Index: format/bt.format =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/format/bt.format (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/format/bt.format (working copy) @@ -761,6 +761,7 @@ 43 mark_otp_encrypt 44 mark_first_packet 45 mark_role_switch_receive_fhs +46 mark_le_decrypt_fail ) ( Index: output/bt_program23.list =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.list (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.list (working copy) @@ -100,31659 +100,31680 @@ 0x57 000181 beq patch29_2 ,p_le_receive_skip 0x58 000182 beq patch2a_7 ,p_le_update_param 0x59 000183 beq patch2b_1 ,p_le_update_channel_map -0x5a 000184 beq patch2c_3 ,p_le_prepare_tx -0x5b 000185 beq patch2c_6 ,p_le_parse -0x5c 000186 beq patch2c_7 ,p_le_parse_l2cap -0x5d 000187 beq patch2d_2 ,p_le_adv_not_match -0x5e 000188 beq patch2e_7 ,p_le_lpm_setmult -0x5f 000195 beq patch31_4 ,p_twspi_reset -0x60 000196 beq patch31_5 ,p_spid_init -0x61 000197 beq patch3f_2 ,p_check_51cmd_once_continue -0x62 000198 branch loop -: 000201 p_mouse_select_device_button_wakeup_check: -0x63 000202 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0x64 000203 call p_mouse_get_select_state -0x65 000204 nrtn true -0x66 000205 call delay_10ms -0x67 000206 call p_mouse_get_select_state -0x68 000207 nrtn true -0x69 000208 jam 1 ,mem_mouse_select_device_button_wakeup_flag -0x6a 000209 rtn -: 000211 p_mouse_switch_hwakeup_bypb: -0x6b 000212 fetch 1 ,mem_mouse_select_device_button_wakeup_flag -0x6c 000213 rtn blank -0x6d 000214 call p_mouse_switch_device_flag -0x6e 000215 branch p_mouse_store_flash_device_info -: 000217 p_soft_reset_1: -0x6f 000218 arg mem_sp_state ,contw -0x70 000219 arg 12 ,loopcnt -0x71 000220 call clear_mem -0x72 000221 call p_mouse_le_txbuff_load -0x73 000222 hfetch 1 ,core_gpio_pu3 -0x74 000223 and_into 0x3f ,pdata -0x75 000224 hstore 1 ,core_gpio_pu3 -0x76 000225 hfetch 1 ,core_gpio_sel1 -0x77 000226 set0 4 ,pdata -0x78 000227 hstore 1 ,core_gpio_sel1 -0x79 000228 call init_memp -0x7a 000229 call rfcomm_init -0x7b 000230 call init_lmp -0x7c 000231 ncall lpm_disable_exen_output ,wake -0x7d 000232 call ui_init + 1 -0x7e 000233 branch soft_reset + 11 -: 000235 p_soft_reset_2: -0x7f 000236 call app_lpm_init ,wake -0x80 000237 call publickey_init -0x81 000238 call lpm_recover_clk ,wake -: 000239 p_sp_cal_loop: -0x82 000240 call sp_calc_sequence -0x83 000241 fetch 1 ,mem_ssp_enable -0x84 000242 branch main_loop ,blank -0x85 000243 fetch 1 ,mem_sp_local_key_invalid -0x86 000244 branch p_sp_cal_loop ,blank -0x87 000245 branch main_loop -: 000247 p_init_param: -0x88 000248 setarg param_le_version -0x89 000249 store 3 ,mem_lmp_version -0x8a 000250 setarg param_le_subversion -0x8b 000251 store 2 ,mem_lmp_version + 3 -0x8c 000252 branch init_param + 12 -: 000254 p_lpm_check_wake_lock: -0x8d 000255 rtnmark1 mark_24g -0x8e 000256 fetch 1 ,mem_mouse_clear_sensor_data_flag -0x8f 000257 beq 0 ,disable_blank -0x90 000258 fetch 1 ,mem_mouse_le_conn_param_reject -0x91 000259 beq le_lpm_disable ,disable_blank -0x92 000260 fetch 2 ,mem_sdp_remote_cid -0x93 000261 nbranch disable_blank ,blank -0x94 000262 fetch 1 ,mem_mouse_wheel_trigger -0x95 000263 nbranch disable_blank ,blank -0x96 000264 branch enable_blank -: 000267 p_g24_dispatch: -0x97 000268 rtnmark0 mark_24g -0x98 000269 fetch 1 ,mem_24g_conn_sm -0x99 000270 bbit1 state_24g_pair ,p_g24_pair_dispatch -0x9a 000271 bbit1 state_24g_reconn ,p_g24_reconn_dispatch -0x9b 000272 fetch 1 ,mem_24g_transmit_by_interrupt -0x9c 000273 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt -: 000274 p_g24_transmit_process: -0x9d 000275 call p_g24_txdata_prep -0x9e 000276 nbranch p_g24_nodata_transmit ,user -0x9f 000277 call p_g24_rf_sta_check -: 000278 p_g24_transmit_start: -0xa0 000279 call p_g24_transmit_packet -0xa1 000280 fetch 1 ,mem_24g_pairing_sm -0xa2 000281 rtnne state_24g_pairing_success -0xa3 000282 call power_ctrl_start -0xa4 000283 call p_g24_long_sleep_shorter_param_update -0xa5 000284 fetch 1 ,mem_mouse_multi_led_state -0xa6 000285 beq on ,p_g24_transmit_by_interrupt_enable -: 000286 p_g24_short_sleep: -0xa7 000287 call p_g24_lpm_wait -0xa8 000288 nrtn user -0xa9 000289 call p_clear_wake -0xaa 000290 setarg 54000 -: 000291 p_g24_enter_sleep: -0xab 000292 branch g24_lpm_long_sleep2 -: 000294 p_g24_pair_dispatch: -0xac 000295 jam zcode_c0 ,mem_zcode_temp_param0 -0xad 000296 branch p_zcode_entrance -: 000298 p_g24_reconn_dispatch: -0xae 000299 jam zcode_70 ,mem_zcode_temp_param0 -0xaf 000300 branch p_zcode_entrance -: 000303 p_g24_long_sleep_shorter_param_update: -0xb0 000304 setarg g24_long_sleep_step1 -0xb1 000305 store 3 ,mem_24g_enter_hibernate -0xb2 000306 jam 30 ,mem_24g_long_sleep_param_update_timer -0xb3 000307 rtn -: 000309 p_g24_transmit_by_interrupt: -0xb4 000310 jam zcode_d1 ,mem_zcode_temp_param0 -0xb5 000311 branch p_zcode_entrance -: 000314 p_g24_nodata_transmit: -0xb6 000315 fetch 1 ,mem_24g_abort_pac -0xb7 000316 call p_g24_send_abort_packet ,blank -: 000317 p_g24_long_sleep: -0xb8 000318 call p_g24_lpm_wait -0xb9 000319 nrtn user -0xba 000320 fetch 3 ,mem_24g_enter_hibernate -0xbb 000321 branch g24_lpm_long_sleep2 -: 000323 p_g24_send_abort_packet: -0xbc 000324 jam 1 ,mem_24g_abort_pac -0xbd 000325 jam 0 ,mem_24g_rf_hop_ch -0xbe 000326 call p_g24_transmit_rf_ctrl_clear -0xbf 000327 store 1 ,mem_24g_txbuf -0xc0 000328 setarg 0 -0xc1 000329 store 7 ,mem_24g_txbuf + 1 -0xc2 000330 fetch 4 ,mem_24g_device_addr -0xc3 000331 store 4 ,mem_24g_txbuf + 8 -0xc4 000332 jam 12 ,mem_24g_datalen -0xc5 000333 fetch 1 ,mem_24g_data_type -0xc6 000334 set1 bit_abort ,pdata -0xc7 000335 store 1 ,mem_24g_data_type -0xc8 000336 call p_g24_txdata_enable_tx -0xc9 000337 branch p_g24_transmit_start -: 000339 p_g24_transmit_rf_sta_init: -0xca 000340 jam 1 ,mem_24g_rf_last_sta -0xcb 000341 jam 0 ,mem_24g_sync_cnt -: 000342 p_g24_transmit_rf_ctrl_clear: -0xcc 000343 fetch 1 ,mem_24g_data_type -0xcd 000344 and_into bits_data ,pdata -0xce 000345 store 1 ,mem_24g_data_type -0xcf 000346 rtn -: 000348 p_g24_hop_ch_enable: -0xd0 000349 fetch 1 ,mem_24g_data_type -0xd1 000350 set1 bit_hop ,pdata -0xd2 000351 store 1 ,mem_24g_data_type -0xd3 000353 store 1 ,mem_24g_txpayload -0xd4 000354 rtn -: 000356 p_g24_hop_enable_packet: -0xd5 000357 fetch 1 ,mem_24g_data_type -0xd6 000358 rtnbit0 bit_hop -: 000359 p_g24_hop_ch_disable: -0xd7 000360 fetch 1 ,mem_24g_data_type -0xd8 000361 set0 bit_hop ,pdata -0xd9 000362 store 1 ,mem_24g_data_type -0xda 000363 store 1 ,mem_24g_txpayload -0xdb 000364 call power_ctrl_pac_succ_decrs -0xdc 000365 branch p_g24_ch -: 000367 p_g24_rf_hop_attemp_again: -0xdd 000368 fetch 1 ,mem_24g_rf_hop_ch -0xde 000369 bne 1 ,p_g24_transmit_rf_ctrl_clear -: 000370 p_g24_rf_hop_fastly: -0xdf 000371 fetch 1 ,mem_24g_hop_fastly_cnt -0xe0 000372 increase 1 ,pdata -0xe1 000373 store 1 ,mem_24g_hop_fastly_cnt -0xe2 000374 beq 4 ,p_g24_rf_hop_fastly_exit -0xe3 000375 call p_g24_ch -0xe4 000376 jam 2 ,mem_24g_max_retry -: 000377 p_g24_transmit_packet: -0xe5 000378 jam 0 ,mem_24g_retry -: 000379 p_g24_transmit_loop: -0xe6 000380 arg param_rx_setup ,timeup -0xe7 000381 until clkn_rt ,meet -0xe8 000382 call p_g24_transmit_receive_ack -0xe9 000385 nbranch p_g24_retransmit ,sync -0xea 000386 nbranch p_g24_retransmit ,user3 -0xeb 000387 call p_g24_txbuf_clear -0xec 000388 call p_g24_ackpayload_parse -0xed 000389 call power_ctrl_pac_succ_incrs -: 000390 p_g24_transmit_next_packet: -0xee 000391 jam 0 ,mem_retry_count -0xef 000392 fetch 1 ,mem_24g_pid -0xf0 000393 increase 1 ,pdata -0xf1 000394 store 1 ,mem_24g_pid -0xf2 000395 call p_g24_hop_enable_packet -0xf3 000396 fetch 1 ,mem_24g_pairing_sm -0xf4 000397 bne state_24g_pairing_success ,p_g24_paring_mode_start -0xf5 000398 call p_g24_transmit_succ_rf_config -: 000399 p_g24_transmit_abandon: -0xf6 000400 setarg 0 -0xf7 000401 store 4 ,mem_24g_ensure -0xf8 000402 store 1 ,mem_24g_hop_pac_retry -0xf9 000403 rtn -: 000405 p_g24_rf_hop_fastly_exit: -0xfa 000406 call power_ctrl_pac_succ_decrs -0xfb 000407 jam 0 ,mem_24g_hop_fastly_cnt -0xfc 000408 branch p_g24_transmit_rf_ctrl_clear -: 000410 p_g24_transmit_hop_pac_succ_wo_hop: -0xfd 000411 jam 2 ,mem_24g_sync_cnt -: 000412 p_g24_transmit_hop_pac_succ: -0xfe 000413 jam 1 ,mem_24g_rf_last_sta -0xff 000414 jam 0 ,mem_24g_rf_hop_ch -0x100 000415 branch p_g24_transmit_rf_ctrl_clear -: 000417 p_g24_transmit_succ_rf_config: -0x101 000418 fetch 1 ,mem_24g_rf_work_stage -0x102 000419 beq 3 ,p_g24_transmit_hop_pac_succ -0x103 000420 fetch 1 ,mem_24g_data_type -0x104 000421 isolate0 bit_hop ,pdata -0x105 000422 branch p_g24_transmit_rf_sta_init ,true -0x106 000423 fetch 1 ,mem_24g_rf_work_stage -0x107 000424 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop -0x108 000425 beq 2 ,p_g24_transmit_hop_pac_succ -0x109 000426 rtn -: 000428 p_g24_rf_sta_check: -0x10a 000429 fetch 1 ,mem_24g_pairing_sm -0x10b 000430 rtnne state_24g_pairing_success -0x10c 000431 call p_g24_rf_laststa_synccnt_check -0x10d 000432 ncall p_g24_rf_sync_cnt_check ,user2 -0x10e 000433 rtn -: 000435 p_g24_rf_laststa_synccnt_check: -0x10f 000436 disable user2 -0x110 000437 fetch 1 ,mem_24g_rf_last_sta -0x111 000438 rtnne 1 -0x112 000439 fetch 1 ,mem_24g_sync_cnt -0x113 000440 rtnne 0 -0x114 000441 jam 1 ,mem_24g_rf_work_stage -0x115 000442 jam 4 ,mem_24g_max_retry -0x116 000443 branch enable_user2 -: 000445 p_g24_rf_sync_cnt_check: -0x117 000446 fetch 1 ,mem_24g_sync_cnt -0x118 000447 branch p_g24_rf_hop_attemp ,blank -0x119 000448 increase -1 ,pdata -0x11a 000449 store 1 ,mem_24g_sync_cnt -0x11b 000450 jam 2 ,mem_24g_rf_work_stage -0x11c 000451 jam 4 ,mem_24g_max_retry -: 000452 p_g24_ch: -0x11d 000453 fetcht 1 ,mem_24g_current_ch_number -0x11e 000454 fetch 1 ,mem_24g_addr -0x11f 000455 and_into 0x03 ,pdata -0x120 000456 mul32 pdata ,4 ,rega -0x121 000457 setarg mem_24g_ch_map1 -0x122 000458 iadd rega ,pdata -0x123 000459 iadd temp ,contr -0x124 000460 ifetch 1 ,contr -0x125 000461 store 1 ,mem_24g_ch -0x126 000462 increase 1 ,temp -0x127 000463 and_into 3 ,temp -0x128 000464 storet 1 ,mem_24g_current_ch_number -0x129 000465 rtn -: 000467 p_g24_rf_hop_attemp: -0x12a 000468 jam 3 ,mem_24g_rf_work_stage -0x12b 000469 fetch 1 ,mem_24g_rf_hop_ch -0x12c 000470 nbranch p_g24_rf_hop_attemp_again ,blank -0x12d 000471 jam 2 ,mem_24g_max_retry -0x12e 000472 branch p_g24_ch -: 000474 p_g24_txdata_prep: -0x12f 000475 fetch 1 ,mem_24g_pairing_sm -0x130 000476 bne state_24g_pairing_success ,p_g24_pairing_sm -: 000477 p_g24_txdata_prep_packeage_data: -0x131 000478 call p_g24_package_data -: 000479 p_g24_txdata_enable_tx: -0x132 000480 call p_g24_transmit_prep -0x133 000481 jam ensure_on_24g ,mem_24g_ensure -0x134 000482 rtn -: 000484 p_g24_package_data: -0x135 000485 fetch 2 ,mem_cb_24g_data -0x136 000486 call callback_func -0x137 000487 branch p_g24_accumulate_mouse_data ,user -0x138 000488 fetch 7 ,mem_24g_txbuf + 1 -0x139 000489 rtn blank -0x13a 000490 branch enable_user -: 000491 p_g24_accumulate_mouse_data: -0x13b 000492 call p_mouse_data_xy_release -0x13c 000493 jam 0 ,mem_24g_abort_pac -0x13d 000494 add rega ,1 ,pdata -0x13e 000495 store 1 ,mem_24g_datalen -0x13f 000496 call p_g24_transmit_rf_ctrl_clear -0x140 000497 store 1 ,mem_24g_txbuf -0x141 000498 ifetcht 1 ,contw -0x142 000499 ifetch 1 ,regb -0x143 000500 ior temp ,pdata -0x144 000501 istore 1 ,contw -0x145 000502 increase 1 ,regb -0x146 000503 ifetch 4 ,regb -0x147 000504 istore 4 ,contw -0x148 000505 increase 4 ,regb -0x149 000506 arg mem_24g_txbuf + 6 ,contw -0x14a 000507 arg 2 ,loopcnt -: 000508 p_g24_accumulation_loop: -0x14b 000509 ifetch 1 ,regb -0x14c 000510 ifetcht 1 ,contw -0x14d 000511 iadd temp ,pdata -0x14e 000512 istore 1 ,contw -0x14f 000513 increase 1 ,regb -0x150 000514 loop p_g24_accumulation_loop -0x151 000515 rtn -: 000517 p_g24_txbuf_clear: -0x152 000518 arg 4 ,loopcnt -0x153 000519 arg mem_24g_txbuf ,contw -0x154 000520 branch memset0 -: 000522 p_g24_transmit_receive_ack: -0x155 000523 disable user3 -0x156 000524 call p_g24_transmit -0x157 000529 force 0 ,radio_ctrl -0x158 000530 fetch 4 ,mem_24g_addr -0x159 000531 iforce access -0x15a 000532 fetcht 1 ,mem_last_freq -0x15b 000533 call set_freq_rx -0x15c 000534 call rf_rx_enable -0x15d 000535 call p_g24_receive_rxon -0x15e 000536 call p_g24_end_of_packet ,user3 -0x15f 000537 rtn -: 000542 p_g24_retransmit: -0x160 000543 fetch 1 ,mem_24g_abort_pac -0x161 000544 nrtn blank -0x162 000545 fetch 2 ,mem_24g_txfail_cnt -0x163 000546 increase 1 ,pdata -0x164 000547 store 2 ,mem_24g_txfail_cnt -0x165 000548 fetch 1 ,mem_24g_txfail_cnt + 1 -0x166 000549 bbit1 4 ,g24_stop_24g_mode -0x167 000550 fetch 1 ,mem_24g_pairing_sm -0x168 000551 bne state_24g_pairing_success ,p_g24_tx_paring_retry -0x169 000552 call p_g24_tx_hop_ch_process -0x16a 000553 branch p_g24_transmit_loop -: 000555 p_g24_tx_paring_retry: -0x16b 000556 fetch 1 ,mem_24g_txfail_cnt -0x16c 000557 rtnne 0xff -: 000558 p_g24_tx_attempt_fail: -0x16d 000559 setarg 0 -0x16e 000560 store 2 ,mem_24g_txfail_cnt -0x16f 000561 branch g24_stop_24g_mode -: 000563 p_g24_tx_fast_hop: -0x170 000564 call power_ctrl_txpower_incrs -0x171 000565 call power_ctrl_pac_succ_decrs -0x172 000566 branch p_g24_ch -: 000568 p_g24_tx_hop_ch_process: -0x173 000569 fetch 1 ,mem_24g_retry -0x174 000570 sub pdata ,11 ,null -0x175 000571 nbranch p_g24_tx_fast_hop ,positive -0x176 000572 increase 1 ,pdata -0x177 000573 store 1 ,mem_24g_retry -0x178 000575 beq 6 ,p_g24_hop_ch_disable -0x179 000577 beq 12 ,p_g24_hop_ch_disable -0x17a 000578 rtn -: 000580 p_g24_ackpayload_parse: -0x17b 000581 call p_g24_read_len_pid_crc -0x17c 000582 fetch 1 ,mem_24g_rxdata_length -0x17d 000583 rtn blank -0x17e 000584 iforce loopcnt -0x17f 000585 arg mem_24g_rxbuf + 2 ,contr -0x180 000586 arg mem_24g_rxpayload ,contw -0x181 000587 branch memcpy -: 000589 p_g24_pair_init: -0x182 000590 jam tx_power_pair ,mem_tx_power -0x183 000591 jam 0 ,mem_24g_pid -0x184 000592 jam g24_pair_ch ,mem_24g_ch -0x185 000593 fetch 4 ,mem_24g_paring_addr -: 000594 p_g24_update_addr_and_synccrc8: -0x186 000595 store 4 ,mem_24g_addr -: 000597 p_g24_syncword_crc8: -0x187 000598 arg 0 ,rega -0x188 000599 arg 4 ,loopcnt -0x189 000600 arg mem_24g_addr ,contr -: 000601 p_g24_syncword_crc8_loop: -0x18a 000602 ifetch 1 ,contr -0x18b 000603 iadd rega ,rega -0x18c 000604 loop p_g24_syncword_crc8_loop -0x18d 000605 copy rega ,pdata -0x18e 000606 store 2 ,mem_24g_syncword -0x18f 000607 fetch 1 ,mem_24g_syncword -0x190 000608 fetcht 1 ,mem_24g_syncword + 1 -0x191 000609 iadd temp ,pdata -0x192 000610 store 1 ,mem_24g_syncword_crc8 -0x193 000611 rtn -: 000613 p_g24_start_pairing_sm1: -0x194 000615 call p_g24_pair_init -: 000616 p_g24_set_pairing_sm_1: -0x195 000617 jam state_24g_pairing_1 ,mem_24g_pairing_sm -0x196 000618 rtn -: 000620 p_g24_pairing_sm: -0x197 000621 jam zcode_90 ,mem_zcode_temp_param0 -0x198 000622 branch p_zcode_entrance -: 000624 p_g24_paring_mode_start: -0x199 000625 call power_ctrl_pac_succ_cnt_init -: 000626 p_g24_paring_mode: -0x19a 000627 jam zcode_91 ,mem_zcode_temp_param0 -0x19b 000628 branch p_zcode_entrance -: 000631 p_g24_check_51cmd_stop_24g: -0x19c 000632 set0 mark_24g ,mark -0x19d 000633 jam state_24g_stop ,mem_24g_conn_sm -0x19e 000634 call le_disable -: 000635 p_mouse_disable_g24_pairing_flag: -0x19f 000636 arg mosue_24g_pairing_flag ,queue -0x1a0 000637 branch mouse_disable_function_flag -: 000639 p_g24_put_data_in_buff: -0x1a1 000640 storet 1 ,mem_24g_datalen -0x1a2 000641 copy temp ,loopcnt -0x1a3 000642 arg mem_24g_txbuf ,contw -0x1a4 000643 copy rega ,contr -0x1a5 000644 branch memcpy -: 000646 p_g24_read_len_pid_crc: -0x1a6 000648 fetch 1 ,mem_24g_rxbuf + 1 -0x1a7 000649 rshift3 pdata ,pdata -0x1a8 000650 store 1 ,mem_24g_rxdata_length -0x1a9 000652 increase 1 ,pdata -0x1aa 000653 arg mem_24g_rxbuf + 1 ,contr -0x1ab 000654 iadd contr ,contr -0x1ac 000655 ifetch 3 ,contr -0x1ad 000656 store 3 ,mem_24g_sta_crc -0x1ae 000658 fetch 1 ,mem_24g_rxbuf + 1 -0x1af 000659 rshift pdata ,pdata -0x1b0 000660 and pdata ,0x03 ,pdata -0x1b1 000661 store 1 ,mem_24g_sta_pid -0x1b2 000662 rtn -: 000664 p_g24_transmit_prep: -0x1b3 000667 fetch 1 ,mem_24g_datalen -0x1b4 000668 increase 2 ,pdata -0x1b5 000669 store 1 ,mem_24g_txlen -0x1b6 000671 fetch 1 ,mem_24g_data_type -0x1b7 000672 store 1 ,mem_24g_txpayload -0x1b8 000674 fetch 1 ,mem_24g_datalen -0x1b9 000675 lshift3 pdata ,pdata -0x1ba 000676 fetcht 1 ,mem_24g_pid -0x1bb 000677 and temp ,0x03 ,temp -0x1bc 000678 lshift temp ,temp -0x1bd 000679 ior temp ,pdata -0x1be 000680 fetcht 1 ,mem_24g_no_ack -0x1bf 000681 iadd temp ,pdata -0x1c0 000682 istore 1 ,contw -0x1c1 000684 fetch 1 ,mem_24g_datalen -0x1c2 000685 iforce loopcnt -0x1c3 000686 arg mem_24g_txbuf ,contr -0x1c4 000687 branch memcpy -: 000706 p_g24_prep: -0x1c5 000707 disable enable_crc -0x1c6 000708 disable enable_white -0x1c7 000709 setarg 0x555555 -0x1c8 000710 iforce crc24_init -0x1c9 000711 fetch 1 ,mem_24g_ch -0x1ca 000712 branch le_prep2 -: 000714 p_g24_receive_rxon: -0x1cb 000717 call p_g24_prep -0x1cc 000718 disable user3 -0x1cd 000719 enable decode_fec0 -0x1ce 000720 enable is_rx -0x1cf 000721 disable is_tx -0x1d0 000722 enable swfine -0x1d1 000723 fetch 2 ,mem_24g_rx_window -0x1d2 000724 iforce stop_watch -0x1d3 000725 correlate null ,timeout -0x1d4 000726 nbranch p_g24_sync_timeout ,sync -0x1d5 000729 disable decode_fec0 -0x1d6 000730 enable decode_fec1 -0x1d7 000731 enable enable_white -0x1d8 000732 enable enable_crc -0x1d9 000733 call p_g24_receive_byte -0x1da 000734 store 1 ,mem_24g_get_syncword_crc8 -0x1db 000735 fetcht 1 ,mem_24g_syncword_crc8 -0x1dc 000736 isub temp ,null -0x1dd 000737 nbranch p_g24_end_of_packet ,zero -0x1de 000738 call p_g24_receive_byte -0x1df 000739 store 1 ,mem_24g_rxbuf -0x1e0 000743 fetch 1 ,mem_24g_rxbuf -0x1e1 000744 fetcht 1 ,mem_24g_data_type -0x1e2 000745 icompare bits_data ,temp -0x1e3 000746 nbranch p_g24_end_of_packet ,true -: 000747 p_g24_receive_skip: -0x1e4 000748 call p_g24_receive_byte -0x1e5 000749 istore 1 ,contw -0x1e6 000750 rshift3 pdata ,pdata -0x1e7 000751 and pdata ,0x1f ,loopcnt -0x1e8 000752 branch p_g24rx_nopayload ,zero -: 000753 p_g24rx_loop: -0x1e9 000754 call p_g24_receive_byte -0x1ea 000755 istore 1 ,contw -0x1eb 000756 loop p_g24rx_loop -: 000757 p_g24rx_nopayload: -0x1ec 000759 copy contw ,rega -0x1ed 000760 call p_g24_receive_byte -0x1ee 000761 store 1 ,mem_rssi_hex_received -0x1ef 000762 copy rega ,contw -0x1f0 000763 parse demod ,bucket ,24 -0x1f1 000764 enable swfine -0x1f2 000765 arg param_sifs ,stop_watch -0x1f3 000766 rshift32 pdata ,pdata -0x1f4 000767 rshift16 pdata ,pdata -0x1f5 000768 istore 3 ,contw -0x1f6 000769 disable decode_fec1 -0x1f7 000770 branch p_g24_end_of_packet ,crc_failed -0x1f8 000773 enable user3 -0x1f9 000774 fetch 1 ,mem_last_freq -0x1fa 000775 add pdata ,0 ,rega -0x1fb 000776 call rf_write_freq -0x1fc 000777 disable decode_fec0 -0x1fd 000778 call set_sync_on -0x1fe 000779 fetch 1 ,mem_rssi_hex_received -: 000780 p_rssi_signal: -0x1ff 000781 copy pdata ,rega -0x200 000782 fetcht 1 ,mem_rssi_signal_index -0x201 000783 setarg mem_rssi_signal_buf -0x202 000784 iadd temp ,contw -0x203 000785 copy rega ,pdata -0x204 000786 istore 1 ,contw -0x205 000787 increase 1 ,temp -0x206 000788 and_into rssi_buf_len_signal ,temp -0x207 000789 storet 1 ,mem_rssi_signal_index -0x208 000790 rtn -: 000792 p_g24_receive_byte: -0x209 000793 parse demod ,bucket ,8 -0x20a 000794 rshift3 pwindow ,pdata -0x20b 000795 rtn -: 000797 p_g24_sync_timeout: -: 000802 p_g24_end_of_packet: -0x20c 000803 disable encode_fec1 -0x20d 000804 disable decode_fec1 -0x20e 000805 branch end_of_packet -: 000811 p_g24_transmit: -0x20f 000812 call le_enable -0x210 000813 fetch 4 ,mem_24g_addr -0x211 000814 iforce access -0x212 000815 call p_g24_prep -0x213 000816 call set_sync_on -0x214 000817 fetcht 1 ,mem_24g_ch -0x215 000818 call set_freq_tx -0x216 000819 set1 txgfsk ,radio_ctrl -0x217 000820 enable encode_fec0 -0x218 000821 enable is_tx -0x219 000822 disable is_rx -0x21a 000825 rshift16 access ,pdata -0x21b 000826 rshift8 pdata ,pdata -0x21c 000827 rshift4 pdata ,pdata -0x21d 000828 inject mod ,40 -0x21e 000829 disable encode_fec0 -0x21f 000830 enable encode_fec1 -0x220 000831 enable enable_white -0x221 000832 enable enable_crc -0x222 000833 fetch 1 ,mem_24g_syncword_crc8 -0x223 000834 inject mod ,8 -0x224 000835 fetch 1 ,mem_24g_txlen -0x225 000836 iforce loopcnt -0x226 000837 arg mem_24g_txpayload ,contr -: 000838 p_g24tr_loop: -0x227 000839 ifetch 1 ,contr -0x228 000840 inject mod ,8 -0x229 000841 loop p_g24tr_loop -0x22a 000844 enable enable_parity -0x22b 000845 inject mod ,24 -0x22c 000846 disable enable_parity -0x22d 000847 until null ,tx_clear -0x22e 000848 nop 100 -0x22f 000849 disable encode_fec0 -0x230 000850 disable encode_fec1 -0x231 000851 rtn -: 000853 p_g24_timer_check: -0x232 000854 call disable_user -0x233 000855 fetcht 4 ,mem_24g_tx_btclk -0x234 000856 copy clkn_bt ,pdata -0x235 000857 isub temp ,null -0x236 000858 ncall g24_timer_timeout ,positive -0x237 000859 copy pdata ,regb -0x238 000860 fetch 4 ,mem_24g_tx_btclk -0x239 000861 fetcht 1 ,mem_24g_interval -0x23a 000862 iadd temp ,temp -0x23b 000863 copy regb ,pdata -0x23c 000864 isub temp ,null -0x23d 000865 nrtn positive -0x23e 000866 set0 28 ,pdata -0x23f 000867 store 4 ,mem_24g_tx_btclk -0x240 000868 branch enable_user -: 000870 p_rssi_average: -0x241 000871 arg 0 ,temp -0x242 000872 arg rssi_buf_len_signal + 1 ,loopcnt -0x243 000873 copy rega ,contr -: 000874 p_rssi_average_loop: -0x244 000875 ifetch 1 ,contr -0x245 000876 iadd temp ,temp -0x246 000877 loop p_rssi_average_loop -0x247 000878 rshift3 temp ,pdata -0x248 000879 copy pdata ,temp -0x249 000880 rtnmark0 mark_24g -0x24a 000882 div pdata ,10 -0x24b 000883 call wait_div_end -0x24c 000884 quotient pdata -0x24d 000885 lshift4 pdata ,pdata -0x24e 000886 branch clk2bt_next -: 000888 p_mouse_before_lpm: -0x24f 000889 rtnmark1 mark_24g -0x250 000890 call p_mouse_le_txbuff_save -0x251 000891 call p_mouse_setgpio_lpm -0x252 000892 fetch 1 ,mem_context -0x253 000893 bbit0 state_inconn ,p_clear_wake -0x254 000894 fetch 1 ,mem_lpm_current_mult -0x255 000895 nrtn blank -: 000896 p_clear_wake: -0x256 000897 setarg 0 -0x257 000898 store 8 ,mem_gpio_wakeup_low -0x258 000899 rtn -: 000901 p_g24_lpm_wait: -0x259 000902 enable user -0x25a 000903 call lpo_calibration -0x25b 000904 fetch 3 ,mem_clks_per_lpo -0x25c 000905 branch disable_user ,blank -0x25d 000906 fetch 1 ,mem_lpm_mode -0x25e 000907 branch disable_user ,blank -0x25f 000908 fetch 1 ,mem_24g_transmit_by_interrupt -0x260 000909 beq g24_tx_timer_int_enable ,disable_user -: 000910 p_mouse_setgpio_lpm: -0x261 000911 call p_mouse_set_sdio_high -0x262 000912 call p_clear_wake -: 000913 p_mouse_setgpio_hibernate: -0x263 000914 call mouse_lpm_before_common -0x264 000915 fetcht 1 ,mem_flash_ncs_gpio -0x265 000916 call gpio_out_inactive -0x266 000917 hfetch 4 ,core_gpio_oe0 -0x267 000918 hfetcht 4 ,core_gpio_pu0 -0x268 000919 ior temp ,temp -0x269 000920 invert temp ,temp -0x26a 000921 hstoret 4 ,core_gpio_pd0 -0x26b 000922 hfetch 1 ,core_gpio_pd1 -0x26c 000923 set0 2 ,pdata -0x26d 000924 hstore 1 ,core_gpio_pd1 -0x26e 000925 hfetch 1 ,core_gpio_pd2 -0x26f 000926 set0 6 ,pdata -0x270 000927 hstore 1 ,core_gpio_pd2 -0x271 000932 hfetch 1 ,core_gpio_pd3 -0x272 000933 set1 0 ,pdata -0x273 000934 hstore 1 ,core_gpio_pd3 -0x274 000935 hfetch 1 ,core_gpio_pu2 -0x275 000936 or pdata ,0xc0 ,pdata -0x276 000937 hstore 1 ,core_gpio_pu2 -0x277 000938 hfetch 1 ,core_gpio_pd3 -0x278 000939 and pdata ,0x7f ,pdata -0x279 000940 hstore 1 ,core_gpio_pd3 -0x27a 000943 rtn -: 000945 p_mouse_t_wheel_clear_wake: -0x27b 000946 fetcht 1 ,mem_whee_a_data_gpio -0x27c 000947 call p_gpio_set_input_pd -0x27d 000948 fetcht 1 ,mem_whee_b_data_gpio -0x27e 000949 call p_gpio_set_input_pd -0x27f 000950 fetcht 1 ,mem_whee_ta_data_gpio -0x280 000951 call p_gpio_set_input_pd -0x281 000952 fetcht 1 ,mem_whee_tb_data_gpio -0x282 000953 call p_gpio_set_input_pd -0x283 000955 fetch 1 ,mem_gpio_wakeup_low -0x284 000956 and pdata ,0xbf ,pdata -0x285 000957 store 1 ,mem_gpio_wakeup_low -0x286 000958 fetch 1 ,mem_gpio_wakeup_low + 2 -0x287 000959 and pdata ,0x7f ,pdata -0x288 000960 store 1 ,mem_gpio_wakeup_low + 2 -0x289 000961 fetch 1 ,mem_gpio_wakeup_low + 3 -0x28a 000962 and pdata ,0xe7 ,pdata -0x28b 000963 store 1 ,mem_gpio_wakeup_low + 3 -0x28c 000964 rtn -: 000972 p_mouse_set_sdio_high: -0x28d 000973 fetch 1 ,mem_mouse_init_sensor_reset_flag -0x28e 000974 rtn blank -0x28f 000975 branch p_mouse_seting_sensor_type -: 000977 p_device_init: -0x290 000978 jam 0x86 ,0x895b -0x291 000979 jam 0xa0 ,0x895c -0x292 000980 call initialize_radio -0x293 000981 call app_lpm_mult_enable -0x294 000982 call enable_authrom -0x295 000983 branch p_mouse_spi_init ,wake -: 000984 p_device_wake_from_power: -0x296 000985 fetch 3 ,mem_le_lap + 3 -0x297 000986 store 3 ,mem_le_lap_high_3b -0x298 000987 call p_wake_from_power -0x299 000989 call p_mouse_switch_hwakeup_bypb -0x29a 000990 fetcht 1 ,mem_device_flag -0x29b 000991 fetch 1 ,mem_24g_device_number -0x29c 000992 isub temp ,null -0x29d 000993 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero -0x29e 000996 fetch 1 ,mem_device_flag -0x29f 000997 beq 0xff ,p_mouse_24g_pair_check -0x2a0 000998 sub pdata ,1 ,null -0x2a1 000999 nbranch p_mouse_check_reconn_target ,zero -: 001000 p_mouse_24g_pair_check: -0x2a2 001001 call p_mouse_check_key_gpio -0x2a3 001002 beq mouse_lm_button ,p_mouse_24g_pairing_button -: 001003 p_mouse_check_reconn_target: -0x2a4 001004 call p_mouse_tx_power_init -0x2a5 001005 call p_mouse_select_device_by_button -0x2a6 001006 arg mem_device1_type ,rega -0x2a7 001007 fetch 1 ,mem_device_flag -0x2a8 001008 fetcht 1 ,mem_24g_device_number -0x2a9 001009 isub temp ,null -0x2aa 001010 branch p_mouse_start_24g_mode ,zero -0x2ab 001011 increase -1 ,pdata -0x2ac 001012 mul32 pdata ,29 ,pdata -0x2ad 001013 iadd rega ,rega -0x2ae 001014 ifetch 1 ,rega -0x2af 001015 store 1 ,mem_xrecord_mode -0x2b0 001019 beq rec_4_mode ,p_mouse4_0_check_reconn_target -0x2b1 001021 rtn -: 001023 p_mouse_tx_power_init: -0x2b2 001024 fetch 1 ,mem_tx_power_temp -0x2b3 001025 store 1 ,mem_tx_power -0x2b4 001026 rtn -: 001027 p_mouse_bt_deepsleep_timerout_adjust: -0x2b5 001028 setarg 0x4650 -0x2b6 001029 store 2 ,mem_mouse_no_data_timeout -0x2b7 001030 rtn -: 001040 p_mouse4_0_check_reconn_target: -0x2b8 001041 jam zcode_23 ,mem_zcode_temp_param0 -0x2b9 001042 branch p_zcode_entrance -: 001044 p_le_check_adv_flag: -0x2ba 001045 arg mem_le_adv_data ,rega -: 001046 p_le_check_adv_flag_loop: -0x2bb 001047 ifetch 1 ,rega -0x2bc 001048 rtn blank -0x2bd 001049 iadd contr ,rega -0x2be 001050 ifetch 1 ,contr -0x2bf 001051 rtneq 0x01 -0x2c0 001052 branch p_le_check_adv_flag_loop -: 001054 p_mouse_le_fast_conn_disable: -0x2c1 001055 jam 0x5a ,mem_mouse_fast_conn_flag -0x2c2 001056 rtn -: 001058 p_mouse_fast_conn_init: -0x2c3 001059 jam 0xff ,mem_mouse_fast_conn_flag -0x2c4 001060 jam 0x34 ,mem_xrecord_mode -0x2c5 001061 fetch 6 ,mem_24g_allpowerful_addr -0x2c6 001062 store 6 ,mem_le_lap -0x2c7 001063 rtn -: 001066 p_mouse_24g_pairing_button: -0x2c8 001067 jam zcode_62 ,mem_zcode_temp_param0 -0x2c9 001068 branch p_zcode_entrance -: 001070 p_mouse_init_sunt: -0x2ca 001071 call p_mouse_spi_init -0x2cb 001072 call mouse_spi_sdio_gpio_pollup -: 001073 p_mouse_init_sensor: -0x2cc 001074 call mouse_read_sensor_id -0x2cd 001075 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge -0x2ce 001076 beq p3065_id1 ,p_mouse_p3065_init_param -0x2cf 001077 call mouse_twspi_reset -0x2d0 001078 nop 1000 -0x2d1 001079 branch p_mouse_init_sensor -: 001081 p_mouse_init_sensor_reset: -0x2d2 001082 jam 1 ,mem_mouse_init_sensor_reset_flag -0x2d3 001083 call spi_ncs_enable -0x2d4 001084 call p_mouse_init_sunt -0x2d5 001085 branch spi_ncs_disable -: 001087 p_mouse_init_p32xx_id2_judge: -0x2d6 001088 call p_mouse_sensor_poweron -0x2d7 001089 fetch 1 ,mem_sensor_id2 -0x2d8 001090 beq p_mx8650 ,p_mouse_mx8650_init_param -0x2d9 001092 branch mouse_init_p32xx_id2_judge + 1 -: 001094 p_mouse_mx8650_init_param: -0x2da 001095 jam mx8650 ,mem_config_sensor_type -0x2db 001096 arg mem_sensor_8650_init ,regc -0x2dc 001097 call p_sensor_wr_seq -0x2dd 001098 branch p_mouse_dpi_config -: 001100 p_sensor_wr_seq: -0x2de 001101 ifetch 2 ,regc -0x2df 001102 arg 0xffff ,temp -0x2e0 001103 isub temp ,null -0x2e1 001104 rtn zero -0x2e2 001105 call twspi_write -0x2e3 001106 increase 2 ,regc -0x2e4 001107 branch p_sensor_wr_seq -: 001114 p_mouse_p3065_init_param: -0x2e5 001115 call p_mouse_sensor_poweron -0x2e6 001116 branch mouse_p3065_init_param -: 001123 p_spid_init_flash: -0x2e7 001124 jam 0x40 ,core_spid_ctrl -0x2e8 001125 jam 0x0 ,core_spid_delay -0x2e9 001126 hfetch 1 ,core_gpio_sel1 -0x2ea 001127 set0 0 ,pdata -0x2eb 001128 set0 1 ,pdata -0x2ec 001129 set1 3 ,pdata -0x2ed 001130 set0 4 ,pdata -0x2ee 001131 hstore 1 ,core_gpio_sel1 -0x2ef 001132 setarg 0 -0x2f0 001133 store 4 ,mem_spid_tbuf -0x2f1 001134 hfetch 1 ,core_gpio_pd3 -0x2f2 001135 set0 0 ,pdata -0x2f3 001136 hstore 1 ,core_gpio_pd3 -0x2f4 001137 rtn -: 001139 p_mouse_load_flash_info_check: -0x2f5 001140 call p_flash_release_deep_power_down -0x2f6 001141 call mouse_load_flash_flag -0x2f7 001142 fetch 2 ,mem_store_flag -0x2f8 001143 arg eeprom_init_flag ,temp -0x2f9 001144 isub temp ,null -0x2fa 001145 branch p_mouse_load_flash_device_info ,zero -0x2fb 001146 storet 2 ,mem_store_flag -0x2fc 001147 call mouse_ble_init_address -0x2fd 001150 fetch 4 ,mem_mouse_24g_addr_init -0x2fe 001151 store 4 ,mem_mouse_24g_addr -0x2ff 001152 store 4 ,mem_24g_addr -: 001153 p_mouse_store_flash_device_info: -0x300 001154 call p_mouse_adc_read_timeout -0x301 001155 fetch 2 ,mem_mouse_vdd_now_vol -0x302 001156 branch p_mouse_store_flash_device_info ,blank -0x303 001157 fetch 1 ,mem_adc_power_flag -0x304 001158 bbit1 1 ,app_enter_hibernate -0x305 001159 call p_flash_release_deep_power_down -0x306 001160 call p_flash_erase_sector -0x307 001161 call p_flash_write_enable -0x308 001162 call p_mouse_information_flash_parameters -0x309 001163 call p_spid_write_flash -0x30a 001164 call p_wait_flash_done -0x30b 001165 call p_mouse_store_flash_dpi -: 001166 p_mouse_store_random_addr_increase_count: -0x30c 001167 call p_spid_init_flash -0x30d 001168 call p_flash_write_enable -0x30e 001169 arg 2 ,temp -0x30f 001170 arg mem_random_addr_increase_count ,rega -0x310 001171 arg mouse_random_addr_count_eeprom_offset ,regb -0x311 001172 call p_mouse_store_flash_comm -0x312 001173 call p_flash_deep_power_down -: 001174 p_mouse_spi_init: -0x313 001175 jam 0x76 ,mem_spi_init_clk -0x314 001176 branch mouse_spi_init -: 001178 p_mouse_store_flash_dpi: -0x315 001179 call p_spid_init_flash -0x316 001180 call p_flash_write_enable -0x317 001181 arg 1 ,temp -0x318 001182 arg mem_mouse_dpi ,rega -0x319 001183 arg mouse_dpi_eeprom_offect ,regb -: 001184 p_mouse_store_flash_comm: -0x31a 001185 fetch 3 ,mem_flash_base -0x31b 001186 iadd regb ,pdata -0x31c 001187 call p_spid_write_flash -0x31d 001188 branch p_wait_flash_done -: 001190 p_flash_erase_sector: -0x31e 001191 fetch 3 ,mem_flash_base -0x31f 001192 store 3 ,mem_spi_write_addr -0x320 001193 call p_flash_write_enable -0x321 001194 call flash_erase_sector + 3 -: 001195 p_wait_flash_done: -0x322 001196 call p_flash_read_status -0x323 001197 bbit1 flash_status_wip ,p_wait_flash_done -0x324 001198 rtn -: 001200 p_flash_read_status: -0x325 001201 setarg mem_spid_rbuf -0x326 001202 hstore 2 ,core_spid_rxaddr -0x327 001203 setarg flash_read_satus -0x328 001204 force 1 ,temp -0x329 001205 store 1 ,mem_spid_tbuf -0x32a 001206 setarg mem_spid_tbuf -0x32b 001207 hstore 2 ,core_spid_txaddr -0x32c 001208 branch spid_read_regs + 2 -: 001210 p_flash_write_enable: -0x32d 001211 call spid_unlock_flash -0x32e 001212 call p_flash_read_status -0x32f 001213 bbit0 flash_status_wel ,p_flash_write_enable + 1 -0x330 001214 rtn -: 001217 p_spid_write_flash: -0x331 001218 copy pdata ,regc -0x332 001219 copy rega ,pdata -0x333 001220 increase -4 ,pdata -0x334 001221 copy pdata ,regb -0x335 001222 ifetch 4 ,regb -0x336 001223 store 4 ,mem_write_flash_head_temp -0x337 001224 copy regc ,pdata -0x338 001225 call spid_write_flash -0x339 001226 fetch 4 ,mem_write_flash_head_temp -0x33a 001227 istore 4 ,regb -0x33b 001228 rtn -: 001230 p_mouse_information_flash_parameters: -0x33c 001231 setarg mem_mouse_information_end -0x33d 001232 arg mem_mouse_information_start ,temp -0x33e 001233 isub temp ,temp -0x33f 001234 fetch 3 ,mem_flash_base -0x340 001235 arg mem_mouse_information_start ,rega -0x341 001236 rtn -: 001243 p_mouse_load_flash_device_info: -0x342 001245 call p_flash_release_deep_power_down -0x343 001246 call p_mouse_information_flash_parameters -0x344 001247 call spid_read_flash -0x345 001248 call p_mouse_load_random_addr_increase_count -0x346 001249 call p_mouse_load_dpi_from_flash -0x347 001250 call mouse_select_reconn_device -0x348 001251 fetch 4 ,mem_mouse_24g_addr -0x349 001252 store 4 ,mem_24g_addr -0x34a 001253 rtn -: 001255 p_flash_deep_power_down: -0x34b 001256 jam flash_command_deep_power_down ,mem_temp -: 001257 p_spid_write_flash_cmd: -0x34c 001258 call p_spid_init_flash -0x34d 001259 call delay_nop100 -0x34e 001260 arg mem_write_flash_head_temp ,rega -0x34f 001261 fetcht 1 ,mem_temp -0x350 001262 call spid_write_flash_common -0x351 001263 branch delay_nop100 -: 001265 p_flash_release_deep_power_down: -0x352 001266 jam flash_command_release_deep_power_down ,mem_temp -0x353 001267 branch p_spid_write_flash_cmd -: 001270 p_mouse_load_random_addr_increase_count: -0x354 001271 call p_flash_release_deep_power_down -0x355 001272 arg 2 ,temp -0x356 001273 arg mem_random_addr_increase_count ,rega -0x357 001274 arg mouse_random_addr_count_eeprom_offset ,regb -: 001275 p_mouse_load_flash_comm: -0x358 001276 fetch 3 ,mem_flash_base -0x359 001277 iadd regb ,pdata -0x35a 001278 branch spid_read_flash -: 001280 p_mouse_load_dpi_from_flash: -0x35b 001281 call p_flash_release_deep_power_down -0x35c 001282 arg 1 ,temp -0x35d 001283 arg mem_mouse_dpi ,rega -0x35e 001284 arg mouse_dpi_eeprom_offect ,regb -0x35f 001285 branch p_mouse_load_flash_comm -: 001289 p_mouse_start_24g_mode: -0x360 001292 jam 1 ,mem_device_flag -0x361 001293 call p_mouse_mode_24g_device_multi_led_on -: 001294 p_g24_start_24g_mode: -0x362 001295 jam zcode_60 ,mem_zcode_temp_param0 -0x363 001296 branch p_zcode_entrance -: 001298 p_g24_auto_pair_start: -0x364 001299 call p_mouse_discovery_multi_led_blink -0x365 001300 jam zcode_61 ,mem_zcode_temp_param0 -0x366 001301 branch p_zcode_entrance -: 001306 p_pdata_0xff_check: -0x367 001307 call enable_user -0x368 001308 setarg 0xffff -: 001309 p_pdata_0xff_check_loop: -0x369 001310 ifetcht 2 ,contr -0x36a 001311 isub temp ,null -0x36b 001312 ncall disable_user ,zero -0x36c 001313 loop p_pdata_0xff_check_loop -0x36d 001314 rtn -: 001316 p_mouse_g24_package_data: -0x36e 001317 call mouse_g24_package_data -0x36f 001318 fetch 2 ,mem_mouse_z -0x370 001319 rtn blank -: 001320 p_g24_transmit_by_interrupt_enable: -0x371 001321 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt -0x372 001322 setarg 0 -0x373 001323 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0x374 001324 rtn -: 001326 p_mouse_le_txbuff_save: -0x375 001327 arg mem_le_tx_buffer0 ,contr -0x376 001328 arg mem_le_tx_buffer0_omemalloc ,contw -0x377 001329 call p_mouse_le_txbuff_copy -0x378 001330 arg mem_le_tx_buffer1 ,contr -0x379 001331 call p_mouse_le_txbuff_copy -0x37a 001332 arg mem_le_tx_buffer2 ,contr -0x37b 001333 call p_mouse_le_txbuff_copy -0x37c 001334 arg mem_le_tx_buffer3 ,contr -: 001335 p_mouse_le_txbuff_copy: -0x37d 001336 arg 27 ,loopcnt -0x37e 001337 branch memcpy -: 001339 p_mouse_le_txbuff_load: -0x37f 001340 arg mem_le_tx_buffer0_omemalloc ,contr -0x380 001341 arg mem_le_tx_buffer0 ,contw -0x381 001342 call p_mouse_le_txbuff_copy -0x382 001343 arg mem_le_tx_buffer1 ,contw -0x383 001344 call p_mouse_le_txbuff_copy -0x384 001345 arg mem_le_tx_buffer2 ,contw -0x385 001346 call p_mouse_le_txbuff_copy -0x386 001347 arg mem_le_tx_buffer3 ,contw -0x387 001348 branch p_mouse_le_txbuff_copy -: 001350 p_mouse_le: -0x388 001351 call le_fifo_check_nearly_full -0x389 001352 nrtn blank -0x38a 001353 fetch 1 ,mem_mouse_fast_conn_flag -0x38b 001354 beq 0xff ,p_mouse_le_next -0x38c 001355 fetch 1 ,mem_le_connect_status_flag -0x38d 001356 and pdata ,0x03 ,pdata -0x38e 001357 rtnne 0x03 -: 001358 p_mouse_le_next: -0x38f 001359 fetch 1 ,mem_mouse_clear_sensor_data_flag -0x390 001360 call p_mouse_clear_sensor_data ,blank -0x391 001361 fetch mouse_flag_len ,mem_mouse_flag -0x392 001362 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet -0x393 001363 call mouse_motion -0x394 001364 nrtn user -0x395 001365 call p_mouse_le_current_mult_update -0x396 001366 call p_mouse_data_xy_release -0x397 001367 call p_mouse_wheel_trigger -: 001368 p_mouse_data_push: -0x398 001369 arg mem_mouse_key ,rega -0x399 001370 call queue_push -0x39a 001371 call p_mouse_queue_increase ,user -0x39b 001372 rtn -: 001374 p_mouse_le_current_mult_update: -0x39c 001377 jam 0 ,mem_lpm_mult -0x39d 001378 jam 30 ,mem_mouse_le_current_mult_timer -0x39e 001379 rtn -: 001381 p_mouse_data_xy_release: -0x39f 001382 fetch 1 ,mem_config_function_enable -0x3a0 001383 rtnbit1 enable_sensor_motion_pin -0x3a1 001384 fetch 1 ,mem_mouse_long_mult_flag -0x3a2 001385 rtnne 1 -0x3a3 001386 setarg 0 -0x3a4 001387 store 1 ,mem_mouse_long_mult_flag -0x3a5 001388 store 4 ,mem_mouse_x -0x3a6 001389 branch p_mouse_init_sensor_reset -: 001391 p_mouse_data_init: -0x3a7 001392 jam 7 ,mem_mouse_data_queue -0x3a8 001393 jam 4 ,mem_mouse_data_queue + 1 -0x3a9 001394 setarg mem_mouse_data_queue -0x3aa 001395 store 2 ,mem_queue_ptr -0x3ab 001396 branch queue_init -: 001398 p_mouse_queue_increase: -0x3ac 001399 fetch 1 ,mem_mouse_data_queue_num -0x3ad 001400 increase 1 ,pdata -0x3ae 001401 store 1 ,mem_mouse_data_queue_num -0x3af 001402 rtn -: 001404 p_mouse_data_pull: -0x3b0 001405 arg mem_mouse_key ,rega -0x3b1 001406 call queue_pop -0x3b2 001407 branch p_mouse_fill_data_le ,user -0x3b3 001408 rtn -: 001410 p_mouse_fill_data_le: -0x3b4 001411 call le_clear_md -0x3b5 001412 fetch 1 ,mem_mouse_data_queue_num -0x3b6 001413 sub pdata ,1 ,null -0x3b7 001414 ncall le_set_md ,positive -0x3b8 001415 fetch 1 ,mem_mouse_data_queue_num -0x3b9 001416 rtn blank -0x3ba 001417 increase -1 ,pdata -0x3bb 001418 store 1 ,mem_mouse_data_queue_num -0x3bc 001419 branch mouse_fill_data_le -: 001425 p_mouse_wheel_trigger: -0x3bd 001426 fetch 2 ,mem_mouse_z -0x3be 001427 rtn blank -0x3bf 001428 jam 1 ,mem_mouse_wheel_trigger -0x3c0 001429 jam 10 ,mem_mouse_wheel_trigger_timer -0x3c1 001430 rtn -: 001432 p_mouse_bt: -0x3c2 001433 rtn attempt -0x3c3 001434 fetch 1 ,mem_app_handshake_flag -0x3c4 001435 rtn blank -0x3c5 001436 call l2cap_malloc_is_fifo_nearly_full -0x3c6 001437 nrtn blank -0x3c7 001438 fetch 1 ,mem_mouse_clear_sensor_data_flag -0x3c8 001439 call p_mouse_clear_sensor_data ,blank -0x3c9 001440 fetch mouse_flag_len ,mem_mouse_flag -0x3ca 001441 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data -0x3cb 001442 bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data -0x3cc 001443 call mouse_motion -0x3cd 001444 nrtn user -0x3ce 001445 call p_mouse_le_current_mult_update -0x3cf 001446 call p_mouse_data_xy_release -0x3d0 001447 call p_mouse_wheel_trigger -0x3d1 001448 fetch 1 ,mem_mouse_bt_boot_mode -0x3d2 001449 beq 1 ,p_mouse_send_data_boot_mode -0x3d3 001450 fetch 1 ,mem_mouse_bt_send_first_package_flag -0x3d4 001451 rtn blank -0x3d5 001452 branch mouse_send_data -: 001454 p_mouse_send_data_boot_mode: -0x3d6 001455 fetch 1 ,mem_mouse_key -0x3d7 001456 store 1 ,mem_mouse_bt_boot_data -0x3d8 001457 fetch 1 ,mem_mouse_x -0x3d9 001458 istore 1 ,contw -0x3da 001459 fetch 1 ,mem_mouse_y -0x3db 001460 istore 1 ,contw -0x3dc 001461 fetch 2 ,mem_mouse_z -0x3dd 001462 istore 2 ,contw -0x3de 001464 arg 7 ,rega -0x3df 001465 call hid_malloc_tx_buff -0x3e0 001466 fetch 2 ,mem_hid_int_remote_cid -0x3e1 001467 istore 2 ,contw -0x3e2 001468 setarg 0x02a1 -0x3e3 001469 istore 2 ,contw -0x3e4 001470 fetch 5 ,mem_mouse_bt_boot_data -0x3e5 001471 istore 5 ,contw -0x3e6 001472 rtn -: 001474 p_mouse_clear_sensor_data: -0x3e7 001475 jam 1 ,mem_mouse_clear_sensor_data_flag -0x3e8 001476 call le_set_config_more_data -0x3e9 001477 branch p_mouse_init_sensor_reset -: 001479 p_mouse_idle: -0x3ea 001480 call ui_check_paring_button -0x3eb 001481 call p_mouse_dpi_check -0x3ec 001482 branch p_mouse_wheel_check -: 001484 p_mouse_wheel_check: -0x3ed 001485 call p_mouse_t_wheel_scan -0x3ee 001486 call mouse_wheel_scan -0x3ef 001487 branch mouse_wheel_check + 3 -: 001489 p_mouse_t_wheel_scan: -0x3f0 001490 hfetch 1 ,core_gpio_pu2 -0x3f1 001491 set1 7 ,pdata -0x3f2 001492 hstore 1 ,core_gpio_pu2 -0x3f3 001493 hfetch 1 ,core_gpio_pu0 -0x3f4 001494 set1 6 ,pdata -0x3f5 001495 hstore 1 ,core_gpio_pu0 -0x3f6 001496 arg 0 ,rega -0x3f7 001497 fetcht 1 ,mem_whee_ta_data_gpio -0x3f8 001498 call gpio_get_bit -0x3f9 001499 setflag true ,0 ,rega -0x3fa 001500 fetcht 1 ,mem_whee_tb_data_gpio -0x3fb 001501 call gpio_get_bit -0x3fc 001502 setflag true ,1 ,rega -0x3fd 001503 copy rega ,pdata -0x3fe 001504 store 1 ,mem_wheel_tb_new_pinlevel -0x3ff 001505 beq 0x01 ,p_mouse_t_wheel_scan_judge1 -0x400 001506 beq 0x02 ,p_mouse_t_wheel_scan_judge2 -0x401 001507 fetch 1 ,mem_wheel_tog -0x402 001508 bbit1 7 ,p_mouse_t_wheel_scan_judge3 -0x403 001509 rtn -: 001511 p_mouse_t_wheel_scan_judge1: -0x404 001512 fetch 1 ,mem_wheel_tb_old_pinlevel -0x405 001513 beq 0 ,p_mouse_t_wheel_scan_judge11 -0x406 001514 beq 3 ,p_mouse_t_wheel_scan_judge12 -0x407 001515 rtn -: 001516 p_mouse_t_wheel_scan_judge2: -0x408 001517 fetch 1 ,mem_wheel_tb_old_pinlevel -0x409 001518 beq 0 ,p_mouse_t_wheel_scan_judge21 -0x40a 001519 beq 3 ,p_mouse_t_wheel_scan_judge22 -0x40b 001520 rtn -: 001522 p_mouse_t_wheel_scan_judge11: -0x40c 001523 jam 0x82 ,mem_wheel_tog -0x40d 001524 rtn -: 001525 p_mouse_t_wheel_scan_judge12: -0x40e 001526 jam 0x81 ,mem_wheel_tog -0x40f 001527 rtn -: 001528 p_mouse_t_wheel_scan_judge21: -0x410 001529 jam 0x80 ,mem_wheel_tog -0x411 001530 rtn -: 001531 p_mouse_t_wheel_scan_judge22: -0x412 001532 jam 0x83 ,mem_wheel_tog -0x413 001533 rtn -: 001534 p_mouse_t_wheel_scan_judge3: -0x414 001535 fetch 1 ,mem_wheel_tog -0x415 001536 set0 7 ,pdata -0x416 001537 store 1 ,mem_wheel_tog -0x417 001538 beq 0 ,p_mouse_t_wheel_scan_judge30 -0x418 001539 beq 1 ,p_mouse_t_wheel_scan_judge31 -0x419 001540 beq 2 ,p_mouse_t_wheel_scan_judge32 -0x41a 001541 beq 3 ,p_mouse_t_wheel_scan_judge33 -0x41b 001542 rtn -: 001544 p_mouse_t_wheel_scan_judge30: -0x41c 001545 fetch 1 ,mem_wheel_tb_new_pinlevel -0x41d 001546 beq 3 ,p_mouse_wheel_t_forward -0x41e 001547 rtn -: 001548 p_mouse_t_wheel_scan_judge31: -0x41f 001549 fetch 1 ,mem_wheel_tb_new_pinlevel -0x420 001550 beq 0 ,p_mouse_wheel_t_forward -0x421 001551 rtn -: 001552 p_mouse_t_wheel_scan_judge32: -0x422 001553 fetch 1 ,mem_wheel_tb_new_pinlevel -0x423 001554 beq 3 ,p_mouse_wheel_t_back -0x424 001555 rtn -: 001556 p_mouse_t_wheel_scan_judge33: -0x425 001557 fetch 1 ,mem_wheel_tb_new_pinlevel -0x426 001558 beq 0 ,p_mouse_wheel_t_back -0x427 001559 rtn -: 001561 p_mouse_wheel_t_forward: -0x428 001562 jam 0 ,mem_mouse_tz_data_count1 -0x429 001563 fetch 1 ,mem_mouse_tz_data -0x42a 001564 increase 1 ,pdata -0x42b 001565 store 1 ,mem_mouse_tz_data -0x42c 001566 rtn -: 001568 p_mouse_wheel_t_back: -0x42d 001569 jam 0 ,mem_mouse_tz_data_count -0x42e 001570 fetch 1 ,mem_mouse_tz_data -0x42f 001571 increase -1 ,pdata -0x430 001572 store 1 ,mem_mouse_tz_data -0x431 001573 rtn -: 001575 p_mouse_comm_gpio_config: -0x432 001576 fetcht 1 ,mem_mouse_comm_gpio -0x433 001577 rtneq 0xff -0x434 001578 branch p_gpio_set_input_pu -: 001579 p_mouse_dpi_check: -0x435 001580 call p_mouse_comm_gpio_config -0x436 001581 fetcht 1 ,mem_dpi_button_gpio -0x437 001582 call p_gpio_set_input_pd -0x438 001583 fetcht 1 ,mem_dpi_button_gpio -0x439 001584 call gpio_get_bit -0x43a 001585 branch p_mouse_dpi_up ,true -0x43b 001586 call p_gpio_set_input_pu -: 001587 p_mouse_dpi_down: -0x43c 001588 fetch 1 ,mem_mouse_dpi_button_state -0x43d 001589 rtneq dpi_button_state_down -0x43e 001590 jam dpi_button_state_down ,mem_mouse_dpi_button_state -0x43f 001591 fetch 1 ,mem_mouse_dpi -0x440 001592 increase 1 ,pdata -0x441 001593 and pdata ,0x03 ,pdata -0x442 001594 store 1 ,mem_mouse_dpi -0x443 001595 fetcht 1 ,mem_config_sensor_type -0x444 001596 sub temp ,p3212 ,null -0x445 001597 call p_mouse_p3212_dpi_led_set ,zero -0x446 001598 increase 1 ,pdata -0x447 001599 store 1 ,mem_mouse_multi_led_blink_count -0x448 001600 call p_mouse_dpi_multi_led_blink -0x449 001601 branch mouse_seting_dpi -: 001602 p_mouse_dpi_up: -0x44a 001603 call p_gpio_set_input_pu -0x44b 001604 branch mouse_dpi_up -: 001606 p_mouse_p3212_dpi_led_set: -0x44c 001607 mul32 pdata ,2 ,pdata -0x44d 001608 rtn -: 001611 p_mouse_priority_bb_event: -0x44e 001612 copy regc ,pdata -0x44f 001613 beq bt_evt_le_connected ,p_mouse_le_bb_event_connected -0x450 001614 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected -0x451 001615 beq bt_evt_le_enc_info ,p_mouse_le_enc_info -0x452 001616 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt -0x453 001617 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved -0x454 001618 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed -0x455 001619 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout -0x456 001620 beq bt_evt_switch_not_accept ,app_bt_role_switch -0x457 001621 beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept -0x458 001622 beq bt_evt_bb_connected ,p_mouse_bb_event_connected -0x459 001623 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected -0x45a 001624 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check -0x45b 001625 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete -0x45c 001626 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail -0x45d 001627 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success -0x45e 001628 branch mouse_priority_bb_event + 1 -: 001630 p_mouse_le_bb_event_connected: -0x45f 001631 jam zcode_d0 ,mem_zcode_temp_param0 -0x460 001632 branch p_zcode_entrance -: 001634 p_mouse_le_bb_disconnected: -0x461 001635 call p_mouse_sensor_powerdown_check -0x462 001636 jam zcode_a2 ,mem_zcode_temp_param0 -0x463 001637 branch p_zcode_entrance -: 001639 p_mouse_le_enc_info: -: 001640 p_app_updata_le_param: -0x464 001641 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x465 001642 branch ui_ipc_send_cmd -: 001644 p_mouse_le_ll_start_encryt: -0x466 001645 jam zcode_b3 ,mem_zcode_temp_param0 -0x467 001646 branch p_zcode_entrance -: 001648 p_mouse_le_conn_param_update_rsp_recieved: -0x468 001649 jam zcode_a1 ,mem_zcode_temp_param0 -0x469 001650 branch p_zcode_entrance -: 001653 p_mouse_bb_event_reconn_timeout: -: 001654 p_mouse_bb_event_reconn_failed: -0x46a 001655 jam zcode_a3 ,mem_zcode_temp_param0 -0x46b 001656 branch p_zcode_entrance -: 001658 p_mouse_irtual_cable_unplug: -0x46c 001659 jam zcode_71 ,mem_zcode_temp_param0 -0x46d 001660 branch p_zcode_entrance -: 001662 p_mouse_sniff_not_accept: -0x46e 001663 jam zcode_b1 ,mem_zcode_temp_param0 -0x46f 001664 branch p_zcode_entrance -: 001666 p_mouse_bb_event_connected: -0x470 001667 jam 0 ,mem_mouse_connected_state -0x471 001668 jam 0 ,mem_mouse_send_switch_req_timer -0x472 001669 call p_mouse_init_sensor_reset -0x473 001670 branch mouse_stop_discovery -: 001672 p_mouse_bb_event_disconnected: -0x474 001673 call p_mouse_sensor_powerdown_check -0x475 001674 jam zcode_b4 ,mem_zcode_temp_param0 -0x476 001675 branch p_zcode_entrance -: 001677 p_mouse_enter_sniff_check: -0x477 001678 jam zcode_b2 ,mem_zcode_temp_param0 -0x478 001679 branch p_zcode_entrance -: 001681 p_mouse_24g_pairing_complete: -0x479 001682 call p_mouse_discovey_led_blink_off -0x47a 001683 jam 0 ,mem_mouse_connected_state -0x47b 001684 call p_mouse_init_sensor_reset -0x47c 001685 jam zcode_92 ,mem_zcode_temp_param0 -0x47d 001686 branch p_zcode_entrance -: 001688 p_mouse_24g_attempt_fail: -0x47e 001689 jam 1 ,mem_mouse_connected_state -0x47f 001690 jam 10 ,mem_mouse_multi_led_blink_count -0x480 001691 call p_mouse_dpi_multi_led_blink -0x481 001693 call p_mouse_sensor_powerdown_check -0x482 001695 jam zcode_a0 ,mem_zcode_temp_param0 -0x483 001696 branch p_zcode_entrance -: 001698 p_mouse_24g_attempt_success: -0x484 001699 call p_mouse_multi_led_blink_off -0x485 001700 call p_mouse_mode_24g_device_multi_led_on -0x486 001701 jam 0 ,mem_mouse_connected_state -0x487 001703 call p_mouse_init_sensor_reset -: 001704 p_mouse_24g_no_data_timer_init: -0x488 001705 branch mouse_no_data_timer_init -: 001707 p_mouse_before_hibernate: -0x489 001708 call p_mouse_sensor_powerdown_check -0x48a 001709 jam zcode_a4 ,mem_zcode_temp_param0 -0x48b 001710 branch p_zcode_entrance -: 001712 p_mouse_sensor_powerdown_check: -0x48c 001713 fetch 1 ,mem_mouse_init_sensor_reset_flag -0x48d 001714 rtn blank -0x48e 001715 jam 0 ,mem_mouse_init_sensor_reset_flag -: 001716 p_mouse_sensor_powerdown: -0x48f 001717 call p_mouse_init_sunt -0x490 001718 setarg 0x0806 -0x491 001723 branch twspi_write -: 001725 p_mouse_bb_event_timer: -0x492 001726 call p_mouse_adc_read -0x493 001727 call p_mouse_low_voltage_led_timer -0x494 001728 call p_mouse_wheel_trigger_timer -0x495 001729 call p_mouse_select_device_by_button -0x496 001730 call mouse_check_discovery_timeout_timer -0x497 001731 call mouse_check_no_data_timeout_timer -0x498 001732 call p_mouse_g24_long_sleep_param_update_timer -0x499 001733 call p_mouse_g24_stop_mode_timeout_timer -0x49a 001734 call p_mouse_check_direct_timeout_timer -0x49b 001735 call p_mouse_le_enable_att_list_timer -0x49c 001736 call p_mouse_le_current_mult_update_timer -0x49d 001737 call p_le_send_smp_security_request_timer -0x49e 001738 call p_mouse_send_switch_req_timer -0x49f 001739 call mouse_check_hid_handshake_timer -0x4a0 001740 call p_mouse_bt_check_sniff_req_timeout_timer -0x4a1 001741 branch p_mouse_multi_led_blink_timer -: 001744 p_mouse_send_switch_req_timer: -0x4a2 001745 arg mem_mouse_send_switch_req_timer ,regc -0x4a3 001746 arg host_create_conn_resend ,regb -0x4a4 001747 branch timer_single_step -: 001749 p_mouse_bt_check_sniff_req_timeout_timer: -0x4a5 001750 arg mem_mouse_bt_send_first_package_timer ,regc -0x4a6 001751 arg p_mouse_bt_send_first_package ,regb -0x4a7 001752 branch timer_single_step -: 001753 p_mouse_bt_send_first_package: -0x4a8 001754 jam 1 ,mem_mouse_bt_send_first_package_flag -0x4a9 001755 rtn -: 001758 p_mouse_le_enable_att_list_timer: -0x4aa 001759 arg mem_le_start_encrypt_timer ,regc -0x4ab 001760 arg mouse_le_write_enable ,regb -0x4ac 001761 branch timer_single_step -: 001763 p_mouse_check_direct_timeout_timer: -0x4ad 001764 arg mem_mouse_direct_timer ,regc -0x4ae 001765 arg p_mouse_check_direct_timeout ,regb -0x4af 001766 branch timer_single_step_2b -: 001767 p_mouse_check_direct_timeout: -0x4b0 001768 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -0x4b1 001769 nrtn blank -0x4b2 001770 branch mouse_check_direct_timeout -: 001772 p_mouse_le_current_mult_update_timer: -0x4b3 001773 arg mem_mouse_le_current_mult_timer ,regc -0x4b4 001774 arg p_mouse_le_current_mult_reinit ,regb -0x4b5 001775 branch timer_single_step -: 001776 p_mouse_le_current_mult_reinit: -0x4b6 001777 fetch 1 ,mem_lpm_mult_init -0x4b7 001778 store 1 ,mem_lpm_mult -0x4b8 001779 branch p_mouse_long_mult_flag_enable -: 001781 p_le_send_smp_security_request_timer: -0x4b9 001782 fetch 1 ,mem_mouse_le_bb_connected_flag -0x4ba 001783 rtn blank -0x4bb 001784 arg mem_mouse_send_secutiry_request_timer ,regc -0x4bc 001785 arg p_le_pairing_sm_start_check ,regb -0x4bd 001786 branch timer_single_step -: 001787 p_le_pairing_sm_start_check: -0x4be 001788 fetch 1 ,mem_le_send_security_request_flag -0x4bf 001789 nrtn blank -0x4c0 001790 branch le_pairing_sm_start -: 001792 p_mouse_wheel_trigger_timer: -0x4c1 001793 arg mem_mouse_wheel_trigger_timer ,regc -0x4c2 001794 arg p_mouse_wheel_trigger_disable ,regb -0x4c3 001795 branch timer_single_step -: 001796 p_mouse_wheel_trigger_disable: -0x4c4 001797 jam 0 ,mem_mouse_wheel_trigger -0x4c5 001798 rtn -: 001800 p_mouse_g24_long_sleep_param_update_timer: -0x4c6 001801 arg mem_24g_long_sleep_param_update_timer ,regc -0x4c7 001802 arg p_mouse_g24_long_sleep_normal_param ,regb -0x4c8 001803 branch timer_single_step -: 001804 p_mouse_g24_long_sleep_normal_param: -0x4c9 001805 setarg g24_long_sleep_step3 -0x4ca 001806 store 3 ,mem_24g_enter_hibernate -: 001807 p_mouse_long_mult_flag_enable: -0x4cb 001808 jam 1 ,mem_mouse_long_mult_flag -0x4cc 001809 rtn -: 001811 p_mouse_g24_stop_mode_timeout_timer: -0x4cd 001812 arg mem_24g_stop_g24_mode_timeout ,regc -0x4ce 001813 arg p_mouse_g24_stop_mode_timeout ,regb -0x4cf 001814 branch timer_single_step_2b -: 001815 p_mouse_g24_stop_mode_timeout: -0x4d0 001816 jam 1 ,mem_24g_stop_g24_mode -0x4d1 001817 rtn -: 001848 p_mouse_bt_discovery_timer: -0x4d2 001849 arg mem_select_ui_button_count ,regc -0x4d3 001850 arg p_mouse_long_button_bt_discovery ,regb -0x4d4 001851 branch timer_single_step -: 001852 p_mouse_long_button_bt_discovery: -0x4d5 001853 jam on ,mem_select_device_button_statue_bt_discovery -0x4d6 001854 fetcht 1 ,mem_device_flag -0x4d7 001855 fetch 1 ,mem_24g_device_number -0x4d8 001856 isub temp ,null -0x4d9 001857 rtn zero -0x4da 001858 fetch 2 ,mem_ui_state_map -0x4db 001859 isolate1 ui_state_ble_adv ,pdata -0x4dc 001860 call mouse_stop_le_adv ,true -0x4dd 001861 fetch 2 ,mem_ui_state_map -0x4de 001862 isolate1 ui_state_bt_reconnect ,pdata -0x4df 001863 call mouse_cancel_reconnect ,true -0x4e0 001864 branch mouse_long_button_bt_discovry -: 001867 p_mouse_get_select_state: -0x4e1 001868 fetcht 1 ,mem_config_select_device_button_gpio -0x4e2 001869 call p_gpio_set_input_pu -0x4e3 001870 fetcht 1 ,mem_config_select_device_button_gpio -0x4e4 001871 branch gpio_get_bit -: 001873 p_mouse_select_device_by_button: -0x4e5 001874 call p_mouse_get_select_state -0x4e6 001875 nbranch p_mouse_select_device_button_up ,true -: 001876 p_mouse_select_device_button_down: -0x4e7 001877 call p_mouse_bt_discovery_timer -0x4e8 001878 fetch 1 ,mem_select_device_button_statue -0x4e9 001879 rtneq pb_button_state_down -0x4ea 001880 jam pb_button_state_down ,mem_select_device_button_statue -0x4eb 001881 fetch 2 ,mem_mouse_direct_timeout -0x4ec 001882 store 2 ,mem_mouse_direct_timer -0x4ed 001883 force page_length_timer ,queue -0x4ee 001884 fetch 2 ,mem_page_to -0x4ef 001885 branch timer_init -: 001887 p_mouse_select_device_button_up: -0x4f0 001888 fetch 1 ,mem_mouse_select_device_button_wakeup_flag -0x4f1 001889 nbranch p_mouse_select_button_wakeup_firstup ,blank -0x4f2 001890 fetch 1 ,mem_select_device_button_statue -0x4f3 001891 rtneq pb_button_state_up -0x4f4 001892 fetch 1 ,mem_select_ui_button_count -0x4f5 001893 sub pdata ,20 ,null -0x4f6 001894 ncall p_mouse_ready_reconnection_by_button ,positive -0x4f7 001896 fetch 1 ,mem_ui_button_timeout -0x4f8 001897 store 1 ,mem_select_ui_button_count -0x4f9 001898 jam pb_button_state_up ,mem_select_device_button_statue -0x4fa 001899 rtn -: 001901 p_mouse_ready_reconnection_by_button: -0x4fb 001902 call p_mouse_switch_device_flag -0x4fc 001903 jam 0 ,mem_link_key_exists -0x4fd 001904 call p_mouse_store_flash_device_info -0x4fe 001907 fetch mouse_flag_len ,mem_mouse_flag -0x4ff 001908 rtneq mouse_bt_discovery_button_long_down_flag -0x500 001909 branch mouse_set_reconnection -: 001911 p_mouse_switch_device_flag: -0x501 001912 fetcht 1 ,mem_device_flag -0x502 001913 increase 1 ,temp -0x503 001914 fetch 1 ,mem_device_number -0x504 001915 isub temp ,null -0x505 001916 ncall mouse_select_device_count_clean ,positive -0x506 001917 storet 1 ,mem_device_flag -0x507 001918 rtn -: 001920 p_mouse_select_button_wakeup_firstup: -0x508 001921 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0x509 001922 jam pb_button_state_up ,mem_select_device_button_statue -0x50a 001923 jam on ,mem_mouse_multi_led_blink_enable -0x50b 001924 rtn -: 001926 p_mouse_le_bb_disconnected_led_blink_set: -0x50c 001927 jam 1 ,mem_mouse_connected_state -0x50d 001928 jam 10 ,mem_mouse_multi_led_blink_count -0x50e 001929 branch p_mouse_dpi_multi_led_blink -: 001962 p_mouse_adc_read: -0x50f 001965 fetch 2 ,mem_mouse_multi_led_blink_count -0x510 001966 nrtn blank -0x511 001967 fetch 1 ,mem_mouse_wheel_trigger -0x512 001968 nrtn blank -0x513 001969 fetch 1 ,mem_adc_read_timer -0x514 001970 increase 1 ,pdata -0x515 001971 store 1 ,mem_adc_read_timer -0x516 001972 sub pdata ,10 ,null -0x517 001973 rtn positive -: 001974 p_mouse_adc_read_timeout: -0x518 001975 call adc_init_data -0x519 001976 jam 0 ,mem_adc_read_timer -0x51a 001977 call p_adc_set_mode -0x51b 001978 call vdd_calculate_by_mode -0x51c 001979 mul32 pdata ,3 ,pdata -0x51d 001980 arg 0x0f ,temp -0x51e 001981 isub temp ,pdata -0x51f 001982 sub pdata ,0x64 ,null -0x520 001983 call p_mouse_vdd_decrease ,positive -0x521 001984 store 2 ,mem_mouse_vdd_now_vol -0x522 001985 arg mem_mouse_vdd_calculate_set ,rega -0x523 001988 branch p_mouse_adc_read_next -: 001991 p_mouse_adc_read_next: -0x524 001992 call p_adc_bat_percent_lowpower_out -0x525 001993 fetch 1 ,mem_adc_power_flag -0x526 001994 bbit1 1 ,app_enter_hibernate -0x527 001995 bbit0 0 ,p_mouse_adc_no_low_voltage -0x528 001996 jam 1 ,mem_mouse_adc_last_low_voltage_flag -0x529 001997 branch mouse_adc_low_voltage -: 001999 p_mouse_adc_no_low_voltage: -0x52a 002000 call mouse_adc_no_low_voltage -0x52b 002001 fetch 1 ,mem_mouse_adc_last_low_voltage_flag -0x52c 002002 rtn blank -0x52d 002003 jam 0 ,mem_mouse_adc_last_low_voltage_flag -0x52e 002004 branch p_mouse_multi_led_off -: 002006 p_mouse_vdd_decrease: -0x52f 002007 arg 0x05 ,temp -0x530 002008 isub temp ,pdata -0x531 002009 rtn -: 002011 p_adc_set_mode: -: 002015 p_adc_check_gpio: -0x532 002016 hfetch 1 ,core_gpio_pu0 -0x533 002017 set0 5 ,pdata -0x534 002018 hstore 1 ,core_gpio_pu0 -0x535 002019 call adc_check_gpio -0x536 002020 hfetch 1 ,core_gpio_pu0 -0x537 002021 set1 5 ,pdata -0x538 002022 hstore 1 ,core_gpio_pu0 -0x539 002023 rtn -: 002025 p_adc_bat_percent_lowpower_out: -0x53a 002026 ifetch 8 ,rega -0x53b 002027 