beq lmp_unit_key ,send_lmp_unit_key -0x6026 026090 beq lmp_incr_power_req ,send_lmp_inc_power -0x6027 026091 beq lmp_clkoffset_res ,send_lmp_clkoffset_res -0x6028 026092 beq lmp_max_power ,send_lmp_nopayload_reply -0x6029 026093 beq lmp_max_slot ,send_lmp_max_slot -0x602a 026094 beq lmp_max_slot_req ,send_lmp_max_slot_req -0x602b 026095 beq lmp_min_power ,send_lmp_nopayload_reply -0x602c 026096 beq lmp_slot_offset ,send_lmp_slot_offset -0x602d 026097 beq lmp_switch_req ,send_lmp_switch_req -0x602e 026098 beq lmp_sniff_req ,send_lmp_sniff_req -0x602f 026099 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req -0x6030 026100 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req -0x6031 026101 beq lmp_unsniff_req ,send_lmp_unsniff_req -0x6032 026102 beq lmp_encapsulated_header ,send_lmp_encapsulated_header -0x6033 026103 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload -0x6034 026104 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm -0x6035 026105 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number -0x6036 026106 beq lmp_dhkey_check ,send_lmp_dhkey_check -0x6037 026107 beq lmp_auto_rate ,send_lmp_auto_rate -0x6038 026108 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res -0x6039 026110 beq lmp_clkoffset_req ,send_lmp_clkoffset_req -0x603a 026111 beq lmp_quality_of_service ,send_lmp_quality_of_service -0x603b 026112 beq lmp_test_activate ,send_lmp_test_activate -0x603c 026113 beq lmp_test_control ,send_lmp_test_control -: 026114 send_lmp_error: -0x603d 026115 branch assert -0x603e 026116 rtn -: 026117 send_lmp_escape: -0x603f 026118 beq lmp_ext_accepted ,send_lmpext_accepted -0x6040 026119 beq lmp_ext_features_res ,send_lmpext_features_res -0x6041 026120 beq lmp_not_accepted_ext ,send_lmpext_not_accepted -0x6042 026121 beq lmp_ext_features_req ,send_lmpext_features_req -0x6043 026122 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req -0x6044 026123 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req -0x6045 026124 beq lmp_io_cap_req ,send_lmp_io_cap_req -0x6046 026125 beq lmp_io_cap_res ,send_lmpext_io_cap_res -0x6047 026126 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req -0x6048 026127 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res -0x6049 026128 branch assert -: 026134 send_lmp_accepted: -0x604a 026135 force 2 ,pdata -0x604b 026136 call msg_send_lmp -0x604c 026137 fetch 1 ,mem_lmi_opcode -0x604d 026138 istore 1 ,contw -0x604e 026139 call send_lmp_follow -0x604f 026140 bpatchx patch30_3 ,mem_patch30 -0x6050 026141 fetch 1 ,mem_lmi_opcode -0x6051 026142 beq lmp_in_rand ,send_lmp_accepted_inrand -0x6052 026143 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode -0x6053 026144 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key -0x6054 026145 beq lmp_sniff_req ,send_lmp_accept_sniff_req -0x6055 026146 beq lmp_host_connection_req ,send_lmp_accepted_connection -0x6056 026147 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check -0x6057 026148 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm -0x6058 026149 rtn -: 026151 send_create_conn_start_l2cap_timer_sm: -0x6059 026152 fetch 1 ,mem_conn_sm -0x605a 026153 rtn blank -0x605b 026154 jam conn_sm_wait_done ,mem_conn_sm -0x605c 026155 setarg timer_enpt_waite -0x605d 026156 arg enpt_delay_timer ,queue -0x605e 026157 branch timer_init -: 026159 send_lmp_accept_sniff_req: -0x605f 026160 branch sniff_init -: 026161 send_lmp_not_accepted: -0x6060 026162 force 3 ,pdata -0x6061 026163 call msg_send_lmp -0x6062 026164 fetch 1 ,mem_lmi_opcode -0x6063 026165 beq lmp_au_rand ,send_not_accept_aurand -0x6064 026166 istore 1 ,contw -0x6065 026167 fetch 1 ,mem_lmo_reason -0x6066 026168 istore 1 ,contw -0x6067 026169 branch send_lmp_follow -: 026171 send_not_accept_aurand: -0x6068 026172 istore 1 ,contw -0x6069 026173 fetch 1 ,mem_lmo_reason -0x606a 026174 istore 1 ,contw -0x606b 026175 arg mem_sres_tid ,temp -0x606c 026176 branch special_tid_store -: 026178 send_lmpext_accepted: -0x606d 026179 force 4 ,queue -0x606e 026180 call send_lmpext -0x606f 026181 setarg lmp_escape -0x6070 026182 istore 1 ,contw -0x6071 026183 fetch 1 ,mem_lmi_opcode -0x6072 026184 set0 7 ,pdata -0x6073 026185 istore 1 ,contw -0x6074 026186 fetch 1 ,mem_lmi_opcode -0x6075 026187 branch send_lmp_follow -: 026189 send_lmpext_not_accepted: -0x6076 026190 force 5 ,queue -0x6077 026191 call send_lmpext -0x6078 026192 setarg lmp_escape -0x6079 026193 istore 1 ,contw -0x607a 026194 fetch 1 ,mem_lmi_opcode -0x607b 026195 set0 7 ,pdata -0x607c 026196 istore 1 ,contw -0x607d 026197 fetch 1 ,mem_lmo_reason -0x607e 026198 istore 1 ,contw -0x607f 026199 branch send_lmp_follow -: 026202 send_lmp_accepted_inrand: -0x6080 026203 call clear_linkkey -0x6081 026204 call tid_check -0x6082 026205 rtn true -0x6083 026206 branch lmp_generate_key -: 026208 send_lmp_accepted_enc_mode: -0x6084 026209 fetch 1 ,mem_op -0x6085 026210 bbit1 op_start_enc ,send_lmp_accepted_enc_start -0x6086 026211 rtnbit0 op_stop_enc -0x6087 026212 jam lmp_stop_encryption_req ,mem_lmo_opcode2 -0x6088 026213 set0 op_stop_enc ,pdata -0x6089 026214 call tid_reply -0x608a 026215 branch send_lmp_accepted_enc_exit -: 026216 send_lmp_accepted_enc_start: -0x608b 026217 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 -0x608c 026218 set0 op_start_enc ,pdata -: 026219 send_lmp_accepted_enc_exit: -0x608d 026220 store 1 ,mem_op -0x608e 026221 rtn -: 026223 send_lmp_accepted_enc_key: -0x608f 026224 call check_localsm -0x6090 026225 branch lmp_start_encryption ,true -0x6091 026226 rtn -: 026228 send_lmp_accepted_connection: -0x6092 026229 jam lmp_packet_type_table_req ,mem_lmo_opcode2 -0x6093 026231 fetch 1 ,mem_lmp_conn_state -0x6094 026232 set1 received_conn_req ,pdata -0x6095 026233 store 1 ,mem_lmp_conn_state -0x6096 026234 jam bt_evt_bb_connected ,mem_fifo_temp -0x6097 026235 branch ui_ipc_send_event -: 026238 send_lmp_accept_dhkey_check: -0x6098 026239 rtn -: 026243 send_lmpext_features_res: -0x6099 026244 force 12 ,queue -0x609a 026245 call send_lmpext -0x609b 026246 setarg 0x01 -0x609c 026247 istore 1 ,contw -0x609d 026248 fetch 2 ,mem_lmpext_ssp_enable -0x609e 026249 istore 2 ,contw -0x609f 026250 setarg 0 -0x60a0 026251 istore 3 ,contw -0x60a1 026252 setarg 0x00 -0x60a2 026253 istore 4 ,contw -0x60a3 026254 branch send_lmp_reply -: 026255 send_lmpext_io_cap_res: -0x60a4 026256 force 5 ,queue -0x60a5 026257 call send_lmpext -0x60a6 026258 fetch 3 ,mem_sp_iocap_local -0x60a7 026259 istore 3 ,contw -0x60a8 026260 call send_lmp_reply -0x60a9 026261 jam flag_pairing_state_pairing ,mem_flag_pairing_state -0x60aa 026262 fetch 1 ,mem_sp_iocap_local -0x60ab 026263 beq display_yesno ,responder_iocap_display_yesno -0x60ac 026264 beq keyboard_only ,responder_iocap_keyboard_only -0x60ad 026265 beq no_input_no_output ,responder_iocap_no_input_no_output -0x60ae 026266 rtn -: 026268 responder_iocap_keyboard_only: -0x60af 026269 fetch 1 ,mem_sp_iocap_remote -0x60b0 026270 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only -0x60b1 026271 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno -0x60b2 026272 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only -0x60b3 026273 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output -0x60b4 026274 rtn -: 026277 responder_iocap_display_yesno: -0x60b5 026278 fetch 1 ,mem_sp_iocap_remote -0x60b6 026279 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only -0x60b7 026280 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno -0x60b8 026281 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only -0x60b9 026282 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output -0x60ba 026283 rtn -: 026286 responder_iocap_no_input_no_output: -0x60bb 026287 fetch 1 ,mem_sp_iocap_remote -0x60bc 026288 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only -0x60bd 026289 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno -0x60be 026290 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only -0x60bf 026291 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output -0x60c0 026292 rtn -: 026294 responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: -: 026295 responder_iocap_display_yesno_initiator_iocap_no_input_no_output: -: 026296 responder_iocap_display_yesno_initiator_iocap_display_only: -: 026297 responder_iocap_no_input_no_output_initiator_iocap_display_only: -: 026298 responder_iocap_no_input_no_output_initiator_iocap_display_yesno: -: 026299 responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: -: 026300 responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: -: 026301 set_ssp_mode_justwork: -0x60c1 026302 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag -0x60c2 026303 fetch 1 ,mem_classic_bt_flag -0x60c3 026304 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect -0x60c4 026305 rtn -: 026307 responder_iocap_display_yesno_initiator_iocap_display_yesno: -: 026308 set_ssp_mode_numeric_comparison: -0x60c5 026309 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag -0x60c6 026310 rtn -: 026312 responder_iocap_keyboard_only_initiator_iocap_display_yesno: -: 026313 responder_iocap_keyboard_only_initiator_iocap_keyboard_only: -: 026314 responder_iocap_keyboard_only_initiator_iocap_display_only: -: 026315 responder_iocap_display_yesno_initiator_iocap_keyboard_only: -: 026316 set_ssp_mode_passkey: -0x60c7 026317 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag -0x60c8 026318 rtn -: 026321 classic_bt_set_reject_justwork_flag: -0x60c9 026322 arg flag_ssp_reject_justwork ,queue -0x60ca 026323 branch classic_bluetooth_set_flag -: 026325 classic_bt_clr_reject_justwork_flag: -0x60cb 026326 arg flag_ssp_reject_justwork ,queue -0x60cc 026327 branch classic_bluetooth_clr_flag -: 026329 classic_bluetooth_set_flag: -0x60cd 026330 fetch 1 ,mem_classic_bt_flag -0x60ce 026331 qset1 pdata -0x60cf 026332 store 1 ,mem_classic_bt_flag -0x60d0 026333 rtn -: 026335 classic_bluetooth_clr_flag: -0x60d1 026336 fetch 1 ,mem_classic_bt_flag -0x60d2 026337 qset0 pdata -0x60d3 026338 store 1 ,mem_classic_bt_flag -0x60d4 026339 rtn -: 026342 send_lmp_io_cap_req: -0x60d5 026343 force 5 ,queue -0x60d6 026344 call send_lmpext -0x60d7 026345 fetch 3 ,mem_sp_iocap_local -0x60d8 026346 istore 3 ,contw -0x60d9 026347 branch send_lmp_request -: 026350 send_lmpext_sniff_subrating_req: -0x60da 026352 rtn -: 026353 send_lmpext_sniff_subrating_res: -0x60db 026354 force 9 ,queue -0x60dc 026355 call send_lmpext -0x60dd 026356 fetch 1 ,mem_subsniff_rate -0x60de 026357 istore 1 ,contw -0x60df 026358 fetch 2 ,mem_subsniff_tcmax -0x60e0 026359 istore 2 ,contw -0x60e1 026360 fetch 4 ,mem_subsniff_instant -0x60e2 026361 istore 4 ,contw -0x60e3 026362 branch send_lmp_reply -: 026364 send_lmp_name_res: -0x60e4 026365 force 17 ,pdata -0x60e5 026366 call msg_send_lmp -0x60e6 026367 fetch 1 ,mem_lmi_opcode -0x60e7 026368 copy pdata ,temp -0x60e8 026369 beq 0x00 ,send_lmp_name_res_offset_ok -0x60e9 026370 beq 0x0e ,send_lmp_name_res_offset_ok -0x60ea 026371 beq 0x1c ,send_lmp_name_res_offset_ok -0x60eb 026372 rtn -: 026373 send_lmp_name_res_offset_ok: -0x60ec 026374 istore 1 ,contw -0x60ed 026375 fetch 1 ,mem_local_name_length -0x60ee 026376 istore 1 ,contw -0x60ef 026377 arg 14 ,loopcnt -0x60f0 026378 setarg mem_local_name -0x60f1 026379 iadd temp ,contr -0x60f2 026380 call memcpy -0x60f3 026381 branch send_lmp_reply -: 026384 send_lmp_timing_accuracy_res: -0x60f4 026385 force 3 ,pdata -0x60f5 026386 call msg_send_lmp -0x60f6 026387 setarg 0x0114 -0x60f7 026388 istore 2 ,contw -0x60f8 026389 branch send_lmp_reply -: 026391 send_lmp_clkoffset_res: -0x60f9 026393 force 3 ,pdata -0x60fa 026394 call msg_send_lmp -0x60fb 026395 fetch 4 ,mem_clke_bt -0x60fc 026396 isub clkn_bt ,pdata -0x60fd 026397 branch send_lmp_clkoffset_res_master ,master -0x60fe 026398 sub pdata ,0 ,pdata -: 026399 send_lmp_clkoffset_res_master: -0x60ff 026401 rshift2 pdata ,pdata -0x6100 026402 set0 15 ,pdata -0x6101 026403 istore 2 ,contw -0x6102 026404 branch send_lmp_reply -: 026406 send_lmp_version_res: -0x6103 026407 force 6 ,pdata -0x6104 026408 call msg_send_lmp -0x6105 026409 fetch 5 ,mem_lmp_version -0x6106 026410 istore 5 ,contw -0x6107 026411 branch send_lmp_reply -: 026413 send_lmp_features_res: -0x6108 026414 force 9 ,pdata -0x6109 026415 call msg_send_lmp -0x610a 026416 fetch 8 ,mem_features -0x610b 026417 istore 8 ,contw -0x610c 026418 branch send_lmp_reply -: 026425 send_lmpext_features_req: -0x610d 026426 force 12 ,queue -0x610e 026427 call send_lmpext -0x610f 026428 setarg 0x01 -0x6110 026429 istore 1 ,contw -0x6111 026430 fetch 2 ,mem_lmpext_ssp_enable -0x6112 026431 istore 2 ,contw -0x6113 026432 setarg 0 -0x6114 026433 istore 3 ,contw -0x6115 026434 setarg 0x00 -0x6116 026435 istore 4 ,contw -0x6117 026436 branch send_lmp_request -: 026438 send_lmpext_packet_type_table_req: -0x6118 026439 force 3 ,queue -0x6119 026440 call send_lmpext -0x611a 026441 fetch 1 ,mem_ptt -0x611b 026442 istore 1 ,contw -0x611c 026443 disable user -0x611d 026444 call send_lmp_request -0x611e 026445 nrtn user -0x611f 026446 nrtn master -0x6120 026447 fetch 1 ,mem_afh_cfg -0x6121 026448 rtnbit0 afh_cfg_on -0x6122 026449 call afh_init -0x6123 026450 branch afh_open_all_channels -: 026453 ssp_enable: -0x6124 026454 bpatchx patch30_4 ,mem_patch30 -0x6125 026455 fetch 1 ,mem_features + 6 -0x6126 026456 set1 param_featrue_ssp ,pdata -0x6127 026457 store 1 ,mem_features + 6 -0x6128 026458 setarg param_lmpext_ssp_enable -0x6129 026459 store 2 ,mem_lmpext_ssp_enable -0x612a 026460 rtn -: 026462 ssp_disable: -0x612b 026463 bpatchx patch30_5 ,mem_patch30 -0x612c 026464 fetch 1 ,mem_features + 6 -0x612d 026465 set0 param_featrue_ssp ,pdata -0x612e 026466 store 1 ,mem_features + 6 -0x612f 026467 setarg 0 -0x6130 026468 store 2 ,mem_lmpext_ssp_enable -0x6131 026469 rtn -: 026471 afh_init: -0x6132 026472 jam 0x3 ,mem_afh_cfg -0x6133 026473 setarg 0 -0x6134 026474 store 4 ,mem_afh_timer -0x6135 026475 arg mem_afh_map_lo ,contw -0x6136 026476 call afh_reset_map -0x6137 026477 arg mem_afh_map_new ,contw -0x6138 026478 call afh_reset_map -0x6139 026479 arg mem_afh_classify_channel_map ,contw -0x613a 026480 call afh_reset_map -0x613b 026481 branch afh_clear_error_counter -: 026482 afh_open_all_channels: -0x613c 026483 arg mem_afh_map_new ,contw -0x613d 026484 call afh_reset_map -0x613e 026485 call afh_clear_error_counter -0x613f 026486 branch afh_set_send_flag -: 026489 afh_reset_map: -0x6140 026490 setarg 0xffffff -0x6141 026491 istore 3 ,contw -0x6142 026492 istore 3 ,contw -0x6143 026493 istore 3 ,contw -0x6144 026494 setarg 0x7f -0x6145 026495 istore 1 ,contw -0x6146 026496 rtn -: 026497 afh_clear_error_counter: -0x6147 026498 setarg 0 -0x6148 026499 store 2 ,mem_afh_error_total -0x6149 026500 rtn -: 026501 afh_set_send_flag: -0x614a 026502 fetch 1 ,mem_afh_cfg -0x614b 026503 set1 send_lmp_set_afh ,pdata -0x614c 026504 store 1 ,mem_afh_cfg -0x614d 026505 rtn -: 026508 send_lmpext_pause_encryption_req: -0x614e 026509 force 2 ,queue -0x614f 026510 call send_lmpext -0x6150 026511 nbranch send_lmp_reply ,master -0x6151 026513 branch send_lmp_request -: 026517 send_lmp_detach: -0x6152 026518 force 2 ,pdata -0x6153 026519 call msg_send_lmp -0x6154 026520 fetch 1 ,mem_disconn_reason_send -0x6155 026521 istore 1 ,contw -0x6156 026522 call send_lmp_request -: 026523 prepare_disconnect: -0x6157 026524 fetch 1 ,mem_op -0x6158 026525 set1 op_disconn ,pdata -0x6159 026526 store 1 ,mem_op -0x615a 026527 jam 50 ,mem_conn_timer -0x615b 026528 rtn -: 026531 send_lmp_no_payload: -0x615c 026532 force 1 ,pdata -0x615d 026533 call msg_send_lmp -0x615e 026534 branch send_lmp_request -: 026535 send_lmp_nopayload_reply: -0x615f 026536 force 1 ,pdata -0x6160 026537 call msg_send_lmp -0x6161 026538 branch send_lmp_reply -: 026541 send_lmp_encryption_mode_req: -0x6162 026542 force 2 ,pdata -0x6163 026543 call msg_send_lmp -0x6164 026544 fetch 1 ,mem_state_map -0x6165 026545 isolate0 smap_encryption ,pdata -0x6166 026546 setflag true ,0 ,pdata -0x6167 026547 and_into 1 ,pdata -0x6168 026548 istore 1 ,contw -0x6169 026549 branch send_lmp_request -: 026552 send_lmp_superto: -0x616a 026553 force 3 ,pdata -0x616b 026554 call msg_send_lmp -0x616c 026555 fetch 2 ,mem_supervision_to -0x616d 026556 istore 2 ,contw -0x616e 026557 branch send_lmp_request -: 026559 send_lmp_name_req: -0x616f 026560 jam 250 ,mem_conn_timer -0x6170 026561 force 2 ,pdata -0x6171 026562 call msg_send_lmp -0x6172 026563 fetch 1 ,mem_name_offset -0x6173 026564 istore 1 ,contw -0x6174 026565 branch send_lmp_request -: 026567 send_lmp_test_control: -0x6175 026568 force 10 ,pdata -0x6176 026569 call msg_send_lmp -0x6177 026570 arg mem_temp_payload ,contr -0x6178 026571 force 9 ,loopcnt -: 026572 send_lmp_test_control_loop: -0x6179 026573 ifetch 1 ,contr -0x617a 026574 xor_into 0x55 ,pdata -0x617b 026575 istore 1 ,contw -0x617c 026576 loop send_lmp_test_control_loop -0x617d 026577 branch send_lmp_request -: 026579 send_lmp_quality_of_service_req: -0x617e 026580 branch send_lmp_request -: 026581 send_lmp_unit_key: -0x617f 026582 branch send_lmp_request -: 026584 send_lmp_slot_offset: -0x6180 026585 rtn master -0x6181 026586 call calc_slot_offset -0x6182 026587 force 9 ,pdata -0x6183 026588 call msg_send_lmp -0x6184 026589 fetch 2 ,mem_slot_offset -0x6185 026590 istore 2 ,contw -0x6186 026591 fetch 3 ,mem_lap -0x6187 026592 istore 3 ,contw -0x6188 026593 fetch 1 ,mem_uap -0x6189 026594 istore 1 ,contw -0x618a 026595 fetch 2 ,mem_nap -0x618b 026596 istore 2 ,contw -0x618c 026597 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply -0x618d 026598 set0 mark_switch_initiated ,mark -0x618e 026599 call send_lmp_request -0x618f 026600 jam lmp_switch_req ,mem_lmo_opcode2 -0x6190 026601 rtn -: 026602 send_lmp_slot_offset_reply: -0x6191 026603 call send_lmp_reply -0x6192 026604 jam lmp_accepted ,mem_lmo_opcode2 -0x6193 026605 jam lmp_switch_req ,mem_lmi_opcode2 -0x6194 026606 rtn -: 026608 send_lmp_switch_req: -0x6195 026609 arg 0x200 ,temp -0x6196 026610 branch switch_on_native ,master -0x6197 026611 deposit clke_bt -0x6198 026612 branch switch_slack -: 026613 switch_on_native: -0x6199 026614 deposit clkn_bt -: 026615 switch_slack: -0x619a 026616 deposit bt_clk -0x619b 026617 iadd temp ,pdata -0x619c 026618 and_into 0x1fc ,pdata -0x619d 026619 store 4 ,mem_sniff_anchor -0x619e 026620 force 5 ,pdata -0x619f 026621 call msg_send_lmp -0x61a0 026622 fetch 4 ,mem_sniff_anchor -0x61a1 026623 rshift pdata ,pdata -0x61a2 026624 istore 4 ,contw -0x61a3 026625 branch send_lmp_request -: 026627 send_lmp_sniff_req: -0x61a4 026628 force 10 ,pdata -0x61a5 026629 call msg_send_lmp -0x61a6 026630 arg mem_sniff_payload ,contr -0x61a7 026631 ifetch 9 ,contr -0x61a8 026632 istore 9 ,contw -0x61a9 026633 branch send_lmp_request -: 026636 send_lmp_timing_accuracy_req: -0x61aa 026638 force 3 ,pdata -0x61ab 026639 call msg_send_lmp -0x61ac 026640 setarg 0x0114 -0x61ad 026641 istore 2 ,contw -0x61ae 026642 branch send_lmp_request -: 026644 send_lmp_unsniff_req: -0x61af 026646 force 1 ,pdata -0x61b0 026647 call msg_send_lmp -0x61b1 026656 branch send_lmp_request -: 026659 send_lmp_max_slot: -0x61b2 026660 force 2 ,pdata -0x61b3 026661 call msg_send_lmp -0x61b4 026662 fetch 1 ,mem_max_slot -0x61b5 026663 istore 1 ,contw -0x61b6 026664 branch send_lmp_request -: 026667 send_lmp_max_slot_req: -0x61b7 026668 force 2 ,pdata -0x61b8 026669 call msg_send_lmp -0x61b9 026670 setarg 0x05 -0x61ba 026671 istore 1 ,contw -0x61bb 026672 branch send_lmp_request -: 026675 send_lmp_inc_power: -0x61bc 026676 force 2 ,pdata -0x61bd 026677 call msg_send_lmp -0x61be 026678 setarg 0x00 -0x61bf 026679 istore 1 ,contw -0x61c0 026680 branch send_lmp_request -: 026683 send_lmp_setup_complete_by_module: -0x61c1 026684 jam lmp_max_slot_req ,mem_lmo_opcode2 -0x61c2 026685 rtn -: 026686 send_lmp_setup_complete: -0x61c3 026687 fetch 1 ,mem_device_option -0x61c4 026688 sub pdata ,dvc_op_module ,null -0x61c5 026689 call send_lmp_setup_complete_by_module ,zero -0x61c6 026690 fetch 1 ,mem_state -0x61c7 026691 set1 state_conn_comp ,pdata -0x61c8 026692 store 1 ,mem_state -0x61c9 026693 copy clkn_bt ,pdata -0x61ca 026694 store 4 ,mem_aurand_send_delay_time -0x61cb 026695 fetch 1 ,mem_lmp_conn_state -0x61cc 026696 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent -0x61cd 026697 set1 sent_setup_complete ,pdata -0x61ce 026698 store 1 ,mem_lmp_conn_state -0x61cf 026699 jam bt_evt_setup_complete ,mem_fifo_temp -0x61d0 026700 call ui_ipc_send_event -0x61d1 026701 force 1 ,pdata -0x61d2 026702 call msg_send_lmp -0x61d3 026703 branch send_lmp_request -: 026704 send_lmp_setup_complete_has_sent: -0x61d4 026705 jam 0 ,mem_lmp_to_send -0x61d5 026706 rtn -: 026708 send_lmp_version_req: -0x61d6 026709 force 6 ,pdata -0x61d7 026710 call msg_send_lmp -0x61d8 026711 fetch 5 ,mem_lmp_version -0x61d9 026712 istore 5 ,contw -0x61da 026713 branch send_lmp_request -: 026715 send_lmp_features_req: -0x61db 026716 force 9 ,pdata -0x61dc 026717 call msg_send_lmp -0x61dd 026718 fetch 8 ,mem_features -0x61de 026719 istore 8 ,contw -0x61df 026720 branch send_lmp_request -: 026722 sp_master_send_io_cap_get: -0x61e0 026723 jam sp_flag_commit ,mem_master_sp_flag -0x61e1 026724 fetch 1 ,mem_sp_local_key_invalid -0x61e2 026725 rtnne sp_key_valid -0x61e3 026726 jam sp_master_stat_start_done ,mem_master_sp_state -0x61e4 026727 rtn -: 026729 sp_master_send_io_cap_send: -0x61e5 026730 call tid_initiate -0x61e6 026731 jam lmp_io_cap_req ,mem_lmo_opcode2 -0x61e7 026732 jam sp_stat_key_send ,mem_master_sp_state -0x61e8 026733 rtn -: 026736 sp_master_send_lmp_encapsulated_header: -0x61e9 026737 call tid_initiate -0x61ea 026738 jam lmp_encapsulated_header ,mem_lmo_opcode2 -0x61eb 026739 jam sp_stat_random_send ,mem_master_sp_state -0x61ec 026740 rtn -: 026742 sp_master_commitment_compare: -0x61ed 026743 arg mem_sp_calc_result_high ,rega -0x61ee 026744 arg mem_sp_confirm_remote ,regb -0x61ef 026745 arg 16 ,loopcnt -0x61f0 026746 call string_compare -0x61f1 026747 branch sp_master_commitment_compare_success ,zero -0x61f2 026748 jam sp_stat_null ,mem_master_sp_state -0x61f3 026749 call master_clear_mem_master_sp_flag -0x61f4 026750 jam pdu_not_allowed ,mem_lmo_reason2 -0x61f5 026751 jam lmp_simple_pairing_number ,mem_lmi_opcode2 -0x61f6 026752 branch reject_lmp_packet -: 026753 sp_master_commitment_compare_success: -0x61f7 026754 jam sp_stat_confirm_calc ,mem_master_sp_state -0x61f8 026755 call master_set_mem_master_sp_flag -0x61f9 026756 jam lmp_simple_pairing_number ,mem_lmi_opcode2 -0x61fa 026757 branch accept_lmp_msg -: 026761 sp_master_send_lmp_simple_pairing_number: -0x61fb 026762 jam lmp_simple_pairing_number ,mem_lmo_opcode2 -0x61fc 026763 rtn -: 026767 sp_send_lmp_encapsulated_header: -0x61fd 026770 jam lmp_encapsulated_header ,mem_lmo_opcode2 -0x61fe 026772 rtn -: 026778 send_lmp_encapsulated_header: -0x61ff 026779 jam 0 ,mem_sp_local_key_send_count -0x6200 026780 force 4 ,pdata -0x6201 026781 call msg_send_lmp -0x6202 026782 force encapsulated_major_type_p192 ,pdata -0x6203 026783 istore 1 ,contw -0x6204 026784 force encapsulated_minor_type_p192 ,pdata -0x6205 026785 istore 1 ,contw -0x6206 026786 force encapsulated_len_p192 ,pdata -0x6207 026787 istore 1 ,contw -0x6208 026788 call check_localsm -0x6209 026789 branch send_lmp_request ,true -0x620a 026790 branch send_lmp_reply -: 026792 send_lmp_encapsulated_payload: -0x620b 026794 force 17 ,pdata -0x620c 026795 call msg_send_lmp -0x620d 026796 fetch 1 ,mem_sp_local_key_send_count -0x620e 026797 arg mem_sp_pubkey_local ,contr -0x620f 026798 iadd contr ,contr -0x6210 026799 ifetch 8 ,contr -0x6211 026800 istore 8 ,contw -0x6212 026801 ifetch 8 ,contr -0x6213 026802 istore 8 ,contw -0x6214 026803 fetch 1 ,mem_sp_local_key_send_count -0x6215 026804 increase 16 ,pdata -0x6216 026805 store 1 ,mem_sp_local_key_send_count -0x6217 026806 call check_localsm -0x6218 026807 branch send_lmp_request ,true -0x6219 026808 branch send_lmp_reply -: 026811 sp_send_lmp_simple_pairing_comfirm: -0x621a 026812 jam sp_stat_random_recv ,mem_sp_state -0x621b 026813 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 -0x621c 026814 rtn -: 026815 send_lmp_simple_pairing_comfirm: -0x621d 026818 force 17 ,pdata -0x621e 026819 call msg_send_lmp -0x621f 026820 arg mem_sp_calc_result_high ,contr -0x6220 026821 ifetch 8 ,contr -0x6221 026822 istore 8 ,contw -0x6222 026823 ifetch 8 ,contr -0x6223 026824 istore 8 ,contw -0x6224 026825 branch send_lmp_reply -: 026827 sp_send_lmp_simple_pairing_number: -0x6225 026828 jam lmp_simple_pairing_number ,mem_lmo_opcode2 -0x6226 026829 rtn -: 026831 send_lmp_simple_pairing_number: -0x6227 026833 call check_localsm -0x6228 026834 call sp_local_random_key_generator ,true -0x6229 026835 force 17 ,pdata -0x622a 026836 call msg_send_lmp -0x622b 026837 arg mem_sp_random_local ,contr -0x622c 026838 ifetch 8 ,contr -0x622d 026839 istore 8 ,contw -0x622e 026840 ifetch 8 ,contr -0x622f 026841 istore 8 ,contw -0x6230 026842 call check_localsm -0x6231 026843 nbranch send_lmp_reply ,true -0x6232 026844 branch send_lmp_request ,true -: 026846 master_sp_sm_end: -0x6233 026848 jam sp_stat_done ,mem_master_sp_state -: 026849 sp_aurand_send: -0x6234 026850 call tid_initiate -0x6235 026851 jam lmp_au_rand ,mem_lmo_opcode2 -0x6236 026852 call check_localsm_master -0x6237 026853 branch sp_master_key_prarm_push ,true -0x6238 026854 branch sp_link_key_prarm_push -: 026855 master_sp_send_lmp_dhkey_check: -0x6239 026856 call tid_reply -: 026857 sp_send_lmp_dhkey_check: -0x623a 026858 jam lmp_dhkey_check ,mem_lmo_opcode2 -0x623b 026859 rtn -: 026860 send_lmp_dhkey_check: -0x623c 026862 force 17 ,pdata -0x623d 026863 call msg_send_lmp -0x623e 026864 arg mem_sp_calc_result_high ,contr -0x623f 026865 ifetch 8 ,contr -0x6240 026866 istore 8 ,contw -0x6241 026867 ifetch 8 ,contr -0x6242 026868 istore 8 ,contw -0x6243 026869 call check_localsm -0x6244 026870 nbranch send_lmp_reply ,true -0x6245 026871 branch send_lmp_request ,true -: 026873 send_lmp_enc_key_size_mask_res: -0x6246 026874 force 3 ,pdata -0x6247 026875 call msg_send_lmp -0x6248 026876 setarg 0xfffe -0x6249 026877 istore 2 ,contw -0x624a 026878 branch send_lmp_reply -: 026880 send_lmp_auto_rate: -0x624b 026881 branch send_lmp_request -: 026882 send_lmp_clkoffset_req: -0x624c 026883 branch send_lmp_request -: 026884 send_lmp_quality_of_service: -0x624d 026885 branch send_lmp_request -: 026886 send_lmp_test_activate: -0x624e 026887 branch send_lmp_request -: 026892 send_lmp_comb_key: -0x624f 026893 call generate_random_number -0x6250 026894 arg mem_lap ,rega -0x6251 026895 call generate_linkkey -0x6252 026896 force 17 ,pdata -0x6253 026897 call msg_send_lmp -0x6254 026898 arg mem_kinit ,rega -0x6255 026899 arg mem_random_number ,regb -0x6256 026900 call xor16 -0x6257 026901 nbranch send_lmp_follow ,master -0x6258 026902 branch send_lmp_tid -: 026904 send_lmp_inrand: -0x6259 026905 call generate_random_number -0x625a 026906 arg mem_plap ,rega -0x625b 026907 call generate_kinit -: 026908 send_lmp_rand: -0x625c 026909 force 17 ,pdata -0x625d 026910 call msg_send_lmp -0x625e 026911 arg mem_random_number ,contr -0x625f 026912 call memcpy16 -0x6260 026913 fetch 1 ,mem_conn_sm -0x6261 026914 beq conn_sm_auth_wait ,send_lmp_request -0x6262 026915 beq conn_sm_pairing_wait ,send_lmp_request -0x6263 026916 branch send_lmp_tid -: 026918 send_lmp_aurand: -0x6264 026919 fetch 1 ,mem_pairing_auth -0x6265 026920 branch send_lmp_aurand_notpairing ,blank -0x6266 026921 call check_localsm -0x6267 026922 call tid_initiate ,true -0x6268 026923 ncall tid_reply ,true -0x6269 026924 branch send_lmp_aurand_common -: 026925 send_lmp_aurand_notpairing: -0x626a 026926 call tid_initiate -: 026927 send_lmp_aurand_common: -0x626b 026928 call generate_random_number -0x626c 026929 branch send_lmp_rand -: 026931 send_lmp_sres: -0x626d 026932 arg mem_lap ,rega -0x626e 026933 call function_e1 -0x626f 026934 force 5 ,pdata -0x6270 026935 call msg_send_lmp -0x6271 026936 fetch 4 ,mem_input_store -0x6272 026937 istore 4 ,contw -0x6273 026938 arg mem_sres_tid ,temp -0x6274 026939 call special_tid_store -0x6275 026940 call copy_aco -0x6276 026941 call check_localsm -0x6277 026942 branch send_lmp_sres_master ,true -0x6278 026943 jam done_encryp ,mem_wait_encryption -0x6279 026944 fetch 1 ,mem_pairing_auth -0x627a 026945 rtn blank -0x627b 026946 jam lmp_au_rand ,mem_lmo_opcode2 -: 026947 send_lmp_sres_master: -0x627c 026948 fetch 1 ,mem_link_key_exists -0x627d 026949 rtn blank -: 026950 send_lmp_sres_startenc: -0x627e 026951 call check_localsm -0x627f 026952 nbranch send_lmp_sres_startenc_slave ,true -0x6280 026953 fetch 1 ,mem_auth_enable -0x6281 026954 rtn blank -0x6282 026955 jam lmp_encryption_mode_req ,mem_lmo_opcode2 -0x6283 026956 rtn -: 026957 send_lmp_sres_startenc_slave: -0x6284 026958 rtnmark0 mark_slave_in_rand_accepted -0x6285 026959 set0 mark_slave_in_rand_accepted ,mark -0x6286 026960 jam lmp_encryption_mode_req ,mem_lmo_opcode2 -0x6287 026961 rtn -: 026965 send_lmp_start_encryption: -0x6288 026966 call generate_random_number -0x6289 026967 call function_e3 -0x628a 026968 force 17 ,pdata -0x628b 026969 call msg_send_lmp -0x628c 026970 arg mem_random_number ,contr -0x628d 026971 call memcpy16 -0x628e 026972 branch send_lmp_tid -: 026974 send_lmp_stop_encryption_req: -0x628f 026975 force 1 ,pdata -0x6290 026976 call msg_send_lmp -0x6291 026977 branch send_lmp_tid -: 026979 send_lmp_encryption_key_size_req: -0x6292 026980 force 2 ,pdata -0x6293 026981 call msg_send_lmp -0x6294 026982 force 16 ,pdata -0x6295 026983 istore 1 ,contw -0x6296 026984 store 1 ,mem_key_size -0x6297 026985 branch send_lmp_tid -: 026987 msg_send_lmp: -0x6298 026989 lshift3 pdata ,pdata -0x6299 026990 or_into 0x07 ,pdata -0x629a 026991 store 1 ,mem_lmo_header_length -0x629b 026992 arg 17 ,loopcnt -0x629c 026993 arg mem_lmo_payload ,contw -0x629d 026994 call clear_mem -0x629e 026995 arg mem_lmo_payload ,contw -0x629f 026996 rtn -: 026998 send_lmpext: -0x62a0 026999 and pdata ,0x7f ,rega -0x62a1 027000 jam lmp_escape ,mem_lmp_to_send -0x62a2 027001 deposit queue -0x62a3 027002 call msg_send_lmp -0x62a4 027003 deposit rega -0x62a5 027004 istore 1 ,contw -0x62a6 027005 rtn -: 027007 send_lmp_follow: -0x62a7 027008 fetch 1 ,mem_lmp_to_send -0x62a8 027009 lshift pdata ,pdata -0x62a9 027010 fetcht 1 ,mem_state_map -0x62aa 027011 isolate1 smap_lmptid ,temp -0x62ab 027012 setflag true ,0 ,pdata -0x62ac 027013 branch send_lmp_exit -: 027016 send_lmp_tid: -0x62ad 027017 fetcht 1 ,mem_state_map -0x62ae 027018 and_into 1 ,temp -0x62af 027019 branch send_lmp_end -: 027021 send_lmp_reply: -0x62b0 027022 force 0 ,temp -0x62b1 027023 branch send_lmp_end -: 027025 send_lmp_request: -0x62b2 027026 force 1 ,temp -: 027027 send_lmp_end: -0x62b3 027028 fetch 1 ,mem_lmp_to_send -0x62b4 027029 lshift pdata ,pdata -0x62b5 027030 setflag master ,0 ,pdata -0x62b6 027031 ixor temp ,pdata -: 027032 send_lmp_exit: -0x62b7 027033 store 1 ,mem_lmo_header_opcode -0x62b8 027034 jam 0 ,mem_lmp_to_send -0x62b9 027035 call lmo_fifo_process_lmo0empty -0x62ba 027036 enable user -0x62bb 027037 rtn -: 027040 lmo_fifo_check: -0x62bc 027041 fetch 1 ,mem_lmo_opcode2 -0x62bd 027042 rtn blank -0x62be 027043 call lmo_fifo_process -0x62bf 027044 fetch 1 ,mem_lmo_opcode2 -0x62c0 027045 rtn -: 027047 lmo_fifo_process: -0x62c1 027048 bpatchx patch30_6 ,mem_patch30 -0x62c2 027049 fetch 1 ,mem_lmp_to_send -0x62c3 027050 branch lmo_fifo_process_lmo0empty ,blank -0x62c4 027051 fetch 1 ,mem_lmo_opcode1 -0x62c5 027052 nrtn blank -0x62c6 027053 branch lmo_fifo_process_lmo2to1 -: 027054 lmo_fifo_process_lmo0empty: -0x62c7 027055 fetch 1 ,mem_lmo_opcode1 -0x62c8 027056 branch lmo_fifo_process_lmo1_empty ,blank -0x62c9 027057 fetch 3 ,mem_lmo_opcode1 -0x62ca 027058 store 3 ,mem_lmp_to_send -0x62cb 027059 fetcht 1 ,mem_lmo_tid1 -0x62cc 027060 fetch 1 ,mem_state_map -0x62cd 027061 set0 smap_lmptid ,pdata -0x62ce 027062 ior temp ,pdata -0x62cf 027063 store 1 ,mem_state_map -0x62d0 027064 jam 0 ,mem_lmo_opcode1 -: 027065 lmo_fifo_process_lmo2to1: -0x62d1 027066 fetch 1 ,mem_lmo_opcode2 -0x62d2 027067 rtn blank -0x62d3 027068 fetch 4 ,mem_lmo_opcode2 -0x62d4 027069 store 4 ,mem_lmo_opcode1 -0x62d5 027070 jam 0 ,mem_lmo_opcode2 -0x62d6 027071 rtn -: 027072 lmo_fifo_process_lmo1_empty: -0x62d7 027073 fetch 1 ,mem_lmo_opcode2 -0x62d8 027074 rtn blank -0x62d9 027075 fetch 3 ,mem_lmo_opcode2 -0x62da 027076 store 3 ,mem_lmp_to_send -0x62db 027077 fetcht 1 ,mem_lmo_tid2 -0x62dc 027078 fetch 1 ,mem_state_map -0x62dd 027079 set0 smap_lmptid ,pdata -0x62de 027080 ior temp ,pdata -0x62df 027081 store 1 ,mem_state_map -0x62e0 027082 jam 0 ,mem_lmo_opcode2 -0x62e1 027083 rtn -: 027086 special_tid_store: -0x62e2 027087 bpatchx patch30_7 ,mem_patch30 -0x62e3 027088 fetch 1 ,mem_state_map -0x62e4 027089 copy pdata ,regc -0x62e5 027090 ifetch 1 ,temp -0x62e6 027091 call pop_tid_follow -0x62e7 027092 call send_lmp_follow -0x62e8 027093 copy regc ,pdata -0x62e9 027094 store 1 ,mem_state_map -0x62ea 027095 rtn -: 027097 tid_reply: -0x62eb 027098 fetcht 1 ,mem_state_map -0x62ec 027099 set0 smap_lmptidinit ,temp -0x62ed 027100 storet 1 ,mem_state_map -0x62ee 027101 rtn -: 027103 tid_initiate: -0x62ef 027104 fetcht 1 ,mem_state_map -0x62f0 027105 set1 smap_lmptidinit ,temp -0x62f1 027106 storet 1 ,mem_state_map -0x62f2 027107 rtn -: 027110 tid_check: -0x62f3 027111 nsetflag master ,smap_lmptid ,pdata -0x62f4 027112 fetcht 1 ,mem_state_map -0x62f5 027113 ixor temp ,pdata -0x62f6 027114 isolate1 smap_lmptid ,pdata -0x62f7 027115 rtn -: 027118 tid_set_reply: -0x62f8 027119 fetch 1 ,mem_state_map -0x62f9 027120 setflag master ,smap_lmptid ,pdata -0x62fa 027121 store 1 ,mem_state_map -0x62fb 027122 rtn -: 027125 check_localsm: -0x62fc 027126 fetch 1 ,mem_sp_localsm -0x62fd 027127 compare local_statemachine ,pdata ,0x7f -0x62fe 027128 rtn -: 027129 setlocalsm_master: -0x62ff 027130 fetch 1 ,mem_sp_localsm -0x6300 027131 set1 7 ,pdata -0x6301 027132 store 1 ,mem_sp_localsm -0x6302 027133 rtn -: 027134 setlocalsm_slave: -0x6303 027135 fetch 1 ,mem_sp_localsm -0x6304 027136 set0 7 ,pdata -0x6305 027137 store 1 ,mem_sp_localsm -0x6306 027138 rtn -: 027139 check_localsm_master: -0x6307 027140 fetch 1 ,mem_sp_localsm -0x6308 027141 isolate1 7 ,pdata -0x6309 027142 store 1 ,mem_sp_localsm -0x630a 027143 rtn -: 027145 generate_random_number: -0x630b 027147 arg mem_random_number ,contw -: 027148 generate_random: -0x630c 027149 force 16 ,loopcnt -: 027150 generate_random_another: -: 027151 generate_random_loop: -0x630d 027152 random pdata -0x630e 027153 istore 1 ,contw -0x630f 027154 loop generate_random_another -0x6310 027155 rtn -: 027157 generate_linkkey: -0x6311 027158 call function_e21 -0x6312 027159 arg mem_link_key ,rega -0x6313 027160 arg mem_input_store ,regb -0x6314 027161 ifetch 8 ,rega -0x6315 027162 fetcht 1 ,mem_state -0x6316 027163 nsetflag blank ,state_combkey ,temp -0x6317 027164 storet 1 ,mem_state -0x6318 027165 copy rega ,contw -0x6319 027166 call xor16 -0x631a 027167 branch generate_linkkey_continue -: 027173 process_conn_sm: -0x631b 027175 bpatchx patch31_0 ,mem_patch31 -0x631c 027177 call lmo_fifo_check -0x631d 027178 nrtn blank -: 027179 process_conn_sm_continue: -0x631e 027180 fetch 1 ,mem_conn_sm -0x631f 027181 rtn blank -0x6320 027185 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req -0x6321 027186 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept -0x6322 027187 beq conn_sm_send_features ,host_create_conn_send_features -0x6323 027188 beq conn_sm_wait_features_res ,host_create_conn_waiting -0x6324 027189 beq conn_sm_send_switch ,host_create_conn_send_switch -0x6325 027190 beq conn_sm_auth_pair ,host_create_conn_auth_pair -0x6326 027191 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait -0x6327 027192 beq conn_sm_encrypt ,host_create_conn_encrypt -0x6328 027193 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait -0x6329 027194 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear -0x632a 027195 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete -0x632b 027196 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete -0x632c 027197 beq conn_sm_detach_delay ,host_create_conn_master_detach -0x632d 027198 beq conn_sm_send_version ,host_create_conn_send_version -0x632e 027199 beq conn_sm_wait_version ,host_create_conn_waiting -0x632f 027200 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch -0x6330 027201 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext -0x6331 027202 beq conn_sm_wait_features_ext ,host_create_conn_waiting -0x6332 027203 beq conn_sm_pairing ,host_create_conn_pairing -0x6333 027204 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait -0x6334 027205 beq conn_sm_auth ,host_create_conn_auth -0x6335 027206 beq conn_sm_auth_wait ,host_create_conn_auth_wait -0x6336 027207 beq conn_sm_done ,host_create_conn_done -0x6337 027208 beq conn_sm_wait_done ,host_create_conn_done_wait -0x6338 027209 jam conn_sm_standby ,mem_conn_sm -0x6339 027211 rtn -: 027212 host_create_conn_done: -0x633a 027213 fetch 1 ,mem_lmp_conn_state -0x633b 027214 rtnbit0 received_setup_complete -0x633c 027215 rtnbit0 sent_setup_complete -0x633d 027216 jam conn_sm_standby ,mem_conn_sm -0x633e 027217 call host_conn_judge_encrypt -0x633f 027218 branch scheduler_start_upper_sm -: 027220 host_conn_judge_encrypt: -0x6340 027221 fetch 1 ,mem_connection_options -0x6341 027222 rtnbit0 connection_encrypt -0x6342 027223 jam conn_sm_encrypt_wait ,mem_conn_sm -0x6343 027224 rtn -: 027226 host_create_conn_done_wait: -0x6344 027227 arg enpt_delay_timer ,queue -0x6345 027228 call timer_check -0x6346 027229 nrtn blank -0x6347 027230 jam conn_sm_done ,mem_conn_sm -0x6348 027231 rtn -: 027233 host_create_conn_auth: -0x6349 027234 fetch 1 ,mem_connection_options -0x634a 027235 set0 connection_auth ,pdata -0x634b 027236 store 1 ,mem_connection_options -0x634c 027237 jam conn_sm_auth_wait ,mem_conn_sm -0x634d 027238 jam lmp_au_rand ,mem_lmo_opcode2 -0x634e 027239 rtn -: 027240 host_create_conn_auth_wait: -0x634f 027241 rtn -: 027242 host_create_conn_pairing: -0x6350 027243 fetch 1 ,mem_pincode_state -0x6351 027244 rtnne pincode_state_pincode_ready -0x6352 027245 call host_auth -0x6353 027246 jam conn_sm_pairing_wait ,mem_conn_sm -0x6354 027247 rtn -: 027249 host_create_conn_pairing_wait: -0x6355 027250 rtn -: 027251 host_creat_conn_send_feat_ext: -0x6356 027252 jam conn_sm_wait_features_ext ,mem_conn_sm -0x6357 027253 jam lmp_ext_features_req ,mem_lmo_opcode2 -0x6358 027254 rtn -: 027255 host_create_conn_send_version: -0x6359 027256 jam conn_sm_wait_version ,mem_conn_sm -0x635a 027257 jam lmp_version_req ,mem_lmo_opcode2 -0x635b 027258 rtn -: 027260 host_creat_conn_wait_switch: -0x635c 027261 fetch 1 ,mem_switch_flag -0x635d 027262 rtneq switch_flag_init -0x635e 027263 beq switch_flag_accept ,host_create_conn_switch_accept -0x635f 027264 arg switch_wait_timer ,queue -0x6360 027265 call timer_check -0x6361 027266 nrtn blank -0x6362 027267 jam switch_flag_init ,mem_switch_flag -0x6363 027268 branch host_create_conn_switch -: 027269 host_create_conn_switch_accept: -0x6364 027270 rtn master -0x6365 027271 branch host_create_conn_auth_pair -: 027273 host_create_conn_send_features: -0x6366 027274 jam conn_sm_wait_features_res ,mem_conn_sm -0x6367 027275 jam lmp_features_req ,mem_lmo_opcode2 -0x6368 027276 rtn -: 027277 host_create_conn_send_switch: -0x6369 027278 jam lmp_switch_req ,mem_lmo_opcode2 -0x636a 027279 set1 mark_switch_initiated ,mark -0x636b 027280 jam conn_sm_wait_conn_accept ,mem_conn_sm -0x636c 027281 setarg 0x1ff -0x636d 027282 store 2 ,mem_soft_timer -0x636e 027283 rtn -: 027284 host_create_conn_send_conn_req: -0x636f 027285 jam conn_sm_wait_conn_accept ,mem_conn_sm -0x6370 027286 jam 0xff ,mem_soft_timer -0x6371 027287 set0 mark_reconn_recieve_switch ,mark -0x6372 027288 jam lmp_host_connection_req ,mem_lmo_opcode2 -0x6373 027289 branch init_lmp_reinit -: 027290 host_create_conn_wait_accept: -0x6374 027291 rtnmark1 mark_reconn_recieve_switch -0x6375 027292 fetch 2 ,mem_soft_timer -0x6376 027293 sub pdata ,1 ,pdata -0x6377 027294 branch host_create_conn_resend ,zero -0x6378 027295 store 2 ,mem_soft_timer -0x6379 027296 rtn -: 027297 host_create_conn_resend: -0x637a 027298 jam conn_sm_send_switch ,mem_conn_sm -0x637b 027299 rtn -: 027300 host_create_conn_waiting: -0x637c 027302 rtn -: 027304 host_create_conn_switch: -0x637d 027305 fetch 1 ,mem_lmp_conn_state -0x637e 027306 rtnbit0 sent_setup_complete -0x637f 027307 rtnbit0 received_setup_complete -0x6380 027308 fetch 1 ,mem_connection_options -0x6381 027309 set0 connection_switch ,pdata -0x6382 027310 store 1 ,mem_connection_options -0x6383 027311 jam lmp_switch_req ,mem_lmo_opcode2 -0x6384 027312 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm -0x6385 027313 rtn -: 027315 host_create_conn_send_setup_complete: -0x6386 027316 jam conn_sm_wait_setup_complete ,mem_conn_sm -0x6387 027317 jam lmp_setup_complete ,mem_lmo_opcode2 -0x6388 027318 rtn -: 027320 host_create_conn_wait_setup_complete: -0x6389 027321 fetch 1 ,mem_lmp_conn_state -0x638a 027322 rtnbit0 received_setup_complete -0x638b 027323 jam conn_sm_standby ,mem_conn_sm -0x638c 027325 rtn -: 027326 host_create_conn_wait_setup_complete_rtn: -0x638d 027327 jam conn_sm_auth_pair ,mem_conn_sm -0x638e 027328 rtn -: 027330 host_create_conn_master_detach: -0x638f 027331 fetch 1 ,mem_soft_timer -0x6390 027332 increase -1 ,pdata -0x6391 027333 branch host_create_conn_send_detach ,blank -0x6392 027334 store 1 ,mem_soft_timer -0x6393 027335 rtn -: 027336 host_create_conn_send_detach: -0x6394 027337 jam lmp_detach ,mem_lmo_opcode2 -0x6395 027338 jam local_host ,mem_disconn_reason_send -0x6396 027339 jam 0 ,mem_conn_sm -0x6397 027340 rtn -: 027341 host_create_conn_auth_pair: -0x6398 027343 fetch 1 ,mem_connection_options -0x6399 027344 bbit1 connection_switch ,host_create_conn_switch -0x639a 027345 bbit1 connection_auth ,host_create_conn_auth_pair_true -: 027346 host_create_conn_sm_done: -0x639b 027347 jam conn_sm_done ,mem_conn_sm -0x639c 027348 rtn -: 027349 host_create_conn_auth_pair_true: -0x639d 027350 fetch 1 ,mem_link_key_exists -0x639e 027351 branch host_create_conn_auth_pair_nokey ,blank -0x639f 027352 fetch 1 ,mem_lmp_conn_state -0x63a0 027353 rtnbit0 sent_setup_complete -0x63a1 027354 rtnbit0 received_setup_complete -0x63a2 027355 fetch 4 ,mem_aurand_send_delay_time -0x63a3 027356 arg 100 ,temp -0x63a4 027357 iadd temp ,temp -0x63a5 027358 copy clkn_bt ,pdata -0x63a6 027359 isub temp ,null -0x63a7 027360 nrtn positive -0x63a8 027361 branch host_create_conn_auth -: 027365 host_create_conn_auth_pair_nokey: -0x63a9 027366 jam conn_sm_pairing ,mem_conn_sm -0x63aa 027367 jam 4 ,mem_pin_length -0x63ab 027368 setarg 0x3030 -0x63ac 027369 store 2 ,mem_pin -0x63ad 027370 istore 2 ,contw -0x63ae 027371 jam pincode_state_pincode_ready ,mem_pincode_state -0x63af 027372 branch host_create_conn_pairing -: 027374 host_create_conn_auth_pair_wait: -0x63b0 027375 rtn -: 027376 host_create_conn_encrypt: -0x63b1 027377 fetch 1 ,mem_connection_options -0x63b2 027378 bbit1 connection_encrypt ,host_create_conn_encrypt_start -0x63b3 027379 jam conn_sm_done ,mem_conn_sm -0x63b4 027380 rtn -: 027382 host_create_conn_encrypt_start: -0x63b5 027383 fetch 1 ,mem_connection_options -0x63b6 027384 set0 connection_encrypt ,pdata -0x63b7 027385 store 1 ,mem_connection_options -0x63b8 027386 jam lmp_encryption_mode_req ,mem_lmo_opcode2 -0x63b9 027387 rtn -: 027389 host_create_conn_encrypt_wait: -0x63ba 027390 fetch 1 ,mem_wait_encryption -0x63bb 027391 rtn blank -0x63bc 027392 jam conn_sm_standby ,mem_conn_sm -0x63bd 027393 branch host_create_conn_encrypt_start -: 027395 host_create_conn_encrypt_wait_clear: -0x63be 027396 jam conn_sm_send_setup_complete ,mem_conn_sm -0x63bf 027397 rtn -: 027399 host_auth: -0x63c0 027400 fetch 1 ,mem_op -0x63c1 027401 bbit1 op_inrand_req ,remote_auth -0x63c2 027402 call tid_initiate -0x63c3 027403 jam lmp_in_rand ,mem_lmo_opcode2 -0x63c4 027404 branch cmd_exit -: 027405 remote_auth: -0x63c5 027406 fetch 1 ,mem_op -0x63c6 027407 set0 op_inrand_req ,pdata -0x63c7 027408 store 1 ,mem_op -0x63c8 027409 call lmp_accept_inrand -0x63c9 027410 call tid_set_reply -0x63ca 027411 branch cmd_exit -: 027413 pincode_reinit: -0x63cb 027414 setarg 4 -0x63cc 027415 store 1 ,mem_pin_length -0x63cd 027416 setarg 0x3030 -0x63ce 027417 istore 2 ,contw -0x63cf 027418 istore 2 ,contw -0x63d0 027419 rtn -: 027425 twspi_reset: -0x63d1 027426 bpatchx patch31_4 ,mem_patch31 -0x63d2 027427 hfetch 1 ,core_gpio_oe3 -0x63d3 027428 arg 0x06 ,temp -0x63d4 027429 ior temp ,pdata -0x63d5 027430 hstore 1 ,core_gpio_oe3 -0x63d6 027431 hfetch 1 ,core_gpio_out3 -0x63d7 027432 ior temp ,pdata -0x63d8 027433 hstore 1 ,core_gpio_out3 -0x63d9 027434 call twspi_disable -0x63da 027435 hfetch 1 ,core_gpio_out3 -0x63db 027436 set0 1 ,pdata -0x63dc 027437 set0 2 ,pdata -0x63dd 027438 hstore 1 ,core_gpio_out3 -0x63de 027439 nop 30 -0x63df 027440 branch twspi_enable -: 027442 twspi_reset2: -0x63e0 027443 hfetch 1 ,core_gpio_oe3 -0x63e1 027444 arg 0xc0 ,temp -0x63e2 027445 ior temp ,pdata -0x63e3 027446 hstore 1 ,core_gpio_oe3 -0x63e4 027447 hfetch 1 ,core_gpio_out3 -0x63e5 027448 ior temp ,pdata -0x63e6 027449 hstore 1 ,core_gpio_out3 -0x63e7 027450 call twspi_disable -0x63e8 027451 hfetch 1 ,core_gpio_out3 -0x63e9 027452 set0 6 ,pdata -0x63ea 027453 set0 7 ,pdata -0x63eb 027454 hstore 1 ,core_gpio_out3 -0x63ec 027455 nop 30 -0x63ed 027456 branch twspi_enable2 -: 027458 twspi_disable: -0x63ee 027459 hfetch 1 ,core_gpio_sel1 -0x63ef 027460 and pdata ,0xfc ,pdata -0x63f0 027461 hstore 1 ,core_gpio_sel1 -0x63f1 027462 rtn -: 027463 twspi_enable: -0x63f2 027464 hfetch 1 ,core_gpio_sel1 -0x63f3 027465 or pdata ,0x01 ,pdata -0x63f4 027466 hstore 1 ,core_gpio_sel1 -0x63f5 027467 rtn -: 027468 twspi_enable2: -0x63f6 027469 hfetch 1 ,core_gpio_sel1 -0x63f7 027470 or pdata ,0x03 ,pdata -0x63f8 027471 set0 4 ,pdata -0x63f9 027472 hstore 1 ,core_gpio_sel1 -0x63fa 027473 rtn -: 027477 sensor_read: -0x63fb 027478 copy pdata ,regb -0x63fc 027479 call spi_ncs_enable -0x63fd 027480 nop 100 -0x63fe 027481 copy regb ,pdata -0x63ff 027482 call twspi_read -0x6400 027483 copy pdata ,regb -0x6401 027484 call spi_ncs_disable -0x6402 027485 nop 100 -0x6403 027486 copy regb ,pdata -0x6404 027487 rtn -: 027489 sensor_write: -0x6405 027490 copy pdata ,regb -0x6406 027491 call spi_ncs_enable -0x6407 027492 nop 100 -0x6408 027493 copy regb ,pdata -0x6409 027494 call twspi_write -0x640a 027495 call spi_ncs_disable -0x640b 027496 nop 100 -0x640c 027497 rtn -: 027500 spi_ncs_gpio_init: -0x640d 027501 fetcht 1 ,mem_spi_ncs_gpio -0x640e 027502 branch gpio_config_output -: 027505 spi_ncs_enable: -0x640f 027506 fetcht 1 ,mem_spi_ncs_gpio -0x6410 027507 branch gpio_out_active -: 027510 spi_ncs_disable: -0x6411 027511 fetcht 1 ,mem_spi_ncs_gpio -0x6412 027512 branch gpio_out_inactive -: 027515 twspi_write: -0x6413 027516 branch spid_write_reg -: 027518 twspi_read: -0x6414 027519 branch spid_read_reg -: 027526 read_function_aes: -0x6415 027527 nbranch read_function ,user -0x6416 027528 hfetch 1 ,core_gpio_key2 -0x6417 027529 or_into 0x2 ,pdata -0x6418 027530 hstore 1 ,core_gpio_key2 -: 027531 read_function: -0x6419 027532 copy temp ,null -0x641a 027533 branch read_fuction_zero ,zero -0x641b 027534 copy regc ,pc -: 027535 read_fuction_zero: -0x641c 027536 isolate0 0 ,null -0x641d 027537 branch set_ucode_status -: 027540 get_block_header: -0x641e 027541 force 4 ,temp -: 027542 get_block_header0: -0x641f 027543 arg mem_ucode_buf ,rega -0x6420 027544 hfetch 1 ,core_gpio_key2 -0x6421 027545 and_into 0xfd ,pdata -0x6422 027546 hstore 1 ,core_gpio_key2 -0x6423 027547 call read_function -0x6424 027548 arg 0x55aa ,rega -0x6425 027549 fetch 2 ,mem_ucode_buf -0x6426 027550 ifetcht 2 ,contr -0x6427 027551 isub rega ,null -0x6428 027552 rtn -: 027554 read_first_block: -0x6429 027555 arg 2 ,temp -0x642a 027556 arg mem_ucode_ptr ,rega -0x642b 027557 call read_function -0x642c 027558 fetch 2 ,mem_ucode_ptr -0x642d 027559 store 2 ,mem_addr_mi -0x642e 027560 call get_iv ,user -0x642f 027561 rtn -: 027563 get_iv: -0x6430 027564 arg 16 ,temp -0x6431 027565 arg mem_ucode_keybuf ,rega -0x6432 027566 hfetch 1 ,core_gpio_key2 -0x6433 027567 and_into 0xfd ,pdata -0x6434 027568 hstore 1 ,core_gpio_key2 -0x6435 027569 call read_function -0x6436 027570 arg mem_ucode_keybuf ,contr -0x6437 027571 arg 16 ,loopcnt -0x6438 027572 call aes_load_data -0x6439 027573 call aes_init -0x643a 027574 call aes_clear_data -0x643b 027575 branch do_aes_cbc -: 027577 load_storage: -0x643c 027578 disable match -0x643d 027579 call get_block_header -0x643e 027580 nrtn zero -0x643f 027581 enable match -0x6440 027582 jam 0x80 ,core_ucode_ctrl -0x6441 027583 jam 0 ,core_ucode_hi -0x6442 027584 jam 0 ,core_ucode_low -0x6443 027585 arg core_ucode_data ,rega -0x6444 027586 call read_function_aes -0x6445 027587 jam 0x0 ,core_ucode_ctrl -: 027588 load_storage_loop: -0x6446 027589 arg 6 ,temp -0x6447 027590 call get_block_header0 -0x6448 027591 nrtn zero -0x6449 027592 ifetch 2 ,contr -0x644a 027593 iforce rega -0x644b 027594 call read_function -0x644c 027595 branch load_storage_loop -: 027599 reload_eeprom: -0x644d 027600 call clean_mem -0x644e 027601 setarg 0x1000 -0x644f 027602 store 2 ,mem_addr_mi -0x6450 027603 arg iicd_read_eep ,regc -0x6451 027604 arg 2 ,loopcnt -: 027605 reload_eeprom_loop: -0x6452 027606 call get_block_header -0x6453 027607 nrtn zero -0x6454 027608 fetch 2 ,mem_addr_mi -0x6455 027609 byteswap pdata ,pdata -0x6456 027610 iadd temp ,pdata -0x6457 027611 byteswap pdata ,pdata -0x6458 027612 store 2 ,mem_addr_mi -0x6459 027613 loop reload_eeprom_loop -0x645a 027614 branch load_storage_loop -: 027616 loadcode: -0x645b 027617 call clean_mem -0x645c 027618 disable user -0x645d 027619 call otp_enable_chgpump -0x645e 027620 setarg otp_ucode_flag -0x645f 027621 arg mem_otp_ucode_flag ,rega -0x6460 027622 arg 2 ,temp -0x6461 027623 call otpd_read_data -0x6462 027624 fetch 2 ,mem_otp_ucode_flag -0x6463 027625 bbit0 otp_uflag_aes ,loadcode_otp -0x6464 027626 jam 0x25 ,core_clkoff -0x6465 027627 setarg otp_ucode_aeskey -0x6466 027628 arg mem_ucode_keybuf ,rega -0x6467 027629 arg 16 ,temp -0x6468 027630 call otpd_read_data -0x6469 027631 jam lock_otp ,core_misc_ctrl -0x646a 027632 set1 mark_otp_encrypt ,mark -0x646b 027633 arg mem_ucode_keybuf ,contr -0x646c 027634 call load_key -0x646d 027635 enable user -: 027636 loadcode_otp: -0x646e 027637 jam 0 ,mem_loadcode_times -: 027638 loadcode_otp_2: -0x646f 027639 call loadcode_check_times -0x6470 027640 fetch 2 ,mem_otp_ucode_flag -0x6471 027641 byteswap pdata ,pdata -0x6472 027642 arg 0x7ff ,temp -0x6473 027643 iand temp ,pdata -0x6474 027644 branch loadcode_iic ,zero -0x6475 027645 call otp_set_addr -0x6476 027646 arg otpd_read_code ,regc -0x6477 027647 call get_iv ,user -0x6478 027648 call load_storage -0x6479 027649 fetch 1 ,mem_ucode_status -0x647a 027650 bbit0 0 ,loadcode_otp_2 -: 027652 loadcode_iic: -0x647b 027653 call otp_disable_chgpump -0x647c 027654 jam 0 ,mem_loadcode_times -: 027655 loadcode_iic_2: -0x647d 027656 call loadcode_check_times -0x647e 027657 call clear_eeprom_size_2k -0x647f 027658 fetch 1 ,mem_otp_ucode_flag -0x6480 027659 bbit1 otp_uflag_skip_eep ,loadcode_spi -0x6481 027660 call loadcode_iic_by_eeprom -0x6482 027661 nbranch loadcode_iic_eeprom_2k ,match -0x6483 027662 fetch 1 ,mem_ucode_status -0x6484 027663 bbit0 0 ,loadcode_iic_2 -0x6485 027664 branch loadcode_hci -: 027665 loadcode_iic_eeprom_2k: -0x6486 027666 call set_eeprom_size_2k -0x6487 027667 fetch 1 ,mem_otp_ucode_flag -0x6488 027668 bbit1 otp_uflag_skip_eep ,loadcode_spi -0x6489 027669 call loadcode_iic_by_eeprom -0x648a 027670 nbranch loadcode_spi ,match -0x648b 027671 fetch 1 ,mem_ucode_status -0x648c 027672 bbit0 0 ,loadcode_iic_2 -0x648d 027673 branch loadcode_hci -: 027675 loadcode_spi: -0x648e 027676 jam 0 ,mem_loadcode_times -: 027677 loadcode_spi_2: -0x648f 027678 call loadcode_check_times -0x6490 027679 fetch 1 ,mem_otp_ucode_flag -0x6491 027680 bbit1 otp_uflag_skip_flash ,loadcode_hci -0x6492 027681 setarg 0x0 -0x6493 027682 store 3 ,mem_addr_hi -0x6494 027683 call spid_init_flash -0x6495 027684 arg spid_load_flash ,regc -0x6496 027685 call read_first_block -0x6497 027686 call load_storage -0x6498 027687 nbranch loadcode_hci ,match -0x6499 027688 fetch 1 ,mem_ucode_status -0x649a 027689 bbit0 0 ,loadcode_spi_2 -: 027691 loadcode_hci: -0x649b 027692 bmark1 mark_otp_encrypt ,loadcode_hci_enc -0x649c 027693 call clear_key_buf -: 027694 loadcode_hci_enc: -0x649d 027695 fetch 1 ,mem_otp_ucode_flag -0x649e 027696 bbit0 otp_uflag_hci ,clear_key_buf -0x649f 027697 jam 0x21 ,core_clkoff -0x64a0 027698 call hci_init -: 027699 loadcode_hci_loop: -0x64a1 027700 call hci_rx_packet -0x64a2 027701 branch loadcode_hci_loop -: 027703 clear_key_buf: -0x64a3 027704 setarg 0 -0x64a4 027705 store 8 ,mem_ucode_keybuf -0x64a5 027706 store 8 ,mem_ucode_keybuf + 8 -0x64a6 027707 force regidx_key ,regext_index -0x64a7 027708 call aes_clear -0x64a8 027709 jam 0x21 ,core_clkoff -0x64a9 027710 rtn -: 027713 loadcode_iic_by_eeprom: -0x64aa 027714 setarg 0x0 -0x64ab 027715 store 2 ,mem_addr_mi -0x64ac 027716 arg iicd_read_eep ,regc -0x64ad 027717 call iicd_init_12m -0x64ae 027718 call read_first_block -0x64af 027719 branch load_storage -: 027722 loadcode_check_times: -0x64b0 027723 fetch 1 ,mem_loadcode_times -0x64b1 027724 increase 1 ,pdata -0x64b2 027725 sub pdata ,3 ,null -0x64b3 027726 nbranch loadcode_error ,positive -0x64b4 027727 store 1 ,mem_loadcode_times -0x64b5 027728 rtn -: 027730 loadcode_error: -0x64b6 027731 call clear_key_buf -0x64b7 027732 call ice_break -0x64b8 027733 rtn -: 027737 set_ucode_status: -0x64b9 027738 fetch 1 ,mem_ucode_status -0x64ba 027739 lshift pdata ,pdata -0x64bb 027740 setflag true ,0 ,pdata -0x64bc 027741 isolate0 15 ,rega -0x64bd 027742 rtn true -0x64be 027743 store 1 ,mem_ucode_status -0x64bf 027744 rtn -: 027747 decrypt_code: -0x64c0 027748 hfetch 1 ,core_gpio_key2 -0x64c1 027749 rtnbit0 1 -0x64c2 027750 branch decrypt_code_skip -: 027751 decrypt_code_loop: -0x64c3 027752 hfetch 1 ,core_dma_status -0x64c4 027753 qisolate1 pdata -0x64c5 027754 rtn true -: 027755 decrypt_code_skip: -0x64c6 027756 hfetch 1 ,core_misc_status -0x64c7 027757 bbit0 1 ,decrypt_code_loop -0x64c8 027758 call do_aes_cbc -0x64c9 027759 branch decrypt_code_loop -: 027763 load_ucode: -0x64ca 027764 fetch 2 ,mem_patch_ptr -0x64cb 027765 rtn blank -0x64cc 027766 jam 0x80 ,core_ucode_ctrl -0x64cd 027767 jam 0 ,core_ucode_hi -0x64ce 027768 jam 0 ,core_ucode_low -0x64cf 027769 fetcht 2 ,mem_patch_len -0x64d0 027770 lshift2 temp ,loopcnt -0x64d1 027771 iforce contr -: 027772 load_ucode_loop: -0x64d2 027773 ifetch 1 ,contr -0x64d3 027774 hstore 1 ,core_ucode_data -0x64d4 027775 loop load_ucode_loop -0x64d5 027776 jam 0x0 ,core_ucode_ctrl -0x64d6 027777 rtn -: 027782 spid_init: -0x64d7 027783 bpatchx patch31_5 ,mem_patch31 -0x64d8 027784 call spid_init_common -0x64d9 027785 branch twspi_enable -: 027787 spid_init2: -0x64da 027788 call spid_init_common -0x64db 027789 call twspi_disable -0x64dc 027790 branch twspi_enable2 -: 027792 spid_init_common: -0x64dd 027793 fetch 1 ,mem_spi_init_clk -0x64de 027794 hstore 1 ,core_spid_ctrl -0x64df 027795 fetch 1 ,mem_spi_init_delay_time -0x64e0 027796 hstore 1 ,core_spid_delay -0x64e1 027797 setarg mem_spid_tbuf -0x64e2 027798 hstore 2 ,core_spid_txaddr -0x64e3 027799 setarg mem_spid_rbuf -0x64e4 027800 hstore 2 ,core_spid_rxaddr -0x64e5 027801 branch twspi_disable -: 027803 spid_reset: -0x64e6 027804 hfetch 1 ,core_spid_ctrl -0x64e7 027805 set1 7 ,pdata -0x64e8 027806 hstore 1 ,core_spid_ctrl -0x64e9 027807 set0 7 ,pdata -0x64ea 027808 hstore 1 ,core_spid_ctrl -0x64eb 027809 rtn -: 027813 spid_write_reg: -0x64ec 027814 set1 7 ,pdata -0x64ed 027815 store 2 ,mem_spid_tbuf -0x64ee 027816 bpatchx patch31_6 ,mem_patch31 -0x64ef 027817 jam 2 ,core_spid_txlen -0x64f0 027818 jam 0 ,core_spid_rxlen -0x64f1 027819 jam spid_start ,core_misc_ctrl -0x64f2 027820 branch wait_spid_done -: 027823 spid_read_reg: -0x64f3 027824 force 1 ,temp -: 027826 spid_read_regs: -0x64f4 027828 store 1 ,mem_spid_tbuf -0x64f5 027829 bpatchx patch31_7 ,mem_patch31 -0x64f6 027830 jam 1 ,core_spid_txlen -0x64f7 027831 hstoret 2 ,core_spid_rxlen -0x64f8 027832 jam spid_start ,core_misc_ctrl -0x64f9 027833 call wait_spid_done -0x64fa 027834 fetch 1 ,mem_spid_rbuf -0x64fb 027835 rtn -: 027837 wait_spid_done: -0x64fc 027838 fetch 2 ,mem_afh_error_total -0x64fd 027839 increase 1 ,pdata -0x64fe 027840 store 2 ,mem_afh_error_total -0x64ff 027841 hfetch 1 ,core_dma_status -0x6500 027842 bbit0 spid_done ,wait_spid_done -0x6501 027843 rtn -: 027845 spid_init_flash: -0x6502 027846 jam 0x40 ,core_spid_ctrl -0x6503 027847 jam 0x0 ,core_spid_delay -0x6504 027848 hfetch 1 ,core_gpio_sel1 -0x6505 027849 set0 0 ,pdata -0x6506 027850 set1 1 ,pdata -0x6507 027851 hstore 1 ,core_gpio_sel1 -0x6508 027852 setarg 0 -0x6509 027853 store 4 ,mem_spid_tbuf -0x650a 027854 rtn -: 027857 spid_unlock_flash: -0x650b 027858 setarg 0 -0x650c 027859 hstore 2 ,core_spid_rxlen -0x650d 027860 setarg 1 -0x650e 027861 hstore 2 ,core_spid_txlen -0x650f 027862 setarg mem_spid_tbuf -0x6510 027863 hstore 2 ,core_spid_txaddr -0x6511 027864 jam 6 ,mem_spid_tbuf -0x6512 027865 jam spid_start ,core_misc_ctrl -0x6513 027866 branch wait_spid_done -: 027881 flash_write: -0x6514 027882 disable user -0x6515 027883 copy pdata ,regb -0x6516 027884 fetch 1 ,mem_spi_write_flash_sm -0x6517 027885 rtnne flash_sm_no_buys -0x6518 027886 enable user -0x6519 027887 copy regb ,pdata -0x651a 027888 branch flash_write_start -: 027891 flash_write_spi_sm_timer: -0x651b 027892 fetch 1 ,mem_spi_write_flash_sm -0x651c 027893 beq flash_sm_start ,flash_write_start -0x651d 027894 beq flash_sm_erase_sector ,flash_erase_sector -0x651e 027895 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector -0x651f 027896 beq flash_sm_write_data ,flash_write_data -0x6520 027897 beq flash_sm_wait_write_data ,flash_wait_write_data -0x6521 027898 rtn -: 027900 flash_write_start: -0x6522 027901 store 3 ,mem_spi_write_addr -0x6523 027902 copy rega ,pdata -0x6524 027903 store 2 ,mem_spi_write_ptr -0x6525 027904 storet 2 ,mem_spi_write_len -0x6526 027905 jam flash_sm_erase_sector ,mem_spi_write_flash_sm -0x6527 027906 branch spid_init_flash -: 027907 flash_erase_sector: -0x6528 027908 call spid_init_flash -0x6529 027909 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm -0x652a 027910 call spid_unlock_flash -0x652b 027911 arg mem_spid_tbuf ,rega -0x652c 027912 fetch 3 ,mem_spi_write_addr -0x652d 027913 jam 4 ,core_spid_txlen -0x652e 027914 arg flash_command_sector_erase ,temp -0x652f 027915 branch spid_write_flash_common -: 027917 flash_wait_erase_sector: -0x6530 027918 call spid_init_flash -0x6531 027919 call spid_unlock_flash -0x6532 027920 setarg flash_read_satus -0x6533 027921 call spid_read_reg -0x6534 027922 rtnbit1 flash_status_wip -0x6535 027923 jam flash_sm_write_data ,mem_spi_write_flash_sm -0x6536 027924 rtn -: 027925 flash_write_data: -0x6537 027926 call spid_init_flash -0x6538 027927 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm -0x6539 027928 call spid_unlock_flash -0x653a 027929 call flash_data_preserve -0x653b 027930 call spid_write_flash -0x653c 027931 branch flash_data_recover -: 027932 flash_wait_write_data: -0x653d 027933 call spid_init_flash -0x653e 027934 call spid_unlock_flash -0x653f 027935 setarg flash_read_satus -0x6540 027936 call spid_read_reg -0x6541 027937 rtnbit1 flash_status_wip -0x6542 027938 jam flash_sm_no_buys ,mem_spi_write_flash_sm -0x6543 027939 fetch 2 ,mem_cb_spi_flash_write_complate -0x6544 027940 branch callback_func -: 027941 flash_data_recover: -0x6545 027942 fetch 4 ,mem_temp -0x6546 027943 fetcht 2 ,mem_spi_write_ptr -0x6547 027944 increase -4 ,temp -0x6548 027945 istore 4 ,temp -0x6549 027946 rtn -: 027947 flash_data_preserve: -0x654a 027948 fetcht 2 ,mem_spi_write_ptr -0x654b 027949 copy temp ,rega -0x654c 027950 increase -4 ,temp -0x654d 027951 ifetch 4 ,temp -0x654e 027952 store 4 ,mem_temp -0x654f 027953 fetcht 2 ,mem_spi_write_len -0x6550 027954 fetch 3 ,mem_spi_write_addr -0x6551 027955 rtn -: 027959 spid_write_flash: -0x6552 027960 increase 4 ,temp -0x6553 027961 hstoret 2 ,core_spid_txlen -0x6554 027962 arg flash_command_write_data ,temp -0x6555 027963 increase -4 ,rega -: 027964 spid_write_flash_common: -0x6556 027966 istoret 1 ,rega -0x6557 027967 rshift16 pdata ,temp -0x6558 027968 istoret 1 ,contw -0x6559 027969 rshift8 pdata ,temp -0x655a 027970 istoret 1 ,contw -0x655b 027971 istore 1 ,contw -0x655c 027972 deposit rega -0x655d 027973 hstore 2 ,core_spid_txaddr -0x655e 027974 setarg 0 -0x655f 027975 hstore 2 ,core_spid_rxlen -0x6560 027976 jam spid_start ,core_misc_ctrl -0x6561 027977 branch wait_spid_done -: 027981 spid_read_flash: -0x6562 027982 hstoret 2 ,core_spid_rxlen -0x6563 027983 rshift16 pdata ,temp -0x6564 027984 storet 1 ,mem_addr_hi -0x6565 027985 rshift8 pdata ,temp -0x6566 027986 storet 1 ,mem_addr_mi -0x6567 027987 store 1 ,mem_addr_lo -0x6568 027988 setarg 4 -0x6569 027989 hstore 2 ,core_spid_txlen -0x656a 027990 jam flash_command_read_data ,mem_spid_tbuf -0x656b 027991 setarg mem_spid_tbuf -0x656c 027992 hstore 2 ,core_spid_txaddr -0x656d 027993 deposit rega -0x656e 027994 hstore 2 ,core_spid_rxaddr -0x656f 027995 hfetch 1 ,core_spid_ctrl -0x6570 027996 isolate0 15 ,rega -0x6571 027997 setflag true ,6 ,pdata -0x6572 027998 hstore 1 ,core_spid_ctrl -0x6573 027999 jam spid_start ,core_misc_ctrl -: 028000 spi_read_flash_wait: -0x6574 028001 hfetch 1 ,core_dma_status -0x6575 028002 bbit1 7 ,spi_read_flash_wait -0x6576 028003 arg spid_done ,queue -0x6577 028004 branch wait_spid_done -: 028008 spid_load_flash: -0x6578 028009 hstoret 2 ,core_spid_rxlen -0x6579 028010 setarg 4 -0x657a 028011 hstore 2 ,core_spid_txlen -0x657b 028012 jam 3 ,mem_spid_tbuf -0x657c 028013 setarg mem_spid_tbuf -0x657d 028014 hstore 2 ,core_spid_txaddr -0x657e 028015 deposit rega -0x657f 028016 hstore 2 ,core_spid_rxaddr -0x6580 028017 hfetch 1 ,core_spid_ctrl -0x6581 028018 isolate0 15 ,rega -0x6582 028019 setflag true ,6 ,pdata -0x6583 028020 hstore 1 ,core_spid_ctrl -0x6584 028021 jam spid_start ,core_misc_ctrl -: 028022 spi_load_flash_wait: -0x6585 028023 hfetch 1 ,core_dma_status -0x6586 028024 bbit1 7 ,spi_load_flash_wait -0x6587 028025 arg spid_done ,queue -0x6588 028026 call decrypt_code -0x6589 028027 call wait_spid_done -0x658a 028028 isolate1 spid_crcok ,pdata -0x658b 028029 call set_ucode_status -0x658c 028030 fetch 1 ,mem_addr_hi -0x658d 028031 lshift16 pdata ,regb -0x658e 028032 fetch 1 ,mem_addr_mi -0x658f 028033 lshift8 pdata ,pdata -0x6590 028034 ior regb ,regb -0x6591 028035 fetch 1 ,mem_addr_lo -0x6592 028036 ior regb ,pdata -0x6593 028037 iadd temp ,pdata -0x6594 028038 store 1 ,mem_addr_lo -0x6595 028039 rshift8 pdata ,pdata -0x6596 028040 store 1 ,mem_addr_mi -0x6597 028041 rshift8 pdata ,pdata -0x6598 028042 store 1 ,mem_addr_hi -0x6599 028043 rtn -: 028048 soft_reset_chip: -0x659a 028049 jam 1 ,core_reset -0x659b 028050 rtn -: 028056 iic_init_390k: -0x659c 028057 jam 12 ,core_iicd_scl_low -0x659d 028058 jam 13 ,core_iicd_scl_high -0x659e 028059 jam 13 ,core_iicd_start_setup -0x659f 028060 jam 13 ,core_iicd_start_hold -0x65a0 028061 jam 13 ,core_iicd_stop_setup -0x65a1 028062 jam 12 ,core_iicd_data_setup -0x65a2 028063 branch iicd_init_gpio -: 028066 iicd_init_12m: -0x65a3 028067 jam 5 ,core_iicd_scl_low -0x65a4 028068 jam 7 ,core_iicd_scl_high -0x65a5 028069 jam 7 ,core_iicd_start_setup -0x65a6 028070 jam 7 ,core_iicd_start_hold -0x65a7 028071 jam 7 ,core_iicd_stop_setup -0x65a8 028072 jam 5 ,core_iicd_data_setup -: 028073 iicd_init_gpio: -0x65a9 028074 hfetch 1 ,core_gpio_pu3 -0x65aa 028075 or_into 0xc0 ,pdata -0x65ab 028076 hstore 1 ,core_gpio_pu3 -0x65ac 028077 hfetch 1 ,core_gpio_sel1 -0x65ad 028078 or_into 0x10 ,pdata -0x65ae 028079 hstore 1 ,core_gpio_sel1 -0x65af 028080 rtn -: 028084 wait_iicd_done: -0x65b0 028085 hfetch 1 ,core_dma_status -0x65b1 028086 bbit0 iicd_done ,wait_iicd_done -0x65b2 028087 rtn -: 028095 iicd_read_data: -0x65b3 028096 hstore 2 ,core_iicd_txlen -0x65b4 028097 deposit rega -0x65b5 028098 hstore 2 ,core_iicd_txaddr -0x65b6 028099 deposit regb -0x65b7 028100 hstore 2 ,core_iicd_rxaddr -0x65b8 028101 deposit temp -0x65b9 028102 hstore 2 ,core_iicd_rxlen -0x65ba 028103 arg 1 ,temp -0x65bb 028104 nsetflag blank ,1 ,temp -0x65bc 028105 hstore 1 ,core_iicd_ctrl -0x65bd 028106 jam iicd_start ,core_misc_ctrl -0x65be 028107 branch wait_iicd_done -: 028110 set_eeprom_size_2k: -0x65bf 028111 set1 mark_eeprom_size ,mark -0x65c0 028112 jam 0x08 ,mem_eeprom_block_size -0x65c1 028113 rtn -: 028115 clear_eeprom_size_2k: -0x65c2 028116 set0 mark_eeprom_size ,mark -0x65c3 028117 jam 0x20 ,mem_eeprom_block_size -0x65c4 028118 rtn -: 028121 iicd_read_eep_data_size_2k: -0x65c5 028122 fetch 1 ,mem_eeprom_base -0x65c6 028123 iadd regb ,pdata -0x65c7 028124 store 1 ,mem_addr_mi -0x65c8 028125 branch iicd_read_eep_size_2k -: 028127 iicd_read_eep_size_2k_lcadcode: -0x65c9 028128 fetch 2 ,mem_addr_mi -0x65ca 028129 byteswap pdata ,pdata -0x65cb 028130 store 1 ,mem_addr_mi -: 028135 iicd_read_eep_size_2k: -0x65cc 028136 setarg 3 -0x65cd 028137 hstore 2 ,core_iicd_txlen -0x65ce 028138 jam 0xa0 ,mem_iicd_tbuf -0x65cf 028139 jam 0xa1 ,mem_iicd_tbuf + 2 -0x65d0 028140 branch iicd_read_eep_common -: 028146 iicd_write_protect_eep_data: -0x65d1 028147 storet 2 ,mem_temp -0x65d2 028148 call iicd_eeprom_write_enable -0x65d3 028149 fetcht 2 ,mem_temp -0x65d4 028150 call iicd_write_eep_data -0x65d5 028151 branch iicd_eeprom_write_disable -: 028153 iicd_eeprom_write_enable: -0x65d6 028154 fetch 1 ,mem_eeprom_wp_gpio -0x65d7 028155 rtneq gpio_disable -0x65d8 028156 bbit0 6 ,iicd_wp_gpio_output_low -0x65d9 028157 setarg 150000 -0x65da 028158 call sleep -: 028159 iicd_wp_gpio_output_low: -0x65db 028160 fetcht 1 ,mem_eeprom_wp_gpio -0x65dc 028161 branch gpio_out_active -: 028163 iicd_eeprom_write_disable: -0x65dd 028164 fetcht 1 ,mem_eeprom_wp_gpio -0x65de 028165 branch gpio_out_inactive -: 028170 iicd_read_eep_data: -0x65df 028171 bpatchx patch32_0 ,mem_patch32 -0x65e0 028172 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k -0x65e1 028173 fetch 2 ,mem_eeprom_base -0x65e2 028174 iadd regb ,pdata -0x65e3 028175 byteswap pdata ,pdata -0x65e4 028176 store 2 ,mem_addr_mi -: 028179 iicd_read_eep: -0x65e5 028180 bpatchx patch32_1 ,mem_patch32 -0x65e6 028181 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode -0x65e7 028182 setarg 4 -0x65e8 028183 hstore 2 ,core_iicd_txlen -0x65e9 028184 jam 0xa0 ,mem_iicd_tbuf -0x65ea 028185 jam 0xa1 ,mem_iicd_tbuf + 3 -: 028186 iicd_read_eep_common: -0x65eb 028187 setarg mem_iicd_tbuf -0x65ec 028188 hstore 2 ,core_iicd_txaddr -0x65ed 028189 hstoret 2 ,core_iicd_rxlen -0x65ee 028190 deposit rega -0x65ef 028191 hstore 2 ,core_iicd_rxaddr -0x65f0 028192 setarg 2 -0x65f1 028193 isolate0 15 ,rega -0x65f2 028194 setflag true ,0 ,pdata -0x65f3 028195 hstore 1 ,core_iicd_ctrl -0x65f4 028196 jam iicd_start ,core_misc_ctrl -0x65f5 028197 arg iicd_done ,queue -0x65f6 028198 call decrypt_code -0x65f7 028199 call wait_iicd_done -0x65f8 028200 isolate1 iicd_crcok ,pdata -0x65f9 028201 call set_ucode_status -0x65fa 028202 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k -0x65fb 028203 fetch 2 ,mem_addr_mi -0x65fc 028204 byteswap pdata ,pdata -0x65fd 028205 iadd temp ,pdata -0x65fe 028206 byteswap pdata ,pdata -0x65ff 028207 store 2 ,mem_addr_mi -0x6600 028208 rtn -: 028210 iicd_read_eep_load_code_size_2k: -0x6601 028211 fetch 1 ,mem_addr_mi -0x6602 028212 iadd temp ,pdata -0x6603 028213 byteswap pdata ,pdata -0x6604 028214 store 2 ,mem_addr_mi -0x6605 028215 rtn -: 028221 iicd_write_eep_data: -0x6606 028222 fetch 2 ,mem_eeprom_base -0x6607 028223 iadd regb ,pdata -: 028226 iicd_write_ota_data: -0x6608 028227 store 2 ,mem_pdatatemp -0x6609 028228 bpatchx patch32_2 ,mem_patch32 -0x660a 028229 storet 2 ,mem_temp -0x660b 028230 copy rega ,pdata -0x660c 028231 store 2 ,mem_contr -: 028232 iicd_write_eep_loop: -0x660d 028233 call iicd_eep_transparency -0x660e 028235 fetcht 2 ,mem_regb -0x660f 028236 fetch 2 ,mem_contr -0x6610 028237 copy pdata ,rega -0x6611 028238 fetch 2 ,mem_pdatatemp -0x6612 028240 call iicd_write_eep -0x6613 028242 fetch 2 ,mem_regb -0x6614 028243 fetcht 2 ,mem_contr -0x6615 028244 iadd temp ,temp -0x6616 028245 storet 2 ,mem_contr -0x6617 028246 fetcht 2 ,mem_pdatatemp -0x6618 028247 iadd temp ,temp -0x6619 028248 storet 2 ,mem_pdatatemp -0x661a 028249 fetch 2 ,mem_temp -0x661b 028250 nbranch iicd_write_eep_loop ,blank -0x661c 028251 rtn -: 028259 iicd_eep_transparency: -0x661d 028260 bpatchx patch32_3 ,mem_patch32 -0x661e 028261 fetch 1 ,mem_eeprom_block_size -0x661f 028262 increase -1 ,pdata -0x6620 028263 fetcht 2 ,mem_pdatatemp -0x6621 028264 ior temp ,pdata -0x6622 028265 increase 1 ,pdata -0x6623 028266 store 3 ,mem_regc -0x6624 028268 fetch 2 ,mem_temp -0x6625 028269 iadd temp ,pdata -0x6626 028271 fetcht 3 ,mem_regc -0x6627 028272 isub temp ,pdata -0x6628 028273 nbranch iicd_eep_deal_short_packet ,positive -0x6629 028274 store 2 ,mem_temp -0x662a 028275 fetch 3 ,mem_regc -0x662b 028276 fetcht 2 ,mem_pdatatemp -0x662c 028277 isub temp ,pdata -0x662d 028278 store 2 ,mem_regb -0x662e 028279 rtn -: 028280 iicd_eep_deal_short_packet: -0x662f 028281 fetch 2 ,mem_temp -0x6630 028282 store 2 ,mem_regb -0x6631 028283 setarg 0 -0x6632 028284 store 2 ,mem_temp -0x6633 028285 rtn -: 028287 iicd_write_eep_size_2k: -0x6634 028288 increase 2 ,temp -0x6635 028289 hstoret 2 ,core_iicd_txlen -0x6636 028290 increase -2 ,rega -0x6637 028291 ifetcht 3 ,rega -0x6638 028292 copy temp ,regb -0x6639 028293 arg 0xa0 ,temp -0x663a 028294 istoret 1 ,rega -0x663b 028296 istore 1 ,contw -0x663c 028297 branch iicd_write_eep_common -: 028300 iicd_write_eep: -0x663d 028301 copy pdata ,regb -0x663e 028302 bpatchx patch32_4 ,mem_patch32 -0x663f 028303 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k -0x6640 028304 copy regb ,pdata -0x6641 028305 increase 3 ,temp -0x6642 028306 hstoret 2 ,core_iicd_txlen -0x6643 028307 increase -3 ,rega -0x6644 028308 ifetcht 3 ,rega -0x6645 028309 copy temp ,regb -0x6646 028310 arg 0xa0 ,temp -0x6647 028311 istoret 1 ,rega -0x6648 028312 byteswap pdata ,pdata -0x6649 028313 istore 2 ,contw -: 028314 iicd_write_eep_common: -0x664a 028315 deposit rega -0x664b 028316 hstore 2 ,core_iicd_txaddr -0x664c 028317 setarg 0 -0x664d 028318 hstore 2 ,core_iicd_rxlen -0x664e 028319 jam 1 ,core_iicd_ctrl -0x664f 028320 jam iicd_start ,core_misc_ctrl -0x6650 028321 call wait_iicd_done -0x6651 028322 copy regb ,pdata -0x6652 028323 istore 3 ,rega -: 028325 iic_check_eeprom_standby: -0x6653 028326 bpatchx patch32_5 ,mem_patch32 -0x6654 028327 jam 0 ,mem_iicd_tbuf + 3 -: 028328 iic_check_eeprom_standby_wait: -0x6655 028329 setarg 1 -0x6656 028330 hstore 2 ,core_iicd_txlen -0x6657 028331 jam 0xa0 ,mem_iicd_tbuf -0x6658 028332 setarg mem_iicd_tbuf -0x6659 028333 hstore 2 ,core_iicd_txaddr -0x665a 028334 setarg 0 -0x665b 028335 hstore 2 ,core_iicd_rxlen -0x665c 028336 hstore 2 ,core_iicd_rxaddr -0x665d 028337 setarg 3 -0x665e 028338 hstore 1 ,core_iicd_ctrl -0x665f 028339 jam iicd_start ,core_misc_ctrl -0x6660 028340 call wait_iicd_done -0x6661 028341 hfetch 1 ,core_dma_status -0x6662 028342 rtnbit0 iicd_ack -0x6663 028343 nop 1500 -0x6664 028344 fetch 1 ,mem_iicd_tbuf + 3 -0x6665 028345 increase 1 ,pdata -0x6666 028346 store 1 ,mem_iicd_tbuf + 3 -0x6667 028347 sub pdata ,40 ,null -0x6668 028348 nrtn positive -0x6669 028349 branch iic_check_eeprom_standby_wait -: 028353 otp_enable_chgpump: -0x666a 028354 jam 0x70 ,rfen_chgpump -0x666b 028355 nop param_chgpump_delay -0x666c 028356 rtn -: 028358 otp_disable_chgpump: -0x666d 028359 jam 0x30 ,rfen_chgpump -0x666e 028360 rtn -: 028362 otp_set_addr: -0x666f 028363 lshift3 pdata ,pdata -0x6670 028364 hstore 2 ,core_otp_addr -0x6671 028365 jam 0 ,core_otpd_ctrl -0x6672 028366 rtn -: 028369 otp_write: -0x6673 028370 call otp_set_addr -0x6674 028371 call otp_ce -: 028372 otp_program: -0x6675 028373 ifetcht 1 ,rega -0x6676 028374 increase 1 ,rega -0x6677 028375 force 0 ,queue -: 028376 otp_program_bit: -0x6678 028377 qisolate0 temp -0x6679 028378 branch otp_skip_0 ,true -0x667a 028379 hfetch 1 ,core_otp_din -0x667b 028380 set1 6 ,pdata -0x667c 028381 set1 7 ,pdata -0x667d 028382 hstore 1 ,core_otp_din -0x667e 028383 jam 0x02 ,core_otp_ctrl -0x667f 028384 jam 0x82 ,core_otp_ctrl -0x6680 028385 set0 7 ,pdata -0x6681 028386 hstore 1 ,core_otp_din -0x6682 028387 jam 0x8a ,core_otp_ctrl -0x6683 028388 nop 11 -0x6684 028389 jam 0xca ,core_otp_ctrl -0x6685 028390 nop 33 -0x6686 028391 jam 0x4a ,core_otp_ctrl -0x6687 028392 nop 44 -0x6688 028393 jam 0xca ,core_otp_ctrl -0x6689 028394 nop 22 -0x668a 028395 jam 0x8a ,core_otp_ctrl -0x668b 028396 nop 33 -0x668c 028397 jam 0x82 ,core_otp_ctrl -0x668d 028398 nop 1 -0x668e 028399 jam 0x92 ,core_otp_ctrl -0x668f 028400 nop 10 -0x6690 028401 jam 0xb2 ,core_otp_ctrl -0x6691 028402 hfetch 1 ,core_otp_rdata -0x6692 028403 jam 0x92 ,core_otp_ctrl -0x6693 028404 nop 1 -0x6694 028405 jam 0x82 ,core_otp_ctrl -0x6695 028406 qisolate0 pdata -0x6696 028407 branch otp_program_bit ,true -: 028408 otp_skip_0: -0x6697 028409 hfetch 2 ,core_otp_addr -0x6698 028410 increase 1 ,pdata -0x6699 028411 hstore 2 ,core_otp_addr -0x669a 028412 increase 1 ,queue -0x669b 028413 compare 8 ,queue ,0xf -0x669c 028414 nbranch otp_program_bit ,true -0x669d 028415 loop otp_program -0x669e 028416 jam 0x83 ,core_otp_ctrl -0x669f 028417 rtn -: 028419 otp_ce: -0x66a0 028420 jam 0x82 ,core_otp_ctrl -0x66a1 028421 nop 12 -0x66a2 028422 jam 0x80 ,core_otp_ctrl -0x66a3 028423 jam 0x82 ,core_otp_ctrl -0x66a4 028424 nop 150 -0x66a5 028425 rtn -: 028428 otpd_read_init: -0x66a6 028429 call otp_ce -0x66a7 028430 jam 0xa2 ,core_otp_ctrl -0x66a8 028431 deposit rega -0x66a9 028432 hstore 2 ,core_otpd_addr -0x66aa 028433 set1 11 ,temp -0x66ab 028434 isolate0 15 ,pdata -0x66ac 028435 setflag true ,15 ,temp -0x66ad 028436 hstoret 2 ,core_otpd_len -0x66ae 028437 jam otpd_start ,core_misc_ctrl -0x66af 028438 rtn -: 028440 otpd_wait_end: -0x66b0 028441 hfetch 1 ,core_dma_status -0x66b1 028442 bbit0 otpd_done ,otpd_wait_end -0x66b2 028443 rtn -: 028446 otpd_read_data: -0x66b3 028447 call otp_set_addr -0x66b4 028448 call otpd_read_init -0x66b5 028449 call otpd_wait_end -0x66b6 028450 jam 0x83 ,core_otp_ctrl -0x66b7 028451 rtn -: 028456 otpd_read_code: -0x66b8 028457 hfetch 2 ,core_current_otp_addr -0x66b9 028458 hstore 2 ,core_otp_addr -0x66ba 028459 call otpd_read_init -0x66bb 028460 arg otpd_done ,queue -0x66bc 028461 call decrypt_code -0x66bd 028462 call otpd_wait_end -0x66be 028463 isolate1 otpd_crcok ,pdata -0x66bf 028464 call set_ucode_status -0x66c0 028465 jam 0x83 ,core_otp_ctrl -0x66c1 028466 rtn -: 028469 uartd_prepare_tx: -0x66c2 028470 hfetch 2 ,core_uart_twptr -0x66c3 028471 iforce contwu -0x66c4 028472 rtn -: 028474 uartd_send: -0x66c5 028475 deposit contwu -0x66c6 028476 hstore 2 ,core_uart_twptr -0x66c7 028477 rtn -: 028479 uartd_rxdone: -0x66c8 028480 deposit contru -0x66c9 028481 hstore 2 ,core_uart_rrptr -0x66ca 028482 rtn -: 028484 uartd_prepare_rx: -0x66cb 028485 hfetch 2 ,core_uart_rrptr -0x66cc 028486 copy pdata ,contru -0x66cd 028487 rtn -: 028489 uart_set_baud_by_mem: -0x66ce 028490 fetch uart_baud_len ,mem_baud -0x66cf 028491 hstore uart_baud_len ,core_uart_baud -0x66d0 028492 rtn -: 028494 uart_copy_tx_bytes_fast: -0x66d1 028495 deposit loopcnt -0x66d2 028496 rtn blank -: 028497 uart_copy_tx_bytes_fast_loop: -0x66d3 028498 increase -8 ,loopcnt -0x66d4 028499 call uart_tx_8_bytes ,positive -0x66d5 028500 rtn zero -0x66d6 028501 branch uart_copy_tx_bytes_fast_loop ,positive -0x66d7 028502 increase 8 ,loopcnt -: 028503 uart_copy_tx_bytes_fast_loop_four: -0x66d8 028504 increase -4 ,loopcnt -0x66d9 028505 call uart_tx_4_bytes ,positive -0x66da 028506 rtn zero -0x66db 028507 branch uart_copy_tx_bytes_fast_loop_four ,positive -0x66dc 028508 increase 4 ,loopcnt -0x66dd 028509 branch uart_copy_tx_bytes -: 028511 uart_tx_8_bytes: -0x66de 028512 ifetch 8 ,contr -0x66df 028513 istore 8 ,contwu -0x66e0 028514 rtn -: 028516 uart_tx_4_bytes: -0x66e1 028517 ifetch 4 ,contr -0x66e2 028518 istore 4 ,contwu -0x66e3 028519 rtn -: 028521 uart_copy_tx_bytes: -0x66e4 028522 deposit loopcnt -0x66e5 028523 rtn blank -: 028524 uart_copy_tx_bytes_loop: -0x66e6 028525 ifetch 1 ,contr -0x66e7 028526 istore 1 ,contwu -0x66e8 028527 loop uart_copy_tx_bytes_loop -0x66e9 028528 rtn -: 028530 uart_copy_rx_bytes_fast: -0x66ea 028531 deposit loopcnt -0x66eb 028532 rtn blank -: 028533 uart_copy_rx_bytes_fast_loop: -0x66ec 028534 increase -8 ,loopcnt -0x66ed 028535 call uart_rx_8_bytes ,positive -0x66ee 028536 rtn zero -0x66ef 028537 branch uart_copy_rx_bytes_fast_loop ,positive -0x66f0 028538 increase 8 ,loopcnt -: 028539 uart_copy_rx_bytes_fast_loop_four: -0x66f1 028540 increase -4 ,loopcnt -0x66f2 028541 call uart_rx_4_bytes ,positive -0x66f3 028542 rtn zero -0x66f4 028543 branch uart_copy_rx_bytes_fast_loop_four ,positive -0x66f5 028544 increase 4 ,loopcnt -0x66f6 028545 branch uart_copy_rx_bytes -: 028547 uart_rx_8_bytes: -0x66f7 028548 ifetch 8 ,contru -0x66f8 028549 istore 8 ,contw -0x66f9 028550 rtn -: 028552 uart_rx_4_bytes: -0x66fa 028553 ifetch 4 ,contru -0x66fb 028554 istore 4 ,contw -0x66fc 028555 rtn -: 028558 uart_copy_rx_bytes: -0x66fd 028559 deposit loopcnt -0x66fe 028560 rtn blank -: 028561 uart_copy_rx_bytes_loop: -0x66ff 028562 ifetch 1 ,contru -0x6700 028563 istore 1 ,contw -0x6701 028564 loop uart_copy_rx_bytes_loop -0x6702 028565 rtn -: 028568 uart_copy_rx2tx: -0x6703 028569 deposit loopcnt -0x6704 028570 rtn blank -: 028571 uart_copy_rx2tx_loop: -0x6705 028572 ifetch 1 ,contru -0x6706 028573 istore 1 ,contwu -0x6707 028574 loop uart_copy_rx2tx_loop -0x6708 028575 rtn -: 028580 app_store_nvram_event: -0x6709 028581 jam bt_evt_store_nvram ,mem_fifo_temp -0x670a 028582 branch ui_ipc_send_event -: 028584 check_51cmd_store_reconn_info: -: 028585 check_51cmd_update_device_record: -0x670b 028586 bpatchx patch32_6 ,mem_patch32 -0x670c 028587 fetch 1 ,mem_nv_data_number -0x670d 028588 rtn blank -0x670e 028589 call check_nvram -0x670f 028590 call init_device_list ,zero -0x6710 028591 call nvram_find_addr_from_bd_list -: 028592 write_device_record: -0x6711 028593 fetch 1 ,mem_nv_data_number -0x6712 028594 icopy regc -0x6713 028595 fetcht 2 ,mem_nv_data_ptr -0x6714 028596 storet 2 ,mem_list_item_ptr -: 028597 write_device_loop_find: -0x6715 028598 copy regc ,pdata -0x6716 028599 branch app_store_nvram_event ,blank -0x6717 028600 increase -1 ,regc -0x6718 028601 copy temp ,rega -0x6719 028602 ifetch 1 ,rega -0x671a 028603 fetcht 1 ,mem_select_list_item -0x671b 028604 isub temp ,null -0x671c 028605 call set_index_finded_device ,zero -0x671d 028606 branch write_device_loop_find0 ,positive -0x671e 028607 ifetch 1 ,rega -0x671f 028608 increase 1 ,pdata -0x6720 028609 istore 1 ,rega -: 028610 write_device_loop_find0: -0x6721 028611 fetcht 2 ,mem_list_item_ptr -0x6722 028612 increase nv_data_len ,temp -0x6723 028613 storet 2 ,mem_list_item_ptr -0x6724 028614 branch write_device_loop_find -: 028616 set_index_finded_device: -0x6725 028617 setarg 0 -0x6726 028618 istore 1 ,rega -0x6727 028619 fetch 1 ,mem_temp_reconn_record -0x6728 028620 istore 1 ,contw -0x6729 028621 bne rec_3_mode ,set_index_finded_device_ble_mode -0x672a 028622 arg mem_link_key ,regb -: 028623 set_index_find_device_master_addr: -0x672b 028624 ifetch 6 ,contr -0x672c 028625 istore 8 ,contw -0x672d 028626 setarg 0 -0x672e 028627 istore 8 ,contw -0x672f 028628 copy regb ,contr -: 028629 store_rec_data_common: -0x6730 028630 call memcpy16 -0x6731 028631 force 1 ,null -0x6732 028632 rtn -: 028634 set_index_finded_device_ble_mode: -0x6733 028635 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk -0x6734 028636 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv -0x6735 028637 arg mem_le_ltk ,regb -0x6736 028638 branch set_index_find_device_master_addr -: 028640 set_index_finded_device_irk: -0x6737 028641 arg mem_le_irk ,contr -0x6738 028642 call memcpy16 -: 028643 store_ble_rec_data_common: -0x6739 028644 arg mem_le_ltk ,contr -0x673a 028645 branch store_rec_data_common -: 028647 set_index_finded_device_ediv: -0x673b 028648 arg mem_le_rand ,contr -0x673c 028649 call memcpy16 -0x673d 028650 branch store_ble_rec_data_common -: 028653 nvram_find_addr_from_bd_list: -0x673e 028654 call disable_user -0x673f 028655 fetch 1 ,mem_nv_data_number -0x6740 028656 rtn blank -0x6741 028657 fetch 2 ,mem_ui_state_map -0x6742 028658 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode -: 028659 find_addr_from_bd_list_ble_mode: -0x6743 028660 bpatchx patch32_7 ,mem_patch32 -0x6744 028661 fetch 1 ,mem_le_conn_peer_addr_type -0x6745 028662 beq master_public_addr ,find_addr_from_bd_list_static_addr -0x6746 028663 fetch 1 ,mem_le_plap + 5 -0x6747 028664 compare 0xc0 ,pdata ,0xc0 -0x6748 028665 branch find_addr_from_bd_list_static_addr ,true -0x6749 028666 compare 0x40 ,pdata ,0xc0 -0x674a 028667 branch find_addr_from_bd_list_random_addr ,true -0x674b 028668 compare 0x00 ,pdata ,0xc0 -0x674c 028669 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true -: 028670 find_addr_from_bd_list_static_addr: -0x674d 028671 jam rec_4_mode_static_address ,mem_temp_reconn_record -0x674e 028672 fetch 6 ,mem_le_plap -0x674f 028673 branch find_addr_from_bd_list_common -: 028675 find_addr_from_bd_list_random_non_resolvable_private_address: -0x6750 028676 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record -0x6751 028677 branch find_addr_from_bd_list_common -: 028680 find_addr_from_bd_list_random_addr: -0x6752 028681 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record -0x6753 028682 branch find_addr_from_bd_list_common -: 028685 find_addr_from_bd_list_spp_mode: -0x6754 028686 bpatchx patch33_0 ,mem_patch33 -0x6755 028687 jam rec_3_mode ,mem_temp_reconn_record -0x6756 028688 fetch 6 ,mem_plap -: 028689 find_addr_from_bd_list_common: -0x6757 028690 store 6 ,mem_temp_reconn_record + 1 -0x6758 028691 fetch 2 ,mem_nv_data_ptr -0x6759 028692 ifetcht 1 ,pdata -0x675a 028693 pincrease 1 -0x675b 028694 store 2 ,mem_list_item_ptr -0x675c 028695 storet 1 ,mem_select_list_item -0x675d 028696 fetch 1 ,mem_nv_data_number -0x675e 028697 icopy regc -: 028698 nvram_find_addr_from_list: -0x675f 028699 fetch 2 ,mem_list_item_ptr -0x6760 028700 copy pdata ,rega -0x6761 028701 call nvram_find_addr_from_list_compare -0x6762 028702 rtn user -0x6763 028703 fetcht 2 ,mem_list_item_ptr -0x6764 028704 increase nv_data_len ,temp -0x6765 028705 storet 2 ,mem_list_item_ptr -0x6766 028706 increase -1 ,temp -0x6767 028707 ifetch 1 ,temp -0x6768 028708 store 1 ,mem_select_list_item -0x6769 028709 increase -1 ,regc -0x676a 028710 nbranch nvram_find_addr_from_list ,zero -0x676b 028711 fetch 1 ,mem_nv_data_number -0x676c 028712 pincrease decreased_one -0x676d 028713 store 1 ,mem_select_list_item -0x676e 028714 rtn -: 028715 nvram_find_addr_from_list_compare: -0x676f 028716 fetch 1 ,mem_temp_reconn_record -0x6770 028717 bne rec_3_mode ,find_addr_from_list_compare_ble_mode -: 028718 find_master_addr_from_list_compare: -0x6771 028719 arg mem_temp_reconn_record ,regb -0x6772 028720 arg 7 ,loopcnt -0x6773 028721 call string_compare -0x6774 028722 branch enable_user ,zero -0x6775 028723 rtn -: 028725 find_addr_from_list_compare_ble_mode: -0x6776 028726 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare -0x6777 028727 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare -0x6778 028728 branch find_master_addr_from_list_compare -: 028730 find_irk_form_list_compare: -0x6779 028731 ifetcht 1 ,rega -0x677a 028732 isub temp ,null -0x677b 028733 nrtn zero -0x677c 028734 arg mem_le_prand ,contw -0x677d 028735 arg 16 ,loopcnt -0x677e 028736 call clear_mem -0x677f 028737 fetch 3 ,mem_le_plap + 3 -0x6780 028738 store 3 ,mem_le_prand -0x6781 028739 call genernate_master_macaddress -0x6782 028740 fetch 2 ,mem_le_aes_128 + 13 -0x6783 028741 byteswap pdata ,pdata -0x6784 028742 lshift8 pdata ,temp -0x6785 028743 ifetch 1 ,contr -0x6786 028744 iadd temp ,pdata -0x6787 028745 fetcht 3 ,mem_le_plap -0x6788 028746 isub temp ,null -0x6789 028747 branch enable_user ,zero -0x678a 028748 rtn -: 028751 genernate_master_macaddress: -0x678b 028752 arg mem_le_prand ,contr -0x678c 028753 call load_data128 -0x678d 028755 ifetch 1 ,rega -0x678e 028756 call load_regext -0x678f 028757 force 0x38 ,aes_ctrl -0x6790 028758 force 0x0 ,aes_ctrl -0x6791 028759 call wait_aes -0x6792 028760 arg mem_le_aes_128 ,contw -0x6793 028761 branch store_aes_result -: 028763 find_ediv_form_list_compare: -0x6794 028764 ifetcht 1 ,rega -0x6795 028765 isub temp ,null -0x6796 028766 nrtn zero -0x6797 028767 copy contr ,rega -0x6798 028768 add contr ,8 ,regc -0x6799 028769 arg mem_le_rand ,regb -0x679a 028770 arg 8 ,loopcnt -0x679b 028771 call string_compare -0x679c 028772 branch enable_user ,zero -0x679d 028773 copy regc ,rega -0x679e 028774 arg mem_le_irk ,regb -0x679f 028775 arg 8 ,loopcnt -0x67a0 028776 call string_compare -0x67a1 028777 branch enable_user ,zero -0x67a2 028778 rtn -: 028780 check_nvram: -0x67a3 028781 fetch 2 ,mem_nv_data_ptr -0x67a4 028782 ifetcht 1 ,pdata -0x67a5 028783 pincrease nv_data_len -0x67a6 028784 ifetch 1 ,pdata -0x67a7 028785 isub temp ,null -0x67a8 028786 rtn -: 028788 init_device_list: -0x67a9 028789 fetch 1 ,mem_nv_data_number -0x67aa 028790 icopy loopcnt -0x67ab 028791 fetcht 2 ,mem_nv_data_ptr -0x67ac 028792 setarg 0 -: 028793 init_device_list_loop: -0x67ad 028794 istore 1 ,temp -0x67ae 028795 increase nv_data_len ,temp -0x67af 028796 pincrease 1 -0x67b0 028797 loop init_device_list_loop -0x67b1 028798 rtn -: 028800 load_device_list: -0x67b2 028801 bpatchx patch33_1 ,mem_patch33 -0x67b3 028802 call nvram_find_addr_from_bd_list -0x67b4 028803 fetch 1 ,mem_state -0x67b5 028804 setflag user ,state_combkey ,pdata -0x67b6 028805 store 1 ,mem_state -0x67b7 028806 nbranch clear_key_exists ,user -0x67b8 028807 add rega ,10 ,contr -0x67b9 028809 arg mem_link_key ,contw -0x67ba 028810 call memcpy16 -0x67bb 028811 branch check_link_key_load -: 028812 clear_key_exists: -0x67bc 028813 jam 0 ,mem_link_key_exists -0x67bd 028814 rtn -: 028816 load_device_list_mode_4: -0x67be 028817 fetch 9 ,mem_le_ediv -0x67bf 028818 branch clear_ltk_exists ,blank -0x67c0 028819 call nvram_find_addr_from_bd_list -0x67c1 028820 nbranch clear_ltk_exists ,user -0x67c2 028821 fetch 2 ,mem_list_item_ptr -0x67c3 028822 add pdata ,1 ,contr -0x67c4 028823 arg mem_le_irk ,contw -0x67c5 028824 call memcpy16 -0x67c6 028825 arg mem_le_ltk ,contw -0x67c7 028826 call memcpy16 -0x67c8 028827 jam 1 ,mem_ltk_exists -0x67c9 028828 rtn -: 028830 clear_ltk_exists: -0x67ca 028831 jam 0 ,mem_ltk_exists -0x67cb 028832 rtn -: 028835 eeprom_store_le_reconn_info: -0x67cc 028836 fetch 6 ,mem_le_plap -0x67cd 028837 store 6 ,mem_temp_lap -0x67ce 028838 jam rec_4_mode ,mem_record_bt_mode -0x67cf 028839 branch eeprom_store_reconn_info -: 028840 eeprom_store_bd_reconn_info: -0x67d0 028841 fetch 6 ,mem_plap -0x67d1 028842 store 6 ,mem_temp_lap -0x67d2 028843 jam rec_3_mode ,mem_record_bt_mode -: 028844 eeprom_store_reconn_info: -0x67d3 028845 fetch 1 ,mem_device_option -0x67d4 028846 beq dvc_op_module ,check_51cmd_update_device_record -0x67d5 028847 bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr -0x67d6 028848 rtn -: 028851 check_link_key_load: -0x67d7 028852 fetch 8 ,mem_link_key -0x67d8 028853 fetcht 8 ,mem_link_key + 8 -0x67d9 028854 ior temp ,pdata -0x67da 028855 rtn blank -0x67db 028856 jam 1 ,mem_link_key_exists -0x67dc 028857 rtn -: 028864 gpio_set_wake_by_current_state: -0x67dd 028865 bpatchx patch33_2 ,mem_patch33 -0x67de 028866 set1 7 ,temp -0x67df 028867 call gpio_get_bit -0x67e0 028868 nsetflag true ,7 ,temp -: 028873 gpio_set_wake: -0x67e1 028874 bpatchx patch33_3 ,mem_patch33 -0x67e2 028875 sub temp ,ui_button_gpio_disable ,null -0x67e3 028876 rtn zero -0x67e4 028877 isolate0 7 ,temp -0x67e5 028878 and temp ,0x1f ,queue -0x67e6 028879 fetch 4 ,mem_gpio_wakeup_low -0x67e7 028880 qsetflag true ,pdata -0x67e8 028881 store 4 ,mem_gpio_wakeup_low -0x67e9 028882 fetch 4 ,mem_gpio_wakeup_high -0x67ea 028883 nqsetflag true ,pdata -0x67eb 028884 store 4 ,mem_gpio_wakeup_high -0x67ec 028885 rtn -: 028888 gpio_clr_wake: -0x67ed 028889 bpatchx patch33_4 ,mem_patch33 -0x67ee 028890 sub temp ,ui_button_gpio_disable ,null -0x67ef 028891 rtn zero -0x67f0 028892 isolate0 7 ,temp -0x67f1 028893 and temp ,0x1f ,queue -0x67f2 028894 fetch 4 ,mem_gpio_wakeup_low -0x67f3 028895 qset0 pdata -0x67f4 028896 store 4 ,mem_gpio_wakeup_low -0x67f5 028897 fetch 4 ,mem_gpio_wakeup_high -0x67f6 028898 qset0 pdata -0x67f7 028899 store 4 ,mem_gpio_wakeup_high -0x67f8 028900 rtn -: 028903 gpio_config_input_nowake: -0x67f9 028904 call gpio_clr_wake -0x67fa 028905 branch gpio_config_input_without_wake -: 028908 gpio_config_input: -0x67fb 028909 sub temp ,ui_button_gpio_disable ,null -0x67fc 028910 rtn zero -0x67fd 028911 ncall gpio_set_wake ,wake -: 028913 gpio_config_input_without_wake: -0x67fe 028914 arg core_gpio_pd0 ,contw -0x67ff 028915 call gpio_set_bit -0x6800 028916 setflip gpio_active_bit ,temp -0x6801 028917 arg core_gpio_pu0 ,contw -0x6802 028918 call gpio_set_bit -0x6803 028919 set0 gpio_active_bit ,temp -0x6804 028920 arg core_gpio_oe0 ,contw -0x6805 028921 branch gpio_set_bit -: 028924 gpio_set_high_impedance: -0x6806 028925 arg core_gpio_pd0 ,contw -0x6807 028926 call gpio_set_bit -0x6808 028927 set0 gpio_active_bit ,temp -0x6809 028928 arg core_gpio_pu0 ,contw -0x680a 028929 call gpio_set_bit -0x680b 028930 set0 gpio_active_bit ,temp -0x680c 028931 arg core_gpio_oe0 ,contw -0x680d 028932 branch gpio_set_bit -: 028936 gpio_config_output: -0x680e 028937 sub temp ,ui_button_gpio_disable ,null -0x680f 028938 rtn zero -0x6810 028939 setflip gpio_active_bit ,temp -0x6811 028940 call gpio_out -: 028941 gpio_config_output0: -0x6812 028942 set1 gpio_active_bit ,temp -0x6813 028943 arg core_gpio_oe0 ,contw -0x6814 028944 branch gpio_set_bit -: 028946 gpio_common: -0x6815 028947 and temp ,0x07 ,queue -0x6816 028948 rshift3 temp ,pdata -0x6817 028949 and_into 3 ,pdata -0x6818 028950 iadd contw ,contw -0x6819 028951 ifetch 1 ,contw -0x681a 028952 rtn -: 028954 gpio_check_active: -0x681b 028955 arg core_gpio_out0 ,contw -0x681c 028956 branch get_bit_common -: 028960 gpio_get_bit: -0x681d 028961 arg core_gpio_in ,contw -: 028962 get_bit_common: -0x681e 028963 call gpio_common -0x681f 028964 isolate1 gpio_active_bit ,temp -0x6820 028965 branch gpio_get_bit_reverse ,true -0x6821 028966 qisolate0 pdata -0x6822 028967 rtn -: 028968 gpio_get_bit_reverse: -0x6823 028969 qisolate1 pdata -0x6824 028970 rtn -: 028972 gpio_out_inactive: -0x6825 028973 sub temp ,ui_button_gpio_disable ,null -0x6826 028974 rtn zero -0x6827 028975 isolate1 7 ,null -0x6828 028976 branch gpio_out_flag -: 028978 gpio_out_active: -0x6829 028979 sub temp ,ui_button_gpio_disable ,null -0x682a 028980 rtn zero -0x682b 028981 isolate0 7 ,null -: 028984 gpio_out_flag: -0x682c 028985 setarg 0 -0x682d 028986 nsetflag true ,gpio_active_bit ,pdata -0x682e 028987 ixor temp ,temp -: 028990 gpio_out: -0x682f 028991 arg core_gpio_out0 ,contw -: 028994 gpio_set_bit: -0x6830 028995 call gpio_common -0x6831 028996 isolate1 gpio_active_bit ,temp -0x6832 028997 qsetflag true ,pdata -0x6833 028998 istore 1 ,contw -0x6834 028999 rtn -: 029001 gpio_set_before_lpm_common: -0x6835 029002 arg -1 ,rega -0x6836 029003 hfetch 1 ,core_gpio_sel1 -0x6837 029004 compare 0x02 ,pdata ,0x03 -0x6838 029005 call neglact4_from_23_pin ,true -0x6839 029007 compare 0x01 ,pdata ,0x03 -0x683a 029008 call neglact2_form_25_pin ,true -0x683b 029010 compare 0x03 ,pdata ,0x03 -0x683c 029011 call neglact2_form_25_pin ,true -0x683d 029013 isolate1 2 ,pdata -0x683e 029014 call neglect2_from_6_pin ,true -0x683f 029016 isolate1 3 ,pdata -0x6840 029017 call neglect4_from_9_pin ,true -0x6841 029019 isolate1 4 ,pdata -0x6842 029020 call neglact2_form_30_pin ,true -0x6843 029022 isolate1 6 ,pdata -0x6844 029023 nsetflag true ,04 ,rega -0x6845 029025 isolate1 7 ,pdata -0x6846 029026 nsetflag true ,05 ,rega -0x6847 029028 hfetch 1 ,core_gpio_sel2 -0x6848 029029 isolate1 0 ,pdata -0x6849 029030 nsetflag true ,27 ,rega -0x684a 029031 isolate1 1 ,pdata -0x684b 029032 nsetflag true ,28 ,rega -0x684c 029033 isolate1 2 ,pdata -0x684d 029034 nsetflag true ,03 ,rega -0x684e 029035 isolate1 3 ,pdata -0x684f 029036 nsetflag true ,08 ,rega -0x6850 029037 isolate1 4 ,pdata -0x6851 029038 nsetflag true ,20 ,rega -0x6852 029039 isolate1 5 ,pdata -0x6853 029040 nsetflag true ,21 ,rega -0x6854 029041 isolate1 6 ,pdata -0x6855 029042 nsetflag true ,22 ,rega -0x6856 029043 isolate1 7 ,pdata -0x6857 029044 nsetflag true ,23 ,rega -0x6858 029046 hfetch 1 ,core_gpio_sel -0x6859 029047 isolate1 0 ,pdata -0x685a 029048 nsetflag true ,05 ,rega -0x685b 029049 isolate1 1 ,pdata -0x685c 029050 nsetflag true ,06 ,rega -0x685d 029051 isolate1 2 ,pdata -0x685e 029052 nsetflag true ,07 ,rega -0x685f 029053 isolate1 3 ,pdata -0x6860 029054 nsetflag true ,18 ,rega -0x6861 029055 isolate1 4 ,pdata -0x6862 029056 nsetflag true ,19 ,rega -0x6863 029057 isolate1 5 ,pdata -0x6864 029058 nsetflag true ,20 ,rega -0x6865 029059 isolate1 6 ,pdata -0x6866 029060 nsetflag true ,21 ,rega -0x6867 029061 isolate1 7 ,pdata -0x6868 029062 nsetflag true ,22 ,rega -0x6869 029064 hfetch 1 ,core_uart_ctrl -0x686a 029065 isolate1 4 ,pdata -0x686b 029066 call neglact2_form_2_pin ,true -0x686c 029067 bpatchx patch33_5 ,mem_patch33 -0x686d 029069 hfetch 4 ,core_gpio_pu0 -0x686e 029070 hfetcht 4 ,core_gpio_pd0 -0x686f 029071 ior temp ,pdata -0x6870 029072 invert pdata ,pdata -0x6871 029073 iand rega ,pdata -0x6872 029075 hstore 4 ,core_gpio_oe0 -0x6873 029076 rtn -: 029079 neglect2_from_6_pin: -0x6874 029080 arg 6 ,queue -0x6875 029081 branch neglect_2_pin -: 029082 neglect4_from_9_pin: -0x6876 029083 arg 9 ,queue -0x6877 029084 branch neglact_4_pin -: 029085 neglact4_from_23_pin: -0x6878 029086 arg 23 ,queue -0x6879 029087 branch neglact_4_pin -: 029088 neglact2_form_25_pin: -0x687a 029089 arg 25 ,queue -0x687b 029090 branch neglect_2_pin -: 029091 neglact2_form_30_pin: -0x687c 029092 arg 30 ,queue -0x687d 029093 branch neglect_2_pin -: 029094 neglact2_form_2_pin: -0x687e 029095 arg 2 ,queue -0x687f 029096 branch neglect_2_pin -: 029097 neglact_1_pin: -0x6880 029098 arg 1 ,loopcnt -0x6881 029099 branch neglect_pin_loop -: 029100 neglact_4_pin: -0x6882 029101 arg 4 ,loopcnt -0x6883 029102 branch neglect_pin_loop -: 029103 neglect_2_pin: -0x6884 029104 arg 2 ,loopcnt -: 029105 neglect_pin_loop: -0x6885 029106 qset0 rega -0x6886 029107 increase 1 ,queue -0x6887 029108 loop neglect_pin_loop -0x6888 029109 rtn -: 029117 gpio_cfg_uart_tx_output: -0x6889 029118 call gpio_uart2gpio -0x688a 029119 arg uart_wakeup_tx ,temp -0x688b 029120 branch gpio_config_output -: 029122 gpio_pu_uart_tx: -0x688c 029123 call gpio_cfg_uart_tx_output -0x688d 029124 arg uart_wakeup_tx ,temp -0x688e 029125 branch gpio_out_inactive -: 029129 gpio_rx_config_input_with_pu: -0x688f 029130 call gpio_uart2gpio -0x6890 029131 hfetch 1 ,core_gpio_pu0 -0x6891 029132 set1 uart_wakeup_rx ,pdata -0x6892 029133 hstore 1 ,core_gpio_pu0 -0x6893 029134 arg uart_wakeup_rx ,temp -0x6894 029135 branch gpio_config_input -: 029137 gpio_uart2gpio: -0x6895 029138 hfetch 1 ,core_gpio_sel1 -0x6896 029139 and_into 0xfb ,pdata -0x6897 029140 hstore 1 ,core_gpio_sel1 -0x6898 029141 rtn -: 029143 gpio_check_uart_state: -0x6899 029144 hfetch 1 ,core_gpio_sel1 -0x689a 029145 isolate1 2 ,pdata -0x689b 029146 rtn -: 029148 load_chip_option: -0x689c 029149 call otp_enable_chgpump -0x689d 029150 setarg otp_chip_functions -0x689e 029151 arg mem_chip_functions ,rega -0x689f 029152 arg 0x02 ,temp -0x68a0 029153 call otpd_read_data -0x68a1 029154 branch otp_disable_chgpump -: 029157 load_adc_init: -0x68a2 029158 call otp_enable_chgpump -0x68a3 029159 setarg otp_adc_io_0_5v_addr -0x68a4 029160 arg mem_0_5_adc_io_data ,rega -0x68a5 029161 arg 14 ,temp -0x68a6 029162 call otpd_read_data -0x68a7 029163 branch otp_disable_chgpump -: 029167 adc_init_data: -0x68a8 029168 bpatchx patch33_6 ,mem_patch33 -0x68a9 029170 call load_adc_init -0x68aa 029172 fetch 1 ,mem_adc_config_flag -0x68ab 029173 beq adc_config_vinlpm ,adc_init_data_vinlpm -0x68ac 029174 beq adc_config_hvin ,adc_init_data_hvin -0x68ad 029175 beq adc_config_gpio ,adc_init_data_io -0x68ae 029176 rtn -: 029178 adc_init_data_vinlpm: -0x68af 029179 fetcht 2 ,mem_otp_adc_flag -0x68b0 029180 setarg otp_adc_flag -0x68b1 029181 isub temp ,null -0x68b2 029182 branch adc_check_data_vinlpm ,zero -0x68b3 029183 setarg 0x4dfa -0x68b4 029184 store 2 ,mem_3v_adc_vinlpm_data -0x68b5 029185 setarg 0x4894 -0x68b6 029186 store 2 ,mem_2v_adc_vinlpm_data -0x68b7 029187 branch set_vdd_reference_voltage_1v -: 029189 adc_check_data_vinlpm: -0x68b8 029190 fetch 2 ,mem_3v_adc_vinlpm_data -0x68b9 029191 nbranch adc_check_2v_vinlpm ,blank -0x68ba 029192 setarg 0x4dfa -0x68bb 029193 store 2 ,mem_3v_adc_vinlpm_data -: 029194 adc_check_2v_vinlpm: -0x68bc 029195 fetch 2 ,mem_2v_adc_vinlpm_data -0x68bd 029196 nbranch set_vdd_reference_voltage_1v ,blank -0x68be 029197 setarg 0x4894 -0x68bf 029198 store 2 ,mem_2v_adc_vinlpm_data -: 029199 set_vdd_reference_voltage_1v: -0x68c0 029200 setarg 100 -0x68c1 029201 store 2 ,mem_reference_voltage -0x68c2 029202 rtn -: 029204 adc_init_data_hvin: -0x68c3 029205 fetcht 2 ,mem_otp_adc_flag -0x68c4 029206 setarg otp_adc_flag -0x68c5 029207 isub temp ,null -0x68c6 029208 branch adc_check_data_hvin ,zero -0x68c7 029209 setarg 0x5932 -0x68c8 029210 store 2 ,mem_5v_adc_hvin_data -0x68c9 029211 setarg 0x4323 -0x68ca 029212 store 2 ,mem_1v_adc_hvin_data -0x68cb 029213 branch set_vdd_reference_voltage_4v -: 029215 adc_check_data_hvin: -0x68cc 029216 fetch 2 ,mem_5v_adc_hvin_data -0x68cd 029217 nbranch adc_check_1v_hvin ,blank -0x68ce 029218 setarg 0x5932 -0x68cf 029219 store 2 ,mem_5v_adc_hvin_data -: 029220 adc_check_1v_hvin: -0x68d0 029221 fetch 2 ,mem_1v_adc_hvin_data -0x68d1 029222 nbranch set_vdd_reference_voltage_4v ,blank -0x68d2 029223 setarg 0x4323 -0x68d3 029224 store 2 ,mem_1v_adc_hvin_data -: 029225 set_vdd_reference_voltage_4v: -0x68d4 029226 setarg 400 -0x68d5 029227 store 2 ,mem_reference_voltage -0x68d6 029228 rtn -: 029230 adc_init_data_io: -0x68d7 029231 fetcht 2 ,mem_otp_adc_flag -0x68d8 029232 setarg otp_adc_flag -0x68d9 029233 isub temp ,null -0x68da 029234 branch adc_check_data_io ,zero -0x68db 029235 setarg 0x6946 -0x68dc 029236 store 2 ,mem_1v_adc_io_data -0x68dd 029237 setarg 0x5377 -0x68de 029238 store 2 ,mem_0_5_adc_io_data -0x68df 029239 branch set_vdd_reference_voltage_0_5v -: 029241 adc_check_data_io: -0x68e0 029242 fetch 2 ,mem_1v_adc_io_data -0x68e1 029243 nbranch adc_check_0_5v_io ,blank -0x68e2 029244 setarg 0x6946 -0x68e3 029245 store 2 ,mem_1v_adc_io_data -: 029246 adc_check_0_5v_io: -0x68e4 029247 fetch 2 ,mem_0_5_adc_io_data -0x68e5 029248 nbranch set_vdd_reference_voltage_0_5v ,blank -0x68e6 029249 setarg 0x5377 -0x68e7 029250 store 2 ,mem_0_5_adc_io_data -: 029251 set_vdd_reference_voltage_0_5v: -0x68e8 029252 setarg 50 -0x68e9 029253 store 2 ,mem_reference_voltage -0x68ea 029254 rtn -: 029257 adc_set_mode: -0x68eb 029258 fetch 1 ,mem_adc_config_flag -0x68ec 029259 beq adc_config_vinlpm ,adc_check_vinlpm -0x68ed 029260 beq adc_config_hvin ,adc_check_hvin -0x68ee 029261 beq adc_config_gpio ,adc_check_gpio -0x68ef 029262 rtn -: 029263 adc_check_vinlpm: -0x68f0 029264 jam 0xbf ,rf_adc_mode -0x68f1 029265 branch read_adc -: 029266 adc_check_hvin: -0x68f2 029267 jam 0xaf ,rf_adc_mode -0x68f3 029268 branch read_adc -: 029269 adc_check_gpio: -0x68f4 029270 jam 0x8f ,rf_adc_mode -0x68f5 029271 fetch 1 ,mem_adc_channel -0x68f6 029272 hstore 1 ,rf_adc_ch -0x68f7 029273 branch read_adc -: 029274 read_adc: -0x68f8 029275 bpatchx patch33_7 ,mem_patch33 -0x68f9 029276 hfetch 1 ,core_uart_baud + 1 -0x68fa 029277 set1 7 ,pdata -0x68fb 029278 hstore 1 ,core_uart_baud + 1 -0x68fc 029279 hfetch 1 ,rf_adc_ch -0x68fd 029280 or_into 0x30 ,pdata -0x68fe 029281 hstore 1 ,rf_adc_ch -0x68ff 029282 jam 0x7c ,rfen_adc -0x6900 029283 jam 0xaa ,rf_adc_gc -0x6901 029284 nop 5000 -0x6902 029285 hfetcht 2 ,core_adc_sum -0x6903 029286 hfetch 1 ,core_uart_baud + 1 -0x6904 029287 set0 7 ,pdata -0x6905 029288 hstore 1 ,core_uart_baud + 1 -0x6906 029289 storet 2 ,mem_adc_current_value -0x6907 029290 rtn -: 029292 vdd_calculate_by_mode: -0x6908 029293 bpatchx patch34_0 ,mem_patch34 -0x6909 029294 fetch 1 ,mem_adc_config_flag -0x690a 029295 beq adc_config_vinlpm ,vdd_calculate_vinlpm -0x690b 029296 beq adc_config_hvin ,vdd_calculate_hvin -0x690c 029297 beq adc_config_gpio ,vdd_calculate_io -0x690d 029298 rtn -: 029300 vdd_calculate_vinlpm: -0x690e 029301 fetch 2 ,mem_3v_adc_vinlpm_data -0x690f 029302 fetcht 2 ,mem_2v_adc_vinlpm_data -0x6910 029303 arg 200 ,regc -0x6911 029304 branch vdd_calculate -: 029306 vdd_calculate_hvin: -0x6912 029307 fetch 2 ,mem_5v_adc_hvin_data -0x6913 029308 fetcht 2 ,mem_1v_adc_hvin_data -0x6914 029309 arg 100 ,regc -0x6915 029310 branch vdd_calculate -: 029312 vdd_calculate_io: -0x6916 029313 fetch 2 ,mem_1v_adc_io_data -0x6917 029314 fetcht 2 ,mem_0_5_adc_io_data -0x6918 029315 arg 50 ,regc -0x6919 029316 branch vdd_calculate -: 029318 vdd_calculate: -0x691a 029319 isub temp ,rega -0x691b 029320 fetch 2 ,mem_adc_current_value -0x691c 029321 isub temp ,pdata -0x691d 029322 nbranch vdd_calculate1 ,positive -0x691e 029323 fetcht 2 ,mem_reference_voltage -0x691f 029324 imul32 temp ,regb -0x6920 029325 copy regc ,pdata -0x6921 029326 imul32 rega ,pdata -0x6922 029327 iadd regb ,pdata -: 029328 vdd_calculate2: -0x6923 029329 idiv rega -0x6924 029330 call wait_div_end -0x6925 029331 quotient pdata -0x6926 029332 rtn -: 029334 vdd_calculate1: -0x6927 029335 copy temp ,pdata -0x6928 029336 fetcht 2 ,mem_adc_current_value -0x6929 029337 isub temp ,pdata -0x692a 029338 fetcht 2 ,mem_reference_voltage -0x692b 029339 imul32 temp ,regb -0x692c 029340 copy regc ,pdata -0x692d 029341 imul32 rega ,pdata -0x692e 029342 isub regb ,pdata -0x692f 029343 branch vdd_calculate2 -: 029354 adc_bat_percent_lowpower_out: -0x6930 029355 ifetch 8 ,rega -0x6931 029356 store 8 ,mem_pdatatemp -0x6932 029357 fetch 2 ,mem_pdatatemp -0x6933 029358 fetcht 2 ,mem_pdatatemp + 2 -0x6934 029359 isub temp ,rega -0x6935 029360 fetch 2 ,mem_pdatatemp + 6 -0x6936 029361 isub temp ,regb -0x6937 029362 fetcht 2 ,mem_pdatatemp + 4 -0x6938 029363 isub temp ,null -0x6939 029364 ncall adc_set_low_power_flag ,positive -0x693a 029365 mul32 regb ,100 ,pdata -0x693b 029366 idiv rega -0x693c 029367 call wait_div_end -0x693d 029368 quotient pdata -0x693e 029369 call adc_set_no_power_flag ,blank -0x693f 029370 rtn -: 029371 adc_set_low_power_flag: -0x6940 029372 fetch 1 ,mem_adc_power_flag -0x6941 029373 set1 0 ,pdata -0x6942 029374 store 1 ,mem_adc_power_flag -0x6943 029375 rtn -: 029376 adc_set_no_power_flag: -0x6944 029377 fetcht 1 ,mem_adc_power_flag -0x6945 029378 set1 1 ,temp -0x6946 029379 storet 1 ,mem_adc_power_flag -0x6947 029380 rtn -: 029385 keyscan_key_init: -0x6948 029386 fetch 2 ,mem_key_num_ptr -0x6949 029387 ifetch 1 ,pdata -: 029388 keyscan_key_init_next: -0x694a 029389 rtn blank -0x694b 029390 copy pdata ,loopcnt -0x694c 029392 fetch 2 ,mem_keyscan_ptr -0x694d 029393 increase 3 ,pdata -0x694e 029394 copy pdata ,rega -: 029395 keyscan_key_init_lp1: -0x694f 029396 ifetcht 1 ,rega -0x6950 029397 call gpio_config_input -0x6951 029398 increase key_conf_struct_len ,rega -0x6952 029399 loop keyscan_key_init_lp1 -: 029400 keyscan_key_init_end: -0x6953 029401 rtn -: 029403 keyscan_scan_key: -0x6954 029404 fetch 2 ,mem_keyscan_ptr -0x6955 029405 increase 3 ,pdata -0x6956 029406 copy pdata ,rega -0x6957 029408 force 0 ,regb -0x6958 029409 jam 0 ,mem_key_value_temp -: 029410 keyscan_scan_key_lp1: -0x6959 029411 ifetcht 1 ,rega -0x695a 029412 call gpio_get_bit -0x695b 029413 bpatchx patch34_1 ,mem_patch34 -0x695c 029414 fetch 2 ,mem_key_value_temp -0x695d 029415 copy regb ,queue -0x695e 029416 qsetflag true ,pdata -0x695f 029417 store 2 ,mem_key_value_temp -0x6960 029418 increase key_conf_struct_len ,rega -0x6961 029419 increase 1 ,regb -0x6962 029420 fetch 2 ,mem_key_num_ptr -0x6963 029421 ifetch 1 ,pdata -: 029422 keyscan_scan_key_lp1_next: -0x6964 029423 ixor regb ,null -0x6965 029424 nbranch keyscan_scan_key_lp1 ,zero -0x6966 029425 fetch 2 ,mem_key_value_temp -0x6967 029426 fetcht 2 ,mem_key_value -0x6968 029427 ixor temp ,null -0x6969 029428 rtn zero -0x696a 029429 enable user -0x696b 029430 rtn -: 029432 keyscan_process_lpm_before: -0x696c 029433 fetch 2 ,mem_key_num_ptr -0x696d 029434 ifetch 1 ,pdata -: 029435 keyscan_process_lpm_before_next: -0x696e 029436 rtn blank -0x696f 029437 copy pdata ,loopcnt -0x6970 029438 fetch 2 ,mem_keyscan_ptr -0x6971 029439 increase 3 ,pdata -0x6972 029440 copy pdata ,rega -: 029441 keyscan_process_lpm_before_lp1: -0x6973 029442 ifetcht 1 ,rega -0x6974 029443 call gpio_set_wake_by_current_state -0x6975 029444 increase key_conf_struct_len ,rega -0x6976 029445 loop keyscan_process_lpm_before_lp1 -: 029446 keyscan_process_lpm_before_end: -0x6977 029447 rtn -: 029449 keyscan_key_process: -0x6978 029450 arg key_scan_timer ,queue -0x6979 029451 call timer_check -0x697a 029452 nrtn blank -0x697b 029453 setarg 0x20 -0x697c 029454 arg key_scan_timer ,queue -0x697d 029455 call timer_init -0x697e 029456 disable user -0x697f 029457 call keyscan_process_lpm_before -0x6980 029458 bpatchx patch34_2 ,mem_patch34 -0x6981 029459 fetch 2 ,mem_key_num_ptr -0x6982 029460 ifetch 1 ,pdata -: 029461 keyscan_key_process_next: -0x6983 029462 rtn blank -0x6984 029463 call keyscan_scan_key -0x6985 029464 nbranch lpm_button_clean_wake_lock ,user -0x6986 029465 call lpm_button_get_wake_lock -0x6987 029466 disable user -0x6988 029467 fetch 2 ,mem_key_value_temp -0x6989 029468 store 2 ,mem_key_value_temp4 -0x698a 029469 jam 0 ,mem_key_value_temp6 -0x698b 029470 force 0 ,queue -: 029471 keyscan_key_lp1: -0x698c 029472 fetch 2 ,mem_key_value -0x698d 029473 rshift pdata ,temp -0x698e 029474 storet 2 ,mem_key_value -0x698f 029475 and pdata ,0x01 ,pdata -0x6990 029476 fetcht 2 ,mem_key_value_temp4 -0x6991 029477 and temp ,0x01 ,rega -0x6992 029478 rshift temp ,temp -0x6993 029479 storet 2 ,mem_key_value_temp4 -0x6994 029480 ixor rega ,null -0x6995 029481 ncall keyscan_send_key_data ,zero -0x6996 029482 fetch 2 ,mem_key_num_ptr -0x6997 029483 ifetch 1 ,pdata -: 029484 keyscan_key_lp1_next: -0x6998 029485 fetcht 1 ,mem_key_value_temp6 -0x6999 029486 increase 1 ,temp -0x699a 029487 storet 1 ,mem_key_value_temp6 -0x699b 029488 copy temp ,queue -0x699c 029489 ixor queue ,null -0x699d 029490 nbranch keyscan_key_lp1 ,zero -0x699e 029491 fetch 2 ,mem_key_value_temp -0x699f 029492 store 2 ,mem_key_value -0x69a0 029493 rtn -: 029494 keyscan_send_key_data: -0x69a1 029495 bpatchx patch34_3 ,mem_patch34 -0x69a2 029496 fetch 2 ,mem_keyscan_ptr -0x69a3 029497 increase 1 ,pdata -0x69a4 029498 ifetch 2 ,pdata -0x69a5 029499 branch callback_func -: 029510 pwm_init: -0x69a6 029511 hfetch 1 ,core_clksel -0x69a7 029512 ior rega ,pdata -0x69a8 029513 hstore 1 ,core_clksel -0x69a9 029514 hfetch 2 ,core_clkoff -0x69aa 029515 set0 clock_off_pwm ,pdata -0x69ab 029516 hstore 2 ,core_clkoff -: 029517 delay_nop100: -0x69ac 029518 nop 100 -0x69ad 029519 rtn -: 029530 pwm_out_set: -0x69ae 029531 fetcht 3 ,mem_pdatatemp + 2 -0x69af 029532 setarg pwm_12mhz -0x69b0 029533 idiv temp -0x69b1 029534 call wait_div_end -0x69b2 029535 quotient temp -0x69b3 029536 fetch 1 ,mem_pdatatemp + 5 -0x69b4 029537 imul32 temp ,pdata -0x69b5 029538 div pdata ,100 -0x69b6 029539 call wait_div_end -0x69b7 029540 quotient rega -0x69b8 029541 copy temp ,pdata -0x69b9 029542 isub rega ,regb -0x69ba 029543 fetch 1 ,mem_pdatatemp + 1 -0x69bb 029544 call pwm_duty_cycle_set -0x69bc 029545 fetch 1 ,mem_pdatatemp -0x69bd 029546 branch pwm_enable -: 029549 pwm_duty_cycle_set: -0x69be 029550 beq 0 ,pwm_pwm0_duty_set -0x69bf 029551 beq 1 ,pwm_pwm1_duty_set -0x69c0 029552 beq 2 ,pwm_pwm2_duty_set -0x69c1 029553 beq 3 ,pwm_pwm3_duty_set -0x69c2 029554 beq 4 ,pwm_pwm4_duty_set -0x69c3 029555 beq 5 ,pwm_pwm5_duty_set -: 029556 pwm_pwm0_duty_set: -0x69c4 029557 arg core_pwm_pcnt0 ,contw -0x69c5 029558 branch pwm_set_pncnt -: 029559 pwm_pwm1_duty_set: -0x69c6 029560 arg core_pwm_pcnt1 ,contw -0x69c7 029561 branch pwm_set_pncnt -: 029562 pwm_pwm2_duty_set: -0x69c8 029563 arg core_pwm_pcnt2 ,contw -0x69c9 029564 branch pwm_set_pncnt -: 029565 pwm_pwm3_duty_set: -0x69ca 029566 arg core_pwm_pcnt3 ,contw -0x69cb 029567 branch pwm_set_pncnt -: 029568 pwm_pwm4_duty_set: -0x69cc 029569 arg core_pwm_pcnt4 ,contw -0x69cd 029570 branch pwm_set_pncnt -: 029571 pwm_pwm5_duty_set: -0x69ce 029572 arg core_pwm_pcnt5 ,contw -0x69cf 029573 branch pwm_set_pncnt -: 029574 pwm_set_pncnt: -0x69d0 029575 copy rega ,pdata -0x69d1 029576 istore 2 ,contw -0x69d2 029577 copy regb ,pdata -0x69d3 029578 istore 2 ,contw -0x69d4 029579 rtn -: 029583 pwm_enable: -0x69d5 029584 enable user -0x69d6 029585 branch pwm_gpio_set -: 029586 pwm_disable: -0x69d7 029587 disable user -: 029588 pwm_gpio_set: -0x69d8 029589 beq 4 ,pwm_gpio4_set -0x69d9 029590 beq 5 ,pwm_gpio5_set -0x69da 029591 beq 27 ,pwm_gpio27_set -0x69db 029592 beq 28 ,pwm_gpio28_set -0x69dc 029593 beq 3 ,pwm_gpio3_set -0x69dd 029594 beq 8 ,pwm_gpio8_set -0x69de 029595 beq 20 ,pwm_gpio20_set -0x69df 029596 beq 21 ,pwm_gpio21_set -0x69e0 029597 beq 22 ,pwm_gpio22_set -0x69e1 029598 beq 23 ,pwm_gpio23_set -0x69e2 029599 rtn -: 029602 pwm_gpio4_set: -0x69e3 029603 arg 6 ,queue -0x69e4 029604 branch pwm_one_set_select -: 029605 pwm_gpio5_set: -0x69e5 029606 arg 7 ,queue -0x69e6 029607 branch pwm_one_set_select -: 029608 pwm_gpio27_set: -0x69e7 029609 arg 8 ,queue -0x69e8 029610 branch pwm_one_set_select -: 029611 pwm_gpio28_set: -0x69e9 029612 arg 9 ,queue -0x69ea 029613 branch pwm_one_set_select -: 029614 pwm_gpio3_set: -0x69eb 029615 arg 10 ,queue -0x69ec 029616 branch pwm_one_set_select -: 029617 pwm_gpio8_set: -0x69ed 029618 arg 11 ,queue -0x69ee 029619 branch pwm_one_set_select -: 029620 pwm_gpio20_set: -0x69ef 029621 arg 12 ,queue -0x69f0 029622 branch pwm_tw0_set_select -: 029623 pwm_gpio21_set: -0x69f1 029624 arg 13 ,queue -0x69f2 029625 branch pwm_tw0_set_select -: 029626 pwm_gpio22_set: -0x69f3 029627 arg 14 ,queue -0x69f4 029628 branch pwm_tw0_set_select -: 029629 pwm_gpio23_set: -0x69f5 029630 arg 15 ,queue -0x69f6 029631 branch pwm_tw0_set_select -: 029633 pwm_set_select: -0x69f7 029634 hfetch 2 ,core_gpio_sel1 -0x69f8 029635 qsetflag user ,pdata -0x69f9 029636 hstore 2 ,core_gpio_sel1 -0x69fa 029637 copy rega ,queue -0x69fb 029638 hfetch 1 ,core_gpio_key2 -0x69fc 029639 qsetflag user ,pdata -0x69fd 029640 hstore 1 ,core_gpio_key2 -0x69fe 029641 rtn -: 029643 pwm_one_set_select: -0x69ff 029644 add queue ,-4 ,rega -0x6a00 029645 branch pwm_set_select -: 029647 pwm_tw0_set_select: -0x6a01 029648 add queue ,-10 ,rega -0x6a02 029649 branch pwm_set_select -: 029654 rfcomm_init: -0x6a03 029655 rtn wake -0x6a04 029656 jam 0 ,mem_rfcomm_send_more_pkt -0x6a05 029657 jam bits9600 ,memremoterpnbitrate -0x6a06 029658 jam databits8 ,memremoteprndatabits -0x6a07 029659 jam 0x11 ,memremoteprnxon -0x6a08 029660 jam 0x13 ,memremoteprnxoff -0x6a09 029661 setarg 0 -0x6a0a 029662 store 3 ,memremoteprnstopbit -0x6a0b 029663 store 1 ,mem_spp_state -0x6a0c 029664 jam 0 ,memui_reconnect_mode -: 029666 rfcomm_init_spp: -0x6a0d 029667 bpatchx patch34_4 ,mem_patch34 -0x6a0e 029668 setarg 0 -0x6a0f 029669 store 1 ,mem_spp_state -0x6a10 029670 store 1 ,mem_remote_spp_channel -0x6a11 029671 store 1 ,mem_pn_dlci -0x6a12 029672 fetch 1 ,mem_credit_flag -0x6a13 029673 beq credit_enable ,rfcomm_init_spp_with_credit -0x6a14 029674 jam 0x50 ,mem_credit_given -0x6a15 029675 rtn -: 029677 rfcomm_init_spp_with_credit: -0x6a16 029678 jam 0x00 ,mem_credit_given -0x6a17 029679 rtn -: 029681 set_cr_bit: -0x6a18 029682 or_into 0x02 ,temp -0x6a19 029683 rtn -: 029695 rfcomm_calculate_fcs_sabm: -0x6a1a 029696 copy temp ,pdata -0x6a1b 029697 reverse pdata ,pdata -0x6a1c 029698 store 1 ,memfcstemp3 -0x6a1d 029699 force ini_tx_sabm ,pdata -0x6a1e 029700 reverse pdata ,pdata -0x6a1f 029701 store 1 ,memfcstemp2 -0x6a20 029702 force 0x01 ,pdata -0x6a21 029703 reverse pdata ,pdata -0x6a22 029704 store 1 ,memfcstemp1 -0x6a23 029705 call caculate_fcs -0x6a24 029706 copy temp ,pdata -0x6a25 029707 rtn -: 029708 rfcomm_calculate_fcs_ua: -0x6a26 029709 reverse pdata ,pdata -0x6a27 029710 store 1 ,memfcstemp3 -0x6a28 029711 force rsp_tx_ua ,pdata -0x6a29 029712 reverse pdata ,pdata -0x6a2a 029713 store 1 ,memfcstemp2 -0x6a2b 029714 force 0x01 ,pdata -0x6a2c 029715 reverse pdata ,pdata -0x6a2d 029716 store 1 ,memfcstemp1 -0x6a2e 029717 branch caculate_fcs -: 029719 rfcomm_calculate_fcs_dlci0: -0x6a2f 029720 fetch 1 ,mem_rfcomm_initiator -0x6a30 029721 branch rfcomm_calculate_fcs_dlci0_res ,blank -0x6a31 029722 setarg 0x70 -0x6a32 029723 rtn -: 029724 rfcomm_calculate_fcs_dlci0_res: -0x6a33 029725 setarg 0xaa -0x6a34 029726 rtn -: 029728 rfcomm_save_fcs_uih: -0x6a35 029729 reverse pdata ,pdata -0x6a36 029730 store 1 ,memfcstemp3 -0x6a37 029731 force rsp_rx_uih ,pdata -0x6a38 029732 call caculate_uihdata_fcs -0x6a39 029733 fetcht 2 ,mem_contw_temp -0x6a3a 029734 copy temp ,contw -0x6a3b 029735 istore 1 ,contw -0x6a3c 029736 copy contw ,temp -0x6a3d 029737 storet 2 ,mem_contw_temp -0x6a3e 029738 force rsp_rx_uih_wdata ,pdata -0x6a3f 029739 call caculate_uihdata_fcs -0x6a40 029740 fetcht 2 ,mem_contw_temp -0x6a41 029741 copy temp ,contw -0x6a42 029742 istore 1 ,contw -0x6a43 029743 rtn -: 029752 caculate_uihdata_fcs: -0x6a44 029753 reverse pdata ,pdata -0x6a45 029754 store 1 ,memfcstemp2 -0x6a46 029755 fetch 2 ,memfcstemp2 -0x6a47 029756 lshift8 pdata ,pdata -0x6a48 029757 store 3 ,mem_mod2div_temp -0x6a49 029758 arg 0x107 ,rega -0x6a4a 029759 arg 0xf ,regb -0x6a4b 029760 call mod2div -0x6a4c 029761 xor_into 0xd7 ,pdata -0x6a4d 029762 invert pdata ,pdata -0x6a4e 029763 reverse pdata ,pdata -0x6a4f 029764 rtn -: 029774 caculate_fcs: -0x6a50 029775 fetch 3 ,memfcstemp1 -0x6a51 029776 store 3 ,mem_mod2div_temp -0x6a52 029777 arg 0x107 ,rega -0x6a53 029778 arg 0xf ,regb -0x6a54 029779 call mod2div -0x6a55 029780 lshift8 pdata ,pdata -0x6a56 029781 arg 0x7 ,regb -0x6a57 029782 call mod2div -0x6a58 029783 xor_into 0x2b ,pdata -0x6a59 029784 invert pdata ,pdata -0x6a5a 029785 reverse pdata ,pdata -0x6a5b 029786 copy pdata ,temp -0x6a5c 029787 rtn -: 029789 mod2div: -0x6a5d 029790 arg 0 ,regc -0x6a5e 029791 copy regb ,loopcnt -0x6a5f 029792 call right_shift_n -0x6a60 029793 icopy temp -: 029794 mod2div_loop: -0x6a61 029799 copy temp ,pdata -0x6a62 029800 lshift regc ,regc -0x6a63 029801 bbit0 8 ,mod2div_not_enough_reduction -0x6a64 029802 ixor rega ,temp -0x6a65 029803 increase 1 ,regc -: 029804 mod2div_not_enough_reduction: -0x6a66 029805 lshift temp ,temp -0x6a67 029806 fetch 3 ,mem_mod2div_temp -0x6a68 029807 increase -1 ,regb -0x6a69 029808 compare 0xff ,regb ,0xff -0x6a6a 029809 branch mod2div_end ,true -0x6a6b 029810 copy regb ,loopcnt -0x6a6c 029811 call right_shift_n -0x6a6d 029812 isolate1 0 ,pdata -0x6a6e 029813 setflag true ,0 ,temp -0x6a6f 029814 branch mod2div_loop -: 029815 mod2div_end: -0x6a70 029817 rshift temp ,pdata -0x6a71 029818 rtn -: 029820 get_rfcomm_snd_adss: -0x6a72 029821 fetcht 1 ,mem_pn_dlci -: 029822 dlci_to_address_cmd: -0x6a73 029824 lshift2 temp ,temp -0x6a74 029825 set1 rfcomm_address_ext_len ,temp -0x6a75 029826 fetch 1 ,mem_rfcomm_initiator -0x6a76 029827 ncall set_cr_bit ,blank -0x6a77 029828 storet 1 ,mem_rfcomm_send_adss -0x6a78 029829 rtn -: 029831 channel_to_dlci: -0x6a79 029833 lshift temp ,temp -0x6a7a 029834 fetch 1 ,mem_rfcomm_initiator -0x6a7b 029835 setflag blank ,0 ,temp -0x6a7c 029837 rtn -: 029838 rfcomm_rx_process_dlci0_sabm: -0x6a7d 029839 fetcht 1 ,mem_current_channel -0x6a7e 029840 jam 0xd7 ,mem_current_fcs -0x6a7f 029841 call rfcomm_send_ua -0x6a80 029842 fetch 1 ,mem_rfcomm_state -0x6a81 029843 set1 l2cap_channel_rfcomm_only_sabm ,pdata -0x6a82 029844 set1 l2cap_channel_rfcomm_only_ua ,pdata -0x6a83 029845 store 1 ,mem_rfcomm_state -0x6a84 029846 jam 0 ,mem_rfcomm_initiator -0x6a85 029847 branch rfcomm_rx_process_end -: 029848 rfcomm_rx_process_dlci0_ua: -0x6a86 029849 fetch 1 ,mem_rfcomm_state -0x6a87 029850 set1 l2cap_channel_rfcomm_only_ua ,pdata -0x6a88 029851 store 1 ,mem_rfcomm_state -0x6a89 029852 branch rfcomm_rx_process_end -: 029855 rfcomm_rx_process: -0x6a8a 029856 bpatchx patch34_5 ,mem_patch34 -0x6a8b 029857 fetch 1 ,memui_reconnect_mode -0x6a8c 029858 beq no_reconnection ,rfcomm_rx_process_remote_page -0x6a8d 029859 branch rfcomm_rx_process_reconn -: 029861 rfcomm_rx_process_remote_page: -0x6a8e 029862 fetch 2 ,mem_l2cap_payload_ptr -0x6a8f 029863 copy pdata ,contr -0x6a90 029864 call get_rfcomm_head_struct -0x6a91 029865 fetch 1 ,mem_current_channel -0x6a92 029866 beq 0 ,parse_dlci0_rp -0x6a93 029867 branch parse_uih_rp -: 029868 parse_dlci0_rp: -0x6a94 029869 bpatchx patch34_6 ,mem_patch34 -0x6a95 029870 fetch 1 ,mem_current_frame_type -0x6a96 029871 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm -0x6a97 029872 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua -0x6a98 029873 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih -0x6a99 029874 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event -0x6a9a 029875 rtn -: 029878 parse_dlci0_rp_uih: -0x6a9b 029879 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x6a9c 029880 copy pdata ,contr -0x6a9d 029881 call get_rfcomm_uih_head_struct -0x6a9e 029882 fetch 1 ,mem_uih_cmd_type -0x6a9f 029883 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd -0x6aa0 029884 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res -0x6aa1 029885 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd -0x6aa2 029886 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res -0x6aa3 029887 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port -0x6aa4 029888 branch rfcomm_rx_process_end -: 029890 parse_dlci0_rp_uih_pn_cmd: -0x6aa5 029891 call parse_dlci0_rp_uih_pn_res_common -0x6aa6 029893 branch parse_dlci0_rp_uih_pn_cmd_spp -: 029895 parse_dlci0_rp_uih_pn_cmd_spp: -0x6aa7 029896 fetch 1 ,mem_spp_state -0x6aa8 029897 set1 rfcomm_channel_state_pn_cmd ,pdata -0x6aa9 029898 set1 rfcomm_channel_state_pn_res ,pdata -0x6aaa 029899 store 1 ,mem_spp_state -0x6aab 029900 call rfcomm_send_param_neg_res -0x6aac 029901 branch rfcomm_rx_process_end -: 029903 parse_dlci0_rp_uih_pn_res: -0x6aad 029904 call parse_dlci0_rp_uih_pn_res_common -0x6aae 029905 branch rfcomm_rx_process_end -: 029907 parse_dlci0_rp_uih_pn_res_common: -0x6aaf 029908 call get_param_payload_ptr -0x6ab0 029909 branch get_rfcomm_prarmer_negotiation -: 029911 get_rfcomm_param_modem_status: -0x6ab1 029912 call get_param_payload_ptr -0x6ab2 029913 ifetch 1 ,contr -0x6ab3 029914 rshift3 pdata ,pdata -0x6ab4 029915 store 1 ,mem_ms_channel -0x6ab5 029916 ifetch 1 ,contr -0x6ab6 029917 store 1 ,mem_ms_param -0x6ab7 029918 rtn -: 029921 get_rfcomm_head_struct: -0x6ab8 029922 ifetch 1 ,contr -0x6ab9 029923 store 1 ,mem_current_adss -0x6aba 029924 rshift3 pdata ,pdata -0x6abb 029925 store 1 ,mem_current_channel -0x6abc 029926 ifetch 1 ,contr -0x6abd 029927 store 1 ,mem_current_frame_type -: 029928 get_rfcomm_current_length: -0x6abe 029929 call get_rfcomm_length_common -0x6abf 029930 storet 2 ,mem_current_length -0x6ac0 029931 copy contr ,pdata -0x6ac1 029932 store 2 ,mem_rfcomm_uih_payload_ptr -0x6ac2 029933 rtn -: 029935 get_rfcomm_uih_head_struct: -0x6ac3 029936 ifetch 1 ,contr -0x6ac4 029937 rshift pdata ,pdata -0x6ac5 029938 store 1 ,mem_uih_cmd_type -0x6ac6 029939 call get_rfcomm_length_common -0x6ac7 029940 storet 2 ,mem_uih_length -0x6ac8 029941 copy contr ,pdata -0x6ac9 029942 store 2 ,mem_param_payload_ptr -0x6aca 029943 rtn -: 029946 get_param_payload_ptr: -0x6acb 029947 fetch 2 ,mem_param_payload_ptr -0x6acc 029948 copy pdata ,contr -0x6acd 029949 rtn -: 029951 get_rfcomm_length_common: -0x6ace 029952 ifetch 1 ,contr -0x6acf 029953 copy pdata ,temp -0x6ad0 029954 rshift temp ,temp -0x6ad1 029955 rtnbit1 0 -0x6ad2 029956 ifetch 1 ,contr -0x6ad3 029957 lshift3 pdata ,pdata -0x6ad4 029958 lshift4 pdata ,pdata -0x6ad5 029959 iadd temp ,temp -0x6ad6 029960 rtn -: 029962 get_rfcomm_prarmer_negotiation: -0x6ad7 029963 ifetch 1 ,contr -0x6ad8 029964 store 1 ,mem_pn_dlci -0x6ad9 029965 ifetch 1 ,contr -0x6ada 029966 store 1 ,mem_pn_credit_flow_type_info -0x6adb 029967 ifetch 1 ,contr -0x6adc 029968 store 1 ,mem_pn_priority -0x6add 029969 ifetch 1 ,contr -0x6ade 029970 store 1 ,mem_pn_acknowledg_timer -0x6adf 029971 ifetch 2 ,contr -0x6ae0 029972 store 2 ,mem_pn_max_frame_size -0x6ae1 029973 ifetch 1 ,contr -0x6ae2 029974 store 1 ,mem_pn_max_retrans -0x6ae3 029975 ifetch 1 ,contr -0x6ae4 029976 store 1 ,mem_remote_credits -0x6ae5 029977 rtn -: 029980 parse_dlci0_rp_uih_ms_cmd: -0x6ae6 029981 call get_rfcomm_param_modem_status -0x6ae7 029983 branch parse_dlci0_rp_uih_ms_cmd_spp -: 029985 parse_dlci0_rp_uih_ms_cmd_spp: -0x6ae8 029986 fetch 1 ,mem_spp_state -0x6ae9 029987 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata -0x6aea 029988 set1 rfcomm_channel_state_snd_ms_res ,pdata -0x6aeb 029989 store 1 ,mem_spp_state -0x6aec 029990 fetcht 1 ,mem_pn_dlci -0x6aed 029991 lshift2 temp ,temp -0x6aee 029992 or_into 3 ,temp -0x6aef 029993 call rfcomm_send_modem_status_res -0x6af0 029994 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt -0x6af1 029995 branch rfcomm_rx_process_end -: 029997 parse_dlci0_rp_uih_ms_res: -0x6af2 029998 jam bt_evt_spp_connected ,mem_fifo_temp -0x6af3 029999 call ui_ipc_send_event -0x6af4 030000 call get_rfcomm_param_modem_status -0x6af5 030001 fetch 1 ,mem_ms_channel -0x6af6 030002 sub pdata ,1 ,null -0x6af7 030003 branch parse_dlci0_rp_uih_ms_res_spp ,zero -0x6af8 030004 branch assert -: 030005 parse_dlci0_rp_uih_ms_res_spp: -0x6af9 030006 fetch 1 ,mem_spp_state -0x6afa 030007 set1 rfcomm_channel_state_rcv_ms_res ,pdata -0x6afb 030008 store 1 ,mem_spp_state -0x6afc 030009 branch rfcomm_rx_process_end -: 030011 parse_dlci0_rp_uih_cmd_port: -0x6afd 030012 call get_param_payload_ptr -0x6afe 030013 ifetch 1 ,contr -0x6aff 030014 store 1 ,mem_rpn_dlci -0x6b00 030015 call l2cap_malloc_rfcomm_channel -0x6b01 030016 call l2cap_get_rfcomm_tx_buff -0x6b02 030017 setarg 0x000e -0x6b03 030018 istore 2 ,contw -0x6b04 030019 fetch 2 ,mem_rfcomm_remote_cid -0x6b05 030020 istore 2 ,contw -0x6b06 030021 fetch 1 ,mem_rfcomm_initiator -0x6b07 030023 lshift pdata ,pdata -0x6b08 030024 set1 0 ,pdata -0x6b09 030025 istore 1 ,contw -0x6b0a 030026 bpatchx patch34_7 ,mem_patch34 -0x6b0b 030027 setarg 0x15ef -0x6b0c 030028 istore 2 ,contw -0x6b0d 030029 setarg 0x1191 -0x6b0e 030030 istore 2 ,contw -0x6b0f 030033 fetch 1 ,mem_rpn_dlci -0x6b10 030034 istore 1 ,contw -0x6b11 030035 setarg 0x000007 -0x6b12 030036 istore 5 ,contw -0x6b13 030039 setarg 0x01 -0x6b14 030040 istore 2 ,contw -0x6b15 030043 call rfcomm_calculate_fcs_dlci0 -0x6b16 030044 istore 1 ,contw -0x6b17 030045 rtn -: 030049 parse_uih_rp: -0x6b18 030050 branch parse_uih_rp_spp -: 030052 parse_uih_rp_spp: -0x6b19 030053 bpatchx patch35_0 ,mem_patch35 -0x6b1a 030054 fetch 1 ,mem_current_frame_type -0x6b1b 030055 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua -0x6b1c 030056 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm -0x6b1d 030057 beq rfcomm_frame_type_uih ,parse_uih_spp_uih -0x6b1e 030058 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits -0x6b1f 030059 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn -0x6b20 030060 rtn -: 030061 parse_uih_rp_spp_ua: -0x6b21 030062 fetch 1 ,mem_spp_state -0x6b22 030063 set1 rfcomm_channel_state_ua ,pdata -0x6b23 030064 store 1 ,mem_spp_state -0x6b24 030065 branch rfcomm_rx_process_end -: 030066 parse_uih_rp_spp_sabm: -0x6b25 030067 fetch 1 ,mem_spp_state -0x6b26 030068 set1 rfcomm_channel_state_ua ,pdata -0x6b27 030069 set1 rfcomm_channel_state_sabm ,pdata -0x6b28 030070 store 1 ,mem_spp_state -0x6b29 030071 fetch 1 ,mem_current_adss -0x6b2a 030072 call rfcomm_calculate_fcs_ua -0x6b2b 030073 store 1 ,mem_current_fcs -0x6b2c 030074 call rfcomm_send_ua -0x6b2d 030075 fetch 1 ,mem_current_adss -0x6b2e 030076 rshift2 pdata ,pdata -0x6b2f 030077 store 1 ,mem_pn_dlci -0x6b30 030078 lshift2 pdata ,pdata -0x6b31 030079 set0 rfcomm_address_cr ,pdata -0x6b32 030080 set1 rfcomm_address_ext_len ,pdata -0x6b33 030081 arg mem_hiufcs_spp ,temp -0x6b34 030082 storet 2 ,mem_contw_temp -0x6b35 030083 call rfcomm_save_fcs_uih -0x6b36 030084 branch rfcomm_rx_process_end -: 030086 parse_uih_spp_uih_credits: -0x6b37 030087 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x6b38 030088 copy pdata ,contr -0x6b39 030089 increase 1 ,pdata -0x6b3a 030090 store 2 ,mem_rfcomm_uih_payload_ptr -0x6b3b 030091 ifetch 1 ,contr -0x6b3c 030092 fetcht 1 ,mem_remote_credits -0x6b3d 030093 iadd temp ,pdata -0x6b3e 030094 store 1 ,mem_remote_credits -: 030095 parse_uih_spp_uih: -0x6b3f 030096 call rfcomm_increase_credit_given -: 030097 parse_uih_spp_uih_cont: -0x6b40 030098 call get_rfcomm_snd_adss -0x6b41 030099 call rfcomm_send_uih_without_payload -0x6b42 030100 call spp_process_rx_data -0x6b43 030101 branch rfcomm_rx_process_end -: 030103 parse_uih_rp_spp_disconn_send_event: -0x6b44 030104 jam bt_evt_spp_disconnected ,mem_fifo_temp -0x6b45 030105 call ui_ipc_send_event -: 030106 parse_uih_rp_spp_disconn: -0x6b46 030107 call rfcomm_init_spp -0x6b47 030108 fetch 1 ,mem_current_adss -0x6b48 030109 call rfcomm_calculate_fcs_ua -0x6b49 030110 store 1 ,mem_current_fcs -0x6b4a 030111 call rfcomm_send_ua -0x6b4b 030112 branch rfcomm_rx_process_end -: 030117 rfcomm_rx_process_reconn: -0x6b4c 030118 fetch 2 ,mem_l2cap_payload_ptr -0x6b4d 030119 copy pdata ,contr -0x6b4e 030120 call get_rfcomm_head_struct -0x6b4f 030121 fetch 1 ,mem_current_channel -0x6b50 030122 beq 0 ,parse_dlci0_reconn -0x6b51 030123 branch parse_uih_reconn -: 030125 parse_dlci0_reconn: -0x6b52 030126 bpatchx patch35_1 ,mem_patch35 -0x6b53 030127 fetch 1 ,mem_current_frame_type -0x6b54 030128 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm -0x6b55 030129 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua -0x6b56 030130 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih -0x6b57 030131 branch rfcomm_rx_process_end -: 030132 parse_dlci0_reconn_uih: -0x6b58 030133 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x6b59 030134 copy pdata ,contr -0x6b5a 030135 call get_rfcomm_uih_head_struct -0x6b5b 030136 fetch 1 ,mem_uih_cmd_type -0x6b5c 030137 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd -0x6b5d 030138 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd -0x6b5e 030139 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd -0x6b5f 030140 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res -0x6b60 030141 branch rfcomm_rx_process_end -: 030143 parse_dlci0_reconn_uih_pn_cmd: -0x6b61 030144 call parse_dlci0_rp_uih_pn_res_common -0x6b62 030145 fetch 1 ,mem_pn_dlci -0x6b63 030146 rshift pdata ,pdata -0x6b64 030147 fetcht 1 ,mem_remote_spp_channel -0x6b65 030148 isub temp ,null -0x6b66 030149 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero -0x6b67 030150 branch assert -: 030151 parse_dlci0_reconn_uih_pn_cmd_spp: -0x6b68 030152 fetch 1 ,mem_spp_state -0x6b69 030153 set1 rfcomm_channel_state_pn_res ,pdata -0x6b6a 030154 store 1 ,mem_spp_state -0x6b6b 030155 branch rfcomm_rx_process_end -: 030157 parse_dlci0_reconn_uih_ms_cmd: -0x6b6c 030158 call get_rfcomm_param_modem_status -0x6b6d 030159 fetch 1 ,mem_ms_channel -0x6b6e 030160 fetcht 1 ,mem_remote_spp_channel -0x6b6f 030161 isub temp ,null -0x6b70 030162 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero -0x6b71 030163 branch assert -0x6b72 030164 branch rfcomm_rx_process_end -: 030165 parse_dlci0_reconn_uih_ms_cmd_spp: -0x6b73 030166 fetch 1 ,mem_spp_state -0x6b74 030167 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata -0x6b75 030168 set1 rfcomm_channel_state_snd_ms_res ,pdata -0x6b76 030169 store 1 ,mem_spp_state -0x6b77 030170 fetcht 1 ,mem_pn_dlci -0x6b78 030171 lshift2 temp ,temp -0x6b79 030172 or_into 3 ,temp -0x6b7a 030173 call rfcomm_send_modem_status_res -0x6b7b 030174 branch rfcomm_rx_process_end -: 030176 parse_dlci0_reconn_uih_ms_res: -0x6b7c 030177 call get_rfcomm_param_modem_status -0x6b7d 030178 fetch 1 ,mem_ms_channel -0x6b7e 030179 fetcht 1 ,mem_remote_spp_channel -0x6b7f 030180 isub temp ,null -0x6b80 030181 branch parse_dlci0_reconn_uih_ms_res_spp ,zero -0x6b81 030182 branch assert -: 030183 parse_dlci0_reconn_uih_ms_res_spp: -0x6b82 030184 fetch 1 ,mem_spp_state -0x6b83 030185 set1 rfcomm_channel_state_rcv_ms_res ,pdata -0x6b84 030186 store 1 ,mem_spp_state -0x6b85 030187 branch rfcomm_rx_process_end -: 030189 parse_uih_reconn: -0x6b86 030190 fetch 1 ,mem_current_channel -0x6b87 030191 fetcht 1 ,mem_remote_spp_channel -0x6b88 030192 isub temp ,null -0x6b89 030193 branch parse_uih_reconn_spp ,zero -0x6b8a 030194 branch assert -0x6b8b 030195 branch rfcomm_rx_process_end -: 030197 parse_uih_reconn_spp: -0x6b8c 030198 fetch 1 ,mem_current_frame_type -0x6b8d 030199 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua -0x6b8e 030200 beq rfcomm_frame_type_uih ,parse_uih_spp_uih -0x6b8f 030201 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits -0x6b90 030202 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn -: 030203 parse_uih_reconn_spp_ua: -0x6b91 030204 fetch 1 ,mem_spp_state -0x6b92 030205 set1 rfcomm_channel_state_ua ,pdata -0x6b93 030206 store 1 ,mem_spp_state -0x6b94 030207 branch rfcomm_rx_process_end -: 030208 parse_uih_reconn_spp_sabm: -0x6b95 030209 branch parse_uih_reconn_spp_sabm -: 030210 parse_uih_reconn_spp_disconn: -0x6b96 030211 branch parse_uih_rp_spp_disconn -: 030212 rfcomm_rx_process_end: -0x6b97 030213 rtn -: 030215 rfcomm_send_more_pkt: -0x6b98 030216 fetch 1 ,mem_rfcomm_send_more_pkt -0x6b99 030217 rtn blank -0x6b9a 030218 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp -0x6b9b 030219 branch assert -: 030221 rfcomm_send_more_pkt_msc_cmd_spp: -0x6b9c 030222 jam 0 ,mem_rfcomm_send_more_pkt -0x6b9d 030223 call l2cap_malloc_rfcomm_channel -0x6b9e 030224 arg spp_slave_channel ,temp -0x6b9f 030225 fetcht 1 ,mem_pn_dlci -0x6ba0 030226 lshift2 temp ,temp -: 030227 rfcomm_send_more_pkt_msc_cmd_spp0: -0x6ba1 030228 or_into 0x03 ,temp -0x6ba2 030229 arg 0xaa ,rega -0x6ba3 030230 call rfcomm_send_modem_status_cmd -0x6ba4 030231 call l2cap_get_rfcomm_tx_buff -0x6ba5 030232 copy contw ,contr -0x6ba6 030233 ifetch 2 ,contr -0x6ba7 030234 branch assert ,blank -0x6ba8 030235 rtn -: 030237 rfcomm_send_sabm: -0x6ba9 030238 call l2cap_get_rfcomm_tx_buff -0x6baa 030239 setarg 0x0004 -0x6bab 030240 istore 2 ,contw -0x6bac 030241 fetch 2 ,mem_rfcomm_remote_cid -0x6bad 030242 istore 2 ,contw -0x6bae 030243 fetch 1 ,mem_current_adss -0x6baf 030244 istore 1 ,contw -0x6bb0 030245 bpatchx patch35_2 ,mem_patch35 -0x6bb1 030246 setarg 0x013f -0x6bb2 030247 istore 2 ,contw -0x6bb3 030248 fetch 1 ,mem_current_fcs -0x6bb4 030249 istore 1 ,contw -0x6bb5 030250 rtn -: 030251 rfcomm_send_ua: -0x6bb6 030252 call l2cap_malloc_rfcomm_channel -0x6bb7 030253 call l2cap_get_rfcomm_tx_buff -0x6bb8 030254 setarg 0x0004 -0x6bb9 030255 istore 2 ,contw -0x6bba 030256 fetch 2 ,mem_rfcomm_remote_cid -0x6bbb 030257 istore 2 ,contw -0x6bbc 030258 fetch 1 ,mem_current_adss -0x6bbd 030259 istore 1 ,contw -0x6bbe 030260 bpatchx patch35_3 ,mem_patch35 -0x6bbf 030261 setarg 0x0173 -0x6bc0 030262 istore 2 ,contw -0x6bc1 030263 fetch 1 ,mem_current_fcs -0x6bc2 030264 istore 1 ,contw -0x6bc3 030265 rtn -: 030266 rfcomm_send_param_neg_cmd: -0x6bc4 030267 call l2cap_get_rfcomm_tx_buff -0x6bc5 030268 setarg 0x000e -0x6bc6 030269 istore 2 ,contw -0x6bc7 030270 fetch 2 ,mem_rfcomm_remote_cid -0x6bc8 030271 istore 2 ,contw -0x6bc9 030272 fetch 1 ,mem_rfcomm_initiator -0x6bca 030273 lshift pdata ,pdata -0x6bcb 030274 set1 0 ,pdata -0x6bcc 030275 istore 1 ,contw -0x6bcd 030276 bpatchx patch35_4 ,mem_patch35 -0x6bce 030277 setarg 0x15ef -0x6bcf 030278 istore 2 ,contw -0x6bd0 030279 setarg 0x1183 -0x6bd1 030280 istore 2 ,contw -0x6bd2 030281 copy temp ,pdata -0x6bd3 030282 istore 1 ,contw -0x6bd4 030283 setarg 0x0000f0 -0x6bd5 030284 istore 3 ,contw -0x6bd6 030285 setarg rfcomm_max_frame_size -0x6bd7 030286 istore 2 ,contw -0x6bd8 030287 setarg 0 -0x6bd9 030288 istore 1 ,contw -0x6bda 030289 setarg 0x01 -0x6bdb 030290 istore 1 ,contw -0x6bdc 030291 call rfcomm_calculate_fcs_dlci0 -0x6bdd 030292 istore 1 ,contw -0x6bde 030293 jam 0x10 ,mem_credit_given -0x6bdf 030294 rtn -: 030295 rfcomm_send_param_neg_res: -0x6be0 030296 call l2cap_malloc_rfcomm_channel -0x6be1 030297 call l2cap_get_rfcomm_tx_buff -0x6be2 030298 setarg 0x000e -0x6be3 030299 istore 2 ,contw -0x6be4 030300 fetch 2 ,mem_rfcomm_remote_cid -0x6be5 030301 istore 2 ,contw -0x6be6 030302 fetch 1 ,mem_rfcomm_initiator -0x6be7 030303 lshift pdata ,pdata -0x6be8 030304 set1 0 ,pdata -0x6be9 030305 istore 1 ,contw -0x6bea 030306 bpatchx patch35_5 ,mem_patch35 -0x6beb 030307 setarg 0x15ef -0x6bec 030308 istore 2 ,contw -0x6bed 030309 setarg 0x1181 -0x6bee 030310 istore 2 ,contw -0x6bef 030311 fetch 1 ,mem_pn_dlci -0x6bf0 030312 istore 1 ,contw -0x6bf1 030313 setarg 0x0000e0 -0x6bf2 030314 istore 3 ,contw -0x6bf3 030315 fetch 2 ,mem_rfcomm_max_frame_size -0x6bf4 030316 istore 2 ,contw -0x6bf5 030317 setarg 0x00 -0x6bf6 030318 istore 1 ,contw -0x6bf7 030319 fetch 1 ,mem_rfcomm_credit_init_data -0x6bf8 030320 istore 1 ,contw -0x6bf9 030321 call rfcomm_calculate_fcs_dlci0 -0x6bfa 030322 istore 1 ,contw -0x6bfb 030323 rtn -: 030324 rfcomm_send_modem_status_cmd: -0x6bfc 030325 call l2cap_get_rfcomm_tx_buff -0x6bfd 030326 setarg 0x0008 -0x6bfe 030327 istore 2 ,contw -0x6bff 030328 fetch 2 ,mem_rfcomm_remote_cid -0x6c00 030329 istore 2 ,contw -0x6c01 030330 fetch 1 ,mem_rfcomm_initiator -0x6c02 030331 lshift pdata ,pdata -0x6c03 030332 set1 0 ,pdata -0x6c04 030333 istore 1 ,contw -0x6c05 030334 bpatchx patch35_6 ,mem_patch35 -0x6c06 030335 setarg 0x09ef -0x6c07 030336 istore 2 ,contw -0x6c08 030337 setarg 0x05e3 -0x6c09 030338 istore 2 ,contw -0x6c0a 030339 copy temp ,pdata -0x6c0b 030340 istore 1 ,contw -0x6c0c 030341 setarg 0x8d -0x6c0d 030342 istore 1 ,contw -0x6c0e 030343 call rfcomm_calculate_fcs_dlci0 -0x6c0f 030344 istore 1 ,contw -0x6c10 030345 rtn -: 030347 rfcomm_send_modem_status_res: -0x6c11 030348 call l2cap_malloc_rfcomm_channel -0x6c12 030349 call l2cap_get_rfcomm_tx_buff -0x6c13 030350 setarg 0x0008 -0x6c14 030351 istore 2 ,contw -0x6c15 030352 fetch 2 ,mem_rfcomm_remote_cid -0x6c16 030353 istore 2 ,contw -0x6c17 030354 copy temp ,timeup -0x6c18 030355 fetch 1 ,mem_rfcomm_initiator -0x6c19 030356 lshift pdata ,pdata -0x6c1a 030357 set1 0 ,pdata -0x6c1b 030358 istore 1 ,contw -0x6c1c 030359 bpatchx patch35_7 ,mem_patch35 -0x6c1d 030360 setarg 0x09ef -0x6c1e 030361 istore 2 ,contw -0x6c1f 030362 setarg 0x05e1 -0x6c20 030363 istore 2 ,contw -0x6c21 030364 copy timeup ,pdata -0x6c22 030365 istore 1 ,contw -0x6c23 030366 setarg 0x8d -0x6c24 030367 istore 1 ,contw -0x6c25 030368 call rfcomm_calculate_fcs_dlci0 -0x6c26 030369 istore 1 ,contw -0x6c27 030370 rtn -: 030372 rfcomm_send_uih_without_payload: -0x6c28 030373 bpatchx patch36_0 ,mem_patch36 -0x6c29 030374 fetch 1 ,mem_credit_given -0x6c2a 030375 rtn blank -0x6c2b 030376 hfetch 2 ,core_uart_rxitems -0x6c2c 030377 nrtn blank -0x6c2d 030378 copy rega ,pdata -0x6c2e 030379 store 1 ,mem_pdatatemp + 1 -0x6c2f 030380 storet 1 ,mem_pdatatemp -0x6c30 030381 call l2cap_malloc_is_fifo_full -0x6c31 030382 nrtn blank -0x6c32 030383 call l2cap_malloc_rfcomm_channel -0x6c33 030384 call l2cap_get_rfcomm_tx_buff -0x6c34 030385 setarg 0x05 -0x6c35 030386 istore 2 ,contw -0x6c36 030387 fetch 2 ,mem_rfcomm_remote_cid -0x6c37 030388 istore 2 ,contw -0x6c38 030389 fetch 1 ,mem_rfcomm_send_adss -0x6c39 030390 istore 1 ,contw -0x6c3a 030391 setarg 0x01ff -0x6c3b 030392 istore 2 ,contw -0x6c3c 030393 fetch 1 ,mem_credit_given -0x6c3d 030394 istore 1 ,contw -0x6c3e 030395 fetch 1 ,mem_hiufcs_spp_wcredits -0x6c3f 030396 istore 1 ,contw -0x6c40 030397 jam 0 ,mem_credit_given -0x6c41 030398 rtn -: 030400 rfcomm_increase_credit_given: -0x6c42 030401 bpatchx patch36_1 ,mem_patch36 -0x6c43 030402 fetch 1 ,mem_credit_flag -0x6c44 030403 rtneq credit_enable -0x6c45 030404 fetch 2 ,mem_current_length -0x6c46 030405 rtn blank -0x6c47 030406 fetch 1 ,mem_credit_given -0x6c48 030407 increase 1 ,pdata -0x6c49 030408 store 1 ,mem_credit_given -0x6c4a 030409 rtn -: 030411 spp_process_rx_data: -0x6c4b 030412 fetch 2 ,mem_cb_receive_spp_data -0x6c4c 030413 branch callback_func -: 030415 spp_tx_rfcomm_packet: -0x6c4d 030416 bpatchx patch36_2 ,mem_patch36 -0x6c4e 030418 fetch 1 ,mem_remote_credits -0x6c4f 030419 rtn blank -0x6c50 030420 increase -1 ,pdata -0x6c51 030421 store 1 ,mem_remote_credits -0x6c52 030422 fetch 2 ,mem_pn_max_frame_size -0x6c53 030423 fetcht 2 ,mem_current_packet_length -0x6c54 030424 isub temp ,null -0x6c55 030425 branch ssp_tx_rfcomm_from_uart ,positive -0x6c56 030426 store 2 ,mem_current_packet_length -: 030427 ssp_tx_rfcomm_from_uart: -0x6c57 030428 fetch 1 ,mem_credit_given -0x6c58 030429 branch ssp_tx_rfcomm_from_uart_without_credit ,blank -0x6c59 030430 jam 1 ,mem_rfcomm_send_offset -0x6c5a 030431 fetch 1 ,mem_hiufcs_spp_wcredits -0x6c5b 030432 store 1 ,mem_rfcomm_send_fcs -0x6c5c 030433 setarg rsp_rx_uih_wdata -0x6c5d 030434 store 1 ,mem_rfcomm_send_frame_type -0x6c5e 030435 branch ssp_tx_rfcomm_from_uart_common -: 030436 ssp_tx_rfcomm_from_uart_without_credit: -0x6c5f 030437 jam 0 ,mem_rfcomm_send_offset -0x6c60 030438 fetch 1 ,mem_hiufcs_spp -0x6c61 030439 store 1 ,mem_rfcomm_send_fcs -0x6c62 030440 setarg rsp_tx_uih -0x6c63 030441 store 1 ,mem_rfcomm_send_frame_type -: 030442 ssp_tx_rfcomm_from_uart_common: -0x6c64 030443 bpatchx patch36_3 ,mem_patch36 -0x6c65 030444 fetch 2 ,mem_current_packet_length -0x6c66 030445 sub pdata ,127 ,null -0x6c67 030446 branch ssp_tx_rfcomm_from_uart_common0 ,positive -0x6c68 030447 fetch 1 ,mem_rfcomm_send_offset -0x6c69 030448 increase 1 ,pdata -0x6c6a 030449 store 1 ,mem_rfcomm_send_offset -: 030450 ssp_tx_rfcomm_from_uart_common0: -0x6c6b 030451 call get_rfcomm_snd_adss -0x6c6c 030452 fetch 2 ,mem_current_packet_length -0x6c6d 030453 increase 8 ,pdata -0x6c6e 030454 fetcht 1 ,mem_rfcomm_send_offset -0x6c6f 030455 iadd temp ,rega -0x6c70 030457 call l2cap_malloc -0x6c71 030458 store 2 ,mem_rfcomm_tx_buff_ptr -0x6c72 030459 increase 4 ,pdata -0x6c73 030460 store 2 ,mem_rfcomm_tx_payload_ptr -0x6c74 030461 copy pdata ,contw -0x6c75 030462 fetch 1 ,mem_rfcomm_send_adss -0x6c76 030463 istore 1 ,contw -0x6c77 030464 fetch 1 ,mem_rfcomm_send_frame_type -0x6c78 030465 istore 1 ,contw -0x6c79 030466 call ssp_tx_write_length -0x6c7a 030467 call ssp_tx_write_given_credit -0x6c7b 030468 bpatchx patch36_4 ,mem_patch36 -0x6c7c 030469 fetch 2 ,mem_nl_rx_data_src -0x6c7d 030470 copy pdata ,contru -0x6c7e 030471 fetch 2 ,mem_current_packet_length -0x6c7f 030472 copy pdata ,loopcnt -0x6c80 030473 call uart_copy_rx_bytes_fast -0x6c81 030474 copy contw ,temp -0x6c82 030475 copy contru ,pdata -0x6c83 030476 store 2 ,mem_nl_rx_data_src -0x6c84 030477 copy temp ,contw -0x6c85 030478 fetch 1 ,mem_rfcomm_send_fcs -0x6c86 030479 istore 1 ,contw -0x6c87 030480 fetch 2 ,mem_rfcomm_tx_buff_ptr -0x6c88 030481 copy pdata ,contw -0x6c89 030482 fetch 2 ,mem_current_packet_length -0x6c8a 030483 fetcht 1 ,mem_rfcomm_send_offset -0x6c8b 030484 iadd temp ,pdata -0x6c8c 030485 increase 4 ,pdata -0x6c8d 030486 istore 2 ,contw -0x6c8e 030487 fetch 2 ,mem_rfcomm_remote_cid -0x6c8f 030488 istore 2 ,contw -0x6c90 030489 jam 0 ,mem_credit_given -0x6c91 030490 fetch 2 ,mem_nl_rx_len_all -0x6c92 030491 beq 0 ,module_hci_command_tx_spp_tx_complete -0x6c93 030492 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x6c94 030493 rtn -: 030495 ssp_tx_write_length: -0x6c95 030496 bpatchx patch36_5 ,mem_patch36 -0x6c96 030497 fetch 2 ,mem_current_packet_length -0x6c97 030498 sub pdata ,0x7f ,null -0x6c98 030499 nbranch ssp_tx_write_long_packet ,positive -0x6c99 030500 lshift pdata ,pdata -0x6c9a 030501 set1 0 ,pdata -0x6c9b 030502 istore 1 ,contw -0x6c9c 030503 rtn -: 030504 ssp_tx_write_long_packet: -0x6c9d 030505 fetch 2 ,mem_current_packet_length -0x6c9e 030506 rshift3 pdata ,pdata -0x6c9f 030507 rshift4 pdata ,temp -0x6ca0 030508 and_into 0x7f ,pdata -0x6ca1 030509 lshift pdata ,pdata -0x6ca2 030510 set0 0 ,pdata -0x6ca3 030511 istore 1 ,contw -0x6ca4 030512 istoret 1 ,contw -0x6ca5 030513 rtn -: 030514 ssp_tx_write_given_credit: -0x6ca6 030515 fetch 1 ,mem_credit_given -0x6ca7 030516 rtn blank -0x6ca8 030517 istore 1 ,contw -0x6ca9 030518 rtn -: 030523 scheduler_process: -0x6caa 030524 bpatchx patch36_6 ,mem_patch36 -0x6cab 030525 call check_51cmd -0x6cac 030526 call app_process_bb_event -0x6cad 030527 call process_conn_sm -0x6cae 030529 bpatchx patch36_7 ,mem_patch36 -0x6caf 030530 call sp_calc_sequence -0x6cb0 030531 call simple_pairing_sequence -0x6cb1 030532 call master_simple_paring_sequence -0x6cb2 030535 call l2cap_malloc_is_fifo_full -0x6cb3 030536 nrtn blank -0x6cb4 030538 call l2cap_call_proc_sigal_pending -0x6cb5 030539 call l2cap_malloc_is_fifo_full -0x6cb6 030540 nrtn blank -0x6cb7 030541 bpatchx patch37_0 ,mem_patch37 -0x6cb8 030543 call process_upper_sm -0x6cb9 030544 call l2cap_send_config_req -0x6cba 030545 call rfcomm_send_more_pkt -: 030546 scheduler_process0: -0x6cbb 030547 call scheduler_tx_disconnect_hid -0x6cbc 030548 bpatchx patch37_1 ,mem_patch37 -0x6cbd 030551 branch app_process_bt -: 030553 scheduler_tx_disconnect_hid: -0x6cbe 030554 fetch 1 ,mem_control_tasks -0x6cbf 030555 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req -0x6cc0 030556 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req -0x6cc1 030557 rtn -: 030559 scheduler_tx_l2cap_pkt: -0x6cc2 030560 bpatchx patch37_2 ,mem_patch37 -0x6cc3 030561 call l2cap_malloc_is_fifo_empty -0x6cc4 030562 rtn blank -0x6cc5 030563 fetch 1 ,mem_op -0x6cc6 030564 rtnbit1 op_txl2cap -0x6cc7 030565 call l2cap_malloc_fifo_out -0x6cc8 030566 store 2 ,mem_txptr -0x6cc9 030567 copy pdata ,contr -0x6cca 030568 ifetch 2 ,contr -0x6ccb 030569 increase 4 ,pdata -0x6ccc 030570 store 2 ,mem_tx_len -0x6ccd 030571 jam 6 ,mem_tx_lch -0x6cce 030572 bpatchx patch37_3 ,mem_patch37 -0x6ccf 030573 fetch 2 ,mem_l2cap_tx_multi_offset -0x6cd0 030574 branch scheduler_tx_l2cap_start_pkt ,blank -0x6cd1 030575 fetch 1 ,mem_op -0x6cd2 030576 rtnbit0 op_pkt_comp -0x6cd3 030577 set0 op_pkt_comp ,pdata -0x6cd4 030578 store 1 ,mem_op -0x6cd5 030579 jam 5 ,mem_tx_lch -0x6cd6 030580 fetcht 2 ,mem_l2cap_tx_multi_offset -0x6cd7 030581 fetch 2 ,mem_txptr -0x6cd8 030582 iadd temp ,pdata -0x6cd9 030583 store 2 ,mem_txptr -0x6cda 030584 fetch 2 ,mem_tx_len -0x6cdb 030585 isub temp ,pdata -0x6cdc 030586 store 2 ,mem_tx_len -: 030587 scheduler_tx_l2cap_start_pkt: -0x6cdd 030588 bpatchx patch37_4 ,mem_patch37 -0x6cde 030589 fetch 2 ,mem_tx_len -0x6cdf 030590 branch assert ,blank -0x6ce0 030591 arg l2cap_max_pkt_len ,temp -0x6ce1 030592 isub temp ,pdata -0x6ce2 030593 nbranch scheduler_tx_l2cap_last_pkt ,positive -0x6ce3 030594 bpatchx patch37_5 ,mem_patch37 -0x6ce4 030595 storet 2 ,mem_tx_len -0x6ce5 030596 fetch 2 ,mem_l2cap_tx_multi_offset -0x6ce6 030597 iadd temp ,pdata -0x6ce7 030598 store 2 ,mem_l2cap_tx_multi_offset -0x6ce8 030599 branch scheduler_tx_l2cap_pkt_end -: 030600 scheduler_tx_l2cap_last_pkt: -0x6ce9 030601 setarg 0 -0x6cea 030602 store 2 ,mem_l2cap_tx_multi_offset -: 030603 scheduler_tx_l2cap_pkt_end: -0x6ceb 030604 fetch 1 ,mem_op -0x6cec 030605 set1 op_txl2cap ,pdata -0x6ced 030606 store 1 ,mem_op -0x6cee 030607 rtn -: 030609 scheduler_start_upper_sm: -0x6cef 030610 fetch 1 ,mem_ui_profile_supported -0x6cf0 030611 bbit1 support_hid ,scheduler_start_upper_sm_hid -0x6cf1 030612 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn -0x6cf2 030613 rtn -: 030614 scheduler_start_upper_sm_hid: -0x6cf3 030615 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn -0x6cf4 030616 rtn -: 030618 process_upper_sm: -0x6cf5 030619 fetch 1 ,memui_reconnect_mode -0x6cf6 030620 nbranch process_upper_sm_reconn ,blank -: 030621 process_upper_sm_remote_page: -0x6cf7 030622 fetch 1 ,mem_upper_sm_remote_page -0x6cf8 030624 rtn blank -0x6cf9 030626 jam 0 ,mem_upper_sm_remote_page -: 030627 process_upper_sm_rp_wait: -0x6cfa 030628 rtn -: 030631 process_upper_sm_reconn: -0x6cfb 030632 bpatchx patch37_6 ,mem_patch37 -0x6cfc 030633 fetch 1 ,mem_upper_sm_reconn -0x6cfd 030634 rtn blank -0x6cfe 030635 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn -0x6cff 030636 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait -0x6d00 030637 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg -0x6d01 030638 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait -0x6d02 030639 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp -0x6d03 030640 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait -0x6d04 030641 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn -0x6d05 030642 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait -0x6d06 030643 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn -0x6d07 030644 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait -0x6d08 030645 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg -0x6d09 030646 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait -0x6d0a 030647 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn -0x6d0b 030648 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait -0x6d0c 030649 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg -0x6d0d 030650 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait -0x6d0e 030651 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn -0x6d0f 030652 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait -0x6d10 030653 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg -0x6d11 030654 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait -0x6d12 030655 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm -0x6d13 030656 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait -0x6d14 030657 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn -0x6d15 030658 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait -0x6d16 030659 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm -0x6d17 030660 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait -0x6d18 030661 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms -0x6d19 030662 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait -: 030663 process_upper_sm_reconn_wait: -0x6d1a 030664 rtn -: 030665 process_upper_sm_reconn_sdp_conn: -0x6d1b 030666 call upper_sm_send_sdp_conn -0x6d1c 030667 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn -0x6d1d 030668 fetch 1 ,mem_sdp_state -0x6d1e 030669 set1 l2cap_channel_state_conn_req ,pdata -0x6d1f 030670 store 1 ,mem_sdp_state -0x6d20 030671 rtn -: 030672 process_upper_sm_reconn_sdp_cfg: -0x6d21 030673 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn -0x6d22 030674 fetch 1 ,mem_sdp_state -0x6d23 030675 rtnbit1 l2cap_channel_state_snd_cfg_req -0x6d24 030676 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn -0x6d25 030677 call upper_sm_send_sdp_cfg -0x6d26 030678 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn -0x6d27 030679 fetch 1 ,mem_sdp_state -0x6d28 030680 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d29 030681 store 1 ,mem_sdp_state -0x6d2a 030682 rtn -: 030683 process_upper_sm_reconn_ss_spp: -0x6d2b 030684 call l2cap_malloc_is_fifo_empty -0x6d2c 030685 nrtn blank -0x6d2d 030686 call upper_sm_send_ss_spp -0x6d2e 030687 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn -0x6d2f 030688 rtn -: 030689 process_upper_sm_reconn_sdp_disconn: -0x6d30 030690 call upper_sm_send_sdp_disconn -0x6d31 030691 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn -0x6d32 030692 rtn -: 030693 process_upper_sm_reconn_hid_ctrl_conn: -0x6d33 030694 call upper_sm_send_hid_ctrl_conn -0x6d34 030695 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn -0x6d35 030696 fetch 1 ,mem_hid_control_state -0x6d36 030697 set1 l2cap_channel_state_conn_req ,pdata -0x6d37 030698 store 1 ,mem_hid_control_state -0x6d38 030699 rtn -: 030700 process_upper_sm_reconn_hid_ctrl_cfg: -0x6d39 030701 call upper_sm_send_hid_ctrl_cfg -0x6d3a 030702 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn -0x6d3b 030703 fetch 1 ,mem_hid_control_state -0x6d3c 030704 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d3d 030705 store 1 ,mem_hid_control_state -0x6d3e 030706 rtn -: 030707 process_upper_sm_reconn_hid_int_conn: -0x6d3f 030708 call upper_sm_send_hid_int_conn -0x6d40 030709 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn -0x6d41 030710 fetch 1 ,mem_hid_interrupt_state -0x6d42 030711 set1 l2cap_channel_state_conn_req ,pdata -0x6d43 030712 store 1 ,mem_hid_interrupt_state -0x6d44 030713 rtn -: 030714 process_upper_sm_reconn_hid_int_cfg: -0x6d45 030715 call upper_sm_send_hid_int_cfg -0x6d46 030716 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn -0x6d47 030717 fetch 1 ,mem_hid_interrupt_state -0x6d48 030718 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d49 030719 store 1 ,mem_hid_interrupt_state -0x6d4a 030720 rtn -: 030721 process_upper_sm_reconn_rfcomm_conn: -0x6d4b 030722 call upper_sm_send_rfcomm_conn -0x6d4c 030723 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn -0x6d4d 030724 fetch 1 ,mem_rfcomm_state -0x6d4e 030725 set1 l2cap_channel_state_conn_req ,pdata -0x6d4f 030726 store 1 ,mem_rfcomm_state -0x6d50 030727 rtn -: 030728 process_upper_sm_reconn_rfcomm_cfg: -0x6d51 030729 call upper_sm_send_rfcomm_cfg -0x6d52 030730 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn -0x6d53 030731 fetch 1 ,mem_rfcomm_state -0x6d54 030732 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d55 030733 store 1 ,mem_rfcomm_state -0x6d56 030734 rtn -: 030735 process_upper_sm_reconn_rfcomm_sabm: -0x6d57 030736 call upper_sm_send_rfcomm_sabm -0x6d58 030737 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn -0x6d59 030738 fetch 1 ,mem_rfcomm_state -0x6d5a 030739 set1 l2cap_channel_rfcomm_only_sabm ,pdata -0x6d5b 030740 store 1 ,mem_rfcomm_state -0x6d5c 030741 rtn -: 030742 process_upper_sm_reconn_spp_cmd_pn: -0x6d5d 030743 call upper_sm_send_spp_cmd_pn -0x6d5e 030744 fetch 1 ,mem_spp_state -0x6d5f 030745 set1 rfcomm_channel_state_pn_cmd -0x6d60 030746 store 1 ,mem_spp_state -0x6d61 030747 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn -0x6d62 030748 rtn -: 030749 process_upper_sm_reconn_spp_sabm: -0x6d63 030750 call upper_sm_send_spp_sabm -0x6d64 030751 fetch 1 ,mem_spp_state -0x6d65 030752 set1 rfcomm_channel_state_sabm -0x6d66 030753 store 1 ,mem_spp_state -0x6d67 030754 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn -0x6d68 030755 fetch 1 ,mem_remote_spp_channel -0x6d69 030756 lshift3 pdata ,pdata -0x6d6a 030757 or_into 3 ,pdata -0x6d6b 030758 arg mem_hiufcs_spp ,temp -0x6d6c 030759 storet 2 ,mem_contw_temp -0x6d6d 030760 branch rfcomm_save_fcs_uih -: 030761 process_upper_sm_reconn_spp_cmd_ms: -0x6d6e 030762 call upper_sm_send_spp_cmd_ms -0x6d6f 030763 fetch 1 ,mem_spp_state -0x6d70 030764 set1 rfcomm_channel_state_snd_ms_cmd -0x6d71 030765 store 1 ,mem_spp_state -0x6d72 030766 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn -0x6d73 030767 rtn -: 030769 process_upper_sm_reconn_sdp_conn_wait: -0x6d74 030770 fetch 1 ,mem_sdp_state -0x6d75 030771 rtnbit0 l2cap_channel_state_conn_res -0x6d76 030772 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn -0x6d77 030773 branch process_upper_sm_reconn -: 030774 process_upper_sm_reconn_sdp_cfg_wait: -0x6d78 030775 fetch 1 ,mem_sdp_state -0x6d79 030776 rtnne l2cap_channel_setup_complete -0x6d7a 030777 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn -: 030778 process_upper_sm_reconn_ss_spp_wait: -0x6d7b 030779 fetch 1 ,mem_message_to_uppersm -0x6d7c 030780 rtnne recieve_ss_reasult_hf -0x6d7d 030781 jam 0 ,mem_message_to_uppersm -0x6d7e 030782 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn -0x6d7f 030783 branch process_upper_sm_reconn -: 030784 process_upper_sm_reconn_sdp_disconn_wait: -0x6d80 030785 fetch 1 ,mem_sdp_state -0x6d81 030786 nrtn blank -0x6d82 030787 fetch 1 ,mem_ui_profile_supported -0x6d83 030788 bbit1 support_hid ,process_upper_sm_reconn_setup_hid -0x6d84 030789 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm -0x6d85 030790 branch process_upper_sm_reconn_termination -: 030791 process_upper_sm_reconn_hid_ctrl_conn_wait: -0x6d86 030792 fetch 1 ,mem_hid_control_state -0x6d87 030793 rtnbit0 l2cap_channel_state_conn_res -0x6d88 030794 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn -0x6d89 030795 branch process_upper_sm_reconn -: 030796 process_upper_sm_reconn_hid_ctrl_cfg_wait: -0x6d8a 030797 fetch 1 ,mem_hid_control_state -0x6d8b 030798 rtnne l2cap_channel_setup_complete -0x6d8c 030799 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn -0x6d8d 030800 branch process_upper_sm_reconn -: 030801 process_upper_sm_reconn_hid_int_conn_wait: -0x6d8e 030802 fetch 1 ,mem_hid_interrupt_state -0x6d8f 030803 rtnbit0 l2cap_channel_state_conn_res -0x6d90 030804 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn -0x6d91 030805 branch process_upper_sm_reconn -: 030806 process_upper_sm_reconn_hid_int_cfg_wait: -0x6d92 030807 fetch 1 ,mem_hid_interrupt_state -0x6d93 030808 rtnne l2cap_channel_setup_complete -0x6d94 030809 fetch 1 ,mem_ui_profile_supported -0x6d95 030810 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm -0x6d96 030811 branch process_upper_sm_reconn_termination -: 030812 process_upper_sm_reconn_rfcomm_conn_wait: -0x6d97 030813 fetch 1 ,mem_rfcomm_state -0x6d98 030814 rtnbit0 l2cap_channel_state_conn_res -0x6d99 030815 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn -0x6d9a 030816 branch process_upper_sm_reconn -: 030817 process_upper_sm_reconn_rfcomm_cfg_wait: -0x6d9b 030818 fetch 1 ,mem_rfcomm_state -0x6d9c 030819 rtnne l2cap_channel_setup_complete -0x6d9d 030820 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn -0x6d9e 030821 branch process_upper_sm_reconn -: 030822 process_upper_sm_reconn_rfcomm_sabm_wait: -0x6d9f 030823 fetch 1 ,mem_rfcomm_state -0x6da0 030824 rtnne l2cap_channel_rfcomm_dlci0_opened -0x6da1 030825 fetch 1 ,mem_ui_profile_supported -0x6da2 030826 bbit1 support_spp ,process_upper_sm_reconn_setup_spp -0x6da3 030827 branch process_upper_sm_reconn_termination -: 030828 process_upper_sm_reconn_spp_cmd_pn_wait: -0x6da4 030829 fetch 1 ,mem_spp_state -0x6da5 030830 rtnbit0 rfcomm_channel_state_pn_res -0x6da6 030831 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn -0x6da7 030832 branch process_upper_sm_reconn -: 030833 process_upper_sm_reconn_spp_sabm_wait: -0x6da8 030834 fetch 1 ,mem_spp_state -0x6da9 030835 rtnbit0 rfcomm_channel_state_ua -0x6daa 030836 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn -0x6dab 030837 branch process_upper_sm_reconn -: 030838 process_upper_sm_reconn_spp_cmd_ms_wait: -0x6dac 030839 fetch 1 ,mem_spp_state -0x6dad 030840 rtnne rfcomm_channel_setup_complete -0x6dae 030841 branch process_upper_sm_reconn_termination -: 030843 process_upper_sm_reconn_setup_hid: -0x6daf 030844 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn -0x6db0 030845 branch process_upper_sm_reconn -: 030847 process_upper_sm_reconn_setup_rfcomm: -0x6db1 030848 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn -0x6db2 030849 branch process_upper_sm_reconn -: 030850 process_upper_sm_reconn_setup_spp: -0x6db3 030851 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn -0x6db4 030852 branch process_upper_sm_reconn -: 030856 process_upper_sm_reconn_termination: -0x6db5 030857 jam 0 ,mem_upper_sm_reconn -0x6db6 030858 rtn -: 030859 upper_sm_send_sdp_conn: -0x6db7 030860 bpatchx patch37_7 ,mem_patch37 -0x6db8 030861 call l2cap_malloc_signal_channel -0x6db9 030862 setarg psm_sdp -0x6dba 030863 copy pdata ,temp -0x6dbb 030864 setarg l2cap_sdp_channel -0x6dbc 030865 copy pdata ,timeup -0x6dbd 030866 branch ml2cap_send_signal_connect_req -: 030868 upper_sm_send_sdp_cfg: -0x6dbe 030869 bpatchx patch38_0 ,mem_patch38 -0x6dbf 030870 call l2cap_malloc_signal_channel -0x6dc0 030871 fetch 2 ,mem_sdp_remote_cid -0x6dc1 030872 copy pdata ,temp -0x6dc2 030873 branch ml2cap_send_signal_config_req -: 030875 upper_sm_send_sdp_disconn: -0x6dc3 030876 bpatchx patch38_1 ,mem_patch38 -0x6dc4 030877 call l2cap_malloc_signal_channel -0x6dc5 030878 fetch 2 ,mem_sdp_remote_cid -0x6dc6 030879 copy pdata ,temp -0x6dc7 030880 arg l2cap_sdp_channel ,timeup -0x6dc8 030881 call ml2cap_send_signal_disconn_req -0x6dc9 030882 fetch 1 ,mem_sdp_state -0x6dca 030883 set0 l2cap_channel_state_rcv_cfg_res ,pdata -0x6dcb 030884 store 1 ,mem_sdp_state -0x6dcc 030885 rtn -: 030887 upper_sm_send_ss_spp: -0x6dcd 030888 bpatchx patch38_2 ,mem_patch38 -0x6dce 030889 call l2cap_malloc_sdp_channel -0x6dcf 030890 call sdp_send_spp_request -0x6dd0 030891 branch msdp_send_req_done -: 030893 upper_sm_send_rfcomm_conn: -0x6dd1 030894 bpatchx patch38_3 ,mem_patch38 -0x6dd2 030895 call l2cap_malloc_signal_channel -0x6dd3 030896 setarg psm_rfcomm -0x6dd4 030897 copy pdata ,temp -0x6dd5 030898 setarg l2cap_rfcomm_channel -0x6dd6 030899 copy pdata ,timeup -0x6dd7 030900 branch ml2cap_send_signal_connect_req -: 030902 upper_sm_send_rfcomm_cfg: -0x6dd8 030903 bpatchx patch38_4 ,mem_patch38 -0x6dd9 030904 call l2cap_malloc_signal_channel -0x6dda 030905 fetch 2 ,mem_rfcomm_remote_cid -0x6ddb 030906 copy pdata ,temp -0x6ddc 030907 branch ml2cap_send_signal_config_req -: 030909 upper_sm_send_hid_ctrl_conn: -0x6ddd 030910 bpatchx patch38_5 ,mem_patch38 -0x6dde 030911 call l2cap_malloc_signal_channel -0x6ddf 030912 setarg psm_hid_control -0x6de0 030913 copy pdata ,temp -0x6de1 030914 setarg l2cap_hid_control_channel -0x6de2 030915 copy pdata ,timeup -0x6de3 030916 branch ml2cap_send_signal_connect_req -: 030918 upper_sm_send_hid_ctrl_cfg: -0x6de4 030919 bpatchx patch38_6 ,mem_patch38 -0x6de5 030920 call l2cap_malloc_signal_channel -0x6de6 030921 fetch 2 ,mem_hid_ctrl_remote_cid -0x6de7 030922 copy pdata ,temp -0x6de8 030923 branch ml2cap_send_signal_config_req -: 030925 upper_sm_send_hid_int_conn: -0x6de9 030926 bpatchx patch38_7 ,mem_patch38 -0x6dea 030927 call l2cap_malloc_signal_channel -0x6deb 030928 setarg psm_hid_interrupt -0x6dec 030929 copy pdata ,temp -0x6ded 030930 setarg l2cap_hid_interrupt_channel -0x6dee 030931 copy pdata ,timeup -0x6def 030932 branch ml2cap_send_signal_connect_req -: 030934 upper_sm_send_hid_int_cfg: -0x6df0 030935 bpatchx patch39_0 ,mem_patch39 -0x6df1 030936 call l2cap_malloc_signal_channel -0x6df2 030937 fetch 2 ,mem_hid_int_remote_cid -0x6df3 030938 copy pdata ,temp -0x6df4 030939 branch ml2cap_send_signal_config_req -: 030941 upper_sm_send_rfcomm_sabm: -0x6df5 030942 bpatchx patch39_1 ,mem_patch39 -0x6df6 030943 call l2cap_malloc_rfcomm_channel -0x6df7 030945 jam 3 ,mem_current_adss -0x6df8 030946 jam 0x1c ,mem_current_fcs -0x6df9 030947 call rfcomm_send_sabm -0x6dfa 030948 jam 1 ,mem_rfcomm_initiator -0x6dfb 030949 rtn -: 030951 upper_sm_send_spp_cmd_pn: -0x6dfc 030952 bpatchx patch39_2 ,mem_patch39 -0x6dfd 030953 call l2cap_malloc_rfcomm_channel -0x6dfe 030954 fetcht 1 ,mem_remote_spp_channel -0x6dff 030955 call channel_to_dlci -0x6e00 030956 storet 1 ,mem_pn_dlci -0x6e01 030957 branch rfcomm_send_param_neg_cmd -: 030959 upper_sm_send_spp_sabm: -0x6e02 030960 bpatchx patch39_3 ,mem_patch39 -0x6e03 030961 call l2cap_malloc_rfcomm_channel -0x6e04 030962 fetcht 1 ,mem_pn_dlci -0x6e05 030963 call dlci_to_address_cmd -0x6e06 030964 call rfcomm_calculate_fcs_sabm -0x6e07 030965 store 1 ,mem_current_fcs -0x6e08 030966 fetcht 1 ,mem_pn_dlci -0x6e09 030967 call dlci_to_address_cmd -0x6e0a 030968 storet 1 ,mem_current_adss -0x6e0b 030969 branch rfcomm_send_sabm -: 030971 upper_sm_send_spp_cmd_ms: -0x6e0c 030972 bpatchx patch39_4 ,mem_patch39 -0x6e0d 030973 call l2cap_malloc_rfcomm_channel -0x6e0e 030974 fetcht 1 ,mem_pn_dlci -0x6e0f 030975 call dlci_to_address_cmd -0x6e10 030976 branch rfcomm_send_modem_status_cmd -: 030989 sdp_process: -0x6e11 030990 bpatchx patch39_5 ,mem_patch39 -0x6e12 030991 fetch 2 ,mem_l2cap_payload_ptr -0x6e13 030992 iforce contr -0x6e14 030995 ifetch 1 ,contr -0x6e15 030996 copy pdata ,regb -0x6e16 030997 store 1 ,mem_sdp_pduid -0x6e17 030998 ifetch 2 ,contr -0x6e18 030999 store 2 ,mem_sdp_transactionid -0x6e19 031000 ifetch 1 ,contr -0x6e1a 031001 lshift8 pdata ,timeup -0x6e1b 031002 ifetch 1 ,contr -0x6e1c 031003 iadd timeup ,timeup -0x6e1d 031004 bpatchx patch39_6 ,mem_patch39 -0x6e1e 031005 copy contr ,temp -0x6e1f 031006 arg 4 ,loopcnt -0x6e20 031007 arg mem_sdp_handle_list ,contw -0x6e21 031008 call memset0 -0x6e22 031009 copy temp ,contr -0x6e23 031010 deposit regb -0x6e24 031011 beq sdp_error_res ,sdp_process_error_res -0x6e25 031012 beq sdp_search_req ,sdp_process_ss_req -0x6e26 031013 beq sdp_search_res ,sdp_process_ss_res -0x6e27 031014 beq sdp_attribute_req ,sdp_process_sa_req -0x6e28 031015 beq sdp_attribute_res ,sdp_process_sa_res -0x6e29 031016 beq sdp_searchattrib_req ,sdp_process_ssa_req -0x6e2a 031017 beq sdp_searchattrib_res ,sdp_process_ssa_res -0x6e2b 031018 branch sdp_insufficient_resource -: 031029 sdp_process_ss_req: -0x6e2c 031030 bpatchx patch39_7 ,mem_patch39 -0x6e2d 031031 call ask_serviceclassid -0x6e2e 031032 compare 1 ,temp ,0xff -0x6e2f 031033 branch ss_empty_rsp ,true -0x6e30 031034 compare 0xff ,temp ,0xff -0x6e31 031035 branch sdp_invalid_request_syntax ,true -0x6e32 031037 ifetch 2 ,contr -0x6e33 031038 store 2 ,mem_sdp_record_maxcnt -0x6e34 031039 increase -2 ,timeup -0x6e35 031041 increase -1 ,timeup -0x6e36 031042 nbranch sdp_invalid_pdu_size ,zero -0x6e37 031043 arg mem_sdp_uuid_search_ptr ,timeup -0x6e38 031044 ifetch 2 ,timeup -0x6e39 031045 rtn blank -0x6e3a 031046 call search_all_uuid -0x6e3b 031047 call l2cap_get_sdp_tx_payload -0x6e3c 031048 force 3 ,pdata -0x6e3d 031049 istore 1 ,contw -0x6e3e 031050 fetch 2 ,mem_sdp_transactionid -0x6e3f 031051 istore 2 ,contw -0x6e40 031052 lshift2 queue ,pdata -0x6e41 031053 add pdata ,5 ,pdata -0x6e42 031054 add pdata ,5 ,regc -0x6e43 031055 byteswap pdata ,pdata -0x6e44 031056 istore 2 ,contw -0x6e45 031057 deposit queue -0x6e46 031058 byteswap pdata ,pdata -0x6e47 031059 istore 2 ,contw -0x6e48 031060 istore 2 ,contw -0x6e49 031061 arg mem_sdp_handle_list ,contr -0x6e4a 031062 copy queue ,loopcnt -0x6e4b 031063 branch ss_req_blank ,zero -: 031064 ss_req_loop: -0x6e4c 031065 ifetch 4 ,contr -0x6e4d 031066 istore 4 ,contw -0x6e4e 031067 loop ss_req_loop -: 031068 ss_req_blank: -0x6e4f 031069 force 0 ,pdata -0x6e50 031070 istore 1 ,contw -0x6e51 031071 deposit regc -0x6e52 031072 store 2 ,mem_sdp_tx_pkt_length -0x6e53 031074 rtn -: 031085 sdp_process_sa_req: -0x6e54 031086 bpatchx patch3a_0 ,mem_patch3a -0x6e55 031087 ifetch 4 ,contr -0x6e56 031088 store 4 ,mem_sdp_record_handle -0x6e57 031089 increase -4 ,timeup -0x6e58 031090 call sdp_store_maxbyte -0x6e59 031091 store 2 ,mem_sdp_attribute_maxbyte -0x6e5a 031092 increase -2 ,timeup -0x6e5b 031093 call dataelementtype6 -0x6e5c 031094 branch sdp_invalid_request_syntax ,zero -0x6e5d 031095 compare 5 ,rega ,0xff -0x6e5e 031097 branch sa_judge_wholerange ,true -: 031098 sa_isnot_wholerange: -0x6e5f 031099 arg mem_sdp_attrib_list ,contw -0x6e60 031100 force 0 ,queue -0x6e61 031101 branch sa_req_loop -: 031102 sa_judge_wholerange: -0x6e62 031103 ifetch 1 ,contr -0x6e63 031104 bne sdp_attribute_range ,sdp_invalid_request_syntax -0x6e64 031105 ifetch 2 ,contr -0x6e65 031106 nbranch sa_judge_wholerange_false1 ,blank -0x6e66 031107 ifetch 1 ,contr -0x6e67 031108 bne 0xff ,sa_judge_wholerange_false2 -0x6e68 031109 ifetch 1 ,contr -0x6e69 031110 bne 0xff ,sa_judge_wholerange_false3 -0x6e6a 031111 branch sa_req_all -: 031112 sa_judge_wholerange_false3: -0x6e6b 031113 increase -5 ,contr -0x6e6c 031114 branch sa_isnot_wholerange -: 031115 sa_judge_wholerange_false2: -0x6e6d 031116 increase -4 ,contr -0x6e6e 031117 branch sa_isnot_wholerange -: 031118 sa_judge_wholerange_false1: -0x6e6f 031119 increase -3 ,contr -0x6e70 031120 branch sa_isnot_wholerange -: 031121 sa_req_loop: -0x6e71 031122 ifetch 1 ,contr -0x6e72 031123 beq sdp_attribute_id ,sa_req_one_id -0x6e73 031124 beq sdp_attribute_range ,sa_req_range -: 031125 sa_req_range: -0x6e74 031126 ifetch 2 ,contr -0x6e75 031127 istore 2 ,contw -0x6e76 031128 increase 1 ,queue -0x6e77 031129 byteswap pdata ,regb -0x6e78 031130 ifetch 2 ,contr -0x6e79 031131 byteswap pdata ,pdata -: 031132 sa_req_range_id_increase: -0x6e7a 031133 increase 1 ,regb -0x6e7b 031134 isub regb ,null -0x6e7c 031135 nbranch sa_req_range_id_finish ,positive -0x6e7d 031136 copy pdata ,regc -0x6e7e 031137 byteswap regb ,pdata -0x6e7f 031138 istore 2 ,contw -0x6e80 031139 increase 1 ,queue -0x6e81 031140 copy regc ,pdata -0x6e82 031141 branch sa_req_range_id_increase -: 031142 sa_req_range_id_finish: -0x6e83 031143 increase -5 ,timeup -0x6e84 031144 increase -5 ,rega -0x6e85 031145 branch sa_req_check_next_id -: 031146 sa_req_one_id: -0x6e86 031147 ifetch 2 ,contr -0x6e87 031148 istore 2 ,contw -0x6e88 031149 increase 1 ,queue -0x6e89 031150 increase -3 ,timeup -0x6e8a 031151 increase -3 ,rega -: 031152 sa_req_check_next_id: -0x6e8b 031153 nbranch sdp_invalid_request_syntax ,positive -0x6e8c 031154 nbranch sa_req_loop ,zero -0x6e8d 031155 increase -1 ,timeup -0x6e8e 031156 nbranch sdp_invalid_request_syntax ,zero -0x6e8f 031158 call l2cap_get_sdp_tx_payload -0x6e90 031159 increase 10 ,contw -0x6e91 031160 arg mem_sdp_attrib_list ,rega -: 031161 sa_req_handle_attributelist_next: -0x6e92 031162 copy queue ,pdata -0x6e93 031163 branch sa_req_handle_attributelist_end ,blank -0x6e94 031164 ifetch 2 ,rega -0x6e95 031165 branch sa_req_handle_attributelist_end ,blank -0x6e96 031166 iforce regb -0x6e97 031167 fetch 4 ,mem_sdp_record_handle -0x6e98 031168 iforce temp -0x6e99 031169 call search_handle_attrib -0x6e9a 031170 copy contr ,pdata -0x6e9b 031171 branch sa_req_handle_attributelist_notfound ,blank -0x6e9c 031172 increase -3 ,contr -0x6e9d 031173 ifetch 3 ,contr -0x6e9e 031174 istore 3 ,contw -0x6e9f 031175 call sdp_data_len -0x6ea0 031176 iforce loopcnt -0x6ea1 031177 call memcpy -: 031178 sa_req_handle_attributelist_notfound: -0x6ea2 031179 increase 2 ,rega -0x6ea3 031180 increase -1 ,queue -0x6ea4 031181 branch sa_req_handle_attributelist_next -: 031183 sa_req_handle_attributelist_end: -0x6ea5 031184 arg sdp_attribute_res ,rega -0x6ea6 031185 call ssa_req_range_lastfreg_common -0x6ea7 031186 fetch 2 ,mem_sdp_tx_pkt_length -0x6ea8 031187 beq 11 ,sa_empty_rsp -0x6ea9 031188 branch ssa_req_range_attrbutes_length_no_continue -: 031191 sdp_store_continue_common: -0x6eaa 031192 ifetch 1 ,contr -0x6eab 031193 beq 0 ,sdp_store_continue_0byte -0x6eac 031194 beq 1 ,sdp_store_continue_1byte -0x6ead 031195 beq 2 ,sdp_store_continue_2byte -: 031196 sdp_store_continue_0byte: -0x6eae 031197 increase -1 ,timeup -0x6eaf 031198 branch sdp_store_continue_end -: 031199 sdp_store_continue_1byte: -0x6eb0 031200 ifetch 1 ,contr -0x6eb1 031201 increase -2 ,timeup -0x6eb2 031202 branch sdp_store_continue_end -: 031203 sdp_store_continue_2byte: -0x6eb3 031204 ifetch 2 ,contr -0x6eb4 031205 byteswap pdata ,pdata -0x6eb5 031206 increase -3 ,timeup -: 031207 sdp_store_continue_end: -0x6eb6 031208 store 2 ,mem_sdp_continue_byte -0x6eb7 031209 rtn -: 031211 sa_req_all: -0x6eb8 031212 increase -5 ,timeup -0x6eb9 031213 call sdp_store_continue_common -0x6eba 031214 nbranch sdp_invalid_pdu_size ,zero -0x6ebb 031215 fetcht 4 ,mem_sdp_record_handle -0x6ebc 031216 call search_handle -0x6ebd 031217 nbranch sdp_invalid_service_record_handle ,zero -0x6ebe 031218 copy contr ,rega -0x6ebf 031219 call l2cap_get_sdp_tx_payload -0x6ec0 031220 copy rega ,contr -0x6ec1 031221 increase 3 ,contw -0x6ec2 031222 copy contr ,timeup -0x6ec3 031223 call sdp_get_data -0x6ec4 031224 copy pdata ,rega -0x6ec5 031226 fetch 2 ,mem_sdp_continue_byte -0x6ec6 031227 copy pdata ,regb -0x6ec7 031228 copy rega ,pdata -0x6ec8 031229 isub regb ,regb -0x6ec9 031230 fetch 2 ,mem_sdp_attribute_maxbyte -0x6eca 031231 isub regb ,null -0x6ecb 031232 nbranch sa_req_all_fragment_sdp ,positive -0x6ecc 031234 disable user -0x6ecd 031235 fetch 2 ,mem_sdp_continue_byte -0x6ece 031236 branch sa_req_all_fisrt_fragment ,blank -0x6ecf 031237 iadd timeup ,contr -0x6ed0 031238 increase 3 ,regb -0x6ed1 031239 copy regb ,loopcnt -0x6ed2 031240 copy loopcnt ,pdata -0x6ed3 031241 increase 3 ,pdata -0x6ed4 031242 byteswap pdata ,pdata -0x6ed5 031243 istore 2 ,contw -0x6ed6 031244 copy loopcnt ,pdata -0x6ed7 031245 byteswap pdata ,pdata -0x6ed8 031246 istore 2 ,contw -0x6ed9 031247 branch sa_req_all_answer_attributelist_full_loop -: 031248 sa_req_all_fisrt_fragment: -0x6eda 031249 add rega ,6 ,loopcnt -0x6edb 031250 branch sa_req_all_parlength_continue_byte ,user -0x6edc 031251 byteswap loopcnt ,pdata -0x6edd 031252 branch sa_req_all_parlength_continue_byte_end -: 031253 sa_req_all_parlength_continue_byte: -0x6ede 031254 copy loopcnt ,pdata -0x6edf 031255 increase 2 ,pdata -0x6ee0 031256 byteswap pdata ,pdata -: 031257 sa_req_all_parlength_continue_byte_end: -0x6ee1 031258 istore 2 ,contw -0x6ee2 031259 increase -3 ,loopcnt -0x6ee3 031260 byteswap loopcnt ,pdata -0x6ee4 031261 istore 2 ,contw -0x6ee5 031262 copy timeup ,contr -0x6ee6 031263 branch sa_req_all_answer_attributelist_full_loop -: 031264 sa_req_all_fragment_sdp: -0x6ee7 031265 enable user -0x6ee8 031267 fetch 2 ,mem_sdp_attribute_maxbyte -0x6ee9 031268 copy pdata ,rega -0x6eea 031269 copy rega ,loopcnt -0x6eeb 031270 fetch 2 ,mem_sdp_continue_byte -0x6eec 031271 branch sa_req_all_fisrt_fragment ,blank -0x6eed 031272 iadd timeup ,contr -0x6eee 031273 copy rega ,pdata -0x6eef 031274 increase 5 ,pdata -0x6ef0 031275 byteswap pdata ,pdata -0x6ef1 031276 istore 2 ,contw -0x6ef2 031277 copy rega ,pdata -0x6ef3 031278 byteswap pdata ,pdata -0x6ef4 031279 istore 2 ,contw -: 031280 sa_req_all_answer_attributelist_full_loop: -0x6ef5 031281 call memcpy -0x6ef6 031282 nbranch sa_req_all_last_frag_continue ,user -0x6ef7 031283 force 2 ,pdata -0x6ef8 031284 istore 1 ,contw -0x6ef9 031285 copy contr ,pdata -0x6efa 031286 isub timeup ,pdata -0x6efb 031287 byteswap pdata ,pdata -0x6efc 031288 istore 2 ,contw -0x6efd 031289 branch sa_req_all_frag_end -: 031290 sa_req_all_last_frag_continue: -0x6efe 031291 force 0 ,pdata -0x6eff 031292 istore 1 ,contw -: 031293 sa_req_all_frag_end: -0x6f00 031294 arg sdp_attribute_res ,rega -0x6f01 031295 branch ssa_req_range_common -: 031306 sdp_process_ssa_req: -0x6f02 031307 bpatchx patch3a_1 ,mem_patch3a -0x6f03 031308 call ask_serviceclassid -0x6f04 031309 compare 0xff ,temp ,0xff -0x6f05 031310 branch sdp_invalid_request_syntax ,true -0x6f06 031311 call sdp_store_maxbyte -0x6f07 031312 store 2 ,mem_sdp_attribute_maxbyte -0x6f08 031313 increase -2 ,timeup -0x6f09 031314 call dataelementtype6 -0x6f0a 031315 arg mem_sdp_attrib_list ,contw -0x6f0b 031316 force 0 ,queue -: 031317 ssa_req_loop: -0x6f0c 031318 ifetch 1 ,contr -0x6f0d 031319 beq sdp_attribute_range ,ssa_req_range -0x6f0e 031320 ifetch 2 ,contr -0x6f0f 031321 istore 2 ,contw -0x6f10 031322 increase 1 ,queue -0x6f11 031323 increase -3 ,timeup -0x6f12 031324 increase -3 ,rega -0x6f13 031325 nbranch sdp_invalid_request_syntax ,positive -0x6f14 031326 nbranch ssa_req_loop ,zero -0x6f15 031327 increase -1 ,timeup -0x6f16 031328 nbranch sdp_invalid_request_syntax ,zero -0x6f17 031329 call l2cap_get_sdp_tx_payload -0x6f18 031330 increase 13 ,contw -0x6f19 031331 fetch 2 ,mem_sdp_uuid_search_ptr -0x6f1a 031332 iforce regc -0x6f1b 031333 arg mem_sdp_attrib_list ,rega -: 031334 ssa_req_attributelist_next: -0x6f1c 031335 ifetch 2 ,rega -0x6f1d 031336 branch ssa_req_attributelist_end ,blank -0x6f1e 031337 iforce regb -0x6f1f 031338 call search_attrib -0x6f20 031339 branch ssa_req_attributelist_notfound ,blank -0x6f21 031340 increase -3 ,contr -0x6f22 031341 ifetch 3 ,contr -0x6f23 031342 istore 3 ,contw -0x6f24 031343 call sdp_data_len -0x6f25 031344 iforce loopcnt -0x6f26 031345 call memcpy -: 031346 ssa_req_attributelist_notfound: -0x6f27 031347 increase 2 ,rega -0x6f28 031348 branch ssa_req_attributelist_next -: 031350 ssa_req_attributelist_end: -0x6f29 031351 call ssa_req_range_lastfreg -0x6f2a 031352 fetch 2 ,mem_sdp_tx_pkt_length -0x6f2b 031353 beq 14 ,ssa_empty_rsp -0x6f2c 031354 call ssa_req_range_attrbutes_length_no_continue -0x6f2d 031355 branch ssa_req_range_attrbutes_length_no_continue -: 031358 sdp_store_maxbyte: -0x6f2e 031359 ifetch 2 ,contr -0x6f2f 031360 byteswap pdata ,pdata -0x6f30 031361 increase -3 ,pdata -0x6f31 031362 arg 200 ,temp -0x6f32 031363 isub temp ,null -0x6f33 031364 nrtn positive -0x6f34 031365 setarg 200 -0x6f35 031366 rtn -: 031369 ssa_req_range: -0x6f36 031370 increase 4 ,contr -0x6f37 031371 increase -5 ,timeup -0x6f38 031372 increase -5 ,rega -0x6f39 031373 nbranch sdp_invalid_request_syntax ,zero -0x6f3a 031374 call sdp_store_continue_common -0x6f3b 031375 nbranch sdp_invalid_pdu_size ,zero -0x6f3c 031376 arg mem_sdp_uuid_search_ptr ,timeup -0x6f3d 031377 call search_all_uuid -0x6f3e 031378 deposit queue -0x6f3f 031379 branch ssa_empty_rsp ,blank -0x6f40 031380 store 1 ,mem_handle_humber -0x6f41 031382 copy regb ,pdata -0x6f42 031383 store 2 ,mem_sdp_all_length -0x6f43 031384 arg 0 ,queue -0x6f44 031385 arg 0 ,rega -0x6f45 031386 call l2cap_get_sdp_tx_payload -0x6f46 031387 increase 10 ,contw -: 031388 ssa_req_range_find_handle: -0x6f47 031389 call ssa_req_range_get_length -0x6f48 031390 nbranch assert ,user -0x6f49 031391 copy contr ,timeup -0x6f4a 031392 copy pdata ,regc -0x6f4b 031393 iadd rega ,rega -0x6f4c 031396 fetch 2 ,mem_sdp_continue_byte -0x6f4d 031397 copy pdata ,regb -0x6f4e 031398 branch ssa_req_range_first_freg ,blank -: 031399 ssa_req_range_later_freg_with_continue: -0x6f4f 031400 copy rega ,pdata -0x6f50 031401 isub regb ,regb -0x6f51 031402 branch ssa_req_range_next_handle ,zero -0x6f52 031403 nbranch ssa_req_range_next_handle ,positive -0x6f53 031404 fetch 2 ,mem_sdp_attribute_maxbyte -0x6f54 031405 isub regb ,null -0x6f55 031406 branch ssa_req_range_maxbyte_with_continue ,zero -0x6f56 031407 nbranch ssa_req_range_maxbyte_with_continue ,positive -: 031410 ssa_req_range_send_not_maxbyte: -0x6f57 031411 copy regb ,loopcnt -0x6f58 031412 call ssa_req_range_maxbyte_with_continue_cpy -0x6f59 031413 fetch 1 ,mem_handle_humber -0x6f5a 031414 increase 1 ,queue -0x6f5b 031415 isub queue ,null -0x6f5c 031416 branch ssa_req_range_lastfreg ,zero -0x6f5d 031417 branch ssa_req_range_freg_with_continue -: 031419 ssa_req_range_maxbyte_with_continue: -0x6f5e 031420 copy pdata ,loopcnt -0x6f5f 031421 call ssa_req_range_maxbyte_with_continue_cpy -0x6f60 031422 branch ssa_req_range_freg_with_continue -: 031424 ssa_req_range_maxbyte_with_continue_cpy: -0x6f61 031425 increase -3 ,contw -0x6f62 031426 copy loopcnt ,temp -0x6f63 031427 copy regc ,pdata -0x6f64 031428 isub regb ,pdata -0x6f65 031429 iadd timeup ,contr -0x6f66 031430 branch memcpy -: 031432 ssa_req_range_next_handle: -0x6f67 031433 fetch 1 ,mem_handle_humber -0x6f68 031434 increase 1 ,queue -0x6f69 031435 isub queue ,null -0x6f6a 031436 rtn zero -0x6f6b 031437 branch ssa_req_range_find_handle -: 031439 ssa_req_range_get_length: -0x6f6c 031440 call disable_user -0x6f6d 031441 arg mem_sdp_handle_list ,contr -0x6f6e 031442 lshift2 queue ,pdata -0x6f6f 031443 iadd contr ,contr -0x6f70 031444 ifetcht 4 ,contr -0x6f71 031445 call search_handle -0x6f72 031446 nrtn zero -0x6f73 031447 call sdp_data_len -0x6f74 031448 branch enable_user -: 031450 ssa_req_range_first_freg: -0x6f75 031451 fetch 2 ,mem_sdp_attribute_maxbyte -0x6f76 031452 isub rega ,null -0x6f77 031453 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive -0x6f78 031454 copy rega ,loopcnt -0x6f79 031455 copy loopcnt ,temp -0x6f7a 031456 copy timeup ,contr -0x6f7b 031457 call memcpy -0x6f7c 031458 fetch 2 ,mem_sdp_all_length -0x6f7d 031459 isub rega ,null -0x6f7e 031460 branch ssa_req_range_freg_no_continue ,zero -: 031461 ssa_req_range_firstfreg_not_maxbyte_with_continue: -0x6f7f 031462 call ssa_req_range_freg_with_continue -0x6f80 031463 branch ssa_req_range_attrbutes_length -: 031465 ssa_req_range_freg_no_continue: -0x6f81 031466 call ssa_req_range_lastfreg -0x6f82 031467 branch ssa_req_range_attrbutes_length -: 031469 ssa_req_range_lastfreg: -0x6f83 031470 arg sdp_searchattrib_res ,rega -: 031471 ssa_req_range_lastfreg_common: -0x6f84 031472 force 0 ,pdata -0x6f85 031473 istore 1 ,contw -0x6f86 031474 call ssa_req_range_common -0x6f87 031475 fetcht 2 ,mem_sdp_tx_pkt_length -0x6f88 031476 increase -5 ,temp -0x6f89 031477 byteswap temp ,pdata -0x6f8a 031478 istore 2 ,contw -0x6f8b 031479 increase -3 ,temp -0x6f8c 031480 byteswap temp ,pdata -0x6f8d 031481 istore 2 ,contw -0x6f8e 031482 rtn -: 031484 ssa_req_range_firstfreg_maxbyte_with_continue: -0x6f8f 031485 copy pdata ,loopcnt -0x6f90 031486 copy loopcnt ,temp -0x6f91 031487 copy timeup ,contr -0x6f92 031488 call memcpy -0x6f93 031489 call ssa_req_range_freg_with_continue -: 031490 ssa_req_range_attrbutes_length: -0x6f94 031491 setarg 0x36 -0x6f95 031492 istore 1 ,contw -0x6f96 031493 fetch 2 ,mem_sdp_all_length -0x6f97 031494 byteswap pdata ,pdata -0x6f98 031495 istore 2 ,contw -0x6f99 031496 rtn -: 031498 ssa_req_range_attrbutes_length_no_continue: -0x6f9a 031499 setarg 0x36 -0x6f9b 031500 istore 1 ,contw -0x6f9c 031501 increase -3 ,temp -0x6f9d 031502 byteswap temp ,pdata -0x6f9e 031503 istore 2 ,contw -0x6f9f 031504 rtn -: 031506 ssa_req_range_freg_with_continue: -0x6fa0 031507 arg sdp_searchattrib_res ,rega -0x6fa1 031508 setarg 2 -0x6fa2 031509 istore 1 ,contw -0x6fa3 031510 fetch 2 ,mem_sdp_continue_byte -0x6fa4 031511 iadd temp ,temp -0x6fa5 031512 byteswap temp ,pdata -0x6fa6 031513 istore 2 ,contw -0x6fa7 031514 call ssa_req_range_common -0x6fa8 031515 fetcht 2 ,mem_sdp_tx_pkt_length -0x6fa9 031516 increase -5 ,temp -0x6faa 031517 byteswap temp ,pdata -0x6fab 031518 istore 2 ,contw -0x6fac 031519 increase -5 ,temp -0x6fad 031520 byteswap temp ,pdata -0x6fae 031521 istore 2 ,contw -0x6faf 031522 rtn -: 031524 ssa_req_range_common: -0x6fb0 031525 fetch 2 ,mem_sdp_tx_payload_ptr -0x6fb1 031526 isub contw ,pdata -0x6fb2 031527 sub pdata ,0 ,pdata -0x6fb3 031528 store 2 ,mem_sdp_tx_pkt_length -0x6fb4 031529 call l2cap_get_sdp_tx_payload -0x6fb5 031530 copy rega ,pdata -0x6fb6 031531 istore 1 ,contw -0x6fb7 031532 fetch 2 ,mem_sdp_transactionid -0x6fb8 031533 istore 2 ,contw -0x6fb9 031534 rtn -: 031547 sdp_process_ssa_res: -: 031548 sdp_process_ss_res: -: 031549 sdp_process_sa_res: -: 031550 sdp_process_error_res: -0x6fba 031551 rtn -: 031584 sdp_invalid_service_record_handle: -0x6fbb 031585 setarg 0x0200 -0x6fbc 031586 store 2 ,mem_sdp_error_code -0x6fbd 031587 branch sdp_error_response -: 031588 sdp_invalid_pdu_size: -0x6fbe 031589 setarg 0x0400 -0x6fbf 031590 store 2 ,mem_sdp_error_code -0x6fc0 031591 branch sdp_error_response -: 031592 sdp_insufficient_resource: -0x6fc1 031593 setarg 0x0600 -0x6fc2 031594 store 2 ,mem_sdp_error_code -0x6fc3 031595 branch sdp_error_response -: 031596 sdp_invalid_request_syntax: -0x6fc4 031597 setarg 0x0300 -0x6fc5 031598 store 2 ,mem_sdp_error_code -: 031599 sdp_error_response: -0x6fc6 031600 call l2cap_get_sdp_tx_payload -0x6fc7 031601 istore 1 ,contw -0x6fc8 031602 fetch 2 ,mem_sdp_transactionid -0x6fc9 031603 istore 2 ,contw -0x6fca 031604 setarg 0x0200 -0x6fcb 031605 istore 2 ,contw -0x6fcc 031606 fetch 2 ,mem_sdp_error_code -0x6fcd 031607 istore 2 ,contw -0x6fce 031608 jam 7 ,mem_sdp_tx_pkt_length -0x6fcf 031609 rtn -: 031614 ask_serviceclassid: -0x6fd0 031615 arg 0 ,regb -0x6fd1 031616 force 0 ,temp -0x6fd2 031617 arg mem_sdp_uuid_search_ptr ,contw -0x6fd3 031618 call dataelementtype6 -0x6fd4 031619 branch asksrv_error ,zero -: 031620 classidloop: -0x6fd5 031621 increase 1 ,regb -0x6fd6 031622 ifetch 1 ,contr -0x6fd7 031623 increase -1 ,rega -0x6fd8 031624 increase -1 ,timeup -0x6fd9 031625 compare 0x18 ,pdata ,0xf8 -0x6fda 031626 nbranch asksrv_error ,true -0x6fdb 031627 compare 0x04 ,pdata ,0x07 -0x6fdc 031628 nbranch cmp032 ,true -0x6fdd 031629 force 1 ,temp -: 031630 skip2bytes: -0x6fde 031631 ifetch 1 ,contr -0x6fdf 031632 increase -1 ,rega -0x6fe0 031633 increase -1 ,timeup -0x6fe1 031634 bne 0x00 ,frstbwrong -0x6fe2 031635 ifetch 1 ,contr -0x6fe3 031636 increase -1 ,rega -0x6fe4 031637 increase -1 ,timeup -0x6fe5 031638 beq 0x00 ,cmpuuid -0x6fe6 031639 branch scndbwrong -: 031640 frstbwrong: -0x6fe7 031641 increase 1 ,contr -0x6fe8 031642 increase -1 ,rega -0x6fe9 031643 increase -1 ,timeup -: 031644 scndbwrong: -0x6fea 031645 increase 2 ,contr -0x6feb 031646 increase -2 ,rega -0x6fec 031647 increase -2 ,timeup -0x6fed 031648 compare 0x00 ,temp ,0xff -0x6fee 031649 branch loopornot ,true -0x6fef 031650 increase 12 ,contr -0x6ff0 031651 increase -12 ,rega -0x6ff1 031652 increase -12 ,timeup -0x6ff2 031653 branch loopornot -: 031654 cmp032: -0x6ff3 031655 compare 0x02 ,pdata ,0x07 -0x6ff4 031656 nbranch cmp016 ,true -0x6ff5 031657 branch skip2bytes -: 031658 cmp016: -0x6ff6 031659 compare 0x01 ,pdata ,0x07 -0x6ff7 031660 nbranch asksrv_error ,true -: 031661 cmpuuid: -0x6ff8 031662 increase -2 ,rega -0x6ff9 031663 increase -2 ,timeup -0x6ffa 031664 ifetch 2 ,contr -0x6ffb 031665 sub regb ,4 ,null -0x6ffc 031666 branch uuidsize ,zero -0x6ffd 031667 istore 2 ,contw -: 031668 uuidsize: -0x6ffe 031669 compare 0x00 ,temp ,0xff -0x6fff 031670 branch loopornot ,true -0x7000 031671 copy contr ,temp -0x7001 031672 ifetch 1 ,contr -0x7002 031673 bne 0x00 ,wrong12b -0x7003 031674 ifetch 1 ,contr -0x7004 031675 bne 0x00 ,wrong12b -0x7005 031676 ifetch 1 ,contr -0x7006 031677 bne 0x10 ,wrong12b -0x7007 031678 ifetch 1 ,contr -0x7008 031679 bne 0x00 ,wrong12b -0x7009 031680 ifetch 1 ,contr -0x700a 031681 bne 0x80 ,wrong12b -0x700b 031682 ifetch 1 ,contr -0x700c 031683 bne 0x00 ,wrong12b -0x700d 031684 ifetch 1 ,contr -0x700e 031685 bne 0x00 ,wrong12b -0x700f 031686 ifetch 1 ,contr -0x7010 031687 bne 0x80 ,wrong12b -0x7011 031688 ifetch 1 ,contr -0x7012 031689 bne 0x5f ,wrong12b -0x7013 031690 ifetch 1 ,contr -0x7014 031691 bne 0x9b ,wrong12b -0x7015 031692 ifetch 1 ,contr -0x7016 031693 bne 0x34 ,wrong12b -0x7017 031694 ifetch 1 ,contr -0x7018 031695 beq 0xfb ,chck12dn -: 031696 wrong12b: -0x7019 031697 copy temp ,contr -: 031698 wrong12b1: -0x701a 031699 increase 12 ,contr -0x701b 031700 force 0x00 ,queue -0x701c 031701 force 0x00 ,temp -0x701d 031702 branch chck12dn -: 031704 chck12dn: -0x701e 031705 increase -12 ,timeup -0x701f 031706 increase -12 ,rega -: 031707 loopornot: -0x7020 031708 force 0x00 ,temp -0x7021 031709 compare 0x00 ,rega ,0xff -0x7022 031710 nbranch classidloop ,true -0x7023 031711 force 0 ,pdata -0x7024 031712 istore 2 ,contw -0x7025 031713 rtn -: 031714 asksrv_error: -0x7026 031715 arg 0xff ,temp -0x7027 031716 rtn -: 031726 dataelementtype6: -0x7028 031727 bpatchx patch3a_4 ,mem_patch3a -0x7029 031728 ifetch 1 ,contr -0x702a 031729 increase -1 ,timeup -0x702b 031730 compare 0x30 ,pdata ,0xf8 -0x702c 031731 nbranch dsize_error ,true -0x702d 031732 compare 0x07 ,pdata ,0x07 -0x702e 031733 branch dsize32 ,true -0x702f 031734 compare 0x06 ,pdata ,0x07 -0x7030 031735 branch dsize16 ,true -0x7031 031736 compare 0x05 ,pdata ,0x07 -0x7032 031737 nbranch dsize_error ,true -0x7033 031739 ifetch 1 ,contr -0x7034 031740 copy pdata ,rega -0x7035 031741 increase -1 ,timeup -0x7036 031742 branch dsize -: 031743 dsize32: -0x7037 031744 increase 2 ,contr -0x7038 031745 increase -2 ,timeup -: 031746 dsize16: -0x7039 031747 ifetch 2 ,contr -0x703a 031748 byteswap pdata ,rega -0x703b 031749 increase -2 ,timeup -: 031750 dsize: -0x703c 031751 force 0x01 ,pdata -0x703d 031752 rtn -: 031753 dsize_error: -0x703e 031754 force 0x00 ,pdata -0x703f 031755 rtn -: 031765 ss_empty_rsp: -0x7040 031766 setarg sdp_search_res -0x7041 031767 store 1 ,mem_sdp_pduid -0x7042 031768 branch empty_response -: 031769 sa_empty_rsp: -0x7043 031770 setarg sdp_attribute_res -0x7044 031771 store 1 ,mem_sdp_pduid -0x7045 031772 branch empty_response -: 031773 ssa_empty_rsp: -0x7046 031774 setarg sdp_searchattrib_res -0x7047 031775 store 1 ,mem_sdp_pduid -: 031776 empty_response: -0x7048 031777 call l2cap_get_sdp_tx_payload -0x7049 031780 fetch 1 ,mem_sdp_pduid -0x704a 031781 copy pdata ,regb -0x704b 031782 istore 1 ,contw -0x704c 031783 fetch 2 ,mem_sdp_transactionid -0x704d 031784 istore 2 ,contw -0x704e 031785 setarg 0x0500 -0x704f 031786 istore 2 ,contw -0x7050 031787 compare sdp_attribute_res ,regb ,0xff -0x7051 031788 branch fullsearch ,true -0x7052 031789 compare sdp_searchattrib_res ,regb ,0xff -0x7053 031790 branch fullsearch ,true -0x7054 031791 setarg 0x000000 -0x7055 031792 istore 5 ,contw -0x7056 031793 branch outempty -: 031795 fullsearch: -0x7057 031796 setarg 0x350200 -0x7058 031797 istore 5 ,contw -: 031798 outempty: -0x7059 031799 jam 10 ,mem_sdp_tx_pkt_length -0x705a 031800 rtn -: 031803 sdp_data_len: -0x705b 031804 call store_contw -0x705c 031805 call store_contr -0x705d 031806 call sdp_get_data -0x705e 031807 call get_contw -0x705f 031808 call get_contr -0x7060 031809 copy temp ,pdata -0x7061 031810 rtn -: 031813 sdp_get_data: -0x7062 031814 ifetch 1 ,contr -0x7063 031815 and pdata ,0x7 ,loopcnt -0x7064 031816 rshift3 pdata ,pdata -0x7065 031817 bne 0 ,sdp_get_data_type_not0 -: 031818 sdp_get_data_type0: -0x7066 031819 force 1 ,pdata -0x7067 031820 force 1 ,temp -0x7068 031821 rtn -: 031823 sdp_get_data_type_not0_sizeindex01234: -0x7069 031824 call left_shift_n -0x706a 031825 add pdata ,1 ,temp -0x706b 031826 rtn -: 031827 sdp_get_data_type_not0: -0x706c 031828 deposit loopcnt -0x706d 031829 sub pdata ,4 ,null -0x706e 031830 branch sdp_get_data_type_not0_sizeindex01234 ,positive -0x706f 031831 beq 5 ,sdp_get_data_type_not0_sizeindex5 -0x7070 031832 beq 6 ,sdp_get_data_type_not0_sizeindex6 -0x7071 031833 beq 7 ,sdp_get_data_type_not0_sizeindex7 -0x7072 031834 rtn -: 031836 sdp_get_data_type_not0_sizeindex5: -0x7073 031837 ifetch 1 ,contr -0x7074 031838 add pdata ,2 ,temp -0x7075 031839 rtn -: 031840 sdp_get_data_type_not0_sizeindex6: -0x7076 031841 ifetch 2 ,contr -0x7077 031842 byteswap pdata ,pdata -0x7078 031843 add pdata ,3 ,temp -0x7079 031844 rtn -: 031845 sdp_get_data_type_not0_sizeindex7: -0x707a 031846 ifetch 2 ,contr -0x707b 031847 byteswap pdata ,pdata -0x707c 031848 ifetcht 2 ,contr -0x707d 031849 byteswap temp ,temp -0x707e 031850 lshift16 temp ,temp -0x707f 031851 iadd temp ,pdata -0x7080 031852 add pdata ,5 ,temp -0x7081 031853 rtn -: 031859 search_all_uuid: -0x7082 031860 bpatchx patch3a_5 ,mem_patch3a -0x7083 031861 force 0 ,queue -0x7084 031862 arg 0 ,regb -0x7085 031863 arg mem_sdp_handle_list ,contw -: 031864 search_all_uuid_llop: -0x7086 031865 ifetch 2 ,timeup -0x7087 031866 rtn blank -0x7088 031867 call search_uuid -0x7089 031868 copy queue ,pdata -0x708a 031869 rtneq sdp_max_handle_number -0x708b 031870 increase 2 ,timeup -0x708c 031871 branch search_all_uuid_llop -: 031873 search_uuid: -0x708d 031875 iforce regc -0x708e 031877 fetch 2 ,mem_ui_uuid_table -0x708f 031878 iforce contr -: 031879 search_uuid_next: -0x7090 031880 copy queue ,pdata -0x7091 031881 rtneq sdp_max_handle_number -0x7092 031882 disable user -0x7093 031883 ifetch 1 ,contr -0x7094 031884 rtn blank -0x7095 031885 iforce loopcnt -: 031886 search_uuid_loop: -0x7096 031887 ifetch 2 ,contr -0x7097 031888 isub regc ,null -0x7098 031889 nbranch search_uuid_not_found ,zero -0x7099 031890 enable user -: 031891 search_uuid_not_found: -0x709a 031892 loop search_uuid_loop -0x709b 031893 ifetcht 4 ,contr -0x709c 031894 copy contr ,rega -0x709d 031895 nbranch search_uuid_nomatch ,user -0x709e 031896 arg mem_sdp_handle_list ,contr -0x709f 031897 arg sdp_max_handle_number ,loopcnt -: 031898 search_uuid_check_same_handle: -0x70a0 031899 ifetch 4 ,contr -0x70a1 031900 branch search_uuid_store_handle ,blank -0x70a2 031901 isub temp ,null -0x70a3 031902 branch search_uuid_nomatch ,zero -0x70a4 031903 loop search_uuid_check_same_handle -0x70a5 031904 rtn -: 031905 search_uuid_store_handle: -0x70a6 031906 istoret 4 ,contw -0x70a7 031907 increase 1 ,queue -0x70a8 031908 copy rega ,contr -0x70a9 031909 call sdp_data_len -0x70aa 031910 iadd regb ,regb -0x70ab 031911 iadd contr ,contr -0x70ac 031912 branch search_uuid_next -: 031913 search_uuid_nomatch: -0x70ad 031914 copy rega ,contr -0x70ae 031915 call sdp_get_data -0x70af 031916 iadd contr ,contr -0x70b0 031917 branch search_uuid_next -: 031923 search_handle: -0x70b1 031924 bpatchx patch3a_6 ,mem_patch3a -0x70b2 031925 fetch 2 ,mem_ui_uuid_table -0x70b3 031926 iforce contr -: 031927 search_handle_loop: -0x70b4 031928 ifetch 1 ,contr -0x70b5 031929 branch disable_zero ,blank -0x70b6 031930 lshift pdata ,pdata -0x70b7 031931 iadd contr ,contr -0x70b8 031932 ifetch 4 ,contr -0x70b9 031933 isub temp ,null -0x70ba 031934 rtn zero -0x70bb 031935 deposit contw -0x70bc 031936 store 2 ,mem_contw -0x70bd 031937 storet 8 ,mem_temp -0x70be 031938 call sdp_get_data -0x70bf 031939 iadd contr ,contr -0x70c0 031940 copy contr ,pdata -0x70c1 031941 fetcht 2 ,mem_contw -0x70c2 031942 copy temp ,contw -0x70c3 031943 fetcht 8 ,mem_temp -0x70c4 031944 copy pdata ,contr -0x70c5 031945 branch search_handle_loop -: 031951 search_attrib: -0x70c6 031952 bpatchx patch3a_7 ,mem_patch3a -0x70c7 031953 fetch 2 ,mem_ui_uuid_table -0x70c8 031954 iforce contr -: 031955 search_attrib_next: -0x70c9 031956 ifetch 1 ,contr -0x70ca 031957 branch search_attrib_end ,blank -0x70cb 031958 iforce loopcnt -: 031959 search_attrib_loop: -0x70cc 031960 ifetch 2 ,contr -0x70cd 031961 isub regc ,null -0x70ce 031962 branch search_attrib_found_uuid ,zero -0x70cf 031963 loop search_attrib_loop -0x70d0 031964 increase 4 ,contr -0x70d1 031965 call sdp_get_data -0x70d2 031966 iadd contr ,contr -0x70d3 031967 branch search_attrib_next -: 031968 search_attrib_found_uuid: -0x70d4 031969 increase -1 ,loopcnt -0x70d5 031970 lshift loopcnt ,pdata -0x70d6 031971 iadd contr ,contr -0x70d7 031972 increase 4 ,contr -0x70d8 031973 call sdp_get_data -0x70d9 031974 iadd contr ,timeup -: 031975 search_attrib_loop_attribs: -0x70da 031976 increase 1 ,contr -0x70db 031977 ifetch 2 ,contr -0x70dc 031978 isub regb ,null -0x70dd 031982 branch disable_blank ,zero -0x70de 031983 call sdp_data_len -0x70df 031984 iadd contr ,contr -0x70e0 031985 deposit timeup -0x70e1 031986 isub contr ,null -0x70e2 031987 branch search_attrib_end ,zero -0x70e3 031988 branch search_attrib_loop_attribs -: 031989 search_attrib_end: -0x70e4 031990 force 0 ,contr -0x70e5 031991 force 0 ,pdata -0x70e6 031992 rtn -: 031998 search_handle_attrib: -0x70e7 031999 bpatchx patch3b_0 ,mem_patch3b -0x70e8 032000 fetch 2 ,mem_ui_uuid_table -0x70e9 032001 iforce contr -: 032002 search_handle_attrib_next: -0x70ea 032003 ifetch 1 ,contr -0x70eb 032004 branch search_handle_attrib_end ,blank -0x70ec 032005 lshift pdata ,pdata -0x70ed 032006 iadd contr ,contr -0x70ee 032007 ifetch 4 ,contr -0x70ef 032008 isub temp ,null -0x70f0 032009 branch search_handl_attrib_found_handle ,zero -0x70f1 032010 call sdp_get_data -0x70f2 032011 iadd contr ,contr -0x70f3 032012 branch search_handle_attrib_next -: 032013 search_handl_attrib_found_handle: -0x70f4 032014 call sdp_get_data -0x70f5 032015 iadd contr ,timeup -: 032016 search_handle_attrib_loop_attribs: -0x70f6 032017 increase 1 ,contr -0x70f7 032018 ifetch 2 ,contr -0x70f8 032019 isub regb ,null -0x70f9 032020 rtn zero -0x70fa 032021 call sdp_data_len -0x70fb 032022 iadd contr ,contr -0x70fc 032023 deposit timeup -0x70fd 032024 isub contr ,null -0x70fe 032025 branch search_handle_attrib_end ,zero -0x70ff 032026 branch search_handle_attrib_loop_attribs -: 032027 search_handle_attrib_end: -0x7100 032028 force 0 ,contr -0x7101 032029 rtn -: 032033 search_rfcomm_cn: -0x7102 032034 arg 0x0400 ,regb -0x7103 032035 call search_handl_attrib_found_handle -0x7104 032036 arg 0x0300 ,regb -0x7105 032037 call search_uuid_in_data -0x7106 032038 nrtn user -0x7107 032039 sub rega ,3 ,null -0x7108 032040 branch disable_user ,positive -0x7109 032041 ifetch 1 ,contr -0x710a 032042 bne 0x08 ,disable_user -0x710b 032043 ifetch 1 ,contr -0x710c 032044 rtn -: 032049 search_uuid_in_data: -0x710d 032050 bpatchx patch3b_1 ,mem_patch3b -0x710e 032051 call sdp_get_data -0x710f 032052 copy pdata ,rega -: 032053 search_uuid_in_data_loop: -0x7110 032054 ifetch 1 ,contr -0x7111 032055 and pdata ,0x7 ,loopcnt -0x7112 032056 rshift3 pdata ,pdata -0x7113 032057 sub pdata ,3 ,null -0x7114 032058 branch search_uuid_in_data_found_uuid ,zero -0x7115 032059 copy loopcnt ,pdata -0x7116 032060 beq 5 ,search_uuid_in_data_found_element_index5 -0x7117 032061 beq 6 ,search_uuid_in_data_found_element_index6 -0x7118 032062 beq 7 ,search_uuid_in_data_found_element_index7 -0x7119 032063 increase -1 ,contr -0x711a 032064 call sdp_get_data -0x711b 032065 iadd contr ,contr -0x711c 032066 copy rega ,pdata -0x711d 032067 isub temp ,rega -0x711e 032068 branch disable_user ,zero -0x711f 032069 branch search_uuid_in_data_loop -: 032071 search_uuid_in_data_found_element_index5: -0x7120 032072 increase -2 ,rega -0x7121 032073 increase 1 ,contr -0x7122 032074 branch search_uuid_in_data_loop -: 032075 search_uuid_in_data_found_element_index6: -0x7123 032076 increase -3 ,rega -0x7124 032077 increase 2 ,contr -0x7125 032078 branch search_uuid_in_data_loop -: 032079 search_uuid_in_data_found_element_index7: -0x7126 032080 increase -5 ,rega -0x7127 032081 increase 4 ,contr -0x7128 032082 branch search_uuid_in_data_loop -: 032084 search_uuid_in_data_found_uuid: -0x7129 032085 increase -1 ,rega -0x712a 032086 copy loopcnt ,pdata -0x712b 032087 beq 1 ,search_uuid_in_data_type_uuid_16 -0x712c 032088 beq 2 ,search_uuid_in_data_type_uuid_32 -0x712d 032089 beq 4 ,search_uuid_in_data_type_uuid_128 -0x712e 032090 branch disable_user -: 032091 search_uuid_in_data_type_uuid_128: -0x712f 032092 increase -12 ,rega -: 032093 search_uuid_in_data_type_uuid_32: -0x7130 032094 ifetch 2 ,contr -0x7131 032095 increase -2 ,rega -: 032096 search_uuid_in_data_type_uuid_16: -0x7132 032097 ifetch 2 ,contr -0x7133 032098 isub regb ,null -0x7134 032099 branch enable_user ,zero -0x7135 032100 increase -2 ,rega -0x7136 032101 branch disable_user ,zero -0x7137 032102 branch search_uuid_in_data_loop -: 032161 sdp_send_spp_request: -0x7138 032162 call l2cap_get_sdp_tx_payload -0x7139 032163 copy pdata ,contw -0x713a 032164 setarg 6 -0x713b 032165 istore 1 ,contw -0x713c 032166 setarg sdp_tid_spp -0x713d 032167 istore 2 ,contw -0x713e 032168 setarg 0x0f00 -0x713f 032169 istore 2 ,contw -0x7140 032170 setarg 0x1a0535 -0x7141 032171 istore 3 ,contw -0x7142 032172 setarg 0x0111 -0x7143 032173 lshift16 pdata ,pdata -0x7144 032174 istore 4 ,contw -0x7145 032175 setarg 0x2600 -0x7146 032176 istore 2 ,contw -0x7147 032177 setarg 0x0335 -0x7148 032178 istore 2 ,contw -0x7149 032179 setarg 0x0009 -0x714a 032180 istore 2 ,contw -0x714b 032181 setarg 0x0004 -0x714c 032182 istore 2 ,contw -0x714d 032183 jam 0x14 ,mem_sdp_tx_pkt_length -0x714e 032184 rtn -: 032188 function_g2: -0x714f 032189 bpatchx patch3b_2 ,mem_patch3b -0x7150 032190 jam 80 ,mem_aes_cmac_data_length -0x7151 032191 arg memdat ,contw -0x7152 032192 arg mem_le_srand ,contr -0x7153 032193 call memcpy16 -0x7154 032194 arg mem_le_pubkey_local_x_256 ,contr -0x7155 032195 call memcpy32 -0x7156 032196 arg mem_le_pubkey_remote_x_256 ,contr -0x7157 032197 call memcpy32 -0x7158 032198 call inverse_memdat -0x7159 032199 arg mem_le_mrand ,contr -0x715a 032200 call store_inverse_k -0x715b 032201 call function_aes_cmac -0x715c 032203 arg mem_aes_cmac_temp ,contw -0x715d 032204 call load_inverse_result -0x715e 032205 setarg 1000000 -0x715f 032206 copy pdata ,rega -0x7160 032207 fetch 4 ,mem_aes_cmac_temp -0x7161 032208 idiv rega -0x7162 032209 call wait_div_end -0x7163 032210 remainder pdata -0x7164 032211 store 4 ,mem_gkey -0x7165 032213 rtn -: 032215 function_f6_eb: -0x7166 032216 jam 65 ,mem_aes_cmac_data_length -0x7167 032217 arg memdat ,contw -0x7168 032218 call store_addr_common_a -0x7169 032219 call store_addr_common_b -0x716a 032220 fetch 3 ,mem_le_pres + 1 -0x716b 032221 istore 3 ,contw -0x716c 032224 call get_r -0x716d 032226 arg mem_le_mrand ,contr -0x716e 032227 call memcpy16 -0x716f 032228 arg mem_le_srand ,contr -0x7170 032229 call memcpy16 -0x7171 032230 call inverse_memdat -0x7172 032231 arg mem_le_mackey ,contr -0x7173 032232 arg mem_aes_cmac_k ,contw -0x7174 032233 call memcpy16 -0x7175 032235 branch function_aes_cmac -: 032239 get_r: -0x7176 032240 fetch 4 ,mem_le_tk -0x7177 032241 istore 4 ,contw -0x7178 032242 call memset0_4 -0x7179 032243 branch memset0_8 -: 032245 function_f6_ea: -0x717a 032246 bpatchx patch3b_3 ,mem_patch3b -0x717b 032247 jam 65 ,mem_aes_cmac_data_length -0x717c 032248 arg memdat ,contw -0x717d 032249 call store_addr_common_b -0x717e 032250 call store_addr_common_a -0x717f 032251 fetch 3 ,mem_le_preq + 1 -0x7180 032252 istore 3 ,contw -0x7181 032255 call get_r -0x7182 032256 arg mem_le_srand ,contr -0x7183 032257 call memcpy16 -0x7184 032258 arg mem_le_mrand ,contr -0x7185 032259 call memcpy16 -0x7186 032260 call inverse_memdat -0x7187 032261 arg mem_le_mackey ,contr -0x7188 032262 arg mem_aes_cmac_k ,contw -0x7189 032263 call memcpy16 -0x718a 032265 call function_aes_cmac -0x718b 032266 arg mem_aes_cmac_temp ,contw -0x718c 032267 branch load_inverse_result -: 032269 function_f5: -0x718d 032270 jam 32 ,mem_aes_cmac_data_length -0x718e 032271 arg mem_le_dhkey_256 ,contr -0x718f 032272 arg memdat ,contw -0x7190 032273 call memcpy32 -0x7191 032274 call inverse_memdat -0x7192 032275 arg mem_le_slat ,contr -0x7193 032276 call store_inverse_k -0x7194 032277 call function_aes_cmac -0x7195 032278 arg mem_aes_cmac_k ,contw -0x7196 032279 call store_aes_result -0x7197 032280 arg 1 ,temp -0x7198 032281 call function_f5_common -0x7199 032282 arg mem_le_ltk ,contw -0x719a 032283 call load_inverse_result -0x719b 032284 arg 0 ,temp -0x719c 032285 call function_f5_common -0x719d 032286 arg mem_le_mackey ,contw -0x719e 032288 branch store_aes_result -: 032291 function_f5_common: -0x719f 032292 bpatchx patch3b_4 ,mem_patch3b -0x71a0 032293 jam 53 ,mem_aes_cmac_data_length -0x71a1 032294 setarg 0x100 -0x71a2 032295 store 2 ,memdat -0x71a3 032296 call store_addr_common_b -0x71a4 032297 call store_addr_common_a -0x71a5 032298 arg mem_le_srand ,contr -0x71a6 032299 call memcpy16 -0x71a7 032300 arg mem_le_mrand ,contr -0x71a8 032301 call memcpy16 -0x71a9 032303 setarg 0x6c65 -0x71aa 032304 istore 2 ,contw -0x71ab 032305 setarg 0x6274 -0x71ac 032306 istore 2 ,contw -0x71ad 032307 istoret 1 ,contw -0x71ae 032308 call inverse_memdat -0x71af 032309 branch function_aes_cmac -: 032311 store_addr_common_b: -0x71b0 032312 fetch 6 ,mem_le_lap -0x71b1 032313 istore 6 ,contw -0x71b2 032314 fetch 1 ,mem_le_conn_own_addr_type -0x71b3 032315 istore 1 ,contw -0x71b4 032316 rtn -: 032318 store_addr_common_a: -0x71b5 032319 fetch 6 ,mem_le_plap -0x71b6 032320 istore 6 ,contw -0x71b7 032325 fetch 1 ,mem_le_conn_peer_addr_type -0x71b8 032326 istore 1 ,contw -0x71b9 032327 rtn -: 032329 function_f4_ca: -0x71ba 032330 jam 65 ,mem_aes_cmac_data_length -0x71bb 032331 fetch 1 ,mem_passkey_1bit -0x71bc 032332 store 1 ,memdat -0x71bd 032333 arg mem_le_pubkey_local_x_256 ,contr -0x71be 032334 call memcpy32 -0x71bf 032335 arg mem_le_pubkey_remote_x_256 ,contr -0x71c0 032336 call memcpy32 -0x71c1 032337 call inverse_memdat -0x71c2 032338 arg mem_le_mrand ,contr -0x71c3 032339 call store_inverse_k -0x71c4 032340 branch function_aes_cmac -: 032343 function_f4_cb: -0x71c5 032344 jam 65 ,mem_aes_cmac_data_length -0x71c6 032345 fetch 1 ,mem_passkey_1bit -0x71c7 032346 store 1 ,memdat -0x71c8 032347 arg mem_le_pubkey_remote_x_256 ,contr -0x71c9 032348 call memcpy32 -0x71ca 032349 arg mem_le_pubkey_local_x_256 ,contr -0x71cb 032350 call memcpy32 -0x71cc 032351 call inverse_memdat -0x71cd 032352 arg mem_le_srand ,contr -0x71ce 032353 call store_inverse_k -0x71cf 032354 branch function_aes_cmac -: 032356 function_aes_cmac: -0x71d0 032357 bpatchx patch3b_5 ,mem_patch3b -0x71d1 032358 call function_aes_cmac_generate_subkey -0x71d2 032362 fetch 1 ,mem_aes_cmac_data_length -0x71d3 032363 copy pdata ,temp -: 032364 function_ceil16: -0x71d4 032365 increase 15 ,pdata -0x71d5 032366 rshift4 pdata ,pdata -0x71d6 032367 copy pdata ,regb -0x71d7 032368 branch function_aes_cmac_set_flag_0_balnk ,blank -0x71d8 032369 and temp ,0x0f ,pdata -0x71d9 032370 nbranch function_aes_cmac_set_flag_0 ,blank -0x71da 032372 arg mem_aes_cmac_k1 ,regc -0x71db 032373 arg memdat ,pdata -0x71dc 032374 increase -16 ,pdata -0x71dd 032377 iadd temp ,rega -0x71de 032378 arg mem_aes_cmac_m_last ,contw -0x71df 032379 arg 4 ,loopcnt -0x71e0 032380 call xor_loop -0x71e1 032384 branch function_aes_cmac_aes -: 032386 function_aes_cmac_set_flag_0_balnk: -0x71e2 032387 arg 1 ,regb -0x71e3 032388 arg 0 ,rega -0x71e4 032390 branch function_aes_cmac_set_flag_0_common -: 032393 function_aes_cmac_set_flag_0: -0x71e5 032395 and temp ,0x0f ,rega -: 032396 function_aes_cmac_set_flag_0_common: -0x71e6 032397 arg memdat ,pdata -0x71e7 032398 iadd temp ,pdata -0x71e8 032399 isub rega ,contr -0x71e9 032401 arg mem_aes_cmac_temp ,contw -0x71ea 032402 call function_aes_cmac_padding -0x71eb 032404 arg mem_aes_cmac_k2 ,regc -0x71ec 032405 arg mem_aes_cmac_temp ,rega -0x71ed 032406 arg mem_aes_cmac_m_last ,contw -0x71ee 032407 arg 4 ,loopcnt -0x71ef 032408 call xor_loop -: 032415 function_aes_cmac_aes: -0x71f0 032420 call aes_clear_data -0x71f1 032421 call aes_init -0x71f2 032424 arg memdat ,contr -: 032425 function_aes_cmac_aes_loop: -0x71f3 032427 increase -1 ,regb -0x71f4 032428 deposit regb -0x71f5 032429 branch function_aes_cmac_aes_loop_end ,blank -0x71f6 032430 call load_data128 -0x71f7 032431 call do_aes_cbc -0x71f8 032432 branch function_aes_cmac_aes_loop -: 032434 function_aes_cmac_aes_loop_end: -0x71f9 032435 arg mem_aes_cmac_temp ,contw -0x71fa 032436 call store_aes_result -0x71fb 032437 arg mem_aes_cmac_m_last ,contr -0x71fc 032438 call load_data128 -0x71fd 032439 call aes_init -0x71fe 032440 arg mem_aes_cmac_temp ,contr -0x71ff 032441 call load_data128 -0x7200 032442 branch do_aes_cbc -: 032446 load_inverse_result: -0x7201 032448 copy contw ,rega -0x7202 032449 call store_aes_result -0x7203 032451 arg 16 ,loopcnt -0x7204 032452 branch inverse_data -: 032454 store_inverse_k: -0x7205 032455 arg mem_aes_cmac_k ,contw -0x7206 032456 call memcpy16 -: 032457 inverse_k: -0x7207 032458 arg 16 ,loopcnt -0x7208 032459 arg mem_aes_cmac_k ,rega -0x7209 032460 branch inverse_data -: 032462 inverse_memdat: -0x720a 032463 fetch 1 ,mem_aes_cmac_data_length -0x720b 032464 copy pdata ,loopcnt -0x720c 032465 arg memdat ,rega -0x720d 032466 branch inverse_data -: 032468 bn_lshift_0_inverse: -0x720e 032469 ifetch 1 ,rega -0x720f 032470 lshift pdata ,pdata -0x7210 032471 isolate1 0 ,regc -0x7211 032472 setflag true ,0 ,pdata -0x7212 032473 isolate1 8 ,pdata -0x7213 032474 setflag true ,0 ,regc -0x7214 032475 istore 1 ,rega -0x7215 032476 increase -1 ,rega -0x7216 032477 loop bn_lshift_0_inverse -0x7217 032478 rtn -: 032480 function_aes_cmac_k1_inverse: -0x7218 032481 arg mem_aes_cmac_k1 ,rega -: 032482 function_aes_cmac_inverse_common: -0x7219 032483 increase 15 ,rega -0x721a 032484 force 16 ,loopcnt -0x721b 032485 force 0 ,regc -0x721c 032486 branch bn_lshift_0_inverse -: 032488 function_aes_cmac_k2_inverse: -0x721d 032489 arg mem_aes_cmac_k2 ,rega -0x721e 032490 branch function_aes_cmac_inverse_common -: 032493 function_aes_cmac_generate_subkey: -0x721f 032494 arg mem_aes_cmac_k ,contr -0x7220 032495 call load_key -0x7221 032498 force regidx_xor ,regext_index -0x7222 032499 call aes_clear -0x7223 032500 call aes_clear_data -0x7224 032501 call do_aes_ocb -0x7225 032506 arg mem_aes_cmac_k1 ,contw -0x7226 032507 call store_aes_result -: 032508 function_aes_cmac_k1: -0x7227 032509 bpatchx patch3b_6 ,mem_patch3b -0x7228 032510 fetch 1 ,mem_aes_cmac_k1 -0x7229 032511 isolate1 7 ,pdata -0x722a 032512 nbranch function_aes_cmac_k1_0 ,true -0x722b 032513 call function_aes_cmac_k1_inverse -0x722c 032516 arg mem_aes_cmac_k1 ,regc -0x722d 032518 arg mem_aes_cmac_k1 ,contw -0x722e 032521 call function_aes_cmac_xor_rb -0x722f 032522 branch function_aes_cmac_k2 -: 032523 function_aes_cmac_k1_0: -0x7230 032524 call function_aes_cmac_k1_inverse -: 032525 function_aes_cmac_k2: -0x7231 032527 arg mem_aes_cmac_k1 ,contr -0x7232 032528 arg mem_aes_cmac_k2 ,contw -0x7233 032529 call memcpy16 -0x7234 032530 fetch 1 ,mem_aes_cmac_k2 -0x7235 032531 isolate1 7 ,pdata -0x7236 032532 nbranch function_aes_cmac_k2_inverse ,true -0x7237 032533 call function_aes_cmac_k2_inverse -0x7238 032535 arg mem_aes_cmac_k2 ,regc -0x7239 032537 arg mem_aes_cmac_k2 ,contw -: 032543 function_aes_cmac_xor_rb: -0x723a 032544 arg 3 ,loopcnt -: 032545 function_aes_cmac_xor_rb_loop: -0x723b 032546 arg 0 ,temp -0x723c 032547 call function_aes_cmac_xor_loop_common -0x723d 032548 increase 4 ,regc -0x723e 032549 loop function_aes_cmac_xor_rb_loop -0x723f 032550 arg 0x8700 ,temp -0x7240 032551 lshift16 temp ,temp -: 032552 function_aes_cmac_xor_loop_common: -0x7241 032553 ifetch 4 ,regc -0x7242 032554 ixor temp ,pdata -0x7243 032555 istore 4 ,contw -0x7244 032556 rtn -: 032562 function_aes_cmac_padding: -0x7245 032563 bpatchx patch3b_7 ,mem_patch3b -0x7246 032564 arg 16 ,loopcnt -0x7247 032565 arg 0 ,pdata -: 032566 function_aes_cmac_padding_loop: -0x7248 032567 isub rega ,null -0x7249 032568 branch function_aes_cmac_padding_beq_length ,zero -0x724a 032569 branch function_aes_cmac_padding_big_length ,positive -0x724b 032570 ifetcht 1 ,contr -0x724c 032571 istoret 1 ,contw -: 032572 function_aes_cmac_padding_loop2: -0x724d 032573 increase 1 ,pdata -0x724e 032574 loop function_aes_cmac_padding_loop -0x724f 032575 rtn -: 032576 function_aes_cmac_padding_beq_length: -0x7250 032577 arg 0x80 ,temp -: 032578 function_aes_cmac_padding_common: -0x7251 032579 istoret 1 ,contw -0x7252 032580 branch function_aes_cmac_padding_loop2 -: 032582 function_aes_cmac_padding_big_length: -0x7253 032583 arg 0 ,temp -0x7254 032584 branch function_aes_cmac_padding_common -: 032587 generate_kinit: -0x7255 032588 call function_e22 -0x7256 032589 arg mem_input_store ,contr -0x7257 032590 arg mem_kinit ,contw -0x7258 032591 branch memcpy16 -: 032594 function_e21: -0x7259 032595 disable user -0x725a 032596 call function_expand -0x725b 032597 arg mem_random_number ,contr -0x725c 032598 arg mem_x ,contw -0x725d 032599 force 15 ,loopcnt -0x725e 032600 call memcpy -0x725f 032601 ifetch 1 ,contr -0x7260 032602 xor_into 6 ,pdata -0x7261 032603 istore 1 ,contw -0x7262 032604 setarg mem_y -0x7263 032605 store 2 ,memp_ar_input -0x7264 032606 setarg mem_x -0x7265 032607 store 2 ,memp_ar_key -0x7266 032608 set1 mark_ar2 ,mark -0x7267 032609 branch function_ar -: 032613 function_e22: -0x7268 032614 fetcht 1 ,mem_pin_length -0x7269 032615 force 16 ,regb -0x726a 032616 add temp ,6 ,regc -0x726b 032617 sub regc ,16 ,null -0x726c 032618 branch function_e22_pin_init ,positive -0x726d 032619 force 16 ,regc -: 032620 function_e22_pin_init: -0x726e 032621 arg mem_x ,contw -: 032622 function_e22_genx_pin: -0x726f 032623 arg mem_pin ,contr -0x7270 032624 copy temp ,loopcnt -0x7271 032625 disable user -: 032626 function_e22_genx_loop: -0x7272 032627 ifetch 1 ,contr -0x7273 032628 istore 1 ,contw -0x7274 032629 increase -1 ,regb -0x7275 032630 branch function_e22_genx_end ,zero -0x7276 032631 loop function_e22_genx_loop -0x7277 032632 branch function_e22_genx_pin ,user -0x7278 032633 enable user -0x7279 032634 force 6 ,loopcnt -0x727a 032635 copy rega ,contr -0x727b 032636 branch function_e22_genx_loop -: 032637 function_e22_genx_end: -0x727c 032638 arg mem_random_number ,contr -0x727d 032639 arg mem_y ,contw -0x727e 032640 call memcpy16 -0x727f 032641 fetch 1 ,mem_y15 -0x7280 032642 ixor regc ,pdata -0x7281 032643 store 1 ,mem_y15 -0x7282 032644 setarg mem_y -0x7283 032645 store 2 ,memp_ar_input -0x7284 032646 setarg mem_x -0x7285 032647 store 2 ,memp_ar_key -0x7286 032648 set1 mark_ar2 ,mark -0x7287 032649 branch function_ar -: 032654 function_e1: -0x7288 032655 disable user -0x7289 032656 call function_expand -0x728a 032657 branch function_hash -: 032659 function_e3: -0x728b 032660 arg mem_aco ,rega -0x728c 032661 enable user -0x728d 032662 call function_expand -0x728e 032663 call function_hash -0x728f 032664 arg mem_input_store ,contr -0x7290 032665 arg mem_kc ,contw -0x7291 032666 branch memcpy16 -: 032669 function_hash: -0x7292 032670 setarg mem_random_number -0x7293 032671 store 2 ,memp_ar_input -0x7294 032672 setarg mem_link_key -0x7295 032673 store 2 ,memp_ar_key -0x7296 032674 set0 mark_ar2 ,mark -0x7297 032675 call function_ar -0x7298 032676 arg mem_input_store ,rega -0x7299 032677 arg mem_random_number ,regb -0x729a 032678 arg mem_x ,contw -0x729b 032679 call xor16 -0x729c 032680 arg mem_x ,rega -0x729d 032681 arg mem_y ,regb -0x729e 032682 copy regb ,contw -0x729f 032683 enable user -0x72a0 032684 call add16 -0x72a1 032685 call key_offset -0x72a2 032686 setarg mem_y -0x72a3 032687 store 2 ,memp_ar_input -0x72a4 032688 setarg mem_x -0x72a5 032689 store 2 ,memp_ar_key -0x72a6 032690 set1 mark_ar2 ,mark -0x72a7 032691 branch function_ar -: 032695 function_ar: -0x72a8 032696 jam 0 ,mem_ar_hround -0x72a9 032697 fetch 2 ,memp_ar_key -0x72aa 032698 iforce contr -0x72ab 032699 arg mem_key_store ,contw -0x72ac 032700 call memcpy16 -0x72ad 032701 fetch 2 ,memp_ar_input -0x72ae 032702 iforce contr -0x72af 032703 arg mem_input_store ,contw -0x72b0 032704 call memcpy16 -: 032706 function_ar_loop: -0x72b1 032707 call key_scheduling -0x72b2 032708 disable user -0x72b3 032709 bmark0 mark_ar2 ,function_ar_original -0x72b4 032710 fetch 1 ,mem_ar_hround -0x72b5 032711 bne 4 ,function_ar_original -0x72b6 032712 fetch 2 ,memp_ar_input -0x72b7 032713 iforce regb -0x72b8 032714 call xor_mod32_ar2 -: 032715 function_ar_original: -0x72b9 032716 call xor_mod32 -0x72ba 032717 call el_boxes -0x72bb 032718 fetch 1 ,mem_ar_hround -0x72bc 032719 increase 1 ,pdata -0x72bd 032720 store 1 ,mem_ar_hround -0x72be 032722 call key_scheduling -0x72bf 032723 enable user -0x72c0 032724 call xor_mod32 -0x72c1 032725 call pht -0x72c2 032726 call permute -0x72c3 032727 call pht -0x72c4 032728 call permute -0x72c5 032729 call pht -0x72c6 032730 call permute -0x72c7 032731 call pht -0x72c8 032732 fetch 1 ,mem_ar_hround -0x72c9 032733 increase 1 ,pdata -0x72ca 032734 store 1 ,mem_ar_hround -0x72cb 032735 bne 16 ,function_ar_loop -0x72cc 032736 call key_scheduling -0x72cd 032737 disable user -0x72ce 032738 branch xor_mod32 -: 032742 key_scheduling: -0x72cf 032743 fetch 1 ,mem_ar_hround -0x72d0 032744 arg mem_key_store ,contr -0x72d1 032745 branch key_sched_zero ,blank -0x72d2 032746 iforce regb -0x72d3 032747 force 17 ,loopcnt -0x72d4 032748 copy contr ,contw -: 032749 key_rotateloop: -0x72d5 032750 ifetch 1 ,contr -0x72d6 032751 lshift3 pdata ,temp -0x72d7 032752 rshift2 pdata ,pdata -0x72d8 032753 rshift3 pdata ,pdata -0x72d9 032754 ior temp ,pdata -0x72da 032755 istore 1 ,contw -0x72db 032756 loop key_rotateloop -0x72dc 032757 setarg mem_key_store -0x72dd 032758 iadd regb ,contr -0x72de 032759 force 16 ,loopcnt -0x72df 032760 arg mem_round_key ,contw -: 032761 key_select_octet_loop: -0x72e0 032762 ifetch 1 ,contr -0x72e1 032763 istore 1 ,contw -0x72e2 032764 compare mem_key_store_end ,contr ,0xff -0x72e3 032765 nbranch key_select_octet_nwrap ,true -0x72e4 032766 increase -17 ,contr -: 032767 key_select_octet_nwrap: -0x72e5 032768 loop key_select_octet_loop -0x72e6 032769 force 0 ,rega -0x72e7 032770 add regb ,-1 ,regc -0x72e8 032771 lshift2 regc ,regc -0x72e9 032772 lshift2 regc ,regc -0x72ea 032773 call enable_authrom -0x72eb 032774 setarg mem_b_box -0x72ec 032775 iadd regc ,regc -0x72ed 032776 arg mem_round_key ,contw -0x72ee 032777 force 16 ,loopcnt -: 032778 bias_round_key_loop: -0x72ef 032779 ifetcht 1 ,regc -0x72f0 032780 ifetch 1 ,contw -0x72f1 032781 iadd temp ,pdata -0x72f2 032782 istore 1 ,contw -0x72f3 032783 increase 1 ,regc -0x72f4 032784 loop bias_round_key_loop -0x72f5 032785 branch disable_authrom -: 032787 key_sched_zero: -0x72f6 032788 force 16 ,loopcnt -0x72f7 032789 force 0 ,temp -: 032790 create_byte_16_loop: -0x72f8 032791 ifetch 1 ,contr -0x72f9 032792 ixor temp ,temp -0x72fa 032793 loop create_byte_16_loop -0x72fb 032794 deposit temp -0x72fc 032795 istore 1 ,contr -0x72fd 032796 arg mem_key_store ,contr -0x72fe 032797 arg mem_round_key ,contw -0x72ff 032798 branch memcpy16 -: 032800 xor_mod32: -0x7300 032801 arg mem_round_key ,regb -: 032802 xor_mod32_ar2: -0x7301 032803 force 16 ,loopcnt -0x7302 032804 arg mem_input_store ,rega -0x7303 032805 copy rega ,contw -: 032806 xor_mod32_loop: -0x7304 032807 ifetcht 1 ,rega -0x7305 032808 ifetch 1 ,regb -0x7306 032809 ixor temp ,alarm -0x7307 032810 and loopcnt ,3 ,regc -0x7308 032811 nbranch xor_mod32_invert ,user -0x7309 032812 xor_into 3 ,regc -: 032813 xor_mod32_invert: -0x730a 032814 sub regc ,1 ,regc -0x730b 032815 branch xor_even ,positive -0x730c 032816 iadd temp ,alarm -: 032817 xor_even: -0x730d 032818 deposit alarm -0x730e 032819 istore 1 ,contw -0x730f 032820 increase 1 ,rega -0x7310 032821 increase 1 ,regb -0x7311 032822 loop xor_mod32_loop -0x7312 032823 rtn -: 032825 el_boxes: -0x7313 032826 call enable_authrom -0x7314 032827 force 16 ,loopcnt -0x7315 032828 arg mem_input_store ,rega -: 032829 el_box_loop: -0x7316 032830 ifetch 1 ,rega -0x7317 032831 arg mem_e_box ,contr -0x7318 032832 and loopcnt ,3 ,regc -0x7319 032833 sub regc ,1 ,null -0x731a 032834 branch e_boxes ,positive -0x731b 032835 arg mem_l_box ,contr -: 032836 e_boxes: -0x731c 032837 iadd contr ,contr -0x731d 032838 ifetch 1 ,contr -0x731e 032839 istore 1 ,rega -0x731f 032840 increase 1 ,rega -0x7320 032841 loop el_box_loop -0x7321 032842 branch disable_authrom -: 032844 pht: -0x7322 032845 force 8 ,loopcnt -0x7323 032846 arg mem_input_store ,contr -0x7324 032847 copy contr ,contw -: 032848 pht_loop: -0x7325 032849 ifetch 1 ,contr -0x7326 032850 iforce rega -0x7327 032851 ifetch 1 ,contr -0x7328 032852 iforce regb -0x7329 032853 lshift rega ,pdata -0x732a 032854 iadd regb ,pdata -0x732b 032855 istore 1 ,contw -0x732c 032856 deposit rega -0x732d 032857 iadd regb ,pdata -0x732e 032858 istore 1 ,contw -0x732f 032859 loop pht_loop -0x7330 032860 rtn -: 032863 permute: -0x7331 032864 setarg 0x8ae42c -0x7332 032865 iforce temp -0x7333 032866 force 7 ,loopcnt -0x7334 032867 call permute_exchange -0x7335 032868 setarg 0xd751b -0x7336 032869 iforce temp -0x7337 032870 force 5 ,loopcnt -0x7338 032871 call permute_exchange -0x7339 032872 fetch 1 ,mem_input_store + 15 -0x733a 032873 iforce rega -0x733b 032874 fetch 1 ,mem_input_store + 3 -0x733c 032875 store 1 ,mem_input_store + 15 -0x733d 032876 deposit rega -0x733e 032877 store 1 ,mem_input_store + 3 -0x733f 032878 rtn -: 032880 permute_exchange: -0x7340 032881 and temp ,0xf ,regb -: 032882 permute_loop: -0x7341 032883 and temp ,0xf ,pdata -0x7342 032884 arg mem_input_store ,contw -0x7343 032885 iadd contw ,contw -0x7344 032886 ifetch 1 ,contw -0x7345 032887 iforce regc -0x7346 032888 deposit rega -0x7347 032889 istore 1 ,contw -0x7348 032890 copy regc ,rega -0x7349 032891 rshift4 temp ,temp -0x734a 032892 loop permute_loop -0x734b 032893 setarg mem_input_store -0x734c 032894 iadd regb ,contw -0x734d 032895 deposit rega -0x734e 032896 istore 1 ,contw -0x734f 032897 rtn -: 032899 add16: -0x7350 032900 enable user -0x7351 032901 branch xor_add16 -: 032903 xor16: -0x7352 032904 disable user -: 032905 xor_add16: -0x7353 032906 force 16 ,loopcnt -: 032907 xoradd_loop: -0x7354 032908 ifetcht 1 ,rega -0x7355 032909 ifetch 1 ,regb -0x7356 032910 branch xoradd_add ,user -0x7357 032911 ixor temp ,pdata -0x7358 032912 branch xoradd_store -: 032913 xoradd_add: -0x7359 032914 iadd temp ,pdata -: 032915 xoradd_store: -0x735a 032916 istore 1 ,contw -0x735b 032917 increase 1 ,rega -0x735c 032918 increase 1 ,regb -0x735d 032919 loop xoradd_loop -0x735e 032920 rtn -: 032923 function_expand: -0x735f 032924 arg mem_y ,contw -0x7360 032925 ifetch 6 ,rega -0x7361 032926 istore 6 ,contw -0x7362 032927 branch expand_12 ,user -0x7363 032928 ifetch 6 ,rega -0x7364 032929 branch expand_cont -: 032930 expand_12: -0x7365 032931 ifetch 6 ,contr -: 032932 expand_cont: -0x7366 032933 istore 6 ,contw -0x7367 032934 ifetch 4 ,rega -0x7368 032935 istore 4 ,contw -0x7369 032936 rtn -: 032938 key_offset: -0x736a 032939 arg mem_link_key ,contr -0x736b 032940 arg mem_x ,contw -0x736c 032941 arg 0 ,temp -0x736d 032942 setarg 0x8395a7 -0x736e 032943 call concatenate_temp24 -0x736f 032944 setarg 0xb3c1df -0x7370 032945 call concatenate_temp24 -0x7371 032946 setarg 0xe5e9 -0x7372 032947 call concatenate_temp16 -0x7373 032948 copy temp ,regab -0x7374 032949 disable user -0x7375 032950 call key_addxor -0x7376 032951 copy regab ,temp -0x7377 032952 enable user -0x7378 032953 branch key_addxor -: 032955 key_addxor: -0x7379 032956 force 8 ,loopcnt -: 032957 key_addxor_loop: -0x737a 032958 ifetch 1 ,contr -0x737b 032959 compare 1 ,loopcnt ,1 -0x737c 032960 branch key_high ,user -0x737d 032961 branch key_xor ,true -: 032962 key_add: -0x737e 032963 iadd temp ,pdata -0x737f 032964 branch key_store -: 032965 key_high: -0x7380 032966 branch key_add ,true -: 032967 key_xor: -0x7381 032968 ixor temp ,pdata -: 032969 key_store: -0x7382 032970 istore 1 ,contw -0x7383 032971 rshift8 temp ,temp -0x7384 032972 loop key_addxor_loop -0x7385 032973 rtn -: 032975 copy_aco: -0x7386 032976 fetch 6 ,mem_input_store + 4 -0x7387 032977 store 6 ,mem_aco -0x7388 032978 ifetch 6 ,contr -0x7389 032979 istore 6 ,contw -0x738a 032980 rtn -: 032982 concatenate_temp24: -0x738b 032983 lshift8 temp ,temp -: 032984 concatenate_temp16: -0x738c 032985 lshift16 temp ,temp -0x738d 032986 ior temp ,temp -0x738e 032987 rtn -: 032991 loop1: -0x738f 032992 branch loop1 -: 032996 generate_stk: -0x7390 032997 bpatchx patch3c_0 ,mem_patch3c -0x7391 032998 call function_s1 -0x7392 032999 arg mem_le_ltk ,contw -0x7393 033000 branch store_aes_result -: 033003 authenticate_rconfirm: -0x7394 033004 arg mem_le_srand ,contw -0x7395 033005 branch authenticate_mconfirm ,master -0x7396 033006 arg mem_le_mrand ,contw -: 033007 authenticate_mconfirm: -0x7397 033008 copy contr ,rega -0x7398 033009 call memcpy16 -0x7399 033010 call function_c1 -0x739a 033011 arg mem_le_rconfirm ,contr -0x739b 033012 branch compare_res -: 033014 generate_confirm: -0x739c 033015 arg mem_le_mrand ,rega -0x739d 033016 branch generate_mrand ,master -0x739e 033017 arg mem_le_srand ,rega -: 033018 generate_mrand: -0x739f 033019 copy rega ,contw -0x73a0 033020 call generate_random -0x73a1 033021 branch function_c1 -: 033023 generate_sk: -0x73a2 033024 arg mem_le_skdm ,contr -0x73a3 033025 call load_data128 -0x73a4 033026 arg mem_le_ltk ,contr -0x73a5 033027 call load_regext -0x73a6 033028 force 0x38 ,aes_ctrl -0x73a7 033029 force 0x0 ,aes_ctrl -0x73a8 033030 call wait_aes -0x73a9 033031 arg mem_le_sk ,contw -0x73aa 033032 branch store_aes_result -: 033035 first_block_counter: -0x73ab 033036 force 0x49 ,pdata -0x73ac 033037 branch first_block -: 033038 first_block_data: -0x73ad 033039 force 1 ,pdata -: 033040 first_block: -0x73ae 033041 force regidx_data ,regext_index -0x73af 033042 lshift8 temp ,regext -0x73b0 033043 ior regext ,regext -0x73b1 033044 increase 1 ,regext_index -0x73b2 033045 rshift8 temp ,regext -0x73b3 033046 rshift16 regext ,regext -0x73b4 033047 fetch 2 ,mem_le_ivm -0x73b5 033048 lshift16 ,pdata ,pdata -0x73b6 033049 ior regext ,regext -0x73b7 033050 increase 1 ,regext_index -0x73b8 033051 ifetch 4 ,contr -0x73b9 033052 iforce