store 8 ,mem_pdatatemp -0x53c 002028 fetcht 2 ,mem_pdatatemp + 2 -0x53d 002029 fetch 2 ,mem_pdatatemp + 6 -0x53e 002030 isub temp ,null -0x53f 002031 nbranch adc_set_no_power_flag ,positive -0x540 002032 fetcht 2 ,mem_pdatatemp + 4 -0x541 002033 isub temp ,null -0x542 002034 nbranch adc_set_low_power_flag ,positive -: 002035 p_adc_clear_low_power_flag: -0x543 002036 fetch 1 ,mem_adc_power_flag -0x544 002037 set0 0 ,pdata -0x545 002038 store 1 ,mem_adc_power_flag -0x546 002039 rtn -: 002041 p_mouse_low_voltage_led_timer: -0x547 002042 fetch mouse_flag_len ,mem_mouse_flag -0x548 002043 rtnbit0 mouse_low_voltage_flag -0x549 002044 fetch 2 ,mem_ui_state_map -0x54a 002045 rtnbit1 ui_state_ble_adv -0x54b 002046 rtnbit1 ui_state_bt_discovery -0x54c 002047 fetch 2 ,mem_mouse_multi_led_blink_count -0x54d 002048 nrtn blank -0x54e 002049 fetch 1 ,mem_adc_low_volatage_led_timer_count -0x54f 002050 pincrease 1 -0x550 002051 store 1 ,mem_adc_low_volatage_led_timer_count -0x551 002052 sub pdata ,30 ,null -0x552 002053 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive -0x553 002054 sub pdata ,10 ,null -0x554 002055 branch p_mouse_multi_led_on ,positive -0x555 002056 branch p_mouse_multi_led_off -: 002057 p_mouse_adc_low_volatage_led_timer_count_clean: -0x556 002058 jam 1 ,mem_adc_low_volatage_led_timer_count -0x557 002059 rtn -: 002062 p_mouse_sensor_poweron: -0x558 002063 call p_mouse_spi_init -0x559 002064 setarg 0x8006 -0x55a 002065 call twspi_write -0x55b 002066 nop 12000 -0x55c 002067 arg mem_sensor_poweron_init ,regc -0x55d 002068 call p_sensor_wr_seq -: 002069 p_mouse_dpi_config: -0x55e 002070 fetch 1 ,mem_mouse_dpi -0x55f 002071 bne 0xff ,p_mouse_seting_dpi -: 002072 p_mouse_dpi_config_default: -0x560 002073 fetch 1 ,mem_config_sensor_motion -0x561 002074 store 1 ,mem_mouse_dpi -: 002075 p_mouse_seting_dpi: -: 002076 p_mouse_seting_sensor_type: -0x562 002077 fetch 1 ,mem_config_sensor_type -0x563 002078 beq p3212 ,mouse_seting_3212_dpi -0x564 002079 beq p3065_xy ,p_mouse_seting_3065xy_dpi -0x565 002080 beq mx8650 ,p_mouse_seting_3065xy_dpi -: 002082 p_mouse_seting_3205_dpi: -0x566 002083 fetch 1 ,mem_mouse_dpi -0x567 002084 sub pdata ,mouse_dpi_level2 ,null -0x568 002085 call p_mouse_3205_dpi_recount ,zero -0x569 002086 fetch 1 ,mem_mouse_dpi -0x56a 002087 beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 -0x56b 002088 beq mouse_dpi_level4 ,mouse_set_cpi3 -0x56c 002089 branch mouse_set_cpi2 -: 002090 p_mouse_3205_dpi_recount: -0x56d 002091 jam mouse_dpi_level3 ,mem_mouse_dpi -0x56e 002092 rtn -: 002093 p_mouse_3205_set_cpi1: -0x56f 002094 fetch 1 ,mem_320x_dpi_1 -0x570 002095 increase -1 ,pdata -0x571 002096 branch mouse_p3205_dpi -: 002098 p_mouse_seting_3065xy_dpi: -0x572 002099 fetch 1 ,mem_mouse_dpi -0x573 002100 sub pdata ,mouse_dpi_level2 ,null -0x574 002101 call p_mouse_3205_dpi_recount ,zero -0x575 002102 fetch 1 ,mem_mouse_dpi -0x576 002103 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 -0x577 002104 beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 -: 002105 p_mouse_3065xy_set_cpi3: -0x578 002106 fetch 1 ,mem_3065xy_dpi_3 -: 002107 p_mouse_dpi_store: -0x579 002108 store 1 ,mem_mouse_cpi_count -0x57a 002109 branch mouse_p3205_dpi + 3 -: 002110 p_mouse_3065xy_set_cpi1: -0x57b 002111 fetch 1 ,mem_3065xy_dpi_1 -0x57c 002112 branch p_mouse_dpi_store -: 002113 p_mouse_3065xy_set_cpi4: -0x57d 002114 fetch 1 ,mem_3065xy_dpi_4 -0x57e 002115 branch p_mouse_dpi_store -: 002128 p_mouse_motion: -0x57f 002129 disable user -0x580 002130 setarg 0 -0x581 002131 store 6 ,mem_mouse_x -0x582 002132 call p_mouse_cheak_sensor_data -0x583 002133 call p_mouse_set_sdio_high -0x584 002134 call mouse_zwheel -0x585 002135 call mouse_t_zwheel -0x586 002136 call p_mouse_key -0x587 002137 call p_mouse_data_zoom -0x588 002138 nrtn user -0x589 002139 branch mouse_motion + 9 -: 002141 p_mouse_cheak_sensor_data: -0x58a 002142 fetch 1 ,mem_spi_write_flash_sm -0x58b 002143 rtnne flash_sm_no_buys -0x58c 002144 fetch 1 ,mem_config_sensor_type -0x58d 002145 beq p3212 ,p_mouse_p3212_sensor_motion -0x58e 002146 beq p3610 ,p_mouse_p3610_sensor_motion -0x58f 002152 branch p_mouse_p32xx_sensor_motion -: 002153 p_mouse_p3212_sensor_motion: -0x590 002154 call mouse_clear_sensor_data -0x591 002155 branch mouse_p3212_sensor_motion_next -: 002156 p_mouse_p3610_sensor_motion: -0x592 002157 disable user -0x593 002158 branch mouse_p3610_sensor_motion + 4 -: 002159 p_mouse_p32xx_sensor_motion: -0x594 002160 call mouse_clear_sensor_data -0x595 002161 disable user -0x596 002162 branch mouse_p32xx_sensor_motion_2 -: 002164 p_mouse_data_zoom: -0x597 002165 fetch 1 ,mem_config_sensor_type -0x598 002166 rtnne p3212 -0x599 002167 fetch 1 ,mem_mouse_dpi -0x59a 002168 rtnne mouse_dpi_level4 -0x59b 002169 fetch 2 ,mem_mouse_x -0x59c 002170 call p_mouse_1600_zoom -0x59d 002171 store 2 ,mem_mouse_x -0x59e 002172 fetch 2 ,mem_mouse_y -0x59f 002173 call p_mouse_1600_zoom -0x5a0 002174 store 2 ,mem_mouse_y -0x5a1 002175 rtn -: 002177 p_mouse_1600_zoom: -0x5a2 002178 bbit1 11 ,p_mouse_xy_inverse -0x5a3 002179 bbit0 11 ,p_mouse_xy_zoom_3200 -0x5a4 002180 rtn -: 002182 p_mouse_xy_inverse: -0x5a5 002183 sub pdata ,0 ,pdata -0x5a6 002184 call p_mouse_xy_zoom_3200 -0x5a7 002185 sub pdata ,0 ,pdata -0x5a8 002186 rtn -: 002188 p_mouse_xy_zoom_3200: -0x5a9 002189 iadd pdata ,pdata -0x5aa 002190 branch p_mouse_xy_zoom_store -: 002192 p_mouse_xy_zoom_store: -0x5ab 002193 store 2 ,mem_mouse_temp_data -0x5ac 002194 fetch 1 ,mem_mouse_temp_data + 1 -0x5ad 002195 sub pdata ,0x7 ,null -0x5ae 002196 ncall p_mouse_xy_forward_overflow ,positive -0x5af 002197 fetch 2 ,mem_mouse_temp_data -0x5b0 002198 rtn -: 002200 p_mouse_xy_forward_overflow: -0x5b1 002201 setarg 0x7ff -0x5b2 002202 store 2 ,mem_mouse_temp_data -0x5b3 002203 rtn -: 002205 p_mouse_key: -0x5b4 002206 call p_mouse_check_key_gpio -0x5b5 002207 branch mouse_key + 1 -: 002209 p_mouse_check_key_gpio: -0x5b6 002210 arg 0 ,rega -0x5b7 002211 call p_mouse_check_lkey_gpio -0x5b8 002216 branch mouse_check_key_gpio_output -: 002218 p_mouse_check_lkey_gpio: -0x5b9 002219 fetcht 1 ,mem_lbutton_gpio -0x5ba 002220 call p_gpio_set_input_pu -0x5bb 002221 fetcht 1 ,mem_lbutton_gpio -0x5bc 002222 call gpio_get_bit -0x5bd 002223 setflag true ,0 ,rega -: 002225 p_mouse_check_rkey_gpio: -0x5be 002226 fetcht 1 ,mem_rbutton_gpio -0x5bf 002227 call p_gpio_set_input_pu -0x5c0 002228 fetcht 1 ,mem_rbutton_gpio -0x5c1 002229 call gpio_get_bit -0x5c2 002230 setflag true ,1 ,rega -: 002232 p_mouse_check_mkey_gpio: -0x5c3 002233 fetcht 1 ,mem_mbutton_gpio -0x5c4 002234 call p_gpio_set_input_pu -0x5c5 002235 fetcht 1 ,mem_mbutton_gpio -0x5c6 002236 call gpio_get_bit -0x5c7 002237 setflag true ,2 ,rega -: 002239 p_mouse_check_bk_key_gpio: -0x5c8 002240 call p_mouse_comm_gpio_config -0x5c9 002241 fetcht 1 ,mem_bk_button_gpio -0x5ca 002242 call p_gpio_set_input_pd -0x5cb 002243 fetcht 1 ,mem_bk_button_gpio -0x5cc 002244 call gpio_get_bit -0x5cd 002245 nsetflag true ,3 ,rega -0x5ce 002246 call p_gpio_set_input_pu -: 002247 p_mouse_check_fw_key_gpio: -0x5cf 002248 call p_mouse_comm_gpio_config -0x5d0 002249 fetcht 1 ,mem_fw_button_gpio -0x5d1 002250 call p_gpio_set_input_pd -0x5d2 002251 fetcht 1 ,mem_fw_button_gpio -0x5d3 002252 call gpio_get_bit -0x5d4 002253 nsetflag true ,4 ,rega -: 002254 p_gpio_set_input_pu: -0x5d5 002255 set1 gpio_active_bit ,temp -: 002256 p_gpio_set_input_pu1: -0x5d6 002257 arg core_gpio_pu0 ,contw -0x5d7 002258 call gpio_set_bit -0x5d8 002259 set0 gpio_active_bit ,temp -0x5d9 002260 branch p_gpio_set_input_pd4 -: 002262 p_gpio_set_input_pd: -0x5da 002263 set0 gpio_active_bit ,temp -0x5db 002264 arg core_gpio_pu0 ,contw -0x5dc 002265 call gpio_set_bit -0x5dd 002266 set1 gpio_active_bit ,temp -: 002267 p_gpio_set_input_pd4: -0x5de 002268 arg core_gpio_pd0 ,contw -0x5df 002269 branch gpio_set_high_impedance + 4 -: 002291 p_mouse_bb_event_discovery_btn: -0x5e0 002293 isolate1 mark_24g ,mark -0x5e1 002294 call p_g24_check_51cmd_stop_24g ,true -0x5e2 002295 branch mouse_bb_event_discovery_btn + 1 -: 002297 p_le_addr_random_config: -0x5e3 002298 jam zcode_81 ,mem_zcode_temp_param0 -0x5e4 002299 branch p_zcode_entrance -: 002301 p_mouse_start_discovery: -0x5e5 002302 jam zcode_50 ,mem_zcode_temp_param0 -0x5e6 002303 branch p_zcode_entrance -: 002305 p_le_adv_data_update: -0x5e7 002306 arg mem_le_adv_data + 11 ,contw -0x5e8 002307 arg 19 ,loopcnt -0x5e9 002308 call memcpy -0x5ea 002309 branch le_modified_name_adv -: 002311 p_mouse_stop_discovery: -0x5eb 002312 call p_mouse_discovey_led_blink_off -0x5ec 002313 setarg 0 -0x5ed 002314 store 2 ,mem_mouse_discovery_timer -0x5ee 002315 store 1 ,mem_mouse_blink_count -0x5ef 002316 call p_mouse_init_sensor_reset -0x5f0 002317 branch mouse_stop_discovery + 1 -: 002319 p_le_slave_match: -0x5f1 002320 fetch 1 ,mem_le_md_count -0x5f2 002321 pincrease 1 -0x5f3 002322 store 1 ,mem_le_md_count -0x5f4 002323 beq le_md_max_count ,le_slave_cont -0x5f5 002324 call le_acknowledge -0x5f6 002325 call le_prepare_tx -0x5f7 002326 call power_ctrl_start -0x5f8 002327 branch le_slave_match + 7 -: 002329 p_le_next_adv_channel: -0x5f9 002330 fetch 1 ,mem_le_ch_mapped -0x5fa 002331 increase 1 ,pdata -0x5fb 002332 store 1 ,mem_le_ch_mapped -0x5fc 002333 rtnne 40 -0x5fd 002334 jam 37 ,mem_le_ch_mapped -0x5fe 002335 rtn -: 002337 p_le_receive_skip: -0x5ff 002338 call save_rssi -0x600 002339 call p_rssi_signal -0x601 002340 branch le_receive_skip + 2 -: 002342 p_le_update_param: -0x602 002343 jam zcode_40 ,mem_zcode_temp_param0 -0x603 002344 branch p_zcode_entrance -: 002346 p_le_update_channel_map: -0x604 002347 jam zcode_41 ,mem_zcode_temp_param0 -0x605 002348 branch p_zcode_entrance -: 002350 p_le_prepare_tx: -0x606 002351 fetch 1 ,mem_le_arq -0x607 002352 bbit1 wak ,p_le_prepare_tx_wak -0x608 002353 call power_ctrl_pac_succ_incrs -0x609 002354 fetch 1 ,mem_empty_count -0x60a 002355 nbranch p_le_send_empyt ,blank -0x60b 002356 fetch 1 ,mem_le_state -0x60c 002357 bbit0 lestate_encryption ,p_le_tx_4 -0x60d 002358 fetch 1 ,mem_le_rxbuf + 1 -0x60e 002359 branch p_le_tx_4 ,blank -0x60f 002360 branch le_send_empty -: 002361 p_le_send_empyt: -0x610 002362 fetch 1 ,mem_empty_count -0x611 002363 increase -1 ,pdata -0x612 002364 store 1 ,mem_empty_count -0x613 002365 branch le_send_empty -: 002366 p_le_tx_4: -0x614 002367 fetch 1 ,mem_le_pairing_state -0x615 002368 bne flag_le_pairing_after_auth ,p_in_le_tx_4 -0x616 002369 jam 3 ,mem_empty_count -: 002370 p_in_le_tx_4: -0x617 002371 call le_fifo_check_nearly_full -0x618 002372 call p_mouse_data_pull ,blank -0x619 002373 branch le_prepare_tx + 4 -: 002375 p_le_check_tx_retransmit_setmd: -0x61a 002376 fetch 1 ,mem_le_connect_status_flag -0x61b 002377 and pdata ,0x03 ,pdata -0x61c 002378 rtnne 0x03 -0x61d 002379 fetch 1 ,mem_mouse_data_queue_num -0x61e 002380 rtn blank -0x61f 002381 fetch 1 ,mem_le_txlen -0x620 002382 rtn blank -0x621 002383 fetch 1 ,mem_le_txheader -0x622 002384 set1 md ,pdata -0x623 002385 store 1 ,mem_le_txheader -0x624 002386 branch le_set_md -: 002399 p_le_prepare_tx_wak: -0x625 002400 call p_le_check_tx_retransmit_setmd -: 002401 p_le_power_ctrl_pac_succ_decrs: -: 002402 power_ctrl_pac_succ_decrs: -0x626 002403 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x627 002404 sub pdata ,2 ,null -0x628 002405 ncall power_ctrl_pac_succ_cnt_reinit ,positive -0x629 002406 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x62a 002407 rtneq 0 -0x62b 002408 increase -1 ,pdata -0x62c 002409 store 1 ,mem_power_ctrl_pac_succ_cnt -0x62d 002410 rtn -: 002412 p_mouse_le_reconn_write_enable_timer_reinit: -0x62e 002413 fetch 1 ,mem_mouse_le_reconnect_flag -0x62f 002414 rtn blank -0x630 002415 fetch 1 ,mem_le_connect_status_flag -0x631 002416 and pdata ,0x03 ,pdata -0x632 002417 rtneq 0x03 -0x633 002418 jam 10 ,mem_le_start_encrypt_timer -0x634 002419 rtn -: 002421 p_le_parse: -0x635 002422 rtnmark1 mark_old_packet -0x636 002423 call le_fifo_check_full -0x637 002424 nrtn blank -0x638 002425 fetch 1 ,mem_le_rxbuf -0x639 002426 and pdata ,0x3 ,pdata -0x63a 002427 store 1 ,mem_le_packet_llid -0x63b 002428 ifetch 1 ,contr -0x63c 002429 and pdata ,0x1f ,pdata -0x63d 002430 store 1 ,mem_le_packet_size -0x63e 002431 rtn blank -0x63f 002432 copy contr ,pdata -0x640 002433 store 2 ,mem_le_payload_ptr -0x641 002434 fetch 1 ,mem_le_packet_llid -0x642 002435 beq llid_le_ll ,p_le_parse_ll -0x643 002436 branch le_parse_l2cap -: 002437 p_le_parse_ll: -0x644 002438 fetch 1 ,mem_le_rxbuf + 2 -0x645 002439 beq ll_channel_map_req ,p_le_parse_channel_map_req -0x646 002440 branch le_parse_ll + 1 -: 002441 p_le_parse_channel_map_req: -0x647 002442 ifetch 5 ,contr -0x648 002443 store 5 ,mem_le_new_map -0x649 002444 ifetch 2 ,contr -0x64a 002445 store 2 ,mem_le_instant -0x64b 002446 branch le_parse_channel_map_req + 7 -: 002448 p_le_parse_l2cap: -0x64c 002449 ifetch 2 ,contr -0x64d 002450 beq le_l2cap_cid_att ,p_le_parse_att -0x64e 002451 beq le_l2cap_cid_smp ,p_le_parse_smp -0x64f 002452 branch le_parse_l2cap + 11 -: 002453 p_le_parse_att: -0x650 002454 call store_contr -0x651 002455 call p_mouse_le_reconn_write_enable_timer_reinit -0x652 002456 call get_contr -0x653 002457 ifetch 3 ,contr -0x654 002458 store 3 ,mem_le_att_opcode -0x655 002459 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request -0x656 002460 rshift8 pdata ,temp -0x657 002461 sub temp ,0x24 ,null -0x658 002462 branch p_le_parse_att1 ,positive -0x659 002463 arg mem_mouse_le_uuid_sup ,temp -0x65a 002464 storet 2 ,mem_ui_le_uuid_table -0x65b 002465 call le_parse_att + 2 -0x65c 002466 setarg 0x8e7a -0x65d 002467 store 2 ,mem_ui_le_uuid_table -0x65e 002468 rtn -: 002470 p_le_parse_att_read_by_group_type_request: -0x65f 002471 call le_parse_att_read_by_group_type_request -0x660 002472 call le_fifo_get_last_tx_ptr -0x661 002473 increase 7 ,contr -0x662 002474 ifetch 1 ,contr -0x663 002475 rtnne attop_read_by_group_type_response -0x664 002476 increase 5 ,contr -0x665 002477 ifetch 2 ,contr -0x666 002478 arg uuid_service_hids ,temp -0x667 002479 isub temp ,null -0x668 002480 nrtn zero -0x669 002481 increase -4 ,contr -0x66a 002482 setarg 0x2b -0x66b 002483 istore 2 ,contr -0x66c 002484 rtn -: 002486 p_le_parse_att1: -0x66d 002487 beq attop_read_request ,p_le_parse_att_read_request -0x66e 002488 beq attop_write_request ,p_le_parse_att_write_request -0x66f 002489 branch le_parse_att + 2 -: 002490 p_le_parse_att_read_request: -0x670 002491 fetcht 2 ,mem_le_att_handle -0x671 002492 fetch 1 ,mem_le_configuration -0x672 002493 bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth -: 002494 p_le_send_att_read_response: -0x673 002495 fetch 2 ,mem_le_att_handle -0x674 002496 beq 0x13 ,le_send_att_error_response_notfound -0x675 002497 fetcht 2 ,mem_le_att_handle -0x676 002498 branch le_send_att_read_response -: 002499 p_le_send_att_read_response_check_auth: -0x677 002500 fetch 2 ,mem_le_pairing_handle -0x678 002501 isub temp ,null -0x679 002502 nbranch p_le_send_att_read_response ,zero -0x67a 002503 call le_check_encrypt_state -0x67b 002504 nbranch p_le_send_att_read_response ,user -0x67c 002505 jam att_err_insufficient_authentication ,mem_le_err_code -0x67d 002506 branch le_send_att_error_response -: 002508 p_le_parse_att_write_request: -0x67e 002509 copy contr ,rega -0x67f 002510 fetch 2 ,mem_le_l2cap_size -0x680 002511 add pdata ,-3 ,regb -0x681 002512 call le_writeatt_cb -0x682 002513 fetch 1 ,mem_mouse_fast_conn_flag -0x683 002514 beq 0xff ,le_send_att_write_response_check_auth -0x684 002515 fetch 1 ,mem_mouse_le_reconnect_flag -0x685 002516 branch le_send_att_write_response_check_auth ,blank -0x686 002517 fetch 1 ,mem_le_connect_status_flag -0x687 002518 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth -0x688 002519 setarg 0x001a -0x689 002520 fetcht 2 ,mem_le_att_handle -0x68a 002521 isub temp ,null -0x68b 002522 nbranch le_send_att_write_response_check_auth ,zero -0x68c 002523 jam att_err_insufficient_authentication ,mem_le_err_code -0x68d 002524 branch le_send_att_error_response -: 002526 p_le_parse_smp: -0x68e 002527 ifetch 1 ,contr -0x68f 002528 beq smp_pairing_request ,p_le_parse_smp_pairing_request -0x690 002529 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed -0x691 002530 branch le_parse_smp + 2 -: 002532 p_le_parse_smp_pairing_request: -0x692 002533 jam 1 ,mem_le_send_security_request_flag -0x693 002534 branch le_parse_smp_pairing_request -: 002536 p_le_parse_smp_pairing_failed: -0x694 002537 jam zcode_82 ,mem_zcode_temp_param0 -0x695 002538 branch p_zcode_entrance -: 002540 p_le_adv_not_match: -0x696 002541 fetch 1 ,mem_le_ch_mapped -0x697 002542 bne 39 ,le_adv_loop -0x698 002544 random pdata -0x699 002545 arg 0x1ff ,temp -0x69a 002546 iand temp ,pdata -0x69b 002547 add pdata ,250 ,pdata -0x69c 002548 call delay -0x69d 002549 arg le_adv_interval_timer ,queue -0x69e 002550 fetch 2 ,mem_le_adv_interval -0x69f 002551 branch timer_init -: 002559 p_le_lpm_setmult: -0x6a0 002560 disable wake -0x6a1 002561 branch p_le_lpm_set_mult_attempt ,attempt -0x6a2 002562 nbranch le_lpm_lost ,match -: 002563 p_le_lpm_set_mult_attempt: -0x6a3 002564 call lpm_match -0x6a4 002565 fetch 2 ,mem_rx_window_sniff -0x6a5 002566 store 2 ,mem_le_receive_window -0x6a6 002567 fetch 1 ,mem_le_connect_status_flag -0x6a7 002568 compare 3 ,pdata ,3 -0x6a8 002569 nbranch lpm_mult_short ,true -0x6a9 002570 branch le_lpm_set_mult_attempt + 3 -: 002572 p_le_mouse_bb_event_connect_complete: -0x6aa 002573 jam zcode_42 ,mem_zcode_temp_param0 -0x6ab 002574 branch p_zcode_entrance -: 002576 p_twspi_reset: -0x6ac 002577 hfetch 1 ,core_gpio_out3 -0x6ad 002578 and_into 0xfd ,pdata -0x6ae 002579 hstore 1 ,core_gpio_out3 -0x6af 002580 hfetcht 1 ,core_gpio_oe3 -0x6b0 002581 or_into 0x2 ,temp -0x6b1 002582 hstoret 1 ,core_gpio_oe3 -0x6b2 002583 call twspi_disable -0x6b3 002584 and_into 0xfd ,temp -0x6b4 002585 nop 13 -0x6b5 002586 call p_twspi_enable -0x6b6 002587 hstoret 1 ,core_gpio_oe3 -0x6b7 002588 rtn -: 002590 p_spid_init: -0x6b8 002591 call spid_init_common -: 002592 p_twspi_enable: -0x6b9 002593 hfetch 1 ,core_gpio_sel1 -0x6ba 002594 set1 0 ,pdata -0x6bb 002595 set0 1 ,pdata -0x6bc 002596 set0 3 ,pdata -0x6bd 002597 hstore 1 ,core_gpio_sel1 -0x6be 002598 rtn -: 002643 p_quit_connection_cont: -0x6bf 002647 call app_disconn_reason_collect_bt -0x6c0 002648 call sniff_exit -0x6c1 002649 jam bt_evt_bb_disconnected ,mem_fifo_temp -0x6c2 002650 call ui_ipc_send_event -0x6c3 002651 call init_lmp_work -0x6c4 002652 call l2cap_init_work -0x6c5 002653 branch quit_connection_cont + 8 -: 002655 p_prepare_tx: -0x6c6 002656 fetch 1 ,mem_state -0x6c7 002657 isolate1 state_inconn ,pdata -0x6c8 002658 call p_bt_power_ctrl ,true -0x6c9 002659 branch prepare_tx + 1 -: 002660 p_bt_power_ctrl: -0x6ca 002661 fetch 1 ,mem_arq -0x6cb 002662 isolate1 wack ,pdata -0x6cc 002663 call power_ctrl_pac_succ_decrs ,true -0x6cd 002664 ncall power_ctrl_pac_succ_incrs ,true -: 002665 power_ctrl_start: -0x6ce 002666 fetch 2 ,mem_ui_state_map -0x6cf 002667 rtnbit1 ui_state_ble_adv -0x6d0 002668 rtnbit1 ui_state_bt_reconnect -0x6d1 002669 rtnbit1 ui_state_bt_discovery -0x6d2 002671 arg mem_rssi_signal_buf ,rega -0x6d3 002672 call p_rssi_average -0x6d4 002673 storet 1 ,mem_rssi_avg_received -0x6d5 002675 setarg rssi_dis_max_24g -0x6d6 002676 bmark1 mark_24g ,power_ctrl_start_next -0x6d7 002677 setarg rssi_dis_max_ble -: 002678 power_ctrl_start_next: -0x6d8 002679 isub temp ,null -0x6d9 002680 nbranch power_ctrl_txpower_incrs_force ,positive -0x6da 002682 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x6db 002683 sub pdata ,2 ,null -0x6dc 002684 nbranch power_ctrl_txpower_decrs_check ,positive -0x6dd 002685 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x6de 002686 beq 0 ,power_ctrl_txpower_incrs -0x6df 002687 rtn -: 002689 p_slave_conn_recv_packet: -0x6e0 002690 call slave_receive_master_slot -0x6e1 002691 nbranch shutdown_radio ,sync -0x6e2 002692 call save_rssi -0x6e3 002693 call p_rssi_signal -0x6e4 002694 branch slave_conn_recv_packet + 4 -: 002696 p_lpm_dispatch: -0x6e5 002697 rtnmark1 mark_24g -0x6e6 002698 call lpo_calibration -0x6e7 002699 fetch 3 ,mem_clks_per_lpo -0x6e8 002700 rtn blank -0x6e9 002701 fetch 1 ,mem_lpm_mode -0x6ea 002702 rtn blank -0x6eb 002703 fetch 1 ,mem_mouse_multi_led_on_timer -0x6ec 002704 nrtn blank -0x6ed 002706 fetch 1 ,mem_ssp_enable -0x6ee 002707 branch p_lpm_dispatch_next ,blank -0x6ef 002708 fetch 1 ,mem_sp_local_key_invalid -0x6f0 002709 rtn blank -: 002710 p_lpm_dispatch_next: -0x6f1 002711 fetch 1 ,mem_le_sc_calc -0x6f2 002712 nrtn blank -0x6f3 002713 call lpm_check_wake_lock -0x6f4 002714 nrtn blank -0x6f5 002715 fetch 1 ,mem_context -0x6f6 002716 compare 3 ,pdata ,0x7 -0x6f7 002717 nbranch lpm_dispatch_unconn ,true -0x6f8 002718 fetch 2 ,mem_context + coffset_tsniff -0x6f9 002719 arg 0xffff ,temp -0x6fa 002720 isub temp ,null -0x6fb 002721 rtn zero -0x6fc 002722 branch lpm_dispatch_next + 9 -: 002724 p_lpm_set_mult: -0x6fd 002725 disable wake -0x6fe 002726 fetch 1 ,mem_state -0x6ff 002727 rtnbit0 state_insniff -0x700 002728 nbranch lpm_not_match ,match -0x701 002729 call lpm_match -0x702 002730 fetch 2 ,mem_rx_window_sniff -0x703 002731 store 2 ,mem_rx_window -0x704 002732 fetch 1 ,mem_arq -0x705 002733 bbit1 wack ,lpm_mult_short -0x706 002734 bmark0 mark_lpm_mult_enable ,lpm_mult_short -0x707 002735 call l2cap_malloc_is_fifo_empty -0x708 002736 nbranch lpm_mult_short ,blank -0x709 002737 call p_lpm_set_attemp_timeout ,blank -0x70a 002738 branch lpm_set_mult + 13 -: 002739 p_lpm_set_attemp_timeout: -0x70b 002740 jam 1 ,mem_current_sniff_attempt -0x70c 002741 jam 0 ,mem_current_sniff_timeout -0x70d 002742 rtn -: 002744 p_mouse_bb_disconnected: -0x70e 002745 fetch 1 ,mem_mouse_multi_led_blink_count -0x70f 002746 nrtn blank -0x710 002748 jam zcode_10 ,mem_zcode_temp_param0 -0x711 002749 branch p_zcode_entrance -: 002880 p_check_51cmd_once_continue: -0x712 002881 call lmo_fifo_check -0x713 002882 nbranch check_51cmd_restore ,blank -0x714 002883 fetch 1 ,mem_fifo_temp -0x715 002884 bmark0 mark_context ,check_51cmd_check_idle -0x716 002885 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info -0x717 002886 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info -0x718 002887 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param -0x719 002888 branch check_51cmd_once_continue + 2 -: 002890 p_check_51cmd_ble_update_connect_param: -0x71a 002891 call le_fifo_check_full -0x71b 002892 nrtn blank -0x71c 002893 branch le_l2cap_tx_update_req -: 002895 p_flash_store_le_reconn_info: -0x71d 002896 jam rec_4_mode ,mem_record_bt_mode -0x71e 002897 fetch 6 ,mem_le_plap -0x71f 002898 branch p_flash_store_reconn_info -: 002899 p_flash_store_bd_reconn_info: -0x720 002900 jam rec_3_mode ,mem_record_bt_mode -0x721 002901 fetch 6 ,mem_plap -: 002902 p_flash_store_reconn_info: -0x722 002903 store 6 ,mem_temp_lap -: 002904 p_mouse_store_remote_bdaddr: -0x723 002905 fetch mouse_flag_len ,mem_mouse_flag -0x724 002906 rtnbit0 mouse_store_eeprom_flag -0x725 002907 arg mouse_store_eeprom_flag ,queue -0x726 002908 call mouse_disable_function_flag -0x727 002909 call mouse_check_device_addr -: 002910 p_mouse_unplug_clean_bdaddr: -0x728 002911 call mouse_before_store_reconn_info -0x729 002912 branch p_mouse_store_flash_device_info -: 002914 p_mouse_multi_led_blink_timer: -0x72a 002915 fetch 1 ,mem_mouse_multi_led_blink_enable -0x72b 002916 rtn blank -0x72c 002917 fetch 1 ,mem_mouse_multi_led_type -0x72d 002918 beq multi_led_on ,p_mouse_multi_led_type_on -0x72e 002919 beq multi_led_blink ,p_mouse_multi_led_type_blink -0x72f 002920 rtn -: 002922 p_mouse_multi_led_type_on: -0x730 002923 call p_mouse_multi_led_on -0x731 002924 fetch 1 ,mem_mouse_multi_led_on_timer -0x732 002925 increase 1 ,pdata -0x733 002926 store 1 ,mem_mouse_multi_led_on_timer -0x734 002927 fetcht 1 ,mem_mouse_multi_led_on_timer_init -0x735 002928 isub temp ,null -0x736 002929 call p_mouse_multi_led_off_poweron2s ,zero -0x737 002930 rtn -: 002931 p_mouse_multi_led_off_poweron2s: -0x738 002932 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0x739 002933 branch p_mouse_multi_led_off -: 002935 p_mouse_multi_led_type_blink: -0x73a 002936 fetch 1 ,mem_mouse_multi_led_blink_timer -0x73b 002937 increase -1 ,pdata -0x73c 002938 store 1 ,mem_mouse_multi_led_blink_timer -0x73d 002939 nrtn blank -0x73e 002940 fetch 1 ,mem_mouse_multi_led_blink_timer_init -0x73f 002941 store 1 ,mem_mouse_multi_led_blink_timer -0x740 002942 fetch 1 ,mem_mouse_multi_led_blink_count_limited -0x741 002943 branch p_mouse_multi_led_blink_count_no_limited ,blank -0x742 002944 fetch 1 ,mem_mouse_multi_led_blink_count -0x743 002945 branch p_mouse_multi_led_blink_off ,blank -0x744 002946 increase -1 ,pdata -0x745 002947 store 1 ,mem_mouse_multi_led_blink_count -: 002948 p_mouse_multi_led_blink_count_no_limited: -0x746 002949 fetch 1 ,mem_mouse_multi_led_state -0x747 002950 beq on ,p_mouse_multi_led_off -0x748 002951 beq off ,p_mouse_multi_led_on -0x749 002952 rtn -: 002954 p_mouse_multi_led_on: -0x74a 002955 jam on ,mem_mouse_multi_led_state -0x74b 002956 fetch 1 ,mem_device_flag -0x74c 002957 beq 1 ,p_mouse_multi_24g_led_on -0x74d 002958 beq 2 ,p_mouse_multi_bt_led_on -0x74e 002959 branch p_mouse_multi_ble_led_on -: 002960 p_mouse_multi_bt_led_on: -0x74f 002961 branch mouse_device2_led_on -: 002963 p_mouse_multi_24g_led_on: -0x750 002964 branch mouse_device1_led_on -: 002966 p_mouse_multi_ble_led_on: -0x751 002967 branch mouse_device3_led_on -: 002969 p_mouse_discovey_led_blink_off: -0x752 002970 fetch 1 ,mem_mouse_multi_led_on_timer -0x753 002971 nrtn blank -0x754 002972 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -0x755 002973 nrtn blank -: 002974 p_mouse_multi_led_blink_off: -0x756 002975 setarg 0 -0x757 002976 store 3 ,mem_mouse_multi_led_blink_timer -: 002977 p_mouse_multi_led_off: -0x758 002978 fetch 1 ,mem_mouse_multi_led_blink_count -0x759 002979 nbranch p_mouse_multi_led_off_wait_blink_over ,blank -0x75a 002980 jam 0 ,mem_mouse_multi_led_blink_enable -0x75b 002981 jam 0 ,mem_mouse_multi_led_type -: 002982 p_mouse_multi_led_off_wait_blink_over: -0x75c 002983 jam 0 ,mem_mouse_multi_led_on_timer -0x75d 002984 jam off ,mem_mouse_multi_led_state -0x75e 002988 call mouse_devce_led_off + 1 -0x75f 002990 fetch 1 ,mem_mouse_multi_led_blink_count -0x760 002991 nrtn blank -0x761 002993 fetch 1 ,mem_mouse_connected_state -0x762 002994 nbranch app_enter_hibernate ,blank -0x763 002995 rtn -: 002997 p_mouse_dpi_multi_led_blink: -0x764 002998 jam 3 ,mem_mouse_multi_led_blink_timer_init -0x765 002999 jam 1 ,mem_mouse_multi_led_blink_count_limited -0x766 003000 branch p_mouse_multi_led_blink_enable -: 003002 p_mouse_mode_bt_device_multi_led_on: -: 003003 p_mouse_mode_24g_device_multi_led_on: -0x767 003004 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag -0x768 003005 jam on ,mem_mouse_multi_led_blink_enable -0x769 003006 jam multi_led_on ,mem_mouse_multi_led_type -0x76a 003007 jam 0 ,mem_mouse_multi_led_on_timer -0x76b 003008 rtn -: 003010 p_mouse_discovery_multi_led_blink: -0x76c 003011 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0x76d 003012 jam 3 ,mem_mouse_multi_led_blink_timer_init -0x76e 003013 jam 0 ,mem_mouse_multi_led_blink_count_limited -0x76f 003014 jam 1 ,mem_mouse_multi_led_blink_count -: 003015 p_mouse_multi_led_blink_enable: -0x770 003016 jam 5 ,mem_mouse_multi_led_blink_timer -0x771 003017 jam on ,mem_mouse_multi_led_blink_enable -0x772 003018 jam multi_led_blink ,mem_mouse_multi_led_type -0x773 003019 rtn -: 003021 power_ctrl_pac_succ_cnt_init: -0x774 003022 jam 1 ,mem_power_ctrl_level -0x775 003023 jam 0 ,mem_power_ctrl_pac_succ_cnt -0x776 003024 rtn -: 003025 power_ctrl_pac_succ_incrs: -0x777 003026 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x778 003027 increase 1 ,pdata -0x779 003028 store 1 ,mem_power_ctrl_pac_succ_cnt -0x77a 003029 rtn -: 003031 power_ctrl_pac_succ_cnt_reinit: -0x77b 003032 jam 3 ,mem_power_ctrl_pac_succ_cnt -0x77c 003033 rtn -: 003035 power_ctrl_txpower_decrs_check: -0x77d 003036 fetch 1 ,mem_power_ctrl_pac_succ_cnt -0x77e 003037 rtnne 32 -0x77f 003038 jam 0 ,mem_power_ctrl_pac_succ_cnt -: 003039 power_ctrl_txpower_decrs: -0x780 003040 fetcht 1 ,mem_rssi_avg_received -0x781 003041 setarg rssi_dis_min_24g -0x782 003042 bmark1 mark_24g ,power_ctrl_txpower_decrs_next -0x783 003043 setarg rssi_dis_min_ble -: 003044 power_ctrl_txpower_decrs_next: -0x784 003045 isub temp ,null -0x785 003046 nrtn positive -0x786 003047 fetch 1 ,mem_power_ctrl_level -0x787 003048 beq 0 ,power_ctrl_decrs_level0 -0x788 003049 increase -1 ,pdata -0x789 003050 store 1 ,mem_power_ctrl_level -0x78a 003051 beq 0 ,power_ctrl_decrs_level0 -: 003052 power_ctrl_decrs_level1: -: 003053 power_ctrl_incrs_level1: -0x78b 003054 jam tx_power_0db ,mem_tx_power -0x78c 003055 rtn -: 003057 power_ctrl_txpower_incrs_force: -0x78d 003058 jam 0 ,mem_power_ctrl_pac_succ_cnt -: 003059 power_ctrl_txpower_incrs: -0x78e 003060 fetch 1 ,mem_power_ctrl_level -0x78f 003061 beq 2 ,power_ctrl_incrs_level2 -0x790 003062 increase 1 ,pdata -0x791 003063 store 1 ,mem_power_ctrl_level -0x792 003064 beq 1 ,power_ctrl_incrs_level1 -: 003065 power_ctrl_incrs_level2: -0x793 003066 jam tx_power_5db ,mem_tx_power -0x794 003067 rtn -: 003069 power_ctrl_decrs_level0: -0x795 003070 jam tx_power_f5db ,mem_tx_power -0x796 003071 rtn -: 003074 p_set_freq_tx: -0x797 003075 storet 1 ,mem_last_freq -0x798 003076 add temp ,0 ,rega -0x799 003077 call rf_write_freq -0x79a 003078 setarg param_pll_setup -0x79b 003079 call sleep -: 003080 p_rf_tx_enable: -0x79c 003081 jam 0x1 ,rfen_adc -0x79d 003082 jam 0x3c ,rfen_rx -0x79e 003083 jam 0xe0 ,rfen_tx -0x79f 003084 nop 10 -0x7a0 003085 jam 0x01 ,rfen_mdm -0x7a1 003086 jam 0x3d ,rfen_mdm -0x7a2 003087 nop 10 -0x7a3 003088 jam 0xb7 ,rfen_sn -0x7a4 003089 nop 10 -0x7a5 003090 jam 0x7d ,rfen_mdm -0x7a6 003091 fetch 1 ,mem_tx_power -0x7a7 003094 beq tx_power_5db ,p_set_tx_power_5db -0x7a8 003096 beq tx_power_f5db ,p_set_tx_power_f5db -0x7a9 003097 beq tx_power_pair ,p_set_tx_power_pair -: 003099 p_set_tx_power_0db: -0x7aa 003100 call p_rx_low_sens -0x7ab 003102 jam 0xd0 ,0x8955 -0x7ac 003103 jam 0xe0 ,0x8956 -0x7ad 003105 jam 0x6c ,0x8958 -0x7ae 003107 branch set_tx_power_0db -: 003119 p_set_tx_power_5db: -0x7af 003121 jam 0xfb ,0x894c -0x7b0 003122 jam 0xef ,0x894d -0x7b1 003123 jam 0xec ,0x894e -0x7b2 003124 jam 0x5e ,0x894f -0x7b3 003127 jam 0xd0 ,0x8955 -0x7b4 003128 jam 0xe0 ,0x8956 -0x7b5 003130 jam 0x3c ,0x8958 -0x7b6 003132 branch set_tx_power_5db -: 003144 p_set_tx_power_f5db: -0x7b7 003145 call p_rx_low_sens -0x7b8 003147 jam 0xd0 ,0x8955 -0x7b9 003148 jam 0xc0 ,0x8956 -0x7ba 003150 jam 0x6c ,0x8958 -0x7bb 003152 branch set_tx_power_f5db -: 003154 p_rx_low_sens: -0x7bc 003155 jam 0x5b ,0x894c -0x7bd 003156 jam 0x96 ,0x894d -0x7be 003157 jam 0x2c ,0x894e -0x7bf 003158 jam 0x46 ,0x894f -0x7c0 003159 rtn -: 003168 p_set_tx_power_pair: -0x7c1 003170 jam 0xc0 ,0x8956 -0x7c2 003171 jam 0xd0 ,0x8955 -0x7c3 003172 rtn -: 003174 p_shutdown_radio: -0x7c4 003175 force 8 ,radio_ctrl -0x7c5 003176 branch shutdown_radio + 1 -: 003185 p_zcode_entrance: -0x7c6 003186 fetcht 1 ,mem_zcode_temp_param0 -0x7c7 003187 rshift4 temp ,temp -0x7c8 003188 fetch 1 ,mem_zcode_current_number -0x7c9 003189 isub temp ,null -0x7ca 003190 branch p_zcode_run ,zero -0x7cb 003191 storet 1 ,mem_zcode_current_number -0x7cc 003192 increase 1 ,temp -0x7cd 003193 setarg zcode_buff_size -0x7ce 003194 imul32 temp ,temp -0x7cf 003195 fetch 3 ,mem_xip_flash_offset -0x7d0 003196 isub temp ,pdata -0x7d1 003198 fetcht 3 ,mem_flash_start_addr -0x7d2 003199 iadd temp ,pdata -0x7d3 003200 increase -5 ,pdata -0x7d4 003201 store 3 ,mem_flash_address -0x7d5 003203 call p_flash_release_deep_power_down -: 003204 p_zcode_read_loop: -0x7d6 003205 fetch 3 ,mem_flash_address -0x7d7 003206 arg zcode_buff_size ,temp -0x7d8 003207 arg mem_zcode_buff ,rega -0x7d9 003208 call spid_read_flash -0x7da 003210 fetch 4 ,mem_zcode_buff -0x7db 003211 fetcht 4 ,mem_zcode_head -0x7dc 003212 isub temp ,null -0x7dd 003213 nbranch p_zcode_read_loop ,zero -0x7de 003215 call p_mouse_spi_init -0x7df 003217 setarg mem_zcode_buff -0x7e0 003218 store 2 ,mem_patch_ptr -0x7e1 003219 jam zcode_code_size ,mem_patch_len -0x7e2 003220 call load_ucode -0x7e3 003221 setarg 0 -0x7e4 003222 store 4 ,mem_patch_ptr -: 003223 p_zcode_run: -0x7e5 003224 fetch 1 ,mem_zcode_temp_param0 -0x7e6 003225 branch p_zcode +0x5a 000184 beq patch2b_2 ,p_le_acknowledge +0x5b 000185 beq patch2c_3 ,p_le_prepare_tx +0x5c 000186 beq patch2c_6 ,p_le_parse +0x5d 000187 beq patch2c_7 ,p_le_parse_l2cap +0x5e 000188 beq patch2d_2 ,p_le_adv_not_match +0x5f 000189 beq patch2e_7 ,p_le_lpm_setmult +0x60 000196 beq patch31_4 ,p_twspi_reset +0x61 000197 beq patch31_5 ,p_spid_init +0x62 000198 beq patch3f_2 ,p_check_51cmd_once_continue +0x63 000199 branch loop +: 000202 p_mouse_select_device_button_wakeup_check: +0x64 000203 jam 0 ,mem_mouse_select_device_button_wakeup_flag +0x65 000204 call p_mouse_get_select_state +0x66 000205 nrtn true +0x67 000206 call delay_10ms +0x68 000207 call p_mouse_get_select_state +0x69 000208 nrtn true +0x6a 000209 jam 1 ,mem_mouse_select_device_button_wakeup_flag +0x6b 000210 rtn +: 000212 p_mouse_switch_hwakeup_bypb: +0x6c 000213 fetch 1 ,mem_mouse_select_device_button_wakeup_flag +0x6d 000214 rtn blank +0x6e 000215 call p_mouse_switch_device_flag +0x6f 000216 branch p_mouse_store_flash_device_info +: 000218 p_soft_reset_1: +0x70 000219 arg mem_sp_state ,contw +0x71 000220 arg 12 ,loopcnt +0x72 000221 call clear_mem +0x73 000222 call p_mouse_le_txbuff_load +0x74 000223 hfetch 1 ,core_gpio_pu3 +0x75 000224 and_into 0x3f ,pdata +0x76 000225 hstore 1 ,core_gpio_pu3 +0x77 000226 hfetch 1 ,core_gpio_sel1 +0x78 000227 set0 4 ,pdata +0x79 000228 hstore 1 ,core_gpio_sel1 +0x7a 000229 call init_memp +0x7b 000230 call rfcomm_init +0x7c 000231 call init_lmp +0x7d 000232 ncall lpm_disable_exen_output ,wake +0x7e 000233 call ui_init + 1 +0x7f 000234 branch soft_reset + 11 +: 000236 p_soft_reset_2: +0x80 000237 call app_lpm_init ,wake +0x81 000238 call publickey_init +0x82 000239 call lpm_recover_clk ,wake +: 000240 p_sp_cal_loop: +0x83 000241 call sp_calc_sequence +0x84 000242 fetch 1 ,mem_ssp_enable +0x85 000243 branch main_loop ,blank +0x86 000244 fetch 1 ,mem_sp_local_key_invalid +0x87 000245 branch p_sp_cal_loop ,blank +0x88 000246 branch main_loop +: 000248 p_init_param: +0x89 000249 setarg param_le_version +0x8a 000250 store 3 ,mem_lmp_version +0x8b 000251 setarg param_le_subversion +0x8c 000252 store 2 ,mem_lmp_version + 3 +0x8d 000253 branch init_param + 12 +: 000255 p_lpm_check_wake_lock: +0x8e 000256 rtnmark1 mark_24g +0x8f 000257 fetch 1 ,mem_mouse_clear_sensor_data_flag +0x90 000258 beq 0 ,disable_blank +0x91 000259 fetch 1 ,mem_mouse_le_conn_param_reject +0x92 000260 beq le_lpm_disable ,disable_blank +0x93 000261 fetch 2 ,mem_sdp_remote_cid +0x94 000262 nbranch disable_blank ,blank +0x95 000263 fetch 1 ,mem_mouse_wheel_trigger +0x96 000264 nbranch disable_blank ,blank +0x97 000265 branch enable_blank +: 000268 p_g24_dispatch: +0x98 000269 rtnmark0 mark_24g +0x99 000270 fetch 1 ,mem_24g_conn_sm +0x9a 000271 bbit1 state_24g_pair ,p_g24_pair_dispatch +0x9b 000272 bbit1 state_24g_reconn ,p_g24_reconn_dispatch +0x9c 000273 fetch 1 ,mem_24g_transmit_by_interrupt +0x9d 000274 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt +: 000275 p_g24_transmit_process: +0x9e 000276 call p_g24_txdata_prep +0x9f 000277 nbranch p_g24_nodata_transmit ,user +0xa0 000278 call p_g24_rf_sta_check +: 000279 p_g24_transmit_start: +0xa1 000280 call p_g24_transmit_packet +0xa2 000281 fetch 1 ,mem_24g_pairing_sm +0xa3 000282 rtnne state_24g_pairing_success +0xa4 000283 call power_ctrl_start +0xa5 000284 call p_g24_long_sleep_shorter_param_update +0xa6 000285 fetch 1 ,mem_mouse_multi_led_state +0xa7 000286 beq on ,p_g24_transmit_by_interrupt_enable +: 000287 p_g24_short_sleep: +0xa8 000288 call p_g24_lpm_wait +0xa9 000289 nrtn user +0xaa 000290 call p_clear_wake +0xab 000291 setarg 54000 +: 000292 p_g24_enter_sleep: +0xac 000293 branch g24_lpm_long_sleep2 +: 000295 p_g24_pair_dispatch: +0xad 000296 jam zcode_c0 ,mem_zcode_temp_param0 +0xae 000297 branch p_zcode_entrance +: 000299 p_g24_reconn_dispatch: +0xaf 000300 jam zcode_70 ,mem_zcode_temp_param0 +0xb0 000301 branch p_zcode_entrance +: 000304 p_g24_long_sleep_shorter_param_update: +0xb1 000305 setarg g24_long_sleep_step1 +0xb2 000306 store 3 ,mem_24g_enter_hibernate +0xb3 000307 jam 30 ,mem_24g_long_sleep_param_update_timer +0xb4 000308 rtn +: 000310 p_g24_transmit_by_interrupt: +0xb5 000311 jam zcode_d1 ,mem_zcode_temp_param0 +0xb6 000312 branch p_zcode_entrance +: 000315 p_g24_nodata_transmit: +0xb7 000316 fetch 1 ,mem_24g_abort_pac +0xb8 000317 call p_g24_send_abort_packet ,blank +: 000318 p_g24_long_sleep: +0xb9 000319 call p_g24_lpm_wait +0xba 000320 nrtn user +0xbb 000321 fetch 3 ,mem_24g_enter_hibernate +0xbc 000322 branch g24_lpm_long_sleep2 +: 000324 p_g24_send_abort_packet: +0xbd 000325 jam 1 ,mem_24g_abort_pac +0xbe 000326 jam 0 ,mem_24g_rf_hop_ch +0xbf 000327 call p_g24_transmit_rf_ctrl_clear +0xc0 000328 store 1 ,mem_24g_txbuf +0xc1 000329 setarg 0 +0xc2 000330 store 7 ,mem_24g_txbuf + 1 +0xc3 000331 fetch 4 ,mem_24g_device_addr +0xc4 000332 store 4 ,mem_24g_txbuf + 8 +0xc5 000333 jam 12 ,mem_24g_datalen +0xc6 000334 fetch 1 ,mem_24g_data_type +0xc7 000335 set1 bit_abort ,pdata +0xc8 000336 store 1 ,mem_24g_data_type +0xc9 000337 call p_g24_txdata_enable_tx +0xca 000338 branch p_g24_transmit_start +: 000340 p_g24_transmit_rf_sta_init: +0xcb 000341 jam 1 ,mem_24g_rf_last_sta +0xcc 000342 jam 0 ,mem_24g_sync_cnt +: 000343 p_g24_transmit_rf_ctrl_clear: +0xcd 000344 fetch 1 ,mem_24g_data_type +0xce 000345 and_into bits_data ,pdata +0xcf 000346 store 1 ,mem_24g_data_type +0xd0 000347 rtn +: 000357 p_g24_hop_enable_packet: +0xd1 000358 fetch 1 ,mem_24g_data_type +0xd2 000359 rtnbit0 bit_hop +: 000360 p_g24_hop_ch_disable: +0xd3 000361 fetch 1 ,mem_24g_data_type +0xd4 000362 set0 bit_hop ,pdata +0xd5 000363 store 1 ,mem_24g_data_type +0xd6 000364 store 1 ,mem_24g_txpayload +0xd7 000365 call power_ctrl_pac_succ_decrs +0xd8 000366 branch p_g24_ch +: 000368 p_g24_rf_hop_attemp_again: +0xd9 000369 fetch 1 ,mem_24g_rf_hop_ch +0xda 000370 bne 1 ,p_g24_transmit_rf_ctrl_clear +: 000371 p_g24_rf_hop_fastly: +0xdb 000372 fetch 1 ,mem_24g_hop_fastly_cnt +0xdc 000373 increase 1 ,pdata +0xdd 000374 store 1 ,mem_24g_hop_fastly_cnt +0xde 000375 beq 4 ,p_g24_rf_hop_fastly_exit +0xdf 000376 call p_g24_ch +0xe0 000377 jam 2 ,mem_24g_max_retry +: 000378 p_g24_transmit_packet: +0xe1 000379 jam 0 ,mem_24g_retry +: 000380 p_g24_transmit_loop: +0xe2 000381 arg param_rx_setup ,timeup +0xe3 000382 until clkn_rt ,meet +0xe4 000383 call p_g24_transmit_receive_ack +0xe5 000386 nbranch p_g24_retransmit ,sync +0xe6 000387 nbranch p_g24_retransmit ,user3 +0xe7 000388 call p_g24_txbuf_clear +0xe8 000389 call p_g24_ackpayload_parse +0xe9 000390 call power_ctrl_pac_succ_incrs +: 000391 p_g24_transmit_next_packet: +0xea 000392 jam 0 ,mem_retry_count +0xeb 000393 fetch 1 ,mem_24g_pid +0xec 000394 increase 1 ,pdata +0xed 000395 store 1 ,mem_24g_pid +0xee 000396 call p_g24_hop_enable_packet +0xef 000397 fetch 1 ,mem_24g_pairing_sm +0xf0 000398 bne state_24g_pairing_success ,p_g24_paring_mode_start +0xf1 000399 call p_g24_transmit_succ_rf_config +: 000400 p_g24_transmit_abandon: +0xf2 000401 setarg 0 +0xf3 000402 store 4 ,mem_24g_ensure +0xf4 000403 store 1 ,mem_24g_hop_pac_retry +0xf5 000404 rtn +: 000406 p_g24_rf_hop_fastly_exit: +0xf6 000407 call power_ctrl_pac_succ_decrs +0xf7 000408 jam 0 ,mem_24g_hop_fastly_cnt +0xf8 000409 branch p_g24_transmit_rf_ctrl_clear +: 000411 p_g24_transmit_hop_pac_succ_wo_hop: +0xf9 000412 jam 2 ,mem_24g_sync_cnt +: 000413 p_g24_transmit_hop_pac_succ: +0xfa 000414 jam 1 ,mem_24g_rf_last_sta +0xfb 000415 jam 0 ,mem_24g_rf_hop_ch +0xfc 000416 branch p_g24_transmit_rf_ctrl_clear +: 000418 p_g24_transmit_succ_rf_config: +0xfd 000419 fetch 1 ,mem_24g_rf_work_stage +0xfe 000420 beq 3 ,p_g24_transmit_hop_pac_succ +0xff 000421 fetch 1 ,mem_24g_data_type +0x100 000422 isolate0 bit_hop ,pdata +0x101 000423 branch p_g24_transmit_rf_sta_init ,true +0x102 000424 fetch 1 ,mem_24g_rf_work_stage +0x103 000425 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop +0x104 000426 beq 2 ,p_g24_transmit_hop_pac_succ +0x105 000427 rtn +: 000429 p_g24_rf_sta_check: +0x106 000430 fetch 1 ,mem_24g_pairing_sm +0x107 000431 rtnne state_24g_pairing_success +0x108 000432 call p_g24_rf_laststa_synccnt_check +0x109 000433 ncall p_g24_rf_sync_cnt_check ,user2 +0x10a 000434 rtn +: 000436 p_g24_rf_laststa_synccnt_check: +0x10b 000437 disable user2 +0x10c 000438 fetch 1 ,mem_24g_rf_last_sta +0x10d 000439 rtnne 1 +0x10e 000440 fetch 1 ,mem_24g_sync_cnt +0x10f 000441 rtnne 0 +0x110 000442 jam 1 ,mem_24g_rf_work_stage +0x111 000443 jam 4 ,mem_24g_max_retry +0x112 000444 branch enable_user2 +: 000446 p_g24_rf_sync_cnt_check: +0x113 000447 fetch 1 ,mem_24g_sync_cnt +0x114 000448 branch p_g24_rf_hop_attemp ,blank +0x115 000449 increase -1 ,pdata +0x116 000450 store 1 ,mem_24g_sync_cnt +0x117 000451 jam 2 ,mem_24g_rf_work_stage +0x118 000452 jam 4 ,mem_24g_max_retry +: 000453 p_g24_ch: +0x119 000454 fetcht 1 ,mem_24g_current_ch_number +0x11a 000455 fetch 1 ,mem_24g_addr +0x11b 000456 and_into 0x03 ,pdata +0x11c 000457 mul32 pdata ,4 ,rega +0x11d 000458 setarg mem_24g_ch_map1 +0x11e 000459 iadd rega ,pdata +0x11f 000460 iadd temp ,contr +0x120 000461 ifetch 1 ,contr +0x121 000462 store 1 ,mem_24g_ch +0x122 000463 increase 1 ,temp +0x123 000464 and_into 3 ,temp +0x124 000465 storet 1 ,mem_24g_current_ch_number +0x125 000466 rtn +: 000468 p_g24_rf_hop_attemp: +0x126 000469 jam 3 ,mem_24g_rf_work_stage +0x127 000470 fetch 1 ,mem_24g_rf_hop_ch +0x128 000471 nbranch p_g24_rf_hop_attemp_again ,blank +0x129 000472 jam 2 ,mem_24g_max_retry +0x12a 000473 branch p_g24_ch +: 000475 p_g24_txdata_prep: +0x12b 000476 fetch 1 ,mem_24g_pairing_sm +0x12c 000477 bne state_24g_pairing_success ,p_g24_pairing_sm +: 000478 p_g24_txdata_prep_packeage_data: +0x12d 000479 call p_g24_package_data +: 000480 p_g24_txdata_enable_tx: +0x12e 000481 call p_g24_transmit_prep +0x12f 000482 jam ensure_on_24g ,mem_24g_ensure +0x130 000483 rtn +: 000485 p_g24_package_data: +0x131 000486 fetch 2 ,mem_cb_24g_data +0x132 000487 call callback_func +0x133 000488 branch p_g24_accumulate_mouse_data ,user +0x134 000489 fetch 7 ,mem_24g_txbuf + 1 +0x135 000490 rtn blank +0x136 000491 branch enable_user +: 000492 p_g24_accumulate_mouse_data: +0x137 000493 call p_mouse_data_xy_release +0x138 000494 jam 0 ,mem_24g_abort_pac +0x139 000495 add rega ,1 ,pdata +0x13a 000496 store 1 ,mem_24g_datalen +0x13b 000497 call p_g24_transmit_rf_ctrl_clear +0x13c 000498 store 1 ,mem_24g_txbuf +0x13d 000499 ifetcht 1 ,contw +0x13e 000500 ifetch 1 ,regb +0x13f 000501 ior temp ,pdata +0x140 000502 istore 1 ,contw +0x141 000503 increase 1 ,regb +0x142 000504 ifetch 4 ,regb +0x143 000505 istore 4 ,contw +0x144 000506 increase 4 ,regb +0x145 000507 arg mem_24g_txbuf + 6 ,contw +0x146 000508 arg 2 ,loopcnt +: 000509 p_g24_accumulation_loop: +0x147 000510 ifetch 1 ,regb +0x148 000511 ifetcht 1 ,contw +0x149 000512 iadd temp ,pdata +0x14a 000513 istore 1 ,contw +0x14b 000514 increase 1 ,regb +0x14c 000515 loop p_g24_accumulation_loop +0x14d 000516 rtn +: 000518 p_g24_txbuf_clear: +0x14e 000519 arg 4 ,loopcnt +0x14f 000520 arg mem_24g_txbuf ,contw +0x150 000521 branch memset0 +: 000523 p_g24_transmit_receive_ack: +0x151 000524 disable user3 +0x152 000525 call p_g24_transmit +0x153 000530 force 0 ,radio_ctrl +0x154 000531 fetch 4 ,mem_24g_addr +0x155 000532 iforce access +0x156 000533 fetcht 1 ,mem_last_freq +0x157 000534 call set_freq_rx +0x158 000535 call rf_rx_enable +0x159 000536 call p_g24_receive_rxon +0x15a 000537 call p_g24_end_of_packet ,user3 +0x15b 000538 rtn +: 000543 p_g24_retransmit: +0x15c 000544 fetch 1 ,mem_24g_abort_pac +0x15d 000545 nrtn blank +0x15e 000546 fetch 2 ,mem_24g_txfail_cnt +0x15f 000547 increase 1 ,pdata +0x160 000548 store 2 ,mem_24g_txfail_cnt +0x161 000549 fetch 1 ,mem_24g_txfail_cnt + 1 +0x162 000550 bbit1 4 ,g24_stop_24g_mode +0x163 000551 fetch 1 ,mem_24g_pairing_sm +0x164 000552 bne state_24g_pairing_success ,p_g24_tx_paring_retry +0x165 000553 call p_g24_tx_hop_ch_process +0x166 000554 branch p_g24_transmit_loop +: 000556 p_g24_tx_paring_retry: +0x167 000557 fetch 1 ,mem_24g_txfail_cnt +0x168 000558 rtnne 0xff +: 000559 p_g24_tx_attempt_fail: +0x169 000560 setarg 0 +0x16a 000561 store 2 ,mem_24g_txfail_cnt +0x16b 000562 branch g24_stop_24g_mode +: 000564 p_g24_tx_fast_hop: +0x16c 000565 call power_ctrl_txpower_incrs +0x16d 000566 call power_ctrl_pac_succ_decrs +0x16e 000567 branch p_g24_ch +: 000569 p_g24_tx_hop_ch_process: +0x16f 000570 fetch 1 ,mem_24g_retry +0x170 000571 sub pdata ,11 ,null +0x171 000572 nbranch p_g24_tx_fast_hop ,positive +0x172 000573 increase 1 ,pdata +0x173 000574 store 1 ,mem_24g_retry +0x174 000576 beq 6 ,p_g24_hop_ch_disable +0x175 000578 beq 12 ,p_g24_hop_ch_disable +0x176 000579 rtn +: 000581 p_g24_ackpayload_parse: +0x177 000582 call p_g24_read_len_pid_crc +0x178 000583 fetch 1 ,mem_24g_rxdata_length +0x179 000584 rtn blank +0x17a 000585 iforce loopcnt +0x17b 000586 arg mem_24g_rxbuf + 2 ,contr +0x17c 000587 arg mem_24g_rxpayload ,contw +0x17d 000588 branch memcpy +: 000590 p_g24_pair_init: +0x17e 000591 jam tx_power_pair ,mem_tx_power +0x17f 000592 jam 0 ,mem_24g_pid +0x180 000593 jam g24_pair_ch ,mem_24g_ch +0x181 000594 fetch 4 ,mem_24g_paring_addr +: 000595 p_g24_update_addr_and_synccrc8: +0x182 000596 store 4 ,mem_24g_addr +: 000598 p_g24_syncword_crc8: +0x183 000599 arg 0 ,rega +0x184 000600 arg 4 ,loopcnt +0x185 000601 arg mem_24g_addr ,contr +: 000602 p_g24_syncword_crc8_loop: +0x186 000603 ifetch 1 ,contr +0x187 000604 iadd rega ,rega +0x188 000605 loop p_g24_syncword_crc8_loop +0x189 000606 copy rega ,pdata +0x18a 000607 store 2 ,mem_24g_syncword +0x18b 000608 fetch 1 ,mem_24g_syncword +0x18c 000609 fetcht 1 ,mem_24g_syncword + 1 +0x18d 000610 iadd temp ,pdata +0x18e 000611 store 1 ,mem_24g_syncword_crc8 +0x18f 000612 rtn +: 000614 p_g24_start_pairing_sm1: +0x190 000616 call p_g24_pair_init +: 000617 p_g24_set_pairing_sm_1: +0x191 000618 jam state_24g_pairing_1 ,mem_24g_pairing_sm +0x192 000619 rtn +: 000621 p_g24_pairing_sm: +0x193 000622 jam zcode_90 ,mem_zcode_temp_param0 +0x194 000623 branch p_zcode_entrance +: 000625 p_g24_paring_mode_start: +0x195 000626 call power_ctrl_pac_succ_cnt_init +: 000627 p_g24_paring_mode: +0x196 000628 jam zcode_91 ,mem_zcode_temp_param0 +0x197 000629 branch p_zcode_entrance +: 000632 p_g24_check_51cmd_stop_24g: +0x198 000633 set0 mark_24g ,mark +0x199 000634 jam state_24g_stop ,mem_24g_conn_sm +0x19a 000635 call le_disable +: 000636 p_mouse_disable_g24_pairing_flag: +0x19b 000637 arg mosue_24g_pairing_flag ,queue +0x19c 000638 branch mouse_disable_function_flag +: 000640 p_g24_put_data_in_buff: +0x19d 000641 storet 1 ,mem_24g_datalen +0x19e 000642 copy temp ,loopcnt +0x19f 000643 arg mem_24g_txbuf ,contw +0x1a0 000644 copy rega ,contr +0x1a1 000645 branch memcpy +: 000647 p_g24_read_len_pid_crc: +0x1a2 000649 fetch 1 ,mem_24g_rxbuf + 1 +0x1a3 000650 rshift3 pdata ,pdata +0x1a4 000651 store 1 ,mem_24g_rxdata_length +0x1a5 000653 increase 1 ,pdata +0x1a6 000654 arg mem_24g_rxbuf + 1 ,contr +0x1a7 000655 iadd contr ,contr +0x1a8 000656 ifetch 3 ,contr +0x1a9 000657 store 3 ,mem_24g_sta_crc +0x1aa 000659 fetch 1 ,mem_24g_rxbuf + 1 +0x1ab 000660 rshift pdata ,pdata +0x1ac 000661 and pdata ,0x03 ,pdata +0x1ad 000662 store 1 ,mem_24g_sta_pid +0x1ae 000663 rtn +: 000665 p_g24_transmit_prep: +0x1af 000668 fetch 1 ,mem_24g_datalen +0x1b0 000669 increase 2 ,pdata +0x1b1 000670 store 1 ,mem_24g_txlen +0x1b2 000672 fetch 1 ,mem_24g_data_type +0x1b3 000673 store 1 ,mem_24g_txpayload +0x1b4 000675 fetch 1 ,mem_24g_datalen +0x1b5 000676 lshift3 pdata ,pdata +0x1b6 000677 fetcht 1 ,mem_24g_pid +0x1b7 000678 and temp ,0x03 ,temp +0x1b8 000679 lshift temp ,temp +0x1b9 000680 ior temp ,pdata +0x1ba 000681 fetcht 1 ,mem_24g_no_ack +0x1bb 000682 iadd temp ,pdata +0x1bc 000683 istore 1 ,contw +0x1bd 000685 fetch 1 ,mem_24g_datalen +0x1be 000686 iforce loopcnt +0x1bf 000687 arg mem_24g_txbuf ,contr +0x1c0 000688 branch memcpy +: 000707 p_g24_prep: +0x1c1 000708 disable enable_crc +0x1c2 000709 disable enable_white +0x1c3 000710 setarg 0x555555 +0x1c4 000711 iforce crc24_init +0x1c5 000712 fetch 1 ,mem_24g_ch +0x1c6 000713 branch le_prep2 +: 000715 p_g24_receive_rxon: +0x1c7 000718 call p_g24_prep +0x1c8 000719 disable user3 +0x1c9 000720 enable decode_fec0 +0x1ca 000721 enable is_rx +0x1cb 000722 disable is_tx +0x1cc 000723 enable swfine +0x1cd 000724 fetch 2 ,mem_24g_rx_window +0x1ce 000725 iforce stop_watch +0x1cf 000726 correlate null ,timeout +0x1d0 000727 nbranch p_g24_sync_timeout ,sync +0x1d1 000730 disable decode_fec0 +0x1d2 000731 enable decode_fec1 +0x1d3 000732 enable enable_white +0x1d4 000733 enable enable_crc +0x1d5 000734 call p_g24_receive_byte +0x1d6 000735 store 1 ,mem_24g_get_syncword_crc8 +0x1d7 000736 fetcht 1 ,mem_24g_syncword_crc8 +0x1d8 000737 isub temp ,null +0x1d9 000738 nbranch p_g24_end_of_packet ,zero +0x1da 000739 call p_g24_receive_byte +0x1db 000740 store 1 ,mem_24g_rxbuf +0x1dc 000744 fetch 1 ,mem_24g_rxbuf +0x1dd 000745 fetcht 1 ,mem_24g_data_type +0x1de 000746 icompare bits_data ,temp +0x1df 000747 nbranch p_g24_end_of_packet ,true +: 000748 p_g24_receive_skip: +0x1e0 000749 call p_g24_receive_byte +0x1e1 000750 istore 1 ,contw +0x1e2 000751 rshift3 pdata ,pdata +0x1e3 000752 and pdata ,0x1f ,loopcnt +0x1e4 000753 branch p_g24rx_nopayload ,zero +: 000754 p_g24rx_loop: +0x1e5 000755 call p_g24_receive_byte +0x1e6 000756 istore 1 ,contw +0x1e7 000757 loop p_g24rx_loop +: 000758 p_g24rx_nopayload: +0x1e8 000760 copy contw ,rega +0x1e9 000761 call p_g24_receive_byte +0x1ea 000762 store 1 ,mem_rssi_hex_received +0x1eb 000763 copy rega ,contw +0x1ec 000764 parse demod ,bucket ,24 +0x1ed 000765 enable swfine +0x1ee 000766 arg param_sifs ,stop_watch +0x1ef 000767 rshift32 pdata ,pdata +0x1f0 000768 rshift16 pdata ,pdata +0x1f1 000769 istore 3 ,contw +0x1f2 000770 disable decode_fec1 +0x1f3 000771 branch p_g24_end_of_packet ,crc_failed +0x1f4 000774 enable user3 +0x1f5 000775 fetch 1 ,mem_last_freq +0x1f6 000776 add pdata ,0 ,rega +0x1f7 000777 call rf_write_freq +0x1f8 000778 disable decode_fec0 +0x1f9 000779 call set_sync_on +0x1fa 000780 fetch 1 ,mem_rssi_hex_received +: 000781 p_rssi_signal: +0x1fb 000782 copy pdata ,rega +0x1fc 000783 fetcht 1 ,mem_rssi_signal_index +0x1fd 000784 setarg mem_rssi_signal_buf +0x1fe 000785 iadd temp ,contw +0x1ff 000786 copy rega ,pdata +0x200 000787 istore 1 ,contw +0x201 000788 increase 1 ,temp +0x202 000789 and_into rssi_buf_len_signal ,temp +0x203 000790 storet 1 ,mem_rssi_signal_index +0x204 000791 rtn +: 000793 p_g24_receive_byte: +0x205 000794 parse demod ,bucket ,8 +0x206 000795 rshift3 pwindow ,pdata +0x207 000796 rtn +: 000798 p_g24_sync_timeout: +: 000803 p_g24_end_of_packet: +0x208 000804 disable encode_fec1 +0x209 000805 disable decode_fec1 +0x20a 000806 branch end_of_packet +: 000812 p_g24_transmit: +0x20b 000813 call le_enable +0x20c 000814 fetch 4 ,mem_24g_addr +0x20d 000815 iforce access +0x20e 000816 call p_g24_prep +0x20f 000817 call set_sync_on +0x210 000818 fetcht 1 ,mem_24g_ch +0x211 000819 call set_freq_tx +0x212 000820 set1 txgfsk ,radio_ctrl +0x213 000821 enable encode_fec0 +0x214 000822 enable is_tx +0x215 000823 disable is_rx +0x216 000826 rshift16 access ,pdata +0x217 000827 rshift8 pdata ,pdata +0x218 000828 rshift4 pdata ,pdata +0x219 000829 inject mod ,40 +0x21a 000830 disable encode_fec0 +0x21b 000831 enable encode_fec1 +0x21c 000832 enable enable_white +0x21d 000833 enable enable_crc +0x21e 000834 fetch 1 ,mem_24g_syncword_crc8 +0x21f 000835 inject mod ,8 +0x220 000836 fetch 1 ,mem_24g_txlen +0x221 000837 iforce loopcnt +0x222 000838 arg mem_24g_txpayload ,contr +: 000839 p_g24tr_loop: +0x223 000840 ifetch 1 ,contr +0x224 000841 inject mod ,8 +0x225 000842 loop p_g24tr_loop +0x226 000845 enable enable_parity +0x227 000846 inject mod ,24 +0x228 000847 disable enable_parity +0x229 000848 until null ,tx_clear +0x22a 000849 nop 100 +0x22b 000850 disable encode_fec0 +0x22c 000851 disable encode_fec1 +0x22d 000852 rtn +: 000854 p_g24_timer_check: +0x22e 000855 call disable_user +0x22f 000856 fetcht 4 ,mem_24g_tx_btclk +0x230 000857 copy clkn_bt ,pdata +0x231 000858 isub temp ,null +0x232 000859 ncall g24_timer_timeout ,positive +0x233 000860 copy pdata ,regb +0x234 000861 fetch 4 ,mem_24g_tx_btclk +0x235 000862 fetcht 1 ,mem_24g_interval +0x236 000863 iadd temp ,temp +0x237 000864 copy regb ,pdata +0x238 000865 isub temp ,null +0x239 000866 nrtn positive +0x23a 000867 set0 28 ,pdata +0x23b 000868 store 4 ,mem_24g_tx_btclk +0x23c 000869 branch enable_user +: 000871 p_rssi_average: +0x23d 000872 arg 0 ,temp +0x23e 000873 arg rssi_buf_len_signal + 1 ,loopcnt +0x23f 000874 copy rega ,contr +: 000875 p_rssi_average_loop: +0x240 000876 ifetch 1 ,contr +0x241 000877 iadd temp ,temp +0x242 000878 loop p_rssi_average_loop +0x243 000879 rshift3 temp ,pdata +0x244 000880 copy pdata ,temp +0x245 000881 rtnmark0 mark_24g +0x246 000883 div pdata ,10 +0x247 000884 call wait_div_end +0x248 000885 quotient pdata +0x249 000886 lshift4 pdata ,pdata +0x24a 000887 branch clk2bt_next +: 000889 p_mouse_before_lpm: +0x24b 000890 rtnmark1 mark_24g +0x24c 000891 call p_mouse_le_txbuff_save +0x24d 000892 call p_mouse_setgpio_lpm +0x24e 000893 fetch 1 ,mem_context +0x24f 000894 bbit0 state_inconn ,p_clear_wake +0x250 000895 fetch 1 ,mem_lpm_current_mult +0x251 000896 nrtn blank +: 000897 p_clear_wake: +0x252 000898 setarg 0 +0x253 000899 store 8 ,mem_gpio_wakeup_low +0x254 000900 rtn +: 000902 p_g24_lpm_wait: +0x255 000903 enable user +0x256 000904 call lpo_calibration +0x257 000905 fetch 3 ,mem_clks_per_lpo +0x258 000906 branch disable_user ,blank +0x259 000907 fetch 1 ,mem_lpm_mode +0x25a 000908 branch disable_user ,blank +0x25b 000909 fetch 1 ,mem_24g_transmit_by_interrupt +0x25c 000910 beq g24_tx_timer_int_enable ,disable_user +: 000911 p_mouse_setgpio_lpm: +0x25d 000912 call p_mouse_set_sdio_high +0x25e 000913 call p_clear_wake +: 000914 p_mouse_setgpio_hibernate: +0x25f 000915 call mouse_lpm_before_common +0x260 000916 fetcht 1 ,mem_flash_ncs_gpio +0x261 000917 call gpio_out_inactive +0x262 000918 hfetch 4 ,core_gpio_oe0 +0x263 000919 hfetcht 4 ,core_gpio_pu0 +0x264 000920 ior temp ,temp +0x265 000921 invert temp ,temp +0x266 000922 hstoret 4 ,core_gpio_pd0 +0x267 000923 hfetch 1 ,core_gpio_pd1 +0x268 000924 set0 2 ,pdata +0x269 000925 hstore 1 ,core_gpio_pd1 +0x26a 000926 hfetch 1 ,core_gpio_pd2 +0x26b 000927 set0 6 ,pdata +0x26c 000928 hstore 1 ,core_gpio_pd2 +0x26d 000933 hfetch 1 ,core_gpio_pd3 +0x26e 000934 set1 0 ,pdata +0x26f 000935 hstore 1 ,core_gpio_pd3 +0x270 000936 hfetch 1 ,core_gpio_pu2 +0x271 000937 or pdata ,0xc0 ,pdata +0x272 000938 hstore 1 ,core_gpio_pu2 +0x273 000939 hfetch 1 ,core_gpio_pd3 +0x274 000940 and pdata ,0x7f ,pdata +0x275 000941 hstore 1 ,core_gpio_pd3 +0x276 000944 rtn +: 000946 p_mouse_t_wheel_clear_wake: +0x277 000947 fetcht 1 ,mem_whee_a_data_gpio +0x278 000948 call p_gpio_set_input_pd +0x279 000949 fetcht 1 ,mem_whee_b_data_gpio +0x27a 000950 call p_gpio_set_input_pd +0x27b 000951 fetcht 1 ,mem_whee_ta_data_gpio +0x27c 000952 call p_gpio_set_input_pd +0x27d 000953 fetcht 1 ,mem_whee_tb_data_gpio +0x27e 000954 call p_gpio_set_input_pd +0x27f 000956 fetch 1 ,mem_gpio_wakeup_low +0x280 000957 and pdata ,0xbf ,pdata +0x281 000958 store 1 ,mem_gpio_wakeup_low +0x282 000959 fetch 1 ,mem_gpio_wakeup_low + 2 +0x283 000960 and pdata ,0x7f ,pdata +0x284 000961 store 1 ,mem_gpio_wakeup_low + 2 +0x285 000962 fetch 1 ,mem_gpio_wakeup_low + 3 +0x286 000963 and pdata ,0xe7 ,pdata +0x287 000964 store 1 ,mem_gpio_wakeup_low + 3 +0x288 000965 rtn +: 000973 p_mouse_set_sdio_high: +0x289 000974 fetch 1 ,mem_mouse_init_sensor_reset_flag +0x28a 000975 rtn blank +0x28b 000976 branch p_mouse_seting_sensor_type +: 000978 p_device_init: +0x28c 000979 jam 0x86 ,0x895b +0x28d 000980 jam 0xa0 ,0x895c +0x28e 000981 call initialize_radio +0x28f 000982 call app_lpm_mult_enable +0x290 000983 call enable_authrom +0x291 000984 branch p_mouse_spi_init ,wake +: 000985 p_device_wake_from_power: +0x292 000986 fetch 3 ,mem_le_lap + 3 +0x293 000987 store 3 ,mem_le_lap_high_3b +0x294 000988 call p_wake_from_power +0x295 000990 call p_mouse_switch_hwakeup_bypb +0x296 000991 fetcht 1 ,mem_device_flag +0x297 000992 fetch 1 ,mem_24g_device_number +0x298 000993 isub temp ,null +0x299 000994 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero +0x29a 000997 fetch 1 ,mem_device_flag +0x29b 000998 beq 0xff ,p_mouse_24g_pair_check +0x29c 000999 sub pdata ,1 ,null +0x29d 001000 nbranch p_mouse_check_reconn_target ,zero +: 001001 p_mouse_24g_pair_check: +0x29e 001002 call p_mouse_check_key_gpio +0x29f 001003 beq mouse_lm_button ,p_mouse_24g_pairing_button +: 001004 p_mouse_check_reconn_target: +0x2a0 001005 call p_mouse_tx_power_init +0x2a1 001006 call p_mouse_select_device_by_button +0x2a2 001007 arg mem_device1_type ,rega +0x2a3 001008 fetch 1 ,mem_device_flag +0x2a4 001009 fetcht 1 ,mem_24g_device_number +0x2a5 001010 isub temp ,null +0x2a6 001011 branch p_mouse_start_24g_mode ,zero +0x2a7 001012 increase -1 ,pdata +0x2a8 001013 mul32 pdata ,29 ,pdata +0x2a9 001014 iadd rega ,rega +0x2aa 001015 ifetch 1 ,rega +0x2ab 001016 store 1 ,mem_xrecord_mode +0x2ac 001020 beq rec_4_mode ,p_mouse4_0_check_reconn_target +0x2ad 001022 rtn +: 001024 p_mouse_tx_power_init: +0x2ae 001025 fetch 1 ,mem_tx_power_temp +0x2af 001026 store 1 ,mem_tx_power +0x2b0 001027 rtn +: 001028 p_mouse_bt_deepsleep_timerout_adjust: +0x2b1 001029 setarg 0x4650 +0x2b2 001030 store 2 ,mem_mouse_no_data_timeout +0x2b3 001031 rtn +: 001041 p_mouse4_0_check_reconn_target: +0x2b4 001042 jam zcode_23 ,mem_zcode_temp_param0 +0x2b5 001043 branch p_zcode_entrance +: 001045 p_le_check_adv_flag: +0x2b6 001046 arg mem_le_adv_data ,rega +: 001047 p_le_check_adv_flag_loop: +0x2b7 001048 ifetch 1 ,rega +0x2b8 001049 rtn blank +0x2b9 001050 