regext -0x73ba 033053 increase 1 ,regext_index -0x73bb 033054 ifetch 2 ,contr -0x73bc 033055 byteswap rega ,regext -0x73bd 033056 lshift16 regext ,regext -0x73be 033057 ior regext ,regext -0x73bf 033058 increase 1 ,regext_index -0x73c0 033059 rtn -: 033063 generate_mic: -0x73c1 033064 add regc ,1 ,contr -0x73c2 033065 ifetch 1 ,contr -0x73c3 033066 iforce rega -0x73c4 033067 call first_block_counter -0x73c5 033068 call do_aes_ocb -0x73c6 033070 force regidx_data ,regext_index -0x73c7 033071 ifetch 1 ,regc -0x73c8 033072 and_into 0x3 ,pdata -0x73c9 033073 lshift16 pdata ,regext -0x73ca 033074 set1 8 ,regext -0x73cb 033075 call clear_hidata -0x73cc 033076 call do_aes_cbc -0x73cd 033078 copy rega ,loopcnt -0x73ce 033079 add regc ,2 ,contr -0x73cf 033080 call padding_data -: 033081 generate_mic_loop: -0x73d0 033082 call aes_load_data -0x73d1 033083 call do_aes_cbc -0x73d2 033084 deposit loopcnt -0x73d3 033085 branch generate_mic_end ,blank -0x73d4 033086 branch generate_mic_loop -: 033087 generate_mic_end: -0x73d5 033088 force regidx_result ,regext_index -0x73d6 033089 deposit regext -0x73d7 033090 store 4 ,mem_le_mic -0x73d8 033091 rtn -: 033093 aes_crypt_data: -0x73d9 033094 increase 1 ,rega -0x73da 033095 call first_block_data -0x73db 033096 copy regc ,contr -0x73dc 033097 call aes_load_xor -0x73dd 033098 call do_aes_ctr -0x73de 033099 call store_enc_data -0x73df 033100 increase 16 ,regc -0x73e0 033101 increase -16 ,regb -0x73e1 033102 branch aes_crypt_data ,positive -0x73e2 033103 rtn -: 033105 le_encrypt: -0x73e3 033106 bpatchx patch3c_1 ,mem_patch3c -0x73e4 033107 arg mem_le_txheader ,regc -0x73e5 033108 fetcht 5 ,mem_le_pcnt_tx -0x73e6 033109 call generate_mic -0x73e7 033110 force regidx_xor ,regext_index -0x73e8 033111 iforce regext -0x73e9 033112 force 0 ,rega -0x73ea 033113 call first_block_data -0x73eb 033114 call do_aes_ctr -0x73ec 033115 arg mem_le_txpayload ,regc -0x73ed 033116 fetch 1 ,mem_le_txlen -0x73ee 033117 add pdata ,-1 ,regb -0x73ef 033118 iadd regc ,contw -0x73f0 033119 force regidx_result ,regext_index -0x73f1 033120 deposit regext -0x73f2 033121 istore 4 ,contw -0x73f3 033122 call aes_crypt_data -0x73f4 033123 fetch 1 ,mem_le_txlen -0x73f5 033124 increase 4 ,pdata -0x73f6 033125 store 1 ,mem_le_txlen -0x73f7 033126 fetcht 5 ,mem_le_pcnt_tx -0x73f8 033127 increase 1 ,temp -0x73f9 033128 storet 5 ,mem_le_pcnt_tx -0x73fa 033129 rtn -: 033131 le_decrypt: -0x73fb 033132 bpatchx patch3c_2 ,mem_patch3c -0x73fc 033133 fetch 1 ,mem_le_rxbuf + 1 -0x73fd 033134 sub pdata ,20 ,null -0x73fe 033135 branch le_dec_cont ,positive -: 033136 le_dec_cont: -0x73ff 033137 arg mem_le_rxbuf + 2 ,regc -0x7400 033138 add pdata ,-1 ,regb -0x7401 033139 increase -4 ,pdata -0x7402 033140 store 1 ,mem_le_rxbuf + 1 -0x7403 033141 iadd regc ,contr -0x7404 033142 ifetch 4 ,contr -0x7405 033143 force regidx_xor ,regext_index -0x7406 033144 iforce regext -0x7407 033145 force 0 ,rega -0x7408 033146 fetcht 5 ,mem_le_pcnt_rx -0x7409 033147 call first_block_data -0x740a 033148 call do_aes_ctr -0x740b 033149 force regidx_result ,regext_index -0x740c 033150 deposit regext -0x740d 033151 store 4 ,mem_le_peer_mic -0x740e 033152 call aes_crypt_data -0x740f 033153 arg mem_le_rxbuf ,regc -0x7410 033154 call generate_mic -0x7411 033155 fetcht 4 ,mem_le_peer_mic -0x7412 033156 isub temp ,pdata -0x7413 033157 nrtn blank -0x7414 033158 fetch 4 ,mem_le_last_mic -0x7415 033159 isub temp ,pdata -0x7416 033160 rtn blank -0x7417 033161 storet 4 ,mem_le_last_mic -0x7418 033162 fetch 5 ,mem_le_pcnt_rx -0x7419 033163 increase 1 ,pdata -0x741a 033164 store 5 ,mem_le_pcnt_rx -0x741b 033165 force 0 ,pdata -0x741c 033166 rtn -: 033168 wait_aes: -0x741d 033169 nbranch wait_aes ,aes_ready -0x741e 033170 rtn -: 033172 do_aes_ocb: -0x741f 033173 force 0x30 ,aes_ctrl -0x7420 033174 force 0x0 ,aes_ctrl -0x7421 033175 branch wait_aes -: 033177 do_aes_cbc: -0x7422 033178 force 0x32 ,aes_ctrl -0x7423 033179 force 0x2 ,aes_ctrl -0x7424 033180 branch wait_aes -: 033182 do_aes_ctr: -0x7425 033183 force 0x34 ,aes_ctrl -0x7426 033184 force 0x4 ,aes_ctrl -0x7427 033185 branch wait_aes -: 033188 aes_init: -0x7428 033189 force 1 ,aes_ctrl -0x7429 033190 force 0 ,aes_ctrl -0x742a 033191 rtn -: 033192 function_s1: -0x742b 033193 force regidx_data ,regext_index -0x742c 033194 fetch 4 ,mem_le_mrand -0x742d 033195 iforce regext -0x742e 033196 increase 1 ,regext_index -0x742f 033197 ifetch 4 ,contr -0x7430 033198 iforce regext -0x7431 033199 increase 1 ,regext_index -0x7432 033200 fetch 4 ,mem_le_srand -0x7433 033201 iforce regext -0x7434 033202 increase 1 ,regext_index -0x7435 033203 ifetch 4 ,contr -0x7436 033204 iforce regext -0x7437 033205 increase 1 ,regext_index -0x7438 033206 call aes_clear -0x7439 033207 increase -4 ,regext_index -0x743a 033208 fetch 4 ,mem_le_tk -0x743b 033209 copy pdata ,regext -0x743c 033210 increase 4 ,regext_index -0x743d 033211 force 0x38 ,aes_ctrl -0x743e 033212 force 0x8 ,aes_ctrl -0x743f 033213 branch wait_aes -: 033216 function_c1: -0x7440 033217 bpatchx patch3c_3 ,mem_patch3c -0x7441 033218 fetch 6 ,mem_le_lap -0x7442 033219 fetcht 6 ,mem_le_plap -0x7443 033220 branch function_c1_master ,master -0x7444 033221 fetch 6 ,mem_le_plap -0x7445 033222 fetcht 6 ,mem_le_lap -: 033223 function_c1_master: -0x7446 033224 force regidx_xor ,regext_index -0x7447 033225 copy temp ,regext -0x7448 033226 increase 1 ,regext_index -0x7449 033227 rshift32 temp ,regext -0x744a 033228 lshift16 pdata ,pdata -0x744b 033229 ior regext ,regext -0x744c 033230 increase 1 ,regext_index -0x744d 033231 rshift32 pdata ,regext -0x744e 033232 increase 1 ,regext_index -0x744f 033233 force 0 ,regext -0x7450 033234 force 0 ,pdata -0x7451 033235 fetch 1 ,mem_le_conn_peer_addr_type -0x7452 033236 fetcht 1 ,mem_le_adv_own_addr_type -0x7453 033237 nbranch function_c1_irat ,master -0x7454 033239 fetch 1 ,mem_le_conn_own_addr_type -0x7455 033240 fetcht 1 ,mem_le_conn_peer_addr_type -: 033241 function_c1_irat: -0x7456 033242 store 1 ,mem_le_iat -0x7457 033243 storet 1 ,mem_le_rat -0x7458 033244 force regidx_data ,regext_index -0x7459 033245 arg mem_le_iat ,regb -0x745a 033246 force 4 ,loopcnt -: 033247 function_c1_loop1: -0x745b 033248 ifetch 4 ,rega -0x745c 033249 ifetcht 4 ,regb -0x745d 033250 ixor temp ,regext -0x745e 033251 increase 1 ,regext_index -0x745f 033252 increase 4 ,rega -0x7460 033253 increase 4 ,regb -0x7461 033254 loop function_c1_loop1 -0x7462 033255 call aes_clear -0x7463 033256 increase -4 ,regext_index -0x7464 033257 fetch 4 ,mem_le_tk -0x7465 033258 copy pdata ,regext -0x7466 033259 increase 4 ,regext_index -0x7467 033260 force 0x38 ,aes_ctrl -0x7468 033261 force 0xc ,aes_ctrl -0x7469 033262 call wait_aes -0x746a 033264 call aes_clear_data -0x746b 033265 force 0x3a ,aes_ctrl -0x746c 033266 force 0x8 ,aes_ctrl -0x746d 033267 branch wait_aes -: 033269 padding_data: -0x746e 033270 compare 0 ,loopcnt ,3 -0x746f 033271 rtn true -0x7470 033272 deposit contr -0x7471 033273 iadd loopcnt ,contw -0x7472 033274 force 0 ,pdata -: 033275 padding_loop: -0x7473 033276 istore 1 ,contw -0x7474 033277 increase 1 ,loopcnt -0x7475 033278 compare 0 ,loopcnt ,3 -0x7476 033279 rtn true -0x7477 033280 branch padding_loop -: 033282 aes_load_data: -0x7478 033283 force regidx_data ,regext_index -: 033284 load_data_loop: -0x7479 033285 deposit loopcnt -0x747a 033286 branch load_data_padding ,blank -0x747b 033287 ifetch 4 ,contr -0x747c 033288 increase -4 ,loopcnt -: 033289 load_data_padding: -0x747d 033290 iforce regext -0x747e 033291 increase 1 ,regext_index -0x747f 033292 compare regidx_key ,regext_index ,0xf -0x7480 033293 rtn true -0x7481 033294 branch load_data_loop -: 033296 aes_load_xor: -0x7482 033297 force regidx_xor ,regext_index -0x7483 033298 branch load_regext -: 033299 load_key: -0x7484 033300 force regidx_key ,regext_index -0x7485 033301 branch load_regext -: 033302 load_data128: -0x7486 033303 force regidx_data ,regext_index -: 033304 load_regext: -0x7487 033305 force 4 ,loopcnt -: 033306 load_regext_loop: -0x7488 033307 ifetch 4 ,contr -0x7489 033308 iforce regext -0x748a 033309 increase 1 ,regext_index -0x748b 033310 loop load_regext_loop -0x748c 033311 rtn -: 033313 load_sk: -0x748d 033314 arg mem_le_sk ,contr -0x748e 033315 branch load_key -: 033317 clear_hidata: -0x748f 033318 force 4 ,loopcnt -0x7490 033319 branch clear_data_rest -: 033321 aes_clear_data: -0x7491 033322 force regidx_data ,regext_index -: 033323 aes_clear: -0x7492 033324 force 4 ,loopcnt -: 033325 clear_loop: -0x7493 033326 force 0 ,regext -: 033327 clear_data_rest: -0x7494 033328 increase 1 ,regext_index -0x7495 033329 loop clear_loop -0x7496 033330 rtn -: 033332 store_aes_result: -0x7497 033333 force regidx_result ,regext_index -0x7498 033334 force 4 ,loopcnt -: 033335 send_aes_result_loop: -0x7499 033336 deposit regext -0x749a 033337 istore 4 ,contw -0x749b 033338 increase 1 ,regext_index -0x749c 033339 loop send_aes_result_loop -0x749d 033340 rtn -: 033342 store_enc_data: -0x749e 033343 force regidx_result ,regext_index -0x749f 033344 copy regc ,contw -0x74a0 033345 add regb ,1 ,loopcnt -0x74a1 033346 sub loopcnt ,15 ,null -0x74a2 033347 branch store_enc_loop ,positive -0x74a3 033348 force 16 ,loopcnt -: 033349 store_enc_loop: -0x74a4 033350 deposit regext -0x74a5 033351 sub loopcnt ,3 ,null -0x74a6 033352 branch store_enc_byte ,positive -0x74a7 033353 istore 4 ,contw -0x74a8 033354 increase -4 ,loopcnt -0x74a9 033355 rtn zero -0x74aa 033356 increase 1 ,regext_index -0x74ab 033357 branch store_enc_loop -: 033358 store_enc_byte: -0x74ac 033359 istore 1 ,contw -0x74ad 033360 rshift8 pdata ,pdata -0x74ae 033361 loop store_enc_byte -0x74af 033362 rtn -: 033365 compare_res: -0x74b0 033366 force regidx_result ,regext_index -0x74b1 033367 force 4 ,loopcnt -: 033368 compare_res_loop: -0x74b2 033369 ifetch 4 ,contr -0x74b3 033370 isub regext ,null -0x74b4 033371 nrtn zero -0x74b5 033372 increase 1 ,regext_index -0x74b6 033373 loop compare_res_loop -0x74b7 033374 force 0 ,null -0x74b8 033375 rtn -: 033377 enable_authrom: -0x74b9 033378 hfetch 1 ,core_clkoff -0x74ba 033379 set0 clock_off_auth_rom ,pdata -0x74bb 033380 hstore 1 ,core_clkoff -0x74bc 033381 rtn -: 033383 disable_authrom: -0x74bd 033384 hfetch 1 ,core_clkoff -0x74be 033385 set1 clock_off_auth_rom ,pdata -0x74bf 033386 hstore 1 ,core_clkoff -0x74c0 033387 rtn -: 033389 init_memp: -0x74c1 033390 arg mem_p ,contw -0x74c2 033391 setsect 0 ,0x3ffff -0x74c3 033392 setsect 1 ,0x3ffff -0x74c4 033393 setsect 2 ,0x3ffff -0x74c5 033394 setsect 3 ,0x3fbff -0x74c6 033395 istore 9 ,contw -0x74c7 033396 setsect 0 ,0x3ffff -0x74c8 033397 setsect 1 ,0x3ffff -0x74c9 033398 setsect 2 ,0x3ffff -0x74ca 033399 setsect 3 ,0x3ffff -0x74cb 033400 istore 9 ,contw -0x74cc 033401 setsect 0 ,0x3ffff -0x74cd 033402 setsect 1 ,0x3ffff -0x74ce 033403 setsect 2 ,0x3cfff -0x74cf 033404 setsect 3 ,0x3ffff -0x74d0 033405 istore 9 ,contw -0x74d1 033406 setsect 0 ,0x3ffff -0x74d2 033407 setsect 1 ,0x3ffff -0x74d3 033408 setsect 2 ,0x3ffef -0x74d4 033409 setsect 3 ,0x3ffff -0x74d5 033410 istore 9 ,contw -0x74d6 033411 setsect 0 ,0x3ffff -0x74d7 033412 setsect 1 ,0x3ffff -0x74d8 033413 setsect 2 ,0x3ffff -0x74d9 033414 setsect 3 ,0x3ffff -0x74da 033415 istore 9 ,contw -0x74db 033416 setsect 0 ,0x3ffff -0x74dc 033417 setsect 1 ,0x26c7f -0x74dd 033418 setsect 2 ,0x146b -0x74de 033419 setsect 3 ,0x37bb3 -0x74df 033420 istore 9 ,contw -0x74e0 033421 setsect 0 ,0x1feb8 -0x74e1 033422 setsect 1 ,0x10c12 -0x74e2 033423 setsect 2 ,0x2b722 -0x74e3 033424 setsect 3 ,0x29fa6 -0x74e4 033425 istore 9 ,contw -0x74e5 033426 setsect 0 ,0xe70f -0x74e6 033427 setsect 1 ,0x16720 -0x74e7 033428 setsect 2 ,0x519e -0x74e8 033429 setsect 3 ,0x19084 -0x74e9 033430 istore 9 ,contw -0x74ea 033431 setsect 0 ,0x31012 -0x74eb 033432 setsect 1 ,0x360bf -0x74ec 033433 setsect 2 ,0x3f0af -0x74ed 033434 setsect 3 ,0x3d3 -0x74ee 033435 istore 9 ,contw -0x74ef 033436 setsect 0 ,0x3a188 -0x74f0 033437 setsect 1 ,0x3ad0 -0x74f1 033438 setsect 2 ,0x3cbf2 -0x74f2 033439 setsect 3 ,0x243d9 -0x74f3 033440 istore 9 ,contw -0x74f4 033441 setsect 0 ,0x2b030 -0x74f5 033442 setsect 1 ,0x36a03 -0x74f6 033443 setsect 2 ,0x11188 -0x74f7 033444 setsect 3 ,0x1e520 -0x74f8 033445 istore 9 ,contw -0x74f9 033446 setsect 0 ,0x3a11e -0x74fa 033447 setsect 1 ,0xfe5d -0x74fb 033448 setsect 2 ,0xdd57 -0x74fc 033449 setsect 3 ,0x1ac93 -0x74fd 033450 istore 9 ,contw -0x74fe 033451 setsect 0 ,0x11ed -0x74ff 033452 setsect 1 ,0x218c4 -0x7500 033453 setsect 2 ,0x8da7 -0x7501 033454 setsect 3 ,0x257ff -0x7502 033455 istore 9 ,contw -0x7503 033456 setsect 0 ,0x3192b -0x7504 033457 setsect 1 ,0x34641 -0x7505 033458 setsect 2 ,0x1be0c -0x7506 033459 setsect 3 ,0x366ad -0x7507 033460 istore 9 ,contw -0x7508 033461 setsect 0 ,0x1f83 -0x7509 033462 setsect 1 ,0x15a23 -0x750a 033463 setsect 2 ,0x3f9b0 -0x750b 033464 setsect 3 ,0x3949 -0x750c 033465 istore 9 ,contw -0x750d 033466 setsect 0 ,0x13a51 -0x750e 033467 setsect 1 ,0x153fd -0x750f 033468 setsect 2 ,0x3372a -0x7510 033469 setsect 3 ,0xf1bb -0x7511 033470 istore 9 ,contw -0x7512 033471 setsect 0 ,0x3ae85 -0x7513 033472 setsect 1 ,0x1eed9 -0x7514 033473 setsect 2 ,0x9e66 -0x7515 033474 setsect 3 ,0x1a8 -0x7516 033475 istore 8 ,contw -0x7517 033476 rtn -: 033480 init_memp_256: -0x7518 033481 arg mem_p_256 ,contw -0x7519 033482 setsect 0 ,0x3ffff -0x751a 033483 setsect 1 ,0x3ffff -0x751b 033484 setsect 2 ,0x3ffff -0x751c 033485 setsect 3 ,0x3ffff -0x751d 033486 istore 9 ,contw -0x751e 033487 setsect 0 ,0x3ffff -0x751f 033488 setsect 1 ,0x3f -0x7520 033489 setsect 2 ,0x0 -0x7521 033490 setsect 3 ,0x0 -0x7522 033491 istore 9 ,contw -0x7523 033492 setsect 0 ,0x0 -0x7524 033493 setsect 1 ,0x0 -0x7525 033494 setsect 2 ,0x1000 -0x7526 033495 setsect 3 ,0x0 -0x7527 033496 istore 9 ,contw -0x7528 033497 setsect 0 ,0x3ff00 -0x7529 033498 setsect 1 ,0x3ffff -0x752a 033499 setsect 2 ,0x3ffcf -0x752b 033500 setsect 3 ,0x3ffff -0x752c 033501 istore 9 ,contw -0x752d 033502 setsect 0 ,0x3ffff -0x752e 033503 setsect 1 ,0x3ffff -0x752f 033504 setsect 2 ,0x3ffff -0x7530 033505 setsect 3 ,0x3ff -0x7531 033506 istore 9 ,contw -0x7532 033507 setsect 0 ,0x0 -0x7533 033508 setsect 1 ,0x0 -0x7534 033509 setsect 2 ,0x0 -0x7535 033510 setsect 3 ,0x0 -0x7536 033511 istore 9 ,contw -0x7537 033512 setsect 0 ,0x10000 -0x7538 033513 setsect 1 ,0x0 -0x7539 033514 setsect 2 ,0x3f000 -0x753a 033515 setsect 3 ,0x3ffff -0x753b 033516 istore 9 ,contw -0x753c 033517 setsect 0 ,0x296ff -0x753d 033518 setsect 1 ,0x22630 -0x753e 033519 setsect 2 ,0x3945d -0x753f 033520 setsect 3 ,0x3d284 -0x7540 033521 istore 9 ,contw -0x7541 033522 setsect 0 ,0x333a0 -0x7542 033523 setsect 1 ,0x4b7a -0x7543 033524 setsect 2 ,0x37d8 -0x7544 033525 setsect 3 ,0x3c9dc -0x7545 033526 istore 9 ,contw -0x7546 033527 setsect 0 ,0x3a440 -0x7547 033528 setsect 1 ,0x1b958 -0x7548 033529 setsect 2 ,0x38bce -0x7549 033530 setsect 3 ,0x1091f -0x754a 033531 istore 9 ,contw -0x754b 033532 setsect 0 ,0x2e12c -0x754c 033533 setsect 1 ,0x1f47c -0x754d 033534 setsect 2 ,0x356b1 -0x754e 033535 setsect 3 ,0x2fd47 -0x754f 033536 istore 9 ,contw -0x7550 033537 setsect 0 ,0x6837 -0x7551 033538 setsect 1 ,0x2ed90 -0x7552 033539 setsect 2 ,0x1ecec -0x7553 033540 setsect 3 ,0x1acc5 -0x7554 033541 istore 9 ,contw -0x7555 033542 setsect 0 ,0x23357 -0x7556 033543 setsect 1 ,0x18af3 -0x7557 033544 setsect 2 ,0xf9e1 -0x7558 033545 setsect 3 ,0x129f0 -0x7559 033546 istore 9 ,contw -0x755a 033547 setsect 0 ,0x2e7eb -0x755b 033548 setsect 1 ,0x3e6e3 -0x755c 033549 setsect 2 ,0x3e1a7 -0x755d 033550 setsect 3 ,0x10b8b -0x755e 033551 istore 9 ,contw -0x755f 033552 setsect 0 ,0x24fe3 -0x7560 033553 setsect 1 ,0x20ef -0x7561 033554 setsect 2 ,0x1b5a6 -0x7562 033555 setsect 3 ,0xdc2f -0x7563 033556 istore 9 ,contw -0x7564 033557 setsect 0 ,0x13860 -0x7565 033558 setsect 1 ,0x2bd69 -0x7566 033559 setsect 2 ,0x391a -0x7567 033560 setsect 3 ,0x1b222 -0x7568 033561 istore 9 ,contw -0x7569 033562 rtn -: 033565 publickey_init: -0x756a 033566 fetch 1 ,mem_ssp_enable -0x756b 033567 nbranch sp_initialize ,blank -0x756c 033568 branch sp_initialize_256 -: 033570 sp_calc_sequence_256_check: -0x756d 033571 bpatchx patch3c_4 ,mem_patch3c -0x756e 033572 fetch 1 ,mem_ssp_enable -0x756f 033573 rtn blank -0x7570 033574 fetch 1 ,mem_sp_local_key_invalid -0x7571 033575 rtnne sp_key_valid -0x7572 033576 fetch 1 ,mem_le_secure_connect_enable -0x7573 033577 rtn blank -0x7574 033578 fetch 1 ,mem_le_sc_local_key_invalid -0x7575 033579 rtneq sp_key_valid_256 -0x7576 033580 fetch 2 ,mem_ui_state_map -0x7577 033581 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 -0x7578 033582 fetch 1 ,mem_le_sc_calc -0x7579 033583 beq sp_calc_standby ,sp_initialize_256 -0x757a 033584 rtn -: 033585 stop_publickey_calc_256: -0x757b 033586 jam sp_calc_standby ,mem_le_sc_calc -0x757c 033587 rtn -: 033590 sp_initialize: -0x757d 033591 bpatchx patch3c_5 ,mem_patch3c -0x757e 033592 fetch 1 ,mem_ssp_enable -0x757f 033593 branch ssp_disable ,blank -0x7580 033594 call ssp_enable -0x7581 033595 call sp_clear_flags -0x7582 033596 branch sp_pubkey_calc -: 033598 sp_clear_flags: -0x7583 033599 setarg 0 -0x7584 033600 store 8 ,mem_sp_state_start -0x7585 033601 store 4 ,mem_sp_flag_start -0x7586 033602 store 7 ,mem_sp_iocap_remote -0x7587 033603 rtn -: 033605 sp_generate_local_key: -0x7588 033606 jam sp_flag_commit ,mem_sp_flag -0x7589 033607 branch sp_generate_local_key0 -: 033608 sp_master_generate_local_key: -0x758a 033609 fetch 1 ,mem_sp_local_key_invalid -0x758b 033610 beq sp_key_valid ,sp_dhkey_calc -0x758c 033611 branch assert -: 033612 sp_generate_local_key0: -0x758d 033613 fetch 1 ,mem_sp_local_key_invalid -0x758e 033614 beq sp_key_valid ,sp_start_send_pubkey -0x758f 033615 branch sp_pubkey_calc -: 033617 sp_start_send_pubkey: -0x7590 033618 call sp_dhkey_calc -0x7591 033619 fetch 1 ,mem_master_sp_state -0x7592 033620 nrtn blank -0x7593 033621 jam sp_stat_key_send ,mem_sp_state -0x7594 033622 rtn -: 033625 sp_calc_check_publickey_256: -0x7595 033626 call sp_calc_b256 -0x7596 033627 arg mem_le_pubkey_remote_y_256 ,rega -0x7597 033628 arg mem_t7_256 ,contw -0x7598 033629 call bn_sqrmod_256 -0x7599 033630 arg mem_le_pubkey_remote_x_256 ,rega -0x759a 033631 arg mem_t2_256 ,contw -0x759b 033632 call bn_sqrmod_256 -0x759c 033633 arg mem_t2_256 ,rega -0x759d 033634 arg mem_le_pubkey_remote_x_256 ,regb -0x759e 033635 arg mem_t2_256 ,contw -0x759f 033636 call bn_mulmod_256 -0x75a0 033637 arg mem_a_256 ,rega -0x75a1 033638 arg mem_le_pubkey_remote_x_256 ,regb -0x75a2 033639 arg mem_t3_256 ,contw -0x75a3 033640 call bn_mulmod_256 -0x75a4 033641 arg mem_t3_256 ,rega -0x75a5 033642 arg mem_t2_256 ,regb -0x75a6 033643 arg mem_t2_256 ,contw -0x75a7 033644 call bn_addmod_256 -0x75a8 033645 arg mem_t0_256 ,rega -0x75a9 033646 arg mem_t2_256 ,regb -0x75aa 033647 arg mem_t0_256 ,contw -0x75ab 033648 call bn_addmod_256 -0x75ac 033649 arg 32 ,loopcnt -0x75ad 033650 arg mem_t7_256 ,rega -0x75ae 033651 arg mem_t0_256 ,regb -0x75af 033652 branch string_compare -: 033654 sp_calc_b256: -0x75b0 033655 arg mem_gy_256 ,rega -0x75b1 033656 arg mem_t0_256 ,contw -0x75b2 033657 call bn_sqrmod_256 -0x75b3 033658 arg mem_gx_256 ,rega -0x75b4 033659 arg mem_t2_256 ,contw -0x75b5 033660 call bn_sqrmod_256 -0x75b6 033661 arg mem_t2_256 ,rega -0x75b7 033662 arg mem_gx_256 ,regb -0x75b8 033663 arg mem_t2_256 ,contw -0x75b9 033664 call bn_mulmod_256 -0x75ba 033665 arg mem_a_256 ,rega -0x75bb 033666 arg mem_gx_256 ,regb -0x75bc 033667 arg mem_t3_256 ,contw -0x75bd 033668 call bn_mulmod_256 -0x75be 033669 arg mem_t3_256 ,rega -0x75bf 033670 arg mem_t2_256 ,regb -0x75c0 033671 arg mem_t2_256 ,contw -0x75c1 033672 call bn_addmod_256 -0x75c2 033673 arg mem_t0_256 ,rega -0x75c3 033674 arg mem_t2_256 ,regb -0x75c4 033675 arg mem_t0_256 ,contw -0x75c5 033676 branch bn_submod_256 -: 033678 sp_calc_check_publickey: -0x75c6 033679 call sp_calc_b -0x75c7 033680 arg mem_sp_pubkey_remote_y ,rega -0x75c8 033681 arg mem_t7_256 ,contw -0x75c9 033682 call bn_sqrmod -0x75ca 033683 arg mem_sp_pubkey_remote_x ,rega -0x75cb 033684 arg mem_t2_256 ,contw -0x75cc 033685 call bn_sqrmod -0x75cd 033686 arg mem_t2_256 ,rega -0x75ce 033687 arg mem_sp_pubkey_remote_x ,regb -0x75cf 033688 arg mem_t2_256 ,contw -0x75d0 033689 call bn_mulmod -0x75d1 033690 arg mem_a ,rega -0x75d2 033691 arg mem_sp_pubkey_remote_x ,regb -0x75d3 033692 arg mem_t3_256 ,contw -0x75d4 033693 call bn_mulmod -0x75d5 033694 arg mem_t3_256 ,rega -0x75d6 033695 arg mem_t2_256 ,regb -0x75d7 033696 arg mem_t2_256 ,contw -0x75d8 033697 call bn_addmod -0x75d9 033698 arg mem_t0_256 ,rega -0x75da 033699 arg mem_t2_256 ,regb -0x75db 033700 arg mem_t0_256 ,contw -0x75dc 033701 call bn_addmod -0x75dd 033702 arg 24 ,loopcnt -0x75de 033703 arg mem_t7_256 ,rega -0x75df 033704 arg mem_t0_256 ,regb -0x75e0 033705 branch string_compare -: 033707 sp_calc_b: -0x75e1 033708 arg mem_gy ,rega -0x75e2 033709 arg mem_t0_256 ,contw -0x75e3 033710 call bn_sqrmod -0x75e4 033711 arg mem_gx ,rega -0x75e5 033712 arg mem_t2_256 ,contw -0x75e6 033713 call bn_sqrmod -0x75e7 033714 arg mem_t2_256 ,rega -0x75e8 033715 arg mem_gx ,regb -0x75e9 033716 arg mem_t2_256 ,contw -0x75ea 033717 call bn_mulmod -0x75eb 033718 arg mem_a ,rega -0x75ec 033719 arg mem_gx ,regb -0x75ed 033720 arg mem_t3_256 ,contw -0x75ee 033721 call bn_mulmod -0x75ef 033722 arg mem_t3_256 ,rega -0x75f0 033723 arg mem_t2_256 ,regb -0x75f1 033724 arg mem_t2_256 ,contw -0x75f2 033725 call bn_addmod -0x75f3 033726 arg mem_t0_256 ,rega -0x75f4 033727 arg mem_t2_256 ,regb -0x75f5 033728 arg mem_t0_256 ,contw -0x75f6 033729 branch bn_submod -: 033732 sp_calculate_commitment: -0x75f7 033733 fetch 1 ,mem_sp_calc -0x75f8 033734 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc -0x75f9 033735 call sp_local_random_key_generator -0x75fa 033736 arg mem_sp_prarm_stack ,contw -0x75fb 033737 setarg mem_sp_random_local_end -0x75fc 033738 istore 2 ,contw -0x75fd 033739 setarg mem_sp_pubkey_local_x_end -0x75fe 033740 istore 2 ,contw -0x75ff 033741 setarg mem_sp_pubkey_remote_x_end -0x7600 033742 istore 2 ,contw -0x7601 033743 branch sp_calculate_commitment0 -: 033744 master_sp_calculate_commitment: -0x7602 033745 arg mem_sp_prarm_stack ,contw -0x7603 033746 setarg mem_sp_random_remote_end -0x7604 033747 istore 2 ,contw -0x7605 033748 setarg mem_sp_pubkey_remote_x_end -0x7606 033749 istore 2 ,contw -0x7607 033750 setarg mem_sp_pubkey_local_x_end -0x7608 033751 istore 2 ,contw -: 033752 sp_calculate_commitment0: -0x7609 033753 call function_f1 -0x760a 033754 fetch 1 ,mem_master_sp_state -0x760b 033755 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 -0x760c 033756 jam sp_flag_commit ,mem_sp_flag -0x760d 033757 jam sp_stat_commit_send ,mem_sp_state -0x760e 033758 rtn -: 033759 master_sp_calculate_commitment0: -0x760f 033760 jam sp_stat_commitment_compare ,mem_master_sp_state -0x7610 033761 call sp_master_generate_local_key -0x7611 033762 branch master_set_mem_master_sp_flag -: 033764 sp_local_random_key_generator: -0x7612 033765 arg mem_sp_random_local ,contw -0x7613 033766 force 8 ,queue -0x7614 033767 branch random_generator -: 033769 sp_calculate_commitment_wait_dhkey_calc: -0x7615 033770 jam sp_flag_commit ,mem_sp_flag -0x7616 033771 rtn -: 033773 sp_confirm_check: -0x7617 033775 bpatchx patch3c_6 ,mem_patch3c -0x7618 033776 arg mem_addr_value ,contw -0x7619 033777 fetch 6 ,mem_lap -0x761a 033778 istore 6 ,contw -0x761b 033779 fetch 6 ,mem_plap -0x761c 033780 istore 6 ,contw -0x761d 033781 fetch 3 ,mem_sp_iocap_remote -0x761e 033782 istore 3 ,contw -0x761f 033784 call function_f3a -0x7620 033786 arg mem_sp_calc_result_high ,rega -0x7621 033787 arg mem_sp_check_result ,regb -0x7622 033788 force 4 ,queue -0x7623 033789 call compare4 -0x7624 033790 nbranch sp_confirm_check_failed ,true -0x7625 033792 call sp_confirm_check_success -0x7626 033793 jam lmp_dhkey_check ,mem_lmi_opcode2 -0x7627 033794 branch tid_set_reply -: 033796 sp_confirm_check_success: -0x7628 033797 fetch 1 ,mem_master_sp_state -0x7629 033798 beq sp_stat_confirm_check ,sp_confirm_check_success_master -0x762a 033799 jam sp_stat_confirm_calc ,mem_sp_state -0x762b 033800 jam sp_flag_commit ,mem_sp_flag -0x762c 033801 jam lmp_accepted ,mem_lmo_opcode2 -0x762d 033802 rtn -: 033803 sp_confirm_check_success_master: -0x762e 033804 jam lmp_accepted ,mem_lmo_opcode2 -0x762f 033805 jam sp_state_end ,mem_master_sp_state -0x7630 033806 branch master_set_mem_master_sp_flag -: 033809 sp_confirm_check_failed: -0x7631 033810 fetch 1 ,mem_master_sp_state -0x7632 033811 beq sp_stat_confirm_check ,sp_confirm_check_failed_master -0x7633 033812 jam sp_stat_null ,mem_sp_state -0x7634 033813 jam lmp_not_accepted ,mem_lmo_opcode2 -0x7635 033815 jam authentication_failure_error ,mem_lmo_reason2 -0x7636 033816 rtn -: 033817 sp_confirm_check_failed_master: -0x7637 033818 jam lmp_not_accepted ,mem_lmo_opcode2 -0x7638 033819 jam sp_stat_null ,mem_master_sp_state -0x7639 033820 rtn -: 033822 sp_confirm_calc: -0x763a 033823 fetch 1 ,mem_sp_dh_ready -0x763b 033824 beq sp_flag_commit ,sp_confirm_calc_ready -0x763c 033825 jam sp_stat_confirm_calc ,mem_master_sp_state -0x763d 033826 branch master_set_mem_master_sp_flag -: 033827 sp_confirm_calc_ready: -0x763e 033828 arg mem_addr_value ,contw -0x763f 033829 fetch 6 ,mem_plap -0x7640 033830 istore 6 ,contw -0x7641 033831 fetch 6 ,mem_lap -0x7642 033832 istore 6 ,contw -0x7643 033833 fetch 3 ,mem_sp_iocap_local -0x7644 033834 istore 3 ,contw -0x7645 033836 call function_f3b -0x7646 033837 fetch 1 ,mem_master_sp_state -0x7647 033838 beq sp_stat_confirm_calc ,sp_confirm_calc_master -0x7648 033839 jam sp_stat_confirm_send ,mem_sp_state -0x7649 033840 jam sp_flag_commit ,mem_sp_flag -0x764a 033841 rtn -: 033842 sp_confirm_calc_master: -0x764b 033843 jam sp_stat_confirm_send ,mem_master_sp_state -0x764c 033844 jam sp_flag_commit ,mem_master_sp_flag -0x764d 033845 rtn -: 033847 sp_master_key_prarm_push: -0x764e 033848 arg mem_sp_prarm_stack ,contw -0x764f 033849 fetch 6 ,mem_plap -0x7650 033850 istore 6 ,contw -0x7651 033851 fetch 6 ,mem_lap -0x7652 033852 istore 6 ,contw -0x7653 033853 setarg mem_sp_random_local_end -0x7654 033854 istore 2 ,contw -0x7655 033855 setarg mem_sp_random_remote_end -0x7656 033856 istore 2 ,contw -0x7657 033857 branch sp_link_key_calc -: 033858 sp_link_key_prarm_push: -0x7658 033859 jam sp_stat_done ,mem_sp_state -0x7659 033860 arg mem_sp_prarm_stack ,contw -0x765a 033861 fetch 6 ,mem_lap -0x765b 033862 istore 6 ,contw -0x765c 033863 fetch 6 ,mem_plap -0x765d 033864 istore 6 ,contw -0x765e 033865 setarg mem_sp_random_remote_end -0x765f 033866 istore 2 ,contw -0x7660 033867 setarg mem_sp_random_local_end -0x7661 033868 istore 2 ,contw -: 033869 sp_link_key_calc: -0x7662 033871 arg mem_addr_value ,contw -0x7663 033872 fetch 6 ,mem_sp_prarm_stack -0x7664 033873 istore 6 ,contw -0x7665 033874 fetch 6 ,mem_sp_prarm_stack + 6 -0x7666 033875 istore 6 ,contw -0x7667 033877 call function_f2 -0x7668 033880 jam 1 ,mem_link_key_exists -0x7669 033881 arg mem_link_key ,contw -0x766a 033882 arg mem_sp_calc_result_high ,contr -0x766b 033883 call memcpy16 -0x766c 033884 branch generate_linkkey_continue -: 033887 sp_pubkey_calc: -0x766d 033888 bpatchx patch3c_7 ,mem_patch3c -0x766e 033889 fetch 1 ,mem_sp_local_key_invalid -0x766f 033890 rtnne sp_key_invalid -0x7670 033891 fetch 1 ,mem_sp_calc -0x7671 033892 rtnne sp_calc_standby -0x7672 033893 arg mem_sp_private_key ,contw -0x7673 033894 force 11 ,queue -0x7674 033895 call random_generator -0x7675 033896 random pdata -0x7676 033897 rshift pdata ,pdata -0x7677 033898 istore 2 ,contw -0x7678 033900 arg mem_k ,contw -0x7679 033901 arg mem_sp_private_key ,contr -0x767a 033902 call memcpy24 -0x767b 033904 arg mem_ax ,contw -0x767c 033905 arg mem_gx ,contr -0x767d 033906 call memcpy48 -0x767e 033908 arg mem_az ,contw -0x767f 033909 call bn_zero -0x7680 033910 jam 1 ,mem_az -0x7681 033912 call eckp_calc_init -0x7682 033913 jam sp_calc_pubkey ,mem_sp_calc -0x7683 033914 rtn -: 033916 sp_pubkey_generated: -0x7684 033917 arg mem_sp_pubkey_local ,contw -0x7685 033918 arg mem_bx ,contr -0x7686 033919 call memcpy48 -0x7687 033920 jam sp_key_valid ,mem_sp_local_key_invalid -0x7688 033921 jam sp_calc_standby ,mem_sp_calc -0x7689 033922 rtn -: 033924 sp_dhkey_calc: -0x768a 033925 bpatchx patch3d_0 ,mem_patch3d -0x768b 033926 fetch 1 ,mem_sp_dhkey_invalid -0x768c 033927 rtnne sp_key_invalid -0x768d 033928 fetch 1 ,mem_sp_calc -0x768e 033929 rtnne sp_calc_standby -0x768f 033931 arg mem_k ,contw -0x7690 033932 arg mem_sp_private_key ,contr -0x7691 033933 call memcpy24 -0x7692 033935 arg mem_ax ,contw -0x7693 033936 arg mem_sp_pubkey_remote ,contr -0x7694 033937 call memcpy48 -0x7695 033939 arg mem_az ,contw -0x7696 033940 call bn_zero -0x7697 033941 jam 1 ,mem_az -0x7698 033943 call eckp_calc_init -0x7699 033944 jam sp_calc_dhkey ,mem_sp_calc -0x769a 033945 rtn -: 033947 sp_dhkey_generated: -0x769b 033948 jam sp_flag_commit ,mem_sp_dh_ready -0x769c 033949 arg mem_sp_dhkey ,contw -0x769d 033950 arg mem_bx ,contr -0x769e 033951 call memcpy24 -0x769f 033952 jam sp_key_valid ,mem_sp_dhkey_invalid -0x76a0 033953 jam sp_calc_standby ,mem_sp_calc -0x76a1 033954 rtn -: 033956 random_generator: -0x76a2 033957 increase -1 ,queue -0x76a3 033958 nrtn positive -0x76a4 033959 random pdata -0x76a5 033960 istore 2 ,contw -0x76a6 033961 branch random_generator -: 033962 compare4: -0x76a7 033963 increase -1 ,queue -0x76a8 033964 nbranch compare4_success ,positive -0x76a9 033965 ifetch 4 ,rega -0x76aa 033966 copy pdata ,temp -0x76ab 033967 ifetch 4 ,regb -0x76ac 033968 iflip temp ,pdata -0x76ad 033969 nbranch compare4_failed ,zero -0x76ae 033970 increase 4 ,rega -0x76af 033971 increase 4 ,regb -0x76b0 033972 branch compare4 -: 033973 compare4_failed: -0x76b1 033974 disable true -0x76b2 033975 rtn -: 033976 compare4_success: -0x76b3 033977 enable true -0x76b4 033978 rtn -: 033985 simple_pairing_sequence: -0x76b5 033986 bpatchx patch3d_1 ,mem_patch3d -0x76b6 033987 fetch 1 ,mem_sp_flag -0x76b7 033988 rtn blank -0x76b8 033989 call lmo_fifo_check -0x76b9 033990 nrtn blank -0x76ba 033991 jam sp_flag_standby ,mem_sp_flag -0x76bb 033992 fetch 1 ,mem_sp_state -0x76bc 033993 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header -0x76bd 033994 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm -0x76be 033995 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number -0x76bf 033996 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check -0x76c0 033997 beq sp_stat_key_generate ,sp_generate_local_key -0x76c1 033998 beq sp_stat_commit_calc ,sp_calculate_commitment -0x76c2 033999 beq sp_stat_confirm_check ,sp_confirm_check -0x76c3 034000 beq sp_stat_confirm_calc ,sp_confirm_calc -0x76c4 034001 beq sp_stat_link_key_calc ,sp_link_key_prarm_push -0x76c5 034003 rtn -: 034005 master_simple_paring_sequence: -0x76c6 034006 bpatchx patch3d_2 ,mem_patch3d -0x76c7 034007 fetch 1 ,mem_master_sp_flag -0x76c8 034008 rtn blank -0x76c9 034009 call lmo_fifo_check -0x76ca 034010 nrtn blank -0x76cb 034011 jam sp_flag_standby ,mem_master_sp_flag -0x76cc 034012 fetch 1 ,mem_master_sp_state -0x76cd 034013 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get -0x76ce 034014 beq sp_master_stat_start_done ,sp_master_send_io_cap_send -0x76cf 034015 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header -0x76d0 034016 beq sp_stat_commit_calc ,master_sp_calculate_commitment -0x76d1 034017 beq sp_stat_commitment_compare ,sp_master_commitment_compare -0x76d2 034018 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number -0x76d3 034019 beq sp_stat_confirm_calc ,sp_confirm_calc -0x76d4 034020 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check -0x76d5 034021 beq sp_stat_confirm_check ,sp_confirm_check -0x76d6 034022 beq sp_state_end ,master_sp_sm_end -0x76d7 034023 rtn -: 034025 master_set_mem_master_sp_flag: -0x76d8 034026 jam sp_flag_commit ,mem_master_sp_flag -0x76d9 034027 rtn -: 034029 master_clear_mem_master_sp_flag: -0x76da 034030 jam sp_flag_standby ,mem_master_sp_flag -0x76db 034031 rtn -: 034032 sp_calc_sequence: -0x76dc 034033 bpatchx patch3d_3 ,mem_patch3d -0x76dd 034034 fetch 1 ,mem_ssp_enable -0x76de 034035 rtn blank -0x76df 034036 fetch 1 ,mem_sp_calc -0x76e0 034037 rtn blank -0x76e1 034038 increase 0x80 ,pdata -0x76e2 034039 store 1 ,mem_sp_calc -0x76e3 034040 rtnbit1 7 -0x76e4 034041 fetch 1 ,mem_ec_loopc -0x76e5 034042 branch sp_calc_sequence_done ,blank -0x76e6 034043 branch eckp_calc -: 034045 sp_calc_sequence_done: -0x76e7 034046 call ecunmapz -0x76e8 034047 fetch 1 ,mem_sp_calc -0x76e9 034048 beq sp_calc_pubkey ,sp_pubkey_generated -0x76ea 034049 beq sp_calc_dhkey ,sp_dhkey_generated -0x76eb 034050 rtn -: 034053 bn_testbit: -0x76ec 034054 and pdata ,7 ,queue -0x76ed 034055 rshift3 pdata ,pdata -0x76ee 034056 iadd contr ,contr -0x76ef 034057 ifetch 1 ,contr -0x76f0 034058 qisolate0 pdata -0x76f1 034059 rtn -: 034062 ec_copy: -0x76f2 034063 call memcpy24 -0x76f3 034064 call memcpy24 -0x76f4 034065 branch memcpy24 -: 034068 bn_eq_zero: -0x76f5 034069 ifetch 8 ,contr -0x76f6 034070 nrtn blank -0x76f7 034071 ifetch 8 ,contr -0x76f8 034072 nrtn blank -0x76f9 034073 ifetch 8 ,contr -0x76fa 034074 rtn -: 034079 bn_eq_0: -0x76fb 034080 ifetch 4 ,rega -0x76fc 034081 iforce temp -0x76fd 034082 ifetch 4 ,regb -0x76fe 034083 isub temp ,null -0x76ff 034084 nrtn zero -0x7700 034085 increase 4 ,rega -0x7701 034086 increase 4 ,regb -0x7702 034087 loop bn_eq_0 -0x7703 034088 rtn -: 034091 bn_bigeq: -0x7704 034092 force 6 ,loopcnt -0x7705 034093 increase 20 ,rega -0x7706 034094 increase 20 ,regb -: 034095 bn_bigeq_0: -0x7707 034096 ifetch 4 ,regb -0x7708 034097 iforce temp -0x7709 034098 ifetch 4 ,rega -0x770a 034099 isub temp ,pdata -0x770b 034100 nrtn positive -0x770c 034101 nrtn blank -0x770d 034102 increase -4 ,rega -0x770e 034103 increase -4 ,regb -0x770f 034104 loop bn_bigeq_0 -0x7710 034105 rtn -: 034107 bn_add: -0x7711 034108 force 6 ,loopcnt -0x7712 034109 force 0 ,regc -: 034110 bn_add_0: -0x7713 034111 ifetch 4 ,rega -0x7714 034112 iforce temp -0x7715 034113 ifetch 4 ,regb -0x7716 034114 iadd temp ,pdata -0x7717 034115 iadd regc ,pdata -0x7718 034116 istore 4 ,contw -0x7719 034117 isolate1 32 ,pdata -0x771a 034118 setflag true ,0 ,regc -0x771b 034119 increase 4 ,rega -0x771c 034120 increase 4 ,regb -0x771d 034121 loop bn_add_0 -0x771e 034122 rtn -: 034124 bn_sub: -0x771f 034125 force 6 ,loopcnt -0x7720 034126 force 0 ,regc -: 034127 bn_sub_0: -0x7721 034128 ifetch 4 ,regb -0x7722 034129 iforce temp -0x7723 034130 ifetch 4 ,rega -0x7724 034131 isub temp ,pdata -0x7725 034132 isub regc ,pdata -0x7726 034133 istore 4 ,contw -0x7727 034134 isolate1 32 ,pdata -0x7728 034135 setflag true ,0 ,regc -0x7729 034136 increase 4 ,rega -0x772a 034137 increase 4 ,regb -0x772b 034138 loop bn_sub_0 -0x772c 034139 rtn -: 034141 bn_rshift6: -0x772d 034142 force 6 ,loopcnt -0x772e 034143 increase 20 ,rega -: 034144 bn_rshift: -0x772f 034145 force 0 ,regc -: 034146 bn_rshift_0: -0x7730 034147 ifetch 4 ,rega -0x7731 034148 isolate1 0 ,pdata -0x7732 034149 setflag true ,1 ,regc -0x7733 034150 rshift pdata ,pdata -0x7734 034151 isolate1 0 ,regc -0x7735 034152 setflag true ,31 ,pdata -0x7736 034153 istore 4 ,rega -0x7737 034154 increase -4 ,rega -0x7738 034155 rshift regc ,regc -0x7739 034156 loop bn_rshift_0 -0x773a 034157 rtn -: 034159 bn_lshift: -0x773b 034160 force 6 ,loopcnt -0x773c 034161 force 0 ,regc -: 034162 bn_lshift_0: -0x773d 034163 ifetch 4 ,rega -0x773e 034164 isolate1 31 ,pdata -0x773f 034165 setflag true ,1 ,regc -0x7740 034166 lshift pdata ,pdata -0x7741 034167 isolate1 0 ,regc -0x7742 034168 setflag true ,0 ,pdata -0x7743 034169 istore 4 ,rega -0x7744 034170 increase 4 ,rega -0x7745 034171 rshift regc ,regc -0x7746 034172 loop bn_lshift_0 -0x7747 034173 rtn -: 034175 bn_lshiftmod: -0x7748 034176 call bn_lshift -: 034177 bn_lshiftmod_ismod: -0x7749 034178 isolate1 0 ,regc -0x774a 034179 branch bn_lshiftmod_0 ,true -0x774b 034180 arg mem_p ,regb -0x774c 034181 copy rega ,regc -0x774d 034182 increase -24 ,rega -0x774e 034183 call bn_bigeq -0x774f 034184 nrtn positive -0x7750 034185 copy regc ,rega -: 034186 bn_lshiftmod_0: -0x7751 034187 increase -24 ,rega -0x7752 034188 arg mem_p ,regb -0x7753 034189 copy rega ,contw -0x7754 034190 branch bn_sub -: 034193 bn_addmod: -0x7755 034194 call bn_add -0x7756 034195 copy contw ,rega -0x7757 034196 branch bn_lshiftmod_ismod -: 034198 bn_submod: -0x7758 034199 call bn_sub -0x7759 034200 isolate0 0 ,regc -0x775a 034201 rtn true -0x775b 034202 arg mem_p ,regb -0x775c 034203 add contw ,-24 ,rega -0x775d 034204 copy rega ,contw -0x775e 034205 branch bn_add -: 034208 bn_p192mod: -0x775f 034209 copy contw ,timeup -0x7760 034210 copy rega ,alarm -0x7761 034211 arg mem_tmp2 ,regb -0x7762 034212 copy regb ,contw -0x7763 034213 add rega ,24 ,contr -0x7764 034214 ifetch 8 ,contr -0x7765 034215 istore 8 ,contw -0x7766 034216 istore 8 ,contw -0x7767 034217 force 0 ,pdata -0x7768 034218 istore 8 ,contw -0x7769 034219 copy timeup ,contw -0x776a 034220 call bn_addmod -0x776b 034221 arg mem_tmp2 ,regb -0x776c 034222 copy regb ,contw -0x776d 034223 force 0 ,pdata -0x776e 034224 istore 8 ,contw -0x776f 034225 add alarm ,32 ,contr -0x7770 034226 ifetch 8 ,contr -0x7771 034227 istore 8 ,contw -0x7772 034228 istore 8 ,contw -0x7773 034229 copy timeup ,rega -0x7774 034230 copy rega ,contw -0x7775 034231 call bn_addmod -0x7776 034232 arg mem_tmp2 ,regb -0x7777 034233 copy regb ,contw -0x7778 034234 add alarm ,40 ,contr -0x7779 034235 ifetch 8 ,contr -0x777a 034236 istore 8 ,contw -0x777b 034237 istore 8 ,contw -0x777c 034238 istore 8 ,contw -0x777d 034239 copy timeup ,rega -0x777e 034240 copy rega ,contw -0x777f 034241 branch bn_addmod -: 034244 bn_load: -0x7780 034245 force 6 ,loopcnt -: 034246 bn_load_0: -0x7781 034247 ifetch 4 ,contr -0x7782 034248 iforce regext -0x7783 034249 increase 1 ,regext_index -0x7784 034250 loop bn_load_0 -0x7785 034251 rtn -: 034255 bn_mulmod: -0x7786 034256 copy contw ,timeup -0x7787 034257 arg mem_tmp1 ,contw -0x7788 034258 call bn_zero -0x7789 034259 arg mem_tmp1 ,contw -0x778a 034260 copy rega ,contr -0x778b 034261 force 0 ,regext_index -0x778c 034262 call bn_load -0x778d 034263 copy regb ,contr -0x778e 034264 call bn_load -0x778f 034265 force 0 ,regb -: 034266 bn_mulmod_1: -0x7790 034267 force 0 ,temp -0x7791 034268 force 6 ,regc -: 034269 bn_mulmod_0: -0x7792 034270 ifetch 4 ,contw -0x7793 034271 iforce rega -0x7794 034272 copy regb ,regext_index -0x7795 034273 deposit regext -0x7796 034274 copy regc ,regext_index -0x7797 034275 imul32 regext ,pdata -0x7798 034276 iadd rega ,pdata -0x7799 034277 iadd temp ,pdata -0x779a 034278 istore 4 ,contw -0x779b 034279 rshift32 pdata ,temp -0x779c 034280 increase 1 ,regc -0x779d 034281 compare 12 ,regc ,0xff -0x779e 034282 nbranch bn_mulmod_0 ,true -0x779f 034283 deposit temp -0x77a0 034284 istore 4 ,contw -0x77a1 034285 increase -24 ,contw -0x77a2 034286 increase 1 ,regb -0x77a3 034287 compare 6 ,regb ,0xff -0x77a4 034288 nbranch bn_mulmod_1 ,true -0x77a5 034289 arg mem_tmp1 ,rega -0x77a6 034290 copy timeup ,contw -0x77a7 034291 branch bn_p192mod -: 034294 bn_sqrmod: -0x77a8 034295 copy rega ,regb -0x77a9 034296 branch bn_mulmod -: 034298 bn_rshifteven: -0x77aa 034299 copy rega ,alarm -: 034300 bn_rshifteven_1: -0x77ab 034301 copy alarm ,rega -0x77ac 034302 ifetch 1 ,rega -0x77ad 034303 isolate1 0 ,pdata -0x77ae 034304 rtn true -0x77af 034305 call bn_rshift6 -0x77b0 034306 ifetch 1 ,regb -0x77b1 034307 isolate0 0 ,pdata -0x77b2 034308 branch bn_rshifteven_0 ,true -0x77b3 034309 arg mem_p ,rega -0x77b4 034310 copy regb ,contw -0x77b5 034311 call bn_add -0x77b6 034312 ifetch 1 ,regb -0x77b7 034313 iadd regc ,pdata -0x77b8 034314 istore 1 ,regb -0x77b9 034315 increase -24 ,regb -: 034316 bn_rshifteven_0: -0x77ba 034317 add regb ,24 ,rega -0x77bb 034318 force 7 ,loopcnt -0x77bc 034319 call bn_rshift -0x77bd 034320 branch bn_rshifteven_1 -: 034323 bn_invmod: -0x77be 034324 copy contw ,timeup -0x77bf 034325 arg mem_tmp0 ,contw -0x77c0 034326 call bn_zero -0x77c1 034327 force 0 ,pdata -0x77c2 034328 store 4 ,mem_tmp5 -0x77c3 034329 store 4 ,mem_t2 -0x77c4 034330 jam 1 ,mem_tmp0 -0x77c5 034331 arg mem_tmp1 ,contw -0x77c6 034332 call bn_zero -0x77c7 034333 arg mem_p ,contr -0x77c8 034334 arg mem_tmp2 ,contw -0x77c9 034335 call memcpy24 -0x77ca 034336 copy rega ,contr -0x77cb 034337 arg mem_tmp3 ,contw -0x77cc 034338 call memcpy24 -: 034339 bn_invmod_2: -0x77cd 034340 arg mem_tmp3 ,contr -0x77ce 034341 call bn_eq_zero -0x77cf 034342 branch bn_invmod_0 ,blank -0x77d0 034343 arg mem_tmp3 ,rega -0x77d1 034344 arg mem_tmp0 ,regb -0x77d2 034345 call bn_rshifteven -0x77d3 034347 arg mem_tmp2 ,rega -0x77d4 034348 arg mem_tmp1 ,regb -0x77d5 034349 call bn_rshifteven -0x77d6 034350 arg mem_tmp3 ,rega -0x77d7 034351 arg mem_tmp2 ,regb -0x77d8 034352 call bn_bigeq -0x77d9 034353 branch bn_invmod_1 ,positive -0x77da 034354 arg mem_tmp2 ,rega -0x77db 034355 arg mem_tmp3 ,regb -0x77dc 034356 copy rega ,contw -0x77dd 034357 call bn_sub -0x77de 034358 arg mem_tmp0 ,rega -0x77df 034359 arg mem_tmp1 ,regb -0x77e0 034360 copy regb ,contw -0x77e1 034361 call bn_add -0x77e2 034362 ifetch 1 ,rega -0x77e3 034363 iadd regc ,regc -0x77e4 034364 ifetch 1 ,regb -0x77e5 034365 iadd regc ,pdata -0x77e6 034366 istore 1 ,regb -0x77e7 034367 branch bn_invmod_2 -: 034368 bn_invmod_1: -0x77e8 034369 arg mem_tmp3 ,rega -0x77e9 034370 arg mem_tmp2 ,regb -0x77ea 034371 copy rega ,contw -0x77eb 034372 call bn_sub -0x77ec 034373 arg mem_tmp1 ,rega -0x77ed 034374 arg mem_tmp0 ,regb -0x77ee 034375 copy regb ,contw -0x77ef 034376 call bn_add -0x77f0 034377 ifetch 1 ,rega -0x77f1 034378 iadd regc ,regc -0x77f2 034379 ifetch 1 ,regb -0x77f3 034380 iadd regc ,pdata -0x77f4 034381 istore 1 ,regb -0x77f5 034382 branch bn_invmod_2 -: 034383 bn_invmod_0: -0x77f6 034384 arg mem_tmp0 ,contw -0x77f7 034385 call bn_zero -0x77f8 034386 fetch 1 ,mem_tmp5 -0x77f9 034387 store 1 ,mem_tmp0 -0x77fa 034388 store 1 ,mem_tmp0a -0x77fb 034389 arg mem_tmp0 ,rega -0x77fc 034390 arg mem_tmp1 ,regb -0x77fd 034391 copy regb ,contw -0x77fe 034392 call bn_addmod -0x77ff 034393 arg mem_p ,rega -0x7800 034394 arg mem_tmp1 ,regb -0x7801 034395 copy timeup ,contw -0x7802 034396 branch bn_submod -: 034401 ecdbl: -0x7803 034402 arg mem_cz ,rega -0x7804 034403 arg mem_t2 ,contw -0x7805 034404 call bn_sqrmod -0x7806 034405 arg mem_t2 ,rega -0x7807 034406 arg mem_t3 ,contw -0x7808 034407 call bn_sqrmod -0x7809 034408 arg mem_a ,rega -0x780a 034409 arg mem_t3 ,regb -0x780b 034410 arg mem_t3 ,contw -0x780c 034411 call bn_mulmod -0x780d 034412 arg mem_cx ,rega -0x780e 034413 arg mem_t2 ,contw -0x780f 034414 call bn_sqrmod -0x7810 034415 arg mem_t2 ,contr -0x7811 034416 arg mem_t1 ,contw -0x7812 034417 call memcpy24 -0x7813 034418 arg mem_t1 ,rega -0x7814 034419 call bn_lshiftmod -0x7815 034420 arg mem_t2 ,rega -0x7816 034421 arg mem_t1 ,regb -0x7817 034422 arg mem_t2 ,contw -0x7818 034423 call bn_addmod -0x7819 034424 arg mem_t2 ,rega -0x781a 034425 arg mem_t3 ,regb -0x781b 034426 arg mem_t2 ,contw -0x781c 034427 call bn_addmod -0x781d 034428 arg mem_cx ,contr -0x781e 034429 arg mem_t1 ,contw -0x781f 034430 call memcpy24 -0x7820 034431 arg mem_cy ,rega -0x7821 034432 arg mem_t3 ,contw -0x7822 034433 call bn_sqrmod -0x7823 034434 arg mem_t1 ,rega -0x7824 034435 call bn_lshiftmod -0x7825 034436 arg mem_t1 ,rega -0x7826 034437 call bn_lshiftmod -0x7827 034438 arg mem_t1 ,rega -0x7828 034439 arg mem_t3 ,regb -0x7829 034440 arg mem_t1 ,contw -0x782a 034441 call bn_mulmod -0x782b 034442 arg mem_t3 ,rega -0x782c 034443 arg mem_t0 ,contw -0x782d 034444 call bn_sqrmod -0x782e 034445 arg mem_t0 ,rega -0x782f 034446 call bn_lshiftmod -0x7830 034447 arg mem_t0 ,rega -0x7831 034448 call bn_lshiftmod -0x7832 034449 arg mem_t0 ,rega -0x7833 034450 call bn_lshiftmod -0x7834 034451 arg mem_cy ,contr -0x7835 034452 arg mem_t3 ,contw -0x7836 034453 call memcpy24 -0x7837 034454 arg mem_t3 ,rega -0x7838 034455 call bn_lshiftmod -0x7839 034456 arg mem_t3 ,rega -0x783a 034457 arg mem_cz ,regb -0x783b 034458 arg mem_cz ,contw -0x783c 034459 call bn_mulmod -0x783d 034460 arg mem_t2 ,rega -0x783e 034461 arg mem_t3 ,contw -0x783f 034462 call bn_sqrmod -0x7840 034463 arg mem_t3 ,rega -0x7841 034464 arg mem_t1 ,regb -0x7842 034465 arg mem_t3 ,contw -0x7843 034466 call bn_submod -0x7844 034467 arg mem_t3 ,rega -0x7845 034468 arg mem_t1 ,regb -0x7846 034469 arg mem_cx ,contw -0x7847 034470 call bn_submod -0x7848 034471 arg mem_t1 ,rega -0x7849 034472 arg mem_cx ,regb -0x784a 034473 arg mem_t3 ,contw -0x784b 034474 call bn_submod -0x784c 034475 arg mem_t3 ,rega -0x784d 034476 arg mem_t2 ,regb -0x784e 034477 arg mem_t3 ,contw -0x784f 034478 call bn_mulmod -0x7850 034479 arg mem_t3 ,rega -0x7851 034480 arg mem_t0 ,regb -0x7852 034481 arg mem_cy ,contw -0x7853 034482 branch bn_submod -: 034486 ecadd: -0x7854 034487 arg mem_az ,rega -0x7855 034488 arg mem_t7 ,contw -0x7856 034489 call bn_sqrmod -0x7857 034490 arg mem_cx ,rega -0x7858 034491 arg mem_t7 ,regb -0x7859 034492 arg mem_t0 ,contw -0x785a 034493 call bn_mulmod -0x785b 034494 arg mem_az ,rega -0x785c 034495 arg mem_t7 ,regb -0x785d 034496 arg mem_t7 ,contw -0x785e 034497 call bn_mulmod -0x785f 034498 arg mem_cy ,rega -0x7860 034499 arg mem_t7 ,regb -0x7861 034500 arg mem_t1 ,contw -0x7862 034501 call bn_mulmod -0x7863 034502 arg mem_cz ,rega -0x7864 034503 arg mem_t7 ,contw -0x7865 034504 call bn_sqrmod -0x7866 034505 arg mem_ax ,rega -0x7867 034506 arg mem_t7 ,regb -0x7868 034507 arg mem_t2 ,contw -0x7869 034508 call bn_mulmod -0x786a 034509 arg mem_cz ,rega -0x786b 034510 arg mem_t7 ,regb -0x786c 034511 arg mem_t7 ,contw -0x786d 034512 call bn_mulmod -0x786e 034513 arg mem_ay ,rega -0x786f 034514 arg mem_t7 ,regb -0x7870 034515 arg mem_t3 ,contw -0x7871 034516 call bn_mulmod -0x7872 034517 arg mem_t0 ,rega -0x7873 034518 arg mem_t2 ,regb -0x7874 034519 arg mem_t7 ,contw -0x7875 034520 call bn_submod -0x7876 034521 arg mem_t0 ,rega -0x7877 034522 arg mem_t2 ,regb -0x7878 034523 arg mem_t0 ,contw -0x7879 034524 call bn_addmod -0x787a 034525 arg mem_t1 ,rega -0x787b 034526 arg mem_t3 ,regb -0x787c 034527 arg mem_t2 ,contw -0x787d 034528 call bn_submod -0x787e 034529 arg mem_t1 ,rega -0x787f 034530 arg mem_t3 ,regb -0x7880 034531 arg mem_t1 ,contw -0x7881 034532 call bn_addmod -0x7882 034533 arg mem_t1 ,rega -0x7883 034534 arg mem_t7 ,regb -0x7884 034535 arg mem_t1 ,contw -0x7885 034536 call bn_mulmod -0x7886 034537 arg mem_cz ,rega -0x7887 034538 arg mem_az ,regb -0x7888 034539 arg mem_t3 ,contw -0x7889 034540 call bn_mulmod -0x788a 034541 arg mem_t3 ,rega -0x788b 034542 arg mem_t7 ,regb -0x788c 034543 arg mem_cz ,contw -0x788d 034544 call bn_mulmod -0x788e 034545 arg mem_t7 ,rega -0x788f 034546 arg mem_t7 ,contw -0x7890 034547 call bn_sqrmod -0x7891 034548 arg mem_t7 ,rega -0x7892 034549 arg mem_t0 ,regb -0x7893 034550 arg mem_t3 ,contw -0x7894 034551 call bn_mulmod -0x7895 034552 arg mem_t7 ,rega -0x7896 034553 arg mem_t1 ,regb -0x7897 034554 arg mem_t1 ,contw -0x7898 034555 call bn_mulmod -0x7899 034556 arg mem_t2 ,rega -0x789a 034557 arg mem_cx ,contw -0x789b 034558 call bn_sqrmod -0x789c 034559 arg mem_cx ,rega -0x789d 034560 arg mem_t3 ,regb -0x789e 034561 arg mem_cx ,contw -0x789f 034562 call bn_submod -0x78a0 034563 arg mem_cx ,contr -0x78a1 034564 arg mem_t7 ,contw -0x78a2 034565 call memcpy24 -0x78a3 034566 arg mem_t7 ,rega -0x78a4 034567 call bn_lshiftmod -0x78a5 034568 arg mem_t3 ,rega -0x78a6 034569 arg mem_t7 ,regb -0x78a7 034570 arg mem_t3 ,contw -0x78a8 034571 call bn_submod -0x78a9 034572 arg mem_t3 ,rega -0x78aa 034573 arg mem_t2 ,regb -0x78ab 034574 arg mem_t2 ,contw -0x78ac 034575 call bn_mulmod -0x78ad 034576 arg mem_t2 ,rega -0x78ae 034577 arg mem_t1 ,regb -0x78af 034578 arg mem_cy ,contw -0x78b0 034579 call bn_submod -0x78b1 034580 arg mem_cy ,rega -0x78b2 034581 arg mem_p ,regb -0x78b3 034582 arg mem_cy ,contw -0x78b4 034583 force 0 ,regc -0x78b5 034584 fetch 1 ,mem_cy -0x78b6 034585 isolate1 0 ,pdata -0x78b7 034586 call bn_add ,true -0x78b8 034587 copy regc ,alarm -0x78b9 034588 arg mem_cy ,rega -0x78ba 034589 call bn_rshift6 -0x78bb 034590 fetch 1 ,mem_cy5 -0x78bc 034591 isolate1 0 ,alarm -0x78bd 034592 setflag true ,7 ,pdata -0x78be 034593 store 1 ,mem_cy5 -0x78bf 034594 rtn -: 034598 eckp_0: -0x78c0 034599 fetch 1 ,mem_ec_loopc -0x78c1 034600 increase -1 ,pdata -0x78c2 034601 nrtn positive -0x78c3 034602 store 1 ,mem_ec_loopc -0x78c4 034603 fetch 1 ,mem_ec_infinite -0x78c5 034604 call ecdbl ,blank -0x78c6 034605 fetch 1 ,mem_ec_loopc -0x78c7 034606 arg mem_k ,contr -0x78c8 034607 call bn_testbit -0x78c9 034608 branch eckp_0 ,true -0x78ca 034609 fetch 1 ,mem_ec_infinite -0x78cb 034610 nbranch eckp_1 ,blank -0x78cc 034611 call ecadd -0x78cd 034612 branch eckp_0 -: 034613 eckp_1: -0x78ce 034614 jam 0 ,mem_ec_infinite -0x78cf 034615 arg mem_ax ,contr -0x78d0 034616 arg mem_cx ,contw -0x78d1 034617 call ec_copy -0x78d2 034618 branch eckp_0 -: 034621 ecunmapz: -0x78d3 034622 arg mem_cz ,rega -0x78d4 034623 arg mem_t3 ,contw -0x78d5 034624 call bn_invmod -0x78d6 034625 arg mem_t3 ,rega -0x78d7 034626 arg mem_t1 ,contw -0x78d8 034627 call bn_sqrmod -0x78d9 034628 arg mem_cx ,rega -0x78da 034629 arg mem_t1 ,regb -0x78db 034630 arg mem_bx ,contw -0x78dc 034631 call bn_mulmod -0x78dd 034632 arg mem_t3 ,rega -0x78de 034633 arg mem_t1 ,regb -0x78df 034634 arg mem_t2 ,contw -0x78e0 034635 call bn_mulmod -0x78e1 034636 arg mem_cy ,rega -0x78e2 034637 arg mem_t2 ,regb -0x78e3 034638 arg mem_by ,contw -0x78e4 034639 branch bn_mulmod -: 034643 sha_endian_swap2: -0x78e5 034644 ifetch 4 ,contr -0x78e6 034645 force 4 ,rega -0x78e7 034646 increase 3 ,contw -: 034647 sha_endian_loop: -0x78e8 034648 istore 1 ,contw -0x78e9 034649 rshift8 pdata ,pdata -0x78ea 034650 increase -2 ,contw -0x78eb 034651 increase -1 ,rega -0x78ec 034652 nbranch sha_endian_loop ,zero -0x78ed 034653 increase 5 ,contw -0x78ee 034654 loop sha_endian_swap2 -0x78ef 034655 rtn -: 034658 sha_getw: -0x78f0 034659 lshift2 queue ,pdata -0x78f1 034660 iadd timeup ,contr -0x78f2 034661 ifetch 4 ,contr -0x78f3 034662 rtn -: 034664 sha_r: -0x78f4 034665 force 16 ,alarm -0x78f5 034666 arg memdat ,timeup -: 034667 sha_r_loop: -0x78f6 034668 add alarm ,-7 ,queue -0x78f7 034669 call sha_getw -0x78f8 034670 iforce temp -0x78f9 034671 add alarm ,-16 ,queue -0x78fa 034672 call sha_getw -0x78fb 034673 iadd temp ,temp -0x78fc 034674 add alarm ,-2 ,queue -0x78fd 034675 call sha_getw -0x78fe 034676 shasx pdata ,1 ,pdata -0x78ff 034677 iadd temp ,temp -0x7900 034678 add alarm ,-15 ,queue -0x7901 034679 call sha_getw -0x7902 034680 shasx pdata ,0 ,pdata -0x7903 034681 iadd temp ,temp -0x7904 034682 lshift2 alarm ,pdata -0x7905 034683 iadd timeup ,contw -0x7906 034684 istoret 4 ,contw -0x7907 034685 increase 1 ,alarm -0x7908 034686 compare 64 ,alarm ,0xff -0x7909 034687 nbranch sha_r_loop ,true -0x790a 034688 rtn -: 034691 sha_init: -0x790b 034692 arg memh0 ,contr -0x790c 034693 force 7 ,regext_index -: 034694 sha_init_0: -0x790d 034695 ifetch 4 ,contr -0x790e 034696 iforce regext -0x790f 034697 increase -1 ,regext_index -0x7910 034698 branch sha_init_0 ,positive -0x7911 034699 rtn -: 034701 sha: -0x7912 034702 bpatchx patch3d_4 ,mem_patch3d -0x7913 034703 call sha_r -0x7914 034704 arg memahbak ,contw -0x7915 034705 force 0 ,regext_index -: 034706 sha_0: -0x7916 034707 deposit regext -0x7917 034708 istore 4 ,contw -0x7918 034709 increase 1 ,regext_index -0x7919 034710 compare 8 ,regext_index ,0xff -0x791a 034711 nbranch sha_0 ,true -0x791b 034712 call enable_authrom -0x791c 034713 arg memk ,timeup -0x791d 034714 arg memdat ,alarm -0x791e 034715 force 64 ,loopcnt -: 034716 sha_loop: -0x791f 034717 ifetcht 4 ,alarm -0x7920 034718 ifetch 4 ,timeup -0x7921 034719 increase 4 ,timeup -0x7922 034720 increase 4 ,alarm -0x7923 034721 iadd temp ,pdata -0x7924 034722 force 7 ,regext_index -0x7925 034723 iadd regext ,temp -0x7926 034724 force 4 ,regext_index -0x7927 034725 shasx regext ,3 ,pdata -0x7928 034726 iadd temp ,temp -0x7929 034727 force 5 ,regext_index -0x792a 034728 deposit regext -0x792b 034729 force 6 ,regext_index -0x792c 034730 ixor regext ,pdata -0x792d 034731 force 4 ,regext_index -0x792e 034732 iand regext ,pdata -0x792f 034733 force 6 ,regext_index -0x7930 034734 ixor regext ,pdata -0x7931 034735 iadd temp ,temp -0x7932 034736 force 7 ,regext_index -0x7933 034737 copy temp ,regext -0x7934 034738 force 3 ,regext_index -0x7935 034739 deposit regext -0x7936 034740 iadd temp ,regext -0x7937 034741 force 0 ,regext_index -0x7938 034742 deposit regext -0x7939 034743 force 1 ,regext_index -0x793a 034744 iand regext ,temp -0x793b 034745 ior regext ,pdata -0x793c 034746 force 2 ,regext_index -0x793d 034747 iand regext ,pdata -0x793e 034748 ior temp ,temp -0x793f 034749 force 0 ,regext_index -0x7940 034750 shasx regext ,2 ,pdata -0x7941 034751 iadd temp ,pdata -0x7942 034752 force 7 ,regext_index -0x7943 034753 iadd regext ,regext -0x7944 034754 regexrot -0x7945 034755 loop sha_loop -0x7946 034756 arg memahbak ,contr -0x7947 034757 force 0 ,regext_index -: 034758 sha_1: -0x7948 034759 ifetch 4 ,contr -0x7949 034760 iadd regext ,regext -0x794a 034761 increase 1 ,regext_index -0x794b 034762 compare 8 ,regext_index ,0xff -0x794c 034763 nbranch sha_1 ,true -0x794d 034764 branch disable_authrom -: 034767 sha_result: -0x794e 034768 arg memresult ,contw -0x794f 034769 force 7 ,regext_index -: 034770 sha_regext_save: -0x7950 034771 deposit regext -0x7951 034772 istore 4 ,contw -0x7952 034773 increase -1 ,regext_index -0x7953 034774 branch sha_regext_save ,positive -0x7954 034775 rtn -: 034777 pad_xor: -0x7955 034779 arg memdat ,contw -0x7956 034780 increase -4 ,contr -0x7957 034781 sub loopcnt ,16 ,rega -: 034782 pad_xor_0: -0x7958 034783 ifetch 4 ,contr -0x7959 034784 ixor temp ,pdata -0x795a 034785 istore 4 ,contw -0x795b 034786 increase -8 ,contr -0x795c 034787 loop pad_xor_0 -0x795d 034788 copy rega ,loopcnt -0x795e 034789 deposit temp -: 034790 pad_xor_1: -0x795f 034791 istore 4 ,contw -0x7960 034792 loop pad_xor_1 -0x7961 034793 rtn -: 034795 g_noninit_number_confirm: -0x7962 034796 call g_noninit0 -0x7963 034797 call sha_result -0x7964 034798 branch g_common0 -: 034800 g_noninit: -0x7965 034801 call g_noninit0 -0x7966 034802 branch g_common0 -: 034804 g_noninit0: -0x7967 034805 arg mem_sp_pubkey_remote_x_end ,contr -0x7968 034806 arg memdat ,contw -0x7969 034807 force 6 ,loopcnt -0x796a 034808 call memcpy_dword_swap -0x796b 034809 arg mem_sp_pubkey_local_x_end ,contr -0x796c 034810 force 6 ,loopcnt -0x796d 034811 call memcpy_dword_swap -0x796e 034812 arg mem_sp_random_remote_end ,contr -0x796f 034813 call memcpy_dword_swap4 -0x7970 034814 call sha_init -0x7971 034815 call sha -0x7972 034816 arg mem_sp_random_local_end ,contr -0x7973 034817 arg memdat ,contw -0x7974 034818 branch g_common -: 034820 g_init: -0x7975 034821 arg mem_sp_pubkey_local_x_end ,contr -0x7976 034822 arg memdat ,contw -0x7977 034823 force 6 ,loopcnt -0x7978 034824 call memcpy_dword_swap -0x7979 034825 arg mem_sp_pubkey_remote_x_end ,contr -0x797a 034826 force 6 ,loopcnt -0x797b 034827 call memcpy_dword_swap -0x797c 034828 arg mem_sp_random_local_end ,contr -0x797d 034829 call memcpy_dword_swap4 -0x797e 034830 call sha_init -0x797f 034831 call sha -0x7980 034832 arg mem_sp_random_remote_end ,contr -0x7981 034833 arg memdat ,contw -0x7982 034834 call g_common -0x7983 034835 branch g_common0 -: 034837 g_common: -0x7984 034838 call memcpy_dword_swap4 -0x7985 034839 setarg 0x800000 -0x7986 034840 lshift8 pdata ,pdata -0x7987 034841 istore 4 ,contw -0x7988 034842 force 5 ,loopcnt -0x7989 034843 call memset0 -0x798a 034844 setarg 640 -0x798b 034845 istore 4 ,contw -0x798c 034846 branch sha -: 034847 g_common0: -0x798d 034848 fetch 4 ,memresult -0x798e 034850 arg 1000 ,rega -0x798f 034851 idiv rega -0x7990 034852 call wait_div_end -0x7991 034853 remainder pdata -0x7992 034854 store 4 ,mem_gkey -0x7993 034855 quotient pdata -0x7994 034856 arg 1000 ,rega -0x7995 034857 idiv rega -0x7996 034858 call wait_div_end -0x7997 034859 remainder pdata -0x7998 034860 arg 1000 ,rega -0x7999 034861 imul32 rega ,pdata -0x799a 034862 fetcht 4 ,mem_gkey -0x799b 034863 iadd temp ,pdata -0x799c 034864 store 4 ,mem_gkey -0x799d 034865 rtn -: 034867 function_f1_no_key: -0x799e 034868 jam 0 ,mem_passkey_1bit -0x799f 034869 branch function_f1_common -: 034871 function_f1: -0x79a0 034872 fetch 1 ,mem_ssp_mode_flag -0x79a1 034873 bne ssp_mode_passkey_entry_flag ,function_f1_no_key -: 034874 function_f1_common: -0x79a2 034875 bpatchx patch3d_5 ,mem_patch3d -0x79a3 034876 setarg 0x363636 -0x79a4 034877 lshift8 pdata ,temp -0x79a5 034878 or_into 0x36 ,temp -0x79a6 034879 fetch 2 ,mem_sp_prarm_stack -0x79a7 034880 copy pdata ,contr -0x79a8 034881 force 4 ,loopcnt -0x79a9 034882 call pad_xor -0x79aa 034883 call sha_init -0x79ab 034884 call sha -0x79ac 034885 fetch 2 ,mem_sp_prarm_stack + 2 -0x79ad 034886 copy pdata ,contr -0x79ae 034887 arg memdat ,contw -0x79af 034888 force 6 ,loopcnt -0x79b0 034889 call memcpy_dword_swap -0x79b1 034890 fetch 2 ,mem_sp_prarm_stack + 4 -0x79b2 034891 copy pdata ,contr -0x79b3 034892 force 6 ,loopcnt -0x79b4 034893 call memcpy_dword_swap -0x79b5 034894 setarg 0x800000 -0x79b6 034895 istore 3 ,contw -0x79b7 034897 fetch 1 ,mem_passkey_1bit -0x79b8 034899 istore 1 ,contw -0x79b9 034900 force 0 ,pdata -0x79ba 034901 istore 8 ,contw -0x79bb 034902 setarg 0x0388 -0x79bc 034903 istore 4 ,contw -0x79bd 034904 call sha -0x79be 034905 call sha_result -0x79bf 034906 arg memresult ,contr -0x79c0 034907 arg memahsave ,contw -0x79c1 034908 call memcpy32 -0x79c2 034910 setarg 0x5c5c5c -0x79c3 034911 lshift8 pdata ,temp -0x79c4 034912 or_into 0x5c ,temp -0x79c5 034913 fetch 2 ,mem_sp_prarm_stack -0x79c6 034914 copy pdata ,contr -0x79c7 034915 force 4 ,loopcnt -0x79c8 034916 call pad_xor -0x79c9 034917 call sha_init -0x79ca 034918 call sha -0x79cb 034919 arg memahsave_end ,contr -0x79cc 034920 arg memdat ,contw -0x79cd 034921 force 8 ,loopcnt -0x79ce 034922 call memcpy_dword_swap -0x79cf 034923 setarg 0x800000 -0x79d0 034924 lshift8 pdata ,pdata -0x79d1 034925 istore 4 ,contw -0x79d2 034926 call bn_zero -0x79d3 034927 setarg 0x0300 -0x79d4 034928 istore 4 ,contw -0x79d5 034929 call sha -0x79d6 034930 branch sha_result -: 034933 function_f2: -0x79d7 034934 setarg 0x363636 -0x79d8 034935 lshift8 pdata ,temp -0x79d9 034936 or_into 0x36 ,temp -0x79da 034937 arg mem_sp_dhkey_end ,contr -0x79db 034938 force 6 ,loopcnt -0x79dc 034939 call pad_xor -0x79dd 034940 call sha_init -0x79de 034941 call sha -0x79df 034942 fetch 2 ,mem_sp_prarm_stack + 12 -0x79e0 034943 copy pdata ,contr -0x79e1 034944 arg memdat ,contw -0x79e2 034945 call memcpy_dword_swap4 -0x79e3 034946 fetch 2 ,mem_sp_prarm_stack + 14 -0x79e4 034947 copy pdata ,contr -0x79e5 034948 call memcpy_dword_swap4 -0x79e6 034950 setarg 0x62746c -0x79e7 034951 lshift8 pdata ,pdata -0x79e8 034952 or_into 0x6b ,pdata -0x79e9 034953 istore 4 ,contw -0x79ea 034954 arg mem_addr_value_end ,contr -0x79eb 034955 force 3 ,loopcnt -0x79ec 034956 call memcpy_dword_swap -0x79ed 034958 setarg 0x800000 -0x79ee 034959 lshift8 pdata ,pdata -0x79ef 034960 istore 4 ,contw -0x79f0 034961 force 0 ,pdata -0x79f1 034962 istore 8 ,contw -0x79f2 034963 setarg 0x0380 -0x79f3 034964 istore 4 ,contw -0x79f4 034965 call sha -0x79f5 034967 call sha_result -0x79f6 034968 arg memresult ,contr -0x79f7 034969 arg memahsave ,contw -0x79f8 034970 call memcpy32 -0x79f9 034972 setarg 0x5c5c5c -0x79fa 034973 lshift8 pdata ,temp -0x79fb 034974 or_into 0x5c ,temp -0x79fc 034975 arg mem_sp_dhkey_end ,contr -0x79fd 034976 force 6 ,loopcnt -0x79fe 034977 call pad_xor -0x79ff 034978 call sha_init -0x7a00 034979 call sha -0x7a01 034980 arg memahsave_end ,contr -0x7a02 034981 arg memdat ,contw -0x7a03 034982 force 8 ,loopcnt -0x7a04 034983 call memcpy_dword_swap -0x7a05 034984 setarg 0x800000 -0x7a06 034985 lshift8 pdata ,pdata -0x7a07 034986 istore 4 ,contw -0x7a08 034987 call bn_zero -0x7a09 034988 setarg 0x0300 -0x7a0a 034989 istore 4 ,contw -0x7a0b 034990 call sha -0x7a0c 034991 branch sha_result -: 034994 function_f3a: -0x7a0d 034995 fetch 1 ,mem_ssp_mode_flag -0x7a0e 034996 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin -: 034997 function_f3a_common: -0x7a0f 034998 bpatchx patch3d_6 ,mem_patch3d -0x7a10 034999 setarg 0x363636 -0x7a11 035000 lshift8 pdata ,temp -0x7a12 035001 or_into 0x36 ,temp -0x7a13 035002 arg mem_sp_dhkey_end ,contr -0x7a14 035003 force 6 ,loopcnt -0x7a15 035004 call pad_xor -0x7a16 035005 call sha_init -0x7a17 035006 call sha -0x7a18 035007 arg mem_sp_random_remote_end ,contr -0x7a19 035008 arg memdat ,contw -0x7a1a 035009 call memcpy_dword_swap4 -0x7a1b 035010 arg mem_sp_random_local_end ,contr -0x7a1c 035011 call memcpy_dword_swap4 -0x7a1d 035012 branch function_f3_common -: 035014 function_f3a_no_pin: -0x7a1e 035015 setarg 0 -0x7a1f 035016 store 4 ,mem_pin -0x7a20 035017 branch function_f3a_common -: 035019 function_f3b_no_pin: -0x7a21 035020 setarg 0 -0x7a22 035021 store 4 ,mem_pin -0x7a23 035022 branch function_f3b_common -: 035025 function_f3b: -0x7a24 035026 fetch 1 ,mem_ssp_mode_flag -0x7a25 035027 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin -: 035028 function_f3b_common: -0x7a26 035029 setarg 0x363636 -0x7a27 035030 lshift8 pdata ,temp -0x7a28 035031 or_into 0x36 ,temp -0x7a29 035032 arg mem_sp_dhkey_end ,contr -0x7a2a 035033 force 6 ,loopcnt -0x7a2b 035034 call pad_xor -0x7a2c 035035 call sha_init -0x7a2d 035036 call sha -0x7a2e 035038 arg mem_sp_random_local_end ,contr -0x7a2f 035039 arg memdat ,contw -0x7a30 035040 call memcpy_dword_swap4 -0x7a31 035041 arg mem_sp_random_remote_end ,contr -0x7a32 035042 call memcpy_dword_swap4 -: 035043 function_f3_common: -0x7a33 035044 setarg 0x0 -0x7a34 035045 istore 8 ,contw -0x7a35 035046 istore 4 ,contw -0x7a36 035047 fetch 4 ,mem_pin -0x7a37 035048 istore 4 ,contw -0x7a38 035050 copy contw ,temp -0x7a39 035051 jam 0x80 ,mem_addr_padding -0x7a3a 035052 copy temp ,contw -0x7a3b 035053 arg mem_addr_iocap_end ,contr -0x7a3c 035054 call memcpy_dword_swap4 -0x7a3d 035056 call sha -0x7a3e 035058 arg memdat ,contw -0x7a3f 035059 force 7 ,loopcnt -0x7a40 035060 call memset0 -0x7a41 035061 istore 4 ,contw -0x7a42 035062 setarg 0x03F8 -0x7a43 035063 istore 4 ,contw -0x7a44 035064 call sha -0x7a45 035065 call sha_result -0x7a46 035067 arg memresult ,contr -0x7a47 035068 arg memahsave ,contw -0x7a48 035069 call memcpy32 -0x7a49 035071 setarg 0x5c5c5c -0x7a4a 035072 lshift8 pdata ,temp -0x7a4b 035073 or_into 0x5c ,temp -0x7a4c 035074 arg mem_sp_dhkey_end ,contr -0x7a4d 035075 force 6 ,loopcnt -0x7a4e 035076 call pad_xor -0x7a4f 035077 call sha_init -0x7a50 035078 call sha -0x7a51 035079 arg memahsave_end ,contr -0x7a52 035080 arg memdat ,contw -0x7a53 035081 force 8 ,loopcnt -0x7a54 035082 call memcpy_dword_swap -0x7a55 035083 setarg 0x800000 -0x7a56 035084 lshift8 pdata ,pdata -0x7a57 035085 istore 4 ,contw -0x7a58 035086 call bn_zero -0x7a59 035087 setarg 0x0300 -0x7a5a 035088 istore 4 ,contw -0x7a5b 035089 call sha -0x7a5c 035090 branch sha_result -: 035097 eckp_calc_init: -0x7a5d 035098 jam 192 ,mem_ec_loopc -: 035099 eckp_calc_init_1: -0x7a5e 035100 fetch 1 ,mem_ec_loopc -0x7a5f 035101 rtn blank -0x7a60 035102 increase -1 ,pdata -0x7a61 035103 store 1 ,mem_ec_loopc -0x7a62 035104 arg mem_k ,contr -0x7a63 035105 call bn_testbit -0x7a64 035106 branch eckp_calc_init_1 ,true -0x7a65 035107 arg mem_ax ,contr -0x7a66 035108 arg mem_cx ,contw -0x7a67 035109 branch ec_copy -: 035111 eckp_calc: -0x7a68 035112 call ecdbl -0x7a69 035113 fetch 1 ,mem_ec_loopc -0x7a6a 035114 increase -1 ,pdata -0x7a6b 035115 store 1 ,mem_ec_loopc -0x7a6c 035116 arg mem_k ,contr -0x7a6d 035117 call bn_testbit -0x7a6e 035118 rtn true -0x7a6f 035119 branch ecadd -: 035121 memcpy_dword_swap4: -0x7a70 035122 force 4 ,loopcnt -: 035123 memcpy_dword_swap: -0x7a71 035124 increase -4 ,contr -: 035125 memcpy_dword_swap_loop: -0x7a72 035126 ifetch 4 ,contr -0x7a73 035127 istore 4 ,contw -0x7a74 035128 increase -8 ,contr -0x7a75 035129 loop memcpy_dword_swap_loop -0x7a76 035130 rtn -: 035135 sp_initialize_256: -0x7a77 035136 bpatchx patch3d_7 ,mem_patch3d -0x7a78 035137 fetch 1 ,mem_le_secure_connect_enable -0x7a79 035138 branch le_secure_connection_disable ,blank -0x7a7a 035139 call le_secure_connection_enable -0x7a7b 035140 call sp_clear_flags -0x7a7c 035142 branch sp_pubkey_calc_256 -: 035147 sp_pubkey_calc_256: -0x7a7d 035148 fetch 1 ,mem_le_sc_local_key_invalid -0x7a7e 035149 rtnne sp_key_invalid -0x7a7f 035150 fetch 1 ,mem_le_sc_calc -0x7a80 035151 rtnne sp_calc_standby -0x7a81 035153 arg mem_le_private_key_256 ,contw -0x7a82 035154 force 15 ,queue -0x7a83 035155 call random_generator -0x7a84 035156 random pdata -0x7a85 035157 rshift pdata ,pdata -0x7a86 035158 istore 2 ,contw -0x7a87 035160 arg mem_k_256 ,contw -0x7a88 035161 arg mem_le_private_key_256 ,contr -0x7a89 035162 call memcpy32 -0x7a8a 035164 arg mem_ax_256 ,contw -0x7a8b 035165 arg mem_gx_256 ,contr -0x7a8c 035166 call memcpy64 -0x7a8d 035168 arg mem_az_256 ,contw -0x7a8e 035169 call clear_mem_256 -0x7a8f 035170 jam 1 ,mem_az_256 -0x7a90 035172 call eckp_calc_init_256 -0x7a91 035173 jam sp_calc_pubkey_256 ,mem_le_sc_calc -0x7a92 035174 rtn -: 035176 sp_pubkey_generated_256: -0x7a93 035177 arg mem_le_pubkey_local_x_256 ,contw -0x7a94 035178 arg mem_bx_256 ,contr -0x7a95 035179 call memcpy64 -0x7a96 035180 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid -0x7a97 035181 jam sp_calc_standby ,mem_le_sc_calc -0x7a98 035182 rtn -: 035186 sp_dhkey_calc_256: -0x7a99 035187 fetch 1 ,mem_sp_dhkey_invalid -0x7a9a 035188 rtnne sp_key_invalid -0x7a9b 035189 fetch 1 ,mem_le_sc_calc -0x7a9c 035190 rtnne sp_calc_standby -0x7a9d 035192 arg mem_k_256 ,contw -0x7a9e 035193 arg mem_le_private_key_256 ,contr -0x7a9f 035194 call memcpy32 -0x7aa0 035196 arg mem_ax_256 ,contw -0x7aa1 035197 arg mem_le_pubkey_remote_x_256 ,contr -0x7aa2 035198 call memcpy64 -0x7aa3 035200 arg mem_az_256 ,contw -0x7aa4 035201 call clear_mem_256 -0x7aa5 035202 jam 1 ,mem_az_256 -0x7aa6 035204 call eckp_calc_init_256 -0x7aa7 035205 jam sp_calc_dhkey_256 ,mem_le_sc_calc -0x7aa8 035206 rtn -: 035209 sp_dhkey_generated_256: -0x7aa9 035211 arg mem_le_dhkey_256 ,contw -0x7aaa 035212 arg mem_bx_256 ,contr -0x7aab 035213 call memcpy32 -0x7aac 035214 jam sp_key_valid_256 ,mem_sp_dhkey_invalid -0x7aad 035215 jam sp_calc_standby ,mem_le_sc_calc -0x7aae 035216 rtn -: 035220 sp_calc_sequence_256: -0x7aaf 035221 fetch 1 ,mem_le_secure_connect_enable -0x7ab0 035222 rtn blank -0x7ab1 035223 fetch 1 ,mem_le_sc_calc -0x7ab2 035224 rtn blank -0x7ab3 035225 increase 0x80 ,pdata -0x7ab4 035226 store 1 ,mem_le_sc_calc -0x7ab5 035227 rtnbit1 7 -0x7ab6 035228 fetch 2 ,mem_ec_loopc -0x7ab7 035229 branch sp_calc_sequence_done_256 ,blank -0x7ab8 035230 branch eckp_calc_256 -: 035232 sp_calc_sequence_done_256: -0x7ab9 035233 bpatchx patch3e_0 ,mem_patch3e -0x7aba 035234 call ecunmapz_256 -0x7abb 035235 fetch 1 ,mem_le_sc_calc -0x7abc 035236 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 -0x7abd 035237 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 -0x7abe 035238 rtn -: 035241 eckp_calc_256: -0x7abf 035242 call ecdbl_256 -0x7ac0 035243 fetch 2 ,mem_ec_loopc -0x7ac1 035244 increase -1 ,pdata -0x7ac2 035245 store 2 ,mem_ec_loopc -0x7ac3 035246 arg mem_k_256 ,contr -0x7ac4 035247 call bn_testbit -0x7ac5 035248 rtn true -0x7ac6 035249 branch ecadd_256 -: 035251 eckp_calc_init_256: -0x7ac7 035252 bpatchx patch3e_1 ,mem_patch3e -0x7ac8 035253 setarg 256 ,pdata -0x7ac9 035254 store 2 ,mem_ec_loopc -: 035255 eckp_calc_init_256_1: -0x7aca 035256 fetch 2 ,mem_ec_loopc -0x7acb 035257 rtn blank -0x7acc 035258 increase -1 ,pdata -0x7acd 035259 store 2 ,mem_ec_loopc -0x7ace 035260 arg mem_k_256 ,contr -0x7acf 035261 call bn_testbit -0x7ad0 035262 branch eckp_calc_init_256_1 ,true -0x7ad1 035263 arg mem_ax_256 ,contr -0x7ad2 035264 arg mem_cx_256 ,contw -0x7ad3 035265 branch memcpy96 -: 035268 ecunmapz_256: -0x7ad4 035269 arg mem_cz_256 ,rega -0x7ad5 035270 arg mem_t3_256 ,contw -0x7ad6 035271 call bn_invmod_256 -0x7ad7 035272 arg mem_t3_256 ,rega -0x7ad8 035273 arg mem_t1_256 ,contw -0x7ad9 035274 call bn_sqrmod_256 -0x7ada 035275 arg mem_cx_256 ,rega -0x7adb 035276 arg mem_t1_256 ,regb -0x7adc 035277 arg mem_bx_256 ,contw -0x7add 035278 call bn_mulmod_256 -0x7ade 035279 arg mem_t3_256 ,rega -0x7adf 035280 arg mem_t1_256 ,regb -0x7ae0 035281 arg mem_t2_256 ,contw -0x7ae1 035282 call bn_mulmod_256 -0x7ae2 035283 arg mem_cy_256 ,rega -0x7ae3 035284 arg mem_t2_256 ,regb -0x7ae4 035285 arg mem_by_256 ,contw -0x7ae5 035286 branch bn_mulmod_256 -: 035288 ecdbl_256: -0x7ae6 035289 arg mem_cz_256 ,rega -0x7ae7 035290 arg mem_t2_256 ,contw -0x7ae8 035291 call bn_sqrmod_256 -0x7ae9 035292 arg mem_t2_256 ,rega -0x7aea 035293 arg mem_t3_256 ,contw -0x7aeb 035294 call bn_sqrmod_256 -0x7aec 035296 arg mem_a_256 ,rega -0x7aed 035297 arg mem_t3_256 ,regb -0x7aee 035298 arg mem_t3_256 ,contw -0x7aef 035299 call bn_mulmod_256 -0x7af0 035300 arg mem_cx_256 ,rega -0x7af1 035301 arg mem_t2_256 ,contw -0x7af2 035302 call bn_sqrmod_256 -0x7af3 035304 arg mem_t2_256 ,contr -0x7af4 035305 arg mem_t1_256 ,contw -0x7af5 035306 call memcpy32 -0x7af6 035307 arg mem_t1_256 ,rega -0x7af7 035308 call bn_lshiftmod_256 -0x7af8 035309 arg mem_t2_256 ,rega -0x7af9 035310 arg mem_t1_256 ,regb -0x7afa 035311 arg mem_t2_256 ,contw -0x7afb 035312 call bn_addmod_256 -0x7afc 035314 arg mem_t2_256 ,rega -0x7afd 035315 arg mem_t3_256 ,regb -0x7afe 035316 arg mem_t2_256 ,contw -0x7aff 035317 call bn_addmod_256 -0x7b00 035319 arg mem_cx_256 ,contr -0x7b01 035320 arg mem_t1_256 ,contw -0x7b02 035321 call memcpy32 -0x7b03 035322 arg mem_cy_256 ,rega -0x7b04 035323 arg mem_t3_256 ,contw -0x7b05 035324 call bn_sqrmod_256 -0x7b06 035325 arg mem_t1_256 ,rega -0x7b07 035326 call bn_lshiftmod_256 -0x7b08 035327 arg mem_t1_256 ,rega -0x7b09 035328 call bn_lshiftmod_256 -0x7b0a 035329 arg mem_t1_256 ,rega -0x7b0b 035330 arg mem_t3_256 ,regb -0x7b0c 035331 arg mem_t1_256 ,contw -0x7b0d 035332 call bn_mulmod_256 -0x7b0e 035333 arg mem_t3_256 ,rega -0x7b0f 035334 arg mem_t0_256 ,contw -0x7b10 035335 call bn_sqrmod_256 -0x7b11 035336 arg mem_t0_256 ,rega -0x7b12 035337 call bn_lshiftmod_256 -0x7b13 035338 arg mem_t0_256 ,rega -0x7b14 035339 call bn_lshiftmod_256 -0x7b15 035340 arg mem_t0_256 ,rega -0x7b16 035341 call bn_lshiftmod_256 -0x7b17 035342 arg mem_cy_256 ,contr -0x7b18 035343 arg mem_t3_256 ,contw -0x7b19 035344 call memcpy32 -0x7b1a 035345 arg mem_t3_256 ,rega -0x7b1b 035346 call bn_lshiftmod_256 -0x7b1c 035347 arg mem_t3_256 ,rega -0x7b1d 035348 arg mem_cz_256 ,regb -0x7b1e 035349 arg mem_cz_256 ,contw -0x7b1f 035350 call bn_mulmod_256 -0x7b20 035353 arg mem_t2_256 ,rega -0x7b21 035354 arg mem_t3_256 ,contw -0x7b22 035355 call bn_sqrmod_256 -0x7b23 035357 arg mem_t3_256 ,rega -0x7b24 035358 arg mem_t1_256 ,regb -0x7b25 035359 arg mem_t3_256 ,contw -0x7b26 035360 call bn_submod_256 -0x7b27 035361 arg mem_t3_256 ,rega -0x7b28 035362 arg mem_t1_256 ,regb -0x7b29 035363 arg mem_cx_256 ,contw -0x7b2a 035364 call bn_submod_256 -0x7b2b 035365 arg mem_t1_256 ,rega -0x7b2c 035366 arg mem_cx_256 ,regb -0x7b2d 035367 arg mem_t3_256 ,contw -0x7b2e 035368 call bn_submod_256 -0x7b2f 035369 arg mem_t3_256 ,rega -0x7b30 035370 arg mem_t2_256 ,regb -0x7b31 035371 arg mem_t3_256 ,contw -0x7b32 035372 call bn_mulmod_256 -0x7b33 035373 arg mem_t3_256 ,rega -0x7b34 035374 arg mem_t0_256 ,regb -0x7b35 035375 arg mem_cy_256 ,contw -0x7b36 035376 branch bn_submod_256 -: 035378 ecadd_256: -0x7b37 035380 arg mem_az_256 ,rega -0x7b38 035381 arg mem_t7_256 ,contw -0x7b39 035382 call bn_sqrmod_256 -0x7b3a 035383 arg mem_cx_256 ,rega -0x7b3b 035384 arg mem_t7_256 ,regb -0x7b3c 035385 arg mem_t0_256 ,contw -0x7b3d 035386 call bn_mulmod_256 -0x7b3e 035389 arg mem_az_256 ,rega -0x7b3f 035390 arg mem_t7_256 ,regb -0x7b40 035391 arg mem_t7_256 ,contw -0x7b41 035392 call bn_mulmod_256 -0x7b42 035393 arg mem_cy_256 ,rega -0x7b43 035394 arg mem_t7_256 ,regb -0x7b44 035395 arg mem_t1_256 ,contw -0x7b45 035396 call bn_mulmod_256 -0x7b46 035399 arg mem_cz_256 ,rega -0x7b47 035400 arg mem_t7_256 ,contw -0x7b48 035401 call bn_sqrmod_256 -0x7b49 035402 arg mem_ax_256 ,rega -0x7b4a 035403 arg mem_t7_256 ,regb -0x7b4b 035404 arg mem_t2_256 ,contw -0x7b4c 035405 call bn_mulmod_256 -0x7b4d 035407 arg mem_cz_256 ,rega -0x7b4e 035408 arg mem_t7_256 ,regb -0x7b4f 035409 arg mem_t7_256 ,contw -0x7b50 035410 call bn_mulmod_256 -0x7b51 035411 arg mem_ay_256 ,rega -0x7b52 035412 arg mem_t7_256 ,regb -0x7b53 035413 arg mem_t3_256 ,contw -0x7b54 035414 call bn_mulmod_256 -0x7b55 035419 arg mem_t0_256 ,regb -0x7b56 035420 arg mem_t2_256 ,rega -0x7b57 035421 arg mem_t7_256 ,contw -0x7b58 035422 call bn_submod_256 -0x7b59 035423 arg mem_t0_256 ,rega -0x7b5a 035424 arg mem_t2_256 ,regb -0x7b5b 035425 arg mem_t0_256 ,contw -0x7b5c 035426 call bn_addmod_256 -0x7b5d 035429 arg mem_t1_256 ,regb -0x7b5e 035430 arg mem_t3_256 ,rega -0x7b5f 035431 arg mem_t2_256 ,contw -0x7b60 035432 call bn_submod_256 -0x7b61 035433 arg mem_t1_256 ,rega -0x7b62 035434 arg mem_t3_256 ,regb -0x7b63 035435 arg mem_t1_256 ,contw -0x7b64 035436 call bn_addmod_256 -0x7b65 035437 arg mem_t1_256 ,rega -0x7b66 035438 arg mem_t7_256 ,regb -0x7b67 035439 arg mem_t1_256 ,contw -0x7b68 035440 call bn_mulmod_256 -0x7b69 035441 arg mem_cz_256 ,rega -0x7b6a 035442 arg mem_az_256 ,regb -0x7b6b 035443 arg mem_t3_256 ,contw -0x7b6c 035444 call bn_mulmod_256 -0x7b6d 035445 arg mem_t3_256 ,rega -0x7b6e 035446 arg mem_t7_256 ,regb -0x7b6f 035447 arg mem_cz_256 ,contw -0x7b70 035448 call bn_mulmod_256 -0x7b71 035450 arg mem_t7_256 ,rega -0x7b72 035451 arg mem_t7_256 ,contw -0x7b73 035452 call bn_sqrmod_256 -0x7b74 035453 arg mem_t7_256 ,rega -0x7b75 035454 arg mem_t0_256 ,regb -0x7b76 035455 arg mem_t3_256 ,contw -0x7b77 035456 call bn_mulmod_256 -0x7b78 035457 arg mem_t7_256 ,rega -0x7b79 035458 arg mem_t1_256 ,regb -0x7b7a 035459 arg mem_t1_256 ,contw -0x7b7b 035460 call bn_mulmod_256 -0x7b7c 035461 arg mem_t2_256 ,rega -0x7b7d 035462 arg mem_cx_256 ,contw -0x7b7e 035463 call bn_sqrmod_256 -0x7b7f 035464 arg mem_cx_256 ,rega -0x7b80 035465 arg mem_t3_256 ,regb -0x7b81 035466 arg mem_cx_256 ,contw -0x7b82 035467 call bn_submod_256 -0x7b83 035468 arg mem_cx_256 ,contr -0x7b84 035469 arg mem_t7_256 ,contw -0x7b85 035470 call memcpy32 -0x7b86 035471 arg mem_t7_256 ,rega -0x7b87 035472 call bn_lshiftmod_256 -0x7b88 035473 arg mem_t3_256 ,rega -0x7b89 035474 arg mem_t7_256 ,regb -0x7b8a 035475 arg mem_t3_256 ,contw -0x7b8b 035476 call bn_submod_256 -0x7b8c 035477 arg mem_t3_256 ,rega -0x7b8d 035478 arg mem_t2_256 ,regb -0x7b8e 035479 arg mem_t2_256 ,contw -0x7b8f 035480 call bn_mulmod_256 -0x7b90 035481 arg mem_t2_256 ,rega -0x7b91 035482 arg mem_t1_256 ,regb -0x7b92 035483 arg mem_cy_256 ,contw -0x7b93 035484 call bn_submod_256 -0x7b94 035485 arg mem_cy_256 ,rega -0x7b95 035486 arg mem_p_256 ,regb -0x7b96 035487 arg mem_cy_256 ,contw -0x7b97 035488 force 0 ,regc -0x7b98 035489 fetch 1 ,mem_cy_256 -0x7b99 035490 isolate1 0 ,pdata -0x7b9a 035491 call bn_add_256 ,true -0x7b9b 035492 copy regc ,alarm -0x7b9c 035493 arg mem_cy_256 ,rega -0x7b9d 035494 call bn_rshift_256 -0x7b9e 035495 fetch 1 ,mem_cy5_256 -0x7b9f 035496 isolate1 0 ,alarm -0x7ba0 035497 setflag true ,7 ,pdata -0x7ba1 035498 store 1 ,mem_cy5_256 -0x7ba2 035499 rtn -: 035501 bn_invmod_256: -0x7ba3 035502 copy contw ,timeup -0x7ba4 035503 arg mem_tmp0_256 ,contw -0x7ba5 035504 call clear_mem_256 -0x7ba6 035505 force 0 ,pdata -0x7ba7 035507 store 4 ,mem_t2_256 -0x7ba8 035508 jam 1 ,mem_tmp0_256 -0x7ba9 035509 arg mem_tmp1_256 ,contw -0x7baa 035510 call clear_mem_512 -0x7bab 035511 arg mem_p_256 ,contr -0x7bac 035512 arg mem_tmp2_256 ,contw -0x7bad 035513 call memcpy32 -0x7bae 035514 copy rega ,contr -0x7baf 035515 arg mem_tmp3_256 ,contw -0x7bb0 035516 call memcpy32 -: 035522 bn_invmod_256_2: -0x7bb1 035523 arg mem_tmp3_256 ,contr -0x7bb2 035524 call bn_eq_zero_256 -0x7bb3 035525 branch bn_invmod_256_0 ,blank -0x7bb4 035530 arg mem_tmp3_256 ,rega -0x7bb5 035531 arg mem_tmp0_256 ,regb -0x7bb6 035532 call bn_rshifteven_256 -0x7bb7 035533 arg mem_tmp2_256 ,rega -0x7bb8 035534 arg mem_tmp1_256 ,regb -0x7bb9 035535 call bn_rshifteven_256 -0x7bba 035537 arg mem_tmp3_256 ,rega -0x7bbb 035538 arg mem_tmp2_256 ,regb -0x7bbc 035539 call bn_bigeq_256 -0x7bbd 035540 branch bn_invmod_256_1 ,positive -0x7bbe 035541 arg mem_tmp2_256 ,rega -0x7bbf 035542 arg mem_tmp3_256 ,regb -0x7bc0 035543 copy rega ,contw -0x7bc1 035544 call bn_sub_256 -0x7bc2 035545 arg mem_tmp0_256 ,rega -0x7bc3 035546 arg mem_tmp1_256 ,regb -0x7bc4 035547 copy regb ,contw -0x7bc5 035548 call bn_add_256 -0x7bc6 035549 ifetch 1 ,rega -0x7bc7 035550 iadd regc ,regc -0x7bc8 035551 ifetch 1 ,regb -0x7bc9 035552 iadd regc ,pdata -0x7bca 035553 istore 1 ,regb -0x7bcb 035554 branch bn_invmod_256_2 -: 035555 bn_invmod_256_1: -0x7bcc 035556 arg mem_tmp3_256 ,rega -0x7bcd 035557 arg mem_tmp2_256 ,regb -0x7bce 035558 copy rega ,contw -0x7bcf 035559 call bn_sub_256 -0x7bd0 035560 arg mem_tmp1_256 ,rega -0x7bd1 035561 arg mem_tmp0_256 ,regb -0x7bd2 035562 copy regb ,contw -0x7bd3 035563 call bn_add_256 -0x7bd4 035564 ifetch 1 ,rega -0x7bd5 035565 iadd regc ,regc -0x7bd6 035566 ifetch 1 ,regb -0x7bd7 035567 iadd regc ,pdata -0x7bd8 035568 istore 1 ,regb -0x7bd9 035569 branch bn_invmod_256_2 -: 035570 bn_invmod_256_0: -0x7bda 035572 arg mem_tmp1_256 ,rega -0x7bdb 035573 copy timeup ,contw -0x7bdc 035574 call bn_p256mod -0x7bdd 035576 arg mem_p_256 ,rega -0x7bde 035577 copy timeup ,regb -0x7bdf 035578 copy timeup ,contw -0x7be0 035579 branch bn_submod_256 -: 035582 bn_mulmod_256: -0x7be1 035583 copy contw ,timeup -0x7be2 035585 force 0 ,regext_index -0x7be3 035587 arg mem_tmp1_256 ,contw -0x7be4 035588 call clear_mem_512 -0x7be5 035589 arg mem_regext ,contw -0x7be6 035590 call clear_mem_512 -0x7be7 035594 copy rega ,contr -0x7be8 035596 jam 0 ,mem_regext -0x7be9 035597 setarg 0 -0x7bea 035598 call bn_load_mem -0x7beb 035599 copy regb ,contr -0x7bec 035600 call bn_load_256 -0x7bed 035603 force 0 ,queue -0x7bee 035604 arg mem_tmp1_256 ,contw -: 035605 bn_mulmod_256_1: -0x7bef 035608 arg mem_regext ,temp -0x7bf0 035609 copy queue ,regb -0x7bf1 035610 lshift2 regb ,pdata -0x7bf2 035612 iadd temp ,regb -0x7bf3 035613 force 0 ,temp -0x7bf4 035614 force 0 ,regc -: 035615 bn_mulmod_256_0: -0x7bf5 035620 ifetch 4 ,contw -0x7bf6 035621 iforce rega -0x7bf7 035624 ifetch 4 ,regb -0x7bf8 035625 copy regc ,regext_index -0x7bf9 035626 imul32 regext ,pdata -0x7bfa 035627 iadd rega ,pdata -0x7bfb 035628 iadd temp ,pdata -0x7bfc 035629 istore 4 ,contw -0x7bfd 035630 rshift32 pdata ,temp -0x7bfe 035631 increase 1 ,regc -0x7bff 035632 compare 8 ,regc ,0xff -0x7c00 035633 nbranch bn_mulmod_256_0 ,true -0x7c01 035635 deposit temp -0x7c02 035636 istore 4 ,contw -0x7c03 035637 increase -32 ,contw -0x7c04 035640 increase 1 ,queue -0x7c05 035641 compare 8 ,queue ,0xff -0x7c06 035642 nbranch bn_mulmod_256_1 ,true -0x7c07 035643 arg mem_tmp1_256 ,rega -0x7c08 035644 copy timeup ,contw -0x7c09 035645 branch bn_p256mod -: 035647 bn_p256mod: -0x7c0a 035648 bpatchx patch3e_2 ,mem_patch3e -0x7c0b 035649 copy contw ,timeup -0x7c0c 035650 copy rega ,alarm -0x7c0d 035651 arg mem_tmp2_256 ,regb -0x7c0e 035652 copy regb ,contw -0x7c0f 035653 call memset0_4 -0x7c10 035654 istore 8 ,contw -0x7c11 035655 add rega ,44 ,contr -0x7c12 035656 call memcpy8 -0x7c13 035657 call memcpy12 -0x7c14 035658 copy regb ,rega -0x7c15 035659 call bn_lshiftmod_256 -0x7c16 035660 arg mem_tmp2_256 ,regb -0x7c17 035661 copy alarm ,rega -0x7c18 035662 copy timeup ,contw -0x7c19 035663 call bn_addmod_256 -0x7c1a 035665 arg mem_tmp2_256 ,regb -0x7c1b 035666 copy regb ,contw -0x7c1c 035667 call memset0_4 -0x7c1d 035668 istore 8 ,contw -0x7c1e 035669 add alarm ,48 ,contr -0x7c1f 035670 call memcpy16 -0x7c20 035671 call memset0_4 -0x7c21 035672 copy regb ,rega -0x7c22 035673 call bn_lshiftmod_256 -0x7c23 035677 arg mem_tmp2_256 ,regb -0x7c24 035678 copy timeup ,rega -0x7c25 035679 copy rega ,contw -0x7c26 035680 call bn_addmod_256 -0x7c27 035684 arg mem_tmp2_256 ,regb -0x7c28 035685 copy regb ,contw -0x7c29 035686 add alarm ,32 ,contr -0x7c2a 035687 call memcpy12 -0x7c2b 035688 call memset0_4 -0x7c2c 035689 istore 8 ,contw -0x7c2d 035690 add alarm ,56 ,contr -0x7c2e 035691 call memcpy8 -0x7c2f 035692 copy timeup ,rega -0x7c30 035693 copy rega ,contw -0x7c31 035694 call bn_addmod_256 -0x7c32 035698 arg mem_tmp2_256 ,regb -0x7c33 035699 copy regb ,contw -0x7c34 035700 add alarm ,36 ,contr -0x7c35 035701 call memcpy12 -0x7c36 035702 add alarm ,52 ,contr -0x7c37 035703 call memcpy12 -0x7c38 035704 add alarm ,52 ,contr -0x7c39 035705 call memcpy4 -0x7c3a 035706 add alarm ,32 ,contr -0x7c3b 035707 call memcpy4 -0x7c3c 035708 copy timeup ,rega -0x7c3d 035709 copy rega ,contw -0x7c3e 035710 call bn_addmod_256 -0x7c3f 035713 arg mem_tmp2_256 ,regb -0x7c40 035714 copy regb ,contw -0x7c41 035715 add alarm ,44 ,contr -0x7c42 035716 call memcpy12 -0x7c43 035717 call memset0_4 -0x7c44 035718 istore 8 ,contw -0x7c45 035719 add alarm ,32 ,contr -0x7c46 035720 call memcpy4 -0x7c47 035721 add alarm ,40 ,contr -0x7c48 035722 call memcpy4 -0x7c49 035723 copy timeup ,rega -0x7c4a 035724 copy rega ,contw -0x7c4b 035725 call bn_submod_256 -0x7c4c 035728 arg mem_tmp2_256 ,regb -0x7c4d 035729 copy regb ,contw -0x7c4e 035730 add alarm ,48 ,contr -0x7c4f 035731 call memcpy8 -0x7c50 035732 call memcpy8 -0x7c51 035733 force 0 ,pdata -0x7c52 035734 istore 8 ,contw -0x7c53 035735 add alarm ,36 ,contr -0x7c54 035736 call memcpy4 -0x7c55 035737 add alarm ,44 ,contr -0x7c56 035738 call memcpy4 -0x7c57 035739 copy timeup ,rega -0x7c58 035740 copy rega ,contw -0x7c59 035741 call bn_submod_256 -0x7c5a 035744 arg mem_tmp2_256 ,regb -0x7c5b 035745 copy regb ,contw -0x7c5c 035746 add alarm ,52 ,contr -0x7c5d 035747 call memcpy12 -0x7c5e 035748 add alarm ,32 ,contr -0x7c5f 035749 call memcpy12 -0x7c60 035750 call memset0_4 -0x7c61 035751 add alarm ,48 ,contr -0x7c62 035752 call memcpy4 -0x7c63 035753 copy timeup ,rega -0x7c64 035754 copy rega ,contw -0x7c65 035755 call bn_submod_256 -0x7c66 035758 arg mem_tmp2_256 ,regb -0x7c67 035759 copy regb ,contw -0x7c68 035760 add alarm ,56 ,contr -0x7c69 035761 call memcpy8 -0x7c6a 035762 call memset0_4 -0x7c6b 035763 add alarm ,36 ,contr -0x7c6c 035764 call memcpy12 -0x7c6d 035765 call memset0_4 -0x7c6e 035766 add alarm ,52 ,contr -0x7c6f 035767 call memcpy4 -0x7c70 035768 copy timeup ,rega -0x7c71 035769 copy rega ,contw -0x7c72 035770 branch bn_submod_256 -: 035773 bn_load_mem: -0x7c73 035774 force 32 ,loopcnt -0x7c74 035775 arg mem_regext ,contw -0x7c75 035776 iadd contw ,contw -0x7c76 035777 branch memcpy -: 035779 bn_load_256: -0x7c77 035780 force 8 ,loopcnt -0x7c78 035781 branch bn_load_0 -: 035783 bn_sqrmod_256: -0x7c79 035784 copy rega ,regb -0x7c7a 035785 branch bn_mulmod_256 -: 035787 bn_add_256: -0x7c7b 035788 force 8 ,loopcnt -0x7c7c 035789 branch bn_add + 1 -: 035791 bn_addmod_256: -0x7c7d 035792 call bn_add_256 -0x7c7e 035793 copy contw ,rega -0x7c7f 035794 branch bn_lshiftmod_ismod_256 -: 035796 bn_lshiftmod_256: -0x7c80 035797 call bn_lshift_256 -: 035798 bn_lshiftmod_ismod_256: -0x7c81 035799 isolate1 0 ,regc -0x7c82 035800 branch bn_lshiftmod_p_256 ,true -0x7c83 035801 arg mem_p_256 ,regb -0x7c84 035802 copy rega ,regc -0x7c85 035803 increase -32 ,rega -0x7c86 035804 call bn_bigeq_256 -0x7c87 035805 nrtn positive -0x7c88 035806 copy regc ,rega -0x7c89 035807 branch sub_p2_256 -: 035809 bn_lshiftmod_p_256: -0x7c8a 035810 call sub_p2_256 -0x7c8b 035812 copy rega ,regc -0x7c8c 035813 increase -32 ,rega -0x7c8d 035814 arg mem_p_256 ,regb -0x7c8e 035815 call bn_bigeq_256 -0x7c8f 035816 nrtn positive -0x7c90 035817 copy regc ,rega -0x7c91 035818 branch sub_p2_256 -: 035821 sub_p2_256: -0x7c92 035822 increase -32 ,rega -0x7c93 035823 arg mem_p_256 ,regb -0x7c94 035824 copy rega ,contw -0x7c95 035825 branch bn_sub_256 -: 035830 bn_submod_256: -0x7c96 035831 call bn_sub_256 -0x7c97 035833 branch bn_submod_256_np ,true -0x7c98 035836 add contw ,-32 ,rega -0x7c99 035837 arg mem_p_256 ,regb -0x7c9a 035838 call bn_bigeq_256 -0x7c9b 035839 nrtn positive -0x7c9c 035840 arg mem_p_256 ,regb -0x7c9d 035841 add contw ,-32 ,rega -0x7c9e 035843 copy rega ,contw -0x7c9f 035844 branch bn_sub_256 -: 035845 bn_submod_256_np: -0x7ca0 035846 add contw ,-32 ,rega -0x7ca1 035847 arg mem_p_256 ,regb -0x7ca2 035848 copy rega ,contw -0x7ca3 035849 call bn_add_256 -0x7ca4 035851 rtn true -0x7ca5 035852 add contw ,-32 ,rega -0x7ca6 035853 arg mem_p_256 ,regb -0x7ca7 035854 copy rega ,contw -0x7ca8 035855 branch bn_add_256 -: 035859 bn_sub_256: -0x7ca9 035860 force 8 ,loopcnt -0x7caa 035861 branch bn_sub + 1 -: 035863 bn_rshift_256: -0x7cab 035864 force 8 ,loopcnt -0x7cac 035865 increase 28 ,rega -0x7cad 035866 branch bn_rshift -: 035868 bn_lshift_256: -0x7cae 035869 force 8 ,loopcnt -0x7caf 035870 force 0 ,regc -0x7cb0 035871 branch bn_lshift_0 -: 035873 bn_bigeq_256: -0x7cb1 035874 force 8 ,loopcnt -0x7cb2 035875 increase 28 ,rega -0x7cb3 035876 increase 28 ,regb -0x7cb4 035877 branch bn_bigeq_0 -: 035880 bn_eq_zero_256: -0x7cb5 035881 ifetch 8 ,contr -0x7cb6 035882 nrtn blank -0x7cb7 035883 branch bn_eq_zero -: 035888 bn_rshifteven_256: -0x7cb8 035889 copy rega ,alarm -: 035890 bn_rshifteven_256_1: -0x7cb9 035891 copy alarm ,rega -0x7cba 035892 ifetch 1 ,rega -0x7cbb 035893 isolate1 0 ,pdata -0x7cbc 035894 rtn true -0x7cbd 035895 call bn_rshift_256 -0x7cbe 035896 ifetch 1 ,regb -0x7cbf 035897 isolate0 0 ,pdata -0x7cc0 035898 branch bn_rshifteven_256_0 ,true -0x7cc1 035899 arg mem_p_256 ,rega -0x7cc2 035900 copy regb ,contw -0x7cc3 035901 call bn_add_256 -0x7cc4 035902 ifetch 1 ,regb -0x7cc5 035903 iadd regc ,pdata -0x7cc6 035904 istore 1 ,regb -0x7cc7 035905 increase -32 ,regb -: 035906 bn_rshifteven_256_0: -0x7cc8 035907 add regb ,32 ,rega -0x7cc9 035908 force 9 ,loopcnt -0x7cca 035909 call bn_rshift -0x7ccb 035910 branch bn_rshifteven_256_1 -: 035914 ui_init: -0x7ccc 035915 call lpm_disable_exen_output -0x7ccd 035916 rtn wake -0x7cce 035917 call ui_button_init -0x7ccf 035918 call ui_timer_init -0x7cd0 035919 branch ui_led_init_global -: 035921 ui_dispatch: -0x7cd1 035922 call ui_led_dispatch -0x7cd2 035924 branch ui_timer_check -: 035926 ui_button_init: -0x7cd3 035927 fetch 1 ,mem_ui_button_gpio -0x7cd4 035928 rtneq ui_button_gpio_disable -0x7cd5 035929 iforce temp -0x7cd6 035930 call gpio_config_output -0x7cd7 035931 fetcht 1 ,mem_ui_button_gpio -0x7cd8 035932 call gpio_out_inactive -0x7cd9 035933 nop 100 -0x7cda 035934 fetcht 1 ,mem_ui_button_gpio -0x7cdb 035935 call gpio_config_input -0x7cdc 035936 branch ui_button_polling -: 035940 ui_button_polling: -0x7cdd 035941 bpatchx patch3e_3 ,mem_patch3e -0x7cde 035942 fetch 1 ,mem_ui_button_gpio -0x7cdf 035943 rtneq ui_button_gpio_disable -0x7ce0 035944 copy pdata ,temp -0x7ce1 035945 call gpio_get_bit -0x7ce2 035946 nbranch ui_button_up ,true -: 035948 ui_button_down: -0x7ce3 035949 call ui_button_check_long_press -0x7ce4 035950 fetch 2 ,mem_ui_state_map -0x7ce5 035951 set1 ui_state_btn_down -0x7ce6 035952 store 2 ,mem_ui_state_map -0x7ce7 035953 fetch 1 ,mem_ui_button_last_state -0x7ce8 035954 rtneq ui_button_state_down -0x7ce9 035955 jam ui_button_state_down ,mem_ui_button_last_state -0x7cea 035957 fetch 1 ,mem_ui_button_timeout -0x7ceb 035958 store 1 ,mem_ui_button_timer -0x7cec 035959 call lpm_button_get_wake_lock -0x7ced 035960 jam bt_evt_button_down ,mem_fifo_temp -0x7cee 035961 branch ui_ipc_send_event -: 035962 ui_button_up: -0x7cef 035963 fetch 2 ,mem_ui_state_map -0x7cf0 035964 set0 ui_state_btn_down -0x7cf1 035965 store 2 ,mem_ui_state_map -0x7cf2 035966 fetch 1 ,mem_ui_button_last_state -0x7cf3 035967 rtneq ui_button_state_up -0x7cf4 035968 jam ui_button_state_up ,mem_ui_button_last_state -0x7cf5 035970 jam 0 ,mem_ui_button_timer -0x7cf6 035971 call lpm_button_clean_wake_lock -0x7cf7 035972 jam bt_evt_button_up ,mem_fifo_temp -0x7cf8 035973 branch ui_ipc_send_event -: 035975 ui_button_check_long_press: -0x7cf9 035976 fetch 1 ,mem_ui_button_timer -0x7cfa 035977 rtn blank -0x7cfb 035978 increase -1 ,pdata -0x7cfc 035979 store 1 ,mem_ui_button_timer -0x7cfd 035980 nrtn blank -0x7cfe 035982 jam bt_evt_button_long_pressed ,mem_fifo_temp -0x7cff 035983 branch ui_ipc_send_event -: 035985 lpm_button_get_wake_lock: -0x7d00 035986 arg wake_lock_button ,queue -0x7d01 035987 branch lpm_get_wake_lock -: 035989 lpm_button_clean_wake_lock: -0x7d02 035990 arg wake_lock_button ,queue -0x7d03 035991 branch lpm_put_wake_lock -: 036013 calc_curr_struct_prt: -0x7d04 036014 fetch 2 ,mem_ui_led_struct_ptr -0x7d05 036015 mul32 rega ,led_offset_length ,regb -0x7d06 036016 iadd regb ,regb -0x7d07 036017 rtn -: 036020 ui_led_init_global: -0x7d08 036021 fetch 1 ,mem_ui_led_struct_num -0x7d09 036022 rtn blank -0x7d0a 036023 copy pdata ,loopcnt -0x7d0b 036024 fetch 2 ,mem_ui_led_struct_ptr -0x7d0c 036025 copy pdata ,regb -: 036026 ui_led_init_loop: -0x7d0d 036027 add regb ,led_offset_led_gpio ,regc -0x7d0e 036028 ifetcht 1 ,regc -0x7d0f 036029 call gpio_config_output -0x7d10 036030 call ui_led_off_static -0x7d11 036031 increase led_offset_length ,regb -0x7d12 036032 loop ui_led_init_loop -0x7d13 036033 rtn -: 036037 ui_led_on_global: -0x7d14 036038 call calc_curr_struct_prt -0x7d15 036039 setarg ui_led_state_lighting -0x7d16 036040 istore 1 ,regb -0x7d17 036041 call ui_led_stop_timer -0x7d18 036042 branch ui_led_on_static -: 036046 ui_led_blink_stop_global: -: 036047 ui_led_off_global: -0x7d19 036048 call calc_curr_struct_prt -0x7d1a 036049 setarg ui_led_state_darking -0x7d1b 036050 istore 1 ,regb -0x7d1c 036051 call ui_led_stop_timer -0x7d1d 036052 branch ui_led_off_static -: 036056 ui_led_blink_start_global: -0x7d1e 036057 call calc_curr_struct_prt -0x7d1f 036058 setarg ui_led_state_blink_start -0x7d20 036059 istore 1 ,regb -0x7d21 036060 setarg led_infinite_flash_num -0x7d22 036061 istore 1 ,contw -0x7d23 036062 branch ui_led_off_static -: 036067 ui_led_set_style_global: -0x7d24 036068 call calc_curr_struct_prt -0x7d25 036069 arg led_offset_length ,loopcnt -0x7d26 036070 copy regc ,contr -0x7d27 036071 copy regb ,contw -0x7d28 036072 branch memcpy_fast -: 036076 ui_led_dispatch: -0x7d29 036077 fetch 1 ,mem_ui_led_struct_num -0x7d2a 036078 rtn blank -0x7d2b 036079 arg 0 ,rega -: 036080 ui_led_blink_polling: -0x7d2c 036081 call ui_led_change_style_by_type -0x7d2d 036082 increase 1 ,rega -0x7d2e 036083 fetch 1 ,mem_ui_led_struct_num -0x7d2f 036084 isub rega ,null -0x7d30 036085 rtn zero -0x7d31 036086 branch ui_led_blink_polling -: 036089 ui_led_off_static: -0x7d32 036090 add regb ,led_offset_led_gpio ,regc -0x7d33 036091 ifetcht 1 ,regc -0x7d34 036092 branch gpio_out_inactive -: 036095 ui_led_on_static: -0x7d35 036096 add regb ,led_offset_led_gpio ,regc -0x7d36 036097 ifetcht 1 ,regc -0x7d37 036098 branch gpio_out_active -: 036102 ui_led_change_style_by_type: -0x7d38 036103 add rega ,ui_led_blink ,queue -0x7d39 036104 call timer_check -0x7d3a 036105 nrtn blank -0x7d3b 036107 call calc_curr_struct_prt -0x7d3c 036109 ifetch 1 ,regb -0x7d3d 036111 beq ui_led_state_lighting ,ui_led_on_static -0x7d3e 036112 beq ui_led_state_darking ,ui_led_off_static -0x7d3f 036113 beq ui_led_state_blink_stop ,ui_led_off_static -0x7d40 036114 beq ui_led_state_blink_darking ,ui_led_blink_state_darking -: 036115 ui_led_blink_state_lighting: -0x7d41 036116 call ui_led_on_static -0x7d42 036117 add regb ,led_offset_cb_ledon ,regc -0x7d43 036118 call push_stack -0x7d44 036119 ifetch 2 ,regc -0x7d45 036120 call callback_func -0x7d46 036121 call pop_stack -0x7d47 036122 setarg ui_led_state_blink_darking -0x7d48 036123 istore 1 ,regb -0x7d49 036124 add regb ,led_offset_on_time ,regc -0x7d4a 036125 ifetch 2 ,regc -0x7d4b 036126 branch ui_led_blink_timer_start -: 036129 ui_led_blink_state_darking: -0x7d4c 036130 call ui_led_off_static -0x7d4d 036131 add regb ,led_offset_cb_ledoff ,regc -0x7d4e 036132 call push_stack -0x7d4f 036133 ifetch 2 ,regc -0x7d50 036134 call callback_func -0x7d51 036135 call pop_stack -0x7d52 036137 add regb ,led_offset_blink_count ,regc -0x7d53 036138 ifetch 1 ,regc -0x7d54 036139 beq led_infinite_flash_num ,ui_led_blink_infinite -0x7d55 036140 increase -1 ,pdata -0x7d56 036141 istore 1 ,regc -0x7d57 036142 branch ui_led_blink_stop_global ,blank -: 036143 ui_led_blink_infinite: -0x7d58 036144 setarg ui_led_state_blink_lighting -0x7d59 036145 istore 1 ,regb -0x7d5a 036146 add regb ,led_offset_off_time ,regc -0x7d5b 036147 ifetch 2 ,regc -: 036148 ui_led_blink_timer_start: -0x7d5c 036149 add rega ,ui_led_blink ,queue -0x7d5d 036150 branch timer_init -: 036152 ui_led_stop_timer: -0x7d5e 036153 setarg 0 -0x7d5f 036154 branch ui_led_blink_timer_start -: 036160 ui_timer_timeout: -0x7d60 036161 setarg 0x1000 -0x7d61 036162 lshift16 pdata ,pdata -0x7d62 036163 iadd regb ,regb -0x7d63 036164 rtn -: 036166 ui_timer_check: -0x7d64 036167 bpatchx patch3e_4 ,mem_patch3e -0x7d65 036168 arg 0 ,rega -0x7d66 036169 fetcht 4 ,mem_ui_timer_last_btclk -0x7d67 036170 copy clkn_bt ,regb -0x7d68 036171 copy regb ,pdata -0x7d69 036172 isub temp ,null -0x7d6a 036173 ncall ui_timer_timeout ,positive -: 036175 ui_timer_check_loop: -0x7d6b 036176 copy regb ,pdata -0x7d6c 036177 increase 160 ,temp -0x7d6d 036178 increase 160 ,temp -0x7d6e 036179 isub temp ,null -0x7d6f 036180 nbranch ui_timer_check_end ,positive -0x7d70 036181 increase 1 ,rega -0x7d71 036182 and rega ,0x0f ,pdata -0x7d72 036183 nbranch ui_timer_check_loop ,blank -0x7d73 036184 arg 0 ,rega -0x7d74 036185 call ui_timer_check_send_evt -: 036186 ui_timer_init: -0x7d75 036187 copy clkn_bt ,pdata -0x7d76 036188 store 4 ,mem_ui_timer_last_btclk -0x7d77 036189 rtn -: 036190 ui_timer_check_end: -0x7d78 036191 bpatchx patch3e_5 ,mem_patch3e -0x7d79 036192 copy rega ,pdata -0x7d7a 036193 rtn blank -0x7d7b 036194 increase -160 ,temp -0x7d7c 036195 increase -160 ,temp -0x7d7d 036196 set0 28 ,temp -0x7d7e 036197 storet 4 ,mem_ui_timer_last_btclk -: 036198 ui_timer_check_send_evt: -0x7d7f 036199 branch app_evt_timer -: 036206 ui_ipc_get_lock: -0x7d80 036207 jam 1 ,mem_ipc_lock_bt -: 036208 ui_ipc_get_lock_wait: -0x7d81 036209 fetch 1 ,mem_ipc_lock_c51 -0x7d82 036210 nbranch ui_ipc_get_lock_wait ,blank -0x7d83 036211 rtn -: 036213 ui_ipc_put_lock: -0x7d84 036214 jam 0 ,mem_ipc_lock_bt -0x7d85 036215 rtn -: 036219 ui_ipc_send_event: -0x7d86 036220 bpatchx patch3e_6 ,mem_patch3e -0x7d87 036221 call ui_ipc_get_lock -0x7d88 036222 copy rega ,pdata -0x7d89 036223 store 4 ,mem_ipc_rega_temp -0x7d8a 036224 arg mem_ipc_fifo_bt2c51 ,rega -0x7d8b 036225 call fifo_in -0x7d8c 036226 fetch 4 ,mem_ipc_rega_temp -0x7d8d 036227 copy pdata ,rega -0x7d8e 036228 branch ui_ipc_put_lock -: 036230 ui_ipc_send_cmd: -0x7d8f 036231 bpatchx patch3e_7 ,mem_patch3e -0x7d90 036232 call ui_ipc_get_lock -0x7d91 036233 copy rega ,pdata -0x7d92 036234 store 4 ,mem_ipc_rega_temp -0x7d93 036235 arg mem_ipc_fifo_c512bt ,rega -0x7d94 036236 call fifo_in -0x7d95 036237 fetch 4 ,mem_ipc_rega_temp -0x7d96 036238 copy pdata ,rega -0x7d97 036239 branch ui_ipc_put_lock -: 036241 ui_ipc_clean_all_fifo: -0x7d98 036242 setarg 0 -0x7d99 036243 store util_fifo_len ,mem_ipc_fifo_c512bt -0x7d9a 036244 store util_fifo_len ,mem_ipc_fifo_bt2c51 -0x7d9b 036245 rtn -: 036247 check_51cmd: -0x7d9c 036248 bpatchx patch3f_0 ,mem_patch3f -0x7d9d 036249 fetch 1 ,mem_hci_cmd -0x7d9e 036250 nrtn blank -0x7d9f 036251 arg mem_ipc_fifo_c512bt ,rega -0x7da0 036252 call fifo_is_empty -0x7da1 036253 rtn blank -0x7da2 036254 jam ipc_continue_process ,mem_ipc_skip_continue_proc -0x7da3 036255 call check_51cmd_once -0x7da4 036256 fetch 1 ,mem_ipc_skip_continue_proc -0x7da5 036257 branch check_51cmd ,blank -0x7da6 036258 rtn -: 036260 check_51cmd_once: -0x7da7 036261 call ui_ipc_get_lock -0x7da8 036262 arg mem_ipc_fifo_c512bt ,rega -0x7da9 036263 call fifo_out -0x7daa 036264 copy pdata ,temp -0x7dab 036265 call ui_ipc_put_lock -0x7dac 036266 bpatchx patch3f_1 ,mem_patch3f -0x7dad 036267 copy temp ,pdata -0x7dae 036268 rtn blank -0x7daf 036269 beq bt_cmd_start_discovery ,check_51cmd_start_discovery -0x7db0 036270 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery -0x7db1 036271 beq bt_cmd_reconnect ,check_51cmd_reconnect -0x7db2 036272 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating -0x7db3 036273 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating -0x7db4 036274 beq bt_cmd_sniff_test ,check_51cmd_sniff_test -0x7db5 036275 beq bt_cmd_start_inquiry ,check_51cmd_inq -0x7db6 036276 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq -0x7db7 036277 beq bt_cmd_start_adv ,check_51cmd_adv -0x7db8 036278 beq bt_cmd_stop_adv ,check_51cmd_stop_adv -0x7db9 036279 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv -0x7dba 036280 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv -0x7dbb 036281 beq bt_cmd_led_off ,check_51cmd_led_off -0x7dbc 036282 beq bt_cmd_led_on ,check_51cmd_led_on -0x7dbd 036283 beq bt_cmd_led_blink ,check_51cmd_led_start_blink -0x7dbe 036284 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con -0x7dbf 036285 beq bt_cmd_le_start_scan ,check_51cmd_start_scan -0x7dc0 036286 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan -0x7dc1 036287 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate -0x7dc2 036288 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req -0x7dc3 036289 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel -0x7dc4 036291 store 1 ,mem_fifo_temp -0x7dc5 036292 bpatchx patch3f_2 ,mem_patch3f -0x7dc6 036293 call lmo_fifo_check -0x7dc7 036294 nbranch check_51cmd_restore ,blank -: 036295 check_51cmd_once_continue: -0x7dc8 036296 fetch 1 ,mem_fifo_temp -0x7dc9 036297 bmark0 mark_context ,check_51cmd_check_idle -0x7dca 036298 beq bt_cmd_disconnect ,check_51cmd_disconnect -0x7dcb 036299 beq bt_cmd_enter_sniff ,cmd_in_sniff -0x7dcc 036300 beq bt_cmd_exit_sniff ,cmd_exit_sniff -0x7dcd 036301 beq bt_cmd_set_pin_code ,check_51cmd_pincode -0x7dce 036302 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect -0x7dcf 036303 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param -0x7dd0 036304 beq bt_cmd_role_switch ,check_51cmd_role_switch -0x7dd1 036305 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info -0x7dd2 036306 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info -0x7dd3 036307 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept -0x7dd4 036308 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info -0x7dd5 036309 rtn -: 036311 check_51cmd_check_idle: -0x7dd6 036312 store 1 ,mem_fifo_temp -0x7dd7 036313 call context_check_idle -0x7dd8 036314 branch check_51cmd_restore ,zero -0x7dd9 036315 call context_search_plap -0x7dda 036316 nrtn zero -: 036317 check_51cmd_restore: -0x7ddb 036318 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc -0x7ddc 036319 branch ui_ipc_send_cmd -: 036324 check_51cmd_start_discovery: -0x7ddd 036325 fetch 2 ,mem_ui_state_map -0x7dde 036326 set1 ui_state_bt_discovery -0x7ddf 036327 store 2 ,mem_ui_state_map -0x7de0 036328 jam 3 ,mem_scan_mode -0x7de1 036329 rtn -: 036333 check_51cmd_stop_discovery: -0x7de2 036334 jam 0 ,mem_hid_handshake_timer_count -0x7de3 036335 jam 0 ,mem_scan_mode -0x7de4 036336 fetch 2 ,mem_ui_state_map -0x7de5 036337 set0 ui_state_bt_discovery -0x7de6 036338 store 2 ,mem_ui_state_map -0x7de7 036339 rtn -: 036343 check_51cmd_reconnect: -0x7de8 036344 jam hci_cmd_create_conn ,mem_hci_cmd -0x7de9 036345 rtn -: 036349 check_51cmd_disconnect: -0x7dea 036350 jam lmp_detach ,mem_lmo_opcode2 -0x7deb 036351 jam other_end_terminated ,mem_disconn_reason_send -0x7dec 036352 rtn -: 036356 check_51cmd_enter_sniff_subrating: -0x7ded 036357 rtn -: 036361 check_51cmd_exit_sniff_subrating: -0x7dee 036362 rtn -: 036366 check_51cmd_sniff_test: -0x7def 036367 rtn -: 036371 check_51cmd_pincode: -0x7df0 036372 jam pincode_state_pincode_ready ,mem_pincode_state -0x7df1 036373 branch cmd_pair -: 036377 check_51cmd_inq: -0x7df2 036378 rtn -: 036382 check_51cmd_stop_inq: -0x7df3 036383 rtn -: 036387 check_51cmd_adv: -0x7df4 036388 jam on ,mem_le_adv_enable -0x7df5 036389 jam adv_ind ,mem_le_adv_type -0x7df6 036390 fetch 2 ,mem_ui_state_map -0x7df7 036391 set1 ui_state_ble_adv ,pdata -0x7df8 036392 store 2 ,mem_ui_state_map -0x7df9 036393 rtn -: 036397 check_51cmd_stop_adv: -0x7dfa 036398 fetch 2 ,mem_ui_state_map -0x7dfb 036399 set0 ui_state_ble_adv ,pdata -0x7dfc 036400 store 2 ,mem_ui_state_map -0x7dfd 036401 jam off ,mem_le_adv_enable -0x7dfe 036402 rtn -: 036406 check_51cmd_direct_adv: -0x7dff 036407 jam on ,mem_le_adv_enable -0x7e00 036408 jam adv_direct_ind ,mem_le_adv_type -0x7e01 036409 fetch 2 ,mem_ui_state_map -0x7e02 036410 set1 ui_state_ble_adv ,pdata -0x7e03 036411 store 2 ,mem_ui_state_map -0x7e04 036412 rtn -: 036416 check_51cmd_stop_direct_adv: -0x7e05 036417 fetch 2 ,mem_ui_state_map -0x7e06 036418 set0 ui_state_ble_adv ,pdata -0x7e07 036419 store 2 ,mem_ui_state_map -0x7e08 036420 jam off ,mem_le_adv_enable -0x7e09 036421 rtn -: 036425 check_51cmd_le_disconnect: -0x7e0a 036426 setarg 20 -0x7e0b 036427 store 2 ,mem_le_superto -0x7e0c 036428 store 2 ,mem_le_init_superto -0x7e0d 036429 branch le_send_terminate_ind_user_terminated -: 036433 check_51cmd_ble_update_connect_param: -0x7e0e 036434 branch le_l2cap_tx_update_req -: 036438 check_51cmd_led_off: -0x7e0f 036439 arg 0 ,rega -0x7e10 036440 branch ui_led_off_global -: 036444 check_51cmd_led_on: -0x7e11 036445 arg 0 ,rega -0x7e12 036446 branch ui_led_on_global -: 036450 check_51cmd_led_start_blink: -0x7e13 036451 arg 0 ,rega -0x7e14 036452 branch ui_led_blink_start_global -: 036456 check_51cmd_le_start_con: -0x7e15 036457 jam on ,mem_le_scan_enable -0x7e16 036458 jam hci_cmd_le_create_conn ,mem_hci_cmd -0x7e17 036461 rtn -: 036465 check_51cmd_start_scan: -0x7e18 036466 jam on ,mem_le_scan_enable -0x7e19 036467 rtn -: 036471 check_51cmd_stop_scan: -0x7e1a 036472 jam off ,mem_le_scan_enable -0x7e1b 036473 jam 0 ,mem_hci_cmd -0x7e1c 036474 rtn -: 036478 check_51cmd_hibernate: -0x7e1d 036479 fetch 2 ,mem_cb_before_hibernate -0x7e1e 036480 call callback_func -0x7e1f 036481 fetch 1 ,mem_ui_button_gpio -0x7e20 036482 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled -0x7e21 036483 copy pdata ,temp -0x7e22 036484 call gpio_config_input -: 036485 check_51cmd_hibernate_btn_disabled: -0x7e23 036486 call ui_ipc_clean_all_fifo -0x7e24 036487 branch lpm_hibernate -: 036491 check_51cmd_le_smp_sec_req: -0x7e25 036492 branch le_send_smp_security_request -: 036496 check_51cmd_role_switch: -0x7e26 036497 jam lmp_slot_offset ,mem_lmo_opcode2 -0x7e27 036498 set1 mark_switch_initiated ,mark -0x7e28 036499 nrtn master -0x7e29 036500 jam switch_flag_init ,mem_switch_flag -0x7e2a 036501 jam lmp_switch_req ,mem_lmo_opcode2 -0x7e2b 036502 fetch 1 ,mem_connection_options -0x7e2c 036503 set0 connection_switch ,pdata -0x7e2d 036504 store 1 ,mem_connection_options -0x7e2e 036505 rtn -: 036509 check_51cmd_bb_reconn_cancel: -0x7e2f 036510 force page_length_timer ,queue -0x7e30 036511 branch timer_stop -: 036515 check_51cmd_dhkey_not_accept: -0x7e31 036516 call tid_set_reply -0x7e32 036517 jam lmp_dhkey_check ,mem_lmi_opcode2 -0x7e33 036518 branch parse_lmp_dhkey_check_reject -: 036521 ui_check_paring_button: -0x7e34 036522 fetch 1 ,mem_ui_state_map -0x7e35 036523 rtnbit0 ui_state_btn_down -0x7e36 036524 rtnbit0 ui_state_bt_reconnect -0x7e37 036525 branch check_51cmd_bb_reconn_cancel -: 036530 queue_init: -0x7e38 036531 fetch 2 ,mem_queue_ptr -0x7e39 036532 add pdata ,queue_offset_curr_num ,contw -0x7e3a 036533 setarg 0 -0x7e3b 036534 istore 3 ,contw -0x7e3c 036535 rtn -: 036539 queue_push: -0x7e3d 036540 call disable_user -0x7e3e 036541 call queue_full -0x7e3f 036542 rtn blank -0x7e40 036543 fetch 2 ,mem_queue_ptr -0x7e41 036544 add pdata ,queue_offset_curr_num ,regb -0x7e42 036545 ifetcht 1 ,regb -0x7e43 036546 increase 1 ,temp -0x7e44 036547 istoret 1 ,regb -0x7e45 036549 ifetcht 1 ,pdata -0x7e46 036550 copy temp ,loopcnt -0x7e47 036551 add pdata ,queue_offset_write_ptr ,regb -0x7e48 036552 ifetch 1 ,regb -0x7e49 036553 imul32 temp ,pdata -0x7e4a 036554 iadd contr ,contw -0x7e4b 036555 copy rega ,contr -: 036556 calc_queue_next_ptr: -0x7e4c 036557 call memcpy -0x7e4d 036558 call queue_get_size -0x7e4e 036559 pincrease -1 -0x7e4f 036560 ifetcht 1 ,regb -0x7e50 036561 increase 1 ,temp -0x7e51 036562 iand temp ,temp -0x7e52 036563 istoret 1 ,regb -0x7e53 036564 branch enable_user -: 036569 queue_pop: -0x7e54 036570 call disable_user -0x7e55 036571 call queue_empty -0x7e56 036572 rtn blank -0x7e57 036573 fetch 2 ,mem_queue_ptr -0x7e58 036574 add pdata ,queue_offset_curr_num ,regb -0x7e59 036575 ifetcht 1 ,regb -0x7e5a 036576 increase -1 ,temp -0x7e5b 036577 istoret 1 ,regb -0x7e5c 036578 ifetcht 1 ,pdata -0x7e5d 036579 copy temp ,loopcnt -0x7e5e 036580 add pdata ,queue_offset_read_ptr ,regb -0x7e5f 036581 ifetch 1 ,regb -0x7e60 036582 imul32 temp ,pdata -0x7e61 036583 iadd contr ,contr -0x7e62 036584 increase 1 ,contr -0x7e63 036585 copy rega ,contw -0x7e64 036586 branch calc_queue_next_ptr -: 036590 queue_empty: -0x7e65 036591 fetch 2 ,mem_queue_ptr -0x7e66 036592 add pdata ,queue_offset_curr_num ,contr -0x7e67 036593 ifetch 1 ,contr -0x7e68 036594 rtn -: 036597 queue_full: -0x7e69 036598 call queue_get_size -0x7e6a 036599 ifetcht 1 ,contr -0x7e6b 036600 isub temp ,pdata -0x7e6c 036601 rtn -: 036604 queue_get_size: -0x7e6d 036605 fetch 2 ,mem_queue_ptr -0x7e6e 036606 add pdata ,queue_offset_length ,contr -0x7e6f 036607 ifetch 1 ,contr -0x7e70 036608 rtn -: 036616 right_shift_n: -0x7e71 036617 sub loopcnt ,0 ,null -0x7e72 036618 rtn zero -: 036619 right_shift_n_loop: -0x7e73 036620 rshift pdata ,pdata -0x7e74 036621 loop right_shift_n_loop -0x7e75 036622 rtn -: 036625 left_shift_n: -0x7e76 036626 force 1 ,pdata -0x7e77 036627 sub loopcnt ,0 ,null -0x7e78 036628 rtn zero -: 036629 left_shift_n_loop: -0x7e79 036630 lshift pdata ,pdata -0x7e7a 036631 loop left_shift_n_loop -0x7e7b 036632 rtn -: 036633 push_stack: -0x7e7c 036634 deposit contw -0x7e7d 036635 store 2 ,mem_contw -0x7e7e 036636 storet 8 ,mem_temp -0x7e7f 036637 deposit timeup -0x7e80 036638 store 4 ,mem_timeup -0x7e81 036639 call push_stack_rega_b_c -0x7e82 036640 deposit contr -0x7e83 036641 store 2 ,mem_contr -0x7e84 036642 rtn -: 036644 push_stack_rega_b_c: -0x7e85 036645 deposit rega -0x7e86 036646 store 4 ,mem_rega -0x7e87 036647 deposit regb -0x7e88 036648 store 4 ,mem_regb -0x7e89 036649 deposit regc -0x7e8a 036650 store 3 ,mem_regc -0x7e8b 036651 rtn -: 036653 pop_stack: -0x7e8c 036654 fetcht 8 ,mem_temp -0x7e8d 036655 fetch 4 ,mem_timeup -0x7e8e 036656 iforce timeup -0x7e8f 036657 call pop_stack_rega_b_c -0x7e90 036658 fetch 2 ,mem_contw -0x7e91 036659 iforce contw -0x7e92 036660 fetch 2 ,mem_contr -0x7e93 036661 iforce contr -0x7e94 036662 rtn -: 036664 pop_stack_rega_b_c: -0x7e95 036665 fetch 4 ,mem_rega -0x7e96 036666 iforce rega -0x7e97 036667 fetch 4 ,mem_regb -0x7e98 036668 iforce regb -0x7e99 036669 fetch 3 ,mem_regc -0x7e9a 036670 iforce regc -0x7e9b 036671 rtn -: 036673 get_contw: -0x7e9c 036674 fetch 2 ,mem_contw -0x7e9d 036675 copy pdata ,contw -0x7e9e 036676 rtn -: 036677 get_contr: -0x7e9f 036678 fetch 2 ,mem_contr -0x7ea0 036679 copy pdata ,contr -0x7ea1 036680 rtn -: 036681 store_contw: -0x7ea2 036682 copy contw ,pdata -0x7ea3 036683 store 2 ,mem_contw -0x7ea4 036684 rtn -: 036685 store_contr: -0x7ea5 036686 copy contr ,pdata -0x7ea6 036687 store 2 ,mem_contr -0x7ea7 036688 rtn -: 036692 save_cont_pointers: -0x7ea8 036693 copy contw ,pdata -0x7ea9 036694 store 2 ,mem_hold_contw -0x7eaa 036695 copy contr ,pdata -0x7eab 036696 store 2 ,mem_hold_contr -0x7eac 036697 rtn -: 036698 load_cont_pointers: -0x7ead 036699 fetch 2 ,mem_hold_contw -0x7eae 036700 copy pdata ,contw -0x7eaf 036701 fetch 2 ,mem_hold_contr -0x7eb0 036702 copy pdata ,contr -0x7eb1 036703 rtn -: 036705 memcpy96: -0x7eb2 036706 call memcpy32 -: 036707 memcpy64: -0x7eb3 036708 call memcpy32 -0x7eb4 036709 branch memcpy32 -: 036710 memcpy12: -0x7eb5 036711 call memcpy8 -: 036712 memcpy4: -0x7eb6 036713 ifetch 4 ,contr -0x7eb7 036714 istore 4 ,contw -0x7eb8 036715 rtn -: 036716 memcpy8: -0x7eb9 036717 ifetch 8 ,contr -0x7eba 036718 istore 8 ,contw -0x7ebb 036719 rtn -: 036721 memcpy48: -0x7ebc 036722 call memcpy16 -: 036723 memcpy32: -0x7ebd 036724 call memcpy8 -: 036725 memcpy24: -0x7ebe 036726 call memcpy8 -: 036727 memcpy16: -0x7ebf 036728 call memcpy8 -0x7ec0 036729 branch memcpy8 -: 036733 delay_10ms: -0x7ec1 036734 arg 10 ,loopcnt -: 036735 delay_ms_wait: -0x7ec2 036736 nop 12000 -0x7ec3 036737 loop delay_ms_wait -0x7ec4 036738 rtn -: 036740 bn_zero: -0x7ec5 036741 force 3 ,loopcnt -: 036742 memset0: -0x7ec6 036743 force 0 ,pdata -: 036744 memset8: -0x7ec7 036745 istore 8 ,contw -0x7ec8 036746 loop memset8 -0x7ec9 036747 rtn -: 036749 memset0_8: -0x7eca 036750 force 0 ,pdata -0x7ecb 036751 istore 8 ,contw -0x7ecc 036752 rtn -: 036753 memset0_4: -0x7ecd 036754 force 0 ,pdata -0x7ece 036755 istore 4 ,contw -0x7ecf 036756 rtn -: 036758 clear_mem_256: -0x7ed0 036759 force 4 ,loopcnt -0x7ed1 036760 branch memset0 -: 036761 clear_mem_512: -0x7ed2 036762 force 8 ,loopcnt -0x7ed3 036763 branch memset0 -: 036765 clear_mem: -0x7ed4 036766 deposit loopcnt -0x7ed5 036767 rtn blank -0x7ed6 036768 setarg 0 -: 036769 clear_mem_loop: -0x7ed7 036770 istore 1 ,contw -0x7ed8 036771 loop clear_mem_loop -0x7ed9 036772 rtn -: 036775 clear_temp_block: -0x7eda 036776 arg 32 ,loopcnt -0x7edb 036777 arg mem_temp_block0 ,contw -0x7edc 036778 branch clear_mem -: 036780 xor_loop: -0x7edd 036781 ifetch 4 ,regc -0x7ede 036782 ifetcht 4 ,rega -0x7edf 036783 ixor temp ,pdata -0x7ee0 036784 istore 4 ,contw -0x7ee1 036785 increase 4 ,rega -0x7ee2 036786 increase 4 ,regc -0x7ee3 036787 loop xor_loop -0x7ee4 036788 rtn -: 036792 inverse_data: -0x7ee5 036793 bpatchx patch3f_3 ,mem_patch3f -0x7ee6 036794 copy loopcnt ,pdata -0x7ee7 036795 sub pdata ,1 ,null -0x7ee8 036796 rtn positive -0x7ee9 036797 iadd rega ,regb -0x7eea 036798 increase -1 ,regb -0x7eeb 036799 rshift loopcnt ,loopcnt -: 036800 inverse_loop: -0x7eec 036801 ifetcht 1 ,rega -0x7eed 036802 ifetch 1 ,regb -0x7eee 036803 istore 1 ,rega -0x7eef 036804 istoret 1 ,regb -0x7ef0 036805 increase -1 ,regb -0x7ef1 036806 increase 1 ,rega -0x7ef2 036807 loop inverse_loop -0x7ef3 036808 rtn -: 036811 memcpy_fast: -0x7ef4 036812 deposit loopcnt -0x7ef5 036813 rtn blank -: 036814 memcpy_fast_loop: -0x7ef6 036815 increase -8 ,loopcnt -0x7ef7 036816 call memcpy8 ,positive -0x7ef8 036817 rtn zero -0x7ef9 036818 branch memcpy_fast_loop ,positive -0x7efa 036819 increase 8 ,loopcnt -: 036820 memcpy_fast_loop_four: -0x7efb 036821 increase -4 ,loopcnt -0x7efc 036822 call memcpy4 ,positive -0x7efd 036823 rtn zero -0x7efe 036824 branch memcpy_fast_loop_four ,positive -0x7eff 036825 increase 4 ,loopcnt -0x7f00 036826 branch memcpy -: 036828 memcpy: -0x7f01 036829 deposit loopcnt -0x7f02 036830 rtn blank -: 036831 memcpy_loop: -0x7f03 036832 ifetch 1 ,contr -0x7f04 036833 istore 1 ,contw -0x7f05 036834 loop memcpy_loop -0x7f06 036835 rtn -: 036837 timer_stop: -0x7f07 036838 setarg 0 -: 036839 timer_init: -0x7f08 036840 rshift clkn_bt ,temp -0x7f09 036841 storet 4 ,mem_last_clkn -0x7f0a 036842 arg mem_timers ,contw -0x7f0b 036843 iforce temp -0x7f0c 036844 lshift queue ,pdata -0x7f0d 036845 iadd contw ,contw -0x7f0e 036846 istoret 2 ,contw -0x7f0f 036847 bpatchx patch3f_4 ,mem_patch3f -0x7f10 036848 rtn -: 036850 timer_check_timeout: -0x7f11 036851 arg 0x800 ,timeup -0x7f12 036852 lshift16 timeup ,timeup -0x7f13 036853 iadd timeup ,pdata -0x7f14 036854 rtn -: 036857 timer_reinit: -0x7f15 036858 arg 0 ,queue -: 036859 timer_check: -0x7f16 036860 bpatchx patch3f_5 ,mem_patch3f -0x7f17 036861 fetcht 4 ,mem_last_clkn -0x7f18 036862 rshift clkn_bt ,pdata -0x7f19 036863 store 4 ,mem_last_clkn -0x7f1a 036864 isub temp ,null -0x7f1b 036865 ncall timer_check_timeout ,positive -0x7f1c 036866 isub temp ,timeup -0x7f1d 036867 copy timeup ,temp -0x7f1e 036868 arg mem_timers ,contr -0x7f1f 036869 copy contr ,contw -0x7f20 036870 arg 16 ,loopcnt -: 036871 timer_loop: -0x7f21 036872 ifetch 2 ,contr -0x7f22 036873 isub temp ,pdata -0x7f23 036874 branch timer_counting ,positive -0x7f24 036875 force 0 ,pdata -: 036876 timer_counting: -0x7f25 036877 istore 2 ,contw -0x7f26 036878 loop timer_loop -0x7f27 036879 arg mem_timers ,contr -0x7f28 036880 lshift queue ,pdata -0x7f29 036881 iadd contr ,contr -0x7f2a 036882 ifetch 2 ,contr -0x7f2b 036883 rtn -: 036888 clk_add: -0x7f2c 036889 iadd temp ,temp -0x7f2d 036890 copy temp ,loopcnt -0x7f2e 036891 setarg 3750 -0x7f2f 036892 isub loopcnt ,pdata -0x7f30 036893 rtn positive -0x7f31 036894 sub pdata ,0 ,pdata -0x7f32 036895 rshift16 temp ,temp -0x7f33 036896 increase 1 ,temp -0x7f34 036897 lshift16 temp ,temp -0x7f35 036898 ior temp ,temp -0x7f36 036899 rtn -: 036901 clk_diff_rt: -0x7f37 036902 call clk_diff -0x7f38 036903 branch clk2rt -: 036906 clk_diff: -0x7f39 036907 disable user -0x7f3a 036908 isub temp ,pdata -0x7f3b 036909 branch clk_diff_pos ,positive -0x7f3c 036910 enable user -0x7f3d 036911 sub pdata ,0 ,pdata -: 036912 clk_diff_pos: -0x7f3e 036913 rtnbit0 15 -0x7f3f 036914 arg -61786 ,temp -0x7f40 036915 iadd temp ,pdata -0x7f41 036916 set0 64 ,pdata -0x7f42 036917 rtn -: 036919 clk2rt: -0x7f43 036920 iforce contr -0x7f44 036921 rshift16 pdata ,pdata -0x7f45 036922 arg 3750 ,temp -0x7f46 036923 imul32 temp ,pdata -0x7f47 036924 iadd contr ,pdata -0x7f48 036925 rtn -: 036928 clk2lpo: -0x7f49 036929 lshift8 pdata ,pdata -0x7f4a 036930 lshift4 pdata ,pdata -0x7f4b 036931 fetcht 3 ,mem_clks_per_lpo -0x7f4c 036932 idiv temp -0x7f4d 036933 call wait_div_end -0x7f4e 036934 quotient temp -0x7f4f 036935 rtn -: 036938 clk2bt: -0x7f50 036939 arg 3750 ,temp -0x7f51 036940 idiv temp -0x7f52 036941 call wait_div_end -0x7f53 036942 quotient pdata -0x7f54 036943 lshift16 pdata ,pdata -: 036944 clk2bt_next: -0x7f55 036945 remainder temp -0x7f56 036946 ior temp ,temp -0x7f57 036947 rtn -: 036954 string2dec_from_uart: -0x7f58 036955 arg 0 ,temp -: 036956 string2dec_from_uart_done: -0x7f59 036957 copy temp ,regc -0x7f5a 036958 ifetch 1 ,contru -0x7f5b 036959 call uchar2dialog -0x7f5c 036960 copy regc ,temp -0x7f5d 036961 call swap -0x7f5e 036962 arg 10 ,regb -0x7f5f 036963 imul32 regb ,pdata -0x7f60 036964 iadd temp ,pdata -0x7f61 036965 copy pdata ,temp -0x7f62 036966 loop string2dec_from_uart_done -0x7f63 036967 rtn -: 036971 uchar2dialog: -0x7f64 036972 arg 0x3a ,temp -0x7f65 036973 isub temp ,null -0x7f66 036974 nbranch uchar2dialog_number ,positive -0x7f67 036975 arg 0x61 ,temp -0x7f68 036976 isub temp ,null -0x7f69 036977 branch uchar2dialog_a2f ,positive -0x7f6a 036978 arg 0x37 ,temp -0x7f6b 036979 isub temp ,pdata -0x7f6c 036980 rtn -: 036981 uchar2dialog_number: -0x7f6d 036982 arg 0x30 ,temp -0x7f6e 036983 isub temp ,pdata -0x7f6f 036984 rtn -: 036985 uchar2dialog_a2f: -0x7f70 036986 arg 0x57 ,temp -0x7f71 036987 isub temp ,pdata -0x7f72 036988 rtn -: 036990 pn9: -0x7f73 036991 copy temp ,alarm -0x7f74 036992 setarg 0x1ff -0x7f75 036993 force 0 ,regb -: 036994 pn9_loop: -0x7f76 036995 rshift3 pdata ,rega -0x7f77 036996 rshift rega ,rega -0x7f78 036997 ixor rega ,rega -0x7f79 036998 isolate1 0 ,rega -0x7f7a 036999 setflag true ,9 ,pdata -0x7f7b 037000 rshift temp ,temp -0x7f7c 037001 isolate1 0 ,pdata -0x7f7d 037002 setflag true ,7 ,temp -0x7f7e 037003 rshift pdata ,pdata -0x7f7f 037004 increase 1 ,regb -0x7f80 037005 compare 0 ,regb ,0x7 -0x7f81 037006 nbranch pn9_loop ,true -0x7f82 037007 istoret 1 ,contw -0x7f83 037008 loop pn9_loop -0x7f84 037009 copy alarm ,temp -0x7f85 037010 rtn -: 037013 wait_div_end: -0x7f86 037014 rtn modone -0x7f87 037015 branch wait_div_end -: 037025 compare_loop: -: 037026 string_compare: -0x7f88 037027 ifetch 1 ,rega -0x7f89 037028 ifetcht 1 ,regb -0x7f8a 037029 isub temp ,null -0x7f8b 037030 nrtn zero -0x7f8c 037031 increase 1 ,rega -0x7f8d 037032 increase 1 ,regb -0x7f8e 037033 loop string_compare -0x7f8f 037034 force 0 ,null -0x7f90 037035 rtn -: 037038 ceiling: -0x7f91 037039 isub temp ,null -0x7f92 037040 nrtn positive -0x7f93 037041 deposit temp -0x7f94 037042 rtn -: 037044 swap: -0x7f95 037045 iadd temp ,pdata -0x7f96 037046 isub temp ,temp -0x7f97 037047 isub temp ,pdata -0x7f98 037048 rtn -: 037050 clean_mem: -0x7f99 037051 arg 0x200 ,loopcnt -0x7f9a 037052 arg 0x4000 ,contw -0x7f9b 037053 branch memset0 -: 037056 callback_func: -0x7f9c 037057 rtn blank -0x7f9d 037058 copy pdata ,pc -: 037061 wait_uarttx: -0x7f9e 037062 hfetch 2 ,core_uart_txitems -0x7f9f 037063 nbranch wait_uarttx ,blank -0x7fa0 037064 rtn -: 037066 ice_break: -0x7fa1 037067 jam 0x1 ,core_ice_ctrl -0x7fa2 037068 rtn -: 037070 ice_setbp: -0x7fa3 037071 hstore 2 ,core_ice_break0 -0x7fa4 037072 hfetch 1 ,core_ice_ctrl -0x7fa5 037073 set1 4 ,pdata -0x7fa6 037074 hstore 1 ,core_ice_ctrl -0x7fa7 037075 rtn -: 037076 ice_setbp2: -0x7fa8 037077 hstore 2 ,core_ice_break1 -0x7fa9 037078 hfetch 1 ,core_ice_ctrl -0x7faa 037079 set1 6 ,pdata -0x7fab 037080 hstore 1 ,core_ice_ctrl -0x7fac 037081 rtn -: 037083 ice_set_write_bp: -0x7fad 037084 hstore 2 ,core_ice_break0 -0x7fae 037085 jam 0x30 ,core_ice_ctrl -0x7faf 037086 rtn -: 037090 test_enable_white: -0x7fb0 037091 hfetch 1 ,core_config -0x7fb1 037092 set0 whiteoff_bit ,pdata -0x7fb2 037093 hstore 1 ,core_config -0x7fb3 037094 rtn -: 037096 check_uart_tx_buff: -0x7fb4 037097 hfetch 2 ,core_uart_txitems -0x7fb5 037098 arg uart_air_control_threshold ,temp -: 037099 pdata_sub_temp: -0x7fb6 037100 isub temp ,null -0x7fb7 037101 rtn -: 037107 fifo_in: -0x7fb8 037108 bpatchx patch3f_6 ,mem_patch3f -0x7fb9 037109 ifetcht util_fifo_len ,rega -0x7fba 037110 and temp ,0xff ,pdata -0x7fbb 037111 nbranch fifo_in_push ,blank -0x7fbc 037112 rshift8 temp ,pdata -0x7fbd 037113 istore util_fifo_len ,rega -: 037114 fifo_in_push: -0x7fbe 037115 increase util_fifo_len + util_fifo_offset ,rega -0x7fbf 037116 ifetch 1 ,rega -0x7fc0 037117 nbranch assert ,blank -0x7fc1 037118 fetch 1 ,mem_fifo_temp -0x7fc2 037119 istore 1 ,rega -0x7fc3 037120 rtn -: 037125 fifo_out: -0x7fc4 037126 bpatchx patch3f_7 ,mem_patch3f -0x7fc5 037127 arg util_fifo_len ,loopcnt -0x7fc6 037128 ifetch util_fifo_len ,rega -0x7fc7 037129 rtn blank -: 037130 fifo_out_loop: -0x7fc8 037131 ifetch 1 ,rega -0x7fc9 037132 nbranch fifo_out_end ,blank -0x7fca 037133 increase 1 ,rega -0x7fcb 037134 loop fifo_out_loop -0x7fcc 037135 branch assert -: 037136 fifo_out_end: -0x7fcd 037137 arg 0 ,temp -0x7fce 037138 istoret 1 ,rega -0x7fcf 037139 rtn -: 037144 fifo_is_empty: -0x7fd0 037145 ifetch util_fifo_len ,rega -0x7fd1 037146 rtn -: 037151 fifo_is_full: -0x7fd2 037152 ifetch 1 ,rega -0x7fd3 037153 rtn -: 037156 fifo_is_near_full: -0x7fd4 037157 ifetch 2 ,rega -0x7fd5 037158 rtn -: 037162 fifo_content_count: -0x7fd6 037163 arg 0 ,temp -: 037164 fifo_content_count_loop: -0x7fd7 037165 fetch 1 ,contr -0x7fd8 037166 loop fifo_content_count_loop ,blank -0x7fd9 037167 increase 1 ,temp -0x7fda 037168 loop fifo_content_count_loop -0x7fdb 037169 copy temp ,pdata -0x7fdc 037170 rtn -: 037172 not_greater_than: -0x7fdd 037173 isub temp ,null -0x7fde 037174 nrtn positive -0x7fdf 037175 copy temp ,pdata -0x7fe0 037176 rtn -: 037179 disable_positive: -0x7fe1 037180 force -1 ,null -0x7fe2 037181 rtn -: 037182 enable_positive: -: 037183 disable_zero: -0x7fe3 037184 force 1 ,null -0x7fe4 037185 rtn -: 037186 enable_zero: -0x7fe5 037187 force 0 ,null -0x7fe6 037188 rtn -: 037190 enable_user: -0x7fe7 037191 enable user -0x7fe8 037192 rtn -: 037194 disable_user: -0x7fe9 037195 disable user -0x7fea 037196 rtn -: 037198 enable_user2: -0x7feb 037199 enable user2 -0x7fec 037200 rtn -: 037202 disable_user2: -0x7fed 037203 disable user2 -0x7fee 037204 rtn -: 037206 disable_blank: -0x7fef 037207 setarg 1 -0x7ff0 037208 rtn -: 037210 enable_blank: -0x7ff1 037211 setarg 0 -0x7ff2 037212 rtn -: 037215 reverse_byte: -0x7ff3 037216 copy loopcnt ,pdata -0x7ff4 037217 rtn blank -0x7ff5 037218 copy contr ,pdata -0x7ff6 037219 iadd loopcnt ,pdata -0x7ff7 037220 increase -1 ,pdata -0x7ff8 037221 copy pdata ,contr -: 037222 reverse_loop: -0x7ff9 037223 ifetch 1 ,contr -0x7ffa 037224 increase -2 ,contr -0x7ffb 037225 istore 1 ,contw -0x7ffc 037226 loop reverse_loop -0x7ffd 037227 rtn +: 003247 start: +0x2000 003248 call lpmstate +: 003250 soft_reset: +0x2001 003251 bpatch patch00_0 ,mem_patch00 +0x2002 003252 clear_stack +0x2003 003253 call spi_ncs_gpio_init +0x2004 003254 call initialize_radio +0x2005 003255 call iicd_init_12m +0x2006 003256 call init_param +0x2007 003257 call l2cap_init +0x2008 003258 bpatch patch00_1 ,mem_patch00 +0x2009 003259 call rfcomm_init +0x200a 003260 call init_lmp +0x200b 003261 call ui_init +0x200c 003262 call app_init +0x200d 003263 ncall load_chip_option ,wake +0x200e 003264 bpatch patch00_2 ,mem_patch00 +0x200f 003265 call app_lpm_init ,wake +0x2010 003266 call publickey_init +0x2011 003267 call lpm_recover_clk ,wake +: 003268 main_loop: +0x2012 003269 bpatch patch00_3 ,mem_patch00 +0x2013 003270 call sp_calc_sequence +0x2014 003271 call sp_calc_sequence_256 +0x2015 003272 call sp_calc_sequence_256_check +0x2016 003273 call le_dispatch +0x2017 003274 bpatch patch00_4 ,mem_patch00 +0x2018 003275 call idle_dispatch +0x2019 003276 call app_process_idle +0x201a 003277 call inquiry_dispatch +0x201b 003278 call inquiry_scan_dispatch +0x201c 003279 call page_scan_dispatch +0x201d 003280 call connection_dispatch +0x201e 003281 call lpm_dispatch +0x201f 003282 call g24_dispatch +0x2020 003283 branch main_loop +: 003285 connection_dispatch: +0x2021 003286 call connection_incontext +0x2022 003287 rtnmark0 mark_context +0x2023 003288 set0 mark_context ,mark +0x2024 003289 call context_save +0x2025 003290 branch le_disable +: 003292 connection_incontext: +0x2026 003293 bpatch patch00_5 ,mem_patch00 +0x2027 003294 call context_search_insniff +0x2028 003295 nbranch connection_nosniff ,zero +0x2029 003296 call context_load +0x202a 003297 add rega ,coffset_mode ,contr +0x202b 003298 ifetch 1 ,contr +0x202c 003299 bbit1 mode_le ,le_conn_dispatch +0x202d 003300 bbit1 mode_master ,master_dispatch +0x202e 003301 branch slave_dispatch +: 003302 connection_nosniff: +0x202f 003303 call context_get_next +0x2030 003304 copy loopcnt ,null +0x2031 003305 rtn zero +0x2032 003306 call context_load +0x2033 003307 fetch 1 ,mem_state +0x2034 003308 bbit1 state_inpage ,master_page +0x2035 003309 fetch 1 ,mem_mode +0x2036 003310 bbit1 mode_master ,master_dispatch +0x2037 003311 branch slave_dispatch +: 003319 idle_dispatch: +0x2038 003320 fetch 1 ,mem_hci_cmd +0x2039 003321 rtn blank +0x203a 003322 beq hci_cmd_inquiry ,idle_inquiry +0x203b 003323 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel +0x203c 003324 beq hci_cmd_remote_name_req ,idle_remote_name_req +0x203d 003325 beq hci_cmd_create_conn ,idle_create_conn +0x203e 003326 beq hci_cmd_le_create_conn ,idle_le_create_conn +0x203f 003327 call context_search_conn_handle +0x2040 003328 rtn zero +0x2041 003329 call context_search_plap +0x2042 003330 rtn zero +: 003331 idle_exit: +0x2043 003332 jam 0 ,mem_hci_cmd +0x2044 003333 rtn +: 003335 idle_le_create_conn: +0x2045 003336 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn +0x2046 003337 jam 0 ,mem_hci_cmd +0x2047 003338 rtn +: 003340 idle_inquiry: +0x2048 003341 set1 mark_inquiry_on ,mark +0x2049 003342 set0 mark_inquiry_trainb ,mark +0x204a 003343 jam param_ninquiry ,mem_ninqy_index +0x204b 003344 jam 31 ,mem_nfreq_index_inq +0x204c 003345 branch idle_exit +: 003347 idle_inquiry_cancel: +0x204d 003348 set0 mark_inquiry_on ,mark +0x204e 003349 force 0 ,stop_watch +0x204f 003350 branch idle_exit +: 003352 idle_remote_name_req: +0x2050 003353 call context_search_plap +0x2051 003354 rtn zero +0x2052 003355 force lmp_name_req ,temp +0x2053 003356 jam 5 ,mem_nameres_cnt +0x2054 003357 branch idle_start_page +: 003359 idle_create_conn: +0x2055 003360 bpatch patch00_6 ,mem_patch00 +: 003361 idle_create_conn_device: +0x2056 003362 fetch 6 ,mem_hci_plap +0x2057 003363 branch idle_exit ,blank +0x2058 003364 jam reconnect_hid ,memui_reconnect_mode +0x2059 003366 jam conn_sm_wait_features_res ,mem_conn_sm +0x205a 003367 branch idle_create_conn_cont +: 003369 idle_create_conn_cont: +0x205b 003370 force lmp_version_req ,temp +: 003371 idle_start_page: +0x205c 003372 bpatch patch00_7 ,mem_patch00 +0x205d 003373 fetch 1 ,mem_page_mode +0x205e 003374 branch idle_page_mode_r0 ,blank +0x205f 003375 lshift3 pdata ,pdata +0x2060 003376 lshift4 pdata ,pdata +0x2061 003377 increase -1 ,pdata +: 003378 idle_page_mode_r0: +0x2062 003379 store 1 ,mem_npage +0x2063 003380 store 1 ,mem_npage_index +0x2064 003381 jam 31 ,mem_nfreq_index_page +0x2065 003382 set0 mark_page_trainb ,mark +0x2066 003383 call context_new +0x2067 003384 nbranch idle_page_fail ,zero +0x2068 003385 call get_free_amaddr +0x2069 003386 store 1 ,mem_amaddr +0x206a 003387 storet 1 ,mem_lmo_opcode2 +0x206b 003388 fetch 6 ,mem_hci_plap +0x206c 003389 store 6 ,mem_plap +0x206d 003390 bpatch patch01_0 ,mem_patch01 +0x206e 003391 call timer_reinit +0x206f 003392 force 0 ,pdata +0x2070 003393 compare lmp_name_req ,temp ,0xff +0x2071 003394 nsetflag true ,state_init_seq ,pdata +0x2072 003395 set1 state_inpage ,pdata +0x2073 003396 store 1 ,mem_state +0x2074 003397 jam bt_evt_reconn_started ,mem_fifo_temp +0x2075 003398 call ui_ipc_send_event +0x2076 003399 force 0 ,pdata +0x2077 003400 setflag true ,smap_name_req ,pdata +0x2078 003401 store 1 ,mem_state_map +0x2079 003402 setarg 0 +0x207a 003403 set1 mode_master ,pdata +0x207b 003404 store 1 ,mem_mode +0x207c 003405 enable master +0x207d 003406 call context_save +0x207e 003407 disable master +0x207f 003408 force page_length_timer ,queue +0x2080 003409 fetch 2 ,mem_page_to +0x2081 003410 call timer_init +0x2082 003411 branch idle_exit +: 003412 idle_page_fail: +0x2083 003413 bpatch patch01_1 ,mem_patch01 +0x2084 003414 fetch 6 ,mem_hci_plap +0x2085 003415 store 6 ,mem_plap +0x2086 003416 compare lmp_name_req ,temp ,0xff +0x2087 003417 branch idle_name_fail ,true +0x2088 003418 branch idle_exit +: 003419 idle_name_fail: +0x2089 003420 arg mem_tmp_buffer ,contw +0x208a 003421 arg 8 ,loopcnt +0x208b 003422 call memset0 +0x208c 003423 jam bt_evt_reconn_failed ,mem_fifo_temp +0x208d 003424 call ui_ipc_send_event +0x208e 003425 branch idle_exit +: 003432 inquiry_dispatch: +0x208f 003433 rtnmark0 mark_inquiry_on +0x2090 003434 force inquiry_length_timer ,queue +0x2091 003435 call timer_check +0x2092 003436 nsetflag blank ,mark_inquiry_on ,mark +0x2093 003437 nbranch inquiry_start ,blank +0x2094 003438 rtn +: 003442 inquiry_start: +0x2095 003443 bpatch patch01_2 ,mem_patch01 +0x2096 003444 fetcht 2 ,mem_inq_window +0x2097 003445 force 4 ,queue +0x2098 003446 call sniff_check_window +0x2099 003447 rtn user +0x209a 003448 call afh_clear +0x209b 003449 force 0 ,freq_mode +: 003450 inquiry_restart: +0x209c 003451 rtn timeout +0x209d 003452 set0 mark_fhs_already_good ,mark +0x209e 003453 set0 mark_fhs_eir ,mark +: 003454 inquiry_rx_restart: +0x209f 003455 add clkn_bt ,1 ,bt_clk +0x20a0 003456 isolate1 mark_inquiry_trainb ,mark +0x20a1 003457 setflag true ,2 ,freq_mode +0x20a2 003458 compare 0x00 ,bt_clk ,0x02 +0x20a3 003459 nbranch inquiry_receive ,true +: 003461 inquiry_transmit: +0x20a4 003462 bpatch patch01_3 ,mem_patch01 +0x20a5 003463 fetch 1 ,mem_inquiry_transmit +0x20a6 003464 increase 1 ,pdata +0x20a7 003465 store 1 ,mem_inquiry_transmit +0x20a8 003466 call fetch_giac +0x20a9 003467 call tx_radio_freq +0x20aa 003468 call fetch_diac +0x20ab 003469 call start_transmitter +0x20ac 003470 call start_tx_native +0x20ad 003471 call send_access_word +0x20ae 003472 call end_of_packet +0x20af 003473 call inquiry_check_train +0x20b0 003474 branch inquiry_restart +: 003476 inquiry_check_train: +0x20b1 003477 bpatch patch01_4 ,mem_patch01 +0x20b2 003478 fetch 1 ,mem_nfreq_index_inq +0x20b3 003479 increase -1 ,pdata +0x20b4 003480 store 1 ,mem_nfreq_index_inq +0x20b5 003481 rtn positive +0x20b6 003482 jam 31 ,mem_nfreq_index_inq +0x20b7 003483 fetch 1 ,mem_ninqy_index +0x20b8 003484 increase -1 ,pdata +0x20b9 003485 store 1 ,mem_ninqy_index +0x20ba 003486 rtn positive +0x20bb 003487 setflip mark_inquiry_trainb ,mark +0x20bc 003488 jam param_ninquiry ,mem_ninqy_index +0x20bd 003489 rtn +: 003491 inquiry_receive: +0x20be 003492 bpatch patch01_5 ,mem_patch01 +0x20bf 003493 call fetch_giac +0x20c0 003494 call rx_radio_freq +0x20c1 003495 call fetch_diac +0x20c2 003496 call start_rx_native +0x20c3 003497 call start_receiver +0x20c4 003498 call wait_access_clkn_rt +0x20c5 003499 branch inquiry_sync ,sync +0x20c6 003500 call inquiry_check_train +0x20c7 003501 branch inquiry_rx_restart +: 003502 inquiry_sync: +0x20c8 003503 bpatch patch01_6 ,mem_patch01 +0x20c9 003504 call save_rssi +0x20ca 003505 call scan_mode_whiten +0x20cb 003506 call receive_packet_whitened +0x20cc 003507 set0 mark_rxbuf_inuse ,mark +0x20cd 003508 rtnmark0 mark_fhs_already_good +: 003509 inquiry_receive_rtn: +0x20ce 003510 bpatch patch01_7 ,mem_patch01 +: 003511 inquiry_receive_eir_rtn: +0x20cf 003512 fetch 1 ,mem_inquiry_rcv +0x20d0 003513 increase 1 ,pdata +0x20d1 003514 store 1 ,mem_inquiry_rcv +0x20d2 003515 rtn +: 003523 master_page: +0x20d3 003524 bpatch patch02_0 ,mem_patch02 +0x20d4 003525 enable master +0x20d5 003526 enable clknt +0x20d6 003527 fetch 2 ,mem_page_interval +0x20d7 003528 branch master_page_no_interval ,blank +0x20d8 003529 force page_interval_timer ,queue +0x20d9 003530 call timer_check +0x20da 003531 nrtn blank +: 003532 master_page_no_interval: +0x20db 003533 bpatch patch02_1 ,mem_patch02 +0x20dc 003534 fetcht 2 ,mem_page_window +0x20dd 003535 force 40 ,queue +0x20de 003536 call sniff_check_window +0x20df 003537 branch page_exit ,user +0x20e0 003538 force page_length_timer ,queue +0x20e1 003539 call timer_check +0x20e2 003540 nbranch page_start ,blank +0x20e3 003541 fetch 1 ,mem_state_map +0x20e4 003542 bbit1 smap_name_req ,master_npage_timeout +0x20e5 003543 branch master_page_timeout +: 003544 master_npage_timeout: +0x20e6 003545 arg mem_tmp_buffer ,contw +0x20e7 003546 arg 8 ,loopcnt +0x20e8 003547 call memset0 +: 003548 master_page_timeout: +0x20e9 003549 bpatch patch02_2 ,mem_patch02 +0x20ea 003550 jam 0 ,mem_state +0x20eb 003551 call init_lmp_work +0x20ec 003552 jam 0 ,memui_reconnect_mode +0x20ed 003553 jam bt_evt_reconn_page_timeout ,mem_fifo_temp +0x20ee 003554 call ui_ipc_send_event +0x20ef 003555 branch page_exit +: 003557 page_start: +0x20f0 003558 bpatch patch02_3 ,mem_patch02 +0x20f1 003559 force 0 ,timeup +0x20f2 003560 until clkn_rt ,meet +0x20f3 003561 fetch 1 ,mem_page_clk +0x20f4 003562 increase -1 ,pdata +0x20f5 003563 ixor clkn_bt ,pdata +0x20f6 003564 compare 0 ,pdata ,3 +0x20f7 003565 nbranch page_start ,true +0x20f8 003566 deposit am_addr +0x20f9 003567 store 1 ,mem_fhs_am_addr +0x20fa 003568 force 0 ,n_tx_slot +0x20fb 003569 force 0 ,freq_mode +: 003571 page_restart: +0x20fc 003572 bpatch patch02_4 ,mem_patch02 +0x20fd 003573 branch page_exit ,timeout +0x20fe 003574 call fetch_page_bt_adr +0x20ff 003575 arg param_rf_setup ,timeup +0x2100 003576 until clkn_rt ,meet +: 003577 page_rx_restart: +0x2101 003578 bpatch patch02_5 ,mem_patch02 +0x2102 003579 fetch 4 ,mem_page_clk +0x2103 003580 iforce bt_clk +0x2104 003581 increase 1 ,pdata +0x2105 003582 store 4 ,mem_page_clk +0x2106 003583 isolate1 mark_page_trainb ,mark +0x2107 003584 setflag true ,2 ,freq_mode +0x2108 003585 compare 0x00 ,bt_clk ,0x02 +0x2109 003586 nbranch page_receive ,true +0x210a 003587 fetch 1 ,mem_page_transmit +0x210b 003588 increase 1 ,pdata +0x210c 003589 store 1 ,mem_page_transmit +0x210d 003590 call tx_radio_freq +0x210e 003591 call start_transmitter +0x210f 003592 call start_tx_native +0x2110 003593 call send_access_word +0x2111 003594 call end_of_packet +0x2112 003595 call page_check_train +0x2113 003596 branch page_restart +: 003597 page_exit: +0x2114 003598 bpatch patch02_6 ,mem_patch02 +0x2115 003599 disable master +0x2116 003600 fetch 2 ,mem_page_interval +0x2117 003601 rtn blank +0x2118 003602 force page_interval_timer ,queue +0x2119 003603 branch timer_init +: 003605 page_check_train: +0x211a 003606 bpatch patch02_7 ,mem_patch02 +0x211b 003607 fetch 1 ,mem_nfreq_index_page +0x211c 003608 increase -1 ,pdata +0x211d 003609 store 1 ,mem_nfreq_index_page +0x211e 003610 rtn positive +0x211f 003611 jam 31 ,mem_nfreq_index_page +0x2120 003612 fetch 1 ,mem_npage_index +0x2121 003613 increase -1 ,pdata +0x2122 003614 store 1 ,mem_npage_index +0x2123 003615 rtn positive +0x2124 003616 setflip mark_page_trainb ,mark +0x2125 003617 fetch 1 ,mem_npage +0x2126 003618 store 1 ,mem_npage_index +0x2127 003619 rtn +: 003621 page_receive: +0x2128 003622 bpatch patch03_0 ,mem_patch03 +0x2129 003623 call rx_radio_freq +0x212a 003624 call start_rx_native +0x212b 003625 call start_receiver +0x212c 003626 call wait_access_clkn_rt +0x212d 003627 branch page_sync ,sync +0x212e 003628 call page_check_train +0x212f 003629 branch page_rx_restart +: 003630 page_sync: +0x2130 003631 call end_of_packet +0x2131 003632 fetch 1 ,mem_page_rcv +0x2132 003633 increase 1 ,pdata +0x2133 003634 store 1 ,mem_page_rcv +0x2134 003635 force 0 ,stop_watch +0x2135 003636 fetch 4 ,mem_page_clk +: 003637 page_send_fhs: +0x2136 003638 bpatch patch03_1 ,mem_patch03 +0x2137 003639 call rf_setup_time_master_slot +0x2138 003640 call fetch_page_bt_adr +0x2139 003641 increase 1 ,n_tx_slot +: 003642 page_send_fhs_continue: +0x213a 003643 and_into 0x1fd ,bt_clk +0x213b 003644 and_into 0x1fc ,freq_mode +0x213c 003645 call tx_radio_freq +0x213d 003646 call start_transmitter +0x213e 003647 call start_tx_native +0x213f 003648 call send_access_word +0x2140 003649 deposit clkn_bt +0x2141 003650 store 4 ,mem_clkn_bt +0x2142 003651 force 0 ,am_addr +0x2143 003652 force type_fhs ,type +0x2144 003653 call scan_mode_whiten +0x2145 003654 call transmit_packet_whitened +: 003655 page_wait_fhs_reply: +0x2146 003656 bpatch patch03_2 ,mem_patch03 +0x2147 003657 call rf_setup_time_slave_slot +0x2148 003658 or_into 0x02 ,bt_clk +0x2149 003659 and_into 0x1fc ,freq_mode +0x214a 003660 call rx_radio_freq +0x214b 003661 call start_rx_native +0x214c 003662 call start_receiver +0x214d 003663 call wait_access_clkn_rt +0x214e 003664 call end_of_packet ,sync +0x214f 003665 branch page_wait_fhs_reply_ok ,sync +0x2150 003666 fetch 1 ,mem_fhs_wait_counter +0x2151 003667 branch page_restart ,blank +0x2152 003668 increase -1 ,pdata +0x2153 003669 store 1 ,mem_fhs_wait_counter +0x2154 003670 branch page_send_fhs +: 003672 page_wait_fhs_reply_ok: +0x2155 003673 bpatch patch03_3 ,mem_patch03 +0x2156 003674 fetch 1 ,mem_page_rcv_fhs +0x2157 003675 increase 1 ,pdata +0x2158 003676 store 1 ,mem_page_rcv_fhs +0x2159 003677 call prepare_newconn +: 003678 master_newconn_loop: +0x215a 003679 call master_newconn_once +0x215b 003680 branch newconn_poll_responded ,sync +0x215c 003681 call new_conn_timeout +0x215d 003682 nbranch master_newconn_loop ,blank +0x215e 003683 branch page_restart +: 003685 newconn_poll_responded: +0x215f 003686 bpatch patch03_4 ,mem_patch03 +0x2160 003687 fetch 1 ,mem_state +0x2161 003688 set0 state_inpage ,pdata +0x2162 003689 store 1 ,mem_state +0x2163 003690 call newconn_init +0x2164 003691 disable master +0x2165 003692 rtn +: 003695 master_dispatch: +0x2166 003696 bpatch patch03_5 ,mem_patch03 +0x2167 003697 enable master +0x2168 003698 enable clknt +0x2169 003699 call role_switch_master +0x216a 003700 rtn user +0x216b 003701 call check_bt_disabled +0x216c 003702 call rf_setup_time_master_slot +0x216d 003703 add clkn_bt ,1 ,bt_clk +0x216e 003704 call fetch_self_bt_adr +0x216f 003705 force 0x03 ,freq_mode +0x2170 003706 call scheduler_tx_l2cap_pkt +0x2171 003707 call prepare_tx +0x2172 003708 call tx_radio_freq +0x2173 003709 call start_transmitter +0x2174 003710 call start_tx_native +0x2175 003711 call send_access_word +0x2176 003712 call transmit_packet +: 003713 master_loop: +0x2177 003714 bpatch patch03_6 ,mem_patch03 +0x2178 003715 call parse_lmp +0x2179 003716 call master_conn_recv_packet +0x217a 003717 nbranch master_notmatch ,match +0x217b 003718 call supervision_flush +0x217c 003719 call parse_l2cap +0x217d 003720 fetch 1 ,mem_master_rcvcnt +0x217e 003721 increase 1 ,pdata +0x217f 003722 store 1 ,mem_master_rcvcnt +: 003723 master_notmatch: +0x2180 003724 bpatch patch03_7 ,mem_patch03 +0x2181 003725 call scheduler_process +0x2182 003726 call check_master_disconnect +0x2183 003727 nrtn master +0x2184 003728 call check_attempt +0x2185 003729 nbranch master_attempt ,blank +: 003730 master_exit: +0x2186 003731 disable master +0x2187 003732 rtn +: 003734 master_attempt: +0x2188 003735 call prepare_tx +0x2189 003736 call master_conn_send_packet +0x218a 003737 branch master_loop +: 003740 check_master_disconnect: +0x218b 003741 branch check_master_match ,match +0x218c 003742 call supervision_update +0x218d 003743 branch master_disconnect ,positive +: 003744 check_master_match: +0x218e 003745 call check_disconnect_timeout +0x218f 003746 nbranch master_disconnect ,user +0x2190 003747 fetch 1 ,mem_state_map +0x2191 003748 rtnbit0 smap_name_req +0x2192 003749 rtnbit1 smap_name_res +0x2193 003750 fetch 1 ,mem_op +0x2194 003751 rtnbit1 op_disconn +0x2195 003752 call conn_timer_expired +0x2196 003753 nrtn blank +0x2197 003754 fetch 1 ,mem_nameres_cnt +0x2198 003755 increase -1 ,pdata +0x2199 003756 store 1 ,mem_nameres_cnt +0x219a 003757 nrtn blank +0x219b 003758 branch lmp_disconnect +: 003760 master_disconnect: +0x219c 003761 bpatch patch04_0 ,mem_patch04 +0x219d 003762 call quit_connection +0x219e 003763 disable master +0x219f 003764 fetch 1 ,mem_state_map +0x21a0 003765 bbit1 smap_name_req ,master_name_disconnect +0x21a1 003766 rtn +: 003768 master_name_disconnect: +0x21a2 003769 fetch 1 ,mem_state_map +0x21a3 003770 rtnbit1 smap_name_res +: 003771 master_name_error: +0x21a4 003772 arg mem_tmp_buffer ,contw +0x21a5 003773 arg 8 ,loopcnt +0x21a6 003774 branch memset0 +: 003776 check_disconnect_timeout: +0x21a7 003777 bpatch patch04_1 ,mem_patch04 +0x21a8 003778 enable user +0x21a9 003779 fetch 1 ,mem_op +0x21aa 003780 rtnbit0 op_disconn +0x21ab 003781 call conn_timer_expired +0x21ac 003782 nrtn blank +0x21ad 003783 branch disable_user +: 003785 conn_timer_expired: +0x21ae 003786 fetch 1 ,mem_conn_timer +0x21af 003787 increase -1 ,pdata +0x21b0 003788 store 1 ,mem_conn_timer +0x21b1 003789 rtn +: 003791 linkkey_ready: +0x21b2 003792 bpatch patch04_2 ,mem_patch04 +0x21b3 003793 fetch 1 ,mem_state +0x21b4 003794 bbit1 state_linkkey ,linkkey_set +0x21b5 003795 fetch 1 ,mem_pairing_auth +0x21b6 003796 branch linkkey_set ,blank +0x21b7 003797 jam defalt_pairing_auth ,mem_pairing_auth +0x21b8 003798 jam bt_evt_linkkey_generate ,mem_fifo_temp +0x21b9 003799 call ui_ipc_send_event +0x21ba 003800 branch linkkey_set +: 003801 linkkey_set: +0x21bb 003802 bpatch patch04_3 ,mem_patch04 +0x21bc 003803 call context_traverse_linkkey +0x21bd 003804 fetch 1 ,mem_state +0x21be 003805 set1 state_linkkey ,pdata +0x21bf 003806 store 1 ,mem_state +0x21c0 003807 jam 1 ,mem_link_key_exists +0x21c1 003808 fetch 1 ,mem_conn_sm +0x21c2 003809 bne conn_sm_pairing ,linkkey_set_continue +: 003810 linkkey_set_continue: +0x21c3 003811 rtn +: 003813 generate_linkkey_continue: +0x21c4 003814 jam pairing_auth ,mem_pairing_auth +: 003815 clear_linkstate: +0x21c5 003816 fetch 1 ,mem_state +0x21c6 003817 set0 state_linkkey ,pdata +0x21c7 003818 store 1 ,mem_state +0x21c8 003819 rtn +: 003823 role_switch_check: +0x21c9 003824 bpatch patch04_4 ,mem_patch04 +0x21ca 003825 disable user +0x21cb 003826 fetch 2 ,mem_tsniff +0x21cc 003827 arg 0xffff ,temp +0x21cd 003828 isub temp ,null +0x21ce 003829 nrtn zero +0x21cf 003830 fetch 4 ,mem_sniff_anchor +0x21d0 003831 branch role_switch_clkn ,clknt +0x21d1 003832 isub clke_bt ,pdata +0x21d2 003833 branch role_switch_clke +: 003834 role_switch_clkn: +0x21d3 003835 isub clkn_bt ,pdata +: 003836 role_switch_clke: +0x21d4 003837 sub pdata ,4 ,null +0x21d5 003838 nrtn positive +0x21d6 003839 force 0 ,pdata +0x21d7 003840 store 2 ,mem_tsniff +0x21d8 003841 branch enable_user +: 003845 role_switch_prepare: +0x21d9 003846 copy pdata ,temp +0x21da 003847 bpatch patch04_5 ,mem_patch04 +0x21db 003848 storet 4 ,mem_sniff_anchor +: 003849 role_switch_prepare0: +0x21dc 003850 jam switch_flag_accept ,mem_switch_flag +0x21dd 003851 setarg 0xffff +0x21de 003852 store 2 ,mem_tsniff +0x21df 003853 jam 1 ,mem_sniff_attempt +0x21e0 003854 rtn +: 003857 role_switch_master: +0x21e1 003858 bpatch patch04_6 ,mem_patch04 +0x21e2 003859 call role_switch_check +0x21e3 003860 nrtn user +0x21e4 003861 disable user +0x21e5 003862 jam param_newconnto ,mem_newconnto_counter +0x21e6 003863 set0 mark_fhs_already_good ,mark +: 003864 roles_waitfhs_loop: +0x21e7 003865 call rf_setup_time_master_slot +0x21e8 003866 call master_recv_packet +0x21e9 003867 bmark1 mark_fhs_already_good ,roles_replyto_fhs +0x21ea 003868 call new_conn_timeout +0x21eb 003869 nbranch roles_waitfhs_loop ,blank +: 003870 role_switch_fail_master: +0x21ec 003871 bpatch patch04_7 ,mem_patch04 +0x21ed 003872 disable user +0x21ee 003873 deposit clkn_bt +0x21ef 003874 store 4 ,mem_next_btclk +0x21f0 003875 enable clknt +0x21f1 003876 enable master +0x21f2 003877 jam bt_evt_switch_fail_master ,mem_fifo_temp +0x21f3 003878 branch ui_ipc_send_event +: 003880 roles_replyto_fhs: +0x21f4 003881 bpatch patch05_0 ,mem_patch05 +0x21f5 003882 call rf_setup_time_slave_slot +0x21f6 003883 arg type_id ,type +0x21f7 003884 call master_send_packet +0x21f8 003885 disable clknt +0x21f9 003886 disable master +0x21fa 003887 call apply_switch_clke +0x21fb 003888 call prepare_newconn +: 003889 roles_newconns_loop: +0x21fc 003890 bpatch patch05_1 ,mem_patch05 +0x21fd 003891 call slave_newconn_once +0x21fe 003892 branch roles_newconns_responded ,match +0x21ff 003893 call new_conn_timeout +0x2200 003894 nbranch roles_newconns_loop ,blank +0x2201 003895 branch role_switch_fail_master +: 003896 roles_newconns_responded: +0x2202 003897 fetch 1 ,mem_mode +0x2203 003898 set0 mode_master ,pdata +0x2204 003899 store 1 ,mem_mode +0x2205 003900 call supervision_flush +0x2206 003901 call calc_clke_offset +0x2207 003902 enable user +0x2208 003903 jam bt_evt_switch_success_master ,mem_fifo_temp +0x2209 003904 branch ui_ipc_send_event +: 003909 context_load: +0x220a 003910 bpatch patch05_2 ,mem_patch05 +0x220b 003911 set1 mark_context ,mark +0x220c 003912 deposit rega +0x220d 003913 store 2 ,mem_context_ptr +0x220e 003914 force context_size ,loopcnt +0x220f 003915 arg mem_le_state ,contw +0x2210 003916 add rega ,coffset_mode ,contr +0x2211 003917 ifetch 1 ,contr +0x2212 003918 copy rega ,contr +0x2213 003919 bbit1 mode_le ,memcpy +0x2214 003920 arg mem_state ,contw +0x2215 003921 call memcpy +0x2216 003922 disable attempt +0x2217 003923 fetch 1 ,mem_amaddr +0x2218 003924 iforce am_addr +0x2219 003925 jam 1 ,mem_current_sniff_attempt +0x221a 003926 branch context_load_master ,master +0x221b 003927 jam 1 ,mem_current_sniff_attempt +: 003928 context_load_master: +0x221c 003929 fetch 1 ,mem_state +0x221d 003930 rtnbit0 state_insniff +0x221e 003931 fetch 1 ,mem_sniff_attempt +0x221f 003932 store 1 ,mem_current_sniff_attempt +0x2220 003933 fetch 1 ,mem_sniff_timeout +0x2221 003934 store 1 ,mem_current_sniff_timeout +0x2222 003935 rtn +: 003937 context_save: +0x2223 003938 bpatch patch05_3 ,mem_patch05 +0x2224 003939 fetch 2 ,mem_context_ptr +0x2225 003940 iforce contw +0x2226 003941 force context_size ,loopcnt +0x2227 003942 arg mem_le_state ,contr +0x2228 003943 branch memcpy ,le +0x2229 003944 arg mem_state ,contr +0x222a 003945 branch memcpy +: 003949 context_get_next: +0x222b 003950 arg context_num ,loopcnt +0x222c 003951 fetcht 1 ,mem_current_context +: 003952 context_get_next_loop: +0x222d 003953 increase 1 ,temp +0x222e 003954 compare context_num ,temp ,0xff +0x222f 003955 nbranch context_get_next_cont ,true +0x2230 003956 arg 0 ,temp +: 003957 context_get_next_cont: +0x2231 003958 storet 1 ,mem_current_context +0x2232 003959 mul32 temp ,context_size ,pdata +0x2233 003960 arg mem_context ,rega +0x2234 003961 iadd rega ,rega +0x2235 003962 ifetch 1 ,rega +0x2236 003963 bbit1 state_insniff ,context_get_next_sniff +0x2237 003964 rtnbit1 state_inconn +0x2238 003965 rtnbit1 state_inpage +: 003966 context_get_next_sniff: +0x2239 003967 loop context_get_next_loop +0x223a 003968 rtn +: 003970 context_new: +0x223b 003971 bpatch patch05_4 ,mem_patch05 +0x223c 003972 arg context_search_empty ,regc +0x223d 003973 call context_search +0x223e 003974 nrtn zero +0x223f 003975 deposit rega +0x2240 003976 store 2 ,mem_context_ptr +0x2241 003977 force 0 ,null +0x2242 003978 rtn +: 003982 context_check_all_wack: +0x2243 003983 call check_esco_amaddr +0x2244 003984 branch context_check_esco_wack ,true +0x2245 003985 fetch 2 ,mem_context_ptr +0x2246 003986 add pdata ,coffset_arq ,contw +0x2247 003987 fetch 1 ,mem_arq +0x2248 003988 istore 1 ,contw +0x2249 003989 arg context_check_a_wack ,regc +0x224a 003990 branch context_search +: 003992 context_check_esco_wack: +0x224b 003993 fetch 1 ,mem_arq +0x224c 003994 isolate1 wack ,pdata +0x224d 003995 branch context_esco_wack ,true +0x224e 003996 force 1 ,null +0x224f 003997 rtn +: 003998 context_esco_wack: +0x2250 003999 force 0 ,null +0x2251 004000 rtn +: 004003 context_check_idle: +0x2252 004004 arg context_check_inconn ,regc +0x2253 004005 branch context_search +: 004007 context_traverse_linkkey: +0x2254 004008 fetcht 2 ,mem_context_ptr +0x2255 004009 arg context_traverse_clearkey ,regc +0x2256 004010 branch context_search +: 004014 context_search_conn_handle: +0x2257 004015 fetcht 1 ,mem_hci_conn_handle +: 004016 context_search_conn_handle2: +0x2258 004017 arg context_search_handle ,regc +0x2259 004018 branch context_search +: 004020 context_search_plap: +0x225a 004021 bpatch patch05_5 ,mem_patch05 +0x225b 004022 fetcht 6 ,mem_hci_plap +: 004023 context_search_plap2: +0x225c 004024 arg context_search_lap ,regc +0x225d 004025 branch context_search +: 004027 context_search_insniff: +0x225e 004028 arg context_search_sniff ,regc +0x225f 004029 branch context_search +: 004031 context_search_sniff_window: +0x2260 004032 arg context_search_window ,regc +: 004033 context_search: +0x2261 004034 bpatch patch05_6 ,mem_patch05 +0x2262 004035 arg mem_context ,rega +0x2263 004036 arg context_num ,loopcnt +: 004037 context_search_loop: +0x2264 004038 ifetch 1 ,rega +0x2265 004039 copy regc ,pc +: 004040 context_search_next: +0x2266 004041 increase context_size ,rega +0x2267 004042 loop context_search_loop +0x2268 004043 force 1 ,null +0x2269 004044 rtn +: 004046 context_search_empty: +0x226a 004047 bbit1 state_inconn ,context_search_next +0x226b 004048 bbit1 state_inpage ,context_search_next +0x226c 004049 force 0 ,null +0x226d 004050 rtn +: 004052 context_search_lap: +0x226e 004053 bbit1 state_inpage ,context_search_lap_cont +0x226f 004054 bbit0 state_inconn ,context_search_next +: 004055 context_search_lap_cont: +0x2270 004056 add rega ,coffset_plap ,contr +0x2271 004057 ifetch 6 ,contr +0x2272 004058 isub temp ,null +0x2273 004059 rtn zero +0x2274 004060 branch context_search_next +: 004062 context_search_handle: +0x2275 004063 bbit0 state_inconn ,context_search_next +0x2276 004064 add rega ,coffset_conn_handle ,contr +0x2277 004065 ifetch 1 ,contr +0x2278 004066 isub temp ,null +0x2279 004067 rtn zero +0x227a 004068 branch context_search_next +: 004070 context_search_sniff: +0x227b 004071 bbit0 state_insniff ,context_search_next +: 004072 context_search_sniff_loop: +0x227c 004073 call context_get_anchor +0x227d 004074 call sign_pdata_temp +0x227e 004075 isub temp ,pdata +0x227f 004076 increase 1 ,pdata +0x2280 004077 branch context_search_sniff_miss ,positive +0x2281 004078 copy contr ,regb +0x2282 004079 store 9 ,mem_temp +0x2283 004080 fetch 1 ,mem_le_sc_calc +0x2284 004081 nbranch context_search_sniff_sc ,blank +0x2285 004082 fetch 9 ,mem_temp +0x2286 004083 copy regb ,contr +0x2287 004084 increase 5 ,pdata +0x2288 004085 branch context_search_meet1 +: 004086 context_search_sniff_sc: +0x2289 004087 fetch 9 ,mem_temp +0x228a 004088 copy regb ,contr +0x228b 004089 increase 20 ,pdata +: 004090 context_search_meet1: +0x228c 004091 nbranch context_search_next ,positive +: 004092 context_search_meet: +0x228d 004093 copy temp ,bt_clk +0x228e 004094 call context_next_anchor +0x228f 004095 force 0 ,null +0x2290 004096 rtn +: 004099 context_search_sniff_miss: +0x2291 004100 iforce regb +0x2292 004101 add rega ,coffset_tsniff ,contr +0x2293 004102 ifetch 2 ,contr +0x2294 004103 branch context_search_meet ,blank +0x2295 004104 call context_next_anchor +0x2296 004105 branch context_search_sniff_loop +: 004107 sign_pdata_temp: +0x2297 004108 rshift16 pdata ,timeup +0x2298 004109 rshift8 timeup ,timeup +0x2299 004110 branch sign_pdata_temp_p0 ,zero +0x229a 004111 compare 0xf ,timeup ,0xf +0x229b 004112 nrtn true +0x229c 004113 rshift16 temp ,timeup +0x229d 004114 rshift8 timeup ,timeup +0x229e 004115 nrtn zero +0x229f 004116 set1 28 ,temp +0x22a0 004117 rtn +: 004118 sign_pdata_temp_p0: +0x22a1 004119 rshift16 temp ,timeup +0x22a2 004120 rshift8 timeup ,timeup +0x22a3 004121 compare 0xf ,timeup ,0xf +0x22a4 004122 nrtn true +0x22a5 004123 set1 28 ,pdata +0x22a6 004124 rtn +: 004126 context_check_inconn: +0x22a7 004127 bbit0 state_inconn ,context_search_next +0x22a8 004128 force 0 ,null +0x22a9 004129 rtn +: 004131 context_check_a_wack: +0x22aa 004132 bbit0 state_inconn ,context_search_next +0x22ab 004133 add rega ,coffset_mode ,contr +0x22ac 004134 ifetch 1 ,contr +0x22ad 004135 bbit1 mode_le ,context_search_next +0x22ae 004136 add rega ,coffset_arq ,contr +0x22af 004137 ifetch 1 ,contr +0x22b0 004138 bbit0 wack ,context_search_next +0x22b1 004139 force 0 ,null +0x22b2 004140 rtn +: 004142 context_get_anchor: +0x22b3 004143 add rega ,coffset_mode ,contr +0x22b4 004144 ifetcht 1 ,contr +0x22b5 004145 deposit clkn_bt +0x22b6 004146 isolate1 mode_master ,temp +0x22b7 004147 add rega ,coffset_sniff_anchor ,contr +0x22b8 004148 ifetcht 4 ,contr +0x22b9 004149 rtn true +0x22ba 004150 add rega ,coffset_clk_offset ,contr +0x22bb 004151 ifetch 6 ,contr +0x22bc 004152 call calc_clke2 +0x22bd 004153 deposit clke_bt +0x22be 004154 rtn +: 004156 context_next_anchor: +0x22bf 004157 add rega ,coffset_tsniff ,contr +0x22c0 004158 add rega ,coffset_sniff_anchor ,contw +0x22c1 004159 ifetch 2 ,contr +0x22c2 004160 iadd temp ,timeup +0x22c3 004161 deposit timeup +0x22c4 004162 istore 4 ,contw +0x22c5 004163 branch le_context_nexthop +: 004166 context_search_window: +0x22c6 004167 bbit0 state_insniff ,context_search_next +0x22c7 004168 call context_get_anchor +0x22c8 004169 iadd stop_watch ,pdata +0x22c9 004170 iadd stop_watch ,pdata +0x22ca 004171 iadd queue ,pdata +0x22cb 004172 isub temp ,null +0x22cc 004173 nbranch context_search_next ,positive +0x22cd 004174 force 0 ,null +0x22ce 004175 rtn +: 004177 context_traverse_clearkey: +0x22cf 004178 bbit0 state_inconn ,context_search_next +0x22d0 004179 deposit temp +0x22d1 004180 isub rega ,null +0x22d2 004181 branch context_search_next ,null +0x22d3 004182 add rega ,coffset_mode ,contr +0x22d4 004183 ifetch 1 ,contr +0x22d5 004184 bbit1 mode_le ,context_search_next +0x22d6 004185 ifetch 1 ,rega +0x22d7 004186 set0 state_linkkey ,pdata +0x22d8 004187 istore 1 ,rega +0x22d9 004188 branch context_search_next +: 004191 master_conn_send_packet: +0x22da 004192 bpatch patch05_7 ,mem_patch05 +0x22db 004193 call rf_setup_time_master_slot +: 004194 master_send_packet: +0x22dc 004195 add clkn_bt ,1 ,bt_clk +0x22dd 004196 call fetch_self_bt_adr +0x22de 004197 force 0x03 ,freq_mode +0x22df 004198 call tx_radio_freq +0x22e0 004199 call start_transmitter +0x22e1 004200 call start_tx_native +0x22e2 004201 call send_access_word +0x22e3 004202 branch transmit_packet +: 004204 master_conn_recv_packet: +0x22e4 004205 bpatch patch06_0 ,mem_patch06 +0x22e5 004206 call rf_setup_time_slave_slot +: 004207 master_recv_packet: +0x22e6 004208 add clkn_bt ,1 ,bt_clk +0x22e7 004209 call fetch_self_bt_adr +0x22e8 004210 force 0x03 ,freq_mode +0x22e9 004211 call rx_radio_freq +0x22ea 004212 call init_rx_packet_flags +0x22eb 004213 call prep_crypt +0x22ec 004214 call start_rx_native +0x22ed 004215 call start_receiver +: 004216 master_rx_conn_finish_packet: +0x22ee 004217 call wait_access_clkn_rt +0x22ef 004218 nrtn sync +0x22f0 004219 call save_rssi +0x22f1 004220 branch receive_packet +: 004224 master_newconn_once: +0x22f2 004225 bpatch patch06_1 ,mem_patch06 +0x22f3 004226 fetch 1 ,mem_fhs_am_addr +0x22f4 004227 iforce am_addr +0x22f5 004228 force type_poll ,type +0x22f6 004229 call master_conn_send_packet +0x22f7 004230 branch master_conn_recv_packet +: 004241 inquiry_scan_dispatch: +0x22f8 004242 fetch 1 ,mem_scan_mode +0x22f9 004243 rtnbit0 inq_scan_mode +0x22fa 004244 force iscan_interval_timer ,queue +0x22fb 004245 call timer_check +0x22fc 004246 nrtn blank +0x22fd 004247 fetcht 2 ,mem_iscan_window +0x22fe 004248 force 4 ,queue +0x22ff 004249 call sniff_check_window +0x2300 004250 rtn user +0x2301 004251 call inquiry_scan_start +0x2302 004252 force iscan_interval_timer ,queue +0x2303 004253 fetch 2 ,mem_iscan_interval +0x2304 004254 nbranch timer_init ,sync +0x2305 004255 random pdata +0x2306 004256 iand mask3ff ,pdata +0x2307 004257 branch timer_init +: 004260 inquiry_scan_start: +0x2308 004261 bpatch patch06_2 ,mem_patch06 +0x2309 004262 jam 0 ,mem_fhs_am_addr +0x230a 004263 disable clknt +0x230b 004264 disable attempt +0x230c 004265 call afh_clear +0x230d 004266 and clkn_bt ,0x1fc ,bt_clk +0x230e 004267 force 0x01 ,freq_mode +0x230f 004268 call fetch_giac +0x2310 004269 call rx_radio_freq +0x2311 004270 setflip mark_inquiry_state ,mark +0x2312 004271 fetch 1 ,mem_inquiryscan_waitcnt +0x2313 004272 increase 1 ,pdata +0x2314 004273 store 1 ,mem_inquiryscan_waitcnt +0x2315 004274 call fetch_diac +0x2316 004275 call start_receiver +0x2317 004276 call wait_access_forever +0x2318 004277 nrtn sync +0x2319 004278 bpatch patch06_3 ,mem_patch06 +0x231a 004279 force 0 ,stop_watch +0x231b 004280 call shutdown_radio +0x231c 004281 fetch 1 ,mem_inquiryscan_rcvcnt +0x231d 004282 increase 1 ,pdata +0x231e 004283 store 1 ,mem_inquiryscan_rcvcnt +0x231f 004284 call fetch_giac +0x2320 004285 call rf_setup_time_slave_slot +0x2321 004286 or_into 0x002 ,bt_clk +0x2322 004287 force 0x01 ,freq_mode +0x2323 004288 call tx_radio_freq +0x2324 004289 call fetch_diac +0x2325 004290 call start_transmitter +0x2326 004291 call start_tx_external +0x2327 004292 deposit clkn_bt +0x2328 004293 store 4 ,mem_clkn_bt +0x2329 004294 call send_access_word +0x232a 004295 force type_fhs ,type +0x232b 004296 force 0 ,am_addr +0x232c 004297 call scan_mode_whiten +0x232d 004298 call transmit_packet_whitened +0x232e 004299 call send_eir +0x232f 004300 and_into 0x1fd ,bt_clk +0x2330 004301 increase 1 ,n_tx_slot +0x2331 004302 rtn +: 004304 send_eir: +0x2332 004305 bpatch patch06_4 ,mem_patch06 +0x2333 004306 fetch 1 ,mem_eir_enable +0x2334 004307 rtn blank +0x2335 004308 arg mem_eir ,contw +0x2336 004309 fetch 1 ,mem_local_name_length +0x2337 004310 copy pdata ,loopcnt +0x2338 004311 increase 1 ,pdata +0x2339 004312 istore 1 ,contw +0x233a 004313 copy contw ,temp +0x233b 004314 increase 1 ,pdata +0x233c 004315 store 2 ,mem_tx_len +0x233d 004316 copy temp ,contw +0x233e 004317 setarg 0x09 +0x233f 004318 istore 1 ,contw +0x2340 004319 arg mem_local_name ,contr +0x2341 004320 call memcpy +0x2342 004322 arg mem_all_uuid_128bits ,regc +0x2343 004323 arg 4 ,loopcnt +0x2344 004324 call get_all_uuid +0x2345 004325 arg mem_all_uuid_16bits ,regc +0x2346 004326 arg 1 ,loopcnt +0x2347 004327 call get_all_uuid +0x2348 004329 force type_dm3 ,type +0x2349 004330 jam 2 ,mem_tx_lch +0x234a 004331 setarg mem_eir +0x234b 004332 store 2 ,mem_txptr +0x234c 004333 call rf_setup_time_slave_slot +0x234d 004334 call tx_radio_freq +0x234e 004335 call start_transmitter +0x234f 004336 call start_tx_external +0x2350 004337 call send_access_word +0x2351 004338 call scan_mode_whiten +0x2352 004339 call transmit_packet_whitened +0x2353 004340 rtn +: 004343 get_all_uuid: +0x2354 004344 copy contw ,temp +0x2355 004345 copy regc ,contr +0x2356 004346 ifetch 1 ,contr +0x2357 004347 rtn blank +: 004348 lshift_loop: +0x2358 004349 lshift pdata ,pdata +0x2359 004350 loop lshift_loop +0x235a 004351 copy pdata ,rega +0x235b 004352 increase 2 ,pdata +0x235c 004353 copy pdata ,queue +0x235d 004354 fetch 2 ,mem_tx_len +0x235e 004355 iadd queue ,pdata +0x235f 004356 store 2 ,mem_tx_len +0x2360 004357 copy temp ,contw +0x2361 004358 copy rega ,pdata +0x2362 004359 increase 1 ,pdata +0x2363 004360 istore 1 ,contw +0x2364 004361 copy regc ,contr +0x2365 004362 ifetch 1 ,contr +0x2366 004363 ifetch 1 ,contr +0x2367 004364 istore 1 ,contw +0x2368 004365 copy rega ,loopcnt +0x2369 004366 branch memcpy +: 004372 page_scan_dispatch: +0x236a 004373 fetch 1 ,mem_scan_mode +0x236b 004374 rtnbit0 page_scan_mode +0x236c 004375 force pscan_interval_timer ,queue +0x236d 004376 call timer_check +0x236e 004377 nrtn blank +0x236f 004378 fetcht 2 ,mem_pscan_window +0x2370 004379 force 40 ,queue +0x2371 004380 call sniff_check_window +0x2372 004381 rtn user +0x2373 004382 force 0 ,am_addr +0x2374 004383 jam param_pagerespto ,mem_fhs_wait_counter +0x2375 004384 set0 mark_fhs_already_good ,mark +0x2376 004385 call page_scan_start +0x2377 004386 force pscan_interval_timer ,queue +0x2378 004387 fetch 2 ,mem_pscan_interval +0x2379 004388 branch timer_init +: 004391 page_scan_start: +0x237a 004392 bpatch patch06_5 ,mem_patch06 +0x237b 004393 disable clknt +0x237c 004394 call afh_clear +0x237d 004395 fetch 1 ,mem_pagescan_waitcnt +0x237e 004396 increase 1 ,pdata +0x237f 004397 store 1 ,mem_pagescan_waitcnt +0x2380 004398 force 0 ,n_tx_slot +0x2381 004399 call fetch_self_bt_adr +0x2382 004400 add clkn_bt ,1 ,bt_clk +0x2383 004401 force 0x02 ,freq_mode +0x2384 004402 bpatch patch06_6 ,mem_patch06 +0x2385 004403 call rx_radio_freq +0x2386 004404 call start_receiver +0x2387 004405 call wait_access_forever +0x2388 004406 nrtn sync +0x2389 004407 call shutdown_radio +0x238a 004408 fetch 1 ,mem_pagescan_rcvcnt +0x238b 004409 increase 1 ,pdata +0x238c 004410 store 1 ,mem_pagescan_rcvcnt +0x238d 004411 force 0 ,stop_watch +0x238e 004412 call rf_setup_time_slave_slot +0x238f 004413 or_into 0x002 ,bt_clk +0x2390 004414 force 0x01 ,freq_mode +0x2391 004415 call tx_radio_freq +0x2392 004416 call start_transmitter +0x2393 004417 call start_tx_external +0x2394 004418 call send_access_word +0x2395 004419 call end_of_packet +0x2396 004420 force 0 ,am_addr +0x2397 004421 arg param_rf_setup ,timeup +0x2398 004422 until clke_rt ,meet +0x2399 004423 or_into 0x03 ,clke_bt +0x239a 004424 and_into 0x1fd ,bt_clk +: 004425 page_scan_wait_fhs_restart: +0x239b 004426 bpatch patch06_7 ,mem_patch06 +0x239c 004427 increase 1 ,n_tx_slot +0x239d 004428 call rx_radio_freq +0x239e 004429 call start_receiver +0x239f 004430 call wait_access_mhalfbnd +0x23a0 004431 nbranch page_scan_wait_fhs_again ,sync +0x23a1 004432 call scan_mode_whiten +0x23a2 004433 call receive_packet_whitened +0x23a3 004434 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs +: 004435 page_scan_wait_fhs_again: +0x23a4 004436 bpatch patch07_0 ,mem_patch07 +0x23a5 004437 fetch 1 ,mem_fhs_wait_counter +0x23a6 004438 rtn blank +0x23a7 004439 increase -1 ,pdata +0x23a8 004440 store 1 ,mem_fhs_wait_counter +0x23a9 004441 call rf_setup_time_master_slot +0x23aa 004442 branch page_scan_wait_fhs_restart +: 004445 page_scan_reply_to_fhs: +0x23ab 004446 bpatch patch07_1 ,mem_patch07 +0x23ac 004447 set0 1 ,clke_bt +0x23ad 004448 set1 0 ,clke_bt +0x23ae 004449 fetch 1 ,mem_pagescan_rcvfhscnt +0x23af 004450 increase 1 ,pdata +0x23b0 004451 store 1 ,mem_pagescan_rcvfhscnt +0x23b1 004452 call rf_setup_time_slave_slot +0x23b2 004453 or_into 0x02 ,bt_clk +0x23b3 004454 call tx_radio_freq +0x23b4 004455 call start_transmitter +0x23b5 004456 call start_tx_external +0x23b6 004457 call send_access_word +0x23b7 004458 call end_of_packet +: 004459 slave_apply_clke_bt: +0x23b8 004460 compare 0x03 ,clke_bt ,0x03 +0x23b9 004461 branch slave_apply_clke_bt_now ,true +0x23ba 004462 until null ,mhalfbnd +0x23bb 004463 branch slave_apply_clke_bt +: 004464 slave_apply_clke_bt_now: +0x23bc 004465 fetch 4 ,mem_clke_bt +0x23bd 004466 or_into 0x03 ,pdata +0x23be 004467 icopy clke_bt +: 004469 start_slave_connection: +0x23bf 004470 bpatch patch07_2 ,mem_patch07 +0x23c0 004471 fetch 6 ,extm_lap +0x23c1 004472 store 6 ,mem_plap +0x23c2 004473 call prepare_newconn +: 004474 slave_newconn_loop: +0x23c3 004475 call slave_newconn_once +0x23c4 004476 branch sconn_successful ,match +0x23c5 004477 call new_conn_timeout +0x23c6 004478 nbranch slave_newconn_loop ,blank +0x23c7 004479 rtn +: 004482 sconn_successful: +0x23c8 004483 bpatch patch07_3 ,mem_patch07 +0x23c9 004484 call newconn_init +0x23ca 004485 call context_new +0x23cb 004486 nrtn zero +0x23cc 004487 jam 0 ,mem_mode +0x23cd 004488 call calc_clke_offset +0x23ce 004489 branch context_save +: 004494 slave_dispatch: +0x23cf 004495 bpatch patch07_4 ,mem_patch07 +0x23d0 004496 call calc_clke +0x23d1 004497 call role_switch_slave +0x23d2 004498 rtn user +: 004499 slave_loop: +0x23d3 004500 bpatch patch07_5 ,mem_patch07 +0x23d4 004501 call check_bt_disabled +0x23d5 004502 call scheduler_process +0x23d6 004503 call slave_conn_recv_packet +0x23d7 004504 nbranch slave_notmatch ,match +0x23d8 004505 call supervision_flush +0x23d9 004506 call scheduler_tx_l2cap_pkt +0x23da 004507 call prepare_tx +0x23db 004508 call slave_conn_send_packet +0x23dc 004509 call parse_l2cap +0x23dd 004510 call parse_lmp +0x23de 004511 fetch 1 ,mem_slave_rcvcnt +0x23df 004512 increase 1 ,pdata +0x23e0 004513 store 1 ,mem_slave_rcvcnt +0x23e1 004514 call calc_clke_offset +: 004515 slave_notmatch: +0x23e2 004516 bpatch patch07_6 ,mem_patch07 +0x23e3 004517 call lpm_set_mult +0x23e4 004518 call supervision_update +0x23e5 004519 branch slave_disconnect ,positive +0x23e6 004520 call check_disconnect_timeout +0x23e7 004521 nbranch slave_disconnect ,user +0x23e8 004522 call check_attempt +0x23e9 004523 nbranch slave_loop ,blank +0x23ea 004524 rtn +: 004526 slave_disconnect: +0x23eb 004527 bpatch patch07_7 ,mem_patch07 +0x23ec 004528 jam 0 ,mem_tester_emulate +0x23ed 004529 jam 0 ,mem_debug_config +0x23ee 004530 call quit_connection +0x23ef 004531 set0 mark_testmode ,mark +0x23f0 004532 call test_enable_white +0x23f1 004533 fetch 1 ,mem_state +0x23f2 004534 rtn +: 004537 role_switch_slave: +0x23f3 004538 bpatch patch08_0 ,mem_patch08 +0x23f4 004539 call role_switch_check +0x23f5 004540 nrtn user +0x23f6 004541 copy am_addr ,temp +0x23f7 004542 call get_free_amaddr +0x23f8 004543 store 1 ,mem_fhs_am_addr +0x23f9 004544 copy temp ,am_addr +0x23fa 004545 jam param_newconnto ,mem_newconnto_counter +: 004546 roles_sendfhs_loop: +0x23fb 004547 bpatch patch08_1 ,mem_patch08 +0x23fc 004548 call rf_setup_time_master_slot +0x23fd 004549 force type_fhs ,type +0x23fe 004550 call slave_send_access +0x23ff 004551 deposit clkn_bt +0x2400 004552 store 4 ,mem_clkn_bt +0x2401 004553 call transmit_packet +0x2402 004554 call rf_setup_time_slave_slot +0x2403 004555 enable user3 +0x2404 004556 call slave_receive_access +0x2405 004557 branch roles_got_fhs_reply ,sync +0x2406 004558 call shutdown_radio +0x2407 004559 call new_conn_timeout +0x2408 004560 nbranch roles_sendfhs_loop ,blank +0x2409 004561 rtnmark0 mark_accept_switch +0x240a 004562 jam lmp_slot_offset ,mem_lmo_opcode2 +0x240b 004563 set1 mark_switch_initiated ,mark +0x240c 004564 rtn +: 004565 roles_got_fhs_reply: +0x240d 004566 enable clknt +0x240e 004567 call prepare_newconn +0x240f 004568 call afh_clear +: 004569 roles_newconn_loop: +0x2410 004570 bpatch patch08_2 ,mem_patch08 +0x2411 004571 call master_newconn_once +0x2412 004572 branch roles_newconn_responded ,sync +0x2413 004573 call new_conn_timeout +0x2414 004574 nbranch roles_newconn_loop ,blank +0x2415 004575 disable clknt +0x2416 004576 deposit clke_bt +0x2417 004577 store 4 ,mem_next_btclk +0x2418 004578 rtn +: 004579 roles_newconn_responded: +0x2419 004580 enable master +0x241a 004581 bmark0 mark_accept_switch ,roles_newconn_nolmp +0x241b 004582 set0 mark_accept_switch ,mark +0x241c 004583 jam lmp_accepted ,mem_lmo_opcode2 +0x241d 004584 jam lmp_host_connection_req ,mem_lmi_opcode2 +0x241e 004585 call tid_set_reply +: 004586 roles_newconn_nolmp: +0x241f 004587 deposit am_addr +0x2420 004588 store 1 ,mem_amaddr +0x2421 004589 force 0 ,pdata +0x2422 004590 store 6 ,mem_clk_offset +0x2423 004591 fetch 1 ,mem_mode +0x2424 004592 set1 mode_master ,pdata +0x2425 004593 store 1 ,mem_mode +0x2426 004594 call supervision_flush +0x2427 004595 disable master +0x2428 004596 enable user +0x2429 004597 rtn +: 004601 init_rx_packet_flags: +0x242a 004602 bpatch patch08_3 ,mem_patch08 +0x242b 004603 disable match +0x242c 004604 set0 mark_loopback ,mark +0x242d 004605 set0 mark_am_addr_broadcast ,mark +0x242e 004606 set0 mark_longpacket ,mark +0x242f 004607 set0 mark_old_packet ,mark +0x2430 004608 fetch 1 ,mem_arq +0x2431 004609 set0 arqnx ,pdata +0x2432 004610 set1 flowx ,pdata +0x2433 004611 store 1 ,mem_arq +0x2434 004612 rtn +: 004614 prepare_newconn: +0x2435 004615 bpatch patch08_4 ,mem_patch08 +0x2436 004616 jam param_newconnto ,mem_newconnto_counter +0x2437 004617 jam param_newconn_arq ,mem_arq +0x2438 004618 fetch 2 ,mem_rx_window_init +0x2439 004619 store 2 ,mem_rx_window +0x243a 004620 deposit clkn_bt +0x243b 004621 store 4 ,mem_next_btclk +0x243c 004622 rtn clknt +0x243d 004623 deposit clke_bt +0x243e 004624 store 4 ,mem_next_btclk +0x243f 004625 rtn +: 004627 newconn_init: +0x2440 004628 bpatch patch08_5 ,mem_patch08 +0x2441 004629 call init_lmp_reinit +0x2442 004630 call new_conn_handle +0x2443 004631 store 1 ,mem_conn_handle +0x2444 004632 setarg 0 +0x2445 004633 store 2 ,mem_l2cap_rxbuff1_len +0x2446 004634 setarg param_supervision_to +0x2447 004635 store 2 ,mem_supervision_to +0x2448 004636 fetch 1 ,mem_state +0x2449 004637 set1 state_inconn ,pdata +0x244a 004638 store 1 ,mem_state +0x244b 004639 jam 0 ,mem_op +0x244c 004640 jam 0 ,mem_state_map +0x244d 004641 jam 0 ,mem_lpm_current_mult +0x244e 004642 branch supervision_flush +: 004645 clear_linkkey: +0x244f 004646 bpatch patch08_6 ,mem_patch08 +0x2450 004647 force 0 ,pdata +0x2451 004648 store 8 ,mem_link_key +0x2452 004649 istore 8 ,contw +0x2453 004650 call clear_linkstate +0x2454 004651 branch context_traverse_linkkey +: 004653 new_conn_timeout: +0x2455 004654 fetch 1 ,mem_newconnto_counter +0x2456 004655 increase -1 ,pdata +0x2457 004656 store 1 ,mem_newconnto_counter +0x2458 004657 rtn +: 004659 new_conn_handle: +0x2459 004660 fetch 1 ,mem_handle_num +0x245a 004661 increase 1 ,pdata +0x245b 004662 store 1 ,mem_handle_num +0x245c 004663 rtn +: 004666 quit_connection: +0x245d 004667 bpatch patch08_7 ,mem_patch08 +0x245e 004668 fetch 1 ,mem_hci_cmd +0x245f 004669 beq hci_cmd_remote_name_req ,quit_connection_name +0x2460 004670 fetch 1 ,mem_lmp_to_send +0x2461 004671 bne lmp_name_req ,quit_connection_cont +: 004672 quit_connection_name: +0x2462 004673 call cmd_check_plap +0x2463 004674 nbranch quit_connection_cont ,zero +0x2464 004675 call master_name_error +0x2465 004676 jam 0 ,mem_hci_cmd +: 004677 quit_connection_cont: +0x2466 004678 bpatch patch09_0 ,mem_patch09 +0x2467 004679 call app_disconn_reason_collect_bt +0x2468 004680 call sniff_exit +0x2469 004681 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x246a 004682 call ui_ipc_send_event +0x246b 004683 call init_lmp_work +0x246c 004684 call l2cap_init_work +0x246d 004685 call sp_initialize +0x246e 004686 fetch 1 ,mem_state +0x246f 004687 set0 state_inconn +0x2470 004688 store 1 ,mem_state +0x2471 004689 jam 0 ,memui_reconnect_mode +0x2472 004691 fetch 1 ,mem_state_map +0x2473 004692 compare 0x0 ,pdata ,0xc0 +0x2474 004693 branch quit_connection_not_clear_mark ,true +0x2475 004694 set0 mark_rxbuf_inuse ,mark +: 004695 quit_connection_not_clear_mark: +0x2476 004696 fetch 1 ,mem_arq +0x2477 004697 bbit0 wack ,quit_connection_not_clear_tx +: 004698 quit_connection_not_clear_tx: +0x2478 004699 fetch 1 ,mem_op +0x2479 004700 rtnbit0 op_txl2cap +0x247a 004701 set0 mark_tx_l2cap ,mark +0x247b 004702 rtn +: 004704 slave_newconn_once: +0x247c 004705 bpatch patch09_1 ,mem_patch09 +0x247d 004706 fetch 1 ,extm_newconn_am_addr +0x247e 004707 rtn blank +0x247f 004708 icopy am_addr +0x2480 004709 call slave_conn_recv_packet +0x2481 004710 nrtn match +0x2482 004711 force type_null ,type +0x2483 004712 call slave_conn_send_packet +0x2484 004713 deposit am_addr +0x2485 004714 store 1 ,mem_amaddr +0x2486 004715 force 0 ,pdata +0x2487 004716 store 1 ,extm_newconn_am_addr +0x2488 004717 rtn +: 004723 prepare_tx: +0x2489 004724 bpatch patch09_2 ,mem_patch09 +0x248a 004725 fetch 1 ,mem_state +0x248b 004726 bbit0 state_insco ,prepare_tx_not_sco +0x248c 004727 force type_hv3 ,type +0x248d 004728 bmark0 mark_esco ,prepare_tx_not_esco +0x248e 004729 call check_esco_amaddr +0x248f 004730 nbranch prepare_tx_not_sco ,true +0x2490 004731 branch prepare_tx_not_sco ,attempt +0x2491 004732 call set_wait_ack +0x2492 004733 setarg 2 +0x2493 004734 store 2 ,mem_retransmission_cnt +0x2494 004735 rtn +: 004736 prepare_tx_not_esco: +0x2495 004737 nrtn attempt +: 004738 prepare_tx_not_sco: +0x2496 004739 bpatch patch09_3 ,mem_patch09 +0x2497 004740 call context_check_all_wack +0x2498 004741 nbranch prepare_tx_no_retransmit ,zero +0x2499 004742 fetch 1 ,mem_arq +0x249a 004743 bbit0 wack ,prepare_tx_pollnull +: 004744 prepare_tx_retransmit: +0x249b 004745 bmark1 mark_loopback ,prepare_tx_loopback +0x249c 004746 fetch 1 ,mem_debug_config +0x249d 004747 bbit1 debug_tx_pattern ,prepare_tx_txpat +0x249e 004748 fetch 2 ,mem_retransmission_cnt +0x249f 004749 increase -1 ,pdata +0x24a0 004750 store 2 ,mem_retransmission_cnt +0x24a1 004751 branch prepare_tx_nomore_retransmit ,blank +0x24a2 004752 fetch 1 ,mem_last_type +0x24a3 004753 iforce type +0x24a4 004754 rtn +: 004756 prepare_tx_nomore_retransmit: +0x24a5 004757 bpatch patch09_4 ,mem_patch09 +0x24a6 004758 call clear_got_tx +: 004759 prepare_tx_no_retransmit: +0x24a7 004760 call check_esco_amaddr +0x24a8 004761 branch prepare_tx_pollnull ,true +0x24a9 004762 call send_lmp +0x24aa 004763 branch prepare_tx_sendlmp ,user +0x24ab 004764 fetch 1 ,mem_op +0x24ac 004765 bbit1 op_txl2cap ,prepare_tx_sendl2cap +0x24ad 004766 bmark1 mark_loopback ,prepare_tx_loopback +0x24ae 004767 fetch 1 ,mem_debug_config +0x24af 004768 bbit1 debug_tx_pattern ,prepare_tx_txpat +: 004769 prepare_tx_pollnull: +0x24b0 004770 force type_poll ,type +0x24b1 004771 rtn master +0x24b2 004772 force type_null ,type +0x24b3 004773 rtn +: 004774 prepare_tx_loopback: +0x24b4 004775 bpatch patch09_5 ,mem_patch09 +0x24b5 004776 fetch 1 ,mem_rx_type +0x24b6 004777 iforce type +0x24b7 004778 rtnne 1 +0x24b8 004779 force type_null ,type +0x24b9 004780 rtn +: 004781 prepare_tx_txpat: +0x24ba 004782 fetch 1 ,test_mode_packet_type +0x24bb 004783 and pdata ,0xf ,type +0x24bc 004784 set1 mark_loopback ,mark +0x24bd 004785 rtn +: 004786 prepare_tx_sendlmp: +0x24be 004787 force type_lmp ,type +0x24bf 004788 branch set_wait_ack +: 004789 prepare_tx_sendl2cap: +0x24c0 004790 call tx_l2cap_type +: 004792 set_wait_ack: +0x24c1 004793 bpatch patch09_6 ,mem_patch09 +0x24c2 004794 fetcht 1 ,mem_arq +0x24c3 004795 set1 wack ,temp +0x24c4 004796 storet 1 ,mem_arq +0x24c5 004797 deposit type +0x24c6 004798 store 1 ,mem_last_type +0x24c7 004799 setarg 0xffff +0x24c8 004800 store 2 ,mem_retransmission_cnt +0x24c9 004801 rtn +: 004803 tx_l2cap_type: +0x24ca 004804 bpatch patch09_7 ,mem_patch09 +0x24cb 004805 fetch 1 ,mem_state_map +0x24cc 004806 isolate1 smap_edr ,pdata +0x24cd 004807 fetch 2 ,mem_tx_len +0x24ce 004808 branch tx_l2cap_type_edr ,true +0x24cf 004809 force type_dm1 ,type +0x24d0 004810 sub pdata ,17 ,null +0x24d1 004811 rtn positive +0x24d2 004812 force type_dh1 ,type +0x24d3 004813 sub pdata ,27 ,null +0x24d4 004814 rtn positive +0x24d5 004815 force type_dm3 ,type +0x24d6 004816 sub pdata ,121 ,null +0x24d7 004817 rtn positive +0x24d8 004818 force type_dh3 ,type +0x24d9 004819 sub pdata ,183 ,null +0x24da 004820 rtn positive +0x24db 004821 force type_dm5 ,type +0x24dc 004822 sub pdata ,224 ,null +0x24dd 004823 rtn positive +0x24de 004824 force type_dh5 ,type +0x24df 004825 rtn +: 004826 tx_l2cap_type_edr: +0x24e0 004827 force type_dm1 ,type +0x24e1 004828 sub pdata ,17 ,null +0x24e2 004829 rtn positive +0x24e3 004830 force type_dh1 ,type +0x24e4 004831 sub pdata ,54 ,null +0x24e5 004832 rtn positive +0x24e6 004833 force type_dm3 ,type +0x24e7 004834 arg 367 ,temp +0x24e8 004835 isub temp ,null +0x24e9 004836 nrtn positive +0x24ea 004837 force type_dm5 ,type +0x24eb 004838 arg 679 ,temp +0x24ec 004839 isub temp ,null +0x24ed 004840 nrtn positive +0x24ee 004841 force type_dh5 ,type +0x24ef 004842 rtn +: 004851 slave_receive_master_slot: +0x24f0 004852 fetch 1 ,mem_state +0x24f1 004853 bbit0 state_insniff ,slave_receive_notsniff +0x24f2 004854 fetch 2 ,mem_tsniff +0x24f3 004855 branch slave_receive_notsniff ,blank +0x24f4 004856 nbranch slave_receive_sniff ,attempt +: 004857 slave_receive_notsniff: +0x24f5 004858 call rf_setup_time_master_slot +: 004859 slave_receive_access: +0x24f6 004860 add clke_bt ,1 ,bt_clk +: 004861 slave_receive_sniff: +0x24f7 004862 enable swfine +0x24f8 004863 fetch 2 ,mem_rx_window +0x24f9 004864 rshift pdata ,pdata +0x24fa 004865 arg param_pll_setup ,temp +0x24fb 004866 iadd temp ,pdata +0x24fc 004867 call ahead_window +0x24fd 004868 call fetch_extm_bt_adr +0x24fe 004869 force 0x03 ,freq_mode +0x24ff 004870 call rx_radio_freq +0x2500 004871 call init_rx_packet_flags +0x2501 004872 call prep_crypt +0x2502 004873 bpatch patch0a_0 ,mem_patch0a +0x2503 004874 fetch 2 ,mem_rx_window +0x2504 004875 rshift pdata ,pdata +0x2505 004876 call ahead_window +0x2506 004877 call start_receiver +0x2507 004878 enable decode_fec0 +0x2508 004879 fetch 2 ,mem_rx_window +0x2509 004880 arg param_clke_cal ,temp +0x250a 004881 iadd temp ,stop_watch +0x250b 004882 correlate null ,timeout +0x250c 004883 copy clke ,temp +0x250d 004884 storet 6 ,mem_sync_clke +0x250e 004885 disable decode_fec0 +0x250f 004886 nrtn sync +0x2510 004887 arg param_clke_cal ,clke_rt +0x2511 004888 copy bt_clk ,clke_bt +0x2512 004889 branch lpm_adjust_clk ,wake +0x2513 004890 rtn +: 004893 slave_conn_recv_packet: +0x2514 004894 bpatch patch0a_1 ,mem_patch0a +0x2515 004895 call slave_receive_master_slot +0x2516 004896 nbranch shutdown_radio ,sync +0x2517 004897 call save_rssi +0x2518 004898 bmark0 mark_testmode ,receive_packet +0x2519 004899 fetch 2 ,mem_tst_pktcnt_sync +0x251a 004900 increase 1 ,pdata +0x251b 004901 store 2 ,mem_tst_pktcnt_sync +: 004902 receive_packet: +0x251c 004903 rshift bt_clk ,temp +0x251d 004904 or temp ,0x40 ,white_init +: 004905 receive_packet_whitened: +0x251e 004906 bpatch patch0a_2 ,mem_patch0a +0x251f 004907 enable enable_white +0x2520 004908 enable enable_hec +0x2521 004909 enable decode_fec1 +0x2522 004910 parse demod ,bucket ,3 +0x2523 004911 rshift8 pwindow ,pdata +0x2524 004912 store 1 ,mem_temp_am_addr +0x2525 004913 parse demod ,bucket ,4 +0x2526 004914 inject bucket ,7 +0x2527 004915 copy pwindow ,pdata +0x2528 004916 store 1 ,mem_rx_type +0x2529 004917 parse demod ,bucket ,3 +0x252a 004918 rshift8 pwindow ,pdata +0x252b 004919 store 1 ,mem_temp_arq +0x252c 004920 fetch 1 ,mem_rx_type +0x252d 004921 sub pdata ,3 ,null +0x252e 004922 branch receive_packet_noedr ,positive +0x252f 004923 beq 7 ,receive_packet_noedr +0x2530 004924 fetch 1 ,mem_state_map +0x2531 004925 isolate1 smap_edr ,pdata +0x2532 004926 setflag true ,psk ,radio_ctrl +: 004927 receive_packet_noedr: +0x2533 004928 bpatch patch0a_3 ,mem_patch0a +0x2534 004929 parse demod ,bucket ,8 +0x2535 004930 disable decode_fec1 +0x2536 004931 disable enable_hec +0x2537 004932 branch error_header ,crc_failed +0x2538 004933 bmark0 mark_testmode ,receive_packet_amchk +0x2539 004934 fetch 2 ,mem_tst_pktcnt_hec +0x253a 004935 increase 1 ,pdata +0x253b 004936 store 2 ,mem_tst_pktcnt_hec +: 004937 receive_packet_amchk: +0x253c 004938 bpatch patch0a_4 ,mem_patch0a +0x253d 004939 fetch 1 ,mem_temp_am_addr +0x253e 004940 compare 0 ,pdata ,0x07 +0x253f 004941 setflag true ,mark_am_addr_broadcast ,mark +0x2540 004942 branch am_addr_ok ,true +0x2541 004943 icompare 0x07 ,am_addr +0x2542 004944 branch am_addr_match ,true +0x2543 004945 bmark0 mark_esco ,end_of_packet +0x2544 004946 fetcht 1 ,mem_saved_amaddr +0x2545 004947 icompare 0x7 ,temp +0x2546 004948 nbranch end_of_packet ,true +0x2547 004949 fetch 1 ,mem_arq +0x2548 004950 set0 arqnx ,pdata +0x2549 004951 set1 flowx ,pdata +0x254a 004952 store 1 ,mem_arq +: 004953 am_addr_match: +0x254b 004954 enable match +: 004955 am_addr_ok: +0x254c 004956 bpatch patch0a_5 ,mem_patch0a +0x254d 004957 fetch 1 ,mem_rx_type +0x254e 004958 icopy type +0x254f 004959 bmark1 mark_am_addr_broadcast ,arqn_bypass +0x2550 004960 fetcht 1 ,mem_temp_arq +0x2551 004961 fetch 1 ,mem_arq +0x2552 004962 set0 flow ,pdata +0x2553 004963 isolate1 flow ,temp +0x2554 004964 setflag true ,flow ,pdata +0x2555 004965 isolate1 arqn ,temp +0x2556 004966 setflag true ,arqn ,pdata +0x2557 004967 store 1 ,mem_arq +0x2558 004968 isolate0 arqn ,temp +0x2559 004969 branch arqn_bypass ,true +0x255a 004970 call clear_got_tx +: 004971 arqn_bypass: +0x255b 004972 bpatch patch0a_6 ,mem_patch0a +0x255c 004973 arg 0 ,temp +0x255d 004974 call reserve_slot +0x255e 004975 and type ,0xf ,pdata +0x255f 004976 beq type_poll ,process_poll +0x2560 004977 beq type_null ,end_of_packet +0x2561 004978 beq type_fhs ,process_fhs +0x2562 004979 fetcht 1 ,mem_temp_arq +0x2563 004980 fetch 1 ,mem_arq +0x2564 004981 icompare 0x04 ,temp +0x2565 004982 nbranch rx_type_dispatch ,true +0x2566 004983 bmark0 mark_am_addr_broadcast ,failed_seqn +0x2567 004984 bbit0 bcast1 ,rx_type_dispatch +: 004985 failed_seqn: +0x2568 004986 set1 mark_old_packet ,mark +: 004987 rx_type_dispatch: +0x2569 004988 bpatch patch0a_7 ,mem_patch0a +0x256a 004989 deposit type +0x256b 004990 beq type_dm1 ,process_dm1 +0x256c 004991 beq type_dh1 ,process_dh1 +0x256d 004992 beq type_hv3 ,process_hev +0x256e 004993 beq type_3dh1 ,process_3dh1 +0x256f 004994 arg 4 ,temp +0x2570 004995 call reserve_slot +0x2571 004996 beq type_dm3 ,process_dm3 +0x2572 004997 beq type_dh3 ,process_dh3 +0x2573 004998 arg 8 ,temp +0x2574 004999 call reserve_slot +0x2575 005000 beq type_dm5 ,process_dm5 +0x2576 005001 beq type_dh5 ,process_dh5 +0x2577 005002 rtn +: 005005 process_hev: +0x2578 005006 bpatch patch0b_0 ,mem_patch0b +0x2579 005007 enable decode_fec0 +0x257a 005008 enable enable_crc +0x257b 005009 enable encrypt +0x257c 005010 arg mem_sco_ibuf ,contw +0x257d 005011 force 30 ,loopcnt +: 005012 process_hev_loop: +0x257e 005013 parse demod ,bucket ,8 +0x257f 005014 rshift3 pwindow ,pdata +0x2580 005015 istore 1 ,contw +0x2581 005016 loop process_hev_loop +0x2582 005017 bmark0 mark_esco ,end_of_packet +0x2583 005018 parse demod ,bucket ,16 +0x2584 005019 nsetflag crc_failed ,mark_esco_rxok ,mark +0x2585 005020 branch error_payload ,crc_failed +0x2586 005021 branch ack_payload +: 005024 process_poll: +0x2587 005025 branch end_of_packet +: 005027 process_dm3: +: 005028 process_dm5: +0x2588 005029 set1 mark_longpacket ,mark +: 005030 process_dm1: +0x2589 005031 enable decode_fec2 +0x258a 005032 branch process_dmh +: 005034 process_dh3: +: 005035 process_dh5: +0x258b 005036 set1 mark_longpacket ,mark +: 005037 process_3dh1: +0x258c 005038 set1 psk3m ,radio_ctrl +: 005039 process_dh1: +0x258d 005040 enable decode_fec0 +: 005041 process_dmh: +0x258e 005042 bpatch patch0b_1 ,mem_patch0b +0x258f 005043 bmark1 mark_rxbuf_inuse ,end_of_packet +0x2590 005044 isolate0 psk ,radio_ctrl +0x2591 005045 branch process_dmh_noedr ,true +0x2592 005046 disable enable_white +0x2593 005047 enable decode_fec0 +0x2594 005048 disable decode_fec2 +0x2595 005049 add clkn_bt ,2 ,timeup +0x2596 005050 correlate clkn_bt ,meet +0x2597 005051 nbranch error_payload ,sync +0x2598 005052 set1 mark_longpacket ,mark +0x2599 005053 enable enable_white +: 005054 process_dmh_noedr: +0x259a 005055 bpatch patch0b_2 ,mem_patch0b +0x259b 005056 enable encrypt +0x259c 005057 enable enable_crc +0x259d 005058 parse demod ,bucket ,3 +0x259e 005059 rshift8 pwindow ,pdata +0x259f 005060 store 1 ,mem_lch_code +0x25a0 005061 parse demod ,bucket ,5 +0x25a1 005062 bmark1 mark_longpacket ,process_dmh_long +0x25a2 005063 rshift3 pwindow ,loopcnt +0x25a3 005064 rshift3 loopcnt ,loopcnt +0x25a4 005065 branch process_dmh_common +: 005066 process_dmh_long: +0x25a5 005067 parse demod ,bucket ,5 +0x25a6 005068 rshift pwindow ,loopcnt +0x25a7 005069 parse demod ,bucket ,3 +: 005070 process_dmh_common: +0x25a8 005071 bpatch patch0b_3 ,mem_patch0b +0x25a9 005072 deposit loopcnt +0x25aa 005073 store 2 ,mem_len +0x25ab 005074 branch process_dmh_data_end ,blank +0x25ac 005075 isub mask3ff ,null +0x25ad 005076 branch error_payload ,positive +0x25ae 005077 bpatch patch0b_4 ,mem_patch0b +0x25af 005078 set0 mark_fhs_eir ,mark +0x25b0 005079 fetch 1 ,mem_lch_code +0x25b1 005080 and_into 0x03 ,pdata +0x25b2 005081 arg mem_rxbuf ,contw +0x25b3 005082 beq llid_lmp ,process_lmp +0x25b4 005083 bmark1 mark_testmode ,process_dmh_data +0x25b5 005085 fetch 1 ,mem_lch_code +0x25b6 005086 and_into 0x03 ,pdata +0x25b7 005087 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt +0x25b8 005088 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt +0x25b9 005089 branch error_payload +: 005091 process_lmp: +0x25ba 005092 fetch 2 ,mem_len +0x25bb 005093 sub pdata ,0x70 ,null +0x25bc 005094 nbranch error_payload ,positive +0x25bd 005095 bmark1 mark_old_packet ,ack_payload +0x25be 005096 branch process_dmh_data +: 005099 process_dmh_data_l2cap_start_pkt: +0x25bf 005100 bpatch patch0b_5 ,mem_patch0b +0x25c0 005101 bmark1 mark_old_packet ,ack_payload +0x25c1 005102 fetch 2 ,mem_len +0x25c2 005103 arg 0x2e0 ,temp +0x25c3 005104 isub temp ,null +0x25c4 005105 branch error_payload ,positive +0x25c5 005106 fetch 1 ,mem_l2cap_rxbuff_inuse +0x25c6 005107 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 +0x25c7 005108 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 +0x25c8 005109 branch end_of_packet +: 005110 process_dmh_data_into_buff1: +0x25c9 005111 jam 1 ,mem_l2cap_rxbuff_new +0x25ca 005112 fetch 2 ,mem_l2cap_rxbuff1_len +0x25cb 005113 bne 0 ,end_of_packet +0x25cc 005114 arg mem_l2cap_rxbuff1 ,contw +0x25cd 005115 branch process_dmh_data +: 005116 process_dmh_data_into_buff2: +0x25ce 005117 jam 2 ,mem_l2cap_rxbuff_new +0x25cf 005118 fetch 2 ,mem_l2cap_rxbuff2_len +0x25d0 005119 bne 0 ,end_of_packet +0x25d1 005120 arg mem_l2cap_rxbuff2 ,contw +0x25d2 005121 branch process_dmh_data +: 005123 process_dmh_data_l2cap_continue_pkt: +0x25d3 005124 bpatch patch0b_6 ,mem_patch0b +0x25d4 005125 bmark1 mark_old_packet ,ack_payload +0x25d5 005126 fetch 2 ,mem_len +0x25d6 005127 arg 0x2e0 ,temp +0x25d7 005128 isub temp ,null +0x25d8 005129 branch error_payload ,positive +0x25d9 005130 fetch 1 ,mem_l2cap_rxbuff_new +0x25da 005131 beq 1 ,process_dmh_data_l2cap_continue_pkt1 +0x25db 005132 beq 2 ,process_dmh_data_l2cap_continue_pkt2 +0x25dc 005133 branch end_of_packet +: 005134 process_dmh_data_l2cap_continue_pkt1: +0x25dd 005135 arg mem_l2cap_rxbuff1 ,contw +0x25de 005136 fetch 2 ,mem_l2cap_rxbuff1_len +0x25df 005137 iadd contw ,contw +0x25e0 005138 branch process_dmh_data +: 005139 process_dmh_data_l2cap_continue_pkt2: +0x25e1 005140 arg mem_l2cap_rxbuff2 ,contw +0x25e2 005141 fetch 2 ,mem_l2cap_rxbuff2_len +0x25e3 005142 iadd contw ,contw +: 005143 process_dmh_data: +0x25e4 005144 parse demod ,bucket ,8 +0x25e5 005145 rshift3 pwindow ,pdata +0x25e6 005146 istore 1 ,contw +0x25e7 005147 loop process_dmh_data +: 005148 process_dmh_data_end: +0x25e8 005149 bpatch patch0b_7 ,mem_patch0b +0x25e9 005150 parse demod ,bucket ,16 +0x25ea 005151 branch error_payload_crc ,crc_failed +0x25eb 005152 fetch 1 ,mem_l2cap_flow_ctrl_flag +0x25ec 005153 beq l2cap_flow_ctrl_enable ,end_of_packet +0x25ed 005154 bmark1 mark_testmode ,process_dmh_cont +0x25ee 005155 bmark1 mark_old_packet ,redundant_payload +0x25ef 005156 fetch 1 ,mem_lch_code +0x25f0 005157 compare 3 ,pdata ,3 +0x25f1 005158 branch process_dmh_cont ,true +0x25f2 005159 fetch 2 ,mem_len +0x25f3 005160 branch process_dmh_cont ,blank +0x25f4 005161 bpatch patch0c_0 ,mem_patch0c +0x25f5 005162 fetch 1 ,mem_l2cap_rxbuff_new +0x25f6 005163 beq 1 ,process_l2cap_pass_crc_buff1 +0x25f7 005164 beq 2 ,process_l2cap_pass_crc_buff2 +0x25f8 005165 branch assert +: 005166 process_l2cap_pass_crc_buff1: +0x25f9 005167 fetch 2 ,mem_l2cap_rxbuff1_len +0x25fa 005168 fetcht 2 ,mem_len +0x25fb 005169 iadd temp ,pdata +0x25fc 005170 store 2 ,mem_l2cap_rxbuff1_len +0x25fd 005171 beq 0 ,assert +0x25fe 005172 fetcht 2 ,mem_l2cap_rxbuff1 +0x25ff 005173 increase 4 ,temp +0x2600 005174 isub temp ,null +0x2601 005175 call l2cap_buff1_inuse ,zero +0x2602 005176 branch process_dmh_cont +: 005177 process_l2cap_pass_crc_buff2: +0x2603 005178 fetch 2 ,mem_l2cap_rxbuff2_len +0x2604 005179 fetcht 2 ,mem_len +0x2605 005180 iadd temp ,pdata +0x2606 005181 store 2 ,mem_l2cap_rxbuff2_len +0x2607 005182 beq 0 ,assert +0x2608 005183 fetcht 2 ,mem_l2cap_rxbuff2 +0x2609 005184 add temp ,4 ,temp +0x260a 005185 isub temp ,null +0x260b 005186 call l2cap_buff2_inuse ,zero +0x260c 005187 branch process_dmh_cont +: 005188 process_dmh_cont: +0x260d 005189 bpatch patch0c_1 ,mem_patch0c +0x260e 005190 fetcht 1 ,mem_state_map +0x260f 005191 fetch 1 ,mem_lch_code +0x2610 005192 compare 3 ,pdata ,0x03 +0x2611 005193 setflag true ,smap_rxlmp ,temp +0x2612 005194 nsetflag true ,smap_rxl2cap ,temp +0x2613 005195 storet 1 ,mem_state_map +0x2614 005196 nbranch process_dmh_cont_rxbuf_not_use ,true +0x2615 005197 set1 mark_rxbuf_inuse ,mark +: 005198 process_dmh_cont_rxbuf_not_use: +0x2616 005199 bmark0 mark_testmode ,ack_payload +0x2617 005200 isolate1 smap_rxlmp ,temp +0x2618 005201 branch ack_payload ,true +0x2619 005202 fetch 2 ,mem_tst_pktcnt_crc +0x261a 005203 increase 1 ,pdata +0x261b 005204 store 2 ,mem_tst_pktcnt_crc +0x261c 005205 set1 mark_loopback ,mark +0x261d 005206 set0 smap_rxl2cap ,temp +0x261e 005207 set0 mark_rxbuf_inuse ,mark +0x261f 005208 storet 1 ,mem_state_map +: 005209 ack_payload: +0x2620 005210 bpatch patch0c_2 ,mem_patch0c +0x2621 005211 fetcht 1 ,mem_temp_arq +0x2622 005212 fetch 1 ,mem_arq +0x2623 005213 set1 arqnx ,pdata +0x2624 005214 isolate1 seqn ,temp +0x2625 005215 setflag true ,seqn ,pdata +0x2626 005216 isolate1 mark_am_addr_broadcast ,mark +0x2627 005217 setflag true ,bcast1 ,pdata +0x2628 005218 store 1 ,mem_arq +0x2629 005219 fetch 2 ,mem_len +0x262a 005220 nbranch end_of_packet ,blank +0x262b 005221 fetch 1 ,mem_state_map +0x262c 005222 set0 smap_rxl2cap ,pdata +0x262d 005223 store 1 ,mem_state_map +0x262e 005224 fetch 1 ,mem_lch_code +0x262f 005225 compare 0x01 ,pdata ,0x07 +0x2630 005227 branch end_of_packet +: 005229 error_header: +0x2631 005230 bpatch patch0c_3 ,mem_patch0c +0x2632 005231 disable match +0x2633 005232 fetch 2 ,mem_rx_hec_err +0x2634 005233 increase 1 ,pdata +0x2635 005234 store 2 ,mem_rx_hec_err +0x2636 005235 branch end_of_packet +: 005236 error_payload_crc: +0x2637 005237 fetch 2 ,mem_rx_crc_err +0x2638 005238 increase 1 ,pdata +0x2639 005239 store 2 ,mem_rx_crc_err +0x263a 005240 call discard_pkt +0x263b 005241 bmark0 mark_testmode ,error_payload +0x263c 005242 set1 mark_loopback ,mark +: 005243 error_payload: +0x263d 005244 branch end_of_packet +: 005246 discard_pkt: +0x263e 005247 bpatch patch0c_4 ,mem_patch0c +0x263f 005248 fetch 1 ,mem_lch_code +0x2640 005249 compare 3 ,pdata ,0x03 +0x2641 005250 nbranch discard_pkt_l2cap ,true +: 005251 discard_pkt_lmp: +0x2642 005252 fetcht 1 ,mem_state_map +0x2643 005253 set0 smap_rxlmp ,temp +0x2644 005254 storet 1 ,mem_state_map +0x2645 005255 rtn +: 005256 discard_pkt_l2cap: +0x2646 005259 fetcht 1 ,mem_state_map +0x2647 005260 set0 smap_rxl2cap ,temp +0x2648 005261 storet 1 ,mem_state_map +0x2649 005262 branch h4_send_acl_trigger_clear +: 005264 redundant_payload: +0x264a 005265 fetch 1 ,mem_arq +0x264b 005266 set1 arqnx ,pdata +0x264c 005267 store 1 ,mem_arq +: 005268 end_of_packet: +0x264d 005269 bpatch patch0c_5 ,mem_patch0c +0x264e 005270 disable encode_fec0 +0x264f 005271 disable encode_fec2 +0x2650 005272 disable decode_fec0 +0x2651 005273 disable decode_fec2 +0x2652 005274 disable enable_crc +0x2653 005275 disable encrypt +0x2654 005276 disable enable_white +0x2655 005277 branch shutdown_radio ,is_rx +0x2656 005278 until null ,tx_clear +0x2657 005279 nop 100 +0x2658 005280 branch shutdown_radio +: 005282 process_fhs: +0x2659 005283 bpatch patch0c_6 ,mem_patch0c +0x265a 005284 enable enable_crc +0x265b 005285 enable decode_fec2 +0x265c 005286 parse demod ,bucket ,72 +0x265d 005287 isolate1 58 ,pdata +0x265e 005288 setflag true ,mark_fhs_eir ,mark +0x265f 005289 copy bt_adr ,temp +0x2660 005290 ialigned bt_adr +0x2661 005291 ialigned fhs0 +0x2662 005292 pulse recalc +0x2663 005293 setsect 2 ,0xfffff +0x2664 005294 setsect 3 ,0x0ffff +0x2665 005295 nop 32 +0x2666 005296 iverify fhs_parity +0x2667 005297 deposit lap +0x2668 005298 store 3 ,extm_lap +0x2669 005299 deposit uap +0x266a 005300 store 1 ,extm_uap +0x266b 005301 copy temp ,bt_adr +0x266c 005302 branch fhs_parity_ok ,true +0x266d 005303 branch error_payload +: 005304 fhs_parity_ok: +0x266e 005305 bpatch patch0c_7 ,mem_patch0c +0x266f 005306 parse demod ,bucket ,72 +0x2670 005307 ialigned fhs1 +0x2671 005308 ialigned am_addr +0x2672 005309 ialigned nap +0x2673 005310 ialigned regb +0x2674 005311 force 0 ,pdata +0x2675 005312 parse demod ,bucket ,16 +0x2676 005313 branch error_payload ,crc_failed +0x2677 005314 setarg 0x0ffffffc +0x2678 005315 iand regb ,pdata +0x2679 005316 store 4 ,mem_clke_bt +0x267a 005317 deposit fhs_class +0x267b 005318 store 3 ,extm_class +0x267c 005319 deposit fhs_misc +0x267d 005320 store 1 ,extm_fhs_misc +0x267e 005321 deposit am_addr +0x267f 005322 store 1 ,extm_newconn_am_addr +0x2680 005323 deposit nap +0x2681 005324 store 2 ,extm_nap +0x2682 005325 deposit bt_clk +0x2683 005326 inject rxf ,32 +0x2684 005327 compare type_fhs ,type ,0x0f +0x2685 005328 setflag true ,mark_fhs_already_good ,mark +0x2686 005329 branch end_of_packet +: 005331 clear_got_tx: +0x2687 005332 bpatch patch0d_0 ,mem_patch0d +0x2688 005333 fetch 1 ,mem_arq +0x2689 005334 rtnbit0 wack +0x268a 005335 set0 wack ,pdata +0x268b 005336 setflip seqnx ,pdata +0x268c 005337 store 1 ,mem_arq +0x268d 005338 fetch 1 ,mem_last_type +0x268e 005339 beq type_lmp ,clear_got_txlmp +0x268f 005340 rtneq type_hv3 +0x2690 005341 fetch 1 ,mem_op +0x2691 005342 rtnbit0 op_txl2cap ,pdata +0x2692 005343 set0 op_txl2cap ,pdata +0x2693 005344 set1 op_pkt_comp ,pdata +0x2694 005345 store 1 ,mem_op +0x2695 005346 set0 mark_tx_l2cap ,mark +0x2696 005347 fetch 2 ,mem_l2cap_tx_multi_offset +0x2697 005348 nrtn blank +0x2698 005349 fetch 1 ,mem_op +0x2699 005350 set0 op_pkt_comp ,pdata +0x269a 005351 store 1 ,mem_op +0x269b 005352 branch l2cap_malloc_free +: 005354 clear_got_txlmp: +0x269c 005355 bpatch patch0d_1 ,mem_patch0d +0x269d 005356 fetch 1 ,mem_lmo_header_opcode +0x269e 005357 rshift pdata ,pdata +0x269f 005358 beq lmp_start_encryption_req ,start_encryption +0x26a0 005359 beq lmp_stop_encryption_req ,stop_encryption +0x26a1 005360 beq lmp_unsniff_req ,sniff_exit +0x26a2 005361 beq lmp_escape ,clear_lmp_escape +0x26a3 005362 rtnne lmp_accepted +0x26a4 005363 fetch 1 ,mem_lmo_payload +0x26a5 005364 beq lmp_sco_link_req ,sco_link_req_by_slave +0x26a6 005365 beq lmp_start_encryption_req ,clear_send_setup_complete +0x26a7 005366 rtn +: 005368 clear_lmp_escape: +0x26a8 005369 fetch 1 ,mem_lmo_payload +0x26a9 005370 set1 7 ,pdata +0x26aa 005371 rtn +: 005372 clear_send_setup_complete: +0x26ab 005373 rtn master +0x26ac 005374 fetch 1 ,mem_state +0x26ad 005375 rtnbit1 state_conn_comp +0x26ae 005376 jam lmp_setup_complete ,mem_lmo_opcode2 +0x26af 005377 rtn +: 005380 sco_link_req_by_slave: +0x26b0 005381 rtn master +0x26b1 005382 fetch 1 ,mem_mode +0x26b2 005383 isolate1 send_sco_when_slave ,pdata +0x26b3 005384 branch clean_mem_mode ,true +0x26b4 005386 rtn +: 005387 clean_mem_mode: +0x26b5 005388 set0 send_sco_when_slave ,pdata +0x26b6 005389 store 1 ,mem_mode +0x26b7 005390 rtn +: 005392 start_encryption: +0x26b8 005393 bpatch patch0d_2 ,mem_patch0d +0x26b9 005394 fetch 1 ,mem_state_map +0x26ba 005395 set1 smap_encryption ,pdata +0x26bb 005396 store 1 ,mem_state_map +0x26bc 005397 jam 1 ,core_encrypt +0x26bd 005398 fetch 1 ,mem_state +0x26be 005399 isolate1 state_conn_comp ,pdata +0x26bf 005400 rtn +: 005402 stop_encryption: +0x26c0 005403 bpatch patch0d_3 ,mem_patch0d +0x26c1 005404 fetch 1 ,mem_state_map +0x26c2 005405 set0 smap_encryption ,pdata +0x26c3 005406 store 1 ,mem_state_map +0x26c4 005407 jam 0 ,core_encrypt +0x26c5 005408 rtn +: 005411 sniff_init: +0x26c6 005412 bpatch patch0d_4 ,mem_patch0d +0x26c7 005413 copy clkn_bt ,pdata +0x26c8 005414 store 4 ,mem_lpm_delay_after_sniff +0x26c9 005415 add clkn_bt ,3 ,rega +0x26ca 005416 branch sniff_init_master ,master +0x26cb 005417 add clke_bt ,3 ,rega +: 005418 sniff_init_master: +0x26cc 005419 fetcht 2 ,mem_tsniff +0x26cd 005420 deposit rega +0x26ce 005421 set0 27 ,pdata +0x26cf 005422 idiv temp +0x26d0 005423 fetch 2 ,mem_dsniff +0x26d1 005424 call wait_div_end +0x26d2 005425 remainder regc +0x26d3 005426 isub regc ,pdata +0x26d4 005427 branch sniff_init_nowrap ,positive +0x26d5 005428 iadd temp ,pdata +: 005429 sniff_init_nowrap: +0x26d6 005430 iadd rega ,pdata +0x26d7 005431 store 4 ,mem_sniff_anchor +0x26d8 005432 jam switch_flag_init ,mem_switch_flag +0x26d9 005433 fetch 1 ,mem_state +0x26da 005434 set1 state_insniff ,pdata +0x26db 005435 store 1 ,mem_state +0x26dc 005436 fetch 1 ,mem_sniff_attempt +0x26dd 005437 store 1 ,mem_current_sniff_attempt +0x26de 005438 setarg 0 +0x26df 005439 store 3 ,mem_sniff_rcv +0x26e0 005440 store 3 ,mem_sniff_lost +0x26e1 005441 store 1 ,mem_sniff_unint_lost +0x26e2 005442 jam bt_evt_enter_sniff ,mem_fifo_temp +0x26e3 005443 call ui_ipc_send_event +0x26e4 005444 fetch 2 ,mem_rx_window_sniff +0x26e5 005445 store 2 ,mem_rx_window +0x26e6 005446 nrtn master +0x26e7 005447 add am_addr ,-1 ,queue +0x26e8 005448 rtn +: 005450 sniff_exit: +0x26e9 005451 bpatch patch0d_5 ,mem_patch0d +0x26ea 005452 fetch 1 ,mem_state +0x26eb 005453 rtnbit0 state_insniff +0x26ec 005454 set0 state_insniff ,pdata +0x26ed 005455 store 1 ,mem_state +0x26ee 005456 fetch 2 ,mem_rx_window_init +0x26ef 005457 store 2 ,mem_rx_window +0x26f0 005458 disable wake +0x26f1 005459 jam bt_evt_exit_sniff ,mem_fifo_temp +0x26f2 005460 branch ui_ipc_send_event +: 005463 check_attempt: +0x26f3 005464 bpatch patch0d_6 ,mem_patch0d +0x26f4 005465 enable attempt +0x26f5 005466 fetch 1 ,mem_state +0x26f6 005467 bbit1 state_insniff ,check_attempt_sniff +0x26f7 005468 rtnmark1 mark_testmode +0x26f8 005469 fetch 1 ,mem_arq +0x26f9 005470 rtnbit1 wack +0x26fa 005471 fetch 1 ,mem_lmp_to_send +0x26fb 005472 nrtn blank +0x26fc 005473 fetch 1 ,mem_op +0x26fd 005474 rtnbit1 op_txl2cap +: 005475 check_attempt_nomore: +0x26fe 005476 force 0 ,pdata +0x26ff 005477 rtn +: 005479 check_attempt_sniff: +0x2700 005480 bbit0 state_insco ,check_attempt_not_sco +0x2701 005481 fetch 1 ,mem_current_sniff_attempt +0x2702 005482 beq 2 ,check_attempt_sniff_restore_sco +0x2703 005483 fetch 1 ,mem_arq +0x2704 005484 bbit1 wack ,check_attempt_notimeout +0x2705 005485 bmark0 mark_esco_rxok ,check_attempt_notimeout +: 005486 check_attempt_sniff_restore_sco: +0x2706 005487 nbranch check_attempt_notimeout ,master +0x2707 005488 fetch 1 ,mem_lmp_to_send +0x2708 005489 nbranch check_attempt_notimeout ,blank +: 005490 check_attempt_sco_master: +0x2709 005491 fetch 1 ,mem_sco_poll +0x270a 005492 increase -1 ,pdata +0x270b 005493 store 1 ,mem_sco_poll +0x270c 005494 nbranch check_attempt_nomore ,blank +0x270d 005495 jam param_sco_poll ,mem_sco_poll +0x270e 005496 branch check_attempt_notimeout +: 005503 check_attempt_not_sco: +0x270f 005504 fetch 1 ,mem_current_sniff_attempt +0x2710 005505 bne 1 ,check_attempt_notimeout +0x2711 005506 fetch 1 ,mem_current_sniff_timeout +0x2712 005507 branch check_attempt_notimeout ,blank +0x2713 005508 increase -1 ,pdata +0x2714 005509 store 1 ,mem_current_sniff_timeout +0x2715 005510 fetch 1 ,mem_arq +0x2716 005511 rtnbit1 wack +0x2717 005512 nrtn match +: 005513 check_attempt_notimeout: +0x2718 005514 fetch 1 ,mem_current_sniff_attempt +0x2719 005515 increase -1 ,pdata +0x271a 005516 store 1 ,mem_current_sniff_attempt +0x271b 005517 rtn +: 005528 sniff_check_window: +0x271c 005529 bpatch patch0d_7 ,mem_patch0d +0x271d 005530 disable swfine +0x271e 005531 copy temp ,stop_watch +0x271f 005532 call context_search_sniff_window +0x2720 005533 disable user +0x2721 005534 nrtn zero +0x2722 005535 force 0 ,stop_watch +0x2723 005536 enable user +0x2724 005537 rtn +: 005540 check_esco_amaddr: +0x2725 005541 fetch 1 ,mem_esco_addr +0x2726 005542 icompare 0xff ,am_addr +0x2727 005543 rtn +: 005546 parse_l2cap: +0x2728 005547 bpatch patch0e_0 ,mem_patch0e +0x2729 005548 set0 mark_rxbuf_inuse ,mark +: 005549 parse_l2cap_cont: +0x272a 005550 jam l2cap_rx_clear ,mem_l2cap_rx_done +0x272b 005551 fetch 1 ,mem_l2cap_rxbuff_inuse +0x272c 005552 rtn blank +0x272d 005553 isolate1 l2cap_inuse_buff1 ,pdata +0x272e 005554 arg mem_l2cap_rxbuff1 ,contr +0x272f 005555 call process_rx_l2cap_pkt ,true +0x2730 005556 bpatch patch0e_1 ,mem_patch0e +0x2731 005557 fetch 1 ,mem_l2cap_rx_done +0x2732 005558 beq l2cap_rx_done ,parse_l2cap_release_buff1 +0x2733 005560 jam l2cap_rx_clear ,mem_l2cap_rx_done +0x2734 005561 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2735 005562 rtnbit0 l2cap_inuse_buff2 +0x2736 005563 arg mem_l2cap_rxbuff2 ,contr +0x2737 005564 call process_rx_l2cap_pkt +0x2738 005565 fetch 1 ,mem_l2cap_rx_done +0x2739 005566 beq l2cap_rx_done ,parse_l2cap_release_buff2 +0x273a 005567 rtn +: 005569 parse_l2cap_release_buff1: +0x273b 005570 fetch 1 ,mem_l2cap_rxbuff_inuse +0x273c 005571 set0 l2cap_inuse_buff1 ,pdata +0x273d 005572 store 1 ,mem_l2cap_rxbuff_inuse +0x273e 005573 setarg 0 +0x273f 005574 store 2 ,mem_l2cap_rxbuff1_len +0x2740 005575 rtn +: 005576 parse_l2cap_release_buff2: +0x2741 005577 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2742 005578 set0 l2cap_inuse_buff2 ,pdata +0x2743 005579 store 1 ,mem_l2cap_rxbuff_inuse +0x2744 005580 setarg 0 +0x2745 005581 store 2 ,mem_l2cap_rxbuff2_len +0x2746 005582 rtn +: 005584 l2cap_buff1_inuse: +0x2747 005585 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2748 005586 set1 l2cap_inuse_buff1 ,pdata +0x2749 005587 store 1 ,mem_l2cap_rxbuff_inuse +0x274a 005588 rtn +: 005590 l2cap_buff2_inuse: +0x274b 005591 fetch 1 ,mem_l2cap_rxbuff_inuse +0x274c 005592 set1 l2cap_inuse_buff2 ,pdata +0x274d 005593 store 1 ,mem_l2cap_rxbuff_inuse +0x274e 005594 rtn +: 005600 slave_send_access: +0x274f 005601 bpatch patch0e_2 ,mem_patch0e +0x2750 005602 add clke_bt ,1 ,bt_clk +0x2751 005603 call fetch_extm_bt_adr +0x2752 005604 force 0x03 ,freq_mode +0x2753 005605 call tx_radio_freq +0x2754 005606 call start_transmitter +0x2755 005607 call start_tx_external +0x2756 005608 branch send_access_word +: 005611 slave_conn_send_packet: +0x2757 005612 bpatch patch0e_3 ,mem_patch0e +0x2758 005613 call rf_setup_time_slave_slot +0x2759 005614 deposit clke_bt +0x275a 005615 fetcht 4 ,mem_next_btclk +0x275b 005616 isub temp ,pdata +0x275c 005617 rtnne 1 +0x275d 005618 compare type_null ,type ,0x1f +0x275e 005619 nbranch slave_conn_send_access ,true +0x275f 005620 fetch 1 ,mem_rx_type +0x2760 005621 rtn blank +: 005622 slave_conn_send_access: +0x2761 005623 call slave_send_access +: 005624 transmit_packet: +0x2762 005625 compare type_id ,type ,0x1f +0x2763 005626 branch end_of_packet ,true +0x2764 005627 rshift bt_clk ,temp +0x2765 005628 or temp ,0x40 ,white_init +: 005629 transmit_packet_whitened: +0x2766 005630 bpatch patch0e_4 ,mem_patch0e +0x2767 005631 enable enable_white +0x2768 005632 enable enable_hec +0x2769 005633 enable encode_fec1 +0x276a 005634 set0 mark_longpacket ,mark +0x276b 005635 deposit am_addr +0x276c 005636 inject mod ,3 +0x276d 005637 deposit type +0x276e 005638 inject mod ,4 +0x276f 005639 fetch 1 ,mem_arq +0x2770 005640 inject bucket ,4 +0x2771 005641 inject mod ,3 +0x2772 005642 enable enable_parity +0x2773 005643 inject mod ,8 +0x2774 005644 disable encode_fec1 +0x2775 005645 disable enable_parity +0x2776 005646 disable enable_hec +0x2777 005647 set0 psk3m ,radio_ctrl +0x2778 005648 arg 0 ,temp +0x2779 005649 call reserve_slot +0x277a 005650 bpatch patch0e_5 ,mem_patch0e +0x277b 005651 and type ,0x1f ,pdata +0x277c 005652 beq type_lmp ,transmit_lmp +0x277d 005653 beq type_null ,end_of_packet +0x277e 005654 beq type_poll ,end_of_packet +0x277f 005655 beq type_fhs ,transmit_fhs +0x2780 005656 beq type_dm1 ,transmit_dm1 +0x2781 005657 beq type_dh1 ,transmit_dh1 +0x2782 005658 beq type_hv3 ,transmit_hev +0x2783 005659 beq type_3dh1 ,transmit_3dh1 +0x2784 005660 arg 4 ,temp +0x2785 005661 call reserve_slot +0x2786 005662 beq type_dm3 ,transmit_dm3 +0x2787 005663 beq type_dh3 ,transmit_dh3 +0x2788 005664 arg 8 ,temp +0x2789 005665 call reserve_slot +0x278a 005666 beq type_dh5 ,transmit_dh5 +0x278b 005667 branch transmit_dm5 +: 005670 transmit_hev: +0x278c 005671 bpatch patch0e_6 ,mem_patch0e +0x278d 005672 enable encode_fec0 +0x278e 005673 enable enable_crc +0x278f 005674 enable encrypt +0x2790 005675 force 30 ,loopcnt +0x2791 005676 arg mem_sco_obuf ,contr +: 005677 transmit_ev_loop: +0x2792 005678 ifetch 1 ,contr +0x2793 005679 inject mod ,8 +0x2794 005680 loop transmit_ev_loop +0x2795 005681 bmark1 mark_esco ,transmit_end +0x2796 005682 branch end_of_packet +: 005684 transmit_fhs: +0x2797 005685 bpatch patch0e_7 ,mem_patch0e +0x2798 005686 fetch 1 ,mem_fhs_am_addr +0x2799 005687 icopy am_addr +0x279a 005688 fetch 1 ,mem_fhs_misc +0x279b 005689 icopy fhs_misc +0x279c 005690 fetch 3 ,mem_class +0x279d 005691 icopy fhs_class +0x279e 005692 fetch 2 ,mem_nap +0x279f 005693 icopy nap +0x27a0 005694 enable enable_crc +0x27a1 005695 enable encode_fec2 +0x27a2 005696 copy bt_adr ,rega +0x27a3 005697 call fetch_self_bt_adr +0x27a4 005698 pulse recalc +0x27a5 005699 nop 32 +0x27a6 005700 copy bt_clk ,timeup +0x27a7 005701 fetch 4 ,mem_clkn_bt +0x27a8 005702 icopy bt_clk +0x27a9 005703 preload fhs0 +0x27aa 005704 set1 58 ,pdata +0x27ab 005705 inject mod ,72 +0x27ac 005706 preload fhs1 +0x27ad 005707 inject mod ,72 +0x27ae 005708 copy timeup ,bt_clk +0x27af 005709 copy rega ,bt_adr +0x27b0 005710 enable enable_parity +0x27b1 005711 inject mod ,16 +0x27b2 005712 disable enable_parity +0x27b3 005713 branch end_of_packet +: 005715 transmit_lmp: +0x27b4 005716 bpatch patch0f_0 ,mem_patch0f +0x27b5 005717 enable encrypt +0x27b6 005718 enable enable_crc +0x27b7 005719 enable encode_fec2 +0x27b8 005720 fetch 1 ,mem_lmo_header_length +0x27b9 005721 and pdata ,0x1f8 ,temp +0x27ba 005722 arg mem_lmo_header_length ,contr +0x27bb 005723 increase 8 ,temp +: 005724 transmit_lmp_loop: +0x27bc 005725 add temp ,-72 ,regc +0x27bd 005726 nbranch transmit_lmp_finish ,positive +0x27be 005727 ifetch 9 ,contr +0x27bf 005728 inject mod ,72 +0x27c0 005729 copy regc ,temp +0x27c1 005730 branch transmit_lmp_loop +: 005731 transmit_lmp_finish: +0x27c2 005732 ifetch 9 ,contr +0x27c3 005733 iinject mod ,temp +0x27c4 005734 branch transmit_end +: 005736 transmit_dm1: +0x27c5 005737 enable encode_fec2 +0x27c6 005738 branch transmit_dmh +: 005739 transmit_dm3: +: 005740 transmit_dm5: +0x27c7 005741 enable encode_fec2 +0x27c8 005742 set1 mark_longpacket ,mark +0x27c9 005743 branch transmit_dmh +: 005745 transmit_3dh1: +0x27ca 005746 set1 psk3m ,radio_ctrl +: 005747 transmit_dh1: +0x27cb 005748 enable encode_fec0 +0x27cc 005749 branch transmit_dmh +: 005751 transmit_dh3: +: 005752 transmit_dh5: +0x27cd 005753 set1 psk3m ,radio_ctrl +0x27ce 005754 enable encode_fec0 +0x27cf 005755 set1 mark_longpacket ,mark +: 005757 transmit_dmh: +0x27d0 005758 bpatch patch0f_1 ,mem_patch0f +0x27d1 005759 fetch 1 ,mem_state_map +0x27d2 005760 bbit0 smap_edr ,transmit_noedr +0x27d3 005761 sub type ,3 ,null +0x27d4 005762 branch transmit_noedr ,positive +0x27d5 005763 disable encrypt +0x27d6 005764 disable encode_fec2 +0x27d7 005765 enable encode_fec0 +0x27d8 005766 disable enable_white +0x27d9 005767 set1 psk ,radio_ctrl +0x27da 005768 isolate1 psk3m ,radio_ctrl +0x27db 005769 branch transmit_edr3m ,true +0x27dc 005770 setarg 0xabeee +0x27dd 005771 inject mod ,20 +0x27de 005772 branch transmit_edr_sync_end +: 005773 transmit_edr3m: +0x27df 005774 setarg 0x5faeba +0x27e0 005775 inject mod ,24 +0x27e1 005776 setarg 0x12 +0x27e2 005777 inject mod ,6 +: 005778 transmit_edr_sync_end: +0x27e3 005779 enable enable_white +0x27e4 005780 set1 mark_longpacket ,mark +: 005781 transmit_noedr: +0x27e5 005782 enable encrypt +0x27e6 005783 enable enable_crc +0x27e7 005784 bmark1 mark_loopback ,transmit_loopback +0x27e8 005785 fetch 1 ,mem_tx_lch +0x27e9 005786 inject mod ,3 +0x27ea 005787 fetch 2 ,mem_tx_len +0x27eb 005788 iforce loopcnt +0x27ec 005789 bmark1 mark_longpacket ,transmit_long +0x27ed 005790 inject mod ,5 +0x27ee 005791 branch transmit_stuff +: 005792 transmit_long: +0x27ef 005793 inject mod ,13 +: 005794 transmit_stuff: +0x27f0 005795 deposit loopcnt +0x27f1 005796 branch transmit_end ,blank +0x27f2 005797 fetch 2 ,mem_txptr +0x27f3 005798 iforce contr +: 005799 transmit_stuff_loop: +0x27f4 005800 ifetch 1 ,contr +0x27f5 005801 inject mod ,8 +0x27f6 005802 loop transmit_stuff_loop +: 005805 transmit_end: +0x27f7 005806 enable enable_parity +0x27f8 005807 inject mod ,16 +0x27f9 005808 disable enable_parity +0x27fa 005809 call set_wait_ack +0x27fb 005810 fetch 1 ,mem_state_map +0x27fc 005811 bbit0 smap_edr ,end_of_packet +0x27fd 005812 force 0 ,pdata +0x27fe 005813 inject mod ,6 +0x27ff 005814 branch end_of_packet +: 005817 transmit_loopback: +0x2800 005818 bpatch patch0f_2 ,mem_patch0f +0x2801 005819 bmark1 mark_longpacket ,transmit_loopback_long +: 005820 transmit_loopback_short: +0x2802 005821 fetch 1 ,mem_lch_code +0x2803 005822 inject mod ,3 +0x2804 005823 fetch 1 ,mem_len +0x2805 005824 iforce regc +0x2806 005825 inject mod ,5 +0x2807 005826 branch transmit_loopback_cont +: 005827 transmit_loopback_long: +0x2808 005828 fetch 1 ,mem_lch_code +0x2809 005829 inject mod ,3 +0x280a 005830 fetch 2 ,mem_len +0x280b 005831 iforce regc +0x280c 005832 inject mod ,13 +: 005833 transmit_loopback_cont: +0x280d 005834 arg mem_rxbuf ,contr +: 005835 transmit_loopback_loop: +0x280e 005836 copy regc ,null +0x280f 005837 branch transmit_loopback_end ,zero +0x2810 005838 ifetch 1 ,contr +0x2811 005839 inject mod ,8 +0x2812 005840 increase -1 ,regc +0x2813 005841 branch transmit_loopback_loop +: 005842 transmit_loopback_end: +0x2814 005843 fetch 2 ,mem_tst_pktcnt_dmh +0x2815 005844 increase 1 ,pdata +0x2816 005845 store 2 ,mem_tst_pktcnt_dmh +0x2817 005846 branch transmit_end +: 005849 apply_switch_clke: +0x2818 005850 fetch 4 ,mem_clke_bt +0x2819 005851 add pdata ,7 ,rega +0x281a 005852 fetch 2 ,mem_slot_offset +0x281b 005853 nbranch apply_switch_nozero ,blank +0x281c 005854 increase -3 ,rega +0x281d 005855 branch apply_switch_wait_loop +: 005856 apply_switch_nozero: +0x281e 005857 mul32 pdata ,12 ,pdata +0x281f 005858 hfetcht 2 ,core_halfslot +0x2820 005859 increase 1 ,temp +: 005860 apply_switch_loop: +0x2821 005861 isub temp ,pdata +0x2822 005862 nbranch apply_switch_bt ,positive +0x2823 005863 increase -1 ,rega +0x2824 005864 branch apply_switch_loop +: 005865 apply_switch_bt: +0x2825 005866 sub pdata ,0 ,pdata +: 005867 apply_switch_wait_loop: +0x2826 005868 until null ,oneslot +0x2827 005869 compare 0 ,clkn_bt ,3 +0x2828 005870 nbranch apply_switch_wait_loop ,true +0x2829 005871 iforce clke_rt +0x282a 005872 copy rega ,clke_bt +0x282b 005873 iforce clke_rt +0x282c 005874 rtn +: 005877 calc_slot_offset: +0x282d 005878 bpatch patch0f_3 ,mem_patch0f +0x282e 005879 until null ,halfslot +0x282f 005880 deposit clke +0x2830 005881 iforce contr +0x2831 005882 rshift16 ,pdata ,pdata +0x2832 005883 isub clkn_bt ,loopcnt +0x2833 005884 and_into 3 ,loopcnt +0x2834 005885 nbranch calc_bt_portion ,zero +0x2835 005886 force 0 ,pdata +0x2836 005887 branch calc_skip_bt +: 005888 calc_bt_portion: +0x2837 005889 arg 3750 ,temp +0x2838 005890 force 0 ,pdata +: 005891 calc_slot_offset_loop: +0x2839 005892 iadd temp ,pdata +0x283a 005893 loop calc_slot_offset_loop +: 005894 calc_skip_bt: +0x283b 005895 iadd contr ,pdata +0x283c 005896 div pdata ,12 +0x283d 005897 call wait_div_end +0x283e 005898 quotient pdata +0x283f 005899 store 2 ,mem_slot_offset +0x2840 005900 rtn +: 005902 calc_clke_offset: +0x2841 005903 bpatch patch0f_4 ,mem_patch0f +0x2842 005904 deposit clke +0x2843 005905 copy clkn ,temp +0x2844 005906 isub temp ,null +0x2845 005907 nsetflag positive ,44 ,pdata +0x2846 005908 isub temp ,temp +0x2847 005909 setarg 3750 +0x2848 005910 isolate0 15 ,temp +0x2849 005911 branch calc_clke_pos ,true +0x284a 005912 setarg -61786 +0x284b 005913 iadd temp ,temp +: 005914 calc_clke_pos: +0x284c 005915 storet 6 ,mem_le_clk_offset +0x284d 005916 rtn le +0x284e 005917 storet 6 ,mem_clk_offset +0x284f 005918 rtn +: 005920 calc_clke: +0x2850 005921 disable clknt +0x2851 005922 fetch 6 ,mem_le_clk_offset +0x2852 005923 branch calc_clke2 ,le +0x2853 005924 fetch 6 ,mem_clk_offset +: 005925 calc_clke2: +0x2854 005926 iadd clkn ,alarm +0x2855 005927 increase 10 ,alarm +0x2856 005928 setarg 3750 +0x2857 005929 isub alarm ,pdata +0x2858 005930 isolate0 15 ,pdata +0x2859 005931 branch calc_clke_pos_adj ,true +0x285a 005932 setarg 0xf15a +0x285b 005933 iadd alarm ,alarm +: 005934 calc_clke_pos2: +0x285c 005935 copy alarm ,clke +0x285d 005936 rtn +: 005937 calc_clke_pos_adj: +0x285e 005938 force 0 ,null +0x285f 005939 branch calc_clke_pos2 +: 005946 calc_radio_freq: +0x2860 005947 bpatch patch0f_5 ,mem_patch0f +0x2861 005948 call set_sync_on +0x2862 005949 copy bt_clk ,pdata +0x2863 005950 and_into 0x180 ,pdata +0x2864 005951 compare 3 ,freq_mode ,0x07 +0x2865 005952 nbranch freq_not_connection ,true +0x2866 005953 rshift3 pdata ,pdata +0x2867 005954 iadd freq_index ,pdata +0x2868 005955 branch do_hop_mod_now +: 005956 freq_not_connection: +0x2869 005957 copy freq_index ,pdata +: 005958 do_hop_mod_now: +0x286a 005959 div pdata ,79 +0x286b 005960 pulse recalc +0x286c 005961 call wait_div_end +0x286d 005962 remainder rega +0x286e 005963 add rega ,-40 ,temp +0x286f 005964 branch odd_half ,positive +0x2870 005965 lshift rega ,temp +0x2871 005966 branch freq_result +: 005967 odd_half: +0x2872 005968 lshift temp ,temp +0x2873 005969 increase 1 ,temp +: 005970 freq_result: +0x2874 005971 bpatch patch0f_6 ,mem_patch0f +0x2875 005972 fetch 1 ,mem_mode +0x2876 005973 bbit0 afh_change ,afh_process_con +: 005974 afh_process_0: +0x2877 005975 fetch 4 ,mem_afh_instant +0x2878 005976 isub bt_clk ,null +0x2879 005977 branch afh_process_con ,positive +0x287a 005978 call afh_clear +0x287b 005979 fetch 1 ,mem_afh_new_mod +0x287c 005980 rtn blank +0x287d 005981 fetch 1 ,mem_mode +0x287e 005982 set1 afh_enable ,pdata +0x287f 005983 store 1 ,mem_mode +0x2880 005984 fetch 5 ,mem_afh_map_new +0x2881 005985 store 5 ,mem_afh_map_lo +0x2882 005986 ifetch 5 ,contr +0x2883 005987 store 5 ,mem_afh_map_hi +0x2884 005988 call afh_process_freq_map +: 005989 afh_process_con: +0x2885 005990 fetch 1 ,mem_mode +0x2886 005991 rtnbit0 afh_enable +0x2887 005992 isolate1 1 ,bt_clk +0x2888 005993 branch afh_same_channel ,true +0x2889 005994 rshift3 temp ,rega +0x288a 005995 and temp ,7 ,queue +0x288b 005996 setarg mem_afh_map_lo +0x288c 005997 iadd rega ,rega +0x288d 005998 ifetch 1 ,rega +0x288e 005999 qisolate0 pdata +0x288f 006000 branch afh_process_1 ,true +0x2890 006001 deposit temp +0x2891 006002 branch afh_process_end +: 006003 afh_process_1: +0x2892 006004 fetch 1 ,mem_afh_used +0x2893 006005 iforce regb +0x2894 006006 deposit bt_clk +0x2895 006007 and_into 0x180 ,pdata +0x2896 006008 rshift3 pdata ,pdata +0x2897 006009 iadd freq_index ,pdata +0x2898 006010 idiv regb +0x2899 006011 setarg mem_afh_map +0x289a 006012 call wait_div_end +0x289b 006013 remainder rega +0x289c 006014 iadd rega ,contr +0x289d 006015 ifetch 1 ,contr +: 006016 afh_process_end: +0x289e 006017 store 1 ,mem_afh_index +0x289f 006018 iforce temp +0x28a0 006019 rtn +: 006021 afh_same_channel: +0x28a1 006022 fetch 1 ,mem_afh_index +0x28a2 006023 iforce temp +0x28a3 006024 rtn +: 006026 afh_clear: +0x28a4 006027 fetch 1 ,mem_mode +0x28a5 006028 set0 afh_enable ,pdata +0x28a6 006029 set0 afh_change ,pdata +0x28a7 006030 store 1 ,mem_mode +0x28a8 006031 rtn +: 006037 afh_process_freq_map: +0x28a9 006038 bpatch patch0f_7 ,mem_patch0f +0x28aa 006039 arg mem_afh_map ,contw +0x28ab 006040 force 10 ,loopcnt +0x28ac 006041 call memset0 +0x28ad 006042 arg mem_afh_map ,contw +0x28ae 006043 force 0 ,regc +0x28af 006044 force 2 ,queue +: 006045 process_freq_3: +0x28b0 006046 fetch 5 ,mem_afh_map_lo +0x28b1 006047 iforce temp +0x28b2 006048 compare 2 ,queue ,0xff +0x28b3 006049 branch process_freq_1 ,true +0x28b4 006050 rshift temp ,temp +: 006051 process_freq_1: +0x28b5 006052 isolate0 0 ,temp +0x28b6 006053 branch process_freq_0 ,true +0x28b7 006054 deposit regc +0x28b8 006055 istore 1 ,contw +: 006056 process_freq_0: +0x28b9 006057 rshift2 temp ,temp +0x28ba 006058 increase 2 ,regc +0x28bb 006059 compare 40 ,regc ,0xfe +0x28bc 006060 nbranch process_freq_2 ,true +0x28bd 006061 fetch 5 ,mem_afh_map_hi +0x28be 006062 iforce temp +0x28bf 006063 compare 2 ,queue ,0xff +0x28c0 006064 branch process_freq_2 ,true +0x28c1 006065 rshift temp ,temp +: 006066 process_freq_2: +0x28c2 006067 sub regc ,78 ,null +0x28c3 006068 branch process_freq_1 ,positive +0x28c4 006069 force 1 ,regc +0x28c5 006070 increase -1 ,queue +0x28c6 006071 nbranch process_freq_3 ,zero +0x28c7 006072 arg mem_afh_map ,rega +0x28c8 006073 deposit contw +0x28c9 006074 isub rega ,pdata +0x28ca 006075 store 1 ,mem_afh_used +0x28cb 006076 rtn +: 006078 rx_radio_freq: +0x28cc 006079 bpatch patch10_0 ,mem_patch10 +0x28cd 006080 call calc_radio_freq +0x28ce 006081 fetch 1 ,mem_debug_config +0x28cf 006082 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now +0x28d0 006083 fetcht 1 ,mem_rx_fixed_freq +: 006084 rx_radio_freq_now: +0x28d1 006085 branch set_freq_rx +: 006088 tx_radio_freq: +0x28d2 006089 bpatch patch10_1 ,mem_patch10 +0x28d3 006090 call calc_radio_freq +0x28d4 006091 fetch 1 ,mem_debug_config +0x28d5 006092 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now +0x28d6 006093 fetcht 1 ,mem_tx_fixed_freq +: 006094 tx_radio_freq_now: +0x28d7 006095 branch set_freq_tx +: 006098 fetch_giac: +0x28d8 006099 force 0 ,uap +0x28d9 006100 fetch 3 ,mem_glap +0x28da 006101 iforce lap +0x28db 006102 rtn +: 006104 fetch_page_bt_adr: +0x28dc 006105 bpatch patch10_2 ,mem_patch10 +0x28dd 006106 fetch 1 ,mem_hci_puap +0x28de 006107 icopy uap +0x28df 006108 fetch 3 ,mem_hci_plap +0x28e0 006109 icopy lap +0x28e1 006110 rtn +: 006112 fetch_self_bt_adr: +0x28e2 006113 bpatch patch10_3 ,mem_patch10 +0x28e3 006114 fetch 2 ,mem_nap +0x28e4 006115 icopy nap +0x28e5 006116 fetch 1 ,mem_uap +0x28e6 006117 icopy uap +0x28e7 006118 fetch 3 ,mem_lap +0x28e8 006119 icopy lap +0x28e9 006120 rtn +: 006122 fetch_extm_bt_adr: +0x28ea 006123 bpatch patch10_4 ,mem_patch10 +0x28eb 006124 fetch 2 ,mem_pnap +0x28ec 006125 icopy nap +0x28ed 006126 fetch 1 ,mem_puap +0x28ee 006127 icopy uap +0x28ef 006128 fetch 3 ,mem_plap +0x28f0 006129 icopy lap +0x28f1 006130 rtn +: 006133 fetch_diac: +0x28f2 006134 bmark1 mark_all_diac ,fetch_diac_do +0x28f3 006135 rtnmark0 mark_inquiry_state +0x28f4 006136 rtnmark0 mark_periodical_diac +: 006137 fetch_diac_do: +0x28f5 006138 and_into -256 ,lap +0x28f6 006139 pulse recalc +0x28f7 006140 nop 32 +0x28f8 006141 rtn +: 006144 shutdown_radio: +0x28f9 006145 bpatch patch10_5 ,mem_patch10 +0x28fa 006146 branch shutdown_radio0 ,is_rx +0x28fb 006147 jam 0xd4 ,rf_tx_pa_ib +0x28fc 006148 nop 4 +0x28fd 006149 jam 0xd2 ,rf_tx_pa_ib +0x28fe 006150 nop 4 +0x28ff 006151 jam 0xd1 ,rf_tx_pa_ib +0x2900 006152 nop 4 +0x2901 006153 fetch 1 ,mem_tx_power +0x2902 006154 beq tx_power_0db ,shutdown_radio_0db +0x2903 006155 beq tx_power_3db ,shutdown_radio_3db +0x2904 006156 beq tx_power_5db ,shutdown_radio_5db +0x2905 006157 beq tx_power_f3db ,shutdown_radio_f3db +0x2906 006158 beq tx_power_f5db ,shutdown_radio_f5db +0x2907 006159 beq tx_power_pair ,shutdown_radio_pair +: 006160 shutdown_radio_5db: +: 006161 shutdown_radio_0db: +0x2908 006162 jam 0xd0 ,rf_tx_pa_ib +0x2909 006163 jam 0xe0 ,rf_tx_pa_gc +: 006164 shutdown_radio0: +0x290a 006165 force 0 ,radio_ctrl +0x290b 006166 disable is_rx +0x290c 006167 disable is_tx +0x290d 006168 pulse packet_end +0x290e 006169 jam 0x0 ,rfen_mdm +0x290f 006170 jam 0x0 ,rfen_tx +0x2910 006171 jam 0x0 ,rfen_rx +0x2911 006172 jam 0 ,rfen_sn +0x2912 006173 jam 0x70 ,rfen_msc +0x2913 006174 jam 0x0 ,rfen_adc +0x2914 006175 rtn +: 006177 shutdown_radio_pair: +: 006178 shutdown_radio_f5db: +: 006179 shutdown_radio_f3db: +: 006180 shutdown_radio_3db: +0x2915 006181 jam 0xd0 ,rf_tx_pa_ib +0x2916 006182 jam 0xc0 ,rf_tx_pa_gc +0x2917 006183 branch shutdown_radio0 +: 006185 set_sync_on: +0x2918 006186 bpatch patch10_6 ,mem_patch10 +0x2919 006187 jam 0x0 ,rfen_mdm +0x291a 006188 jam 0x0 ,rfen_tx +0x291b 006189 jam 0x18 ,rfen_rx +0x291c 006190 jam 0xa7 ,rfen_sn +0x291d 006191 jam 0x7f ,rfen_msc +0x291e 006192 rtn +: 006194 set_freq_rx: +0x291f 006195 bpatch patch10_7 ,mem_patch10 +0x2920 006197 storet 1 ,mem_last_freq +0x2921 006198 add temp ,rx_freq_offset ,rega +0x2922 006199 jam 0x07 ,rf_balun_ctrim +0x2923 006200 branch rf_write_freq +: 006201 rf_rx_enable: +0x2924 006202 bpatch patch11_0 ,mem_patch11 +0x2925 006203 jam 0xcf ,rfen_tx +0x2926 006204 nop 10 +0x2927 006205 jam 0xff ,rfen_rx +0x2928 006206 jam 0xaf ,rfen_sn +0x2929 006207 jam 0xff ,rfen_msc +0x292a 006208 nop 10 +0x292b 006209 jam 0xa0 ,rfen_mdm +0x292c 006210 rtn +: 006212 set_freq_tx_offset: +0x292d 006213 fetch 1 ,mem_250k_freq_enable +0x292e 006214 branch set_freq_tx_2m_offset ,blank +: 006215 set_freq_tx_0m_offset: +0x292f 006216 add temp ,2 ,rega +0x2930 006217 rtn +: 006218 set_freq_tx_2m_offset: +0x2931 006219 add temp ,0 ,rega +0x2932 006220 rtn +: 006222 set_freq_tx: +0x2933 006223 bpatch patch11_1 ,mem_patch11 +0x2934 006224 storet 1 ,mem_last_freq +0x2935 006225 call set_freq_tx_offset +0x2936 006226 call rf_write_freq +0x2937 006227 setarg param_pll_setup +0x2938 006228 call sleep +: 006229 txon: +0x2939 006230 jam 0x1 ,rfen_adc +0x293a 006231 jam 0x3c ,rfen_rx +0x293b 006232 jam 0xe0 ,rfen_tx +0x293c 006233 jam 0x12 ,rf_balun_ctrim +0x293d 006234 nop 10 +0x293e 006235 jam 0x01 ,rfen_mdm +0x293f 006236 jam 0x3d ,rfen_mdm +0x2940 006237 nop 10 +0x2941 006238 jam 0xb7 ,rfen_sn +0x2942 006239 nop 10 +0x2943 006240 jam 0x7f ,rfen_mdm +: 006241 txon_power_select: +0x2944 006242 fetch 1 ,mem_tx_power +0x2945 006243 beq tx_power_0db ,set_tx_power_0db +0x2946 006244 beq tx_power_3db ,set_tx_power_3db +0x2947 006245 beq tx_power_5db ,set_tx_power_5db +0x2948 006246 beq tx_power_f3db ,set_tx_power_f3db +0x2949 006247 beq tx_power_f5db ,set_tx_power_f5db +0x294a 006248 beq tx_power_pair ,set_tx_power_pair +: 006249 set_tx_power_0db: +0x294b 006250 jam 0xf0 ,rf_tx_pa_gc +0x294c 006251 call txon_common +0x294d 006252 jam 0xd8 ,rf_tx_pa_ib +0x294e 006253 rtn +: 006255 set_tx_power_3db: +0x294f 006256 jam 0xdf ,rf_tx_pa_gc +0x2950 006257 call txon_common +0x2951 006258 jam 0xdf ,rf_tx_pa_ib +0x2952 006259 rtn +: 006261 set_tx_power_5db: +0x2953 006262 jam 0xff ,rf_tx_pa_gc +0x2954 006263 call txon_common +0x2955 006264 jam 0xdf ,rf_tx_pa_ib +0x2956 006265 rtn +: 006266 set_tx_power_f3db: +0x2957 006267 jam 0xce ,rf_tx_pa_gc +0x2958 006268 call txon_common +0x2959 006269 jam 0xd8 ,rf_tx_pa_ib +0x295a 006270 rtn +: 006272 set_tx_power_f5db: +0x295b 006273 jam 0xcb ,rf_tx_pa_gc +0x295c 006274 call txon_common +0x295d 006275 jam 0xd8 ,rf_tx_pa_ib +0x295e 006276 rtn +: 006278 set_tx_power_pair: +0x295f 006279 jam 0xd0 ,rf_tx_pa_ib +0x2960 006280 jam 0xc0 ,rf_tx_pa_gc +0x2961 006281 jam 0x4c ,0x8957 +0x2962 006282 jam 0x6c ,0x8958 +0x2963 006283 jam 0x50 ,0x8959 +0x2964 006284 rtn +: 006286 txon_common: +0x2965 006287 nop 4 +0x2966 006288 jam 0xd1 ,rf_tx_pa_ib +0x2967 006289 nop 4 +0x2968 006290 jam 0xd2 ,rf_tx_pa_ib +0x2969 006291 nop 4 +0x296a 006292 jam 0xd4 ,rf_tx_pa_ib +0x296b 006293 rtn +: 006296 initialize_radio: +0x296c 006297 jam clksel_rc ,core_clksel +: 006298 initialize_radio_wait: +0x296d 006299 fetch 2 ,mem_rf_init_ptr +0x296e 006300 bbit0 14 ,initialize_radio_wait +0x296f 006301 iforce contr +0x2970 006302 arg 0x8900 ,temp +: 006303 initialize_radio_loop: +0x2971 006304 ifetch 1 ,contr +0x2972 006305 beq 0xff ,initialize_radio_cont +0x2973 006306 ior temp ,contw +0x2974 006307 ifetch 1 ,contr +0x2975 006308 istore 1 ,contw +0x2976 006309 branch initialize_radio_loop +: 006310 initialize_radio_cont: +0x2977 006311 bpatch patch11_2 ,mem_patch11 +0x2978 006312 call lpm_cal_xtal_startup +0x2979 006313 call switchto_dpllclk +0x297a 006315 setarg param_dpll_start_delay +0x297b 006316 iadd clkn_bt ,pdata +0x297c 006317 store 4 ,mem_dpll_clkn +0x297d 006318 set1 reset ,radio_ctrl +0x297e 006319 force 0 ,radio_ctrl +0x297f 006320 ncall do_rccal ,wake +0x2980 006321 branch set_rccal +: 006324 rf_write_freq: +0x2981 006325 bpatch patch11_3 ,mem_patch11 +0x2982 006326 setarg 2400 +0x2983 006327 iadd rega ,temp +0x2984 006328 fetch 1 ,mem_fcomp_mul +0x2985 006329 jam 0x04 ,rf_pll_rstn +0x2986 006330 imul32 temp ,pdata +0x2987 006331 fetcht 1 ,mem_fcomp_div +0x2988 006332 idiv temp +0x2989 006333 call wait_div_end +0x298a 006334 quotient rega +0x298b 006335 remainder pdata +0x298c 006336 lshift16 pdata ,pdata +0x298d 006337 lshift4 pdata ,pdata +0x298e 006338 idiv temp +0x298f 006339 call wait_div_end +0x2990 006340 quotient pdata +0x2991 006341 lshift8 pdata ,pdata +0x2992 006342 lshift pdata ,pdata +0x2993 006343 ior rega ,pdata +0x2994 006344 hstore 4 ,rf_pll_intg +0x2995 006345 jam 0x44 ,rf_pll_rstn +0x2996 006346 jam 0xc4 ,rf_pll_rstn +0x2997 006347 rtn +: 006350 do_rccal: +0x2998 006351 bpatch patch11_4 ,mem_patch11 +0x2999 006352 jam 0x02 ,rfen_adc +0x299a 006353 setarg 250000 +0x299b 006354 call sleep +0x299c 006355 jam 0x7f ,rfen_rx +0x299d 006356 nop 130 +0x299e 006357 jam 0x30 ,rf_rccal_ctrl +0x299f 006358 jam 0xd0 ,rfen_tx +0x29a0 006359 jam 0x70 ,rf_rccal_ctrl +0x29a1 006360 jam 0xf0 ,rf_rccal_ctrl +0x29a2 006361 force 50 ,loopcnt +: 006362 do_rccal_loop: +0x29a3 006363 hfetch 1 ,rf_rccal_result +0x29a4 006364 bbit1 5 ,do_rccal_end +0x29a5 006365 loop do_rccal_loop +: 006366 do_rccal_end: +0x29a6 006367 store 1 ,mem_rf_rccal +0x29a7 006368 jam 0 ,rfen_tx +0x29a8 006369 jam 0 ,rfen_rx +0x29a9 006370 jam 0x00 ,rfen_adc +0x29aa 006371 rtn +: 006373 set_rccal: +0x29ab 006374 bpatch patch11_5 ,mem_patch11 +0x29ac 006375 fetch 1 ,mem_rf_rccal +0x29ad 006376 set1 5 ,pdata +0x29ae 006377 hstore 1 ,rf_rccal_ctrl +0x29af 006378 hfetcht 1 ,rf_bpf_ctrim +0x29b0 006379 and_into 7 ,temp +0x29b1 006380 lshift3 pdata ,pdata +0x29b2 006381 ior temp ,pdata +0x29b3 006382 hstore 1 ,rf_bpf_ctrim +0x29b4 006383 hfetch 1 ,rf_bpf_ib +0x29b5 006384 set0 bpf_rccal ,pdata +0x29b6 006385 hstore 1 ,rf_bpf_ib +0x29b7 006386 hfetch 1 ,rf_adc_rccal +0x29b8 006387 set0 adc_rccal ,pdata +0x29b9 006388 hstore 1 ,rf_adc_rccal +0x29ba 006389 rtn +: 006391 save_rssi: +0x29bb 006392 bpatch patch11_6 ,mem_patch11 +0x29bc 006393 hfetch 2 ,rf_afc_d2a +0x29bd 006394 rshift4 pdata ,pdata +0x29be 006395 rshift3 pdata ,pdata +0x29bf 006396 sub pdata ,0 ,pdata +: 006397 bcd: +0x29c0 006398 and_into 0xff ,pdata +0x29c1 006399 div pdata ,10 +0x29c2 006400 call wait_div_end +0x29c3 006401 quotient pdata +0x29c4 006402 lshift4 pdata ,pdata +0x29c5 006403 remainder temp +0x29c6 006404 ior temp ,pdata +0x29c7 006405 store 1 ,mem_rssi +0x29c8 006406 rtn +: 006409 switchto_dpllclk: +0x29c9 006410 jam clksel_rc ,core_clksel +0x29ca 006411 hfetch 1 ,rf_clkpll_frac + 2 +0x29cb 006412 set0 4 ,pdata +0x29cc 006413 set0 5 ,pdata +0x29cd 006414 hstore 1 ,rf_clkpll_frac + 2 +0x29ce 006415 jam 0x00 ,rfen_ck +0x29cf 006416 jam 0x00 ,rfen_msc +0x29d0 006417 jam 0x70 ,rfen_msc +0x29d1 006418 jam 0xff ,rfen_ck +0x29d2 006419 hfetch 1 ,rf_clkpll_frac + 2 +0x29d3 006420 set1 4 ,pdata +0x29d4 006421 set1 5 ,pdata +0x29d5 006422 hstore 1 ,rf_clkpll_frac + 2 +0x29d6 006423 call init_lpm_ctrl +0x29d7 006424 hfetch 1 ,rf_clkpll_int +0x29d8 006425 set1 7 ,pdata +0x29d9 006426 hstore 1 ,rf_clkpll_int +0x29da 006427 set0 7 ,pdata +0x29db 006428 hstore 1 ,rf_clkpll_int +0x29dc 006429 set1 7 ,pdata +0x29dd 006430 hstore 1 ,rf_clkpll_int +0x29de 006431 jam clksel_dpll ,core_clksel +0x29df 006432 nop 1 +0x29e0 006433 jam clksel_xtal ,core_clksel +0x29e1 006434 hfetch 1 ,rf_clkpll_frac + 2 +0x29e2 006435 and_into 0xcf ,pdata +0x29e3 006436 hstore 1 ,rf_clkpll_frac + 2 +0x29e4 006437 or_into 0x30 ,pdata +0x29e5 006438 hstore 1 ,rf_clkpll_frac + 2 +0x29e6 006439 rtn +: 006442 xtal_fast_wake: +0x29e7 006443 setarg 0xf0f +0x29e8 006444 branch lpm_write_config +: 006446 init_lpm_ctrl: +0x29e9 006447 setarg 0x80f +0x29ea 006448 branch lpm_write_config +: 006452 start_receiver: +0x29eb 006453 bpatch patch11_7 ,mem_patch11 +0x29ec 006454 call rf_rx_enable +0x29ed 006455 disable is_tx +0x29ee 006456 enable is_rx +0x29ef 006457 pulse init_encrypt +0x29f0 006458 rtn +: 006460 prep_crypt: +0x29f1 006461 bpatch patch12_0 ,mem_patch12 +0x29f2 006462 fetch 1 ,mem_state_map +0x29f3 006463 isolate1 smap_encryption ,pdata +0x29f4 006464 setflag true ,0 ,pdata +0x29f5 006465 hstore 1 ,core_encrypt +0x29f6 006466 arg mem_kc ,contr +0x29f7 006467 ifetch 9 ,contr +0x29f8 006468 iforce kc_ls +0x29f9 006469 ifetch 7 ,contr +0x29fa 006470 iforce kc_ms +0x29fb 006471 fetch 1 ,mem_key_size +0x29fc 006472 add pdata ,-1 ,g1l +0x29fd 006473 pulse kc_p_activate +0x29fe 006474 rtn +: 006476 wait_access_end: +0x29ff 006477 deposit clke +0x2a00 006478 store 6 ,mem_sync_clke +0x2a01 006479 disable decode_fec0 +0x2a02 006480 nbranch shutdown_radio ,sync +0x2a03 006481 arg param_clke_cal ,clke_rt +0x2a04 006482 increase 1 ,clke_bt +0x2a05 006483 and_into 0x1fc ,clke_bt +0x2a06 006484 rtn +: 006488 wait_access_mhalfbnd: +0x2a07 006489 enable decode_fec0 +: 006490 wait_access_mhalfbnd_correlate: +0x2a08 006491 correlate null ,mhalfbnd +0x2a09 006492 branch wait_access_end ,sync +0x2a0a 006493 compare 0x02 ,clke_bt ,0x02 +0x2a0b 006494 nbranch wait_access_mhalfbnd_correlate ,true +0x2a0c 006495 branch wait_access_end +: 006497 wait_access_clkn_rt: +0x2a0d 006498 bpatch patch12_1 ,mem_patch12 +0x2a0e 006499 arg param_conn_access ,timeup +0x2a0f 006500 enable decode_fec0 +0x2a10 006501 correlate clkn_rt ,meet +0x2a11 006502 disable decode_fec0 +0x2a12 006503 nbranch shutdown_radio ,sync +0x2a13 006504 rtn +: 006506 wait_access_forever: +0x2a14 006507 bpatch patch12_2 ,mem_patch12 +0x2a15 006508 enable decode_fec0 +0x2a16 006509 correlate null ,timeout +0x2a17 006510 disable decode_fec0 +0x2a18 006511 nbranch shutdown_radio ,sync +0x2a19 006512 arg param_clke_cal ,clke_rt +0x2a1a 006513 and_into 0x1fc ,clke_bt +0x2a1b 006514 rtn +: 006517 reserve_slot: +0x2a1c 006518 bpatch patch12_3 ,mem_patch12 +0x2a1d 006519 iforce rega +0x2a1e 006520 deposit bt_clk +0x2a1f 006521 iadd temp ,timeup +0x2a20 006522 copy timeup ,pdata +0x2a21 006523 store 4 ,mem_next_btclk +0x2a22 006524 deposit rega +0x2a23 006525 rtn +: 006528 ahead_window: +0x2a24 006529 copy pdata ,temp +0x2a25 006530 bpatch patch12_4 ,mem_patch12 +0x2a26 006531 copy temp ,pdata +0x2a27 006532 call clk2bt +0x2a28 006533 lshift16 bt_clk ,pdata +0x2a29 006534 set1 44 ,pdata +0x2a2a 006535 call clk_diff +0x2a2b 006536 set0 44 ,pdata +0x2a2c 006537 call get_clk +0x2a2d 006538 call clk_diff +0x2a2e 006539 rtn user +0x2a2f 006540 call clk2rt +0x2a30 006541 iforce stop_watch +0x2a31 006542 until null ,timeout +0x2a32 006543 rtn +: 006546 setup_clk: +0x2a33 006547 bpatch patch12_5 ,mem_patch12 +0x2a34 006548 branch setup_clkn ,clknt +0x2a35 006549 until clke_rt ,meet +: 006550 skip_setup_clke: +0x2a36 006551 copy clke_bt ,temp +0x2a37 006552 branch setup_clknbt +: 006553 setup_clkn: +0x2a38 006554 branch skip_setup_clkn ,attempt +0x2a39 006555 until clkn_rt ,meet +: 006556 skip_setup_clkn: +0x2a3a 006557 copy clkn_bt ,temp +: 006558 setup_clknbt: +0x2a3b 006559 branch setup_clk11 ,user +0x2a3c 006560 compare 1 ,temp ,3 +0x2a3d 006561 nbranch setup_clk ,true +: 006562 setup_complete: +0x2a3e 006563 bpatch patch12_6 ,mem_patch12 +0x2a3f 006564 fetch 1 ,mem_state +0x2a40 006565 rtnbit0 state_inconn +0x2a41 006566 fetch 4 ,mem_next_btclk +0x2a42 006567 isub temp ,pdata +0x2a43 006568 nrtn positive +0x2a44 006569 sub pdata ,0xff ,null +0x2a45 006570 branch setup_clk ,positive +0x2a46 006571 rtn +: 006572 setup_clk11: +0x2a47 006573 compare 3 ,temp ,3 +0x2a48 006574 nbranch setup_clk ,true +0x2a49 006575 branch setup_complete +: 006577 rf_setup_time: +0x2a4a 006578 bpatch patch12_7 ,mem_patch12 +0x2a4b 006579 arg param_rf_setup ,timeup +0x2a4c 006580 branch setup_clk +: 006582 rf_setup_time_slave_slot: +0x2a4d 006583 disable user +0x2a4e 006584 branch rf_setup_time +: 006586 rf_setup_time_master_slot: +0x2a4f 006587 enable user +0x2a50 006588 branch rf_setup_time +: 006590 start_transmitter: +0x2a51 006591 bpatch patch13_0 ,mem_patch13 +0x2a52 006592 call prep_crypt +0x2a53 006593 disable is_rx +0x2a54 006594 enable is_tx +0x2a55 006595 rtn +: 006599 start_tx_native: +0x2a56 006600 bpatch patch13_1 ,mem_patch13 +0x2a57 006601 arg param_tx_setup ,timeup +0x2a58 006602 until clkn_rt ,meet +0x2a59 006603 pulse init_encrypt +0x2a5a 006604 rtn +: 006606 start_rx_native: +0x2a5b 006607 bpatch patch13_2 ,mem_patch13 +0x2a5c 006608 arg param_rx_setup ,timeup +0x2a5d 006609 until clkn_rt ,meet +0x2a5e 006610 rtn +: 006613 start_tx_external: +0x2a5f 006614 bpatch patch13_3 ,mem_patch13 +0x2a60 006615 arg param_tx_setup ,timeup +0x2a61 006616 until clke_rt ,meet +0x2a62 006617 pulse init_encrypt +0x2a63 006618 rtn +: 006620 send_access_word: +0x2a64 006621 bpatch patch13_4 ,mem_patch13 +0x2a65 006622 preload access +0x2a66 006623 enable encode_fec0 +0x2a67 006624 set1 txgfsk ,radio_ctrl +0x2a68 006625 inject mod ,72 +0x2a69 006626 disable encode_fec0 +0x2a6a 006627 rtn +: 006630 scan_mode_whiten: +0x2a6b 006631 copy xin ,temp +0x2a6c 006632 or_into 0x60 ,temp +0x2a6d 006633 copy temp ,white_init +0x2a6e 006634 rtn +: 006639 get_free_amaddr: +0x2a6f 006640 bpatch patch13_5 ,mem_patch13 +0x2a70 006641 fetch 1 ,mem_current_amaddr +0x2a71 006642 increase 1 ,pdata +0x2a72 006643 bne param_esco_addr ,get_free_amaddr_cont +0x2a73 006644 force 1 ,pdata +: 006645 get_free_amaddr_cont: +0x2a74 006646 store 1 ,mem_current_amaddr +0x2a75 006647 iforce am_addr +0x2a76 006648 rtn +: 006650 get_clk: +0x2a77 006651 copy clkn ,temp +0x2a78 006652 rtn master +0x2a79 006653 copy clke ,temp +0x2a7a 006654 rtn +: 006656 get_clkbt: +0x2a7b 006657 deposit clkn_bt +0x2a7c 006658 rtn master +0x2a7d 006659 deposit clke_bt +0x2a7e 006660 rtn +: 006663 supervision_update: +0x2a7f 006664 bpatch patch13_6 ,mem_patch13 +0x2a80 006665 fetcht 4 ,mem_supervision_timer +0x2a81 006666 call get_clkbt +0x2a82 006667 isub temp ,timeup +0x2a83 006668 deposit timeup +0x2a84 006669 fetcht 2 ,mem_supervision_to +0x2a85 006670 lshift temp ,temp +0x2a86 006671 isub temp ,pdata +0x2a87 006672 rtn +: 006674 supervision_flush: +0x2a88 006675 bpatch patch13_7 ,mem_patch13 +0x2a89 006676 call get_clkbt +0x2a8a 006677 store 4 ,mem_supervision_timer +0x2a8b 006678 rtn +: 006680 assert: +0x2a8c 006681 bpatch patch14_0 ,mem_patch14 +0x2a8d 006682 branch assert +: 006684 loop: +0x2a8e 006685 branch loop +: 006687 sleep: +0x2a8f 006688 rtn blank +0x2a90 006690 rshift pdata ,pdata +0x2a91 006691 increase -3 ,pdata +: 006692 sleep_loop: +0x2a92 006693 increase -1 ,pdata +0x2a93 006694 nbranch sleep_loop ,zero +0x2a94 006695 force 0 ,pdata +0x2a95 006696 rtn +: 006700 init_param: +0x2a96 006702 arg 0x10 ,loopcnt +0x2a97 006703 arg 0 ,contw +0x2a98 006704 call memset0 +0x2a99 006705 arg mem_le_state ,contw +0x2a9a 006706 arg 10 ,loopcnt +0x2a9b 006707 call memset0 +0x2a9c 006708 jam 0 ,mem_sp_calc +0x2a9d 006709 jam 0 ,mem_fifo_temp +0x2a9e 006710 jam 0 ,mem_le_testtype +0x2a9f 006711 jam 0 ,mem_debug_config +0x2aa0 006712 jam 0 ,mem_lmp_conn_state +0x2aa1 006713 bpatch patch14_1 ,mem_patch14 +0x2aa2 006714 jam 0 ,mem_connection_options +0x2aa3 006715 jam 0 ,mem_tester_emulate +0x2aa4 006716 jam 0 ,mem_tester_cnt +0x2aa5 006717 setarg param_glap +0x2aa6 006718 store 3 ,mem_glap +0x2aa7 006719 setarg param_acl_pktlen +0x2aa8 006720 store 2 ,mem_acl_pktlen +0x2aa9 006721 jam param_sco_pktlen ,mem_sco_pktlen +0x2aaa 006722 jam param_acl_pktcnt ,mem_acl_pktcnt +0x2aab 006723 jam param_sco_pktcnt ,mem_sco_pktcnt +0x2aac 006724 setarg param_hci_version +0x2aad 006725 store 3 ,mem_hci_version +0x2aae 006730 jam 0x60 ,mem_fhs_misc +0x2aaf 006731 jam param_max_slot ,mem_max_slot +0x2ab0 006732 jam 0x02 ,mem_fw_ver +0x2ab1 006733 fetch 1 ,mem_ssp_enable +0x2ab2 006734 ncall init_memp ,blank +0x2ab3 006735 fetch 1 ,mem_le_secure_connect_enable +0x2ab4 006736 ncall init_memp_256 ,blank +0x2ab5 006737 bpatch patch14_2 ,mem_patch14 +0x2ab6 006738 rtn wake +0x2ab7 006739 setarg 0 +0x2ab8 006740 store 2 ,mem_tx_len +0x2ab9 006741 rshift clkn_bt ,pdata +0x2aba 006742 store 4 ,mem_last_clkn +0x2abb 006743 rtn +: 006750 lpmstate: +0x2abc 006751 setarg 0xee21 +0x2abd 006752 hstore 2 ,core_clkoff +0x2abe 006753 hfetch 4 ,core_gpio_in +0x2abf 006754 store 4 ,mem_saved_gpio_in +0x2ac0 006755 hfetch 1 ,core_lpm_ldocnt +0x2ac1 006756 store 1 ,mem_wakup_from_power_flag +0x2ac2 006757 bbit0 gpio_latch ,loadcode +0x2ac3 006758 enable wake +0x2ac4 006759 bbit0 cold_wake ,lpmwake +0x2ac5 006760 disable wake +0x2ac6 006761 deposit auxcnt +0x2ac7 006762 nbranch lpmwake ,blank +0x2ac8 006763 hfetch 1 ,core_lpm_ctrl + 3 +0x2ac9 006764 bbit1 reload_code ,lpmwake +0x2aca 006765 arg param_hibernate_clks ,temp +0x2acb 006766 branch lpm_enter_sleep +: 006767 lpmwake: +0x2acc 006768 hfetch 3 ,core_lpm_xtalcnt +0x2acd 006769 hstore 3 ,core_lpm_reg +0x2ace 006770 ifetch 1 ,contr +0x2acf 006771 or_into isogate_mask ,pdata +0x2ad0 006772 istore 1 ,contw +0x2ad1 006773 call lpm_write_ctrl2 +0x2ad2 006774 hfetch 1 ,core_lpm_isogate +0x2ad3 006775 set1 enable_retmem ,pdata +0x2ad4 006776 hstore 1 ,core_lpm_isogate +0x2ad5 006777 call lpm_write_ctrl2 +0x2ad6 006778 call lpm_load_context ,wake +0x2ad7 006779 hfetch 1 ,core_lpm_reg + 2 +0x2ad8 006780 set0 gpio_latch ,pdata +0x2ad9 006781 hstore 1 ,core_lpm_reg + 2 +0x2ada 006782 call lpm_write_ctrl2 +0x2adb 006783 nbranch loadcode ,wake +0x2adc 006784 rtnmark0 mark_otp_encrypt +0x2add 006785 jam lock_otp ,core_misc_ctrl +0x2ade 006786 rtn +: 006788 lpm_load_context: +0x2adf 006789 fetch 1 ,mem_saved_spidctrl +0x2ae0 006790 hstore 1 ,core_spid_ctrl +0x2ae1 006791 fetch 3 ,mem_saved_gsel +0x2ae2 006792 hstore 3 ,core_gpio_sel +0x2ae3 006793 fetch 4 ,mem_saved_gpio + 4 +0x2ae4 006794 hstore 4 ,core_gpio_out0 +0x2ae5 006795 fetch 4 ,mem_saved_gpio +0x2ae6 006796 hstore 4 ,core_gpio_oe0 +0x2ae7 006797 fetch 8 ,mem_saved_gpio + 8 +0x2ae8 006798 hstore 8 ,core_gpio_pu0 +0x2ae9 006799 fetch 8 ,mem_saved_mark +0x2aea 006800 iforce mark +0x2aeb 006801 hfetch 8 ,core_gpio_wakeup_low +0x2aec 006802 store 8 ,mem_gpio_wakeup_low +0x2aed 006803 call load_ucode +0x2aee 006804 rtn +: 006806 lpm_save_context: +0x2aef 006807 deposit mark +0x2af0 006808 store 8 ,mem_saved_mark +0x2af1 006809 hfetch 8 ,core_gpio_oe0 +0x2af2 006810 store 8 ,mem_saved_gpio +0x2af3 006811 ifetch 8 ,contr +0x2af4 006812 istore 8 ,contw +0x2af5 006813 hfetch 3 ,core_gpio_sel +0x2af6 006814 store 3 ,mem_saved_gsel +0x2af7 006815 hfetch 1 ,core_spid_ctrl +0x2af8 006816 store 1 ,mem_saved_spidctrl +0x2af9 006817 branch lpm_write_gpio_wakeup +: 006819 lpo_calibration: +0x2afa 006820 hfetch 1 ,core_bist_ctrl +0x2afb 006821 nbranch lpo_cal_inited ,blank +0x2afc 006822 fetch 3 ,mem_clks_per_lpo +0x2afd 006823 nrtn blank +0x2afe 006824 jam 0xc0 ,core_bist_ctrl +0x2aff 006825 jam ccnt_start ,core_misc_ctrl +: 006826 lpo_cal_inited: +0x2b00 006827 hfetch 1 ,core_perf_status +0x2b01 006828 rtnbit0 1 +0x2b02 006829 hfetch 3 ,core_clk_counter +0x2b03 006830 store 3 ,mem_clks_per_lpo +0x2b04 006831 rtn +: 006835 lpm_adjust_clk: +0x2b05 006836 bpatch patch14_3 ,mem_patch14 +0x2b06 006837 deposit clke +0x2b07 006838 call clk_diff_rt +0x2b08 006839 fetcht 4 ,mem_sleep_counter_all +0x2b09 006840 sub temp ,0xff ,null +0x2b0a 006841 rtn positive +0x2b0b 006842 lshift8 pdata ,pdata +0x2b0c 006843 lshift4 pdata ,pdata +0x2b0d 006844 idiv temp +0x2b0e 006845 call wait_div_end +0x2b0f 006846 quotient pdata +0x2b10 006847 arg param_lpm_adjmax ,temp +0x2b11 006848 call ceiling +0x2b12 006849 store 1 ,mem_lpm_adjust +0x2b13 006850 nbranch lpm_adjust_positive ,user +0x2b14 006851 sub pdata ,0 ,pdata +: 006852 lpm_adjust_positive: +0x2b15 006853 fetcht 3 ,mem_clks_per_lpo +0x2b16 006854 iadd temp ,pdata +0x2b17 006855 store 3 ,mem_clks_per_lpo +: 006856 lpm_clear_counter: +0x2b18 006857 setarg 0 +0x2b19 006858 store 4 ,mem_sleep_counter_all +0x2b1a 006859 rtn +: 006863 lpm_doze: +0x2b1b 006864 fetch 1 ,mem_lpm_config + 2 +0x2b1c 006865 set1 reload_code ,pdata +0x2b1d 006866 store 1 ,mem_lpm_config + 2 +0x2b1e 006867 branch lpm_hibernate_normal +: 006871 lpm_hibernate: +0x2b1f 006872 arg param_hibernate_clks ,temp +0x2b20 006873 fetch 1 ,mem_lpm_config + 1 +0x2b21 006874 set0 7 ,pdata +0x2b22 006875 store 1 ,mem_lpm_config + 1 +: 006876 lpm_hibernate_normal: +0x2b23 006877 bpatch patch14_4 ,mem_patch14 +0x2b24 006878 call lpm_write_gpio_wakeup +0x2b25 006879 fetch 1 ,mem_lpm_hibernate_switch +0x2b26 006880 store 1 ,mem_lpm_xtalcnt + 4 +0x2b27 006881 fetch 1 ,mem_lpm_xtalcnt + 2 +0x2b28 006882 set1 cold_wake ,pdata +0x2b29 006883 store 1 ,mem_lpm_xtalcnt + 2 +: 006886 lpm_sleep: +0x2b2a 006887 bpatch patch14_5 ,mem_patch14 +0x2b2b 006888 call xtal_fast_wake +0x2b2c 006889 fetch 4 ,mem_sleep_counter_all +0x2b2d 006890 iadd temp ,pdata +0x2b2e 006891 store 4 ,mem_sleep_counter_all +0x2b2f 006892 call lpm_save_context +0x2b30 006893 fetch 5 ,mem_lpm_xtalcnt +0x2b31 006894 hstore 4 ,core_lpm_reg +0x2b32 006895 rshift32 pdata ,rega +0x2b33 006896 until null ,lpo_edge +0x2b34 006897 deposit clkn +0x2b35 006898 store 6 ,mem_sleep_clkn +0x2b36 006899 jam lpmreg_sel_ctrl2 ,core_lpm_wr +0x2b37 006900 until null ,lpo_edge +0x2b38 006901 until null ,lpo_edge +0x2b39 006902 deposit rega +0x2b3a 006903 hstore 1 ,core_lpm_isogate +0x2b3b 006904 jam lpmreg_sel_ctrl2 ,core_lpm_wr +: 006905 lpm_enter_sleep: +0x2b3c 006906 until null ,lpo_edge +0x2b3d 006907 until null ,lpo_edge +0x2b3e 006908 hstoret 4 ,core_lpm_reg +0x2b3f 006909 jam lpmreg_sel_counter ,core_lpm_wr +0x2b40 006910 until null ,never +: 006915 lpm_recover_clk: +0x2b41 006916 bpatch patch14_6 ,mem_patch14 +0x2b42 006917 setarg 0 +0x2b43 006918 copy auxcnt ,null +0x2b44 006919 branch lpm_recover_timeout ,zero +0x2b45 006920 hfetch 1 ,core_lpm_xtalcnt +0x2b46 006921 hfetcht 1 ,core_lpm_buckcnt +0x2b47 006922 isub temp ,null +0x2b48 006923 branch lpm_recover_xtal ,positive +0x2b49 006924 deposit temp +: 006925 lpm_recover_xtal: +0x2b4a 006926 isub auxcnt ,pdata +0x2b4b 006927 increase 1 ,pdata +: 006928 lpm_recover_timeout: +0x2b4c 006929 increase 8 ,pdata +0x2b4d 006930 until null ,lpo_edge +0x2b4e 006931 iadd lpo_time ,pdata +0x2b4f 006932 fetcht 4 ,mem_sleep_counter +0x2b50 006933 iadd temp ,pdata +0x2b51 006934 fetcht 3 ,mem_clks_per_lpo +0x2b52 006935 imul32 temp ,pdata +0x2b53 006936 rshift8 pdata ,pdata +0x2b54 006937 rshift4 pdata ,pdata +0x2b55 006938 increase param_lpm_fix ,pdata +0x2b56 006939 arg 3750 ,temp +0x2b57 006940 idiv temp +0x2b58 006941 call wait_div_end +0x2b59 006942 quotient pdata +0x2b5a 006943 lshift16 pdata ,pdata +0x2b5b 006944 remainder temp +0x2b5c 006945 ior temp ,pdata +0x2b5d 006946 fetcht 6 ,mem_sleep_clkn +0x2b5e 006947 call clk_add +0x2b5f 006948 copy temp ,clkn +0x2b60 006949 fetch 6 ,mem_context + coffset_clk_offset +0x2b61 006950 call calc_clke2 +0x2b62 006951 deposit clke +0x2b63 006952 store 6 ,mem_pdatatemp +0x2b64 006953 deposit auxcnt +0x2b65 006954 istore 1 ,contw +0x2b66 006955 hfetch 1 ,core_gpio_in1 +0x2b67 006956 or_into 0xf0 ,pdata +0x2b68 006957 istore 1 ,contw +0x2b69 006958 rtn +: 006960 lpm_dispatch: +0x2b6a 006961 bpatch patch14_7 ,mem_patch14 +0x2b6b 006962 call lpo_calibration +0x2b6c 006963 fetch 3 ,mem_clks_per_lpo +0x2b6d 006964 rtn blank +0x2b6e 006965 fetch 1 ,mem_lpm_mode +0x2b6f 006966 rtn blank +0x2b70 006967 fetch 1 ,mem_ssp_enable +0x2b71 006968 branch lpm_dispatch_next ,blank +0x2b72 006969 fetch 1 ,mem_sp_local_key_invalid +0x2b73 006970 rtn blank +: 006971 lpm_dispatch_next: +0x2b74 006972 fetch 1 ,mem_le_sc_calc +0x2b75 006973 nrtn blank +0x2b76 006974 call lpm_check_wake_lock +0x2b77 006975 nrtn blank +0x2b78 006976 fetch 1 ,mem_context +0x2b79 006977 compare 3 ,pdata ,0x7 +0x2b7a 006978 nbranch lpm_dispatch_unconn ,true +0x2b7b 006979 fetch 2 ,mem_context + coffset_tsniff +0x2b7c 006980 rtn blank +0x2b7d 006981 rtn wake +0x2b7e 006982 bpatch patch15_0 ,mem_patch15 +: 006983 lpm_dispatch_next2: +0x2b7f 006984 fetcht 1 ,mem_lpm_current_mult +0x2b80 006985 fetch 2 ,mem_context + coffset_tsniff +0x2b81 006986 imul32 temp ,pdata +0x2b82 006987 rshift4 temp ,temp +0x2b83 006988 rshift2 temp ,temp +0x2b84 006989 isub temp ,pdata +0x2b85 006990 fetcht 4 ,mem_context + coffset_sniff_anchor +0x2b86 006991 iadd temp ,pdata +0x2b87 006992 fetcht 1 ,mem_lpm_overhead +0x2b88 006993 isub temp ,pdata +0x2b89 006994 lshift16 pdata ,alarm +0x2b8a 006995 bpatch patch15_1 ,mem_patch15 +0x2b8b 006996 fetch 2 ,mem_context + coffset_rx_window +0x2b8c 006997 rshift pdata ,pdata +0x2b8d 006998 call clk2bt +0x2b8e 006999 deposit alarm +0x2b8f 007000 call clk_diff +0x2b90 007001 copy clke ,temp +0x2b91 007002 call clk_diff_rt +0x2b92 007003 rtn user +: 007004 lpm_dispatch_sleep: +0x2b93 007005 call clk2lpo +: 007006 lpm_dispatch_lpo: +0x2b94 007007 bpatch patch15_2 ,mem_patch15 +0x2b95 007008 fetch 1 ,mem_lpm_xtalcnt +0x2b96 007009 isub temp ,null +0x2b97 007010 branch lpm_clear_counter ,positive +0x2b98 007011 storet 4 ,mem_sleep_counter +0x2b99 007012 call app_will_enter_lpm +0x2b9a 007013 call l2cap_lpm_save_txbuf +0x2b9b 007014 fetcht 4 ,mem_sleep_counter +0x2b9c 007015 branch lpm_sleep +: 007017 lpm_dispatch_unconn: +0x2b9d 007018 bpatch patch15_3 ,mem_patch15 +0x2b9e 007019 fetch 1 ,mem_context +0x2b9f 007020 rtnbit1 state_inconn +0x2ba0 007021 rtnbit1 state_inpage +0x2ba1 007022 fetch 1 ,mem_ssp_enable +0x2ba2 007023 branch lpm_unconn_nossp ,blank +0x2ba3 007024 fetch 1 ,mem_sp_local_key_invalid +0x2ba4 007025 rtn blank +: 007026 lpm_unconn_nossp: +0x2ba5 007027 bpatch patch15_4 ,mem_patch15 +0x2ba6 007028 fetch 1 ,mem_le_adv_enable +0x2ba7 007029 nbranch lpm_unconn_cont ,blank +0x2ba8 007030 fetch 1 ,mem_scan_mode +0x2ba9 007031 rtn blank +: 007032 lpm_unconn_cont: +0x2baa 007033 fetch 2 ,mem_lpm_interval +0x2bab 007034 rtn blank +: 007035 lpm_sleep_btclk: +0x2bac 007036 fetcht 1 ,mem_lpm_overhead +0x2bad 007037 isub temp ,pdata +0x2bae 007038 arg 7500 ,temp +0x2baf 007039 imul32 temp ,pdata +0x2bb0 007040 branch lpm_dispatch_sleep +: 007042 lpm_set_mult: +0x2bb1 007043 bpatch patch15_5 ,mem_patch15 +0x2bb2 007044 disable wake +0x2bb3 007045 fetch 1 ,mem_state +0x2bb4 007046 rtnbit0 state_insniff +0x2bb5 007047 nbranch lpm_not_match ,match +0x2bb6 007048 call lpm_match +0x2bb7 007049 fetch 2 ,mem_rx_window_sniff +0x2bb8 007050 store 2 ,mem_rx_window +0x2bb9 007051 fetch 1 ,mem_arq +0x2bba 007052 bbit1 wack ,lpm_mult_short +0x2bbb 007053 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x2bbc 007054 call l2cap_malloc_is_fifo_empty +0x2bbd 007055 nbranch lpm_mult_short ,blank +0x2bbe 007056 fetch 1 ,mem_classic_bt_flag +0x2bbf 007057 bbit1 short_mult_flag ,lpm_mult_short +: 007058 lpm_mult_wait_timeout: +0x2bc0 007059 jam 0 ,mem_lpm_current_mult +0x2bc1 007060 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x2bc2 007061 fetch 1 ,mem_lpm_mult_cnt +0x2bc3 007062 branch lpm_mult_long ,blank +0x2bc4 007063 increase -1 ,pdata +0x2bc5 007064 store 1 ,mem_lpm_mult_cnt +0x2bc6 007065 rtn +: 007068 classic_bt_set_mult_short_flag: +0x2bc7 007069 arg short_mult_flag ,queue +0x2bc8 007070 branch classic_bluetooth_set_flag +: 007072 classic_bt_clr_mult_short_flag: +0x2bc9 007073 arg short_mult_flag ,queue +0x2bca 007074 branch classic_bluetooth_clr_flag +: 007078 lpm_match: +0x2bcb 007079 jam 0 ,mem_sniff_unint_lost +0x2bcc 007080 fetch 3 ,mem_sniff_rcv +0x2bcd 007081 increase 1 ,pdata +0x2bce 007082 store 3 ,mem_sniff_rcv +0x2bcf 007083 rtn +: 007085 lpm_not_match: +0x2bd0 007086 bpatch patch15_6 ,mem_patch15 +0x2bd1 007087 fetcht 2 ,mem_rx_window_sniff +0x2bd2 007088 rshift temp ,temp +0x2bd3 007089 fetch 2 ,mem_rx_window +0x2bd4 007090 iadd temp ,pdata +0x2bd5 007091 store 2 ,mem_rx_window +: 007092 lpm_lost: +0x2bd6 007093 jam 0 ,mem_lpm_current_mult +0x2bd7 007094 fetch 3 ,mem_sniff_lost +0x2bd8 007095 increase 1 ,pdata +0x2bd9 007096 store 3 ,mem_sniff_lost +0x2bda 007097 fetch 1 ,mem_sniff_unint_lost +0x2bdb 007098 increase 1 ,pdata +0x2bdc 007099 store 1 ,mem_sniff_unint_lost +0x2bdd 007100 rtn +: 007102 lpm_mult_short: +0x2bde 007103 jam 0 ,mem_lpm_current_mult +0x2bdf 007104 fetch 1 ,mem_lpm_mult_timeout +0x2be0 007105 store 1 ,mem_lpm_mult_cnt +0x2be1 007106 rtn +: 007108 lpm_mult_long: +0x2be2 007109 fetcht 1 ,mem_lpm_mult +0x2be3 007110 storet 1 ,mem_lpm_current_mult +0x2be4 007111 rtn +: 007113 lpm_cal_xtal_startup: +0x2be5 007114 bpatch patch15_7 ,mem_patch15 +0x2be6 007115 fetch 1 ,mem_lpm_xtalcnt +0x2be7 007116 nrtn blank +0x2be8 007117 jam clksel_rc ,core_clksel +0x2be9 007118 setarg 0xf0c +0x2bea 007119 call lpm_write_config +0x2beb 007120 setarg 200000 +0x2bec 007121 call sleep +0x2bed 007122 until null ,lpo_edge +0x2bee 007123 copy lpo_time ,alarm +0x2bef 007124 call xtal_fast_wake +0x2bf0 007125 jam clksel_xtal ,core_clksel +0x2bf1 007126 nop 10 +0x2bf2 007127 until null ,lpo_edge +0x2bf3 007128 deposit lpo_time +0x2bf4 007129 isub alarm ,pdata +0x2bf5 007130 increase 0x30 ,pdata +0x2bf6 007131 arg 0xff ,temp +0x2bf7 007132 call ceiling +0x2bf8 007133 store 1 ,mem_lpm_xtalcnt +0x2bf9 007134 nop 30000 +0x2bfa 007135 nop 30000 +0x2bfb 007136 nop 30000 +0x2bfc 007137 rtn +: 007139 lpm_cal_xtal_startup_by_snooze: +0x2bfd 007140 fetch 1 ,mem_lpm_xtalcnt +0x2bfe 007141 nrtn blank +0x2bff 007142 jam 0xff ,core_xtal_stable_time +0x2c00 007143 jam clksel_rc ,core_clksel +0x2c01 007144 call xtal_fast_wake +0x2c02 007145 setarg 1000 +0x2c03 007146 iadd lpo_time ,alarm +0x2c04 007147 snooze +0x2c05 007148 deposit lpo_time +0x2c06 007149 nop 12000 +0x2c07 007150 nop 12000 +0x2c08 007151 nop 12000 +0x2c09 007152 nop 12000 +0x2c0a 007153 nop 12000 +0x2c0b 007154 nop 12000 +0x2c0c 007155 nop 12000 +0x2c0d 007156 nop 12000 +0x2c0e 007157 nop 12000 +0x2c0f 007158 isub alarm ,pdata +0x2c10 007159 add pdata ,0x30 ,pdata +0x2c11 007160 arg 0xff ,temp +0x2c12 007161 call ceiling +0x2c13 007162 store 1 ,mem_lpm_xtalcnt +0x2c14 007163 nop 30000 +0x2c15 007164 nop 30000 +0x2c16 007165 nop 30000 +0x2c17 007166 rtn +: 007171 lpm_write_config: +0x2c18 007172 arg 0xfff ,contw +0x2c19 007173 iand contw ,contw +0x2c1a 007174 fetch 1 ,mem_lpm_config +0x2c1b 007175 and_into 0xf0 ,pdata +0x2c1c 007176 lshift8 pdata ,pdata +0x2c1d 007177 ior contw ,pdata +0x2c1e 007178 hstore 2 ,core_lpm_reg +0x2c1f 007179 ifetch 2 ,contr +0x2c20 007180 istore 2 ,contw +: 007182 lpm_write_ctrl: +0x2c21 007183 setarg lpmreg_sel_ctrl +0x2c22 007184 branch lpm_write +: 007186 lpm_write_ctrl2: +0x2c23 007187 setarg lpmreg_sel_ctrl2 +: 007188 lpm_write: +0x2c24 007189 until null ,lpo_edge +0x2c25 007190 hstore 1 ,core_lpm_wr +0x2c26 007191 until null ,lpo_edge +0x2c27 007192 until null ,lpo_edge +0x2c28 007193 rtn +: 007196 lpm_write_gpio_wakeup: +0x2c29 007197 bpatch patch16_0 ,mem_patch16 +0x2c2a 007198 fetch 4 ,mem_gpio_wakeup_low +0x2c2b 007199 hstore 4 ,core_lpm_reg +0x2c2c 007200 setarg lpmreg_sel_gpiolow +0x2c2d 007201 call lpm_write +0x2c2e 007202 fetch 4 ,mem_gpio_wakeup_high +0x2c2f 007203 hstore 4 ,core_lpm_reg +0x2c30 007204 setarg lpmreg_sel_gpiohigh +0x2c31 007205 branch lpm_write +: 007207 lpm_get_wake_lock: +0x2c32 007208 fetch 2 ,mem_lpm_wake_lock +0x2c33 007209 qset1 pdata +0x2c34 007210 store 2 ,mem_lpm_wake_lock +0x2c35 007211 rtn +: 007213 lpm_put_wake_lock: +0x2c36 007214 fetch 2 ,mem_lpm_wake_lock +0x2c37 007215 qset0 pdata +0x2c38 007216 store 2 ,mem_lpm_wake_lock +0x2c39 007217 rtn +: 007221 lpm_check_wake_lock: +0x2c3a 007222 bpatch patch16_1 ,mem_patch16 +0x2c3b 007223 call app_check_wake_lock +0x2c3c 007224 fetch 2 ,mem_lpm_wake_lock +0x2c3d 007225 copy pdata ,rega +0x2c3e 007226 fetch 1 ,mem_state_map +0x2c3f 007227 isolate1 smap_rxlmp ,pdata +0x2c40 007228 setflag true ,wake_lock_lmp_rx ,rega +0x2c41 007229 fetch 1 ,mem_lmo_opcode1 +0x2c42 007230 fetcht 1 ,mem_lmo_opcode2 +0x2c43 007231 iadd temp ,pdata +0x2c44 007232 fetcht 1 ,mem_lmp_to_send +0x2c45 007233 iadd temp ,pdata +0x2c46 007234 nsetflag blank ,wake_lock_lmp_tx ,rega +0x2c47 007235 fetch 1 ,mem_le_tx_buff_used +0x2c48 007236 nsetflag blank ,wake_lock_ble_tx ,rega +0x2c49 007237 fetch 2 ,mem_l2cap_rxbuff1_len +0x2c4a 007238 fetcht 2 ,mem_l2cap_rxbuff2_len +0x2c4b 007239 iadd temp ,pdata +0x2c4c 007240 nsetflag blank ,wake_lock_l2cap_rx ,rega +0x2c4d 007241 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 +0x2c4e 007242 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega +0x2c4f 007243 fetch util_fifo_len ,mem_ipc_fifo_c512bt +0x2c50 007244 nsetflag blank ,wake_lock_ipc_c512bt ,rega +0x2c51 007245 fetch 1 ,mem_hci_cmd +0x2c52 007246 nsetflag blank ,wake_lock_cmd ,rega +0x2c53 007247 fetch 1 ,mem_device_option +0x2c54 007248 compare dvc_op_module ,pdata ,0xff +0x2c55 007249 call lpm_uart_wake_lock ,true +0x2c56 007250 setarg -8 +0x2c57 007251 iand rega ,rega +0x2c58 007252 copy rega ,pdata +0x2c59 007253 store 2 ,mem_lpm_wake_lock +0x2c5a 007254 rtn +: 007256 lpm_uart_wake_lock: +0x2c5b 007257 hfetch 2 ,core_uart_rxitems +0x2c5c 007258 nsetflag blank ,wake_lock_uart_rx ,rega +0x2c5d 007259 hfetch 2 ,core_uart_txitems +0x2c5e 007260 nsetflag blank ,wake_lock_uart_tx ,rega +0x2c5f 007261 rtn +: 007263 lpm_shut_down: +0x2c60 007264 hfetch 4 ,core_lpm_ctrl +0x2c61 007265 set0 27 ,pdata +0x2c62 007266 hstore 4 ,core_lpm_reg +0x2c63 007267 call lpm_write_ctrl +0x2c64 007268 branch assert +: 007270 lpm_disable_exen_output: +0x2c65 007271 hfetch 4 ,core_lpm_xtalcnt +0x2c66 007272 set0 20 ,pdata +0x2c67 007273 hstore 4 ,core_lpm_reg +0x2c68 007274 branch lpm_write_ctrl2 +: 007276 check_bt_disabled: +0x2c69 007277 fetch 2 ,mem_chip_functions +0x2c6a 007278 bbit1 bt_disabled ,assert +0x2c6b 007279 rtn +: 007280 check_ble_disabled: +0x2c6c 007281 fetch 2 ,mem_chip_functions +0x2c6d 007282 bbit1 ble_disabled ,assert +0x2c6e 007283 rtn +: 007284 check_module_disabled: +0x2c6f 007285 fetch 2 ,mem_chip_functions +0x2c70 007286 bbit1 module_disable ,assert +0x2c71 007287 rtn +: 007348 g24_dispatch: +0x2c72 007349 bpatch patch16_2 ,mem_patch16 +0x2c73 007350 call g24_head_ptr2regc +0x2c74 007351 add regc ,offset_24g_mode ,regb +0x2c75 007352 ifetch 1 ,regb +0x2c76 007354 rtneq disable_24g +0x2c77 007355 beq tx_24g ,g24_transmit_process +0x2c78 007356 beq rx_24g ,g24_receive_process +0x2c79 007357 rtn +: 007359 g24_head_ptr2regc: +0x2c7a 007360 fetcht 2 ,mem_24g_head_ptr +0x2c7b 007361 copy temp ,regc +0x2c7c 007362 rtn +: 007364 g24_receive_process_init: +0x2c7d 007365 call g24_receive_init +0x2c7e 007366 branch g24_mode_switch_init +: 007368 g24_receive_process: +0x2c7f 007369 call g24_mode_switch +0x2c80 007370 call g24_dongle_work_mode_auto +0x2c81 007371 call g24_dongle_bind_mode_auto +0x2c82 007372 branch g24_dongle_search_mode_auto +: 007375 g24_pair_init: +0x2c83 007378 call g24_set0_mem_pid +0x2c84 007379 setarg g24_pair_ch +0x2c85 007380 call g24_store_mem_ch +0x2c86 007381 call g24_store_mem_pair_txpower +0x2c87 007384 add regc ,offset_24g_paring_addr ,rega +0x2c88 007385 ifetch 4 ,rega +0x2c89 007386 branch g24_store_mem_addr +: 007388 g24_ch: +0x2c8a 007389 call g24_head_ptr2regc +0x2c8b 007390 add regc ,offset_24g_current_ch_number ,regb +0x2c8c 007391 ifetcht 1 ,regb +0x2c8d 007393 call g24_ch_temp_incre_size4 +0x2c8e 007394 add regc ,offset_24g_current_ch_number ,contw +0x2c8f 007396 branch g24_contw_istoret_1byte +: 007398 g24_ch_temp_incre_size4: +0x2c90 007399 call g24_ch_calc +0x2c91 007400 increase 1 ,temp +0x2c92 007401 and_into 3 ,temp +0x2c93 007402 rtn +: 007404 g24_ch_calc: +0x2c94 007405 add regc ,offset_24g_addr ,regb +0x2c95 007406 ifetch 1 ,regb +0x2c96 007408 and_into 0x03 ,pdata +0x2c97 007409 mul32 pdata ,4 ,rega +0x2c98 007410 add regc ,offset_24g_ch_map1 ,pdata +0x2c99 007412 iadd rega ,pdata +0x2c9a 007413 iadd temp ,contr +0x2c9b 007414 ifetch 1 ,contr +0x2c9c 007416 branch g24_store_mem_ch +: 007418 g24_set_device_addr: +0x2c9d 007419 call g24_store_mem_tx_power_temp +0x2c9e 007420 call otp_enable_chgpump +0x2c9f 007421 setarg 0x7e2 +0x2ca0 007422 arg mem_temp ,rega +0x2ca1 007423 arg 4 ,temp +0x2ca2 007424 call otpd_read_data +0x2ca3 007425 call otp_disable_chgpump +0x2ca4 007426 fetch 4 ,mem_temp +0x2ca5 007427 call g24_store_mem_device_addr +0x2ca6 007429 nrtn blank +0x2ca7 007430 fetch 4 ,mem_lap +0x2ca8 007432 branch g24_store_mem_device_addr +: 007434 g24_transmit_rf_sta_init: +0x2ca9 007435 call g24_set1_mem_rf_last_sta +0x2caa 007437 setarg 0 +0x2cab 007438 call g24_store_mem_sync_cnt +: 007440 g24_transmit_rf_ctrl_clear: +0x2cac 007441 call g24_fetch_mem_data_type +0x2cad 007443 and_into bits_data ,pdata +0x2cae 007445 branch g24_store_mem_data_type +: 007447 g24_hop_ch_enable: +0x2caf 007448 call g24_fetch_mem_data_type +0x2cb0 007450 set1 bit_hop ,pdata +0x2cb1 007451 call g24_store_mem_data_type +0x2cb2 007454 branch g24_store_mem_txpayload +: 007456 g24_transmit_hop_pac_fail: +0x2cb3 007457 call g24_fetch_mem_rf_work_stage +0x2cb4 007459 beq 1 ,g24_transmit_hop_pac_fail_wo_hop +0x2cb5 007460 beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 +0x2cb6 007461 rtn +: 007463 g24_transmit_hop_pac_fail_wo_hop: +0x2cb7 007464 call g24_set2_mem_sync_cnt +: 007466 g24_transmit_hop_pac_fail_stage1: +0x2cb8 007467 add regc ,offset_24g_hop_pac_retry ,contw +0x2cb9 007468 call g24_mem_set0 +0x2cba 007470 call g24_store_mem_rf_last_sta +0x2cbb 007472 branch g24_transmit_rf_ctrl_clear +: 007474 g24_transmit_hop_pac_fail_hop_stage2: +0x2cbc 007475 call g24_set0_mem_rf_hop_ch +0x2cbd 007477 branch g24_transmit_hop_pac_fail_stage1 +: 007479 g24_transmit_pac_fail_hop_stage3: +0x2cbe 007480 add regc ,offset_24g_txfail_cnt ,rega +0x2cbf 007481 ifetch 1 ,rega +0x2cc0 007483 increase 1 ,pdata +0x2cc1 007484 add regc ,offset_24g_txfail_cnt ,contw +0x2cc2 007485 istore 1 ,contw +0x2cc3 007487 beq 0x20 ,g24_tx_attempt_fail +0x2cc4 007488 call g24_fetch_mem_rf_hop_ch +0x2cc5 007490 beq 1 ,g24_rf_hop_fastly +0x2cc6 007491 setarg 1 +0x2cc7 007492 call g24_store_mem_rf_hop_ch +: 007494 g24_rf_hop_attemp_again: +0x2cc8 007495 call g24_fetch_mem_rf_hop_ch +0x2cc9 007497 bne 1 ,g24_transmit_rf_ctrl_clear +: 007498 g24_rf_hop_fastly: +0x2cca 007499 add regc ,offset_24g_hop_fastly_cnt ,rega +0x2ccb 007500 ifetch 1 ,rega +0x2ccc 007502 increase 1 ,pdata +0x2ccd 007503 call g24_store_mem_hop_fastly_cnt +0x2cce 007505 beq 4 ,g24_rf_hop_fastly_exit +0x2ccf 007506 call g24_ch +0x2cd0 007507 call g24_set2_mem_max_retry +0x2cd1 007509 branch g24_transmit_packet +: 007511 g24_rf_hop_fastly_exit: +0x2cd2 007512 call g24_set0_mem_hop_fastly_cnt +0x2cd3 007514 branch g24_transmit_rf_ctrl_clear +: 007516 g24_set0_mem_hop_fastly_cnt: +0x2cd4 007517 setarg 0 +: 007518 g24_store_mem_hop_fastly_cnt: +0x2cd5 007519 add regc ,offset_24g_hop_fastly_cnt ,contw +0x2cd6 007520 branch g24_contw_istore_1byte +: 007522 g24_transmit_hop_pac_succ_wo_hop: +0x2cd7 007523 call g24_set2_mem_sync_cnt +: 007525 g24_transmit_hop_pac_succ: +0x2cd8 007526 call g24_set0_mem_rf_hop_ch +0x2cd9 007528 call g24_set1_mem_rf_last_sta +0x2cda 007530 branch g24_transmit_rf_ctrl_clear +: 007532 g24_transmit_succ_rf_config: +0x2cdb 007533 call g24_fetch_mem_rf_work_stage +0x2cdc 007535 beq 3 ,g24_transmit_hop_pac_succ +0x2cdd 007536 call g24_fetch_mem_data_type +0x2cde 007538 isolate0 bit_hop ,pdata +0x2cdf 007539 branch g24_transmit_rf_sta_init ,true +0x2ce0 007540 call g24_fetch_mem_rf_work_stage +0x2ce1 007542 beq 1 ,g24_transmit_hop_pac_succ_wo_hop +0x2ce2 007543 beq 2 ,g24_transmit_hop_pac_succ +0x2ce3 007544 rtn +: 007546 g24_rf_sta_check: +0x2ce4 007547 call g24_fetch_mem_pairing_sm +0x2ce5 007549 rtnne state_24g_pairing_success +0x2ce6 007550 call g24_rf_laststa_synccnt_check +0x2ce7 007551 ncall g24_rf_sync_cnt_check ,user2 +0x2ce8 007552 rtn +: 007554 g24_rf_laststa_synccnt_check: +0x2ce9 007555 disable user2 +0x2cea 007556 add regc ,offset_24g_rf_last_sta ,rega +0x2ceb 007557 ifetch 1 ,rega +0x2cec 007559 rtnne 1 +0x2ced 007560 add regc ,offset_24g_sync_cnt ,rega +0x2cee 007561 ifetch 1 ,rega +0x2cef 007563 rtnne 0 +0x2cf0 007564 setarg 1 +0x2cf1 007565 call g24_store_mem_rf_work_stage +0x2cf2 007567 call g24_set4_mem_max_retry +0x2cf3 007569 branch enable_user2 +: 007571 g24_rf_sync_cnt_check: +0x2cf4 007572 add regc ,offset_24g_sync_cnt ,rega +0x2cf5 007573 ifetch 1 ,rega +0x2cf6 007575 branch g24_rf_hop_attemp ,blank +0x2cf7 007576 increase -1 ,pdata +0x2cf8 007577 call g24_store_mem_sync_cnt +0x2cf9 007579 setarg 2 +0x2cfa 007580 call g24_store_mem_rf_work_stage +0x2cfb 007582 call g24_ch +0x2cfc 007584 branch g24_set4_mem_max_retry +: 007586 g24_store_mem_rf_work_stage: +0x2cfd 007587 add regc ,offset_24g_rf_work_stage ,contw +0x2cfe 007588 branch g24_contw_istore_1byte +: 007591 g24_rf_hop_attemp: +0x2cff 007592 setarg 3 +0x2d00 007593 call g24_store_mem_rf_work_stage +0x2d01 007595 call g24_fetch_mem_rf_hop_ch +0x2d02 007597 nbranch g24_rf_hop_attemp_again ,blank +0x2d03 007598 call g24_ch +: 007600 g24_set2_mem_max_retry: +0x2d04 007601 setarg 2 +0x2d05 007602 branch g24_store_mem_max_retry +: 007604 g24_transmit_process: +0x2d06 007605 rtnmark0 mark_24g +0x2d07 007606 set1 mark_24g_conext ,mark +0x2d08 007607 bpatch patch16_3 ,mem_patch16 +0x2d09 007608 add regc ,offset_24g_tx_without_int ,rega +0x2d0a 007609 ifetch 1 ,rega +0x2d0b 007611 beq 1 ,g24_transmit_without_int +0x2d0c 007612 call g24_timer_check +0x2d0d 007613 nbranch g24_transmit_exit ,user +0x2d0e 007614 call g24_interval_calibrate +: 007615 g24_transmit_without_int: +0x2d0f 007616 add regc ,offset_24g_tx_without_int ,contw +0x2d10 007617 call g24_mem_set0 +0x2d11 007619 call g24_txdata_prep +0x2d12 007620 nbranch g24_enter_lpm ,user +0x2d13 007621 call g24_rf_sta_check +: 007622 g24_transmit_start: +0x2d14 007623 call g24_transmit_packet +0x2d15 007624 call g24_power_ctrl +: 007625 g24_transmit_exit: +0x2d16 007626 set0 mark_24g_conext ,mark +0x2d17 007627 rtn +: 007629 g24_timer_timeout: +0x2d18 007630 rtn zero +0x2d19 007631 set1 28 ,pdata +0x2d1a 007632 rtn +: 007634 g24_interval_calibrate: +0x2d1b 007635 add regc ,offset_24g_pac_index ,rega +0x2d1c 007636 ifetch 1 ,rega +0x2d1d 007638 increase 1 ,pdata +0x2d1e 007639 add regc ,offset_24g_pac_index ,contw +0x2d1f 007640 istore 1 ,contw +0x2d20 007642 beq 4 ,g24_interval_max +0x2d21 007643 beq 5 ,g24_interval_min +0x2d22 007644 rtn +: 007645 g24_interval_max: +0x2d23 007646 add regc ,offset_24g_interval_max ,rega +0x2d24 007647 ifetch 1 ,rega +: 007649 g24_interval_update: +0x2d25 007651 add regc ,offset_24g_interval ,contw +0x2d26 007652 branch g24_contw_istore_1byte +: 007654 g24_interval_min: +0x2d27 007655 add regc ,offset_24g_pac_index ,contw +0x2d28 007656 call g24_mem_set0 +0x2d29 007658 add regc ,offset_24g_interval_min ,rega +0x2d2a 007659 ifetch 1 ,rega +0x2d2b 007661 branch g24_interval_update +: 007663 g24_txdata_prep: +0x2d2c 007664 call g24_fetch_mem_pairing_sm +0x2d2d 007666 bne state_24g_pairing_success ,g24_pairing_sm +0x2d2e 007667 bpatch patch16_4 ,mem_patch16 +0x2d2f 007668 call g24_package_data +0x2d30 007669 nbranch g24_txdata_last_pac ,user +0x2d31 007670 call g24_transmit_prep +0x2d32 007671 call g24_power_ctrl_pac_incrs +: 007672 g24_txdata_enable_tx: +0x2d33 007674 setarg ensure_on_24g +: 007675 g24_store_mem_ensure: +0x2d34 007676 add regc ,offset_24g_ensure ,contw +0x2d35 007677 branch g24_contw_istore_1byte +: 007679 g24_txdata_last_pac: +0x2d36 007680 add regc ,offset_24g_ensure ,rega +0x2d37 007681 ifetch 1 ,rega +0x2d38 007683 beq ensure_on_24g ,enable_user +0x2d39 007684 rtn +: 007686 g24_package_data: +0x2d3a 007688 add regc ,offset_24g_cb_data ,temp +0x2d3b 007689 ifetch 2 ,temp +0x2d3c 007691 call callback_func +0x2d3d 007692 nrtn user +0x2d3e 007693 copy rega ,pdata +0x2d3f 007694 store 1 ,mem_rega +0x2d40 007695 add regc ,offset_24g_abort_pac ,contw +0x2d41 007696 call g24_mem_set0 +0x2d42 007698 call g24_transmit_rf_ctrl_clear +0x2d43 007699 store 1 ,mem_24g_common_temp +0x2d44 007700 fetch 1 ,mem_rega +0x2d45 007701 copy pdata ,rega +0x2d46 007702 add rega ,1 ,temp +0x2d47 007703 arg mem_24g_common_temp + 1 ,contw +0x2d48 007704 copy rega ,loopcnt +0x2d49 007705 copy regb ,contr +0x2d4a 007706 call memcpy +0x2d4b 007707 arg mem_24g_common_temp ,rega +: 007708 g24_put_data_in_buff: +0x2d4c 007709 rtnmark0 mark_24g_conext +0x2d4d 007710 add regc ,offset_24g_datalen ,contw +0x2d4e 007711 istoret 1 ,contw +0x2d4f 007713 copy temp ,loopcnt +0x2d50 007714 add regc ,offset_24g_txbuf ,contw +0x2d51 007716 copy rega ,contr +0x2d52 007717 branch memcpy +: 007719 g24_transmit_prep: +0x2d53 007721 add regc ,offset_24g_datalen ,rega +0x2d54 007722 ifetch 1 ,rega +0x2d55 007724 increase 2 ,pdata +0x2d56 007725 add regc ,offset_24g_txlen ,contw +0x2d57 007726 istore 1 ,contw +0x2d58 007729 call g24_fetch_mem_data_type +0x2d59 007731 call g24_store_mem_txpayload +0x2d5a 007734 add regc ,offset_24g_datalen ,rega +0x2d5b 007735 ifetch 1 ,rega +0x2d5c 007737 lshift3 pdata ,pdata +0x2d5d 007738 add regc ,offset_24g_pid ,rega +0x2d5e 007739 ifetcht 1 ,rega +0x2d5f 007741 and temp ,0x03 ,temp +0x2d60 007742 lshift temp ,temp +0x2d61 007743 ior temp ,pdata +0x2d62 007744 add regc ,offset_24g_no_ack ,rega +0x2d63 007745 ifetcht 1 ,rega +0x2d64 007747 iadd temp ,pdata +0x2d65 007748 istore 1 ,contw +0x2d66 007750 add regc ,offset_24g_datalen ,rega +0x2d67 007751 ifetch 1 ,rega +0x2d68 007753 iforce loopcnt +0x2d69 007754 add regc ,offset_24g_txbuf ,contr +0x2d6a 007756 branch memcpy +: 007758 g24_send_abort_packet: +0x2d6b 007759 call g24_set1_mem_abort_pac +0x2d6c 007761 call g24_set0_mem_rf_hop_ch +0x2d6d 007763 call g24_power_ctrl_reinit +0x2d6e 007764 call g24_transmit_rf_ctrl_clear +0x2d6f 007765 store 1 ,mem_24g_common_temp +0x2d70 007766 call g24_put_data_in_buff_pre +0x2d71 007767 call g24_fetch_mem_data_type +0x2d72 007769 set1 bit_abort ,pdata +0x2d73 007770 call g24_store_mem_data_type +0x2d74 007772 call g24_transmit_prep +0x2d75 007773 call g24_txdata_enable_tx +0x2d76 007774 branch g24_transmit_start +: 007776 g24_put_data_in_buff_pre: +0x2d77 007777 store 1 ,mem_24g_common_temp + 1 +0x2d78 007778 call g24_fetch_mem_device_addr +0x2d79 007780 store 4 ,mem_24g_common_temp + 2 +0x2d7a 007781 arg 6 ,temp +0x2d7b 007782 arg mem_24g_common_temp ,rega +0x2d7c 007783 branch g24_put_data_in_buff +: 007785 g24_enter_lpm: +0x2d7d 007786 add regc ,offset_24g_abort_pac ,rega +0x2d7e 007787 ifetch 1 ,rega +0x2d7f 007789 branch g24_send_abort_packet ,blank +: 007790 g24_enter_lpm_prepare: +0x2d80 007792 add regc ,offset_24g_cb_lpm_prepare ,rega +0x2d81 007793 ifetch 2 ,rega +0x2d82 007795 branch callback_func +: 007797 g24_lpm_long_sleep: +0x2d83 007798 call g24_head_ptr2regc +0x2d84 007800 call lpo_calibration +0x2d85 007801 fetch 3 ,mem_clks_per_lpo +0x2d86 007802 rtn blank +0x2d87 007803 add regc ,offset_24g_cb_lpm_before ,temp +0x2d88 007804 ifetch 2 ,temp +0x2d89 007806 call callback_func +0x2d8a 007807 add regc ,offset_24g_enter_hibernate ,temp +0x2d8b 007808 ifetch 8 ,temp +: 007809 g24_lpm_long_sleep2: +0x2d8c 007810 call clk2lpo +0x2d8d 007811 storet 4 ,mem_sleep_counter +0x2d8e 007812 branch lpm_sleep +: 007814 g24_transmit_packet: +0x2d8f 007815 call g24_head_ptr2regc +0x2d90 007816 add regc ,offset_24g_retry ,contw +0x2d91 007817 call g24_mem_set0 +: 007819 g24_transmit_loop: +0x2d92 007820 call g24_transmit_receive_ack +0x2d93 007821 nbranch g24_retransmit ,sync +0x2d94 007822 nbranch g24_retransmit ,user3 +0x2d95 007823 call g24_ackpayload_parse +0x2d96 007824 call g24_power_ctrl_ack_incrs +: 007825 g24_transmit_next_packet: +0x2d97 007826 call g24_head_ptr2regc +0x2d98 007827 add regc ,offset_24g_pid ,rega +0x2d99 007828 ifetch 1 ,rega +0x2d9a 007830 increase 1 ,pdata +0x2d9b 007831 call g24_store_mem_pid +0x2d9c 007833 call g24_fetch_mem_pairing_sm +0x2d9d 007835 bne state_24g_pairing_success ,g24_paring_mode +0x2d9e 007836 call g24_transmit_succ_rf_config +: 007837 g24_transmit_abandon: +0x2d9f 007838 setarg 0 +0x2da0 007839 add regc ,offset_24g_txfail_cnt ,contw +0x2da1 007840 istore 2 ,contw +0x2da2 007844 setarg ensure_off_24g +0x2da3 007845 branch g24_store_mem_ensure +: 007848 g24_transmit_receive_ack: +0x2da4 007849 disable user3 +0x2da5 007850 call g24_transmit +0x2da6 007851 call g24_head_ptr2regc +0x2da7 007852 add regc ,offset_24g_no_ack ,rega +0x2da8 007853 ifetch 1 ,rega +0x2da9 007855 beq no_ack_24g ,g24_transmit_no_ack +0x2daa 007856 call g24_receive_packet +0x2dab 007857 branch g24_end_of_packet +: 007858 g24_transmit_no_ack: +0x2dac 007859 call g24_end_of_packet +0x2dad 007860 branch g24_transmit_next_packet +: 007863 g24_retransmit: +0x2dae 007864 bpatch patch16_5 ,mem_patch16 +0x2daf 007865 add regc ,offset_24g_get_ack_fail ,rega +0x2db0 007866 ifetch 1 ,rega +0x2db1 007868 increase 1 ,pdata +0x2db2 007869 add regc ,offset_24g_get_ack_fail ,contw +0x2db3 007870 istore 1 ,contw +0x2db4 007872 call g24_fetch_mem_pairing_sm +0x2db5 007874 bne state_24g_pairing_success ,g24_tx_paring_retry +0x2db6 007875 add regc ,offset_24g_retry ,rega +0x2db7 007876 ifetcht 1 ,rega +0x2db8 007878 increase 1 ,temp +0x2db9 007879 add regc ,offset_24g_retry ,contw +0x2dba 007880 istoret 1 ,contw +0x2dbb 007882 add regc ,offset_24g_max_retry ,rega +0x2dbc 007883 ifetch 1 ,rega +0x2dbd 007885 isub temp ,pdata +0x2dbe 007886 nbranch g24_transmit_loop ,blank +0x2dbf 007887 bpatch patch16_6 ,mem_patch16 +0x2dc0 007888 call g24_fetch_mem_rf_work_stage +0x2dc1 007890 beq 3 ,g24_transmit_pac_fail_hop_stage3 +0x2dc2 007891 add regc ,offset_24g_hop_pac_retry ,rega +0x2dc3 007892 ifetch 1 ,rega +0x2dc4 007894 increase 1 ,pdata +0x2dc5 007895 add regc ,offset_24g_hop_pac_retry ,contw +0x2dc6 007896 istore 1 ,contw +0x2dc7 007898 beq 2 ,g24_transmit_hop_pac_fail +0x2dc8 007899 call g24_hop_ch_enable +0x2dc9 007900 setarg 1 +0x2dca 007901 call g24_store_mem_max_retry +0x2dcb 007903 branch g24_transmit_packet +: 007905 g24_tx_paring_retry: +0x2dcc 007906 add regc ,offset_24g_get_ack_fail ,rega +0x2dcd 007907 ifetch 1 ,rega +0x2dce 007909 rtnne 0xff +0x2dcf 007910 add regc ,offset_24g_get_ack_fail ,contw +0x2dd0 007911 call g24_mem_set0 +0x2dd1 007913 branch g24_stop_24g_mode +: 007915 g24_tx_attempt_fail: +0x2dd2 007916 add regc ,offset_24g_txfail_cnt ,contw +0x2dd3 007917 call g24_mem_set0 +: 007919 g24_stop_24g_mode: +0x2dd4 007920 jam bt_evt_24g_attempt_fail ,mem_fifo_temp +0x2dd5 007921 branch ui_ipc_send_event +: 007923 g24_ackpayload_parse: +0x2dd6 007924 call g24_read_len_pid_crc +0x2dd7 007925 add regc ,offset_24g_rxdata_length ,rega +0x2dd8 007926 ifetch 1 ,rega +0x2dd9 007928 rtn blank +0x2dda 007929 iforce loopcnt +0x2ddb 007930 add regc ,offset_24g_rxbuf_add2 ,contr +0x2ddc 007932 add regc ,offset_24g_rxpayload ,contw +0x2ddd 007934 branch memcpy +: 007937 g24_read_len_pid_crc: +0x2dde 007939 call g24_fetch_mem_rxbuf_add1 +0x2ddf 007941 rshift3 pdata ,pdata +0x2de0 007942 add regc ,offset_24g_rxdata_length ,contw +0x2de1 007943 istore 1 ,contw +0x2de2 007946 increase 1 ,pdata +0x2de3 007947 add regc ,offset_24g_rxbuf_add1 ,contr +0x2de4 007949 iadd contr ,contr +0x2de5 007950 ifetch 3 ,contr +0x2de6 007951 add regc ,offset_24g_sta_crc ,contw +0x2de7 007952 istore 3 ,contw +0x2de8 007955 call g24_fetch_mem_rxbuf_add1 +0x2de9 007957 rshift pdata ,pdata +0x2dea 007958 and pdata ,0x03 ,pdata +0x2deb 007959 add regc ,offset_24g_sta_pid ,contw +0x2dec 007960 istore 1 ,contw +0x2ded 007962 rtn +: 007964 g24_prep: +0x2dee 007965 disable enable_crc +0x2def 007966 disable enable_white +0x2df0 007967 setarg 0x555555 +0x2df1 007968 iforce crc24_init +0x2df2 007969 rtn +: 007971 g24_set_freq_tx: +0x2df3 007972 call set_sync_on +0x2df4 007973 add regc ,offset_24g_ch ,rega +0x2df5 007974 ifetcht 1 ,rega +0x2df6 007976 branch set_freq_tx +: 007978 g24_transmit: +0x2df7 007979 call g24_prep +0x2df8 007980 call g24_set_freq_tx +0x2df9 007981 set1 txgfsk ,radio_ctrl +0x2dfa 007982 enable encode_fec0 +0x2dfb 007983 enable is_tx +0x2dfc 007984 disable is_rx +0x2dfd 007985 call le_enable +0x2dfe 007986 call g24_fetch_mem_addr +0x2dff 007988 iforce access +0x2e00 007989 inject mod ,32 +0x2e01 007990 enable enable_crc +0x2e02 007991 add regc ,offset_24g_txlen ,rega +0x2e03 007992 ifetch 1 ,rega +0x2e04 007994 iforce loopcnt +0x2e05 007995 add regc ,offset_24g_txpayload ,contr +: 007997 g24tr_loop: +0x2e06 007998 ifetch 1 ,contr +0x2e07 007999 inject mod ,8 +0x2e08 008000 loop g24tr_loop +0x2e09 008001 enable enable_parity +0x2e0a 008002 inject mod ,24 +0x2e0b 008003 disable enable_parity +0x2e0c 008004 until null ,tx_clear +0x2e0d 008005 bpatch patch16_7 ,mem_patch16 +0x2e0e 008006 nop 100 +0x2e0f 008007 disable encode_fec0 +0x2e10 008008 rtn +: 008010 g24_receive_packet: +0x2e11 008011 disable user3 +0x2e12 008012 force 0 ,radio_ctrl +0x2e13 008013 add regc ,offset_24g_ch ,rega +0x2e14 008014 ifetcht 1 ,rega +0x2e15 008016 call set_freq_rx +0x2e16 008017 call rf_rx_enable +: 008018 g24_receive_rxon: +0x2e17 008019 call g24_prep +0x2e18 008020 enable decode_fec0 +0x2e19 008021 enable is_rx +0x2e1a 008022 disable is_tx +0x2e1b 008023 call le_enable +0x2e1c 008024 call g24_fetch_mem_addr +0x2e1d 008026 iforce access +0x2e1e 008027 enable swfine +0x2e1f 008028 add regc ,offset_24g_rx_window ,rega +0x2e20 008029 ifetch 2 ,rega +0x2e21 008031 iforce stop_watch +0x2e22 008032 correlate null ,timeout +0x2e23 008033 nbranch g24_sync_timeout ,sync +0x2e24 008034 enable enable_crc +0x2e25 008035 parse demod ,bucket ,8 +0x2e26 008036 rshift3 pwindow ,pdata +0x2e27 008037 add regc ,offset_24g_rxbuf ,contw +0x2e28 008038 istore 1 ,contw +0x2e29 008040 add regc ,offset_24g_mode ,rega +0x2e2a 008041 ifetch 1 ,rega +0x2e2b 008043 beq rx_24g ,g24_receive_skip +0x2e2c 008044 bpatch patch17_0 ,mem_patch17 +0x2e2d 008045 add regc ,offset_24g_rxbuf ,rega +0x2e2e 008046 ifetch 1 ,rega +0x2e2f 008048 add regc ,offset_24g_data_type ,rega +0x2e30 008049 ifetcht 1 ,rega +0x2e31 008051 icompare bits_data ,temp +0x2e32 008052 nbranch g24_end_of_packet ,true +: 008053 g24_receive_skip: +0x2e33 008054 parse demod ,bucket ,8 +0x2e34 008055 rshift3 pwindow ,pdata +0x2e35 008056 istore 1 ,contw +0x2e36 008057 rshift3 pdata ,pdata +0x2e37 008058 and pdata ,0x1f ,loopcnt +0x2e38 008059 branch g24rx_nopayload ,zero +: 008060 g24rx_loop: +0x2e39 008061 parse demod ,bucket ,8 +0x2e3a 008062 rshift3 pwindow ,pdata +0x2e3b 008063 istore 1 ,contw +0x2e3c 008064 loop g24rx_loop +: 008065 g24rx_nopayload: +0x2e3d 008066 parse demod ,bucket ,24 +0x2e3e 008067 rshift32 pdata ,pdata +0x2e3f 008068 rshift16 pdata ,pdata +0x2e40 008069 istore 3 ,contw +0x2e41 008070 branch g24_end_of_packet ,crc_failed +0x2e42 008071 enable user3 +0x2e43 008072 disable decode_fec0 +0x2e44 008073 rtn +: 008076 g24_end_of_packet: +0x2e45 008077 disable encode_fec0 +0x2e46 008078 disable decode_fec0 +0x2e47 008079 disable enable_crc +0x2e48 008080 disable enable_white +0x2e49 008081 branch shutdown_radio ,is_rx +0x2e4a 008082 until null ,tx_clear +0x2e4b 008083 nop 100 +0x2e4c 008084 branch shutdown_radio +: 008086 g24_sync_timeout: +0x2e4d 008087 call rssi_noise +0x2e4e 008088 branch g24_end_of_packet +: 008090 rssi_noise: +0x2e4f 008091 call save_rssi +0x2e50 008092 rtn blank +0x2e51 008093 add regc ,offset_rssi_noise_index ,rega +0x2e52 008094 ifetcht 1 ,rega +0x2e53 008096 arg mem_rssi_noise_buffer ,rega +0x2e54 008098 call rssi_noise_store +0x2e55 008099 add regc ,offset_rssi_noise_index ,contw +: 008101 g24_contw_istoret_1byte: +0x2e56 008102 istoret 1 ,contw +0x2e57 008103 rtn +: 008105 rssi_noise_store: +0x2e58 008106 arg rssi_buf_len_noise ,regb +0x2e59 008107 branch rssi_store +: 008125 rssi_store: +0x2e5a 008126 copy rega ,pdata +0x2e5b 008127 iadd temp ,contw +0x2e5c 008128 fetch 1 ,mem_rssi +0x2e5d 008129 istore 1 ,contw +0x2e5e 008130 increase 1 ,temp +0x2e5f 008131 copy regb ,pdata +0x2e60 008132 iand_into temp +0x2e61 008133 rtn +: 008135 rssi_average: +0x2e62 008136 arg 0 ,temp +0x2e63 008137 copy rega ,contr +: 008138 rssi_average_loop: +0x2e64 008139 ifetch 1 ,contr +0x2e65 008140 iadd temp ,temp +0x2e66 008141 loop rssi_average_loop +0x2e67 008142 rshift8 temp ,temp +0x2e68 008143 rtn +: 008145 g24_power_ctrl_init: +0x2e69 008146 call g24_head_ptr2regc +0x2e6a 008147 call g24_power_ctrl_incrs_level1 +0x2e6b 008148 setarg 1 +0x2e6c 008149 call g24_store_mem_power_ctrl_level +: 008151 g24_power_ctrl_reinit: +0x2e6d 008152 setarg 0 +0x2e6e 008153 call g24_store_mem_power_ctrl_pac +0x2e6f 008155 istore 1 ,contw +0x2e70 008157 rtn +: 008159 g24_power_ctrl_pac_incrs: +0x2e71 008160 call g24_fetch_mem_power_ctrl_pac +0x2e72 008162 increase 1 ,pdata +: 008163 g24_store_mem_power_ctrl_pac: +0x2e73 008165 add regc ,offset_power_ctrl_packet_cnt ,contw +0x2e74 008166 branch g24_contw_istore_1byte +: 008168 g24_power_ctrl_ack_incrs: +0x2e75 008171 add regc ,offset_power_ctrl_ack_cnt ,rega +0x2e76 008172 ifetch 1 ,rega +0x2e77 008173 increase 1 ,pdata +0x2e78 008174 add regc ,offset_power_ctrl_ack_cnt ,contw +0x2e79 008175 branch g24_contw_istore_1byte +: 008177 g24_power_ctrl: +0x2e7a 008178 bpatch patch17_1 ,mem_patch17 +0x2e7b 008179 call g24_fetch_mem_power_ctrl_pac +0x2e7c 008181 sub pdata ,power_ctrl_max_packet_cnt ,null +0x2e7d 008182 rtn positive +0x2e7e 008183 add regc ,offset_power_ctrl_ack_cnt ,rega +0x2e7f 008184 ifetcht 1 ,rega +0x2e80 008186 isub temp ,temp +0x2e81 008187 call g24_power_ctrl_reinit +0x2e82 008188 setarg offset_power_ctrl_threshold_up +0x2e83 008189 iadd regc ,rega +0x2e84 008190 ifetch 1 ,rega +0x2e85 008192 isub temp ,null +0x2e86 008193 nbranch g24_power_ctrl_incrs ,positive +0x2e87 008194 setarg offset_power_ctrl_threshold_down +0x2e88 008195 iadd regc ,rega +0x2e89 008196 ifetch 1 ,rega +0x2e8a 008198 isub temp ,null +0x2e8b 008199 branch g24_power_ctrl_decrs ,positive +0x2e8c 008200 rtn +: 008202 g24_power_ctrl_incrs: +0x2e8d 008203 add regc ,offset_power_ctrl_level ,rega +0x2e8e 008204 ifetch 1 ,rega +0x2e8f 008206 beq 2 ,g24_power_ctrl_incrs_level2 +0x2e90 008207 increase 1 ,pdata +0x2e91 008208 call g24_store_mem_power_ctrl_level +0x2e92 008210 beq 1 ,g24_power_ctrl_incrs_level1 +: 008211 g24_power_ctrl_incrs_level2: +0x2e93 008212 setarg power_ctrl_losspac_thresh_up2 +0x2e94 008213 call g24_store_mem_power_ctrl_threshold_up +0x2e95 008215 setarg power_ctrl_losspac_thresh_down2 +0x2e96 008216 call g24_store_mem_power_ctrl_threshold_down +0x2e97 008219 add regc ,offset_power_ctrl_txpwr_level2 ,rega +0x2e98 008221 branch g24_ifetch_rega_store_mem_txpower +: 008223 g24_power_ctrl_decrs: +0x2e99 008224 add regc ,offset_power_ctrl_level ,rega +0x2e9a 008225 ifetch 1 ,rega +0x2e9b 008227 beq 0 ,g24_power_ctrl_decrs_level0 +0x2e9c 008228 increase -1 ,pdata +0x2e9d 008229 call g24_store_mem_power_ctrl_level +0x2e9e 008231 beq 0 ,g24_power_ctrl_decrs_level0 +: 008232 g24_power_ctrl_decrs_level1: +: 008235 g24_power_ctrl_incrs_level1: +0x2e9f 008236 setarg power_ctrl_losspac_thresh_up1 +0x2ea0 008237 call g24_store_mem_power_ctrl_threshold_up +0x2ea1 008239 setarg power_ctrl_losspac_thresh_down1 +0x2ea2 008240 call g24_store_mem_power_ctrl_threshold_down +0x2ea3 008243 setarg offset_power_ctrl_txpwr_level1 +: 008244 g24_iadd_offset_mem_txpower: +0x2ea4 008245 iadd regc ,rega +: 008246 g24_ifetch_rega_store_mem_txpower: +0x2ea5 008247 ifetch 1 ,rega +0x2ea6 008249 branch g24_store_mem_txpower +: 008251 g24_power_ctrl_decrs_level0: +0x2ea7 008254 setarg power_ctrl_losspac_thresh_up0 +0x2ea8 008255 call g24_store_mem_power_ctrl_threshold_up +0x2ea9 008257 setarg power_ctrl_losspac_thresh_down0 +0x2eaa 008258 call g24_store_mem_power_ctrl_threshold_down +0x2eab 008261 setarg offset_power_ctrl_txpwr_level0 +0x2eac 008263 branch g24_iadd_offset_mem_txpower +: 008277 g24_start_pairing_sm1: +0x2ead 008278 set1 mark_24g ,mark +0x2eae 008279 call g24_pair_init +: 008280 g24_set_pairing_sm_1: +0x2eaf 008282 setarg state_24g_pairing_1 +0x2eb0 008283 branch g24_store_mem_pairing_sm +: 008285 g24_pairing_sm: +0x2eb1 008286 add regc ,offset_24g_ensure ,rega +0x2eb2 008287 ifetch 1 ,rega +0x2eb3 008289 beq ensure_on_24g ,enable_user +0x2eb4 008290 call g24_fetch_mem_pairing_sm +0x2eb5 008292 beq state_24g_pairing_1 ,g24_pairing_sm_1 +0x2eb6 008293 beq state_24g_pairing_2 ,g24_pairing_sm_2 +0x2eb7 008294 beq state_24g_pairing_3 ,g24_pairing_sm_3 +0x2eb8 008295 branch assert +: 008297 g24_pairing_sm_1: +0x2eb9 008298 setarg state_24g_pairing_1_waiting_ack +0x2eba 008299 call g24_store_mem_pairing_sm +0x2ebb 008301 jam 0xaa ,mem_24g_common_temp +0x2ebc 008302 branch g24_pairing_sm_common +: 008303 g24_pairing_sm_2: +0x2ebd 008304 setarg state_24g_pairing_2_waiting_ack +0x2ebe 008305 call g24_store_mem_pairing_sm +0x2ebf 008307 jam 0x55 ,mem_24g_common_temp +0x2ec0 008308 branch g24_pairing_sm_common +: 008309 g24_pairing_sm_3: +0x2ec1 008310 setarg state_24g_pairing_3_waiting_ack +0x2ec2 008311 call g24_store_mem_pairing_sm +0x2ec3 008313 jam 0x22 ,mem_24g_common_temp +: 008314 g24_pairing_sm_common: +0x2ec4 008315 call g24_fetch_mem_data_type +0x2ec5 008317 and_into bits_data ,pdata +0x2ec6 008318 store 1 ,mem_24g_common_temp + 1 +0x2ec7 008319 call g24_fetch_mem_device_addr +0x2ec8 008321 store 4 ,mem_24g_common_temp + 2 +: 008322 g24_put_pairing_data_in_buff: +0x2ec9 008323 jam 0 ,mem_24g_common_temp + 6 +0x2eca 008324 arg mem_24g_common_temp ,rega +0x2ecb 008325 arg 7 ,temp +0x2ecc 008326 call g24_put_data_in_buff +0x2ecd 008327 call g24_transmit_prep +0x2ece 008328 call g24_txdata_enable_tx +0x2ecf 008329 branch enable_user +: 008331 g24_paring_mode: +0x2ed0 008332 call g24_fetch_mem_pairing_sm +0x2ed1 008334 rtneq state_24g_pairing_success +0x2ed2 008335 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack +0x2ed3 008336 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack +0x2ed4 008337 beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack +0x2ed5 008338 rtn +: 008340 g24_pairing_sm_1_waiting_ack: +0x2ed6 008341 setarg state_24g_pairing_2 +0x2ed7 008342 call g24_store_mem_pairing_sm +0x2ed8 008344 branch g24_transmit_abandon +: 008345 g24_pairing_sm_2_waiting_ack: +0x2ed9 008346 setarg state_24g_pairing_3 +0x2eda 008347 call g24_store_mem_pairing_sm +0x2edb 008349 branch g24_transmit_abandon +: 008350 g24_pairing_sm_3_waiting_ack: +0x2edc 008351 setarg state_24g_pairing_success +0x2edd 008352 call g24_store_mem_pairing_sm +0x2ede 008354 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +0x2edf 008355 call ui_ipc_send_event +0x2ee0 008356 add regc ,offset_24g_rxpayload_add2 ,rega +0x2ee1 008357 ifetch 4 ,rega +0x2ee2 008359 call g24_store_mem_addr +0x2ee3 008361 branch g24_transmit_abandon +: 008363 g24_auto_pair_start: +0x2ee4 008364 set0 mark_24g ,mark +0x2ee5 008365 call g24_auto_pair_set_device_info +0x2ee6 008366 call g24_tx_attemp_data_prep +: 008367 g24_auto_pair_restart: +0x2ee7 008368 call g24_set0_mem_check_dongle_times +: 008369 g24_auto_pair_start_loop: +0x2ee8 008370 nop 2000 +0x2ee9 008371 call g24_fetch_mem_check_dongle_times +0x2eea 008372 beq 0xff ,g24_stop_24g_mode +0x2eeb 008373 call g24_transmit_receive_ack +0x2eec 008374 nbranch g24_auto_pair_retry ,sync +0x2eed 008375 nbranch g24_auto_pair_retry ,user3 +0x2eee 008376 call g24_ackpayload_parse +0x2eef 008377 call g24_head_ptr2regc +0x2ef0 008378 add regc ,offset_24g_paring_addr ,rega +0x2ef1 008379 ifetcht 4 ,rega +0x2ef2 008380 call g24_fetch_mem_addr_isub_temp +0x2ef3 008381 branch g24_start_pairing_sm1 ,zero +0x2ef4 008382 call g24_head_ptr2regc +0x2ef5 008383 add regc ,offset_24g_rxpayload_add2 ,rega +0x2ef6 008384 ifetch 4 ,rega +0x2ef7 008385 beq 0 ,g24_auto_pair_restart +0x2ef8 008386 call g24_store_mem_addr +0x2ef9 008387 branch g24_tx_attemp_dongle_succ +: 008389 g24_auto_pair_retry: +0x2efa 008390 call g24_fetch_mem_check_dongle_times +0x2efb 008391 increase 1 ,pdata +0x2efc 008392 call g24_store_mem_check_dongle_times +0x2efd 008394 call g24_fetch_mem_auto_paring_switch +0x2efe 008395 increase 1 ,pdata +0x2eff 008396 and_into 1 ,pdata +0x2f00 008397 call g24_store_mem_auto_paring_switch +0x2f01 008398 beq 0 ,g24_auto_pair_device_attemp +0x2f02 008399 beq 1 ,g24_auto_pair_pair_attemp +0x2f03 008400 rtn +: 008402 g24_fetch_mem_auto_paring_switch: +0x2f04 008403 setarg offset_24g_auto_pair_switch +0x2f05 008404 branch g24_set_rega_ifetch_1byte +: 008405 g24_store_mem_auto_paring_switch: +0x2f06 008406 arg offset_24g_auto_pair_switch ,rega +0x2f07 008407 branch g24_set_contw_with_regb_store_1byte +: 008409 g24_auto_pair_set_device_info: +0x2f08 008410 call g24_store_mem_tx_power +0x2f09 008411 call g24_fetch_mem_device_addr +0x2f0a 008412 call g24_store_mem_addr +0x2f0b 008413 branch g24_ch +: 008415 g24_auto_pair_device_attemp: +0x2f0c 008416 call g24_auto_pair_set_device_info +0x2f0d 008417 branch g24_auto_pair_start_loop +: 008419 g24_auto_pair_pair_attemp: +0x2f0e 008420 call g24_pair_init +0x2f0f 008421 branch g24_auto_pair_start_loop +: 008424 g24_start_24g_mode: +0x2f10 008425 set0 mark_24g ,mark +0x2f11 008426 call g24_ch +0x2f12 008427 call g24_fetch_mem_pairing_sm +0x2f13 008429 rtnne state_24g_pairing_success +0x2f14 008430 call g24_tx_attemp_data_prep +0x2f15 008431 call g24_set0_mem_check_dongle_times +: 008433 g24_tx_attemp_dongle_loop: +0x2f16 008434 nop 2000 +0x2f17 008435 call g24_fetch_mem_check_dongle_times +0x2f18 008437 beq 0xff ,g24_stop_24g_mode +0x2f19 008438 call g24_transmit_receive_ack +0x2f1a 008439 nbranch g24_attemp_txdata_retry ,sync +0x2f1b 008440 nbranch g24_attemp_txdata_retry ,user3 +: 008441 g24_tx_attemp_dongle_succ: +0x2f1c 008442 set1 mark_24g ,mark +0x2f1d 008443 call g24_set0_mem_check_dongle_times +0x2f1e 008444 setarg state_24g_pairing_success +0x2f1f 008445 call g24_store_mem_pairing_sm +: 008447 g24_app_tx_attempt_success: +0x2f20 008448 jam bt_evt_24g_attempt_success ,mem_fifo_temp +0x2f21 008449 branch ui_ipc_send_event +: 008451 g24_tx_attemp_data_prep: +0x2f22 008452 set1 mark_24g_conext ,mark +0x2f23 008453 jam 0xff ,mem_24g_common_temp +0x2f24 008454 call g24_fetch_mem_data_type +0x2f25 008456 call g24_put_data_in_buff_pre +0x2f26 008457 branch g24_transmit_prep +: 008459 g24_attemp_txdata_retry: +0x2f27 008460 call g24_fetch_mem_check_dongle_times +0x2f28 008462 increase 1 ,pdata +0x2f29 008463 call g24_store_mem_check_dongle_times +0x2f2a 008465 call g24_ch +0x2f2b 008466 branch g24_tx_attemp_dongle_loop +: 008468 g24_check_51cmd_start_24g: +0x2f2c 008469 call g24_store_mem_tx_power +0x2f2d 008472 setarg state_24g_pairing_success +0x2f2e 008473 call g24_store_mem_pairing_sm +0x2f2f 008475 branch g24_start_24g_mode +: 008484 dongle_init: +0x2f30 008485 bpatch patch17_2 ,mem_patch17 +0x2f31 008486 call g24_head_ptr2regc +0x2f32 008487 setarg dongle_rxdata_type1 +0x2f33 008488 add regc ,offset_24g_cb_rxdata_type1 ,contw +0x2f34 008489 istore 2 ,contw +0x2f35 008491 call g24_receive_init +0x2f36 008492 call usb_init +0x2f37 008493 call g24_fetch_mem_pair_mode +0x2f38 008495 bpatch patch17_3 ,mem_patch17 +0x2f39 008496 beq 0x00 ,dongle_auto_bind +0x2f3a 008497 beq 0x01 ,dongle_pc_bind +0x2f3b 008498 beq 0x0f ,dongle_all_powerful +0x2f3c 008499 branch assert +: 008501 g24_receive_init: +0x2f3d 008502 call g24_store_mem_tx_power_temp +0x2f3e 008503 arg 0x80 ,loopcnt +0x2f3f 008504 arg mem_rssi_noise_buffer ,contw +0x2f40 008505 branch memset0 +: 008507 dongle_all_powerful: +0x2f41 008508 call dongle_check_mode +: 008509 dongle_all_powerful_loop: +0x2f42 008510 call g24_dongle_work_mode +0x2f43 008511 call usb_isr +0x2f44 008512 branch dongle_all_powerful_loop +: 008514 dongle_pc_bind: +0x2f45 008515 bpatch patch17_4 ,mem_patch17 +0x2f46 008516 call dongle_check_mode +: 008517 dongle_pc_bind_loop: +0x2f47 008518 call g24_dongle_work_mode +0x2f48 008519 call g24_dongle_bind_mode +0x2f49 008520 call usb_isr +0x2f4a 008521 call dongle_usb_dispatch +0x2f4b 008522 branch dongle_pc_bind_loop +: 008524 dongle_check_mode: +0x2f4c 008528 call g24_set_work_mem_dongle_work_mode +0x2f4d 008529 call g24_set0_mem_dongle_mode_init +0x2f4e 008530 branch g24_set0_mem_ackpayload_enable +: 008532 g24_dongle_work_mode: +0x2f4f 008533 call g24_fetch_mem_dongle_work_mode +0x2f50 008535 rtnne dongle_work +: 008536 g24_dongle_work_mode_start: +0x2f51 008537 call g24_dongle_work_init +0x2f52 008538 call g24_ch_process +0x2f53 008539 call g24_receive_packet_start +0x2f54 008540 branch g24_blank_data_process +: 008542 g24_dongle_work_init: +0x2f55 008543 call g24_fetch_mem_dongle_mode_init +0x2f56 008545 rtnbit1 dongle_work +0x2f57 008546 set1 dongle_work ,pdata +0x2f58 008547 call g24_store_mem_dongle_mode_init +0x2f59 008549 call g24_store_mem_tx_power +0x2f5a 008552 call g24_set0_mem_ackpayload_enable +0x2f5b 008554 jam 0 ,mem_usb_tx_enable +0x2f5c 008555 call g24_set1_mem_abort_pac +0x2f5d 008557 call g24_dongle_init +: 008558 g24_rx_interrupt_clear: +0x2f5e 008559 add regc ,offset_24g_rxbuf ,contw +0x2f5f 008561 arg 66 ,loopcnt +0x2f60 008562 branch clear_mem +: 008564 g24_dongle_init: +0x2f61 008565 call g24_set0_mem_pid +0x2f62 008567 call g24_fetch_mem_rx_addr +0x2f63 008569 call g24_store_mem_addr +0x2f64 008571 branch g24_ch +: 008573 g24_ch_process: +0x2f65 008574 bpatch patch17_5 ,mem_patch17 +0x2f66 008575 call g24_fetch_mem_abort_pac +0x2f67 008577 beq 1 ,g24_noise_rssi +0x2f68 008578 call g24_fetch_mem_hop_pac +0x2f69 008580 beq 1 ,g24_ch +0x2f6a 008581 setarg offset_24g_hop_btclk +0x2f6b 008582 iadd regc ,rega +0x2f6c 008583 ifetcht 4 ,rega +0x2f6d 008585 copy clkn_bt ,pdata +0x2f6e 008586 isub temp ,null +0x2f6f 008587 ncall g24_timer_timeout ,positive +0x2f70 008588 copy pdata ,regb +0x2f71 008589 setarg offset_24g_hop_btclk +0x2f72 008590 iadd regc ,rega +0x2f73 008591 ifetch 4 ,rega +0x2f74 008592 copy pdata ,temp +0x2f75 008594 setarg offset_24g_hop_interval +0x2f76 008595 iadd regc ,rega +0x2f77 008596 copy temp ,pdata +0x2f78 008597 ifetcht 1 ,rega +0x2f79 008599 iadd temp ,temp +0x2f7a 008600 copy regb ,pdata +0x2f7b 008601 isub temp ,null +0x2f7c 008602 nrtn positive +0x2f7d 008603 set0 28 ,pdata +0x2f7e 008604 setarg offset_24g_hop_btclk +0x2f7f 008605 iadd regc ,contw +0x2f80 008606 istore 4 ,contw +: 008608 g24_ch_update: +0x2f81 008609 call g24_ch +0x2f82 008610 call g24_fetch_mem_rf_laststa +0x2f83 008612 increase 1 ,pdata +0x2f84 008613 call g24_store_mem_rf_laststa +0x2f85 008615 rtnne 2 +0x2f86 008616 call g24_set0_mem_rf_laststa +0x2f87 008620 branch g24_set1_mem_abort_pac +: 008622 g24_ch_timer_reinit: +0x2f88 008623 copy clkn_bt ,pdata +0x2f89 008624 arg offset_24g_hop_btclk ,rega +0x2f8a 008625 call g24_set_contw_with_temp +0x2f8b 008626 istore 4 ,contw +0x2f8c 008630 branch g24_set0_mem_rf_laststa +: 008632 g24_noise_rssi: +0x2f8d 008633 arg mem_rssi_noise_buffer ,rega +0x2f8e 008634 call g24_noise_rssi_average +0x2f8f 008635 add regc ,offset_rssi_noise_avg ,contw +0x2f90 008636 istoret 1 ,contw +0x2f91 008638 sub temp ,rssi_thresh_noise ,null +0x2f92 008639 nrtn positive +0x2f93 008640 branch g24_ch +: 008642 g24_noise_rssi_average: +0x2f94 008643 arg rssi_buf_len_noise + 1 ,loopcnt +0x2f95 008644 branch rssi_average +: 008646 g24_blank_data_process: +0x2f96 008647 call g24_ms_blank_data +0x2f97 008648 call g24_kb_blank_data +0x2f98 008649 branch g24_kb_mul_blank_data +: 008651 g24_ms_blank_data: +0x2f99 008652 setarg offset_24g_ms_blank_data_enable +0x2f9a 008653 call g24_set_rega_ifetch_1byte +0x2f9b 008655 rtn blank +0x2f9c 008656 arg timer_ms_blank ,queue +0x2f9d 008657 call timer_check +0x2f9e 008658 nrtn blank +0x2f9f 008659 call g24_set0_mem_ms_blank_data_enable +: 008661 g24_ms_blank_data_2usb: +0x2fa0 008662 setarg ms_report_id +0x2fa1 008663 store 1 ,mem_usb_mouse_data +0x2fa2 008664 setarg 0 +0x2fa3 008665 istore 7 ,contw +0x2fa4 008666 branch g24_data_type1_usbtx_enable +: 008668 g24_kb_blank_data: +0x2fa5 008669 setarg offset_24g_kb_blank_data_enable +0x2fa6 008670 call g24_set_rega_ifetch_1byte +0x2fa7 008672 rtn blank +0x2fa8 008673 arg timer_kb_blank ,queue +0x2fa9 008674 call timer_check +0x2faa 008675 nrtn blank +0x2fab 008676 call g24_set0_mem_kb_blank_data_enable +: 008678 g24_kb_blank_data_2usb: +0x2fac 008679 arg mem_usb_kb_data ,contw +0x2fad 008680 arg 2 ,loopcnt +0x2fae 008681 call memset0 +0x2faf 008682 jam kb_normal_report_id ,mem_usb_kb_data +0x2fb0 008683 branch g24_kb_data_into_ep1_fifo +: 008685 g24_kb_mul_blank_data: +0x2fb1 008686 setarg offset_24g_kb_mul_blank_data_enable +0x2fb2 008687 call g24_set_rega_ifetch_1byte +0x2fb3 008689 rtn blank +0x2fb4 008690 arg timer_kb_mul_blank ,queue +0x2fb5 008691 call timer_check +0x2fb6 008692 nrtn blank +0x2fb7 008693 call g24_set0_mem_kb_mul_blank_data_enable +: 008695 g24_kb_mul_blank_data_2usb: +0x2fb8 008696 arg mem_usb_kb_multikey ,contw +0x2fb9 008697 arg 2 ,loopcnt +0x2fba 008698 call memset0 +0x2fbb 008699 jam kb_multikey_report_id ,mem_usb_kb_multikey +0x2fbc 008700 branch g24_kb_mul_data_into_ep2_fifo +: 008702 g24_dongle_bind_mode: +0x2fbd 008703 call g24_fetch_mem_dongle_work_mode +0x2fbe 008705 rtnne dongle_bind +0x2fbf 008706 call g24_dongle_bind_init +0x2fc0 008707 branch g24_dongle_bind_data_process +: 008709 g24_dongle_bind_init: +0x2fc1 008710 call g24_fetch_mem_dongle_mode_init +0x2fc2 008712 rtnbit1 dongle_bind +0x2fc3 008713 set1 dongle_bind ,pdata +0x2fc4 008714 call g24_store_mem_dongle_mode_init +0x2fc5 008716 call g24_set1_mem_ackpayload_enable +0x2fc6 008718 call g24_pair_init +0x2fc7 008719 setarg 0 +0x2fc8 008720 arg offset_dongle_ms_bind_step ,rega +0x2fc9 008721 call g24_set_contw_with_temp +0x2fca 008723 branch g24_contw_istore_3byte +: 008725 g24_dongle_bind_data_process: +0x2fcb 008726 call g24_receive_transmit_ack +0x2fcc 008727 nbranch g24_rx_interrupt_clear ,user3 +0x2fcd 008728 add regc ,offset_24g_rxbuf ,contr +0x2fce 008729 setarg offset_24g_rxdata_temp +0x2fcf 008730 iadd regc ,contw +0x2fd0 008731 arg 8 ,loopcnt +0x2fd1 008732 call memcpy +0x2fd2 008733 setarg offset_24g_rxdata_temp_add2 +0x2fd3 008734 call g24_set_rega_ifetch_1byte +0x2fd4 008735 beq datatype_bind ,g24_dongle_bind_first_step +0x2fd5 008736 beq datatype_config ,g24_dongle_bind_second_step +0x2fd6 008737 beq datatype_ok ,g24_dongle_bind_third_step +0x2fd7 008738 beq 0xff ,g24_data_attemp +0x2fd8 008739 branch g24_rx_interrupt_clear +: 008741 g24_dongle_bind_first_step: +0x2fd9 008742 call g24_fetch_mem_rxdata_temp_add3_1byte +0x2fda 008743 beq bind_mouse ,g24_dongle_bind_first_step_mouse +0x2fdb 008744 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard +0x2fdc 008745 rtn +: 008746 g24_dongle_bind_first_step_mouse: +0x2fdd 008747 setarg 1 +0x2fde 008748 call g24_store_mem_ms_bind_step +: 008750 g24_dongle_bind_ms_payload_cfg: +0x2fdf 008751 setarg datatype_mouse +0x2fe0 008752 call g24_store_mem_bind_payload +: 008754 g24_dongle_bind_payload_cfg: +0x2fe1 008755 setarg 0x80 +0x2fe2 008756 arg offset_24g_bind_payload_add1 ,rega +0x2fe3 008757 call g24_set_contw_with_regb_store_1byte +0x2fe4 008759 call g24_fetch_mem_rx_addr +0x2fe5 008761 arg offset_24g_bind_payload_add2 ,rega +0x2fe6 008762 call g24_set_contw_with_temp +0x2fe7 008764 branch g24_contw_istore_4byte +: 008766 g24_dongle_bind_first_step_keyboard: +0x2fe8 008767 setarg 1 +0x2fe9 008768 call g24_store_mem_kb_bind_step +: 008770 g24_dongle_bind_kb_payload_cfg: +0x2fea 008771 setarg datatype_keyboard +0x2feb 008772 call g24_store_mem_bind_payload +0x2fec 008774 branch g24_dongle_bind_payload_cfg +: 008776 g24_dongle_bind_second_step: +0x2fed 008777 call g24_fetch_mem_rxdata_temp_add3_1byte +0x2fee 008778 beq bind_mouse ,g24_dongle_bind_second_step_mouse +0x2fef 008779 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard +0x2ff0 008780 rtn +: 008781 g24_dongle_bind_second_step_mouse: +0x2ff1 008782 call g24_dongle_bind_ms_payload_cfg +0x2ff2 008783 setarg offset_dongle_ms_bind_step +0x2ff3 008784 call g24_set_rega_ifetch_1byte +0x2ff4 008786 beq 1 ,g24_dongle_ms_bind_step_set2 +0x2ff5 008787 rtn +: 008788 g24_dongle_ms_bind_step_set2: +0x2ff6 008789 setarg 2 +: 008791 g24_store_mem_ms_bind_step: +0x2ff7 008792 arg offset_dongle_ms_bind_step ,rega +0x2ff8 008793 branch g24_set_contw_with_regb_store_1byte +: 008795 g24_dongle_bind_second_step_keyboard: +0x2ff9 008796 call g24_dongle_bind_kb_payload_cfg +0x2ffa 008797 setarg offset_dongle_kb_bind_step +0x2ffb 008798 call g24_set_rega_ifetch_1byte +0x2ffc 008800 beq 1 ,g24_dongle_kb_bind_step_set2 +0x2ffd 008801 rtn +: 008802 g24_dongle_kb_bind_step_set2: +0x2ffe 008803 setarg 2 +: 008805 g24_store_mem_kb_bind_step: +0x2fff 008806 arg offset_dongle_kb_bind_step ,rega +0x3000 008807 branch g24_set_contw_with_regb_store_1byte +: 008809 g24_dongle_bind_third_step: +0x3001 008810 call g24_fetch_mem_rxdata_temp_add3_1byte +0x3002 008811 beq bind_mouse ,g24_dongle_bind_third_step_mouse +0x3003 008812 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard +0x3004 008813 rtn +: 008814 g24_dongle_bind_third_step_mouse: +0x3005 008815 setarg offset_dongle_ms_bind_step +0x3006 008816 call g24_set_rega_ifetch_1byte +0x3007 008818 beq 2 ,g24_dongle_ms_bind_step_success +0x3008 008819 rtn +: 008820 g24_dongle_ms_bind_step_success: +0x3009 008821 call g24_fetch_mem_bind_device_status +0x300a 008823 or_into 0x01 ,pdata +0x300b 008824 call g24_store_mem_bind_device_status +: 008826 g24_dongle_bind_exit: +0x300c 008827 setarg 0 +0x300d 008828 setarg offset_dongle_ms_bind_step +0x300e 008829 iadd regc ,contw +0x300f 008830 istore 2 ,contw +0x3010 008831 branch g24_rx_interrupt_clear +: 008833 g24_dongle_bind_third_step_keyboard: +0x3011 008834 setarg offset_dongle_kb_bind_step +0x3012 008835 call g24_set_rega_ifetch_1byte +0x3013 008837 bne 0 ,g24_dongle_kb_bind_step_success +0x3014 008838 rtn +: 008839 g24_dongle_kb_bind_step_success: +0x3015 008840 call g24_fetch_mem_bind_device_status +0x3016 008842 or_into 0x02 ,pdata +0x3017 008843 call g24_store_mem_bind_device_status +0x3018 008845 branch g24_dongle_bind_exit +: 008848 dongle_usb_dispatch: +0x3019 008849 fetch 1 ,mem_usb0_get_set_report +0x301a 008850 rtn blank +0x301b 008851 jam 0 ,mem_usb0_get_set_report +0x301c 008852 fetch 2 ,mem_usb_setup_bvalue_temp +0x301d 008853 arg pc_set_report ,temp +0x301e 008854 isub temp ,null +0x301f 008855 nrtn zero +0x3020 008857 fetch 1 ,mem_usb0_set_report_data +0x3021 008858 rtnne pc_report_id +0x3022 008859 fetch 1 ,mem_usb0_set_report_data + 1 +0x3023 008860 bpatch patch17_6 ,mem_patch17 +0x3024 008861 beq command_mode ,dongle_dispose_cmd_mode +0x3025 008862 beq command_bind ,dongle_dispose_cmd_bind +0x3026 008863 beq command_current_project ,dongle_dispose_cmd_current_project +0x3027 008864 beq command_current_mode ,dongle_dispose_cmd_current_mode +0x3028 008865 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version +0x3029 008866 beq command_user_defined ,dongle_dispose_cmd_user_defined +: 008867 usb0_data_ready_report_set0: +0x302a 008868 jam 0 ,mem_usb0_data_ready_report +0x302b 008869 rtn +: 008870 dongle_dispose_cmd_bind: +0x302c 008871 fetch 1 ,mem_usb0_set_report_data + 2 +0x302d 008872 beq com_bind_get ,dongle_dispose_cmd_get_bind +0x302e 008873 beq com_bind_exit ,dongle_dispose_cmd_exit_bind +0x302f 008874 beq com_read_mode ,dongle_dispose_cmd_read_mode +0x3030 008875 branch usb0_data_ready_report_set0 +: 008876 dongle_dispose_cmd_get_bind: +0x3031 008877 call g24_fetch_mem_bind_device_status +0x3032 008879 store 1 ,mem_usb0_get_report_data + 1 +0x3033 008880 branch usb0_data_ready_report_set1 +: 008881 dongle_dispose_cmd_exit_bind: +0x3034 008882 call g24_set_work_mem_dongle_work_mode +0x3035 008884 call g24_set0_mem_dongle_mode_init +0x3036 008886 call g24_fetch_mem_bind_device_status +0x3037 008888 store 1 ,mem_usb0_get_report_data + 1 +0x3038 008889 branch usb0_data_ready_report_set1 +: 008891 dongle_dispose_cmd_read_mode: +: 008892 dongle_dispose_in_bind_mode: +0x3039 008893 jam command_bind ,mem_usb0_get_report_data + 1 +0x303a 008894 branch usb0_data_ready_report_set1 +: 008896 dongle_dispose_cmd_mode: +0x303b 008897 fetch 1 ,mem_usb0_set_report_data + 2 +0x303c 008898 beq com_mode_bind ,dongle_enter_bind_mode +0x303d 008900 branch usb0_data_ready_report_set0 +: 008901 dongle_enter_bind_mode: +0x303e 008904 call g24_bind_mode_enable +: 008905 usb0_data_ready_report_set1: +0x303f 008906 jam 1 ,mem_usb0_data_ready_report +0x3040 008907 rtn +: 008912 dongle_dispose_cmd_current_project: +0x3041 008913 jam product_id ,mem_usb0_get_report_data + 1 +0x3042 008914 branch usb0_data_ready_report_set1 +: 008916 dongle_dispose_cmd_current_mode: +0x3043 008917 call g24_fetch_mem_dongle_work_mode +0x3044 008919 beq dongle_work ,dongle_dispose_in_work_mode +0x3045 008920 beq dongle_bind ,dongle_dispose_in_bind_mode +0x3046 008922 rtn +: 008923 dongle_dispose_in_work_mode: +0x3047 008924 jam command_mode ,mem_usb0_get_report_data + 1 +0x3048 008925 branch usb0_data_ready_report_set1 +: 008930 dongle_dispose_cmd_current_fw_version: +0x3049 008931 jam fw_version0 ,mem_usb0_get_report_data + 1 +0x304a 008932 jam fw_version1 ,mem_usb0_get_report_data + 2 +0x304b 008933 jam fw_version2 ,mem_usb0_get_report_data + 3 +0x304c 008934 branch usb0_data_ready_report_set1 +: 008936 dongle_dispose_cmd_user_defined: +0x304d 008938 call g24_set1_mem_ackpayload_enable +0x304e 008939 fetch 1 ,mem_usb0_set_report_data + 2 +0x304f 008940 increase 2 ,pdata +0x3050 008941 copy pdata ,loopcnt +0x3051 008942 arg mem_usb0_set_report_data ,contr +0x3052 008943 setarg offset_24g_ackpayload +0x3053 008944 iadd regc ,contw +0x3054 008945 branch memcpy +: 008948 dongle_auto_bind: +0x3055 008949 bpatch patch17_7 ,mem_patch17 +0x3056 008950 call g24_mode_switch_init +: 008951 dongle_auto_bind_loop: +0x3057 008952 call g24_receive_process +0x3058 008953 call usb_isr +0x3059 008954 branch dongle_auto_bind_loop +: 008956 g24_dongle_work_mode_auto: +0x305a 008957 call g24_fetch_mem_dongle_work_mode +0x305b 008959 rtnne dongle_work +0x305c 008960 call g24_dongle_work_mode_start +0x305d 008961 branch g24_rx_nodata_process +: 008963 g24_dongle_bind_mode_auto: +0x305e 008964 call g24_fetch_mem_dongle_work_mode +0x305f 008966 rtnne dongle_bind +0x3060 008967 call g24_dongle_bind_init +0x3061 008968 call g24_dongle_bind_data_process +0x3062 008969 call g24_fetch_mem_bind_device_status +0x3063 008971 rtn blank +0x3064 008972 call g24_set0_mem_mode_switch +0x3065 008974 call dongle_check_mode +0x3066 008975 call g24_enable_nodata_timer +: 008976 g24_timer_init: +0x3067 008977 setarg 0 +0x3068 008978 add regc ,offset_24g_tx_btclk ,contw +0x3069 008980 branch g24_contw_istore_4byte +: 008982 g24_timer_check: +0x306a 008983 call disable_user +0x306b 008984 add regc ,offset_24g_tx_btclk ,rega +0x306c 008985 ifetcht 4 ,rega +0x306d 008987 copy clkn_bt ,pdata +0x306e 008988 isub temp ,null +0x306f 008989 ncall g24_timer_timeout ,positive +0x3070 008990 copy pdata ,regb +0x3071 008991 add regc ,offset_24g_tx_btclk ,rega +0x3072 008992 ifetch 4 ,rega +0x3073 008994 add regc ,offset_24g_interval ,rega +0x3074 008995 ifetcht 1 ,rega +0x3075 008997 iadd temp ,temp +0x3076 008998 copy regb ,pdata +0x3077 008999 isub temp ,null +0x3078 009000 nrtn positive +0x3079 009001 set0 28 ,pdata +0x307a 009002 add regc ,offset_24g_tx_btclk ,contw +0x307b 009003 istore 4 ,contw +0x307c 009005 branch enable_user +: 009007 g24_mode_switch_init: +0x307d 009008 setarg 1 +0x307e 009009 call g24_store_mem_mode_switch +0x307f 009011 call g24_set0_mem_time_slice +0x3080 009013 setarg 0xff +0x3081 009014 add regc ,offset_24g_interval ,contw +0x3082 009015 istore 1 ,contw +0x3083 009017 branch g24_timer_init +: 009019 g24_mode_switch: +0x3084 009020 setarg offset_24g_mode_switch +0x3085 009021 call g24_set_rega_ifetch_1byte +0x3086 009023 rtn blank +0x3087 009024 call g24_timer_check +0x3088 009025 nrtn user +0x3089 009026 call g24_fetch_mem_time_slice +0x308a 009028 increase 1 ,pdata +0x308b 009029 and_into 1 ,pdata +0x308c 009030 call g24_store_mem_time_slice +0x308d 009032 beq 0 ,dongle_check_mode +0x308e 009033 beq 1 ,g24_bind_mode_enable +0x308f 009034 rtn +: 009036 g24_bind_mode_enable: +0x3090 009040 setarg dongle_bind +0x3091 009041 call g24_store_mem_dongle_work_mode +0x3092 009042 branch g24_set0_mem_dongle_mode_init +: 009044 g24_enable_nodata_timer: +0x3093 009045 setarg 1 +0x3094 009046 call g24_store_mem_nodata_timer_enable +: 009048 g24_enable_nodata_timer_init: +0x3095 009049 setarg timer_nodata_delay +0x3096 009050 arg timer_nodata ,queue +0x3097 009051 branch timer_init +: 009053 g24_rx_nodata_process: +0x3098 009054 call g24_fetch_mem_nodata_timer_enable +0x3099 009056 rtn blank +0x309a 009057 arg timer_nodata ,queue +0x309b 009058 call timer_check +0x309c 009059 nrtn blank +0x309d 009060 call g24_set0_mem_nodata_timer_enable +0x309e 009063 setarg dongle_search +0x309f 009064 call g24_store_mem_dongle_work_mode +0x30a0 009066 call g24_set0_mem_dongle_mode_init +0x30a1 009068 branch g24_rx_interrupt_clear +: 009070 g24_dongle_search_mode_auto: +0x30a2 009071 bpatch patch18_0 ,mem_patch18 +0x30a3 009072 call g24_fetch_mem_dongle_work_mode +0x30a4 009074 rtnne dongle_search +0x30a5 009075 call g24_dongle_search_mode_init +0x30a6 009076 call g24_rx_auto_addr_ch_search +0x30a7 009077 call g24_receive_transmit_ack +0x30a8 009078 nbranch g24_rx_interrupt_clear ,user3 +0x30a9 009080 call g24_dongle_search_addr_check +0x30aa 009081 call g24_receive_packet_parse ,zero +0x30ab 009085 call dongle_check_mode +0x30ac 009086 call g24_fetch_mem_dongle_mode_init +0x30ad 009088 set1 dongle_work ,pdata +0x30ae 009089 call g24_store_mem_dongle_mode_init +0x30af 009091 call g24_rx_interrupt_clear +0x30b0 009092 call g24_enable_nodata_timer +0x30b1 009093 call g24_dongle_search_addr_check +0x30b2 009094 branch g24_dg_ch_num_reinit ,zero +0x30b3 009095 setarg offset_24g_kb_addr +0x30b4 009096 call g24_set_rega_ifetcht_4byte +0x30b5 009098 call g24_fetch_mem_addr_isub_temp +0x30b6 009099 branch g24_kb_ch_num_reinit ,zero +0x30b7 009100 setarg offset_24g_mouse_addr +0x30b8 009101 call g24_set_rega_ifetcht_4byte +0x30b9 009103 call g24_fetch_mem_addr_isub_temp +0x30ba 009104 branch g24_ms_ch_num_reinit ,zero +0x30bb 009105 rtn +: 009107 g24_dongle_search_addr_check: +0x30bc 009108 setarg offset_24g_rx_addr +0x30bd 009109 call g24_set_rega_ifetcht_4byte +: 009111 g24_fetch_mem_addr_isub_temp: +0x30be 009112 call g24_fetch_mem_addr +0x30bf 009114 isub temp ,null +0x30c0 009115 rtn +: 009117 g24_dg_ch_num_reinit: +0x30c1 009118 setarg offset_24g_dg_ch_number +0x30c2 009119 call g24_set_rega_ifetch_1byte +: 009121 g24_current_ch_num_reinit: +0x30c3 009123 add regc ,offset_24g_current_ch_number ,contw +0x30c4 009124 branch g24_contw_istore_1byte +: 009126 g24_kb_ch_num_reinit: +0x30c5 009127 setarg offset_24g_kb_ch_number +0x30c6 009128 call g24_set_rega_ifetch_1byte +0x30c7 009130 branch g24_current_ch_num_reinit +: 009131 g24_ms_ch_num_reinit: +0x30c8 009132 setarg offset_24g_ms_ch_number +0x30c9 009133 call g24_set_rega_ifetch_1byte +0x30ca 009135 branch g24_current_ch_num_reinit +: 009137 g24_dongle_search_mode_init: +0x30cb 009138 call g24_fetch_mem_dongle_mode_init +0x30cc 009140 rtnbit1 dongle_search +0x30cd 009141 set1 dongle_search ,pdata +0x30ce 009142 call g24_store_mem_dongle_mode_init +0x30cf 009144 call g24_set0_mem_time_slice +0x30d0 009146 call g24_set1_mem_ackpayload_enable +0x30d1 009148 setarg 0 +0x30d2 009149 add regc ,offset_rssi_noise_dg_index ,contw +0x30d3 009150 istore 3 ,contw +0x30d4 009152 arg offset_24g_dg_config_ch_once ,rega +0x30d5 009153 call g24_set_contw_with_temp +0x30d6 009154 istore 7 ,contw +0x30d7 009157 call g24_dongle_search_addr_check +0x30d8 009158 nrtn zero +0x30d9 009159 add regc ,offset_24g_current_ch_number ,rega +0x30da 009160 ifetch 1 ,rega +0x30db 009162 arg offset_24g_dg_ch_number ,rega +0x30dc 009163 call g24_set_contw_with_regb_store_1byte +0x30dd 009165 add regc ,offset_24g_ch ,rega +0x30de 009166 ifetch 1 ,rega +0x30df 009169 branch g24_store_mem_dg_last_ch +: 009171 g24_rx_auto_addr_ch_search: +0x30e0 009172 bpatch patch18_1 ,mem_patch18 +0x30e1 009173 call g24_fetch_mem_time_slice +0x30e2 009175 increase 1 ,pdata +0x30e3 009176 and_into 3 ,pdata +0x30e4 009177 call g24_store_mem_time_slice +0x30e5 009180 beq 0 ,g24_rx_auto_bind_config_kb +0x30e6 009181 beq 1 ,g24_rx_auto_bind_config_dongle +0x30e7 009182 beq 2 ,g24_rx_auto_bind_config_mouse +0x30e8 009183 beq 3 ,g24_rx_auto_bind_config_dongle +0x30e9 009184 rtn +: 009186 g24_rx_auto_bind_config_mouse: +0x30ea 009187 call g24_dongle_bind_ms_payload_cfg +0x30eb 009188 setarg offset_24g_mouse_addr +0x30ec 009189 call g24_set_rega_ifetch_4byte +0x30ed 009191 branch g24_rx_auto_addr_ch_search ,blank +0x30ee 009192 call g24_store_mem_addr +0x30ef 009194 setarg offset_24g_ms_config_ch_once +0x30f0 009195 call g24_set_rega_ifetch_1byte +0x30f1 009197 call g24_ms_config_ch_once ,blank +0x30f2 009198 setarg offset_24g_ms_last_ch +0x30f3 009199 call g24_set_rega_ifetch_1byte +0x30f4 009201 call g24_store_mem_ch +0x30f5 009203 add regc ,offset_rssi_noise_ms_index ,rega +0x30f6 009204 ifetcht 1 ,rega +0x30f7 009206 arg mem_rssi_noise_ms_buffer ,rega +0x30f8 009207 call rssi_noise_store +0x30f9 009208 add regc ,offset_rssi_noise_ms_index ,contw +0x30fa 009209 istoret 1 ,contw +0x30fb 009211 call g24_noise_rssi_average +0x30fc 009212 add regc ,offset_rssi_noise_ms_avg ,contw +0x30fd 009213 istoret 1 ,contw +0x30fe 009215 sub temp ,rssi_thresh_noise ,null +0x30ff 009216 nrtn positive +0x3100 009217 setarg offset_24g_ms_ch_number +0x3101 009218 call g24_set_rega_ifetcht_1byte +0x3102 009220 call g24_ch_temp_incre_size4 +0x3103 009221 arg offset_24g_ms_ch_number ,rega +0x3104 009222 call g24_set_contw_with_regb2 +0x3105 009223 istoret 1 ,contw +: 009225 g24_store_mem_ms_last_ch: +0x3106 009227 arg offset_24g_ms_last_ch ,rega +0x3107 009228 branch g24_set_contw_with_regb_store_1byte +: 009230 g24_ms_config_ch_once: +0x3108 009231 setarg 1 +0x3109 009232 arg offset_24g_ms_config_ch_once ,rega +0x310a 009233 call g24_set_contw_with_regb_store_1byte +0x310b 009235 arg 0 ,temp +0x310c 009236 call g24_ch_calc +0x310d 009239 branch g24_store_mem_ms_last_ch +: 009241 g24_rx_auto_bind_config_kb: +0x310e 009242 call g24_dongle_bind_kb_payload_cfg +0x310f 009243 setarg offset_24g_kb_addr +0x3110 009244 call g24_set_rega_ifetch_4byte +0x3111 009246 branch g24_rx_auto_addr_ch_search ,blank +0x3112 009247 call g24_store_mem_addr +0x3113 009249 setarg offset_24g_kb_config_ch_once +0x3114 009250 call g24_set_rega_ifetch_1byte +0x3115 009252 call g24_kb_config_ch_once ,blank +0x3116 009253 setarg offset_24g_kb_last_ch +0x3117 009254 call g24_set_rega_ifetch_1byte +0x3118 009256 call g24_store_mem_ch +0x3119 009258 add regc ,offset_rssi_noise_kb_index ,rega +0x311a 009259 ifetcht 1 ,rega +0x311b 009261 arg mem_rssi_noise_kb_buffer ,rega +0x311c 009262 call rssi_noise_store +0x311d 009263 add regc ,offset_rssi_noise_kb_index ,contw +0x311e 009264 istoret 1 ,contw +0x311f 009266 call g24_noise_rssi_average +0x3120 009267 add regc ,offset_rssi_noise_kb_avg ,contw +0x3121 009268 istoret 1 ,contw +0x3122 009270 sub temp ,rssi_thresh_noise ,null +0x3123 009271 nrtn positive +0x3124 009272 setarg offset_24g_kb_ch_number +0x3125 009273 call g24_set_rega_ifetcht_1byte +0x3126 009275 call g24_ch_temp_incre_size4 +0x3127 009276 arg offset_24g_kb_ch_number ,rega +0x3128 009277 call g24_set_contw_with_regb2 +0x3129 009278 istoret 1 ,contw +: 009280 g24_store_mem_kb_last_ch: +0x312a 009282 arg offset_24g_kb_last_ch ,rega +0x312b 009283 branch g24_set_contw_with_regb_store_1byte +: 009285 g24_kb_config_ch_once: +0x312c 009286 setarg 1 +0x312d 009287 arg offset_24g_kb_config_ch_once ,rega +0x312e 009288 call g24_set_contw_with_regb_store_1byte +0x312f 009290 arg 0 ,temp +0x3130 009291 call g24_ch_calc +0x3131 009294 branch g24_store_mem_kb_last_ch +: 009296 g24_rx_auto_bind_config_dongle: +0x3132 009297 call g24_dongle_bind_ms_payload_cfg +0x3133 009298 call g24_fetch_mem_rx_addr +0x3134 009300 call g24_store_mem_addr +0x3135 009302 setarg offset_24g_dg_config_ch_once +0x3136 009303 call g24_set_rega_ifetch_1byte +0x3137 009305 call g24_dg_config_ch_once ,blank +0x3138 009306 call g24_dg_store_config_ch +0x3139 009307 add regc ,offset_rssi_noise_dg_index ,rega +0x313a 009308 ifetcht 1 ,rega +0x313b 009310 arg mem_rssi_noise_dg_buffer ,rega +0x313c 009311 call rssi_noise_store +0x313d 009312 add regc ,offset_rssi_noise_dg_index ,contw +0x313e 009313 istoret 1 ,contw +0x313f 009315 call g24_noise_rssi_average +0x3140 009316 add regc ,offset_rssi_noise_dg_avg ,contw +0x3141 009317 istoret 1 ,contw +0x3142 009319 sub temp ,rssi_thresh_noise ,null +0x3143 009320 nrtn positive +0x3144 009321 setarg offset_24g_dg_ch_number +0x3145 009322 call g24_set_rega_ifetcht_1byte +0x3146 009324 call g24_ch_temp_incre_size4 +0x3147 009325 arg offset_24g_dg_ch_number ,rega +0x3148 009326 call g24_set_contw_with_regb2 +0x3149 009327 istoret 1 ,contw +: 009329 g24_store_mem_dg_last_ch: +0x314a 009332 arg offset_24g_dg_last_ch ,rega +0x314b 009333 branch g24_set_contw_with_regb_store_1byte +: 009336 g24_dg_config_ch_once: +0x314c 009341 setarg 1 +0x314d 009342 arg offset_24g_dg_config_ch_once ,rega +0x314e 009343 call g24_set_contw_with_regb_store_1byte +: 009344 g24_dg_store_config_ch: +0x314f 009345 setarg offset_24g_dg_last_ch +0x3150 009346 call g24_set_rega_ifetch_1byte +0x3151 009347 branch g24_store_mem_ch +: 009350 g24_transmit_ack: +0x3152 009352 add regc ,offset_24g_rxbuf ,rega +0x3153 009353 ifetch 1 ,rega +0x3154 009355 call g24_store_mem_data_type +0x3155 009358 call g24_read_len_pid_crc +0x3156 009360 call g24_fetch_mem_rxbuf_add1 +0x3157 009362 isolate1 bit_ack_24g ,pdata +0x3158 009363 branch g24tx_no_ack ,true +: 009364 g24tx_with_ack: +0x3159 009365 call g24_ackpayload_prep +0x315a 009366 call g24_transmit_prep +0x315b 009367 call g24_transmit +: 009368 g24tx_no_ack: +0x315c 009369 branch g24_end_of_packet +: 009371 g24_ackpayload_prep: +0x315d 009372 bpatch patch18_2 ,mem_patch18 +0x315e 009373 add regc ,offset_24g_datalen ,contw +0x315f 009374 call g24_mem_set0 +0x3160 009376 setarg offset_24g_ackpayload_enable +0x3161 009377 call g24_set_rega_ifetch_1byte +0x3162 009379 rtn blank +0x3163 009380 setarg 0x06 +0x3164 009381 add regc ,offset_24g_datalen ,contw +0x3165 009382 istore 1 ,contw +0x3166 009384 arg 0x06 ,loopcnt +0x3167 009385 setarg offset_24g_bind_payload +0x3168 009386 iadd regc ,contr +0x3169 009388 add regc ,offset_24g_txbuf ,contw +0x316a 009390 branch memcpy +: 009393 g24_receive_packet_start: +0x316b 009394 call g24_receive_transmit_ack +0x316c 009395 nbranch g24_rx_interrupt_clear ,user3 +0x316d 009396 branch g24_receive_packet_parse +: 009398 g24_receive_transmit_ack: +0x316e 009399 call g24_rx_interrupt_clear +0x316f 009400 call g24_receive_packet +0x3170 009401 nrtn user3 +0x3171 009402 branch g24_transmit_ack +: 009404 g24_receive_packet_parse: +0x3172 009405 bpatch patch18_3 ,mem_patch18 +0x3173 009406 call g24_receive_packet_parse_pid_crc +0x3174 009407 nbranch g24_rx_interrupt_clear ,user +0x3175 009408 add regc ,offset_24g_rxdata_length ,rega +0x3176 009409 ifetch 1 ,rega +0x3177 009411 branch g24_rx_interrupt_clear ,blank +0x3178 009412 increase 2 ,pdata +0x3179 009413 iforce loopcnt +0x317a 009414 add regc ,offset_24g_rxbuf ,contr +0x317b 009416 setarg offset_24g_rxdata_temp +0x317c 009417 iadd regc ,contw +0x317d 009419 call memcpy +0x317e 009420 call g24_set0_mem_mode_switch +0x317f 009422 call g24_fetch_mem_pair_mode +0x3180 009424 call g24_enable_nodata_timer ,blank +0x3181 009425 setarg offset_24g_rxdata_temp_add2 +0x3182 009426 call g24_set_rega_ifetch_1byte +0x3183 009428 beq 0x01 ,g24_data_type1 +0x3184 009429 beq 0x02 ,g24_data_type2 +0x3185 009430 beq 0x03 ,g24_data_type3 +0x3186 009431 beq 0xff ,g24_data_attemp +0x3187 009432 branch g24_rx_interrupt_clear +: 009434 g24_receive_packet_parse_pid_crc: +0x3188 009435 call g24_head_ptr2regc +0x3189 009436 call disable_user +0x318a 009437 add regc ,offset_24g_sta_pid ,rega +0x318b 009438 ifetch 1 ,rega +0x318c 009440 add regc ,offset_24g_last_pid ,rega +0x318d 009441 ifetcht 1 ,rega +0x318e 009443 isub temp ,null +0x318f 009444 ncall enable_user ,zero +0x3190 009445 add regc ,offset_24g_sta_pid ,rega +0x3191 009446 ifetch 1 ,rega +0x3192 009448 add regc ,offset_24g_last_pid ,contw +0x3193 009449 istore 1 ,contw +0x3194 009451 add regc ,offset_24g_sta_crc ,rega +0x3195 009452 ifetch 3 ,rega +0x3196 009454 add regc ,offset_24g_last_crc ,rega +0x3197 009455 ifetcht 3 ,rega +0x3198 009457 isub temp ,null +0x3199 009458 ncall enable_user ,zero +0x319a 009459 add regc ,offset_24g_sta_crc ,rega +0x319b 009460 ifetch 3 ,rega +0x319c 009462 add regc ,offset_24g_last_crc ,contw +0x319d 009464 branch g24_contw_istore_3byte +: 009466 g24_data_type1: +0x319e 009467 call g24_ch_timer_reinit +0x319f 009468 call g24_fetch_mem_abort_pac +0x31a0 009469 store 1 ,mem_temp +0x31a1 009471 call g24_fetcht_mem_rxdata_temp +0x31a2 009472 fetch 1 ,mem_temp +0x31a3 009474 isolate1 bit_abort ,temp +0x31a4 009475 setflag true ,0 ,pdata +0x31a5 009476 add regc ,offset_24g_abort_pac ,contw +0x31a6 009477 istore 1 ,contw +0x31a7 009479 beq 1 ,g24_data_attemp_mouse +0x31a8 009480 call g24_fetch_mem_hop_pac +0x31a9 009482 call g24_fetcht_mem_rxdata_temp +0x31aa 009484 isolate1 bit_hop ,temp +0x31ab 009485 setflag true ,0 ,pdata +0x31ac 009486 call g24_store_mem_hop_pac +0x31ad 009488 add regc ,offset_24g_cb_rxdata_type1 ,rega +0x31ae 009489 ifetch 2 ,rega +0x31af 009491 branch callback_func +: 009493 dongle_rxdata_type1: +0x31b0 009494 setarg ms_report_id +0x31b1 009495 store 1 ,mem_usb_mouse_data +0x31b2 009496 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b3 009498 istore 7 ,contw +0x31b4 009499 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b5 009501 ncall g24_ms_enable_blank_data_forcibly ,blank +0x31b6 009502 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b7 009504 call g24_ms_disable_blank_data_forcibly ,blank +: 009505 g24_data_type1_usbtx_enable: +0x31b8 009506 jam usb_ep2_ms ,mem_usb_ep2_data +: 009507 g24_data_type1_usbtx_enable_ep2: +0x31b9 009508 fetch 1 ,mem_usb_tx_enable +0x31ba 009509 set1 2 ,pdata +0x31bb 009510 store 1 ,mem_usb_tx_enable +0x31bc 009511 rtn +: 009513 g24_ms_enable_blank_data_forcibly: +0x31bd 009514 setarg 1 +0x31be 009515 call g24_store_mem_ms_blank_data_enable +: 009517 g24_ms_enable_blank_data_timer: +0x31bf 009518 setarg timer_ms_blank_delay +0x31c0 009519 arg timer_ms_blank ,queue +0x31c1 009520 branch timer_init +: 009521 g24_ms_disable_blank_data_forcibly: +0x31c2 009522 call g24_set0_mem_ms_blank_data_enable +: 009524 g24_ms_disable_blank_data_timer: +0x31c3 009525 setarg 0 +0x31c4 009526 arg timer_ms_blank ,queue +0x31c5 009527 branch timer_init +: 009529 g24_data_type2: +0x31c6 009530 call g24_fetcht_mem_rxdata_temp +0x31c7 009532 isolate1 bit_abort ,temp +0x31c8 009533 branch g24_data_attemp_kbd ,true +0x31c9 009534 arg mem_usb_kb_data ,contw +0x31ca 009535 call g24_data_type2_reverse_data +0x31cb 009536 fetch 8 ,mem_usb_kb_data +0x31cc 009537 ncall g24_kb_enable_blank_data_forcibly ,blank +0x31cd 009538 fetch 8 ,mem_usb_kb_data +0x31ce 009539 call g24_kb_disable_blank_data_forcibly ,blank +0x31cf 009540 call g24_head_ptr2regc +0x31d0 009541 fetch 8 ,mem_usb_kb_data +0x31d1 009542 arg offset_24g_kb_data_sta_data ,rega +0x31d2 009543 call g24_set_contw_with_temp +0x31d3 009544 istore 8 ,contw +0x31d4 009546 setarg offset_24g_kb_data_last_data +0x31d5 009547 iadd regc ,rega +0x31d6 009548 ifetcht 8 ,rega +0x31d7 009550 isub temp ,null +0x31d8 009551 ncall g24_kb_data_dispose ,zero +0x31d9 009552 setarg offset_24g_kb_data_sta_data +0x31da 009553 iadd regc ,rega +0x31db 009554 ifetch 8 ,rega +0x31dc 009556 arg offset_24g_kb_data_last_data ,rega +0x31dd 009557 call g24_set_contw_with_temp +0x31de 009558 istore 8 ,contw +0x31df 009560 branch g24_rx_interrupt_clear +: 009562 g24_data_type2_reverse_data: +0x31e0 009563 setarg offset_24g_rxdata_temp_add2 +0x31e1 009564 iadd regc ,contr +0x31e2 009566 arg 9 ,loopcnt +0x31e3 009567 branch reverse_byte +: 009569 g24_kb_enable_blank_data_forcibly: +0x31e4 009570 setarg 1 +0x31e5 009571 call g24_store_mem_kb_blank_data_enable +: 009573 g24_kb_enable_blank_data_timer: +0x31e6 009574 setarg timer_kb_blank_delay +0x31e7 009575 arg timer_kb_blank ,queue +0x31e8 009576 branch timer_init +: 009578 g24_kb_disable_blank_data_forcibly: +0x31e9 009579 call g24_set0_mem_kb_blank_data_enable +: 009581 g24_kb_disable_blank_data_timer: +0x31ea 009582 setarg 0 +0x31eb 009583 arg timer_kb_blank ,queue +0x31ec 009584 branch timer_init +: 009586 g24_kb_data_dispose: +: 009587 g24_kb_data_into_ep1_fifo: +0x31ed 009588 jam usb_ep1_kb ,mem_usb_ep1_data +0x31ee 009589 fetch 1 ,mem_usb_tx_enable +0x31ef 009590 set1 1 ,pdata +0x31f0 009591 store 1 ,mem_usb_tx_enable +0x31f1 009592 rtn +: 009594 g24_data_type3: +0x31f2 009595 arg mem_usb_kb_multikey ,contw +0x31f3 009596 call g24_data_type2_reverse_data +0x31f4 009597 fetch 2 ,mem_usb_kb_multikey + 1 +0x31f5 009598 ncall g24_kb_mul_enable_blank_data_forcibly ,blank +0x31f6 009599 fetch 2 ,mem_usb_kb_multikey + 1 +0x31f7 009600 call g24_kb_mul_disable_blank_data_forcibly ,blank +0x31f8 009601 call g24_head_ptr2regc +0x31f9 009602 fetch 3 ,mem_usb_kb_multikey +0x31fa 009603 arg offset_24g_kb_multikey_sta_data ,rega +0x31fb 009604 call g24_set_contw_with_temp_store_3byte +0x31fc 009606 setarg offset_24g_kb_multikey_last_data +0x31fd 009607 iadd regc ,rega +0x31fe 009608 ifetcht 3 ,rega +0x31ff 009610 isub temp ,null +0x3200 009611 ncall g24_kb_mul_data_into_ep2_fifo ,zero +0x3201 009612 setarg offset_24g_kb_multikey_sta_data +0x3202 009613 iadd regc ,rega +0x3203 009614 ifetch 3 ,rega +0x3204 009616 arg offset_24g_kb_multikey_last_data ,rega +0x3205 009617 call g24_set_contw_with_temp_store_3byte +0x3206 009619 branch g24_rx_interrupt_clear +: 009621 g24_kb_mul_data_into_ep2_fifo: +0x3207 009622 jam usb_ep2_multikey ,mem_usb_ep2_data +0x3208 009623 branch g24_data_type1_usbtx_enable_ep2 +: 009625 g24_kb_mul_enable_blank_data_forcibly: +0x3209 009626 setarg 1 +0x320a 009627 call g24_store_mem_kb_mul_blank_data_enable +: 009629 g24_kb_mul_enable_blank_data_timer: +0x320b 009630 setarg timer_kb_mul_blank_delay +0x320c 009631 arg timer_kb_mul_blank ,queue +0x320d 009632 branch timer_init +: 009634 g24_kb_mul_disable_blank_data_forcibly: +0x320e 009635 call g24_set0_mem_kb_mul_blank_data_enable +: 009637 g24_kb_mul_disable_blank_data_timer: +0x320f 009638 setarg 0 +0x3210 009639 arg timer_kb_mul_blank ,queue +0x3211 009640 branch timer_init +: 009642 g24_data_attemp: +0x3212 009643 call g24_fetch_mem_rxdata_temp_add3_1byte +0x3213 009645 beq datatype_mouse ,g24_data_attemp_mouse +0x3214 009646 beq datatype_keyboard ,g24_data_attemp_kbd +0x3215 009647 rtn +: 009648 g24_data_attemp_mouse: +0x3216 009649 setarg offset_24g_rxdata_temp_add4 +0x3217 009650 call g24_set_rega_ifetch_4byte +0x3218 009651 arg offset_24g_mouse_addr ,rega +0x3219 009652 call g24_set_contw_with_temp +0x321a 009655 branch g24_contw_istore_4byte +: 009657 g24_data_attemp_kbd: +0x321b 009658 setarg offset_24g_rxdata_temp_add4 +0x321c 009659 call g24_set_rega_ifetch_4byte +0x321d 009660 arg offset_24g_kb_addr ,rega +0x321e 009661 call g24_set_contw_with_temp +0x321f 009664 branch g24_contw_istore_4byte +: 009666 g24_store_mem_24g_mode: +0x3220 009667 call g24_head_ptr2regc +0x3221 009668 add regc ,offset_24g_mode ,contw +0x3222 009669 istore 1 ,contw +0x3223 009670 rtn +: 009672 g24_fetch_mem_device_addr: +0x3224 009673 call g24_head_ptr2regc +0x3225 009674 add regc ,offset_24g_device_addr ,rega +0x3226 009675 branch g24_rega_ifetch_4byte +: 009676 g24_store_mem_device_addr: +0x3227 009677 call g24_head_ptr2regc +0x3228 009678 add regc ,offset_24g_device_addr ,contw +0x3229 009679 branch g24_contw_istore_4byte +: 009681 g24_fetch_mem_addr: +0x322a 009682 add regc ,offset_24g_addr ,rega +0x322b 009683 branch g24_rega_ifetch_4byte +: 009684 g24_store_mem_addr: +0x322c 009685 add regc ,offset_24g_addr ,contw +: 009686 g24_contw_istore_4byte: +0x322d 009687 istore 4 ,contw +0x322e 009688 rtn +: 009690 g24_store_mem_ch: +0x322f 009691 add regc ,offset_24g_ch ,contw +0x3230 009692 branch g24_contw_istore_1byte +: 009694 g24_set0_mem_pid: +0x3231 009695 setarg 0 +: 009696 g24_store_mem_pid: +0x3232 009697 call g24_head_ptr2regc +0x3233 009698 add regc ,offset_24g_pid ,contw +0x3234 009699 branch g24_contw_istore_1byte +: 009701 g24_store_mem_txpayload: +0x3235 009702 add regc ,offset_24g_txpayload ,contw +0x3236 009703 branch g24_contw_istore_1byte +: 009705 g24_set4_mem_max_retry: +0x3237 009706 setarg 4 +: 009707 g24_store_mem_max_retry: +0x3238 009708 add regc ,offset_24g_max_retry ,contw +0x3239 009709 branch g24_contw_istore_1byte +: 009711 g24_fetch_mem_data_type: +0x323a 009712 add regc ,offset_24g_data_type ,rega +0x323b 009713 branch g24_rega_ifetch_1byte +: 009714 g24_store_mem_data_type: +0x323c 009715 add regc ,offset_24g_data_type ,contw +0x323d 009716 branch g24_contw_istore_1byte +: 009718 g24_set2_mem_sync_cnt: +0x323e 009719 setarg 2 +: 009720 g24_store_mem_sync_cnt: +0x323f 009721 add regc ,offset_24g_sync_cnt ,contw +0x3240 009722 branch g24_contw_istore_1byte +: 009724 g24_set1_mem_rf_last_sta: +0x3241 009725 setarg 1 +: 009726 g24_store_mem_rf_last_sta: +0x3242 009727 call g24_head_ptr2regc +0x3243 009728 add regc ,offset_24g_rf_last_sta ,contw +0x3244 009729 branch g24_contw_istore_1byte +: 009731 g24_fetch_mem_hop_pac: +0x3245 009732 call g24_head_ptr2regc +0x3246 009733 add regc ,offset_24g_hop_pac ,rega +0x3247 009734 branch g24_rega_ifetch_1byte +: 009735 g24_set1_mem_hop_pac: +0x3248 009736 setarg 1 +: 009737 g24_store_mem_hop_pac: +0x3249 009738 call g24_head_ptr2regc +0x324a 009739 add regc ,offset_24g_hop_pac ,contw +0x324b 009740 branch g24_contw_istore_1byte +: 009742 g24_fetch_mem_abort_pac: +0x324c 009743 call g24_head_ptr2regc +0x324d 009744 add regc ,offset_24g_abort_pac ,rega +0x324e 009745 branch g24_rega_ifetch_1byte +: 009746 g24_set1_mem_abort_pac: +0x324f 009747 setarg 1 +: 009748 g24_store_mem_abort_pac: +0x3250 009749 call g24_head_ptr2regc +0x3251 009750 add regc ,offset_24g_abort_pac ,contw +0x3252 009751 branch g24_contw_istore_1byte +: 009753 g24_fetch_mem_pairing_sm: +0x3253 009754 call g24_head_ptr2regc +0x3254 009755 add regc ,offset_24g_pairing_sm ,rega +0x3255 009756 branch g24_rega_ifetch_1byte +: 009757 g24_store_mem_pairing_sm: +0x3256 009758 add regc ,offset_24g_pairing_sm ,contw +0x3257 009759 branch g24_contw_istore_1byte +: 009761 g24_fetch_mem_rf_hop_ch: +0x3258 009762 add regc ,offset_24g_rf_hop_ch ,rega +0x3259 009763 branch g24_rega_ifetch_1byte +: 009764 g24_set0_mem_rf_hop_ch: +0x325a 009765 setarg 0 +: 009766 g24_store_mem_rf_hop_ch: +0x325b 009767 add regc ,offset_24g_rf_hop_ch ,contw +0x325c 009768 branch g24_contw_istore_1byte +: 009770 g24_fetch_mem_rf_work_stage: +0x325d 009771 add regc ,offset_24g_rf_work_stage ,rega +0x325e 009772 branch g24_rega_ifetch_1byte +: 009774 g24_fetch_mem_rxbuf_add1: +0x325f 009775 add regc ,offset_24g_rxbuf_add1 ,rega +0x3260 009776 branch g24_rega_ifetch_1byte +: 009778 g24_fetch_mem_check_dongle_times: +0x3261 009779 add regc ,offset_24g_check_dongle_times ,rega +0x3262 009780 branch g24_rega_ifetch_1byte +: 009781 g24_set0_mem_check_dongle_times: +0x3263 009782 setarg 0 +: 009783 g24_store_mem_check_dongle_times: +0x3264 009784 call g24_head_ptr2regc +0x3265 009785 add regc ,offset_24g_check_dongle_times ,contw +0x3266 009786 branch g24_contw_istore_1byte +: 009788 g24_store_mem_tx_power: +0x3267 009789 call g24_head_ptr2regc +0x3268 009790 add regc ,offset_tx_power_temp ,rega +0x3269 009791 ifetch 1 ,rega +: 009792 g24_store_mem_txpower: +0x326a 009793 store 1 ,mem_tx_power +0x326b 009794 rtn +: 009796 g24_store_mem_tx_power_temp: +0x326c 009797 call g24_head_ptr2regc +0x326d 009798 fetch 1 ,mem_tx_power +0x326e 009800 add regc ,offset_tx_power_temp ,contw +0x326f 009801 branch g24_contw_istore_1byte +: 009803 g24_fetch_mem_power_ctrl_pac: +0x3270 009804 add regc ,offset_power_ctrl_packet_cnt ,rega +0x3271 009805 branch g24_rega_ifetch_1byte +: 009807 g24_store_mem_power_ctrl_level: +0x3272 009808 add regc ,offset_power_ctrl_level ,contw +0x3273 009809 branch g24_contw_istore_1byte +: 009811 g24_fetcht_mem_rxdata_temp: +0x3274 009812 setarg offset_24g_rxdata_temp +: 009813 g24_set_rega_ifetcht_1byte: +0x3275 009814 iadd regc ,rega +0x3276 009815 ifetcht 1 ,rega +0x3277 009816 rtn +: 009818 g24_fetch_mem_rf_laststa: +0x3278 009819 setarg offset_24g_rf_laststa +0x3279 009820 branch g24_set_rega_ifetch_1byte +: 009821 g24_set0_mem_rf_laststa: +0x327a 009822 setarg 0 +: 009823 g24_store_mem_rf_laststa: +0x327b 009824 arg offset_24g_rf_laststa ,rega +0x327c 009825 branch g24_set_contw_with_regb_store_1byte +: 009827 g24_fetch_mem_rx_addr: +0x327d 009828 setarg offset_24g_rx_addr +: 009829 g24_set_rega_ifetch_4byte: +0x327e 009830 call g24_set_rega +: 009831 g24_rega_ifetch_4byte: +0x327f 009832 ifetch 4 ,rega +0x3280 009833 rtn +: 009835 g24_fetch_mem_time_slice: +0x3281 009836 setarg offset_24g_time_slice +0x3282 009837 branch g24_set_rega_ifetch_1byte +: 009838 g24_set0_mem_time_slice: +0x3283 009839 setarg 0 +: 009840 g24_store_mem_time_slice: +0x3284 009841 arg offset_24g_time_slice ,rega +0x3285 009842 branch g24_set_contw_with_regb_store_1byte +: 009844 g24_set0_mem_mode_switch: +0x3286 009845 setarg 0 +: 009846 g24_store_mem_mode_switch: +0x3287 009847 arg offset_24g_mode_switch ,rega +0x3288 009848 branch g24_set_contw_with_regb_store_1byte +: 009850 g24_store_mem_bind_payload: +0x3289 009851 arg offset_24g_bind_payload ,rega +0x328a 009852 branch g24_set_contw_with_regb_store_1byte +: 009854 g24_fetch_mem_bind_device_status: +0x328b 009855 setarg offset_dongle_bind_device_status +0x328c 009856 branch g24_set_rega_ifetch_1byte +: 009857 g24_store_mem_bind_device_status: +0x328d 009858 arg offset_dongle_bind_device_status ,rega +0x328e 009859 branch g24_set_contw_with_regb_store_1byte +: 009861 g24_fetch_mem_dongle_work_mode: +0x328f 009862 setarg offset_dongle_work_mode +0x3290 009863 branch g24_set_rega_ifetch_1byte +: 009864 g24_set_work_mem_dongle_work_mode: +0x3291 009865 setarg dongle_work +: 009866 g24_store_mem_dongle_work_mode: +0x3292 009867 arg offset_dongle_work_mode ,rega +0x3293 009868 branch g24_set_contw_with_regb_store_1byte +: 009870 g24_fetch_mem_dongle_mode_init: +0x3294 009871 setarg offset_dongle_mode_init +0x3295 009872 branch g24_set_rega_ifetch_1byte +: 009873 g24_set0_mem_dongle_mode_init: +0x3296 009874 setarg clear_init +: 009875 g24_store_mem_dongle_mode_init: +0x3297 009876 arg offset_dongle_mode_init ,rega +0x3298 009877 branch g24_set_contw_with_regb_store_1byte +: 009879 g24_set0_mem_ackpayload_enable: +0x3299 009880 setarg 0 +: 009881 g24_store_mem_ackpayload_enable: +0x329a 009882 arg offset_24g_ackpayload_enable ,rega +0x329b 009883 branch g24_set_contw_with_regb_store_1byte +: 009884 g24_set1_mem_ackpayload_enable: +0x329c 009885 setarg 1 +0x329d 009886 branch g24_store_mem_ackpayload_enable +: 009888 g24_fetch_mem_rxdata_temp_add3_7byte: +0x329e 009889 setarg offset_24g_rxdata_temp_add3 +0x329f 009890 call g24_set_rega +0x32a0 009891 ifetch 7 ,rega +0x32a1 009892 rtn +: 009894 g24_fetch_mem_nodata_timer_enable: +0x32a2 009895 setarg offset_24g_nodata_timer_enable +0x32a3 009896 branch g24_set_rega_ifetch_1byte +: 009897 g24_set0_mem_nodata_timer_enable: +0x32a4 009898 setarg 0 +: 009899 g24_store_mem_nodata_timer_enable: +0x32a5 009900 arg offset_24g_nodata_timer_enable ,rega +0x32a6 009901 branch g24_set_contw_with_regb_store_1byte +: 009903 g24_set0_mem_ms_blank_data_enable: +0x32a7 009904 setarg 0 +: 009905 g24_store_mem_ms_blank_data_enable: +0x32a8 009906 arg offset_24g_ms_blank_data_enable ,rega +0x32a9 009907 branch g24_set_contw_with_regb_store_1byte +: 009909 g24_set0_mem_kb_blank_data_enable: +0x32aa 009910 setarg 0 +: 009911 g24_store_mem_kb_blank_data_enable: +0x32ab 009912 arg offset_24g_kb_blank_data_enable ,rega +0x32ac 009913 branch g24_set_contw_with_regb_store_1byte +: 009915 g24_set0_mem_kb_mul_blank_data_enable: +0x32ad 009916 setarg 0 +: 009917 g24_store_mem_kb_mul_blank_data_enable: +0x32ae 009918 arg offset_24g_kb_mul_blank_data_enable ,rega +0x32af 009919 branch g24_set_contw_with_regb_store_1byte +: 009921 g24_store_mem_power_ctrl_threshold_up: +0x32b0 009922 arg offset_power_ctrl_threshold_up ,rega +0x32b1 009923 branch g24_set_contw_with_regb_store_1byte +: 009925 g24_store_mem_power_ctrl_threshold_down: +0x32b2 009926 arg offset_power_ctrl_threshold_down ,rega +: 009927 g24_set_contw_with_regb_store_1byte: +0x32b3 009928 call g24_set_contw_with_regb +: 009929 g24_contw_istore_1byte: +0x32b4 009930 istore 1 ,contw +0x32b5 009931 rtn +: 009933 g24_fetch_mem_pair_mode: +0x32b6 009934 setarg offset_24g_pair_mode +0x32b7 009935 branch g24_set_rega_ifetch_1byte +: 009937 g24_store_mem_pair_mode: +0x32b8 009938 arg offset_24g_pair_mode ,rega +0x32b9 009939 branch g24_set_contw_with_regb_store_1byte +: 009941 g24_store_mem_pair_txpower: +0x32ba 009942 setarg offset_24g_pair_txpower +0x32bb 009943 call g24_set_rega_ifetch_1byte +0x32bc 009944 branch g24_store_mem_txpower +: 009946 g24_fetch_mem_rxdata_temp_add3_1byte: +0x32bd 009947 setarg offset_24g_rxdata_temp_add3 +0x32be 009948 branch g24_set_rega_ifetch_1byte +: 009950 g24_set_contw_with_temp: +0x32bf 009951 copy pdata ,temp +0x32c0 009952 copy rega ,pdata +0x32c1 009953 iadd regc ,contw +0x32c2 009954 copy temp ,pdata +0x32c3 009955 rtn +: 009957 g24_set_contw_with_temp_store_3byte: +0x32c4 009958 call g24_set_contw_with_temp +: 009959 g24_contw_istore_3byte: +0x32c5 009960 istore 3 ,contw +0x32c6 009961 rtn +: 009963 g24_set_contw_with_regb: +0x32c7 009964 call g24_head_ptr2regc +: 009965 g24_set_contw_with_regb2: +0x32c8 009966 copy pdata ,regb +0x32c9 009967 copy rega ,pdata +0x32ca 009968 iadd regc ,contw +0x32cb 009969 copy regb ,pdata +0x32cc 009970 rtn +: 009972 g24_set_rega: +0x32cd 009973 call g24_head_ptr2regc +0x32ce 009974 iadd regc ,rega +0x32cf 009975 rtn +: 009977 g24_set_rega_ifetch_1byte: +0x32d0 009978 call g24_set_rega +: 009979 g24_rega_ifetch_1byte: +0x32d1 009980 ifetch 1 ,rega +0x32d2 009981 rtn +: 009983 g24_set_rega_ifetcht_4byte: +0x32d3 009984 call g24_set_rega +0x32d4 009985 ifetcht 4 ,rega +0x32d5 009986 rtn +: 009988 g24_mem_set0: +0x32d6 009989 setarg 0 +0x32d7 009990 branch g24_contw_istore_1byte +: 009994 app_init: +0x32d8 009995 bpatch patch18_4 ,mem_patch18 +0x32d9 009996 fetch 1 ,mem_device_option +0x32da 009997 branch app_init ,blank +0x32db 009999 beq dvc_op_dongle ,dongle_init +0x32dc 010000 beq dvc_op_antilost ,antilost_init +0x32dd 010001 beq dvc_op_shutter ,shutter_init +0x32de 010002 beq dvc_op_module ,module_init +0x32df 010003 beq dvc_op_car ,car_init +0x32e0 010004 beq dvc_op_remote_car ,remote_car_init +0x32e1 010005 bbit1 dvc_op_mouse ,mouse_init +0x32e2 010006 rtn +: 010008 app_lpm_init: +0x32e3 010009 bpatch patch18_5 ,mem_patch18 +0x32e4 010010 jam 0 ,mem_tester_emulate +0x32e5 010011 jam 0 ,mem_debug_config +0x32e6 010012 jam 0 ,mem_lch_code +0x32e7 010013 setarg 0 +0x32e8 010014 store 5 ,mem_sp_state_start +0x32e9 010015 fetch 1 ,mem_device_option +0x32ea 010016 branch app_lpm_init ,blank +0x32eb 010017 beq dvc_op_module ,module_lpm_init +: 010018 app_lpm_init0: +0x32ec 010019 rtn +: 010022 app_process_idle: +0x32ed 010023 call ui_dispatch +0x32ee 010024 call check_51cmd +0x32ef 010025 call app_process_bb_event +0x32f0 010026 fetch 2 ,mem_cb_idle_process +0x32f1 010027 branch callback_func +: 010029 app_process_bt: +0x32f2 010030 fetch 2 ,mem_cb_bt_process +0x32f3 010031 branch callback_func +: 010033 app_process_ble: +0x32f4 010034 fetch 2 ,mem_cb_le_process +0x32f5 010035 branch callback_func +: 010037 app_process_bb_event: +0x32f6 010038 bpatch patch18_6 ,mem_patch18 +0x32f7 010040 arg mem_ipc_fifo_bt2c51 ,rega +0x32f8 010041 call fifo_out +0x32f9 010042 rtn blank +0x32fa 010044 copy pdata ,regc +0x32fb 010045 call app_event_normal_process +0x32fc 010046 branch app_process_bb_event_priority +: 010048 app_discard_event: +0x32fd 010049 arg 0 ,regc +0x32fe 010050 rtn +: 010055 app_event_normal_process: +0x32ff 010056 beq bt_evt_bb_connected ,app_evt_bt_conn +0x3300 010057 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed +0x3301 010058 beq bt_evt_setup_complete ,app_evt_setup_complete +0x3302 010059 beq bt_evt_hid_handshake ,app_evt_hid_handshake +0x3303 010060 beq bt_evt_hid_connected ,app_bb_event_hid_connected +0x3304 010061 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed +0x3305 010062 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn +0x3306 010063 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed +0x3307 010064 beq bt_evt_le_connected ,app_le_event_bb_connected +0x3308 010065 beq bt_evt_le_disconnected ,app_le_event_bb_disconn +0x3309 010066 beq bt_evt_reconn_started ,app_event_reconn_start +0x330a 010067 beq bt_evt_enter_sniff ,app_event_enter_sniff +0x330b 010068 beq bt_evt_exit_sniff ,app_event_exit_sniff +0x330c 010070 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused +0x330d 010071 beq bt_evt_linkkey_generate ,app_event_linkkey_generate +0x330e 010072 beq bt_evt_switch_fail_master ,app_event_switch_fail_master +0x330f 010073 beq bt_evt_switch_success_master ,app_event_switch_success +0x3310 010074 rtn +: 010077 app_evt_bt_conn: +0x3311 010078 fetch 2 ,mem_ui_state_map +0x3312 010079 set1 ui_state_bt_connected ,pdata +0x3313 010080 store 2 ,mem_ui_state_map +0x3314 010081 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3315 010082 set0 app_disc_by_button ,pdata +0x3316 010083 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3317 010084 rtn +: 010086 app_event_switch_success: +0x3318 010087 jam 0 ,mem_switch_fail_master_count +0x3319 010088 rtn +: 010090 app_event_switch_fail_master: +0x331a 010091 fetch 1 ,mem_switch_fail_master_count +0x331b 010092 increase 1 ,pdata +0x331c 010093 store 1 ,mem_switch_fail_master_count +0x331d 010094 sub pdata ,1 ,null +0x331e 010095 branch app_bt_role_switch ,positive +0x331f 010096 jam 0 ,mem_switch_fail_master_count +0x3320 010097 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3321 010098 set1 app_disc_switch_fail ,pdata +0x3322 010099 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3323 010100 branch app_bt_disconnect +: 010102 app_process_bb_event_priority: +0x3324 010103 fetch 2 ,mem_cb_bb_event_process +0x3325 010104 branch callback_func +: 010106 app_check_wake_lock: +0x3326 010107 fetch 2 ,mem_cb_check_wakelock +0x3327 010108 branch callback_func +: 010110 app_will_enter_lpm: +0x3328 010111 fetch 2 ,mem_cb_before_lpm +0x3329 010112 branch callback_func +: 010114 app_event_linkkey_generate: +0x332a 010115 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x332b 010116 set1 app_disc_after_pairing ,pdata +0x332c 010117 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x332d 010118 branch app_bt_store_reconn_info +: 010120 app_event_reconn_start: +0x332e 010121 fetch 2 ,mem_ui_state_map +0x332f 010122 set1 ui_state_bt_reconnect ,pdata +0x3330 010123 store 2 ,mem_ui_state_map +0x3331 010124 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3332 010125 set1 app_disc_after_reconn ,pdata +0x3333 010126 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3334 010127 rtn +: 010129 app_evt_setup_complete: +0x3335 010130 fetch 2 ,mem_ui_state_map +0x3336 010131 set1 ui_state_bt_setup_complete ,pdata +0x3337 010132 store 2 ,mem_ui_state_map +0x3338 010133 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3339 010134 set1 app_disc_after_setup_done ,pdata +0x333a 010135 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x333b 010136 rtn +: 010138 app_evt_hid_handshake: +0x333c 010139 fetch 2 ,mem_ui_state_map +0x333d 010140 set1 ui_state_bt_hid_handshake ,pdata +0x333e 010141 store 2 ,mem_ui_state_map +0x333f 010142 rtn +: 010144 app_event_enter_sniff: +0x3340 010145 fetch 2 ,mem_ui_state_map +0x3341 010146 set1 ui_state_bt_sniff ,pdata +0x3342 010147 store 2 ,mem_ui_state_map +0x3343 010148 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3344 010149 set1 app_disc_after_sniff ,pdata +0x3345 010150 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3346 010151 rtn +: 010153 app_event_exit_sniff: +0x3347 010154 fetch 2 ,mem_ui_state_map +0x3348 010155 set0 ui_state_bt_sniff ,pdata +0x3349 010156 store 2 ,mem_ui_state_map +0x334a 010157 rtn +: 010159 app_le_event_bb_connected: +0x334b 010160 fetch 2 ,mem_ui_state_map +0x334c 010161 set1 ui_state_ble_connected ,pdata +0x334d 010162 store 2 ,mem_ui_state_map +0x334e 010163 rtn +: 010165 app_le_event_bb_disconn: +0x334f 010166 fetch 2 ,mem_ui_state_map +0x3350 010167 set0 ui_state_ble_connected ,pdata +0x3351 010168 store 2 ,mem_ui_state_map +0x3352 010169 branch app_lpm_mult_disable +: 010171 app_bb_event_hid_connected: +0x3353 010172 fetch 2 ,mem_ui_state_map +0x3354 010173 set1 ui_state_bt_hid_conn ,pdata +0x3355 010174 store 2 ,mem_ui_state_map +0x3356 010175 rtn +: 010177 app_evt_button_long_pressed: +0x3357 010178 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3358 010179 set1 app_disc_by_button ,pdata +0x3359 010180 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335a 010181 rtn +: 010183 app_event_ml2cap_conn_refused: +0x335b 010184 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335c 010185 set1 app_disc_l2cap_refused ,pdata +0x335d 010186 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335e 010187 branch app_bt_disconnect +: 010190 app_evt_timer: +0x335f 010191 bpatch patch18_7 ,mem_patch18 +0x3360 010192 store 1 ,mem_app_evt_timer_count +: 010193 app_evt_100ms_loop: +0x3361 010194 fetch 1 ,mem_app_evt_timer_count +0x3362 010195 rtn blank +0x3363 010196 increase -1 ,pdata +0x3364 010197 store 1 ,mem_app_evt_timer_count +0x3365 010198 call ui_button_polling +0x3366 010199 call app_lpm_wake_auto_lock_timer +0x3367 010200 call app_unsniff_delay_timer +0x3368 010201 call app_discovery_timer +0x3369 010202 call flash_write_spi_sm_timer +0x336a 010203 fetch 2 ,mem_cb_event_timer +0x336b 010204 call callback_func +0x336c 010205 branch app_evt_100ms_loop +: 010210 timer_single_step: +0x336d 010211 ifetch 1 ,regc +0x336e 010212 rtn blank +0x336f 010213 pincrease -1 +0x3370 010214 istore 1 ,regc +0x3371 010215 nrtn blank +0x3372 010216 copy regb ,pdata +0x3373 010217 branch callback_func +: 010221 timer_single_step_2b: +0x3374 010222 ifetch 2 ,regc +0x3375 010223 rtn blank +0x3376 010224 pincrease -1 +0x3377 010225 istore 2 ,regc +0x3378 010226 nrtn blank +0x3379 010227 copy regb ,pdata +0x337a 010228 branch callback_func +: 010230 app_power_timer: +0x337b 010231 fetcht 2 ,mem_power_param_ptr +0x337c 010232 add temp ,power_timer_offset ,regc +0x337d 010233 arg app_power_timer_timeout ,regb +0x337e 010234 branch timer_single_step +: 010236 app_power_timer_timeout: +0x337f 010237 call app_got_power_state_common +0x3380 010238 beq power_starting ,app_enter_power_stanby_state +: 010239 app_enter_power_off_state: +0x3381 010240 branch app_enter_hibernate +: 010241 app_enter_power_stanby_state: +0x3382 010242 setarg power_standby +0x3383 010243 istore 1 ,regc +0x3384 010244 add temp ,power_standby_cb_offset ,regb +: 010245 app_power_cb_common: +0x3385 010246 ifetch 2 ,regb +0x3386 010247 branch callback_func +: 010249 app_unsniff_delay_timer: +0x3387 010250 arg mem_unsniff2sniff_timer_count ,regc +0x3388 010251 arg app_unsniff_delay_timeout ,regb +0x3389 010252 branch timer_single_step +: 010254 app_unsniff_delay_timeout: +0x338a 010255 call context_check_idle +0x338b 010256 branch app_bt_enter_sniff ,zero +0x338c 010257 rtn +: 010260 app_discovery_timer: +0x338d 010261 arg mem_discovery_timeout_timer_count ,regc +0x338e 010262 arg app_discovery_timeout ,regb +0x338f 010263 branch timer_single_step_2b +: 010265 app_discovery_timeout: +0x3390 010266 call app_bt_stop_discovery +0x3391 010267 call app_led_off +0x3392 010268 fetch 2 ,mem_cb_discovry_timeout +0x3393 010269 branch callback_func +: 010272 app_bb_event_reconn_failed: +0x3394 010273 call app_disconn_reason_flag_clear +: 010274 app_clear_reconnect_flag: +0x3395 010275 fetch 2 ,mem_ui_state_map +0x3396 010276 set0 ui_state_bt_reconnect ,pdata +0x3397 010277 store 2 ,mem_ui_state_map +0x3398 010278 rtn +: 010280 app_bb_event_bb_disconn: +0x3399 010281 jam 0 ,mem_unsniff2sniff_timer_count +0x339a 010282 fetch 2 ,mem_ui_state_map +0x339b 010283 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn +0x339c 010284 isolate0 ui_state_bt_setup_complete ,pdata +0x339d 010285 call app_discard_event ,true +: 010286 app_bb_event_bb_reconn_disconn: +0x339e 010287 bpatch patch19_0 ,mem_patch19 +0x339f 010288 fetch 2 ,mem_ui_state_map +0x33a0 010289 set0 ui_state_bt_connected ,pdata +0x33a1 010290 set0 ui_state_bt_setup_complete ,pdata +0x33a2 010291 set0 ui_state_bt_hid_conn ,pdata +0x33a3 010292 set0 ui_state_bt_hid_handshake ,pdata +0x33a4 010293 set0 ui_state_bt_reconnect ,pdata +0x33a5 010294 store 2 ,mem_ui_state_map +0x33a6 010295 branch app_lpm_mult_disable +: 010297 app_bb_hibernate: +0x33a7 010298 call app_disconn_reason_clear +0x33a8 010299 branch app_enter_hibernate +: 010302 app_disconn_reason_clear: +0x33a9 010303 setarg 0 +0x33aa 010304 store app_disc_rsn_size ,mem_app_disconn_reason +0x33ab 010305 rtn +: 010306 app_disconn_reason_flag_clear: +0x33ac 010307 setarg 0 +0x33ad 010308 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33ae 010309 rtn +: 010311 app_disconn_reason_collect_bt: +0x33af 010312 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b0 010313 store app_disc_rsn_size ,mem_app_disconn_reason +0x33b1 010314 setarg 0 +0x33b2 010315 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b3 010316 rtn +: 010318 app_disconn_reason_collect_ble: +0x33b4 010319 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b5 010320 set1 app_disc_ble ,pdata +0x33b6 010321 store app_disc_rsn_size ,mem_app_disconn_reason +0x33b7 010322 setarg 0 +0x33b8 010323 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b9 010324 rtn +: 010332 app_check_sniff: +0x33ba 010333 fetch 1 ,mem_ui_state_map +0x33bb 010334 isolate1 ui_state_bt_sniff ,pdata +0x33bc 010335 rtn +: 010343 app_initflag_store: +0x33bd 010344 setarg eeprom_init_flag +: 010345 app_flag_store: +0x33be 010346 store 2 ,mem_timeup +0x33bf 010347 bpatch patch19_1 ,mem_patch19 +0x33c0 010348 arg 2 ,temp +0x33c1 010349 arg mem_timeup ,rega +0x33c2 010350 arg eeprom_module_init_flag ,regb +0x33c3 010351 branch iicd_write_eep_data +: 010354 app_initflag_check: +0x33c4 010355 bpatch patch19_2 ,mem_patch19 +0x33c5 010356 arg 2 ,temp +0x33c6 010357 arg mem_pdatatemp ,rega +0x33c7 010358 arg eeprom_module_init_flag ,regb +0x33c8 010359 call iicd_read_eep_data +0x33c9 010360 fetch 2 ,mem_pdatatemp +0x33ca 010361 arg eeprom_init_flag ,temp +0x33cb 010362 isub temp ,null +0x33cc 010363 rtn +: 010366 app_start_auto_sniff: +0x33cd 010367 fetch 1 ,mem_unsniff2sniff_timer +0x33ce 010368 store 1 ,mem_unsniff2sniff_timer_count +0x33cf 010369 rtn +: 010371 app_get_lpm_wake_lock: +0x33d0 010372 arg wake_lock_app ,queue +0x33d1 010373 branch lpm_get_wake_lock +: 010375 app_put_lpm_wake_lock: +0x33d2 010376 arg wake_lock_app ,queue +0x33d3 010377 branch lpm_put_wake_lock +: 010379 app_lpm_wake_auto_lock: +0x33d4 010380 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer +0x33d5 010381 branch app_get_lpm_wake_lock +: 010383 app_lpm_wake_auto_lock_timer: +0x33d6 010384 arg mem_wake_up_delay_timer ,regc +0x33d7 010385 arg app_put_lpm_wake_lock ,regb +0x33d8 010386 branch timer_single_step +: 010388 app_l2cap_flow_control_enable: +0x33d9 010389 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag +0x33da 010390 rtn +: 010392 app_l2cap_flow_control_disable: +0x33db 010393 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag +0x33dc 010394 rtn +: 010396 app_bt_set_pincode: +0x33dd 010397 jam bt_cmd_set_pin_code ,mem_fifo_temp +0x33de 010398 branch ui_ipc_send_cmd +: 010400 app_bt_role_switch: +0x33df 010401 jam bt_cmd_role_switch ,mem_fifo_temp +0x33e0 010402 branch ui_ipc_send_cmd +: 010404 app_bt_start_reconnect: +0x33e1 010405 bpatch patch19_3 ,mem_patch19 +0x33e2 010406 fetch 1 ,mem_app_connection_options +0x33e3 010407 store 1 ,mem_connection_options +0x33e4 010408 jam app_flag_reconnect ,mem_reconnect_flag +0x33e5 010409 jam bt_cmd_reconnect ,mem_fifo_temp +0x33e6 010410 branch ui_ipc_send_cmd +: 010412 app_bt_reconnect_cancel: +0x33e7 010413 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp +0x33e8 010414 branch ui_ipc_send_cmd +: 010416 app_bt_disconnect: +0x33e9 010417 jam bt_cmd_disconnect ,mem_fifo_temp +0x33ea 010418 branch ui_ipc_send_cmd +: 010420 app_bt_start_discovery_short: +0x33eb 010421 fetch 2 ,mem_discovery_timeout +0x33ec 010422 store 2 ,mem_discovery_timeout_timer_count +: 010423 app_bt_start_discovery_led_blink: +0x33ed 010424 call app_led_start_blink +: 010425 app_bt_start_discovery: +0x33ee 010426 jam bt_cmd_start_discovery ,mem_fifo_temp +0x33ef 010427 branch ui_ipc_send_cmd +: 010429 app_bt_stop_discovery: +0x33f0 010430 setarg 0 +0x33f1 010431 store 2 ,mem_discovery_timeout_timer_count +0x33f2 010432 jam bt_cmd_stop_discovery ,mem_fifo_temp +0x33f3 010433 branch ui_ipc_send_cmd +: 010435 app_ble_start_direct_adv: +0x33f4 010436 jam bt_cmd_start_direct_adv ,mem_fifo_temp +0x33f5 010437 branch ui_ipc_send_cmd +: 010439 app_ble_stop_direct_adv: +0x33f6 010440 jam bt_cmd_stop_direct_adv ,mem_fifo_temp +0x33f7 010441 branch ui_ipc_send_cmd +: 010443 app_ble_stop_adv: +0x33f8 010444 jam bt_cmd_stop_adv ,mem_fifo_temp +0x33f9 010445 branch ui_ipc_send_cmd +: 010447 app_ble_start_adv: +0x33fa 010448 jam bt_cmd_start_adv ,mem_fifo_temp +0x33fb 010449 branch ui_ipc_send_cmd +: 010451 app_ble_start_scan: +0x33fc 010452 jam bt_cmd_le_start_scan ,mem_fifo_temp +0x33fd 010453 branch ui_ipc_send_cmd +: 010455 app_ble_stop_scan: +0x33fe 010456 jam bt_cmd_le_stop_scan ,mem_fifo_temp +0x33ff 010457 branch ui_ipc_send_cmd +: 010459 app_ble_start_conn: +0x3400 010460 jam bt_cmd_le_start_conn ,mem_fifo_temp +0x3401 010461 branch ui_ipc_send_cmd +: 010463 app_ble_disconnect: +0x3402 010464 jam bt_cmd_le_disconnect ,mem_fifo_temp +0x3403 010465 branch ui_ipc_send_cmd +: 010467 app_led_start_blink: +0x3404 010468 jam bt_cmd_led_blink ,mem_fifo_temp +0x3405 010469 branch ui_ipc_send_cmd +: 010471 app_led_on: +0x3406 010472 jam bt_cmd_led_on ,mem_fifo_temp +0x3407 010473 branch ui_ipc_send_cmd +: 010475 app_led_stop_blink: +: 010476 app_led_off: +0x3408 010477 jam bt_cmd_led_off ,mem_fifo_temp +0x3409 010478 branch ui_ipc_send_cmd +: 010480 app_enter_hibernate: +0x340a 010481 jam bt_cmd_enter_hibernate ,mem_fifo_temp +0x340b 010482 branch ui_ipc_send_cmd +: 010484 app_bt_sniff_exit: +0x340c 010485 jam bt_cmd_exit_sniff ,mem_fifo_temp +0x340d 010486 branch ui_ipc_send_cmd +: 010488 app_bt_enter_sniff: +0x340e 010489 jam bt_cmd_enter_sniff ,mem_fifo_temp +0x340f 010490 branch ui_ipc_send_cmd +: 010492 app_ble_store_reconn_info: +0x3410 010493 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp +0x3411 010494 branch ui_ipc_send_cmd +: 010496 app_bt_store_reconn_info: +0x3412 010497 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp +0x3413 010498 branch ui_ipc_send_cmd +: 010500 app_store_reconn_info: +0x3414 010501 jam bt_cmd_store_reconn_info ,mem_fifo_temp +0x3415 010502 branch ui_ipc_send_cmd +: 010504 app_lpm_mult_enable: +0x3416 010505 set1 mark_lpm_mult_enable ,mark +0x3417 010506 rtn +: 010508 app_lpm_mult_disable: +0x3418 010509 set0 mark_lpm_mult_enable ,mark +0x3419 010510 rtn +: 010530 app_button_long_pressed: +0x341a 010531 call app_got_power_state_common +0x341b 010532 beq power_standby ,app_power_shutting_down +: 010533 app_power_starting: +0x341c 010534 setarg power_starting +0x341d 010535 istore 1 ,regc +0x341e 010536 add temp ,power_starting_timeout_offset ,rega +0x341f 010537 add temp ,power_starting_cb_offset ,regb +: 010538 app_power_common: +0x3420 010539 ifetcht 1 ,rega +0x3421 010540 increase 1 ,regc +0x3422 010541 istoret 1 ,regc +0x3423 010542 branch app_power_cb_common +: 010544 app_power_shutting_down: +0x3424 010545 setarg power_off +0x3425 010546 istore 1 ,regc +0x3426 010547 fetch 2 ,mem_ui_state_map +0x3427 010548 bbit0 ui_state_ble_connected ,app_power_off_end +0x3428 010549 call app_ble_disconnect +: 010550 app_power_off_end: +0x3429 010551 fetcht 2 ,mem_power_param_ptr +0x342a 010552 add temp ,power_off_timeout_offset ,rega +0x342b 010553 add temp ,power_off_cb_offset ,regb +0x342c 010554 branch app_power_common +: 010556 app_got_power_state_common: +0x342d 010557 fetcht 2 ,mem_power_param_ptr +0x342e 010558 add temp ,power_state_offset ,regc +0x342f 010559 ifetch 1 ,regc +0x3430 010560 rtn +: 010562 app_event_button_up: +0x3431 010563 call app_got_power_state_common +0x3432 010564 bne power_off ,app_power_release +0x3433 010565 branch app_enter_hibernate +: 010566 app_power_release: +0x3434 010567 add temp ,ui_butten_up_cb_offset ,regb +0x3435 010568 branch app_power_cb_common +: 010570 antilost_init: +0x3436 010571 rtn wake +0x3437 010572 jam 0x00 ,core_gpio_sel1 +0x3438 010573 setarg antilost_le_before_hibernate +0x3439 010574 store 2 ,mem_cb_before_hibernate +0x343a 010575 setarg keyscan_process_lpm_before +0x343b 010576 store 2 ,mem_cb_before_lpm +0x343c 010577 setarg antilost_idle_process +0x343d 010578 store 2 ,mem_cb_idle_process +0x343e 010579 setarg antilost_le_conn_process +0x343f 010580 store 2 ,mem_cb_le_process +0x3440 010581 setarg antilost_bb_event_process +0x3441 010582 store 2 ,mem_cb_bb_event_process +0x3442 010583 setarg antilost_le_bb_event_timer +0x3443 010584 store 2 ,mem_cb_event_timer +0x3444 010585 setarg antilost_le_notification +0x3445 010586 store 2 ,mem_cb_ble_transmit +0x3446 010587 setarg antilost_lpm_lock_process +0x3447 010588 store 2 ,mem_cb_check_wakelock +0x3448 010589 setarg antilost_le_receive_data_process +0x3449 010590 store 2 ,mem_cb_att_write +0x344a 010591 bpatch patch19_4 ,mem_patch19 +0x344b 010592 call antilost_buzzer_pwm_init +0x344c 010593 call keyscan_key_init +0x344d 010594 call antilost_adc_init +0x344e 010595 call ui_led_init_global +0x344f 010596 call ui_button_init +0x3450 010597 setarg antilost_key_up_down +0x3451 010598 store 2 ,mem_cb_antl_key +0x3452 010599 setarg antilost_power_off_cb +0x3453 010600 store 2 ,mem_antl_power_off_cb +0x3454 010601 setarg antilost_power_starting_cb +0x3455 010602 store 2 ,mem_antl_power_starting_cb +0x3456 010603 setarg antilost_power_standby_cb +0x3457 010604 store 2 ,mem_antl_power_standby_cb +0x3458 010605 setarg antilost_led_on_cb +0x3459 010606 store 2 ,mem_antl_led_cb_on +0x345a 010607 setarg antilost_led_off_cb +0x345b 010608 store 2 ,mem_antl_led_cb_off +0x345c 010609 setarg antilost_buzzer_on +0x345d 010610 store 2 ,mem_antl_buzzer_cb_on +0x345e 010611 setarg antilost_buzzer_off +0x345f 010612 store 2 ,mem_antl_buzzer_cb_off +0x3460 010613 fetch 2 ,mem_ui_state_map +0x3461 010614 rtnbit1 ui_state_btn_down +0x3462 010615 branch app_enter_hibernate +: 010617 antilost_le_before_hibernate: +0x3463 010618 call antilost_led_buzzer_stop_blink +0x3464 010619 branch app_enter_hibernate +: 010621 antilost_le_notification: +0x3465 010622 call le_fifo_check_nearly_full +0x3466 010623 nrtn blank +0x3467 010624 arg mem_temp_block5 ,rega +0x3468 010625 call queue_pop +0x3469 010626 nrtn user +0x346a 010627 arg mem_temp_block5 ,contr +0x346b 010628 branch le_send_notify_from_list +: 010630 antilost_power_standby_cb: +0x346c 010631 fetch 2 ,mem_antl_le_sleep_timeout +0x346d 010632 store 2 ,mem_antl_le_sleep_timer +0x346e 010633 jam 1 ,mem_antl_key_scan_enable +0x346f 010634 branch antilost_fast_adv_start +: 010636 antilost_lpm_lock_process: +0x3470 010637 fetch 1 ,mem_antl_key_state +0x3471 010638 beq 1 ,antilost_lpm_ctrl_for_led_buzzer +0x3472 010639 fetch 2 ,mem_ui_state_map +0x3473 010640 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer +0x3474 010641 fetch 1 ,mem_antl_lost_mode +0x3475 010642 beq 1 ,app_get_lpm_wake_lock +0x3476 010643 fetch 1 ,mem_antl_queue_curr_num +0x3477 010644 nbranch app_get_lpm_wake_lock ,blank +0x3478 010645 branch app_put_lpm_wake_lock +: 010647 antilost_lpm_ctrl_for_led_buzzer: +0x3479 010648 fetch 1 ,mem_antl_led_state +0x347a 010649 fetcht 1 ,mem_antl_buzzer_state +0x347b 010650 ior temp ,pdata +0x347c 010651 beq 1 ,app_get_lpm_wake_lock +0x347d 010652 branch app_put_lpm_wake_lock +: 010654 antilost_bb_event_process: +0x347e 010655 copy regc ,pdata +0x347f 010656 beq bt_evt_button_up ,app_event_button_up +0x3480 010657 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x3481 010658 beq bt_evt_le_connected ,antilost_le_process_conn +0x3482 010659 beq bt_evt_le_disconnected ,antilost_le_process_discon +0x3483 010660 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved +0x3484 010661 rtn +: 010662 antilost_le_conn_param_update_rsp_recieved: +0x3485 010663 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x3486 010664 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected +: 010665 antilost_le_conn_param_accepted: +0x3487 010666 fetch 2 ,mem_le_new_connslavelatency +0x3488 010667 branch antilost_master_nonsupport_latency ,blank +: 010668 antilost_le_conn_param_updata_procedure_sucsess: +0x3489 010669 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state +0x348a 010670 jam 60 ,mem_antl_conn_update_timer +0x348b 010671 rtn +: 010673 antilost_le_conn_param_rejected: +0x348c 010674 fetch 2 ,mem_le_latency +0x348d 010675 branch antilost_conn_param_updata_procedure_faild ,blank +: 010676 antilost_conn_param_retransimiting: +0x348e 010677 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +0x348f 010678 fetcht 2 ,mem_interval_increment +0x3490 010679 fetch 2 ,mem_le_interval_min +0x3491 010680 iadd temp ,pdata +0x3492 010681 store 2 ,mem_le_interval_min +0x3493 010682 copy pdata ,rega +0x3494 010683 fetch 2 ,mem_le_interval_max +0x3495 010684 iadd temp ,pdata +0x3496 010685 store 2 ,mem_le_interval_max +0x3497 010686 iadd rega ,pdata +0x3498 010687 rshift pdata ,temp +0x3499 010688 fetch 2 ,mem_antl_le_unnormal_interval_max +0x349a 010689 idiv temp +0x349b 010690 call wait_div_end +0x349c 010691 quotient pdata +0x349d 010692 store 2 ,mem_le_latency +0x349e 010693 jam 1 ,mem_antl_send_updata_le_param_timer +0x349f 010694 rtn +: 010695 antilost_conn_param_updata_procedure_faild: +0x34a0 010696 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state +0x34a1 010697 rtn +: 010699 antilost_master_nonsupport_latency: +0x34a2 010700 jam 0 ,mem_lpm_mult +0x34a3 010701 jam 0 ,mem_antl_send_updata_le_param_timer +0x34a4 010702 fetch 2 ,mem_le_new_conninterval +0x34a5 010703 fetcht 2 ,mem_antl_le_unnormal_interval_min +0x34a6 010704 isub temp ,null +0x34a7 010705 setflag positive ,0 ,rega +0x34a8 010706 fetch 2 ,mem_antl_le_unnormal_interval_max +0x34a9 010707 fetcht 2 ,mem_le_new_conninterval +0x34aa 010708 isub temp ,pdata +0x34ab 010709 setflag positive ,1 ,rega +0x34ac 010710 compare 0x03 ,rega ,0x03 +0x34ad 010711 rtn true +0x34ae 010712 fetch 8 ,mem_antl_le_unnormal_interval_min +0x34af 010713 store 8 ,mem_le_interval_min +0x34b0 010714 jam 1 ,mem_antl_send_updata_le_param_timer +0x34b1 010715 rtn +: 010718 antilost_le_bb_event_timer: +0x34b2 010720 call app_power_timer +0x34b3 010721 call antilost_double_click_timer +0x34b4 010722 call antilost_le_fast_adv_timer +0x34b5 010723 call antilost_le_sleep_timer +0x34b6 010724 call antilost_app_updata_le_param_timer +0x34b7 010725 call antilost_conn_update_timer +0x34b8 010726 branch antilost_adc_check_timer +: 010729 antilost_double_click_timer: +0x34b9 010730 arg mem_double_click_timer ,regc +0x34ba 010731 arg antilost_double_click_timeout ,regb +0x34bb 010732 branch timer_single_step +: 010733 antilost_double_click_timeout: +0x34bc 010734 jam 0 ,mem_butten_click_cnt +0x34bd 010735 rtn +: 010736 antilost_le_fast_adv_timer: +0x34be 010737 arg mem_antl_fast_adv_timer ,regc +0x34bf 010738 arg antilost_le_fast_adv_timeout ,regb +0x34c0 010739 branch timer_single_step_2b +: 010740 antilost_le_fast_adv_timeout: +0x34c1 010741 arg mem_antl_slow_adv_led_style ,regc +0x34c2 010742 arg mem_antl_slow_adv_lpm_interval ,regb +0x34c3 010743 branch antilost_adv_start_common +: 010746 antilost_conn_update_timer: +0x34c4 010747 arg mem_antl_conn_update_timer ,regc +0x34c5 010748 arg antilost_conn_update_timer_time_out ,regb +0x34c6 010749 branch timer_single_step +: 010751 antilost_conn_update_timer_time_out: +0x34c7 010752 fetch 2 ,mem_le_latency +0x34c8 010753 store 1 ,mem_lpm_mult +0x34c9 010754 rtn +: 010755 antilost_app_updata_le_param_timer: +0x34ca 010756 arg mem_antl_send_updata_le_param_timer ,regc +0x34cb 010757 arg antilost_app_updata_le_param_timeout ,regb +0x34cc 010758 branch timer_single_step +: 010759 antilost_app_updata_le_param_timeout: +0x34cd 010760 fetch 1 ,mem_le_state +0x34ce 010761 compare 0 ,pdata ,0x60 +0x34cf 010762 nbranch antilost_wait_for_updata_param_instant_expire ,true +0x34d0 010763 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +0x34d1 010764 call app_lpm_mult_enable +0x34d2 010765 branch le_l2cap_tx_update_req +: 010766 antilost_wait_for_updata_param_instant_expire: +0x34d3 010767 jam 1 ,mem_antl_send_updata_le_param_timer +0x34d4 010768 rtn +: 010770 antilost_le_sleep_timer: +0x34d5 010771 arg mem_antl_le_sleep_timer ,regc +0x34d6 010772 arg antilost_le_sleep_timer_timeout ,regb +0x34d7 010773 branch timer_single_step_2b +: 010776 antilost_le_sleep_timer_timeout: +0x34d8 010777 branch app_button_long_pressed +: 010779 antilost_adc_check_timer: +0x34d9 010782 arg mem_adc_timer ,regc +0x34da 010783 arg antilost_adc_check_timer_timeout ,regb +0x34db 010784 branch timer_single_step_2b +: 010785 antilost_adc_check_timer_timeout: +0x34dc 010786 fetch 2 ,mem_adc_timeout +0x34dd 010787 store 2 ,mem_adc_timer +0x34de 010788 branch antilost_battery_process +: 010791 antilost_le_process_conn: +0x34df 010792 fetch 2 ,mem_adc_timeout +0x34e0 010793 store 2 ,mem_adc_timer +0x34e1 010794 setarg 0 +0x34e2 010795 store 2 ,mem_antl_fast_adv_timer +0x34e3 010796 store 2 ,mem_antl_le_sleep_timer +0x34e4 010797 call antilost_alert_off +0x34e5 010798 call antilost_led_buzzer_stop_blink +0x34e6 010799 jam 0 ,mem_lpm_mult +0x34e7 010800 branch app_ble_stop_adv +: 010803 antilost_le_process_discon: +0x34e8 010806 setarg 0 +0x34e9 010807 store 4 ,mem_adc_timer +0x34ea 010808 store 3 ,mem_antl_conn_updata_procedure_state +0x34eb 010809 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x34ec 010811 jam 1 ,mem_alarm_config_notfy_cnt +0x34ed 010812 fetch 2 ,mem_antl_le_sleep_timeout +0x34ee 010813 store 2 ,mem_antl_le_sleep_timer +0x34ef 010814 call queue_init +0x34f0 010815 fetch 1 ,mem_antl_power_state +0x34f1 010816 rtneq power_off +0x34f2 010817 call antilost_fast_adv_start +0x34f3 010818 branch antilost_on_off_alarm_after_disconn +: 010821 antilost_le_conn_process: +0x34f4 010823 branch antilost_key_process +: 010825 antilost_idle_process: +0x34f5 010827 fetch 1 ,mem_antl_power_state +0x34f6 010828 rtnne power_standby +0x34f7 010829 branch antilost_key_process +: 010834 antilost_power_starting_cb: +0x34f8 010835 arg mem_antl_power_starting_buzzer_style ,regc +0x34f9 010836 call antilost_buzzer_configuration +0x34fa 010837 arg mem_antl_power_starting_led_style ,regc +: 010838 antilost_power_common: +0x34fb 010839 branch antilost_led_configuration +: 010841 antilost_power_off_cb: +0x34fc 010842 jam off ,mem_le_adv_enable +0x34fd 010843 arg mem_antl_power_off_buzzer_style ,regc +0x34fe 010844 call antilost_buzzer_configuration +0x34ff 010845 arg mem_antl_power_off_led_style ,regc +0x3500 010846 branch antilost_power_common +: 010848 antilost_le_receive_data_process: +0x3501 010849 fetch 1 ,mem_le_att_opcode +0x3502 010850 beq attop_write_request ,antilost_le_parse_att_write_request +0x3503 010851 rtn +: 010852 antilost_le_parse_att_write_request: +0x3504 010853 fetch 2 ,mem_le_att_handle +0x3505 010855 beq new_spec_write_handle ,antilost_cmd_parse_for_application +0x3506 010856 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time +0x3507 010857 rtn +: 010862 antilost_key_process: +0x3508 010863 fetch 1 ,mem_antl_key_scan_enable +0x3509 010864 rtn blank +0x350a 010865 branch keyscan_key_process +: 010869 antilost_key_up_down: +0x350b 010870 copy rega ,pdata +0x350c 010871 branch antilost_key_is_up ,blank +: 010872 antilost_key_is_down: +0x350d 010873 copy queue ,pdata +0x350e 010874 beq 0 ,antilost_key0_down +0x350f 010875 rtn +: 010876 antilost_key_is_up: +0x3510 010877 copy queue ,pdata +0x3511 010878 beq 0 ,antilost_key0_up +0x3512 010879 rtn +: 010881 antilost_key0_down: +0x3513 010882 jam 1 ,mem_antl_key_state +0x3514 010883 arg mem_antl_key_buzzer_style ,regc +0x3515 010884 call antilost_buzzer_configuration +0x3516 010885 arg mem_antl_key_led_style ,regc +0x3517 010886 call antilost_led_configuration +0x3518 010887 fetch 2 ,mem_ui_state_map +0x3519 010888 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn +0x351a 010889 branch antilost_butten_down_after_conn +: 010891 antilost_key0_up: +0x351b 010892 jam 0 ,mem_antl_key_state +0x351c 010893 branch antilost_double_click_timer_init +: 010897 antilost_double_click_timer_init: +0x351d 010898 fetch 1 ,mem_butten_click_cnt +0x351e 010899 rtnne 1 +0x351f 010900 jam 5 ,mem_double_click_timer +0x3520 010901 rtn +: 010903 antilost_butten_down_after_conn: +0x3521 010904 fetch 1 ,mem_butten_click_cnt +0x3522 010905 pincrease 1 +0x3523 010906 store 1 ,mem_butten_click_cnt +0x3524 010907 beq 1 ,antilost_click_once +0x3525 010908 beq 2 ,antilost_click_twice +0x3526 010909 rtn +: 010910 antilost_click_once: +0x3527 010911 call antilost_alert_off +0x3528 010912 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 +0x3529 010913 arg mem_antl_key0_press ,regc +0x352a 010914 branch antilost_prepare_data_and_send +: 010915 antilost_click_twice: +0x352b 010916 jam 0 ,mem_butten_click_cnt +0x352c 010917 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 +0x352d 010918 arg mem_antl_key0_press ,regc +0x352e 010919 call antilost_prepare_data_and_send +0x352f 010920 fetch 1 ,mem_antl_lost_mode +0x3530 010921 beq 1 ,antilost_alert_on +0x3531 010922 rtn +: 010924 antilost_butten_down_while_disconn: +0x3532 010925 fetch 2 ,mem_antl_le_sleep_timeout +0x3533 010926 store 2 ,mem_antl_le_sleep_timer +0x3534 010927 call antilost_alert_off +0x3535 010928 branch antilost_fast_adv_start +: 010931 antilost_cmd_parse_for_application: +0x3536 010932 bpatch patch19_5 ,mem_patch19 +0x3537 010933 call le_app_receive_data +0x3538 010934 ifetch 1 ,rega +0x3539 010935 beq opcode3_antl_start_alram ,antilost_on_of_alram +0x353a 010936 beq opcode7_antl_config_alram ,antilost_configuration_for_alram +0x353b 010937 rtn +: 010939 antilost_on_of_alram: +0x353c 010940 fetch 1 ,mem_antl_lost_mode +0x353d 010941 beq anti_le_alarm_off ,antilost_alert_on +0x353e 010942 beq anti_le_alarm_on ,antilost_alert_off +0x353f 010943 rtn +: 010945 antilost_configuration_for_alram: +0x3540 010946 ifetch 1 ,regb +0x3541 010947 beq 1 ,antilost_set_start_alarm_after_disconn +0x3542 010948 beq 0 ,antilost_set_no_alarm_after_disconn +0x3543 010949 rtn +: 010956 antilost_prepare_data_and_send: +0x3544 010957 bpatch patch19_6 ,mem_patch19 +0x3545 010958 fetch 1 ,mem_client_characteristic_configuration_descriptor +0x3546 010959 isolate1 notification_enable_bit ,pdata +0x3547 010960 nrtn true +0x3548 010961 add regc ,6 ,contr +0x3549 010962 ifetch 2 ,contr +0x354a 010963 byteswap pdata ,pdata +0x354b 010964 add pdata ,5 ,loopcnt +0x354c 010965 add regc ,3 ,contr +0x354d 010966 call calc_check_sum_start +0x354e 010967 istore 1 ,contr +0x354f 010968 copy regc ,rega +0x3550 010969 branch queue_push +: 010975 antilost_alert_on: +0x3551 010976 fetch 1 ,mem_antl_power_state +0x3552 010977 rtn blank +0x3553 010978 jam 1 ,mem_antl_lost_mode +0x3554 010979 arg mem_antl_alert_buzzer_stlye ,regc +0x3555 010980 call antilost_buzzer_configuration +0x3556 010981 arg mem_antl_alert_led_stlye ,regc +0x3557 010982 call antilost_led_configuration +0x3558 010983 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +0x3559 010984 jam 1 ,mem_antl_key0_release + 8 +0x355a 010985 arg mem_antl_key0_release ,regc +0x355b 010986 branch antilost_prepare_data_and_send +: 010987 antilost_alert_off: +0x355c 010988 fetch 1 ,mem_antl_lost_mode +0x355d 010989 rtn blank +0x355e 010990 jam 0 ,mem_antl_lost_mode +0x355f 010991 call antilost_led_buzzer_stop_blink +0x3560 010992 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +0x3561 010993 jam 0 ,mem_antl_key0_release + 8 +0x3562 010994 arg mem_antl_key0_release ,regc +0x3563 010995 branch antilost_prepare_data_and_send +: 010997 antilost_set_start_alarm_after_disconn: +0x3564 010998 jam 1 ,mem_alarm_config +0x3565 010999 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x3566 011000 jam 1 ,mem_antl_key0_release + 8 +0x3567 011001 arg mem_antl_key0_release ,regc +0x3568 011002 branch antilost_prepare_data_and_send +: 011003 antilost_set_no_alarm_after_disconn: +0x3569 011004 jam 0 ,mem_alarm_config +0x356a 011005 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x356b 011006 jam 0 ,mem_antl_key0_release + 8 +0x356c 011007 arg mem_antl_key0_release ,regc +0x356d 011008 branch antilost_prepare_data_and_send +: 011009 antilost_on_off_alarm_after_disconn: +0x356e 011010 fetch 1 ,mem_alarm_config +0x356f 011011 rtn blank +0x3570 011012 branch antilost_alert_on +: 011014 antilost_notify_alarm_config_first_time: +0x3571 011015 ifetch 2 ,rega +0x3572 011016 store 2 ,mem_client_characteristic_configuration_descriptor +0x3573 011017 isolate1 notification_enable_bit ,pdata +0x3574 011018 nrtn true +0x3575 011019 fetch 1 ,mem_alarm_config_notfy_cnt +0x3576 011020 rtn blank +0x3577 011021 jam 0 ,mem_alarm_config_notfy_cnt +0x3578 011022 fetch 8 ,mem_antl_le_interval_min +0x3579 011023 store 8 ,mem_le_interval_min +0x357a 011024 jam 2 ,mem_antl_send_updata_le_param_timer +0x357b 011025 call antilost_battery_process +0x357c 011026 call antilost_battery_calculate_end +0x357d 011027 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x357e 011028 fetch 1 ,mem_alarm_config +0x357f 011029 store 1 ,mem_antl_key0_release + 8 +0x3580 011030 arg mem_antl_key0_release ,regc +0x3581 011031 branch antilost_prepare_data_and_send +: 011035 antilost_buzzer_configuration: +0x3582 011036 arg 1 ,rega +0x3583 011037 branch antilost_configuration_common +: 011038 antilost_led_configuration: +0x3584 011039 arg 0 ,rega +: 011040 antilost_configuration_common: +0x3585 011041 branch antilost_led_buzzer_style_configuration +: 011043 antilost_led_buzzer_stop_blink: +0x3586 011044 arg 0 ,rega +0x3587 011045 call ui_led_blink_stop_global +0x3588 011046 arg 1 ,rega +0x3589 011047 call ui_led_blink_stop_global +0x358a 011048 fetch 1 ,mem_buzzer_pwm_conf +0x358b 011049 branch pwm_disable +: 011051 antilost_led_buzzer_style_configuration: +0x358c 011052 call calc_curr_struct_prt +0x358d 011053 arg 7 ,loopcnt +0x358e 011054 branch ui_led_set_style_global + 2 +: 011058 antilost_fast_adv_start: +0x358f 011059 arg mem_antl_fast_adv_led_style ,regc +0x3590 011060 arg mem_antl_lpm_interval ,regb +: 011061 antilost_adv_start_common: +0x3591 011062 call antilost_adv_interval_lpm_interval_set +0x3592 011063 call antilost_led_configuration +0x3593 011064 fetch 2 ,mem_antl_fast_adv_timeout +0x3594 011065 store 2 ,mem_antl_fast_adv_timer +0x3595 011066 branch app_ble_start_adv +: 011068 antilost_adv_interval_lpm_interval_set: +0x3596 011069 ifetch 2 ,regb +0x3597 011070 store 2 ,mem_lpm_interval +0x3598 011071 ifetch 2 ,contr +0x3599 011072 store 2 ,mem_le_adv_interval +0x359a 011073 rtn +: 011075 antilost_buzzer_pwm_init: +0x359b 011076 arg 0 ,rega +0x359c 011077 call pwm_init +0x359d 011078 fetch 6 ,mem_buzzer_pwm_conf +0x359e 011079 store 6 ,mem_pdatatemp +0x359f 011080 call pwm_out_set +0x35a0 011081 fetch 1 ,mem_buzzer_pwm_conf +0x35a1 011082 branch pwm_disable +: 011084 antilost_led_on_cb: +0x35a2 011085 jam 1 ,mem_antl_led_state +0x35a3 011086 rtn +: 011087 antilost_led_off_cb: +0x35a4 011088 jam 0 ,mem_antl_led_state +0x35a5 011089 rtn +: 011093 antilost_buzzer_off: +0x35a6 011094 jam 0 ,mem_antl_buzzer_state +0x35a7 011095 fetch 1 ,mem_buzzer_pwm_conf +0x35a8 011096 branch pwm_disable +: 011098 antilost_buzzer_on: +0x35a9 011099 jam 1 ,mem_antl_buzzer_state +0x35aa 011100 fetch 6 ,mem_buzzer_pwm_conf +0x35ab 011101 store 6 ,mem_pdatatemp +0x35ac 011102 branch pwm_out_set +: 011106 antilost_adc_init: +0x35ad 011107 jam 0 ,mem_adc_config_flag +0x35ae 011108 branch adc_init_data +: 011110 antilost_battery_process: +0x35af 011111 call adc_set_mode +0x35b0 011112 call vdd_calculate_by_mode +0x35b1 011113 store 2 ,mem_battery_current_voltage +0x35b2 011114 arg mem_battery_calculate_set ,rega +0x35b3 011115 call adc_bat_percent_lowpower_out +0x35b4 011116 store 1 ,mem_voltage_remain_percent +0x35b5 011117 beq 0 ,antilost_low_battery +0x35b6 011118 sub pdata ,0x64 ,null +0x35b7 011119 nbranch antilost_full_battery ,positive +0x35b8 011120 store 1 ,mem_antl_key0_release + 8 +: 011121 antilost_battery_calculate_end: +0x35b9 011122 jam opcode5_batter_information ,mem_antl_key0_release + 5 +0x35ba 011123 arg mem_antl_key0_release ,regc +0x35bb 011124 branch antilost_prepare_data_and_send +: 011125 antilost_full_battery: +0x35bc 011126 jam 100 ,mem_antl_key0_release + 8 +0x35bd 011127 branch antilost_battery_calculate_end +: 011129 antilost_low_battery: +0x35be 011130 branch app_button_long_pressed +: 011134 car_init: +0x35bf 011135 rtn wake +0x35c0 011136 hfetch 1 ,core_gpio_sel1 +0x35c1 011137 and_into 0xf0 ,pdata +0x35c2 011138 hstore 1 ,core_gpio_sel1 +0x35c3 011139 setarg car_le_before_hibernate +0x35c4 011140 store 2 ,mem_cb_before_hibernate +0x35c5 011142 setarg car_le_process_lpm_before +0x35c6 011143 store 2 ,mem_cb_before_lpm +0x35c7 011145 setarg app_enter_hibernate +0x35c8 011146 store 2 ,mem_cb_discovry_timeout +0x35c9 011148 setarg car_scale_process_idle +0x35ca 011149 store 2 ,mem_cb_idle_process +0x35cb 011151 setarg car_scale_process_bb_event +0x35cc 011152 store 2 ,mem_cb_bb_event_process +0x35cd 011154 setarg app_get_lpm_wake_lock +0x35ce 011155 store 2 ,mem_cb_check_wakelock +0x35cf 011157 setarg car_le_receive_data +0x35d0 011158 store 2 ,mem_cb_att_write +0x35d1 011160 setarg car_le_bb_event_timer +0x35d2 011161 store 2 ,mem_cb_event_timer +0x35d3 011163 call g24_head_ptr2regc +0x35d4 011164 setarg car_24g_receive_data +0x35d5 011165 add regc ,offset_24g_cb_rxdata_type1 ,contw +0x35d6 011166 istore 2 ,contw +0x35d7 011168 setarg car_power_off_signal +0x35d8 011169 store 2 ,mem_remote_car_power_off_cb +0x35d9 011171 setarg car_soft_switch_power_on_signal +0x35da 011172 store 2 ,mem_remote_car_power_standby_cb +0x35db 011174 bpatch patch19_7 ,mem_patch19 +0x35dc 011175 call car_init_environment +0x35dd 011176 call queue_init +0x35de 011177 jam 2 ,mem_lpm_mult +0x35df 011178 jam power_on ,mem_car_24g_received_pac +0x35e0 011179 fetch 1 ,mem_car_config_soft_switch_enable +0x35e1 011180 store 1 ,mem_car_hard_soft_switch +0x35e2 011181 beq hard_switch ,car_hard_switch_power_on_signal +0x35e3 011182 fetch 1 ,mem_car_config_soft_switch_gpio +0x35e4 011183 store 1 ,mem_ui_button_gpio +0x35e5 011184 jam off ,mem_le_adv_enable +: 011185 car_soft_switch_power_on_init: +0x35e6 011186 call car_ui_led_init +0x35e7 011187 call ui_button_init +0x35e8 011188 call ui_button_polling +0x35e9 011189 jam power_starting ,mem_car_power_state +0x35ea 011190 fetch 2 ,mem_ui_state_map +0x35eb 011191 rtnbit1 ui_state_btn_down +0x35ec 011192 branch app_enter_hibernate +: 011194 car_power_off_signal: +0x35ed 011195 branch car_ui_led_init +: 011197 car_hard_switch_power_on_signal: +0x35ee 011198 jam power_standby ,mem_car_power_state +: 011199 car_soft_switch_power_on_signal: +0x35ef 011200 jam on ,mem_le_adv_enable +0x35f0 011201 call car_ui_led_init +0x35f1 011202 arg 0 ,rega +0x35f2 011203 call ui_led_blink_start_global +0x35f3 011205 setarg fast_adv_interval_value_car +0x35f4 011206 call shutter_ble_adv_interval_set +: 011207 car_le_modified_name_adv: +0x35f5 011208 arg mem_le_name + 7 ,contw +0x35f6 011209 fetch 1 ,mem_le_lap +: 011210 car_name_loop: +0x35f7 011211 and pdata ,0xF0 ,temp +0x35f8 011212 rshift4 temp ,temp +0x35f9 011213 call car_hex_to_ascii +0x35fa 011214 istoret 1 ,contw +0x35fb 011215 and pdata ,0x0F ,temp +0x35fc 011216 call car_hex_to_ascii +0x35fd 011217 istoret 1 ,contw +0x35fe 011218 call le_modified_name_att_list +0x35ff 011219 fetcht 1 ,mem_le_name_len +0x3600 011220 copy temp ,loopcnt +0x3601 011221 arg mem_le_adv_data + 2 ,contw +0x3602 011222 arg mem_le_name ,contr +0x3603 011223 call memcpy +: 011224 car_le_modified_name_scan: +0x3604 011225 fetcht 1 ,mem_le_name_len +0x3605 011226 copy temp ,loopcnt +0x3606 011227 arg mem_le_scan_data + 2 ,contw +0x3607 011228 arg mem_le_name ,contr +0x3608 011229 branch memcpy +: 011230 car_hex_to_ascii: +0x3609 011231 sub temp ,9 ,null +0x360a 011232 branch car_hex_num ,positive +0x360b 011233 add temp ,55 ,temp +0x360c 011234 rtn +: 011235 car_hex_num: +0x360d 011236 add temp ,48 ,temp +0x360e 011237 rtn +: 011239 car_ui_led_init: +0x360f 011240 fetch 1 ,mem_car_config_blood_led1_gpio +0x3610 011241 bne invalid_pin_num ,car_blood_led_gpio_set +: 011242 car_ui_led_init_1: +0x3611 011243 fetch 1 ,mem_car_config_pairing_led_gpio +0x3612 011244 bne invalid_pin_num ,car_pairing_led_gpio_set +: 011245 car_ui_led_init_2: +0x3613 011246 fetch 1 ,mem_car_config_low_voltage_led_gpio +0x3614 011247 bne invalid_pin_num ,car_low_voltage_led_gpio_set +: 011248 car_ui_led_init_3: +0x3615 011249 fetch 1 ,mem_car_led_num +0x3616 011250 copy pdata ,loopcnt +0x3617 011251 setarg mem_car_led_map +0x3618 011252 copy pdata ,rega +: 011253 car_in_lp1: +0x3619 011254 copy rega ,contr +0x361a 011255 ifetch 1 ,contr +0x361b 011256 copy contr ,rega +0x361c 011257 beq invalid_pin_num ,car_in_lp1_end +0x361d 011258 copy pdata ,temp +0x361e 011259 call gpio_config_output +: 011260 car_in_lp1_end: +0x361f 011261 loop car_in_lp1 +: 011262 car_ui_led_init_end: +0x3620 011263 rtn +: 011264 car_blood_led_gpio_set: +0x3621 011265 fetch 8 ,mem_car_config_blood_led1_gpio +0x3622 011266 store 8 ,mem_car_led_map + 2 +0x3623 011267 branch car_ui_led_init_1 +: 011268 car_pairing_led_gpio_set: +0x3624 011269 store 1 ,mem_car_led_map +0x3625 011270 branch car_ui_led_init_2 +: 011271 car_low_voltage_led_gpio_set: +0x3626 011272 store 1 ,mem_car_led_map + 1 +0x3627 011273 branch car_ui_led_init_3 +: 011276 car_init_environment: +0x3628 011277 arg 0 ,rega +0x3629 011278 call pwm_init +0x362a 011279 call car_ir_rx_init +0x362b 011280 call g24_receive_process_init +0x362c 011281 branch car_init_adc_hvin +: 011283 car_init_adc_hvin: +0x362d 011284 jam 100 ,mem_car_notify_vdd_value_last +0x362e 011285 fetch 1 ,mem_car_config_low_voltage_led_gpio +0x362f 011286 store 1 ,mem_car_style2_struct_led_gpio +0x3630 011287 branch adc_init_data +: 011289 car_le_before_hibernate: +0x3631 011290 call gpio_set_before_lpm_common +0x3632 011291 branch keyscan_process_lpm_before +: 011293 car_le_process_lpm_before: +0x3633 011294 branch keyscan_process_lpm_before +: 011296 car_key_scan_process: +0x3634 011299 branch keyscan_key_process +: 011301 car_scale_process_idle: +0x3635 011302 call car_le_send_packet +0x3636 011303 call car_ir_receive_process +0x3637 011304 call car_g24_status_process +0x3638 011305 branch car_key_scan_process +: 011307 car_g24_status_process: +0x3639 011308 fetch 2 ,mem_ui_state_map +0x363a 011309 rtnbit1 ui_state_ble_connected +0x363b 011310 fetch 1 ,mem_car_24g_received_pac +0x363c 011311 beq work_paired ,car_g24_connected_event +0x363d 011312 rtn +: 011313 car_g24_connected_event: +0x363e 011314 fetch 1 ,mem_car_24g_status +0x363f 011315 rtneq work_paired +0x3640 011316 jam work_paired ,mem_car_24g_status +0x3641 011317 branch car_g24_connected +: 011319 car_le_send_packet: +0x3642 011320 fetch 2 ,mem_ui_state_map +0x3643 011321 rtnbit0 ui_state_ble_connected +0x3644 011322 call le_fifo_check_nearly_full +0x3645 011323 nrtn blank +0x3646 011324 arg mem_car_pop_queue_buff ,rega +0x3647 011325 call queue_pop +0x3648 011326 nrtn user +0x3649 011327 arg mem_car_pop_queue_buff ,contr +0x364a 011328 branch le_send_notify_from_list +: 011330 car_scale_process_bb_event: +0x364b 011331 copy regc ,pdata +0x364c 011332 beq bt_evt_button_up ,app_event_button_up +0x364d 011333 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x364e 011334 beq bt_evt_le_connected ,car_scale_event_le_conn +0x364f 011335 beq bt_evt_le_disconnected ,car_scale_event_le_discon +0x3650 011336 rtn +: 011338 car_scale_event_le_conn: +0x3651 011339 setarg disable_24g +0x3652 011340 call g24_store_mem_24g_mode +0x3653 011341 branch car_scale_process_conn +: 011342 car_g24_connected: +0x3654 011343 fetch 2 ,mem_car_24g_no_data_timeout_count +0x3655 011344 store 2 ,mem_car_24g_no_data_timeout_timer +: 011345 car_scale_process_conn: +0x3656 011346 jam 0x14 ,mem_car_notify_vdd_timer +0x3657 011347 jam 0 ,mem_lpm_mode +0x3658 011348 call app_ble_stop_adv +0x3659 011349 call app_lpm_mult_enable +0x365a 011350 fetch 1 ,mem_car_config_pairing_led_conn_status +0x365b 011351 beq 0x01 ,car_pairing_led_conn_status_setting +: 011352 car_scale_process_conn_next: +0x365c 011353 arg 0 ,rega +0x365d 011354 branch ui_led_on_global +: 011355 car_pairing_led_conn_status_setting: +0x365e 011356 arg 0 ,rega +0x365f 011357 branch ui_led_blink_stop_global +: 011359 car_scale_event_le_discon: +0x3660 011360 setarg rx_24g +0x3661 011361 call g24_store_mem_24g_mode +: 011362 car_g24_disconnect: +0x3662 011363 setarg 0 +0x3663 011364 store 5 ,mem_car_led_control +0x3664 011365 setarg 4 +0x3665 011366 call pwm_disable +0x3666 011367 setarg 5 +0x3667 011368 call pwm_disable +0x3668 011369 setarg 20 +0x3669 011370 call pwm_disable +0x366a 011371 setarg 21 +0x366b 011372 call pwm_disable +0x366c 011373 setarg 22 +0x366d 011374 call pwm_disable +0x366e 011375 setarg 7 +0x366f 011376 call pwm_disable +0x3670 011377 call queue_init +0x3671 011378 jam 10 ,mem_motor1_speed +0x3672 011379 jam 10 ,mem_motor2_speed +0x3673 011380 jam 10 ,mem_motor3_speed +0x3674 011382 jam 2 ,mem_lpm_mult +0x3675 011383 arg 0 ,rega +0x3676 011384 call ui_led_blink_start_global +0x3677 011386 setarg fast_adv_interval_value_car +0x3678 011387 call shutter_ble_adv_interval_set +0x3679 011388 branch app_ble_start_adv +: 011390 car_le_bb_event_timer: +0x367a 011392 call car_moto1_blank_data_timer +0x367b 011393 call car_moto2_blank_data_timer +0x367c 011394 call car_moto3_blank_data_timer +0x367d 011395 call app_power_timer +0x367e 011396 call car_led_control_timer +0x367f 011397 call car_notify_vdd_timer +0x3680 011398 call car_24g_no_data_timeout_timer +0x3681 011399 call car_ir_breakdown_timer +0x3682 011400 branch car_attack_shake_timer +: 011402 car_ir_breakdown_timer: +0x3683 011403 arg mem_car_ir_breakdown_check_timer ,regc +0x3684 011404 arg car_ir_breakdown_timeout ,regb +0x3685 011405 branch timer_single_step +: 011406 car_ir_breakdown_timeout: +0x3686 011407 call car_ir_gpio_get_status +0x3687 011408 nrtn true +0x3688 011409 jam 1 ,mem_car_ir_breakdown_flag +0x3689 011410 rtn +: 011412 car_24g_no_data_timeout_timer: +0x368a 011413 arg mem_car_24g_no_data_timeout_timer ,regc +0x368b 011414 arg car_24g_no_data_timer_timeout ,regb +0x368c 011415 branch timer_single_step_2b +: 011416 car_24g_no_data_timer_timeout: +0x368d 011417 jam work_search ,mem_car_24g_status +0x368e 011418 branch car_g24_disconnect +: 011420 car_attack_shake_timer: +0x368f 011421 arg mem_car_attack_shake_timer ,regc +0x3690 011422 arg car_attack_shake ,regb +0x3691 011423 branch timer_single_step +: 011424 car_attack_shake: +0x3692 011425 fetch 1 ,mem_car_attack_shake_flag +0x3693 011426 branch car_attack_shake_stop ,blank +0x3694 011427 jam 2 ,mem_car_attack_shake_timer +0x3695 011428 jam 0 ,mem_car_attack_shake_flag +0x3696 011429 setarg 0x0a02 +0x3697 011430 store 2 ,mem_le_receive_payload +0x3698 011431 fetch 1 ,mem_car_config_device_select +0x3699 011432 beq device_battle_tank ,car_attack_shake_front_battle_tank +: 011433 car_attack_shake_front_battle_car: +0x369a 011434 branch car_motor_control +: 011435 car_attack_shake_front_battle_tank: +0x369b 011436 setarg 0x0a02 +0x369c 011437 store 2 ,mem_le_receive_payload + 2 +0x369d 011438 branch car_motor_control +: 011439 car_attack_shake_stop: +0x369e 011440 setarg 0 +0x369f 011441 store 4 ,mem_le_receive_payload +0x36a0 011442 branch car_motor_control +: 011444 car_notify_vdd_timer: +0x36a1 011445 fetch 1 ,mem_car_config_bat_notify_enable +0x36a2 011446 rtn blank +0x36a3 011447 fetch 2 ,mem_ui_state_map +0x36a4 011448 bbit0 ui_state_ble_connected ,car_low_bat_led_off +0x36a5 011449 arg mem_car_notify_vdd_timer ,regc +0x36a6 011450 arg car_notify_vdd ,regb +0x36a7 011451 branch timer_single_step +: 011452 car_notify_vdd: +0x36a8 011453 fetch 1 ,mem_car_notify_vdd_count +0x36a9 011454 store 1 ,mem_car_notify_vdd_timer +0x36aa 011455 fetch 1 ,mem_car_working_flag +0x36ab 011456 nrtn blank +: 011457 car_read_hvin: +0x36ac 011458 call adc_set_mode +0x36ad 011459 call vdd_calculate_by_mode +0x36ae 011460 store 2 ,mem_vdd_now_vol +0x36af 011461 arg mem_vdd_calculate_set ,rega +0x36b0 011462 call adc_bat_percent_lowpower_out +0x36b1 011463 fetcht 1 ,mem_car_notify_vdd_value_last +0x36b2 011464 isub temp ,null +0x36b3 011465 branch car_notify_vdd_next2 ,positive +0x36b4 011466 store 1 ,mem_car_notify_vdd_value_last +0x36b5 011467 copy pdata ,temp +: 011468 car_notify_vdd_next2: +0x36b6 011469 storet 1 ,mem_car_notify_vdd_percent +0x36b7 011470 fetch 1 ,mem_car_config_low_voltage_percent +0x36b8 011471 isub temp ,null +0x36b9 011472 call car_enter_low_bat ,positive +0x36ba 011473 storet 1 ,mem_notify_bat_payload +0x36bb 011474 arg 6 ,loopcnt +0x36bc 011475 arg mem_notify_bat_head ,contr +0x36bd 011476 call calc_check_sum_start +0x36be 011477 store 1 ,mem_notify_bat_check_sum +0x36bf 011478 arg mem_notify_bat_packet ,rega +0x36c0 011479 branch queue_push +: 011480 car_enter_low_bat: +0x36c1 011481 fetch 1 ,mem_low_bat_flag +0x36c2 011482 nrtn blank +0x36c3 011483 jam 1 ,mem_low_bat_flag +0x36c4 011484 arg 1 ,rega +0x36c5 011485 branch ui_led_blink_start_global +: 011486 car_low_bat_led_off: +0x36c6 011487 arg 1 ,rega +0x36c7 011488 branch ui_led_blink_stop_global +: 011490 car_led_control_timer: +0x36c8 011491 arg mem_car_led_control_timer ,regc +0x36c9 011492 arg car_led_control ,regb +0x36ca 011493 branch timer_single_step +: 011494 car_led_control: +0x36cb 011495 jam 5 ,mem_car_led_control_timer +0x36cc 011496 jam 0 ,mem_car_led_no +0x36cd 011497 fetch 1 ,mem_car_led_blink_status +0x36ce 011498 beq led_on ,car_led_control_blink_off +0x36cf 011499 beq led_off ,car_led_control_blink_on +: 011500 car_led_control_set: +0x36d0 011501 arg mem_car_led_control ,contr +0x36d1 011502 copy contr ,rega +0x36d2 011503 arg 8 ,loopcnt +: 011504 car_led_control_timer_next: +0x36d3 011505 copy rega ,contr +0x36d4 011506 ifetch 1 ,contr +0x36d5 011507 copy contr ,rega +0x36d6 011508 beq led_off ,car_led_control_off +0x36d7 011509 beq led_on ,car_led_control_on +0x36d8 011510 beq led_blink ,car_led_control_blink +: 011511 car_led_control_timer_next_2: +0x36d9 011512 fetch 1 ,mem_car_led_no +0x36da 011513 increase 1 ,pdata +0x36db 011514 store 1 ,mem_car_led_no +0x36dc 011515 loop car_led_control_timer_next +0x36dd 011516 rtn +: 011517 car_led_switch: +0x36de 011518 fetch 1 ,mem_car_led_no +0x36df 011519 arg mem_car_config_blood_led_gpio ,regb +0x36e0 011520 iadd regb ,regb +0x36e1 011521 ifetcht 1 ,regb +0x36e2 011522 rtn +: 011523 car_led_control_off: +0x36e3 011524 call car_led_switch +0x36e4 011525 call gpio_out_inactive +0x36e5 011526 branch car_led_control_timer_next_2 +: 011527 car_led_control_on: +0x36e6 011528 call car_led_switch +0x36e7 011529 call gpio_out_active +0x36e8 011530 branch car_led_control_timer_next_2 +: 011531 car_led_control_blink: +0x36e9 011532 fetch 1 ,mem_car_led_blink_status +0x36ea 011533 beq led_on ,car_led_control_off +0x36eb 011534 branch car_led_control_on +: 011535 car_led_control_blink_on: +0x36ec 011536 jam led_on ,mem_car_led_blink_status +0x36ed 011537 branch car_led_control_set +: 011538 car_led_control_blink_off: +0x36ee 011539 jam led_off ,mem_car_led_blink_status +0x36ef 011540 branch car_led_control_set +: 011544 calc_check_sum_start: +0x36f0 011545 arg 0 ,rega +: 011546 calc_check_sum_loop: +0x36f1 011547 ifetch 1 ,contr +0x36f2 011548 iadd rega ,rega +0x36f3 011549 loop calc_check_sum_loop +: 011550 calc_check_sum_and: +0x36f4 011551 and rega ,0xff ,pdata +0x36f5 011552 rtn +: 011554 car_le_receive_data: +0x36f6 011555 fetch 1 ,mem_le_att_opcode +0x36f7 011556 beq attop_write_request ,car_le_parse_att_write_request +0x36f8 011557 rtn +: 011558 car_le_parse_att_write_request: +0x36f9 011559 fetch 2 ,mem_le_att_handle +0x36fa 011560 beq att_car_control_handle ,car_control_le_receive +0x36fb 011561 rtn +: 011573 le_app_receive_data: +0x36fc 011574 bpatch patch1a_0 ,mem_patch1a +0x36fd 011575 ifetch 5 ,rega +0x36fe 011576 store 5 ,mem_app_receive_temp +0x36ff 011577 fetch 2 ,mem_app_receive_temp +0x3700 011578 arg le_receive_packet_head ,temp +0x3701 011579 isub temp ,null +0x3702 011580 nrtn zero +0x3703 011581 fetch 2 ,mem_app_receive_temp + 3 +0x3704 011582 byteswap pdata ,pdata +0x3705 011583 store 2 ,mem_app_receive_temp + 3 +0x3706 011584 copy pdata ,loopcnt +0x3707 011585 increase 5 ,rega +0x3708 011586 copy rega ,contr +0x3709 011587 arg mem_app_receive_temp + 5 ,contw +0x370a 011588 call memcpy +0x370b 011589 ifetch 1 ,contr +0x370c 011590 store 1 ,mem_app_receive_temp + 15 +0x370d 011591 arg mem_app_receive_temp + 2 ,rega +0x370e 011592 arg mem_app_receive_temp + 5 ,regb +0x370f 011593 rtn +: 011595 car_control_le_receive: +0x3710 011596 setarg 0 +0x3711 011597 store 5 ,mem_le_receive_payload +0x3712 011598 store 5 ,mem_le_receive_payload + 5 +0x3713 011599 call le_app_receive_data +0x3714 011600 copy regb ,contr +0x3715 011601 arg mem_le_receive_payload ,contw +0x3716 011602 arg 10 ,loopcnt +0x3717 011603 call memcpy +: 011604 car_receive_cmd_select: +0x3718 011605 bpatch patch1a_1 ,mem_patch1a +0x3719 011606 ifetch 1 ,rega +0x371a 011607 beq car_cmd_old_car_control ,car_drive_old +0x371b 011608 beq car_cmd_old_speed_control ,car_speed_set_old +0x371c 011609 beq car_cmd_l_r_motor_control ,car_motor_control +0x371d 011610 beq car_cmd_f_b_motor_control ,car_motor_control +0x371e 011611 beq car_cmd_ir_control ,car_ir_data_rx_from_app +0x371f 011612 beq car_cmd_led_control ,car_led_control_receive +0x3720 011613 beq car_cmd_device_info ,car_info_request +0x3721 011614 rtn +: 011616 car_24g_receive_data: +0x3722 011617 fetch 2 ,mem_ui_state_map +0x3723 011618 rtnbit1 ui_state_ble_connected +0x3724 011620 fetch 2 ,mem_car_24g_no_data_timeout_count +0x3725 011621 store 2 ,mem_car_24g_no_data_timeout_timer +0x3726 011623 jam work_paired ,mem_car_24g_received_pac +0x3727 011625 setarg offset_24g_rxdata_temp_add3 +0x3728 011626 call g24_set_rega +0x3729 011627 call car_control_le_receive +0x372a 011629 fetch 1 ,mem_app_receive_temp + 2 +0x372b 011630 beq car_cmd_l_r_motor_control ,car_24g_receive_data_next +0x372c 011631 beq car_cmd_f_b_motor_control ,car_24g_receive_data_next +0x372d 011632 rtn +: 011633 car_24g_receive_data_next: +0x372e 011634 fetch 1 ,mem_le_receive_payload +0x372f 011635 ncall car_moto1_enable_blank_data_timer ,blank +0x3730 011636 fetch 1 ,mem_le_receive_payload + 2 +0x3731 011637 ncall car_moto2_enable_blank_data_timer ,blank +0x3732 011638 fetch 1 ,mem_le_receive_payload + 4 +0x3733 011639 ncall car_moto3_enable_blank_data_timer ,blank +0x3734 011640 rtn +: 011642 car_moto1_enable_blank_data_timer: +0x3735 011643 jam 5 ,mem_car_moto1_blank_timer +0x3736 011644 rtn +: 011645 car_moto2_enable_blank_data_timer: +0x3737 011646 jam 5 ,mem_car_moto2_blank_timer +0x3738 011647 rtn +: 011648 car_moto3_enable_blank_data_timer: +0x3739 011649 jam 5 ,mem_car_moto3_blank_timer +0x373a 011650 rtn +: 011652 car_moto1_blank_data_timer: +0x373b 011653 arg mem_car_moto1_blank_timer ,regc +0x373c 011654 arg car_moto1_blank_data ,regb +0x373d 011655 branch timer_single_step +: 011656 car_moto2_blank_data_timer: +0x373e 011657 arg mem_car_moto2_blank_timer ,regc +0x373f 011658 arg car_moto2_blank_data ,regb +0x3740 011659 branch timer_single_step +: 011660 car_moto3_blank_data_timer: +0x3741 011661 arg mem_car_moto3_blank_timer ,regc +0x3742 011662 arg car_moto3_blank_data ,regb +0x3743 011663 branch timer_single_step +: 011665 car_moto1_blank_data: +0x3744 011666 jam 0 ,mem_le_receive_payload +0x3745 011667 branch car_motor_control +: 011668 car_moto2_blank_data: +0x3746 011669 jam 0 ,mem_le_receive_payload + 2 +0x3747 011670 branch car_motor_control +: 011671 car_moto3_blank_data: +0x3748 011672 jam 0 ,mem_le_receive_payload + 4 +0x3749 011673 branch car_motor_control +: 011678 car_drive_old: +0x374a 011679 call car_left_right_control_old +0x374b 011680 branch car_front_back_control_old +: 011681 car_left_right_control_old: +0x374c 011682 fetch 1 ,mem_le_receive_payload +0x374d 011683 store 1 ,mem_motor2_status +0x374e 011684 branch car_motor2_control +: 011685 car_front_back_control_old: +0x374f 011686 fetch 1 ,mem_motor1_speed +0x3750 011687 call car_reset_old_speed +0x3751 011688 fetch 1 ,mem_le_receive_payload + 1 +0x3752 011689 store 1 ,mem_motor1_status +0x3753 011690 branch car_motor1_control +: 011691 car_reset_old_speed: +0x3754 011692 beq speed_level_2 ,car_reset_old_speed2 +0x3755 011693 beq speed_level_3 ,car_reset_old_speed3 +0x3756 011694 store 1 ,mem_motor1_speed +0x3757 011695 rtn +: 011696 car_reset_old_speed2: +0x3758 011697 jam speed_level_5 ,mem_motor1_speed +0x3759 011698 rtn +: 011699 car_reset_old_speed3: +0x375a 011700 jam speed_level_10 ,mem_motor1_speed +0x375b 011701 rtn +: 011702 car_speed_set_old: +0x375c 011703 fetch 1 ,mem_le_receive_payload +0x375d 011704 call car_reset_old_speed +0x375e 011705 fetch 1 ,mem_motor1_speed +0x375f 011706 call car_motor_speed_duty_setting +0x3760 011707 call car_motor_speed_duty_transform +0x3761 011708 branch pwm_pwm0_duty_set +: 011710 car_motor_control: +0x3762 011711 fetch 1 ,mem_car_24g_go_die_flag +0x3763 011712 nrtn blank +0x3764 011713 fetch 6 ,mem_le_receive_payload +0x3765 011714 store 6 ,mem_motor1_status +0x3766 011715 fetch 1 ,mem_motor1_speed +0x3767 011716 fetcht 1 ,mem_motor2_speed +0x3768 011717 iand temp ,pdata +0x3769 011718 fetcht 1 ,mem_motor3_speed +0x376a 011719 iand temp ,pdata +0x376b 011720 call car_motor_working_flag ,blank +0x376c 011721 bpatch patch1a_2 ,mem_patch1a +0x376d 011722 call car_motor1_control +0x376e 011723 call car_motor2_control +0x376f 011724 branch car_motor3_control +: 011725 car_motor1_control: +0x3770 011726 arg mem_motor1_pwm_set ,regb +0x3771 011727 arg mem_motor1_status ,contr +0x3772 011728 branch car_motor_status_select +: 011729 car_motor2_control: +0x3773 011730 arg mem_motor2_pwm_set ,regb +0x3774 011731 arg mem_motor2_status ,contr +0x3775 011732 branch car_motor_status_select +: 011733 car_motor3_control: +0x3776 011734 arg mem_motor3_pwm_set ,regb +0x3777 011735 arg mem_motor3_status ,contr +0x3778 011736 branch car_motor_status_select +: 011737 car_motor_working_flag: +0x3779 011738 jam 0 ,mem_car_working_flag +0x377a 011739 rtn +: 011741 car_motor_status_select: +0x377b 011742 ifetch 1 ,contr +0x377c 011743 beq motor_stop ,car_motor_stop +0x377d 011744 beq go_front ,car_motor_positive +0x377e 011745 beq go_back ,car_motor_negative +0x377f 011746 rtn +: 011747 car_motor_positive: +0x3780 011748 jam 0 ,mem_motor_select_p_n +0x3781 011749 branch car_motor_negative + 1 +: 011750 car_motor_negative: +0x3782 011751 jam 1 ,mem_motor_select_p_n +0x3783 011752 ifetch 1 ,contr +0x3784 011753 store 1 ,mem_car_motor_speed +0x3785 011754 ifetch 8 ,regb +0x3786 011755 branch car_motor_work +: 011757 car_motor_stop: +0x3787 011758 ifetch 1 ,regb +0x3788 011759 call pwm_disable +0x3789 011760 increase 1 ,regb +0x378a 011761 ifetch 1 ,regb +0x378b 011762 branch pwm_disable +: 011763 car_motor_work: +0x378c 011764 store 8 ,mem_motor_pwm_pin1_set +0x378d 011765 jam 1 ,mem_car_working_flag +0x378e 011766 fetch 1 ,mem_motor_select_p_n +0x378f 011767 beq 0 ,car_motor_select_positive +: 011768 car_motor_select_negative: +0x3790 011769 fetch 1 ,mem_motor_pwm_pin2_set +0x3791 011770 store 1 ,mem_motor_pwm_pin_set +0x3792 011771 fetch 1 ,mem_motor_pwm_pin1_set +: 011772 car_motor_work_next: +0x3793 011773 call pwm_disable +0x3794 011774 fetch 1 ,mem_car_motor_speed +0x3795 011775 call car_motor_speed_duty_setting +0x3796 011776 store 1 ,mem_motor_pwm_dute_set +0x3797 011777 fetch 6 ,mem_motor_pwm_pin_set +0x3798 011778 store 6 ,mem_pdatatemp +0x3799 011779 branch pwm_out_set +: 011780 car_motor_select_positive: +0x379a 011781 fetch 1 ,mem_motor_pwm_pin1_set +0x379b 011782 store 1 ,mem_motor_pwm_pin_set +0x379c 011783 fetch 1 ,mem_motor_pwm_pin2_set +0x379d 011784 branch car_motor_work_next +: 011786 car_motor_speed_duty_setting: +0x379e 011787 mul32 pdata ,5 ,pdata +0x379f 011788 add pdata ,50 ,pdata +0x37a0 011789 rtn +: 011790 car_motor_speed_duty_transform: +0x37a1 011791 arg 12000 ,temp +0x37a2 011792 imul32 temp ,pdata +0x37a3 011793 div pdata ,100 +0x37a4 011794 call wait_div_end +0x37a5 011795 quotient temp +0x37a6 011796 copy temp ,rega +0x37a7 011797 setarg 12000 +0x37a8 011798 isub temp ,regb +0x37a9 011799 rtn +: 011802 car_ir_init: +0x37aa 011803 hfetch 1 ,core_gpio_sel2 +0x37ab 011804 set1 2 ,pdata +0x37ac 011805 hstore 1 ,core_gpio_sel2 +0x37ad 011806 setarg 158 +0x37ae 011807 hstore 2 ,core_pwm_pcnt4 +0x37af 011808 hstore 2 ,core_pwm_ncnt4 +0x37b0 011809 rtn +: 011811 car_ir_data_rx_from_app: +0x37b1 011812 fetch 1 ,mem_car_24g_go_die_flag +0x37b2 011813 nrtn blank +0x37b3 011814 fetch 2 ,mem_le_receive_payload +0x37b4 011815 store 2 ,mem_ir_data +0x37b5 011816 fetch 1 ,mem_car_24g_status +0x37b6 011817 bne work_paired ,car_ir_data_tx +0x37b7 011818 fetch 2 ,mem_le_lap +0x37b8 011819 store 2 ,mem_ir_data +: 011820 car_ir_data_tx: +0x37b9 011821 bpatch patch1a_3 ,mem_patch1a +0x37ba 011822 call car_ir_init +0x37bb 011823 call car_ir_enable +0x37bc 011824 setarg 48000 +0x37bd 011825 call sleep +0x37be 011826 call car_ir_disable +0x37bf 011827 setarg 7200 +0x37c0 011828 call sleep +0x37c1 011829 arg 16 ,loopcnt +: 011830 car_ir_send_loop: +0x37c2 011831 call car_ir_enable +0x37c3 011832 fetch 2 ,mem_ir_data +0x37c4 011833 bbit1 0 ,car_ir_is_bit1 +0x37c5 011834 setarg 7200 +0x37c6 011835 call sleep +0x37c7 011836 call car_ir_disable +0x37c8 011837 branch car_ir_wait_finish +: 011839 car_ir_is_bit1: +0x37c9 011840 setarg 14400 +0x37ca 011841 call sleep +0x37cb 011842 call car_ir_disable +: 011843 car_ir_wait_finish: +0x37cc 011844 setarg 7200 +0x37cd 011845 call sleep +0x37ce 011846 fetch 2 ,mem_ir_data +0x37cf 011847 rshift pdata ,pdata +0x37d0 011848 store 2 ,mem_ir_data +0x37d1 011849 loop car_ir_send_loop +0x37d2 011851 jam 2 ,mem_car_attack_shake_timer +0x37d3 011852 jam 1 ,mem_car_attack_shake_flag +0x37d4 011853 setarg 0x0a01 +0x37d5 011854 store 2 ,mem_le_receive_payload +0x37d6 011855 fetch 1 ,mem_car_config_device_select +0x37d7 011856 beq device_battle_tank ,car_attack_shake_back_battle_tank +: 011857 car_attack_shake_back_battle_car: +0x37d8 011858 branch car_motor_control +: 011859 car_attack_shake_back_battle_tank: +0x37d9 011860 setarg 0x0a01 +0x37da 011861 store 2 ,mem_le_receive_payload + 2 +0x37db 011862 branch car_motor_control +: 011864 car_ir_enable: +0x37dc 011865 hfetch 1 ,core_gpio_key2 +0x37dd 011866 or_into 0x40 ,pdata +0x37de 011867 hstore 1 ,core_gpio_key2 +0x37df 011868 rtn +: 011869 car_ir_disable: +0x37e0 011870 hfetch 1 ,core_gpio_key2 +0x37e1 011871 and_into 0xbf ,pdata +0x37e2 011872 hstore 1 ,core_gpio_key2 +0x37e3 011873 rtn +: 011875 car_ir_rx_init: +0x37e4 011876 fetch 1 ,mem_car_config_ir_enable +0x37e5 011877 rtneq 0x00 +0x37e6 011878 call lpm_disable_exen_output +0x37e7 011879 fetcht 1 ,mem_car_config_ir_rx_gpio +0x37e8 011880 storet 1 ,mem_ir_rx_gpio +0x37e9 011881 call gpio_config_input +0x37ea 011882 call car_ir_gpio_get_status +0x37eb 011883 nrtn true +0x37ec 011884 jam 1 ,mem_car_ir_breakdown_check_timer +0x37ed 011885 rtn +: 011887 car_ir_receive_process: +0x37ee 011888 fetch 1 ,mem_car_config_ir_enable +0x37ef 011889 rtneq flag_ir_disable +0x37f0 011890 fetch 1 ,mem_car_ir_breakdown_flag +0x37f1 011891 nrtn blank +0x37f2 011892 fetch 2 ,mem_ui_state_map +0x37f3 011893 bbit1 ui_state_ble_connected ,car_ir_receive_process_next +0x37f4 011894 fetch 1 ,mem_car_24g_status +0x37f5 011895 rtnne work_paired +: 011896 car_ir_receive_process_next: +0x37f6 011897 bpatch patch1a_4 ,mem_patch1a +0x37f7 011898 call car_ir_gpio_get_status +0x37f8 011899 nrtn true +0x37f9 011900 setarg 36000 +0x37fa 011901 call sleep +0x37fb 011902 call car_ir_gpio_get_status +0x37fc 011903 nrtn true +0x37fd 011904 call car_ir_clk_get +: 011905 car_ir_packet_head_wait_end: +0x37fe 011906 call car_ir_clk_check +0x37ff 011907 nrtn positive +0x3800 011908 call car_ir_gpio_get_status +0x3801 011909 branch car_ir_packet_head_wait_end ,true +0x3802 011910 arg 0 ,rega +0x3803 011911 arg 16 ,loopcnt +0x3804 011912 call car_ir_clk_get +: 011913 car_ir_receive_process_loop: +0x3805 011914 call car_ir_clk_check +0x3806 011915 nrtn positive +0x3807 011916 call car_ir_gpio_get_status +0x3808 011917 nbranch car_ir_receive_process_loop ,true +0x3809 011918 setarg 10800 +0x380a 011919 call sleep +0x380b 011920 call car_ir_gpio_get_status +0x380c 011921 branch car_ir_get_bit1 ,true +: 011922 car_ir_get_bit0: +0x380d 011923 setarg 0 +0x380e 011924 rshift rega ,rega +0x380f 011925 ior rega ,rega +0x3810 011926 loop car_ir_receive_process_loop +0x3811 011927 branch car_ir_receive_process_end +: 011928 car_ir_get_bit1: +0x3812 011929 setarg 0x8000 +0x3813 011930 rshift rega ,rega +0x3814 011931 ior rega ,rega +0x3815 011932 call car_ir_clk_get +: 011933 car_ir_get_bit1_wait_low_end: +0x3816 011934 call car_ir_clk_check +0x3817 011935 nrtn positive +0x3818 011936 call car_ir_gpio_get_status +0x3819 011937 branch car_ir_get_bit1_wait_low_end ,true +0x381a 011938 loop car_ir_receive_process_loop +: 011939 car_ir_receive_process_end: +0x381b 011940 bpatch patch1a_5 ,mem_patch1a +0x381c 011941 copy rega ,pdata +0x381d 011942 store 2 ,mem_ir_rx_buf +0x381e 011943 store 2 ,mem_ir_notify_data + 8 +0x381f 011944 fetch 1 ,mem_car_24g_status +0x3820 011945 beq work_paired ,car_ir_24g_receive_attack +: 011946 car_ir_data_notify: +0x3821 011947 arg 0x07 ,loopcnt +0x3822 011948 arg mem_ir_notify_data_head ,contr +0x3823 011949 call calc_check_sum_start +0x3824 011950 store 1 ,mem_ir_notify_data_check_sum +0x3825 011951 arg mem_ir_notify_data ,rega +0x3826 011952 branch queue_push +: 011954 car_ir_24g_receive_attack: +0x3827 011955 fetch 1 ,mem_car_24g_ir_receive_attack_count +0x3828 011956 increase 1 ,pdata +0x3829 011957 store 1 ,mem_car_24g_ir_receive_attack_count +0x382a 011958 div pdata ,2 +0x382b 011959 call wait_div_end +0x382c 011960 quotient temp +0x382d 011961 remainder pdata +0x382e 011962 nbranch car_ir_24g_receive_attack_blink ,blank +: 011963 car_ir_24g_receive_attack_off: +0x382f 011964 fetch 1 ,mem_car_config_led_num +0x3830 011965 isub temp ,null +0x3831 011966 call car_ir_24g_go_die ,zero +0x3832 011967 arg mem_car_led_control ,pdata +0x3833 011968 increase -1 ,temp +0x3834 011969 iadd temp ,rega +0x3835 011970 arg 0 ,pdata +0x3836 011971 istore 1 ,rega +0x3837 011972 rtn +: 011973 car_ir_24g_receive_attack_blink: +0x3838 011974 arg mem_car_led_control ,pdata +0x3839 011975 iadd temp ,rega +0x383a 011976 arg 2 ,pdata +0x383b 011977 istore 1 ,rega +0x383c 011978 rtn +: 011979 car_ir_24g_go_die: +0x383d 011980 jam 1 ,mem_car_24g_go_die_flag +0x383e 011981 rtn +: 011982 car_ir_clk_get: +0x383f 011983 copy clkn_bt ,pdata +0x3840 011984 store 4 ,mem_ir_receive_clkn +0x3841 011985 rtn +: 011986 car_ir_clk_check: +0x3842 011987 copy clkn_bt ,pdata +0x3843 011988 fetcht 4 ,mem_ir_receive_clkn +0x3844 011989 isub temp ,pdata +0x3845 011990 sub pdata ,200 ,null +0x3846 011991 rtn +: 011993 car_ir_gpio_get_status: +0x3847 011994 fetcht 1 ,mem_ir_rx_gpio +0x3848 011995 branch gpio_get_bit +: 011997 car_led_control_receive: +0x3849 011998 fetch 8 ,mem_le_receive_payload +0x384a 011999 store 8 ,mem_car_led_control +0x384b 012000 rtn +: 012002 car_info_request: +0x384c 012003 fetch 1 ,mem_car_config_device_select +0x384d 012004 store 1 ,mem_car_info_request_payload +0x384e 012005 fetch 1 ,mem_car_config_motor_layout +0x384f 012006 store 1 ,mem_car_info_request_payload + 1 +0x3850 012007 fetch 1 ,mem_car_config_ir_enable +0x3851 012008 store 1 ,mem_car_info_request_payload + 2 +0x3852 012009 arg 13 ,loopcnt +0x3853 012010 arg mem_car_info_request_head ,contr +0x3854 012011 call calc_check_sum_start +0x3855 012012 store 1 ,mem_car_info_request_checksum +0x3856 012013 arg mem_car_info_request ,rega +0x3857 012014 branch queue_push +: 012020 light_init: +0x3858 012021 call clear_eeprom_size_2k +0x3859 012022 jam 0x7a ,mem_curr_packet_num +0x385a 012023 call light_load_controler_list +0x385b 012024 call light_init_crr_cmd_count +0x385c 012025 setarg light_pairing_timer +0x385d 012026 store 2 ,mem_cb_event_timer +0x385e 012027 arg 0 ,rega +0x385f 012028 branch pwm_init +: 012030 light_pairing_timer: +0x3860 012031 fetch 2 ,mem_light_pairing_timer +0x3861 012032 rtn blank +0x3862 012033 increase -1 ,pdata +0x3863 012034 store 2 ,mem_light_pairing_timer +0x3864 012035 rtnne 0 +0x3865 012036 jam 0 ,mem_light_pairing_enable +0x3866 012037 rtn +: 012039 light_init_crr_cmd_count: +0x3867 012040 bpatch patch1a_6 ,mem_patch1a +0x3868 012041 fetch 1 ,mem_light_next_record +0x3869 012042 sub pdata ,40 ,null +0x386a 012043 rtn positive +0x386b 012044 jam 0 ,mem_light_next_record +0x386c 012045 rtn +: 012047 light_load_controler_list: +0x386d 012048 arg mem_light_next_record ,rega +0x386e 012049 arg 0 ,regb +0x386f 012050 arg 81 ,temp +0x3870 012051 branch iicd_read_eep_data +: 012054 light_find_controler_pairing: +0x3871 012055 disable user +0x3872 012056 fetch 1 ,mem_light_cnum +0x3873 012057 copy pdata ,loopcnt +0x3874 012059 arg mem_light_clist ,rega +0x3875 012060 copy regc ,regb +: 012061 light_find_controler_pairing_loop: +0x3876 012062 bpatch patch1a_7 ,mem_patch1a +0x3877 012063 call light_compare_addr_record +0x3878 012064 branch enable_user ,zero +: 012065 light_find_single_pairing_diff: +0x3879 012066 increase 4 ,rega +0x387a 012067 loop light_find_controler_pairing_loop +0x387b 012068 rtn +: 012071 light_compare_addr_record: +0x387c 012072 bpatch patch1b_0 ,mem_patch1b +0x387d 012073 ifetch 3 ,rega +0x387e 012074 ifetcht 3 ,regb +0x387f 012075 isub temp ,null +0x3880 012076 rtn +: 012078 light_compare_single_record: +0x3881 012079 bpatch patch1b_1 ,mem_patch1b +0x3882 012080 ifetch 3 ,rega +0x3883 012081 ifetcht 3 ,regb +0x3884 012082 isub temp ,null +0x3885 012083 nrtn zero +0x3886 012084 ifetch 1 ,contr +0x3887 012085 sub pdata ,0 ,null +0x3888 012086 rtn zero +0x3889 012087 add rega ,3 ,contr +0x388a 012088 ifetcht 1 ,contr +0x388b 012089 isub temp ,null +0x388c 012090 rtn +: 012093 light_find_controler_cmd: +0x388d 012094 bpatch patch1b_2 ,mem_patch1b +0x388e 012095 disable user +0x388f 012096 fetch 1 ,mem_light_cnum +0x3890 012097 copy pdata ,loopcnt +0x3891 012099 arg mem_light_clist ,rega +0x3892 012100 copy regc ,regb +: 012101 light_find_controler_cmd_loop: +0x3893 012102 call light_compare_single_record +0x3894 012103 branch enable_user ,zero +0x3895 012104 increase 4 ,rega +0x3896 012105 loop light_find_controler_cmd_loop +0x3897 012106 rtn +: 012109 light_recv_adv: +0x3898 012110 fetch 1 ,mem_le_scanrsp_rcv +0x3899 012111 increase 1 ,pdata +0x389a 012112 store 1 ,mem_le_scanrsp_rcv +0x389b 012113 arg mem_le_rxbuf + 12 ,regc +: 012115 light_anylize_command: +0x389c 012116 ifetch 2 ,regc +0x389d 012117 arg 0x55aa ,temp +0x389e 012118 isub temp ,null +0x389f 012119 nrtn zero +0x38a0 012120 copy contr ,regc +0x38a1 012121 ifetcht 3 ,regc +0x38a2 012122 setarg 0xffffff +0x38a3 012123 isub temp ,null +0x38a4 012124 branch light_parse_cmd ,zero +0x38a5 012125 call light_find_controler_cmd +0x38a6 012126 branch light_parse_cmd ,user +0x38a7 012127 rtn +: 012129 light_parse_cmd: +0x38a8 012130 bpatch patch1b_3 ,mem_patch1b +0x38a9 012131 increase 4 ,regc +0x38aa 012132 ifetch 1 ,regc +0x38ab 012133 fetcht 1 ,mem_curr_packet_num +0x38ac 012134 isub temp ,null +0x38ad 012135 rtn zero +0x38ae 012136 store 1 ,mem_curr_packet_num +0x38af 012137 fetch 1 ,mem_le_req_rcv +0x38b0 012138 increase 1 ,pdata +0x38b1 012139 store 1 ,mem_le_req_rcv +0x38b2 012141 increase 1 ,regc +0x38b3 012142 ifetch 1 ,regc +0x38b4 012143 store 1 ,mem_light_crr_cmd_count +0x38b5 012144 copy pdata ,loopcnt +0x38b6 012145 rtn blank +: 012146 light_parse_cmd_loop: +0x38b7 012147 ifetch 1 ,contr +0x38b8 012148 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 +0x38b9 012149 beq light_cmd_pwm1 ,light_parse_cmd_pwm1 +0x38ba 012150 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 +0x38bb 012151 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 +0x38bc 012152 beq light_cmd_pwm4 ,light_parse_cmd_pwm4 +0x38bd 012153 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 +0x38be 012154 beq light_cmd_auto_mode ,light_parse_auto_mode +0x38bf 012155 beq light_cmd_pairing ,light_parse_pairing +0x38c0 012156 loop light_parse_cmd_loop +0x38c1 012157 rtn +: 012159 light_parse_cmd_pwm0: +0x38c2 012160 copy contr ,regc +0x38c3 012161 fetch 1 ,mem_light_pwm0 +0x38c4 012162 store 1 ,mem_pdatatemp +0x38c5 012163 arg 0 ,temp +: 012164 light_parse_cmd_pwm_common: +0x38c6 012165 storet 1 ,mem_pdatatemp + 1 +0x38c7 012166 setarg 10000 +0x38c8 012167 store 3 ,mem_pdatatemp + 2 +0x38c9 012168 ifetch 1 ,regc +0x38ca 012169 store 1 ,mem_pdatatemp + 5 +0x38cb 012170 call pwm_out_set +0x38cc 012171 and regc ,1 ,contr +0x38cd 012172 loop light_parse_cmd_loop +0x38ce 012173 rtn +: 012174 light_parse_cmd_pwm1: +0x38cf 012175 copy regc ,contr +0x38d0 012176 fetch 1 ,mem_light_pwm1 +0x38d1 012177 store 1 ,mem_pdatatemp +0x38d2 012178 arg 1 ,temp +0x38d3 012179 branch light_parse_cmd_pwm_common +: 012180 light_parse_cmd_pwm2: +0x38d4 012181 copy regc ,contr +0x38d5 012182 fetch 1 ,mem_light_pwm2 +0x38d6 012183 store 1 ,mem_pdatatemp +0x38d7 012184 arg 2 ,temp +0x38d8 012185 branch light_parse_cmd_pwm_common +: 012186 light_parse_cmd_pwm3: +0x38d9 012187 copy regc ,contr +0x38da 012188 fetch 1 ,mem_light_pwm3 +0x38db 012189 store 1 ,mem_pdatatemp +0x38dc 012190 arg 3 ,temp +0x38dd 012191 branch light_parse_cmd_pwm_common +: 012192 light_parse_cmd_pwm4: +0x38de 012193 copy regc ,contr +0x38df 012194 fetch 1 ,mem_light_pwm4 +0x38e0 012195 store 1 ,mem_pdatatemp +0x38e1 012196 arg 4 ,temp +0x38e2 012197 branch light_parse_cmd_pwm_common +: 012198 light_parse_cmd_pwm5: +0x38e3 012199 copy regc ,contr +0x38e4 012200 fetch 1 ,mem_light_pwm5 +0x38e5 012201 store 1 ,mem_pdatatemp +0x38e6 012202 arg 5 ,temp +0x38e7 012203 branch light_parse_cmd_pwm_common +: 012205 light_parse_auto_mode: +0x38e8 012206 ifetch 1 ,contr +0x38e9 012207 rtn +: 012209 light_parse_pairing: +0x38ea 012210 copy contr ,regc +0x38eb 012211 fetch 1 ,mem_light_pairing_enable +0x38ec 012212 bne 1 ,light_parse_pairing_abandon +0x38ed 012213 call update_controler_list +: 012214 light_parse_pairing_abandon: +0x38ee 012215 and regc ,4 ,contr +0x38ef 012216 rtn +: 012217 update_controler_list: +0x38f0 012218 bpatch patch1b_4 ,mem_patch1b +0x38f1 012219 call light_find_controler_pairing +0x38f2 012220 branch update_conrtoler_list_found ,user +0x38f3 012221 fetch 1 ,mem_light_next_record +0x38f4 012222 copy pdata ,temp +0x38f5 012223 increase 1 ,pdata +0x38f6 012224 store 1 ,mem_light_next_record +0x38f7 012225 call light_init_crr_cmd_count +0x38f8 012226 lshift2 temp ,temp +0x38f9 012227 setarg mem_light_clist +0x38fa 012228 iadd temp ,contw +0x38fb 012229 ifetch 4 ,regc +0x38fc 012230 istore 4 ,contw +0x38fd 012231 branch update_conrtoler_store_list +: 012232 update_conrtoler_list_found: +0x38fe 012233 add regc ,3 ,contr +0x38ff 012234 ifetch 1 ,contr +0x3900 012235 rtn blank +0x3901 012236 ifetch 4 ,regc +0x3902 012237 istore 4 ,rega +: 012238 update_conrtoler_store_list: +0x3903 012239 arg mem_light_next_record ,rega +0x3904 012240 arg 0 ,regb +0x3905 012241 arg 81 ,temp +0x3906 012242 branch iicd_write_eep_data +: 012246 lightc_init: +0x3907 012250 fetcht 1 ,mem_lightc_led_gpio +0x3908 012251 call gpio_out_inactive +0x3909 012252 rtn +: 012255 lightc_dispatch: +0x390a 012258 fetcht 1 ,mem_lightc_led_gpio +0x390b 012259 call gpio_out_active +0x390c 012262 fetcht 1 ,mem_lightc_led_gpio +0x390d 012263 call gpio_out_inactive +0x390e 012266 call lightc_start_adv +0x390f 012268 fetch 1 ,mem_adv_time +0x3910 012269 nrtn blank +0x3911 012271 call lpm_write_gpio_wakeup +0x3912 012272 hfetch 4 ,core_lpm_ctrl +0x3913 012273 set0 15 ,pdata +0x3914 012274 hstore 4 ,core_lpm_reg +0x3915 012275 call lpm_write_ctrl +0x3916 012276 arg param_hibernate_clks ,temp +0x3917 012277 branch lpm_sleep +: 012279 lightc_adv: +0x3918 012280 fetch 1 ,mem_adv_time +0x3919 012281 branch le_adv_loop_tx ,blank +0x391a 012282 increase -1 ,pdata +0x391b 012283 store 1 ,mem_adv_time +0x391c 012284 branch le_adv_loop_tx +: 012286 lightc_start_adv: +0x391d 012287 mul32 pdata ,20 ,pdata +0x391e 012288 arg mem_cmd0_string ,contr +0x391f 012289 iadd contr ,contr +0x3920 012290 ifetch 1 ,contr +0x3921 012291 rtn blank +0x3922 012292 copy pdata ,rega +0x3923 012293 copy rega ,loopcnt +0x3924 012294 arg mem_le_adv_data + 2 ,contw +0x3925 012295 call memcpy +0x3926 012296 copy rega ,pdata +0x3927 012297 increase 2 ,pdata +0x3928 012298 store 1 ,mem_le_adv_data_len +0x3929 012299 rtn +: 012306 module_init: +0x392a 012308 rtn wake +0x392b 012309 call le_modified_name +0x392c 012310 call adc_init_data +0x392d 012311 setarg module_process_idle +0x392e 012312 store 2 ,mem_cb_idle_process +0x392f 012313 setarg module_bt_conn_process +0x3930 012314 store 2 ,mem_cb_bt_process +0x3931 012315 setarg module_process_bb_event +0x3932 012316 store 2 ,mem_cb_bb_event_process +0x3933 012317 setarg module_le_conn_process +0x3934 012318 store 2 ,mem_cb_le_process +0x3935 012319 setarg module_lpm_lock +0x3936 012320 store 2 ,mem_cb_check_wakelock +0x3937 012321 setarg module_hci_cmd_transmit_le_notify +0x3938 012322 store 2 ,mem_cb_ble_transmit +0x3939 012323 setarg module_hci_event_receive_spp_data +0x393a 012324 store 2 ,mem_cb_receive_spp_data +0x393b 012325 setarg module_le_receive_data +0x393c 012326 store 2 ,mem_cb_att_write +0x393d 012327 setarg module_bb_event_timer +0x393e 012328 store 2 ,mem_cb_event_timer +0x393f 012330 call module_spp_clear_last_transmite_clock +0x3940 012331 bpatch patch1b_5 ,mem_patch1b +0x3941 012332 call module_lpm_uart_init +0x3942 012333 call module_gpio_init +0x3943 012334 call check_module_disabled +0x3944 012335 branch module_hci_event_enter_standby_mode +: 012338 module_lpm_uart_init: +0x3945 012339 fetch 4 ,mem_module_uart_rx_buffer +0x3946 012340 hstore 4 ,core_uart_rsaddr +0x3947 012342 fetch 4 ,mem_module_uart_tx_buffer +0x3948 012343 hstore 4 ,core_uart_tsaddr +0x3949 012345 hfetch 1 ,core_gpio_sel1 +0x394a 012346 or_into 0x04 ,pdata +0x394b 012347 and_into 0xfc ,pdata +0x394c 012348 hstore 1 ,core_gpio_sel1 +0x394d 012349 jam 0x00 ,core_uart_ctrl +0x394e 012351 fetch 2 ,mem_module_uart_rx_buffer +0x394f 012352 hstore 2 ,core_uart_rrptr +0x3950 012353 fetch 2 ,mem_module_uart_tx_buffer +0x3951 012354 hstore 2 ,core_uart_twptr +0x3952 012355 hstore 2 ,core_uart_trptrp +0x3953 012357 hfetch 4 ,core_gpio_pu0 +0x3954 012358 set1 7 ,pdata +0x3955 012359 hstore 4 ,core_gpio_pu0 +0x3956 012361 hfetch 2 ,core_clkoff +0x3957 012362 set0 clock_off_uart ,pdata +0x3958 012363 hstore 2 ,core_clkoff +0x3959 012364 call uart_set_baud_by_mem +0x395a 012365 jam uartclk_crystal ,core_uart_clksel +0x395b 012366 jam uart_ctrl_h4 ,core_uart_ctrl +0x395c 012368 fetch 1 ,mem_module_flag +0x395d 012369 isolate1 module_flag_uart_flow_control ,pdata +0x395e 012370 hfetcht 1 ,core_uart_ctrl +0x395f 012371 setflag true ,4 ,temp +0x3960 012372 hstoret 1 ,core_uart_ctrl +0x3961 012373 rtn +: 012377 module_lpm_init: +0x3962 012378 call module_spp_clear_last_transmite_clock +0x3963 012379 branch module_lpm_uart_init +: 012382 module_gpio_init: +0x3964 012387 fetcht 1 ,mem_module_connect_state_gpio +0x3965 012388 call gpio_config_output +0x3966 012389 call module_set_conn_pin_low +0x3967 012391 fetcht 1 ,mem_module_wake_up_gpio +0x3968 012392 branch gpio_config_input +: 012394 module_lpm_lock: +0x3969 012395 fetcht 1 ,mem_module_wake_up_gpio +0x396a 012396 call gpio_get_bit +0x396b 012397 nbranch app_put_lpm_wake_lock ,true +0x396c 012398 branch app_get_lpm_wake_lock +: 012401 module_le_conn_process: +0x396d 012402 rtn +: 012404 module_bt_conn_process: +0x396e 012405 call module_spp_enter_sniff +0x396f 012406 branch module_control_air_flow +: 012408 module_spp_enter_sniff: +0x3970 012409 fetch 1 ,mem_ui_state_map +0x3971 012410 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock +0x3972 012411 bpatch patch1b_6 ,mem_patch1b +0x3973 012412 setarg 0x3eff +0x3974 012413 fetcht 4 ,mem_last_transmite_clock +0x3975 012414 iadd temp ,temp +0x3976 012415 copy clkn_bt ,pdata +0x3977 012416 isub temp ,null +0x3978 012417 nrtn positive +0x3979 012418 fetch 2 ,mem_ui_state_map +0x397a 012419 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock +0x397b 012420 fetch 1 ,mem_module_flag +0x397c 012421 rtnbit1 moudle_task_sniff +0x397d 012422 call module_set_sniff_task_flag +0x397e 012423 call app_bt_enter_sniff +: 012424 module_spp_clear_last_transmite_clock: +0x397f 012425 copy clkn_bt ,pdata +0x3980 012426 store 4 ,mem_last_transmite_clock +0x3981 012427 rtn +: 012430 module_process_idle: +0x3982 012431 call module_control_air_flow +0x3983 012432 call l2cap_malloc_is_fifo_full +0x3984 012433 nrtn blank +0x3985 012434 branch module_process +: 012437 module_process_bb_event: +0x3986 012438 copy regc ,pdata +0x3987 012439 beq bt_evt_bb_connected ,module_process_bb_conn +0x3988 012440 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned +0x3989 012441 beq bt_evt_reconn_failed ,module_process_reconn_fail +0x398a 012442 beq bt_evt_setup_complete ,module_process_setup_complete +0x398b 012443 beq bt_evt_spp_connected ,module_process_spp_connected +0x398c 012444 beq bt_evt_spp_disconnected ,module_process_spp_disconnected +0x398d 012445 beq bt_evt_pincode_req ,module_process_evt_pincode_req +0x398e 012446 beq bt_evt_enter_sniff ,module_process_enter_sniff +0x398f 012447 beq bt_evt_exit_sniff ,module_process_exit_sniff +0x3990 012448 beq bt_evt_reconn_page_timeout ,module_process_page_time_out +0x3991 012449 beq bt_evt_le_connected ,module_process_le_conn +0x3992 012450 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn +0x3993 012451 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept +0x3994 012452 beq bt_evt_unsniff_accept ,module_process_unsniff_accept +0x3995 012453 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept +0x3996 012454 beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail +0x3997 012455 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success +0x3998 012456 beq bt_evt_le_start_enc ,module_hci_event_start_enc +0x3999 012457 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc +0x399a 012458 beq bt_evt_le_tk_generate ,module_hci_event_le_tk +0x399b 012459 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate +0x399c 012460 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode +0x399d 012461 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail +0x399e 012462 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success +0x399f 012463 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey +0x39a0 012464 beq bt_evt_store_nvram ,module_hci_event_store_device +0x39a1 012465 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost +0x39a2 012466 rtn +: 012469 module_process_bb_event_disconned: +0x39a3 012470 call module_spp_clear_last_transmite_clock +0x39a4 012471 fetch 1 ,mem_flag_pairing_state +0x39a5 012472 ncall module_hci_event_bt_pairing_fail ,blank +0x39a6 012473 call module_disconn_start +0x39a7 012474 fetch 2 ,mem_ui_state_map +0x39a8 012475 rtnbit0 ui_state_bt_spp_conn +0x39a9 012476 branch module_spp_disconnected +: 012478 module_process_spp_connected: +0x39aa 012479 fetch 2 ,mem_ui_state_map +0x39ab 012480 set1 ui_state_bt_spp_conn ,pdata +0x39ac 012481 store 2 ,mem_ui_state_map +0x39ad 012482 fetch 1 ,mem_module_spp_lpm_mult +0x39ae 012483 store 1 ,mem_lpm_mult +0x39af 012484 call module_set_conn_pin_low +0x39b0 012485 branch module_hci_event_spp_connect +: 012487 module_process_spp_disconnected: +: 012489 module_spp_disconnected: +0x39b1 012490 fetch 2 ,mem_ui_state_map +0x39b2 012491 rtnbit0 ui_state_bt_spp_conn +0x39b3 012492 set0 ui_state_bt_spp_conn ,pdata +0x39b4 012493 store 2 ,mem_ui_state_map +0x39b5 012494 branch module_hci_event_spp_disconnect +: 012497 module_process_enter_sniff: +: 012499 module_sniff_param_check: +0x39b6 012500 call module_spp_clear_last_transmite_clock +0x39b7 012503 fetch 2 ,mem_context + coffset_tsniff +0x39b8 012504 rshift pdata ,pdata +0x39b9 012505 fetcht 2 ,mem_sniff_param_interval +0x39ba 012506 isub temp ,null +0x39bb 012507 nbranch module_sniff_param_check_unsniff ,zero +0x39bc 012508 branch app_lpm_mult_enable +: 012509 module_sniff_param_check_unsniff: +0x39bd 012510 fetch 1 ,mem_module_flag +0x39be 012511 rtnbit1 moudle_task_unsniff +0x39bf 012512 hfetch 2 ,core_uart_rxitems +0x39c0 012513 ncall module_set_unsniff_task_flag ,blank +0x39c1 012514 branch app_bt_sniff_exit +: 012516 module_process_exit_sniff: +0x39c2 012517 call module_clear_sniff_task_flag +0x39c3 012518 branch app_lpm_mult_disable +: 012520 module_process_setup_complete: +0x39c4 012521 call module_spp_clear_last_transmite_clock +0x39c5 012522 branch module_conn_start +: 012524 module_process_bb_even_le_disconn: +0x39c6 012525 call le_clr_config_more_data +0x39c7 012526 call module_disconn_start +0x39c8 012527 branch module_hci_event_le_disconnect +: 012529 module_process_evt_pincode_req: +0x39c9 012530 branch app_bt_set_pincode +: 012533 module_process_sniff_not_accept: +0x39ca 012534 branch module_clear_sniff_task_flag +: 012537 module_process_unsniff_accept: +0x39cb 012538 fetch 1 ,mem_module_flag +0x39cc 012539 bbit0 moudle_task_unsniff ,app_bt_enter_sniff +0x39cd 012540 branch module_clear_unsniff_task_flag +: 012543 module_process_unsniff_not_accept: +0x39ce 012544 branch module_clear_unsniff_task_flag +: 012547 module_process_le_conn: +0x39cf 012548 call le_send_att_exchange_mtu_requset +0x39d0 012549 call module_conn_start +0x39d1 012550 fetch 1 ,mem_module_le_lpm_mult +0x39d2 012551 store 1 ,mem_lpm_mult +0x39d3 012552 branch module_hci_event_le_connect +: 012555 module_process_bb_conn: +0x39d4 012556 jam 0 ,mem_flag_mode_ssp_pin +0x39d5 012557 call module_clear_sniff_task_flag +0x39d6 012558 branch module_clear_unsniff_task_flag +: 012560 module_process_page_time_out: +: 012561 module_process_reconn_fail: +: 012562 module_disconn_start: +0x39d7 012563 call module_start_adv_discovery_by_command +0x39d8 012564 branch module_set_conn_pin_high +: 012567 module_process_ble_ltk_lost: +0x39d9 012568 call le_send_reject_ind +0x39da 012569 branch le_send_smp_security_request +: 012572 module_set_conn_pin_high: +0x39db 012573 fetcht 1 ,mem_module_connect_state_gpio +0x39dc 012574 branch gpio_out_active +: 012576 module_conn_start: +0x39dd 012577 call module_stop_adv_discovery +0x39de 012578 branch module_set_conn_pin_low +: 012580 module_stop_adv_discovery: +0x39df 012581 fetch 1 ,mem_module_state +0x39e0 012582 isolate1 moudle_state_bt_bit ,pdata +0x39e1 012583 call app_bt_stop_discovery ,true +0x39e2 012584 fetch 1 ,mem_module_state +0x39e3 012585 isolate1 moudle_state_ble_bit ,pdata +0x39e4 012586 call app_ble_stop_adv ,true +0x39e5 012587 rtn +: 012588 module_set_conn_pin_low: +0x39e6 012589 fetcht 1 ,mem_module_connect_state_gpio +0x39e7 012590 branch gpio_out_inactive +: 012592 module_process_with_credit: +0x39e8 012593 fetch 1 ,mem_credit_flag +0x39e9 012594 rtneq credit_disable +0x39ea 012595 branch rfcomm_send_uih_without_payload +: 012597 module_process: +0x39eb 012598 hfetch 1 ,core_uart_status +0x39ec 012599 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit +0x39ed 012600 call uartd_prepare_rx +0x39ee 012601 ifetch 1 ,contru +0x39ef 012602 bne 0x01 ,module_hci_in_excp +0x39f0 012603 hfetch 2 ,core_uart_rxitems +0x39f1 012604 sub pdata ,2 ,null +0x39f2 012605 rtn positive +0x39f3 012606 ifetch 1 ,contru +0x39f4 012607 store 1 ,mem_module_uart_opcode +0x39f5 012608 ifetcht 1 ,contru +0x39f6 012609 copy contru ,rega +0x39f7 012610 storet 1 ,mem_module_uart_len +0x39f8 012611 add temp ,3 ,temp +0x39f9 012612 hfetch 2 ,core_uart_rxitems +0x39fa 012613 isub temp ,temp +0x39fb 012614 nrtn positive +0x39fc 012615 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x39fd 012616 call module_hci_cmd_control +0x39fe 012617 fetch 1 ,mem_module_temp_nl_discard_packet +0x39ff 012618 rtneq hci_not_discard_packet +0x3a00 012619 branch module_hci_dicard_packet +: 012621 module_hci_in_excp: +0x3a01 012622 call delay_10ms +0x3a02 012623 call module_hci_event_invalid_packet +0x3a03 012624 branch module_hci_release_except +: 012627 module_hci_release_except: +0x3a04 012628 bpatch patch1b_7 ,mem_patch1b +0x3a05 012629 hfetch 2 ,core_uart_rxitems +0x3a06 012630 rtn blank +0x3a07 012631 call uartd_prepare_rx +0x3a08 012632 ifetch 1 ,contru +0x3a09 012633 sub pdata ,0x01 ,null +0x3a0a 012634 ncall module_hci_dicard_bytes ,zero +0x3a0b 012635 nbranch module_hci_release_except ,zero +0x3a0c 012636 ifetch 1 ,contru +0x3a0d 012637 rtneq hci_cmd_spp_data_req +0x3a0e 012638 rtneq hci_cmd_set_credit_given +0x3a0f 012639 increase -1 ,contru +0x3a10 012640 call module_hci_dicard_bytes +0x3a11 012641 branch module_hci_release_except +: 012643 module_hci_dicard_packet: +0x3a12 012644 call uartd_prepare_rx +0x3a13 012645 increase 2 ,contru +0x3a14 012646 ifetch 1 ,contru +0x3a15 012647 iadd contru ,contru +: 012648 module_hci_dicard_bytes: +0x3a16 012649 branch uartd_rxdone +: 012652 module_hci_cmd_control: +0x3a17 012653 bpatch patch1c_0 ,mem_patch1c +0x3a18 012654 fetch 1 ,mem_module_uart_opcode +0x3a19 012655 beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr +0x3a1a 012656 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr +0x3a1b 012657 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility +0x3a1c 012658 beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name +0x3a1d 012659 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name +0x3a1e 012660 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data +0x3a1f 012661 beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data +0x3a20 012662 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status +0x3a21 012663 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode +0x3a22 012664 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode +0x3a23 012665 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode +0x3a24 012666 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud +0x3a25 012667 beq hci_cmd_version_req ,module_hci_cmd_version_request +0x3a26 012668 beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect +0x3a27 012669 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect +0x3a28 012670 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram +0x3a29 012671 beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey +0x3a2a 012672 beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given +0x3a2b 012673 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv +0x3a2c 012674 beq hci_cmd_power_req ,module_hci_cmd_power_request +0x3a2d 012675 beq hci_cmd_power_set ,module_hci_cmd_power_set +0x3a2e 012676 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry +0x3a2f 012677 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio +0x3a30 012678 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio +0x3a31 012679 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode +0x3a32 012680 beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data +0x3a33 012681 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data +0x3a34 012682 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req +0x3a35 012683 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter +0x3a36 012684 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing +0x3a37 012685 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio +0x3a38 012686 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power +0x3a39 012687 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey +0x3a3a 012688 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag +0x3a3b 012689 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip +0x3a3c 012690 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey +0x3a3d 012691 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm +0x3a3e 012692 branch module_hci_event_receive_invalid_cmd +: 012697 module_hci_cmd_set_bt_addr: +0x3a3f 012698 fetch 1 ,mem_module_uart_len +0x3a40 012699 bne 6 ,module_hci_event_receive_invalid_cmd +0x3a41 012700 ifetch 6 ,contru +0x3a42 012701 store 6 ,mem_lap +0x3a43 012702 branch module_hci_event_receive_valid_cmd +: 012705 module_hci_cmd_set_le_addr: +0x3a44 012706 fetch 1 ,mem_module_uart_len +0x3a45 012707 bne 6 ,module_hci_event_receive_invalid_cmd +0x3a46 012708 ifetch 6 ,contru +0x3a47 012709 store 6 ,mem_le_lap +0x3a48 012710 branch module_hci_event_receive_valid_cmd +: 012714 module_hci_cmd_set_visibility: +0x3a49 012715 fetch 1 ,mem_module_uart_len +0x3a4a 012716 bne 1 ,module_hci_event_receive_invalid_cmd +0x3a4b 012717 copy rega ,contru +0x3a4c 012718 call module_hci_event_receive_valid_cmd +0x3a4d 012719 ifetcht 1 ,contru +0x3a4e 012720 storet 1 ,mem_module_bluetooth_stauts_by_command +0x3a4f 012721 fetch 2 ,mem_ui_state_map +0x3a50 012722 rtnbit1 ui_state_ble_connected +0x3a51 012723 rtnbit1 ui_state_bt_connected +: 012724 module_start_adv_discovery_by_command: +0x3a52 012725 fetch 1 ,mem_module_state +0x3a53 012726 isolate1 moudle_state_bt_bit ,pdata +0x3a54 012727 nbranch moudle_start_adv_by_command ,true +0x3a55 012728 fetcht 1 ,mem_module_bluetooth_stauts_by_command +0x3a56 012729 and temp ,0x03 ,pdata +0x3a57 012730 store 1 ,mem_scan_mode +: 012731 moudle_start_adv_by_command: +0x3a58 012732 fetch 1 ,mem_module_state +0x3a59 012733 isolate1 moudle_state_ble_bit ,pdata +0x3a5a 012734 nrtn true +0x3a5b 012735 fetcht 1 ,mem_module_bluetooth_stauts_by_command +0x3a5c 012736 isolate1 2 ,temp +0x3a5d 012737 branch app_ble_start_adv ,true +0x3a5e 012738 branch app_ble_stop_adv +: 012742 module_hci_cmd_set_bt_name: +0x3a5f 012743 fetch 1 ,mem_module_uart_len +0x3a60 012744 sub pdata ,67 ,null +0x3a61 012745 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3a62 012746 store 1 ,mem_local_name_length +0x3a63 012747 arg 8 ,loopcnt +0x3a64 012748 call memset0 +0x3a65 012749 fetch 1 ,mem_module_uart_len +0x3a66 012750 copy pdata ,loopcnt +0x3a67 012751 copy rega ,contru +0x3a68 012752 arg mem_local_name ,contw +0x3a69 012753 call uart_copy_rx_bytes_fast +0x3a6a 012754 branch module_hci_event_receive_valid_cmd +: 012758 module_hci_cmd_set_le_name: +0x3a6b 012759 fetch 1 ,mem_module_uart_len +0x3a6c 012760 sub pdata ,29 ,null +0x3a6d 012761 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3a6e 012762 store 1 ,mem_le_name_len +0x3a6f 012763 copy pdata ,loopcnt +0x3a70 012764 copy rega ,contru +0x3a71 012765 arg mem_le_name ,contw +0x3a72 012766 call uart_copy_rx_bytes_fast +0x3a73 012767 call le_modified_name +0x3a74 012768 branch module_hci_event_receive_valid_cmd +: 012772 module_hci_cmd_receive_spp_data: +0x3a75 012773 fetch 1 ,mem_ui_state_map +0x3a76 012774 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd +0x3a77 012775 call app_check_sniff +0x3a78 012776 branch module_hci_cmd_spp_exit_sniff ,true +0x3a79 012777 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a7a 012779 call module_spp_clear_last_transmite_clock +0x3a7b 012780 fetch 1 ,mem_remote_credits +0x3a7c 012781 rtn blank +0x3a7d 012782 fetch 2 ,mem_nl_rx_len_all +0x3a7e 012783 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all +0x3a7f 012784 fetch 1 ,mem_module_uart_len +0x3a80 012785 store 2 ,mem_nl_rx_len_all +0x3a81 012787 copy rega ,contru +0x3a82 012790 copy contru ,pdata +0x3a83 012791 store 2 ,mem_nl_rx_data_src +: 012792 module_hci_cmd_pass_init_ng_rx_len_all: +0x3a84 012793 call module_hci_cmd_get_current_packet_len_and_remain_len +0x3a85 012794 branch spp_tx_rfcomm_packet +: 012796 module_hci_cmd_spp_exit_sniff: +0x3a86 012797 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a87 012798 branch module_exit_sniff +: 012800 module_hci_cmd_get_current_packet_len_and_remain_len: +0x3a88 012801 call module_hci_cmd_get_current_patcket_len +0x3a89 012802 fetch 2 ,mem_nl_rx_len_all +0x3a8a 012803 fetcht 2 ,mem_current_packet_length +0x3a8b 012804 isub temp ,pdata +0x3a8c 012805 store 2 ,mem_nl_rx_len_all +0x3a8d 012806 rtn +: 012808 module_hci_cmd_get_current_patcket_len: +0x3a8e 012809 fetch 2 ,mem_nl_rx_len_all +0x3a8f 012810 arg dm_refcom_buff_len ,temp +0x3a90 012811 call not_greater_than +0x3a91 012812 fetcht 2 ,mem_rfcomm_max_frame_size +0x3a92 012813 call not_greater_than +0x3a93 012814 fetcht 2 ,mem_pn_max_frame_size +0x3a94 012815 call not_greater_than +0x3a95 012816 store 2 ,mem_current_packet_length +0x3a96 012817 rtn +: 012819 module_hci_command_tx_spp_tx_complete: +0x3a97 012820 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3a98 012821 jam hci_cmd_spp_data_req ,mem_module_uart_opcode +0x3a99 012822 branch module_hci_event_receive_valid_cmd +: 012826 module_hci_cmd_receive_le_data: +0x3a9a 012827 fetch 2 ,mem_ui_state_map +0x3a9b 012828 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +0x3a9c 012829 call module_check_ble_encrypt_state +0x3a9d 012830 branch module_hci_event_receive_invalid_cmd ,user +0x3a9e 012831 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a9f 012832 fetch 1 ,mem_module_flag +0x3aa0 012833 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish +0x3aa1 012834 fetch 1 ,mem_module_hci_notify_len +0x3aa2 012835 nrtn blank +0x3aa3 012836 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3aa4 012837 ifetch 2 ,contru +0x3aa5 012838 store 2 ,mem_module_hci_notify_handle +0x3aa6 012839 copy contru ,pdata +0x3aa7 012840 store 2 ,mem_module_hci_nofiy_addr +0x3aa8 012841 fetch 1 ,mem_module_uart_len +0x3aa9 012842 pincrease -2 +0x3aaa 012843 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3aab 012844 branch module_hci_event_receive_invalid_cmd ,zero +0x3aac 012845 store 1 ,mem_module_hci_notify_len +0x3aad 012846 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3aae 012847 call le_set_config_more_data +0x3aaf 012848 call module_hci_cmd_transmit_le_notify +0x3ab0 012849 call module_hci_cmd_transmit_le_notify +0x3ab1 012850 call module_hci_cmd_transmit_le_notify +0x3ab2 012851 fetch 1 ,mem_module_flag +0x3ab3 012852 rtnbit0 module_flag_ble_data_finish +: 012853 module_hci_cmd_receive_le_data_finish: +0x3ab4 012854 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3ab5 012855 call module_clear_le_tx_data_flag +0x3ab6 012856 branch module_hci_event_receive_valid_cmd +: 012858 module_hci_cmd_transmit_le_notify: +0x3ab7 012859 fetch 1 ,mem_module_hci_notify_len +0x3ab8 012860 rtn blank +0x3ab9 012861 call le_fifo_check_nearly_full +0x3aba 012862 nrtn blank +0x3abb 012863 call module_get_le_remote_mtu +0x3abc 012864 bpatch patch1c_1 ,mem_patch1c +0x3abd 012865 add temp ,-3 ,pdata +0x3abe 012866 fetcht 1 ,mem_module_hci_notify_len +0x3abf 012867 call not_greater_than +0x3ac0 012868 copy pdata ,rega +0x3ac1 012869 copy temp ,pdata +0x3ac2 012870 isub rega ,pdata +0x3ac3 012871 store 1 ,mem_module_hci_notify_len +0x3ac4 012872 fetcht 2 ,mem_module_hci_notify_handle +0x3ac5 012873 call le_att_malloc_tx_notify +0x3ac6 012874 fetch 2 ,mem_module_hci_nofiy_addr +0x3ac7 012875 copy pdata ,contru +0x3ac8 012876 copy rega ,loopcnt +0x3ac9 012877 call uart_copy_rx_bytes_fast +0x3aca 012878 copy contru ,pdata +0x3acb 012879 store 2 ,mem_module_hci_nofiy_addr +0x3acc 012880 fetch 1 ,mem_module_hci_notify_len +0x3acd 012881 nrtn blank +0x3ace 012882 branch module_set_le_tx_data_flag +: 012886 module_get_le_remote_mtu: +0x3acf 012887 arg 0x17 ,temp +0x3ad0 012888 fetch 1 ,mem_module_flag +0x3ad1 012889 rtnbit1 module_flag_ble_send_mtu23 +0x3ad2 012890 fetcht 2 ,mem_le_remote_mtu +0x3ad3 012891 rtn +: 012893 module_check_ble_encrypt_state: +0x3ad4 012894 fetch 1 ,mem_module_flag +0x3ad5 012895 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state +0x3ad6 012896 branch disable_user +: 012900 module_hci_cmd_inquire_status: +0x3ad7 012901 branch module_hci_event_status_res +: 012905 module_hci_cmd_set_pairing_mode: +0x3ad8 012906 copy rega ,contru +0x3ad9 012907 ifetch 1 ,contru +0x3ada 012908 beq pairing_pincode ,module_hci_pairing_pincode_mode +0x3adb 012909 beq pairing_justwork ,module_hci_pairing_just_work_mode +0x3adc 012910 beq pairing_passkey ,module_hci_pairing_passkey +0x3add 012911 beq pairing_confirm ,module_hci_pairing_numeric_comparison +0x3ade 012912 branch module_hci_event_receive_invalid_cmd +: 012913 module_hci_pairing_pincode_mode: +0x3adf 012914 call ssp_disable +0x3ae0 012915 jam 0 ,mem_ssp_enable +0x3ae1 012916 branch module_hci_event_receive_valid_cmd +: 012917 module_hci_pairing_just_work_mode: +0x3ae2 012918 setarg ssp_mode_just_work_io_cap_data +: 012919 module_hci_sspairing_mode: +0x3ae3 012920 store 3 ,mem_sp_iocap_local +0x3ae4 012921 store 1 ,mem_ssp_mode_flag +0x3ae5 012922 call ssp_enable +0x3ae6 012923 jam 1 ,mem_ssp_enable +0x3ae7 012924 branch module_hci_event_receive_valid_cmd +: 012925 module_hci_pairing_passkey: +0x3ae8 012926 setarg ssp_mode_passkey_io_cap_data +0x3ae9 012927 branch module_hci_sspairing_mode +: 012929 module_hci_pairing_numeric_comparison: +0x3aea 012930 setarg ssp_mode_ssp_pin_io_cap_data +0x3aeb 012931 branch module_hci_sspairing_mode +: 012934 module_hci_cmd_set_pincode: +0x3aec 012935 fetch 1 ,mem_module_uart_len +0x3aed 012936 sub pdata ,16 ,null +0x3aee 012937 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3aef 012938 store 1 ,mem_pin_length +0x3af0 012939 copy pdata ,loopcnt +0x3af1 012940 arg mem_pin ,contw +0x3af2 012941 call uart_copy_rx_bytes +0x3af3 012942 branch module_hci_event_receive_valid_cmd +: 012946 module_hci_cmd_set_uart_control_mode: +0x3af4 012947 copy rega ,contru +0x3af5 012948 ifetch 1 ,contru +0x3af6 012949 hfetcht 1 ,core_uart_ctrl +0x3af7 012950 nsetflag blank ,4 ,temp +0x3af8 012951 hstoret 1 ,core_uart_ctrl +0x3af9 012952 branch module_hci_event_receive_valid_cmd +: 012956 module_hci_cmd_set_uart_baud: +0x3afa 012957 fetch 1 ,mem_module_uart_len +0x3afb 012958 copy pdata ,loopcnt +0x3afc 012959 copy rega ,contru +0x3afd 012960 call string2dec_from_uart +0x3afe 012961 setarg uart_clk_24 +0x3aff 012962 idiv temp +0x3b00 012963 call wait_div_end +0x3b01 012964 quotient pdata +: 012965 module_hci_cmd_set_uart_baud_ok: +0x3b02 012966 store uart_baud_len ,mem_baud +0x3b03 012967 call module_hci_event_receive_valid_cmd +0x3b04 012968 call wait_uarttx +0x3b05 012969 branch uart_set_baud_by_mem +: 012973 module_hci_cmd_version_request: +0x3b06 012974 arg 2 ,rega +0x3b07 012975 arg mem_soft_version_num ,regb +0x3b08 012976 arg 0 ,temp +0x3b09 012977 branch module_hci_event_set_cmd +: 012978 module_hci_event_set_cmd_send_response: +0x3b0a 012979 store 2 ,mem_event_cmd_response_content +0x3b0b 012980 arg mem_event_cmd_response_content ,regb +0x3b0c 012981 arg 0 ,temp +0x3b0d 012982 branch module_hci_event_set_cmd +: 012986 module_hci_cmd_bt_disconnect: +0x3b0e 012987 fetch 2 ,mem_ui_state_map +0x3b0f 012988 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +: 012989 module_hci_cmd_bt_disconnect_doing: +0x3b10 012990 call module_hci_event_receive_valid_cmd +0x3b11 012991 branch app_bt_disconnect +: 012995 module_hci_cmd_ble_disconnect: +0x3b12 012996 fetch 2 ,mem_ui_state_map +0x3b13 012997 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +: 012998 module_hci_cmd_ble_disconnect_doing: +0x3b14 012999 call module_hci_event_receive_valid_cmd +0x3b15 013000 branch app_ble_disconnect +: 013006 module_hci_cmd_set_nvram: +0x3b16 013007 fetch 1 ,mem_module_uart_len +0x3b17 013008 copy pdata ,loopcnt +0x3b18 013009 copy rega ,contru +0x3b19 013010 fetch 2 ,mem_nv_data_ptr +0x3b1a 013011 icopy contw +0x3b1b 013012 call uart_copy_rx_bytes_fast +0x3b1c 013013 branch module_hci_event_receive_valid_cmd +: 013017 module_hci_cmd_confirm_gkey: +0x3b1d 013018 fetch 1 ,mem_ui_state_map +0x3b1e 013019 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +0x3b1f 013020 ifetch 1 ,contru +0x3b20 013021 fetcht 1 ,mem_flag_mode_ssp_pin +0x3b21 013022 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp +0x3b22 013023 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp +0x3b23 013024 storet 1 ,mem_flag_mode_ssp_pin +0x3b24 013026 call module_hci_event_receive_valid_cmd +0x3b25 013028 fetch 1 ,mem_flag_mode_ssp_pin +0x3b26 013029 bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 +0x3b27 013030 rtn +: 013032 dhkey_not_accept: +0x3b28 013033 jam 0 ,mem_flag_mode_ssp_pin +0x3b29 013034 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp +0x3b2a 013035 branch ui_ipc_send_cmd +: 013038 module_hci_cmd_spp_number_comparison_result_is1: +0x3b2b 013039 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +0x3b2c 013040 branch dhkey_not_accept +: 013044 module_hci_cmd_set_credit_given: +0x3b2d 013045 fetch 1 ,mem_ui_state_map +0x3b2e 013046 rtnbit0 ui_state_bt_spp_conn +0x3b2f 013047 fetch 1 ,mem_credit_flag +0x3b30 013048 rtneq credit_disable +0x3b31 013049 ifetch 1 ,contru +0x3b32 013050 fetcht 1 ,mem_credit_given +0x3b33 013051 iadd temp ,temp +0x3b34 013052 storet 1 ,mem_credit_given +0x3b35 013053 rtn +: 013057 module_hci_cmd_auto_adv: +0x3b36 013058 arg 0x40 ,loopcnt +0x3b37 013059 arg mem_le_adv_data_len ,contw +0x3b38 013060 call clear_mem +0x3b39 013061 setarg 0 +0x3b3a 013062 store 1 ,mem_regb +0x3b3b 013063 copy rega ,contru +: 013064 module_hci_cmd_auto_adv_loop: +0x3b3c 013065 copy contru ,pdata +0x3b3d 013066 store 2 ,mem_regc +0x3b3e 