iadd contr ,rega +0x2ba 001051 ifetch 1 ,contr +0x2bb 001052 rtneq 0x01 +0x2bc 001053 branch p_le_check_adv_flag_loop +: 001055 p_mouse_le_fast_conn_disable: +0x2bd 001056 jam 0x5a ,mem_mouse_fast_conn_flag +0x2be 001057 rtn +: 001059 p_mouse_fast_conn_init: +0x2bf 001060 jam 0xff ,mem_mouse_fast_conn_flag +0x2c0 001061 jam 0x34 ,mem_xrecord_mode +0x2c1 001062 fetch 6 ,mem_24g_allpowerful_addr +0x2c2 001063 store 6 ,mem_le_lap +0x2c3 001064 rtn +: 001067 p_mouse_24g_pairing_button: +0x2c4 001068 jam zcode_62 ,mem_zcode_temp_param0 +0x2c5 001069 branch p_zcode_entrance +: 001071 p_mouse_init_sunt: +0x2c6 001072 call p_mouse_spi_init +0x2c7 001073 call mouse_spi_sdio_gpio_pollup +: 001074 p_mouse_init_sensor: +0x2c8 001075 call mouse_read_sensor_id +0x2c9 001076 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge +0x2ca 001077 beq p3065_id1 ,p_mouse_p3065_init_param +0x2cb 001078 call mouse_twspi_reset +0x2cc 001079 nop 1000 +0x2cd 001080 branch p_mouse_init_sensor +: 001082 p_mouse_init_sensor_reset: +0x2ce 001083 jam 1 ,mem_mouse_init_sensor_reset_flag +0x2cf 001084 call spi_ncs_enable +0x2d0 001085 call p_mouse_init_sunt +0x2d1 001086 branch spi_ncs_disable +: 001088 p_mouse_init_p32xx_id2_judge: +0x2d2 001089 call p_mouse_sensor_poweron +0x2d3 001090 fetch 1 ,mem_sensor_id2 +0x2d4 001091 beq p_mx8650 ,p_mouse_mx8650_init_param +0x2d5 001093 branch mouse_init_p32xx_id2_judge + 1 +: 001095 p_mouse_mx8650_init_param: +0x2d6 001096 jam mx8650 ,mem_config_sensor_type +0x2d7 001097 arg mem_sensor_8650_init ,regc +0x2d8 001098 call p_sensor_wr_seq +0x2d9 001099 branch p_mouse_dpi_config +: 001101 p_sensor_wr_seq: +0x2da 001102 ifetch 2 ,regc +0x2db 001103 arg 0xffff ,temp +0x2dc 001104 isub temp ,null +0x2dd 001105 rtn zero +0x2de 001106 call twspi_write +0x2df 001107 increase 2 ,regc +0x2e0 001108 branch p_sensor_wr_seq +: 001115 p_mouse_p3065_init_param: +0x2e1 001116 call p_mouse_sensor_poweron +0x2e2 001117 branch mouse_p3065_init_param +: 001124 p_spid_init_flash: +0x2e3 001125 jam 0x40 ,core_spid_ctrl +0x2e4 001126 jam 0x0 ,core_spid_delay +0x2e5 001127 hfetch 1 ,core_gpio_sel1 +0x2e6 001128 set0 0 ,pdata +0x2e7 001129 set0 1 ,pdata +0x2e8 001130 set1 3 ,pdata +0x2e9 001131 set0 4 ,pdata +0x2ea 001132 hstore 1 ,core_gpio_sel1 +0x2eb 001133 setarg 0 +0x2ec 001134 store 4 ,mem_spid_tbuf +0x2ed 001135 hfetch 1 ,core_gpio_pd3 +0x2ee 001136 set0 0 ,pdata +0x2ef 001137 hstore 1 ,core_gpio_pd3 +0x2f0 001138 rtn +: 001140 p_mouse_load_flash_info_check: +0x2f1 001141 call p_flash_release_deep_power_down +0x2f2 001142 call mouse_load_flash_flag +0x2f3 001143 fetch 2 ,mem_store_flag +0x2f4 001144 arg eeprom_init_flag ,temp +0x2f5 001145 isub temp ,null +0x2f6 001146 branch p_mouse_load_flash_device_info ,zero +0x2f7 001147 storet 2 ,mem_store_flag +0x2f8 001148 call mouse_ble_init_address +0x2f9 001151 fetch 4 ,mem_mouse_24g_addr_init +0x2fa 001152 store 4 ,mem_mouse_24g_addr +0x2fb 001153 store 4 ,mem_24g_addr +: 001154 p_mouse_store_flash_device_info: +0x2fc 001155 call p_mouse_adc_read_timeout +0x2fd 001156 fetch 2 ,mem_mouse_vdd_now_vol +0x2fe 001157 branch p_mouse_store_flash_device_info ,blank +0x2ff 001158 fetch 1 ,mem_adc_power_flag +0x300 001159 bbit1 1 ,app_enter_hibernate +0x301 001160 call p_flash_release_deep_power_down +0x302 001161 call p_flash_erase_sector +0x303 001162 call p_flash_write_enable +0x304 001163 call p_mouse_information_flash_parameters +0x305 001164 call p_spid_write_flash +0x306 001165 call p_wait_flash_done +0x307 001166 call p_mouse_store_flash_dpi +: 001167 p_mouse_store_random_addr_increase_count: +0x308 001168 call p_spid_init_flash +0x309 001169 call p_flash_write_enable +0x30a 001170 arg 2 ,temp +0x30b 001171 arg mem_random_addr_increase_count ,rega +0x30c 001172 arg mouse_random_addr_count_eeprom_offset ,regb +0x30d 001173 call p_mouse_store_flash_comm +0x30e 001174 call p_flash_deep_power_down +: 001175 p_mouse_spi_init: +0x30f 001176 jam 0x76 ,mem_spi_init_clk +0x310 001177 branch mouse_spi_init +: 001179 p_mouse_store_flash_dpi: +0x311 001180 call p_spid_init_flash +0x312 001181 call p_flash_write_enable +0x313 001182 arg 1 ,temp +0x314 001183 arg mem_mouse_dpi ,rega +0x315 001184 arg mouse_dpi_eeprom_offect ,regb +: 001185 p_mouse_store_flash_comm: +0x316 001186 fetch 3 ,mem_flash_base +0x317 001187 iadd regb ,pdata +0x318 001188 call p_spid_write_flash +0x319 001189 branch p_wait_flash_done +: 001191 p_flash_erase_sector: +0x31a 001192 fetch 3 ,mem_flash_base +0x31b 001193 store 3 ,mem_spi_write_addr +0x31c 001194 call p_flash_write_enable +0x31d 001195 call flash_erase_sector + 3 +: 001196 p_wait_flash_done: +0x31e 001197 call p_flash_read_status +0x31f 001198 bbit1 flash_status_wip ,p_wait_flash_done +0x320 001199 rtn +: 001201 p_flash_read_status: +0x321 001202 setarg mem_spid_rbuf +0x322 001203 hstore 2 ,core_spid_rxaddr +0x323 001204 setarg flash_read_satus +0x324 001205 force 1 ,temp +0x325 001206 store 1 ,mem_spid_tbuf +0x326 001207 setarg mem_spid_tbuf +0x327 001208 hstore 2 ,core_spid_txaddr +0x328 001209 branch spid_read_regs + 2 +: 001211 p_flash_write_enable: +0x329 001212 call spid_unlock_flash +0x32a 001213 call p_flash_read_status +0x32b 001214 bbit0 flash_status_wel ,p_flash_write_enable + 1 +0x32c 001215 rtn +: 001218 p_spid_write_flash: +0x32d 001219 copy pdata ,regc +0x32e 001220 copy rega ,pdata +0x32f 001221 increase -4 ,pdata +0x330 001222 copy pdata ,regb +0x331 001223 ifetch 4 ,regb +0x332 001224 store 4 ,mem_write_flash_head_temp +0x333 001225 copy regc ,pdata +0x334 001226 call spid_write_flash +0x335 001227 fetch 4 ,mem_write_flash_head_temp +0x336 001228 istore 4 ,regb +0x337 001229 rtn +: 001231 p_mouse_information_flash_parameters: +0x338 001232 setarg mem_mouse_information_end +0x339 001233 arg mem_mouse_information_start ,temp +0x33a 001234 isub temp ,temp +0x33b 001235 fetch 3 ,mem_flash_base +0x33c 001236 arg mem_mouse_information_start ,rega +0x33d 001237 rtn +: 001244 p_mouse_load_flash_device_info: +0x33e 001246 call p_flash_release_deep_power_down +0x33f 001247 call p_mouse_information_flash_parameters +0x340 001248 call spid_read_flash +0x341 001249 call p_mouse_load_random_addr_increase_count +0x342 001250 call p_mouse_load_dpi_from_flash +0x343 001251 call mouse_select_reconn_device +0x344 001252 fetch 4 ,mem_mouse_24g_addr +0x345 001253 store 4 ,mem_24g_addr +0x346 001254 rtn +: 001256 p_flash_deep_power_down: +0x347 001257 jam flash_command_deep_power_down ,mem_temp +: 001258 p_spid_write_flash_cmd: +0x348 001259 call p_spid_init_flash +0x349 001260 call delay_nop100 +0x34a 001261 arg mem_write_flash_head_temp ,rega +0x34b 001262 fetcht 1 ,mem_temp +0x34c 001263 call spid_write_flash_common +0x34d 001264 branch delay_nop100 +: 001266 p_flash_release_deep_power_down: +0x34e 001267 jam flash_command_release_deep_power_down ,mem_temp +0x34f 001268 branch p_spid_write_flash_cmd +: 001271 p_mouse_load_random_addr_increase_count: +0x350 001272 call p_flash_release_deep_power_down +0x351 001273 arg 2 ,temp +0x352 001274 arg mem_random_addr_increase_count ,rega +0x353 001275 arg mouse_random_addr_count_eeprom_offset ,regb +: 001276 p_mouse_load_flash_comm: +0x354 001277 fetch 3 ,mem_flash_base +0x355 001278 iadd regb ,pdata +0x356 001279 branch spid_read_flash +: 001281 p_mouse_load_dpi_from_flash: +0x357 001282 call p_flash_release_deep_power_down +0x358 001283 arg 1 ,temp +0x359 001284 arg mem_mouse_dpi ,rega +0x35a 001285 arg mouse_dpi_eeprom_offect ,regb +0x35b 001286 branch p_mouse_load_flash_comm +: 001290 p_mouse_start_24g_mode: +0x35c 001293 jam 1 ,mem_device_flag +0x35d 001294 call p_mouse_mode_24g_device_multi_led_on +: 001295 p_g24_start_24g_mode: +0x35e 001296 jam zcode_60 ,mem_zcode_temp_param0 +0x35f 001297 branch p_zcode_entrance +: 001299 p_g24_auto_pair_start: +0x360 001300 call p_mouse_discovery_multi_led_blink +0x361 001301 jam zcode_61 ,mem_zcode_temp_param0 +0x362 001302 branch p_zcode_entrance +: 001307 p_pdata_0xff_check: +0x363 001308 call enable_user +0x364 001309 setarg 0xffff +: 001310 p_pdata_0xff_check_loop: +0x365 001311 ifetcht 2 ,contr +0x366 001312 isub temp ,null +0x367 001313 ncall disable_user ,zero +0x368 001314 loop p_pdata_0xff_check_loop +0x369 001315 rtn +: 001317 p_mouse_g24_package_data: +0x36a 001318 call mouse_g24_package_data +0x36b 001319 fetch 2 ,mem_mouse_z +0x36c 001320 rtn blank +: 001321 p_g24_transmit_by_interrupt_enable: +0x36d 001322 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt +0x36e 001323 setarg 0 +0x36f 001324 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0x370 001325 rtn +: 001327 p_mouse_le_txbuff_save: +0x371 001328 arg mem_le_tx_buffer0 ,contr +0x372 001329 arg mem_le_tx_buffer0_omemalloc ,contw +0x373 001330 call p_mouse_le_txbuff_copy +0x374 001331 arg mem_le_tx_buffer1 ,contr +0x375 001332 call p_mouse_le_txbuff_copy +0x376 001333 arg mem_le_tx_buffer2 ,contr +0x377 001334 call p_mouse_le_txbuff_copy +0x378 001335 arg mem_le_tx_buffer3 ,contr +: 001336 p_mouse_le_txbuff_copy: +0x379 001337 arg 27 ,loopcnt +0x37a 001338 branch memcpy +: 001340 p_mouse_le_txbuff_load: +0x37b 001341 arg mem_le_tx_buffer0_omemalloc ,contr +0x37c 001342 arg mem_le_tx_buffer0 ,contw +0x37d 001343 call p_mouse_le_txbuff_copy +0x37e 001344 arg mem_le_tx_buffer1 ,contw +0x37f 001345 call p_mouse_le_txbuff_copy +0x380 001346 arg mem_le_tx_buffer2 ,contw +0x381 001347 call p_mouse_le_txbuff_copy +0x382 001348 arg mem_le_tx_buffer3 ,contw +0x383 001349 branch p_mouse_le_txbuff_copy +: 001351 p_mouse_le: +0x384 001352 call le_fifo_check_nearly_full +0x385 001353 nrtn blank +0x386 001354 fetch 1 ,mem_mouse_fast_conn_flag +0x387 001355 beq 0xff ,p_mouse_le_next +0x388 001356 fetch 1 ,mem_le_connect_status_flag +0x389 001357 and pdata ,0x03 ,pdata +0x38a 001358 rtnne 0x03 +: 001359 p_mouse_le_next: +0x38b 001360 fetch 1 ,mem_mouse_clear_sensor_data_flag +0x38c 001361 call p_mouse_clear_sensor_data ,blank +0x38d 001362 fetch mouse_flag_len ,mem_mouse_flag +0x38e 001363 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +0x38f 001364 call mouse_motion +0x390 001365 nrtn user +0x391 001366 call p_mouse_le_current_mult_update +0x392 001367 call p_mouse_data_xy_release +0x393 001368 call p_mouse_wheel_trigger +: 001369 p_mouse_data_push: +0x394 001370 arg mem_mouse_key ,rega +0x395 001371 call queue_push +0x396 001372 call p_mouse_queue_increase ,user +0x397 001373 rtn +: 001375 p_mouse_le_current_mult_update: +0x398 001378 jam 0 ,mem_lpm_mult +0x399 001379 jam 30 ,mem_mouse_le_current_mult_timer +0x39a 001380 rtn +: 001382 p_mouse_data_xy_release: +0x39b 001383 fetch 1 ,mem_config_function_enable +0x39c 001384 rtnbit1 enable_sensor_motion_pin +0x39d 001385 fetch 1 ,mem_mouse_long_mult_flag +0x39e 001386 rtnne 1 +0x39f 001387 setarg 0 +0x3a0 001388 store 1 ,mem_mouse_long_mult_flag +0x3a1 001389 store 4 ,mem_mouse_x +0x3a2 001390 branch p_mouse_init_sensor_reset +: 001392 p_mouse_data_init: +0x3a3 001393 jam 7 ,mem_mouse_data_queue +0x3a4 001394 jam 4 ,mem_mouse_data_queue + 1 +0x3a5 001395 setarg mem_mouse_data_queue +0x3a6 001396 store 2 ,mem_queue_ptr +0x3a7 001397 branch queue_init +: 001399 p_mouse_queue_increase: +0x3a8 001400 fetch 1 ,mem_mouse_data_queue_num +0x3a9 001401 increase 1 ,pdata +0x3aa 001402 store 1 ,mem_mouse_data_queue_num +0x3ab 001403 rtn +: 001405 p_mouse_data_pull: +0x3ac 001406 arg mem_mouse_key ,rega +0x3ad 001407 call queue_pop +0x3ae 001408 branch p_mouse_fill_data_le ,user +0x3af 001409 rtn +: 001411 p_mouse_fill_data_le: +0x3b0 001412 call le_clear_md +0x3b1 001413 fetch 1 ,mem_mouse_data_queue_num +0x3b2 001414 sub pdata ,1 ,null +0x3b3 001415 ncall le_set_md ,positive +0x3b4 001416 fetch 1 ,mem_mouse_data_queue_num +0x3b5 001417 rtn blank +0x3b6 001418 increase -1 ,pdata +0x3b7 001419 store 1 ,mem_mouse_data_queue_num +0x3b8 001420 branch mouse_fill_data_le +: 001426 p_mouse_wheel_trigger: +0x3b9 001427 fetch 2 ,mem_mouse_z +0x3ba 001428 rtn blank +0x3bb 001429 jam 1 ,mem_mouse_wheel_trigger +0x3bc 001430 jam 10 ,mem_mouse_wheel_trigger_timer +0x3bd 001431 rtn +: 001433 p_mouse_bt: +0x3be 001434 rtn attempt +0x3bf 001435 fetch 1 ,mem_app_handshake_flag +0x3c0 001436 rtn blank +0x3c1 001437 call l2cap_malloc_is_fifo_nearly_full +0x3c2 001438 nrtn blank +0x3c3 001439 fetch 1 ,mem_mouse_clear_sensor_data_flag +0x3c4 001440 call p_mouse_clear_sensor_data ,blank +0x3c5 001441 fetch mouse_flag_len ,mem_mouse_flag +0x3c6 001442 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +0x3c7 001443 bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data +0x3c8 001444 call mouse_motion +0x3c9 001445 nrtn user +0x3ca 001446 call p_mouse_le_current_mult_update +0x3cb 001447 call p_mouse_data_xy_release +0x3cc 001448 call p_mouse_wheel_trigger +0x3cd 001449 fetch 1 ,mem_mouse_bt_boot_mode +0x3ce 001450 beq 1 ,p_mouse_send_data_boot_mode +0x3cf 001451 fetch 1 ,mem_mouse_bt_send_first_package_flag +0x3d0 001452 rtn blank +0x3d1 001453 branch mouse_send_data +: 001455 p_mouse_send_data_boot_mode: +0x3d2 001456 fetch 1 ,mem_mouse_key +0x3d3 001457 store 1 ,mem_mouse_bt_boot_data +0x3d4 001458 fetch 1 ,mem_mouse_x +0x3d5 001459 istore 1 ,contw +0x3d6 001460 fetch 1 ,mem_mouse_y +0x3d7 001461 istore 1 ,contw +0x3d8 001462 fetch 2 ,mem_mouse_z +0x3d9 001463 istore 2 ,contw +0x3da 001465 arg 7 ,rega +0x3db 001466 call hid_malloc_tx_buff +0x3dc 001467 fetch 2 ,mem_hid_int_remote_cid +0x3dd 001468 istore 2 ,contw +0x3de 001469 setarg 0x02a1 +0x3df 001470 istore 2 ,contw +0x3e0 001471 fetch 5 ,mem_mouse_bt_boot_data +0x3e1 001472 istore 5 ,contw +0x3e2 001473 rtn +: 001475 p_mouse_clear_sensor_data: +0x3e3 001476 jam 1 ,mem_mouse_clear_sensor_data_flag +0x3e4 001477 call le_set_config_more_data +0x3e5 001478 branch p_mouse_init_sensor_reset +: 001480 p_mouse_idle: +0x3e6 001481 call ui_check_paring_button +0x3e7 001482 call p_mouse_dpi_check +0x3e8 001483 branch p_mouse_wheel_check +: 001485 p_mouse_wheel_check: +0x3e9 001486 call p_mouse_t_wheel_scan +0x3ea 001487 call mouse_wheel_scan +0x3eb 001488 branch mouse_wheel_check + 3 +: 001490 p_mouse_t_wheel_scan: +0x3ec 001491 hfetch 1 ,core_gpio_pu2 +0x3ed 001492 set1 7 ,pdata +0x3ee 001493 hstore 1 ,core_gpio_pu2 +0x3ef 001494 hfetch 1 ,core_gpio_pu0 +0x3f0 001495 set1 6 ,pdata +0x3f1 001496 hstore 1 ,core_gpio_pu0 +0x3f2 001497 arg 0 ,rega +0x3f3 001498 fetcht 1 ,mem_whee_ta_data_gpio +0x3f4 001499 call gpio_get_bit +0x3f5 001500 setflag true ,0 ,rega +0x3f6 001501 fetcht 1 ,mem_whee_tb_data_gpio +0x3f7 001502 call gpio_get_bit +0x3f8 001503 setflag true ,1 ,rega +0x3f9 001504 copy rega ,pdata +0x3fa 001505 store 1 ,mem_wheel_tb_new_pinlevel +0x3fb 001506 beq 0x01 ,p_mouse_t_wheel_scan_judge1 +0x3fc 001507 beq 0x02 ,p_mouse_t_wheel_scan_judge2 +0x3fd 001508 fetch 1 ,mem_wheel_tog +0x3fe 001509 bbit1 7 ,p_mouse_t_wheel_scan_judge3 +0x3ff 001510 rtn +: 001512 p_mouse_t_wheel_scan_judge1: +0x400 001513 fetch 1 ,mem_wheel_tb_old_pinlevel +0x401 001514 beq 0 ,p_mouse_t_wheel_scan_judge11 +0x402 001515 beq 3 ,p_mouse_t_wheel_scan_judge12 +0x403 001516 rtn +: 001517 p_mouse_t_wheel_scan_judge2: +0x404 001518 fetch 1 ,mem_wheel_tb_old_pinlevel +0x405 001519 beq 0 ,p_mouse_t_wheel_scan_judge21 +0x406 001520 beq 3 ,p_mouse_t_wheel_scan_judge22 +0x407 001521 rtn +: 001523 p_mouse_t_wheel_scan_judge11: +0x408 001524 jam 0x82 ,mem_wheel_tog +0x409 001525 rtn +: 001526 p_mouse_t_wheel_scan_judge12: +0x40a 001527 jam 0x81 ,mem_wheel_tog +0x40b 001528 rtn +: 001529 p_mouse_t_wheel_scan_judge21: +0x40c 001530 jam 0x80 ,mem_wheel_tog +0x40d 001531 rtn +: 001532 p_mouse_t_wheel_scan_judge22: +0x40e 001533 jam 0x83 ,mem_wheel_tog +0x40f 001534 rtn +: 001535 p_mouse_t_wheel_scan_judge3: +0x410 001536 fetch 1 ,mem_wheel_tog +0x411 001537 set0 7 ,pdata +0x412 001538 store 1 ,mem_wheel_tog +0x413 001539 beq 0 ,p_mouse_t_wheel_scan_judge30 +0x414 001540 beq 1 ,p_mouse_t_wheel_scan_judge31 +0x415 001541 beq 2 ,p_mouse_t_wheel_scan_judge32 +0x416 001542 beq 3 ,p_mouse_t_wheel_scan_judge33 +0x417 001543 rtn +: 001545 p_mouse_t_wheel_scan_judge30: +0x418 001546 fetch 1 ,mem_wheel_tb_new_pinlevel +0x419 001547 beq 3 ,p_mouse_wheel_t_forward +0x41a 001548 rtn +: 001549 p_mouse_t_wheel_scan_judge31: +0x41b 001550 fetch 1 ,mem_wheel_tb_new_pinlevel +0x41c 001551 beq 0 ,p_mouse_wheel_t_forward +0x41d 001552 rtn +: 001553 p_mouse_t_wheel_scan_judge32: +0x41e 001554 fetch 1 ,mem_wheel_tb_new_pinlevel +0x41f 001555 beq 3 ,p_mouse_wheel_t_back +0x420 001556 rtn +: 001557 p_mouse_t_wheel_scan_judge33: +0x421 001558 fetch 1 ,mem_wheel_tb_new_pinlevel +0x422 001559 beq 0 ,p_mouse_wheel_t_back +0x423 001560 rtn +: 001562 p_mouse_wheel_t_forward: +0x424 001563 jam 0 ,mem_mouse_tz_data_count1 +0x425 001564 fetch 1 ,mem_mouse_tz_data +0x426 001565 increase 1 ,pdata +0x427 001566 store 1 ,mem_mouse_tz_data +0x428 001567 rtn +: 001569 p_mouse_wheel_t_back: +0x429 001570 jam 0 ,mem_mouse_tz_data_count +0x42a 001571 fetch 1 ,mem_mouse_tz_data +0x42b 001572 increase -1 ,pdata +0x42c 001573 store 1 ,mem_mouse_tz_data +0x42d 001574 rtn +: 001576 p_mouse_comm_gpio_config: +0x42e 001577 fetcht 1 ,mem_mouse_comm_gpio +0x42f 001578 rtneq 0xff +0x430 001579 branch p_gpio_set_input_pu +: 001580 p_mouse_dpi_check: +0x431 001581 call p_mouse_comm_gpio_config +0x432 001582 fetcht 1 ,mem_dpi_button_gpio +0x433 001583 call p_gpio_set_input_pd +0x434 001584 fetcht 1 ,mem_dpi_button_gpio +0x435 001585 call gpio_get_bit +0x436 001586 branch p_mouse_dpi_up ,true +0x437 001587 call p_gpio_set_input_pu +: 001588 p_mouse_dpi_down: +0x438 001589 fetch 1 ,mem_mouse_dpi_button_state +0x439 001590 rtneq dpi_button_state_down +0x43a 001591 jam dpi_button_state_down ,mem_mouse_dpi_button_state +0x43b 001592 fetch 1 ,mem_mouse_dpi +0x43c 001593 increase 1 ,pdata +0x43d 001594 and pdata ,0x03 ,pdata +0x43e 001595 store 1 ,mem_mouse_dpi +0x43f 001596 fetcht 1 ,mem_config_sensor_type +0x440 001597 sub temp ,p3212 ,null +0x441 001598 call p_mouse_p3212_dpi_led_set ,zero +0x442 001599 increase 2 ,pdata +0x443 001600 store 1 ,mem_mouse_multi_led_blink_count +0x444 001601 call p_mouse_dpi_multi_led_blink +0x445 001602 branch mouse_seting_dpi +: 001603 p_mouse_dpi_up: +0x446 001604 call p_gpio_set_input_pu +0x447 001605 branch mouse_dpi_up +: 001607 p_mouse_p3212_dpi_led_set: +0x448 001608 mul32 pdata ,2 ,pdata +0x449 001609 increase -1 ,pdata +0x44a 001610 rtn +: 001613 p_mouse_priority_bb_event: +0x44b 001614 copy regc ,pdata +0x44c 001615 beq bt_evt_le_connected ,p_mouse_le_bb_event_connected +0x44d 001616 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected +0x44e 001617 beq bt_evt_le_enc_info ,p_mouse_le_enc_info +0x44f 001618 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt +0x450 001619 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved +0x451 001620 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed +0x452 001621 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout +0x453 001622 beq bt_evt_switch_not_accept ,app_bt_role_switch +0x454 001623 beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept +0x455 001624 beq bt_evt_bb_connected ,p_mouse_bb_event_connected +0x456 001625 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected +0x457 001626 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check +0x458 001627 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete +0x459 001628 beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail +0x45a 001629 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success +0x45b 001630 branch mouse_priority_bb_event + 1 +: 001632 p_mouse_le_bb_event_connected: +0x45c 001633 jam zcode_d0 ,mem_zcode_temp_param0 +0x45d 001634 branch p_zcode_entrance +: 001636 p_mouse_le_bb_disconnected: +0x45e 001637 call p_mouse_sensor_powerdown_check +0x45f 001638 jam zcode_a2 ,mem_zcode_temp_param0 +0x460 001639 branch p_zcode_entrance +: 001641 p_mouse_le_enc_info: +: 001642 p_app_updata_le_param: +0x461 001643 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x462 001644 branch ui_ipc_send_cmd +: 001646 p_mouse_le_ll_start_encryt: +0x463 001647 jam zcode_b3 ,mem_zcode_temp_param0 +0x464 001648 branch p_zcode_entrance +: 001650 p_mouse_le_conn_param_update_rsp_recieved: +0x465 001651 jam zcode_a1 ,mem_zcode_temp_param0 +0x466 001652 branch p_zcode_entrance +: 001655 p_mouse_bb_event_reconn_timeout: +: 001656 p_mouse_bb_event_reconn_failed: +0x467 001657 jam zcode_a3 ,mem_zcode_temp_param0 +0x468 001658 branch p_zcode_entrance +: 001660 p_mouse_irtual_cable_unplug: +0x469 001661 jam zcode_71 ,mem_zcode_temp_param0 +0x46a 001662 branch p_zcode_entrance +: 001664 p_mouse_sniff_not_accept: +0x46b 001665 jam zcode_b1 ,mem_zcode_temp_param0 +0x46c 001666 branch p_zcode_entrance +: 001668 p_mouse_bb_event_connected: +0x46d 001669 jam 0 ,mem_mouse_connected_state +0x46e 001670 jam 0 ,mem_mouse_send_switch_req_timer +0x46f 001671 call p_mouse_init_sensor_reset +0x470 001672 branch mouse_stop_discovery +: 001674 p_mouse_bb_event_disconnected: +0x471 001675 call p_mouse_sensor_powerdown_check +0x472 001676 jam zcode_b4 ,mem_zcode_temp_param0 +0x473 001677 branch p_zcode_entrance +: 001679 p_mouse_enter_sniff_check: +0x474 001680 jam zcode_b2 ,mem_zcode_temp_param0 +0x475 001681 branch p_zcode_entrance +: 001683 p_mouse_24g_pairing_complete: +0x476 001684 call p_mouse_discovey_led_blink_off +0x477 001685 jam 0 ,mem_mouse_connected_state +0x478 001686 call p_mouse_init_sensor_reset +0x479 001687 jam zcode_92 ,mem_zcode_temp_param0 +0x47a 001688 branch p_zcode_entrance +: 001690 p_mouse_24g_attempt_fail: +0x47b 001691 jam 1 ,mem_mouse_connected_state +0x47c 001692 jam 10 ,mem_mouse_multi_led_blink_count +0x47d 001693 call p_mouse_dpi_multi_led_blink +0x47e 001695 call p_mouse_sensor_powerdown_check +0x47f 001697 jam zcode_a0 ,mem_zcode_temp_param0 +0x480 001698 branch p_zcode_entrance +: 001700 p_mouse_24g_attempt_success: +0x481 001701 call p_mouse_multi_led_blink_off +0x482 001702 call p_mouse_mode_24g_device_multi_led_on +0x483 001703 jam 0 ,mem_mouse_connected_state +0x484 001705 call p_mouse_init_sensor_reset +: 001706 p_mouse_24g_no_data_timer_init: +0x485 001707 branch mouse_no_data_timer_init +: 001709 p_mouse_before_hibernate: +0x486 001710 call p_mouse_sensor_powerdown_check +0x487 001711 jam zcode_a4 ,mem_zcode_temp_param0 +0x488 001712 branch p_zcode_entrance +: 001714 p_mouse_sensor_powerdown_check: +0x489 001715 fetch 1 ,mem_mouse_init_sensor_reset_flag +0x48a 001716 rtn blank +0x48b 001717 jam 0 ,mem_mouse_init_sensor_reset_flag +: 001718 p_mouse_sensor_powerdown: +0x48c 001719 call p_mouse_init_sunt +0x48d 001720 setarg 0x0806 +0x48e 001725 branch twspi_write +: 001727 p_mouse_bb_event_timer: +0x48f 001728 call p_mouse_adc_read +0x490 001729 call p_mouse_low_voltage_led_timer +0x491 001730 call p_mouse_wheel_trigger_timer +0x492 001731 call p_mouse_select_device_by_button +0x493 001732 call mouse_check_discovery_timeout_timer +0x494 001733 call mouse_check_no_data_timeout_timer +0x495 001734 call p_mouse_g24_long_sleep_param_update_timer +0x496 001735 call p_mouse_g24_stop_mode_timeout_timer +0x497 001736 call p_mouse_check_direct_timeout_timer +0x498 001737 call p_mouse_le_enable_att_list_timer +0x499 001738 call p_mouse_le_current_mult_update_timer +0x49a 001739 call p_le_send_smp_security_request_timer +0x49b 001740 call p_mouse_send_switch_req_timer +0x49c 001741 call mouse_check_hid_handshake_timer +0x49d 001742 call p_mouse_bt_check_sniff_req_timeout_timer +0x49e 001743 branch p_mouse_multi_led_blink_timer +: 001746 p_mouse_send_switch_req_timer: +0x49f 001747 arg mem_mouse_send_switch_req_timer ,regc +0x4a0 001748 arg host_create_conn_resend ,regb +0x4a1 001749 branch timer_single_step +: 001751 p_mouse_bt_check_sniff_req_timeout_timer: +0x4a2 001752 arg mem_mouse_bt_send_first_package_timer ,regc +0x4a3 001753 arg p_mouse_bt_send_first_package ,regb +0x4a4 001754 branch timer_single_step +: 001755 p_mouse_bt_send_first_package: +0x4a5 001756 jam 1 ,mem_mouse_bt_send_first_package_flag +0x4a6 001757 rtn +: 001760 p_mouse_le_enable_att_list_timer: +0x4a7 001761 arg mem_le_start_encrypt_timer ,regc +0x4a8 001762 arg mouse_le_write_enable ,regb +0x4a9 001763 branch timer_single_step +: 001765 p_mouse_check_direct_timeout_timer: +0x4aa 001766 arg mem_mouse_direct_timer ,regc +0x4ab 001767 arg p_mouse_check_direct_timeout ,regb +0x4ac 001768 branch timer_single_step_2b +: 001769 p_mouse_check_direct_timeout: +0x4ad 001770 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +0x4ae 001771 nrtn blank +0x4af 001772 branch mouse_check_direct_timeout +: 001774 p_mouse_le_current_mult_update_timer: +0x4b0 001775 arg mem_mouse_le_current_mult_timer ,regc +0x4b1 001776 arg p_mouse_le_current_mult_reinit ,regb +0x4b2 001777 branch timer_single_step +: 001778 p_mouse_le_current_mult_reinit: +0x4b3 001779 fetch 1 ,mem_lpm_mult_init +0x4b4 001780 store 1 ,mem_lpm_mult +0x4b5 001781 branch p_mouse_long_mult_flag_enable +: 001783 p_le_send_smp_security_request_timer: +0x4b6 001784 fetch 1 ,mem_mouse_le_bb_connected_flag +0x4b7 001785 rtn blank +0x4b8 001786 arg mem_mouse_send_secutiry_request_timer ,regc +0x4b9 001787 arg p_le_pairing_sm_start_check ,regb +0x4ba 001788 branch timer_single_step +: 001789 p_le_pairing_sm_start_check: +0x4bb 001790 fetch 1 ,mem_le_send_security_request_flag +0x4bc 001791 nrtn blank +0x4bd 001792 branch le_pairing_sm_start +: 001794 p_mouse_wheel_trigger_timer: +0x4be 001795 arg mem_mouse_wheel_trigger_timer ,regc +0x4bf 001796 arg p_mouse_wheel_trigger_disable ,regb +0x4c0 001797 branch timer_single_step +: 001798 p_mouse_wheel_trigger_disable: +0x4c1 001799 jam 0 ,mem_mouse_wheel_trigger +0x4c2 001800 rtn +: 001802 p_mouse_g24_long_sleep_param_update_timer: +0x4c3 001803 arg mem_24g_long_sleep_param_update_timer ,regc +0x4c4 001804 arg p_mouse_g24_long_sleep_normal_param ,regb +0x4c5 001805 branch timer_single_step +: 001806 p_mouse_g24_long_sleep_normal_param: +0x4c6 001807 setarg g24_long_sleep_step3 +0x4c7 001808 store 3 ,mem_24g_enter_hibernate +: 001809 p_mouse_long_mult_flag_enable: +0x4c8 001810 jam 1 ,mem_mouse_long_mult_flag +0x4c9 001811 rtn +: 001813 p_mouse_g24_stop_mode_timeout_timer: +0x4ca 001814 arg mem_24g_stop_g24_mode_timeout ,regc +0x4cb 001815 arg p_mouse_g24_stop_mode_timeout ,regb +0x4cc 001816 branch timer_single_step_2b +: 001817 p_mouse_g24_stop_mode_timeout: +0x4cd 001818 jam 1 ,mem_24g_stop_g24_mode +0x4ce 001819 rtn +: 001850 p_mouse_bt_discovery_timer: +0x4cf 001851 arg mem_select_ui_button_count ,regc +0x4d0 001852 arg p_mouse_long_button_bt_discovery ,regb +0x4d1 001853 branch timer_single_step +: 001854 p_mouse_long_button_bt_discovery: +0x4d2 001855 jam on ,mem_select_device_button_statue_bt_discovery +0x4d3 001856 fetcht 1 ,mem_device_flag +0x4d4 001857 fetch 1 ,mem_24g_device_number +0x4d5 001858 isub temp ,null +0x4d6 001859 rtn zero +0x4d7 001860 fetch 2 ,mem_ui_state_map +0x4d8 001861 isolate1 ui_state_ble_adv ,pdata +0x4d9 001862 call mouse_stop_le_adv ,true +0x4da 001863 fetch 2 ,mem_ui_state_map +0x4db 001864 isolate1 ui_state_bt_reconnect ,pdata +0x4dc 001865 call mouse_cancel_reconnect ,true +0x4dd 001866 branch mouse_long_button_bt_discovry +: 001869 p_mouse_get_select_state: +0x4de 001870 fetcht 1 ,mem_config_select_device_button_gpio +0x4df 001871 call p_gpio_set_input_pu +0x4e0 001872 fetcht 1 ,mem_config_select_device_button_gpio +0x4e1 001873 branch gpio_get_bit +: 001875 p_mouse_select_device_by_button: +0x4e2 001876 call p_mouse_get_select_state +0x4e3 001877 nbranch p_mouse_select_device_button_up ,true +: 001878 p_mouse_select_device_button_down: +0x4e4 001879 call p_mouse_bt_discovery_timer +0x4e5 001880 fetch 1 ,mem_select_device_button_statue +0x4e6 001881 rtneq pb_button_state_down +0x4e7 001882 jam pb_button_state_down ,mem_select_device_button_statue +0x4e8 001883 fetch 2 ,mem_mouse_direct_timeout +0x4e9 001884 store 2 ,mem_mouse_direct_timer +0x4ea 001885 force page_length_timer ,queue +0x4eb 001886 fetch 2 ,mem_page_to +0x4ec 001887 branch timer_init +: 001889 p_mouse_select_device_button_up: +0x4ed 001890 fetch 1 ,mem_mouse_select_device_button_wakeup_flag +0x4ee 001891 nbranch p_mouse_select_button_wakeup_firstup ,blank +0x4ef 001892 fetch 1 ,mem_select_device_button_statue +0x4f0 001893 rtneq pb_button_state_up +0x4f1 001894 fetch 1 ,mem_select_ui_button_count +0x4f2 001895 sub pdata ,20 ,null +0x4f3 001896 ncall p_mouse_ready_reconnection_by_button ,positive +0x4f4 001898 fetch 1 ,mem_ui_button_timeout +0x4f5 001899 store 1 ,mem_select_ui_button_count +0x4f6 001900 jam pb_button_state_up ,mem_select_device_button_statue +0x4f7 001901 rtn +: 001903 p_mouse_ready_reconnection_by_button: +0x4f8 001904 call p_mouse_switch_device_flag +0x4f9 001905 jam 0 ,mem_link_key_exists +0x4fa 001906 call p_mouse_store_flash_device_info +0x4fb 001909 fetch mouse_flag_len ,mem_mouse_flag +0x4fc 001910 rtneq mouse_bt_discovery_button_long_down_flag +0x4fd 001911 branch mouse_set_reconnection +: 001913 p_mouse_switch_device_flag: +0x4fe 001914 fetcht 1 ,mem_device_flag +0x4ff 001915 increase 1 ,temp +0x500 001916 fetch 1 ,mem_device_number +0x501 001917 isub temp ,null +0x502 001918 ncall mouse_select_device_count_clean ,positive +0x503 001919 storet 1 ,mem_device_flag +0x504 001920 rtn +: 001922 p_mouse_select_button_wakeup_firstup: +0x505 001923 jam 0 ,mem_mouse_select_device_button_wakeup_flag +0x506 001924 jam pb_button_state_up ,mem_select_device_button_statue +0x507 001925 jam on ,mem_mouse_multi_led_blink_enable +0x508 001926 rtn +: 001928 p_mouse_le_bb_disconnected_led_blink_set: +0x509 001929 jam 1 ,mem_mouse_connected_state +0x50a 001930 jam 10 ,mem_mouse_multi_led_blink_count +0x50b 001931 branch p_mouse_dpi_multi_led_blink +: 001964 p_mouse_adc_read: +0x50c 001967 fetch 2 ,mem_mouse_multi_led_blink_count +0x50d 001968 nrtn blank +0x50e 001969 fetch 1 ,mem_mouse_wheel_trigger +0x50f 001970 nrtn blank +0x510 001971 fetch 1 ,mem_adc_read_timer +0x511 001972 increase 1 ,pdata +0x512 001973 store 1 ,mem_adc_read_timer +0x513 001974 sub pdata ,10 ,null +0x514 001975 rtn positive +: 001976 p_mouse_adc_read_timeout: +0x515 001977 call adc_init_data +0x516 001978 jam 0 ,mem_adc_read_timer +0x517 001979 call p_adc_set_mode +0x518 001980 call vdd_calculate_by_mode +0x519 001981 mul32 pdata ,3 ,pdata +0x51a 001982 arg 0x0f ,temp +0x51b 001983 isub temp ,pdata +0x51c 001984 sub pdata ,0x64 ,null +0x51d 001985 call p_mouse_vdd_decrease ,positive +0x51e 001986 store 2 ,mem_mouse_vdd_now_vol +0x51f 001987 arg mem_mouse_vdd_calculate_set ,rega +0x520 001990 branch p_mouse_adc_read_next +: 001993 p_mouse_adc_read_next: +0x521 001994 call p_adc_bat_percent_lowpower_out +0x522 001995 fetch 1 ,mem_adc_power_flag +0x523 001996 bbit1 1 ,app_enter_hibernate +0x524 001997 bbit0 0 ,p_mouse_adc_no_low_voltage +0x525 001998 jam 1 ,mem_mouse_adc_last_low_voltage_flag +0x526 001999 branch mouse_adc_low_voltage +: 002001 p_mouse_adc_no_low_voltage: +0x527 002002 call mouse_adc_no_low_voltage +0x528 002003 fetch 1 ,mem_mouse_adc_last_low_voltage_flag +0x529 002004 rtn blank +0x52a 002005 jam 0 ,mem_mouse_adc_last_low_voltage_flag +0x52b 002006 branch p_mouse_multi_led_off +: 002008 p_mouse_vdd_decrease: +0x52c 002009 arg 0x05 ,temp +0x52d 002010 isub temp ,pdata +0x52e 002011 rtn +: 002013 p_adc_set_mode: +: 002017 p_adc_check_gpio: +0x52f 002018 hfetch 1 ,core_gpio_pu0 +0x530 002019 set0 5 ,pdata +0x531 002020 hstore 1 ,core_gpio_pu0 +0x532 002021 call adc_check_gpio +0x533 002022 hfetch 1 ,core_gpio_pu0 +0x534 002023 set1 5 ,pdata +0x535 002024 hstore 1 ,core_gpio_pu0 +0x536 002025 rtn +: 002027 p_adc_bat_percent_lowpower_out: +0x537 002028 ifetch 8 ,rega +0x538 002029 store 8 ,mem_pdatatemp +0x539 002030 fetcht 2 ,mem_pdatatemp + 2 +0x53a 002031 fetch 2 ,mem_pdatatemp + 6 +0x53b 002032 isub temp ,null +0x53c 002033 nbranch adc_set_no_power_flag ,positive +0x53d 002034 fetcht 2 ,mem_pdatatemp + 4 +0x53e 002035 isub temp ,null +0x53f 002036 nbranch adc_set_low_power_flag ,positive +: 002037 p_adc_clear_low_power_flag: +0x540 002038 fetch 1 ,mem_adc_power_flag +0x541 002039 set0 0 ,pdata +0x542 002040 store 1 ,mem_adc_power_flag +0x543 002041 rtn +: 002043 p_mouse_low_voltage_led_timer: +0x544 002044 fetch mouse_flag_len ,mem_mouse_flag +0x545 002045 rtnbit0 mouse_low_voltage_flag +0x546 002046 fetch 2 ,mem_ui_state_map +0x547 002047 rtnbit1 ui_state_ble_adv +0x548 002048 rtnbit1 ui_state_bt_discovery +0x549 002049 fetch 2 ,mem_mouse_multi_led_blink_count +0x54a 002050 nrtn blank +0x54b 002051 fetch 1 ,mem_adc_low_volatage_led_timer_count +0x54c 002052 pincrease 1 +0x54d 002053 store 1 ,mem_adc_low_volatage_led_timer_count +0x54e 002054 sub pdata ,30 ,null +0x54f 002055 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive +0x550 002056 sub pdata ,10 ,null +0x551 002057 branch p_mouse_multi_led_on ,positive +0x552 002058 branch p_mouse_multi_led_off +: 002059 p_mouse_adc_low_volatage_led_timer_count_clean: +0x553 002060 jam 1 ,mem_adc_low_volatage_led_timer_count +0x554 002061 rtn +: 002064 p_mouse_sensor_poweron: +0x555 002065 call p_mouse_spi_init +0x556 002066 setarg 0x8006 +0x557 002067 call twspi_write +0x558 002068 nop 12000 +0x559 002069 arg mem_sensor_poweron_init ,regc +0x55a 002070 call p_sensor_wr_seq +: 002071 p_mouse_dpi_config: +0x55b 002072 fetch 1 ,mem_mouse_dpi +0x55c 002073 bne 0xff ,p_mouse_seting_dpi +: 002074 p_mouse_dpi_config_default: +0x55d 002075 fetch 1 ,mem_config_sensor_motion +0x55e 002076 store 1 ,mem_mouse_dpi +: 002077 p_mouse_seting_dpi: +: 002078 p_mouse_seting_sensor_type: +0x55f 002079 fetch 1 ,mem_config_sensor_type +0x560 002080 beq p3212 ,mouse_seting_3212_dpi +0x561 002081 beq p3065_xy ,p_mouse_seting_3065xy_dpi +0x562 002082 beq mx8650 ,p_mouse_seting_3065xy_dpi +: 002084 p_mouse_seting_3205_dpi: +0x563 002085 fetch 1 ,mem_mouse_dpi +0x564 002086 sub pdata ,mouse_dpi_level2 ,null +0x565 002087 call p_mouse_3205_dpi_recount ,zero +0x566 002088 fetch 1 ,mem_mouse_dpi +0x567 002089 beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 +0x568 002090 beq mouse_dpi_level4 ,mouse_set_cpi3 +0x569 002091 branch mouse_set_cpi2 +: 002092 p_mouse_3205_dpi_recount: +0x56a 002093 jam mouse_dpi_level3 ,mem_mouse_dpi +0x56b 002094 rtn +: 002095 p_mouse_3205_set_cpi1: +0x56c 002096 fetch 1 ,mem_320x_dpi_1 +0x56d 002097 increase -1 ,pdata +0x56e 002098 branch mouse_p3205_dpi +: 002100 p_mouse_seting_3065xy_dpi: +0x56f 002101 fetch 1 ,mem_mouse_dpi +0x570 002102 sub pdata ,mouse_dpi_level2 ,null +0x571 002103 call p_mouse_3205_dpi_recount ,zero +0x572 002104 fetch 1 ,mem_mouse_dpi +0x573 002105 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 +0x574 002106 beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 +: 002107 p_mouse_3065xy_set_cpi3: +0x575 002108 fetch 1 ,mem_3065xy_dpi_3 +: 002109 p_mouse_dpi_store: +0x576 002110 store 1 ,mem_mouse_cpi_count +0x577 002111 branch mouse_p3205_dpi + 3 +: 002112 p_mouse_3065xy_set_cpi1: +0x578 002113 fetch 1 ,mem_3065xy_dpi_1 +0x579 002114 branch p_mouse_dpi_store +: 002115 p_mouse_3065xy_set_cpi4: +0x57a 002116 fetch 1 ,mem_3065xy_dpi_4 +0x57b 002117 branch p_mouse_dpi_store +: 002130 p_mouse_motion: +0x57c 002131 disable user +0x57d 002132 setarg 0 +0x57e 002133 store 6 ,mem_mouse_x +0x57f 002134 call p_mouse_cheak_sensor_data +0x580 002135 call p_mouse_set_sdio_high +0x581 002136 call mouse_zwheel +0x582 002137 call mouse_t_zwheel +0x583 002138 call p_mouse_key +0x584 002139 call p_mouse_data_zoom +0x585 002140 nrtn user +0x586 002141 branch mouse_motion + 9 +: 002143 p_mouse_cheak_sensor_data: +0x587 002144 fetch 1 ,mem_spi_write_flash_sm +0x588 002145 rtnne flash_sm_no_buys +0x589 002146 fetch 1 ,mem_config_sensor_type +0x58a 002147 beq p3212 ,p_mouse_p3212_sensor_motion +0x58b 002148 beq p3610 ,p_mouse_p3610_sensor_motion +0x58c 002154 branch p_mouse_p32xx_sensor_motion +: 002155 p_mouse_p3212_sensor_motion: +0x58d 002156 call mouse_clear_sensor_data +0x58e 002157 branch mouse_p3212_sensor_motion_next +: 002158 p_mouse_p3610_sensor_motion: +0x58f 002159 disable user +0x590 002160 branch mouse_p3610_sensor_motion + 4 +: 002161 p_mouse_p32xx_sensor_motion: +0x591 002162 call mouse_clear_sensor_data +0x592 002163 disable user +0x593 002164 branch mouse_p32xx_sensor_motion_2 +: 002166 p_mouse_data_zoom: +0x594 002167 fetch 1 ,mem_config_sensor_type +0x595 002168 rtnne p3212 +0x596 002169 fetch 1 ,mem_mouse_dpi +0x597 002170 rtnne mouse_dpi_level4 +0x598 002171 fetch 2 ,mem_mouse_x +0x599 002172 call p_mouse_1600_zoom +0x59a 002173 store 2 ,mem_mouse_x +0x59b 002174 fetch 2 ,mem_mouse_y +0x59c 002175 call p_mouse_1600_zoom +0x59d 002176 store 2 ,mem_mouse_y +0x59e 002177 rtn +: 002179 p_mouse_1600_zoom: +0x59f 002180 bbit1 11 ,p_mouse_xy_inverse +0x5a0 002181 bbit0 11 ,p_mouse_xy_zoom_3200 +0x5a1 002182 rtn +: 002184 p_mouse_xy_inverse: +0x5a2 002185 sub pdata ,0 ,pdata +0x5a3 002186 call p_mouse_xy_zoom_3200 +0x5a4 002187 sub pdata ,0 ,pdata +0x5a5 002188 rtn +: 002190 p_mouse_xy_zoom_3200: +0x5a6 002191 iadd pdata ,pdata +0x5a7 002192 branch p_mouse_xy_zoom_store +: 002194 p_mouse_xy_zoom_store: +0x5a8 002195 store 2 ,mem_mouse_temp_data +0x5a9 002196 fetch 1 ,mem_mouse_temp_data + 1 +0x5aa 002197 sub pdata ,0x7 ,null +0x5ab 002198 ncall p_mouse_xy_forward_overflow ,positive +0x5ac 002199 fetch 2 ,mem_mouse_temp_data +0x5ad 002200 rtn +: 002202 p_mouse_xy_forward_overflow: +0x5ae 002203 setarg 0x7ff +0x5af 002204 store 2 ,mem_mouse_temp_data +0x5b0 002205 rtn +: 002207 p_mouse_key: +0x5b1 002208 call p_mouse_check_key_gpio +0x5b2 002209 branch mouse_key + 1 +: 002211 p_mouse_check_key_gpio: +0x5b3 002212 arg 0 ,rega +0x5b4 002213 call p_mouse_check_lkey_gpio +0x5b5 002218 branch mouse_check_key_gpio_output +: 002220 p_mouse_check_lkey_gpio: +0x5b6 002221 fetcht 1 ,mem_lbutton_gpio +0x5b7 002222 call p_gpio_set_input_pu +0x5b8 002223 fetcht 1 ,mem_lbutton_gpio +0x5b9 002224 call gpio_get_bit +0x5ba 002225 setflag true ,0 ,rega +: 002227 p_mouse_check_rkey_gpio: +0x5bb 002228 fetcht 1 ,mem_rbutton_gpio +0x5bc 002229 call p_gpio_set_input_pu +0x5bd 002230 fetcht 1 ,mem_rbutton_gpio +0x5be 002231 call gpio_get_bit +0x5bf 002232 setflag true ,1 ,rega +: 002234 p_mouse_check_mkey_gpio: +0x5c0 002235 fetcht 1 ,mem_mbutton_gpio +0x5c1 002236 call p_gpio_set_input_pu +0x5c2 002237 fetcht 1 ,mem_mbutton_gpio +0x5c3 002238 call gpio_get_bit +0x5c4 002239 setflag true ,2 ,rega +: 002241 p_mouse_check_bk_key_gpio: +0x5c5 002242 call p_mouse_comm_gpio_config +0x5c6 002243 fetcht 1 ,mem_bk_button_gpio +0x5c7 002244 call p_gpio_set_input_pd +0x5c8 002245 fetcht 1 ,mem_bk_button_gpio +0x5c9 002246 call gpio_get_bit +0x5ca 002247 nsetflag true ,3 ,rega +0x5cb 002248 call p_gpio_set_input_pu +: 002249 p_mouse_check_fw_key_gpio: +0x5cc 002250 call p_mouse_comm_gpio_config +0x5cd 002251 fetcht 1 ,mem_fw_button_gpio +0x5ce 002252 call p_gpio_set_input_pd +0x5cf 002253 fetcht 1 ,mem_fw_button_gpio +0x5d0 002254 call gpio_get_bit +0x5d1 002255 nsetflag true ,4 ,rega +: 002256 p_gpio_set_input_pu: +0x5d2 002257 set1 gpio_active_bit ,temp +: 002258 p_gpio_set_input_pu1: +0x5d3 002259 arg core_gpio_pu0 ,contw +0x5d4 002260 call gpio_set_bit +0x5d5 002261 set0 gpio_active_bit ,temp +0x5d6 002262 branch p_gpio_set_input_pd4 +: 002264 p_gpio_set_input_pd: +0x5d7 002265 set0 gpio_active_bit ,temp +0x5d8 002266 arg core_gpio_pu0 ,contw +0x5d9 002267 call gpio_set_bit +0x5da 002268 set1 gpio_active_bit ,temp +: 002269 p_gpio_set_input_pd4: +0x5db 002270 arg core_gpio_pd0 ,contw +0x5dc 002271 branch gpio_set_high_impedance + 4 +: 002293 p_mouse_bb_event_discovery_btn: +0x5dd 002295 isolate1 mark_24g ,mark +0x5de 002296 call p_g24_check_51cmd_stop_24g ,true +0x5df 002297 branch mouse_bb_event_discovery_btn + 1 +: 002299 p_le_addr_random_config: +0x5e0 002300 jam zcode_81 ,mem_zcode_temp_param0 +0x5e1 002301 branch p_zcode_entrance +: 002303 p_mouse_start_discovery: +0x5e2 002304 jam zcode_50 ,mem_zcode_temp_param0 +0x5e3 002305 branch p_zcode_entrance +: 002307 p_le_adv_data_update: +0x5e4 002308 arg mem_le_adv_data + 11 ,contw +0x5e5 002309 arg 19 ,loopcnt +0x5e6 002310 call memcpy +0x5e7 002311 branch le_modified_name_adv +: 002313 p_mouse_stop_discovery: +0x5e8 002314 call p_mouse_discovey_led_blink_off +0x5e9 002315 setarg 0 +0x5ea 002316 store 2 ,mem_mouse_discovery_timer +0x5eb 002317 store 1 ,mem_mouse_blink_count +0x5ec 002318 call p_mouse_init_sensor_reset +0x5ed 002319 branch mouse_stop_discovery + 1 +: 002321 p_le_slave_match: +0x5ee 002322 fetch 1 ,mem_le_md_count +0x5ef 002323 pincrease 1 +0x5f0 002324 store 1 ,mem_le_md_count +0x5f1 002325 beq le_md_max_count ,le_slave_cont +0x5f2 002326 call le_acknowledge +0x5f3 002327 bmark1 mark_le_decrypt_fail ,le_slave_cont +0x5f4 002328 call le_prepare_tx +0x5f5 002329 call power_ctrl_start +0x5f6 002330 branch le_slave_match + 7 +: 002332 p_le_next_adv_channel: +0x5f7 002333 fetch 1 ,mem_le_ch_mapped +0x5f8 002334 increase 1 ,pdata +0x5f9 002335 store 1 ,mem_le_ch_mapped +0x5fa 002336 rtnne 40 +0x5fb 002337 jam 37 ,mem_le_ch_mapped +0x5fc 002338 rtn +: 002340 p_le_receive_skip: +0x5fd 002341 call save_rssi +0x5fe 002342 call p_rssi_signal +0x5ff 002343 branch le_receive_skip + 2 +: 002345 p_le_update_param: +0x600 002346 jam zcode_40 ,mem_zcode_temp_param0 +0x601 002347 branch p_zcode_entrance +: 002349 p_le_update_channel_map: +0x602 002350 jam zcode_41 ,mem_zcode_temp_param0 +0x603 002351 branch p_zcode_entrance +: 002354 p_le_acknowledge: +0x604 002355 set0 mark_le_decrypt_fail ,mark +0x605 002356 call le_supervision_flush +0x606 002357 call le_check_wak +0x607 002358 fetch 1 ,mem_le_rxbuf +0x608 002359 isolate1 md ,pdata +0x609 002360 setflag true ,mark_ble_rx_md ,mark +0x60a 002361 rshift pdata ,pdata +0x60b 002362 ixor temp ,pdata +0x60c 002363 isolate1 nesn ,pdata +0x60d 002364 setflag true ,mark_old_packet ,mark +0x60e 002365 rtnmark1 mark_old_packet +0x60f 002366 fetch 1 ,mem_le_rxbuf + 1 +0x610 002367 branch le_ack_unenc ,blank +0x611 002368 fetch 1 ,mem_le_state +0x612 002369 bbit0 lestate_encryption ,le_ack_unenc +0x613 002370 call load_sk +0x614 002371 call le_decrypt +0x615 002372 nbranch p_le_decrypt_fail ,blank +0x616 002373 branch le_ack_unenc +: 002375 p_le_decrypt_fail: +0x617 002376 set1 mark_le_decrypt_fail ,mark +0x618 002377 fetcht 1 ,mem_le_arq +0x619 002378 setflip sn ,temp +0x61a 002379 storet 1 ,mem_le_arq +0x61b 002380 rtn +: 002382 p_le_prepare_tx: +0x61c 002383 fetch 1 ,mem_le_arq +0x61d 002384 bbit1 wak ,p_le_prepare_tx_wak +0x61e 002385 call power_ctrl_pac_succ_incrs +0x61f 002386 fetch 1 ,mem_empty_count +0x620 002387 nbranch p_le_send_empyt ,blank +0x621 002388 fetch 1 ,mem_le_state +0x622 002389 bbit0 lestate_encryption ,p_le_tx_4 +0x623 002390 fetch 1 ,mem_le_rxbuf + 1 +0x624 002391 branch p_le_tx_4 ,blank +0x625 002392 branch le_send_empty +: 002393 p_le_send_empyt: +0x626 002394 fetch 1 ,mem_empty_count +0x627 002395 increase -1 ,pdata +0x628 002396 store 1 ,mem_empty_count +0x629 002397 branch le_send_empty +: 002398 p_le_tx_4: +0x62a 002399 fetch 1 ,mem_le_pairing_state +0x62b 002400 bne flag_le_pairing_after_auth ,p_in_le_tx_4 +0x62c 002401 jam 3 ,mem_empty_count +: 002402 p_in_le_tx_4: +0x62d 002403 call le_fifo_check_nearly_full +0x62e 002404 call p_mouse_data_pull ,blank +0x62f 002405 branch le_prepare_tx + 4 +: 002407 p_le_check_tx_retransmit_setmd: +0x630 002408 fetch 1 ,mem_le_connect_status_flag +0x631 002409 and pdata ,0x03 ,pdata +0x632 002410 rtnne 0x03 +0x633 002411 fetch 1 ,mem_mouse_data_queue_num +0x634 002412 rtn blank +0x635 002413 fetch 1 ,mem_le_txlen +0x636 002414 rtn blank +0x637 002415 fetch 1 ,mem_le_txheader +0x638 002416 set1 md ,pdata +0x639 002417 store 1 ,mem_le_txheader +0x63a 002418 branch le_set_md +: 002431 p_le_prepare_tx_wak: +0x63b 002432 call p_le_check_tx_retransmit_setmd +: 002433 p_le_power_ctrl_pac_succ_decrs: +: 002434 power_ctrl_pac_succ_decrs: +0x63c 002435 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x63d 002436 sub pdata ,2 ,null +0x63e 002437 ncall power_ctrl_pac_succ_cnt_reinit ,positive +0x63f 002438 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x640 002439 rtneq 0 +0x641 002440 increase -1 ,pdata +0x642 002441 store 1 ,mem_power_ctrl_pac_succ_cnt +0x643 002442 rtn +: 002444 p_mouse_le_reconn_write_enable_timer_reinit: +0x644 002445 fetch 1 ,mem_mouse_le_reconnect_flag +0x645 002446 rtn blank +0x646 002447 fetch 1 ,mem_le_connect_status_flag +0x647 002448 and pdata ,0x03 ,pdata +0x648 002449 rtneq 0x03 +0x649 002450 jam 10 ,mem_le_start_encrypt_timer +0x64a 002451 rtn +: 002453 p_le_parse: +0x64b 002454 rtnmark1 mark_old_packet +0x64c 002455 call le_fifo_check_full +0x64d 002456 nrtn blank +0x64e 002457 fetch 1 ,mem_le_rxbuf +0x64f 002458 and pdata ,0x3 ,pdata +0x650 002459 store 1 ,mem_le_packet_llid +0x651 002460 ifetch 1 ,contr +0x652 002461 and pdata ,0x1f ,pdata +0x653 002462 store 1 ,mem_le_packet_size +0x654 002463 rtn blank +0x655 002464 copy contr ,pdata +0x656 002465 store 2 ,mem_le_payload_ptr +0x657 002466 fetch 1 ,mem_le_packet_llid +0x658 002467 beq llid_le_ll ,p_le_parse_ll +0x659 002468 branch le_parse_l2cap +: 002469 p_le_parse_ll: +0x65a 002470 fetch 1 ,mem_le_rxbuf + 2 +0x65b 002471 beq ll_channel_map_req ,p_le_parse_channel_map_req +0x65c 002472 branch le_parse_ll + 1 +: 002473 p_le_parse_channel_map_req: +0x65d 002474 ifetch 5 ,contr +0x65e 002475 store 5 ,mem_le_new_map +0x65f 002476 ifetch 2 ,contr +0x660 002477 store 2 ,mem_le_instant +0x661 002478 branch le_parse_channel_map_req + 7 +: 002480 p_le_parse_l2cap: +0x662 002481 ifetch 2 ,contr +0x663 002482 beq le_l2cap_cid_att ,p_le_parse_att +0x664 002483 beq le_l2cap_cid_smp ,p_le_parse_smp +0x665 002484 branch le_parse_l2cap + 11 +: 002485 p_le_parse_att: +0x666 002486 call store_contr +0x667 002487 call p_mouse_le_reconn_write_enable_timer_reinit +0x668 002488 call get_contr +0x669 002489 ifetch 3 ,contr +0x66a 002490 store 3 ,mem_le_att_opcode +0x66b 002491 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request +0x66c 002492 rshift8 pdata ,temp +0x66d 002493 sub temp ,0x24 ,null +0x66e 002494 branch p_le_parse_att1 ,positive +0x66f 002495 arg mem_mouse_le_uuid_sup ,temp +0x670 002496 storet 2 ,mem_ui_le_uuid_table +0x671 002497 call le_parse_att + 2 +0x672 002498 setarg 0x8e7a +0x673 002499 store 2 ,mem_ui_le_uuid_table +0x674 002500 rtn +: 002502 p_le_parse_att_read_by_group_type_request: +0x675 002503 call le_parse_att_read_by_group_type_request +0x676 002504 call le_fifo_get_last_tx_ptr +0x677 002505 increase 7 ,contr +0x678 002506 ifetch 1 ,contr +0x679 002507 rtnne attop_read_by_group_type_response +0x67a 002508 increase 5 ,contr +0x67b 002509 ifetch 2 ,contr +0x67c 002510 arg uuid_service_hids ,temp +0x67d 002511 isub temp ,null +0x67e 002512 nrtn zero +0x67f 002513 increase -4 ,contr +0x680 002514 setarg 0x2b +0x681 002515 istore 2 ,contr +0x682 002516 rtn +: 002518 p_le_parse_att1: +0x683 002519 beq attop_read_request ,p_le_parse_att_read_request +0x684 002520 beq attop_write_request ,p_le_parse_att_write_request +0x685 002521 branch le_parse_att + 2 +: 002522 p_le_parse_att_read_request: +0x686 002523 fetcht 2 ,mem_le_att_handle +0x687 002524 fetch 1 ,mem_le_configuration +0x688 002525 bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth +: 002526 p_le_send_att_read_response: +0x689 002527 fetch 2 ,mem_le_att_handle +0x68a 002528 beq 0x13 ,le_send_att_error_response_notfound +0x68b 002529 fetcht 2 ,mem_le_att_handle +0x68c 002530 branch le_send_att_read_response +: 002531 p_le_send_att_read_response_check_auth: +0x68d 002532 fetch 2 ,mem_le_pairing_handle +0x68e 002533 isub temp ,null +0x68f 002534 nbranch p_le_send_att_read_response ,zero +0x690 002535 call le_check_encrypt_state +0x691 002536 nbranch p_le_send_att_read_response ,user +0x692 002537 jam att_err_insufficient_authentication ,mem_le_err_code +0x693 002538 branch le_send_att_error_response +: 002540 p_le_parse_att_write_request: +0x694 002541 copy contr ,rega +0x695 002542 fetch 2 ,mem_le_l2cap_size +0x696 002543 add pdata ,-3 ,regb +0x697 002544 call le_writeatt_cb +0x698 002545 fetch 1 ,mem_mouse_fast_conn_flag +0x699 002546 beq 0xff ,le_send_att_write_response_check_auth +0x69a 002547 fetch 1 ,mem_mouse_le_reconnect_flag +0x69b 002548 branch le_send_att_write_response_check_auth ,blank +0x69c 002549 fetch 1 ,mem_le_connect_status_flag +0x69d 002550 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth +0x69e 002551 setarg 0x001a +0x69f 002552 fetcht 2 ,mem_le_att_handle +0x6a0 002553 isub temp ,null +0x6a1 002554 nbranch le_send_att_write_response_check_auth ,zero +0x6a2 002555 jam att_err_insufficient_authentication ,mem_le_err_code +0x6a3 002556 branch le_send_att_error_response +: 002558 p_le_parse_smp: +0x6a4 002559 ifetch 1 ,contr +0x6a5 002560 beq smp_pairing_request ,p_le_parse_smp_pairing_request +0x6a6 002561 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed +0x6a7 002562 branch le_parse_smp + 2 +: 002564 p_le_parse_smp_pairing_request: +0x6a8 002565 jam 1 ,mem_le_send_security_request_flag +0x6a9 002566 branch le_parse_smp_pairing_request +: 002568 p_le_parse_smp_pairing_failed: +0x6aa 002569 jam zcode_82 ,mem_zcode_temp_param0 +0x6ab 002570 branch p_zcode_entrance +: 002572 p_le_adv_not_match: +0x6ac 002573 fetch 1 ,mem_le_ch_mapped +0x6ad 002574 bne 39 ,le_adv_loop +0x6ae 002576 random pdata +0x6af 002577 arg 0x1ff ,temp +0x6b0 002578 iand temp ,pdata +0x6b1 002579 add pdata ,250 ,pdata +0x6b2 002580 call delay +0x6b3 002581 branch le_adv_not_match + 10 +: 002589 p_le_lpm_setmult: +0x6b4 002590 disable wake +0x6b5 002591 branch p_le_lpm_set_mult_attempt ,attempt +0x6b6 002592 nbranch le_lpm_lost ,match +: 002593 p_le_lpm_set_mult_attempt: +0x6b7 002594 call lpm_match +0x6b8 002595 fetch 2 ,mem_rx_window_sniff +0x6b9 002596 store 2 ,mem_le_receive_window +0x6ba 002597 fetch 1 ,mem_le_connect_status_flag +0x6bb 002598 compare 3 ,pdata ,3 +0x6bc 002599 nbranch lpm_mult_short ,true +0x6bd 002600 branch le_lpm_set_mult_attempt + 3 +: 002602 p_le_mouse_bb_event_connect_complete: +0x6be 002603 jam zcode_42 ,mem_zcode_temp_param0 +0x6bf 002604 branch p_zcode_entrance +: 002606 p_twspi_reset: +0x6c0 002607 hfetch 1 ,core_gpio_out3 +0x6c1 002608 and_into 0xfd ,pdata +0x6c2 002609 hstore 1 ,core_gpio_out3 +0x6c3 002610 hfetcht 1 ,core_gpio_oe3 +0x6c4 002611 or_into 0x2 ,temp +0x6c5 002612 hstoret 1 ,core_gpio_oe3 +0x6c6 002613 call twspi_disable +0x6c7 002614 and_into 0xfd ,temp +0x6c8 002615 nop 13 +0x6c9 002616 call p_twspi_enable +0x6ca 002617 hstoret 1 ,core_gpio_oe3 +0x6cb 002618 rtn +: 002620 p_spid_init: +0x6cc 002621 call spid_init_common +: 002622 p_twspi_enable: +0x6cd 002623 hfetch 1 ,core_gpio_sel1 +0x6ce 002624 set1 0 ,pdata +0x6cf 002625 set0 1 ,pdata +0x6d0 002626 set0 3 ,pdata +0x6d1 002627 hstore 1 ,core_gpio_sel1 +0x6d2 002628 rtn +: 002673 p_quit_connection_cont: +0x6d3 002677 call app_disconn_reason_collect_bt +0x6d4 002678 call sniff_exit +0x6d5 002679 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x6d6 002680 call ui_ipc_send_event +0x6d7 002681 call init_lmp_work +0x6d8 002682 call l2cap_init_work +0x6d9 002683 branch quit_connection_cont + 8 +: 002685 p_prepare_tx: +0x6da 002686 fetch 1 ,mem_state +0x6db 002687 isolate1 state_inconn ,pdata +0x6dc 002688 call p_bt_power_ctrl ,true +0x6dd 002689 branch prepare_tx + 1 +: 002690 p_bt_power_ctrl: +0x6de 002691 fetch 1 ,mem_arq +0x6df 002692 isolate1 wack ,pdata +0x6e0 002693 call power_ctrl_pac_succ_decrs ,true +0x6e1 002694 ncall power_ctrl_pac_succ_incrs ,true +: 002695 power_ctrl_start: +0x6e2 002696 fetch 2 ,mem_ui_state_map +0x6e3 002697 rtnbit1 ui_state_ble_adv +0x6e4 002698 rtnbit1 ui_state_bt_reconnect +0x6e5 002699 rtnbit1 ui_state_bt_discovery +0x6e6 002701 arg mem_rssi_signal_buf ,rega +0x6e7 002702 call p_rssi_average +0x6e8 002703 storet 1 ,mem_rssi_avg_received +0x6e9 002705 setarg rssi_dis_max_24g +0x6ea 002706 bmark1 mark_24g ,power_ctrl_start_next +0x6eb 002707 setarg rssi_dis_max_ble +: 002708 power_ctrl_start_next: +0x6ec 002709 isub temp ,null +0x6ed 002710 nbranch power_ctrl_txpower_incrs_force ,positive +0x6ee 002712 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x6ef 002713 sub pdata ,2 ,null +0x6f0 002714 nbranch power_ctrl_txpower_decrs_check ,positive +0x6f1 002715 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x6f2 002716 beq 0 ,power_ctrl_txpower_incrs +0x6f3 002717 rtn +: 002719 p_slave_conn_recv_packet: +0x6f4 002720 call slave_receive_master_slot +0x6f5 002721 nbranch shutdown_radio ,sync +0x6f6 002722 call save_rssi +0x6f7 002723 call p_rssi_signal +0x6f8 002724 branch slave_conn_recv_packet + 4 +: 002726 p_lpm_dispatch: +0x6f9 002727 rtnmark1 mark_24g +0x6fa 002728 call lpo_calibration +0x6fb 002729 fetch 3 ,mem_clks_per_lpo +0x6fc 002730 rtn blank +0x6fd 002731 fetch 1 ,mem_lpm_mode +0x6fe 002732 rtn blank +0x6ff 002733 fetch 1 ,mem_mouse_multi_led_on_timer +0x700 002734 nrtn blank +0x701 002736 fetch 1 ,mem_ssp_enable +0x702 002737 branch p_lpm_dispatch_next ,blank +0x703 002738 fetch 1 ,mem_sp_local_key_invalid +0x704 002739 rtn blank +: 002740 p_lpm_dispatch_next: +0x705 002741 fetch 1 ,mem_le_sc_calc +0x706 002742 nrtn blank +0x707 002743 call lpm_check_wake_lock +0x708 002744 nrtn blank +0x709 002745 fetch 1 ,mem_context +0x70a 002746 compare 3 ,pdata ,0x7 +0x70b 002747 nbranch lpm_dispatch_unconn ,true +0x70c 002748 fetch 2 ,mem_context + coffset_tsniff +0x70d 002749 arg 0xffff ,temp +0x70e 002750 isub temp ,null +0x70f 002751 rtn zero +0x710 002752 branch lpm_dispatch_next + 9 +: 002754 p_lpm_set_mult: +0x711 002755 disable wake +0x712 002756 fetch 1 ,mem_state +0x713 002757 rtnbit0 state_insniff +0x714 002758 nbranch lpm_not_match ,match +0x715 002759 call lpm_match +0x716 002760 fetch 2 ,mem_rx_window_sniff +0x717 002761 store 2 ,mem_rx_window +0x718 002762 fetch 1 ,mem_arq +0x719 002763 bbit1 wack ,lpm_mult_short +0x71a 002764 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x71b 002765 call l2cap_malloc_is_fifo_empty +0x71c 002766 nbranch lpm_mult_short ,blank +0x71d 002767 call p_lpm_set_attemp_timeout ,blank +0x71e 002768 branch lpm_set_mult + 13 +: 002769 p_lpm_set_attemp_timeout: +0x71f 002770 jam 1 ,mem_current_sniff_attempt +0x720 002771 jam 0 ,mem_current_sniff_timeout +0x721 002772 rtn +: 002774 p_mouse_bb_disconnected: +0x722 002775 fetch 1 ,mem_mouse_multi_led_blink_count +0x723 002776 nrtn blank +0x724 002778 jam zcode_10 ,mem_zcode_temp_param0 +0x725 002779 branch p_zcode_entrance +: 002910 p_check_51cmd_once_continue: +0x726 002911 call lmo_fifo_check +0x727 002912 nbranch check_51cmd_restore ,blank +0x728 002913 fetch 1 ,mem_fifo_temp +0x729 002914 bmark0 mark_context ,check_51cmd_check_idle +0x72a 002915 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info +0x72b 002916 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info +0x72c 002917 beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param +0x72d 002918 branch check_51cmd_once_continue + 2 +: 002920 p_check_51cmd_ble_update_connect_param: +0x72e 002921 call le_fifo_check_full +0x72f 002922 nrtn blank +0x730 002923 branch le_l2cap_tx_update_req +: 002925 p_flash_store_le_reconn_info: +0x731 002926 jam rec_4_mode ,mem_record_bt_mode +0x732 002927 fetch 6 ,mem_le_plap +0x733 002928 branch p_flash_store_reconn_info +: 002929 p_flash_store_bd_reconn_info: +0x734 002930 jam rec_3_mode ,mem_record_bt_mode +0x735 002931 fetch 6 ,mem_plap +: 002932 p_flash_store_reconn_info: +0x736 002933 store 6 ,mem_temp_lap +: 002934 p_mouse_store_remote_bdaddr: +0x737 002935 fetch mouse_flag_len ,mem_mouse_flag +0x738 002936 rtnbit0 mouse_store_eeprom_flag +0x739 002937 arg mouse_store_eeprom_flag ,queue +0x73a 002938 call mouse_disable_function_flag +0x73b 002939 call mouse_check_device_addr +: 002940 p_mouse_unplug_clean_bdaddr: +0x73c 002941 call mouse_before_store_reconn_info +0x73d 002942 branch p_mouse_store_flash_device_info +: 002944 p_mouse_multi_led_blink_timer: +0x73e 002945 fetch 1 ,mem_mouse_multi_led_blink_enable +0x73f 002946 rtn blank +0x740 002947 fetch 1 ,mem_mouse_multi_led_type +0x741 002948 beq multi_led_on ,p_mouse_multi_led_type_on +0x742 002949 beq multi_led_blink ,p_mouse_multi_led_type_blink +0x743 002950 rtn +: 002952 p_mouse_multi_led_type_on: +0x744 002953 call p_mouse_multi_led_on +0x745 002954 fetch 1 ,mem_mouse_multi_led_on_timer +0x746 002955 increase 1 ,pdata +0x747 002956 store 1 ,mem_mouse_multi_led_on_timer +0x748 002957 fetcht 1 ,mem_mouse_multi_led_on_timer_init +0x749 002958 isub temp ,null +0x74a 002959 call p_mouse_multi_led_off_poweron2s ,zero +0x74b 002960 rtn +: 002961 p_mouse_multi_led_off_poweron2s: +0x74c 002962 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +0x74d 002963 branch p_mouse_multi_led_off +: 002965 p_mouse_multi_led_type_blink: +0x74e 002966 fetch 1 ,mem_mouse_multi_led_blink_timer +0x74f 002967 increase -1 ,pdata +0x750 002968 store 1 ,mem_mouse_multi_led_blink_timer +0x751 002969 nrtn blank +0x752 002970 fetch 1 ,mem_mouse_multi_led_blink_timer_init +0x753 002971 store 1 ,mem_mouse_multi_led_blink_timer +0x754 002972 fetch 1 ,mem_mouse_multi_led_blink_count_limited +0x755 002973 branch p_mouse_multi_led_blink_count_no_limited ,blank +0x756 002974 fetch 1 ,mem_mouse_multi_led_blink_count +0x757 002975 branch p_mouse_multi_led_blink_off ,blank +0x758 002976 increase -1 ,pdata +0x759 002977 store 1 ,mem_mouse_multi_led_blink_count +: 002978 p_mouse_multi_led_blink_count_no_limited: +0x75a 002979 fetch 1 ,mem_mouse_multi_led_state +0x75b 002980 beq on ,p_mouse_multi_led_off +0x75c 002981 beq off ,p_mouse_multi_led_on +0x75d 002982 rtn +: 002984 p_mouse_multi_led_on: +0x75e 002985 jam on ,mem_mouse_multi_led_state +0x75f 002986 fetch 1 ,mem_device_flag +0x760 002987 beq 1 ,p_mouse_multi_24g_led_on +0x761 002988 beq 2 ,p_mouse_multi_bt_led_on +0x762 002989 branch p_mouse_multi_ble_led_on +: 002990 p_mouse_multi_bt_led_on: +0x763 002991 branch mouse_device2_led_on +: 002993 p_mouse_multi_24g_led_on: +0x764 002994 branch mouse_device1_led_on +: 002996 p_mouse_multi_ble_led_on: +0x765 002997 branch mouse_device3_led_on +: 002999 p_mouse_discovey_led_blink_off: +0x766 003000 fetch 1 ,mem_mouse_multi_led_on_timer +0x767 003001 nrtn blank +0x768 003002 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +0x769 003003 nrtn blank +: 003004 p_mouse_multi_led_blink_off: +0x76a 003005 setarg 0 +0x76b 003006 store 3 ,mem_mouse_multi_led_blink_timer +: 003007 p_mouse_multi_led_off: +0x76c 003008 fetch 1 ,mem_mouse_multi_led_blink_count +0x76d 003009 nbranch p_mouse_multi_led_off_wait_blink_over ,blank +0x76e 003010 jam 0 ,mem_mouse_multi_led_blink_enable +0x76f 003011 jam 0 ,mem_mouse_multi_led_type +: 003012 p_mouse_multi_led_off_wait_blink_over: +0x770 003013 jam 0 ,mem_mouse_multi_led_on_timer +0x771 003014 jam off ,mem_mouse_multi_led_state +0x772 003018 call mouse_devce_led_off + 1 +0x773 003020 fetch 1 ,mem_mouse_multi_led_blink_count +0x774 003021 nrtn blank +0x775 003023 fetch 1 ,mem_mouse_connected_state +0x776 003024 nbranch app_enter_hibernate ,blank +0x777 003025 rtn +: 003027 p_mouse_dpi_multi_led_blink: +0x778 003028 jam 3 ,mem_mouse_multi_led_blink_timer_init +0x779 003029 jam 1 ,mem_mouse_multi_led_blink_count_limited +0x77a 003030 branch p_mouse_multi_led_blink_enable +: 003032 p_mouse_mode_bt_device_multi_led_on: +: 003033 p_mouse_mode_24g_device_multi_led_on: +0x77b 003034 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag +0x77c 003035 jam on ,mem_mouse_multi_led_blink_enable +0x77d 003036 jam multi_led_on ,mem_mouse_multi_led_type +0x77e 003037 jam 0 ,mem_mouse_multi_led_on_timer +0x77f 003038 rtn +: 003040 p_mouse_discovery_multi_led_blink: +0x780 003041 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +0x781 003042 jam 3 ,mem_mouse_multi_led_blink_timer_init +0x782 003043 jam 0 ,mem_mouse_multi_led_blink_count_limited +0x783 003044 jam 1 ,mem_mouse_multi_led_blink_count +: 003045 p_mouse_multi_led_blink_enable: +0x784 003046 jam 5 ,mem_mouse_multi_led_blink_timer +0x785 003047 jam on ,mem_mouse_multi_led_blink_enable +0x786 003048 jam multi_led_blink ,mem_mouse_multi_led_type +0x787 003049 rtn +: 003051 power_ctrl_pac_succ_cnt_init: +0x788 003052 jam 1 ,mem_power_ctrl_level +0x789 003053 jam 0 ,mem_power_ctrl_pac_succ_cnt +0x78a 003054 rtn +: 003055 power_ctrl_pac_succ_incrs: +0x78b 003056 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x78c 003057 increase 1 ,pdata +0x78d 003058 store 1 ,mem_power_ctrl_pac_succ_cnt +0x78e 003059 rtn +: 003061 power_ctrl_pac_succ_cnt_reinit: +0x78f 003062 jam 3 ,mem_power_ctrl_pac_succ_cnt +0x790 003063 rtn +: 003065 power_ctrl_txpower_decrs_check: +0x791 003066 fetch 1 ,mem_power_ctrl_pac_succ_cnt +0x792 003067 rtnne 32 +0x793 003068 jam 0 ,mem_power_ctrl_pac_succ_cnt +: 003069 power_ctrl_txpower_decrs: +0x794 003070 fetcht 1 ,mem_rssi_avg_received +0x795 003071 setarg rssi_dis_min_24g +0x796 003072 bmark1 mark_24g ,power_ctrl_txpower_decrs_next +0x797 003073 setarg rssi_dis_min_ble +: 003074 power_ctrl_txpower_decrs_next: +0x798 003075 isub temp ,null +0x799 003076 nrtn positive +0x79a 003077 fetch 1 ,mem_power_ctrl_level +0x79b 003078 beq 0 ,power_ctrl_decrs_level0 +0x79c 003079 increase -1 ,pdata +0x79d 003080 store 1 ,mem_power_ctrl_level +0x79e 003081 beq 0 ,power_ctrl_decrs_level0 +: 003082 power_ctrl_decrs_level1: +: 003083 power_ctrl_incrs_level1: +0x79f 003084 jam tx_power_0db ,mem_tx_power +0x7a0 003085 rtn +: 003087 power_ctrl_txpower_incrs_force: +0x7a1 003088 jam 0 ,mem_power_ctrl_pac_succ_cnt +: 003089 power_ctrl_txpower_incrs: +0x7a2 003090 fetch 1 ,mem_power_ctrl_level +0x7a3 003091 beq 2 ,power_ctrl_incrs_level2 +0x7a4 003092 increase 1 ,pdata +0x7a5 003093 store 1 ,mem_power_ctrl_level +0x7a6 003094 beq 1 ,power_ctrl_incrs_level1 +: 003095 power_ctrl_incrs_level2: +0x7a7 003096 jam tx_power_5db ,mem_tx_power +0x7a8 003097 rtn +: 003099 power_ctrl_decrs_level0: +0x7a9 003100 jam tx_power_f5db ,mem_tx_power +0x7aa 003101 rtn +: 003104 p_set_freq_tx: +0x7ab 003105 storet 1 ,mem_last_freq +0x7ac 003106 add temp ,0 ,rega +0x7ad 003107 call rf_write_freq +0x7ae 003108 setarg param_pll_setup +0x7af 003109 call sleep +: 003110 p_rf_tx_enable: +0x7b0 003111 jam 0x1 ,rfen_adc +0x7b1 003112 jam 0x3c ,rfen_rx +0x7b2 003113 jam 0xe0 ,rfen_tx +0x7b3 003114 nop 10 +0x7b4 003115 jam 0x01 ,rfen_mdm +0x7b5 003116 jam 0x3d ,rfen_mdm +0x7b6 003117 nop 10 +0x7b7 003118 jam 0xb7 ,rfen_sn +0x7b8 003119 nop 10 +0x7b9 003120 jam 0x7d ,rfen_mdm +0x7ba 003121 fetch 1 ,mem_tx_power +0x7bb 003124 beq tx_power_5db ,p_set_tx_power_5db +0x7bc 003126 beq tx_power_f5db ,p_set_tx_power_f5db +0x7bd 003127 beq tx_power_pair ,p_set_tx_power_pair +: 003129 p_set_tx_power_0db: +0x7be 003130 call p_rx_low_sens +0x7bf 003132 jam 0xd0 ,0x8955 +0x7c0 003133 jam 0xe0 ,0x8956 +0x7c1 003135 jam 0x6c ,0x8958 +0x7c2 003137 branch set_tx_power_0db +: 003149 p_set_tx_power_5db: +0x7c3 003151 jam 0xfb ,0x894c +0x7c4 003152 jam 0xef ,0x894d +0x7c5 003153 jam 0xec ,0x894e +0x7c6 003154 jam 0x5e ,0x894f +0x7c7 003157 jam 0xd0 ,0x8955 +0x7c8 003158 jam 0xe0 ,0x8956 +0x7c9 003160 jam 0x3c ,0x8958 +0x7ca 003162 branch set_tx_power_5db +: 003174 p_set_tx_power_f5db: +0x7cb 003175 call p_rx_low_sens +0x7cc 003177 jam 0xd0 ,0x8955 +0x7cd 003178 jam 0xc0 ,0x8956 +0x7ce 003180 jam 0x6c ,0x8958 +0x7cf 003182 branch set_tx_power_f5db +: 003184 p_rx_low_sens: +0x7d0 003185 jam 0x5b ,0x894c +0x7d1 003186 jam 0x96 ,0x894d +0x7d2 003187 jam 0x2c ,0x894e +0x7d3 003188 jam 0x46 ,0x894f +0x7d4 003189 rtn +: 003198 p_set_tx_power_pair: +0x7d5 003200 jam 0xc0 ,0x8956 +0x7d6 003201 jam 0xd0 ,0x8955 +0x7d7 003202 rtn +: 003204 p_shutdown_radio: +0x7d8 003205 force 8 ,radio_ctrl +0x7d9 003206 branch shutdown_radio + 1 +: 003215 p_zcode_entrance: +0x7da 003216 fetcht 1 ,mem_zcode_temp_param0 +0x7db 003217 rshift4 temp ,temp +0x7dc 003218 fetch 1 ,mem_zcode_current_number +0x7dd 003219 isub temp ,null +0x7de 003220 branch p_zcode_run ,zero +0x7df 003221 storet 1 ,mem_zcode_current_number +0x7e0 003222 increase 1 ,temp +0x7e1 003223 setarg zcode_buff_size +0x7e2 003224 imul32 temp ,temp +0x7e3 003225 fetch 3 ,mem_xip_flash_offset +0x7e4 003226 isub temp ,pdata +0x7e5 003228 fetcht 3 ,mem_flash_start_addr +0x7e6 003229 iadd temp ,pdata +0x7e7 003230 increase -5 ,pdata +0x7e8 003231 store 3 ,mem_flash_address +0x7e9 003233 call p_flash_release_deep_power_down +: 003234 p_zcode_read_loop: +0x7ea 003235 fetch 3 ,mem_flash_address +0x7eb 003236 arg zcode_buff_size ,temp +0x7ec 003237 arg mem_zcode_buff ,rega +0x7ed 003238 call spid_read_flash +0x7ee 003240 fetch 4 ,mem_zcode_buff +0x7ef 003241 fetcht 4 ,mem_zcode_head +0x7f0 003242 isub temp ,null +0x7f1 003243 nbranch p_zcode_read_loop ,zero +0x7f2 003245 call p_mouse_spi_init +0x7f3 003247 setarg mem_zcode_buff +0x7f4 003248 store 2 ,mem_patch_ptr +0x7f5 003249 jam zcode_code_size ,mem_patch_len +0x7f6 003250 call load_ucode +0x7f7 003251 setarg 0 +0x7f8 003252 store 4 ,mem_patch_ptr +: 003253 p_zcode_run: +0x7f9 003254 fetch 1 ,mem_zcode_temp_param0 +0x7fa 003255 branch p_zcode org 0x2000 -: 003242 start: -0x2000 003243 call lpmstate -: 003245 soft_reset: -0x2001 003246 bpatch patch00_0 ,mem_patch00 -0x2002 003247 clear_stack -0x2003 003248 call spi_ncs_gpio_init -0x2004 003249 call initialize_radio -0x2005 003250 call iicd_init_12m -0x2006 003251 call init_param -0x2007 003252 call l2cap_init -0x2008 003253 bpatch patch00_1 ,mem_patch00 -0x2009 003254 call rfcomm_init -0x200a 003255 call init_lmp -0x200b 003256 call ui_init -0x200c 003257 call app_init -0x200d 003258 ncall load_chip_option ,wake -0x200e 003259 bpatch patch00_2 ,mem_patch00 -0x200f 003260 call app_lpm_init ,wake -0x2010 003261 call publickey_init -0x2011 003262 call lpm_recover_clk ,wake -: 003263 main_loop: -0x2012 003264 bpatch patch00_3 ,mem_patch00 -0x2013 003265 call sp_calc_sequence -0x2014 003266 call sp_calc_sequence_256 -0x2015 003267 call sp_calc_sequence_256_check -0x2016 003268 call le_dispatch -0x2017 003269 bpatch patch00_4 ,mem_patch00 -0x2018 003270 call idle_dispatch -0x2019 003271 call app_process_idle -0x201a 003272 call inquiry_dispatch -0x201b 003273 call inquiry_scan_dispatch -0x201c 003274 call page_scan_dispatch -0x201d 003275 call connection_dispatch -0x201e 003276 call lpm_dispatch -0x201f 003277 call g24_dispatch -0x2020 003278 branch main_loop -: 003280 connection_dispatch: -0x2021 003281 call connection_incontext -0x2022 003282 rtnmark0 mark_context -0x2023 003283 set0 mark_context ,mark -0x2024 003284 call context_save -0x2025 003285 branch le_disable -: 003287 connection_incontext: -0x2026 003288 bpatch patch00_5 ,mem_patch00 -0x2027 003289 call context_search_insniff -0x2028 003290 nbranch connection_nosniff ,zero -0x2029 003291 call context_load -0x202a 003292 add rega ,coffset_mode ,contr -0x202b 003293 ifetch 1 ,contr -0x202c 003294 bbit1 mode_le ,le_conn_dispatch -0x202d 003295 bbit1 mode_master ,master_dispatch -0x202e 003296 branch slave_dispatch -: 003297 connection_nosniff: -0x202f 003298 call context_get_next -0x2030 003299 copy loopcnt ,null -0x2031 003300 rtn zero -0x2032 003301 call context_load -0x2033 003302 fetch 1 ,mem_state -0x2034 003303 bbit1 state_inpage ,master_page -0x2035 003304 fetch 1 ,mem_mode -0x2036 003305 bbit1 mode_master ,master_dispatch -0x2037 003306 branch slave_dispatch -: 003314 idle_dispatch: -0x2038 003315 fetch 1 ,mem_hci_cmd -0x2039 003316 rtn blank -0x203a 003317 beq hci_cmd_inquiry ,idle_inquiry -0x203b 003318 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel -0x203c 003319 beq hci_cmd_remote_name_req ,idle_remote_name_req -0x203d 003320 beq hci_cmd_create_conn ,idle_create_conn -0x203e 003321 beq hci_cmd_le_create_conn ,idle_le_create_conn -0x203f 003322 call context_search_conn_handle -0x2040 003323 rtn zero -0x2041 003324 call context_search_plap -0x2042 003325 rtn zero -: 003326 idle_exit: -0x2043 003327 jam 0 ,mem_hci_cmd -0x2044 003328 rtn -: 003330 idle_le_create_conn: -0x2045 003331 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn -0x2046 003332 jam 0 ,mem_hci_cmd -0x2047 003333 rtn -: 003335 idle_inquiry: -0x2048 003336 set1 mark_inquiry_on ,mark -0x2049 003337 set0 mark_inquiry_trainb ,mark -0x204a 003338 jam param_ninquiry ,mem_ninqy_index -0x204b 003339 jam 31 ,mem_nfreq_index_inq -0x204c 003340 branch idle_exit -: 003342 idle_inquiry_cancel: -0x204d 003343 set0 mark_inquiry_on ,mark -0x204e 003344 force 0 ,stop_watch -0x204f 003345 branch idle_exit -: 003347 idle_remote_name_req: -0x2050 003348 call context_search_plap -0x2051 003349 rtn zero -0x2052 003350 force lmp_name_req ,temp -0x2053 003351 jam 5 ,mem_nameres_cnt -0x2054 003352 branch idle_start_page -: 003354 idle_create_conn: -0x2055 003355 bpatch patch00_6 ,mem_patch00 -: 003356 idle_create_conn_device: -0x2056 003357 fetch 6 ,mem_hci_plap -0x2057 003358 branch idle_exit ,blank -0x2058 003359 jam reconnect_hid ,memui_reconnect_mode -0x2059 003361 jam conn_sm_wait_features_res ,mem_conn_sm -0x205a 003362 branch idle_create_conn_cont -: 003364 idle_create_conn_cont: -0x205b 003365 force lmp_version_req ,temp -: 003366 idle_start_page: -0x205c 003367 bpatch patch00_7 ,mem_patch00 -0x205d 003368 fetch 1 ,mem_page_mode -0x205e 003369 branch idle_page_mode_r0 ,blank -0x205f 003370 lshift3 pdata ,pdata -0x2060 003371 lshift4 pdata ,pdata -0x2061 003372 increase -1 ,pdata -: 003373 idle_page_mode_r0: -0x2062 003374 store 1 ,mem_npage -0x2063 003375 store 1 ,mem_npage_index -0x2064 003376 jam 31 ,mem_nfreq_index_page -0x2065 003377 set0 mark_page_trainb ,mark -0x2066 003378 call context_new -0x2067 003379 nbranch idle_page_fail ,zero -0x2068 003380 call get_free_amaddr -0x2069 003381 store 1 ,mem_amaddr -0x206a 003382 storet 1 ,mem_lmo_opcode2 -0x206b 003383 fetch 6 ,mem_hci_plap -0x206c 003384 store 6 ,mem_plap -0x206d 003385 bpatch patch01_0 ,mem_patch01 -0x206e 003386 call timer_reinit -0x206f 003387 force 0 ,pdata -0x2070 003388 compare lmp_name_req ,temp ,0xff -0x2071 003389 nsetflag true ,state_init_seq ,pdata -0x2072 003390 set1 state_inpage ,pdata -0x2073 003391 store 1 ,mem_state -0x2074 003392 jam bt_evt_reconn_started ,mem_fifo_temp -0x2075 003393 call ui_ipc_send_event -0x2076 003394 force 0 ,pdata -0x2077 003395 setflag true ,smap_name_req ,pdata -0x2078 003396 store 1 ,mem_state_map -0x2079 003397 setarg 0 -0x207a 003398 set1 mode_master ,pdata -0x207b 003399 store 1 ,mem_mode -0x207c 003400 enable master -0x207d 003401 call context_save -0x207e 003402 disable master -0x207f 003403 force page_length_timer ,queue -0x2080 003404 fetch 2 ,mem_page_to -0x2081 003405 call timer_init -0x2082 003406 branch idle_exit -: 003407 idle_page_fail: -0x2083 003408 bpatch patch01_1 ,mem_patch01 -0x2084 003409 fetch 6 ,mem_hci_plap -0x2085 003410 store 6 ,mem_plap -0x2086 003411 compare lmp_name_req ,temp ,0xff -0x2087 003412 branch idle_name_fail ,true -0x2088 003413 branch idle_exit -: 003414 idle_name_fail: -0x2089 003415 arg mem_tmp_buffer ,contw -0x208a 003416 arg 8 ,loopcnt -0x208b 003417 call memset0 -0x208c 003418 jam bt_evt_reconn_failed ,mem_fifo_temp -0x208d 003419 call ui_ipc_send_event -0x208e 003420 branch idle_exit -: 003427 inquiry_dispatch: -0x208f 003428 rtnmark0 mark_inquiry_on -0x2090 003429 force inquiry_length_timer ,queue -0x2091 003430 call timer_check -0x2092 003431 nsetflag blank ,mark_inquiry_on ,mark -0x2093 003432 nbranch inquiry_start ,blank -0x2094 003433 rtn -: 003437 inquiry_start: -0x2095 003438 bpatch patch01_2 ,mem_patch01 -0x2096 003439 fetcht 2 ,mem_inq_window -0x2097 003440 force 4 ,queue -0x2098 003441 call sniff_check_window -0x2099 003442 rtn user -0x209a 003443 call afh_clear -0x209b 003444 force 0 ,freq_mode -: 003445 inquiry_restart: -0x209c 003446 rtn timeout -0x209d 003447 set0 mark_fhs_already_good ,mark -0x209e 003448 set0 mark_fhs_eir ,mark -: 003449 inquiry_rx_restart: -0x209f 003450 add clkn_bt ,1 ,bt_clk -0x20a0 003451 isolate1 mark_inquiry_trainb ,mark -0x20a1 003452 setflag true ,2 ,freq_mode -0x20a2 003453 compare 0x00 ,bt_clk ,0x02 -0x20a3 003454 nbranch inquiry_receive ,true -: 003456 inquiry_transmit: -0x20a4 003457 bpatch patch01_3 ,mem_patch01 -0x20a5 003458 fetch 1 ,mem_inquiry_transmit -0x20a6 003459 increase 1 ,pdata -0x20a7 003460 store 1 ,mem_inquiry_transmit -0x20a8 003461 call fetch_giac -0x20a9 003462 call tx_radio_freq -0x20aa 003463 call fetch_diac -0x20ab 003464 call start_transmitter -0x20ac 003465 call start_tx_native -0x20ad 003466 call send_access_word -0x20ae 003467 call end_of_packet -0x20af 003468 call inquiry_check_train -0x20b0 003469 branch inquiry_restart -: 003471 inquiry_check_train: -0x20b1 003472 bpatch patch01_4 ,mem_patch01 -0x20b2 003473 fetch 1 ,mem_nfreq_index_inq -0x20b3 003474 increase -1 ,pdata -0x20b4 003475 store 1 ,mem_nfreq_index_inq -0x20b5 003476 rtn positive -0x20b6 003477 jam 31 ,mem_nfreq_index_inq -0x20b7 003478 fetch 1 ,mem_ninqy_index -0x20b8 003479 increase -1 ,pdata -0x20b9 003480 store 1 ,mem_ninqy_index -0x20ba 003481 rtn positive -0x20bb 003482 setflip mark_inquiry_trainb ,mark -0x20bc 003483 jam param_ninquiry ,mem_ninqy_index -0x20bd 003484 rtn -: 003486 inquiry_receive: -0x20be 003487 bpatch patch01_5 ,mem_patch01 -0x20bf 003488 call fetch_giac -0x20c0 003489 call rx_radio_freq -0x20c1 003490 call fetch_diac -0x20c2 003491 call start_rx_native -0x20c3 003492 call start_receiver -0x20c4 003493 call wait_access_clkn_rt -0x20c5 003494 branch inquiry_sync ,sync -0x20c6 003495 call inquiry_check_train -0x20c7 003496 branch inquiry_rx_restart -: 003497 inquiry_sync: -0x20c8 003498 bpatch patch01_6 ,mem_patch01 -0x20c9 003499 call save_rssi -0x20ca 003500 call scan_mode_whiten -0x20cb 003501 call receive_packet_whitened -0x20cc 003502 set0 mark_rxbuf_inuse ,mark -0x20cd 003503 rtnmark0 mark_fhs_already_good -: 003504 inquiry_receive_rtn: -0x20ce 003505 bpatch patch01_7 ,mem_patch01 -: 003506 inquiry_receive_eir_rtn: -0x20cf 003507 fetch 1 ,mem_inquiry_rcv -0x20d0 003508 increase 1 ,pdata -0x20d1 003509 store 1 ,mem_inquiry_rcv -0x20d2 003510 rtn -: 003518 master_page: -0x20d3 003519 bpatch patch02_0 ,mem_patch02 -0x20d4 003520 enable master -0x20d5 003521 enable clknt -0x20d6 003522 fetch 2 ,mem_page_interval -0x20d7 003523 branch master_page_no_interval ,blank -0x20d8 003524 force page_interval_timer ,queue -0x20d9 003525 call timer_check -0x20da 003526 nrtn blank -: 003527 master_page_no_interval: -0x20db 003528 bpatch patch02_1 ,mem_patch02 -0x20dc 003529 fetcht 2 ,mem_page_window -0x20dd 003530 force 40 ,queue -0x20de 003531 call sniff_check_window -0x20df 003532 branch page_exit ,user -0x20e0 003533 force page_length_timer ,queue -0x20e1 003534 call timer_check -0x20e2 003535 nbranch page_start ,blank -0x20e3 003536 fetch 1 ,mem_state_map -0x20e4 003537 bbit1 smap_name_req ,master_npage_timeout -0x20e5 003538 branch master_page_timeout -: 003539 master_npage_timeout: -0x20e6 003540 arg mem_tmp_buffer ,contw -0x20e7 003541 arg 8 ,loopcnt -0x20e8 003542 call memset0 -: 003543 master_page_timeout: -0x20e9 003544 bpatch patch02_2 ,mem_patch02 -0x20ea 003545 jam 0 ,mem_state -0x20eb 003546 call init_lmp_work -0x20ec 003547 jam 0 ,memui_reconnect_mode -0x20ed 003548 jam bt_evt_reconn_page_timeout ,mem_fifo_temp -0x20ee 003549 call ui_ipc_send_event -0x20ef 003550 branch page_exit -: 003552 page_start: -0x20f0 003553 bpatch patch02_3 ,mem_patch02 -0x20f1 003554 force 0 ,timeup -0x20f2 003555 until clkn_rt ,meet -0x20f3 003556 fetch 1 ,mem_page_clk -0x20f4 003557 increase -1 ,pdata -0x20f5 003558 ixor clkn_bt ,pdata -0x20f6 003559 compare 0 ,pdata ,3 -0x20f7 003560 nbranch page_start ,true -0x20f8 003561 deposit am_addr -0x20f9 003562 store 1 ,mem_fhs_am_addr -0x20fa 003563 force 0 ,n_tx_slot -0x20fb 003564 force 0 ,freq_mode -: 003566 page_restart: -0x20fc 003567 bpatch patch02_4 ,mem_patch02 -0x20fd 003568 branch page_exit ,timeout -0x20fe 003569 call fetch_page_bt_adr -0x20ff 003570 arg param_rf_setup ,timeup -0x2100 003571 until clkn_rt ,meet -: 003572 page_rx_restart: -0x2101 003573 bpatch patch02_5 ,mem_patch02 -0x2102 003574 fetch 4 ,mem_page_clk -0x2103 003575 iforce bt_clk -0x2104 003576 increase 1 ,pdata -0x2105 003577 store 4 ,mem_page_clk -0x2106 003578 isolate1 mark_page_trainb ,mark -0x2107 003579 setflag true ,2 ,freq_mode -0x2108 003580 compare 0x00 ,bt_clk ,0x02 -0x2109 003581 nbranch page_receive ,true -0x210a 003582 fetch 1 ,mem_page_transmit -0x210b 003583 increase 1 ,pdata -0x210c 003584 store 1 ,mem_page_transmit -0x210d 003585 call tx_radio_freq -0x210e 003586 call start_transmitter -0x210f 003587 call start_tx_native -0x2110 003588 call send_access_word -0x2111 003589 call end_of_packet -0x2112 003590 call page_check_train -0x2113 003591 branch page_restart -: 003592 page_exit: -0x2114 003593 bpatch patch02_6 ,mem_patch02 -0x2115 003594 disable master -0x2116 003595 fetch 2 ,mem_page_interval -0x2117 003596 rtn blank -0x2118 003597 force page_interval_timer ,queue -0x2119 003598 branch timer_init -: 003600 page_check_train: -0x211a 003601 bpatch patch02_7 ,mem_patch02 -0x211b 003602 fetch 1 ,mem_nfreq_index_page -0x211c 003603 increase -1 ,pdata -0x211d 003604 store 1 ,mem_nfreq_index_page -0x211e 003605 rtn positive -0x211f 003606 jam 31 ,mem_nfreq_index_page -0x2120 003607 fetch 1 ,mem_npage_index -0x2121 003608 increase -1 ,pdata -0x2122 003609 store 1 ,mem_npage_index -0x2123 003610 rtn positive -0x2124 003611 setflip mark_page_trainb ,mark -0x2125 003612 fetch 1 ,mem_npage -0x2126 003613 store 1 ,mem_npage_index -0x2127 003614 rtn -: 003616 page_receive: -0x2128 003617 bpatch patch03_0 ,mem_patch03 -0x2129 003618 call rx_radio_freq -0x212a 003619 call start_rx_native -0x212b 003620 call start_receiver -0x212c 003621 call wait_access_clkn_rt -0x212d 003622 branch page_sync ,sync -0x212e 003623 call page_check_train -0x212f 003624 branch page_rx_restart -: 003625 page_sync: -0x2130 003626 call end_of_packet -0x2131 003627 fetch 1 ,mem_page_rcv -0x2132 003628 increase 1 ,pdata -0x2133 003629 store 1 ,mem_page_rcv -0x2134 003630 force 0 ,stop_watch -0x2135 003631 fetch 4 ,mem_page_clk -: 003632 page_send_fhs: -0x2136 003633 bpatch patch03_1 ,mem_patch03 -0x2137 003634 call rf_setup_time_master_slot -0x2138 003635 call fetch_page_bt_adr -0x2139 003636 increase 1 ,n_tx_slot -: 003637 page_send_fhs_continue: -0x213a 003638 and_into 0x1fd ,bt_clk -0x213b 003639 and_into 0x1fc ,freq_mode -0x213c 003640 call tx_radio_freq -0x213d 003641 call start_transmitter -0x213e 003642 call start_tx_native -0x213f 003643 call send_access_word -0x2140 003644 deposit clkn_bt -0x2141 003645 store 4 ,mem_clkn_bt -0x2142 003646 force 0 ,am_addr -0x2143 003647 force type_fhs ,type -0x2144 003648 call scan_mode_whiten -0x2145 003649 call transmit_packet_whitened -: 003650 page_wait_fhs_reply: -0x2146 003651 bpatch patch03_2 ,mem_patch03 -0x2147 003652 call rf_setup_time_slave_slot -0x2148 003653 or_into 0x02 ,bt_clk -0x2149 003654 and_into 0x1fc ,freq_mode -0x214a 003655 call rx_radio_freq -0x214b 003656 call start_rx_native -0x214c 003657 call start_receiver -0x214d 003658 call wait_access_clkn_rt -0x214e 003659 call end_of_packet ,sync -0x214f 003660 branch page_wait_fhs_reply_ok ,sync -0x2150 003661 fetch 1 ,mem_fhs_wait_counter -0x2151 003662 branch page_restart ,blank -0x2152 003663 increase -1 ,pdata -0x2153 003664 store 1 ,mem_fhs_wait_counter -0x2154 003665 branch page_send_fhs -: 003667 page_wait_fhs_reply_ok: -0x2155 003668 bpatch patch03_3 ,mem_patch03 -0x2156 003669 fetch 1 ,mem_page_rcv_fhs -0x2157 003670 increase 1 ,pdata -0x2158 003671 store 1 ,mem_page_rcv_fhs -0x2159 003672 call prepare_newconn -: 003673 master_newconn_loop: -0x215a 003674 call master_newconn_once -0x215b 003675 branch newconn_poll_responded ,sync -0x215c 003676 call new_conn_timeout -0x215d 003677 nbranch master_newconn_loop ,blank -0x215e 003678 branch page_restart -: 003680 newconn_poll_responded: -0x215f 003681 bpatch patch03_4 ,mem_patch03 -0x2160 003682 fetch 1 ,mem_state -0x2161 003683 set0 state_inpage ,pdata -0x2162 003684 store 1 ,mem_state -0x2163 003685 call newconn_init -0x2164 003686 disable master -0x2165 003687 rtn -: 003690 master_dispatch: -0x2166 003691 bpatch patch03_5 ,mem_patch03 -0x2167 003692 enable master -0x2168 003693 enable clknt -0x2169 003694 call role_switch_master -0x216a 003695 rtn user -0x216b 003696 call check_bt_disabled -0x216c 003697 call rf_setup_time_master_slot -0x216d 003698 add clkn_bt ,1 ,bt_clk -0x216e 003699 call fetch_self_bt_adr -0x216f 003700 force 0x03 ,freq_mode -0x2170 003701 call scheduler_tx_l2cap_pkt -0x2171 003702 call prepare_tx -0x2172 003703 call tx_radio_freq -0x2173 003704 call start_transmitter -0x2174 003705 call start_tx_native -0x2175 003706 call send_access_word -0x2176 003707 call transmit_packet -: 003708 master_loop: -0x2177 003709 bpatch patch03_6 ,mem_patch03 -0x2178 003710 call parse_lmp -0x2179 003711 call master_conn_recv_packet -0x217a 003712 nbranch master_notmatch ,match -0x217b 003713 call supervision_flush -0x217c 003714 call parse_l2cap -0x217d 003715 fetch 1 ,mem_master_rcvcnt -0x217e 003716 increase 1 ,pdata -0x217f 003717 store 1 ,mem_master_rcvcnt -: 003718 master_notmatch: -0x2180 003719 bpatch patch03_7 ,mem_patch03 -0x2181 003720 call scheduler_process -0x2182 003721 call check_master_disconnect -0x2183 003722 nrtn master -0x2184 003723 call check_attempt -0x2185 003724 nbranch master_attempt ,blank -: 003725 master_exit: -0x2186 003726 disable master -0x2187 003727 rtn -: 003729 master_attempt: -0x2188 003730 call prepare_tx -0x2189 003731 call master_conn_send_packet -0x218a 003732 branch master_loop -: 003735 check_master_disconnect: -0x218b 003736 branch check_master_match ,match -0x218c 003737 call supervision_update -0x218d 003738 branch master_disconnect ,positive -: 003739 check_master_match: -0x218e 003740 call check_disconnect_timeout -0x218f 003741 nbranch master_disconnect ,user -0x2190 003742 fetch 1 ,mem_state_map -0x2191 003743 rtnbit0 smap_name_req -0x2192 003744 rtnbit1 smap_name_res -0x2193 003745 fetch 1 ,mem_op -0x2194 003746 rtnbit1 op_disconn -0x2195 003747 call conn_timer_expired -0x2196 003748 nrtn blank -0x2197 003749 fetch 1 ,mem_nameres_cnt -0x2198 003750 increase -1 ,pdata -0x2199 003751 store 1 ,mem_nameres_cnt -0x219a 003752 nrtn blank -0x219b 003753 branch lmp_disconnect -: 003755 master_disconnect: -0x219c 003756 bpatch patch04_0 ,mem_patch04 -0x219d 003757 call quit_connection -0x219e 003758 disable master -0x219f 003759 fetch 1 ,mem_state_map -0x21a0 003760 bbit1 smap_name_req ,master_name_disconnect -0x21a1 003761 rtn -: 003763 master_name_disconnect: -0x21a2 003764 fetch 1 ,mem_state_map -0x21a3 003765 rtnbit1 smap_name_res -: 003766 master_name_error: -0x21a4 003767 arg mem_tmp_buffer ,contw -0x21a5 003768 arg 8 ,loopcnt -0x21a6 003769 branch memset0 -: 003771 check_disconnect_timeout: -0x21a7 003772 bpatch patch04_1 ,mem_patch04 -0x21a8 003773 enable user -0x21a9 003774 fetch 1 ,mem_op -0x21aa 003775 rtnbit0 op_disconn -0x21ab 003776 call conn_timer_expired -0x21ac 003777 nrtn blank -0x21ad 003778 branch disable_user -: 003780 conn_timer_expired: -0x21ae 003781 fetch 1 ,mem_conn_timer -0x21af 003782 increase -1 ,pdata -0x21b0 003783 store 1 ,mem_conn_timer -0x21b1 003784 rtn -: 003786 linkkey_ready: -0x21b2 003787 bpatch patch04_2 ,mem_patch04 -0x21b3 003788 fetch 1 ,mem_state -0x21b4 003789 bbit1 state_linkkey ,linkkey_set -0x21b5 003790 fetch 1 ,mem_pairing_auth -0x21b6 003791 branch linkkey_set ,blank -0x21b7 003792 jam defalt_pairing_auth ,mem_pairing_auth -0x21b8 003793 jam bt_evt_linkkey_generate ,mem_fifo_temp -0x21b9 003794 call ui_ipc_send_event -0x21ba 003795 branch linkkey_set -: 003796 linkkey_set: -0x21bb 003797 bpatch patch04_3 ,mem_patch04 -0x21bc 003798 call context_traverse_linkkey -0x21bd 003799 fetch 1 ,mem_state -0x21be 003800 set1 state_linkkey ,pdata -0x21bf 003801 store 1 ,mem_state -0x21c0 003802 jam 1 ,mem_link_key_exists -0x21c1 003803 fetch 1 ,mem_conn_sm -0x21c2 003804 bne conn_sm_pairing ,linkkey_set_continue -: 003805 linkkey_set_continue: -0x21c3 003806 rtn -: 003808 generate_linkkey_continue: -0x21c4 003809 jam pairing_auth ,mem_pairing_auth -: 003810 clear_linkstate: -0x21c5 003811 fetch 1 ,mem_state -0x21c6 003812 set0 state_linkkey ,pdata -0x21c7 003813 store 1 ,mem_state -0x21c8 003814 rtn -: 003818 role_switch_check: -0x21c9 003819 bpatch patch04_4 ,mem_patch04 -0x21ca 003820 disable user -0x21cb 003821 fetch 2 ,mem_tsniff -0x21cc 003822 arg 0xffff ,temp -0x21cd 003823 isub temp ,null -0x21ce 003824 nrtn zero -0x21cf 003825 fetch 4 ,mem_sniff_anchor -0x21d0 003826 branch role_switch_clkn ,clknt -0x21d1 003827 isub clke_bt ,pdata -0x21d2 003828 branch role_switch_clke -: 003829 role_switch_clkn: -0x21d3 003830 isub clkn_bt ,pdata -: 003831 role_switch_clke: -0x21d4 003832 sub pdata ,4 ,null -0x21d5 003833 nrtn positive -0x21d6 003834 force 0 ,pdata -0x21d7 003835 store 2 ,mem_tsniff -0x21d8 003836 branch enable_user -: 003840 role_switch_prepare: -0x21d9 003841 copy pdata ,temp -0x21da 003842 bpatch patch04_5 ,mem_patch04 -0x21db 003843 storet 4 ,mem_sniff_anchor -: 003844 role_switch_prepare0: -0x21dc 003845 jam switch_flag_accept ,mem_switch_flag -0x21dd 003846 setarg 0xffff -0x21de 003847 store 2 ,mem_tsniff -0x21df 003848 jam 1 ,mem_sniff_attempt -0x21e0 003849 rtn -: 003852 role_switch_master: -0x21e1 003853 bpatch patch04_6 ,mem_patch04 -0x21e2 003854 call role_switch_check -0x21e3 003855 nrtn user -0x21e4 003856 disable user -0x21e5 003857 jam param_newconnto ,mem_newconnto_counter -0x21e6 003858 set0 mark_fhs_already_good ,mark -: 003859 roles_waitfhs_loop: -0x21e7 003860 call rf_setup_time_master_slot -0x21e8 003861 call master_recv_packet -0x21e9 003862 bmark1 mark_fhs_already_good ,roles_replyto_fhs -0x21ea 003863 call new_conn_timeout -0x21eb 003864 nbranch roles_waitfhs_loop ,blank -: 003865 role_switch_fail_master: -0x21ec 003866 bpatch patch04_7 ,mem_patch04 -0x21ed 003867 disable user -0x21ee 003868 deposit clkn_bt -0x21ef 003869 store 4 ,mem_next_btclk -0x21f0 003870 enable clknt -0x21f1 003871 enable master -0x21f2 003872 jam bt_evt_switch_fail_master ,mem_fifo_temp -0x21f3 003873 branch ui_ipc_send_event -: 003875 roles_replyto_fhs: -0x21f4 003876 bpatch patch05_0 ,mem_patch05 -0x21f5 003877 call rf_setup_time_slave_slot -0x21f6 003878 arg type_id ,type -0x21f7 003879 call master_send_packet -0x21f8 003880 disable clknt -0x21f9 003881 disable master -0x21fa 003882 call apply_switch_clke -0x21fb 003883 call prepare_newconn -: 003884 roles_newconns_loop: -0x21fc 003885 bpatch patch05_1 ,mem_patch05 -0x21fd 003886 call slave_newconn_once -0x21fe 003887 branch roles_newconns_responded ,match -0x21ff 003888 call new_conn_timeout -0x2200 003889 nbranch roles_newconns_loop ,blank -0x2201 003890 branch role_switch_fail_master -: 003891 roles_newconns_responded: -0x2202 003892 fetch 1 ,mem_mode -0x2203 003893 set0 mode_master ,pdata -0x2204 003894 store 1 ,mem_mode -0x2205 003895 call supervision_flush -0x2206 003896 call calc_clke_offset -0x2207 003897 enable user -0x2208 003898 jam bt_evt_switch_success_master ,mem_fifo_temp -0x2209 003899 branch ui_ipc_send_event -: 003904 context_load: -0x220a 003905 bpatch patch05_2 ,mem_patch05 -0x220b 003906 set1 mark_context ,mark -0x220c 003907 deposit rega -0x220d 003908 store 2 ,mem_context_ptr -0x220e 003909 force context_size ,loopcnt -0x220f 003910 arg mem_le_state ,contw -0x2210 003911 add rega ,coffset_mode ,contr -0x2211 003912 ifetch 1 ,contr -0x2212 003913 copy rega ,contr -0x2213 003914 bbit1 mode_le ,memcpy -0x2214 003915 arg mem_state ,contw -0x2215 003916 call memcpy -0x2216 003917 disable attempt -0x2217 003918 fetch 1 ,mem_amaddr -0x2218 003919 iforce am_addr -0x2219 003920 jam 1 ,mem_current_sniff_attempt -0x221a 003921 branch context_load_master ,master -0x221b 003922 jam 1 ,mem_current_sniff_attempt -: 003923 context_load_master: -0x221c 003924 fetch 1 ,mem_state -0x221d 003925 rtnbit0 state_insniff -0x221e 003926 fetch 1 ,mem_sniff_attempt -0x221f 003927 store 1 ,mem_current_sniff_attempt -0x2220 003928 fetch 1 ,mem_sniff_timeout -0x2221 003929 store 1 ,mem_current_sniff_timeout -0x2222 003930 rtn -: 003932 context_save: -0x2223 003933 bpatch patch05_3 ,mem_patch05 -0x2224 003934 fetch 2 ,mem_context_ptr -0x2225 003935 iforce contw -0x2226 003936 force context_size ,loopcnt -0x2227 003937 arg mem_le_state ,contr -0x2228 003938 branch memcpy ,le -0x2229 003939 arg mem_state ,contr -0x222a 003940 branch memcpy -: 003944 context_get_next: -0x222b 003945 arg context_num ,loopcnt -0x222c 003946 fetcht 1 ,mem_current_context -: 003947 context_get_next_loop: -0x222d 003948 increase 1 ,temp -0x222e 003949 compare context_num ,temp ,0xff -0x222f 003950 nbranch context_get_next_cont ,true -0x2230 003951 arg 0 ,temp -: 003952 context_get_next_cont: -0x2231 003953 storet 1 ,mem_current_context -0x2232 003954 mul32 temp ,context_size ,pdata -0x2233 003955 arg mem_context ,rega -0x2234 003956 iadd rega ,rega -0x2235 003957 ifetch 1 ,rega -0x2236 003958 bbit1 state_insniff ,context_get_next_sniff -0x2237 003959 rtnbit1 state_inconn -0x2238 003960 rtnbit1 state_inpage -: 003961 context_get_next_sniff: -0x2239 003962 loop context_get_next_loop -0x223a 003963 rtn -: 003965 context_new: -0x223b 003966 bpatch patch05_4 ,mem_patch05 -0x223c 003967 arg context_search_empty ,regc -0x223d 003968 call context_search -0x223e 003969 nrtn zero -0x223f 003970 deposit rega -0x2240 003971 store 2 ,mem_context_ptr -0x2241 003972 force 0 ,null -0x2242 003973 rtn -: 003977 context_check_all_wack: -0x2243 003978 call check_esco_amaddr -0x2244 003979 branch context_check_esco_wack ,true -0x2245 003980 fetch 2 ,mem_context_ptr -0x2246 003981 add pdata ,coffset_arq ,contw -0x2247 003982 fetch 1 ,mem_arq -0x2248 003983 istore 1 ,contw -0x2249 003984 arg context_check_a_wack ,regc -0x224a 003985 branch context_search -: 003987 context_check_esco_wack: -0x224b 003988 fetch 1 ,mem_arq -0x224c 003989 isolate1 wack ,pdata -0x224d 003990 branch context_esco_wack ,true -0x224e 003991 force 1 ,null -0x224f 003992 rtn -: 003993 context_esco_wack: -0x2250 003994 force 0 ,null -0x2251 003995 rtn -: 003998 context_check_idle: -0x2252 003999 arg context_check_inconn ,regc -0x2253 004000 branch context_search -: 004002 context_traverse_linkkey: -0x2254 004003 fetcht 2 ,mem_context_ptr -0x2255 004004 arg context_traverse_clearkey ,regc -0x2256 004005 branch context_search -: 004009 context_search_conn_handle: -0x2257 004010 fetcht 1 ,mem_hci_conn_handle -: 004011 context_search_conn_handle2: -0x2258 004012 arg context_search_handle ,regc -0x2259 004013 branch context_search -: 004015 context_search_plap: -0x225a 004016 bpatch patch05_5 ,mem_patch05 -0x225b 004017 fetcht 6 ,mem_hci_plap -: 004018 context_search_plap2: -0x225c 004019 arg context_search_lap ,regc -0x225d 004020 branch context_search -: 004022 context_search_insniff: -0x225e 004023 arg context_search_sniff ,regc -0x225f 004024 branch context_search -: 004026 context_search_sniff_window: -0x2260 004027 arg context_search_window ,regc -: 004028 context_search: -0x2261 004029 bpatch patch05_6 ,mem_patch05 -0x2262 004030 arg mem_context ,rega -0x2263 004031 arg context_num ,loopcnt -: 004032 context_search_loop: -0x2264 004033 ifetch 1 ,rega -0x2265 004034 copy regc ,pc -: 004035 context_search_next: -0x2266 004036 increase context_size ,rega -0x2267 004037 loop context_search_loop -0x2268 004038 force 1 ,null -0x2269 004039 rtn -: 004041 context_search_empty: -0x226a 004042 bbit1 state_inconn ,context_search_next -0x226b 004043 bbit1 state_inpage ,context_search_next -0x226c 004044 force 0 ,null -0x226d 004045 rtn -: 004047 context_search_lap: -0x226e 004048 bbit1 state_inpage ,context_search_lap_cont -0x226f 004049 bbit0 state_inconn ,context_search_next -: 004050 context_search_lap_cont: -0x2270 004051 add rega ,coffset_plap ,contr -0x2271 004052 ifetch 6 ,contr -0x2272 004053 isub temp ,null -0x2273 004054 rtn zero -0x2274 004055 branch context_search_next -: 004057 context_search_handle: -0x2275 004058 bbit0 state_inconn ,context_search_next -0x2276 004059 add rega ,coffset_conn_handle ,contr -0x2277 004060 ifetch 1 ,contr -0x2278 004061 isub temp ,null -0x2279 004062 rtn zero -0x227a 004063 branch context_search_next -: 004065 context_search_sniff: -0x227b 004066 bbit0 state_insniff ,context_search_next -: 004067 context_search_sniff_loop: -0x227c 004068 call context_get_anchor -0x227d 004069 call sign_pdata_temp -0x227e 004070 isub temp ,pdata -0x227f 004071 increase 1 ,pdata -0x2280 004072 branch context_search_sniff_miss ,positive -0x2281 004073 copy contr ,regb -0x2282 004074 store 9 ,mem_temp -0x2283 004075 fetch 1 ,mem_le_sc_calc -0x2284 004076 nbranch context_search_sniff_sc ,blank -0x2285 004077 fetch 9 ,mem_temp -0x2286 004078 copy regb ,contr -0x2287 004079 increase 5 ,pdata -0x2288 004080 branch context_search_meet1 -: 004081 context_search_sniff_sc: -0x2289 004082 fetch 9 ,mem_temp -0x228a 004083 copy regb ,contr -0x228b 004084 increase 20 ,pdata -: 004085 context_search_meet1: -0x228c 004086 nbranch context_search_next ,positive -: 004087 context_search_meet: -0x228d 004088 copy temp ,bt_clk -0x228e 004089 call context_next_anchor -0x228f 004090 force 0 ,null -0x2290 004091 rtn -: 004094 context_search_sniff_miss: -0x2291 004095 iforce regb -0x2292 004096 add rega ,coffset_tsniff ,contr -0x2293 004097 ifetch 2 ,contr -0x2294 004098 branch context_search_meet ,blank -0x2295 004099 call context_next_anchor -0x2296 004100 branch context_search_sniff_loop -: 004102 sign_pdata_temp: -0x2297 004103 rshift16 pdata ,timeup -0x2298 004104 rshift8 timeup ,timeup -0x2299 004105 branch sign_pdata_temp_p0 ,zero -0x229a 004106 compare 0xf ,timeup ,0xf -0x229b 004107 nrtn true -0x229c 004108 rshift16 temp ,timeup -0x229d 004109 rshift8 timeup ,timeup -0x229e 004110 nrtn zero -0x229f 004111 set1 28 ,temp -0x22a0 004112 rtn -: 004113 sign_pdata_temp_p0: -0x22a1 004114 rshift16 temp ,timeup -0x22a2 004115 rshift8 timeup ,timeup -0x22a3 004116 compare 0xf ,timeup ,0xf -0x22a4 004117 nrtn true -0x22a5 004118 set1 28 ,pdata -0x22a6 004119 rtn -: 004121 context_check_inconn: -0x22a7 004122 bbit0 state_inconn ,context_search_next -0x22a8 004123 force 0 ,null -0x22a9 004124 rtn -: 004126 context_check_a_wack: -0x22aa 004127 bbit0 state_inconn ,context_search_next -0x22ab 004128 add rega ,coffset_mode ,contr -0x22ac 004129 ifetch 1 ,contr -0x22ad 004130 bbit1 mode_le ,context_search_next -0x22ae 004131 add rega ,coffset_arq ,contr -0x22af 004132 ifetch 1 ,contr -0x22b0 004133 bbit0 wack ,context_search_next -0x22b1 004134 force 0 ,null -0x22b2 004135 rtn -: 004137 context_get_anchor: -0x22b3 004138 add rega ,coffset_mode ,contr -0x22b4 004139 ifetcht 1 ,contr -0x22b5 004140 deposit clkn_bt -0x22b6 004141 isolate1 mode_master ,temp -0x22b7 004142 add rega ,coffset_sniff_anchor ,contr -0x22b8 004143 ifetcht 4 ,contr -0x22b9 004144 rtn true -0x22ba 004145 add rega ,coffset_clk_offset ,contr -0x22bb 004146 ifetch 6 ,contr -0x22bc 004147 call calc_clke2 -0x22bd 004148 deposit clke_bt -0x22be 004149 rtn -: 004151 context_next_anchor: -0x22bf 004152 add rega ,coffset_tsniff ,contr -0x22c0 004153 add rega ,coffset_sniff_anchor ,contw -0x22c1 004154 ifetch 2 ,contr -0x22c2 004155 iadd temp ,timeup -0x22c3 004156 deposit timeup -0x22c4 004157 istore 4 ,contw -0x22c5 004158 branch le_context_nexthop -: 004161 context_search_window: -0x22c6 004162 bbit0 state_insniff ,context_search_next -0x22c7 004163 call context_get_anchor -0x22c8 004164 iadd stop_watch ,pdata -0x22c9 004165 iadd stop_watch ,pdata -0x22ca 004166 iadd queue ,pdata -0x22cb 004167 isub temp ,null -0x22cc 004168 nbranch context_search_next ,positive -0x22cd 004169 force 0 ,null -0x22ce 004170 rtn -: 004172 context_traverse_clearkey: -0x22cf 004173 bbit0 state_inconn ,context_search_next -0x22d0 004174 deposit temp -0x22d1 004175 isub rega ,null -0x22d2 004176 branch context_search_next ,null -0x22d3 004177 add rega ,coffset_mode ,contr -0x22d4 004178 ifetch 1 ,contr -0x22d5 004179 bbit1 mode_le ,context_search_next -0x22d6 004180 ifetch 1 ,rega -0x22d7 004181 set0 state_linkkey ,pdata -0x22d8 004182 istore 1 ,rega -0x22d9 004183 branch context_search_next -: 004186 master_conn_send_packet: -0x22da 004187 bpatch patch05_7 ,mem_patch05 -0x22db 004188 call rf_setup_time_master_slot -: 004189 master_send_packet: -0x22dc 004190 add clkn_bt ,1 ,bt_clk -0x22dd 004191 call fetch_self_bt_adr -0x22de 004192 force 0x03 ,freq_mode -0x22df 004193 call tx_radio_freq -0x22e0 004194 call start_transmitter -0x22e1 004195 call start_tx_native -0x22e2 004196 call send_access_word -0x22e3 004197 branch transmit_packet -: 004199 master_conn_recv_packet: -0x22e4 004200 bpatch patch06_0 ,mem_patch06 -0x22e5 004201 call rf_setup_time_slave_slot -: 004202 master_recv_packet: -0x22e6 004203 add clkn_bt ,1 ,bt_clk -0x22e7 004204 call fetch_self_bt_adr -0x22e8 004205 force 0x03 ,freq_mode -0x22e9 004206 call rx_radio_freq -0x22ea 004207 call init_rx_packet_flags -0x22eb 004208 call prep_crypt -0x22ec 004209 call start_rx_native -0x22ed 004210 call start_receiver -: 004211 master_rx_conn_finish_packet: -0x22ee 004212 call wait_access_clkn_rt -0x22ef 004213 nrtn sync -0x22f0 004214 call save_rssi -0x22f1 004215 branch receive_packet -: 004219 master_newconn_once: -0x22f2 004220 bpatch patch06_1 ,mem_patch06 -0x22f3 004221 fetch 1 ,mem_fhs_am_addr -0x22f4 004222 iforce am_addr -0x22f5 004223 force type_poll ,type -0x22f6 004224 call master_conn_send_packet -0x22f7 004225 branch master_conn_recv_packet -: 004236 inquiry_scan_dispatch: -0x22f8 004237 fetch 1 ,mem_scan_mode -0x22f9 004238 rtnbit0 inq_scan_mode -0x22fa 004239 force iscan_interval_timer ,queue -0x22fb 004240 call timer_check -0x22fc 004241 nrtn blank -0x22fd 004242 fetcht 2 ,mem_iscan_window -0x22fe 004243 force 4 ,queue -0x22ff 004244 call sniff_check_window -0x2300 004245 rtn user -0x2301 004246 call inquiry_scan_start -0x2302 004247 force iscan_interval_timer ,queue -0x2303 004248 fetch 2 ,mem_iscan_interval -0x2304 004249 nbranch timer_init ,sync -0x2305 004250 random pdata -0x2306 004251 iand mask3ff ,pdata -0x2307 004252 branch timer_init -: 004255 inquiry_scan_start: -0x2308 004256 bpatch patch06_2 ,mem_patch06 -0x2309 004257 jam 0 ,mem_fhs_am_addr -0x230a 004258 disable clknt -0x230b 004259 disable attempt -0x230c 004260 call afh_clear -0x230d 004261 and clkn_bt ,0x1fc ,bt_clk -0x230e 004262 force 0x01 ,freq_mode -0x230f 004263 call fetch_giac -0x2310 004264 call rx_radio_freq -0x2311 004265 setflip mark_inquiry_state ,mark -0x2312 004266 fetch 1 ,mem_inquiryscan_waitcnt -0x2313 004267 increase 1 ,pdata -0x2314 004268 store 1 ,mem_inquiryscan_waitcnt -0x2315 004269 call fetch_diac -0x2316 004270 call start_receiver -0x2317 004271 call wait_access_forever -0x2318 004272 nrtn sync -0x2319 004273 bpatch patch06_3 ,mem_patch06 -0x231a 004274 force 0 ,stop_watch -0x231b 004275 call shutdown_radio -0x231c 004276 fetch 1 ,mem_inquiryscan_rcvcnt -0x231d 004277 increase 1 ,pdata -0x231e 004278 store 1 ,mem_inquiryscan_rcvcnt -0x231f 004279 call fetch_giac -0x2320 004280 call rf_setup_time_slave_slot -0x2321 004281 or_into 0x002 ,bt_clk -0x2322 004282 force 0x01 ,freq_mode -0x2323 004283 call tx_radio_freq -0x2324 004284 call fetch_diac -0x2325 004285 call start_transmitter -0x2326 004286 call start_tx_external -0x2327 004287 deposit clkn_bt -0x2328 004288 store 4 ,mem_clkn_bt -0x2329 004289 call send_access_word -0x232a 004290 force type_fhs ,type -0x232b 004291 force 0 ,am_addr -0x232c 004292 call scan_mode_whiten -0x232d 004293 call transmit_packet_whitened -0x232e 004294 call send_eir -0x232f 004295 and_into 0x1fd ,bt_clk -0x2330 004296 increase 1 ,n_tx_slot -0x2331 004297 rtn -: 004299 send_eir: -0x2332 004300 bpatch patch06_4 ,mem_patch06 -0x2333 004301 fetch 1 ,mem_eir_enable -0x2334 004302 rtn blank -0x2335 004303 arg mem_eir ,contw -0x2336 004304 fetch 1 ,mem_local_name_length -0x2337 004305 copy pdata ,loopcnt -0x2338 004306 increase 1 ,pdata -0x2339 004307 istore 1 ,contw -0x233a 004308 copy contw ,temp -0x233b 004309 increase 1 ,pdata -0x233c 004310 store 2 ,mem_tx_len -0x233d 004311 copy temp ,contw -0x233e 004312 setarg 0x09 -0x233f 004313 istore 1 ,contw -0x2340 004314 arg mem_local_name ,contr -0x2341 004315 call memcpy -0x2342 004317 arg mem_all_uuid_128bits ,regc -0x2343 004318 arg 4 ,loopcnt -0x2344 004319 call get_all_uuid -0x2345 004320 arg mem_all_uuid_16bits ,regc -0x2346 004321 arg 1 ,loopcnt -0x2347 004322 call get_all_uuid -0x2348 004324 force type_dm3 ,type -0x2349 004325 jam 2 ,mem_tx_lch -0x234a 004326 setarg mem_eir -0x234b 004327 store 2 ,mem_txptr -0x234c 004328 call rf_setup_time_slave_slot -0x234d 004329 call tx_radio_freq -0x234e 004330 call start_transmitter -0x234f 004331 call start_tx_external -0x2350 004332 call send_access_word -0x2351 004333 call scan_mode_whiten -0x2352 004334 call transmit_packet_whitened -0x2353 004335 rtn -: 004338 get_all_uuid: -0x2354 004339 copy contw ,temp -0x2355 004340 copy regc ,contr -0x2356 004341 ifetch 1 ,contr -0x2357 004342 rtn blank -: 004343 lshift_loop: -0x2358 004344 lshift pdata ,pdata -0x2359 004345 loop lshift_loop -0x235a 004346 copy pdata ,rega -0x235b 004347 increase 2 ,pdata -0x235c 004348 copy pdata ,queue -0x235d 004349 fetch 2 ,mem_tx_len -0x235e 004350 iadd queue ,pdata -0x235f 004351 store 2 ,mem_tx_len -0x2360 004352 copy temp ,contw -0x2361 004353 copy rega ,pdata -0x2362 004354 increase 1 ,pdata -0x2363 004355 istore 1 ,contw -0x2364 004356 copy regc ,contr -0x2365 004357 ifetch 1 ,contr -0x2366 004358 ifetch 1 ,contr -0x2367 004359 istore 1 ,contw -0x2368 004360 copy rega ,loopcnt -0x2369 004361 branch memcpy -: 004367 page_scan_dispatch: -0x236a 004368 fetch 1 ,mem_scan_mode -0x236b 004369 rtnbit0 page_scan_mode -0x236c 004370 force pscan_interval_timer ,queue -0x236d 004371 call timer_check -0x236e 004372 nrtn blank -0x236f 004373 fetcht 2 ,mem_pscan_window -0x2370 004374 force 40 ,queue -0x2371 004375 call sniff_check_window -0x2372 004376 rtn user -0x2373 004377 force 0 ,am_addr -0x2374 004378 jam param_pagerespto ,mem_fhs_wait_counter -0x2375 004379 set0 mark_fhs_already_good ,mark -0x2376 004380 call page_scan_start -0x2377 004381 force pscan_interval_timer ,queue -0x2378 004382 fetch 2 ,mem_pscan_interval -0x2379 004383 branch timer_init -: 004386 page_scan_start: -0x237a 004387 bpatch patch06_5 ,mem_patch06 -0x237b 004388 disable clknt -0x237c 004389 call afh_clear -0x237d 004390 fetch 1 ,mem_pagescan_waitcnt -0x237e 004391 increase 1 ,pdata -0x237f 004392 store 1 ,mem_pagescan_waitcnt -0x2380 004393 force 0 ,n_tx_slot -0x2381 004394 call fetch_self_bt_adr -0x2382 004395 add clkn_bt ,1 ,bt_clk -0x2383 004396 force 0x02 ,freq_mode -0x2384 004397 bpatch patch06_6 ,mem_patch06 -0x2385 004398 call rx_radio_freq -0x2386 004399 call start_receiver -0x2387 004400 call wait_access_forever -0x2388 004401 nrtn sync -0x2389 004402 call shutdown_radio -0x238a 004403 fetch 1 ,mem_pagescan_rcvcnt -0x238b 004404 increase 1 ,pdata -0x238c 004405 store 1 ,mem_pagescan_rcvcnt -0x238d 004406 force 0 ,stop_watch -0x238e 004407 call rf_setup_time_slave_slot -0x238f 004408 or_into 0x002 ,bt_clk -0x2390 004409 force 0x01 ,freq_mode -0x2391 004410 call tx_radio_freq -0x2392 004411 call start_transmitter -0x2393 004412 call start_tx_external -0x2394 004413 call send_access_word -0x2395 004414 call end_of_packet -0x2396 004415 force 0 ,am_addr -0x2397 004416 arg param_rf_setup ,timeup -0x2398 004417 until clke_rt ,meet -0x2399 004418 or_into 0x03 ,clke_bt -0x239a 004419 and_into 0x1fd ,bt_clk -: 004420 page_scan_wait_fhs_restart: -0x239b 004421 bpatch patch06_7 ,mem_patch06 -0x239c 004422 increase 1 ,n_tx_slot -0x239d 004423 call rx_radio_freq -0x239e 004424 call start_receiver -0x239f 004425 call wait_access_mhalfbnd -0x23a0 004426 nbranch page_scan_wait_fhs_again ,sync -0x23a1 004427 call scan_mode_whiten -0x23a2 004428 call receive_packet_whitened -0x23a3 004429 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs -: 004430 page_scan_wait_fhs_again: -0x23a4 004431 bpatch patch07_0 ,mem_patch07 -0x23a5 004432 fetch 1 ,mem_fhs_wait_counter -0x23a6 004433 rtn blank -0x23a7 004434 increase -1 ,pdata -0x23a8 004435 store 1 ,mem_fhs_wait_counter -0x23a9 004436 call rf_setup_time_master_slot -0x23aa 004437 branch page_scan_wait_fhs_restart -: 004440 page_scan_reply_to_fhs: -0x23ab 004441 bpatch patch07_1 ,mem_patch07 -0x23ac 004442 set0 1 ,clke_bt -0x23ad 004443 set1 0 ,clke_bt -0x23ae 004444 fetch 1 ,mem_pagescan_rcvfhscnt -0x23af 004445 increase 1 ,pdata -0x23b0 004446 store 1 ,mem_pagescan_rcvfhscnt -0x23b1 004447 call rf_setup_time_slave_slot -0x23b2 004448 or_into 0x02 ,bt_clk -0x23b3 004449 call tx_radio_freq -0x23b4 004450 call start_transmitter -0x23b5 004451 call start_tx_external -0x23b6 004452 call send_access_word -0x23b7 004453 call end_of_packet -: 004454 slave_apply_clke_bt: -0x23b8 004455 compare 0x03 ,clke_bt ,0x03 -0x23b9 004456 branch slave_apply_clke_bt_now ,true -0x23ba 004457 until null ,mhalfbnd -0x23bb 004458 branch slave_apply_clke_bt -: 004459 slave_apply_clke_bt_now: -0x23bc 004460 fetch 4 ,mem_clke_bt -0x23bd 004461 or_into 0x03 ,pdata -0x23be 004462 icopy clke_bt -: 004464 start_slave_connection: -0x23bf 004465 bpatch patch07_2 ,mem_patch07 -0x23c0 004466 fetch 6 ,extm_lap -0x23c1 004467 store 6 ,mem_plap -0x23c2 004468 call prepare_newconn -: 004469 slave_newconn_loop: -0x23c3 004470 call slave_newconn_once -0x23c4 004471 branch sconn_successful ,match -0x23c5 004472 call new_conn_timeout -0x23c6 004473 nbranch slave_newconn_loop ,blank -0x23c7 004474 rtn -: 004477 sconn_successful: -0x23c8 004478 bpatch patch07_3 ,mem_patch07 -0x23c9 004479 call newconn_init -0x23ca 004480 call context_new -0x23cb 004481 nrtn zero -0x23cc 004482 jam 0 ,mem_mode -0x23cd 004483 call calc_clke_offset -0x23ce 004484 branch context_save -: 004489 slave_dispatch: -0x23cf 004490 bpatch patch07_4 ,mem_patch07 -0x23d0 004491 call calc_clke -0x23d1 004492 call role_switch_slave -0x23d2 004493 rtn user -: 004494 slave_loop: -0x23d3 004495 bpatch patch07_5 ,mem_patch07 -0x23d4 004496 call check_bt_disabled -0x23d5 004497 call scheduler_process -0x23d6 004498 call slave_conn_recv_packet -0x23d7 004499 nbranch slave_notmatch ,match -0x23d8 004500 call supervision_flush -0x23d9 004501 call scheduler_tx_l2cap_pkt -0x23da 004502 call prepare_tx -0x23db 004503 call slave_conn_send_packet -0x23dc 004504 call parse_l2cap -0x23dd 004505 call parse_lmp -0x23de 004506 fetch 1 ,mem_slave_rcvcnt -0x23df 004507 increase 1 ,pdata -0x23e0 004508 store 1 ,mem_slave_rcvcnt -0x23e1 004509 call calc_clke_offset -: 004510 slave_notmatch: -0x23e2 004511 bpatch patch07_6 ,mem_patch07 -0x23e3 004512 call lpm_set_mult -0x23e4 004513 call supervision_update -0x23e5 004514 branch slave_disconnect ,positive -0x23e6 004515 call check_disconnect_timeout -0x23e7 004516 nbranch slave_disconnect ,user -0x23e8 004517 call check_attempt -0x23e9 004518 nbranch slave_loop ,blank -0x23ea 004519 rtn -: 004521 slave_disconnect: -0x23eb 004522 bpatch patch07_7 ,mem_patch07 -0x23ec 004523 jam 0 ,mem_tester_emulate -0x23ed 004524 jam 0 ,mem_debug_config -0x23ee 004525 call quit_connection -0x23ef 004526 set0 mark_testmode ,mark -0x23f0 004527 call test_enable_white -0x23f1 004528 fetch 1 ,mem_state -0x23f2 004529 rtn -: 004532 role_switch_slave: -0x23f3 004533 bpatch patch08_0 ,mem_patch08 -0x23f4 004534 call role_switch_check -0x23f5 004535 nrtn user -0x23f6 004536 copy am_addr ,temp -0x23f7 004537 call get_free_amaddr -0x23f8 004538 store 1 ,mem_fhs_am_addr -0x23f9 004539 copy temp ,am_addr -0x23fa 004540 jam param_newconnto ,mem_newconnto_counter -: 004541 roles_sendfhs_loop: -0x23fb 004542 bpatch patch08_1 ,mem_patch08 -0x23fc 004543 call rf_setup_time_master_slot -0x23fd 004544 force type_fhs ,type -0x23fe 004545 call slave_send_access -0x23ff 004546 deposit clkn_bt -0x2400 004547 store 4 ,mem_clkn_bt -0x2401 004548 call transmit_packet -0x2402 004549 call rf_setup_time_slave_slot -0x2403 004550 enable user3 -0x2404 004551 call slave_receive_access -0x2405 004552 branch roles_got_fhs_reply ,sync -0x2406 004553 call shutdown_radio -0x2407 004554 call new_conn_timeout -0x2408 004555 nbranch roles_sendfhs_loop ,blank -0x2409 004556 rtnmark0 mark_accept_switch -0x240a 004557 jam lmp_slot_offset ,mem_lmo_opcode2 -0x240b 004558 set1 mark_switch_initiated ,mark -0x240c 004559 rtn -: 004560 roles_got_fhs_reply: -0x240d 004561 enable clknt -0x240e 004562 call prepare_newconn -0x240f 004563 call afh_clear -: 004564 roles_newconn_loop: -0x2410 004565 bpatch patch08_2 ,mem_patch08 -0x2411 004566 call master_newconn_once -0x2412 004567 branch roles_newconn_responded ,sync -0x2413 004568 call new_conn_timeout -0x2414 004569 nbranch roles_newconn_loop ,blank -0x2415 004570 disable clknt -0x2416 004571 deposit clke_bt -0x2417 004572 store 4 ,mem_next_btclk -0x2418 004573 rtn -: 004574 roles_newconn_responded: -0x2419 004575 enable master -0x241a 004576 bmark0 mark_accept_switch ,roles_newconn_nolmp -0x241b 004577 set0 mark_accept_switch ,mark -0x241c 004578 jam lmp_accepted ,mem_lmo_opcode2 -0x241d 004579 jam lmp_host_connection_req ,mem_lmi_opcode2 -0x241e 004580 call tid_set_reply -: 004581 roles_newconn_nolmp: -0x241f 004582 deposit am_addr -0x2420 004583 store 1 ,mem_amaddr -0x2421 004584 force 0 ,pdata -0x2422 004585 store 6 ,mem_clk_offset -0x2423 004586 fetch 1 ,mem_mode -0x2424 004587 set1 mode_master ,pdata -0x2425 004588 store 1 ,mem_mode -0x2426 004589 call supervision_flush -0x2427 004590 disable master -0x2428 004591 enable user -0x2429 004592 rtn -: 004596 init_rx_packet_flags: -0x242a 004597 bpatch patch08_3 ,mem_patch08 -0x242b 004598 disable match -0x242c 004599 set0 mark_loopback ,mark -0x242d 004600 set0 mark_am_addr_broadcast ,mark -0x242e 004601 set0 mark_longpacket ,mark -0x242f 004602 set0 mark_old_packet ,mark -0x2430 004603 fetch 1 ,mem_arq -0x2431 004604 set0 arqnx ,pdata -0x2432 004605 set1 flowx ,pdata -0x2433 004606 store 1 ,mem_arq -0x2434 004607 rtn -: 004609 prepare_newconn: -0x2435 004610 bpatch patch08_4 ,mem_patch08 -0x2436 004611 jam param_newconnto ,mem_newconnto_counter -0x2437 004612 jam param_newconn_arq ,mem_arq -0x2438 004613 fetch 2 ,mem_rx_window_init -0x2439 004614 store 2 ,mem_rx_window -0x243a 004615 deposit clkn_bt -0x243b 004616 store 4 ,mem_next_btclk -0x243c 004617 rtn clknt -0x243d 004618 deposit clke_bt -0x243e 004619 store 4 ,mem_next_btclk -0x243f 004620 rtn -: 004622 newconn_init: -0x2440 004623 bpatch patch08_5 ,mem_patch08 -0x2441 004624 call init_lmp_reinit -0x2442 004625 call new_conn_handle -0x2443 004626 store 1 ,mem_conn_handle -0x2444 004627 setarg 0 -0x2445 004628 store 2 ,mem_l2cap_rxbuff1_len -0x2446 004629 setarg param_supervision_to -0x2447 004630 store 2 ,mem_supervision_to -0x2448 004631 fetch 1 ,mem_state -0x2449 004632 set1 state_inconn ,pdata -0x244a 004633 store 1 ,mem_state -0x244b 004634 jam 0 ,mem_op -0x244c 004635 jam 0 ,mem_state_map -0x244d 004636 jam 0 ,mem_lpm_current_mult -0x244e 004637 branch supervision_flush -: 004640 clear_linkkey: -0x244f 004641 bpatch patch08_6 ,mem_patch08 -0x2450 004642 force 0 ,pdata -0x2451 004643 store 8 ,mem_link_key -0x2452 004644 istore 8 ,contw -0x2453 004645 call clear_linkstate -0x2454 004646 branch context_traverse_linkkey -: 004648 new_conn_timeout: -0x2455 004649 fetch 1 ,mem_newconnto_counter -0x2456 004650 increase -1 ,pdata -0x2457 004651 store 1 ,mem_newconnto_counter -0x2458 004652 rtn -: 004654 new_conn_handle: -0x2459 004655 fetch 1 ,mem_handle_num -0x245a 004656 increase 1 ,pdata -0x245b 004657 store 1 ,mem_handle_num -0x245c 004658 rtn -: 004661 quit_connection: -0x245d 004662 bpatch patch08_7 ,mem_patch08 -0x245e 004663 fetch 1 ,mem_hci_cmd -0x245f 004664 beq hci_cmd_remote_name_req ,quit_connection_name -0x2460 004665 fetch 1 ,mem_lmp_to_send -0x2461 004666 bne lmp_name_req ,quit_connection_cont -: 004667 quit_connection_name: -0x2462 004668 call cmd_check_plap -0x2463 004669 nbranch quit_connection_cont ,zero -0x2464 004670 call master_name_error -0x2465 004671 jam 0 ,mem_hci_cmd -: 004672 quit_connection_cont: -0x2466 004673 bpatch patch09_0 ,mem_patch09 -0x2467 004674 call app_disconn_reason_collect_bt -0x2468 004675 call sniff_exit -0x2469 004676 jam bt_evt_bb_disconnected ,mem_fifo_temp -0x246a 004677 call ui_ipc_send_event -0x246b 004678 call init_lmp_work -0x246c 004679 call l2cap_init_work -0x246d 004680 call sp_initialize -0x246e 004681 fetch 1 ,mem_state -0x246f 004682 set0 state_inconn -0x2470 004683 store 1 ,mem_state -0x2471 004684 jam 0 ,memui_reconnect_mode -0x2472 004686 fetch 1 ,mem_state_map -0x2473 004687 compare 0x0 ,pdata ,0xc0 -0x2474 004688 branch quit_connection_not_clear_mark ,true -0x2475 004689 set0 mark_rxbuf_inuse ,mark -: 004690 quit_connection_not_clear_mark: -0x2476 004691 fetch 1 ,mem_arq -0x2477 004692 bbit0 wack ,quit_connection_not_clear_tx -: 004693 quit_connection_not_clear_tx: -0x2478 004694 fetch 1 ,mem_op -0x2479 004695 rtnbit0 op_txl2cap -0x247a 004696 set0 mark_tx_l2cap ,mark -0x247b 004697 rtn -: 004699 slave_newconn_once: -0x247c 004700 bpatch patch09_1 ,mem_patch09 -0x247d 004701 fetch 1 ,extm_newconn_am_addr -0x247e 004702 rtn blank -0x247f 004703 icopy am_addr -0x2480 004704 call slave_conn_recv_packet -0x2481 004705 nrtn match -0x2482 004706 force type_null ,type -0x2483 004707 call slave_conn_send_packet -0x2484 004708 deposit am_addr -0x2485 004709 store 1 ,mem_amaddr -0x2486 004710 force 0 ,pdata -0x2487 004711 store 1 ,extm_newconn_am_addr -0x2488 004712 rtn -: 004718 prepare_tx: -0x2489 004719 bpatch patch09_2 ,mem_patch09 -0x248a 004720 fetch 1 ,mem_state -0x248b 004721 bbit0 state_insco ,prepare_tx_not_sco -0x248c 004722 force type_hv3 ,type -0x248d 004723 bmark0 mark_esco ,prepare_tx_not_esco -0x248e 004724 call check_esco_amaddr -0x248f 004725 nbranch prepare_tx_not_sco ,true -0x2490 004726 branch prepare_tx_not_sco ,attempt -0x2491 004727 call set_wait_ack -0x2492 004728 setarg 2 -0x2493 004729 store 2 ,mem_retransmission_cnt -0x2494 004730 rtn -: 004731 prepare_tx_not_esco: -0x2495 004732 nrtn attempt -: 004733 prepare_tx_not_sco: -0x2496 004734 bpatch patch09_3 ,mem_patch09 -0x2497 004735 call context_check_all_wack -0x2498 004736 nbranch prepare_tx_no_retransmit ,zero -0x2499 004737 fetch 1 ,mem_arq -0x249a 004738 bbit0 wack ,prepare_tx_pollnull -: 004739 prepare_tx_retransmit: -0x249b 004740 bmark1 mark_loopback ,prepare_tx_loopback -0x249c 004741 fetch 1 ,mem_debug_config -0x249d 004742 bbit1 debug_tx_pattern ,prepare_tx_txpat -0x249e 004743 fetch 2 ,mem_retransmission_cnt -0x249f 004744 increase -1 ,pdata -0x24a0 004745 store 2 ,mem_retransmission_cnt -0x24a1 004746 branch prepare_tx_nomore_retransmit ,blank -0x24a2 004747 fetch 1 ,mem_last_type -0x24a3 004748 iforce type -0x24a4 004749 rtn -: 004751 prepare_tx_nomore_retransmit: -0x24a5 004752 bpatch patch09_4 ,mem_patch09 -0x24a6 004753 call clear_got_tx -: 004754 prepare_tx_no_retransmit: -0x24a7 004755 call check_esco_amaddr -0x24a8 004756 branch prepare_tx_pollnull ,true -0x24a9 004757 call send_lmp -0x24aa 004758 branch prepare_tx_sendlmp ,user -0x24ab 004759 fetch 1 ,mem_op -0x24ac 004760 bbit1 op_txl2cap ,prepare_tx_sendl2cap -0x24ad 004761 bmark1 mark_loopback ,prepare_tx_loopback -0x24ae 004762 fetch 1 ,mem_debug_config -0x24af 004763 bbit1 debug_tx_pattern ,prepare_tx_txpat -: 004764 prepare_tx_pollnull: -0x24b0 004765 force type_poll ,type -0x24b1 004766 rtn master -0x24b2 004767 force type_null ,type -0x24b3 004768 rtn -: 004769 prepare_tx_loopback: -0x24b4 004770 bpatch patch09_5 ,mem_patch09 -0x24b5 004771 fetch 1 ,mem_rx_type -0x24b6 004772 iforce type -0x24b7 004773 rtnne 1 -0x24b8 004774 force type_null ,type -0x24b9 004775 rtn -: 004776 prepare_tx_txpat: -0x24ba 004777 fetch 1 ,test_mode_packet_type -0x24bb 004778 and pdata ,0xf ,type -0x24bc 004779 set1 mark_loopback ,mark -0x24bd 004780 rtn -: 004781 prepare_tx_sendlmp: -0x24be 004782 force type_lmp ,type -0x24bf 004783 branch set_wait_ack -: 004784 prepare_tx_sendl2cap: -0x24c0 004785 call tx_l2cap_type -: 004787 set_wait_ack: -0x24c1 004788 bpatch patch09_6 ,mem_patch09 -0x24c2 004789 fetcht 1 ,mem_arq -0x24c3 004790 set1 wack ,temp -0x24c4 004791 storet 1 ,mem_arq -0x24c5 004792 deposit type -0x24c6 004793 store 1 ,mem_last_type -0x24c7 004794 setarg 0xffff -0x24c8 004795 store 2 ,mem_retransmission_cnt -0x24c9 004796 rtn -: 004798 tx_l2cap_type: -0x24ca 004799 bpatch patch09_7 ,mem_patch09 -0x24cb 004800 fetch 1 ,mem_state_map -0x24cc 