013067 call module_hci_cmd_auto_adv_adv_analys +0x3b3f 013069 fetch 1 ,mem_regb +0x3b40 013070 fetcht 1 ,mem_temp +0x3b41 013071 increase 1 ,temp +0x3b42 013072 iadd temp ,pdata +0x3b43 013073 store 1 ,mem_regb +0x3b44 013075 sub pdata ,31 ,null +0x3b45 013076 nbranch module_hci_cmd_auto_adv_store_scan ,positive +: 013077 module_hci_cmd_auto_adv_store_adv: +0x3b46 013078 fetcht 1 ,mem_le_adv_data_len +0x3b47 013079 setarg mem_le_adv_data +0x3b48 013080 iadd temp ,pdata +0x3b49 013081 store 2 ,mem_contw +0x3b4a 013082 fetcht 1 ,mem_temp +0x3b4b 013083 increase 1 ,temp +0x3b4c 013084 fetch 1 ,mem_le_adv_data_len +0x3b4d 013085 iadd temp ,pdata +0x3b4e 013086 store 1 ,mem_le_adv_data_len +0x3b4f 013087 branch module_hci_cmd_auto_adv_store_common +: 013088 module_hci_cmd_auto_adv_store_scan: +0x3b50 013089 fetcht 1 ,mem_le_scan_data_len +0x3b51 013090 setarg mem_le_scan_data +0x3b52 013091 iadd temp ,pdata +0x3b53 013092 store 2 ,mem_contw +0x3b54 013093 fetcht 1 ,mem_temp +0x3b55 013094 increase 1 ,temp +0x3b56 013095 fetch 1 ,mem_le_scan_data_len +0x3b57 013096 iadd temp ,pdata +0x3b58 013097 store 1 ,mem_le_scan_data_len +: 013098 module_hci_cmd_auto_adv_store_common: +0x3b59 013099 fetch 2 ,mem_contw +0x3b5a 013100 copy pdata ,contw +0x3b5b 013101 fetch 2 ,mem_regc +0x3b5c 013102 copy pdata ,contru +0x3b5d 013104 copy temp ,loopcnt +0x3b5e 013105 call uart_copy_rx_bytes_fast +0x3b5f 013107 fetch 1 ,mem_module_uart_len +0x3b60 013108 fetcht 1 ,mem_regb +0x3b61 013109 isub temp ,null +0x3b62 013110 nbranch module_hci_cmd_auto_adv_loop ,zero +0x3b63 013111 branch module_hci_event_receive_valid_cmd +: 013114 module_hci_cmd_auto_adv_adv_analys: +0x3b64 013115 ifetch 1 ,contru +0x3b65 013116 store 1 ,mem_temp +0x3b66 013117 ifetch 1 ,contru +0x3b67 013118 store 1 ,mem_rega +0x3b68 013119 rtn +: 013123 module_hci_cmd_power_request: +0x3b69 013124 arg 0 ,temp +0x3b6a 013125 arg 2 ,rega +0x3b6b 013126 fetch 2 ,mem_module_vdd_quotient +0x3b6c 013127 store 2 ,mem_event_cmd_response_content +0x3b6d 013128 arg mem_event_cmd_response_content ,regb +0x3b6e 013129 branch module_hci_event_set_cmd +: 013133 module_hci_cmd_power_set: +0x3b6f 013134 fetch 1 ,mem_module_uart_len +0x3b70 013135 bne 1 ,module_hci_event_receive_invalid_cmd +0x3b71 013136 ifetch 1 ,contru +0x3b72 013137 store 1 ,mem_module_read_vdd_flag +0x3b73 013138 setarg 0x00 +0x3b74 013139 store 2 ,mem_module_vdd_quotient +0x3b75 013140 branch module_hci_event_receive_valid_cmd +: 013144 module_hci_cmd_passkey_entry: +0x3b76 013145 ifetch 4 ,contru +0x3b77 013146 store 4 ,mem_pin +0x3b78 013147 jam 4 ,mem_pin_length +0x3b79 013148 jam 0 ,mem_authentication_passkey_times +0x3b7a 013149 call module_hci_event_receive_valid_cmd +0x3b7b 013150 branch authentication_passkey +: 013154 module_hci_cmd_set_gpio: +0x3b7c 013155 fetch 1 ,mem_module_uart_len +0x3b7d 013156 bne 3 ,module_hci_event_receive_invalid_cmd +0x3b7e 013157 ifetch 1 ,contru +0x3b7f 013158 beq hci_cmd_config_gpio_input ,module_set_gpio_input +0x3b80 013159 beq hci_cmd_config_gpio_output ,module_set_gpio_output +0x3b81 013160 branch module_hci_event_receive_invalid_cmd +: 013162 module_set_gpio_input: +0x3b82 013163 ifetcht 1 ,contru +0x3b83 013164 ifetch 1 ,contru +0x3b84 013165 beq gpio_input_high_impedance ,module_set_gpio_high_impedance +0x3b85 013166 nsetflag blank ,7 ,temp +0x3b86 013167 call gpio_config_input +0x3b87 013168 branch module_hci_event_receive_valid_cmd +: 013170 module_set_gpio_high_impedance: +0x3b88 013171 call gpio_set_high_impedance +0x3b89 013172 branch module_hci_event_receive_valid_cmd +: 013174 module_set_gpio_output: +0x3b8a 013175 ifetcht 1 ,contru +0x3b8b 013176 call gpio_config_output0 +0x3b8c 013177 ifetch 1 ,contru +0x3b8d 013178 isolate1 0 ,pdata +0x3b8e 013179 call gpio_out_flag +0x3b8f 013180 branch module_hci_event_receive_valid_cmd +: 013184 module_hci_cmd_read_gpio: +0x3b90 013185 fetch 1 ,mem_module_uart_len +0x3b91 013186 bne 1 ,module_hci_event_receive_invalid_cmd +0x3b92 013187 ifetcht 1 ,contru +0x3b93 013188 call gpio_get_bit +0x3b94 013189 setarg 0x0 +0x3b95 013190 nsetflag true ,0 ,pdata +0x3b96 013191 arg 1 ,rega +0x3b97 013192 branch module_hci_event_set_cmd_send_response +: 013196 module_hci_cmd_le_set_pairing_mode: +0x3b98 013197 copy rega ,contru +0x3b99 013198 ifetch 1 ,contru +0x3b9a 013199 copy pdata ,temp +0x3b9b 013200 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork +0x3b9c 013201 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric +0x3b9d 013202 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey +0x3b9e 013203 store 1 ,mem_le_pairing_mode +0x3b9f 013204 beq le_pairing_mode_none ,module_le_set_no_pairing +0x3ba0 013205 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work +0x3ba1 013206 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey +0x3ba2 013207 branch module_hci_event_receive_invalid_cmd +: 013209 module_le_set_pairing_mode_secure_justwork: +0x3ba3 013210 fetch 1 ,mem_le_secure_connect_enable +0x3ba4 013211 branch module_hci_event_receive_invalid_cmd ,blank +0x3ba5 013212 storet 1 ,mem_le_pairing_mode +0x3ba6 013213 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3ba7 013214 branch module_le_set_noinputnooutput +: 013215 module_le_set_pairing_mode_secure_numeric: +0x3ba8 013216 fetch 1 ,mem_le_secure_connect_enable +0x3ba9 013217 branch module_hci_event_receive_invalid_cmd ,blank +0x3baa 013218 storet 1 ,mem_le_pairing_mode +0x3bab 013219 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3bac 013220 jam flag_iocap_displayyesno ,mem_le_pres_iocap +0x3bad 013221 branch module_hci_event_receive_valid_cmd +: 013222 module_le_set_pairing_mode_secure_passkey: +0x3bae 013223 fetch 1 ,mem_le_secure_connect_enable +0x3baf 013224 branch module_hci_event_receive_invalid_cmd ,blank +0x3bb0 013225 storet 1 ,mem_le_pairing_mode +0x3bb1 013226 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3bb2 013227 branch module_le_set_displayonly +: 013228 module_le_set_no_pairing: +0x3bb3 013229 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth +: 013230 module_le_set_noinputnooutput: +0x3bb4 013231 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +0x3bb5 013232 branch module_hci_event_receive_valid_cmd +: 013233 module_le_set_pairing_mode_lagacy_just_work: +0x3bb6 013234 jam flag_le_bonding_mitm ,mem_le_pres_auth +0x3bb7 013235 branch module_le_set_noinputnooutput +: 013236 module_le_set_pairing_mode_lagacy_passkey: +0x3bb8 013237 jam flag_le_bonding_mitm ,mem_le_pres_auth +: 013238 module_le_set_displayonly: +0x3bb9 013239 jam flag_iocap_displayonly ,mem_le_pres_iocap +0x3bba 013240 branch module_hci_event_receive_valid_cmd +: 013244 module_hci_cmd_le_set_adv_data: +0x3bbb 013245 fetch 1 ,mem_module_uart_len +0x3bbc 013246 sub pdata ,31 ,null +0x3bbd 013247 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3bbe 013248 store 1 ,mem_le_adv_data_len +0x3bbf 013249 copy pdata ,loopcnt +0x3bc0 013250 copy rega ,contru +0x3bc1 013251 arg mem_le_adv_data ,contw +0x3bc2 013252 call uart_copy_rx_bytes_fast +0x3bc3 013253 branch module_hci_event_receive_valid_cmd +: 013257 module_hci_cmd_le_set_scan_data: +0x3bc4 013258 fetch 1 ,mem_module_uart_len +0x3bc5 013259 sub pdata ,31 ,null +0x3bc6 013260 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3bc7 013261 store 1 ,mem_le_scan_data_len +0x3bc8 013262 copy pdata ,loopcnt +0x3bc9 013263 copy rega ,contru +0x3bca 013264 arg mem_le_scan_data ,contw +0x3bcb 013265 call uart_copy_rx_bytes_fast +0x3bcc 013266 branch module_hci_event_receive_valid_cmd +: 013270 module_hci_cmd_le_send_conn_update_req: +0x3bcd 013271 fetch 2 ,mem_ui_state_map +0x3bce 013272 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +0x3bcf 013273 fetch 1 ,mem_module_uart_len +0x3bd0 013274 bne 0x08 ,module_hci_event_receive_invalid_cmd +0x3bd1 013275 copy rega ,contru +0x3bd2 013276 ifetch 8 ,contru +0x3bd3 013277 store 8 ,mem_le_interval_min +0x3bd4 013278 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x3bd5 013279 call ui_ipc_send_cmd +0x3bd6 013280 branch module_hci_event_receive_valid_cmd +: 013284 module_hci_cmd_set_le_adv_parameter: +0x3bd7 013285 ifetch 2 ,contru +0x3bd8 013286 store 2 ,mem_le_adv_interval +0x3bd9 013287 branch module_hci_event_receive_valid_cmd +: 013291 module_hci_cmd_le_start_pairing: +0x3bda 013292 fetch 1 ,mem_le_pairing_mode +0x3bdb 013293 branch module_hci_event_receive_invalid_cmd ,blank +0x3bdc 013294 fetch 1 ,mem_le_pairing_state +0x3bdd 013295 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd +0x3bde 013296 fetch 1 ,mem_le_enc_state +0x3bdf 013297 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd +0x3be0 013298 call check_51cmd_le_smp_sec_req +0x3be1 013299 branch module_hci_event_receive_valid_cmd +: 013303 module_hci_cmd_set_wake_gpio: +0x3be2 013304 fetch 1 ,mem_module_uart_len +0x3be3 013305 bne 5 ,module_hci_event_receive_invalid_cmd +0x3be4 013306 ifetch 1 ,contru +0x3be5 013307 store 1 ,mem_module_mcu_wake_pin +0x3be6 013308 ifetch 4 ,contru +0x3be7 013309 store 4 ,mem_module_mcu_wake_delay_us +0x3be8 013310 fetcht 1 ,mem_module_mcu_wake_pin +0x3be9 013311 call gpio_config_output +0x3bea 013312 call module_set_mcu_wake_pin_low +0x3beb 013313 branch module_hci_event_receive_valid_cmd +: 013317 module_hci_cmd_set_tx_power: +0x3bec 013318 fetch 1 ,mem_module_uart_len +0x3bed 013319 bne 0x01 ,module_hci_event_receive_invalid_cmd +0x3bee 013320 ifetch 1 ,contru +0x3bef 013321 store 1 ,mem_tx_power +0x3bf0 013322 branch module_hci_event_receive_valid_cmd +: 013326 module_hci_cmd_le_confirm_gkey: +0x3bf1 013327 ifetch 1 ,contru +0x3bf2 013328 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail +0x3bf3 013329 fetch 1 ,mem_le_secure_connect_state +0x3bf4 013330 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok +0x3bf5 013331 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok +0x3bf6 013332 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok +0x3bf7 013333 branch module_hci_event_receive_invalid_cmd +: 013334 module_hci_cmd_le_confirm_gkey_ok: +0x3bf8 013335 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag +0x3bf9 013336 branch module_hci_event_receive_valid_cmd +: 013338 module_hci_cmd_le_confirm_gkey_fail: +0x3bfa 013339 call le_send_pairing_confirm_value_failed +0x3bfb 013340 branch module_hci_event_receive_valid_cmd +: 013344 module_hci_cmd_set_reject_justwork_flag: +0x3bfc 013345 fetch 1 ,mem_module_uart_len +0x3bfd 013346 bne 0x01 ,module_hci_event_receive_invalid_cmd +0x3bfe 013347 call module_hci_event_receive_valid_cmd +0x3bff 013348 ifetch 1 ,contru +0x3c00 013349 branch classic_bt_clr_reject_justwork_flag ,blank +0x3c01 013350 branch classic_bt_set_reject_justwork_flag +: 013354 module_hci_cmd_reset_chip: +0x3c02 013355 call module_hci_event_receive_valid_cmd +0x3c03 013356 call wait_uarttx +0x3c04 013357 jam 0x01 ,core_reset +0x3c05 013358 branch loop +: 013362 module_hci_cmd_le_set_fixed_passkey: +0x3c06 013363 fetch 1 ,mem_module_uart_len +0x3c07 013364 beq 0 ,module_hci_event_receive_invalid_cmd +0x3c08 013365 ifetch 1 ,contru +0x3c09 013366 branch module_hci_cmd_le_set_random_passkey ,blank +0x3c0a 013367 fetch 1 ,mem_module_uart_len +0x3c0b 013368 bne 5 ,module_hci_event_receive_invalid_cmd +0x3c0c 013369 ifetch 4 ,contru +0x3c0d 013370 arg 1000000 ,temp +0x3c0e 013371 isub temp ,null +0x3c0f 013372 branch module_hci_event_receive_invalid_cmd ,positive +0x3c10 013373 store 4 ,mem_le_tk +0x3c11 013374 call le_set_config_fixed_tk +0x3c12 013375 branch module_hci_event_receive_valid_cmd +: 013377 module_hci_cmd_le_set_random_passkey: +0x3c13 013378 call le_clr_config_fixed_tk +0x3c14 013379 branch module_hci_event_receive_valid_cmd +: 013383 module_hci_test_cmde_close_lpm: +0x3c15 013384 jam 0 ,mem_lpm_mode +0x3c16 013385 branch module_hci_event_receive_valid_cmd +: 013390 module_hci_event_receive_invalid_cmd: +0x3c17 013391 arg 1 ,temp +0x3c18 013392 arg 0 ,rega +0x3c19 013393 branch module_hci_event_set_cmd +: 013396 module_hci_event_receive_valid_cmd: +0x3c1a 013397 arg 0 ,temp +0x3c1b 013398 arg 0 ,rega +0x3c1c 013399 branch module_hci_event_set_cmd +: 013403 module_hci_event_spp_connect: +0x3c1d 013404 jam hci_event_spp_conn_rep ,mem_module_uart_opcode +0x3c1e 013405 branch module_hci_event_enter_standby_mode_len0 +: 013409 module_hci_event_le_connect: +0x3c1f 013410 jam hci_event_le_conn_rep ,mem_module_uart_opcode +0x3c20 013411 branch module_hci_event_enter_standby_mode_len0 +: 013415 module_hci_event_spp_disconnect: +0x3c21 013416 jam hci_event_spp_dis_rep ,mem_module_uart_opcode +0x3c22 013417 branch module_hci_event_enter_standby_mode_len0 +: 013421 module_hci_event_le_disconnect: +0x3c23 013422 jam hci_event_le_dis_rep ,mem_module_uart_opcode +0x3c24 013423 branch module_hci_event_enter_standby_mode_len0 +: 013431 module_hci_event_set_cmd: +0x3c25 013432 fetch 1 ,mem_module_uart_opcode +0x3c26 013433 copy pdata ,regc +0x3c27 013434 jam hci_event_cmd_res ,mem_module_uart_opcode +0x3c28 013435 setarg 2 +0x3c29 013436 iadd rega ,pdata +0x3c2a 013437 call module_hci_prepare_tx +0x3c2b 013438 copy regc ,pdata +0x3c2c 013439 istore 1 ,contwu +0x3c2d 013440 istoret 1 ,contwu +0x3c2e 013441 copy rega ,loopcnt +0x3c2f 013442 copy regb ,contr +0x3c30 013443 call uart_copy_tx_bytes +0x3c31 013444 branch uartd_send +: 013448 module_hci_event_receive_spp_data: +0x3c32 013450 call module_spp_clear_last_transmite_clock +0x3c33 013451 jam hci_event_spp_data_rep ,mem_module_uart_opcode +0x3c34 013452 fetch 1 ,mem_current_length +0x3c35 013453 rtn blank +0x3c36 013454 call module_hci_prepare_tx +0x3c37 013455 fetch 1 ,mem_current_length +0x3c38 013456 copy pdata ,loopcnt +0x3c39 013457 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x3c3a 013458 copy pdata ,contr +0x3c3b 013459 call uart_copy_tx_bytes_fast +0x3c3c 013460 branch uartd_send +: 013464 module_hci_event_receive_le_data: +0x3c3d 013465 jam hci_event_le_data_rep ,mem_module_uart_opcode +0x3c3e 013466 fetch 1 ,mem_module_le_rx_data_len +0x3c3f 013467 icopy loopcnt +0x3c40 013468 increase 2 ,pdata +0x3c41 013469 call module_hci_prepare_tx +0x3c42 013470 fetch 2 ,mem_module_le_rx_data_handle +0x3c43 013471 istore 2 ,contwu +0x3c44 013472 fetch 2 ,mem_module_le_rx_data_address +0x3c45 013473 icopy contr +0x3c46 013474 call uart_copy_tx_bytes_fast +0x3c47 013475 branch uartd_send +: 013479 module_hci_event_enter_standby_mode: +0x3c48 013480 jam hci_event_standby_rep ,mem_module_uart_opcode +: 013481 module_hci_event_enter_standby_mode_len0: +0x3c49 013482 setarg 0 +0x3c4a 013483 call module_hci_prepare_tx +0x3c4b 013484 branch uartd_send +: 013488 module_hci_event_status_res: +0x3c4c 013489 jam hci_event_status_res ,mem_module_uart_opcode +0x3c4d 013490 setarg 1 +0x3c4e 013491 call module_hci_prepare_tx +0x3c4f 013493 call module_hci_read_bt_status +0x3c50 013495 fetch 2 ,mem_ui_state_map +0x3c51 013496 arg ui_state_bt_hid_conn ,queue +0x3c52 013497 qisolate1 pdata +0x3c53 013498 setflag true ,3 ,temp +0x3c54 013500 arg ui_state_ble_connected ,queue +0x3c55 013501 qisolate1 pdata +0x3c56 013502 setflag true ,5 ,temp +0x3c57 013504 fetch 1 ,mem_ui_state_map +0x3c58 013505 arg ui_state_bt_spp_conn ,queue +0x3c59 013506 qisolate1 pdata +0x3c5a 013507 setflag true ,4 ,temp +0x3c5b 013509 istoret 1 ,contwu +0x3c5c 013510 branch uartd_send +: 013514 module_hci_read_bt_status: +0x3c5d 013515 arg 0 ,temp +0x3c5e 013516 fetch 1 ,mem_scan_mode +0x3c5f 013517 arg inq_scan_mode ,queue +0x3c60 013518 qisolate1 pdata +0x3c61 013519 setflag true ,0 ,temp +0x3c62 013520 arg page_scan_mode ,queue +0x3c63 013521 qisolate1 pdata +0x3c64 013522 setflag true ,1 ,temp +0x3c65 013524 fetch 1 ,mem_le_adv_enable +0x3c66 013525 arg 0 ,queue +0x3c67 013526 qisolate1 pdata +0x3c68 013527 setflag true ,2 ,temp +0x3c69 013528 rtn +: 013532 module_hci_event_store_device: +0x3c6a 013533 jam hci_event_nvram_rep ,mem_module_uart_opcode +0x3c6b 013534 fetch 1 ,mem_nv_data_number +0x3c6c 013535 mul32 pdata ,34 ,pdata +0x3c6d 013536 icopy loopcnt +0x3c6e 013537 call module_hci_prepare_tx +0x3c6f 013538 fetch 2 ,mem_nv_data_ptr +0x3c70 013539 icopy contr +0x3c71 013540 call uart_copy_tx_bytes_fast +0x3c72 013541 branch uartd_send +: 013545 module_hci_event_gkey_generate: +0x3c73 013546 jam hci_event_gkey ,mem_module_uart_opcode +0x3c74 013547 setarg 4 +0x3c75 013548 call module_hci_prepare_tx +0x3c76 013549 fetch 4 ,mem_gkey +0x3c77 013550 istore 4 ,contwu +0x3c78 013551 branch uartd_send +: 013555 module_hci_event_invalid_packet: +0x3c79 013556 jam hci_event_invalid_packet ,mem_module_uart_opcode +0x3c7a 013557 hfetch 2 ,core_uart_rxitems +0x3c7b 013558 arg 0xff ,temp +0x3c7c 013559 call not_greater_than +0x3c7d 013560 copy pdata ,loopcnt +0x3c7e 013561 call module_hci_prepare_tx +0x3c7f 013562 call uartd_prepare_rx +0x3c80 013563 call uart_copy_rx2tx +0x3c81 013564 branch uartd_send +: 013568 module_hci_event_passkey_entry_mode: +0x3c82 013569 jam hci_event_get_passkey ,mem_module_uart_opcode +0x3c83 013570 branch module_hci_event_enter_standby_mode_len0 +: 013574 module_hci_event_le_tk: +0x3c84 013575 jam hci_event_le_tk ,mem_module_uart_opcode +0x3c85 013576 setarg 4 +0x3c86 013577 call module_hci_prepare_tx +0x3c87 013578 fetch 4 ,mem_le_tk +0x3c88 013579 istore 4 ,contwu +0x3c89 013580 branch uartd_send +: 013584 module_hci_event_le_pairing_fail: +0x3c8a 013585 arg flag_ble_pairing_fail ,rega +0x3c8b 013586 branch module_hci_event_pairing_completed +: 013588 module_hci_event_le_pairing_success: +0x3c8c 013589 arg flag_ble_pairing_success ,rega +0x3c8d 013590 branch module_hci_event_pairing_completed +: 013592 module_hci_event_bt_pairing_fail: +0x3c8e 013593 arg flag_bt_pairing_fail ,rega +0x3c8f 013594 branch module_hci_event_pairing_completed +: 013596 module_hci_event_bt_pairing_success: +0x3c90 013597 arg flag_bt_pairing_success ,rega +: 013599 module_hci_event_pairing_completed: +0x3c91 013600 jam 0 ,mem_flag_mode_ssp_pin +0x3c92 013601 jam hci_event_le_pairing_state ,mem_module_uart_opcode +0x3c93 013602 setarg 2 +0x3c94 013603 call module_hci_prepare_tx +0x3c95 013604 copy rega ,pdata +0x3c96 013605 istore 2 ,contwu +0x3c97 013606 branch uartd_send +: 013610 module_hci_event_pause_enc: +0x3c98 013611 arg flag_event_pause_enc ,regc +0x3c99 013612 branch module_hci_event_enc +: 013614 module_hci_event_start_enc: +0x3c9a 013615 arg flag_event_start_enc ,regc +: 013617 module_hci_event_enc: +0x3c9b 013618 jam hci_event_le_encryption_state ,mem_module_uart_opcode +0x3c9c 013619 setarg 1 +0x3c9d 013620 call module_hci_prepare_tx +0x3c9e 013621 copy regc ,pdata +0x3c9f 013622 istore 1 ,contwu +0x3ca0 013623 branch uartd_send +: 013627 module_hci_event_le_gkey: +0x3ca1 013628 jam hci_event_le_gkey ,mem_module_uart_opcode +0x3ca2 013629 setarg 4 +0x3ca3 013630 call module_hci_prepare_tx +0x3ca4 013631 fetch 4 ,mem_gkey +0x3ca5 013632 istore 4 ,contwu +0x3ca6 013633 branch uartd_send +: 013644 module_hci_prepare_tx: +0x3ca7 013645 jam 0x02 ,mem_module_uart_cmd +0x3ca8 013646 store 1 ,mem_module_uart_len +0x3ca9 013647 storet 8 ,mem_temp +0x3caa 013648 bpatch patch1c_2 ,mem_patch1c +0x3cab 013649 call module_set_mcu_wake_pin_high_delay +0x3cac 013650 fetcht 8 ,mem_temp +0x3cad 013651 call uartd_prepare_tx +0x3cae 013652 fetch 3 ,mem_module_uart_cmd +0x3caf 013653 istore 3 ,contwu +0x3cb0 013654 rtn +: 013657 module_set_mcu_wake_pin_high_delay: +0x3cb1 013658 call module_check_mcu_wake_pin_high +0x3cb2 013659 rtn true +: 013660 module_set_mcu_wake_pin_h_delay: +0x3cb3 013661 call module_set_mcu_wake_pin_high +0x3cb4 013662 fetch 4 ,mem_module_mcu_wake_delay_us +0x3cb5 013663 rshift2 pdata ,pdata +0x3cb6 013664 rtn blank +0x3cb7 013665 branch delay +: 013667 module_set_mcu_wake_pin_high: +0x3cb8 013669 fetcht 1 ,mem_module_mcu_wake_pin +0x3cb9 013670 branch gpio_out_active +: 013672 module_check_mcu_wake_pin_high: +0x3cba 013673 fetcht 1 ,mem_module_mcu_wake_pin +0x3cbb 013674 branch gpio_check_active +: 013676 module_set_mcu_wake_pin_low: +0x3cbc 013677 fetcht 1 ,mem_module_mcu_wake_pin +0x3cbd 013678 branch gpio_out_inactive +: 013681 delay: +0x3cbe 013682 increase -1 ,pdata +0x3cbf 013683 nop 38 +0x3cc0 013684 nbranch delay ,blank +0x3cc1 013685 rtn +: 013694 module_le_receive_data: +0x3cc2 013695 call module_check_ble_encrypt_state +0x3cc3 013696 rtn user +0x3cc4 013697 copy rega ,pdata +0x3cc5 013698 store 2 ,mem_module_le_rx_data_address +0x3cc6 013699 copy regb ,pdata +0x3cc7 013700 store 1 ,mem_module_le_rx_data_len +0x3cc8 013701 fetch 2 ,mem_le_att_handle +0x3cc9 013702 fetcht 2 ,mem_module_data_write_handle +0x3cca 013703 isub temp ,null +0x3ccb 013704 branch module_le_receive_data_ok ,zero +0x3ccc 013705 fetcht 2 ,mem_module_data_write_handle2 +0x3ccd 013706 isub temp ,null +0x3cce 013707 nrtn zero +: 013708 module_le_receive_data_ok: +0x3ccf 013709 store 2 ,mem_module_le_rx_data_handle +0x3cd0 013710 branch module_hci_event_receive_le_data +: 013715 module_exit_sniff: +0x3cd1 013716 fetch 1 ,mem_module_flag +0x3cd2 013717 rtnbit1 moudle_task_unsniff +0x3cd3 013718 call module_set_unsniff_task_flag +0x3cd4 013719 branch app_bt_sniff_exit +: 013722 module_set_lpm_mult_2: +0x3cd5 013723 jam 2 ,mem_lpm_mult +0x3cd6 013724 rtn +: 013728 module_bb_event_timer: +0x3cd7 013729 branch module_read_vdd_timer +: 013731 module_read_vdd_timer: +0x3cd8 013732 fetch 1 ,mem_module_read_vdd_flag +0x3cd9 013733 rtn blank +0x3cda 013734 fetch 1 ,mem_module_read_vdd_count +0x3cdb 013735 rtn blank +0x3cdc 013736 increase -1 ,pdata +0x3cdd 013737 store 1 ,mem_module_read_vdd_count +0x3cde 013738 nrtn blank +0x3cdf 013739 jam flag_module_read_vdd_count ,mem_module_read_vdd_count +0x3ce0 013740 call adc_set_mode +0x3ce1 013741 call vdd_calculate_by_mode +0x3ce2 013742 div pdata ,0x64 +0x3ce3 013743 call wait_div_end +0x3ce4 013744 quotient pdata +0x3ce5 013745 remainder temp +0x3ce6 013746 store 1 ,mem_module_vdd_quotient +0x3ce7 013747 storet 1 ,mem_module_vdd_remainder +0x3ce8 013748 rtn +: 013751 module_control_air_flow: +0x3ce9 013752 call check_uart_tx_buff +0x3cea 013753 branch app_l2cap_flow_control_enable ,positive +0x3ceb 013754 branch app_l2cap_flow_control_disable +: 013758 module_set_sniff_task_flag: +0x3cec 013759 arg moudle_task_sniff ,queue +0x3ced 013760 branch module_set_state +: 013762 module_clear_sniff_task_flag: +0x3cee 013763 arg moudle_task_sniff ,queue +0x3cef 013764 branch module_clr_state +: 013766 module_set_unsniff_task_flag: +0x3cf0 013767 arg moudle_task_unsniff ,queue +0x3cf1 013768 branch module_set_state +: 013770 module_clear_unsniff_task_flag: +0x3cf2 013771 arg moudle_task_unsniff ,queue +0x3cf3 013772 branch module_clr_state +: 013774 module_set_le_tx_data_flag: +0x3cf4 013775 arg module_flag_ble_data_finish ,queue +0x3cf5 013776 branch module_set_state +: 013778 module_clear_le_tx_data_flag: +0x3cf6 013779 arg module_flag_ble_data_finish ,queue +0x3cf7 013780 branch module_clr_state +: 013782 module_clr_state: +0x3cf8 013783 fetch 1 ,mem_module_flag +0x3cf9 013784 qset0 pdata +0x3cfa 013785 store 1 ,mem_module_flag +0x3cfb 013786 rtn +: 013788 module_set_state: +0x3cfc 013789 fetch 1 ,mem_module_flag +0x3cfd 013790 qset1 pdata +0x3cfe 013791 store 1 ,mem_module_flag +0x3cff 013792 rtn +: 013802 mouse_init: +0x3d00 013803 call mouse_setting_config +0x3d01 013804 call spi_ncs_enable +0x3d02 013805 call mouse_init_sunt +0x3d03 013806 call mouse_dpi_config +0x3d04 013807 call spi_ncs_disable +0x3d05 013808 rtn wake +0x3d06 013809 call mouse_cheak_enable_usb +0x3d07 013810 call mouse_cb_fuction +0x3d08 013813 fetch mouse_flag_len ,mem_mouse_flag +0x3d09 013814 rtnbit1 mouse_enable_usb +0x3d0a 013815 call mouse_wakeup_from_power +0x3d0b 013816 rtnmark1 mark_24g +0x3d0c 013817 fetch 2 ,mem_ui_state_map +0x3d0d 013818 bbit1 ui_state_btn_down ,mouse_start_discovery +0x3d0e 013819 branch mouse_check_reconn_target +: 013822 mouse_delay_4s: +0x3d0f 013823 fetch mouse_flag_len ,mem_mouse_flag +0x3d10 013824 rtnbit0 mouse_enable_init_delay +0x3d11 013825 arg 20 ,loopcnt +: 013826 mouse_delay_20ms: +0x3d12 013827 setarg 200000 +0x3d13 013828 call sleep +0x3d14 013829 loop delay_10ms +0x3d15 013830 rtn +: 013833 mouse_cheak_enable_usb: +0x3d16 013834 fetch mouse_flag_len ,mem_mouse_flag +0x3d17 013835 rtnbit0 mouse_enable_usb +0x3d18 013836 branch usb_init +: 013839 mouse_cb_fuction: +0x3d19 013840 setarg mouse_le +0x3d1a 013841 store 2 ,mem_cb_le_process +0x3d1b 013842 setarg mouse_send_process +0x3d1c 013843 store 2 ,mem_cb_bt_process +0x3d1d 013844 setarg mouse_process_lpm_before +0x3d1e 013845 store 2 ,mem_cb_before_lpm +0x3d1f 013846 setarg mouse_priority_bb_event +0x3d20 013847 store 2 ,mem_cb_bb_event_process +0x3d21 013848 setarg mouse_idle +0x3d22 013849 store 2 ,mem_cb_idle_process +0x3d23 013850 setarg mouse_before_hibernate +0x3d24 013851 store 2 ,mem_cb_before_hibernate +0x3d25 013852 setarg le_mouse_bb_event_connect_complete +0x3d26 013853 store 2 ,mem_cb_att_write +0x3d27 013855 call g24_head_ptr2regc +0x3d28 013856 setarg mouse_g24_package_data +0x3d29 013857 add regc ,offset_24g_cb_data ,contw +0x3d2a 013858 istore 2 ,contw +0x3d2b 013859 setarg mouse_g24_enter_lpm +0x3d2c 013860 add regc ,offset_24g_cb_lpm_prepare ,contw +0x3d2d 013861 istore 2 ,contw +0x3d2e 013862 setarg mouse_lpm_before_common +0x3d2f 013863 add regc ,offset_24g_cb_lpm_before ,contw +0x3d30 013864 istore 2 ,contw +0x3d31 013866 setarg mouse_bb_event_timer +0x3d32 013867 store 2 ,mem_cb_event_timer +0x3d33 013868 setarg mouse_spi_write_flash_cb +0x3d34 013869 store 2 ,mem_cb_spi_flash_write_complate +0x3d35 013870 rtn +: 013871 mouse_spi_write_flash_cb: +: 013872 mouse_spi_init: +0x3d36 013873 fetch mouse_flag_len ,mem_mouse_flag +0x3d37 013874 bbit0 mouse_enable_spi2 ,spid_init +0x3d38 013875 branch spid_init2 +: 013877 mouse_setting_config: +0x3d39 013878 rtn wake +0x3d3a 013879 call g24_set_device_addr +0x3d3b 013880 call mouse_gpio_init +0x3d3c 013881 call mouse_param_init +0x3d3d 013882 call mouse_adc_init +0x3d3e 013883 call le_set_config_fixed_ltk +0x3d3f 013884 call le_set_justwork +0x3d40 013885 call le_set_fixed_ltk +0x3d41 013886 call le_set_config_read_authentication +0x3d42 013887 fetch mouse_flag_len ,mem_mouse_flag +0x3d43 013888 bbit1 mouse_enable_eeprom ,mouse_init_iic +0x3d44 013889 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak +0x3d45 013890 rtn +: 013892 mouse_init_iic: +0x3d46 013893 call iic_init_390k +0x3d47 013894 fetch mouse_flag_len ,mem_mouse_flag +0x3d48 013895 isolate1 mouse_enable_2k_eeprom ,pdata +0x3d49 013896 ncall clear_eeprom_size_2k ,true +0x3d4a 013897 call mouse_load_eeprom_dpi +0x3d4b 013898 call mouse_init_environment +0x3d4c 013899 call mouse_set_24g_addr_eeprom +0x3d4d 013900 branch iicd_read_eep_data +: 013902 mouse_wakeup_from_power: +0x3d4e 013903 fetch mouse_flag_len ,mem_mouse_flag +0x3d4f 013904 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power +0x3d50 013905 fetch 1 ,mem_wakup_from_power_flag +0x3d51 013906 isolate0 gpio_latch ,pdata +0x3d52 013907 nrtn true +: 013908 mouse_wakeup_no_from_power: +0x3d53 013909 fetch 1 ,mem_reconn_times_init +0x3d54 013910 store 1 ,mem_reconn_times +0x3d55 013911 fetch 1 ,mem_config_function_enable +0x3d56 013912 rtnbit1 enable_select_device_by_switch +: 013913 mouse_start_24g_mode: +0x3d57 013914 fetch mouse_flag_len ,mem_mouse_flag +0x3d58 013915 rtnbit0 mouse_enable_24g +0x3d59 013916 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start +0x3d5a 013917 branch g24_check_51cmd_start_24g +: 013918 le_mouse_bb_event_connect_complete: +0x3d5b 013919 fetch 1 ,mem_le_att_handle +0x3d5c 013920 sub pdata ,26 ,pdata +0x3d5d 013921 nrtn zero +0x3d5e 013922 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x3d5f 013923 call ui_ipc_send_cmd +: 013924 mouse_le_write_enable: +0x3d60 013925 arg write_req_enable_flag ,queue +0x3d61 013926 branch mouse_le_enable_connect_flag +: 013928 mouse_dpi_up: +0x3d62 013929 fetch 1 ,mem_mouse_dpi_button_state +0x3d63 013930 rtneq dpi_button_state_up +0x3d64 013931 jam dpi_button_state_up ,mem_mouse_dpi_button_state +0x3d65 013932 rtn +: 013933 mouse_dpi_config: +0x3d66 013934 fetch 1 ,mem_config_sensor_motion +0x3d67 013935 and pdata ,0x0f ,pdata +0x3d68 013936 store 1 ,mem_mouse_dpi +0x3d69 013937 branch mouse_seting_dpi + 2 +: 013940 mouse_dpi_cheak: +0x3d6a 013941 fetcht 1 ,mem_dpi_button_gpio +0x3d6b 013942 call gpio_get_bit +0x3d6c 013943 nbranch mouse_dpi_up ,true +: 013944 mouse_dpi_down: +0x3d6d 013945 fetch 1 ,mem_mouse_dpi_button_state +0x3d6e 013946 rtneq dpi_button_state_down +0x3d6f 013947 jam dpi_button_state_down ,mem_mouse_dpi_button_state +0x3d70 013948 fetch 1 ,mem_mouse_dpi +0x3d71 013949 increase 1 ,pdata +0x3d72 013950 and pdata ,0x03 ,pdata +0x3d73 013951 store 1 ,mem_mouse_dpi +0x3d74 013952 call mouse_seting_dpi +0x3d75 013953 fetch mouse_flag_len ,mem_mouse_flag +0x3d76 013954 bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi +0x3d77 013955 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi +0x3d78 013956 rtn +: 013957 mouse_before_store_flash_cpi: +0x3d79 013958 arg mouse_spi2_clk_gpio ,temp +0x3d7a 013959 call gpio_config_output +0x3d7b 013960 arg mouse_spi2_sdio_gpio ,temp +0x3d7c 013961 call gpio_config_output +0x3d7d 013962 branch mouse_store_flash_device_info +: 013964 mouse_seting_dpi: +0x3d7e 013965 bpatch patch1c_3 ,mem_patch1c +0x3d7f 013966 call mosue_dpi_led_blink_init +0x3d80 013967 fetch 1 ,mem_config_sensor_type +0x3d81 013968 beq p3610 ,mouse_seting_3610_dpi +0x3d82 013969 beq p3212 ,mouse_seting_3212_dpi +0x3d83 013970 fetch 1 ,mem_mouse_dpi +0x3d84 013971 beq mouse_dpi_level1 ,mouse_set_cpi1 +0x3d85 013972 beq mouse_dpi_level2 ,mouse_set_cpi2 +0x3d86 013973 beq mouse_dpi_level3 ,mouse_set_cpi3 +0x3d87 013974 beq mouse_dpi_level4 ,mouse_set_cpi4 +: 013975 mouse_set_cpi2: +0x3d88 013976 fetch 1 ,mem_320x_dpi_2 +0x3d89 013977 branch mouse_p3205_dpi +: 013978 mouse_set_cpi1: +0x3d8a 013979 fetch 1 ,mem_320x_dpi_1 +0x3d8b 013980 branch mouse_p3205_dpi +: 013981 mouse_set_cpi3: +0x3d8c 013982 fetch 1 ,mem_320x_dpi_3 +0x3d8d 013983 branch mouse_p3205_dpi +: 013984 mouse_set_cpi4: +0x3d8e 013985 fetch 1 ,mem_320x_dpi_4 +0x3d8f 013986 branch mouse_p3205_dpi +: 013987 moue_seting_cpi_count: +0x3d90 013988 fetch 1 ,mem_config_sensor_type +0x3d91 013989 rtneq p3065_xy +0x3d92 013990 fetch 1 ,mem_mouse_cpi_count +0x3d93 013991 increase 1 ,pdata +0x3d94 013992 store 1 ,mem_mouse_cpi_count +0x3d95 013993 rtn +: 013995 mouse_seting_3212_dpi: +0x3d96 013996 fetch 1 ,mem_mouse_dpi +0x3d97 013997 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +0x3d98 013998 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +0x3d99 013999 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +0x3d9a 014000 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 +: 014001 mouse_set_p3212_cpi2: +0x3d9b 014002 fetch 1 ,mem_3212_dpi_2 +0x3d9c 014003 branch mouse_p3212_dpi +: 014004 mouse_set_p3212_cpi1: +0x3d9d 014005 fetch 1 ,mem_3212_dpi_1 +0x3d9e 014006 branch mouse_p3212_dpi +: 014007 mouse_set_p3212_cpi3: +0x3d9f 014008 fetch 1 ,mem_3212_dpi_3 +0x3da0 014009 branch mouse_p3212_dpi +: 014010 mouse_set_p3212_cpi4: +0x3da1 014011 fetch 1 ,mem_3212_dpi_4 +: 014012 mouse_p3212_dpi: +0x3da2 014013 store 1 ,mem_mouse_cpi_count +0x3da3 014014 lshift8 pdata ,pdata +0x3da4 014015 copy pdata ,rega +0x3da5 014016 add pdata ,mouse_p3212_dpi_xaddress ,pdata +0x3da6 014017 call twspi_write +0x3da7 014018 copy rega ,pdata +0x3da8 014019 add pdata ,mouse_p3212_dpi_yaddress ,pdata +0x3da9 014020 branch twspi_write +: 014022 mouse_seting_3610_dpi: +0x3daa 014023 fetch 1 ,mem_mouse_dpi +0x3dab 014024 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 +0x3dac 014025 beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 +0x3dad 014026 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 +0x3dae 014027 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 +: 014028 mouse_set_p3610_cpi2: +0x3daf 014029 fetch 1 ,mem_3610_dpi_2 +0x3db0 014030 branch mouse_p3610_dpi +: 014031 mouse_set_p3610_cpi1: +0x3db1 014032 fetch 1 ,mem_3610_dpi_1 +0x3db2 014033 branch mouse_p3610_dpi +: 014034 mouse_set_p3610_cpi3: +0x3db3 014035 fetch 1 ,mem_3610_dpi_3 +0x3db4 014036 branch mouse_p3610_dpi +: 014037 mouse_set_p3610_cpi4: +0x3db5 014038 fetch 1 ,mem_3610_dpi_4 +: 014039 mouse_p3610_dpi: +0x3db6 014040 store 1 ,mem_mouse_cpi_count +0x3db7 014041 call mouse_spi_sdio_gpio_pollup +0x3db8 014042 fetch 1 ,mem_mouse_cpi_count +: 014043 mouse_reset_p3610_dpi: +0x3db9 014044 add pdata ,0x80 ,pdata +0x3dba 014045 lshift8 pdata ,pdata +0x3dbb 014046 add pdata ,mouse_p3610_dpi_address ,pdata +0x3dbc 014047 copy pdata ,rega +0x3dbd 014048 branch mouse_set_sensor_reg +: 014050 mouse_p3205_dpi: +0x3dbe 014051 store 1 ,mem_mouse_cpi_count +0x3dbf 014052 call moue_seting_cpi_count +0x3dc0 014053 fetch 1 ,mem_mouse_cpi_count +0x3dc1 014054 setarg mouse_dpi_address +0x3dc2 014055 call twspi_read +0x3dc3 014056 and pdata ,0xf8 ,temp +0x3dc4 014057 fetch 1 ,mem_mouse_cpi_count +0x3dc5 014058 iadd temp ,pdata +0x3dc6 014059 lshift8 pdata ,pdata +0x3dc7 014060 add pdata ,mouse_dpi_address ,pdata +0x3dc8 014061 branch twspi_write +: 014064 mouse_init_environment: +0x3dc9 014065 call app_initflag_check +0x3dca 014066 branch mouse_eeprom_load_recon_info ,zero +0x3dcb 014067 call mouse_ble_init_address +0x3dcc 014068 call mouse_store_eeprom_device_info +0x3dcd 014069 branch app_initflag_store +: 014072 mouse_24g_pairing_button: +0x3dce 014073 fetch 2 ,mem_24g_pairing_timer_count +0x3dcf 014074 rtn blank +0x3dd0 014075 fetch mouse_flag_len ,mem_mouse_flag +0x3dd1 014076 rtnbit0 mouse_enable_24g +0x3dd2 014077 rtnbit1 mosue_24g_pairing_flag +0x3dd3 014078 rtnmark1 mark_24g +0x3dd4 014079 call mouse_check_key_gpio +0x3dd5 014080 rtnne mouse_lmr_button +0x3dd6 014081 call mouse_devce_led_off +0x3dd7 014082 arg mosue_24g_pairing_flag ,queue +0x3dd8 014083 call mouse_enable_function_flag +0x3dd9 014084 setarg 0 +0x3dda 014085 store 2 ,mem_mouse_direct_timer +0x3ddb 014086 store 1 ,mem_mouse_send_blank_timer +0x3ddc 014087 call g24_set0_mem_check_dongle_times +0x3ddd 014089 fetch 2 ,mem_ui_state_map +0x3dde 014090 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +0x3ddf 014091 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x3de0 014092 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x3de1 014093 call mouse_stop_discovery +0x3de2 014094 branch g24_start_pairing_sm1 +: 014097 mouse_idle: +0x3de3 014098 call mouse_24g_pairing_button +0x3de4 014099 call ui_check_paring_button +0x3de5 014100 call mouse_dpi_cheak +0x3de6 014101 call mouse_usb_isr +0x3de7 014102 call mouse_wheel_check +0x3de8 014103 branch mouse_usb_mode +: 014104 mouse_usb_isr: +0x3de9 014105 fetch mouse_flag_len ,mem_mouse_flag +0x3dea 014106 rtnbit0 mouse_enable_usb +0x3deb 014107 call usb_isr +0x3dec 014108 branch usb_offline_state +: 014110 mouse_cheak_usb: +0x3ded 014111 hfetch 1 ,core_usb_addr +0x3dee 014112 bbit0 7 ,mouse_usb_no_exsit +0x3def 014113 bbit1 7 ,mouse_usb_exsit +0x3df0 014114 rtn +: 014115 mouse_usb_no_exsit: +0x3df1 014116 fetch 1 ,mem_usb_addr +0x3df2 014117 rtnbit0 7 +0x3df3 014118 branch soft_reset_chip +: 014119 mouse_usb_exsit: +0x3df4 014120 fetch 1 ,mem_usb_addr +0x3df5 014121 rtnbit1 7 +0x3df6 014122 branch mouse_stop_bluetooth_mode +: 014124 mouse_usb_mode: +0x3df7 014125 call mouse_cheak_usb +0x3df8 014126 hfetch 1 ,core_usb_addr +0x3df9 014127 store 1 ,mem_usb_addr +0x3dfa 014128 rtnbit0 7 +0x3dfb 014129 call mouse_clkn_check +0x3dfc 014130 fetch 4 ,mem_btclk_sensor +0x3dfd 014131 fetcht 1 ,mem_wire_usb_interval +0x3dfe 014132 iadd temp ,temp +0x3dff 014133 copy clkn_bt ,pdata +0x3e00 014134 isub temp ,null +0x3e01 014135 nrtn positive +0x3e02 014136 store 4 ,mem_btclk_sensor +0x3e03 014137 call mouse_motion +0x3e04 014138 nrtn user +0x3e05 014139 jam 4 ,mem_usb_tx_enable +0x3e06 014140 branch mouse_wired_to_usb +: 014142 mouse_clkn_check: +0x3e07 014143 fetcht 4 ,mem_btclk_sensor +0x3e08 014144 copy clkn_bt ,pdata +0x3e09 014145 isub temp ,null +0x3e0a 014146 ncall mouse_clkn_timeout ,positive +0x3e0b 014147 rtn +: 014148 mouse_clkn_timeout: +0x3e0c 014149 setarg 0 +0x3e0d 014150 store 4 ,mem_btclk_sensor +0x3e0e 014151 rtn +: 014155 mouse_wired_to_usb: +0x3e0f 014156 fetch 1 ,mem_usb_tx_enable +0x3e10 014157 rtnbit0 2 +0x3e11 014158 branch mouse_data_push +: 014159 mouse_data_push: +0x3e12 014160 hfetch 1 ,core_usb_addr +0x3e13 014161 rtnbit0 7 +0x3e14 014162 jam usb_ep2_ms ,mem_usb_ep2_data +0x3e15 014163 setarg ms_report_id +0x3e16 014164 store 1 ,mem_usb_mouse_data +0x3e17 014165 fetch 7 ,mem_mouse_key +0x3e18 014166 istore 7 ,contw +0x3e19 014167 rtn +: 014170 mouse_enable_clock_qdecoder: +0x3e1a 014171 hfetch 2 ,core_clkoff +0x3e1b 014172 set0 clock_off_qdecoder ,pdata +0x3e1c 014173 hstore 2 ,core_clkoff +0x3e1d 014174 rtn +: 014176 mouse_param_init: +0x3e1e 014177 setarg 0x8c00 +0x3e1f 014178 store 2 ,mem_ui_uuid_table +0x3e20 014179 setarg 0x8e7a +0x3e21 014180 store 2 ,mem_ui_le_uuid_table +0x3e22 014181 setarg 0x2402 +0x3e23 014182 store 2 ,mem_fcomp_mul +0x3e24 014183 setarg 0x2580 +0x3e25 014184 store 3 ,mem_class +0x3e26 014185 jam 3 ,mem_lpm_mult_timeout +0x3e27 014186 jam 8 ,mem_lpm_overhead +0x3e28 014187 jam dpi_button_state_up ,mem_select_device_button_statue +0x3e29 014188 setarg 0x0200 +0x3e2a 014189 store 2 ,mem_lpm_interval +0x3e2b 014190 jam 0x17 ,mem_le_local_mtu +0x3e2c 014191 jam 0x17 ,mem_le_remote_mtu +0x3e2d 014193 setarg 0x0a77 +0x3e2e 014194 store 2 ,mem_spi_init_clk +0x3e2f 014210 setsect 0 ,0x306 +0x3e30 014211 setsect 1 ,0x4440 +0x3e31 014212 setsect 2 ,0x10000 +0x3e32 014213 setsect 3 ,0x4408 +0x3e33 014214 store 9 ,mem_all_uuid_16bits +0x3e34 014215 setsect 0 ,0x1224 +0x3e35 014216 setsect 1 ,0x4000 +0x3e36 014217 setsect 2 ,0x0 +0x3e37 014218 istore 5 ,contw +0x3e38 014220 setsect 0 ,0x3ffff +0x3e39 014221 setsect 1 ,0x2fe23 +0x3e3a 014222 setsect 2 ,0x199d9 +0x3e3b 014223 setsect 3 ,0x20d +0x3e3c 014224 store 8 ,mem_features +0x3e3d 014226 setarg 0x012c +0x3e3e 014227 store 2 ,mem_24g_pairing_timer_count +0x3e3f 014228 call le_modified_name +0x3e40 014229 fetch mouse_flag_len ,mem_mouse_flag +0x3e41 014230 rtnbit0 mouse_enable_gpio_control_adc_sensor +0x3e42 014231 call mouse_sensor_set_angle +0x3e43 014232 branch mouse_select_adc +: 014234 mouse_sensor_set_angle: +0x3e44 014235 fetcht 1 ,mem_select_sensor_angle_gpio +0x3e45 014236 call gpio_config_input +0x3e46 014237 fetcht 1 ,mem_select_sensor_angle_gpio +0x3e47 014238 call gpio_get_bit +0x3e48 014239 jam mouse_3clk_angle ,mem_config_sensor_angle +0x3e49 014240 rtn true +0x3e4a 014241 jam mouse_12clk_angle ,mem_config_sensor_angle +0x3e4b 014242 rtn +: 014244 mouse_select_adc: +0x3e4c 014245 fetcht 1 ,mem_select_adc_gpio +0x3e4d 014246 call gpio_config_input +0x3e4e 014247 fetcht 1 ,mem_select_adc_gpio +0x3e4f 014248 call gpio_get_bit +0x3e50 014249 jam adc_config_vinlpm ,mem_adc_config_flag +0x3e51 014250 rtn true +0x3e52 014251 jam adc_config_gpio ,mem_adc_config_flag +0x3e53 014252 rtn +: 014255 mouse_adc_init: +0x3e54 014256 fetch 1 ,mem_adc_config_flag +0x3e55 014257 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm +0x3e56 014258 beq adc_config_hvin ,mouse_adc_init_data_hvin +0x3e57 014259 beq adc_config_gpio ,mouse_adc_init_data_io +0x3e58 014260 branch mouse_adc_init_data_vinlpm +: 014262 mouse_adc_init_data_vinlpm: +0x3e59 014263 fetcht 2 ,mem_2v_adc_vinlpm_data +0x3e5a 014264 fetch 2 ,mem_3v_adc_vinlpm_data +0x3e5b 014265 isub temp ,pdata +0x3e5c 014266 mul32 pdata ,20 ,pdata +0x3e5d 014267 div pdata ,100 +0x3e5e 014268 call wait_div_end +0x3e5f 014269 quotient pdata +0x3e60 014270 store 2 ,mem_adc_reference_voltage +0x3e61 014271 rtn +: 014272 mouse_adc_init_data_hvin: +0x3e62 014273 fetcht 2 ,mem_1v_adc_hvin_data +0x3e63 014274 fetch 2 ,mem_5v_adc_hvin_data +0x3e64 014275 isub temp ,pdata +0x3e65 014276 mul32 pdata ,230 ,pdata +0x3e66 014277 div pdata ,400 +0x3e67 014278 call wait_div_end +0x3e68 014279 quotient pdata +0x3e69 014280 store 2 ,mem_adc_reference_voltage +0x3e6a 014281 rtn +: 014282 mouse_adc_init_data_io: +0x3e6b 014283 fetch 2 ,mem_1v_adc_io_data +0x3e6c 014284 store 2 ,mem_adc_reference_voltage +0x3e6d 014285 rtn +: 014286 mouse_gpio_init: +0x3e6e 014287 fetcht 1 ,mem_eeprom_wp_gpio +0x3e6f 014288 call gpio_config_output +0x3e70 014289 call usb_offline_check_init +0x3e71 014290 fetcht 1 ,mem_lbutton_gpio +0x3e72 014291 call gpio_config_input +0x3e73 014292 fetcht 1 ,mem_rbutton_gpio +0x3e74 014293 call gpio_config_input +0x3e75 014294 fetcht 1 ,mem_mbutton_gpio +0x3e76 014295 call gpio_config_input +0x3e77 014296 fetcht 1 ,mem_sensor_data_gpio +0x3e78 014297 call gpio_config_input +0x3e79 014299 fetcht 1 ,mem_sensor_reset_gpio +0x3e7a 014300 call gpio_config_output +0x3e7b 014302 fetcht 1 ,mem_whee_a_data_gpio +0x3e7c 014303 call gpio_config_input +0x3e7d 014305 fetcht 1 ,mem_whee_b_data_gpio +0x3e7e 014306 call gpio_config_input +0x3e7f 014308 fetcht 1 ,mem_whee_ta_data_gpio +0x3e80 014309 call gpio_config_input +0x3e81 014310 fetcht 1 ,mem_whee_tb_data_gpio +0x3e82 014311 call gpio_config_input +0x3e83 014313 fetcht 1 ,mem_bk_button_gpio +0x3e84 014314 call gpio_config_input +0x3e85 014315 fetcht 1 ,mem_fw_button_gpio +0x3e86 014316 call gpio_config_input +0x3e87 014318 fetcht 1 ,mem_config_low_voltage_alarm_gpio +0x3e88 014319 call gpio_config_output +0x3e89 014321 fetcht 1 ,mem_config_device1_led_gpio +0x3e8a 014322 call gpio_config_output +0x3e8b 014324 fetcht 1 ,mem_config_device2_led_gpio +0x3e8c 014325 call gpio_config_output +0x3e8d 014327 fetcht 1 ,mem_config_device3_led_gpio +0x3e8e 014328 call gpio_config_output +0x3e8f 014330 fetcht 1 ,mem_dpi_led_gpio +0x3e90 014331 call gpio_config_output +0x3e91 014333 fetcht 1 ,mem_config_select_device_button_gpio +0x3e92 014334 call gpio_config_input +0x3e93 014336 fetcht 1 ,mem_config_bt_button_gpio +0x3e94 014337 call gpio_config_input +0x3e95 014339 fetcht 1 ,mem_dpi_button_gpio +0x3e96 014340 branch gpio_config_input +: 014342 mouse_wheel_gpio_set_wake: +0x3e97 014343 fetcht 1 ,mem_whee_a_data_gpio +0x3e98 014344 call gpio_set_wake_by_current_state +0x3e99 014345 fetcht 1 ,mem_whee_b_data_gpio +0x3e9a 014346 call gpio_set_wake_by_current_state +0x3e9b 014347 fetcht 1 ,mem_whee_ta_data_gpio +0x3e9c 014348 call gpio_set_wake_by_current_state +0x3e9d 014349 fetcht 1 ,mem_whee_tb_data_gpio +0x3e9e 014350 branch gpio_set_wake_by_current_state +: 014352 mouse_before_hibernate_wheel_gpio_set: +0x3e9f 014353 fetcht 1 ,mem_whee_a_data_gpio +0x3ea0 014354 call mouse_gpio_set_pupd_by_input +0x3ea1 014355 fetcht 1 ,mem_whee_b_data_gpio +0x3ea2 014356 call mouse_gpio_set_pupd_by_input +0x3ea3 014357 fetcht 1 ,mem_whee_ta_data_gpio +0x3ea4 014358 call mouse_gpio_set_pupd_by_input +0x3ea5 014359 fetcht 1 ,mem_whee_tb_data_gpio +0x3ea6 014360 branch mouse_gpio_set_pupd_by_input +: 014362 mouse_gpio_set_pupd_by_input: +0x3ea7 014363 sub temp ,ui_button_gpio_disable ,null +0x3ea8 014364 rtn zero +0x3ea9 014365 and temp ,0x7f ,queue +0x3eaa 014366 hfetch 4 ,core_gpio_in +0x3eab 014367 qisolate1 pdata +0x3eac 014368 hfetch 4 ,core_gpio_pu0 +0x3ead 014369 qsetflag true ,pdata +0x3eae 014370 hstore 4 ,core_gpio_pu0 +0x3eaf 014371 hfetch 4 ,core_gpio_pd0 +0x3eb0 014372 nqsetflag true ,pdata +0x3eb1 014373 hstore 4 ,core_gpio_pd0 +0x3eb2 014374 rtn +: 014376 mouse_before_hibernate: +0x3eb3 014377 enable user +0x3eb4 014378 hfetch 4 ,0x8138 +0x3eb5 014379 setflag user ,26 ,pdata +0x3eb6 014380 hstore 4 ,core_lpm_reg +0x3eb7 014381 call lpm_write_ctrl +0x3eb8 014382 call mouse_devce_led_off +0x3eb9 014383 call mouse_before_hibernate_wheel_gpio_set +0x3eba 014385 branch mouse_lpm_before_common +: 014389 mouse_process_lpm_before: +0x3ebb 014390 call mouse_lpm_before_common +0x3ebc 014391 fetch 1 ,mem_lpm_current_mult +0x3ebd 014392 nrtn blank +0x3ebe 014393 branch gpio_clr_wake +: 014395 mouse_lpm_before_common: +0x3ebf 014396 call mouse_wheel_check +0x3ec0 014397 arg mouse_spi1_clk_gpio ,temp +0x3ec1 014398 fetch mouse_flag_len ,mem_mouse_flag +0x3ec2 014399 isolate1 mouse_enable_spi2 ,pdata +0x3ec3 014400 call mouse_spi_clk_gpio ,true +0x3ec4 014401 call gpio_config_output +0x3ec5 014402 call twspi_disable +0x3ec6 014406 fetcht 1 ,mem_lbutton_gpio +0x3ec7 014407 call gpio_set_wake_by_current_state +0x3ec8 014408 fetcht 1 ,mem_rbutton_gpio +0x3ec9 014409 call gpio_set_wake_by_current_state +0x3eca 014410 fetcht 1 ,mem_mbutton_gpio +0x3ecb 014411 call gpio_set_wake_by_current_state +0x3ecc 014413 fetcht 1 ,mem_bk_button_gpio +0x3ecd 014414 call gpio_set_wake_by_current_state +0x3ece 014415 fetcht 1 ,mem_fw_button_gpio +0x3ecf 014416 call gpio_set_wake_by_current_state +0x3ed0 014417 fetcht 1 ,mem_dpi_button_gpio +0x3ed1 014418 call gpio_set_wake_by_current_state +0x3ed2 014419 fetcht 1 ,mem_config_select_device_button_gpio +0x3ed3 014420 call gpio_set_wake_by_current_state +0x3ed4 014421 fetcht 1 ,mem_whee_a_data_gpio +0x3ed5 014422 call gpio_set_wake_by_current_state +0x3ed6 014423 fetcht 1 ,mem_whee_b_data_gpio +0x3ed7 014424 call gpio_set_wake_by_current_state +0x3ed8 014425 fetcht 1 ,mem_whee_ta_data_gpio +0x3ed9 014426 call gpio_set_wake_by_current_state +0x3eda 014427 fetcht 1 ,mem_whee_tb_data_gpio +0x3edb 014428 call gpio_set_wake_by_current_state +0x3edc 014429 fetcht 1 ,mem_sensor_data_gpio +0x3edd 014430 branch gpio_set_wake +: 014434 mouse_spi_clk_gpio: +0x3ede 014435 arg mouse_spi2_clk_gpio ,temp +0x3edf 014436 rtn +: 014438 mouse_wheel_check: +0x3ee0 014439 bpatch patch1c_4 ,mem_patch1c +0x3ee1 014440 call mouse_t_wheel_scan +0x3ee2 014441 call mouse_wheel_scan +0x3ee3 014442 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3ee4 014443 fetcht 1 ,mem_wheel_tb_old_pinlevel +0x3ee5 014444 store 1 ,mem_wheel_tb_old_pinlevel +0x3ee6 014445 isub temp ,null +0x3ee7 014446 nbranch app_lpm_wake_auto_lock ,zero +0x3ee8 014447 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3ee9 014448 fetcht 1 ,mem_mwheel_b_old_pinlevel +0x3eea 014449 store 1 ,mem_mwheel_b_old_pinlevel +0x3eeb 014450 isub temp ,null +0x3eec 014451 nbranch app_lpm_wake_auto_lock ,zero +0x3eed 014452 rtn +: 014453 mouse_t_wheel_scan: +0x3eee 014454 fetch 1 ,mem_whee_ta_data_gpio +0x3eef 014455 rtneq gpio_disable +0x3ef0 014456 arg 0 ,rega +0x3ef1 014457 fetcht 1 ,mem_whee_ta_data_gpio +0x3ef2 014458 call gpio_get_bit +0x3ef3 014459 setflag true ,0 ,rega +0x3ef4 014460 fetcht 1 ,mem_whee_tb_data_gpio +0x3ef5 014461 call gpio_get_bit +0x3ef6 014462 setflag true ,1 ,rega +0x3ef7 014463 copy rega ,pdata +0x3ef8 014464 store 1 ,mem_wheel_tb_new_pinlevel +0x3ef9 014465 beq 0x01 ,mouse_t_wheel_scan_judge1 +0x3efa 014466 beq 0x02 ,mouse_t_wheel_scan_judge2 +0x3efb 014467 fetch 1 ,mem_wheel_tog +0x3efc 014468 bbit1 7 ,mouse_t_wheel_scan_judge3 +0x3efd 014469 rtn +: 014471 mouse_t_wheel_scan_judge1: +0x3efe 014472 fetch 1 ,mem_wheel_tb_old_pinlevel +0x3eff 014473 beq 0 ,mouse_t_wheel_scan_judge11 +0x3f00 014474 beq 3 ,mouse_t_wheel_scan_judge12 +0x3f01 014475 rtn +: 014476 mouse_t_wheel_scan_judge2: +0x3f02 014477 fetch 1 ,mem_wheel_tb_old_pinlevel +0x3f03 014478 beq 0 ,mouse_t_wheel_scan_judge21 +0x3f04 014479 beq 3 ,mouse_t_wheel_scan_judge22 +0x3f05 014480 rtn +: 014481 mouse_t_wheel_scan_judge11: +0x3f06 014482 jam 0x82 ,mem_wheel_tog +0x3f07 014483 rtn +: 014484 mouse_t_wheel_scan_judge12: +0x3f08 014485 jam 0x81 ,mem_wheel_tog +0x3f09 014486 rtn +: 014487 mouse_t_wheel_scan_judge21: +0x3f0a 014488 jam 0x80 ,mem_wheel_tog +0x3f0b 014489 rtn +: 014490 mouse_t_wheel_scan_judge22: +0x3f0c 014491 jam 0x83 ,mem_wheel_tog +0x3f0d 014492 rtn +: 014493 mouse_t_wheel_scan_judge3: +0x3f0e 014494 fetch 1 ,mem_wheel_tog +0x3f0f 014495 set0 7 ,pdata +0x3f10 014496 store 1 ,mem_wheel_tog +0x3f11 014497 beq 0 ,mouse_t_wheel_scan_judge30 +0x3f12 014498 beq 1 ,mouse_t_wheel_scan_judge31 +0x3f13 014499 beq 2 ,mouse_t_wheel_scan_judge32 +0x3f14 014500 beq 3 ,mouse_t_wheel_scan_judge33 +0x3f15 014501 rtn +: 014502 mouse_t_wheel_scan_judge30: +0x3f16 014503 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f17 014504 beq 3 ,mouse_wheel_t_forward +0x3f18 014505 rtn +: 014506 mouse_t_wheel_scan_judge31: +0x3f19 014507 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f1a 014508 beq 0 ,mouse_wheel_t_forward +0x3f1b 014509 rtn +: 014510 mouse_t_wheel_scan_judge32: +0x3f1c 014511 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f1d 014512 beq 3 ,mouse_wheel_t_back +0x3f1e 014513 rtn +: 014514 mouse_t_wheel_scan_judge33: +0x3f1f 014515 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f20 014516 beq 0 ,mouse_wheel_t_back +0x3f21 014517 rtn +: 014518 mouse_wheel_t_forward: +0x3f22 014519 fetch 1 ,mem_mouse_tz_data_count1 +0x3f23 014520 increase 1 ,pdata +0x3f24 014521 store 1 ,mem_mouse_tz_data_count1 +0x3f25 014522 sub pdata ,1 ,null +0x3f26 014523 rtn positive +0x3f27 014524 jam 0 ,mem_mouse_tz_data_count1 +0x3f28 014525 fetch 1 ,mem_mouse_tz_data +0x3f29 014526 increase 1 ,pdata +0x3f2a 014527 store 1 ,mem_mouse_tz_data +0x3f2b 014528 rtn +: 014529 mouse_wheel_t_back: +0x3f2c 014530 fetch 1 ,mem_mouse_tz_data_count +0x3f2d 014531 increase 1 ,pdata +0x3f2e 014532 store 1 ,mem_mouse_tz_data_count +0x3f2f 014533 sub pdata ,1 ,null +0x3f30 014534 rtn positive +0x3f31 014535 jam 0 ,mem_mouse_tz_data_count +0x3f32 014536 fetch 1 ,mem_mouse_tz_data +0x3f33 014537 increase -1 ,pdata +0x3f34 014538 store 1 ,mem_mouse_tz_data +0x3f35 014539 rtn +: 014542 mouse_wheel_scan: +0x3f36 014543 fetch 1 ,mem_whee_a_data_gpio +0x3f37 014544 rtneq gpio_disable +0x3f38 014545 arg 0 ,rega +0x3f39 014546 fetcht 1 ,mem_whee_a_data_gpio +0x3f3a 014547 call gpio_get_bit +0x3f3b 014548 setflag true ,0 ,rega +0x3f3c 014549 fetcht 1 ,mem_whee_b_data_gpio +0x3f3d 014550 call gpio_get_bit +0x3f3e 014551 setflag true ,1 ,rega +0x3f3f 014552 copy rega ,pdata +0x3f40 014553 store 1 ,mem_mwheel_b_new_pinlevel +0x3f41 014554 beq 0x01 ,mouse_wheel_scan_judge1 +0x3f42 014555 beq 0x02 ,mouse_wheel_scan_judge2 +0x3f43 014556 fetch 1 ,mem_mwheel_tog +0x3f44 014557 bbit1 7 ,mouse_wheel_scan_judge3 +0x3f45 014558 rtn +: 014560 mouse_wheel_scan_judge1: +0x3f46 014561 fetch 1 ,mem_mwheel_b_old_pinlevel +0x3f47 014562 beq 0 ,mouse_wheel_scan_judge11 +0x3f48 014563 beq 3 ,mouse_wheel_scan_judge12 +0x3f49 014564 rtn +: 014565 mouse_wheel_scan_judge2: +0x3f4a 014566 fetch 1 ,mem_mwheel_b_old_pinlevel +0x3f4b 014567 beq 0 ,mouse_wheel_scan_judge21 +0x3f4c 014568 beq 3 ,mouse_wheel_scan_judge22 +0x3f4d 014569 rtn +: 014570 mouse_wheel_scan_judge11: +0x3f4e 014571 jam 0x82 ,mem_mwheel_tog +0x3f4f 014572 rtn +: 014573 mouse_wheel_scan_judge12: +0x3f50 014574 jam 0x81 ,mem_mwheel_tog +0x3f51 014575 rtn +: 014576 mouse_wheel_scan_judge21: +0x3f52 014577 jam 0x80 ,mem_mwheel_tog +0x3f53 014578 rtn +: 014579 mouse_wheel_scan_judge22: +0x3f54 014580 jam 0x83 ,mem_mwheel_tog +0x3f55 014581 rtn +: 014582 mouse_wheel_scan_judge3: +0x3f56 014583 fetch 1 ,mem_mwheel_tog +0x3f57 014584 set0 7 ,pdata +0x3f58 014585 store 1 ,mem_mwheel_tog +0x3f59 014586 beq 0 ,mouse_wheel_scan_judge30 +0x3f5a 014587 beq 1 ,mouse_wheel_scan_judge31 +0x3f5b 014588 beq 2 ,mouse_wheel_scan_judge32 +0x3f5c 014589 beq 3 ,mouse_wheel_scan_judge33 +0x3f5d 014590 rtn +: 014591 mouse_wheel_scan_judge30: +0x3f5e 014592 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f5f 014593 beq 3 ,mouse_wheel_forward +0x3f60 014594 rtn +: 014595 mouse_wheel_scan_judge31: +0x3f61 014596 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f62 014597 beq 0 ,mouse_wheel_forward +0x3f63 014598 rtn +: 014599 mouse_wheel_scan_judge32: +0x3f64 014600 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f65 014601 beq 3 ,mouse_wheel_back +0x3f66 014602 rtn +: 014603 mouse_wheel_scan_judge33: +0x3f67 014604 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f68 014605 beq 0 ,mouse_wheel_back +0x3f69 014606 rtn +: 014607 mouse_wheel_forward: +0x3f6a 014608 jam 0 ,mem_mouse_z_data_count1 +0x3f6b 014609 fetch 1 ,mem_mouse_z_data +0x3f6c 014610 increase 1 ,pdata +0x3f6d 014611 store 1 ,mem_mouse_z_data +0x3f6e 014612 rtn +: 014613 mouse_wheel_back: +0x3f6f 014614 jam 0 ,mem_mouse_z_data_count +0x3f70 014615 fetch 1 ,mem_mouse_z_data +0x3f71 014616 increase -1 ,pdata +0x3f72 014617 store 1 ,mem_mouse_z_data +0x3f73 014618 rtn +: 014621 mouse_hid_connected: +0x3f74 014622 setarg hid_handshake_timeout +0x3f75 014623 store 1 ,mem_hid_handshake_timer_count +0x3f76 014624 rtn +: 014626 mouse_send_process: +0x3f77 014627 fetch 1 ,mem_app_handshake_flag +0x3f78 014628 rtn blank +0x3f79 014629 call l2cap_malloc_is_fifo_nearly_full +0x3f7a 014630 nrtn blank +0x3f7b 014631 fetch mouse_flag_len ,mem_mouse_flag +0x3f7c 014632 bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data +0x3f7d 014633 bbit1 mouse_select_device_flag ,mouse_send_empty_data +0x3f7e 014634 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +0x3f7f 014635 call mouse_motion +0x3f80 014636 nrtn user +: 014637 mouse_send_data: +0x3f81 014638 arg 9 ,rega +0x3f82 014639 call hid_malloc_tx_buff +0x3f83 014640 fetch 2 ,mem_hid_int_remote_cid +0x3f84 014641 istore 2 ,contw +0x3f85 014642 setarg 0x02a1 +0x3f86 014643 istore 2 ,contw +0x3f87 014644 fetch 7 ,mem_mouse_key +0x3f88 014645 istore 7 ,contw +0x3f89 014646 rtn +: 014649 mouse_send_empty_data: +0x3f8a 014650 setarg 0 +0x3f8b 014651 store 7 ,mem_mouse_key +0x3f8c 014652 branch mouse_send_data +: 014655 mouse_no_data_timer_init: +0x3f8d 014656 fetch 2 ,mem_mouse_no_data_timeout +0x3f8e 014657 store 2 ,mem_mouse_no_data_timer +0x3f8f 014658 rtn +: 014661 mouse_fill_data_le: +0x3f90 014662 bpatch patch1c_5 ,mem_patch1c +0x3f91 014663 arg 7 ,rega +0x3f92 014664 fetcht 2 ,mem_le_notify_handle +0x3f93 014665 call le_att_malloc_tx_notify +0x3f94 014666 fetch 7 ,mem_mouse_key +0x3f95 014667 istore 7 ,contw +0x3f96 014668 rtn +: 014670 mouse_motion: +0x3f97 014671 bpatch patch1c_6 ,mem_patch1c +0x3f98 014672 disable user +0x3f99 014673 setarg 0 +0x3f9a 014674 store 6 ,mem_mouse_x +0x3f9b 014675 call mouse_cheak_sensor_data +0x3f9c 014676 call mouse_zwheel +0x3f9d 014677 call mouse_t_zwheel +0x3f9e 014678 call mouse_key +0x3f9f 014679 nrtn user +0x3fa0 014680 call mouse_no_data_timer_init +0x3fa1 014681 arg mouse_statue_up_flag ,queue +0x3fa2 014682 branch mouse_enable_function_flag +: 014684 motion_6clk_direction_dispose: +0x3fa3 014685 fetch 2 ,mem_mouse_x +0x3fa4 014686 sub pdata ,0 ,pdata +0x3fa5 014687 store 2 ,mem_mouse_x +0x3fa6 014688 branch enable_user +: 014689 motion_12clk_direction_dispose: +0x3fa7 014690 fetch 2 ,mem_mouse_y +0x3fa8 014691 sub pdata ,0 ,pdata +0x3fa9 014692 store 2 ,mem_mouse_y +0x3faa 014693 branch enable_user +: 014694 motion_9clk_direction_dispose: +0x3fab 014695 fetch 2 ,mem_mouse_y +0x3fac 014696 sub pdata ,0 ,pdata +0x3fad 014697 store 2 ,mem_mouse_y +0x3fae 014698 fetch 2 ,mem_mouse_x +0x3faf 014699 sub pdata ,0 ,pdata +0x3fb0 014700 store 2 ,mem_mouse_x +0x3fb1 014701 call mouse_sensor_data_swap_places +0x3fb2 014702 branch enable_user +: 014703 motion_3clk_direction_dispose: +0x3fb3 014704 call mouse_sensor_data_swap_places +0x3fb4 014705 branch enable_user +: 014706 mouse_cheak_sensor_data: +0x3fb5 014707 fetch 1 ,mem_spi_write_flash_sm +0x3fb6 014708 rtnne flash_sm_no_buys +0x3fb7 014709 fetch 1 ,mem_config_sensor_type +0x3fb8 014710 beq p3205 ,mouse_p32xx_sensor_motion +0x3fb9 014711 beq p3065 ,mouse_p32xx_sensor_motion +0x3fba 014712 beq ka8 ,mouse_p32xx_sensor_motion +0x3fbb 014713 beq p3204 ,mouse_p32xx_sensor_motion +0x3fbc 014714 beq p3212 ,mouse_p3212_sensor_motion +0x3fbd 014715 beq p3610 ,mouse_p3610_sensor_motion +0x3fbe 014716 beq p3065_xy ,mouse_p32xx_sensor_motion +0x3fbf 014717 branch mouse_p32xx_sensor_motion +: 014719 mouse_clear_sensor_data: +0x3fc0 014720 fetch 1 ,mem_mouse_move_flag +0x3fc1 014721 call mouse_read_sensor_common ,blank +0x3fc2 014722 jam 1 ,mem_mouse_move_flag +0x3fc3 014723 rtn +: 014726 mouse_p3212_sensor_motion: +0x3fc4 014727 call mouse_clear_sensor_data +0x3fc5 014728 fetcht 1 ,mem_sensor_data_gpio +0x3fc6 014729 call gpio_get_bit +0x3fc7 014730 nrtn true +: 014731 mouse_p3212_sensor_motion_next: +0x3fc8 014732 setarg pan_reg_pid_l +0x3fc9 014733 call twspi_read +0x3fca 014734 bne p32xx_id1 ,mouse_twspi_reset +0x3fcb 014735 setarg pan_reg_motion_staus +0x3fcc 014736 call twspi_read +0x3fcd 014737 rtnbit0 7 +0x3fce 014738 call mouse_read_sensor_common +0x3fcf 014739 call mouse_read_3212sensor_xy_high +0x3fd0 014740 store 1 ,mem_mouse_xy_h +0x3fd1 014741 rshift4 pdata ,pdata +0x3fd2 014742 call extsign_bit3 +0x3fd3 014743 store 1 ,mem_mouse_x + 1 +0x3fd4 014744 fetch 1 ,mem_mouse_xy_h +0x3fd5 014745 and pdata ,0x0f ,pdata +0x3fd6 014746 call extsign_bit3 +0x3fd7 014747 store 1 ,mem_mouse_y + 1 +0x3fd8 014748 fetch 1 ,mem_config_sensor_angle +0x3fd9 014749 beq mouse_6clk_angle ,motion_6clk_direction_dispose +0x3fda 014750 beq mouse_9clk_angle ,motion_9clk_direction_dispose +0x3fdb 014751 beq mouse_12clk_angle ,motion_12clk_direction_dispose +0x3fdc 014752 beq mouse_3clk_angle ,motion_3clk_direction_dispose +0x3fdd 014753 rtn +: 014755 mouse_read_3212sensor_xy_high: +0x3fde 014756 setarg 0x12 +0x3fdf 014757 branch twspi_read +: 014759 mouse_p3065_judge: +0x3fe0 014760 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 +0x3fe1 014761 branch mouse_twspi_reset +: 014763 mouse_p32xx_sensor_motion: +0x3fe2 014764 call mouse_clear_sensor_data +0x3fe3 014765 disable user +0x3fe4 014766 fetcht 1 ,mem_sensor_data_gpio +0x3fe5 014767 call gpio_get_bit +0x3fe6 014768 nrtn true +: 014769 mouse_p32xx_sensor_motion_2: +0x3fe7 014770 setarg pan_reg_pid_l +0x3fe8 014771 call twspi_read +0x3fe9 014772 bne p32xx_id1 ,mouse_p3065_judge +: 014773 mouse_p32xx_sensor_motion_1: +0x3fea 014774 setarg pan_reg_motion_staus +0x3feb 014775 call twspi_read +0x3fec 014776 rtnbit0 7 +0x3fed 014777 call mouse_read_sensor_common +0x3fee 014778 fetch 1 ,mem_mouse_x +0x3fef 014779 call extsign +0x3ff0 014780 store 2 ,mem_mouse_x +0x3ff1 014781 fetch 1 ,mem_mouse_y +0x3ff2 014782 call extsign +0x3ff3 014783 store 2 ,mem_mouse_y +0x3ff4 014784 fetch 1 ,mem_config_sensor_angle +0x3ff5 014785 beq mouse_6clk_angle ,motion32xx_6clk_direction_selection +0x3ff6 014786 beq mouse_9clk_angle ,motion32xx_9clk_direction_selection +0x3ff7 014787 beq mouse_12clk_angle ,motion32xx_12clk_direction_selection +0x3ff8 014788 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection +0x3ff9 014789 rtn +: 014791 motion32xx_6clk_direction_selection: +0x3ffa 014792 call motion_6clk_direction_dispose +0x3ffb 014793 branch mouse_sensor_sdio_low +: 014794 motion32xx_9clk_direction_selection: +0x3ffc 014795 call motion_9clk_direction_dispose +0x3ffd 014796 branch mouse_sensor_sdio_low +: 014797 motion32xx_12clk_direction_selection: +0x3ffe 014798 call motion_12clk_direction_dispose +0x3fff 014799 branch mouse_sensor_sdio_low +: 014800 motion32xx_3clk_direction_selection: +0x4000 014801 call motion_3clk_direction_dispose +0x4001 014802 branch mouse_sensor_sdio_low +: 014804 mouse_sensor_data_swap_places: +0x4002 014805 fetch 2 ,mem_mouse_y +0x4003 014806 fetcht 2 ,mem_mouse_x +0x4004 014807 store 2 ,mem_mouse_x +0x4005 014808 storet 2 ,mem_mouse_y +0x4006 014809 rtn +: 014811 mouse_p3610sensor_read: +0x4007 014812 call spi_ncs_enable +0x4008 014813 nop 100 +0x4009 014814 copy regb ,pdata +0x400a 014815 call twspi_read +0x400b 014816 copy pdata ,regb +0x400c 014817 call spi_ncs_disable +0x400d 014818 nop 100 +0x400e 014819 copy regb ,pdata +0x400f 014820 rtn +: 014821 mouse_p3610_sensor_motion: +0x4010 014822 disable user +0x4011 014823 fetcht 1 ,mem_sensor_data_gpio +0x4012 014824 call gpio_get_bit +0x4013 014825 nrtn true +0x4014 014826 arg pan_reg_motion_staus ,regb +0x4015 014827 call mouse_p3610sensor_read +0x4016 014828 rtnbit0 7 +0x4017 014829 arg pan_reg_pid_l ,regb +0x4018 014830 call mouse_p3610sensor_read +0x4019 014831 store 1 ,mem_sensor_id1 +0x401a 014832 bne p3610_id1 ,mouse_init_3610sensor_reset +0x401b 014833 fetch 1 ,mem_mouse_move_flag +0x401c 014834 call mouse_read_sensor3610_data ,blank +0x401d 014835 jam 1 ,mem_mouse_move_flag +0x401e 014836 call mouse_read_sensor3610_data +0x401f 014837 fetch 1 ,mem_mouse_xy_h +0x4020 014838 rshift4 pdata ,pdata +0x4021 014839 call extsign_bit3 +0x4022 014840 store 1 ,mem_mouse_x + 1 +0x4023 014841 fetch 1 ,mem_mouse_xy_h +0x4024 014842 and pdata ,0x0f ,pdata +0x4025 014843 call extsign_bit3 +0x4026 014844 store 1 ,mem_mouse_y + 1 +0x4027 014845 fetch 1 ,mem_config_sensor_angle +0x4028 014846 beq 0 ,motion3610_6clk_direction_selection +0x4029 014847 beq 1 ,motion3610_9clk_direction_selection +0x402a 014848 beq 2 ,motion3610_12clk_direction_selection +0x402b 014849 beq 3 ,motion3610_3clk_direction_selection +0x402c 014850 rtn +: 014852 mouse_3610_smart_select: +0x402d 014853 fetch 1 ,mem_sensor_smart_flag +0x402e 014854 beq p3610_smart_enable ,mouse_3610_smart_disable +0x402f 014855 beq p3610_smart_disable ,mouse_3610_smart_enable +0x4030 014856 rtn +: 014859 motion3610_6clk_direction_selection: +0x4031 014860 call motion_6clk_direction_dispose +0x4032 014861 branch mouse_3610_smart_select +: 014863 motion3610_12clk_direction_selection: +0x4033 014864 call motion_12clk_direction_dispose +0x4034 014865 branch mouse_3610_smart_select +: 014867 motion3610_9clk_direction_selection: +0x4035 014868 call motion_9clk_direction_dispose +0x4036 014869 branch mouse_3610_smart_select +: 014871 motion3610_3clk_direction_selection: +0x4037 014872 call motion_3clk_direction_dispose +0x4038 014873 branch mouse_3610_smart_select +: 014875 mouse_read_sensor3610_data: +0x4039 014876 call spi_ncs_enable +0x403a 014877 call mouse_read_sensor_common +0x403b 014878 arg 5 ,pdata +0x403c 014879 call twspi_read +0x403d 014880 store 1 ,mem_mouse_xy_h +0x403e 014881 arg 7 ,pdata +0x403f 014882 call twspi_read +0x4040 014883 store 1 ,mem_sensor_shutter_hi +0x4041 014884 arg 8 ,pdata +0x4042 014885 call twspi_read +0x4043 014886 store 1 ,mem_sensor_shutter_lo +0x4044 014887 branch spi_ncs_disable +: 014890 mouse_3610_smart_enable: +0x4045 014891 fetch 1 ,mem_sensor_shutter_hi +0x4046 014892 rtnne 0 +0x4047 014893 fetch 1 ,mem_sensor_shutter_lo +0x4048 014894 sub pdata ,45 ,null +0x4049 014895 rtn positive +0x404a 014896 jam p3610_smart_enable ,mem_sensor_smart_flag +0x404b 014897 setarg 0xba41 +0x404c 014898 call sensor_write +0x404d 014899 setarg 0x0032 +0x404e 014900 call sensor_write +0x404f 014901 setarg 0xb541 +0x4050 014902 branch sensor_write +: 014903 mouse_3610_smart_disable: +0x4051 014904 fetch 1 ,mem_sensor_shutter_hi +0x4052 014905 rtnne 0 +0x4053 014906 fetch 1 ,mem_sensor_shutter_lo +0x4054 014907 sub pdata ,45 ,null +0x4055 014908 nrtn positive +0x4056 014909 jam p3610_smart_disable ,mem_sensor_smart_flag +0x4057 014910 setarg 0xba41 +0x4058 014911 call sensor_write +0x4059 014912 setarg 0x8032 +0x405a 014913 call sensor_write +0x405b 014914 setarg 0xb541 +0x405c 014915 branch sensor_write +: 014919 mouse_read_sensor_common: +0x405d 014920 arg pan_reg_delta_x ,pdata +0x405e 014921 call twspi_read +0x405f 014922 store 2 ,mem_mouse_x +0x4060 014923 arg pan_reg_delta_y ,pdata +0x4061 014924 call twspi_read +0x4062 014925 store 2 ,mem_mouse_y +0x4063 014926 rtn +: 014928 mouse_set_qdecoder_x: +0x4064 014929 arg mouse_default_xa_gpio ,temp +0x4065 014930 call gpio_config_input +0x4066 014931 arg mouse_default_xa_gpio ,temp +0x4067 014932 call gpio_get_bit +0x4068 014933 rtn true +0x4069 014934 hfetch 1 ,core_qdec_cntx +0x406a 014935 set1 4 ,pdata +0x406b 014936 hstore 1 ,core_qdec_cntx +0x406c 014937 rtn +: 014939 mouse_hardware_zwheel: +0x406d 014940 fetcht 1 ,mem_mouse_z_data +0x406e 014941 hfetch 1 ,core_qdec_cntx +0x406f 014942 iadd temp ,pdata +0x4070 014943 rtn blank +0x4071 014944 store 1 ,mem_mouse_z +0x4072 014945 jam 0 ,mem_mouse_z_data +0x4073 014946 branch enable_user +: 014947 mouse_hardware_zwheel_beforelpm: +0x4074 014948 fetcht 1 ,mem_mouse_z_data +0x4075 014949 hfetch 1 ,core_qdec_cntx +0x4076 014950 iadd temp ,pdata +0x4077 014951 store 1 ,mem_mouse_z_data +0x4078 014952 rtn +: 014953 mouse_zwheel: +0x4079 014954 fetch 1 ,mem_mouse_z_data +0x407a 014955 rtn blank +0x407b 014956 store 1 ,mem_mouse_z +0x407c 014957 jam 0 ,mem_mouse_z_data +0x407d 014958 branch enable_user +: 014960 mouse_t_zwheel: +0x407e 014961 fetch 1 ,mem_mouse_tz_data +0x407f 014962 rtn blank +0x4080 014963 store 1 ,mem_mouse_tz +0x4081 014964 jam 0 ,mem_mouse_tz_data +0x4082 014965 branch enable_user +: 014967 mouse_check_key_gpio: +0x4083 014968 arg 0 ,rega +0x4084 014969 fetcht 1 ,mem_lbutton_gpio +0x4085 014970 call gpio_get_bit +0x4086 014971 setflag true ,0 ,rega +0x4087 014972 fetcht 1 ,mem_rbutton_gpio +0x4088 014973 call gpio_get_bit +0x4089 014974 setflag true ,1 ,rega +0x408a 014975 fetcht 1 ,mem_mbutton_gpio +0x408b 014976 call gpio_get_bit +0x408c 014977 setflag true ,2 ,rega +0x408d 014978 call mouse_check_s_key_gpio +: 014979 mouse_check_key_gpio_output: +0x408e 014980 copy rega ,pdata +0x408f 014981 rtn +: 014982 mouse_check_s_key_gpio: +0x4090 014983 fetch 1 ,mem_bk_button_gpio +0x4091 014984 rtneq gpio_disable +0x4092 014985 fetcht 1 ,mem_bk_button_gpio +0x4093 014986 call gpio_get_bit +0x4094 014987 setflag true ,3 ,rega +0x4095 014988 fetcht 1 ,mem_fw_button_gpio +0x4096 014989 call gpio_get_bit +0x4097 014990 setflag true ,4 ,rega +0x4098 014991 rtn +: 014993 mouse_key: +0x4099 014994 call mouse_check_key_gpio +0x409a 014995 call mouse_set_mult +0x409b 014996 call mouse_24g_key +0x409c 014997 copy rega ,pdata +0x409d 014998 fetcht 1 ,mem_mouse_key +0x409e 014999 store 1 ,mem_mouse_key +0x409f 015000 ixor temp ,pdata +0x40a0 015001 sub pdata ,0 ,null +0x40a1 015002 rtn zero +0x40a2 015003 branch enable_user +: 015005 mouse_24g_key: +0x40a3 015006 rtnmark0 mark_24g +0x40a4 015007 copy rega ,pdata +0x40a5 015008 rtn blank +0x40a6 015009 store 1 ,mem_mouse_key +0x40a7 015010 branch enable_user +: 015013 mouse_set_mult: +0x40a8 015014 fetch 2 ,mem_ui_state_map +0x40a9 015015 bbit1 ui_state_ble_connected ,mouse_set_ble_mult +0x40aa 015016 fetch 2 ,mem_ui_state_map +0x40ab 015017 bbit1 ui_state_bt_connected ,mouse_set_bt_mult +0x40ac 015018 rtn +: 015019 mouse_set_ble_mult: +0x40ad 015020 copy rega ,pdata +0x40ae 015021 nbranch le_set_config_short_mult ,blank +0x40af 015022 branch le_clr_config_short_mult +: 015023 mouse_set_bt_mult: +0x40b0 015024 copy rega ,pdata +0x40b1 015025 nbranch classic_bt_set_mult_short_flag ,blank +0x40b2 015026 branch classic_bt_clr_mult_short_flag +: 015029 mouse_sensor_sdio_low: +0x40b3 015030 bpatch patch1c_7 ,mem_patch1c +0x40b4 015031 arg mouse_spi1_sdio_gpio ,temp +0x40b5 015032 fetch mouse_flag_len ,mem_mouse_flag +0x40b6 015033 isolate1 mouse_enable_spi2 ,pdata +0x40b7 015034 call mouse_sensor_sdio_low2 ,true +0x40b8 015035 call gpio_get_bit +0x40b9 015036 rtn true +0x40ba 015037 setarg 0x0a +0x40bb 015038 call twspi_read +0x40bc 015039 nop 1000 +0x40bd 015040 branch mouse_sensor_sdio_low +: 015041 mouse_sensor_sdio_low2: +0x40be 015042 arg mouse_spi2_sdio_gpio ,temp +0x40bf 015043 rtn +: 015045 mouse_spi_sdio_gpio_pollup: +0x40c0 015046 fetch mouse_flag_len ,mem_mouse_flag +0x40c1 015047 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup +: 015048 mouse_spi1_sdio_gpio_pollup: +0x40c2 015049 arg mouse_spi1_sdio_gpio ,temp +0x40c3 015050 branch gpio_config_input_without_wake +: 015051 mouse_spi2_sdio_gpio_pollup: +0x40c4 015052 arg mouse_spi2_sdio_gpio ,temp +0x40c5 015053 branch gpio_config_input_without_wake +: 015056 mouse_init_sunt: +0x40c6 015057 call mouse_spi_init +0x40c7 015058 rtn wake +0x40c8 015059 call mouse_spi_sdio_gpio_pollup +0x40c9 015060 fetch 1 ,mem_config_sensor_type +0x40ca 015061 beq p3610 ,mouse_init_3610sensor +: 015062 mouse_init_sensor: +0x40cb 015063 call mouse_read_sensor_id +0x40cc 015064 beq p32xx_id1 ,mouse_init_p32xx_id2_judge +0x40cd 015065 beq p3065_id1 ,mouse_p3065_init_param +0x40ce 015066 call mouse_twspi_reset +0x40cf 015067 nop 1000 +0x40d0 015068 branch mouse_init_sensor +: 015069 mouse_twspi_reset: +0x40d1 015070 bpatch patch1d_0 ,mem_patch1d +0x40d2 015071 fetch mouse_flag_len ,mem_mouse_flag +0x40d3 015072 bbit1 mouse_enable_spi2 ,twspi_reset2 +0x40d4 015073 branch twspi_reset +: 015075 mouse_init_3610sensor: +0x40d5 015076 call mouse_read_sensor_id +0x40d6 015077 beq p3610_id1 ,mouse_init_p3610 +0x40d7 015078 call mouse_init_3610sensor_reset +0x40d8 015079 branch mouse_init_3610sensor +: 015081 mouse_read_sensor_id: +0x40d9 015082 setarg pan_reg_pid_h +0x40da 015083 call twspi_read +0x40db 015084 store 1 ,mem_sensor_id2 +0x40dc 015085 setarg pan_reg_pid_l +0x40dd 015086 call twspi_read +0x40de 015087 store 1 ,mem_sensor_id1 +0x40df 015088 rtn +: 015089 mouse_init_p32xx_id2_judge: +0x40e0 015090 fetch 1 ,mem_sensor_id2 +0x40e1 015091 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param +0x40e2 015092 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param +0x40e3 015093 beq p3212_id2 ,mouse_3212_init_param +0x40e4 015094 beq pka8_id2 ,mouse_ka8_init_param +0x40e5 015095 rtn +: 015096 mouse_ka8_init_param: +0x40e6 015097 jam ka8 ,mem_config_sensor_type +0x40e7 015098 rtn +: 015099 mouse_p3065xy_init_param: +0x40e8 015100 jam p3065_xy ,mem_config_sensor_type +0x40e9 015101 rtn +: 015102 mouse_p3065_init_param: +0x40ea 015103 fetch 1 ,mem_sensor_id2 +0x40eb 015104 beq p3065_xy_id2 ,mouse_p3065xy_init_param +0x40ec 015105 jam p3065 ,mem_config_sensor_type +0x40ed 015106 rtn +: 015107 mouse_3212_init_param: +0x40ee 015108 jam p3212 ,mem_config_sensor_type +0x40ef 015109 call mouse_sensor_disable_wp +0x40f0 015110 setarg 0x3426 +0x40f1 015111 call twspi_write +0x40f2 015112 setarg 0x0419 +0x40f3 015113 call twspi_write +: 015114 mouse_sensor_enable_wp: +0x40f4 015115 setarg 0x0009 +0x40f5 015116 branch twspi_write +: 015117 mouse_sensor_disable_wp: +0x40f6 015118 setarg 0x5a09 +0x40f7 015119 branch twspi_write +: 015121 mouse_3204_3l_init_param: +0x40f8 015122 jam p3204 ,mem_config_sensor_type +0x40f9 015123 call mouse_sensor_disable_wp +0x40fa 015124 setarg 0x0f0d +0x40fb 015125 call twspi_write +0x40fc 015126 setarg 0xe31d +0x40fd 015127 call twspi_write +0x40fe 015128 setarg 0xd27d +0x40ff 015129 call twspi_write +0x4100 015130 call mouse_32xx_init_param +0x4101 015131 branch mouse_32xx_init_param_1 +: 015133 mouse_32xx_init_param: +0x4102 015134 setarg 0x351b +0x4103 015135 call twspi_write +0x4104 015136 setarg 0xb428 +0x4105 015137 call twspi_write +0x4106 015138 setarg 0x4629 +0x4107 015139 call twspi_write +0x4108 015140 setarg 0x962a +0x4109 015141 call twspi_write +0x410a 015142 setarg 0x8c2b +0x410b 015143 call twspi_write +0x410c 015144 setarg 0x6e2c +0x410d 015145 call twspi_write +0x410e 015146 setarg 0x642d +0x410f 015147 call twspi_write +0x4110 015148 setarg 0x5f38 +0x4111 015149 call twspi_write +0x4112 015150 setarg 0x0f39 +0x4113 015151 call twspi_write +0x4114 015152 setarg 0x323a +0x4115 015153 call twspi_write +0x4116 015154 setarg 0x473b +0x4117 015155 call twspi_write +0x4118 015156 setarg 0x1042 +0x4119 015157 branch twspi_write +: 015158 mouse_32xx_init_param_1: +0x411a 015159 setarg 0x2e54 +0x411b 015160 call twspi_write +0x411c 015161 setarg 0xf255 +0x411d 015162 call twspi_write +0x411e 015163 setarg 0xf461 +0x411f 015164 call twspi_write +0x4120 015165 setarg 0x7063 +0x4121 015166 call twspi_write +0x4122 015167 setarg 0x5275 +0x4123 015168 call twspi_write +0x4124 015169 setarg 0x4176 +0x4125 015170 call twspi_write +0x4126 015171 setarg 0xed77 +0x4127 015172 call twspi_write +0x4128 015173 setarg 0x2378 +0x4129 015174 call twspi_write +0x412a 015175 setarg 0x4679 +0x412b 015176 call twspi_write +0x412c 015177 setarg 0xe57a +0x412d 015178 call twspi_write +0x412e 015179 setarg 0x487c +0x412f 015180 call twspi_write +0x4130 015181 setarg 0x777e +0x4131 015182 call twspi_write +0x4132 015183 setarg 0x017f +0x4133 015184 call twspi_write +0x4134 015185 setarg 0x000b +0x4135 015186 call twspi_write +0x4136 015187 setarg 0x007f +0x4137 015188 call twspi_write +0x4138 015189 branch mouse_sensor_enable_wp +: 015192 mouse_3205_3t_init_param: +0x4139 015193 jam p3205 ,mem_config_sensor_type +0x413a 015194 call mouse_sensor_disable_wp +0x413b 015195 setarg 0x100d +0x413c 015196 call twspi_write +0x413d 015197 setarg 0xed1d +0x413e 015198 call twspi_write +0x413f 015199 setarg 0x807d +0x4140 015200 call twspi_write +0x4141 015201 call mouse_32xx_init_param +0x4142 015202 setarg 0x0943 +0x4143 015203 call twspi_write +0x4144 015204 branch mouse_32xx_init_param_1 +: 015207 mouse_init_3610sensor_reset: +0x4145 015208 fetcht 1 ,mem_sensor_reset_gpio +0x4146 015209 call gpio_out_active +0x4147 015210 call delay_10ms +0x4148 015211 fetcht 1 ,mem_sensor_reset_gpio +0x4149 015212 call gpio_out_inactive +0x414a 015213 branch delay_10ms +: 015215 mouse_init_p3610: +0x414b 015216 jam p3610 ,mem_config_sensor_type +0x414c 015217 setarg 0xba41 +0x414d 015218 call sensor_write +0x414e 015219 setarg 0x0d11 +0x414f 015220 call sensor_write +0x4150 015221 setarg 0x041b +0x4151 015222 call sensor_write +0x4152 015223 setarg 0x041c +0x4153 015224 call sensor_write +0x4154 015225 setarg 0x0f1d +0x4155 015226 call sensor_write +0x4156 015227 setarg 0x0032 +0x4157 015228 call sensor_write +0x4158 015229 setarg 0xb541 +0x4159 015230 branch sensor_write +: 015234 mouse_set_sensor_reg: +0x415a 015235 setarg 0xba41 +0x415b 015236 call sensor_write +0x415c 015237 nop 4000 +0x415d 015238 setarg 0xff7f +0x415e 015239 call sensor_write +0x415f 015240 copy rega ,pdata +0x4160 015241 call sensor_write +0x4161 015242 setarg 0x007f +0x4162 015243 call sensor_write +0x4163 015244 setarg 0xb541 +0x4164 015245 branch sensor_write +: 015247 extsign: +0x4165 015248 rtnbit0 7 +0x4166 015249 arg 0xff00 ,temp +0x4167 015250 ior temp ,pdata +0x4168 015251 rtn +: 015253 extsign_bit3: +0x4169 015254 rtnbit0 3 +0x416a 015255 arg 0xf0 ,temp +0x416b 015256 ior temp ,pdata +0x416c 015257 rtn +: 015260 mouse_le: +0x416d 015261 call le_fifo_check_nearly_full +0x416e 015262 nrtn blank +0x416f 015263 fetch 1 ,mem_le_connect_status_flag +0x4170 015264 and pdata ,0x03 ,pdata +0x4171 015265 rtnne 0x03 +0x4172 015266 fetch mouse_flag_len ,mem_mouse_flag +0x4173 015267 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet +0x4174 015268 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet +0x4175 015269 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +0x4176 015270 call mouse_motion +0x4177 015271 nrtn user +0x4178 015272 branch mouse_fill_data_le +: 015274 mouse_le_send_empty_packet: +0x4179 015275 setarg 0 +0x417a 015276 store 7 ,mem_mouse_key +0x417b 015277 branch mouse_fill_data_le +: 015279 mouse_priority_bb_event: +0x417c 015280 copy regc ,pdata +0x417d 015281 beq bt_evt_le_connected ,mouse_le_bb_event_connected +0x417e 015282 beq bt_evt_bb_connected ,mouse_stop_discovery +0x417f 015283 beq bt_evt_le_disconnected ,mouse_bb_disconnected +0x4180 015284 beq bt_evt_bb_disconnected ,mouse_bb_disconnected +0x4181 015285 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete +0x4182 015286 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn +0x4183 015287 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake +0x4184 015288 beq bt_evt_hid_connected ,mouse_bt_hid_connected +0x4185 015289 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed +0x4186 015290 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout +0x4187 015291 beq bt_evt_pincode_req ,mouse_bb_event_pincode +0x4188 015292 beq bt_evt_remote_unsniff ,app_start_auto_sniff +0x4189 015293 beq bt_evt_le_pairing_success ,mouse_le_pairing_success +0x418a 015294 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt +0x418b 015295 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete +0x418c 015296 beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug +0x418d 015297 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete +0x418e 015298 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail +0x418f 015299 beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success +0x4190 015300 rtn +: 015303 mouse_le_pairing_complete: +0x4191 015304 branch app_ble_store_reconn_info +: 015306 mouse_24g_attempt_fail: +0x4192 015307 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x4193 015308 fetch 1 ,mem_reconn_times +0x4194 015309 nbranch mouse_polling_device ,blank +0x4195 015310 fetch 1 ,mem_device_flag +0x4196 015311 fetcht 1 ,mem_24g_device_number +0x4197 015312 isub temp ,null +0x4198 015313 branch app_enter_hibernate ,zero +0x4199 015314 rtn +: 015315 mouse_24g_attempt_success: +0x419a 015316 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x419b 015317 rtn +: 015318 mouse_24g_pairing_complete: +0x419c 015319 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x419d 015320 arg mosue_24g_pairing_flag ,queue +0x419e 015321 call mouse_disable_function_flag +0x419f 015322 setarg 0 +0x41a0 015323 store 2 ,mem_24g_pairing_timer_count +0x41a1 015324 jam 0 ,mem_mouse_move_flag +0x41a2 015326 fetch 1 ,mem_config_sensor_type +0x41a3 015327 sub pdata ,p3610 ,null +0x41a4 015328 call mouse_read_sensor3610_data ,zero +0x41a5 015329 ncall mouse_read_sensor_common ,zero +0x41a6 015331 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x41a7 015332 bbit1 mouse_enable_flash ,mouse_store_flash_24g_address +0x41a8 015333 call mouse_set_24g_addr_eeprom +0x41a9 015334 branch iicd_write_protect_eep_data +: 015336 mouse_set_24g_addr_eeprom: +0x41aa 015337 call g24_head_ptr2regc +0x41ab 015338 add regc ,offset_24g_addr ,rega +0x41ac 015339 arg mouse_g24_addr_eeprom_offect ,regb +0x41ad 015340 arg 4 ,temp +0x41ae 015341 rtn +: 015343 mouse_store_flash_24g_address: +0x41af 015344 call g24_head_ptr2regc +0x41b0 015345 add regc ,offset_24g_addr ,regb +0x41b1 015346 ifetch 1 ,regb +0x41b2 015347 store 1 ,mem_mouse_24g_addr +0x41b3 015348 branch mouse_store_flash_device_info +: 015351 mouse_le_pairing_success: +0x41b4 015352 arg ll_pairing_success_flag ,queue +0x41b5 015353 branch mouse_le_enable_connect_flag +: 015354 mouse_le_ll_start_encryt: +0x41b6 015355 jam 2 ,mem_le_start_encrypt_timer +0x41b7 015356 arg ll_start_enc_flag ,queue +0x41b8 015357 branch mouse_le_enable_connect_flag +: 015360 mouse_le_enable_connect_flag: +0x41b9 015361 fetch 1 ,mem_le_connect_status_flag +0x41ba 015362 qset1 pdata +0x41bb 015363 store 1 ,mem_le_connect_status_flag +0x41bc 015364 rtn +: 015366 mouse_le_disable_connect_flag: +0x41bd 015367 fetch 1 ,mem_le_connect_status_flag +0x41be 015368 qset0 pdata +0x41bf 015369 store 1 ,mem_le_connect_status_flag +0x41c0 015370 rtn +: 015371 mouse_le_clean_connect_flag: +0x41c1 015372 jam 0 ,mem_le_connect_status_flag +0x41c2 015373 rtn +: 015375 mouse_le_bb_event_connected: +0x41c3 015376 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x41c4 015377 set0 app_disc_by_button ,pdata +0x41c5 015378 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x41c6 015379 setarg 0 +0x41c7 015380 store 2 ,mem_mouse_direct_timer +0x41c8 015381 call mouse_no_data_timer_init +0x41c9 015382 branch mouse_stop_discovery +: 015384 mouse_bb_event_pincode: +0x41ca 015385 call pincode_reinit +0x41cb 015386 branch app_bt_set_pincode +: 015387 mouse_bb_event_reconn_timeout: +: 015388 mouse_bb_event_reconn_failed: +0x41cc 015389 fetch 1 ,mem_reconn_times +0x41cd 015390 nbranch mouse_polling_device ,blank +0x41ce 015391 fetch 2 ,mem_ui_state_map +0x41cf 015392 bbit1 ui_state_btn_down ,mouse_start_discovery +0x41d0 015393 fetch mouse_flag_len ,mem_mouse_flag +0x41d1 015394 bbit1 mouse_select_device_flag ,mouse_soft_reset +0x41d2 015395 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery +0x41d3 015396 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +0x41d4 015397 branch app_bb_hibernate +: 015400 mouse_bt_hid_connected: +0x41d5 015401 branch mouse_hid_connected +: 015403 mouse_bt_event_setup_complete: +0x41d6 015404 rtn +: 015406 mouse_soft_reset: +0x41d7 015407 call mouse_select_device_enable +0x41d8 015408 branch soft_reset_chip +: 015410 mouse_bb_disconnected: +0x41d9 015411 bpatch patch1d_1 ,mem_patch1d +0x41da 015412 call mouse_bb_discon_clear_stack +0x41db 015413 fetch mouse_flag_len ,mem_mouse_flag +0x41dc 015414 bbit1 mouse_select_device_flag ,mouse_soft_reset +0x41dd 015415 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +0x41de 015416 fetch 1 ,mem_reconn_times +0x41df 015417 nbranch mouse_polling_device ,blank +0x41e0 015418 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x41e1 015419 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn +0x41e2 015420 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x41e3 015421 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing +0x41e4 015422 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate +0x41e5 015423 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +0x41e6 015424 branch mouse_start_discovery +: 015425 mouse_bb_discon_clear_stack: +0x41e7 015426 setarg 0 +0x41e8 015427 store 8 ,mem_wheel_tb_old_pinlevel +0x41e9 015428 istore 4 ,contw +0x41ea 015429 jam 0 ,mem_mouse_send_blank_timer +0x41eb 015430 jam 0 ,mem_mouse_move_flag +0x41ec 015431 jam app_handshake_null ,mem_app_handshake_flag +0x41ed 015432 jam 0 ,mem_ltk_exists +0x41ee 015433 rtn +: 015435 mouse_event_light_state_pairing: +0x41ef 015436 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate +0x41f0 015437 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +0x41f1 015438 branch mouse_start_discovery +: 015439 mouse_event_light_state_hibernate: +0x41f2 015440 fetch 2 ,mem_ui_state_map +0x41f3 015441 bbit1 ui_state_btn_down ,mouse_start_discovery +0x41f4 015442 branch app_bb_hibernate +: 015444 mouse4_0_event_bb_disconn: +0x41f5 015445 call mouse_le_clean_connect_flag +0x41f6 015446 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x41f7 015447 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x41f8 015448 branch app_bb_hibernate +: 015450 mouse_bb_event_timer: +0x41f9 015451 call mouse_adc_read +0x41fa 015452 call mouse_24g_delay_timer +0x41fb 015453 call mouse_ban_24g_pairing_timer +0x41fc 015454 call mouse_dpi_led_blink_delay_timer +0x41fd 015455 call mouse_statue_up_timer +0x41fe 015457 call mouse_statue_cheak_timer +0x41ff 015458 call mouse_select_device +0x4200 015459 call mouse_bt_discovery_cheak +0x4201 015460 call mouse_low_voltage_led_timer +0x4202 015461 call mouse_sensor_led_contrl_timer +0x4203 015462 call mouse_check_hid_handshake_timer +0x4204 015463 call mouse_check_discovery_timeout_timer +0x4205 015464 call mouse_check_direct_timeout_timer +0x4206 015465 call mouse_check_no_data_timeout_timer +0x4207 015466 call mouse_check_mouse_state_timer +0x4208 015467 branch mouse_le_enable_att_list_timer +: 015471 mouse_sensor_led_contrl_timer: +0x4209 015472 fetch 1 ,mem_mouse_sensor_timer_count +0x420a 015473 rtn blank +0x420b 015474 increase -1 ,pdata +0x420c 015475 store 1 ,mem_mouse_sensor_timer_count +0x420d 015476 nrtn blank +0x420e 015477 branch mouse_sensor_led_contrl +: 015478 mouse_sensor_led_contrl: +0x420f 015479 fetch 1 ,mem_sensor_led_style +0x4210 015480 rtneq ui_led_state_blink_stop +0x4211 015481 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking +: 015482 mouse_sensor_led_blink_state_lighting: +0x4212 015483 call mouse_sensor_led_on +0x4213 015484 jam ui_led_state_blink_darking ,mem_sensor_led_style +0x4214 015485 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x4215 015486 rtn +: 015487 mouse_sensor_led_blink_state_darking: +0x4216 015488 call mouse_sensor_led_off +0x4217 015489 jam ui_led_state_blink_lighting ,mem_sensor_led_style +0x4218 015490 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x4219 015491 rtn +: 015493 mouse_sensor_led_blink_stop: +: 015494 mouse_sensor_reset: +0x421a 015495 setarg 0x8006 +0x421b 015496 call twspi_write +0x421c 015497 nop 1000 +0x421d 015498 jam 0x00 ,mem_mouse_sensor_timer_count +0x421e 015499 jam ui_led_state_blink_stop ,mem_sensor_led_style +0x421f 015500 branch mouse_init_p32xx_id2_judge +: 015502 mouse_p3212sensor_led_on: +0x4220 015503 setarg 0xa006 +0x4221 015504 call twspi_write +0x4222 015505 setarg 0xa005 +0x4223 015506 branch twspi_write +: 015507 mouse_sensor_led_on_global: +0x4224 015508 jam 0 ,mem_mouse_sensor_timer_count +: 015509 mouse_sensor_led_on: +0x4225 015510 fetch 1 ,mem_config_sensor_type +0x4226 015511 beq p3212 ,mouse_p3212sensor_led_on +0x4227 015512 setarg 0x0106 +0x4228 015513 call twspi_write +0x4229 015514 setarg 0xa105 +0x422a 015515 branch twspi_write +: 015517 mouse_sensor_led_off_global: +0x422b 015518 jam 0 ,mem_mouse_sensor_timer_count +: 015519 mouse_sensor_led_off: +0x422c 015520 setarg 0x0906 +0x422d 015521 branch twspi_write +: 015522 mouse_sensor_start_blink: +0x422e 015523 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x422f 015524 jam ui_led_state_blink_start ,mem_sensor_led_style +0x4230 015525 rtn +: 015527 mouse_check_hid_handshake_timer: +0x4231 015528 arg mem_hid_handshake_timer_count ,regc +0x4232 015529 arg mouse_bt_hid_handshake ,regb +0x4233 015530 branch timer_single_step +: 015532 mouse_check_discovery_timeout_timer: +0x4234 015533 arg mem_mouse_discovery_timer ,regc +0x4235 015534 arg mouse_check_discovery_timeout ,regb +0x4236 015535 branch timer_single_step_2b +: 015537 mouse_check_direct_timeout_timer: +0x4237 015538 arg mem_mouse_direct_timer ,regc +0x4238 015539 arg mouse_check_direct_timeout ,regb +0x4239 015540 branch timer_single_step_2b +: 015542 mouse_check_no_data_timeout_timer: +0x423a 015543 arg mem_mouse_no_data_timer ,regc +0x423b 015544 arg mouse_check_no_data_timeout ,regb +0x423c 015545 branch timer_single_step_2b +: 015547 mouse_check_mouse_state_timer: +0x423d 015548 arg mem_mouse_statue_led_timer ,regc +0x423e 015549 arg mouse_statue_led_off ,regb +0x423f 015550 branch timer_single_step +: 015554 mouse_le_enable_att_list_timer: +0x4240 015555 arg mem_le_start_encrypt_timer ,regc +0x4241 015556 arg mouse_le_enable_att_list ,regb +0x4242 015557 branch timer_single_step +: 015559 mouse_24g_delay_timer: +0x4243 015560 arg mem_24g_enter_lpm_timer ,regc +0x4244 015561 arg mouse_24g_delay ,regb +0x4245 015562 branch timer_single_step +: 015564 mouse_ban_24g_pairing_timer: +0x4246 015565 arg mem_24g_pairing_timer_count ,regc +0x4247 015566 arg mouse_ban_24g_pairing ,regb +0x4248 015567 branch timer_single_step_2b +: 015568 mouse_ban_24g_pairing: +: 015569 mouse_24g_delay: +0x4249 015570 rtn +: 015573 mosue_dpi_led_blink_init: +0x424a 015574 fetch mouse_flag_len ,mem_mouse_flag +0x424b 015575 rtnbit0 mouse_enable_dpi_led_blink +0x424c 015576 jam 10 ,mem_mouse_dpi_led_delay_count +0x424d 015577 fetch 1 ,mem_dpi_led_gpio +0x424e 015578 store 1 ,mem_mouse_struct_led_gpio +0x424f 015579 rtn +: 015582 mouse_dpi_led_blink_delay_timer: +0x4250 015583 arg mem_mouse_dpi_led_delay_count ,regc +0x4251 015584 arg mouse_dpi_led_setting ,regb +0x4252 015585 branch timer_single_step +: 015586 mouse_dpi_led_setting: +0x4253 015587 fetch 1 ,mem_dpi_led_gpio +0x4254 015588 store 1 ,mem_mouse_struct_led_gpio +0x4255 015589 setarg led_dpi_blink +0x4256 015590 store 2 ,mem_mouse_on_time +0x4257 015591 store 2 ,mem_mouse_off_time +0x4258 015592 arg 0 ,rega +0x4259 015593 fetcht 1 ,mem_mouse_dpi +0x425a 015594 increase 1 ,temp +0x425b 015595 storet 1 ,mem_mouse_blink_count +0x425c 015596 jam ui_led_state_blink_start ,mem_mouse_led_type +0x425d 015597 rtn +: 015599 mouse_le_enable_att_list: +0x425e 015600 fetch 1 ,mem_le_connect_status_flag +0x425f 015601 rtnbit1 ll_pairing_success_flag +0x4260 015602 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x4261 015603 call ui_ipc_send_cmd +0x4262 015604 arg write_req_enable_flag ,queue +0x4263 015605 branch mouse_le_enable_connect_flag +: 015608 mouse_check_discovery_timeout: +0x4264 015609 call mouse_stop_discovery +0x4265 015610 branch app_enter_hibernate +: 015612 mouse_check_direct_timeout: +0x4266 015613 call app_ble_stop_direct_adv +0x4267 015614 fetch 1 ,mem_reconn_times +0x4268 015615 nbranch mouse_polling_device ,blank +0x4269 015616 branch app_enter_hibernate +: 015618 mouse_check_no_data_timeout: +0x426a 015619 bmark1 mark_24g ,check_51cmd_hibernate +0x426b 015620 branch mouse_disconnect +: 015624 mouse_bb_event_discovery_btn: +0x426c 015625 bpatch patch1d_2 ,mem_patch1d +0x426d 015626 jam 0 ,mem_mouse_send_blank_timer +0x426e 015627 call mouse_disconnect +0x426f 015628 call mouse_le_clean_connect_flag +0x4270 015629 branch mouse_start_discovery +: 015633 mouse3_0_check_reconn_target: +0x4271 015634 fetch 6 ,mem_hci_plap +0x4272 015635 branch app_bt_start_discovery_short ,blank +0x4273 015636 call mouse_reconn_setting_led_gpio +0x4274 015637 jam 0x17 ,mem_connection_options +0x4275 015638 fetch 1 ,mem_ssp_enable +0x4276 015639 nbranch app_bt_start_reconnect ,blank +0x4277 015640 jam 0x04 ,mem_connection_options +0x4278 015641 branch app_bt_start_reconnect +: 015643 mouse4_0_check_reconn_target: +0x4279 015644 fetch 2 ,mem_mouse_direct_timeout +0x427a 015645 store 2 ,mem_mouse_direct_timer +0x427b 015646 call mouse_reconn_setting_led_gpio +0x427c 015647 call app_lpm_mult_disable +0x427d 015648 branch check_51cmd_adv +: 015650 mouse_reconn_setting_led_gpio: +0x427e 015651 setarg led_reconnect_blink +0x427f 015652 store 2 ,mem_mouse_on_time +0x4280 015653 store 2 ,mem_mouse_off_time +0x4281 015654 branch mouse_setting_led_gpio_comman +: 015656 mouse_discover_setting_led_gpio: +0x4282 015657 setarg led_discovery_blink +0x4283 015658 store 2 ,mem_mouse_on_time +0x4284 015659 store 2 ,mem_mouse_off_time +: 015660 mouse_setting_led_gpio_comman: +0x4285 015661 fetch 1 ,mem_device_flag +0x4286 015662 beq mode_bt_device1 ,mouse_device_led1 +0x4287 015663 beq mode_bt_device2 ,mouse_device_led2 +0x4288 015664 beq mode_bt_device3 ,mouse_device_led3 +0x4289 015665 rtn +: 015666 mouse_device_led1: +0x428a 015667 fetch 1 ,mem_config_device1_led_gpio +0x428b 015668 branch mouse_led_blink +: 015669 mouse_device_led2: +0x428c 015670 fetch 1 ,mem_config_device2_led_gpio +0x428d 015671 branch mouse_led_blink +: 015672 mouse_device_led3: +0x428e 015673 fetch 1 ,mem_config_device3_led_gpio +: 015674 mouse_led_blink: +0x428f 015675 store 1 ,mem_temp +0x4290 015676 call mouse_devce_led_off +0x4291 015677 fetch 1 ,mem_temp +0x4292 015678 store 1 ,mem_mouse_struct_led_gpio +0x4293 015679 arg 0 ,rega +0x4294 015680 jam ui_led_state_blink_start ,mem_mouse_led_type +0x4295 015681 branch ui_led_blink_start_global +: 015683 mouse_led_off: +0x4296 015684 arg 0 ,rega +0x4297 015685 branch ui_led_off_global +: 015686 mouse_led_on: +0x4298 015687 arg 0 ,rega +0x4299 015688 branch ui_led_on_global +: 015690 mouse4_0_bb_event_discovery_btn: +0x429a 015691 branch mouse_le_clean_connect_flag +: 015693 mouse_bt_hid_handshake: +0x429b 015694 jam app_handshake_done ,mem_app_handshake_flag +0x429c 015695 call app_lpm_mult_enable +0x429d 015696 call app_bt_store_reconn_info +0x429e 015697 setarg 0 +0x429f 015698 store 2 ,mem_discovery_timeout_timer_count +0x42a0 015699 store 1 ,mem_hid_handshake_timer_count +0x42a1 015700 branch app_bt_enter_sniff +: 015702 mouse_check_reconn_target: +0x42a2 015703 call mouse_cheak_select_device_by_switch +0x42a3 015704 fetch 1 ,mem_device_flag +0x42a4 015705 fetcht 1 ,mem_24g_device_number +0x42a5 015706 isub temp ,null +0x42a6 015707 branch mouse_connect_24g_mode ,zero +0x42a7 015708 fetch 1 ,mem_xrecord_mode +0x42a8 015709 beq rec_3_mode ,mouse3_0_check_reconn_target +0x42a9 015710 beq rec_4_mode ,mouse4_0_check_reconn_target +0x42aa 015711 branch mouse_start_discovery +: 015712 mouse_connect_24g_mode: +0x42ab 015713 call mouse_start_24g_mode +0x42ac 015714 rtnmark1 mark_24g +0x42ad 015715 fetch 1 ,mem_reconn_times +0x42ae 015716 nbranch mouse_polling_device ,blank +0x42af 015717 rtn +: 015719 mouse_start_discovery: +0x42b0 015720 bpatch patch1d_3 ,mem_patch1d +0x42b1 015721 fetch 2 ,mem_ui_state_map +0x42b2 015722 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom +0x42b3 015723 fetch mouse_flag_len ,mem_mouse_flag +0x42b4 015724 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom +0x42b5 015725 random pdata +0x42b6 015726 store 1 ,mem_le_lap + 1 +: 015727 mouse_start_discovery_norandom: +0x42b7 015728 call app_lpm_mult_disable +0x42b8 015729 fetch 2 ,mem_discovery_timeout +0x42b9 015730 store 2 ,mem_mouse_discovery_timer +0x42ba 015731 jam 6 ,mem_connection_options +0x42bb 015732 setarg 0 +0x42bc 015733 store 2 ,mem_mouse_no_data_timer +0x42bd 015734 store 2 ,mem_mouse_direct_timer +0x42be 015735 arg mouse_store_eeprom_flag ,queue +0x42bf 015736 call mouse_enable_function_flag +0x42c0 015737 call mouse_bt_discovery_button_down_disable +0x42c1 015738 fetch 1 ,mem_device_option +0x42c2 015739 isolate1 mode_4_mouse ,pdata +0x42c3 015740 call check_51cmd_adv ,true +0x42c4 015741 fetch 1 ,mem_device_option +0x42c5 015742 isolate1 mode_3_mouse ,pdata +0x42c6 015743 call check_51cmd_start_discovery ,true +0x42c7 015744 fetch mouse_flag_len ,mem_mouse_flag +0x42c8 015745 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink +0x42c9 015746 branch mouse_discover_setting_led_gpio +: 015748 mouse_stop_discovery: +0x42ca 015749 bpatch patch1d_4 ,mem_patch1d +0x42cb 015750 fetch 1 ,mem_device_option +0x42cc 015751 isolate1 mode_4_mouse ,pdata +0x42cd 015752 call mouse_stop_le_adv ,true +0x42ce 015753 fetch 1 ,mem_device_option +0x42cf 015754 isolate1 mode_3_mouse ,pdata +0x42d0 015755 call mouse_stop_bt3_discovery ,true +0x42d1 015756 fetch mouse_flag_len ,mem_mouse_flag +0x42d2 015757 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop +0x42d3 015758 branch mouse_devce_led_off +: 015759 mouse_stop_le_adv: +0x42d4 015760 setarg 0 +0x42d5 015761 store 2 ,mem_mouse_direct_timer +0x42d6 015762 branch check_51cmd_stop_adv +: 015763 mouse_stop_bt3_discovery: +0x42d7 015764 setarg 0 +0x42d8 015765 store 2 ,mem_mouse_discovery_timer +0x42d9 015766 branch check_51cmd_stop_discovery +: 015772 mouse_store_remote_bdaddr: +0x42da 015773 fetch mouse_flag_len ,mem_mouse_flag +0x42db 015774 rtnbit0 mouse_store_eeprom_flag +0x42dc 015775 arg mouse_store_eeprom_flag ,queue +0x42dd 015776 call mouse_disable_function_flag +0x42de 015777 call mouse_check_device_addr +: 015778 mouse_unplug_clean_bdaddr: +0x42df 015779 call mouse_before_store_reconn_info +0x42e0 015780 fetch mouse_flag_len ,mem_mouse_flag +0x42e1 015781 bbit1 mouse_enable_flash ,mouse_store_flash_device_info +0x42e2 015782 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info +0x42e3 015783 rtn +: 015784 mouse_store_eeprom_device_info: +0x42e4 015785 arg 88 ,temp +0x42e5 015786 arg mem_device_flag ,rega +0x42e6 015787 arg mouse_info_eeprom_offect ,regb +0x42e7 015788 branch iicd_write_protect_eep_data +: 015790 mouse_check_device_addr: +0x42e8 015791 fetch 1 ,mem_record_bt_mode +0x42e9 015792 beq rec_4_mode ,mouse_check_le_device_addr +0x42ea 015793 beq rec_3_mode ,mouse_check_bt_device_addr +0x42eb 015794 rtn +: 015795 mouse_check_le_device_addr: +0x42ec 015796 store 1 ,mem_device_addr_temp +0x42ed 015797 fetch 6 ,mem_le_plap +0x42ee 015798 branch mouse_check_bt_device_addr_common +: 015799 mouse_check_bt_device_addr: +0x42ef 015800 store 1 ,mem_device_addr_temp +0x42f0 015801 fetch 6 ,mem_plap +: 015802 mouse_check_bt_device_addr_common: +0x42f1 015803 store 6 ,mem_device_addr_temp + 1 +0x42f2 015804 fetch 7 ,mem_device_addr_temp +0x42f3 015805 arg mem_device1_type ,contr +0x42f4 015806 arg 3 ,loopcnt +: 015807 mouse_check_device_addr_end: +0x42f5 015808 ifetcht 7 ,contr +0x42f6 015809 isub temp ,null +0x42f7 015810 branch mouse_clean_addr ,zero +0x42f8 015811 increase 22 ,contr +0x42f9 015812 loop mouse_check_device_addr_end +0x42fa 015813 rtn +: 015814 mouse_before_store_reconn_info: +0x42fb 015815 arg mem_device1_type ,rega +0x42fc 015816 fetch 1 ,mem_device_flag +0x42fd 015817 increase -1 ,pdata +0x42fe 015818 mul32 pdata ,29 ,pdata +0x42ff 015819 iadd rega ,rega +0x4300 015820 fetch 1 ,mem_record_bt_mode +0x4301 015821 istore 1 ,rega +0x4302 015822 beq rec_4_mode ,mouse_store_le_device +0x4303 015823 beq rec_3_mode ,mouse_store_bt_device +0x4304 015824 rtn +: 015826 mouse_store_le_device: +0x4305 015827 fetch 6 ,mem_le_plap +0x4306 015828 istore 6 ,contw +0x4307 015829 arg mem_le_ltk ,contr +0x4308 015830 call memcpy16 +0x4309 015831 fetch 6 ,mem_le_lap +0x430a 015832 istore 6 ,contw +0x430b 015833 rtn +: 015834 mouse_store_bt_device: +0x430c 015835 fetch 6 ,mem_plap +0x430d 015836 istore 6 ,contw +0x430e 015837 arg mem_link_key ,contr +0x430f 015838 branch memcpy16 +: 015840 mouse_clean_addr: +0x4310 015841 increase -6 ,contr +0x4311 015842 copy contr ,contw +0x4312 015843 fetcht 6 ,mem_device_addr_temp + 1 +0x4313 015844 increase 3 ,temp +0x4314 015845 istoret 6 ,contw +0x4315 015846 rtn +: 015850 mouse_eeprom_load_recon_info: +0x4316 015851 arg 88 ,temp +0x4317 015852 arg mem_device_flag ,rega +0x4318 015853 arg mouse_info_eeprom_offect ,regb +0x4319 015854 call iicd_read_eep_data +: 015855 mouse_select_reconn_device: +0x431a 015856 arg mem_device1_type ,rega +0x431b 015857 fetch 1 ,mem_device_flag +0x431c 015858 fetcht 1 ,mem_24g_device_number +0x431d 015859 isub temp ,null +0x431e 015860 rtn zero +0x431f 015861 increase -1 ,pdata +0x4320 015862 mul32 pdata ,29 ,pdata +0x4321 015863 iadd rega ,rega +0x4322 015864 ifetch 1 ,rega +0x4323 015865 store 1 ,mem_xrecord_mode +0x4324 015866 beq rec_3_mode ,mouse_load_bt_device +0x4325 015867 beq rec_4_mode ,mouse_load_le_device +0x4326 015868 rtn +: 015870 mouse_load_bt_device: +0x4327 015871 ifetch 6 ,contr +: 015872 mouse_load_bt_device_end: +0x4328 015873 store 6 ,mem_hci_plap +0x4329 015874 arg mem_link_key ,contw +0x432a 015875 call memcpy16 +0x432b 015876 branch check_link_key_load +: 015878 mouse_load_le_device: +0x432c 015879 ifetch 6 ,contr +: 015880 mouse_load_le_device_end: +0x432d 015881 store 6 ,mem_hci_plap +0x432e 015882 arg mem_le_ltk ,contw +0x432f 015883 call memcpy16 +0x4330 015884 ifetch 6 ,contr +0x4331 015885 store 6 ,mem_le_lap +0x4332 015886 rtn +: 015889 mouse_select_device: +0x4333 015890 fetch 1 ,mem_config_function_enable +0x4334 015891 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button +0x4335 015892 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch +0x4336 015893 branch mouse_select_device_by_combination_key +: 015895 mouse_select_device_by_combination_key: +0x4337 015896 call mouse_check_key_gpio +0x4338 015897 beq mouse_rm_button ,mouse_select_device_commbination_key_down +: 015898 mouse_select_device_commbination_key_up: +0x4339 015899 jam 30 ,mem_combination_select_device_count +0x433a 015900 fetch 1 ,mem_select_device_button_statue +0x433b 015901 rtneq dpi_button_state_up +0x433c 015902 jam dpi_button_state_up ,mem_select_device_button_statue +0x433d 015903 rtn +: 015905 mouse_select_device_commbination_key_down: +0x433e 015906 call mouse_combination_select_device_timer +0x433f 015907 fetch 1 ,mem_select_device_button_statue +0x4340 015908 rtneq dpi_button_state_down +0x4341 015909 jam dpi_button_state_down ,mem_select_device_button_statue +0x4342 015910 branch mouse_select_device_enable +: 015912 mouse_combination_select_device_timer: +0x4343 015913 fetch 1 ,mem_combination_select_device_count +0x4344 015914 rtn blank +0x4345 015915 pincrease -1 +0x4346 015916 store 1 ,mem_combination_select_device_count +0x4347 015917 nrtn blank +0x4348 015918 branch mouse_ready_reconnection_by_button +: 015920 mouse_select_device_by_button: +0x4349 015921 fetch 1 ,mem_config_select_device_button_gpio +0x434a 015922 rtneq gpio_disable +0x434b 015923 fetcht 1 ,mem_config_select_device_button_gpio +0x434c 015924 call gpio_get_bit +0x434d 015925 branch mouse_select_device_button_down ,true +: 015926 mouse_select_device_button_up: +0x434e 015927 fetch 1 ,mem_select_device_button_statue +0x434f 015928 rtneq dpi_button_state_up +0x4350 015929 jam dpi_button_state_up ,mem_select_device_button_statue +0x4351 015930 fetch mouse_flag_len ,mem_mouse_flag +0x4352 015931 rtnbit1 mouse_long_bt_button_flag +0x4353 015932 branch mouse_ready_reconnection_by_button +: 015934 mouse_select_device_button_down: +0x4354 015935 fetch 1 ,mem_select_device_button_statue +0x4355 015936 rtneq dpi_button_state_down +0x4356 015937 jam dpi_button_state_down ,mem_select_device_button_statue +0x4357 015938 arg mouse_long_bt_button_flag ,queue +0x4358 015939 branch mouse_disable_function_flag +: 015943 mouse_select_device_by_switch: +0x4359 015944 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x435a 015945 rtnbit0 enable_select_device_by_switch +0x435b 015946 fetch 1 ,mem_device_flag +0x435c 015947 beq mode_bt_device1 ,mouse_select1_device +0x435d 015948 beq mode_24g_device ,mouse_select2_device +0x435e 015949 rtn +: 015950 mouse_cheak_select_device_by_switch: +0x435f 015951 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x4360 015952 rtnbit0 enable_select_device_by_switch +0x4361 015953 fetcht 1 ,mem_config_select_device_button_gpio +0x4362 015954 call gpio_get_bit +0x4363 015955 branch mouse_cheak_select_24gdevice ,true +: 015956 mouse_select_btdevice: +0x4364 015957 jam mode_bt_device1 ,mem_device_flag +0x4365 015958 rtn +: 015959 mouse_cheak_select_24gdevice: +0x4366 015960 fetch 1 ,mem_24g_device_number +0x4367 015961 store 1 ,mem_device_flag +0x4368 015962 rtn +: 015963 mouse_select1_device: +0x4369 015964 fetcht 1 ,mem_config_select_device_button_gpio +0x436a 015965 nbranch mouse_ready_reconnection_by_button ,true +0x436b 015966 rtn +: 015967 mouse_select2_device: +0x436c 015968 fetcht 1 ,mem_config_select_device_button_gpio +0x436d 015969 call gpio_get_bit +0x436e 015970 branch mouse_select_device_button_down ,true +0x436f 015971 rtn +: 015976 mouse_ready_reconnection_by_button: +0x4370 015977 fetcht 1 ,mem_device_flag +0x4371 015978 increase 1 ,temp +0x4372 015979 fetch 1 ,mem_device_number +0x4373 015980 isub temp ,null +0x4374 015981 ncall mouse_select_device_count_clean ,positive +0x4375 015982 storet 1 ,mem_device_flag +0x4376 015983 jam 0 ,mem_link_key_exists +0x4377 015984 call mouse_store_device_number2eeprom +0x4378 015985 call mouse_select_device_enable +0x4379 015987 branch mouse_set_reconnection +: 015989 mouse_store_device_number2eeprom: +0x437a 015990 arg 1 ,temp +0x437b 015991 arg mem_device_flag ,rega +0x437c 015992 arg 0 ,regb +0x437d 015993 branch iicd_write_eep_data +: 015995 mouse_set_reconnection: +0x437e 015996 call mouse_stop_bluetooth_mode +0x437f 015997 call mouse_select_device_disable +0x4380 015998 branch mouse_soft_reset +: 015999 mouse_stop_bluetooth_mode: +0x4381 016000 fetch 2 ,mem_ui_state_map +0x4382 016001 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +0x4383 016002 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x4384 016003 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x4385 016004 branch mouse_stop_discovery +: 016006 mouse_disconnect: +0x4386 016007 bpatch patch1d_5 ,mem_patch1d +0x4387 016008 setarg 0 +0x4388 016009 store 2 ,mem_mouse_no_data_timer +0x4389 016010 fetch 2 ,mem_ui_state_map +0x438a 016011 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x438b 016012 fetch 2 ,mem_ui_state_map +0x438c 016013 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x438d 016014 rtn +: 016016 mouse_irtual_cable_unplug: +0x438e 016017 setarg 0x01 +0x438f 016018 store 6 ,mem_plap +0x4390 016019 jam rec_3_mode ,mem_record_bt_mode +0x4391 016020 branch mouse_unplug_clean_bdaddr +: 016023 mouse_cancel_reconnect: +0x4392 016024 call mouse_bt_cannel_reconn_enable +0x4393 016025 branch check_51cmd_bb_reconn_cancel +: 016027 mouse_bt_discovery_by_button: +0x4394 016028 fetch 1 ,mem_config_bt_button_gpio +0x4395 016029 rtneq gpio_disable +0x4396 016030 fetcht 1 ,mem_config_bt_button_gpio +0x4397 016031 call gpio_get_bit +0x4398 016032 branch mouse_bt_discovery_button_down ,true +: 016033 mouse_bt_discovery_button_up: +0x4399 016034 fetch 1 ,mem_ui_button_timeout +0x439a 016035 store 1 ,mem_combination_ui_button_count +0x439b 016036 fetch 1 ,mem_bt_discovey_button_statue +0x439c 016037 rtneq dpi_button_state_up +0x439d 016038 jam dpi_button_state_up ,mem_bt_discovey_button_statue +0x439e 016039 branch mouse_bt_discovery_button_down_disable +: 016040 mouse_bt_discovery_button_down: +0x439f 016041 call mouse_bt_discovry_timer +0x43a0 016042 fetch 1 ,mem_bt_discovey_button_statue +0x43a1 016043 rtneq dpi_button_state_down +0x43a2 016044 jam dpi_button_state_down ,mem_bt_discovey_button_statue +0x43a3 016045 call check_51cmd_bb_reconn_cancel +0x43a4 016046 branch mouse_bt_discovery_button_down_enable +: 016049 mouse_bt_discovery_cheak: +0x43a5 016050 fetch 1 ,mem_config_function_enable +0x43a6 016051 bbit1 enable_bt_button ,mouse_bt_discovery_by_button +: 016052 mouse_bt_discovery_commbination_key: +0x43a7 016053 call mouse_check_key_gpio +0x43a8 016054 beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down +: 016055 mouse_bt_discovery_commbination_key_up: +0x43a9 016056 fetch 1 ,mem_ui_button_timeout +0x43aa 016057 store 1 ,mem_combination_ui_button_count +0x43ab 016058 fetch 1 ,mem_bt_discovey_button_statue +0x43ac 016059 rtneq dpi_button_state_up +0x43ad 016060 jam dpi_button_state_up ,mem_bt_discovey_button_statue +0x43ae 016061 branch mouse_bt_discovery_button_down_disable +: 016064 mouse_bt_discovery_commbination_key_down: +0x43af 016065 call mouse_bt_discovry_timer +0x43b0 016066 fetch 1 ,mem_bt_discovey_button_statue +0x43b1 016067 rtneq dpi_button_state_down +0x43b2 016068 jam dpi_button_state_down ,mem_bt_discovey_button_statue +0x43b3 016069 call check_51cmd_bb_reconn_cancel +0x43b4 016070 branch mouse_bt_discovery_button_down_enable +: 016072 mouse_bt_discovry_timer: +0x43b5 016073 arg mem_combination_ui_button_count ,regc +0x43b6 016074 arg mouse_long_button_bt_discovry ,regb +0x43b7 016075 branch timer_single_step +: 016077 mouse_long_button_bt_discovry: +0x43b8 016078 arg mouse_long_bt_button_flag ,queue +0x43b9 016079 call mouse_enable_function_flag +0x43ba 016080 call app_evt_button_long_pressed +0x43bb 016081 branch mouse_bb_event_discovery_btn +: 016084 mouse_cpi_enable: +0x43bc 016085 arg mouse_cpi_flag ,queue +0x43bd 016086 branch mouse_enable_function_flag +: 016087 mouse_cpi_disable: +0x43be 016088 arg mouse_cpi_flag ,queue +0x43bf 016089 branch mouse_disable_function_flag +: 016090 mouse_select_device_enable: +0x43c0 016091 arg mouse_select_device_flag ,queue +0x43c1 016092 branch mouse_enable_function_flag +: 016093 mouse_select_device_disable: +0x43c2 016094 arg mouse_select_device_flag ,queue +0x43c3 016095 branch mouse_disable_function_flag +: 016096 mouse_bt_cannel_reconn_enable: +0x43c4 016097 arg mouse_bt_cannel_reconn_flag ,queue +0x43c5 016098 branch mouse_enable_function_flag +: 016099 mouse_bt_cannel_reconn_disable: +0x43c6 016100 arg mouse_bt_cannel_reconn_flag ,queue +0x43c7 016101 branch mouse_disable_function_flag +: 016102 mouse_bt_discovery_button_down_enable: +0x43c8 016103 arg mouse_bt_discovery_button_down_flag ,queue +0x43c9 016104 branch mouse_enable_function_flag +: 016105 mouse_bt_discovery_button_down_disable: +0x43ca 016106 arg mouse_bt_discovery_button_down_flag ,queue +0x43cb 016107 branch mouse_disable_function_flag +: 016111 mouse_select_device_count_clean: +0x43cc 016112 arg 1 ,temp +0x43cd 016113 rtn +: 016115 mouse_enable_function_flag: +0x43ce 016116 fetch mouse_flag_len ,mem_mouse_flag +0x43cf 016117 qset1 pdata +0x43d0 016118 store mouse_flag_len ,mem_mouse_flag +0x43d1 016119 rtn +: 016121 mouse_disable_function_flag: +0x43d2 016122 fetch mouse_flag_len ,mem_mouse_flag +0x43d3 016123 qset0 pdata +0x43d4 016124 store mouse_flag_len ,mem_mouse_flag +0x43d5 016125 rtn +: 016127 mouse_adc_read: +0x43d6 016128 fetch mouse_flag_len ,mem_mouse_flag +0x43d7 016129 rtnbit0 mouse_enable_adc +0x43d8 016130 fetch 1 ,mem_adc_read_timer +0x43d9 016131 increase 1 ,pdata +0x43da 016132 store 1 ,mem_adc_read_timer +0x43db 016133 sub pdata ,10 ,null +0x43dc 016134 rtn positive +0x43dd 016135 jam 0 ,mem_adc_read_timer +0x43de 016136 call adc_set_mode +0x43df 016137 call vdd_calculate_by_mode +0x43e0 016138 store 2 ,mem_mouse_vdd_now_vol +0x43e1 016139 arg mem_mouse_vdd_calculate_set ,rega +0x43e2 016140 call adc_bat_percent_lowpower_out +0x43e3 016141 fetch 1 ,mem_adc_power_flag +0x43e4 016142 bbit1 1 ,mouse_power_down +0x43e5 016143 bbit0 0 ,mouse_adc_no_low_voltage +0x43e6 016144 branch mouse_adc_low_voltage +: 016145 mouse_adc_low_voltage: +0x43e7 016146 arg mouse_low_voltage_flag ,queue +0x43e8 016147 branch mouse_enable_function_flag +: 016148 mouse_adc_no_low_voltage: +0x43e9 016149 arg mouse_low_voltage_flag ,queue +0x43ea 016150 branch mouse_disable_function_flag +: 016152 mouse_low_voltage_led_timer: +0x43eb 016153 fetch mouse_flag_len ,mem_mouse_flag +0x43ec 016154 rtnbit0 mouse_low_voltage_flag +0x43ed 016155 fetch 1 ,mem_config_low_voltage_alarm_gpio +0x43ee 016156 store 1 ,mem_mouse_struct_led_gpio +0x43ef 016157 fetch 1 ,mem_adc_low_volatage_led_timer_count +0x43f0 016158 pincrease 1 +0x43f1 016159 store 1 ,mem_adc_low_volatage_led_timer_count +0x43f2 016160 sub pdata ,20 ,null +0x43f3 016161 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive +0x43f4 016162 beq 2 ,mouse_low_voltage_led_on +0x43f5 016163 beq 4 ,mouse_low_voltage_led_off +0x43f6 016164 beq 6 ,mouse_low_voltage_led_on +0x43f7 016165 beq 8 ,mouse_low_voltage_led_off +0x43f8 016166 rtn +: 016167 mouse_adc_low_volatage_led_timer_count_clean: +0x43f9 016168 jam 1 ,mem_adc_low_volatage_led_timer_count +0x43fa 016169 branch mouse_low_voltage_led_off +: 016170 mouse_low_voltage_led_on: +0x43fb 016171 arg 0 ,rega +0x43fc 016172 jam ui_led_state_lighting ,mem_mouse_led_type +0x43fd 016173 branch ui_led_on_global +: 016174 mouse_low_voltage_led_off: +0x43fe 016175 arg 0 ,rega +0x43ff 016176 jam ui_led_state_lighting ,mem_mouse_led_type +0x4400 016177 branch ui_led_off_global +: 016179 mouse_g24_package_data: +0x4401 016180 call mouse_motion +0x4402 016181 nrtn user +0x4403 016182 arg 7 ,rega +0x4404 016183 arg mem_mouse_key ,regb +0x4405 016184 rtn +: 016186 mouse_g24_enter_lpm: +0x4406 016187 fetch 1 ,mem_mouse_24g_enter_lpm_enable +0x4407 016188 rtn blank +0x4408 016190 fetcht 1 ,mem_dpi_button_gpio +0x4409 016191 call gpio_get_bit +0x440a 016192 call mouse_24g_dpi_delay_init ,true +0x440b 016193 fetch 1 ,mem_24g_enter_lpm_timer +0x440c 016194 nrtn blank +0x440d 016195 call mouse_check_key_gpio +0x440e 016196 nrtn blank +0x440f 016197 branch g24_lpm_long_sleep +: 016199 mouse_24g_dpi_delay_init: +0x4410 016200 fetch 1 ,mem_dpi_button_gpio +0x4411 016201 rtneq ui_button_gpio_disable +0x4412 016202 jam 10 ,mem_24g_enter_lpm_timer +0x4413 016203 rtn +: 016206 mouse_load_flash_info_cheak: +0x4414 016207 call mouse_load_flash_flag +0x4415 016208 fetch 2 ,mem_store_flag +0x4416 016209 arg eeprom_init_flag ,temp +0x4417 016210 isub temp ,null +0x4418 016211 branch mouse_load_flash_device_info ,zero +0x4419 016212 storet 2 ,mem_store_flag +0x441a 016213 call mouse_ble_init_address +0x441b 016214 branch mouse_store_flash_device_info +: 016215 mouse_ble_init_address: +0x441c 016216 fetch 6 ,mem_le_lap +0x441d 016217 store 6 ,mem_device1_locall_addr +0x441e 016218 add pdata ,0x0100 ,pdata +0x441f 016219 store 6 ,mem_device2_locall_addr +0x4420 016220 add pdata ,0x0100 ,pdata +0x4421 016221 store 6 ,mem_device3_locall_addr +0x4422 016222 rtn +: 016225 mouse_load_flash_flag: +0x4423 016226 setarg mem_store_flag +0x4424 016227 arg mem_mouse_information_start ,temp +0x4425 016228 isub temp ,temp +0x4426 016229 fetch 3 ,mem_flash_base +0x4427 016230 iadd temp ,pdata +0x4428 016231 arg 2 ,temp +0x4429 016232 arg mem_store_flag ,rega +0x442a 016233 branch spid_read_flash +: 016236 mouse_load_flash_device_info: +0x442b 016237 setarg mem_mouse_information_end +0x442c 016238 arg mem_mouse_information_start ,temp +0x442d 016239 isub temp ,temp +0x442e 016240 fetch 3 ,mem_flash_base +0x442f 016241 arg mem_mouse_information_start ,rega +0x4430 016242 call spid_read_flash +0x4431 016243 call mouse_select_reconn_device +0x4432 016244 fetch 4 ,mem_mouse_24g_addr +0x4433 016245 call g24_head_ptr2regc +0x4434 016246 branch g24_store_mem_addr +: 016248 mouse_store_flash_device_info: +0x4435 016249 setarg mem_mouse_information_end +0x4436 016250 arg mem_mouse_information_start ,temp +0x4437 016251 isub temp ,temp +0x4438 016252 arg mem_mouse_information_start ,rega +0x4439 016253 fetch 3 ,mem_flash_base +0x443a 016254 branch flash_write +: 016256 mouse_store_eerpom_dpi: +0x443b 016257 arg 1 ,temp +0x443c 016258 arg mem_mouse_dpi ,rega +0x443d 016259 arg mouse_dpi_eeprom_offect ,regb +0x443e 016260 branch iicd_write_protect_eep_data +: 016262 mouse_load_eeprom_dpi: +0x443f 016263 arg 1 ,temp +0x4440 016264 arg mem_mouse_dpi ,rega +0x4441 016265 arg mouse_dpi_eeprom_offect ,regb +0x4442 016266 branch iicd_read_eep_data +: 016268 mouse_statue_cheak_timer: +0x4443 016269 rtnmark1 mark_24g +0x4444 016270 fetch mouse_flag_len ,mem_mouse_flag +0x4445 016271 rtnbit0 mouse_enable_statue_up +0x4446 016272 fetch 1 ,mem_mouse_1step_up_count +0x4447 016273 pincrease 1 +0x4448 016274 and pdata ,0x07 ,pdata +0x4449 016275 store 1 ,mem_mouse_1step_up_count +0x444a 016276 rtnne 0x07 +0x444b 016277 fetch 2 ,mem_ui_state_map +0x444c 016278 bbit1 ui_state_bt_connected ,mouse_check_statue_up +0x444d 016279 bbit1 ui_state_ble_connected ,mouse_check_statue_up +0x444e 016280 rtn +: 016285 mouse_check_statue_up: +0x444f 016286 bpatch patch1d_6 ,mem_patch1d +0x4450 016287 fetch 1 ,mem_mouse_2step_up_count +0x4451 016288 nrtn blank +0x4452 016289 fetch mouse_flag_len ,mem_mouse_flag +0x4453 016290 rtnbit0 mouse_statue_up_flag +0x4454 016291 fetch 1 ,mem_sensor_squal_reg +0x4455 016292 call sensor_read +0x4456 016293 store 1 ,mem_sensor_iqc +0x4457 016294 sub pdata ,0x10 ,null +0x4458 016295 branch mouse_statue_up_timer_init ,positive +0x4459 016296 jam 0 ,mem_mouse_2step_up_count +0x445a 016297 rtn +: 016299 mouse_statue_up_timer_init: +0x445b 016300 jam 30 ,mem_mouse_2step_up_count +0x445c 016301 rtn +: 016302 mouse_statue_up_timer: +0x445d 016303 arg mem_mouse_2step_up_count ,regc +0x445e 016304 arg mouse_statue_up ,regb +0x445f 016305 branch timer_single_step +: 016307 mouse_statue_up: +0x4460 016308 fetch 1 ,mem_sensor_squal_reg +0x4461 016309 call twspi_read +0x4462 016310 sub pdata ,0x10 ,null +0x4463 016311 nrtn positive +0x4464 016312 fetch mouse_flag_len ,mem_mouse_flag +0x4465 016313 rtnbit0 mouse_statue_up_flag +0x4466 016314 arg mouse_statue_up_flag ,queue +0x4467 016315 call mouse_disable_function_flag +0x4468 016316 jam 0 ,mem_lpm_mult +0x4469 016317 jam 30 ,mem_mouse_statue_led_timer +0x446a 016318 call mouse_devce_led_off +0x446b 016319 fetch mouse_flag_len ,mem_mouse_flag +0x446c 016320 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up +: 016321 mouse_two_device_statue_up: +0x446d 016322 fetch 1 ,mem_device_flag +0x446e 016323 beq mode_bt_device1 ,mouse_device1_led_on +0x446f 016324 beq mode_bt_device2 ,mouse_device_blink_led_init +0x4470 016325 rtn +: 016326 mouse_three_device_statue_up: +0x4471 016327 fetch 1 ,mem_device_flag +0x4472 016328 beq mode_bt_device1 ,mouse_device1_led_on +0x4473 016329 beq mode_bt_device2 ,mouse_device2_led_on +0x4474 016330 beq mode_bt_device3 ,mouse_device3_led_on +0x4475 016331 rtn +: 016333 mouse_device_blink_led_init: +0x4476 016334 fetch 1 ,mem_config_device1_led_gpio +0x4477 016335 branch mouse_led_blink +: 016339 mouse_statue_led_off: +0x4478 016340 jam 0x20 ,mem_lpm_mult +0x4479 016341 branch mouse_devce_led_off +: 016345 mouse_devce1_led_off: +0x447a 016346 fetch 1 ,mem_config_device1_led_gpio +0x447b 016347 rtneq gpio_disable +0x447c 016348 store 1 ,mem_mouse_struct_led_gpio +0x447d 016349 branch mouse_led_off +: 016351 mouse_devce2_led_off: +0x447e 016352 fetch 1 ,mem_config_device2_led_gpio +0x447f 016353 rtneq gpio_disable +0x4480 016354 store 1 ,mem_mouse_struct_led_gpio +0x4481 016355 branch mouse_led_off +: 016357 mouse_devce_led_off: +0x4482 016358 call mouse_led_off +0x4483 016359 call mouse_devce1_led_off +0x4484 016360 call mouse_devce2_led_off +: 016361 mouse_devce3_led_off: +0x4485 016362 fetch 1 ,mem_config_device3_led_gpio +0x4486 016363 rtneq gpio_disable +0x4487 016364 store 1 ,mem_mouse_struct_led_gpio +0x4488 016365 branch mouse_led_off +: 016367 mouse_device1_led_on: +0x4489 016368 fetch 1 ,mem_config_device1_led_gpio +0x448a 016369 store 1 ,mem_mouse_struct_led_gpio +0x448b 016370 branch mouse_led_on +: 016371 mouse_device2_led_on: +0x448c 016372 fetch 1 ,mem_config_device2_led_gpio +0x448d 016373 store 1 ,mem_mouse_struct_led_gpio +0x448e 016374 branch mouse_led_on +: 016375 mouse_device3_led_on: +0x448f 016376 fetch 1 ,mem_config_device3_led_gpio +0x4490 016377 store 1 ,mem_mouse_struct_led_gpio +0x4491 016378 branch mouse_led_on +: 016382 mouse_polling_device: +0x4492 016383 bpatch patch1d_7 ,mem_patch1d +0x4493 016384 fetch 1 ,mem_reconn_times +0x4494 016385 increase -1 ,pdata +0x4495 016386 store 1 ,mem_reconn_times +0x4496 016387 fetcht 1 ,mem_device_flag +0x4497 016388 increase 1 ,temp +0x4498 016389 fetch 1 ,mem_device_number +0x4499 016390 isub temp ,null +0x449a 016391 ncall mouse_select_device_count_clean ,positive +0x449b 016392 storet 1 ,mem_device_flag +0x449c 016393 jam 0 ,mem_link_key_exists +0x449d 016394 call mouse_store_device_number2eeprom +0x449e 016395 call mouse_before_store_reconn_info +0x449f 016396 branch mouse_check_reconn_target +: 016398 mouse_power_down: +0x44a0 016399 call mouse_devce_led_off +0x44a1 016400 setarg 0 +0x44a2 016401 store 8 ,mem_gpio_wakeup_low +0x44a3 016402 branch lpm_hibernate +: 016413 remote_car_init: +0x44a4 016414 rtn wake +0x44a5 016415 hfetch 1 ,core_gpio_sel1 +0x44a6 016416 and_into 0xf0 ,pdata +0x44a7 016417 hstore 1 ,core_gpio_sel1 +0x44a8 016418 call keyscan_key_init +0x44a9 016419 setarg remote_car_le_before_hibernate +0x44aa 016420 store 2 ,mem_cb_before_hibernate +0x44ab 016422 setarg remote_car_process_lpm_before +0x44ac 016423 store 2 ,mem_cb_before_lpm +0x44ad 016425 setarg remote_car_scale_process_idle +0x44ae 016426 store 2 ,mem_cb_idle_process +0x44af 016428 setarg remote_car_scale_process_bb_event +0x44b0 016429 store 2 ,mem_cb_bb_event_process +0x44b1 016431 setarg app_get_lpm_wake_lock +0x44b2 016432 store 2 ,mem_cb_check_wakelock +0x44b3 016434 call g24_head_ptr2regc +0x44b4 016435 setarg remote_car_g24_package_data +0x44b5 016436 add regc ,offset_24g_cb_data ,contw +0x44b6 016437 istore 2 ,contw +0x44b7 016439 setarg remote_car_g24_enter_lpm +0x44b8 016440 add regc ,offset_24g_cb_lpm_prepare ,contw +0x44b9 016441 istore 2 ,contw +0x44ba 016443 setarg remote_car_process_lpm_before +0x44bb 016444 add regc ,offset_24g_cb_lpm_before ,contw +0x44bc 016445 istore 2 ,contw +0x44bd 016447 setarg remote_car_event_timer +0x44be 016448 store 2 ,mem_cb_event_timer +0x44bf 016450 setarg remote_car_power_off_signal +0x44c0 016451 store 2 ,mem_remote_car_power_off_cb +0x44c1 016453 setarg remote_car_soft_switch_power_on_signal +0x44c2 016454 store 2 ,mem_remote_car_power_standby_cb +0x44c3 016456 setarg remote_car_send_key_data +0x44c4 016457 store 2 ,mem_cb_remote_car_keyscan +0x44c5 016459 bpatch patch1e_0 ,mem_patch1e +0x44c6 016460 call remote_car_init_environment +0x44c7 016461 call queue_init +0x44c8 016462 jam 2 ,mem_lpm_mult +0x44c9 016463 fetch 1 ,mem_remote_car_config_soft_switch_enable +0x44ca 016464 store 1 ,mem_remote_car_hard_soft_switch +0x44cb 016465 beq hard_switch ,remote_car_hard_switch_power_on_signal +0x44cc 016466 fetch 1 ,mem_remote_car_config_soft_switch_gpio +0x44cd 016467 store 1 ,mem_ui_button_gpio +: 016468 remote_car_soft_switch_power_on_init: +0x44ce 016469 call remote_car_ui_led_init +0x44cf 016470 call ui_button_init +0x44d0 016471 call ui_button_polling +0x44d1 016472 jam power_starting ,mem_remote_car_power_state +0x44d2 016473 fetch 2 ,mem_ui_state_map +0x44d3 016474 rtnbit1 ui_state_btn_down +0x44d4 016475 branch app_enter_hibernate +: 016479 remote_car_hard_switch_power_on_signal: +0x44d5 016480 jam power_standby ,mem_remote_car_power_state +: 016481 remote_car_soft_switch_power_on_signal: +0x44d6 016482 call remote_car_ui_led_init +0x44d7 016484 arg 0 ,rega +0x44d8 016485 call ui_led_blink_start_global +: 016486 remote_car_connect_24g_mode: +0x44d9 016487 branch g24_auto_pair_start +: 016489 remote_car_power_off_signal: +0x44da 016490 branch remote_car_ui_led_init +: 016492 remote_car_ui_led_init: +0x44db 016493 bpatch patch1e_1 ,mem_patch1e +0x44dc 016494 fetch 1 ,mem_remote_car_config_connect_led_gpio +0x44dd 016495 bne invalid_pin_num ,remote_car_pairing_led_gpio_set +: 016496 remote_car_ui_led_init_1: +0x44de 016497 fetcht 1 ,mem_remote_car_led_map +0x44df 016498 branch gpio_config_output +: 016499 remote_car_pairing_led_gpio_set: +0x44e0 016500 store 1 ,mem_remote_car_led_map +0x44e1 016501 branch remote_car_ui_led_init_1 +: 016504 remote_car_init_environment: +0x44e2 016505 call g24_set_device_addr +0x44e3 016506 fetch 2 ,mem_remote_car_no_data_timeout +0x44e4 016507 store 2 ,mem_remote_car_no_data_timer +0x44e5 016508 branch remote_car_get_adc_default_data +: 016510 remote_car_le_before_hibernate: +: 016515 remote_car_in_enter_hibernate: +0x44e6 016516 call gpio_set_before_lpm_common +0x44e7 016517 call remote_car_process_lpm_before +0x44e8 016518 branch app_enter_hibernate +: 016520 remote_car_process_lpm_before: +0x44e9 016521 branch keyscan_process_lpm_before +: 016523 remote_car_g24_enter_lpm: +0x44ea 016524 fetch 1 ,mem_remote_car_24g_enter_lpm_enable +0x44eb 016525 rtn blank +0x44ec 016527 branch g24_lpm_long_sleep +: 016529 remote_car_process_auto_pair_exit: +0x44ed 016530 rtn +: 016532 remote_car_key_scan_process: +0x44ee 016533 branch keyscan_key_process +: 016535 remote_car_scale_process_idle: +0x44ef 016536 call remote_car_rocker_process +0x44f0 016537 call remote_car_24g_status_process +0x44f1 016538 branch remote_car_key_scan_process +: 016540 remote_car_scale_process_bb_event: +0x44f2 016541 copy regc ,pdata +0x44f3 016542 beq bt_evt_button_up ,app_event_button_up +0x44f4 016543 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x44f5 016544 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete +0x44f6 016545 beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success +0x44f7 016546 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail +0x44f8 016547 rtn +: 016549 remote_car_24g_attempt_fail: +0x44f9 016550 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x44fa 016551 rtn +: 016553 remote_car_24g_pairing_complete: +0x44fb 016554 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x44fc 016555 jam work_paired ,mem_remote_car_24g_auto_work_step +0x44fd 016556 jam work_paired ,mem_remote_car_24g_pair_success_flag +0x44fe 016557 rtn +: 016559 remote_car_24g_attempt_success: +0x44ff 016560 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x4500 016561 jam work_paired ,mem_remote_car_24g_auto_work_step +0x4501 016562 jam work_paired ,mem_remote_car_24g_pair_success_flag +0x4502 016563 rtn +: 016565 remote_car_24g_status_process: +0x4503 016566 fetch 1 ,mem_remote_car_24g_auto_work_step +0x4504 016567 rtneq power_on +0x4505 016568 fetch 1 ,mem_remote_car_24g_status +0x4506 016569 rtneq work_paired +0x4507 016570 jam work_paired ,mem_remote_car_24g_status +: 016571 remote_car_scale_process_paired: +0x4508 016572 arg 0 ,rega +0x4509 016573 branch ui_led_off_global +: 016574 remote_car_scale_process_shutdown: +0x450a 016575 arg 0 ,rega +0x450b 016576 call ui_led_off_global +0x450c 016577 call remote_car_ui_led_init +0x450d 016578 branch app_enter_hibernate +: 016580 remote_car_event_timer: +0x450e 016581 call app_power_timer +0x450f 016582 branch remote_car_no_data_timer +: 016584 remote_car_no_data_timer: +0x4510 016585 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable +0x4511 016586 rtn blank +0x4512 016587 arg mem_remote_car_no_data_timer ,regc +0x4513 016588 arg remote_car_scale_process_shutdown ,regb +0x4514 016589 branch timer_single_step_2b +: 016592 remote_car_get_adc_default_data: +0x4515 016593 call remote_car_rocker_get_x +0x4516 016594 storet 2 ,mem_current_vdd_value_default_mid_x +0x4517 016595 call remote_car_rocker_get_y +0x4518 016596 storet 2 ,mem_current_vdd_value_default_mid_y +0x4519 016597 rtn +: 016598 remote_car_rocker_data_get: +: 016599 remote_car_rocker_get_x: +0x451a 016600 fetch 2 ,mem_current_vdd_value_default_mid_x +0x451b 016601 store 2 ,mem_current_vdd_value_default_mid_temp +0x451c 016602 call remote_car_get_adc_from_gpio6 +0x451d 016603 call remote_car_rocker_get_value +0x451e 016604 store 1 ,mem_rocker_status +: 016605 remote_car_rocker_get_y: +0x451f 016606 fetch 2 ,mem_current_vdd_value_default_mid_y +0x4520 016607 store 2 ,mem_current_vdd_value_default_mid_temp +0x4521 016608 call remote_car_get_adc_from_gpio7 +0x4522 016609 call remote_car_rocker_get_value +0x4523 016610 store 1 ,mem_rocker_status + 1 +0x4524 016611 rtn +: 016612 remote_car_rocker_get_value: +0x4525 016613 fetch 2 ,mem_current_vdd_default_range +0x4526 016614 copy pdata ,rega +0x4527 016615 fetch 2 ,mem_current_vdd_value_default_mid_temp +0x4528 016616 call remote_car_rocker_mid_value_adjust +0x4529 016617 fetch 1 ,mem_rocker_work_status +0x452a 016618 nbranch remote_car_rocker_translate_key ,blank +0x452b 016619 nrtn positive +0x452c 016620 fetcht 2 ,mem_current_vdd_value_default_mid_temp +0x452d 016621 rtn +: 016622 remote_car_rocker_mid_value_adjust: +0x452e 016623 isub temp ,pdata +0x452f 016624 branch remote_car_rocker_mid_adjust_positive ,positive +0x4530 016625 sub pdata ,0 ,pdata +0x4531 016626 jam 1 ,mem_rocker_negative_flag +0x4532 016627 isub rega ,null +0x4533 016628 rtn +: 016629 remote_car_rocker_mid_adjust_positive: +0x4534 016630 jam 0 ,mem_rocker_negative_flag +0x4535 016631 isub rega ,null +0x4536 016632 rtn +: 016633 remote_car_rocker_translate_key: +0x4537 016634 nbranch remote_car_rocker_middle_key ,positive +0x4538 016635 fetch 1 ,mem_rocker_negative_flag +0x4539 016636 nbranch remote_car_rocker_negative_key ,blank +: 016637 remote_car_rocker_positive_key: +0x453a 016638 setarg rocker_positive_key +0x453b 016639 rtn +: 016640 remote_car_rocker_negative_key: +0x453c 016641 setarg rocker_negative_key +0x453d 016642 rtn +: 016643 remote_car_rocker_middle_key: +0x453e 016644 setarg rocker_middle_key +0x453f 016645 rtn +: 016646 remote_car_get_adc_from_gpio6: +0x4540 016647 jam 0x33 ,mem_adc_channel +0x4541 016648 branch adc_set_mode +: 016649 remote_car_get_adc_from_gpio7: +0x4542 016650 jam 0x34 ,mem_adc_channel +0x4543 016651 branch adc_set_mode +: 016654 remote_car_rocker_process: +0x4544 016655 fetch 1 ,mem_remote_car_config_check_way +0x4545 016656 rtnne car_remote_check_rocker +: 016657 remote_car_read_rocker_check_start: +0x4546 016658 bpatch patch1e_2 ,mem_patch1e +0x4547 016659 jam 1 ,mem_rocker_work_status +0x4548 016660 call remote_car_rocker_data_get +0x4549 016661 fetch 2 ,mem_rocker_status +0x454a 016662 fetcht 2 ,mem_rocker_last_status +0x454b 016663 isub temp ,null +0x454c 016664 rtn zero +0x454d 016665 store 2 ,mem_rocker_last_status +0x454e 016666 call remote_car_rocker_x_to_key +0x454f 016667 branch remote_car_rocker_y_to_key +: 016669 remote_car_rocker_x_to_key: +0x4550 016670 fetch 1 ,mem_rocker_x_status +0x4551 016671 branch rocker_to_queue_set_0 ,blank +0x4552 016672 increase -1 ,pdata +0x4553 016673 branch remote_car_rocker_to_key +: 016674 remote_car_rocker_y_to_key: +0x4554 016675 fetch 1 ,mem_rocker_y_status +0x4555 016676 branch rocker_to_queue_set_2 ,blank +0x4556 016677 increase 1 ,pdata +: 016678 remote_car_rocker_to_key: +0x4557 016679 copy pdata ,queue +0x4558 016680 arg 1 ,rega +0x4559 016681 branch remote_car_send_key_data +: 016683 rocker_to_queue_set_0: +0x455a 016684 arg 0 ,queue +0x455b 016685 arg 0 ,rega +0x455c 016686 branch remote_car_send_key_data +: 016687 rocker_to_queue_set_2: +0x455d 016688 arg 2 ,queue +0x455e 016689 arg 0 ,rega +0x455f 016690 branch remote_car_send_key_data +: 016692 remote_car_send_key_data: +0x4560 016693 copy rega ,pdata +0x4561 016694 store 1 ,mem_remote_key_status +0x4562 016695 fetch 1 ,mem_remote_car_24g_auto_work_step +0x4563 016696 beq power_on ,g24_auto_pair_start +0x4564 016697 fetch 2 ,mem_remote_car_no_data_timeout +0x4565 016698 store 2 ,mem_remote_car_no_data_timer +0x4566 016699 fetch 1 ,mem_remote_key_status +0x4567 016700 branch remote_car_key_is_release ,blank +: 016701 remote_car_key_is_press: +0x4568 016702 bpatch patch1e_3 ,mem_patch1e +0x4569 016703 arg 0 ,rega +0x456a 016704 call ui_led_on_global +: 016705 remote_car_attack_key_press: +0x456b 016706 copy queue ,pdata +0x456c 016707 beq 4 ,remote_car_send_attack_key4_press +0x456d 016708 beq 5 ,remote_car_send_attack_key5_press +0x456e 016709 beq 6 ,remote_car_send_fire_key6_press +: 016712 remote_car_motor_key_press: +0x456f 016713 call remote_car_device_layout_select +0x4570 016714 beq control_f_b_ten ,remote_car_single_motor_key_is_press +0x4571 016715 beq control_l_r_ten ,remote_car_double_motor_key_press +0x4572 016716 beq control_l_r_lr ,remote_car_single_motor_key_is_press +0x4573 016717 rtn +: 016719 remote_car_single_motor_key_is_press: +0x4574 016720 copy queue ,pdata +0x4575 016721 beq 0 ,remote_car_send_motor1_key0_press +0x4576 016722 beq 1 ,remote_car_send_motor1_key1_press +0x4577 016723 beq 2 ,remote_car_send_motor2_key2_press +0x4578 016724 beq 3 ,remote_car_send_motor2_key3_press +0x4579 016725 rtn +: 016727 remote_car_double_motor_key_press: +0x457a 016728 copy queue ,pdata +0x457b 016729 beq 0 ,remote_car_send_double_motor_key0_press +0x457c 016730 beq 1 ,remote_car_send_double_motor_key1_press +0x457d 016731 beq 2 ,remote_car_send_double_motor_key2_press +0x457e 016732 beq 3 ,remote_car_send_double_motor_key3_press +0x457f 016733 rtn +: 016735 remote_car_key_is_release: +0x4580 016736 bpatch patch1e_4 ,mem_patch1e +0x4581 016737 arg 0 ,rega +0x4582 016738 call ui_led_off_global +: 016739 remote_car_attack_key_release: +0x4583 016740 copy queue ,pdata +0x4584 016741 beq 4 ,remote_car_send_attack_key4_rel +0x4585 016742 beq 5 ,remote_car_send_attack_key5_rel +: 016745 remote_car_motor_key_release: +0x4586 016746 call remote_car_device_layout_select +0x4587 016747 beq control_f_b_ten ,remote_car_single_motor_key_rel +0x4588 016748 beq control_l_r_ten ,remote_car_double_motor_key_rel +0x4589 016749 beq control_l_r_lr ,remote_car_single_motor_key_rel +0x458a 016750 rtn +: 016752 remote_car_device_layout_select: +0x458b 016753 fetch 1 ,mem_remote_car_config_layout +0x458c 016754 fetcht 1 ,mem_remote_car_config_key_map +0x458d 016755 ior temp ,pdata +0x458e 016756 rtn +: 016759 remote_car_send_motor1_key0_press: +0x458f 016760 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x4590 016761 branch remote_car_send_key +: 016762 remote_car_send_motor1_key1_press: +0x4591 016763 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x4592 016764 branch remote_car_send_key +: 016765 remote_car_send_motor2_key2_press: +0x4593 016766 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x4594 016767 branch remote_car_send_key +: 016768 remote_car_send_motor2_key3_press: +0x4595 016769 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x4596 016770 branch remote_car_send_key +: 016773 remote_car_send_double_motor_key0_press: +0x4597 016774 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x4598 016775 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x4599 016776 branch remote_car_send_key +: 016777 remote_car_send_double_motor_key1_press: +0x459a 016778 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x459b 016779 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x459c 016780 branch remote_car_send_key +: 016781 remote_car_send_double_motor_key2_press: +0x459d 016782 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x459e 016783 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x459f 016784 branch remote_car_send_key +: 016785 remote_car_send_double_motor_key3_press: +0x45a0 016786 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x45a1 016787 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x45a2 016788 branch remote_car_send_key +: 016791 remote_car_send_attack_key4_press: +0x45a3 016792 jam motor_positive ,mem_remote_car_24g_motor3_payload +0x45a4 016793 branch remote_car_send_key +: 016794 remote_car_send_attack_key5_press: +0x45a5 016795 jam motor_negative ,mem_remote_car_24g_motor3_payload +0x45a6 016796 branch remote_car_send_key +: 016798 remote_car_send_fire_key6_press: +0x45a7 016799 jam 0x01 ,mem_remote_car_24g_fire_send_payload +0x45a8 016800 branch remote_car_send_attack +: 016802 remote_car_single_motor_key_rel: +0x45a9 016803 copy queue ,pdata +0x45aa 016804 beq 0 ,remote_car_send_motor1_key0_rel +0x45ab 016805 beq 1 ,remote_car_send_motor1_key1_rel +0x45ac 016806 beq 2 ,remote_car_send_motor2_key2_rel +0x45ad 016807 beq 3 ,remote_car_send_motor2_key3_rel +0x45ae 016808 rtn +: 016810 remote_car_double_motor_key_rel: +0x45af 016811 copy queue ,pdata +0x45b0 016812 beq 0 ,remote_car_send_double_motor_key0_rel +0x45b1 016813 beq 1 ,remote_car_send_double_motor_key1_rel +0x45b2 016814 beq 2 ,remote_car_send_double_motor_key2_rel +0x45b3 016815 beq 3 ,remote_car_send_double_motor_key3_rel +0x45b4 016816 rtn +: 016818 remote_car_send_motor1_key0_rel: +: 016819 remote_car_send_motor1_key1_rel: +0x45b5 016820 jam motor_stop ,mem_remote_car_24g_motor1_payload +0x45b6 016821 branch remote_car_send_key +: 016822 remote_car_send_motor2_key2_rel: +: 016823 remote_car_send_motor2_key3_rel: +0x45b7 016824 jam motor_stop ,mem_remote_car_24g_motor2_payload +0x45b8 016825 branch remote_car_send_key +: 016827 remote_car_send_double_motor_key0_rel: +: 016828 remote_car_send_double_motor_key1_rel: +: 016829 remote_car_send_double_motor_key2_rel: +: 016830 remote_car_send_double_motor_key3_rel: +0x45b9 016831 jam motor_stop ,mem_remote_car_24g_motor1_payload +0x45ba 016832 jam motor_stop ,mem_remote_car_24g_motor2_payload +0x45bb 016833 branch remote_car_send_key +: 016835 remote_car_send_attack_key4_rel: +: 016836 remote_car_send_attack_key5_rel: +0x45bc 016837 jam motor_stop ,mem_remote_car_24g_motor3_payload +0x45bd 016838 branch remote_car_send_key +: 016840 remote_car_send_key: +0x45be 016841 arg mem_remote_car_24g_motor_packet ,rega +0x45bf 016842 branch queue_push +: 016843 remote_car_send_attack: +0x45c0 016844 arg mem_remote_car_24g_fire_packet ,rega +0x45c1 016845 branch queue_push +: 016847 remote_car_g24_package_data: +0x45c2 016848 fetch 1 ,mem_remote_car_24g_pair_success_flag +0x45c3 016849 beq work_paired ,remote_car_g24_send_empty +0x45c4 016850 arg mem_remote_car_24g_tx_temp ,rega +0x45c5 016851 call queue_pop +0x45c6 016852 nbranch remote_car_moto_data ,user +: 016853 remote_car_g24_package_data_continue: +0x45c7 016854 arg mem_remote_car_24g_tx_temp ,contr +0x45c8 016855 ifetch 1 ,contr +0x45c9 016856 copy pdata ,rega +0x45ca 016857 arg mem_remote_car_24g_tx_temp + 1 ,regb +0x45cb 016860 rtn +: 016862 remote_car_g24_send_empty: +0x45cc 016863 jam 0 ,mem_remote_car_24g_pair_success_flag +0x45cd 016864 enable user +0x45ce 016865 arg 1 ,rega +0x45cf 016866 arg mem_remote_car_empty_packet ,regb +0x45d0 016867 rtn +: 016869 remote_car_moto_data: +0x45d1 016870 fetch 1 ,mem_remote_car_24g_tx_temp + 3 +0x45d2 016871 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next +0x45d3 016872 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next +0x45d4 016873 rtn +: 016874 remote_car_moto_data_next: +0x45d5 016875 fetch 1 ,mem_remote_car_24g_tx_temp + 6 +0x45d6 016876 nbranch remote_car_moto_data_enable_user ,blank +0x45d7 016877 fetch 1 ,mem_remote_car_24g_tx_temp + 8 +0x45d8 016878 nbranch remote_car_moto_data_enable_user ,blank +0x45d9 016879 fetch 1 ,mem_remote_car_24g_tx_temp + 10 +0x45da 016880 nbranch remote_car_moto_data_enable_user ,blank +0x45db 016881 rtn +: 016882 remote_car_moto_data_enable_user: +0x45dc 016883 enable user +0x45dd 016884 branch remote_car_g24_package_data_continue +: 016892 shutter_init: +0x45de 016893 rtn wake +0x45df 016894 hfetch 1 ,core_gpio_sel1 +0x45e0 016895 and_into 0xfc ,pdata +0x45e1 016896 hstore 1 ,core_gpio_sel1 +0x45e2 016897 setarg shutter_le_before_hibernate +0x45e3 016898 store 2 ,mem_cb_before_hibernate +0x45e4 016900 setarg shutter_process_lpm_before +0x45e5 016901 store 2 ,mem_cb_before_lpm +0x45e6 016903 setarg app_enter_hibernate +0x45e7 016904 store 2 ,mem_cb_discovry_timeout +0x45e8 016906 setarg shutter_process_idle +0x45e9 016907 store 2 ,mem_cb_idle_process +0x45ea 016909 setarg shutter_process_bb_event +0x45eb 016910 store 2 ,mem_cb_bb_event_process +0x45ec 016912 setarg shutter_le_scale_lpm_lock +0x45ed 016913 store 2 ,mem_cb_check_wakelock +0x45ee 016915 setarg ble_shutter_receive_data +0x45ef 016916 store 2 ,mem_cb_att_write +0x45f0 016918 setarg shutter_le_bb_event_timer +0x45f1 016919 store 2 ,mem_cb_event_timer +0x45f2 016921 setarg shutter_key_change +0x45f3 016922 store 2 ,mem_cb_shutter_keycan +0x45f4 016924 setarg shutter_soft_swtich_power_on +0x45f5 016925 store 2 ,mem_shutter_soft_switch_poweron_callback_function +0x45f6 016926 setarg shutter_soft_swtich_power_off +0x45f7 016927 store 2 ,mem_shutter_soft_switch_poweroff_callback_function +0x45f8 016929 call le_modified_name +0x45f9 016930 call shutter_load_bluetooth_config_by_user_config +0x45fa 016931 call shutter_init_bluetooth_config +0x45fb 016932 call shutter_init_param +0x45fc 016933 call keyscan_key_init +0x45fd 016934 call shutter_load_buffer_config_form_datarom +0x45fe 016935 call queue_init +0x45ff 016936 call ui_led_init_global +0x4600 016937 call shutter_load_bluetooth_config +0x4601 016938 call shutter_load_bluetooth_config_by_eeprom +0x4602 016940 bpatch patch1e_5 ,mem_patch1e +0x4603 016941 call classic_shutter_load_reconn_info +0x4604 016942 fetch 1 ,mem_shutter_hard_soft_switch_case +0x4605 016943 beq hard_switch ,shutter_hart_swtich_power_on +0x4606 016944 fetch 1 ,mem_shutter_soft_switch_button_gpio +0x4607 016945 store 1 ,mem_ui_button_gpio +0x4608 016946 branch ui_soft_swtich_init +: 016949 shutter_hart_swtich_power_on: +0x4609 016950 jam ui_button_gpio_disable ,mem_ui_button_gpio +0x460a 016951 jam ss_state_power_on ,mem_shutter_soft_switch_power_state +0x460b 016952 branch shutter_start_reconnect +: 016956 shutter_le_scale_lpm_lock: +0x460c 016957 fetch 1 ,mem_shutter_soft_switch_power_state +0x460d 016958 beq ss_state_power_off ,app_get_lpm_wake_lock +0x460e 016959 call l2cap_malloc_get_full_map +0x460f 016960 fetch 1 ,mem_used_map +0x4610 016961 nbranch app_get_lpm_wake_lock ,blank +0x4611 016962 branch app_put_lpm_wake_lock +: 016966 shutter_process_bb_event: +0x4612 016967 copy regc ,pdata +0x4613 016969 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect +0x4614 016970 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect +0x4615 016971 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed +0x4616 016972 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete +0x4617 016973 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect +0x4618 016974 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect +0x4619 016975 beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake +0x461a 016976 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout +0x461b 016977 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug +0x461c 016978 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff +0x461d 016979 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information +0x461e 016981 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect +0x461f 016982 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect +0x4620 016983 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete +0x4621 016984 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response +0x4622 016986 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press +0x4623 016987 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down +0x4624 016988 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up +0x4625 016989 rtn +: 016994 classic_shutter_process_baseband_connect: +0x4626 016995 jam 0 ,mem_classic_shutter_hid_disconn_count +0x4627 016996 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x4628 016997 rtn +: 017000 classic_shutter_process_baseband_disconnect: +0x4629 017001 call classic_shutter_disconnect_clear_flag +0x462a 017002 branch classic_shutter_process_reconnect_failed +: 017004 classic_shutter_disconnect_clear_flag: +0x462b 017005 jam app_handshake_null ,mem_app_handshake_flag +0x462c 017006 jam 0 ,mem_hid_handshake_timer_count +0x462d 017007 jam 0 ,mem_unsniff2sniff_timer_count +0x462e 017008 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x462f 017009 jam 0 ,mem_classic_shutter_hid_disconn_count +0x4630 017010 branch queue_init +: 017013 classic_shutter_process_reconnect_failed: +0x4631 017014 call app_disconn_reason_clear +0x4632 017015 branch shutter_start_bluetooth_discovery +: 017018 classic_shutter_process_setup_complete: +0x4633 017019 call shutter_stop_bluetooth_discovery +0x4634 017020 branch app_led_stop_blink +: 017023 classic_shutter_process_hid_connect: +0x4635 017024 setarg hid_handshake_timeout +0x4636 017025 store 1 ,mem_hid_handshake_timer_count +0x4637 017026 rtn +: 017029 classic_shutter_process_hid_disconnect: +0x4638 017030 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x4639 017031 setarg flag_shutter_hid_disconn_timeout +0x463a 017032 store 1 ,mem_classic_shutter_hid_disconn_count +0x463b 017033 rtn +: 017036 classic_shutter_process_hid_handshake: +0x463c 017037 fetch 1 ,mem_app_handshake_flag +0x463d 017038 rtneq app_handshake_done +0x463e 017039 jam app_handshake_done ,mem_app_handshake_flag +0x463f 017040 call app_lpm_mult_enable +0x4640 017041 call app_store_reconn_info +0x4641 017042 call shutter_stop_bluetooth_discovery +0x4642 017043 call app_led_off +0x4643 017044 branch app_bt_enter_sniff +: 017047 classic_shutter_process_reconnect_page_timeout: +0x4644 017048 branch classic_shutter_process_reconnect_failed +: 017051 classic_shutter_process_virtual_cable_unplug: +0x4645 017052 setarg flag_shutter_cable_unplug_timeout +0x4646 017053 store 1 ,mem_classic_shutter_cable_unplug_conut +0x4647 017054 rtn +: 017057 classic_shutter_process_remote_unsniff: +0x4648 017058 branch app_start_auto_sniff +: 017062 classic_shutter_process_store_reconnect_information: +0x4649 017063 arg nvram_eeprom_offset ,regb +0x464a 017064 fetch 1 ,mem_nv_data_number +0x464b 017065 mul32 pdata ,34 ,temp +0x464c 017066 fetch 2 ,mem_nv_data_ptr +0x464d 017067 copy pdata ,rega +0x464e 017068 branch iicd_write_eep_data +: 017070 classic_shutter_load_reconn_info: +0x464f 017071 arg nvram_eeprom_offset ,regb +0x4650 017072 fetch 1 ,mem_shutter_bluetooth_type +0x4651 017073 rtnbit0 classic_shutter +0x4652 017074 fetch 1 ,mem_nv_data_number +0x4653 017075 rtn blank +0x4654 017076 mul32 pdata ,34 ,temp +0x4655 017077 fetch 2 ,mem_nv_data_ptr +0x4656 017078 copy pdata ,rega +0x4657 017079 branch iicd_read_eep_data +: 017083 ble_shutter_process_baseband_connect: +0x4658 017084 call shutter_stop_bluetooth_discovery +0x4659 017085 setarg 0 +0x465a 017086 store 2 ,mem_ble_shutter_reconn_timer +0x465b 017087 branch app_led_off +: 017090 ble_shutter_process_baseband_disconnect: +0x465c 017091 call queue_init +0x465d 017092 jam 0 ,mem_ble_shutter_enable_notify +0x465e 017093 branch shutter_start_reconnect +: 017096 ble_shutter_process_reconnect_complete: +0x465f 017097 call queue_init +0x4660 017098 jam 1 ,mem_ble_shutter_enable_notify +0x4661 017099 fetch 8 ,mem_ble_shutter_interval_min +0x4662 017100 store 8 ,mem_le_interval_min +0x4663 017101 call app_lpm_mult_enable +0x4664 017102 branch le_l2cap_tx_update_req +: 017105 ble_shutter_process_parse_connect_parameter_update_response: +0x4665 017106 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x4666 017107 rtneq ble_signaling_connect_parameter_update_accepted +0x4667 017108 fetch 8 ,mem_ble_shutter_interval_min_new +0x4668 017109 rtn blank +0x4669 017110 store 8 ,mem_le_interval_min +0x466a 017111 branch le_l2cap_tx_update_req +: 017115 shutter_process_soft_swtich_button_long_press: +0x466b 017116 branch ui_soft_switch_botton_long_press +: 017118 shutter_process_soft_swtich_button_down: +0x466c 017119 fetch 1 ,mem_shutter_hard_soft_switch_case +0x466d 017120 rtneq hard_switch +0x466e 017121 fetch 1 ,mem_shutter_soft_switch_power_state +0x466f 017122 rtnne ss_state_power_on +0x4670 017123 call shutter_store_currenct_led_state +0x4671 017124 branch app_led_on +: 017126 shutter_store_currenct_led_state: +0x4672 017127 jam 1 ,mem_shutter_soft_swtich_botton_down +0x4673 017128 arg 11 ,loopcnt +0x4674 017129 arg mem_shutter_soft_swtich_led_struct_temp ,contw +0x4675 017130 arg mem_shutter_led_struct_app_led ,contr +0x4676 017131 branch memcpy +: 017133 shutter_process_soft_swtich_button_up: +0x4677 017134 fetch 1 ,mem_shutter_hard_soft_switch_case +0x4678 017135 rtneq hard_switch +0x4679 017136 fetch 1 ,mem_shutter_soft_switch_power_state +0x467a 017137 beq ss_state_power_on ,shutter_load_currenct_led_state +0x467b 017138 branch ui_soft_switch_botton_up +: 017140 shutter_load_currenct_led_state: +0x467c 017141 fetch 1 ,mem_shutter_soft_swtich_botton_down +0x467d 017142 rtnne 1 +0x467e 017143 jam 0 ,mem_shutter_soft_swtich_botton_down +0x467f 017144 fetch 2 ,mem_ui_state_map +0x4680 017145 bbit1 ui_state_bt_connected ,app_led_off +0x4681 017146 bbit1 ui_state_ble_connected ,app_led_off +0x4682 017147 arg 11 ,loopcnt +0x4683 017148 arg mem_shutter_soft_swtich_led_struct_temp ,contr +0x4684 017149 arg mem_shutter_led_struct_app_led ,contw +0x4685 017150 branch memcpy +: 017155 shutter_le_bb_event_timer: +0x4686 017157 call shutter_check_sleep_timer +0x4687 017160 call shutter_check_power_off_timer +0x4688 017163 call classic_shutter_check_unplug_timer +0x4689 017164 call classic_shutter_hid_handshake_timer +0x468a 017165 call classic_shutter_hid_disconn_timer +0x468b 017168 branch ble_shutter_reconn_timer +: 017172 shutter_check_sleep_timer: +0x468c 017173 arg mem_shutter_sleep_timer ,regc +0x468d 017174 arg shutter_sleep_timeout ,regb +0x468e 017175 branch timer_single_step_2b +: 017176 shutter_sleep_timeout: +0x468f 017177 jam ss_state_power_off ,mem_shutter_soft_switch_power_state +0x4690 017178 call app_led_off +0x4691 017179 call shutter_disconnect_current_connection +0x4692 017180 branch shutter_wait_power_off +: 017183 shutter_check_power_off_timer: +0x4693 017184 arg mem_shutter_power_off_timer ,regc +0x4694 017185 arg shutter_check_power_off_timeout ,regb +0x4695 017186 branch timer_single_step +: 017188 shutter_check_power_off_timeout: +0x4696 017189 fetch 2 ,mem_ui_state_map +0x4697 017190 bbit1 ui_state_ble_connected ,shutter_wait_power_off +0x4698 017191 bbit1 ui_state_bt_connected ,shutter_wait_power_off +0x4699 017192 fetch 1 ,mem_shutter_led_struct_app_led_type +0x469a 017193 beq ui_led_state_blink_start ,shutter_wait_power_off +0x469b 017194 beq ui_led_state_blink_lighting ,shutter_wait_power_off +0x469c 017195 beq ui_led_state_blink_darking ,shutter_wait_power_off +0x469d 017196 branch app_enter_hibernate +: 017200 classic_shutter_check_unplug_timer: +0x469e 017201 arg mem_classic_shutter_cable_unplug_conut ,regc +0x469f 017202 arg classic_shutter_unplug_timeout ,regb +0x46a0 017203 branch timer_single_step +: 017205 classic_shutter_unplug_timeout: +0x46a1 017206 fetch 1 ,mem_control_tasks +0x46a2 017207 set1 l2cap_disconnect_interrupt ,pdata +0x46a3 017208 set1 l2cap_disconnect_control ,pdata +0x46a4 017209 store 1 ,mem_control_tasks +0x46a5 017210 rtn +: 017212 classic_shutter_hid_handshake_timer: +0x46a6 017213 arg mem_hid_handshake_timer_count ,regc +0x46a7 017214 arg classic_shutter_process_hid_handshake ,regb +0x46a8 017215 branch timer_single_step +: 017217 classic_shutter_hid_disconn_timer: +0x46a9 017218 arg mem_classic_shutter_hid_disconn_count ,regc +0x46aa 017219 arg app_bt_disconnect ,regb +0x46ab 017220 branch timer_single_step +: 017225 ble_shutter_reconn_timer: +0x46ac 017226 fetch 1 ,mem_shutter_soft_switch_power_state +0x46ad 017227 rtnne ss_state_power_on +0x46ae 017228 arg mem_ble_shutter_reconn_timer ,regc +0x46af 017229 arg shutter_start_bluetooth_discovery ,regb +0x46b0 017230 branch timer_single_step_2b +: 017233 shutter_process_idle: +0x46b1 017234 call shutter_send_data_to_master +0x46b2 017235 branch keyscan_key_process +: 017238 shutter_process_lpm_before: +0x46b3 017239 branch keyscan_process_lpm_before +: 017241 shutter_le_before_hibernate: +0x46b4 017242 call gpio_set_before_lpm_common +0x46b5 017243 branch shutter_process_lpm_before +: 017249 shutter_stop_bluetooth_discovery: +0x46b6 017250 fetch 1 ,mem_shutter_bluetooth_type +0x46b7 017251 bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery +0x46b8 017252 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery +0x46b9 017253 rtn +: 017255 ble_shutter_stop_bluetooth_discovery: +0x46ba 017256 fetch 2 ,mem_ble_shutter_connect_timeout +0x46bb 017257 store 2 ,mem_shutter_sleep_timeout +0x46bc 017258 store 2 ,mem_shutter_sleep_timer +0x46bd 017259 branch app_ble_stop_adv +: 017261 classic_shutter_stop_bluetooth_discovery: +0x46be 017262 fetch 2 ,mem_classic_shutter_connect_timeout +0x46bf 017263 store 2 ,mem_shutter_sleep_timeout +0x46c0 017264 store 2 ,mem_shutter_sleep_timer +0x46c1 017265 branch app_bt_stop_discovery +: 017267 shutter_start_bluetooth_discovery: +0x46c2 017268 fetch 1 ,mem_shutter_soft_switch_power_state +0x46c3 017269 rtnne ss_state_power_on +0x46c4 017270 fetch 1 ,mem_shutter_bluetooth_type +0x46c5 017271 bbit1 classic_shutter ,classic_shutter_start_discovery +0x46c6 017272 bbit1 ble_shutter ,ble_shutter_start_discovery +0x46c7 017273 rtn +: 017275 classic_shutter_start_discovery: +0x46c8 017276 fetch 2 ,mem_classic_shutter_discovery_timeout , +0x46c9 017277 store 2 ,mem_shutter_sleep_timeout +0x46ca 017278 store 2 ,mem_shutter_sleep_timer +0x46cb 017279 branch app_bt_start_discovery_short +: 017281 ble_shutter_start_discovery: +0x46cc 017282 fetch 2 ,mem_ui_state_map +0x46cd 017283 rtnbit1 ui_state_ble_connected +0x46ce 017284 fetch 2 ,mem_ble_shutter_discovery_timeout +0x46cf 017285 store 2 ,mem_shutter_sleep_timeout +0x46d0 017286 store 2 ,mem_shutter_sleep_timer +0x46d1 017287 fetch 2 ,mem_ble_shutter_discovery_adv_interval +0x46d2 017288 call shutter_ble_adv_interval_set +0x46d3 017289 call app_led_start_blink +0x46d4 017290 fetch 4 ,mem_ble_shutter_discovery_blink_on_time +0x46d5 017291 store 4 ,mem_shutter_led_struct_app_led_on_time +0x46d6 017292 fetch 2 ,mem_ui_state_map +0x46d7 017293 rtnbit1 ui_state_ble_adv +0x46d8 017294 branch app_ble_start_adv +: 017297 shutter_start_reconnect: +0x46d9 017298 fetch 1 ,mem_shutter_soft_switch_power_state +0x46da 017299 rtnne ss_state_power_on +0x46db 017300 fetch 1 ,mem_shutter_bluetooth_type +0x46dc 017301 bbit1 classic_shutter ,classic_shutter_start_reconnect +0x46dd 017302 bbit1 ble_shutter ,ble_shutter_start_reconnect +0x46de 017303 rtn +: 017305 classic_shutter_start_reconnect: +0x46df 017306 call app_check_reconn_target +0x46e0 017307 branch shutter_start_bluetooth_discovery ,blank +0x46e1 017308 call app_led_on +0x46e2 017309 call app_bt_stop_discovery +0x46e3 017310 branch app_bt_start_reconnect +: 017312 ble_shutter_start_reconnect: +0x46e4 017313 fetch 2 ,mem_ble_shutter_reconn_timer +0x46e5 017314 fetcht 2 ,mem_ble_shutter_reconn_timeout +0x46e6 017315 storet 2 ,mem_ble_shutter_reconn_timer +0x46e7 017316 nrtn blank +0x46e8 017317 fetch 2 ,mem_ble_shutter_reconn_dav_interval +0x46e9 017318 call shutter_ble_adv_interval_set +0x46ea 017319 call app_led_start_blink +0x46eb 017320 fetch 4 ,mem_ble_shutter_reconn_blink_on_time +0x46ec 017321 store 4 ,mem_shutter_led_struct_app_led_on_time +0x46ed 017322 fetch 2 ,mem_ui_state_map +0x46ee 017323 rtnbit1 ui_state_ble_adv +0x46ef 017324 branch app_ble_start_adv +: 017327 shutter_ble_adv_interval_set: +0x46f0 017328 store 2 ,mem_lpm_interval +0x46f1 017329 increase -4 ,pdata +0x46f2 017330 store 2 ,mem_le_adv_interval +0x46f3 017331 rtn +: 017334 shutter_disconnect_current_connection: +0x46f4 017335 fetch 2 ,mem_ui_state_map +0x46f5 017336 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x46f6 017337 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x46f7 017338 branch shutter_stop_bluetooth_discovery +: 017342 app_check_reconn_target: +0x46f8 017343 fetch 1 ,mem_nv_data_number +0x46f9 017344 copy pdata ,loopcnt +0x46fa 017345 fetch 2 ,mem_nv_data_ptr +0x46fb 017346 copy pdata ,rega +: 017347 app_check_reconn_target_loop: +0x46fc 017348 ifetch 2 ,rega +0x46fd 017349 beq 0 ,found_reconn_device +0x46fe 017350 increase nv_data_len ,rega +0x46ff 017351 loop app_check_reconn_target_loop +0x4700 017352 branch enable_blank +: 017354 found_reconn_device: +0x4701 017355 ifetch 6 ,contr +0x4702 017356 store 6 ,mem_hci_plap +0x4703 017357 increase 10 ,contr +0x4704 017358 arg mem_link_key ,contw +0x4705 017359 call memcpy16 +0x4706 017360 call check_link_key_load +0x4707 017361 branch disable_blank +: 017367 shutter_check_data_enable: +0x4708 017368 call disable_user +0x4709 017369 fetch 2 ,mem_ui_state_map +0x470a 017370 bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable +0x470b 017371 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable +0x470c 017372 rtn +: 017374 shutter_check_bt_data_enable: +0x470d 017375 fetch 1 ,mem_hid_interrupt_state +0x470e 017376 rtnne 0x3f +0x470f 017377 branch enable_user +: 017379 shutter_check_ble_data_enable: +0x4710 017380 fetch 1 ,mem_ble_shutter_enable_notify +0x4711 017381 rtn blank +0x4712 017382 branch enable_user +: 017387 shutter_check_bluetooth_conn: +0x4713 017388 call disable_user +0x4714 017389 fetch 2 ,mem_ui_state_map +0x4715 017390 rtnbit1 ui_state_bt_connected +0x4716 017391 rtnbit1 ui_state_ble_connected +0x4717 017392 branch enable_user +: 017396 shutter_change_bluetooth_status_bt_disconn: +0x4718 017397 fetch 1 ,mem_shutter_bluetooth_type +0x4719 017398 bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn +0x471a 017399 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn +0x471b 017400 rtn +: 017402 classic_shutter_change_bluetooth_status_bt_disconn: +0x471c 017403 fetch 1 ,mem_scan_mode +0x471d 017404 rtnne 0x03 +0x471e 017405 branch shutter_start_reconnect +: 017407 ble_shutter_change_bluetooth_status_bt_disconn: +0x471f 017408 branch shutter_start_reconnect +: 017411 shutter_check_send_data: +0x4720 017412 disable user2 +0x4721 017413 fetch 2 ,mem_shutter_sleep_timeout +0x4722 017414 store 2 ,mem_shutter_sleep_timer +0x4723 017416 call shutter_check_bluetooth_conn +0x4724 017417 branch shutter_change_bluetooth_status_bt_disconn ,user +0x4725 017419 call shutter_check_data_enable +0x4726 017420 nrtn user +0x4727 017421 enable user2 +0x4728 017422 rtn +: 017426 shutter_key_change: +0x4729 017427 call shutter_check_send_data +0x472a 017428 nrtn user2 +0x472b 017429 deposit rega +0x472c 017430 branch shutter_key_release ,blank +: 017431 shutter_key_press: +0x472d 017432 call app_led_on +0x472e 017433 arg mem_key0_press ,regc +0x472f 017434 branch push_queue_press_or_release +: 017436 shutter_key_release: +0x4730 017437 call app_led_off +0x4731 017438 arg mem_key0_release ,regc +: 017440 push_queue_press_or_release: +0x4732 017441 arg max_queue_num ,pdata +0x4733 017442 imul32 queue ,pdata +0x4734 017443 iadd regc ,regc +: 017446 push_buffer_in_queue: +0x4735 017447 ifetch 1 ,regc +0x4736 017448 rtn blank +0x4737 017449 call queue_push_one_byte +0x4738 017450 increase 1 ,regc +0x4739 017451 branch push_buffer_in_queue +: 017454 shutter_send_data_to_master: +0x473a 017455 fetch 2 ,mem_ui_state_map +0x473b 017456 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data +0x473c 017457 bbit1 ui_state_bt_connected ,pop_queue_to_classic_data +0x473d 017458 rtn +: 017460 pop_queue_to_ble_data: +0x473e 017461 call le_fifo_check_nearly_full +0x473f 017462 nrtn blank +0x4740 017463 call queue_pop_one_byte +0x4741 017464 nrtn user +0x4742 017465 pincrease -1 +0x4743 017466 mul32 pdata ,shutter_ble_data_buffer ,pdata +0x4744 017467 arg mem_ble_data_buffer1 ,temp +0x4745 017468 iadd temp ,contr +: 017469 le_send_notify_from_list: +0x4746 017470 ifetch 1 ,contr +0x4747 017471 copy pdata ,rega +0x4748 017472 ifetcht 2 ,contr +0x4749 017473 call store_contr +0x474a 017474 call le_att_malloc_tx_notify +0x474b 017475 copy rega ,loopcnt +0x474c 017476 call get_contr +0x474d 017477 branch memcpy +: 017480 pop_queue_to_classic_data: +0x474e 017481 call l2cap_malloc_is_fifo_nearly_full +0x474f 017482 nrtn blank +0x4750 017483 call queue_pop_one_byte +0x4751 017484 nrtn user +0x4752 017485 pincrease -1 +0x4753 017486 mul32 pdata ,shutter_classic_data_buffer ,pdata +0x4754 017487 arg mem_classic_data_buffer1 ,temp +0x4755 017488 iadd temp ,contr +0x4756 017489 ifetch 5 ,contr +0x4757 017490 store 5 ,mem_classic_data_buffer +: 017491 classic_send_hid_data: +0x4758 017492 fetch 1 ,mem_classic_data_buffer +0x4759 017493 copy pdata ,rega +0x475a 017494 call hid_malloc_tx_buff +0x475b 017495 fetch 2 ,mem_hid_int_remote_cid +0x475c 017496 istore 2 ,contw +0x475d 017497 setarg 0xa1 +0x475e 017498 istore 1 ,contw +0x475f 017499 fetch 4 ,mem_classic_data_buffer + 1 +0x4760 017500 istore 9 ,contw +0x4761 017501 rtn +: 017505 queue_push_one_byte: +0x4762 017506 store 1 ,mem_pdatatemp +0x4763 017507 arg mem_pdatatemp ,rega +0x4764 017508 branch queue_push +: 017510 queue_pop_one_byte: +0x4765 017511 arg mem_pdatatemp ,rega +0x4766 017512 call queue_pop +0x4767 017513 nrtn user +0x4768 017514 fetch 1 ,mem_pdatatemp +0x4769 017515 rtn +: 017518 ble_shutter_receive_data: +0x476a 017519 fetch 2 ,mem_le_att_handle +0x476b 017520 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete +0x476c 017521 rtn +: 017523 shutter_init_param: +0x476d 017524 setarg 0x02 +0x476e 017525 store 1 ,mem_shutter_power_off_timeout +0x476f 017527 setarg 0x00200008 +0x4770 017528 store 4 ,mem_ble_shutter_interval_min +0x4771 017529 setarg 0x012c0005 +0x4772 017530 istore 4 ,contw +0x4773 017533 jam 0x17 ,mem_le_local_mtu +0x4774 017536 setarg 0x1b +0x4775 017537 store 2 ,mem_le_pairing_handle +0x4776 017538 call le_set_config_fixed_ltk +0x4777 017539 call le_set_fixed_ltk +0x4778 017540 call le_set_justwork +0x4779 017541 branch le_set_config_read_authentication +: 017544 shutter_load_buffer_config_form_datarom: +0x477a 017546 arg ble_key_value_list_size ,loopcnt +0x477b 017547 arg mem_ble_data_buffer1 ,contw +0x477c 017548 arg ble_shutter_key_value_list ,contr +0x477d 017549 call memcpy_fast +0x477e 017550 arg bt_key_value_list_size ,loopcnt +0x477f 017551 arg mem_classic_data_buffer1 ,contw +0x4780 017552 arg classic_shutter_key_value_list ,contr +0x4781 017553 branch memcpy_fast +: 017556 shutter_load_ble_gatt_form_datarom: +0x4782 017557 arg ble_gatt_list_size ,loopcnt +0x4783 017558 arg ble_shutter_gatt_list ,contr +0x4784 017559 branch memcpy_fast +: 017562 shutter_load_bt_sdp_form_datarom: +0x4785 017563 arg bt_sdp_list_size ,loopcnt +0x4786 017564 arg classic_shutter_sdp_list ,contr +0x4787 017565 branch memcpy_fast +: 017569 shutter_init_bluetooth_config: +0x4788 017570 call shutter_check_load_config_flag +0x4789 017571 nrtn user +0x478a 017572 fetch 1 ,mem_shutter_config_select_gpio1 +0x478b 017573 call shutter_init_bluetooth_config_gpio_input +0x478c 017574 fetch 1 ,mem_shutter_config_select_gpio2 +0x478d 017575 call shutter_init_bluetooth_config_gpio_input +0x478e 017576 fetch 1 ,mem_shutter_config_select_gpio3 +0x478f 017577 branch shutter_init_bluetooth_config_gpio_input +: 017579 shutter_init_bluetooth_config_gpio_input: +0x4790 017580 rtn blank +0x4791 017581 or pdata ,0x80 ,temp +0x4792 017582 branch gpio_config_input_nowake +: 017585 shutter_load_bluetooth_config: +0x4793 017586 call shutter_check_load_config_flag +0x4794 017587 nrtn user +0x4795 017588 call shutter_load_bluetooth_config_label +0x4796 017589 branch shutter_load_bluetooth_config_by_otp +: 017591 shutter_load_bluetooth_config_label: +0x4797 017592 arg 0 ,rega +0x4798 017593 fetch 1 ,mem_shutter_config_select_gpio1 +0x4799 017594 call shutter_load_bluetooth_config_read_gpio_input +0x479a 017595 nsetflag blank ,0 ,rega +0x479b 017596 fetch 1 ,mem_shutter_config_select_gpio2 +0x479c 017597 call shutter_load_bluetooth_config_read_gpio_input +0x479d 017598 nsetflag blank ,1 ,rega +0x479e 017599 fetch 1 ,mem_shutter_config_select_gpio3 +0x479f 017600 call shutter_load_bluetooth_config_read_gpio_input +0x47a0 017601 nsetflag blank ,2 ,rega +0x47a1 017602 copy rega ,pdata +0x47a2 017603 store 1 ,mem_shutter_config_label +0x47a3 017604 fetch 1 ,mem_shutter_config_size +0x47a4 017605 imul32 rega ,pdata +0x47a5 017606 fetcht 2 ,mem_shutter_config_otp_base_address +0x47a6 017607 iadd temp ,pdata +0x47a7 017608 store 2 ,mem_shutter_config_otp_addr +0x47a8 017609 rtn +: 017611 shutter_load_bluetooth_config_read_gpio_input: +0x47a9 017612 rtn blank +0x47aa 017613 or pdata ,0x80 ,temp +0x47ab 017614 call gpio_get_bit +0x47ac 017615 nbranch enable_blank ,true +0x47ad 017616 branch disable_blank +: 017619 shutter_check_load_config_flag: +0x47ae 017620 call disable_user +0x47af 017621 fetch 1 ,mem_shutter_config_user_size +0x47b0 017622 nrtn blank +0x47b1 017623 fetch 1 ,mem_shutter_config_enable +0x47b2 017624 rtn blank +0x47b3 017625 branch enable_user +: 017628 shutter_load_bluetooth_config_by_otp: +0x47b4 017629 call otp_enable_chgpump +0x47b5 017630 fetch 2 ,mem_shutter_config_otp_addr +0x47b6 017631 arg mem_shutter_config_data_temp ,rega +0x47b7 017632 fetcht 1 ,mem_shutter_config_size +0x47b8 017633 call otpd_read_data +0x47b9 017634 call otp_disable_chgpump +: 017635 shutter_load_bluetooth_config_store_name: +0x47ba 017636 fetch 1 ,mem_shutter_config_data_temp +0x47bb 017637 copy pdata ,loopcnt +0x47bc 017638 store 1 ,mem_le_name_len +0x47bd 017639 call memcpy_fast +0x47be 017640 fetch 1 ,mem_shutter_config_data_temp +0x47bf 017641 copy pdata ,loopcnt +0x47c0 017642 store 1 ,mem_local_name_length +0x47c1 017643 call memcpy_fast +0x47c2 017644 ifetch 1 ,contr +0x47c3 017645 store 1 ,mem_shutter_key_num +0x47c4 017646 ifetch 1 ,contr +0x47c5 017647 store 1 ,mem_shutter_hard_soft_switch_case +0x47c6 017648 rtn +: 017651 shutter_load_bluetooth_config_by_eeprom: +0x47c7 017652 fetch 1 ,mem_shutter_bluetooth_type +0x47c8 017653 rtnbit0 classic_shutter +0x47c9 017654 arg 3 ,temp +0x47ca 017655 fetch 2 ,mem_shutter_config_eeprom_offset_addr +0x47cb 017656 copy pdata ,regb +0x47cc 017657 arg mem_shutter_config_eeprom_start_flag ,rega +0x47cd 017658 call iicd_read_eep_data +0x47ce 017659 fetcht 2 ,mem_shutter_config_eeprom_start_flag +0x47cf 017660 setarg shutter_eeprom_config_crc +0x47d0 017661 isub temp ,null +0x47d1 017662 nrtn zero +0x47d2 017663 fetch 1 ,mem_shutter_config_user_size +0x47d3 017664 rtn blank +0x47d4 017665 copy pdata ,temp +0x47d5 017666 fetch 2 ,mem_shutter_config_eeprom_offset_addr +0x47d6 017667 add pdata ,3 ,regb +0x47d7 017668 arg mem_shutter_config_data_temp ,rega +0x47d8 017669 call iicd_read_eep_data +0x47d9 017670 branch shutter_store_config +: 017672 shutter_load_bluetooth_config_by_user_config: +0x47da 017673 fetch 2 ,mem_shutter_config_user_otp_address +0x47db 017674 rtn blank +0x47dc 017675 call otp_enable_chgpump +0x47dd 017676 arg 1 ,temp +0x47de 017677 arg mem_shutter_config_user_size ,rega +0x47df 017678 call otpd_read_data +0x47e0 017680 fetch 1 ,mem_shutter_config_user_size +0x47e1 017681 rtn blank +0x47e2 017683 fetch 2 ,mem_shutter_config_user_otp_address +0x47e3 017684 pincrease 1 +0x47e4 017685 arg mem_shutter_config_data_temp ,rega +0x47e5 017686 fetcht 1 ,mem_shutter_config_user_size +0x47e6 017687 call otpd_read_data +0x47e7 017688 call otp_disable_chgpump +: 017689 shutter_store_config: +0x47e8 017690 call shutter_load_bluetooth_config_store_name +: 017691 shutter_load_bluetooth_config_custom: +0x47e9 017692 ifetch 2 ,contr +0x47ea 017693 rtn blank +0x47eb 017694 copy pdata ,contw +0x47ec 017695 ifetcht 1 ,contr +0x47ed 017696 copy temp ,loopcnt +0x47ee 017697 call memcpy +0x47ef 017698 branch shutter_load_bluetooth_config_custom +: 017702 shutter_random_mac_addr: +0x47f0 017703 fetch 1 ,mem_shutter_bluetooth_type +0x47f1 017704 rtnbit0 classic_shutter +0x47f2 017705 fetch 2 ,mem_classic_shutter_random_mac_offset_addr +0x47f3 017706 copy pdata ,regb +0x47f4 017707 arg 4 ,temp +0x47f5 017708 arg mem_shutter_random_mac_data_temp ,rega +0x47f6 017709 call iicd_read_eep_data +0x47f7 017710 fetch 1 ,mem_shutter_random_mac_data_temp +0x47f8 017711 bne 1 ,shutter_write_random_mac_addr_to_eeprom +: 017712 shutter_write_random_mac_addr_to_eeprom: +0x47f9 017713 setarg 1 +0x47fa 017714 store 1 ,mem_shutter_random_mac_data_temp +0x47fb 017715 force 3 ,loopcnt +0x47fc 017716 call generate_random_loop +0x47fd 017717 fetch 2 ,mem_classic_shutter_random_mac_offset_addr +0x47fe 017718 copy pdata ,regb +0x47ff 017719 arg 4 ,temp +0x4800 017720 arg mem_shutter_random_mac_data_temp ,rega +0x4801 017721 call iicd_write_eep_data +: 017722 shutter_write_random_mac_addr: +0x4802 017723 fetch 3 ,mem_shutter_random_mac_data_temp + 1 +0x4803 017724 store 3 ,mem_lap +0x4804 017725 store 3 ,mem_le_lap +0x4805 017726 rtn +: 017729 shutter_soft_swtich_power_on: +0x4806 017730 branch shutter_start_reconnect +: 017733 shutter_soft_swtich_power_off: +0x4807 017734 arg 0 ,rega +0x4808 017735 arg mem_shutter_power_off_led_style ,regc +0x4809 017736 call ui_led_set_style_global +0x480a 017737 call shutter_disconnect_current_connection +: 017738 shutter_wait_power_off: +0x480b 017739 fetch 1 ,mem_shutter_power_off_timeout +0x480c 017740 store 1 ,mem_shutter_power_off_timer +0x480d 017741 rtn +: 017745 ui_soft_swtich_init: +0x480e 017746 setarg ss_state_power_up +0x480f 017747 call ui_soft_swtich_init_power_on_time +0x4810 017748 jam ui_button_state_up ,mem_ui_button_last_state +0x4811 017749 call ui_button_init +0x4812 017750 call ui_button_polling +0x4813 017751 fetch 2 ,mem_ui_state_map +0x4814 017752 rtnbit1 ui_state_btn_down +0x4815 017753 branch app_enter_hibernate +: 017755 ui_soft_swtich_init_power_on_time: +0x4816 017756 fetcht 2 ,mem_power_param_ptr +0x4817 017757 istore 1 ,temp +0x4818 017758 ifetch 1 ,contw +0x4819 017759 store 1 ,mem_ui_button_timeout +0x481a 017760 rtn +: 017763 ui_soft_switch_botton_up: +0x481b 017764 fetch 2 ,mem_power_param_ptr +0x481c 017765 ifetch 1 ,pdata +0x481d 017766 rtnne ss_state_power_up +0x481e 017767 branch app_enter_hibernate +: 017770 ui_soft_switch_botton_long_press: +0x481f 017771 fetcht 2 ,mem_power_param_ptr +0x4820 017772 ifetch 1 ,temp +0x4821 017773 beq ss_state_power_on ,ui_soft_switch_power_off +: 017774 ui_soft_switch_power_on: +0x4822 017775 setarg ss_state_power_on +0x4823 017776 fetcht 2 ,mem_power_param_ptr +0x4824 017777 istore 1 ,temp +0x4825 017778 add temp ,ss_power_off_time ,contr +0x4826 017779 ifetch 1 ,contr +0x4827 017780 istore 1 ,mem_ui_button_timeout +0x4828 017781 ifetch 2 ,contr +0x4829 017782 branch callback_func +: 017784 ui_soft_switch_power_off: +0x482a 017785 setarg ss_state_power_off +0x482b 017786 call ui_soft_swtich_init_power_on_time +0x482c 017787 add temp ,ss_power_off_cb ,contr +0x482d 017788 ifetch 2 ,contr +0x482e 017789 branch app_enter_hibernate ,blank +0x482f 017790 branch callback_func +: 017796 shutter_byteswap: +0x4830 017797 store 6 ,mem_tmp_buffer +0x4831 017798 fetch 1 ,mem_tmp_buffer +0x4832 017799 store 1 ,mem_tmp_buffer + 11 +0x4833 017800 ifetch 1 ,contr +0x4834 017801 store 1 ,mem_tmp_buffer + 10 +0x4835 017802 ifetch 1 ,contr +0x4836 017803 store 1 ,mem_tmp_buffer + 9 +0x4837 017804 ifetch 1 ,contr +0x4838 017805 store 1 ,mem_tmp_buffer + 8 +0x4839 017806 ifetch 1 ,contr +0x483a 017807 store 1 ,mem_tmp_buffer + 7 +0x483b 017808 ifetch 1 ,contr +0x483c 017809 store 1 ,mem_tmp_buffer + 6 +0x483d 017810 fetch 6 ,mem_tmp_buffer + 6 +0x483e 017811 rtn +: 017813 shutter_random_addr_by_otp: +0x483f 017814 call load_adc_init +0x4840 017815 fetch 1 ,mem_1v_adc_io_data +0x4841 017816 store 1 ,mem_le_lap +0x4842 017817 fetch 1 ,mem_5v_adc_hvin_data +0x4843 017818 istore 1 ,contw +0x4844 017819 fetch 1 ,mem_3v_adc_vinlpm_data +0x4845 017820 istore 1 ,contw +0x4846 017821 fetch 3 ,mem_le_lap +0x4847 017822 store 3 ,mem_lap +0x4848 017823 rtn +: 017835 sim_iic_read_eep_data: +0x4849 017836 fetch 2 ,mem_eeprom_base +0x484a 017837 iadd regb ,pdata +0x484b 017838 byteswap pdata ,pdata +0x484c 017839 store 2 ,mem_addr_mi +0x484d 017840 copy temp ,regb +0x484e 017842 call sim_iic_start +0x484f 017843 setarg 0xa0 +0x4850 017844 call sim_iic_send_byte +0x4851 017845 fetch 1 ,mem_addr_mi +0x4852 017846 call sim_iic_send_byte +0x4853 017847 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k +0x4854 017848 fetch 1 ,mem_addr_mi + 1 +0x4855 017849 call sim_iic_send_byte +: 017850 sim_iic_read_eep_data_2k: +0x4856 017851 call sim_iic_stop +0x4857 017853 call sim_iic_start +0x4858 017854 setarg 0xa1 +0x4859 017855 call sim_iic_send_byte +: 017857 sim_iic_read_eep_data_loop: +0x485a 017858 call sim_iic_read_byte +0x485b 017859 istore 1 ,rega +0x485c 017860 increase 1 ,rega +0x485d 017861 increase -1 ,regb +0x485e 017862 nbranch sim_iic_read_eep_data_loop ,zero +0x485f 017863 branch sim_iic_stop +: 017874 sim_iic_write_eep_data: +0x4860 017875 byteswap regb ,pdata +0x4861 017876 store 2 ,mem_addr_mi +0x4862 017877 copy temp ,regb +0x4863 017879 call sim_iic_start +0x4864 017880 setarg 0xa0 +0x4865 017881 call sim_iic_send_byte +0x4866 017883 fetch 1 ,mem_addr_mi +0x4867 017884 call sim_iic_send_byte +0x4868 017885 bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop +0x4869 017886 fetch 1 ,mem_addr_mi + 1 +0x486a 017887 call sim_iic_send_byte +: 017888 sim_iic_write_eep_data_loop: +0x486b 017889 ifetch 1 ,rega +0x486c 017890 call sim_iic_send_byte +0x486d 017891 increase 1 ,rega +0x486e 017892 increase -1 ,regb +0x486f 017893 nbranch sim_iic_write_eep_data_loop ,zero +0x4870 017894 branch sim_iic_stop +: 017898 sim_iic_wait_ack: +0x4871 017899 arg 10 ,loopcnt +0x4872 017900 call sim_iic_release_sda +0x4873 017901 call sim_iic_scl_output_high +0x4874 017902 call sim_iic_delay +: 017903 sim_iic_wait_ack_loop: +0x4875 017904 call sim_iic_read_sda_level +0x4876 017905 branch sim_iic_scl_output_low ,blank +0x4877 017906 loop sim_iic_wait_ack_loop +0x4878 017907 branch sim_iic_scl_output_low +: 017911 sim_iic_ack_slave: +0x4879 017912 call sim_iic_scl_output_low +0x487a 017913 call sim_iic_sda_output_low +0x487b 017914 call sim_iic_delay +0x487c 017915 call sim_iic_scl_output_high +0x487d 017916 call sim_iic_delay +0x487e 017917 branch sim_iic_scl_output_low +: 017922 sim_iic_read_byte: +0x487f 017923 arg 8 ,loopcnt +0x4880 017924 arg 0 ,regc +0x4881 017925 call sim_iic_release_sda +: 017926 sim_iic_read_byte_loop: +0x4882 017927 call sim_iic_scl_output_high +0x4883 017928 call sim_iic_delay +0x4884 017929 lshift regc ,regc +0x4885 017930 call sim_iic_read_sda_level +0x4886 017931 iadd regc ,regc +0x4887 017932 call sim_iic_delay +0x4888 017933 call sim_iic_scl_output_low +0x4889 017934 loop sim_iic_read_byte_loop +0x488a 017935 call sim_iic_ack_slave +0x488b 017936 copy regc ,pdata +0x488c 017937 rtn +: 017941 sim_iic_send_byte: +0x488d 017942 arg 8 ,loopcnt +0x488e 017943 copy pdata ,regc +0x488f 017944 call sim_iic_scl_output_low +: 017945 sim_iic_send_byte_loop: +0x4890 017946 isolate1 7 ,regc +0x4891 017947 call sim_iic_sda_output_high ,true +0x4892 017948 ncall sim_iic_sda_output_low ,true +0x4893 017949 lshift regc ,regc +0x4894 017950 call sim_iic_delay +0x4895 017951 call sim_iic_scl_output_high +0x4896 017952 call sim_iic_delay +0x4897 017953 call sim_iic_scl_output_low +0x4898 017954 call sim_iic_delay +0x4899 017955 loop sim_iic_send_byte_loop +0x489a 017956 branch sim_iic_wait_ack +: 017960 sim_iic_start: +0x489b 017961 call sim_iic_sda_output_high +0x489c 017962 call sim_iic_scl_output_high +0x489d 017963 call sim_iic_delay +0x489e 017964 call sim_iic_sda_output_low +0x489f 017965 call sim_iic_delay +0x48a0 017966 branch sim_iic_scl_output_low +: 017970 sim_iic_stop: +0x48a1 017971 call sim_iic_sda_output_low +0x48a2 017972 call sim_iic_scl_output_high +0x48a3 017973 call sim_iic_delay +0x48a4 017974 call sim_iic_sda_output_high +0x48a5 017975 branch sim_iic_delay +: 017979 sim_iic_scl_output_high: +0x48a6 017980 enable user +0x48a7 017981 fetch 1 ,sim_iic_scl_gpio_num +0x48a8 017982 branch sim_iic_config_gpio +: 017985 sim_iic_scl_output_low: +0x48a9 017986 disable user +0x48aa 017987 fetch 1 ,sim_iic_scl_gpio_num +0x48ab 017988 branch sim_iic_config_gpio +: 017991 sim_iic_sda_output_high: +0x48ac 017992 enable user +0x48ad 017993 fetch 1 ,sim_iic_sda_gpio_num +0x48ae 017994 branch sim_iic_config_gpio +: 017997 sim_iic_sda_output_low: +0x48af 017998 disable user +0x48b0 017999 fetch 1 ,sim_iic_sda_gpio_num +0x48b1 018000 branch sim_iic_config_gpio +: 018005 sim_iic_config_gpio: +0x48b2 018006 and pdata ,0x07 ,queue +0x48b3 018007 rshift3 pdata ,pdata +0x48b4 018008 arg core_gpio_oe0 ,temp +0x48b5 018009 iadd temp ,temp +0x48b6 018010 ifetch 1 ,temp +0x48b7 018011 qset1 pdata +0x48b8 018012 istore 1 ,temp +0x48b9 018013 increase 4 ,temp +0x48ba 018014 ifetch 1 ,temp +0x48bb 018015 qsetflag user ,pdata +0x48bc 018016 istore 1 ,temp +0x48bd 018017 rtn +: 018020 sim_iic_release_sda: +0x48be 018021 fetch 1 ,sim_iic_sda_gpio_num +0x48bf 018022 and pdata ,0x07 ,queue +0x48c0 018023 rshift3 pdata ,pdata +0x48c1 018024 arg core_gpio_oe0 ,temp +0x48c2 018025 iadd temp ,temp +0x48c3 018026 ifetch 1 ,temp +0x48c4 018027 qset0 pdata +0x48c5 018028 istore 1 ,temp +0x48c6 018029 rtn +: 018034 sim_iic_read_sda_level: +0x48c7 018035 nop 4 +0x48c8 018036 fetch 1 ,sim_iic_sda_gpio_num +0x48c9 018037 and pdata ,0x07 ,queue +0x48ca 018038 rshift3 pdata ,pdata +0x48cb 018039 arg core_gpio_in ,temp +0x48cc 018040 iadd temp ,temp +0x48cd 018041 setarg 0 +0x48ce 018042 ifetcht 1 ,temp +0x48cf 018043 qisolate1 temp +0x48d0 018044 setflag true ,0 ,pdata +0x48d1 018045 rtn +: 018048 sim_iic_delay: +0x48d2 018050 rtn +: 018056 usb_isr: +0x48d3 018057 bpatch patch1e_6 ,mem_patch1e +0x48d4 018058 hfetch 1 ,core_usb_status +0x48d5 018059 isolate1 7 ,pdata +0x48d6 018060 call usb_init ,true +0x48d7 018061 call usb_nak_state_judge +0x48d8 018062 hfetch 1 ,core_usb_status +0x48d9 018063 store 1 ,mem_usb_status +0x48da 018064 hfetch 1 ,core_usb_fifo_empty +0x48db 018065 store 1 ,mem_usb_fifo_empty +0x48dc 018066 hstore 1 ,core_usb_fifo_empty +0x48dd 018067 pinvert +0x48de 018068 fetcht 1 ,mem_usb_tx_wait +0x48df 018069 iand temp ,pdata +0x48e0 018070 store 1 ,mem_usb_tx_wait +0x48e1 018071 jam 0xe0 ,core_usb_status +0x48e2 018072 fetch 1 ,mem_usb_fifo_empty +0x48e3 018073 compare 0x1 ,pdata ,0x1 +0x48e4 018074 call usb0_fifo_empty ,true +0x48e5 018075 fetch 1 ,mem_usb_status +0x48e6 018076 compare 0x1 ,pdata ,0x1 +0x48e7 018077 call usb_status1 ,true +0x48e8 018078 call usb_tx +0x48e9 018079 branch usb_nak_state +: 018081 usb_init: +0x48ea 018082 bpatch patch1e_7 ,mem_patch1e +0x48eb 018083 call usb_init_param +0x48ec 018084 jam 0x00 ,core_usb_config +0x48ed 018085 nop 10000 +0x48ee 018086 jam 0xc0 ,core_usb_trig +0x48ef 018087 hfetch 2 ,core_clkoff +0x48f0 018088 set0 clock_off_usb ,pdata +0x48f1 018089 hstore 2 ,core_clkoff +0x48f2 018090 jam 0x3c ,core_usb_config +0x48f3 018091 jam 0xff ,core_usb_status +0x48f4 018092 jam 0xff ,core_usb_fifo_empty +0x48f5 018093 jam 0 ,core_usb_addr +0x48f6 018094 jam dev_default ,mem_usb0_state +0x48f7 018095 setarg mem_usb_clear_mem_end +0x48f8 018096 arg mem_usb_clear_mem_start ,contw +0x48f9 018097 isub contw ,loopcnt +0x48fa 018098 branch clear_mem +: 018100 usb_offline_check_init: +0x48fb 018101 fetcht 1 ,mem_usb_offline_check_gpio +0x48fc 018102 branch gpio_config_input +: 018103 usb_offline_state: +0x48fd 018104 fetch 1 ,mem_usb_device_enumeration_endflag +0x48fe 018105 rtn blank +0x48ff 018106 fetcht 1 ,mem_usb_offline_check_gpio +0x4900 018107 call gpio_get_bit +0x4901 018108 branch usb_init ,true +0x4902 018109 rtn +: 018112 usb_nak_state: +0x4903 018113 arg timer_nak ,queue +0x4904 018114 call timer_check +0x4905 018115 nrtn blank +0x4906 018116 fetch 1 ,mem_usb_wakestate_onetime_flag +0x4907 018117 nrtn blank +0x4908 018118 fetch 1 ,mem_usb_device_enumeration_endflag +0x4909 018119 ncall usb_mac_wakeup_judge ,blank +0x490a 018120 rtn +: 018122 usb_mem_devicedesc_init: +0x490b 018123 arg mem_devicedesc ,contw +0x490c 018124 setsect 0 ,0x11212 +0x490d 018125 setsect 1 ,0x8000 +0x490e 018126 setsect 2 ,0x0 +0x490f 018127 setsect 3 ,0x10000 +0x4910 018128 istore 9 ,contw +0x4911 018129 setsect 0 ,0x22412 +0x4912 018130 setsect 1 ,0x8604 +0x4913 018131 setsect 2 ,0x1000 +0x4914 018132 setsect 3 ,0x8 +0x4915 018133 istore 9 ,contw +0x4916 018134 setsect 0 ,0x1 +0x4917 018135 istore 1 ,contw +0x4918 018136 rtn +: 018138 usb_init_param: +0x4919 018139 jam 2 ,mem_usb0_state +0x491a 018140 setarg 0x0 +0x491b 018141 store 1 ,mem_remain +0x491c 018142 store 2 ,mem_usb_zero_packet +0x491d 018143 pincrease 1 +0x491e 018144 store 2 ,mem_usb_ones_packet +0x491f 018145 pincrease 1 +0x4920 018146 store 2 ,mem_usb_two_packet +0x4921 018147 setarg hid_kbdata_addr +0x4922 018148 store 2 ,mem_hidreportdesc_kb +0x4923 018149 setarg hid_msdata_addr +0x4924 018150 store 2 ,mem_hidreportdesc_m +0x4925 018151 arg mem_confdesc ,contw +0x4926 018152 arg hid_confdata_addr ,contr +0x4927 018153 call memcpy64 +0x4928 018154 fetch 1 ,mem_usb_tx_interval +0x4929 018155 ncall usb_tx_interval_config ,blank +0x492a 018156 branch usb_mem_devicedesc_init +: 018158 usb_tx_interval_config: +0x492b 018159 store 1 ,mem_confdesc + 34 +0x492c 018160 store 1 ,mem_confdesc + 59 +0x492d 018161 rtn +: 018162 usb_nak_state_judge: +0x492e 018163 hfetch 1 ,core_usb_status +0x492f 018164 bbit1 usb_status_nak ,usb_nak_state_timer_init +0x4930 018165 rtn +: 018167 usb_nak_state_timer_init: +0x4931 018168 call usb0_attached_state_judge +0x4932 018169 call timer_reinit +0x4933 018170 setarg timer_nak_delay +0x4934 018171 arg timer_nak ,queue +0x4935 018172 branch timer_init +: 018174 usb0_attached_state_judge: +0x4936 018175 fetch 1 ,mem_usb_state +0x4937 018176 bne usb_connected ,usb_clear_halt_dispose +0x4938 018177 jam 0 ,mem_usb_wakestate_onetime_flag +0x4939 018178 jam 0 ,mem_usb_mac_wakeup_trig +0x493a 018179 rtn +: 018180 usb_clear_halt_dispose: +0x493b 018181 fetch 1 ,mem_usb_clear_halt +0x493c 018182 rtn blank +0x493d 018183 jam 0 ,mem_usb_clear_halt +0x493e 018184 jam usb_connected ,mem_usb_state +0x493f 018185 jam 1 ,mem_usb_device_enumeration_endflag +0x4940 018186 rtn +: 018188 usb0_fifo_empty: +0x4941 018189 jam 0x1 ,core_usb_fifo_empty +0x4942 018190 branch usb0_tx +: 018192 usb_rx_no_data: +0x4943 018193 fetch 1 ,mem_usb_status +0x4944 018194 bbit1 usb_status_setup ,usb_class_type +0x4945 018195 rtn +: 018197 usb_rx_read: +0x4946 018198 hfetch 1 ,core_usb_ep +0x4947 018199 istore 1 ,contw +0x4948 018200 loop usb_rx_read +0x4949 018201 rtn +: 018203 usb_status1: +0x494a 018204 bpatch patch1f_0 ,mem_patch1f +0x494b 018205 jam 0x11 ,core_usb_status +0x494c 018206 hfetch 1 ,core_usb_ep_len +0x494d 018207 store 1 ,mem_usb_read_len +0x494e 018208 copy pdata ,loopcnt +0x494f 018209 branch usb_rx_no_data ,blank +0x4950 018210 arg mem_usb_setup ,contw +0x4951 018211 call usb_rx_read +0x4952 018212 fetch 1 ,mem_usb_read_len +0x4953 018213 sub pdata ,7 ,null +0x4954 018214 rtn positive +: 018215 usb_class_type: +0x4955 018216 fetch 1 ,mem_usb_setup_bmrequesttype +0x4956 018217 and_into 0x80 ,pdata +0x4957 018218 beq in_device ,usb_in_device +0x4958 018219 beq out_device ,usb_out_device +0x4959 018220 branch assert +: 018222 usb_in_device: +0x495a 018223 fetch 1 ,mem_usb_setup_bmrequesttype +0x495b 018224 rshift4 pdata ,pdata +0x495c 018225 rshift pdata ,pdata +0x495d 018226 and_into 0x03 ,pdata +0x495e 018227 beq standard_req ,usb_in_standard_req +0x495f 018228 beq class_req ,usb_in_class_req +0x4960 018229 beq manufacturer_req ,usb_in_manufacturer_req +0x4961 018230 branch assert +: 018232 usb_out_device: +0x4962 018233 fetch 1 ,mem_usb_setup_bmrequesttype +0x4963 018234 rshift4 pdata ,pdata +0x4964 018235 rshift pdata ,pdata +0x4965 018236 and_into 0x03 ,pdata +0x4966 018237 beq standard_req ,usb_out_standard_req +0x4967 018238 beq class_req ,usb_out_class_req +0x4968 018239 beq manufacturer_req ,usb_out_manufacturer_req +0x4969 018240 branch assert +: 018242 usb_in_standard_req: +0x496a 018243 fetch 1 ,mem_usb_setup_brequest +0x496b 018244 beq get_configuration ,usb0_request_get_configuration +0x496c 018245 beq get_descriptor ,usb0_request_get_descriptor +0x496d 018246 beq get_interface ,usb0_request_get_interface +0x496e 018247 beq get_status ,usb0_request_get_status +0x496f 018248 branch usb0_force_stall +: 018250 usb_in_class_req: +0x4970 018251 fetch 1 ,mem_usb_setup_brequest +0x4971 018252 beq get_idle ,usb_get_idle +0x4972 018253 beq get_report ,usb_get_report +0x4973 018254 beq get_protocol ,usb_get_protocol_req +0x4974 018255 branch usb0_force_stall +: 018257 usb_in_manufacturer_req: +0x4975 018258 branch usb0_force_stall +: 018260 usb_out_standard_req: +0x4976 018261 fetch 1 ,mem_usb_setup_brequest +0x4977 018262 beq clear_feature ,usb0_request_clear_feature +0x4978 018263 beq set_feature ,usb0_request_set_feature +0x4979 018264 beq set_address ,usb0_request_set_address +0x497a 018265 beq set_configuration ,usb0_request_set_configuration +0x497b 018266 beq set_interface ,usb0_request_set_interface +0x497c 018267 beq set_descriptor ,usb0_force_stall +0x497d 018268 branch usb0_force_stall +: 018270 usb_out_class_req: +0x497e 018271 fetch 1 ,mem_usb_setup_brequest +0x497f 018272 beq set_idle ,usb_set_idle +0x4980 018273 beq set_report ,usb_set_report +0x4981 018274 beq set_protocol ,usb_set_protocol_req +0x4982 018275 branch usb0_force_stall +: 018277 usb_out_manufacturer_req: +0x4983 018278 branch usb0_force_stall +: 018280 usb0_force_stall: +0x4984 018281 hfetch 1 ,core_usb_stall +0x4985 018282 set1 0 ,pdata +0x4986 018283 hstore 1 ,core_usb_stall +0x4987 018284 branch usb0_reply_zerolen +: 018286 usb0_reply_zerolen: +0x4988 018287 jam 0x40 ,core_usb_clear +0x4989 018288 rtn +: 018290 usb0_request_get_configuration: +0x498a 018291 fetch 1 ,mem_usb_setup_bmrequesttype +0x498b 018292 bne in_device ,usb0_force_stall +0x498c 018293 fetch 1 ,mem_usb_setup_windex +0x498d 018294 bne 0 ,usb0_force_stall +0x498e 018295 fetch 1 ,mem_usb_setup_windex + 1 +0x498f 018296 bne 0 ,usb0_force_stall +0x4990 018297 fetch 1 ,mem_usb_setup_blength +0x4991 018298 bne 1 ,usb0_force_stall +0x4992 018299 fetch 1 ,mem_usb_setup_blengthh +0x4993 018300 bne 0 ,usb0_force_stall +0x4994 018301 fetch 1 ,mem_usb_setup_bvalue +0x4995 018302 bne 0 ,usb0_force_stall +0x4996 018303 fetch 1 ,mem_usb_setup_bvalue + 1 +0x4997 018304 bne 0 ,usb0_force_stall +0x4998 018305 fetch 1 ,mem_usb0_state +0x4999 018306 beq dev_configured ,usb0_request_get_cfg_dev_cfg +0x499a 018307 beq dev_address ,usb0_request_get_cfg_dev_addr +0x499b 018308 branch usb0_force_stall +: 018310 usb0_request_get_cfg_dev_cfg: +0x499c 018311 arg 1 ,regb +0x499d 018312 branch usb_send_ones_packet +: 018314 usb0_request_get_cfg_dev_addr: +0x499e 018315 arg 1 ,regb +0x499f 018316 branch usb_send_zero_packet +: 018318 usb0_request_get_descriptor: +0x49a0 018319 bpatch patch1f_1 ,mem_patch1f +0x49a1 018320 set0 mark_isstr ,mark +0x49a2 018321 fetch 1 ,mem_usb_setup_bvalueh +0x49a3 018322 beq dsc_device ,dsc_device_info +0x49a4 018323 beq dsc_config ,dsc_config_info +0x49a5 018324 beq dsc_string ,dsc_string_info +0x49a6 018325 beq dsc_hid ,dsc_hid_info +0x49a7 018326 beq dsc_hid_report ,dsc_hid_report_info +0x49a8 018327 branch usb0_force_stall +: 018329 dsc_hid_info: +0x49a9 018330 jam 0 ,mem_usb_get_protocol_flag +0x49aa 018331 fetch 1 ,mem_usb_setup_windex +0x49ab 018332 beq 0 ,dsc_hid_info_interface0 +0x49ac 018333 beq 1 ,dsc_hid_info_interface1 +0x49ad 018334 branch usb0_force_stall +: 018336 dsc_hid_info_interface0: +0x49ae 018337 arg mem_confdesc + 19 ,rega +0x49af 018338 ifetch 1 ,rega +0x49b0 018339 iforce regb +0x49b1 018340 branch usb0_respond +: 018342 dsc_hid_info_interface1: +0x49b2 018343 arg mem_confdesc + 44 ,rega +0x49b3 018344 ifetch 1 ,rega +0x49b4 018345 iforce regb +0x49b5 018346 branch usb0_respond +: 018348 dsc_device_info: +0x49b6 018352 fetch 1 ,mem_usb_set_high_addr_flag +0x49b7 018353 ncall usb_set_high_addr ,blank +0x49b8 018354 setarg mem_devicedesc +0x49b9 018355 fetcht 1 ,mem_devicedesc +: 018356 dsc_info_set_data_len: +0x49ba 018357 store 2 ,mem_dsc_info_data_pointer +0x49bb 018358 storet 1 ,mem_dsc_info_len +0x49bc 018359 fetch 1 ,mem_usb_setup_blength +0x49bd 018360 isub temp ,null +0x49be 018361 nbranch dsc_info_set_current_data_len ,positive +: 018362 dsc_info_set_initial_data_len: +0x49bf 018363 fetch 1 ,mem_dsc_info_len +: 018364 dsc_info_set_data_size_completed: +0x49c0 018365 iforce regb +0x49c1 018366 fetch 2 ,mem_dsc_info_data_pointer +0x49c2 018367 add pdata ,1 ,pdata +0x49c3 018368 iforce rega +0x49c4 018369 branch usb0_respond +: 018370 dsc_info_set_current_data_len: +0x49c5 018371 fetch 1 ,mem_usb_setup_blength +0x49c6 018372 branch dsc_info_set_data_size_completed +: 018374 usb_set_high_addr: +0x49c7 018375 hfetch 1 ,core_usb_addr +0x49c8 018376 ncall usb0_set_addr ,blank +0x49c9 018377 jam 0 ,mem_usb_set_high_addr_flag +0x49ca 018378 rtn +: 018379 usb0_set_addr: +0x49cb 018380 hfetch 1 ,core_usb_addr +0x49cc 018381 set1 7 ,pdata +0x49cd 018382 hstore 1 ,core_usb_addr +0x49ce 018383 rtn +: 018385 dsc_config_info: +0x49cf 018386 setarg mem_confdesc +0x49d0 018387 fetcht 1 ,mem_confdesc +0x49d1 018388 branch dsc_info_set_data_len +: 018390 dsc_string_info: +0x49d2 018391 fetch 1 ,mem_usb_setup_bvalue +0x49d3 018392 sub pdata ,3 ,null +0x49d4 018393 nbranch usb0_force_stall ,positive +0x49d5 018394 fetch 1 ,mem_usb_setup_bvalue +0x49d6 018395 arg mem_string0 ,rega +0x49d7 018396 beq 0 ,usb0_respond_length +0x49d8 018397 set1 mark_isstr ,mark +0x49d9 018398 arg mem_string1 ,rega +0x49da 018399 beq 1 ,usb0_respond_length +0x49db 018400 arg mem_string2 ,rega +0x49dc 018401 beq 2 ,usb0_respond_length +0x49dd 018402 arg mem_string3 ,rega +0x49de 018403 beq 3 ,usb0_respond_length +0x49df 018404 rtn +: 018406 dsc_hid_report_info: +0x49e0 018407 fetch 2 ,mem_usb_setup_windex +0x49e1 018408 beq 1 ,dsc_hid_report_info0 +0x49e2 018409 fetch 2 ,mem_hidreportdesc_kb +0x49e3 018410 copy pdata ,rega +0x49e4 018412 branch usb0_respond_length +: 018413 dsc_hid_report_info0: +0x49e5 018414 jam 1 ,mem_usb_device_enumeration_endflag +0x49e6 018415 jam usb_got_report_req ,mem_usb_state +0x49e7 018416 fetch 2 ,mem_hidreportdesc_m +0x49e8 018417 copy pdata ,rega +0x49e9 018419 branch usb0_respond_length +: 018422 usb0_request_get_interface: +0x49ea 018423 fetch 1 ,mem_usb0_state +0x49eb 018424 bne dev_configured ,usb0_force_stall +0x49ec 018425 fetch 1 ,mem_usb_setup_bmrequesttype +0x49ed 018426 bne in_interface ,usb0_force_stall +0x49ee 018427 fetch 1 ,mem_usb_setup_bvalue +0x49ef 018428 bne 0 ,usb0_force_stall +0x49f0 018429 fetch 1 ,mem_usb_setup_bvalueh +0x49f1 018430 bne 0 ,usb0_force_stall +0x49f2 018431 fetch 1 ,mem_usb_setup_blength +0x49f3 018432 bne 1 ,usb0_force_stall +0x49f4 018433 fetch 1 ,mem_usb_setup_blengthh +0x49f5 018434 bne 0 ,usb0_force_stall +0x49f6 018435 fetch 1 ,mem_usb_setup_windex +0x49f7 018436 bne 0 ,usb0_force_stall +0x49f8 018437 fetch 1 ,mem_usb_setup_windex + 1 +0x49f9 018438 bne 0 ,usb0_force_stall +0x49fa 018439 arg 1 ,regb +0x49fb 018440 branch usb_send_zero_packet +: 018443 usb0_request_get_status: +0x49fc 018444 fetch 1 ,mem_usb0_state +0x49fd 018445 beq dev_default ,usb0_force_stall +0x49fe 018446 fetch 1 ,mem_usb_setup_bvalue +0x49ff 018447 bne 0 ,usb0_force_stall +0x4a00 018448 fetch 1 ,mem_usb_setup_bvalueh +0x4a01 018449 bne 0 ,usb0_force_stall +0x4a02 018450 fetch 1 ,mem_usb_setup_blength +0x4a03 018451 bne 2 ,usb0_force_stall +0x4a04 018452 fetch 1 ,mem_usb_setup_blengthh +0x4a05 018453 bne 0 ,usb0_force_stall +0x4a06 018454 fetch 1 ,mem_usb_setup_windex + 1 +0x4a07 018455 bne 0 ,usb0_force_stall +0x4a08 018456 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a09 018457 beq in_device ,usb0_get_status_in_device +0x4a0a 018458 beq in_interface ,usb0_get_status_in_interface +0x4a0b 018459 beq in_endpoint ,usb0_get_status_in_endpoint +0x4a0c 018460 branch usb0_force_stall +: 018462 usb0_get_status_in_device: +0x4a0d 018463 fetch 1 ,mem_usb_setup_windex +0x4a0e 018464 bne 0 ,usb0_force_stall +0x4a0f 018465 arg 2 ,regb +0x4a10 018466 fetch 1 ,mem_usb_remote_wakeup +0x4a11 018467 beq 0x01 ,usb_send_two_packet +: 018469 usb_send_zero_packet: +0x4a12 018470 arg mem_usb_zero_packet ,rega +0x4a13 018471 branch usb0_respond +: 018472 usb_send_ones_packet: +0x4a14 018473 arg mem_usb_ones_packet ,rega +0x4a15 018474 branch usb0_respond +: 018475 usb_send_two_packet: +0x4a16 018476 arg mem_usb_two_packet ,rega +0x4a17 018477 branch usb0_respond +: 018479 usb0_get_status_in_interface: +0x4a18 018480 fetch 1 ,mem_usb0_state +0x4a19 018481 bne dev_configured ,usb0_force_stall +0x4a1a 018482 arg 2 ,regb +0x4a1b 018483 branch usb_send_zero_packet +: 018485 usb0_get_status_in_endpoint: +0x4a1c 018486 fetch 1 ,mem_usb0_state +0x4a1d 018487 bne dev_configured ,usb0_force_stall +0x4a1e 018488 fetch 1 ,mem_usb_setup_windex +0x4a1f 018489 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 +0x4a20 018490 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 +0x4a21 018491 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 +0x4a22 018492 and_into 0x7f ,pdata +0x4a23 018493 beq 0x00 ,usb0_get_status_in_ep_in_ep0 +0x4a24 018494 branch usb0_force_stall +: 018496 usb0_get_status_in_ep_in_ep0: +0x4a25 018497 fetch 1 ,mem_usb_ep0_stall_status +: 018498 usb0_get_status_in_ep_in_ack: +0x4a26 018499 arg 2 ,regb +0x4a27 018500 beq 1 ,usb_send_ones_packet +0x4a28 018501 branch usb_send_zero_packet +: 018502 usb0_get_status_in_ep_in_ep1: +0x4a29 018503 fetch 1 ,mem_usb_ep1_stall_status +0x4a2a 018504 branch usb0_get_status_in_ep_in_ack +: 018505 usb0_get_status_in_ep_in_ep2: +0x4a2b 018506 fetch 1 ,mem_usb_ep2_stall_status +0x4a2c 018507 branch usb0_get_status_in_ep_in_ack +: 018508 usb0_get_status_in_ep_in_ep3: +0x4a2d 018509 fetch 1 ,mem_usb_ep3_stall_status +0x4a2e 018510 branch usb0_get_status_in_ep_in_ack +: 018512 usb_get_idle: +0x4a2f 018513 jam 1 ,mem_usb_idle_flag +0x4a30 018514 arg mem_usb_idle_rate ,rega +0x4a31 018515 arg 1 ,regb +0x4a32 018516 branch usb0_respond +: 018518 usb_get_report: +0x4a33 018519 fetch 2 ,mem_usb_setup_bvalue +0x4a34 018520 arg pc_get_report ,temp +0x4a35 018521 isub temp ,null +0x4a36 018522 nbranch usb0_force_stall ,zero +0x4a37 018523 set0 mark_isstr ,mark +: 018524 usb_get_report_dispose: +0x4a38 018525 fetch 1 ,mem_usb0_data_ready_report +0x4a39 018526 nbranch usb_get_report_data_success ,blank +0x4a3a 018527 jam pc_get_nondata ,mem_usb0_get_report_data +: 018528 usb_get_report_send_data: +0x4a3b 018529 fetch 1 ,mem_usb_setup_blength +0x4a3c 018530 iforce regb +0x4a3d 018531 arg mem_usb0_get_report_data ,rega +0x4a3e 018532 call usb0_respond +: 018533 usb_get_report_data_release: +0x4a3f 018534 arg mem_usb0_get_report_data ,contw +0x4a40 018535 arg 8 ,loopcnt +0x4a41 018536 branch memset0 +: 018537 usb_get_report_data_success: +0x4a42 018538 jam 0 ,mem_usb0_data_ready_report +0x4a43 018539 jam pc_get_data ,mem_usb0_get_report_data +0x4a44 018540 branch usb_get_report_send_data +: 018542 usb_get_protocol_req: +0x4a45 018543 fetch 1 ,mem_usb_setup_blength +0x4a46 018544 bne 1 ,usb0_force_stall +0x4a47 018545 jam 1 ,mem_usb_get_protocol_flag +0x4a48 018546 arg 1 ,regb +0x4a49 018547 fetch 1 ,mem_usb_set_protocol_value +0x4a4a 018548 beq 0 ,usb_get_report_protocol +0x4a4b 018549 beq 1 ,usb_get_boot_protocol +0x4a4c 018550 branch usb_send_zero_packet +: 018551 usb_get_report_protocol: +0x4a4d 018552 branch usb_send_ones_packet +: 018553 usb_get_boot_protocol: +0x4a4e 018554 branch usb_send_zero_packet +: 018559 usb0_request_clear_feature: +0x4a4f 018560 fetch 1 ,mem_usb0_state +0x4a50 018561 bne dev_configured ,usb0_force_stall +0x4a51 018562 fetch 1 ,mem_usb_setup_blength +0x4a52 018563 bne 0 ,usb0_force_stall +0x4a53 018564 fetch 1 ,mem_usb_setup_blengthh +0x4a54 018565 bne 0 ,usb0_force_stall +0x4a55 018566 fetch 1 ,mem_usb_setup_bvalueh +0x4a56 018567 bne 0 ,usb0_force_stall +0x4a57 018568 fetch 1 ,mem_usb_setup_windex + 1 +0x4a58 018569 bne 0 ,usb0_force_stall +0x4a59 018570 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a5a 018571 beq out_device ,usb0_request_clear_feature_out_device +0x4a5b 018572 beq out_interface ,usb0_request_clear_feature_out_interface +0x4a5c 018573 beq out_endpoint ,usb0_request_clear_feature_out_endpoint +0x4a5d 018574 branch usb0_force_stall +: 018576 usb0_request_clear_feature_out_device: +0x4a5e 018577 fetch 1 ,mem_usb_setup_bvalue +0x4a5f 018578 bne device_remote_wakeup ,usb0_force_stall +0x4a60 018579 hfetch 1 ,core_usb_config +0x4a61 018580 set0 7 ,pdata +0x4a62 018581 hstore 1 ,core_usb_config +0x4a63 018582 jam 0 ,mem_usb_remote_wakeup +0x4a64 018583 jam 1 ,mem_usb_clear_remote_wakeup +0x4a65 018584 branch usb0_reply_zerolen +: 018586 usb0_request_clear_feature_out_interface: +0x4a66 018587 branch usb0_force_stall +: 018589 usb0_request_clear_feature_out_endpoint: +0x4a67 018590 fetch 1 ,mem_usb_setup_bvalue +0x4a68 018591 bne endpoint_halt ,usb0_force_stall +0x4a69 018592 fetch 1 ,mem_usb_setup_windex +0x4a6a 018593 beq in_ep1 ,usb0_force_stall_ep1_in_off +0x4a6b 018594 beq in_ep2 ,usb0_force_stall_ep2_in_off +0x4a6c 018595 beq in_ep3 ,usb0_force_stall_ep3_in_off +0x4a6d 018596 and_into 0x7f ,pdata +0x4a6e 018597 beq 0x00 ,usb0_force_stall_ep0_in_off +0x4a6f 018598 branch usb0_force_stall +: 018600 usb0_force_stall_ep0_in_off: +0x4a70 018601 jam 0 ,mem_usb_ep0_stall_status +0x4a71 018602 branch usb0_reply_zerolen +: 018603 usb0_force_stall_ep1_in_off: +0x4a72 018604 jam 0 ,mem_usb_ep1_stall_status +: 018605 usb0_force_stall_ep1_in_off_reply: +0x4a73 018606 jam 1 ,mem_usb_clear_halt +0x4a74 018607 branch usb0_reply_zerolen +: 018608 usb0_force_stall_ep2_in_off: +0x4a75 018609 jam 0 ,mem_usb_ep2_stall_status +0x4a76 018610 branch usb0_force_stall_ep1_in_off_reply +: 018611 usb0_force_stall_ep3_in_off: +0x4a77 018612 jam 0 ,mem_usb_ep3_stall_status +0x4a78 018613 branch usb0_force_stall_ep1_in_off_reply +: 018616 usb0_request_set_feature: +0x4a79 018617 fetch 1 ,mem_usb_setup_blength +0x4a7a 018618 bne 0 ,usb0_force_stall +0x4a7b 018619 fetch 1 ,mem_usb_setup_blengthh +0x4a7c 018620 bne 0 ,usb0_force_stall +0x4a7d 018621 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a7e 018622 beq out_device ,usb0_request_set_feature_out_device +0x4a7f 018623 beq out_interface ,usb0_request_set_feature_out_interface +0x4a80 018624 beq out_endpoint ,usb0_request_set_feature_out_endpoint +0x4a81 018625 branch usb0_force_stall +: 018627 usb0_request_set_feature_out_device: +0x4a82 018628 fetch 1 ,mem_usb_setup_bvalue +0x4a83 018629 bne device_remote_wakeup ,usb0_force_stall +0x4a84 018630 hfetch 1 ,core_usb_config +0x4a85 018631 set1 7 ,pdata +0x4a86 018632 hstore 1 ,core_usb_config +0x4a87 018633 jam 1 ,mem_usb_remote_wakeup +0x4a88 018634 jam usb_sleep ,mem_usb_state +0x4a89 018635 jam 0 ,mem_usb_tx_win_enable +0x4a8a 018636 call usb0_reply_zerolen +: 018637 usb_wakeup_timer_reinit: +0x4a8b 018638 call timer_reinit +0x4a8c 018639 setarg timer_wakeup_delay +0x4a8d 018640 arg timer_wakeup ,queue +0x4a8e 018641 branch timer_init +: 018643 usb0_request_set_feature_out_interface: +0x4a8f 018644 branch usb0_force_stall +: 018646 usb0_request_set_feature_out_endpoint: +0x4a90 018647 fetch 1 ,mem_usb_setup_bvalue +0x4a91 018648 bne endpoint_halt ,usb0_force_stall +0x4a92 018649 fetch 1 ,mem_usb_setup_bvalueh +0x4a93 018650 bne 0 ,usb0_force_stall +0x4a94 018651 fetch 1 ,mem_usb_setup_windex +0x4a95 018652 beq in_ep1 ,usb0_force_stall_ep1_in_on +0x4a96 018653 beq in_ep2 ,usb0_force_stall_ep2_in_on +0x4a97 018654 beq in_ep3 ,usb0_force_stall_ep3_in_on +0x4a98 018655 and_into 0x7f ,pdata +0x4a99 018656 beq 0x00 ,usb0_force_stall_ep0_in_on +0x4a9a 018657 branch usb0_force_stall +: 018659 usb0_force_stall_ep0_in_on: +0x4a9b 018660 jam 1 ,mem_usb_ep0_stall_status +0x4a9c 018661 branch usb0_reply_zerolen +: 018662 usb0_force_stall_ep1_in_on: +0x4a9d 018663 jam 1 ,mem_usb_ep1_stall_status +0x4a9e 018664 branch usb0_reply_zerolen +: 018665 usb0_force_stall_ep2_in_on: +0x4a9f 018666 jam 1 ,mem_usb_ep2_stall_status +0x4aa0 018667 branch usb0_reply_zerolen +: 018668 usb0_force_stall_ep3_in_on: +0x4aa1 018669 jam 1 ,mem_usb_ep3_stall_status +0x4aa2 018670 branch usb0_reply_zerolen +: 018673 usb0_request_set_address: +0x4aa3 018674 fetch 1 ,mem_usb_setup_bmrequesttype +0x4aa4 018675 bne out_device ,usb0_force_stall +0x4aa5 018676 fetch 1 ,mem_usb_setup_windex +0x4aa6 018677 bne 0 ,usb0_force_stall +0x4aa7 018678 fetch 1 ,mem_usb_setup_windex + 1 +0x4aa8 018679 bne 0 ,usb0_force_stall +0x4aa9 018680 fetch 1 ,mem_usb_setup_blength +0x4aaa 018681 bne 0 ,usb0_force_stall +0x4aab 018682 fetch 1 ,mem_usb_setup_blengthh +0x4aac 018683 bne 0 ,usb0_force_stall +0x4aad 018684 fetch 1 ,mem_usb_setup_bvalueh +0x4aae 018685 bne 0 ,usb0_force_stall +0x4aaf 018686 fetch 1 ,mem_usb_setup_bvalue +0x4ab0 018687 and_into 0x80 ,pdata +0x4ab1 018688 bne 0 ,usb0_force_stall +0x4ab2 018689 fetch 1 ,mem_usb_setup_bvalue +0x4ab3 018690 bne 0 ,usb_usb0_state_set_dev_addr +: 018691 usb_usb0_state_set_dev_default: +0x4ab4 018692 jam dev_default ,mem_usb0_state +: 018693 usb0_request_set_wait_address: +0x4ab5 018694 fetch 1 ,mem_usb_setup_bvalue +0x4ab6 018695 hstore 1 ,core_usb_addr +0x4ab7 018696 call usb0_reply_zerolen +0x4ab8 018697 jam 1 ,mem_usb_set_high_addr_flag +0x4ab9 018698 rtn +: 018699 usb_usb0_state_set_dev_addr: +0x4aba 018700 jam dev_address ,mem_usb0_state +0x4abb 018701 branch usb0_request_set_wait_address +: 018704 usb0_request_set_configuration: +0x4abc 018705 fetch 1 ,mem_usb0_state +0x4abd 018706 beq dev_default ,usb0_force_stall +0x4abe 018707 fetch 1 ,mem_usb_setup_bmrequesttype +0x4abf 018708 bne out_device ,usb0_force_stall +0x4ac0 018709 fetch 1 ,mem_usb_setup_windex +0x4ac1 018710 bne 0 ,usb0_force_stall +0x4ac2 018711 fetch 1 ,mem_usb_setup_windex + 1 +0x4ac3 018712 bne 0 ,usb0_force_stall +0x4ac4 018713 fetch 1 ,mem_usb_setup_blength +0x4ac5 018714 bne 0 ,usb0_force_stall +0x4ac6 018715 fetch 1 ,mem_usb_setup_blengthh +0x4ac7 018716 bne 0 ,usb0_force_stall +0x4ac8 018717 fetch 1 ,mem_usb_setup_bvalue + 1 +0x4ac9 018718 bne 0 ,usb0_force_stall +0x4aca 018719 fetch 1 ,mem_usb_setup_bvalue +0x4acb 018720 sub pdata ,usb_max_num_cfg ,null +0x4acc 018721 nbranch usb0_force_stall ,positive +0x4acd 018722 fetch 1 ,mem_usb0_state +0x4ace 018723 beq dev_address ,usb0_request_set_cfg_addr_state +0x4acf 018724 beq dev_configured ,usb0_request_set_cfg_cfg_state +0x4ad0 018725 branch usb0_force_stall +: 018727 usb0_request_set_cfg_addr_state: +: 018728 usb0_request_set_cfg_cfg_state: +0x4ad1 018729 fetch 1 ,mem_usb_setup_bvalue +0x4ad2 018730 beq 0 ,usb0_request_set_cfg_stay_addr_state +0x4ad3 018731 jam dev_configured ,mem_usb0_state +0x4ad4 018732 branch usb0_reply_zerolen +: 018733 usb0_request_set_cfg_stay_addr_state: +0x4ad5 018734 jam dev_address ,mem_usb0_state +0x4ad6 018735 branch usb0_reply_zerolen +: 018738 usb0_request_set_interface: +0x4ad7 018739 fetch 1 ,mem_usb0_state +0x4ad8 018740 bne dev_configured ,usb0_force_stall +0x4ad9 018741 fetch 1 ,mem_usb_setup_bmrequesttype +0x4ada 018742 bne out_interface ,usb0_force_stall +0x4adb 018743 fetch 1 ,mem_usb_setup_bvalue +0x4adc 018744 bne 0 ,usb0_force_stall +0x4add 018745 fetch 1 ,mem_usb_setup_bvalueh +0x4ade 018746 bne 0 ,usb0_force_stall +0x4adf 018747 fetch 1 ,mem_usb_setup_blength +0x4ae0 018748 bne 0 ,usb0_force_stall +0x4ae1 018749 fetch 1 ,mem_usb_setup_blengthh +0x4ae2 018750 bne 0 ,usb0_force_stall +0x4ae3 018751 fetch 1 ,mem_usb_setup_windex +0x4ae4 018752 bne 0 ,usb0_force_stall +0x4ae5 018753 fetch 1 ,mem_usb_setup_windex + 1 +0x4ae6 018754 bne 0 ,usb0_force_stall +0x4ae7 018755 branch usb0_reply_zerolen +: 018758 usb_set_idle: +0x4ae8 018759 jam 1 ,mem_usb_idle_flag +0x4ae9 018760 fetch 1 ,mem_usb_setup_bvalueh +0x4aea 018761 store 1 ,mem_usb_idle_rate +0x4aeb 018762 fetch 1 ,mem_usb_setup_windex +0x4aec 018763 sub pdata ,1 ,null +0x4aed 018764 call usb_clear_remote_wakeup_set0 ,zero +0x4aee 018765 fetch 1 ,mem_usb_state +0x4aef 018766 bne usb_resume ,usb0_reply_zerolen +0x4af0 018767 jam usb_connected ,mem_usb_state +0x4af1 018768 call usb0_reply_zerolen +0x4af2 018769 nop 30000 +0x4af3 018770 nop 30000 +0x4af4 018771 rtn +: 018772 usb_clear_remote_wakeup_set0: +0x4af5 018773 jam 1 ,mem_usb_device_enumeration_endflag +0x4af6 018774 jam 0 ,mem_usb_clear_remote_wakeup +0x4af7 018775 jam usb_resume ,mem_usb_state +0x4af8 018776 rtn +: 018779 usb_set_report: +0x4af9 018780 jam 1 ,mem_usb0_get_set_report +0x4afa 018781 call usb_set_report_resume_judge +0x4afb 018782 fetch 2 ,mem_usb_setup_bvalue +0x4afc 018783 store 2 ,mem_usb_setup_bvalue_temp +0x4afd 018784 fetch 1 ,mem_usb_setup_blength +0x4afe 018785 iforce loopcnt +0x4aff 018786 arg mem_usb0_setup ,contr +0x4b00 018787 arg mem_usb0_set_report_data ,contw +0x4b01 018788 call memcpy +0x4b02 018789 branch usb0_reply_zerolen +: 018791 usb_set_report_resume_judge: +0x4b03 018792 fetch 2 ,mem_usb_setup_bvalue +0x4b04 018793 arg pc_set_report_bvalue ,temp +0x4b05 018794 isub temp ,null +0x4b06 018795 nrtn zero +0x4b07 018796 fetch 2 ,mem_usb_setup_windex +0x4b08 018797 arg pc_set_report_windex ,temp +0x4b09 018798 isub temp ,null +0x4b0a 018799 nrtn zero +0x4b0b 018800 fetch 2 ,mem_usb_setup_blength +0x4b0c 018801 arg pc_set_report_blength ,temp +0x4b0d 018802 isub temp ,null +0x4b0e 018803 nrtn zero +0x4b0f 018804 jam 1 ,mem_usb_tx_win_enable +0x4b10 018805 rtn +: 018808 usb_set_protocol_req: +0x4b11 018809 fetch 1 ,mem_usb_setup_blength +0x4b12 018810 bne 0 ,usb0_force_stall +0x4b13 018811 fetch 1 ,mem_usb_setup_bvalue +0x4b14 018812 beq boot_protocol ,usb_set_boot_protocol +0x4b15 018813 beq report_protocol ,usb_set_report_protocol +0x4b16 018814 branch usb0_force_stall +: 018815 usb_set_boot_protocol: +0x4b17 018816 jam 0 ,mem_usb_set_protocol_status +0x4b18 018817 jam 1 ,mem_usb_set_protocol_value +0x4b19 018818 branch usb0_reply_zerolen +: 018819 usb_set_report_protocol: +0x4b1a 018820 jam 1 ,mem_usb_tx_mac_enable +0x4b1b 018821 jam 1 ,mem_usb_set_protocol_status +0x4b1c 018822 jam 0 ,mem_usb_set_protocol_value +0x4b1d 018823 branch usb0_reply_zerolen +: 018826 usb0_respond_length: +0x4b1e 018827 ifetch 1 ,rega +0x4b1f 018828 iforce regb +0x4b20 018829 increase 1 ,rega +: 018831 usb0_respond: +0x4b21 018832 bpatch patch1f_2 ,mem_patch1f +0x4b22 018833 bmark0 mark_isstr ,usb0_respond0 +0x4b23 018834 add regb ,1 ,pdata +0x4b24 018835 lshift pdata ,pdata +0x4b25 018836 hstore 1 ,core_usb_dfifo0 +0x4b26 018837 jam 3 ,core_usb_dfifo0 +0x4b27 018838 fetch 1 ,mem_usb_setup_blength +0x4b28 018839 increase -2 ,pdata +0x4b29 018840 rshift pdata ,pdata +0x4b2a 018841 store 1 ,mem_usb_setup_blength +0x4b2b 018842 beq 0 ,usb_no_respond_data +: 018843 usb0_respond0: +0x4b2c 018844 fetch 2 ,mem_usb_setup_blength +0x4b2d 018845 isub regb ,null +0x4b2e 018846 branch usb0_respond1 ,positive +0x4b2f 018847 copy pdata ,regb +: 018848 usb0_respond1: +0x4b30 018849 deposit rega +0x4b31 018850 store 2 ,mem_bufptr +0x4b32 018851 deposit regb +0x4b33 018852 store 1 ,mem_remain +0x4b34 018853 branch usb0_tx +: 018855 usb_no_respond_data: +0x4b35 018856 arg 0 ,queue +0x4b36 018857 branch usb_trig +: 018860 usb0_tx: +0x4b37 018861 bpatch patch1f_3 ,mem_patch1f +0x4b38 018862 fetch 1 ,mem_remain +0x4b39 018863 rtn blank +0x4b3a 018864 copy pdata ,loopcnt +0x4b3b 018865 sub pdata ,ep0_packet_size ,null +0x4b3c 018866 branch usb0_tx_info ,positive +0x4b3d 018867 arg ep0_packet_size ,loopcnt +: 018868 usb0_tx_info: +0x4b3e 018869 fetch 1 ,mem_remain +0x4b3f 018870 isub loopcnt ,pdata +0x4b40 018871 store 1 ,mem_remain +0x4b41 018872 fetch 2 ,mem_bufptr +0x4b42 018873 copy pdata ,contr +: 018874 usb0_tx0: +0x4b43 018875 ifetch 1 ,contr +0x4b44 018876 hstore 1 ,core_usb_dfifo0 +0x4b45 018877 bmark0 mark_isstr ,usb0_tx1 +0x4b46 018878 jam 0 ,core_usb_dfifo0 +: 018879 usb0_tx1: +0x4b47 018880 loop usb0_tx0 +0x4b48 018881 copy contr ,pdata +0x4b49 018882 store 2 ,mem_bufptr +0x4b4a 018883 arg 0 ,queue +0x4b4b 018884 call usb_trig +0x4b4c 018885 fetch 1 ,mem_remain +0x4b4d 018886 nrtn blank +0x4b4e 018887 fetch 1 ,mem_usb_state +0x4b4f 018888 rtnne usb_got_report_req +0x4b50 018889 jam usb_connected ,mem_usb_state +0x4b51 018890 rtn +: 018893 usb_tx_ep1: +0x4b52 018894 arg core_usb_dfifo1 ,rega +0x4b53 018895 arg 1 ,queue +: 018896 usb_tx_loop: +0x4b54 018897 ifetch 1 ,contr +0x4b55 018898 istore 1 ,rega +0x4b56 018899 loop usb_tx_loop +: 018900 usb_trig: +0x4b57 018901 setarg 0 +0x4b58 018902 qset1 pdata +0x4b59 018903 hstore 1 ,core_usb_trig +0x4b5a 018904 fetcht 1 ,mem_usb_tx_wait +0x4b5b 018905 ior temp ,pdata +0x4b5c 018906 store 1 ,mem_usb_tx_wait +0x4b5d 018907 rtn +: 018909 usb_tx_ep2: +0x4b5e 018910 arg 2 ,queue +0x4b5f 018911 arg core_usb_dfifo2 ,rega +0x4b60 018912 branch usb_tx_loop +: 018914 usb_tx: +0x4b61 018915 bpatch patch1f_4 ,mem_patch1f +0x4b62 018916 fetch 1 ,mem_usb_tx_enable +0x4b63 018917 rtn blank +0x4b64 018918 fetch 1 ,mem_usb_tx_wait +0x4b65 018919 nbranch usb_inwake_state_tx_dispose ,blank +0x4b66 018920 fetch 1 ,mem_usb_device_enumeration_endflag +0x4b67 018921 branch usb_tx_fifo_release ,blank +0x4b68 018922 fetch 1 ,mem_usb_state +0x4b69 018923 beq usb_sleep ,usb_windows_wakeup +0x4b6a 018924 bne usb_connected ,usb_tx_fifo_release +0x4b6b 018925 fetch 1 ,mem_usb_clear_remote_wakeup +0x4b6c 018926 nbranch usb_tx_fifo_release ,blank +0x4b6d 018927 call usb_tx_data_ep1 +0x4b6e 018928 branch usb_tx_data_ep2 +: 018930 usb_tx_data_ep1: +0x4b6f 018931 fetch 1 ,mem_usb_tx_enable +0x4b70 018932 rtnbit0 1 +0x4b71 018933 fetch 1 ,mem_usb_tx_wait +0x4b72 018934 rtnbit1 1 +0x4b73 018935 fetch 1 ,mem_usb_tx_enable +0x4b74 018936 set0 1 ,pdata +0x4b75 018937 store 1 ,mem_usb_tx_enable +0x4b76 018938 fetch 1 ,mem_usb_ep1_data +0x4b77 018939 rtn blank +0x4b78 018940 beq usb_ep1_kb ,usb_tx_kb_normal_data +0x4b79 018941 branch assert +: 018943 usb_tx_data_ep2: +0x4b7a 018944 fetch 1 ,mem_usb_tx_enable +0x4b7b 018945 rtnbit0 2 +0x4b7c 018946 fetch 1 ,mem_usb_tx_wait +0x4b7d 018947 rtnbit1 2 +0x4b7e 018948 fetch 1 ,mem_usb_tx_enable +0x4b7f 018949 set0 2 ,pdata +0x4b80 018950 store 1 ,mem_usb_tx_enable +0x4b81 018951 fetch 1 ,mem_usb_ep2_data +0x4b82 018952 rtn blank +0x4b83 018953 beq usb_ep2_ms ,usb_tx_ms_data +0x4b84 018954 beq usb_ep2_multikey ,usb_tx_kb_multikey_data +0x4b85 018955 branch assert +: 018957 usb_tx_fifo_release: +0x4b86 018959 arg mem_usb_mouse_data ,contw +0x4b87 018960 arg 6 ,loopcnt +0x4b88 018961 branch memset0 +: 018963 usb_tx_ms_data: +0x4b89 018964 fetch 1 ,mem_usb_idle_flag +0x4b8a 018965 fetcht 1 ,mem_usb_get_protocol_flag +0x4b8b 018966 iand temp ,pdata +0x4b8c 018967 branch usb_tx_ms_data_normal_mode ,blank +0x4b8d 018968 fetcht 1 ,mem_usb_set_protocol_status +0x4b8e 018969 iadd temp ,pdata +0x4b8f 018970 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode +0x4b90 018971 branch usb_tx_ms_data_normal_mode +: 018973 usb_tx_ms_data_mac_boot_mode: +0x4b91 018974 jam 0 ,mem_usb_ep2_data +: 018975 usb_tx_ms_data_mac_boot_regroup: +0x4b92 018976 fetch 1 ,mem_usb_mouse_data + 1 +0x4b93 018977 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +0x4b94 018978 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +0x4b95 018979 fetch 1 ,mem_usb_mouse_data + 1 +0x4b96 018980 store 1 ,mem_usb_mouse_data +0x4b97 018981 fetch 1 ,mem_usb_mouse_data + 2 +0x4b98 018982 istore 1 ,contw +0x4b99 018983 fetch 1 ,mem_usb_mouse_data + 4 +0x4b9a 018984 istore 1 ,contw +0x4b9b 018985 fetch 1 ,mem_usb_mouse_data + 6 +0x4b9c 018986 istore 1 ,contw +0x4b9d 018987 arg 4 ,loopcnt +0x4b9e 018988 arg mem_usb_mouse_data ,contr +0x4b9f 018989 branch usb_tx_ep2 +: 018991 usb_tx_ms_data_normal_mode: +0x4ba0 018992 jam 0 ,mem_usb_ep2_data +: 018993 usb_tx_mac_boot_ms_regroup_r_or_lrkey: +0x4ba1 018994 arg 8 ,loopcnt +0x4ba2 018995 arg mem_usb_mouse_data ,contr +0x4ba3 018996 branch usb_tx_ep2 +: 018998 usb_tx_kb_multikey_data: +0x4ba4 018999 jam 0 ,mem_usb_ep2_data +0x4ba5 019000 arg 3 ,loopcnt +0x4ba6 019001 arg mem_usb_kb_multikey ,contr +0x4ba7 019002 branch usb_tx_ep2 +: 019004 usb_tx_kb_normal_data: +0x4ba8 019005 jam 0 ,mem_usb_ep1_data +0x4ba9 019006 arg 8 ,loopcnt +0x4baa 019007 arg mem_usb_kb_data ,contr +0x4bab 019008 branch usb_tx_ep1 +: 019010 usb_inwake_state_tx_dispose: +0x4bac 019011 fetch 1 ,mem_usb_state +0x4bad 019012 beq usb_sleep ,usb_clear_tx_wait +0x4bae 019013 beq usb_connected ,usb_mac_wakeup_trig +0x4baf 019014 rtn +: 019015 usb_clear_tx_wait: +0x4bb0 019016 jam 0 ,mem_usb_tx_wait +0x4bb1 019017 rtn +: 019018 usb_mac_wakeup_trig: +0x4bb2 019019 hfetch 1 ,core_usb_config +0x4bb3 019020 set1 7 ,pdata +0x4bb4 019021 hstore 1 ,core_usb_config +0x4bb5 019022 jam 1 ,mem_usb_mac_wakeup_trig +0x4bb6 019023 rtn +: 019025 usb_mac_wakeup_judge: +0x4bb7 019026 fetch 1 ,mem_usb_state +0x4bb8 019027 rtneq usb_sleep +0x4bb9 019028 beq usb_connected ,usb_mac_wakeup +0x4bba 019029 rtn +: 019030 usb_mac_wakeup: +0x4bbb 019031 fetch 1 ,mem_usb_mac_wakeup_trig +0x4bbc 019032 rtn blank +0x4bbd 019033 jam 1 ,mem_usb_wakestate_onetime_flag +0x4bbe 019034 branch usb_wakeup +: 019036 usb_windows_wakeup: +0x4bbf 019037 arg timer_wakeup ,queue +0x4bc0 019038 call timer_check +0x4bc1 019039 nrtn blank +: 019040 usb_wakeup: +0x4bc2 019041 hfetch 1 ,core_usb_config +0x4bc3 019042 rtnbit0 7 +0x4bc4 019043 jam 0xfc ,core_usb_config +0x4bc5 019044 nop 30000 +0x4bc6 019045 jam 0x3c ,core_usb_config +0x4bc7 019046 rtn +: 019053 hci_rx_h4: +0x4bc8 019054 bpatch patch1f_5 ,mem_patch1f +0x4bc9 019055 fetch 1 ,mem_hci_cmd +0x4bca 019056 nrtn blank +: 019057 hci_rx_h4_1: +0x4bcb 019058 call hci_h4_parse_packet +0x4bcc 019059 ncall h4_rx_discard_packet ,user +0x4bcd 019060 rtn +: 019062 hci_h4_parse_packet: +0x4bce 019063 bpatch patch1f_6 ,mem_patch1f +0x4bcf 019064 copy contru ,rega +0x4bd0 019065 arg 4 ,temp +0x4bd1 019066 ifetch 1 ,contru +0x4bd2 019067 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len +0x4bd3 019068 increase 1 ,temp +0x4bd4 019069 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len +0x4bd5 019070 copy contru ,pdata +0x4bd6 019071 hstore 2 ,core_uart_rrptr +0x4bd7 019072 rtn +: 019073 hci_h4_parse_packet_wait_len: +0x4bd8 019074 hfetch 2 ,core_uart_rxitems +0x4bd9 019075 isub temp ,null +0x4bda 019076 nbranch hci_h4_parse_packet_wait_len ,positive +0x4bdb 019078 disable user +0x4bdc 019079 copy rega ,contru +0x4bdd 019080 call h4_get_rx_payload_len +0x4bde 019081 iadd temp ,temp +: 019082 hci_h4_parse_packet_wait: +0x4bdf 019083 hfetch 2 ,core_uart_rxitems +0x4be0 019084 isub temp ,null +0x4be1 019085 nbranch hci_h4_parse_packet_wait ,positive +0x4be2 019086 copy rega ,contru +0x4be3 019087 ifetch 1 ,contru +0x4be4 019088 beq hci_h4_type_cmd ,process_hci_cmd +0x4be5 019089 branch assert +: 019091 h4_rx_discard_packet: +0x4be6 019092 bpatch patch1f_7 ,mem_patch1f +0x4be7 019093 hfetch 2 ,core_uart_rrptr +0x4be8 019094 iforce contru +0x4be9 019095 call h4_get_rx_payload_len +0x4bea 019096 iadd contru ,contru +0x4beb 019097 deposit contru +0x4bec 019098 hstore 2 ,core_uart_rrptr +0x4bed 019099 rtn +: 019104 h4_get_rx_payload_len: +0x4bee 019105 ifetch 1 ,contru +0x4bef 019106 increase 2 ,contru +0x4bf0 019107 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl +0x4bf1 019108 ifetch 1 ,contru +0x4bf2 019109 rtn +: 019110 h4_get_rx_payload_len_acl: +0x4bf3 019111 ifetch 2 ,contru +0x4bf4 019112 rtn +: 019114 h4_get_tx_ptr: +0x4bf5 019115 hfetch 2 ,core_uart_twptr +0x4bf6 019116 increase -5 ,contwu +0x4bf7 019117 iadd contwu ,contwu +0x4bf8 019118 rtn +: 019120 h4_send_packet_event: +0x4bf9 019121 arg hci_h4_type_event ,temp +0x4bfa 019122 branch h4_send_packet +: 019123 h4_send_packet_acl: +0x4bfb 019124 arg hci_h4_type_acl ,temp +: 019125 h4_send_packet: +0x4bfc 019126 bpatchx patch20_0 ,mem_patch20 +0x4bfd 019127 increase 1 ,loopcnt +0x4bfe 019128 hfetch 2 ,core_uart_twptr +0x4bff 019129 copy pdata ,contwu +0x4c00 019130 copy loopcnt ,pdata +0x4c01 019131 istoret 1 ,contwu +0x4c02 019132 increase -1 ,pdata +0x4c03 019133 iadd contwu ,contwu +0x4c04 019134 copy contwu ,pdata +0x4c05 019135 store 2 ,mem_hci_acl_tx_trigger_wptr +0x4c06 019136 copy temp ,pdata +0x4c07 019137 rtneq hci_h4_type_acl +0x4c08 019138 fetch 2 ,mem_hci_acl_tx_trigger_wptr +0x4c09 019139 hstore 2 ,core_uart_twptr +0x4c0a 019140 branch h4_send_acl_trigger_clear +: 019143 h4_send_acl_trigger_clear: +0x4c0b 019144 setarg 0 +0x4c0c 019145 store 2 ,mem_hci_acl_tx_trigger_wptr +0x4c0d 019146 rtn +: 019153 hci_init: +0x4c0e 019154 rtn wake +0x4c0f 019155 setarg hci_idle_dispatch +0x4c10 019156 store 2 ,mem_cb_idle_process +0x4c11 019158 setarg uart_baud_115200 +0x4c12 019159 store uart_baud_len ,mem_baud +: 019160 hci_lpm_init: +0x4c13 019161 setarg mem_h5rx_buf +0x4c14 019162 hstore 2 ,core_uart_rsaddr +0x4c15 019163 setarg mem_h5rx_buf_end +0x4c16 019164 hstore 2 ,core_uart_readdr +0x4c17 019165 setarg mem_h5tx_buf +0x4c18 019166 hstore 2 ,core_uart_tsaddr +0x4c19 019167 call hci_sel_init +: 019168 hci_reinit: +0x4c1a 019169 jam 0x0 ,core_uart_ctrl +0x4c1b 019170 setarg mem_h5tx_buf +0x4c1c 019171 hstore 2 ,core_uart_twptr +0x4c1d 019172 hstore 2 ,core_uart_trptrp +0x4c1e 019173 setarg mem_h5rx_buf +0x4c1f 019174 hstore 2 ,core_uart_rrptr +0x4c20 019175 store 2 ,mem_h5rx_rptr +: 019176 hci_init_common: +0x4c21 019177 hfetch 2 ,core_clkoff +0x4c22 019178 set0 clock_off_uart ,pdata +0x4c23 019179 hstore 2 ,core_clkoff +0x4c24 019180 call uart_set_baud_by_mem +0x4c25 019181 jam uartclk_dpll ,core_uart_clksel +0x4c26 019182 jam uart_ctrl_h4 ,core_uart_ctrl +0x4c27 019183 rtn +: 019185 hci_sel_init: +0x4c28 019186 setarg mem_h5tx_buf_end +0x4c29 019187 hstore 2 ,core_uart_teaddr +0x4c2a 019188 hfetch 1 ,core_gpio_sel1 +0x4c2b 019189 or_into 0x07 ,pdata +0x4c2c 019190 hstore 1 ,core_gpio_sel1 +0x4c2d 019191 rtn +: 019194 hci_rx_packet: +0x4c2e 019195 bpatchx patch20_1 ,mem_patch20 +0x4c2f 019196 hfetch 1 ,core_uart_status +0x4c30 019197 iforce regb +0x4c31 019198 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont +0x4c32 019199 hfetch 2 ,core_uart_rxitems +0x4c33 019200 iforce regc +0x4c34 019201 arg 0x44f ,temp +0x4c35 019202 isub temp ,null +0x4c36 019203 nrtn zero +: 019204 hci_rx_packet_cont: +0x4c37 019205 hfetch 2 ,core_uart_rrptr +0x4c38 019206 iforce contru +0x4c39 019207 branch hci_rx_h4 +: 019209 uart_send_byte: +0x4c3a 019210 hfetcht 1 ,core_uart_status +0x4c3b 019211 isolate1 6 ,temp +0x4c3c 019212 branch uart_send_byte ,true +0x4c3d 019213 hstore 1 ,core_uart_txd +0x4c3e 019214 rtn +: 019216 process_hci_cmd: +0x4c3f 019217 bpatchx patch20_2 ,mem_patch20 +0x4c40 019218 fetch 1 ,mem_hci_cmd +0x4c41 019219 branch process_hci_cmd_cont ,blank +0x4c42 019220 enable user +0x4c43 019221 rtn +: 019222 process_hci_cmd_cont: +0x4c44 019223 ifetch 2 ,contru +0x4c45 019224 iforce alarm +0x4c46 019225 iforce queue +0x4c47 019226 ifetch 1 ,contru +0x4c48 019227 iforce temp +0x4c49 019228 rshift2 alarm ,pdata +0x4c4a 019229 rshift8 pdata ,pdata +0x4c4b 019230 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific +0x4c4c 019231 rtn +: 019234 phci_grp_vendor_specific: +0x4c4d 019235 bpatchx patch20_3 ,mem_patch20 +0x4c4e 019236 deposit queue +0x4c4f 019237 beq hci_vendor_cmd_reset ,hci_normal_reply +0x4c50 019238 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid +0x4c51 019239 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud +0x4c52 019240 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch +0x4c53 019241 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done +0x4c54 019242 beq hci_vendor_cmd_echo ,hci_normal_reply +0x4c55 019243 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr +0x4c56 019244 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm +0x4c57 019246 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem +0x4c58 019247 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep +0x4c59 019248 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init +0x4c5a 019249 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec +0x4c5b 019250 branch hci_normal_reply +: 019252 phci_grp_vendor_enter_lpm: +0x4c5c 019253 call hci_normal_reply +0x4c5d 019254 call wait_uarttx +0x4c5e 019255 call gpio_pu_uart_tx +: 019256 hci_enter_lpm: +0x4c5f 019257 call app_put_lpm_wake_lock +0x4c60 019258 call app_l2cap_flow_control_enable +0x4c61 019259 branch gpio_rx_config_input_with_pu +: 019261 hci_exit_lpm: +0x4c62 019262 jam hci_rx_ready ,mem_hci_lt_rx_state +0x4c63 019263 call app_get_lpm_wake_lock +0x4c64 019264 call hci_lpm_init +0x4c65 019265 branch app_l2cap_flow_control_disable +: 019267 phci_grp_vendor_chipid: +0x4c66 019268 call hci_get_cmd_complete_ptr +0x4c67 019269 hfetch 2 ,core_chipid +0x4c68 019270 istore 2 ,contwu +0x4c69 019271 force 6 ,loopcnt +0x4c6a 019272 branch hci_command_complete +: 019274 phci_grp_vendor_baud: +0x4c6b 019275 ifetch 2 ,contru +0x4c6c 019276 store 2 ,mem_baud +0x4c6d 019277 hstore 2 ,core_uart_baud +0x4c6e 019278 rtn +: 019281 phci_grp_vendor_patch_common: +0x4c6f 019283 ifetch 1 ,contru +0x4c70 019284 copy pdata ,temp +0x4c71 019285 hstore 1 ,core_ucode_low +0x4c72 019286 ifetch 1 ,contru +0x4c73 019287 iadd temp ,temp +0x4c74 019288 set1 7 ,pdata +0x4c75 019289 hstore 1 ,core_ucode_ctrl +0x4c76 019290 ifetch 1 ,contru +0x4c77 019291 iadd temp ,temp +0x4c78 019292 copy pdata ,loopcnt +0x4c79 019293 rtn +: 019295 phci_grp_vendor_patch: +0x4c7a 019296 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4c7b 019297 call phci_grp_vendor_patch_common +: 019298 phci_grp_vendor_patch_loop: +0x4c7c 019299 ifetch 1 ,contru +0x4c7d 019300 hstore 1 ,core_ucode_data +0x4c7e 019301 iadd temp ,temp +0x4c7f 019302 loop phci_grp_vendor_patch_loop +: 019303 phci_grp_vendor_patch_check_sum: +0x4c80 019304 and temp ,0xff ,temp +0x4c81 019305 ifetch 1 ,contru +0x4c82 019306 isub temp ,null +0x4c83 019307 nbranch phci_grp_vendor_patch_bad ,zero +0x4c84 019308 branch hci_normal_reply +: 019311 phci_grp_vendor_patch_sec: +0x4c85 019312 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4c86 019313 call phci_grp_vendor_patch_common +0x4c87 019314 store 8 ,mem_pdatatemp +: 019315 phci_grp_vendor_patch_sec_loop: +0x4c88 019316 call do_aes_cbc +0x4c89 019317 arg 16 ,loopcnt +0x4c8a 019318 arg mem_temp_block0 ,contw +0x4c8b 019319 call load_uart_sum_loop +0x4c8c 019320 storet 8 ,mem_temp +0x4c8d 019321 arg mem_temp_block2 ,contw +0x4c8e 019322 call store_aes_result +0x4c8f 019323 arg mem_temp_block2 ,rega +0x4c90 019324 arg mem_temp_block0 ,regb +0x4c91 019325 arg mem_temp_block3 ,contw +0x4c92 019326 call xor16 +0x4c93 019327 arg 16 ,loopcnt +0x4c94 019328 arg mem_temp_block3 ,contr +0x4c95 019329 call load_ucode_only_loop +0x4c96 019330 fetcht 8 ,mem_temp +0x4c97 019331 fetch 8 ,mem_pdatatemp +0x4c98 019332 increase -16 ,pdata +0x4c99 019333 store 8 ,mem_pdatatemp +0x4c9a 019334 nbranch phci_grp_vendor_patch_sec_loop ,blank +0x4c9b 019335 branch phci_grp_vendor_patch_check_sum +: 019337 load_ucode_only_loop: +0x4c9c 019338 ifetch 1 ,contr +0x4c9d 019339 hstore 1 ,core_ucode_data +0x4c9e 019340 loop load_ucode_only_loop +0x4c9f 019341 rtn +: 019343 load_uart_sum_loop: +0x4ca0 019344 ifetch 1 ,contru +0x4ca1 019345 istore 1 ,contw +0x4ca2 019346 iadd temp ,temp +0x4ca3 019347 loop load_uart_sum_loop +0x4ca4 019348 rtn +: 019350 phci_grp_vendor_patch_sec_init: +0x4ca5 019351 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4ca6 019352 arg 0 ,temp +0x4ca7 019353 arg 16 ,loopcnt +0x4ca8 019354 arg mem_temp_block0 ,contw +0x4ca9 019355 call load_uart_sum_loop +0x4caa 019356 hfetch 1 ,core_gpio_key2 +0x4cab 019357 and_into 0xfd ,pdata +0x4cac 019358 hstore 1 ,core_gpio_key2 +0x4cad 019359 arg mem_temp_block0 ,contr +0x4cae 019360 arg 16 ,loopcnt +0x4caf 019361 call aes_load_data +0x4cb0 019362 call aes_init +0x4cb1 019363 call aes_clear_data +0x4cb2 019364 branch phci_grp_vendor_patch_check_sum +: 019367 