004801 isolate1 smap_edr ,pdata -0x24cd 004802 fetch 2 ,mem_tx_len -0x24ce 004803 branch tx_l2cap_type_edr ,true -0x24cf 004804 force type_dm1 ,type -0x24d0 004805 sub pdata ,17 ,null -0x24d1 004806 rtn positive -0x24d2 004807 force type_dh1 ,type -0x24d3 004808 sub pdata ,27 ,null -0x24d4 004809 rtn positive -0x24d5 004810 force type_dm3 ,type -0x24d6 004811 sub pdata ,121 ,null -0x24d7 004812 rtn positive -0x24d8 004813 force type_dh3 ,type -0x24d9 004814 sub pdata ,183 ,null -0x24da 004815 rtn positive -0x24db 004816 force type_dm5 ,type -0x24dc 004817 sub pdata ,224 ,null -0x24dd 004818 rtn positive -0x24de 004819 force type_dh5 ,type -0x24df 004820 rtn -: 004821 tx_l2cap_type_edr: -0x24e0 004822 force type_dm1 ,type -0x24e1 004823 sub pdata ,17 ,null -0x24e2 004824 rtn positive -0x24e3 004825 force type_dh1 ,type -0x24e4 004826 sub pdata ,54 ,null -0x24e5 004827 rtn positive -0x24e6 004828 force type_dm3 ,type -0x24e7 004829 arg 367 ,temp -0x24e8 004830 isub temp ,null -0x24e9 004831 nrtn positive -0x24ea 004832 force type_dm5 ,type -0x24eb 004833 arg 679 ,temp -0x24ec 004834 isub temp ,null -0x24ed 004835 nrtn positive -0x24ee 004836 force type_dh5 ,type -0x24ef 004837 rtn -: 004846 slave_receive_master_slot: -0x24f0 004847 fetch 1 ,mem_state -0x24f1 004848 bbit0 state_insniff ,slave_receive_notsniff -0x24f2 004849 fetch 2 ,mem_tsniff -0x24f3 004850 branch slave_receive_notsniff ,blank -0x24f4 004851 nbranch slave_receive_sniff ,attempt -: 004852 slave_receive_notsniff: -0x24f5 004853 call rf_setup_time_master_slot -: 004854 slave_receive_access: -0x24f6 004855 add clke_bt ,1 ,bt_clk -: 004856 slave_receive_sniff: -0x24f7 004857 enable swfine -0x24f8 004858 fetch 2 ,mem_rx_window -0x24f9 004859 rshift pdata ,pdata -0x24fa 004860 arg param_pll_setup ,temp -0x24fb 004861 iadd temp ,pdata -0x24fc 004862 call ahead_window -0x24fd 004863 call fetch_extm_bt_adr -0x24fe 004864 force 0x03 ,freq_mode -0x24ff 004865 call rx_radio_freq -0x2500 004866 call init_rx_packet_flags -0x2501 004867 call prep_crypt -0x2502 004868 bpatch patch0a_0 ,mem_patch0a -0x2503 004869 fetch 2 ,mem_rx_window -0x2504 004870 rshift pdata ,pdata -0x2505 004871 call ahead_window -0x2506 004872 call start_receiver -0x2507 004873 enable decode_fec0 -0x2508 004874 fetch 2 ,mem_rx_window -0x2509 004875 arg param_clke_cal ,temp -0x250a 004876 iadd temp ,stop_watch -0x250b 004877 correlate null ,timeout -0x250c 004878 copy clke ,temp -0x250d 004879 storet 6 ,mem_sync_clke -0x250e 004880 disable decode_fec0 -0x250f 004881 nrtn sync -0x2510 004882 arg param_clke_cal ,clke_rt -0x2511 004883 copy bt_clk ,clke_bt -0x2512 004884 branch lpm_adjust_clk ,wake -0x2513 004885 rtn -: 004888 slave_conn_recv_packet: -0x2514 004889 bpatch patch0a_1 ,mem_patch0a -0x2515 004890 call slave_receive_master_slot -0x2516 004891 nbranch shutdown_radio ,sync -0x2517 004892 call save_rssi -0x2518 004893 bmark0 mark_testmode ,receive_packet -0x2519 004894 fetch 2 ,mem_tst_pktcnt_sync -0x251a 004895 increase 1 ,pdata -0x251b 004896 store 2 ,mem_tst_pktcnt_sync -: 004897 receive_packet: -0x251c 004898 rshift bt_clk ,temp -0x251d 004899 or temp ,0x40 ,white_init -: 004900 receive_packet_whitened: -0x251e 004901 bpatch patch0a_2 ,mem_patch0a -0x251f 004902 enable enable_white -0x2520 004903 enable enable_hec -0x2521 004904 enable decode_fec1 -0x2522 004905 parse demod ,bucket ,3 -0x2523 004906 rshift8 pwindow ,pdata -0x2524 004907 store 1 ,mem_temp_am_addr -0x2525 004908 parse demod ,bucket ,4 -0x2526 004909 inject bucket ,7 -0x2527 004910 copy pwindow ,pdata -0x2528 004911 store 1 ,mem_rx_type -0x2529 004912 parse demod ,bucket ,3 -0x252a 004913 rshift8 pwindow ,pdata -0x252b 004914 store 1 ,mem_temp_arq -0x252c 004915 fetch 1 ,mem_rx_type -0x252d 004916 sub pdata ,3 ,null -0x252e 004917 branch receive_packet_noedr ,positive -0x252f 004918 beq 7 ,receive_packet_noedr -0x2530 004919 fetch 1 ,mem_state_map -0x2531 004920 isolate1 smap_edr ,pdata -0x2532 004921 setflag true ,psk ,radio_ctrl -: 004922 receive_packet_noedr: -0x2533 004923 bpatch patch0a_3 ,mem_patch0a -0x2534 004924 parse demod ,bucket ,8 -0x2535 004925 disable decode_fec1 -0x2536 004926 disable enable_hec -0x2537 004927 branch error_header ,crc_failed -0x2538 004928 bmark0 mark_testmode ,receive_packet_amchk -0x2539 004929 fetch 2 ,mem_tst_pktcnt_hec -0x253a 004930 increase 1 ,pdata -0x253b 004931 store 2 ,mem_tst_pktcnt_hec -: 004932 receive_packet_amchk: -0x253c 004933 bpatch patch0a_4 ,mem_patch0a -0x253d 004934 fetch 1 ,mem_temp_am_addr -0x253e 004935 compare 0 ,pdata ,0x07 -0x253f 004936 setflag true ,mark_am_addr_broadcast ,mark -0x2540 004937 branch am_addr_ok ,true -0x2541 004938 icompare 0x07 ,am_addr -0x2542 004939 branch am_addr_match ,true -0x2543 004940 bmark0 mark_esco ,end_of_packet -0x2544 004941 fetcht 1 ,mem_saved_amaddr -0x2545 004942 icompare 0x7 ,temp -0x2546 004943 nbranch end_of_packet ,true -0x2547 004944 fetch 1 ,mem_arq -0x2548 004945 set0 arqnx ,pdata -0x2549 004946 set1 flowx ,pdata -0x254a 004947 store 1 ,mem_arq -: 004948 am_addr_match: -0x254b 004949 enable match -: 004950 am_addr_ok: -0x254c 004951 bpatch patch0a_5 ,mem_patch0a -0x254d 004952 fetch 1 ,mem_rx_type -0x254e 004953 icopy type -0x254f 004954 bmark1 mark_am_addr_broadcast ,arqn_bypass -0x2550 004955 fetcht 1 ,mem_temp_arq -0x2551 004956 fetch 1 ,mem_arq -0x2552 004957 set0 flow ,pdata -0x2553 004958 isolate1 flow ,temp -0x2554 004959 setflag true ,flow ,pdata -0x2555 004960 isolate1 arqn ,temp -0x2556 004961 setflag true ,arqn ,pdata -0x2557 004962 store 1 ,mem_arq -0x2558 004963 isolate0 arqn ,temp -0x2559 004964 branch arqn_bypass ,true -0x255a 004965 call clear_got_tx -: 004966 arqn_bypass: -0x255b 004967 bpatch patch0a_6 ,mem_patch0a -0x255c 004968 arg 0 ,temp -0x255d 004969 call reserve_slot -0x255e 004970 and type ,0xf ,pdata -0x255f 004971 beq type_poll ,process_poll -0x2560 004972 beq type_null ,end_of_packet -0x2561 004973 beq type_fhs ,process_fhs -0x2562 004974 fetcht 1 ,mem_temp_arq -0x2563 004975 fetch 1 ,mem_arq -0x2564 004976 icompare 0x04 ,temp -0x2565 004977 nbranch rx_type_dispatch ,true -0x2566 004978 bmark0 mark_am_addr_broadcast ,failed_seqn -0x2567 004979 bbit0 bcast1 ,rx_type_dispatch -: 004980 failed_seqn: -0x2568 004981 set1 mark_old_packet ,mark -: 004982 rx_type_dispatch: -0x2569 004983 bpatch patch0a_7 ,mem_patch0a -0x256a 004984 deposit type -0x256b 004985 beq type_dm1 ,process_dm1 -0x256c 004986 beq type_dh1 ,process_dh1 -0x256d 004987 beq type_hv3 ,process_hev -0x256e 004988 beq type_3dh1 ,process_3dh1 -0x256f 004989 arg 4 ,temp -0x2570 004990 call reserve_slot -0x2571 004991 beq type_dm3 ,process_dm3 -0x2572 004992 beq type_dh3 ,process_dh3 -0x2573 004993 arg 8 ,temp -0x2574 004994 call reserve_slot -0x2575 004995 beq type_dm5 ,process_dm5 -0x2576 004996 beq type_dh5 ,process_dh5 -0x2577 004997 rtn -: 005000 process_hev: -0x2578 005001 bpatch patch0b_0 ,mem_patch0b -0x2579 005002 enable decode_fec0 -0x257a 005003 enable enable_crc -0x257b 005004 enable encrypt -0x257c 005005 arg mem_sco_ibuf ,contw -0x257d 005006 force 30 ,loopcnt -: 005007 process_hev_loop: -0x257e 005008 parse demod ,bucket ,8 -0x257f 005009 rshift3 pwindow ,pdata -0x2580 005010 istore 1 ,contw -0x2581 005011 loop process_hev_loop -0x2582 005012 bmark0 mark_esco ,end_of_packet -0x2583 005013 parse demod ,bucket ,16 -0x2584 005014 nsetflag crc_failed ,mark_esco_rxok ,mark -0x2585 005015 branch error_payload ,crc_failed -0x2586 005016 branch ack_payload -: 005019 process_poll: -0x2587 005020 branch end_of_packet -: 005022 process_dm3: -: 005023 process_dm5: -0x2588 005024 set1 mark_longpacket ,mark -: 005025 process_dm1: -0x2589 005026 enable decode_fec2 -0x258a 005027 branch process_dmh -: 005029 process_dh3: -: 005030 process_dh5: -0x258b 005031 set1 mark_longpacket ,mark -: 005032 process_3dh1: -0x258c 005033 set1 psk3m ,radio_ctrl -: 005034 process_dh1: -0x258d 005035 enable decode_fec0 -: 005036 process_dmh: -0x258e 005037 bpatch patch0b_1 ,mem_patch0b -0x258f 005038 bmark1 mark_rxbuf_inuse ,end_of_packet -0x2590 005039 isolate0 psk ,radio_ctrl -0x2591 005040 branch process_dmh_noedr ,true -0x2592 005041 disable enable_white -0x2593 005042 enable decode_fec0 -0x2594 005043 disable decode_fec2 -0x2595 005044 add clkn_bt ,2 ,timeup -0x2596 005045 correlate clkn_bt ,meet -0x2597 005046 nbranch error_payload ,sync -0x2598 005047 set1 mark_longpacket ,mark -0x2599 005048 enable enable_white -: 005049 process_dmh_noedr: -0x259a 005050 bpatch patch0b_2 ,mem_patch0b -0x259b 005051 enable encrypt -0x259c 005052 enable enable_crc -0x259d 005053 parse demod ,bucket ,3 -0x259e 005054 rshift8 pwindow ,pdata -0x259f 005055 store 1 ,mem_lch_code -0x25a0 005056 parse demod ,bucket ,5 -0x25a1 005057 bmark1 mark_longpacket ,process_dmh_long -0x25a2 005058 rshift3 pwindow ,loopcnt -0x25a3 005059 rshift3 loopcnt ,loopcnt -0x25a4 005060 branch process_dmh_common -: 005061 process_dmh_long: -0x25a5 005062 parse demod ,bucket ,5 -0x25a6 005063 rshift pwindow ,loopcnt -0x25a7 005064 parse demod ,bucket ,3 -: 005065 process_dmh_common: -0x25a8 005066 bpatch patch0b_3 ,mem_patch0b -0x25a9 005067 deposit loopcnt -0x25aa 005068 store 2 ,mem_len -0x25ab 005069 branch process_dmh_data_end ,blank -0x25ac 005070 isub mask3ff ,null -0x25ad 005071 branch error_payload ,positive -0x25ae 005072 bpatch patch0b_4 ,mem_patch0b -0x25af 005073 set0 mark_fhs_eir ,mark -0x25b0 005074 fetch 1 ,mem_lch_code -0x25b1 005075 and_into 0x03 ,pdata -0x25b2 005076 arg mem_rxbuf ,contw -0x25b3 005077 beq llid_lmp ,process_lmp -0x25b4 005078 bmark1 mark_testmode ,process_dmh_data -0x25b5 005080 fetch 1 ,mem_lch_code -0x25b6 005081 and_into 0x03 ,pdata -0x25b7 005082 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt -0x25b8 005083 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt -0x25b9 005084 branch error_payload -: 005086 process_lmp: -0x25ba 005087 fetch 2 ,mem_len -0x25bb 005088 sub pdata ,0x70 ,null -0x25bc 005089 nbranch error_payload ,positive -0x25bd 005090 bmark1 mark_old_packet ,ack_payload -0x25be 005091 branch process_dmh_data -: 005094 process_dmh_data_l2cap_start_pkt: -0x25bf 005095 bpatch patch0b_5 ,mem_patch0b -0x25c0 005096 bmark1 mark_old_packet ,ack_payload -0x25c1 005097 fetch 2 ,mem_len -0x25c2 005098 arg 0x2e0 ,temp -0x25c3 005099 isub temp ,null -0x25c4 005100 branch error_payload ,positive -0x25c5 005101 fetch 1 ,mem_l2cap_rxbuff_inuse -0x25c6 005102 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 -0x25c7 005103 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 -0x25c8 005104 branch end_of_packet -: 005105 process_dmh_data_into_buff1: -0x25c9 005106 jam 1 ,mem_l2cap_rxbuff_new -0x25ca 005107 fetch 2 ,mem_l2cap_rxbuff1_len -0x25cb 005108 bne 0 ,end_of_packet -0x25cc 005109 arg mem_l2cap_rxbuff1 ,contw -0x25cd 005110 branch process_dmh_data -: 005111 process_dmh_data_into_buff2: -0x25ce 005112 jam 2 ,mem_l2cap_rxbuff_new -0x25cf 005113 fetch 2 ,mem_l2cap_rxbuff2_len -0x25d0 005114 bne 0 ,end_of_packet -0x25d1 005115 arg mem_l2cap_rxbuff2 ,contw -0x25d2 005116 branch process_dmh_data -: 005118 process_dmh_data_l2cap_continue_pkt: -0x25d3 005119 bpatch patch0b_6 ,mem_patch0b -0x25d4 005120 bmark1 mark_old_packet ,ack_payload -0x25d5 005121 fetch 2 ,mem_len -0x25d6 005122 arg 0x2e0 ,temp -0x25d7 005123 isub temp ,null -0x25d8 005124 branch error_payload ,positive -0x25d9 005125 fetch 1 ,mem_l2cap_rxbuff_new -0x25da 005126 beq 1 ,process_dmh_data_l2cap_continue_pkt1 -0x25db 005127 beq 2 ,process_dmh_data_l2cap_continue_pkt2 -0x25dc 005128 branch end_of_packet -: 005129 process_dmh_data_l2cap_continue_pkt1: -0x25dd 005130 arg mem_l2cap_rxbuff1 ,contw -0x25de 005131 fetch 2 ,mem_l2cap_rxbuff1_len -0x25df 005132 iadd contw ,contw -0x25e0 005133 branch process_dmh_data -: 005134 process_dmh_data_l2cap_continue_pkt2: -0x25e1 005135 arg mem_l2cap_rxbuff2 ,contw -0x25e2 005136 fetch 2 ,mem_l2cap_rxbuff2_len -0x25e3 005137 iadd contw ,contw -: 005138 process_dmh_data: -0x25e4 005139 parse demod ,bucket ,8 -0x25e5 005140 rshift3 pwindow ,pdata -0x25e6 005141 istore 1 ,contw -0x25e7 005142 loop process_dmh_data -: 005143 process_dmh_data_end: -0x25e8 005144 bpatch patch0b_7 ,mem_patch0b -0x25e9 005145 parse demod ,bucket ,16 -0x25ea 005146 branch error_payload_crc ,crc_failed -0x25eb 005147 fetch 1 ,mem_l2cap_flow_ctrl_flag -0x25ec 005148 beq l2cap_flow_ctrl_enable ,end_of_packet -0x25ed 005149 bmark1 mark_testmode ,process_dmh_cont -0x25ee 005150 bmark1 mark_old_packet ,redundant_payload -0x25ef 005151 fetch 1 ,mem_lch_code -0x25f0 005152 compare 3 ,pdata ,3 -0x25f1 005153 branch process_dmh_cont ,true -0x25f2 005154 fetch 2 ,mem_len -0x25f3 005155 branch process_dmh_cont ,blank -0x25f4 005156 bpatch patch0c_0 ,mem_patch0c -0x25f5 005157 fetch 1 ,mem_l2cap_rxbuff_new -0x25f6 005158 beq 1 ,process_l2cap_pass_crc_buff1 -0x25f7 005159 beq 2 ,process_l2cap_pass_crc_buff2 -0x25f8 005160 branch assert -: 005161 process_l2cap_pass_crc_buff1: -0x25f9 005162 fetch 2 ,mem_l2cap_rxbuff1_len -0x25fa 005163 fetcht 2 ,mem_len -0x25fb 005164 iadd temp ,pdata -0x25fc 005165 store 2 ,mem_l2cap_rxbuff1_len -0x25fd 005166 beq 0 ,assert -0x25fe 005167 fetcht 2 ,mem_l2cap_rxbuff1 -0x25ff 005168 increase 4 ,temp -0x2600 005169 isub temp ,null -0x2601 005170 call l2cap_buff1_inuse ,zero -0x2602 005171 branch process_dmh_cont -: 005172 process_l2cap_pass_crc_buff2: -0x2603 005173 fetch 2 ,mem_l2cap_rxbuff2_len -0x2604 005174 fetcht 2 ,mem_len -0x2605 005175 iadd temp ,pdata -0x2606 005176 store 2 ,mem_l2cap_rxbuff2_len -0x2607 005177 beq 0 ,assert -0x2608 005178 fetcht 2 ,mem_l2cap_rxbuff2 -0x2609 005179 add temp ,4 ,temp -0x260a 005180 isub temp ,null -0x260b 005181 call l2cap_buff2_inuse ,zero -0x260c 005182 branch process_dmh_cont -: 005183 process_dmh_cont: -0x260d 005184 bpatch patch0c_1 ,mem_patch0c -0x260e 005185 fetcht 1 ,mem_state_map -0x260f 005186 fetch 1 ,mem_lch_code -0x2610 005187 compare 3 ,pdata ,0x03 -0x2611 005188 setflag true ,smap_rxlmp ,temp -0x2612 005189 nsetflag true ,smap_rxl2cap ,temp -0x2613 005190 storet 1 ,mem_state_map -0x2614 005191 nbranch process_dmh_cont_rxbuf_not_use ,true -0x2615 005192 set1 mark_rxbuf_inuse ,mark -: 005193 process_dmh_cont_rxbuf_not_use: -0x2616 005194 bmark0 mark_testmode ,ack_payload -0x2617 005195 isolate1 smap_rxlmp ,temp -0x2618 005196 branch ack_payload ,true -0x2619 005197 fetch 2 ,mem_tst_pktcnt_crc -0x261a 005198 increase 1 ,pdata -0x261b 005199 store 2 ,mem_tst_pktcnt_crc -0x261c 005200 set1 mark_loopback ,mark -0x261d 005201 set0 smap_rxl2cap ,temp -0x261e 005202 set0 mark_rxbuf_inuse ,mark -0x261f 005203 storet 1 ,mem_state_map -: 005204 ack_payload: -0x2620 005205 bpatch patch0c_2 ,mem_patch0c -0x2621 005206 fetcht 1 ,mem_temp_arq -0x2622 005207 fetch 1 ,mem_arq -0x2623 005208 set1 arqnx ,pdata -0x2624 005209 isolate1 seqn ,temp -0x2625 005210 setflag true ,seqn ,pdata -0x2626 005211 isolate1 mark_am_addr_broadcast ,mark -0x2627 005212 setflag true ,bcast1 ,pdata -0x2628 005213 store 1 ,mem_arq -0x2629 005214 fetch 2 ,mem_len -0x262a 005215 nbranch end_of_packet ,blank -0x262b 005216 fetch 1 ,mem_state_map -0x262c 005217 set0 smap_rxl2cap ,pdata -0x262d 005218 store 1 ,mem_state_map -0x262e 005219 fetch 1 ,mem_lch_code -0x262f 005220 compare 0x01 ,pdata ,0x07 -0x2630 005222 branch end_of_packet -: 005224 error_header: -0x2631 005225 bpatch patch0c_3 ,mem_patch0c -0x2632 005226 disable match -0x2633 005227 fetch 2 ,mem_rx_hec_err -0x2634 005228 increase 1 ,pdata -0x2635 005229 store 2 ,mem_rx_hec_err -0x2636 005230 branch end_of_packet -: 005231 error_payload_crc: -0x2637 005232 fetch 2 ,mem_rx_crc_err -0x2638 005233 increase 1 ,pdata -0x2639 005234 store 2 ,mem_rx_crc_err -0x263a 005235 call discard_pkt -0x263b 005236 bmark0 mark_testmode ,error_payload -0x263c 005237 set1 mark_loopback ,mark -: 005238 error_payload: -0x263d 005239 branch end_of_packet -: 005241 discard_pkt: -0x263e 005242 bpatch patch0c_4 ,mem_patch0c -0x263f 005243 fetch 1 ,mem_lch_code -0x2640 005244 compare 3 ,pdata ,0x03 -0x2641 005245 nbranch discard_pkt_l2cap ,true -: 005246 discard_pkt_lmp: -0x2642 005247 fetcht 1 ,mem_state_map -0x2643 005248 set0 smap_rxlmp ,temp -0x2644 005249 storet 1 ,mem_state_map -0x2645 005250 rtn -: 005251 discard_pkt_l2cap: -0x2646 005254 fetcht 1 ,mem_state_map -0x2647 005255 set0 smap_rxl2cap ,temp -0x2648 005256 storet 1 ,mem_state_map -0x2649 005257 branch h4_send_acl_trigger_clear -: 005259 redundant_payload: -0x264a 005260 fetch 1 ,mem_arq -0x264b 005261 set1 arqnx ,pdata -0x264c 005262 store 1 ,mem_arq -: 005263 end_of_packet: -0x264d 005264 bpatch patch0c_5 ,mem_patch0c -0x264e 005265 disable encode_fec0 -0x264f 005266 disable encode_fec2 -0x2650 005267 disable decode_fec0 -0x2651 005268 disable decode_fec2 -0x2652 005269 disable enable_crc -0x2653 005270 disable encrypt -0x2654 005271 disable enable_white -0x2655 005272 branch shutdown_radio ,is_rx -0x2656 005273 until null ,tx_clear -0x2657 005274 nop 100 -0x2658 005275 branch shutdown_radio -: 005277 process_fhs: -0x2659 005278 bpatch patch0c_6 ,mem_patch0c -0x265a 005279 enable enable_crc -0x265b 005280 enable decode_fec2 -0x265c 005281 parse demod ,bucket ,72 -0x265d 005282 isolate1 58 ,pdata -0x265e 005283 setflag true ,mark_fhs_eir ,mark -0x265f 005284 copy bt_adr ,temp -0x2660 005285 ialigned bt_adr -0x2661 005286 ialigned fhs0 -0x2662 005287 pulse recalc -0x2663 005288 setsect 2 ,0xfffff -0x2664 005289 setsect 3 ,0x0ffff -0x2665 005290 nop 32 -0x2666 005291 iverify fhs_parity -0x2667 005292 deposit lap -0x2668 005293 store 3 ,extm_lap -0x2669 005294 deposit uap -0x266a 005295 store 1 ,extm_uap -0x266b 005296 copy temp ,bt_adr -0x266c 005297 branch fhs_parity_ok ,true -0x266d 005298 branch error_payload -: 005299 fhs_parity_ok: -0x266e 005300 bpatch patch0c_7 ,mem_patch0c -0x266f 005301 parse demod ,bucket ,72 -0x2670 005302 ialigned fhs1 -0x2671 005303 ialigned am_addr -0x2672 005304 ialigned nap -0x2673 005305 ialigned regb -0x2674 005306 force 0 ,pdata -0x2675 005307 parse demod ,bucket ,16 -0x2676 005308 branch error_payload ,crc_failed -0x2677 005309 setarg 0x0ffffffc -0x2678 005310 iand regb ,pdata -0x2679 005311 store 4 ,mem_clke_bt -0x267a 005312 deposit fhs_class -0x267b 005313 store 3 ,extm_class -0x267c 005314 deposit fhs_misc -0x267d 005315 store 1 ,extm_fhs_misc -0x267e 005316 deposit am_addr -0x267f 005317 store 1 ,extm_newconn_am_addr -0x2680 005318 deposit nap -0x2681 005319 store 2 ,extm_nap -0x2682 005320 deposit bt_clk -0x2683 005321 inject rxf ,32 -0x2684 005322 compare type_fhs ,type ,0x0f -0x2685 005323 setflag true ,mark_fhs_already_good ,mark -0x2686 005324 branch end_of_packet -: 005326 clear_got_tx: -0x2687 005327 bpatch patch0d_0 ,mem_patch0d -0x2688 005328 fetch 1 ,mem_arq -0x2689 005329 rtnbit0 wack -0x268a 005330 set0 wack ,pdata -0x268b 005331 setflip seqnx ,pdata -0x268c 005332 store 1 ,mem_arq -0x268d 005333 fetch 1 ,mem_last_type -0x268e 005334 beq type_lmp ,clear_got_txlmp -0x268f 005335 rtneq type_hv3 -0x2690 005336 fetch 1 ,mem_op -0x2691 005337 rtnbit0 op_txl2cap ,pdata -0x2692 005338 set0 op_txl2cap ,pdata -0x2693 005339 set1 op_pkt_comp ,pdata -0x2694 005340 store 1 ,mem_op -0x2695 005341 set0 mark_tx_l2cap ,mark -0x2696 005342 fetch 2 ,mem_l2cap_tx_multi_offset -0x2697 005343 nrtn blank -0x2698 005344 fetch 1 ,mem_op -0x2699 005345 set0 op_pkt_comp ,pdata -0x269a 005346 store 1 ,mem_op -0x269b 005347 branch l2cap_malloc_free -: 005349 clear_got_txlmp: -0x269c 005350 bpatch patch0d_1 ,mem_patch0d -0x269d 005351 fetch 1 ,mem_lmo_header_opcode -0x269e 005352 rshift pdata ,pdata -0x269f 005353 beq lmp_start_encryption_req ,start_encryption -0x26a0 005354 beq lmp_stop_encryption_req ,stop_encryption -0x26a1 005355 beq lmp_unsniff_req ,sniff_exit -0x26a2 005356 beq lmp_escape ,clear_lmp_escape -0x26a3 005357 rtnne lmp_accepted -0x26a4 005358 fetch 1 ,mem_lmo_payload -0x26a5 005359 beq lmp_sco_link_req ,sco_link_req_by_slave -0x26a6 005360 beq lmp_start_encryption_req ,clear_send_setup_complete -0x26a7 005361 rtn -: 005363 clear_lmp_escape: -0x26a8 005364 fetch 1 ,mem_lmo_payload -0x26a9 005365 set1 7 ,pdata -0x26aa 005366 rtn -: 005367 clear_send_setup_complete: -0x26ab 005368 rtn master -0x26ac 005369 fetch 1 ,mem_state -0x26ad 005370 rtnbit1 state_conn_comp -0x26ae 005371 jam lmp_setup_complete ,mem_lmo_opcode2 -0x26af 005372 rtn -: 005375 sco_link_req_by_slave: -0x26b0 005376 rtn master -0x26b1 005377 fetch 1 ,mem_mode -0x26b2 005378 isolate1 send_sco_when_slave ,pdata -0x26b3 005379 branch clean_mem_mode ,true -0x26b4 005381 rtn -: 005382 clean_mem_mode: -0x26b5 005383 set0 send_sco_when_slave ,pdata -0x26b6 005384 store 1 ,mem_mode -0x26b7 005385 rtn -: 005387 start_encryption: -0x26b8 005388 bpatch patch0d_2 ,mem_patch0d -0x26b9 005389 fetch 1 ,mem_state_map -0x26ba 005390 set1 smap_encryption ,pdata -0x26bb 005391 store 1 ,mem_state_map -0x26bc 005392 jam 1 ,core_encrypt -0x26bd 005393 fetch 1 ,mem_state -0x26be 005394 isolate1 state_conn_comp ,pdata -0x26bf 005395 rtn -: 005397 stop_encryption: -0x26c0 005398 bpatch patch0d_3 ,mem_patch0d -0x26c1 005399 fetch 1 ,mem_state_map -0x26c2 005400 set0 smap_encryption ,pdata -0x26c3 005401 store 1 ,mem_state_map -0x26c4 005402 jam 0 ,core_encrypt -0x26c5 005403 rtn -: 005406 sniff_init: -0x26c6 005407 bpatch patch0d_4 ,mem_patch0d -0x26c7 005408 copy clkn_bt ,pdata -0x26c8 005409 store 4 ,mem_lpm_delay_after_sniff -0x26c9 005410 add clkn_bt ,3 ,rega -0x26ca 005411 branch sniff_init_master ,master -0x26cb 005412 add clke_bt ,3 ,rega -: 005413 sniff_init_master: -0x26cc 005414 fetcht 2 ,mem_tsniff -0x26cd 005415 deposit rega -0x26ce 005416 set0 27 ,pdata -0x26cf 005417 idiv temp -0x26d0 005418 fetch 2 ,mem_dsniff -0x26d1 005419 call wait_div_end -0x26d2 005420 remainder regc -0x26d3 005421 isub regc ,pdata -0x26d4 005422 branch sniff_init_nowrap ,positive -0x26d5 005423 iadd temp ,pdata -: 005424 sniff_init_nowrap: -0x26d6 005425 iadd rega ,pdata -0x26d7 005426 store 4 ,mem_sniff_anchor -0x26d8 005427 jam switch_flag_init ,mem_switch_flag -0x26d9 005428 fetch 1 ,mem_state -0x26da 005429 set1 state_insniff ,pdata -0x26db 005430 store 1 ,mem_state -0x26dc 005431 fetch 1 ,mem_sniff_attempt -0x26dd 005432 store 1 ,mem_current_sniff_attempt -0x26de 005433 setarg 0 -0x26df 005434 store 3 ,mem_sniff_rcv -0x26e0 005435 store 3 ,mem_sniff_lost -0x26e1 005436 store 1 ,mem_sniff_unint_lost -0x26e2 005437 jam bt_evt_enter_sniff ,mem_fifo_temp -0x26e3 005438 call ui_ipc_send_event -0x26e4 005439 fetch 2 ,mem_rx_window_sniff -0x26e5 005440 store 2 ,mem_rx_window -0x26e6 005441 nrtn master -0x26e7 005442 add am_addr ,-1 ,queue -0x26e8 005443 rtn -: 005445 sniff_exit: -0x26e9 005446 bpatch patch0d_5 ,mem_patch0d -0x26ea 005447 fetch 1 ,mem_state -0x26eb 005448 rtnbit0 state_insniff -0x26ec 005449 set0 state_insniff ,pdata -0x26ed 005450 store 1 ,mem_state -0x26ee 005451 fetch 2 ,mem_rx_window_init -0x26ef 005452 store 2 ,mem_rx_window -0x26f0 005453 disable wake -0x26f1 005454 jam bt_evt_exit_sniff ,mem_fifo_temp -0x26f2 005455 branch ui_ipc_send_event -: 005458 check_attempt: -0x26f3 005459 bpatch patch0d_6 ,mem_patch0d -0x26f4 005460 enable attempt -0x26f5 005461 fetch 1 ,mem_state -0x26f6 005462 bbit1 state_insniff ,check_attempt_sniff -0x26f7 005463 rtnmark1 mark_testmode -0x26f8 005464 fetch 1 ,mem_arq -0x26f9 005465 rtnbit1 wack -0x26fa 005466 fetch 1 ,mem_lmp_to_send -0x26fb 005467 nrtn blank -0x26fc 005468 fetch 1 ,mem_op -0x26fd 005469 rtnbit1 op_txl2cap -: 005470 check_attempt_nomore: -0x26fe 005471 force 0 ,pdata -0x26ff 005472 rtn -: 005474 check_attempt_sniff: -0x2700 005475 bbit0 state_insco ,check_attempt_not_sco -0x2701 005476 fetch 1 ,mem_current_sniff_attempt -0x2702 005477 beq 2 ,check_attempt_sniff_restore_sco -0x2703 005478 fetch 1 ,mem_arq -0x2704 005479 bbit1 wack ,check_attempt_notimeout -0x2705 005480 bmark0 mark_esco_rxok ,check_attempt_notimeout -: 005481 check_attempt_sniff_restore_sco: -0x2706 005482 nbranch check_attempt_notimeout ,master -0x2707 005483 fetch 1 ,mem_lmp_to_send -0x2708 005484 nbranch check_attempt_notimeout ,blank -: 005485 check_attempt_sco_master: -0x2709 005486 fetch 1 ,mem_sco_poll -0x270a 005487 increase -1 ,pdata -0x270b 005488 store 1 ,mem_sco_poll -0x270c 005489 nbranch check_attempt_nomore ,blank -0x270d 005490 jam param_sco_poll ,mem_sco_poll -0x270e 005491 branch check_attempt_notimeout -: 005498 check_attempt_not_sco: -0x270f 005499 fetch 1 ,mem_current_sniff_attempt -0x2710 005500 bne 1 ,check_attempt_notimeout -0x2711 005501 fetch 1 ,mem_current_sniff_timeout -0x2712 005502 branch check_attempt_notimeout ,blank -0x2713 005503 increase -1 ,pdata -0x2714 005504 store 1 ,mem_current_sniff_timeout -0x2715 005505 fetch 1 ,mem_arq -0x2716 005506 rtnbit1 wack -0x2717 005507 nrtn match -: 005508 check_attempt_notimeout: -0x2718 005509 fetch 1 ,mem_current_sniff_attempt -0x2719 005510 increase -1 ,pdata -0x271a 005511 store 1 ,mem_current_sniff_attempt -0x271b 005512 rtn -: 005523 sniff_check_window: -0x271c 005524 bpatch patch0d_7 ,mem_patch0d -0x271d 005525 disable swfine -0x271e 005526 copy temp ,stop_watch -0x271f 005527 call context_search_sniff_window -0x2720 005528 disable user -0x2721 005529 nrtn zero -0x2722 005530 force 0 ,stop_watch -0x2723 005531 enable user -0x2724 005532 rtn -: 005535 check_esco_amaddr: -0x2725 005536 fetch 1 ,mem_esco_addr -0x2726 005537 icompare 0xff ,am_addr -0x2727 005538 rtn -: 005541 parse_l2cap: -0x2728 005542 bpatch patch0e_0 ,mem_patch0e -0x2729 005543 set0 mark_rxbuf_inuse ,mark -: 005544 parse_l2cap_cont: -0x272a 005545 jam l2cap_rx_clear ,mem_l2cap_rx_done -0x272b 005546 fetch 1 ,mem_l2cap_rxbuff_inuse -0x272c 005547 rtn blank -0x272d 005548 isolate1 l2cap_inuse_buff1 ,pdata -0x272e 005549 arg mem_l2cap_rxbuff1 ,contr -0x272f 005550 call process_rx_l2cap_pkt ,true -0x2730 005551 bpatch patch0e_1 ,mem_patch0e -0x2731 005552 fetch 1 ,mem_l2cap_rx_done -0x2732 005553 beq l2cap_rx_done ,parse_l2cap_release_buff1 -0x2733 005555 jam l2cap_rx_clear ,mem_l2cap_rx_done -0x2734 005556 fetch 1 ,mem_l2cap_rxbuff_inuse -0x2735 005557 rtnbit0 l2cap_inuse_buff2 -0x2736 005558 arg mem_l2cap_rxbuff2 ,contr -0x2737 005559 call process_rx_l2cap_pkt -0x2738 005560 fetch 1 ,mem_l2cap_rx_done -0x2739 005561 beq l2cap_rx_done ,parse_l2cap_release_buff2 -0x273a 005562 rtn -: 005564 parse_l2cap_release_buff1: -0x273b 005565 fetch 1 ,mem_l2cap_rxbuff_inuse -0x273c 005566 set0 l2cap_inuse_buff1 ,pdata -0x273d 005567 store 1 ,mem_l2cap_rxbuff_inuse -0x273e 005568 setarg 0 -0x273f 005569 store 2 ,mem_l2cap_rxbuff1_len -0x2740 005570 rtn -: 005571 parse_l2cap_release_buff2: -0x2741 005572 fetch 1 ,mem_l2cap_rxbuff_inuse -0x2742 005573 set0 l2cap_inuse_buff2 ,pdata -0x2743 005574 store 1 ,mem_l2cap_rxbuff_inuse -0x2744 005575 setarg 0 -0x2745 005576 store 2 ,mem_l2cap_rxbuff2_len -0x2746 005577 rtn -: 005579 l2cap_buff1_inuse: -0x2747 005580 fetch 1 ,mem_l2cap_rxbuff_inuse -0x2748 005581 set1 l2cap_inuse_buff1 ,pdata -0x2749 005582 store 1 ,mem_l2cap_rxbuff_inuse -0x274a 005583 rtn -: 005585 l2cap_buff2_inuse: -0x274b 005586 fetch 1 ,mem_l2cap_rxbuff_inuse -0x274c 005587 set1 l2cap_inuse_buff2 ,pdata -0x274d 005588 store 1 ,mem_l2cap_rxbuff_inuse -0x274e 005589 rtn -: 005595 slave_send_access: -0x274f 005596 bpatch patch0e_2 ,mem_patch0e -0x2750 005597 add clke_bt ,1 ,bt_clk -0x2751 005598 call fetch_extm_bt_adr -0x2752 005599 force 0x03 ,freq_mode -0x2753 005600 call tx_radio_freq -0x2754 005601 call start_transmitter -0x2755 005602 call start_tx_external -0x2756 005603 branch send_access_word -: 005606 slave_conn_send_packet: -0x2757 005607 bpatch patch0e_3 ,mem_patch0e -0x2758 005608 call rf_setup_time_slave_slot -0x2759 005609 deposit clke_bt -0x275a 005610 fetcht 4 ,mem_next_btclk -0x275b 005611 isub temp ,pdata -0x275c 005612 rtnne 1 -0x275d 005613 compare type_null ,type ,0x1f -0x275e 005614 nbranch slave_conn_send_access ,true -0x275f 005615 fetch 1 ,mem_rx_type -0x2760 005616 rtn blank -: 005617 slave_conn_send_access: -0x2761 005618 call slave_send_access -: 005619 transmit_packet: -0x2762 005620 compare type_id ,type ,0x1f -0x2763 005621 branch end_of_packet ,true -0x2764 005622 rshift bt_clk ,temp -0x2765 005623 or temp ,0x40 ,white_init -: 005624 transmit_packet_whitened: -0x2766 005625 bpatch patch0e_4 ,mem_patch0e -0x2767 005626 enable enable_white -0x2768 005627 enable enable_hec -0x2769 005628 enable encode_fec1 -0x276a 005629 set0 mark_longpacket ,mark -0x276b 005630 deposit am_addr -0x276c 005631 inject mod ,3 -0x276d 005632 deposit type -0x276e 005633 inject mod ,4 -0x276f 005634 fetch 1 ,mem_arq -0x2770 005635 inject bucket ,4 -0x2771 005636 inject mod ,3 -0x2772 005637 enable enable_parity -0x2773 005638 inject mod ,8 -0x2774 005639 disable encode_fec1 -0x2775 005640 disable enable_parity -0x2776 005641 disable enable_hec -0x2777 005642 set0 psk3m ,radio_ctrl -0x2778 005643 arg 0 ,temp -0x2779 005644 call reserve_slot -0x277a 005645 bpatch patch0e_5 ,mem_patch0e -0x277b 005646 and type ,0x1f ,pdata -0x277c 005647 beq type_lmp ,transmit_lmp -0x277d 005648 beq type_null ,end_of_packet -0x277e 005649 beq type_poll ,end_of_packet -0x277f 005650 beq type_fhs ,transmit_fhs -0x2780 005651 beq type_dm1 ,transmit_dm1 -0x2781 005652 beq type_dh1 ,transmit_dh1 -0x2782 005653 beq type_hv3 ,transmit_hev -0x2783 005654 beq type_3dh1 ,transmit_3dh1 -0x2784 005655 arg 4 ,temp -0x2785 005656 call reserve_slot -0x2786 005657 beq type_dm3 ,transmit_dm3 -0x2787 005658 beq type_dh3 ,transmit_dh3 -0x2788 005659 arg 8 ,temp -0x2789 005660 call reserve_slot -0x278a 005661 beq type_dh5 ,transmit_dh5 -0x278b 005662 branch transmit_dm5 -: 005665 transmit_hev: -0x278c 005666 bpatch patch0e_6 ,mem_patch0e -0x278d 005667 enable encode_fec0 -0x278e 005668 enable enable_crc -0x278f 005669 enable encrypt -0x2790 005670 force 30 ,loopcnt -0x2791 005671 arg mem_sco_obuf ,contr -: 005672 transmit_ev_loop: -0x2792 005673 ifetch 1 ,contr -0x2793 005674 inject mod ,8 -0x2794 005675 loop transmit_ev_loop -0x2795 005676 bmark1 mark_esco ,transmit_end -0x2796 005677 branch end_of_packet -: 005679 transmit_fhs: -0x2797 005680 bpatch patch0e_7 ,mem_patch0e -0x2798 005681 fetch 1 ,mem_fhs_am_addr -0x2799 005682 icopy am_addr -0x279a 005683 fetch 1 ,mem_fhs_misc -0x279b 005684 icopy fhs_misc -0x279c 005685 fetch 3 ,mem_class -0x279d 005686 icopy fhs_class -0x279e 005687 fetch 2 ,mem_nap -0x279f 005688 icopy nap -0x27a0 005689 enable enable_crc -0x27a1 005690 enable encode_fec2 -0x27a2 005691 copy bt_adr ,rega -0x27a3 005692 call fetch_self_bt_adr -0x27a4 005693 pulse recalc -0x27a5 005694 nop 32 -0x27a6 005695 copy bt_clk ,timeup -0x27a7 005696 fetch 4 ,mem_clkn_bt -0x27a8 005697 icopy bt_clk -0x27a9 005698 preload fhs0 -0x27aa 005699 set1 58 ,pdata -0x27ab 005700 inject mod ,72 -0x27ac 005701 preload fhs1 -0x27ad 005702 inject mod ,72 -0x27ae 005703 copy timeup ,bt_clk -0x27af 005704 copy rega ,bt_adr -0x27b0 005705 enable enable_parity -0x27b1 005706 inject mod ,16 -0x27b2 005707 disable enable_parity -0x27b3 005708 branch end_of_packet -: 005710 transmit_lmp: -0x27b4 005711 bpatch patch0f_0 ,mem_patch0f -0x27b5 005712 enable encrypt -0x27b6 005713 enable enable_crc -0x27b7 005714 enable encode_fec2 -0x27b8 005715 fetch 1 ,mem_lmo_header_length -0x27b9 005716 and pdata ,0x1f8 ,temp -0x27ba 005717 arg mem_lmo_header_length ,contr -0x27bb 005718 increase 8 ,temp -: 005719 transmit_lmp_loop: -0x27bc 005720 add temp ,-72 ,regc -0x27bd 005721 nbranch transmit_lmp_finish ,positive -0x27be 005722 ifetch 9 ,contr -0x27bf 005723 inject mod ,72 -0x27c0 005724 copy regc ,temp -0x27c1 005725 branch transmit_lmp_loop -: 005726 transmit_lmp_finish: -0x27c2 005727 ifetch 9 ,contr -0x27c3 005728 iinject mod ,temp -0x27c4 005729 branch transmit_end -: 005731 transmit_dm1: -0x27c5 005732 enable encode_fec2 -0x27c6 005733 branch transmit_dmh -: 005734 transmit_dm3: -: 005735 transmit_dm5: -0x27c7 005736 enable encode_fec2 -0x27c8 005737 set1 mark_longpacket ,mark -0x27c9 005738 branch transmit_dmh -: 005740 transmit_3dh1: -0x27ca 005741 set1 psk3m ,radio_ctrl -: 005742 transmit_dh1: -0x27cb 005743 enable encode_fec0 -0x27cc 005744 branch transmit_dmh -: 005746 transmit_dh3: -: 005747 transmit_dh5: -0x27cd 005748 set1 psk3m ,radio_ctrl -0x27ce 005749 enable encode_fec0 -0x27cf 005750 set1 mark_longpacket ,mark -: 005752 transmit_dmh: -0x27d0 005753 bpatch patch0f_1 ,mem_patch0f -0x27d1 005754 fetch 1 ,mem_state_map -0x27d2 005755 bbit0 smap_edr ,transmit_noedr -0x27d3 005756 sub type ,3 ,null -0x27d4 005757 branch transmit_noedr ,positive -0x27d5 005758 disable encrypt -0x27d6 005759 disable encode_fec2 -0x27d7 005760 enable encode_fec0 -0x27d8 005761 disable enable_white -0x27d9 005762 set1 psk ,radio_ctrl -0x27da 005763 isolate1 psk3m ,radio_ctrl -0x27db 005764 branch transmit_edr3m ,true -0x27dc 005765 setarg 0xabeee -0x27dd 005766 inject mod ,20 -0x27de 005767 branch transmit_edr_sync_end -: 005768 transmit_edr3m: -0x27df 005769 setarg 0x5faeba -0x27e0 005770 inject mod ,24 -0x27e1 005771 setarg 0x12 -0x27e2 005772 inject mod ,6 -: 005773 transmit_edr_sync_end: -0x27e3 005774 enable enable_white -0x27e4 005775 set1 mark_longpacket ,mark -: 005776 transmit_noedr: -0x27e5 005777 enable encrypt -0x27e6 005778 enable enable_crc -0x27e7 005779 bmark1 mark_loopback ,transmit_loopback -0x27e8 005780 fetch 1 ,mem_tx_lch -0x27e9 005781 inject mod ,3 -0x27ea 005782 fetch 2 ,mem_tx_len -0x27eb 005783 iforce loopcnt -0x27ec 005784 bmark1 mark_longpacket ,transmit_long -0x27ed 005785 inject mod ,5 -0x27ee 005786 branch transmit_stuff -: 005787 transmit_long: -0x27ef 005788 inject mod ,13 -: 005789 transmit_stuff: -0x27f0 005790 deposit loopcnt -0x27f1 005791 branch transmit_end ,blank -0x27f2 005792 fetch 2 ,mem_txptr -0x27f3 005793 iforce contr -: 005794 transmit_stuff_loop: -0x27f4 005795 ifetch 1 ,contr -0x27f5 005796 inject mod ,8 -0x27f6 005797 loop transmit_stuff_loop -: 005800 transmit_end: -0x27f7 005801 enable enable_parity -0x27f8 005802 inject mod ,16 -0x27f9 005803 disable enable_parity -0x27fa 005804 call set_wait_ack -0x27fb 005805 fetch 1 ,mem_state_map -0x27fc 005806 bbit0 smap_edr ,end_of_packet -0x27fd 005807 force 0 ,pdata -0x27fe 005808 inject mod ,6 -0x27ff 005809 branch end_of_packet -: 005812 transmit_loopback: -0x2800 005813 bpatch patch0f_2 ,mem_patch0f -0x2801 005814 bmark1 mark_longpacket ,transmit_loopback_long -: 005815 transmit_loopback_short: -0x2802 005816 fetch 1 ,mem_lch_code -0x2803 005817 inject mod ,3 -0x2804 005818 fetch 1 ,mem_len -0x2805 005819 iforce regc -0x2806 005820 inject mod ,5 -0x2807 005821 branch transmit_loopback_cont -: 005822 transmit_loopback_long: -0x2808 005823 fetch 1 ,mem_lch_code -0x2809 005824 inject mod ,3 -0x280a 005825 fetch 2 ,mem_len -0x280b 005826 iforce regc -0x280c 005827 inject mod ,13 -: 005828 transmit_loopback_cont: -0x280d 005829 arg mem_rxbuf ,contr -: 005830 transmit_loopback_loop: -0x280e 005831 copy regc ,null -0x280f 005832 branch transmit_loopback_end ,zero -0x2810 005833 ifetch 1 ,contr -0x2811 005834 inject mod ,8 -0x2812 005835 increase -1 ,regc -0x2813 005836 branch transmit_loopback_loop -: 005837 transmit_loopback_end: -0x2814 005838 fetch 2 ,mem_tst_pktcnt_dmh -0x2815 005839 increase 1 ,pdata -0x2816 005840 store 2 ,mem_tst_pktcnt_dmh -0x2817 005841 branch transmit_end -: 005844 apply_switch_clke: -0x2818 005845 fetch 4 ,mem_clke_bt -0x2819 005846 add pdata ,7 ,rega -0x281a 005847 fetch 2 ,mem_slot_offset -0x281b 005848 nbranch apply_switch_nozero ,blank -0x281c 005849 increase -3 ,rega -0x281d 005850 branch apply_switch_wait_loop -: 005851 apply_switch_nozero: -0x281e 005852 mul32 pdata ,12 ,pdata -0x281f 005853 hfetcht 2 ,core_halfslot -0x2820 005854 increase 1 ,temp -: 005855 apply_switch_loop: -0x2821 005856 isub temp ,pdata -0x2822 005857 nbranch apply_switch_bt ,positive -0x2823 005858 increase -1 ,rega -0x2824 005859 branch apply_switch_loop -: 005860 apply_switch_bt: -0x2825 005861 sub pdata ,0 ,pdata -: 005862 apply_switch_wait_loop: -0x2826 005863 until null ,oneslot -0x2827 005864 compare 0 ,clkn_bt ,3 -0x2828 005865 nbranch apply_switch_wait_loop ,true -0x2829 005866 iforce clke_rt -0x282a 005867 copy rega ,clke_bt -0x282b 005868 iforce clke_rt -0x282c 005869 rtn -: 005872 calc_slot_offset: -0x282d 005873 bpatch patch0f_3 ,mem_patch0f -0x282e 005874 until null ,halfslot -0x282f 005875 deposit clke -0x2830 005876 iforce contr -0x2831 005877 rshift16 ,pdata ,pdata -0x2832 005878 isub clkn_bt ,loopcnt -0x2833 005879 and_into 3 ,loopcnt -0x2834 005880 nbranch calc_bt_portion ,zero -0x2835 005881 force 0 ,pdata -0x2836 005882 branch calc_skip_bt -: 005883 calc_bt_portion: -0x2837 005884 arg 3750 ,temp -0x2838 005885 force 0 ,pdata -: 005886 calc_slot_offset_loop: -0x2839 005887 iadd temp ,pdata -0x283a 005888 loop calc_slot_offset_loop -: 005889 calc_skip_bt: -0x283b 005890 iadd contr ,pdata -0x283c 005891 div pdata ,12 -0x283d 005892 call wait_div_end -0x283e 005893 quotient pdata -0x283f 005894 store 2 ,mem_slot_offset -0x2840 005895 rtn -: 005897 calc_clke_offset: -0x2841 005898 bpatch patch0f_4 ,mem_patch0f -0x2842 005899 deposit clke -0x2843 005900 copy clkn ,temp -0x2844 005901 isub temp ,null -0x2845 005902 nsetflag positive ,44 ,pdata -0x2846 005903 isub temp ,temp -0x2847 005904 setarg 3750 -0x2848 005905 isolate0 15 ,temp -0x2849 005906 branch calc_clke_pos ,true -0x284a 005907 setarg -61786 -0x284b 005908 iadd temp ,temp -: 005909 calc_clke_pos: -0x284c 005910 storet 6 ,mem_le_clk_offset -0x284d 005911 rtn le -0x284e 005912 storet 6 ,mem_clk_offset -0x284f 005913 rtn -: 005915 calc_clke: -0x2850 005916 disable clknt -0x2851 005917 fetch 6 ,mem_le_clk_offset -0x2852 005918 branch calc_clke2 ,le -0x2853 005919 fetch 6 ,mem_clk_offset -: 005920 calc_clke2: -0x2854 005921 iadd clkn ,alarm -0x2855 005922 increase 10 ,alarm -0x2856 005923 setarg 3750 -0x2857 005924 isub alarm ,pdata -0x2858 005925 isolate0 15 ,pdata -0x2859 005926 branch calc_clke_pos_adj ,true -0x285a 005927 setarg 0xf15a -0x285b 005928 iadd alarm ,alarm -: 005929 calc_clke_pos2: -0x285c 005930 copy alarm ,clke -0x285d 005931 rtn -: 005932 calc_clke_pos_adj: -0x285e 005933 force 0 ,null -0x285f 005934 branch calc_clke_pos2 -: 005941 calc_radio_freq: -0x2860 005942 bpatch patch0f_5 ,mem_patch0f -0x2861 005943 call set_sync_on -0x2862 005944 copy bt_clk ,pdata -0x2863 005945 and_into 0x180 ,pdata -0x2864 005946 compare 3 ,freq_mode ,0x07 -0x2865 005947 nbranch freq_not_connection ,true -0x2866 005948 rshift3 pdata ,pdata -0x2867 005949 iadd freq_index ,pdata -0x2868 005950 branch do_hop_mod_now -: 005951 freq_not_connection: -0x2869 005952 copy freq_index ,pdata -: 005953 do_hop_mod_now: -0x286a 005954 div pdata ,79 -0x286b 005955 pulse recalc -0x286c 005956 call wait_div_end -0x286d 005957 remainder rega -0x286e 005958 add rega ,-40 ,temp -0x286f 005959 branch odd_half ,positive -0x2870 005960 lshift rega ,temp -0x2871 005961 branch freq_result -: 005962 odd_half: -0x2872 005963 lshift temp ,temp -0x2873 005964 increase 1 ,temp -: 005965 freq_result: -0x2874 005966 bpatch patch0f_6 ,mem_patch0f -0x2875 005967 fetch 1 ,mem_mode -0x2876 005968 bbit0 afh_change ,afh_process_con -: 005969 afh_process_0: -0x2877 005970 fetch 4 ,mem_afh_instant -0x2878 005971 isub bt_clk ,null -0x2879 005972 branch afh_process_con ,positive -0x287a 005973 call afh_clear -0x287b 005974 fetch 1 ,mem_afh_new_mod -0x287c 005975 rtn blank -0x287d 005976 fetch 1 ,mem_mode -0x287e 005977 set1 afh_enable ,pdata -0x287f 005978 store 1 ,mem_mode -0x2880 005979 fetch 5 ,mem_afh_map_new -0x2881 005980 store 5 ,mem_afh_map_lo -0x2882 005981 ifetch 5 ,contr -0x2883 005982 store 5 ,mem_afh_map_hi -0x2884 005983 call afh_process_freq_map -: 005984 afh_process_con: -0x2885 005985 fetch 1 ,mem_mode -0x2886 005986 rtnbit0 afh_enable -0x2887 005987 isolate1 1 ,bt_clk -0x2888 005988 branch afh_same_channel ,true -0x2889 005989 rshift3 temp ,rega -0x288a 005990 and temp ,7 ,queue -0x288b 005991 setarg mem_afh_map_lo -0x288c 005992 iadd rega ,rega -0x288d 005993 ifetch 1 ,rega -0x288e 005994 qisolate0 pdata -0x288f 005995 branch afh_process_1 ,true -0x2890 005996 deposit temp -0x2891 005997 branch afh_process_end -: 005998 afh_process_1: -0x2892 005999 fetch 1 ,mem_afh_used -0x2893 006000 iforce regb -0x2894 006001 deposit bt_clk -0x2895 006002 and_into 0x180 ,pdata -0x2896 006003 rshift3 pdata ,pdata -0x2897 006004 iadd freq_index ,pdata -0x2898 006005 idiv regb -0x2899 006006 setarg mem_afh_map -0x289a 006007 call wait_div_end -0x289b 006008 remainder rega -0x289c 006009 iadd rega ,contr -0x289d 006010 ifetch 1 ,contr -: 006011 afh_process_end: -0x289e 006012 store 1 ,mem_afh_index -0x289f 006013 iforce temp -0x28a0 006014 rtn -: 006016 afh_same_channel: -0x28a1 006017 fetch 1 ,mem_afh_index -0x28a2 006018 iforce temp -0x28a3 006019 rtn -: 006021 afh_clear: -0x28a4 006022 fetch 1 ,mem_mode -0x28a5 006023 set0 afh_enable ,pdata -0x28a6 006024 set0 afh_change ,pdata -0x28a7 006025 store 1 ,mem_mode -0x28a8 006026 rtn -: 006032 afh_process_freq_map: -0x28a9 006033 bpatch patch0f_7 ,mem_patch0f -0x28aa 006034 arg mem_afh_map ,contw -0x28ab 006035 force 10 ,loopcnt -0x28ac 006036 call memset0 -0x28ad 006037 arg mem_afh_map ,contw -0x28ae 006038 force 0 ,regc -0x28af 006039 force 2 ,queue -: 006040 process_freq_3: -0x28b0 006041 fetch 5 ,mem_afh_map_lo -0x28b1 006042 iforce temp -0x28b2 006043 compare 2 ,queue ,0xff -0x28b3 006044 branch process_freq_1 ,true -0x28b4 006045 rshift temp ,temp -: 006046 process_freq_1: -0x28b5 006047 isolate0 0 ,temp -0x28b6 006048 branch process_freq_0 ,true -0x28b7 006049 deposit regc -0x28b8 006050 istore 1 ,contw -: 006051 process_freq_0: -0x28b9 006052 rshift2 temp ,temp -0x28ba 006053 increase 2 ,regc -0x28bb 006054 compare 40 ,regc ,0xfe -0x28bc 006055 nbranch process_freq_2 ,true -0x28bd 006056 fetch 5 ,mem_afh_map_hi -0x28be 006057 iforce temp -0x28bf 006058 compare 2 ,queue ,0xff -0x28c0 006059 branch process_freq_2 ,true -0x28c1 006060 rshift temp ,temp -: 006061 process_freq_2: -0x28c2 006062 sub regc ,78 ,null -0x28c3 006063 branch process_freq_1 ,positive -0x28c4 006064 force 1 ,regc -0x28c5 006065 increase -1 ,queue -0x28c6 006066 nbranch process_freq_3 ,zero -0x28c7 006067 arg mem_afh_map ,rega -0x28c8 006068 deposit contw -0x28c9 006069 isub rega ,pdata -0x28ca 006070 store 1 ,mem_afh_used -0x28cb 006071 rtn -: 006073 rx_radio_freq: -0x28cc 006074 bpatch patch10_0 ,mem_patch10 -0x28cd 006075 call calc_radio_freq -0x28ce 006076 fetch 1 ,mem_debug_config -0x28cf 006077 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now -0x28d0 006078 fetcht 1 ,mem_rx_fixed_freq -: 006079 rx_radio_freq_now: -0x28d1 006080 branch set_freq_rx -: 006083 tx_radio_freq: -0x28d2 006084 bpatch patch10_1 ,mem_patch10 -0x28d3 006085 call calc_radio_freq -0x28d4 006086 fetch 1 ,mem_debug_config -0x28d5 006087 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now -0x28d6 006088 fetcht 1 ,mem_tx_fixed_freq -: 006089 tx_radio_freq_now: -0x28d7 006090 branch set_freq_tx -: 006093 fetch_giac: -0x28d8 006094 force 0 ,uap -0x28d9 006095 fetch 3 ,mem_glap -0x28da 006096 iforce lap -0x28db 006097 rtn -: 006099 fetch_page_bt_adr: -0x28dc 006100 bpatch patch10_2 ,mem_patch10 -0x28dd 006101 fetch 1 ,mem_hci_puap -0x28de 006102 icopy uap -0x28df 006103 fetch 3 ,mem_hci_plap -0x28e0 006104 icopy lap -0x28e1 006105 rtn -: 006107 fetch_self_bt_adr: -0x28e2 006108 bpatch patch10_3 ,mem_patch10 -0x28e3 006109 fetch 2 ,mem_nap -0x28e4 006110 icopy nap -0x28e5 006111 fetch 1 ,mem_uap -0x28e6 006112 icopy uap -0x28e7 006113 fetch 3 ,mem_lap -0x28e8 006114 icopy lap -0x28e9 006115 rtn -: 006117 fetch_extm_bt_adr: -0x28ea 006118 bpatch patch10_4 ,mem_patch10 -0x28eb 006119 fetch 2 ,mem_pnap -0x28ec 006120 icopy nap -0x28ed 006121 fetch 1 ,mem_puap -0x28ee 006122 icopy uap -0x28ef 006123 fetch 3 ,mem_plap -0x28f0 006124 icopy lap -0x28f1 006125 rtn -: 006128 fetch_diac: -0x28f2 006129 bmark1 mark_all_diac ,fetch_diac_do -0x28f3 006130 rtnmark0 mark_inquiry_state -0x28f4 006131 rtnmark0 mark_periodical_diac -: 006132 fetch_diac_do: -0x28f5 006133 and_into -256 ,lap -0x28f6 006134 pulse recalc -0x28f7 006135 nop 32 -0x28f8 006136 rtn -: 006139 shutdown_radio: -0x28f9 006140 bpatch patch10_5 ,mem_patch10 -0x28fa 006141 branch shutdown_radio0 ,is_rx -0x28fb 006142 jam 0xd4 ,rf_tx_pa_ib -0x28fc 006143 nop 4 -0x28fd 006144 jam 0xd2 ,rf_tx_pa_ib -0x28fe 006145 nop 4 -0x28ff 006146 jam 0xd1 ,rf_tx_pa_ib -0x2900 006147 nop 4 -0x2901 006148 fetch 1 ,mem_tx_power -0x2902 006149 beq tx_power_0db ,shutdown_radio_0db -0x2903 006150 beq tx_power_3db ,shutdown_radio_3db -0x2904 006151 beq tx_power_5db ,shutdown_radio_5db -0x2905 006152 beq tx_power_f3db ,shutdown_radio_f3db -0x2906 006153 beq tx_power_f5db ,shutdown_radio_f5db -0x2907 006154 beq tx_power_pair ,shutdown_radio_pair -: 006155 shutdown_radio_5db: -: 006156 shutdown_radio_0db: -0x2908 006157 jam 0xd0 ,rf_tx_pa_ib -0x2909 006158 jam 0xe0 ,rf_tx_pa_gc -: 006159 shutdown_radio0: -0x290a 006160 force 0 ,radio_ctrl -0x290b 006161 disable is_rx -0x290c 006162 disable is_tx -0x290d 006163 pulse packet_end -0x290e 006164 jam 0x0 ,rfen_mdm -0x290f 006165 jam 0x0 ,rfen_tx -0x2910 006166 jam 0x0 ,rfen_rx -0x2911 006167 jam 0 ,rfen_sn -0x2912 006168 jam 0x70 ,rfen_msc -0x2913 006169 jam 0x0 ,rfen_adc -0x2914 006170 rtn -: 006172 shutdown_radio_pair: -: 006173 shutdown_radio_f5db: -: 006174 shutdown_radio_f3db: -: 006175 shutdown_radio_3db: -0x2915 006176 jam 0xd0 ,rf_tx_pa_ib -0x2916 006177 jam 0xc0 ,rf_tx_pa_gc -0x2917 006178 branch shutdown_radio0 -: 006180 set_sync_on: -0x2918 006181 bpatch patch10_6 ,mem_patch10 -0x2919 006182 jam 0x0 ,rfen_mdm -0x291a 006183 jam 0x0 ,rfen_tx -0x291b 006184 jam 0x18 ,rfen_rx -0x291c 006185 jam 0xa7 ,rfen_sn -0x291d 006186 jam 0x7f ,rfen_msc -0x291e 006187 rtn -: 006189 set_freq_rx: -0x291f 006190 bpatch patch10_7 ,mem_patch10 -0x2920 006192 storet 1 ,mem_last_freq -0x2921 006193 add temp ,rx_freq_offset ,rega -0x2922 006194 jam 0x07 ,rf_balun_ctrim -0x2923 006195 branch rf_write_freq -: 006196 rf_rx_enable: -0x2924 006197 bpatch patch11_0 ,mem_patch11 -0x2925 006198 jam 0xcf ,rfen_tx -0x2926 006199 nop 10 -0x2927 006200 jam 0xff ,rfen_rx -0x2928 006201 jam 0xaf ,rfen_sn -0x2929 006202 jam 0xff ,rfen_msc -0x292a 006203 nop 10 -0x292b 006204 jam 0xa0 ,rfen_mdm -0x292c 006205 rtn -: 006207 set_freq_tx_offset: -0x292d 006208 fetch 1 ,mem_250k_freq_enable -0x292e 006209 branch set_freq_tx_2m_offset ,blank -: 006210 set_freq_tx_0m_offset: -0x292f 006211 add temp ,2 ,rega -0x2930 006212 rtn -: 006213 set_freq_tx_2m_offset: -0x2931 006214 add temp ,0 ,rega -0x2932 006215 rtn -: 006217 set_freq_tx: -0x2933 006218 bpatch patch11_1 ,mem_patch11 -0x2934 006219 storet 1 ,mem_last_freq -0x2935 006220 call set_freq_tx_offset -0x2936 006221 call rf_write_freq -0x2937 006222 setarg param_pll_setup -0x2938 006223 call sleep -: 006224 txon: -0x2939 006225 jam 0x1 ,rfen_adc -0x293a 006226 jam 0x3c ,rfen_rx -0x293b 006227 jam 0xe0 ,rfen_tx -0x293c 006228 jam 0x12 ,rf_balun_ctrim -0x293d 006229 nop 10 -0x293e 006230 jam 0x01 ,rfen_mdm -0x293f 006231 jam 0x3d ,rfen_mdm -0x2940 006232 nop 10 -0x2941 006233 jam 0xb7 ,rfen_sn -0x2942 006234 nop 10 -0x2943 006235 jam 0x7f ,rfen_mdm -: 006236 txon_power_select: -0x2944 006237 fetch 1 ,mem_tx_power -0x2945 006238 beq tx_power_0db ,set_tx_power_0db -0x2946 006239 beq tx_power_3db ,set_tx_power_3db -0x2947 006240 beq tx_power_5db ,set_tx_power_5db -0x2948 006241 beq tx_power_f3db ,set_tx_power_f3db -0x2949 006242 beq tx_power_f5db ,set_tx_power_f5db -0x294a 006243 beq tx_power_pair ,set_tx_power_pair -: 006244 set_tx_power_0db: -0x294b 006245 jam 0xf0 ,rf_tx_pa_gc -0x294c 006246 call txon_common -0x294d 006247 jam 0xd8 ,rf_tx_pa_ib -0x294e 006248 rtn -: 006250 set_tx_power_3db: -0x294f 006251 jam 0xdf ,rf_tx_pa_gc -0x2950 006252 call txon_common -0x2951 006253 jam 0xdf ,rf_tx_pa_ib -0x2952 006254 rtn -: 006256 set_tx_power_5db: -0x2953 006257 jam 0xff ,rf_tx_pa_gc -0x2954 006258 call txon_common -0x2955 006259 jam 0xdf ,rf_tx_pa_ib -0x2956 006260 rtn -: 006261 set_tx_power_f3db: -0x2957 006262 jam 0xce ,rf_tx_pa_gc -0x2958 006263 call txon_common -0x2959 006264 jam 0xd8 ,rf_tx_pa_ib -0x295a 006265 rtn -: 006267 set_tx_power_f5db: -0x295b 006268 jam 0xcb ,rf_tx_pa_gc -0x295c 006269 call txon_common -0x295d 006270 jam 0xd8 ,rf_tx_pa_ib -0x295e 006271 rtn -: 006273 set_tx_power_pair: -0x295f 006274 jam 0xd0 ,rf_tx_pa_ib -0x2960 006275 jam 0xc0 ,rf_tx_pa_gc -0x2961 006276 jam 0x4c ,0x8957 -0x2962 006277 jam 0x6c ,0x8958 -0x2963 006278 jam 0x50 ,0x8959 -0x2964 006279 rtn -: 006281 txon_common: -0x2965 006282 nop 4 -0x2966 006283 jam 0xd1 ,rf_tx_pa_ib -0x2967 006284 nop 4 -0x2968 006285 jam 0xd2 ,rf_tx_pa_ib -0x2969 006286 nop 4 -0x296a 006287 jam 0xd4 ,rf_tx_pa_ib -0x296b 006288 rtn -: 006291 initialize_radio: -0x296c 006292 jam clksel_rc ,core_clksel -: 006293 initialize_radio_wait: -0x296d 006294 fetch 2 ,mem_rf_init_ptr -0x296e 006295 bbit0 14 ,initialize_radio_wait -0x296f 006296 iforce contr -0x2970 006297 arg 0x8900 ,temp -: 006298 initialize_radio_loop: -0x2971 006299 ifetch 1 ,contr -0x2972 006300 beq 0xff ,initialize_radio_cont -0x2973 006301 ior temp ,contw -0x2974 006302 ifetch 1 ,contr -0x2975 006303 istore 1 ,contw -0x2976 006304 branch initialize_radio_loop -: 006305 initialize_radio_cont: -0x2977 006306 bpatch patch11_2 ,mem_patch11 -0x2978 006307 call lpm_cal_xtal_startup -0x2979 006308 call switchto_dpllclk -0x297a 006310 setarg param_dpll_start_delay -0x297b 006311 iadd clkn_bt ,pdata -0x297c 006312 store 4 ,mem_dpll_clkn -0x297d 006313 set1 reset ,radio_ctrl -0x297e 006314 force 0 ,radio_ctrl -0x297f 006315 ncall do_rccal ,wake -0x2980 006316 branch set_rccal -: 006319 rf_write_freq: -0x2981 006320 bpatch patch11_3 ,mem_patch11 -0x2982 006321 setarg 2400 -0x2983 006322 iadd rega ,temp -0x2984 006323 fetch 1 ,mem_fcomp_mul -0x2985 006324 jam 0x04 ,rf_pll_rstn -0x2986 006325 imul32 temp ,pdata -0x2987 006326 fetcht 1 ,mem_fcomp_div -0x2988 006327 idiv temp -0x2989 006328 call wait_div_end -0x298a 006329 quotient rega -0x298b 006330 remainder pdata -0x298c 006331 lshift16 pdata ,pdata -0x298d 006332 lshift4 pdata ,pdata -0x298e 006333 idiv temp -0x298f 006334 call wait_div_end -0x2990 006335 quotient pdata -0x2991 006336 lshift8 pdata ,pdata -0x2992 006337 lshift pdata ,pdata -0x2993 006338 ior rega ,pdata -0x2994 006339 hstore 4 ,rf_pll_intg -0x2995 006340 jam 0x44 ,rf_pll_rstn -0x2996 006341 jam 0xc4 ,rf_pll_rstn -0x2997 006342 rtn -: 006345 do_rccal: -0x2998 006346 bpatch patch11_4 ,mem_patch11 -0x2999 006347 jam 0x02 ,rfen_adc -0x299a 006348 setarg 250000 -0x299b 006349 call sleep -0x299c 006350 jam 0x7f ,rfen_rx -0x299d 006351 nop 130 -0x299e 006352 jam 0x30 ,rf_rccal_ctrl -0x299f 006353 jam 0xd0 ,rfen_tx -0x29a0 006354 jam 0x70 ,rf_rccal_ctrl -0x29a1 006355 jam 0xf0 ,rf_rccal_ctrl -0x29a2 006356 force 50 ,loopcnt -: 006357 do_rccal_loop: -0x29a3 006358 hfetch 1 ,rf_rccal_result -0x29a4 006359 bbit1 5 ,do_rccal_end -0x29a5 006360 loop do_rccal_loop -: 006361 do_rccal_end: -0x29a6 006362 store 1 ,mem_rf_rccal -0x29a7 006363 jam 0 ,rfen_tx -0x29a8 006364 jam 0 ,rfen_rx -0x29a9 006365 jam 0x00 ,rfen_adc -0x29aa 006366 rtn -: 006368 set_rccal: -0x29ab 006369 bpatch patch11_5 ,mem_patch11 -0x29ac 006370 fetch 1 ,mem_rf_rccal -0x29ad 006371 set1 5 ,pdata -0x29ae 006372 hstore 1 ,rf_rccal_ctrl -0x29af 006373 hfetcht 1 ,rf_bpf_ctrim -0x29b0 006374 and_into 7 ,temp -0x29b1 006375 lshift3 pdata ,pdata -0x29b2 006376 ior temp ,pdata -0x29b3 006377 hstore 1 ,rf_bpf_ctrim -0x29b4 006378 hfetch 1 ,rf_bpf_ib -0x29b5 006379 set0 bpf_rccal ,pdata -0x29b6 006380 hstore 1 ,rf_bpf_ib -0x29b7 006381 hfetch 1 ,rf_adc_rccal -0x29b8 006382 set0 adc_rccal ,pdata -0x29b9 006383 hstore 1 ,rf_adc_rccal -0x29ba 006384 rtn -: 006386 save_rssi: -0x29bb 006387 bpatch patch11_6 ,mem_patch11 -0x29bc 006388 hfetch 2 ,rf_afc_d2a -0x29bd 006389 rshift4 pdata ,pdata -0x29be 006390 rshift3 pdata ,pdata -0x29bf 006391 sub pdata ,0 ,pdata -: 006392 bcd: -0x29c0 006393 and_into 0xff ,pdata -0x29c1 006394 div pdata ,10 -0x29c2 006395 call wait_div_end -0x29c3 006396 quotient pdata -0x29c4 006397 lshift4 pdata ,pdata -0x29c5 006398 remainder temp -0x29c6 006399 ior temp ,pdata -0x29c7 006400 store 1 ,mem_rssi -0x29c8 006401 rtn -: 006404 switchto_dpllclk: -0x29c9 006405 jam clksel_rc ,core_clksel -0x29ca 006406 hfetch 1 ,rf_clkpll_frac + 2 -0x29cb 006407 set0 4 ,pdata -0x29cc 006408 set0 5 ,pdata -0x29cd 006409 hstore 1 ,rf_clkpll_frac + 2 -0x29ce 006410 jam 0x00 ,rfen_ck -0x29cf 006411 jam 0x00 ,rfen_msc -0x29d0 006412 jam 0x70 ,rfen_msc -0x29d1 006413 jam 0xff ,rfen_ck -0x29d2 006414 hfetch 1 ,rf_clkpll_frac + 2 -0x29d3 006415 set1 4 ,pdata -0x29d4 006416 set1 5 ,pdata -0x29d5 006417 hstore 1 ,rf_clkpll_frac + 2 -0x29d6 006418 call init_lpm_ctrl -0x29d7 006419 hfetch 1 ,rf_clkpll_int -0x29d8 006420 set1 7 ,pdata -0x29d9 006421 hstore 1 ,rf_clkpll_int -0x29da 006422 set0 7 ,pdata -0x29db 006423 hstore 1 ,rf_clkpll_int -0x29dc 006424 set1 7 ,pdata -0x29dd 006425 hstore 1 ,rf_clkpll_int -0x29de 006426 jam clksel_dpll ,core_clksel -0x29df 006427 nop 1 -0x29e0 006428 jam clksel_xtal ,core_clksel -0x29e1 006429 hfetch 1 ,rf_clkpll_frac + 2 -0x29e2 006430 and_into 0xcf ,pdata -0x29e3 006431 hstore 1 ,rf_clkpll_frac + 2 -0x29e4 006432 or_into 0x30 ,pdata -0x29e5 006433 hstore 1 ,rf_clkpll_frac + 2 -0x29e6 006434 rtn -: 006437 xtal_fast_wake: -0x29e7 006438 setarg 0xf0f -0x29e8 006439 branch lpm_write_config -: 006441 init_lpm_ctrl: -0x29e9 006442 setarg 0x80f -0x29ea 006443 branch lpm_write_config -: 006447 start_receiver: -0x29eb 006448 bpatch patch11_7 ,mem_patch11 -0x29ec 006449 call rf_rx_enable -0x29ed 006450 disable is_tx -0x29ee 006451 enable is_rx -0x29ef 006452 pulse init_encrypt -0x29f0 006453 rtn -: 006455 prep_crypt: -0x29f1 006456 bpatch patch12_0 ,mem_patch12 -0x29f2 006457 fetch 1 ,mem_state_map -0x29f3 006458 isolate1 smap_encryption ,pdata -0x29f4 006459 setflag true ,0 ,pdata -0x29f5 006460 hstore 1 ,core_encrypt -0x29f6 006461 arg mem_kc ,contr -0x29f7 006462 ifetch 9 ,contr -0x29f8 006463 iforce kc_ls -0x29f9 006464 ifetch 7 ,contr -0x29fa 006465 iforce kc_ms -0x29fb 006466 fetch 1 ,mem_key_size -0x29fc 006467 add pdata ,-1 ,g1l -0x29fd 006468 pulse kc_p_activate -0x29fe 006469 rtn -: 006471 wait_access_end: -0x29ff 006472 deposit clke -0x2a00 006473 store 6 ,mem_sync_clke -0x2a01 006474 disable decode_fec0 -0x2a02 006475 nbranch shutdown_radio ,sync -0x2a03 006476 arg param_clke_cal ,clke_rt -0x2a04 006477 increase 1 ,clke_bt -0x2a05 006478 and_into 0x1fc ,clke_bt -0x2a06 006479 rtn -: 006483 wait_access_mhalfbnd: -0x2a07 006484 enable decode_fec0 -: 006485 wait_access_mhalfbnd_correlate: -0x2a08 006486 correlate null ,mhalfbnd -0x2a09 006487 branch wait_access_end ,sync -0x2a0a 006488 compare 0x02 ,clke_bt ,0x02 -0x2a0b 006489 nbranch wait_access_mhalfbnd_correlate ,true -0x2a0c 006490 branch wait_access_end -: 006492 wait_access_clkn_rt: -0x2a0d 006493 bpatch patch12_1 ,mem_patch12 -0x2a0e 006494 arg param_conn_access ,timeup -0x2a0f 006495 enable decode_fec0 -0x2a10 006496 correlate clkn_rt ,meet -0x2a11 006497 disable decode_fec0 -0x2a12 006498 nbranch shutdown_radio ,sync -0x2a13 006499 rtn -: 006501 wait_access_forever: -0x2a14 006502 bpatch patch12_2 ,mem_patch12 -0x2a15 006503 enable decode_fec0 -0x2a16 006504 correlate null ,timeout -0x2a17 006505 disable decode_fec0 -0x2a18 006506 nbranch shutdown_radio ,sync -0x2a19 006507 arg param_clke_cal ,clke_rt -0x2a1a 006508 and_into 0x1fc ,clke_bt -0x2a1b 006509 rtn -: 006512 reserve_slot: -0x2a1c 006513 bpatch patch12_3 ,mem_patch12 -0x2a1d 006514 iforce rega -0x2a1e 006515 deposit bt_clk -0x2a1f 006516 iadd temp ,timeup -0x2a20 006517 copy timeup ,pdata -0x2a21 006518 store 4 ,mem_next_btclk -0x2a22 006519 deposit rega -0x2a23 006520 rtn -: 006523 ahead_window: -0x2a24 006524 copy pdata ,temp -0x2a25 006525 bpatch patch12_4 ,mem_patch12 -0x2a26 006526 copy temp ,pdata -0x2a27 006527 call clk2bt -0x2a28 006528 lshift16 bt_clk ,pdata -0x2a29 006529 set1 44 ,pdata -0x2a2a 006530 call clk_diff -0x2a2b 006531 set0 44 ,pdata -0x2a2c 006532 call get_clk -0x2a2d 006533 call clk_diff -0x2a2e 006534 rtn user -0x2a2f 006535 call clk2rt -0x2a30 006536 iforce stop_watch -0x2a31 006537 until null ,timeout -0x2a32 006538 rtn -: 006541 setup_clk: -0x2a33 006542 bpatch patch12_5 ,mem_patch12 -0x2a34 006543 branch setup_clkn ,clknt -0x2a35 006544 until clke_rt ,meet -: 006545 skip_setup_clke: -0x2a36 006546 copy clke_bt ,temp -0x2a37 006547 branch setup_clknbt -: 006548 setup_clkn: -0x2a38 006549 branch skip_setup_clkn ,attempt -0x2a39 006550 until clkn_rt ,meet -: 006551 skip_setup_clkn: -0x2a3a 006552 copy clkn_bt ,temp -: 006553 setup_clknbt: -0x2a3b 006554 branch setup_clk11 ,user -0x2a3c 006555 compare 1 ,temp ,3 -0x2a3d 006556 nbranch setup_clk ,true -: 006557 setup_complete: -0x2a3e 006558 bpatch patch12_6 ,mem_patch12 -0x2a3f 006559 fetch 1 ,mem_state -0x2a40 006560 rtnbit0 state_inconn -0x2a41 006561 fetch 4 ,mem_next_btclk -0x2a42 006562 isub temp ,pdata -0x2a43 006563 nrtn positive -0x2a44 006564 sub pdata ,0xff ,null -0x2a45 006565 branch setup_clk ,positive -0x2a46 006566 rtn -: 006567 setup_clk11: -0x2a47 006568 compare 3 ,temp ,3 -0x2a48 006569 nbranch setup_clk ,true -0x2a49 006570 branch setup_complete -: 006572 rf_setup_time: -0x2a4a 006573 bpatch patch12_7 ,mem_patch12 -0x2a4b 006574 arg param_rf_setup ,timeup -0x2a4c 006575 branch setup_clk -: 006577 rf_setup_time_slave_slot: -0x2a4d 006578 disable user -0x2a4e 006579 branch rf_setup_time -: 006581 rf_setup_time_master_slot: -0x2a4f 006582 enable user -0x2a50 006583 branch rf_setup_time -: 006585 start_transmitter: -0x2a51 006586 bpatch patch13_0 ,mem_patch13 -0x2a52 006587 call prep_crypt -0x2a53 006588 disable is_rx -0x2a54 006589 enable is_tx -0x2a55 006590 rtn -: 006594 start_tx_native: -0x2a56 006595 bpatch patch13_1 ,mem_patch13 -0x2a57 006596 arg param_tx_setup ,timeup -0x2a58 006597 until clkn_rt ,meet -0x2a59 006598 pulse init_encrypt -0x2a5a 006599 rtn -: 006601 start_rx_native: -0x2a5b 006602 bpatch patch13_2 ,mem_patch13 -0x2a5c 006603 arg param_rx_setup ,timeup -0x2a5d 006604 until clkn_rt ,meet -0x2a5e 006605 rtn -: 006608 start_tx_external: -0x2a5f 006609 bpatch patch13_3 ,mem_patch13 -0x2a60 006610 arg param_tx_setup ,timeup -0x2a61 006611 until clke_rt ,meet -0x2a62 006612 pulse init_encrypt -0x2a63 006613 rtn -: 006615 send_access_word: -0x2a64 006616 bpatch patch13_4 ,mem_patch13 -0x2a65 006617 preload access -0x2a66 006618 enable encode_fec0 -0x2a67 006619 set1 txgfsk ,radio_ctrl -0x2a68 006620 inject mod ,72 -0x2a69 006621 disable encode_fec0 -0x2a6a 006622 rtn -: 006625 scan_mode_whiten: -0x2a6b 006626 copy xin ,temp -0x2a6c 006627 or_into 0x60 ,temp -0x2a6d 006628 copy temp ,white_init -0x2a6e 006629 rtn -: 006634 get_free_amaddr: -0x2a6f 006635 bpatch patch13_5 ,mem_patch13 -0x2a70 006636 fetch 1 ,mem_current_amaddr -0x2a71 006637 increase 1 ,pdata -0x2a72 006638 bne param_esco_addr ,get_free_amaddr_cont -0x2a73 006639 force 1 ,pdata -: 006640 get_free_amaddr_cont: -0x2a74 006641 store 1 ,mem_current_amaddr -0x2a75 006642 iforce am_addr -0x2a76 006643 rtn -: 006645 get_clk: -0x2a77 006646 copy clkn ,temp -0x2a78 006647 rtn master -0x2a79 006648 copy clke ,temp -0x2a7a 006649 rtn -: 006651 get_clkbt: -0x2a7b 006652 deposit clkn_bt -0x2a7c 006653 rtn master -0x2a7d 006654 deposit clke_bt -0x2a7e 006655 rtn -: 006658 supervision_update: -0x2a7f 006659 bpatch patch13_6 ,mem_patch13 -0x2a80 006660 fetcht 4 ,mem_supervision_timer -0x2a81 006661 call get_clkbt -0x2a82 006662 isub temp ,timeup -0x2a83 006663 deposit timeup -0x2a84 006664 fetcht 2 ,mem_supervision_to -0x2a85 006665 lshift temp ,temp -0x2a86 006666 isub temp ,pdata -0x2a87 006667 rtn -: 006669 supervision_flush: -0x2a88 006670 bpatch patch13_7 ,mem_patch13 -0x2a89 006671 call get_clkbt -0x2a8a 006672 store 4 ,mem_supervision_timer -0x2a8b 006673 rtn -: 006675 assert: -0x2a8c 006676 bpatch patch14_0 ,mem_patch14 -0x2a8d 006677 branch assert -: 006679 loop: -0x2a8e 006680 branch loop -: 006682 sleep: -0x2a8f 006683 rtn blank -0x2a90 006685 rshift pdata ,pdata -0x2a91 006686 increase -3 ,pdata -: 006687 sleep_loop: -0x2a92 006688 increase -1 ,pdata -0x2a93 006689 nbranch sleep_loop ,zero -0x2a94 006690 force 0 ,pdata -0x2a95 006691 rtn -: 006695 init_param: -0x2a96 006697 arg 0x10 ,loopcnt -0x2a97 006698 arg 0 ,contw -0x2a98 006699 call memset0 -0x2a99 006700 arg mem_le_state ,contw -0x2a9a 006701 arg 10 ,loopcnt -0x2a9b 006702 call memset0 -0x2a9c 006703 jam 0 ,mem_sp_calc -0x2a9d 006704 jam 0 ,mem_fifo_temp -0x2a9e 006705 jam 0 ,mem_le_testtype -0x2a9f 006706 jam 0 ,mem_debug_config -0x2aa0 006707 jam 0 ,mem_lmp_conn_state -0x2aa1 006708 bpatch patch14_1 ,mem_patch14 -0x2aa2 006709 jam 0 ,mem_connection_options -0x2aa3 006710 jam 0 ,mem_tester_emulate -0x2aa4 006711 jam 0 ,mem_tester_cnt -0x2aa5 006712 setarg param_glap -0x2aa6 006713 store 3 ,mem_glap -0x2aa7 006714 setarg param_acl_pktlen -0x2aa8 006715 store 2 ,mem_acl_pktlen -0x2aa9 006716 jam param_sco_pktlen ,mem_sco_pktlen -0x2aaa 006717 jam param_acl_pktcnt ,mem_acl_pktcnt -0x2aab 006718 jam param_sco_pktcnt ,mem_sco_pktcnt -0x2aac 006719 setarg param_hci_version -0x2aad 006720 store 3 ,mem_hci_version -0x2aae 006725 jam 0x60 ,mem_fhs_misc -0x2aaf 006726 jam param_max_slot ,mem_max_slot -0x2ab0 006727 jam 0x02 ,mem_fw_ver -0x2ab1 006728 fetch 1 ,mem_ssp_enable -0x2ab2 006729 ncall init_memp ,blank -0x2ab3 006730 fetch 1 ,mem_le_secure_connect_enable -0x2ab4 006731 ncall init_memp_256 ,blank -0x2ab5 006732 bpatch patch14_2 ,mem_patch14 -0x2ab6 006733 rtn wake -0x2ab7 006734 setarg 0 -0x2ab8 006735 store 2 ,mem_tx_len -0x2ab9 006736 rshift clkn_bt ,pdata -0x2aba 006737 store 4 ,mem_last_clkn -0x2abb 006738 rtn -: 006745 lpmstate: -0x2abc 006746 setarg 0xee21 -0x2abd 006747 hstore 2 ,core_clkoff -0x2abe 006748 hfetch 4 ,core_gpio_in -0x2abf 006749 store 4 ,mem_saved_gpio_in -0x2ac0 006750 hfetch 1 ,core_lpm_ldocnt -0x2ac1 006751 store 1 ,mem_wakup_from_power_flag -0x2ac2 006752 bbit0 gpio_latch ,loadcode -0x2ac3 006753 enable wake -0x2ac4 006754 bbit0 cold_wake ,lpmwake -0x2ac5 006755 disable wake -0x2ac6 006756 deposit auxcnt -0x2ac7 006757 nbranch lpmwake ,blank -0x2ac8 006758 hfetch 1 ,core_lpm_ctrl + 3 -0x2ac9 006759 bbit1 reload_code ,lpmwake -0x2aca 006760 arg param_hibernate_clks ,temp -0x2acb 006761 branch lpm_enter_sleep -: 006762 lpmwake: -0x2acc 006763 hfetch 3 ,core_lpm_xtalcnt -0x2acd 006764 hstore 3 ,core_lpm_reg -0x2ace 006765 ifetch 1 ,contr -0x2acf 006766 or_into isogate_mask ,pdata -0x2ad0 006767 istore 1 ,contw -0x2ad1 006768 call lpm_write_ctrl2 -0x2ad2 006769 hfetch 1 ,core_lpm_isogate -0x2ad3 006770 set1 enable_retmem ,pdata -0x2ad4 006771 hstore 1 ,core_lpm_isogate -0x2ad5 006772 call lpm_write_ctrl2 -0x2ad6 006773 call lpm_load_context ,wake -0x2ad7 006774 hfetch 1 ,core_lpm_reg + 2 -0x2ad8 006775 set0 gpio_latch ,pdata -0x2ad9 006776 hstore 1 ,core_lpm_reg + 2 -0x2ada 006777 call lpm_write_ctrl2 -0x2adb 006778 nbranch loadcode ,wake -0x2adc 006779 rtnmark0 mark_otp_encrypt -0x2add 006780 jam lock_otp ,core_misc_ctrl -0x2ade 006781 rtn -: 006783 lpm_load_context: -0x2adf 006784 fetch 1 ,mem_saved_spidctrl -0x2ae0 006785 hstore 1 ,core_spid_ctrl -0x2ae1 006786 fetch 3 ,mem_saved_gsel -0x2ae2 006787 hstore 3 ,core_gpio_sel -0x2ae3 006788 fetch 4 ,mem_saved_gpio + 4 -0x2ae4 006789 hstore 4 ,core_gpio_out0 -0x2ae5 006790 fetch 4 ,mem_saved_gpio -0x2ae6 006791 hstore 4 ,core_gpio_oe0 -0x2ae7 006792 fetch 8 ,mem_saved_gpio + 8 -0x2ae8 006793 hstore 8 ,core_gpio_pu0 -0x2ae9 006794 fetch 8 ,mem_saved_mark -0x2aea 006795 iforce mark -0x2aeb 006796 hfetch 8 ,core_gpio_wakeup_low -0x2aec 006797 store 8 ,mem_gpio_wakeup_low -0x2aed 006798 call load_ucode -0x2aee 006799 rtn -: 006801 lpm_save_context: -0x2aef 006802 deposit mark -0x2af0 006803 store 8 ,mem_saved_mark -0x2af1 006804 hfetch 8 ,core_gpio_oe0 -0x2af2 006805 store 8 ,mem_saved_gpio -0x2af3 006806 ifetch 8 ,contr -0x2af4 006807 istore 8 ,contw -0x2af5 006808 hfetch 3 ,core_gpio_sel -0x2af6 006809 store 3 ,mem_saved_gsel -0x2af7 006810 hfetch 1 ,core_spid_ctrl -0x2af8 006811 store 1 ,mem_saved_spidctrl -0x2af9 006812 branch lpm_write_gpio_wakeup -: 006814 lpo_calibration: -0x2afa 006815 hfetch 1 ,core_bist_ctrl -0x2afb 006816 nbranch lpo_cal_inited ,blank -0x2afc 006817 fetch 3 ,mem_clks_per_lpo -0x2afd 006818 nrtn blank -0x2afe 006819 jam 0xc0 ,core_bist_ctrl -0x2aff 006820 jam ccnt_start ,core_misc_ctrl -: 006821 lpo_cal_inited: -0x2b00 006822 hfetch 1 ,core_perf_status -0x2b01 006823 rtnbit0 1 -0x2b02 006824 hfetch 3 ,core_clk_counter -0x2b03 006825 store 3 ,mem_clks_per_lpo -0x2b04 006826 rtn -: 006830 lpm_adjust_clk: -0x2b05 006831 bpatch patch14_3 ,mem_patch14 -0x2b06 006832 deposit clke -0x2b07 006833 call clk_diff_rt -0x2b08 006834 fetcht 4 ,mem_sleep_counter_all -0x2b09 006835 sub temp ,0xff ,null -0x2b0a 006836 rtn positive -0x2b0b 006837 lshift8 pdata ,pdata -0x2b0c 006838 lshift4 pdata ,pdata -0x2b0d 006839 idiv temp -0x2b0e 006840 call wait_div_end -0x2b0f 006841 quotient pdata -0x2b10 006842 arg param_lpm_adjmax ,temp -0x2b11 006843 call ceiling -0x2b12 006844 store 1 ,mem_lpm_adjust -0x2b13 006845 nbranch lpm_adjust_positive ,user -0x2b14 006846 sub pdata ,0 ,pdata -: 006847 lpm_adjust_positive: -0x2b15 006848 fetcht 3 ,mem_clks_per_lpo -0x2b16 006849 iadd temp ,pdata -0x2b17 006850 store 3 ,mem_clks_per_lpo -: 006851 lpm_clear_counter: -0x2b18 006852 setarg 0 -0x2b19 006853 store 4 ,mem_sleep_counter_all -0x2b1a 006854 rtn -: 006858 lpm_doze: -0x2b1b 006859 fetch 1 ,mem_lpm_config + 2 -0x2b1c 006860 set1 reload_code ,pdata -0x2b1d 006861 store 1 ,mem_lpm_config + 2 -0x2b1e 006862 branch lpm_hibernate_normal -: 006866 lpm_hibernate: -0x2b1f 006867 arg param_hibernate_clks ,temp -0x2b20 006868 fetch 1 ,mem_lpm_config + 1 -0x2b21 006869 set0 7 ,pdata -0x2b22 006870 store 1 ,mem_lpm_config + 1 -: 006871 lpm_hibernate_normal: -0x2b23 006872 bpatch patch14_4 ,mem_patch14 -0x2b24 006873 call lpm_write_gpio_wakeup -0x2b25 006874 fetch 1 ,mem_lpm_hibernate_switch -0x2b26 006875 store 1 ,mem_lpm_xtalcnt + 4 -0x2b27 006876 fetch 1 ,mem_lpm_xtalcnt + 2 -0x2b28 006877 set1 cold_wake ,pdata -0x2b29 006878 store 1 ,mem_lpm_xtalcnt + 2 -: 006881 lpm_sleep: -0x2b2a 006882 bpatch patch14_5 ,mem_patch14 -0x2b2b 006883 call xtal_fast_wake -0x2b2c 006884 fetch 4 ,mem_sleep_counter_all -0x2b2d 006885 iadd temp ,pdata -0x2b2e 006886 store 4 ,mem_sleep_counter_all -0x2b2f 006887 call lpm_save_context -0x2b30 006888 fetch 5 ,mem_lpm_xtalcnt -0x2b31 006889 hstore 4 ,core_lpm_reg -0x2b32 006890 rshift32 pdata ,rega -0x2b33 006891 until null ,lpo_edge -0x2b34 006892 deposit clkn -0x2b35 006893 store 6 ,mem_sleep_clkn -0x2b36 006894 jam lpmreg_sel_ctrl2 ,core_lpm_wr -0x2b37 006895 until null ,lpo_edge -0x2b38 006896 until null ,lpo_edge -0x2b39 006897 deposit rega -0x2b3a 006898 hstore 1 ,core_lpm_isogate -0x2b3b 006899 jam lpmreg_sel_ctrl2 ,core_lpm_wr -: 006900 lpm_enter_sleep: -0x2b3c 006901 until null ,lpo_edge -0x2b3d 006902 until null ,lpo_edge -0x2b3e 006903 hstoret 4 ,core_lpm_reg -0x2b3f 006904 jam lpmreg_sel_counter ,core_lpm_wr -0x2b40 006905 until null ,never -: 006910 lpm_recover_clk: -0x2b41 006911 bpatch patch14_6 ,mem_patch14 -0x2b42 006912 setarg 0 -0x2b43 006913 copy auxcnt ,null -0x2b44 006914 branch lpm_recover_timeout ,zero -0x2b45 006915 hfetch 1 ,core_lpm_xtalcnt -0x2b46 006916 hfetcht 1 ,core_lpm_buckcnt -0x2b47 006917 isub temp ,null -0x2b48 006918 branch lpm_recover_xtal ,positive -0x2b49 006919 deposit temp -: 006920 lpm_recover_xtal: -0x2b4a 006921 isub auxcnt ,pdata -0x2b4b 006922 increase 1 ,pdata -: 006923 lpm_recover_timeout: -0x2b4c 006924 increase 8 ,pdata -0x2b4d 006925 until null ,lpo_edge -0x2b4e 006926 iadd lpo_time ,pdata -0x2b4f 006927 fetcht 4 ,mem_sleep_counter -0x2b50 006928 iadd temp ,pdata -0x2b51 006929 fetcht 3 ,mem_clks_per_lpo -0x2b52 006930 imul32 temp ,pdata -0x2b53 006931 rshift8 pdata ,pdata -0x2b54 006932 rshift4 pdata ,pdata -0x2b55 006933 increase param_lpm_fix ,pdata -0x2b56 006934 arg 3750 ,temp -0x2b57 006935 idiv temp -0x2b58 006936 call wait_div_end -0x2b59 006937 quotient pdata -0x2b5a 006938 lshift16 pdata ,pdata -0x2b5b 006939 remainder temp -0x2b5c 006940 ior temp ,pdata -0x2b5d 006941 fetcht 6 ,mem_sleep_clkn -0x2b5e 006942 call clk_add -0x2b5f 006943 copy temp ,clkn -0x2b60 006944 fetch 6 ,mem_context + coffset_clk_offset -0x2b61 006945 call calc_clke2 -0x2b62 006946 deposit clke -0x2b63 006947 store 6 ,mem_pdatatemp -0x2b64 006948 deposit auxcnt -0x2b65 006949 istore 1 ,contw -0x2b66 006950 hfetch 1 ,core_gpio_in1 -0x2b67 006951 or_into 0xf0 ,pdata -0x2b68 006952 istore 1 ,contw -0x2b69 006953 rtn -: 006955 lpm_dispatch: -0x2b6a 006956 bpatch patch14_7 ,mem_patch14 -0x2b6b 006957 call lpo_calibration -0x2b6c 006958 fetch 3 ,mem_clks_per_lpo -0x2b6d 006959 rtn blank -0x2b6e 006960 fetch 1 ,mem_lpm_mode -0x2b6f 006961 rtn blank -0x2b70 006962 fetch 1 ,mem_ssp_enable -0x2b71 006963 branch lpm_dispatch_next ,blank -0x2b72 006964 fetch 1 ,mem_sp_local_key_invalid -0x2b73 006965 rtn blank -: 006966 lpm_dispatch_next: -0x2b74 006967 fetch 1 ,mem_le_sc_calc -0x2b75 006968 nrtn blank -0x2b76 006969 call lpm_check_wake_lock -0x2b77 006970 nrtn blank -0x2b78 006971 fetch 1 ,mem_context -0x2b79 006972 compare 3 ,pdata ,0x7 -0x2b7a 006973 nbranch lpm_dispatch_unconn ,true -0x2b7b 006974 fetch 2 ,mem_context + coffset_tsniff -0x2b7c 006975 rtn blank -0x2b7d 006976 rtn wake -0x2b7e 006977 bpatch patch15_0 ,mem_patch15 -: 006978 lpm_dispatch_next2: -0x2b7f 006979 fetcht 1 ,mem_lpm_current_mult -0x2b80 006980 fetch 2 ,mem_context + coffset_tsniff -0x2b81 006981 imul32 temp ,pdata -0x2b82 006982 rshift4 temp ,temp -0x2b83 006983 rshift2 temp ,temp -0x2b84 006984 isub temp ,pdata -0x2b85 006985 fetcht 4 ,mem_context + coffset_sniff_anchor -0x2b86 006986 iadd temp ,pdata -0x2b87 006987 fetcht 1 ,mem_lpm_overhead -0x2b88 006988 isub temp ,pdata -0x2b89 006989 lshift16 pdata ,alarm -0x2b8a 006990 bpatch patch15_1 ,mem_patch15 -0x2b8b 006991 fetch 2 ,mem_context + coffset_rx_window -0x2b8c 006992 rshift pdata ,pdata -0x2b8d 006993 call clk2bt -0x2b8e 006994 deposit alarm -0x2b8f 006995 call clk_diff -0x2b90 006996 copy clke ,temp -0x2b91 006997 call clk_diff_rt -0x2b92 006998 rtn user -: 006999 lpm_dispatch_sleep: -0x2b93 007000 call clk2lpo -: 007001 lpm_dispatch_lpo: -0x2b94 007002 bpatch patch15_2 ,mem_patch15 -0x2b95 007003 fetch 1 ,mem_lpm_xtalcnt -0x2b96 007004 isub temp ,null -0x2b97 007005 branch lpm_clear_counter ,positive -0x2b98 007006 storet 4 ,mem_sleep_counter -0x2b99 007007 call app_will_enter_lpm -0x2b9a 007008 call l2cap_lpm_save_txbuf -0x2b9b 007009 fetcht 4 ,mem_sleep_counter -0x2b9c 007010 branch lpm_sleep -: 007012 lpm_dispatch_unconn: -0x2b9d 007013 bpatch patch15_3 ,mem_patch15 -0x2b9e 007014 fetch 1 ,mem_context -0x2b9f 007015 rtnbit1 state_inconn -0x2ba0 007016 rtnbit1 state_inpage -0x2ba1 007017 fetch 1 ,mem_ssp_enable -0x2ba2 007018 branch lpm_unconn_nossp ,blank -0x2ba3 007019 fetch 1 ,mem_sp_local_key_invalid -0x2ba4 007020 rtn blank -: 007021 lpm_unconn_nossp: -0x2ba5 007022 bpatch patch15_4 ,mem_patch15 -0x2ba6 007023 fetch 1 ,mem_le_adv_enable -0x2ba7 007024 nbranch lpm_unconn_cont ,blank -0x2ba8 007025 fetch 1 ,mem_scan_mode -0x2ba9 007026 rtn blank -: 007027 lpm_unconn_cont: -0x2baa 007028 fetch 2 ,mem_lpm_interval -0x2bab 007029 rtn blank -: 007030 lpm_sleep_btclk: -0x2bac 007031 fetcht 1 ,mem_lpm_overhead -0x2bad 007032 isub temp ,pdata -0x2bae 007033 arg 7500 ,temp -0x2baf 007034 imul32 temp ,pdata -0x2bb0 007035 branch lpm_dispatch_sleep -: 007037 lpm_set_mult: -0x2bb1 007038 bpatch patch15_5 ,mem_patch15 -0x2bb2 007039 disable wake -0x2bb3 007040 fetch 1 ,mem_state -0x2bb4 007041 rtnbit0 state_insniff -0x2bb5 007042 nbranch lpm_not_match ,match -0x2bb6 007043 call lpm_match -0x2bb7 007044 fetch 2 ,mem_rx_window_sniff -0x2bb8 007045 store 2 ,mem_rx_window -0x2bb9 007046 fetch 1 ,mem_arq -0x2bba 007047 bbit1 wack ,lpm_mult_short -0x2bbb 007048 bmark0 mark_lpm_mult_enable ,lpm_mult_short -0x2bbc 007049 call l2cap_malloc_is_fifo_empty -0x2bbd 007050 nbranch lpm_mult_short ,blank -0x2bbe 007051 fetch 1 ,mem_classic_bt_flag -0x2bbf 007052 bbit1 short_mult_flag ,lpm_mult_short -: 007053 lpm_mult_wait_timeout: -0x2bc0 007054 jam 0 ,mem_lpm_current_mult -0x2bc1 007055 bmark0 mark_lpm_mult_enable ,lpm_mult_short -0x2bc2 007056 fetch 1 ,mem_lpm_mult_cnt -0x2bc3 007057 branch lpm_mult_long ,blank -0x2bc4 007058 increase -1 ,pdata -0x2bc5 007059 store 1 ,mem_lpm_mult_cnt -0x2bc6 007060 rtn -: 007063 classic_bt_set_mult_short_flag: -0x2bc7 007064 arg short_mult_flag ,queue -0x2bc8 007065 branch classic_bluetooth_set_flag -: 007067 classic_bt_clr_mult_short_flag: -0x2bc9 007068 arg short_mult_flag ,queue -0x2bca 007069 branch classic_bluetooth_clr_flag -: 007073 lpm_match: -0x2bcb 007074 jam 0 ,mem_sniff_unint_lost -0x2bcc 007075 fetch 3 ,mem_sniff_rcv -0x2bcd 007076 increase 1 ,pdata -0x2bce 007077 store 3 ,mem_sniff_rcv -0x2bcf 007078 rtn -: 007080 lpm_not_match: -0x2bd0 007081 bpatch patch15_6 ,mem_patch15 -0x2bd1 007082 fetcht 2 ,mem_rx_window_sniff -0x2bd2 007083 rshift temp ,temp -0x2bd3 007084 fetch 2 ,mem_rx_window -0x2bd4 007085 iadd temp ,pdata -0x2bd5 007086 store 2 ,mem_rx_window -: 007087 lpm_lost: -0x2bd6 007088 jam 0 ,mem_lpm_current_mult -0x2bd7 007089 fetch 3 ,mem_sniff_lost -0x2bd8 007090 increase 1 ,pdata -0x2bd9 007091 store 3 ,mem_sniff_lost -0x2bda 007092 fetch 1 ,mem_sniff_unint_lost -0x2bdb 007093 increase 1 ,pdata -0x2bdc 007094 store 1 ,mem_sniff_unint_lost -0x2bdd 007095 rtn -: 007097 lpm_mult_short: -0x2bde 007098 jam 0 ,mem_lpm_current_mult -0x2bdf 007099 fetch 1 ,mem_lpm_mult_timeout -0x2be0 007100 store 1 ,mem_lpm_mult_cnt -0x2be1 007101 rtn -: 007103 lpm_mult_long: -0x2be2 007104 fetcht 1 ,mem_lpm_mult -0x2be3 007105 storet 1 ,mem_lpm_current_mult -0x2be4 007106 rtn -: 007108 lpm_cal_xtal_startup: -0x2be5 007109 bpatch patch15_7 ,mem_patch15 -0x2be6 007110 fetch 1 ,mem_lpm_xtalcnt -0x2be7 007111 nrtn blank -0x2be8 007112 jam clksel_rc ,core_clksel -0x2be9 007113 setarg 0xf0c -0x2bea 007114 call lpm_write_config -0x2beb 007115 setarg 200000 -0x2bec 007116 call sleep -0x2bed 007117 until null ,lpo_edge -0x2bee 007118 copy lpo_time ,alarm -0x2bef 007119 call xtal_fast_wake -0x2bf0 007120 jam clksel_xtal ,core_clksel -0x2bf1 007121 nop 10 -0x2bf2 007122 until null ,lpo_edge -0x2bf3 007123 deposit lpo_time -0x2bf4 007124 isub alarm ,pdata -0x2bf5 007125 increase 0x30 ,pdata -0x2bf6 007126 arg 0xff ,temp -0x2bf7 007127 call ceiling -0x2bf8 007128 store 1 ,mem_lpm_xtalcnt -0x2bf9 007129 nop 30000 -0x2bfa 007130 nop 30000 -0x2bfb 007131 nop 30000 -0x2bfc 007132 rtn -: 007134 lpm_cal_xtal_startup_by_snooze: -0x2bfd 007135 fetch 1 ,mem_lpm_xtalcnt -0x2bfe 007136 nrtn blank -0x2bff 007137 jam 0xff ,core_xtal_stable_time -0x2c00 007138 jam clksel_rc ,core_clksel -0x2c01 007139 call xtal_fast_wake -0x2c02 007140 setarg 1000 -0x2c03 007141 iadd lpo_time ,alarm -0x2c04 007142 snooze -0x2c05 007143 deposit lpo_time -0x2c06 007144 nop 12000 -0x2c07 007145 nop 12000 -0x2c08 007146 nop 12000 -0x2c09 007147 nop 12000 -0x2c0a 007148 nop 12000 -0x2c0b 007149 nop 12000 -0x2c0c 007150 nop 12000 -0x2c0d 007151 nop 12000 -0x2c0e 007152 nop 12000 -0x2c0f 007153 isub alarm ,pdata -0x2c10 007154 add pdata ,0x30 ,pdata -0x2c11 007155 arg 0xff ,temp -0x2c12 007156 call ceiling -0x2c13 007157 store 1 ,mem_lpm_xtalcnt -0x2c14 007158 nop 30000 -0x2c15 007159 nop 30000 -0x2c16 007160 nop 30000 -0x2c17 007161 rtn -: 007166 lpm_write_config: -0x2c18 007167 arg 0xfff ,contw -0x2c19 007168 iand contw ,contw -0x2c1a 007169 fetch 1 ,mem_lpm_config -0x2c1b 007170 and_into 0xf0 ,pdata -0x2c1c 007171 lshift8 pdata ,pdata -0x2c1d 007172 ior contw ,pdata -0x2c1e 007173 hstore 2 ,core_lpm_reg -0x2c1f 007174 ifetch 2 ,contr -0x2c20 007175 istore 2 ,contw -: 007177 lpm_write_ctrl: -0x2c21 007178 setarg lpmreg_sel_ctrl -0x2c22 007179 branch lpm_write -: 007181 lpm_write_ctrl2: -0x2c23 007182 setarg lpmreg_sel_ctrl2 -: 007183 lpm_write: -0x2c24 007184 until null ,lpo_edge -0x2c25 007185 hstore 1 ,core_lpm_wr -0x2c26 007186 until null ,lpo_edge -0x2c27 007187 until null ,lpo_edge -0x2c28 007188 rtn -: 007191 lpm_write_gpio_wakeup: -0x2c29 007192 bpatch patch16_0 ,mem_patch16 -0x2c2a 007193 fetch 4 ,mem_gpio_wakeup_low -0x2c2b 007194 hstore 4 ,core_lpm_reg -0x2c2c 007195 setarg lpmreg_sel_gpiolow -0x2c2d 007196 call lpm_write -0x2c2e 007197 fetch 4 ,mem_gpio_wakeup_high -0x2c2f 007198 hstore 4 ,core_lpm_reg -0x2c30 007199 setarg lpmreg_sel_gpiohigh -0x2c31 007200 branch lpm_write -: 007202 lpm_get_wake_lock: -0x2c32 007203 fetch 2 ,mem_lpm_wake_lock -0x2c33 007204 qset1 pdata -0x2c34 007205 store 2 ,mem_lpm_wake_lock -0x2c35 007206 rtn -: 007208 lpm_put_wake_lock: -0x2c36 007209 fetch 2 ,mem_lpm_wake_lock -0x2c37 007210 qset0 pdata -0x2c38 007211 store 2 ,mem_lpm_wake_lock -0x2c39 007212 rtn -: 007216 lpm_check_wake_lock: -0x2c3a 007217 bpatch patch16_1 ,mem_patch16 -0x2c3b 007218 call app_check_wake_lock -0x2c3c 007219 fetch 2 ,mem_lpm_wake_lock -0x2c3d 007220 copy pdata ,rega -0x2c3e 007221 fetch 1 ,mem_state_map -0x2c3f 007222 isolate1 smap_rxlmp ,pdata -0x2c40 007223 setflag true ,wake_lock_lmp_rx ,rega -0x2c41 007224 fetch 1 ,mem_lmo_opcode1 -0x2c42 007225 fetcht 1 ,mem_lmo_opcode2 -0x2c43 007226 iadd temp ,pdata -0x2c44 007227 fetcht 1 ,mem_lmp_to_send -0x2c45 007228 iadd temp ,pdata -0x2c46 007229 nsetflag blank ,wake_lock_lmp_tx ,rega -0x2c47 007230 fetch 1 ,mem_le_tx_buff_used -0x2c48 007231 nsetflag blank ,wake_lock_ble_tx ,rega -0x2c49 007232 fetch 2 ,mem_l2cap_rxbuff1_len -0x2c4a 007233 fetcht 2 ,mem_l2cap_rxbuff2_len -0x2c4b 007234 iadd temp ,pdata -0x2c4c 007235 nsetflag blank ,wake_lock_l2cap_rx ,rega -0x2c4d 007236 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 -0x2c4e 007237 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega -0x2c4f 007238 fetch util_fifo_len ,mem_ipc_fifo_c512bt -0x2c50 007239 nsetflag blank ,wake_lock_ipc_c512bt ,rega -0x2c51 007240 fetch 1 ,mem_hci_cmd -0x2c52 007241 nsetflag blank ,wake_lock_cmd ,rega -0x2c53 007242 fetch 1 ,mem_device_option -0x2c54 007243 compare dvc_op_module ,pdata ,0xff -0x2c55 007244 call lpm_uart_wake_lock ,true -0x2c56 007245 setarg -8 -0x2c57 007246 iand rega ,rega -0x2c58 007247 copy rega ,pdata -0x2c59 007248 store 2 ,mem_lpm_wake_lock -0x2c5a 007249 rtn -: 007251 lpm_uart_wake_lock: -0x2c5b 007252 hfetch 2 ,core_uart_rxitems -0x2c5c 007253 nsetflag blank ,wake_lock_uart_rx ,rega -0x2c5d 007254 hfetch 2 ,core_uart_txitems -0x2c5e 007255 nsetflag blank ,wake_lock_uart_tx ,rega -0x2c5f 007256 rtn -: 007258 lpm_shut_down: -0x2c60 007259 hfetch 4 ,core_lpm_ctrl -0x2c61 007260 set0 27 ,pdata -0x2c62 007261 hstore 4 ,core_lpm_reg -0x2c63 007262 call lpm_write_ctrl -0x2c64 007263 branch assert -: 007265 lpm_disable_exen_output: -0x2c65 007266 hfetch 4 ,core_lpm_xtalcnt -0x2c66 007267 set0 20 ,pdata -0x2c67 007268 hstore 4 ,core_lpm_reg -0x2c68 007269 branch lpm_write_ctrl2 -: 007271 check_bt_disabled: -0x2c69 007272 fetch 2 ,mem_chip_functions -0x2c6a 007273 bbit1 bt_disabled ,assert -0x2c6b 007274 rtn -: 007275 check_ble_disabled: -0x2c6c 007276 fetch 2 ,mem_chip_functions -0x2c6d 007277 bbit1 ble_disabled ,assert -0x2c6e 007278 rtn -: 007279 check_module_disabled: -0x2c6f 007280 fetch 2 ,mem_chip_functions -0x2c70 007281 bbit1 module_disable ,assert -0x2c71 007282 rtn -: 007343 g24_dispatch: -0x2c72 007344 bpatch patch16_2 ,mem_patch16 -0x2c73 007345 call g24_head_ptr2regc -0x2c74 007346 add regc ,offset_24g_mode ,regb -0x2c75 007347 ifetch 1 ,regb -0x2c76 007349 rtneq disable_24g -0x2c77 007350 beq tx_24g ,g24_transmit_process -0x2c78 007351 beq rx_24g ,g24_receive_process -0x2c79 007352 rtn -: 007354 g24_head_ptr2regc: -0x2c7a 007355 fetcht 2 ,mem_24g_head_ptr -0x2c7b 007356 copy temp ,regc -0x2c7c 007357 rtn -: 007359 g24_receive_process_init: -0x2c7d 007360 call g24_receive_init -0x2c7e 007361 branch g24_mode_switch_init -: 007363 g24_receive_process: -0x2c7f 007364 call g24_mode_switch -0x2c80 007365 call g24_dongle_work_mode_auto -0x2c81 007366 call g24_dongle_bind_mode_auto -0x2c82 007367 branch g24_dongle_search_mode_auto -: 007370 g24_pair_init: -0x2c83 007373 call g24_set0_mem_pid -0x2c84 007374 setarg g24_pair_ch -0x2c85 007375 call g24_store_mem_ch -0x2c86 007376 call g24_store_mem_pair_txpower -0x2c87 007379 add regc ,offset_24g_paring_addr ,rega -0x2c88 007380 ifetch 4 ,rega -0x2c89 007381 branch g24_store_mem_addr -: 007383 g24_ch: -0x2c8a 007384 call g24_head_ptr2regc -0x2c8b 007385 add regc ,offset_24g_current_ch_number ,regb -0x2c8c 007386 ifetcht 1 ,regb -0x2c8d 007388 call g24_ch_temp_incre_size4 -0x2c8e 007389 add regc ,offset_24g_current_ch_number ,contw -0x2c8f 007391 branch g24_contw_istoret_1byte -: 007393 g24_ch_temp_incre_size4: -0x2c90 007394 call g24_ch_calc -0x2c91 007395 increase 1 ,temp -0x2c92 007396 and_into 3 ,temp -0x2c93 007397 rtn -: 007399 g24_ch_calc: -0x2c94 007400 add regc ,offset_24g_addr ,regb -0x2c95 007401 ifetch 1 ,regb -0x2c96 007403 and_into 0x03 ,pdata -0x2c97 007404 mul32 pdata ,4 ,rega -0x2c98 007405 add regc ,offset_24g_ch_map1 ,pdata -0x2c99 007407 iadd rega ,pdata -0x2c9a 007408 iadd temp ,contr -0x2c9b 007409 ifetch 1 ,contr -0x2c9c 007411 branch g24_store_mem_ch -: 007413 g24_set_device_addr: -0x2c9d 007414 call g24_store_mem_tx_power_temp -0x2c9e 007415 call otp_enable_chgpump -0x2c9f 007416 setarg 0x7e2 -0x2ca0 007417 arg mem_temp ,rega -0x2ca1 007418 arg 4 ,temp -0x2ca2 007419 call otpd_read_data -0x2ca3 007420 call otp_disable_chgpump -0x2ca4 007421 fetch 4 ,mem_temp -0x2ca5 007422 call g24_store_mem_device_addr -0x2ca6 007424 nrtn blank -0x2ca7 007425 fetch 4 ,mem_lap -0x2ca8 007427 branch g24_store_mem_device_addr -: 007429 g24_transmit_rf_sta_init: -0x2ca9 007430 call g24_set1_mem_rf_last_sta -0x2caa 007432 setarg 0 -0x2cab 007433 call g24_store_mem_sync_cnt -: 007435 g24_transmit_rf_ctrl_clear: -0x2cac 007436 call g24_fetch_mem_data_type -0x2cad 007438 and_into bits_data ,pdata -0x2cae 007440 branch g24_store_mem_data_type -: 007442 g24_hop_ch_enable: -0x2caf 007443 call g24_fetch_mem_data_type -0x2cb0 007445 set1 bit_hop ,pdata -0x2cb1 007446 call g24_store_mem_data_type -0x2cb2 007449 branch g24_store_mem_txpayload -: 007451 g24_transmit_hop_pac_fail: -0x2cb3 007452 call g24_fetch_mem_rf_work_stage -0x2cb4 007454 beq 1 ,g24_transmit_hop_pac_fail_wo_hop -0x2cb5 007455 beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 -0x2cb6 007456 rtn -: 007458 g24_transmit_hop_pac_fail_wo_hop: -0x2cb7 007459 call g24_set2_mem_sync_cnt -: 007461 g24_transmit_hop_pac_fail_stage1: -0x2cb8 007462 add regc ,offset_24g_hop_pac_retry ,contw -0x2cb9 007463 call g24_mem_set0 -0x2cba 007465 call g24_store_mem_rf_last_sta -0x2cbb 007467 branch g24_transmit_rf_ctrl_clear -: 007469 g24_transmit_hop_pac_fail_hop_stage2: -0x2cbc 007470 call g24_set0_mem_rf_hop_ch -0x2cbd 007472 branch g24_transmit_hop_pac_fail_stage1 -: 007474 g24_transmit_pac_fail_hop_stage3: -0x2cbe 007475 add regc ,offset_24g_txfail_cnt ,rega -0x2cbf 007476 ifetch 1 ,rega -0x2cc0 007478 increase 1 ,pdata -0x2cc1 007479 add regc ,offset_24g_txfail_cnt ,contw -0x2cc2 007480 istore 1 ,contw -0x2cc3 007482 beq 0x20 ,g24_tx_attempt_fail -0x2cc4 007483 call g24_fetch_mem_rf_hop_ch -0x2cc5 007485 beq 1 ,g24_rf_hop_fastly -0x2cc6 007486 setarg 1 -0x2cc7 007487 call g24_store_mem_rf_hop_ch -: 007489 g24_rf_hop_attemp_again: -0x2cc8 007490 call g24_fetch_mem_rf_hop_ch -0x2cc9 007492 bne 1 ,g24_transmit_rf_ctrl_clear -: 007493 g24_rf_hop_fastly: -0x2cca 007494 add regc ,offset_24g_hop_fastly_cnt ,rega -0x2ccb 007495 ifetch 1 ,rega -0x2ccc 007497 increase 1 ,pdata -0x2ccd 007498 call g24_store_mem_hop_fastly_cnt -0x2cce 007500 beq 4 ,g24_rf_hop_fastly_exit -0x2ccf 007501 call g24_ch -0x2cd0 007502 call g24_set2_mem_max_retry -0x2cd1 007504 branch g24_transmit_packet -: 007506 g24_rf_hop_fastly_exit: -0x2cd2 007507 call g24_set0_mem_hop_fastly_cnt -0x2cd3 007509 branch g24_transmit_rf_ctrl_clear -: 007511 g24_set0_mem_hop_fastly_cnt: -0x2cd4 007512 setarg 0 -: 007513 g24_store_mem_hop_fastly_cnt: -0x2cd5 007514 add regc ,offset_24g_hop_fastly_cnt ,contw -0x2cd6 007515 branch g24_contw_istore_1byte -: 007517 g24_transmit_hop_pac_succ_wo_hop: -0x2cd7 007518 call g24_set2_mem_sync_cnt -: 007520 g24_transmit_hop_pac_succ: -0x2cd8 007521 call g24_set0_mem_rf_hop_ch -0x2cd9 007523 call g24_set1_mem_rf_last_sta -0x2cda 007525 branch g24_transmit_rf_ctrl_clear -: 007527 g24_transmit_succ_rf_config: -0x2cdb 007528 call g24_fetch_mem_rf_work_stage -0x2cdc 007530 beq 3 ,g24_transmit_hop_pac_succ -0x2cdd 007531 call g24_fetch_mem_data_type -0x2cde 007533 isolate0 bit_hop ,pdata -0x2cdf 007534 branch g24_transmit_rf_sta_init ,true -0x2ce0 007535 call g24_fetch_mem_rf_work_stage -0x2ce1 007537 beq 1 ,g24_transmit_hop_pac_succ_wo_hop -0x2ce2 007538 beq 2 ,g24_transmit_hop_pac_succ -0x2ce3 007539 rtn -: 007541 g24_rf_sta_check: -0x2ce4 007542 call g24_fetch_mem_pairing_sm -0x2ce5 007544 rtnne state_24g_pairing_success -0x2ce6 007545 call g24_rf_laststa_synccnt_check -0x2ce7 007546 ncall g24_rf_sync_cnt_check ,user2 -0x2ce8 007547 rtn -: 007549 g24_rf_laststa_synccnt_check: -0x2ce9 007550 disable user2 -0x2cea 007551 add regc ,offset_24g_rf_last_sta ,rega -0x2ceb 007552 ifetch 1 ,rega -0x2cec 007554 rtnne 1 -0x2ced 007555 add regc ,offset_24g_sync_cnt ,rega -0x2cee 007556 ifetch 1 ,rega -0x2cef 007558 rtnne 0 -0x2cf0 007559 setarg 1 -0x2cf1 007560 call g24_store_mem_rf_work_stage -0x2cf2 007562 call g24_set4_mem_max_retry -0x2cf3 007564 branch enable_user2 -: 007566 g24_rf_sync_cnt_check: -0x2cf4 007567 add regc ,offset_24g_sync_cnt ,rega -0x2cf5 007568 ifetch 1 ,rega -0x2cf6 007570 branch g24_rf_hop_attemp ,blank -0x2cf7 007571 increase -1 ,pdata -0x2cf8 007572 call g24_store_mem_sync_cnt -0x2cf9 007574 setarg 2 -0x2cfa 007575 call g24_store_mem_rf_work_stage -0x2cfb 007577 call g24_ch -0x2cfc 007579 branch g24_set4_mem_max_retry -: 007581 g24_store_mem_rf_work_stage: -0x2cfd 007582 add regc ,offset_24g_rf_work_stage ,contw -0x2cfe 007583 branch g24_contw_istore_1byte -: 007586 g24_rf_hop_attemp: -0x2cff 007587 setarg 3 -0x2d00 007588 call g24_store_mem_rf_work_stage -0x2d01 007590 call g24_fetch_mem_rf_hop_ch -0x2d02 007592 nbranch g24_rf_hop_attemp_again ,blank -0x2d03 007593 call g24_ch -: 007595 g24_set2_mem_max_retry: -0x2d04 007596 setarg 2 -0x2d05 007597 branch g24_store_mem_max_retry -: 007599 g24_transmit_process: -0x2d06 007600 rtnmark0 mark_24g -0x2d07 007601 set1 mark_24g_conext ,mark -0x2d08 007602 bpatch patch16_3 ,mem_patch16 -0x2d09 007603 add regc ,offset_24g_tx_without_int ,rega -0x2d0a 007604 ifetch 1 ,rega -0x2d0b 007606 beq 1 ,g24_transmit_without_int -0x2d0c 007607 call g24_timer_check -0x2d0d 007608 nbranch g24_transmit_exit ,user -0x2d0e 007609 call g24_interval_calibrate -: 007610 g24_transmit_without_int: -0x2d0f 007611 add regc ,offset_24g_tx_without_int ,contw -0x2d10 007612 call g24_mem_set0 -0x2d11 007614 call g24_txdata_prep -0x2d12 007615 nbranch g24_enter_lpm ,user -0x2d13 007616 call g24_rf_sta_check -: 007617 g24_transmit_start: -0x2d14 007618 call g24_transmit_packet -0x2d15 007619 call g24_power_ctrl -: 007620 g24_transmit_exit: -0x2d16 007621 set0 mark_24g_conext ,mark -0x2d17 007622 rtn -: 007624 g24_timer_timeout: -0x2d18 007625 rtn zero -0x2d19 007626 set1 28 ,pdata -0x2d1a 007627 rtn -: 007629 g24_interval_calibrate: -0x2d1b 007630 add regc ,offset_24g_pac_index ,rega -0x2d1c 007631 ifetch 1 ,rega -0x2d1d 007633 increase 1 ,pdata -0x2d1e 007634 add regc ,offset_24g_pac_index ,contw -0x2d1f 007635 istore 1 ,contw -0x2d20 007637 beq 4 ,g24_interval_max -0x2d21 007638 beq 5 ,g24_interval_min -0x2d22 007639 rtn -: 007640 g24_interval_max: -0x2d23 007641 add regc ,offset_24g_interval_max ,rega -0x2d24 007642 ifetch 1 ,rega -: 007644 g24_interval_update: -0x2d25 007646 add regc ,offset_24g_interval ,contw -0x2d26 007647 branch g24_contw_istore_1byte -: 007649 g24_interval_min: -0x2d27 007650 add regc ,offset_24g_pac_index ,contw -0x2d28 007651 call g24_mem_set0 -0x2d29 007653 add regc ,offset_24g_interval_min ,rega -0x2d2a 007654 ifetch 1 ,rega -0x2d2b 007656 branch g24_interval_update -: 007658 g24_txdata_prep: -0x2d2c 007659 call g24_fetch_mem_pairing_sm -0x2d2d 007661 bne state_24g_pairing_success ,g24_pairing_sm -0x2d2e 007662 bpatch patch16_4 ,mem_patch16 -0x2d2f 007663 call g24_package_data -0x2d30 007664 nbranch g24_txdata_last_pac ,user -0x2d31 007665 call g24_transmit_prep -0x2d32 007666 call g24_power_ctrl_pac_incrs -: 007667 g24_txdata_enable_tx: -0x2d33 007669 setarg ensure_on_24g -: 007670 g24_store_mem_ensure: -0x2d34 007671 add regc ,offset_24g_ensure ,contw -0x2d35 007672 branch g24_contw_istore_1byte -: 007674 g24_txdata_last_pac: -0x2d36 007675 add regc ,offset_24g_ensure ,rega -0x2d37 007676 ifetch 1 ,rega -0x2d38 007678 beq ensure_on_24g ,enable_user -0x2d39 007679 rtn -: 007681 g24_package_data: -0x2d3a 007683 add regc ,offset_24g_cb_data ,temp -0x2d3b 007684 ifetch 2 ,temp -0x2d3c 007686 call callback_func -0x2d3d 007687 nrtn user -0x2d3e 007688 copy rega ,pdata -0x2d3f 007689 store 1 ,mem_rega -0x2d40 007690 add regc ,offset_24g_abort_pac ,contw -0x2d41 007691 call g24_mem_set0 -0x2d42 007693 call g24_transmit_rf_ctrl_clear -0x2d43 007694 store 1 ,mem_24g_common_temp -0x2d44 007695 fetch 1 ,mem_rega -0x2d45 007696 copy pdata ,rega -0x2d46 007697 add rega ,1 ,temp -0x2d47 007698 arg mem_24g_common_temp + 1 ,contw -0x2d48 007699 copy rega ,loopcnt -0x2d49 007700 copy regb ,contr -0x2d4a 007701 call memcpy -0x2d4b 007702 arg mem_24g_common_temp ,rega -: 007703 g24_put_data_in_buff: -0x2d4c 007704 rtnmark0 mark_24g_conext -0x2d4d 007705 add regc ,offset_24g_datalen ,contw -0x2d4e 007706 istoret 1 ,contw -0x2d4f 007708 copy temp ,loopcnt -0x2d50 007709 add regc ,offset_24g_txbuf ,contw -0x2d51 007711 copy rega ,contr -0x2d52 007712 branch memcpy -: 007714 g24_transmit_prep: -0x2d53 007716 add regc ,offset_24g_datalen ,rega -0x2d54 007717 ifetch 1 ,rega -0x2d55 007719 increase 2 ,pdata -0x2d56 007720 add regc ,offset_24g_txlen ,contw -0x2d57 007721 istore 1 ,contw -0x2d58 007724 call g24_fetch_mem_data_type -0x2d59 007726 call g24_store_mem_txpayload -0x2d5a 007729 add regc ,offset_24g_datalen ,rega -0x2d5b 007730 ifetch 1 ,rega -0x2d5c 007732 lshift3 pdata ,pdata -0x2d5d 007733 add regc ,offset_24g_pid ,rega -0x2d5e 007734 ifetcht 1 ,rega -0x2d5f 007736 and temp ,0x03 ,temp -0x2d60 007737 lshift temp ,temp -0x2d61 007738 ior temp ,pdata -0x2d62 007739 add regc ,offset_24g_no_ack ,rega -0x2d63 007740 ifetcht 1 ,rega -0x2d64 007742 iadd temp ,pdata -0x2d65 007743 istore 1 ,contw -0x2d66 007745 add regc ,offset_24g_datalen ,rega -0x2d67 007746 ifetch 1 ,rega -0x2d68 007748 iforce loopcnt -0x2d69 007749 add regc ,offset_24g_txbuf ,contr -0x2d6a 007751 branch memcpy -: 007753 g24_send_abort_packet: -0x2d6b 007754 call g24_set1_mem_abort_pac -0x2d6c 007756 call g24_set0_mem_rf_hop_ch -0x2d6d 007758 call g24_power_ctrl_reinit -0x2d6e 007759 call g24_transmit_rf_ctrl_clear -0x2d6f 007760 store 1 ,mem_24g_common_temp -0x2d70 007761 call g24_put_data_in_buff_pre -0x2d71 007762 call g24_fetch_mem_data_type -0x2d72 007764 set1 bit_abort ,pdata -0x2d73 007765 call g24_store_mem_data_type -0x2d74 007767 call g24_transmit_prep -0x2d75 007768 call g24_txdata_enable_tx -0x2d76 007769 branch g24_transmit_start -: 007771 g24_put_data_in_buff_pre: -0x2d77 007772 store 1 ,mem_24g_common_temp + 1 -0x2d78 007773 call g24_fetch_mem_device_addr -0x2d79 007775 store 4 ,mem_24g_common_temp + 2 -0x2d7a 007776 arg 6 ,temp -0x2d7b 007777 arg mem_24g_common_temp ,rega -0x2d7c 007778 branch g24_put_data_in_buff -: 007780 g24_enter_lpm: -0x2d7d 007781 add regc ,offset_24g_abort_pac ,rega -0x2d7e 007782 ifetch 1 ,rega -0x2d7f 007784 branch g24_send_abort_packet ,blank -: 007785 g24_enter_lpm_prepare: -0x2d80 007787 add regc ,offset_24g_cb_lpm_prepare ,rega -0x2d81 007788 ifetch 2 ,rega -0x2d82 007790 branch callback_func -: 007792 g24_lpm_long_sleep: -0x2d83 007793 call g24_head_ptr2regc -0x2d84 007795 call lpo_calibration -0x2d85 007796 fetch 3 ,mem_clks_per_lpo -0x2d86 007797 rtn blank -0x2d87 007798 add regc ,offset_24g_cb_lpm_before ,temp -0x2d88 007799 ifetch 2 ,temp -0x2d89 007801 call callback_func -0x2d8a 007802 add regc ,offset_24g_enter_hibernate ,temp -0x2d8b 007803 ifetch 8 ,temp -: 007804 g24_lpm_long_sleep2: -0x2d8c 007805 call clk2lpo -0x2d8d 007806 storet 4 ,mem_sleep_counter -0x2d8e 007807 branch lpm_sleep -: 007809 g24_transmit_packet: -0x2d8f 007810 call g24_head_ptr2regc -0x2d90 007811 add regc ,offset_24g_retry ,contw -0x2d91 007812 call g24_mem_set0 -: 007814 g24_transmit_loop: -0x2d92 007815 call g24_transmit_receive_ack -0x2d93 007816 nbranch g24_retransmit ,sync -0x2d94 007817 nbranch g24_retransmit ,user3 -0x2d95 007818 call g24_ackpayload_parse -0x2d96 007819 call g24_power_ctrl_ack_incrs -: 007820 g24_transmit_next_packet: -0x2d97 007821 call g24_head_ptr2regc -0x2d98 007822 add regc ,offset_24g_pid ,rega -0x2d99 007823 ifetch 1 ,rega -0x2d9a 007825 increase 1 ,pdata -0x2d9b 007826 call g24_store_mem_pid -0x2d9c 007828 call g24_fetch_mem_pairing_sm -0x2d9d 007830 bne state_24g_pairing_success ,g24_paring_mode -0x2d9e 007831 call g24_transmit_succ_rf_config -: 007832 g24_transmit_abandon: -0x2d9f 007833 setarg 0 -0x2da0 007834 add regc ,offset_24g_txfail_cnt ,contw -0x2da1 007835 istore 2 ,contw -0x2da2 007839 setarg ensure_off_24g -0x2da3 007840 branch g24_store_mem_ensure -: 007843 g24_transmit_receive_ack: -0x2da4 007844 disable user3 -0x2da5 007845 call g24_transmit -0x2da6 007846 call g24_head_ptr2regc -0x2da7 007847 add regc ,offset_24g_no_ack ,rega -0x2da8 007848 ifetch 1 ,rega -0x2da9 007850 beq no_ack_24g ,g24_transmit_no_ack -0x2daa 007851 call g24_receive_packet -0x2dab 007852 branch g24_end_of_packet -: 007853 g24_transmit_no_ack: -0x2dac 007854 call g24_end_of_packet -0x2dad 007855 branch g24_transmit_next_packet -: 007858 g24_retransmit: -0x2dae 007859 bpatch patch16_5 ,mem_patch16 -0x2daf 007860 add regc ,offset_24g_get_ack_fail ,rega -0x2db0 007861 ifetch 1 ,rega -0x2db1 007863 increase 1 ,pdata -0x2db2 007864 add regc ,offset_24g_get_ack_fail ,contw -0x2db3 007865 istore 1 ,contw -0x2db4 007867 call g24_fetch_mem_pairing_sm -0x2db5 007869 bne state_24g_pairing_success ,g24_tx_paring_retry -0x2db6 007870 add regc ,offset_24g_retry ,rega -0x2db7 007871 ifetcht 1 ,rega -0x2db8 007873 increase 1 ,temp -0x2db9 007874 add regc ,offset_24g_retry ,contw -0x2dba 007875 istoret 1 ,contw -0x2dbb 007877 add regc ,offset_24g_max_retry ,rega -0x2dbc 007878 ifetch 1 ,rega -0x2dbd 007880 isub temp ,pdata -0x2dbe 007881 nbranch g24_transmit_loop ,blank -0x2dbf 007882 bpatch patch16_6 ,mem_patch16 -0x2dc0 007883 call g24_fetch_mem_rf_work_stage -0x2dc1 007885 beq 3 ,g24_transmit_pac_fail_hop_stage3 -0x2dc2 007886 add regc ,offset_24g_hop_pac_retry ,rega -0x2dc3 007887 ifetch 1 ,rega -0x2dc4 007889 increase 1 ,pdata -0x2dc5 007890 add regc ,offset_24g_hop_pac_retry ,contw -0x2dc6 007891 istore 1 ,contw -0x2dc7 007893 beq 2 ,g24_transmit_hop_pac_fail -0x2dc8 007894 call g24_hop_ch_enable -0x2dc9 007895 setarg 1 -0x2dca 007896 call g24_store_mem_max_retry -0x2dcb 007898 branch g24_transmit_packet -: 007900 g24_tx_paring_retry: -0x2dcc 007901 add regc ,offset_24g_get_ack_fail ,rega -0x2dcd 007902 ifetch 1 ,rega -0x2dce 007904 rtnne 0xff -0x2dcf 007905 add regc ,offset_24g_get_ack_fail ,contw -0x2dd0 007906 call g24_mem_set0 -0x2dd1 007908 branch g24_stop_24g_mode -: 007910 g24_tx_attempt_fail: -0x2dd2 007911 add regc ,offset_24g_txfail_cnt ,contw -0x2dd3 007912 call g24_mem_set0 -: 007914 g24_stop_24g_mode: -0x2dd4 007915 jam bt_evt_24g_attempt_fail ,mem_fifo_temp -0x2dd5 007916 branch ui_ipc_send_event -: 007918 g24_ackpayload_parse: -0x2dd6 007919 call g24_read_len_pid_crc -0x2dd7 007920 add regc ,offset_24g_rxdata_length ,rega -0x2dd8 007921 ifetch 1 ,rega -0x2dd9 007923 rtn blank -0x2dda 007924 iforce loopcnt -0x2ddb 007925 add regc ,offset_24g_rxbuf_add2 ,contr -0x2ddc 007927 add regc ,offset_24g_rxpayload ,contw -0x2ddd 007929 branch memcpy -: 007932 g24_read_len_pid_crc: -0x2dde 007934 call g24_fetch_mem_rxbuf_add1 -0x2ddf 007936 rshift3 pdata ,pdata -0x2de0 007937 add regc ,offset_24g_rxdata_length ,contw -0x2de1 007938 istore 1 ,contw -0x2de2 007941 increase 1 ,pdata -0x2de3 007942 add regc ,offset_24g_rxbuf_add1 ,contr -0x2de4 007944 iadd contr ,contr -0x2de5 007945 ifetch 3 ,contr -0x2de6 007946 add regc ,offset_24g_sta_crc ,contw -0x2de7 007947 istore 3 ,contw -0x2de8 007950 call g24_fetch_mem_rxbuf_add1 -0x2de9 007952 rshift pdata ,pdata -0x2dea 007953 and pdata ,0x03 ,pdata -0x2deb 007954 add regc ,offset_24g_sta_pid ,contw -0x2dec 007955 istore 1 ,contw -0x2ded 007957 rtn -: 007959 g24_prep: -0x2dee 007960 disable enable_crc -0x2def 007961 disable enable_white -0x2df0 007962 setarg 0x555555 -0x2df1 007963 iforce crc24_init -0x2df2 007964 rtn -: 007966 g24_set_freq_tx: -0x2df3 007967 call set_sync_on -0x2df4 007968 add regc ,offset_24g_ch ,rega -0x2df5 007969 ifetcht 1 ,rega -0x2df6 007971 branch set_freq_tx -: 007973 g24_transmit: -0x2df7 007974 call g24_prep -0x2df8 007975 call g24_set_freq_tx -0x2df9 007976 set1 txgfsk ,radio_ctrl -0x2dfa 007977 enable encode_fec0 -0x2dfb 007978 enable is_tx -0x2dfc 007979 disable is_rx -0x2dfd 007980 call le_enable -0x2dfe 007981 call g24_fetch_mem_addr -0x2dff 007983 iforce access -0x2e00 007984 inject mod ,32 -0x2e01 007985 enable enable_crc -0x2e02 007986 add regc ,offset_24g_txlen ,rega -0x2e03 007987 ifetch 1 ,rega -0x2e04 007989 iforce loopcnt -0x2e05 007990 add regc ,offset_24g_txpayload ,contr -: 007992 g24tr_loop: -0x2e06 007993 ifetch 1 ,contr -0x2e07 007994 inject mod ,8 -0x2e08 007995 loop g24tr_loop -0x2e09 007996 enable enable_parity -0x2e0a 007997 inject mod ,24 -0x2e0b 007998 disable enable_parity -0x2e0c 007999 until null ,tx_clear -0x2e0d 008000 bpatch patch16_7 ,mem_patch16 -0x2e0e 008001 nop 100 -0x2e0f 008002 disable encode_fec0 -0x2e10 008003 rtn -: 008005 g24_receive_packet: -0x2e11 008006 disable user3 -0x2e12 008007 force 0 ,radio_ctrl -0x2e13 008008 add regc ,offset_24g_ch ,rega -0x2e14 008009 ifetcht 1 ,rega -0x2e15 008011 call set_freq_rx -0x2e16 008012 call rf_rx_enable -: 008013 g24_receive_rxon: -0x2e17 008014 call g24_prep -0x2e18 008015 enable decode_fec0 -0x2e19 008016 enable is_rx -0x2e1a 008017 disable is_tx -0x2e1b 008018 call le_enable -0x2e1c 008019 call g24_fetch_mem_addr -0x2e1d 008021 iforce access -0x2e1e 008022 enable swfine -0x2e1f 008023 add regc ,offset_24g_rx_window ,rega -0x2e20 008024 ifetch 2 ,rega -0x2e21 008026 iforce stop_watch -0x2e22 008027 correlate null ,timeout -0x2e23 008028 nbranch g24_sync_timeout ,sync -0x2e24 008029 enable enable_crc -0x2e25 008030 parse demod ,bucket ,8 -0x2e26 008031 rshift3 pwindow ,pdata -0x2e27 008032 add regc ,offset_24g_rxbuf ,contw -0x2e28 008033 istore 1 ,contw -0x2e29 008035 add regc ,offset_24g_mode ,rega -0x2e2a 008036 ifetch 1 ,rega -0x2e2b 008038 beq rx_24g ,g24_receive_skip -0x2e2c 008039 bpatch patch17_0 ,mem_patch17 -0x2e2d 008040 add regc ,offset_24g_rxbuf ,rega -0x2e2e 008041 ifetch 1 ,rega -0x2e2f 008043 add regc ,offset_24g_data_type ,rega -0x2e30 008044 ifetcht 1 ,rega -0x2e31 008046 icompare bits_data ,temp -0x2e32 008047 nbranch g24_end_of_packet ,true -: 008048 g24_receive_skip: -0x2e33 008049 parse demod ,bucket ,8 -0x2e34 008050 rshift3 pwindow ,pdata -0x2e35 008051 istore 1 ,contw -0x2e36 008052 rshift3 pdata ,pdata -0x2e37 008053 and pdata ,0x1f ,loopcnt -0x2e38 008054 branch g24rx_nopayload ,zero -: 008055 g24rx_loop: -0x2e39 008056 parse demod ,bucket ,8 -0x2e3a 008057 rshift3 pwindow ,pdata -0x2e3b 008058 istore 1 ,contw -0x2e3c 008059 loop g24rx_loop -: 008060 g24rx_nopayload: -0x2e3d 008061 parse demod ,bucket ,24 -0x2e3e 008062 rshift32 pdata ,pdata -0x2e3f 008063 rshift16 pdata ,pdata -0x2e40 008064 istore 3 ,contw -0x2e41 008065 branch g24_end_of_packet ,crc_failed -0x2e42 008066 enable user3 -0x2e43 008067 disable decode_fec0 -0x2e44 008068 rtn -: 008071 g24_end_of_packet: -0x2e45 008072 disable encode_fec0 -0x2e46 008073 disable decode_fec0 -0x2e47 008074 disable enable_crc -0x2e48 008075 disable enable_white -0x2e49 008076 branch shutdown_radio ,is_rx -0x2e4a 008077 until null ,tx_clear -0x2e4b 008078 nop 100 -0x2e4c 008079 branch shutdown_radio -: 008081 g24_sync_timeout: -0x2e4d 008082 call rssi_noise -0x2e4e 008083 branch g24_end_of_packet -: 008085 rssi_noise: -0x2e4f 008086 call save_rssi -0x2e50 008087 rtn blank -0x2e51 008088 add regc ,offset_rssi_noise_index ,rega -0x2e52 008089 ifetcht 1 ,rega -0x2e53 008091 arg mem_rssi_noise_buffer ,rega -0x2e54 008093 call rssi_noise_store -0x2e55 008094 add regc ,offset_rssi_noise_index ,contw -: 008096 g24_contw_istoret_1byte: -0x2e56 008097 istoret 1 ,contw -0x2e57 008098 rtn -: 008100 rssi_noise_store: -0x2e58 008101 arg rssi_buf_len_noise ,regb -0x2e59 008102 branch rssi_store -: 008120 rssi_store: -0x2e5a 008121 copy rega ,pdata -0x2e5b 008122 iadd temp ,contw -0x2e5c 008123 fetch 1 ,mem_rssi -0x2e5d 008124 istore 1 ,contw -0x2e5e 008125 increase 1 ,temp -0x2e5f 008126 copy regb ,pdata -0x2e60 008127 iand_into temp -0x2e61 008128 rtn -: 008130 rssi_average: -0x2e62 008131 arg 0 ,temp -0x2e63 008132 copy rega ,contr -: 008133 rssi_average_loop: -0x2e64 008134 ifetch 1 ,contr -0x2e65 008135 iadd temp ,temp -0x2e66 008136 loop rssi_average_loop -0x2e67 008137 rshift8 temp ,temp -0x2e68 008138 rtn -: 008140 g24_power_ctrl_init: -0x2e69 008141 call g24_head_ptr2regc -0x2e6a 008142 call g24_power_ctrl_incrs_level1 -0x2e6b 008143 setarg 1 -0x2e6c 008144 call g24_store_mem_power_ctrl_level -: 008146 g24_power_ctrl_reinit: -0x2e6d 008147 setarg 0 -0x2e6e 008148 call g24_store_mem_power_ctrl_pac -0x2e6f 008150 istore 1 ,contw -0x2e70 008152 rtn -: 008154 g24_power_ctrl_pac_incrs: -0x2e71 008155 call g24_fetch_mem_power_ctrl_pac -0x2e72 008157 increase 1 ,pdata -: 008158 g24_store_mem_power_ctrl_pac: -0x2e73 008160 add regc ,offset_power_ctrl_packet_cnt ,contw -0x2e74 008161 branch g24_contw_istore_1byte -: 008163 g24_power_ctrl_ack_incrs: -0x2e75 008166 add regc ,offset_power_ctrl_ack_cnt ,rega -0x2e76 008167 ifetch 1 ,rega -0x2e77 008168 increase 1 ,pdata -0x2e78 008169 add regc ,offset_power_ctrl_ack_cnt ,contw -0x2e79 008170 branch g24_contw_istore_1byte -: 008172 g24_power_ctrl: -0x2e7a 008173 bpatch patch17_1 ,mem_patch17 -0x2e7b 008174 call g24_fetch_mem_power_ctrl_pac -0x2e7c 008176 sub pdata ,power_ctrl_max_packet_cnt ,null -0x2e7d 008177 rtn positive -0x2e7e 008178 add regc ,offset_power_ctrl_ack_cnt ,rega -0x2e7f 008179 ifetcht 1 ,rega -0x2e80 008181 isub temp ,temp -0x2e81 008182 call g24_power_ctrl_reinit -0x2e82 008183 setarg offset_power_ctrl_threshold_up -0x2e83 008184 iadd regc ,rega -0x2e84 008185 ifetch 1 ,rega -0x2e85 008187 isub temp ,null -0x2e86 008188 nbranch g24_power_ctrl_incrs ,positive -0x2e87 008189 setarg offset_power_ctrl_threshold_down -0x2e88 008190 iadd regc ,rega -0x2e89 008191 ifetch 1 ,rega -0x2e8a 008193 isub temp ,null -0x2e8b 008194 branch g24_power_ctrl_decrs ,positive -0x2e8c 008195 rtn -: 008197 g24_power_ctrl_incrs: -0x2e8d 008198 add regc ,offset_power_ctrl_level ,rega -0x2e8e 008199 ifetch 1 ,rega -0x2e8f 008201 beq 2 ,g24_power_ctrl_incrs_level2 -0x2e90 008202 increase 1 ,pdata -0x2e91 008203 call g24_store_mem_power_ctrl_level -0x2e92 008205 beq 1 ,g24_power_ctrl_incrs_level1 -: 008206 g24_power_ctrl_incrs_level2: -0x2e93 008207 setarg power_ctrl_losspac_thresh_up2 -0x2e94 008208 call g24_store_mem_power_ctrl_threshold_up -0x2e95 008210 setarg power_ctrl_losspac_thresh_down2 -0x2e96 008211 call g24_store_mem_power_ctrl_threshold_down -0x2e97 008214 add regc ,offset_power_ctrl_txpwr_level2 ,rega -0x2e98 008216 branch g24_ifetch_rega_store_mem_txpower -: 008218 g24_power_ctrl_decrs: -0x2e99 008219 add regc ,offset_power_ctrl_level ,rega -0x2e9a 008220 ifetch 1 ,rega -0x2e9b 008222 beq 0 ,g24_power_ctrl_decrs_level0 -0x2e9c 008223 increase -1 ,pdata -0x2e9d 008224 call g24_store_mem_power_ctrl_level -0x2e9e 008226 beq 0 ,g24_power_ctrl_decrs_level0 -: 008227 g24_power_ctrl_decrs_level1: -: 008230 g24_power_ctrl_incrs_level1: -0x2e9f 008231 setarg power_ctrl_losspac_thresh_up1 -0x2ea0 008232 call g24_store_mem_power_ctrl_threshold_up -0x2ea1 008234 setarg power_ctrl_losspac_thresh_down1 -0x2ea2 008235 call g24_store_mem_power_ctrl_threshold_down -0x2ea3 008238 setarg offset_power_ctrl_txpwr_level1 -: 008239 g24_iadd_offset_mem_txpower: -0x2ea4 008240 iadd regc ,rega -: 008241 g24_ifetch_rega_store_mem_txpower: -0x2ea5 008242 ifetch 1 ,rega -0x2ea6 008244 branch g24_store_mem_txpower -: 008246 g24_power_ctrl_decrs_level0: -0x2ea7 008249 setarg power_ctrl_losspac_thresh_up0 -0x2ea8 008250 call g24_store_mem_power_ctrl_threshold_up -0x2ea9 008252 setarg power_ctrl_losspac_thresh_down0 -0x2eaa 008253 call g24_store_mem_power_ctrl_threshold_down -0x2eab 008256 setarg offset_power_ctrl_txpwr_level0 -0x2eac 008258 branch g24_iadd_offset_mem_txpower -: 008272 g24_start_pairing_sm1: -0x2ead 008273 set1 mark_24g ,mark -0x2eae 008274 call g24_pair_init -: 008275 g24_set_pairing_sm_1: -0x2eaf 008277 setarg state_24g_pairing_1 -0x2eb0 008278 branch g24_store_mem_pairing_sm -: 008280 g24_pairing_sm: -0x2eb1 008281 add regc ,offset_24g_ensure ,rega -0x2eb2 008282 ifetch 1 ,rega -0x2eb3 008284 beq ensure_on_24g ,enable_user -0x2eb4 008285 call g24_fetch_mem_pairing_sm -0x2eb5 008287 beq state_24g_pairing_1 ,g24_pairing_sm_1 -0x2eb6 008288 beq state_24g_pairing_2 ,g24_pairing_sm_2 -0x2eb7 008289 beq state_24g_pairing_3 ,g24_pairing_sm_3 -0x2eb8 008290 branch assert -: 008292 g24_pairing_sm_1: -0x2eb9 008293 setarg state_24g_pairing_1_waiting_ack -0x2eba 008294 call g24_store_mem_pairing_sm -0x2ebb 008296 jam 0xaa ,mem_24g_common_temp -0x2ebc 008297 branch g24_pairing_sm_common -: 008298 g24_pairing_sm_2: -0x2ebd 008299 setarg state_24g_pairing_2_waiting_ack -0x2ebe 008300 call g24_store_mem_pairing_sm -0x2ebf 008302 jam 0x55 ,mem_24g_common_temp -0x2ec0 008303 branch g24_pairing_sm_common -: 008304 g24_pairing_sm_3: -0x2ec1 008305 setarg state_24g_pairing_3_waiting_ack -0x2ec2 008306 call g24_store_mem_pairing_sm -0x2ec3 008308 jam 0x22 ,mem_24g_common_temp -: 008309 g24_pairing_sm_common: -0x2ec4 008310 call g24_fetch_mem_data_type -0x2ec5 008312 and_into bits_data ,pdata -0x2ec6 008313 store 1 ,mem_24g_common_temp + 1 -0x2ec7 008314 call g24_fetch_mem_device_addr -0x2ec8 008316 store 4 ,mem_24g_common_temp + 2 -: 008317 g24_put_pairing_data_in_buff: -0x2ec9 008318 jam 0 ,mem_24g_common_temp + 6 -0x2eca 008319 arg mem_24g_common_temp ,rega -0x2ecb 008320 arg 7 ,temp -0x2ecc 008321 call g24_put_data_in_buff -0x2ecd 008322 call g24_transmit_prep -0x2ece 008323 call g24_txdata_enable_tx -0x2ecf 008324 branch enable_user -: 008326 g24_paring_mode: -0x2ed0 008327 call g24_fetch_mem_pairing_sm -0x2ed1 008329 rtneq state_24g_pairing_success -0x2ed2 008330 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack -0x2ed3 008331 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack -0x2ed4 008332 beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack -0x2ed5 008333 rtn -: 008335 g24_pairing_sm_1_waiting_ack: -0x2ed6 008336 setarg state_24g_pairing_2 -0x2ed7 008337 call g24_store_mem_pairing_sm -0x2ed8 008339 branch g24_transmit_abandon -: 008340 g24_pairing_sm_2_waiting_ack: -0x2ed9 008341 setarg state_24g_pairing_3 -0x2eda 008342 call g24_store_mem_pairing_sm -0x2edb 008344 branch g24_transmit_abandon -: 008345 g24_pairing_sm_3_waiting_ack: -0x2edc 008346 setarg state_24g_pairing_success -0x2edd 008347 call g24_store_mem_pairing_sm -0x2ede 008349 jam bt_evt_24g_pairing_complete ,mem_fifo_temp -0x2edf 008350 call ui_ipc_send_event -0x2ee0 008351 add regc ,offset_24g_rxpayload_add2 ,rega -0x2ee1 008352 ifetch 4 ,rega -0x2ee2 008354 call g24_store_mem_addr -0x2ee3 008356 branch g24_transmit_abandon -: 008358 g24_auto_pair_start: -0x2ee4 008359 set0 mark_24g ,mark -0x2ee5 008360 call g24_auto_pair_set_device_info -0x2ee6 008361 call g24_tx_attemp_data_prep -: 008362 g24_auto_pair_restart: -0x2ee7 008363 call g24_set0_mem_check_dongle_times -: 008364 g24_auto_pair_start_loop: -0x2ee8 008365 nop 2000 -0x2ee9 008366 call g24_fetch_mem_check_dongle_times -0x2eea 008367 beq 0xff ,g24_stop_24g_mode -0x2eeb 008368 call g24_transmit_receive_ack -0x2eec 008369 nbranch g24_auto_pair_retry ,sync -0x2eed 008370 nbranch g24_auto_pair_retry ,user3 -0x2eee 008371 call g24_ackpayload_parse -0x2eef 008372 call g24_head_ptr2regc -0x2ef0 008373 add regc ,offset_24g_paring_addr ,rega -0x2ef1 008374 ifetcht 4 ,rega -0x2ef2 008375 call g24_fetch_mem_addr_isub_temp -0x2ef3 008376 branch g24_start_pairing_sm1 ,zero -0x2ef4 008377 call g24_head_ptr2regc -0x2ef5 008378 add regc ,offset_24g_rxpayload_add2 ,rega -0x2ef6 008379 ifetch 4 ,rega -0x2ef7 008380 beq 0 ,g24_auto_pair_restart -0x2ef8 008381 call g24_store_mem_addr -0x2ef9 008382 branch g24_tx_attemp_dongle_succ -: 008384 g24_auto_pair_retry: -0x2efa 008385 call g24_fetch_mem_check_dongle_times -0x2efb 008386 increase 1 ,pdata -0x2efc 008387 call g24_store_mem_check_dongle_times -0x2efd 008389 call g24_fetch_mem_auto_paring_switch -0x2efe 008390 increase 1 ,pdata -0x2eff 008391 and_into 1 ,pdata -0x2f00 008392 call g24_store_mem_auto_paring_switch -0x2f01 008393 beq 0 ,g24_auto_pair_device_attemp -0x2f02 008394 beq 1 ,g24_auto_pair_pair_attemp -0x2f03 008395 rtn -: 008397 g24_fetch_mem_auto_paring_switch: -0x2f04 008398 setarg offset_24g_auto_pair_switch -0x2f05 008399 branch g24_set_rega_ifetch_1byte -: 008400 g24_store_mem_auto_paring_switch: -0x2f06 008401 arg offset_24g_auto_pair_switch ,rega -0x2f07 008402 branch g24_set_contw_with_regb_store_1byte -: 008404 g24_auto_pair_set_device_info: -0x2f08 008405 call g24_store_mem_tx_power -0x2f09 008406 call g24_fetch_mem_device_addr -0x2f0a 008407 call g24_store_mem_addr -0x2f0b 008408 branch g24_ch -: 008410 g24_auto_pair_device_attemp: -0x2f0c 008411 call g24_auto_pair_set_device_info -0x2f0d 008412 branch g24_auto_pair_start_loop -: 008414 g24_auto_pair_pair_attemp: -0x2f0e 008415 call g24_pair_init -0x2f0f 008416 branch g24_auto_pair_start_loop -: 008419 g24_start_24g_mode: -0x2f10 008420 set0 mark_24g ,mark -0x2f11 008421 call g24_ch -0x2f12 008422 call g24_fetch_mem_pairing_sm -0x2f13 008424 rtnne state_24g_pairing_success -0x2f14 008425 call g24_tx_attemp_data_prep -0x2f15 008426 call g24_set0_mem_check_dongle_times -: 008428 g24_tx_attemp_dongle_loop: -0x2f16 008429 nop 2000 -0x2f17 008430 call g24_fetch_mem_check_dongle_times -0x2f18 008432 beq 0xff ,g24_stop_24g_mode -0x2f19 008433 call g24_transmit_receive_ack -0x2f1a 008434 nbranch g24_attemp_txdata_retry ,sync -0x2f1b 008435 nbranch g24_attemp_txdata_retry ,user3 -: 008436 g24_tx_attemp_dongle_succ: -0x2f1c 008437 set1 mark_24g ,mark -0x2f1d 008438 call g24_set0_mem_check_dongle_times -0x2f1e 008439 setarg state_24g_pairing_success -0x2f1f 008440 call g24_store_mem_pairing_sm -: 008442 g24_app_tx_attempt_success: -0x2f20 008443 jam bt_evt_24g_attempt_success ,mem_fifo_temp -0x2f21 008444 branch ui_ipc_send_event -: 008446 g24_tx_attemp_data_prep: -0x2f22 008447 set1 mark_24g_conext ,mark -0x2f23 008448 jam 0xff ,mem_24g_common_temp -0x2f24 008449 call g24_fetch_mem_data_type -0x2f25 008451 call g24_put_data_in_buff_pre -0x2f26 008452 branch g24_transmit_prep -: 008454 g24_attemp_txdata_retry: -0x2f27 008455 call g24_fetch_mem_check_dongle_times -0x2f28 008457 increase 1 ,pdata -0x2f29 008458 call g24_store_mem_check_dongle_times -0x2f2a 008460 call g24_ch -0x2f2b 008461 branch g24_tx_attemp_dongle_loop -: 008463 g24_check_51cmd_start_24g: -0x2f2c 008464 call g24_store_mem_tx_power -0x2f2d 008467 setarg state_24g_pairing_success -0x2f2e 008468 call g24_store_mem_pairing_sm -0x2f2f 008470 branch g24_start_24g_mode -: 008479 dongle_init: -0x2f30 008480 bpatch patch17_2 ,mem_patch17 -0x2f31 008481 call g24_head_ptr2regc -0x2f32 008482 setarg dongle_rxdata_type1 -0x2f33 008483 add regc ,offset_24g_cb_rxdata_type1 ,contw -0x2f34 008484 istore 2 ,contw -0x2f35 008486 call g24_receive_init -0x2f36 008487 call usb_init -0x2f37 008488 call g24_fetch_mem_pair_mode -0x2f38 008490 bpatch patch17_3 ,mem_patch17 -0x2f39 008491 beq 0x00 ,dongle_auto_bind -0x2f3a 008492 beq 0x01 ,dongle_pc_bind -0x2f3b 008493 beq 0x0f ,dongle_all_powerful -0x2f3c 008494 branch assert -: 008496 g24_receive_init: -0x2f3d 008497 call g24_store_mem_tx_power_temp -0x2f3e 008498 arg 0x80 ,loopcnt -0x2f3f 008499 arg mem_rssi_noise_buffer ,contw -0x2f40 008500 branch memset0 -: 008502 dongle_all_powerful: -0x2f41 008503 call dongle_check_mode -: 008504 dongle_all_powerful_loop: -0x2f42 008505 call g24_dongle_work_mode -0x2f43 008506 call usb_isr -0x2f44 008507 branch dongle_all_powerful_loop -: 008509 dongle_pc_bind: -0x2f45 008510 bpatch patch17_4 ,mem_patch17 -0x2f46 008511 call dongle_check_mode -: 008512 dongle_pc_bind_loop: -0x2f47 008513 call g24_dongle_work_mode -0x2f48 008514 call g24_dongle_bind_mode -0x2f49 008515 call usb_isr -0x2f4a 008516 call dongle_usb_dispatch -0x2f4b 008517 branch dongle_pc_bind_loop -: 008519 dongle_check_mode: -0x2f4c 008523 call g24_set_work_mem_dongle_work_mode -0x2f4d 008524 call g24_set0_mem_dongle_mode_init -0x2f4e 008525 branch g24_set0_mem_ackpayload_enable -: 008527 g24_dongle_work_mode: -0x2f4f 008528 call g24_fetch_mem_dongle_work_mode -0x2f50 008530 rtnne dongle_work -: 008531 g24_dongle_work_mode_start: -0x2f51 008532 call g24_dongle_work_init -0x2f52 008533 call g24_ch_process -0x2f53 008534 call g24_receive_packet_start -0x2f54 008535 branch g24_blank_data_process -: 008537 g24_dongle_work_init: -0x2f55 008538 call g24_fetch_mem_dongle_mode_init -0x2f56 008540 rtnbit1 dongle_work -0x2f57 008541 set1 dongle_work ,pdata -0x2f58 008542 call g24_store_mem_dongle_mode_init -0x2f59 008544 call g24_store_mem_tx_power -0x2f5a 008547 call g24_set0_mem_ackpayload_enable -0x2f5b 008549 jam 0 ,mem_usb_tx_enable -0x2f5c 008550 call g24_set1_mem_abort_pac -0x2f5d 008552 call g24_dongle_init -: 008553 g24_rx_interrupt_clear: -0x2f5e 008554 add regc ,offset_24g_rxbuf ,contw -0x2f5f 008556 arg 66 ,loopcnt -0x2f60 008557 branch clear_mem -: 008559 g24_dongle_init: -0x2f61 008560 call g24_set0_mem_pid -0x2f62 008562 call g24_fetch_mem_rx_addr -0x2f63 008564 call g24_store_mem_addr -0x2f64 008566 branch g24_ch -: 008568 g24_ch_process: -0x2f65 008569 bpatch patch17_5 ,mem_patch17 -0x2f66 008570 call g24_fetch_mem_abort_pac -0x2f67 008572 beq 1 ,g24_noise_rssi -0x2f68 008573 call g24_fetch_mem_hop_pac -0x2f69 008575 beq 1 ,g24_ch -0x2f6a 008576 setarg offset_24g_hop_btclk -0x2f6b 008577 iadd regc ,rega -0x2f6c 008578 ifetcht 4 ,rega -0x2f6d 008580 copy clkn_bt ,pdata -0x2f6e 008581 isub temp ,null -0x2f6f 008582 ncall g24_timer_timeout ,positive -0x2f70 008583 copy pdata ,regb -0x2f71 008584 setarg offset_24g_hop_btclk -0x2f72 008585 iadd regc ,rega -0x2f73 008586 ifetch 4 ,rega -0x2f74 008587 copy pdata ,temp -0x2f75 008589 setarg offset_24g_hop_interval -0x2f76 008590 iadd regc ,rega -0x2f77 008591 copy temp ,pdata -0x2f78 008592 ifetcht 1 ,rega -0x2f79 008594 iadd temp ,temp -0x2f7a 008595 copy regb ,pdata -0x2f7b 008596 isub temp ,null -0x2f7c 008597 nrtn positive -0x2f7d 008598 set0 28 ,pdata -0x2f7e 008599 setarg offset_24g_hop_btclk -0x2f7f 008600 iadd regc ,contw -0x2f80 008601 istore 4 ,contw -: 008603 g24_ch_update: -0x2f81 008604 call g24_ch -0x2f82 008605 call g24_fetch_mem_rf_laststa -0x2f83 008607 increase 1 ,pdata -0x2f84 008608 call g24_store_mem_rf_laststa -0x2f85 008610 rtnne 2 -0x2f86 008611 call g24_set0_mem_rf_laststa -0x2f87 008615 branch g24_set1_mem_abort_pac -: 008617 g24_ch_timer_reinit: -0x2f88 008618 copy clkn_bt ,pdata -0x2f89 008619 arg offset_24g_hop_btclk ,rega -0x2f8a 008620 call g24_set_contw_with_temp -0x2f8b 008621 istore 4 ,contw -0x2f8c 008625 branch g24_set0_mem_rf_laststa -: 008627 g24_noise_rssi: -0x2f8d 008628 arg mem_rssi_noise_buffer ,rega -0x2f8e 008629 call g24_noise_rssi_average -0x2f8f 008630 add regc ,offset_rssi_noise_avg ,contw -0x2f90 008631 istoret 1 ,contw -0x2f91 008633 sub temp ,rssi_thresh_noise ,null -0x2f92 008634 nrtn positive -0x2f93 008635 branch g24_ch -: 008637 g24_noise_rssi_average: -0x2f94 008638 arg rssi_buf_len_noise + 1 ,loopcnt -0x2f95 