phci_grp_vendor_done: +0x4cb3 019368 arg 0x20 ,loopcnt +0x4cb4 019369 arg mem_patch00 ,contw +0x4cb5 019370 arg 0 ,temp +: 019371 phci_grp_vendor_done_loop: +0x4cb6 019372 ifetch 1 ,contru +0x4cb7 019373 istore 1 ,contw +0x4cb8 019374 iadd temp ,temp +0x4cb9 019375 loop phci_grp_vendor_done_loop +0x4cba 019376 and temp ,0xff ,temp +0x4cbb 019377 ifetch 1 ,contru +0x4cbc 019378 isub temp ,null +0x4cbd 019379 nbranch phci_grp_vendor_patch_bad ,zero +0x4cbe 019380 jam 0 ,core_ucode_ctrl +0x4cbf 019381 call hci_normal_reply +0x4cc0 019382 call h4_rx_discard_packet +0x4cc1 019383 call clear_key_buf +0x4cc2 019384 call wait_uarttx +0x4cc3 019385 branch soft_reset +: 019387 phci_grp_vendor_patch_bad: +0x4cc4 019388 jam 0 ,core_ucode_ctrl +0x4cc5 019389 branch start +: 019391 phci_grp_vendor_bdaddr: +0x4cc6 019392 ifetch 6 ,contru +0x4cc7 019393 store 6 ,mem_lap +0x4cc8 019394 branch hci_normal_reply +: 019397 phci_grp_vendor_mem: +0x4cc9 019398 ifetch 1 ,contru +0x4cca 019399 store 1 ,mem_hci_curr_len +0x4ccb 019400 copy pdata ,loopcnt +0x4ccc 019401 ifetch 2 ,contru +0x4ccd 019402 store 2 ,mem_hci_curr_target +0x4cce 019403 copy pdata ,contw +0x4ccf 019404 call uart_copy_rx_bytes +0x4cd0 019405 branch hci_normal_reply +: 019408 phci_grp_vendor_eep: +0x4cd1 019409 ifetch 1 ,contru +0x4cd2 019410 store 1 ,mem_hci_curr_len +0x4cd3 019411 copy pdata ,loopcnt +0x4cd4 019412 ifetch 2 ,contru +0x4cd5 019413 store 2 ,mem_hci_curr_target +0x4cd6 019414 arg mem_l2cap_rxbuff1 ,contw +0x4cd7 019415 call uart_copy_rx_bytes +0x4cd8 019416 fetcht 1 ,mem_hci_curr_len +0x4cd9 019417 arg mem_l2cap_rxbuff1 ,rega +0x4cda 019418 fetch 2 ,mem_hci_curr_target +0x4cdb 019419 branch iicd_write_ota_data +: 019424 hci_normal_reply: +0x4cdc 019425 force 4 ,loopcnt +: 019426 hci_command_complete: +0x4cdd 019427 call hci_get_payload_ptr +0x4cde 019428 force 0x1 ,pdata +0x4cdf 019429 istore 1 ,contwu +0x4ce0 019430 deposit alarm +0x4ce1 019431 istore 3 ,contwu +0x4ce2 019432 force hci_event_command_complete ,queue +: 019433 hci_send_event: +0x4ce3 019434 bpatchx patch20_4 ,mem_patch20 +0x4ce4 019435 call hci_get_packet_ptr +0x4ce5 019436 deposit queue +0x4ce6 019437 istore 1 ,contwu +0x4ce7 019438 deposit loopcnt +0x4ce8 019439 istore 1 ,contwu +: 019440 hci_send_event_raw: +0x4ce9 019441 force 5 ,queue +0x4cea 019442 increase 2 ,loopcnt +: 019443 hci_send_packet: +0x4ceb 019444 branch h4_send_packet_event +: 019446 hci_send_commu_ready_event: +0x4cec 019447 force hci_event_vendor_specific ,queue +0x4ced 019448 call hci_get_payload_ptr +0x4cee 019449 setarg hci_vendor_event_commu_ready +0x4cef 019450 istore 1 ,contwu +0x4cf0 019451 force 1 ,loopcnt +0x4cf1 019452 branch hci_send_event +: 019454 hci_get_cmd_complete_ptr: +0x4cf2 019455 force 12 ,contwu +0x4cf3 019456 branch hci_get_tx_ptr +: 019458 hci_get_payload_ptr: +0x4cf4 019459 force 8 ,contwu +0x4cf5 019460 branch hci_get_tx_ptr +: 019462 hci_get_packet_ptr: +0x4cf6 019463 force 6 ,contwu +: 019464 hci_get_tx_ptr: +0x4cf7 019465 branch h4_get_tx_ptr +: 019469 calc_tx_crc16: +0x4cf8 019470 pulse crc16 +0x4cf9 019471 enable enable_crc +: 019472 crcloop: +0x4cfa 019473 ifetch 1 ,contwu +0x4cfb 019474 inject bucket ,8 +0x4cfc 019475 loop crcloop +0x4cfd 019476 enable enable_parity +0x4cfe 019477 inject bucket ,16 +0x4cff 019478 disable enable_parity +0x4d00 019479 disable enable_crc +0x4d01 019480 disable crc16 +0x4d02 019481 byteswap pdata ,pdata +0x4d03 019482 rtn +: 019486 cmd_exit: +0x4d04 019487 jam 0 ,mem_hci_cmd +0x4d05 019488 rtn +: 019489 cmd_check_plap: +0x4d06 019490 fetch 6 ,mem_hci_plap +0x4d07 019491 fetcht 6 ,mem_plap +0x4d08 019492 isub temp ,null +0x4d09 019493 rtn +: 019498 cmd_pair: +0x4d0a 019499 fetch 1 ,mem_op +0x4d0b 019500 bbit1 op_inrand_req ,cmd_pair_passive +0x4d0c 019501 call tid_initiate +0x4d0d 019502 jam lmp_in_rand ,mem_lmo_opcode2 +0x4d0e 019503 branch cmd_exit +: 019504 cmd_pair_passive: +0x4d0f 019505 set0 op_inrand_req ,pdata +0x4d10 019506 store 1 ,mem_op +0x4d11 019507 call lmp_accept_inrand +0x4d12 019508 setarg 0 +0x4d13 019509 setflag master ,smap_lmptid ,pdata +0x4d14 019510 store 1 ,mem_lmo_tid2 +0x4d15 019511 branch cmd_exit +0x4d16 019512 rtn +: 019513 cmd_in_sniff: +0x4d17 019514 jam lmp_sniff_req ,mem_lmo_opcode2 +0x4d18 019515 arg mem_sniff_payload ,contw +0x4d19 019516 setarg 0 +0x4d1a 019517 isolate1 27 ,clke_bt +0x4d1b 019518 setflag true ,1 ,pdata +0x4d1c 019519 istore 1 ,contw +0x4d1d 019520 setarg 0 +0x4d1e 019521 istore 2 ,contw +0x4d1f 019522 fetch 2 ,mem_sniff_param_interval +0x4d20 019523 istore 2 ,contw +0x4d21 019524 fetch 1 ,mem_sniff_param_attempt +0x4d22 019525 istore 2 ,contw +0x4d23 019526 fetch 1 ,mem_sniff_param_timeout +0x4d24 019527 istore 2 ,contw +0x4d25 019528 branch cmd_exit +: 019530 cmd_exit_sniff: +0x4d26 019531 jam lmp_unsniff_req ,mem_lmo_opcode2 +0x4d27 019532 branch cmd_exit +: 019534 hci_idle_dispatch: +0x4d28 019535 call gpio_check_uart_state +0x4d29 019536 rtn true +0x4d2a 019537 arg uart_wakeup_rx ,temp +0x4d2b 019538 call gpio_get_bit +0x4d2c 019539 nbranch uart_wake_up ,true +0x4d2d 019540 jam hci_rx_wake ,mem_hci_lt_rx_state +0x4d2e 019541 rtn +: 019542 uart_wake_up: +0x4d2f 019543 fetch 1 ,mem_hci_lt_rx_state +0x4d30 019544 rtnne hci_rx_wake +0x4d31 019545 call hci_exit_lpm +0x4d32 019546 branch hci_send_commu_ready_event +: 019560 hid_rx_process: +0x4d33 019561 bpatchx patch20_5 ,mem_patch20 +0x4d34 019562 fetch 2 ,mem_l2cap_payload_ptr +0x4d35 019563 copy pdata ,contr +0x4d36 019564 ifetch 1 ,contr +0x4d37 019565 and pdata ,0x0f ,temp +0x4d38 019566 rshift4 pdata ,pdata +0x4d39 019567 beq hid_type_set_idle ,hid_rx_process_handshake +0x4d3a 019568 beq hid_type_set_protocol ,hid_rx_process_handshake +0x4d3b 019569 beq hid_type_data ,hid_rx_process_data +0x4d3c 019570 beq hid_type_set_report ,hid_rx_process_set_report +0x4d3d 019571 beq hid_type_control ,hid_rx_process_hid_control +0x4d3e 019572 rtn +: 019574 hid_rx_process_hid_control: +0x4d3f 019575 copy temp ,pdata +0x4d40 019576 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug +0x4d41 019577 beq hid_control_p_suspend ,hid_rx_process_suspend +0x4d42 019578 rtn +: 019580 hid_rx_process_virtual_cable_unplug: +0x4d43 019581 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp +0x4d44 019582 call ui_ipc_send_event +0x4d45 019583 fetch 1 ,mem_device_option +0x4d46 019584 rtnbit0 dvc_op_mouse +0x4d47 019585 copy temp ,pdata +0x4d48 019586 beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug +0x4d49 019587 rtn +: 019588 hid_rx_process_suspend: +0x4d4a 019589 rtn +: 019591 hid_rx_process_set_report: +0x4d4b 019592 call hid_rx_process_data +0x4d4c 019593 arg 0x01 ,rega +0x4d4d 019594 call hid_malloc_tx_buff +0x4d4e 019595 fetch 2 ,mem_hid_ctrl_remote_cid +0x4d4f 019596 istore 2 ,contw +0x4d50 019597 setarg 0x00 +0x4d51 019598 istore 1 ,contw +0x4d52 019599 rtn +: 019601 hid_rx_process_handshake: +0x4d53 019602 arg 1 ,rega +0x4d54 019603 call hid_malloc_tx_buff +0x4d55 019604 fetch 2 ,mem_hid_ctrl_remote_cid +0x4d56 019605 istore 2 ,contw +0x4d57 019606 setarg 0 +0x4d58 019607 istore 1 ,contw +0x4d59 019608 jam 1 ,mem_ui_data_txbuff_length +0x4d5a 019609 fetch 1 ,mem_hid_control_state +0x4d5b 019610 set1 l2cap_channel_hid_handshake_done +0x4d5c 019611 store 1 ,mem_hid_control_state +0x4d5d 019612 jam bt_evt_hid_handshake ,mem_fifo_temp +0x4d5e 019613 branch ui_ipc_send_event +: 019615 hid_rx_process_data: +0x4d5f 019616 ifetch 1 ,contr +0x4d60 019617 beq hid_report_id_kb ,hid_rx_process_data_hid_kb +0x4d61 019618 rtn +: 019620 hid_rx_process_data_hid_kb: +0x4d62 019621 rtn +: 019624 hid_malloc_tx_buff: +0x4d63 019625 call l2cap_malloc +0x4d64 019626 copy rega ,temp +0x4d65 019627 storet 1 ,mem_ui_data_txbuff_length +0x4d66 019628 copy pdata ,contw +0x4d67 019629 copy rega ,pdata +0x4d68 019630 istore 2 ,contw +0x4d69 019631 rtn +: 019648 l2cap_init: +0x4d6a 019649 branch l2cap_init_wake ,wake +: 019650 l2cap_init_work: +0x4d6b 019651 setarg mem_l2cap_xmem_end +0x4d6c 019652 arg mem_l2cap_xmem_start ,contw +0x4d6d 019653 isub contw ,loopcnt +0x4d6e 019654 call clear_mem +: 019655 l2cap_init_wake: +0x4d6f 019656 bpatchx patch20_6 ,mem_patch20 +0x4d70 019657 setarg mem_sdp_mem_end +0x4d71 019658 arg mem_sdp_mem_start ,contw +0x4d72 019659 isub contw ,loopcnt +0x4d73 019660 call clear_mem +0x4d74 019661 setarg mem_l2cap_mem_end +0x4d75 019662 arg mem_l2cap_mem_start ,contw +0x4d76 019663 isub contw ,loopcnt +0x4d77 019664 call clear_mem +0x4d78 019665 branch l2cap_lpm_load_txbuf +: 019667 process_rx_l2cap_pkt: +0x4d79 019668 bpatchx patch20_7 ,mem_patch20 +0x4d7a 019669 copy contr ,temp +0x4d7b 019672 copy temp ,contr +0x4d7c 019673 ifetch 2 ,contr +0x4d7d 019674 store 2 ,mem_l2cap_rx_pkt_length +0x4d7e 019675 ifetch 2 ,contr +0x4d7f 019676 store 2 ,mem_l2cap_rx_cid +0x4d80 019677 deposit contr +0x4d81 019678 store 2 ,mem_l2cap_payload_ptr +0x4d82 019679 fetch 1 ,memui_reconnect_mode +0x4d83 019680 beq no_reconnection ,l2cap_rx_multiplexing +0x4d84 019681 branch ml2cap_rx_multiplexing +: 019683 l2cap_rx_multiplexing: +0x4d85 019684 fetch 2 ,mem_l2cap_rx_pkt_length +0x4d86 019685 branch l2cap_rx_reset_state ,blank +0x4d87 019686 bpatchx patch21_0 ,mem_patch21 +0x4d88 019687 fetch 1 ,mem_l2cap_rx_cid +0x4d89 019688 beq l2cap_signal_channel ,l2cap_call_proc_signal +: 019689 l2cap_rx_multiplexing0: +0x4d8a 019690 beq l2cap_sdp_channel ,l2cap_call_proc_sdp +0x4d8b 019691 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +0x4d8c 019692 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +0x4d8d 019693 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +0x4d8e 019694 branch l2cap_rx_reset_state +: 019696 l2cap_check_map: +0x4d8f 019699 bpatchx patch21_1 ,mem_patch21 +0x4d90 019700 call l2cap_malloc_get_full_map +0x4d91 019701 fetch 1 ,mem_used_map +0x4d92 019702 beq 0 ,set_pdata_0 +0x4d93 019703 beq 1 ,set_pdata_0 +0x4d94 019704 beq 2 ,set_pdata_0 +0x4d95 019705 beq 3 ,set_pdata_0 +0x4d96 019706 beq 0x81 ,set_pdata_0 +0x4d97 019707 beq 0xc0 ,set_pdata_0 +0x4d98 019708 beq 0x80 ,set_pdata_0 +0x4d99 019709 beq 0x40 ,set_pdata_0 +0x4d9a 019710 rtn +: 019712 set_pdata_0: +0x4d9b 019713 setarg 0 +0x4d9c 019714 rtn +: 019717 l2cap_call_proc_signal: +0x4d9d 019718 call l2cap_check_map +0x4d9e 019719 nrtn blank +: 019720 l2cap_call_proc_signal0: +0x4d9f 019721 call l2cap_malloc_signal_channel +0x4da0 019722 call l2cap_process_signal_pkt +0x4da1 019723 fetcht 2 ,mem_l2cap_signal_tx_length +0x4da2 019724 branch l2cap_call_proc_no_reply ,blank +0x4da3 019725 call l2cap_get_signal_tx_buff +0x4da4 019726 fetch 2 ,mem_l2cap_signal_tx_length +0x4da5 019727 istore 2 ,contw +0x4da6 019728 force l2cap_signal_channel ,pdata +0x4da7 019729 istore 2 ,contw +0x4da8 019730 branch l2cap_rx_reset_state +: 019732 l2cap_call_proc_sigal_pending: +0x4da9 019733 fetch 1 ,mem_l2cap_pending_item +0x4daa 019734 rtn blank +0x4dab 019735 copy pdata ,rega +0x4dac 019736 bpatchx patch21_2 ,mem_patch21 +0x4dad 019737 fetch 4 ,mem_l2cap_sdpres_delay_time +0x4dae 019738 arg 0x100 ,temp +0x4daf 019739 iadd temp ,temp +0x4db0 019740 copy clkn_bt ,pdata +0x4db1 019741 isub temp ,null +0x4db2 019742 nrtn positive +0x4db3 019743 jam 0 ,mem_l2cap_pending_item +0x4db4 019744 copy rega ,pdata +0x4db5 019745 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ +0x4db6 019746 branch assert +: 019747 l2cap_sdp_conn_succ: +0x4db7 019748 arg 0 ,debug +0x4db8 019749 call l2cap_malloc_signal_channel +0x4db9 019750 call restore_l2cap_req_param +0x4dba 019751 call l2cap_get_signal_tx_payload +0x4dbb 019752 call save_cont_pointers +0x4dbc 019753 call send_connection_sdp_res +0x4dbd 019754 call l2cap_get_signal_tx_buff +0x4dbe 019756 setarg 0x000c +0x4dbf 019757 istore 2 ,contw +0x4dc0 019758 force l2cap_signal_channel ,pdata +0x4dc1 019759 istore 2 ,contw +0x4dc2 019760 branch l2cap_rx_reset_state +: 019764 l2cap_reset_sdp_map: +0x4dc3 019765 bpatchx patch21_3 ,mem_patch21 +0x4dc4 019766 fetch 2 ,mem_sdp_tx_pkt_length +0x4dc5 019767 increase 4 ,pdata +0x4dc6 019768 rshift4 pdata ,pdata +0x4dc7 019769 rshift3 pdata ,pdata +0x4dc8 019770 add pdata ,1 ,temp +0x4dc9 019771 arg mem_tx_fifo3 ,contr +0x4dca 019772 ifetch 3 ,contr +0x4dcb 019773 rtn blank +0x4dcc 019774 store 3 ,mem_tx_fifo_map_temp +0x4dcd 019775 fetch 1 ,mem_tx_fifo_map_temp +0x4dce 019776 copy pdata ,rega +0x4dcf 019777 call check_l2cap_map +0x4dd0 019778 copy regb ,pdata +0x4dd1 019779 store 1 ,mem_tx_fifo3 +0x4dd2 019780 rtn +: 019782 check_l2cap_map: +0x4dd3 019783 arg 0 ,queue +0x4dd4 019784 arg 0 ,regb +: 019786 check_l2cap_map_loop: +0x4dd5 019787 sub queue ,7 ,null +0x4dd6 019788 nrtn positive +0x4dd7 019789 qisolate1 rega +0x4dd8 019790 branch check_l2cap_map_used ,true +0x4dd9 019791 branch check_l2cap_map_used2 +: 019793 check_l2cap_map_used: +0x4dda 019794 copy temp ,pdata +0x4ddb 019795 branch check_l2cap_map_used2 ,blank +0x4ddc 019796 qset1 regb +0x4ddd 019797 increase -1 ,temp +: 019799 check_l2cap_map_used2: +0x4dde 019800 increase 1 ,queue +0x4ddf 019801 branch check_l2cap_map_loop +: 019803 l2cap_call_proc_sdp: +0x4de0 019804 call l2cap_malloc_is_fifo_empty +0x4de1 019805 nrtn blank +0x4de2 019806 call l2cap_check_map +0x4de3 019807 nrtn blank +0x4de4 019808 call l2cap_malloc_sdp_channel +0x4de5 019809 call sdp_process +0x4de6 019810 call l2cap_reset_sdp_map +0x4de7 019811 branch l2cap_call_proc_sdp_common +: 019814 ml2cap_call_proc_sdp: +0x4de8 019815 call l2cap_malloc_is_fifo_empty +0x4de9 019816 nrtn blank +0x4dea 019817 call l2cap_malloc_sdp_channel +0x4deb 019818 call sdp_process +: 019819 l2cap_call_proc_sdp_common: +0x4dec 019820 call l2cap_get_sdp_tx_buff +0x4ded 019821 fetch 2 ,mem_sdp_tx_pkt_length +0x4dee 019822 branch l2cap_call_proc_no_reply ,blank +0x4def 019823 istore 2 ,contw +0x4df0 019824 fetch 2 ,mem_sdp_remote_cid +0x4df1 019825 istore 2 ,contw +0x4df2 019826 branch l2cap_rx_reset_state +: 019828 l2cap_call_proc_hid: +0x4df3 019829 call hid_rx_process +0x4df4 019830 branch l2cap_rx_reset_state +: 019832 l2cap_call_proc_rfcomm: +0x4df5 019833 bpatchx patch21_4 ,mem_patch21 +0x4df6 019834 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +0x4df7 019835 call rfcomm_rx_process +0x4df8 019836 fetch 1 ,mem_rfcomm_malloc_fail_flag +0x4df9 019837 rtneq rfcomm_malloc_fail +0x4dfa 019838 branch l2cap_rx_reset_state +: 019839 l2cap_call_proc_no_reply: +0x4dfb 019840 call l2cap_malloc_discard +: 019842 l2cap_rx_reset_state: +0x4dfc 019843 setarg 0 +0x4dfd 019844 store 2 ,mem_l2cap_rx_pkt_length +0x4dfe 019845 store 2 ,mem_l2cap_rx_cid +0x4dff 019846 jam l2cap_rx_done ,mem_l2cap_rx_done +0x4e00 019847 rtn +: 019849 l2cap_process_signal_pkt: +0x4e01 019850 bpatchx patch21_5 ,mem_patch21 +0x4e02 019851 call l2cap_get_signal_tx_payload +0x4e03 019852 force 0 ,regb +0x4e04 019853 fetch 2 ,mem_l2cap_rx_pkt_length +0x4e05 019854 copy pdata ,regc +0x4e06 019855 fetch 2 ,mem_l2cap_payload_ptr +0x4e07 019856 iforce contr +: 019857 l2cap_process_signal_pkt_loop: +0x4e08 019858 call l2cap_process_one_signal +0x4e09 019859 deposit regc +0x4e0a 019860 increase -4 ,regc +0x4e0b 019861 increase -4 ,pdata +0x4e0c 019862 nbranch l2cap_process_signal_pkt_loop ,blank +0x4e0d 019863 copy regb ,pdata +0x4e0e 019864 store 2 ,mem_l2cap_signal_tx_length +0x4e0f 019865 rtn +: 019867 l2cap_process_one_signal: +0x4e10 019868 bpatchx patch21_6 ,mem_patch21 +0x4e11 019869 ifetch 1 ,contr +0x4e12 019870 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject +0x4e13 019871 beq signal_connect_req ,l2cap_proc_signal_connect_req +0x4e14 019872 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp +0x4e15 019873 beq signal_config_req ,l2cap_proc_signal_config_req +0x4e16 019874 beq signal_config_rsp ,l2cap_proc_signal_config_rsp +0x4e17 019875 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req +0x4e18 019876 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp +0x4e19 019877 beq signal_echo_req ,l2cap_proc_signal_echo_req +0x4e1a 019878 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp +0x4e1b 019879 beq signal_info_req ,l2cap_proc_signal_info_req +0x4e1c 019880 beq signal_info_rsp ,l2cap_proc_signal_info_rsp +0x4e1d 019881 call l2cap_reject_command +: 019882 l2cap_process_one_signal_rtn: +0x4e1e 019883 rtn +: 019885 l2cap_proc_signal_info_req: +0x4e1f 019886 ifetch 1 ,contr +0x4e20 019887 copy pdata ,queue +0x4e21 019888 ifetch 2 ,contr +0x4e22 019889 copy pdata ,rega +0x4e23 019890 copy regc ,pdata +0x4e24 019891 isub rega ,regc +0x4e25 019892 setarg signal_info_rsp +0x4e26 019893 istore 1 ,contw +0x4e27 019894 copy queue ,pdata +0x4e28 019895 istore 1 ,contw +0x4e29 019896 ifetch 2 ,contr +: 019897 l2cap_proc_signal_info_req_reply: +0x4e2a 019898 beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext +0x4e2b 019899 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix +0x4e2c 019900 rtn +: 019901 l2cap_proc_signal_info_req_ext: +0x4e2d 019902 setarg 0x020008 +0x4e2e 019903 istore 6 ,contw +0x4e2f 019904 setarg 0x0280 +0x4e30 019905 istore 4 ,contw +0x4e31 019906 force 12 ,pdata +0x4e32 019907 branch l2cap_proc_signal_info_req_common +: 019908 l2cap_proc_signal_info_req_fix: +0x4e33 019909 setarg 0x3000c +0x4e34 019910 istore 6 ,contw +0x4e35 019911 setarg 0x0006 +0x4e36 019912 istore 8 ,contw +0x4e37 019913 force 16 ,pdata +: 019914 l2cap_proc_signal_info_req_common: +0x4e38 019915 iadd regb ,regb +0x4e39 019916 branch l2cap_process_one_signal_rtn +: 019918 ml2cap_proc_signal_info_req: +0x4e3a 019919 ifetch 1 ,contr +0x4e3b 019920 copy pdata ,queue +0x4e3c 019921 ifetch 2 ,contr +0x4e3d 019922 copy pdata ,rega +0x4e3e 019923 ifetch 2 ,contr +0x4e3f 019924 store 2 ,mem_temp +0x4e40 019925 copy regc ,pdata +0x4e41 019926 isub rega ,regc +0x4e42 019927 call l2cap_get_signal_tx_payload +0x4e43 019928 setarg signal_info_rsp +0x4e44 019929 istore 1 ,contw +0x4e45 019930 copy queue ,pdata +0x4e46 019931 istore 1 ,contw +0x4e47 019932 fetch 2 ,mem_temp +0x4e48 019933 branch l2cap_proc_signal_info_req_reply +: 019937 l2cap_proc_signal_cmd_reject: +0x4e49 019938 ifetch 1 ,contr +0x4e4a 019939 copy pdata ,queue +0x4e4b 019940 ifetch 2 ,contr +0x4e4c 019941 copy pdata ,rega +0x4e4d 019942 iadd contr ,contr +0x4e4e 019943 copy regc ,pdata +0x4e4f 019944 isub rega ,regc +: 019945 l2cap_proc_signal_cmd_reject_rtn: +0x4e50 019946 branch l2cap_process_one_signal_rtn +: 019948 l2cap_proc_signal_connect_req: +0x4e51 019949 call save_cont_pointers +0x4e52 019952 call load_cont_pointers +0x4e53 019953 arg 0 ,debug +0x4e54 019954 ifetch 1 ,contr +0x4e55 019955 copy pdata ,queue +0x4e56 019956 ifetch 2 ,contr +0x4e57 019957 copy pdata ,rega +0x4e58 019958 ifetch 2 ,contr +0x4e59 019959 copy pdata ,temp +0x4e5a 019960 ifetch 2 ,contr +0x4e5b 019961 copy pdata ,timeup +0x4e5c 019962 bpatchx patch21_7 ,mem_patch21 +0x4e5d 019963 copy temp ,pdata +0x4e5e 019964 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp +0x4e5f 019965 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm +0x4e60 019966 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl +0x4e61 019967 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int +0x4e62 019968 call l2cap_reject_command +0x4e63 019969 branch l2cap_proc_signal_connect_req_rtn +: 019971 l2cap_proc_signal_connect_req_sdp: +0x4e64 019972 call save_cont_pointers +0x4e65 019973 arg l2cap_sdp_channel ,temp +0x4e66 019974 fetch 2 ,mem_sdp_remote_cid +0x4e67 019975 nbranch already_connected ,blank +0x4e68 019976 copy timeup ,pdata +0x4e69 019977 store 2 ,mem_sdp_remote_cid +0x4e6a 019978 copy clkn_bt ,pdata +0x4e6b 019979 store 4 ,mem_l2cap_sdpres_delay_time +0x4e6c 019980 call store_l2cap_req_param +0x4e6d 019981 branch send_connection_pending +: 019983 store_l2cap_req_param: +0x4e6e 019984 storet 2 ,mem_psm +0x4e6f 019985 deposit timeup +0x4e70 019986 store 2 ,mem_scid +0x4e71 019987 deposit rega +0x4e72 019988 store 2 ,mem_cmd_length +0x4e73 019989 deposit regb +0x4e74 019990 store 2 ,mem_tt2 +0x4e75 019991 deposit regc +0x4e76 019992 store 2 ,mem_tt3 +0x4e77 019993 deposit queue +0x4e78 019994 store 2 ,mem_id +0x4e79 019995 rtn +: 019997 restore_l2cap_req_param: +0x4e7a 019998 fetcht 2 ,mem_psm +0x4e7b 019999 fetch 2 ,mem_scid +0x4e7c 020000 copy pdata ,timeup +0x4e7d 020001 fetch 2 ,mem_cmd_length +0x4e7e 020002 copy pdata ,rega +0x4e7f 020003 fetch 2 ,mem_tt2 +0x4e80 020004 copy pdata ,regb +0x4e81 020005 fetch 2 ,mem_tt3 +0x4e82 020006 copy pdata ,regc +0x4e83 020007 fetch 2 ,mem_id +0x4e84 020008 copy pdata ,queue +0x4e85 020009 rtn +: 020011 l2cap_proc_signal_connect_req_rfcomm: +0x4e86 020012 call save_cont_pointers +0x4e87 020013 setarg l2cap_rfcomm_channel +0x4e88 020014 arg l2cap_rfcomm_channel ,temp +0x4e89 020015 fetch 2 ,mem_rfcomm_remote_cid +0x4e8a 020016 nbranch already_connected ,blank +0x4e8b 020017 copy timeup ,pdata +0x4e8c 020018 store 2 ,mem_rfcomm_remote_cid +0x4e8d 020019 fetch 1 ,mem_rfcomm_state +0x4e8e 020020 set1 l2cap_channel_state_conn_req ,pdata +0x4e8f 020021 set1 l2cap_channel_state_conn_res ,pdata +0x4e90 020022 store 1 ,mem_rfcomm_state +0x4e91 020023 branch send_connection_res +: 020024 l2cap_proc_signal_connect_req_hid_ctrl: +0x4e92 020025 call save_cont_pointers +0x4e93 020026 arg l2cap_hid_control_channel ,temp +0x4e94 020027 fetch 2 ,mem_hid_ctrl_remote_cid +0x4e95 020028 nbranch already_connected ,blank +0x4e96 020029 copy timeup ,pdata +0x4e97 020030 store 2 ,mem_hid_ctrl_remote_cid +0x4e98 020031 fetch 1 ,mem_hid_control_state +0x4e99 020032 set1 l2cap_channel_state_conn_req ,pdata +0x4e9a 020033 set1 l2cap_channel_state_conn_res ,pdata +0x4e9b 020034 store 1 ,mem_hid_control_state +0x4e9c 020035 branch send_connection_res +: 020036 l2cap_proc_signal_connect_req_hid_int: +0x4e9d 020037 call save_cont_pointers +0x4e9e 020038 deposit clke +0x4e9f 020039 arg l2cap_hid_interrupt_channel ,temp +0x4ea0 020040 fetch 2 ,mem_hid_int_remote_cid +0x4ea1 020041 nbranch already_connected ,blank +0x4ea2 020042 copy timeup ,pdata +0x4ea3 020043 store 2 ,mem_hid_int_remote_cid +0x4ea4 020044 fetch 1 ,mem_hid_interrupt_state +0x4ea5 020045 set1 l2cap_channel_state_conn_req ,pdata +0x4ea6 020046 set1 l2cap_channel_state_conn_res ,pdata +0x4ea7 020047 store 1 ,mem_hid_interrupt_state +0x4ea8 020048 branch send_connection_res +: 020050 send_connection_pending: +0x4ea9 020051 setarg l2cap_connect_pending +0x4eaa 020052 store 2 ,meml2cap_t1 +0x4eab 020053 jam l2cap_sdp_channel ,mem_l2cap_pending_item +0x4eac 020054 branch send_connection_res0 +: 020055 send_connection_sdp_res: +0x4ead 020056 fetch 1 ,mem_sdp_state +0x4eae 020057 set1 l2cap_channel_state_conn_req ,pdata +0x4eaf 020058 set1 l2cap_channel_state_conn_res ,pdata +0x4eb0 020059 store 1 ,mem_sdp_state +: 020060 send_connection_res: +0x4eb1 020061 setarg l2cap_connect_successful +0x4eb2 020062 store 2 ,meml2cap_t1 +: 020063 send_connection_res0: +0x4eb3 020064 bpatchx patch22_0 ,mem_patch22 +0x4eb4 020065 call load_cont_pointers +0x4eb5 020066 setarg signal_connect_rsp +0x4eb6 020067 istore 1 ,contw +0x4eb7 020068 copy queue ,pdata +0x4eb8 020069 istore 1 ,contw +0x4eb9 020070 setarg 0x0008 +0x4eba 020071 istore 2 ,contw +0x4ebb 020072 copy temp ,pdata +0x4ebc 020073 istore 2 ,contw +0x4ebd 020074 copy timeup ,pdata +0x4ebe 020075 istore 2 ,contw +0x4ebf 020076 fetch 2 ,meml2cap_t1 +0x4ec0 020077 beq l2cap_connect_pending ,connect_pending +0x4ec1 020078 isolate0 0 ,debug +0x4ec2 020079 branch connect_suc ,true +0x4ec3 020080 setarg l2cap_connect_refused_no_resources +: 020081 connect_suc: +0x4ec4 020082 istore 2 ,contw +0x4ec5 020083 force 0x0000 ,pdata +0x4ec6 020084 istore 2 ,contw +0x4ec7 020085 setarg 12 +0x4ec8 020086 branch connect_req_update_byte_counts +: 020087 connect_pending: +0x4ec9 020088 istore 2 ,contw +0x4eca 020089 force 0x0002 ,pdata +0x4ecb 020090 istore 2 ,contw +0x4ecc 020091 setarg 12 +0x4ecd 020092 branch connect_req_update_byte_counts +: 020094 already_connected: +0x4ece 020095 set1 0 ,debug +0x4ecf 020096 branch send_connection_res +: 020097 connect_req_update_byte_counts: +0x4ed0 020098 iadd regb ,regb +0x4ed1 020099 copy regc ,pdata +0x4ed2 020100 isub rega ,regc +0x4ed3 020101 branch l2cap_proc_signal_connect_req_rtn +: 020102 l2cap_proc_signal_connect_req_rtn: +0x4ed4 020103 branch l2cap_process_one_signal_rtn +: 020105 l2cap_proc_signal_connect_rsp: +0x4ed5 020106 ifetch 1 ,contr +0x4ed6 020107 copy pdata ,queue +0x4ed7 020108 ifetch 2 ,contr +0x4ed8 020109 copy pdata ,rega +0x4ed9 020110 copy regc ,pdata +0x4eda 020111 isub rega ,regc +0x4edb 020112 ifetch 2 ,contr +0x4edc 020113 copy pdata ,timeup +0x4edd 020114 ifetch 2 ,contr +0x4ede 020115 copy pdata ,temp +0x4edf 020116 bpatchx patch22_1 ,mem_patch22 +0x4ee0 020117 setarg l2cap_sdp_channel +0x4ee1 020118 isub temp ,null +0x4ee2 020119 branch l2cap_proc_signal_connect_rsp_sdp ,zero +0x4ee3 020120 setarg l2cap_rfcomm_channel +0x4ee4 020121 isub temp ,null +0x4ee5 020122 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero +0x4ee6 020123 setarg l2cap_hid_control_channel +0x4ee7 020124 isub temp ,null +0x4ee8 020125 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero +0x4ee9 020126 setarg l2cap_hid_interrupt_channel +0x4eea 020127 isub temp ,null +0x4eeb 020128 branch l2cap_proc_signal_connect_rsp_hid_int ,zero +0x4eec 020129 rtn +: 020131 l2cap_proc_signal_connect_rsp_sdp: +0x4eed 020132 copy timeup ,pdata +0x4eee 020133 store 2 ,mem_sdp_remote_cid +0x4eef 020134 fetch 1 ,mem_sdp_state +0x4ef0 020135 set1 l2cap_channel_state_conn_res ,pdata +0x4ef1 020136 store 1 ,mem_sdp_state +0x4ef2 020137 branch l2cap_process_one_signal_rtn +: 020138 l2cap_proc_signal_connect_rsp_rfcomm: +0x4ef3 020139 copy timeup ,pdata +0x4ef4 020140 store 2 ,mem_rfcomm_remote_cid +0x4ef5 020141 fetch 1 ,mem_rfcomm_state +0x4ef6 020142 set1 l2cap_channel_state_conn_res ,pdata +0x4ef7 020143 store 1 ,mem_rfcomm_state +0x4ef8 020144 rtn +: 020145 l2cap_proc_signal_connect_rsp_hid_int: +0x4ef9 020146 copy timeup ,pdata +0x4efa 020147 store 2 ,mem_hid_ctrl_remote_cid +0x4efb 020148 fetch 1 ,mem_hid_interrupt_state +0x4efc 020149 set1 l2cap_channel_state_conn_res ,pdata +0x4efd 020150 store 1 ,mem_hid_interrupt_state +0x4efe 020151 rtn +: 020152 l2cap_proc_signal_connect_rsp_hid_ctrl: +0x4eff 020153 copy timeup ,pdata +0x4f00 020154 store 2 ,mem_hid_int_remote_cid +0x4f01 020155 fetch 1 ,mem_hid_control_state +0x4f02 020156 set1 l2cap_channel_state_conn_res ,pdata +0x4f03 020157 store 1 ,mem_hid_control_state +0x4f04 020158 rtn +: 020160 l2cap_proc_signal_config_req: +0x4f05 020161 ifetch 1 ,contr +0x4f06 020162 copy pdata ,queue +0x4f07 020163 ifetch 2 ,contr +0x4f08 020164 copy pdata ,rega +0x4f09 020165 copy regc ,pdata +0x4f0a 020166 isub rega ,regc +0x4f0b 020167 ifetch 2 ,contr +0x4f0c 020168 copy pdata ,temp +0x4f0d 020169 copy temp ,rega +0x4f0e 020170 bpatchx patch22_2 ,mem_patch22 +0x4f0f 020171 setarg l2cap_sdp_channel +0x4f10 020172 isub temp ,null +0x4f11 020173 branch l2cap_proc_signal_config_req_sdp ,zero +0x4f12 020174 setarg l2cap_rfcomm_channel +0x4f13 020175 isub temp ,null +0x4f14 020176 branch l2cap_proc_signal_config_req_rfcomm ,zero +0x4f15 020177 setarg l2cap_hid_control_channel +0x4f16 020178 isub temp ,null +0x4f17 020179 branch l2cap_proc_signal_config_req_hid_ctrl ,zero +0x4f18 020180 setarg l2cap_hid_interrupt_channel +0x4f19 020181 isub temp ,null +0x4f1a 020182 branch l2cap_proc_signal_config_req_hid_int ,zero +0x4f1b 020183 branch l2cap_reject_command +: 020185 l2cap_proc_signal_config_req_sdp: +0x4f1c 020186 copy contw ,timeup +0x4f1d 020187 fetch 1 ,mem_sdp_state +0x4f1e 020188 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f1f 020189 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f20 020191 store 1 ,mem_sdp_state +0x4f21 020192 copy timeup ,contw +0x4f22 020193 arg l2cap_sdp_channel ,timeup +0x4f23 020194 fetch 2 ,mem_sdp_remote_cid +0x4f24 020195 copy pdata ,temp +0x4f25 020196 branch l2cap_send_config_rsp +: 020197 l2cap_proc_signal_config_req_hid_ctrl: +0x4f26 020198 copy contw ,timeup +0x4f27 020199 fetch 1 ,mem_hid_control_state +0x4f28 020200 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f29 020201 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f2a 020203 store 1 ,mem_hid_control_state +0x4f2b 020204 copy timeup ,contw +0x4f2c 020205 arg l2cap_hid_control_channel ,timeup +0x4f2d 020206 fetch 2 ,mem_hid_ctrl_remote_cid +0x4f2e 020207 copy pdata ,temp +0x4f2f 020208 branch l2cap_send_config_rsp +: 020209 l2cap_proc_signal_config_req_hid_int: +0x4f30 020210 copy contw ,timeup +0x4f31 020211 fetch 1 ,mem_hid_interrupt_state +0x4f32 020212 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f33 020213 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f34 020215 store 1 ,mem_hid_interrupt_state +0x4f35 020216 copy timeup ,contw +0x4f36 020217 arg l2cap_hid_interrupt_channel ,timeup +0x4f37 020218 fetch 2 ,mem_hid_int_remote_cid +0x4f38 020219 copy pdata ,temp +0x4f39 020220 branch l2cap_send_config_rsp +: 020221 l2cap_proc_signal_config_req_rfcomm: +0x4f3a 020222 copy contw ,timeup +0x4f3b 020223 fetch 1 ,mem_rfcomm_state +0x4f3c 020224 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f3d 020225 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f3e 020227 store 1 ,mem_rfcomm_state +0x4f3f 020229 copy timeup ,contw +0x4f40 020230 arg l2cap_rfcomm_channel ,timeup +0x4f41 020231 fetch 2 ,mem_rfcomm_remote_cid +0x4f42 020232 copy pdata ,temp +: 020233 l2cap_send_config_rsp: +0x4f43 020234 bpatchx patch22_3 ,mem_patch22 +0x4f44 020235 setarg signal_config_rsp +0x4f45 020236 istore 1 ,contw +0x4f46 020237 copy queue ,pdata +0x4f47 020238 istore 1 ,contw +0x4f48 020239 setarg 0x0006 +0x4f49 020240 istore 2 ,contw +0x4f4a 020241 copy temp ,pdata +0x4f4b 020242 istore 2 ,contw +0x4f4c 020243 force 0x00 ,pdata +0x4f4d 020244 istore 2 ,contw +0x4f4e 020245 force l2cap_config_success ,pdata +0x4f4f 020246 istore 2 ,contw +0x4f50 020247 force 10 ,pdata +0x4f51 020248 iadd regb ,regb +0x4f52 020250 storet 2 ,mem_config_req_dest_cid +0x4f53 020251 copy queue ,pdata +0x4f54 020252 store 1 ,mem_config_identifier +0x4f55 020253 force l2cap_sdp_channel ,pdata +0x4f56 020254 icompare 0xff ,timeup +0x4f57 020255 branch l2cap_send_config_rsp_is_sdp ,true +0x4f58 020256 increase 1 ,pdata +: 020257 l2cap_send_config_rsp_is_sdp: +0x4f59 020259 rtn +: 020260 l2cap_check_channel_state: +0x4f5a 020261 disable user +0x4f5b 020262 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata +0x4f5c 020263 rtnbit0 l2cap_channel_state_conn_req ,pdata +0x4f5d 020264 rtnbit0 l2cap_channel_state_conn_res ,pdata +0x4f5e 020265 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x4f5f 020266 copy contr ,contw +0x4f60 020267 increase -1 ,contw +0x4f61 020268 istore 1 ,contw +0x4f62 020269 enable user +0x4f63 020270 rtn +: 020271 l2cap_send_config_req: +: 020272 l2cap_send_config_req_sdp: +0x4f64 020273 fetch 1 ,mem_sdp_state +0x4f65 020274 call l2cap_check_channel_state +0x4f66 020275 nbranch l2cap_send_config_req_rfcomm ,user +0x4f67 020276 jam l2cap_sdp_channel ,mem_send_config_req +0x4f68 020277 fetch 2 ,mem_sdp_remote_cid +0x4f69 020278 store 2 ,mem_config_req_dest_cid +0x4f6a 020279 branch l2cap_generate_config_req +: 020280 l2cap_send_config_req_rfcomm: +0x4f6b 020281 fetch 1 ,mem_rfcomm_state +0x4f6c 020282 call l2cap_check_channel_state +0x4f6d 020283 nbranch l2cap_send_config_req_hid_ctrl ,user +0x4f6e 020284 jam l2cap_rfcomm_channel ,mem_send_config_req +0x4f6f 020285 fetch 2 ,mem_rfcomm_remote_cid +0x4f70 020286 store 2 ,mem_config_req_dest_cid +0x4f71 020287 branch l2cap_generate_config_req +: 020288 l2cap_send_config_req_hid_ctrl: +0x4f72 020289 fetch 1 ,mem_hid_control_state +0x4f73 020290 call l2cap_check_channel_state +0x4f74 020291 nbranch l2cap_send_config_req_hid_int ,user +0x4f75 020292 jam l2cap_hid_control_channel ,mem_send_config_req +0x4f76 020293 fetch 2 ,mem_hid_ctrl_remote_cid +0x4f77 020294 store 2 ,mem_config_req_dest_cid +0x4f78 020295 branch l2cap_generate_config_req +: 020296 l2cap_send_config_req_hid_int: +0x4f79 020297 fetch 1 ,mem_hid_interrupt_state +0x4f7a 020298 call l2cap_check_channel_state +0x4f7b 020299 nrtn user +0x4f7c 020300 jam l2cap_hid_interrupt_channel ,mem_send_config_req +0x4f7d 020301 fetch 2 ,mem_hid_int_remote_cid +0x4f7e 020302 store 2 ,mem_config_req_dest_cid +: 020305 l2cap_generate_config_req: +0x4f7f 020306 bpatchx patch22_4 ,mem_patch22 +0x4f80 020307 call l2cap_get_req_id +0x4f81 020308 call l2cap_malloc_signal_channel +0x4f82 020309 force 0 ,regb +0x4f83 020310 call l2cap_get_signal_tx_payload +0x4f84 020311 force signal_config_req ,pdata +0x4f85 020312 istore 1 ,contw +0x4f86 020313 fetch 1 ,mem_ml2cap_comm_id +0x4f87 020314 istore 1 ,contw +0x4f88 020315 setarg 0x0008 +0x4f89 020316 istore 2 ,contw +0x4f8a 020317 fetch 2 ,mem_config_req_dest_cid +0x4f8b 020318 istore 2 ,contw +0x4f8c 020319 setarg 0x0000 +0x4f8d 020320 istore 2 ,contw +0x4f8e 020321 force 1 ,pdata +0x4f8f 020322 istore 1 ,contw +0x4f90 020323 force 2 ,pdata +0x4f91 020324 istore 1 ,contw +0x4f92 020325 fetch 1 ,mem_send_config_req +0x4f93 020326 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm +0x4f94 020327 setarg l2cap_config_mtu_sdp +0x4f95 020328 istore 2 ,contw +0x4f96 020329 branch l2cap_generate_config_req_done +: 020330 l2cap_generate_config_req_rfcomm: +0x4f97 020331 setarg l2cap_config_mtu_rfcomm +0x4f98 020332 istore 2 ,contw +: 020333 l2cap_generate_config_req_done: +0x4f99 020334 arg 0x0c ,temp +0x4f9a 020335 storet 2 ,mem_l2cap_signal_tx_length +0x4f9b 020336 call l2cap_get_signal_tx_buff +0x4f9c 020337 fetch 2 ,mem_l2cap_signal_tx_length +0x4f9d 020338 istore 2 ,contw +0x4f9e 020339 force l2cap_signal_channel ,pdata +0x4f9f 020340 istore 2 ,contw +0x4fa0 020341 jam 0 ,mem_send_config_req +: 020342 l2cap_proc_signal_config_req_rtn: +0x4fa1 020343 branch l2cap_process_one_signal_rtn +: 020345 l2cap_proc_signal_config_rsp: +0x4fa2 020346 increase 1 ,contr +0x4fa3 020347 ifetch 2 ,contr +0x4fa4 020348 copy pdata ,rega +0x4fa5 020349 copy regc ,pdata +0x4fa6 020350 isub rega ,regc +0x4fa7 020351 ifetch 2 ,contr +0x4fa8 020352 copy pdata ,rega +0x4fa9 020353 bpatchx patch22_5 ,mem_patch22 +0x4faa 020354 setarg l2cap_sdp_channel +0x4fab 020355 isub rega ,null +0x4fac 020356 branch l2cap_proc_signal_config_rsp_sdp ,zero +0x4fad 020357 setarg l2cap_rfcomm_channel +0x4fae 020358 isub rega ,null +0x4faf 020359 branch l2cap_proc_signal_config_rsp_rfcomm ,zero +0x4fb0 020360 setarg l2cap_hid_control_channel +0x4fb1 020361 isub rega ,null +0x4fb2 020362 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero +0x4fb3 020363 setarg l2cap_hid_interrupt_channel +0x4fb4 020364 isub rega ,null +0x4fb5 020365 branch l2cap_proc_signal_config_rsp_hid_int ,zero +0x4fb6 020366 increase 2 ,contr +0x4fb7 020367 ifetch 2 ,contr +0x4fb8 020368 iforce null +0x4fb9 020369 branch l2cap_process_one_signal_rtn +: 020370 l2cap_proc_signal_config_rsp_sdp: +0x4fba 020371 fetch 1 ,mem_sdp_state +0x4fbb 020372 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fbc 020373 store 1 ,mem_sdp_state +0x4fbd 020374 branch l2cap_process_one_signal_rtn +: 020375 l2cap_proc_signal_config_rsp_rfcomm: +0x4fbe 020376 fetch 1 ,mem_rfcomm_state +0x4fbf 020377 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc0 020378 store 1 ,mem_rfcomm_state +0x4fc1 020379 branch l2cap_process_one_signal_rtn +: 020380 l2cap_proc_signal_config_rsp_hid_ctrl: +0x4fc2 020381 fetch 1 ,mem_hid_control_state +0x4fc3 020382 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc4 020383 store 1 ,mem_hid_control_state +0x4fc5 020384 branch l2cap_process_one_signal_rtn +: 020385 l2cap_proc_signal_config_rsp_hid_int: +0x4fc6 020386 fetch 1 ,mem_hid_interrupt_state +0x4fc7 020387 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc8 020388 store 1 ,mem_hid_interrupt_state +0x4fc9 020389 jam bt_evt_hid_connected ,mem_fifo_temp +0x4fca 020390 branch ui_ipc_send_event +: 020394 l2cap_proc_signal_disconnect_req: +0x4fcb 020395 ifetch 1 ,contr +0x4fcc 020396 copy pdata ,queue +0x4fcd 020397 ifetch 2 ,contr +0x4fce 020398 copy pdata ,rega +0x4fcf 020399 copy regc ,pdata +0x4fd0 020400 isub rega ,regc +0x4fd1 020401 ifetch 2 ,contr +0x4fd2 020402 copy pdata ,rega +0x4fd3 020403 ifetch 2 ,contr +0x4fd4 020404 copy pdata ,timeup +0x4fd5 020405 copy rega ,temp +0x4fd6 020406 call save_cont_pointers +0x4fd7 020407 bpatchx patch22_6 ,mem_patch22 +0x4fd8 020408 setarg l2cap_sdp_channel +0x4fd9 020409 isub temp ,null +0x4fda 020410 branch l2cap_proc_signal_disconnect_req_sdp ,zero +0x4fdb 020411 setarg l2cap_rfcomm_channel +0x4fdc 020412 isub temp ,null +0x4fdd 020413 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero +0x4fde 020414 setarg l2cap_hid_control_channel +0x4fdf 020415 isub temp ,null +0x4fe0 020416 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero +0x4fe1 020417 setarg l2cap_hid_interrupt_channel +0x4fe2 020418 isub temp ,null +0x4fe3 020419 branch l2cap_proc_signal_disconnect_req_hid_int ,zero +0x4fe4 020420 call l2cap_reject_command +0x4fe5 020421 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020422 l2cap_proc_signal_disconnect_req_hid_ctrl: +0x4fe6 020423 copy timeup ,temp +0x4fe7 020424 fetch 2 ,mem_hid_ctrl_remote_cid +0x4fe8 020425 isub temp ,null +0x4fe9 020426 branch l2cap_disconnect_hid_control_now ,zero +0x4fea 020427 call l2cap_reject_command +0x4feb 020428 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020429 l2cap_proc_signal_disconnect_req_hid_int: +0x4fec 020430 copy timeup ,temp +0x4fed 020431 fetch 2 ,mem_hid_int_remote_cid +0x4fee 020432 isub temp ,null +0x4fef 020433 branch l2cap_disconnect_hid_interrupt_now ,zero +0x4ff0 020434 call l2cap_reject_command +0x4ff1 020435 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020437 l2cap_proc_signal_disconnect_req_sdp: +0x4ff2 020438 copy timeup ,temp +0x4ff3 020439 fetch 2 ,mem_sdp_remote_cid +0x4ff4 020440 isub temp ,null +0x4ff5 020441 branch l2cap_disconnect_sdp_now ,zero +0x4ff6 020442 call l2cap_reject_command +0x4ff7 020443 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020444 l2cap_disconnect_hid_control_now: +0x4ff8 020445 call l2cap_reset_hid_ctrl_state +0x4ff9 020446 branch l2cap_send_disconnect_rsp_pkt +: 020447 l2cap_disconnect_hid_interrupt_now: +0x4ffa 020448 call l2cap_reset_hid_int_state +0x4ffb 020449 fetch 2 ,mem_hid_ctrl_remote_cid +0x4ffc 020450 branch l2cap_send_disconnect_rsp_pkt ,blank +0x4ffd 020458 branch l2cap_send_disconnect_rsp_pkt +: 020460 l2cap_disconnect_sdp_now: +0x4ffe 020461 call l2cap_reset_sdp_channel_state +0x4fff 020462 fetch 1 ,mem_upper_sm_ss +0x5000 020463 nbranch l2cap_send_disconnect_rsp_pkt ,blank +0x5001 020466 branch l2cap_send_disconnect_rsp_pkt +: 020467 l2cap_proc_signal_disconnect_req_rfcomm: +0x5002 020468 copy timeup ,temp +0x5003 020469 fetch 2 ,mem_rfcomm_remote_cid +0x5004 020470 isub temp ,null +0x5005 020471 branch l2cap_disconnect_rfcomm_now ,zero +0x5006 020472 call l2cap_reject_command +0x5007 020473 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020474 l2cap_disconnect_rfcomm_now: +0x5008 020475 call l2cap_reset_rfcomm_channel_state +0x5009 020476 branch l2cap_send_disconnect_rsp_pkt +: 020477 l2cap_send_disconnect_rsp_pkt: +0x500a 020478 call load_cont_pointers +0x500b 020479 setarg signal_disconnect_rsp +0x500c 020480 istore 1 ,contw +0x500d 020481 copy queue ,pdata +0x500e 020482 istore 1 ,contw +0x500f 020483 setarg 0x0004 +0x5010 020484 istore 2 ,contw +0x5011 020485 copy rega ,pdata +0x5012 020486 istore 2 ,contw +0x5013 020487 copy timeup ,pdata +0x5014 020488 istore 2 ,contw +0x5015 020489 force 8 ,pdata +0x5016 020490 branch l2cap_proc_signal_disconnect_req_rtn +: 020491 l2cap_proc_signal_disconnect_req_err_rtn: +0x5017 020492 call load_cont_pointers +0x5018 020493 branch l2cap_proc_signal_disconnect_req_rtn +: 020494 l2cap_proc_signal_disconnect_req_rtn: +0x5019 020495 iadd regb ,regb +0x501a 020496 branch l2cap_process_one_signal_rtn +: 020497 l2cap_proc_signal_disconnect_rsp: +0x501b 020498 ifetch 1 ,contr +0x501c 020499 copy pdata ,queue +0x501d 020500 ifetch 2 ,contr +0x501e 020501 copy pdata ,rega +0x501f 020502 copy regc ,pdata +0x5020 020503 isub rega ,regc +0x5021 020504 ifetch 2 ,contr +0x5022 020505 copy pdata ,timeup +0x5023 020506 ifetch 2 ,contr +0x5024 020507 copy pdata ,temp +0x5025 020508 call save_cont_pointers +0x5026 020509 bpatchx patch22_7 ,mem_patch22 +0x5027 020510 setarg l2cap_sdp_channel +0x5028 020511 isub temp ,null +0x5029 020512 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero +0x502a 020513 setarg l2cap_rfcomm_channel +0x502b 020514 isub temp ,null +0x502c 020515 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero +0x502d 020516 setarg l2cap_hid_control_channel +0x502e 020517 isub temp ,null +0x502f 020518 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero +0x5030 020519 setarg l2cap_hid_interrupt_channel +0x5031 020520 isub temp ,null +0x5032 020521 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero +0x5033 020522 call l2cap_reject_command +0x5034 020523 branch l2cap_proc_signal_disconnect_rsp_err_rtn +: 020524 l2cap_proc_signal_disconnect_rsp_sdp: +0x5035 020525 copy temp ,rega +0x5036 020526 copy timeup ,temp +0x5037 020527 fetch 2 ,mem_sdp_remote_cid +0x5038 020528 isub temp ,null +0x5039 020529 call l2cap_reset_sdp_channel_state ,zero +0x503a 020530 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020531 l2cap_proc_signal_disconnect_rsp_rfcomm: +0x503b 020532 copy temp ,rega +0x503c 020533 copy timeup ,temp +0x503d 020534 fetch 2 ,mem_rfcomm_remote_cid +0x503e 020535 isub temp ,null +0x503f 020536 call l2cap_reset_rfcomm_channel_state ,zero +0x5040 020537 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020538 l2cap_proc_signal_disconnect_rsp_hid_ctrl: +0x5041 020539 copy temp ,rega +0x5042 020540 copy timeup ,temp +0x5043 020541 fetch 2 ,mem_hid_ctrl_remote_cid +0x5044 020542 isub temp ,null +0x5045 020543 call l2cap_reset_hid_ctrl_state ,zero +0x5046 020544 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020545 l2cap_proc_signal_disconnect_rsp_hid_int: +0x5047 020546 copy temp ,rega +0x5048 020547 copy timeup ,temp +0x5049 020548 fetch 2 ,mem_hid_int_remote_cid +0x504a 020549 isub temp ,null +0x504b 020550 call l2cap_reset_hid_int_state ,zero +0x504c 020551 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020552 l2cap_proc_signal_disconnect_rsp_rtn: +0x504d 020553 call load_cont_pointers +0x504e 020554 branch l2cap_process_one_signal_rtn +: 020555 l2cap_proc_signal_disconnect_rsp_err_rtn: +0x504f 020556 branch l2cap_process_one_signal_rtn +: 020559 l2cap_proc_signal_echo_req: +0x5050 020560 ifetch 1 ,contr +0x5051 020561 copy pdata ,queue +0x5052 020562 ifetch 2 ,contr +0x5053 020563 copy pdata ,rega +0x5054 020564 iadd contr ,contr +0x5055 020565 setarg 9 +0x5056 020566 istore 1 ,contw +0x5057 020567 copy queue ,pdata +0x5058 020568 istore 1 ,contw +0x5059 020569 force 0x0000 ,pdata +0x505a 020570 istore 2 ,contw +0x505b 020571 force 4 ,pdata +0x505c 020572 iadd regb ,regb +0x505d 020573 copy regc ,pdata +0x505e 020574 isub rega ,regc +0x505f 020575 branch l2cap_process_one_signal_rtn +: 020576 l2cap_proc_signal_echo_rsp: +0x5060 020577 branch l2cap_process_one_signal_rtn +: 020579 l2cap_proc_signal_info_rsp: +0x5061 020580 branch l2cap_process_one_signal_rtn +: 020581 l2cap_reject_command: +0x5062 020582 force 0 ,regb +0x5063 020583 call l2cap_get_signal_tx_payload +0x5064 020584 setarg signal_cmd_reject +0x5065 020585 istore 1 ,contw +0x5066 020586 copy queue ,pdata +0x5067 020587 istore 1 ,contw +0x5068 020588 setarg 2 +0x5069 020589 istore 2 ,contw +0x506a 020590 setarg cmd_not_understood +0x506b 020591 istore 2 ,contw +0x506c 020592 increase 6 ,regb +0x506d 020593 arg 4 ,regc +0x506e 020594 branch l2cap_process_one_signal_rtn +: 020598 l2cap_reset_rfcomm_channel_state: +0x506f 020599 setarg 0 +0x5070 020600 store 2 ,mem_rfcomm_tx_pkt_length +0x5071 020601 store 2 ,mem_rfcomm_remote_cid +0x5072 020602 jam 0 ,mem_rfcomm_state +0x5073 020603 rtn +: 020604 l2cap_reset_sdp_channel_state: +0x5074 020605 setarg 0 +0x5075 020606 store 2 ,mem_sdp_tx_pkt_length +0x5076 020607 store 2 ,mem_sdp_remote_cid +0x5077 020608 jam 0 ,mem_sdp_state +0x5078 020609 rtn +: 020610 l2cap_reset_hid_ctrl_state: +0x5079 020611 setarg 0 +0x507a 020612 store 2 ,mem_hid_ctrl_remote_cid +0x507b 020613 jam 0 ,mem_hid_control_state +0x507c 020614 fetch 1 ,mem_hid_interrupt_state +0x507d 020615 beq 0 ,l2cap_reset_hid_disconnected +0x507e 020616 rtn +: 020618 l2cap_reset_hid_int_state: +0x507f 020619 setarg 0 +0x5080 020620 store 2 ,mem_hid_int_remote_cid +0x5081 020621 jam 0 ,mem_hid_interrupt_state +0x5082 020622 fetch 1 ,mem_hid_control_state +0x5083 020623 beq 0 ,l2cap_reset_hid_disconnected +0x5084 020624 rtn +: 020626 l2cap_reset_hid_disconnected: +0x5085 020627 jam bt_evt_hid_disconnected ,mem_fifo_temp +0x5086 020628 branch ui_ipc_send_event +: 020630 l2cap_disconnect_interrupt_req: +0x5087 020631 fetch 1 ,mem_control_tasks +0x5088 020632 set0 l2cap_disconnect_interrupt ,pdata +0x5089 020633 store 1 ,mem_control_tasks +0x508a 020634 fetch 2 ,mem_hid_int_remote_cid +0x508b 020635 rtn blank +0x508c 020636 call l2cap_malloc_signal_channel +0x508d 020637 fetch 2 ,mem_hid_int_remote_cid +0x508e 020638 copy pdata ,rega +0x508f 020639 force l2cap_hid_interrupt_channel ,regb +0x5090 020640 branch l2cap_generate_disconnect_req +: 020641 l2cap_disconnect_control_req: +0x5091 020642 fetch 1 ,mem_control_tasks +0x5092 020643 set0 l2cap_disconnect_control ,pdata +0x5093 020644 store 1 ,mem_control_tasks +0x5094 020645 fetch 2 ,mem_hid_ctrl_remote_cid +0x5095 020646 rtn blank +0x5096 020647 call l2cap_malloc_signal_channel +0x5097 020648 fetch 2 ,mem_hid_ctrl_remote_cid +0x5098 020649 copy pdata ,rega +0x5099 020650 force l2cap_hid_control_channel ,regb +: 020651 l2cap_generate_disconnect_req: +0x509a 020652 call l2cap_get_req_id +0x509b 020653 call l2cap_get_signal_tx_payload +0x509c 020654 force signal_disconnect_req ,pdata +0x509d 020655 istore 1 ,contw +0x509e 020656 fetch 1 ,mem_ml2cap_comm_id +0x509f 020657 istore 1 ,contw +0x50a0 020658 setarg 0x0004 +0x50a1 020659 istore 2 ,contw +0x50a2 020660 copy rega ,pdata +0x50a3 020661 istore 2 ,contw +0x50a4 020662 copy regb ,pdata +0x50a5 020663 istore 2 ,contw +0x50a6 020664 force 0x08 ,temp +0x50a7 020665 branch ml2cap_send_signal +: 020667 ml2cap_send_signal_connect_req: +0x50a8 020668 bpatchx patch23_0 ,mem_patch23 +0x50a9 020669 call l2cap_get_req_id +0x50aa 020670 call l2cap_get_signal_tx_payload +0x50ab 020671 setarg signal_connect_req +0x50ac 020672 istore 1 ,contw +0x50ad 020673 fetch 1 ,mem_ml2cap_comm_id +0x50ae 020674 istore 1 ,contw +0x50af 020675 setarg 0x0004 +0x50b0 020676 istore 2 ,contw +0x50b1 020677 copy temp ,pdata +0x50b2 020678 istore 2 ,contw +0x50b3 020679 copy timeup ,pdata +0x50b4 020680 istore 2 ,contw +0x50b5 020681 arg 8 ,temp +0x50b6 020682 branch ml2cap_send_signal +: 020683 ml2cap_send_signal_config_req: +0x50b7 020684 bpatchx patch23_1 ,mem_patch23 +0x50b8 020685 call l2cap_get_req_id +0x50b9 020686 call l2cap_get_signal_tx_payload +0x50ba 020687 setarg signal_config_req +0x50bb 020688 istore 1 ,contw +0x50bc 020689 fetch 1 ,mem_ml2cap_comm_id +0x50bd 020690 istore 1 ,contw +0x50be 020691 setarg 0x0008 +0x50bf 020692 istore 2 ,contw +0x50c0 020694 copy temp ,pdata +0x50c1 020696 istore 2 ,contw +0x50c2 020697 setarg 0x0000 +0x50c3 020698 istore 2 ,contw +0x50c4 020699 setarg 0x01 +0x50c5 020700 istore 1 ,contw +0x50c6 020701 setarg 0x02 +0x50c7 020702 istore 1 ,contw +0x50c8 020703 setarg l2cap_config_mtu_rfcomm +0x50c9 020704 istore 2 ,contw +0x50ca 020705 arg 0xc ,temp +0x50cb 020706 branch ml2cap_send_signal +: 020707 ml2cap_send_signal_disconn_req: +0x50cc 020708 bpatchx patch23_2 ,mem_patch23 +0x50cd 020709 call l2cap_get_req_id +0x50ce 020710 call l2cap_get_signal_tx_payload +0x50cf 020711 setarg signal_disconnect_req +0x50d0 020712 istore 1 ,contw +0x50d1 020713 fetch 1 ,mem_ml2cap_comm_id +0x50d2 020714 increase 1 ,pdata +0x50d3 020715 copy contw ,rega +0x50d4 020716 store 1 ,mem_ml2cap_comm_id +0x50d5 020717 copy rega ,contw +0x50d6 020718 istore 1 ,contw +0x50d7 020719 setarg 0x0004 +0x50d8 020720 istore 2 ,contw +0x50d9 020721 copy temp ,pdata +0x50da 020722 istore 2 ,contw +0x50db 020723 copy timeup ,pdata +0x50dc 020724 istore 2 ,contw +0x50dd 020725 arg 0x8 ,temp +: 020728 ml2cap_send_signal: +0x50de 020729 storet 2 ,mem_l2cap_signal_tx_length +0x50df 020730 copy temp ,pdata +0x50e0 020731 branch l2cap_malloc_discard ,blank +0x50e1 020732 call l2cap_get_signal_tx_buff +0x50e2 020733 fetch 2 ,mem_l2cap_signal_tx_length +0x50e3 020734 istore 2 ,contw +0x50e4 020735 force l2cap_signal_channel ,pdata +0x50e5 020736 istore 2 ,contw +0x50e6 020737 rtn +: 020739 msdp_send_req_done: +0x50e7 020740 fetch 2 ,mem_sdp_tx_pkt_length +0x50e8 020741 branch assert ,blank +0x50e9 020742 call l2cap_get_sdp_tx_buff +0x50ea 020743 fetch 2 ,mem_sdp_tx_pkt_length +0x50eb 020744 istore 2 ,contw +0x50ec 020745 fetch 2 ,mem_sdp_remote_cid +0x50ed 020746 istore 2 ,contw +0x50ee 020747 rtn +: 020748 ml2cap_rx_multiplexing: +0x50ef 020749 fetch 2 ,mem_l2cap_rx_pkt_length +0x50f0 020750 branch l2cap_rx_reset_state ,blank +0x50f1 020751 bpatchx patch23_3 ,mem_patch23 +0x50f2 020752 fetch 1 ,mem_l2cap_rx_cid +0x50f3 020753 beq l2cap_signal_channel ,ml2cap_call_proc_signal +0x50f4 020754 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp +0x50f5 020755 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +0x50f6 020756 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +0x50f7 020757 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +0x50f8 020758 branch l2cap_rx_reset_state +: 020760 ml2cap_call_proc_signal: +0x50f9 020761 bpatchx patch23_4 ,mem_patch23 +0x50fa 020762 call l2cap_malloc_signal_channel +0x50fb 020763 force 0 ,regb +0x50fc 020764 call l2cap_get_signal_tx_payload +0x50fd 020765 copy pdata ,contw +0x50fe 020766 fetch 2 ,mem_l2cap_rx_pkt_length +0x50ff 020767 copy pdata ,regc +0x5100 020768 fetch 2 ,mem_l2cap_payload_ptr +0x5101 020769 iforce contr +: 020770 ml2cap_proc_one_comm_loop: +0x5102 020771 call ml2cap_proc_one_comm +0x5103 020772 increase -4 ,regc +0x5104 020773 nbranch ml2cap_proc_one_comm_loop ,zero +0x5105 020774 copy regb ,temp +0x5106 020775 call ml2cap_send_signal +0x5107 020776 branch l2cap_rx_reset_state +: 020778 ml2cap_proc_one_comm: +0x5108 020779 ifetch 1 ,contr +0x5109 020780 beq signal_connect_req ,ml2cap_proc_signal_connect_req +0x510a 020781 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject +0x510b 020782 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp +0x510c 020783 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp +0x510d 020784 beq signal_config_req ,ml2cap_proc_signal_config_req +0x510e 020785 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp +0x510f 020786 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req +0x5110 020787 beq signal_echo_req ,l2cap_proc_signal_echo_req +0x5111 020788 beq signal_info_req ,ml2cap_proc_signal_info_req +0x5112 020789 branch ml2cap_proc_send_reject +: 020791 ml2cap_proc_signal_connect_req: +0x5113 020792 call save_cont_pointers +0x5114 020794 call load_cont_pointers +0x5115 020795 branch l2cap_proc_signal_connect_req +: 020796 ml2cap_proc_signal_cmd_reject: +0x5116 020797 ifetch 1 ,contr +0x5117 020798 copy pdata ,queue +0x5118 020799 ifetch 2 ,contr +0x5119 020800 copy pdata ,rega +0x511a 020801 copy regc ,pdata +0x511b 020802 isub rega ,regc +: 020803 mvptr: +0x511c 020804 ifetch 1 ,contr +0x511d 020805 increase -1 ,rega +0x511e 020806 nbranch mvptr ,zero +0x511f 020807 rtn +: 020808 ml2cap_proc_signal_connect_rsp: +0x5120 020809 ifetch 1 ,contr +0x5121 020810 copy pdata ,queue +0x5122 020811 ifetch 2 ,contr +0x5123 020812 copy pdata ,rega +0x5124 020813 ifetch 2 ,contr +0x5125 020814 copy pdata ,timeup +0x5126 020815 ifetch 2 ,contr +0x5127 020816 copy pdata ,temp +0x5128 020817 ifetch 2 ,contr +0x5129 020818 sub pdata ,0 ,null +0x512a 020819 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero +0x512b 020820 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result +0x512c 020821 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result +0x512d 020822 branch ml2cap_proc_signal_connect_rsp_mnosucc +: 020823 ml2cap_proc_signal_connect_refused_result: +0x512e 020824 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp +0x512f 020825 call ui_ipc_send_event +: 020826 ml2cap_proc_signal_connect_rsp_mnosucc: +0x5130 020827 ifetch 2 ,contr +0x5131 020828 branch mnosucc +: 020829 ml2cap_proc_signal_connect_rsp_sucessful: +0x5132 020830 call save_cont_pointers +0x5133 020834 bpatchx patch23_5 ,mem_patch23 +0x5134 020835 setarg l2cap_sdp_channel +0x5135 020836 isub temp ,null +0x5136 020837 branch ml2cap_proc_signal_connect_rsp_sdp ,zero +0x5137 020838 setarg l2cap_rfcomm_channel +0x5138 020839 isub temp ,null +0x5139 020840 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero +0x513a 020841 setarg l2cap_hid_interrupt_channel +0x513b 020842 isub temp ,null +0x513c 020843 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero +0x513d 020844 setarg l2cap_hid_control_channel +0x513e 020845 isub temp ,null +0x513f 020846 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero +0x5140 020847 branch mnosucc +: 020848 ml2cap_proc_signal_connect_rsp_sdp: +0x5141 020849 copy timeup ,pdata +0x5142 020850 store 2 ,mem_sdp_remote_cid +0x5143 020851 fetch 1 ,mem_sdp_state +0x5144 020852 set1 l2cap_channel_state_conn_res +0x5145 020853 store 1 ,mem_sdp_state +0x5146 020854 branch mnosucc1 +: 020855 ml2cap_proc_signal_connect_rsp_rfcomm: +0x5147 020856 copy timeup ,pdata +0x5148 020857 store 2 ,mem_rfcomm_remote_cid +0x5149 020858 fetch 1 ,mem_rfcomm_state +0x514a 020859 set1 l2cap_channel_state_conn_res +0x514b 020860 store 1 ,mem_rfcomm_state +0x514c 020861 branch mnosucc1 +: 020862 ml2cap_proc_signal_connect_rsp_hid_ctrl: +0x514d 020863 copy timeup ,pdata +0x514e 020864 store 2 ,mem_hid_ctrl_remote_cid +0x514f 020865 fetch 1 ,mem_hid_control_state +0x5150 020866 set1 l2cap_channel_state_conn_res +0x5151 020867 store 1 ,mem_hid_control_state +0x5152 020868 branch mnosucc1 +: 020869 ml2cap_proc_signal_connect_rsp_hid_int: +0x5153 020870 copy timeup ,pdata +0x5154 020871 store 2 ,mem_hid_int_remote_cid +0x5155 020872 fetch 1 ,mem_hid_interrupt_state +0x5156 020873 set1 l2cap_channel_state_conn_res +0x5157 020874 store 1 ,mem_hid_interrupt_state +: 020877 mnosucc1: +0x5158 020878 call load_cont_pointers +: 020879 mnosucc: +0x5159 020880 copy regc ,pdata +0x515a 020881 isub rega ,regc +0x515b 020882 rtn +: 020884 ml2cap_proc_signal_config_rsp: +0x515c 020885 ifetch 1 ,contr +0x515d 020886 copy pdata ,queue +0x515e 020887 ifetch 2 ,contr +0x515f 020888 copy pdata ,rega +0x5160 020889 copy regc ,pdata +0x5161 020890 isub rega ,regc +0x5162 020891 ifetch 2 ,contr +0x5163 020892 copy pdata ,timeup +0x5164 020893 ifetch 2 ,contr +0x5165 020894 ifetch 2 ,contr +0x5166 020895 nbranch mcrsdone1 ,blank +0x5167 020896 call save_cont_pointers +0x5168 020900 copy timeup ,temp +0x5169 020901 bpatchx patch23_6 ,mem_patch23 +0x516a 020902 setarg l2cap_sdp_channel +0x516b 020903 isub temp ,null +0x516c 020904 branch ml2cap_proc_signal_config_rsp_sdp ,zero +0x516d 020905 setarg l2cap_rfcomm_channel +0x516e 020906 isub temp ,null +0x516f 020907 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero +0x5170 020908 setarg l2cap_hid_control_channel +0x5171 020909 isub temp ,null +0x5172 020910 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero +0x5173 020911 setarg l2cap_hid_interrupt_channel +0x5174 020912 isub temp ,null +0x5175 020913 branch ml2cap_proc_signal_config_rsp_hid_int ,zero +: 020914 ml2cap_proc_signal_config_rsp_sdp: +0x5176 020915 fetch 1 ,mem_sdp_state +0x5177 020916 set1 l2cap_channel_state_rcv_cfg_res +0x5178 020917 store 1 ,mem_sdp_state +0x5179 020918 rtn +: 020919 ml2cap_proc_signal_config_rsp_rfcomm: +0x517a 020920 fetch 1 ,mem_rfcomm_state +0x517b 020921 set1 l2cap_channel_state_rcv_cfg_res +0x517c 020922 store 1 ,mem_rfcomm_state +0x517d 020923 rtn +: 020924 ml2cap_proc_signal_config_rsp_hid_ctrl: +0x517e 020925 fetch 1 ,mem_hid_control_state +0x517f 020926 set1 l2cap_channel_state_rcv_cfg_res +0x5180 020927 store 1 ,mem_hid_control_state +0x5181 020928 rtn +: 020929 ml2cap_proc_signal_config_rsp_hid_int: +0x5182 020930 fetch 1 ,mem_hid_interrupt_state +0x5183 020931 set1 l2cap_channel_state_rcv_cfg_res +0x5184 020932 store 1 ,mem_hid_interrupt_state +0x5185 020933 jam bt_evt_hid_connected ,mem_fifo_temp +0x5186 020934 branch ui_ipc_send_event +: 020937 mcfrsdone: +0x5187 020938 call load_cont_pointers +: 020939 mcrsdone1: +0x5188 020940 increase -6 ,rega +: 020941 mloop2: +0x5189 020942 branch mcrsdone ,zero +0x518a 020943 increase 1 ,contr +0x518b 020944 increase -1 ,rega +0x518c 020945 branch mloop2 +: 020946 mcrsdone: +0x518d 020947 rtn +: 020948 ml2cap_proc_signal_config_req: +0x518e 020949 ifetch 1 ,contr +0x518f 020950 copy pdata ,queue +0x5190 020951 ifetch 2 ,contr +0x5191 020952 copy pdata ,rega +0x5192 020953 copy regc ,pdata +0x5193 020954 isub rega ,regc +0x5194 020955 ifetch 2 ,contr +0x5195 020956 increase 2 ,contr +0x5196 020957 copy pdata ,temp +0x5197 020958 setarg signal_config_rsp +0x5198 020959 istore 1 ,contw +0x5199 020960 copy queue ,pdata +0x519a 020961 istore 1 ,contw +0x519b 020962 increase 2 ,rega +0x519c 020963 copy rega ,pdata +0x519d 020964 istore 2 ,contw +0x519e 020965 call save_cont_pointers +0x519f 020966 bpatchx patch23_7 ,mem_patch23 +0x51a0 020967 setarg l2cap_sdp_channel +0x51a1 020968 isub temp ,null +0x51a2 020969 branch ml2cap_proc_signal_config_req_sdp ,zero +0x51a3 020970 setarg l2cap_rfcomm_channel +0x51a4 020971 isub temp ,null +0x51a5 020972 branch ml2cap_proc_signal_config_req_rfcomm ,zero +0x51a6 020973 setarg l2cap_hid_control_channel +0x51a7 020974 isub temp ,null +0x51a8 020975 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero +0x51a9 020976 setarg l2cap_hid_interrupt_channel +0x51aa 020977 isub temp ,null +0x51ab 020978 branch ml2cap_proc_signal_config_req_hid_int ,zero +0x51ac 020979 branch mcfgrq_done +: 020980 ml2cap_proc_signal_config_req_sdp: +0x51ad 020981 fetch 1 ,mem_sdp_state +0x51ae 020982 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51af 020983 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51b0 020984 store 1 ,mem_sdp_state +0x51b1 020985 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq +0x51b2 020986 fetcht 1 ,mem_control_tasks +0x51b3 020987 set1 l2cap_init_config_req ,temp +0x51b4 020988 storet 1 ,mem_control_tasks +0x51b5 020989 copy queue ,pdata +0x51b6 020990 increase 1 ,pdata +0x51b7 020991 store 1 ,mem_config_identifier +0x51b8 020992 fetch 1 ,mem_sdp_state +0x51b9 020993 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x51ba 020994 store 1 ,mem_sdp_state +: 020995 ml2cap_proc_signal_config_req_sdp_nsndreq: +0x51bb 020996 fetch 2 ,mem_sdp_remote_cid +0x51bc 020997 store 2 ,mem_config_req_dest_cid +0x51bd 020998 branch mcfgrq_done +: 020999 ml2cap_proc_signal_config_req_rfcomm: +0x51be 021000 fetch 1 ,mem_rfcomm_state +0x51bf 021001 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51c0 021002 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51c1 021003 store 1 ,mem_rfcomm_state +0x51c2 021004 fetch 2 ,mem_rfcomm_remote_cid +0x51c3 021005 branch mcfgrq_done +: 021006 ml2cap_proc_signal_config_req_hid_ctrl: +0x51c4 021007 fetch 1 ,mem_hid_control_state +0x51c5 021008 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51c6 021009 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51c7 021010 store 1 ,mem_hid_control_state +0x51c8 021011 fetch 2 ,mem_hid_ctrl_remote_cid +0x51c9 021012 branch mcfgrq_done +: 021013 ml2cap_proc_signal_config_req_hid_int: +0x51ca 021014 fetch 1 ,mem_hid_interrupt_state +0x51cb 021015 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51cc 021016 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51cd 021017 store 1 ,mem_hid_interrupt_state +0x51ce 021018 fetch 2 ,mem_hid_int_remote_cid +: 021021 mcfgrq_done: +0x51cf 021022 copy pdata ,timeup +0x51d0 021023 call load_cont_pointers +0x51d1 021025 copy timeup ,pdata +0x51d2 021027 istore 2 ,contw +0x51d3 021028 force 0x0000 ,pdata +0x51d4 021029 istore 2 ,contw +0x51d5 021030 force 0x0000 ,pdata +0x51d6 021031 istore 2 ,contw +0x51d7 021032 force 10 ,pdata +0x51d8 021033 iadd regb ,regb +0x51d9 021034 increase -6 ,rega +: 021035 mloop1: +0x51da 021036 branch mcrqdone ,zero +0x51db 021037 ifetch 1 ,contr +0x51dc 021038 istore 1 ,contw +0x51dd 021039 increase 1 ,regb +0x51de 021040 increase -1 ,rega +0x51df 021041 branch mloop1 +: 021042 mcrqdone: +0x51e0 021043 rtn +: 021044 ml2cap_proc_signal_disconn_req: +0x51e1 021045 ifetch 1 ,contr +0x51e2 021046 copy pdata ,queue +0x51e3 021047 ifetch 2 ,contr +0x51e4 021048 copy pdata ,rega +0x51e5 021049 copy regc ,pdata +0x51e6 021050 isub rega ,regc +0x51e7 021052 ifetch 2 ,contr +0x51e8 021053 copy pdata ,rega +0x51e9 021054 ifetch 2 ,contr +0x51ea 021055 copy pdata ,timeup +0x51eb 021056 call save_cont_pointers +0x51ec 021057 bpatchx patch24_0 ,mem_patch24 +0x51ed 021058 setarg l2cap_sdp_channel +0x51ee 021059 copy rega ,temp +0x51ef 021060 isub temp ,null +0x51f0 021061 branch ml2cap_proc_signal_disconn_sdp ,zero +0x51f1 021062 setarg l2cap_hid_control_channel +0x51f2 021063 copy rega ,temp +0x51f3 021064 isub temp ,null +0x51f4 021065 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero +0x51f5 021066 setarg l2cap_hid_interrupt_channel +0x51f6 021067 copy rega ,temp +0x51f7 021068 isub temp ,null +0x51f8 021069 branch ml2cap_proc_signal_disconn_hid_int ,zero +0x51f9 021070 branch mclsrfc +: 021071 ml2cap_proc_signal_disconn_sdp: +0x51fa 021072 setarg 0x0000 +0x51fb 021073 store 2 ,mem_sdp_tx_pkt_length +0x51fc 021074 store 2 ,mem_sdp_remote_cid +0x51fd 021075 store 1 ,mem_sdp_state +0x51fe 021076 branch mclssdp +: 021077 ml2cap_proc_signal_disconn_hid_ctrl: +0x51ff 021078 call l2cap_reset_hid_ctrl_state +0x5200 021079 branch mclssdp +: 021080 ml2cap_proc_signal_disconn_hid_int: +0x5201 021081 call l2cap_reset_hid_int_state +0x5202 021087 branch mclssdp +: 021088 mclsrfc: +0x5203 021089 setarg 0x0000 +0x5204 021090 store 2 ,mem_rfcomm_tx_pkt_length +: 021091 mclssdp: +0x5205 021092 call load_cont_pointers +0x5206 021093 setarg signal_disconnect_rsp +0x5207 021094 istore 1 ,contw +0x5208 021095 copy queue ,pdata +0x5209 021096 istore 1 ,contw +0x520a 021097 setarg 0x0004 +0x520b 021098 istore 2 ,contw +0x520c 021099 copy rega ,pdata +0x520d 021100 istore 2 ,contw +0x520e 021101 copy timeup ,pdata +0x520f 021102 istore 2 ,contw +0x5210 021103 force 8 ,pdata +0x5211 021104 iadd regb ,regb +0x5212 021105 rtn +: 021107 ml2cap_proc_signal_disconn_rsp: +0x5213 021108 ifetch 1 ,contr +0x5214 021109 copy pdata ,queue +0x5215 021110 ifetch 2 ,contr +0x5216 021111 copy pdata ,rega +0x5217 021112 ifetch 2 ,contr +0x5218 021113 copy pdata ,timeup +0x5219 021114 ifetch 2 ,contr +0x521a 021115 copy pdata ,temp +0x521b 021116 call save_cont_pointers +0x521c 021117 bpatchx patch24_1 ,mem_patch24 +0x521d 021118 fetch 1 ,mem_ml2cap_comm_id +0x521e 021119 icompare 0xff ,queue +0x521f 021120 nbranch mdisdone ,true +0x5220 021121 setarg l2cap_sdp_channel +0x5221 021122 isub temp ,null +0x5222 021123 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero +0x5223 021124 setarg l2cap_rfcomm_channel +0x5224 021125 isub temp ,null +0x5225 021126 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero +0x5226 021127 branch mdisdone +: 021128 ml2cap_proc_signal_disconn_rsp_sdp: +0x5227 021129 jam 0 ,mem_sdp_remote_cid +0x5228 021130 jam 0 ,mem_sdp_state +0x5229 021131 branch mdisdone +: 021132 ml2cap_proc_signal_disconn_rsp_rfcomm: +: 021135 mdisdone: +0x522a 021136 call load_cont_pointers +0x522b 021137 copy regc ,pdata +0x522c 021138 isub rega ,regc +0x522d 021139 rtn +: 021141 ml2cap_proc_send_reject: +0x522e 021142 setarg signal_cmd_reject +0x522f 021143 istore 1 ,contw +0x5230 021144 ifetch 1 ,contr +0x5231 021145 istore 1 ,contw +0x5232 021146 setarg 0x0002 +0x5233 021147 istore 2 ,contw +0x5234 021148 setarg 0x0000 +0x5235 021149 istore 2 ,contw +0x5236 021150 setarg 0x0006 +0x5237 021151 iadd regb ,regb +0x5238 021152 force 4 ,regc +0x5239 021153 rtn +: 021156 l2cap_get_req_id: +0x523a 021157 fetch 1 ,mem_ml2cap_comm_id +0x523b 021158 increase 1 ,pdata +0x523c 021159 bne 0 ,l2cap_get_req_id_ok +0x523d 021160 increase 1 ,pdata +: 021161 l2cap_get_req_id_ok: +0x523e 021162 store 1 ,mem_ml2cap_comm_id +0x523f 021163 rtn +: 021173 l2cap_malloc: +0x5240 021174 bpatchx patch24_2 ,mem_patch24 +0x5241 021175 arg 0 ,regb +0x5242 021176 call l2cap_malloc_is_fifo_full +0x5243 021177 nbranch assert ,blank +0x5244 021178 call l2cap_malloc_get_full_map +0x5245 021179 arg mem_tx_buff0 ,regb +0x5246 021180 arg 0 ,queue +: 021181 l2cap_malloc_loop: +0x5247 021182 fetcht 1 ,mem_used_map +0x5248 021183 qisolate1 temp +0x5249 021184 branch l2cap_malloc_next ,true +0x524a 021185 call l2cap_malloc_enough +0x524b 021186 sub timeup ,0 ,null +0x524c 021187 branch l2cap_malloc_next ,positive +0x524d 021188 call l2cap_malloc_into_fifo +0x524e 021189 branch l2cap_malloc_rtn +: 021190 l2cap_malloc_next: +0x524f 021191 increase 128 ,regb +0x5250 021192 increase 1 ,queue +0x5251 021193 setarg 8 +0x5252 021194 isub queue ,null +0x5253 021195 branch l2cap_malloc_loop ,positive +0x5254 021196 arg 0 ,regb +: 021197 l2cap_malloc_rtn: +0x5255 021198 copy regb ,pdata +0x5256 021199 branch assert ,blank +0x5257 021200 rtn +: 021208 l2cap_malloc_fifo_out: +0x5258 021209 bpatchx patch24_3 ,mem_patch24 +0x5259 021210 call l2cap_malloc_fifo_get_first_ptr +0x525a 021211 increase 1 ,contr +0x525b 021212 ifetch 2 ,contr +0x525c 021213 rtn +: 021219 l2cap_malloc_free: +0x525d 021220 bpatchx patch24_4 ,mem_patch24 +0x525e 021221 call l2cap_malloc_fifo_get_first_ptr +0x525f 021222 copy contr ,contw +0x5260 021223 copy contr ,temp +0x5261 021224 setarg 0 +0x5262 021225 istore 3 ,contw +0x5263 021226 rtn +: 021231 l2cap_malloc_discard: +0x5264 021232 bpatchx patch24_5 ,mem_patch24 +0x5265 021233 call l2cap_malloc_is_fifo_empty +0x5266 021234 branch assert ,blank +0x5267 021235 fetch 3 ,mem_tx_fifo2 +0x5268 021236 store 3 ,mem_tx_fifo3 +0x5269 021237 fetch 3 ,mem_tx_fifo1 +0x526a 021238 store 3 ,mem_tx_fifo2 +0x526b 021239 fetch 3 ,mem_tx_fifo0 +0x526c 021240 store 3 ,mem_tx_fifo1 +0x526d 021241 rtn +: 021247 l2cap_malloc_is_fifo_full: +0x526e 021248 bpatchx patch24_6 ,mem_patch24 +0x526f 021249 fetch 3 ,mem_tx_fifo0 +0x5270 021250 rtn +: 021256 l2cap_malloc_is_fifo_nearly_full: +0x5271 021257 bpatchx patch24_7 ,mem_patch24 +0x5272 021258 fetch 3 ,mem_tx_fifo1 +0x5273 021259 rtn +: 021265 l2cap_malloc_is_fifo_empty: +0x5274 021266 bpatchx patch25_0 ,mem_patch25 +0x5275 021267 fetch 3 ,mem_tx_fifo3 +0x5276 021268 rtn +: 021273 l2cap_malloc_fifo_get_first_ptr: +0x5277 021274 call l2cap_malloc_is_fifo_empty +0x5278 021275 branch assert ,blank +0x5279 021276 arg mem_tx_fifo0 ,contr +: 021277 l2cap_malloc_free_loop: +0x527a 021278 ifetch 3 ,contr +0x527b 021279 branch l2cap_malloc_free_loop ,blank +0x527c 021280 increase -3 ,contr +0x527d 021281 rtn +: 021288 l2cap_malloc_get_full_map: +0x527e 021289 bpatchx patch25_1 ,mem_patch25 +0x527f 021290 arg 4 ,loopcnt +0x5280 021291 arg mem_tx_fifo0_map ,contr +0x5281 021292 arg 0 ,temp +: 021293 l2cap_malloc_get_full_map_loop: +0x5282 021294 ifetch 3 ,contr +0x5283 021295 and pdata ,0xff ,pdata +0x5284 021296 ior temp ,temp +0x5285 021297 loop l2cap_malloc_get_full_map_loop +0x5286 021298 storet 1 ,mem_used_map +0x5287 021299 rtn +: 021307 l2cap_malloc_into_fifo: +0x5288 021308 bpatchx patch25_2 ,mem_patch25 +0x5289 021309 call l2cap_malloc_is_fifo_full +0x528a 021310 nbranch assert ,blank +0x528b 021311 call l2cap_malloc_is_fifo_empty +0x528c 021312 branch l2cap_malloc_into_fifo_no_push ,blank +0x528d 021313 fetch 3 ,mem_tx_fifo1 +0x528e 021314 store 3 ,mem_tx_fifo0 +0x528f 021315 ifetch 3 ,contr +0x5290 021316 istore 3 ,contw +0x5291 021317 ifetch 3 ,contr +0x5292 021318 istore 3 ,contw +0x5293 021319 setarg 0 +0x5294 021320 istore 3 ,contw +: 021321 l2cap_malloc_into_fifo_no_push: +0x5295 021322 arg 0 ,temp +0x5296 021323 copy timeup ,pdata +0x5297 021324 iadd queue ,pdata +: 021325 l2cap_malloc_into_fifo_loop: +0x5298 021326 qset1 temp +0x5299 021327 increase 1 ,queue +0x529a 021328 isub queue ,null +0x529b 021329 nbranch l2cap_malloc_into_fifo_loop ,zero +0x529c 021331 lshift8 regb ,pdata +0x529d 021332 ior temp ,pdata +0x529e 021333 store 3 ,mem_tx_fifo3 +0x529f 021334 rtn +: 021344 l2cap_malloc_enough: +0x52a0 021345 bpatchx patch25_3 ,mem_patch25 +0x52a1 021346 call l2cap_malloc_get_full_map +0x52a2 021347 copy queue ,regc +0x52a3 021348 arg 0 ,temp +0x52a4 021349 arg 0 ,timeup +: 021351 l2cap_malloc_enough_loop: +0x52a5 021352 copy queue ,pdata +0x52a6 021353 beq 8 ,l2cap_malloc_enough_end +0x52a7 021354 fetch 1 ,mem_used_map +0x52a8 021355 qisolate1 pdata +0x52a9 021356 branch l2cap_malloc_enough_end ,true +0x52aa 021357 increase 128 ,temp +0x52ab 021358 increase 1 ,queue +0x52ac 021359 copy rega ,pdata +0x52ad 021360 isub temp ,null +0x52ae 021361 branch l2cap_malloc_enough_end ,zero +0x52af 021362 branch l2cap_malloc_enough_loop ,positive +: 021363 l2cap_malloc_enough_end: +0x52b0 021364 copy temp ,pdata +0x52b1 021365 isub rega ,null +0x52b2 021366 nbranch l2cap_malloc_enough_rtn ,positive +0x52b3 021367 copy queue ,pdata +0x52b4 021368 copy regc ,temp +0x52b5 021369 isub temp ,timeup +: 021370 l2cap_malloc_enough_rtn: +0x52b6 021371 copy regc ,queue +0x52b7 021372 rtn +: 021375 l2cap_malloc_signal_channel: +0x52b8 021376 bpatchx patch25_4 ,mem_patch25 +0x52b9 021377 arg l2cap_signal_malloc_size ,rega +0x52ba 021378 call l2cap_malloc +0x52bb 021379 store 2 ,mem_l2cap_signal_tx_buff_ptr +0x52bc 021380 increase 4 ,pdata +0x52bd 021381 store 2 ,mem_l2cap_signal_tx_payload_ptr +0x52be 021382 setarg 0 +0x52bf 021383 store 2 ,mem_l2cap_signal_tx_length +0x52c0 021384 rtn +: 021386 l2cap_get_signal_tx_buff: +0x52c1 021387 fetch 2 ,mem_l2cap_signal_tx_buff_ptr +0x52c2 021388 branch l2cap_util_pdata_to_contw +: 021390 l2cap_get_signal_tx_payload: +0x52c3 021391 fetch 2 ,mem_l2cap_signal_tx_payload_ptr +0x52c4 021392 branch l2cap_util_pdata_to_contw +: 021395 l2cap_malloc_sdp_channel: +0x52c5 021396 bpatchx patch25_5 ,mem_patch25 +0x52c6 021397 arg sdp_malloc_size ,rega +0x52c7 021398 call l2cap_malloc +0x52c8 021399 store 2 ,mem_sdp_tx_buff_ptr +0x52c9 021400 increase 4 ,pdata +0x52ca 021401 store 2 ,mem_sdp_tx_payload_ptr +0x52cb 021402 setarg 0 +0x52cc 021403 store 2 ,mem_sdp_tx_pkt_length +0x52cd 021404 rtn +: 021406 l2cap_get_sdp_tx_buff: +0x52ce 021407 fetch 2 ,mem_sdp_tx_buff_ptr +0x52cf 021408 branch l2cap_util_pdata_to_contw +: 021410 l2cap_get_sdp_tx_payload: +0x52d0 021411 fetch 2 ,mem_sdp_tx_payload_ptr +0x52d1 021412 branch l2cap_util_pdata_to_contw +: 021415 l2cap_malloc_rfcomm_channel: +0x52d2 021416 bpatchx patch25_6 ,mem_patch25 +0x52d3 021417 call push_stack +0x52d4 021418 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag +0x52d5 021419 call l2cap_malloc_is_fifo_full +0x52d6 021420 nrtn blank +0x52d7 021421 arg rfcomm_malloc_size ,rega +0x52d8 021422 call l2cap_malloc +0x52d9 021423 store 2 ,mem_rfcomm_tx_buff_ptr +0x52da 021424 increase 4 ,pdata +0x52db 021425 store 2 ,mem_rfcomm_tx_payload_ptr +0x52dc 021426 setarg 0 +0x52dd 021427 store 2 ,mem_rfcomm_tx_pkt_length +0x52de 021428 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +0x52df 021429 branch pop_stack +: 021431 l2cap_get_rfcomm_tx_buff: +0x52e0 021432 fetch 2 ,mem_rfcomm_tx_buff_ptr +0x52e1 021433 branch l2cap_util_pdata_to_contw +: 021435 l2cap_util_pdata_to_contw: +0x52e2 021436 branch assert ,blank +0x52e3 021437 copy pdata ,contw +0x52e4 021438 rtn +: 021441 l2cap_lpm_save_calc_len: +0x52e5 021442 bpatchx patch25_7 ,mem_patch25 +0x52e6 021443 arg 0 ,regb +0x52e7 021444 arg mem_tx_fifo0_map ,rega +0x52e8 021445 increase -2 ,rega +: 021446 l2cap_lpm_save_calc_len_loop: +0x52e9 021447 increase 2 ,rega +0x52ea 021448 setarg mem_tx_fifo_end +0x52eb 021449 isub rega ,null +0x52ec 021450 branch l2cap_lpm_save_calc_len_end ,zero +0x52ed 021451 ifetch 1 ,rega +0x52ee 021452 increase 1 ,rega +0x52ef 021453 branch l2cap_lpm_save_calc_len_loop ,blank +0x52f0 021454 ifetcht 2 ,rega +0x52f1 021455 ifetch 2 ,temp +0x52f2 021456 iadd regb ,regb +0x52f3 021457 increase 4 ,regb +0x52f4 021458 branch l2cap_lpm_save_calc_len_loop +: 021459 l2cap_lpm_save_calc_len_end: +0x52f5 021460 copy regb ,pdata +0x52f6 021461 rtn +: 021464 l2cap_lpm_get_wake_lock: +0x52f7 021465 arg wake_lock_l2cap_tx ,queue +0x52f8 021466 branch lpm_get_wake_lock +: 021468 l2cap_lpm_put_wake_lock: +0x52f9 021469 arg wake_lock_l2cap_tx ,queue +0x52fa 021470 branch lpm_put_wake_lock +: 021472 l2cap_lpm_save_txbuf: +0x52fb 021473 bpatchx patch26_0 ,mem_patch26 +0x52fc 021474 call l2cap_malloc_get_full_map +0x52fd 021475 fetch 1 ,mem_used_map +0x52fe 021476 rtn blank +0x52ff 021477 call l2cap_lpm_save_calc_len +0x5300 021478 arg l2cap_lpm_txbuf_len ,temp +0x5301 021479 isub temp ,null +0x5302 021480 branch l2cap_lpm_get_wake_lock ,positive +0x5303 021481 call l2cap_lpm_put_wake_lock +0x5304 021482 arg mem_l2cap_lpm_txbuf ,contw +0x5305 021483 arg mem_tx_fifo0 ,rega +: 021484 l2cap_lpm_save_txbuf_loop: +0x5306 021485 setarg mem_tx_fifo_end +0x5307 021486 isub rega ,null +0x5308 021487 rtn zero +0x5309 021488 ifetch 1 ,rega +0x530a 021489 increase 1 ,rega +0x530b 021490 nbranch l2cap_lpm_save_txbuf_nempty ,blank +0x530c 021491 istore 2 ,contw +0x530d 021492 increase 2 ,rega +0x530e 021493 branch l2cap_lpm_save_txbuf_loop +: 021494 l2cap_lpm_save_txbuf_nempty: +0x530f 021495 ifetch 2 ,rega +0x5310 021496 increase 2 ,rega +0x5311 021497 copy pdata ,contr +0x5312 021498 ifetch 2 ,contr +0x5313 021499 istore 2 ,contw +0x5314 021500 copy pdata ,loopcnt +0x5315 021501 increase 2 ,loopcnt +0x5316 021502 call memcpy +0x5317 021503 branch l2cap_lpm_save_txbuf_loop +: 021505 l2cap_lpm_load_txbuf: +0x5318 021506 bpatchx patch26_1 ,mem_patch26 +0x5319 021507 call l2cap_malloc_get_full_map +0x531a 021508 fetch 1 ,mem_used_map +0x531b 021509 rtn blank +0x531c 021510 arg mem_tx_fifo0_ptr ,rega +0x531d 021511 increase -3 ,rega +0x531e 021512 arg mem_l2cap_lpm_txbuf ,contr +: 021513 l2cap_lpm_load_txbuf_loop: +0x531f 021514 increase 3 ,rega +0x5320 021515 setarg mem_tx_fifo_end + 1 +0x5321 021516 isub rega ,null +0x5322 021517 rtn zero +0x5323 021518 ifetch 2 ,contr +0x5324 021519 branch l2cap_lpm_load_txbuf_loop ,blank +0x5325 021520 increase 4 ,pdata +0x5326 021521 copy pdata ,loopcnt +0x5327 021522 copy contr ,regb +0x5328 021523 ifetch 2 ,rega +0x5329 021524 copy pdata ,contw +0x532a 021525 copy regb ,contr +0x532b 021526 increase -2 ,contr +0x532c 021527 call memcpy +0x532d 021528 branch l2cap_lpm_load_txbuf_loop +: 021538 le_init_conn: +0x532e 021539 bpatchx patch26_2 ,mem_patch26 +0x532f 021540 disable wake +0x5330 021541 jam 1 ,mem_le_conn_handle +0x5331 021542 jam 3 ,mem_le_state +0x5332 021543 jam 1 ,mem_le_arq +0x5333 021544 setarg -1 +0x5334 021545 store 2 ,mem_le_event_count +0x5335 021546 force 0 ,pdata +0x5336 021547 store 1 ,mem_le_ch +0x5337 021548 store 1 ,mem_le_op +0x5338 021549 store 3 ,mem_sniff_rcv +0x5339 021550 store 3 ,mem_sniff_lost +0x533a 021551 store 5 ,mem_le_pcnt_tx +0x533b 021552 set1 39 ,pdata +0x533c 021553 store 5 ,mem_le_pcnt_rx +0x533d 021554 jam 1 ,mem_le_txheader +0x533e 021555 jam 0 ,mem_le_txlen +0x533f 021556 branch le_supervision_flush +: 021558 le_init_master: +0x5340 021559 bpatchx patch26_3 ,mem_patch26 +0x5341 021560 enable master +0x5342 021561 jam lemode_master ,mem_le_mode +0x5343 021562 jam 1 ,mem_le_att_handle +0x5344 021563 jam 1 ,mem_le_search_handle_start +0x5345 021564 setarg 0xffff +0x5346 021565 store 2 ,mem_le_search_handle_end +0x5347 021566 force 0 ,pdata +0x5348 021567 store 5 ,mem_le_pcnt_rx +0x5349 021568 set1 39 ,pdata +0x534a 021569 store 5 ,mem_le_pcnt_tx +0x534b 021570 branch le_init_conn +: 021573 le_init_slave: +0x534c 021574 bpatchx patch26_4 ,mem_patch26 +0x534d 021575 disable master +0x534e 021576 setarg 0x17 +0x534f 021577 store 2 ,mem_le_remote_mtu +0x5350 021578 jam lemode_slave ,mem_le_mode +0x5351 021579 jam 0 ,mem_le_adv_enable +0x5352 021580 jam 0 ,mem_lpm_current_mult +0x5353 021581 jam flag_le_pairing_null ,mem_le_pairing_state +0x5354 021582 jam flag_le_enc_null ,mem_le_enc_state +0x5355 021583 fetch 2 ,mem_le_superto +0x5356 021584 store 2 ,mem_le_init_superto +0x5357 021585 fetch 2 ,mem_le_tsniff +0x5358 021586 mul32 pdata ,5 ,pdata +0x5359 021587 rshift4 pdata ,pdata +0x535a 021588 store 2 ,mem_le_superto +0x535b 021589 branch le_init_conn +: 021595 le_dispatch: +0x535c 021596 call le_enable +0x535d 021597 call le_scan +0x535e 021598 call le_adv +0x535f 021599 branch le_disable +: 021601 le_conn_dispatch: +0x5360 021602 bpatchx patch26_5 ,mem_patch26 +0x5361 021603 call le_enable +0x5362 021604 call app_process_ble +0x5363 021605 fetch 1 ,mem_le_mode +0x5364 021606 beq lemode_master ,le_master_dispatch +0x5365 021607 branch le_slave_dispatch +: 021613 le_master_dispatch: +0x5366 021614 bpatchx patch26_6 ,mem_patch26 +0x5367 021615 enable master +0x5368 021616 call le_supervision_update +0x5369 021617 branch le_master_disconn ,positive +0x536a 021618 call check_ble_disabled +0x536b 021619 call le_setup +0x536c 021620 call le_prepare_tx +0x536d 021621 disable match +0x536e 021622 call le_transmit_receive_sifs +0x536f 021623 nrtn match +0x5370 021624 bpatchx patch26_7 ,mem_patch26 +0x5371 021625 fetch 1 ,mem_le_conn_rcv +0x5372 021626 increase 1 ,pdata +0x5373 021627 store 1 ,mem_le_conn_rcv +0x5374 021628 call le_acknowledge +0x5375 021629 disable master +0x5376 021630 rtn +: 021632 le_master_disconn: +0x5377 021633 call le_disconnect +0x5378 021634 disable master +0x5379 021635 rtn +: 021640 le_slave_dispatch: +0x537a 021641 bpatchx patch27_0 ,mem_patch27 +0x537b 021642 jam 0 ,mem_le_md_count +0x537c 021643 call sp_calc_sequence_256 +0x537d 021644 call le_secure_connect_sm +0x537e 021645 disable attempt +0x537f 021646 call le_supervision_update +0x5380 021647 branch le_slave_disconn ,positive +0x5381 021648 call check_ble_disabled +0x5382 021649 call le_setup +0x5383 021650 call le_receive_slave +0x5384 021651 nbranch le_slave_unsync ,sync +0x5385 021652 call le_got_first_packet +0x5386 021653 branch le_slave_match ,match +0x5387 021654 branch le_slave_cont +: 021657 le_slave_match: +0x5388 021658 bpatchx patch27_1 ,mem_patch27 +0x5389 021659 fetch 1 ,mem_le_md_count +0x538a 021660 pincrease 1 +0x538b 021661 store 1 ,mem_le_md_count +0x538c 021662 beq le_md_max_count ,le_slave_cont +0x538d 021663 call le_acknowledge +0x538e 021664 call le_prepare_tx +0x538f 021665 call le_transmit_norx +0x5390 021666 call le_parse +0x5391 021667 fetch 2 ,mem_cb_ble_transmit +0x5392 021668 call callback_func +0x5393 021669 call le_check_md +0x5394 021670 branch le_slave_more_data ,user +: 021671 le_slave_cont: +0x5395 021672 bpatchx patch27_2 ,mem_patch27 +0x5396 021673 call le_pairing_sm +0x5397 021674 call le_check_paring_time +0x5398 021675 call check_51cmd +0x5399 021676 fetch 1 ,mem_le_op +0x539a 021677 bbit1 op_disconn ,le_slave_disconn +: 021678 le_slave_unsync: +0x539b 021679 bpatchx patch27_3 ,mem_patch27 +0x539c 021680 call le_lpm_set_mult +0x539d 021681 call le_update_channel_map +0x539e 021682 call le_update_param +0x539f 021683 branch calc_clke_offset +: 021686 le_check_md: +0x53a0 021687 disable user +0x53a1 021688 bmark1 mark_ble_rx_md ,enable_user +0x53a2 021689 bmark1 mark_ble_tx_md ,enable_user +0x53a3 021690 rtn +: 021693 le_slave_more_data: +0x53a4 021694 bpatchx patch27_4 ,mem_patch27 +0x53a5 021695 enable attempt +0x53a6 021696 call le_transmit_receive_sifs_notx +0x53a7 021697 branch le_slave_match ,match +0x53a8 021698 branch le_slave_cont +: 021700 le_slave_disconn: +: 021703 le_disconnect: +0x53a9 021704 bpatchx patch27_5 ,mem_patch27 +0x53aa 021705 call le_clear_connection_info +0x53ab 021706 call app_disconn_reason_collect_ble +0x53ac 021707 call sp_initialize_256 +0x53ad 021708 jam bt_evt_le_disconnected ,mem_fifo_temp +0x53ae 021709 branch ui_ipc_send_event +: 021711 le_clear_connection_info: +0x53af 021712 setarg 0 +0x53b0 021713 store 9 ,mem_le_tx_buff_used +0x53b1 021714 jam 0 ,mem_le_conn_handle +0x53b2 021715 jam lemode_idle ,mem_le_mode +0x53b3 021716 jam 0 ,mem_le_state +0x53b4 021717 jam flag_le_enc_null ,mem_le_enc_state +0x53b5 021718 jam flag_le_pairing_null ,mem_le_pairing_state +0x53b6 021719 rtn +: 021721 le_got_first_packet: +0x53b7 021722 bpatchx patch27_6 ,mem_patch27 +0x53b8 021723 fetch 1 ,mem_le_conn_rcv +0x53b9 021724 increase 1 ,pdata +0x53ba 021725 store 1 ,mem_le_conn_rcv +0x53bb 021726 fetch 1 ,mem_le_state +0x53bc 021727 rtnbit1 lestate_got_first_packet +0x53bd 021728 set1 lestate_got_first_packet +0x53be 021729 store 1 ,mem_le_state +0x53bf 021730 fetch 2 ,mem_le_init_superto +0x53c0 021731 store 2 ,mem_le_superto +0x53c1 021732 setarg 0 +0x53c2 021733 store 4 ,mem_le_transmit_window +0x53c3 021734 rtn +: 021737 le_enable: +0x53c4 021738 bpatchx patch27_7 ,mem_patch27 +0x53c5 021739 jam 0x36 ,rf_adc_goff +0x53c6 021740 jam 0x5f ,rf_agc_nsat +0x53c7 021741 enable le +0x53c8 021742 jam 7 ,rfen_ulp +0x53c9 021743 call check_ble_disabled +0x53ca 021744 fetch 1 ,mem_250k_freq_enable +0x53cb 021745 rtn blank +0x53cc 021746 jam 0xb8 ,rf_iq_gain +0x53cd 021747 rtn +: 021749 le_disable: +0x53ce 021750 bpatchx patch28_0 ,mem_patch28 +0x53cf 021751 jam 0x2e ,rf_adc_goff +0x53d0 021752 jam 0xff ,rf_agc_nsat +0x53d1 021753 disable le +0x53d2 021754 jam 3 ,rfen_ulp +0x53d3 021755 arg 0 ,stop_watch +0x53d4 021756 rtn +: 021758 le_prep: +0x53d5 021759 disable enable_crc +0x53d6 021760 disable enable_white +0x53d7 021761 fetch 3 ,mem_le_crcinit +0x53d8 021762 iforce crc24_init +0x53d9 021763 fetch 1 ,mem_le_ch_mapped +: 021764 le_prep2: +0x53da 021765 reverse pdata ,temp +0x53db 021766 set1 1 ,temp +0x53dc 021767 rshift temp ,white_init +0x53dd 021768 rtn +: 021771 lerx_setfreq: +0x53de 021772 call le_setfreq +0x53df 021773 call set_freq_rx +0x53e0 021774 setarg param_pll_setup +0x53e1 021775 call sleep +0x53e2 021776 branch rf_rx_enable +: 021778 letx_setfreq: +0x53e3 021779 branch txon ,match +: 021780 letx_setfreq0: +0x53e4 021781 call le_setfreq +0x53e5 021782 branch set_freq_tx +: 021783 le_setfreq: +0x53e6 021784 bpatchx patch28_1 ,mem_patch28 +0x53e7 021785 call set_sync_on +0x53e8 021786 fetch 1 ,mem_le_testtype +0x53e9 021787 nbranch le_ctf_test ,blank +0x53ea 021788 fetch 1 ,mem_le_ch_mapped +0x53eb 021789 sub pdata ,36 ,null +0x53ec 021790 branch le_ctf_normal ,positive +0x53ed 021791 force 0 ,temp +0x53ee 021792 rtneq 37 +0x53ef 021793 force 24 ,temp +0x53f0 021794 rtneq 38 +0x53f1 021795 force 78 ,temp +0x53f2 021796 rtn +: 021798 le_ctf_normal: +0x53f3 021799 sub pdata ,10 ,null +0x53f4 021800 branch le_ctf_low ,positive +0x53f5 021801 increase 1 ,pdata +: 021803 le_ctf_low: +0x53f6 021804 lshift pdata ,pdata +0x53f7 021805 add pdata ,2 ,temp +0x53f8 021806 rtn +: 021808 le_ctf_test: +0x53f9 021809 fetch 1 ,mem_le_ch_mapped +0x53fa 021810 lshift pdata ,temp +0x53fb 021811 rtn +: 021813 le_sca_map: +0x53fc 021814 arg 500 ,temp +0x53fd 021815 rtn blank +0x53fe 021816 arg 250 ,temp +0x53ff 021817 rtneq 1 +0x5400 021818 arg 150 ,temp +0x5401 021819 rtneq 2 +0x5402 021820 arg 100 ,temp +0x5403 021821 rtneq 3 +0x5404 021822 arg 75 ,temp +0x5405 021823 rtneq 4 +0x5406 021824 arg 50 ,temp +0x5407 021825 rtneq 5 +0x5408 021826 arg 40 ,temp +0x5409 021827 rtneq 6 +0x540a 021828 arg 20 ,temp +0x540b 021829 rtn +: 021833 le_adv_access: +0x540c 021834 setarg 0x8e89be +0x540d 021835 lshift8 pdata ,pdata +0x540e 021836 or_into 0xd6 ,pdata +0x540f 021837 iforce access +0x5410 021838 setarg 0x555555 +0x5411 021839 store 3 ,mem_le_crcinit +0x5412 021840 rtn +: 021842 le_setup: +0x5413 021843 bpatchx patch28_2 ,mem_patch28 +0x5414 021844 enable swfine +0x5415 021845 fetch 4 ,mem_le_access +0x5416 021846 iforce access +0x5417 021847 call le_map_channel +0x5418 021848 setarg 0x200 +0x5419 021849 branch le_setup_master ,master +0x541a 021850 fetch 2 ,mem_le_receive_window +0x541b 021851 rshift pdata ,pdata +: 021852 le_setup_master: +0x541c 021853 arg param_pll_setup ,temp +0x541d 021854 iadd temp ,pdata +0x541e 021855 call ahead_window +0x541f 021856 deposit clke +0x5420 021857 store 6 ,mem_le_rxon_ts +0x5421 021858 rtn +: 021860 le_next_adv_channel: +0x5422 021861 bpatchx patch28_3 ,mem_patch28 +0x5423 021862 fetch 1 ,mem_le_ch_mapped +0x5424 021863 beq 37 ,le_next_adv_channel_curr_channel_37 +0x5425 021864 beq 38 ,le_next_adv_channel_curr_channel_38 +0x5426 021865 beq 39 ,le_next_adv_channel_curr_channel_39 +0x5427 021866 branch le_next_adv_channel_curr_channel_39 +: 021868 le_next_adv_channel_curr_channel_37: +0x5428 021869 fetcht 1 ,mem_le_adv_channel_map +0x5429 021870 isolate1 bit_adv_channel_map_38 ,temp +0x542a 021871 branch set_le_next_adv_channel_38 ,true +0x542b 021872 isolate1 bit_adv_channel_map_39 ,temp +0x542c 021873 branch set_le_next_adv_channel_39 ,true +0x542d 021874 branch set_le_next_adv_channel_37 +: 021877 le_next_adv_channel_curr_channel_38: +0x542e 021878 fetcht 1 ,mem_le_adv_channel_map +0x542f 021879 isolate1 bit_adv_channel_map_39 ,temp +0x5430 021880 branch set_le_next_adv_channel_39 ,true +0x5431 021881 isolate1 bit_adv_channel_map_37 ,temp +0x5432 021882 branch set_le_next_adv_channel_37 ,true +0x5433 021883 branch set_le_next_adv_channel_38 +: 021886 le_next_adv_channel_curr_channel_39: +0x5434 021887 fetcht 1 ,mem_le_adv_channel_map +0x5435 021888 isolate1 bit_adv_channel_map_37 ,temp +0x5436 021889 branch set_le_next_adv_channel_37 ,true +0x5437 021890 isolate1 bit_adv_channel_map_38 ,temp +0x5438 021891 branch set_le_next_adv_channel_38 ,true +0x5439 021892 branch set_le_next_adv_channel_39 +: 021896 set_le_next_adv_channel_37: +0x543a 021897 jam 37 ,mem_le_ch_mapped +0x543b 021898 fetch 1 ,mem_le_adv_channel_map_temp +0x543c 021899 set1 bit_adv_channel_map_37 ,pdata +0x543d 021900 store 1 ,mem_le_adv_channel_map_temp +0x543e 021901 rtn +: 021903 set_le_next_adv_channel_38: +0x543f 021904 jam 38 ,mem_le_ch_mapped +0x5440 021905 fetch 1 ,mem_le_adv_channel_map_temp +0x5441 021906 set1 bit_adv_channel_map_38 ,pdata +0x5442 021907 store 1 ,mem_le_adv_channel_map_temp +0x5443 021908 rtn +: 021910 set_le_next_adv_channel_39: +0x5444 021911 jam 39 ,mem_le_ch_mapped +0x5445 021912 fetch 1 ,mem_le_adv_channel_map_temp +0x5446 021913 set1 bit_adv_channel_map_39 ,pdata +0x5447 021914 store 1 ,mem_le_adv_channel_map_temp +0x5448 021915 rtn +: 021919 le_context_nexthop: +0x5449 021920 bpatchx patch28_4 ,mem_patch28 +0x544a 021921 add rega ,coffset_mode ,contr +0x544b 021922 ifetch 1 ,contr +0x544c 021923 rtnbit0 mode_le +0x544d 021924 add rega ,coffset_le_event_cnt ,contw +0x544e 021925 ifetch 2 ,contw +0x544f 021926 increase 1 ,pdata +0x5450 021927 istore 2 ,contw +0x5451 021928 add rega ,coffset_le_hop ,contr +0x5452 021929 ifetch 1 ,contr +0x5453 021930 add rega ,coffset_le_ch ,contw +0x5454 021931 ifetcht 1 ,contw +0x5455 021932 iadd temp ,pdata +0x5456 021933 sub pdata ,36 ,null +0x5457 021934 branch le_nexthop_nowrap ,positive +0x5458 021935 increase -37 ,pdata +: 021936 le_nexthop_nowrap: +0x5459 021937 istore 1 ,contw +0x545a 021938 rtn +: 021941 le_calc_channel_map: +0x545b 021942 bpatchx patch28_5 ,mem_patch28 +0x545c 021943 fetch 5 ,mem_le_channel_map +0x545d 021944 force 0 ,temp +0x545e 021945 force 37 ,loopcnt +: 021946 le_count_channels_loop: +0x545f 021947 bbit0 0 ,le_count_channels_notused +0x5460 021948 increase 1 ,temp +: 021949 le_count_channels_notused: +0x5461 021950 rshift pdata ,pdata +0x5462 021951 loop le_count_channels_loop +0x5463 021952 add temp ,-1 ,pdata +0x5464 021953 store 1 ,mem_le_channels +0x5465 021954 rtn +: 021956 le_map_channel: +0x5466 021957 bpatchx patch28_6 ,mem_patch28 +0x5467 021958 fetch 1 ,mem_le_ch +0x5468 021959 iforce queue +0x5469 021960 fetcht 5 ,mem_le_channel_map +0x546a 021961 qisolate1 temp +0x546b 021962 branch le_map_channel_end ,true +: 021963 le_map_channel_next: +0x546c 021964 bpatchx patch28_7 ,mem_patch28 +0x546d 021965 fetch 1 ,mem_le_channels +0x546e 021966 isub queue ,pdata +0x546f 021967 branch le_map_channel_cont ,positive +0x5470 021968 sub pdata ,-1 ,queue +0x5471 021969 branch le_map_channel_next +: 021970 le_map_channel_cont: +0x5472 021971 copy queue ,loopcnt +0x5473 021972 force 0 ,queue +: 021973 le_map_channel_loop: +0x5474 021974 qisolate1 temp +0x5475 021975 branch le_map_channel_skip ,true +0x5476 021976 increase 1 ,loopcnt +: 021977 le_map_channel_skip: +0x5477 021978 deposit loopcnt +0x5478 021979 branch le_map_channel_end ,blank +0x5479 021980 increase 1 ,queue +0x547a 021981 increase -1 ,loopcnt +0x547b 021982 branch le_map_channel_loop +: 021983 le_map_channel_end: +0x547c 021984 deposit queue +0x547d 021985 store 1 ,mem_le_ch_mapped +0x547e 021986 rtn +: 021989 le_wait_tx: +0x547f 021990 branch le_wait_master ,master +0x5480 021991 until null ,timeout +0x5481 021992 rtn +: 021994 le_wait_master: +0x5482 021995 arg 0xea0 ,timeup +0x5483 021996 until clkn_rt ,meet +0x5484 021997 rtn +: 021999 le_receive_adv: +0x5485 022000 disable swfine +0x5486 022001 fetch 2 ,mem_le_scan_window +0x5487 022002 copy pdata ,timeup +0x5488 022003 branch le_receive_packet +: 022006 le_receive_slave: +0x5489 022007 bpatchx patch29_0 ,mem_patch29 +0x548a 022008 enable swfine +0x548b 022009 fetch 2 ,mem_le_receive_window +0x548c 022010 fetcht 4 ,mem_le_transmit_window +0x548d 022011 iadd temp ,timeup +: 022012 le_receive_packet: +0x548e 022013 call lerx_setfreq +: 022014 le_receive_rxon: +0x548f 022015 bpatchx patch29_1 ,mem_patch29 +0x5490 022016 call le_prep +0x5491 022017 disable match +0x5492 022018 enable decode_fec0 +0x5493 022019 enable is_rx +0x5494 022020 disable is_tx +0x5495 022021 copy timeup ,stop_watch +0x5496 022022 correlate null ,timeout +0x5497 022023 branch le_receive_on_attempt ,attempt +0x5498 022024 copy clke ,temp +0x5499 022025 storet 6 ,mem_sync_clke +: 022026 le_receive_on_attempt: +0x549a 022027 nbranch end_of_packet ,sync +0x549b 022028 branch le_receive_skip ,attempt +0x549c 022029 arg param_clke_cal_le ,clke_rt +0x549d 022030 copy bt_clk ,clke_bt +0x549e 022031 fetch 1 ,mem_le_state +0x549f 022032 bbit0 lestate_got_first_packet ,le_receive_skip +0x54a0 022033 call lpm_adjust_clk ,wake +: 022034 le_receive_skip: +0x54a1 022035 bpatchx patch29_2 ,mem_patch29 +0x54a2 022036 call save_rssi +0x54a3 022037 enable enable_white +0x54a4 022038 enable enable_crc +0x54a5 022039 parse demod ,bucket ,8 +0x54a6 022040 rshift3 pwindow ,pdata +0x54a7 022041 store 1 ,mem_le_rxbuf +0x54a8 022042 parse demod ,bucket ,8 +0x54a9 022043 rshift3 pwindow ,pdata +0x54aa 022044 istore 1 ,contw +0x54ab 022045 and pdata ,0x3f ,loopcnt +0x54ac 022046 branch lerx_nopayload ,zero +: 022048 lerx_loop: +0x54ad 022049 parse demod ,bucket ,8 +0x54ae 022050 rshift3 pwindow ,pdata +0x54af 022051 istore 1 ,contw +0x54b0 022052 loop lerx_loop +: 022054 lerx_nopayload: +0x54b1 022055 bpatchx patch29_3 ,mem_patch29 +0x54b2 022056 parse demod ,bucket ,24 +0x54b3 022057 enable swfine +0x54b4 022058 arg param_sifs ,stop_watch +0x54b5 022059 rshift32 pdata ,pdata +0x54b6 022060 rshift16 pdata ,pdata +0x54b7 022061 istore 3 ,contw +0x54b8 022062 branch end_of_packet ,crc_failed +0x54b9 022063 enable match +0x54ba 022064 fetch 1 ,mem_last_freq +0x54bb 022065 add pdata ,0 ,rega +0x54bc 022066 call rf_write_freq +0x54bd 022067 disable decode_fec0 +0x54be 022068 branch set_sync_on +: 022070 le_transmit_receive_sifs: +0x54bf 022071 bpatchx patch29_4 ,mem_patch29 +0x54c0 022072 call le_transmit +: 022073 le_transmit_receive_sifs_notx: +0x54c1 022074 fetcht 1 ,mem_last_freq +0x54c2 022075 call set_freq_rx +0x54c3 022076 call rf_rx_enable +0x54c4 022077 enable swfine +0x54c5 022078 arg 5500 ,timeup +0x54c6 022079 branch le_receive_rxon +: 022081 le_transmit_norx: +0x54c7 022082 call le_transmit +0x54c8 022083 branch end_of_packet +: 022085 le_transmit: +0x54c9 022086 bpatchx patch29_5 ,mem_patch29 +0x54ca 022087 call le_prep +0x54cb 022088 call letx_setfreq +0x54cc 022089 branch le_transmit0 +: 022091 le_transmit0: +0x54cd 022092 set1 txgfsk ,radio_ctrl +0x54ce 022093 enable encode_fec0 +0x54cf 022094 enable is_tx +0x54d0 022095 disable is_rx +0x54d1 022096 call le_wait_tx +0x54d2 022097 rshift16 access ,pdata +0x54d3 022098 rshift8 pdata ,pdata +0x54d4 022099 rshift4 pdata ,pdata +0x54d5 022100 inject mod ,40 +0x54d6 022101 enable enable_white +0x54d7 022102 enable enable_crc +0x54d8 022103 bpatchx patch29_6 ,mem_patch29 +0x54d9 022104 fetch 1 ,mem_le_txheader +0x54da 022105 inject mod ,8 +0x54db 022106 ifetch 1 ,contr +0x54dc 022107 and pdata ,0x3f ,loopcnt +0x54dd 022108 inject mod ,8 +0x54de 022109 branch letr_nopayload ,zero +: 022110 letr_loop: +0x54df 022111 ifetch 1 ,contr +0x54e0 022112 inject mod ,8 +0x54e1 022113 loop letr_loop +: 022115 letr_nopayload: +0x54e2 022116 enable enable_parity +0x54e3 022117 inject mod ,24 +0x54e4 022118 disable enable_parity +0x54e5 022119 until null ,tx_clear +0x54e6 022120 nop 100 +0x54e7 022121 disable encode_fec0 +0x54e8 022122 rtn +: 022124 le_send_adv_ind: +0x54e9 022125 bpatchx patch29_7 ,mem_patch29 +0x54ea 022126 fetch 1 ,mem_le_adv_type +0x54eb 022127 beq adv_direct_ind ,le_send_adv_direct_ind +0x54ec 022128 fetch 1 ,mem_le_adv_own_addr_type +0x54ed 022129 lshift4 pdata ,pdata +0x54ee 022130 lshift2 pdata ,pdata +0x54ef 022131 store 1 ,mem_le_txheader +0x54f0 022132 fetcht 1 ,mem_le_adv_data_len +0x54f1 022133 add temp ,6 ,pdata +0x54f2 022134 store 1 ,mem_le_txlen +0x54f3 022135 fetch 6 ,mem_le_lap +0x54f4 022136 store 6 ,mem_le_txpayload +0x54f5 022137 copy temp ,loopcnt +0x54f6 022138 arg mem_le_adv_data ,contr +0x54f7 022139 call memcpy_fast +0x54f8 022140 branch le_send_adv_transmit +: 022141 le_send_adv_direct_ind: +0x54f9 022142 fetch 1 ,mem_le_adv_direct_addr_type +0x54fa 022143 lshift4 pdata ,pdata +0x54fb 022144 lshift2 pdata ,pdata +0x54fc 022145 increase 1 ,pdata +0x54fd 022146 store 1 ,mem_le_txheader +0x54fe 022147 setarg 12 +0x54ff 022148 store 1 ,mem_le_txlen +0x5500 022149 fetch 6 ,mem_le_lap +0x5501 022150 store 6 ,mem_le_txpayload +0x5502 022151 fetch 6 ,mem_hci_plap +0x5503 022152 istore 6 ,contw +: 022153 le_send_adv_transmit: +0x5504 022154 bpatchx patch2a_0 ,mem_patch2a +0x5505 022155 fetch 1 ,mem_le_adv_transmit +0x5506 022156 increase 1 ,pdata +0x5507 022157 store 1 ,mem_le_adv_transmit +0x5508 022158 arg 1800 ,stop_watch +0x5509 022159 disable match +0x550a 022160 branch le_transmit_receive_sifs +: 022162 le_send_scan_request: +0x550b 022163 bpatchx patch2a_1 ,mem_patch2a +0x550c 022164 fetch 1 ,mem_le_scan_type +0x550d 022165 rtnne le_scan_type_active +0x550e 022166 fetch 1 ,mem_le_adv_transmit +0x550f 022167 increase 1 ,pdata +0x5510 022168 store 1 ,mem_le_adv_transmit +0x5511 022169 arg 0x0c03 ,temp +0x5512 022170 fetch 1 ,mem_le_scan_own_addr_type +0x5513 022171 nsetflag blank ,le_sender_addr_bit ,temp +0x5514 022172 copy rega ,pdata +0x5515 022173 nsetflag blank ,le_receiver_addr_bit ,temp +0x5516 022174 storet 2 ,mem_le_txheader +0x5517 022175 fetch 6 ,mem_le_lap +0x5518 022176 istore 6 ,contw +0x5519 022177 fetch 6 ,mem_le_plap +0x551a 022178 istore 6 ,contw +0x551b 022179 branch le_transmit_receive_sifs +: 022182 le_send_scan_response: +0x551c 022183 bpatchx patch2a_2 ,mem_patch2a +0x551d 022184 arg scan_rsp ,temp +0x551e 022185 fetch 1 ,mem_le_adv_own_addr_type +0x551f 022186 nsetflag blank ,le_sender_addr_bit ,temp +0x5520 022187 storet 1 ,mem_le_txheader +0x5521 022188 fetcht 1 ,mem_le_scan_data_len +0x5522 022189 add temp ,6 ,pdata +0x5523 022190 store 1 ,mem_le_txlen +0x5524 022191 fetch 6 ,mem_le_lap +0x5525 022192 store 6 ,mem_le_txpayload +0x5526 022193 arg mem_le_scan_data ,contr +0x5527 022194 copy temp ,loopcnt +0x5528 022195 call memcpy_fast +0x5529 022196 call le_transmit_norx +0x552a 022197 branch le_adv_not_match +: 022199 le_connect_request: +0x552b 022200 bpatchx patch2a_3 ,mem_patch2a +0x552c 022201 force -1 ,pdata +0x552d 022202 setsect 2 ,1 +0x552e 022203 store 5 ,mem_le_channel_map +0x552f 022204 call le_calc_channel_map +0x5530 022205 force 4 ,loopcnt +0x5531 022206 arg mem_le_access ,contw +0x5532 022207 call generate_random_loop +0x5533 022208 fetch 2 ,mem_le_timeout +0x5534 022209 store 2 ,mem_le_superto +: 022210 le_con_req_hop_retry: +0x5535 022211 random pdata +0x5536 022212 and_into 0xf ,pdata +0x5537 022213 sub pdata ,4 ,null +0x5538 022214 branch le_con_req_hop_retry ,positive +0x5539 022215 store 1 ,mem_le_hop +0x553a 022216 store 1 ,mem_tmp1 +0x553b 022217 bpatchx patch2a_4 ,mem_patch2a +0x553c 022218 fetcht 2 ,mem_le_conn_interval +0x553d 022219 storet 2 ,mem_le_tsniff +0x553e 022220 copy temp ,regc +0x553f 022221 add clkn_bt ,7 ,pdata +0x5540 022222 idiv regc +0x5541 022223 call wait_div_end +0x5542 022224 remainder rega +0x5543 022225 isub rega ,pdata +0x5544 022226 iadd regc ,pdata +0x5545 022227 fetcht 2 ,mem_le_dsniff +0x5546 022228 iadd temp ,pdata +0x5547 022229 store 4 ,mem_le_anchor +0x5548 022230 isub clkn_bt ,rega +0x5549 022231 increase -6 ,rega +0x554a 022232 arg 0x2205 ,regb +0x554b 022233 fetch 1 ,mem_le_conn_own_addr_type +0x554c 022234 nsetflag blank ,le_sender_addr_bit ,regb +0x554d 022235 fetch 1 ,mem_le_conn_peer_addr_type +0x554e 022236 nsetflag blank ,le_receiver_addr_bit ,regb +0x554f 022237 copy regb ,pdata +0x5550 022238 store 2 ,mem_le_txheader +0x5551 022239 fetch 6 ,mem_le_lap +0x5552 022240 istore 6 ,contw +0x5553 022241 fetch 6 ,mem_le_plap +0x5554 022242 istore 6 ,contw +0x5555 022243 fetch 4 ,mem_le_access +0x5556 022244 istore 4 ,contw +0x5557 022245 random pdata +0x5558 022246 istore 2 ,contw +0x5559 022247 random pdata +0x555a 022248 istore 1 ,contw +0x555b 022249 force 2 ,pdata +0x555c 022250 istore 1 ,contw +0x555d 022251 rshift2 rega ,pdata +0x555e 022252 istore 2 ,contw +0x555f 022253 rshift2 regc ,pdata +0x5560 022254 istore 2 ,contw +0x5561 022255 bpatchx patch2a_5 ,mem_patch2a +0x5562 022256 setarg 0 +0x5563 022257 istore 2 ,contw +0x5564 022258 fetch 2 ,mem_le_timeout +0x5565 022259 istore 2 ,contw +0x5566 022260 fetch 5 ,mem_le_channel_map +0x5567 022261 istore 5 ,contw +0x5568 022262 fetch 1 ,mem_le_hop +0x5569 022263 arg param_le_sca ,temp +0x556a 022264 ior temp ,pdata +0x556b 022265 istore 1 ,contw +0x556c 022266 call le_transmit_norx +0x556d 022267 setarg mem_le_txheader +0x556e 022268 add pdata ,18 ,contr +0x556f 022269 ifetch 3 ,contr +0x5570 022270 store 3 ,mem_le_crcinit +0x5571 022271 rtn +: 022273 le_init_adv: +0x5572 022274 bpatchx patch2a_6 ,mem_patch2a +0x5573 022275 disable master +0x5574 022276 branch le_adv_access +: 022280 le_update_param: +0x5575 022281 fetch 1 ,mem_le_state +0x5576 022282 rtnbit0 lestate_update_param +0x5577 022283 fetch 2 ,mem_le_event_count +0x5578 022284 fetcht 2 ,mem_le_instant +0x5579 022285 isub temp ,pdata +0x557a 022286 nrtn positive +0x557b 022287 store 2 ,mem_pdatatemp +0x557c 022288 bpatchx patch2a_7 ,mem_patch2a +0x557d 022289 fetch 1 ,mem_le_state +0x557e 022290 set0 lestate_update_param ,pdata +0x557f 022291 set0 lestate_got_first_packet ,pdata +0x5580 022292 store 1 ,mem_le_state +0x5581 022293 fetch 4 ,mem_le_anchor +0x5582 022294 fetcht 2 ,mem_le_tsniff +0x5583 022295 storet 2 ,mem_temp +0x5584 022296 isub temp ,rega +0x5585 022297 bpatchx patch2b_0 ,mem_patch2b +0x5586 022298 fetch 1 ,mem_le_new_param +0x5587 022299 store 1 ,mem_le_window_size +0x5588 022300 ifetcht 2 ,contr +0x5589 022301 ifetch 2 ,contr +0x558a 022302 lshift2 pdata ,pdata +0x558b 022303 store 2 ,mem_le_tsniff +0x558c 022304 lshift2 temp ,temp +0x558d 022305 iadd temp ,pdata +0x558e 022306 ifetcht 4 ,contr +0x558f 022307 storet 4 ,mem_le_slave_latency +0x5590 022308 iadd rega ,pdata +0x5591 022309 copy pdata ,regab +0x5592 022310 fetch 2 ,mem_le_tsniff +0x5593 022311 fetcht 2 ,mem_temp +0x5594 022312 isub temp ,pdata +0x5595 022313 fetcht 2 ,mem_pdatatemp +0x5596 022314 imul32 temp ,pdata +0x5597 022315 iadd regab ,pdata +0x5598 022316 store 4 ,mem_le_anchor +0x5599 022317 call le_receive_window_size +0x559a 022318 fetch 2 ,mem_le_superto +0x559b 022319 store 2 ,mem_le_init_superto +0x559c 022320 rtn +: 022323 le_update_channel_map: +0x559d 022324 bpatchx patch2b_1 ,mem_patch2b +0x559e 022325 fetch 1 ,mem_le_state +0x559f 022326 rtnbit0 lestate_update_map +0x55a0 022327 fetch 2 ,mem_le_event_count +0x55a1 022328 fetcht 2 ,mem_le_instant +0x55a2 022329 isub temp ,pdata +0x55a3 022330 nrtn positive +0x55a4 022331 fetch 1 ,mem_le_state +0x55a5 022332 set0 lestate_update_map ,pdata +0x55a6 022333 store 1 ,mem_le_state +0x55a7 022334 fetch 5 ,mem_le_new_map +0x55a8 022335 store 5 ,mem_le_channel_map +0x55a9 022336 branch le_calc_channel_map +: 022339 le_acknowledge: +0x55aa 022340 bpatchx patch2b_2 ,mem_patch2b +0x55ab 022341 call le_supervision_flush +0x55ac 022342 call le_check_wak +0x55ad 022343 fetch 1 ,mem_le_rxbuf +0x55ae 022344 isolate1 md ,pdata +0x55af 022345 setflag true ,mark_ble_rx_md ,mark +0x55b0 022346 rshift pdata ,pdata +0x55b1 022347 ixor temp ,pdata +0x55b2 022348 isolate1 nesn ,pdata +0x55b3 022349 setflag true ,mark_old_packet ,mark +0x55b4 022350 rtnmark1 mark_old_packet +0x55b5 022351 fetch 1 ,mem_le_rxbuf + 1 +0x55b6 022352 branch le_ack_unenc ,blank +0x55b7 022353 fetch 1 ,mem_le_state +0x55b8 022354 bbit0 lestate_encryption ,le_ack_unenc +0x55b9 022355 call load_sk +0x55ba 022356 call le_decrypt +0x55bb 022357 nrtn blank +: 022358 le_ack_unenc: +0x55bc 022359 fetcht 1 ,mem_le_arq +0x55bd 022360 setflip nesn ,temp +0x55be 022361 storet 1 ,mem_le_arq +0x55bf 022362 rtn +: 022365 le_check_wak: +0x55c0 022366 bpatchx patch2b_3 ,mem_patch2b +0x55c1 022367 fetcht 1 ,mem_le_arq +0x55c2 022368 isolate0 wak ,temp +0x55c3 022369 rtn true +0x55c4 022370 fetch 1 ,mem_le_rxbuf +0x55c5 022371 lshift pdata ,pdata +0x55c6 022372 ixor temp ,pdata +0x55c7 022373 rtnbit0 sn +0x55c8 022374 set0 wak ,temp +0x55c9 022375 setflip sn ,temp +0x55ca 022376 storet 1 ,mem_le_arq +0x55cb 022377 compare 3 ,temp ,3 +0x55cc 022378 nrtn true +0x55cd 022379 fetch 1 ,mem_le_txpayload +0x55ce 022380 beq ll_start_enc_req ,le_set_enc +0x55cf 022381 fetch 1 ,mem_le_enc_state +0x55d0 022382 beq flag_le_enc_pause ,le_clear_enc +0x55d1 022383 rtn +: 022386 le_set_enc: +0x55d2 022387 fetch 1 ,mem_le_state +0x55d3 022388 set1 lestate_encryption ,pdata +0x55d4 022389 store 1 ,mem_le_state +0x55d5 022390 rtn +: 022392 le_clear_enc: +0x55d6 022393 bpatchx patch2b_4 ,mem_patch2b +0x55d7 022394 jam flag_le_enc_null ,mem_le_enc_state +0x55d8 022395 arg 0 ,pdata +0x55d9 022396 store 4 ,mem_le_last_mic +0x55da 022397 store 5 ,mem_le_pcnt_tx +0x55db 022398 set1 39 ,pdata +0x55dc 022399 store 5 ,mem_le_pcnt_rx +0x55dd 022400 fetch 1 ,mem_le_state +0x55de 022401 set0 lestate_encryption ,pdata +0x55df 022402 store 1 ,mem_le_state +0x55e0 022403 rtn +: 022406 le_wait_adv: +0x55e1 022407 bpatchx patch2b_5 ,mem_patch2b +0x55e2 022408 call le_next_adv_channel +0x55e3 022409 call le_receive_adv +0x55e4 022410 fetch 1 ,mem_le_adv_waitcnt +0x55e5 022411 increase 1 ,pdata +0x55e6 022412 store 1 ,mem_le_adv_waitcnt +0x55e7 022413 rtn +: 022416 le_scan: +0x55e8 022417 bpatchx patch2b_6 ,mem_patch2b +0x55e9 022418 fetch 1 ,mem_le_scan_enable +0x55ea 022419 rtnne le_scan_enable +0x55eb 022420 arg le_scan_interval_timer ,queue +0x55ec 022421 call timer_check +0x55ed 022422 nrtn blank +0x55ee 022423 fetch 2 ,mem_le_scan_interval +0x55ef 022424 fetcht 2 ,mem_le_scan_window +0x55f0 022425 isub temp ,pdata +0x55f1 022426 arg le_scan_interval_timer ,queue +0x55f2 022427 call timer_init +0x55f3 022428 disable master +0x55f4 022429 call le_init_adv +0x55f5 022430 call le_wait_adv +0x55f6 022431 nrtn match +0x55f7 022432 bpatchx patch2b_7 ,mem_patch2b +0x55f8 022433 fetch 6 ,mem_le_rxbuf + 2 +0x55f9 022434 store 6 ,mem_le_plap +0x55fa 022437 fetch 1 ,mem_le_adv_rcv +0x55fb 022438 increase 1 ,pdata +0x55fc 022439 store 1 ,mem_le_adv_rcv +0x55fd 022440 call le_create_conn +0x55fe 022441 rtn master +0x55ff 022442 call le_send_scan_request +0x5600 022443 nrtn match +0x5601 022444 bpatchx patch2c_0 ,mem_patch2c +0x5602 022445 fetch 1 ,mem_le_scanrsp_rcv +0x5603 022446 increase 1 ,pdata +0x5604 022447 store 1 ,mem_le_scanrsp_rcv +0x5605 022448 fetch 9 ,mem_le_rxbuf + 8 +0x5606 022449 store 9 ,mem_tmp_buffer +0x5607 022450 rtn +: 022452 le_create_conn: +0x5608 022453 bpatchx patch2c_1 ,mem_patch2c +0x5609 022454 fetch 1 ,mem_cmd_le_create_conn +0x560a 022455 rtnne hci_cmd_le_create_conn +0x560b 022456 fetch 6 ,mem_le_plap +0x560c 022457 fetcht 6 ,mem_le_conn_peer_addr +0x560d 022458 isub temp ,null +0x560e 022459 nrtn zero +0x560f 022460 call context_new +0x5610 022461 nrtn zero +0x5611 022462 call le_connect_request +0x5612 022463 call le_init_master +0x5613 022464 bpatchx patch2c_2 ,mem_patch2c +0x5614 022465 jam 0 ,mem_hci_cmd +0x5615 022466 jam 0 ,mem_le_peer_sca +0x5616 022467 jam 0 ,mem_le_scan_enable +0x5617 022468 jam 0 ,mem_cmd_le_create_conn +0x5618 022469 branch context_save +: 022471 le_scan_check_sender_addr_type: +0x5619 022472 arg 1 ,rega +0x561a 022473 fetch 1 ,mem_le_rxbuf +0x561b 022474 rtnbit1 le_sender_addr_bit +0x561c 022475 arg 0 ,rega +0x561d 022476 rtn +: 022480 le_prepare_tx: +0x561e 022481 bpatchx patch2c_3 ,mem_patch2c +0x561f 022482 fetch 1 ,mem_le_arq +0x5620 022483 rtnbit1 wak +0x5621 022484 call le_check_tx_md +0x5622 022485 call le_fifo_get_first_tx_ptr +0x5623 022486 branch le_send_empty ,blank +0x5624 022487 ifetch 1 ,contr +0x5625 022488 ifetcht 1 ,contr +0x5626 022489 copy temp ,rega +0x5627 022490 isub rega ,pdata +0x5628 022491 arg le_max_paket_len ,temp +0x5629 022492 call not_greater_than +0x562a 022493 copy pdata ,temp +0x562b 022494 ifetch 1 ,contr +0x562c 022495 copy pdata ,type +0x562d 022496 copy rega ,pdata +0x562e 022497 iadd contr ,contr +0x562f 022498 arg mem_le_txpayload ,contw +0x5630 022499 copy temp ,loopcnt +0x5631 022500 call memcpy +0x5632 022501 call le_update_tx_type +0x5633 022502 call le_send_packet +0x5634 022504 call le_fifo_get_first_tx_ptr +0x5635 022505 ifetch 1 ,contr +0x5636 022506 copy pdata ,rega +0x5637 022507 copy contr ,regc +0x5638 022508 ifetcht 1 ,contr +0x5639 022509 copy temp ,regb +0x563a 022510 isub regb ,pdata +0x563b 022511 arg le_max_paket_len ,temp +0x563c 022512 call not_greater_than +0x563d 022513 iadd regb ,pdata +0x563e 022514 istore 1 ,regc +0x563f 022515 isub rega ,null +0x5640 022516 nrtn zero +0x5641 022517 branch le_fifo_release_first_node +: 022520 le_check_tx_md: +0x5642 022521 call le_check_continue +0x5643 022522 rtnmark1 mark_ble_tx_md +0x5644 022523 fetch 1 ,mem_le_configuration +0x5645 022524 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md +0x5646 022525 call le_fifo_get_second_tx_ptr +0x5647 022526 branch le_clear_md ,blank +0x5648 022527 branch le_set_md +: 022530 le_check_continue: +0x5649 022531 call le_fifo_get_first_tx_ptr +0x564a 022532 branch le_clear_md ,blank +0x564b 022533 ifetch 1 ,contr +0x564c 022534 ifetcht 1 ,contr +0x564d 022535 isub temp ,pdata +0x564e 022536 sub pdata ,le_max_paket_len ,null +0x564f 022537 branch le_clear_md ,positive +: 022538 le_set_md: +0x5650 022539 set1 mark_ble_tx_md ,mark +0x5651 022540 rtn +: 022542 le_clear_md: +0x5652 022543 set0 mark_ble_tx_md ,mark +0x5653 022544 rtn +: 022546 le_update_tx_type: +0x5654 022547 copy rega ,pdata +0x5655 022548 rtn blank +0x5656 022549 arg llid_continue ,type +0x5657 022550 rtn +: 022553 le_att_check_notification_enable: +0x5658 022554 bpatchx patch2c_4 ,mem_patch2c +0x5659 022555 increase 1 ,temp +0x565a 022556 call le_att_get_handle_ptr +0x565b 022557 increase -2 ,contr +0x565c 022558 ifetch 2 ,contr +0x565d 022559 arg client_charactertic_configuration ,temp +0x565e 022560 isub temp ,null +0x565f 022561 nrtn zero +0x5660 022562 increase 1 ,contr +0x5661 022563 copy contr ,rega +0x5662 022564 ifetch 1 ,contr +0x5663 022565 rtn +: 022568 le_send_empty: +0x5664 022569 force 0 ,temp +0x5665 022570 force 1 ,type +: 022572 le_send_packet: +0x5666 022573 bpatchx patch2c_5 ,mem_patch2c +0x5667 022574 storet 1 ,mem_le_txlen +0x5668 022575 fetcht 1 ,mem_le_arq +0x5669 022576 set1 wak ,temp +0x566a 022577 and temp ,0xfc ,pdata +0x566b 022578 ior type ,pdata +0x566c 022579 store 1 ,mem_le_arq +0x566d 022580 and_into 0x1f ,pdata +0x566e 022581 isolate1 mark_ble_tx_md ,mark +0x566f 022582 setflag true ,md ,pdata +0x5670 022583 store 1 ,mem_le_txheader +0x5671 022585 fetch 1 ,mem_le_txheader +0x5672 022586 compare 1 ,type ,3 +0x5673 022587 nbranch le_send_no_txlen ,true +0x5674 022588 fetch 1 ,mem_le_txlen +0x5675 022589 rtn blank +: 022590 le_send_no_txlen: +0x5676 022591 fetch 1 ,mem_le_state +0x5677 022592 rtnbit0 lestate_encryption +0x5678 022593 call load_sk +0x5679 022594 branch le_encrypt +: 022597 get_lpm_wake_ble_rx_lock: +0x567a 022598 arg wake_lock_ble_rx ,queue +0x567b 022599 branch lpm_get_wake_lock +: 022601 put_lpm_wake_ble_rx_lock: +0x567c 022602 arg wake_lock_ble_rx ,queue +0x567d 022603 branch lpm_put_wake_lock +: 022606 le_parse: +0x567e 022607 bpatchx patch2c_6 ,mem_patch2c +0x567f 022608 rtnmark1 mark_old_packet +0x5680 022609 call le_fifo_check_full +0x5681 022610 nrtn blank +0x5682 022611 fetch 1 ,mem_le_rxbuf +0x5683 022612 and pdata ,0x3 ,pdata +0x5684 022613 store 1 ,mem_le_packet_llid +0x5685 022614 ifetch 1 ,contr +0x5686 022615 and pdata ,0x1f ,pdata +0x5687 022616 store 1 ,mem_le_packet_size +0x5688 022617 rtn blank +0x5689 022618 copy contr ,pdata +0x568a 022619 store 2 ,mem_le_payload_ptr +0x568b 022620 fetch 1 ,mem_le_packet_llid +0x568c 022621 beq llid_le_ll ,le_parse_ll +: 022622 le_parse_l2cap: +0x568d 022623 call le_check_l2cap_complete +0x568e 022624 nbranch get_lpm_wake_ble_rx_lock ,user +0x568f 022625 call put_lpm_wake_ble_rx_lock +0x5690 022626 fetch 2 ,mem_le_payload_ptr +0x5691 022627 copy pdata ,contr +0x5692 022628 ifetch 2 ,contr +0x5693 022629 store 2 ,mem_le_l2cap_size +0x5694 022630 bpatchx patch2c_7 ,mem_patch2c +0x5695 022631 ifetch 2 ,contr +0x5696 022632 beq le_l2cap_cid_att ,le_parse_att +0x5697 022633 beq le_l2cap_cid_smp ,le_parse_smp +0x5698 022634 beq le_l2cap_cid_signal ,le_parse_signaling +0x5699 022635 rtn +: 022638 le_check_l2cap_complete: +0x569a 022639 fetch 1 ,mem_le_packet_llid +0x569b 022640 beq llid_start ,le_check_l2cap_llid_start +0x569c 022641 beq llid_continue ,le_check_l2cap_llid_continue +0x569d 022642 rtn +: 022647 le_check_l2cap_cid_legal: +0x569e 022648 call enable_user +0x569f 022649 arg le_l2cap_cid_att ,temp +0x56a0 022650 isub pdata ,null +0x56a1 022651 rtn zero +0x56a2 022652 arg le_l2cap_cid_signal ,temp +0x56a3 022653 isub pdata ,null +0x56a4 022654 rtn zero +0x56a5 022655 arg le_l2cap_cid_smp ,temp +0x56a6 022656 isub pdata ,null +0x56a7 022657 rtn zero +0x56a8 022658 branch disable_user +: 022661 le_check_l2cap_llid_start: +0x56a9 022662 fetch 2 ,mem_le_payload_ptr +0x56aa 022663 copy pdata ,contr +0x56ab 022664 ifetch 2 ,contr +0x56ac 022665 store 2 ,mem_le_l2cap_size +0x56ad 022666 ifetch 2 ,contr +0x56ae 022667 call le_check_l2cap_cid_legal +0x56af 022668 nrtn user +0x56b0 022669 fetcht 1 ,mem_le_packet_size +0x56b1 022670 storet 1 ,mem_le_packet_len_recved +0x56b2 022671 fetch 2 ,mem_le_l2cap_size +0x56b3 022672 increase 4 ,pdata +0x56b4 022673 isub temp ,null +0x56b5 022674 branch enable_user ,zero +0x56b6 022675 fetch 1 ,mem_le_packet_size +0x56b7 022676 copy pdata ,loopcnt +0x56b8 022677 arg mem_le_l2capbuf ,contw +0x56b9 022678 fetch 2 ,mem_le_payload_ptr +0x56ba 022679 copy pdata ,contr +0x56bb 022680 call memcpy +0x56bc 022681 branch disable_user +: 022686 le_check_l2cap_continue_legal: +0x56bd 022687 call enable_user +0x56be 022688 fetch 1 ,mem_le_packet_len_recved +0x56bf 022689 nrtn blank +0x56c0 022690 branch disable_user +: 022692 le_check_l2cap_llid_continue: +0x56c1 022693 call le_check_l2cap_continue_legal +0x56c2 022694 nrtn user +0x56c3 022695 fetch 1 ,mem_le_packet_len_recved +0x56c4 022696 arg mem_le_l2capbuf ,contw +0x56c5 022697 iadd contw ,rega +0x56c6 022698 fetcht 1 ,mem_le_packet_size +0x56c7 022699 iadd temp ,pdata +0x56c8 022700 store 1 ,mem_le_packet_len_recved +0x56c9 022701 fetch 1 ,mem_le_packet_size +0x56ca 022702 copy pdata ,loopcnt +0x56cb 022703 copy rega ,contw +0x56cc 022704 fetch 2 ,mem_le_payload_ptr +0x56cd 022705 copy pdata ,contr +0x56ce 022706 call memcpy_fast +0x56cf 022707 setarg mem_le_l2capbuf +0x56d0 022708 store 2 ,mem_le_payload_ptr +0x56d1 022709 fetch 2 ,mem_le_l2cap_size +0x56d2 022710 increase 4 ,pdata +0x56d3 022711 fetcht 1 ,mem_le_packet_len_recved +0x56d4 022712 isub temp ,null +0x56d5 022713 branch enable_user ,zero +0x56d6 022714 branch disable_user +: 022720 le_get_search_att_type: +0x56d7 022721 call store_contr +0x56d8 022722 arg mem_le_search_att_type_length ,contw +: 022723 le_get_search_common: +0x56d9 022724 fetch 2 ,mem_le_l2cap_size +0x56da 022725 increase -5 ,pdata +: 022726 le_get_search_common2: +0x56db 022727 istore 1 ,contw +0x56dc 022728 copy pdata ,loopcnt +0x56dd 022729 call get_contr +0x56de 022730 branch memcpy_fast +: 022732 le_get_search_att_uuid: +0x56df 022733 call store_contr +0x56e0 022734 arg mem_le_search_uuid_length ,contw +0x56e1 022735 branch le_get_search_common +: 022739 le_writeatt_cb: +0x56e2 022740 fetch 2 ,mem_cb_att_write +0x56e3 022741 branch callback_func +: 022743 le_supervision_update: +0x56e4 022744 fetcht 4 ,mem_le_supervision_timer +0x56e5 022745 call get_clkbt +0x56e6 022746 isub temp ,timeup +0x56e7 022747 deposit timeup +0x56e8 022748 fetcht 2 ,mem_le_superto +0x56e9 022749 lshift4 temp ,temp +0x56ea 022750 lshift temp ,temp +0x56eb 022751 isub temp ,pdata +0x56ec 022752 rtn +: 022754 le_supervision_flush: +0x56ed 022755 call get_clkbt +0x56ee 022756 store 4 ,mem_le_supervision_timer +0x56ef 022757 rtn +: 022760 le_adv: +0x56f0 022761 jam 36 ,mem_le_ch_mapped +0x56f1 022762 jam 0 ,mem_le_adv_channel_map_temp +: 022763 le_adv_loop: +0x56f2 022764 bpatchx patch2d_0 ,mem_patch2d +0x56f3 022765 fetch 1 ,mem_le_adv_enable +0x56f4 022766 rtn blank +0x56f5 022767 arg le_adv_interval_timer ,queue +0x56f6 022768 call timer_check +0x56f7 022769 nrtn blank +0x56f8 022770 bpatchx patch2d_1 ,mem_patch2d +: 022771 le_adv_loop_tx: +0x56f9 022772 disable master +0x56fa 022773 enable swfine +0x56fb 022774 call le_init_adv +0x56fc 022775 call le_next_adv_channel +0x56fd 022776 call le_send_adv_ind +0x56fe 022777 nbranch le_adv_not_match ,match +0x56ff 022778 fetch 1 ,mem_le_req_rcv +0x5700 022779 increase 1 ,pdata +0x5701 022780 store 1 ,mem_le_req_rcv +0x5702 022781 fetch 1 ,mem_le_rxbuf +0x5703 022782 and pdata ,0x0f ,pdata +0x5704 022783 beq scan_req ,le_send_scan_response +0x5705 022784 beq connect_req ,le_parse_connect_req +: 022785 le_adv_not_match: +0x5706 022786 bpatchx patch2d_2 ,mem_patch2d +0x5707 022787 random pdata +0x5708 022788 arg 0x1ff ,temp +0x5709 022789 iand temp ,pdata +0x570a 022790 add pdata ,250 ,pdata +0x570b 022791 call delay +0x570c 022792 fetch 1 ,mem_le_adv_channel_map_temp +0x570d 022793 fetcht 1 ,mem_le_adv_channel_map +0x570e 022794 isub temp ,null +0x570f 022795 nbranch le_adv_loop ,zero +0x5710 022796 arg le_adv_interval_timer ,queue +0x5711 022797 fetch 2 ,mem_le_adv_interval +0x5712 022798 branch timer_init +: 022801 le_receive_window_size: +0x5713 022802 bpatchx patch2d_3 ,mem_patch2d +0x5714 022803 fetch 1 ,mem_le_peer_sca +0x5715 022804 call le_sca_map +0x5716 022805 fetch 2 ,mem_le_tsniff +0x5717 022806 imul32 temp ,pdata +0x5718 022807 arg 375 ,temp +0x5719 022808 imul32 temp ,pdata +0x571a 022809 arg 100000 ,temp +0x571b 022810 idiv temp +0x571c 022811 fetch 1 ,mem_le_window_size +0x571d 022812 arg 20000 ,temp +0x571e 022813 imul32 temp ,pdata +0x571f 022814 iadd temp ,pdata +0x5720 022815 store 4 ,mem_le_transmit_window +0x5721 022816 bpatchx patch2d_4 ,mem_patch2d +0x5722 022817 fetch 2 ,mem_rx_window_sniff +0x5723 022818 call wait_div_end +0x5724 022819 quotient temp +0x5725 022820 iadd temp ,pdata +0x5726 022821 store 2 ,mem_le_receive_window +0x5727 022822 rtn +: 022824 le_parse_connect_req: +0x5728 022825 bpatchx patch2d_5 ,mem_patch2d +0x5729 022826 fetch 6 ,mem_le_rxbuf + 8 +0x572a 022827 fetcht 6 ,mem_le_lap +0x572b 022828 isub temp ,null +0x572c 022829 nrtn zero +0x572d 022830 call le_scan_check_sender_addr_type +0x572e 022831 copy rega ,pdata +0x572f 022832 store 1 ,mem_le_conn_peer_addr_type +0x5730 022833 fetch 7 ,mem_le_rxbuf + 21 +0x5731 022834 store 7 ,mem_tmp_buffer +0x5732 022835 ifetch 8 ,contr +0x5733 022836 istore 8 ,contw +0x5734 022837 fetch 6 ,mem_le_rxbuf + 2 +0x5735 022838 store 6 ,mem_le_plap +0x5736 022839 increase 6 ,contr +0x5737 022840 ifetch 8 ,contr +0x5738 022841 store 8 ,mem_le_access +0x5739 022842 ifetcht 2 ,contr +0x573a 022843 bpatchx patch2d_6 ,mem_patch2d +0x573b 022844 lshift2 temp ,temp +0x573c 022845 ifetch 2 ,contr +0x573d 022846 lshift2 pdata ,pdata +0x573e 022847 store 2 ,mem_le_tsniff +0x573f 022848 store 4 ,mem_le_anchor +0x5740 022849 isub temp ,pdata +0x5741 022850 add pdata ,-2 ,clke_bt +0x5742 022851 ifetch 9 ,contr +0x5743 022852 store 9 ,mem_le_slave_latency +0x5744 022853 bpatchx patch2d_7 ,mem_patch2d +0x5745 022854 ifetch 1 ,contr +0x5746 022855 rshift4 pdata ,temp +0x5747 022856 rshift temp ,temp +0x5748 022857 storet 1 ,mem_le_peer_sca +0x5749 022858 and_into 0x1f ,pdata +0x574a 022859 store 1 ,mem_le_hop +0x574b 022860 call le_receive_window_size +0x574c 022861 call le_calc_channel_map +0x574d 022862 call le_init_slave +0x574e 022863 call context_new +0x574f 022864 nrtn zero +0x5750 022865 bpatchx patch2e_0 ,mem_patch2e +0x5751 022866 call calc_clke_offset +0x5752 022867 call le_l2cap_reset_signaling_identifier +0x5753 022868 jam bt_evt_le_connected ,mem_fifo_temp +0x5754 022869 call ui_ipc_send_event +0x5755 022870 branch context_save +: 022873 le_init_attlist_search: +0x5756 022874 bpatchx patch2e_1 ,mem_patch2e +0x5757 022875 fetch 2 ,mem_le_search_handle_start +0x5758 022876 iforce regb +0x5759 022877 fetch 2 ,mem_le_search_handle_end +0x575a 022878 iforce regc +0x575b 022879 fetch 2 ,mem_ui_le_uuid_table +0x575c 022880 iforce contr +0x575d 022881 enable user +0x575e 022882 rtn +: 022885 le_att_handle_inrange: +0x575f 022886 ifetch 2 ,contr +0x5760 022887 rtn blank +0x5761 022888 isub regb ,null +0x5762 022889 nrtn positive +0x5763 022890 isub regc ,null +0x5764 022891 rtn zero +0x5765 022892 branch le_att_handle_blank ,positive +0x5766 022893 force 1 ,null +0x5767 022894 rtn +: 022895 le_att_handle_blank: +0x5768 022896 force 0 ,pdata +0x5769 022897 rtn +: 022901 le_att_get_handle_ptr: +0x576a 022902 call le_att_get_handle_ptr2 +0x576b 022903 branch le_att_get_handle_ptr_found ,zero +0x576c 022904 rtn +: 022906 le_att_get_handle_ptr2: +0x576d 022907 bpatchx patch2e_2 ,mem_patch2e +0x576e 022908 fetch 2 ,mem_ui_le_uuid_table +0x576f 022909 iforce contr +: 022910 le_att_get_handle_loop1: +0x5770 022911 ifetch 2 ,contr +0x5771 022912 rtn blank +0x5772 022913 isub temp ,null +0x5773 022914 rtn zero +0x5774 022915 ifetch 1 ,contr +0x5775 022916 iadd contr ,contr +0x5776 022917 ifetch 1 ,contr +0x5777 022918 iadd contr ,contr +0x5778 022919 branch le_att_get_handle_loop1 +: 022920 le_att_get_handle_ptr_found: +0x5779 022921 ifetch 1 ,contr +0x577a 022922 iadd contr ,contr +0x577b 022923 rtn +: 022927 le_att_get_short_uuid_ptr: +0x577c 022928 bpatchx patch2e_3 ,mem_patch2e +0x577d 022929 fetch 2 ,mem_ui_le_uuid_table +0x577e 022930 iforce contr +: 022931 le_att_get_short_uuid_loop: +0x577f 022932 ifetch 2 ,contr +0x5780 022933 rtn blank +0x5781 022934 ifetch 1 ,contr +0x5782 022935 iadd contr ,contr +0x5783 022936 increase -2 ,contr +0x5784 022937 ifetch 2 ,contr +0x5785 022938 isub temp ,null +0x5786 022939 rtn zero +0x5787 022940 ifetch 1 ,contr +0x5788 022941 iadd contr ,contr +0x5789 022942 branch le_att_get_short_uuid_loop +: 022946 le_att_get_handle_info_from_ptr: +0x578a 022947 fetch 2 ,mem_le_cur_attlist_start_ptr +0x578b 022948 branch le_att_get_handle_info_fast +: 022950 le_att_get_handle_info: +0x578c 022951 bpatchx patch2e_4 ,mem_patch2e +0x578d 022952 fetch 2 ,mem_ui_le_uuid_table +: 022953 le_att_get_handle_info_fast: +0x578e 022954 iforce contr +0x578f 022955 copy temp ,rega +: 022956 le_att_get_handle_loop: +0x5790 022957 ifetch 2 ,contr +0x5791 022958 branch le_att_unfind_handle ,blank +0x5792 022959 isub rega ,null +0x5793 022960 branch le_att_finded_handle ,zero +0x5794 022961 ifetch 1 ,contr +0x5795 022962 iadd contr ,contr +0x5796 022963 ifetch 1 ,contr +0x5797 022964 iadd contr ,contr +0x5798 022965 branch le_att_get_handle_loop +: 022966 le_att_unfind_handle: +0x5799 022967 branch disable_blank +: 022969 le_att_finded_handle: +0x579a 022970 ifetch 1 ,contr +0x579b 022971 store 1 ,mem_le_cur_uuid_length +0x579c 022972 copy pdata ,loopcnt +0x579d 022973 arg mem_le_cur_uuid ,contw +0x579e 022974 call memcpy_fast +0x579f 022975 ifetch 1 ,contr +0x57a0 022976 store 1 ,mem_le_curr_att_len +0x57a1 022977 call store_contr +0x57a2 022978 branch enable_blank +: 022981 le_modified_name: +0x57a3 022982 bpatchx patch2e_5 ,mem_patch2e +0x57a4 022983 call le_modified_name_att_list +0x57a5 022984 branch le_modified_name_adv +: 022986 le_modified_name_att_list: +0x57a6 022987 arg uuid_chrctr_device_name ,temp +0x57a7 022988 call le_att_get_short_uuid_ptr +0x57a8 022989 rtn blank +0x57a9 022990 ifetch 1 ,contr +0x57aa 022991 copy contr ,contw +0x57ab 022992 fetcht 1 ,mem_le_name_len +0x57ac 022993 copy temp ,loopcnt +0x57ad 022994 isub temp ,null +0x57ae 022995 nbranch le_name_length_longer_than_att ,positive +0x57af 022996 isub temp ,temp +0x57b0 022997 arg mem_le_name ,contr +0x57b1 022998 call memcpy +0x57b2 022999 copy temp ,loopcnt +0x57b3 023000 ncall memcpy_empty ,zero +0x57b4 023001 rtn +: 023002 le_name_length_longer_than_att: +0x57b5 023003 copy pdata ,loopcnt +0x57b6 023004 arg mem_le_name ,contr +0x57b7 023005 branch memcpy_fast +: 023008 le_modified_name_adv: +0x57b8 023009 arg mem_le_adv_data_len + 32 ,regc +0x57b9 023010 arg mem_le_adv_data ,rega +0x57ba 023011 call le_modified_name_adv_and_scan +0x57bb 023012 setarg 0 +0x57bc 023013 setflag user ,0 ,pdata +0x57bd 023014 store 1 ,mem_pdatatemp +0x57be 023015 arg mem_le_scan_data_len + 32 ,regc +0x57bf 023016 arg mem_le_scan_data ,rega +0x57c0 023017 call le_modified_name_adv_and_scan +0x57c1 023018 rtn user +0x57c2 023019 fetch 1 ,mem_pdatatemp +0x57c3 023020 branch assert ,blank +0x57c4 023021 rtn +: 023024 le_modified_name_adv_and_scan: +0x57c5 023025 bpatchx patch2e_6 ,mem_patch2e +0x57c6 023026 call enable_user +0x57c7 023027 call clear_temp_block +0x57c8 023028 arg 0 ,regb +0x57c9 023029 arg mem_le_data_temp ,contw +0x57ca 023030 call le_modified_name_adv_loop +0x57cb 023031 fetch 1 ,mem_le_name_len +0x57cc 023032 add pdata ,1 ,temp +0x57cd 023033 iadd regb ,rega +0x57ce 023034 increase 2 ,rega +0x57cf 023035 sub rega ,0x1f ,null +0x57d0 023036 nbranch le_modified_name_adv_and_scan_name_overflow ,positive +0x57d1 023037 istoret 1 ,contw +0x57d2 023038 arg gap_adtype_local_name_complete ,temp +0x57d3 023039 istoret 1 ,contw +0x57d4 023040 iforce loopcnt +0x57d5 023041 call memcpy_fast +0x57d6 023042 copy rega ,regb +: 023043 le_modified_name_adv_and_scan_store_data: +0x57d7 023044 deposit regb +0x57d8 023045 store 1 ,mem_le_data_len_temp +0x57d9 023046 arg mem_le_data_len_temp ,contr +0x57da 023047 setarg -32 +0x57db 023048 iadd regc ,contw +0x57dc 023049 branch memcpy32 +: 023051 le_modified_name_adv_and_scan_name_overflow: +0x57dd 023052 call disable_user +0x57de 023053 branch le_modified_name_adv_and_scan_store_data +: 023055 le_modified_name_adv_loop: +0x57df 023056 ifetch 1 ,rega +0x57e0 023057 rtn blank +0x57e1 023058 pincrease 1 +0x57e2 023059 ifetcht 1 ,contr +0x57e3 023060 sub temp ,gap_adtype_local_name_complete ,null +0x57e4 023061 branch le_modified_name_adv_found_name ,zero +0x57e5 023062 iadd regb ,regb +0x57e6 023063 copy rega ,contr +0x57e7 023064 iforce loopcnt +0x57e8 023065 call memcpy_fast +0x57e9 023066 copy contr ,rega +: 023067 le_modified_name_adv_loop2: +0x57ea 023068 deposit rega +0x57eb 023069 isub regc ,null +0x57ec 023070 rtn positive +0x57ed 023071 branch le_modified_name_adv_loop +: 023073 le_modified_name_adv_found_name: +0x57ee 023074 iadd rega ,rega +0x57ef 023075 branch le_modified_name_adv_loop2 +: 023078 memcpy_empty: +0x57f0 023079 setarg space +0x57f1 023080 istore 1 ,contw +0x57f2 023081 loop memcpy_empty +0x57f3 023082 rtn +: 023085 le_lpm_set_mult: +0x57f4 023086 bpatchx patch2e_7 ,mem_patch2e +0x57f5 023087 disable wake +0x57f6 023088 branch le_lpm_set_mult_attempt ,attempt +0x57f7 023089 nbranch le_lpm_lost ,match +: 023090 le_lpm_set_mult_attempt: +0x57f8 023091 call lpm_match +0x57f9 023092 fetch 2 ,mem_rx_window_sniff +0x57fa 023093 store 2 ,mem_le_receive_window +0x57fb 023095 nbranch lpm_mult_short ,match +0x57fc 023096 bmark1 mark_old_packet ,lpm_mult_short +0x57fd 023098 fetch 1 ,mem_le_packet_size +0x57fe 023099 nbranch lpm_mult_short ,blank +0x57ff 023100 fetch 1 ,mem_le_txlen +0x5800 023101 nbranch lpm_mult_short ,blank +0x5801 023103 fetch 1 ,mem_le_configuration +0x5802 023104 bbit1 bit_ble_short_mult ,lpm_mult_short +0x5803 023106 fetch 1 ,mem_le_state +0x5804 023107 bbit1 lestate_update_param ,lpm_mult_short +0x5805 023108 branch lpm_mult_wait_timeout +: 023110 le_lpm_lost: +0x5806 023111 fetcht 2 ,mem_rx_window_sniff +0x5807 023112 rshift temp ,temp +0x5808 023113 fetch 2 ,mem_le_receive_window +0x5809 023114 iadd temp ,pdata +0x580a 023115 store 2 ,mem_le_receive_window +0x580b 023116 branch lpm_lost +: 023119 le_set_config_fixed_tk: +0x580c 023120 arg bit_ble_passkey_fixed_key ,queue +0x580d 023121 branch le_set_config +: 023123 le_clr_config_fixed_tk: +0x580e 023124 arg bit_ble_passkey_fixed_key ,queue +0x580f 023125 branch le_clr_config +: 023127 le_set_config_fixed_ltk: +0x5810 023128 arg bit_ble_pairing_fixed_ltk ,queue +0x5811 023129 branch le_set_config +: 023131 le_clr_config_fixed_ltk: +0x5812 023132 arg bit_ble_pairing_fixed_ltk ,queue +0x5813 023133 branch le_clr_config +: 023135 le_set_config_more_data: +0x5814 023136 arg bit_ble_transmit_packet_by_md ,queue +0x5815 023137 branch le_set_config +: 023139 le_clr_config_more_data: +0x5816 023140 arg bit_ble_transmit_packet_by_md ,queue +0x5817 023141 branch le_clr_config +: 023143 le_set_config_read_authentication: +0x5818 023144 arg bit_ble_read_auth ,queue +0x5819 023145 branch le_set_config +: 023147 le_clr_config_read_authentication: +0x581a 023148 arg bit_ble_read_auth ,queue +0x581b 023149 branch le_clr_config +: 023151 le_set_config_write_authentication: +0x581c 023152 arg bit_ble_write_auth ,queue +0x581d 023153 branch le_set_config +: 023155 le_clr_config_write_authentication: +0x581e 023156 arg bit_ble_write_auth ,queue +0x581f 023157 branch le_clr_config +: 023159 le_set_config_short_mult: +0x5820 023160 arg bit_ble_short_mult ,queue +0x5821 023161 branch le_set_config +: 023163 le_clr_config_short_mult: +0x5822 023164 arg bit_ble_short_mult ,queue +0x5823 023165 branch le_clr_config +: 023168 le_set_config: +0x5824 023169 fetch 1 ,mem_le_configuration +0x5825 023170 qset1 pdata +0x5826 023171 store 1 ,mem_le_configuration +0x5827 023172 rtn +: 023174 le_clr_config: +0x5828 023175 fetch 1 ,mem_le_configuration +0x5829 023176 qset0 pdata +0x582a 023177 store 1 ,mem_le_configuration +0x582b 023178 rtn +: 023180 le_set_fixed_ltk: +0x582c 023181 setarg 0x112233 +0x582d 023182 store 3 ,mem_le_fixed_ltk +0x582e 023183 setarg 0x445566 +0x582f 023184 istore 3 ,contw +0x5830 023185 setarg 0x778899 +0x5831 023186 istore 3 ,contw +0x5832 023187 setarg 0x001122 +0x5833 023188 istore 3 ,contw +0x5834 023189 setarg 0x334455 +0x5835 023190 istore 3 ,contw +0x5836 023191 setarg 0x66 +0x5837 023192 istore 1 ,contw +0x5838 023193 rtn +: 023196 le_set_justwork: +0x5839 023197 setarg 0x01000302 +0x583a 023198 store 4 ,mem_le_pres +0x583b 023199 setarg 0x010010 +0x583c 023200 store 3 ,mem_le_pres_max_keysize +0x583d 023201 jam 1 ,mem_le_pairing_mode +0x583e 023202 rtn +: 023206 le_fifo_malloc_tx_empty: +0x583f 023207 arg 0 ,rega +0x5840 023208 arg llid_empty ,type +0x5841 023209 branch le_fifo_malloc_tx +: 023213 le_fifo_malloc_tx_ll: +0x5842 023214 arg llid_le_ll ,type +0x5843 023215 call le_fifo_malloc_tx +0x5844 023216 copy regb ,pdata +0x5845 023217 istore 1 ,contw +0x5846 023218 rtn +: 023222 le_fifo_malloc_tx_l2cap: +0x5847 023223 force llid_l2cap_start ,type +0x5848 023224 increase 4 ,rega +0x5849 023225 call le_fifo_malloc_tx +0x584a 023226 increase -4 ,rega +0x584b 023227 copy rega ,pdata +0x584c 023228 istore 2 ,contw +0x584d 023229 copy regb ,pdata +0x584e 023230 istore 2 ,contw +0x584f 023231 rtn +: 023235 le_fifo_malloc_tx: +0x5850 023236 sub rega ,240 ,null +0x5851 023237 nbranch assert ,positive +0x5852 023238 fetch 1 ,mem_le_tx_buff_used +0x5853 023239 arg 1 ,temp +0x5854 023240 arg le_tx_buff_count ,loopcnt +: 023241 le_fifo_malloc_tx_loop: +0x5855 023242 iand temp ,null +0x5856 023243 branch le_fifo_malloc_tx_got_empty ,zero +0x5857 023244 lshift temp ,temp +0x5858 023245 loop le_fifo_malloc_tx_loop +0x5859 023246 branch assert +: 023247 le_fifo_malloc_tx_got_empty: +0x585a 023248 ixor temp ,pdata +0x585b 023249 store 1 ,mem_le_tx_buff_used +0x585c 023250 sub loopcnt ,le_tx_buff_count ,pdata +0x585d 023251 lshift4 pdata ,pdata +0x585e 023252 lshift4 pdata ,pdata +0x585f 023253 arg mem_le_tx_buffer0 ,temp +0x5860 023254 iadd temp ,temp +: 023255 le_fifo_tx_find_empty_ptr: +0x5861 023256 arg 0 ,loopcnt +0x5862 023257 arg mem_le_tx_ptr0 ,contr +: 023258 le_fifo_tx_find_empty_ptr_loop: +0x5863 023259 ifetch 2 ,contr +0x5864 023260 branch le_fifo_tx_found_empty_ptr ,blank +0x5865 023261 copy loopcnt ,pdata +0x5866 023262 increase 1 ,loopcnt +0x5867 023263 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop +0x5868 023264 branch assert +: 023267 le_fifo_tx_found_empty_ptr: +0x5869 023268 increase -2 ,contr +0x586a 023269 istoret 2 ,contr +0x586b 023270 copy temp ,contw +0x586c 023271 copy rega ,pdata +0x586d 023272 istore 1 ,contw +0x586e 023273 setarg 0 +0x586f 023274 istore 1 ,contw +0x5870 023275 copy type ,pdata +0x5871 023276 istore 1 ,contw +0x5872 023277 rtn +: 023281 le_fifo_get_first_tx_ptr: +0x5873 023282 fetch 2 ,mem_le_tx_ptr0 +0x5874 023283 copy pdata ,contr +0x5875 023284 rtn +: 023286 le_fifo_get_second_tx_ptr: +0x5876 023287 fetch 2 ,mem_le_tx_ptr1 +0x5877 023288 copy pdata ,contr +0x5878 023289 rtn +: 023291 le_fifo_get_last_tx_ptr: +0x5879 023292 call le_fifo_get_last_tx_ptr0 +0x587a 023293 copy pdata ,contr +0x587b 023294 rtn +: 023295 le_fifo_get_last_tx_ptr0: +0x587c 023296 fetch 2 ,mem_le_tx_ptr3 +0x587d 023297 nrtn blank +0x587e 023298 fetch 2 ,mem_le_tx_ptr2 +0x587f 023299 nrtn blank +0x5880 023300 fetch 2 ,mem_le_tx_ptr1 +0x5881 023301 nrtn blank +0x5882 023302 fetch 2 ,mem_le_tx_ptr0 +0x5883 023303 rtn +: 023305 le_fifo_get_first_l2cap_ptr: +0x5884 023306 call le_fifo_get_first_tx_ptr +0x5885 023307 increase 3 ,contr +0x5886 023308 rtn +: 023310 le_fifo_get_first_att_ptr: +0x5887 023311 call le_fifo_get_first_tx_ptr +0x5888 023312 increase 7 ,contr +0x5889 023313 rtn +: 023315 le_fifo_get_last_att_ptr: +0x588a 023316 call le_fifo_get_last_tx_ptr +0x588b 023317 increase 7 ,contr +0x588c 023318 rtn +: 023320 le_fifo_get_last_l2cap_ptr: +0x588d 023321 call le_fifo_get_last_tx_ptr +0x588e 023322 increase 3 ,contr +0x588f 023323 rtn +: 023327 le_fifo_check_full: +0x5890 023328 fetch 2 ,mem_le_tx_ptr3 +0x5891 023329 rtn +: 023332 le_fifo_check_nearly_full: +0x5892 023333 fetch 2 ,mem_le_tx_ptr2 +0x5893 023334 rtn +: 023337 le_fifo_check_empty: +0x5894 023338 fetch 2 ,mem_le_tx_ptr0 +0x5895 023339 rtn +: 023342 le_fifo_release_first_node: +0x5896 023343 fetch 2 ,mem_le_tx_ptr0 +0x5897 023344 arg mem_le_tx_buffer0 ,temp +0x5898 023345 isub temp ,pdata +0x5899 023346 rshift4 pdata ,pdata +0x589a 023347 rshift4 pdata ,queue +0x589b 023348 fetch 1 ,mem_le_tx_buff_used +0x589c 023349 qset0 pdata +0x589d 023350 store 1 ,mem_le_tx_buff_used +0x589e 023351 arg 0 ,loopcnt +: 023352 le_fifo_release_first_node_loop: +0x589f 023353 lshift loopcnt ,pdata +0x58a0 023354 arg mem_le_tx_ptr1 ,temp +0x58a1 023355 iadd temp ,temp +0x58a2 023356 ifetch 2 ,temp +0x58a3 023357 increase -2 ,temp +0x58a4 023358 istore 2 ,temp +0x58a5 023359 copy loopcnt ,pdata +0x58a6 023360 increase 1 ,loopcnt +0x58a7 023361 bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop +0x58a8 023362 setarg 0 +0x58a9 023363 istore 2 ,temp +0x58aa 023364 rtn +: 023370 le_parse_att: +0x58ab 023371 ifetch 3 ,contr +0x58ac 023372 store 3 ,mem_le_att_opcode +0x58ad 023373 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request +0x58ae 023374 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response +0x58af 023375 beq attop_find_information_request ,le_parse_att_find_information_request +0x58b0 023376 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request +0x58b1 023377 beq attop_read_by_type_request ,le_parse_att_read_by_type_request +0x58b2 023378 beq attop_read_request ,le_parse_att_read_request +0x58b3 023379 beq attop_read_blob_request ,le_parse_att_read_blob_request +0x58b4 023380 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request +0x58b5 023381 beq attop_write_request ,le_parse_att_write_request +0x58b6 023382 beq attop_prepare_write_request ,le_parse_att_prepare_write_request +0x58b7 023383 beq attop_execute_write_request ,le_parse_att_execute_write_request +0x58b8 023384 beq attop_write_command ,le_parse_att_write_command +0x58b9 023385 rtn +: 023388 le_send_att_exchange_mtu_requset: +0x58ba 023389 force 3 ,rega +0x58bb 023390 call le_fifo_malloc_tx_l2cap_gatt +0x58bc 023391 setarg attop_exchange_mtu_request +0x58bd 023392 istore 1 ,contw +0x58be 023393 fetch 2 ,mem_le_local_mtu +0x58bf 023394 istore 2 ,contw +0x58c0 023395 rtn +: 023398 le_parse_att_exchange_mtu_request: +0x58c1 023399 call le_parse_att_exchange_mtu_response +: 023400 le_send_att_exchange_mtu_response: +0x58c2 023401 force 3 ,rega +0x58c3 023402 call le_fifo_malloc_tx_l2cap_gatt +0x58c4 023403 setarg attop_exchange_mtu_response +0x58c5 023404 istore 1 ,contw +0x58c6 023405 fetch 2 ,mem_le_local_mtu +0x58c7 023406 istore 2 ,contw +0x58c8 023407 rtn +: 023409 le_parse_att_exchange_mtu_response: +0x58c9 023410 rshift8 pdata ,pdata +0x58ca 023411 store 2 ,mem_le_remote_mtu +0x58cb 023412 rtn +: 023414 le_parse_att_find_information_request: +0x58cc 023415 call le_get_search_handle_start_end_common +0x58cd 023416 call enable_user +0x58ce 023417 branch le_send_att_find_information_response +: 023419 le_send_att_find_information_response: +0x58cf 023420 arg 3 ,timeup +0x58d0 023421 call le_init_attlist_search +: 023422 le_send_att_find_information_res_loop: +0x58d1 023423 call le_att_handle_inrange +0x58d2 023424 branch le_send_att_find_information_res_end ,blank +0x58d3 023425 nbranch le_send_att_find_information_res_next ,positive +0x58d4 023426 increase -2 ,contr +0x58d5 023427 call store_contr +0x58d6 023428 call get_contw +0x58d7 023429 nbranch le_send_att_find_information_res_store_info ,user +0x58d8 023430 call push_stack_rega_b_c +0x58d9 023431 call disable_user +0x58da 023432 force 20 ,rega +0x58db 023433 call le_fifo_malloc_tx_l2cap_gatt +0x58dc 023434 call pop_stack_rega_b_c +0x58dd 023435 setarg attop_find_information_response +0x58de 023436 istore 1 ,contw +0x58df 023437 setarg uuid_size_16bit +0x58e0 023438 istore 1 ,contw +: 023439 le_send_att_find_information_res_store_info: +0x58e1 023440 call get_contr +0x58e2 023441 ifetch 2 ,contr +0x58e3 023442 istore 2 ,contw +0x58e4 023443 ifetch 1 ,contr +0x58e5 023444 copy pdata ,loopcnt +0x58e6 023445 call memcpy +0x58e7 023446 call store_contw +0x58e8 023447 increase -1 ,timeup +0x58e9 023448 branch le_send_att_find_information_res_end ,zero +: 023449 le_send_att_find_information_res_cont: +0x58ea 023450 ifetch 1 ,contr +0x58eb 023451 iadd contr ,contr +0x58ec 023452 branch le_send_att_find_information_res_loop +: 023453 le_send_att_find_information_res_next: +0x58ed 023454 ifetch 1 ,contr +0x58ee 023455 iadd contr ,contr +0x58ef 023456 branch le_send_att_find_information_res_cont +: 023457 le_send_att_find_information_res_end: +0x58f0 023458 branch le_send_att_error_response_notfound ,user +0x58f1 023459 branch le_send_auto_len_by_mem +: 023462 le_parse_att_find_by_type_value_request: +0x58f2 023463 call le_get_search_handle_start_end_common +0x58f3 023464 ifetch 2 ,contr +0x58f4 023465 store 2 ,mem_le_search_uuid +0x58f5 023466 call store_contr +0x58f6 023467 arg mem_le_search_att_type_length ,contw +0x58f7 023468 fetch 2 ,mem_le_l2cap_size +0x58f8 023469 increase -7 ,pdata +0x58f9 023470 call le_get_search_common2 +0x58fa 023471 branch le_send_att_find_by_type_value_response +: 023474 le_start_end_handle_check_1: +0x58fb 023475 disable user +0x58fc 023476 fetcht 2 ,mem_le_search_handle_start +0x58fd 023477 fetch 2 ,mem_le_search_handle_end +0x58fe 023478 isub temp ,null +0x58ff 023479 nbranch le_start_end_handle_check_1_fail ,positive +0x5900 023480 deposit temp +0x5901 023481 rtnne 0 +: 023482 le_start_end_handle_check_1_fail: +0x5902 023483 enable user +0x5903 023484 jam att_err_invalid_handle ,mem_le_err_code +0x5904 023485 branch le_send_att_error_response +: 023488 le_send_att_find_by_type_value_response: +0x5905 023489 call le_start_end_handle_check_1 +0x5906 023490 rtn user +0x5907 023491 fetcht 2 ,mem_le_search_uuid +0x5908 023492 setarg uuid_gatt_primary_service +0x5909 023493 isub temp ,null +0x590a 023494 branch le_send_att_find_by_type_value_res_primary ,zero +0x590b 023495 branch le_send_att_error_response_notfound +: 023498 le_send_att_find_by_type_value_res_primary: +0x590c 023499 jam le_find_by_type_val_res_not_found ,mem_le_search_res +0x590d 023500 fetcht 2 ,mem_le_search_handle_start +0x590e 023501 storet 2 ,mem_temp +0x590f 023502 call le_att_get_handle_info +0x5910 023503 nbranch le_send_att_error_response_notfound ,blank +: 023504 le_send_att_find_primary_search_loop: +0x5911 023505 fetcht 2 ,mem_temp +0x5912 023506 call le_att_get_handle_info +0x5913 023507 nbranch le_send_att_error_response_notfound2 ,blank +0x5914 023508 copy contr ,rega +0x5915 023509 fetch 1 ,mem_le_curr_att_len +0x5916 023510 copy pdata ,loopcnt +0x5917 023511 fetcht 1 ,mem_le_search_att_type_length +0x5918 023512 isub temp ,null +0x5919 023513 nbranch le_send_att_find_primary_search_loop1 ,zero +0x591a 023514 arg mem_le_search_att_type ,regb +0x591b 023515 call string_compare +0x591c 023517 branch le_send_att_find_primary_search_end_start_handle_found ,zero +0x591d 023519 fetch 2 ,mem_le_cur_uuid +0x591e 023520 fetcht 2 ,mem_le_search_uuid +0x591f 023521 isub temp ,null +0x5920 023522 branch le_send_att_find_primary_search_end_ending_handle_found ,zero +: 023523 le_send_att_find_primary_search_loop1: +0x5921 023524 fetch 2 ,mem_temp +0x5922 023525 increase 1 ,pdata +0x5923 023526 store 2 ,mem_temp +0x5924 023527 branch le_send_att_find_primary_search_loop +: 023529 le_send_att_error_response_notfound2: +0x5925 023530 fetch 1 ,mem_le_search_res +0x5926 023531 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found +0x5927 023532 branch le_send_att_error_response_notfound +: 023535 le_send_att_find_primary_search_end_start_handle_found: +0x5928 023536 fetch 2 ,mem_le_cur_uuid +0x5929 023537 fetcht 2 ,mem_le_search_uuid +0x592a 023538 isub temp ,null +0x592b 023539 nbranch le_send_att_find_primary_search_loop1 ,zero +0x592c 023540 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res +0x592d 023542 fetcht 2 ,mem_temp +0x592e 023543 storet 2 ,mem_le_cur_handle_start +0x592f 023544 branch le_send_att_find_primary_search_loop1 +: 023546 le_send_att_find_primary_search_end_ending_handle_found: +0x5930 023547 fetch 1 ,mem_le_search_res +0x5931 023548 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 +0x5932 023549 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res +0x5933 023550 fetcht 2 ,mem_temp +0x5934 023551 increase -1 ,temp +0x5935 023552 storet 2 ,mem_le_cur_handle_end +: 023554 le_send_att_find_primary_search_end: +0x5936 023555 arg 5 ,rega +0x5937 023556 call le_fifo_malloc_tx_l2cap_gatt +0x5938 023557 setarg attop_find_by_type_value_response +0x5939 023558 istore 1 ,contw +0x593a 023559 fetch 2 ,mem_le_cur_handle_start +0x593b 023560 istore 2 ,contw +0x593c 023561 fetch 2 ,mem_le_cur_handle_end +0x593d 023562 istore 2 ,contw +0x593e 023563 rtn +: 023567 le_parse_att_read_by_type_request: +0x593f 023568 call le_get_search_handle_start_end_common +0x5940 023569 call le_get_search_att_uuid +0x5941 023570 branch le_send_att_read_by_type_response +: 023572 le_send_att_read_by_type_response: +0x5942 023573 fetcht 2 ,mem_le_search_handle_start +0x5943 023574 storet 2 ,mem_temp +0x5944 023575 call le_init_attlist_search +0x5945 023576 call le_att_get_handle_ptr2 +0x5946 023577 increase -2 ,contr +0x5947 023578 copy contr ,pdata +0x5948 023579 store 2 ,mem_le_cur_attlist_start_ptr +0x5949 023581 fetcht 2 ,mem_le_search_uuid +0x594a 023582 setarg uuid_chrctr_device_name +0x594b 023583 isub temp ,null +0x594c 023584 branch le_send_att_read_by_type_res_device_name ,zero +0x594d 023585 setarg uuid_gatt_characteristic +0x594e 023586 isub temp ,null +0x594f 023587 nbranch le_send_att_read_by_type_res_not_characteristic ,zero +0x5950 023588 arg 2 ,timeup +: 023589 le_send_att_read_by_type_response_loop: +0x5951 023590 call le_att_check_handle_end +0x5952 023591 nbranch le_send_att_read_by_type_response_end ,positive +0x5953 023592 fetcht 2 ,mem_temp +0x5954 023593 call le_att_get_handle_info_from_ptr +0x5955 023594 beq 1 ,le_send_att_read_by_type_response_end +0x5956 023595 call le_att_same_uuid +0x5957 023596 nbranch le_send_att_read_by_type_response_next_handle ,zero +0x5958 023597 nbranch le_send_att_read_by_type_res_found_next ,user +0x5959 023598 disable user +0x595a 023599 arg 20 ,rega +0x595b 023600 call le_fifo_malloc_tx_l2cap_gatt +0x595c 023601 setarg attop_read_by_type_response +0x595d 023602 istore 1 ,contw +0x595e 023603 copy contw ,alarm +0x595f 023604 increase 1 ,contw +0x5960 023606 call le_send_att_read_by_type_write_properties +0x5961 023607 call le_att_next_handle +0x5962 023608 call le_att_get_handle_info_from_ptr +0x5963 023609 call le_send_att_read_by_type_write_uuid +0x5964 023610 fetch 1 ,mem_le_cur_uuid_length +0x5965 023611 increase 5 ,pdata +0x5966 023612 istore 1 ,alarm +0x5967 023613 fetch 1 ,mem_le_cur_uuid_length +0x5968 023614 beq 16 ,le_send_att_read_by_type_response_end +0x5969 023615 increase -1 ,timeup +0x596a 023616 branch le_send_att_read_by_type_response_end ,zero +: 023617 le_send_att_read_by_type_response_next_handle: +0x596b 023618 call le_att_next_handle +0x596c 023619 branch le_send_att_read_by_type_response_loop +: 023620 le_send_att_read_by_type_response_end: +0x596d 023621 branch le_send_att_error_response_notfound ,user +0x596e 023622 branch le_send_auto_len_by_mem +: 023624 le_send_att_read_by_type_res_found_next: +0x596f 023625 call le_store_att_record +0x5970 023626 call le_att_next_handle +0x5971 023627 call le_att_get_handle_info_from_ptr +0x5972 023628 fetch 1 ,mem_le_cur_uuid_length +0x5973 023629 beq 16 ,le_send_att_read_by_type_response_end +0x5974 023631 call get_contw +0x5975 023632 fetch 2 ,mem_temp +0x5976 023633 increase -1 ,pdata +0x5977 023634 istore 2 ,contw +0x5978 023635 call le_write_att_record_common +0x5979 023636 call le_send_att_read_by_type_write_uuid +0x597a 023637 increase -1 ,timeup +0x597b 023638 branch le_send_att_read_by_type_response_end ,zero +0x597c 023639 branch le_send_att_read_by_type_response_next_handle +: 023642 le_send_att_read_by_type_write_properties: +0x597d 023643 fetch 2 ,mem_temp +0x597e 023644 istore 2 ,contw +0x597f 023646 fetch 1 ,mem_le_curr_att_len +0x5980 023647 copy pdata ,loopcnt +0x5981 023648 call get_contr +0x5982 023649 call memcpy_fast +0x5983 023650 branch store_contw +: 023651 le_send_att_read_by_type_write_uuid: +0x5984 023652 call get_contw +0x5985 023653 fetch 2 ,mem_temp +0x5986 023654 istore 2 ,contw +0x5987 023655 call store_contw +0x5988 023656 fetch 1 ,mem_le_cur_uuid_length +0x5989 023657 copy pdata ,loopcnt +0x598a 023658 call get_contw +0x598b 023659 call get_contr +0x598c 023660 isub loopcnt ,contr +0x598d 023661 increase -1 ,contr +0x598e 023662 call memcpy_fast +0x598f 023663 branch store_contw +: 023667 le_send_att_read_by_type_res_not_characteristic: +0x5990 023668 fetcht 2 ,mem_le_search_handle_start +0x5991 023669 storet 2 ,mem_temp +: 023670 le_send_att_read_by_type_res_not_char_loop: +0x5992 023671 call le_att_check_handle_end +0x5993 023672 nbranch le_send_att_error_response_notfound ,positive +0x5994 023673 call le_att_get_handle_info_from_ptr +0x5995 023674 beq 1 ,le_send_att_error_response_notfound +0x5996 023675 call le_att_same_uuid +0x5997 023676 nbranch le_send_att_read_by_type_res_not_char_next ,zero +: 023678 le_send_att_read_by_type_res_not_char_common: +0x5998 023679 arg 20 ,rega +0x5999 023680 call le_fifo_malloc_tx_l2cap_gatt +0x599a 023681 setarg attop_read_by_type_response +0x599b 023682 istore 1 ,contw +0x599c 023683 fetch 1 ,mem_le_curr_att_len +0x599d 023684 copy pdata ,loopcnt +0x599e 023685 increase 2 ,pdata +0x599f 023686 istore 1 ,contw +0x59a0 023687 fetch 2 ,mem_temp +0x59a1 023688 istore 2 ,contw +0x59a2 023689 call get_contr +0x59a3 023690 call memcpy_fast +0x59a4 023691 call store_contw +0x59a5 023692 branch le_send_auto_len_by_mem +: 023694 le_send_att_read_by_type_res_not_char_next: +0x59a6 023695 call le_att_next_handle +0x59a7 023696 branch le_send_att_read_by_type_res_not_char_loop +: 023699 le_send_att_read_by_type_res_device_name: +0x59a8 023700 arg uuid_chrctr_device_name ,temp +0x59a9 023701 call le_att_get_short_uuid_ptr +0x59aa 023702 rtn blank +0x59ab 023703 increase -5 ,contr +0x59ac 023704 ifetch 2 ,contr +0x59ad 023705 store 2 ,mem_temp +0x59ae 023706 arg 20 ,rega +0x59af 023707 call le_fifo_malloc_tx_l2cap_gatt +0x59b0 023708 setarg attop_read_by_type_response +0x59b1 023709 istore 1 ,contw +0x59b2 023710 fetch 1 ,mem_le_name_len +0x59b3 023711 copy pdata ,loopcnt +0x59b4 023712 increase 2 ,pdata +0x59b5 023713 istore 1 ,contw +0x59b6 023714 fetch 2 ,mem_temp +0x59b7 023715 istore 2 ,contw +0x59b8 023716 arg mem_le_name ,contr +0x59b9 023717 call memcpy_fast +0x59ba 023718 call store_contw +0x59bb 023719 branch le_send_auto_len_by_mem +: 023723 le_parse_att_read_request: +0x59bc 023724 fetcht 2 ,mem_le_att_handle +0x59bd 023725 fetch 1 ,mem_le_configuration +0x59be 023726 bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth +: 023728 le_send_att_read_response: +0x59bf 023729 call le_att_get_handle_ptr +0x59c0 023730 branch le_send_att_error_response_notfound ,blank +0x59c1 023731 increase -2 ,contr +0x59c2 023732 ifetch 2 ,contr +0x59c3 023733 arg uuid_chrctr_device_name ,temp +0x59c4 023734 isub temp ,null +0x59c5 023735 branch le_send_device_name ,zero +0x59c6 023736 ifetch 1 ,contr +0x59c7 023737 sub pdata ,22 ,null +0x59c8 023738 branch le_send_att_read_response_less ,positive +0x59c9 023739 force 22 ,pdata +: 023740 le_send_att_read_response_less: +0x59ca 023741 copy pdata ,regc +0x59cb 023742 call store_contr +0x59cc 023743 add regc ,1 ,rega +0x59cd 023744 call le_fifo_malloc_tx_l2cap_gatt +0x59ce 023745 setarg attop_read_response +0x59cf 023746 istore 1 ,contw +0x59d0 023747 copy regc ,loopcnt +0x59d1 023748 call get_contr +0x59d2 023749 branch memcpy +: 023751 le_send_device_name: +0x59d3 023752 call store_contr +0x59d4 023753 fetch 1 ,mem_le_name_len +0x59d5 023754 add pdata ,1 ,rega +0x59d6 023755 call le_fifo_malloc_tx_l2cap_gatt +0x59d7 023756 setarg attop_read_response +0x59d8 023757 istore 1 ,contw +0x59d9 023758 fetch 1 ,mem_le_name_len +0x59da 023759 copy pdata ,loopcnt +0x59db 023760 arg mem_le_name ,contr +0x59dc 023761 branch memcpy +: 023764 le_send_att_read_response_check_auth: +0x59dd 023765 fetch 2 ,mem_le_pairing_handle +0x59de 023766 isub temp ,null +0x59df 023767 nbranch le_send_att_read_response ,zero +0x59e0 023769 call le_check_encrypt_state +0x59e1 023770 nbranch le_send_att_read_response ,user +0x59e2 023771 jam att_err_insufficient_authentication ,mem_le_err_code +0x59e3 023772 branch le_send_att_error_response +: 023775 le_parse_att_read_blob_request: +0x59e4 023776 ifetch 2 ,contr +0x59e5 023777 store 2 ,mem_le_att_offset +: 023778 le_send_att_read_blob_response: +0x59e6 023779 arg 20 ,rega +0x59e7 023780 call le_fifo_malloc_tx_l2cap_gatt +0x59e8 023781 setarg attop_read_blob_response +0x59e9 023782 istore 1 ,contw +0x59ea 023783 fetch 2 ,mem_le_att_offset +0x59eb 023784 iforce rega +0x59ec 023785 fetcht 2 ,mem_le_att_handle +0x59ed 023786 call le_att_get_handle_ptr +0x59ee 023787 branch le_send_att_error_response_notfound ,blank +0x59ef 023788 ifetch 1 ,contr +0x59f0 023789 isub rega ,loopcnt +0x59f1 023790 nbranch le_send_att_error_response_notfound ,positive +0x59f2 023791 sub loopcnt ,22 ,null +0x59f3 023792 branch le_send_att_read_blob_response_less ,positive +0x59f4 023793 force 22 ,loopcnt +: 023794 le_send_att_read_blob_response_less: +0x59f5 023795 deposit rega +0x59f6 023796 iadd contr ,contr +0x59f7 023797 call memcpy_fast +0x59f8 023798 call store_contw +0x59f9 023799 branch le_send_auto_len_by_mem +: 023802 le_parse_att_read_by_group_type_request: +0x59fa 023803 call le_get_search_handle_start_end_common +0x59fb 023804 call le_get_search_att_type +0x59fc 023805 branch le_send_att_read_by_group_type_response +: 023810 le_send_att_read_by_group_type_response: +0x59fd 023811 arg 2 ,timeup +0x59fe 023812 fetcht 2 ,mem_le_search_handle_start +0x59ff 023816 storet 2 ,mem_temp +0x5a00 023817 call le_init_attlist_search +0x5a01 023818 call le_att_get_handle_ptr2 +0x5a02 023819 increase -2 ,contr +0x5a03 023820 copy contr ,pdata +0x5a04 023821 store 2 ,mem_le_cur_attlist_start_ptr +: 023822 le_send_att_read_by_group_type_response_loop: +0x5a05 023823 call le_att_check_handle_end +0x5a06 023824 nbranch le_send_att_read_by_group_type_end0 ,positive +0x5a07 023825 fetcht 2 ,mem_temp +0x5a08 023826 call le_att_get_handle_info_from_ptr +0x5a09 023827 beq 1 ,le_send_att_read_by_group_type_end1 +0x5a0a 023829 call le_att_same_type +0x5a0b 023830 nbranch le_send_att_read_by_group_type_next_handle ,zero +0x5a0c 023831 copy timeup ,pdata +0x5a0d 023832 beq 0 ,le_send_att_read_by_group_type_end1 +0x5a0e 023833 nbranch le_send_att_read_by_group_type_store_write_record ,user +0x5a0f 023834 disable user +0x5a10 023836 arg 20 ,rega +0x5a11 023837 call le_fifo_malloc_tx_l2cap_gatt +0x5a12 023838 setarg attop_read_by_group_type_response +0x5a13 023839 istore 1 ,contw +0x5a14 023840 fetch 1 ,mem_le_curr_att_len +0x5a15 023841 increase 4 ,pdata +0x5a16 023842 istore 1 ,contw +0x5a17 023843 call store_contw +0x5a18 023844 branch le_send_att_read_by_group_type_store_record +: 023845 le_send_att_read_by_group_type_store_write_record: +0x5a19 023846 fetch 1 ,mem_le_curr_att_len +0x5a1a 023847 beq 16 ,le_send_att_read_by_group_type_end1 +0x5a1b 023848 fetch 2 ,mem_temp +0x5a1c 023849 increase -1 ,pdata +0x5a1d 023850 store 2 ,mem_le_cur_handle_end +0x5a1e 023851 call le_write_att_record +: 023852 le_send_att_read_by_group_type_store_record: +0x5a1f 023853 fetch 2 ,mem_temp +0x5a20 023854 store 2 ,mem_le_cur_handle_start +0x5a21 023855 call le_store_att_record +0x5a22 023856 increase -1 ,timeup +: 023858 le_send_att_read_by_group_type_next_handle: +0x5a23 023859 call le_att_next_handle +0x5a24 023860 branch le_send_att_read_by_group_type_response_loop +: 023862 le_send_att_read_by_group_type_end0: +0x5a25 023863 fetch 2 ,mem_temp +0x5a26 023864 store 2 ,mem_le_cur_handle_end +0x5a27 023865 branch le_send_att_read_by_group_type_end_common +: 023866 le_send_att_read_by_group_type_end1: +0x5a28 023867 fetch 2 ,mem_temp +0x5a29 023868 increase -1 ,pdata +0x5a2a 023869 store 2 ,mem_le_cur_handle_end +0x5a2b 023870 branch le_send_att_read_by_group_type_end_common +: 023871 le_send_att_read_by_group_type_end_common: +0x5a2c 023872 branch le_send_att_error_response_notfound ,user +0x5a2d 023873 call le_write_att_record +0x5a2e 023874 branch le_send_auto_len_by_mem +: 023879 le_parse_att_write_request: +0x5a2f 023880 copy contr ,rega +0x5a30 023881 fetch 2 ,mem_le_l2cap_size +0x5a31 023882 add pdata ,-3 ,regb +0x5a32 023883 call le_writeatt_cb +: 023884 le_send_att_write_response_check_auth: +0x5a33 023885 fetch 1 ,mem_le_configuration +0x5a34 023886 bbit0 bit_ble_write_auth ,le_send_att_write_response +0x5a35 023888 fetcht 2 ,mem_le_att_handle +0x5a36 023889 fetch 2 ,mem_le_pairing_handle +0x5a37 023890 isub temp ,null +0x5a38 023891 nbranch le_send_att_write_response ,zero +0x5a39 023892 call le_check_encrypt_state +0x5a3a 023893 nbranch le_send_att_write_response ,user +0x5a3b 023894 jam att_err_insufficient_authentication ,mem_le_err_code +0x5a3c 023895 branch le_send_att_error_response +: 023897 le_send_att_write_response: +0x5a3d 023898 force 1 ,rega +0x5a3e 023899 call le_fifo_malloc_tx_l2cap_gatt +0x5a3f 023900 setarg attop_write_response +0x5a40 023901 istore 1 ,contw +0x5a41 023902 rtn +: 023904 le_check_encrypt_state: +0x5a42 023905 call disable_user +0x5a43 023906 fetch 1 ,mem_le_pairing_mode +0x5a44 023907 rtneq le_pairing_mode_none +0x5a45 023908 fetch 1 ,mem_context +0x5a46 023909 rtnbit1 lestate_encryption +0x5a47 023910 branch enable_user +: 023913 le_parse_att_prepare_write_request: +0x5a48 023914 add contr ,2 ,rega +0x5a49 023915 fetch 2 ,mem_le_l2cap_size +0x5a4a 023916 add pdata ,-5 ,regb +0x5a4b 023917 call le_writeatt_cb +0x5a4c 023918 branch le_send_att_prepare_write_response +: 023921 le_send_att_prepare_write_response: +0x5a4d 023922 fetch 2 ,mem_le_l2cap_size +0x5a4e 023923 copy pdata ,rega +0x5a4f 023924 call le_fifo_malloc_tx_l2cap_gatt +0x5a50 023925 setarg attop_prepare_write_response +0x5a51 023926 istore 1 ,contw +0x5a52 023927 fetch 2 ,mem_le_att_handle +0x5a53 023928 istore 2 ,contw +0x5a54 023929 fetch 2 ,mem_le_l2cap_size +0x5a55 023930 add pdata ,-5 ,loopcnt +0x5a56 023931 fetch 2 ,mem_le_payload_ptr +0x5a57 023932 add pdata ,7 ,contr +0x5a58 023933 ifetch 2 ,contr +0x5a59 023934 istore 2 ,contw +0x5a5a 023935 branch memcpy_fast +: 023939 le_parse_att_execute_write_request: +: 023941 le_send_att_execute_write_response: +0x5a5b 023942 force 1 ,rega +0x5a5c 023943 call le_fifo_malloc_tx_l2cap_gatt +0x5a5d 023944 setarg attop_execute_write_response +0x5a5e 023945 istore 1 ,contw +0x5a5f 023946 rtn +: 023950 le_parse_att_write_command: +0x5a60 023951 copy contr ,rega +0x5a61 023952 fetch 2 ,mem_le_l2cap_size +0x5a62 023953 add pdata ,-3 ,regb +0x5a63 023954 branch le_writeatt_cb +: 023959 le_att_malloc_tx_notify: +0x5a64 023960 copy temp ,regc +0x5a65 023961 increase 3 ,rega +0x5a66 023962 call le_fifo_malloc_tx_l2cap_gatt +0x5a67 023963 increase -3 ,rega +0x5a68 023964 setarg attop_handle_value_notification +0x5a69 023965 istore 1 ,contw +0x5a6a 023966 copy regc ,temp +0x5a6b 023967 istoret 2 ,contw +0x5a6c 023968 rtn +: 023971 le_att_malloc_tx_indication: +0x5a6d 023972 copy temp ,regc +0x5a6e 023973 increase 3 ,rega +0x5a6f 023974 call le_fifo_malloc_tx_l2cap_gatt +0x5a70 023975 increase -3 ,rega +0x5a71 023976 setarg attop_handle_value_indication +0x5a72 023977 istore 1 ,contw +0x5a73 023978 copy regc ,temp +0x5a74 023979 istoret 2 ,contw +0x5a75 023980 rtn +: 023985 le_send_att_error_response_notfound: +0x5a76 023986 jam att_err_attribute_not_found ,mem_le_err_code +: 023987 le_send_att_error_response: +0x5a77 023988 force 5 ,rega +0x5a78 023989 call le_fifo_malloc_tx_l2cap_gatt +0x5a79 023990 setarg attop_error_response +0x5a7a 023991 istore 1 ,contw +0x5a7b 023992 fetch 1 ,mem_le_att_opcode +0x5a7c 023993 istore 1 ,contw +0x5a7d 023994 fetch 2 ,mem_le_att_handle +0x5a7e 023995 istore 2 ,contw +0x5a7f 023996 fetch 1 ,mem_le_err_code +0x5a80 023997 istore 1 ,contw +0x5a81 023998 rtn +: 024001 le_fifo_malloc_tx_l2cap_gatt: +0x5a82 024002 force le_l2cap_cid_att ,regb +0x5a83 024003 branch le_fifo_malloc_tx_l2cap +: 024006 le_att_next_handle: +0x5a84 024007 fetcht 2 ,mem_temp +0x5a85 024008 increase 1 ,temp +0x5a86 024009 storet 2 ,mem_temp +0x5a87 024010 rtn +: 024012 le_att_check_handle_end: +0x5a88 024013 fetcht 2 ,mem_temp +0x5a89 024014 fetch 2 ,mem_le_search_handle_end +0x5a8a 024015 isub temp ,null +0x5a8b 024016 rtn +: 024019 le_att_same_type: +0x5a8c 024020 fetcht 1 ,mem_le_search_att_type_length +0x5a8d 024021 arg mem_le_search_att_type ,rega +: 024022 le_att_check_same_common: +0x5a8e 024023 fetch 1 ,mem_le_cur_uuid_length +0x5a8f 024024 copy pdata ,loopcnt +0x5a90 024025 isub temp ,null +0x5a91 024026 nrtn zero +0x5a92 024027 arg mem_le_cur_uuid ,regb +0x5a93 024028 branch string_compare +: 024030 le_att_same_uuid: +0x5a94 024031 fetcht 1 ,mem_le_search_uuid_length +0x5a95 024032 arg mem_le_search_uuid ,rega +0x5a96 024033 branch le_att_check_same_common +: 024036 le_store_att_record: +0x5a97 024037 fetch 1 ,mem_le_curr_att_len +0x5a98 024038 store 1 ,mem_tmp_buffer +0x5a99 024039 copy pdata ,loopcnt +0x5a9a 024040 call get_contr +0x5a9b 024041 branch memcpy_fast +: 024044 le_write_att_record: +0x5a9c 024045 call get_contw +0x5a9d 024046 fetch 2 ,mem_le_cur_handle_start +0x5a9e 024047 istore 2 ,contw +0x5a9f 024048 fetch 2 ,mem_le_cur_handle_end +0x5aa0 024049 istore 2 ,contw +: 024050 le_write_att_record_common: +0x5aa1 024051 fetch 1 ,mem_tmp_buffer +0x5aa2 024052 copy pdata ,loopcnt +0x5aa3 024053 call memcpy_fast +0x5aa4 024054 branch store_contw +: 024058 le_send_auto_len_by_mem: +0x5aa5 024059 call get_contw +0x5aa6 024060 call le_fifo_get_last_att_ptr +0x5aa7 024061 copy contw ,pdata +0x5aa8 024062 isub contr ,rega +0x5aa9 024063 call le_fifo_get_last_l2cap_ptr +0x5aaa 024064 copy rega ,pdata +0x5aab 024065 istore 2 ,contr +0x5aac 024066 increase 4 ,rega +0x5aad 024067 call le_fifo_get_last_tx_ptr +0x5aae 024068 copy rega ,pdata +0x5aaf 024069 istore 1 ,contr +0x5ab0 024070 rtn +: 024073 le_get_search_handle_start_end_common: +0x5ab1 024074 rshift8 pdata ,pdata +0x5ab2 024075 store 2 ,mem_le_search_handle_start +0x5ab3 024076 ifetch 2 ,contr +0x5ab4 024077 store 2 ,mem_le_search_handle_end +0x5ab5 024078 rtn +: 024083 le_parse_signaling: +0x5ab6 024084 ifetch 1 ,contr +0x5ab7 024085 ifetcht 1 ,contr +0x5ab8 024086 ifetcht 2 ,contr +0x5ab9 024087 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp +0x5aba 024088 rtn +: 024089 le_l2cap_parse_conn_parameter_update_rsp: +0x5abb 024090 ifetch 2 ,contr +0x5abc 024091 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x5abd 024092 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp +0x5abe 024093 branch ui_ipc_send_event +: 024099 le_l2cap_tx_update_req: +0x5abf 024100 arg 0x0c ,rega +0x5ac0 024101 arg l2cap_connection_parameter_update_request ,regc +0x5ac1 024102 call le_fifo_malloc_tx_l2cap_signaling +0x5ac2 024103 setarg 0x08 +0x5ac3 024104 istore 2 ,contw +0x5ac4 024105 fetch 8 ,mem_le_interval_min +0x5ac5 024106 istore 8 ,contw +0x5ac6 024107 rtn +: 024111 le_fifo_malloc_tx_l2cap_signaling: +0x5ac7 024112 call le_l2cap_update_signaling_identifier +0x5ac8 024113 arg le_l2cap_cid_signal ,regb +0x5ac9 024114 call le_fifo_malloc_tx_l2cap +0x5aca 024115 copy regc ,pdata +0x5acb 024116 istore 1 ,contw +0x5acc 024117 fetch 1 ,mem_le_signaling_identifier +0x5acd 024118 istore 1 ,contw +0x5ace 024119 rtn +: 024122 le_l2cap_update_signaling_identifier: +0x5acf 024123 fetch 1 ,mem_le_signaling_identifier +0x5ad0 024125 pincrease 1 +0x5ad1 024126 store 1 ,mem_le_signaling_identifier +0x5ad2 024127 rtnne 0 +: 024129 le_l2cap_reset_signaling_identifier: +0x5ad3 024130 jam 1 ,mem_le_signaling_identifier +0x5ad4 024131 rtn +: 024136 le_pairing_mode_init: +0x5ad5 024137 fetch 1 ,mem_le_pairing_mode +0x5ad6 024138 beq le_pairing_mode_none ,le_set_no_pairing +0x5ad7 024139 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work +0x5ad8 024140 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey +0x5ad9 024141 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork +0x5ada 024142 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric +0x5adb 024143 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey +0x5adc 024144 rtn +: 024146 le_set_pairing_mode_secure_justwork: +0x5add 024147 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ade 024148 branch le_set_noinputnooutput +: 024149 le_set_pairing_mode_secure_numeric: +0x5adf 024150 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ae0 024151 jam flag_iocap_displayyesno ,mem_le_pres_iocap +0x5ae1 024152 rtn +: 024153 le_set_pairing_mode_secure_passkey: +0x5ae2 024154 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ae3 024155 branch le_set_displayonly +: 024156 le_set_no_pairing: +0x5ae4 024157 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth +: 024158 le_set_noinputnooutput: +0x5ae5 024159 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +0x5ae6 024160 rtn +: 024161 le_set_pairing_mode_lagacy_just_work: +0x5ae7 024162 jam flag_le_bonding_mitm ,mem_le_pres_auth +0x5ae8 024163 branch le_set_noinputnooutput +: 024164 le_set_pairing_mode_lagacy_passkey: +0x5ae9 024165 jam flag_le_bonding_mitm ,mem_le_pres_auth +: 024166 le_set_displayonly: +0x5aea 024167 jam flag_iocap_displayonly ,mem_le_pres_iocap +0x5aeb 024168 rtn +: 024171 le_secure_connection_enable: +0x5aec 024172 fetch 1 ,mem_le_pres_auth +0x5aed 024173 set1 le_auth_secure_connection_pairing_bit ,pdata +0x5aee 024174 store 1 ,mem_le_pres_auth +0x5aef 024175 rtn +: 024176 le_secure_connection_disable: +0x5af0 024177 fetch 1 ,mem_le_pres_auth +0x5af1 024178 set0 le_auth_secure_connection_pairing_bit ,pdata +0x5af2 024179 store 1 ,mem_le_pres_auth +0x5af3 024180 rtn +: 024182 le_parse_smp: +0x5af4 024183 ifetch 1 ,contr +0x5af5 024184 beq smp_pairing_request ,le_parse_smp_pairing_request +0x5af6 024186 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm +0x5af7 024187 beq smp_pairing_random ,le_parse_smp_pairing_random +0x5af8 024188 beq smp_pairing_failed ,le_parse_smp_pairing_failed +0x5af9 024189 beq smp_encryption_information ,le_parse_smp_encryption_information +0x5afa 024190 beq smp_master_identification ,le_parse_smp_master_identification +0x5afb 024191 beq smp_identity_information ,le_parse_smp_identity_information +0x5afc 024192 beq smp_identity_address_information ,le_parse_smp_identity_address_information +0x5afd 024193 beq smp_signing_information ,le_parse_smp_signing_information +0x5afe 024194 beq smp_security_request ,le_parse_smp_security_request +0x5aff 024195 beq smp_pairing_public_key ,le_parse_smp_public_key +0x5b00 024196 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check +0x5b01 024197 rtn +: 024201 le_send_smp_security_request: +0x5b02 024202 force 2 ,rega +0x5b03 024203 call le_fifo_malloc_tx_l2cap_smp +0x5b04 024204 setarg smp_security_request +0x5b05 024205 istore 1 ,contw +0x5b06 024206 fetch 1 ,mem_le_pres_auth +0x5b07 024207 istore 1 ,contw +0x5b08 024208 rtn +: 024210 le_parse_smp_pairing_request: +0x5b09 024211 store 1 ,mem_le_preq +0x5b0a 024212 ifetch 6 ,contr +0x5b0b 024213 istore 6 ,contw +0x5b0c 024214 fetch 1 ,mem_le_pairing_mode +0x5b0d 024215 beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing +0x5b0e 024216 call le_send_smp_pairing_response +0x5b0f 024217 call le_check_master_support_secure_connect +0x5b10 024218 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state +0x5b11 024219 fetch 1 ,mem_le_preq_iocap +0x5b12 024220 beq flag_iocap_displayonly ,le_set_tk_0 +0x5b13 024221 beq flag_iocap_displayyesno ,le_set_tk_0 +0x5b14 024222 beq flag_iocap_noinputnooutput ,le_set_tk_0 +0x5b15 024223 fetch 1 ,mem_le_pairing_mode +0x5b16 024224 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey +0x5b17 024225 rtneq le_pairing_mode_secure_connect_passkey +: 024226 le_set_tk_0: +0x5b18 024227 arg 0 ,pdata +0x5b19 024228 store 4 ,mem_le_tk +0x5b1a 024229 rtn +: 024231 le_parse_smp_pairing_req_passkey: +0x5b1b 024232 fetch 1 ,mem_le_configuration +0x5b1c 024233 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey +: 024234 le_genernate_tk: +0x5b1d 024235 arg mem_le_tk ,rega +0x5b1e 024236 copy rega ,contw +0x5b1f 024237 arg 3 ,loopcnt +0x5b20 024238 call generate_random_loop +0x5b21 024239 fetch 2 ,mem_le_tk + 2 +0x5b22 024240 and_into 0x7 ,pdata +0x5b23 024241 store 2 ,mem_le_tk + 2 +: 024242 le_parse_smp_pairing_req_fixed_passkey: +0x5b24 024243 jam bt_evt_le_tk_generate ,mem_fifo_temp +0x5b25 024244 branch ui_ipc_send_event +: 024246 le_check_master_support_secure_connect: +0x5b26 024247 fetch 1 ,mem_le_preq_auth +0x5b27 024248 rtnbit1 le_auth_secure_connection_pairing_bit +0x5b28 024249 fetch 1 ,mem_le_pairing_mode +0x5b29 024250 rtnbit0 le_pairing_mode_secure_connect_bit +0x5b2a 024251 branch app_ble_disconnect +: 024253 le_send_smp_pairing_response: +0x5b2b 024254 force 7 ,rega +0x5b2c 024255 call le_fifo_malloc_tx_l2cap_smp +0x5b2d 024256 fetch 7 ,mem_le_pres +0x5b2e 024257 istore 7 ,contw +0x5b2f 024258 rtn +: 024261 le_parse_smp_pairing_confirm: +0x5b30 024262 copy contr ,rega +0x5b31 024263 fetch 1 ,mem_le_pairing_mode +0x5b32 024264 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey +0x5b33 024265 copy rega ,contr +0x5b34 024266 arg mem_le_rconfirm ,contw +0x5b35 024267 call memcpy16 +0x5b36 024268 branch le_send_smp_pairing_confirm +: 024269 le_parse_smp_pairing_confirm_secure_passkey: +0x5b37 024270 copy rega ,contr +0x5b38 024271 arg mem_le_rconfirm ,contw +0x5b39 024272 call memcpy16 +0x5b3a 024273 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5b3b 024274 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state +0x5b3c 024275 rtn +: 024278 le_send_smp_pairing_confirm: +0x5b3d 024279 fetch 1 ,mem_le_pairing_mode +0x5b3e 024280 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc +0x5b3f 024281 call generate_confirm +0x5b40 024282 force 17 ,rega +0x5b41 024283 call le_fifo_malloc_tx_l2cap_smp +0x5b42 024284 setarg smp_pairing_confirm +0x5b43 024285 istore 1 ,contw +0x5b44 024286 branch store_aes_result +: 024289 le_send_smp_pairing_confirm_sc: +0x5b45 024290 arg mem_le_srand ,contw +0x5b46 024291 call generate_random +0x5b47 024292 call function_f4_cb +0x5b48 024293 force 17 ,rega +0x5b49 024294 call le_fifo_malloc_tx_l2cap_smp +0x5b4a 024295 setarg smp_pairing_confirm +0x5b4b 024296 istore 1 ,contw +0x5b4c 024297 branch load_inverse_result +: 024301 le_parse_smp_pairing_random: +0x5b4d 024302 copy contr ,rega +0x5b4e 024303 fetch 1 ,mem_le_pairing_mode +0x5b4f 024304 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc +0x5b50 024305 copy rega ,contr +0x5b51 024306 call authenticate_rconfirm +0x5b52 024307 branch le_parse_smp_pairing_random_success ,zero +: 024308 le_send_pairing_confirm_value_failed: +0x5b53 024309 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason +: 024310 le_send_pairing_failed: +0x5b54 024311 force 2 ,rega +0x5b55 024312 call le_fifo_malloc_tx_l2cap_smp +0x5b56 024313 setarg smp_pairing_failed +0x5b57 024314 istore 1 ,contw +0x5b58 024315 fetch 1 ,mem_le_ll_pairing_fail_reason +0x5b59 024316 istore 1 ,contw +: 024317 le_parse_smp_pairing_failed: +0x5b5a 024318 force smp_pairing_timer ,queue +0x5b5b 024319 call timer_stop +0x5b5c 024320 jam flag_le_pairing_null ,mem_le_pairing_state +0x5b5d 024321 jam bt_evt_le_pairing_fail ,mem_fifo_temp +0x5b5e 024322 branch ui_ipc_send_event +: 024324 le_smp_pairing_fail_reason_not_support_pairing: +0x5b5f 024325 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason +0x5b60 024326 branch le_send_pairing_failed +: 024329 le_parse_smp_pairing_random_sc: +0x5b61 024330 arg mem_le_mrand ,contw +0x5b62 024331 copy rega ,contr +0x5b63 024332 call memcpy16 +0x5b64 024333 fetch 1 ,mem_le_pairing_mode +0x5b65 024334 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey +0x5b66 024335 call function_g2 +0x5b67 024338 call le_send_smp_pairing_random +0x5b68 024339 fetch 1 ,mem_le_pairing_mode +0x5b69 024340 rtnne le_pairing_mode_secure_connect_numeric +0x5b6a 024341 jam bt_evt_le_gkey_generate ,mem_fifo_temp +0x5b6b 024342 branch ui_ipc_send_event +: 024344 le_parse_smp_pairing_random_sc_passkey: +0x5b6c 024345 call function_f4_ca +0x5b6d 024346 arg mem_aes_cmac_temp ,contw +0x5b6e 024347 call load_inverse_result +0x5b6f 024348 arg mem_aes_cmac_temp ,rega +0x5b70 024349 arg mem_le_rconfirm ,regb +0x5b71 024350 arg 16 ,loopcnt +0x5b72 024351 call string_compare +0x5b73 024352 nbranch le_send_pairing_confirm_value_failed ,zero +0x5b74 024353 branch le_send_smp_pairing_random +: 024355 le_parse_smp_pairing_random_success: +0x5b75 024356 call generate_stk +0x5b76 024357 jam bt_evt_le_pairing_success ,mem_fifo_temp +0x5b77 024358 call ui_ipc_send_event +0x5b78 024359 jam 1 ,mem_ltk_exists +0x5b79 024360 jam flag_le_pairing_after_auth ,mem_le_pairing_state +: 024362 le_send_smp_pairing_random: +0x5b7a 024363 force 17 ,rega +0x5b7b 024364 call le_fifo_malloc_tx_l2cap_smp +0x5b7c 024365 setarg smp_pairing_random +0x5b7d 024366 istore 1 ,contw +0x5b7e 024367 arg mem_le_srand ,contr +0x5b7f 024368 branch memcpy16 +: 024370 le_parse_smp_encryption_information: +0x5b80 024371 arg mem_le_peer_ltk ,contw +0x5b81 024372 branch memcpy16 +: 024374 le_send_smp_encryption_information: +0x5b82 024375 force 17 ,rega +0x5b83 024376 call le_fifo_malloc_tx_l2cap_smp +0x5b84 024377 setarg smp_encryption_information +0x5b85 024378 istore 1 ,contw +0x5b86 024379 fetch 1 ,mem_le_configuration +0x5b87 024380 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk +0x5b88 024381 arg mem_le_ltk ,contr +0x5b89 024382 branch memcpy16 +: 024384 le_send_fixed_ltk: +0x5b8a 024385 arg mem_le_fixed_ltk ,contr +0x5b8b 024386 branch memcpy16 +: 024389 le_send_smp_master_identification: +0x5b8c 024390 arg mem_le_ediv ,contw +0x5b8d 024391 force 10 ,loopcnt +0x5b8e 024392 call generate_random_loop +0x5b8f 024393 force 11 ,rega +0x5b90 024394 call le_fifo_malloc_tx_l2cap_smp +0x5b91 024395 setarg smp_master_identification +0x5b92 024396 istore 1 ,contw +0x5b93 024397 fetch 2 ,mem_le_ediv +0x5b94 024398 istore 2 ,contw +0x5b95 024399 fetch 8 ,mem_le_rand +0x5b96 024400 istore 8 ,contw +0x5b97 024401 rtn +: 024403 le_send_smp_identity_information: +0x5b98 024404 force 17 ,rega +0x5b99 024405 call le_fifo_malloc_tx_l2cap_smp +0x5b9a 024406 setarg smp_identity_information +0x5b9b 024407 istore 1 ,contw +0x5b9c 024408 setarg 0 +0x5b9d 024409 istore 8 ,contw +0x5b9e 024410 istore 8 ,contw +0x5b9f 024411 rtn +: 024414 le_send_smp_identity_address_information: +0x5ba0 024415 force 8 ,rega +0x5ba1 024416 call le_fifo_malloc_tx_l2cap_smp +0x5ba2 024417 setarg smp_identity_address_information +0x5ba3 024418 istore 1 ,contw +0x5ba4 024419 fetch 1 ,mem_le_conn_own_addr_type +0x5ba5 024420 istore 1 ,contw +0x5ba6 024421 fetch 6 ,mem_le_lap +0x5ba7 024422 istore 6 ,contw +0x5ba8 024423 rtn +: 024426 le_send_pairing_fail_unspecified_reason: +0x5ba9 024427 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason +0x5baa 024428 branch le_send_pairing_failed +: 024430 le_check_init_key_distribution: +0x5bab 024431 fetch 1 ,mem_le_pres_init_key_distribution +0x5bac 024432 fetcht 1 ,mem_le_pres_init_key_distribution +0x5bad 024433 iand temp ,pdata +0x5bae 024434 rtn +: 024436 le_parse_smp_identity_information: +0x5baf 024437 arg mem_le_irk ,contw +0x5bb0 024438 call memcpy16 +0x5bb1 024439 call le_check_init_key_distribution +0x5bb2 024440 isolate0 le_initator_irk_bit ,pdata +0x5bb3 024441 branch le_send_pairing_fail_unspecified_reason ,true +0x5bb4 024442 fetch 1 ,mem_device_option +0x5bb5 024443 rtnne dvc_op_module +0x5bb6 024444 call le_check_master_addr_type +0x5bb7 024445 nrtn user +0x5bb8 024446 branch app_ble_store_reconn_info +: 024449 le_check_master_addr_type: +0x5bb9 024450 call disable_user +0x5bba 024451 fetch 1 ,mem_le_conn_peer_addr_type +0x5bbb 024452 rtneq master_public_addr +0x5bbc 024453 fetch 1 ,mem_le_plap + 5 +0x5bbd 024454 compare 0xc0 ,pdata ,0xc0 +0x5bbe 024455 rtn true +0x5bbf 024456 branch enable_user +: 024458 le_parse_smp_identity_address_information: +0x5bc0 024459 call le_check_init_key_distribution +0x5bc1 024460 isolate0 le_initator_irk_bit ,pdata +0x5bc2 024461 branch le_send_pairing_fail_unspecified_reason ,true +0x5bc3 024462 rtn +: 024464 le_parse_smp_master_identification: +: 024465 le_parse_smp_signing_information: +: 024466 le_parse_smp_security_request: +0x5bc4 024467 rtn +: 024469 le_parse_smp_public_key: +0x5bc5 024470 arg mem_le_pubkey_remote_x_256 ,contw +0x5bc6 024471 call memcpy64 +0x5bc7 024472 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5bc8 024473 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state +0x5bc9 024474 rtn +: 024476 le_parse_smp_dhkey_check: +0x5bca 024477 arg mem_sp_confirm_remote ,contw +0x5bcb 024478 call memcpy16 +0x5bcc 024479 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state +0x5bcd 024480 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5bce 024481 rtn +: 024483 le_send_smp_pairing_public_key: +0x5bcf 024484 force 65 ,rega +0x5bd0 024485 call le_fifo_malloc_tx_l2cap_smp +0x5bd1 024486 setarg smp_pairing_public_key +0x5bd2 024487 istore 1 ,contw +0x5bd3 024488 arg mem_le_pubkey_local_x_256 ,contr +0x5bd4 024489 branch memcpy64 +: 024491 le_send_smp_pairing_dhkey_check: +0x5bd5 024492 call function_f6_eb +0x5bd6 024493 force 17 ,rega +0x5bd7 024494 call le_fifo_malloc_tx_l2cap_smp +0x5bd8 024495 setarg smp_pairing_dhkey_check +0x5bd9 024496 istore 1 ,contw +0x5bda 024497 branch load_inverse_result +: 024500 le_check_paring_time: +0x5bdb 024501 fetch 1 ,mem_le_pairing_state +0x5bdc 024502 rtneq flag_le_pairing_end +0x5bdd 024503 arg flag_le_pairing_rcv_pairing_req ,temp +0x5bde 024504 isub temp ,null +0x5bdf 024505 nrtn positive +0x5be0 024506 arg smp_pairing_timer ,queue +0x5be1 024507 call timer_check +0x5be2 024508 nrtn blank +0x5be3 024509 branch le_send_pairing_fail_unspecified_reason +: 024511 le_pairing_sm: +0x5be4 024512 bpatchx patch2f_0 ,mem_patch2f +0x5be5 024513 fetch 1 ,mem_le_pairing_state +0x5be6 024514 beq flag_le_pairing_null ,le_pairing_sm_null +0x5be7 024515 beq flag_le_pairing_start ,le_pairing_sm_start +0x5be8 024516 beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req +0x5be9 024517 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req +0x5bea 024518 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth +0x5beb 024519 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information +0x5bec 024520 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification +0x5bed 024521 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information +0x5bee 024522 rtn +: 024524 le_pairing_sm_null: +: 024525 le_pairing_sm_send_sec_req: +0x5bef 024526 fetch 1 ,mem_le_enc_state +0x5bf0 024527 rtnne flag_le_send_start_enc_rsp +0x5bf1 024528 jam flag_le_enc_end ,mem_le_enc_state +0x5bf2 024529 jam flag_le_pairing_end ,mem_le_pairing_state +0x5bf3 024530 jam bt_evt_le_reconnect_complete ,mem_fifo_temp +0x5bf4 024531 branch ui_ipc_send_event +: 024534 le_pairing_sm_start: +0x5bf5 024535 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state +0x5bf6 024536 branch le_send_smp_security_request +: 024538 le_pairing_sm_rcv_pairing_req: +0x5bf7 024539 jam flag_le_pairing_auth ,mem_le_pairing_state +0x5bf8 024540 setarg timer_smp_pairing_timeout +0x5bf9 024541 arg smp_pairing_timer ,queue +0x5bfa 024542 branch timer_init +: 024544 le_pairing_sm_after_auth: +0x5bfb 024545 fetch 1 ,mem_le_enc_state +0x5bfc 024546 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc +0x5bfd 024547 rtn +: 024549 le_pairing_sm_after_auth_start_enc: +0x5bfe 024550 jam flag_le_paring_send_enc_information ,mem_le_pairing_state +0x5bff 024551 jam bt_evt_le_enc_info ,mem_fifo_temp +0x5c00 024552 call ui_ipc_send_event +0x5c01 024553 call le_send_smp_encryption_information +0x5c02 024554 fetch 1 ,mem_device_option +0x5c03 024555 rtnne dvc_op_module +0x5c04 024556 call le_check_master_addr_type +0x5c05 024557 rtn user +0x5c06 024558 branch app_ble_store_reconn_info +: 024561 le_pairng_sm_send_enc_information: +0x5c07 024562 jam flag_le_paring_send_master_identification ,mem_le_pairing_state +0x5c08 024563 branch le_send_smp_master_identification +: 024565 le_pairng_sm_send_master_indentification: +0x5c09 024566 fetch 1 ,mem_le_preq_resp_key_distribution +0x5c0a 024567 fetcht 1 ,mem_le_pres_resp_key_distribution +0x5c0b 024568 iand temp ,pdata +0x5c0c 024569 isolate0 le_initator_irk_bit ,pdata +0x5c0d 024570 branch le_parse_start_enc_rsp_after_auth_end ,true +0x5c0e 024571 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state +0x5c0f 024572 branch le_send_smp_identity_information +: 024574 le_pairng_sm_send_indentity_information: +0x5c10 024575 call le_send_smp_identity_address_information +0x5c11 024576 branch le_parse_start_enc_rsp_after_auth_end +: 024579 le_parse_start_enc_rsp_after_auth_end: +0x5c12 024580 force smp_pairing_timer ,queue +0x5c13 024581 call timer_stop +0x5c14 024582 jam flag_le_enc_end ,mem_le_enc_state +0x5c15 024583 jam flag_le_pairing_end ,mem_le_pairing_state +0x5c16 024584 jam bt_evt_le_pairing_complete ,mem_fifo_temp +0x5c17 024585 branch ui_ipc_send_event +: 024589 le_secure_connect_sm: +0x5c18 024590 bpatchx patch2f_1 ,mem_patch2f +0x5c19 024591 fetch 1 ,mem_le_pairing_mode +0x5c1a 024592 rtnbit0 le_pairing_mode_secure_connect_bit +0x5c1b 024593 fetch 1 ,mem_le_secure_connect_flag +0x5c1c 024594 rtnne le_sp_flag_commit_256 +0x5c1d 024595 jam sp_flag_standby ,mem_le_secure_connect_flag +0x5c1e 024596 fetch 1 ,mem_le_secure_connect_state +0x5c1f 024597 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key +0x5c20 024598 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key +0x5c21 024599 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key +0x5c22 024600 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey +0x5c23 024601 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey +0x5c24 024602 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm +0x5c25 024603 rtn +: 024606 le_sc_sm_passkey_wait_confirm: +0x5c26 024607 fetch 1 ,mem_authentication_passkey_times +0x5c27 024608 copy pdata ,queue +0x5c28 024609 increase 1 ,pdata +0x5c29 024610 store 1 ,mem_authentication_passkey_times +0x5c2a 024611 fetch 4 ,mem_le_tk +0x5c2b 024612 qisolate1 pdata +0x5c2c 024613 setarg 0x80 +0x5c2d 024614 setflag true ,0 ,pdata +0x5c2e 024615 store 1 ,mem_passkey_1bit +0x5c2f 024616 branch le_sc_sm_ready_send_pairing_confirm +: 024618 le_sc_sm_wait_confirm_gkey: +0x5c30 024619 fetch 1 ,mem_le_sc_confirm_gkey_flag +0x5c31 024620 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag +0x5c32 024621 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok +0x5c33 024622 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c34 024623 rtn +: 024625 le_sc_confirm_gkey_ok: +0x5c35 024626 jam bt_evt_le_pairing_success ,mem_fifo_temp +0x5c36 024627 call ui_ipc_send_event +0x5c37 024628 jam flag_le_pairing_after_auth ,mem_le_pairing_state +0x5c38 024629 branch le_send_smp_pairing_dhkey_check +: 024631 le_sc_sm_receive_dhkey: +0x5c39 024632 fetch 1 ,mem_sp_dhkey_invalid +0x5c3a 024633 beq sp_key_valid_256 ,le_dhkey_ready +0x5c3b 024634 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c3c 024635 rtn +: 024637 le_dhkey_ready: +0x5c3d 024638 call function_f5 +0x5c3e 024642 fetch 1 ,mem_le_pairing_mode +0x5c3f 024643 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common +0x5c40 024644 call le_set_tk_0 +: 024645 le_dhkey_ready_common: +0x5c41 024646 call function_f6_ea +0x5c42 024647 arg mem_aes_cmac_temp ,rega +0x5c43 024648 arg mem_sp_confirm_remote ,regb +0x5c44 024649 arg 16 ,loopcnt +0x5c45 024650 call string_compare +0x5c46 024651 branch le_dhkey_check_ok ,zero +: 024652 le_dhkey_check_fail: +0x5c47 024653 jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason +0x5c48 024654 branch le_send_pairing_failed +: 024657 le_dhkey_check_ok: +0x5c49 024658 call sp_calc_check_publickey_256 +0x5c4a 024659 nbranch le_dhkey_check_fail ,zero +0x5c4b 024660 jam 1 ,mem_ltk_exists +0x5c4c 024661 fetch 1 ,mem_le_pairing_mode +0x5c4d 024662 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok +0x5c4e 024663 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok +0x5c4f 024664 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c50 024665 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state +0x5c51 024666 rtn +: 024668 le_sc_sm_send_public_key: +0x5c52 024669 fetch 1 ,mem_le_pairing_mode +0x5c53 024670 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey +0x5c54 024671 jam 0 ,mem_passkey_1bit +: 024672 le_sc_sm_ready_send_pairing_confirm: +0x5c55 024673 branch le_send_smp_pairing_confirm +: 024675 le_sc_sm_send_public_key_passkey: +0x5c56 024679 jam 0 ,mem_authentication_passkey_times +0x5c57 024680 branch le_parse_smp_pairing_req_passkey +: 024683 le_sc_sm_receive_public_key: +0x5c58 024684 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c59 024685 fetch 1 ,mem_le_sc_local_key_invalid +0x5c5a 024686 beq sp_key_valid_256 ,le_public_key_ready +0x5c5b 024688 rtn +: 024690 le_public_key_ready: +0x5c5c 024691 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state +0x5c5d 024692 jam sp_key_invalid ,mem_sp_dhkey_invalid +0x5c5e 024693 branch sp_dhkey_calc_256 +: 024695 le_sc_sm_wait_send_public_key: +0x5c5f 024696 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c60 024697 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state +0x5c61 024698 branch le_send_smp_pairing_public_key +: 024702 le_fifo_malloc_tx_l2cap_smp: +0x5c62 024703 force le_l2cap_cid_smp ,regb +0x5c63 024704 branch le_fifo_malloc_tx_l2cap +: 024708 le_parse_ll: +0x5c64 024709 fetch 1 ,mem_le_rxbuf + 2 +0x5c65 024710 beq ll_connection_update_req ,le_parse_connection_update_req +0x5c66 024711 beq ll_channel_map_req ,le_parse_channel_map_req +0x5c67 024712 beq ll_terminate_ind ,le_parse_terminate_ind +0x5c68 024713 beq ll_enc_req ,le_parse_enc_req +0x5c69 024714 beq ll_enc_rsp ,le_parse_enc_rsp +0x5c6a 024715 beq ll_start_enc_req ,le_parse_start_enc_req +0x5c6b 024716 beq ll_start_enc_rsp ,le_parse_start_enc_rsp +0x5c6c 024717 beq ll_unknown_rsp ,le_parse_unknown_rsp +0x5c6d 024718 beq ll_feature_req ,le_parse_feature_req +0x5c6e 024719 beq ll_feature_rsp ,le_parse_feature_rsp +0x5c6f 024720 beq ll_pause_enc_req ,le_parse_pause_enc_req +0x5c70 024721 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp +0x5c71 024722 beq ll_version_ind ,le_parse_version_ind +0x5c72 024723 beq ll_reject_ind ,le_parse_reject_ind +0x5c73 024724 beq ll_ping_req ,le_parse_ping_req +0x5c74 024725 beq ll_ping_rsp ,le_parse_ping_rsp +0x5c75 024726 arg 2 ,rega +0x5c76 024727 arg ll_unknown_rsp ,regb +0x5c77 024728 call le_fifo_malloc_tx_ll +0x5c78 024729 fetch 1 ,mem_le_rxbuf + 2 +0x5c79 024730 istore 1 ,contw +0x5c7a 024731 rtn +: 024734 le_parse_connection_update_req: +0x5c7b 024735 ifetch 9 ,contr +0x5c7c 024736 store 9 ,mem_le_new_param +0x5c7d 024737 ifetch 2 ,contr +0x5c7e 024738 store 2 ,mem_le_instant +0x5c7f 024739 fetch 1 ,mem_le_state +0x5c80 024740 set1 lestate_update_param ,pdata +0x5c81 024741 store 1 ,mem_le_state +0x5c82 024742 rtn +: 024744 le_parse_channel_map_req: +0x5c83 024745 ifetch 5 ,contr +0x5c84 024746 store 5 ,mem_le_new_map +0x5c85 024747 ifetch 2 ,contr +0x5c86 024748 store 2 ,mem_le_instant +0x5c87 024749 fetcht 2 ,mem_le_event_count +0x5c88 024750 isub temp ,null +0x5c89 024751 nbranch le_parse_terminate_ind ,positive +0x5c8a 024752 fetch 1 ,mem_le_state +0x5c8b 024753 set1 lestate_update_map ,pdata +0x5c8c 024754 store 1 ,mem_le_state +0x5c8d 024755 rtn +: 024758 le_parse_terminate_ind: +0x5c8e 024759 setarg 20 +0x5c8f 024760 store 2 ,mem_le_superto +0x5c90 024761 store 2 ,mem_le_init_superto +0x5c91 024762 rtn +: 024764 le_send_terminate_ind_user_terminated: +0x5c92 024765 arg error_remote_user_terminated_connection ,regc +: 024768 le_send_terminate_ind: +0x5c93 024769 arg 2 ,rega +0x5c94 024770 arg ll_terminate_ind ,regb +0x5c95 024771 call le_fifo_malloc_tx_ll +0x5c96 024772 copy regc ,pdata +0x5c97 024773 istore 1 ,contw +0x5c98 024774 rtn +: 024776 le_parse_feature_req: +: 024778 le_send_feature_rsp: +0x5c99 024779 arg 9 ,rega +0x5c9a 024780 arg ll_feature_rsp ,regb +0x5c9b 024781 call le_fifo_malloc_tx_ll +0x5c9c 024782 setarg param_le_features +0x5c9d 024783 istore 8 ,contw +0x5c9e 024784 rtn +: 024787 le_parse_version_ind: +0x5c9f 024788 rtn master +: 024789 le_send_version_ind: +0x5ca0 024790 arg 6 ,rega +0x5ca1 024791 arg ll_version_ind ,regb +0x5ca2 024792 call le_fifo_malloc_tx_ll +0x5ca3 024793 fetch 5 ,mem_lmp_version +0x5ca4 024794 istore 5 ,contw +0x5ca5 024795 rtn +: 024798 le_parse_ping_req: +0x5ca6 024799 arg ll_ping_rsp ,regb +0x5ca7 024800 branch le_send_ll_one_lenth +: 024803 le_send_ll_one_lenth: +0x5ca8 024804 arg 1 ,rega +0x5ca9 024805 branch le_fifo_malloc_tx_ll +: 024808 le_parse_enc_req: +0x5caa 024809 ifetch 8 ,contr +0x5cab 024810 store 8 ,mem_le_rand +0x5cac 024811 ifetch 2 ,contr +0x5cad 024812 store 2 ,mem_le_ediv +0x5cae 024813 ifetch 8 ,contr +0x5caf 024814 store 8 ,mem_le_skdm +0x5cb0 024815 ifetch 4 ,contr +0x5cb1 024816 store 4 ,mem_le_ivm +0x5cb2 024817 call le_send_enc_rsp +0x5cb3 024818 bpatchx patch2f_2 ,mem_patch2f +0x5cb4 024819 fetch 1 ,mem_le_pairing_state +0x5cb5 024820 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth +0x5cb6 024821 fetch 1 ,mem_le_configuration +0x5cb7 024822 bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk +0x5cb8 024823 fetch 1 ,mem_nv_data_number +0x5cb9 024824 ncall load_device_list_mode_4 ,blank +0x5cba 024825 fetch 1 ,mem_ltk_exists +0x5cbb 024826 beq 0 ,le_ltk_lost +: 024827 le_parse_enc_req_after_auth: +0x5cbc 024828 jam flag_le_rcv_enc_start ,mem_le_enc_state +0x5cbd 024829 call le_send_start_enc_req +0x5cbe 024830 branch generate_sk +: 024832 le_parse_enc_req_fixed_ltk: +0x5cbf 024833 jam 1 ,mem_ltk_exists +0x5cc0 024834 arg mem_le_fixed_ltk ,contr +0x5cc1 024835 arg mem_le_ltk ,contw +0x5cc2 024836 call memcpy16 +0x5cc3 024837 branch le_parse_enc_req_after_auth +: 024840 le_ltk_lost: +0x5cc4 024841 bpatchx patch2f_3 ,mem_patch2f +0x5cc5 024842 jam flag_le_enc_null ,mem_le_enc_state +0x5cc6 024843 jam flag_le_enc_null ,mem_le_pairing_state +0x5cc7 024844 jam bt_evt_le_ltk_lost ,mem_fifo_temp +0x5cc8 024845 branch ui_ipc_send_event +: 024847 le_send_reject_ind: +0x5cc9 024848 arg 2 ,rega +0x5cca 024849 arg ll_reject_ind ,regb +0x5ccb 024850 call le_fifo_malloc_tx_ll +0x5ccc 024851 setarg le_err_pin_or_key_missing +0x5ccd 024852 istore 1 ,contw +0x5cce 024853 rtn +: 024855 le_send_enc_rsp: +0x5ccf 024856 arg mem_le_skds ,contw +0x5cd0 024857 force 8 ,loopcnt +0x5cd1 024858 call generate_random_loop +0x5cd2 024859 arg mem_le_ivs ,contw +0x5cd3 024860 force 4 ,loopcnt +0x5cd4 024861 call generate_random_loop +0x5cd5 024862 arg 13 ,rega +0x5cd6 024863 arg ll_enc_rsp ,regb +0x5cd7 024864 call le_fifo_malloc_tx_ll +0x5cd8 024865 fetch 8 ,mem_le_skds +0x5cd9 024866 istore 8 ,contw +0x5cda 024867 fetch 4 ,mem_le_ivs +0x5cdb 024868 istore 4 ,contw +0x5cdc 024869 rtn +: 024871 le_send_start_enc_req: +0x5cdd 024872 arg ll_start_enc_req ,regb +0x5cde 024873 branch le_send_ll_one_lenth +: 024875 le_send_start_enc_rsp: +0x5cdf 024876 arg ll_start_enc_rsp ,regb +0x5ce0 024877 branch le_send_ll_one_lenth +: 024880 le_parse_enc_rsp: +0x5ce1 024881 ifetch 8 ,contr +0x5ce2 024882 store 8 ,mem_le_skds +0x5ce3 024883 ifetch 4 ,contr +0x5ce4 024884 store 4 ,mem_le_ivs +0x5ce5 024885 branch generate_sk +: 024887 le_parse_start_enc_req: +0x5ce6 024888 fetch 1 ,mem_le_state +0x5ce7 024889 set1 lestate_encryption ,pdata +0x5ce8 024890 store 1 ,mem_le_state +0x5ce9 024891 rtn +: 024893 le_parse_start_enc_rsp: +0x5cea 024894 rtn master +0x5ceb 024895 jam bt_evt_le_start_enc ,mem_fifo_temp +0x5cec 024896 call ui_ipc_send_event +0x5ced 024897 jam flag_le_send_start_enc_rsp ,mem_le_enc_state +0x5cee 024898 branch le_send_start_enc_rsp +: 024900 le_parse_pause_enc_req: +0x5cef 024901 jam flag_le_enc_pause ,mem_le_enc_state +0x5cf0 024902 call le_send_pause_enc_rsp +0x5cf1 024903 jam bt_evt_le_pause_enc ,mem_fifo_temp +0x5cf2 024904 branch ui_ipc_send_event +: 024906 le_send_pause_enc_rsp: +0x5cf3 024907 arg ll_pause_enc_rsp ,regb +0x5cf4 024908 branch le_send_ll_one_lenth +: 024911 le_parse_feature_rsp: +: 024912 le_parse_unknown_rsp: +: 024913 le_parse_pause_enc_rsp: +: 024914 le_parse_reject_ind: +: 024915 le_parse_ping_rsp: +0x5cf5 024916 rtn +: 024923 init_lmp: +0x5cf6 024924 rtn wake +: 024925 init_lmp_work: +0x5cf7 024926 bpatchx patch2f_4 ,mem_patch2f +0x5cf8 024927 setarg 0 +0x5cf9 024928 store 1 ,mem_lmp_to_send +0x5cfa 024929 store 1 ,mem_conn_sm +0x5cfb 024930 store 1 ,mem_lmo_opcode1 +0x5cfc 024931 store 1 ,mem_lmo_opcode2 +0x5cfd 024932 store 1 ,mem_esco_addr +0x5cfe 024933 store 1 ,mem_auth_enable +0x5cff 024934 store 1 ,mem_connection_options +0x5d00 024935 store 1 ,mem_pairing_auth +0x5d01 024936 jam switch_flag_init ,mem_switch_flag +0x5d02 024937 jam 0 ,mem_switch_fail_master_count +0x5d03 024938 jam null_encryp ,mem_wait_encryption +: 024939 init_lmp_reinit: +0x5d04 024940 jam 0 ,mem_pairing_auth +0x5d05 024941 jam 0 ,mem_sp_localsm +0x5d06 024942 jam 0 ,mem_lmp_conn_state +: 024944 parse_rx_done: +0x5d07 024945 rtn +: 024947 parse_lmp: +0x5d08 024948 bpatchx patch2f_5 ,mem_patch2f +0x5d09 024949 call setlocalsm_master ,master +0x5d0a 024950 ncall setlocalsm_slave ,master +0x5d0b 024951 call lmo_fifo_check +0x5d0c 024952 nrtn blank +0x5d0d 024953 fetch 1 ,mem_state_map +0x5d0e 024954 rtnbit0 smap_rxlmp +0x5d0f 024955 set0 smap_rxlmp ,pdata +0x5d10 024956 set0 mark_rxbuf_inuse ,mark +0x5d11 024957 store 1 ,mem_state_map +0x5d12 024958 fetch 1 ,mem_rxbuf +0x5d13 024959 fetcht 1 ,mem_state_map +0x5d14 024960 isolate1 smap_lmptidinit ,pdata +0x5d15 024961 setflag true ,smap_lmptid ,temp +0x5d16 024962 storet 1 ,mem_state_map +0x5d17 024963 and_into 0x2 ,temp +0x5d18 024964 storet 1 ,mem_lmo_tid2 +0x5d19 024965 fetcht 1 ,mem_state_map +0x5d1a 024966 rshift pdata ,pdata +0x5d1b 024967 store 1 ,mem_lmi_opcode2 +0x5d1c 024968 bpatchx patch2f_6 ,mem_patch2f +0x5d1d 024969 fetch 1 ,mem_lmi_opcode2 +0x5d1e 024970 beq lmp_escape ,parse_lmp_escape +0x5d1f 024971 beq lmp_accepted ,parse_lmp_accepted +0x5d20 024972 beq lmp_not_accepted ,parse_lmp_not_accepted +0x5d21 024973 beq lmp_set_afh ,parse_lmp_set_afh +0x5d22 024974 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req +0x5d23 024975 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req +0x5d24 024976 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key +0x5d25 024977 beq lmp_auto_rate ,parse_lmp_auto_rate +0x5d26 024978 beq lmp_test_control ,parse_lmp_test_control +0x5d27 024979 beq lmp_test_activate ,parse_lmp_test_activate +0x5d28 024980 beq lmp_setup_complete ,parse_lmp_setup_complete +0x5d29 024981 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout +0x5d2a 024982 beq lmp_features_req ,parse_lmp_features_req +0x5d2b 024983 beq lmp_host_connection_req ,parse_lmp_conn_req +0x5d2c 024984 beq lmp_version_req ,parse_lmp_version_req +0x5d2d 024985 beq lmp_version_res ,parse_lmp_version_res +0x5d2e 024986 beq lmp_detach ,parse_lmp_detach +0x5d2f 024987 beq lmp_max_slot ,parse_lmp_max_slot +0x5d30 024988 beq lmp_max_slot_req ,parse_lmp_max_slot_req +0x5d31 024989 beq lmp_name_req ,parse_lmp_name_req +0x5d32 024990 beq lmp_name_res ,parse_lmp_name_res +0x5d33 024991 beq lmp_features_res ,parse_lmp_features_res +0x5d34 024992 beq lmp_comb_key ,parse_lmp_comb_key +0x5d35 024993 beq lmp_au_rand ,parse_lmp_au_rand +0x5d36 024994 beq lmp_in_rand ,parse_lmp_in_rand +0x5d37 024995 beq lmp_sres ,parse_lmp_sres +0x5d38 024996 beq lmp_incr_power_req ,parse_lmp_incr_power +0x5d39 024997 beq lmp_decr_power_req ,parse_lmp_decr_power +0x5d3a 024998 beq lmp_max_power ,parse_lmp_max_power +0x5d3b 024999 beq lmp_min_power ,parse_lmp_min_power +0x5d3c 025000 beq lmp_page_mode_req ,parse_lmp_page_mode_req +0x5d3d 025001 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req +0x5d3e 025002 beq lmp_preferred_rate ,parse_lmp_preferred_rate +0x5d3f 025003 beq lmp_slot_offset ,parse_lmp_slot_offset +0x5d40 025004 beq lmp_sniff_req ,parse_lmp_sniff_req +0x5d41 025005 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req +0x5d42 025006 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req +0x5d43 025007 beq lmp_switch_req ,parse_lmp_switch_req +0x5d44 025008 beq lmp_temp_rand ,parse_lmp_temp_rand +0x5d45 025009 beq lmp_temp_key ,parse_lmp_temp_key +0x5d46 025010 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req +0x5d47 025011 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res +0x5d48 025012 beq lmp_unit_key ,parse_lmp_unit_key +0x5d49 025013 beq lmp_unsniff_req ,parse_lmp_unsniff_req +0x5d4a 025014 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key +0x5d4b 025015 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header +0x5d4c 025016 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload +0x5d4d 025017 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm +0x5d4e 025018 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number +0x5d4f 025019 beq lmp_dhkey_check ,parse_dhkey_check +0x5d50 025020 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res +0x5d51 025021 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req +: 025024 reject_unknown_packet: +0x5d52 025025 jam unknown_lmp_pdu ,mem_lmo_reason2 +: 025026 reject_lmp_packet: +0x5d53 025027 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5d54 025028 rtn +: 025030 parse_lmp_clkoffset_req: +0x5d55 025031 jam lmp_clkoffset_res ,mem_lmo_opcode2 +0x5d56 025032 rtn +: 025034 parse_enc_key_size_mask_req: +0x5d57 025035 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 +0x5d58 025036 rtn +: 025038 parse_lmp_set_afh: +0x5d59 025039 fetch 4 ,mem_rxbuf + 1 +0x5d5a 025040 lshift pdata ,pdata +0x5d5b 025041 store 4 ,mem_afh_instant +0x5d5c 025042 fetch 1 ,mem_rxbuf + 5 +0x5d5d 025043 store 1 ,mem_afh_new_mod +0x5d5e 025044 fetch 5 ,mem_rxbuf + 6 +0x5d5f 025045 store 5 ,mem_afh_map_new +0x5d60 025046 fetch 5 ,mem_rxbuf + 11 +0x5d61 025047 istore 5 ,contw +0x5d62 025048 fetch 1 ,mem_mode +0x5d63 025049 set1 afh_change ,pdata +0x5d64 025050 store 1 ,mem_mode +0x5d65 025051 rtn +: 025052 parse_lmp_escape: +0x5d66 025053 bpatchx patch2f_7 ,mem_patch2f +0x5d67 025054 fetch 1 ,mem_rxbuf + 1 +0x5d68 025055 set1 7 ,pdata +0x5d69 025056 store 1 ,mem_lmi_opcode2 +0x5d6a 025057 beq lmp_ext_accepted ,parse_lmpext_accepted +0x5d6b 025058 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted +0x5d6c 025059 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req +0x5d6d 025060 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res +0x5d6e 025061 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req +0x5d6f 025062 beq lmp_ext_features_req ,parse_lmpext_features_req +0x5d70 025063 beq lmp_ext_features_res ,parse_lmpext_features_res +0x5d71 025064 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req +0x5d72 025065 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt +0x5d73 025066 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt +0x5d74 025067 beq lmp_io_cap_req ,parse_lmpext_iocap_req +0x5d75 025068 beq lmp_io_cap_res ,parse_lmpext_iocap_res +0x5d76 025069 rtneq lmp_ext_features_res +: 025072 reject_unknown_ext_packet: +0x5d77 025073 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +0x5d78 025074 jam unknown_lmp_pdu ,mem_lmo_reason2 +0x5d79 025076 rtn +: 025077 parse_lmpext_chn_classification_req: +0x5d7a 025078 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +0x5d7b 025079 jam not_support_chn_classification ,mem_lmo_reason2 +0x5d7c 025080 rtn +: 025082 parse_lmpext_iocap_req: +0x5d7d 025083 call iocap_lmpext_load +0x5d7e 025084 jam lmp_io_cap_res ,mem_lmo_opcode2 +0x5d7f 025085 rtn +: 025087 parse_lmpext_iocap_res: +0x5d80 025088 call iocap_lmpext_load +0x5d81 025089 branch iocap_lmpext_common +: 025091 iocap_lmpext_load: +0x5d82 025092 arg mem_sp_iocap_remote ,contw +0x5d83 025093 fetch 3 ,mem_rxbuf + 2 +0x5d84 025094 istore 3 ,contw +0x5d85 025095 rtn +: 025097 iocap_lmpext_common: +0x5d86 025098 branch master_set_mem_master_sp_flag ,true +0x5d87 025099 rtn +: 025100 parse_lmpext_accepted: +0x5d88 025101 fetch 1 ,mem_rxbuf + 3 +0x5d89 025102 set1 7 ,pdata +0x5d8a 025103 store 1 ,mem_lmi_accepted_opcode +0x5d8b 025104 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt +0x5d8c 025105 rtn +: 025108 parse_lmpext_not_accepted: +0x5d8d 025109 fetch 1 ,mem_rxbuf + 3 +0x5d8e 025110 set1 7 ,pdata +0x5d8f 025111 store 1 ,mem_lmi_accepted_opcode +0x5d90 025112 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt +0x5d91 025113 rtn +: 025115 parse_lmpext_accepted_ptt: +0x5d92 025116 fetch 1 ,mem_ptt +0x5d93 025117 fetcht 1 ,mem_state_map +0x5d94 025118 nsetflag blank ,smap_edr ,temp +0x5d95 025119 storet 1 ,mem_state_map +: 025120 parse_lmpext_not_accepted_ptt: +0x5d96 025121 fetch 1 ,mem_state +0x5d97 025122 rtnbit0 state_init_seq +0x5d98 025123 set0 state_init_seq ,pdata +0x5d99 025124 store 1 ,mem_state +0x5d9a 025125 fetch 1 ,mem_auth_enable +0x5d9b 025126 nrtn blank +0x5d9c 025127 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5d9d 025128 rtn +: 025130 parse_lmpext_pause_encrypt: +0x5d9e 025131 nbranch parse_lmpext_pause_encrypt_slave ,master +0x5d9f 025132 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x5da0 025133 branch tid_reply +: 025135 parse_lmpext_pause_encrypt_slave: +0x5da1 025136 jam lmp_pause_encryption_req ,mem_lmo_opcode2 +0x5da2 025137 rtn +: 025139 parse_lmpext_resume_encrypt: +0x5da3 025142 call tid_reply +0x5da4 025143 branch lmp_start_encryption +: 025145 parse_lmpext_features_req: +0x5da5 025146 jam lmp_ext_features_res ,mem_lmo_opcode2 +0x5da6 025147 rtn +: 025149 parse_lmpext_features_res: +0x5da7 025150 fetcht 1 ,mem_rxbuf + 4 +0x5da8 025151 and temp ,0x1 ,temp +0x5da9 025152 storet 1 ,mem_remote_sppcap +0x5daa 025153 fetch 1 ,mem_hci_cmd +0x5dab 025154 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci +0x5dac 025155 jam 0 ,mem_hci_cmd +: 025156 parse_lmpext_features_res_not_hci: +0x5dad 025157 fetch 1 ,mem_conn_sm +0x5dae 025158 rtnne conn_sm_wait_features_ext +0x5daf 025159 jam conn_sm_send_conn_req ,mem_conn_sm +0x5db0 025160 branch process_conn_sm +: 025162 parse_lmp_accepted: +0x5db1 025163 bpatchx patch30_0 ,mem_patch30 +0x5db2 025164 fetch 1 ,mem_rxbuf + 1 +0x5db3 025165 store 1 ,mem_lmi_accepted_opcode +0x5db4 025166 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn +0x5db5 025167 beq lmp_in_rand ,parse_lmp_accepted_inrand +0x5db6 025168 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode +0x5db7 025169 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize +0x5db8 025170 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc +0x5db9 025171 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc +0x5dba 025172 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req +0x5dbb 025173 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req +0x5dbc 025174 beq lmp_switch_req ,parse_lmp_accepted_switch +0x5dbd 025176 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header +0x5dbe 025177 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload +0x5dbf 025178 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number +0x5dc0 025179 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check +0x5dc1 025180 rtn +: 025182 parse_lmp_not_accepted: +0x5dc2 025183 bpatchx patch30_1 ,mem_patch30 +0x5dc3 025184 fetch 1 ,mem_rxbuf + 1 +0x5dc4 025185 store 1 ,mem_lmi_accepted_opcode +0x5dc5 025186 beq lmp_name_req ,parse_lmp_not_accepted_name_req +0x5dc6 025187 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn +0x5dc7 025188 beq lmp_au_rand ,parse_lmp_not_accepted_aurand +0x5dc8 025189 beq lmp_in_rand ,parse_lmp_not_accepted_inrand +0x5dc9 025190 beq lmp_switch_req ,parse_lmp_not_accepted_switch +0x5dca 025192 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number +0x5dcb 025193 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check +0x5dcc 025194 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req +0x5dcd 025195 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req +0x5dce 025196 rtn +: 025198 parse_lmp_accepted_switch: +0x5dcf 025199 jam bt_evt_switch_accept ,mem_fifo_temp +0x5dd0 025200 call ui_ipc_send_event +0x5dd1 025201 branch role_switch_prepare0 +: 025202 parse_lmp_not_accepted_switch: +0x5dd2 025203 jam bt_evt_switch_not_accept ,mem_fifo_temp +0x5dd3 025204 call ui_ipc_send_event +0x5dd4 025205 jam switch_flag_not_accept ,mem_switch_flag +0x5dd5 025206 setarg timer_switch_waite +0x5dd6 025207 arg switch_wait_timer ,queue +0x5dd7 025208 branch timer_init +: 025211 parse_lmp_accepted_hostconn: +0x5dd8 025214 fetch 1 ,mem_lmp_conn_state +0x5dd9 025215 set1 received_conn_req ,pdata +0x5dda 025216 store 1 ,mem_lmp_conn_state +0x5ddb 025217 jam bt_evt_bb_connected ,mem_fifo_temp +0x5ddc 025218 call ui_ipc_send_event +0x5ddd 025219 jam lmp_packet_type_table_req ,mem_lmo_opcode2 +: 025221 parse_lmp_accepted_hostconn_ctn: +0x5dde 025223 fetch 1 ,mem_conn_sm +0x5ddf 025224 bne conn_sm_wait_conn_accept ,parse_rx_done +0x5de0 025227 jam conn_sm_auth_pair ,mem_conn_sm +0x5de1 025228 rtn +: 025236 parse_lmp_not_accepted_hostconn: +0x5de2 025237 jam acl_connection_already_exists ,mem_disconn_reason_send +0x5de3 025238 jam lmp_detach ,mem_lmo_opcode2 +0x5de4 025240 jam conn_sm_standby ,mem_conn_sm +0x5de5 025242 branch parse_rx_done ,true +0x5de6 025243 rtn +: 025245 parse_lmp_accepted_inrand: +0x5de7 025246 fetch 1 ,mem_link_key_exists +0x5de8 025247 nrtn blank +0x5de9 025248 call clear_linkkey +0x5dea 025249 call lmp_generate_key +0x5deb 025250 rtn master +0x5dec 025251 set1 mark_slave_in_rand_accepted ,mark +0x5ded 025252 rtn +: 025254 parse_lmp_accepted_enc_mode: +0x5dee 025255 nrtn master +0x5def 025256 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +0x5df0 025257 fetch 1 ,mem_state_map +0x5df1 025258 rtnbit0 smap_encryption +0x5df2 025259 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x5df3 025260 rtn +: 025262 parse_lmp_accepted_enc_keysize: +0x5df4 025263 branch lmp_start_encryption +: 025265 parse_lmp_accepted_start_enc: +0x5df5 025266 call send_create_conn_start_l2cap_timer_sm +0x5df6 025267 fetch 1 ,mem_state +0x5df7 025268 rtnbit1 state_conn_comp +0x5df8 025269 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5df9 025270 fetch 1 ,mem_conn_sm +0x5dfa 025271 rtnne conn_sm_encrypt_wait +0x5dfb 025272 jam conn_sm_encrypt_wait_clear ,mem_conn_sm +0x5dfc 025273 rtn +: 025275 parse_lmp_accepted_stop_enc: +0x5dfd 025283 rtn +: 025285 parse_lmp_not_accepted_aurand: +: 025286 parse_lmp_not_accepted_aurand_send_detach: +0x5dfe 025287 jam lmp_detach ,mem_lmo_opcode2 +0x5dff 025288 jam other_end_terminated ,mem_disconn_reason_send +0x5e00 025289 rtn +: 025291 parse_lmp_not_accepted_inrand: +0x5e01 025292 fetch 1 ,mem_rxbuf + 2 +0x5e02 025293 beq key_missing ,parse_lmp_inrand_key_missing +0x5e03 025294 rtnne pairing_not_allowed +0x5e04 025295 jam pairing_not_allowed ,mem_disconn_reason_send +0x5e05 025296 jam lmp_detach ,mem_lmo_opcode2 +0x5e06 025297 rtn +: 025298 parse_lmp_inrand_key_missing: +0x5e07 025299 jam key_missing ,mem_disconn_reason_send +0x5e08 025300 jam lmp_detach ,mem_lmo_opcode2 +0x5e09 025301 rtn +: 025303 parse_lmp_not_accepted_name_req: +0x5e0a 025304 rtn +: 025306 parse_lmp_not_accepted_simple_pairing_number: +0x5e0b 025307 jam sp_stat_null ,mem_sp_state +0x5e0c 025308 jam lmp_detach ,mem_lmo_opcode2 +0x5e0d 025309 branch parse_rx_done +: 025311 parse_lmp_not_accepted_dhkey_check: +0x5e0e 025312 jam sp_stat_null ,mem_sp_state +0x5e0f 025313 jam lmp_detach ,mem_lmo_opcode2 +0x5e10 025314 branch parse_rx_done +: 025315 parse_lmp_not_accepted_unsniff_req: +0x5e11 025316 jam bt_evt_unsniff_not_accept ,mem_fifo_temp +0x5e12 025317 branch ui_ipc_send_event +: 025319 parse_lmp_accepted_unsniff_req: +0x5e13 025320 jam bt_evt_unsniff_accept ,mem_fifo_temp +0x5e14 025321 call ui_ipc_send_event +0x5e15 025322 branch sniff_exit +: 025324 parse_lmp_accepted_sniff_req: +0x5e16 025325 jam bt_evt_sniff_accept ,mem_fifo_temp +0x5e17 025326 call ui_ipc_send_event +0x5e18 025327 setarg 0 +0x5e19 025328 store 2 ,mem_dsniff +0x5e1a 025329 fetch 2 ,mem_sniff_param_interval +0x5e1b 025330 lshift pdata ,pdata +0x5e1c 025331 store 2 ,mem_tsniff +0x5e1d 025332 fetch 1 ,mem_sniff_param_attempt +0x5e1e 025333 store 1 ,mem_sniff_attempt +0x5e1f 025334 fetch 1 ,mem_sniff_param_timeout +0x5e20 025335 store 1 ,mem_sniff_timeout +0x5e21 025336 branch sniff_init +: 025338 parse_lmp_not_acdcept_sniff_req: +0x5e22 025339 jam bt_evt_sniff_not_accept ,mem_fifo_temp +0x5e23 025340 branch ui_ipc_send_event +: 025342 parse_lmp_crypt_key: +0x5e24 025343 fetcht 1 ,mem_rxbuf + 1 +0x5e25 025344 storet 1 ,mem_key_size +0x5e26 025345 branch accept_lmp_msg +: 025347 parse_lmp_setup_complete: +0x5e27 025348 fetch 1 ,mem_lmp_conn_state +0x5e28 025349 set1 received_setup_complete ,pdata +0x5e29 025350 store 1 ,mem_lmp_conn_state +0x5e2a 025351 rtnbit1 sent_setup_complete +0x5e2b 025352 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5e2c 025353 branch parse_rx_done +: 025355 parse_lmp_max_slot: +0x5e2d 025358 rtn +: 025360 parse_lmp_max_slot_req: +0x5e2e 025361 fetch 1 ,mem_max_slot +0x5e2f 025362 fetcht 1 ,mem_rxbuf + 1 +0x5e30 025363 isub temp ,null +0x5e31 025365 branch accept_lmp_msg ,positive +0x5e32 025366 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5e33 025367 jam unspecified_error ,mem_lmo_reason2 +0x5e34 025368 jam lmp_max_slot_req ,mem_lmi_opcode2 +0x5e35 025369 rtn +: 025371 parse_lmp_detach: +0x5e36 025372 call prepare_disconnect +0x5e37 025373 branch accept_lmp_msg +: 025375 accept_lmp_msg: +0x5e38 025376 jam lmp_accepted ,mem_lmo_opcode2 +0x5e39 025377 rtn +: 025379 parse_lmp_incr_power: +0x5e3a 025380 jam lmp_max_power ,mem_lmo_opcode2 +0x5e3b 025381 rtn +: 025383 parse_lmp_decr_power: +0x5e3c 025384 jam lmp_min_power ,mem_lmo_opcode2 +0x5e3d 025385 rtn +: 025387 parse_lmp_version_res: +0x5e3e 025388 fetch 1 ,mem_conn_sm +0x5e3f 025389 rtneq conn_sm_wait_version +0x5e40 025391 jam conn_sm_send_features ,mem_conn_sm +0x5e41 025393 rtn +: 025396 parse_lmp_auto_rate: +0x5e42 025397 rtn +: 025399 parse_lmp_in_rand: +0x5e43 025400 call lmp_copy_rand +0x5e44 025401 jam pincode_state_wait_pincode ,mem_pincode_state +0x5e45 025402 jam bt_evt_pincode_req ,mem_fifo_temp +0x5e46 025403 call ui_ipc_send_event +0x5e47 025405 call tid_check +0x5e48 025406 nbranch lmp_accept_inrand ,true +0x5e49 025408 nbranch parse_lmp_inrand_res ,master +0x5e4a 025409 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5e4b 025410 jam lmp_in_rand ,mem_lmi_opcode2 +0x5e4c 025411 jam transaction_collision ,mem_lmo_reason2 +0x5e4d 025412 rtn +: 025413 parse_lmp_inrand_res: +0x5e4e 025414 fetch 1 ,mem_op +0x5e4f 025415 set1 op_inrand_req ,pdata +0x5e50 025416 store 1 ,mem_op +0x5e51 025417 rtn +: 025420 pop_tid_follow: +0x5e52 025421 fetcht 1 ,mem_state_map +0x5e53 025422 nsetflag blank ,smap_lmptid ,temp +0x5e54 025423 storet 1 ,mem_state_map +0x5e55 025424 rtn +: 025427 push_tid_follow: +0x5e56 025428 fetch 1 ,mem_lmo_tid2 +0x5e57 025429 rshift pdata ,pdata +0x5e58 025430 and_into 1 ,pdata +0x5e59 025431 rtn +: 025433 parse_lmp_au_rand_moudle: +0x5e5a 025434 fetch 1 ,mem_nv_data_number +0x5e5b 025435 rtn blank +0x5e5c 025436 fetch 1 ,mem_pairing_auth +0x5e5d 025437 call load_device_list ,blank +0x5e5e 025438 rtn +: 025440 parse_lmp_au_rand: +0x5e5f 025441 call parse_lmp_au_rand_moudle +0x5e60 025442 call push_tid_follow +0x5e61 025443 store 1 ,mem_sres_tid +0x5e62 025444 call lmp_copy_rand +0x5e63 025445 jam lmp_sres ,mem_lmo_opcode2 +0x5e64 025446 fetch 1 ,mem_link_key_exists +0x5e65 025447 nrtn blank +0x5e66 025448 fetch 1 ,mem_state +0x5e67 025449 rtnbit1 state_combkey +0x5e68 025450 jam key_missing ,mem_lmo_reason2 +0x5e69 025451 branch reject_lmp_packet +: 025453 parse_lmp_sres: +0x5e6a 025454 arg mem_plap ,rega +0x5e6b 025455 call function_e1 +0x5e6c 025456 fetch 4 ,mem_rxbuf + 1 +0x5e6d 025457 fetcht 4 ,mem_input_store +0x5e6e 025458 isub temp ,null +0x5e6f 025459 branch authentication_ok ,zero +0x5e70 025460 jam lmp_detach ,mem_lmo_opcode2 +0x5e71 025461 jam authentication_failure_error ,mem_disconn_reason_send +0x5e72 025462 rtn +: 025463 authentication_ok: +0x5e73 025464 call authentication_ok_common +0x5e74 025465 fetch 1 ,mem_ssp_enable +0x5e75 025466 branch pairing_success ,blank +0x5e76 025467 rtn +: 025470 authentication_ok_common: +0x5e77 025471 call copy_aco +0x5e78 025472 call linkkey_ready +0x5e79 025473 fetch 1 ,mem_op +0x5e7a 025474 isolate1 op_auth_req ,pdata +0x5e7b 025475 set0 op_auth_req ,pdata +0x5e7c 025476 store 1 ,mem_op +0x5e7d 025477 fetch 1 ,mem_conn_sm +0x5e7e 025478 beq conn_sm_auth_wait ,authentication_ok_conn_sm +0x5e7f 025479 beq conn_sm_pairing_wait ,authentication_ok_conn_sm +0x5e80 025480 rtn +: 025481 authentication_ok_conn_sm: +0x5e81 025482 fetch 1 ,mem_pairing_auth +0x5e82 025483 rtnne defalt_pairing_auth +0x5e83 025484 fetch 1 ,mem_state_map +0x5e84 025485 rtnbit1 smap_encryption +0x5e85 025486 branch host_create_conn_encrypt +: 025488 parse_lmp_comb_key: +0x5e86 025489 arg mem_rxbuf + 1 ,rega +0x5e87 025490 arg mem_kinit ,regb +0x5e88 025491 arg mem_random_number ,contw +0x5e89 025492 call xor16 +0x5e8a 025493 arg mem_plap ,rega +0x5e8b 025494 call generate_linkkey +0x5e8c 025495 jam lmp_au_rand ,mem_lmo_opcode2 +0x5e8d 025496 fetch 1 ,mem_state +0x5e8e 025497 bbit0 state_combkey ,lmp_generate_key +0x5e8f 025498 rtn +: 025500 parse_lmp_name_res: +0x5e90 025501 fetch 2 ,mem_len +0x5e91 025502 add pdata ,-3 ,loopcnt +0x5e92 025503 fetcht 1 ,mem_rxbuf + 1 +0x5e93 025504 setarg mem_tmp_buffer +0x5e94 025505 iadd temp ,contw +0x5e95 025506 arg mem_rxbuf + 3 ,contr +0x5e96 025507 call memcpy +0x5e97 025508 fetcht 1 ,mem_name_offset +0x5e98 025509 fetch 1 ,mem_rxbuf + 2 +0x5e99 025510 isub temp ,pdata +0x5e9a 025511 sub pdata ,14 ,null +0x5e9b 025512 branch parse_lmp_name_res_end ,positive +0x5e9c 025513 add temp ,14 ,pdata +0x5e9d 025514 store 1 ,mem_name_offset +0x5e9e 025515 jam lmp_name_req ,mem_lmo_opcode2 +0x5e9f 025516 rtn +: 025517 parse_lmp_name_res_end: +0x5ea0 025518 fetch 1 ,mem_state_map +0x5ea1 025519 set1 smap_name_res ,pdata +0x5ea2 025520 store 1 ,mem_state_map +0x5ea3 025521 bbit1 smap_name_req ,lmp_disconnect +0x5ea4 025522 rtn +: 025523 parse_lmp_name_req: +0x5ea5 025524 fetch 1 ,mem_rxbuf + 1 +0x5ea6 025525 store 1 ,mem_lmi_opcode2 +0x5ea7 025526 jam lmp_name_res ,mem_lmo_opcode2 +0x5ea8 025527 rtn +: 025529 parse_lmp_conn_req: +0x5ea9 025530 branch accept_lmp_msg +: 025532 parse_lmp_timing_accuracy_req: +0x5eaa 025533 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 +0x5eab 025534 rtn +: 025536 parse_lmp_features_req: +0x5eac 025537 jam lmp_features_res ,mem_lmo_opcode2 +0x5ead 025538 rtn +: 025540 parse_lmp_version_req: +0x5eae 025541 jam lmp_version_res ,mem_lmo_opcode2 +0x5eaf 025542 rtn +: 025544 parse_lmp_supervision_timeout: +0x5eb0 025547 rtn +: 025551 parse_lmp_sniff_subrating_req: +0x5eb1 025552 fetch 2 ,mem_tsniff +0x5eb2 025553 iforce temp +0x5eb3 025554 fetch 1 ,mem_rxbuf + 2 +0x5eb4 025555 store 1 ,mem_subsniff_rate +0x5eb5 025556 imul32 temp ,temp +0x5eb6 025557 fetch 2 ,mem_rxbuf + 3 +0x5eb7 025558 lshift pdata ,pdata +0x5eb8 025559 store 2 ,mem_subsniff_tcmax +0x5eb9 025560 fetch 4 ,mem_rxbuf + 5 +0x5eba 025561 lshift pdata ,pdata +0x5ebb 025562 store 4 ,mem_subsniff_instant +0x5ebc 025564 deposit temp +0x5ebd 025565 store 2 ,mem_subsniff_tsniff +0x5ebe 025566 rtn +: 025567 parse_lmpext_packet_type_table_req: +0x5ebf 025568 fetcht 1 ,mem_ptt +0x5ec0 025569 fetch 1 ,mem_rxbuf + 2 +0x5ec1 025570 ixor temp ,null +0x5ec2 025571 nbranch reject_unknown_ext_packet ,zero +0x5ec3 025572 isolate1 0 ,pdata +0x5ec4 025573 fetch 1 ,mem_state_map +0x5ec5 025574 setflag true ,smap_edr ,pdata +0x5ec6 025575 store 1 ,mem_state_map +0x5ec7 025576 jam lmp_ext_accepted ,mem_lmo_opcode2 +0x5ec8 025577 jam lmp_packet_type_table_req ,mem_lmi_opcode2 +0x5ec9 025578 rtn +: 025581 parse_lmp_sniff_subrating_res: +: 025582 parse_lmp_preferred_rate: +: 025583 parse_lmp_max_power: +: 025584 parse_lmp_min_power: +0x5eca 025585 rtn +: 025586 parse_lmp_page_mode_req: +0x5ecb 025588 branch accept_lmp_msg +: 025589 parse_lmp_page_scan_mode_req: +0x5ecc 025592 branch accept_lmp_msg +: 025596 parse_lmp_slot_offset: +0x5ecd 025597 fetch 2 ,mem_rxbuf + 1 +0x5ece 025598 store 2 ,mem_slot_offset +0x5ecf 025599 rtn +: 025601 parse_lmp_sniff_req_check_sniff_para: +0x5ed0 025602 fetch 2 ,mem_rxbuf + 4 +0x5ed1 025603 fetcht 1 ,mem_lpm_mult +0x5ed2 025604 imul32 temp ,pdata +0x5ed3 025605 arg 0x640 ,temp +0x5ed4 025606 isub temp ,null +0x5ed5 025608 rtn +: 025610 parse_lmp_sniff_req: +0x5ed6 025611 fetch 2 ,mem_rxbuf + 6 +0x5ed7 025612 branch lmp_reject_sniff ,blank +0x5ed8 025613 call parse_lmp_sniff_req_check_sniff_para +0x5ed9 025614 branch lmp_reject_sniff ,positive +0x5eda 025615 fetch 1 ,mem_device_option +0x5edb 025616 sub pdata ,dvc_op_module ,null +0x5edc 025617 call module_set_lpm_mult_2 ,zero +0x5edd 025618 fetch 1 ,mem_state +0x5ede 025619 bbit1 state_insniff ,lmp_reject_sniff +0x5edf 025620 fetch 2 ,mem_rxbuf + 2 +0x5ee0 025621 lshift pdata ,pdata +0x5ee1 025622 store 2 ,mem_dsniff +0x5ee2 025623 fetch 2 ,mem_rxbuf + 4 +0x5ee3 025624 lshift pdata ,pdata +0x5ee4 025625 store 2 ,mem_tsniff +0x5ee5 025626 fetch 2 ,mem_rxbuf + 6 +0x5ee6 025627 store 1 ,mem_sniff_attempt +0x5ee7 025628 iforce temp +0x5ee8 025629 fetch 2 ,mem_rxbuf + 8 +0x5ee9 025630 store 1 ,mem_sniff_timeout +0x5eea 025631 isub temp ,null +0x5eeb 025632 nbranch set_big_value_to_attempt ,positive +0x5eec 025633 store 1 ,mem_sniff_attempt +: 025634 set_big_value_to_attempt: +0x5eed 025636 jam lmp_accepted ,mem_lmo_opcode2 +0x5eee 025637 jam lmp_sniff_req ,mem_lmi_opcode2 +0x5eef 025638 rtn +: 025640 lmp_reject_sniff: +0x5ef0 025641 jam pdu_not_allowed ,mem_lmo_reason2 +0x5ef1 025642 branch reject_lmp_packet +: 025644 parse_lmp_start_encryption_req: +0x5ef2 025645 call accept_lmp_msg +0x5ef3 025646 call lmp_copy_rand +0x5ef4 025647 call function_e3 +0x5ef5 025648 branch start_encryption +: 025650 parse_lmp_stop_encryption_req: +0x5ef6 025651 call accept_lmp_msg +0x5ef7 025652 branch stop_encryption +: 025655 parse_lmp_switch_req: +0x5ef8 025656 fetch 4 ,mem_rxbuf + 1 +0x5ef9 025657 lshift pdata ,pdata +0x5efa 025659 branch parse_lmp_switch_accept ,master +0x5efb 025660 fetcht 1 ,mem_link_key_exists +0x5efc 025661 nbranch parse_lmp_switch_req_clear_mark ,blank +: 025662 parse_lmp_switch_req_not_accept: +0x5efd 025663 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5efe 025664 jam lmp_switch_req ,mem_lmi_opcode2 +0x5eff 025665 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f00 025666 rtn +: 025667 parse_lmp_switch_req_clear_mark: +0x5f01 025668 jam lmp_slot_offset ,mem_lmo_opcode2 +0x5f02 025669 jam 0 ,mem_conn_sm +0x5f03 025670 branch role_switch_prepare +: 025672 parse_lmp_switch_accept: +0x5f04 025673 call role_switch_prepare +0x5f05 025674 set1 mark_reconn_recieve_switch ,mark +0x5f06 025675 fetch 1 ,mem_connection_options +0x5f07 025676 set0 connection_switch ,pdata +0x5f08 025677 store 1 ,mem_connection_options +0x5f09 025678 branch accept_lmp_msg +: 025682 parse_lmp_temp_rand: +: 025683 parse_lmp_temp_key: +: 025684 parse_lmp_timing_accuracy_res: +: 025685 parse_lmp_unit_key: +: 025686 parse_lmp_use_semi_permanend_key: +0x5f0a 025687 rtn +: 025690 parse_lmp_unsniff_req: +0x5f0b 025691 jam lmp_accepted ,mem_lmo_opcode2 +0x5f0c 025692 jam lmp_unsniff_req ,mem_lmi_opcode2 +0x5f0d 025693 jam bt_evt_remote_unsniff ,mem_fifo_temp +0x5f0e 025694 call ui_ipc_send_event +0x5f0f 025695 branch sniff_exit +: 025697 parse_lmp_encapsulated_header: +0x5f10 025698 fetch 1 ,mem_rxbuf + 1 +0x5f11 025699 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject +0x5f12 025700 fetch 1 ,mem_rxbuf + 2 +0x5f13 025701 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject +0x5f14 025702 fetch 1 ,mem_rxbuf + 3 +0x5f15 025703 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject +0x5f16 025704 call check_localsm +0x5f17 025705 branch parse_lmp_encapsulated_header_master ,true +0x5f18 025706 jam sp_stat_key_recv ,mem_sp_state +: 025707 parse_lmp_encapsulated_header_master: +0x5f19 025708 jam lmp_accepted ,mem_lmo_opcode2 +0x5f1a 025709 jam lmp_encapsulated_header ,mem_lmi_opcode2 +0x5f1b 025710 branch parse_rx_done +: 025712 parse_lmp_encapsulated_header_reject: +0x5f1c 025713 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f1d 025714 branch reject_lmp_packet +: 025716 parse_lmp_accepted_encapsulated_header: +0x5f1e 025719 jam lmp_encapsulated_payload ,mem_lmo_opcode2 +0x5f1f 025721 rtn +: 025722 parse_lmp_accepted_simple_pairing_number: +0x5f20 025723 fetch 1 ,mem_ssp_mode_flag +0x5f21 025724 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin +0x5f22 025725 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey +: 025726 parse_lmp_accepted_simple_pairing_number_common: +0x5f23 025727 call check_localsm +0x5f24 025728 rtn true +0x5f25 025729 jam sp_stat_confirm_recv ,mem_sp_state +0x5f26 025730 rtn +: 025732 parse_lmp_accepted_simple_pairing_number_ssp_pin: +0x5f27 025733 call g_noninit_number_confirm +0x5f28 025734 jam bt_evt_bt_gkey_generate ,mem_fifo_temp +0x5f29 025735 call ui_ipc_send_event +0x5f2a 025736 branch parse_lmp_accepted_simple_pairing_number_common +: 025739 parse_lmp_accepted_simple_pairing_number_passkey: +0x5f2b 025740 call check_localsm +0x5f2c 025741 rtn true +0x5f2d 025742 fetch 1 ,mem_authentication_passkey_times +0x5f2e 025743 beq 19 ,authentication_passkey_end +0x5f2f 025744 increase 1 ,pdata +0x5f30 025745 store 1 ,mem_authentication_passkey_times +: 025748 authentication_passkey: +0x5f31 025749 jam sp_flag_commit ,mem_sp_flag +0x5f32 025750 jam sp_stat_commit_calc ,mem_sp_state +0x5f33 025751 fetch 1 ,mem_authentication_passkey_times +0x5f34 025752 copy pdata ,queue +0x5f35 025753 fetch 6 ,mem_pin +0x5f36 025754 qisolate1 pdata +0x5f37 025755 setarg 0x80 +0x5f38 025756 setflag true ,0 ,pdata +0x5f39 025757 store 1 ,mem_passkey_1bit +0x5f3a 025758 rtn +: 025760 authentication_passkey_end: +0x5f3b 025761 jam sp_stat_confirm_recv ,mem_sp_state +0x5f3c 025762 rtn +: 025764 parse_lmp_accepted_dhkey_check: +0x5f3d 025765 call parse_lmp_accepted_dhkey_check_common +: 025766 pairing_success: +0x5f3e 025767 fetch 1 ,mem_flag_pairing_state +0x5f3f 025768 rtn blank +0x5f40 025769 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state +0x5f41 025770 jam bt_evt_bt_pairing_success ,mem_fifo_temp +0x5f42 025771 branch ui_ipc_send_event +: 025774 parse_lmp_accepted_dhkey_check_common: +0x5f43 025776 call check_localsm +0x5f44 025777 ncall g_noninit ,true +0x5f45 025778 call g_init ,true +0x5f46 025779 call check_localsm +0x5f47 025780 rtn true +0x5f48 025781 jam sp_stat_link_key_calc ,mem_sp_state +0x5f49 025782 jam sp_flag_commit ,mem_sp_flag +0x5f4a 025783 rtn +: 025785 parse_simple_pairing_confirm: +0x5f4b 025786 arg mem_sp_confirm_remote ,contw +0x5f4c 025787 arg mem_rxbuf + 1 ,contr +0x5f4d 025788 call memcpy16 +0x5f4e 025789 fetch 1 ,mem_ssp_mode_flag +0x5f4f 025790 rtneq ssp_mode_passkey_entry_flag +0x5f50 025791 branch master_set_mem_master_sp_flag +: 025793 parse_lmp_encapsulated_payload: +0x5f51 025794 fetch 1 ,mem_master_sp_state +0x5f52 025795 beq sp_stat_random_send ,parse_encapsulated_payload_master +0x5f53 025796 fetch 1 ,mem_sp_state +0x5f54 025797 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject +: 025798 parse_encapsulated_payload_master: +0x5f55 025799 fetch 1 ,mem_sp_remote_key_recv_count +0x5f56 025800 sub pdata ,0x20 ,contw +0x5f57 025801 nbranch parse_lmp_encapsulated_payload_reject ,positive +0x5f58 025802 arg mem_sp_pubkey_remote ,contw +0x5f59 025803 iadd contw ,contw +0x5f5a 025804 fetch 8 ,mem_rxbuf + 1 +0x5f5b 025805 istore 8 ,contw +0x5f5c 025806 fetch 8 ,mem_rxbuf + 9 +0x5f5d 025807 istore 8 ,contw +0x5f5e 025808 fetch 1 ,mem_sp_remote_key_recv_count +0x5f5f 025809 increase 16 ,pdata +0x5f60 025810 store 1 ,mem_sp_remote_key_recv_count +0x5f61 025811 bne encapsulated_len_p192 ,accept_lmp_msg +: 025812 parse_lmp_encapsulated_payload_completed: +0x5f62 025813 call check_localsm +0x5f63 025814 branch accept_lmp_msg ,true +0x5f64 025815 jam sp_key_valid ,mem_sp_remote_key_invalid +0x5f65 025816 jam sp_stat_key_generate ,mem_sp_state +0x5f66 025817 jam sp_flag_commit ,mem_sp_flag +0x5f67 025818 branch accept_lmp_msg +: 025819 parse_lmp_encapsulated_payload_reject: +0x5f68 025820 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f69 025821 branch reject_lmp_packet +: 025822 parse_lmp_accepted_encapsulated_payload: +0x5f6a 025823 fetch 1 ,mem_sp_local_key_send_count +0x5f6b 025824 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted +0x5f6c 025825 jam lmp_encapsulated_payload ,mem_lmo_opcode2 +0x5f6d 025826 branch parse_rx_done +: 025828 parse_lmp_encapsulated_payload_all_accepted: +0x5f6e 025829 call check_localsm +0x5f6f 025830 branch parse_lmp_encapsulated_payload_all_accepted_master ,true +0x5f70 025831 fetch 1 ,mem_ssp_mode_flag +0x5f71 025832 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey +0x5f72 025833 jam sp_flag_commit ,mem_sp_flag +0x5f73 025834 jam sp_stat_commit_calc ,mem_sp_state +0x5f74 025835 branch parse_rx_done +: 025837 parse_lmp_encapsulated_payload_all_accepted_get_passkey: +0x5f75 025838 jam bt_evt_bt_get_passkey ,mem_fifo_temp +0x5f76 025839 branch ui_ipc_send_event +: 025842 parse_lmp_encapsulated_payload_all_accepted_master: +0x5f77 025844 branch parse_rx_done +: 025846 parse_lmp_simple_pairing_number: +0x5f78 025847 fetch 1 ,mem_master_sp_state +0x5f79 025848 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master +0x5f7a 025849 fetch 1 ,mem_sp_state +0x5f7b 025850 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject +: 025851 parse_lmp_simple_pairing_number_master: +0x5f7c 025852 arg mem_sp_random_remote ,contw +0x5f7d 025853 fetch 8 ,mem_rxbuf + 1 +0x5f7e 025854 istore 8 ,contw +0x5f7f 025855 fetch 8 ,mem_rxbuf + 9 +0x5f80 025856 istore 8 ,contw +0x5f81 025857 call check_localsm +0x5f82 025858 branch parse_lmp_simple_pairing_number_master0 ,true +0x5f83 025859 jam sp_stat_random_send ,mem_sp_state +0x5f84 025860 jam sp_flag_commit ,mem_sp_flag +0x5f85 025861 branch accept_lmp_msg +: 025862 parse_lmp_simple_pairing_number_master0: +0x5f86 025863 jam sp_stat_commit_calc ,mem_master_sp_state +0x5f87 025864 branch master_set_mem_master_sp_flag +: 025867 parse_lmp_simple_pairing_number_reject: +0x5f88 025868 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f89 025869 branch reject_lmp_packet +: 025871 parse_dhkey_check: +0x5f8a 025872 fetch 1 ,mem_master_sp_state +0x5f8b 025873 beq sp_stat_confirm_send ,parse_dhkey_check_master +0x5f8c 025874 fetch 1 ,mem_sp_state +0x5f8d 025875 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject +: 025876 parse_dhkey_check_master: +0x5f8e 025877 arg mem_sp_check_result ,contw +0x5f8f 025878 arg mem_rxbuf + 1 ,contr +0x5f90 025879 call memcpy16 +0x5f91 025880 call check_localsm +0x5f92 025881 branch parse_dhkey_check_master0 ,true +0x5f93 025882 fetch 1 ,mem_ssp_mode_flag +0x5f94 025883 beq ssp_mode_ssp_pin_flag ,number_comparison_mode +: 025884 number_comparison_successed: +0x5f95 025885 jam 0 ,mem_flag_mode_ssp_pin +0x5f96 025886 jam sp_stat_confirm_check ,mem_sp_state +0x5f97 025887 jam sp_flag_commit ,mem_sp_flag +0x5f98 025888 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x5f99 025889 branch parse_rx_done +: 025891 parse_dhkey_check_master0: +0x5f9a 025892 jam sp_stat_confirm_check ,mem_master_sp_state +0x5f9b 025893 jam sp_flag_commit ,mem_master_sp_flag +0x5f9c 025894 branch parse_rx_done +: 025895 parse_lmp_dhkey_check_reject: +0x5f9d 025896 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f9e 025897 branch reject_lmp_packet +: 025899 number_comparison_mode: +0x5f9f 025900 fetch 1 ,mem_flag_mode_ssp_pin +0x5fa0 025901 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result +0x5fa1 025902 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata +0x5fa2 025903 store 1 ,mem_flag_mode_ssp_pin +0x5fa3 025904 rtn +: 025906 comparison_result: +0x5fa4 025907 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +0x5fa5 025908 jam 0 ,mem_flag_mode_ssp_pin +0x5fa6 025909 branch parse_lmp_dhkey_check_reject +: 025912 parse_lmp_clkoffset_res: +0x5fa7 025913 branch parse_rx_done +: 025915 parse_lmp_encryption_mode_req: +0x5fa8 025916 fetch 1 ,mem_connection_options +0x5fa9 025917 set0 connection_encrypt +0x5faa 025918 store 1 ,mem_connection_options +0x5fab 025919 call accept_lmp_msg +0x5fac 025920 nrtn master +0x5fad 025921 fetch 1 ,mem_rxbuf + 1 +0x5fae 025922 fetcht 1 ,mem_op +0x5faf 025923 setflag blank ,op_stop_enc ,temp +0x5fb0 025924 nsetflag blank ,op_start_enc ,temp +0x5fb1 025925 storet 1 ,mem_op +0x5fb2 025926 rtn +: 025928 parse_lmp_features_res: +0x5fb3 025929 fetcht 8 ,mem_rxbuf + 1 +: 025930 parse_lmp_features_res_not_hci: +0x5fb4 025931 fetch 1 ,mem_conn_sm +0x5fb5 025932 rtnne conn_sm_wait_features_res +0x5fb6 025934 fetch 1 ,mem_connection_options +0x5fb7 025935 bbit0 connection_feature_ext ,parse_lmp_send_conn +0x5fb8 025937 jam conn_sm_send_features_ext ,mem_conn_sm +0x5fb9 025938 rtn +: 025939 parse_lmp_send_conn: +0x5fba 025940 jam conn_sm_send_conn_req ,mem_conn_sm +0x5fbb 025941 rtn +: 025942 parse_lmp_test_activate: +0x5fbc 025943 fetch 1 ,mem_debug_config +0x5fbd 025944 store 1 ,mem_test_mode_old_debug_config +0x5fbe 025945 jam lmp_accepted ,mem_lmo_opcode2 +0x5fbf 025946 jam lmp_test_activate ,mem_lmi_opcode2 +0x5fc0 025947 rtn +: 025948 parse_lmp_test_control: +0x5fc1 025951 jam lmp_accepted ,mem_lmo_opcode2 +0x5fc2 025952 jam lmp_test_control ,mem_lmi_opcode2 +0x5fc3 025953 force 9 ,loopcnt +0x5fc4 025954 arg mem_rxbuf + 1 ,contr +0x5fc5 025955 arg mem_temp_payload ,contw +: 025956 parse_lmp_test_xor: +0x5fc6 025957 ifetch 1 ,contr +0x5fc7 025958 xor_into 0x55 ,pdata +0x5fc8 025959 istore 1 ,contw +0x5fc9 025960 loop parse_lmp_test_xor +0x5fca 025961 fetch 1 ,test_mode_scenario +0x5fcb 025962 fetcht 1 ,mem_tester_emulate +0x5fcc 025963 set0 tester_no_whitening ,temp +0x5fcd 025964 set0 tester_pattern_test ,temp +0x5fce 025965 beq exit_test_mode ,parse_lmp_test_control_exit +0x5fcf 025966 beq pause_test_mode ,parse_lmp_test_control_pause +0x5fd0 025967 beq closed_loop_back_acl ,parse_lmp_test_control_loopback +0x5fd1 025968 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite +0x5fd2 025969 beq closed_loop_back_sco ,parse_lmp_test_control_loopback +0x5fd3 025970 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite +0x5fd4 025971 beq zero_pattern ,parse_lmp_test_control_pattern +0x5fd5 025972 beq one_pattern ,parse_lmp_test_control_pattern +0x5fd6 025973 beq alt_pattern ,parse_lmp_test_control_pattern +0x5fd7 025974 beq alt2_pattern ,parse_lmp_test_control_pattern +0x5fd8 025975 beq pseudorandom ,parse_lmp_test_control_pattern +0x5fd9 025976 rtn +: 025977 parse_lmp_test_control_exit: +0x5fda 025979 fetch 1 ,mem_tester_emulate +0x5fdb 025980 set1 tester_exit ,pdata +0x5fdc 025981 set1 tester_change ,pdata +0x5fdd 025982 store 1 ,mem_tester_emulate +0x5fde 025983 rtn +: 025984 parse_lmp_test_control_pattern: +0x5fdf 025985 set1 tester_pattern_test ,temp +0x5fe0 025986 jam 5 ,mem_lch_code +0x5fe1 025987 fetch 2 ,test_mode_data_length +0x5fe2 025988 iforce loopcnt +0x5fe3 025989 store 2 ,mem_len +0x5fe4 025990 arg mem_rxbuf ,contw +0x5fe5 025991 call pn9 +: 025992 parse_lmp_test_control_loopback_nowhite: +0x5fe6 025993 set1 tester_no_whitening ,temp +: 025994 parse_lmp_test_control_loopback: +0x5fe7 025995 set1 tester_change ,temp +0x5fe8 025996 force 0 ,pdata +0x5fe9 025997 store 1 ,mem_slave_rcvcnt +0x5fea 025998 store 2 ,mem_tst_pktcnt_crc +0x5feb 025999 store 2 ,mem_tst_pktcnt_dmh +0x5fec 026000 store 2 ,mem_tst_pktcnt_hec +0x5fed 026001 store 2 ,mem_tst_pktcnt_sync +0x5fee 026002 fetch 1 ,test_mode_hopping_mode +0x5fef 026003 compare fixed_freq ,pdata ,0xff +0x5ff0 026004 setflag true ,tester_fixed_freq ,temp +0x5ff1 026005 storet 1 ,mem_tester_emulate +0x5ff2 026006 rtn +: 026008 parse_lmp_test_control_pause: +0x5ff3 026009 set0 mark_testmode ,mark +0x5ff4 026010 jam 0 ,mem_tester_emulate +0x5ff5 026011 fetch 1 ,mem_debug_config +0x5ff6 026012 set0 debug_tx_pattern ,pdata +0x5ff7 026013 store 1 ,mem_debug_config +0x5ff8 026014 rtn +: 026020 lmp_copy_rand: +0x5ff9 026021 arg mem_rxbuf + 1 ,contr +0x5ffa 026022 arg mem_random_number ,contw +0x5ffb 026023 branch memcpy16 +: 026025 lmp_generate_key: +0x5ffc 026026 jam lmp_comb_key ,mem_lmo_opcode2 +0x5ffd 026027 rtn +: 026029 lmp_start_encryption: +0x5ffe 026030 nrtn master +0x5fff 026031 jam lmp_start_encryption_req ,mem_lmo_opcode2 +0x6000 026032 rtn +: 026034 lmp_accept_inrand: +0x6001 026035 arg mem_lap ,rega +0x6002 026036 call generate_kinit +0x6003 026037 jam lmp_accepted ,mem_lmo_opcode2 +0x6004 026038 jam lmp_in_rand ,mem_lmi_opcode2 +0x6005 026039 rtn +: 026041 lmp_disconnect: +0x6006 026042 jam 10 ,mem_conn_timer +0x6007 026043 jam lmp_detach ,mem_lmo_opcode2 +0x6008 026044 jam local_host ,mem_disconn_reason_send +0x6009 026045 rtn +: 026051 send_lmp: +0x600a 026052 bpatchx patch30_2 ,mem_patch30 +0x600b 026053 disable user +0x600c 026054 call lmo_fifo_process +0x600d 026055 fetch 1 ,mem_lmp_to_send +0x600e 026056 rtn blank +0x600f 026061 bbit1 7 ,send_lmp_escape +: 026062 send_lmp0: +0x6010 026063 beq lmp_name_req ,send_lmp_name_req +0x6011 026064 beq lmp_name_res ,send_lmp_name_res +0x6012 026065 beq lmp_accepted ,send_lmp_accepted +0x6013 026066 beq lmp_not_accepted ,send_lmp_not_accepted +0x6014 026067 beq lmp_features_req ,send_lmp_features_req +0x6015 026068 beq lmp_features_res ,send_lmp_features_res +0x6016 026069 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res +0x6017 026070 beq lmp_version_req ,send_lmp_version_req +0x6018 026071 beq lmp_version_res ,send_lmp_version_res +0x6019 026072 beq lmp_setup_complete ,send_lmp_setup_complete +0x601a 026073 beq lmp_supervision_timeout ,send_lmp_superto +0x601b 026074 beq lmp_host_connection_req ,send_lmp_no_payload +0x601c 026075 beq lmp_in_rand ,send_lmp_inrand +0x601d 026076 beq lmp_comb_key ,send_lmp_comb_key +0x601e 026077 beq lmp_au_rand ,send_lmp_aurand +0x601f 026078 beq lmp_sres ,send_lmp_sres +0x6020 026079 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req +0x6021 026080 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req +0x6022 026081 beq lmp_start_encryption_req ,send_lmp_start_encryption +0x6023 026082 beq lmp_detach ,send_lmp_detach +0x6024 026083 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req +0x6025 026084 beq lmp_unit_key ,send_lmp_unit_key +0x6026 026086 beq lmp_incr_power_req ,send_lmp_inc_power +0x6027 026087 beq lmp_clkoffset_res ,send_lmp_clkoffset_res +0x6028 026088 beq lmp_max_power ,send_lmp_nopayload_reply +0x6029 026089 beq lmp_max_slot ,send_lmp_max_slot +0x602a 026090 beq lmp_max_slot_req ,send_lmp_max_slot_req +0x602b 026091 beq lmp_min_power ,send_lmp_nopayload_reply +0x602c 026092 beq lmp_slot_offset ,send_lmp_slot_offset +0x602d 026093 beq lmp_switch_req ,send_lmp_switch_req +0x602e 026094 beq lmp_sniff_req ,send_lmp_sniff_req +0x602f 026095 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req +0x6030 026096 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req +0x6031 026097 beq lmp_unsniff_req ,send_lmp_unsniff_req +0x6032 026098 beq lmp_encapsulated_header ,send_lmp_encapsulated_header +0x6033 026099 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload +0x6034 026100 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm +0x6035 026101 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number +0x6036 026102 beq lmp_dhkey_check ,send_lmp_dhkey_check +0x6037 026103 beq lmp_auto_rate ,send_lmp_auto_rate +0x6038 026104 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res +0x6039 026106 beq lmp_clkoffset_req ,send_lmp_clkoffset_req +0x603a 026107 beq lmp_quality_of_service ,send_lmp_quality_of_service +0x603b 026108 beq lmp_test_activate ,send_lmp_test_activate +0x603c 026109 beq lmp_test_control ,send_lmp_test_control +: 026110 send_lmp_error: +0x603d 026111 branch assert +0x603e 026112 rtn +: 026113 send_lmp_escape: +0x603f 026114 beq lmp_ext_accepted ,send_lmpext_accepted +0x6040 026115 beq lmp_ext_features_res ,send_lmpext_features_res +0x6041 026116 beq lmp_not_accepted_ext ,send_lmpext_not_accepted +0x6042 026117 beq lmp_ext_features_req ,send_lmpext_features_req +0x6043 026118 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req +0x6044 026119 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req +0x6045 026120 beq lmp_io_cap_req ,send_lmp_io_cap_req +0x6046 026121 beq lmp_io_cap_res ,send_lmpext_io_cap_res +0x6047 026122 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req +0x6048 026123 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res +0x6049 026124 branch assert +: 026130 send_lmp_accepted: +0x604a 026131 force 2 ,pdata +0x604b 026132 call msg_send_lmp +0x604c 026133 fetch 1 ,mem_lmi_opcode +0x604d 026134 istore 1 ,contw +0x604e 026135 call send_lmp_follow +0x604f 026136 bpatchx patch30_3 ,mem_patch30 +0x6050 026137 fetch 1 ,mem_lmi_opcode +0x6051 026138 beq lmp_in_rand ,send_lmp_accepted_inrand +0x6052 026139 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode +0x6053 026140 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key +0x6054 026141 beq lmp_sniff_req ,send_lmp_accept_sniff_req +0x6055 026142 beq lmp_host_connection_req ,send_lmp_accepted_connection +0x6056 026143 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check +0x6057 026144 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm +0x6058 026145 rtn +: 026147 send_create_conn_start_l2cap_timer_sm: +0x6059 026148 fetch 1 ,mem_conn_sm +0x605a 026149 rtn blank +0x605b 026150 jam conn_sm_wait_done ,mem_conn_sm +0x605c 026151 setarg timer_enpt_waite +0x605d 026152 arg enpt_delay_timer ,queue +0x605e 026153 branch timer_init +: 026155 send_lmp_accept_sniff_req: +0x605f 026156 branch sniff_init +: 026157 send_lmp_not_accepted: +0x6060 026158 force 3 ,pdata +0x6061 026159 call msg_send_lmp +0x6062 026160 fetch 1 ,mem_lmi_opcode +0x6063 026161 beq lmp_au_rand ,send_not_accept_aurand +0x6064 026162 istore 1 ,contw +0x6065 026163 fetch 1 ,mem_lmo_reason +0x6066 026164 istore 1 ,contw +0x6067 026165 branch send_lmp_follow +: 026167 send_not_accept_aurand: +0x6068 026168 istore 1 ,contw +0x6069 026169 fetch 1 ,mem_lmo_reason +0x606a 026170 istore 1 ,contw +0x606b 026171 arg mem_sres_tid ,temp +0x606c 026172 branch special_tid_store +: 026174 send_lmpext_accepted: +0x606d 026175 force 4 ,queue +0x606e 026176 call send_lmpext +0x606f 026177 setarg lmp_escape +0x6070 026178 istore 1 ,contw +0x6071 026179 fetch 1 ,mem_lmi_opcode +0x6072 026180 set0 7 ,pdata +0x6073 026181 istore 1 ,contw +0x6074 026182 fetch 1 ,mem_lmi_opcode +0x6075 026183 branch send_lmp_follow +: 026185 send_lmpext_not_accepted: +0x6076 026186 force 5 ,queue +0x6077 026187 call send_lmpext +0x6078 026188 setarg lmp_escape +0x6079 026189 istore 1 ,contw +0x607a 026190 fetch 1 ,mem_lmi_opcode +0x607b 026191 set0 7 ,pdata +0x607c 026192 istore 1 ,contw +0x607d 026193 fetch 1 ,mem_lmo_reason +0x607e 026194 istore 1 ,contw +0x607f 026195 branch send_lmp_follow +: 026198 send_lmp_accepted_inrand: +0x6080 026199 call clear_linkkey +0x6081 026200 call tid_check +0x6082 026201 rtn true +0x6083 026202 branch lmp_generate_key +: 026204 send_lmp_accepted_enc_mode: +0x6084 026205 fetch 1 ,mem_op +0x6085 026206 bbit1 op_start_enc ,send_lmp_accepted_enc_start +0x6086 026207 rtnbit0 op_stop_enc +0x6087 026208 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x6088 026209 set0 op_stop_enc ,pdata +0x6089 026210 call tid_reply +0x608a 026211 branch send_lmp_accepted_enc_exit +: 026212 send_lmp_accepted_enc_start: +0x608b 026213 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +0x608c 026214 set0 op_start_enc ,pdata +: 026215 send_lmp_accepted_enc_exit: +0x608d 026216 store 1 ,mem_op +0x608e 026217 rtn +: 026219 send_lmp_accepted_enc_key: +0x608f 026220 call check_localsm +0x6090 026221 branch lmp_start_encryption ,true +0x6091 026222 rtn +: 026224 send_lmp_accepted_connection: +0x6092 026225 jam lmp_packet_type_table_req ,mem_lmo_opcode2 +0x6093 026227 fetch 1 ,mem_lmp_conn_state +0x6094 026228 set1 received_conn_req ,pdata +0x6095 026229 store 1 ,mem_lmp_conn_state +0x6096 026230 jam bt_evt_bb_connected ,mem_fifo_temp +0x6097 026231 branch ui_ipc_send_event +: 026234 send_lmp_accept_dhkey_check: +0x6098 026235 rtn +: 026239 send_lmpext_features_res: +0x6099 026240 force 12 ,queue +0x609a 026241 call send_lmpext +0x609b 026242 setarg 0x01 +0x609c 026243 istore 1 ,contw +0x609d 026244 fetch 2 ,mem_lmpext_ssp_enable +0x609e 026245 istore 2 ,contw +0x609f 026246 setarg 0 +0x60a0 026247 istore 3 ,contw +0x60a1 026248 setarg 0x00 +0x60a2 026249 istore 4 ,contw +0x60a3 026250 branch send_lmp_reply +: 026251 send_lmpext_io_cap_res: +0x60a4 026252 force 5 ,queue +0x60a5 026253 call send_lmpext +0x60a6 026254 fetch 3 ,mem_sp_iocap_local +0x60a7 026255 istore 3 ,contw +0x60a8 026256 call send_lmp_reply +0x60a9 026257 jam flag_pairing_state_pairing ,mem_flag_pairing_state +0x60aa 026258 fetch 1 ,mem_sp_iocap_local +0x60ab 026259 beq display_yesno ,responder_iocap_display_yesno +0x60ac 026260 beq keyboard_only ,responder_iocap_keyboard_only +0x60ad 026261 beq no_input_no_output ,responder_iocap_no_input_no_output +0x60ae 026262 rtn +: 026264 responder_iocap_keyboard_only: +0x60af 026265 fetch 1 ,mem_sp_iocap_remote +0x60b0 026266 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only +0x60b1 026267 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno +0x60b2 026268 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only +0x60b3 026269 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output +0x60b4 026270 rtn +: 026273 responder_iocap_display_yesno: +0x60b5 026274 fetch 1 ,mem_sp_iocap_remote +0x60b6 026275 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only +0x60b7 026276 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno +0x60b8 026277 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only +0x60b9 026278 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output +0x60ba 026279 rtn +: 026282 responder_iocap_no_input_no_output: +0x60bb 026283 fetch 1 ,mem_sp_iocap_remote +0x60bc 026284 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only +0x60bd 026285 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno +0x60be 026286 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only +0x60bf 026287 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output +0x60c0 026288 rtn +: 026290 responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: +: 026291 responder_iocap_display_yesno_initiator_iocap_no_input_no_output: +: 026292 responder_iocap_display_yesno_initiator_iocap_display_only: +: 026293 responder_iocap_no_input_no_output_initiator_iocap_display_only: +: 026294 responder_iocap_no_input_no_output_initiator_iocap_display_yesno: +: 026295 responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: +: 026296 responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: +: 026297 set_ssp_mode_justwork: +0x60c1 026298 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag +0x60c2 026299 fetch 1 ,mem_classic_bt_flag +0x60c3 026300 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect +0x60c4 026301 rtn +: 026303 responder_iocap_display_yesno_initiator_iocap_display_yesno: +: 026304 set_ssp_mode_numeric_comparison: +0x60c5 026305 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag +0x60c6 026306 rtn +: 026308 responder_iocap_keyboard_only_initiator_iocap_display_yesno: +: 026309 responder_iocap_keyboard_only_initiator_iocap_keyboard_only: +: 026310 responder_iocap_keyboard_only_initiator_iocap_display_only: +: 026311 responder_iocap_display_yesno_initiator_iocap_keyboard_only: +: 026312 set_ssp_mode_passkey: +0x60c7 026313 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag +0x60c8 026314 rtn +: 026317 classic_bt_set_reject_justwork_flag: +0x60c9 026318 arg flag_ssp_reject_justwork ,queue +0x60ca 026319 branch classic_bluetooth_set_flag +: 026321 classic_bt_clr_reject_justwork_flag: +0x60cb 026322 arg flag_ssp_reject_justwork ,queue +0x60cc 026323 branch classic_bluetooth_clr_flag +: 026325 classic_bluetooth_set_flag: +0x60cd 026326 fetch 1 ,mem_classic_bt_flag +0x60ce 026327 qset1 pdata +0x60cf 026328 store 1 ,mem_classic_bt_flag +0x60d0 026329 rtn +: 026331 classic_bluetooth_clr_flag: +0x60d1 026332 fetch 1 ,mem_classic_bt_flag +0x60d2 026333 qset0 pdata +0x60d3 026334 store 1 ,mem_classic_bt_flag +0x60d4 026335 rtn +: 026338 send_lmp_io_cap_req: +0x60d5 026339 force 5 ,queue +0x60d6 026340 call send_lmpext +0x60d7 026341 fetch 3 ,mem_sp_iocap_local +0x60d8 026342 istore 3 ,contw +0x60d9 026343 branch send_lmp_request +: 026346 send_lmpext_sniff_subrating_req: +0x60da 026348 rtn +: 026349 send_lmpext_sniff_subrating_res: +0x60db 026350 force 9 ,queue +0x60dc 026351 call send_lmpext +0x60dd 026352 fetch 1 ,mem_subsniff_rate +0x60de 026353 istore 1 ,contw +0x60df 026354 fetch 2 ,mem_subsniff_tcmax +0x60e0 026355 istore 2 ,contw +0x60e1 026356 fetch 4 ,mem_subsniff_instant +0x60e2 026357 istore 4 ,contw +0x60e3 026358 branch send_lmp_reply +: 026360 send_lmp_name_res: +0x60e4 026361 force 17 ,pdata +0x60e5 026362 call msg_send_lmp +0x60e6 026363 fetch 1 ,mem_lmi_opcode +0x60e7 026364 copy pdata ,temp +0x60e8 026365 beq 0x00 ,send_lmp_name_res_offset_ok +0x60e9 026366 beq 0x0e ,send_lmp_name_res_offset_ok +0x60ea 026367 beq 0x1c ,send_lmp_name_res_offset_ok +0x60eb 026368 rtn +: 026369 send_lmp_name_res_offset_ok: +0x60ec 026370 istore 1 ,contw +0x60ed 026371 fetch 1 ,mem_local_name_length +0x60ee 026372 istore 1 ,contw +0x60ef 026373 arg 14 ,loopcnt +0x60f0 026374 setarg mem_local_name +0x60f1 026375 iadd temp ,contr +0x60f2 026376 call memcpy +0x60f3 026377 branch send_lmp_reply +: 026380 send_lmp_timing_accuracy_res: +0x60f4 026381 force 3 ,pdata +0x60f5 026382 call msg_send_lmp +0x60f6 026383 setarg 0x0114 +0x60f7 026384 istore 2 ,contw +0x60f8 026385 branch send_lmp_reply +: 026387 send_lmp_clkoffset_res: +0x60f9 026389 force 3 ,pdata +0x60fa 026390 call msg_send_lmp +0x60fb 026391 fetch 4 ,mem_clke_bt +0x60fc 026392 isub clkn_bt ,pdata +0x60fd 026393 branch send_lmp_clkoffset_res_master ,master +0x60fe 026394 sub pdata ,0 ,pdata +: 026395 send_lmp_clkoffset_res_master: +0x60ff 026397 rshift2 pdata ,pdata +0x6100 026398 set0 15 ,pdata +0x6101 026399 istore 2 ,contw +0x6102 026400 branch send_lmp_reply +: 026402 send_lmp_version_res: +0x6103 026403 force 6 ,pdata +0x6104 026404 call msg_send_lmp +0x6105 026405 fetch 5 ,mem_lmp_version +0x6106 026406 istore 5 ,contw +0x6107 026407 branch send_lmp_reply +: 026409 send_lmp_features_res: +0x6108 026410 force 9 ,pdata +0x6109 026411 call msg_send_lmp +0x610a 026412 fetch 8 ,mem_features +0x610b 026413 istore 8 ,contw +0x610c 026414 branch send_lmp_reply +: 026421 send_lmpext_features_req: +0x610d 026422 force 12 ,queue +0x610e 026423 call send_lmpext +0x610f 026424 setarg 0x01 +0x6110 026425 istore 1 ,contw +0x6111 026426 fetch 2 ,mem_lmpext_ssp_enable +0x6112 026427 istore 2 ,contw +0x6113 026428 setarg 0 +0x6114 026429 istore 3 ,contw +0x6115 026430 setarg 0x00 +0x6116 026431 istore 4 ,contw +0x6117 026432 branch send_lmp_request +: 026434 send_lmpext_packet_type_table_req: +0x6118 026435 force 3 ,queue +0x6119 026436 call send_lmpext +0x611a 026437 fetch 1 ,mem_ptt +0x611b 026438 istore 1 ,contw +0x611c 026439 disable user +0x611d 026440 call send_lmp_request +0x611e 026441 nrtn user +0x611f 026442 nrtn master +0x6120 026443 fetch 1 ,mem_afh_cfg +0x6121 026444 rtnbit0 afh_cfg_on +0x6122 026445 call afh_init +0x6123 026446 branch afh_open_all_channels +: 026449 ssp_enable: +0x6124 026450 bpatchx patch30_4 ,mem_patch30 +0x6125 026451 fetch 1 ,mem_features + 6 +0x6126 026452 set1 param_featrue_ssp ,pdata +0x6127 026453 store 1 ,mem_features + 6 +0x6128 026454 setarg param_lmpext_ssp_enable +0x6129 026455 store 2 ,mem_lmpext_ssp_enable +0x612a 026456 rtn +: 026458 ssp_disable: +0x612b 026459 bpatchx patch30_5 ,mem_patch30 +0x612c 026460 fetch 1 ,mem_features + 6 +0x612d 026461 set0 param_featrue_ssp ,pdata +0x612e 026462 store 1 ,mem_features + 6 +0x612f 026463 setarg 0 +0x6130 026464 store 2 ,mem_lmpext_ssp_enable +0x6131 026465 rtn +: 026467 afh_init: +0x6132 026468 jam 0x3 ,mem_afh_cfg +0x6133 026469 setarg 0 +0x6134 026470 store 4 ,mem_afh_timer +0x6135 026471 arg mem_afh_map_lo ,contw +0x6136 026472 call afh_reset_map +0x6137 026473 arg mem_afh_map_new ,contw +0x6138 026474 call afh_reset_map +0x6139 026475 arg mem_afh_classify_channel_map ,contw +0x613a 026476 call afh_reset_map +0x613b 026477 branch afh_clear_error_counter +: 026478 afh_open_all_channels: +0x613c 026479 arg mem_afh_map_new ,contw +0x613d 026480 call afh_reset_map +0x613e 026481 call afh_clear_error_counter +0x613f 026482 branch afh_set_send_flag +: 026485 afh_reset_map: +0x6140 026486 setarg 0xffffff +0x6141 026487 istore 3 ,contw +0x6142 026488 istore 3 ,contw +0x6143 026489 istore 3 ,contw +0x6144 026490 setarg 0x7f +0x6145 026491 istore 1 ,contw +0x6146 026492 rtn +: 026493 afh_clear_error_counter: +0x6147 026494 setarg 0 +0x6148 026495 store 2 ,mem_afh_error_total +0x6149 026496 rtn +: 026497 afh_set_send_flag: +0x614a 026498 fetch 1 ,mem_afh_cfg +0x614b 026499 set1 send_lmp_set_afh ,pdata +0x614c 026500 store 1 ,mem_afh_cfg +0x614d 026501 rtn +: 026504 send_lmpext_pause_encryption_req: +0x614e 026505 force 2 ,queue +0x614f 026506 call send_lmpext +0x6150 026507 nbranch send_lmp_reply ,master +0x6151 026509 branch send_lmp_request +: 026513 send_lmp_detach: +0x6152 026514 force 2 ,pdata +0x6153 026515 call msg_send_lmp +0x6154 026516 fetch 1 ,mem_disconn_reason_send +0x6155 026517 istore 1 ,contw +0x6156 026518 call send_lmp_request +: 026519 prepare_disconnect: +0x6157 026520 fetch 1 ,mem_op +0x6158 026521 set1 op_disconn ,pdata +0x6159 026522 store 1 ,mem_op +0x615a 026523 jam 50 ,mem_conn_timer +0x615b 026524 rtn +: 026527 send_lmp_no_payload: +0x615c 026528 force 1 ,pdata +0x615d 026529 call msg_send_lmp +0x615e 026530 branch send_lmp_request +: 026531 send_lmp_nopayload_reply: +0x615f 026532 force 1 ,pdata +0x6160 026533 call msg_send_lmp +0x6161 026534 branch send_lmp_reply +: 026537 send_lmp_encryption_mode_req: +0x6162 026538 force 2 ,pdata +0x6163 026539 call msg_send_lmp +0x6164 026540 fetch 1 ,mem_state_map +0x6165 026541 isolate0 smap_encryption ,pdata +0x6166 026542 setflag true ,0 ,pdata +0x6167 026543 and_into 1 ,pdata +0x6168 026544 istore 1 ,contw +0x6169 026545 branch send_lmp_request +: 026548 send_lmp_superto: +0x616a 026549 force 3 ,pdata +0x616b 026550 call msg_send_lmp +0x616c 026551 fetch 2 ,mem_supervision_to +0x616d 026552 istore 2 ,contw +0x616e 026553 branch send_lmp_request +: 026555 send_lmp_name_req: +0x616f 026556 jam 250 ,mem_conn_timer +0x6170 026557 force 2 ,pdata +0x6171 026558 call msg_send_lmp +0x6172 026559 fetch 1 ,mem_name_offset +0x6173 026560 istore 1 ,contw +0x6174 026561 branch send_lmp_request +: 026563 send_lmp_test_control: +0x6175 026564 force 10 ,pdata +0x6176 026565 call msg_send_lmp +0x6177 026566 arg mem_temp_payload ,contr +0x6178 026567 force 9 ,loopcnt +: 026568 send_lmp_test_control_loop: +0x6179 026569 ifetch 1 ,contr +0x617a 026570 xor_into 0x55 ,pdata +0x617b 026571 istore 1 ,contw +0x617c 026572 loop send_lmp_test_control_loop +0x617d 026573 branch send_lmp_request +: 026575 send_lmp_quality_of_service_req: +0x617e 026576 branch send_lmp_request +: 026577 send_lmp_unit_key: +0x617f 026578 branch send_lmp_request +: 026580 send_lmp_slot_offset: +0x6180 026581 rtn master +0x6181 026582 call calc_slot_offset +0x6182 026583 force 9 ,pdata +0x6183 026584 call msg_send_lmp +0x6184 026585 fetch 2 ,mem_slot_offset +0x6185 026586 istore 2 ,contw +0x6186 026587 fetch 3 ,mem_lap +0x6187 026588 istore 3 ,contw +0x6188 026589 fetch 1 ,mem_uap +0x6189 026590 istore 1 ,contw +0x618a 026591 fetch 2 ,mem_nap +0x618b 026592 istore 2 ,contw +0x618c 026593 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply +0x618d 026594 set0 mark_switch_initiated ,mark +0x618e 026595 call send_lmp_request +0x618f 026596 jam lmp_switch_req ,mem_lmo_opcode2 +0x6190 026597 rtn +: 026598 send_lmp_slot_offset_reply: +0x6191 026599 call send_lmp_reply +0x6192 026600 jam lmp_accepted ,mem_lmo_opcode2 +0x6193 026601 jam lmp_switch_req ,mem_lmi_opcode2 +0x6194 026602 rtn +: 026604 send_lmp_switch_req: +0x6195 026605 arg 0x200 ,temp +0x6196 026606 branch switch_on_native ,master +0x6197 026607 deposit clke_bt +0x6198 026608 branch switch_slack +: 026609 switch_on_native: +0x6199 026610 deposit clkn_bt +: 026611 switch_slack: +0x619a 026612 deposit bt_clk +0x619b 026613 iadd temp ,pdata +0x619c 026614 and_into 0x1fc ,pdata +0x619d 026615 store 4 ,mem_sniff_anchor +0x619e 026616 force 5 ,pdata +0x619f 026617 call msg_send_lmp +0x61a0 026618 fetch 4 ,mem_sniff_anchor +0x61a1 026619 rshift pdata ,pdata +0x61a2 026620 istore 4 ,contw +0x61a3 026621 branch send_lmp_request +: 026623 send_lmp_sniff_req: +0x61a4 026624 force 10 ,pdata +0x61a5 026625 call msg_send_lmp +0x61a6 026626 arg mem_sniff_payload ,contr +0x61a7 026627 ifetch 9 ,contr +0x61a8 026628 istore 9 ,contw +0x61a9 026629 branch send_lmp_request +: 026632 send_lmp_timing_accuracy_req: +0x61aa 026634 force 3 ,pdata +0x61ab 026635 call msg_send_lmp +0x61ac 026636 setarg 0x0114 +0x61ad 026637 istore 2 ,contw +0x61ae 026638 branch send_lmp_request +: 026640 send_lmp_unsniff_req: +0x61af 026642 force 1 ,pdata +0x61b0 026643 call msg_send_lmp +0x61b1 026652 branch send_lmp_request +: 026655 send_lmp_max_slot: +0x61b2 026656 force 2 ,pdata +0x61b3 026657 call msg_send_lmp +0x61b4 026658 fetch 1 ,mem_max_slot +0x61b5 026659 istore 1 ,contw +0x61b6 026660 branch send_lmp_request +: 026663 send_lmp_max_slot_req: +0x61b7 026664 force 2 ,pdata +0x61b8 026665 call msg_send_lmp +0x61b9 026666 setarg 0x05 +0x61ba 026667 istore 1 ,contw +0x61bb 026668 branch send_lmp_request +: 026671 send_lmp_inc_power: +0x61bc 026672 force 2 ,pdata +0x61bd 026673 call msg_send_lmp +0x61be 026674 setarg 0x00 +0x61bf 026675 istore 1 ,contw +0x61c0 026676 branch send_lmp_request +: 026679 send_lmp_setup_complete_by_module: +0x61c1 026680 jam lmp_max_slot_req ,mem_lmo_opcode2 +0x61c2 026681 rtn +: 026682 send_lmp_setup_complete: +0x61c3 026683 fetch 1 ,mem_device_option +0x61c4 026684 sub pdata ,dvc_op_module ,null +0x61c5 026685 call send_lmp_setup_complete_by_module ,zero +0x61c6 026686 fetch 1 ,mem_state +0x61c7 026687 set1 state_conn_comp ,pdata +0x61c8 026688 store 1 ,mem_state +0x61c9 026689 copy clkn_bt ,pdata +0x61ca 026690 store 4 ,mem_aurand_send_delay_time +0x61cb 026691 fetch 1 ,mem_lmp_conn_state +0x61cc 026692 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent +0x61cd 026693 set1 sent_setup_complete ,pdata +0x61ce 026694 store 1 ,mem_lmp_conn_state +0x61cf 026695 jam bt_evt_setup_complete ,mem_fifo_temp +0x61d0 026696 call ui_ipc_send_event +0x61d1 026697 force 1 ,pdata +0x61d2 026698 call msg_send_lmp +0x61d3 026699 branch send_lmp_request +: 026700 send_lmp_setup_complete_has_sent: +0x61d4 026701 jam 0 ,mem_lmp_to_send +0x61d5 026702 rtn +: 026704 send_lmp_version_req: +0x61d6 026705 force 6 ,pdata +0x61d7 026706 call msg_send_lmp +0x61d8 026707 fetch 5 ,mem_lmp_version +0x61d9 026708 istore 5 ,contw +0x61da 026709 branch send_lmp_request +: 026711 send_lmp_features_req: +0x61db 026712 force 9 ,pdata +0x61dc 026713 call msg_send_lmp +0x61dd 026714 fetch 8 ,mem_features +0x61de 026715 istore 8 ,contw +0x61df 026716 branch send_lmp_request +: 026718 sp_master_send_io_cap_get: +0x61e0 026719 jam sp_flag_commit ,mem_master_sp_flag +0x61e1 026720 fetch 1 ,mem_sp_local_key_invalid +0x61e2 026721 rtnne sp_key_valid +0x61e3 026722 jam sp_master_stat_start_done ,mem_master_sp_state +0x61e4 026723 rtn +: 026725 sp_master_send_io_cap_send: +0x61e5 026726 call tid_initiate +0x61e6 026727 jam lmp_io_cap_req ,mem_lmo_opcode2 +0x61e7 026728 jam sp_stat_key_send ,mem_master_sp_state +0x61e8 026729 rtn +: 026732 sp_master_send_lmp_encapsulated_header: +0x61e9 026733 call tid_initiate +0x61ea 026734 jam lmp_encapsulated_header ,mem_lmo_opcode2 +0x61eb 026735 jam sp_stat_random_send ,mem_master_sp_state +0x61ec 026736 rtn +: 026738 sp_master_commitment_compare: +0x61ed 026739 arg mem_sp_calc_result_high ,rega +0x61ee 026740 arg mem_sp_confirm_remote ,regb +0x61ef 026741 arg 16 ,loopcnt +0x61f0 026742 call string_compare +0x61f1 026743 branch sp_master_commitment_compare_success ,zero +0x61f2 026744 jam sp_stat_null ,mem_master_sp_state +0x61f3 026745 call master_clear_mem_master_sp_flag +0x61f4 026746 jam pdu_not_allowed ,mem_lmo_reason2 +0x61f5 026747 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +0x61f6 026748 branch reject_lmp_packet +: 026749 sp_master_commitment_compare_success: +0x61f7 026750 jam sp_stat_confirm_calc ,mem_master_sp_state +0x61f8 026751 call master_set_mem_master_sp_flag +0x61f9 026752 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +0x61fa 026753 branch accept_lmp_msg +: 026757 sp_master_send_lmp_simple_pairing_number: +0x61fb 026758 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +0x61fc 026759 rtn +: 026763 sp_send_lmp_encapsulated_header: +0x61fd 026766 jam lmp_encapsulated_header ,mem_lmo_opcode2 +0x61fe 026768 rtn +: 026774 send_lmp_encapsulated_header: +0x61ff 026775 jam 0 ,mem_sp_local_key_send_count +0x6200 026776 force 4 ,pdata +0x6201 026777 call msg_send_lmp +0x6202 026778 force encapsulated_major_type_p192 ,pdata +0x6203 026779 istore 1 ,contw +0x6204 026780 force encapsulated_minor_type_p192 ,pdata +0x6205 026781 istore 1 ,contw +0x6206 026782 force encapsulated_len_p192 ,pdata +0x6207 026783 istore 1 ,contw +0x6208 026784 call check_localsm +0x6209 026785 branch send_lmp_request ,true +0x620a 026786 branch send_lmp_reply +: 026788 send_lmp_encapsulated_payload: +0x620b 026790 force 17 ,pdata +0x620c 026791 call msg_send_lmp +0x620d 026792 fetch 1 ,mem_sp_local_key_send_count +0x620e 026793 arg mem_sp_pubkey_local ,contr +0x620f 026794 iadd contr ,contr +0x6210 026795 ifetch 8 ,contr +0x6211 026796 istore 8 ,contw +0x6212 026797 ifetch 8 ,contr +0x6213 026798 istore 8 ,contw +0x6214 026799 fetch 1 ,mem_sp_local_key_send_count +0x6215 026800 increase 16 ,pdata +0x6216 026801 store 1 ,mem_sp_local_key_send_count +0x6217 026802 call check_localsm +0x6218 026803 branch send_lmp_request ,true +0x6219 026804 branch send_lmp_reply +: 026807 sp_send_lmp_simple_pairing_comfirm: +0x621a 026808 jam sp_stat_random_recv ,mem_sp_state +0x621b 026809 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 +0x621c 026810 rtn +: 026811 send_lmp_simple_pairing_comfirm: +0x621d 026814 force 17 ,pdata +0x621e 026815 call msg_send_lmp +0x621f 026816 arg mem_sp_calc_result_high ,contr +0x6220 026817 ifetch 8 ,contr +0x6221 026818 istore 8 ,contw +0x6222 026819 ifetch 8 ,contr +0x6223 026820 istore 8 ,contw +0x6224 026821 branch send_lmp_reply +: 026823 sp_send_lmp_simple_pairing_number: +0x6225 026824 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +0x6226 026825 rtn +: 026827 send_lmp_simple_pairing_number: +0x6227 026829 call check_localsm +0x6228 026830 call sp_local_random_key_generator ,true +0x6229 026831 force 17 ,pdata +0x622a 026832 call msg_send_lmp +0x622b 026833 arg mem_sp_random_local ,contr +0x622c 026834 ifetch 8 ,contr +0x622d 026835 istore 8 ,contw +0x622e 026836 ifetch 8 ,contr +0x622f 026837 istore 8 ,contw +0x6230 026838 call check_localsm +0x6231 026839 nbranch send_lmp_reply ,true +0x6232 026840 branch send_lmp_request ,true +: 026842 master_sp_sm_end: +0x6233 026844 jam sp_stat_done ,mem_master_sp_state +: 026845 sp_aurand_send: +0x6234 026846 call tid_initiate +0x6235 026847 jam lmp_au_rand ,mem_lmo_opcode2 +0x6236 026848 call check_localsm_master +0x6237 026849 branch sp_master_key_prarm_push ,true +0x6238 026850 branch sp_link_key_prarm_push +: 026851 master_sp_send_lmp_dhkey_check: +0x6239 026852 call tid_reply +: 026853 sp_send_lmp_dhkey_check: +0x623a 026854 jam lmp_dhkey_check ,mem_lmo_opcode2 +0x623b 026855 rtn +: 026856 send_lmp_dhkey_check: +0x623c 026858 force 17 ,pdata +0x623d 026859 call msg_send_lmp +0x623e 026860 arg mem_sp_calc_result_high ,contr +0x623f 026861 ifetch 8 ,contr +0x6240 026862 istore 8 ,contw +0x6241 026863 ifetch 8 ,contr +0x6242 026864 istore 8 ,contw +0x6243 026865 call check_localsm +0x6244 026866 nbranch send_lmp_reply ,true +0x6245 026867 branch send_lmp_request ,true +: 026869 send_lmp_enc_key_size_mask_res: +0x6246 026870 force 3 ,pdata +0x6247 026871 call msg_send_lmp +0x6248 026872 setarg 0xfffe +0x6249 026873 istore 2 ,contw +0x624a 026874 branch send_lmp_reply +: 026876 send_lmp_auto_rate: +0x624b 026877 branch send_lmp_request +: 026878 send_lmp_clkoffset_req: +0x624c 026879 branch send_lmp_request +: 026880 send_lmp_quality_of_service: +0x624d 026881 branch send_lmp_request +: 026882 send_lmp_test_activate: +0x624e 026883 branch send_lmp_request +: 026888 send_lmp_comb_key: +0x624f 026889 call generate_random_number +0x6250 026890 arg mem_lap ,rega +0x6251 026891 call generate_linkkey +0x6252 026892 force 17 ,pdata +0x6253 026893 call msg_send_lmp +0x6254 026894 arg mem_kinit ,rega +0x6255 026895 arg mem_random_number ,regb +0x6256 026896 call xor16 +0x6257 026897 nbranch send_lmp_follow ,master +0x6258 026898 branch send_lmp_tid +: 026900 send_lmp_inrand: +0x6259 026901 call generate_random_number +0x625a 026902 arg mem_plap ,rega +0x625b 026903 call generate_kinit +: 026904 send_lmp_rand: +0x625c 026905 force 17 ,pdata +0x625d 026906 call msg_send_lmp +0x625e 026907 arg mem_random_number ,contr +0x625f 026908 call memcpy16 +0x6260 026909 fetch 1 ,mem_conn_sm +0x6261 026910 beq conn_sm_auth_wait ,send_lmp_request +0x6262 026911 beq conn_sm_pairing_wait ,send_lmp_request +0x6263 026912 branch send_lmp_tid +: 026914 send_lmp_aurand: +0x6264 026915 fetch 1 ,mem_pairing_auth +0x6265 026916 branch send_lmp_aurand_notpairing ,blank +0x6266 026917 call check_localsm +0x6267 026918 call tid_initiate ,true +0x6268 026919 ncall tid_reply ,true +0x6269 026920 branch send_lmp_aurand_common +: 026921 send_lmp_aurand_notpairing: +0x626a 026922 call tid_initiate +: 026923 send_lmp_aurand_common: +0x626b 026924 call generate_random_number +0x626c 026925 branch send_lmp_rand +: 026927 send_lmp_sres: +0x626d 026928 arg mem_lap ,rega +0x626e 026929 call function_e1 +0x626f 026930 force 5 ,pdata +0x6270 026931 call msg_send_lmp +0x6271 026932 fetch 4 ,mem_input_store +0x6272 026933 istore 4 ,contw +0x6273 026934 arg mem_sres_tid ,temp +0x6274 026935 call special_tid_store +0x6275 026936 call copy_aco +0x6276 026937 call check_localsm +0x6277 026938 branch send_lmp_sres_master ,true +0x6278 026939 jam done_encryp ,mem_wait_encryption +0x6279 026940 fetch 1 ,mem_pairing_auth +0x627a 026941 rtn blank +0x627b 026942 jam lmp_au_rand ,mem_lmo_opcode2 +: 026943 send_lmp_sres_master: +0x627c 026944 fetch 1 ,mem_link_key_exists +0x627d 026945 rtn blank +: 026946 send_lmp_sres_startenc: +0x627e 026947 call check_localsm +0x627f 026948 nbranch send_lmp_sres_startenc_slave ,true +0x6280 026949 fetch 1 ,mem_auth_enable +0x6281 026950 rtn blank +0x6282 026951 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x6283 026952 rtn +: 026953 send_lmp_sres_startenc_slave: +0x6284 026954 rtnmark0 mark_slave_in_rand_accepted +0x6285 026955 set0 mark_slave_in_rand_accepted ,mark +0x6286 026956 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x6287 026957 rtn +: 026961 send_lmp_start_encryption: +0x6288 026962 call generate_random_number +0x6289 026963 call function_e3 +0x628a 026964 force 17 ,pdata +0x628b 026965 call msg_send_lmp +0x628c 026966 arg mem_random_number ,contr +0x628d 026967 call memcpy16 +0x628e 026968 branch send_lmp_tid +: 026970 send_lmp_stop_encryption_req: +0x628f 026971 force 1 ,pdata +0x6290 026972 call msg_send_lmp +0x6291 026973 branch send_lmp_tid +: 026975 send_lmp_encryption_key_size_req: +0x6292 026976 force 2 ,pdata +0x6293 026977 call msg_send_lmp +0x6294 026978 force 16 ,pdata +0x6295 026979 istore 1 ,contw +0x6296 026980 store 1 ,mem_key_size +0x6297 026981 branch send_lmp_tid +: 026983 msg_send_lmp: +0x6298 026985 lshift3 pdata ,pdata +0x6299 026986 or_into 0x07 ,pdata +0x629a 026987 store 1 ,mem_lmo_header_length +0x629b 026988 arg 17 ,loopcnt +0x629c 026989 arg mem_lmo_payload ,contw +0x629d 026990 call clear_mem +0x629e 026991 arg mem_lmo_payload ,contw +0x629f 026992 rtn +: 026994 send_lmpext: +0x62a0 026995 and pdata ,0x7f ,rega +0x62a1 026996 jam lmp_escape ,mem_lmp_to_send +0x62a2 026997 deposit queue +0x62a3 026998 call msg_send_lmp +0x62a4 026999 deposit rega +0x62a5 027000 istore 1 ,contw +0x62a6 027001 rtn +: 027003 send_lmp_follow: +0x62a7 027004 fetch 1 ,mem_lmp_to_send +0x62a8 027005 lshift pdata ,pdata +0x62a9 027006 fetcht 1 ,mem_state_map +0x62aa 027007 isolate1 smap_lmptid ,temp +0x62ab 027008 setflag true ,0 ,pdata +0x62ac 027009 branch send_lmp_exit +: 027012 send_lmp_tid: +0x62ad 027013 fetcht 1 ,mem_state_map +0x62ae 027014 and_into 1 ,temp +0x62af 027015 branch send_lmp_end +: 027017 send_lmp_reply: +0x62b0 027018 force 0 ,temp +0x62b1 027019 branch send_lmp_end +: 027021 send_lmp_request: +0x62b2 027022 force 1 ,temp +: 027023 send_lmp_end: +0x62b3 027024 fetch 1 ,mem_lmp_to_send +0x62b4 027025 lshift pdata ,pdata +0x62b5 027026 setflag master ,0 ,pdata +0x62b6 027027 ixor temp ,pdata +: 027028 send_lmp_exit: +0x62b7 027029 store 1 ,mem_lmo_header_opcode +0x62b8 027030 jam 0 ,mem_lmp_to_send +0x62b9 027031 call lmo_fifo_process_lmo0empty +0x62ba 027032 enable user +0x62bb 027033 rtn +: 027036 lmo_fifo_check: +0x62bc 027037 fetch 1 ,mem_lmo_opcode2 +0x62bd 027038 rtn blank +0x62be 027039 call lmo_fifo_process +0x62bf 027040 fetch 1 ,mem_lmo_opcode2 +0x62c0 027041 rtn +: 027043 lmo_fifo_process: +0x62c1 027044 bpatchx patch30_6 ,mem_patch30 +0x62c2 027045 fetch 1 ,mem_lmp_to_send +0x62c3 027046 branch lmo_fifo_process_lmo0empty ,blank +0x62c4 027047 fetch 1 ,mem_lmo_opcode1 +0x62c5 027048 nrtn blank +0x62c6 027049 branch lmo_fifo_process_lmo2to1 +: 027050 lmo_fifo_process_lmo0empty: +0x62c7 027051 fetch 1 ,mem_lmo_opcode1 +0x62c8 027052 branch lmo_fifo_process_lmo1_empty ,blank +0x62c9 027053 fetch 3 ,mem_lmo_opcode1 +0x62ca 027054 store 3 ,mem_lmp_to_send +0x62cb 027055 fetcht 1 ,mem_lmo_tid1 +0x62cc 027056 fetch 1 ,mem_state_map +0x62cd 027057 set0 smap_lmptid ,pdata +0x62ce 027058 ior temp ,pdata +0x62cf 027059 store 1 ,mem_state_map +0x62d0 027060 jam 0 ,mem_lmo_opcode1 +: 027061 lmo_fifo_process_lmo2to1: +0x62d1 027062 fetch 1 ,mem_lmo_opcode2 +0x62d2 027063 rtn blank +0x62d3 027064 fetch 4 ,mem_lmo_opcode2 +0x62d4 027065 store 4 ,mem_lmo_opcode1 +0x62d5 027066 jam 0 ,mem_lmo_opcode2 +0x62d6 027067 rtn +: 027068 lmo_fifo_process_lmo1_empty: +0x62d7 027069 fetch 1 ,mem_lmo_opcode2 +0x62d8 027070 rtn blank +0x62d9 027071 fetch 3 ,mem_lmo_opcode2 +0x62da 027072 store 3 ,mem_lmp_to_send +0x62db 027073 fetcht 1 ,mem_lmo_tid2 +0x62dc 027074 fetch 1 ,mem_state_map +0x62dd 027075 set0 smap_lmptid ,pdata +0x62de 027076 ior temp ,pdata +0x62df 027077 store 1 ,mem_state_map +0x62e0 027078 jam 0 ,mem_lmo_opcode2 +0x62e1 027079 rtn +: 027082 special_tid_store: +0x62e2 027083 bpatchx patch30_7 ,mem_patch30 +0x62e3 027084 fetch 1 ,mem_state_map +0x62e4 027085 copy pdata ,regc +0x62e5 027086 ifetch 1 ,temp +0x62e6 027087 call pop_tid_follow +0x62e7 027088 call send_lmp_follow +0x62e8 027089 copy regc ,pdata +0x62e9 027090 store 1 ,mem_state_map +0x62ea 027091 rtn +: 027093 tid_reply: +0x62eb 027094 fetcht 1 ,mem_state_map +0x62ec 027095 set0 smap_lmptidinit ,temp +0x62ed 027096 storet 1 ,mem_state_map +0x62ee 027097 rtn +: 027099 tid_initiate: +0x62ef 027100 fetcht 1 ,mem_state_map +0x62f0 027101 set1 smap_lmptidinit ,temp +0x62f1 027102 storet 1 ,mem_state_map +0x62f2 027103 rtn +: 027106 tid_check: +0x62f3 027107 nsetflag master ,smap_lmptid ,pdata +0x62f4 027108 fetcht 1 ,mem_state_map +0x62f5 027109 ixor temp ,pdata +0x62f6 027110 isolate1 smap_lmptid ,pdata +0x62f7 027111 rtn +: 027114 tid_set_reply: +0x62f8 027115 fetch 1 ,mem_state_map +0x62f9 027116 setflag master ,smap_lmptid ,pdata +0x62fa 027117 store 1 ,mem_state_map +0x62fb 027118 rtn +: 027121 check_localsm: +0x62fc 027122 fetch 1 ,mem_sp_localsm +0x62fd 027123 compare local_statemachine ,pdata ,0x7f +0x62fe 027124 rtn +: 027125 setlocalsm_master: +0x62ff 027126 fetch 1 ,mem_sp_localsm +0x6300 027127 set1 7 ,pdata +0x6301 027128 store 1 ,mem_sp_localsm +0x6302 027129 rtn +: 027130 setlocalsm_slave: +0x6303 027131 fetch 1 ,mem_sp_localsm +0x6304 027132 set0 7 ,pdata +0x6305 027133 store 1 ,mem_sp_localsm +0x6306 027134 rtn +: 027135 check_localsm_master: +0x6307 027136 fetch 1 ,mem_sp_localsm +0x6308 027137 isolate1 7 ,pdata +0x6309 027138 store 1 ,mem_sp_localsm +0x630a 027139 rtn +: 027141 generate_random_number: +0x630b 027143 arg mem_random_number ,contw +: 027144 generate_random: +0x630c 027145 force 16 ,loopcnt +: 027146 generate_random_another: +: 027147 generate_random_loop: +0x630d 027148 random pdata +0x630e 027149 istore 1 ,contw +0x630f 027150 loop generate_random_another +0x6310 027151 rtn +: 027153 generate_linkkey: +0x6311 027154 call function_e21 +0x6312 027155 arg mem_link_key ,rega +0x6313 027156 arg mem_input_store ,regb +0x6314 027157 ifetch 8 ,rega +0x6315 027158 fetcht 1 ,mem_state +0x6316 027159 nsetflag blank ,state_combkey ,temp +0x6317 027160 storet 1 ,mem_state +0x6318 027161 copy rega ,contw +0x6319 027162 call xor16 +0x631a 027163 branch generate_linkkey_continue +: 027169 process_conn_sm: +0x631b 027171 bpatchx patch31_0 ,mem_patch31 +0x631c 027173 call lmo_fifo_check +0x631d 027174 nrtn blank +: 027175 process_conn_sm_continue: +0x631e 027176 fetch 1 ,mem_conn_sm +0x631f 027177 rtn blank +0x6320 027181 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req +0x6321 027182 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept +0x6322 027183 beq conn_sm_send_features ,host_create_conn_send_features +0x6323 027184 beq conn_sm_wait_features_res ,host_create_conn_waiting +0x6324 027185 beq conn_sm_send_switch ,host_create_conn_send_switch +0x6325 027186 beq conn_sm_auth_pair ,host_create_conn_auth_pair +0x6326 027187 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait +0x6327 027188 beq conn_sm_encrypt ,host_create_conn_encrypt +0x6328 027189 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait +0x6329 027190 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear +0x632a 027191 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete +0x632b 027192 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete +0x632c 027193 beq conn_sm_detach_delay ,host_create_conn_master_detach +0x632d 027194 beq conn_sm_send_version ,host_create_conn_send_version +0x632e 027195 beq conn_sm_wait_version ,host_create_conn_waiting +0x632f 027196 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch +0x6330 027197 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext +0x6331 027198 beq conn_sm_wait_features_ext ,host_create_conn_waiting +0x6332 027199 beq conn_sm_pairing ,host_create_conn_pairing +0x6333 027200 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait +0x6334 027201 beq conn_sm_auth ,host_create_conn_auth +0x6335 027202 beq conn_sm_auth_wait ,host_create_conn_auth_wait +0x6336 027203 beq conn_sm_done ,host_create_conn_done +0x6337 027204 beq conn_sm_wait_done ,host_create_conn_done_wait +0x6338 027205 jam conn_sm_standby ,mem_conn_sm +0x6339 027207 rtn +: 027208 host_create_conn_done: +0x633a 027209 fetch 1 ,mem_lmp_conn_state +0x633b 027210 rtnbit0 received_setup_complete +0x633c 027211 rtnbit0 sent_setup_complete +0x633d 027212 jam conn_sm_standby ,mem_conn_sm +0x633e 027213 call host_conn_judge_encrypt +0x633f 027214 branch scheduler_start_upper_sm +: 027216 host_conn_judge_encrypt: +0x6340 027217 fetch 1 ,mem_connection_options +0x6341 027218 rtnbit0 connection_encrypt +0x6342 027219 jam conn_sm_encrypt_wait ,mem_conn_sm +0x6343 027220 rtn +: 027222 host_create_conn_done_wait: +0x6344 027223 arg enpt_delay_timer ,queue +0x6345 027224 call timer_check +0x6346 027225 nrtn blank +0x6347 027226 jam conn_sm_done ,mem_conn_sm +0x6348 027227 rtn +: 027229 host_create_conn_auth: +0x6349 027230 fetch 1 ,mem_connection_options +0x634a 027231 set0 connection_auth ,pdata +0x634b 027232 store 1 ,mem_connection_options +0x634c 027233 jam conn_sm_auth_wait ,mem_conn_sm +0x634d 027234 jam lmp_au_rand ,mem_lmo_opcode2 +0x634e 027235 rtn +: 027236 host_create_conn_auth_wait: +0x634f 027237 rtn +: 027238 host_create_conn_pairing: +0x6350 027239 fetch 1 ,mem_pincode_state +0x6351 027240 rtnne pincode_state_pincode_ready +0x6352 027241 call host_auth +0x6353 027242 jam conn_sm_pairing_wait ,mem_conn_sm +0x6354 027243 rtn +: 027245 host_create_conn_pairing_wait: +0x6355 027246 rtn +: 027247 host_creat_conn_send_feat_ext: +0x6356 027248 jam conn_sm_wait_features_ext ,mem_conn_sm +0x6357 027249 jam lmp_ext_features_req ,mem_lmo_opcode2 +0x6358 027250 rtn +: 027251 host_create_conn_send_version: +0x6359 027252 jam conn_sm_wait_version ,mem_conn_sm +0x635a 027253 jam lmp_version_req ,mem_lmo_opcode2 +0x635b 027254 rtn +: 027256 host_creat_conn_wait_switch: +0x635c 027257 fetch 1 ,mem_switch_flag +0x635d 027258 rtneq switch_flag_init +0x635e 027259 beq switch_flag_accept ,host_create_conn_switch_accept +0x635f 027260 arg switch_wait_timer ,queue +0x6360 027261 call timer_check +0x6361 027262 nrtn blank +0x6362 027263 jam switch_flag_init ,mem_switch_flag +0x6363 027264 branch host_create_conn_switch +: 027265 host_create_conn_switch_accept: +0x6364 027266 rtn master +0x6365 027267 branch host_create_conn_auth_pair +: 027269 host_create_conn_send_features: +0x6366 027270 jam conn_sm_wait_features_res ,mem_conn_sm +0x6367 027271 jam lmp_features_req ,mem_lmo_opcode2 +0x6368 027272 rtn +: 027273 host_create_conn_send_switch: +0x6369 027274 jam lmp_switch_req ,mem_lmo_opcode2 +0x636a 027275 set1 mark_switch_initiated ,mark +0x636b 027276 jam conn_sm_wait_conn_accept ,mem_conn_sm +0x636c 027277 setarg 0x1ff +0x636d 027278 store 2 ,mem_soft_timer +0x636e 027279 rtn +: 027280 host_create_conn_send_conn_req: +0x636f 027281 jam conn_sm_wait_conn_accept ,mem_conn_sm +0x6370 027282 jam 0xff ,mem_soft_timer +0x6371 027283 set0 mark_reconn_recieve_switch ,mark +0x6372 027284 jam lmp_host_connection_req ,mem_lmo_opcode2 +0x6373 027285 branch init_lmp_reinit +: 027286 host_create_conn_wait_accept: +0x6374 027287 rtnmark1 mark_reconn_recieve_switch +0x6375 027288 fetch 2 ,mem_soft_timer +0x6376 027289 sub pdata ,1 ,pdata +0x6377 027290 branch host_create_conn_resend ,zero +0x6378 027291 store 2 ,mem_soft_timer +0x6379 027292 rtn +: 027293 host_create_conn_resend: +0x637a 027294 jam conn_sm_send_switch ,mem_conn_sm +0x637b 027295 rtn +: 027296 host_create_conn_waiting: +0x637c 027298 rtn +: 027300 host_create_conn_switch: +0x637d 027301 fetch 1 ,mem_lmp_conn_state +0x637e 027302 rtnbit0 sent_setup_complete +0x637f 027303 rtnbit0 received_setup_complete +0x6380 027304 fetch 1 ,mem_connection_options +0x6381 027305 set0 connection_switch ,pdata +0x6382 027306 store 1 ,mem_connection_options +0x6383 027307 jam lmp_switch_req ,mem_lmo_opcode2 +0x6384 027308 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm +0x6385 027309 rtn +: 027311 host_create_conn_send_setup_complete: +0x6386 027312 jam conn_sm_wait_setup_complete ,mem_conn_sm +0x6387 027313 jam lmp_setup_complete ,mem_lmo_opcode2 +0x6388 027314 rtn +: 027316 host_create_conn_wait_setup_complete: +0x6389 027317 fetch 1 ,mem_lmp_conn_state +0x638a 027318 rtnbit0 received_setup_complete +0x638b 027319 jam conn_sm_standby ,mem_conn_sm +0x638c 027321 rtn +: 027322 host_create_conn_wait_setup_complete_rtn: +0x638d 027323 jam conn_sm_auth_pair ,mem_conn_sm +0x638e 027324 rtn +: 027326 host_create_conn_master_detach: +0x638f 027327 fetch 1 ,mem_soft_timer +0x6390 027328 increase -1 ,pdata +0x6391 027329 branch host_create_conn_send_detach ,blank +0x6392 027330 store 1 ,mem_soft_timer +0x6393 027331 rtn +: 027332 host_create_conn_send_detach: +0x6394 027333 jam lmp_detach ,mem_lmo_opcode2 +0x6395 027334 jam local_host ,mem_disconn_reason_send +0x6396 027335 jam 0 ,mem_conn_sm +0x6397 027336 rtn +: 027337 host_create_conn_auth_pair: +0x6398 027339 fetch 1 ,mem_connection_options +0x6399 027340 bbit1 connection_switch ,host_create_conn_switch +0x639a 027341 bbit1 connection_auth ,host_create_conn_auth_pair_true +: 027342 host_create_conn_sm_done: +0x639b 027343 jam conn_sm_done ,mem_conn_sm +0x639c 027344 rtn +: 027345 host_create_conn_auth_pair_true: +0x639d 027346 fetch 1 ,mem_link_key_exists +0x639e 027347 branch host_create_conn_auth_pair_nokey ,blank +0x639f 027348 fetch 1 ,mem_lmp_conn_state +0x63a0 027349 rtnbit0 sent_setup_complete +0x63a1 027350 rtnbit0 received_setup_complete +0x63a2 027351 fetch 4 ,mem_aurand_send_delay_time +0x63a3 027352 arg 100 ,temp +0x63a4 027353 iadd temp ,temp +0x63a5 027354 copy clkn_bt ,pdata +0x63a6 027355 isub temp ,null +0x63a7 027356 nrtn positive +0x63a8 027357 branch host_create_conn_auth +: 027361 host_create_conn_auth_pair_nokey: +0x63a9 027362 jam conn_sm_pairing ,mem_conn_sm +0x63aa 027363 jam 4 ,mem_pin_length +0x63ab 027364 setarg 0x3030 +0x63ac 027365 store 2 ,mem_pin +0x63ad 027366 istore 2 ,contw +0x63ae 027367 jam pincode_state_pincode_ready ,mem_pincode_state +0x63af 027368 branch host_create_conn_pairing +: 027370 host_create_conn_auth_pair_wait: +0x63b0 027371 rtn +: 027372 host_create_conn_encrypt: +0x63b1 027373 fetch 1 ,mem_connection_options +0x63b2 027374 bbit1 connection_encrypt ,host_create_conn_encrypt_start +0x63b3 027375 jam conn_sm_done ,mem_conn_sm +0x63b4 027376 rtn +: 027378 host_create_conn_encrypt_start: +0x63b5 027379 fetch 1 ,mem_connection_options +0x63b6 027380 set0 connection_encrypt ,pdata +0x63b7 027381 store 1 ,mem_connection_options +0x63b8 027382 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x63b9 027383 rtn +: 027385 host_create_conn_encrypt_wait: +0x63ba 027386 fetch 1 ,mem_wait_encryption +0x63bb 027387 rtn blank +0x63bc 027388 jam conn_sm_standby ,mem_conn_sm +0x63bd 027389 branch host_create_conn_encrypt_start +: 027391 host_create_conn_encrypt_wait_clear: +0x63be 027392 jam conn_sm_send_setup_complete ,mem_conn_sm +0x63bf 027393 rtn +: 027395 host_auth: +0x63c0 027396 fetch 1 ,mem_op +0x63c1 027397 bbit1 op_inrand_req ,remote_auth +0x63c2 027398 call tid_initiate +0x63c3 027399 jam lmp_in_rand ,mem_lmo_opcode2 +0x63c4 027400 branch cmd_exit +: 027401 remote_auth: +0x63c5 027402 fetch 1 ,mem_op +0x63c6 027403 set0 op_inrand_req ,pdata +0x63c7 027404 store 1 ,mem_op +0x63c8 027405 call lmp_accept_inrand +0x63c9 027406 call tid_set_reply +0x63ca 027407 branch cmd_exit +: 027409 pincode_reinit: +0x63cb 027410 setarg 4 +0x63cc 027411 store 1 ,mem_pin_length +0x63cd 027412 setarg 0x3030 +0x63ce 027413 istore 2 ,contw +0x63cf 027414 istore 2 ,contw +0x63d0 027415 rtn +: 027421 twspi_reset: +0x63d1 027422 bpatchx patch31_4 ,mem_patch31 +0x63d2 027423 hfetch 1 ,core_gpio_oe3 +0x63d3 027424 arg 0x06 ,temp +0x63d4 027425 ior temp ,pdata +0x63d5 027426 hstore 1 ,core_gpio_oe3 +0x63d6 027427 hfetch 1 ,core_gpio_out3 +0x63d7 027428 ior temp ,pdata +0x63d8 027429 hstore 1 ,core_gpio_out3 +0x63d9 027430 call twspi_disable +0x63da 027431 hfetch 1 ,core_gpio_out3 +0x63db 027432 set0 1 ,pdata +0x63dc 027433 set0 2 ,pdata +0x63dd 027434 hstore 1 ,core_gpio_out3 +0x63de 027435 nop 30 +0x63df 027436 branch twspi_enable +: 027438 twspi_reset2: +0x63e0 027439 hfetch 1 ,core_gpio_oe3 +0x63e1 027440 arg 0xc0 ,temp +0x63e2 027441 ior temp ,pdata +0x63e3 027442 hstore 1 ,core_gpio_oe3 +0x63e4 027443 hfetch 1 ,core_gpio_out3 +0x63e5 027444 ior temp ,pdata +0x63e6 027445 hstore 1 ,core_gpio_out3 +0x63e7 027446 call twspi_disable +0x63e8 027447 hfetch 1 ,core_gpio_out3 +0x63e9 027448 set0 6 ,pdata +0x63ea 027449 set0 7 ,pdata +0x63eb 027450 hstore 1 ,core_gpio_out3 +0x63ec 027451 nop 30 +0x63ed 027452 branch twspi_enable2 +: 027454 twspi_disable: +0x63ee 027455 hfetch 1 ,core_gpio_sel1 +0x63ef 027456 and pdata ,0xfc ,pdata +0x63f0 027457 hstore 1 ,core_gpio_sel1 +0x63f1 027458 rtn +: 027459 twspi_enable: +0x63f2 027460 hfetch 1 ,core_gpio_sel1 +0x63f3 027461 or pdata ,0x01 ,pdata +0x63f4 027462 hstore 1 ,core_gpio_sel1 +0x63f5 027463 rtn +: 027464 twspi_enable2: +0x63f6 027465 hfetch 1 ,core_gpio_sel1 +0x63f7 027466 or pdata ,0x03 ,pdata +0x63f8 027467 set0 4 ,pdata +0x63f9 027468 hstore 1 ,core_gpio_sel1 +0x63fa 027469 rtn +: 027473 sensor_read: +0x63fb 027474 copy pdata ,regb +0x63fc 027475 call spi_ncs_enable +0x63fd 027476 nop 100 +0x63fe 027477 copy regb ,pdata +0x63ff 027478 call twspi_read +0x6400 027479 copy pdata ,regb +0x6401 027480 call spi_ncs_disable +0x6402 027481 nop 100 +0x6403 027482 copy regb ,pdata +0x6404 027483 rtn +: 027485 sensor_write: +0x6405 027486 copy pdata ,regb +0x6406 027487 call spi_ncs_enable +0x6407 027488 nop 100 +0x6408 027489 copy regb ,pdata +0x6409 027490 call twspi_write +0x640a 027491 call spi_ncs_disable +0x640b 027492 nop 100 +0x640c 027493 rtn +: 027496 spi_ncs_gpio_init: +0x640d 027497 fetcht 1 ,mem_spi_ncs_gpio +0x640e 027498 branch gpio_config_output +: 027501 spi_ncs_enable: +0x640f 027502 fetcht 1 ,mem_spi_ncs_gpio +0x6410 027503 branch gpio_out_active +: 027506 spi_ncs_disable: +0x6411 027507 fetcht 1 ,mem_spi_ncs_gpio +0x6412 027508 branch gpio_out_inactive +: 027511 twspi_write: +0x6413 027512 branch spid_write_reg +: 027514 twspi_read: +0x6414 027515 branch spid_read_reg +: 027522 read_function_aes: +0x6415 027523 nbranch read_function ,user +0x6416 027524 hfetch 1 ,core_gpio_key2 +0x6417 027525 or_into 0x2 ,pdata +0x6418 027526 hstore 1 ,core_gpio_key2 +: 027527 read_function: +0x6419 027528 copy temp ,null +0x641a 027529 branch read_fuction_zero ,zero +0x641b 027530 copy regc ,pc +: 027531 read_fuction_zero: +0x641c 027532 isolate0 0 ,null +0x641d 027533 branch set_ucode_status +: 027536 get_block_header: +0x641e 027537 force 4 ,temp +: 027538 get_block_header0: +0x641f 027539 arg mem_ucode_buf ,rega +0x6420 027540 hfetch 1 ,core_gpio_key2 +0x6421 027541 and_into 0xfd ,pdata +0x6422 027542 hstore 1 ,core_gpio_key2 +0x6423 027543 call read_function +0x6424 027544 arg 0x55aa ,rega +0x6425 027545 fetch 2 ,mem_ucode_buf +0x6426 027546 ifetcht 2 ,contr +0x6427 027547 isub rega ,null +0x6428 027548 rtn +: 027550 read_first_block: +0x6429 027551 arg 2 ,temp +0x642a 027552 arg mem_ucode_ptr ,rega +0x642b 027553 call read_function +0x642c 027554 fetch 2 ,mem_ucode_ptr +0x642d 027555 store 2 ,mem_addr_mi +0x642e 027556 call get_iv ,user +0x642f 027557 rtn +: 027559 get_iv: +0x6430 027560 arg 16 ,temp +0x6431 027561 arg mem_ucode_keybuf ,rega +0x6432 027562 hfetch 1 ,core_gpio_key2 +0x6433 027563 and_into 0xfd ,pdata +0x6434 027564 hstore 1 ,core_gpio_key2 +0x6435 027565 call read_function +0x6436 027566 arg mem_ucode_keybuf ,contr +0x6437 027567 arg 16 ,loopcnt +0x6438 027568 call aes_load_data +0x6439 027569 call aes_init +0x643a 027570 call aes_clear_data +0x643b 027571 branch do_aes_cbc +: 027573 load_storage: +0x643c 027574 disable match +0x643d 027575 call get_block_header +0x643e 027576 nrtn zero +0x643f 027577 enable match +0x6440 027578 jam 0x80 ,core_ucode_ctrl +0x6441 027579 jam 0 ,core_ucode_hi +0x6442 027580 jam 0 ,core_ucode_low +0x6443 027581 arg core_ucode_data ,rega +0x6444 027582 call read_function_aes +0x6445 027583 jam 0x0 ,core_ucode_ctrl +: 027584 load_storage_loop: +0x6446 027585 arg 6 ,temp +0x6447 027586 call get_block_header0 +0x6448 027587 nrtn zero +0x6449 027588 ifetch 2 ,contr +0x644a 027589 iforce rega +0x644b 027590 call read_function +0x644c 027591 branch load_storage_loop +: 027595 reload_eeprom: +0x644d 027596 call clean_mem +0x644e 027597 setarg 0x1000 +0x644f 027598 store 2 ,mem_addr_mi +0x6450 027599 arg iicd_read_eep ,regc +0x6451 027600 arg 2 ,loopcnt +: 027601 reload_eeprom_loop: +0x6452 027602 call get_block_header +0x6453 027603 nrtn zero +0x6454 027604 fetch 2 ,mem_addr_mi +0x6455 027605 byteswap pdata ,pdata +0x6456 027606 iadd temp ,pdata +0x6457 027607 byteswap pdata ,pdata +0x6458 027608 store 2 ,mem_addr_mi +0x6459 027609 loop reload_eeprom_loop +0x645a 027610 branch load_storage_loop +: 027612 loadcode: +0x645b 027613 call clean_mem +0x645c 027614 disable user +0x645d 027615 call otp_enable_chgpump +0x645e 027616 setarg otp_ucode_flag +0x645f 027617 arg mem_otp_ucode_flag ,rega +0x6460 027618 arg 2 ,temp +0x6461 027619 call otpd_read_data +0x6462 027620 fetch 2 ,mem_otp_ucode_flag +0x6463 027621 bbit0 otp_uflag_aes ,loadcode_otp +0x6464 027622 jam 0x25 ,core_clkoff +0x6465 027623 setarg otp_ucode_aeskey +0x6466 027624 arg mem_ucode_keybuf ,rega +0x6467 027625 arg 16 ,temp +0x6468 027626 call otpd_read_data +0x6469 027627 jam lock_otp ,core_misc_ctrl +0x646a 027628 set1 mark_otp_encrypt ,mark +0x646b 027629 arg mem_ucode_keybuf ,contr +0x646c 027630 call load_key +0x646d 027631 enable user +: 027632 loadcode_otp: +0x646e 027633 jam 0 ,mem_loadcode_times +: 027634 loadcode_otp_2: +0x646f 027635 call loadcode_check_times +0x6470 027636 fetch 2 ,mem_otp_ucode_flag +0x6471 027637 byteswap pdata ,pdata +0x6472 027638 arg 0x7ff ,temp +0x6473 027639 iand temp ,pdata +0x6474 027640 branch loadcode_iic ,zero +0x6475 027641 call otp_set_addr +0x6476 027642 arg otpd_read_code ,regc +0x6477 027643 call get_iv ,user +0x6478 027644 call load_storage +0x6479 027645 fetch 1 ,mem_ucode_status +0x647a 027646 bbit0 0 ,loadcode_otp_2 +: 027648 loadcode_iic: +0x647b 027649 call otp_disable_chgpump +0x647c 027650 jam 0 ,mem_loadcode_times +: 027651 loadcode_iic_2: +0x647d 027652 call loadcode_check_times +0x647e 027653 call clear_eeprom_size_2k +0x647f 027654 fetch 1 ,mem_otp_ucode_flag +0x6480 027655 bbit1 otp_uflag_skip_eep ,loadcode_spi +0x6481 027656 call loadcode_iic_by_eeprom +0x6482 027657 nbranch loadcode_iic_eeprom_2k ,match +0x6483 027658 fetch 1 ,mem_ucode_status +0x6484 027659 bbit0 0 ,loadcode_iic_2 +0x6485 027660 branch loadcode_hci +: 027661 loadcode_iic_eeprom_2k: +0x6486 027662 call set_eeprom_size_2k +0x6487 027663 fetch 1 ,mem_otp_ucode_flag +0x6488 027664 bbit1 otp_uflag_skip_eep ,loadcode_spi +0x6489 027665 call loadcode_iic_by_eeprom +0x648a 027666 nbranch loadcode_spi ,match +0x648b 027667 fetch 1 ,mem_ucode_status +0x648c 027668 bbit0 0 ,loadcode_iic_2 +0x648d 027669 branch loadcode_hci +: 027671 loadcode_spi: +0x648e 027672 jam 0 ,mem_loadcode_times +: 027673 loadcode_spi_2: +0x648f 027674 call loadcode_check_times +0x6490 027675 fetch 1 ,mem_otp_ucode_flag +0x6491 027676 bbit1 otp_uflag_skip_flash ,loadcode_hci +0x6492 027677 setarg 0x0 +0x6493 027678 store 3 ,mem_addr_hi +0x6494 027679 call spid_init_flash +0x6495 027680 arg spid_load_flash ,regc +0x6496 027681 call read_first_block +0x6497 027682 call load_storage +0x6498 027683 nbranch loadcode_hci ,match +0x6499 027684 fetch 1 ,mem_ucode_status +0x649a 027685 bbit0 0 ,loadcode_spi_2 +: 027687 loadcode_hci: +0x649b 027688 bmark1 mark_otp_encrypt ,loadcode_hci_enc +0x649c 027689 call clear_key_buf +: 027690 loadcode_hci_enc: +0x649d 027691 fetch 1 ,mem_otp_ucode_flag +0x649e 027692 bbit0 otp_uflag_hci ,clear_key_buf +0x649f 027693 jam 0x21 ,core_clkoff +0x64a0 027694 call hci_init +: 027695 loadcode_hci_loop: +0x64a1 027696 call hci_rx_packet +0x64a2 027697 branch loadcode_hci_loop +: 027699 clear_key_buf: +0x64a3 027700 setarg 0 +0x64a4 027701 store 8 ,mem_ucode_keybuf +0x64a5 027702 store 8 ,mem_ucode_keybuf + 8 +0x64a6 027703 force regidx_key ,regext_index +0x64a7 027704 call aes_clear +0x64a8 027705 jam 0x21 ,core_clkoff +0x64a9 027706 rtn +: 027709 loadcode_iic_by_eeprom: +0x64aa 027710 setarg 0x0 +0x64ab 027711 store 2 ,mem_addr_mi +0x64ac 027712 arg iicd_read_eep ,regc +0x64ad 027713 call iicd_init_12m +0x64ae 027714 call read_first_block +0x64af 027715 branch load_storage +: 027718 loadcode_check_times: +0x64b0 027719 fetch 1 ,mem_loadcode_times +0x64b1 027720 increase 1 ,pdata +0x64b2 027721 sub pdata ,3 ,null +0x64b3 027722 nbranch loadcode_error ,positive +0x64b4 027723 store 1 ,mem_loadcode_times +0x64b5 027724 rtn +: 027726 loadcode_error: +0x64b6 027727 call clear_key_buf +0x64b7 027728 call ice_break +0x64b8 027729 rtn +: 027733 set_ucode_status: +0x64b9 027734 fetch 1 ,mem_ucode_status +0x64ba 027735 lshift pdata ,pdata +0x64bb 027736 setflag true ,0 ,pdata +0x64bc 027737 isolate0 15 ,rega +0x64bd 027738 rtn true +0x64be 027739 store 1 ,mem_ucode_status +0x64bf 027740 rtn +: 027743 decrypt_code: +0x64c0 027744 hfetch 1 ,core_gpio_key2 +0x64c1 027745 rtnbit0 1 +0x64c2 027746 branch decrypt_code_skip +: 027747 decrypt_code_loop: +0x64c3 027748 hfetch 1 ,core_dma_status +0x64c4 027749 qisolate1 pdata +0x64c5 027750 rtn true +: 027751 decrypt_code_skip: +0x64c6 027752 hfetch 1 ,core_misc_status +0x64c7 027753 bbit0 1 ,decrypt_code_loop +0x64c8 027754 call do_aes_cbc +0x64c9 027755 branch decrypt_code_loop +: 027759 load_ucode: +0x64ca 027760 fetch 2 ,mem_patch_ptr +0x64cb 027761 rtn blank +0x64cc 027762 jam 0x80 ,core_ucode_ctrl +0x64cd 027763 jam 0 ,core_ucode_hi +0x64ce 027764 jam 0 ,core_ucode_low +0x64cf 027765 fetcht 2 ,mem_patch_len +0x64d0 027766 lshift2 temp ,loopcnt +0x64d1 027767 iforce contr +: 027768 load_ucode_loop: +0x64d2 027769 ifetch 1 ,contr +0x64d3 027770 hstore 1 ,core_ucode_data +0x64d4 027771 loop load_ucode_loop +0x64d5 027772 jam 0x0 ,core_ucode_ctrl +0x64d6 027773 rtn +: 027778 spid_init: +0x64d7 027779 bpatchx patch31_5 ,mem_patch31 +0x64d8 027780 call spid_init_common +0x64d9 027781 branch twspi_enable +: 027783 spid_init2: +0x64da 027784 call spid_init_common +0x64db 027785 call twspi_disable +0x64dc 027786 branch twspi_enable2 +: 027788 spid_init_common: +0x64dd 027789 fetch 1 ,mem_spi_init_clk +0x64de 027790 hstore 1 ,core_spid_ctrl +0x64df 027791 fetch 1 ,mem_spi_init_delay_time +0x64e0 027792 hstore 1 ,core_spid_delay +0x64e1 027793 setarg mem_spid_tbuf +0x64e2 027794 hstore 2 ,core_spid_txaddr +0x64e3 027795 setarg mem_spid_rbuf +0x64e4 027796 hstore 2 ,core_spid_rxaddr +0x64e5 027797 branch twspi_disable +: 027799 spid_reset: +0x64e6 027800 hfetch 1 ,core_spid_ctrl +0x64e7 027801 set1 7 ,pdata +0x64e8 027802 hstore 1 ,core_spid_ctrl +0x64e9 027803 set0 7 ,pdata +0x64ea 027804 hstore 1 ,core_spid_ctrl +0x64eb 027805 rtn +: 027809 spid_write_reg: +0x64ec 027810 set1 7 ,pdata +0x64ed 027811 store 2 ,mem_spid_tbuf +0x64ee 027812 bpatchx patch31_6 ,mem_patch31 +0x64ef 027813 jam 2 ,core_spid_txlen +0x64f0 027814 jam 0 ,core_spid_rxlen +0x64f1 027815 jam spid_start ,core_misc_ctrl +0x64f2 027816 branch wait_spid_done +: 027819 spid_read_reg: +0x64f3 027820 force 1 ,temp +: 027822 spid_read_regs: +0x64f4 027824 store 1 ,mem_spid_tbuf +0x64f5 027825 bpatchx patch31_7 ,mem_patch31 +0x64f6 027826 jam 1 ,core_spid_txlen +0x64f7 027827 hstoret 2 ,core_spid_rxlen +0x64f8 027828 jam spid_start ,core_misc_ctrl +0x64f9 027829 call wait_spid_done +0x64fa 027830 fetch 1 ,mem_spid_rbuf +0x64fb 027831 rtn +: 027833 wait_spid_done: +0x64fc 027834 fetch 2 ,mem_afh_error_total +0x64fd 027835 increase 1 ,pdata +0x64fe 027836 store 2 ,mem_afh_error_total +0x64ff 027837 hfetch 1 ,core_dma_status +0x6500 027838 bbit0 spid_done ,wait_spid_done +0x6501 027839 rtn +: 027841 spid_init_flash: +0x6502 027842 jam 0x40 ,core_spid_ctrl +0x6503 027843 jam 0x0 ,core_spid_delay +0x6504 027844 hfetch 1 ,core_gpio_sel1 +0x6505 027845 set0 0 ,pdata +0x6506 027846 set1 1 ,pdata +0x6507 027847 hstore 1 ,core_gpio_sel1 +0x6508 027848 setarg 0 +0x6509 027849 store 4 ,mem_spid_tbuf +0x650a 027850 rtn +: 027853 spid_unlock_flash: +0x650b 027854 setarg 0 +0x650c 027855 hstore 2 ,core_spid_rxlen +0x650d 027856 setarg 1 +0x650e 027857 hstore 2 ,core_spid_txlen +0x650f 027858 setarg mem_spid_tbuf +0x6510 027859 hstore 2 ,core_spid_txaddr +0x6511 027860 jam 6 ,mem_spid_tbuf +0x6512 027861 jam spid_start ,core_misc_ctrl +0x6513 027862 branch wait_spid_done +: 027877 flash_write: +0x6514 027878 disable user +0x6515 027879 copy pdata ,regb +0x6516 027880 fetch 1 ,mem_spi_write_flash_sm +0x6517 027881 rtnne flash_sm_no_buys +0x6518 027882 enable user +0x6519 027883 copy regb ,pdata +0x651a 027884 branch flash_write_start +: 027887 flash_write_spi_sm_timer: +0x651b 027888 fetch 1 ,mem_spi_write_flash_sm +0x651c 027889 beq flash_sm_start ,flash_write_start +0x651d 027890 beq flash_sm_erase_sector ,flash_erase_sector +0x651e 027891 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector +0x651f 027892 beq flash_sm_write_data ,flash_write_data +0x6520 027893 beq flash_sm_wait_write_data ,flash_wait_write_data +0x6521 027894 rtn +: 027896 flash_write_start: +0x6522 027897 store 3 ,mem_spi_write_addr +0x6523 027898 copy rega ,pdata +0x6524 027899 store 2 ,mem_spi_write_ptr +0x6525 027900 storet 2 ,mem_spi_write_len +0x6526 027901 jam flash_sm_erase_sector ,mem_spi_write_flash_sm +0x6527 027902 branch spid_init_flash +: 027903 flash_erase_sector: +0x6528 027904 call spid_init_flash +0x6529 027905 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm +0x652a 027906 call spid_unlock_flash +0x652b 027907 arg mem_spid_tbuf ,rega +0x652c 027908 fetch 3 ,mem_spi_write_addr +0x652d 027909 jam 4 ,core_spid_txlen +0x652e 027910 arg flash_command_sector_erase ,temp +0x652f 027911 branch spid_write_flash_common +: 027913 flash_wait_erase_sector: +0x6530 027914 call spid_init_flash +0x6531 027915 call spid_unlock_flash +0x6532 027916 setarg flash_read_satus +0x6533 027917 call spid_read_reg +0x6534 027918 rtnbit1 flash_status_wip +0x6535 027919 jam flash_sm_write_data ,mem_spi_write_flash_sm +0x6536 027920 rtn +: 027921 flash_write_data: +0x6537 027922 call spid_init_flash +0x6538 027923 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm +0x6539 027924 call spid_unlock_flash +0x653a 027925 call flash_data_preserve +0x653b 027926 call spid_write_flash +0x653c 027927 branch flash_data_recover +: 027928 flash_wait_write_data: +0x653d 027929 call spid_init_flash +0x653e 027930 call spid_unlock_flash +0x653f 027931 setarg flash_read_satus +0x6540 027932 call spid_read_reg +0x6541 027933 rtnbit1 flash_status_wip +0x6542 027934 jam flash_sm_no_buys ,mem_spi_write_flash_sm +0x6543 027935 fetch 2 ,mem_cb_spi_flash_write_complate +0x6544 027936 branch callback_func +: 027937 flash_data_recover: +0x6545 027938 fetch 4 ,mem_temp +0x6546 027939 fetcht 2 ,mem_spi_write_ptr +0x6547 027940 increase -4 ,temp +0x6548 027941 istore 4 ,temp +0x6549 027942 rtn +: 027943 flash_data_preserve: +0x654a 027944 fetcht 2 ,mem_spi_write_ptr +0x654b 027945 copy temp ,rega +0x654c 027946 increase -4 ,temp +0x654d 027947 ifetch 4 ,temp +0x654e 027948 store 4 ,mem_temp +0x654f 027949 fetcht 2 ,mem_spi_write_len +0x6550 027950 fetch 3 ,mem_spi_write_addr +0x6551 027951 rtn +: 027955 spid_write_flash: +0x6552 027956 increase 4 ,temp +0x6553 027957 hstoret 2 ,core_spid_txlen +0x6554 027958 arg flash_command_write_data ,temp +0x6555 027959 increase -4 ,rega +: 027960 spid_write_flash_common: +0x6556 027962 istoret 1 ,rega +0x6557 027963 rshift16 pdata ,temp +0x6558 027964 istoret 1 ,contw +0x6559 027965 rshift8 pdata ,temp +0x655a 027966 istoret 1 ,contw +0x655b 027967 istore 1 ,contw +0x655c 027968 deposit rega +0x655d 027969 hstore 2 ,core_spid_txaddr +0x655e 027970 setarg 0 +0x655f 027971 hstore 2 ,core_spid_rxlen +0x6560 027972 jam spid_start ,core_misc_ctrl +0x6561 027973 branch wait_spid_done +: 027977 spid_read_flash: +0x6562 027978 hstoret 2 ,core_spid_rxlen +0x6563 027979 rshift16 pdata ,temp +0x6564 027980 storet 1 ,mem_addr_hi +0x6565 027981 rshift8 pdata ,temp +0x6566 027982 storet 1 ,mem_addr_mi +0x6567 027983 store 1 ,mem_addr_lo +0x6568 027984 setarg 4 +0x6569 027985 hstore 2 ,core_spid_txlen +0x656a 027986 jam flash_command_read_data ,mem_spid_tbuf +0x656b 027987 setarg mem_spid_tbuf +0x656c 027988 hstore 2 ,core_spid_txaddr +0x656d 027989 deposit rega +0x656e 027990 hstore 2 ,core_spid_rxaddr +0x656f 027991 hfetch 1 ,core_spid_ctrl +0x6570 027992 isolate0 15 ,rega +0x6571 027993 setflag true ,6 ,pdata +0x6572 027994 hstore 1 ,core_spid_ctrl +0x6573 027995 jam spid_start ,core_misc_ctrl +: 027996 spi_read_flash_wait: +0x6574 027997 hfetch 1 ,core_dma_status +0x6575 027998 bbit1 7 ,spi_read_flash_wait +0x6576 027999 arg spid_done ,queue +0x6577 028000 branch wait_spid_done +: 028004 spid_load_flash: +0x6578 028005 hstoret 2 ,core_spid_rxlen +0x6579 028006 setarg 4 +0x657a 028007 hstore 2 ,core_spid_txlen +0x657b 028008 jam 3 ,mem_spid_tbuf +0x657c 028009 setarg mem_spid_tbuf +0x657d 028010 hstore 2 ,core_spid_txaddr +0x657e 028011 deposit rega +0x657f 028012 hstore 2 ,core_spid_rxaddr +0x6580 028013 hfetch 1 ,core_spid_ctrl +0x6581 028014 isolate0 15 ,rega +0x6582 028015 setflag true ,6 ,pdata +0x6583 028016 hstore 1 ,core_spid_ctrl +0x6584 028017 jam spid_start ,core_misc_ctrl +: 028018 spi_load_flash_wait: +0x6585 028019 hfetch 1 ,core_dma_status +0x6586 028020 bbit1 7 ,spi_load_flash_wait +0x6587 028021 arg spid_done ,queue +0x6588 028022 call decrypt_code +0x6589 028023 call wait_spid_done +0x658a 028024 isolate1 spid_crcok ,pdata +0x658b 028025 call set_ucode_status +0x658c 028026 fetch 1 ,mem_addr_hi +0x658d 028027 lshift16 pdata ,regb +0x658e 028028 fetch 1 ,mem_addr_mi +0x658f 028029 lshift8 pdata ,pdata +0x6590 028030 ior regb ,regb +0x6591 028031 fetch 1 ,mem_addr_lo +0x6592 028032 ior regb ,pdata +0x6593 028033 iadd temp ,pdata +0x6594 028034 store 1 ,mem_addr_lo +0x6595 028035 rshift8 pdata ,pdata +0x6596 028036 store 1 ,mem_addr_mi +0x6597 028037 rshift8 pdata ,pdata +0x6598 028038 store 1 ,mem_addr_hi +0x6599 028039 rtn +: 028044 soft_reset_chip: +0x659a 028045 jam 1 ,core_reset +0x659b 028046 rtn +: 028052 iic_init_390k: +0x659c 028053 jam 12 ,core_iicd_scl_low +0x659d 028054 jam 13 ,core_iicd_scl_high +0x659e 028055 jam 13 ,core_iicd_start_setup +0x659f 028056 jam 13 ,core_iicd_start_hold +0x65a0 028057 jam 13 ,core_iicd_stop_setup +0x65a1 028058 jam 12 ,core_iicd_data_setup +0x65a2 028059 branch iicd_init_gpio +: 028062 iicd_init_12m: +0x65a3 028063 jam 5 ,core_iicd_scl_low +0x65a4 028064 jam 7 ,core_iicd_scl_high +0x65a5 028065 jam 7 ,core_iicd_start_setup +0x65a6 028066 jam 7 ,core_iicd_start_hold +0x65a7 028067 jam 7 ,core_iicd_stop_setup +0x65a8 028068 jam 5 ,core_iicd_data_setup +: 028069 iicd_init_gpio: +0x65a9 028070 hfetch 1 ,core_gpio_pu3 +0x65aa 028071 or_into 0xc0 ,pdata +0x65ab 028072 hstore 1 ,core_gpio_pu3 +0x65ac 028073 hfetch 1 ,core_gpio_sel1 +0x65ad 028074 or_into 0x10 ,pdata +0x65ae 028075 hstore 1 ,core_gpio_sel1 +0x65af 028076 rtn +: 028080 wait_iicd_done: +0x65b0 028081 hfetch 1 ,core_dma_status +0x65b1 028082 bbit0 iicd_done ,wait_iicd_done +0x65b2 028083 rtn +: 028091 iicd_read_data: +0x65b3 028092 hstore 2 ,core_iicd_txlen +0x65b4 028093 deposit rega +0x65b5 028094 hstore 2 ,core_iicd_txaddr +0x65b6 028095 deposit regb +0x65b7 028096 hstore 2 ,core_iicd_rxaddr +0x65b8 028097 deposit temp +0x65b9 028098 hstore 2 ,core_iicd_rxlen +0x65ba 028099 arg 1 ,temp +0x65bb 028100 nsetflag blank ,1 ,temp +0x65bc 028101 hstore 1 ,core_iicd_ctrl +0x65bd 028102 jam iicd_start ,core_misc_ctrl +0x65be 028103 branch wait_iicd_done +: 028106 set_eeprom_size_2k: +0x65bf 028107 set1 mark_eeprom_size ,mark +0x65c0 028108 jam 0x08 ,mem_eeprom_block_size +0x65c1 028109 rtn +: 028111 clear_eeprom_size_2k: +0x65c2 028112 set0 mark_eeprom_size ,mark +0x65c3 028113 jam 0x20 ,mem_eeprom_block_size +0x65c4 028114 rtn +: 028117 iicd_read_eep_data_size_2k: +0x65c5 028118 fetch 1 ,mem_eeprom_base +0x65c6 028119 iadd regb ,pdata +0x65c7 028120 store 1 ,mem_addr_mi +0x65c8 028121 branch iicd_read_eep_size_2k +: 028123 iicd_read_eep_size_2k_lcadcode: +0x65c9 028124 fetch 2 ,mem_addr_mi +0x65ca 028125 byteswap pdata ,pdata +0x65cb 028126 store 1 ,mem_addr_mi +: 028131 iicd_read_eep_size_2k: +0x65cc 028132 setarg 3 +0x65cd 028133 hstore 2 ,core_iicd_txlen +0x65ce 028134 jam 0xa0 ,mem_iicd_tbuf +0x65cf 028135 jam 0xa1 ,mem_iicd_tbuf + 2 +0x65d0 028136 branch iicd_read_eep_common +: 028142 iicd_write_protect_eep_data: +0x65d1 028143 storet 2 ,mem_temp +0x65d2 028144 call iicd_eeprom_write_enable +0x65d3 028145 fetcht 2 ,mem_temp +0x65d4 028146 call iicd_write_eep_data +0x65d5 028147 branch iicd_eeprom_write_disable +: 028149 iicd_eeprom_write_enable: +0x65d6 028150 fetch 1 ,mem_eeprom_wp_gpio +0x65d7 028151 rtneq gpio_disable +0x65d8 028152 bbit0 6 ,iicd_wp_gpio_output_low +0x65d9 028153 setarg 150000 +0x65da 028154 call sleep +: 028155 iicd_wp_gpio_output_low: +0x65db 028156 fetcht 1 ,mem_eeprom_wp_gpio +0x65dc 028157 branch gpio_out_active +: 028159 iicd_eeprom_write_disable: +0x65dd 028160 fetcht 1 ,mem_eeprom_wp_gpio +0x65de 028161 branch gpio_out_inactive +: 028166 iicd_read_eep_data: +0x65df 028167 bpatchx patch32_0 ,mem_patch32 +0x65e0 028168 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k +0x65e1 028169 fetch 2 ,mem_eeprom_base +0x65e2 028170 iadd regb ,pdata +0x65e3 028171 byteswap pdata ,pdata +0x65e4 028172 store 2 ,mem_addr_mi +: 028175 iicd_read_eep: +0x65e5 028176 bpatchx patch32_1 ,mem_patch32 +0x65e6 028177 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode +0x65e7 028178 setarg 4 +0x65e8 028179 hstore 2 ,core_iicd_txlen +0x65e9 028180 jam 0xa0 ,mem_iicd_tbuf +0x65ea 028181 jam 0xa1 ,mem_iicd_tbuf + 3 +: 028182 iicd_read_eep_common: +0x65eb 028183 setarg mem_iicd_tbuf +0x65ec 028184 hstore 2 ,core_iicd_txaddr +0x65ed 028185 hstoret 2 ,core_iicd_rxlen +0x65ee 028186 deposit rega +0x65ef 028187 hstore 2 ,core_iicd_rxaddr +0x65f0 028188 setarg 2 +0x65f1 028189 isolate0 15 ,rega +0x65f2 028190 setflag true ,0 ,pdata +0x65f3 028191 hstore 1 ,core_iicd_ctrl +0x65f4 028192 jam iicd_start ,core_misc_ctrl +0x65f5 028193 arg iicd_done ,queue +0x65f6 028194 call decrypt_code +0x65f7 028195 call wait_iicd_done +0x65f8 028196 isolate1 iicd_crcok ,pdata +0x65f9 028197 call set_ucode_status +0x65fa 028198 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k +0x65fb 028199 fetch 2 ,mem_addr_mi +0x65fc 028200 byteswap pdata ,pdata +0x65fd 028201 iadd temp ,pdata +0x65fe 028202 byteswap pdata ,pdata +0x65ff 028203 store 2 ,mem_addr_mi +0x6600 028204 rtn +: 028206 iicd_read_eep_load_code_size_2k: +0x6601 028207 fetch 1 ,mem_addr_mi +0x6602 028208 iadd temp ,pdata +0x6603 028209 byteswap pdata ,pdata +0x6604 028210 store 2 ,mem_addr_mi +0x6605 028211 rtn +: 028217 iicd_write_eep_data: +0x6606 028218 fetch 2 ,mem_eeprom_base +0x6607 028219 iadd regb ,pdata +: 028222 iicd_write_ota_data: +0x6608 028223 store 2 ,mem_pdatatemp +0x6609 028224 bpatchx patch32_2 ,mem_patch32 +0x660a 028225 storet 2 ,mem_temp +0x660b 028226 copy rega ,pdata +0x660c 028227 store 2 ,mem_contr +: 028228 iicd_write_eep_loop: +0x660d 028229 call iicd_eep_transparency +0x660e 028231 fetcht 2 ,mem_regb +0x660f 028232 fetch 2 ,mem_contr +0x6610 028233 copy pdata ,rega +0x6611 028234 fetch 2 ,mem_pdatatemp +0x6612 028236 call iicd_write_eep +0x6613 028238 fetch 2 ,mem_regb +0x6614 028239 fetcht 2 ,mem_contr +0x6615 028240 iadd temp ,temp +0x6616 028241 storet 2 ,mem_contr +0x6617 028242 fetcht 2 ,mem_pdatatemp +0x6618 028243 iadd temp ,temp +0x6619 028244 storet 2 ,mem_pdatatemp +0x661a 028245 fetch 2 ,mem_temp +0x661b 028246 nbranch iicd_write_eep_loop ,blank +0x661c 028247 rtn +: 028255 iicd_eep_transparency: +0x661d 028256 bpatchx patch32_3 ,mem_patch32 +0x661e 028257 fetch 1 ,mem_eeprom_block_size +0x661f 028258 increase -1 ,pdata +0x6620 028259 fetcht 2 ,mem_pdatatemp +0x6621 028260 ior temp ,pdata +0x6622 028261 increase 1 ,pdata +0x6623 028262 store 3 ,mem_regc +0x6624 028264 fetch 2 ,mem_temp +0x6625 028265 iadd temp ,pdata +0x6626 028267 fetcht 3 ,mem_regc +0x6627 028268 isub temp ,pdata +0x6628 028269 nbranch iicd_eep_deal_short_packet ,positive +0x6629 028270 store 2 ,mem_temp +0x662a 028271 fetch 3 ,mem_regc +0x662b 028272 fetcht 2 ,mem_pdatatemp +0x662c 028273 isub temp ,pdata +0x662d 028274 store 2 ,mem_regb +0x662e 028275 rtn +: 028276 iicd_eep_deal_short_packet: +0x662f 028277 fetch 2 ,mem_temp +0x6630 028278 store 2 ,mem_regb +0x6631 028279 setarg 0 +0x6632 028280 store 2 ,mem_temp +0x6633 028281 rtn +: 028283 iicd_write_eep_size_2k: +0x6634 028284 increase 2 ,temp +0x6635 028285 hstoret 2 ,core_iicd_txlen +0x6636 028286 increase -2 ,rega +0x6637 028287 ifetcht 3 ,rega +0x6638 028288 copy temp ,regb +0x6639 028289 arg 0xa0 ,temp +0x663a 028290 istoret 1 ,rega +0x663b 028292 istore 1 ,contw +0x663c 028293 branch iicd_write_eep_common +: 028296 iicd_write_eep: +0x663d 028297 copy pdata ,regb +0x663e 028298 bpatchx patch32_4 ,mem_patch32 +0x663f 028299 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k +0x6640 028300 copy regb ,pdata +0x6641 028301 increase 3 ,temp +0x6642 028302 hstoret 2 ,core_iicd_txlen +0x6643 028303 increase -3 ,rega +0x6644 028304 ifetcht 3 ,rega +0x6645 028305 copy temp ,regb +0x6646 028306 arg 0xa0 ,temp +0x6647 028307 istoret 1 ,rega +0x6648 028308 byteswap pdata ,pdata +0x6649 028309 istore 2 ,contw +: 028310 iicd_write_eep_common: +0x664a 028311 deposit rega +0x664b 028312 hstore 2 ,core_iicd_txaddr +0x664c 028313 setarg 0 +0x664d 028314 hstore 2 ,core_iicd_rxlen +0x664e 028315 jam 1 ,core_iicd_ctrl +0x664f 028316 jam iicd_start ,core_misc_ctrl +0x6650 028317 call wait_iicd_done +0x6651 028318 copy regb ,pdata +0x6652 028319 istore 3 ,rega +: 028321 iic_check_eeprom_standby: +0x6653 028322 bpatchx patch32_5 ,mem_patch32 +0x6654 028323 jam 0 ,mem_iicd_tbuf + 3 +: 028324 iic_check_eeprom_standby_wait: +0x6655 028325 setarg 1 +0x6656 028326 hstore 2 ,core_iicd_txlen +0x6657 028327 jam 0xa0 ,mem_iicd_tbuf +0x6658 028328 setarg mem_iicd_tbuf +0x6659 028329 hstore 2 ,core_iicd_txaddr +0x665a 028330 setarg 0 +0x665b 028331 hstore 2 ,core_iicd_rxlen +0x665c 028332 hstore 2 ,core_iicd_rxaddr +0x665d 028333 setarg 3 +0x665e 028334 hstore 1 ,core_iicd_ctrl +0x665f 028335 jam iicd_start ,core_misc_ctrl +0x6660 028336 call wait_iicd_done +0x6661 028337 hfetch 1 ,core_dma_status +0x6662 028338 rtnbit0 iicd_ack +0x6663 028339 nop 1500 +0x6664 028340 fetch 1 ,mem_iicd_tbuf + 3 +0x6665 028341 increase 1 ,pdata +0x6666 028342 store 1 ,mem_iicd_tbuf + 3 +0x6667 028343 sub pdata ,40 ,null +0x6668 028344 nrtn positive +0x6669 028345 branch iic_check_eeprom_standby_wait +: 028349 otp_enable_chgpump: +0x666a 028350 jam 0x70 ,rfen_chgpump +0x666b 028351 nop param_chgpump_delay +0x666c 028352 rtn +: 028354 otp_disable_chgpump: +0x666d 028355 jam 0x30 ,rfen_chgpump +0x666e 028356 rtn +: 028358 otp_set_addr: +0x666f 028359 lshift3 pdata ,pdata +0x6670 028360 hstore 2 ,core_otp_addr +0x6671 028361 jam 0 ,core_otpd_ctrl +0x6672 028362 rtn +: 028365 otp_write: +0x6673 028366 call otp_set_addr +0x6674 028367 call otp_ce +: 028368 otp_program: +0x6675 028369 ifetcht 1 ,rega +0x6676 028370 increase 1 ,rega +0x6677 028371 force 0 ,queue +: 028372 otp_program_bit: +0x6678 028373 qisolate0 temp +0x6679 028374 branch otp_skip_0 ,true +0x667a 028375 hfetch 1 ,core_otp_din +0x667b 028376 set1 6 ,pdata +0x667c 028377 set1 7 ,pdata +0x667d 028378 hstore 1 ,core_otp_din +0x667e 028379 jam 0x02 ,core_otp_ctrl +0x667f 028380 jam 0x82 ,core_otp_ctrl +0x6680 028381 set0 7 ,pdata +0x6681 028382 hstore 1 ,core_otp_din +0x6682 028383 jam 0x8a ,core_otp_ctrl +0x6683 028384 nop 11 +0x6684 028385 jam 0xca ,core_otp_ctrl +0x6685 028386 nop 33 +0x6686 028387 jam 0x4a ,core_otp_ctrl +0x6687 028388 nop 44 +0x6688 028389 jam 0xca ,core_otp_ctrl +0x6689 028390 nop 22 +0x668a 028391 jam 0x8a ,core_otp_ctrl +0x668b 028392 nop 33 +0x668c 028393 jam 0x82 ,core_otp_ctrl +0x668d 028394 nop 1 +0x668e 028395 jam 0x92 ,core_otp_ctrl +0x668f 028396 nop 10 +0x6690 028397 jam 0xb2 ,core_otp_ctrl +0x6691 028398 hfetch 1 ,core_otp_rdata +0x6692 028399 jam 0x92 ,core_otp_ctrl +0x6693 028400 nop 1 +0x6694 028401 jam 0x82 ,core_otp_ctrl +0x6695 028402 qisolate0 pdata +0x6696 028403 branch otp_program_bit ,true +: 028404 otp_skip_0: +0x6697 028405 hfetch 2 ,core_otp_addr +0x6698 028406 increase 1 ,pdata +0x6699 028407 hstore 2 ,core_otp_addr +0x669a 028408 increase 1 ,queue +0x669b 028409 compare 8 ,queue ,0xf +0x669c 028410 nbranch otp_program_bit ,true +0x669d 028411 loop otp_program +0x669e 028412 jam 0x83 ,core_otp_ctrl +0x669f 028413 rtn +: 028415 otp_ce: +0x66a0 028416 jam 0x82 ,core_otp_ctrl +0x66a1 028417 nop 12 +0x66a2 028418 jam 0x80 ,core_otp_ctrl +0x66a3 028419 jam 0x82 ,core_otp_ctrl +0x66a4 028420 nop 150 +0x66a5 028421 rtn +: 028424 otpd_read_init: +0x66a6 028425 call otp_ce +0x66a7 028426 jam 0xa2 ,core_otp_ctrl +0x66a8 028427 deposit rega +0x66a9 028428 hstore 2 ,core_otpd_addr +0x66aa 028429 set1 11 ,temp +0x66ab 028430 isolate0 15 ,pdata +0x66ac 028431 setflag true ,15 ,temp +0x66ad 028432 hstoret 2 ,core_otpd_len +0x66ae 028433 jam otpd_start ,core_misc_ctrl +0x66af 028434 rtn +: 028436 otpd_wait_end: +0x66b0 028437 hfetch 1 ,core_dma_status +0x66b1 028438 bbit0 otpd_done ,otpd_wait_end +0x66b2 028439 rtn +: 028442 otpd_read_data: +0x66b3 028443 call otp_set_addr +0x66b4 028444 call otpd_read_init +0x66b5 028445 call otpd_wait_end +0x66b6 028446 jam 0x83 ,core_otp_ctrl +0x66b7 028447 rtn +: 028452 otpd_read_code: +0x66b8 028453 hfetch 2 ,core_current_otp_addr +0x66b9 028454 hstore 2 ,core_otp_addr +0x66ba 028455 call otpd_read_init +0x66bb 028456 arg otpd_done ,queue +0x66bc 028457 call decrypt_code +0x66bd 028458 call otpd_wait_end +0x66be 028459 isolate1 otpd_crcok ,pdata +0x66bf 028460 call set_ucode_status +0x66c0 028461 jam 0x83 ,core_otp_ctrl +0x66c1 028462 rtn +: 028465 uartd_prepare_tx: +0x66c2 028466 hfetch 2 ,core_uart_twptr +0x66c3 028467 iforce contwu +0x66c4 028468 rtn +: 028470 uartd_send: +0x66c5 028471 deposit contwu +0x66c6 028472 hstore 2 ,core_uart_twptr +0x66c7 028473 rtn +: 028475 uartd_rxdone: +0x66c8 028476 deposit contru +0x66c9 028477 hstore 2 ,core_uart_rrptr +0x66ca 028478 rtn +: 028480 uartd_prepare_rx: +0x66cb 028481 hfetch 2 ,core_uart_rrptr +0x66cc 028482 copy pdata ,contru +0x66cd 028483 rtn +: 028485 uart_set_baud_by_mem: +0x66ce 028486 fetch uart_baud_len ,mem_baud +0x66cf 028487 hstore uart_baud_len ,core_uart_baud +0x66d0 028488 rtn +: 028490 uart_copy_tx_bytes_fast: +0x66d1 028491 deposit loopcnt +0x66d2 028492 rtn blank +: 028493 uart_copy_tx_bytes_fast_loop: +0x66d3 028494 increase -8 ,loopcnt +0x66d4 028495 call uart_tx_8_bytes ,positive +0x66d5 028496 rtn zero +0x66d6 028497 branch uart_copy_tx_bytes_fast_loop ,positive +0x66d7 028498 increase 8 ,loopcnt +: 028499 uart_copy_tx_bytes_fast_loop_four: +0x66d8 028500 increase -4 ,loopcnt +0x66d9 028501 call uart_tx_4_bytes ,positive +0x66da 028502 rtn zero +0x66db 028503 branch uart_copy_tx_bytes_fast_loop_four ,positive +0x66dc 028504 increase 4 ,loopcnt +0x66dd 028505 branch uart_copy_tx_bytes +: 028507 uart_tx_8_bytes: +0x66de 028508 ifetch 8 ,contr +0x66df 028509 istore 8 ,contwu +0x66e0 028510 rtn +: 028512 uart_tx_4_bytes: +0x66e1 028513 ifetch 4 ,contr +0x66e2 028514 istore 4 ,contwu +0x66e3 028515 rtn +: 028517 uart_copy_tx_bytes: +0x66e4 028518 deposit loopcnt +0x66e5 028519 rtn blank +: 028520 uart_copy_tx_bytes_loop: +0x66e6 028521 ifetch 1 ,contr +0x66e7 028522 istore 1 ,contwu +0x66e8 028523 loop uart_copy_tx_bytes_loop +0x66e9 028524 rtn +: 028526 uart_copy_rx_bytes_fast: +0x66ea 028527 deposit loopcnt +0x66eb 028528 rtn blank +: 028529 uart_copy_rx_bytes_fast_loop: +0x66ec 028530 increase -8 ,loopcnt +0x66ed 028531 call uart_rx_8_bytes ,positive +0x66ee 028532 rtn zero +0x66ef 028533 branch uart_copy_rx_bytes_fast_loop ,positive +0x66f0 028534 increase 8 ,loopcnt +: 028535 uart_copy_rx_bytes_fast_loop_four: +0x66f1 028536 increase -4 ,loopcnt +0x66f2 028537 call uart_rx_4_bytes ,positive +0x66f3 028538 rtn zero +0x66f4 028539 branch uart_copy_rx_bytes_fast_loop_four ,positive +0x66f5 028540 increase 4 ,loopcnt +0x66f6 028541 branch uart_copy_rx_bytes +: 028543 uart_rx_8_bytes: +0x66f7 028544 ifetch 8 ,contru +0x66f8 028545 istore 8 ,contw +0x66f9 028546 rtn +: 028548 uart_rx_4_bytes: +0x66fa 028549 ifetch 4 ,contru +0x66fb 028550 istore 4 ,contw +0x66fc 028551 rtn +: 028554 uart_copy_rx_bytes: +0x66fd 028555 deposit loopcnt +0x66fe 028556 rtn blank +: 028557 uart_copy_rx_bytes_loop: +0x66ff 028558 ifetch 1 ,contru +0x6700 028559 istore 1 ,contw +0x6701 028560 loop uart_copy_rx_bytes_loop +0x6702 028561 rtn +: 028564 uart_copy_rx2tx: +0x6703 028565 deposit loopcnt +0x6704 028566 rtn blank +: 028567 uart_copy_rx2tx_loop: +0x6705 028568 ifetch 1 ,contru +0x6706 028569 istore 1 ,contwu +0x6707 028570 loop uart_copy_rx2tx_loop +0x6708 028571 rtn +: 028576 app_store_nvram_event: +0x6709 028577 jam bt_evt_store_nvram ,mem_fifo_temp +0x670a 028578 branch ui_ipc_send_event +: 028580 check_51cmd_store_reconn_info: +: 028581 check_51cmd_update_device_record: +0x670b 028582 bpatchx patch32_6 ,mem_patch32 +0x670c 028583 fetch 1 ,mem_nv_data_number +0x670d 028584 rtn blank +0x670e 028585 call check_nvram +0x670f 028586 call init_device_list ,zero +0x6710 028587 call nvram_find_addr_from_bd_list +: 028588 write_device_record: +0x6711 028589 fetch 1 ,mem_nv_data_number +0x6712 028590 icopy regc +0x6713 028591 fetcht 2 ,mem_nv_data_ptr +0x6714 028592 storet 2 ,mem_list_item_ptr +: 028593 write_device_loop_find: +0x6715 028594 copy regc ,pdata +0x6716 028595 branch app_store_nvram_event ,blank +0x6717 028596 increase -1 ,regc +0x6718 028597 copy temp ,rega +0x6719 028598 ifetch 1 ,rega +0x671a 028599 fetcht 1 ,mem_select_list_item +0x671b 028600 isub temp ,null +0x671c 028601 call set_index_finded_device ,zero +0x671d 028602 branch write_device_loop_find0 ,positive +0x671e 028603 ifetch 1 ,rega +0x671f 028604 increase 1 ,pdata +0x6720 028605 istore 1 ,rega +: 028606 write_device_loop_find0: +0x6721 028607 fetcht 2 ,mem_list_item_ptr +0x6722 028608 increase nv_data_len ,temp +0x6723 028609 storet 2 ,mem_list_item_ptr +0x6724 028610 branch write_device_loop_find +: 028612 set_index_finded_device: +0x6725 028613 setarg 0 +0x6726 028614 istore 1 ,rega +0x6727 028615 fetch 1 ,mem_temp_reconn_record +0x6728 028616 istore 1 ,contw +0x6729 028617 bne rec_3_mode ,set_index_finded_device_ble_mode +0x672a 028618 arg mem_link_key ,regb +: 028619 set_index_find_device_master_addr: +0x672b 028620 ifetch 6 ,contr +0x672c 028621 istore 8 ,contw +0x672d 028622 setarg 0 +0x672e 028623 istore 8 ,contw +0x672f 028624 copy regb ,contr +: 028625 store_rec_data_common: +0x6730 028626 call memcpy16 +0x6731 028627 force 1 ,null +0x6732 028628 rtn +: 028630 set_index_finded_device_ble_mode: +0x6733 028631 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk +0x6734 028632 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv +0x6735 028633 arg mem_le_ltk ,regb +0x6736 028634 branch set_index_find_device_master_addr +: 028636 set_index_finded_device_irk: +0x6737 028637 arg mem_le_irk ,contr +0x6738 028638 call memcpy16 +: 028639 store_ble_rec_data_common: +0x6739 028640 arg mem_le_ltk ,contr +0x673a 028641 branch store_rec_data_common +: 028643 set_index_finded_device_ediv: +0x673b 028644 arg mem_le_rand ,contr +0x673c 028645 call memcpy16 +0x673d 028646 branch store_ble_rec_data_common +: 028649 nvram_find_addr_from_bd_list: +0x673e 028650 call disable_user +0x673f 028651 fetch 1 ,mem_nv_data_number +0x6740 028652 rtn blank +0x6741 028653 fetch 2 ,mem_ui_state_map +0x6742 028654 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode +: 028655 find_addr_from_bd_list_ble_mode: +0x6743 028656 bpatchx patch32_7 ,mem_patch32 +0x6744 028657 fetch 1 ,mem_le_conn_peer_addr_type +0x6745 028658 beq master_public_addr ,find_addr_from_bd_list_static_addr +0x6746 028659 fetch 1 ,mem_le_plap + 5 +0x6747 028660 compare 0xc0 ,pdata ,0xc0 +0x6748 028661 branch find_addr_from_bd_list_static_addr ,true +0x6749 028662 compare 0x40 ,pdata ,0xc0 +0x674a 028663 branch find_addr_from_bd_list_random_addr ,true +0x674b 028664 compare 0x00 ,pdata ,0xc0 +0x674c 028665 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true +: 028666 find_addr_from_bd_list_static_addr: +0x674d 028667 jam rec_4_mode_static_address ,mem_temp_reconn_record +0x674e 028668 fetch 6 ,mem_le_plap +0x674f 028669 branch find_addr_from_bd_list_common +: 028671 find_addr_from_bd_list_random_non_resolvable_private_address: +0x6750 028672 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record +0x6751 028673 branch find_addr_from_bd_list_common +: 028676 find_addr_from_bd_list_random_addr: +0x6752 028677 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record +0x6753 028678 branch find_addr_from_bd_list_common +: 028681 find_addr_from_bd_list_spp_mode: +0x6754 028682 bpatchx patch33_0 ,mem_patch33 +0x6755 028683 jam rec_3_mode ,mem_temp_reconn_record +0x6756 028684 fetch 6 ,mem_plap +: 028685 find_addr_from_bd_list_common: +0x6757 028686 store 6 ,mem_temp_reconn_record + 1 +0x6758 028687 fetch 2 ,mem_nv_data_ptr +0x6759 028688 ifetcht 1 ,pdata +0x675a 028689 pincrease 1 +0x675b 028690 store 2 ,mem_list_item_ptr +0x675c 028691 storet 1 ,mem_select_list_item +0x675d 028692 fetch 1 ,mem_nv_data_number +0x675e 028693 icopy regc +: 028694 nvram_find_addr_from_list: +0x675f 028695 fetch 2 ,mem_list_item_ptr +0x6760 028696 copy pdata ,rega +0x6761 028697 call nvram_find_addr_from_list_compare +0x6762 028698 rtn user +0x6763 028699 fetcht 2 ,mem_list_item_ptr +0x6764 028700 increase nv_data_len ,temp +0x6765 028701 storet 2 ,mem_list_item_ptr +0x6766 028702 increase -1 ,temp +0x6767 028703 ifetch 1 ,temp +0x6768 028704 store 1 ,mem_select_list_item +0x6769 028705 increase -1 ,regc +0x676a 028706 nbranch nvram_find_addr_from_list ,zero +0x676b 028707 fetch 1 ,mem_nv_data_number +0x676c 028708 pincrease decreased_one +0x676d 028709 store 1 ,mem_select_list_item +0x676e 028710 rtn +: 028711 nvram_find_addr_from_list_compare: +0x676f 028712 fetch 1 ,mem_temp_reconn_record +0x6770 028713 bne rec_3_mode ,find_addr_from_list_compare_ble_mode +: 028714 find_master_addr_from_list_compare: +0x6771 028715 arg mem_temp_reconn_record ,regb +0x6772 028716 arg 7 ,loopcnt +0x6773 028717 call string_compare +0x6774 028718 branch enable_user ,zero +0x6775 028719 rtn +: 028721 find_addr_from_list_compare_ble_mode: +0x6776 028722 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare +0x6777 028723 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare +0x6778 028724 branch find_master_addr_from_list_compare +: 028726 find_irk_form_list_compare: +0x6779 028727 ifetcht 1 ,rega +0x677a 028728 isub temp ,null +0x677b 028729 nrtn zero +0x677c 028730 arg mem_le_prand ,contw +0x677d 028731 arg 16 ,loopcnt +0x677e 028732 call clear_mem +0x677f 028733 fetch 3 ,mem_le_plap + 3 +0x6780 028734 store 3 ,mem_le_prand +0x6781 028735 call genernate_master_macaddress +0x6782 028736 fetch 2 ,mem_le_aes_128 + 13 +0x6783 028737 byteswap pdata ,pdata +0x6784 028738 lshift8 pdata ,temp +0x6785 028739 ifetch 1 ,contr +0x6786 028740 iadd temp ,pdata +0x6787 028741 fetcht 3 ,mem_le_plap +0x6788 028742 isub temp ,null +0x6789 028743 branch enable_user ,zero +0x678a 028744 rtn +: 028747 genernate_master_macaddress: +0x678b 028748 arg mem_le_prand ,contr +0x678c 028749 call load_data128 +0x678d 028751 ifetch 1 ,rega +0x678e 028752 call load_regext +0x678f 028753 force 0x38 ,aes_ctrl +0x6790 028754 force 0x0 ,aes_ctrl +0x6791 028755 call wait_aes +0x6792 028756 arg mem_le_aes_128 ,contw +0x6793 028757 branch store_aes_result +: 028759 find_ediv_form_list_compare: +0x6794 028760 ifetcht 1 ,rega +0x6795 028761 isub temp ,null +0x6796 028762 nrtn zero +0x6797 028763 copy contr ,rega +0x6798 028764 add contr ,8 ,regc +0x6799 028765 arg mem_le_rand ,regb +0x679a 028766 arg 8 ,loopcnt +0x679b 028767 call string_compare +0x679c 028768 branch enable_user ,zero +0x679d 028769 copy regc ,rega +0x679e 028770 arg mem_le_irk ,regb +0x679f 028771 arg 8 ,loopcnt +0x67a0 028772 call string_compare +0x67a1 028773 branch enable_user ,zero +0x67a2 028774 rtn +: 028776 check_nvram: +0x67a3 028777 fetch 2 ,mem_nv_data_ptr +0x67a4 028778 ifetcht 1 ,pdata +0x67a5 028779 pincrease nv_data_len +0x67a6 028780 ifetch 1 ,pdata +0x67a7 028781 isub temp ,null +0x67a8 028782 rtn +: 028784 init_device_list: +0x67a9 028785 fetch 1 ,mem_nv_data_number +0x67aa 028786 icopy loopcnt +0x67ab 028787 fetcht 2 ,mem_nv_data_ptr +0x67ac 028788 setarg 0 +: 028789 init_device_list_loop: +0x67ad 028790 istore 1 ,temp +0x67ae 028791 increase nv_data_len ,temp +0x67af 028792 pincrease 1 +0x67b0 028793 loop init_device_list_loop +0x67b1 028794 rtn +: 028796 load_device_list: +0x67b2 028797 bpatchx patch33_1 ,mem_patch33 +0x67b3 028798 call nvram_find_addr_from_bd_list +0x67b4 028799 fetch 1 ,mem_state +0x67b5 028800 setflag user ,state_combkey ,pdata +0x67b6 028801 store 1 ,mem_state +0x67b7 028802 nbranch clear_key_exists ,user +0x67b8 028803 add rega ,10 ,contr +0x67b9 028805 arg mem_link_key ,contw +0x67ba 028806 call memcpy16 +0x67bb 028807 branch check_link_key_load +: 028808 clear_key_exists: +0x67bc 028809 jam 0 ,mem_link_key_exists +0x67bd 028810 rtn +: 028812 load_device_list_mode_4: +0x67be 028813 fetch 9 ,mem_le_ediv +0x67bf 028814 branch clear_ltk_exists ,blank +0x67c0 028815 call nvram_find_addr_from_bd_list +0x67c1 028816 nbranch clear_ltk_exists ,user +0x67c2 028817 fetch 2 ,mem_list_item_ptr +0x67c3 028818 add pdata ,1 ,contr +0x67c4 028819 arg mem_le_irk ,contw +0x67c5 028820 call memcpy16 +0x67c6 028821 arg mem_le_ltk ,contw +0x67c7 028822 call memcpy16 +0x67c8 028823 jam 1 ,mem_ltk_exists +0x67c9 028824 rtn +: 028826 clear_ltk_exists: +0x67ca 028827 jam 0 ,mem_ltk_exists +0x67cb 028828 rtn +: 028831 eeprom_store_le_reconn_info: +0x67cc 028832 fetch 6 ,mem_le_plap +0x67cd 028833 store 6 ,mem_temp_lap +0x67ce 028834 jam rec_4_mode ,mem_record_bt_mode +0x67cf 028835 branch eeprom_store_reconn_info +: 028836 eeprom_store_bd_reconn_info: +0x67d0 028837 fetch 6 ,mem_plap +0x67d1 028838 store 6 ,mem_temp_lap +0x67d2 028839 jam rec_3_mode ,mem_record_bt_mode +: 028840 eeprom_store_reconn_info: +0x67d3 028841 fetch 1 ,mem_device_option +0x67d4 028842 beq dvc_op_module ,check_51cmd_update_device_record +0x67d5 028843 bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr +0x67d6 028844 rtn +: 028847 check_link_key_load: +0x67d7 028848 fetch 8 ,mem_link_key +0x67d8 028849 fetcht 8 ,mem_link_key + 8 +0x67d9 028850 ior temp ,pdata +0x67da 028851 rtn blank +0x67db 028852 jam 1 ,mem_link_key_exists +0x67dc 028853 rtn +: 028860 gpio_set_wake_by_current_state: +0x67dd 028861 bpatchx patch33_2 ,mem_patch33 +0x67de 028862 set1 7 ,temp +0x67df 028863 call gpio_get_bit +0x67e0 028864 nsetflag true ,7 ,temp +: 028869 gpio_set_wake: +0x67e1 028870 bpatchx patch33_3 ,mem_patch33 +0x67e2 028871 sub temp ,ui_button_gpio_disable ,null +0x67e3 028872 rtn zero +0x67e4 028873 isolate0 7 ,temp +0x67e5 028874 and temp ,0x1f ,queue +0x67e6 028875 fetch 4 ,mem_gpio_wakeup_low +0x67e7 028876 qsetflag true ,pdata +0x67e8 028877 store 4 ,mem_gpio_wakeup_low +0x67e9 028878 fetch 4 ,mem_gpio_wakeup_high +0x67ea 028879 nqsetflag true ,pdata +0x67eb 028880 store 4 ,mem_gpio_wakeup_high +0x67ec 028881 rtn +: 028884 gpio_clr_wake: +0x67ed 028885 bpatchx patch33_4 ,mem_patch33 +0x67ee 028886 sub temp ,ui_button_gpio_disable ,null +0x67ef 028887 rtn zero +0x67f0 028888 isolate0 7 ,temp +0x67f1 028889 and temp ,0x1f ,queue +0x67f2 028890 fetch 4 ,mem_gpio_wakeup_low +0x67f3 028891 qset0 pdata +0x67f4 028892 store 4 ,mem_gpio_wakeup_low +0x67f5 028893 fetch 4 ,mem_gpio_wakeup_high +0x67f6 028894 qset0 pdata +0x67f7 028895 store 4 ,mem_gpio_wakeup_high +0x67f8 028896 rtn +: 028899 gpio_config_input_nowake: +0x67f9 028900 call gpio_clr_wake +0x67fa 028901 branch gpio_config_input_without_wake +: 028904 gpio_config_input: +0x67fb 028905 sub temp ,ui_button_gpio_disable ,null +0x67fc 028906 rtn zero +0x67fd 028907 ncall gpio_set_wake ,wake +: 028909 gpio_config_input_without_wake: +0x67fe 028910 arg core_gpio_pd0 ,contw +0x67ff 028911 call gpio_set_bit +0x6800 028912 setflip gpio_active_bit ,temp +0x6801 028913 arg core_gpio_pu0 ,contw +0x6802 028914 call gpio_set_bit +0x6803 028915 set0 gpio_active_bit ,temp +0x6804 028916 arg core_gpio_oe0 ,contw +0x6805 028917 branch gpio_set_bit +: 028920 gpio_set_high_impedance: +0x6806 028921 arg core_gpio_pd0 ,contw +0x6807 028922 call gpio_set_bit +0x6808 028923 set0 gpio_active_bit ,temp +0x6809 028924 arg core_gpio_pu0 ,contw +0x680a 028925 call gpio_set_bit +0x680b 028926 set0 gpio_active_bit ,temp +0x680c 028927 arg core_gpio_oe0 ,contw +0x680d 028928 branch gpio_set_bit +: 028932 gpio_config_output: +0x680e 028933 sub temp ,ui_button_gpio_disable ,null +0x680f 028934 rtn zero +0x6810 028935 setflip gpio_active_bit ,temp +0x6811 028936 call gpio_out +: 028937 gpio_config_output0: +0x6812 028938 set1 gpio_active_bit ,temp +0x6813 028939 arg core_gpio_oe0 ,contw +0x6814 028940 branch gpio_set_bit +: 028942 gpio_common: +0x6815 028943 and temp ,0x07 ,queue +0x6816 028944 rshift3 temp ,pdata +0x6817 028945 and_into 3 ,pdata +0x6818 028946 iadd contw ,contw +0x6819 028947 ifetch 1 ,contw +0x681a 028948 rtn +: 028950 gpio_check_active: +0x681b 028951 arg core_gpio_out0 ,contw +0x681c 028952 branch get_bit_common +: 028956 gpio_get_bit: +0x681d 028957 arg core_gpio_in ,contw +: 028958 get_bit_common: +0x681e 028959 call gpio_common +0x681f 028960 isolate1 gpio_active_bit ,temp +0x6820 028961 branch gpio_get_bit_reverse ,true +0x6821 028962 qisolate0 pdata +0x6822 028963 rtn +: 028964 gpio_get_bit_reverse: +0x6823 028965 qisolate1 pdata +0x6824 028966 rtn +: 028968 gpio_out_inactive: +0x6825 028969 sub temp ,ui_button_gpio_disable ,null +0x6826 028970 rtn zero +0x6827 028971 isolate1 7 ,null +0x6828 028972 branch gpio_out_flag +: 028974 gpio_out_active: +0x6829 028975 sub temp ,ui_button_gpio_disable ,null +0x682a 028976 rtn zero +0x682b 028977 isolate0 7 ,null +: 028980 gpio_out_flag: +0x682c 028981 setarg 0 +0x682d 028982 nsetflag true ,gpio_active_bit ,pdata +0x682e 028983 ixor temp ,temp +: 028986 gpio_out: +0x682f 028987 arg core_gpio_out0 ,contw +: 028990 gpio_set_bit: +0x6830 028991 call gpio_common +0x6831 028992 isolate1 gpio_active_bit ,temp +0x6832 028993 qsetflag true ,pdata +0x6833 028994 istore 1 ,contw +0x6834 028995 rtn +: 028997 gpio_set_before_lpm_common: +0x6835 028998 arg -1 ,rega +0x6836 028999 hfetch 1 ,core_gpio_sel1 +0x6837 029000 compare 0x02 ,pdata ,0x03 +0x6838 029001 call neglact4_from_23_pin ,true +0x6839 029003 compare 0x01 ,pdata ,0x03 +0x683a 029004 call neglact2_form_25_pin ,true +0x683b 029006 compare 0x03 ,pdata ,0x03 +0x683c 029007 call neglact2_form_25_pin ,true +0x683d 029009 isolate1 2 ,pdata +0x683e 029010 call neglect2_from_6_pin ,true +0x683f 029012 isolate1 3 ,pdata +0x6840 029013 call neglect4_from_9_pin ,true +0x6841 029015 isolate1 4 ,pdata +0x6842 029016 call neglact2_form_30_pin ,true +0x6843 029018 isolate1 6 ,pdata +0x6844 029019 nsetflag true ,04 ,rega +0x6845 029021 isolate1 7 ,pdata +0x6846 029022 nsetflag true ,05 ,rega +0x6847 029024 hfetch 1 ,core_gpio_sel2 +0x6848 029025 isolate1 0 ,pdata +0x6849 029026 nsetflag true ,27 ,rega +0x684a 029027 isolate1 1 ,pdata +0x684b 029028 nsetflag true ,28 ,rega +0x684c 029029 isolate1 2 ,pdata +0x684d 029030 nsetflag true ,03 ,rega +0x684e 029031 isolate1 3 ,pdata +0x684f 029032 nsetflag true ,08 ,rega +0x6850 029033 isolate1 4 ,pdata +0x6851 029034 nsetflag true ,20 ,rega +0x6852 029035 isolate1 5 ,pdata +0x6853 029036 nsetflag true ,21 ,rega +0x6854 029037 isolate1 6 ,pdata +0x6855 029038 nsetflag true ,22 ,rega +0x6856 029039 isolate1 7 ,pdata +0x6857 029040 nsetflag true ,23 ,rega +0x6858 029042 hfetch 1 ,core_gpio_sel +0x6859 029043 isolate1 0 ,pdata +0x685a 029044 nsetflag true ,05 ,rega +0x685b 029045 isolate1 1 ,pdata +0x685c 029046 nsetflag true ,06 ,rega +0x685d 029047 isolate1 2 ,pdata +0x685e 029048 nsetflag true ,07 ,rega +0x685f 029049 isolate1 3 ,pdata +0x6860 029050 nsetflag true ,18 ,rega +0x6861 029051 isolate1 4 ,pdata +0x6862 029052 nsetflag true ,19 ,rega +0x6863 029053 isolate1 5 ,pdata +0x6864 029054 nsetflag true ,20 ,rega +0x6865 029055 isolate1 6 ,pdata +0x6866 029056 nsetflag true ,21 ,rega +0x6867 029057 isolate1 7 ,pdata +0x6868 029058 nsetflag true ,22 ,rega +0x6869 029060 hfetch 1 ,core_uart_ctrl +0x686a 029061 isolate1 4 ,pdata +0x686b 029062 call neglact2_form_2_pin ,true +0x686c 029063 bpatchx patch33_5 ,mem_patch33 +0x686d 029065 hfetch 4 ,core_gpio_pu0 +0x686e 029066 hfetcht 4 ,core_gpio_pd0 +0x686f 029067 ior temp ,pdata +0x6870 029068 invert pdata ,pdata +0x6871 029069 iand rega ,pdata +0x6872 029071 hstore 4 ,core_gpio_oe0 +0x6873 029072 rtn +: 029075 neglect2_from_6_pin: +0x6874 029076 arg 6 ,queue +0x6875 029077 branch neglect_2_pin +: 029078 neglect4_from_9_pin: +0x6876 029079 arg 9 ,queue +0x6877 029080 branch neglact_4_pin +: 029081 neglact4_from_23_pin: +0x6878 029082 arg 23 ,queue +0x6879 029083 branch neglact_4_pin +: 029084 neglact2_form_25_pin: +0x687a 029085 arg 25 ,queue +0x687b 029086 branch neglect_2_pin +: 029087 neglact2_form_30_pin: +0x687c 029088 arg 30 ,queue +0x687d 029089 branch neglect_2_pin +: 029090 neglact2_form_2_pin: +0x687e 029091 arg 2 ,queue +0x687f 029092 branch neglect_2_pin +: 029093 neglact_1_pin: +0x6880 029094 arg 1 ,loopcnt +0x6881 029095 branch neglect_pin_loop +: 029096 neglact_4_pin: +0x6882 029097 arg 4 ,loopcnt +0x6883 029098 branch neglect_pin_loop +: 029099 neglect_2_pin: +0x6884 029100 arg 2 ,loopcnt +: 029101 neglect_pin_loop: +0x6885 029102 qset0 rega +0x6886 029103 increase 1 ,queue +0x6887 029104 loop neglect_pin_loop +0x6888 029105 rtn +: 029113 gpio_cfg_uart_tx_output: +0x6889 029114 call gpio_uart2gpio +0x688a 029115 arg uart_wakeup_tx ,temp +0x688b 029116 branch gpio_config_output +: 029118 gpio_pu_uart_tx: +0x688c 029119 call gpio_cfg_uart_tx_output +0x688d 029120 arg uart_wakeup_tx ,temp +0x688e 029121 branch gpio_out_inactive +: 029125 gpio_rx_config_input_with_pu: +0x688f 029126 call gpio_uart2gpio +0x6890 029127 hfetch 1 ,core_gpio_pu0 +0x6891 029128 set1 uart_wakeup_rx ,pdata +0x6892 029129 hstore 1 ,core_gpio_pu0 +0x6893 029130 arg uart_wakeup_rx ,temp +0x6894 029131 branch gpio_config_input +: 029133 gpio_uart2gpio: +0x6895 029134 hfetch 1 ,core_gpio_sel1 +0x6896 029135 and_into 0xfb ,pdata +0x6897 029136 hstore 1 ,core_gpio_sel1 +0x6898 029137 rtn +: 029139 gpio_check_uart_state: +0x6899 029140 hfetch 1 ,core_gpio_sel1 +0x689a 029141 isolate1 2 ,pdata +0x689b 029142 rtn +: 029144 load_chip_option: +0x689c 029145 call otp_enable_chgpump +0x689d 029146 setarg otp_chip_functions +0x689e 029147 arg mem_chip_functions ,rega +0x689f 029148 arg 0x02 ,temp +0x68a0 029149 call otpd_read_data +0x68a1 029150 branch otp_disable_chgpump +: 029153 load_adc_init: +0x68a2 029154 call otp_enable_chgpump +0x68a3 029155 setarg otp_adc_io_0_5v_addr +0x68a4 029156 arg mem_0_5_adc_io_data ,rega +0x68a5 029157 arg 14 ,temp +0x68a6 029158 call otpd_read_data +0x68a7 029159 branch otp_disable_chgpump +: 029163 adc_init_data: +0x68a8 029164 bpatchx patch33_6 ,mem_patch33 +0x68a9 029166 call load_adc_init +0x68aa 029168 fetch 1 ,mem_adc_config_flag +0x68ab 029169 beq adc_config_vinlpm ,adc_init_data_vinlpm +0x68ac 029170 beq adc_config_hvin ,adc_init_data_hvin +0x68ad 029171 beq adc_config_gpio ,adc_init_data_io +0x68ae 029172 rtn +: 029174 adc_init_data_vinlpm: +0x68af 029175 fetcht 2 ,mem_otp_adc_flag +0x68b0 029176 setarg otp_adc_flag +0x68b1 029177 isub temp ,null +0x68b2 029178 branch adc_check_data_vinlpm ,zero +0x68b3 029179 setarg 0x4dfa +0x68b4 029180 store 2 ,mem_3v_adc_vinlpm_data +0x68b5 029181 setarg 0x4894 +0x68b6 029182 store 2 ,mem_2v_adc_vinlpm_data +0x68b7 029183 branch set_vdd_reference_voltage_1v +: 029185 adc_check_data_vinlpm: +0x68b8 029186 fetch 2 ,mem_3v_adc_vinlpm_data +0x68b9 029187 nbranch adc_check_2v_vinlpm ,blank +0x68ba 029188 setarg 0x4dfa +0x68bb 029189 store 2 ,mem_3v_adc_vinlpm_data +: 029190 adc_check_2v_vinlpm: +0x68bc 029191 fetch 2 ,mem_2v_adc_vinlpm_data +0x68bd 029192 nbranch set_vdd_reference_voltage_1v ,blank +0x68be 029193 setarg 0x4894 +0x68bf 029194 store 2 ,mem_2v_adc_vinlpm_data +: 029195 set_vdd_reference_voltage_1v: +0x68c0 029196 setarg 100 +0x68c1 029197 store 2 ,mem_reference_voltage +0x68c2 029198 rtn +: 029200 adc_init_data_hvin: +0x68c3 029201 fetcht 2 ,mem_otp_adc_flag +0x68c4 029202 setarg otp_adc_flag +0x68c5 029203 isub temp ,null +0x68c6 029204 branch adc_check_data_hvin ,zero +0x68c7 029205 setarg 0x5932 +0x68c8 029206 store 2 ,mem_5v_adc_hvin_data +0x68c9 029207 setarg 0x4323 +0x68ca 029208 store 2 ,mem_1v_adc_hvin_data +0x68cb 029209 branch set_vdd_reference_voltage_4v +: 029211 adc_check_data_hvin: +0x68cc 029212 fetch 2 ,mem_5v_adc_hvin_data +0x68cd 029213 nbranch adc_check_1v_hvin ,blank +0x68ce 029214 setarg 0x5932 +0x68cf 029215 store 2 ,mem_5v_adc_hvin_data +: 029216 adc_check_1v_hvin: +0x68d0 029217 fetch 2 ,mem_1v_adc_hvin_data +0x68d1 029218 nbranch set_vdd_reference_voltage_4v ,blank +0x68d2 029219 setarg 0x4323 +0x68d3 029220 store 2 ,mem_1v_adc_hvin_data +: 029221 set_vdd_reference_voltage_4v: +0x68d4 029222 setarg 400 +0x68d5 029223 store 2 ,mem_reference_voltage +0x68d6 029224 rtn +: 029226 adc_init_data_io: +0x68d7 029227 fetcht 2 ,mem_otp_adc_flag +0x68d8 029228 setarg otp_adc_flag +0x68d9 029229 isub temp ,null +0x68da 029230 branch adc_check_data_io ,zero +0x68db 029231 setarg 0x6946 +0x68dc 029232 store 2 ,mem_1v_adc_io_data +0x68dd 029233 setarg 0x5377 +0x68de 029234 store 2 ,mem_0_5_adc_io_data +0x68df 029235 branch set_vdd_reference_voltage_0_5v +: 029237 adc_check_data_io: +0x68e0 029238 fetch 2 ,mem_1v_adc_io_data +0x68e1 029239 nbranch adc_check_0_5v_io ,blank +0x68e2 029240 setarg 0x6946 +0x68e3 029241 store 2 ,mem_1v_adc_io_data +: 029242 adc_check_0_5v_io: +0x68e4 029243 fetch 2 ,mem_0_5_adc_io_data +0x68e5 029244 nbranch set_vdd_reference_voltage_0_5v ,blank +0x68e6 029245 setarg 0x5377 +0x68e7 029246 store 2 ,mem_0_5_adc_io_data +: 029247 set_vdd_reference_voltage_0_5v: +0x68e8 029248 setarg 50 +0x68e9 029249 store 2 ,mem_reference_voltage +0x68ea 029250 rtn +: 029253 adc_set_mode: +0x68eb 029254 fetch 1 ,mem_adc_config_flag +0x68ec 029255 beq adc_config_vinlpm ,adc_check_vinlpm +0x68ed 029256 beq adc_config_hvin ,adc_check_hvin +0x68ee 029257 beq adc_config_gpio ,adc_check_gpio +0x68ef 029258 rtn +: 029259 adc_check_vinlpm: +0x68f0 029260 jam 0xbf ,rf_adc_mode +0x68f1 029261 branch read_adc +: 029262 adc_check_hvin: +0x68f2 029263 jam 0xaf ,rf_adc_mode +0x68f3 029264 branch read_adc +: 029265 adc_check_gpio: +0x68f4 029266 jam 0x8f ,rf_adc_mode +0x68f5 029267 fetch 1 ,mem_adc_channel +0x68f6 029268 hstore 1 ,rf_adc_ch +0x68f7 029269 branch read_adc +: 029270 read_adc: +0x68f8 029271 bpatchx patch33_7 ,mem_patch33 +0x68f9 029272 hfetch 1 ,core_uart_baud + 1 +0x68fa 029273 set1 7 ,pdata +0x68fb 029274 hstore 1 ,core_uart_baud + 1 +0x68fc 029275 hfetch 1 ,rf_adc_ch +0x68fd 029276 or_into 0x30 ,pdata +0x68fe 029277 hstore 1 ,rf_adc_ch +0x68ff 029278 jam 0x7c ,rfen_adc +0x6900 029279 jam 0xaa ,rf_adc_gc +0x6901 029280 nop 5000 +0x6902 029281 hfetcht 2 ,core_adc_sum +0x6903 029282 hfetch 1 ,core_uart_baud + 1 +0x6904 029283 set0 7 ,pdata +0x6905 029284 hstore 1 ,core_uart_baud + 1 +0x6906 029285 storet 2 ,mem_adc_current_value +0x6907 029286 rtn +: 029288 vdd_calculate_by_mode: +0x6908 029289 bpatchx patch34_0 ,mem_patch34 +0x6909 029290 fetch 1 ,mem_adc_config_flag +0x690a 029291 beq adc_config_vinlpm ,vdd_calculate_vinlpm +0x690b 029292 beq adc_config_hvin ,vdd_calculate_hvin +0x690c 029293 beq adc_config_gpio ,vdd_calculate_io +0x690d 029294 rtn +: 029296 vdd_calculate_vinlpm: +0x690e 029297 fetch 2 ,mem_3v_adc_vinlpm_data +0x690f 029298 fetcht 2 ,mem_2v_adc_vinlpm_data +0x6910 029299 arg 200 ,regc +0x6911 029300 branch vdd_calculate +: 029302 vdd_calculate_hvin: +0x6912 029303 fetch 2 ,mem_5v_adc_hvin_data +0x6913 029304 fetcht 2 ,mem_1v_adc_hvin_data +0x6914 029305 arg 100 ,regc +0x6915 029306 branch vdd_calculate +: 029308 vdd_calculate_io: +0x6916 029309 fetch 2 ,mem_1v_adc_io_data +0x6917 029310 fetcht 2 ,mem_0_5_adc_io_data +0x6918 029311 arg 50 ,regc +0x6919 029312 branch vdd_calculate +: 029314 vdd_calculate: +0x691a 029315 isub temp ,rega +0x691b 029316 fetch 2 ,mem_adc_current_value +0x691c 029317 isub temp ,pdata +0x691d 029318 nbranch vdd_calculate1 ,positive +0x691e 029319 fetcht 2 ,mem_reference_voltage +0x691f 029320 imul32 temp ,regb +0x6920 029321 copy regc ,pdata +0x6921 029322 imul32 rega ,pdata +0x6922 029323 iadd regb ,pdata +: 029324 vdd_calculate2: +0x6923 029325 idiv rega +0x6924 029326 call wait_div_end +0x6925 029327 quotient pdata +0x6926 029328 rtn +: 029330 vdd_calculate1: +0x6927 029331 copy temp ,pdata +0x6928 029332 fetcht 2 ,mem_adc_current_value +0x6929 029333 isub temp ,pdata +0x692a 029334 fetcht 2 ,mem_reference_voltage +0x692b 029335 imul32 temp ,regb +0x692c 029336 copy regc ,pdata +0x692d 029337 imul32 rega ,pdata +0x692e 029338 isub regb ,pdata +0x692f 029339 branch vdd_calculate2 +: 029350 adc_bat_percent_lowpower_out: +0x6930 029351 ifetch 8 ,rega +0x6931 029352 store 8 ,mem_pdatatemp +0x6932 029353 fetch 2 ,mem_pdatatemp +0x6933 029354 fetcht 2 ,mem_pdatatemp + 2 +0x6934 029355 isub temp ,rega +0x6935 029356 fetch 2 ,mem_pdatatemp + 6 +0x6936 029357 isub temp ,regb +0x6937 029358 fetcht 2 ,mem_pdatatemp + 4 +0x6938 029359 isub temp ,null +0x6939 029360 ncall adc_set_low_power_flag ,positive +0x693a 029361 mul32 regb ,100 ,pdata +0x693b 029362 idiv rega +0x693c 029363 call wait_div_end +0x693d 029364 quotient pdata +0x693e 029365 call adc_set_no_power_flag ,blank +0x693f 029366 rtn +: 029367 adc_set_low_power_flag: +0x6940 029368 fetch 1 ,mem_adc_power_flag +0x6941 029369 set1 0 ,pdata +0x6942 029370 store 1 ,mem_adc_power_flag +0x6943 029371 rtn +: 029372 adc_set_no_power_flag: +0x6944 029373 fetcht 1 ,mem_adc_power_flag +0x6945 029374 set1 1 ,temp +0x6946 029375 storet 1 ,mem_adc_power_flag +0x6947 029376 rtn +: 029381 keyscan_key_init: +0x6948 029382 fetch 2 ,mem_key_num_ptr +0x6949 029383 ifetch 1 ,pdata +: 029384 keyscan_key_init_next: +0x694a 029385 rtn blank +0x694b 029386 copy pdata ,loopcnt +0x694c 029388 fetch 2 ,mem_keyscan_ptr +0x694d 029389 increase 3 ,pdata +0x694e 029390 copy pdata ,rega +: 029391 keyscan_key_init_lp1: +0x694f 029392 ifetcht 1 ,rega +0x6950 029393 call gpio_config_input +0x6951 029394 increase key_conf_struct_len ,rega +0x6952 029395 loop keyscan_key_init_lp1 +: 029396 keyscan_key_init_end: +0x6953 029397 rtn +: 029399 keyscan_scan_key: +0x6954 029400 fetch 2 ,mem_keyscan_ptr +0x6955 029401 increase 3 ,pdata +0x6956 029402 copy pdata ,rega +0x6957 029404 force 0 ,regb +0x6958 029405 jam 0 ,mem_key_value_temp +: 029406 keyscan_scan_key_lp1: +0x6959 029407 ifetcht 1 ,rega +0x695a 029408 call gpio_get_bit +0x695b 029409 bpatchx patch34_1 ,mem_patch34 +0x695c 029410 fetch 2 ,mem_key_value_temp +0x695d 029411 copy regb ,queue +0x695e 029412 qsetflag true ,pdata +0x695f 029413 store 2 ,mem_key_value_temp +0x6960 029414 increase key_conf_struct_len ,rega +0x6961 029415 increase 1 ,regb +0x6962 029416 fetch 2 ,mem_key_num_ptr +0x6963 029417 ifetch 1 ,pdata +: 029418 keyscan_scan_key_lp1_next: +0x6964 029419 ixor regb ,null +0x6965 029420 nbranch keyscan_scan_key_lp1 ,zero +0x6966 029421 fetch 2 ,mem_key_value_temp +0x6967 029422 fetcht 2 ,mem_key_value +0x6968 029423 ixor temp ,null +0x6969 029424 rtn zero +0x696a 029425 enable user +0x696b 029426 rtn +: 029428 keyscan_process_lpm_before: +0x696c 029429 fetch 2 ,mem_key_num_ptr +0x696d 029430 ifetch 1 ,pdata +: 029431 keyscan_process_lpm_before_next: +0x696e 029432 rtn blank +0x696f 029433 copy pdata ,loopcnt +0x6970 029434 fetch 2 ,mem_keyscan_ptr +0x6971 029435 increase 3 ,pdata +0x6972 029436 copy pdata ,rega +: 029437 keyscan_process_lpm_before_lp1: +0x6973 029438 ifetcht 1 ,rega +0x6974 029439 call gpio_set_wake_by_current_state +0x6975 029440 increase key_conf_struct_len ,rega +0x6976 029441 loop keyscan_process_lpm_before_lp1 +: 029442 keyscan_process_lpm_before_end: +0x6977 029443 rtn +: 029445 keyscan_key_process: +0x6978 029446 arg key_scan_timer ,queue +0x6979 029447 call timer_check +0x697a 029448 nrtn blank +0x697b 029449 setarg 0x20 +0x697c 029450 arg key_scan_timer ,queue +0x697d 029451 call timer_init +0x697e 029452 disable user +0x697f 029453 call keyscan_process_lpm_before +0x6980 029454 bpatchx patch34_2 ,mem_patch34 +0x6981 029455 fetch 2 ,mem_key_num_ptr +0x6982 029456 ifetch 1 ,pdata +: 029457 keyscan_key_process_next: +0x6983 029458 rtn blank +0x6984 029459 call keyscan_scan_key +0x6985 029460 nbranch lpm_button_clean_wake_lock ,user +0x6986 029461 call lpm_button_get_wake_lock +0x6987 029462 disable user +0x6988 029463 fetch 2 ,mem_key_value_temp +0x6989 029464 store 2 ,mem_key_value_temp4 +0x698a 029465 jam 0 ,mem_key_value_temp6 +0x698b 029466 force 0 ,queue +: 029467 keyscan_key_lp1: +0x698c 029468 fetch 2 ,mem_key_value +0x698d 029469 rshift pdata ,temp +0x698e 029470 storet 2 ,mem_key_value +0x698f 029471 and pdata ,0x01 ,pdata +0x6990 029472 fetcht 2 ,mem_key_value_temp4 +0x6991 029473 and temp ,0x01 ,rega +0x6992 029474 rshift temp ,temp +0x6993 029475 storet 2 ,mem_key_value_temp4 +0x6994 029476 ixor rega ,null +0x6995 029477 ncall keyscan_send_key_data ,zero +0x6996 029478 fetch 2 ,mem_key_num_ptr +0x6997 029479 ifetch 1 ,pdata +: 029480 keyscan_key_lp1_next: +0x6998 029481 fetcht 1 ,mem_key_value_temp6 +0x6999 029482 increase 1 ,temp +0x699a 029483 storet 1 ,mem_key_value_temp6 +0x699b 029484 copy temp ,queue +0x699c 029485 ixor queue ,null +0x699d 029486 nbranch keyscan_key_lp1 ,zero +0x699e 029487 fetch 2 ,mem_key_value_temp +0x699f 029488 store 2 ,mem_key_value +0x69a0 029489 rtn +: 029490 keyscan_send_key_data: +0x69a1 029491 bpatchx patch34_3 ,mem_patch34 +0x69a2 029492 fetch 2 ,mem_keyscan_ptr +0x69a3 029493 increase 1 ,pdata +0x69a4 029494 ifetch 2 ,pdata +0x69a5 029495 branch callback_func +: 029506 pwm_init: +0x69a6 029507 hfetch 1 ,core_clksel +0x69a7 029508 ior rega ,pdata +0x69a8 029509 hstore 1 ,core_clksel +0x69a9 029510 hfetch 2 ,core_clkoff +0x69aa 029511 set0 clock_off_pwm ,pdata +0x69ab 029512 hstore 2 ,core_clkoff +: 029513 delay_nop100: +0x69ac 029514 nop 100 +0x69ad 029515 rtn +: 029526 pwm_out_set: +0x69ae 029527 fetcht 3 ,mem_pdatatemp + 2 +0x69af 029528 setarg pwm_12mhz +0x69b0 029529 idiv temp +0x69b1 029530 call wait_div_end +0x69b2 029531 quotient temp +0x69b3 029532 fetch 1 ,mem_pdatatemp + 5 +0x69b4 029533 imul32 temp ,pdata +0x69b5 029534 div pdata ,100 +0x69b6 029535 call wait_div_end +0x69b7 029536 quotient rega +0x69b8 029537 copy temp ,pdata +0x69b9 029538 isub rega ,regb +0x69ba 029539 fetch 1 ,mem_pdatatemp + 1 +0x69bb 029540 call pwm_duty_cycle_set +0x69bc 029541 fetch 1 ,mem_pdatatemp +0x69bd 029542 branch pwm_enable +: 029545 pwm_duty_cycle_set: +0x69be 029546 beq 0 ,pwm_pwm0_duty_set +0x69bf 029547 beq 1 ,pwm_pwm1_duty_set +0x69c0 029548 beq 2 ,pwm_pwm2_duty_set +0x69c1 029549 beq 3 ,pwm_pwm3_duty_set +0x69c2 029550 beq 4 ,pwm_pwm4_duty_set +0x69c3 029551 beq 5 ,pwm_pwm5_duty_set +: 029552 pwm_pwm0_duty_set: +0x69c4 029553 arg core_pwm_pcnt0 ,contw +0x69c5 029554 branch pwm_set_pncnt +: 029555 pwm_pwm1_duty_set: +0x69c6 029556 arg core_pwm_pcnt1 ,contw +0x69c7 029557 branch pwm_set_pncnt +: 029558 pwm_pwm2_duty_set: +0x69c8 029559 arg core_pwm_pcnt2 ,contw +0x69c9 029560 branch pwm_set_pncnt +: 029561 pwm_pwm3_duty_set: +0x69ca 029562 arg core_pwm_pcnt3 ,contw +0x69cb 029563 branch pwm_set_pncnt +: 029564 pwm_pwm4_duty_set: +0x69cc 029565 arg core_pwm_pcnt4 ,contw +0x69cd 029566 branch pwm_set_pncnt +: 029567 pwm_pwm5_duty_set: +0x69ce 029568 arg core_pwm_pcnt5 ,contw +0x69cf 029569 branch pwm_set_pncnt +: 029570 pwm_set_pncnt: +0x69d0 029571 copy rega ,pdata +0x69d1 029572 istore 2 ,contw +0x69d2 029573 copy regb ,pdata +0x69d3 029574 istore 2 ,contw +0x69d4 029575 rtn +: 029579 pwm_enable: +0x69d5 029580 enable user +0x69d6 029581 branch pwm_gpio_set +: 029582 pwm_disable: +0x69d7 029583 disable user +: 029584 pwm_gpio_set: +0x69d8 029585 beq 4 ,pwm_gpio4_set +0x69d9 029586 beq 5 ,pwm_gpio5_set +0x69da 029587 beq 27 ,pwm_gpio27_set +0x69db 029588 beq 28 ,pwm_gpio28_set +0x69dc 029589 beq 3 ,pwm_gpio3_set +0x69dd 029590 beq 8 ,pwm_gpio8_set +0x69de 029591 beq 20 ,pwm_gpio20_set +0x69df 029592 beq 21 ,pwm_gpio21_set +0x69e0 029593 beq 22 ,pwm_gpio22_set +0x69e1 029594 beq 23 ,pwm_gpio23_set +0x69e2 029595 rtn +: 029598 pwm_gpio4_set: +0x69e3 029599 arg 6 ,queue +0x69e4 029600 branch pwm_one_set_select +: 029601 pwm_gpio5_set: +0x69e5 029602 arg 7 ,queue +0x69e6 029603 branch pwm_one_set_select +: 029604 pwm_gpio27_set: +0x69e7 029605 arg 8 ,queue +0x69e8 029606 branch pwm_one_set_select +: 029607 pwm_gpio28_set: +0x69e9 029608 arg 9 ,queue +0x69ea 029609 branch pwm_one_set_select +: 029610 pwm_gpio3_set: +0x69eb 029611 arg 10 ,queue +0x69ec 029612 branch pwm_one_set_select +: 029613 pwm_gpio8_set: +0x69ed 029614 arg 11 ,queue +0x69ee 029615 branch pwm_one_set_select +: 029616 pwm_gpio20_set: +0x69ef 029617 arg 12 ,queue +0x69f0 029618 branch pwm_tw0_set_select +: 029619 pwm_gpio21_set: +0x69f1 029620 arg 13 ,queue +0x69f2 029621 branch pwm_tw0_set_select +: 029622 pwm_gpio22_set: +0x69f3 029623 arg 14 ,queue +0x69f4 029624 branch pwm_tw0_set_select +: 029625 pwm_gpio23_set: +0x69f5 029626 arg 15 ,queue +0x69f6 029627 branch pwm_tw0_set_select +: 029629 pwm_set_select: +0x69f7 029630 hfetch 2 ,core_gpio_sel1 +0x69f8 029631 qsetflag user ,pdata +0x69f9 029632 hstore 2 ,core_gpio_sel1 +0x69fa 029633 copy rega ,queue +0x69fb 029634 hfetch 1 ,core_gpio_key2 +0x69fc 029635 qsetflag user ,pdata +0x69fd 029636 hstore 1 ,core_gpio_key2 +0x69fe 029637 rtn +: 029639 pwm_one_set_select: +0x69ff 029640 add queue ,-4 ,rega +0x6a00 029641 branch pwm_set_select +: 029643 pwm_tw0_set_select: +0x6a01 029644 add queue ,-10 ,rega +0x6a02 029645 branch pwm_set_select +: 029650 rfcomm_init: +0x6a03 029651 rtn wake +0x6a04 029652 jam 0 ,mem_rfcomm_send_more_pkt +0x6a05 029653 jam bits9600 ,memremoterpnbitrate +0x6a06 029654 jam databits8 ,memremoteprndatabits +0x6a07 029655 jam 0x11 ,memremoteprnxon +0x6a08 029656 jam 0x13 ,memremoteprnxoff +0x6a09 029657 setarg 0 +0x6a0a 029658 store 3 ,memremoteprnstopbit +0x6a0b 029659 store 1 ,mem_spp_state +0x6a0c 029660 jam 0 ,memui_reconnect_mode +: 029662 rfcomm_init_spp: +0x6a0d 029663 bpatchx patch34_4 ,mem_patch34 +0x6a0e 029664 setarg 0 +0x6a0f 029665 store 1 ,mem_spp_state +0x6a10 029666 store 1 ,mem_remote_spp_channel +0x6a11 029667 store 1 ,mem_pn_dlci +0x6a12 029668 fetch 1 ,mem_credit_flag +0x6a13 029669 beq credit_enable ,rfcomm_init_spp_with_credit +0x6a14 029670 jam 0x50 ,mem_credit_given +0x6a15 029671 rtn +: 029673 rfcomm_init_spp_with_credit: +0x6a16 029674 jam 0x00 ,mem_credit_given +0x6a17 029675 rtn +: 029677 set_cr_bit: +0x6a18 029678 or_into 0x02 ,temp +0x6a19 029679 rtn +: 029691 rfcomm_calculate_fcs_sabm: +0x6a1a 029692 copy temp ,pdata +0x6a1b 029693 reverse pdata ,pdata +0x6a1c 029694 store 1 ,memfcstemp3 +0x6a1d 029695 force ini_tx_sabm ,pdata +0x6a1e 029696 reverse pdata ,pdata +0x6a1f 029697 store 1 ,memfcstemp2 +0x6a20 029698 force 0x01 ,pdata +0x6a21 029699 reverse pdata ,pdata +0x6a22 029700 store 1 ,memfcstemp1 +0x6a23 029701 call caculate_fcs +0x6a24 029702 copy temp ,pdata +0x6a25 029703 rtn +: 029704 rfcomm_calculate_fcs_ua: +0x6a26 029705 reverse pdata ,pdata +0x6a27 029706 store 1 ,memfcstemp3 +0x6a28 029707 force rsp_tx_ua ,pdata +0x6a29 029708 reverse pdata ,pdata +0x6a2a 029709 store 1 ,memfcstemp2 +0x6a2b 029710 force 0x01 ,pdata +0x6a2c 029711 reverse pdata ,pdata +0x6a2d 029712 store 1 ,memfcstemp1 +0x6a2e 029713 branch caculate_fcs +: 029715 rfcomm_calculate_fcs_dlci0: +0x6a2f 029716 fetch 1 ,mem_rfcomm_initiator +0x6a30 029717 branch rfcomm_calculate_fcs_dlci0_res ,blank +0x6a31 029718 setarg 0x70 +0x6a32 029719 rtn +: 029720 rfcomm_calculate_fcs_dlci0_res: +0x6a33 029721 setarg 0xaa +0x6a34 029722 rtn +: 029724 rfcomm_save_fcs_uih: +0x6a35 029725 reverse pdata ,pdata +0x6a36 029726 store 1 ,memfcstemp3 +0x6a37 029727 force rsp_rx_uih ,pdata +0x6a38 029728 call caculate_uihdata_fcs +0x6a39 029729 fetcht 2 ,mem_contw_temp +0x6a3a 029730 copy temp ,contw +0x6a3b 029731 istore 1 ,contw +0x6a3c 029732 copy contw ,temp +0x6a3d 029733 storet 2 ,mem_contw_temp +0x6a3e 029734 force rsp_rx_uih_wdata ,pdata +0x6a3f 029735 call caculate_uihdata_fcs +0x6a40 029736 fetcht 2 ,mem_contw_temp +0x6a41 029737 copy temp ,contw +0x6a42 029738 istore 1 ,contw +0x6a43 029739 rtn +: 029748 caculate_uihdata_fcs: +0x6a44 029749 reverse pdata ,pdata +0x6a45 029750 store 1 ,memfcstemp2 +0x6a46 029751 fetch 2 ,memfcstemp2 +0x6a47 029752 lshift8 pdata ,pdata +0x6a48 029753 store 3 ,mem_mod2div_temp +0x6a49 029754 arg 0x107 ,rega +0x6a4a 029755 arg 0xf ,regb +0x6a4b 029756 call mod2div +0x6a4c 029757 xor_into 0xd7 ,pdata +0x6a4d 029758 invert pdata ,pdata +0x6a4e 029759 reverse pdata ,pdata +0x6a4f 029760 rtn +: 029770 caculate_fcs: +0x6a50 029771 fetch 3 ,memfcstemp1 +0x6a51 029772 store 3 ,mem_mod2div_temp +0x6a52 029773 arg 0x107 ,rega +0x6a53 029774 arg 0xf ,regb +0x6a54 029775 call mod2div +0x6a55 029776 lshift8 pdata ,pdata +0x6a56 029777 arg 0x7 ,regb +0x6a57 029778 call mod2div +0x6a58 029779 xor_into 0x2b ,pdata +0x6a59 029780 invert pdata ,pdata +0x6a5a 029781 reverse pdata ,pdata +0x6a5b 029782 copy pdata ,temp +0x6a5c 029783 rtn +: 029785 mod2div: +0x6a5d 029786 arg 0 ,regc +0x6a5e 029787 copy regb ,loopcnt +0x6a5f 029788 call right_shift_n +0x6a60 029789 icopy temp +: 029790 mod2div_loop: +0x6a61 029795 copy temp ,pdata +0x6a62 029796 lshift regc ,regc +0x6a63 029797 bbit0 8 ,mod2div_not_enough_reduction +0x6a64 029798 ixor rega ,temp +0x6a65 029799 increase 1 ,regc +: 029800 mod2div_not_enough_reduction: +0x6a66 029801 lshift temp ,temp +0x6a67 029802 fetch 3 ,mem_mod2div_temp +0x6a68 029803 increase -1 ,regb +0x6a69 029804 compare 0xff ,regb ,0xff +0x6a6a 029805 branch mod2div_end ,true +0x6a6b 029806 copy regb ,loopcnt +0x6a6c 029807 call right_shift_n +0x6a6d 029808 isolate1 0 ,pdata +0x6a6e 029809 setflag true ,0 ,temp +0x6a6f 029810 branch mod2div_loop +: 029811 mod2div_end: +0x6a70 029813 rshift temp ,pdata +0x6a71 029814 rtn +: 029816 get_rfcomm_snd_adss: +0x6a72 029817 fetcht 1 ,mem_pn_dlci +: 029818 dlci_to_address_cmd: +0x6a73 029820 lshift2 temp ,temp +0x6a74 029821 set1 rfcomm_address_ext_len ,temp +0x6a75 029822 fetch 1 ,mem_rfcomm_initiator +0x6a76 029823 ncall set_cr_bit ,blank +0x6a77 029824 storet 1 ,mem_rfcomm_send_adss +0x6a78 029825 rtn +: 029827 channel_to_dlci: +0x6a79 029829 lshift temp ,temp +0x6a7a 029830 fetch 1 ,mem_rfcomm_initiator +0x6a7b 029831 setflag blank ,0 ,temp +0x6a7c 029833 rtn +: 029834 rfcomm_rx_process_dlci0_sabm: +0x6a7d 029835 fetcht 1 ,mem_current_channel +0x6a7e 029836 jam 0xd7 ,mem_current_fcs +0x6a7f 029837 call rfcomm_send_ua +0x6a80 029838 fetch 1 ,mem_rfcomm_state +0x6a81 029839 set1 l2cap_channel_rfcomm_only_sabm ,pdata +0x6a82 029840 set1 l2cap_channel_rfcomm_only_ua ,pdata +0x6a83 029841 store 1 ,mem_rfcomm_state +0x6a84 029842 jam 0 ,mem_rfcomm_initiator +0x6a85 029843 branch rfcomm_rx_process_end +: 029844 rfcomm_rx_process_dlci0_ua: +0x6a86 029845 fetch 1 ,mem_rfcomm_state +0x6a87 029846 set1 l2cap_channel_rfcomm_only_ua ,pdata +0x6a88 029847 store 1 ,mem_rfcomm_state +0x6a89 029848 branch rfcomm_rx_process_end +: 029851 rfcomm_rx_process: +0x6a8a 029852 bpatchx patch34_5 ,mem_patch34 +0x6a8b 029853 fetch 1 ,memui_reconnect_mode +0x6a8c 029854 beq no_reconnection ,rfcomm_rx_process_remote_page +0x6a8d 029855 branch rfcomm_rx_process_reconn +: 029857 rfcomm_rx_process_remote_page: +0x6a8e 029858 fetch 2 ,mem_l2cap_payload_ptr +0x6a8f 029859 copy pdata ,contr +0x6a90 029860 call get_rfcomm_head_struct +0x6a91 029861 fetch 1 ,mem_current_channel +0x6a92 029862 beq 0 ,parse_dlci0_rp +0x6a93 029863 branch parse_uih_rp +: 029864 parse_dlci0_rp: +0x6a94 029865 bpatchx patch34_6 ,mem_patch34 +0x6a95 029866 fetch 1 ,mem_current_frame_type +0x6a96 029867 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +0x6a97 029868 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +0x6a98 029869 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih +0x6a99 029870 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event +0x6a9a 029871 rtn +: 029874 parse_dlci0_rp_uih: +0x6a9b 029875 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6a9c 029876 copy pdata ,contr +0x6a9d 029877 call get_rfcomm_uih_head_struct +0x6a9e 029878 fetch 1 ,mem_uih_cmd_type +0x6a9f 029879 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd +0x6aa0 029880 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res +0x6aa1 029881 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd +0x6aa2 029882 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res +0x6aa3 029883 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port +0x6aa4 029884 branch rfcomm_rx_process_end +: 029886 parse_dlci0_rp_uih_pn_cmd: +0x6aa5 029887 call parse_dlci0_rp_uih_pn_res_common +0x6aa6 029889 branch parse_dlci0_rp_uih_pn_cmd_spp +: 029891 parse_dlci0_rp_uih_pn_cmd_spp: +0x6aa7 029892 fetch 1 ,mem_spp_state +0x6aa8 029893 set1 rfcomm_channel_state_pn_cmd ,pdata +0x6aa9 029894 set1 rfcomm_channel_state_pn_res ,pdata +0x6aaa 029895 store 1 ,mem_spp_state +0x6aab 029896 call rfcomm_send_param_neg_res +0x6aac 029897 branch rfcomm_rx_process_end +: 029899 parse_dlci0_rp_uih_pn_res: +0x6aad 029900 call parse_dlci0_rp_uih_pn_res_common +0x6aae 029901 branch rfcomm_rx_process_end +: 029903 parse_dlci0_rp_uih_pn_res_common: +0x6aaf 029904 call get_param_payload_ptr +0x6ab0 029905 branch get_rfcomm_prarmer_negotiation +: 029907 get_rfcomm_param_modem_status: +0x6ab1 029908 call get_param_payload_ptr +0x6ab2 029909 ifetch 1 ,contr +0x6ab3 029910 rshift3 pdata ,pdata +0x6ab4 029911 store 1 ,mem_ms_channel +0x6ab5 029912 ifetch 1 ,contr +0x6ab6 029913 store 1 ,mem_ms_param +0x6ab7 029914 rtn +: 029917 get_rfcomm_head_struct: +0x6ab8 029918 ifetch 1 ,contr +0x6ab9 029919 store 1 ,mem_current_adss +0x6aba 029920 rshift3 pdata ,pdata +0x6abb 029921 store 1 ,mem_current_channel +0x6abc 029922 ifetch 1 ,contr +0x6abd 029923 store 1 ,mem_current_frame_type +: 029924 get_rfcomm_current_length: +0x6abe 029925 call get_rfcomm_length_common +0x6abf 029926 storet 2 ,mem_current_length +0x6ac0 029927 copy contr ,pdata +0x6ac1 029928 store 2 ,mem_rfcomm_uih_payload_ptr +0x6ac2 029929 rtn +: 029931 get_rfcomm_uih_head_struct: +0x6ac3 029932 ifetch 1 ,contr +0x6ac4 029933 rshift pdata ,pdata +0x6ac5 029934 store 1 ,mem_uih_cmd_type +0x6ac6 029935 call get_rfcomm_length_common +0x6ac7 029936 storet 2 ,mem_uih_length +0x6ac8 029937 copy contr ,pdata +0x6ac9 029938 store 2 ,mem_param_payload_ptr +0x6aca 029939 rtn +: 029942 get_param_payload_ptr: +0x6acb 029943 fetch 2 ,mem_param_payload_ptr +0x6acc 029944 copy pdata ,contr +0x6acd 029945 rtn +: 029947 get_rfcomm_length_common: +0x6ace 029948 ifetch 1 ,contr +0x6acf 029949 copy pdata ,temp +0x6ad0 029950 rshift temp ,temp +0x6ad1 029951 rtnbit1 0 +0x6ad2 029952 ifetch 1 ,contr +0x6ad3 029953 lshift3 pdata ,pdata +0x6ad4 029954 lshift4 pdata ,pdata +0x6ad5 029955 iadd temp ,temp +0x6ad6 029956 rtn +: 029958 get_rfcomm_prarmer_negotiation: +0x6ad7 029959 ifetch 1 ,contr +0x6ad8 029960 store 1 ,mem_pn_dlci +0x6ad9 029961 ifetch 1 ,contr +0x6ada 029962 store 1 ,mem_pn_credit_flow_type_info +0x6adb 029963 ifetch 1 ,contr +0x6adc 029964 store 1 ,mem_pn_priority +0x6add 029965 ifetch 1 ,contr +0x6ade 029966 store 1 ,mem_pn_acknowledg_timer +0x6adf 029967 ifetch 2 ,contr +0x6ae0 029968 store 2 ,mem_pn_max_frame_size +0x6ae1 029969 ifetch 1 ,contr +0x6ae2 029970 store 1 ,mem_pn_max_retrans +0x6ae3 029971 ifetch 1 ,contr +0x6ae4 029972 store 1 ,mem_remote_credits +0x6ae5 029973 rtn +: 029976 parse_dlci0_rp_uih_ms_cmd: +0x6ae6 029977 call get_rfcomm_param_modem_status +0x6ae7 029979 branch parse_dlci0_rp_uih_ms_cmd_spp +: 029981 parse_dlci0_rp_uih_ms_cmd_spp: +0x6ae8 029982 fetch 1 ,mem_spp_state +0x6ae9 029983 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +0x6aea 029984 set1 rfcomm_channel_state_snd_ms_res ,pdata +0x6aeb 029985 store 1 ,mem_spp_state +0x6aec 029986 fetcht 1 ,mem_pn_dlci +0x6aed 029987 lshift2 temp ,temp +0x6aee 029988 or_into 3 ,temp +0x6aef 029989 call rfcomm_send_modem_status_res +0x6af0 029990 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt +0x6af1 029991 branch rfcomm_rx_process_end +: 029993 parse_dlci0_rp_uih_ms_res: +0x6af2 029994 jam bt_evt_spp_connected ,mem_fifo_temp +0x6af3 029995 call ui_ipc_send_event +0x6af4 029996 call get_rfcomm_param_modem_status +0x6af5 029997 fetch 1 ,mem_ms_channel +0x6af6 029998 sub pdata ,1 ,null +0x6af7 029999 branch parse_dlci0_rp_uih_ms_res_spp ,zero +0x6af8 030000 branch assert +: 030001 parse_dlci0_rp_uih_ms_res_spp: +0x6af9 030002 fetch 1 ,mem_spp_state +0x6afa 030003 set1 rfcomm_channel_state_rcv_ms_res ,pdata +0x6afb 030004 store 1 ,mem_spp_state +0x6afc 030005 branch rfcomm_rx_process_end +: 030007 parse_dlci0_rp_uih_cmd_port: +0x6afd 030008 call get_param_payload_ptr +0x6afe 030009 ifetch 1 ,contr +0x6aff 030010 store 1 ,mem_rpn_dlci +0x6b00 030011 call l2cap_malloc_rfcomm_channel +0x6b01 030012 call l2cap_get_rfcomm_tx_buff +0x6b02 030013 setarg 0x000e +0x6b03 030014 istore 2 ,contw +0x6b04 030015 fetch 2 ,mem_rfcomm_remote_cid +0x6b05 030016 istore 2 ,contw +0x6b06 030017 fetch 1 ,mem_rfcomm_initiator +0x6b07 030019 lshift pdata ,pdata +0x6b08 030020 set1 0 ,pdata +0x6b09 030021 istore 1 ,contw +0x6b0a 030022 bpatchx patch34_7 ,mem_patch34 +0x6b0b 030023 setarg 0x15ef +0x6b0c 030024 istore 2 ,contw +0x6b0d 030025 setarg 0x1191 +0x6b0e 030026 istore 2 ,contw +0x6b0f 030029 fetch 1 ,mem_rpn_dlci +0x6b10 030030 istore 1 ,contw +0x6b11 030031 setarg 0x000007 +0x6b12 030032 istore 5 ,contw +0x6b13 030035 setarg 0x01 +0x6b14 030036 istore 2 ,contw +0x6b15 030039 call rfcomm_calculate_fcs_dlci0 +0x6b16 030040 istore 1 ,contw +0x6b17 030041 rtn +: 030045 parse_uih_rp: +0x6b18 030046 branch parse_uih_rp_spp +: 030048 parse_uih_rp_spp: +0x6b19 030049 bpatchx patch35_0 ,mem_patch35 +0x6b1a 030050 fetch 1 ,mem_current_frame_type +0x6b1b 030051 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua +0x6b1c 030052 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm +0x6b1d 030053 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +0x6b1e 030054 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +0x6b1f 030055 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn +0x6b20 030056 rtn +: 030057 parse_uih_rp_spp_ua: +0x6b21 030058 fetch 1 ,mem_spp_state +0x6b22 030059 set1 rfcomm_channel_state_ua ,pdata +0x6b23 030060 store 1 ,mem_spp_state +0x6b24 030061 branch rfcomm_rx_process_end +: 030062 parse_uih_rp_spp_sabm: +0x6b25 030063 fetch 1 ,mem_spp_state +0x6b26 030064 set1 rfcomm_channel_state_ua ,pdata +0x6b27 030065 set1 rfcomm_channel_state_sabm ,pdata +0x6b28 030066 store 1 ,mem_spp_state +0x6b29 030067 fetch 1 ,mem_current_adss +0x6b2a 030068 call rfcomm_calculate_fcs_ua +0x6b2b 030069 store 1 ,mem_current_fcs +0x6b2c 030070 call rfcomm_send_ua +0x6b2d 030071 fetch 1 ,mem_current_adss +0x6b2e 030072 rshift2 pdata ,pdata +0x6b2f 030073 store 1 ,mem_pn_dlci +0x6b30 030074 lshift2 pdata ,pdata +0x6b31 030075 set0 rfcomm_address_cr ,pdata +0x6b32 030076 set1 rfcomm_address_ext_len ,pdata +0x6b33 030077 arg mem_hiufcs_spp ,temp +0x6b34 030078 storet 2 ,mem_contw_temp +0x6b35 030079 call rfcomm_save_fcs_uih +0x6b36 030080 branch rfcomm_rx_process_end +: 030082 parse_uih_spp_uih_credits: +0x6b37 030083 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6b38 030084 copy pdata ,contr +0x6b39 030085 increase 1 ,pdata +0x6b3a 030086 store 2 ,mem_rfcomm_uih_payload_ptr +0x6b3b 030087 ifetch 1 ,contr +0x6b3c 030088 fetcht 1 ,mem_remote_credits +0x6b3d 030089 iadd temp ,pdata +0x6b3e 030090 store 1 ,mem_remote_credits +: 030091 parse_uih_spp_uih: +0x6b3f 030092 call rfcomm_increase_credit_given +: 030093 parse_uih_spp_uih_cont: +0x6b40 030094 call get_rfcomm_snd_adss +0x6b41 030095 call rfcomm_send_uih_without_payload +0x6b42 030096 call spp_process_rx_data +0x6b43 030097 branch rfcomm_rx_process_end +: 030099 parse_uih_rp_spp_disconn_send_event: +0x6b44 030100 jam bt_evt_spp_disconnected ,mem_fifo_temp +0x6b45 030101 call ui_ipc_send_event +: 030102 parse_uih_rp_spp_disconn: +0x6b46 030103 call rfcomm_init_spp +0x6b47 030104 fetch 1 ,mem_current_adss +0x6b48 030105 call rfcomm_calculate_fcs_ua +0x6b49 030106 store 1 ,mem_current_fcs +0x6b4a 030107 call rfcomm_send_ua +0x6b4b 030108 branch rfcomm_rx_process_end +: 030113 rfcomm_rx_process_reconn: +0x6b4c 030114 fetch 2 ,mem_l2cap_payload_ptr +0x6b4d 030115 copy pdata ,contr +0x6b4e 030116 call get_rfcomm_head_struct +0x6b4f 030117 fetch 1 ,mem_current_channel +0x6b50 030118 beq 0 ,parse_dlci0_reconn +0x6b51 030119 branch parse_uih_reconn +: 030121 parse_dlci0_reconn: +0x6b52 030122 bpatchx patch35_1 ,mem_patch35 +0x6b53 030123 fetch 1 ,mem_current_frame_type +0x6b54 030124 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +0x6b55 030125 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +0x6b56 030126 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih +0x6b57 030127 branch rfcomm_rx_process_end +: 030128 parse_dlci0_reconn_uih: +0x6b58 030129 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6b59 030130 copy pdata ,contr +0x6b5a 030131 call get_rfcomm_uih_head_struct +0x6b5b 030132 fetch 1 ,mem_uih_cmd_type +0x6b5c 030133 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd +0x6b5d 030134 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd +0x6b5e 030135 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd +0x6b5f 030136 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res +0x6b60 030137 branch rfcomm_rx_process_end +: 030139 parse_dlci0_reconn_uih_pn_cmd: +0x6b61 030140 call parse_dlci0_rp_uih_pn_res_common +0x6b62 030141 fetch 1 ,mem_pn_dlci +0x6b63 030142 rshift pdata ,pdata +0x6b64 030143 fetcht 1 ,mem_remote_spp_channel +0x6b65 030144 isub temp ,null +0x6b66 030145 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero +0x6b67 030146 branch assert +: 030147 parse_dlci0_reconn_uih_pn_cmd_spp: +0x6b68 030148 fetch 1 ,mem_spp_state +0x6b69 030149 set1 rfcomm_channel_state_pn_res ,pdata +0x6b6a 030150 store 1 ,mem_spp_state +0x6b6b 030151 branch rfcomm_rx_process_end +: 030153 parse_dlci0_reconn_uih_ms_cmd: +0x6b6c 030154 call get_rfcomm_param_modem_status +0x6b6d 030155 fetch 1 ,mem_ms_channel +0x6b6e 030156 fetcht 1 ,mem_remote_spp_channel +0x6b6f 030157 isub temp ,null +0x6b70 030158 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero +0x6b71 030159 branch assert +0x6b72 030160 branch rfcomm_rx_process_end +: 030161 parse_dlci0_reconn_uih_ms_cmd_spp: +0x6b73 030162 fetch 1 ,mem_spp_state +0x6b74 030163 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +0x6b75 030164 set1 rfcomm_channel_state_snd_ms_res ,pdata +0x6b76 030165 store 1 ,mem_spp_state +0x6b77 030166 fetcht 1 ,mem_pn_dlci +0x6b78 030167 lshift2 temp ,temp +0x6b79 030168 or_into 3 ,temp +0x6b7a 030169 call rfcomm_send_modem_status_res +0x6b7b 030170 branch rfcomm_rx_process_end +: 030172 parse_dlci0_reconn_uih_ms_res: +0x6b7c 030173 call get_rfcomm_param_modem_status +0x6b7d 030174 fetch 1 ,mem_ms_channel +0x6b7e 030175 fetcht 1 ,mem_remote_spp_channel +0x6b7f 030176 isub temp ,null +0x6b80 030177 branch parse_dlci0_reconn_uih_ms_res_spp ,zero +0x6b81 030178 branch assert +: 030179 parse_dlci0_reconn_uih_ms_res_spp: +0x6b82 030180 fetch 1 ,mem_spp_state +0x6b83 030181 set1 rfcomm_channel_state_rcv_ms_res ,pdata +0x6b84 030182 store 1 ,mem_spp_state +0x6b85 030183 branch rfcomm_rx_process_end +: 030185 parse_uih_reconn: +0x6b86 030186 fetch 1 ,mem_current_channel +0x6b87 030187 fetcht 1 ,mem_remote_spp_channel +0x6b88 030188 isub temp ,null +0x6b89 030189 branch parse_uih_reconn_spp ,zero +0x6b8a 030190 branch assert +0x6b8b 030191 branch rfcomm_rx_process_end +: 030193 parse_uih_reconn_spp: +0x6b8c 030194 fetch 1 ,mem_current_frame_type +0x6b8d 030195 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua +0x6b8e 030196 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +0x6b8f 030197 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +0x6b90 030198 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn +: 030199 parse_uih_reconn_spp_ua: +0x6b91 030200 fetch 1 ,mem_spp_state +0x6b92 030201 set1 rfcomm_channel_state_ua ,pdata +0x6b93 030202 store 1 ,mem_spp_state +0x6b94 030203 branch rfcomm_rx_process_end +: 030204 parse_uih_reconn_spp_sabm: +0x6b95 030205 branch parse_uih_reconn_spp_sabm +: 030206 parse_uih_reconn_spp_disconn: +0x6b96 030207 branch parse_uih_rp_spp_disconn +: 030208 rfcomm_rx_process_end: +0x6b97 030209 rtn +: 030211 rfcomm_send_more_pkt: +0x6b98 030212 fetch 1 ,mem_rfcomm_send_more_pkt +0x6b99 030213 rtn blank +0x6b9a 030214 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp +0x6b9b 030215 branch assert +: 030217 rfcomm_send_more_pkt_msc_cmd_spp: +0x6b9c 030218 jam 0 ,mem_rfcomm_send_more_pkt +0x6b9d 030219 call l2cap_malloc_rfcomm_channel +0x6b9e 030220 arg spp_slave_channel ,temp +0x6b9f 030221 fetcht 1 ,mem_pn_dlci +0x6ba0 030222 lshift2 temp ,temp +: 030223 rfcomm_send_more_pkt_msc_cmd_spp0: +0x6ba1 030224 or_into 0x03 ,temp +0x6ba2 030225 arg 0xaa ,rega +0x6ba3 030226 call rfcomm_send_modem_status_cmd +0x6ba4 030227 call l2cap_get_rfcomm_tx_buff +0x6ba5 030228 copy contw ,contr +0x6ba6 030229 ifetch 2 ,contr +0x6ba7 030230 branch assert ,blank +0x6ba8 030231 rtn +: 030233 rfcomm_send_sabm: +0x6ba9 030234 call l2cap_get_rfcomm_tx_buff +0x6baa 030235 setarg 0x0004 +0x6bab 030236 istore 2 ,contw +0x6bac 030237 fetch 2 ,mem_rfcomm_remote_cid +0x6bad 030238 istore 2 ,contw +0x6bae 030239 fetch 1 ,mem_current_adss +0x6baf 030240 istore 1 ,contw +0x6bb0 030241 bpatchx patch35_2 ,mem_patch35 +0x6bb1 030242 setarg 0x013f +0x6bb2 030243 istore 2 ,contw +0x6bb3 030244 fetch 1 ,mem_current_fcs +0x6bb4 030245 istore 1 ,contw +0x6bb5 030246 rtn +: 030247 rfcomm_send_ua: +0x6bb6 030248 call l2cap_malloc_rfcomm_channel +0x6bb7 030249 call l2cap_get_rfcomm_tx_buff +0x6bb8 030250 setarg 0x0004 +0x6bb9 030251 istore 2 ,contw +0x6bba 030252 fetch 2 ,mem_rfcomm_remote_cid +0x6bbb 030253 istore 2 ,contw +0x6bbc 030254 fetch 1 ,mem_current_adss +0x6bbd 030255 istore 1 ,contw +0x6bbe 030256 bpatchx patch35_3 ,mem_patch35 +0x6bbf 030257 setarg 0x0173 +0x6bc0 030258 istore 2 ,contw +0x6bc1 030259 fetch 1 ,mem_current_fcs +0x6bc2 030260 istore 1 ,contw +0x6bc3 030261 rtn +: 030262 rfcomm_send_param_neg_cmd: +0x6bc4 030263 call l2cap_get_rfcomm_tx_buff +0x6bc5 030264 setarg 0x000e +0x6bc6 030265 istore 2 ,contw +0x6bc7 030266 fetch 2 ,mem_rfcomm_remote_cid +0x6bc8 030267 istore 2 ,contw +0x6bc9 030268 fetch 1 ,mem_rfcomm_initiator +0x6bca 030269 lshift pdata ,pdata +0x6bcb 030270 set1 0 ,pdata +0x6bcc 030271 istore 1 ,contw +0x6bcd 030272 bpatchx patch35_4 ,mem_patch35 +0x6bce 030273 setarg 0x15ef +0x6bcf 030274 istore 2 ,contw +0x6bd0 030275 setarg 0x1183 +0x6bd1 030276 istore 2 ,contw +0x6bd2 030277 copy temp ,pdata +0x6bd3 030278 istore 1 ,contw +0x6bd4 030279 setarg 0x0000f0 +0x6bd5 030280 istore 3 ,contw +0x6bd6 030281 setarg rfcomm_max_frame_size +0x6bd7 030282 istore 2 ,contw +0x6bd8 030283 setarg 0 +0x6bd9 030284 istore 1 ,contw +0x6bda 030285 setarg 0x01 +0x6bdb 030286 istore 1 ,contw +0x6bdc 030287 call rfcomm_calculate_fcs_dlci0 +0x6bdd 030288 istore 1 ,contw +0x6bde 030289 jam 0x10 ,mem_credit_given +0x6bdf 030290 rtn +: 030291 rfcomm_send_param_neg_res: +0x6be0 030292 call l2cap_malloc_rfcomm_channel +0x6be1 030293 call l2cap_get_rfcomm_tx_buff +0x6be2 030294 setarg 0x000e +0x6be3 030295 istore 2 ,contw +0x6be4 030296 fetch 2 ,mem_rfcomm_remote_cid +0x6be5 030297 istore 2 ,contw +0x6be6 030298 fetch 1 ,mem_rfcomm_initiator +0x6be7 030299 lshift pdata ,pdata +0x6be8 030300 set1 0 ,pdata +0x6be9 030301 istore 1 ,contw +0x6bea 030302 bpatchx patch35_5 ,mem_patch35 +0x6beb 030303 setarg 0x15ef +0x6bec 030304 istore 2 ,contw +0x6bed 030305 setarg 0x1181 +0x6bee 030306 istore 2 ,contw +0x6bef 030307 fetch 1 ,mem_pn_dlci +0x6bf0 030308 istore 1 ,contw +0x6bf1 030309 setarg 0x0000e0 +0x6bf2 030310 istore 3 ,contw +0x6bf3 030311 fetch 2 ,mem_rfcomm_max_frame_size +0x6bf4 030312 istore 2 ,contw +0x6bf5 030313 setarg 0x00 +0x6bf6 030314 istore 1 ,contw +0x6bf7 030315 fetch 1 ,mem_rfcomm_credit_init_data +0x6bf8 030316 istore 1 ,contw +0x6bf9 030317 call rfcomm_calculate_fcs_dlci0 +0x6bfa 030318 istore 1 ,contw +0x6bfb 030319 rtn +: 030320 rfcomm_send_modem_status_cmd: +0x6bfc 030321 call l2cap_get_rfcomm_tx_buff +0x6bfd 030322 setarg 0x0008 +0x6bfe 030323 istore 2 ,contw +0x6bff 030324 fetch 2 ,mem_rfcomm_remote_cid +0x6c00 030325 istore 2 ,contw +0x6c01 030326 fetch 1 ,mem_rfcomm_initiator +0x6c02 030327 lshift pdata ,pdata +0x6c03 030328 set1 0 ,pdata +0x6c04 030329 istore 1 ,contw +0x6c05 030330 bpatchx patch35_6 ,mem_patch35 +0x6c06 030331 setarg 0x09ef +0x6c07 030332 istore 2 ,contw +0x6c08 030333 setarg 0x05e3 +0x6c09 030334 istore 2 ,contw +0x6c0a 030335 copy temp ,pdata +0x6c0b 030336 istore 1 ,contw +0x6c0c 030337 setarg 0x8d +0x6c0d 030338 istore 1 ,contw +0x6c0e 030339 call rfcomm_calculate_fcs_dlci0 +0x6c0f 030340 istore 1 ,contw +0x6c10 030341 rtn +: 030343 rfcomm_send_modem_status_res: +0x6c11 030344 call l2cap_malloc_rfcomm_channel +0x6c12 030345 call l2cap_get_rfcomm_tx_buff +0x6c13 030346 setarg 0x0008 +0x6c14 030347 istore 2 ,contw +0x6c15 030348 fetch 2 ,mem_rfcomm_remote_cid +0x6c16 030349 istore 2 ,contw +0x6c17 030350 copy temp ,timeup +0x6c18 030351 fetch 1 ,mem_rfcomm_initiator +0x6c19 030352 lshift pdata ,pdata +0x6c1a 030353 set1 0 ,pdata +0x6c1b 030354 istore 1 ,contw +0x6c1c 030355 bpatchx patch35_7 ,mem_patch35 +0x6c1d 030356 setarg 0x09ef +0x6c1e 030357 istore 2 ,contw +0x6c1f 030358 setarg 0x05e1 +0x6c20 030359 istore 2 ,contw +0x6c21 030360 copy timeup ,pdata +0x6c22 030361 istore 1 ,contw +0x6c23 030362 setarg 0x8d +0x6c24 030363 istore 1 ,contw +0x6c25 030364 call rfcomm_calculate_fcs_dlci0 +0x6c26 030365 istore 1 ,contw +0x6c27 030366 rtn +: 030368 rfcomm_send_uih_without_payload: +0x6c28 030369 bpatchx patch36_0 ,mem_patch36 +0x6c29 030370 fetch 1 ,mem_credit_given +0x6c2a 030371 rtn blank +0x6c2b 030372 hfetch 2 ,core_uart_rxitems +0x6c2c 030373 nrtn blank +0x6c2d 030374 copy rega ,pdata +0x6c2e 030375 store 1 ,mem_pdatatemp + 1 +0x6c2f 030376 storet 1 ,mem_pdatatemp +0x6c30 030377 call l2cap_malloc_is_fifo_full +0x6c31 030378 nrtn blank +0x6c32 030379 call l2cap_malloc_rfcomm_channel +0x6c33 030380 call l2cap_get_rfcomm_tx_buff +0x6c34 030381 setarg 0x05 +0x6c35 030382 istore 2 ,contw +0x6c36 030383 fetch 2 ,mem_rfcomm_remote_cid +0x6c37 030384 istore 2 ,contw +0x6c38 030385 fetch 1 ,mem_rfcomm_send_adss +0x6c39 030386 istore 1 ,contw +0x6c3a 030387 setarg 0x01ff +0x6c3b 030388 istore 2 ,contw +0x6c3c 030389 fetch 1 ,mem_credit_given +0x6c3d 030390 istore 1 ,contw +0x6c3e 030391 fetch 1 ,mem_hiufcs_spp_wcredits +0x6c3f 030392 istore 1 ,contw +0x6c40 030393 jam 0 ,mem_credit_given +0x6c41 030394 rtn +: 030396 rfcomm_increase_credit_given: +0x6c42 030397 bpatchx patch36_1 ,mem_patch36 +0x6c43 030398 fetch 1 ,mem_credit_flag +0x6c44 030399 rtneq credit_enable +0x6c45 030400 fetch 2 ,mem_current_length +0x6c46 030401 rtn blank +0x6c47 030402 fetch 1 ,mem_credit_given +0x6c48 030403 increase 1 ,pdata +0x6c49 030404 store 1 ,mem_credit_given +0x6c4a 030405 rtn +: 030407 spp_process_rx_data: +0x6c4b 030408 fetch 2 ,mem_cb_receive_spp_data +0x6c4c 030409 branch callback_func +: 030411 spp_tx_rfcomm_packet: +0x6c4d 030412 bpatchx patch36_2 ,mem_patch36 +0x6c4e 030414 fetch 1 ,mem_remote_credits +0x6c4f 030415 rtn blank +0x6c50 030416 increase -1 ,pdata +0x6c51 030417 store 1 ,mem_remote_credits +0x6c52 030418 fetch 2 ,mem_pn_max_frame_size +0x6c53 030419 fetcht 2 ,mem_current_packet_length +0x6c54 030420 isub temp ,null +0x6c55 030421 branch ssp_tx_rfcomm_from_uart ,positive +0x6c56 030422 store 2 ,mem_current_packet_length +: 030423 ssp_tx_rfcomm_from_uart: +0x6c57 030424 fetch 1 ,mem_credit_given +0x6c58 030425 branch ssp_tx_rfcomm_from_uart_without_credit ,blank +0x6c59 030426 jam 1 ,mem_rfcomm_send_offset +0x6c5a 030427 fetch 1 ,mem_hiufcs_spp_wcredits +0x6c5b 030428 store 1 ,mem_rfcomm_send_fcs +0x6c5c 030429 setarg rsp_rx_uih_wdata +0x6c5d 030430 store 1 ,mem_rfcomm_send_frame_type +0x6c5e 030431 branch ssp_tx_rfcomm_from_uart_common +: 030432 ssp_tx_rfcomm_from_uart_without_credit: +0x6c5f 030433 jam 0 ,mem_rfcomm_send_offset +0x6c60 030434 fetch 1 ,mem_hiufcs_spp +0x6c61 030435 store 1 ,mem_rfcomm_send_fcs +0x6c62 030436 setarg rsp_tx_uih +0x6c63 030437 store 1 ,mem_rfcomm_send_frame_type +: 030438 ssp_tx_rfcomm_from_uart_common: +0x6c64 030439 bpatchx patch36_3 ,mem_patch36 +0x6c65 030440 fetch 2 ,mem_current_packet_length +0x6c66 030441 sub pdata ,127 ,null +0x6c67 030442 branch ssp_tx_rfcomm_from_uart_common0 ,positive +0x6c68 030443 fetch 1 ,mem_rfcomm_send_offset +0x6c69 030444 increase 1 ,pdata +0x6c6a 030445 store 1 ,mem_rfcomm_send_offset +: 030446 ssp_tx_rfcomm_from_uart_common0: +0x6c6b 030447 call get_rfcomm_snd_adss +0x6c6c 030448 fetch 2 ,mem_current_packet_length +0x6c6d 030449 increase 8 ,pdata +0x6c6e 030450 fetcht 1 ,mem_rfcomm_send_offset +0x6c6f 030451 iadd temp ,rega +0x6c70 030453 call l2cap_malloc +0x6c71 030454 store 2 ,mem_rfcomm_tx_buff_ptr +0x6c72 030455 increase 4 ,pdata +0x6c73 030456 store 2 ,mem_rfcomm_tx_payload_ptr +0x6c74 030457 copy pdata ,contw +0x6c75 030458 fetch 1 ,mem_rfcomm_send_adss +0x6c76 030459 istore 1 ,contw +0x6c77 030460 fetch 1 ,mem_rfcomm_send_frame_type +0x6c78 030461 istore 1 ,contw +0x6c79 030462 call ssp_tx_write_length +0x6c7a 030463 call ssp_tx_write_given_credit +0x6c7b 030464 bpatchx patch36_4 ,mem_patch36 +0x6c7c 030465 fetch 2 ,mem_nl_rx_data_src +0x6c7d 030466 copy pdata ,contru +0x6c7e 030467 fetch 2 ,mem_current_packet_length +0x6c7f 030468 copy pdata ,loopcnt +0x6c80 030469 call uart_copy_rx_bytes_fast +0x6c81 030470 copy contw ,temp +0x6c82 030471 copy contru ,pdata +0x6c83 030472 store 2 ,mem_nl_rx_data_src +0x6c84 030473 copy temp ,contw +0x6c85 030474 fetch 1 ,mem_rfcomm_send_fcs +0x6c86 030475 istore 1 ,contw +0x6c87 030476 fetch 2 ,mem_rfcomm_tx_buff_ptr +0x6c88 030477 copy pdata ,contw +0x6c89 030478 fetch 2 ,mem_current_packet_length +0x6c8a 030479 fetcht 1 ,mem_rfcomm_send_offset +0x6c8b 030480 iadd temp ,pdata +0x6c8c 030481 increase 4 ,pdata +0x6c8d 030482 istore 2 ,contw +0x6c8e 030483 fetch 2 ,mem_rfcomm_remote_cid +0x6c8f 030484 istore 2 ,contw +0x6c90 030485 jam 0 ,mem_credit_given +0x6c91 030486 fetch 2 ,mem_nl_rx_len_all +0x6c92 030487 beq 0 ,module_hci_command_tx_spp_tx_complete +0x6c93 030488 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x6c94 030489 rtn +: 030491 ssp_tx_write_length: +0x6c95 030492 bpatchx patch36_5 ,mem_patch36 +0x6c96 030493 fetch 2 ,mem_current_packet_length +0x6c97 030494 sub pdata ,0x7f ,null +0x6c98 030495 nbranch ssp_tx_write_long_packet ,positive +0x6c99 030496 lshift pdata ,pdata +0x6c9a 030497 set1 0 ,pdata +0x6c9b 030498 istore 1 ,contw +0x6c9c 030499 rtn +: 030500 ssp_tx_write_long_packet: +0x6c9d 030501 fetch 2 ,mem_current_packet_length +0x6c9e 030502 rshift3 pdata ,pdata +0x6c9f 030503 rshift4 pdata ,temp +0x6ca0 030504 and_into 0x7f ,pdata +0x6ca1 030505 lshift pdata ,pdata +0x6ca2 030506 set0 0 ,pdata +0x6ca3 030507 istore 1 ,contw +0x6ca4 030508 istoret 1 ,contw +0x6ca5 030509 rtn +: 030510 ssp_tx_write_given_credit: +0x6ca6 030511 fetch 1 ,mem_credit_given +0x6ca7 030512 rtn blank +0x6ca8 030513 istore 1 ,contw +0x6ca9 030514 rtn +: 030519 scheduler_process: +0x6caa 030520 bpatchx patch36_6 ,mem_patch36 +0x6cab 030521 call check_51cmd +0x6cac 030522 call app_process_bb_event +0x6cad 030523 call process_conn_sm +0x6cae 030525 bpatchx patch36_7 ,mem_patch36 +0x6caf 030526 call sp_calc_sequence +0x6cb0 030527 call simple_pairing_sequence +0x6cb1 030528 call master_simple_paring_sequence +0x6cb2 030531 call l2cap_malloc_is_fifo_full +0x6cb3 030532 nrtn blank +0x6cb4 030534 call l2cap_call_proc_sigal_pending +0x6cb5 030535 call l2cap_malloc_is_fifo_full +0x6cb6 030536 nrtn blank +0x6cb7 030537 bpatchx patch37_0 ,mem_patch37 +0x6cb8 030539 call process_upper_sm +0x6cb9 030540 call l2cap_send_config_req +0x6cba 030541 call rfcomm_send_more_pkt +: 030542 scheduler_process0: +0x6cbb 030543 call scheduler_tx_disconnect_hid +0x6cbc 030544 bpatchx patch37_1 ,mem_patch37 +0x6cbd 030547 branch app_process_bt +: 030549 scheduler_tx_disconnect_hid: +0x6cbe 030550 fetch 1 ,mem_control_tasks +0x6cbf 030551 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req +0x6cc0 030552 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req +0x6cc1 030553 rtn +: 030555 scheduler_tx_l2cap_pkt: +0x6cc2 030556 bpatchx patch37_2 ,mem_patch37 +0x6cc3 030557 call l2cap_malloc_is_fifo_empty +0x6cc4 030558 rtn blank +0x6cc5 030559 fetch 1 ,mem_op +0x6cc6 030560 rtnbit1 op_txl2cap +0x6cc7 030561 call l2cap_malloc_fifo_out +0x6cc8 030562 store 2 ,mem_txptr +0x6cc9 030563 copy pdata ,contr +0x6cca 030564 ifetch 2 ,contr +0x6ccb 030565 increase 4 ,pdata +0x6ccc 030566 store 2 ,mem_tx_len +0x6ccd 030567 jam 6 ,mem_tx_lch +0x6cce 030568 bpatchx patch37_3 ,mem_patch37 +0x6ccf 030569 fetch 2 ,mem_l2cap_tx_multi_offset +0x6cd0 030570 branch scheduler_tx_l2cap_start_pkt ,blank +0x6cd1 030571 fetch 1 ,mem_op +0x6cd2 030572 rtnbit0 op_pkt_comp +0x6cd3 030573 set0 op_pkt_comp ,pdata +0x6cd4 030574 store 1 ,mem_op +0x6cd5 030575 jam 5 ,mem_tx_lch +0x6cd6 030576 fetcht 2 ,mem_l2cap_tx_multi_offset +0x6cd7 030577 fetch 2 ,mem_txptr +0x6cd8 030578 iadd temp ,pdata +0x6cd9 030579 store 2 ,mem_txptr +0x6cda 030580 fetch 2 ,mem_tx_len +0x6cdb 030581 isub temp ,pdata +0x6cdc 030582 store 2 ,mem_tx_len +: 030583 scheduler_tx_l2cap_start_pkt: +0x6cdd 030584 bpatchx patch37_4 ,mem_patch37 +0x6cde 030585 fetch 2 ,mem_tx_len +0x6cdf 030586 branch assert ,blank +0x6ce0 030587 arg l2cap_max_pkt_len ,temp +0x6ce1 030588 isub temp ,pdata +0x6ce2 030589 nbranch scheduler_tx_l2cap_last_pkt ,positive +0x6ce3 030590 bpatchx patch37_5 ,mem_patch37 +0x6ce4 030591 storet 2 ,mem_tx_len +0x6ce5 030592 fetch 2 ,mem_l2cap_tx_multi_offset +0x6ce6 030593 iadd temp ,pdata +0x6ce7 030594 store 2 ,mem_l2cap_tx_multi_offset +0x6ce8 030595 branch scheduler_tx_l2cap_pkt_end +: 030596 scheduler_tx_l2cap_last_pkt: +0x6ce9 030597 setarg 0 +0x6cea 030598 store 2 ,mem_l2cap_tx_multi_offset +: 030599 scheduler_tx_l2cap_pkt_end: +0x6ceb 030600 fetch 1 ,mem_op +0x6cec 030601 set1 op_txl2cap ,pdata +0x6ced 030602 store 1 ,mem_op +0x6cee 030603 rtn +: 030605 scheduler_start_upper_sm: +0x6cef 030606 fetch 1 ,mem_ui_profile_supported +0x6cf0 030607 bbit1 support_hid ,scheduler_start_upper_sm_hid +0x6cf1 030608 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn +0x6cf2 030609 rtn +: 030610 scheduler_start_upper_sm_hid: +0x6cf3 030611 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +0x6cf4 030612 rtn +: 030614 process_upper_sm: +0x6cf5 030615 fetch 1 ,memui_reconnect_mode +0x6cf6 030616 nbranch process_upper_sm_reconn ,blank +: 030617 process_upper_sm_remote_page: +0x6cf7 030618 fetch 1 ,mem_upper_sm_remote_page +0x6cf8 030620 rtn blank +0x6cf9 030622 jam 0 ,mem_upper_sm_remote_page +: 030623 process_upper_sm_rp_wait: +0x6cfa 030624 rtn +: 030627 process_upper_sm_reconn: +0x6cfb 030628 bpatchx patch37_6 ,mem_patch37 +0x6cfc 030629 fetch 1 ,mem_upper_sm_reconn +0x6cfd 030630 rtn blank +0x6cfe 030631 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn +0x6cff 030632 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait +0x6d00 030633 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg +0x6d01 030634 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait +0x6d02 030635 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp +0x6d03 030636 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait +0x6d04 030637 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn +0x6d05 030638 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait +0x6d06 030639 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn +0x6d07 030640 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait +0x6d08 030641 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg +0x6d09 030642 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait +0x6d0a 030643 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn +0x6d0b 030644 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait +0x6d0c 030645 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg +0x6d0d 030646 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait +0x6d0e 030647 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn +0x6d0f 030648 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait +0x6d10 030649 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg +0x6d11 030650 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait +0x6d12 030651 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm +0x6d13 030652 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait +0x6d14 030653 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn +0x6d15 030654 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait +0x6d16 030655 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm +0x6d17 030656 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait +0x6d18 030657 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms +0x6d19 030658 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait +: 030659 process_upper_sm_reconn_wait: +0x6d1a 030660 rtn +: 030661 process_upper_sm_reconn_sdp_conn: +0x6d1b 030662 call upper_sm_send_sdp_conn +0x6d1c 030663 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn +0x6d1d 030664 fetch 1 ,mem_sdp_state +0x6d1e 030665 set1 l2cap_channel_state_conn_req ,pdata +0x6d1f 030666 store 1 ,mem_sdp_state +0x6d20 030667 rtn +: 030668 process_upper_sm_reconn_sdp_cfg: +0x6d21 030669 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +0x6d22 030670 fetch 1 ,mem_sdp_state +0x6d23 030671 rtnbit1 l2cap_channel_state_snd_cfg_req +0x6d24 030672 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +0x6d25 030673 call upper_sm_send_sdp_cfg +0x6d26 030674 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +0x6d27 030675 fetch 1 ,mem_sdp_state +0x6d28 030676 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d29 030677 store 1 ,mem_sdp_state +0x6d2a 030678 rtn +: 030679 process_upper_sm_reconn_ss_spp: +0x6d2b 030680 call l2cap_malloc_is_fifo_empty +0x6d2c 030681 nrtn blank +0x6d2d 030682 call upper_sm_send_ss_spp +0x6d2e 030683 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn +0x6d2f 030684 rtn +: 030685 process_upper_sm_reconn_sdp_disconn: +0x6d30 030686 call upper_sm_send_sdp_disconn +0x6d31 030687 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn +0x6d32 030688 rtn +: 030689 process_upper_sm_reconn_hid_ctrl_conn: +0x6d33 030690 call upper_sm_send_hid_ctrl_conn +0x6d34 030691 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn +0x6d35 030692 fetch 1 ,mem_hid_control_state +0x6d36 030693 set1 l2cap_channel_state_conn_req ,pdata +0x6d37 030694 store 1 ,mem_hid_control_state +0x6d38 030695 rtn +: 030696 process_upper_sm_reconn_hid_ctrl_cfg: +0x6d39 030697 call upper_sm_send_hid_ctrl_cfg +0x6d3a 030698 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn +0x6d3b 030699 fetch 1 ,mem_hid_control_state +0x6d3c 030700 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d3d 030701 store 1 ,mem_hid_control_state +0x6d3e 030702 rtn +: 030703 process_upper_sm_reconn_hid_int_conn: +0x6d3f 030704 call upper_sm_send_hid_int_conn +0x6d40 030705 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn +0x6d41 030706 fetch 1 ,mem_hid_interrupt_state +0x6d42 030707 set1 l2cap_channel_state_conn_req ,pdata +0x6d43 030708 store 1 ,mem_hid_interrupt_state +0x6d44 030709 rtn +: 030710 process_upper_sm_reconn_hid_int_cfg: +0x6d45 030711 call upper_sm_send_hid_int_cfg +0x6d46 030712 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn +0x6d47 030713 fetch 1 ,mem_hid_interrupt_state +0x6d48 030714 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d49 030715 store 1 ,mem_hid_interrupt_state +0x6d4a 030716 rtn +: 030717 process_upper_sm_reconn_rfcomm_conn: +0x6d4b 030718 call upper_sm_send_rfcomm_conn +0x6d4c 030719 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn +0x6d4d 030720 fetch 1 ,mem_rfcomm_state +0x6d4e 030721 set1 l2cap_channel_state_conn_req ,pdata +0x6d4f 030722 store 1 ,mem_rfcomm_state +0x6d50 030723 rtn +: 030724 process_upper_sm_reconn_rfcomm_cfg: +0x6d51 030725 call upper_sm_send_rfcomm_cfg +0x6d52 030726 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn +0x6d53 030727 fetch 1 ,mem_rfcomm_state +0x6d54 030728 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d55 030729 store 1 ,mem_rfcomm_state +0x6d56 030730 rtn +: 030731 process_upper_sm_reconn_rfcomm_sabm: +0x6d57 030732 call upper_sm_send_rfcomm_sabm +0x6d58 030733 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn +0x6d59 030734 fetch 1 ,mem_rfcomm_state +0x6d5a 030735 set1 l2cap_channel_rfcomm_only_sabm ,pdata +0x6d5b 030736 store 1 ,mem_rfcomm_state +0x6d5c 030737 rtn +: 030738 process_upper_sm_reconn_spp_cmd_pn: +0x6d5d 030739 call upper_sm_send_spp_cmd_pn +0x6d5e 030740 fetch 1 ,mem_spp_state +0x6d5f 030741 set1 rfcomm_channel_state_pn_cmd +0x6d60 030742 store 1 ,mem_spp_state +0x6d61 030743 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn +0x6d62 030744 rtn +: 030745 process_upper_sm_reconn_spp_sabm: +0x6d63 030746 call upper_sm_send_spp_sabm +0x6d64 030747 fetch 1 ,mem_spp_state +0x6d65 030748 set1 rfcomm_channel_state_sabm +0x6d66 030749 store 1 ,mem_spp_state +0x6d67 030750 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn +0x6d68 030751 fetch 1 ,mem_remote_spp_channel +0x6d69 030752 lshift3 pdata ,pdata +0x6d6a 030753 or_into 3 ,pdata +0x6d6b 030754 arg mem_hiufcs_spp ,temp +0x6d6c 030755 storet 2 ,mem_contw_temp +0x6d6d 030756 branch rfcomm_save_fcs_uih +: 030757 process_upper_sm_reconn_spp_cmd_ms: +0x6d6e 030758 call upper_sm_send_spp_cmd_ms +0x6d6f 030759 fetch 1 ,mem_spp_state +0x6d70 030760 set1 rfcomm_channel_state_snd_ms_cmd +0x6d71 030761 store 1 ,mem_spp_state +0x6d72 030762 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn +0x6d73 030763 rtn +: 030765 process_upper_sm_reconn_sdp_conn_wait: +0x6d74 030766 fetch 1 ,mem_sdp_state +0x6d75 030767 rtnbit0 l2cap_channel_state_conn_res +0x6d76 030768 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +0x6d77 030769 branch process_upper_sm_reconn +: 030770 process_upper_sm_reconn_sdp_cfg_wait: +0x6d78 030771 fetch 1 ,mem_sdp_state +0x6d79 030772 rtnne l2cap_channel_setup_complete +0x6d7a 030773 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn +: 030774 process_upper_sm_reconn_ss_spp_wait: +0x6d7b 030775 fetch 1 ,mem_message_to_uppersm +0x6d7c 030776 rtnne recieve_ss_reasult_hf +0x6d7d 030777 jam 0 ,mem_message_to_uppersm +0x6d7e 030778 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn +0x6d7f 030779 branch process_upper_sm_reconn +: 030780 process_upper_sm_reconn_sdp_disconn_wait: +0x6d80 030781 fetch 1 ,mem_sdp_state +0x6d81 030782 nrtn blank +0x6d82 030783 fetch 1 ,mem_ui_profile_supported +0x6d83 030784 bbit1 support_hid ,process_upper_sm_reconn_setup_hid +0x6d84 030785 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +0x6d85 030786 branch process_upper_sm_reconn_termination +: 030787 process_upper_sm_reconn_hid_ctrl_conn_wait: +0x6d86 030788 fetch 1 ,mem_hid_control_state +0x6d87 030789 rtnbit0 l2cap_channel_state_conn_res +0x6d88 030790 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn +0x6d89 030791 branch process_upper_sm_reconn +: 030792 process_upper_sm_reconn_hid_ctrl_cfg_wait: +0x6d8a 030793 fetch 1 ,mem_hid_control_state +0x6d8b 030794 rtnne l2cap_channel_setup_complete +0x6d8c 030795 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn +0x6d8d 030796 branch process_upper_sm_reconn +: 030797 process_upper_sm_reconn_hid_int_conn_wait: +0x6d8e 030798 fetch 1 ,mem_hid_interrupt_state +0x6d8f 030799 rtnbit0 l2cap_channel_state_conn_res +0x6d90 030800 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn +0x6d91 030801 branch process_upper_sm_reconn +: 030802 process_upper_sm_reconn_hid_int_cfg_wait: +0x6d92 030803 fetch 1 ,mem_hid_interrupt_state +0x6d93 030804 rtnne l2cap_channel_setup_complete +0x6d94 030805 fetch 1 ,mem_ui_profile_supported +0x6d95 030806 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +0x6d96 030807 branch process_upper_sm_reconn_termination +: 030808 process_upper_sm_reconn_rfcomm_conn_wait: +0x6d97 030809 fetch 1 ,mem_rfcomm_state +0x6d98 030810 rtnbit0 l2cap_channel_state_conn_res +0x6d99 030811 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn +0x6d9a 030812 branch process_upper_sm_reconn +: 030813 process_upper_sm_reconn_rfcomm_cfg_wait: +0x6d9b 030814 fetch 1 ,mem_rfcomm_state +0x6d9c 030815 rtnne l2cap_channel_setup_complete +0x6d9d 030816 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn +0x6d9e 030817 branch process_upper_sm_reconn +: 030818 process_upper_sm_reconn_rfcomm_sabm_wait: +0x6d9f 030819 fetch 1 ,mem_rfcomm_state +0x6da0 030820 rtnne l2cap_channel_rfcomm_dlci0_opened +0x6da1 030821 fetch 1 ,mem_ui_profile_supported +0x6da2 030822 bbit1 support_spp ,process_upper_sm_reconn_setup_spp +0x6da3 030823 branch process_upper_sm_reconn_termination +: 030824 process_upper_sm_reconn_spp_cmd_pn_wait: +0x6da4 030825 fetch 1 ,mem_spp_state +0x6da5 030826 rtnbit0 rfcomm_channel_state_pn_res +0x6da6 030827 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn +0x6da7 030828 branch process_upper_sm_reconn +: 030829 process_upper_sm_reconn_spp_sabm_wait: +0x6da8 030830 fetch 1 ,mem_spp_state +0x6da9 030831 rtnbit0 rfcomm_channel_state_ua +0x6daa 030832 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn +0x6dab 030833 branch process_upper_sm_reconn +: 030834 process_upper_sm_reconn_spp_cmd_ms_wait: +0x6dac 030835 fetch 1 ,mem_spp_state +0x6dad 030836 rtnne rfcomm_channel_setup_complete +0x6dae 030837 branch process_upper_sm_reconn_termination +: 030839 process_upper_sm_reconn_setup_hid: +0x6daf 030840 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +0x6db0 030841 branch process_upper_sm_reconn +: 030843 process_upper_sm_reconn_setup_rfcomm: +0x6db1 030844 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn +0x6db2 030845 branch process_upper_sm_reconn +: 030846 process_upper_sm_reconn_setup_spp: +0x6db3 030847 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn +0x6db4 030848 branch process_upper_sm_reconn +: 030852 process_upper_sm_reconn_termination: +0x6db5 030853 jam 0 ,mem_upper_sm_reconn +0x6db6 030854 rtn +: 030855 upper_sm_send_sdp_conn: +0x6db7 030856 bpatchx patch37_7 ,mem_patch37 +0x6db8 030857 call l2cap_malloc_signal_channel +0x6db9 030858 setarg psm_sdp +0x6dba 030859 copy pdata ,temp +0x6dbb 030860 setarg l2cap_sdp_channel +0x6dbc 030861 copy pdata ,timeup +0x6dbd 030862 branch ml2cap_send_signal_connect_req +: 030864 upper_sm_send_sdp_cfg: +0x6dbe 030865 bpatchx patch38_0 ,mem_patch38 +0x6dbf 030866 call l2cap_malloc_signal_channel +0x6dc0 030867 fetch 2 ,mem_sdp_remote_cid +0x6dc1 030868 copy pdata ,temp +0x6dc2 030869 branch ml2cap_send_signal_config_req +: 030871 upper_sm_send_sdp_disconn: +0x6dc3 030872 bpatchx patch38_1 ,mem_patch38 +0x6dc4 030873 call l2cap_malloc_signal_channel +0x6dc5 030874 fetch 2 ,mem_sdp_remote_cid +0x6dc6 030875 copy pdata ,temp +0x6dc7 030876 arg l2cap_sdp_channel ,timeup +0x6dc8 030877 call ml2cap_send_signal_disconn_req +0x6dc9 030878 fetch 1 ,mem_sdp_state +0x6dca 030879 set0 l2cap_channel_state_rcv_cfg_res ,pdata +0x6dcb 030880 store 1 ,mem_sdp_state +0x6dcc 030881 rtn +: 030883 upper_sm_send_ss_spp: +0x6dcd 030884 bpatchx patch38_2 ,mem_patch38 +0x6dce 030885 call l2cap_malloc_sdp_channel +0x6dcf 030886 call sdp_send_spp_request +0x6dd0 030887 branch msdp_send_req_done +: 030889 upper_sm_send_rfcomm_conn: +0x6dd1 030890 bpatchx patch38_3 ,mem_patch38 +0x6dd2 030891 call l2cap_malloc_signal_channel +0x6dd3 030892 setarg psm_rfcomm +0x6dd4 030893 copy pdata ,temp +0x6dd5 030894 setarg l2cap_rfcomm_channel +0x6dd6 030895 copy pdata ,timeup +0x6dd7 030896 branch ml2cap_send_signal_connect_req +: 030898 upper_sm_send_rfcomm_cfg: +0x6dd8 030899 bpatchx patch38_4 ,mem_patch38 +0x6dd9 030900 call l2cap_malloc_signal_channel +0x6dda 030901 fetch 2 ,mem_rfcomm_remote_cid +0x6ddb 030902 copy pdata ,temp +0x6ddc 030903 branch ml2cap_send_signal_config_req +: 030905 upper_sm_send_hid_ctrl_conn: +0x6ddd 030906 bpatchx patch38_5 ,mem_patch38 +0x6dde 030907 call l2cap_malloc_signal_channel +0x6ddf 030908 setarg psm_hid_control +0x6de0 030909 copy pdata ,temp +0x6de1 030910 setarg l2cap_hid_control_channel +0x6de2 030911 copy pdata ,timeup +0x6de3 030912 branch ml2cap_send_signal_connect_req +: 030914 upper_sm_send_hid_ctrl_cfg: +0x6de4 030915 bpatchx patch38_6 ,mem_patch38 +0x6de5 030916 call l2cap_malloc_signal_channel +0x6de6 030917 fetch 2 ,mem_hid_ctrl_remote_cid +0x6de7 030918 copy pdata ,temp +0x6de8 030919 branch ml2cap_send_signal_config_req +: 030921 upper_sm_send_hid_int_conn: +0x6de9 030922 bpatchx patch38_7 ,mem_patch38 +0x6dea 030923 call l2cap_malloc_signal_channel +0x6deb 030924 setarg psm_hid_interrupt +0x6dec 030925 copy pdata ,temp +0x6ded 030926 setarg l2cap_hid_interrupt_channel +0x6dee 030927 copy pdata ,timeup +0x6def 030928 branch ml2cap_send_signal_connect_req +: 030930 upper_sm_send_hid_int_cfg: +0x6df0 030931 bpatchx patch39_0 ,mem_patch39 +0x6df1 030932 call l2cap_malloc_signal_channel +0x6df2 030933 fetch 2 ,mem_hid_int_remote_cid +0x6df3 030934 copy pdata ,temp +0x6df4 030935 branch ml2cap_send_signal_config_req +: 030937 upper_sm_send_rfcomm_sabm: +0x6df5 030938 bpatchx patch39_1 ,mem_patch39 +0x6df6 030939 call l2cap_malloc_rfcomm_channel +0x6df7 030941 jam 3 ,mem_current_adss +0x6df8 030942 jam 0x1c ,mem_current_fcs +0x6df9 030943 call rfcomm_send_sabm +0x6dfa 030944 jam 1 ,mem_rfcomm_initiator +0x6dfb 030945 rtn +: 030947 upper_sm_send_spp_cmd_pn: +0x6dfc 030948 bpatchx patch39_2 ,mem_patch39 +0x6dfd 030949 call l2cap_malloc_rfcomm_channel +0x6dfe 030950 fetcht 1 ,mem_remote_spp_channel +0x6dff 030951 call channel_to_dlci +0x6e00 030952 storet 1 ,mem_pn_dlci +0x6e01 030953 branch rfcomm_send_param_neg_cmd +: 030955 upper_sm_send_spp_sabm: +0x6e02 030956 bpatchx patch39_3 ,mem_patch39 +0x6e03 030957 call l2cap_malloc_rfcomm_channel +0x6e04 030958 fetcht 1 ,mem_pn_dlci +0x6e05 030959 call dlci_to_address_cmd +0x6e06 030960 call rfcomm_calculate_fcs_sabm +0x6e07 030961 store 1 ,mem_current_fcs +0x6e08 030962 fetcht 1 ,mem_pn_dlci +0x6e09 030963 call dlci_to_address_cmd +0x6e0a 030964 storet 1 ,mem_current_adss +0x6e0b 030965 branch rfcomm_send_sabm +: 030967 upper_sm_send_spp_cmd_ms: +0x6e0c 030968 bpatchx patch39_4 ,mem_patch39 +0x6e0d 030969 call l2cap_malloc_rfcomm_channel +0x6e0e 030970 fetcht 1 ,mem_pn_dlci +0x6e0f 030971 call dlci_to_address_cmd +0x6e10 030972 branch rfcomm_send_modem_status_cmd +: 030985 sdp_process: +0x6e11 030986 bpatchx patch39_5 ,mem_patch39 +0x6e12 030987 fetch 2 ,mem_l2cap_payload_ptr +0x6e13 030988 iforce contr +0x6e14 030991 ifetch 1 ,contr +0x6e15 030992 copy pdata ,regb +0x6e16 030993 store 1 ,mem_sdp_pduid +0x6e17 030994 ifetch 2 ,contr +0x6e18 030995 store 2 ,mem_sdp_transactionid +0x6e19 030996 ifetch 1 ,contr +0x6e1a 030997 lshift8 pdata ,timeup +0x6e1b 030998 ifetch 1 ,contr +0x6e1c 030999 iadd timeup ,timeup +0x6e1d 031000 bpatchx patch39_6 ,mem_patch39 +0x6e1e 031001 copy contr ,temp +0x6e1f 031002 arg 4 ,loopcnt +0x6e20 031003 arg mem_sdp_handle_list ,contw +0x6e21 031004 call memset0 +0x6e22 031005 copy temp ,contr +0x6e23 031006 deposit regb +0x6e24 031007 beq sdp_error_res ,sdp_process_error_res +0x6e25 031008 beq sdp_search_req ,sdp_process_ss_req +0x6e26 031009 beq sdp_search_res ,sdp_process_ss_res +0x6e27 031010 beq sdp_attribute_req ,sdp_process_sa_req +0x6e28 031011 beq sdp_attribute_res ,sdp_process_sa_res +0x6e29 031012 beq sdp_searchattrib_req ,sdp_process_ssa_req +0x6e2a 031013 beq sdp_searchattrib_res ,sdp_process_ssa_res +0x6e2b 031014 branch sdp_insufficient_resource +: 031025 sdp_process_ss_req: +0x6e2c 031026 bpatchx patch39_7 ,mem_patch39 +0x6e2d 031027 call ask_serviceclassid +0x6e2e 031028 compare 1 ,temp ,0xff +0x6e2f 031029 branch ss_empty_rsp ,true +0x6e30 031030 compare 0xff ,temp ,0xff +0x6e31 031031 branch sdp_invalid_request_syntax ,true +0x6e32 031033 ifetch 2 ,contr +0x6e33 031034 store 2 ,mem_sdp_record_maxcnt +0x6e34 031035 increase -2 ,timeup +0x6e35 031037 increase -1 ,timeup +0x6e36 031038 nbranch sdp_invalid_pdu_size ,zero +0x6e37 031039 arg mem_sdp_uuid_search_ptr ,timeup +0x6e38 031040 ifetch 2 ,timeup +0x6e39 031041 rtn blank +0x6e3a 031042 call search_all_uuid +0x6e3b 031043 call l2cap_get_sdp_tx_payload +0x6e3c 031044 force 3 ,pdata +0x6e3d 031045 istore 1 ,contw +0x6e3e 031046 fetch 2 ,mem_sdp_transactionid +0x6e3f 031047 istore 2 ,contw +0x6e40 031048 lshift2 queue ,pdata +0x6e41 031049 add pdata ,5 ,pdata +0x6e42 031050 add pdata ,5 ,regc +0x6e43 031051 byteswap pdata ,pdata +0x6e44 031052 istore 2 ,contw +0x6e45 031053 deposit queue +0x6e46 031054 byteswap pdata ,pdata +0x6e47 031055 istore 2 ,contw +0x6e48 031056 istore 2 ,contw +0x6e49 031057 arg mem_sdp_handle_list ,contr +0x6e4a 031058 copy queue ,loopcnt +0x6e4b 031059 branch ss_req_blank ,zero +: 031060 ss_req_loop: +0x6e4c 031061 ifetch 4 ,contr +0x6e4d 031062 istore 4 ,contw +0x6e4e 031063 loop ss_req_loop +: 031064 ss_req_blank: +0x6e4f 031065 force 0 ,pdata +0x6e50 031066 istore 1 ,contw +0x6e51 031067 deposit regc +0x6e52 031068 store 2 ,mem_sdp_tx_pkt_length +0x6e53 031070 rtn +: 031081 sdp_process_sa_req: +0x6e54 031082 bpatchx patch3a_0 ,mem_patch3a +0x6e55 031083 ifetch 4 ,contr +0x6e56 031084 store 4 ,mem_sdp_record_handle +0x6e57 031085 increase -4 ,timeup +0x6e58 031086 call sdp_store_maxbyte +0x6e59 031087 store 2 ,mem_sdp_attribute_maxbyte +0x6e5a 031088 increase -2 ,timeup +0x6e5b 031089 call dataelementtype6 +0x6e5c 031090 branch sdp_invalid_request_syntax ,zero +0x6e5d 031091 compare 5 ,rega ,0xff +0x6e5e 031093 branch sa_judge_wholerange ,true +: 031094 sa_isnot_wholerange: +0x6e5f 031095 arg mem_sdp_attrib_list ,contw +0x6e60 031096 force 0 ,queue +0x6e61 031097 branch sa_req_loop +: 031098 sa_judge_wholerange: +0x6e62 031099 ifetch 1 ,contr +0x6e63 031100 bne sdp_attribute_range ,sdp_invalid_request_syntax +0x6e64 031101 ifetch 2 ,contr +0x6e65 031102 nbranch sa_judge_wholerange_false1 ,blank +0x6e66 031103 ifetch 1 ,contr +0x6e67 031104 bne 0xff ,sa_judge_wholerange_false2 +0x6e68 031105 ifetch 1 ,contr +0x6e69 031106 bne 0xff ,sa_judge_wholerange_false3 +0x6e6a 031107 branch sa_req_all +: 031108 sa_judge_wholerange_false3: +0x6e6b 031109 increase -5 ,contr +0x6e6c 031110 branch sa_isnot_wholerange +: 031111 sa_judge_wholerange_false2: +0x6e6d 031112 increase -4 ,contr +0x6e6e 031113 branch sa_isnot_wholerange +: 031114 sa_judge_wholerange_false1: +0x6e6f 031115 increase -3 ,contr +0x6e70 031116 branch sa_isnot_wholerange +: 031117 sa_req_loop: +0x6e71 031118 ifetch 1 ,contr +0x6e72 031119 beq sdp_attribute_id ,sa_req_one_id +0x6e73 031120 beq sdp_attribute_range ,sa_req_range +: 031121 sa_req_range: +0x6e74 031122 ifetch 2 ,contr +0x6e75 031123 istore 2 ,contw +0x6e76 031124 increase 1 ,queue +0x6e77 031125 byteswap pdata ,regb +0x6e78 031126 ifetch 2 ,contr +0x6e79 031127 byteswap pdata ,pdata +: 031128 sa_req_range_id_increase: +0x6e7a 031129 increase 1 ,regb +0x6e7b 031130 isub regb ,null +0x6e7c 031131 nbranch sa_req_range_id_finish ,positive +0x6e7d 031132 copy pdata ,regc +0x6e7e 031133 byteswap regb ,pdata +0x6e7f 031134 istore 2 ,contw +0x6e80 031135 increase 1 ,queue +0x6e81 031136 copy regc ,pdata +0x6e82 031137 branch sa_req_range_id_increase +: 031138 sa_req_range_id_finish: +0x6e83 031139 increase -5 ,timeup +0x6e84 031140 increase -5 ,rega +0x6e85 031141 branch sa_req_check_next_id +: 031142 sa_req_one_id: +0x6e86 031143 ifetch 2 ,contr +0x6e87 031144 istore 2 ,contw +0x6e88 031145 increase 1 ,queue +0x6e89 031146 increase -3 ,timeup +0x6e8a 031147 increase -3 ,rega +: 031148 sa_req_check_next_id: +0x6e8b 031149 nbranch sdp_invalid_request_syntax ,positive +0x6e8c 031150 nbranch sa_req_loop ,zero +0x6e8d 031151 increase -1 ,timeup +0x6e8e 031152 nbranch sdp_invalid_request_syntax ,zero +0x6e8f 031154 call l2cap_get_sdp_tx_payload +0x6e90 031155 increase 10 ,contw +0x6e91 031156 arg mem_sdp_attrib_list ,rega +: 031157 sa_req_handle_attributelist_next: +0x6e92 031158 copy queue ,pdata +0x6e93 031159 branch sa_req_handle_attributelist_end ,blank +0x6e94 031160 ifetch 2 ,rega +0x6e95 031161 branch sa_req_handle_attributelist_end ,blank +0x6e96 031162 iforce regb +0x6e97 031163 fetch 4 ,mem_sdp_record_handle +0x6e98 031164 iforce temp +0x6e99 031165 call search_handle_attrib +0x6e9a 031166 copy contr ,pdata +0x6e9b 031167 branch sa_req_handle_attributelist_notfound ,blank +0x6e9c 031168 increase -3 ,contr +0x6e9d 031169 ifetch 3 ,contr +0x6e9e 031170 istore 3 ,contw +0x6e9f 031171 call sdp_data_len +0x6ea0 031172 iforce loopcnt +0x6ea1 031173 call memcpy +: 031174 sa_req_handle_attributelist_notfound: +0x6ea2 031175 increase 2 ,rega +0x6ea3 031176 increase -1 ,queue +0x6ea4 031177 branch sa_req_handle_attributelist_next +: 031179 sa_req_handle_attributelist_end: +0x6ea5 031180 arg sdp_attribute_res ,rega +0x6ea6 031181 call ssa_req_range_lastfreg_common +0x6ea7 031182 fetch 2 ,mem_sdp_tx_pkt_length +0x6ea8 031183 beq 11 ,sa_empty_rsp +0x6ea9 031184 branch ssa_req_range_attrbutes_length_no_continue +: 031187 sdp_store_continue_common: +0x6eaa 031188 ifetch 1 ,contr +0x6eab 031189 beq 0 ,sdp_store_continue_0byte +0x6eac 031190 beq 1 ,sdp_store_continue_1byte +0x6ead 031191 beq 2 ,sdp_store_continue_2byte +: 031192 sdp_store_continue_0byte: +0x6eae 031193 increase -1 ,timeup +0x6eaf 031194 branch sdp_store_continue_end +: 031195 sdp_store_continue_1byte: +0x6eb0 031196 ifetch 1 ,contr +0x6eb1 031197 increase -2 ,timeup +0x6eb2 031198 branch sdp_store_continue_end +: 031199 sdp_store_continue_2byte: +0x6eb3 031200 ifetch 2 ,contr +0x6eb4 031201 byteswap pdata ,pdata +0x6eb5 031202 increase -3 ,timeup +: 031203 sdp_store_continue_end: +0x6eb6 031204 store 2 ,mem_sdp_continue_byte +0x6eb7 031205 rtn +: 031207 sa_req_all: +0x6eb8 031208 increase -5 ,timeup +0x6eb9 031209 call sdp_store_continue_common +0x6eba 031210 nbranch sdp_invalid_pdu_size ,zero +0x6ebb 031211 fetcht 4 ,mem_sdp_record_handle +0x6ebc 031212 call search_handle +0x6ebd 031213 nbranch sdp_invalid_service_record_handle ,zero +0x6ebe 031214 copy contr ,rega +0x6ebf 031215 call l2cap_get_sdp_tx_payload +0x6ec0 031216 copy rega ,contr +0x6ec1 031217 increase 3 ,contw +0x6ec2 031218 copy contr ,timeup +0x6ec3 031219 call sdp_get_data +0x6ec4 031220 copy pdata ,rega +0x6ec5 031222 fetch 2 ,mem_sdp_continue_byte +0x6ec6 031223 copy pdata ,regb +0x6ec7 031224 copy rega ,pdata +0x6ec8 031225 isub regb ,regb +0x6ec9 031226 fetch 2 ,mem_sdp_attribute_maxbyte +0x6eca 031227 isub regb ,null +0x6ecb 031228 nbranch sa_req_all_fragment_sdp ,positive +0x6ecc 031230 disable user +0x6ecd 031231 fetch 2 ,mem_sdp_continue_byte +0x6ece 031232 branch sa_req_all_fisrt_fragment ,blank +0x6ecf 031233 iadd timeup ,contr +0x6ed0 031234 increase 3 ,regb +0x6ed1 031235 copy regb ,loopcnt +0x6ed2 031236 copy loopcnt ,pdata +0x6ed3 031237 increase 3 ,pdata +0x6ed4 031238 byteswap pdata ,pdata +0x6ed5 031239 istore 2 ,contw +0x6ed6 031240 copy loopcnt ,pdata +0x6ed7 031241 byteswap pdata ,pdata +0x6ed8 031242 istore 2 ,contw +0x6ed9 031243 branch sa_req_all_answer_attributelist_full_loop +: 031244 sa_req_all_fisrt_fragment: +0x6eda 031245 add rega ,6 ,loopcnt +0x6edb 031246 branch sa_req_all_parlength_continue_byte ,user +0x6edc 031247 byteswap loopcnt ,pdata +0x6edd 031248 branch sa_req_all_parlength_continue_byte_end +: 031249 sa_req_all_parlength_continue_byte: +0x6ede 031250 copy loopcnt ,pdata +0x6edf 031251 increase 2 ,pdata +0x6ee0 031252 byteswap pdata ,pdata +: 031253 sa_req_all_parlength_continue_byte_end: +0x6ee1 031254 istore 2 ,contw +0x6ee2 031255 increase -3 ,loopcnt +0x6ee3 031256 byteswap loopcnt ,pdata +0x6ee4 031257 istore 2 ,contw +0x6ee5 031258 copy timeup ,contr +0x6ee6 031259 branch sa_req_all_answer_attributelist_full_loop +: 031260 sa_req_all_fragment_sdp: +0x6ee7 031261 enable user +0x6ee8 031263 fetch 2 ,mem_sdp_attribute_maxbyte +0x6ee9 031264 copy pdata ,rega +0x6eea 031265 copy rega ,loopcnt +0x6eeb 031266 fetch 2 ,mem_sdp_continue_byte +0x6eec 031267 branch sa_req_all_fisrt_fragment ,blank +0x6eed 031268 iadd timeup ,contr +0x6eee 031269 copy rega ,pdata +0x6eef 031270 increase 5 ,pdata +0x6ef0 031271 byteswap pdata ,pdata +0x6ef1 031272 istore 2 ,contw +0x6ef2 031273 copy rega ,pdata +0x6ef3 031274 byteswap pdata ,pdata +0x6ef4 031275 istore 2 ,contw +: 031276 sa_req_all_answer_attributelist_full_loop: +0x6ef5 031277 call memcpy +0x6ef6 031278 nbranch sa_req_all_last_frag_continue ,user +0x6ef7 031279 force 2 ,pdata +0x6ef8 031280 istore 1 ,contw +0x6ef9 031281 copy contr ,pdata +0x6efa 031282 isub timeup ,pdata +0x6efb 031283 byteswap pdata ,pdata +0x6efc 031284 istore 2 ,contw +0x6efd 031285 branch sa_req_all_frag_end +: 031286 sa_req_all_last_frag_continue: +0x6efe 031287 force 0 ,pdata +0x6eff 031288 istore 1 ,contw +: 031289 sa_req_all_frag_end: +0x6f00 031290 arg sdp_attribute_res ,rega +0x6f01 031291 branch ssa_req_range_common +: 031302 sdp_process_ssa_req: +0x6f02 031303 bpatchx patch3a_1 ,mem_patch3a +0x6f03 031304 call ask_serviceclassid +0x6f04 031305 compare 0xff ,temp ,0xff +0x6f05 031306 branch sdp_invalid_request_syntax ,true +0x6f06 031307 call sdp_store_maxbyte +0x6f07 031308 store 2 ,mem_sdp_attribute_maxbyte +0x6f08 031309 increase -2 ,timeup +0x6f09 031310 call dataelementtype6 +0x6f0a 031311 arg mem_sdp_attrib_list ,contw +0x6f0b 031312 force 0 ,queue +: 031313 ssa_req_loop: +0x6f0c 031314 ifetch 1 ,contr +0x6f0d 031315 beq sdp_attribute_range ,ssa_req_range +0x6f0e 031316 ifetch 2 ,contr +0x6f0f 031317 istore 2 ,contw +0x6f10 031318 increase 1 ,queue +0x6f11 031319 increase -3 ,timeup +0x6f12 031320 increase -3 ,rega +0x6f13 031321 nbranch sdp_invalid_request_syntax ,positive +0x6f14 031322 nbranch ssa_req_loop ,zero +0x6f15 031323 increase -1 ,timeup +0x6f16 031324 nbranch sdp_invalid_request_syntax ,zero +0x6f17 031325 call l2cap_get_sdp_tx_payload +0x6f18 031326 increase 13 ,contw +0x6f19 031327 fetch 2 ,mem_sdp_uuid_search_ptr +0x6f1a 031328 iforce regc +0x6f1b 031329 arg mem_sdp_attrib_list ,rega +: 031330 ssa_req_attributelist_next: +0x6f1c 031331 ifetch 2 ,rega +0x6f1d 031332 branch ssa_req_attributelist_end ,blank +0x6f1e 031333 iforce regb +0x6f1f 031334 call search_attrib +0x6f20 031335 branch ssa_req_attributelist_notfound ,blank +0x6f21 031336 increase -3 ,contr +0x6f22 031337 ifetch 3 ,contr +0x6f23 031338 istore 3 ,contw +0x6f24 031339 call sdp_data_len +0x6f25 031340 iforce loopcnt +0x6f26 031341 call memcpy +: 031342 ssa_req_attributelist_notfound: +0x6f27 031343 increase 2 ,rega +0x6f28 031344 branch ssa_req_attributelist_next +: 031346 ssa_req_attributelist_end: +0x6f29 031347 call ssa_req_range_lastfreg +0x6f2a 031348 fetch 2 ,mem_sdp_tx_pkt_length +0x6f2b 031349 beq 14 ,ssa_empty_rsp +0x6f2c 031350 call ssa_req_range_attrbutes_length_no_continue +0x6f2d 031351 branch ssa_req_range_attrbutes_length_no_continue +: 031354 sdp_store_maxbyte: +0x6f2e 031355 ifetch 2 ,contr +0x6f2f 031356 byteswap pdata ,pdata +0x6f30 031357 increase -3 ,pdata +0x6f31 031358 arg 200 ,temp +0x6f32 031359 isub temp ,null +0x6f33 031360 nrtn positive +0x6f34 031361 setarg 200 +0x6f35 031362 rtn +: 031365 ssa_req_range: +0x6f36 031366 increase 4 ,contr +0x6f37 031367 increase -5 ,timeup +0x6f38 031368 increase -5 ,rega +0x6f39 031369 nbranch sdp_invalid_request_syntax ,zero +0x6f3a 031370 call sdp_store_continue_common +0x6f3b 031371 nbranch sdp_invalid_pdu_size ,zero +0x6f3c 031372 arg mem_sdp_uuid_search_ptr ,timeup +0x6f3d 031373 call search_all_uuid +0x6f3e 031374 deposit queue +0x6f3f 031375 branch ssa_empty_rsp ,blank +0x6f40 031376 store 1 ,mem_handle_humber +0x6f41 031378 copy regb ,pdata +0x6f42 031379 store 2 ,mem_sdp_all_length +0x6f43 031380 arg 0 ,queue +0x6f44 031381 arg 0 ,rega +0x6f45 031382 call l2cap_get_sdp_tx_payload +0x6f46 031383 increase 10 ,contw +: 031384 ssa_req_range_find_handle: +0x6f47 031385 call ssa_req_range_get_length +0x6f48 031386 nbranch assert ,user +0x6f49 031387 copy contr ,timeup +0x6f4a 031388 copy pdata ,regc +0x6f4b 031389 iadd rega ,rega +0x6f4c 031392 fetch 2 ,mem_sdp_continue_byte +0x6f4d 031393 copy pdata ,regb +0x6f4e 031394 branch ssa_req_range_first_freg ,blank +: 031395 ssa_req_range_later_freg_with_continue: +0x6f4f 031396 copy rega ,pdata +0x6f50 031397 isub regb ,regb +0x6f51 031398 branch ssa_req_range_next_handle ,zero +0x6f52 031399 nbranch ssa_req_range_next_handle ,positive +0x6f53 031400 fetch 2 ,mem_sdp_attribute_maxbyte +0x6f54 031401 isub regb ,null +0x6f55 031402 branch ssa_req_range_maxbyte_with_continue ,zero +0x6f56 031403 nbranch ssa_req_range_maxbyte_with_continue ,positive +: 031406 ssa_req_range_send_not_maxbyte: +0x6f57 031407 copy regb ,loopcnt +0x6f58 031408 call ssa_req_range_maxbyte_with_continue_cpy +0x6f59 031409 fetch 1 ,mem_handle_humber +0x6f5a 031410 increase 1 ,queue +0x6f5b 031411 isub queue ,null +0x6f5c 031412 branch ssa_req_range_lastfreg ,zero +0x6f5d 031413 branch ssa_req_range_freg_with_continue +: 031415 ssa_req_range_maxbyte_with_continue: +0x6f5e 031416 copy pdata ,loopcnt +0x6f5f 031417 call ssa_req_range_maxbyte_with_continue_cpy +0x6f60 031418 branch ssa_req_range_freg_with_continue +: 031420 ssa_req_range_maxbyte_with_continue_cpy: +0x6f61 031421 increase -3 ,contw +0x6f62 031422 copy loopcnt ,temp +0x6f63 031423 copy regc ,pdata +0x6f64 031424 isub regb ,pdata +0x6f65 031425 iadd timeup ,contr +0x6f66 031426 branch memcpy +: 031428 ssa_req_range_next_handle: +0x6f67 031429 fetch 1 ,mem_handle_humber +0x6f68 031430 increase 1 ,queue +0x6f69 031431 isub queue ,null +0x6f6a 031432 rtn zero +0x6f6b 031433 branch ssa_req_range_find_handle +: 031435 ssa_req_range_get_length: +0x6f6c 031436 call disable_user +0x6f6d 031437 arg mem_sdp_handle_list ,contr +0x6f6e 031438 lshift2 queue ,pdata +0x6f6f 031439 iadd contr ,contr +0x6f70 031440 ifetcht 4 ,contr +0x6f71 031441 call search_handle +0x6f72 031442 nrtn zero +0x6f73 031443 call sdp_data_len +0x6f74 031444 branch enable_user +: 031446 ssa_req_range_first_freg: +0x6f75 031447 fetch 2 ,mem_sdp_attribute_maxbyte +0x6f76 031448 isub rega ,null +0x6f77 031449 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive +0x6f78 031450 copy rega ,loopcnt +0x6f79 031451 copy loopcnt ,temp +0x6f7a 031452 copy timeup ,contr +0x6f7b 031453 call memcpy +0x6f7c 031454 fetch 2 ,mem_sdp_all_length +0x6f7d 031455 isub rega ,null +0x6f7e 031456 branch ssa_req_range_freg_no_continue ,zero +: 031457 ssa_req_range_firstfreg_not_maxbyte_with_continue: +0x6f7f 031458 call ssa_req_range_freg_with_continue +0x6f80 031459 branch ssa_req_range_attrbutes_length +: 031461 ssa_req_range_freg_no_continue: +0x6f81 031462 call ssa_req_range_lastfreg +0x6f82 031463 branch ssa_req_range_attrbutes_length +: 031465 ssa_req_range_lastfreg: +0x6f83 031466 arg sdp_searchattrib_res ,rega +: 031467 ssa_req_range_lastfreg_common: +0x6f84 031468 force 0 ,pdata +0x6f85 031469 istore 1 ,contw +0x6f86 031470 call ssa_req_range_common +0x6f87 031471 fetcht 2 ,mem_sdp_tx_pkt_length +0x6f88 031472 increase -5 ,temp +0x6f89 031473 byteswap temp ,pdata +0x6f8a 031474 istore 2 ,contw +0x6f8b 031475 increase -3 ,temp +0x6f8c 031476 byteswap temp ,pdata +0x6f8d 031477 istore 2 ,contw +0x6f8e 031478 rtn +: 031480 ssa_req_range_firstfreg_maxbyte_with_continue: +0x6f8f 031481 copy pdata ,loopcnt +0x6f90 031482 copy loopcnt ,temp +0x6f91 031483 copy timeup ,contr +0x6f92 031484 call memcpy +0x6f93 031485 call ssa_req_range_freg_with_continue +: 031486 ssa_req_range_attrbutes_length: +0x6f94 031487 setarg 0x36 +0x6f95 031488 istore 1 ,contw +0x6f96 031489 fetch 2 ,mem_sdp_all_length +0x6f97 031490 byteswap pdata ,pdata +0x6f98 031491 istore 2 ,contw +0x6f99 031492 rtn +: 031494 ssa_req_range_attrbutes_length_no_continue: +0x6f9a 031495 setarg 0x36 +0x6f9b 031496 istore 1 ,contw +0x6f9c 031497 increase -3 ,temp +0x6f9d 031498 byteswap temp ,pdata +0x6f9e 031499 istore 2 ,contw +0x6f9f 031500 rtn +: 031502 ssa_req_range_freg_with_continue: +0x6fa0 031503 arg sdp_searchattrib_res ,rega +0x6fa1 031504 setarg 2 +0x6fa2 031505 istore 1 ,contw +0x6fa3 031506 fetch 2 ,mem_sdp_continue_byte +0x6fa4 031507 iadd temp ,temp +0x6fa5 031508 byteswap temp ,pdata +0x6fa6 031509 istore 2 ,contw +0x6fa7 031510 call ssa_req_range_common +0x6fa8 031511 fetcht 2 ,mem_sdp_tx_pkt_length +0x6fa9 031512 increase -5 ,temp +0x6faa 031513 byteswap temp ,pdata +0x6fab 031514 istore 2 ,contw +0x6fac 031515 increase -5 ,temp +0x6fad 031516 byteswap temp ,pdata +0x6fae 031517 istore 2 ,contw +0x6faf 031518 rtn +: 031520 ssa_req_range_common: +0x6fb0 031521 fetch 2 ,mem_sdp_tx_payload_ptr +0x6fb1 031522 isub contw ,pdata +0x6fb2 031523 sub pdata ,0 ,pdata +0x6fb3 031524 store 2 ,mem_sdp_tx_pkt_length +0x6fb4 031525 call l2cap_get_sdp_tx_payload +0x6fb5 031526 copy rega ,pdata +0x6fb6 031527 istore 1 ,contw +0x6fb7 031528 fetch 2 ,mem_sdp_transactionid +0x6fb8 031529 istore 2 ,contw +0x6fb9 031530 rtn +: 031543 sdp_process_ssa_res: +: 031544 sdp_process_ss_res: +: 031545 sdp_process_sa_res: +: 031546 sdp_process_error_res: +0x6fba 031547 rtn +: 031580 sdp_invalid_service_record_handle: +0x6fbb 031581 setarg 0x0200 +0x6fbc 031582 store 2 ,mem_sdp_error_code +0x6fbd 031583 branch sdp_error_response +: 031584 sdp_invalid_pdu_size: +0x6fbe 031585 setarg 0x0400 +0x6fbf 031586 store 2 ,mem_sdp_error_code +0x6fc0 031587 branch sdp_error_response +: 031588 sdp_insufficient_resource: +0x6fc1 031589 setarg 0x0600 +0x6fc2 031590 store 2 ,mem_sdp_error_code +0x6fc3 031591 branch sdp_error_response +: 031592 sdp_invalid_request_syntax: +0x6fc4 031593 setarg 0x0300 +0x6fc5 031594 store 2 ,mem_sdp_error_code +: 031595 sdp_error_response: +0x6fc6 031596 call l2cap_get_sdp_tx_payload +0x6fc7 031597 istore 1 ,contw +0x6fc8 031598 fetch 2 ,mem_sdp_transactionid +0x6fc9 031599 istore 2 ,contw +0x6fca 031600 setarg 0x0200 +0x6fcb 031601 istore 2 ,contw +0x6fcc 031602 fetch 2 ,mem_sdp_error_code +0x6fcd 031603 istore 2 ,contw +0x6fce 031604 jam 7 ,mem_sdp_tx_pkt_length +0x6fcf 031605 rtn +: 031610 ask_serviceclassid: +0x6fd0 031611 arg 0 ,regb +0x6fd1 031612 force 0 ,temp +0x6fd2 031613 arg mem_sdp_uuid_search_ptr ,contw +0x6fd3 031614 call dataelementtype6 +0x6fd4 031615 branch asksrv_error ,zero +: 031616 classidloop: +0x6fd5 031617 increase 1 ,regb +0x6fd6 031618 ifetch 1 ,contr +0x6fd7 031619 increase -1 ,rega +0x6fd8 031620 increase -1 ,timeup +0x6fd9 031621 compare 0x18 ,pdata ,0xf8 +0x6fda 031622 nbranch asksrv_error ,true +0x6fdb 031623 compare 0x04 ,pdata ,0x07 +0x6fdc 031624 nbranch cmp032 ,true +0x6fdd 031625 force 1 ,temp +: 031626 skip2bytes: +0x6fde 031627 ifetch 1 ,contr +0x6fdf 031628 increase -1 ,rega +0x6fe0 031629 increase -1 ,timeup +0x6fe1 031630 bne 0x00 ,frstbwrong +0x6fe2 031631 ifetch 1 ,contr +0x6fe3 031632 increase -1 ,rega +0x6fe4 031633 increase -1 ,timeup +0x6fe5 031634 beq 0x00 ,cmpuuid +0x6fe6 031635 branch scndbwrong +: 031636 frstbwrong: +0x6fe7 031637 increase 1 ,contr +0x6fe8 031638 increase -1 ,rega +0x6fe9 031639 increase -1 ,timeup +: 031640 scndbwrong: +0x6fea 031641 increase 2 ,contr +0x6feb 031642 increase -2 ,rega +0x6fec 031643 increase -2 ,timeup +0x6fed 031644 compare 0x00 ,temp ,0xff +0x6fee 031645 branch loopornot ,true +0x6fef 031646 increase 12 ,contr +0x6ff0 031647 increase -12 ,rega +0x6ff1 031648 increase -12 ,timeup +0x6ff2 031649 branch loopornot +: 031650 cmp032: +0x6ff3 031651 compare 0x02 ,pdata ,0x07 +0x6ff4 031652 nbranch cmp016 ,true +0x6ff5 031653 branch skip2bytes +: 031654 cmp016: +0x6ff6 031655 compare 0x01 ,pdata ,0x07 +0x6ff7 031656 nbranch asksrv_error ,true +: 031657 cmpuuid: +0x6ff8 031658 increase -2 ,rega +0x6ff9 031659 increase -2 ,timeup +0x6ffa 031660 ifetch 2 ,contr +0x6ffb 031661 sub regb ,4 ,null +0x6ffc 031662 branch uuidsize ,zero +0x6ffd 031663 istore 2 ,contw +: 031664 uuidsize: +0x6ffe 031665 compare 0x00 ,temp ,0xff +0x6fff 031666 branch loopornot ,true +0x7000 031667 copy contr ,temp +0x7001 031668 ifetch 1 ,contr +0x7002 031669 bne 0x00 ,wrong12b +0x7003 031670 ifetch 1 ,contr +0x7004 031671 bne 0x00 ,wrong12b +0x7005 031672 ifetch 1 ,contr +0x7006 031673 bne 0x10 ,wrong12b +0x7007 031674 ifetch 1 ,contr +0x7008 031675 bne 0x00 ,wrong12b +0x7009 031676 ifetch 1 ,contr +0x700a 031677 bne 0x80 ,wrong12b +0x700b 031678 ifetch 1 ,contr +0x700c 031679 bne 0x00 ,wrong12b +0x700d 031680 ifetch 1 ,contr +0x700e 031681 bne 0x00 ,wrong12b +0x700f 031682 ifetch 1 ,contr +0x7010 031683 bne 0x80 ,wrong12b +0x7011 031684 ifetch 1 ,contr +0x7012 031685 bne 0x5f ,wrong12b +0x7013 031686 ifetch 1 ,contr +0x7014 031687 bne 0x9b ,wrong12b +0x7015 031688 ifetch 1 ,contr +0x7016 031689 bne 0x34 ,wrong12b +0x7017 031690 ifetch 1 ,contr +0x7018 031691 beq 0xfb ,chck12dn +: 031692 wrong12b: +0x7019 031693 copy temp ,contr +: 031694 wrong12b1: +0x701a 031695 increase 12 ,contr +0x701b 031696 force 0x00 ,queue +0x701c 031697 force 0x00 ,temp +0x701d 031698 branch chck12dn +: 031700 chck12dn: +0x701e 031701 increase -12 ,timeup +0x701f 031702 increase -12 ,rega +: 031703 loopornot: +0x7020 031704 force 0x00 ,temp +0x7021 031705 compare 0x00 ,rega ,0xff +0x7022 031706 nbranch classidloop ,true +0x7023 031707 force 0 ,pdata +0x7024 031708 istore 2 ,contw +0x7025 031709 rtn +: 031710 asksrv_error: +0x7026 031711 arg 0xff ,temp +0x7027 031712 rtn +: 031722 dataelementtype6: +0x7028 031723 bpatchx patch3a_4 ,mem_patch3a +0x7029 031724 ifetch 1 ,contr +0x702a 031725 increase -1 ,timeup +0x702b 031726 compare 0x30 ,pdata ,0xf8 +0x702c 031727 nbranch dsize_error ,true +0x702d 031728 compare 0x07 ,pdata ,0x07 +0x702e 031729 branch dsize32 ,true +0x702f 031730 compare 0x06 ,pdata ,0x07 +0x7030 031731 branch dsize16 ,true +0x7031 031732 compare 0x05 ,pdata ,0x07 +0x7032 031733 nbranch dsize_error ,true +0x7033 031735 ifetch 1 ,contr +0x7034 031736 copy pdata ,rega +0x7035 031737 increase -1 ,timeup +0x7036 031738 branch dsize +: 031739 dsize32: +0x7037 031740 increase 2 ,contr +0x7038 031741 increase -2 ,timeup +: 031742 dsize16: +0x7039 031743 ifetch 2 ,contr +0x703a 031744 byteswap pdata ,rega +0x703b 031745 increase -2 ,timeup +: 031746 dsize: +0x703c 031747 force 0x01 ,pdata +0x703d 031748 rtn +: 031749 dsize_error: +0x703e 031750 force 0x00 ,pdata +0x703f 031751 rtn +: 031761 ss_empty_rsp: +0x7040 031762 setarg sdp_search_res +0x7041 031763 store 1 ,mem_sdp_pduid +0x7042 031764 branch empty_response +: 031765 sa_empty_rsp: +0x7043 031766 setarg sdp_attribute_res +0x7044 031767 store 1 ,mem_sdp_pduid +0x7045 031768 branch empty_response +: 031769 ssa_empty_rsp: +0x7046 031770 setarg sdp_searchattrib_res +0x7047 031771 store 1 ,mem_sdp_pduid +: 031772 empty_response: +0x7048 031773 call l2cap_get_sdp_tx_payload +0x7049 031776 fetch 1 ,mem_sdp_pduid +0x704a 031777 copy pdata ,regb +0x704b 031778 istore 1 ,contw +0x704c 031779 fetch 2 ,mem_sdp_transactionid +0x704d 031780 istore 2 ,contw +0x704e 031781 setarg 0x0500 +0x704f 031782 istore 2 ,contw +0x7050 031783 compare sdp_attribute_res ,regb ,0xff +0x7051 031784 branch fullsearch ,true +0x7052 031785 compare sdp_searchattrib_res ,regb ,0xff +0x7053 031786 branch fullsearch ,true +0x7054 031787 setarg 0x000000 +0x7055 031788 istore 5 ,contw +0x7056 031789 branch outempty +: 031791 fullsearch: +0x7057 031792 setarg 0x350200 +0x7058 031793 istore 5 ,contw +: 031794 outempty: +0x7059 031795 jam 10 ,mem_sdp_tx_pkt_length +0x705a 031796 rtn +: 031799 sdp_data_len: +0x705b 031800 call store_contw +0x705c 031801 call store_contr +0x705d 031802 call sdp_get_data +0x705e 031803 call get_contw +0x705f 031804 call get_contr +0x7060 031805 copy temp ,pdata +0x7061 031806 rtn +: 031809 sdp_get_data: +0x7062 031810 ifetch 1 ,contr +0x7063 031811 and pdata ,0x7 ,loopcnt +0x7064 031812 rshift3 pdata ,pdata +0x7065 031813 bne 0 ,sdp_get_data_type_not0 +: 031814 sdp_get_data_type0: +0x7066 031815 force 1 ,pdata +0x7067 031816 force 1 ,temp +0x7068 031817 rtn +: 031819 sdp_get_data_type_not0_sizeindex01234: +0x7069 031820 call left_shift_n +0x706a 031821 add pdata ,1 ,temp +0x706b 031822 rtn +: 031823 sdp_get_data_type_not0: +0x706c 031824 deposit loopcnt +0x706d 031825 sub pdata ,4 ,null +0x706e 031826 branch sdp_get_data_type_not0_sizeindex01234 ,positive +0x706f 031827 beq 5 ,sdp_get_data_type_not0_sizeindex5 +0x7070 031828 beq 6 ,sdp_get_data_type_not0_sizeindex6 +0x7071 031829 beq 7 ,sdp_get_data_type_not0_sizeindex7 +0x7072 031830 rtn +: 031832 sdp_get_data_type_not0_sizeindex5: +0x7073 031833 ifetch 1 ,contr +0x7074 031834 add pdata ,2 ,temp +0x7075 031835 rtn +: 031836 sdp_get_data_type_not0_sizeindex6: +0x7076 031837 ifetch 2 ,contr +0x7077 031838 byteswap pdata ,pdata +0x7078 031839 add pdata ,3 ,temp +0x7079 031840 rtn +: 031841 sdp_get_data_type_not0_sizeindex7: +0x707a 031842 ifetch 2 ,contr +0x707b 031843 byteswap pdata ,pdata +0x707c 031844 ifetcht 2 ,contr +0x707d 031845 byteswap temp ,temp +0x707e 031846 lshift16 temp ,temp +0x707f 031847 iadd temp ,pdata +0x7080 031848 add pdata ,5 ,temp +0x7081 031849 rtn +: 031855 search_all_uuid: +0x7082 031856 bpatchx patch3a_5 ,mem_patch3a +0x7083 031857 force 0 ,queue +0x7084 031858 arg 0 ,regb +0x7085 031859 arg mem_sdp_handle_list ,contw +: 031860 search_all_uuid_llop: +0x7086 031861 ifetch 2 ,timeup +0x7087 031862 rtn blank +0x7088 031863 call search_uuid +0x7089 031864 copy queue ,pdata +0x708a 031865 rtneq sdp_max_handle_number +0x708b 031866 increase 2 ,timeup +0x708c 031867 branch search_all_uuid_llop +: 031869 search_uuid: +0x708d 031871 iforce regc +0x708e 031873 fetch 2 ,mem_ui_uuid_table +0x708f 031874 iforce contr +: 031875 search_uuid_next: +0x7090 031876 copy queue ,pdata +0x7091 031877 rtneq sdp_max_handle_number +0x7092 031878 disable user +0x7093 031879 ifetch 1 ,contr +0x7094 031880 rtn blank +0x7095 031881 iforce loopcnt +: 031882 search_uuid_loop: +0x7096 031883 ifetch 2 ,contr +0x7097 031884 isub regc ,null +0x7098 031885 nbranch search_uuid_not_found ,zero +0x7099 031886 enable user +: 031887 search_uuid_not_found: +0x709a 031888 loop search_uuid_loop +0x709b 031889 ifetcht 4 ,contr +0x709c 031890 copy contr ,rega +0x709d 031891 nbranch search_uuid_nomatch ,user +0x709e 031892 arg mem_sdp_handle_list ,contr +0x709f 031893 arg sdp_max_handle_number ,loopcnt +: 031894 search_uuid_check_same_handle: +0x70a0 031895 ifetch 4 ,contr +0x70a1 031896 branch search_uuid_store_handle ,blank +0x70a2 031897 isub temp ,null +0x70a3 031898 branch search_uuid_nomatch ,zero +0x70a4 031899 loop search_uuid_check_same_handle +0x70a5 031900 rtn +: 031901 search_uuid_store_handle: +0x70a6 031902 istoret 4 ,contw +0x70a7 031903 increase 1 ,queue +0x70a8 031904 copy rega ,contr +0x70a9 031905 call sdp_data_len +0x70aa 031906 iadd regb ,regb +0x70ab 031907 iadd contr ,contr +0x70ac 031908 branch search_uuid_next +: 031909 search_uuid_nomatch: +0x70ad 031910 copy rega ,contr +0x70ae 031911 call sdp_get_data +0x70af 031912 iadd contr ,contr +0x70b0 031913 branch search_uuid_next +: 031919 search_handle: +0x70b1 031920 bpatchx patch3a_6 ,mem_patch3a +0x70b2 031921 fetch 2 ,mem_ui_uuid_table +0x70b3 031922 iforce contr +: 031923 search_handle_loop: +0x70b4 031924 ifetch 1 ,contr +0x70b5 031925 branch disable_zero ,blank +0x70b6 031926 lshift pdata ,pdata +0x70b7 031927 iadd contr ,contr +0x70b8 031928 ifetch 4 ,contr +0x70b9 031929 isub temp ,null +0x70ba 031930 rtn zero +0x70bb 031931 deposit contw +0x70bc 031932 store 2 ,mem_contw +0x70bd 031933 storet 8 ,mem_temp +0x70be 031934 call sdp_get_data +0x70bf 031935 iadd contr ,contr +0x70c0 031936 copy contr ,pdata +0x70c1 031937 fetcht 2 ,mem_contw +0x70c2 031938 copy temp ,contw +0x70c3 031939 fetcht 8 ,mem_temp +0x70c4 031940 copy pdata ,contr +0x70c5 031941 branch search_handle_loop +: 031947 search_attrib: +0x70c6 031948 bpatchx patch3a_7 ,mem_patch3a +0x70c7 031949 fetch 2 ,mem_ui_uuid_table +0x70c8 031950 iforce contr +: 031951 search_attrib_next: +0x70c9 031952 ifetch 1 ,contr +0x70ca 031953 branch search_attrib_end ,blank +0x70cb 031954 iforce loopcnt +: 031955 search_attrib_loop: +0x70cc 031956 ifetch 2 ,contr +0x70cd 031957 isub regc ,null +0x70ce 031958 branch search_attrib_found_uuid ,zero +0x70cf 031959 loop search_attrib_loop +0x70d0 031960 increase 4 ,contr +0x70d1 031961 call sdp_get_data +0x70d2 031962 iadd contr ,contr +0x70d3 031963 branch search_attrib_next +: 031964 search_attrib_found_uuid: +0x70d4 031965 increase -1 ,loopcnt +0x70d5 031966 lshift loopcnt ,pdata +0x70d6 031967 iadd contr ,contr +0x70d7 031968 increase 4 ,contr +0x70d8 031969 call sdp_get_data +0x70d9 031970 iadd contr ,timeup +: 031971 search_attrib_loop_attribs: +0x70da 031972 increase 1 ,contr +0x70db 031973 ifetch 2 ,contr +0x70dc 031974 isub regb ,null +0x70dd 031978 branch disable_blank ,zero +0x70de 031979 call sdp_data_len +0x70df 031980 iadd contr ,contr +0x70e0 031981 deposit timeup +0x70e1 031982 isub contr ,null +0x70e2 031983 branch search_attrib_end ,zero +0x70e3 031984 branch search_attrib_loop_attribs +: 031985 search_attrib_end: +0x70e4 031986 force 0 ,contr +0x70e5 031987 force 0 ,pdata +0x70e6 031988 rtn +: 031994 search_handle_attrib: +0x70e7 031995 bpatchx patch3b_0 ,mem_patch3b +0x70e8 031996 fetch 2 ,mem_ui_uuid_table +0x70e9 031997 iforce contr +: 031998 search_handle_attrib_next: +0x70ea 031999 ifetch 1 ,contr +0x70eb 032000 branch search_handle_attrib_end ,blank +0x70ec 032001 lshift pdata ,pdata +0x70ed 032002 iadd contr ,contr +0x70ee 032003 ifetch 4 ,contr +0x70ef 032004 isub temp ,null +0x70f0 032005 branch search_handl_attrib_found_handle ,zero +0x70f1 032006 call sdp_get_data +0x70f2 032007 iadd contr ,contr +0x70f3 032008 branch search_handle_attrib_next +: 032009 search_handl_attrib_found_handle: +0x70f4 032010 call sdp_get_data +0x70f5 032011 iadd contr ,timeup +: 032012 search_handle_attrib_loop_attribs: +0x70f6 032013 increase 1 ,contr +0x70f7 032014 ifetch 2 ,contr +0x70f8 032015 isub regb ,null +0x70f9 032016 rtn zero +0x70fa 032017 call sdp_data_len +0x70fb 032018 iadd contr ,contr +0x70fc 032019 deposit timeup +0x70fd 032020 isub contr ,null +0x70fe 032021 branch search_handle_attrib_end ,zero +0x70ff 032022 branch search_handle_attrib_loop_attribs +: 032023 search_handle_attrib_end: +0x7100 032024 force 0 ,contr +0x7101 032025 rtn +: 032029 search_rfcomm_cn: +0x7102 032030 arg 0x0400 ,regb +0x7103 032031 call search_handl_attrib_found_handle +0x7104 032032 arg 0x0300 ,regb +0x7105 032033 call search_uuid_in_data +0x7106 032034 nrtn user +0x7107 032035 sub rega ,3 ,null +0x7108 032036 branch disable_user ,positive +0x7109 032037 ifetch 1 ,contr +0x710a 032038 bne 0x08 ,disable_user +0x710b 032039 ifetch 1 ,contr +0x710c 032040 rtn +: 032045 search_uuid_in_data: +0x710d 032046 bpatchx patch3b_1 ,mem_patch3b +0x710e 032047 call sdp_get_data +0x710f 032048 copy pdata ,rega +: 032049 search_uuid_in_data_loop: +0x7110 032050 ifetch 1 ,contr +0x7111 032051 and pdata ,0x7 ,loopcnt +0x7112 032052 rshift3 pdata ,pdata +0x7113 032053 sub pdata ,3 ,null +0x7114 032054 branch search_uuid_in_data_found_uuid ,zero +0x7115 032055 copy loopcnt ,pdata +0x7116 032056 beq 5 ,search_uuid_in_data_found_element_index5 +0x7117 032057 beq 6 ,search_uuid_in_data_found_element_index6 +0x7118 032058 beq 7 ,search_uuid_in_data_found_element_index7 +0x7119 032059 increase -1 ,contr +0x711a 032060 call sdp_get_data +0x711b 032061 iadd contr ,contr +0x711c 032062 copy rega ,pdata +0x711d 032063 isub temp ,rega +0x711e 032064 branch disable_user ,zero +0x711f 032065 branch search_uuid_in_data_loop +: 032067 search_uuid_in_data_found_element_index5: +0x7120 032068 increase -2 ,rega +0x7121 032069 increase 1 ,contr +0x7122 032070 branch search_uuid_in_data_loop +: 032071 search_uuid_in_data_found_element_index6: +0x7123 032072 increase -3 ,rega +0x7124 032073 increase 2 ,contr +0x7125 032074 branch search_uuid_in_data_loop +: 032075 search_uuid_in_data_found_element_index7: +0x7126 032076 increase -5 ,rega +0x7127 032077 increase 4 ,contr +0x7128 032078 branch search_uuid_in_data_loop +: 032080 search_uuid_in_data_found_uuid: +0x7129 032081 increase -1 ,rega +0x712a 032082 copy loopcnt ,pdata +0x712b 032083 beq 1 ,search_uuid_in_data_type_uuid_16 +0x712c 032084 beq 2 ,search_uuid_in_data_type_uuid_32 +0x712d 032085 beq 4 ,search_uuid_in_data_type_uuid_128 +0x712e 032086 branch disable_user +: 032087 search_uuid_in_data_type_uuid_128: +0x712f 032088 increase -12 ,rega +: 032089 search_uuid_in_data_type_uuid_32: +0x7130 032090 ifetch 2 ,contr +0x7131 032091 increase -2 ,rega +: 032092 search_uuid_in_data_type_uuid_16: +0x7132 032093 ifetch 2 ,contr +0x7133 032094 isub regb ,null +0x7134 032095 branch enable_user ,zero +0x7135 032096 increase -2 ,rega +0x7136 032097 branch disable_user ,zero +0x7137 032098 branch search_uuid_in_data_loop +: 032157 sdp_send_spp_request: +0x7138 032158 call l2cap_get_sdp_tx_payload +0x7139 032159 copy pdata ,contw +0x713a 032160 setarg 6 +0x713b 032161 istore 1 ,contw +0x713c 032162 setarg sdp_tid_spp +0x713d 032163 istore 2 ,contw +0x713e 032164 setarg 0x0f00 +0x713f 032165 istore 2 ,contw +0x7140 032166 setarg 0x1a0535 +0x7141 032167 istore 3 ,contw +0x7142 032168 setarg 0x0111 +0x7143 032169 lshift16 pdata ,pdata +0x7144 032170 istore 4 ,contw +0x7145 032171 setarg 0x2600 +0x7146 032172 istore 2 ,contw +0x7147 032173 setarg 0x0335 +0x7148 032174 istore 2 ,contw +0x7149 032175 setarg 0x0009 +0x714a 032176 istore 2 ,contw +0x714b 032177 setarg 0x0004 +0x714c 032178 istore 2 ,contw +0x714d 032179 jam 0x14 ,mem_sdp_tx_pkt_length +0x714e 032180 rtn +: 032184 function_g2: +0x714f 032185 bpatchx patch3b_2 ,mem_patch3b +0x7150 032186 jam 80 ,mem_aes_cmac_data_length +0x7151 032187 arg memdat ,contw +0x7152 032188 arg mem_le_srand ,contr +0x7153 032189 call memcpy16 +0x7154 032190 arg mem_le_pubkey_local_x_256 ,contr +0x7155 032191 call memcpy32 +0x7156 032192 arg mem_le_pubkey_remote_x_256 ,contr +0x7157 032193 call memcpy32 +0x7158 032194 call inverse_memdat +0x7159 032195 arg mem_le_mrand ,contr +0x715a 032196 call store_inverse_k +0x715b 032197 call function_aes_cmac +0x715c 032199 arg mem_aes_cmac_temp ,contw +0x715d 032200 call load_inverse_result +0x715e 032201 setarg 1000000 +0x715f 032202 copy pdata ,rega +0x7160 032203 fetch 4 ,mem_aes_cmac_temp +0x7161 032204 idiv rega +0x7162 032205 call wait_div_end +0x7163 032206 remainder pdata +0x7164 032207 store 4 ,mem_gkey +0x7165 032209 rtn +: 032211 function_f6_eb: +0x7166 032212 jam 65 ,mem_aes_cmac_data_length +0x7167 032213 arg memdat ,contw +0x7168 032214 call store_addr_common_a +0x7169 032215 call store_addr_common_b +0x716a 032216 fetch 3 ,mem_le_pres + 1 +0x716b 032217 istore 3 ,contw +0x716c 032220 call get_r +0x716d 032222 arg mem_le_mrand ,contr +0x716e 032223 call memcpy16 +0x716f 032224 arg mem_le_srand ,contr +0x7170 032225 call memcpy16 +0x7171 032226 call inverse_memdat +0x7172 032227 arg mem_le_mackey ,contr +0x7173 032228 arg mem_aes_cmac_k ,contw +0x7174 032229 call memcpy16 +0x7175 032231 branch function_aes_cmac +: 032235 get_r: +0x7176 032236 fetch 4 ,mem_le_tk +0x7177 032237 istore 4 ,contw +0x7178 032238 call memset0_4 +0x7179 032239 branch memset0_8 +: 032241 function_f6_ea: +0x717a 032242 bpatchx patch3b_3 ,mem_patch3b +0x717b 032243 jam 65 ,mem_aes_cmac_data_length +0x717c 032244 arg memdat ,contw +0x717d 032245 call store_addr_common_b +0x717e 032246 call store_addr_common_a +0x717f 032247 fetch 3 ,mem_le_preq + 1 +0x7180 032248 istore 3 ,contw +0x7181 032251 call get_r +0x7182 032252 arg mem_le_srand ,contr +0x7183 032253 call memcpy16 +0x7184 032254 arg mem_le_mrand ,contr +0x7185 032255 call memcpy16 +0x7186 032256 call inverse_memdat +0x7187 032257 arg mem_le_mackey ,contr +0x7188 032258 arg mem_aes_cmac_k ,contw +0x7189 032259 call memcpy16 +0x718a 032261 call function_aes_cmac +0x718b 032262 arg mem_aes_cmac_temp ,contw +0x718c 032263 branch load_inverse_result +: 032265 function_f5: +0x718d 032266 jam 32 ,mem_aes_cmac_data_length +0x718e 032267 arg mem_le_dhkey_256 ,contr +0x718f 032268 arg memdat ,contw +0x7190 032269 call memcpy32 +0x7191 032270 call inverse_memdat +0x7192 032271 arg mem_le_slat ,contr +0x7193 032272 call store_inverse_k +0x7194 032273 call function_aes_cmac +0x7195 032274 arg mem_aes_cmac_k ,contw +0x7196 032275 call store_aes_result +0x7197 032276 arg 1 ,temp +0x7198 032277 call function_f5_common +0x7199 032278 arg mem_le_ltk ,contw +0x719a 032279 call load_inverse_result +0x719b 032280 arg 0 ,temp +0x719c 032281 call function_f5_common +0x719d 032282 arg mem_le_mackey ,contw +0x719e 032284 branch store_aes_result +: 032287 function_f5_common: +0x719f 032288 bpatchx patch3b_4 ,mem_patch3b +0x71a0 032289 jam 53 ,mem_aes_cmac_data_length +0x71a1 032290 setarg 0x100 +0x71a2 032291 store 2 ,memdat +0x71a3 032292 call store_addr_common_b +0x71a4 032293 call store_addr_common_a +0x71a5 032294 arg mem_le_srand ,contr +0x71a6 032295 call memcpy16 +0x71a7 032296 arg mem_le_mrand ,contr +0x71a8 032297 call memcpy16 +0x71a9 032299 setarg 0x6c65 +0x71aa 032300 istore 2 ,contw +0x71ab 032301 setarg 0x6274 +0x71ac 032302 istore 2 ,contw +0x71ad 032303 istoret 1 ,contw +0x71ae 032304 call inverse_memdat +0x71af 032305 branch function_aes_cmac +: 032307 store_addr_common_b: +0x71b0 032308 fetch 6 ,mem_le_lap +0x71b1 032309 istore 6 ,contw +0x71b2 032310 fetch 1 ,mem_le_conn_own_addr_type +0x71b3 032311 istore 1 ,contw +0x71b4 032312 rtn +: 032314 store_addr_common_a: +0x71b5 032315 fetch 6 ,mem_le_plap +0x71b6 032316 istore 6 ,contw +0x71b7 032321 fetch 1 ,mem_le_conn_peer_addr_type +0x71b8 032322 istore 1 ,contw +0x71b9 032323 rtn +: 032325 function_f4_ca: +0x71ba 032326 jam 65 ,mem_aes_cmac_data_length +0x71bb 032327 fetch 1 ,mem_passkey_1bit +0x71bc 032328 store 1 ,memdat +0x71bd 032329 arg mem_le_pubkey_local_x_256 ,contr +0x71be 032330 call memcpy32 +0x71bf 032331 arg mem_le_pubkey_remote_x_256 ,contr +0x71c0 032332 call memcpy32 +0x71c1 032333 call inverse_memdat +0x71c2 032334 arg mem_le_mrand ,contr +0x71c3 032335 call store_inverse_k +0x71c4 032336 branch function_aes_cmac +: 032339 function_f4_cb: +0x71c5 032340 jam 65 ,mem_aes_cmac_data_length +0x71c6 032341 fetch 1 ,mem_passkey_1bit +0x71c7 032342 store 1 ,memdat +0x71c8 032343 arg mem_le_pubkey_remote_x_256 ,contr +0x71c9 032344 call memcpy32 +0x71ca 032345 arg mem_le_pubkey_local_x_256 ,contr +0x71cb 032346 call memcpy32 +0x71cc 032347 call inverse_memdat +0x71cd 032348 arg mem_le_srand ,contr +0x71ce 032349 call store_inverse_k +0x71cf 032350 branch function_aes_cmac +: 032352 function_aes_cmac: +0x71d0 032353 bpatchx patch3b_5 ,mem_patch3b +0x71d1 032354 call function_aes_cmac_generate_subkey +0x71d2 032358 fetch 1 ,mem_aes_cmac_data_length +0x71d3 032359 copy pdata ,temp +: 032360 function_ceil16: +0x71d4 032361 increase 15 ,pdata +0x71d5 032362 rshift4 pdata ,pdata +0x71d6 032363 copy pdata ,regb +0x71d7 032364 branch function_aes_cmac_set_flag_0_balnk ,blank +0x71d8 032365 and temp ,0x0f ,pdata +0x71d9 032366 nbranch function_aes_cmac_set_flag_0 ,blank +0x71da 032368 arg mem_aes_cmac_k1 ,regc +0x71db 032369 arg memdat ,pdata +0x71dc 032370 increase -16 ,pdata +0x71dd 032373 iadd temp ,rega +0x71de 032374 arg mem_aes_cmac_m_last ,contw +0x71df 032375 arg 4 ,loopcnt +0x71e0 032376 call xor_loop +0x71e1 032380 branch function_aes_cmac_aes +: 032382 function_aes_cmac_set_flag_0_balnk: +0x71e2 032383 arg 1 ,regb +0x71e3 032384 arg 0 ,rega +0x71e4 032386 branch function_aes_cmac_set_flag_0_common +: 032389 function_aes_cmac_set_flag_0: +0x71e5 032391 and temp ,0x0f ,rega +: 032392 function_aes_cmac_set_flag_0_common: +0x71e6 032393 arg memdat ,pdata +0x71e7 032394 iadd temp ,pdata +0x71e8 032395 isub rega ,contr +0x71e9 032397 arg mem_aes_cmac_temp ,contw +0x71ea 032398 call function_aes_cmac_padding +0x71eb 032400 arg mem_aes_cmac_k2 ,regc +0x71ec 032401 arg mem_aes_cmac_temp ,rega +0x71ed 032402 arg mem_aes_cmac_m_last ,contw +0x71ee 032403 arg 4 ,loopcnt +0x71ef 032404 call xor_loop +: 032411 function_aes_cmac_aes: +0x71f0 032416 call aes_clear_data +0x71f1 032417 call aes_init +0x71f2 032420 arg memdat ,contr +: 032421 function_aes_cmac_aes_loop: +0x71f3 032423 increase -1 ,regb +0x71f4 032424 deposit regb +0x71f5 032425 branch function_aes_cmac_aes_loop_end ,blank +0x71f6 032426 call load_data128 +0x71f7 032427 call do_aes_cbc +0x71f8 032428 branch function_aes_cmac_aes_loop +: 032430 function_aes_cmac_aes_loop_end: +0x71f9 032431 arg mem_aes_cmac_temp ,contw +0x71fa 032432 call store_aes_result +0x71fb 032433 arg mem_aes_cmac_m_last ,contr +0x71fc 032434 call load_data128 +0x71fd 032435 call aes_init +0x71fe 032436 arg mem_aes_cmac_temp ,contr +0x71ff 032437 call load_data128 +0x7200 032438 branch do_aes_cbc +: 032442 load_inverse_result: +0x7201 032444 copy contw ,rega +0x7202 032445 call store_aes_result +0x7203 032447 arg 16 ,loopcnt +0x7204 032448 branch inverse_data +: 032450 store_inverse_k: +0x7205 032451 arg mem_aes_cmac_k ,contw +0x7206 032452 call memcpy16 +: 032453 inverse_k: +0x7207 032454 arg 16 ,loopcnt +0x7208 032455 arg mem_aes_cmac_k ,rega +0x7209 032456 branch inverse_data +: 032458 inverse_memdat: +0x720a 032459 fetch 1 ,mem_aes_cmac_data_length +0x720b 032460 copy pdata ,loopcnt +0x720c 032461 arg memdat ,rega +0x720d 032462 branch inverse_data +: 032464 bn_lshift_0_inverse: +0x720e 032465 ifetch 1 ,rega +0x720f 032466 lshift pdata ,pdata +0x7210 032467 isolate1 0 ,regc +0x7211 032468 setflag true ,0 ,pdata +0x7212 032469 isolate1 8 ,pdata +0x7213 032470 setflag true ,0 ,regc +0x7214 032471 istore 1 ,rega +0x7215 032472 increase -1 ,rega +0x7216 032473 loop bn_lshift_0_inverse +0x7217 032474 rtn +: 032476 function_aes_cmac_k1_inverse: +0x7218 032477 arg mem_aes_cmac_k1 ,rega +: 032478 function_aes_cmac_inverse_common: +0x7219 032479 increase 15 ,rega +0x721a 032480 force 16 ,loopcnt +0x721b 032481 force 0 ,regc +0x721c 032482 branch bn_lshift_0_inverse +: 032484 function_aes_cmac_k2_inverse: +0x721d 032485 arg mem_aes_cmac_k2 ,rega +0x721e 032486 branch function_aes_cmac_inverse_common +: 032489 function_aes_cmac_generate_subkey: +0x721f 032490 arg mem_aes_cmac_k ,contr +0x7220 032491 call load_key +0x7221 032494 force regidx_xor ,regext_index +0x7222 032495 call aes_clear +0x7223 032496 call aes_clear_data +0x7224 032497 call do_aes_ocb +0x7225 032502 arg mem_aes_cmac_k1 ,contw +0x7226 032503 call store_aes_result +: 032504 function_aes_cmac_k1: +0x7227 032505 bpatchx patch3b_6 ,mem_patch3b +0x7228 032506 fetch 1 ,mem_aes_cmac_k1 +0x7229 032507 isolate1 7 ,pdata +0x722a 032508 nbranch function_aes_cmac_k1_0 ,true +0x722b 032509 call function_aes_cmac_k1_inverse +0x722c 032512 arg mem_aes_cmac_k1 ,regc +0x722d 032514 arg mem_aes_cmac_k1 ,contw +0x722e 032517 call function_aes_cmac_xor_rb +0x722f 032518 branch function_aes_cmac_k2 +: 032519 function_aes_cmac_k1_0: +0x7230 032520 call function_aes_cmac_k1_inverse +: 032521 function_aes_cmac_k2: +0x7231 032523 arg mem_aes_cmac_k1 ,contr +0x7232 032524 arg mem_aes_cmac_k2 ,contw +0x7233 032525 call memcpy16 +0x7234 032526 fetch 1 ,mem_aes_cmac_k2 +0x7235 032527 isolate1 7 ,pdata +0x7236 032528 nbranch function_aes_cmac_k2_inverse ,true +0x7237 032529 call function_aes_cmac_k2_inverse +0x7238 032531 arg mem_aes_cmac_k2 ,regc +0x7239 032533 arg mem_aes_cmac_k2 ,contw +: 032539 function_aes_cmac_xor_rb: +0x723a 032540 arg 3 ,loopcnt +: 032541 function_aes_cmac_xor_rb_loop: +0x723b 032542 arg 0 ,temp +0x723c 032543 call function_aes_cmac_xor_loop_common +0x723d 032544 increase 4 ,regc +0x723e 032545 loop function_aes_cmac_xor_rb_loop +0x723f 032546 arg 0x8700 ,temp +0x7240 032547 lshift16 temp ,temp +: 032548 function_aes_cmac_xor_loop_common: +0x7241 032549 ifetch 4 ,regc +0x7242 032550 ixor temp ,pdata +0x7243 032551 istore 4 ,contw +0x7244 032552 rtn +: 032558 function_aes_cmac_padding: +0x7245 032559 bpatchx patch3b_7 ,mem_patch3b +0x7246 032560 arg 16 ,loopcnt +0x7247 032561 arg 0 ,pdata +: 032562 function_aes_cmac_padding_loop: +0x7248 032563 isub rega ,null +0x7249 032564 branch function_aes_cmac_padding_beq_length ,zero +0x724a 032565 branch function_aes_cmac_padding_big_length ,positive +0x724b 032566 ifetcht 1 ,contr +0x724c 032567 istoret 1 ,contw +: 032568 function_aes_cmac_padding_loop2: +0x724d 032569 increase 1 ,pdata +0x724e 032570 loop function_aes_cmac_padding_loop +0x724f 032571 rtn +: 032572 function_aes_cmac_padding_beq_length: +0x7250 032573 arg 0x80 ,temp +: 032574 function_aes_cmac_padding_common: +0x7251 032575 istoret 1 ,contw +0x7252 032576 branch function_aes_cmac_padding_loop2 +: 032578 function_aes_cmac_padding_big_length: +0x7253 032579 arg 0 ,temp +0x7254 032580 branch function_aes_cmac_padding_common +: 032583 generate_kinit: +0x7255 032584 call function_e22 +0x7256 032585 arg mem_input_store ,contr +0x7257 032586 arg mem_kinit ,contw +0x7258 032587 branch memcpy16 +: 032590 function_e21: +0x7259 032591 disable user +0x725a 032592 call function_expand +0x725b 032593 arg mem_random_number ,contr +0x725c 032594 arg mem_x ,contw +0x725d 032595 force 15 ,loopcnt +0x725e 032596 call memcpy +0x725f 032597 ifetch 1 ,contr +0x7260 032598 xor_into 6 ,pdata +0x7261 032599 istore 1 ,contw +0x7262 032600 setarg mem_y +0x7263 032601 store 2 ,memp_ar_input +0x7264 032602 setarg mem_x +0x7265 032603 store 2 ,memp_ar_key +0x7266 032604 set1 mark_ar2 ,mark +0x7267 032605 branch function_ar +: 032609 function_e22: +0x7268 032610 fetcht 1 ,mem_pin_length +0x7269 032611 force 16 ,regb +0x726a 032612 add temp ,6 ,regc +0x726b 032613 sub regc ,16 ,null +0x726c 032614 branch function_e22_pin_init ,positive +0x726d 032615 force 16 ,regc +: 032616 function_e22_pin_init: +0x726e 032617 arg mem_x ,contw +: 032618 function_e22_genx_pin: +0x726f 032619 arg mem_pin ,contr +0x7270 032620 copy temp ,loopcnt +0x7271 032621 disable user +: 032622 function_e22_genx_loop: +0x7272 032623 ifetch 1 ,contr +0x7273 032624 istore 1 ,contw +0x7274 032625 increase -1 ,regb +0x7275 032626 branch function_e22_genx_end ,zero +0x7276 032627 loop function_e22_genx_loop +0x7277 032628 branch function_e22_genx_pin ,user +0x7278 032629 enable user +0x7279 032630 force 6 ,loopcnt +0x727a 032631 copy rega ,contr +0x727b 032632 branch function_e22_genx_loop +: 032633 function_e22_genx_end: +0x727c 032634 arg mem_random_number ,contr +0x727d 032635 arg mem_y ,contw +0x727e 032636 call memcpy16 +0x727f 032637 fetch 1 ,mem_y15 +0x7280 032638 ixor regc ,pdata +0x7281 032639 store 1 ,mem_y15 +0x7282 032640 setarg mem_y +0x7283 032641 store 2 ,memp_ar_input +0x7284 032642 setarg mem_x +0x7285 032643 store 2 ,memp_ar_key +0x7286 032644 set1 mark_ar2 ,mark +0x7287 032645 branch function_ar +: 032650 function_e1: +0x7288 032651 disable user +0x7289 032652 call function_expand +0x728a 032653 branch function_hash +: 032655 function_e3: +0x728b 032656 arg mem_aco ,rega +0x728c 032657 enable user +0x728d 032658 call function_expand +0x728e 032659 call function_hash +0x728f 032660 arg mem_input_store ,contr +0x7290 032661 arg mem_kc ,contw +0x7291 032662 branch memcpy16 +: 032665 function_hash: +0x7292 032666 setarg mem_random_number +0x7293 032667 store 2 ,memp_ar_input +0x7294 032668 setarg mem_link_key +0x7295 032669 store 2 ,memp_ar_key +0x7296 032670 set0 mark_ar2 ,mark +0x7297 032671 call function_ar +0x7298 032672 arg mem_input_store ,rega +0x7299 032673 arg mem_random_number ,regb +0x729a 032674 arg mem_x ,contw +0x729b 032675 call xor16 +0x729c 032676 arg mem_x ,rega +0x729d 032677 arg mem_y ,regb +0x729e 032678 copy regb ,contw +0x729f 032679 enable user +0x72a0 032680 call add16 +0x72a1 032681 call key_offset +0x72a2 032682 setarg mem_y +0x72a3 032683 store 2 ,memp_ar_input +0x72a4 032684 setarg mem_x +0x72a5 032685 store 2 ,memp_ar_key +0x72a6 032686 set1 mark_ar2 ,mark +0x72a7 032687 branch function_ar +: 032691 function_ar: +0x72a8 032692 jam 0 ,mem_ar_hround +0x72a9 032693 fetch 2 ,memp_ar_key +0x72aa 032694 iforce contr +0x72ab 032695 arg mem_key_store ,contw +0x72ac 032696 call memcpy16 +0x72ad 032697 fetch 2 ,memp_ar_input +0x72ae 032698 iforce contr +0x72af 032699 arg mem_input_store ,contw +0x72b0 032700 call memcpy16 +: 032702 function_ar_loop: +0x72b1 032703 call key_scheduling +0x72b2 032704 disable user +0x72b3 032705 bmark0 mark_ar2 ,function_ar_original +0x72b4 032706 fetch 1 ,mem_ar_hround +0x72b5 032707 bne 4 ,function_ar_original +0x72b6 032708 fetch 2 ,memp_ar_input +0x72b7 032709 iforce regb +0x72b8 032710 call xor_mod32_ar2 +: 032711 function_ar_original: +0x72b9 032712 call xor_mod32 +0x72ba 032713 call el_boxes +0x72bb 032714 fetch 1 ,mem_ar_hround +0x72bc 032715 increase 1 ,pdata +0x72bd 032716 store 1 ,mem_ar_hround +0x72be 032718 call key_scheduling +0x72bf 032719 enable user +0x72c0 032720 call xor_mod32 +0x72c1 032721 call pht +0x72c2 032722 call permute +0x72c3 032723 call pht +0x72c4 032724 call permute +0x72c5 032725 call pht +0x72c6 032726 call permute +0x72c7 032727 call pht +0x72c8 032728 fetch 1 ,mem_ar_hround +0x72c9 032729 increase 1 ,pdata +0x72ca 032730 store 1 ,mem_ar_hround +0x72cb 032731 bne 16 ,function_ar_loop +0x72cc 032732 call key_scheduling +0x72cd 032733 disable user +0x72ce 032734 branch xor_mod32 +: 032738 key_scheduling: +0x72cf 032739 fetch 1 ,mem_ar_hround +0x72d0 032740 arg mem_key_store ,contr +0x72d1 032741 branch key_sched_zero ,blank +0x72d2 032742 iforce regb +0x72d3 032743 force 17 ,loopcnt +0x72d4 032744 copy contr ,contw +: 032745 key_rotateloop: +0x72d5 032746 ifetch 1 ,contr +0x72d6 032747 lshift3 pdata ,temp +0x72d7 032748 rshift2 pdata ,pdata +0x72d8 032749 rshift3 pdata ,pdata +0x72d9 032750 ior temp ,pdata +0x72da 032751 istore 1 ,contw +0x72db 032752 loop key_rotateloop +0x72dc 032753 setarg mem_key_store +0x72dd 032754 iadd regb ,contr +0x72de 032755 force 16 ,loopcnt +0x72df 032756 arg mem_round_key ,contw +: 032757 key_select_octet_loop: +0x72e0 032758 ifetch 1 ,contr +0x72e1 032759 istore 1 ,contw +0x72e2 032760 compare mem_key_store_end ,contr ,0xff +0x72e3 032761 nbranch key_select_octet_nwrap ,true +0x72e4 032762 increase -17 ,contr +: 032763 key_select_octet_nwrap: +0x72e5 032764 loop key_select_octet_loop +0x72e6 032765 force 0 ,rega +0x72e7 032766 add regb ,-1 ,regc +0x72e8 032767 lshift2 regc ,regc +0x72e9 032768 lshift2 regc ,regc +0x72ea 032769 call enable_authrom +0x72eb 032770 setarg mem_b_box +0x72ec 032771 iadd regc ,regc +0x72ed 032772 arg mem_round_key ,contw +0x72ee 032773 force 16 ,loopcnt +: 032774 bias_round_key_loop: +0x72ef 032775 ifetcht 1 ,regc +0x72f0 032776 ifetch 1 ,contw +0x72f1 032777 iadd temp ,pdata +0x72f2 032778 istore 1 ,contw +0x72f3 032779 increase 1 ,regc +0x72f4 032780 loop bias_round_key_loop +0x72f5 032781 branch disable_authrom +: 032783 key_sched_zero: +0x72f6 032784 force 16 ,loopcnt +0x72f7 032785 force 0 ,temp +: 032786 create_byte_16_loop: +0x72f8 032787 ifetch 1 ,contr +0x72f9 032788 ixor temp ,temp +0x72fa 032789 loop create_byte_16_loop +0x72fb 032790 deposit temp +0x72fc 032791 istore 1 ,contr +0x72fd 032792 arg mem_key_store ,contr +0x72fe 032793 arg mem_round_key ,contw +0x72ff 032794 branch memcpy16 +: 032796 xor_mod32: +0x7300 032797 arg mem_round_key ,regb +: 032798 xor_mod32_ar2: +0x7301 032799 force 16 ,loopcnt +0x7302 032800 arg mem_input_store ,rega +0x7303 032801 copy rega ,contw +: 032802 xor_mod32_loop: +0x7304 032803 ifetcht 1 ,rega +0x7305 032804 ifetch 1 ,regb +0x7306 032805 ixor temp ,alarm +0x7307 032806 and loopcnt ,3 ,regc +0x7308 032807 nbranch xor_mod32_invert ,user +0x7309 032808 xor_into 3 ,regc +: 032809 xor_mod32_invert: +0x730a 032810 sub regc ,1 ,regc +0x730b 032811 branch xor_even ,positive +0x730c 032812 iadd temp ,alarm +: 032813 xor_even: +0x730d 032814 deposit alarm +0x730e 032815 istore 1 ,contw +0x730f 032816 increase 1 ,rega +0x7310 032817 increase 1 ,regb +0x7311 032818 loop xor_mod32_loop +0x7312 032819 rtn +: 032821 el_boxes: +0x7313 032822 call enable_authrom +0x7314 032823 force 16 ,loopcnt +0x7315 032824 arg mem_input_store ,rega +: 032825 el_box_loop: +0x7316 032826 ifetch 1 ,rega +0x7317 032827 arg mem_e_box ,contr +0x7318 032828 and loopcnt ,3 ,regc +0x7319 032829 sub regc ,1 ,null +0x731a 032830 branch e_boxes ,positive +0x731b 032831 arg mem_l_box ,contr +: 032832 e_boxes: +0x731c 032833 iadd contr ,contr +0x731d 032834 ifetch 1 ,contr +0x731e 032835 istore 1 ,rega +0x731f 032836 increase 1 ,rega +0x7320 032837 loop el_box_loop +0x7321 032838 branch disable_authrom +: 032840 pht: +0x7322 032841 force 8 ,loopcnt +0x7323 032842 arg mem_input_store ,contr +0x7324 032843 copy contr ,contw +: 032844 pht_loop: +0x7325 032845 ifetch 1 ,contr +0x7326 032846 iforce rega +0x7327 032847 ifetch 1 ,contr +0x7328 032848 iforce regb +0x7329 032849 lshift rega ,pdata +0x732a 032850 iadd regb ,pdata +0x732b 032851 istore 1 ,contw +0x732c 032852 deposit rega +0x732d 032853 iadd regb ,pdata +0x732e 032854 istore 1 ,contw +0x732f 032855 loop pht_loop +0x7330 032856 rtn +: 032859 permute: +0x7331 032860 setarg 0x8ae42c +0x7332 032861 iforce temp +0x7333 032862 force 7 ,loopcnt +0x7334 032863 call permute_exchange +0x7335 032864 setarg 0xd751b +0x7336 032865 iforce temp +0x7337 032866 force 5 ,loopcnt +0x7338 032867 call permute_exchange +0x7339 032868 fetch 1 ,mem_input_store + 15 +0x733a 032869 iforce rega +0x733b 032870 fetch 1 ,mem_input_store + 3 +0x733c 032871 store 1 ,mem_input_store + 15 +0x733d 032872 deposit rega +0x733e 032873 store 1 ,mem_input_store + 3 +0x733f 032874 rtn +: 032876 permute_exchange: +0x7340 032877 and temp ,0xf ,regb +: 032878 permute_loop: +0x7341 032879 and temp ,0xf ,pdata +0x7342 032880 arg mem_input_store ,contw +0x7343 032881 iadd contw ,contw +0x7344 032882 ifetch 1 ,contw +0x7345 032883 iforce regc +0x7346 032884 deposit rega +0x7347 032885 istore 1 ,contw +0x7348 032886 copy regc ,rega +0x7349 032887 rshift4 temp ,temp +0x734a 032888 loop permute_loop +0x734b 032889 setarg mem_input_store +0x734c 032890 iadd regb ,contw +0x734d 032891 deposit rega +0x734e 032892 istore 1 ,contw +0x734f 032893 rtn +: 032895 add16: +0x7350 032896 enable user +0x7351 032897 branch xor_add16 +: 032899 xor16: +0x7352 032900 disable user +: 032901 xor_add16: +0x7353 032902 force 16 ,loopcnt +: 032903 xoradd_loop: +0x7354 032904 ifetcht 1 ,rega +0x7355 032905 ifetch 1 ,regb +0x7356 032906 branch xoradd_add ,user +0x7357 032907 ixor temp ,pdata +0x7358 032908 branch xoradd_store +: 032909 xoradd_add: +0x7359 032910 iadd temp ,pdata +: 032911 xoradd_store: +0x735a 032912 istore 1 ,contw +0x735b 032913 increase 1 ,rega +0x735c 032914 increase 1 ,regb +0x735d 032915 loop xoradd_loop +0x735e 032916 rtn +: 032919 function_expand: +0x735f 032920 arg mem_y ,contw +0x7360 032921 ifetch 6 ,rega +0x7361 032922 istore 6 ,contw +0x7362 032923 branch expand_12 ,user +0x7363 032924 ifetch 6 ,rega +0x7364 032925 branch expand_cont +: 032926 expand_12: +0x7365 032927 ifetch 6 ,contr +: 032928 expand_cont: +0x7366 032929 istore 6 ,contw +0x7367 032930 ifetch 4 ,rega +0x7368 032931 istore 4 ,contw +0x7369 032932 rtn +: 032934 key_offset: +0x736a 032935 arg mem_link_key ,contr +0x736b 032936 arg mem_x ,contw +0x736c 032937 arg 0 ,temp +0x736d 032938 setarg 0x8395a7 +0x736e 032939 call concatenate_temp24 +0x736f 032940 setarg 0xb3c1df +0x7370 032941 call concatenate_temp24 +0x7371 032942 setarg 0xe5e9 +0x7372 032943 call concatenate_temp16 +0x7373 032944 copy temp ,regab +0x7374 032945 disable user +0x7375 032946 call key_addxor +0x7376 032947 copy regab ,temp +0x7377 032948 enable user +0x7378 032949 branch key_addxor +: 032951 key_addxor: +0x7379 032952 force 8 ,loopcnt +: 032953 key_addxor_loop: +0x737a 032954 ifetch 1 ,contr +0x737b 032955 compare 1 ,loopcnt ,1 +0x737c 032956 branch key_high ,user +0x737d 032957 branch key_xor ,true +: 032958 key_add: +0x737e 032959 iadd temp ,pdata +0x737f 032960 branch key_store +: 032961 key_high: +0x7380 032962 branch key_add ,true +: 032963 key_xor: +0x7381 032964 ixor temp ,pdata +: 032965 key_store: +0x7382 032966 istore 1 ,contw +0x7383 032967 rshift8 temp ,temp +0x7384 032968 loop key_addxor_loop +0x7385 032969 rtn +: 032971 copy_aco: +0x7386 032972 fetch 6 ,mem_input_store + 4 +0x7387 032973 store 6 ,mem_aco +0x7388 032974 ifetch 6 ,contr +0x7389 032975 istore 6 ,contw +0x738a 032976 rtn +: 032978 concatenate_temp24: +0x738b 032979 lshift8 temp ,temp +: 032980 concatenate_temp16: +0x738c 032981 lshift16 temp ,temp +0x738d 032982 ior temp ,temp +0x738e 032983 rtn +: 032987 loop1: +0x738f 032988 branch loop1 +: 032992 generate_stk: +0x7390 032993 bpatchx patch3c_0 ,mem_patch3c +0x7391 032994 call function_s1 +0x7392 032995 arg mem_le_ltk ,contw +0x7393 032996 branch store_aes_result +: 032999 authenticate_rconfirm: +0x7394 033000 arg mem_le_srand ,contw +0x7395 033001 branch authenticate_mconfirm ,master +0x7396 033002 arg mem_le_mrand ,contw +: 033003 authenticate_mconfirm: +0x7397 033004 copy contr ,rega +0x7398 033005 call memcpy16 +0x7399 033006 call function_c1 +0x739a 033007 arg mem_le_rconfirm ,contr +0x739b 033008 branch compare_res +: 033010 generate_confirm: +0x739c 033011 arg mem_le_mrand ,rega +0x739d 033012 branch generate_mrand ,master +0x739e 033013 arg mem_le_srand ,rega +: 033014 generate_mrand: +0x739f 033015 copy rega ,contw +0x73a0 033016 call generate_random +0x73a1 033017 branch function_c1 +: 033019 generate_sk: +0x73a2 033020 arg mem_le_skdm ,contr +0x73a3 033021 call load_data128 +0x73a4 033022 arg mem_le_ltk ,contr +0x73a5 033023 call load_regext +0x73a6 033024 force 0x38 ,aes_ctrl +0x73a7 033025 force 0x0 ,aes_ctrl +0x73a8 033026 call wait_aes +0x73a9 033027 arg mem_le_sk ,contw +0x73aa 033028 branch store_aes_result +: 033031 first_block_counter: +0x73ab 033032 force 0x49 ,pdata +0x73ac 033033 branch first_block +: 033034 first_block_data: +0x73ad 033035 force 1 ,pdata +: 033036 first_block: +0x73ae 033037 force regidx_data ,regext_index +0x73af 033038 lshift8 temp ,regext +0x73b0 033039 ior regext ,regext +0x73b1 033040 increase 1 ,regext_index +0x73b2 033041 rshift8 temp ,regext +0x73b3 033042 rshift16 regext ,regext +0x73b4 033043 fetch 2 ,mem_le_ivm +0x73b5 033044 lshift16 ,pdata ,pdata +0x73b6 033045 ior regext ,regext +0x73b7 033046 increase 1 ,regext_index +0x73b8 033047 ifetch 4 ,contr +0x73b9 033048 iforce regext +0x73ba 033049 increase 1 ,regext_index +0x73bb 033050 ifetch 2 ,contr +0x73bc 033051 byteswap rega ,regext +0x73bd 033052 lshift16 regext ,regext +0x73be 033053 ior regext ,regext +0x73bf 033054 increase 1 ,regext_index +0x73c0 033055 rtn +: 033059 generate_mic: +0x73c1 033060 add regc ,1 ,contr +0x73c2 033061 ifetch 1 ,contr +0x73c3 033062 iforce rega +0x73c4 033063 call first_block_counter +0x73c5 033064 call do_aes_ocb +0x73c6 033066 force regidx_data ,regext_index +0x73c7 033067 ifetch 1 ,regc +0x73c8 033068 and_into 0x3 ,pdata +0x73c9 033069 lshift16 pdata ,regext +0x73ca 033070 set1 8 ,regext +0x73cb 033071 call clear_hidata +0x73cc 033072 call do_aes_cbc +0x73cd 033074 copy rega ,loopcnt +0x73ce 033075 add regc ,2 ,contr +0x73cf 033076 call padding_data +: 033077 generate_mic_loop: +0x73d0 033078 call aes_load_data +0x73d1 033079 call do_aes_cbc +0x73d2 033080 deposit loopcnt +0x73d3 033081 branch generate_mic_end ,blank +0x73d4 033082 branch generate_mic_loop +: 033083 generate_mic_end: +0x73d5 033084 force regidx_result ,regext_index +0x73d6 033085 deposit regext +0x73d7 033086 store 4 ,mem_le_mic +0x73d8 033087 rtn +: 033089 aes_crypt_data: +0x73d9 033090 increase 1 ,rega +0x73da 033091 call first_block_data +0x73db 033092 copy regc ,contr +0x73dc 033093 call aes_load_xor +0x73dd 033094 call do_aes_ctr +0x73de 033095 call store_enc_data +0x73df 033096 increase 16 ,regc +0x73e0 033097 increase -16 ,regb +0x73e1 033098 branch aes_crypt_data ,positive +0x73e2 033099 rtn +: 033101 le_encrypt: +0x73e3 033102 bpatchx patch3c_1 ,mem_patch3c +0x73e4 033103 arg mem_le_txheader ,regc +0x73e5 033104 fetcht 5 ,mem_le_pcnt_tx +0x73e6 033105 call generate_mic +0x73e7 033106 force regidx_xor ,regext_index +0x73e8 033107 iforce regext +0x73e9 033108 force 0 ,rega +0x73ea 033109 call first_block_data +0x73eb 033110 call do_aes_ctr +0x73ec 033111 arg mem_le_txpayload ,regc +0x73ed 033112 fetch 1 ,mem_le_txlen +0x73ee 033113 add pdata ,-1 ,regb +0x73ef 033114 iadd regc ,contw +0x73f0 033115 force regidx_result ,regext_index +0x73f1 033116 deposit regext +0x73f2 033117 istore 4 ,contw +0x73f3 033118 call aes_crypt_data +0x73f4 033119 fetch 1 ,mem_le_txlen +0x73f5 033120 increase 4 ,pdata +0x73f6 033121 store 1 ,mem_le_txlen +0x73f7 033122 fetcht 5 ,mem_le_pcnt_tx +0x73f8 033123 increase 1 ,temp +0x73f9 033124 storet 5 ,mem_le_pcnt_tx +0x73fa 033125 rtn +: 033127 le_decrypt: +0x73fb 033128 bpatchx patch3c_2 ,mem_patch3c +0x73fc 033129 fetch 1 ,mem_le_rxbuf + 1 +0x73fd 033130 sub pdata ,20 ,null +0x73fe 033131 branch le_dec_cont ,positive +: 033132 le_dec_cont: +0x73ff 033133 arg mem_le_rxbuf + 2 ,regc +0x7400 033134 add pdata ,-1 ,regb +0x7401 033135 increase -4 ,pdata +0x7402 033136 store 1 ,mem_le_rxbuf + 1 +0x7403 033137 iadd regc ,contr +0x7404 033138 ifetch 4 ,contr +0x7405 033139 force regidx_xor ,regext_index +0x7406 033140 iforce regext +0x7407 033141 force 0 ,rega +0x7408 033142 fetcht 5 ,mem_le_pcnt_rx +0x7409 033143 call first_block_data +0x740a 033144 call do_aes_ctr +0x740b 033145 force regidx_result ,regext_index +0x740c 033146 deposit regext +0x740d 033147 store 4 ,mem_le_peer_mic +0x740e 033148 call aes_crypt_data +0x740f 033149 arg mem_le_rxbuf ,regc +0x7410 033150 call generate_mic +0x7411 033151 fetcht 4 ,mem_le_peer_mic +0x7412 033152 isub temp ,pdata +0x7413 033153 nrtn blank +0x7414 033154 fetch 4 ,mem_le_last_mic +0x7415 033155 isub temp ,pdata +0x7416 033156 rtn blank +0x7417 033157 storet 4 ,mem_le_last_mic +0x7418 033158 fetch 5 ,mem_le_pcnt_rx +0x7419 033159 increase 1 ,pdata +0x741a 033160 store 5 ,mem_le_pcnt_rx +0x741b 033161 force 0 ,pdata +0x741c 033162 rtn +: 033164 wait_aes: +0x741d 033165 nbranch wait_aes ,aes_ready +0x741e 033166 rtn +: 033168 do_aes_ocb: +0x741f 033169 force 0x30 ,aes_ctrl +0x7420 033170 force 0x0 ,aes_ctrl +0x7421 033171 branch wait_aes +: 033173 do_aes_cbc: +0x7422 033174 force 0x32 ,aes_ctrl +0x7423 033175 force 0x2 ,aes_ctrl +0x7424 033176 branch wait_aes +: 033178 do_aes_ctr: +0x7425 033179 force 0x34 ,aes_ctrl +0x7426 033180 force 0x4 ,aes_ctrl +0x7427 033181 branch wait_aes +: 033184 aes_init: +0x7428 033185 force 1 ,aes_ctrl +0x7429 033186 force 0 ,aes_ctrl +0x742a 033187 rtn +: 033188 function_s1: +0x742b 033189 force regidx_data ,regext_index +0x742c 033190 fetch 4 ,mem_le_mrand +0x742d 033191 iforce regext +0x742e 033192 increase 1 ,regext_index +0x742f 033193 ifetch 4 ,contr +0x7430 033194 iforce regext +0x7431 033195 increase 1 ,regext_index +0x7432 033196 fetch 4 ,mem_le_srand +0x7433 033197 iforce regext +0x7434 033198 increase 1 ,regext_index +0x7435 033199 ifetch 4 ,contr +0x7436 033200 iforce regext +0x7437 033201 increase 1 ,regext_index +0x7438 033202 call aes_clear +0x7439 033203 increase -4 ,regext_index +0x743a 033204 fetch 4 ,mem_le_tk +0x743b 033205 copy pdata ,regext +0x743c 033206 increase 4 ,regext_index +0x743d 033207 force 0x38 ,aes_ctrl +0x743e 033208 force 0x8 ,aes_ctrl +0x743f 033209 branch wait_aes +: 033212 function_c1: +0x7440 033213 bpatchx patch3c_3 ,mem_patch3c +0x7441 033214 fetch 6 ,mem_le_lap +0x7442 033215 fetcht 6 ,mem_le_plap +0x7443 033216 branch function_c1_master ,master +0x7444 033217 fetch 6 ,mem_le_plap +0x7445 033218 fetcht 6 ,mem_le_lap +: 033219 function_c1_master: +0x7446 033220 force regidx_xor ,regext_index +0x7447 033221 copy temp ,regext +0x7448 033222 increase 1 ,regext_index +0x7449 033223 rshift32 temp ,regext +0x744a 033224 lshift16 pdata ,pdata +0x744b 033225 ior regext ,regext +0x744c 033226 increase 1 ,regext_index +0x744d 033227 rshift32 pdata ,regext +0x744e 033228 increase 1 ,regext_index +0x744f 033229 force 0 ,regext +0x7450 033230 force 0 ,pdata +0x7451 033231 fetch 1 ,mem_le_conn_peer_addr_type +0x7452 033232 fetcht 1 ,mem_le_adv_own_addr_type +0x7453 033233 nbranch function_c1_irat ,master +0x7454 033235 fetch 1 ,mem_le_conn_own_addr_type +0x7455 033236 fetcht 1 ,mem_le_conn_peer_addr_type +: 033237 function_c1_irat: +0x7456 033238 store 1 ,mem_le_iat +0x7457 033239 storet 1 ,mem_le_rat +0x7458 033240 force regidx_data ,regext_index +0x7459 033241 arg mem_le_iat ,regb +0x745a 033242 force 4 ,loopcnt +: 033243 function_c1_loop1: +0x745b 033244 ifetch 4 ,rega +0x745c 033245 ifetcht 4 ,regb +0x745d 033246 ixor temp ,regext +0x745e 033247 increase 1 ,regext_index +0x745f 033248 increase 4 ,rega +0x7460 033249 increase 4 ,regb +0x7461 033250 loop function_c1_loop1 +0x7462 033251 call aes_clear +0x7463 033252 increase -4 ,regext_index +0x7464 033253 fetch 4 ,mem_le_tk +0x7465 033254 copy pdata ,regext +0x7466 033255 increase 4 ,regext_index +0x7467 033256 force 0x38 ,aes_ctrl +0x7468 033257 force 0xc ,aes_ctrl +0x7469 033258 call wait_aes +0x746a 033260 call aes_clear_data +0x746b 033261 force 0x3a ,aes_ctrl +0x746c 033262 force 0x8 ,aes_ctrl +0x746d 033263 branch wait_aes +: 033265 padding_data: +0x746e 033266 compare 0 ,loopcnt ,3 +0x746f 033267 rtn true +0x7470 033268 deposit contr +0x7471 033269 iadd loopcnt ,contw +0x7472 033270 force 0 ,pdata +: 033271 padding_loop: +0x7473 033272 istore 1 ,contw +0x7474 033273 increase 1 ,loopcnt +0x7475 033274 compare 0 ,loopcnt ,3 +0x7476 033275 rtn true +0x7477 033276 branch padding_loop +: 033278 aes_load_data: +0x7478 033279 force regidx_data ,regext_index +: 033280 load_data_loop: +0x7479 033281 deposit loopcnt +0x747a 033282 branch load_data_padding ,blank +0x747b 033283 ifetch 4 ,contr +0x747c 033284 increase -4 ,loopcnt +: 033285 load_data_padding: +0x747d 033286 iforce regext +0x747e 033287 increase 1 ,regext_index +0x747f 033288 compare regidx_key ,regext_index ,0xf +0x7480 033289 rtn true +0x7481 033290 branch load_data_loop +: 033292 aes_load_xor: +0x7482 033293 force regidx_xor ,regext_index +0x7483 033294 branch load_regext +: 033295 load_key: +0x7484 033296 force regidx_key ,regext_index +0x7485 033297 branch load_regext +: 033298 load_data128: +0x7486 033299 force regidx_data ,regext_index +: 033300 load_regext: +0x7487 033301 force 4 ,loopcnt +: 033302 load_regext_loop: +0x7488 033303 ifetch 4 ,contr +0x7489 033304 iforce regext +0x748a 033305 increase 1 ,regext_index +0x748b 033306 loop load_regext_loop +0x748c 033307 rtn +: 033309 load_sk: +0x748d 033310 arg mem_le_sk ,contr +0x748e 033311 branch load_key +: 033313 clear_hidata: +0x748f 033314 force 4 ,loopcnt +0x7490 033315 branch clear_data_rest +: 033317 aes_clear_data: +0x7491 033318 force regidx_data ,regext_index +: 033319 aes_clear: +0x7492 033320 force 4 ,loopcnt +: 033321 clear_loop: +0x7493 033322 force 0 ,regext +: 033323 clear_data_rest: +0x7494 033324 increase 1 ,regext_index +0x7495 033325 loop clear_loop +0x7496 033326 rtn +: 033328 store_aes_result: +0x7497 033329 force regidx_result ,regext_index +0x7498 033330 force 4 ,loopcnt +: 033331 send_aes_result_loop: +0x7499 033332 deposit regext +0x749a 033333 istore 4 ,contw +0x749b 033334 increase 1 ,regext_index +0x749c 033335 loop send_aes_result_loop +0x749d 033336 rtn +: 033338 store_enc_data: +0x749e 033339 force regidx_result ,regext_index +0x749f 033340 copy regc ,contw +0x74a0 033341 add regb ,1 ,loopcnt +0x74a1 033342 sub loopcnt ,15 ,null +0x74a2 033343 branch store_enc_loop ,positive +0x74a3 033344 force 16 ,loopcnt +: 033345 store_enc_loop: +0x74a4 033346 deposit regext +0x74a5 033347 sub loopcnt ,3 ,null +0x74a6 033348 branch store_enc_byte ,positive +0x74a7 033349 istore 4 ,contw +0x74a8 033350 increase -4 ,loopcnt +0x74a9 033351 rtn zero +0x74aa 033352 increase 1 ,regext_index +0x74ab 033353 branch store_enc_loop +: 033354 store_enc_byte: +0x74ac 033355 istore 1 ,contw +0x74ad 033356 rshift8 pdata ,pdata +0x74ae 033357 loop store_enc_byte +0x74af 033358 rtn +: 033361 compare_res: +0x74b0 033362 force regidx_result ,regext_index +0x74b1 033363 force 4 ,loopcnt +: 033364 compare_res_loop: +0x74b2 033365 ifetch 4 ,contr +0x74b3 033366 isub regext ,null +0x74b4 033367 nrtn zero +0x74b5 033368 increase 1 ,regext_index +0x74b6 033369 loop compare_res_loop +0x74b7 033370 force 0 ,null +0x74b8 033371 rtn +: 033373 enable_authrom: +0x74b9 033374 hfetch 1 ,core_clkoff +0x74ba 033375 set0 clock_off_auth_rom ,pdata +0x74bb 033376 hstore 1 ,core_clkoff +0x74bc 033377 rtn +: 033379 disable_authrom: +0x74bd 033380 hfetch 1 ,core_clkoff +0x74be 033381 set1 clock_off_auth_rom ,pdata +0x74bf 033382 hstore 1 ,core_clkoff +0x74c0 033383 rtn +: 033385 init_memp: +0x74c1 033386 arg mem_p ,contw +0x74c2 033387 setsect 0 ,0x3ffff +0x74c3 033388 setsect 1 ,0x3ffff +0x74c4 033389 setsect 2 ,0x3ffff +0x74c5 033390 setsect 3 ,0x3fbff +0x74c6 033391 istore 9 ,contw +0x74c7 033392 setsect 0 ,0x3ffff +0x74c8 033393 setsect 1 ,0x3ffff +0x74c9 033394 setsect 2 ,0x3ffff +0x74ca 033395 setsect 3 ,0x3ffff +0x74cb 033396 istore 9 ,contw +0x74cc 033397 setsect 0 ,0x3ffff +0x74cd 033398 setsect 1 ,0x3ffff +0x74ce 033399 setsect 2 ,0x3cfff +0x74cf 033400 setsect 3 ,0x3ffff +0x74d0 033401 istore 9 ,contw +0x74d1 033402 setsect 0 ,0x3ffff +0x74d2 033403 setsect 1 ,0x3ffff +0x74d3 033404 setsect 2 ,0x3ffef +0x74d4 033405 setsect 3 ,0x3ffff +0x74d5 033406 istore 9 ,contw +0x74d6 033407 setsect 0 ,0x3ffff +0x74d7 033408 setsect 1 ,0x3ffff +0x74d8 033409 setsect 2 ,0x3ffff +0x74d9 033410 setsect 3 ,0x3ffff +0x74da 033411 istore 9 ,contw +0x74db 033412 setsect 0 ,0x3ffff +0x74dc 033413 setsect 1 ,0x26c7f +0x74dd 033414 setsect 2 ,0x146b +0x74de 033415 setsect 3 ,0x37bb3 +0x74df 033416 istore 9 ,contw +0x74e0 033417 setsect 0 ,0x1feb8 +0x74e1 033418 setsect 1 ,0x10c12 +0x74e2 033419 setsect 2 ,0x2b722 +0x74e3 033420 setsect 3 ,0x29fa6 +0x74e4 033421 istore 9 ,contw +0x74e5 033422 setsect 0 ,0xe70f +0x74e6 033423 setsect 1 ,0x16720 +0x74e7 033424 setsect 2 ,0x519e +0x74e8 033425 setsect 3 ,0x19084 +0x74e9 033426 istore 9 ,contw +0x74ea 033427 setsect 0 ,0x31012 +0x74eb 033428 setsect 1 ,0x360bf +0x74ec 033429 setsect 2 ,0x3f0af +0x74ed 033430 setsect 3 ,0x3d3 +0x74ee 033431 istore 9 ,contw +0x74ef 033432 setsect 0 ,0x3a188 +0x74f0 033433 setsect 1 ,0x3ad0 +0x74f1 033434 setsect 2 ,0x3cbf2 +0x74f2 033435 setsect 3 ,0x243d9 +0x74f3 033436 istore 9 ,contw +0x74f4 033437 setsect 0 ,0x2b030 +0x74f5 033438 setsect 1 ,0x36a03 +0x74f6 033439 setsect 2 ,0x11188 +0x74f7 033440 setsect 3 ,0x1e520 +0x74f8 033441 istore 9 ,contw +0x74f9 033442 setsect 0 ,0x3a11e +0x74fa 033443 setsect 1 ,0xfe5d +0x74fb 033444 setsect 2 ,0xdd57 +0x74fc 033445 setsect 3 ,0x1ac93 +0x74fd 033446 istore 9 ,contw +0x74fe 033447 setsect 0 ,0x11ed +0x74ff 033448 setsect 1 ,0x218c4 +0x7500 033449 setsect 2 ,0x8da7 +0x7501 033450 setsect 3 ,0x257ff +0x7502 033451 istore 9 ,contw +0x7503 033452 setsect 0 ,0x3192b +0x7504 033453 setsect 1 ,0x34641 +0x7505 033454 setsect 2 ,0x1be0c +0x7506 033455 setsect 3 ,0x366ad +0x7507 033456 istore 9 ,contw +0x7508 033457 setsect 0 ,0x1f83 +0x7509 033458 setsect 1 ,0x15a23 +0x750a 033459 setsect 2 ,0x3f9b0 +0x750b 033460 setsect 3 ,0x3949 +0x750c 033461 istore 9 ,contw +0x750d 033462 setsect 0 ,0x13a51 +0x750e 033463 setsect 1 ,0x153fd +0x750f 033464 setsect 2 ,0x3372a +0x7510 033465 setsect 3 ,0xf1bb +0x7511 033466 istore 9 ,contw +0x7512 033467 setsect 0 ,0x3ae85 +0x7513 033468 setsect 1 ,0x1eed9 +0x7514 033469 setsect 2 ,0x9e66 +0x7515 033470 setsect 3 ,0x1a8 +0x7516 033471 istore 8 ,contw +0x7517 033472 rtn +: 033476 init_memp_256: +0x7518 033477 arg mem_p_256 ,contw +0x7519 033478 setsect 0 ,0x3ffff +0x751a 033479 setsect 1 ,0x3ffff +0x751b 033480 setsect 2 ,0x3ffff +0x751c 033481 setsect 3 ,0x3ffff +0x751d 033482 istore 9 ,contw +0x751e 033483 setsect 0 ,0x3ffff +0x751f 033484 setsect 1 ,0x3f +0x7520 033485 setsect 2 ,0x0 +0x7521 033486 setsect 3 ,0x0 +0x7522 033487 istore 9 ,contw +0x7523 033488 setsect 0 ,0x0 +0x7524 033489 setsect 1 ,0x0 +0x7525 033490 setsect 2 ,0x1000 +0x7526 033491 setsect 3 ,0x0 +0x7527 033492 istore 9 ,contw +0x7528 033493 setsect 0 ,0x3ff00 +0x7529 033494 setsect 1 ,0x3ffff +0x752a 033495 setsect 2 ,0x3ffcf +0x752b 033496 setsect 3 ,0x3ffff +0x752c 033497 istore 9 ,contw +0x752d 033498 setsect 0 ,0x3ffff +0x752e 033499 setsect 1 ,0x3ffff +0x752f 033500 setsect 2 ,0x3ffff +0x7530 033501 setsect 3 ,0x3ff +0x7531 033502 istore 9 ,contw +0x7532 033503 setsect 0 ,0x0 +0x7533 033504 setsect 1 ,0x0 +0x7534 033505 setsect 2 ,0x0 +0x7535 033506 setsect 3 ,0x0 +0x7536 033507 istore 9 ,contw +0x7537 033508 setsect 0 ,0x10000 +0x7538 033509 setsect 1 ,0x0 +0x7539 033510 setsect 2 ,0x3f000 +0x753a 033511 setsect 3 ,0x3ffff +0x753b 033512 istore 9 ,contw +0x753c 033513 setsect 0 ,0x296ff +0x753d 033514 setsect 1 ,0x22630 +0x753e 033515 setsect 2 ,0x3945d +0x753f 033516 setsect 3 ,0x3d284 +0x7540 033517 istore 9 ,contw +0x7541 033518 setsect 0 ,0x333a0 +0x7542 033519 setsect 1 ,0x4b7a +0x7543 033520 setsect 2 ,0x37d8 +0x7544 033521 setsect 3 ,0x3c9dc +0x7545 033522 istore 9 ,contw +0x7546 033523 setsect 0 ,0x3a440 +0x7547 033524 setsect 1 ,0x1b958 +0x7548 033525 setsect 2 ,0x38bce +0x7549 033526 setsect 3 ,0x1091f +0x754a 033527 istore 9 ,contw +0x754b 033528 setsect 0 ,0x2e12c +0x754c 033529 setsect 1 ,0x1f47c +0x754d 033530 setsect 2 ,0x356b1 +0x754e 033531 setsect 3 ,0x2fd47 +0x754f 033532 istore 9 ,contw +0x7550 033533 setsect 0 ,0x6837 +0x7551 033534 setsect 1 ,0x2ed90 +0x7552 033535 setsect 2 ,0x1ecec +0x7553 033536 setsect 3 ,0x1acc5 +0x7554 033537 istore 9 ,contw +0x7555 033538 setsect 0 ,0x23357 +0x7556 033539 setsect 1 ,0x18af3 +0x7557 033540 setsect 2 ,0xf9e1 +0x7558 033541 setsect 3 ,0x129f0 +0x7559 033542 istore 9 ,contw +0x755a 033543 setsect 0 ,0x2e7eb +0x755b 033544 setsect 1 ,0x3e6e3 +0x755c 033545 setsect 2 ,0x3e1a7 +0x755d 033546 setsect 3 ,0x10b8b +0x755e 033547 istore 9 ,contw +0x755f 033548 setsect 0 ,0x24fe3 +0x7560 033549 setsect 1 ,0x20ef +0x7561 033550 setsect 2 ,0x1b5a6 +0x7562 033551 setsect 3 ,0xdc2f +0x7563 033552 istore 9 ,contw +0x7564 033553 setsect 0 ,0x13860 +0x7565 033554 setsect 1 ,0x2bd69 +0x7566 033555 setsect 2 ,0x391a +0x7567 033556 setsect 3 ,0x1b222 +0x7568 033557 istore 9 ,contw +0x7569 033558 rtn +: 033561 publickey_init: +0x756a 033562 fetch 1 ,mem_ssp_enable +0x756b 033563 nbranch sp_initialize ,blank +0x756c 033564 branch sp_initialize_256 +: 033566 sp_calc_sequence_256_check: +0x756d 033567 bpatchx patch3c_4 ,mem_patch3c +0x756e 033568 fetch 1 ,mem_ssp_enable +0x756f 033569 rtn blank +0x7570 033570 fetch 1 ,mem_sp_local_key_invalid +0x7571 033571 rtnne sp_key_valid +0x7572 033572 fetch 1 ,mem_le_secure_connect_enable +0x7573 033573 rtn blank +0x7574 033574 fetch 1 ,mem_le_sc_local_key_invalid +0x7575 033575 rtneq sp_key_valid_256 +0x7576 033576 fetch 2 ,mem_ui_state_map +0x7577 033577 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 +0x7578 033578 fetch 1 ,mem_le_sc_calc +0x7579 033579 beq sp_calc_standby ,sp_initialize_256 +0x757a 033580 rtn +: 033581 stop_publickey_calc_256: +0x757b 033582 jam sp_calc_standby ,mem_le_sc_calc +0x757c 033583 rtn +: 033586 sp_initialize: +0x757d 033587 bpatchx patch3c_5 ,mem_patch3c +0x757e 033588 fetch 1 ,mem_ssp_enable +0x757f 033589 branch ssp_disable ,blank +0x7580 033590 call ssp_enable +0x7581 033591 call sp_clear_flags +0x7582 033592 branch sp_pubkey_calc +: 033594 sp_clear_flags: +0x7583 033595 setarg 0 +0x7584 033596 store 8 ,mem_sp_state_start +0x7585 033597 store 4 ,mem_sp_flag_start +0x7586 033598 store 7 ,mem_sp_iocap_remote +0x7587 033599 rtn +: 033601 sp_generate_local_key: +0x7588 033602 jam sp_flag_commit ,mem_sp_flag +0x7589 033603 branch sp_generate_local_key0 +: 033604 sp_master_generate_local_key: +0x758a 033605 fetch 1 ,mem_sp_local_key_invalid +0x758b 033606 beq sp_key_valid ,sp_dhkey_calc +0x758c 033607 branch assert +: 033608 sp_generate_local_key0: +0x758d 033609 fetch 1 ,mem_sp_local_key_invalid +0x758e 033610 beq sp_key_valid ,sp_start_send_pubkey +0x758f 033611 branch sp_pubkey_calc +: 033613 sp_start_send_pubkey: +0x7590 033614 call sp_dhkey_calc +0x7591 033615 fetch 1 ,mem_master_sp_state +0x7592 033616 nrtn blank +0x7593 033617 jam sp_stat_key_send ,mem_sp_state +0x7594 033618 rtn +: 033621 sp_calc_check_publickey_256: +0x7595 033622 call sp_calc_b256 +0x7596 033623 arg mem_le_pubkey_remote_y_256 ,rega +0x7597 033624 arg mem_t7_256 ,contw +0x7598 033625 call bn_sqrmod_256 +0x7599 033626 arg mem_le_pubkey_remote_x_256 ,rega +0x759a 033627 arg mem_t2_256 ,contw +0x759b 033628 call bn_sqrmod_256 +0x759c 033629 arg mem_t2_256 ,rega +0x759d 033630 arg mem_le_pubkey_remote_x_256 ,regb +0x759e 033631 arg mem_t2_256 ,contw +0x759f 033632 call bn_mulmod_256 +0x75a0 033633 arg mem_a_256 ,rega +0x75a1 033634 arg mem_le_pubkey_remote_x_256 ,regb +0x75a2 033635 arg mem_t3_256 ,contw +0x75a3 033636 call bn_mulmod_256 +0x75a4 033637 arg mem_t3_256 ,rega +0x75a5 033638 arg mem_t2_256 ,regb +0x75a6 033639 arg mem_t2_256 ,contw +0x75a7 033640 call bn_addmod_256 +0x75a8 033641 arg mem_t0_256 ,rega +0x75a9 033642 arg mem_t2_256 ,regb +0x75aa 033643 arg mem_t0_256 ,contw +0x75ab 033644 call bn_addmod_256 +0x75ac 033645 arg 32 ,loopcnt +0x75ad 033646 arg mem_t7_256 ,rega +0x75ae 033647 arg mem_t0_256 ,regb +0x75af 033648 branch string_compare +: 033650 sp_calc_b256: +0x75b0 033651 arg mem_gy_256 ,rega +0x75b1 033652 arg mem_t0_256 ,contw +0x75b2 033653 call bn_sqrmod_256 +0x75b3 033654 arg mem_gx_256 ,rega +0x75b4 033655 arg mem_t2_256 ,contw +0x75b5 033656 call bn_sqrmod_256 +0x75b6 033657 arg mem_t2_256 ,rega +0x75b7 033658 arg mem_gx_256 ,regb +0x75b8 033659 arg mem_t2_256 ,contw +0x75b9 033660 call bn_mulmod_256 +0x75ba 033661 arg mem_a_256 ,rega +0x75bb 033662 arg mem_gx_256 ,regb +0x75bc 033663 arg mem_t3_256 ,contw +0x75bd 033664 call bn_mulmod_256 +0x75be 033665 arg mem_t3_256 ,rega +0x75bf 033666 arg mem_t2_256 ,regb +0x75c0 033667 arg mem_t2_256 ,contw +0x75c1 033668 call bn_addmod_256 +0x75c2 033669 arg mem_t0_256 ,rega +0x75c3 033670 arg mem_t2_256 ,regb +0x75c4 033671 arg mem_t0_256 ,contw +0x75c5 033672 branch bn_submod_256 +: 033674 sp_calc_check_publickey: +0x75c6 033675 call sp_calc_b +0x75c7 033676 arg mem_sp_pubkey_remote_y ,rega +0x75c8 033677 arg mem_t7_256 ,contw +0x75c9 033678 call bn_sqrmod +0x75ca 033679 arg mem_sp_pubkey_remote_x ,rega +0x75cb 033680 arg mem_t2_256 ,contw +0x75cc 033681 call bn_sqrmod +0x75cd 033682 arg mem_t2_256 ,rega +0x75ce 033683 arg mem_sp_pubkey_remote_x ,regb +0x75cf 033684 arg mem_t2_256 ,contw +0x75d0 033685 call bn_mulmod +0x75d1 033686 arg mem_a ,rega +0x75d2 033687 arg mem_sp_pubkey_remote_x ,regb +0x75d3 033688 arg mem_t3_256 ,contw +0x75d4 033689 call bn_mulmod +0x75d5 033690 arg mem_t3_256 ,rega +0x75d6 033691 arg mem_t2_256 ,regb +0x75d7 033692 arg mem_t2_256 ,contw +0x75d8 033693 call bn_addmod +0x75d9 033694 arg mem_t0_256 ,rega +0x75da 033695 arg mem_t2_256 ,regb +0x75db 033696 arg mem_t0_256 ,contw +0x75dc 033697 call bn_addmod +0x75dd 033698 arg 24 ,loopcnt +0x75de 033699 arg mem_t7_256 ,rega +0x75df 033700 arg mem_t0_256 ,regb +0x75e0 033701 branch string_compare +: 033703 sp_calc_b: +0x75e1 033704 arg mem_gy ,rega +0x75e2 033705 arg mem_t0_256 ,contw +0x75e3 033706 call bn_sqrmod +0x75e4 033707 arg mem_gx ,rega +0x75e5 033708 arg mem_t2_256 ,contw +0x75e6 033709 call bn_sqrmod +0x75e7 033710 arg mem_t2_256 ,rega +0x75e8 033711 arg mem_gx ,regb +0x75e9 033712 arg mem_t2_256 ,contw +0x75ea 033713 call bn_mulmod +0x75eb 033714 arg mem_a ,rega +0x75ec 033715 arg mem_gx ,regb +0x75ed 033716 arg mem_t3_256 ,contw +0x75ee 033717 call bn_mulmod +0x75ef 033718 arg mem_t3_256 ,rega +0x75f0 033719 arg mem_t2_256 ,regb +0x75f1 033720 arg mem_t2_256 ,contw +0x75f2 033721 call bn_addmod +0x75f3 033722 arg mem_t0_256 ,rega +0x75f4 033723 arg mem_t2_256 ,regb +0x75f5 033724 arg mem_t0_256 ,contw +0x75f6 033725 branch bn_submod +: 033728 sp_calculate_commitment: +0x75f7 033729 fetch 1 ,mem_sp_calc +0x75f8 033730 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc +0x75f9 033731 call sp_local_random_key_generator +0x75fa 033732 arg mem_sp_prarm_stack ,contw +0x75fb 033733 setarg mem_sp_random_local_end +0x75fc 033734 istore 2 ,contw +0x75fd 033735 setarg mem_sp_pubkey_local_x_end +0x75fe 033736 istore 2 ,contw +0x75ff 033737 setarg mem_sp_pubkey_remote_x_end +0x7600 033738 istore 2 ,contw +0x7601 033739 branch sp_calculate_commitment0 +: 033740 master_sp_calculate_commitment: +0x7602 033741 arg mem_sp_prarm_stack ,contw +0x7603 033742 setarg mem_sp_random_remote_end +0x7604 033743 istore 2 ,contw +0x7605 033744 setarg mem_sp_pubkey_remote_x_end +0x7606 033745 istore 2 ,contw +0x7607 033746 setarg mem_sp_pubkey_local_x_end +0x7608 033747 istore 2 ,contw +: 033748 sp_calculate_commitment0: +0x7609 033749 call function_f1 +0x760a 033750 fetch 1 ,mem_master_sp_state +0x760b 033751 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 +0x760c 033752 jam sp_flag_commit ,mem_sp_flag +0x760d 033753 jam sp_stat_commit_send ,mem_sp_state +0x760e 033754 rtn +: 033755 master_sp_calculate_commitment0: +0x760f 033756 jam sp_stat_commitment_compare ,mem_master_sp_state +0x7610 033757 call sp_master_generate_local_key +0x7611 033758 branch master_set_mem_master_sp_flag +: 033760 sp_local_random_key_generator: +0x7612 033761 arg mem_sp_random_local ,contw +0x7613 033762 force 8 ,queue +0x7614 033763 branch random_generator +: 033765 sp_calculate_commitment_wait_dhkey_calc: +0x7615 033766 jam sp_flag_commit ,mem_sp_flag +0x7616 033767 rtn +: 033769 sp_confirm_check: +0x7617 033771 bpatchx patch3c_6 ,mem_patch3c +0x7618 033772 arg mem_addr_value ,contw +0x7619 033773 fetch 6 ,mem_lap +0x761a 033774 istore 6 ,contw +0x761b 033775 fetch 6 ,mem_plap +0x761c 033776 istore 6 ,contw +0x761d 033777 fetch 3 ,mem_sp_iocap_remote +0x761e 033778 istore 3 ,contw +0x761f 033780 call function_f3a +0x7620 033782 arg mem_sp_calc_result_high ,rega +0x7621 033783 arg mem_sp_check_result ,regb +0x7622 033784 force 4 ,queue +0x7623 033785 call compare4 +0x7624 033786 nbranch sp_confirm_check_failed ,true +0x7625 033788 call sp_confirm_check_success +0x7626 033789 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x7627 033790 branch tid_set_reply +: 033792 sp_confirm_check_success: +0x7628 033793 fetch 1 ,mem_master_sp_state +0x7629 033794 beq sp_stat_confirm_check ,sp_confirm_check_success_master +0x762a 033795 jam sp_stat_confirm_calc ,mem_sp_state +0x762b 033796 jam sp_flag_commit ,mem_sp_flag +0x762c 033797 jam lmp_accepted ,mem_lmo_opcode2 +0x762d 033798 rtn +: 033799 sp_confirm_check_success_master: +0x762e 033800 jam lmp_accepted ,mem_lmo_opcode2 +0x762f 033801 jam sp_state_end ,mem_master_sp_state +0x7630 033802 branch master_set_mem_master_sp_flag +: 033805 sp_confirm_check_failed: +0x7631 033806 fetch 1 ,mem_master_sp_state +0x7632 033807 beq sp_stat_confirm_check ,sp_confirm_check_failed_master +0x7633 033808 jam sp_stat_null ,mem_sp_state +0x7634 033809 jam lmp_not_accepted ,mem_lmo_opcode2 +0x7635 033811 jam authentication_failure_error ,mem_lmo_reason2 +0x7636 033812 rtn +: 033813 sp_confirm_check_failed_master: +0x7637 033814 jam lmp_not_accepted ,mem_lmo_opcode2 +0x7638 033815 jam sp_stat_null ,mem_master_sp_state +0x7639 033816 rtn +: 033818 sp_confirm_calc: +0x763a 033819 fetch 1 ,mem_sp_dh_ready +0x763b 033820 beq sp_flag_commit ,sp_confirm_calc_ready +0x763c 033821 jam sp_stat_confirm_calc ,mem_master_sp_state +0x763d 033822 branch master_set_mem_master_sp_flag +: 033823 sp_confirm_calc_ready: +0x763e 033824 arg mem_addr_value ,contw +0x763f 033825 fetch 6 ,mem_plap +0x7640 033826 istore 6 ,contw +0x7641 033827 fetch 6 ,mem_lap +0x7642 033828 istore 6 ,contw +0x7643 033829 fetch 3 ,mem_sp_iocap_local +0x7644 033830 istore 3 ,contw +0x7645 033832 call function_f3b +0x7646 033833 fetch 1 ,mem_master_sp_state +0x7647 033834 beq sp_stat_confirm_calc ,sp_confirm_calc_master +0x7648 033835 jam sp_stat_confirm_send ,mem_sp_state +0x7649 033836 jam sp_flag_commit ,mem_sp_flag +0x764a 033837 rtn +: 033838 sp_confirm_calc_master: +0x764b 033839 jam sp_stat_confirm_send ,mem_master_sp_state +0x764c 033840 jam sp_flag_commit ,mem_master_sp_flag +0x764d 033841 rtn +: 033843 sp_master_key_prarm_push: +0x764e 033844 arg mem_sp_prarm_stack ,contw +0x764f 033845 fetch 6 ,mem_plap +0x7650 033846 istore 6 ,contw +0x7651 033847 fetch 6 ,mem_lap +0x7652 033848 istore 6 ,contw +0x7653 033849 setarg mem_sp_random_local_end +0x7654 033850 istore 2 ,contw +0x7655 033851 setarg mem_sp_random_remote_end +0x7656 033852 istore 2 ,contw +0x7657 033853 branch sp_link_key_calc +: 033854 sp_link_key_prarm_push: +0x7658 033855 jam sp_stat_done ,mem_sp_state +0x7659 033856 arg mem_sp_prarm_stack ,contw +0x765a 033857 fetch 6 ,mem_lap +0x765b 033858 istore 6 ,contw +0x765c 033859 fetch 6 ,mem_plap +0x765d 033860 istore 6 ,contw +0x765e 033861 setarg mem_sp_random_remote_end +0x765f 033862 istore 2 ,contw +0x7660 033863 setarg mem_sp_random_local_end +0x7661 033864 istore 2 ,contw +: 033865 sp_link_key_calc: +0x7662 033867 arg mem_addr_value ,contw +0x7663 033868 fetch 6 ,mem_sp_prarm_stack +0x7664 033869 istore 6 ,contw +0x7665 033870 fetch 6 ,mem_sp_prarm_stack + 6 +0x7666 033871 istore 6 ,contw +0x7667 033873 call function_f2 +0x7668 033876 jam 1 ,mem_link_key_exists +0x7669 033877 arg mem_link_key ,contw +0x766a 033878 arg mem_sp_calc_result_high ,contr +0x766b 033879 call memcpy16 +0x766c 033880 branch generate_linkkey_continue +: 033883 sp_pubkey_calc: +0x766d 033884 bpatchx patch3c_7 ,mem_patch3c +0x766e 033885 fetch 1 ,mem_sp_local_key_invalid +0x766f 033886 rtnne sp_key_invalid +0x7670 033887 fetch 1 ,mem_sp_calc +0x7671 033888 rtnne sp_calc_standby +0x7672 033889 arg mem_sp_private_key ,contw +0x7673 033890 force 11 ,queue +0x7674 033891 call random_generator +0x7675 033892 random pdata +0x7676 033893 rshift pdata ,pdata +0x7677 033894 istore 2 ,contw +0x7678 033896 arg mem_k ,contw +0x7679 033897 arg mem_sp_private_key ,contr +0x767a 033898 call memcpy24 +0x767b 033900 arg mem_ax ,contw +0x767c 033901 arg mem_gx ,contr +0x767d 033902 call memcpy48 +0x767e 033904 arg mem_az ,contw +0x767f 033905 call bn_zero +0x7680 033906 jam 1 ,mem_az +0x7681 033908 call eckp_calc_init +0x7682 033909 jam sp_calc_pubkey ,mem_sp_calc +0x7683 033910 rtn +: 033912 sp_pubkey_generated: +0x7684 033913 arg mem_sp_pubkey_local ,contw +0x7685 033914 arg mem_bx ,contr +0x7686 033915 call memcpy48 +0x7687 033916 jam sp_key_valid ,mem_sp_local_key_invalid +0x7688 033917 jam sp_calc_standby ,mem_sp_calc +0x7689 033918 rtn +: 033920 sp_dhkey_calc: +0x768a 033921 bpatchx patch3d_0 ,mem_patch3d +0x768b 033922 fetch 1 ,mem_sp_dhkey_invalid +0x768c 033923 rtnne sp_key_invalid +0x768d 033924 fetch 1 ,mem_sp_calc +0x768e 033925 rtnne sp_calc_standby +0x768f 033927 arg mem_k ,contw +0x7690 033928 arg mem_sp_private_key ,contr +0x7691 033929 call memcpy24 +0x7692 033931 arg mem_ax ,contw +0x7693 033932 arg mem_sp_pubkey_remote ,contr +0x7694 033933 call memcpy48 +0x7695 033935 arg mem_az ,contw +0x7696 033936 call bn_zero +0x7697 033937 jam 1 ,mem_az +0x7698 033939 call eckp_calc_init +0x7699 033940 jam sp_calc_dhkey ,mem_sp_calc +0x769a 033941 rtn +: 033943 sp_dhkey_generated: +0x769b 033944 jam sp_flag_commit ,mem_sp_dh_ready +0x769c 033945 arg mem_sp_dhkey ,contw +0x769d 033946 arg mem_bx ,contr +0x769e 033947 call memcpy24 +0x769f 033948 jam sp_key_valid ,mem_sp_dhkey_invalid +0x76a0 033949 jam sp_calc_standby ,mem_sp_calc +0x76a1 033950 rtn +: 033952 random_generator: +0x76a2 033953 increase -1 ,queue +0x76a3 033954 nrtn positive +0x76a4 033955 random pdata +0x76a5 033956 istore 2 ,contw +0x76a6 033957 branch random_generator +: 033958 compare4: +0x76a7 033959 increase -1 ,queue +0x76a8 033960 nbranch compare4_success ,positive +0x76a9 033961 ifetch 4 ,rega +0x76aa 033962 copy pdata ,temp +0x76ab 033963 ifetch 4 ,regb +0x76ac 033964 iflip temp ,pdata +0x76ad 033965 nbranch compare4_failed ,zero +0x76ae 033966 increase 4 ,rega +0x76af 033967 increase 4 ,regb +0x76b0 033968 branch compare4 +: 033969 compare4_failed: +0x76b1 033970 disable true +0x76b2 033971 rtn +: 033972 compare4_success: +0x76b3 033973 enable true +0x76b4 033974 rtn +: 033981 simple_pairing_sequence: +0x76b5 033982 bpatchx patch3d_1 ,mem_patch3d +0x76b6 033983 fetch 1 ,mem_sp_flag +0x76b7 033984 rtn blank +0x76b8 033985 call lmo_fifo_check +0x76b9 033986 nrtn blank +0x76ba 033987 jam sp_flag_standby ,mem_sp_flag +0x76bb 033988 fetch 1 ,mem_sp_state +0x76bc 033989 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header +0x76bd 033990 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm +0x76be 033991 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number +0x76bf 033992 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check +0x76c0 033993 beq sp_stat_key_generate ,sp_generate_local_key +0x76c1 033994 beq sp_stat_commit_calc ,sp_calculate_commitment +0x76c2 033995 beq sp_stat_confirm_check ,sp_confirm_check +0x76c3 033996 beq sp_stat_confirm_calc ,sp_confirm_calc +0x76c4 033997 beq sp_stat_link_key_calc ,sp_link_key_prarm_push +0x76c5 033999 rtn +: 034001 master_simple_paring_sequence: +0x76c6 034002 bpatchx patch3d_2 ,mem_patch3d +0x76c7 034003 fetch 1 ,mem_master_sp_flag +0x76c8 034004 rtn blank +0x76c9 034005 call lmo_fifo_check +0x76ca 034006 nrtn blank +0x76cb 034007 jam sp_flag_standby ,mem_master_sp_flag +0x76cc 034008 fetch 1 ,mem_master_sp_state +0x76cd 034009 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get +0x76ce 034010 beq sp_master_stat_start_done ,sp_master_send_io_cap_send +0x76cf 034011 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header +0x76d0 034012 beq sp_stat_commit_calc ,master_sp_calculate_commitment +0x76d1 034013 beq sp_stat_commitment_compare ,sp_master_commitment_compare +0x76d2 034014 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number +0x76d3 034015 beq sp_stat_confirm_calc ,sp_confirm_calc +0x76d4 034016 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check +0x76d5 034017 beq sp_stat_confirm_check ,sp_confirm_check +0x76d6 034018 beq sp_state_end ,master_sp_sm_end +0x76d7 034019 rtn +: 034021 master_set_mem_master_sp_flag: +0x76d8 034022 jam sp_flag_commit ,mem_master_sp_flag +0x76d9 034023 rtn +: 034025 master_clear_mem_master_sp_flag: +0x76da 034026 jam sp_flag_standby ,mem_master_sp_flag +0x76db 034027 rtn +: 034028 sp_calc_sequence: +0x76dc 034029 bpatchx patch3d_3 ,mem_patch3d +0x76dd 034030 fetch 1 ,mem_ssp_enable +0x76de 034031 rtn blank +0x76df 034032 fetch 1 ,mem_sp_calc +0x76e0 034033 rtn blank +0x76e1 034034 increase 0x80 ,pdata +0x76e2 034035 store 1 ,mem_sp_calc +0x76e3 034036 rtnbit1 7 +0x76e4 034037 fetch 1 ,mem_ec_loopc +0x76e5 034038 branch sp_calc_sequence_done ,blank +0x76e6 034039 branch eckp_calc +: 034041 sp_calc_sequence_done: +0x76e7 034042 call ecunmapz +0x76e8 034043 fetch 1 ,mem_sp_calc +0x76e9 034044 beq sp_calc_pubkey ,sp_pubkey_generated +0x76ea 034045 beq sp_calc_dhkey ,sp_dhkey_generated +0x76eb 034046 rtn +: 034049 bn_testbit: +0x76ec 034050 and pdata ,7 ,queue +0x76ed 034051 rshift3 pdata ,pdata +0x76ee 034052 iadd contr ,contr +0x76ef 034053 ifetch 1 ,contr +0x76f0 034054 qisolate0 pdata +0x76f1 034055 rtn +: 034058 ec_copy: +0x76f2 034059 call memcpy24 +0x76f3 034060 call memcpy24 +0x76f4 034061 branch memcpy24 +: 034064 bn_eq_zero: +0x76f5 034065 ifetch 8 ,contr +0x76f6 034066 nrtn blank +0x76f7 034067 ifetch 8 ,contr +0x76f8 034068 nrtn blank +0x76f9 034069 ifetch 8 ,contr +0x76fa 034070 rtn +: 034075 bn_eq_0: +0x76fb 034076 ifetch 4 ,rega +0x76fc 034077 iforce temp +0x76fd 034078 ifetch 4 ,regb +0x76fe 034079 isub temp ,null +0x76ff 034080 nrtn zero +0x7700 034081 increase 4 ,rega +0x7701 034082 increase 4 ,regb +0x7702 034083 loop bn_eq_0 +0x7703 034084 rtn +: 034087 bn_bigeq: +0x7704 034088 force 6 ,loopcnt +0x7705 034089 increase 20 ,rega +0x7706 034090 increase 20 ,regb +: 034091 bn_bigeq_0: +0x7707 034092 ifetch 4 ,regb +0x7708 034093 iforce temp +0x7709 034094 ifetch 4 ,rega +0x770a 034095 isub temp ,pdata +0x770b 034096 nrtn positive +0x770c 034097 nrtn blank +0x770d 034098 increase -4 ,rega +0x770e 034099 increase -4 ,regb +0x770f 034100 loop bn_bigeq_0 +0x7710 034101 rtn +: 034103 bn_add: +0x7711 034104 force 6 ,loopcnt +0x7712 034105 force 0 ,regc +: 034106 bn_add_0: +0x7713 034107 ifetch 4 ,rega +0x7714 034108 iforce temp +0x7715 034109 ifetch 4 ,regb +0x7716 034110 iadd temp ,pdata +0x7717 034111 iadd regc ,pdata +0x7718 034112 istore 4 ,contw +0x7719 034113 isolate1 32 ,pdata +0x771a 034114 setflag true ,0 ,regc +0x771b 034115 increase 4 ,rega +0x771c 034116 increase 4 ,regb +0x771d 034117 loop bn_add_0 +0x771e 034118 rtn +: 034120 bn_sub: +0x771f 034121 force 6 ,loopcnt +0x7720 034122 force 0 ,regc +: 034123 bn_sub_0: +0x7721 034124 ifetch 4 ,regb +0x7722 034125 iforce temp +0x7723 034126 ifetch 4 ,rega +0x7724 034127 isub temp ,pdata +0x7725 034128 isub regc ,pdata +0x7726 034129 istore 4 ,contw +0x7727 034130 isolate1 32 ,pdata +0x7728 034131 setflag true ,0 ,regc +0x7729 034132 increase 4 ,rega +0x772a 034133 increase 4 ,regb +0x772b 034134 loop bn_sub_0 +0x772c 034135 rtn +: 034137 bn_rshift6: +0x772d 034138 force 6 ,loopcnt +0x772e 034139 increase 20 ,rega +: 034140 bn_rshift: +0x772f 034141 force 0 ,regc +: 034142 bn_rshift_0: +0x7730 034143 ifetch 4 ,rega +0x7731 034144 isolate1 0 ,pdata +0x7732 034145 setflag true ,1 ,regc +0x7733 034146 rshift pdata ,pdata +0x7734 034147 isolate1 0 ,regc +0x7735 034148 setflag true ,31 ,pdata +0x7736 034149 istore 4 ,rega +0x7737 034150 increase -4 ,rega +0x7738 034151 rshift regc ,regc +0x7739 034152 loop bn_rshift_0 +0x773a 034153 rtn +: 034155 bn_lshift: +0x773b 034156 force 6 ,loopcnt +0x773c 034157 force 0 ,regc +: 034158 bn_lshift_0: +0x773d 034159 ifetch 4 ,rega +0x773e 034160 isolate1 31 ,pdata +0x773f 034161 setflag true ,1 ,regc +0x7740 034162 lshift pdata ,pdata +0x7741 034163 isolate1 0 ,regc +0x7742 034164 setflag true ,0 ,pdata +0x7743 034165 istore 4 ,rega +0x7744 034166 increase 4 ,rega +0x7745 034167 rshift regc ,regc +0x7746 034168 loop bn_lshift_0 +0x7747 034169 rtn +: 034171 bn_lshiftmod: +0x7748 034172 call bn_lshift +: 034173 bn_lshiftmod_ismod: +0x7749 034174 isolate1 0 ,regc +0x774a 034175 branch bn_lshiftmod_0 ,true +0x774b 034176 arg mem_p ,regb +0x774c 034177 copy rega ,regc +0x774d 034178 increase -24 ,rega +0x774e 034179 call bn_bigeq +0x774f 034180 nrtn positive +0x7750 034181 copy regc ,rega +: 034182 bn_lshiftmod_0: +0x7751 034183 increase -24 ,rega +0x7752 034184 arg mem_p ,regb +0x7753 034185 copy rega ,contw +0x7754 034186 branch bn_sub +: 034189 bn_addmod: +0x7755 034190 call bn_add +0x7756 034191 copy contw ,rega +0x7757 034192 branch bn_lshiftmod_ismod +: 034194 bn_submod: +0x7758 034195 call bn_sub +0x7759 034196 isolate0 0 ,regc +0x775a 034197 rtn true +0x775b 034198 arg mem_p ,regb +0x775c 034199 add contw ,-24 ,rega +0x775d 034200 copy rega ,contw +0x775e 034201 branch bn_add +: 034204 bn_p192mod: +0x775f 034205 copy contw ,timeup +0x7760 034206 copy rega ,alarm +0x7761 034207 arg mem_tmp2 ,regb +0x7762 034208 copy regb ,contw +0x7763 034209 add rega ,24 ,contr +0x7764 034210 ifetch 8 ,contr +0x7765 034211 istore 8 ,contw +0x7766 034212 istore 8 ,contw +0x7767 034213 force 0 ,pdata +0x7768 034214 istore 8 ,contw +0x7769 034215 copy timeup ,contw +0x776a 034216 call bn_addmod +0x776b 034217 arg mem_tmp2 ,regb +0x776c 034218 copy regb ,contw +0x776d 034219 force 0 ,pdata +0x776e 034220 istore 8 ,contw +0x776f 034221 add alarm ,32 ,contr +0x7770 034222 ifetch 8 ,contr +0x7771 034223 istore 8 ,contw +0x7772 034224 istore 8 ,contw +0x7773 034225 copy timeup ,rega +0x7774 034226 copy rega ,contw +0x7775 034227 call bn_addmod +0x7776 034228 arg mem_tmp2 ,regb +0x7777 034229 copy regb ,contw +0x7778 034230 add alarm ,40 ,contr +0x7779 034231 ifetch 8 ,contr +0x777a 034232 istore 8 ,contw +0x777b 034233 istore 8 ,contw +0x777c 034234 istore 8 ,contw +0x777d 034235 copy timeup ,rega +0x777e 034236 copy rega ,contw +0x777f 034237 branch bn_addmod +: 034240 bn_load: +0x7780 034241 force 6 ,loopcnt +: 034242 bn_load_0: +0x7781 034243 ifetch 4 ,contr +0x7782 034244 iforce regext +0x7783 034245 increase 1 ,regext_index +0x7784 034246 loop bn_load_0 +0x7785 034247 rtn +: 034251 bn_mulmod: +0x7786 034252 copy contw ,timeup +0x7787 034253 arg mem_tmp1 ,contw +0x7788 034254 call bn_zero +0x7789 034255 arg mem_tmp1 ,contw +0x778a 034256 copy rega ,contr +0x778b 034257 force 0 ,regext_index +0x778c 034258 call bn_load +0x778d 034259 copy regb ,contr +0x778e 034260 call bn_load +0x778f 034261 force 0 ,regb +: 034262 bn_mulmod_1: +0x7790 034263 force 0 ,temp +0x7791 034264 force 6 ,regc +: 034265 bn_mulmod_0: +0x7792 034266 ifetch 4 ,contw +0x7793 034267 iforce rega +0x7794 034268 copy regb ,regext_index +0x7795 034269 deposit regext +0x7796 034270 copy regc ,regext_index +0x7797 034271 imul32 regext ,pdata +0x7798 034272 iadd rega ,pdata +0x7799 034273 iadd temp ,pdata +0x779a 034274 istore 4 ,contw +0x779b 034275 rshift32 pdata ,temp +0x779c 034276 increase 1 ,regc +0x779d 034277 compare 12 ,regc ,0xff +0x779e 034278 nbranch bn_mulmod_0 ,true +0x779f 034279 deposit temp +0x77a0 034280 istore 4 ,contw +0x77a1 034281 increase -24 ,contw +0x77a2 034282 increase 1 ,regb +0x77a3 034283 compare 6 ,regb ,0xff +0x77a4 034284 nbranch bn_mulmod_1 ,true +0x77a5 034285 arg mem_tmp1 ,rega +0x77a6 034286 copy timeup ,contw +0x77a7 034287 branch bn_p192mod +: 034290 bn_sqrmod: +0x77a8 034291 copy rega ,regb +0x77a9 034292 branch bn_mulmod +: 034294 bn_rshifteven: +0x77aa 034295 copy rega ,alarm +: 034296 bn_rshifteven_1: +0x77ab 034297 copy alarm ,rega +0x77ac 034298 ifetch 1 ,rega +0x77ad 034299 isolate1 0 ,pdata +0x77ae 034300 rtn true +0x77af 034301 call bn_rshift6 +0x77b0 034302 ifetch 1 ,regb +0x77b1 034303 isolate0 0 ,pdata +0x77b2 034304 branch bn_rshifteven_0 ,true +0x77b3 034305 arg mem_p ,rega +0x77b4 034306 copy regb ,contw +0x77b5 034307 call bn_add +0x77b6 034308 ifetch 1 ,regb +0x77b7 034309 iadd regc ,pdata +0x77b8 034310 istore 1 ,regb +0x77b9 034311 increase -24 ,regb +: 034312 bn_rshifteven_0: +0x77ba 034313 add regb ,24 ,rega +0x77bb 034314 force 7 ,loopcnt +0x77bc 034315 call bn_rshift +0x77bd 034316 branch bn_rshifteven_1 +: 034319 bn_invmod: +0x77be 034320 copy contw ,timeup +0x77bf 034321 arg mem_tmp0 ,contw +0x77c0 034322 call bn_zero +0x77c1 034323 force 0 ,pdata +0x77c2 034324 store 4 ,mem_tmp5 +0x77c3 034325 store 4 ,mem_t2 +0x77c4 034326 jam 1 ,mem_tmp0 +0x77c5 034327 arg mem_tmp1 ,contw +0x77c6 034328 call bn_zero +0x77c7 034329 arg mem_p ,contr +0x77c8 034330 arg mem_tmp2 ,contw +0x77c9 034331 call memcpy24 +0x77ca 034332 copy rega ,contr +0x77cb 034333 arg mem_tmp3 ,contw +0x77cc 034334 call memcpy24 +: 034335 bn_invmod_2: +0x77cd 034336 arg mem_tmp3 ,contr +0x77ce 034337 call bn_eq_zero +0x77cf 034338 branch bn_invmod_0 ,blank +0x77d0 034339 arg mem_tmp3 ,rega +0x77d1 034340 arg mem_tmp0 ,regb +0x77d2 034341 call bn_rshifteven +0x77d3 034343 arg mem_tmp2 ,rega +0x77d4 034344 arg mem_tmp1 ,regb +0x77d5 034345 call bn_rshifteven +0x77d6 034346 arg mem_tmp3 ,rega +0x77d7 034347 arg mem_tmp2 ,regb +0x77d8 034348 call bn_bigeq +0x77d9 034349 branch bn_invmod_1 ,positive +0x77da 034350 arg mem_tmp2 ,rega +0x77db 034351 arg mem_tmp3 ,regb +0x77dc 034352 copy rega ,contw +0x77dd 034353 call bn_sub +0x77de 034354 arg mem_tmp0 ,rega +0x77df 034355 arg mem_tmp1 ,regb +0x77e0 034356 copy regb ,contw +0x77e1 034357 call bn_add +0x77e2 034358 ifetch 1 ,rega +0x77e3 034359 iadd regc ,regc +0x77e4 034360 ifetch 1 ,regb +0x77e5 034361 iadd regc ,pdata +0x77e6 034362 istore 1 ,regb +0x77e7 034363 branch bn_invmod_2 +: 034364 bn_invmod_1: +0x77e8 034365 arg mem_tmp3 ,rega +0x77e9 034366 arg mem_tmp2 ,regb +0x77ea 034367 copy rega ,contw +0x77eb 034368 call bn_sub +0x77ec 034369 arg mem_tmp1 ,rega +0x77ed 034370 arg mem_tmp0 ,regb +0x77ee 034371 copy regb ,contw +0x77ef 034372 call bn_add +0x77f0 034373 ifetch 1 ,rega +0x77f1 034374 iadd regc ,regc +0x77f2 034375 ifetch 1 ,regb +0x77f3 034376 iadd regc ,pdata +0x77f4 034377 istore 1 ,regb +0x77f5 034378 branch bn_invmod_2 +: 034379 bn_invmod_0: +0x77f6 034380 arg mem_tmp0 ,contw +0x77f7 034381 call bn_zero +0x77f8 034382 fetch 1 ,mem_tmp5 +0x77f9 034383 store 1 ,mem_tmp0 +0x77fa 034384 store 1 ,mem_tmp0a +0x77fb 034385 arg mem_tmp0 ,rega +0x77fc 034386 arg mem_tmp1 ,regb +0x77fd 034387 copy regb ,contw +0x77fe 034388 call bn_addmod +0x77ff 034389 arg mem_p ,rega +0x7800 034390 arg mem_tmp1 ,regb +0x7801 034391 copy timeup ,contw +0x7802 034392 branch bn_submod +: 034397 ecdbl: +0x7803 034398 arg mem_cz ,rega +0x7804 034399 arg mem_t2 ,contw +0x7805 034400 call bn_sqrmod +0x7806 034401 arg mem_t2 ,rega +0x7807 034402 arg mem_t3 ,contw +0x7808 034403 call bn_sqrmod +0x7809 034404 arg mem_a ,rega +0x780a 034405 arg mem_t3 ,regb +0x780b 034406 arg mem_t3 ,contw +0x780c 034407 call bn_mulmod +0x780d 034408 arg mem_cx ,rega +0x780e 034409 arg mem_t2 ,contw +0x780f 034410 call bn_sqrmod +0x7810 034411 arg mem_t2 ,contr +0x7811 034412 arg mem_t1 ,contw +0x7812 034413 call memcpy24 +0x7813 034414 arg mem_t1 ,rega +0x7814 034415 call bn_lshiftmod +0x7815 034416 arg mem_t2 ,rega +0x7816 034417 arg mem_t1 ,regb +0x7817 034418 arg mem_t2 ,contw +0x7818 034419 call bn_addmod +0x7819 034420 arg mem_t2 ,rega +0x781a 034421 arg mem_t3 ,regb +0x781b 034422 arg mem_t2 ,contw +0x781c 034423 call bn_addmod +0x781d 034424 arg mem_cx ,contr +0x781e 034425 arg mem_t1 ,contw +0x781f 034426 call memcpy24 +0x7820 034427 arg mem_cy ,rega +0x7821 034428 arg mem_t3 ,contw +0x7822 034429 call bn_sqrmod +0x7823 034430 arg mem_t1 ,rega +0x7824 034431 call bn_lshiftmod +0x7825 034432 arg mem_t1 ,rega +0x7826 034433 call bn_lshiftmod +0x7827 034434 arg mem_t1 ,rega +0x7828 034435 arg mem_t3 ,regb +0x7829 034436 arg mem_t1 ,contw +0x782a 034437 call bn_mulmod +0x782b 034438 arg mem_t3 ,rega +0x782c 034439 arg mem_t0 ,contw +0x782d 034440 call bn_sqrmod +0x782e 034441 arg mem_t0 ,rega +0x782f 034442 call bn_lshiftmod +0x7830 034443 arg mem_t0 ,rega +0x7831 034444 call bn_lshiftmod +0x7832 034445 arg mem_t0 ,rega +0x7833 034446 call bn_lshiftmod +0x7834 034447 arg mem_cy ,contr +0x7835 034448 arg mem_t3 ,contw +0x7836 034449 call memcpy24 +0x7837 034450 arg mem_t3 ,rega +0x7838 034451 call bn_lshiftmod +0x7839 034452 arg mem_t3 ,rega +0x783a 034453 arg mem_cz ,regb +0x783b 034454 arg mem_cz ,contw +0x783c 034455 call bn_mulmod +0x783d 034456 arg mem_t2 ,rega +0x783e 034457 arg mem_t3 ,contw +0x783f 034458 call bn_sqrmod +0x7840 034459 arg mem_t3 ,rega +0x7841 034460 arg mem_t1 ,regb +0x7842 034461 arg mem_t3 ,contw +0x7843 034462 call bn_submod +0x7844 034463 arg mem_t3 ,rega +0x7845 034464 arg mem_t1 ,regb +0x7846 034465 arg mem_cx ,contw +0x7847 034466 call bn_submod +0x7848 034467 arg mem_t1 ,rega +0x7849 034468 arg mem_cx ,regb +0x784a 034469 arg mem_t3 ,contw +0x784b 034470 call bn_submod +0x784c 034471 arg mem_t3 ,rega +0x784d 034472 arg mem_t2 ,regb +0x784e 034473 arg mem_t3 ,contw +0x784f 034474 call bn_mulmod +0x7850 034475 arg mem_t3 ,rega +0x7851 034476 arg mem_t0 ,regb +0x7852 034477 arg mem_cy ,contw +0x7853 034478 branch bn_submod +: 034482 ecadd: +0x7854 034483 arg mem_az ,rega +0x7855 034484 arg mem_t7 ,contw +0x7856 034485 call bn_sqrmod +0x7857 034486 arg mem_cx ,rega +0x7858 034487 arg mem_t7 ,regb +0x7859 034488 arg mem_t0 ,contw +0x785a 034489 call bn_mulmod +0x785b 034490 arg mem_az ,rega +0x785c 034491 arg mem_t7 ,regb +0x785d 034492 arg mem_t7 ,contw +0x785e 034493 call bn_mulmod +0x785f 034494 arg mem_cy ,rega +0x7860 034495 arg mem_t7 ,regb +0x7861 034496 arg mem_t1 ,contw +0x7862 034497 call bn_mulmod +0x7863 034498 arg mem_cz ,rega +0x7864 034499 arg mem_t7 ,contw +0x7865 034500 call bn_sqrmod +0x7866 034501 arg mem_ax ,rega +0x7867 034502 arg mem_t7 ,regb +0x7868 034503 arg mem_t2 ,contw +0x7869 034504 call bn_mulmod +0x786a 034505 arg mem_cz ,rega +0x786b 034506 arg mem_t7 ,regb +0x786c 034507 arg mem_t7 ,contw +0x786d 034508 call bn_mulmod +0x786e 034509 arg mem_ay ,rega +0x786f 034510 arg mem_t7 ,regb +0x7870 034511 arg mem_t3 ,contw +0x7871 034512 call bn_mulmod +0x7872 034513 arg mem_t0 ,rega +0x7873 034514 arg mem_t2 ,regb +0x7874 034515 arg mem_t7 ,contw +0x7875 034516 call bn_submod +0x7876 034517 arg mem_t0 ,rega +0x7877 034518 arg mem_t2 ,regb +0x7878 034519 arg mem_t0 ,contw +0x7879 034520 call bn_addmod +0x787a 034521 arg mem_t1 ,rega +0x787b 034522 arg mem_t3 ,regb +0x787c 034523 arg mem_t2 ,contw +0x787d 034524 call bn_submod +0x787e 034525 arg mem_t1 ,rega +0x787f 034526 arg mem_t3 ,regb +0x7880 034527 arg mem_t1 ,contw +0x7881 034528 call bn_addmod +0x7882 034529 arg mem_t1 ,rega +0x7883 034530 arg mem_t7 ,regb +0x7884 034531 arg mem_t1 ,contw +0x7885 034532 call bn_mulmod +0x7886 034533 arg mem_cz ,rega +0x7887 034534 arg mem_az ,regb +0x7888 034535 arg mem_t3 ,contw +0x7889 034536 call bn_mulmod +0x788a 034537 arg mem_t3 ,rega +0x788b 034538 arg mem_t7 ,regb +0x788c 034539 arg mem_cz ,contw +0x788d 034540 call bn_mulmod +0x788e 034541 arg mem_t7 ,rega +0x788f 034542 arg mem_t7 ,contw +0x7890 034543 call bn_sqrmod +0x7891 034544 arg mem_t7 ,rega +0x7892 034545 arg mem_t0 ,regb +0x7893 034546 arg mem_t3 ,contw +0x7894 034547 call bn_mulmod +0x7895 034548 arg mem_t7 ,rega +0x7896 034549 arg mem_t1 ,regb +0x7897 034550 arg mem_t1 ,contw +0x7898 034551 call bn_mulmod +0x7899 034552 arg mem_t2 ,rega +0x789a 034553 arg mem_cx ,contw +0x789b 034554 call bn_sqrmod +0x789c 034555 arg mem_cx ,rega +0x789d 034556 arg mem_t3 ,regb +0x789e 034557 arg mem_cx ,contw +0x789f 034558 call bn_submod +0x78a0 034559 arg mem_cx ,contr +0x78a1 034560 arg mem_t7 ,contw +0x78a2 034561 call memcpy24 +0x78a3 034562 arg mem_t7 ,rega +0x78a4 034563 call bn_lshiftmod +0x78a5 034564 arg mem_t3 ,rega +0x78a6 034565 arg mem_t7 ,regb +0x78a7 034566 arg mem_t3 ,contw +0x78a8 034567 call bn_submod +0x78a9 034568 arg mem_t3 ,rega +0x78aa 034569 arg mem_t2 ,regb +0x78ab 034570 arg mem_t2 ,contw +0x78ac 034571 call bn_mulmod +0x78ad 034572 arg mem_t2 ,rega +0x78ae 034573 arg mem_t1 ,regb +0x78af 034574 arg mem_cy ,contw +0x78b0 034575 call bn_submod +0x78b1 034576 arg mem_cy ,rega +0x78b2 034577 arg mem_p ,regb +0x78b3 034578 arg mem_cy ,contw +0x78b4 034579 force 0 ,regc +0x78b5 034580 fetch 1 ,mem_cy +0x78b6 034581 isolate1 0 ,pdata +0x78b7 034582 call bn_add ,true +0x78b8 034583 copy regc ,alarm +0x78b9 034584 arg mem_cy ,rega +0x78ba 034585 call bn_rshift6 +0x78bb 034586 fetch 1 ,mem_cy5 +0x78bc 034587 isolate1 0 ,alarm +0x78bd 034588 setflag true ,7 ,pdata +0x78be 034589 store 1 ,mem_cy5 +0x78bf 034590 rtn +: 034594 eckp_0: +0x78c0 034595 fetch 1 ,mem_ec_loopc +0x78c1 034596 increase -1 ,pdata +0x78c2 034597 nrtn positive +0x78c3 034598 store 1 ,mem_ec_loopc +0x78c4 034599 fetch 1 ,mem_ec_infinite +0x78c5 034600 call ecdbl ,blank +0x78c6 034601 fetch 1 ,mem_ec_loopc +0x78c7 034602 arg mem_k ,contr +0x78c8 034603 call bn_testbit +0x78c9 034604 branch eckp_0 ,true +0x78ca 034605 fetch 1 ,mem_ec_infinite +0x78cb 034606 nbranch eckp_1 ,blank +0x78cc 034607 call ecadd +0x78cd 034608 branch eckp_0 +: 034609 eckp_1: +0x78ce 034610 jam 0 ,mem_ec_infinite +0x78cf 034611 arg mem_ax ,contr +0x78d0 034612 arg mem_cx ,contw +0x78d1 034613 call ec_copy +0x78d2 034614 branch eckp_0 +: 034617 ecunmapz: +0x78d3 034618 arg mem_cz ,rega +0x78d4 034619 arg mem_t3 ,contw +0x78d5 034620 call bn_invmod +0x78d6 034621 arg mem_t3 ,rega +0x78d7 034622 arg mem_t1 ,contw +0x78d8 034623 call bn_sqrmod +0x78d9 034624 arg mem_cx ,rega +0x78da 034625 arg mem_t1 ,regb +0x78db 034626 arg mem_bx ,contw +0x78dc 034627 call bn_mulmod +0x78dd 034628 arg mem_t3 ,rega +0x78de 034629 arg mem_t1 ,regb +0x78df 034630 arg mem_t2 ,contw +0x78e0 034631 call bn_mulmod +0x78e1 034632 arg mem_cy ,rega +0x78e2 034633 arg mem_t2 ,regb +0x78e3 034634 arg mem_by ,contw +0x78e4 034635 branch bn_mulmod +: 034639 sha_endian_swap2: +0x78e5 034640 ifetch 4 ,contr +0x78e6 034641 force 4 ,rega +0x78e7 034642 increase 3 ,contw +: 034643 sha_endian_loop: +0x78e8 034644 istore 1 ,contw +0x78e9 034645 rshift8 pdata ,pdata +0x78ea 034646 increase -2 ,contw +0x78eb 034647 increase -1 ,rega +0x78ec 034648 nbranch sha_endian_loop ,zero +0x78ed 034649 increase 5 ,contw +0x78ee 034650 loop sha_endian_swap2 +0x78ef 034651 rtn +: 034654 sha_getw: +0x78f0 034655 lshift2 queue ,pdata +0x78f1 034656 iadd timeup ,contr +0x78f2 034657 ifetch 4 ,contr +0x78f3 034658 rtn +: 034660 sha_r: +0x78f4 034661 force 16 ,alarm +0x78f5 034662 arg memdat ,timeup +: 034663 sha_r_loop: +0x78f6 034664 add alarm ,-7 ,queue +0x78f7 034665 call sha_getw +0x78f8 034666 iforce temp +0x78f9 034667 add alarm ,-16 ,queue +0x78fa 034668 call sha_getw +0x78fb 034669 iadd temp ,temp +0x78fc 034670 add alarm ,-2 ,queue +0x78fd 034671 call sha_getw +0x78fe 034672 shasx pdata ,1 ,pdata +0x78ff 034673 iadd temp ,temp +0x7900 034674 add alarm ,-15 ,queue +0x7901 034675 call sha_getw +0x7902 034676 shasx pdata ,0 ,pdata +0x7903 034677 iadd temp ,temp +0x7904 034678 lshift2 alarm ,pdata +0x7905 034679 iadd timeup ,contw +0x7906 034680 istoret 4 ,contw +0x7907 034681 increase 1 ,alarm +0x7908 034682 compare 64 ,alarm ,0xff +0x7909 034683 nbranch sha_r_loop ,true +0x790a 034684 rtn +: 034687 sha_init: +0x790b 034688 arg memh0 ,contr +0x790c 034689 force 7 ,regext_index +: 034690 sha_init_0: +0x790d 034691 ifetch 4 ,contr +0x790e 034692 iforce regext +0x790f 034693 increase -1 ,regext_index +0x7910 034694 branch sha_init_0 ,positive +0x7911 034695 rtn +: 034697 sha: +0x7912 034698 bpatchx patch3d_4 ,mem_patch3d +0x7913 034699 call sha_r +0x7914 034700 arg memahbak ,contw +0x7915 034701 force 0 ,regext_index +: 034702 sha_0: +0x7916 034703 deposit regext +0x7917 034704 istore 4 ,contw +0x7918 034705 increase 1 ,regext_index +0x7919 034706 compare 8 ,regext_index ,0xff +0x791a 034707 nbranch sha_0 ,true +0x791b 034708 call enable_authrom +0x791c 034709 arg memk ,timeup +0x791d 034710 arg memdat ,alarm +0x791e 034711 force 64 ,loopcnt +: 034712 sha_loop: +0x791f 034713 ifetcht 4 ,alarm +0x7920 034714 ifetch 4 ,timeup +0x7921 034715 increase 4 ,timeup +0x7922 034716 increase 4 ,alarm +0x7923 034717 iadd temp ,pdata +0x7924 034718 force 7 ,regext_index +0x7925 034719 iadd regext ,temp +0x7926 034720 force 4 ,regext_index +0x7927 034721 shasx regext ,3 ,pdata +0x7928 034722 iadd temp ,temp +0x7929 034723 force 5 ,regext_index +0x792a 034724 deposit regext +0x792b 034725 force 6 ,regext_index +0x792c 034726 ixor regext ,pdata +0x792d 034727 force 4 ,regext_index +0x792e 034728 iand regext ,pdata +0x792f 034729 force 6 ,regext_index +0x7930 034730 ixor regext ,pdata +0x7931 034731 iadd temp ,temp +0x7932 034732 force 7 ,regext_index +0x7933 034733 copy temp ,regext +0x7934 034734 force 3 ,regext_index +0x7935 034735 deposit regext +0x7936 034736 iadd temp ,regext +0x7937 034737 force 0 ,regext_index +0x7938 034738 deposit regext +0x7939 034739 force 1 ,regext_index +0x793a 034740 iand regext ,temp +0x793b 034741 ior regext ,pdata +0x793c 034742 force 2 ,regext_index +0x793d 034743 iand regext ,pdata +0x793e 034744 ior temp ,temp +0x793f 034745 force 0 ,regext_index +0x7940 034746 shasx regext ,2 ,pdata +0x7941 034747 iadd temp ,pdata +0x7942 034748 force 7 ,regext_index +0x7943 034749 iadd regext ,regext +0x7944 034750 regexrot +0x7945 034751 loop sha_loop +0x7946 034752 arg memahbak ,contr +0x7947 034753 force 0 ,regext_index +: 034754 sha_1: +0x7948 034755 ifetch 4 ,contr +0x7949 034756 iadd regext ,regext +0x794a 034757 increase 1 ,regext_index +0x794b 034758 compare 8 ,regext_index ,0xff +0x794c 034759 nbranch sha_1 ,true +0x794d 034760 branch disable_authrom +: 034763 sha_result: +0x794e 034764 arg memresult ,contw +0x794f 034765 force 7 ,regext_index +: 034766 sha_regext_save: +0x7950 034767 deposit regext +0x7951 034768 istore 4 ,contw +0x7952 034769 increase -1 ,regext_index +0x7953 034770 branch sha_regext_save ,positive +0x7954 034771 rtn +: 034773 pad_xor: +0x7955 034775 arg memdat ,contw +0x7956 034776 increase -4 ,contr +0x7957 034777 sub loopcnt ,16 ,rega +: 034778 pad_xor_0: +0x7958 034779 ifetch 4 ,contr +0x7959 034780 ixor temp ,pdata +0x795a 034781 istore 4 ,contw +0x795b 034782 increase -8 ,contr +0x795c 034783 loop pad_xor_0 +0x795d 034784 copy rega ,loopcnt +0x795e 034785 deposit temp +: 034786 pad_xor_1: +0x795f 034787 istore 4 ,contw +0x7960 034788 loop pad_xor_1 +0x7961 034789 rtn +: 034791 g_noninit_number_confirm: +0x7962 034792 call g_noninit0 +0x7963 034793 call sha_result +0x7964 034794 branch g_common0 +: 034796 g_noninit: +0x7965 034797 call g_noninit0 +0x7966 034798 branch g_common0 +: 034800 g_noninit0: +0x7967 034801 arg mem_sp_pubkey_remote_x_end ,contr +0x7968 034802 arg memdat ,contw +0x7969 034803 force 6 ,loopcnt +0x796a 034804 call memcpy_dword_swap +0x796b 034805 arg mem_sp_pubkey_local_x_end ,contr +0x796c 034806 force 6 ,loopcnt +0x796d 034807 call memcpy_dword_swap +0x796e 034808 arg mem_sp_random_remote_end ,contr +0x796f 034809 call memcpy_dword_swap4 +0x7970 034810 call sha_init +0x7971 034811 call sha +0x7972 034812 arg mem_sp_random_local_end ,contr +0x7973 034813 arg memdat ,contw +0x7974 034814 branch g_common +: 034816 g_init: +0x7975 034817 arg mem_sp_pubkey_local_x_end ,contr +0x7976 034818 arg memdat ,contw +0x7977 034819 force 6 ,loopcnt +0x7978 034820 call memcpy_dword_swap +0x7979 034821 arg mem_sp_pubkey_remote_x_end ,contr +0x797a 034822 force 6 ,loopcnt +0x797b 034823 call memcpy_dword_swap +0x797c 034824 arg mem_sp_random_local_end ,contr +0x797d 034825 call memcpy_dword_swap4 +0x797e 034826 call sha_init +0x797f 034827 call sha +0x7980 034828 arg mem_sp_random_remote_end ,contr +0x7981 034829 arg memdat ,contw +0x7982 034830 call g_common +0x7983 034831 branch g_common0 +: 034833 g_common: +0x7984 034834 call memcpy_dword_swap4 +0x7985 034835 setarg 0x800000 +0x7986 034836 lshift8 pdata ,pdata +0x7987 034837 istore 4 ,contw +0x7988 034838 force 5 ,loopcnt +0x7989 034839 call memset0 +0x798a 034840 setarg 640 +0x798b 034841 istore 4 ,contw +0x798c 034842 branch sha +: 034843 g_common0: +0x798d 034844 fetch 4 ,memresult +0x798e 034846 arg 1000 ,rega +0x798f 034847 idiv rega +0x7990 034848 call wait_div_end +0x7991 034849 remainder pdata +0x7992 034850 store 4 ,mem_gkey +0x7993 034851 quotient pdata +0x7994 034852 arg 1000 ,rega +0x7995 034853 idiv rega +0x7996 034854 call wait_div_end +0x7997 034855 remainder pdata +0x7998 034856 arg 1000 ,rega +0x7999 034857 imul32 rega ,pdata +0x799a 034858 fetcht 4 ,mem_gkey +0x799b 034859 iadd temp ,pdata +0x799c 034860 store 4 ,mem_gkey +0x799d 034861 rtn +: 034863 function_f1_no_key: +0x799e 034864 jam 0 ,mem_passkey_1bit +0x799f 034865 branch function_f1_common +: 034867 function_f1: +0x79a0 034868 fetch 1 ,mem_ssp_mode_flag +0x79a1 034869 bne ssp_mode_passkey_entry_flag ,function_f1_no_key +: 034870 function_f1_common: +0x79a2 034871 bpatchx patch3d_5 ,mem_patch3d +0x79a3 034872 setarg 0x363636 +0x79a4 034873 lshift8 pdata ,temp +0x79a5 034874 or_into 0x36 ,temp +0x79a6 034875 fetch 2 ,mem_sp_prarm_stack +0x79a7 034876 copy pdata ,contr +0x79a8 034877 force 4 ,loopcnt +0x79a9 034878 call pad_xor +0x79aa 034879 call sha_init +0x79ab 034880 call sha +0x79ac 034881 fetch 2 ,mem_sp_prarm_stack + 2 +0x79ad 034882 copy pdata ,contr +0x79ae 034883 arg memdat ,contw +0x79af 034884 force 6 ,loopcnt +0x79b0 034885 call memcpy_dword_swap +0x79b1 034886 fetch 2 ,mem_sp_prarm_stack + 4 +0x79b2 034887 copy pdata ,contr +0x79b3 034888 force 6 ,loopcnt +0x79b4 034889 call memcpy_dword_swap +0x79b5 034890 setarg 0x800000 +0x79b6 034891 istore 3 ,contw +0x79b7 034893 fetch 1 ,mem_passkey_1bit +0x79b8 034895 istore 1 ,contw +0x79b9 034896 force 0 ,pdata +0x79ba 034897 istore 8 ,contw +0x79bb 034898 setarg 0x0388 +0x79bc 034899 istore 4 ,contw +0x79bd 034900 call sha +0x79be 034901 call sha_result +0x79bf 034902 arg memresult ,contr +0x79c0 034903 arg memahsave ,contw +0x79c1 034904 call memcpy32 +0x79c2 034906 setarg 0x5c5c5c +0x79c3 034907 lshift8 pdata ,temp +0x79c4 034908 or_into 0x5c ,temp +0x79c5 034909 fetch 2 ,mem_sp_prarm_stack +0x79c6 034910 copy pdata ,contr +0x79c7 034911 force 4 ,loopcnt +0x79c8 034912 call pad_xor +0x79c9 034913 call sha_init +0x79ca 034914 call sha +0x79cb 034915 arg memahsave_end ,contr +0x79cc 034916 arg memdat ,contw +0x79cd 034917 force 8 ,loopcnt +0x79ce 034918 call memcpy_dword_swap +0x79cf 034919 setarg 0x800000 +0x79d0 034920 lshift8 pdata ,pdata +0x79d1 034921 istore 4 ,contw +0x79d2 034922 call bn_zero +0x79d3 034923 setarg 0x0300 +0x79d4 034924 istore 4 ,contw +0x79d5 034925 call sha +0x79d6 034926 branch sha_result +: 034929 function_f2: +0x79d7 034930 setarg 0x363636 +0x79d8 034931 lshift8 pdata ,temp +0x79d9 034932 or_into 0x36 ,temp +0x79da 034933 arg mem_sp_dhkey_end ,contr +0x79db 034934 force 6 ,loopcnt +0x79dc 034935 call pad_xor +0x79dd 034936 call sha_init +0x79de 034937 call sha +0x79df 034938 fetch 2 ,mem_sp_prarm_stack + 12 +0x79e0 034939 copy pdata ,contr +0x79e1 034940 arg memdat ,contw +0x79e2 034941 call memcpy_dword_swap4 +0x79e3 034942 fetch 2 ,mem_sp_prarm_stack + 14 +0x79e4 034943 copy pdata ,contr +0x79e5 034944 call memcpy_dword_swap4 +0x79e6 034946 setarg 0x62746c +0x79e7 034947 lshift8 pdata ,pdata +0x79e8 034948 or_into 0x6b ,pdata +0x79e9 034949 istore 4 ,contw +0x79ea 034950 arg mem_addr_value_end ,contr +0x79eb 034951 force 3 ,loopcnt +0x79ec 034952 call memcpy_dword_swap +0x79ed 034954 setarg 0x800000 +0x79ee 034955 lshift8 pdata ,pdata +0x79ef 034956 istore 4 ,contw +0x79f0 034957 force 0 ,pdata +0x79f1 034958 istore 8 ,contw +0x79f2 034959 setarg 0x0380 +0x79f3 034960 istore 4 ,contw +0x79f4 034961 call sha +0x79f5 034963 call sha_result +0x79f6 034964 arg memresult ,contr +0x79f7 034965 arg memahsave ,contw +0x79f8 034966 call memcpy32 +0x79f9 034968 setarg 0x5c5c5c +0x79fa 034969 lshift8 pdata ,temp +0x79fb 034970 or_into 0x5c ,temp +0x79fc 034971 arg mem_sp_dhkey_end ,contr +0x79fd 034972 force 6 ,loopcnt +0x79fe 034973 call pad_xor +0x79ff 034974 call sha_init +0x7a00 034975 call sha +0x7a01 034976 arg memahsave_end ,contr +0x7a02 034977 arg memdat ,contw +0x7a03 034978 force 8 ,loopcnt +0x7a04 034979 call memcpy_dword_swap +0x7a05 034980 setarg 0x800000 +0x7a06 034981 lshift8 pdata ,pdata +0x7a07 034982 istore 4 ,contw +0x7a08 034983 call bn_zero +0x7a09 034984 setarg 0x0300 +0x7a0a 034985 istore 4 ,contw +0x7a0b 034986 call sha +0x7a0c 034987 branch sha_result +: 034990 function_f3a: +0x7a0d 034991 fetch 1 ,mem_ssp_mode_flag +0x7a0e 034992 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin +: 034993 function_f3a_common: +0x7a0f 034994 bpatchx patch3d_6 ,mem_patch3d +0x7a10 034995 setarg 0x363636 +0x7a11 034996 lshift8 pdata ,temp +0x7a12 034997 or_into 0x36 ,temp +0x7a13 034998 arg mem_sp_dhkey_end ,contr +0x7a14 034999 force 6 ,loopcnt +0x7a15 035000 call pad_xor +0x7a16 035001 call sha_init +0x7a17 035002 call sha +0x7a18 035003 arg mem_sp_random_remote_end ,contr +0x7a19 035004 arg memdat ,contw +0x7a1a 035005 call memcpy_dword_swap4 +0x7a1b 035006 arg mem_sp_random_local_end ,contr +0x7a1c 035007 call memcpy_dword_swap4 +0x7a1d 035008 branch function_f3_common +: 035010 function_f3a_no_pin: +0x7a1e 035011 setarg 0 +0x7a1f 035012 store 4 ,mem_pin +0x7a20 035013 branch function_f3a_common +: 035015 function_f3b_no_pin: +0x7a21 035016 setarg 0 +0x7a22 035017 store 4 ,mem_pin +0x7a23 035018 branch function_f3b_common +: 035021 function_f3b: +0x7a24 035022 fetch 1 ,mem_ssp_mode_flag +0x7a25 035023 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin +: 035024 function_f3b_common: +0x7a26 035025 setarg 0x363636 +0x7a27 035026 lshift8 pdata ,temp +0x7a28 035027 or_into 0x36 ,temp +0x7a29 035028 arg mem_sp_dhkey_end ,contr +0x7a2a 035029 force 6 ,loopcnt +0x7a2b 035030 call pad_xor +0x7a2c 035031 call sha_init +0x7a2d 035032 call sha +0x7a2e 035034 arg mem_sp_random_local_end ,contr +0x7a2f 035035 arg memdat ,contw +0x7a30 035036 call memcpy_dword_swap4 +0x7a31 035037 arg mem_sp_random_remote_end ,contr +0x7a32 035038 call memcpy_dword_swap4 +: 035039 function_f3_common: +0x7a33 035040 setarg 0x0 +0x7a34 035041 istore 8 ,contw +0x7a35 035042 istore 4 ,contw +0x7a36 035043 fetch 4 ,mem_pin +0x7a37 035044 istore 4 ,contw +0x7a38 035046 copy contw ,temp +0x7a39 035047 jam 0x80 ,mem_addr_padding +0x7a3a 035048 copy temp ,contw +0x7a3b 035049 arg mem_addr_iocap_end ,contr +0x7a3c 035050 call memcpy_dword_swap4 +0x7a3d 035052 call sha +0x7a3e 035054 arg memdat ,contw +0x7a3f 035055 force 7 ,loopcnt +0x7a40 035056 call memset0 +0x7a41 035057 istore 4 ,contw +0x7a42 035058 setarg 0x03F8 +0x7a43 035059 istore 4 ,contw +0x7a44 035060 call sha +0x7a45 035061 call sha_result +0x7a46 035063 arg memresult ,contr +0x7a47 035064 arg memahsave ,contw +0x7a48 035065 call memcpy32 +0x7a49 035067 setarg 0x5c5c5c +0x7a4a 035068 lshift8 pdata ,temp +0x7a4b 035069 or_into 0x5c ,temp +0x7a4c 035070 arg mem_sp_dhkey_end ,contr +0x7a4d 035071 force 6 ,loopcnt +0x7a4e 035072 call pad_xor +0x7a4f 035073 call sha_init +0x7a50 035074 call sha +0x7a51 035075 arg memahsave_end ,contr +0x7a52 035076 arg memdat ,contw +0x7a53 035077 force 8 ,loopcnt +0x7a54 035078 call memcpy_dword_swap +0x7a55 035079 setarg 0x800000 +0x7a56 035080 lshift8 pdata ,pdata +0x7a57 035081 istore 4 ,contw +0x7a58 035082 call bn_zero +0x7a59 035083 setarg 0x0300 +0x7a5a 035084 istore 4 ,contw +0x7a5b 035085 call sha +0x7a5c 035086 branch sha_result +: 035093 eckp_calc_init: +0x7a5d 035094 jam 192 ,mem_ec_loopc +: 035095 eckp_calc_init_1: +0x7a5e 035096 fetch 1 ,mem_ec_loopc +0x7a5f 035097 rtn blank +0x7a60 035098 increase -1 ,pdata +0x7a61 035099 store 1 ,mem_ec_loopc +0x7a62 035100 arg mem_k ,contr +0x7a63 035101 call bn_testbit +0x7a64 035102 branch eckp_calc_init_1 ,true +0x7a65 035103 arg mem_ax ,contr +0x7a66 035104 arg mem_cx ,contw +0x7a67 035105 branch ec_copy +: 035107 eckp_calc: +0x7a68 035108 call ecdbl +0x7a69 035109 fetch 1 ,mem_ec_loopc +0x7a6a 035110 increase -1 ,pdata +0x7a6b 035111 store 1 ,mem_ec_loopc +0x7a6c 035112 arg mem_k ,contr +0x7a6d 035113 call bn_testbit +0x7a6e 035114 rtn true +0x7a6f 035115 branch ecadd +: 035117 memcpy_dword_swap4: +0x7a70 035118 force 4 ,loopcnt +: 035119 memcpy_dword_swap: +0x7a71 035120 increase -4 ,contr +: 035121 memcpy_dword_swap_loop: +0x7a72 035122 ifetch 4 ,contr +0x7a73 035123 istore 4 ,contw +0x7a74 035124 increase -8 ,contr +0x7a75 035125 loop memcpy_dword_swap_loop +0x7a76 035126 rtn +: 035131 sp_initialize_256: +0x7a77 035132 bpatchx patch3d_7 ,mem_patch3d +0x7a78 035133 fetch 1 ,mem_le_secure_connect_enable +0x7a79 035134 branch le_secure_connection_disable ,blank +0x7a7a 035135 call le_secure_connection_enable +0x7a7b 035136 call sp_clear_flags +0x7a7c 035138 branch sp_pubkey_calc_256 +: 035143 sp_pubkey_calc_256: +0x7a7d 035144 fetch 1 ,mem_le_sc_local_key_invalid +0x7a7e 035145 rtnne sp_key_invalid +0x7a7f 035146 fetch 1 ,mem_le_sc_calc +0x7a80 035147 rtnne sp_calc_standby +0x7a81 035149 arg mem_le_private_key_256 ,contw +0x7a82 035150 force 15 ,queue +0x7a83 035151 call random_generator +0x7a84 035152 random pdata +0x7a85 035153 rshift pdata ,pdata +0x7a86 035154 istore 2 ,contw +0x7a87 035156 arg mem_k_256 ,contw +0x7a88 035157 arg mem_le_private_key_256 ,contr +0x7a89 035158 call memcpy32 +0x7a8a 035160 arg mem_ax_256 ,contw +0x7a8b 035161 arg mem_gx_256 ,contr +0x7a8c 035162 call memcpy64 +0x7a8d 035164 arg mem_az_256 ,contw +0x7a8e 035165 call clear_mem_256 +0x7a8f 035166 jam 1 ,mem_az_256 +0x7a90 035168 call eckp_calc_init_256 +0x7a91 035169 jam sp_calc_pubkey_256 ,mem_le_sc_calc +0x7a92 035170 rtn +: 035172 sp_pubkey_generated_256: +0x7a93 035173 arg mem_le_pubkey_local_x_256 ,contw +0x7a94 035174 arg mem_bx_256 ,contr +0x7a95 035175 call memcpy64 +0x7a96 035176 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid +0x7a97 035177 jam sp_calc_standby ,mem_le_sc_calc +0x7a98 035178 rtn +: 035182 sp_dhkey_calc_256: +0x7a99 035183 fetch 1 ,mem_sp_dhkey_invalid +0x7a9a 035184 rtnne sp_key_invalid +0x7a9b 035185 fetch 1 ,mem_le_sc_calc +0x7a9c 035186 rtnne sp_calc_standby +0x7a9d 035188 arg mem_k_256 ,contw +0x7a9e 035189 arg mem_le_private_key_256 ,contr +0x7a9f 035190 call memcpy32 +0x7aa0 035192 arg mem_ax_256 ,contw +0x7aa1 035193 arg mem_le_pubkey_remote_x_256 ,contr +0x7aa2 035194 call memcpy64 +0x7aa3 035196 arg mem_az_256 ,contw +0x7aa4 035197 call clear_mem_256 +0x7aa5 035198 jam 1 ,mem_az_256 +0x7aa6 035200 call eckp_calc_init_256 +0x7aa7 035201 jam sp_calc_dhkey_256 ,mem_le_sc_calc +0x7aa8 035202 rtn +: 035205 sp_dhkey_generated_256: +0x7aa9 035207 arg mem_le_dhkey_256 ,contw +0x7aaa 035208 arg mem_bx_256 ,contr +0x7aab 035209 call memcpy32 +0x7aac 035210 jam sp_key_valid_256 ,mem_sp_dhkey_invalid +0x7aad 035211 jam sp_calc_standby ,mem_le_sc_calc +0x7aae 035212 rtn +: 035216 sp_calc_sequence_256: +0x7aaf 035217 fetch 1 ,mem_le_secure_connect_enable +0x7ab0 035218 rtn blank +0x7ab1 035219 fetch 1 ,mem_le_sc_calc +0x7ab2 035220 rtn blank +0x7ab3 035221 increase 0x80 ,pdata +0x7ab4 035222 store 1 ,mem_le_sc_calc +0x7ab5 035223 rtnbit1 7 +0x7ab6 035224 fetch 2 ,mem_ec_loopc +0x7ab7 035225 branch sp_calc_sequence_done_256 ,blank +0x7ab8 035226 branch eckp_calc_256 +: 035228 sp_calc_sequence_done_256: +0x7ab9 035229 bpatchx patch3e_0 ,mem_patch3e +0x7aba 035230 call ecunmapz_256 +0x7abb 035231 fetch 1 ,mem_le_sc_calc +0x7abc 035232 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 +0x7abd 035233 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 +0x7abe 035234 rtn +: 035237 eckp_calc_256: +0x7abf 035238 call ecdbl_256 +0x7ac0 035239 fetch 2 ,mem_ec_loopc +0x7ac1 035240 increase -1 ,pdata +0x7ac2 035241 store 2 ,mem_ec_loopc +0x7ac3 035242 arg mem_k_256 ,contr +0x7ac4 035243 call bn_testbit +0x7ac5 035244 rtn true +0x7ac6 035245 branch ecadd_256 +: 035247 eckp_calc_init_256: +0x7ac7 035248 bpatchx patch3e_1 ,mem_patch3e +0x7ac8 035249 setarg 256 ,pdata +0x7ac9 035250 store 2 ,mem_ec_loopc +: 035251 eckp_calc_init_256_1: +0x7aca 035252 fetch 2 ,mem_ec_loopc +0x7acb 035253 rtn blank +0x7acc 035254 increase -1 ,pdata +0x7acd 035255 store 2 ,mem_ec_loopc +0x7ace 035256 arg mem_k_256 ,contr +0x7acf 035257 call bn_testbit +0x7ad0 035258 branch eckp_calc_init_256_1 ,true +0x7ad1 035259 arg mem_ax_256 ,contr +0x7ad2 035260 arg mem_cx_256 ,contw +0x7ad3 035261 branch memcpy96 +: 035264 ecunmapz_256: +0x7ad4 035265 arg mem_cz_256 ,rega +0x7ad5 035266 arg mem_t3_256 ,contw +0x7ad6 035267 call bn_invmod_256 +0x7ad7 035268 arg mem_t3_256 ,rega +0x7ad8 035269 arg mem_t1_256 ,contw +0x7ad9 035270 call bn_sqrmod_256 +0x7ada 035271 arg mem_cx_256 ,rega +0x7adb 035272 arg mem_t1_256 ,regb +0x7adc 035273 arg mem_bx_256 ,contw +0x7add 035274 call bn_mulmod_256 +0x7ade 035275 arg mem_t3_256 ,rega +0x7adf 035276 arg mem_t1_256 ,regb +0x7ae0 035277 arg mem_t2_256 ,contw +0x7ae1 035278 call bn_mulmod_256 +0x7ae2 035279 arg mem_cy_256 ,rega +0x7ae3 035280 arg mem_t2_256 ,regb +0x7ae4 035281 arg mem_by_256 ,contw +0x7ae5 035282 branch bn_mulmod_256 +: 035284 ecdbl_256: +0x7ae6 035285 arg mem_cz_256 ,rega +0x7ae7 035286 arg mem_t2_256 ,contw +0x7ae8 035287 call bn_sqrmod_256 +0x7ae9 035288 arg mem_t2_256 ,rega +0x7aea 035289 arg mem_t3_256 ,contw +0x7aeb 035290 call bn_sqrmod_256 +0x7aec 035292 arg mem_a_256 ,rega +0x7aed 035293 arg mem_t3_256 ,regb +0x7aee 035294 arg mem_t3_256 ,contw +0x7aef 035295 call bn_mulmod_256 +0x7af0 035296 arg mem_cx_256 ,rega +0x7af1 035297 arg mem_t2_256 ,contw +0x7af2 035298 call bn_sqrmod_256 +0x7af3 035300 arg mem_t2_256 ,contr +0x7af4 035301 arg mem_t1_256 ,contw +0x7af5 035302 call memcpy32 +0x7af6 035303 arg mem_t1_256 ,rega +0x7af7 035304 call bn_lshiftmod_256 +0x7af8 035305 arg mem_t2_256 ,rega +0x7af9 035306 arg mem_t1_256 ,regb +0x7afa 035307 arg mem_t2_256 ,contw +0x7afb 035308 call bn_addmod_256 +0x7afc 035310 arg mem_t2_256 ,rega +0x7afd 035311 arg mem_t3_256 ,regb +0x7afe 035312 arg mem_t2_256 ,contw +0x7aff 035313 call bn_addmod_256 +0x7b00 035315 arg mem_cx_256 ,contr +0x7b01 035316 arg mem_t1_256 ,contw +0x7b02 035317 call memcpy32 +0x7b03 035318 arg mem_cy_256 ,rega +0x7b04 035319 arg mem_t3_256 ,contw +0x7b05 035320 call bn_sqrmod_256 +0x7b06 035321 arg mem_t1_256 ,rega +0x7b07 035322 call bn_lshiftmod_256 +0x7b08 035323 arg mem_t1_256 ,rega +0x7b09 035324 call bn_lshiftmod_256 +0x7b0a 035325 arg mem_t1_256 ,rega +0x7b0b 035326 arg mem_t3_256 ,regb +0x7b0c 035327 arg mem_t1_256 ,contw +0x7b0d 035328 call bn_mulmod_256 +0x7b0e 035329 arg mem_t3_256 ,rega +0x7b0f 035330 arg mem_t0_256 ,contw +0x7b10 035331 call bn_sqrmod_256 +0x7b11 035332 arg mem_t0_256 ,rega +0x7b12 035333 call bn_lshiftmod_256 +0x7b13 035334 arg mem_t0_256 ,rega +0x7b14 035335 call bn_lshiftmod_256 +0x7b15 035336 arg mem_t0_256 ,rega +0x7b16 035337 call bn_lshiftmod_256 +0x7b17 035338 arg mem_cy_256 ,contr +0x7b18 035339 arg mem_t3_256 ,contw +0x7b19 035340 call memcpy32 +0x7b1a 035341 arg mem_t3_256 ,rega +0x7b1b 035342 call bn_lshiftmod_256 +0x7b1c 035343 arg mem_t3_256 ,rega +0x7b1d 035344 arg mem_cz_256 ,regb +0x7b1e 035345 arg mem_cz_256 ,contw +0x7b1f 035346 call bn_mulmod_256 +0x7b20 035349 arg mem_t2_256 ,rega +0x7b21 035350 arg mem_t3_256 ,contw +0x7b22 035351 call bn_sqrmod_256 +0x7b23 035353 arg mem_t3_256 ,rega +0x7b24 035354 arg mem_t1_256 ,regb +0x7b25 035355 arg mem_t3_256 ,contw +0x7b26 035356 call bn_submod_256 +0x7b27 035357 arg mem_t3_256 ,rega +0x7b28 035358 arg mem_t1_256 ,regb +0x7b29 035359 arg mem_cx_256 ,contw +0x7b2a 035360 call bn_submod_256 +0x7b2b 035361 arg mem_t1_256 ,rega +0x7b2c 035362 arg mem_cx_256 ,regb +0x7b2d 035363 arg mem_t3_256 ,contw +0x7b2e 035364 call bn_submod_256 +0x7b2f 035365 arg mem_t3_256 ,rega +0x7b30 035366 arg mem_t2_256 ,regb +0x7b31 035367 arg mem_t3_256 ,contw +0x7b32 035368 call bn_mulmod_256 +0x7b33 035369 arg mem_t3_256 ,rega +0x7b34 035370 arg mem_t0_256 ,regb +0x7b35 035371 arg mem_cy_256 ,contw +0x7b36 035372 branch bn_submod_256 +: 035374 ecadd_256: +0x7b37 035376 arg mem_az_256 ,rega +0x7b38 035377 arg mem_t7_256 ,contw +0x7b39 035378 call bn_sqrmod_256 +0x7b3a 035379 arg mem_cx_256 ,rega +0x7b3b 035380 arg mem_t7_256 ,regb +0x7b3c 035381 arg mem_t0_256 ,contw +0x7b3d 035382 call bn_mulmod_256 +0x7b3e 035385 arg mem_az_256 ,rega +0x7b3f 035386 arg mem_t7_256 ,regb +0x7b40 035387 arg mem_t7_256 ,contw +0x7b41 035388 call bn_mulmod_256 +0x7b42 035389 arg mem_cy_256 ,rega +0x7b43 035390 arg mem_t7_256 ,regb +0x7b44 035391 arg mem_t1_256 ,contw +0x7b45 035392 call bn_mulmod_256 +0x7b46 035395 arg mem_cz_256 ,rega +0x7b47 035396 arg mem_t7_256 ,contw +0x7b48 035397 call bn_sqrmod_256 +0x7b49 035398 arg mem_ax_256 ,rega +0x7b4a 035399 arg mem_t7_256 ,regb +0x7b4b 035400 arg mem_t2_256 ,contw +0x7b4c 035401 call bn_mulmod_256 +0x7b4d 035403 arg mem_cz_256 ,rega +0x7b4e 035404 arg mem_t7_256 ,regb +0x7b4f 035405 arg mem_t7_256 ,contw +0x7b50 035406 call bn_mulmod_256 +0x7b51 035407 arg mem_ay_256 ,rega +0x7b52 035408 arg mem_t7_256 ,regb +0x7b53 035409 arg mem_t3_256 ,contw +0x7b54 035410 call bn_mulmod_256 +0x7b55 035415 arg mem_t0_256 ,regb +0x7b56 035416 arg mem_t2_256 ,rega +0x7b57 035417 arg mem_t7_256 ,contw +0x7b58 035418 call bn_submod_256 +0x7b59 035419 arg mem_t0_256 ,rega +0x7b5a 035420 arg mem_t2_256 ,regb +0x7b5b 035421 arg mem_t0_256 ,contw +0x7b5c 035422 call bn_addmod_256 +0x7b5d 035425 arg mem_t1_256 ,regb +0x7b5e 035426 arg mem_t3_256 ,rega +0x7b5f 035427 arg mem_t2_256 ,contw +0x7b60 035428 call bn_submod_256 +0x7b61 035429 arg mem_t1_256 ,rega +0x7b62 035430 arg mem_t3_256 ,regb +0x7b63 035431 arg mem_t1_256 ,contw +0x7b64 035432 call bn_addmod_256 +0x7b65 035433 arg mem_t1_256 ,rega +0x7b66 035434 arg mem_t7_256 ,regb +0x7b67 035435 arg mem_t1_256 ,contw +0x7b68 035436 call bn_mulmod_256 +0x7b69 035437 arg mem_cz_256 ,rega +0x7b6a 035438 arg mem_az_256 ,regb +0x7b6b 035439 arg mem_t3_256 ,contw +0x7b6c 035440 call bn_mulmod_256 +0x7b6d 035441 arg mem_t3_256 ,rega +0x7b6e 035442 arg mem_t7_256 ,regb +0x7b6f 035443 arg mem_cz_256 ,contw +0x7b70 035444 call bn_mulmod_256 +0x7b71 035446 arg mem_t7_256 ,rega +0x7b72 035447 arg mem_t7_256 ,contw +0x7b73 035448 call bn_sqrmod_256 +0x7b74 035449 arg mem_t7_256 ,rega +0x7b75 035450 arg mem_t0_256 ,regb +0x7b76 035451 arg mem_t3_256 ,contw +0x7b77 035452 call bn_mulmod_256 +0x7b78 035453 arg mem_t7_256 ,rega +0x7b79 035454 arg mem_t1_256 ,regb +0x7b7a 035455 arg mem_t1_256 ,contw +0x7b7b 035456 call bn_mulmod_256 +0x7b7c 035457 arg mem_t2_256 ,rega +0x7b7d 035458 arg mem_cx_256 ,contw +0x7b7e 035459 call bn_sqrmod_256 +0x7b7f 035460 arg mem_cx_256 ,rega +0x7b80 035461 arg mem_t3_256 ,regb +0x7b81 035462 arg mem_cx_256 ,contw +0x7b82 035463 call bn_submod_256 +0x7b83 035464 arg mem_cx_256 ,contr +0x7b84 035465 arg mem_t7_256 ,contw +0x7b85 035466 call memcpy32 +0x7b86 035467 arg mem_t7_256 ,rega +0x7b87 035468 call bn_lshiftmod_256 +0x7b88 035469 arg mem_t3_256 ,rega +0x7b89 035470 arg mem_t7_256 ,regb +0x7b8a 035471 arg mem_t3_256 ,contw +0x7b8b 035472 call bn_submod_256 +0x7b8c 035473 arg mem_t3_256 ,rega +0x7b8d 035474 arg mem_t2_256 ,regb +0x7b8e 035475 arg mem_t2_256 ,contw +0x7b8f 035476 call bn_mulmod_256 +0x7b90 035477 arg mem_t2_256 ,rega +0x7b91 035478 arg mem_t1_256 ,regb +0x7b92 035479 arg mem_cy_256 ,contw +0x7b93 035480 call bn_submod_256 +0x7b94 035481 arg mem_cy_256 ,rega +0x7b95 035482 arg mem_p_256 ,regb +0x7b96 035483 arg mem_cy_256 ,contw +0x7b97 035484 force 0 ,regc +0x7b98 035485 fetch 1 ,mem_cy_256 +0x7b99 035486 isolate1 0 ,pdata +0x7b9a 035487 call bn_add_256 ,true +0x7b9b 035488 copy regc ,alarm +0x7b9c 035489 arg mem_cy_256 ,rega +0x7b9d 035490 call bn_rshift_256 +0x7b9e 035491 fetch 1 ,mem_cy5_256 +0x7b9f 035492 isolate1 0 ,alarm +0x7ba0 035493 setflag true ,7 ,pdata +0x7ba1 035494 store 1 ,mem_cy5_256 +0x7ba2 035495 rtn +: 035497 bn_invmod_256: +0x7ba3 035498 copy contw ,timeup +0x7ba4 035499 arg mem_tmp0_256 ,contw +0x7ba5 035500 call clear_mem_256 +0x7ba6 035501 force 0 ,pdata +0x7ba7 035503 store 4 ,mem_t2_256 +0x7ba8 035504 jam 1 ,mem_tmp0_256 +0x7ba9 035505 arg mem_tmp1_256 ,contw +0x7baa 035506 call clear_mem_512 +0x7bab 035507 arg mem_p_256 ,contr +0x7bac 035508 arg mem_tmp2_256 ,contw +0x7bad 035509 call memcpy32 +0x7bae 035510 copy rega ,contr +0x7baf 035511 arg mem_tmp3_256 ,contw +0x7bb0 035512 call memcpy32 +: 035518 bn_invmod_256_2: +0x7bb1 035519 arg mem_tmp3_256 ,contr +0x7bb2 035520 call bn_eq_zero_256 +0x7bb3 035521 branch bn_invmod_256_0 ,blank +0x7bb4 035526 arg mem_tmp3_256 ,rega +0x7bb5 035527 arg mem_tmp0_256 ,regb +0x7bb6 035528 call bn_rshifteven_256 +0x7bb7 035529 arg mem_tmp2_256 ,rega +0x7bb8 035530 arg mem_tmp1_256 ,regb +0x7bb9 035531 call bn_rshifteven_256 +0x7bba 035533 arg mem_tmp3_256 ,rega +0x7bbb 035534 arg mem_tmp2_256 ,regb +0x7bbc 035535 call bn_bigeq_256 +0x7bbd 035536 branch bn_invmod_256_1 ,positive +0x7bbe 035537 arg mem_tmp2_256 ,rega +0x7bbf 035538 arg mem_tmp3_256 ,regb +0x7bc0 035539 copy rega ,contw +0x7bc1 035540 call bn_sub_256 +0x7bc2 035541 arg mem_tmp0_256 ,rega +0x7bc3 035542 arg mem_tmp1_256 ,regb +0x7bc4 035543 copy regb ,contw +0x7bc5 035544 call bn_add_256 +0x7bc6 035545 ifetch 1 ,rega +0x7bc7 035546 iadd regc ,regc +0x7bc8 035547 ifetch 1 ,regb +0x7bc9 035548 iadd regc ,pdata +0x7bca 035549 istore 1 ,regb +0x7bcb 035550 branch bn_invmod_256_2 +: 035551 bn_invmod_256_1: +0x7bcc 035552 arg mem_tmp3_256 ,rega +0x7bcd 035553 arg mem_tmp2_256 ,regb +0x7bce 035554 copy rega ,contw +0x7bcf 035555 call bn_sub_256 +0x7bd0 035556 arg mem_tmp1_256 ,rega +0x7bd1 035557 arg mem_tmp0_256 ,regb +0x7bd2 035558 copy regb ,contw +0x7bd3 035559 call bn_add_256 +0x7bd4 035560 ifetch 1 ,rega +0x7bd5 035561 iadd regc ,regc +0x7bd6 035562 ifetch 1 ,regb +0x7bd7 035563 iadd regc ,pdata +0x7bd8 035564 istore 1 ,regb +0x7bd9 035565 branch bn_invmod_256_2 +: 035566 bn_invmod_256_0: +0x7bda 035568 arg mem_tmp1_256 ,rega +0x7bdb 035569 copy timeup ,contw +0x7bdc 035570 call bn_p256mod +0x7bdd 035572 arg mem_p_256 ,rega +0x7bde 035573 copy timeup ,regb +0x7bdf 035574 copy timeup ,contw +0x7be0 035575 branch bn_submod_256 +: 035578 bn_mulmod_256: +0x7be1 035579 copy contw ,timeup +0x7be2 035581 force 0 ,regext_index +0x7be3 035583 arg mem_tmp1_256 ,contw +0x7be4 035584 call clear_mem_512 +0x7be5 035585 arg mem_regext ,contw +0x7be6 035586 call clear_mem_512 +0x7be7 035590 copy rega ,contr +0x7be8 035592 jam 0 ,mem_regext +0x7be9 035593 setarg 0 +0x7bea 035594 call bn_load_mem +0x7beb 035595 copy regb ,contr +0x7bec 035596 call bn_load_256 +0x7bed 035599 force 0 ,queue +0x7bee 035600 arg mem_tmp1_256 ,contw +: 035601 bn_mulmod_256_1: +0x7bef 035604 arg mem_regext ,temp +0x7bf0 035605 copy queue ,regb +0x7bf1 035606 lshift2 regb ,pdata +0x7bf2 035608 iadd temp ,regb +0x7bf3 035609 force 0 ,temp +0x7bf4 035610 force 0 ,regc +: 035611 bn_mulmod_256_0: +0x7bf5 035616 ifetch 4 ,contw +0x7bf6 035617 iforce rega +0x7bf7 035620 ifetch 4 ,regb +0x7bf8 035621 copy regc ,regext_index +0x7bf9 035622 imul32 regext ,pdata +0x7bfa 035623 iadd rega ,pdata +0x7bfb 035624 iadd temp ,pdata +0x7bfc 035625 istore 4 ,contw +0x7bfd 035626 rshift32 pdata ,temp +0x7bfe 035627 increase 1 ,regc +0x7bff 035628 compare 8 ,regc ,0xff +0x7c00 035629 nbranch bn_mulmod_256_0 ,true +0x7c01 035631 deposit temp +0x7c02 035632 istore 4 ,contw +0x7c03 035633 increase -32 ,contw +0x7c04 035636 increase 1 ,queue +0x7c05 035637 compare 8 ,queue ,0xff +0x7c06 035638 nbranch bn_mulmod_256_1 ,true +0x7c07 035639 arg mem_tmp1_256 ,rega +0x7c08 035640 copy timeup ,contw +0x7c09 035641 branch bn_p256mod +: 035643 bn_p256mod: +0x7c0a 035644 bpatchx patch3e_2 ,mem_patch3e +0x7c0b 035645 copy contw ,timeup +0x7c0c 035646 copy rega ,alarm +0x7c0d 035647 arg mem_tmp2_256 ,regb +0x7c0e 035648 copy regb ,contw +0x7c0f 035649 call memset0_4 +0x7c10 035650 istore 8 ,contw +0x7c11 035651 add rega ,44 ,contr +0x7c12 035652 call memcpy8 +0x7c13 035653 call memcpy12 +0x7c14 035654 copy regb ,rega +0x7c15 035655 call bn_lshiftmod_256 +0x7c16 035656 arg mem_tmp2_256 ,regb +0x7c17 035657 copy alarm ,rega +0x7c18 035658 copy timeup ,contw +0x7c19 035659 call bn_addmod_256 +0x7c1a 035661 arg mem_tmp2_256 ,regb +0x7c1b 035662 copy regb ,contw +0x7c1c 035663 call memset0_4 +0x7c1d 035664 istore 8 ,contw +0x7c1e 035665 add alarm ,48 ,contr +0x7c1f 035666 call memcpy16 +0x7c20 035667 call memset0_4 +0x7c21 035668 copy regb ,rega +0x7c22 035669 call bn_lshiftmod_256 +0x7c23 035673 arg mem_tmp2_256 ,regb +0x7c24 035674 copy timeup ,rega +0x7c25 035675 copy rega ,contw +0x7c26 035676 call bn_addmod_256 +0x7c27 035680 arg mem_tmp2_256 ,regb +0x7c28 035681 copy regb ,contw +0x7c29 035682 add alarm ,32 ,contr +0x7c2a 035683 call memcpy12 +0x7c2b 035684 call memset0_4 +0x7c2c 035685 istore 8 ,contw +0x7c2d 035686 add alarm ,56 ,contr +0x7c2e 035687 call memcpy8 +0x7c2f 035688 copy timeup ,rega +0x7c30 035689 copy rega ,contw +0x7c31 035690 call bn_addmod_256 +0x7c32 035694 arg mem_tmp2_256 ,regb +0x7c33 035695 copy regb ,contw +0x7c34 035696 add alarm ,36 ,contr +0x7c35 035697 call memcpy12 +0x7c36 035698 add alarm ,52 ,contr +0x7c37 035699 call memcpy12 +0x7c38 035700 add alarm ,52 ,contr +0x7c39 035701 call memcpy4 +0x7c3a 035702 add alarm ,32 ,contr +0x7c3b 035703 call memcpy4 +0x7c3c 035704 copy timeup ,rega +0x7c3d 035705 copy rega ,contw +0x7c3e 035706 call bn_addmod_256 +0x7c3f 035709 arg mem_tmp2_256 ,regb +0x7c40 035710 copy regb ,contw +0x7c41 035711 add alarm ,44 ,contr +0x7c42 035712 call memcpy12 +0x7c43 035713 call memset0_4 +0x7c44 035714 istore 8 ,contw +0x7c45 035715 add alarm ,32 ,contr +0x7c46 035716 call memcpy4 +0x7c47 035717 add alarm ,40 ,contr +0x7c48 035718 call memcpy4 +0x7c49 035719 copy timeup ,rega +0x7c4a 035720 copy rega ,contw +0x7c4b 035721 call bn_submod_256 +0x7c4c 035724 arg mem_tmp2_256 ,regb +0x7c4d 035725 copy regb ,contw +0x7c4e 035726 add alarm ,48 ,contr +0x7c4f 035727 call memcpy8 +0x7c50 035728 call memcpy8 +0x7c51 035729 force 0 ,pdata +0x7c52 035730 istore 8 ,contw +0x7c53 035731 add alarm ,36 ,contr +0x7c54 035732 call memcpy4 +0x7c55 035733 add alarm ,44 ,contr +0x7c56 035734 call memcpy4 +0x7c57 035735 copy timeup ,rega +0x7c58 035736 copy rega ,contw +0x7c59 035737 call bn_submod_256 +0x7c5a 035740 arg mem_tmp2_256 ,regb +0x7c5b 035741 copy regb ,contw +0x7c5c 035742 add alarm ,52 ,contr +0x7c5d 035743 call memcpy12 +0x7c5e 035744 add alarm ,32 ,contr +0x7c5f 035745 call memcpy12 +0x7c60 035746 call memset0_4 +0x7c61 035747 add alarm ,48 ,contr +0x7c62 035748 call memcpy4 +0x7c63 035749 copy timeup ,rega +0x7c64 035750 copy rega ,contw +0x7c65 035751 call bn_submod_256 +0x7c66 035754 arg mem_tmp2_256 ,regb +0x7c67 035755 copy regb ,contw +0x7c68 035756 add alarm ,56 ,contr +0x7c69 035757 call memcpy8 +0x7c6a 035758 call memset0_4 +0x7c6b 035759 add alarm ,36 ,contr +0x7c6c 035760 call memcpy12 +0x7c6d 035761 call memset0_4 +0x7c6e 035762 add alarm ,52 ,contr +0x7c6f 035763 call memcpy4 +0x7c70 035764 copy timeup ,rega +0x7c71 035765 copy rega ,contw +0x7c72 035766 branch bn_submod_256 +: 035769 bn_load_mem: +0x7c73 035770 force 32 ,loopcnt +0x7c74 035771 arg mem_regext ,contw +0x7c75 035772 iadd contw ,contw +0x7c76 035773 branch memcpy +: 035775 bn_load_256: +0x7c77 035776 force 8 ,loopcnt +0x7c78 035777 branch bn_load_0 +: 035779 bn_sqrmod_256: +0x7c79 035780 copy rega ,regb +0x7c7a 035781 branch bn_mulmod_256 +: 035783 bn_add_256: +0x7c7b 035784 force 8 ,loopcnt +0x7c7c 035785 branch bn_add + 1 +: 035787 bn_addmod_256: +0x7c7d 035788 call bn_add_256 +0x7c7e 035789 copy contw ,rega +0x7c7f 035790 branch bn_lshiftmod_ismod_256 +: 035792 bn_lshiftmod_256: +0x7c80 035793 call bn_lshift_256 +: 035794 bn_lshiftmod_ismod_256: +0x7c81 035795 isolate1 0 ,regc +0x7c82 035796 branch bn_lshiftmod_p_256 ,true +0x7c83 035797 arg mem_p_256 ,regb +0x7c84 035798 copy rega ,regc +0x7c85 035799 increase -32 ,rega +0x7c86 035800 call bn_bigeq_256 +0x7c87 035801 nrtn positive +0x7c88 035802 copy regc ,rega +0x7c89 035803 branch sub_p2_256 +: 035805 bn_lshiftmod_p_256: +0x7c8a 035806 call sub_p2_256 +0x7c8b 035808 copy rega ,regc +0x7c8c 035809 increase -32 ,rega +0x7c8d 035810 arg mem_p_256 ,regb +0x7c8e 035811 call bn_bigeq_256 +0x7c8f 035812 nrtn positive +0x7c90 035813 copy regc ,rega +0x7c91 035814 branch sub_p2_256 +: 035817 sub_p2_256: +0x7c92 035818 increase -32 ,rega +0x7c93 035819 arg mem_p_256 ,regb +0x7c94 035820 copy rega ,contw +0x7c95 035821 branch bn_sub_256 +: 035826 bn_submod_256: +0x7c96 035827 call bn_sub_256 +0x7c97 035829 branch bn_submod_256_np ,true +0x7c98 035832 add contw ,-32 ,rega +0x7c99 035833 arg mem_p_256 ,regb +0x7c9a 035834 call bn_bigeq_256 +0x7c9b 035835 nrtn positive +0x7c9c 035836 arg mem_p_256 ,regb +0x7c9d 035837 add contw ,-32 ,rega +0x7c9e 035839 copy rega ,contw +0x7c9f 035840 branch bn_sub_256 +: 035841 bn_submod_256_np: +0x7ca0 035842 add contw ,-32 ,rega +0x7ca1 035843 arg mem_p_256 ,regb +0x7ca2 035844 copy rega ,contw +0x7ca3 035845 call bn_add_256 +0x7ca4 035847 rtn true +0x7ca5 035848 add contw ,-32 ,rega +0x7ca6 035849 arg mem_p_256 ,regb +0x7ca7 035850 copy rega ,contw +0x7ca8 035851 branch bn_add_256 +: 035855 bn_sub_256: +0x7ca9 035856 force 8 ,loopcnt +0x7caa 035857 branch bn_sub + 1 +: 035859 bn_rshift_256: +0x7cab 035860 force 8 ,loopcnt +0x7cac 035861 increase 28 ,rega +0x7cad 035862 branch bn_rshift +: 035864 bn_lshift_256: +0x7cae 035865 force 8 ,loopcnt +0x7caf 035866 force 0 ,regc +0x7cb0 035867 branch bn_lshift_0 +: 035869 bn_bigeq_256: +0x7cb1 035870 force 8 ,loopcnt +0x7cb2 035871 increase 28 ,rega +0x7cb3 035872 increase 28 ,regb +0x7cb4 035873 branch bn_bigeq_0 +: 035876 bn_eq_zero_256: +0x7cb5 035877 ifetch 8 ,contr +0x7cb6 035878 nrtn blank +0x7cb7 035879 branch bn_eq_zero +: 035884 bn_rshifteven_256: +0x7cb8 035885 copy rega ,alarm +: 035886 bn_rshifteven_256_1: +0x7cb9 035887 copy alarm ,rega +0x7cba 035888 ifetch 1 ,rega +0x7cbb 035889 isolate1 0 ,pdata +0x7cbc 035890 rtn true +0x7cbd 035891 call bn_rshift_256 +0x7cbe 035892 ifetch 1 ,regb +0x7cbf 035893 isolate0 0 ,pdata +0x7cc0 035894 branch bn_rshifteven_256_0 ,true +0x7cc1 035895 arg mem_p_256 ,rega +0x7cc2 035896 copy regb ,contw +0x7cc3 035897 call bn_add_256 +0x7cc4 035898 ifetch 1 ,regb +0x7cc5 035899 iadd regc ,pdata +0x7cc6 035900 istore 1 ,regb +0x7cc7 035901 increase -32 ,regb +: 035902 bn_rshifteven_256_0: +0x7cc8 035903 add regb ,32 ,rega +0x7cc9 035904 force 9 ,loopcnt +0x7cca 035905 call bn_rshift +0x7ccb 035906 branch bn_rshifteven_256_1 +: 035910 ui_init: +0x7ccc 035911 call lpm_disable_exen_output +0x7ccd 035912 rtn wake +0x7cce 035913 call ui_button_init +0x7ccf 035914 call ui_timer_init +0x7cd0 035915 branch ui_led_init_global +: 035917 ui_dispatch: +0x7cd1 035918 call ui_led_dispatch +0x7cd2 035920 branch ui_timer_check +: 035922 ui_button_init: +0x7cd3 035923 fetch 1 ,mem_ui_button_gpio +0x7cd4 035924 rtneq ui_button_gpio_disable +0x7cd5 035925 iforce temp +0x7cd6 035926 call gpio_config_output +0x7cd7 035927 fetcht 1 ,mem_ui_button_gpio +0x7cd8 035928 call gpio_out_inactive +0x7cd9 035929 nop 100 +0x7cda 035930 fetcht 1 ,mem_ui_button_gpio +0x7cdb 035931 call gpio_config_input +0x7cdc 035932 branch ui_button_polling +: 035936 ui_button_polling: +0x7cdd 035937 bpatchx patch3e_3 ,mem_patch3e +0x7cde 035938 fetch 1 ,mem_ui_button_gpio +0x7cdf 035939 rtneq ui_button_gpio_disable +0x7ce0 035940 copy pdata ,temp +0x7ce1 035941 call gpio_get_bit +0x7ce2 035942 nbranch ui_button_up ,true +: 035944 ui_button_down: +0x7ce3 035945 call ui_button_check_long_press +0x7ce4 035946 fetch 2 ,mem_ui_state_map +0x7ce5 035947 set1 ui_state_btn_down +0x7ce6 035948 store 2 ,mem_ui_state_map +0x7ce7 035949 fetch 1 ,mem_ui_button_last_state +0x7ce8 035950 rtneq ui_button_state_down +0x7ce9 035951 jam ui_button_state_down ,mem_ui_button_last_state +0x7cea 035953 fetch 1 ,mem_ui_button_timeout +0x7ceb 035954 store 1 ,mem_ui_button_timer +0x7cec 035955 call lpm_button_get_wake_lock +0x7ced 035956 jam bt_evt_button_down ,mem_fifo_temp +0x7cee 035957 branch ui_ipc_send_event +: 035958 ui_button_up: +0x7cef 035959 fetch 2 ,mem_ui_state_map +0x7cf0 035960 set0 ui_state_btn_down +0x7cf1 035961 store 2 ,mem_ui_state_map +0x7cf2 035962 fetch 1 ,mem_ui_button_last_state +0x7cf3 035963 rtneq ui_button_state_up +0x7cf4 035964 jam ui_button_state_up ,mem_ui_button_last_state +0x7cf5 035966 jam 0 ,mem_ui_button_timer +0x7cf6 035967 call lpm_button_clean_wake_lock +0x7cf7 035968 jam bt_evt_button_up ,mem_fifo_temp +0x7cf8 035969 branch ui_ipc_send_event +: 035971 ui_button_check_long_press: +0x7cf9 035972 fetch 1 ,mem_ui_button_timer +0x7cfa 035973 rtn blank +0x7cfb 035974 increase -1 ,pdata +0x7cfc 035975 store 1 ,mem_ui_button_timer +0x7cfd 035976 nrtn blank +0x7cfe 035978 jam bt_evt_button_long_pressed ,mem_fifo_temp +0x7cff 035979 branch ui_ipc_send_event +: 035981 lpm_button_get_wake_lock: +0x7d00 035982 arg wake_lock_button ,queue +0x7d01 035983 branch lpm_get_wake_lock +: 035985 lpm_button_clean_wake_lock: +0x7d02 035986 arg wake_lock_button ,queue +0x7d03 035987 branch lpm_put_wake_lock +: 036009 calc_curr_struct_prt: +0x7d04 036010 fetch 2 ,mem_ui_led_struct_ptr +0x7d05 036011 mul32 rega ,led_offset_length ,regb +0x7d06 036012 iadd regb ,regb +0x7d07 036013 rtn +: 036016 ui_led_init_global: +0x7d08 036017 fetch 1 ,mem_ui_led_struct_num +0x7d09 036018 rtn blank +0x7d0a 036019 copy pdata ,loopcnt +0x7d0b 036020 fetch 2 ,mem_ui_led_struct_ptr +0x7d0c 036021 copy pdata ,regb +: 036022 ui_led_init_loop: +0x7d0d 036023 add regb ,led_offset_led_gpio ,regc +0x7d0e 036024 ifetcht 1 ,regc +0x7d0f 036025 call gpio_config_output +0x7d10 036026 call ui_led_off_static +0x7d11 036027 increase led_offset_length ,regb +0x7d12 036028 loop ui_led_init_loop +0x7d13 036029 rtn +: 036033 ui_led_on_global: +0x7d14 036034 call calc_curr_struct_prt +0x7d15 036035 setarg ui_led_state_lighting +0x7d16 036036 istore 1 ,regb +0x7d17 036037 call ui_led_stop_timer +0x7d18 036038 branch ui_led_on_static +: 036042 ui_led_blink_stop_global: +: 036043 ui_led_off_global: +0x7d19 036044 call calc_curr_struct_prt +0x7d1a 036045 setarg ui_led_state_darking +0x7d1b 036046 istore 1 ,regb +0x7d1c 036047 call ui_led_stop_timer +0x7d1d 036048 branch ui_led_off_static +: 036052 ui_led_blink_start_global: +0x7d1e 036053 call calc_curr_struct_prt +0x7d1f 036054 setarg ui_led_state_blink_start +0x7d20 036055 istore 1 ,regb +0x7d21 036056 setarg led_infinite_flash_num +0x7d22 036057 istore 1 ,contw +0x7d23 036058 branch ui_led_off_static +: 036063 ui_led_set_style_global: +0x7d24 036064 call calc_curr_struct_prt +0x7d25 036065 arg led_offset_length ,loopcnt +0x7d26 036066 copy regc ,contr +0x7d27 036067 copy regb ,contw +0x7d28 036068 branch memcpy_fast +: 036072 ui_led_dispatch: +0x7d29 036073 fetch 1 ,mem_ui_led_struct_num +0x7d2a 036074 rtn blank +0x7d2b 036075 arg 0 ,rega +: 036076 ui_led_blink_polling: +0x7d2c 036077 call ui_led_change_style_by_type +0x7d2d 036078 increase 1 ,rega +0x7d2e 036079 fetch 1 ,mem_ui_led_struct_num +0x7d2f 036080 isub rega ,null +0x7d30 036081 rtn zero +0x7d31 036082 branch ui_led_blink_polling +: 036085 ui_led_off_static: +0x7d32 036086 add regb ,led_offset_led_gpio ,regc +0x7d33 036087 ifetcht 1 ,regc +0x7d34 036088 branch gpio_out_inactive +: 036091 ui_led_on_static: +0x7d35 036092 add regb ,led_offset_led_gpio ,regc +0x7d36 036093 ifetcht 1 ,regc +0x7d37 036094 branch gpio_out_active +: 036098 ui_led_change_style_by_type: +0x7d38 036099 add rega ,ui_led_blink ,queue +0x7d39 036100 call timer_check +0x7d3a 036101 nrtn blank +0x7d3b 036103 call calc_curr_struct_prt +0x7d3c 036105 ifetch 1 ,regb +0x7d3d 036107 beq ui_led_state_lighting ,ui_led_on_static +0x7d3e 036108 beq ui_led_state_darking ,ui_led_off_static +0x7d3f 036109 beq ui_led_state_blink_stop ,ui_led_off_static +0x7d40 036110 beq ui_led_state_blink_darking ,ui_led_blink_state_darking +: 036111 ui_led_blink_state_lighting: +0x7d41 036112 call ui_led_on_static +0x7d42 036113 add regb ,led_offset_cb_ledon ,regc +0x7d43 036114 call push_stack +0x7d44 036115 ifetch 2 ,regc +0x7d45 036116 call callback_func +0x7d46 036117 call pop_stack +0x7d47 036118 setarg ui_led_state_blink_darking +0x7d48 036119 istore 1 ,regb +0x7d49 036120 add regb ,led_offset_on_time ,regc +0x7d4a 036121 ifetch 2 ,regc +0x7d4b 036122 branch ui_led_blink_timer_start +: 036125 ui_led_blink_state_darking: +0x7d4c 036126 call ui_led_off_static +0x7d4d 036127 add regb ,led_offset_cb_ledoff ,regc +0x7d4e 036128 call push_stack +0x7d4f 036129 ifetch 2 ,regc +0x7d50 036130 call callback_func +0x7d51 036131 call pop_stack +0x7d52 036133 add regb ,led_offset_blink_count ,regc +0x7d53 036134 ifetch 1 ,regc +0x7d54 036135 beq led_infinite_flash_num ,ui_led_blink_infinite +0x7d55 036136 increase -1 ,pdata +0x7d56 036137 istore 1 ,regc +0x7d57 036138 branch ui_led_blink_stop_global ,blank +: 036139 ui_led_blink_infinite: +0x7d58 036140 setarg ui_led_state_blink_lighting +0x7d59 036141 istore 1 ,regb +0x7d5a 036142 add regb ,led_offset_off_time ,regc +0x7d5b 036143 ifetch 2 ,regc +: 036144 ui_led_blink_timer_start: +0x7d5c 036145 add rega ,ui_led_blink ,queue +0x7d5d 036146 branch timer_init +: 036148 ui_led_stop_timer: +0x7d5e 036149 setarg 0 +0x7d5f 036150 branch ui_led_blink_timer_start +: 036156 ui_timer_timeout: +0x7d60 036157 setarg 0x1000 +0x7d61 036158 lshift16 pdata ,pdata +0x7d62 036159 iadd regb ,regb +0x7d63 036160 rtn +: 036162 ui_timer_check: +0x7d64 036163 bpatchx patch3e_4 ,mem_patch3e +0x7d65 036164 arg 0 ,rega +0x7d66 036165 fetcht 4 ,mem_ui_timer_last_btclk +0x7d67 036166 copy clkn_bt ,regb +0x7d68 036167 copy regb ,pdata +0x7d69 036168 isub temp ,null +0x7d6a 036169 ncall ui_timer_timeout ,positive +: 036171 ui_timer_check_loop: +0x7d6b 036172 copy regb ,pdata +0x7d6c 036173 increase 160 ,temp +0x7d6d 036174 increase 160 ,temp +0x7d6e 036175 isub temp ,null +0x7d6f 036176 nbranch ui_timer_check_end ,positive +0x7d70 036177 increase 1 ,rega +0x7d71 036178 and rega ,0x0f ,pdata +0x7d72 036179 nbranch ui_timer_check_loop ,blank +0x7d73 036180 arg 0 ,rega +0x7d74 036181 call ui_timer_check_send_evt +: 036182 ui_timer_init: +0x7d75 036183 copy clkn_bt ,pdata +0x7d76 036184 store 4 ,mem_ui_timer_last_btclk +0x7d77 036185 rtn +: 036186 ui_timer_check_end: +0x7d78 036187 bpatchx patch3e_5 ,mem_patch3e +0x7d79 036188 copy rega ,pdata +0x7d7a 036189 rtn blank +0x7d7b 036190 increase -160 ,temp +0x7d7c 036191 increase -160 ,temp +0x7d7d 036192 set0 28 ,temp +0x7d7e 036193 storet 4 ,mem_ui_timer_last_btclk +: 036194 ui_timer_check_send_evt: +0x7d7f 036195 branch app_evt_timer +: 036202 ui_ipc_get_lock: +0x7d80 036203 jam 1 ,mem_ipc_lock_bt +: 036204 ui_ipc_get_lock_wait: +0x7d81 036205 fetch 1 ,mem_ipc_lock_c51 +0x7d82 036206 nbranch ui_ipc_get_lock_wait ,blank +0x7d83 036207 rtn +: 036209 ui_ipc_put_lock: +0x7d84 036210 jam 0 ,mem_ipc_lock_bt +0x7d85 036211 rtn +: 036215 ui_ipc_send_event: +0x7d86 036216 bpatchx patch3e_6 ,mem_patch3e +0x7d87 036217 call ui_ipc_get_lock +0x7d88 036218 copy rega ,pdata +0x7d89 036219 store 4 ,mem_ipc_rega_temp +0x7d8a 036220 arg mem_ipc_fifo_bt2c51 ,rega +0x7d8b 036221 call fifo_in +0x7d8c 036222 fetch 4 ,mem_ipc_rega_temp +0x7d8d 036223 copy pdata ,rega +0x7d8e 036224 branch ui_ipc_put_lock +: 036226 ui_ipc_send_cmd: +0x7d8f 036227 bpatchx patch3e_7 ,mem_patch3e +0x7d90 036228 call ui_ipc_get_lock +0x7d91 036229 copy rega ,pdata +0x7d92 036230 store 4 ,mem_ipc_rega_temp +0x7d93 036231 arg mem_ipc_fifo_c512bt ,rega +0x7d94 036232 call fifo_in +0x7d95 036233 fetch 4 ,mem_ipc_rega_temp +0x7d96 036234 copy pdata ,rega +0x7d97 036235 branch ui_ipc_put_lock +: 036237 ui_ipc_clean_all_fifo: +0x7d98 036238 setarg 0 +0x7d99 036239 store util_fifo_len ,mem_ipc_fifo_c512bt +0x7d9a 036240 store util_fifo_len ,mem_ipc_fifo_bt2c51 +0x7d9b 036241 rtn +: 036243 check_51cmd: +0x7d9c 036244 bpatchx patch3f_0 ,mem_patch3f +0x7d9d 036245 fetch 1 ,mem_hci_cmd +0x7d9e 036246 nrtn blank +0x7d9f 036247 arg mem_ipc_fifo_c512bt ,rega +0x7da0 036248 call fifo_is_empty +0x7da1 036249 rtn blank +0x7da2 036250 jam ipc_continue_process ,mem_ipc_skip_continue_proc +0x7da3 036251 call check_51cmd_once +0x7da4 036252 fetch 1 ,mem_ipc_skip_continue_proc +0x7da5 036253 branch check_51cmd ,blank +0x7da6 036254 rtn +: 036256 check_51cmd_once: +0x7da7 036257 call ui_ipc_get_lock +0x7da8 036258 arg mem_ipc_fifo_c512bt ,rega +0x7da9 036259 call fifo_out +0x7daa 036260 copy pdata ,temp +0x7dab 036261 call ui_ipc_put_lock +0x7dac 036262 bpatchx patch3f_1 ,mem_patch3f +0x7dad 036263 copy temp ,pdata +0x7dae 036264 rtn blank +0x7daf 036265 beq bt_cmd_start_discovery ,check_51cmd_start_discovery +0x7db0 036266 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery +0x7db1 036267 beq bt_cmd_reconnect ,check_51cmd_reconnect +0x7db2 036268 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating +0x7db3 036269 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating +0x7db4 036270 beq bt_cmd_sniff_test ,check_51cmd_sniff_test +0x7db5 036271 beq bt_cmd_start_inquiry ,check_51cmd_inq +0x7db6 036272 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq +0x7db7 036273 beq bt_cmd_start_adv ,check_51cmd_adv +0x7db8 036274 beq bt_cmd_stop_adv ,check_51cmd_stop_adv +0x7db9 036275 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv +0x7dba 036276 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv +0x7dbb 036277 beq bt_cmd_led_off ,check_51cmd_led_off +0x7dbc 036278 beq bt_cmd_led_on ,check_51cmd_led_on +0x7dbd 036279 beq bt_cmd_led_blink ,check_51cmd_led_start_blink +0x7dbe 036280 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con +0x7dbf 036281 beq bt_cmd_le_start_scan ,check_51cmd_start_scan +0x7dc0 036282 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan +0x7dc1 036283 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate +0x7dc2 036284 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req +0x7dc3 036285 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel +0x7dc4 036287 store 1 ,mem_fifo_temp +0x7dc5 036288 bpatchx patch3f_2 ,mem_patch3f +0x7dc6 036289 call lmo_fifo_check +0x7dc7 036290 nbranch check_51cmd_restore ,blank +: 036291 check_51cmd_once_continue: +0x7dc8 036292 fetch 1 ,mem_fifo_temp +0x7dc9 036293 bmark0 mark_context ,check_51cmd_check_idle +0x7dca 036294 beq bt_cmd_disconnect ,check_51cmd_disconnect +0x7dcb 036295 beq bt_cmd_enter_sniff ,cmd_in_sniff +0x7dcc 036296 beq bt_cmd_exit_sniff ,cmd_exit_sniff +0x7dcd 036297 beq bt_cmd_set_pin_code ,check_51cmd_pincode +0x7dce 036298 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect +0x7dcf 036299 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param +0x7dd0 036300 beq bt_cmd_role_switch ,check_51cmd_role_switch +0x7dd1 036301 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info +0x7dd2 036302 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info +0x7dd3 036303 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept +0x7dd4 036304 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info +0x7dd5 036305 rtn +: 036307 check_51cmd_check_idle: +0x7dd6 036308 store 1 ,mem_fifo_temp +0x7dd7 036309 call context_check_idle +0x7dd8 036310 branch check_51cmd_restore ,zero +0x7dd9 036311 call context_search_plap +0x7dda 036312 nrtn zero +: 036313 check_51cmd_restore: +0x7ddb 036314 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc +0x7ddc 036315 branch ui_ipc_send_cmd +: 036320 check_51cmd_start_discovery: +0x7ddd 036321 fetch 2 ,mem_ui_state_map +0x7dde 036322 set1 ui_state_bt_discovery +0x7ddf 036323 store 2 ,mem_ui_state_map +0x7de0 036324 jam 3 ,mem_scan_mode +0x7de1 036325 rtn +: 036329 check_51cmd_stop_discovery: +0x7de2 036330 jam 0 ,mem_hid_handshake_timer_count +0x7de3 036331 jam 0 ,mem_scan_mode +0x7de4 036332 fetch 2 ,mem_ui_state_map +0x7de5 036333 set0 ui_state_bt_discovery +0x7de6 036334 store 2 ,mem_ui_state_map +0x7de7 036335 rtn +: 036339 check_51cmd_reconnect: +0x7de8 036340 jam hci_cmd_create_conn ,mem_hci_cmd +0x7de9 036341 rtn +: 036345 check_51cmd_disconnect: +0x7dea 036346 jam lmp_detach ,mem_lmo_opcode2 +0x7deb 036347 jam other_end_terminated ,mem_disconn_reason_send +0x7dec 036348 rtn +: 036352 check_51cmd_enter_sniff_subrating: +0x7ded 036353 rtn +: 036357 check_51cmd_exit_sniff_subrating: +0x7dee 036358 rtn +: 036362 check_51cmd_sniff_test: +0x7def 036363 rtn +: 036367 check_51cmd_pincode: +0x7df0 036368 jam pincode_state_pincode_ready ,mem_pincode_state +0x7df1 036369 branch cmd_pair +: 036373 check_51cmd_inq: +0x7df2 036374 rtn +: 036378 check_51cmd_stop_inq: +0x7df3 036379 rtn +: 036383 check_51cmd_adv: +0x7df4 036384 jam on ,mem_le_adv_enable +0x7df5 036385 jam adv_ind ,mem_le_adv_type +0x7df6 036386 fetch 2 ,mem_ui_state_map +0x7df7 036387 set1 ui_state_ble_adv ,pdata +0x7df8 036388 store 2 ,mem_ui_state_map +0x7df9 036389 rtn +: 036393 check_51cmd_stop_adv: +0x7dfa 036394 fetch 2 ,mem_ui_state_map +0x7dfb 036395 set0 ui_state_ble_adv ,pdata +0x7dfc 036396 store 2 ,mem_ui_state_map +0x7dfd 036397 jam off ,mem_le_adv_enable +0x7dfe 036398 rtn +: 036402 check_51cmd_direct_adv: +0x7dff 036403 jam on ,mem_le_adv_enable +0x7e00 036404 jam adv_direct_ind ,mem_le_adv_type +0x7e01 036405 fetch 2 ,mem_ui_state_map +0x7e02 036406 set1 ui_state_ble_adv ,pdata +0x7e03 036407 store 2 ,mem_ui_state_map +0x7e04 036408 rtn +: 036412 check_51cmd_stop_direct_adv: +0x7e05 036413 fetch 2 ,mem_ui_state_map +0x7e06 036414 set0 ui_state_ble_adv ,pdata +0x7e07 036415 store 2 ,mem_ui_state_map +0x7e08 036416 jam off ,mem_le_adv_enable +0x7e09 036417 rtn +: 036421 check_51cmd_le_disconnect: +0x7e0a 036422 setarg 20 +0x7e0b 036423 store 2 ,mem_le_superto +0x7e0c 036424 store 2 ,mem_le_init_superto +0x7e0d 036425 branch le_send_terminate_ind_user_terminated +: 036429 check_51cmd_ble_update_connect_param: +0x7e0e 036430 branch le_l2cap_tx_update_req +: 036434 check_51cmd_led_off: +0x7e0f 036435 arg 0 ,rega +0x7e10 036436 branch ui_led_off_global +: 036440 check_51cmd_led_on: +0x7e11 036441 arg 0 ,rega +0x7e12 036442 branch ui_led_on_global +: 036446 check_51cmd_led_start_blink: +0x7e13 036447 arg 0 ,rega +0x7e14 036448 branch ui_led_blink_start_global +: 036452 check_51cmd_le_start_con: +0x7e15 036453 jam on ,mem_le_scan_enable +0x7e16 036454 jam hci_cmd_le_create_conn ,mem_hci_cmd +0x7e17 036457 rtn +: 036461 check_51cmd_start_scan: +0x7e18 036462 jam on ,mem_le_scan_enable +0x7e19 036463 rtn +: 036467 check_51cmd_stop_scan: +0x7e1a 036468 jam off ,mem_le_scan_enable +0x7e1b 036469 jam 0 ,mem_hci_cmd +0x7e1c 036470 rtn +: 036474 check_51cmd_hibernate: +0x7e1d 036475 fetch 2 ,mem_cb_before_hibernate +0x7e1e 036476 call callback_func +0x7e1f 036477 fetch 1 ,mem_ui_button_gpio +0x7e20 036478 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled +0x7e21 036479 copy pdata ,temp +0x7e22 036480 call gpio_config_input +: 036481 check_51cmd_hibernate_btn_disabled: +0x7e23 036482 call ui_ipc_clean_all_fifo +0x7e24 036483 branch lpm_hibernate +: 036487 check_51cmd_le_smp_sec_req: +0x7e25 036488 branch le_send_smp_security_request +: 036492 check_51cmd_role_switch: +0x7e26 036493 jam lmp_slot_offset ,mem_lmo_opcode2 +0x7e27 036494 set1 mark_switch_initiated ,mark +0x7e28 036495 nrtn master +0x7e29 036496 jam switch_flag_init ,mem_switch_flag +0x7e2a 036497 jam lmp_switch_req ,mem_lmo_opcode2 +0x7e2b 036498 fetch 1 ,mem_connection_options +0x7e2c 036499 set0 connection_switch ,pdata +0x7e2d 036500 store 1 ,mem_connection_options +0x7e2e 036501 rtn +: 036505 check_51cmd_bb_reconn_cancel: +0x7e2f 036506 force page_length_timer ,queue +0x7e30 036507 branch timer_stop +: 036511 check_51cmd_dhkey_not_accept: +0x7e31 036512 call tid_set_reply +0x7e32 036513 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x7e33 036514 branch parse_lmp_dhkey_check_reject +: 036517 ui_check_paring_button: +0x7e34 036518 fetch 1 ,mem_ui_state_map +0x7e35 036519 rtnbit0 ui_state_btn_down +0x7e36 036520 rtnbit0 ui_state_bt_reconnect +0x7e37 036521 branch check_51cmd_bb_reconn_cancel +: 036526 queue_init: +0x7e38 036527 fetch 2 ,mem_queue_ptr +0x7e39 036528 add pdata ,queue_offset_curr_num ,contw +0x7e3a 036529 setarg 0 +0x7e3b 036530 istore 3 ,contw +0x7e3c 036531 rtn +: 036535 queue_push: +0x7e3d 036536 call disable_user +0x7e3e 036537 call queue_full +0x7e3f 036538 rtn blank +0x7e40 036539 fetch 2 ,mem_queue_ptr +0x7e41 036540 add pdata ,queue_offset_curr_num ,regb +0x7e42 036541 ifetcht 1 ,regb +0x7e43 036542 increase 1 ,temp +0x7e44 036543 istoret 1 ,regb +0x7e45 036545 ifetcht 1 ,pdata +0x7e46 036546 copy temp ,loopcnt +0x7e47 036547 add pdata ,queue_offset_write_ptr ,regb +0x7e48 036548 ifetch 1 ,regb +0x7e49 036549 imul32 temp ,pdata +0x7e4a 036550 iadd contr ,contw +0x7e4b 036551 copy rega ,contr +: 036552 calc_queue_next_ptr: +0x7e4c 036553 call memcpy +0x7e4d 036554 call queue_get_size +0x7e4e 036555 pincrease -1 +0x7e4f 036556 ifetcht 1 ,regb +0x7e50 036557 increase 1 ,temp +0x7e51 036558 iand temp ,temp +0x7e52 036559 istoret 1 ,regb +0x7e53 036560 branch enable_user +: 036565 queue_pop: +0x7e54 036566 call disable_user +0x7e55 036567 call queue_empty +0x7e56 036568 rtn blank +0x7e57 036569 fetch 2 ,mem_queue_ptr +0x7e58 036570 add pdata ,queue_offset_curr_num ,regb +0x7e59 036571 ifetcht 1 ,regb +0x7e5a 036572 increase -1 ,temp +0x7e5b 036573 istoret 1 ,regb +0x7e5c 036574 ifetcht 1 ,pdata +0x7e5d 036575 copy temp ,loopcnt +0x7e5e 036576 add pdata ,queue_offset_read_ptr ,regb +0x7e5f 036577 ifetch 1 ,regb +0x7e60 036578 imul32 temp ,pdata +0x7e61 036579 iadd contr ,contr +0x7e62 036580 increase 1 ,contr +0x7e63 036581 copy rega ,contw +0x7e64 036582 branch calc_queue_next_ptr +: 036586 queue_empty: +0x7e65 036587 fetch 2 ,mem_queue_ptr +0x7e66 036588 add pdata ,queue_offset_curr_num ,contr +0x7e67 036589 ifetch 1 ,contr +0x7e68 036590 rtn +: 036593 queue_full: +0x7e69 036594 call queue_get_size +0x7e6a 036595 ifetcht 1 ,contr +0x7e6b 036596 isub temp ,pdata +0x7e6c 036597 rtn +: 036600 queue_get_size: +0x7e6d 036601 fetch 2 ,mem_queue_ptr +0x7e6e 036602 add pdata ,queue_offset_length ,contr +0x7e6f 036603 ifetch 1 ,contr +0x7e70 036604 rtn +: 036612 right_shift_n: +0x7e71 036613 sub loopcnt ,0 ,null +0x7e72 036614 rtn zero +: 036615 right_shift_n_loop: +0x7e73 036616 rshift pdata ,pdata +0x7e74 036617 loop right_shift_n_loop +0x7e75 036618 rtn +: 036621 left_shift_n: +0x7e76 036622 force 1 ,pdata +0x7e77 036623 sub loopcnt ,0 ,null +0x7e78 036624 rtn zero +: 036625 left_shift_n_loop: +0x7e79 036626 lshift pdata ,pdata +0x7e7a 036627 loop left_shift_n_loop +0x7e7b 036628 rtn +: 036629 push_stack: +0x7e7c 036630 deposit contw +0x7e7d 036631 store 2 ,mem_contw +0x7e7e 036632 storet 8 ,mem_temp +0x7e7f 036633 deposit timeup +0x7e80 036634 store 4 ,mem_timeup +0x7e81 036635 call push_stack_rega_b_c +0x7e82 036636 deposit contr +0x7e83 036637 store 2 ,mem_contr +0x7e84 036638 rtn +: 036640 push_stack_rega_b_c: +0x7e85 036641 deposit rega +0x7e86 036642 store 4 ,mem_rega +0x7e87 036643 deposit regb +0x7e88 036644 store 4 ,mem_regb +0x7e89 036645 deposit regc +0x7e8a 036646 store 3 ,mem_regc +0x7e8b 036647 rtn +: 036649 pop_stack: +0x7e8c 036650 fetcht 8 ,mem_temp +0x7e8d 036651 fetch 4 ,mem_timeup +0x7e8e 036652 iforce timeup +0x7e8f 036653 call pop_stack_rega_b_c +0x7e90 036654 fetch 2 ,mem_contw +0x7e91 036655 iforce contw +0x7e92 036656 fetch 2 ,mem_contr +0x7e93 036657 iforce contr +0x7e94 036658 rtn +: 036660 pop_stack_rega_b_c: +0x7e95 036661 fetch 4 ,mem_rega +0x7e96 036662 iforce rega +0x7e97 036663 fetch 4 ,mem_regb +0x7e98 036664 iforce regb +0x7e99 036665 fetch 3 ,mem_regc +0x7e9a 036666 iforce regc +0x7e9b 036667 rtn +: 036669 get_contw: +0x7e9c 036670 fetch 2 ,mem_contw +0x7e9d 036671 copy pdata ,contw +0x7e9e 036672 rtn +: 036673 get_contr: +0x7e9f 036674 fetch 2 ,mem_contr +0x7ea0 036675 copy pdata ,contr +0x7ea1 036676 rtn +: 036677 store_contw: +0x7ea2 036678 copy contw ,pdata +0x7ea3 036679 store 2 ,mem_contw +0x7ea4 036680 rtn +: 036681 store_contr: +0x7ea5 036682 copy contr ,pdata +0x7ea6 036683 store 2 ,mem_contr +0x7ea7 036684 rtn +: 036688 save_cont_pointers: +0x7ea8 036689 copy contw ,pdata +0x7ea9 036690 store 2 ,mem_hold_contw +0x7eaa 036691 copy contr ,pdata +0x7eab 036692 store 2 ,mem_hold_contr +0x7eac 036693 rtn +: 036694 load_cont_pointers: +0x7ead 036695 fetch 2 ,mem_hold_contw +0x7eae 036696 copy pdata ,contw +0x7eaf 036697 fetch 2 ,mem_hold_contr +0x7eb0 036698 copy pdata ,contr +0x7eb1 036699 rtn +: 036701 memcpy96: +0x7eb2 036702 call memcpy32 +: 036703 memcpy64: +0x7eb3 036704 call memcpy32 +0x7eb4 036705 branch memcpy32 +: 036706 memcpy12: +0x7eb5 036707 call memcpy8 +: 036708 memcpy4: +0x7eb6 036709 ifetch 4 ,contr +0x7eb7 036710 istore 4 ,contw +0x7eb8 036711 rtn +: 036712 memcpy8: +0x7eb9 036713 ifetch 8 ,contr +0x7eba 036714 istore 8 ,contw +0x7ebb 036715 rtn +: 036717 memcpy48: +0x7ebc 036718 call memcpy16 +: 036719 memcpy32: +0x7ebd 036720 call memcpy8 +: 036721 memcpy24: +0x7ebe 036722 call memcpy8 +: 036723 memcpy16: +0x7ebf 036724 call memcpy8 +0x7ec0 036725 branch memcpy8 +: 036729 delay_10ms: +0x7ec1 036730 arg 10 ,loopcnt +: 036731 delay_ms_wait: +0x7ec2 036732 nop 12000 +0x7ec3 036733 loop delay_ms_wait +0x7ec4 036734 rtn +: 036736 bn_zero: +0x7ec5 036737 force 3 ,loopcnt +: 036738 memset0: +0x7ec6 036739 force 0 ,pdata +: 036740 memset8: +0x7ec7 036741 istore 8 ,contw +0x7ec8 036742 loop memset8 +0x7ec9 036743 rtn +: 036745 memset0_8: +0x7eca 036746 force 0 ,pdata +0x7ecb 036747 istore 8 ,contw +0x7ecc 036748 rtn +: 036749 memset0_4: +0x7ecd 036750 force 0 ,pdata +0x7ece 036751 istore 4 ,contw +0x7ecf 036752 rtn +: 036754 clear_mem_256: +0x7ed0 036755 force 4 ,loopcnt +0x7ed1 036756 branch memset0 +: 036757 clear_mem_512: +0x7ed2 036758 force 8 ,loopcnt +0x7ed3 036759 branch memset0 +: 036761 clear_mem: +0x7ed4 036762 deposit loopcnt +0x7ed5 036763 rtn blank +0x7ed6 036764 setarg 0 +: 036765 clear_mem_loop: +0x7ed7 036766 istore 1 ,contw +0x7ed8 036767 loop clear_mem_loop +0x7ed9 036768 rtn +: 036771 clear_temp_block: +0x7eda 036772 arg 32 ,loopcnt +0x7edb 036773 arg mem_temp_block0 ,contw +0x7edc 036774 branch clear_mem +: 036776 xor_loop: +0x7edd 036777 ifetch 4 ,regc +0x7ede 036778 ifetcht 4 ,rega +0x7edf 036779 ixor temp ,pdata +0x7ee0 036780 istore 4 ,contw +0x7ee1 036781 increase 4 ,rega +0x7ee2 036782 increase 4 ,regc +0x7ee3 036783 loop xor_loop +0x7ee4 036784 rtn +: 036788 inverse_data: +0x7ee5 036789 bpatchx patch3f_3 ,mem_patch3f +0x7ee6 036790 copy loopcnt ,pdata +0x7ee7 036791 sub pdata ,1 ,null +0x7ee8 036792 rtn positive +0x7ee9 036793 iadd rega ,regb +0x7eea 036794 increase -1 ,regb +0x7eeb 036795 rshift loopcnt ,loopcnt +: 036796 inverse_loop: +0x7eec 036797 ifetcht 1 ,rega +0x7eed 036798 ifetch 1 ,regb +0x7eee 036799 istore 1 ,rega +0x7eef 036800 istoret 1 ,regb +0x7ef0 036801 increase -1 ,regb +0x7ef1 036802 increase 1 ,rega +0x7ef2 036803 loop inverse_loop +0x7ef3 036804 rtn +: 036807 memcpy_fast: +0x7ef4 036808 deposit loopcnt +0x7ef5 036809 rtn blank +: 036810 memcpy_fast_loop: +0x7ef6 036811 increase -8 ,loopcnt +0x7ef7 036812 call memcpy8 ,positive +0x7ef8 036813 rtn zero +0x7ef9 036814 branch memcpy_fast_loop ,positive +0x7efa 036815 increase 8 ,loopcnt +: 036816 memcpy_fast_loop_four: +0x7efb 036817 increase -4 ,loopcnt +0x7efc 036818 call memcpy4 ,positive +0x7efd 036819 rtn zero +0x7efe 036820 branch memcpy_fast_loop_four ,positive +0x7eff 036821 increase 4 ,loopcnt +0x7f00 036822 branch memcpy +: 036824 memcpy: +0x7f01 036825 deposit loopcnt +0x7f02 036826 rtn blank +: 036827 memcpy_loop: +0x7f03 036828 ifetch 1 ,contr +0x7f04 036829 istore 1 ,contw +0x7f05 036830 loop memcpy_loop +0x7f06 036831 rtn +: 036833 timer_stop: +0x7f07 036834 setarg 0 +: 036835 timer_init: +0x7f08 036836 rshift clkn_bt ,temp +0x7f09 036837 storet 4 ,mem_last_clkn +0x7f0a 036838 arg mem_timers ,contw +0x7f0b 036839 iforce temp +0x7f0c 036840 lshift queue ,pdata +0x7f0d 036841 iadd contw ,contw +0x7f0e 036842 istoret 2 ,contw +0x7f0f 036843 bpatchx patch3f_4 ,mem_patch3f +0x7f10 036844 rtn +: 036846 timer_check_timeout: +0x7f11 036847 arg 0x800 ,timeup +0x7f12 036848 lshift16 timeup ,timeup +0x7f13 036849 iadd timeup ,pdata +0x7f14 036850 rtn +: 036853 timer_reinit: +0x7f15 036854 arg 0 ,queue +: 036855 timer_check: +0x7f16 036856 bpatchx patch3f_5 ,mem_patch3f +0x7f17 036857 fetcht 4 ,mem_last_clkn +0x7f18 036858 rshift clkn_bt ,pdata +0x7f19 036859 store 4 ,mem_last_clkn +0x7f1a 036860 isub temp ,null +0x7f1b 036861 ncall timer_check_timeout ,positive +0x7f1c 036862 isub temp ,timeup +0x7f1d 036863 copy timeup ,temp +0x7f1e 036864 arg mem_timers ,contr +0x7f1f 036865 copy contr ,contw +0x7f20 036866 arg 16 ,loopcnt +: 036867 timer_loop: +0x7f21 036868 ifetch 2 ,contr +0x7f22 036869 isub temp ,pdata +0x7f23 036870 branch timer_counting ,positive +0x7f24 036871 force 0 ,pdata +: 036872 timer_counting: +0x7f25 036873 istore 2 ,contw +0x7f26 036874 loop timer_loop +0x7f27 036875 arg mem_timers ,contr +0x7f28 036876 lshift queue ,pdata +0x7f29 036877 iadd contr ,contr +0x7f2a 036878 ifetch 2 ,contr +0x7f2b 036879 rtn +: 036884 clk_add: +0x7f2c 036885 iadd temp ,temp +0x7f2d 036886 copy temp ,loopcnt +0x7f2e 036887 setarg 3750 +0x7f2f 036888 isub loopcnt ,pdata +0x7f30 036889 rtn positive +0x7f31 036890 sub pdata ,0 ,pdata +0x7f32 036891 rshift16 temp ,temp +0x7f33 036892 increase 1 ,temp +0x7f34 036893 lshift16 temp ,temp +0x7f35 036894 ior temp ,temp +0x7f36 036895 rtn +: 036897 clk_diff_rt: +0x7f37 036898 call clk_diff +0x7f38 036899 branch clk2rt +: 036902 clk_diff: +0x7f39 036903 disable user +0x7f3a 036904 isub temp ,pdata +0x7f3b 036905 branch clk_diff_pos ,positive +0x7f3c 036906 enable user +0x7f3d 036907 sub pdata ,0 ,pdata +: 036908 clk_diff_pos: +0x7f3e 036909 rtnbit0 15 +0x7f3f 036910 arg -61786 ,temp +0x7f40 036911 iadd temp ,pdata +0x7f41 036912 set0 64 ,pdata +0x7f42 036913 rtn +: 036915 clk2rt: +0x7f43 036916 iforce contr +0x7f44 036917 rshift16 pdata ,pdata +0x7f45 036918 arg 3750 ,temp +0x7f46 036919 imul32 temp ,pdata +0x7f47 036920 iadd contr ,pdata +0x7f48 036921 rtn +: 036924 clk2lpo: +0x7f49 036925 lshift8 pdata ,pdata +0x7f4a 036926 lshift4 pdata ,pdata +0x7f4b 036927 fetcht 3 ,mem_clks_per_lpo +0x7f4c 036928 idiv temp +0x7f4d 036929 call wait_div_end +0x7f4e 036930 quotient temp +0x7f4f 036931 rtn +: 036934 clk2bt: +0x7f50 036935 arg 3750 ,temp +0x7f51 036936 idiv temp +0x7f52 036937 call wait_div_end +0x7f53 036938 quotient pdata +0x7f54 036939 lshift16 pdata ,pdata +: 036940 clk2bt_next: +0x7f55 036941 remainder temp +0x7f56 036942 ior temp ,temp +0x7f57 036943 rtn +: 036950 string2dec_from_uart: +0x7f58 036951 arg 0 ,temp +: 036952 string2dec_from_uart_done: +0x7f59 036953 copy temp ,regc +0x7f5a 036954 ifetch 1 ,contru +0x7f5b 036955 call uchar2dialog +0x7f5c 036956 copy regc ,temp +0x7f5d 036957 call swap +0x7f5e 036958 arg 10 ,regb +0x7f5f 036959 imul32 regb ,pdata +0x7f60 036960 iadd temp ,pdata +0x7f61 036961 copy pdata ,temp +0x7f62 036962 loop string2dec_from_uart_done +0x7f63 036963 rtn +: 036967 uchar2dialog: +0x7f64 036968 arg 0x3a ,temp +0x7f65 036969 isub temp ,null +0x7f66 036970 nbranch uchar2dialog_number ,positive +0x7f67 036971 arg 0x61 ,temp +0x7f68 036972 isub temp ,null +0x7f69 036973 branch uchar2dialog_a2f ,positive +0x7f6a 036974 arg 0x37 ,temp +0x7f6b 036975 isub temp ,pdata +0x7f6c 036976 rtn +: 036977 uchar2dialog_number: +0x7f6d 036978 arg 0x30 ,temp +0x7f6e 036979 isub temp ,pdata +0x7f6f 036980 rtn +: 036981 uchar2dialog_a2f: +0x7f70 036982 arg 0x57 ,temp +0x7f71 036983 isub temp ,pdata +0x7f72 036984 rtn +: 036986 pn9: +0x7f73 036987 copy temp ,alarm +0x7f74 036988 setarg 0x1ff +0x7f75 036989 force 0 ,regb +: 036990 pn9_loop: +0x7f76 036991 rshift3 pdata ,rega +0x7f77 036992 rshift rega ,rega +0x7f78 036993 ixor rega ,rega +0x7f79 036994 isolate1 0 ,rega +0x7f7a 036995 setflag true ,9 ,pdata +0x7f7b 036996 rshift temp ,temp +0x7f7c 036997 isolate1 0 ,pdata +0x7f7d 036998 setflag true ,7 ,temp +0x7f7e 036999 rshift pdata ,pdata +0x7f7f 037000 increase 1 ,regb +0x7f80 037001 compare 0 ,regb ,0x7 +0x7f81 037002 nbranch pn9_loop ,true +0x7f82 037003 istoret 1 ,contw +0x7f83 037004 loop pn9_loop +0x7f84 037005 copy alarm ,temp +0x7f85 037006 rtn +: 037009 wait_div_end: +0x7f86 037010 rtn modone +0x7f87 037011 branch wait_div_end +: 037021 compare_loop: +: 037022 string_compare: +0x7f88 037023 ifetch 1 ,rega +0x7f89 037024 ifetcht 1 ,regb +0x7f8a 037025 isub temp ,null +0x7f8b 037026 nrtn zero +0x7f8c 037027 increase 1 ,rega +0x7f8d 037028 increase 1 ,regb +0x7f8e 037029 loop string_compare +0x7f8f 037030 force 0 ,null +0x7f90 037031 rtn +: 037034 ceiling: +0x7f91 037035 isub temp ,null +0x7f92 037036 nrtn positive +0x7f93 037037 deposit temp +0x7f94 037038 rtn +: 037040 swap: +0x7f95 037041 iadd temp ,pdata +0x7f96 037042 isub temp ,temp +0x7f97 037043 isub temp ,pdata +0x7f98 037044 rtn +: 037046 clean_mem: +0x7f99 037047 arg 0x200 ,loopcnt +0x7f9a 037048 arg 0x4000 ,contw +0x7f9b 037049 branch memset0 +: 037052 callback_func: +0x7f9c 037053 rtn blank +0x7f9d 037054 copy pdata ,pc +: 037057 wait_uarttx: +0x7f9e 037058 hfetch 2 ,core_uart_txitems +0x7f9f 037059 nbranch wait_uarttx ,blank +0x7fa0 037060 rtn +: 037062 ice_break: +0x7fa1 037063 jam 0x1 ,core_ice_ctrl +0x7fa2 037064 rtn +: 037066 ice_setbp: +0x7fa3 037067 hstore 2 ,core_ice_break0 +0x7fa4 037068 hfetch 1 ,core_ice_ctrl +0x7fa5 037069 set1 4 ,pdata +0x7fa6 037070 hstore 1 ,core_ice_ctrl +0x7fa7 037071 rtn +: 037072 ice_setbp2: +0x7fa8 037073 hstore 2 ,core_ice_break1 +0x7fa9 037074 hfetch 1 ,core_ice_ctrl +0x7faa 037075 set1 6 ,pdata +0x7fab 037076 hstore 1 ,core_ice_ctrl +0x7fac 037077 rtn +: 037079 ice_set_write_bp: +0x7fad 037080 hstore 2 ,core_ice_break0 +0x7fae 037081 jam 0x30 ,core_ice_ctrl +0x7faf 037082 rtn +: 037086 test_enable_white: +0x7fb0 037087 hfetch 1 ,core_config +0x7fb1 037088 set0 whiteoff_bit ,pdata +0x7fb2 037089 hstore 1 ,core_config +0x7fb3 037090 rtn +: 037092 check_uart_tx_buff: +0x7fb4 037093 hfetch 2 ,core_uart_txitems +0x7fb5 037094 arg uart_air_control_threshold ,temp +: 037095 pdata_sub_temp: +0x7fb6 037096 isub temp ,null +0x7fb7 037097 rtn +: 037103 fifo_in: +0x7fb8 037104 bpatchx patch3f_6 ,mem_patch3f +0x7fb9 037105 ifetcht util_fifo_len ,rega +0x7fba 037106 and temp ,0xff ,pdata +0x7fbb 037107 nbranch fifo_in_push ,blank +0x7fbc 037108 rshift8 temp ,pdata +0x7fbd 037109 istore util_fifo_len ,rega +: 037110 fifo_in_push: +0x7fbe 037111 increase util_fifo_len + util_fifo_offset ,rega +0x7fbf 037112 ifetch 1 ,rega +0x7fc0 037113 nbranch assert ,blank +0x7fc1 037114 fetch 1 ,mem_fifo_temp +0x7fc2 037115 istore 1 ,rega +0x7fc3 037116 rtn +: 037121 fifo_out: +0x7fc4 037122 bpatchx patch3f_7 ,mem_patch3f +0x7fc5 037123 arg util_fifo_len ,loopcnt +0x7fc6 037124 ifetch util_fifo_len ,rega +0x7fc7 037125 rtn blank +: 037126 fifo_out_loop: +0x7fc8 037127 ifetch 1 ,rega +0x7fc9 037128 nbranch fifo_out_end ,blank +0x7fca 037129 increase 1 ,rega +0x7fcb 037130 loop fifo_out_loop +0x7fcc 037131 branch assert +: 037132 fifo_out_end: +0x7fcd 037133 arg 0 ,temp +0x7fce 037134 istoret 1 ,rega +0x7fcf 037135 rtn +: 037140 fifo_is_empty: +0x7fd0 037141 ifetch util_fifo_len ,rega +0x7fd1 037142 rtn +: 037147 fifo_is_full: +0x7fd2 037148 ifetch 1 ,rega +0x7fd3 037149 rtn +: 037152 fifo_is_near_full: +0x7fd4 037153 ifetch 2 ,rega +0x7fd5 037154 rtn +: 037158 fifo_content_count: +0x7fd6 037159 arg 0 ,temp +: 037160 fifo_content_count_loop: +0x7fd7 037161 fetch 1 ,contr +0x7fd8 037162 loop fifo_content_count_loop ,blank +0x7fd9 037163 increase 1 ,temp +0x7fda 037164 loop fifo_content_count_loop +0x7fdb 037165 copy temp ,pdata +0x7fdc 037166 rtn +: 037168 not_greater_than: +0x7fdd 037169 isub temp ,null +0x7fde 037170 nrtn positive +0x7fdf 037171 copy temp ,pdata +0x7fe0 037172 rtn +: 037175 disable_positive: +0x7fe1 037176 force -1 ,null +0x7fe2 037177 rtn +: 037178 enable_positive: +: 037179 disable_zero: +0x7fe3 037180 force 1 ,null +0x7fe4 037181 rtn +: 037182 enable_zero: +0x7fe5 037183 force 0 ,null +0x7fe6 037184 rtn +: 037186 enable_user: +0x7fe7 037187 enable user +0x7fe8 037188 rtn +: 037190 disable_user: +0x7fe9 037191 disable user +0x7fea 037192 rtn +: 037194 enable_user2: +0x7feb 037195 enable user2 +0x7fec 037196 rtn +: 037198 disable_user2: +0x7fed 037199 disable user2 +0x7fee 037200 rtn +: 037202 disable_blank: +0x7fef 037203 setarg 1 +0x7ff0 037204 rtn +: 037206 enable_blank: +0x7ff1 037207 setarg 0 +0x7ff2 037208 rtn +: 037211 reverse_byte: +0x7ff3 037212 copy loopcnt ,pdata +0x7ff4 037213 rtn blank +0x7ff5 037214 copy contr ,pdata +0x7ff6 037215 iadd loopcnt ,pdata +0x7ff7 037216 increase -1 ,pdata +0x7ff8 037217 copy pdata ,contr +: 037218 reverse_loop: +0x7ff9 037219 ifetch 1 ,contr +0x7ffa 037220 increase -2 ,contr +0x7ffb 037221 istore 1 ,contw +0x7ffc 037222 loop reverse_loop +0x7ffd 037223 rtn org 0x10001 -: 037232 z_entrance0: -0x10001 037233 beq zcode_00 ,z_page_wait_fhs_reply_ok -0x10002 037234 rtn -: 037236 z_page_wait_fhs_reply_ok: -0x10003 037237 fetch 1 ,mem_page_rcv_fhs -0x10004 037238 increase 1 ,pdata -0x10005 037239 store 1 ,mem_page_rcv_fhs -0x10006 037240 call prepare_newconn -: 037241 z_master_newconn_loop: -0x10007 037242 set1 mark_first_packet ,mark -0x10008 037243 call master_newconn_once -0x10009 037244 branch z_newconn_poll_responded ,sync -0x1000a 037245 set0 mark_first_packet ,mark -0x1000b 037246 call new_conn_timeout -0x1000c 037247 nbranch z_master_newconn_loop ,blank -0x1000d 037248 branch page_restart -: 037249 z_newconn_poll_responded: -0x1000e 037250 set0 mark_first_packet ,mark -0x1000f 037251 branch newconn_poll_responded +: 037228 z_entrance0: +0x10001 037229 beq zcode_00 ,z_page_wait_fhs_reply_ok +0x10002 037230 rtn +: 037232 z_page_wait_fhs_reply_ok: +0x10003 037233 fetch 1 ,mem_page_rcv_fhs +0x10004 037234 increase 1 ,pdata +0x10005 037235 store 1 ,mem_page_rcv_fhs +0x10006 037236 call prepare_newconn +: 037237 z_master_newconn_loop: +0x10007 037238 set1 mark_first_packet ,mark +0x10008 037239 call master_newconn_once +0x10009 037240 branch z_newconn_poll_responded ,sync +0x1000a 037241 set0 mark_first_packet ,mark +0x1000b 037242 call new_conn_timeout +0x1000c 037243 nbranch z_master_newconn_loop ,blank +0x1000d 037244 branch page_restart +: 037245 z_newconn_poll_responded: +0x1000e 037246 set0 mark_first_packet ,mark +0x1000f 037247 branch newconn_poll_responded org 0x20001 -: 037258 z_entrance1: -0x20001 037259 beq zcode_10 ,z_mouse_bb_disconnected -0x20002 037260 beq zcode_11 ,z_hid_rx_process -0x20003 037261 rtn -: 037263 z_mouse_bb_disconnected: -0x20004 037264 jam 0 ,mem_mouse_enter_sniff_count -0x20005 037265 jam 0x0e ,mem_sniff_param_interval -0x20006 037266 call mouse_bb_discon_clear_stack -0x20007 037267 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x20008 037268 bbit1 app_disc_ble ,z_mouse4_0_event_bb_disconn -0x20009 037269 bbit1 app_disc_by_button ,app_disconn_reason_clear -0x2000a 037270 bbit1 app_disc_after_pairing ,z_mouse_event_light_state_pairing -0x2000b 037271 bbit1 app_disc_after_reconn ,z_mouse_event_light_state_hibernate -0x2000c 037272 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate -0x2000d 037273 branch mouse_start_discovery -: 037275 z_mouse4_0_event_bb_disconn: -0x2000e 037276 call mouse_le_clean_connect_flag -0x2000f 037277 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x20010 037278 bbit1 app_disc_pb_button ,p_mouse_select_device_button_up -0x20011 037279 branch mouse4_0_event_bb_disconn + 2 -: 037281 z_mouse_event_light_state_pairing: -0x20012 037282 bbit1 app_disc_after_handshake ,z_mouse_event_light_state_hibernate -0x20013 037283 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate -0x20014 037284 branch mouse_start_discovery -: 037285 z_mouse_event_light_state_hibernate: -0x20015 037286 fetch 2 ,mem_ui_state_map -0x20016 037287 bbit1 ui_state_btn_down ,mouse_start_discovery -0x20017 037288 call app_disconn_reason_clear -0x20018 037289 call p_mouse_check_key_gpio -0x20019 037290 rtn true -0x2001a 037291 branch app_bb_hibernate -: 037294 z_hid_rx_process: -0x2001b 037295 fetch 2 ,mem_l2cap_payload_ptr -0x2001c 037296 copy pdata ,contr -0x2001d 037297 ifetch 1 ,contr -0x2001e 037298 store 1 ,mem_l2cap_rcv -0x2001f 037299 and pdata ,0x0f ,temp -0x20020 037300 rshift4 pdata ,pdata -0x20021 037301 beq hid_type_set_protocol ,z_hid_rx_set_protocol -0x20022 037302 beq hid_type_control ,z_hid_rx_process_hid_control -0x20023 037303 branch hid_rx_process + 6 -: 037304 z_hid_rx_set_protocol: -0x20024 037305 call hid_rx_process_handshake -0x20025 037306 jam 0 ,mem_mouse_bt_boot_mode -0x20026 037307 fetch 1 ,mem_l2cap_rcv -0x20027 037308 isolate1 0 ,pdata -0x20028 037309 rtn true -0x20029 037310 jam 1 ,mem_mouse_bt_boot_mode -0x2002a 037311 rtn -: 037313 z_hid_rx_process_hid_control: -0x2002b 037314 copy temp ,pdata -0x2002c 037315 beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug -0x2002d 037316 branch hid_rx_process_hid_control + 2 +: 037254 z_entrance1: +0x20001 037255 beq zcode_10 ,z_mouse_bb_disconnected +0x20002 037256 beq zcode_11 ,z_hid_rx_process +0x20003 037257 rtn +: 037259 z_mouse_bb_disconnected: +0x20004 037260 jam 0 ,mem_mouse_enter_sniff_count +0x20005 037261 jam 0x0e ,mem_sniff_param_interval +0x20006 037262 call mouse_bb_discon_clear_stack +0x20007 037263 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x20008 037264 bbit1 app_disc_ble ,z_mouse4_0_event_bb_disconn +0x20009 037265 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x2000a 037266 bbit1 app_disc_after_pairing ,z_mouse_event_light_state_pairing +0x2000b 037267 bbit1 app_disc_after_reconn ,z_mouse_event_light_state_hibernate +0x2000c 037268 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate +0x2000d 037269 branch mouse_start_discovery +: 037271 z_mouse4_0_event_bb_disconn: +0x2000e 037272 call mouse_le_clean_connect_flag +0x2000f 037273 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x20010 037274 bbit1 app_disc_pb_button ,p_mouse_select_device_button_up +0x20011 037275 branch mouse4_0_event_bb_disconn + 2 +: 037277 z_mouse_event_light_state_pairing: +0x20012 037278 bbit1 app_disc_after_handshake ,z_mouse_event_light_state_hibernate +0x20013 037279 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate +0x20014 037280 branch mouse_start_discovery +: 037281 z_mouse_event_light_state_hibernate: +0x20015 037282 fetch 2 ,mem_ui_state_map +0x20016 037283 bbit1 ui_state_btn_down ,mouse_start_discovery +0x20017 037284 call app_disconn_reason_clear +0x20018 037285 call p_mouse_check_key_gpio +0x20019 037286 rtn true +0x2001a 037287 branch app_bb_hibernate +: 037290 z_hid_rx_process: +0x2001b 037291 fetch 2 ,mem_l2cap_payload_ptr +0x2001c 037292 copy pdata ,contr +0x2001d 037293 ifetch 1 ,contr +0x2001e 037294 store 1 ,mem_l2cap_rcv +0x2001f 037295 and pdata ,0x0f ,temp +0x20020 037296 rshift4 pdata ,pdata +0x20021 037297 beq hid_type_set_protocol ,z_hid_rx_set_protocol +0x20022 037298 beq hid_type_control ,z_hid_rx_process_hid_control +0x20023 037299 branch hid_rx_process + 6 +: 037300 z_hid_rx_set_protocol: +0x20024 037301 call hid_rx_process_handshake +0x20025 037302 jam 0 ,mem_mouse_bt_boot_mode +0x20026 037303 fetch 1 ,mem_l2cap_rcv +0x20027 037304 isolate1 0 ,pdata +0x20028 037305 rtn true +0x20029 037306 jam 1 ,mem_mouse_bt_boot_mode +0x2002a 037307 rtn +: 037309 z_hid_rx_process_hid_control: +0x2002b 037310 copy temp ,pdata +0x2002c 037311 beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug +0x2002d 037312 branch hid_rx_process_hid_control + 2 org 0x30001 -: 037320 z_entrance2: -0x30001 037321 beq zcode_20 ,z_send_lmp_escape -0x30002 037322 beq zcode_21 ,z_send_lmp_accepted -0x30003 037323 beq zcode_22 ,z_send_lmp_detach -0x30004 037324 beq zcode_23 ,z_mouse4_0_check_reconn_target -0x30005 037325 rtn -: 037327 z_mouse4_0_check_reconn_target: -0x30006 037328 jam 1 ,mem_le_send_security_request_flag -0x30007 037329 call p_mouse_mode_bt_device_multi_led_on -0x30008 037330 jam 1 ,mem_mouse_le_reconnect_flag -0x30009 037331 fetch 2 ,mem_mouse_direct_timeout -0x3000a 037332 fetcht 1 ,mem_mouse_fast_conn_flag -0x3000b 037333 sub temp ,0xff ,null -0x3000c 037334 nbranch z_mouse4_0_check_reconn_target_next ,zero -0x3000d 037335 setarg 0x0258 -: 037336 z_mouse4_0_check_reconn_target_next: -0x3000e 037337 store 2 ,mem_mouse_direct_timer -0x3000f 037338 call app_lpm_mult_disable -0x30010 037339 call p_le_check_adv_flag -0x30011 037340 setarg adv_flag_bredr_not_supported -0x30012 037341 istore 1 ,contr -0x30013 037342 arg mem_le_scan_data ,contr -0x30014 037343 call p_le_adv_data_update -0x30015 037344 branch check_51cmd_adv -: 037346 z_send_lmp_escape: -0x30016 037347 fetch 1 ,mem_lmp_to_send -0x30017 037348 beq lmp_ext_features_res ,z_send_lmpext_features_res -0x30018 037349 beq lmp_ext_features_req ,z_send_lmpext_features_req -0x30019 037350 branch send_lmp_escape -: 037351 z_send_lmpext_features_res: -0x3001a 037352 call z_check_ssp_enable -0x3001b 037353 fetch 1 ,mem_lmp_to_send -0x3001c 037354 branch send_lmpext_features_res -: 037355 z_send_lmpext_features_req: -0x3001d 037356 call z_check_ssp_enable -0x3001e 037357 fetch 1 ,mem_lmp_to_send -0x3001f 037358 branch send_lmpext_features_req -: 037359 z_check_ssp_enable: -0x30020 037360 fetch 1 ,mem_ssp_enable -0x30021 037361 branch ssp_disable ,blank -0x30022 037362 branch ssp_enable -: 037364 z_send_lmp_detach: -0x30023 037365 call send_lmp_detach -0x30024 037366 fetch 1 ,mem_mouse_bt_reconnect_flag -0x30025 037367 rtn blank -0x30026 037368 fetch 1 ,mem_op -0x30027 037369 set0 op_disconn ,pdata -0x30028 037370 store 1 ,mem_op -0x30029 037371 branch p_mouse_sensor_powerdown -: 037373 z_send_lmp_accepted: -0x3002a 037374 force 2 ,pdata -0x3002b 037375 call msg_send_lmp -0x3002c 037376 fetch 1 ,mem_lmi_opcode -0x3002d 037377 istore 1 ,contw -0x3002e 037378 store 1 ,mem_lmi_opcode_temp -0x3002f 037379 call send_lmp_follow -0x30030 037380 fetch 1 ,mem_lmi_opcode_temp -0x30031 037381 beq lmp_max_slot_req ,z_send_lmp_accepted_max_slot_req -0x30032 037382 branch send_lmp_accepted + 7 -: 037384 z_send_lmp_accepted_max_slot_req: -0x30033 037385 fetch 1 ,mem_bt_rcvd_switch_req_accept -0x30034 037386 rtn blank -0x30035 037387 jam 0 ,mem_bt_rcvd_switch_req_accept -0x30036 037388 fetch 1 ,mem_bt_send_lmp_setup_complete -0x30037 037389 rtnne 2 -0x30038 037390 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch -0x30039 037391 copy clkn_bt ,pdata -0x3003a 037392 store 4 ,mem_aurand_send_delay_time -0x3003b 037393 rtn +: 037316 z_entrance2: +0x30001 037317 beq zcode_20 ,z_send_lmp_escape +0x30002 037318 beq zcode_21 ,z_send_lmp_accepted +0x30003 037319 beq zcode_22 ,z_send_lmp_detach +0x30004 037320 beq zcode_23 ,z_mouse4_0_check_reconn_target +0x30005 037321 rtn +: 037323 z_mouse4_0_check_reconn_target: +0x30006 037324 jam 1 ,mem_le_send_security_request_flag +0x30007 037325 call p_mouse_mode_bt_device_multi_led_on +0x30008 037326 jam 1 ,mem_mouse_le_reconnect_flag +0x30009 037327 fetch 2 ,mem_mouse_direct_timeout +0x3000a 037328 fetcht 1 ,mem_mouse_fast_conn_flag +0x3000b 037329 sub temp ,0xff ,null +0x3000c 037330 nbranch z_mouse4_0_check_reconn_target_next ,zero +0x3000d 037331 setarg 0x0258 +: 037332 z_mouse4_0_check_reconn_target_next: +0x3000e 037333 store 2 ,mem_mouse_direct_timer +0x3000f 037334 call app_lpm_mult_disable +0x30010 037335 call p_le_check_adv_flag +0x30011 037336 setarg adv_flag_bredr_not_supported +0x30012 037337 istore 1 ,contr +0x30013 037338 arg mem_le_scan_data ,contr +0x30014 037339 call p_le_adv_data_update +0x30015 037340 branch check_51cmd_adv +: 037342 z_send_lmp_escape: +0x30016 037343 fetch 1 ,mem_lmp_to_send +0x30017 037344 beq lmp_ext_features_res ,z_send_lmpext_features_res +0x30018 037345 beq lmp_ext_features_req ,z_send_lmpext_features_req +0x30019 037346 branch send_lmp_escape +: 037347 z_send_lmpext_features_res: +0x3001a 037348 call z_check_ssp_enable +0x3001b 037349 fetch 1 ,mem_lmp_to_send +0x3001c 037350 branch send_lmpext_features_res +: 037351 z_send_lmpext_features_req: +0x3001d 037352 call z_check_ssp_enable +0x3001e 037353 fetch 1 ,mem_lmp_to_send +0x3001f 037354 branch send_lmpext_features_req +: 037355 z_check_ssp_enable: +0x30020 037356 fetch 1 ,mem_ssp_enable +0x30021 037357 branch ssp_disable ,blank +0x30022 037358 branch ssp_enable +: 037360 z_send_lmp_detach: +0x30023 037361 call send_lmp_detach +0x30024 037362 fetch 1 ,mem_mouse_bt_reconnect_flag +0x30025 037363 rtn blank +0x30026 037364 fetch 1 ,mem_op +0x30027 037365 set0 op_disconn ,pdata +0x30028 037366 store 1 ,mem_op +0x30029 037367 branch p_mouse_sensor_powerdown +: 037369 z_send_lmp_accepted: +0x3002a 037370 force 2 ,pdata +0x3002b 037371 call msg_send_lmp +0x3002c 037372 fetch 1 ,mem_lmi_opcode +0x3002d 037373 istore 1 ,contw +0x3002e 037374 store 1 ,mem_lmi_opcode_temp +0x3002f 037375 call send_lmp_follow +0x30030 037376 fetch 1 ,mem_lmi_opcode_temp +0x30031 037377 beq lmp_max_slot_req ,z_send_lmp_accepted_max_slot_req +0x30032 037378 branch send_lmp_accepted + 7 +: 037380 z_send_lmp_accepted_max_slot_req: +0x30033 037381 fetch 1 ,mem_bt_rcvd_switch_req_accept +0x30034 037382 rtn blank +0x30035 037383 jam 0 ,mem_bt_rcvd_switch_req_accept +0x30036 037384 fetch 1 ,mem_bt_send_lmp_setup_complete +0x30037 037385 rtnne 2 +0x30038 037386 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch +0x30039 037387 copy clkn_bt ,pdata +0x3003a 037388 store 4 ,mem_aurand_send_delay_time +0x3003b 037389 rtn org 0x40001 -: 037398 z_entrance3: -0x40001 037399 beq zcode_30 ,z_process_conn_sm -0x40002 037400 rtn -: 037402 z_process_conn_sm: -0x40003 037403 call lmo_fifo_check -0x40004 037404 nrtn blank -: 037405 z_process_conn_sm_continue: -0x40005 037406 fetch 1 ,mem_conn_sm -0x40006 037407 rtn blank -0x40007 037408 beq conn_sm_send_conn_req ,z_host_create_conn_send_conn_req -0x40008 037409 beq conn_sm_wait_switch_after_host_connection ,z_host_creat_conn_wait_switch -0x40009 037410 branch process_conn_sm_continue + 2 -: 037413 z_host_creat_conn_wait_switch: -0x4000a 037414 fetch 1 ,mem_switch_flag -0x4000b 037415 rtneq switch_flag_init -0x4000c 037416 beq switch_flag_accept ,z_host_create_conn_switch_accept -0x4000d 037417 branch host_creat_conn_wait_switch + 3 -: 037418 z_host_create_conn_switch_accept: -0x4000e 037419 rtn master -: 037420 z_host_create_conn_auth_pair: -0x4000f 037422 fetch 1 ,mem_connection_options -0x40010 037423 bbit1 connection_auth ,z_host_create_conn_auth_pair_true -0x40011 037424 branch host_create_conn_auth_pair + 1 -: 037425 z_host_create_conn_auth_pair_true: -0x40012 037426 fetch 1 ,mem_bt_send_lmp_setup_complete -0x40013 037427 beq 1 ,host_create_conn_auth_pair_true -0x40014 037429 fetch 1 ,mem_link_key_exists -0x40015 037430 branch host_create_conn_auth_pair_nokey ,blank -0x40016 037431 fetch 1 ,mem_lmp_conn_state -0x40017 037432 rtnbit0 sent_setup_complete -0x40018 037433 rtnbit0 received_setup_complete -0x40019 037434 fetch 1 ,mem_bt_send_max_slot_req_accept_after_switch -0x4001a 037435 rtn blank -0x4001b 037436 jam 0 ,mem_bt_send_max_slot_req_accept_after_switch -0x4001c 037437 fetch 4 ,mem_aurand_send_delay_time -0x4001d 037438 arg 20 ,temp -0x4001e 037439 iadd temp ,temp -0x4001f 037440 copy clkn_bt ,pdata -0x40020 037441 isub temp ,null -0x40021 037442 nbranch z_bt_send_max_slot_req_accept_after_switch_wait ,positive -0x40022 037443 branch host_create_conn_auth -: 037445 z_bt_send_max_slot_req_accept_after_switch_wait: -0x40023 037446 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch -0x40024 037447 rtn -: 037449 z_host_create_conn_send_conn_req: -0x40025 037450 jam 20 ,mem_mouse_send_switch_req_timer -0x40026 037451 branch host_create_conn_send_conn_req +: 037394 z_entrance3: +0x40001 037395 beq zcode_30 ,z_process_conn_sm +0x40002 037396 rtn +: 037398 z_process_conn_sm: +0x40003 037399 call lmo_fifo_check +0x40004 037400 nrtn blank +: 037401 z_process_conn_sm_continue: +0x40005 037402 fetch 1 ,mem_conn_sm +0x40006 037403 rtn blank +0x40007 037404 beq conn_sm_send_conn_req ,z_host_create_conn_send_conn_req +0x40008 037405 beq conn_sm_wait_switch_after_host_connection ,z_host_creat_conn_wait_switch +0x40009 037406 branch process_conn_sm_continue + 2 +: 037409 z_host_creat_conn_wait_switch: +0x4000a 037410 fetch 1 ,mem_switch_flag +0x4000b 037411 rtneq switch_flag_init +0x4000c 037412 beq switch_flag_accept ,z_host_create_conn_switch_accept +0x4000d 037413 branch host_creat_conn_wait_switch + 3 +: 037414 z_host_create_conn_switch_accept: +0x4000e 037415 rtn master +: 037416 z_host_create_conn_auth_pair: +0x4000f 037418 fetch 1 ,mem_connection_options +0x40010 037419 bbit1 connection_auth ,z_host_create_conn_auth_pair_true +0x40011 037420 branch host_create_conn_auth_pair + 1 +: 037421 z_host_create_conn_auth_pair_true: +0x40012 037422 fetch 1 ,mem_bt_send_lmp_setup_complete +0x40013 037423 beq 1 ,host_create_conn_auth_pair_true +0x40014 037425 fetch 1 ,mem_link_key_exists +0x40015 037426 branch host_create_conn_auth_pair_nokey ,blank +0x40016 037427 fetch 1 ,mem_lmp_conn_state +0x40017 037428 rtnbit0 sent_setup_complete +0x40018 037429 rtnbit0 received_setup_complete +0x40019 037430 fetch 1 ,mem_bt_send_max_slot_req_accept_after_switch +0x4001a 037431 rtn blank +0x4001b 037432 jam 0 ,mem_bt_send_max_slot_req_accept_after_switch +0x4001c 037433 fetch 4 ,mem_aurand_send_delay_time +0x4001d 037434 arg 20 ,temp +0x4001e 037435 iadd temp ,temp +0x4001f 037436 copy clkn_bt ,pdata +0x40020 037437 isub temp ,null +0x40021 037438 nbranch z_bt_send_max_slot_req_accept_after_switch_wait ,positive +0x40022 037439 branch host_create_conn_auth +: 037441 z_bt_send_max_slot_req_accept_after_switch_wait: +0x40023 037442 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch +0x40024 037443 rtn +: 037445 z_host_create_conn_send_conn_req: +0x40025 037446 jam 20 ,mem_mouse_send_switch_req_timer +0x40026 037447 branch host_create_conn_send_conn_req org 0x50001 -: 037459 z_entrance4: -0x50001 037460 beq zcode_40 ,z_le_update_param -0x50002 037461 beq zcode_41 ,z_le_update_channel_map -0x50003 037462 beq zcode_42 ,z_le_mouse_bb_event_connect_complete -0x50004 037464 rtn -: 037466 z_le_update_param: -0x50005 037467 call z_mouse_le_conn_param_check -0x50006 037468 branch le_update_param + 8 -: 037469 z_mouse_le_lpm_mult_reinit: -0x50007 037470 fetch 1 ,mem_lpm_mult_init -0x50008 037471 store 1 ,mem_lpm_mult -: 037472 z_mouse_le_conn_param_lpm_enable: -0x50009 037473 jam le_lpm_enable ,mem_mouse_le_conn_param_reject -0x5000a 037474 rtn -: 037475 z_mouse_le_conn_param_lpm_disable: -0x5000b 037476 jam le_lpm_disable ,mem_mouse_le_conn_param_reject -0x5000c 037477 rtn -: 037478 z_mouse_le_conn_param_check: -0x5000d 037479 fetch 1 ,mem_le_new_conninterval -0x5000e 037480 sub pdata ,le_interval_15ms ,null -0x5000f 037481 nbranch z_mouse_le_conn_param_lpm_disable ,positive -0x50010 037482 store 2 ,mem_le_interval_min -0x50011 037483 store 2 ,mem_le_interval_min + 2 -0x50012 037484 fetch 1 ,mem_le_new_connslavelatency -0x50013 037485 branch z_mouse_le_lpm_mult_reinit ,blank -0x50014 037486 fetcht 1 ,mem_lpm_mult_init -0x50015 037487 isub temp ,null -0x50016 037488 branch z_mouse_le_lpm_mult_reinit ,positive -0x50017 037489 fetch 1 ,mem_le_new_connslavelatency -0x50018 037490 store 1 ,mem_lpm_mult_init -0x50019 037491 branch z_mouse_le_conn_param_lpm_enable -: 037493 z_le_update_channel_map: -0x5001a 037494 fetch 1 ,mem_le_state -0x5001b 037495 rtnbit0 lestate_update_map -0x5001c 037496 call z_le_channel_map_overflow_check -0x5001d 037497 nrtn user -0x5001e 037498 branch le_update_channel_map + 3 -: 037499 z_le_channel_map_overflow_check: -0x5001f 037500 enable user -0x50020 037501 fetch 1 ,mem_le_event_count + 1 -0x50021 037502 rshift4 pdata ,pdata -0x50022 037503 rtnne 0x0f -0x50023 037504 fetch 1 ,mem_le_instant + 1 -0x50024 037505 rshift4 pdata ,pdata -0x50025 037506 rtnne 0x00 -0x50026 037507 branch disable_user -: 037509 z_le_mouse_bb_event_connect_complete: -0x50027 037510 fetch 1 ,mem_mouse_le_reconnect_flag -0x50028 037511 nrtn blank -0x50029 037512 fetch 1 ,mem_le_att_handle -0x5002a 037513 sub pdata ,26 ,pdata -0x5002b 037514 nrtn zero -0x5002c 037515 jam 0 ,mem_le_start_encrypt_timer -0x5002d 037516 branch mouse_le_write_enable -: 037518 z_quit_connection_cont: -0x5002e 037519 call app_disconn_reason_collect_bt -0x5002f 037520 call sniff_exit -0x50030 037521 jam bt_evt_bb_disconnected ,mem_fifo_temp -0x50031 037522 call ui_ipc_send_event -0x50032 037523 call init_lmp_work -0x50033 037524 call l2cap_init_work -0x50034 037525 branch quit_connection_cont + 8 +: 037455 z_entrance4: +0x50001 037456 beq zcode_40 ,z_le_update_param +0x50002 037457 beq zcode_41 ,z_le_update_channel_map +0x50003 037458 beq zcode_42 ,z_le_mouse_bb_event_connect_complete +0x50004 037460 rtn +: 037462 z_le_update_param: +0x50005 037463 call z_mouse_le_conn_param_check +0x50006 037464 branch le_update_param + 8 +: 037465 z_mouse_le_lpm_mult_reinit: +0x50007 037466 fetch 1 ,mem_lpm_mult_init +0x50008 037467 store 1 ,mem_lpm_mult +: 037468 z_mouse_le_conn_param_lpm_enable: +0x50009 037469 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +0x5000a 037470 rtn +: 037471 z_mouse_le_conn_param_lpm_disable: +0x5000b 037472 jam le_lpm_disable ,mem_mouse_le_conn_param_reject +0x5000c 037473 rtn +: 037474 z_mouse_le_conn_param_check: +0x5000d 037475 fetch 1 ,mem_le_new_conninterval +0x5000e 037476 sub pdata ,le_interval_15ms ,null +0x5000f 037477 nbranch z_mouse_le_conn_param_lpm_disable ,positive +0x50010 037478 store 2 ,mem_le_interval_min +0x50011 037479 store 2 ,mem_le_interval_min + 2 +0x50012 037480 fetch 1 ,mem_le_new_connslavelatency +0x50013 037481 branch z_mouse_le_lpm_mult_reinit ,blank +0x50014 037482 fetcht 1 ,mem_lpm_mult_init +0x50015 037483 isub temp ,null +0x50016 037484 branch z_mouse_le_lpm_mult_reinit ,positive +0x50017 037485 fetch 1 ,mem_le_new_connslavelatency +0x50018 037486 store 1 ,mem_lpm_mult_init +0x50019 037487 branch z_mouse_le_conn_param_lpm_enable +: 037489 z_le_update_channel_map: +0x5001a 037490 fetch 1 ,mem_le_state +0x5001b 037491 rtnbit0 lestate_update_map +0x5001c 037492 call z_le_channel_map_overflow_check +0x5001d 037493 nrtn user +0x5001e 037494 branch le_update_channel_map + 3 +: 037495 z_le_channel_map_overflow_check: +0x5001f 037496 enable user +0x50020 037497 fetch 1 ,mem_le_event_count + 1 +0x50021 037498 rshift4 pdata ,pdata +0x50022 037499 rtnne 0x0f +0x50023 037500 fetch 1 ,mem_le_instant + 1 +0x50024 037501 rshift4 pdata ,pdata +0x50025 037502 rtnne 0x00 +0x50026 037503 branch disable_user +: 037505 z_le_mouse_bb_event_connect_complete: +0x50027 037506 fetch 1 ,mem_mouse_le_reconnect_flag +0x50028 037507 nrtn blank +0x50029 037508 fetch 1 ,mem_le_att_handle +0x5002a 037509 sub pdata ,26 ,pdata +0x5002b 037510 nrtn zero +0x5002c 037511 jam 0 ,mem_le_start_encrypt_timer +0x5002d 037512 branch mouse_le_write_enable +: 037514 z_quit_connection_cont: +0x5002e 037515 call app_disconn_reason_collect_bt +0x5002f 037516 call sniff_exit +0x50030 037517 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x50031 037518 call ui_ipc_send_event +0x50032 037519 call init_lmp_work +0x50033 037520 call l2cap_init_work +0x50034 037521 branch quit_connection_cont + 8 org 0x60001 -: 037529 z_entrance5: -0x60001 037530 beq zcode_50 ,z_mouse_start_discovery -0x60002 037531 rtn -: 037534 z_mouse_start_discovery: -0x60003 037535 jam 0 ,mem_le_send_security_request_flag -0x60004 037536 call p_mouse_tx_power_init -0x60005 037537 jam 0 ,mem_mouse_clear_sensor_data_flag -0x60006 037538 fetch 2 ,mem_ui_state_map -0x60007 037539 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom -0x60008 037542 call p_mouse_load_random_addr_increase_count -0x60009 037543 fetcht 2 ,mem_random_addr_increase_count -0x6000a 037544 increase 1 ,temp -0x6000b 037545 storet 2 ,mem_random_addr_increase_count -0x6000c 037546 storet 2 ,mem_le_lap + 1 -0x6000d 037547 call p_mouse_store_random_addr_increase_count -0x6000e 037548 random pdata -0x6000f 037549 store 1 ,mem_le_lap -: 037550 z_mouse_start_discovery_norandom: -0x60010 037551 fetch 3 ,mem_le_lap_high_3b -0x60011 037552 store 3 ,mem_le_lap + 3 -0x60012 037553 call p_mouse_le_fast_conn_disable -0x60013 037554 call app_lpm_mult_disable -0x60014 037555 fetch 2 ,mem_discovery_timeout -0x60015 037556 store 2 ,mem_mouse_discovery_timer -0x60016 037557 jam 6 ,mem_connection_options -0x60017 037558 setarg 0 -0x60018 037559 store 2 ,mem_mouse_no_data_timer -0x60019 037560 store 2 ,mem_mouse_direct_timer -0x6001a 037561 arg mouse_store_eeprom_flag ,queue -0x6001b 037562 call mouse_enable_function_flag -0x6001c 037563 call mouse_bt_discovery_button_down_disable -0x6001d 037564 fetch 1 ,mem_device_option -0x6001e 037565 isolate1 mode_4_mouse ,pdata -0x6001f 037566 call z_check_51cmd_adv ,true -0x60020 037567 fetch 1 ,mem_device_option -0x60021 037568 isolate1 mode_3_mouse ,pdata -0x60022 037569 call check_51cmd_start_discovery ,true -0x60023 037572 jam 0 ,mem_mouse_bt_reconnect_flag -0x60024 037573 call mouse_start_discovery_norandom + 13 -0x60025 037574 branch p_mouse_discovery_multi_led_blink -: 037576 z_check_51cmd_adv: -0x60026 037577 jam 0 ,mem_mouse_le_reconnect_flag -0x60027 037578 call p_le_check_adv_flag -0x60028 037579 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable -0x60029 037580 istore 1 ,contr -0x6002a 037581 arg mem_le_adv_swift_pair ,contr -0x6002b 037582 call p_le_adv_data_update -0x6002c 037583 branch check_51cmd_adv +: 037525 z_entrance5: +0x60001 037526 beq zcode_50 ,z_mouse_start_discovery +0x60002 037527 rtn +: 037530 z_mouse_start_discovery: +0x60003 037531 jam 0 ,mem_le_send_security_request_flag +0x60004 037532 call p_mouse_tx_power_init +0x60005 037533 jam 0 ,mem_mouse_clear_sensor_data_flag +0x60006 037534 fetch 2 ,mem_ui_state_map +0x60007 037535 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom +0x60008 037538 call p_mouse_load_random_addr_increase_count +0x60009 037539 fetcht 2 ,mem_random_addr_increase_count +0x6000a 037540 increase 1 ,temp +0x6000b 037541 storet 2 ,mem_random_addr_increase_count +0x6000c 037542 storet 2 ,mem_le_lap + 1 +0x6000d 037543 call p_mouse_store_random_addr_increase_count +0x6000e 037544 random pdata +0x6000f 037545 store 1 ,mem_le_lap +: 037546 z_mouse_start_discovery_norandom: +0x60010 037547 fetch 3 ,mem_le_lap_high_3b +0x60011 037548 store 3 ,mem_le_lap + 3 +0x60012 037549 call p_mouse_le_fast_conn_disable +0x60013 037550 call app_lpm_mult_disable +0x60014 037551 fetch 2 ,mem_discovery_timeout +0x60015 037552 store 2 ,mem_mouse_discovery_timer +0x60016 037553 jam 6 ,mem_connection_options +0x60017 037554 setarg 0 +0x60018 037555 store 2 ,mem_mouse_no_data_timer +0x60019 037556 store 2 ,mem_mouse_direct_timer +0x6001a 037557 arg mouse_store_eeprom_flag ,queue +0x6001b 037558 call mouse_enable_function_flag +0x6001c 037559 call mouse_bt_discovery_button_down_disable +0x6001d 037560 fetch 1 ,mem_device_option +0x6001e 037561 isolate1 mode_4_mouse ,pdata +0x6001f 037562 call z_check_51cmd_adv ,true +0x60020 037563 fetch 1 ,mem_device_option +0x60021 037564 isolate1 mode_3_mouse ,pdata +0x60022 037565 call check_51cmd_start_discovery ,true +0x60023 037568 jam 0 ,mem_mouse_bt_reconnect_flag +0x60024 037569 call mouse_start_discovery_norandom + 13 +0x60025 037570 branch p_mouse_discovery_multi_led_blink +: 037572 z_check_51cmd_adv: +0x60026 037573 jam 0 ,mem_mouse_le_reconnect_flag +0x60027 037574 call p_le_check_adv_flag +0x60028 037575 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable +0x60029 037576 istore 1 ,contr +0x6002a 037577 arg mem_le_adv_swift_pair ,contr +0x6002b 037578 call p_le_adv_data_update +0x6002c 037579 branch check_51cmd_adv org 0x70001 -: 037587 z_entrance6: -0x70001 037588 beq zcode_60 ,z_g24_start_24g_mode -0x70002 037589 beq zcode_61 ,z_g24_auto_pair_start -0x70003 037590 beq zcode_62 ,z_mouse_24g_pairing_button -0x70004 037591 rtn -: 037593 z_g24_start_24g_mode: -0x70005 037594 call z_g24_factory_check -0x70006 037595 branch p_g24_auto_pair_start ,user -0x70007 037596 set1 mark_24g ,mark -0x70008 037597 fetch 1 ,mem_24g_conn_sm -0x70009 037598 set1 state_24g_reconn ,pdata -0x7000a 037599 store 1 ,mem_24g_conn_sm -0x7000b 037600 call p_g24_syncword_crc8 -0x7000c 037601 call p_g24_ch -0x7000d 037602 branch z_g24_auto_pair_timeout_init -: 037604 z_g24_factory_check: -0x7000e 037605 arg 2 ,loopcnt -0x7000f 037606 arg mem_24g_addr ,contr -0x70010 037607 call enable_user -0x70011 037608 setarg 0xffff -: 037609 z4_pdata_0xff_check_loop: -0x70012 037610 ifetcht 2 ,contr -0x70013 037611 isub temp ,null -0x70014 037612 ncall disable_user ,zero -0x70015 037613 loop z4_pdata_0xff_check_loop -0x70016 037614 rtn -: 037616 z_g24_auto_pair_start: -0x70017 037617 set1 mark_24g ,mark -0x70018 037618 fetch 1 ,mem_24g_conn_sm -0x70019 037619 set1 state_24g_pair ,pdata -0x7001a 037620 store 1 ,mem_24g_conn_sm -: 037621 z_g24_auto_pair_timeout_init: -0x7001b 037622 setarg g24_first_disconn_nodata_timer -0x7001c 037623 store 2 ,mem_24g_stop_g24_mode_timeout -0x7001d 037624 jam 0 ,mem_24g_stop_g24_mode -0x7001e 037625 rtn -: 037627 z_mouse_24g_pairing_button: -0x7001f 037628 fetch mouse_flag_len ,mem_mouse_flag -0x70020 037629 rtnbit0 mouse_enable_24g -0x70021 037630 rtnbit1 mosue_24g_pairing_flag -0x70022 037631 rtnmark1 mark_24g -0x70023 037632 call mouse_devce_led_off -0x70024 037633 arg mosue_24g_pairing_flag ,queue -0x70025 037634 call mouse_enable_function_flag -0x70026 037635 setarg 0 -0x70027 037636 store 2 ,mem_mouse_direct_timer -0x70028 037637 store 1 ,mem_mouse_send_blank_timer -0x70029 037638 store 2 ,mem_24g_check_dongle_times -0x7002a 037639 call mouse_stop_discovery -0x7002b 037640 branch p_g24_auto_pair_start +: 037583 z_entrance6: +0x70001 037584 beq zcode_60 ,z_g24_start_24g_mode +0x70002 037585 beq zcode_61 ,z_g24_auto_pair_start +0x70003 037586 beq zcode_62 ,z_mouse_24g_pairing_button +0x70004 037587 rtn +: 037589 z_g24_start_24g_mode: +0x70005 037590 call z_g24_factory_check +0x70006 037591 branch p_g24_auto_pair_start ,user +0x70007 037592 set1 mark_24g ,mark +0x70008 037593 fetch 1 ,mem_24g_conn_sm +0x70009 037594 set1 state_24g_reconn ,pdata +0x7000a 037595 store 1 ,mem_24g_conn_sm +0x7000b 037596 call p_g24_syncword_crc8 +0x7000c 037597 call p_g24_ch +0x7000d 037598 branch z_g24_auto_pair_timeout_init +: 037600 z_g24_factory_check: +0x7000e 037601 arg 2 ,loopcnt +0x7000f 037602 arg mem_24g_addr ,contr +0x70010 037603 call enable_user +0x70011 037604 setarg 0xffff +: 037605 z4_pdata_0xff_check_loop: +0x70012 037606 ifetcht 2 ,contr +0x70013 037607 isub temp ,null +0x70014 037608 ncall disable_user ,zero +0x70015 037609 loop z4_pdata_0xff_check_loop +0x70016 037610 rtn +: 037612 z_g24_auto_pair_start: +0x70017 037613 set1 mark_24g ,mark +0x70018 037614 fetch 1 ,mem_24g_conn_sm +0x70019 037615 set1 state_24g_pair ,pdata +0x7001a 037616 store 1 ,mem_24g_conn_sm +: 037617 z_g24_auto_pair_timeout_init: +0x7001b 037618 setarg g24_first_disconn_nodata_timer +0x7001c 037619 store 2 ,mem_24g_stop_g24_mode_timeout +0x7001d 037620 jam 0 ,mem_24g_stop_g24_mode +0x7001e 037621 rtn +: 037623 z_mouse_24g_pairing_button: +0x7001f 037624 fetch mouse_flag_len ,mem_mouse_flag +0x70020 037625 rtnbit0 mouse_enable_24g +0x70021 037626 rtnbit1 mosue_24g_pairing_flag +0x70022 037627 rtnmark1 mark_24g +0x70023 037628 call mouse_devce_led_off +0x70024 037629 arg mosue_24g_pairing_flag ,queue +0x70025 037630 call mouse_enable_function_flag +0x70026 037631 setarg 0 +0x70027 037632 store 2 ,mem_mouse_direct_timer +0x70028 037633 store 1 ,mem_mouse_send_blank_timer +0x70029 037634 store 2 ,mem_24g_check_dongle_times +0x7002a 037635 call mouse_stop_discovery +0x7002b 037636 branch p_g24_auto_pair_start org 0x80001 -: 037645 z_entrance7: -0x80001 037646 beq zcode_70 ,z_g24_reconn_dispatch -0x80002 037647 beq zcode_71 ,z_mouse_irtual_cable_unplug -0x80003 037648 rtn -: 037650 z_g24_reconn_dispatch: -0x80004 037651 fetch 1 ,mem_24g_stop_g24_mode -0x80005 037652 beq 1 ,g24_stop_24g_mode -0x80006 037653 call z_g24_tx_attemp_data_prep -0x80007 037654 call p_g24_transmit_receive_ack -0x80008 037655 nbranch p_g24_ch ,sync -0x80009 037656 nbranch p_g24_ch ,user3 -0x8000a 037657 fetch 1 ,mem_24g_conn_sm -0x8000b 037658 set0 state_24g_reconn ,pdata -0x8000c 037659 store 1 ,mem_24g_conn_sm -: 037660 z_g24_tx_attemp_dongle_succ: -0x8000d 037662 call g24_app_tx_attempt_success -0x8000e 037663 call p_g24_txbuf_clear -0x8000f 037664 branch p_g24_transmit_by_interrupt_enable -: 037666 z_g24_tx_attemp_data_prep: -0x80010 037667 jam 0xff ,mem_24g_common_temp -0x80011 037668 fetch 1 ,mem_24g_data_type -0x80012 037669 store 1 ,mem_24g_common_temp + 1 -0x80013 037670 fetch 4 ,mem_24g_device_addr -0x80014 037671 store 4 ,mem_24g_common_temp + 2 -0x80015 037672 arg 6 ,temp -0x80016 037673 arg mem_24g_common_temp ,rega -0x80017 037674 call p_g24_put_data_in_buff -0x80018 037675 branch p_g24_transmit_prep -: 037677 z_mouse_irtual_cable_unplug: -0x80019 037678 setarg -1 -0x8001a 037679 store 6 ,mem_plap -0x8001b 037680 jam rec_3_mode ,mem_record_bt_mode -0x8001c 037681 jam 0xff ,mem_mouse_fast_conn_flag -0x8001d 037682 call mouse_before_store_reconn_info -0x8001e 037683 jam 0xff ,mem_device1_type -0x8001f 037684 branch p_mouse_store_flash_device_info +: 037641 z_entrance7: +0x80001 037642 beq zcode_70 ,z_g24_reconn_dispatch +0x80002 037643 beq zcode_71 ,z_mouse_irtual_cable_unplug +0x80003 037644 rtn +: 037646 z_g24_reconn_dispatch: +0x80004 037647 fetch 1 ,mem_24g_stop_g24_mode +0x80005 037648 beq 1 ,g24_stop_24g_mode +0x80006 037649 call z_g24_tx_attemp_data_prep +0x80007 037650 call p_g24_transmit_receive_ack +0x80008 037651 nbranch p_g24_ch ,sync +0x80009 037652 nbranch p_g24_ch ,user3 +0x8000a 037653 fetch 1 ,mem_24g_conn_sm +0x8000b 037654 set0 state_24g_reconn ,pdata +0x8000c 037655 store 1 ,mem_24g_conn_sm +: 037656 z_g24_tx_attemp_dongle_succ: +0x8000d 037657 jam 0 ,mem_mouse_long_mult_flag +0x8000e 037658 call g24_app_tx_attempt_success +0x8000f 037659 call p_g24_txbuf_clear +0x80010 037660 branch p_g24_transmit_by_interrupt_enable +: 037662 z_g24_tx_attemp_data_prep: +0x80011 037663 jam 0xff ,mem_24g_common_temp +0x80012 037664 fetch 1 ,mem_24g_data_type +0x80013 037665 store 1 ,mem_24g_common_temp + 1 +0x80014 037666 fetch 4 ,mem_24g_device_addr +0x80015 037667 store 4 ,mem_24g_common_temp + 2 +0x80016 037668 arg 6 ,temp +0x80017 037669 arg mem_24g_common_temp ,rega +0x80018 037670 call p_g24_put_data_in_buff +0x80019 037671 branch p_g24_transmit_prep +: 037673 z_mouse_irtual_cable_unplug: +0x8001a 037674 setarg -1 +0x8001b 037675 store 6 ,mem_plap +0x8001c 037676 jam rec_3_mode ,mem_record_bt_mode +0x8001d 037677 jam 0xff ,mem_mouse_fast_conn_flag +0x8001e 037678 call mouse_before_store_reconn_info +0x8001f 037679 jam 0xff ,mem_device1_type +0x80020 037680 branch p_mouse_store_flash_device_info org 0x90001 -: 037689 z_entrance8: -0x90001 037690 beq zcode_80 ,z_mouse_setting_config -0x90002 037691 beq zcode_81 ,z_le_addr_random_config -0x90003 037693 rtn -: 037702 z_le_addr_random_config: -0x90004 037703 call load_adc_init -0x90005 037704 fetch 2 ,mem_0_5_adc_io_data -0x90006 037705 nbranch z_le_otp_adc_empty ,blank -0x90007 037706 setarg 0x1122 -: 037707 z_le_otp_adc_empty: -0x90008 037708 store 2 ,mem_random_addr_increase_count -0x90009 037709 rtn -: 037712 z_mouse_setting_config: -0x9000a 037713 fetch 4 ,mem_lap -0x9000b 037714 store 4 ,mem_24g_device_addr -0x9000c 037719 call mouse_gpio_init -0x9000d 037721 fetcht 1 ,mem_flash_ncs_gpio -0x9000e 037722 call gpio_config_output -0x9000f 037724 call mouse_param_init -0x90010 037729 call z_mouse_bt_sdp_update -0x90011 037730 setarg 0 -0x90012 037731 store 2 ,mem_lpm_interval -0x90013 037732 call load_adc_init -0x90014 037733 call mouse_adc_init -0x90015 037734 call le_set_config_fixed_ltk -0x90016 037735 call le_set_justwork -0x90017 037736 call le_set_fixed_ltk -0x90018 037737 call le_set_config_read_authentication -0x90019 037738 call p_le_addr_random_config -0x9001a 037739 call p_mouse_load_flash_info_check -0x9001b 037740 arg 3 ,loopcnt -0x9001c 037741 arg mem_device2_addr ,contr -0x9001d 037742 call p_pdata_0xff_check -0x9001e 037743 nbranch p_mouse_le_fast_conn_disable ,user -0x9001f 037744 arg 3 ,loopcnt -0x90020 037745 arg mem_device3_addr ,contr -0x90021 037746 call p_pdata_0xff_check -0x90022 037747 nbranch p_mouse_le_fast_conn_disable ,user -0x90023 037748 call p_mouse_fast_conn_init -0x90024 037749 rtn -: 037751 z_mouse_bt_sdp_update: -0x90025 037752 call enable_authrom -0x90026 037753 arg 0x8c00 ,contr -0x90027 037754 arg mem_mouse_uuid_list ,contw -0x90028 037755 arg 369 ,loopcnt -0x90029 037756 call memcpy -0x9002a 037758 setarg 0x0f0209 -0x9002b 037759 istore 3 ,contw -0x9002c 037760 setarg 0x120009 -0x9002d 037761 istore 3 ,contw -0x9002e 037763 setarg 0x100209 -0x9002f 037764 istore 3 ,contw -0x90030 037765 setarg 0x000009 -0x90031 037766 istore 3 ,contw -0x90032 037767 arg 0x8d71 ,contr -0x90033 037768 arg 265 ,loopcnt -0x90034 037769 call memcpy -0x90035 037771 jam 0 ,mem_mouse_uuid_list + 23 -0x90036 037772 jam 0x6d ,mem_mouse_uuid_list + 15 -0x90037 037773 setarg 0x401f -0x90038 037774 store 2 ,mem_mouse_uuid_list + 357 -0x90039 037775 setarg 0x6d04 -0x9003a 037776 store 2 ,mem_mouse_uuid_list + 462 -0x9003b 037777 setarg 0x16b0 -0x9003c 037778 store 2 ,mem_mouse_uuid_list + 468 -0x9003d 037780 setarg mem_mouse_uuid_list -0x9003e 037781 store 2 ,mem_ui_uuid_table -0x9003f 037782 rtn +: 037685 z_entrance8: +0x90001 037686 beq zcode_80 ,z_mouse_setting_config +0x90002 037687 beq zcode_81 ,z_le_addr_random_config +0x90003 037689 rtn +: 037698 z_le_addr_random_config: +0x90004 037699 call load_adc_init +0x90005 037700 fetch 2 ,mem_0_5_adc_io_data +0x90006 037701 nbranch z_le_otp_adc_empty ,blank +0x90007 037702 setarg 0x1122 +: 037703 z_le_otp_adc_empty: +0x90008 037704 store 2 ,mem_random_addr_increase_count +0x90009 037705 rtn +: 037708 z_mouse_setting_config: +0x9000a 037709 fetch 4 ,mem_lap +0x9000b 037710 store 4 ,mem_24g_device_addr +0x9000c 037715 call mouse_gpio_init +0x9000d 037717 fetcht 1 ,mem_flash_ncs_gpio +0x9000e 037718 call gpio_config_output +0x9000f 037720 call mouse_param_init +0x90010 037725 call z_mouse_bt_sdp_update +0x90011 037726 setarg 0 +0x90012 037727 store 2 ,mem_lpm_interval +0x90013 037728 call load_adc_init +0x90014 037729 call mouse_adc_init +0x90015 037730 call le_set_config_fixed_ltk +0x90016 037731 call le_set_justwork +0x90017 037732 call le_set_fixed_ltk +0x90018 037733 call le_set_config_read_authentication +0x90019 037734 call p_le_addr_random_config +0x9001a 037735 call p_mouse_load_flash_info_check +0x9001b 037736 arg 3 ,loopcnt +0x9001c 037737 arg mem_device2_addr ,contr +0x9001d 037738 call p_pdata_0xff_check +0x9001e 037739 nbranch p_mouse_le_fast_conn_disable ,user +0x9001f 037740 arg 3 ,loopcnt +0x90020 037741 arg mem_device3_addr ,contr +0x90021 037742 call p_pdata_0xff_check +0x90022 037743 nbranch p_mouse_le_fast_conn_disable ,user +0x90023 037744 call p_mouse_fast_conn_init +0x90024 037745 rtn +: 037747 z_mouse_bt_sdp_update: +0x90025 037748 call enable_authrom +0x90026 037749 arg 0x8c00 ,contr +0x90027 037750 arg mem_mouse_uuid_list ,contw +0x90028 037751 arg 369 ,loopcnt +0x90029 037752 call memcpy +0x9002a 037754 setarg 0x0f0209 +0x9002b 037755 istore 3 ,contw +0x9002c 037756 setarg 0x120009 +0x9002d 037757 istore 3 ,contw +0x9002e 037759 setarg 0x100209 +0x9002f 037760 istore 3 ,contw +0x90030 037761 setarg 0x000009 +0x90031 037762 istore 3 ,contw +0x90032 037763 arg 0x8d71 ,contr +0x90033 037764 arg 265 ,loopcnt +0x90034 037765 call memcpy +0x90035 037767 jam 0 ,mem_mouse_uuid_list + 23 +0x90036 037768 jam 0x6d ,mem_mouse_uuid_list + 15 +0x90037 037769 setarg 0x401f +0x90038 037770 store 2 ,mem_mouse_uuid_list + 357 +0x90039 037771 setarg 0x6d04 +0x9003a 037772 store 2 ,mem_mouse_uuid_list + 462 +0x9003b 037773 setarg 0x16b0 +0x9003c 037774 store 2 ,mem_mouse_uuid_list + 468 +0x9003d 037776 setarg mem_mouse_uuid_list +0x9003e 037777 store 2 ,mem_ui_uuid_table +0x9003f 037778 rtn org 0xa0001 -: 037788 z_entrance9: -0xa0001 037789 beq zcode_90 ,z_g24_pairing_sm -0xa0002 037790 beq zcode_91 ,z_g24_paring_mode -0xa0003 037791 beq zcode_92 ,z_mouse_24g_pairing_complete -0xa0004 037792 rtn -: 037794 z_g24_pairing_sm: -0xa0005 037795 fetch 1 ,mem_24g_ensure -0xa0006 037796 beq ensure_on_24g ,enable_user -0xa0007 037797 fetch 1 ,mem_24g_pairing_sm -0xa0008 037798 beq state_24g_pairing_1 ,z_g24_pairing_sm_1 -0xa0009 037799 beq state_24g_pairing_2 ,z_g24_pairing_sm_2 -0xa000a 037800 beq state_24g_pairing_3 ,z_g24_pairing_sm_3 -0xa000b 037801 branch assert -: 037803 z_g24_pairing_sm_1: -0xa000c 037804 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm -0xa000d 037805 jam 0xaa ,mem_24g_common_temp -0xa000e 037806 branch z_g24_pairing_sm_common -: 037807 z_g24_pairing_sm_2: -0xa000f 037808 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm -0xa0010 037809 jam 0x55 ,mem_24g_common_temp -0xa0011 037810 branch z_g24_pairing_sm_common -: 037811 z_g24_pairing_sm_3: -0xa0012 037812 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm -0xa0013 037813 jam 0x22 ,mem_24g_common_temp -: 037814 z_g24_pairing_sm_common: -0xa0014 037815 fetch 1 ,mem_24g_data_type -0xa0015 037816 and_into bits_data ,pdata -0xa0016 037817 store 1 ,mem_24g_common_temp + 1 -0xa0017 037818 fetch 4 ,mem_24g_device_addr -0xa0018 037819 store 4 ,mem_24g_common_temp + 2 -: 037820 z_g24_put_pairing_data_in_buff: -0xa0019 037821 jam 0 ,mem_24g_common_temp + 6 -0xa001a 037822 arg mem_24g_common_temp ,rega -0xa001b 037823 arg 7 ,temp -0xa001c 037824 call p_g24_put_data_in_buff -0xa001d 037825 call p_g24_txdata_enable_tx -0xa001e 037826 branch enable_user -: 037828 z_g24_paring_mode: -0xa001f 037829 fetch 1 ,mem_24g_pairing_sm -0xa0020 037830 rtneq state_24g_pairing_success -0xa0021 037831 beq state_24g_pairing_1_waiting_ack ,z_g24_pairing_sm_1_waiting_ack -0xa0022 037832 beq state_24g_pairing_2_waiting_ack ,z_g24_pairing_sm_2_waiting_ack -0xa0023 037833 beq state_24g_pairing_3_waiting_ack ,z_g24_pairing_sm_3_waiting_ack -0xa0024 037834 rtn -: 037836 z_g24_pairing_sm_1_waiting_ack: -0xa0025 037837 jam state_24g_pairing_2 ,mem_24g_pairing_sm -0xa0026 037838 branch p_g24_transmit_abandon -: 037839 z_g24_pairing_sm_2_waiting_ack: -0xa0027 037840 jam state_24g_pairing_3 ,mem_24g_pairing_sm -0xa0028 037841 branch p_g24_transmit_abandon -: 037842 z_g24_pairing_sm_3_waiting_ack: -0xa0029 037843 jam state_24g_pairing_success ,mem_24g_pairing_sm -0xa002a 037844 jam bt_evt_24g_pairing_complete ,mem_fifo_temp -0xa002b 037845 call ui_ipc_send_event -0xa002c 037846 fetch 4 ,mem_24g_rxpayload + 2 -0xa002d 037847 call p_g24_update_addr_and_synccrc8 -0xa002e 037848 branch p_g24_transmit_abandon -: 037851 z_mouse_24g_pairing_complete: -0xa002f 037852 call p_mouse_24g_no_data_timer_init -0xa0030 037853 jam 1 ,mem_mouse_24g_enter_lpm_enable -0xa0031 037854 arg mosue_24g_pairing_flag ,queue -0xa0032 037855 call mouse_disable_function_flag -0xa0033 037856 setarg 0 -0xa0034 037857 store 2 ,mem_24g_pairing_timer_count -0xa0035 037858 jam 0 ,mem_mouse_move_flag -0xa0036 037860 call mouse_read_sensor_common -0xa0037 037862 call p_mouse_tx_power_init -0xa0038 037864 fetch 4 ,mem_24g_addr -0xa0039 037865 store 4 ,mem_mouse_24g_addr -0xa003a 037867 branch p_mouse_store_flash_device_info +: 037784 z_entrance9: +0xa0001 037785 beq zcode_90 ,z_g24_pairing_sm +0xa0002 037786 beq zcode_91 ,z_g24_paring_mode +0xa0003 037787 beq zcode_92 ,z_mouse_24g_pairing_complete +0xa0004 037788 rtn +: 037790 z_g24_pairing_sm: +0xa0005 037791 fetch 1 ,mem_24g_ensure +0xa0006 037792 beq ensure_on_24g ,enable_user +0xa0007 037793 fetch 1 ,mem_24g_pairing_sm +0xa0008 037794 beq state_24g_pairing_1 ,z_g24_pairing_sm_1 +0xa0009 037795 beq state_24g_pairing_2 ,z_g24_pairing_sm_2 +0xa000a 037796 beq state_24g_pairing_3 ,z_g24_pairing_sm_3 +0xa000b 037797 branch assert +: 037799 z_g24_pairing_sm_1: +0xa000c 037800 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm +0xa000d 037801 jam 0xaa ,mem_24g_common_temp +0xa000e 037802 branch z_g24_pairing_sm_common +: 037803 z_g24_pairing_sm_2: +0xa000f 037804 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm +0xa0010 037805 jam 0x55 ,mem_24g_common_temp +0xa0011 037806 branch z_g24_pairing_sm_common +: 037807 z_g24_pairing_sm_3: +0xa0012 037808 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm +0xa0013 037809 jam 0x22 ,mem_24g_common_temp +: 037810 z_g24_pairing_sm_common: +0xa0014 037811 fetch 1 ,mem_24g_data_type +0xa0015 037812 and_into bits_data ,pdata +0xa0016 037813 store 1 ,mem_24g_common_temp + 1 +0xa0017 037814 fetch 4 ,mem_24g_device_addr +0xa0018 037815 store 4 ,mem_24g_common_temp + 2 +: 037816 z_g24_put_pairing_data_in_buff: +0xa0019 037817 jam 0 ,mem_24g_common_temp + 6 +0xa001a 037818 arg mem_24g_common_temp ,rega +0xa001b 037819 arg 7 ,temp +0xa001c 037820 call p_g24_put_data_in_buff +0xa001d 037821 call p_g24_txdata_enable_tx +0xa001e 037822 branch enable_user +: 037824 z_g24_paring_mode: +0xa001f 037825 fetch 1 ,mem_24g_pairing_sm +0xa0020 037826 rtneq state_24g_pairing_success +0xa0021 037827 beq state_24g_pairing_1_waiting_ack ,z_g24_pairing_sm_1_waiting_ack +0xa0022 037828 beq state_24g_pairing_2_waiting_ack ,z_g24_pairing_sm_2_waiting_ack +0xa0023 037829 beq state_24g_pairing_3_waiting_ack ,z_g24_pairing_sm_3_waiting_ack +0xa0024 037830 rtn +: 037832 z_g24_pairing_sm_1_waiting_ack: +0xa0025 037833 jam state_24g_pairing_2 ,mem_24g_pairing_sm +0xa0026 037834 branch p_g24_transmit_abandon +: 037835 z_g24_pairing_sm_2_waiting_ack: +0xa0027 037836 jam state_24g_pairing_3 ,mem_24g_pairing_sm +0xa0028 037837 branch p_g24_transmit_abandon +: 037838 z_g24_pairing_sm_3_waiting_ack: +0xa0029 037839 jam state_24g_pairing_success ,mem_24g_pairing_sm +0xa002a 037840 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +0xa002b 037841 call ui_ipc_send_event +0xa002c 037842 fetch 4 ,mem_24g_rxpayload + 2 +0xa002d 037843 call p_g24_update_addr_and_synccrc8 +0xa002e 037844 branch p_g24_transmit_abandon +: 037847 z_mouse_24g_pairing_complete: +0xa002f 037848 call p_mouse_24g_no_data_timer_init +0xa0030 037849 jam 1 ,mem_mouse_24g_enter_lpm_enable +0xa0031 037850 arg mosue_24g_pairing_flag ,queue +0xa0032 037851 call mouse_disable_function_flag +0xa0033 037852 setarg 0 +0xa0034 037853 store 2 ,mem_24g_pairing_timer_count +0xa0035 037854 jam 0 ,mem_mouse_move_flag +0xa0036 037856 call mouse_read_sensor_common +0xa0037 037858 call p_mouse_tx_power_init +0xa0038 037860 fetch 4 ,mem_24g_addr +0xa0039 037861 store 4 ,mem_mouse_24g_addr +0xa003a 037863 branch p_mouse_store_flash_device_info org 0xb0001 -: 037872 z_entrancea: -0xb0001 037873 beq zcode_a0 ,z_mouse_24g_attempt_fail -0xb0002 037874 beq zcode_a1 ,z_mouse_le_conn_param_update_rsp_recieved -0xb0003 037875 beq zcode_a2 ,z_mouse_le_bb_disconnected -0xb0004 037876 beq zcode_a3 ,z_mouse_bb_event_reconn_timeout -0xb0005 037877 beq zcode_a4 ,z_mouse_before_hibernate -0xb0006 037878 rtn -: 037880 z_mouse_24g_attempt_fail: -0xb0007 037881 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -0xb0008 037882 call p_mouse_tx_power_init -0xb0009 037883 call p_g24_check_51cmd_stop_24g -0xb000a 037884 jam 0 ,mem_link_key_exists -0xb000b 037886 fetch 1 ,mem_mouse_multi_led_blink_count -0xb000c 037887 nrtn blank -0xb000d 037889 call p_mouse_setgpio_hibernate -0xb000e 037890 branch app_enter_hibernate -: 037892 z_mouse_le_conn_param_update_rsp_recieved: -0xb000f 037893 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0xb0010 037894 rtneq ble_signaling_connect_parameter_update_accepted -0xb0011 037895 fetch 1 ,mem_le_tsniff -0xb0012 037896 rshift2 pdata ,pdata -0xb0013 037897 sub pdata ,le_interval_15ms ,null -0xb0014 037898 rtn positive -0xb0015 037899 setarg le_interval_11_25ms -0xb0016 037900 store 2 ,mem_le_interval_min -0xb0017 037901 store 2 ,mem_le_interval_min + 2 -0xb0018 037902 call p_app_updata_le_param -0xb0019 037903 jam le_lpm_disable ,mem_mouse_le_conn_param_reject -0xb001a 037904 rtn -: 037907 z_mouse_bb_event_reconn_timeout: -: 037908 z_mouse_bb_event_reconn_failed: -0xb001b 037909 fetch 2 ,mem_ui_state_map -0xb001c 037910 rtnbit1 ui_state_btn_down -0xb001d 037911 rtnbit1 ui_state_bt_discovery -0xb001e 037912 rtnbit1 ui_state_ble_adv -0xb001f 037913 fetch mouse_flag_len ,mem_mouse_flag -0xb0020 037914 rtnbit1 mouse_bt_discovery_button_down_flag -0xb0021 037915 branch app_bb_hibernate -: 037917 z_mouse_le_bb_disconnected: -0xb0022 037918 fetch 1 ,mem_select_device_button_statue_bt_discovery -0xb0023 037919 call p_mouse_le_bb_disconnected_led_blink_set ,blank -0xb0024 037920 jam off ,mem_select_device_button_statue_bt_discovery -0xb0025 037921 jam 0 ,mem_mouse_le_bb_connected_flag -0xb0026 037922 setarg le_interval_8_75ms -0xb0027 037923 store 2 ,mem_le_interval_min -0xb0028 037924 store 2 ,mem_le_interval_min + 2 -0xb0029 037925 jam le_lpm_enable ,mem_mouse_le_conn_param_reject -0xb002a 037926 jam 0 ,mem_mouse_clear_sensor_data_flag -0xb002b 037927 call p_mouse_data_init -0xb002c 037928 call le_clr_config_more_data -0xb002d 037929 call p_mouse_store_flash_device_info -0xb002e 037930 branch mouse_bb_disconnected -: 037933 z_mouse_before_hibernate: -0xb002f 037934 hfetch 4 ,core_lpm_ctrl -0xb0030 037935 set1 26 ,pdata -0xb0031 037936 hstore 4 ,core_lpm_reg -0xb0032 037937 call lpm_write_ctrl -0xb0033 037938 call disable_authrom -0xb0034 037939 call p_mouse_multi_led_blink_off -0xb0035 037940 call p_mouse_store_flash_device_info -0xb0036 037941 call mouse_before_hibernate_wheel_gpio_set -0xb0037 037942 call p_mouse_setgpio_hibernate -0xb0038 037945 call p_flash_deep_power_down -0xb0039 037946 hfetch 1 ,core_gpio_sel1 -0xb003a 037947 and pdata ,0xf7 ,pdata -0xb003b 037948 hstore 1 ,core_gpio_sel1 -0xb003c 037952 branch p_mouse_t_wheel_clear_wake +: 037868 z_entrancea: +0xb0001 037869 beq zcode_a0 ,z_mouse_24g_attempt_fail +0xb0002 037870 beq zcode_a1 ,z_mouse_le_conn_param_update_rsp_recieved +0xb0003 037871 beq zcode_a2 ,z_mouse_le_bb_disconnected +0xb0004 037872 beq zcode_a3 ,z_mouse_bb_event_reconn_timeout +0xb0005 037873 beq zcode_a4 ,z_mouse_before_hibernate +0xb0006 037874 rtn +: 037876 z_mouse_24g_attempt_fail: +0xb0007 037877 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +0xb0008 037878 call p_mouse_tx_power_init +0xb0009 037879 call p_g24_check_51cmd_stop_24g +0xb000a 037880 jam 0 ,mem_link_key_exists +0xb000b 037882 fetch 1 ,mem_mouse_multi_led_blink_count +0xb000c 037883 nrtn blank +0xb000d 037885 call p_mouse_setgpio_hibernate +0xb000e 037886 branch app_enter_hibernate +: 037888 z_mouse_le_conn_param_update_rsp_recieved: +0xb000f 037889 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0xb0010 037890 rtneq ble_signaling_connect_parameter_update_accepted +0xb0011 037891 fetch 1 ,mem_le_tsniff +0xb0012 037892 rshift2 pdata ,pdata +0xb0013 037893 sub pdata ,le_interval_15ms ,null +0xb0014 037894 rtn positive +0xb0015 037895 setarg le_interval_11_25ms +0xb0016 037896 store 2 ,mem_le_interval_min +0xb0017 037897 store 2 ,mem_le_interval_min + 2 +0xb0018 037898 call p_app_updata_le_param +0xb0019 037899 jam le_lpm_disable ,mem_mouse_le_conn_param_reject +0xb001a 037900 rtn +: 037903 z_mouse_bb_event_reconn_timeout: +: 037904 z_mouse_bb_event_reconn_failed: +0xb001b 037905 fetch 2 ,mem_ui_state_map +0xb001c 037906 rtnbit1 ui_state_btn_down +0xb001d 037907 rtnbit1 ui_state_bt_discovery +0xb001e 037908 rtnbit1 ui_state_ble_adv +0xb001f 037909 fetch mouse_flag_len ,mem_mouse_flag +0xb0020 037910 rtnbit1 mouse_bt_discovery_button_down_flag +0xb0021 037911 branch app_bb_hibernate +: 037913 z_mouse_le_bb_disconnected: +0xb0022 037914 fetch 1 ,mem_select_device_button_statue_bt_discovery +0xb0023 037915 call p_mouse_le_bb_disconnected_led_blink_set ,blank +0xb0024 037916 jam off ,mem_select_device_button_statue_bt_discovery +0xb0025 037917 jam 0 ,mem_mouse_le_bb_connected_flag +0xb0026 037918 setarg le_interval_8_75ms +0xb0027 037919 store 2 ,mem_le_interval_min +0xb0028 037920 store 2 ,mem_le_interval_min + 2 +0xb0029 037921 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +0xb002a 037922 jam 0 ,mem_mouse_clear_sensor_data_flag +0xb002b 037923 call p_mouse_data_init +0xb002c 037924 call le_clr_config_more_data +0xb002d 037925 call p_mouse_store_flash_device_info +0xb002e 037926 branch mouse_bb_disconnected +: 037929 z_mouse_before_hibernate: +0xb002f 037930 hfetch 4 ,core_lpm_ctrl +0xb0030 037931 set1 26 ,pdata +0xb0031 037932 hstore 4 ,core_lpm_reg +0xb0032 037933 call lpm_write_ctrl +0xb0033 037934 call disable_authrom +0xb0034 037935 call p_mouse_multi_led_blink_off +0xb0035 037936 call p_mouse_store_flash_device_info +0xb0036 037937 call mouse_before_hibernate_wheel_gpio_set +0xb0037 037938 call p_mouse_setgpio_hibernate +0xb0038 037941 call p_flash_deep_power_down +0xb0039 037942 hfetch 1 ,core_gpio_sel1 +0xb003a 037943 and pdata ,0xf7 ,pdata +0xb003b 037944 hstore 1 ,core_gpio_sel1 +0xb003c 037948 branch p_mouse_t_wheel_clear_wake org 0xc0001 -: 037957 z_entranceb: -0xc0001 037958 beq zcode_b1 ,z_mouse_sniff_not_accept -0xc0002 037959 beq zcode_b2 ,z_mouse_enter_sniff_check -0xc0003 037960 beq zcode_b3 ,z_mouse_le_ll_start_encryt -0xc0004 037961 beq zcode_b4 ,z_mouse_bb_event_disconnected -0xc0005 037962 rtn -: 037964 z_mouse_sniff_not_accept: -0xc0006 037965 fetch 1 ,mem_mouse_enter_sniff_count -0xc0007 037966 rtneq 2 -0xc0008 037967 increase 1 ,pdata -0xc0009 037968 store 1 ,mem_mouse_enter_sniff_count -0xc000a 037969 jam 0x12 ,mem_sniff_param_interval -0xc000b 037970 branch app_bt_enter_sniff -: 037972 z_mouse_enter_sniff_check: -0xc000c 037973 fetch 1 ,mem_mouse_enter_sniff_count -0xc000d 037974 rtnne 2 -0xc000e 037975 jam 0 ,mem_mouse_enter_sniff_count -0xc000f 037976 jam 0x0e ,mem_sniff_param_interval -0xc0010 037977 branch app_bt_enter_sniff -: 037979 z_mouse_le_ll_start_encryt: -0xc0011 037980 fetch 1 ,mem_mouse_le_reconnect_flag -0xc0012 037981 beq 1 ,z_mouse_le_ll_reconn_start_encryt -0xc0013 037982 branch z_mouse_le_ll_enable_start_enc_flag -: 037983 z_mouse_le_ll_reconn_start_encryt: -0xc0014 037984 call p_app_updata_le_param -0xc0015 037985 jam 10 ,mem_le_start_encrypt_timer -: 037986 z_mouse_le_ll_enable_start_enc_flag: -0xc0016 037987 arg ll_start_enc_flag ,queue -0xc0017 037988 branch mouse_le_enable_connect_flag -: 037990 z_mouse_bb_event_disconnected: -0xc0018 037991 jam 1 ,mem_mouse_connected_state -0xc0019 037992 jam 10 ,mem_mouse_multi_led_blink_count -0xc001a 037993 call p_mouse_dpi_multi_led_blink -0xc001b 037994 jam 0 ,mem_bt_rcvd_switch_req_accept -0xc001c 037995 jam 0 ,mem_bt_send_lmp_setup_complete -0xc001d 037996 jam 0 ,mem_mouse_bt_send_first_package_flag -0xc001e 037997 call p_mouse_store_flash_device_info -0xc001f 037998 branch mouse_bb_disconnected +: 037953 z_entranceb: +0xc0001 037954 beq zcode_b1 ,z_mouse_sniff_not_accept +0xc0002 037955 beq zcode_b2 ,z_mouse_enter_sniff_check +0xc0003 037956 beq zcode_b3 ,z_mouse_le_ll_start_encryt +0xc0004 037957 beq zcode_b4 ,z_mouse_bb_event_disconnected +0xc0005 037958 rtn +: 037960 z_mouse_sniff_not_accept: +0xc0006 037961 fetch 1 ,mem_mouse_enter_sniff_count +0xc0007 037962 rtneq 2 +0xc0008 037963 increase 1 ,pdata +0xc0009 037964 store 1 ,mem_mouse_enter_sniff_count +0xc000a 037965 jam 0x12 ,mem_sniff_param_interval +0xc000b 037966 branch app_bt_enter_sniff +: 037968 z_mouse_enter_sniff_check: +0xc000c 037969 fetch 1 ,mem_mouse_enter_sniff_count +0xc000d 037970 rtnne 2 +0xc000e 037971 jam 0 ,mem_mouse_enter_sniff_count +0xc000f 037972 jam 0x0e ,mem_sniff_param_interval +0xc0010 037973 branch app_bt_enter_sniff +: 037975 z_mouse_le_ll_start_encryt: +0xc0011 037976 fetch 1 ,mem_mouse_le_reconnect_flag +0xc0012 037977 beq 1 ,z_mouse_le_ll_reconn_start_encryt +0xc0013 037978 branch z_mouse_le_ll_enable_start_enc_flag +: 037979 z_mouse_le_ll_reconn_start_encryt: +0xc0014 037980 call p_app_updata_le_param +0xc0015 037981 jam 10 ,mem_le_start_encrypt_timer +: 037982 z_mouse_le_ll_enable_start_enc_flag: +0xc0016 037983 arg ll_start_enc_flag ,queue +0xc0017 037984 branch mouse_le_enable_connect_flag +: 037986 z_mouse_bb_event_disconnected: +0xc0018 037987 jam 1 ,mem_mouse_connected_state +0xc0019 037988 jam 10 ,mem_mouse_multi_led_blink_count +0xc001a 037989 call p_mouse_dpi_multi_led_blink +0xc001b 037990 jam 0 ,mem_bt_rcvd_switch_req_accept +0xc001c 037991 jam 0 ,mem_bt_send_lmp_setup_complete +0xc001d 037992 jam 0 ,mem_mouse_bt_send_first_package_flag +0xc001e 037993 call p_mouse_store_flash_device_info +0xc001f 037994 branch mouse_bb_disconnected org 0xd0001 -: 038002 z_entrancec: -: 038005 z_g24_pair_dispatch: -0xd0001 038006 fetch 1 ,mem_24g_stop_g24_mode -0xd0002 038007 beq 1 ,g24_stop_24g_mode -0xd0003 038008 jam 0xff ,mem_24g_common_temp -0xd0004 038009 fetch 1 ,mem_24g_data_type -0xd0005 038010 store 1 ,mem_24g_common_temp + 1 -0xd0006 038011 fetch 4 ,mem_24g_device_addr -0xd0007 038012 store 4 ,mem_24g_common_temp + 2 -0xd0008 038013 arg 6 ,temp -0xd0009 038014 arg mem_24g_common_temp ,rega -0xd000a 038015 call p_g24_put_data_in_buff -0xd000b 038016 call p_g24_transmit_prep -0xd000c 038017 call p_g24_transmit_receive_ack -0xd000d 038018 nbranch z_g24_pair_txdata_retry ,sync -0xd000e 038019 nbranch z_g24_pair_txdata_retry ,user3 -0xd000f 038020 call p_g24_ackpayload_parse -0xd0010 038021 fetch 4 ,mem_24g_addr -0xd0011 038022 fetcht 4 ,mem_24g_allpowerful_addr -0xd0012 038023 isub temp ,null -0xd0013 038024 branch z_g24_auto_pair_skip_rx_length ,zero -0xd0014 038025 fetch 1 ,mem_24g_rxdata_length -0xd0015 038026 rtnne bind_ackpayload_length -: 038027 z_g24_auto_pair_skip_rx_length: -0xd0016 038031 jam 0 ,mem_24g_conn_sm -0xd0017 038032 call p_mouse_tx_power_init -0xd0018 038033 fetch 4 ,mem_24g_addr -0xd0019 038034 fetcht 4 ,mem_24g_paring_addr -0xd001a 038035 isub temp ,null -0xd001b 038036 branch p_g24_start_pairing_sm1 ,zero -0xd001c 038037 fetch 4 ,mem_24g_addr -0xd001d 038038 fetcht 4 ,mem_24g_device_addr -0xd001e 038039 isub temp ,null -0xd001f 038040 call z7_g24_store_dongle_addr ,zero -0xd0020 038042 call g24_app_tx_attempt_success -0xd0021 038043 call p_g24_txbuf_clear -0xd0022 038044 branch p_g24_transmit_by_interrupt_enable -: 038046 z7_g24_store_dongle_addr: -0xd0023 038047 fetch 4 ,mem_24g_rxpayload + 2 -0xd0024 038048 branch p_g24_update_addr_and_synccrc8 -: 038050 z_g24_pair_txdata_retry: -: 038051 z_g24_pair_txdata_switch: -0xd0025 038052 fetch 1 ,mem_24g_auto_paring_switch -0xd0026 038053 increase 1 ,pdata -0xd0027 038054 and_into 3 ,pdata -0xd0028 038055 store 1 ,mem_24g_auto_paring_switch -0xd0029 038056 beq 0 ,z_g24_auto_pair_first_attemp -0xd002a 038057 beq 2 ,z_g24_auto_pair_all_powerful -0xd002b 038058 branch p_g24_pair_init -: 038060 z_g24_auto_pair_first_attemp: -0xd002c 038061 call p_mouse_tx_power_init -0xd002d 038062 fetch 4 ,mem_24g_device_addr -0xd002e 038063 store 4 ,mem_24g_addr -0xd002f 038064 fetch 1 ,mem_24g_pair_current_ch_num -0xd0030 038065 store 1 ,mem_24g_current_ch_number -0xd0031 038066 call z_g24_ch_syncword_crc8_init -0xd0032 038067 storet 1 ,mem_24g_pair_current_ch_num -0xd0033 038068 rtn -: 038070 z_g24_ch_syncword_crc8_init: -0xd0034 038071 call p_g24_syncword_crc8 -0xd0035 038072 branch p_g24_ch -: 038074 z_g24_auto_pair_all_powerful: -0xd0036 038075 jam tx_power_pair ,mem_tx_power -0xd0037 038076 fetch 4 ,mem_24g_allpowerful_addr -0xd0038 038077 store 4 ,mem_24g_addr -0xd0039 038078 fetch 1 ,mem_24g_powerful_current_ch_num -0xd003a 038079 store 1 ,mem_24g_current_ch_number -0xd003b 038080 call z_g24_ch_syncword_crc8_init -0xd003c 038081 storet 1 ,mem_24g_powerful_current_ch_num -0xd003d 038082 rtn +: 037998 z_entrancec: +: 038001 z_g24_pair_dispatch: +0xd0001 038002 fetch 1 ,mem_24g_stop_g24_mode +0xd0002 038003 beq 1 ,g24_stop_24g_mode +0xd0003 038004 jam 0xff ,mem_24g_common_temp +0xd0004 038005 fetch 1 ,mem_24g_data_type +0xd0005 038006 store 1 ,mem_24g_common_temp + 1 +0xd0006 038007 fetch 4 ,mem_24g_device_addr +0xd0007 038008 store 4 ,mem_24g_common_temp + 2 +0xd0008 038009 arg 6 ,temp +0xd0009 038010 arg mem_24g_common_temp ,rega +0xd000a 038011 call p_g24_put_data_in_buff +0xd000b 038012 call p_g24_transmit_prep +0xd000c 038013 call p_g24_transmit_receive_ack +0xd000d 038014 nbranch z_g24_pair_txdata_retry ,sync +0xd000e 038015 nbranch z_g24_pair_txdata_retry ,user3 +0xd000f 038016 call p_g24_ackpayload_parse +0xd0010 038017 fetch 4 ,mem_24g_addr +0xd0011 038018 fetcht 4 ,mem_24g_allpowerful_addr +0xd0012 038019 isub temp ,null +0xd0013 038020 branch z_g24_auto_pair_skip_rx_length ,zero +0xd0014 038021 fetch 1 ,mem_24g_rxdata_length +0xd0015 038022 rtnne bind_ackpayload_length +: 038023 z_g24_auto_pair_skip_rx_length: +0xd0016 038027 jam 0 ,mem_24g_conn_sm +0xd0017 038028 call p_mouse_tx_power_init +0xd0018 038029 fetch 4 ,mem_24g_addr +0xd0019 038030 fetcht 4 ,mem_24g_paring_addr +0xd001a 038031 isub temp ,null +0xd001b 038032 branch p_g24_start_pairing_sm1 ,zero +0xd001c 038033 fetch 4 ,mem_24g_addr +0xd001d 038034 fetcht 4 ,mem_24g_device_addr +0xd001e 038035 isub temp ,null +0xd001f 038036 call z7_g24_store_dongle_addr ,zero +0xd0020 038037 jam 0 ,mem_mouse_long_mult_flag +0xd0021 038038 call g24_app_tx_attempt_success +0xd0022 038039 call p_g24_txbuf_clear +0xd0023 038040 branch p_g24_transmit_by_interrupt_enable +: 038042 z7_g24_store_dongle_addr: +0xd0024 038043 fetch 4 ,mem_24g_rxpayload + 2 +0xd0025 038044 branch p_g24_update_addr_and_synccrc8 +: 038046 z_g24_pair_txdata_retry: +: 038047 z_g24_pair_txdata_switch: +0xd0026 038048 fetch 1 ,mem_24g_auto_paring_switch +0xd0027 038049 increase 1 ,pdata +0xd0028 038050 and_into 3 ,pdata +0xd0029 038051 store 1 ,mem_24g_auto_paring_switch +0xd002a 038052 beq 0 ,z_g24_auto_pair_first_attemp +0xd002b 038053 beq 2 ,z_g24_auto_pair_all_powerful +0xd002c 038054 branch p_g24_pair_init +: 038056 z_g24_auto_pair_first_attemp: +0xd002d 038057 call p_mouse_tx_power_init +0xd002e 038058 fetch 4 ,mem_24g_device_addr +0xd002f 038059 store 4 ,mem_24g_addr +0xd0030 038060 fetch 1 ,mem_24g_pair_current_ch_num +0xd0031 038061 store 1 ,mem_24g_current_ch_number +0xd0032 038062 call z_g24_ch_syncword_crc8_init +0xd0033 038063 storet 1 ,mem_24g_pair_current_ch_num +0xd0034 038064 rtn +: 038066 z_g24_ch_syncword_crc8_init: +0xd0035 038067 call p_g24_syncword_crc8 +0xd0036 038068 branch p_g24_ch +: 038070 z_g24_auto_pair_all_powerful: +0xd0037 038071 jam tx_power_pair ,mem_tx_power +0xd0038 038072 fetch 4 ,mem_24g_allpowerful_addr +0xd0039 038073 store 4 ,mem_24g_addr +0xd003a 038074 fetch 1 ,mem_24g_powerful_current_ch_num +0xd003b 038075 store 1 ,mem_24g_current_ch_number +0xd003c 038076 call z_g24_ch_syncword_crc8_init +0xd003d 038077 storet 1 ,mem_24g_powerful_current_ch_num +0xd003e 038078 rtn org 0xe0001 -: 038086 z_entranced: -0xe0001 038087 beq zcode_d0 ,z_mouse_le_bb_event_connected -0xe0002 038088 beq zcode_d1 ,z_g24_transmit_by_interrupt -0xe0003 038089 rtn -: 038091 z_mouse_le_bb_event_connected: -0xe0004 038092 jam 0 ,mem_mouse_connected_state -0xe0005 038093 call p_mouse_init_sensor_reset -0xe0006 038094 call app_ble_store_reconn_info -0xe0007 038095 jam 1 ,mem_mouse_le_bb_connected_flag -0xe0008 038096 fetch 1 ,mem_mouse_le_reconnect_flag -0xe0009 038097 nbranch z_mouse_le_bb_event_connected_next ,blank -0xe000a 038098 jam 0x14 ,mem_mouse_send_secutiry_request_timer -: 038099 z_mouse_le_bb_event_connected_next: -0xe000b 038100 call p_mouse_data_init -0xe000c 038101 branch mouse_le_bb_event_connected -: 038103 z_g24_transmit_by_interrupt: -0xe000d 038104 call p_g24_timer_check -0xe000e 038105 nrtn user -0xe000f 038106 call p_g24_interval_calibrate -0xe0010 038107 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count -0xe0011 038108 increase 1 ,pdata -0xe0012 038109 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0xe0013 038110 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init -0xe0014 038111 isub temp ,null -0xe0015 038112 call p_g24_transmit_by_interrupt_exit ,zero -0xe0016 038113 branch p_g24_transmit_process -: 038114 p_g24_transmit_by_interrupt_exit: -0xe0017 038115 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -0xe0018 038116 setarg 0 -0xe0019 038117 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0xe001a 038118 setarg 25 -0xe001b 038119 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init -: 038120 p_g24_interval_min: -0xe001c 038121 jam 0 ,mem_24g_pac_index -0xe001d 038122 fetch 1 ,mem_24g_interval_min -: 038123 p_g24_current_interval_store: -0xe001e 038124 store 1 ,mem_24g_interval -0xe001f 038125 rtn -: 038126 p_g24_interval_max: -0xe0020 038127 fetch 1 ,mem_24g_interval_max -0xe0021 038128 branch p_g24_current_interval_store -: 038129 p_g24_interval_calibrate: -0xe0022 038130 fetch 1 ,mem_24g_pac_index -0xe0023 038131 increase 1 ,pdata -0xe0024 038132 store 1 ,mem_24g_pac_index -0xe0025 038133 beq 4 ,p_g24_interval_max -0xe0026 038134 beq 5 ,p_g24_interval_min -0xe0027 038135 rtn +: 038082 z_entranced: +0xe0001 038083 beq zcode_d0 ,z_mouse_le_bb_event_connected +0xe0002 038084 beq zcode_d1 ,z_g24_transmit_by_interrupt +0xe0003 038085 rtn +: 038087 z_mouse_le_bb_event_connected: +0xe0004 038088 jam 0 ,mem_mouse_connected_state +0xe0005 038089 call p_mouse_init_sensor_reset +0xe0006 038090 call app_ble_store_reconn_info +0xe0007 038091 jam 1 ,mem_mouse_le_bb_connected_flag +0xe0008 038092 fetch 1 ,mem_mouse_le_reconnect_flag +0xe0009 038093 nbranch z_mouse_le_bb_event_connected_next ,blank +0xe000a 038094 jam 0x14 ,mem_mouse_send_secutiry_request_timer +: 038095 z_mouse_le_bb_event_connected_next: +0xe000b 038096 call p_mouse_data_init +0xe000c 038097 branch mouse_le_bb_event_connected +: 038099 z_g24_transmit_by_interrupt: +0xe000d 038100 call p_g24_timer_check +0xe000e 038101 nrtn user +0xe000f 038102 call p_g24_interval_calibrate +0xe0010 038103 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count +0xe0011 038104 increase 1 ,pdata +0xe0012 038105 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0xe0013 038106 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init +0xe0014 038107 isub temp ,null +0xe0015 038108 call p_g24_transmit_by_interrupt_exit ,zero +0xe0016 038109 branch p_g24_transmit_process +: 038110 p_g24_transmit_by_interrupt_exit: +0xe0017 038111 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +0xe0018 038112 setarg 0 +0xe0019 038113 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0xe001a 038114 setarg 25 +0xe001b 038115 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init +: 038116 p_g24_interval_min: +0xe001c 038117 jam 0 ,mem_24g_pac_index +0xe001d 038118 fetch 1 ,mem_24g_interval_min +: 038119 p_g24_current_interval_store: +0xe001e 038120 store 1 ,mem_24g_interval +0xe001f 038121 rtn +: 038122 p_g24_interval_max: +0xe0020 038123 fetch 1 ,mem_24g_interval_max +0xe0021 038124 branch p_g24_current_interval_store +: 038125 p_g24_interval_calibrate: +0xe0022 038126 fetch 1 ,mem_24g_pac_index +0xe0023 038127 increase 1 ,pdata +0xe0024 038128 store 1 ,mem_24g_pac_index +0xe0025 038129 beq 4 ,p_g24_interval_max +0xe0026 038130 beq 5 ,p_g24_interval_min +0xe0027 038131 rtn Index: output/bt_program23.meta =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.meta (revision 5165) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.meta (working copy) @@ -305,7 +305,7 @@ rtnbit1 ENABLE_SENSOR_MOTION_PIN setarg G24_LONG_SLEEP_STEP1 store 3,mem_24g_enter_hibernate - jam 50,mem_24g_long_sleep_param_update_timer + jam 20,mem_24g_long_sleep_param_update_timer rtn p_g24_transmit_by_interrupt: @@ -563,8 +563,6 @@ branch g24_stop_24g_mode p_g24_tx_fast_hop: - setarg 240000 - call sleep call power_ctrl_txpower_incrs call power_ctrl_pac_succ_decrs branch p_g24_ch @@ -1383,8 +1381,8 @@ rtn p_mouse_data_xy_release: - //fetch 1,mem_config_function_enable - //rtnbit1 ENABLE_SENSOR_MOTION_PIN + fetch 1,mem_config_function_enable + rtnbit1 ENABLE_SENSOR_MOTION_PIN fetch 1,mem_mouse_long_mult_flag rtnne 1 setarg 0 @@ -37656,7 +37654,7 @@ set0 STATE_24G_RECONN,pdata store 1,mem_24g_conn_sm z_g24_tx_attemp_dongle_succ: - //jam 0,mem_mouse_long_mult_flag + jam 0,mem_mouse_long_mult_flag call g24_app_tx_attempt_success call p_g24_txbuf_clear branch p_g24_transmit_by_interrupt_enable @@ -38036,7 +38034,7 @@ fetcht 4,mem_24g_device_addr isub temp,null call z7_g24_store_dongle_addr,zero - //jam 0,mem_mouse_long_mult_flag + jam 0,mem_mouse_long_mult_flag call g24_app_tx_attempt_success call p_g24_txbuf_clear branch p_g24_transmit_by_interrupt_enable Index: output/flash.dat =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/flash.dat (revision 5164) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/flash.dat (working copy) @@ -2,7 +2,7 @@ 02 aa 55 -ba +b2 1f 20 20 @@ -11,7 +11,7 @@ 20 40 03 -ab +a9 68 00 c1 @@ -23,7 +23,7 @@ 20 40 07 -7b +79 68 00 c6 @@ -47,7 +47,7 @@ 20 40 03 -19 +15 20 40 00 @@ -67,11 +67,11 @@ 20 20 07 -cd +cb 58 00 03 -74 +70 60 01 4d @@ -79,7 +79,7 @@ 58 00 03 -8e +8a 60 01 41 @@ -87,7 +87,7 @@ 58 00 06 -b1 +af 60 01 41 @@ -95,7 +95,7 @@ 58 00 03 -c6 +c4 60 01 41 @@ -103,7 +103,7 @@ 58 00 02 -55 +51 60 01 41 @@ -111,7 +111,7 @@ 58 00 04 -4d +4b 60 01 41 @@ -119,7 +119,7 @@ 58 00 03 -ee +ec 60 01 41 @@ -127,7 +127,7 @@ 58 00 04 -88 +86 60 01 41 @@ -135,7 +135,7 @@ 58 00 04 -91 +8f 60 01 41 @@ -159,11 +159,11 @@ 20 40 02 -d0 +cc 20 40 04 -8e +8c 68 00 c7 @@ -183,7 +183,7 @@ 20 20 05 -5e +5c 58 00 01 @@ -271,27 +271,27 @@ c0 01 00 -81 +7f c0 42 87 -cb +c9 c0 44 87 -9e +9c c0 28 86 -e7 +e5 c0 53 86 -ec +ea c0 56 87 -04 +02 c0 65 b3 @@ -299,47 +299,47 @@ c0 74 87 -15 +13 c0 50 80 -8a +88 c0 58 80 -8f +8d c0 59 00 -99 +97 c0 62 02 -96 +92 c0 71 85 -60 +5e c0 72 03 -f1 +ef c0 73 05 -86 +84 c0 75 05 -e7 +e5 c0 75 85 -ec +ea c0 76 05 -f2 +f0 20 20 2a @@ -347,55 +347,55 @@ c0 1c 85 -f8 +f6 c0 21 -86 -00 +85 +fe c0 25 06 -06 +04 c0 2b 86 -09 +07 c0 2c 86 -0b +09 c0 31 86 -0d +0b c0 33 06 -3c +3a c0 33 86 -53 +51 c0 35 06 -9d +9b c0 3b 86 -a7 +a5 c0 46 06 -b3 +b1 c0 46 86 -bf +bd c0 7d 07 -19 +17 20 20 2a @@ -407,7 +407,7 @@ 20 40 04 -df +dd 24 60 80 @@ -419,7 +419,7 @@ 20 40 04 -df +dd 24 60 80 @@ -443,11 +443,11 @@ 20 40 04 -ff +fd 20 20 03 -06 +02 d8 a0 09 @@ -463,7 +463,7 @@ 20 40 03 -85 +81 68 10 80 @@ -508,14 +508,6 @@ 40 7c cd -d8 -40 -00 -18 -20 -40 -05 -dc 20 20 20 @@ -551,7 +543,7 @@ 20 3a 00 -84 +82 20 20 20 @@ -627,11 +619,11 @@ c2 80 80 -ae +ac c2 81 00 -b0 +ae 68 00 cd @@ -639,23 +631,23 @@ c0 00 80 -b8 +b6 20 40 01 -33 +31 24 34 00 -ba +b8 20 40 01 -0e +0c 20 40 00 -e9 +e7 68 00 cc @@ -667,11 +659,11 @@ 20 40 06 -d5 +d3 20 40 00 -b2 +b0 68 00 cb @@ -679,11 +671,11 @@ c0 00 83 -77 +73 20 40 02 -5f +5b 24 74 00 @@ -691,7 +683,7 @@ 20 40 02 -5c +58 58 00 e2 @@ -707,7 +699,7 @@ 20 20 07 -cd +cb 70 11 c5 @@ -715,7 +707,7 @@ 20 20 07 -cd +cb 68 00 c6 @@ -735,7 +727,7 @@ 70 4b 69 -32 +14 20 60 00 @@ -747,7 +739,7 @@ 20 20 07 -cd +cb 68 00 cc @@ -755,11 +747,11 @@ 20 5a 00 -c0 +be 20 40 02 -5f +5b 24 74 00 @@ -783,7 +775,7 @@ 20 40 00 -d0 +ce 60 00 cb @@ -823,11 +815,11 @@ 20 40 01 -36 +34 20 20 00 -a2 +a0 70 4d 79 @@ -899,11 +891,11 @@ 20 40 06 -2d +2b 20 20 01 -21 +1f 68 00 cd @@ -911,7 +903,7 @@ c0 80 80 -d0 +ce 68 00 cd @@ -927,11 +919,11 @@ c0 02 00 -fe +fc 20 40 01 -21 +1f 70 4c 88 @@ -951,27 +943,27 @@ 20 40 01 -59 +57 24 2c 01 -64 +62 24 37 81 -64 +62 20 40 01 -56 +54 20 40 01 -81 +7d 20 40 07 -7e +7c 70 4b 52 @@ -991,7 +983,7 @@ 20 40 00 -d9 +d7 68 00 cc @@ -999,11 +991,11 @@ c0 ff 81 -9f +9b 20 40 01 -05 +03 58 00 00 @@ -1023,7 +1015,7 @@ 20 40 06 -2d +2b 70 4d 76 @@ -1031,7 +1023,7 @@ 20 20 00 -d0 +ce 70 4d 7b @@ -1047,7 +1039,7 @@ 20 20 00 -d0 +ce 68 00 cd @@ -1055,7 +1047,7 @@ c0 01 81 -02 +00 68 00 cc @@ -1067,19 +1059,19 @@ 20 20 80 -ce +cc 68 00 cd 7a c0 00 -81 -01 +80 +ff c0 01 01 -02 +00 20 60 00 @@ -1095,11 +1087,11 @@ 20 40 01 -13 +11 24 56 01 -1b +19 20 60 00 @@ -1143,7 +1135,7 @@ 20 3a 01 -2e +2c 1f e0 ff @@ -1223,7 +1215,7 @@ 24 3a 00 -e1 +df 70 4c 88 @@ -1231,7 +1223,7 @@ 20 20 01 -21 +1f 68 00 cc @@ -1239,15 +1231,15 @@ c0 ff 81 -9d +99 20 40 01 -39 +37 20 40 01 -b9 +b5 70 4c 48 @@ -1267,7 +1259,7 @@ 20 34 01 -3f +3d 68 03 cb @@ -1283,7 +1275,7 @@ 20 40 03 -a5 +a1 70 4c 6f @@ -1299,7 +1291,7 @@ 20 40 00 -d0 +ce 60 00 cb @@ -1367,7 +1359,7 @@ c2 00 01 -4f +4d 20 60 00 @@ -1391,7 +1383,7 @@ 20 40 02 -15 +11 18 00 2a @@ -1419,11 +1411,11 @@ 20 40 01 -d1 +cd 20 57 82 -12 +0e 20 60 00 @@ -1463,15 +1455,15 @@ c0 ff 81 -6f +6d 20 40 01 -79 +75 20 20 00 -ea +e8 68 00 cc @@ -1492,26 +1484,18 @@ 20 2d d4 -58 -03 -a9 -80 -20 -40 -2a -8f 20 40 07 -95 +93 20 40 06 -2d +2b 20 20 01 -21 +1f 68 00 cc @@ -1523,7 +1507,7 @@ 24 21 01 -74 +72 1f e0 fe @@ -1535,11 +1519,11 @@ c0 03 00 -db +d9 c0 06 00 -db +d9 20 60 00 @@ -1547,7 +1531,7 @@ 20 40 01 -ac +a8 68 00 cc @@ -1615,7 +1599,7 @@ c2 00 01 -90 +8c 1a 22 7e @@ -1647,7 +1631,7 @@ 20 40 01 -88 +84 70 4c 53 @@ -1663,11 +1647,11 @@ 20 20 07 -cd +cb 20 40 07 -7b +79 70 11 c5 @@ -1675,7 +1659,7 @@ 20 20 07 -cd +cb 79 3f 80 @@ -1867,7 +1851,7 @@ 20 40 01 -cb +c7 78 57 fc @@ -1903,7 +1887,7 @@ 24 2c 02 -12 +0e 78 46 fc @@ -1923,7 +1907,7 @@ 20 40 02 -0f +0b 60 00 cc @@ -1939,11 +1923,11 @@ 24 22 82 -12 +0e 20 40 02 -0f +0b 60 00 cb @@ -1963,11 +1947,11 @@ 24 20 82 -12 +0e 20 40 02 -0f +0b e0 a0 80 @@ -1983,11 +1967,11 @@ 20 22 81 -f2 +ee 20 40 02 -0f +0b e0 a0 80 @@ -1995,7 +1979,7 @@ c2 00 01 -ef +eb 18 a2 22 @@ -2003,7 +1987,7 @@ 20 40 02 -0f +0b 60 00 cd @@ -2043,7 +2027,7 @@ 20 23 02 -12 +0e 78 37 fc @@ -2151,7 +2135,7 @@ 20 40 01 -cb +c7 20 40 29 @@ -2243,7 +2227,7 @@ c2 00 02 -2d +29 78 24 7c @@ -2359,7 +2343,7 @@ c2 00 02 -4a +46 18 49 7e @@ -2399,11 +2383,11 @@ 20 40 03 -7b +77 20 40 02 -67 +63 68 00 c0 @@ -2411,7 +2395,7 @@ c3 00 02 -5c +58 68 00 80 @@ -2467,11 +2451,11 @@ 20 40 02 -93 +8f 20 40 02 -5c +58 20 40 3e @@ -2575,7 +2559,7 @@ 20 40 05 -e1 +df 68 08 c6 @@ -2583,7 +2567,7 @@ 20 40 05 -e1 +df 68 08 c6 @@ -2591,7 +2575,7 @@ 20 40 05 -e1 +df 68 08 c6 @@ -2599,7 +2583,7 @@ 20 40 05 -e1 +df 68 00 80 @@ -2651,7 +2635,7 @@ 20 20 05 -60 +5e 70 89 5b @@ -2675,7 +2659,7 @@ 20 35 83 -19 +15 68 01 c4 @@ -2707,7 +2691,7 @@ 24 42 82 -bb +b7 68 00 c7 @@ -2715,7 +2699,7 @@ c0 7f 82 -a8 +a4 1f e6 7c @@ -2723,23 +2707,23 @@ 24 22 82 -aa +a6 20 40 05 -bd +bb c0 02 82 -ce +ca 20 40 02 -b8 +b4 20 40 04 -e3 +e1 da 20 47 @@ -2759,7 +2743,7 @@ 20 22 83 -66 +62 1f e0 ff @@ -2783,7 +2767,7 @@ c0 1a 02 -be +ba 20 60 00 @@ -2819,7 +2803,7 @@ 20 20 07 -cd +cb da 20 43 @@ -2847,7 +2831,7 @@ 20 20 02 -c1 +bd 70 4b b3 @@ -2883,11 +2867,11 @@ 20 20 07 -cd +cb 20 40 03 -19 +15 20 40 40 @@ -2899,11 +2883,11 @@ c0 18 02 -dc +d8 c0 18 82 -eb +e7 20 40 40 @@ -2915,7 +2899,7 @@ 20 20 02 -d2 +ce 70 4b 00 @@ -2927,7 +2911,7 @@ 20 40 02 -d0 +cc 20 20 64 @@ -2935,7 +2919,7 @@ 20 40 05 -56 +54 68 00 c6 @@ -2943,7 +2927,7 @@ c0 2d 02 -e0 +dc 20 20 40 @@ -2959,11 +2943,11 @@ 20 40 02 -e4 +e0 20 20 05 -5c +5a ea 61 00 @@ -2991,11 +2975,11 @@ 20 20 02 -e4 +e0 20 40 05 -56 +54 20 20 40 @@ -3059,7 +3043,7 @@ 20 40 03 -58 +54 20 40 44 @@ -3079,7 +3063,7 @@ 20 22 83 -48 +44 60 09 47 @@ -3103,7 +3087,7 @@ 20 40 05 -16 +14 68 01 47 @@ -3111,7 +3095,7 @@ 20 3a 03 -06 +02 68 00 c2 @@ -3123,39 +3107,39 @@ 20 40 03 -58 +54 20 40 03 -24 +20 20 40 03 -33 +2f 20 40 03 -42 +3e 20 40 03 -37 +33 20 40 03 -28 +24 20 40 03 -1b +17 20 40 02 -ed +e9 20 40 03 -33 +2f d8 40 00 @@ -3171,11 +3155,11 @@ 20 40 03 -20 +1c 20 40 03 -51 +4d 70 42 12 @@ -3187,11 +3171,11 @@ 20 40 02 -ed +e9 20 40 03 -33 +2f d8 40 00 @@ -3215,11 +3199,11 @@ 20 40 03 -37 +33 20 20 03 -28 +24 68 01 c7 @@ -3231,7 +3215,7 @@ 20 40 03 -33 +2f 20 40 65 @@ -3239,11 +3223,11 @@ 20 40 03 -2b +27 c2 80 03 -28 +24 20 60 00 @@ -3287,11 +3271,11 @@ 20 40 03 -2b +27 c3 00 83 -34 +30 20 60 00 @@ -3367,11 +3351,11 @@ 20 40 03 -58 +54 20 40 03 -42 +3e 20 40 65 @@ -3379,11 +3363,11 @@ 20 40 03 -5a +56 20 40 03 -61 +5d 20 40 43 @@ -3407,7 +3391,7 @@ 20 40 02 -ed +e9 20 40 69 @@ -3435,11 +3419,11 @@ 20 20 03 -52 +4e 20 40 03 -58 +54 d8 40 00 @@ -3467,7 +3451,7 @@ 20 40 03 -58 +54 d8 40 00 @@ -3483,7 +3467,7 @@ 20 20 03 -5e +5a 70 47 20 @@ -3491,7 +3475,7 @@ 20 40 07 -6e +6c 70 11 c5 @@ -3499,11 +3483,11 @@ 20 20 07 -cd +cb 20 40 07 -73 +71 70 11 c5 @@ -3511,7 +3495,7 @@ 20 20 07 -cd +cb 20 40 7f @@ -3535,7 +3519,7 @@ c2 00 03 -6f +6b 20 60 00 @@ -3579,7 +3563,7 @@ 20 40 03 -83 +7f d8 c0 19 @@ -3587,7 +3571,7 @@ 20 40 03 -83 +7f d8 c0 1a @@ -3595,7 +3579,7 @@ 20 40 03 -83 +7f d8 c0 1b @@ -3619,7 +3603,7 @@ 20 40 03 -83 +7f d8 a0 19 @@ -3627,7 +3611,7 @@ 20 40 03 -83 +7f d8 a0 1a @@ -3635,7 +3619,7 @@ 20 40 03 -83 +7f d8 a0 1b @@ -3643,7 +3627,7 @@ 20 20 03 -83 +7f 20 40 58 @@ -3659,7 +3643,7 @@ c0 7f 83 -95 +91 68 00 c6 @@ -3679,7 +3663,7 @@ 20 5a 03 -eb +e9 68 02 46 @@ -3699,15 +3683,15 @@ 20 40 03 -a2 +9e 20 40 03 -a5 +a1 20 40 03 -c1 +bf da 20 46 @@ -3719,7 +3703,7 @@ 20 54 03 -b0 +ae 20 60 00 @@ -3738,6 +3722,14 @@ 00 68 00 +c6 +f5 +c3 +83 +80 +00 +68 +00 cb 67 c1 @@ -3759,7 +3751,7 @@ 20 20 02 -d8 +d4 70 47 a2 @@ -3807,7 +3799,7 @@ 20 34 03 -b8 +b6 20 60 00 @@ -3895,7 +3887,7 @@ 20 5a 03 -eb +e9 68 02 46 @@ -3919,15 +3911,15 @@ 20 40 03 -a2 +9e 20 40 03 -a5 +a1 20 40 03 -c1 +bf 68 00 cb @@ -3935,7 +3927,7 @@ c0 00 83 -da +d8 68 00 cb @@ -4027,7 +4019,7 @@ 20 20 02 -d8 +d4 20 40 7e @@ -4035,15 +4027,15 @@ 20 40 04 -39 +37 20 20 03 -f1 +ef 20 40 03 -f4 +f2 20 40 3f @@ -4115,11 +4107,11 @@ c0 00 84 -08 +06 c0 01 04 -0c +0a 68 00 c6 @@ -4127,7 +4119,7 @@ c2 83 84 -18 +16 20 60 00 @@ -4139,11 +4131,11 @@ c0 00 04 -10 +0e c0 01 84 -12 +10 20 60 00 @@ -4155,11 +4147,11 @@ c0 00 04 -14 +12 c0 01 84 -16 +14 20 60 00 @@ -4211,19 +4203,19 @@ c0 00 04 -20 +1e c0 00 84 -23 +21 c0 01 04 -26 +24 c0 01 84 -29 +27 20 60 00 @@ -4235,7 +4227,7 @@ c0 01 84 -2c +2a 20 60 00 @@ -4247,7 +4239,7 @@ c0 00 04 -2c +2a 20 60 00 @@ -4259,7 +4251,7 @@ c0 01 84 -31 +2f 20 60 00 @@ -4271,7 +4263,7 @@ c0 00 04 -31 +2f 20 60 00 @@ -4327,11 +4319,11 @@ 20 20 05 -dc +da 20 40 04 -36 +34 68 08 c6 @@ -4339,7 +4331,7 @@ 20 40 05 -e1 +df 68 08 c6 @@ -4351,11 +4343,11 @@ 20 20 84 -4b +49 20 40 05 -dc +da 68 00 c6 @@ -4395,7 +4387,7 @@ 20 40 07 -6b +69 20 20 3d @@ -4403,7 +4395,7 @@ 20 40 05 -dc +da 20 20 3d @@ -4415,31 +4407,31 @@ c0 0a 04 -5e +5c c0 0a 84 -60 +5e c0 14 84 -63 +61 c0 19 04 -65 +63 c0 20 04 -67 +65 c0 02 04 -69 +67 c0 09 84 -69 +67 c0 0c b3 @@ -4447,31 +4439,31 @@ c0 10 84 -6d +6b c0 00 84 -6f +6d c0 01 04 -73 +71 c0 15 84 -76 +74 c0 1c 84 -78 +76 c0 1d 04 -7d +7b c0 1e 04 -83 +81 20 20 41 @@ -4483,11 +4475,11 @@ 20 20 07 -cd +cb 20 40 04 -8b +89 70 11 c5 @@ -4495,7 +4487,7 @@ 20 20 07 -cd +cb 70 0a 99 @@ -4511,7 +4503,7 @@ 20 20 07 -cd +cb 70 11 c5 @@ -4519,7 +4511,7 @@ 20 20 07 -cd +cb 70 11 c5 @@ -4527,7 +4519,7 @@ 20 20 07 -cd +cb 70 11 c5 @@ -4535,7 +4527,7 @@ 20 20 07 -cd +cb 70 11 c5 @@ -4543,7 +4535,7 @@ 20 20 07 -cd +cb 70 4b b9 @@ -4555,7 +4547,7 @@ 20 40 02 -d8 +d4 20 20 42 @@ -4563,7 +4555,7 @@ 20 40 04 -8b +89 70 11 c5 @@ -4571,7 +4563,7 @@ 20 20 07 -cd +cb 70 11 c5 @@ -4579,11 +4571,11 @@ 20 20 07 -cd +cb 20 40 07 -59 +57 70 4b b9 @@ -4591,7 +4583,7 @@ 20 40 02 -d8 +d4 70 11 c5 @@ -4599,7 +4591,7 @@ 20 20 07 -cd +cb 70 4b b9 @@ -4611,11 +4603,11 @@ 20 40 07 -6b +69 20 40 04 -8b +89 70 11 c5 @@ -4623,15 +4615,15 @@ 20 20 07 -cd +cb 20 40 07 -5d +5b 20 40 07 -6e +6c 70 4b b9 @@ -4639,7 +4631,7 @@ 20 40 02 -d8 +d4 20 20 3f @@ -4647,7 +4639,7 @@ 20 40 04 -8b +89 70 11 c5 @@ -4655,7 +4647,7 @@ 20 20 07 -cd +cb 68 00 cb @@ -4671,7 +4663,7 @@ 20 40 02 -d0 +cc 58 00 08 @@ -4683,19 +4675,19 @@ 20 40 05 -0d +0b 20 40 05 -45 +43 20 40 04 -bf +bd 20 40 04 -e3 +e1 20 40 42 @@ -4707,27 +4699,27 @@ 20 40 04 -cb +c9 20 40 04 -ab +a9 20 40 04 -a8 +a6 20 40 04 -b1 +af 20 40 04 -b7 +b5 20 40 04 -a0 +9e 20 40 42 @@ -4735,11 +4727,11 @@ 20 40 04 -a3 +a1 20 20 07 -31 +2f da 60 48 @@ -4759,7 +4751,7 @@ da 40 04 -a6 +a4 20 20 33 @@ -4791,7 +4783,7 @@ da 40 04 -ae +ac 20 20 33 @@ -4815,7 +4807,7 @@ da 40 04 -b4 +b2 20 20 33 @@ -4847,7 +4839,7 @@ da 40 04 -bc +ba 20 20 33 @@ -4871,7 +4863,7 @@ da 40 04 -c2 +c0 20 20 33 @@ -4891,7 +4883,7 @@ da 40 04 -c7 +c5 20 20 33 @@ -4919,7 +4911,7 @@ da 40 04 -ce +cc 20 20 33 @@ -4939,7 +4931,7 @@ da 40 04 -d3 +d1 20 20 33 @@ -4999,7 +4991,7 @@ 20 40 05 -dc +da 68 08 c6 @@ -5011,15 +5003,15 @@ 20 40 04 -df +dd 24 20 84 -ee +ec 20 40 04 -d0 +ce 68 00 c6 @@ -5059,7 +5051,7 @@ 24 3a 05 -06 +04 68 00 c6 @@ -5079,7 +5071,7 @@ 24 41 04 -f9 +f7 68 00 c6 @@ -5099,7 +5091,7 @@ 20 40 04 -ff +fd 70 41 bd @@ -5107,7 +5099,7 @@ 20 40 03 -06 +02 68 02 46 @@ -5175,7 +5167,7 @@ 20 20 07 -6b +69 68 01 4b @@ -5223,7 +5215,7 @@ 20 40 05 -30 +2e 20 40 69 @@ -5247,7 +5239,7 @@ 20 41 05 -2d +2b 60 01 47 @@ -5259,11 +5251,11 @@ 20 20 05 -22 +20 20 40 05 -38 +36 68 00 c2 @@ -5275,7 +5267,7 @@ c3 00 05 -28 +26 70 4a ff @@ -5303,7 +5295,7 @@ 20 20 07 -5f +5d d8 40 00 @@ -5447,7 +5439,7 @@ 24 41 05 -54 +52 1f e6 7c @@ -5455,11 +5447,11 @@ 20 21 07 -51 +4f 20 20 07 -5f +5d 70 46 cf @@ -5471,7 +5463,7 @@ 20 40 03 -19 +15 58 00 80 @@ -5491,7 +5483,7 @@ 20 40 02 -e4 +e0 68 00 c7 @@ -5499,7 +5491,7 @@ c0 ff 85 -60 +5e 68 00 c6 @@ -5515,15 +5507,15 @@ c0 02 05 -7d +7b c0 03 05 -70 +6e c0 03 85 -70 +6e 68 00 c7 @@ -5535,7 +5527,7 @@ 20 42 85 -6b +69 68 00 c7 @@ -5543,7 +5535,7 @@ c0 00 05 -6d +6b c0 01 bd @@ -5583,7 +5575,7 @@ 20 42 85 -6b +69 68 00 c7 @@ -5591,11 +5583,11 @@ c0 00 05 -79 +77 c0 01 85 -7b +79 68 00 cb @@ -5615,7 +5607,7 @@ 20 20 05 -77 +75 68 00 cb @@ -5623,7 +5615,7 @@ 20 20 05 -77 +75 68 00 c7 @@ -5635,7 +5627,7 @@ 20 42 85 -6b +69 68 00 c7 @@ -5675,11 +5667,11 @@ 20 40 05 -91 +8f 20 40 02 -93 +8f 20 40 40 @@ -5691,11 +5683,11 @@ 20 40 05 -bb +b9 20 40 05 -9e +9c 24 74 00 @@ -5719,15 +5711,15 @@ c0 02 05 -97 +95 c0 02 85 -99 +97 20 20 05 -9b +99 20 40 3f @@ -5779,7 +5771,7 @@ 20 40 05 -a9 +a7 60 01 46 @@ -5791,7 +5783,7 @@ 20 40 05 -a9 +a7 60 01 46 @@ -5803,11 +5795,11 @@ c2 85 85 -ac +aa c3 05 85 -b0 +ae 20 60 00 @@ -5819,7 +5811,7 @@ 20 40 05 -b0 +ae 1f e6 7e @@ -5835,7 +5827,7 @@ 20 20 05 -b2 +b0 60 01 4b @@ -5851,7 +5843,7 @@ 24 41 05 -b8 +b6 68 01 4b @@ -5875,7 +5867,7 @@ 20 40 05 -bd +bb 20 20 40 @@ -5887,7 +5879,7 @@ 20 40 05 -c0 +be 20 20 40 @@ -5899,7 +5891,7 @@ 20 40 05 -dc +da 68 08 c6 @@ -5919,7 +5911,7 @@ 20 40 05 -dc +da 68 08 c6 @@ -5939,7 +5931,7 @@ 20 40 05 -dc +da 68 08 c6 @@ -5955,7 +5947,7 @@ 20 40 04 -36 +34 68 08 c6 @@ -5963,7 +5955,7 @@ 20 40 05 -e1 +df 68 08 c6 @@ -5979,11 +5971,11 @@ 20 40 05 -dc +da 20 40 04 -36 +34 68 08 c6 @@ -5991,7 +5983,7 @@ 20 40 05 -e1 +df 68 08 c6 @@ -6023,7 +6015,7 @@ 20 20 05 -e5 +e3 79 3f 84 @@ -6055,7 +6047,7 @@ 20 40 81 -a2 +9e 20 20 42 @@ -6067,7 +6059,7 @@ 20 20 07 -cd +cb 70 11 c5 @@ -6075,7 +6067,7 @@ 20 20 07 -cd +cb d8 a0 43 @@ -6095,7 +6087,7 @@ 20 40 07 -59 +57 58 00 00 @@ -6111,7 +6103,7 @@ 20 40 02 -d8 +d4 20 20 42 @@ -6143,7 +6135,7 @@ 20 40 06 -d5 +d3 20 20 53 @@ -6179,7 +6171,7 @@ 20 40 02 -05 +01 20 20 54 @@ -6191,7 +6183,7 @@ 20 20 07 -cd +cb 70 11 c5 @@ -6199,7 +6191,7 @@ 20 20 07 -cd +cb 68 00 84 @@ -6207,11 +6199,11 @@ c2 82 86 -2c +2a 20 40 07 -7e +7c 68 00 c7 @@ -6219,7 +6211,7 @@ 24 3a 06 -17 +15 68 00 84 @@ -6227,7 +6219,7 @@ c3 02 06 -1b +19 68 00 82 @@ -6235,7 +6227,7 @@ 20 3a 06 -1b +19 20 20 56 @@ -6263,7 +6255,7 @@ c0 82 86 -1e +1c 70 47 8e @@ -6275,7 +6267,7 @@ 20 5a 03 -b4 +b2 20 20 56 @@ -6327,7 +6319,7 @@ 20 40 06 -21 +1f 68 00 cd @@ -6339,7 +6331,7 @@ 24 41 07 -82 +80 68 00 cd @@ -6443,7 +6435,7 @@ c0 01 86 -4b +49 20 20 56 @@ -6455,7 +6447,7 @@ c0 00 86 -4e +4c 20 20 5c @@ -6487,11 +6479,11 @@ c0 02 06 -57 +55 c0 03 06 -95 +93 20 20 56 @@ -6503,7 +6495,7 @@ 20 40 06 -35 +33 20 40 7e @@ -6519,7 +6511,7 @@ c0 08 06 -66 +64 1f ec 84 @@ -6531,7 +6523,7 @@ 20 21 06 -74 +72 d8 40 47 @@ -6615,11 +6607,11 @@ c0 05 06 -77 +75 c0 09 06 -85 +83 20 20 58 @@ -6635,7 +6627,7 @@ c2 81 86 -7e +7c 68 01 04 @@ -6663,7 +6655,7 @@ 24 22 86 -7a +78 20 40 5a @@ -6671,7 +6663,7 @@ 24 34 06 -7a +78 70 04 7a @@ -6751,11 +6743,11 @@ c0 00 86 -99 +97 c0 02 86 -9b +99 20 20 5a @@ -6775,7 +6767,7 @@ 20 20 07 -cd +cb 68 00 80 @@ -6823,7 +6815,7 @@ 20 37 06 -aa +a8 24 36 d8 @@ -6863,7 +6855,7 @@ 20 20 07 -cd +cb 68 10 80 @@ -6903,7 +6895,7 @@ 20 40 06 -c0 +be 60 18 80 @@ -6979,7 +6971,7 @@ 20 40 86 -d1 +cf 20 20 24 @@ -6995,11 +6987,11 @@ 20 40 86 -2d +2b 24 40 87 -7e +7c 68 01 46 @@ -7023,7 +7015,7 @@ 20 40 02 -47 +43 60 08 cd @@ -7035,7 +7027,7 @@ c5 13 06 -df +dd 58 00 00 @@ -7047,7 +7039,7 @@ 24 21 07 -94 +92 68 00 cd @@ -7059,7 +7051,7 @@ 24 21 07 -84 +82 68 00 cd @@ -7067,7 +7059,7 @@ c0 00 07 -95 +93 20 60 00 @@ -7087,7 +7079,7 @@ 20 40 02 -05 +01 20 20 25 @@ -7131,7 +7123,7 @@ 20 3a 06 -f8 +f6 68 00 c5 @@ -7239,7 +7231,7 @@ 20 5a 07 -12 +10 20 20 2b @@ -7271,7 +7263,7 @@ 20 20 07 -cd +cb 20 40 62 @@ -7291,15 +7283,15 @@ c0 0f 87 -24 +22 c0 10 07 -27 +25 c0 09 07 -21 +1f 20 20 7d @@ -7327,7 +7319,7 @@ 20 20 07 -29 +27 70 01 85 @@ -7367,7 +7359,7 @@ 20 20 03 -06 +02 68 00 cb @@ -7383,11 +7375,11 @@ c0 00 07 -37 +35 c0 00 87 -41 +3f 20 60 00 @@ -7395,7 +7387,7 @@ 20 40 07 -51 +4f 68 00 cb @@ -7419,7 +7411,7 @@ 20 42 87 -3f +3d 20 60 00 @@ -7431,7 +7423,7 @@ 20 20 07 -5f +5d 68 00 cb @@ -7463,7 +7455,7 @@ 20 3a 07 -4d +4b 68 00 cb @@ -7471,7 +7463,7 @@ 20 3a 07 -5d +5b 1f e0 ff @@ -7487,11 +7479,11 @@ c0 00 87 -5f +5d c0 00 07 -51 +4f 20 60 00 @@ -7507,15 +7499,15 @@ c0 00 87 -57 +55 c0 01 07 -56 +54 20 20 07 -58 +56 20 20 44 @@ -7559,7 +7551,7 @@ 24 3a 07 -63 +61 70 4b 27 @@ -7611,7 +7603,7 @@ 20 20 07 -77 +75 70 4b 31 @@ -7723,7 +7715,7 @@ c5 13 07 -8b +89 58 00 00 @@ -7743,7 +7735,7 @@ c0 00 07 -9c +9a 1f e0 ff @@ -7755,7 +7747,7 @@ c0 00 07 -9c +9a 70 41 de @@ -7775,7 +7767,7 @@ c0 01 07 -9a +98 1f e0 fe @@ -7787,7 +7779,7 @@ c0 00 87 -92 +90 70 41 de @@ -7871,19 +7863,19 @@ c0 01 07 -b6 +b4 c0 02 07 -be +bc c0 10 07 -c8 +c6 20 40 07 -c3 +c1 70 89 55 @@ -7935,7 +7927,7 @@ 20 40 07 -c3 +c1 70 89 55 @@ -8011,7 +8003,7 @@ 20 22 87 -ec +ea 60 08 cb @@ -8055,7 +8047,7 @@ 20 40 03 -58 +54 68 01 cb @@ -8087,11 +8079,11 @@ 24 22 87 -dd +db 20 40 03 -19 +15 58 00 1f @@ -8124,8 +8116,8 @@ 20 00 01 -9a -68 +4b +fd aa 55 08 @@ -8133,7 +8125,7 @@ 75 41 8f -1a +1c ce 00 0a @@ -9196,22 +9188,22 @@ 00 b8 4b -ff +18 aa 55 03 00 57 4b -04 -32 +fc +31 00 55 aa aa 55 -da -1c +f5 +1b ff 20 20 @@ -9236,7 +9228,7 @@ 20 40 02 -d8 +d4 20 40 34 @@ -9260,7 +9252,7 @@ 20 40 03 -ab +a9 20 20 41 @@ -9268,7 +9260,7 @@ 20 40 02 -38 +34 24 74 00 @@ -9304,7 +9296,7 @@ 20 20 00 -9f +9d 70 4d 83 @@ -9512,27 +9504,27 @@ 20 40 01 -a7 +a3 20 40 01 -b9 +b5 20 40 01 -59 +57 24 2c 00 -25 +26 24 37 80 -25 +26 20 40 01 -81 +7d 68 02 4c @@ -9564,7 +9556,7 @@ 20 40 02 -b8 +b4 68 02 4c @@ -9580,7 +9572,7 @@ 20 22 81 -9a +96 68 02 4c @@ -9596,7 +9588,11 @@ 20 42 80 -23 +24 +70 +4b +67 +00 20 40 2f @@ -9604,11 +9600,11 @@ 20 40 01 -56 +54 20 20 03 -77 +73 68 02 4c @@ -9616,7 +9612,7 @@ 20 20 01 -8c +88 68 00 cd @@ -9636,19 +9632,19 @@ c0 00 00 -2c +2d c0 01 00 -36 +37 20 20 01 -88 +84 20 40 02 -b8 +b4 68 02 4c @@ -9668,7 +9664,7 @@ 20 40 00 -34 +35 60 08 cd @@ -9680,11 +9676,11 @@ 20 40 01 -8d +89 20 20 01 -21 +1f 70 41 de @@ -9708,7 +9704,7 @@ 20 40 00 -34 +35 60 08 cd @@ -9721,10 +9717,6 @@ 00 00 00 -00 -00 -00 -00 20 20 00 @@ -9808,7 +9800,7 @@ 20 40 04 -63 +61 70 46 c6 @@ -9832,7 +9824,7 @@ 20 40 07 -6b +69 70 4b 01 @@ -9848,7 +9840,7 @@ 20 40 03 -06 +02 20 20 41 @@ -10016,11 +10008,11 @@ 20 40 02 -b8 +b4 20 40 01 -a2 +9e 70 41 bd @@ -10036,7 +10028,7 @@ 20 40 02 -69 +65 20 20 34 @@ -10080,7 +10072,7 @@ 20 40 04 -63 +61 70 47 c6 @@ -10124,7 +10116,7 @@ 20 5a 05 -0a +08 70 4b ba @@ -10156,7 +10148,7 @@ 20 40 03 -ab +a9 20 40 58 @@ -10164,7 +10156,7 @@ 20 40 03 -06 +02 20 20 41 @@ -10192,11 +10184,11 @@ 20 40 07 -5d +5b 20 40 03 -06 +02 20 40 3e @@ -10204,11 +10196,11 @@ 20 40 02 -69 +65 20 40 03 -51 +4d 68 10 80 @@ -10224,7 +10216,7 @@ 20 20 02 -81 +7d 00 00 00 @@ -10352,11 +10344,11 @@ 20 40 01 -a7 +a3 20 40 01 -36 +34 20 20 7f @@ -10392,7 +10384,7 @@ 20 20 00 -fa +f8 70 4c 53 @@ -10400,7 +10392,7 @@ 20 20 00 -fa +f8 70 4c 53 @@ -10420,15 +10412,15 @@ 20 40 01 -8c +88 20 20 00 -fa +f8 20 40 04 -87 +85 70 47 8b @@ -10460,7 +10452,7 @@ 20 40 02 -b8 +b4 68 02 4c @@ -10472,7 +10464,7 @@ 20 20 03 -06 +02 00 00 00 @@ -10596,11 +10588,11 @@ 20 40 05 -ea +e8 20 40 02 -fb +f7 df 20 00 @@ -10612,11 +10604,11 @@ 20 40 03 -6d +69 24 34 02 -c7 +c3 df 20 00 @@ -10628,15 +10620,15 @@ 20 40 03 -6d +69 24 34 02 -c7 +c3 20 40 02 -c9 +c5 20 60 00 @@ -10760,7 +10752,7 @@ c0 38 80 -19 +1a 20 60 00 @@ -10776,19 +10768,19 @@ 20 40 00 -10 +11 20 40 01 -59 +57 24 2c 01 -21 +1f 24 37 81 -21 +1f 68 00 cd @@ -10801,6 +10793,10 @@ 00 cd 93 +70 +4b +67 +00 20 40 2f @@ -10808,11 +10804,11 @@ 20 40 01 -56 +54 20 20 03 -77 +73 70 11 9e @@ -10844,11 +10840,11 @@ 20 40 01 -a7 +a3 20 20 01 -b9 +b5 5f ff ff @@ -10876,11 +10872,7 @@ 20 20 03 -06 -00 -00 -00 -00 +02 00 00 00 @@ -11032,7 +11024,7 @@ 20 34 03 -6a +66 79 20 00 @@ -11052,11 +11044,11 @@ 20 40 01 -8d +89 20 40 01 -21 +1f 20 20 00 @@ -11180,7 +11172,7 @@ 20 20 03 -6a +66 00 00 00 @@ -11280,7 +11272,7 @@ 20 40 02 -b8 +b4 70 47 9e @@ -11296,7 +11288,7 @@ 20 40 03 -5a +56 68 09 47 @@ -11316,7 +11308,7 @@ 20 40 03 -12 +0e 18 0a 7e @@ -11336,7 +11328,7 @@ 20 40 02 -c7 +c3 20 40 34 @@ -11412,7 +11404,7 @@ 20 20 07 -73 +71 70 47 a1 @@ -11420,7 +11412,7 @@ 20 40 02 -c0 +bc 58 00 00 @@ -11436,7 +11428,7 @@ 20 40 05 -ee +ec 20 20 7d @@ -12060,7 +12052,7 @@ 20 40 07 -6e +6c 70 47 a1 @@ -12096,7 +12088,7 @@ 20 40 02 -c0 +bc 58 00 00 @@ -12112,7 +12104,7 @@ 20 40 05 -ee +ec 20 20 7d @@ -12196,7 +12188,7 @@ 20 20 04 -8e +8c 18 00 7e @@ -12352,7 +12344,7 @@ c2 85 04 -ee +ec 20 20 41 @@ -12384,7 +12376,7 @@ 20 40 05 -bd +bb 20 60 80 @@ -12464,7 +12456,7 @@ c0 02 84 -6b +69 20 20 4d @@ -12801,5 +12793,5 @@ 55 00 00 -d6 -c9 +fc +05 Index: output/program.lis =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/program.lis (revision 5164) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/program.lis (working copy) @@ -7,42 +7,42 @@ p_zcode: p_wake_from_power: -0001 204003ab call p_mouse_data_init +0001 204003a9 call p_mouse_data_init 0002 6800c1de fetch 1 ,mem_tx_power 0003 6000ccfa store 1 ,mem_tx_power_temp -0004 2040077b call power_ctrl_pac_succ_cnt_init +0004 20400779 call power_ctrl_pac_succ_cnt_init 0005 6800c685 fetch 1 ,mem_ui_button_timeout 0006 6000cb47 store 1 ,mem_select_ui_button_count 0007 6800cb33 fetch 1 ,mem_bt_ui_button_timeout 0008 6000cb34 store 1 ,mem_bt_ui_button_count 0009 204043ca call mouse_bt_discovery_button_down_disable -000a 20400319 call p_mouse_spi_init +000a 20400315 call p_mouse_spi_init 000b 20400010 call p_mouse_cb_fuction 000c 20400023 call p_mouse_wakeup_from_power 000d 20400063 call p_mouse_select_device_button_wakeup_check p_mouse_setting_config: 000e 7011c580 jam zcode_80 ,mem_zcode_temp_param0 -000f 202007cd branch p_zcode_entrance +000f 202007cb branch p_zcode_entrance p_mouse_cb_fuction: -0010 58000374 setarg p_mouse_g24_package_data +0010 58000370 setarg p_mouse_g24_package_data 0011 60014d74 store 2 ,mem_cb_24g_data -0012 5800038e setarg p_mouse_le +0012 5800038a setarg p_mouse_le 0013 600141ef store 2 ,mem_cb_le_process -0014 580006b1 setarg p_le_mouse_bb_event_connect_complete +0014 580006af setarg p_le_mouse_bb_event_connect_complete 0015 600141f9 store 2 ,mem_cb_att_write -0016 580003c6 setarg p_mouse_bt +0016 580003c4 setarg p_mouse_bt 0017 600141f1 store 2 ,mem_cb_bt_process -0018 58000255 setarg p_mouse_before_lpm +0018 58000251 setarg p_mouse_before_lpm 0019 600141ed store 2 ,mem_cb_before_lpm -001a 5800044d setarg p_mouse_priority_bb_event +001a 5800044b setarg p_mouse_priority_bb_event 001b 600141f5 store 2 ,mem_cb_bb_event_process -001c 580003ee setarg p_mouse_idle +001c 580003ec setarg p_mouse_idle 001d 600141f3 store 2 ,mem_cb_idle_process -001e 58000488 setarg p_mouse_before_hibernate +001e 58000486 setarg p_mouse_before_hibernate 001f 600141eb store 2 ,mem_cb_before_hibernate -0020 58000491 setarg p_mouse_bb_event_timer +0020 5800048f setarg p_mouse_bb_event_timer 0021 600141fd store 2 ,mem_cb_event_timer 0022 20600000 rtn @@ -50,15 +50,15 @@ 0023 58000019 setarg 25 0024 60014d86 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init 0025 2455802d ncall p_mouse_24g_transmit_by_interrupt_exit_count_max ,wake -0026 204002d0 call p_mouse_init_sunt -0027 2040048e call p_mouse_sensor_powerdown +0026 204002cc call p_mouse_init_sunt +0027 2040048c call p_mouse_sensor_powerdown p_mouse_wakeup_no_from_power: 0028 6800c71f fetch 1 ,mem_reconn_times_init 0029 6000c71e store 1 ,mem_reconn_times 002a 6800c241 fetch 1 ,mem_power_on_flag 002b c3810000 rtnbit1 2 -002c 2020055e branch p_mouse_dpi_config_default +002c 2020055c branch p_mouse_dpi_config_default p_mouse_24g_transmit_by_interrupt_exit_count_max: 002d 58000177 setarg 375 @@ -84,48 +84,48 @@ p_patch_array: 0040 c2840055 bbit1 8 ,pf_patch_ext 0041 c000806f beq patch00_1 ,p_soft_reset_1 -0042 c0010081 beq patch00_2 ,p_soft_reset_2 -0043 c04287cb beq patch10_5 ,p_shutdown_radio -0044 c044879e beq patch11_1 ,p_set_freq_tx -0045 c02886e7 beq patch0a_1 ,p_slave_conn_recv_packet -0046 c05386ec beq patch14_7 ,p_lpm_dispatch -0047 c0568704 beq patch15_5 ,p_lpm_set_mult +0042 c001007f beq patch00_2 ,p_soft_reset_2 +0043 c04287c9 beq patch10_5 ,p_shutdown_radio +0044 c044879c beq patch11_1 ,p_set_freq_tx +0045 c02886e5 beq patch0a_1 ,p_slave_conn_recv_packet +0046 c05386ea beq patch14_7 ,p_lpm_dispatch +0047 c0568702 beq patch15_5 ,p_lpm_set_mult 0048 c065b3e4 beq patch19_3 ,app_bt_start_reconnect + 3 -0049 c0748715 beq patch1d_1 ,p_mouse_bb_disconnected -004a c050808a beq patch14_1 ,p_init_param -004b c058808f beq patch16_1 ,p_lpm_check_wake_lock -004c c0590099 beq patch16_2 ,p_g24_dispatch -004d c0620296 beq patch18_4 ,p_device_init -004e c0718560 beq patch1c_3 ,p_mouse_seting_dpi -004f c07203f1 beq patch1c_4 ,p_mouse_wheel_check -0050 c0730586 beq patch1c_6 ,p_mouse_motion -0051 c07505e7 beq patch1d_2 ,p_mouse_bb_event_discovery_btn -0052 c07585ec beq patch1d_3 ,p_mouse_start_discovery -0053 c07605f2 beq patch1d_4 ,p_mouse_stop_discovery +0049 c0748713 beq patch1d_1 ,p_mouse_bb_disconnected +004a c0508088 beq patch14_1 ,p_init_param +004b c058808d beq patch16_1 ,p_lpm_check_wake_lock +004c c0590097 beq patch16_2 ,p_g24_dispatch +004d c0620292 beq patch18_4 ,p_device_init +004e c071855e beq patch1c_3 ,p_mouse_seting_dpi +004f c07203ef beq patch1c_4 ,p_mouse_wheel_check +0050 c0730584 beq patch1c_6 ,p_mouse_motion +0051 c07505e5 beq patch1d_2 ,p_mouse_bb_event_discovery_btn +0052 c07585ea beq patch1d_3 ,p_mouse_start_discovery +0053 c07605f0 beq patch1d_4 ,p_mouse_stop_discovery 0054 20202a8e branch loop pf_patch_ext: -0055 c01c85f8 beq patch27_1 ,p_le_slave_match -0056 c0218600 beq patch28_3 ,p_le_next_adv_channel -0057 c0250606 beq patch29_2 ,p_le_receive_skip -0058 c02b8609 beq patch2a_7 ,p_le_update_param -0059 c02c860b beq patch2b_1 ,p_le_update_channel_map -005a c031860d beq patch2c_3 ,p_le_prepare_tx -005b c033063c beq patch2c_6 ,p_le_parse -005c c0338653 beq patch2c_7 ,p_le_parse_l2cap -005d c035069d beq patch2d_2 ,p_le_adv_not_match -005e c03b86a7 beq patch2e_7 ,p_le_lpm_setmult -005f c04606b3 beq patch31_4 ,p_twspi_reset -0060 c04686bf beq patch31_5 ,p_spid_init -0061 c07d0719 beq patch3f_2 ,p_check_51cmd_once_continue +0055 c01c85f6 beq patch27_1 ,p_le_slave_match +0056 c02185fe beq patch28_3 ,p_le_next_adv_channel +0057 c0250604 beq patch29_2 ,p_le_receive_skip +0058 c02b8607 beq patch2a_7 ,p_le_update_param +0059 c02c8609 beq patch2b_1 ,p_le_update_channel_map +005a c031860b beq patch2c_3 ,p_le_prepare_tx +005b c033063a beq patch2c_6 ,p_le_parse +005c c0338651 beq patch2c_7 ,p_le_parse_l2cap +005d c035069b beq patch2d_2 ,p_le_adv_not_match +005e c03b86a5 beq patch2e_7 ,p_le_lpm_setmult +005f c04606b1 beq patch31_4 ,p_twspi_reset +0060 c04686bd beq patch31_5 ,p_spid_init +0061 c07d0717 beq patch3f_2 ,p_check_51cmd_once_continue 0062 20202a8e branch loop p_mouse_select_device_button_wakeup_check: 0063 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0064 204004df call p_mouse_get_select_state +0064 204004dd call p_mouse_get_select_state 0065 24608000 nrtn true 0066 20407ec1 call delay_10ms -0067 204004df call p_mouse_get_select_state +0067 204004dd call p_mouse_get_select_state 0068 24608000 nrtn true 0069 704b6d01 jam 1 ,mem_mouse_select_device_button_wakeup_flag 006a 20600000 rtn @@ -133,14 +133,14 @@ p_mouse_switch_hwakeup_bypb: 006b 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag 006c 207a0000 rtn blank -006d 204004ff call p_mouse_switch_device_flag -006e 20200306 branch p_mouse_store_flash_device_info +006d 204004fd call p_mouse_switch_device_flag +006e 20200302 branch p_mouse_store_flash_device_info p_soft_reset_1: 006f d8a009ae arg mem_sp_state ,contw 0070 df20000c arg 12 ,loopcnt 0071 20407ed4 call clear_mem -0072 20400385 call p_mouse_le_txbuff_load +0072 20400381 call p_mouse_le_txbuff_load 0073 6810807b hfetch 1 ,core_gpio_pu3 0074 1fe17e3f and_into 0x3f ,pdata 0075 6010807b hstore 1 ,core_gpio_pu3 @@ -152,2634 +152,2632 @@ 007b 20405cf6 call init_lmp 007c 2455ac65 ncall lpm_disable_exen_output ,wake 007d 20407ccd call ui_init + 1 -007e d8400018 arg 0x18 ,temp -007f 204005dc call p_gpio_set_input_pu -0080 2020200c branch soft_reset + 11 +007e 2020200c branch soft_reset + 11 p_soft_reset_2: -0081 2055b2e3 call app_lpm_init ,wake -0082 2040756a call publickey_init -0083 2055ab41 call lpm_recover_clk ,wake +007f 2055b2e3 call app_lpm_init ,wake +0080 2040756a call publickey_init +0081 2055ab41 call lpm_recover_clk ,wake p_sp_cal_loop: -0084 204076dc call sp_calc_sequence -0085 6800c65a fetch 1 ,mem_ssp_enable -0086 203a2012 branch main_loop ,blank -0087 6800c5b1 fetch 1 ,mem_sp_local_key_invalid -0088 203a0084 branch p_sp_cal_loop ,blank -0089 20202012 branch main_loop +0082 204076dc call sp_calc_sequence +0083 6800c65a fetch 1 ,mem_ssp_enable +0084 203a2012 branch main_loop ,blank +0085 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +0086 203a0082 branch p_sp_cal_loop ,blank +0087 20202012 branch main_loop p_init_param: -008a 58000a06 setarg param_le_version -008b 6001c510 store 3 ,mem_lmp_version -008c 58001d87 setarg param_le_subversion -008d 60014513 store 2 ,mem_lmp_version + 3 -008e 20202aa2 branch init_param + 12 +0088 58000a06 setarg param_le_version +0089 6001c510 store 3 ,mem_lmp_version +008a 58001d87 setarg param_le_subversion +008b 60014513 store 2 ,mem_lmp_version + 3 +008c 20202aa2 branch init_param + 12 p_lpm_check_wake_lock: -008f c6130000 rtnmark1 mark_24g -0090 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag -0091 c0007fef beq 0 ,disable_blank -0092 6800c7c6 fetch 1 ,mem_mouse_le_conn_param_reject -0093 c000ffef beq le_lpm_disable ,disable_blank -0094 68014248 fetch 2 ,mem_sdp_remote_cid +008d c6130000 rtnmark1 mark_24g +008e 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag +008f c0007fef beq 0 ,disable_blank +0090 6800c7c6 fetch 1 ,mem_mouse_le_conn_param_reject +0091 c000ffef beq le_lpm_disable ,disable_blank +0092 68014248 fetch 2 ,mem_sdp_remote_cid +0093 243a7fef nbranch disable_blank ,blank +0094 6800c808 fetch 1 ,mem_mouse_wheel_trigger 0095 243a7fef nbranch disable_blank ,blank -0096 6800c808 fetch 1 ,mem_mouse_wheel_trigger -0097 243a7fef nbranch disable_blank ,blank -0098 20207ff1 branch enable_blank +0096 20207ff1 branch enable_blank p_g24_dispatch: -0099 c6930000 rtnmark0 mark_24g -009a 6800cd93 fetch 1 ,mem_24g_conn_sm -009b c28080ae bbit1 state_24g_pair ,p_g24_pair_dispatch -009c c28100b0 bbit1 state_24g_reconn ,p_g24_reconn_dispatch -009d 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt -009e c00080b8 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt +0097 c6930000 rtnmark0 mark_24g +0098 6800cd93 fetch 1 ,mem_24g_conn_sm +0099 c28080ac bbit1 state_24g_pair ,p_g24_pair_dispatch +009a c28100ae bbit1 state_24g_reconn ,p_g24_reconn_dispatch +009b 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt +009c c00080b6 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt p_g24_transmit_process: -009f 20400133 call p_g24_txdata_prep -00a0 243400ba nbranch p_g24_nodata_transmit ,user -00a1 2040010e call p_g24_rf_sta_check +009d 20400131 call p_g24_txdata_prep +009e 243400b8 nbranch p_g24_nodata_transmit ,user +009f 2040010c call p_g24_rf_sta_check p_g24_transmit_start: -00a2 204000e9 call p_g24_transmit_packet -00a3 6800cc53 fetch 1 ,mem_24g_pairing_sm -00a4 c1ff8000 rtnne state_24g_pairing_success -00a5 204006d5 call power_ctrl_start -00a6 204000b2 call g24_long_sleep_shorter_param_update -00a7 6800cb29 fetch 1 ,mem_mouse_multi_led_state -00a8 c0008377 beq on ,p_g24_transmit_by_interrupt_enable +00a0 204000e7 call p_g24_transmit_packet +00a1 6800cc53 fetch 1 ,mem_24g_pairing_sm +00a2 c1ff8000 rtnne state_24g_pairing_success +00a3 204006d3 call power_ctrl_start +00a4 204000b0 call g24_long_sleep_shorter_param_update +00a5 6800cb29 fetch 1 ,mem_mouse_multi_led_state +00a6 c0008373 beq on ,p_g24_transmit_by_interrupt_enable p_g24_short_sleep: -00a9 2040025f call p_g24_lpm_wait -00aa 24740000 nrtn user -00ab 2040025c call p_clear_wake -00ac 5800e290 setarg 58000 +00a7 2040025b call p_g24_lpm_wait +00a8 24740000 nrtn user +00a9 20400258 call p_clear_wake +00aa 5800e290 setarg 58000 p_g24_enter_sleep: -00ad 20202d8c branch g24_lpm_long_sleep2 +00ab 20202d8c branch g24_lpm_long_sleep2 p_g24_pair_dispatch: -00ae 7011c5c0 jam zcode_c0 ,mem_zcode_temp_param0 -00af 202007cd branch p_zcode_entrance +00ac 7011c5c0 jam zcode_c0 ,mem_zcode_temp_param0 +00ad 202007cb branch p_zcode_entrance p_g24_reconn_dispatch: -00b0 7011c570 jam zcode_70 ,mem_zcode_temp_param0 -00b1 202007cd branch p_zcode_entrance +00ae 7011c570 jam zcode_70 ,mem_zcode_temp_param0 +00af 202007cb branch p_zcode_entrance g24_long_sleep_shorter_param_update: -00b2 6800c6f5 fetch 1 ,mem_config_function_enable -00b3 c3838000 rtnbit1 enable_sensor_motion_pin -00b4 58017700 setarg g24_long_sleep_step1 -00b5 6001cc72 store 3 ,mem_24g_enter_hibernate -00b6 704b6932 jam 50 ,mem_24g_long_sleep_param_update_timer -00b7 20600000 rtn +00b0 6800c6f5 fetch 1 ,mem_config_function_enable +00b1 c3838000 rtnbit1 enable_sensor_motion_pin +00b2 58017700 setarg g24_long_sleep_step1 +00b3 6001cc72 store 3 ,mem_24g_enter_hibernate +00b4 704b6914 jam 20 ,mem_24g_long_sleep_param_update_timer +00b5 20600000 rtn p_g24_transmit_by_interrupt: -00b8 7011c5d1 jam zcode_d1 ,mem_zcode_temp_param0 -00b9 202007cd branch p_zcode_entrance +00b6 7011c5d1 jam zcode_d1 ,mem_zcode_temp_param0 +00b7 202007cb branch p_zcode_entrance p_g24_nodata_transmit: -00ba 6800cc6f fetch 1 ,mem_24g_abort_pac -00bb 205a00c0 call p_g24_send_abort_packet ,blank +00b8 6800cc6f fetch 1 ,mem_24g_abort_pac +00b9 205a00be call p_g24_send_abort_packet ,blank p_g24_long_sleep: -00bc 2040025f call p_g24_lpm_wait -00bd 24740000 nrtn user -00be 6801cc72 fetch 3 ,mem_24g_enter_hibernate -00bf 20202d8c branch g24_lpm_long_sleep2 +00ba 2040025b call p_g24_lpm_wait +00bb 24740000 nrtn user +00bc 6801cc72 fetch 3 ,mem_24g_enter_hibernate +00bd 20202d8c branch g24_lpm_long_sleep2 p_g24_send_abort_packet: -00c0 704c6f01 jam 1 ,mem_24g_abort_pac -00c1 704d7800 jam 0 ,mem_24g_rf_hop_ch -00c2 204000d0 call p_g24_transmit_rf_ctrl_clear -00c3 6000cbdf store 1 ,mem_24g_txbuf -00c4 58000000 setarg 0 -00c5 6003cbe0 store 7 ,mem_24g_txbuf + 1 -00c6 68024c7a fetch 4 ,mem_24g_device_addr -00c7 60024be7 store 4 ,mem_24g_txbuf + 8 -00c8 704c430c jam 12 ,mem_24g_datalen -00c9 6800cc44 fetch 1 ,mem_24g_data_type -00ca 79207e03 set1 bit_abort ,pdata -00cb 6000cc44 store 1 ,mem_24g_data_type -00cc 20400136 call p_g24_txdata_enable_tx -00cd 202000a2 branch p_g24_transmit_start +00be 704c6f01 jam 1 ,mem_24g_abort_pac +00bf 704d7800 jam 0 ,mem_24g_rf_hop_ch +00c0 204000ce call p_g24_transmit_rf_ctrl_clear +00c1 6000cbdf store 1 ,mem_24g_txbuf +00c2 58000000 setarg 0 +00c3 6003cbe0 store 7 ,mem_24g_txbuf + 1 +00c4 68024c7a fetch 4 ,mem_24g_device_addr +00c5 60024be7 store 4 ,mem_24g_txbuf + 8 +00c6 704c430c jam 12 ,mem_24g_datalen +00c7 6800cc44 fetch 1 ,mem_24g_data_type +00c8 79207e03 set1 bit_abort ,pdata +00c9 6000cc44 store 1 ,mem_24g_data_type +00ca 20400134 call p_g24_txdata_enable_tx +00cb 202000a0 branch p_g24_transmit_start p_g24_transmit_rf_sta_init: -00ce 704d7901 jam 1 ,mem_24g_rf_last_sta -00cf 704d7b00 jam 0 ,mem_24g_sync_cnt +00cc 704d7901 jam 1 ,mem_24g_rf_last_sta +00cd 704d7b00 jam 0 ,mem_24g_sync_cnt p_g24_transmit_rf_ctrl_clear: -00d0 6800cc44 fetch 1 ,mem_24g_data_type -00d1 1fe17e07 and_into bits_data ,pdata -00d2 6000cc44 store 1 ,mem_24g_data_type -00d3 20600000 rtn +00ce 6800cc44 fetch 1 ,mem_24g_data_type +00cf 1fe17e07 and_into bits_data ,pdata +00d0 6000cc44 store 1 ,mem_24g_data_type +00d1 20600000 rtn p_g24_hop_ch_enable: -00d4 6800cc44 fetch 1 ,mem_24g_data_type -00d5 79207e04 set1 bit_hop ,pdata -00d6 6000cc44 store 1 ,mem_24g_data_type -00d7 6000cbff store 1 ,mem_24g_txpayload -00d8 20600000 rtn +00d2 6800cc44 fetch 1 ,mem_24g_data_type +00d3 79207e04 set1 bit_hop ,pdata +00d4 6000cc44 store 1 ,mem_24g_data_type +00d5 6000cbff store 1 ,mem_24g_txpayload +00d6 20600000 rtn p_g24_hop_enable_packet: -00d9 6800cc44 fetch 1 ,mem_24g_data_type -00da c4020000 rtnbit0 bit_hop +00d7 6800cc44 fetch 1 ,mem_24g_data_type +00d8 c4020000 rtnbit0 bit_hop p_g24_hop_ch_disable: -00db 6800cc44 fetch 1 ,mem_24g_data_type -00dc 793ffe04 set0 bit_hop ,pdata -00dd 6000cc44 store 1 ,mem_24g_data_type -00de 6000cbff store 1 ,mem_24g_txpayload -00df 2040062d call power_ctrl_pac_succ_decrs -00e0 20200121 branch p_g24_ch +00d9 6800cc44 fetch 1 ,mem_24g_data_type +00da 793ffe04 set0 bit_hop ,pdata +00db 6000cc44 store 1 ,mem_24g_data_type +00dc 6000cbff store 1 ,mem_24g_txpayload +00dd 2040062b call power_ctrl_pac_succ_decrs +00de 2020011f branch p_g24_ch p_g24_rf_hop_attemp_again: -00e1 6800cd78 fetch 1 ,mem_24g_rf_hop_ch -00e2 c08080d0 bne 1 ,p_g24_transmit_rf_ctrl_clear +00df 6800cd78 fetch 1 ,mem_24g_rf_hop_ch +00e0 c08080ce bne 1 ,p_g24_transmit_rf_ctrl_clear p_g24_rf_hop_fastly: -00e3 6800cd76 fetch 1 ,mem_24g_hop_fastly_cnt -00e4 1fe0fe01 increase 1 ,pdata -00e5 6000cd76 store 1 ,mem_24g_hop_fastly_cnt -00e6 c00200fe beq 4 ,p_g24_rf_hop_fastly_exit -00e7 20400121 call p_g24_ch -00e8 704c8802 jam 2 ,mem_24g_max_retry +00e1 6800cd76 fetch 1 ,mem_24g_hop_fastly_cnt +00e2 1fe0fe01 increase 1 ,pdata +00e3 6000cd76 store 1 ,mem_24g_hop_fastly_cnt +00e4 c00200fc beq 4 ,p_g24_rf_hop_fastly_exit +00e5 2040011f call p_g24_ch +00e6 704c8802 jam 2 ,mem_24g_max_retry p_g24_transmit_packet: -00e9 704c4c00 jam 0 ,mem_24g_retry +00e7 704c4c00 jam 0 ,mem_24g_retry p_g24_transmit_loop: -00ea d9600d00 arg param_rx_setup ,timeup -00eb 34730200 until clkn_rt ,meet -00ec 20400159 call p_g24_transmit_receive_ack -00ed 242c0164 nbranch p_g24_retransmit ,sync -00ee 24378164 nbranch p_g24_retransmit ,user3 -00ef 20400156 call p_g24_txbuf_clear -00f0 20400181 call p_g24_ackpayload_parse -00f1 2040077e call power_ctrl_pac_succ_incrs +00e8 d9600d00 arg param_rx_setup ,timeup +00e9 34730200 until clkn_rt ,meet +00ea 20400157 call p_g24_transmit_receive_ack +00eb 242c0162 nbranch p_g24_retransmit ,sync +00ec 24378162 nbranch p_g24_retransmit ,user3 +00ed 20400154 call p_g24_txbuf_clear +00ee 2040017d call p_g24_ackpayload_parse +00ef 2040077c call power_ctrl_pac_succ_incrs p_g24_transmit_next_packet: -00f2 704b5200 jam 0 ,mem_retry_count -00f3 6800cc42 fetch 1 ,mem_24g_pid -00f4 1fe0fe01 increase 1 ,pdata -00f5 6000cc42 store 1 ,mem_24g_pid -00f6 204000d9 call p_g24_hop_enable_packet -00f7 6800cc53 fetch 1 ,mem_24g_pairing_sm -00f8 c0ff819f bne state_24g_pairing_success ,p_g24_paring_mode_start -00f9 20400105 call p_g24_transmit_succ_rf_config +00f0 704b5200 jam 0 ,mem_retry_count +00f1 6800cc42 fetch 1 ,mem_24g_pid +00f2 1fe0fe01 increase 1 ,pdata +00f3 6000cc42 store 1 ,mem_24g_pid +00f4 204000d7 call p_g24_hop_enable_packet +00f5 6800cc53 fetch 1 ,mem_24g_pairing_sm +00f6 c0ff819b bne state_24g_pairing_success ,p_g24_paring_mode_start +00f7 20400103 call p_g24_transmit_succ_rf_config p_g24_transmit_abandon: -00fa 58000000 setarg 0 -00fb 60024c48 store 4 ,mem_24g_ensure -00fc 6000cd77 store 1 ,mem_24g_hop_pac_retry -00fd 20600000 rtn +00f8 58000000 setarg 0 +00f9 60024c48 store 4 ,mem_24g_ensure +00fa 6000cd77 store 1 ,mem_24g_hop_pac_retry +00fb 20600000 rtn p_g24_rf_hop_fastly_exit: -00fe 2040062d call power_ctrl_pac_succ_decrs -00ff 704d7600 jam 0 ,mem_24g_hop_fastly_cnt -0100 202000d0 branch p_g24_transmit_rf_ctrl_clear +00fc 2040062b call power_ctrl_pac_succ_decrs +00fd 704d7600 jam 0 ,mem_24g_hop_fastly_cnt +00fe 202000ce branch p_g24_transmit_rf_ctrl_clear p_g24_transmit_hop_pac_succ_wo_hop: -0101 704d7b02 jam 2 ,mem_24g_sync_cnt +00ff 704d7b02 jam 2 ,mem_24g_sync_cnt p_g24_transmit_hop_pac_succ: -0102 704d7901 jam 1 ,mem_24g_rf_last_sta -0103 704d7800 jam 0 ,mem_24g_rf_hop_ch -0104 202000d0 branch p_g24_transmit_rf_ctrl_clear +0100 704d7901 jam 1 ,mem_24g_rf_last_sta +0101 704d7800 jam 0 ,mem_24g_rf_hop_ch +0102 202000ce branch p_g24_transmit_rf_ctrl_clear p_g24_transmit_succ_rf_config: -0105 6800cd7a fetch 1 ,mem_24g_rf_work_stage -0106 c0018102 beq 3 ,p_g24_transmit_hop_pac_succ -0107 6800cc44 fetch 1 ,mem_24g_data_type -0108 2fec0004 isolate0 bit_hop ,pdata -0109 202080ce branch p_g24_transmit_rf_sta_init ,true -010a 6800cd7a fetch 1 ,mem_24g_rf_work_stage -010b c0008101 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop -010c c0010102 beq 2 ,p_g24_transmit_hop_pac_succ -010d 20600000 rtn +0103 6800cd7a fetch 1 ,mem_24g_rf_work_stage +0104 c0018100 beq 3 ,p_g24_transmit_hop_pac_succ +0105 6800cc44 fetch 1 ,mem_24g_data_type +0106 2fec0004 isolate0 bit_hop ,pdata +0107 202080cc branch p_g24_transmit_rf_sta_init ,true +0108 6800cd7a fetch 1 ,mem_24g_rf_work_stage +0109 c00080ff beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop +010a c0010100 beq 2 ,p_g24_transmit_hop_pac_succ +010b 20600000 rtn p_g24_rf_sta_check: -010e 6800cc53 fetch 1 ,mem_24g_pairing_sm -010f c1ff8000 rtnne state_24g_pairing_success -0110 20400113 call p_g24_rf_laststa_synccnt_check -0111 2456011b ncall p_g24_rf_sync_cnt_check ,user2 -0112 20600000 rtn +010c 6800cc53 fetch 1 ,mem_24g_pairing_sm +010d c1ff8000 rtnne state_24g_pairing_success +010e 20400111 call p_g24_rf_laststa_synccnt_check +010f 24560119 ncall p_g24_rf_sync_cnt_check ,user2 +0110 20600000 rtn p_g24_rf_laststa_synccnt_check: -0113 78567c00 disable user2 -0114 6800cd79 fetch 1 ,mem_24g_rf_last_sta -0115 c1808000 rtnne 1 -0116 6800cd7b fetch 1 ,mem_24g_sync_cnt -0117 c1800000 rtnne 0 -0118 704d7a01 jam 1 ,mem_24g_rf_work_stage -0119 704c8804 jam 4 ,mem_24g_max_retry -011a 20207feb branch enable_user2 +0111 78567c00 disable user2 +0112 6800cd79 fetch 1 ,mem_24g_rf_last_sta +0113 c1808000 rtnne 1 +0114 6800cd7b fetch 1 ,mem_24g_sync_cnt +0115 c1800000 rtnne 0 +0116 704d7a01 jam 1 ,mem_24g_rf_work_stage +0117 704c8804 jam 4 ,mem_24g_max_retry +0118 20207feb branch enable_user2 p_g24_rf_sync_cnt_check: -011b 6800cd7b fetch 1 ,mem_24g_sync_cnt -011c 203a012e branch p_g24_rf_hop_attemp ,blank -011d 1fe0ffff increase -1 ,pdata -011e 6000cd7b store 1 ,mem_24g_sync_cnt -011f 704d7a02 jam 2 ,mem_24g_rf_work_stage -0120 704c8804 jam 4 ,mem_24g_max_retry +0119 6800cd7b fetch 1 ,mem_24g_sync_cnt +011a 203a012c branch p_g24_rf_hop_attemp ,blank +011b 1fe0ffff increase -1 ,pdata +011c 6000cd7b store 1 ,mem_24g_sync_cnt +011d 704d7a02 jam 2 ,mem_24g_rf_work_stage +011e 704c8804 jam 4 ,mem_24g_max_retry p_g24_ch: -0121 6808cc4e fetcht 1 ,mem_24g_current_ch_number -0122 6800cc6b fetch 1 ,mem_24g_addr -0123 1fe17e03 and_into 0x03 ,pdata -0124 1fefa204 mul32 pdata ,4 ,rega -0125 58004c54 setarg mem_24g_ch_map1 -0126 9a20fe00 iadd rega ,pdata -0127 98408c00 iadd temp ,contr -0128 e8c08000 ifetch 1 ,contr -0129 6000cc4d store 1 ,mem_24g_ch -012a 18408401 increase 1 ,temp -012b 18410403 and_into 3 ,temp -012c 6008cc4e storet 1 ,mem_24g_current_ch_number -012d 20600000 rtn +011f 6808cc4e fetcht 1 ,mem_24g_current_ch_number +0120 6800cc6b fetch 1 ,mem_24g_addr +0121 1fe17e03 and_into 0x03 ,pdata +0122 1fefa204 mul32 pdata ,4 ,rega +0123 58004c54 setarg mem_24g_ch_map1 +0124 9a20fe00 iadd rega ,pdata +0125 98408c00 iadd temp ,contr +0126 e8c08000 ifetch 1 ,contr +0127 6000cc4d store 1 ,mem_24g_ch +0128 18408401 increase 1 ,temp +0129 18410403 and_into 3 ,temp +012a 6008cc4e storet 1 ,mem_24g_current_ch_number +012b 20600000 rtn p_g24_rf_hop_attemp: -012e 704d7a03 jam 3 ,mem_24g_rf_work_stage -012f 6800cd78 fetch 1 ,mem_24g_rf_hop_ch -0130 243a00e1 nbranch p_g24_rf_hop_attemp_again ,blank -0131 704c8802 jam 2 ,mem_24g_max_retry -0132 20200121 branch p_g24_ch +012c 704d7a03 jam 3 ,mem_24g_rf_work_stage +012d 6800cd78 fetch 1 ,mem_24g_rf_hop_ch +012e 243a00df nbranch p_g24_rf_hop_attemp_again ,blank +012f 704c8802 jam 2 ,mem_24g_max_retry +0130 2020011f branch p_g24_ch p_g24_txdata_prep: -0133 6800cc53 fetch 1 ,mem_24g_pairing_sm -0134 c0ff819d bne state_24g_pairing_success ,p_g24_pairing_sm +0131 6800cc53 fetch 1 ,mem_24g_pairing_sm +0132 c0ff8199 bne state_24g_pairing_success ,p_g24_pairing_sm p_g24_txdata_prep_packeage_data: -0135 20400139 call p_g24_package_data +0133 20400137 call p_g24_package_data p_g24_txdata_enable_tx: -0136 204001b9 call p_g24_transmit_prep -0137 704c4801 jam ensure_on_24g ,mem_24g_ensure -0138 20600000 rtn +0134 204001b5 call p_g24_transmit_prep +0135 704c4801 jam ensure_on_24g ,mem_24g_ensure +0136 20600000 rtn p_g24_package_data: -0139 68014d74 fetch 2 ,mem_cb_24g_data -013a 20407f9c call callback_func -013b 2034013f branch p_g24_accumulate_mouse_data ,user -013c 6803cbe0 fetch 7 ,mem_24g_txbuf + 1 -013d 207a0000 rtn blank -013e 20207fe7 branch enable_user +0137 68014d74 fetch 2 ,mem_cb_24g_data +0138 20407f9c call callback_func +0139 2034013d branch p_g24_accumulate_mouse_data ,user +013a 6803cbe0 fetch 7 ,mem_24g_txbuf + 1 +013b 207a0000 rtn blank +013c 20207fe7 branch enable_user p_g24_accumulate_mouse_data: -013f 204003a5 call p_mouse_data_xy_release -0140 704c6f00 jam 0 ,mem_24g_abort_pac -0141 1a20fe01 add rega ,1 ,pdata -0142 6000cc43 store 1 ,mem_24g_datalen -0143 204000d0 call p_g24_transmit_rf_ctrl_clear -0144 6000cbdf store 1 ,mem_24g_txbuf -0145 e8a88000 ifetcht 1 ,contw -0146 ea408000 ifetch 1 ,regb -0147 9841fe00 ior temp ,pdata -0148 e0a08000 istore 1 ,contw -0149 1a40a401 increase 1 ,regb -014a ea420000 ifetch 4 ,regb -014b e0a20000 istore 4 ,contw -014c 1a40a404 increase 4 ,regb -014d d8a04be5 arg mem_24g_txbuf + 6 ,contw -014e df200002 arg 2 ,loopcnt +013d 204003a1 call p_mouse_data_xy_release +013e 704c6f00 jam 0 ,mem_24g_abort_pac +013f 1a20fe01 add rega ,1 ,pdata +0140 6000cc43 store 1 ,mem_24g_datalen +0141 204000ce call p_g24_transmit_rf_ctrl_clear +0142 6000cbdf store 1 ,mem_24g_txbuf +0143 e8a88000 ifetcht 1 ,contw +0144 ea408000 ifetch 1 ,regb +0145 9841fe00 ior temp ,pdata +0146 e0a08000 istore 1 ,contw +0147 1a40a401 increase 1 ,regb +0148 ea420000 ifetch 4 ,regb +0149 e0a20000 istore 4 ,contw +014a 1a40a404 increase 4 ,regb +014b d8a04be5 arg mem_24g_txbuf + 6 ,contw +014c df200002 arg 2 ,loopcnt p_g24_accumulation_loop: -014f ea408000 ifetch 1 ,regb -0150 e8a88000 ifetcht 1 ,contw -0151 9840fe00 iadd temp ,pdata -0152 e0a08000 istore 1 ,contw -0153 1a40a401 increase 1 ,regb -0154 c200014f loop p_g24_accumulation_loop -0155 20600000 rtn +014d ea408000 ifetch 1 ,regb +014e e8a88000 ifetcht 1 ,contw +014f 9840fe00 iadd temp ,pdata +0150 e0a08000 istore 1 ,contw +0151 1a40a401 increase 1 ,regb +0152 c200014d loop p_g24_accumulation_loop +0153 20600000 rtn p_g24_txbuf_clear: -0156 df200004 arg 4 ,loopcnt -0157 d8a04bdf arg mem_24g_txbuf ,contw -0158 20207ec6 branch memset0 +0154 df200004 arg 4 ,loopcnt +0155 d8a04bdf arg mem_24g_txbuf ,contw +0156 20207ec6 branch memset0 p_g24_transmit_receive_ack: -0159 7857fc00 disable user3 -015a 20400215 call p_g24_transmit -015b 18002a00 force 0 ,radio_ctrl -015c 68024c6b fetch 4 ,mem_24g_addr -015d 98001200 iforce access -015e 68088017 fetcht 1 ,mem_last_freq -015f 2040291f call set_freq_rx -0160 20402924 call rf_rx_enable -0161 204001d1 call p_g24_receive_rxon -0162 20578212 call p_g24_end_of_packet ,user3 -0163 20600000 rtn +0157 7857fc00 disable user3 +0158 20400211 call p_g24_transmit +0159 18002a00 force 0 ,radio_ctrl +015a 68024c6b fetch 4 ,mem_24g_addr +015b 98001200 iforce access +015c 68088017 fetcht 1 ,mem_last_freq +015d 2040291f call set_freq_rx +015e 20402924 call rf_rx_enable +015f 204001cd call p_g24_receive_rxon +0160 2057820e call p_g24_end_of_packet ,user3 +0161 20600000 rtn p_g24_retransmit: -0164 6800cc6f fetch 1 ,mem_24g_abort_pac -0165 247a0000 nrtn blank -0166 68014c49 fetch 2 ,mem_24g_txfail_cnt -0167 1fe0fe01 increase 1 ,pdata -0168 60014c49 store 2 ,mem_24g_txfail_cnt -0169 6800cc4a fetch 1 ,mem_24g_txfail_cnt + 1 -016a c2802dd4 bbit1 0 ,g24_stop_24g_mode -016b 6800cc53 fetch 1 ,mem_24g_pairing_sm -016c c0ff816f bne state_24g_pairing_success ,p_g24_tx_paring_retry -016d 20400179 call p_g24_tx_hop_ch_process -016e 202000ea branch p_g24_transmit_loop +0162 6800cc6f fetch 1 ,mem_24g_abort_pac +0163 247a0000 nrtn blank +0164 68014c49 fetch 2 ,mem_24g_txfail_cnt +0165 1fe0fe01 increase 1 ,pdata +0166 60014c49 store 2 ,mem_24g_txfail_cnt +0167 6800cc4a fetch 1 ,mem_24g_txfail_cnt + 1 +0168 c2802dd4 bbit1 0 ,g24_stop_24g_mode +0169 6800cc53 fetch 1 ,mem_24g_pairing_sm +016a c0ff816d bne state_24g_pairing_success ,p_g24_tx_paring_retry +016b 20400175 call p_g24_tx_hop_ch_process +016c 202000e8 branch p_g24_transmit_loop p_g24_tx_paring_retry: -016f 6800cc49 fetch 1 ,mem_24g_txfail_cnt -0170 c1ff8000 rtnne 0xff +016d 6800cc49 fetch 1 ,mem_24g_txfail_cnt +016e c1ff8000 rtnne 0xff p_g24_tx_attempt_fail: -0171 58000000 setarg 0 -0172 60014c49 store 2 ,mem_24g_txfail_cnt -0173 20202dd4 branch g24_stop_24g_mode +016f 58000000 setarg 0 +0170 60014c49 store 2 ,mem_24g_txfail_cnt +0171 20202dd4 branch g24_stop_24g_mode p_g24_tx_fast_hop: -0174 5803a980 setarg 240000 -0175 20402a8f call sleep -0176 20400795 call power_ctrl_txpower_incrs -0177 2040062d call power_ctrl_pac_succ_decrs -0178 20200121 branch p_g24_ch +0172 20400793 call power_ctrl_txpower_incrs +0173 2040062b call power_ctrl_pac_succ_decrs +0174 2020011f branch p_g24_ch p_g24_tx_hop_ch_process: -0179 6800cc4c fetch 1 ,mem_24g_retry -017a 1fe67c0b sub pdata ,11 ,null -017b 24210174 nbranch p_g24_tx_fast_hop ,positive -017c 1fe0fe01 increase 1 ,pdata -017d 6000cc4c store 1 ,mem_24g_retry -017e c00300db beq 6 ,p_g24_hop_ch_disable -017f c00600db beq 12 ,p_g24_hop_ch_disable -0180 20600000 rtn +0175 6800cc4c fetch 1 ,mem_24g_retry +0176 1fe67c0b sub pdata ,11 ,null +0177 24210172 nbranch p_g24_tx_fast_hop ,positive +0178 1fe0fe01 increase 1 ,pdata +0179 6000cc4c store 1 ,mem_24g_retry +017a c00300d9 beq 6 ,p_g24_hop_ch_disable +017b c00600d9 beq 12 ,p_g24_hop_ch_disable +017c 20600000 rtn p_g24_ackpayload_parse: -0181 204001ac call p_g24_read_len_pid_crc -0182 6800cc41 fetch 1 ,mem_24g_rxdata_length -0183 207a0000 rtn blank -0184 98007200 iforce loopcnt -0185 d8c04bbf arg mem_24g_rxbuf + 2 ,contr -0186 d8a04c21 arg mem_24g_rxpayload ,contw -0187 20207f01 branch memcpy +017d 204001a8 call p_g24_read_len_pid_crc +017e 6800cc41 fetch 1 ,mem_24g_rxdata_length +017f 207a0000 rtn blank +0180 98007200 iforce loopcnt +0181 d8c04bbf arg mem_24g_rxbuf + 2 ,contr +0182 d8a04c21 arg mem_24g_rxpayload ,contw +0183 20207f01 branch memcpy p_g24_pair_init: -0188 7041de20 jam tx_power_pair ,mem_tx_power -0189 704c4200 jam 0 ,mem_24g_pid -018a 704c4d4e jam g24_pair_ch ,mem_24g_ch -018b 68024c4f fetch 4 ,mem_24g_paring_addr +0184 7041de20 jam tx_power_pair ,mem_tx_power +0185 704c4200 jam 0 ,mem_24g_pid +0186 704c4d4e jam g24_pair_ch ,mem_24g_ch +0187 68024c4f fetch 4 ,mem_24g_paring_addr p_g24_update_addr_and_synccrc8: -018c 60024c6b store 4 ,mem_24g_addr +0188 60024c6b store 4 ,mem_24g_addr p_g24_syncword_crc8: -018d da200000 arg 0 ,rega -018e df200004 arg 4 ,loopcnt -018f d8c04c6b arg mem_24g_addr ,contr +0189 da200000 arg 0 ,rega +018a df200004 arg 4 ,loopcnt +018b d8c04c6b arg mem_24g_addr ,contr p_g24_syncword_crc8_loop: -0190 e8c08000 ifetch 1 ,contr -0191 9a20a200 iadd rega ,rega -0192 c2000190 loop p_g24_syncword_crc8_loop -0193 1a227e00 copy rega ,pdata -0194 60014cf4 store 2 ,mem_24g_syncword -0195 6800ccf4 fetch 1 ,mem_24g_syncword -0196 6808ccf5 fetcht 1 ,mem_24g_syncword + 1 -0197 9840fe00 iadd temp ,pdata -0198 6000ccf6 store 1 ,mem_24g_syncword_crc8 -0199 20600000 rtn +018c e8c08000 ifetch 1 ,contr +018d 9a20a200 iadd rega ,rega +018e c200018c loop p_g24_syncword_crc8_loop +018f 1a227e00 copy rega ,pdata +0190 60014cf4 store 2 ,mem_24g_syncword +0191 6800ccf4 fetch 1 ,mem_24g_syncword +0192 6808ccf5 fetcht 1 ,mem_24g_syncword + 1 +0193 9840fe00 iadd temp ,pdata +0194 6000ccf6 store 1 ,mem_24g_syncword_crc8 +0195 20600000 rtn p_g24_start_pairing_sm1: -019a 20400188 call p_g24_pair_init +0196 20400184 call p_g24_pair_init p_g24_set_pairing_sm_1: -019b 704c5301 jam state_24g_pairing_1 ,mem_24g_pairing_sm -019c 20600000 rtn +0197 704c5301 jam state_24g_pairing_1 ,mem_24g_pairing_sm +0198 20600000 rtn p_g24_pairing_sm: -019d 7011c590 jam zcode_90 ,mem_zcode_temp_param0 -019e 202007cd branch p_zcode_entrance +0199 7011c590 jam zcode_90 ,mem_zcode_temp_param0 +019a 202007cb branch p_zcode_entrance p_g24_paring_mode_start: -019f 2040077b call power_ctrl_pac_succ_cnt_init +019b 20400779 call power_ctrl_pac_succ_cnt_init p_g24_paring_mode: -01a0 7011c591 jam zcode_91 ,mem_zcode_temp_param0 -01a1 202007cd branch p_zcode_entrance +019c 7011c591 jam zcode_91 ,mem_zcode_temp_param0 +019d 202007cb branch p_zcode_entrance p_g24_check_51cmd_stop_24g: -01a2 793f8026 set0 mark_24g ,mark -01a3 704d9300 jam state_24g_stop ,mem_24g_conn_sm -01a4 204053ce call le_disable +019e 793f8026 set0 mark_24g ,mark +019f 704d9300 jam state_24g_stop ,mem_24g_conn_sm +01a0 204053ce call le_disable p_mouse_disable_g24_pairing_flag: -01a5 d8e00003 arg mosue_24g_pairing_flag ,queue -01a6 202043d2 branch mouse_disable_function_flag +01a1 d8e00003 arg mosue_24g_pairing_flag ,queue +01a2 202043d2 branch mouse_disable_function_flag p_g24_put_data_in_buff: -01a7 6008cc43 storet 1 ,mem_24g_datalen -01a8 18427200 copy temp ,loopcnt -01a9 d8a04bdf arg mem_24g_txbuf ,contw -01aa 1a220c00 copy rega ,contr -01ab 20207f01 branch memcpy +01a3 6008cc43 storet 1 ,mem_24g_datalen +01a4 18427200 copy temp ,loopcnt +01a5 d8a04bdf arg mem_24g_txbuf ,contw +01a6 1a220c00 copy rega ,contr +01a7 20207f01 branch memcpy p_g24_read_len_pid_crc: -01ac 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 -01ad 1fe97e00 rshift3 pdata ,pdata -01ae 6000cc41 store 1 ,mem_24g_rxdata_length -01af 1fe0fe01 increase 1 ,pdata -01b0 d8c04bbe arg mem_24g_rxbuf + 1 ,contr -01b1 98c08c00 iadd contr ,contr -01b2 e8c18000 ifetch 3 ,contr -01b3 6001cc80 store 3 ,mem_24g_sta_crc -01b4 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 -01b5 1fe37e00 rshift pdata ,pdata -01b6 1fe17e03 and pdata ,0x03 ,pdata -01b7 6000cc86 store 1 ,mem_24g_sta_pid -01b8 20600000 rtn +01a8 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 +01a9 1fe97e00 rshift3 pdata ,pdata +01aa 6000cc41 store 1 ,mem_24g_rxdata_length +01ab 1fe0fe01 increase 1 ,pdata +01ac d8c04bbe arg mem_24g_rxbuf + 1 ,contr +01ad 98c08c00 iadd contr ,contr +01ae e8c18000 ifetch 3 ,contr +01af 6001cc80 store 3 ,mem_24g_sta_crc +01b0 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 +01b1 1fe37e00 rshift pdata ,pdata +01b2 1fe17e03 and pdata ,0x03 ,pdata +01b3 6000cc86 store 1 ,mem_24g_sta_pid +01b4 20600000 rtn p_g24_transmit_prep: -01b9 6800cc43 fetch 1 ,mem_24g_datalen -01ba 1fe0fe02 increase 2 ,pdata -01bb 6000cc45 store 1 ,mem_24g_txlen -01bc 6800cc44 fetch 1 ,mem_24g_data_type -01bd 6000cbff store 1 ,mem_24g_txpayload -01be 6800cc43 fetch 1 ,mem_24g_datalen -01bf 1fe9fe00 lshift3 pdata ,pdata -01c0 6808cc42 fetcht 1 ,mem_24g_pid -01c1 18410403 and temp ,0x03 ,temp -01c2 18438400 lshift temp ,temp -01c3 9841fe00 ior temp ,pdata -01c4 6808cc7f fetcht 1 ,mem_24g_no_ack -01c5 9840fe00 iadd temp ,pdata -01c6 e0a08000 istore 1 ,contw -01c7 6800cc43 fetch 1 ,mem_24g_datalen -01c8 98007200 iforce loopcnt -01c9 d8c04bdf arg mem_24g_txbuf ,contr -01ca 20207f01 branch memcpy +01b5 6800cc43 fetch 1 ,mem_24g_datalen +01b6 1fe0fe02 increase 2 ,pdata +01b7 6000cc45 store 1 ,mem_24g_txlen +01b8 6800cc44 fetch 1 ,mem_24g_data_type +01b9 6000cbff store 1 ,mem_24g_txpayload +01ba 6800cc43 fetch 1 ,mem_24g_datalen +01bb 1fe9fe00 lshift3 pdata ,pdata +01bc 6808cc42 fetcht 1 ,mem_24g_pid +01bd 18410403 and temp ,0x03 ,temp +01be 18438400 lshift temp ,temp +01bf 9841fe00 ior temp ,pdata +01c0 6808cc7f fetcht 1 ,mem_24g_no_ack +01c1 9840fe00 iadd temp ,pdata +01c2 e0a08000 istore 1 ,contw +01c3 6800cc43 fetch 1 ,mem_24g_datalen +01c4 98007200 iforce loopcnt +01c5 d8c04bdf arg mem_24g_txbuf ,contr +01c6 20207f01 branch memcpy p_g24_prep: -01cb 7844fc00 disable enable_crc -01cc 7843fc00 disable enable_white -01cd 58555555 setarg 0x555555 -01ce 98001e00 iforce crc24_init -01cf 6800cc4d fetch 1 ,mem_24g_ch -01d0 202053da branch le_prep2 +01c7 7844fc00 disable enable_crc +01c8 7843fc00 disable enable_white +01c9 58555555 setarg 0x555555 +01ca 98001e00 iforce crc24_init +01cb 6800cc4d fetch 1 ,mem_24g_ch +01cc 202053da branch le_prep2 p_g24_receive_rxon: -01d1 204001cb call p_g24_prep -01d2 7857fc00 disable user3 -01d3 7826fc00 enable decode_fec0 -01d4 7830fc00 enable is_rx -01d5 78507c00 disable is_tx -01d6 78287c00 enable swfine -01d7 68014c46 fetch 2 ,mem_24g_rx_window -01d8 98003600 iforce stop_watch -01d9 37c18400 correlate null ,timeout -01da 242c0212 nbranch p_g24_sync_timeout ,sync -01db 7846fc00 disable decode_fec0 -01dc 7825fc00 enable decode_fec1 -01dd 7823fc00 enable enable_white -01de 7824fc00 enable enable_crc -01df 2040020f call p_g24_receive_byte -01e0 6000ccf7 store 1 ,mem_24g_get_syncword_crc8 -01e1 6808ccf6 fetcht 1 ,mem_24g_syncword_crc8 -01e2 98467c00 isub temp ,null -01e3 24228212 nbranch p_g24_end_of_packet ,zero -01e4 2040020f call p_g24_receive_byte -01e5 6000cbbd store 1 ,mem_24g_rxbuf -01e6 6800cbbd fetch 1 ,mem_24g_rxbuf -01e7 6808cc44 fetcht 1 ,mem_24g_data_type -01e8 a8400e00 icompare bits_data ,temp -01e9 24208212 nbranch p_g24_end_of_packet ,true +01cd 204001c7 call p_g24_prep +01ce 7857fc00 disable user3 +01cf 7826fc00 enable decode_fec0 +01d0 7830fc00 enable is_rx +01d1 78507c00 disable is_tx +01d2 78287c00 enable swfine +01d3 68014c46 fetch 2 ,mem_24g_rx_window +01d4 98003600 iforce stop_watch +01d5 37c18400 correlate null ,timeout +01d6 242c020e nbranch p_g24_sync_timeout ,sync +01d7 7846fc00 disable decode_fec0 +01d8 7825fc00 enable decode_fec1 +01d9 7823fc00 enable enable_white +01da 7824fc00 enable enable_crc +01db 2040020b call p_g24_receive_byte +01dc 6000ccf7 store 1 ,mem_24g_get_syncword_crc8 +01dd 6808ccf6 fetcht 1 ,mem_24g_syncword_crc8 +01de 98467c00 isub temp ,null +01df 2422820e nbranch p_g24_end_of_packet ,zero +01e0 2040020b call p_g24_receive_byte +01e1 6000cbbd store 1 ,mem_24g_rxbuf +01e2 6800cbbd fetch 1 ,mem_24g_rxbuf +01e3 6808cc44 fetcht 1 ,mem_24g_data_type +01e4 a8400e00 icompare bits_data ,temp +01e5 2420820e nbranch p_g24_end_of_packet ,true p_g24_receive_skip: -01ea 2040020f call p_g24_receive_byte -01eb e0a08000 istore 1 ,contw -01ec 1fe97e00 rshift3 pdata ,pdata -01ed 1fe1721f and pdata ,0x1f ,loopcnt -01ee 202281f2 branch p_g24rx_nopayload ,zero +01e6 2040020b call p_g24_receive_byte +01e7 e0a08000 istore 1 ,contw +01e8 1fe97e00 rshift3 pdata ,pdata +01e9 1fe1721f and pdata ,0x1f ,loopcnt +01ea 202281ee branch p_g24rx_nopayload ,zero p_g24rx_loop: -01ef 2040020f call p_g24_receive_byte -01f0 e0a08000 istore 1 ,contw -01f1 c20001ef loop p_g24rx_loop +01eb 2040020b call p_g24_receive_byte +01ec e0a08000 istore 1 ,contw +01ed c20001eb loop p_g24rx_loop p_g24rx_nopayload: -01f2 18a22200 copy contw ,rega -01f3 2040020f call p_g24_receive_byte -01f4 6000cd7e store 1 ,mem_rssi_hex_received -01f5 1a220a00 copy rega ,contw -01f6 09800018 parse demod ,bucket ,24 -01f7 78287c00 enable swfine -01f8 db600664 arg param_sifs ,stop_watch -01f9 1fef7e00 rshift32 pdata ,pdata -01fa 1ff17e00 rshift16 pdata ,pdata -01fb e0a18000 istore 3 ,contw -01fc 7845fc00 disable decode_fec1 -01fd 20230212 branch p_g24_end_of_packet ,crc_failed -01fe 7837fc00 enable user3 -01ff 68008017 fetch 1 ,mem_last_freq -0200 1fe0a200 add pdata ,0 ,rega -0201 20402981 call rf_write_freq -0202 7846fc00 disable decode_fec0 -0203 20402918 call set_sync_on -0204 6800cd7e fetch 1 ,mem_rssi_hex_received +01ee 18a22200 copy contw ,rega +01ef 2040020b call p_g24_receive_byte +01f0 6000cd7e store 1 ,mem_rssi_hex_received +01f1 1a220a00 copy rega ,contw +01f2 09800018 parse demod ,bucket ,24 +01f3 78287c00 enable swfine +01f4 db600664 arg param_sifs ,stop_watch +01f5 1fef7e00 rshift32 pdata ,pdata +01f6 1ff17e00 rshift16 pdata ,pdata +01f7 e0a18000 istore 3 ,contw +01f8 7845fc00 disable decode_fec1 +01f9 2023020e branch p_g24_end_of_packet ,crc_failed +01fa 7837fc00 enable user3 +01fb 68008017 fetch 1 ,mem_last_freq +01fc 1fe0a200 add pdata ,0 ,rega +01fd 20402981 call rf_write_freq +01fe 7846fc00 disable decode_fec0 +01ff 20402918 call set_sync_on +0200 6800cd7e fetch 1 ,mem_rssi_hex_received p_rssi_signal: -0205 1fe22200 copy pdata ,rega -0206 6808ccfe fetcht 1 ,mem_rssi_signal_index -0207 58004d05 setarg mem_rssi_signal_buf -0208 98408a00 iadd temp ,contw -0209 1a227e00 copy rega ,pdata -020a e0a08000 istore 1 ,contw -020b 18408401 increase 1 ,temp -020c 18410407 and_into rssi_buf_len_signal ,temp -020d 6008ccfe storet 1 ,mem_rssi_signal_index -020e 20600000 rtn +0201 1fe22200 copy pdata ,rega +0202 6808ccfe fetcht 1 ,mem_rssi_signal_index +0203 58004d05 setarg mem_rssi_signal_buf +0204 98408a00 iadd temp ,contw +0205 1a227e00 copy rega ,pdata +0206 e0a08000 istore 1 ,contw +0207 18408401 increase 1 ,temp +0208 18410407 and_into rssi_buf_len_signal ,temp +0209 6008ccfe storet 1 ,mem_rssi_signal_index +020a 20600000 rtn p_g24_receive_byte: -020f 09800008 parse demod ,bucket ,8 -0210 19897e00 rshift3 pwindow ,pdata -0211 20600000 rtn +020b 09800008 parse demod ,bucket ,8 +020c 19897e00 rshift3 pwindow ,pdata +020d 20600000 rtn p_g24_sync_timeout: p_g24_end_of_packet: -0212 784dfc00 disable encode_fec1 -0213 7845fc00 disable decode_fec1 -0214 2020264d branch end_of_packet +020e 784dfc00 disable encode_fec1 +020f 7845fc00 disable decode_fec1 +0210 2020264d branch end_of_packet p_g24_transmit: -0215 204053c4 call le_enable -0216 68024c6b fetch 4 ,mem_24g_addr -0217 98001200 iforce access -0218 204001cb call p_g24_prep -0219 20402918 call set_sync_on -021a 6808cc4d fetcht 1 ,mem_24g_ch -021b 20402933 call set_freq_tx -021c 79202a00 set1 txgfsk ,radio_ctrl -021d 782efc00 enable encode_fec0 -021e 78307c00 enable is_tx -021f 7850fc00 disable is_rx -0220 19317e00 rshift16 access ,pdata -0221 1fecfe00 rshift8 pdata ,pdata -0222 1ff1fe00 rshift4 pdata ,pdata -0223 08008628 inject mod ,40 -0224 784efc00 disable encode_fec0 -0225 782dfc00 enable encode_fec1 -0226 7823fc00 enable enable_white -0227 7824fc00 enable enable_crc -0228 6800ccf6 fetch 1 ,mem_24g_syncword_crc8 -0229 08008608 inject mod ,8 -022a 6800cc45 fetch 1 ,mem_24g_txlen -022b 98007200 iforce loopcnt -022c d8c04bff arg mem_24g_txpayload ,contr +0211 204053c4 call le_enable +0212 68024c6b fetch 4 ,mem_24g_addr +0213 98001200 iforce access +0214 204001c7 call p_g24_prep +0215 20402918 call set_sync_on +0216 6808cc4d fetcht 1 ,mem_24g_ch +0217 20402933 call set_freq_tx +0218 79202a00 set1 txgfsk ,radio_ctrl +0219 782efc00 enable encode_fec0 +021a 78307c00 enable is_tx +021b 7850fc00 disable is_rx +021c 19317e00 rshift16 access ,pdata +021d 1fecfe00 rshift8 pdata ,pdata +021e 1ff1fe00 rshift4 pdata ,pdata +021f 08008628 inject mod ,40 +0220 784efc00 disable encode_fec0 +0221 782dfc00 enable encode_fec1 +0222 7823fc00 enable enable_white +0223 7824fc00 enable enable_crc +0224 6800ccf6 fetch 1 ,mem_24g_syncword_crc8 +0225 08008608 inject mod ,8 +0226 6800cc45 fetch 1 ,mem_24g_txlen +0227 98007200 iforce loopcnt +0228 d8c04bff arg mem_24g_txpayload ,contr p_g24tr_loop: -022d e8c08000 ifetch 1 ,contr -022e 08008608 inject mod ,8 -022f c200022d loop p_g24tr_loop -0230 78247c00 enable enable_parity -0231 08008618 inject mod ,24 -0232 78447c00 disable enable_parity -0233 37d38200 until null ,tx_clear -0234 20000064 nop 100 -0235 784efc00 disable encode_fec0 -0236 784dfc00 disable encode_fec1 -0237 20600000 rtn +0229 e8c08000 ifetch 1 ,contr +022a 08008608 inject mod ,8 +022b c2000229 loop p_g24tr_loop +022c 78247c00 enable enable_parity +022d 08008618 inject mod ,24 +022e 78447c00 disable enable_parity +022f 37d38200 until null ,tx_clear +0230 20000064 nop 100 +0231 784efc00 disable encode_fec0 +0232 784dfc00 disable encode_fec1 +0233 20600000 rtn p_g24_timer_check: -0238 20407fe9 call disable_user -0239 680a4c64 fetcht 4 ,mem_24g_tx_btclk -023a 1c427e00 copy clkn_bt ,pdata -023b 98467c00 isub temp ,null -023c 24412d18 ncall g24_timer_timeout ,positive -023d 1fe22400 copy pdata ,regb -023e 68024c64 fetch 4 ,mem_24g_tx_btclk -023f 6808cc68 fetcht 1 ,mem_24g_interval -0240 98408400 iadd temp ,temp -0241 1a427e00 copy regb ,pdata -0242 98467c00 isub temp ,null -0243 24610000 nrtn positive -0244 793ffe1c set0 28 ,pdata -0245 60024c64 store 4 ,mem_24g_tx_btclk -0246 20207fe7 branch enable_user +0234 20407fe9 call disable_user +0235 680a4c64 fetcht 4 ,mem_24g_tx_btclk +0236 1c427e00 copy clkn_bt ,pdata +0237 98467c00 isub temp ,null +0238 24412d18 ncall g24_timer_timeout ,positive +0239 1fe22400 copy pdata ,regb +023a 68024c64 fetch 4 ,mem_24g_tx_btclk +023b 6808cc68 fetcht 1 ,mem_24g_interval +023c 98408400 iadd temp ,temp +023d 1a427e00 copy regb ,pdata +023e 98467c00 isub temp ,null +023f 24610000 nrtn positive +0240 793ffe1c set0 28 ,pdata +0241 60024c64 store 4 ,mem_24g_tx_btclk +0242 20207fe7 branch enable_user p_rssi_average: -0247 d8400000 arg 0 ,temp -0248 df200008 arg rssi_buf_len_signal + 1 ,loopcnt -0249 1a220c00 copy rega ,contr +0243 d8400000 arg 0 ,temp +0244 df200008 arg rssi_buf_len_signal + 1 ,loopcnt +0245 1a220c00 copy rega ,contr p_rssi_average_loop: -024a e8c08000 ifetch 1 ,contr -024b 98408400 iadd temp ,temp -024c c200024a loop p_rssi_average_loop -024d 18497e00 rshift3 temp ,pdata -024e 1fe20400 copy pdata ,temp -024f c6930000 rtnmark0 mark_24g -0250 1fe6fc0a div pdata ,10 -0251 20407f86 call wait_div_end -0252 1807fe00 quotient pdata -0253 1ff27e00 lshift4 pdata ,pdata -0254 20207f55 branch clk2bt_next +0246 e8c08000 ifetch 1 ,contr +0247 98408400 iadd temp ,temp +0248 c2000246 loop p_rssi_average_loop +0249 18497e00 rshift3 temp ,pdata +024a 1fe20400 copy pdata ,temp +024b c6930000 rtnmark0 mark_24g +024c 1fe6fc0a div pdata ,10 +024d 20407f86 call wait_div_end +024e 1807fe00 quotient pdata +024f 1ff27e00 lshift4 pdata ,pdata +0250 20207f55 branch clk2bt_next p_mouse_before_lpm: -0255 c6130000 rtnmark1 mark_24g -0256 2040037b call p_mouse_le_txbuff_save -0257 20400267 call p_mouse_setgpio_lpm -0258 6800c040 fetch 1 ,mem_context -0259 c300025c bbit0 state_inconn ,p_clear_wake -025a 680080a0 fetch 1 ,mem_lpm_current_mult -025b 247a0000 nrtn blank +0251 c6130000 rtnmark1 mark_24g +0252 20400377 call p_mouse_le_txbuff_save +0253 20400263 call p_mouse_setgpio_lpm +0254 6800c040 fetch 1 ,mem_context +0255 c3000258 bbit0 state_inconn ,p_clear_wake +0256 680080a0 fetch 1 ,mem_lpm_current_mult +0257 247a0000 nrtn blank p_clear_wake: -025c 58000000 setarg 0 -025d 600400a1 store 8 ,mem_gpio_wakeup_low -025e 20600000 rtn +0258 58000000 setarg 0 +0259 600400a1 store 8 ,mem_gpio_wakeup_low +025a 20600000 rtn p_g24_lpm_wait: -025f 78347c00 enable user -0260 20402afa call lpo_calibration -0261 6801c16f fetch 3 ,mem_clks_per_lpo -0262 203a7fe9 branch disable_user ,blank -0263 6800c091 fetch 1 ,mem_lpm_mode -0264 203a7fe9 branch disable_user ,blank -0265 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt -0266 c000ffe9 beq g24_tx_timer_int_enable ,disable_user +025b 78347c00 enable user +025c 20402afa call lpo_calibration +025d 6801c16f fetch 3 ,mem_clks_per_lpo +025e 203a7fe9 branch disable_user ,blank +025f 6800c091 fetch 1 ,mem_lpm_mode +0260 203a7fe9 branch disable_user ,blank +0261 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt +0262 c000ffe9 beq g24_tx_timer_int_enable ,disable_user p_mouse_setgpio_lpm: -0267 20400293 call p_mouse_set_sdio_high -0268 2040025c call p_clear_wake +0263 2040028f call p_mouse_set_sdio_high +0264 20400258 call p_clear_wake p_mouse_setgpio_hibernate: -0269 20403ebf call mouse_lpm_before_common -026a 6808cb46 fetcht 1 ,mem_flash_ncs_gpio -026b 20406825 call gpio_out_inactive -026c 68120070 hfetch 4 ,core_gpio_oe0 -026d 681a0078 hfetcht 4 ,core_gpio_pu0 -026e 98418400 ior temp ,temp -026f 18440400 invert temp ,temp -0270 601a007c hstoret 4 ,core_gpio_pd0 -0271 6810807d hfetch 1 ,core_gpio_pd1 -0272 793ffe02 set0 2 ,pdata -0273 6010807d hstore 1 ,core_gpio_pd1 -0274 6810807e hfetch 1 ,core_gpio_pd2 -0275 793ffe06 set0 6 ,pdata -0276 6010807e hstore 1 ,core_gpio_pd2 -0277 6810807f hfetch 1 ,core_gpio_pd3 -0278 79207e00 set1 0 ,pdata -0279 6010807f hstore 1 ,core_gpio_pd3 -027a 6810807a hfetch 1 ,core_gpio_pu2 -027b 1fe1fec0 or pdata ,0xc0 ,pdata -027c 6010807a hstore 1 ,core_gpio_pu2 -027d 6810807f hfetch 1 ,core_gpio_pd3 -027e 1fe17e7f and pdata ,0x7f ,pdata -027f 6010807f hstore 1 ,core_gpio_pd3 -0280 20600000 rtn +0265 20403ebf call mouse_lpm_before_common +0266 6808cb46 fetcht 1 ,mem_flash_ncs_gpio +0267 20406825 call gpio_out_inactive +0268 68120070 hfetch 4 ,core_gpio_oe0 +0269 681a0078 hfetcht 4 ,core_gpio_pu0 +026a 98418400 ior temp ,temp +026b 18440400 invert temp ,temp +026c 601a007c hstoret 4 ,core_gpio_pd0 +026d 6810807d hfetch 1 ,core_gpio_pd1 +026e 793ffe02 set0 2 ,pdata +026f 6010807d hstore 1 ,core_gpio_pd1 +0270 6810807e hfetch 1 ,core_gpio_pd2 +0271 793ffe06 set0 6 ,pdata +0272 6010807e hstore 1 ,core_gpio_pd2 +0273 6810807f hfetch 1 ,core_gpio_pd3 +0274 79207e00 set1 0 ,pdata +0275 6010807f hstore 1 ,core_gpio_pd3 +0276 6810807a hfetch 1 ,core_gpio_pu2 +0277 1fe1fec0 or pdata ,0xc0 ,pdata +0278 6010807a hstore 1 ,core_gpio_pu2 +0279 6810807f hfetch 1 ,core_gpio_pd3 +027a 1fe17e7f and pdata ,0x7f ,pdata +027b 6010807f hstore 1 ,core_gpio_pd3 +027c 20600000 rtn p_mouse_t_wheel_clear_wake: -0281 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio -0282 204005e1 call p_gpio_set_input_pd -0283 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio -0284 204005e1 call p_gpio_set_input_pd -0285 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio -0286 204005e1 call p_gpio_set_input_pd -0287 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio -0288 204005e1 call p_gpio_set_input_pd -0289 680080a1 fetch 1 ,mem_gpio_wakeup_low -028a 1fe17ebf and pdata ,0xbf ,pdata -028b 600080a1 store 1 ,mem_gpio_wakeup_low -028c 680080a3 fetch 1 ,mem_gpio_wakeup_low + 2 -028d 1fe17e7f and pdata ,0x7f ,pdata -028e 600080a3 store 1 ,mem_gpio_wakeup_low + 2 -028f 680080a4 fetch 1 ,mem_gpio_wakeup_low + 3 -0290 1fe17ee7 and pdata ,0xe7 ,pdata -0291 600080a4 store 1 ,mem_gpio_wakeup_low + 3 -0292 20600000 rtn +027d 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +027e 204005df call p_gpio_set_input_pd +027f 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +0280 204005df call p_gpio_set_input_pd +0281 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +0282 204005df call p_gpio_set_input_pd +0283 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +0284 204005df call p_gpio_set_input_pd +0285 680080a1 fetch 1 ,mem_gpio_wakeup_low +0286 1fe17ebf and pdata ,0xbf ,pdata +0287 600080a1 store 1 ,mem_gpio_wakeup_low +0288 680080a3 fetch 1 ,mem_gpio_wakeup_low + 2 +0289 1fe17e7f and pdata ,0x7f ,pdata +028a 600080a3 store 1 ,mem_gpio_wakeup_low + 2 +028b 680080a4 fetch 1 ,mem_gpio_wakeup_low + 3 +028c 1fe17ee7 and pdata ,0xe7 ,pdata +028d 600080a4 store 1 ,mem_gpio_wakeup_low + 3 +028e 20600000 rtn p_mouse_set_sdio_high: -0293 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag -0294 207a0000 rtn blank -0295 20200560 branch p_mouse_seting_sensor_type +028f 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag +0290 207a0000 rtn blank +0291 2020055e branch p_mouse_seting_sensor_type p_device_init: -0296 70895b86 jam 0x86 ,0x895b -0297 70895ca0 jam 0xa0 ,0x895c -0298 2040296c call initialize_radio -0299 20403416 call app_lpm_mult_enable -029a 204074b9 call enable_authrom -029b 20358319 branch p_mouse_spi_init ,wake +0292 70895b86 jam 0x86 ,0x895b +0293 70895ca0 jam 0xa0 ,0x895c +0294 2040296c call initialize_radio +0295 20403416 call app_lpm_mult_enable +0296 204074b9 call enable_authrom +0297 20358315 branch p_mouse_spi_init ,wake p_device_wake_from_power: -029c 6801c4a3 fetch 3 ,mem_le_lap + 3 -029d 6001cbb0 store 3 ,mem_le_lap_high_3b -029e 20400001 call p_wake_from_power -029f 2040006b call p_mouse_switch_hwakeup_bypb -02a0 6808c720 fetcht 1 ,mem_device_flag -02a1 6800c703 fetch 1 ,mem_24g_device_number -02a2 98467c00 isub temp ,null -02a3 244282bb ncall p_mouse_bt_deepsleep_timerout_adjust ,zero -02a4 6800c720 fetch 1 ,mem_device_flag -02a5 c07f82a8 beq 0xff ,p_mouse_24g_pair_check -02a6 1fe67c01 sub pdata ,1 ,null -02a7 242282aa nbranch p_mouse_check_reconn_target ,zero +0298 6801c4a3 fetch 3 ,mem_le_lap + 3 +0299 6001cbb0 store 3 ,mem_le_lap_high_3b +029a 20400001 call p_wake_from_power +029b 2040006b call p_mouse_switch_hwakeup_bypb +029c 6808c720 fetcht 1 ,mem_device_flag +029d 6800c703 fetch 1 ,mem_24g_device_number +029e 98467c00 isub temp ,null +029f 244282b7 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero +02a0 6800c720 fetch 1 ,mem_device_flag +02a1 c07f82a4 beq 0xff ,p_mouse_24g_pair_check +02a2 1fe67c01 sub pdata ,1 ,null +02a3 242282a6 nbranch p_mouse_check_reconn_target ,zero p_mouse_24g_pair_check: -02a8 204005bd call p_mouse_check_key_gpio -02a9 c00282ce beq mouse_lm_button ,p_mouse_24g_pairing_button +02a4 204005bb call p_mouse_check_key_gpio +02a5 c00282ca beq mouse_lm_button ,p_mouse_24g_pairing_button p_mouse_check_reconn_target: -02aa 204002b8 call p_mouse_tx_power_init -02ab 204004e3 call p_mouse_select_device_by_button -02ac da204721 arg mem_device1_type ,rega -02ad 6800c720 fetch 1 ,mem_device_flag -02ae 6808c703 fetcht 1 ,mem_24g_device_number -02af 98467c00 isub temp ,null -02b0 20228366 branch p_mouse_start_24g_mode ,zero -02b1 1fe0ffff increase -1 ,pdata -02b2 1feffe1d mul32 pdata ,29 ,pdata -02b3 9a20a200 iadd rega ,rega -02b4 ea208000 ifetch 1 ,rega -02b5 6000c210 store 1 ,mem_xrecord_mode -02b6 c01a02be beq rec_4_mode ,p_mouse4_0_check_reconn_target -02b7 20600000 rtn +02a6 204002b4 call p_mouse_tx_power_init +02a7 204004e1 call p_mouse_select_device_by_button +02a8 da204721 arg mem_device1_type ,rega +02a9 6800c720 fetch 1 ,mem_device_flag +02aa 6808c703 fetcht 1 ,mem_24g_device_number +02ab 98467c00 isub temp ,null +02ac 20228362 branch p_mouse_start_24g_mode ,zero +02ad 1fe0ffff increase -1 ,pdata +02ae 1feffe1d mul32 pdata ,29 ,pdata +02af 9a20a200 iadd rega ,rega +02b0 ea208000 ifetch 1 ,rega +02b1 6000c210 store 1 ,mem_xrecord_mode +02b2 c01a02ba beq rec_4_mode ,p_mouse4_0_check_reconn_target +02b3 20600000 rtn p_mouse_tx_power_init: -02b8 6800ccfa fetch 1 ,mem_tx_power_temp -02b9 6000c1de store 1 ,mem_tx_power -02ba 20600000 rtn +02b4 6800ccfa fetch 1 ,mem_tx_power_temp +02b5 6000c1de store 1 ,mem_tx_power +02b6 20600000 rtn p_mouse_bt_deepsleep_timerout_adjust: -02bb 58004650 setarg 0x4650 -02bc 600146aa store 2 ,mem_mouse_no_data_timeout -02bd 20600000 rtn +02b7 58004650 setarg 0x4650 +02b8 600146aa store 2 ,mem_mouse_no_data_timeout +02b9 20600000 rtn p_mouse4_0_check_reconn_target: -02be 7011c523 jam zcode_23 ,mem_zcode_temp_param0 -02bf 202007cd branch p_zcode_entrance +02ba 7011c523 jam zcode_23 ,mem_zcode_temp_param0 +02bb 202007cb branch p_zcode_entrance p_le_check_adv_flag: -02c0 da204370 arg mem_le_adv_data ,rega +02bc da204370 arg mem_le_adv_data ,rega p_le_check_adv_flag_loop: -02c1 ea208000 ifetch 1 ,rega -02c2 207a0000 rtn blank -02c3 98c0a200 iadd contr ,rega -02c4 e8c08000 ifetch 1 ,contr -02c5 c1008000 rtneq 0x01 -02c6 202002c1 branch p_le_check_adv_flag_loop +02bd ea208000 ifetch 1 ,rega +02be 207a0000 rtn blank +02bf 98c0a200 iadd contr ,rega +02c0 e8c08000 ifetch 1 ,contr +02c1 c1008000 rtneq 0x01 +02c2 202002bd branch p_le_check_adv_flag_loop p_mouse_le_fast_conn_disable: -02c7 704bb35a jam 0x5a ,mem_mouse_fast_conn_flag -02c8 20600000 rtn +02c3 704bb35a jam 0x5a ,mem_mouse_fast_conn_flag +02c4 20600000 rtn p_mouse_fast_conn_init: -02c9 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag -02ca 70421034 jam 0x34 ,mem_xrecord_mode -02cb 68034d88 fetch 6 ,mem_24g_allpowerful_addr -02cc 600344a0 store 6 ,mem_le_lap -02cd 20600000 rtn +02c5 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag +02c6 70421034 jam 0x34 ,mem_xrecord_mode +02c7 68034d88 fetch 6 ,mem_24g_allpowerful_addr +02c8 600344a0 store 6 ,mem_le_lap +02c9 20600000 rtn p_mouse_24g_pairing_button: -02ce 7011c562 jam zcode_62 ,mem_zcode_temp_param0 -02cf 202007cd branch p_zcode_entrance +02ca 7011c562 jam zcode_62 ,mem_zcode_temp_param0 +02cb 202007cb branch p_zcode_entrance p_mouse_init_sunt: -02d0 20400319 call p_mouse_spi_init -02d1 204040c0 call mouse_spi_sdio_gpio_pollup +02cc 20400315 call p_mouse_spi_init +02cd 204040c0 call mouse_spi_sdio_gpio_pollup p_mouse_init_sensor: -02d2 204040d9 call mouse_read_sensor_id -02d3 c01802dc beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge -02d4 c01882eb beq p3065_id1 ,p_mouse_p3065_init_param -02d5 204040d1 call mouse_twspi_reset -02d6 200003e8 nop 1000 -02d7 202002d2 branch p_mouse_init_sensor +02ce 204040d9 call mouse_read_sensor_id +02cf c01802d8 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge +02d0 c01882e7 beq p3065_id1 ,p_mouse_p3065_init_param +02d1 204040d1 call mouse_twspi_reset +02d2 200003e8 nop 1000 +02d3 202002ce branch p_mouse_init_sensor p_mouse_init_sensor_reset: -02d8 704b0001 jam 1 ,mem_mouse_init_sensor_reset_flag -02d9 2040640f call spi_ncs_enable -02da 204002d0 call p_mouse_init_sunt -02db 20206411 branch spi_ncs_disable +02d4 704b0001 jam 1 ,mem_mouse_init_sensor_reset_flag +02d5 2040640f call spi_ncs_enable +02d6 204002cc call p_mouse_init_sunt +02d7 20206411 branch spi_ncs_disable p_mouse_init_p32xx_id2_judge: -02dc 20400556 call p_mouse_sensor_poweron -02dd 6800c6de fetch 1 ,mem_sensor_id2 -02de c02d02e0 beq p_mx8650 ,p_mouse_mx8650_init_param -02df 202040e1 branch mouse_init_p32xx_id2_judge + 1 +02d8 20400554 call p_mouse_sensor_poweron +02d9 6800c6de fetch 1 ,mem_sensor_id2 +02da c02d02dc beq p_mx8650 ,p_mouse_mx8650_init_param +02db 202040e1 branch mouse_init_p32xx_id2_judge + 1 p_mouse_mx8650_init_param: -02e0 7046e007 jam mx8650 ,mem_config_sensor_type -02e1 da604b6e arg mem_sensor_8650_init ,regc -02e2 204002e4 call p_sensor_wr_seq -02e3 2020055c branch p_mouse_dpi_config +02dc 7046e007 jam mx8650 ,mem_config_sensor_type +02dd da604b6e arg mem_sensor_8650_init ,regc +02de 204002e0 call p_sensor_wr_seq +02df 2020055a branch p_mouse_dpi_config p_sensor_wr_seq: -02e4 ea610000 ifetch 2 ,regc -02e5 d840ffff arg 0xffff ,temp -02e6 98467c00 isub temp ,null -02e7 20628000 rtn zero -02e8 20406413 call twspi_write -02e9 1a60a602 increase 2 ,regc -02ea 202002e4 branch p_sensor_wr_seq +02e0 ea610000 ifetch 2 ,regc +02e1 d840ffff arg 0xffff ,temp +02e2 98467c00 isub temp ,null +02e3 20628000 rtn zero +02e4 20406413 call twspi_write +02e5 1a60a602 increase 2 ,regc +02e6 202002e0 branch p_sensor_wr_seq p_mouse_p3065_init_param: -02eb 20400556 call p_mouse_sensor_poweron -02ec 202040ea branch mouse_p3065_init_param +02e7 20400554 call p_mouse_sensor_poweron +02e8 202040ea branch mouse_p3065_init_param p_spid_init_flash: -02ed 70808640 jam 0x40 ,core_spid_ctrl -02ee 70808700 jam 0x0 ,core_spid_delay -02ef 68108081 hfetch 1 ,core_gpio_sel1 -02f0 793ffe00 set0 0 ,pdata -02f1 793ffe01 set0 1 ,pdata -02f2 79207e03 set1 3 ,pdata -02f3 793ffe04 set0 4 ,pdata -02f4 60108081 hstore 1 ,core_gpio_sel1 -02f5 58000000 setarg 0 -02f6 600201f5 store 4 ,mem_spid_tbuf -02f7 6810807f hfetch 1 ,core_gpio_pd3 -02f8 793ffe00 set0 0 ,pdata -02f9 6010807f hstore 1 ,core_gpio_pd3 -02fa 20600000 rtn +02e9 70808640 jam 0x40 ,core_spid_ctrl +02ea 70808700 jam 0x0 ,core_spid_delay +02eb 68108081 hfetch 1 ,core_gpio_sel1 +02ec 793ffe00 set0 0 ,pdata +02ed 793ffe01 set0 1 ,pdata +02ee 79207e03 set1 3 ,pdata +02ef 793ffe04 set0 4 ,pdata +02f0 60108081 hstore 1 ,core_gpio_sel1 +02f1 58000000 setarg 0 +02f2 600201f5 store 4 ,mem_spid_tbuf +02f3 6810807f hfetch 1 ,core_gpio_pd3 +02f4 793ffe00 set0 0 ,pdata +02f5 6010807f hstore 1 ,core_gpio_pd3 +02f6 20600000 rtn p_mouse_load_flash_info_check: -02fb 20400358 call p_flash_release_deep_power_down -02fc 20404423 call mouse_load_flash_flag -02fd 68014778 fetch 2 ,mem_store_flag -02fe d840aa55 arg eeprom_init_flag ,temp -02ff 98467c00 isub temp ,null -0300 20228348 branch p_mouse_load_flash_device_info ,zero -0301 60094778 storet 2 ,mem_store_flag -0302 2040441c call mouse_ble_init_address -0303 68024b4d fetch 4 ,mem_mouse_24g_addr_init -0304 6002477b store 4 ,mem_mouse_24g_addr -0305 60024c6b store 4 ,mem_24g_addr +02f7 20400354 call p_flash_release_deep_power_down +02f8 20404423 call mouse_load_flash_flag +02f9 68014778 fetch 2 ,mem_store_flag +02fa d840aa55 arg eeprom_init_flag ,temp +02fb 98467c00 isub temp ,null +02fc 20228344 branch p_mouse_load_flash_device_info ,zero +02fd 60094778 storet 2 ,mem_store_flag +02fe 2040441c call mouse_ble_init_address +02ff 68024b4d fetch 4 ,mem_mouse_24g_addr_init +0300 6002477b store 4 ,mem_mouse_24g_addr +0301 60024c6b store 4 ,mem_24g_addr p_mouse_store_flash_device_info: -0306 20400516 call p_mouse_adc_read_timeout -0307 6801470f fetch 2 ,mem_mouse_vdd_now_vol -0308 203a0306 branch p_mouse_store_flash_device_info ,blank -0309 6800c231 fetch 1 ,mem_adc_power_flag -030a c280b40a bbit1 1 ,app_enter_hibernate -030b 20400358 call p_flash_release_deep_power_down -030c 20400324 call p_flash_erase_sector -030d 20400333 call p_flash_write_enable -030e 20400342 call p_mouse_information_flash_parameters -030f 20400337 call p_spid_write_flash -0310 20400328 call p_wait_flash_done -0311 2040031b call p_mouse_store_flash_dpi +0302 20400514 call p_mouse_adc_read_timeout +0303 6801470f fetch 2 ,mem_mouse_vdd_now_vol +0304 203a0302 branch p_mouse_store_flash_device_info ,blank +0305 6800c231 fetch 1 ,mem_adc_power_flag +0306 c280b40a bbit1 1 ,app_enter_hibernate +0307 20400354 call p_flash_release_deep_power_down +0308 20400320 call p_flash_erase_sector +0309 2040032f call p_flash_write_enable +030a 2040033e call p_mouse_information_flash_parameters +030b 20400333 call p_spid_write_flash +030c 20400324 call p_wait_flash_done +030d 20400317 call p_mouse_store_flash_dpi p_mouse_store_random_addr_increase_count: -0312 204002ed call p_spid_init_flash -0313 20400333 call p_flash_write_enable -0314 d8400002 arg 2 ,temp -0315 da2047c4 arg mem_random_addr_increase_count ,rega -0316 da40005f arg mouse_random_addr_count_eeprom_offset ,regb -0317 20400320 call p_mouse_store_flash_comm -0318 20400351 call p_flash_deep_power_down +030e 204002e9 call p_spid_init_flash +030f 2040032f call p_flash_write_enable +0310 d8400002 arg 2 ,temp +0311 da2047c4 arg mem_random_addr_increase_count ,rega +0312 da40005f arg mouse_random_addr_count_eeprom_offset ,regb +0313 2040031c call p_mouse_store_flash_comm +0314 2040034d call p_flash_deep_power_down p_mouse_spi_init: -0319 70421276 jam 0x76 ,mem_spi_init_clk -031a 20203d36 branch mouse_spi_init +0315 70421276 jam 0x76 ,mem_spi_init_clk +0316 20203d36 branch mouse_spi_init p_mouse_store_flash_dpi: -031b 204002ed call p_spid_init_flash -031c 20400333 call p_flash_write_enable -031d d8400001 arg 1 ,temp -031e da20477a arg mem_mouse_dpi ,rega -031f da40005a arg mouse_dpi_eeprom_offect ,regb +0317 204002e9 call p_spid_init_flash +0318 2040032f call p_flash_write_enable +0319 d8400001 arg 1 ,temp +031a da20477a arg mem_mouse_dpi ,rega +031b da40005a arg mouse_dpi_eeprom_offect ,regb p_mouse_store_flash_comm: -0320 6801c700 fetch 3 ,mem_flash_base -0321 9a40fe00 iadd regb ,pdata -0322 20400337 call p_spid_write_flash -0323 20200328 branch p_wait_flash_done +031c 6801c700 fetch 3 ,mem_flash_base +031d 9a40fe00 iadd regb ,pdata +031e 20400333 call p_spid_write_flash +031f 20200324 branch p_wait_flash_done p_flash_erase_sector: -0324 6801c700 fetch 3 ,mem_flash_base -0325 6001c232 store 3 ,mem_spi_write_addr -0326 20400333 call p_flash_write_enable -0327 2040652b call flash_erase_sector + 3 +0320 6801c700 fetch 3 ,mem_flash_base +0321 6001c232 store 3 ,mem_spi_write_addr +0322 2040032f call p_flash_write_enable +0323 2040652b call flash_erase_sector + 3 p_wait_flash_done: -0328 2040032b call p_flash_read_status -0329 c2800328 bbit1 flash_status_wip ,p_wait_flash_done -032a 20600000 rtn +0324 20400327 call p_flash_read_status +0325 c2800324 bbit1 flash_status_wip ,p_wait_flash_done +0326 20600000 rtn p_flash_read_status: -032b 580001fa setarg mem_spid_rbuf -032c 6011008c hstore 2 ,core_spid_rxaddr -032d 58000005 setarg flash_read_satus -032e 18000401 force 1 ,temp -032f 600081f5 store 1 ,mem_spid_tbuf -0330 580001f5 setarg mem_spid_tbuf -0331 6011008a hstore 2 ,core_spid_txaddr -0332 202064f6 branch spid_read_regs + 2 +0327 580001fa setarg mem_spid_rbuf +0328 6011008c hstore 2 ,core_spid_rxaddr +0329 58000005 setarg flash_read_satus +032a 18000401 force 1 ,temp +032b 600081f5 store 1 ,mem_spid_tbuf +032c 580001f5 setarg mem_spid_tbuf +032d 6011008a hstore 2 ,core_spid_txaddr +032e 202064f6 branch spid_read_regs + 2 p_flash_write_enable: -0333 2040650b call spid_unlock_flash -0334 2040032b call p_flash_read_status -0335 c3008334 bbit0 flash_status_wel ,p_flash_write_enable + 1 -0336 20600000 rtn +032f 2040650b call spid_unlock_flash +0330 20400327 call p_flash_read_status +0331 c3008330 bbit0 flash_status_wel ,p_flash_write_enable + 1 +0332 20600000 rtn p_spid_write_flash: -0337 1fe22600 copy pdata ,regc -0338 1a227e00 copy rega ,pdata -0339 1fe0fffc increase -4 ,pdata -033a 1fe22400 copy pdata ,regb -033b ea420000 ifetch 4 ,regb -033c 60024b48 store 4 ,mem_write_flash_head_temp -033d 1a627e00 copy regc ,pdata -033e 20406552 call spid_write_flash -033f 68024b48 fetch 4 ,mem_write_flash_head_temp -0340 e2420000 istore 4 ,regb -0341 20600000 rtn +0333 1fe22600 copy pdata ,regc +0334 1a227e00 copy rega ,pdata +0335 1fe0fffc increase -4 ,pdata +0336 1fe22400 copy pdata ,regb +0337 ea420000 ifetch 4 ,regb +0338 60024b48 store 4 ,mem_write_flash_head_temp +0339 1a627e00 copy regc ,pdata +033a 20406552 call spid_write_flash +033b 68024b48 fetch 4 ,mem_write_flash_head_temp +033c e2420000 istore 4 ,regb +033d 20600000 rtn p_mouse_information_flash_parameters: -0342 5800477f setarg mem_mouse_information_end -0343 d8404720 arg mem_mouse_information_start ,temp -0344 98460400 isub temp ,temp -0345 6801c700 fetch 3 ,mem_flash_base -0346 da204720 arg mem_mouse_information_start ,rega -0347 20600000 rtn +033e 5800477f setarg mem_mouse_information_end +033f d8404720 arg mem_mouse_information_start ,temp +0340 98460400 isub temp ,temp +0341 6801c700 fetch 3 ,mem_flash_base +0342 da204720 arg mem_mouse_information_start ,rega +0343 20600000 rtn p_mouse_load_flash_device_info: -0348 20400358 call p_flash_release_deep_power_down -0349 20400342 call p_mouse_information_flash_parameters -034a 20406562 call spid_read_flash -034b 2040035a call p_mouse_load_random_addr_increase_count -034c 20400361 call p_mouse_load_dpi_from_flash -034d 2040431a call mouse_select_reconn_device -034e 6802477b fetch 4 ,mem_mouse_24g_addr -034f 60024c6b store 4 ,mem_24g_addr -0350 20600000 rtn +0344 20400354 call p_flash_release_deep_power_down +0345 2040033e call p_mouse_information_flash_parameters +0346 20406562 call spid_read_flash +0347 20400356 call p_mouse_load_random_addr_increase_count +0348 2040035d call p_mouse_load_dpi_from_flash +0349 2040431a call mouse_select_reconn_device +034a 6802477b fetch 4 ,mem_mouse_24g_addr +034b 60024c6b store 4 ,mem_24g_addr +034c 20600000 rtn p_flash_deep_power_down: -0351 700aa2b9 jam flash_command_deep_power_down ,mem_temp +034d 700aa2b9 jam flash_command_deep_power_down ,mem_temp p_spid_write_flash_cmd: -0352 204002ed call p_spid_init_flash -0353 204069ac call delay_nop100 -0354 da204b48 arg mem_write_flash_head_temp ,rega -0355 68088aa2 fetcht 1 ,mem_temp -0356 20406556 call spid_write_flash_common -0357 202069ac branch delay_nop100 +034e 204002e9 call p_spid_init_flash +034f 204069ac call delay_nop100 +0350 da204b48 arg mem_write_flash_head_temp ,rega +0351 68088aa2 fetcht 1 ,mem_temp +0352 20406556 call spid_write_flash_common +0353 202069ac branch delay_nop100 p_flash_release_deep_power_down: -0358 700aa2ab jam flash_command_release_deep_power_down ,mem_temp -0359 20200352 branch p_spid_write_flash_cmd +0354 700aa2ab jam flash_command_release_deep_power_down ,mem_temp +0355 2020034e branch p_spid_write_flash_cmd p_mouse_load_random_addr_increase_count: -035a 20400358 call p_flash_release_deep_power_down -035b d8400002 arg 2 ,temp -035c da2047c4 arg mem_random_addr_increase_count ,rega -035d da40005f arg mouse_random_addr_count_eeprom_offset ,regb +0356 20400354 call p_flash_release_deep_power_down +0357 d8400002 arg 2 ,temp +0358 da2047c4 arg mem_random_addr_increase_count ,rega +0359 da40005f arg mouse_random_addr_count_eeprom_offset ,regb p_mouse_load_flash_comm: -035e 6801c700 fetch 3 ,mem_flash_base -035f 9a40fe00 iadd regb ,pdata -0360 20206562 branch spid_read_flash +035a 6801c700 fetch 3 ,mem_flash_base +035b 9a40fe00 iadd regb ,pdata +035c 20206562 branch spid_read_flash p_mouse_load_dpi_from_flash: -0361 20400358 call p_flash_release_deep_power_down -0362 d8400001 arg 1 ,temp -0363 da20477a arg mem_mouse_dpi ,rega -0364 da40005a arg mouse_dpi_eeprom_offect ,regb -0365 2020035e branch p_mouse_load_flash_comm +035d 20400354 call p_flash_release_deep_power_down +035e d8400001 arg 1 ,temp +035f da20477a arg mem_mouse_dpi ,rega +0360 da40005a arg mouse_dpi_eeprom_offect ,regb +0361 2020035a branch p_mouse_load_flash_comm p_mouse_start_24g_mode: -0366 70472001 jam 1 ,mem_device_flag -0367 2040076e call p_mouse_mode_24g_device_multi_led_on +0362 70472001 jam 1 ,mem_device_flag +0363 2040076c call p_mouse_mode_24g_device_multi_led_on p_g24_start_24g_mode: -0368 7011c560 jam zcode_60 ,mem_zcode_temp_param0 -0369 202007cd branch p_zcode_entrance +0364 7011c560 jam zcode_60 ,mem_zcode_temp_param0 +0365 202007cb branch p_zcode_entrance p_g24_auto_pair_start: -036a 20400773 call p_mouse_discovery_multi_led_blink -036b 7011c561 jam zcode_61 ,mem_zcode_temp_param0 -036c 202007cd branch p_zcode_entrance +0366 20400771 call p_mouse_discovery_multi_led_blink +0367 7011c561 jam zcode_61 ,mem_zcode_temp_param0 +0368 202007cb branch p_zcode_entrance p_pdata_0xff_check: -036d 20407fe7 call enable_user -036e 5800ffff setarg 0xffff +0369 20407fe7 call enable_user +036a 5800ffff setarg 0xffff p_pdata_0xff_check_loop: -036f e8c90000 ifetcht 2 ,contr -0370 98467c00 isub temp ,null -0371 2442ffe9 ncall disable_user ,zero -0372 c200036f loop p_pdata_0xff_check_loop -0373 20600000 rtn +036b e8c90000 ifetcht 2 ,contr +036c 98467c00 isub temp ,null +036d 2442ffe9 ncall disable_user ,zero +036e c200036b loop p_pdata_0xff_check_loop +036f 20600000 rtn p_mouse_g24_package_data: -0374 20404401 call mouse_g24_package_data -0375 6801469f fetch 2 ,mem_mouse_z -0376 207a0000 rtn blank +0370 20404401 call mouse_g24_package_data +0371 6801469f fetch 2 ,mem_mouse_z +0372 207a0000 rtn blank p_g24_transmit_by_interrupt_enable: -0377 704d8301 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt -0378 58000000 setarg 0 -0379 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count -037a 20600000 rtn +0373 704d8301 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt +0374 58000000 setarg 0 +0375 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0376 20600000 rtn p_mouse_le_txbuff_save: -037b d8c01800 arg mem_le_tx_buffer0 ,contr -037c d8a0480c arg mem_le_tx_buffer0_omemalloc ,contw -037d 20400383 call p_mouse_le_txbuff_copy -037e d8c01900 arg mem_le_tx_buffer1 ,contr -037f 20400383 call p_mouse_le_txbuff_copy -0380 d8c01a00 arg mem_le_tx_buffer2 ,contr -0381 20400383 call p_mouse_le_txbuff_copy -0382 d8c01b00 arg mem_le_tx_buffer3 ,contr +0377 d8c01800 arg mem_le_tx_buffer0 ,contr +0378 d8a0480c arg mem_le_tx_buffer0_omemalloc ,contw +0379 2040037f call p_mouse_le_txbuff_copy +037a d8c01900 arg mem_le_tx_buffer1 ,contr +037b 2040037f call p_mouse_le_txbuff_copy +037c d8c01a00 arg mem_le_tx_buffer2 ,contr +037d 2040037f call p_mouse_le_txbuff_copy +037e d8c01b00 arg mem_le_tx_buffer3 ,contr p_mouse_le_txbuff_copy: -0383 df20001b arg 27 ,loopcnt -0384 20207f01 branch memcpy +037f df20001b arg 27 ,loopcnt +0380 20207f01 branch memcpy p_mouse_le_txbuff_load: -0385 d8c0480c arg mem_le_tx_buffer0_omemalloc ,contr -0386 d8a01800 arg mem_le_tx_buffer0 ,contw -0387 20400383 call p_mouse_le_txbuff_copy -0388 d8a01900 arg mem_le_tx_buffer1 ,contw -0389 20400383 call p_mouse_le_txbuff_copy -038a d8a01a00 arg mem_le_tx_buffer2 ,contw -038b 20400383 call p_mouse_le_txbuff_copy -038c d8a01b00 arg mem_le_tx_buffer3 ,contw -038d 20200383 branch p_mouse_le_txbuff_copy +0381 d8c0480c arg mem_le_tx_buffer0_omemalloc ,contr +0382 d8a01800 arg mem_le_tx_buffer0 ,contw +0383 2040037f call p_mouse_le_txbuff_copy +0384 d8a01900 arg mem_le_tx_buffer1 ,contw +0385 2040037f call p_mouse_le_txbuff_copy +0386 d8a01a00 arg mem_le_tx_buffer2 ,contw +0387 2040037f call p_mouse_le_txbuff_copy +0388 d8a01b00 arg mem_le_tx_buffer3 ,contw +0389 2020037f branch p_mouse_le_txbuff_copy p_mouse_le: -038e 20405892 call le_fifo_check_nearly_full -038f 247a0000 nrtn blank -0390 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag -0391 c07f8395 beq 0xff ,p_mouse_le_next -0392 6800c6c5 fetch 1 ,mem_le_connect_status_flag -0393 1fe17e03 and pdata ,0x03 ,pdata -0394 c1818000 rtnne 0x03 +038a 20405892 call le_fifo_check_nearly_full +038b 247a0000 nrtn blank +038c 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag +038d c07f8391 beq 0xff ,p_mouse_le_next +038e 6800c6c5 fetch 1 ,mem_le_connect_status_flag +038f 1fe17e03 and pdata ,0x03 ,pdata +0390 c1818000 rtnne 0x03 p_mouse_le_next: -0395 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag -0396 205a03eb call p_mouse_clear_sensor_data ,blank -0397 680246d3 fetch mouse_flag_len ,mem_mouse_flag -0398 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet -0399 20403f97 call mouse_motion -039a 24740000 nrtn user -039b 204003a2 call p_mouse_le_current_mult_update -039c 204003a5 call p_mouse_data_xy_release -039d 204003c1 call p_mouse_wheel_trigger +0391 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag +0392 205a03e9 call p_mouse_clear_sensor_data ,blank +0393 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0394 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +0395 20403f97 call mouse_motion +0396 24740000 nrtn user +0397 2040039e call p_mouse_le_current_mult_update +0398 204003a1 call p_mouse_data_xy_release +0399 204003bf call p_mouse_wheel_trigger p_mouse_data_push: -039e da20469a arg mem_mouse_key ,rega -039f 20407e3d call queue_push -03a0 205403b0 call p_mouse_queue_increase ,user -03a1 20600000 rtn +039a da20469a arg mem_mouse_key ,rega +039b 20407e3d call queue_push +039c 205403ae call p_mouse_queue_increase ,user +039d 20600000 rtn p_mouse_le_current_mult_update: -03a2 70417208 jam 8 ,mem_lpm_mult -03a3 704b681e jam 30 ,mem_mouse_le_current_mult_timer -03a4 20600000 rtn +039e 70417208 jam 8 ,mem_lpm_mult +039f 704b681e jam 30 ,mem_mouse_le_current_mult_timer +03a0 20600000 rtn p_mouse_data_xy_release: -03a5 6800cb67 fetch 1 ,mem_mouse_long_mult_flag -03a6 c1808000 rtnne 1 -03a7 58000000 setarg 0 -03a8 6000cb67 store 1 ,mem_mouse_long_mult_flag -03a9 6002469b store 4 ,mem_mouse_x -03aa 202002d8 branch p_mouse_init_sensor_reset +03a1 6800c6f5 fetch 1 ,mem_config_function_enable +03a2 c3838000 rtnbit1 enable_sensor_motion_pin +03a3 6800cb67 fetch 1 ,mem_mouse_long_mult_flag +03a4 c1808000 rtnne 1 +03a5 58000000 setarg 0 +03a6 6000cb67 store 1 ,mem_mouse_long_mult_flag +03a7 6002469b store 4 ,mem_mouse_x +03a8 202002d4 branch p_mouse_init_sensor_reset p_mouse_data_init: -03ab 7047a207 jam 7 ,mem_mouse_data_queue -03ac 7047a304 jam 4 ,mem_mouse_data_queue + 1 -03ad 580047a2 setarg mem_mouse_data_queue -03ae 60014218 store 2 ,mem_queue_ptr -03af 20207e38 branch queue_init +03a9 7047a207 jam 7 ,mem_mouse_data_queue +03aa 7047a304 jam 4 ,mem_mouse_data_queue + 1 +03ab 580047a2 setarg mem_mouse_data_queue +03ac 60014218 store 2 ,mem_queue_ptr +03ad 20207e38 branch queue_init p_mouse_queue_increase: -03b0 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -03b1 1fe0fe01 increase 1 ,pdata -03b2 6000c7c3 store 1 ,mem_mouse_data_queue_num -03b3 20600000 rtn +03ae 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +03af 1fe0fe01 increase 1 ,pdata +03b0 6000c7c3 store 1 ,mem_mouse_data_queue_num +03b1 20600000 rtn p_mouse_data_pull: -03b4 da20469a arg mem_mouse_key ,rega -03b5 20407e54 call queue_pop -03b6 203403b8 branch p_mouse_fill_data_le ,user -03b7 20600000 rtn +03b2 da20469a arg mem_mouse_key ,rega +03b3 20407e54 call queue_pop +03b4 203403b6 branch p_mouse_fill_data_le ,user +03b5 20600000 rtn p_mouse_fill_data_le: -03b8 20405652 call le_clear_md -03b9 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -03ba 1fe67c01 sub pdata ,1 ,null -03bb 24415650 ncall le_set_md ,positive -03bc 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -03bd 207a0000 rtn blank -03be 1fe0ffff increase -1 ,pdata -03bf 6000c7c3 store 1 ,mem_mouse_data_queue_num -03c0 20203f90 branch mouse_fill_data_le +03b6 20405652 call le_clear_md +03b7 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +03b8 1fe67c01 sub pdata ,1 ,null +03b9 24415650 ncall le_set_md ,positive +03ba 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +03bb 207a0000 rtn blank +03bc 1fe0ffff increase -1 ,pdata +03bd 6000c7c3 store 1 ,mem_mouse_data_queue_num +03be 20203f90 branch mouse_fill_data_le p_mouse_wheel_trigger: -03c1 6801469f fetch 2 ,mem_mouse_z -03c2 207a0000 rtn blank -03c3 70480801 jam 1 ,mem_mouse_wheel_trigger -03c4 7048090a jam 10 ,mem_mouse_wheel_trigger_timer -03c5 20600000 rtn +03bf 6801469f fetch 2 ,mem_mouse_z +03c0 207a0000 rtn blank +03c1 70480801 jam 1 ,mem_mouse_wheel_trigger +03c2 7048090a jam 10 ,mem_mouse_wheel_trigger_timer +03c3 20600000 rtn p_mouse_bt: -03c6 20770000 rtn attempt -03c7 6800c1e2 fetch 1 ,mem_app_handshake_flag -03c8 207a0000 rtn blank -03c9 20405271 call l2cap_malloc_is_fifo_nearly_full -03ca 247a0000 nrtn blank -03cb 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag -03cc 205a03eb call p_mouse_clear_sensor_data ,blank -03cd 680246d3 fetch mouse_flag_len ,mem_mouse_flag -03ce c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data -03cf c284bf8a bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data -03d0 20403f97 call mouse_motion -03d1 24740000 nrtn user -03d2 204003a2 call p_mouse_le_current_mult_update -03d3 204003a5 call p_mouse_data_xy_release -03d4 204003c1 call p_mouse_wheel_trigger -03d5 6800cb05 fetch 1 ,mem_mouse_bt_boot_mode -03d6 c00083da beq 1 ,p_mouse_send_data_boot_mode -03d7 6800cb0c fetch 1 ,mem_mouse_bt_send_first_package_flag -03d8 207a0000 rtn blank -03d9 20203f81 branch mouse_send_data +03c4 20770000 rtn attempt +03c5 6800c1e2 fetch 1 ,mem_app_handshake_flag +03c6 207a0000 rtn blank +03c7 20405271 call l2cap_malloc_is_fifo_nearly_full +03c8 247a0000 nrtn blank +03c9 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag +03ca 205a03e9 call p_mouse_clear_sensor_data ,blank +03cb 680246d3 fetch mouse_flag_len ,mem_mouse_flag +03cc c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +03cd c284bf8a bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data +03ce 20403f97 call mouse_motion +03cf 24740000 nrtn user +03d0 2040039e call p_mouse_le_current_mult_update +03d1 204003a1 call p_mouse_data_xy_release +03d2 204003bf call p_mouse_wheel_trigger +03d3 6800cb05 fetch 1 ,mem_mouse_bt_boot_mode +03d4 c00083d8 beq 1 ,p_mouse_send_data_boot_mode +03d5 6800cb0c fetch 1 ,mem_mouse_bt_send_first_package_flag +03d6 207a0000 rtn blank +03d7 20203f81 branch mouse_send_data p_mouse_send_data_boot_mode: -03da 6800c69a fetch 1 ,mem_mouse_key -03db 6000cb06 store 1 ,mem_mouse_bt_boot_data -03dc 6800c69b fetch 1 ,mem_mouse_x +03d8 6800c69a fetch 1 ,mem_mouse_key +03d9 6000cb06 store 1 ,mem_mouse_bt_boot_data +03da 6800c69b fetch 1 ,mem_mouse_x +03db e0a08000 istore 1 ,contw +03dc 6800c69d fetch 1 ,mem_mouse_y 03dd e0a08000 istore 1 ,contw -03de 6800c69d fetch 1 ,mem_mouse_y -03df e0a08000 istore 1 ,contw -03e0 6801469f fetch 2 ,mem_mouse_z -03e1 e0a10000 istore 2 ,contw -03e2 da200007 arg 7 ,rega -03e3 20404d63 call hid_malloc_tx_buff -03e4 6801424e fetch 2 ,mem_hid_int_remote_cid +03de 6801469f fetch 2 ,mem_mouse_z +03df e0a10000 istore 2 ,contw +03e0 da200007 arg 7 ,rega +03e1 20404d63 call hid_malloc_tx_buff +03e2 6801424e fetch 2 ,mem_hid_int_remote_cid +03e3 e0a10000 istore 2 ,contw +03e4 580002a1 setarg 0x02a1 03e5 e0a10000 istore 2 ,contw -03e6 580002a1 setarg 0x02a1 -03e7 e0a10000 istore 2 ,contw -03e8 6802cb06 fetch 5 ,mem_mouse_bt_boot_data -03e9 e0a28000 istore 5 ,contw -03ea 20600000 rtn +03e6 6802cb06 fetch 5 ,mem_mouse_bt_boot_data +03e7 e0a28000 istore 5 ,contw +03e8 20600000 rtn p_mouse_clear_sensor_data: -03eb 70479e01 jam 1 ,mem_mouse_clear_sensor_data_flag -03ec 20405814 call le_set_config_more_data -03ed 202002d8 branch p_mouse_init_sensor_reset +03e9 70479e01 jam 1 ,mem_mouse_clear_sensor_data_flag +03ea 20405814 call le_set_config_more_data +03eb 202002d4 branch p_mouse_init_sensor_reset p_mouse_idle: -03ee 20407e34 call ui_check_paring_button -03ef 20400439 call p_mouse_dpi_check -03f0 202003f1 branch p_mouse_wheel_check +03ec 20407e34 call ui_check_paring_button +03ed 20400437 call p_mouse_dpi_check +03ee 202003ef branch p_mouse_wheel_check p_mouse_wheel_check: -03f1 204003f4 call p_mouse_t_wheel_scan -03f2 20403f36 call mouse_wheel_scan -03f3 20203ee3 branch mouse_wheel_check + 3 +03ef 204003f2 call p_mouse_t_wheel_scan +03f0 20403f36 call mouse_wheel_scan +03f1 20203ee3 branch mouse_wheel_check + 3 p_mouse_t_wheel_scan: -03f4 6810807a hfetch 1 ,core_gpio_pu2 -03f5 79207e07 set1 7 ,pdata -03f6 6010807a hstore 1 ,core_gpio_pu2 -03f7 68108078 hfetch 1 ,core_gpio_pu0 -03f8 79207e06 set1 6 ,pdata -03f9 60108078 hstore 1 ,core_gpio_pu0 -03fa da200000 arg 0 ,rega -03fb 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio -03fc 2040681d call gpio_get_bit -03fd 7920a200 setflag true ,0 ,rega -03fe 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio -03ff 2040681d call gpio_get_bit -0400 7920a201 setflag true ,1 ,rega -0401 1a227e00 copy rega ,pdata -0402 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel -0403 c0008408 beq 0x01 ,p_mouse_t_wheel_scan_judge1 -0404 c001040c beq 0x02 ,p_mouse_t_wheel_scan_judge2 -0405 6800c6b9 fetch 1 ,mem_wheel_tog -0406 c2838418 bbit1 7 ,p_mouse_t_wheel_scan_judge3 -0407 20600000 rtn +03f2 6810807a hfetch 1 ,core_gpio_pu2 +03f3 79207e07 set1 7 ,pdata +03f4 6010807a hstore 1 ,core_gpio_pu2 +03f5 68108078 hfetch 1 ,core_gpio_pu0 +03f6 79207e06 set1 6 ,pdata +03f7 60108078 hstore 1 ,core_gpio_pu0 +03f8 da200000 arg 0 ,rega +03f9 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +03fa 2040681d call gpio_get_bit +03fb 7920a200 setflag true ,0 ,rega +03fc 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +03fd 2040681d call gpio_get_bit +03fe 7920a201 setflag true ,1 ,rega +03ff 1a227e00 copy rega ,pdata +0400 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel +0401 c0008406 beq 0x01 ,p_mouse_t_wheel_scan_judge1 +0402 c001040a beq 0x02 ,p_mouse_t_wheel_scan_judge2 +0403 6800c6b9 fetch 1 ,mem_wheel_tog +0404 c2838416 bbit1 7 ,p_mouse_t_wheel_scan_judge3 +0405 20600000 rtn p_mouse_t_wheel_scan_judge1: -0408 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel -0409 c0000410 beq 0 ,p_mouse_t_wheel_scan_judge11 -040a c0018412 beq 3 ,p_mouse_t_wheel_scan_judge12 -040b 20600000 rtn +0406 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +0407 c000040e beq 0 ,p_mouse_t_wheel_scan_judge11 +0408 c0018410 beq 3 ,p_mouse_t_wheel_scan_judge12 +0409 20600000 rtn p_mouse_t_wheel_scan_judge2: -040c 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel -040d c0000414 beq 0 ,p_mouse_t_wheel_scan_judge21 -040e c0018416 beq 3 ,p_mouse_t_wheel_scan_judge22 -040f 20600000 rtn +040a 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +040b c0000412 beq 0 ,p_mouse_t_wheel_scan_judge21 +040c c0018414 beq 3 ,p_mouse_t_wheel_scan_judge22 +040d 20600000 rtn p_mouse_t_wheel_scan_judge11: -0410 7046b982 jam 0x82 ,mem_wheel_tog -0411 20600000 rtn +040e 7046b982 jam 0x82 ,mem_wheel_tog +040f 20600000 rtn p_mouse_t_wheel_scan_judge12: -0412 7046b981 jam 0x81 ,mem_wheel_tog -0413 20600000 rtn +0410 7046b981 jam 0x81 ,mem_wheel_tog +0411 20600000 rtn p_mouse_t_wheel_scan_judge21: -0414 7046b980 jam 0x80 ,mem_wheel_tog -0415 20600000 rtn +0412 7046b980 jam 0x80 ,mem_wheel_tog +0413 20600000 rtn p_mouse_t_wheel_scan_judge22: -0416 7046b983 jam 0x83 ,mem_wheel_tog -0417 20600000 rtn +0414 7046b983 jam 0x83 ,mem_wheel_tog +0415 20600000 rtn p_mouse_t_wheel_scan_judge3: -0418 6800c6b9 fetch 1 ,mem_wheel_tog -0419 793ffe07 set0 7 ,pdata -041a 6000c6b9 store 1 ,mem_wheel_tog -041b c0000420 beq 0 ,p_mouse_t_wheel_scan_judge30 -041c c0008423 beq 1 ,p_mouse_t_wheel_scan_judge31 -041d c0010426 beq 2 ,p_mouse_t_wheel_scan_judge32 -041e c0018429 beq 3 ,p_mouse_t_wheel_scan_judge33 -041f 20600000 rtn +0416 6800c6b9 fetch 1 ,mem_wheel_tog +0417 793ffe07 set0 7 ,pdata +0418 6000c6b9 store 1 ,mem_wheel_tog +0419 c000041e beq 0 ,p_mouse_t_wheel_scan_judge30 +041a c0008421 beq 1 ,p_mouse_t_wheel_scan_judge31 +041b c0010424 beq 2 ,p_mouse_t_wheel_scan_judge32 +041c c0018427 beq 3 ,p_mouse_t_wheel_scan_judge33 +041d 20600000 rtn p_mouse_t_wheel_scan_judge30: -0420 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -0421 c001842c beq 3 ,p_mouse_wheel_t_forward -0422 20600000 rtn +041e 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +041f c001842a beq 3 ,p_mouse_wheel_t_forward +0420 20600000 rtn p_mouse_t_wheel_scan_judge31: -0423 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -0424 c000042c beq 0 ,p_mouse_wheel_t_forward -0425 20600000 rtn +0421 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +0422 c000042a beq 0 ,p_mouse_wheel_t_forward +0423 20600000 rtn p_mouse_t_wheel_scan_judge32: -0426 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -0427 c0018431 beq 3 ,p_mouse_wheel_t_back -0428 20600000 rtn +0424 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +0425 c001842f beq 3 ,p_mouse_wheel_t_back +0426 20600000 rtn p_mouse_t_wheel_scan_judge33: -0429 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -042a c0000431 beq 0 ,p_mouse_wheel_t_back -042b 20600000 rtn +0427 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +0428 c000042f beq 0 ,p_mouse_wheel_t_back +0429 20600000 rtn p_mouse_wheel_t_forward: -042c 7046bc00 jam 0 ,mem_mouse_tz_data_count1 -042d 6800c6ba fetch 1 ,mem_mouse_tz_data -042e 1fe0fe01 increase 1 ,pdata -042f 6000c6ba store 1 ,mem_mouse_tz_data -0430 20600000 rtn +042a 7046bc00 jam 0 ,mem_mouse_tz_data_count1 +042b 6800c6ba fetch 1 ,mem_mouse_tz_data +042c 1fe0fe01 increase 1 ,pdata +042d 6000c6ba store 1 ,mem_mouse_tz_data +042e 20600000 rtn p_mouse_wheel_t_back: -0431 7046bb00 jam 0 ,mem_mouse_tz_data_count -0432 6800c6ba fetch 1 ,mem_mouse_tz_data -0433 1fe0ffff increase -1 ,pdata -0434 6000c6ba store 1 ,mem_mouse_tz_data -0435 20600000 rtn +042f 7046bb00 jam 0 ,mem_mouse_tz_data_count +0430 6800c6ba fetch 1 ,mem_mouse_tz_data +0431 1fe0ffff increase -1 ,pdata +0432 6000c6ba store 1 ,mem_mouse_tz_data +0433 20600000 rtn p_mouse_comm_gpio_config: -0436 6808cbb8 fetcht 1 ,mem_mouse_comm_gpio -0437 c17f8000 rtneq 0xff -0438 202005dc branch p_gpio_set_input_pu +0434 6808cbb8 fetcht 1 ,mem_mouse_comm_gpio +0435 c17f8000 rtneq 0xff +0436 202005da branch p_gpio_set_input_pu p_mouse_dpi_check: -0439 20400436 call p_mouse_comm_gpio_config +0437 20400434 call p_mouse_comm_gpio_config +0438 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +0439 204005df call p_gpio_set_input_pd 043a 6808c6e7 fetcht 1 ,mem_dpi_button_gpio -043b 204005e1 call p_gpio_set_input_pd -043c 6808c6e7 fetcht 1 ,mem_dpi_button_gpio -043d 2040681d call gpio_get_bit -043e 2020844b branch p_mouse_dpi_up ,true -043f 204005dc call p_gpio_set_input_pu +043b 2040681d call gpio_get_bit +043c 20208449 branch p_mouse_dpi_up ,true +043d 204005da call p_gpio_set_input_pu p_mouse_dpi_down: -0440 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state -0441 c1000000 rtneq dpi_button_state_down -0442 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state -0443 6800c77a fetch 1 ,mem_mouse_dpi -0444 1fe0fe01 increase 1 ,pdata -0445 1fe17e03 and pdata ,0x03 ,pdata -0446 6000c77a store 1 ,mem_mouse_dpi -0447 1fe0fe02 increase 2 ,pdata -0448 6000cb2e store 1 ,mem_mouse_multi_led_blink_count -0449 2040076b call p_mouse_dpi_multi_led_blink -044a 20203d7e branch mouse_seting_dpi +043e 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state +043f c1000000 rtneq dpi_button_state_down +0440 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state +0441 6800c77a fetch 1 ,mem_mouse_dpi +0442 1fe0fe01 increase 1 ,pdata +0443 1fe17e03 and pdata ,0x03 ,pdata +0444 6000c77a store 1 ,mem_mouse_dpi +0445 1fe0fe02 increase 2 ,pdata +0446 6000cb2e store 1 ,mem_mouse_multi_led_blink_count +0447 20400769 call p_mouse_dpi_multi_led_blink +0448 20203d7e branch mouse_seting_dpi p_mouse_dpi_up: -044b 204005dc call p_gpio_set_input_pu -044c 20203d62 branch mouse_dpi_up +0449 204005da call p_gpio_set_input_pu +044a 20203d62 branch mouse_dpi_up p_mouse_priority_bb_event: -044d 1a627e00 copy regc ,pdata -044e c00a045e beq bt_evt_le_connected ,p_mouse_le_bb_event_connected -044f c00a8460 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected -0450 c0148463 beq bt_evt_le_enc_info ,p_mouse_le_enc_info -0451 c0190465 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt -0452 c0200467 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved -0453 c0020469 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed -0454 c0098469 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout -0455 c00cb3df beq bt_evt_switch_not_accept ,app_bt_role_switch -0456 c010846d beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept -0457 c000846f beq bt_evt_bb_connected ,p_mouse_bb_event_connected -0458 c0010473 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected -0459 c0158476 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check -045a c01c8478 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete -045b c01d047d beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail -045c c01e0483 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success -045d 2020417d branch mouse_priority_bb_event + 1 +044b 1a627e00 copy regc ,pdata +044c c00a045c beq bt_evt_le_connected ,p_mouse_le_bb_event_connected +044d c00a845e beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected +044e c0148461 beq bt_evt_le_enc_info ,p_mouse_le_enc_info +044f c0190463 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt +0450 c0200465 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved +0451 c0020467 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed +0452 c0098467 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout +0453 c00cb3df beq bt_evt_switch_not_accept ,app_bt_role_switch +0454 c010846b beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept +0455 c000846d beq bt_evt_bb_connected ,p_mouse_bb_event_connected +0456 c0010471 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected +0457 c0158474 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check +0458 c01c8476 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete +0459 c01d047b beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail +045a c01e0481 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success +045b 2020417d branch mouse_priority_bb_event + 1 p_mouse_le_bb_event_connected: -045e 7011c5d0 jam zcode_d0 ,mem_zcode_temp_param0 -045f 202007cd branch p_zcode_entrance +045c 7011c5d0 jam zcode_d0 ,mem_zcode_temp_param0 +045d 202007cb branch p_zcode_entrance p_mouse_le_bb_disconnected: -0460 2040048b call p_mouse_sensor_powerdown_check -0461 7011c5a2 jam zcode_a2 ,mem_zcode_temp_param0 -0462 202007cd branch p_zcode_entrance +045e 20400489 call p_mouse_sensor_powerdown_check +045f 7011c5a2 jam zcode_a2 ,mem_zcode_temp_param0 +0460 202007cb branch p_zcode_entrance p_mouse_le_enc_info: p_app_updata_le_param: -0463 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp -0464 20207d8f branch ui_ipc_send_cmd +0461 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +0462 20207d8f branch ui_ipc_send_cmd p_mouse_le_ll_start_encryt: -0465 7011c5b3 jam zcode_b3 ,mem_zcode_temp_param0 -0466 202007cd branch p_zcode_entrance +0463 7011c5b3 jam zcode_b3 ,mem_zcode_temp_param0 +0464 202007cb branch p_zcode_entrance p_mouse_le_conn_param_update_rsp_recieved: -0467 7011c5a1 jam zcode_a1 ,mem_zcode_temp_param0 -0468 202007cd branch p_zcode_entrance +0465 7011c5a1 jam zcode_a1 ,mem_zcode_temp_param0 +0466 202007cb branch p_zcode_entrance p_mouse_bb_event_reconn_timeout: p_mouse_bb_event_reconn_failed: -0469 7011c5a3 jam zcode_a3 ,mem_zcode_temp_param0 -046a 202007cd branch p_zcode_entrance +0467 7011c5a3 jam zcode_a3 ,mem_zcode_temp_param0 +0468 202007cb branch p_zcode_entrance p_mouse_irtual_cable_unplug: -046b 7011c571 jam zcode_71 ,mem_zcode_temp_param0 -046c 202007cd branch p_zcode_entrance +0469 7011c571 jam zcode_71 ,mem_zcode_temp_param0 +046a 202007cb branch p_zcode_entrance p_mouse_sniff_not_accept: -046d 7011c5b1 jam zcode_b1 ,mem_zcode_temp_param0 -046e 202007cd branch p_zcode_entrance +046b 7011c5b1 jam zcode_b1 ,mem_zcode_temp_param0 +046c 202007cb branch p_zcode_entrance p_mouse_bb_event_connected: -046f 704bb900 jam 0 ,mem_mouse_connected_state -0470 70480b00 jam 0 ,mem_mouse_send_switch_req_timer -0471 204002d8 call p_mouse_init_sensor_reset -0472 202042ca branch mouse_stop_discovery +046d 704bb900 jam 0 ,mem_mouse_connected_state +046e 70480b00 jam 0 ,mem_mouse_send_switch_req_timer +046f 204002d4 call p_mouse_init_sensor_reset +0470 202042ca branch mouse_stop_discovery p_mouse_bb_event_disconnected: -0473 2040048b call p_mouse_sensor_powerdown_check -0474 7011c5b4 jam zcode_b4 ,mem_zcode_temp_param0 -0475 202007cd branch p_zcode_entrance +0471 20400489 call p_mouse_sensor_powerdown_check +0472 7011c5b4 jam zcode_b4 ,mem_zcode_temp_param0 +0473 202007cb branch p_zcode_entrance p_mouse_enter_sniff_check: -0476 7011c5b2 jam zcode_b2 ,mem_zcode_temp_param0 -0477 202007cd branch p_zcode_entrance +0474 7011c5b2 jam zcode_b2 ,mem_zcode_temp_param0 +0475 202007cb branch p_zcode_entrance p_mouse_24g_pairing_complete: -0478 20400759 call p_mouse_discovey_led_blink_off -0479 704bb900 jam 0 ,mem_mouse_connected_state -047a 204002d8 call p_mouse_init_sensor_reset -047b 7011c592 jam zcode_92 ,mem_zcode_temp_param0 -047c 202007cd branch p_zcode_entrance +0476 20400757 call p_mouse_discovey_led_blink_off +0477 704bb900 jam 0 ,mem_mouse_connected_state +0478 204002d4 call p_mouse_init_sensor_reset +0479 7011c592 jam zcode_92 ,mem_zcode_temp_param0 +047a 202007cb branch p_zcode_entrance p_mouse_24g_attempt_fail: -047d 704bb901 jam 1 ,mem_mouse_connected_state -047e 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count -047f 2040076b call p_mouse_dpi_multi_led_blink -0480 2040048b call p_mouse_sensor_powerdown_check -0481 7011c5a0 jam zcode_a0 ,mem_zcode_temp_param0 -0482 202007cd branch p_zcode_entrance +047b 704bb901 jam 1 ,mem_mouse_connected_state +047c 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count +047d 20400769 call p_mouse_dpi_multi_led_blink +047e 20400489 call p_mouse_sensor_powerdown_check +047f 7011c5a0 jam zcode_a0 ,mem_zcode_temp_param0 +0480 202007cb branch p_zcode_entrance p_mouse_24g_attempt_success: -0483 2040075d call p_mouse_multi_led_blink_off -0484 2040076e call p_mouse_mode_24g_device_multi_led_on -0485 704bb900 jam 0 ,mem_mouse_connected_state -0486 204002d8 call p_mouse_init_sensor_reset +0481 2040075b call p_mouse_multi_led_blink_off +0482 2040076c call p_mouse_mode_24g_device_multi_led_on +0483 704bb900 jam 0 ,mem_mouse_connected_state +0484 204002d4 call p_mouse_init_sensor_reset p_mouse_24g_no_data_timer_init: -0487 20203f8d branch mouse_no_data_timer_init +0485 20203f8d branch mouse_no_data_timer_init p_mouse_before_hibernate: -0488 2040048b call p_mouse_sensor_powerdown_check -0489 7011c5a4 jam zcode_a4 ,mem_zcode_temp_param0 -048a 202007cd branch p_zcode_entrance +0486 20400489 call p_mouse_sensor_powerdown_check +0487 7011c5a4 jam zcode_a4 ,mem_zcode_temp_param0 +0488 202007cb branch p_zcode_entrance p_mouse_sensor_powerdown_check: -048b 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag -048c 207a0000 rtn blank -048d 704b0000 jam 0 ,mem_mouse_init_sensor_reset_flag +0489 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag +048a 207a0000 rtn blank +048b 704b0000 jam 0 ,mem_mouse_init_sensor_reset_flag p_mouse_sensor_powerdown: -048e 204002d0 call p_mouse_init_sunt -048f 58000806 setarg 0x0806 -0490 20206413 branch twspi_write +048c 204002cc call p_mouse_init_sunt +048d 58000806 setarg 0x0806 +048e 20206413 branch twspi_write p_mouse_bb_event_timer: -0491 2040050d call p_mouse_adc_read -0492 20400545 call p_mouse_low_voltage_led_timer -0493 204004bf call p_mouse_wheel_trigger_timer -0494 204004e3 call p_mouse_select_device_by_button -0495 20404234 call mouse_check_discovery_timeout_timer -0496 2040423a call mouse_check_no_data_timeout_timer -0497 204004cb call p_mouse_g24_stop_mode_timeout_timer -0498 204004ab call p_mouse_check_direct_timeout_timer -0499 204004a8 call p_mouse_le_enable_att_list_timer -049a 204004b1 call p_mouse_le_current_mult_update_timer -049b 204004b7 call p_le_send_smp_security_request_timer -049c 204004a0 call p_mouse_send_switch_req_timer -049d 20404231 call mouse_check_hid_handshake_timer -049e 204004a3 call p_mouse_bt_check_sniff_req_timeout_timer -049f 20200731 branch p_mouse_multi_led_blink_timer +048f 2040050b call p_mouse_adc_read +0490 20400543 call p_mouse_low_voltage_led_timer +0491 204004bd call p_mouse_wheel_trigger_timer +0492 204004e1 call p_mouse_select_device_by_button +0493 20404234 call mouse_check_discovery_timeout_timer +0494 2040423a call mouse_check_no_data_timeout_timer +0495 204004c9 call p_mouse_g24_stop_mode_timeout_timer +0496 204004a9 call p_mouse_check_direct_timeout_timer +0497 204004a6 call p_mouse_le_enable_att_list_timer +0498 204004af call p_mouse_le_current_mult_update_timer +0499 204004b5 call p_le_send_smp_security_request_timer +049a 2040049e call p_mouse_send_switch_req_timer +049b 20404231 call mouse_check_hid_handshake_timer +049c 204004a1 call p_mouse_bt_check_sniff_req_timeout_timer +049d 2020072f branch p_mouse_multi_led_blink_timer p_mouse_send_switch_req_timer: -04a0 da60480b arg mem_mouse_send_switch_req_timer ,regc -04a1 da40637a arg host_create_conn_resend ,regb -04a2 2020336d branch timer_single_step +049e da60480b arg mem_mouse_send_switch_req_timer ,regc +049f da40637a arg host_create_conn_resend ,regb +04a0 2020336d branch timer_single_step p_mouse_bt_check_sniff_req_timeout_timer: -04a3 da604b0b arg mem_mouse_bt_send_first_package_timer ,regc -04a4 da4004a6 arg p_mouse_bt_send_first_package ,regb -04a5 2020336d branch timer_single_step +04a1 da604b0b arg mem_mouse_bt_send_first_package_timer ,regc +04a2 da4004a4 arg p_mouse_bt_send_first_package ,regb +04a3 2020336d branch timer_single_step p_mouse_bt_send_first_package: -04a6 704b0c01 jam 1 ,mem_mouse_bt_send_first_package_flag -04a7 20600000 rtn +04a4 704b0c01 jam 1 ,mem_mouse_bt_send_first_package_flag +04a5 20600000 rtn p_mouse_le_enable_att_list_timer: -04a8 da6046c6 arg mem_le_start_encrypt_timer ,regc -04a9 da403d60 arg mouse_le_write_enable ,regb -04aa 2020336d branch timer_single_step +04a6 da6046c6 arg mem_le_start_encrypt_timer ,regc +04a7 da403d60 arg mouse_le_write_enable ,regb +04a8 2020336d branch timer_single_step p_mouse_check_direct_timeout_timer: -04ab da6046ae arg mem_mouse_direct_timer ,regc -04ac da4004ae arg p_mouse_check_direct_timeout ,regb -04ad 20203374 branch timer_single_step_2b +04a9 da6046ae arg mem_mouse_direct_timer ,regc +04aa da4004ac arg p_mouse_check_direct_timeout ,regb +04ab 20203374 branch timer_single_step_2b p_mouse_check_direct_timeout: -04ae 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -04af 247a0000 nrtn blank -04b0 20204266 branch mouse_check_direct_timeout +04ac 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +04ad 247a0000 nrtn blank +04ae 20204266 branch mouse_check_direct_timeout p_mouse_le_current_mult_update_timer: -04b1 da604b68 arg mem_mouse_le_current_mult_timer ,regc -04b2 da4004b4 arg p_mouse_le_current_mult_reinit ,regb -04b3 2020336d branch timer_single_step +04af da604b68 arg mem_mouse_le_current_mult_timer ,regc +04b0 da4004b2 arg p_mouse_le_current_mult_reinit ,regb +04b1 2020336d branch timer_single_step p_mouse_le_current_mult_reinit: -04b4 6800c7c7 fetch 1 ,mem_lpm_mult_init -04b5 6000c172 store 1 ,mem_lpm_mult -04b6 20600000 rtn +04b2 6800c7c7 fetch 1 ,mem_lpm_mult_init +04b3 6000c172 store 1 ,mem_lpm_mult +04b4 20600000 rtn p_le_send_smp_security_request_timer: -04b7 6800cb6a fetch 1 ,mem_mouse_le_bb_connected_flag -04b8 207a0000 rtn blank -04b9 da604b6b arg mem_mouse_send_secutiry_request_timer ,regc -04ba da4004bc arg p_le_pairing_sm_start_check ,regb -04bb 2020336d branch timer_single_step +04b5 6800cb6a fetch 1 ,mem_mouse_le_bb_connected_flag +04b6 207a0000 rtn blank +04b7 da604b6b arg mem_mouse_send_secutiry_request_timer ,regc +04b8 da4004ba arg p_le_pairing_sm_start_check ,regb +04b9 2020336d branch timer_single_step p_le_pairing_sm_start_check: -04bc 6800cb6c fetch 1 ,mem_le_send_security_request_flag -04bd 247a0000 nrtn blank -04be 20205bf5 branch le_pairing_sm_start +04ba 6800cb6c fetch 1 ,mem_le_send_security_request_flag +04bb 247a0000 nrtn blank +04bc 20205bf5 branch le_pairing_sm_start p_mouse_wheel_trigger_timer: -04bf da604809 arg mem_mouse_wheel_trigger_timer ,regc -04c0 da4004c2 arg p_mouse_wheel_trigger_disable ,regb -04c1 2020336d branch timer_single_step +04bd da604809 arg mem_mouse_wheel_trigger_timer ,regc +04be da4004c0 arg p_mouse_wheel_trigger_disable ,regb +04bf 2020336d branch timer_single_step p_mouse_wheel_trigger_disable: -04c2 70480800 jam 0 ,mem_mouse_wheel_trigger -04c3 20600000 rtn +04c0 70480800 jam 0 ,mem_mouse_wheel_trigger +04c1 20600000 rtn p_mouse_g24_long_sleep_param_update_timer: -04c4 da604b69 arg mem_24g_long_sleep_param_update_timer ,regc -04c5 da4004c7 arg p_mouse_g24_long_sleep_normal_param ,regb -04c6 2020336d branch timer_single_step +04c2 da604b69 arg mem_24g_long_sleep_param_update_timer ,regc +04c3 da4004c5 arg p_mouse_g24_long_sleep_normal_param ,regb +04c4 2020336d branch timer_single_step p_mouse_g24_long_sleep_normal_param: -04c7 58124f80 setarg g24_long_sleep_step3 -04c8 6001cc72 store 3 ,mem_24g_enter_hibernate +04c5 58124f80 setarg g24_long_sleep_step3 +04c6 6001cc72 store 3 ,mem_24g_enter_hibernate p_mouse_long_mult_flag_enable: -04c9 704b6701 jam 1 ,mem_mouse_long_mult_flag -04ca 20600000 rtn +04c7 704b6701 jam 1 ,mem_mouse_long_mult_flag +04c8 20600000 rtn p_mouse_g24_stop_mode_timeout_timer: -04cb da604d8f arg mem_24g_stop_g24_mode_timeout ,regc -04cc da4004ce arg p_mouse_g24_stop_mode_timeout ,regb -04cd 20203374 branch timer_single_step_2b +04c9 da604d8f arg mem_24g_stop_g24_mode_timeout ,regc +04ca da4004cc arg p_mouse_g24_stop_mode_timeout ,regb +04cb 20203374 branch timer_single_step_2b p_mouse_g24_stop_mode_timeout: -04ce 704d8e01 jam 1 ,mem_24g_stop_g24_mode -04cf 20600000 rtn +04cc 704d8e01 jam 1 ,mem_24g_stop_g24_mode +04cd 20600000 rtn p_mouse_bt_discovery_timer: -04d0 da604b47 arg mem_select_ui_button_count ,regc -04d1 da4004d3 arg p_mouse_long_button_bt_discovery ,regb -04d2 2020336d branch timer_single_step +04ce da604b47 arg mem_select_ui_button_count ,regc +04cf da4004d1 arg p_mouse_long_button_bt_discovery ,regb +04d0 2020336d branch timer_single_step p_mouse_long_button_bt_discovery: -04d3 704bba01 jam on ,mem_select_device_button_statue_bt_discovery -04d4 6808c720 fetcht 1 ,mem_device_flag -04d5 6800c703 fetch 1 ,mem_24g_device_number -04d6 98467c00 isub temp ,null -04d7 20628000 rtn zero -04d8 68014682 fetch 2 ,mem_ui_state_map -04d9 2feffe0b isolate1 ui_state_ble_adv ,pdata -04da 2040c2d4 call mouse_stop_le_adv ,true -04db 68014682 fetch 2 ,mem_ui_state_map -04dc 2feffe07 isolate1 ui_state_bt_reconnect ,pdata -04dd 2040c392 call mouse_cancel_reconnect ,true -04de 202043b8 branch mouse_long_button_bt_discovry +04d1 704bba01 jam on ,mem_select_device_button_statue_bt_discovery +04d2 6808c720 fetcht 1 ,mem_device_flag +04d3 6800c703 fetch 1 ,mem_24g_device_number +04d4 98467c00 isub temp ,null +04d5 20628000 rtn zero +04d6 68014682 fetch 2 ,mem_ui_state_map +04d7 2feffe0b isolate1 ui_state_ble_adv ,pdata +04d8 2040c2d4 call mouse_stop_le_adv ,true +04d9 68014682 fetch 2 ,mem_ui_state_map +04da 2feffe07 isolate1 ui_state_bt_reconnect ,pdata +04db 2040c392 call mouse_cancel_reconnect ,true +04dc 202043b8 branch mouse_long_button_bt_discovry p_mouse_get_select_state: +04dd 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +04de 204005da call p_gpio_set_input_pu 04df 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio -04e0 204005dc call p_gpio_set_input_pu -04e1 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio -04e2 2020681d branch gpio_get_bit +04e0 2020681d branch gpio_get_bit p_mouse_select_device_by_button: -04e3 204004df call p_mouse_get_select_state -04e4 242084ee nbranch p_mouse_select_device_button_up ,true +04e1 204004dd call p_mouse_get_select_state +04e2 242084ec nbranch p_mouse_select_device_button_up ,true p_mouse_select_device_button_down: -04e5 204004d0 call p_mouse_bt_discovery_timer -04e6 6800c6d9 fetch 1 ,mem_select_device_button_statue -04e7 c1000000 rtneq pb_button_state_down -04e8 7046d900 jam pb_button_state_down ,mem_select_device_button_statue -04e9 680146a8 fetch 2 ,mem_mouse_direct_timeout -04ea 600146ae store 2 ,mem_mouse_direct_timer -04eb 18000e03 force page_length_timer ,queue -04ec 680140b9 fetch 2 ,mem_page_to -04ed 20207f08 branch timer_init +04e3 204004ce call p_mouse_bt_discovery_timer +04e4 6800c6d9 fetch 1 ,mem_select_device_button_statue +04e5 c1000000 rtneq pb_button_state_down +04e6 7046d900 jam pb_button_state_down ,mem_select_device_button_statue +04e7 680146a8 fetch 2 ,mem_mouse_direct_timeout +04e8 600146ae store 2 ,mem_mouse_direct_timer +04e9 18000e03 force page_length_timer ,queue +04ea 680140b9 fetch 2 ,mem_page_to +04eb 20207f08 branch timer_init p_mouse_select_device_button_up: -04ee 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag -04ef 243a0506 nbranch p_mouse_select_button_wakeup_firstup ,blank -04f0 6800c6d9 fetch 1 ,mem_select_device_button_statue -04f1 c1008000 rtneq pb_button_state_up -04f2 6800cb47 fetch 1 ,mem_select_ui_button_count -04f3 1fe67c14 sub pdata ,20 ,null -04f4 244104f9 ncall p_mouse_ready_reconnection_by_button ,positive -04f5 6800c685 fetch 1 ,mem_ui_button_timeout -04f6 6000cb47 store 1 ,mem_select_ui_button_count -04f7 7046d901 jam pb_button_state_up ,mem_select_device_button_statue -04f8 20600000 rtn +04ec 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag +04ed 243a0504 nbranch p_mouse_select_button_wakeup_firstup ,blank +04ee 6800c6d9 fetch 1 ,mem_select_device_button_statue +04ef c1008000 rtneq pb_button_state_up +04f0 6800cb47 fetch 1 ,mem_select_ui_button_count +04f1 1fe67c14 sub pdata ,20 ,null +04f2 244104f7 ncall p_mouse_ready_reconnection_by_button ,positive +04f3 6800c685 fetch 1 ,mem_ui_button_timeout +04f4 6000cb47 store 1 ,mem_select_ui_button_count +04f5 7046d901 jam pb_button_state_up ,mem_select_device_button_statue +04f6 20600000 rtn p_mouse_ready_reconnection_by_button: -04f9 204004ff call p_mouse_switch_device_flag -04fa 7041bd00 jam 0 ,mem_link_key_exists -04fb 20400306 call p_mouse_store_flash_device_info -04fc 680246d3 fetch mouse_flag_len ,mem_mouse_flag -04fd c1048000 rtneq mouse_bt_discovery_button_long_down_flag -04fe 2020437e branch mouse_set_reconnection +04f7 204004fd call p_mouse_switch_device_flag +04f8 7041bd00 jam 0 ,mem_link_key_exists +04f9 20400302 call p_mouse_store_flash_device_info +04fa 680246d3 fetch mouse_flag_len ,mem_mouse_flag +04fb c1048000 rtneq mouse_bt_discovery_button_long_down_flag +04fc 2020437e branch mouse_set_reconnection p_mouse_switch_device_flag: -04ff 6808c720 fetcht 1 ,mem_device_flag -0500 18408401 increase 1 ,temp -0501 6800c6d2 fetch 1 ,mem_device_number -0502 98467c00 isub temp ,null -0503 244143cc ncall mouse_select_device_count_clean ,positive -0504 6008c720 storet 1 ,mem_device_flag -0505 20600000 rtn +04fd 6808c720 fetcht 1 ,mem_device_flag +04fe 18408401 increase 1 ,temp +04ff 6800c6d2 fetch 1 ,mem_device_number +0500 98467c00 isub temp ,null +0501 244143cc ncall mouse_select_device_count_clean ,positive +0502 6008c720 storet 1 ,mem_device_flag +0503 20600000 rtn p_mouse_select_button_wakeup_firstup: -0506 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0507 7046d901 jam pb_button_state_up ,mem_select_device_button_statue -0508 704b2701 jam on ,mem_mouse_multi_led_blink_enable -0509 20600000 rtn +0504 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag +0505 7046d901 jam pb_button_state_up ,mem_select_device_button_statue +0506 704b2701 jam on ,mem_mouse_multi_led_blink_enable +0507 20600000 rtn p_mouse_le_bb_disconnected_led_blink_set: -050a 704bb901 jam 1 ,mem_mouse_connected_state -050b 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count -050c 2020076b branch p_mouse_dpi_multi_led_blink +0508 704bb901 jam 1 ,mem_mouse_connected_state +0509 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count +050a 20200769 branch p_mouse_dpi_multi_led_blink p_mouse_adc_read: -050d 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count +050b 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count +050c 247a0000 nrtn blank +050d 6800c808 fetch 1 ,mem_mouse_wheel_trigger 050e 247a0000 nrtn blank -050f 6800c808 fetch 1 ,mem_mouse_wheel_trigger -0510 247a0000 nrtn blank -0511 6800c6ce fetch 1 ,mem_adc_read_timer -0512 1fe0fe01 increase 1 ,pdata -0513 6000c6ce store 1 ,mem_adc_read_timer -0514 1fe67c0a sub pdata ,10 ,null -0515 20610000 rtn positive +050f 6800c6ce fetch 1 ,mem_adc_read_timer +0510 1fe0fe01 increase 1 ,pdata +0511 6000c6ce store 1 ,mem_adc_read_timer +0512 1fe67c0a sub pdata ,10 ,null +0513 20610000 rtn positive p_mouse_adc_read_timeout: -0516 204068a8 call adc_init_data -0517 7046ce00 jam 0 ,mem_adc_read_timer -0518 20400530 call p_adc_set_mode -0519 20406908 call vdd_calculate_by_mode -051a 1feffe03 mul32 pdata ,3 ,pdata -051b d840000f arg 0x0f ,temp -051c 98467e00 isub temp ,pdata -051d 1fe67c64 sub pdata ,0x64 ,null -051e 2041052d call p_mouse_vdd_decrease ,positive -051f 6001470f store 2 ,mem_mouse_vdd_now_vol -0520 da204709 arg mem_mouse_vdd_calculate_set ,rega -0521 20200522 branch p_mouse_adc_read_next +0514 204068a8 call adc_init_data +0515 7046ce00 jam 0 ,mem_adc_read_timer +0516 2040052e call p_adc_set_mode +0517 20406908 call vdd_calculate_by_mode +0518 1feffe03 mul32 pdata ,3 ,pdata +0519 d840000f arg 0x0f ,temp +051a 98467e00 isub temp ,pdata +051b 1fe67c64 sub pdata ,0x64 ,null +051c 2041052b call p_mouse_vdd_decrease ,positive +051d 6001470f store 2 ,mem_mouse_vdd_now_vol +051e da204709 arg mem_mouse_vdd_calculate_set ,rega +051f 20200520 branch p_mouse_adc_read_next p_mouse_adc_read_next: -0522 20400538 call p_adc_bat_percent_lowpower_out -0523 6800c231 fetch 1 ,mem_adc_power_flag -0524 c280b40a bbit1 1 ,app_enter_hibernate -0525 c3000528 bbit0 0 ,p_mouse_adc_no_low_voltage -0526 704aff01 jam 1 ,mem_mouse_adc_last_low_voltage_flag -0527 202043e7 branch mouse_adc_low_voltage +0520 20400536 call p_adc_bat_percent_lowpower_out +0521 6800c231 fetch 1 ,mem_adc_power_flag +0522 c280b40a bbit1 1 ,app_enter_hibernate +0523 c3000526 bbit0 0 ,p_mouse_adc_no_low_voltage +0524 704aff01 jam 1 ,mem_mouse_adc_last_low_voltage_flag +0525 202043e7 branch mouse_adc_low_voltage p_mouse_adc_no_low_voltage: -0528 204043e9 call mouse_adc_no_low_voltage -0529 6800caff fetch 1 ,mem_mouse_adc_last_low_voltage_flag -052a 207a0000 rtn blank -052b 704aff00 jam 0 ,mem_mouse_adc_last_low_voltage_flag -052c 2020075f branch p_mouse_multi_led_off +0526 204043e9 call mouse_adc_no_low_voltage +0527 6800caff fetch 1 ,mem_mouse_adc_last_low_voltage_flag +0528 207a0000 rtn blank +0529 704aff00 jam 0 ,mem_mouse_adc_last_low_voltage_flag +052a 2020075d branch p_mouse_multi_led_off p_mouse_vdd_decrease: -052d d8400005 arg 0x05 ,temp -052e 98467e00 isub temp ,pdata -052f 20600000 rtn +052b d8400005 arg 0x05 ,temp +052c 98467e00 isub temp ,pdata +052d 20600000 rtn p_adc_set_mode: p_adc_check_gpio: -0530 68108078 hfetch 1 ,core_gpio_pu0 -0531 793ffe05 set0 5 ,pdata -0532 60108078 hstore 1 ,core_gpio_pu0 -0533 204068f4 call adc_check_gpio -0534 68108078 hfetch 1 ,core_gpio_pu0 -0535 79207e05 set1 5 ,pdata -0536 60108078 hstore 1 ,core_gpio_pu0 -0537 20600000 rtn +052e 68108078 hfetch 1 ,core_gpio_pu0 +052f 793ffe05 set0 5 ,pdata +0530 60108078 hstore 1 ,core_gpio_pu0 +0531 204068f4 call adc_check_gpio +0532 68108078 hfetch 1 ,core_gpio_pu0 +0533 79207e05 set1 5 ,pdata +0534 60108078 hstore 1 ,core_gpio_pu0 +0535 20600000 rtn p_adc_bat_percent_lowpower_out: -0538 ea240000 ifetch 8 ,rega -0539 60040a9a store 8 ,mem_pdatatemp -053a 68090a9c fetcht 2 ,mem_pdatatemp + 2 -053b 68010aa0 fetch 2 ,mem_pdatatemp + 6 -053c 98467c00 isub temp ,null -053d 24216944 nbranch adc_set_no_power_flag ,positive -053e 68090a9e fetcht 2 ,mem_pdatatemp + 4 -053f 98467c00 isub temp ,null -0540 24216940 nbranch adc_set_low_power_flag ,positive +0536 ea240000 ifetch 8 ,rega +0537 60040a9a store 8 ,mem_pdatatemp +0538 68090a9c fetcht 2 ,mem_pdatatemp + 2 +0539 68010aa0 fetch 2 ,mem_pdatatemp + 6 +053a 98467c00 isub temp ,null +053b 24216944 nbranch adc_set_no_power_flag ,positive +053c 68090a9e fetcht 2 ,mem_pdatatemp + 4 +053d 98467c00 isub temp ,null +053e 24216940 nbranch adc_set_low_power_flag ,positive p_adc_clear_low_power_flag: -0541 6800c231 fetch 1 ,mem_adc_power_flag -0542 793ffe00 set0 0 ,pdata -0543 6000c231 store 1 ,mem_adc_power_flag -0544 20600000 rtn +053f 6800c231 fetch 1 ,mem_adc_power_flag +0540 793ffe00 set0 0 ,pdata +0541 6000c231 store 1 ,mem_adc_power_flag +0542 20600000 rtn p_mouse_low_voltage_led_timer: -0545 680246d3 fetch mouse_flag_len ,mem_mouse_flag -0546 c4020000 rtnbit0 mouse_low_voltage_flag -0547 68014682 fetch 2 ,mem_ui_state_map -0548 c3858000 rtnbit1 ui_state_ble_adv -0549 c3830000 rtnbit1 ui_state_bt_discovery -054a 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count -054b 247a0000 nrtn blank -054c 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count -054d 1fe0fe01 pincrease 1 -054e 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count -054f 1fe67c1e sub pdata ,30 ,null -0550 24410554 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive -0551 1fe67c0a sub pdata ,10 ,null -0552 20210751 branch p_mouse_multi_led_on ,positive -0553 2020075f branch p_mouse_multi_led_off +0543 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0544 c4020000 rtnbit0 mouse_low_voltage_flag +0545 68014682 fetch 2 ,mem_ui_state_map +0546 c3858000 rtnbit1 ui_state_ble_adv +0547 c3830000 rtnbit1 ui_state_bt_discovery +0548 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count +0549 247a0000 nrtn blank +054a 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count +054b 1fe0fe01 pincrease 1 +054c 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count +054d 1fe67c1e sub pdata ,30 ,null +054e 24410552 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive +054f 1fe67c0a sub pdata ,10 ,null +0550 2021074f branch p_mouse_multi_led_on ,positive +0551 2020075d branch p_mouse_multi_led_off p_mouse_adc_low_volatage_led_timer_count_clean: -0554 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count -0555 20600000 rtn +0552 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count +0553 20600000 rtn p_mouse_sensor_poweron: -0556 20400319 call p_mouse_spi_init -0557 58008006 setarg 0x8006 -0558 20406413 call twspi_write -0559 20002ee0 nop 12000 -055a da604b96 arg mem_sensor_poweron_init ,regc -055b 204002e4 call p_sensor_wr_seq +0554 20400315 call p_mouse_spi_init +0555 58008006 setarg 0x8006 +0556 20406413 call twspi_write +0557 20002ee0 nop 12000 +0558 da604b96 arg mem_sensor_poweron_init ,regc +0559 204002e0 call p_sensor_wr_seq p_mouse_dpi_config: -055c 6800c77a fetch 1 ,mem_mouse_dpi -055d c0ff8560 bne 0xff ,p_mouse_seting_dpi +055a 6800c77a fetch 1 ,mem_mouse_dpi +055b c0ff855e bne 0xff ,p_mouse_seting_dpi p_mouse_dpi_config_default: -055e 6800c6e1 fetch 1 ,mem_config_sensor_motion -055f 6000c77a store 1 ,mem_mouse_dpi +055c 6800c6e1 fetch 1 ,mem_config_sensor_motion +055d 6000c77a store 1 ,mem_mouse_dpi p_mouse_seting_dpi: p_mouse_seting_sensor_type: -0560 6800c6e0 fetch 1 ,mem_config_sensor_type -0561 c002057d beq p3212 ,p_mouse_seting_3212_dpi -0562 c0030570 beq p3065_xy ,p_mouse_seting_3065xy_dpi -0563 c0038570 beq mx8650 ,p_mouse_seting_3065xy_dpi +055e 6800c6e0 fetch 1 ,mem_config_sensor_type +055f c002057b beq p3212 ,p_mouse_seting_3212_dpi +0560 c003056e beq p3065_xy ,p_mouse_seting_3065xy_dpi +0561 c003856e beq mx8650 ,p_mouse_seting_3065xy_dpi p_mouse_seting_3205_dpi: -0564 6800c77a fetch 1 ,mem_mouse_dpi -0565 1fe67c01 sub pdata ,mouse_dpi_level2 ,null -0566 2042856b call p_mouse_3205_dpi_recount ,zero -0567 6800c77a fetch 1 ,mem_mouse_dpi -0568 c000056d beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 -0569 c001bd8c beq mouse_dpi_level4 ,mouse_set_cpi3 -056a 20203d88 branch mouse_set_cpi2 +0562 6800c77a fetch 1 ,mem_mouse_dpi +0563 1fe67c01 sub pdata ,mouse_dpi_level2 ,null +0564 20428569 call p_mouse_3205_dpi_recount ,zero +0565 6800c77a fetch 1 ,mem_mouse_dpi +0566 c000056b beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 +0567 c001bd8c beq mouse_dpi_level4 ,mouse_set_cpi3 +0568 20203d88 branch mouse_set_cpi2 p_mouse_3205_dpi_recount: -056b 70477a02 jam mouse_dpi_level3 ,mem_mouse_dpi -056c 20600000 rtn +0569 70477a02 jam mouse_dpi_level3 ,mem_mouse_dpi +056a 20600000 rtn p_mouse_3205_set_cpi1: -056d 6800c77f fetch 1 ,mem_320x_dpi_1 -056e 1fe0ffff increase -1 ,pdata -056f 20203dbe branch mouse_p3205_dpi +056b 6800c77f fetch 1 ,mem_320x_dpi_1 +056c 1fe0ffff increase -1 ,pdata +056d 20203dbe branch mouse_p3205_dpi p_mouse_seting_3065xy_dpi: -0570 6800c77a fetch 1 ,mem_mouse_dpi -0571 1fe67c01 sub pdata ,mouse_dpi_level2 ,null -0572 2042856b call p_mouse_3205_dpi_recount ,zero -0573 6800c77a fetch 1 ,mem_mouse_dpi -0574 c0000579 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 -0575 c001857b beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 +056e 6800c77a fetch 1 ,mem_mouse_dpi +056f 1fe67c01 sub pdata ,mouse_dpi_level2 ,null +0570 20428569 call p_mouse_3205_dpi_recount ,zero +0571 6800c77a fetch 1 ,mem_mouse_dpi +0572 c0000577 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 +0573 c0018579 beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 p_mouse_3065xy_set_cpi3: -0576 6800cb3c fetch 1 ,mem_3065xy_dpi_3 +0574 6800cb3c fetch 1 ,mem_3065xy_dpi_3 p_mouse_dpi_store: -0577 6000c6b5 store 1 ,mem_mouse_cpi_count -0578 20203dc1 branch mouse_p3205_dpi + 3 +0575 6000c6b5 store 1 ,mem_mouse_cpi_count +0576 20203dc1 branch mouse_p3205_dpi + 3 p_mouse_3065xy_set_cpi1: -0579 6800cb3a fetch 1 ,mem_3065xy_dpi_1 -057a 20200577 branch p_mouse_dpi_store +0577 6800cb3a fetch 1 ,mem_3065xy_dpi_1 +0578 20200575 branch p_mouse_dpi_store p_mouse_3065xy_set_cpi4: -057b 6800cb3d fetch 1 ,mem_3065xy_dpi_4 -057c 20200577 branch p_mouse_dpi_store +0579 6800cb3d fetch 1 ,mem_3065xy_dpi_4 +057a 20200575 branch p_mouse_dpi_store p_mouse_seting_3212_dpi: -057d 6800c77a fetch 1 ,mem_mouse_dpi -057e 1fe67c01 sub pdata ,mouse_dpi_level2 ,null -057f 2042856b call p_mouse_3205_dpi_recount ,zero -0580 6800c77a fetch 1 ,mem_mouse_dpi -0581 c0003d9d beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 -0582 c000bd9b beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 -0583 c0013d9f beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 -0584 c001bda1 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 -0585 20203d9b branch mouse_set_p3212_cpi2 +057b 6800c77a fetch 1 ,mem_mouse_dpi +057c 1fe67c01 sub pdata ,mouse_dpi_level2 ,null +057d 20428569 call p_mouse_3205_dpi_recount ,zero +057e 6800c77a fetch 1 ,mem_mouse_dpi +057f c0003d9d beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +0580 c000bd9b beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +0581 c0013d9f beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +0582 c001bda1 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 +0583 20203d9b branch mouse_set_p3212_cpi2 p_mouse_motion: -0586 78547c00 disable user -0587 58000000 setarg 0 -0588 6003469b store 6 ,mem_mouse_x -0589 20400591 call p_mouse_cheak_sensor_data -058a 20400293 call p_mouse_set_sdio_high -058b 20404079 call mouse_zwheel -058c 2040407e call mouse_t_zwheel -058d 204005bb call p_mouse_key -058e 2040059e call p_mouse_data_zoom -058f 24740000 nrtn user -0590 20203fa0 branch mouse_motion + 9 +0584 78547c00 disable user +0585 58000000 setarg 0 +0586 6003469b store 6 ,mem_mouse_x +0587 2040058f call p_mouse_cheak_sensor_data +0588 2040028f call p_mouse_set_sdio_high +0589 20404079 call mouse_zwheel +058a 2040407e call mouse_t_zwheel +058b 204005b9 call p_mouse_key +058c 2040059c call p_mouse_data_zoom +058d 24740000 nrtn user +058e 20203fa0 branch mouse_motion + 9 p_mouse_cheak_sensor_data: -0591 6800c239 fetch 1 ,mem_spi_write_flash_sm -0592 c1800000 rtnne flash_sm_no_buys -0593 6800c6e0 fetch 1 ,mem_config_sensor_type -0594 c0020597 beq p3212 ,p_mouse_p3212_sensor_motion -0595 c0028599 beq p3610 ,p_mouse_p3610_sensor_motion -0596 2020059b branch p_mouse_p32xx_sensor_motion +058f 6800c239 fetch 1 ,mem_spi_write_flash_sm +0590 c1800000 rtnne flash_sm_no_buys +0591 6800c6e0 fetch 1 ,mem_config_sensor_type +0592 c0020595 beq p3212 ,p_mouse_p3212_sensor_motion +0593 c0028597 beq p3610 ,p_mouse_p3610_sensor_motion +0594 20200599 branch p_mouse_p32xx_sensor_motion p_mouse_p3212_sensor_motion: -0597 20403fc0 call mouse_clear_sensor_data -0598 20203fc8 branch mouse_p3212_sensor_motion_next +0595 20403fc0 call mouse_clear_sensor_data +0596 20203fc8 branch mouse_p3212_sensor_motion_next p_mouse_p3610_sensor_motion: -0599 78547c00 disable user -059a 20204014 branch mouse_p3610_sensor_motion + 4 +0597 78547c00 disable user +0598 20204014 branch mouse_p3610_sensor_motion + 4 p_mouse_p32xx_sensor_motion: -059b 20403fc0 call mouse_clear_sensor_data -059c 78547c00 disable user -059d 20203fe7 branch mouse_p32xx_sensor_motion_2 +0599 20403fc0 call mouse_clear_sensor_data +059a 78547c00 disable user +059b 20203fe7 branch mouse_p32xx_sensor_motion_2 p_mouse_data_zoom: -059e 6800c6e0 fetch 1 ,mem_config_sensor_type -059f c1820000 rtnne p3212 -05a0 6800c77a fetch 1 ,mem_mouse_dpi -05a1 c1818000 rtnne mouse_dpi_level4 -05a2 6801469b fetch 2 ,mem_mouse_x -05a3 204005a9 call p_mouse_1600_zoom -05a4 6001469b store 2 ,mem_mouse_x -05a5 6801469d fetch 2 ,mem_mouse_y -05a6 204005a9 call p_mouse_1600_zoom -05a7 6001469d store 2 ,mem_mouse_y -05a8 20600000 rtn +059c 6800c6e0 fetch 1 ,mem_config_sensor_type +059d c1820000 rtnne p3212 +059e 6800c77a fetch 1 ,mem_mouse_dpi +059f c1818000 rtnne mouse_dpi_level4 +05a0 6801469b fetch 2 ,mem_mouse_x +05a1 204005a7 call p_mouse_1600_zoom +05a2 6001469b store 2 ,mem_mouse_x +05a3 6801469d fetch 2 ,mem_mouse_y +05a4 204005a7 call p_mouse_1600_zoom +05a5 6001469d store 2 ,mem_mouse_y +05a6 20600000 rtn p_mouse_1600_zoom: -05a9 c28585ac bbit1 11 ,p_mouse_xy_inverse -05aa c30585b0 bbit0 11 ,p_mouse_xy_zoom_3200 -05ab 20600000 rtn +05a7 c28585aa bbit1 11 ,p_mouse_xy_inverse +05a8 c30585ae bbit0 11 ,p_mouse_xy_zoom_3200 +05a9 20600000 rtn p_mouse_xy_inverse: +05aa 1fe67e00 sub pdata ,0 ,pdata +05ab 204005ae call p_mouse_xy_zoom_3200 05ac 1fe67e00 sub pdata ,0 ,pdata -05ad 204005b0 call p_mouse_xy_zoom_3200 -05ae 1fe67e00 sub pdata ,0 ,pdata -05af 20600000 rtn +05ad 20600000 rtn p_mouse_xy_zoom_3200: -05b0 9fe0fe00 iadd pdata ,pdata -05b1 202005b2 branch p_mouse_xy_zoom_store +05ae 9fe0fe00 iadd pdata ,pdata +05af 202005b0 branch p_mouse_xy_zoom_store p_mouse_xy_zoom_store: -05b2 60014bbb store 2 ,mem_mouse_temp_data -05b3 6800cbbc fetch 1 ,mem_mouse_temp_data + 1 -05b4 1fe67c07 sub pdata ,0x7 ,null -05b5 244105b8 ncall p_mouse_xy_forward_overflow ,positive -05b6 68014bbb fetch 2 ,mem_mouse_temp_data -05b7 20600000 rtn +05b0 60014bbb store 2 ,mem_mouse_temp_data +05b1 6800cbbc fetch 1 ,mem_mouse_temp_data + 1 +05b2 1fe67c07 sub pdata ,0x7 ,null +05b3 244105b6 ncall p_mouse_xy_forward_overflow ,positive +05b4 68014bbb fetch 2 ,mem_mouse_temp_data +05b5 20600000 rtn p_mouse_xy_forward_overflow: -05b8 580007ff setarg 0x7ff -05b9 60014bbb store 2 ,mem_mouse_temp_data -05ba 20600000 rtn +05b6 580007ff setarg 0x7ff +05b7 60014bbb store 2 ,mem_mouse_temp_data +05b8 20600000 rtn p_mouse_key: -05bb 204005bd call p_mouse_check_key_gpio -05bc 2020409a branch mouse_key + 1 +05b9 204005bb call p_mouse_check_key_gpio +05ba 2020409a branch mouse_key + 1 p_mouse_check_key_gpio: -05bd da200000 arg 0 ,rega -05be 204005c0 call p_mouse_check_lkey_gpio -05bf 2020408e branch mouse_check_key_gpio_output +05bb da200000 arg 0 ,rega +05bc 204005be call p_mouse_check_lkey_gpio +05bd 2020408e branch mouse_check_key_gpio_output p_mouse_check_lkey_gpio: +05be 6808c6e2 fetcht 1 ,mem_lbutton_gpio +05bf 204005da call p_gpio_set_input_pu 05c0 6808c6e2 fetcht 1 ,mem_lbutton_gpio -05c1 204005dc call p_gpio_set_input_pu -05c2 6808c6e2 fetcht 1 ,mem_lbutton_gpio -05c3 2040681d call gpio_get_bit -05c4 7920a200 setflag true ,0 ,rega +05c1 2040681d call gpio_get_bit +05c2 7920a200 setflag true ,0 ,rega p_mouse_check_rkey_gpio: +05c3 6808c6e3 fetcht 1 ,mem_rbutton_gpio +05c4 204005da call p_gpio_set_input_pu 05c5 6808c6e3 fetcht 1 ,mem_rbutton_gpio -05c6 204005dc call p_gpio_set_input_pu -05c7 6808c6e3 fetcht 1 ,mem_rbutton_gpio -05c8 2040681d call gpio_get_bit -05c9 7920a201 setflag true ,1 ,rega +05c6 2040681d call gpio_get_bit +05c7 7920a201 setflag true ,1 ,rega p_mouse_check_mkey_gpio: +05c8 6808c6e4 fetcht 1 ,mem_mbutton_gpio +05c9 204005da call p_gpio_set_input_pu 05ca 6808c6e4 fetcht 1 ,mem_mbutton_gpio -05cb 204005dc call p_gpio_set_input_pu -05cc 6808c6e4 fetcht 1 ,mem_mbutton_gpio -05cd 2040681d call gpio_get_bit -05ce 7920a202 setflag true ,2 ,rega +05cb 2040681d call gpio_get_bit +05cc 7920a202 setflag true ,2 ,rega p_mouse_check_bk_key_gpio: -05cf 20400436 call p_mouse_comm_gpio_config +05cd 20400434 call p_mouse_comm_gpio_config +05ce 6808c6e5 fetcht 1 ,mem_bk_button_gpio +05cf 204005df call p_gpio_set_input_pd 05d0 6808c6e5 fetcht 1 ,mem_bk_button_gpio -05d1 204005e1 call p_gpio_set_input_pd -05d2 6808c6e5 fetcht 1 ,mem_bk_button_gpio -05d3 2040681d call gpio_get_bit -05d4 7d20a203 nsetflag true ,3 ,rega -05d5 204005dc call p_gpio_set_input_pu +05d1 2040681d call gpio_get_bit +05d2 7d20a203 nsetflag true ,3 ,rega +05d3 204005da call p_gpio_set_input_pu p_mouse_check_fw_key_gpio: -05d6 20400436 call p_mouse_comm_gpio_config +05d4 20400434 call p_mouse_comm_gpio_config +05d5 6808c6e6 fetcht 1 ,mem_fw_button_gpio +05d6 204005df call p_gpio_set_input_pd 05d7 6808c6e6 fetcht 1 ,mem_fw_button_gpio -05d8 204005e1 call p_gpio_set_input_pd -05d9 6808c6e6 fetcht 1 ,mem_fw_button_gpio -05da 2040681d call gpio_get_bit -05db 7d20a204 nsetflag true ,4 ,rega +05d8 2040681d call gpio_get_bit +05d9 7d20a204 nsetflag true ,4 ,rega p_gpio_set_input_pu: -05dc 79200407 set1 gpio_active_bit ,temp +05da 79200407 set1 gpio_active_bit ,temp p_gpio_set_input_pu1: -05dd d8a08078 arg core_gpio_pu0 ,contw -05de 20406830 call gpio_set_bit -05df 793f8407 set0 gpio_active_bit ,temp -05e0 202005e5 branch p_gpio_set_input_pd4 +05db d8a08078 arg core_gpio_pu0 ,contw +05dc 20406830 call gpio_set_bit +05dd 793f8407 set0 gpio_active_bit ,temp +05de 202005e3 branch p_gpio_set_input_pd4 p_gpio_set_input_pd: -05e1 793f8407 set0 gpio_active_bit ,temp -05e2 d8a08078 arg core_gpio_pu0 ,contw -05e3 20406830 call gpio_set_bit -05e4 79200407 set1 gpio_active_bit ,temp +05df 793f8407 set0 gpio_active_bit ,temp +05e0 d8a08078 arg core_gpio_pu0 ,contw +05e1 20406830 call gpio_set_bit +05e2 79200407 set1 gpio_active_bit ,temp p_gpio_set_input_pd4: -05e5 d8a0807c arg core_gpio_pd0 ,contw -05e6 2020680a branch gpio_set_high_impedance + 4 +05e3 d8a0807c arg core_gpio_pd0 ,contw +05e4 2020680a branch gpio_set_high_impedance + 4 p_mouse_bb_event_discovery_btn: -05e7 280ffe26 isolate1 mark_24g ,mark -05e8 204081a2 call p_g24_check_51cmd_stop_24g ,true -05e9 2020426d branch mouse_bb_event_discovery_btn + 1 +05e5 280ffe26 isolate1 mark_24g ,mark +05e6 2040819e call p_g24_check_51cmd_stop_24g ,true +05e7 2020426d branch mouse_bb_event_discovery_btn + 1 p_le_addr_random_config: -05ea 7011c581 jam zcode_81 ,mem_zcode_temp_param0 -05eb 202007cd branch p_zcode_entrance +05e8 7011c581 jam zcode_81 ,mem_zcode_temp_param0 +05e9 202007cb branch p_zcode_entrance p_mouse_start_discovery: -05ec 7011c550 jam zcode_50 ,mem_zcode_temp_param0 -05ed 202007cd branch p_zcode_entrance +05ea 7011c550 jam zcode_50 ,mem_zcode_temp_param0 +05eb 202007cb branch p_zcode_entrance p_le_adv_data_update: -05ee d8a0437b arg mem_le_adv_data + 11 ,contw -05ef df200013 arg 19 ,loopcnt -05f0 20407f01 call memcpy -05f1 202057b8 branch le_modified_name_adv +05ec d8a0437b arg mem_le_adv_data + 11 ,contw +05ed df200013 arg 19 ,loopcnt +05ee 20407f01 call memcpy +05ef 202057b8 branch le_modified_name_adv p_mouse_stop_discovery: -05f2 20400759 call p_mouse_discovey_led_blink_off -05f3 58000000 setarg 0 -05f4 600146ac store 2 ,mem_mouse_discovery_timer -05f5 6000c714 store 1 ,mem_mouse_blink_count -05f6 204002d8 call p_mouse_init_sensor_reset -05f7 202042cb branch mouse_stop_discovery + 1 +05f0 20400757 call p_mouse_discovey_led_blink_off +05f1 58000000 setarg 0 +05f2 600146ac store 2 ,mem_mouse_discovery_timer +05f3 6000c714 store 1 ,mem_mouse_blink_count +05f4 204002d4 call p_mouse_init_sensor_reset +05f5 202042cb branch mouse_stop_discovery + 1 p_le_slave_match: -05f8 6800c50f fetch 1 ,mem_le_md_count -05f9 1fe0fe01 pincrease 1 -05fa 6000c50f store 1 ,mem_le_md_count -05fb c0065395 beq le_md_max_count ,le_slave_cont -05fc 204055aa call le_acknowledge -05fd 2040561e call le_prepare_tx -05fe 204006d5 call power_ctrl_start -05ff 2020538f branch le_slave_match + 7 +05f6 6800c50f fetch 1 ,mem_le_md_count +05f7 1fe0fe01 pincrease 1 +05f8 6000c50f store 1 ,mem_le_md_count +05f9 c0065395 beq le_md_max_count ,le_slave_cont +05fa 204055aa call le_acknowledge +05fb 2040561e call le_prepare_tx +05fc 204006d3 call power_ctrl_start +05fd 2020538f branch le_slave_match + 7 p_le_next_adv_channel: -0600 68008016 fetch 1 ,mem_le_ch_mapped -0601 1fe0fe01 increase 1 ,pdata -0602 60008016 store 1 ,mem_le_ch_mapped -0603 c1940000 rtnne 40 -0604 70001625 jam 37 ,mem_le_ch_mapped -0605 20600000 rtn +05fe 68008016 fetch 1 ,mem_le_ch_mapped +05ff 1fe0fe01 increase 1 ,pdata +0600 60008016 store 1 ,mem_le_ch_mapped +0601 c1940000 rtnne 40 +0602 70001625 jam 37 ,mem_le_ch_mapped +0603 20600000 rtn p_le_receive_skip: -0606 204029bb call save_rssi -0607 20400205 call p_rssi_signal -0608 202054a3 branch le_receive_skip + 2 +0604 204029bb call save_rssi +0605 20400201 call p_rssi_signal +0606 202054a3 branch le_receive_skip + 2 p_le_update_param: -0609 7011c540 jam zcode_40 ,mem_zcode_temp_param0 -060a 202007cd branch p_zcode_entrance +0607 7011c540 jam zcode_40 ,mem_zcode_temp_param0 +0608 202007cb branch p_zcode_entrance p_le_update_channel_map: -060b 7011c541 jam zcode_41 ,mem_zcode_temp_param0 -060c 202007cd branch p_zcode_entrance +0609 7011c541 jam zcode_41 ,mem_zcode_temp_param0 +060a 202007cb branch p_zcode_entrance p_le_prepare_tx: -060d 68008456 fetch 1 ,mem_le_arq -060e c282862c bbit1 wak ,p_le_prepare_tx_wak -060f 2040077e call power_ctrl_pac_succ_incrs -0610 6800c78e fetch 1 ,mem_empty_count -0611 243a0617 nbranch p_le_send_empyt ,blank -0612 6800843f fetch 1 ,mem_le_state -0613 c302061b bbit0 lestate_encryption ,p_le_tx_4 -0614 680082da fetch 1 ,mem_le_rxbuf + 1 -0615 203a061b branch p_le_tx_4 ,blank -0616 20205664 branch le_send_empty +060b 68008456 fetch 1 ,mem_le_arq +060c c282862a bbit1 wak ,p_le_prepare_tx_wak +060d 2040077c call power_ctrl_pac_succ_incrs +060e 6800c78e fetch 1 ,mem_empty_count +060f 243a0615 nbranch p_le_send_empyt ,blank +0610 6800843f fetch 1 ,mem_le_state +0611 c3020619 bbit0 lestate_encryption ,p_le_tx_4 +0612 680082da fetch 1 ,mem_le_rxbuf + 1 +0613 203a0619 branch p_le_tx_4 ,blank +0614 20205664 branch le_send_empty p_le_send_empyt: -0617 6800c78e fetch 1 ,mem_empty_count -0618 1fe0ffff increase -1 ,pdata -0619 6000c78e store 1 ,mem_empty_count -061a 20205664 branch le_send_empty +0615 6800c78e fetch 1 ,mem_empty_count +0616 1fe0ffff increase -1 ,pdata +0617 6000c78e store 1 ,mem_empty_count +0618 20205664 branch le_send_empty p_le_tx_4: -061b 6800c4c4 fetch 1 ,mem_le_pairing_state -061c c082861e bne flag_le_pairing_after_auth ,p_in_le_tx_4 -061d 70478e03 jam 3 ,mem_empty_count +0619 6800c4c4 fetch 1 ,mem_le_pairing_state +061a c082861c bne flag_le_pairing_after_auth ,p_in_le_tx_4 +061b 70478e03 jam 3 ,mem_empty_count p_in_le_tx_4: -061e 20405892 call le_fifo_check_nearly_full -061f 205a03b4 call p_mouse_data_pull ,blank -0620 20205622 branch le_prepare_tx + 4 +061c 20405892 call le_fifo_check_nearly_full +061d 205a03b2 call p_mouse_data_pull ,blank +061e 20205622 branch le_prepare_tx + 4 p_le_check_tx_retransmit_setmd: -0621 6800c6c5 fetch 1 ,mem_le_connect_status_flag -0622 1fe17e03 and pdata ,0x03 ,pdata -0623 c1818000 rtnne 0x03 -0624 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +061f 6800c6c5 fetch 1 ,mem_le_connect_status_flag +0620 1fe17e03 and pdata ,0x03 ,pdata +0621 c1818000 rtnne 0x03 +0622 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +0623 207a0000 rtn blank +0624 6800c3dd fetch 1 ,mem_le_txlen 0625 207a0000 rtn blank -0626 6800c3dd fetch 1 ,mem_le_txlen -0627 207a0000 rtn blank -0628 6800c3dc fetch 1 ,mem_le_txheader -0629 79207e04 set1 md ,pdata -062a 6000c3dc store 1 ,mem_le_txheader -062b 20205650 branch le_set_md +0626 6800c3dc fetch 1 ,mem_le_txheader +0627 79207e04 set1 md ,pdata +0628 6000c3dc store 1 ,mem_le_txheader +0629 20205650 branch le_set_md p_le_prepare_tx_wak: -062c 20400621 call p_le_check_tx_retransmit_setmd +062a 2040061f call p_le_check_tx_retransmit_setmd p_le_power_ctrl_pac_succ_decrs: power_ctrl_pac_succ_decrs: -062d 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -062e 1fe67c02 sub pdata ,2 ,null -062f 24410782 ncall power_ctrl_pac_succ_cnt_reinit ,positive -0630 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -0631 c1000000 rtneq 0 -0632 1fe0ffff increase -1 ,pdata -0633 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt -0634 20600000 rtn +062b 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +062c 1fe67c02 sub pdata ,2 ,null +062d 24410780 ncall power_ctrl_pac_succ_cnt_reinit ,positive +062e 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +062f c1000000 rtneq 0 +0630 1fe0ffff increase -1 ,pdata +0631 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt +0632 20600000 rtn p_mouse_le_reconn_write_enable_timer_reinit: -0635 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag -0636 207a0000 rtn blank -0637 6800c6c5 fetch 1 ,mem_le_connect_status_flag -0638 1fe17e03 and pdata ,0x03 ,pdata -0639 c1018000 rtneq 0x03 -063a 7046c60a jam 10 ,mem_le_start_encrypt_timer -063b 20600000 rtn +0633 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag +0634 207a0000 rtn blank +0635 6800c6c5 fetch 1 ,mem_le_connect_status_flag +0636 1fe17e03 and pdata ,0x03 ,pdata +0637 c1018000 rtneq 0x03 +0638 7046c60a jam 10 ,mem_le_start_encrypt_timer +0639 20600000 rtn p_le_parse: -063c c6078000 rtnmark1 mark_old_packet -063d 20405890 call le_fifo_check_full -063e 247a0000 nrtn blank -063f 680082d9 fetch 1 ,mem_le_rxbuf -0640 1fe17e03 and pdata ,0x3 ,pdata -0641 6000c50c store 1 ,mem_le_packet_llid -0642 e8c08000 ifetch 1 ,contr -0643 1fe17e1f and pdata ,0x1f ,pdata -0644 6000c50b store 1 ,mem_le_packet_size -0645 207a0000 rtn blank -0646 18c27e00 copy contr ,pdata -0647 6001450d store 2 ,mem_le_payload_ptr -0648 6800c50c fetch 1 ,mem_le_packet_llid -0649 c001864b beq llid_le_ll ,p_le_parse_ll -064a 2020568d branch le_parse_l2cap +063a c6078000 rtnmark1 mark_old_packet +063b 20405890 call le_fifo_check_full +063c 247a0000 nrtn blank +063d 680082d9 fetch 1 ,mem_le_rxbuf +063e 1fe17e03 and pdata ,0x3 ,pdata +063f 6000c50c store 1 ,mem_le_packet_llid +0640 e8c08000 ifetch 1 ,contr +0641 1fe17e1f and pdata ,0x1f ,pdata +0642 6000c50b store 1 ,mem_le_packet_size +0643 207a0000 rtn blank +0644 18c27e00 copy contr ,pdata +0645 6001450d store 2 ,mem_le_payload_ptr +0646 6800c50c fetch 1 ,mem_le_packet_llid +0647 c0018649 beq llid_le_ll ,p_le_parse_ll +0648 2020568d branch le_parse_l2cap p_le_parse_ll: -064b 680082db fetch 1 ,mem_le_rxbuf + 2 -064c c000864e beq ll_channel_map_req ,p_le_parse_channel_map_req -064d 20205c65 branch le_parse_ll + 1 +0649 680082db fetch 1 ,mem_le_rxbuf + 2 +064a c000864c beq ll_channel_map_req ,p_le_parse_channel_map_req +064b 20205c65 branch le_parse_ll + 1 p_le_parse_channel_map_req: -064e e8c28000 ifetch 5 ,contr -064f 6002c3ce store 5 ,mem_le_new_map -0650 e8c10000 ifetch 2 ,contr -0651 6001045f store 2 ,mem_le_instant -0652 20205c8a branch le_parse_channel_map_req + 7 +064c e8c28000 ifetch 5 ,contr +064d 6002c3ce store 5 ,mem_le_new_map +064e e8c10000 ifetch 2 ,contr +064f 6001045f store 2 ,mem_le_instant +0650 20205c8a branch le_parse_channel_map_req + 7 p_le_parse_l2cap: -0653 e8c10000 ifetch 2 ,contr -0654 c0020657 beq le_l2cap_cid_att ,p_le_parse_att -0655 c0030695 beq le_l2cap_cid_smp ,p_le_parse_smp -0656 20205698 branch le_parse_l2cap + 11 +0651 e8c10000 ifetch 2 ,contr +0652 c0020655 beq le_l2cap_cid_att ,p_le_parse_att +0653 c0030693 beq le_l2cap_cid_smp ,p_le_parse_smp +0654 20205698 branch le_parse_l2cap + 11 p_le_parse_att: -0657 20407ea5 call store_contr -0658 20400635 call p_mouse_le_reconn_write_enable_timer_reinit -0659 20407e9f call get_contr -065a e8c18000 ifetch 3 ,contr -065b 60018477 store 3 ,mem_le_att_opcode -065c c0080666 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request -065d 1fec8400 rshift8 pdata ,temp -065e 18467c24 sub temp ,0x24 ,null -065f 20210674 branch p_le_parse_att1 ,positive -0660 d84047c8 arg mem_mouse_le_uuid_sup ,temp -0661 600944bc storet 2 ,mem_ui_le_uuid_table -0662 204058ad call le_parse_att + 2 -0663 58008e7a setarg 0x8e7a -0664 600144bc store 2 ,mem_ui_le_uuid_table -0665 20600000 rtn +0655 20407ea5 call store_contr +0656 20400633 call p_mouse_le_reconn_write_enable_timer_reinit +0657 20407e9f call get_contr +0658 e8c18000 ifetch 3 ,contr +0659 60018477 store 3 ,mem_le_att_opcode +065a c0080664 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request +065b 1fec8400 rshift8 pdata ,temp +065c 18467c24 sub temp ,0x24 ,null +065d 20210672 branch p_le_parse_att1 ,positive +065e d84047c8 arg mem_mouse_le_uuid_sup ,temp +065f 600944bc storet 2 ,mem_ui_le_uuid_table +0660 204058ad call le_parse_att + 2 +0661 58008e7a setarg 0x8e7a +0662 600144bc store 2 ,mem_ui_le_uuid_table +0663 20600000 rtn p_le_parse_att_read_by_group_type_request: -0666 204059fa call le_parse_att_read_by_group_type_request -0667 20405879 call le_fifo_get_last_tx_ptr -0668 18c08c07 increase 7 ,contr -0669 e8c08000 ifetch 1 ,contr -066a c1888000 rtnne attop_read_by_group_type_response -066b 18c08c05 increase 5 ,contr -066c e8c10000 ifetch 2 ,contr -066d d8401812 arg uuid_service_hids ,temp -066e 98467c00 isub temp ,null -066f 24628000 nrtn zero -0670 18c08dfc increase -4 ,contr -0671 5800002b setarg 0x2b -0672 e0c10000 istore 2 ,contr -0673 20600000 rtn +0664 204059fa call le_parse_att_read_by_group_type_request +0665 20405879 call le_fifo_get_last_tx_ptr +0666 18c08c07 increase 7 ,contr +0667 e8c08000 ifetch 1 ,contr +0668 c1888000 rtnne attop_read_by_group_type_response +0669 18c08c05 increase 5 ,contr +066a e8c10000 ifetch 2 ,contr +066b d8401812 arg uuid_service_hids ,temp +066c 98467c00 isub temp ,null +066d 24628000 nrtn zero +066e 18c08dfc increase -4 ,contr +066f 5800002b setarg 0x2b +0670 e0c10000 istore 2 ,contr +0671 20600000 rtn p_le_parse_att1: -0674 c0050677 beq attop_read_request ,p_le_parse_att_read_request -0675 c0090685 beq attop_write_request ,p_le_parse_att_write_request -0676 202058ad branch le_parse_att + 2 +0672 c0050675 beq attop_read_request ,p_le_parse_att_read_request +0673 c0090683 beq attop_write_request ,p_le_parse_att_write_request +0674 202058ad branch le_parse_att + 2 p_le_parse_att_read_request: -0677 68090478 fetcht 2 ,mem_le_att_handle -0678 6800c4e9 fetch 1 ,mem_le_configuration -0679 c281867e bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth +0675 68090478 fetcht 2 ,mem_le_att_handle +0676 6800c4e9 fetch 1 ,mem_le_configuration +0677 c281867c bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth p_le_send_att_read_response: -067a 68010478 fetch 2 ,mem_le_att_handle -067b c009da76 beq 0x13 ,le_send_att_error_response_notfound -067c 68090478 fetcht 2 ,mem_le_att_handle -067d 202059bf branch le_send_att_read_response +0678 68010478 fetch 2 ,mem_le_att_handle +0679 c009da76 beq 0x13 ,le_send_att_error_response_notfound +067a 68090478 fetcht 2 ,mem_le_att_handle +067b 202059bf branch le_send_att_read_response p_le_send_att_read_response_check_auth: -067e 680144fa fetch 2 ,mem_le_pairing_handle -067f 98467c00 isub temp ,null -0680 2422867a nbranch p_le_send_att_read_response ,zero -0681 20405a42 call le_check_encrypt_state -0682 2434067a nbranch p_le_send_att_read_response ,user -0683 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code -0684 20205a77 branch le_send_att_error_response +067c 680144fa fetch 2 ,mem_le_pairing_handle +067d 98467c00 isub temp ,null +067e 24228678 nbranch p_le_send_att_read_response ,zero +067f 20405a42 call le_check_encrypt_state +0680 24340678 nbranch p_le_send_att_read_response ,user +0681 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +0682 20205a77 branch le_send_att_error_response p_le_parse_att_write_request: -0685 18c22200 copy contr ,rega -0686 680144fc fetch 2 ,mem_le_l2cap_size -0687 1fe0a5fd add pdata ,-3 ,regb -0688 204056e2 call le_writeatt_cb -0689 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag -068a c07fda33 beq 0xff ,le_send_att_write_response_check_auth -068b 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag -068c 203a5a33 branch le_send_att_write_response_check_auth ,blank -068d 6800c6c5 fetch 1 ,mem_le_connect_status_flag -068e c280da33 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth -068f 5800001a setarg 0x001a -0690 68090478 fetcht 2 ,mem_le_att_handle -0691 98467c00 isub temp ,null -0692 2422da33 nbranch le_send_att_write_response_check_auth ,zero -0693 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code -0694 20205a77 branch le_send_att_error_response +0683 18c22200 copy contr ,rega +0684 680144fc fetch 2 ,mem_le_l2cap_size +0685 1fe0a5fd add pdata ,-3 ,regb +0686 204056e2 call le_writeatt_cb +0687 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag +0688 c07fda33 beq 0xff ,le_send_att_write_response_check_auth +0689 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag +068a 203a5a33 branch le_send_att_write_response_check_auth ,blank +068b 6800c6c5 fetch 1 ,mem_le_connect_status_flag +068c c280da33 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth +068d 5800001a setarg 0x001a +068e 68090478 fetcht 2 ,mem_le_att_handle +068f 98467c00 isub temp ,null +0690 2422da33 nbranch le_send_att_write_response_check_auth ,zero +0691 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +0692 20205a77 branch le_send_att_error_response p_le_parse_smp: -0695 e8c08000 ifetch 1 ,contr -0696 c0008699 beq smp_pairing_request ,p_le_parse_smp_pairing_request -0697 c002869b beq smp_pairing_failed ,p_le_parse_smp_pairing_failed -0698 20205af6 branch le_parse_smp + 2 +0693 e8c08000 ifetch 1 ,contr +0694 c0008697 beq smp_pairing_request ,p_le_parse_smp_pairing_request +0695 c0028699 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed +0696 20205af6 branch le_parse_smp + 2 p_le_parse_smp_pairing_request: -0699 704b6c01 jam 1 ,mem_le_send_security_request_flag -069a 20205b09 branch le_parse_smp_pairing_request +0697 704b6c01 jam 1 ,mem_le_send_security_request_flag +0698 20205b09 branch le_parse_smp_pairing_request p_le_parse_smp_pairing_failed: -069b 7011c582 jam zcode_82 ,mem_zcode_temp_param0 -069c 202007cd branch p_zcode_entrance +0699 7011c582 jam zcode_82 ,mem_zcode_temp_param0 +069a 202007cb branch p_zcode_entrance p_le_adv_not_match: -069d 68008016 fetch 1 ,mem_le_ch_mapped -069e c093d6f2 bne 39 ,le_adv_loop -069f 180a7e00 random pdata -06a0 d84001ff arg 0x1ff ,temp -06a1 98417e00 iand temp ,pdata -06a2 1fe0fefa add pdata ,250 ,pdata -06a3 20403cbe call delay -06a4 d8e00000 arg le_adv_interval_timer ,queue -06a5 68014482 fetch 2 ,mem_le_adv_interval -06a6 20207f08 branch timer_init +069b 68008016 fetch 1 ,mem_le_ch_mapped +069c c093d6f2 bne 39 ,le_adv_loop +069d 180a7e00 random pdata +069e d84001ff arg 0x1ff ,temp +069f 98417e00 iand temp ,pdata +06a0 1fe0fefa add pdata ,250 ,pdata +06a1 20403cbe call delay +06a2 d8e00000 arg le_adv_interval_timer ,queue +06a3 68014482 fetch 2 ,mem_le_adv_interval +06a4 20207f08 branch timer_init p_le_lpm_setmult: -06a7 7855fc00 disable wake -06a8 203706aa branch p_le_lpm_set_mult_attempt ,attempt -06a9 2436d806 nbranch le_lpm_lost ,match +06a5 7855fc00 disable wake +06a6 203706a8 branch p_le_lpm_set_mult_attempt ,attempt +06a7 2436d806 nbranch le_lpm_lost ,match p_le_lpm_set_mult_attempt: -06aa 20402bcb call lpm_match -06ab 680140c1 fetch 2 ,mem_rx_window_sniff -06ac 6001044d store 2 ,mem_le_receive_window -06ad 6800c6c5 fetch 1 ,mem_le_connect_status_flag -06ae 2fe00603 compare 3 ,pdata ,3 -06af 2420abde nbranch lpm_mult_short ,true -06b0 202057fb branch le_lpm_set_mult_attempt + 3 +06a8 20402bcb call lpm_match +06a9 680140c1 fetch 2 ,mem_rx_window_sniff +06aa 6001044d store 2 ,mem_le_receive_window +06ab 6800c6c5 fetch 1 ,mem_le_connect_status_flag +06ac 2fe00603 compare 3 ,pdata ,3 +06ad 2420abde nbranch lpm_mult_short ,true +06ae 202057fb branch le_lpm_set_mult_attempt + 3 p_le_mouse_bb_event_connect_complete: -06b1 7011c542 jam zcode_42 ,mem_zcode_temp_param0 -06b2 202007cd branch p_zcode_entrance +06af 7011c542 jam zcode_42 ,mem_zcode_temp_param0 +06b0 202007cb branch p_zcode_entrance p_twspi_reset: -06b3 68108077 hfetch 1 ,core_gpio_out3 -06b4 1fe17efd and_into 0xfd ,pdata -06b5 60108077 hstore 1 ,core_gpio_out3 -06b6 68188073 hfetcht 1 ,core_gpio_oe3 -06b7 18418402 or_into 0x2 ,temp -06b8 60188073 hstoret 1 ,core_gpio_oe3 -06b9 204063ee call twspi_disable -06ba 184104fd and_into 0xfd ,temp -06bb 2000000d nop 13 -06bc 204006c0 call p_twspi_enable -06bd 60188073 hstoret 1 ,core_gpio_oe3 -06be 20600000 rtn +06b1 68108077 hfetch 1 ,core_gpio_out3 +06b2 1fe17efd and_into 0xfd ,pdata +06b3 60108077 hstore 1 ,core_gpio_out3 +06b4 68188073 hfetcht 1 ,core_gpio_oe3 +06b5 18418402 or_into 0x2 ,temp +06b6 60188073 hstoret 1 ,core_gpio_oe3 +06b7 204063ee call twspi_disable +06b8 184104fd and_into 0xfd ,temp +06b9 2000000d nop 13 +06ba 204006be call p_twspi_enable +06bb 60188073 hstoret 1 ,core_gpio_oe3 +06bc 20600000 rtn p_spid_init: -06bf 204064dd call spid_init_common +06bd 204064dd call spid_init_common p_twspi_enable: -06c0 68108081 hfetch 1 ,core_gpio_sel1 -06c1 79207e00 set1 0 ,pdata -06c2 793ffe01 set0 1 ,pdata -06c3 793ffe03 set0 3 ,pdata -06c4 60108081 hstore 1 ,core_gpio_sel1 -06c5 20600000 rtn +06be 68108081 hfetch 1 ,core_gpio_sel1 +06bf 79207e00 set1 0 ,pdata +06c0 793ffe01 set0 1 ,pdata +06c1 793ffe03 set0 3 ,pdata +06c2 60108081 hstore 1 ,core_gpio_sel1 +06c3 20600000 rtn p_quit_connection_cont: -06c6 204033af call app_disconn_reason_collect_bt -06c7 204026e9 call sniff_exit -06c8 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp -06c9 20407d86 call ui_ipc_send_event -06ca 20405cf7 call init_lmp_work -06cb 20404d6b call l2cap_init_work -06cc 2020246e branch quit_connection_cont + 8 +06c4 204033af call app_disconn_reason_collect_bt +06c5 204026e9 call sniff_exit +06c6 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp +06c7 20407d86 call ui_ipc_send_event +06c8 20405cf7 call init_lmp_work +06c9 20404d6b call l2cap_init_work +06ca 2020246e branch quit_connection_cont + 8 p_prepare_tx: -06cd 68008030 fetch 1 ,mem_state -06ce 2feffe00 isolate1 state_inconn ,pdata -06cf 204086d1 call p_bt_power_ctrl ,true -06d0 2020248a branch prepare_tx + 1 +06cb 68008030 fetch 1 ,mem_state +06cc 2feffe00 isolate1 state_inconn ,pdata +06cd 204086cf call p_bt_power_ctrl ,true +06ce 2020248a branch prepare_tx + 1 p_bt_power_ctrl: -06d1 68008047 fetch 1 ,mem_arq -06d2 2feffe03 isolate1 wack ,pdata -06d3 2040862d call power_ctrl_pac_succ_decrs ,true -06d4 2440877e ncall power_ctrl_pac_succ_incrs ,true +06cf 68008047 fetch 1 ,mem_arq +06d0 2feffe03 isolate1 wack ,pdata +06d1 2040862b call power_ctrl_pac_succ_decrs ,true +06d2 2440877c ncall power_ctrl_pac_succ_incrs ,true power_ctrl_start: -06d5 68014682 fetch 2 ,mem_ui_state_map -06d6 c3858000 rtnbit1 ui_state_ble_adv -06d7 c3838000 rtnbit1 ui_state_bt_reconnect -06d8 c3830000 rtnbit1 ui_state_bt_discovery -06d9 da204d05 arg mem_rssi_signal_buf ,rega -06da 20400247 call p_rssi_average -06db 6008cd7d storet 1 ,mem_rssi_avg_received -06dc 58000082 setarg rssi_dis_max_24g -06dd c51306df bmark1 mark_24g ,power_ctrl_start_next -06de 58000080 setarg rssi_dis_max_ble +06d3 68014682 fetch 2 ,mem_ui_state_map +06d4 c3858000 rtnbit1 ui_state_ble_adv +06d5 c3838000 rtnbit1 ui_state_bt_reconnect +06d6 c3830000 rtnbit1 ui_state_bt_discovery +06d7 da204d05 arg mem_rssi_signal_buf ,rega +06d8 20400243 call p_rssi_average +06d9 6008cd7d storet 1 ,mem_rssi_avg_received +06da 58000082 setarg rssi_dis_max_24g +06db c51306dd bmark1 mark_24g ,power_ctrl_start_next +06dc 58000080 setarg rssi_dis_max_ble power_ctrl_start_next: -06df 98467c00 isub temp ,null -06e0 24210794 nbranch power_ctrl_txpower_incrs_force ,positive -06e1 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -06e2 1fe67c02 sub pdata ,2 ,null -06e3 24210784 nbranch power_ctrl_txpower_decrs_check ,positive -06e4 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -06e5 c0000795 beq 0 ,power_ctrl_txpower_incrs -06e6 20600000 rtn +06dd 98467c00 isub temp ,null +06de 24210792 nbranch power_ctrl_txpower_incrs_force ,positive +06df 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +06e0 1fe67c02 sub pdata ,2 ,null +06e1 24210782 nbranch power_ctrl_txpower_decrs_check ,positive +06e2 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +06e3 c0000793 beq 0 ,power_ctrl_txpower_incrs +06e4 20600000 rtn p_slave_conn_recv_packet: -06e7 204024f0 call slave_receive_master_slot -06e8 242c28f9 nbranch shutdown_radio ,sync -06e9 204029bb call save_rssi -06ea 20400205 call p_rssi_signal -06eb 20202518 branch slave_conn_recv_packet + 4 +06e5 204024f0 call slave_receive_master_slot +06e6 242c28f9 nbranch shutdown_radio ,sync +06e7 204029bb call save_rssi +06e8 20400201 call p_rssi_signal +06e9 20202518 branch slave_conn_recv_packet + 4 p_lpm_dispatch: -06ec c6130000 rtnmark1 mark_24g -06ed 20402afa call lpo_calibration -06ee 6801c16f fetch 3 ,mem_clks_per_lpo +06ea c6130000 rtnmark1 mark_24g +06eb 20402afa call lpo_calibration +06ec 6801c16f fetch 3 ,mem_clks_per_lpo +06ed 207a0000 rtn blank +06ee 6800c091 fetch 1 ,mem_lpm_mode 06ef 207a0000 rtn blank -06f0 6800c091 fetch 1 ,mem_lpm_mode -06f1 207a0000 rtn blank -06f2 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer -06f3 247a0000 nrtn blank -06f4 6800c65a fetch 1 ,mem_ssp_enable -06f5 203a06f8 branch p_lpm_dispatch_next ,blank -06f6 6800c5b1 fetch 1 ,mem_sp_local_key_invalid -06f7 207a0000 rtn blank +06f0 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +06f1 247a0000 nrtn blank +06f2 6800c65a fetch 1 ,mem_ssp_enable +06f3 203a06f6 branch p_lpm_dispatch_next ,blank +06f4 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +06f5 207a0000 rtn blank p_lpm_dispatch_next: -06f8 6800c4c0 fetch 1 ,mem_le_sc_calc +06f6 6800c4c0 fetch 1 ,mem_le_sc_calc +06f7 247a0000 nrtn blank +06f8 20402c3a call lpm_check_wake_lock 06f9 247a0000 nrtn blank -06fa 20402c3a call lpm_check_wake_lock -06fb 247a0000 nrtn blank -06fc 6800c040 fetch 1 ,mem_context -06fd 2fe00e03 compare 3 ,pdata ,0x7 -06fe 2420ab9d nbranch lpm_dispatch_unconn ,true -06ff 68014042 fetch 2 ,mem_context + coffset_tsniff -0700 d840ffff arg 0xffff ,temp -0701 98467c00 isub temp ,null -0702 20628000 rtn zero -0703 20202b7d branch lpm_dispatch_next + 9 +06fa 6800c040 fetch 1 ,mem_context +06fb 2fe00e03 compare 3 ,pdata ,0x7 +06fc 2420ab9d nbranch lpm_dispatch_unconn ,true +06fd 68014042 fetch 2 ,mem_context + coffset_tsniff +06fe d840ffff arg 0xffff ,temp +06ff 98467c00 isub temp ,null +0700 20628000 rtn zero +0701 20202b7d branch lpm_dispatch_next + 9 p_lpm_set_mult: -0704 7855fc00 disable wake -0705 68008030 fetch 1 ,mem_state -0706 c4008000 rtnbit0 state_insniff -0707 2436abd0 nbranch lpm_not_match ,match -0708 20402bcb call lpm_match -0709 680140c1 fetch 2 ,mem_rx_window_sniff -070a 6001003e store 2 ,mem_rx_window -070b 68008047 fetch 1 ,mem_arq -070c c281abde bbit1 wack ,lpm_mult_short -070d c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short -070e 20405274 call l2cap_malloc_is_fifo_empty -070f 243a2bde nbranch lpm_mult_short ,blank -0710 205a0712 call p_lpm_set_attemp_timeout ,blank -0711 20202bbe branch lpm_set_mult + 13 +0702 7855fc00 disable wake +0703 68008030 fetch 1 ,mem_state +0704 c4008000 rtnbit0 state_insniff +0705 2436abd0 nbranch lpm_not_match ,match +0706 20402bcb call lpm_match +0707 680140c1 fetch 2 ,mem_rx_window_sniff +0708 6001003e store 2 ,mem_rx_window +0709 68008047 fetch 1 ,mem_arq +070a c281abde bbit1 wack ,lpm_mult_short +070b c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short +070c 20405274 call l2cap_malloc_is_fifo_empty +070d 243a2bde nbranch lpm_mult_short ,blank +070e 205a0710 call p_lpm_set_attemp_timeout ,blank +070f 20202bbe branch lpm_set_mult + 13 p_lpm_set_attemp_timeout: -0712 70008a01 jam 1 ,mem_current_sniff_attempt -0713 70008b00 jam 0 ,mem_current_sniff_timeout -0714 20600000 rtn +0710 70008a01 jam 1 ,mem_current_sniff_attempt +0711 70008b00 jam 0 ,mem_current_sniff_timeout +0712 20600000 rtn p_mouse_bb_disconnected: -0715 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -0716 247a0000 nrtn blank -0717 7011c510 jam zcode_10 ,mem_zcode_temp_param0 -0718 202007cd branch p_zcode_entrance +0713 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +0714 247a0000 nrtn blank +0715 7011c510 jam zcode_10 ,mem_zcode_temp_param0 +0716 202007cb branch p_zcode_entrance p_check_51cmd_once_continue: -0719 204062bc call lmo_fifo_check -071a 243a7ddb nbranch check_51cmd_restore ,blank -071b 68008a99 fetch 1 ,mem_fifo_temp -071c c584fdd6 bmark0 mark_context ,check_51cmd_check_idle -071d c00f8724 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info -071e c0100727 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info -071f c0090721 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param -0720 20207dca branch check_51cmd_once_continue + 2 +0717 204062bc call lmo_fifo_check +0718 243a7ddb nbranch check_51cmd_restore ,blank +0719 68008a99 fetch 1 ,mem_fifo_temp +071a c584fdd6 bmark0 mark_context ,check_51cmd_check_idle +071b c00f8722 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info +071c c0100725 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info +071d c009071f beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param +071e 20207dca branch check_51cmd_once_continue + 2 p_check_51cmd_ble_update_connect_param: -0721 20405890 call le_fifo_check_full -0722 247a0000 nrtn blank -0723 20205abf branch le_l2cap_tx_update_req +071f 20405890 call le_fifo_check_full +0720 247a0000 nrtn blank +0721 20205abf branch le_l2cap_tx_update_req p_flash_store_le_reconn_info: -0724 70018534 jam rec_4_mode ,mem_record_bt_mode -0725 6803044f fetch 6 ,mem_le_plap -0726 20200729 branch p_flash_store_reconn_info +0722 70018534 jam rec_4_mode ,mem_record_bt_mode +0723 6803044f fetch 6 ,mem_le_plap +0724 20200727 branch p_flash_store_reconn_info p_flash_store_bd_reconn_info: -0727 70018533 jam rec_3_mode ,mem_record_bt_mode -0728 68030040 fetch 6 ,mem_plap +0725 70018533 jam rec_3_mode ,mem_record_bt_mode +0726 68030040 fetch 6 ,mem_plap p_flash_store_reconn_info: -0729 60030186 store 6 ,mem_temp_lap +0727 60030186 store 6 ,mem_temp_lap p_mouse_store_remote_bdaddr: -072a 680246d3 fetch mouse_flag_len ,mem_mouse_flag -072b c4038000 rtnbit0 mouse_store_eeprom_flag -072c d8e00007 arg mouse_store_eeprom_flag ,queue -072d 204043d2 call mouse_disable_function_flag -072e 204042e8 call mouse_check_device_addr +0728 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0729 c4038000 rtnbit0 mouse_store_eeprom_flag +072a d8e00007 arg mouse_store_eeprom_flag ,queue +072b 204043d2 call mouse_disable_function_flag +072c 204042e8 call mouse_check_device_addr p_mouse_unplug_clean_bdaddr: -072f 204042fb call mouse_before_store_reconn_info -0730 20200306 branch p_mouse_store_flash_device_info +072d 204042fb call mouse_before_store_reconn_info +072e 20200302 branch p_mouse_store_flash_device_info p_mouse_multi_led_blink_timer: -0731 6800cb27 fetch 1 ,mem_mouse_multi_led_blink_enable -0732 207a0000 rtn blank -0733 6800cb2a fetch 1 ,mem_mouse_multi_led_type -0734 c0000737 beq multi_led_on ,p_mouse_multi_led_type_on -0735 c0008741 beq multi_led_blink ,p_mouse_multi_led_type_blink -0736 20600000 rtn +072f 6800cb27 fetch 1 ,mem_mouse_multi_led_blink_enable +0730 207a0000 rtn blank +0731 6800cb2a fetch 1 ,mem_mouse_multi_led_type +0732 c0000735 beq multi_led_on ,p_mouse_multi_led_type_on +0733 c000873f beq multi_led_blink ,p_mouse_multi_led_type_blink +0734 20600000 rtn p_mouse_multi_led_type_on: -0737 20400751 call p_mouse_multi_led_on -0738 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer -0739 1fe0fe01 increase 1 ,pdata -073a 6000cb2f store 1 ,mem_mouse_multi_led_on_timer -073b 6808cb2b fetcht 1 ,mem_mouse_multi_led_on_timer_init -073c 98467c00 isub temp ,null -073d 2042873f call p_mouse_multi_led_off_poweron2s ,zero -073e 20600000 rtn +0735 2040074f call p_mouse_multi_led_on +0736 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +0737 1fe0fe01 increase 1 ,pdata +0738 6000cb2f store 1 ,mem_mouse_multi_led_on_timer +0739 6808cb2b fetcht 1 ,mem_mouse_multi_led_on_timer_init +073a 98467c00 isub temp ,null +073b 2042873d call p_mouse_multi_led_off_poweron2s ,zero +073c 20600000 rtn p_mouse_multi_led_off_poweron2s: -073f 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0740 2020075f branch p_mouse_multi_led_off +073d 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +073e 2020075d branch p_mouse_multi_led_off p_mouse_multi_led_type_blink: -0741 6800cb2d fetch 1 ,mem_mouse_multi_led_blink_timer -0742 1fe0ffff increase -1 ,pdata -0743 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer -0744 247a0000 nrtn blank -0745 6800cb2c fetch 1 ,mem_mouse_multi_led_blink_timer_init -0746 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer -0747 6800cb30 fetch 1 ,mem_mouse_multi_led_blink_count_limited -0748 203a074d branch p_mouse_multi_led_blink_count_no_limited ,blank -0749 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -074a 203a075d branch p_mouse_multi_led_blink_off ,blank -074b 1fe0ffff increase -1 ,pdata -074c 6000cb2e store 1 ,mem_mouse_multi_led_blink_count +073f 6800cb2d fetch 1 ,mem_mouse_multi_led_blink_timer +0740 1fe0ffff increase -1 ,pdata +0741 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer +0742 247a0000 nrtn blank +0743 6800cb2c fetch 1 ,mem_mouse_multi_led_blink_timer_init +0744 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer +0745 6800cb30 fetch 1 ,mem_mouse_multi_led_blink_count_limited +0746 203a074b branch p_mouse_multi_led_blink_count_no_limited ,blank +0747 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +0748 203a075b branch p_mouse_multi_led_blink_off ,blank +0749 1fe0ffff increase -1 ,pdata +074a 6000cb2e store 1 ,mem_mouse_multi_led_blink_count p_mouse_multi_led_blink_count_no_limited: -074d 6800cb29 fetch 1 ,mem_mouse_multi_led_state -074e c000875f beq on ,p_mouse_multi_led_off -074f c0000751 beq off ,p_mouse_multi_led_on -0750 20600000 rtn +074b 6800cb29 fetch 1 ,mem_mouse_multi_led_state +074c c000875d beq on ,p_mouse_multi_led_off +074d c000074f beq off ,p_mouse_multi_led_on +074e 20600000 rtn p_mouse_multi_led_on: -0751 704b2901 jam on ,mem_mouse_multi_led_state -0752 6800c720 fetch 1 ,mem_device_flag -0753 c0008757 beq 1 ,p_mouse_multi_24g_led_on -0754 c0010756 beq 2 ,p_mouse_multi_bt_led_on -0755 20200758 branch p_mouse_multi_ble_led_on +074f 704b2901 jam on ,mem_mouse_multi_led_state +0750 6800c720 fetch 1 ,mem_device_flag +0751 c0008755 beq 1 ,p_mouse_multi_24g_led_on +0752 c0010754 beq 2 ,p_mouse_multi_bt_led_on +0753 20200756 branch p_mouse_multi_ble_led_on p_mouse_multi_bt_led_on: -0756 2020448c branch mouse_device2_led_on +0754 2020448c branch mouse_device2_led_on p_mouse_multi_24g_led_on: -0757 20204489 branch mouse_device1_led_on +0755 20204489 branch mouse_device1_led_on p_mouse_multi_ble_led_on: -0758 2020448f branch mouse_device3_led_on +0756 2020448f branch mouse_device3_led_on p_mouse_discovey_led_blink_off: -0759 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +0757 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +0758 247a0000 nrtn blank +0759 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag 075a 247a0000 nrtn blank -075b 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -075c 247a0000 nrtn blank p_mouse_multi_led_blink_off: -075d 58000000 setarg 0 -075e 6001cb2d store 3 ,mem_mouse_multi_led_blink_timer +075b 58000000 setarg 0 +075c 6001cb2d store 3 ,mem_mouse_multi_led_blink_timer p_mouse_multi_led_off: -075f 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -0760 243a0763 nbranch p_mouse_multi_led_off_wait_blink_over ,blank -0761 704b2700 jam 0 ,mem_mouse_multi_led_blink_enable -0762 704b2a00 jam 0 ,mem_mouse_multi_led_type +075d 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +075e 243a0761 nbranch p_mouse_multi_led_off_wait_blink_over ,blank +075f 704b2700 jam 0 ,mem_mouse_multi_led_blink_enable +0760 704b2a00 jam 0 ,mem_mouse_multi_led_type p_mouse_multi_led_off_wait_blink_over: -0763 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer -0764 704b2900 jam off ,mem_mouse_multi_led_state -0765 20404483 call mouse_devce_led_off + 1 -0766 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -0767 247a0000 nrtn blank -0768 6800cbb9 fetch 1 ,mem_mouse_connected_state -0769 243a340a nbranch app_enter_hibernate ,blank -076a 20600000 rtn +0761 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer +0762 704b2900 jam off ,mem_mouse_multi_led_state +0763 20404483 call mouse_devce_led_off + 1 +0764 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +0765 247a0000 nrtn blank +0766 6800cbb9 fetch 1 ,mem_mouse_connected_state +0767 243a340a nbranch app_enter_hibernate ,blank +0768 20600000 rtn p_mouse_dpi_multi_led_blink: -076b 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init -076c 704b3001 jam 1 ,mem_mouse_multi_led_blink_count_limited -076d 20200777 branch p_mouse_multi_led_blink_enable +0769 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init +076a 704b3001 jam 1 ,mem_mouse_multi_led_blink_count_limited +076b 20200775 branch p_mouse_multi_led_blink_enable p_mouse_mode_bt_device_multi_led_on: p_mouse_mode_24g_device_multi_led_on: -076e 704b3101 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag -076f 704b2701 jam on ,mem_mouse_multi_led_blink_enable -0770 704b2a00 jam multi_led_on ,mem_mouse_multi_led_type -0771 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer -0772 20600000 rtn +076c 704b3101 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag +076d 704b2701 jam on ,mem_mouse_multi_led_blink_enable +076e 704b2a00 jam multi_led_on ,mem_mouse_multi_led_type +076f 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer +0770 20600000 rtn p_mouse_discovery_multi_led_blink: -0773 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0774 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init -0775 704b3000 jam 0 ,mem_mouse_multi_led_blink_count_limited -0776 704b2e01 jam 1 ,mem_mouse_multi_led_blink_count +0771 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +0772 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init +0773 704b3000 jam 0 ,mem_mouse_multi_led_blink_count_limited +0774 704b2e01 jam 1 ,mem_mouse_multi_led_blink_count p_mouse_multi_led_blink_enable: -0777 704b2d05 jam 5 ,mem_mouse_multi_led_blink_timer -0778 704b2701 jam on ,mem_mouse_multi_led_blink_enable -0779 704b2a01 jam multi_led_blink ,mem_mouse_multi_led_type -077a 20600000 rtn +0775 704b2d05 jam 5 ,mem_mouse_multi_led_blink_timer +0776 704b2701 jam on ,mem_mouse_multi_led_blink_enable +0777 704b2a01 jam multi_led_blink ,mem_mouse_multi_led_type +0778 20600000 rtn power_ctrl_pac_succ_cnt_init: -077b 704d7f01 jam 1 ,mem_power_ctrl_level -077c 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt -077d 20600000 rtn +0779 704d7f01 jam 1 ,mem_power_ctrl_level +077a 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt +077b 20600000 rtn power_ctrl_pac_succ_incrs: -077e 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -077f 1fe0fe01 increase 1 ,pdata -0780 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt -0781 20600000 rtn +077c 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +077d 1fe0fe01 increase 1 ,pdata +077e 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt +077f 20600000 rtn power_ctrl_pac_succ_cnt_reinit: -0782 704d7c03 jam 3 ,mem_power_ctrl_pac_succ_cnt -0783 20600000 rtn +0780 704d7c03 jam 3 ,mem_power_ctrl_pac_succ_cnt +0781 20600000 rtn power_ctrl_txpower_decrs_check: -0784 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -0785 c1900000 rtnne 32 -0786 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt +0782 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +0783 c1900000 rtnne 32 +0784 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt power_ctrl_txpower_decrs: -0787 6808cd7d fetcht 1 ,mem_rssi_avg_received -0788 58000077 setarg rssi_dis_min_24g -0789 c513078b bmark1 mark_24g ,power_ctrl_txpower_decrs_next -078a 58000075 setarg rssi_dis_min_ble +0785 6808cd7d fetcht 1 ,mem_rssi_avg_received +0786 58000077 setarg rssi_dis_min_24g +0787 c5130789 bmark1 mark_24g ,power_ctrl_txpower_decrs_next +0788 58000075 setarg rssi_dis_min_ble power_ctrl_txpower_decrs_next: -078b 98467c00 isub temp ,null -078c 24610000 nrtn positive -078d 6800cd7f fetch 1 ,mem_power_ctrl_level -078e c000079c beq 0 ,power_ctrl_decrs_level0 -078f 1fe0ffff increase -1 ,pdata -0790 6000cd7f store 1 ,mem_power_ctrl_level -0791 c000079c beq 0 ,power_ctrl_decrs_level0 +0789 98467c00 isub temp ,null +078a 24610000 nrtn positive +078b 6800cd7f fetch 1 ,mem_power_ctrl_level +078c c000079a beq 0 ,power_ctrl_decrs_level0 +078d 1fe0ffff increase -1 ,pdata +078e 6000cd7f store 1 ,mem_power_ctrl_level +078f c000079a beq 0 ,power_ctrl_decrs_level0 power_ctrl_decrs_level1: power_ctrl_incrs_level1: -0792 7041de00 jam tx_power_0db ,mem_tx_power -0793 20600000 rtn +0790 7041de00 jam tx_power_0db ,mem_tx_power +0791 20600000 rtn power_ctrl_txpower_incrs_force: -0794 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt +0792 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt power_ctrl_txpower_incrs: -0795 6800cd7f fetch 1 ,mem_power_ctrl_level -0796 c001079a beq 2 ,power_ctrl_incrs_level2 -0797 1fe0fe01 increase 1 ,pdata -0798 6000cd7f store 1 ,mem_power_ctrl_level -0799 c0008792 beq 1 ,power_ctrl_incrs_level1 +0793 6800cd7f fetch 1 ,mem_power_ctrl_level +0794 c0010798 beq 2 ,power_ctrl_incrs_level2 +0795 1fe0fe01 increase 1 ,pdata +0796 6000cd7f store 1 ,mem_power_ctrl_level +0797 c0008790 beq 1 ,power_ctrl_incrs_level1 power_ctrl_incrs_level2: -079a 7041de02 jam tx_power_5db ,mem_tx_power -079b 20600000 rtn +0798 7041de02 jam tx_power_5db ,mem_tx_power +0799 20600000 rtn power_ctrl_decrs_level0: -079c 7041de04 jam tx_power_f5db ,mem_tx_power -079d 20600000 rtn +079a 7041de04 jam tx_power_f5db ,mem_tx_power +079b 20600000 rtn p_set_freq_tx: -079e 60088017 storet 1 ,mem_last_freq -079f 1840a200 add temp ,0 ,rega -07a0 20402981 call rf_write_freq -07a1 58000500 setarg param_pll_setup -07a2 20402a8f call sleep +079c 60088017 storet 1 ,mem_last_freq +079d 1840a200 add temp ,0 ,rega +079e 20402981 call rf_write_freq +079f 58000500 setarg param_pll_setup +07a0 20402a8f call sleep p_rf_tx_enable: -07a3 70890601 jam 0x1 ,rfen_adc -07a4 7089003c jam 0x3c ,rfen_rx -07a5 708901e0 jam 0xe0 ,rfen_tx -07a6 2000000a nop 10 -07a7 70890201 jam 0x01 ,rfen_mdm -07a8 7089023d jam 0x3d ,rfen_mdm +07a1 70890601 jam 0x1 ,rfen_adc +07a2 7089003c jam 0x3c ,rfen_rx +07a3 708901e0 jam 0xe0 ,rfen_tx +07a4 2000000a nop 10 +07a5 70890201 jam 0x01 ,rfen_mdm +07a6 7089023d jam 0x3d ,rfen_mdm +07a7 2000000a nop 10 +07a8 708903b7 jam 0xb7 ,rfen_sn 07a9 2000000a nop 10 -07aa 708903b7 jam 0xb7 ,rfen_sn -07ab 2000000a nop 10 -07ac 7089027d jam 0x7d ,rfen_mdm -07ad 6800c1de fetch 1 ,mem_tx_power -07ae c00107b6 beq tx_power_5db ,p_set_tx_power_5db -07af c00207be beq tx_power_f5db ,p_set_tx_power_f5db -07b0 c01007c8 beq tx_power_pair ,p_set_tx_power_pair +07aa 7089027d jam 0x7d ,rfen_mdm +07ab 6800c1de fetch 1 ,mem_tx_power +07ac c00107b4 beq tx_power_5db ,p_set_tx_power_5db +07ad c00207bc beq tx_power_f5db ,p_set_tx_power_f5db +07ae c01007c6 beq tx_power_pair ,p_set_tx_power_pair p_set_tx_power_0db: -07b1 204007c3 call p_rx_low_sens -07b2 708955d0 jam 0xd0 ,0x8955 -07b3 708956e0 jam 0xe0 ,0x8956 -07b4 7089586c jam 0x6c ,0x8958 -07b5 2020294b branch set_tx_power_0db +07af 204007c1 call p_rx_low_sens +07b0 708955d0 jam 0xd0 ,0x8955 +07b1 708956e0 jam 0xe0 ,0x8956 +07b2 7089586c jam 0x6c ,0x8958 +07b3 2020294b branch set_tx_power_0db p_set_tx_power_5db: -07b6 70894cfb jam 0xfb ,0x894c -07b7 70894def jam 0xef ,0x894d -07b8 70894eec jam 0xec ,0x894e -07b9 70894f5e jam 0x5e ,0x894f -07ba 708955d0 jam 0xd0 ,0x8955 -07bb 708956e0 jam 0xe0 ,0x8956 -07bc 7089583c jam 0x3c ,0x8958 -07bd 20202953 branch set_tx_power_5db +07b4 70894cfb jam 0xfb ,0x894c +07b5 70894def jam 0xef ,0x894d +07b6 70894eec jam 0xec ,0x894e +07b7 70894f5e jam 0x5e ,0x894f +07b8 708955d0 jam 0xd0 ,0x8955 +07b9 708956e0 jam 0xe0 ,0x8956 +07ba 7089583c jam 0x3c ,0x8958 +07bb 20202953 branch set_tx_power_5db p_set_tx_power_f5db: -07be 204007c3 call p_rx_low_sens -07bf 708955d0 jam 0xd0 ,0x8955 -07c0 708956c0 jam 0xc0 ,0x8956 -07c1 7089586c jam 0x6c ,0x8958 -07c2 2020295b branch set_tx_power_f5db +07bc 204007c1 call p_rx_low_sens +07bd 708955d0 jam 0xd0 ,0x8955 +07be 708956c0 jam 0xc0 ,0x8956 +07bf 7089586c jam 0x6c ,0x8958 +07c0 2020295b branch set_tx_power_f5db p_rx_low_sens: -07c3 70894c5b jam 0x5b ,0x894c -07c4 70894d96 jam 0x96 ,0x894d -07c5 70894e2c jam 0x2c ,0x894e -07c6 70894f46 jam 0x46 ,0x894f -07c7 20600000 rtn +07c1 70894c5b jam 0x5b ,0x894c +07c2 70894d96 jam 0x96 ,0x894d +07c3 70894e2c jam 0x2c ,0x894e +07c4 70894f46 jam 0x46 ,0x894f +07c5 20600000 rtn p_set_tx_power_pair: -07c8 708956c0 jam 0xc0 ,0x8956 -07c9 708955d0 jam 0xd0 ,0x8955 -07ca 20600000 rtn +07c6 708956c0 jam 0xc0 ,0x8956 +07c7 708955d0 jam 0xd0 ,0x8955 +07c8 20600000 rtn p_shutdown_radio: -07cb 18002a08 force 8 ,radio_ctrl -07cc 202028fa branch shutdown_radio + 1 +07c9 18002a08 force 8 ,radio_ctrl +07ca 202028fa branch shutdown_radio + 1 p_zcode_entrance: -07cd 680891c5 fetcht 1 ,mem_zcode_temp_param0 -07ce 18518400 rshift4 temp ,temp -07cf 6800cb56 fetch 1 ,mem_zcode_current_number -07d0 98467c00 isub temp ,null -07d1 202287ec branch p_zcode_run ,zero -07d2 6008cb56 storet 1 ,mem_zcode_current_number -07d3 18408401 increase 1 ,temp -07d4 58000100 setarg zcode_buff_size -07d5 984f8400 imul32 temp ,temp -07d6 6801cb57 fetch 3 ,mem_xip_flash_offset -07d7 98467e00 isub temp ,pdata -07d8 6809cb5a fetcht 3 ,mem_flash_start_addr -07d9 9840fe00 iadd temp ,pdata -07da 1fe0fffb increase -5 ,pdata -07db 6001cb5d store 3 ,mem_flash_address -07dc 20400358 call p_flash_release_deep_power_down +07cb 680891c5 fetcht 1 ,mem_zcode_temp_param0 +07cc 18518400 rshift4 temp ,temp +07cd 6800cb56 fetch 1 ,mem_zcode_current_number +07ce 98467c00 isub temp ,null +07cf 202287ea branch p_zcode_run ,zero +07d0 6008cb56 storet 1 ,mem_zcode_current_number +07d1 18408401 increase 1 ,temp +07d2 58000100 setarg zcode_buff_size +07d3 984f8400 imul32 temp ,temp +07d4 6801cb57 fetch 3 ,mem_xip_flash_offset +07d5 98467e00 isub temp ,pdata +07d6 6809cb5a fetcht 3 ,mem_flash_start_addr +07d7 9840fe00 iadd temp ,pdata +07d8 1fe0fffb increase -5 ,pdata +07d9 6001cb5d store 3 ,mem_flash_address +07da 20400354 call p_flash_release_deep_power_down p_zcode_read_loop: -07dd 6801cb5d fetch 3 ,mem_flash_address -07de d8400100 arg zcode_buff_size ,temp -07df da201f00 arg mem_zcode_buff ,rega -07e0 20406562 call spid_read_flash -07e1 68021f00 fetch 4 ,mem_zcode_buff -07e2 680a4b60 fetcht 4 ,mem_zcode_head -07e3 98467c00 isub temp ,null -07e4 242287dd nbranch p_zcode_read_loop ,zero -07e5 20400319 call p_mouse_spi_init -07e6 58001f00 setarg mem_zcode_buff -07e7 60014199 store 2 ,mem_patch_ptr -07e8 70419b40 jam zcode_code_size ,mem_patch_len -07e9 204064ca call load_ucode -07ea 58000000 setarg 0 -07eb 60024199 store 4 ,mem_patch_ptr +07db 6801cb5d fetch 3 ,mem_flash_address +07dc d8400100 arg zcode_buff_size ,temp +07dd da201f00 arg mem_zcode_buff ,rega +07de 20406562 call spid_read_flash +07df 68021f00 fetch 4 ,mem_zcode_buff +07e0 680a4b60 fetcht 4 ,mem_zcode_head +07e1 98467c00 isub temp ,null +07e2 242287db nbranch p_zcode_read_loop ,zero +07e3 20400315 call p_mouse_spi_init +07e4 58001f00 setarg mem_zcode_buff +07e5 60014199 store 2 ,mem_patch_ptr +07e6 70419b40 jam zcode_code_size ,mem_patch_len +07e7 204064ca call load_ucode +07e8 58000000 setarg 0 +07e9 60024199 store 4 ,mem_patch_ptr p_zcode_run: -07ec 680091c5 fetch 1 ,mem_zcode_temp_param0 -07ed 20200001 branch p_zcode +07ea 680091c5 fetch 1 ,mem_zcode_temp_param0 +07eb 20200001 branch p_zcode org 0x2000 start: @@ -35445,7 +35443,7 @@ z_mouse4_0_event_bb_disconn: 2000e 204041c1 call mouse_le_clean_connect_flag 2000f 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason -20010 c28504ee bbit1 app_disc_pb_button ,p_mouse_select_device_button_up +20010 c28504ec bbit1 app_disc_pb_button ,p_mouse_select_device_button_up 20011 202041f7 branch mouse4_0_event_bb_disconn + 2 z_mouse_event_light_state_pairing: @@ -35457,7 +35455,7 @@ 20015 68014682 fetch 2 ,mem_ui_state_map 20016 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 20017 204033a9 call app_disconn_reason_clear -20018 204005bd call p_mouse_check_key_gpio +20018 204005bb call p_mouse_check_key_gpio 20019 20608000 rtn true 2001a 202033a7 branch app_bb_hibernate @@ -35483,7 +35481,7 @@ z_hid_rx_process_hid_control: 2002b 18427e00 copy temp ,pdata -2002c c002846b beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug +2002c c0028469 beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug 2002d 20204d41 branch hid_rx_process_hid_control + 2 org 0x30001 @@ -35496,7 +35494,7 @@ z_mouse4_0_check_reconn_target: 30006 704b6c01 jam 1 ,mem_le_send_security_request_flag -30007 2040076e call p_mouse_mode_bt_device_multi_led_on +30007 2040076c call p_mouse_mode_bt_device_multi_led_on 30008 7047a101 jam 1 ,mem_mouse_le_reconnect_flag 30009 680146a8 fetch 2 ,mem_mouse_direct_timeout 3000a 6808cbb3 fetcht 1 ,mem_mouse_fast_conn_flag @@ -35507,11 +35505,11 @@ z_mouse4_0_check_reconn_target_next: 3000e 600146ae store 2 ,mem_mouse_direct_timer 3000f 20403418 call app_lpm_mult_disable -30010 204002c0 call p_le_check_adv_flag +30010 204002bc call p_le_check_adv_flag 30011 58000004 setarg adv_flag_bredr_not_supported 30012 e0c08000 istore 1 ,contr 30013 d8c04390 arg mem_le_scan_data ,contr -30014 204005ee call p_le_adv_data_update +30014 204005ec call p_le_adv_data_update 30015 20207df4 branch check_51cmd_adv z_send_lmp_escape: @@ -35542,7 +35540,7 @@ 30026 6800804b fetch 1 ,mem_op 30027 793ffe03 set0 op_disconn ,pdata 30028 6000804b store 1 ,mem_op -30029 2020048e branch p_mouse_sensor_powerdown +30029 2020048c branch p_mouse_sensor_powerdown z_send_lmp_accepted: 3002a 18007e02 force 2 ,pdata @@ -35703,23 +35701,23 @@ z_mouse_start_discovery: 60003 704b6c00 jam 0 ,mem_le_send_security_request_flag -60004 204002b8 call p_mouse_tx_power_init +60004 204002b4 call p_mouse_tx_power_init 60005 70479e00 jam 0 ,mem_mouse_clear_sensor_data_flag 60006 68014682 fetch 2 ,mem_ui_state_map 60007 c2858010 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom -60008 2040035a call p_mouse_load_random_addr_increase_count +60008 20400356 call p_mouse_load_random_addr_increase_count 60009 680947c4 fetcht 2 ,mem_random_addr_increase_count 6000a 18408401 increase 1 ,temp 6000b 600947c4 storet 2 ,mem_random_addr_increase_count 6000c 600944a1 storet 2 ,mem_le_lap + 1 -6000d 20400312 call p_mouse_store_random_addr_increase_count +6000d 2040030e call p_mouse_store_random_addr_increase_count 6000e 180a7e00 random pdata 6000f 6000c4a0 store 1 ,mem_le_lap z_mouse_start_discovery_norandom: 60010 6801cbb0 fetch 3 ,mem_le_lap_high_3b 60011 6001c4a3 store 3 ,mem_le_lap + 3 -60012 204002c7 call p_mouse_le_fast_conn_disable +60012 204002c3 call p_mouse_le_fast_conn_disable 60013 20403418 call app_lpm_mult_disable 60014 68014687 fetch 2 ,mem_discovery_timeout 60015 600146ac store 2 ,mem_mouse_discovery_timer @@ -35738,15 +35736,15 @@ 60022 2040fddd call check_51cmd_start_discovery ,true 60023 704b5100 jam 0 ,mem_mouse_bt_reconnect_flag 60024 204042c4 call mouse_start_discovery_norandom + 13 -60025 20200773 branch p_mouse_discovery_multi_led_blink +60025 20200771 branch p_mouse_discovery_multi_led_blink z_check_51cmd_adv: 60026 7047a100 jam 0 ,mem_mouse_le_reconnect_flag -60027 204002c0 call p_le_check_adv_flag +60027 204002bc call p_le_check_adv_flag 60028 58000005 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable 60029 e0c08000 istore 1 ,contr 6002a d8c04b12 arg mem_le_adv_swift_pair ,contr -6002b 204005ee call p_le_adv_data_update +6002b 204005ec call p_le_adv_data_update 6002c 20207df4 branch check_51cmd_adv org 0x70001 @@ -35758,13 +35756,13 @@ z_g24_start_24g_mode: 70005 2040000e call z_g24_factory_check -70006 2034036a branch p_g24_auto_pair_start ,user +70006 20340366 branch p_g24_auto_pair_start ,user 70007 79200026 set1 mark_24g ,mark 70008 6800cd93 fetch 1 ,mem_24g_conn_sm 70009 79207e02 set1 state_24g_reconn ,pdata 7000a 6000cd93 store 1 ,mem_24g_conn_sm -7000b 2040018d call p_g24_syncword_crc8 -7000c 20400121 call p_g24_ch +7000b 20400189 call p_g24_syncword_crc8 +7000c 2040011f call p_g24_ch 7000d 2020001b branch z_g24_auto_pair_timeout_init z_g24_factory_check: @@ -35805,49 +35803,50 @@ 70028 6000c6b4 store 1 ,mem_mouse_send_blank_timer 70029 60014c70 store 2 ,mem_24g_check_dongle_times 7002a 204042ca call mouse_stop_discovery -7002b 2020036a branch p_g24_auto_pair_start +7002b 20200366 branch p_g24_auto_pair_start org 0x80001 z_entrance7: 80001 c0380004 beq zcode_70 ,z_g24_reconn_dispatch -80002 c0388019 beq zcode_71 ,z_mouse_irtual_cable_unplug +80002 c038801a beq zcode_71 ,z_mouse_irtual_cable_unplug 80003 20600000 rtn z_g24_reconn_dispatch: 80004 6800cd8e fetch 1 ,mem_24g_stop_g24_mode 80005 c000add4 beq 1 ,g24_stop_24g_mode -80006 20400010 call z_g24_tx_attemp_data_prep -80007 20400159 call p_g24_transmit_receive_ack -80008 242c0121 nbranch p_g24_ch ,sync -80009 24378121 nbranch p_g24_ch ,user3 +80006 20400011 call z_g24_tx_attemp_data_prep +80007 20400157 call p_g24_transmit_receive_ack +80008 242c011f nbranch p_g24_ch ,sync +80009 2437811f nbranch p_g24_ch ,user3 8000a 6800cd93 fetch 1 ,mem_24g_conn_sm 8000b 793ffe02 set0 state_24g_reconn ,pdata 8000c 6000cd93 store 1 ,mem_24g_conn_sm z_g24_tx_attemp_dongle_succ: -8000d 20402f20 call g24_app_tx_attempt_success -8000e 20400156 call p_g24_txbuf_clear -8000f 20200377 branch p_g24_transmit_by_interrupt_enable +8000d 704b6700 jam 0 ,mem_mouse_long_mult_flag +8000e 20402f20 call g24_app_tx_attempt_success +8000f 20400154 call p_g24_txbuf_clear +80010 20200373 branch p_g24_transmit_by_interrupt_enable z_g24_tx_attemp_data_prep: -80010 70119eff jam 0xff ,mem_24g_common_temp -80011 6800cc44 fetch 1 ,mem_24g_data_type -80012 6000919f store 1 ,mem_24g_common_temp + 1 -80013 68024c7a fetch 4 ,mem_24g_device_addr -80014 600211a0 store 4 ,mem_24g_common_temp + 2 -80015 d8400006 arg 6 ,temp -80016 da20119e arg mem_24g_common_temp ,rega -80017 204001a7 call p_g24_put_data_in_buff -80018 202001b9 branch p_g24_transmit_prep +80011 70119eff jam 0xff ,mem_24g_common_temp +80012 6800cc44 fetch 1 ,mem_24g_data_type +80013 6000919f store 1 ,mem_24g_common_temp + 1 +80014 68024c7a fetch 4 ,mem_24g_device_addr +80015 600211a0 store 4 ,mem_24g_common_temp + 2 +80016 d8400006 arg 6 ,temp +80017 da20119e arg mem_24g_common_temp ,rega +80018 204001a3 call p_g24_put_data_in_buff +80019 202001b5 branch p_g24_transmit_prep z_mouse_irtual_cable_unplug: -80019 5fffffff setarg -1 -8001a 60030040 store 6 ,mem_plap -8001b 70018533 jam rec_3_mode ,mem_record_bt_mode -8001c 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag -8001d 204042fb call mouse_before_store_reconn_info -8001e 704721ff jam 0xff ,mem_device1_type -8001f 20200306 branch p_mouse_store_flash_device_info +8001a 5fffffff setarg -1 +8001b 60030040 store 6 ,mem_plap +8001c 70018533 jam rec_3_mode ,mem_record_bt_mode +8001d 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag +8001e 204042fb call mouse_before_store_reconn_info +8001f 704721ff jam 0xff ,mem_device1_type +80020 20200302 branch p_mouse_store_flash_device_info org 0x90001 z_entrance8: @@ -35881,17 +35880,17 @@ 90016 20405839 call le_set_justwork 90017 2040582c call le_set_fixed_ltk 90018 20405818 call le_set_config_read_authentication -90019 204005ea call p_le_addr_random_config -9001a 204002fb call p_mouse_load_flash_info_check +90019 204005e8 call p_le_addr_random_config +9001a 204002f7 call p_mouse_load_flash_info_check 9001b df200003 arg 3 ,loopcnt 9001c d8c0473f arg mem_device2_addr ,contr -9001d 2040036d call p_pdata_0xff_check -9001e 243402c7 nbranch p_mouse_le_fast_conn_disable ,user +9001d 20400369 call p_pdata_0xff_check +9001e 243402c3 nbranch p_mouse_le_fast_conn_disable ,user 9001f df200003 arg 3 ,loopcnt 90020 d8c0475c arg mem_device3_addr ,contr -90021 2040036d call p_pdata_0xff_check -90022 243402c7 nbranch p_mouse_le_fast_conn_disable ,user -90023 204002c9 call p_mouse_fast_conn_init +90021 20400369 call p_pdata_0xff_check +90022 243402c3 nbranch p_mouse_le_fast_conn_disable ,user +90023 204002c5 call p_mouse_fast_conn_init 90024 20600000 rtn z_mouse_bt_sdp_update: @@ -35964,8 +35963,8 @@ a0019 7011a400 jam 0 ,mem_24g_common_temp + 6 a001a da20119e arg mem_24g_common_temp ,rega a001b d8400007 arg 7 ,temp -a001c 204001a7 call p_g24_put_data_in_buff -a001d 20400136 call p_g24_txdata_enable_tx +a001c 204001a3 call p_g24_put_data_in_buff +a001d 20400134 call p_g24_txdata_enable_tx a001e 20207fe7 branch enable_user z_g24_paring_mode: @@ -35978,22 +35977,22 @@ z_g24_pairing_sm_1_waiting_ack: a0025 704c5302 jam state_24g_pairing_2 ,mem_24g_pairing_sm -a0026 202000fa branch p_g24_transmit_abandon +a0026 202000f8 branch p_g24_transmit_abandon z_g24_pairing_sm_2_waiting_ack: a0027 704c5303 jam state_24g_pairing_3 ,mem_24g_pairing_sm -a0028 202000fa branch p_g24_transmit_abandon +a0028 202000f8 branch p_g24_transmit_abandon z_g24_pairing_sm_3_waiting_ack: a0029 704c53ff jam state_24g_pairing_success ,mem_24g_pairing_sm a002a 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp a002b 20407d86 call ui_ipc_send_event a002c 68024c23 fetch 4 ,mem_24g_rxpayload + 2 -a002d 2040018c call p_g24_update_addr_and_synccrc8 -a002e 202000fa branch p_g24_transmit_abandon +a002d 20400188 call p_g24_update_addr_and_synccrc8 +a002e 202000f8 branch p_g24_transmit_abandon z_mouse_24g_pairing_complete: -a002f 20400487 call p_mouse_24g_no_data_timer_init +a002f 20400485 call p_mouse_24g_no_data_timer_init a0030 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable a0031 d8e00003 arg mosue_24g_pairing_flag ,queue a0032 204043d2 call mouse_disable_function_flag @@ -36001,10 +36000,10 @@ a0034 60014707 store 2 ,mem_24g_pairing_timer_count a0035 7046a700 jam 0 ,mem_mouse_move_flag a0036 2040405d call mouse_read_sensor_common -a0037 204002b8 call p_mouse_tx_power_init +a0037 204002b4 call p_mouse_tx_power_init a0038 68024c6b fetch 4 ,mem_24g_addr a0039 6002477b store 4 ,mem_mouse_24g_addr -a003a 20200306 branch p_mouse_store_flash_device_info +a003a 20200302 branch p_mouse_store_flash_device_info org 0xb0001 z_entrancea: @@ -36017,12 +36016,12 @@ z_mouse_24g_attempt_fail: b0007 704d8300 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -b0008 204002b8 call p_mouse_tx_power_init -b0009 204001a2 call p_g24_check_51cmd_stop_24g +b0008 204002b4 call p_mouse_tx_power_init +b0009 2040019e call p_g24_check_51cmd_stop_24g b000a 7041bd00 jam 0 ,mem_link_key_exists b000b 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count b000c 247a0000 nrtn blank -b000d 20400269 call p_mouse_setgpio_hibernate +b000d 20400265 call p_mouse_setgpio_hibernate b000e 2020340a branch app_enter_hibernate z_mouse_le_conn_param_update_rsp_recieved: @@ -36035,7 +36034,7 @@ b0015 58000009 setarg le_interval_11_25ms b0016 60014496 store 2 ,mem_le_interval_min b0017 60014498 store 2 ,mem_le_interval_min + 2 -b0018 20400463 call p_app_updata_le_param +b0018 20400461 call p_app_updata_le_param b0019 7047c601 jam le_lpm_disable ,mem_mouse_le_conn_param_reject b001a 20600000 rtn @@ -36052,7 +36051,7 @@ z_mouse_le_bb_disconnected: b0022 6800cbba fetch 1 ,mem_select_device_button_statue_bt_discovery -b0023 205a050a call p_mouse_le_bb_disconnected_led_blink_set ,blank +b0023 205a0508 call p_mouse_le_bb_disconnected_led_blink_set ,blank b0024 704bba00 jam off ,mem_select_device_button_statue_bt_discovery b0025 704b6a00 jam 0 ,mem_mouse_le_bb_connected_flag b0026 58000007 setarg le_interval_8_75ms @@ -36060,9 +36059,9 @@ b0028 60014498 store 2 ,mem_le_interval_min + 2 b0029 7047c600 jam le_lpm_enable ,mem_mouse_le_conn_param_reject b002a 70479e00 jam 0 ,mem_mouse_clear_sensor_data_flag -b002b 204003ab call p_mouse_data_init +b002b 204003a9 call p_mouse_data_init b002c 20405816 call le_clr_config_more_data -b002d 20400306 call p_mouse_store_flash_device_info +b002d 20400302 call p_mouse_store_flash_device_info b002e 202041d9 branch mouse_bb_disconnected z_mouse_before_hibernate: @@ -36071,15 +36070,15 @@ b0031 6012004c hstore 4 ,core_lpm_reg b0032 20402c21 call lpm_write_ctrl b0033 204074bd call disable_authrom -b0034 2040075d call p_mouse_multi_led_blink_off -b0035 20400306 call p_mouse_store_flash_device_info +b0034 2040075b call p_mouse_multi_led_blink_off +b0035 20400302 call p_mouse_store_flash_device_info b0036 20403e9f call mouse_before_hibernate_wheel_gpio_set -b0037 20400269 call p_mouse_setgpio_hibernate -b0038 20400351 call p_flash_deep_power_down +b0037 20400265 call p_mouse_setgpio_hibernate +b0038 2040034d call p_flash_deep_power_down b0039 68108081 hfetch 1 ,core_gpio_sel1 b003a 1fe17ef7 and pdata ,0xf7 ,pdata b003b 60108081 hstore 1 ,core_gpio_sel1 -b003c 20200281 branch p_mouse_t_wheel_clear_wake +b003c 2020027d branch p_mouse_t_wheel_clear_wake org 0xc0001 z_entranceb: @@ -36110,7 +36109,7 @@ c0013 20200016 branch z_mouse_le_ll_enable_start_enc_flag z_mouse_le_ll_reconn_start_encryt: -c0014 20400463 call p_app_updata_le_param +c0014 20400461 call p_app_updata_le_param c0015 7046c60a jam 10 ,mem_le_start_encrypt_timer z_mouse_le_ll_enable_start_enc_flag: @@ -36120,11 +36119,11 @@ z_mouse_bb_event_disconnected: c0018 704bb901 jam 1 ,mem_mouse_connected_state c0019 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count -c001a 2040076b call p_mouse_dpi_multi_led_blink +c001a 20400769 call p_mouse_dpi_multi_led_blink c001b 704b0100 jam 0 ,mem_bt_rcvd_switch_req_accept c001c 704b0300 jam 0 ,mem_bt_send_lmp_setup_complete c001d 704b0c00 jam 0 ,mem_mouse_bt_send_first_package_flag -c001e 20400306 call p_mouse_store_flash_device_info +c001e 20400302 call p_mouse_store_flash_device_info c001f 202041d9 branch mouse_bb_disconnected org 0xd0001 @@ -36140,12 +36139,12 @@ d0007 600211a0 store 4 ,mem_24g_common_temp + 2 d0008 d8400006 arg 6 ,temp d0009 da20119e arg mem_24g_common_temp ,rega -d000a 204001a7 call p_g24_put_data_in_buff -d000b 204001b9 call p_g24_transmit_prep -d000c 20400159 call p_g24_transmit_receive_ack -d000d 242c0025 nbranch z_g24_pair_txdata_retry ,sync -d000e 24378025 nbranch z_g24_pair_txdata_retry ,user3 -d000f 20400181 call p_g24_ackpayload_parse +d000a 204001a3 call p_g24_put_data_in_buff +d000b 204001b5 call p_g24_transmit_prep +d000c 20400157 call p_g24_transmit_receive_ack +d000d 242c0026 nbranch z_g24_pair_txdata_retry ,sync +d000e 24378026 nbranch z_g24_pair_txdata_retry ,user3 +d000f 2040017d call p_g24_ackpayload_parse d0010 68024c6b fetch 4 ,mem_24g_addr d0011 680a4d88 fetcht 4 ,mem_24g_allpowerful_addr d0012 98467c00 isub temp ,null @@ -36155,57 +36154,58 @@ z_g24_auto_pair_skip_rx_length: d0016 704d9300 jam 0 ,mem_24g_conn_sm -d0017 204002b8 call p_mouse_tx_power_init +d0017 204002b4 call p_mouse_tx_power_init d0018 68024c6b fetch 4 ,mem_24g_addr d0019 680a4c4f fetcht 4 ,mem_24g_paring_addr d001a 98467c00 isub temp ,null -d001b 2022819a branch p_g24_start_pairing_sm1 ,zero +d001b 20228196 branch p_g24_start_pairing_sm1 ,zero d001c 68024c6b fetch 4 ,mem_24g_addr d001d 680a4c7a fetcht 4 ,mem_24g_device_addr d001e 98467c00 isub temp ,null -d001f 20428023 call z7_g24_store_dongle_addr ,zero -d0020 20402f20 call g24_app_tx_attempt_success -d0021 20400156 call p_g24_txbuf_clear -d0022 20200377 branch p_g24_transmit_by_interrupt_enable +d001f 20428024 call z7_g24_store_dongle_addr ,zero +d0020 704b6700 jam 0 ,mem_mouse_long_mult_flag +d0021 20402f20 call g24_app_tx_attempt_success +d0022 20400154 call p_g24_txbuf_clear +d0023 20200373 branch p_g24_transmit_by_interrupt_enable z7_g24_store_dongle_addr: -d0023 68024c23 fetch 4 ,mem_24g_rxpayload + 2 -d0024 2020018c branch p_g24_update_addr_and_synccrc8 +d0024 68024c23 fetch 4 ,mem_24g_rxpayload + 2 +d0025 20200188 branch p_g24_update_addr_and_synccrc8 z_g24_pair_txdata_retry: z_g24_pair_txdata_switch: -d0025 6800cd81 fetch 1 ,mem_24g_auto_paring_switch -d0026 1fe0fe01 increase 1 ,pdata -d0027 1fe17e03 and_into 3 ,pdata -d0028 6000cd81 store 1 ,mem_24g_auto_paring_switch -d0029 c000002c beq 0 ,z_g24_auto_pair_first_attemp -d002a c0010036 beq 2 ,z_g24_auto_pair_all_powerful -d002b 20200188 branch p_g24_pair_init +d0026 6800cd81 fetch 1 ,mem_24g_auto_paring_switch +d0027 1fe0fe01 increase 1 ,pdata +d0028 1fe17e03 and_into 3 ,pdata +d0029 6000cd81 store 1 ,mem_24g_auto_paring_switch +d002a c000002d beq 0 ,z_g24_auto_pair_first_attemp +d002b c0010037 beq 2 ,z_g24_auto_pair_all_powerful +d002c 20200184 branch p_g24_pair_init z_g24_auto_pair_first_attemp: -d002c 204002b8 call p_mouse_tx_power_init -d002d 68024c7a fetch 4 ,mem_24g_device_addr -d002e 60024c6b store 4 ,mem_24g_addr -d002f 6800cd91 fetch 1 ,mem_24g_pair_current_ch_num -d0030 6000cc4e store 1 ,mem_24g_current_ch_number -d0031 20400034 call z_g24_ch_syncword_crc8_init -d0032 6008cd91 storet 1 ,mem_24g_pair_current_ch_num -d0033 20600000 rtn +d002d 204002b4 call p_mouse_tx_power_init +d002e 68024c7a fetch 4 ,mem_24g_device_addr +d002f 60024c6b store 4 ,mem_24g_addr +d0030 6800cd91 fetch 1 ,mem_24g_pair_current_ch_num +d0031 6000cc4e store 1 ,mem_24g_current_ch_number +d0032 20400035 call z_g24_ch_syncword_crc8_init +d0033 6008cd91 storet 1 ,mem_24g_pair_current_ch_num +d0034 20600000 rtn z_g24_ch_syncword_crc8_init: -d0034 2040018d call p_g24_syncword_crc8 -d0035 20200121 branch p_g24_ch +d0035 20400189 call p_g24_syncword_crc8 +d0036 2020011f branch p_g24_ch z_g24_auto_pair_all_powerful: -d0036 7041de20 jam tx_power_pair ,mem_tx_power -d0037 68024d88 fetch 4 ,mem_24g_allpowerful_addr -d0038 60024c6b store 4 ,mem_24g_addr -d0039 6800cd92 fetch 1 ,mem_24g_powerful_current_ch_num -d003a 6000cc4e store 1 ,mem_24g_current_ch_number -d003b 20400034 call z_g24_ch_syncword_crc8_init -d003c 6008cd92 storet 1 ,mem_24g_powerful_current_ch_num -d003d 20600000 rtn +d0037 7041de20 jam tx_power_pair ,mem_tx_power +d0038 68024d88 fetch 4 ,mem_24g_allpowerful_addr +d0039 60024c6b store 4 ,mem_24g_addr +d003a 6800cd92 fetch 1 ,mem_24g_powerful_current_ch_num +d003b 6000cc4e store 1 ,mem_24g_current_ch_number +d003c 20400035 call z_g24_ch_syncword_crc8_init +d003d 6008cd92 storet 1 ,mem_24g_powerful_current_ch_num +d003e 20600000 rtn org 0xe0001 z_entranced: @@ -36215,7 +36215,7 @@ z_mouse_le_bb_event_connected: e0004 704bb900 jam 0 ,mem_mouse_connected_state -e0005 204002d8 call p_mouse_init_sensor_reset +e0005 204002d4 call p_mouse_init_sensor_reset e0006 20403410 call app_ble_store_reconn_info e0007 704b6a01 jam 1 ,mem_mouse_le_bb_connected_flag e0008 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag @@ -36223,11 +36223,11 @@ e000a 704b6b14 jam 0x14 ,mem_mouse_send_secutiry_request_timer z_mouse_le_bb_event_connected_next: -e000b 204003ab call p_mouse_data_init +e000b 204003a9 call p_mouse_data_init e000c 202041c3 branch mouse_le_bb_event_connected z_g24_transmit_by_interrupt: -e000d 20400238 call p_g24_timer_check +e000d 20400234 call p_g24_timer_check e000e 24740000 nrtn user e000f 20400022 call p_g24_interval_calibrate e0010 68014d84 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count @@ -36236,7 +36236,7 @@ e0013 68094d86 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init e0014 98467c00 isub temp ,null e0015 20428017 call p_g24_transmit_by_interrupt_exit ,zero -e0016 2020009f branch p_g24_transmit_process +e0016 2020009d branch p_g24_transmit_process p_g24_transmit_by_interrupt_exit: e0017 704d8300 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt Index: output/ramcode.rom =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/ramcode.rom (revision 5164) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/ramcode.rom (working copy) @@ -1,48 +1,48 @@ 20200040 -204003ab +204003a9 6800c1de 6000ccfa -2040077b +20400779 6800c685 6000cb47 6800cb33 6000cb34 204043ca -20400319 +20400315 20400010 20400023 20400063 7011c580 -202007cd -58000374 +202007cb +58000370 60014d74 -5800038e +5800038a 600141ef -580006b1 +580006af 600141f9 -580003c6 +580003c4 600141f1 -58000255 +58000251 600141ed -5800044d +5800044b 600141f5 -580003ee +580003ec 600141f3 -58000488 +58000486 600141eb -58000491 +5800048f 600141fd 20600000 58000019 60014d86 2455802d -204002d0 -2040048e +204002cc +2040048c 6800c71f 6000c71e 6800c241 c3810000 -2020055e +2020055c 58000177 60014d86 20600000 @@ -64,55 +64,55 @@ 20000001 c2840055 c000806f -c0010081 -c04287cb -c044879e -c02886e7 -c05386ec -c0568704 +c001007f +c04287c9 +c044879c +c02886e5 +c05386ea +c0568702 c065b3e4 -c0748715 -c050808a -c058808f -c0590099 -c0620296 -c0718560 -c07203f1 -c0730586 -c07505e7 -c07585ec -c07605f2 +c0748713 +c0508088 +c058808d +c0590097 +c0620292 +c071855e +c07203ef +c0730584 +c07505e5 +c07585ea +c07605f0 20202a8e -c01c85f8 -c0218600 -c0250606 -c02b8609 -c02c860b -c031860d -c033063c -c0338653 -c035069d -c03b86a7 -c04606b3 -c04686bf -c07d0719 +c01c85f6 +c02185fe +c0250604 +c02b8607 +c02c8609 +c031860b +c033063a +c0338651 +c035069b +c03b86a5 +c04606b1 +c04686bd +c07d0717 20202a8e 704b6d00 -204004df +204004dd 24608000 20407ec1 -204004df +204004dd 24608000 704b6d01 20600000 6800cb6d 207a0000 -204004ff -20200306 +204004fd +20200302 d8a009ae df20000c 20407ed4 -20400385 +20400381 6810807b 1fe17e3f 6010807b @@ -124,8 +124,6 @@ 20405cf6 2455ac65 20407ccd -d8400018 -204005dc 2020200c 2055b2e3 2040756a @@ -134,7 +132,7 @@ 6800c65a 203a2012 6800c5b1 -203a0084 +203a0082 20202012 58000a06 6001c510 @@ -153,46 +151,46 @@ 20207ff1 c6930000 6800cd93 -c28080ae -c28100b0 +c28080ac +c28100ae 6800cd83 -c00080b8 -20400133 -243400ba -2040010e -204000e9 +c00080b6 +20400131 +243400b8 +2040010c +204000e7 6800cc53 c1ff8000 -204006d5 -204000b2 +204006d3 +204000b0 6800cb29 -c0008377 -2040025f +c0008373 +2040025b 24740000 -2040025c +20400258 5800e290 20202d8c 7011c5c0 -202007cd +202007cb 7011c570 -202007cd +202007cb 6800c6f5 c3838000 58017700 6001cc72 -704b6932 +704b6914 20600000 7011c5d1 -202007cd +202007cb 6800cc6f -205a00c0 -2040025f +205a00be +2040025b 24740000 6801cc72 20202d8c 704c6f01 704d7800 -204000d0 +204000ce 6000cbdf 58000000 6003cbe0 @@ -202,8 +200,8 @@ 6800cc44 79207e03 6000cc44 -20400136 -202000a2 +20400134 +202000a0 704d7901 704d7b00 6800cc44 @@ -221,57 +219,57 @@ 793ffe04 6000cc44 6000cbff -2040062d -20200121 +2040062b +2020011f 6800cd78 -c08080d0 +c08080ce 6800cd76 1fe0fe01 6000cd76 -c00200fe -20400121 +c00200fc +2040011f 704c8802 704c4c00 d9600d00 34730200 -20400159 -242c0164 -24378164 -20400156 -20400181 -2040077e +20400157 +242c0162 +24378162 +20400154 +2040017d +2040077c 704b5200 6800cc42 1fe0fe01 6000cc42 -204000d9 +204000d7 6800cc53 -c0ff819f -20400105 +c0ff819b +20400103 58000000 60024c48 6000cd77 20600000 -2040062d +2040062b 704d7600 -202000d0 +202000ce 704d7b02 704d7901 704d7800 -202000d0 +202000ce 6800cd7a -c0018102 +c0018100 6800cc44 2fec0004 -202080ce +202080cc 6800cd7a -c0008101 -c0010102 +c00080ff +c0010100 20600000 6800cc53 c1ff8000 -20400113 -2456011b +20400111 +24560119 20600000 78567c00 6800cd79 @@ -282,7 +280,7 @@ 704c8804 20207feb 6800cd7b -203a012e +203a012c 1fe0ffff 6000cd7b 704d7a02 @@ -302,26 +300,26 @@ 20600000 704d7a03 6800cd78 -243a00e1 +243a00df 704c8802 -20200121 +2020011f 6800cc53 -c0ff819d -20400139 -204001b9 +c0ff8199 +20400137 +204001b5 704c4801 20600000 68014d74 20407f9c -2034013f +2034013d 6803cbe0 207a0000 20207fe7 -204003a5 +204003a1 704c6f00 1a20fe01 6000cc43 -204000d0 +204000ce 6000cbdf e8a88000 ea408000 @@ -338,21 +336,21 @@ 9840fe00 e0a08000 1a40a401 -c200014f +c200014d 20600000 df200004 d8a04bdf 20207ec6 7857fc00 -20400215 +20400211 18002a00 68024c6b 98001200 68088017 2040291f 20402924 -204001d1 -20578212 +204001cd +2057820e 20600000 6800cc6f 247a0000 @@ -362,28 +360,26 @@ 6800cc4a c2802dd4 6800cc53 -c0ff816f -20400179 -202000ea +c0ff816d +20400175 +202000e8 6800cc49 c1ff8000 58000000 60014c49 20202dd4 -5803a980 -20402a8f -20400795 -2040062d -20200121 +20400793 +2040062b +2020011f 6800cc4c 1fe67c0b -24210174 +24210172 1fe0fe01 6000cc4c -c00300db -c00600db +c00300d9 +c00600d9 20600000 -204001ac +204001a8 6800cc41 207a0000 98007200 @@ -400,7 +396,7 @@ d8c04c6b e8c08000 9a20a200 -c2000190 +c200018c 1a227e00 60014cf4 6800ccf4 @@ -408,14 +404,14 @@ 9840fe00 6000ccf6 20600000 -20400188 +20400184 704c5301 20600000 7011c590 -202007cd -2040077b +202007cb +20400779 7011c591 -202007cd +202007cb 793f8026 704d9300 204053ce @@ -463,7 +459,7 @@ 98001e00 6800cc4d 202053da -204001cb +204001c7 7857fc00 7826fc00 7830fc00 @@ -472,32 +468,32 @@ 68014c46 98003600 37c18400 -242c0212 +242c020e 7846fc00 7825fc00 7823fc00 7824fc00 -2040020f +2040020b 6000ccf7 6808ccf6 98467c00 -24228212 -2040020f +2422820e +2040020b 6000cbbd 6800cbbd 6808cc44 a8400e00 -24208212 -2040020f +2420820e +2040020b e0a08000 1fe97e00 1fe1721f -202281f2 -2040020f +202281ee +2040020b e0a08000 -c20001ef +c20001eb 18a22200 -2040020f +2040020b 6000cd7e 1a220a00 09800018 @@ -507,7 +503,7 @@ 1ff17e00 e0a18000 7845fc00 -20230212 +2023020e 7837fc00 68008017 1fe0a200 @@ -534,7 +530,7 @@ 204053c4 68024c6b 98001200 -204001cb +204001c7 20402918 6808cc4d 20402933 @@ -557,7 +553,7 @@ d8c04bff e8c08000 08008608 -c200022d +c2000229 78247c00 08008618 78447c00 @@ -586,7 +582,7 @@ 1a220c00 e8c08000 98408400 -c200024a +c2000246 18497e00 1fe20400 c6930000 @@ -596,10 +592,10 @@ 1ff27e00 20207f55 c6130000 -2040037b -20400267 +20400377 +20400263 6800c040 -c300025c +c3000258 680080a0 247a0000 58000000 @@ -613,8 +609,8 @@ 203a7fe9 6800cd83 c000ffe9 -20400293 -2040025c +2040028f +20400258 20403ebf 6808cb46 20406825 @@ -640,13 +636,13 @@ 6010807f 20600000 6808c6e8 -204005e1 +204005df 6808c6e9 -204005e1 +204005df 6808c6ea -204005e1 +204005df 6808c6eb -204005e1 +204005df 680080a1 1fe17ebf 600080a1 @@ -659,13 +655,13 @@ 20600000 6800cb00 207a0000 -20200560 +2020055e 70895b86 70895ca0 2040296c 20403416 204074b9 -20358319 +20358315 6801c4a3 6001cbb0 20400001 @@ -673,26 +669,26 @@ 6808c720 6800c703 98467c00 -244282bb +244282b7 6800c720 -c07f82a8 +c07f82a4 1fe67c01 -242282aa -204005bd -c00282ce -204002b8 -204004e3 +242282a6 +204005bb +c00282ca +204002b4 +204004e1 da204721 6800c720 6808c703 98467c00 -20228366 +20228362 1fe0ffff 1feffe1d 9a20a200 ea208000 6000c210 -c01a02be +c01a02ba 20600000 6800ccfa 6000c1de @@ -701,14 +697,14 @@ 600146aa 20600000 7011c523 -202007cd +202007cb da204370 ea208000 207a0000 98c0a200 e8c08000 c1008000 -202002c1 +202002bd 704bb35a 20600000 704bb3ff @@ -717,35 +713,35 @@ 600344a0 20600000 7011c562 -202007cd -20400319 +202007cb +20400315 204040c0 204040d9 -c01802dc -c01882eb +c01802d8 +c01882e7 204040d1 200003e8 -202002d2 +202002ce 704b0001 2040640f -204002d0 +204002cc 20206411 -20400556 +20400554 6800c6de -c02d02e0 +c02d02dc 202040e1 7046e007 da604b6e -204002e4 -2020055c +204002e0 +2020055a ea610000 d840ffff 98467c00 20628000 20406413 1a60a602 -202002e4 -20400556 +202002e0 +20400554 202040ea 70808640 70808700 @@ -761,53 +757,53 @@ 793ffe00 6010807f 20600000 -20400358 +20400354 20404423 68014778 d840aa55 98467c00 -20228348 +20228344 60094778 2040441c 68024b4d 6002477b 60024c6b -20400516 +20400514 6801470f -203a0306 +203a0302 6800c231 c280b40a -20400358 -20400324 -20400333 -20400342 -20400337 -20400328 -2040031b -204002ed +20400354 +20400320 +2040032f +2040033e 20400333 +20400324 +20400317 +204002e9 +2040032f d8400002 da2047c4 da40005f -20400320 -20400351 +2040031c +2040034d 70421276 20203d36 -204002ed -20400333 +204002e9 +2040032f d8400001 da20477a da40005a 6801c700 9a40fe00 -20400337 -20200328 +20400333 +20200324 6801c700 6001c232 -20400333 +2040032f 2040652b -2040032b -c2800328 +20400327 +c2800324 20600000 580001fa 6011008c @@ -818,8 +814,8 @@ 6011008a 202064f6 2040650b -2040032b -c3008334 +20400327 +c3008330 20600000 1fe22600 1a227e00 @@ -838,49 +834,49 @@ 6801c700 da204720 20600000 -20400358 -20400342 +20400354 +2040033e 20406562 -2040035a -20400361 +20400356 +2040035d 2040431a 6802477b 60024c6b 20600000 700aa2b9 -204002ed +204002e9 204069ac da204b48 68088aa2 20406556 202069ac 700aa2ab -20200352 -20400358 +2020034e +20400354 d8400002 da2047c4 da40005f 6801c700 9a40fe00 20206562 -20400358 +20400354 d8400001 da20477a da40005a -2020035e +2020035a 70472001 -2040076e +2040076c 7011c560 -202007cd -20400773 +202007cb +20400771 7011c561 -202007cd +202007cb 20407fe7 5800ffff e8c90000 98467c00 2442ffe9 -c200036f +c200036b 20600000 20404401 6801469f @@ -891,52 +887,54 @@ 20600000 d8c01800 d8a0480c -20400383 +2040037f d8c01900 -20400383 +2040037f d8c01a00 -20400383 +2040037f d8c01b00 df20001b 20207f01 d8c0480c d8a01800 -20400383 +2040037f d8a01900 -20400383 +2040037f d8a01a00 -20400383 +2040037f d8a01b00 -20200383 +2020037f 20405892 247a0000 6800cbb3 -c07f8395 +c07f8391 6800c6c5 1fe17e03 c1818000 6800c79e -205a03eb +205a03e9 680246d3 c282c179 20403f97 24740000 -204003a2 -204003a5 -204003c1 +2040039e +204003a1 +204003bf da20469a 20407e3d -205403b0 +205403ae 20600000 70417208 704b681e 20600000 +6800c6f5 +c3838000 6800cb67 c1808000 58000000 6000cb67 6002469b -202002d8 +202002d4 7047a207 7047a304 580047a2 @@ -948,7 +946,7 @@ 20600000 da20469a 20407e54 -203403b8 +203403b6 20600000 20405652 6800c7c3 @@ -970,17 +968,17 @@ 20405271 247a0000 6800c79e -205a03eb +205a03e9 680246d3 c282bf8a c284bf8a 20403f97 24740000 -204003a2 -204003a5 -204003c1 +2040039e +204003a1 +204003bf 6800cb05 -c00083da +c00083d8 6800cb0c 207a0000 20203f81 @@ -1003,11 +1001,11 @@ 20600000 70479e01 20405814 -202002d8 +202002d4 20407e34 -20400439 -202003f1 -204003f4 +20400437 +202003ef +204003f2 20403f36 20203ee3 6810807a @@ -1025,18 +1023,18 @@ 7920a201 1a227e00 6000c6b8 -c0008408 -c001040c +c0008406 +c001040a 6800c6b9 -c2838418 +c2838416 20600000 6800c6b7 -c0000410 -c0018412 +c000040e +c0018410 20600000 6800c6b7 -c0000414 -c0018416 +c0000412 +c0018414 20600000 7046b982 20600000 @@ -1049,22 +1047,22 @@ 6800c6b9 793ffe07 6000c6b9 -c0000420 -c0008423 -c0010426 -c0018429 +c000041e +c0008421 +c0010424 +c0018427 20600000 6800c6b8 -c001842c +c001842a 20600000 6800c6b8 -c000042c +c000042a 20600000 6800c6b8 -c0018431 +c001842f 20600000 6800c6b8 -c0000431 +c000042f 20600000 7046bc00 6800c6ba @@ -1078,14 +1076,14 @@ 20600000 6808cbb8 c17f8000 -202005dc -20400436 +202005da +20400434 6808c6e7 -204005e1 +204005df 6808c6e7 2040681d -2020844b -204005dc +20208449 +204005da 6800c6b6 c1000000 7046b600 @@ -1095,98 +1093,98 @@ 6000c77a 1fe0fe02 6000cb2e -2040076b +20400769 20203d7e -204005dc +204005da 20203d62 1a627e00 -c00a045e -c00a8460 -c0148463 -c0190465 -c0200467 -c0020469 -c0098469 +c00a045c +c00a845e +c0148461 +c0190463 +c0200465 +c0020467 +c0098467 c00cb3df -c010846d -c000846f -c0010473 -c0158476 -c01c8478 -c01d047d -c01e0483 +c010846b +c000846d +c0010471 +c0158474 +c01c8476 +c01d047b +c01e0481 2020417d 7011c5d0 -202007cd -2040048b +202007cb +20400489 7011c5a2 -202007cd +202007cb 700a9912 20207d8f 7011c5b3 -202007cd +202007cb 7011c5a1 -202007cd +202007cb 7011c5a3 -202007cd +202007cb 7011c571 -202007cd +202007cb 7011c5b1 -202007cd +202007cb 704bb900 70480b00 -204002d8 +204002d4 202042ca -2040048b +20400489 7011c5b4 -202007cd +202007cb 7011c5b2 -202007cd -20400759 +202007cb +20400757 704bb900 -204002d8 +204002d4 7011c592 -202007cd +202007cb 704bb901 704b2e0a -2040076b -2040048b +20400769 +20400489 7011c5a0 -202007cd -2040075d -2040076e +202007cb +2040075b +2040076c 704bb900 -204002d8 +204002d4 20203f8d -2040048b +20400489 7011c5a4 -202007cd +202007cb 6800cb00 207a0000 704b0000 -204002d0 +204002cc 58000806 20206413 -2040050d -20400545 -204004bf -204004e3 +2040050b +20400543 +204004bd +204004e1 20404234 2040423a -204004cb -204004ab -204004a8 -204004b1 -204004b7 -204004a0 +204004c9 +204004a9 +204004a6 +204004af +204004b5 +2040049e 20404231 -204004a3 -20200731 +204004a1 +2020072f da60480b da40637a 2020336d da604b0b -da4004a6 +da4004a4 2020336d 704b0c01 20600000 @@ -1194,13 +1192,13 @@ da403d60 2020336d da6046ae -da4004ae +da4004ac 20203374 6800cb31 247a0000 20204266 da604b68 -da4004b4 +da4004b2 2020336d 6800c7c7 6000c172 @@ -1208,30 +1206,30 @@ 6800cb6a 207a0000 da604b6b -da4004bc +da4004ba 2020336d 6800cb6c 247a0000 20205bf5 da604809 -da4004c2 +da4004c0 2020336d 70480800 20600000 da604b69 -da4004c7 +da4004c5 2020336d 58124f80 6001cc72 704b6701 20600000 da604d8f -da4004ce +da4004cc 20203374 704d8e01 20600000 da604b47 -da4004d3 +da4004d1 2020336d 704bba01 6808c720 @@ -1246,12 +1244,12 @@ 2040c392 202043b8 6808c6ed -204005dc +204005da 6808c6ed 2020681d -204004df -242084ee -204004d0 +204004dd +242084ec +204004ce 6800c6d9 c1000000 7046d900 @@ -1261,19 +1259,19 @@ 680140b9 20207f08 6800cb6d -243a0506 +243a0504 6800c6d9 c1008000 6800cb47 1fe67c14 -244104f9 +244104f7 6800c685 6000cb47 7046d901 20600000 -204004ff +204004fd 7041bd00 -20400306 +20400302 680246d3 c1048000 2020437e @@ -1290,7 +1288,7 @@ 20600000 704bb901 704b2e0a -2020076b +20200769 68014b2e 247a0000 6800c808 @@ -1302,27 +1300,27 @@ 20610000 204068a8 7046ce00 -20400530 +2040052e 20406908 1feffe03 d840000f 98467e00 1fe67c64 -2041052d +2041052b 6001470f da204709 -20200522 -20400538 +20200520 +20400536 6800c231 c280b40a -c3000528 +c3000526 704aff01 202043e7 204043e9 6800caff 207a0000 704aff00 -2020075f +2020075d d8400005 98467e00 20600000 @@ -1358,31 +1356,31 @@ 1fe0fe01 6000c6cf 1fe67c1e -24410554 +24410552 1fe67c0a -20210751 -2020075f +2021074f +2020075d 7046cf01 20600000 -20400319 +20400315 58008006 20406413 20002ee0 da604b96 -204002e4 +204002e0 6800c77a -c0ff8560 +c0ff855e 6800c6e1 6000c77a 6800c6e0 -c002057d -c0030570 -c0038570 +c002057b +c003056e +c003856e 6800c77a 1fe67c01 -2042856b +20428569 6800c77a -c000056d +c000056b c001bd8c 20203d88 70477a02 @@ -1392,20 +1390,20 @@ 20203dbe 6800c77a 1fe67c01 -2042856b +20428569 6800c77a -c0000579 -c001857b +c0000577 +c0018579 6800cb3c 6000c6b5 20203dc1 6800cb3a -20200577 +20200575 6800cb3d -20200577 +20200575 6800c77a 1fe67c01 -2042856b +20428569 6800c77a c0003d9d c000bd9b @@ -1415,20 +1413,20 @@ 78547c00 58000000 6003469b -20400591 -20400293 +2040058f +2040028f 20404079 2040407e -204005bb -2040059e +204005b9 +2040059c 24740000 20203fa0 6800c239 c1800000 6800c6e0 -c0020597 -c0028599 -2020059b +c0020595 +c0028597 +20200599 20403fc0 20203fc8 78547c00 @@ -1441,60 +1439,60 @@ 6800c77a c1818000 6801469b -204005a9 +204005a7 6001469b 6801469d -204005a9 +204005a7 6001469d 20600000 -c28585ac -c30585b0 +c28585aa +c30585ae 20600000 1fe67e00 -204005b0 +204005ae 1fe67e00 20600000 9fe0fe00 -202005b2 +202005b0 60014bbb 6800cbbc 1fe67c07 -244105b8 +244105b6 68014bbb 20600000 580007ff 60014bbb 20600000 -204005bd +204005bb 2020409a da200000 -204005c0 +204005be 2020408e 6808c6e2 -204005dc +204005da 6808c6e2 2040681d 7920a200 6808c6e3 -204005dc +204005da 6808c6e3 2040681d 7920a201 6808c6e4 -204005dc +204005da 6808c6e4 2040681d 7920a202 -20400436 +20400434 6808c6e5 -204005e1 +204005df 6808c6e5 2040681d 7d20a203 -204005dc -20400436 +204005da +20400434 6808c6e6 -204005e1 +204005df 6808c6e6 2040681d 7d20a204 @@ -1502,7 +1500,7 @@ d8a08078 20406830 793f8407 -202005e5 +202005e3 793f8407 d8a08078 20406830 @@ -1510,21 +1508,21 @@ d8a0807c 2020680a 280ffe26 -204081a2 +2040819e 2020426d 7011c581 -202007cd +202007cb 7011c550 -202007cd +202007cb d8a0437b df200013 20407f01 202057b8 -20400759 +20400757 58000000 600146ac 6000c714 -204002d8 +204002d4 202042cb 6800c50f 1fe0fe01 @@ -1532,7 +1530,7 @@ c0065395 204055aa 2040561e -204006d5 +204006d3 2020538f 68008016 1fe0fe01 @@ -1541,31 +1539,31 @@ 70001625 20600000 204029bb -20400205 +20400201 202054a3 7011c540 -202007cd +202007cb 7011c541 -202007cd +202007cb 68008456 -c282862c -2040077e +c282862a +2040077c 6800c78e -243a0617 +243a0615 6800843f -c302061b +c3020619 680082da -203a061b +203a0619 20205664 6800c78e 1fe0ffff 6000c78e 20205664 6800c4c4 -c082861e +c082861c 70478e03 20405892 -205a03b4 +205a03b2 20205622 6800c6c5 1fe17e03 @@ -1578,10 +1576,10 @@ 79207e04 6000c3dc 20205650 -20400621 +2040061f 6800cd7c 1fe67c02 -24410782 +24410780 6800cd7c c1000000 1fe0ffff @@ -1607,10 +1605,10 @@ 18c27e00 6001450d 6800c50c -c001864b +c0018649 2020568d 680082db -c000864e +c000864c 20205c65 e8c28000 6002c3ce @@ -1618,18 +1616,18 @@ 6001045f 20205c8a e8c10000 -c0020657 -c0030695 +c0020655 +c0030693 20205698 20407ea5 -20400635 +20400633 20407e9f e8c18000 60018477 -c0080666 +c0080664 1fec8400 18467c24 -20210674 +20210672 d84047c8 600944bc 204058ad @@ -1650,21 +1648,21 @@ 5800002b e0c10000 20600000 -c0050677 -c0090685 +c0050675 +c0090683 202058ad 68090478 6800c4e9 -c281867e +c281867c 68010478 c009da76 68090478 202059bf 680144fa 98467c00 -2422867a +24228678 20405a42 -2434067a +24340678 70047a05 20205a77 18c22200 @@ -1684,13 +1682,13 @@ 70047a05 20205a77 e8c08000 -c0008699 -c002869b +c0008697 +c0028699 20205af6 704b6c01 20205b09 7011c582 -202007cd +202007cb 68008016 c093d6f2 180a7e00 @@ -1702,7 +1700,7 @@ 68014482 20207f08 7855fc00 -203706aa +203706a8 2436d806 20402bcb 680140c1 @@ -1712,7 +1710,7 @@ 2420abde 202057fb 7011c542 -202007cd +202007cb 68108077 1fe17efd 60108077 @@ -1722,7 +1720,7 @@ 204063ee 184104fd 2000000d -204006c0 +204006be 60188073 20600000 204064dd @@ -1741,34 +1739,34 @@ 2020246e 68008030 2feffe00 -204086d1 +204086cf 2020248a 68008047 2feffe03 -2040862d -2440877e +2040862b +2440877c 68014682 c3858000 c3838000 c3830000 da204d05 -20400247 +20400243 6008cd7d 58000082 -c51306df +c51306dd 58000080 98467c00 -24210794 +24210792 6800cd7c 1fe67c02 -24210784 +24210782 6800cd7c -c0000795 +c0000793 20600000 204024f0 242c28f9 204029bb -20400205 +20400201 20202518 c6130000 20402afa @@ -1779,7 +1777,7 @@ 6800cb2f 247a0000 6800c65a -203a06f8 +203a06f6 6800c5b1 207a0000 6800c4c0 @@ -1806,7 +1804,7 @@ c586abde 20405274 243a2bde -205a0712 +205a0710 20202bbe 70008a01 70008b00 @@ -1814,21 +1812,21 @@ 6800cb2e 247a0000 7011c510 -202007cd +202007cb 204062bc 243a7ddb 68008a99 c584fdd6 -c00f8724 -c0100727 -c0090721 +c00f8722 +c0100725 +c009071f 20207dca 20405890 247a0000 20205abf 70018534 6803044f -20200729 +20200727 70018533 68030040 60030186 @@ -1838,23 +1836,23 @@ 204043d2 204042e8 204042fb -20200306 +20200302 6800cb27 207a0000 6800cb2a -c0000737 -c0008741 +c0000735 +c000873f 20600000 -20400751 +2040074f 6800cb2f 1fe0fe01 6000cb2f 6808cb2b 98467c00 -2042873f +2042873d 20600000 704b3100 -2020075f +2020075d 6800cb2d 1fe0ffff 6000cb2d @@ -1862,20 +1860,20 @@ 6800cb2c 6000cb2d 6800cb30 -203a074d +203a074b 6800cb2e -203a075d +203a075b 1fe0ffff 6000cb2e 6800cb29 -c000875f -c0000751 +c000875d +c000074f 20600000 704b2901 6800c720 -c0008757 -c0010756 -20200758 +c0008755 +c0010754 +20200756 2020448c 20204489 2020448f @@ -1886,7 +1884,7 @@ 58000000 6001cb2d 6800cb2e -243a0763 +243a0761 704b2700 704b2a00 704b2f00 @@ -1899,7 +1897,7 @@ 20600000 704b2c03 704b3001 -20200777 +20200775 704b3101 704b2701 704b2a00 @@ -1927,23 +1925,23 @@ 704d7c00 6808cd7d 58000077 -c513078b +c5130789 58000075 98467c00 24610000 6800cd7f -c000079c +c000079a 1fe0ffff 6000cd7f -c000079c +c000079a 7041de00 20600000 704d7c00 6800cd7f -c001079a +c0010798 1fe0fe01 6000cd7f -c0008792 +c0008790 7041de02 20600000 7041de04 @@ -1964,10 +1962,10 @@ 2000000a 7089027d 6800c1de -c00107b6 -c00207be -c01007c8 -204007c3 +c00107b4 +c00207bc +c01007c6 +204007c1 708955d0 708956e0 7089586c @@ -1980,7 +1978,7 @@ 708956e0 7089583c 20202953 -204007c3 +204007c1 708955d0 708956c0 7089586c @@ -1999,7 +1997,7 @@ 18518400 6800cb56 98467c00 -202287ec +202287ea 6008cb56 18408401 58000100 @@ -2010,7 +2008,7 @@ 9840fe00 1fe0fffb 6001cb5d -20400358 +20400354 6801cb5d d8400100 da201f00 @@ -2018,8 +2016,8 @@ 68021f00 680a4b60 98467c00 -242287dd -20400319 +242287db +20400315 58001f00 60014199 70419b40 Index: output/romcode.rom =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/romcode.rom (revision 5164) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/romcode.rom (working copy) @@ -24602,7 +24602,7 @@ 202042b0 204041c1 68014208 -c28504ee +c28504ec 202041f7 c2828015 c2818015 @@ -24610,7 +24610,7 @@ 68014682 c28642b0 204033a9 -204005bd +204005bb 20608000 202033a7 68010264 @@ -24630,7 +24630,7 @@ 704b0501 20600000 18427e00 -c002846b +c0028469 20204d41 c0100016 c010802a @@ -24638,7 +24638,7 @@ c0118006 20600000 704b6c01 -2040076e +2040076c 7047a101 680146a8 6808cbb3 @@ -24647,11 +24647,11 @@ 58000258 600146ae 20403418 -204002c0 +204002bc 58000004 e0c08000 d8c04390 -204005ee +204005ec 20207df4 68008048 c042001a @@ -24672,7 +24672,7 @@ 6800804b 793ffe03 6000804b -2020048e +2020048c 18007e02 20406298 68008049 @@ -24784,21 +24784,21 @@ c0280003 20600000 704b6c00 -204002b8 +204002b4 70479e00 68014682 c2858010 -2040035a +20400356 680947c4 18408401 600947c4 600944a1 -20400312 +2040030e 180a7e00 6000c4a0 6801cbb0 6001c4a3 -204002c7 +204002c3 20403418 68014687 600146ac @@ -24817,26 +24817,26 @@ 2040fddd 704b5100 204042c4 -20200773 +20200771 7047a100 -204002c0 +204002bc 58000005 e0c08000 d8c04b12 -204005ee +204005ec 20207df4 c0300005 c0308017 c031001f 20600000 2040000e -2034036a +20340366 79200026 6800cd93 79207e02 6000cd93 -2040018d -20400121 +20400189 +2040011f 2020001b df200002 d8c04c6b @@ -24867,22 +24867,23 @@ 6000c6b4 60014c70 204042ca -2020036a +20200366 c0380004 -c0388019 +c038801a 20600000 6800cd8e c000add4 -20400010 -20400159 -242c0121 -24378121 +20400011 +20400157 +242c011f +2437811f 6800cd93 793ffe02 6000cd93 +704b6700 20402f20 -20400156 -20200377 +20400154 +20200373 70119eff 6800cc44 6000919f @@ -24890,15 +24891,15 @@ 600211a0 d8400006 da20119e -204001a7 -202001b9 +204001a3 +202001b5 5fffffff 60030040 70018533 704bb3ff 204042fb 704721ff -20200306 +20200302 c040000a c0408004 20600000 @@ -24923,17 +24924,17 @@ 20405839 2040582c 20405818 -204005ea -204002fb +204005e8 +204002f7 df200003 d8c0473f -2040036d -243402c7 +20400369 +243402c3 df200003 d8c0475c -2040036d -243402c7 -204002c9 +20400369 +243402c3 +204002c5 20600000 204074b9 d8c08c00 @@ -24989,8 +24990,8 @@ 7011a400 da20119e d8400007 -204001a7 -20400136 +204001a3 +20400134 20207fe7 6800cc53 c17f8000 @@ -24999,16 +25000,16 @@ c0098029 20600000 704c5302 -202000fa +202000f8 704c5303 -202000fa +202000f8 704c53ff 700a9939 20407d86 68024c23 -2040018c -202000fa -20400487 +20400188 +202000f8 +20400485 70478b01 d8e00003 204043d2 @@ -25016,10 +25017,10 @@ 60014707 7046a700 2040405d -204002b8 +204002b4 68024c6b 6002477b -20200306 +20200302 c0500007 c050800f c0510022 @@ -25027,12 +25028,12 @@ c052002f 20600000 704d8300 -204002b8 -204001a2 +204002b4 +2040019e 7041bd00 6800cb2e 247a0000 -20400269 +20400265 2020340a 68014509 c1000000 @@ -25043,7 +25044,7 @@ 58000009 60014496 60014498 -20400463 +20400461 7047c601 20600000 68014682 @@ -25054,7 +25055,7 @@ c3828000 202033a7 6800cbba -205a050a +205a0508 704bba00 704b6a00 58000007 @@ -25062,24 +25063,24 @@ 60014498 7047c600 70479e00 -204003ab +204003a9 20405816 -20400306 +20400302 202041d9 68120138 79207e1a 6012004c 20402c21 204074bd -2040075d -20400306 +2040075b +20400302 20403e9f -20400269 -20400351 +20400265 +2040034d 68108081 1fe17ef7 60108081 -20200281 +2020027d c0588006 c059000c c0598011 @@ -25099,17 +25100,17 @@ 6800c7a1 c0008014 20200016 -20400463 +20400461 7046c60a d8e00001 202041b9 704bb901 704b2e0a -2040076b +20400769 704b0100 704b0300 704b0c00 -20400306 +20400302 202041d9 6800cd8e c000add4 @@ -25120,12 +25121,12 @@ 600211a0 d8400006 da20119e -204001a7 -204001b9 -20400159 -242c0025 -24378025 -20400181 +204001a3 +204001b5 +20400157 +242c0026 +24378026 +2040017d 68024c6b 680a4d88 98467c00 @@ -25133,58 +25134,59 @@ 6800cc41 c1840000 704d9300 -204002b8 +204002b4 68024c6b 680a4c4f 98467c00 -2022819a +20228196 68024c6b 680a4c7a 98467c00 -20428023 +20428024 +704b6700 20402f20 -20400156 -20200377 +20400154 +20200373 68024c23 -2020018c +20200188 6800cd81 1fe0fe01 1fe17e03 6000cd81 -c000002c -c0010036 -20200188 -204002b8 +c000002d +c0010037 +20200184 +204002b4 68024c7a 60024c6b 6800cd91 6000cc4e -20400034 +20400035 6008cd91 20600000 -2040018d -20200121 +20400189 +2020011f 7041de20 68024d88 60024c6b 6800cd92 6000cc4e -20400034 +20400035 6008cd92 20600000 c0680004 c068800d 20600000 704bb900 -204002d8 +204002d4 20403410 704b6a01 6800c7a1 243a000b 704b6b14 -204003ab +204003a9 202041c3 -20400238 +20400234 24740000 20400022 68014d84 @@ -25193,7 +25195,7 @@ 68094d86 98467c00 20428017 -2020009f +2020009d 704d8300 58000000 60014d84 @@ -25211,4 +25213,4 @@ c0020020 c002801c 20600000 -00002030 +00009a21 Index: output/sched.rom =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/sched.rom (revision 5165) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/sched.rom (working copy) @@ -1,5 +1,5 @@ -mem_lpm_config:8f 1a ce #-1khz +mem_lpm_config:8f 1c ce #-1khz mem_lpm_xtalcnt:00 0a 0b ef 07 mem_lpm_hibernate_switch:00 mem_gpio_wakeup_low:00 00 00 00 00 00 00 00 @@ -235,7 +235,7 @@ #bit5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON #bit6 ENABLE_SELECT_DEVICE_BY_SWITCH #bit7 ENABLE_SENSOR_MOTION_PIN -#30 +#b0 mem_mouse_dpi_seting: 01##mem_320x_dpi_1 Index: program/patch.prog =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/program/patch.prog (revision 5165) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/program/patch.prog (working copy) @@ -302,7 +302,7 @@ rtnbit1 ENABLE_SENSOR_MOTION_PIN setarg G24_LONG_SLEEP_STEP1 store 3,mem_24g_enter_hibernate - jam 50,mem_24g_long_sleep_param_update_timer + jam 20,mem_24g_long_sleep_param_update_timer rtn p_g24_transmit_by_interrupt: @@ -567,8 +567,6 @@ branch g24_stop_24g_mode p_g24_tx_fast_hop: - setarg 240000 - call sleep call power_ctrl_txpower_incrs call power_ctrl_pac_succ_decrs branch p_g24_ch @@ -1490,8 +1488,8 @@ rtn p_mouse_data_xy_release: - //fetch 1,mem_config_function_enable - //rtnbit1 ENABLE_SENSOR_MOTION_PIN + fetch 1,mem_config_function_enable + rtnbit1 ENABLE_SENSOR_MOTION_PIN fetch 1,mem_mouse_long_mult_flag rtnne 1 setarg 0 Index: program/z.prog =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/program/z.prog (revision 5164) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/program/z.prog (working copy) @@ -459,7 +459,7 @@ set0 STATE_24G_RECONN,pdata store 1,mem_24g_conn_sm z_g24_tx_attemp_dongle_succ: - //jam 0,mem_mouse_long_mult_flag + jam 0,mem_mouse_long_mult_flag call g24_app_tx_attempt_success call p_g24_txbuf_clear branch p_g24_transmit_by_interrupt_enable @@ -859,7 +859,7 @@ fetcht 4,mem_24g_device_addr isub temp,null call z7_g24_store_dongle_addr,zero - //jam 0,mem_mouse_long_mult_flag + jam 0,mem_mouse_long_mult_flag call g24_app_tx_attempt_success call p_g24_txbuf_clear branch p_g24_transmit_by_interrupt_enable Index: sched/109x.dat =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/sched/109x.dat (revision 5164) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/sched/109x.dat (working copy) @@ -1,5 +1,5 @@ -mem_lpm_config:8f 1a ce #-1khz +mem_lpm_config:8f 1c ce #-1khz mem_lpm_xtalcnt:00 0a 0b ef 07 mem_lpm_hibernate_switch:00 mem_gpio_wakeup_low:00 00 00 00 00 00 00 00 Index: sched/mouse.dat =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/sched/mouse.dat (revision 5165) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/sched/mouse.dat (working copy) @@ -198,7 +198,7 @@ #bit5 ENABLE_SELECT_DEVICE_BY_GPIO_BUTTON #bit6 ENABLE_SELECT_DEVICE_BY_SWITCH #bit7 ENABLE_SENSOR_MOTION_PIN -#30 +#b0 mem_mouse_dpi_seting: 01##mem_320x_dpi_1