008639 branch rssi_average -: 008641 g24_blank_data_process: -0x2f96 008642 call g24_ms_blank_data -0x2f97 008643 call g24_kb_blank_data -0x2f98 008644 branch g24_kb_mul_blank_data -: 008646 g24_ms_blank_data: -0x2f99 008647 setarg offset_24g_ms_blank_data_enable -0x2f9a 008648 call g24_set_rega_ifetch_1byte -0x2f9b 008650 rtn blank -0x2f9c 008651 arg timer_ms_blank ,queue -0x2f9d 008652 call timer_check -0x2f9e 008653 nrtn blank -0x2f9f 008654 call g24_set0_mem_ms_blank_data_enable -: 008656 g24_ms_blank_data_2usb: -0x2fa0 008657 setarg ms_report_id -0x2fa1 008658 store 1 ,mem_usb_mouse_data -0x2fa2 008659 setarg 0 -0x2fa3 008660 istore 7 ,contw -0x2fa4 008661 branch g24_data_type1_usbtx_enable -: 008663 g24_kb_blank_data: -0x2fa5 008664 setarg offset_24g_kb_blank_data_enable -0x2fa6 008665 call g24_set_rega_ifetch_1byte -0x2fa7 008667 rtn blank -0x2fa8 008668 arg timer_kb_blank ,queue -0x2fa9 008669 call timer_check -0x2faa 008670 nrtn blank -0x2fab 008671 call g24_set0_mem_kb_blank_data_enable -: 008673 g24_kb_blank_data_2usb: -0x2fac 008674 arg mem_usb_kb_data ,contw -0x2fad 008675 arg 2 ,loopcnt -0x2fae 008676 call memset0 -0x2faf 008677 jam kb_normal_report_id ,mem_usb_kb_data -0x2fb0 008678 branch g24_kb_data_into_ep1_fifo -: 008680 g24_kb_mul_blank_data: -0x2fb1 008681 setarg offset_24g_kb_mul_blank_data_enable -0x2fb2 008682 call g24_set_rega_ifetch_1byte -0x2fb3 008684 rtn blank -0x2fb4 008685 arg timer_kb_mul_blank ,queue -0x2fb5 008686 call timer_check -0x2fb6 008687 nrtn blank -0x2fb7 008688 call g24_set0_mem_kb_mul_blank_data_enable -: 008690 g24_kb_mul_blank_data_2usb: -0x2fb8 008691 arg mem_usb_kb_multikey ,contw -0x2fb9 008692 arg 2 ,loopcnt -0x2fba 008693 call memset0 -0x2fbb 008694 jam kb_multikey_report_id ,mem_usb_kb_multikey -0x2fbc 008695 branch g24_kb_mul_data_into_ep2_fifo -: 008697 g24_dongle_bind_mode: -0x2fbd 008698 call g24_fetch_mem_dongle_work_mode -0x2fbe 008700 rtnne dongle_bind -0x2fbf 008701 call g24_dongle_bind_init -0x2fc0 008702 branch g24_dongle_bind_data_process -: 008704 g24_dongle_bind_init: -0x2fc1 008705 call g24_fetch_mem_dongle_mode_init -0x2fc2 008707 rtnbit1 dongle_bind -0x2fc3 008708 set1 dongle_bind ,pdata -0x2fc4 008709 call g24_store_mem_dongle_mode_init -0x2fc5 008711 call g24_set1_mem_ackpayload_enable -0x2fc6 008713 call g24_pair_init -0x2fc7 008714 setarg 0 -0x2fc8 008715 arg offset_dongle_ms_bind_step ,rega -0x2fc9 008716 call g24_set_contw_with_temp -0x2fca 008718 branch g24_contw_istore_3byte -: 008720 g24_dongle_bind_data_process: -0x2fcb 008721 call g24_receive_transmit_ack -0x2fcc 008722 nbranch g24_rx_interrupt_clear ,user3 -0x2fcd 008723 add regc ,offset_24g_rxbuf ,contr -0x2fce 008724 setarg offset_24g_rxdata_temp -0x2fcf 008725 iadd regc ,contw -0x2fd0 008726 arg 8 ,loopcnt -0x2fd1 008727 call memcpy -0x2fd2 008728 setarg offset_24g_rxdata_temp_add2 -0x2fd3 008729 call g24_set_rega_ifetch_1byte -0x2fd4 008730 beq datatype_bind ,g24_dongle_bind_first_step -0x2fd5 008731 beq datatype_config ,g24_dongle_bind_second_step -0x2fd6 008732 beq datatype_ok ,g24_dongle_bind_third_step -0x2fd7 008733 beq 0xff ,g24_data_attemp -0x2fd8 008734 branch g24_rx_interrupt_clear -: 008736 g24_dongle_bind_first_step: -0x2fd9 008737 call g24_fetch_mem_rxdata_temp_add3_1byte -0x2fda 008738 beq bind_mouse ,g24_dongle_bind_first_step_mouse -0x2fdb 008739 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard -0x2fdc 008740 rtn -: 008741 g24_dongle_bind_first_step_mouse: -0x2fdd 008742 setarg 1 -0x2fde 008743 call g24_store_mem_ms_bind_step -: 008745 g24_dongle_bind_ms_payload_cfg: -0x2fdf 008746 setarg datatype_mouse -0x2fe0 008747 call g24_store_mem_bind_payload -: 008749 g24_dongle_bind_payload_cfg: -0x2fe1 008750 setarg 0x80 -0x2fe2 008751 arg offset_24g_bind_payload_add1 ,rega -0x2fe3 008752 call g24_set_contw_with_regb_store_1byte -0x2fe4 008754 call g24_fetch_mem_rx_addr -0x2fe5 008756 arg offset_24g_bind_payload_add2 ,rega -0x2fe6 008757 call g24_set_contw_with_temp -0x2fe7 008759 branch g24_contw_istore_4byte -: 008761 g24_dongle_bind_first_step_keyboard: -0x2fe8 008762 setarg 1 -0x2fe9 008763 call g24_store_mem_kb_bind_step -: 008765 g24_dongle_bind_kb_payload_cfg: -0x2fea 008766 setarg datatype_keyboard -0x2feb 008767 call g24_store_mem_bind_payload -0x2fec 008769 branch g24_dongle_bind_payload_cfg -: 008771 g24_dongle_bind_second_step: -0x2fed 008772 call g24_fetch_mem_rxdata_temp_add3_1byte -0x2fee 008773 beq bind_mouse ,g24_dongle_bind_second_step_mouse -0x2fef 008774 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard -0x2ff0 008775 rtn -: 008776 g24_dongle_bind_second_step_mouse: -0x2ff1 008777 call g24_dongle_bind_ms_payload_cfg -0x2ff2 008778 setarg offset_dongle_ms_bind_step -0x2ff3 008779 call g24_set_rega_ifetch_1byte -0x2ff4 008781 beq 1 ,g24_dongle_ms_bind_step_set2 -0x2ff5 008782 rtn -: 008783 g24_dongle_ms_bind_step_set2: -0x2ff6 008784 setarg 2 -: 008786 g24_store_mem_ms_bind_step: -0x2ff7 008787 arg offset_dongle_ms_bind_step ,rega -0x2ff8 008788 branch g24_set_contw_with_regb_store_1byte -: 008790 g24_dongle_bind_second_step_keyboard: -0x2ff9 008791 call g24_dongle_bind_kb_payload_cfg -0x2ffa 008792 setarg offset_dongle_kb_bind_step -0x2ffb 008793 call g24_set_rega_ifetch_1byte -0x2ffc 008795 beq 1 ,g24_dongle_kb_bind_step_set2 -0x2ffd 008796 rtn -: 008797 g24_dongle_kb_bind_step_set2: -0x2ffe 008798 setarg 2 -: 008800 g24_store_mem_kb_bind_step: -0x2fff 008801 arg offset_dongle_kb_bind_step ,rega -0x3000 008802 branch g24_set_contw_with_regb_store_1byte -: 008804 g24_dongle_bind_third_step: -0x3001 008805 call g24_fetch_mem_rxdata_temp_add3_1byte -0x3002 008806 beq bind_mouse ,g24_dongle_bind_third_step_mouse -0x3003 008807 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard -0x3004 008808 rtn -: 008809 g24_dongle_bind_third_step_mouse: -0x3005 008810 setarg offset_dongle_ms_bind_step -0x3006 008811 call g24_set_rega_ifetch_1byte -0x3007 008813 beq 2 ,g24_dongle_ms_bind_step_success -0x3008 008814 rtn -: 008815 g24_dongle_ms_bind_step_success: -0x3009 008816 call g24_fetch_mem_bind_device_status -0x300a 008818 or_into 0x01 ,pdata -0x300b 008819 call g24_store_mem_bind_device_status -: 008821 g24_dongle_bind_exit: -0x300c 008822 setarg 0 -0x300d 008823 setarg offset_dongle_ms_bind_step -0x300e 008824 iadd regc ,contw -0x300f 008825 istore 2 ,contw -0x3010 008826 branch g24_rx_interrupt_clear -: 008828 g24_dongle_bind_third_step_keyboard: -0x3011 008829 setarg offset_dongle_kb_bind_step -0x3012 008830 call g24_set_rega_ifetch_1byte -0x3013 008832 bne 0 ,g24_dongle_kb_bind_step_success -0x3014 008833 rtn -: 008834 g24_dongle_kb_bind_step_success: -0x3015 008835 call g24_fetch_mem_bind_device_status -0x3016 008837 or_into 0x02 ,pdata -0x3017 008838 call g24_store_mem_bind_device_status -0x3018 008840 branch g24_dongle_bind_exit -: 008843 dongle_usb_dispatch: -0x3019 008844 fetch 1 ,mem_usb0_get_set_report -0x301a 008845 rtn blank -0x301b 008846 jam 0 ,mem_usb0_get_set_report -0x301c 008847 fetch 2 ,mem_usb_setup_bvalue_temp -0x301d 008848 arg pc_set_report ,temp -0x301e 008849 isub temp ,null -0x301f 008850 nrtn zero -0x3020 008852 fetch 1 ,mem_usb0_set_report_data -0x3021 008853 rtnne pc_report_id -0x3022 008854 fetch 1 ,mem_usb0_set_report_data + 1 -0x3023 008855 bpatch patch17_6 ,mem_patch17 -0x3024 008856 beq command_mode ,dongle_dispose_cmd_mode -0x3025 008857 beq command_bind ,dongle_dispose_cmd_bind -0x3026 008858 beq command_current_project ,dongle_dispose_cmd_current_project -0x3027 008859 beq command_current_mode ,dongle_dispose_cmd_current_mode -0x3028 008860 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version -0x3029 008861 beq command_user_defined ,dongle_dispose_cmd_user_defined -: 008862 usb0_data_ready_report_set0: -0x302a 008863 jam 0 ,mem_usb0_data_ready_report -0x302b 008864 rtn -: 008865 dongle_dispose_cmd_bind: -0x302c 008866 fetch 1 ,mem_usb0_set_report_data + 2 -0x302d 008867 beq com_bind_get ,dongle_dispose_cmd_get_bind -0x302e 008868 beq com_bind_exit ,dongle_dispose_cmd_exit_bind -0x302f 008869 beq com_read_mode ,dongle_dispose_cmd_read_mode -0x3030 008870 branch usb0_data_ready_report_set0 -: 008871 dongle_dispose_cmd_get_bind: -0x3031 008872 call g24_fetch_mem_bind_device_status -0x3032 008874 store 1 ,mem_usb0_get_report_data + 1 -0x3033 008875 branch usb0_data_ready_report_set1 -: 008876 dongle_dispose_cmd_exit_bind: -0x3034 008877 call g24_set_work_mem_dongle_work_mode -0x3035 008879 call g24_set0_mem_dongle_mode_init -0x3036 008881 call g24_fetch_mem_bind_device_status -0x3037 008883 store 1 ,mem_usb0_get_report_data + 1 -0x3038 008884 branch usb0_data_ready_report_set1 -: 008886 dongle_dispose_cmd_read_mode: -: 008887 dongle_dispose_in_bind_mode: -0x3039 008888 jam command_bind ,mem_usb0_get_report_data + 1 -0x303a 008889 branch usb0_data_ready_report_set1 -: 008891 dongle_dispose_cmd_mode: -0x303b 008892 fetch 1 ,mem_usb0_set_report_data + 2 -0x303c 008893 beq com_mode_bind ,dongle_enter_bind_mode -0x303d 008895 branch usb0_data_ready_report_set0 -: 008896 dongle_enter_bind_mode: -0x303e 008899 call g24_bind_mode_enable -: 008900 usb0_data_ready_report_set1: -0x303f 008901 jam 1 ,mem_usb0_data_ready_report -0x3040 008902 rtn -: 008907 dongle_dispose_cmd_current_project: -0x3041 008908 jam product_id ,mem_usb0_get_report_data + 1 -0x3042 008909 branch usb0_data_ready_report_set1 -: 008911 dongle_dispose_cmd_current_mode: -0x3043 008912 call g24_fetch_mem_dongle_work_mode -0x3044 008914 beq dongle_work ,dongle_dispose_in_work_mode -0x3045 008915 beq dongle_bind ,dongle_dispose_in_bind_mode -0x3046 008917 rtn -: 008918 dongle_dispose_in_work_mode: -0x3047 008919 jam command_mode ,mem_usb0_get_report_data + 1 -0x3048 008920 branch usb0_data_ready_report_set1 -: 008925 dongle_dispose_cmd_current_fw_version: -0x3049 008926 jam fw_version0 ,mem_usb0_get_report_data + 1 -0x304a 008927 jam fw_version1 ,mem_usb0_get_report_data + 2 -0x304b 008928 jam fw_version2 ,mem_usb0_get_report_data + 3 -0x304c 008929 branch usb0_data_ready_report_set1 -: 008931 dongle_dispose_cmd_user_defined: -0x304d 008933 call g24_set1_mem_ackpayload_enable -0x304e 008934 fetch 1 ,mem_usb0_set_report_data + 2 -0x304f 008935 increase 2 ,pdata -0x3050 008936 copy pdata ,loopcnt -0x3051 008937 arg mem_usb0_set_report_data ,contr -0x3052 008938 setarg offset_24g_ackpayload -0x3053 008939 iadd regc ,contw -0x3054 008940 branch memcpy -: 008943 dongle_auto_bind: -0x3055 008944 bpatch patch17_7 ,mem_patch17 -0x3056 008945 call g24_mode_switch_init -: 008946 dongle_auto_bind_loop: -0x3057 008947 call g24_receive_process -0x3058 008948 call usb_isr -0x3059 008949 branch dongle_auto_bind_loop -: 008951 g24_dongle_work_mode_auto: -0x305a 008952 call g24_fetch_mem_dongle_work_mode -0x305b 008954 rtnne dongle_work -0x305c 008955 call g24_dongle_work_mode_start -0x305d 008956 branch g24_rx_nodata_process -: 008958 g24_dongle_bind_mode_auto: -0x305e 008959 call g24_fetch_mem_dongle_work_mode -0x305f 008961 rtnne dongle_bind -0x3060 008962 call g24_dongle_bind_init -0x3061 008963 call g24_dongle_bind_data_process -0x3062 008964 call g24_fetch_mem_bind_device_status -0x3063 008966 rtn blank -0x3064 008967 call g24_set0_mem_mode_switch -0x3065 008969 call dongle_check_mode -0x3066 008970 call g24_enable_nodata_timer -: 008971 g24_timer_init: -0x3067 008972 setarg 0 -0x3068 008973 add regc ,offset_24g_tx_btclk ,contw -0x3069 008975 branch g24_contw_istore_4byte -: 008977 g24_timer_check: -0x306a 008978 call disable_user -0x306b 008979 add regc ,offset_24g_tx_btclk ,rega -0x306c 008980 ifetcht 4 ,rega -0x306d 008982 copy clkn_bt ,pdata -0x306e 008983 isub temp ,null -0x306f 008984 ncall g24_timer_timeout ,positive -0x3070 008985 copy pdata ,regb -0x3071 008986 add regc ,offset_24g_tx_btclk ,rega -0x3072 008987 ifetch 4 ,rega -0x3073 008989 add regc ,offset_24g_interval ,rega -0x3074 008990 ifetcht 1 ,rega -0x3075 008992 iadd temp ,temp -0x3076 008993 copy regb ,pdata -0x3077 008994 isub temp ,null -0x3078 008995 nrtn positive -0x3079 008996 set0 28 ,pdata -0x307a 008997 add regc ,offset_24g_tx_btclk ,contw -0x307b 008998 istore 4 ,contw -0x307c 009000 branch enable_user -: 009002 g24_mode_switch_init: -0x307d 009003 setarg 1 -0x307e 009004 call g24_store_mem_mode_switch -0x307f 009006 call g24_set0_mem_time_slice -0x3080 009008 setarg 0xff -0x3081 009009 add regc ,offset_24g_interval ,contw -0x3082 009010 istore 1 ,contw -0x3083 009012 branch g24_timer_init -: 009014 g24_mode_switch: -0x3084 009015 setarg offset_24g_mode_switch -0x3085 009016 call g24_set_rega_ifetch_1byte -0x3086 009018 rtn blank -0x3087 009019 call g24_timer_check -0x3088 009020 nrtn user -0x3089 009021 call g24_fetch_mem_time_slice -0x308a 009023 increase 1 ,pdata -0x308b 009024 and_into 1 ,pdata -0x308c 009025 call g24_store_mem_time_slice -0x308d 009027 beq 0 ,dongle_check_mode -0x308e 009028 beq 1 ,g24_bind_mode_enable -0x308f 009029 rtn -: 009031 g24_bind_mode_enable: -0x3090 009035 setarg dongle_bind -0x3091 009036 call g24_store_mem_dongle_work_mode -0x3092 009037 branch g24_set0_mem_dongle_mode_init -: 009039 g24_enable_nodata_timer: -0x3093 009040 setarg 1 -0x3094 009041 call g24_store_mem_nodata_timer_enable -: 009043 g24_enable_nodata_timer_init: -0x3095 009044 setarg timer_nodata_delay -0x3096 009045 arg timer_nodata ,queue -0x3097 009046 branch timer_init -: 009048 g24_rx_nodata_process: -0x3098 009049 call g24_fetch_mem_nodata_timer_enable -0x3099 009051 rtn blank -0x309a 009052 arg timer_nodata ,queue -0x309b 009053 call timer_check -0x309c 009054 nrtn blank -0x309d 009055 call g24_set0_mem_nodata_timer_enable -0x309e 009058 setarg dongle_search -0x309f 009059 call g24_store_mem_dongle_work_mode -0x30a0 009061 call g24_set0_mem_dongle_mode_init -0x30a1 009063 branch g24_rx_interrupt_clear -: 009065 g24_dongle_search_mode_auto: -0x30a2 009066 bpatch patch18_0 ,mem_patch18 -0x30a3 009067 call g24_fetch_mem_dongle_work_mode -0x30a4 009069 rtnne dongle_search -0x30a5 009070 call g24_dongle_search_mode_init -0x30a6 009071 call g24_rx_auto_addr_ch_search -0x30a7 009072 call g24_receive_transmit_ack -0x30a8 009073 nbranch g24_rx_interrupt_clear ,user3 -0x30a9 009075 call g24_dongle_search_addr_check -0x30aa 009076 call g24_receive_packet_parse ,zero -0x30ab 009080 call dongle_check_mode -0x30ac 009081 call g24_fetch_mem_dongle_mode_init -0x30ad 009083 set1 dongle_work ,pdata -0x30ae 009084 call g24_store_mem_dongle_mode_init -0x30af 009086 call g24_rx_interrupt_clear -0x30b0 009087 call g24_enable_nodata_timer -0x30b1 009088 call g24_dongle_search_addr_check -0x30b2 009089 branch g24_dg_ch_num_reinit ,zero -0x30b3 009090 setarg offset_24g_kb_addr -0x30b4 009091 call g24_set_rega_ifetcht_4byte -0x30b5 009093 call g24_fetch_mem_addr_isub_temp -0x30b6 009094 branch g24_kb_ch_num_reinit ,zero -0x30b7 009095 setarg offset_24g_mouse_addr -0x30b8 009096 call g24_set_rega_ifetcht_4byte -0x30b9 009098 call g24_fetch_mem_addr_isub_temp -0x30ba 009099 branch g24_ms_ch_num_reinit ,zero -0x30bb 009100 rtn -: 009102 g24_dongle_search_addr_check: -0x30bc 009103 setarg offset_24g_rx_addr -0x30bd 009104 call g24_set_rega_ifetcht_4byte -: 009106 g24_fetch_mem_addr_isub_temp: -0x30be 009107 call g24_fetch_mem_addr -0x30bf 009109 isub temp ,null -0x30c0 009110 rtn -: 009112 g24_dg_ch_num_reinit: -0x30c1 009113 setarg offset_24g_dg_ch_number -0x30c2 009114 call g24_set_rega_ifetch_1byte -: 009116 g24_current_ch_num_reinit: -0x30c3 009118 add regc ,offset_24g_current_ch_number ,contw -0x30c4 009119 branch g24_contw_istore_1byte -: 009121 g24_kb_ch_num_reinit: -0x30c5 009122 setarg offset_24g_kb_ch_number -0x30c6 009123 call g24_set_rega_ifetch_1byte -0x30c7 009125 branch g24_current_ch_num_reinit -: 009126 g24_ms_ch_num_reinit: -0x30c8 009127 setarg offset_24g_ms_ch_number -0x30c9 009128 call g24_set_rega_ifetch_1byte -0x30ca 009130 branch g24_current_ch_num_reinit -: 009132 g24_dongle_search_mode_init: -0x30cb 009133 call g24_fetch_mem_dongle_mode_init -0x30cc 009135 rtnbit1 dongle_search -0x30cd 009136 set1 dongle_search ,pdata -0x30ce 009137 call g24_store_mem_dongle_mode_init -0x30cf 009139 call g24_set0_mem_time_slice -0x30d0 009141 call g24_set1_mem_ackpayload_enable -0x30d1 009143 setarg 0 -0x30d2 009144 add regc ,offset_rssi_noise_dg_index ,contw -0x30d3 009145 istore 3 ,contw -0x30d4 009147 arg offset_24g_dg_config_ch_once ,rega -0x30d5 009148 call g24_set_contw_with_temp -0x30d6 009149 istore 7 ,contw -0x30d7 009152 call g24_dongle_search_addr_check -0x30d8 009153 nrtn zero -0x30d9 009154 add regc ,offset_24g_current_ch_number ,rega -0x30da 009155 ifetch 1 ,rega -0x30db 009157 arg offset_24g_dg_ch_number ,rega -0x30dc 009158 call g24_set_contw_with_regb_store_1byte -0x30dd 009160 add regc ,offset_24g_ch ,rega -0x30de 009161 ifetch 1 ,rega -0x30df 009164 branch g24_store_mem_dg_last_ch -: 009166 g24_rx_auto_addr_ch_search: -0x30e0 009167 bpatch patch18_1 ,mem_patch18 -0x30e1 009168 call g24_fetch_mem_time_slice -0x30e2 009170 increase 1 ,pdata -0x30e3 009171 and_into 3 ,pdata -0x30e4 009172 call g24_store_mem_time_slice -0x30e5 009175 beq 0 ,g24_rx_auto_bind_config_kb -0x30e6 009176 beq 1 ,g24_rx_auto_bind_config_dongle -0x30e7 009177 beq 2 ,g24_rx_auto_bind_config_mouse -0x30e8 009178 beq 3 ,g24_rx_auto_bind_config_dongle -0x30e9 009179 rtn -: 009181 g24_rx_auto_bind_config_mouse: -0x30ea 009182 call g24_dongle_bind_ms_payload_cfg -0x30eb 009183 setarg offset_24g_mouse_addr -0x30ec 009184 call g24_set_rega_ifetch_4byte -0x30ed 009186 branch g24_rx_auto_addr_ch_search ,blank -0x30ee 009187 call g24_store_mem_addr -0x30ef 009189 setarg offset_24g_ms_config_ch_once -0x30f0 009190 call g24_set_rega_ifetch_1byte -0x30f1 009192 call g24_ms_config_ch_once ,blank -0x30f2 009193 setarg offset_24g_ms_last_ch -0x30f3 009194 call g24_set_rega_ifetch_1byte -0x30f4 009196 call g24_store_mem_ch -0x30f5 009198 add regc ,offset_rssi_noise_ms_index ,rega -0x30f6 009199 ifetcht 1 ,rega -0x30f7 009201 arg mem_rssi_noise_ms_buffer ,rega -0x30f8 009202 call rssi_noise_store -0x30f9 009203 add regc ,offset_rssi_noise_ms_index ,contw -0x30fa 009204 istoret 1 ,contw -0x30fb 009206 call g24_noise_rssi_average -0x30fc 009207 add regc ,offset_rssi_noise_ms_avg ,contw -0x30fd 009208 istoret 1 ,contw -0x30fe 009210 sub temp ,rssi_thresh_noise ,null -0x30ff 009211 nrtn positive -0x3100 009212 setarg offset_24g_ms_ch_number -0x3101 009213 call g24_set_rega_ifetcht_1byte -0x3102 009215 call g24_ch_temp_incre_size4 -0x3103 009216 arg offset_24g_ms_ch_number ,rega -0x3104 009217 call g24_set_contw_with_regb2 -0x3105 009218 istoret 1 ,contw -: 009220 g24_store_mem_ms_last_ch: -0x3106 009222 arg offset_24g_ms_last_ch ,rega -0x3107 009223 branch g24_set_contw_with_regb_store_1byte -: 009225 g24_ms_config_ch_once: -0x3108 009226 setarg 1 -0x3109 009227 arg offset_24g_ms_config_ch_once ,rega -0x310a 009228 call g24_set_contw_with_regb_store_1byte -0x310b 009230 arg 0 ,temp -0x310c 009231 call g24_ch_calc -0x310d 009234 branch g24_store_mem_ms_last_ch -: 009236 g24_rx_auto_bind_config_kb: -0x310e 009237 call g24_dongle_bind_kb_payload_cfg -0x310f 009238 setarg offset_24g_kb_addr -0x3110 009239 call g24_set_rega_ifetch_4byte -0x3111 009241 branch g24_rx_auto_addr_ch_search ,blank -0x3112 009242 call g24_store_mem_addr -0x3113 009244 setarg offset_24g_kb_config_ch_once -0x3114 009245 call g24_set_rega_ifetch_1byte -0x3115 009247 call g24_kb_config_ch_once ,blank -0x3116 009248 setarg offset_24g_kb_last_ch -0x3117 009249 call g24_set_rega_ifetch_1byte -0x3118 009251 call g24_store_mem_ch -0x3119 009253 add regc ,offset_rssi_noise_kb_index ,rega -0x311a 009254 ifetcht 1 ,rega -0x311b 009256 arg mem_rssi_noise_kb_buffer ,rega -0x311c 009257 call rssi_noise_store -0x311d 009258 add regc ,offset_rssi_noise_kb_index ,contw -0x311e 009259 istoret 1 ,contw -0x311f 009261 call g24_noise_rssi_average -0x3120 009262 add regc ,offset_rssi_noise_kb_avg ,contw -0x3121 009263 istoret 1 ,contw -0x3122 009265 sub temp ,rssi_thresh_noise ,null -0x3123 009266 nrtn positive -0x3124 009267 setarg offset_24g_kb_ch_number -0x3125 009268 call g24_set_rega_ifetcht_1byte -0x3126 009270 call g24_ch_temp_incre_size4 -0x3127 009271 arg offset_24g_kb_ch_number ,rega -0x3128 009272 call g24_set_contw_with_regb2 -0x3129 009273 istoret 1 ,contw -: 009275 g24_store_mem_kb_last_ch: -0x312a 009277 arg offset_24g_kb_last_ch ,rega -0x312b 009278 branch g24_set_contw_with_regb_store_1byte -: 009280 g24_kb_config_ch_once: -0x312c 009281 setarg 1 -0x312d 009282 arg offset_24g_kb_config_ch_once ,rega -0x312e 009283 call g24_set_contw_with_regb_store_1byte -0x312f 009285 arg 0 ,temp -0x3130 009286 call g24_ch_calc -0x3131 009289 branch g24_store_mem_kb_last_ch -: 009291 g24_rx_auto_bind_config_dongle: -0x3132 009292 call g24_dongle_bind_ms_payload_cfg -0x3133 009293 call g24_fetch_mem_rx_addr -0x3134 009295 call g24_store_mem_addr -0x3135 009297 setarg offset_24g_dg_config_ch_once -0x3136 009298 call g24_set_rega_ifetch_1byte -0x3137 009300 call g24_dg_config_ch_once ,blank -0x3138 009301 call g24_dg_store_config_ch -0x3139 009302 add regc ,offset_rssi_noise_dg_index ,rega -0x313a 009303 ifetcht 1 ,rega -0x313b 009305 arg mem_rssi_noise_dg_buffer ,rega -0x313c 009306 call rssi_noise_store -0x313d 009307 add regc ,offset_rssi_noise_dg_index ,contw -0x313e 009308 istoret 1 ,contw -0x313f 009310 call g24_noise_rssi_average -0x3140 009311 add regc ,offset_rssi_noise_dg_avg ,contw -0x3141 009312 istoret 1 ,contw -0x3142 009314 sub temp ,rssi_thresh_noise ,null -0x3143 009315 nrtn positive -0x3144 009316 setarg offset_24g_dg_ch_number -0x3145 009317 call g24_set_rega_ifetcht_1byte -0x3146 009319 call g24_ch_temp_incre_size4 -0x3147 009320 arg offset_24g_dg_ch_number ,rega -0x3148 009321 call g24_set_contw_with_regb2 -0x3149 009322 istoret 1 ,contw -: 009324 g24_store_mem_dg_last_ch: -0x314a 009327 arg offset_24g_dg_last_ch ,rega -0x314b 009328 branch g24_set_contw_with_regb_store_1byte -: 009331 g24_dg_config_ch_once: -0x314c 009336 setarg 1 -0x314d 009337 arg offset_24g_dg_config_ch_once ,rega -0x314e 009338 call g24_set_contw_with_regb_store_1byte -: 009339 g24_dg_store_config_ch: -0x314f 009340 setarg offset_24g_dg_last_ch -0x3150 009341 call g24_set_rega_ifetch_1byte -0x3151 009342 branch g24_store_mem_ch -: 009345 g24_transmit_ack: -0x3152 009347 add regc ,offset_24g_rxbuf ,rega -0x3153 009348 ifetch 1 ,rega -0x3154 009350 call g24_store_mem_data_type -0x3155 009353 call g24_read_len_pid_crc -0x3156 009355 call g24_fetch_mem_rxbuf_add1 -0x3157 009357 isolate1 bit_ack_24g ,pdata -0x3158 009358 branch g24tx_no_ack ,true -: 009359 g24tx_with_ack: -0x3159 009360 call g24_ackpayload_prep -0x315a 009361 call g24_transmit_prep -0x315b 009362 call g24_transmit -: 009363 g24tx_no_ack: -0x315c 009364 branch g24_end_of_packet -: 009366 g24_ackpayload_prep: -0x315d 009367 bpatch patch18_2 ,mem_patch18 -0x315e 009368 add regc ,offset_24g_datalen ,contw -0x315f 009369 call g24_mem_set0 -0x3160 009371 setarg offset_24g_ackpayload_enable -0x3161 009372 call g24_set_rega_ifetch_1byte -0x3162 009374 rtn blank -0x3163 009375 setarg 0x06 -0x3164 009376 add regc ,offset_24g_datalen ,contw -0x3165 009377 istore 1 ,contw -0x3166 009379 arg 0x06 ,loopcnt -0x3167 009380 setarg offset_24g_bind_payload -0x3168 009381 iadd regc ,contr -0x3169 009383 add regc ,offset_24g_txbuf ,contw -0x316a 009385 branch memcpy -: 009388 g24_receive_packet_start: -0x316b 009389 call g24_receive_transmit_ack -0x316c 009390 nbranch g24_rx_interrupt_clear ,user3 -0x316d 009391 branch g24_receive_packet_parse -: 009393 g24_receive_transmit_ack: -0x316e 009394 call g24_rx_interrupt_clear -0x316f 009395 call g24_receive_packet -0x3170 009396 nrtn user3 -0x3171 009397 branch g24_transmit_ack -: 009399 g24_receive_packet_parse: -0x3172 009400 bpatch patch18_3 ,mem_patch18 -0x3173 009401 call g24_receive_packet_parse_pid_crc -0x3174 009402 nbranch g24_rx_interrupt_clear ,user -0x3175 009403 add regc ,offset_24g_rxdata_length ,rega -0x3176 009404 ifetch 1 ,rega -0x3177 009406 branch g24_rx_interrupt_clear ,blank -0x3178 009407 increase 2 ,pdata -0x3179 009408 iforce loopcnt -0x317a 009409 add regc ,offset_24g_rxbuf ,contr -0x317b 009411 setarg offset_24g_rxdata_temp -0x317c 009412 iadd regc ,contw -0x317d 009414 call memcpy -0x317e 009415 call g24_set0_mem_mode_switch -0x317f 009417 call g24_fetch_mem_pair_mode -0x3180 009419 call g24_enable_nodata_timer ,blank -0x3181 009420 setarg offset_24g_rxdata_temp_add2 -0x3182 009421 call g24_set_rega_ifetch_1byte -0x3183 009423 beq 0x01 ,g24_data_type1 -0x3184 009424 beq 0x02 ,g24_data_type2 -0x3185 009425 beq 0x03 ,g24_data_type3 -0x3186 009426 beq 0xff ,g24_data_attemp -0x3187 009427 branch g24_rx_interrupt_clear -: 009429 g24_receive_packet_parse_pid_crc: -0x3188 009430 call g24_head_ptr2regc -0x3189 009431 call disable_user -0x318a 009432 add regc ,offset_24g_sta_pid ,rega -0x318b 009433 ifetch 1 ,rega -0x318c 009435 add regc ,offset_24g_last_pid ,rega -0x318d 009436 ifetcht 1 ,rega -0x318e 009438 isub temp ,null -0x318f 009439 ncall enable_user ,zero -0x3190 009440 add regc ,offset_24g_sta_pid ,rega -0x3191 009441 ifetch 1 ,rega -0x3192 009443 add regc ,offset_24g_last_pid ,contw -0x3193 009444 istore 1 ,contw -0x3194 009446 add regc ,offset_24g_sta_crc ,rega -0x3195 009447 ifetch 3 ,rega -0x3196 009449 add regc ,offset_24g_last_crc ,rega -0x3197 009450 ifetcht 3 ,rega -0x3198 009452 isub temp ,null -0x3199 009453 ncall enable_user ,zero -0x319a 009454 add regc ,offset_24g_sta_crc ,rega -0x319b 009455 ifetch 3 ,rega -0x319c 009457 add regc ,offset_24g_last_crc ,contw -0x319d 009459 branch g24_contw_istore_3byte -: 009461 g24_data_type1: -0x319e 009462 call g24_ch_timer_reinit -0x319f 009463 call g24_fetch_mem_abort_pac -0x31a0 009464 store 1 ,mem_temp -0x31a1 009466 call g24_fetcht_mem_rxdata_temp -0x31a2 009467 fetch 1 ,mem_temp -0x31a3 009469 isolate1 bit_abort ,temp -0x31a4 009470 setflag true ,0 ,pdata -0x31a5 009471 add regc ,offset_24g_abort_pac ,contw -0x31a6 009472 istore 1 ,contw -0x31a7 009474 beq 1 ,g24_data_attemp_mouse -0x31a8 009475 call g24_fetch_mem_hop_pac -0x31a9 009477 call g24_fetcht_mem_rxdata_temp -0x31aa 009479 isolate1 bit_hop ,temp -0x31ab 009480 setflag true ,0 ,pdata -0x31ac 009481 call g24_store_mem_hop_pac -0x31ad 009483 add regc ,offset_24g_cb_rxdata_type1 ,rega -0x31ae 009484 ifetch 2 ,rega -0x31af 009486 branch callback_func -: 009488 dongle_rxdata_type1: -0x31b0 009489 setarg ms_report_id -0x31b1 009490 store 1 ,mem_usb_mouse_data -0x31b2 009491 call g24_fetch_mem_rxdata_temp_add3_7byte -0x31b3 009493 istore 7 ,contw -0x31b4 009494 call g24_fetch_mem_rxdata_temp_add3_7byte -0x31b5 009496 ncall g24_ms_enable_blank_data_forcibly ,blank -0x31b6 009497 call g24_fetch_mem_rxdata_temp_add3_7byte -0x31b7 009499 call g24_ms_disable_blank_data_forcibly ,blank -: 009500 g24_data_type1_usbtx_enable: -0x31b8 009501 jam usb_ep2_ms ,mem_usb_ep2_data -: 009502 g24_data_type1_usbtx_enable_ep2: -0x31b9 009503 fetch 1 ,mem_usb_tx_enable -0x31ba 009504 set1 2 ,pdata -0x31bb 009505 store 1 ,mem_usb_tx_enable -0x31bc 009506 rtn -: 009508 g24_ms_enable_blank_data_forcibly: -0x31bd 009509 setarg 1 -0x31be 009510 call g24_store_mem_ms_blank_data_enable -: 009512 g24_ms_enable_blank_data_timer: -0x31bf 009513 setarg timer_ms_blank_delay -0x31c0 009514 arg timer_ms_blank ,queue -0x31c1 009515 branch timer_init -: 009516 g24_ms_disable_blank_data_forcibly: -0x31c2 009517 call g24_set0_mem_ms_blank_data_enable -: 009519 g24_ms_disable_blank_data_timer: -0x31c3 009520 setarg 0 -0x31c4 009521 arg timer_ms_blank ,queue -0x31c5 009522 branch timer_init -: 009524 g24_data_type2: -0x31c6 009525 call g24_fetcht_mem_rxdata_temp -0x31c7 009527 isolate1 bit_abort ,temp -0x31c8 009528 branch g24_data_attemp_kbd ,true -0x31c9 009529 arg mem_usb_kb_data ,contw -0x31ca 009530 call g24_data_type2_reverse_data -0x31cb 009531 fetch 8 ,mem_usb_kb_data -0x31cc 009532 ncall g24_kb_enable_blank_data_forcibly ,blank -0x31cd 009533 fetch 8 ,mem_usb_kb_data -0x31ce 009534 call g24_kb_disable_blank_data_forcibly ,blank -0x31cf 009535 call g24_head_ptr2regc -0x31d0 009536 fetch 8 ,mem_usb_kb_data -0x31d1 009537 arg offset_24g_kb_data_sta_data ,rega -0x31d2 009538 call g24_set_contw_with_temp -0x31d3 009539 istore 8 ,contw -0x31d4 009541 setarg offset_24g_kb_data_last_data -0x31d5 009542 iadd regc ,rega -0x31d6 009543 ifetcht 8 ,rega -0x31d7 009545 isub temp ,null -0x31d8 009546 ncall g24_kb_data_dispose ,zero -0x31d9 009547 setarg offset_24g_kb_data_sta_data -0x31da 009548 iadd regc ,rega -0x31db 009549 ifetch 8 ,rega -0x31dc 009551 arg offset_24g_kb_data_last_data ,rega -0x31dd 009552 call g24_set_contw_with_temp -0x31de 009553 istore 8 ,contw -0x31df 009555 branch g24_rx_interrupt_clear -: 009557 g24_data_type2_reverse_data: -0x31e0 009558 setarg offset_24g_rxdata_temp_add2 -0x31e1 009559 iadd regc ,contr -0x31e2 009561 arg 9 ,loopcnt -0x31e3 009562 branch reverse_byte -: 009564 g24_kb_enable_blank_data_forcibly: -0x31e4 009565 setarg 1 -0x31e5 009566 call g24_store_mem_kb_blank_data_enable -: 009568 g24_kb_enable_blank_data_timer: -0x31e6 009569 setarg timer_kb_blank_delay -0x31e7 009570 arg timer_kb_blank ,queue -0x31e8 009571 branch timer_init -: 009573 g24_kb_disable_blank_data_forcibly: -0x31e9 009574 call g24_set0_mem_kb_blank_data_enable -: 009576 g24_kb_disable_blank_data_timer: -0x31ea 009577 setarg 0 -0x31eb 009578 arg timer_kb_blank ,queue -0x31ec 009579 branch timer_init -: 009581 g24_kb_data_dispose: -: 009582 g24_kb_data_into_ep1_fifo: -0x31ed 009583 jam usb_ep1_kb ,mem_usb_ep1_data -0x31ee 009584 fetch 1 ,mem_usb_tx_enable -0x31ef 009585 set1 1 ,pdata -0x31f0 009586 store 1 ,mem_usb_tx_enable -0x31f1 009587 rtn -: 009589 g24_data_type3: -0x31f2 009590 arg mem_usb_kb_multikey ,contw -0x31f3 009591 call g24_data_type2_reverse_data -0x31f4 009592 fetch 2 ,mem_usb_kb_multikey + 1 -0x31f5 009593 ncall g24_kb_mul_enable_blank_data_forcibly ,blank -0x31f6 009594 fetch 2 ,mem_usb_kb_multikey + 1 -0x31f7 009595 call g24_kb_mul_disable_blank_data_forcibly ,blank -0x31f8 009596 call g24_head_ptr2regc -0x31f9 009597 fetch 3 ,mem_usb_kb_multikey -0x31fa 009598 arg offset_24g_kb_multikey_sta_data ,rega -0x31fb 009599 call g24_set_contw_with_temp_store_3byte -0x31fc 009601 setarg offset_24g_kb_multikey_last_data -0x31fd 009602 iadd regc ,rega -0x31fe 009603 ifetcht 3 ,rega -0x31ff 009605 isub temp ,null -0x3200 009606 ncall g24_kb_mul_data_into_ep2_fifo ,zero -0x3201 009607 setarg offset_24g_kb_multikey_sta_data -0x3202 009608 iadd regc ,rega -0x3203 009609 ifetch 3 ,rega -0x3204 009611 arg offset_24g_kb_multikey_last_data ,rega -0x3205 009612 call g24_set_contw_with_temp_store_3byte -0x3206 009614 branch g24_rx_interrupt_clear -: 009616 g24_kb_mul_data_into_ep2_fifo: -0x3207 009617 jam usb_ep2_multikey ,mem_usb_ep2_data -0x3208 009618 branch g24_data_type1_usbtx_enable_ep2 -: 009620 g24_kb_mul_enable_blank_data_forcibly: -0x3209 009621 setarg 1 -0x320a 009622 call g24_store_mem_kb_mul_blank_data_enable -: 009624 g24_kb_mul_enable_blank_data_timer: -0x320b 009625 setarg timer_kb_mul_blank_delay -0x320c 009626 arg timer_kb_mul_blank ,queue -0x320d 009627 branch timer_init -: 009629 g24_kb_mul_disable_blank_data_forcibly: -0x320e 009630 call g24_set0_mem_kb_mul_blank_data_enable -: 009632 g24_kb_mul_disable_blank_data_timer: -0x320f 009633 setarg 0 -0x3210 009634 arg timer_kb_mul_blank ,queue -0x3211 009635 branch timer_init -: 009637 g24_data_attemp: -0x3212 009638 call g24_fetch_mem_rxdata_temp_add3_1byte -0x3213 009640 beq datatype_mouse ,g24_data_attemp_mouse -0x3214 009641 beq datatype_keyboard ,g24_data_attemp_kbd -0x3215 009642 rtn -: 009643 g24_data_attemp_mouse: -0x3216 009644 setarg offset_24g_rxdata_temp_add4 -0x3217 009645 call g24_set_rega_ifetch_4byte -0x3218 009646 arg offset_24g_mouse_addr ,rega -0x3219 009647 call g24_set_contw_with_temp -0x321a 009650 branch g24_contw_istore_4byte -: 009652 g24_data_attemp_kbd: -0x321b 009653 setarg offset_24g_rxdata_temp_add4 -0x321c 009654 call g24_set_rega_ifetch_4byte -0x321d 009655 arg offset_24g_kb_addr ,rega -0x321e 009656 call g24_set_contw_with_temp -0x321f 009659 branch g24_contw_istore_4byte -: 009661 g24_store_mem_24g_mode: -0x3220 009662 call g24_head_ptr2regc -0x3221 009663 add regc ,offset_24g_mode ,contw -0x3222 009664 istore 1 ,contw -0x3223 009665 rtn -: 009667 g24_fetch_mem_device_addr: -0x3224 009668 call g24_head_ptr2regc -0x3225 009669 add regc ,offset_24g_device_addr ,rega -0x3226 009670 branch g24_rega_ifetch_4byte -: 009671 g24_store_mem_device_addr: -0x3227 009672 call g24_head_ptr2regc -0x3228 009673 add regc ,offset_24g_device_addr ,contw -0x3229 009674 branch g24_contw_istore_4byte -: 009676 g24_fetch_mem_addr: -0x322a 009677 add regc ,offset_24g_addr ,rega -0x322b 009678 branch g24_rega_ifetch_4byte -: 009679 g24_store_mem_addr: -0x322c 009680 add regc ,offset_24g_addr ,contw -: 009681 g24_contw_istore_4byte: -0x322d 009682 istore 4 ,contw -0x322e 009683 rtn -: 009685 g24_store_mem_ch: -0x322f 009686 add regc ,offset_24g_ch ,contw -0x3230 009687 branch g24_contw_istore_1byte -: 009689 g24_set0_mem_pid: -0x3231 009690 setarg 0 -: 009691 g24_store_mem_pid: -0x3232 009692 call g24_head_ptr2regc -0x3233 009693 add regc ,offset_24g_pid ,contw -0x3234 009694 branch g24_contw_istore_1byte -: 009696 g24_store_mem_txpayload: -0x3235 009697 add regc ,offset_24g_txpayload ,contw -0x3236 009698 branch g24_contw_istore_1byte -: 009700 g24_set4_mem_max_retry: -0x3237 009701 setarg 4 -: 009702 g24_store_mem_max_retry: -0x3238 009703 add regc ,offset_24g_max_retry ,contw -0x3239 009704 branch g24_contw_istore_1byte -: 009706 g24_fetch_mem_data_type: -0x323a 009707 add regc ,offset_24g_data_type ,rega -0x323b 009708 branch g24_rega_ifetch_1byte -: 009709 g24_store_mem_data_type: -0x323c 009710 add regc ,offset_24g_data_type ,contw -0x323d 009711 branch g24_contw_istore_1byte -: 009713 g24_set2_mem_sync_cnt: -0x323e 009714 setarg 2 -: 009715 g24_store_mem_sync_cnt: -0x323f 009716 add regc ,offset_24g_sync_cnt ,contw -0x3240 009717 branch g24_contw_istore_1byte -: 009719 g24_set1_mem_rf_last_sta: -0x3241 009720 setarg 1 -: 009721 g24_store_mem_rf_last_sta: -0x3242 009722 call g24_head_ptr2regc -0x3243 009723 add regc ,offset_24g_rf_last_sta ,contw -0x3244 009724 branch g24_contw_istore_1byte -: 009726 g24_fetch_mem_hop_pac: -0x3245 009727 call g24_head_ptr2regc -0x3246 009728 add regc ,offset_24g_hop_pac ,rega -0x3247 009729 branch g24_rega_ifetch_1byte -: 009730 g24_set1_mem_hop_pac: -0x3248 009731 setarg 1 -: 009732 g24_store_mem_hop_pac: -0x3249 009733 call g24_head_ptr2regc -0x324a 009734 add regc ,offset_24g_hop_pac ,contw -0x324b 009735 branch g24_contw_istore_1byte -: 009737 g24_fetch_mem_abort_pac: -0x324c 009738 call g24_head_ptr2regc -0x324d 009739 add regc ,offset_24g_abort_pac ,rega -0x324e 009740 branch g24_rega_ifetch_1byte -: 009741 g24_set1_mem_abort_pac: -0x324f 009742 setarg 1 -: 009743 g24_store_mem_abort_pac: -0x3250 009744 call g24_head_ptr2regc -0x3251 009745 add regc ,offset_24g_abort_pac ,contw -0x3252 009746 branch g24_contw_istore_1byte -: 009748 g24_fetch_mem_pairing_sm: -0x3253 009749 call g24_head_ptr2regc -0x3254 009750 add regc ,offset_24g_pairing_sm ,rega -0x3255 009751 branch g24_rega_ifetch_1byte -: 009752 g24_store_mem_pairing_sm: -0x3256 009753 add regc ,offset_24g_pairing_sm ,contw -0x3257 009754 branch g24_contw_istore_1byte -: 009756 g24_fetch_mem_rf_hop_ch: -0x3258 009757 add regc ,offset_24g_rf_hop_ch ,rega -0x3259 009758 branch g24_rega_ifetch_1byte -: 009759 g24_set0_mem_rf_hop_ch: -0x325a 009760 setarg 0 -: 009761 g24_store_mem_rf_hop_ch: -0x325b 009762 add regc ,offset_24g_rf_hop_ch ,contw -0x325c 009763 branch g24_contw_istore_1byte -: 009765 g24_fetch_mem_rf_work_stage: -0x325d 009766 add regc ,offset_24g_rf_work_stage ,rega -0x325e 009767 branch g24_rega_ifetch_1byte -: 009769 g24_fetch_mem_rxbuf_add1: -0x325f 009770 add regc ,offset_24g_rxbuf_add1 ,rega -0x3260 009771 branch g24_rega_ifetch_1byte -: 009773 g24_fetch_mem_check_dongle_times: -0x3261 009774 add regc ,offset_24g_check_dongle_times ,rega -0x3262 009775 branch g24_rega_ifetch_1byte -: 009776 g24_set0_mem_check_dongle_times: -0x3263 009777 setarg 0 -: 009778 g24_store_mem_check_dongle_times: -0x3264 009779 call g24_head_ptr2regc -0x3265 009780 add regc ,offset_24g_check_dongle_times ,contw -0x3266 009781 branch g24_contw_istore_1byte -: 009783 g24_store_mem_tx_power: -0x3267 009784 call g24_head_ptr2regc -0x3268 009785 add regc ,offset_tx_power_temp ,rega -0x3269 009786 ifetch 1 ,rega -: 009787 g24_store_mem_txpower: -0x326a 009788 store 1 ,mem_tx_power -0x326b 009789 rtn -: 009791 g24_store_mem_tx_power_temp: -0x326c 009792 call g24_head_ptr2regc -0x326d 009793 fetch 1 ,mem_tx_power -0x326e 009795 add regc ,offset_tx_power_temp ,contw -0x326f 009796 branch g24_contw_istore_1byte -: 009798 g24_fetch_mem_power_ctrl_pac: -0x3270 009799 add regc ,offset_power_ctrl_packet_cnt ,rega -0x3271 009800 branch g24_rega_ifetch_1byte -: 009802 g24_store_mem_power_ctrl_level: -0x3272 009803 add regc ,offset_power_ctrl_level ,contw -0x3273 009804 branch g24_contw_istore_1byte -: 009806 g24_fetcht_mem_rxdata_temp: -0x3274 009807 setarg offset_24g_rxdata_temp -: 009808 g24_set_rega_ifetcht_1byte: -0x3275 009809 iadd regc ,rega -0x3276 009810 ifetcht 1 ,rega -0x3277 009811 rtn -: 009813 g24_fetch_mem_rf_laststa: -0x3278 009814 setarg offset_24g_rf_laststa -0x3279 009815 branch g24_set_rega_ifetch_1byte -: 009816 g24_set0_mem_rf_laststa: -0x327a 009817 setarg 0 -: 009818 g24_store_mem_rf_laststa: -0x327b 009819 arg offset_24g_rf_laststa ,rega -0x327c 009820 branch g24_set_contw_with_regb_store_1byte -: 009822 g24_fetch_mem_rx_addr: -0x327d 009823 setarg offset_24g_rx_addr -: 009824 g24_set_rega_ifetch_4byte: -0x327e 009825 call g24_set_rega -: 009826 g24_rega_ifetch_4byte: -0x327f 009827 ifetch 4 ,rega -0x3280 009828 rtn -: 009830 g24_fetch_mem_time_slice: -0x3281 009831 setarg offset_24g_time_slice -0x3282 009832 branch g24_set_rega_ifetch_1byte -: 009833 g24_set0_mem_time_slice: -0x3283 009834 setarg 0 -: 009835 g24_store_mem_time_slice: -0x3284 009836 arg offset_24g_time_slice ,rega -0x3285 009837 branch g24_set_contw_with_regb_store_1byte -: 009839 g24_set0_mem_mode_switch: -0x3286 009840 setarg 0 -: 009841 g24_store_mem_mode_switch: -0x3287 009842 arg offset_24g_mode_switch ,rega -0x3288 009843 branch g24_set_contw_with_regb_store_1byte -: 009845 g24_store_mem_bind_payload: -0x3289 009846 arg offset_24g_bind_payload ,rega -0x328a 009847 branch g24_set_contw_with_regb_store_1byte -: 009849 g24_fetch_mem_bind_device_status: -0x328b 009850 setarg offset_dongle_bind_device_status -0x328c 009851 branch g24_set_rega_ifetch_1byte -: 009852 g24_store_mem_bind_device_status: -0x328d 009853 arg offset_dongle_bind_device_status ,rega -0x328e 009854 branch g24_set_contw_with_regb_store_1byte -: 009856 g24_fetch_mem_dongle_work_mode: -0x328f 009857 setarg offset_dongle_work_mode -0x3290 009858 branch g24_set_rega_ifetch_1byte -: 009859 g24_set_work_mem_dongle_work_mode: -0x3291 009860 setarg dongle_work -: 009861 g24_store_mem_dongle_work_mode: -0x3292 009862 arg offset_dongle_work_mode ,rega -0x3293 009863 branch g24_set_contw_with_regb_store_1byte -: 009865 g24_fetch_mem_dongle_mode_init: -0x3294 009866 setarg offset_dongle_mode_init -0x3295 009867 branch g24_set_rega_ifetch_1byte -: 009868 g24_set0_mem_dongle_mode_init: -0x3296 009869 setarg clear_init -: 009870 g24_store_mem_dongle_mode_init: -0x3297 009871 arg offset_dongle_mode_init ,rega -0x3298 009872 branch g24_set_contw_with_regb_store_1byte -: 009874 g24_set0_mem_ackpayload_enable: -0x3299 009875 setarg 0 -: 009876 g24_store_mem_ackpayload_enable: -0x329a 009877 arg offset_24g_ackpayload_enable ,rega -0x329b 009878 branch g24_set_contw_with_regb_store_1byte -: 009879 g24_set1_mem_ackpayload_enable: -0x329c 009880 setarg 1 -0x329d 009881 branch g24_store_mem_ackpayload_enable -: 009883 g24_fetch_mem_rxdata_temp_add3_7byte: -0x329e 009884 setarg offset_24g_rxdata_temp_add3 -0x329f 009885 call g24_set_rega -0x32a0 009886 ifetch 7 ,rega -0x32a1 009887 rtn -: 009889 g24_fetch_mem_nodata_timer_enable: -0x32a2 009890 setarg offset_24g_nodata_timer_enable -0x32a3 009891 branch g24_set_rega_ifetch_1byte -: 009892 g24_set0_mem_nodata_timer_enable: -0x32a4 009893 setarg 0 -: 009894 g24_store_mem_nodata_timer_enable: -0x32a5 009895 arg offset_24g_nodata_timer_enable ,rega -0x32a6 009896 branch g24_set_contw_with_regb_store_1byte -: 009898 g24_set0_mem_ms_blank_data_enable: -0x32a7 009899 setarg 0 -: 009900 g24_store_mem_ms_blank_data_enable: -0x32a8 009901 arg offset_24g_ms_blank_data_enable ,rega -0x32a9 009902 branch g24_set_contw_with_regb_store_1byte -: 009904 g24_set0_mem_kb_blank_data_enable: -0x32aa 009905 setarg 0 -: 009906 g24_store_mem_kb_blank_data_enable: -0x32ab 009907 arg offset_24g_kb_blank_data_enable ,rega -0x32ac 009908 branch g24_set_contw_with_regb_store_1byte -: 009910 g24_set0_mem_kb_mul_blank_data_enable: -0x32ad 009911 setarg 0 -: 009912 g24_store_mem_kb_mul_blank_data_enable: -0x32ae 009913 arg offset_24g_kb_mul_blank_data_enable ,rega -0x32af 009914 branch g24_set_contw_with_regb_store_1byte -: 009916 g24_store_mem_power_ctrl_threshold_up: -0x32b0 009917 arg offset_power_ctrl_threshold_up ,rega -0x32b1 009918 branch g24_set_contw_with_regb_store_1byte -: 009920 g24_store_mem_power_ctrl_threshold_down: -0x32b2 009921 arg offset_power_ctrl_threshold_down ,rega -: 009922 g24_set_contw_with_regb_store_1byte: -0x32b3 009923 call g24_set_contw_with_regb -: 009924 g24_contw_istore_1byte: -0x32b4 009925 istore 1 ,contw -0x32b5 009926 rtn -: 009928 g24_fetch_mem_pair_mode: -0x32b6 009929 setarg offset_24g_pair_mode -0x32b7 009930 branch g24_set_rega_ifetch_1byte -: 009932 g24_store_mem_pair_mode: -0x32b8 009933 arg offset_24g_pair_mode ,rega -0x32b9 009934 branch g24_set_contw_with_regb_store_1byte -: 009936 g24_store_mem_pair_txpower: -0x32ba 009937 setarg offset_24g_pair_txpower -0x32bb 009938 call g24_set_rega_ifetch_1byte -0x32bc 009939 branch g24_store_mem_txpower -: 009941 g24_fetch_mem_rxdata_temp_add3_1byte: -0x32bd 009942 setarg offset_24g_rxdata_temp_add3 -0x32be 009943 branch g24_set_rega_ifetch_1byte -: 009945 g24_set_contw_with_temp: -0x32bf 009946 copy pdata ,temp -0x32c0 009947 copy rega ,pdata -0x32c1 009948 iadd regc ,contw -0x32c2 009949 copy temp ,pdata -0x32c3 009950 rtn -: 009952 g24_set_contw_with_temp_store_3byte: -0x32c4 009953 call g24_set_contw_with_temp -: 009954 g24_contw_istore_3byte: -0x32c5 009955 istore 3 ,contw -0x32c6 009956 rtn -: 009958 g24_set_contw_with_regb: -0x32c7 009959 call g24_head_ptr2regc -: 009960 g24_set_contw_with_regb2: -0x32c8 009961 copy pdata ,regb -0x32c9 009962 copy rega ,pdata -0x32ca 009963 iadd regc ,contw -0x32cb 009964 copy regb ,pdata -0x32cc 009965 rtn -: 009967 g24_set_rega: -0x32cd 009968 call g24_head_ptr2regc -0x32ce 009969 iadd regc ,rega -0x32cf 009970 rtn -: 009972 g24_set_rega_ifetch_1byte: -0x32d0 009973 call g24_set_rega -: 009974 g24_rega_ifetch_1byte: -0x32d1 009975 ifetch 1 ,rega -0x32d2 009976 rtn -: 009978 g24_set_rega_ifetcht_4byte: -0x32d3 009979 call g24_set_rega -0x32d4 009980 ifetcht 4 ,rega -0x32d5 009981 rtn -: 009983 g24_mem_set0: -0x32d6 009984 setarg 0 -0x32d7 009985 branch g24_contw_istore_1byte -: 009989 app_init: -0x32d8 009990 bpatch patch18_4 ,mem_patch18 -0x32d9 009991 fetch 1 ,mem_device_option -0x32da 009992 branch app_init ,blank -0x32db 009994 beq dvc_op_dongle ,dongle_init -0x32dc 009995 beq dvc_op_antilost ,antilost_init -0x32dd 009996 beq dvc_op_shutter ,shutter_init -0x32de 009997 beq dvc_op_module ,module_init -0x32df 009998 beq dvc_op_car ,car_init -0x32e0 009999 beq dvc_op_remote_car ,remote_car_init -0x32e1 010000 bbit1 dvc_op_mouse ,mouse_init -0x32e2 010001 rtn -: 010003 app_lpm_init: -0x32e3 010004 bpatch patch18_5 ,mem_patch18 -0x32e4 010005 jam 0 ,mem_tester_emulate -0x32e5 010006 jam 0 ,mem_debug_config -0x32e6 010007 jam 0 ,mem_lch_code -0x32e7 010008 setarg 0 -0x32e8 010009 store 5 ,mem_sp_state_start -0x32e9 010010 fetch 1 ,mem_device_option -0x32ea 010011 branch app_lpm_init ,blank -0x32eb 010012 beq dvc_op_module ,module_lpm_init -: 010013 app_lpm_init0: -0x32ec 010014 rtn -: 010017 app_process_idle: -0x32ed 010018 call ui_dispatch -0x32ee 010019 call check_51cmd -0x32ef 010020 call app_process_bb_event -0x32f0 010021 fetch 2 ,mem_cb_idle_process -0x32f1 010022 branch callback_func -: 010024 app_process_bt: -0x32f2 010025 fetch 2 ,mem_cb_bt_process -0x32f3 010026 branch callback_func -: 010028 app_process_ble: -0x32f4 010029 fetch 2 ,mem_cb_le_process -0x32f5 010030 branch callback_func -: 010032 app_process_bb_event: -0x32f6 010033 bpatch patch18_6 ,mem_patch18 -0x32f7 010035 arg mem_ipc_fifo_bt2c51 ,rega -0x32f8 010036 call fifo_out -0x32f9 010037 rtn blank -0x32fa 010039 copy pdata ,regc -0x32fb 010040 call app_event_normal_process -0x32fc 010041 branch app_process_bb_event_priority -: 010043 app_discard_event: -0x32fd 010044 arg 0 ,regc -0x32fe 010045 rtn -: 010050 app_event_normal_process: -0x32ff 010051 beq bt_evt_bb_connected ,app_evt_bt_conn -0x3300 010052 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed -0x3301 010053 beq bt_evt_setup_complete ,app_evt_setup_complete -0x3302 010054 beq bt_evt_hid_handshake ,app_evt_hid_handshake -0x3303 010055 beq bt_evt_hid_connected ,app_bb_event_hid_connected -0x3304 010056 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed -0x3305 010057 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn -0x3306 010058 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed -0x3307 010059 beq bt_evt_le_connected ,app_le_event_bb_connected -0x3308 010060 beq bt_evt_le_disconnected ,app_le_event_bb_disconn -0x3309 010061 beq bt_evt_reconn_started ,app_event_reconn_start -0x330a 010062 beq bt_evt_enter_sniff ,app_event_enter_sniff -0x330b 010063 beq bt_evt_exit_sniff ,app_event_exit_sniff -0x330c 010065 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused -0x330d 010066 beq bt_evt_linkkey_generate ,app_event_linkkey_generate -0x330e 010067 beq bt_evt_switch_fail_master ,app_event_switch_fail_master -0x330f 010068 beq bt_evt_switch_success_master ,app_event_switch_success -0x3310 010069 rtn -: 010072 app_evt_bt_conn: -0x3311 010073 fetch 2 ,mem_ui_state_map -0x3312 010074 set1 ui_state_bt_connected ,pdata -0x3313 010075 store 2 ,mem_ui_state_map -0x3314 010076 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3315 010077 set0 app_disc_by_button ,pdata -0x3316 010078 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3317 010079 rtn -: 010081 app_event_switch_success: -0x3318 010082 jam 0 ,mem_switch_fail_master_count -0x3319 010083 rtn -: 010085 app_event_switch_fail_master: -0x331a 010086 fetch 1 ,mem_switch_fail_master_count -0x331b 010087 increase 1 ,pdata -0x331c 010088 store 1 ,mem_switch_fail_master_count -0x331d 010089 sub pdata ,1 ,null -0x331e 010090 branch app_bt_role_switch ,positive -0x331f 010091 jam 0 ,mem_switch_fail_master_count -0x3320 010092 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3321 010093 set1 app_disc_switch_fail ,pdata -0x3322 010094 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3323 010095 branch app_bt_disconnect -: 010097 app_process_bb_event_priority: -0x3324 010098 fetch 2 ,mem_cb_bb_event_process -0x3325 010099 branch callback_func -: 010101 app_check_wake_lock: -0x3326 010102 fetch 2 ,mem_cb_check_wakelock -0x3327 010103 branch callback_func -: 010105 app_will_enter_lpm: -0x3328 010106 fetch 2 ,mem_cb_before_lpm -0x3329 010107 branch callback_func -: 010109 app_event_linkkey_generate: -0x332a 010110 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x332b 010111 set1 app_disc_after_pairing ,pdata -0x332c 010112 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x332d 010113 branch app_bt_store_reconn_info -: 010115 app_event_reconn_start: -0x332e 010116 fetch 2 ,mem_ui_state_map -0x332f 010117 set1 ui_state_bt_reconnect ,pdata -0x3330 010118 store 2 ,mem_ui_state_map -0x3331 010119 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3332 010120 set1 app_disc_after_reconn ,pdata -0x3333 010121 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3334 010122 rtn -: 010124 app_evt_setup_complete: -0x3335 010125 fetch 2 ,mem_ui_state_map -0x3336 010126 set1 ui_state_bt_setup_complete ,pdata -0x3337 010127 store 2 ,mem_ui_state_map -0x3338 010128 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3339 010129 set1 app_disc_after_setup_done ,pdata -0x333a 010130 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x333b 010131 rtn -: 010133 app_evt_hid_handshake: -0x333c 010134 fetch 2 ,mem_ui_state_map -0x333d 010135 set1 ui_state_bt_hid_handshake ,pdata -0x333e 010136 store 2 ,mem_ui_state_map -0x333f 010137 rtn -: 010139 app_event_enter_sniff: -0x3340 010140 fetch 2 ,mem_ui_state_map -0x3341 010141 set1 ui_state_bt_sniff ,pdata -0x3342 010142 store 2 ,mem_ui_state_map -0x3343 010143 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3344 010144 set1 app_disc_after_sniff ,pdata -0x3345 010145 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3346 010146 rtn -: 010148 app_event_exit_sniff: -0x3347 010149 fetch 2 ,mem_ui_state_map -0x3348 010150 set0 ui_state_bt_sniff ,pdata -0x3349 010151 store 2 ,mem_ui_state_map -0x334a 010152 rtn -: 010154 app_le_event_bb_connected: -0x334b 010155 fetch 2 ,mem_ui_state_map -0x334c 010156 set1 ui_state_ble_connected ,pdata -0x334d 010157 store 2 ,mem_ui_state_map -0x334e 010158 rtn -: 010160 app_le_event_bb_disconn: -0x334f 010161 fetch 2 ,mem_ui_state_map -0x3350 010162 set0 ui_state_ble_connected ,pdata -0x3351 010163 store 2 ,mem_ui_state_map -0x3352 010164 branch app_lpm_mult_disable -: 010166 app_bb_event_hid_connected: -0x3353 010167 fetch 2 ,mem_ui_state_map -0x3354 010168 set1 ui_state_bt_hid_conn ,pdata -0x3355 010169 store 2 ,mem_ui_state_map -0x3356 010170 rtn -: 010172 app_evt_button_long_pressed: -0x3357 010173 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x3358 010174 set1 app_disc_by_button ,pdata -0x3359 010175 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x335a 010176 rtn -: 010178 app_event_ml2cap_conn_refused: -0x335b 010179 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x335c 010180 set1 app_disc_l2cap_refused ,pdata -0x335d 010181 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x335e 010182 branch app_bt_disconnect -: 010185 app_evt_timer: -0x335f 010186 bpatch patch18_7 ,mem_patch18 -0x3360 010187 store 1 ,mem_app_evt_timer_count -: 010188 app_evt_100ms_loop: -0x3361 010189 fetch 1 ,mem_app_evt_timer_count -0x3362 010190 rtn blank -0x3363 010191 increase -1 ,pdata -0x3364 010192 store 1 ,mem_app_evt_timer_count -0x3365 010193 call ui_button_polling -0x3366 010194 call app_lpm_wake_auto_lock_timer -0x3367 010195 call app_unsniff_delay_timer -0x3368 010196 call app_discovery_timer -0x3369 010197 call flash_write_spi_sm_timer -0x336a 010198 fetch 2 ,mem_cb_event_timer -0x336b 010199 call callback_func -0x336c 010200 branch app_evt_100ms_loop -: 010205 timer_single_step: -0x336d 010206 ifetch 1 ,regc -0x336e 010207 rtn blank -0x336f 010208 pincrease -1 -0x3370 010209 istore 1 ,regc -0x3371 010210 nrtn blank -0x3372 010211 copy regb ,pdata -0x3373 010212 branch callback_func -: 010216 timer_single_step_2b: -0x3374 010217 ifetch 2 ,regc -0x3375 010218 rtn blank -0x3376 010219 pincrease -1 -0x3377 010220 istore 2 ,regc -0x3378 010221 nrtn blank -0x3379 010222 copy regb ,pdata -0x337a 010223 branch callback_func -: 010225 app_power_timer: -0x337b 010226 fetcht 2 ,mem_power_param_ptr -0x337c 010227 add temp ,power_timer_offset ,regc -0x337d 010228 arg app_power_timer_timeout ,regb -0x337e 010229 branch timer_single_step -: 010231 app_power_timer_timeout: -0x337f 010232 call app_got_power_state_common -0x3380 010233 beq power_starting ,app_enter_power_stanby_state -: 010234 app_enter_power_off_state: -0x3381 010235 branch app_enter_hibernate -: 010236 app_enter_power_stanby_state: -0x3382 010237 setarg power_standby -0x3383 010238 istore 1 ,regc -0x3384 010239 add temp ,power_standby_cb_offset ,regb -: 010240 app_power_cb_common: -0x3385 010241 ifetch 2 ,regb -0x3386 010242 branch callback_func -: 010244 app_unsniff_delay_timer: -0x3387 010245 arg mem_unsniff2sniff_timer_count ,regc -0x3388 010246 arg app_unsniff_delay_timeout ,regb -0x3389 010247 branch timer_single_step -: 010249 app_unsniff_delay_timeout: -0x338a 010250 call context_check_idle -0x338b 010251 branch app_bt_enter_sniff ,zero -0x338c 010252 rtn -: 010255 app_discovery_timer: -0x338d 010256 arg mem_discovery_timeout_timer_count ,regc -0x338e 010257 arg app_discovery_timeout ,regb -0x338f 010258 branch timer_single_step_2b -: 010260 app_discovery_timeout: -0x3390 010261 call app_bt_stop_discovery -0x3391 010262 call app_led_off -0x3392 010263 fetch 2 ,mem_cb_discovry_timeout -0x3393 010264 branch callback_func -: 010267 app_bb_event_reconn_failed: -0x3394 010268 call app_disconn_reason_flag_clear -: 010269 app_clear_reconnect_flag: -0x3395 010270 fetch 2 ,mem_ui_state_map -0x3396 010271 set0 ui_state_bt_reconnect ,pdata -0x3397 010272 store 2 ,mem_ui_state_map -0x3398 010273 rtn -: 010275 app_bb_event_bb_disconn: -0x3399 010276 jam 0 ,mem_unsniff2sniff_timer_count -0x339a 010277 fetch 2 ,mem_ui_state_map -0x339b 010278 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn -0x339c 010279 isolate0 ui_state_bt_setup_complete ,pdata -0x339d 010280 call app_discard_event ,true -: 010281 app_bb_event_bb_reconn_disconn: -0x339e 010282 bpatch patch19_0 ,mem_patch19 -0x339f 010283 fetch 2 ,mem_ui_state_map -0x33a0 010284 set0 ui_state_bt_connected ,pdata -0x33a1 010285 set0 ui_state_bt_setup_complete ,pdata -0x33a2 010286 set0 ui_state_bt_hid_conn ,pdata -0x33a3 010287 set0 ui_state_bt_hid_handshake ,pdata -0x33a4 010288 set0 ui_state_bt_reconnect ,pdata -0x33a5 010289 store 2 ,mem_ui_state_map -0x33a6 010290 branch app_lpm_mult_disable -: 010292 app_bb_hibernate: -0x33a7 010293 call app_disconn_reason_clear -0x33a8 010294 branch app_enter_hibernate -: 010297 app_disconn_reason_clear: -0x33a9 010298 setarg 0 -0x33aa 010299 store app_disc_rsn_size ,mem_app_disconn_reason -0x33ab 010300 rtn -: 010301 app_disconn_reason_flag_clear: -0x33ac 010302 setarg 0 -0x33ad 010303 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33ae 010304 rtn -: 010306 app_disconn_reason_collect_bt: -0x33af 010307 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b0 010308 store app_disc_rsn_size ,mem_app_disconn_reason -0x33b1 010309 setarg 0 -0x33b2 010310 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b3 010311 rtn -: 010313 app_disconn_reason_collect_ble: -0x33b4 010314 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b5 010315 set1 app_disc_ble ,pdata -0x33b6 010316 store app_disc_rsn_size ,mem_app_disconn_reason -0x33b7 010317 setarg 0 -0x33b8 010318 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x33b9 010319 rtn -: 010327 app_check_sniff: -0x33ba 010328 fetch 1 ,mem_ui_state_map -0x33bb 010329 isolate1 ui_state_bt_sniff ,pdata -0x33bc 010330 rtn -: 010338 app_initflag_store: -0x33bd 010339 setarg eeprom_init_flag -: 010340 app_flag_store: -0x33be 010341 store 2 ,mem_timeup -0x33bf 010342 bpatch patch19_1 ,mem_patch19 -0x33c0 010343 arg 2 ,temp -0x33c1 010344 arg mem_timeup ,rega -0x33c2 010345 arg eeprom_module_init_flag ,regb -0x33c3 010346 branch iicd_write_eep_data -: 010349 app_initflag_check: -0x33c4 010350 bpatch patch19_2 ,mem_patch19 -0x33c5 010351 arg 2 ,temp -0x33c6 010352 arg mem_pdatatemp ,rega -0x33c7 010353 arg eeprom_module_init_flag ,regb -0x33c8 010354 call iicd_read_eep_data -0x33c9 010355 fetch 2 ,mem_pdatatemp -0x33ca 010356 arg eeprom_init_flag ,temp -0x33cb 010357 isub temp ,null -0x33cc 010358 rtn -: 010361 app_start_auto_sniff: -0x33cd 010362 fetch 1 ,mem_unsniff2sniff_timer -0x33ce 010363 store 1 ,mem_unsniff2sniff_timer_count -0x33cf 010364 rtn -: 010366 app_get_lpm_wake_lock: -0x33d0 010367 arg wake_lock_app ,queue -0x33d1 010368 branch lpm_get_wake_lock -: 010370 app_put_lpm_wake_lock: -0x33d2 010371 arg wake_lock_app ,queue -0x33d3 010372 branch lpm_put_wake_lock -: 010374 app_lpm_wake_auto_lock: -0x33d4 010375 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer -0x33d5 010376 branch app_get_lpm_wake_lock -: 010378 app_lpm_wake_auto_lock_timer: -0x33d6 010379 arg mem_wake_up_delay_timer ,regc -0x33d7 010380 arg app_put_lpm_wake_lock ,regb -0x33d8 010381 branch timer_single_step -: 010383 app_l2cap_flow_control_enable: -0x33d9 010384 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag -0x33da 010385 rtn -: 010387 app_l2cap_flow_control_disable: -0x33db 010388 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag -0x33dc 010389 rtn -: 010391 app_bt_set_pincode: -0x33dd 010392 jam bt_cmd_set_pin_code ,mem_fifo_temp -0x33de 010393 branch ui_ipc_send_cmd -: 010395 app_bt_role_switch: -0x33df 010396 jam bt_cmd_role_switch ,mem_fifo_temp -0x33e0 010397 branch ui_ipc_send_cmd -: 010399 app_bt_start_reconnect: -0x33e1 010400 bpatch patch19_3 ,mem_patch19 -0x33e2 010401 fetch 1 ,mem_app_connection_options -0x33e3 010402 store 1 ,mem_connection_options -0x33e4 010403 jam app_flag_reconnect ,mem_reconnect_flag -0x33e5 010404 jam bt_cmd_reconnect ,mem_fifo_temp -0x33e6 010405 branch ui_ipc_send_cmd -: 010407 app_bt_reconnect_cancel: -0x33e7 010408 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp -0x33e8 010409 branch ui_ipc_send_cmd -: 010411 app_bt_disconnect: -0x33e9 010412 jam bt_cmd_disconnect ,mem_fifo_temp -0x33ea 010413 branch ui_ipc_send_cmd -: 010415 app_bt_start_discovery_short: -0x33eb 010416 fetch 2 ,mem_discovery_timeout -0x33ec 010417 store 2 ,mem_discovery_timeout_timer_count -: 010418 app_bt_start_discovery_led_blink: -0x33ed 010419 call app_led_start_blink -: 010420 app_bt_start_discovery: -0x33ee 010421 jam bt_cmd_start_discovery ,mem_fifo_temp -0x33ef 010422 branch ui_ipc_send_cmd -: 010424 app_bt_stop_discovery: -0x33f0 010425 setarg 0 -0x33f1 010426 store 2 ,mem_discovery_timeout_timer_count -0x33f2 010427 jam bt_cmd_stop_discovery ,mem_fifo_temp -0x33f3 010428 branch ui_ipc_send_cmd -: 010430 app_ble_start_direct_adv: -0x33f4 010431 jam bt_cmd_start_direct_adv ,mem_fifo_temp -0x33f5 010432 branch ui_ipc_send_cmd -: 010434 app_ble_stop_direct_adv: -0x33f6 010435 jam bt_cmd_stop_direct_adv ,mem_fifo_temp -0x33f7 010436 branch ui_ipc_send_cmd -: 010438 app_ble_stop_adv: -0x33f8 010439 jam bt_cmd_stop_adv ,mem_fifo_temp -0x33f9 010440 branch ui_ipc_send_cmd -: 010442 app_ble_start_adv: -0x33fa 010443 jam bt_cmd_start_adv ,mem_fifo_temp -0x33fb 010444 branch ui_ipc_send_cmd -: 010446 app_ble_start_scan: -0x33fc 010447 jam bt_cmd_le_start_scan ,mem_fifo_temp -0x33fd 010448 branch ui_ipc_send_cmd -: 010450 app_ble_stop_scan: -0x33fe 010451 jam bt_cmd_le_stop_scan ,mem_fifo_temp -0x33ff 010452 branch ui_ipc_send_cmd -: 010454 app_ble_start_conn: -0x3400 010455 jam bt_cmd_le_start_conn ,mem_fifo_temp -0x3401 010456 branch ui_ipc_send_cmd -: 010458 app_ble_disconnect: -0x3402 010459 jam bt_cmd_le_disconnect ,mem_fifo_temp -0x3403 010460 branch ui_ipc_send_cmd -: 010462 app_led_start_blink: -0x3404 010463 jam bt_cmd_led_blink ,mem_fifo_temp -0x3405 010464 branch ui_ipc_send_cmd -: 010466 app_led_on: -0x3406 010467 jam bt_cmd_led_on ,mem_fifo_temp -0x3407 010468 branch ui_ipc_send_cmd -: 010470 app_led_stop_blink: -: 010471 app_led_off: -0x3408 010472 jam bt_cmd_led_off ,mem_fifo_temp -0x3409 010473 branch ui_ipc_send_cmd -: 010475 app_enter_hibernate: -0x340a 010476 jam bt_cmd_enter_hibernate ,mem_fifo_temp -0x340b 010477 branch ui_ipc_send_cmd -: 010479 app_bt_sniff_exit: -0x340c 010480 jam bt_cmd_exit_sniff ,mem_fifo_temp -0x340d 010481 branch ui_ipc_send_cmd -: 010483 app_bt_enter_sniff: -0x340e 010484 jam bt_cmd_enter_sniff ,mem_fifo_temp -0x340f 010485 branch ui_ipc_send_cmd -: 010487 app_ble_store_reconn_info: -0x3410 010488 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp -0x3411 010489 branch ui_ipc_send_cmd -: 010491 app_bt_store_reconn_info: -0x3412 010492 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp -0x3413 010493 branch ui_ipc_send_cmd -: 010495 app_store_reconn_info: -0x3414 010496 jam bt_cmd_store_reconn_info ,mem_fifo_temp -0x3415 010497 branch ui_ipc_send_cmd -: 010499 app_lpm_mult_enable: -0x3416 010500 set1 mark_lpm_mult_enable ,mark -0x3417 010501 rtn -: 010503 app_lpm_mult_disable: -0x3418 010504 set0 mark_lpm_mult_enable ,mark -0x3419 010505 rtn -: 010525 app_button_long_pressed: -0x341a 010526 call app_got_power_state_common -0x341b 010527 beq power_standby ,app_power_shutting_down -: 010528 app_power_starting: -0x341c 010529 setarg power_starting -0x341d 010530 istore 1 ,regc -0x341e 010531 add temp ,power_starting_timeout_offset ,rega -0x341f 010532 add temp ,power_starting_cb_offset ,regb -: 010533 app_power_common: -0x3420 010534 ifetcht 1 ,rega -0x3421 010535 increase 1 ,regc -0x3422 010536 istoret 1 ,regc -0x3423 010537 branch app_power_cb_common -: 010539 app_power_shutting_down: -0x3424 010540 setarg power_off -0x3425 010541 istore 1 ,regc -0x3426 010542 fetch 2 ,mem_ui_state_map -0x3427 010543 bbit0 ui_state_ble_connected ,app_power_off_end -0x3428 010544 call app_ble_disconnect -: 010545 app_power_off_end: -0x3429 010546 fetcht 2 ,mem_power_param_ptr -0x342a 010547 add temp ,power_off_timeout_offset ,rega -0x342b 010548 add temp ,power_off_cb_offset ,regb -0x342c 010549 branch app_power_common -: 010551 app_got_power_state_common: -0x342d 010552 fetcht 2 ,mem_power_param_ptr -0x342e 010553 add temp ,power_state_offset ,regc -0x342f 010554 ifetch 1 ,regc -0x3430 010555 rtn -: 010557 app_event_button_up: -0x3431 010558 call app_got_power_state_common -0x3432 010559 bne power_off ,app_power_release -0x3433 010560 branch app_enter_hibernate -: 010561 app_power_release: -0x3434 010562 add temp ,ui_butten_up_cb_offset ,regb -0x3435 010563 branch app_power_cb_common -: 010565 antilost_init: -0x3436 010566 rtn wake -0x3437 010567 jam 0x00 ,core_gpio_sel1 -0x3438 010568 setarg antilost_le_before_hibernate -0x3439 010569 store 2 ,mem_cb_before_hibernate -0x343a 010570 setarg keyscan_process_lpm_before -0x343b 010571 store 2 ,mem_cb_before_lpm -0x343c 010572 setarg antilost_idle_process -0x343d 010573 store 2 ,mem_cb_idle_process -0x343e 010574 setarg antilost_le_conn_process -0x343f 010575 store 2 ,mem_cb_le_process -0x3440 010576 setarg antilost_bb_event_process -0x3441 010577 store 2 ,mem_cb_bb_event_process -0x3442 010578 setarg antilost_le_bb_event_timer -0x3443 010579 store 2 ,mem_cb_event_timer -0x3444 010580 setarg antilost_le_notification -0x3445 010581 store 2 ,mem_cb_ble_transmit -0x3446 010582 setarg antilost_lpm_lock_process -0x3447 010583 store 2 ,mem_cb_check_wakelock -0x3448 010584 setarg antilost_le_receive_data_process -0x3449 010585 store 2 ,mem_cb_att_write -0x344a 010586 bpatch patch19_4 ,mem_patch19 -0x344b 010587 call antilost_buzzer_pwm_init -0x344c 010588 call keyscan_key_init -0x344d 010589 call antilost_adc_init -0x344e 010590 call ui_led_init_global -0x344f 010591 call ui_button_init -0x3450 010592 setarg antilost_key_up_down -0x3451 010593 store 2 ,mem_cb_antl_key -0x3452 010594 setarg antilost_power_off_cb -0x3453 010595 store 2 ,mem_antl_power_off_cb -0x3454 010596 setarg antilost_power_starting_cb -0x3455 010597 store 2 ,mem_antl_power_starting_cb -0x3456 010598 setarg antilost_power_standby_cb -0x3457 010599 store 2 ,mem_antl_power_standby_cb -0x3458 010600 setarg antilost_led_on_cb -0x3459 010601 store 2 ,mem_antl_led_cb_on -0x345a 010602 setarg antilost_led_off_cb -0x345b 010603 store 2 ,mem_antl_led_cb_off -0x345c 010604 setarg antilost_buzzer_on -0x345d 010605 store 2 ,mem_antl_buzzer_cb_on -0x345e 010606 setarg antilost_buzzer_off -0x345f 010607 store 2 ,mem_antl_buzzer_cb_off -0x3460 010608 fetch 2 ,mem_ui_state_map -0x3461 010609 rtnbit1 ui_state_btn_down -0x3462 010610 branch app_enter_hibernate -: 010612 antilost_le_before_hibernate: -0x3463 010613 call antilost_led_buzzer_stop_blink -0x3464 010614 branch app_enter_hibernate -: 010616 antilost_le_notification: -0x3465 010617 call le_fifo_check_nearly_full -0x3466 010618 nrtn blank -0x3467 010619 arg mem_temp_block5 ,rega -0x3468 010620 call queue_pop -0x3469 010621 nrtn user -0x346a 010622 arg mem_temp_block5 ,contr -0x346b 010623 branch le_send_notify_from_list -: 010625 antilost_power_standby_cb: -0x346c 010626 fetch 2 ,mem_antl_le_sleep_timeout -0x346d 010627 store 2 ,mem_antl_le_sleep_timer -0x346e 010628 jam 1 ,mem_antl_key_scan_enable -0x346f 010629 branch antilost_fast_adv_start -: 010631 antilost_lpm_lock_process: -0x3470 010632 fetch 1 ,mem_antl_key_state -0x3471 010633 beq 1 ,antilost_lpm_ctrl_for_led_buzzer -0x3472 010634 fetch 2 ,mem_ui_state_map -0x3473 010635 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer -0x3474 010636 fetch 1 ,mem_antl_lost_mode -0x3475 010637 beq 1 ,app_get_lpm_wake_lock -0x3476 010638 fetch 1 ,mem_antl_queue_curr_num -0x3477 010639 nbranch app_get_lpm_wake_lock ,blank -0x3478 010640 branch app_put_lpm_wake_lock -: 010642 antilost_lpm_ctrl_for_led_buzzer: -0x3479 010643 fetch 1 ,mem_antl_led_state -0x347a 010644 fetcht 1 ,mem_antl_buzzer_state -0x347b 010645 ior temp ,pdata -0x347c 010646 beq 1 ,app_get_lpm_wake_lock -0x347d 010647 branch app_put_lpm_wake_lock -: 010649 antilost_bb_event_process: -0x347e 010650 copy regc ,pdata -0x347f 010651 beq bt_evt_button_up ,app_event_button_up -0x3480 010652 beq bt_evt_button_long_pressed ,app_button_long_pressed -0x3481 010653 beq bt_evt_le_connected ,antilost_le_process_conn -0x3482 010654 beq bt_evt_le_disconnected ,antilost_le_process_discon -0x3483 010655 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved -0x3484 010656 rtn -: 010657 antilost_le_conn_param_update_rsp_recieved: -0x3485 010658 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x3486 010659 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected -: 010660 antilost_le_conn_param_accepted: -0x3487 010661 fetch 2 ,mem_le_new_connslavelatency -0x3488 010662 branch antilost_master_nonsupport_latency ,blank -: 010663 antilost_le_conn_param_updata_procedure_sucsess: -0x3489 010664 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state -0x348a 010665 jam 60 ,mem_antl_conn_update_timer -0x348b 010666 rtn -: 010668 antilost_le_conn_param_rejected: -0x348c 010669 fetch 2 ,mem_le_latency -0x348d 010670 branch antilost_conn_param_updata_procedure_faild ,blank -: 010671 antilost_conn_param_retransimiting: -0x348e 010672 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state -0x348f 010673 fetcht 2 ,mem_interval_increment -0x3490 010674 fetch 2 ,mem_le_interval_min -0x3491 010675 iadd temp ,pdata -0x3492 010676 store 2 ,mem_le_interval_min -0x3493 010677 copy pdata ,rega -0x3494 010678 fetch 2 ,mem_le_interval_max -0x3495 010679 iadd temp ,pdata -0x3496 010680 store 2 ,mem_le_interval_max -0x3497 010681 iadd rega ,pdata -0x3498 010682 rshift pdata ,temp -0x3499 010683 fetch 2 ,mem_antl_le_unnormal_interval_max -0x349a 010684 idiv temp -0x349b 010685 call wait_div_end -0x349c 010686 quotient pdata -0x349d 010687 store 2 ,mem_le_latency -0x349e 010688 jam 1 ,mem_antl_send_updata_le_param_timer -0x349f 010689 rtn -: 010690 antilost_conn_param_updata_procedure_faild: -0x34a0 010691 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state -0x34a1 010692 rtn -: 010694 antilost_master_nonsupport_latency: -0x34a2 010695 jam 0 ,mem_lpm_mult -0x34a3 010696 jam 0 ,mem_antl_send_updata_le_param_timer -0x34a4 010697 fetch 2 ,mem_le_new_conninterval -0x34a5 010698 fetcht 2 ,mem_antl_le_unnormal_interval_min -0x34a6 010699 isub temp ,null -0x34a7 010700 setflag positive ,0 ,rega -0x34a8 010701 fetch 2 ,mem_antl_le_unnormal_interval_max -0x34a9 010702 fetcht 2 ,mem_le_new_conninterval -0x34aa 010703 isub temp ,pdata -0x34ab 010704 setflag positive ,1 ,rega -0x34ac 010705 compare 0x03 ,rega ,0x03 -0x34ad 010706 rtn true -0x34ae 010707 fetch 8 ,mem_antl_le_unnormal_interval_min -0x34af 010708 store 8 ,mem_le_interval_min -0x34b0 010709 jam 1 ,mem_antl_send_updata_le_param_timer -0x34b1 010710 rtn -: 010713 antilost_le_bb_event_timer: -0x34b2 010715 call app_power_timer -0x34b3 010716 call antilost_double_click_timer -0x34b4 010717 call antilost_le_fast_adv_timer -0x34b5 010718 call antilost_le_sleep_timer -0x34b6 010719 call antilost_app_updata_le_param_timer -0x34b7 010720 call antilost_conn_update_timer -0x34b8 010721 branch antilost_adc_check_timer -: 010724 antilost_double_click_timer: -0x34b9 010725 arg mem_double_click_timer ,regc -0x34ba 010726 arg antilost_double_click_timeout ,regb -0x34bb 010727 branch timer_single_step -: 010728 antilost_double_click_timeout: -0x34bc 010729 jam 0 ,mem_butten_click_cnt -0x34bd 010730 rtn -: 010731 antilost_le_fast_adv_timer: -0x34be 010732 arg mem_antl_fast_adv_timer ,regc -0x34bf 010733 arg antilost_le_fast_adv_timeout ,regb -0x34c0 010734 branch timer_single_step_2b -: 010735 antilost_le_fast_adv_timeout: -0x34c1 010736 arg mem_antl_slow_adv_led_style ,regc -0x34c2 010737 arg mem_antl_slow_adv_lpm_interval ,regb -0x34c3 010738 branch antilost_adv_start_common -: 010741 antilost_conn_update_timer: -0x34c4 010742 arg mem_antl_conn_update_timer ,regc -0x34c5 010743 arg antilost_conn_update_timer_time_out ,regb -0x34c6 010744 branch timer_single_step -: 010746 antilost_conn_update_timer_time_out: -0x34c7 010747 fetch 2 ,mem_le_latency -0x34c8 010748 store 1 ,mem_lpm_mult -0x34c9 010749 rtn -: 010750 antilost_app_updata_le_param_timer: -0x34ca 010751 arg mem_antl_send_updata_le_param_timer ,regc -0x34cb 010752 arg antilost_app_updata_le_param_timeout ,regb -0x34cc 010753 branch timer_single_step -: 010754 antilost_app_updata_le_param_timeout: -0x34cd 010755 fetch 1 ,mem_le_state -0x34ce 010756 compare 0 ,pdata ,0x60 -0x34cf 010757 nbranch antilost_wait_for_updata_param_instant_expire ,true -0x34d0 010758 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state -0x34d1 010759 call app_lpm_mult_enable -0x34d2 010760 branch le_l2cap_tx_update_req -: 010761 antilost_wait_for_updata_param_instant_expire: -0x34d3 010762 jam 1 ,mem_antl_send_updata_le_param_timer -0x34d4 010763 rtn -: 010765 antilost_le_sleep_timer: -0x34d5 010766 arg mem_antl_le_sleep_timer ,regc -0x34d6 010767 arg antilost_le_sleep_timer_timeout ,regb -0x34d7 010768 branch timer_single_step_2b -: 010771 antilost_le_sleep_timer_timeout: -0x34d8 010772 branch app_button_long_pressed -: 010774 antilost_adc_check_timer: -0x34d9 010777 arg mem_adc_timer ,regc -0x34da 010778 arg antilost_adc_check_timer_timeout ,regb -0x34db 010779 branch timer_single_step_2b -: 010780 antilost_adc_check_timer_timeout: -0x34dc 010781 fetch 2 ,mem_adc_timeout -0x34dd 010782 store 2 ,mem_adc_timer -0x34de 010783 branch antilost_battery_process -: 010786 antilost_le_process_conn: -0x34df 010787 fetch 2 ,mem_adc_timeout -0x34e0 010788 store 2 ,mem_adc_timer -0x34e1 010789 setarg 0 -0x34e2 010790 store 2 ,mem_antl_fast_adv_timer -0x34e3 010791 store 2 ,mem_antl_le_sleep_timer -0x34e4 010792 call antilost_alert_off -0x34e5 010793 call antilost_led_buzzer_stop_blink -0x34e6 010794 jam 0 ,mem_lpm_mult -0x34e7 010795 branch app_ble_stop_adv -: 010798 antilost_le_process_discon: -0x34e8 010801 setarg 0 -0x34e9 010802 store 4 ,mem_adc_timer -0x34ea 010803 store 3 ,mem_antl_conn_updata_procedure_state -0x34eb 010804 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x34ec 010806 jam 1 ,mem_alarm_config_notfy_cnt -0x34ed 010807 fetch 2 ,mem_antl_le_sleep_timeout -0x34ee 010808 store 2 ,mem_antl_le_sleep_timer -0x34ef 010809 call queue_init -0x34f0 010810 fetch 1 ,mem_antl_power_state -0x34f1 010811 rtneq power_off -0x34f2 010812 call antilost_fast_adv_start -0x34f3 010813 branch antilost_on_off_alarm_after_disconn -: 010816 antilost_le_conn_process: -0x34f4 010818 branch antilost_key_process -: 010820 antilost_idle_process: -0x34f5 010822 fetch 1 ,mem_antl_power_state -0x34f6 010823 rtnne power_standby -0x34f7 010824 branch antilost_key_process -: 010829 antilost_power_starting_cb: -0x34f8 010830 arg mem_antl_power_starting_buzzer_style ,regc -0x34f9 010831 call antilost_buzzer_configuration -0x34fa 010832 arg mem_antl_power_starting_led_style ,regc -: 010833 antilost_power_common: -0x34fb 010834 branch antilost_led_configuration -: 010836 antilost_power_off_cb: -0x34fc 010837 jam off ,mem_le_adv_enable -0x34fd 010838 arg mem_antl_power_off_buzzer_style ,regc -0x34fe 010839 call antilost_buzzer_configuration -0x34ff 010840 arg mem_antl_power_off_led_style ,regc -0x3500 010841 branch antilost_power_common -: 010843 antilost_le_receive_data_process: -0x3501 010844 fetch 1 ,mem_le_att_opcode -0x3502 010845 beq attop_write_request ,antilost_le_parse_att_write_request -0x3503 010846 rtn -: 010847 antilost_le_parse_att_write_request: -0x3504 010848 fetch 2 ,mem_le_att_handle -0x3505 010850 beq new_spec_write_handle ,antilost_cmd_parse_for_application -0x3506 010851 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time -0x3507 010852 rtn -: 010857 antilost_key_process: -0x3508 010858 fetch 1 ,mem_antl_key_scan_enable -0x3509 010859 rtn blank -0x350a 010860 branch keyscan_key_process -: 010864 antilost_key_up_down: -0x350b 010865 copy rega ,pdata -0x350c 010866 branch antilost_key_is_up ,blank -: 010867 antilost_key_is_down: -0x350d 010868 copy queue ,pdata -0x350e 010869 beq 0 ,antilost_key0_down -0x350f 010870 rtn -: 010871 antilost_key_is_up: -0x3510 010872 copy queue ,pdata -0x3511 010873 beq 0 ,antilost_key0_up -0x3512 010874 rtn -: 010876 antilost_key0_down: -0x3513 010877 jam 1 ,mem_antl_key_state -0x3514 010878 arg mem_antl_key_buzzer_style ,regc -0x3515 010879 call antilost_buzzer_configuration -0x3516 010880 arg mem_antl_key_led_style ,regc -0x3517 010881 call antilost_led_configuration -0x3518 010882 fetch 2 ,mem_ui_state_map -0x3519 010883 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn -0x351a 010884 branch antilost_butten_down_after_conn -: 010886 antilost_key0_up: -0x351b 010887 jam 0 ,mem_antl_key_state -0x351c 010888 branch antilost_double_click_timer_init -: 010892 antilost_double_click_timer_init: -0x351d 010893 fetch 1 ,mem_butten_click_cnt -0x351e 010894 rtnne 1 -0x351f 010895 jam 5 ,mem_double_click_timer -0x3520 010896 rtn -: 010898 antilost_butten_down_after_conn: -0x3521 010899 fetch 1 ,mem_butten_click_cnt -0x3522 010900 pincrease 1 -0x3523 010901 store 1 ,mem_butten_click_cnt -0x3524 010902 beq 1 ,antilost_click_once -0x3525 010903 beq 2 ,antilost_click_twice -0x3526 010904 rtn -: 010905 antilost_click_once: -0x3527 010906 call antilost_alert_off -0x3528 010907 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 -0x3529 010908 arg mem_antl_key0_press ,regc -0x352a 010909 branch antilost_prepare_data_and_send -: 010910 antilost_click_twice: -0x352b 010911 jam 0 ,mem_butten_click_cnt -0x352c 010912 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 -0x352d 010913 arg mem_antl_key0_press ,regc -0x352e 010914 call antilost_prepare_data_and_send -0x352f 010915 fetch 1 ,mem_antl_lost_mode -0x3530 010916 beq 1 ,antilost_alert_on -0x3531 010917 rtn -: 010919 antilost_butten_down_while_disconn: -0x3532 010920 fetch 2 ,mem_antl_le_sleep_timeout -0x3533 010921 store 2 ,mem_antl_le_sleep_timer -0x3534 010922 call antilost_alert_off -0x3535 010923 branch antilost_fast_adv_start -: 010926 antilost_cmd_parse_for_application: -0x3536 010927 bpatch patch19_5 ,mem_patch19 -0x3537 010928 call le_app_receive_data -0x3538 010929 ifetch 1 ,rega -0x3539 010930 beq opcode3_antl_start_alram ,antilost_on_of_alram -0x353a 010931 beq opcode7_antl_config_alram ,antilost_configuration_for_alram -0x353b 010932 rtn -: 010934 antilost_on_of_alram: -0x353c 010935 fetch 1 ,mem_antl_lost_mode -0x353d 010936 beq anti_le_alarm_off ,antilost_alert_on -0x353e 010937 beq anti_le_alarm_on ,antilost_alert_off -0x353f 010938 rtn -: 010940 antilost_configuration_for_alram: -0x3540 010941 ifetch 1 ,regb -0x3541 010942 beq 1 ,antilost_set_start_alarm_after_disconn -0x3542 010943 beq 0 ,antilost_set_no_alarm_after_disconn -0x3543 010944 rtn -: 010951 antilost_prepare_data_and_send: -0x3544 010952 bpatch patch19_6 ,mem_patch19 -0x3545 010953 fetch 1 ,mem_client_characteristic_configuration_descriptor -0x3546 010954 isolate1 notification_enable_bit ,pdata -0x3547 010955 nrtn true -0x3548 010956 add regc ,6 ,contr -0x3549 010957 ifetch 2 ,contr -0x354a 010958 byteswap pdata ,pdata -0x354b 010959 add pdata ,5 ,loopcnt -0x354c 010960 add regc ,3 ,contr -0x354d 010961 call calc_check_sum_start -0x354e 010962 istore 1 ,contr -0x354f 010963 copy regc ,rega -0x3550 010964 branch queue_push -: 010970 antilost_alert_on: -0x3551 010971 fetch 1 ,mem_antl_power_state -0x3552 010972 rtn blank -0x3553 010973 jam 1 ,mem_antl_lost_mode -0x3554 010974 arg mem_antl_alert_buzzer_stlye ,regc -0x3555 010975 call antilost_buzzer_configuration -0x3556 010976 arg mem_antl_alert_led_stlye ,regc -0x3557 010977 call antilost_led_configuration -0x3558 010978 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 -0x3559 010979 jam 1 ,mem_antl_key0_release + 8 -0x355a 010980 arg mem_antl_key0_release ,regc -0x355b 010981 branch antilost_prepare_data_and_send -: 010982 antilost_alert_off: -0x355c 010983 fetch 1 ,mem_antl_lost_mode -0x355d 010984 rtn blank -0x355e 010985 jam 0 ,mem_antl_lost_mode -0x355f 010986 call antilost_led_buzzer_stop_blink -0x3560 010987 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 -0x3561 010988 jam 0 ,mem_antl_key0_release + 8 -0x3562 010989 arg mem_antl_key0_release ,regc -0x3563 010990 branch antilost_prepare_data_and_send -: 010992 antilost_set_start_alarm_after_disconn: -0x3564 010993 jam 1 ,mem_alarm_config -0x3565 010994 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 -0x3566 010995 jam 1 ,mem_antl_key0_release + 8 -0x3567 010996 arg mem_antl_key0_release ,regc -0x3568 010997 branch antilost_prepare_data_and_send -: 010998 antilost_set_no_alarm_after_disconn: -0x3569 010999 jam 0 ,mem_alarm_config -0x356a 011000 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 -0x356b 011001 jam 0 ,mem_antl_key0_release + 8 -0x356c 011002 arg mem_antl_key0_release ,regc -0x356d 011003 branch antilost_prepare_data_and_send -: 011004 antilost_on_off_alarm_after_disconn: -0x356e 011005 fetch 1 ,mem_alarm_config -0x356f 011006 rtn blank -0x3570 011007 branch antilost_alert_on -: 011009 antilost_notify_alarm_config_first_time: -0x3571 011010 ifetch 2 ,rega -0x3572 011011 store 2 ,mem_client_characteristic_configuration_descriptor -0x3573 011012 isolate1 notification_enable_bit ,pdata -0x3574 011013 nrtn true -0x3575 011014 fetch 1 ,mem_alarm_config_notfy_cnt -0x3576 011015 rtn blank -0x3577 011016 jam 0 ,mem_alarm_config_notfy_cnt -0x3578 011017 fetch 8 ,mem_antl_le_interval_min -0x3579 011018 store 8 ,mem_le_interval_min -0x357a 011019 jam 2 ,mem_antl_send_updata_le_param_timer -0x357b 011020 call antilost_battery_process -0x357c 011021 call antilost_battery_calculate_end -0x357d 011022 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 -0x357e 011023 fetch 1 ,mem_alarm_config -0x357f 011024 store 1 ,mem_antl_key0_release + 8 -0x3580 011025 arg mem_antl_key0_release ,regc -0x3581 011026 branch antilost_prepare_data_and_send -: 011030 antilost_buzzer_configuration: -0x3582 011031 arg 1 ,rega -0x3583 011032 branch antilost_configuration_common -: 011033 antilost_led_configuration: -0x3584 011034 arg 0 ,rega -: 011035 antilost_configuration_common: -0x3585 011036 branch antilost_led_buzzer_style_configuration -: 011038 antilost_led_buzzer_stop_blink: -0x3586 011039 arg 0 ,rega -0x3587 011040 call ui_led_blink_stop_global -0x3588 011041 arg 1 ,rega -0x3589 011042 call ui_led_blink_stop_global -0x358a 011043 fetch 1 ,mem_buzzer_pwm_conf -0x358b 011044 branch pwm_disable -: 011046 antilost_led_buzzer_style_configuration: -0x358c 011047 call calc_curr_struct_prt -0x358d 011048 arg 7 ,loopcnt -0x358e 011049 branch ui_led_set_style_global + 2 -: 011053 antilost_fast_adv_start: -0x358f 011054 arg mem_antl_fast_adv_led_style ,regc -0x3590 011055 arg mem_antl_lpm_interval ,regb -: 011056 antilost_adv_start_common: -0x3591 011057 call antilost_adv_interval_lpm_interval_set -0x3592 011058 call antilost_led_configuration -0x3593 011059 fetch 2 ,mem_antl_fast_adv_timeout -0x3594 011060 store 2 ,mem_antl_fast_adv_timer -0x3595 011061 branch app_ble_start_adv -: 011063 antilost_adv_interval_lpm_interval_set: -0x3596 011064 ifetch 2 ,regb -0x3597 011065 store 2 ,mem_lpm_interval -0x3598 011066 ifetch 2 ,contr -0x3599 011067 store 2 ,mem_le_adv_interval -0x359a 011068 rtn -: 011070 antilost_buzzer_pwm_init: -0x359b 011071 arg 0 ,rega -0x359c 011072 call pwm_init -0x359d 011073 fetch 6 ,mem_buzzer_pwm_conf -0x359e 011074 store 6 ,mem_pdatatemp -0x359f 011075 call pwm_out_set -0x35a0 011076 fetch 1 ,mem_buzzer_pwm_conf -0x35a1 011077 branch pwm_disable -: 011079 antilost_led_on_cb: -0x35a2 011080 jam 1 ,mem_antl_led_state -0x35a3 011081 rtn -: 011082 antilost_led_off_cb: -0x35a4 011083 jam 0 ,mem_antl_led_state -0x35a5 011084 rtn -: 011088 antilost_buzzer_off: -0x35a6 011089 jam 0 ,mem_antl_buzzer_state -0x35a7 011090 fetch 1 ,mem_buzzer_pwm_conf -0x35a8 011091 branch pwm_disable -: 011093 antilost_buzzer_on: -0x35a9 011094 jam 1 ,mem_antl_buzzer_state -0x35aa 011095 fetch 6 ,mem_buzzer_pwm_conf -0x35ab 011096 store 6 ,mem_pdatatemp -0x35ac 011097 branch pwm_out_set -: 011101 antilost_adc_init: -0x35ad 011102 jam 0 ,mem_adc_config_flag -0x35ae 011103 branch adc_init_data -: 011105 antilost_battery_process: -0x35af 011106 call adc_set_mode -0x35b0 011107 call vdd_calculate_by_mode -0x35b1 011108 store 2 ,mem_battery_current_voltage -0x35b2 011109 arg mem_battery_calculate_set ,rega -0x35b3 011110 call adc_bat_percent_lowpower_out -0x35b4 011111 store 1 ,mem_voltage_remain_percent -0x35b5 011112 beq 0 ,antilost_low_battery -0x35b6 011113 sub pdata ,0x64 ,null -0x35b7 011114 nbranch antilost_full_battery ,positive -0x35b8 011115 store 1 ,mem_antl_key0_release + 8 -: 011116 antilost_battery_calculate_end: -0x35b9 011117 jam opcode5_batter_information ,mem_antl_key0_release + 5 -0x35ba 011118 arg mem_antl_key0_release ,regc -0x35bb 011119 branch antilost_prepare_data_and_send -: 011120 antilost_full_battery: -0x35bc 011121 jam 100 ,mem_antl_key0_release + 8 -0x35bd 011122 branch antilost_battery_calculate_end -: 011124 antilost_low_battery: -0x35be 011125 branch app_button_long_pressed -: 011129 car_init: -0x35bf 011130 rtn wake -0x35c0 011131 hfetch 1 ,core_gpio_sel1 -0x35c1 011132 and_into 0xf0 ,pdata -0x35c2 011133 hstore 1 ,core_gpio_sel1 -0x35c3 011134 setarg car_le_before_hibernate -0x35c4 011135 store 2 ,mem_cb_before_hibernate -0x35c5 011137 setarg car_le_process_lpm_before -0x35c6 011138 store 2 ,mem_cb_before_lpm -0x35c7 011140 setarg app_enter_hibernate -0x35c8 011141 store 2 ,mem_cb_discovry_timeout -0x35c9 011143 setarg car_scale_process_idle -0x35ca 011144 store 2 ,mem_cb_idle_process -0x35cb 011146 setarg car_scale_process_bb_event -0x35cc 011147 store 2 ,mem_cb_bb_event_process -0x35cd 011149 setarg app_get_lpm_wake_lock -0x35ce 011150 store 2 ,mem_cb_check_wakelock -0x35cf 011152 setarg car_le_receive_data -0x35d0 011153 store 2 ,mem_cb_att_write -0x35d1 011155 setarg car_le_bb_event_timer -0x35d2 011156 store 2 ,mem_cb_event_timer -0x35d3 011158 call g24_head_ptr2regc -0x35d4 011159 setarg car_24g_receive_data -0x35d5 011160 add regc ,offset_24g_cb_rxdata_type1 ,contw -0x35d6 011161 istore 2 ,contw -0x35d7 011163 setarg car_power_off_signal -0x35d8 011164 store 2 ,mem_remote_car_power_off_cb -0x35d9 011166 setarg car_soft_switch_power_on_signal -0x35da 011167 store 2 ,mem_remote_car_power_standby_cb -0x35db 011169 bpatch patch19_7 ,mem_patch19 -0x35dc 011170 call car_init_environment -0x35dd 011171 call queue_init -0x35de 011172 jam 2 ,mem_lpm_mult -0x35df 011173 jam power_on ,mem_car_24g_received_pac -0x35e0 011174 fetch 1 ,mem_car_config_soft_switch_enable -0x35e1 011175 store 1 ,mem_car_hard_soft_switch -0x35e2 011176 beq hard_switch ,car_hard_switch_power_on_signal -0x35e3 011177 fetch 1 ,mem_car_config_soft_switch_gpio -0x35e4 011178 store 1 ,mem_ui_button_gpio -0x35e5 011179 jam off ,mem_le_adv_enable -: 011180 car_soft_switch_power_on_init: -0x35e6 011181 call car_ui_led_init -0x35e7 011182 call ui_button_init -0x35e8 011183 call ui_button_polling -0x35e9 011184 jam power_starting ,mem_car_power_state -0x35ea 011185 fetch 2 ,mem_ui_state_map -0x35eb 011186 rtnbit1 ui_state_btn_down -0x35ec 011187 branch app_enter_hibernate -: 011189 car_power_off_signal: -0x35ed 011190 branch car_ui_led_init -: 011192 car_hard_switch_power_on_signal: -0x35ee 011193 jam power_standby ,mem_car_power_state -: 011194 car_soft_switch_power_on_signal: -0x35ef 011195 jam on ,mem_le_adv_enable -0x35f0 011196 call car_ui_led_init -0x35f1 011197 arg 0 ,rega -0x35f2 011198 call ui_led_blink_start_global -0x35f3 011200 setarg fast_adv_interval_value_car -0x35f4 011201 call shutter_ble_adv_interval_set -: 011202 car_le_modified_name_adv: -0x35f5 011203 arg mem_le_name + 7 ,contw -0x35f6 011204 fetch 1 ,mem_le_lap -: 011205 car_name_loop: -0x35f7 011206 and pdata ,0xF0 ,temp -0x35f8 011207 rshift4 temp ,temp -0x35f9 011208 call car_hex_to_ascii -0x35fa 011209 istoret 1 ,contw -0x35fb 011210 and pdata ,0x0F ,temp -0x35fc 011211 call car_hex_to_ascii -0x35fd 011212 istoret 1 ,contw -0x35fe 011213 call le_modified_name_att_list -0x35ff 011214 fetcht 1 ,mem_le_name_len -0x3600 011215 copy temp ,loopcnt -0x3601 011216 arg mem_le_adv_data + 2 ,contw -0x3602 011217 arg mem_le_name ,contr -0x3603 011218 call memcpy -: 011219 car_le_modified_name_scan: -0x3604 011220 fetcht 1 ,mem_le_name_len -0x3605 011221 copy temp ,loopcnt -0x3606 011222 arg mem_le_scan_data + 2 ,contw -0x3607 011223 arg mem_le_name ,contr -0x3608 011224 branch memcpy -: 011225 car_hex_to_ascii: -0x3609 011226 sub temp ,9 ,null -0x360a 011227 branch car_hex_num ,positive -0x360b 011228 add temp ,55 ,temp -0x360c 011229 rtn -: 011230 car_hex_num: -0x360d 011231 add temp ,48 ,temp -0x360e 011232 rtn -: 011234 car_ui_led_init: -0x360f 011235 fetch 1 ,mem_car_config_blood_led1_gpio -0x3610 011236 bne invalid_pin_num ,car_blood_led_gpio_set -: 011237 car_ui_led_init_1: -0x3611 011238 fetch 1 ,mem_car_config_pairing_led_gpio -0x3612 011239 bne invalid_pin_num ,car_pairing_led_gpio_set -: 011240 car_ui_led_init_2: -0x3613 011241 fetch 1 ,mem_car_config_low_voltage_led_gpio -0x3614 011242 bne invalid_pin_num ,car_low_voltage_led_gpio_set -: 011243 car_ui_led_init_3: -0x3615 011244 fetch 1 ,mem_car_led_num -0x3616 011245 copy pdata ,loopcnt -0x3617 011246 setarg mem_car_led_map -0x3618 011247 copy pdata ,rega -: 011248 car_in_lp1: -0x3619 011249 copy rega ,contr -0x361a 011250 ifetch 1 ,contr -0x361b 011251 copy contr ,rega -0x361c 011252 beq invalid_pin_num ,car_in_lp1_end -0x361d 011253 copy pdata ,temp -0x361e 011254 call gpio_config_output -: 011255 car_in_lp1_end: -0x361f 011256 loop car_in_lp1 -: 011257 car_ui_led_init_end: -0x3620 011258 rtn -: 011259 car_blood_led_gpio_set: -0x3621 011260 fetch 8 ,mem_car_config_blood_led1_gpio -0x3622 011261 store 8 ,mem_car_led_map + 2 -0x3623 011262 branch car_ui_led_init_1 -: 011263 car_pairing_led_gpio_set: -0x3624 011264 store 1 ,mem_car_led_map -0x3625 011265 branch car_ui_led_init_2 -: 011266 car_low_voltage_led_gpio_set: -0x3626 011267 store 1 ,mem_car_led_map + 1 -0x3627 011268 branch car_ui_led_init_3 -: 011271 car_init_environment: -0x3628 011272 arg 0 ,rega -0x3629 011273 call pwm_init -0x362a 011274 call car_ir_rx_init -0x362b 011275 call g24_receive_process_init -0x362c 011276 branch car_init_adc_hvin -: 011278 car_init_adc_hvin: -0x362d 011279 jam 100 ,mem_car_notify_vdd_value_last -0x362e 011280 fetch 1 ,mem_car_config_low_voltage_led_gpio -0x362f 011281 store 1 ,mem_car_style2_struct_led_gpio -0x3630 011282 branch adc_init_data -: 011284 car_le_before_hibernate: -0x3631 011285 call gpio_set_before_lpm_common -0x3632 011286 branch keyscan_process_lpm_before -: 011288 car_le_process_lpm_before: -0x3633 011289 branch keyscan_process_lpm_before -: 011291 car_key_scan_process: -0x3634 011294 branch keyscan_key_process -: 011296 car_scale_process_idle: -0x3635 011297 call car_le_send_packet -0x3636 011298 call car_ir_receive_process -0x3637 011299 call car_g24_status_process -0x3638 011300 branch car_key_scan_process -: 011302 car_g24_status_process: -0x3639 011303 fetch 2 ,mem_ui_state_map -0x363a 011304 rtnbit1 ui_state_ble_connected -0x363b 011305 fetch 1 ,mem_car_24g_received_pac -0x363c 011306 beq work_paired ,car_g24_connected_event -0x363d 011307 rtn -: 011308 car_g24_connected_event: -0x363e 011309 fetch 1 ,mem_car_24g_status -0x363f 011310 rtneq work_paired -0x3640 011311 jam work_paired ,mem_car_24g_status -0x3641 011312 branch car_g24_connected -: 011314 car_le_send_packet: -0x3642 011315 fetch 2 ,mem_ui_state_map -0x3643 011316 rtnbit0 ui_state_ble_connected -0x3644 011317 call le_fifo_check_nearly_full -0x3645 011318 nrtn blank -0x3646 011319 arg mem_car_pop_queue_buff ,rega -0x3647 011320 call queue_pop -0x3648 011321 nrtn user -0x3649 011322 arg mem_car_pop_queue_buff ,contr -0x364a 011323 branch le_send_notify_from_list -: 011325 car_scale_process_bb_event: -0x364b 011326 copy regc ,pdata -0x364c 011327 beq bt_evt_button_up ,app_event_button_up -0x364d 011328 beq bt_evt_button_long_pressed ,app_button_long_pressed -0x364e 011329 beq bt_evt_le_connected ,car_scale_event_le_conn -0x364f 011330 beq bt_evt_le_disconnected ,car_scale_event_le_discon -0x3650 011331 rtn -: 011333 car_scale_event_le_conn: -0x3651 011334 setarg disable_24g -0x3652 011335 call g24_store_mem_24g_mode -0x3653 011336 branch car_scale_process_conn -: 011337 car_g24_connected: -0x3654 011338 fetch 2 ,mem_car_24g_no_data_timeout_count -0x3655 011339 store 2 ,mem_car_24g_no_data_timeout_timer -: 011340 car_scale_process_conn: -0x3656 011341 jam 0x14 ,mem_car_notify_vdd_timer -0x3657 011342 jam 0 ,mem_lpm_mode -0x3658 011343 call app_ble_stop_adv -0x3659 011344 call app_lpm_mult_enable -0x365a 011345 fetch 1 ,mem_car_config_pairing_led_conn_status -0x365b 011346 beq 0x01 ,car_pairing_led_conn_status_setting -: 011347 car_scale_process_conn_next: -0x365c 011348 arg 0 ,rega -0x365d 011349 branch ui_led_on_global -: 011350 car_pairing_led_conn_status_setting: -0x365e 011351 arg 0 ,rega -0x365f 011352 branch ui_led_blink_stop_global -: 011354 car_scale_event_le_discon: -0x3660 011355 setarg rx_24g -0x3661 011356 call g24_store_mem_24g_mode -: 011357 car_g24_disconnect: -0x3662 011358 setarg 0 -0x3663 011359 store 5 ,mem_car_led_control -0x3664 011360 setarg 4 -0x3665 011361 call pwm_disable -0x3666 011362 setarg 5 -0x3667 011363 call pwm_disable -0x3668 011364 setarg 20 -0x3669 011365 call pwm_disable -0x366a 011366 setarg 21 -0x366b 011367 call pwm_disable -0x366c 011368 setarg 22 -0x366d 011369 call pwm_disable -0x366e 011370 setarg 7 -0x366f 011371 call pwm_disable -0x3670 011372 call queue_init -0x3671 011373 jam 10 ,mem_motor1_speed -0x3672 011374 jam 10 ,mem_motor2_speed -0x3673 011375 jam 10 ,mem_motor3_speed -0x3674 011377 jam 2 ,mem_lpm_mult -0x3675 011378 arg 0 ,rega -0x3676 011379 call ui_led_blink_start_global -0x3677 011381 setarg fast_adv_interval_value_car -0x3678 011382 call shutter_ble_adv_interval_set -0x3679 011383 branch app_ble_start_adv -: 011385 car_le_bb_event_timer: -0x367a 011387 call car_moto1_blank_data_timer -0x367b 011388 call car_moto2_blank_data_timer -0x367c 011389 call car_moto3_blank_data_timer -0x367d 011390 call app_power_timer -0x367e 011391 call car_led_control_timer -0x367f 011392 call car_notify_vdd_timer -0x3680 011393 call car_24g_no_data_timeout_timer -0x3681 011394 call car_ir_breakdown_timer -0x3682 011395 branch car_attack_shake_timer -: 011397 car_ir_breakdown_timer: -0x3683 011398 arg mem_car_ir_breakdown_check_timer ,regc -0x3684 011399 arg car_ir_breakdown_timeout ,regb -0x3685 011400 branch timer_single_step -: 011401 car_ir_breakdown_timeout: -0x3686 011402 call car_ir_gpio_get_status -0x3687 011403 nrtn true -0x3688 011404 jam 1 ,mem_car_ir_breakdown_flag -0x3689 011405 rtn -: 011407 car_24g_no_data_timeout_timer: -0x368a 011408 arg mem_car_24g_no_data_timeout_timer ,regc -0x368b 011409 arg car_24g_no_data_timer_timeout ,regb -0x368c 011410 branch timer_single_step_2b -: 011411 car_24g_no_data_timer_timeout: -0x368d 011412 jam work_search ,mem_car_24g_status -0x368e 011413 branch car_g24_disconnect -: 011415 car_attack_shake_timer: -0x368f 011416 arg mem_car_attack_shake_timer ,regc -0x3690 011417 arg car_attack_shake ,regb -0x3691 011418 branch timer_single_step -: 011419 car_attack_shake: -0x3692 011420 fetch 1 ,mem_car_attack_shake_flag -0x3693 011421 branch car_attack_shake_stop ,blank -0x3694 011422 jam 2 ,mem_car_attack_shake_timer -0x3695 011423 jam 0 ,mem_car_attack_shake_flag -0x3696 011424 setarg 0x0a02 -0x3697 011425 store 2 ,mem_le_receive_payload -0x3698 011426 fetch 1 ,mem_car_config_device_select -0x3699 011427 beq device_battle_tank ,car_attack_shake_front_battle_tank -: 011428 car_attack_shake_front_battle_car: -0x369a 011429 branch car_motor_control -: 011430 car_attack_shake_front_battle_tank: -0x369b 011431 setarg 0x0a02 -0x369c 011432 store 2 ,mem_le_receive_payload + 2 -0x369d 011433 branch car_motor_control -: 011434 car_attack_shake_stop: -0x369e 011435 setarg 0 -0x369f 011436 store 4 ,mem_le_receive_payload -0x36a0 011437 branch car_motor_control -: 011439 car_notify_vdd_timer: -0x36a1 011440 fetch 1 ,mem_car_config_bat_notify_enable -0x36a2 011441 rtn blank -0x36a3 011442 fetch 2 ,mem_ui_state_map -0x36a4 011443 bbit0 ui_state_ble_connected ,car_low_bat_led_off -0x36a5 011444 arg mem_car_notify_vdd_timer ,regc -0x36a6 011445 arg car_notify_vdd ,regb -0x36a7 011446 branch timer_single_step -: 011447 car_notify_vdd: -0x36a8 011448 fetch 1 ,mem_car_notify_vdd_count -0x36a9 011449 store 1 ,mem_car_notify_vdd_timer -0x36aa 011450 fetch 1 ,mem_car_working_flag -0x36ab 011451 nrtn blank -: 011452 car_read_hvin: -0x36ac 011453 call adc_set_mode -0x36ad 011454 call vdd_calculate_by_mode -0x36ae 011455 store 2 ,mem_vdd_now_vol -0x36af 011456 arg mem_vdd_calculate_set ,rega -0x36b0 011457 call adc_bat_percent_lowpower_out -0x36b1 011458 fetcht 1 ,mem_car_notify_vdd_value_last -0x36b2 011459 isub temp ,null -0x36b3 011460 branch car_notify_vdd_next2 ,positive -0x36b4 011461 store 1 ,mem_car_notify_vdd_value_last -0x36b5 011462 copy pdata ,temp -: 011463 car_notify_vdd_next2: -0x36b6 011464 storet 1 ,mem_car_notify_vdd_percent -0x36b7 011465 fetch 1 ,mem_car_config_low_voltage_percent -0x36b8 011466 isub temp ,null -0x36b9 011467 call car_enter_low_bat ,positive -0x36ba 011468 storet 1 ,mem_notify_bat_payload -0x36bb 011469 arg 6 ,loopcnt -0x36bc 011470 arg mem_notify_bat_head ,contr -0x36bd 011471 call calc_check_sum_start -0x36be 011472 store 1 ,mem_notify_bat_check_sum -0x36bf 011473 arg mem_notify_bat_packet ,rega -0x36c0 011474 branch queue_push -: 011475 car_enter_low_bat: -0x36c1 011476 fetch 1 ,mem_low_bat_flag -0x36c2 011477 nrtn blank -0x36c3 011478 jam 1 ,mem_low_bat_flag -0x36c4 011479 arg 1 ,rega -0x36c5 011480 branch ui_led_blink_start_global -: 011481 car_low_bat_led_off: -0x36c6 011482 arg 1 ,rega -0x36c7 011483 branch ui_led_blink_stop_global -: 011485 car_led_control_timer: -0x36c8 011486 arg mem_car_led_control_timer ,regc -0x36c9 011487 arg car_led_control ,regb -0x36ca 011488 branch timer_single_step -: 011489 car_led_control: -0x36cb 011490 jam 5 ,mem_car_led_control_timer -0x36cc 011491 jam 0 ,mem_car_led_no -0x36cd 011492 fetch 1 ,mem_car_led_blink_status -0x36ce 011493 beq led_on ,car_led_control_blink_off -0x36cf 011494 beq led_off ,car_led_control_blink_on -: 011495 car_led_control_set: -0x36d0 011496 arg mem_car_led_control ,contr -0x36d1 011497 copy contr ,rega -0x36d2 011498 arg 8 ,loopcnt -: 011499 car_led_control_timer_next: -0x36d3 011500 copy rega ,contr -0x36d4 011501 ifetch 1 ,contr -0x36d5 011502 copy contr ,rega -0x36d6 011503 beq led_off ,car_led_control_off -0x36d7 011504 beq led_on ,car_led_control_on -0x36d8 011505 beq led_blink ,car_led_control_blink -: 011506 car_led_control_timer_next_2: -0x36d9 011507 fetch 1 ,mem_car_led_no -0x36da 011508 increase 1 ,pdata -0x36db 011509 store 1 ,mem_car_led_no -0x36dc 011510 loop car_led_control_timer_next -0x36dd 011511 rtn -: 011512 car_led_switch: -0x36de 011513 fetch 1 ,mem_car_led_no -0x36df 011514 arg mem_car_config_blood_led_gpio ,regb -0x36e0 011515 iadd regb ,regb -0x36e1 011516 ifetcht 1 ,regb -0x36e2 011517 rtn -: 011518 car_led_control_off: -0x36e3 011519 call car_led_switch -0x36e4 011520 call gpio_out_inactive -0x36e5 011521 branch car_led_control_timer_next_2 -: 011522 car_led_control_on: -0x36e6 011523 call car_led_switch -0x36e7 011524 call gpio_out_active -0x36e8 011525 branch car_led_control_timer_next_2 -: 011526 car_led_control_blink: -0x36e9 011527 fetch 1 ,mem_car_led_blink_status -0x36ea 011528 beq led_on ,car_led_control_off -0x36eb 011529 branch car_led_control_on -: 011530 car_led_control_blink_on: -0x36ec 011531 jam led_on ,mem_car_led_blink_status -0x36ed 011532 branch car_led_control_set -: 011533 car_led_control_blink_off: -0x36ee 011534 jam led_off ,mem_car_led_blink_status -0x36ef 011535 branch car_led_control_set -: 011539 calc_check_sum_start: -0x36f0 011540 arg 0 ,rega -: 011541 calc_check_sum_loop: -0x36f1 011542 ifetch 1 ,contr -0x36f2 011543 iadd rega ,rega -0x36f3 011544 loop calc_check_sum_loop -: 011545 calc_check_sum_and: -0x36f4 011546 and rega ,0xff ,pdata -0x36f5 011547 rtn -: 011549 car_le_receive_data: -0x36f6 011550 fetch 1 ,mem_le_att_opcode -0x36f7 011551 beq attop_write_request ,car_le_parse_att_write_request -0x36f8 011552 rtn -: 011553 car_le_parse_att_write_request: -0x36f9 011554 fetch 2 ,mem_le_att_handle -0x36fa 011555 beq att_car_control_handle ,car_control_le_receive -0x36fb 011556 rtn -: 011568 le_app_receive_data: -0x36fc 011569 bpatch patch1a_0 ,mem_patch1a -0x36fd 011570 ifetch 5 ,rega -0x36fe 011571 store 5 ,mem_app_receive_temp -0x36ff 011572 fetch 2 ,mem_app_receive_temp -0x3700 011573 arg le_receive_packet_head ,temp -0x3701 011574 isub temp ,null -0x3702 011575 nrtn zero -0x3703 011576 fetch 2 ,mem_app_receive_temp + 3 -0x3704 011577 byteswap pdata ,pdata -0x3705 011578 store 2 ,mem_app_receive_temp + 3 -0x3706 011579 copy pdata ,loopcnt -0x3707 011580 increase 5 ,rega -0x3708 011581 copy rega ,contr -0x3709 011582 arg mem_app_receive_temp + 5 ,contw -0x370a 011583 call memcpy -0x370b 011584 ifetch 1 ,contr -0x370c 011585 store 1 ,mem_app_receive_temp + 15 -0x370d 011586 arg mem_app_receive_temp + 2 ,rega -0x370e 011587 arg mem_app_receive_temp + 5 ,regb -0x370f 011588 rtn -: 011590 car_control_le_receive: -0x3710 011591 setarg 0 -0x3711 011592 store 5 ,mem_le_receive_payload -0x3712 011593 store 5 ,mem_le_receive_payload + 5 -0x3713 011594 call le_app_receive_data -0x3714 011595 copy regb ,contr -0x3715 011596 arg mem_le_receive_payload ,contw -0x3716 011597 arg 10 ,loopcnt -0x3717 011598 call memcpy -: 011599 car_receive_cmd_select: -0x3718 011600 bpatch patch1a_1 ,mem_patch1a -0x3719 011601 ifetch 1 ,rega -0x371a 011602 beq car_cmd_old_car_control ,car_drive_old -0x371b 011603 beq car_cmd_old_speed_control ,car_speed_set_old -0x371c 011604 beq car_cmd_l_r_motor_control ,car_motor_control -0x371d 011605 beq car_cmd_f_b_motor_control ,car_motor_control -0x371e 011606 beq car_cmd_ir_control ,car_ir_data_rx_from_app -0x371f 011607 beq car_cmd_led_control ,car_led_control_receive -0x3720 011608 beq car_cmd_device_info ,car_info_request -0x3721 011609 rtn -: 011611 car_24g_receive_data: -0x3722 011612 fetch 2 ,mem_ui_state_map -0x3723 011613 rtnbit1 ui_state_ble_connected -0x3724 011615 fetch 2 ,mem_car_24g_no_data_timeout_count -0x3725 011616 store 2 ,mem_car_24g_no_data_timeout_timer -0x3726 011618 jam work_paired ,mem_car_24g_received_pac -0x3727 011620 setarg offset_24g_rxdata_temp_add3 -0x3728 011621 call g24_set_rega -0x3729 011622 call car_control_le_receive -0x372a 011624 fetch 1 ,mem_app_receive_temp + 2 -0x372b 011625 beq car_cmd_l_r_motor_control ,car_24g_receive_data_next -0x372c 011626 beq car_cmd_f_b_motor_control ,car_24g_receive_data_next -0x372d 011627 rtn -: 011628 car_24g_receive_data_next: -0x372e 011629 fetch 1 ,mem_le_receive_payload -0x372f 011630 ncall car_moto1_enable_blank_data_timer ,blank -0x3730 011631 fetch 1 ,mem_le_receive_payload + 2 -0x3731 011632 ncall car_moto2_enable_blank_data_timer ,blank -0x3732 011633 fetch 1 ,mem_le_receive_payload + 4 -0x3733 011634 ncall car_moto3_enable_blank_data_timer ,blank -0x3734 011635 rtn -: 011637 car_moto1_enable_blank_data_timer: -0x3735 011638 jam 5 ,mem_car_moto1_blank_timer -0x3736 011639 rtn -: 011640 car_moto2_enable_blank_data_timer: -0x3737 011641 jam 5 ,mem_car_moto2_blank_timer -0x3738 011642 rtn -: 011643 car_moto3_enable_blank_data_timer: -0x3739 011644 jam 5 ,mem_car_moto3_blank_timer -0x373a 011645 rtn -: 011647 car_moto1_blank_data_timer: -0x373b 011648 arg mem_car_moto1_blank_timer ,regc -0x373c 011649 arg car_moto1_blank_data ,regb -0x373d 011650 branch timer_single_step -: 011651 car_moto2_blank_data_timer: -0x373e 011652 arg mem_car_moto2_blank_timer ,regc -0x373f 011653 arg car_moto2_blank_data ,regb -0x3740 011654 branch timer_single_step -: 011655 car_moto3_blank_data_timer: -0x3741 011656 arg mem_car_moto3_blank_timer ,regc -0x3742 011657 arg car_moto3_blank_data ,regb -0x3743 011658 branch timer_single_step -: 011660 car_moto1_blank_data: -0x3744 011661 jam 0 ,mem_le_receive_payload -0x3745 011662 branch car_motor_control -: 011663 car_moto2_blank_data: -0x3746 011664 jam 0 ,mem_le_receive_payload + 2 -0x3747 011665 branch car_motor_control -: 011666 car_moto3_blank_data: -0x3748 011667 jam 0 ,mem_le_receive_payload + 4 -0x3749 011668 branch car_motor_control -: 011673 car_drive_old: -0x374a 011674 call car_left_right_control_old -0x374b 011675 branch car_front_back_control_old -: 011676 car_left_right_control_old: -0x374c 011677 fetch 1 ,mem_le_receive_payload -0x374d 011678 store 1 ,mem_motor2_status -0x374e 011679 branch car_motor2_control -: 011680 car_front_back_control_old: -0x374f 011681 fetch 1 ,mem_motor1_speed -0x3750 011682 call car_reset_old_speed -0x3751 011683 fetch 1 ,mem_le_receive_payload + 1 -0x3752 011684 store 1 ,mem_motor1_status -0x3753 011685 branch car_motor1_control -: 011686 car_reset_old_speed: -0x3754 011687 beq speed_level_2 ,car_reset_old_speed2 -0x3755 011688 beq speed_level_3 ,car_reset_old_speed3 -0x3756 011689 store 1 ,mem_motor1_speed -0x3757 011690 rtn -: 011691 car_reset_old_speed2: -0x3758 011692 jam speed_level_5 ,mem_motor1_speed -0x3759 011693 rtn -: 011694 car_reset_old_speed3: -0x375a 011695 jam speed_level_10 ,mem_motor1_speed -0x375b 011696 rtn -: 011697 car_speed_set_old: -0x375c 011698 fetch 1 ,mem_le_receive_payload -0x375d 011699 call car_reset_old_speed -0x375e 011700 fetch 1 ,mem_motor1_speed -0x375f 011701 call car_motor_speed_duty_setting -0x3760 011702 call car_motor_speed_duty_transform -0x3761 011703 branch pwm_pwm0_duty_set -: 011705 car_motor_control: -0x3762 011706 fetch 1 ,mem_car_24g_go_die_flag -0x3763 011707 nrtn blank -0x3764 011708 fetch 6 ,mem_le_receive_payload -0x3765 011709 store 6 ,mem_motor1_status -0x3766 011710 fetch 1 ,mem_motor1_speed -0x3767 011711 fetcht 1 ,mem_motor2_speed -0x3768 011712 iand temp ,pdata -0x3769 011713 fetcht 1 ,mem_motor3_speed -0x376a 011714 iand temp ,pdata -0x376b 011715 call car_motor_working_flag ,blank -0x376c 011716 bpatch patch1a_2 ,mem_patch1a -0x376d 011717 call car_motor1_control -0x376e 011718 call car_motor2_control -0x376f 011719 branch car_motor3_control -: 011720 car_motor1_control: -0x3770 011721 arg mem_motor1_pwm_set ,regb -0x3771 011722 arg mem_motor1_status ,contr -0x3772 011723 branch car_motor_status_select -: 011724 car_motor2_control: -0x3773 011725 arg mem_motor2_pwm_set ,regb -0x3774 011726 arg mem_motor2_status ,contr -0x3775 011727 branch car_motor_status_select -: 011728 car_motor3_control: -0x3776 011729 arg mem_motor3_pwm_set ,regb -0x3777 011730 arg mem_motor3_status ,contr -0x3778 011731 branch car_motor_status_select -: 011732 car_motor_working_flag: -0x3779 011733 jam 0 ,mem_car_working_flag -0x377a 011734 rtn -: 011736 car_motor_status_select: -0x377b 011737 ifetch 1 ,contr -0x377c 011738 beq motor_stop ,car_motor_stop -0x377d 011739 beq go_front ,car_motor_positive -0x377e 011740 beq go_back ,car_motor_negative -0x377f 011741 rtn -: 011742 car_motor_positive: -0x3780 011743 jam 0 ,mem_motor_select_p_n -0x3781 011744 branch car_motor_negative + 1 -: 011745 car_motor_negative: -0x3782 011746 jam 1 ,mem_motor_select_p_n -0x3783 011747 ifetch 1 ,contr -0x3784 011748 store 1 ,mem_car_motor_speed -0x3785 011749 ifetch 8 ,regb -0x3786 011750 branch car_motor_work -: 011752 car_motor_stop: -0x3787 011753 ifetch 1 ,regb -0x3788 011754 call pwm_disable -0x3789 011755 increase 1 ,regb -0x378a 011756 ifetch 1 ,regb -0x378b 011757 branch pwm_disable -: 011758 car_motor_work: -0x378c 011759 store 8 ,mem_motor_pwm_pin1_set -0x378d 011760 jam 1 ,mem_car_working_flag -0x378e 011761 fetch 1 ,mem_motor_select_p_n -0x378f 011762 beq 0 ,car_motor_select_positive -: 011763 car_motor_select_negative: -0x3790 011764 fetch 1 ,mem_motor_pwm_pin2_set -0x3791 011765 store 1 ,mem_motor_pwm_pin_set -0x3792 011766 fetch 1 ,mem_motor_pwm_pin1_set -: 011767 car_motor_work_next: -0x3793 011768 call pwm_disable -0x3794 011769 fetch 1 ,mem_car_motor_speed -0x3795 011770 call car_motor_speed_duty_setting -0x3796 011771 store 1 ,mem_motor_pwm_dute_set -0x3797 011772 fetch 6 ,mem_motor_pwm_pin_set -0x3798 011773 store 6 ,mem_pdatatemp -0x3799 011774 branch pwm_out_set -: 011775 car_motor_select_positive: -0x379a 011776 fetch 1 ,mem_motor_pwm_pin1_set -0x379b 011777 store 1 ,mem_motor_pwm_pin_set -0x379c 011778 fetch 1 ,mem_motor_pwm_pin2_set -0x379d 011779 branch car_motor_work_next -: 011781 car_motor_speed_duty_setting: -0x379e 011782 mul32 pdata ,5 ,pdata -0x379f 011783 add pdata ,50 ,pdata -0x37a0 011784 rtn -: 011785 car_motor_speed_duty_transform: -0x37a1 011786 arg 12000 ,temp -0x37a2 011787 imul32 temp ,pdata -0x37a3 011788 div pdata ,100 -0x37a4 011789 call wait_div_end -0x37a5 011790 quotient temp -0x37a6 011791 copy temp ,rega -0x37a7 011792 setarg 12000 -0x37a8 011793 isub temp ,regb -0x37a9 011794 rtn -: 011797 car_ir_init: -0x37aa 011798 hfetch 1 ,core_gpio_sel2 -0x37ab 011799 set1 2 ,pdata -0x37ac 011800 hstore 1 ,core_gpio_sel2 -0x37ad 011801 setarg 158 -0x37ae 011802 hstore 2 ,core_pwm_pcnt4 -0x37af 011803 hstore 2 ,core_pwm_ncnt4 -0x37b0 011804 rtn -: 011806 car_ir_data_rx_from_app: -0x37b1 011807 fetch 1 ,mem_car_24g_go_die_flag -0x37b2 011808 nrtn blank -0x37b3 011809 fetch 2 ,mem_le_receive_payload -0x37b4 011810 store 2 ,mem_ir_data -0x37b5 011811 fetch 1 ,mem_car_24g_status -0x37b6 011812 bne work_paired ,car_ir_data_tx -0x37b7 011813 fetch 2 ,mem_le_lap -0x37b8 011814 store 2 ,mem_ir_data -: 011815 car_ir_data_tx: -0x37b9 011816 bpatch patch1a_3 ,mem_patch1a -0x37ba 011817 call car_ir_init -0x37bb 011818 call car_ir_enable -0x37bc 011819 setarg 48000 -0x37bd 011820 call sleep -0x37be 011821 call car_ir_disable -0x37bf 011822 setarg 7200 -0x37c0 011823 call sleep -0x37c1 011824 arg 16 ,loopcnt -: 011825 car_ir_send_loop: -0x37c2 011826 call car_ir_enable -0x37c3 011827 fetch 2 ,mem_ir_data -0x37c4 011828 bbit1 0 ,car_ir_is_bit1 -0x37c5 011829 setarg 7200 -0x37c6 011830 call sleep -0x37c7 011831 call car_ir_disable -0x37c8 011832 branch car_ir_wait_finish -: 011834 car_ir_is_bit1: -0x37c9 011835 setarg 14400 -0x37ca 011836 call sleep -0x37cb 011837 call car_ir_disable -: 011838 car_ir_wait_finish: -0x37cc 011839 setarg 7200 -0x37cd 011840 call sleep -0x37ce 011841 fetch 2 ,mem_ir_data -0x37cf 011842 rshift pdata ,pdata -0x37d0 011843 store 2 ,mem_ir_data -0x37d1 011844 loop car_ir_send_loop -0x37d2 011846 jam 2 ,mem_car_attack_shake_timer -0x37d3 011847 jam 1 ,mem_car_attack_shake_flag -0x37d4 011848 setarg 0x0a01 -0x37d5 011849 store 2 ,mem_le_receive_payload -0x37d6 011850 fetch 1 ,mem_car_config_device_select -0x37d7 011851 beq device_battle_tank ,car_attack_shake_back_battle_tank -: 011852 car_attack_shake_back_battle_car: -0x37d8 011853 branch car_motor_control -: 011854 car_attack_shake_back_battle_tank: -0x37d9 011855 setarg 0x0a01 -0x37da 011856 store 2 ,mem_le_receive_payload + 2 -0x37db 011857 branch car_motor_control -: 011859 car_ir_enable: -0x37dc 011860 hfetch 1 ,core_gpio_key2 -0x37dd 011861 or_into 0x40 ,pdata -0x37de 011862 hstore 1 ,core_gpio_key2 -0x37df 011863 rtn -: 011864 car_ir_disable: -0x37e0 011865 hfetch 1 ,core_gpio_key2 -0x37e1 011866 and_into 0xbf ,pdata -0x37e2 011867 hstore 1 ,core_gpio_key2 -0x37e3 011868 rtn -: 011870 car_ir_rx_init: -0x37e4 011871 fetch 1 ,mem_car_config_ir_enable -0x37e5 011872 rtneq 0x00 -0x37e6 011873 call lpm_disable_exen_output -0x37e7 011874 fetcht 1 ,mem_car_config_ir_rx_gpio -0x37e8 011875 storet 1 ,mem_ir_rx_gpio -0x37e9 011876 call gpio_config_input -0x37ea 011877 call car_ir_gpio_get_status -0x37eb 011878 nrtn true -0x37ec 011879 jam 1 ,mem_car_ir_breakdown_check_timer -0x37ed 011880 rtn -: 011882 car_ir_receive_process: -0x37ee 011883 fetch 1 ,mem_car_config_ir_enable -0x37ef 011884 rtneq flag_ir_disable -0x37f0 011885 fetch 1 ,mem_car_ir_breakdown_flag -0x37f1 011886 nrtn blank -0x37f2 011887 fetch 2 ,mem_ui_state_map -0x37f3 011888 bbit1 ui_state_ble_connected ,car_ir_receive_process_next -0x37f4 011889 fetch 1 ,mem_car_24g_status -0x37f5 011890 rtnne work_paired -: 011891 car_ir_receive_process_next: -0x37f6 011892 bpatch patch1a_4 ,mem_patch1a -0x37f7 011893 call car_ir_gpio_get_status -0x37f8 011894 nrtn true -0x37f9 011895 setarg 36000 -0x37fa 011896 call sleep -0x37fb 011897 call car_ir_gpio_get_status -0x37fc 011898 nrtn true -0x37fd 011899 call car_ir_clk_get -: 011900 car_ir_packet_head_wait_end: -0x37fe 011901 call car_ir_clk_check -0x37ff 011902 nrtn positive -0x3800 011903 call car_ir_gpio_get_status -0x3801 011904 branch car_ir_packet_head_wait_end ,true -0x3802 011905 arg 0 ,rega -0x3803 011906 arg 16 ,loopcnt -0x3804 011907 call car_ir_clk_get -: 011908 car_ir_receive_process_loop: -0x3805 011909 call car_ir_clk_check -0x3806 011910 nrtn positive -0x3807 011911 call car_ir_gpio_get_status -0x3808 011912 nbranch car_ir_receive_process_loop ,true -0x3809 011913 setarg 10800 -0x380a 011914 call sleep -0x380b 011915 call car_ir_gpio_get_status -0x380c 011916 branch car_ir_get_bit1 ,true -: 011917 car_ir_get_bit0: -0x380d 011918 setarg 0 -0x380e 011919 rshift rega ,rega -0x380f 011920 ior rega ,rega -0x3810 011921 loop car_ir_receive_process_loop -0x3811 011922 branch car_ir_receive_process_end -: 011923 car_ir_get_bit1: -0x3812 011924 setarg 0x8000 -0x3813 011925 rshift rega ,rega -0x3814 011926 ior rega ,rega -0x3815 011927 call car_ir_clk_get -: 011928 car_ir_get_bit1_wait_low_end: -0x3816 011929 call car_ir_clk_check -0x3817 011930 nrtn positive -0x3818 011931 call car_ir_gpio_get_status -0x3819 011932 branch car_ir_get_bit1_wait_low_end ,true -0x381a 011933 loop car_ir_receive_process_loop -: 011934 car_ir_receive_process_end: -0x381b 011935 bpatch patch1a_5 ,mem_patch1a -0x381c 011936 copy rega ,pdata -0x381d 011937 store 2 ,mem_ir_rx_buf -0x381e 011938 store 2 ,mem_ir_notify_data + 8 -0x381f 011939 fetch 1 ,mem_car_24g_status -0x3820 011940 beq work_paired ,car_ir_24g_receive_attack -: 011941 car_ir_data_notify: -0x3821 011942 arg 0x07 ,loopcnt -0x3822 011943 arg mem_ir_notify_data_head ,contr -0x3823 011944 call calc_check_sum_start -0x3824 011945 store 1 ,mem_ir_notify_data_check_sum -0x3825 011946 arg mem_ir_notify_data ,rega -0x3826 011947 branch queue_push -: 011949 car_ir_24g_receive_attack: -0x3827 011950 fetch 1 ,mem_car_24g_ir_receive_attack_count -0x3828 011951 increase 1 ,pdata -0x3829 011952 store 1 ,mem_car_24g_ir_receive_attack_count -0x382a 011953 div pdata ,2 -0x382b 011954 call wait_div_end -0x382c 011955 quotient temp -0x382d 011956 remainder pdata -0x382e 011957 nbranch car_ir_24g_receive_attack_blink ,blank -: 011958 car_ir_24g_receive_attack_off: -0x382f 011959 fetch 1 ,mem_car_config_led_num -0x3830 011960 isub temp ,null -0x3831 011961 call car_ir_24g_go_die ,zero -0x3832 011962 arg mem_car_led_control ,pdata -0x3833 011963 increase -1 ,temp -0x3834 011964 iadd temp ,rega -0x3835 011965 arg 0 ,pdata -0x3836 011966 istore 1 ,rega -0x3837 011967 rtn -: 011968 car_ir_24g_receive_attack_blink: -0x3838 011969 arg mem_car_led_control ,pdata -0x3839 011970 iadd temp ,rega -0x383a 011971 arg 2 ,pdata -0x383b 011972 istore 1 ,rega -0x383c 011973 rtn -: 011974 car_ir_24g_go_die: -0x383d 011975 jam 1 ,mem_car_24g_go_die_flag -0x383e 011976 rtn -: 011977 car_ir_clk_get: -0x383f 011978 copy clkn_bt ,pdata -0x3840 011979 store 4 ,mem_ir_receive_clkn -0x3841 011980 rtn -: 011981 car_ir_clk_check: -0x3842 011982 copy clkn_bt ,pdata -0x3843 011983 fetcht 4 ,mem_ir_receive_clkn -0x3844 011984 isub temp ,pdata -0x3845 011985 sub pdata ,200 ,null -0x3846 011986 rtn -: 011988 car_ir_gpio_get_status: -0x3847 011989 fetcht 1 ,mem_ir_rx_gpio -0x3848 011990 branch gpio_get_bit -: 011992 car_led_control_receive: -0x3849 011993 fetch 8 ,mem_le_receive_payload -0x384a 011994 store 8 ,mem_car_led_control -0x384b 011995 rtn -: 011997 car_info_request: -0x384c 011998 fetch 1 ,mem_car_config_device_select -0x384d 011999 store 1 ,mem_car_info_request_payload -0x384e 012000 fetch 1 ,mem_car_config_motor_layout -0x384f 012001 store 1 ,mem_car_info_request_payload + 1 -0x3850 012002 fetch 1 ,mem_car_config_ir_enable -0x3851 012003 store 1 ,mem_car_info_request_payload + 2 -0x3852 012004 arg 13 ,loopcnt -0x3853 012005 arg mem_car_info_request_head ,contr -0x3854 012006 call calc_check_sum_start -0x3855 012007 store 1 ,mem_car_info_request_checksum -0x3856 012008 arg mem_car_info_request ,rega -0x3857 012009 branch queue_push -: 012015 light_init: -0x3858 012016 call clear_eeprom_size_2k -0x3859 012017 jam 0x7a ,mem_curr_packet_num -0x385a 012018 call light_load_controler_list -0x385b 012019 call light_init_crr_cmd_count -0x385c 012020 setarg light_pairing_timer -0x385d 012021 store 2 ,mem_cb_event_timer -0x385e 012022 arg 0 ,rega -0x385f 012023 branch pwm_init -: 012025 light_pairing_timer: -0x3860 012026 fetch 2 ,mem_light_pairing_timer -0x3861 012027 rtn blank -0x3862 012028 increase -1 ,pdata -0x3863 012029 store 2 ,mem_light_pairing_timer -0x3864 012030 rtnne 0 -0x3865 012031 jam 0 ,mem_light_pairing_enable -0x3866 012032 rtn -: 012034 light_init_crr_cmd_count: -0x3867 012035 bpatch patch1a_6 ,mem_patch1a -0x3868 012036 fetch 1 ,mem_light_next_record -0x3869 012037 sub pdata ,40 ,null -0x386a 012038 rtn positive -0x386b 012039 jam 0 ,mem_light_next_record -0x386c 012040 rtn -: 012042 light_load_controler_list: -0x386d 012043 arg mem_light_next_record ,rega -0x386e 012044 arg 0 ,regb -0x386f 012045 arg 81 ,temp -0x3870 012046 branch iicd_read_eep_data -: 012049 light_find_controler_pairing: -0x3871 012050 disable user -0x3872 012051 fetch 1 ,mem_light_cnum -0x3873 012052 copy pdata ,loopcnt -0x3874 012054 arg mem_light_clist ,rega -0x3875 012055 copy regc ,regb -: 012056 light_find_controler_pairing_loop: -0x3876 012057 bpatch patch1a_7 ,mem_patch1a -0x3877 012058 call light_compare_addr_record -0x3878 012059 branch enable_user ,zero -: 012060 light_find_single_pairing_diff: -0x3879 012061 increase 4 ,rega -0x387a 012062 loop light_find_controler_pairing_loop -0x387b 012063 rtn -: 012066 light_compare_addr_record: -0x387c 012067 bpatch patch1b_0 ,mem_patch1b -0x387d 012068 ifetch 3 ,rega -0x387e 012069 ifetcht 3 ,regb -0x387f 012070 isub temp ,null -0x3880 012071 rtn -: 012073 light_compare_single_record: -0x3881 012074 bpatch patch1b_1 ,mem_patch1b -0x3882 012075 ifetch 3 ,rega -0x3883 012076 ifetcht 3 ,regb -0x3884 012077 isub temp ,null -0x3885 012078 nrtn zero -0x3886 012079 ifetch 1 ,contr -0x3887 012080 sub pdata ,0 ,null -0x3888 012081 rtn zero -0x3889 012082 add rega ,3 ,contr -0x388a 012083 ifetcht 1 ,contr -0x388b 012084 isub temp ,null -0x388c 012085 rtn -: 012088 light_find_controler_cmd: -0x388d 012089 bpatch patch1b_2 ,mem_patch1b -0x388e 012090 disable user -0x388f 012091 fetch 1 ,mem_light_cnum -0x3890 012092 copy pdata ,loopcnt -0x3891 012094 arg mem_light_clist ,rega -0x3892 012095 copy regc ,regb -: 012096 light_find_controler_cmd_loop: -0x3893 012097 call light_compare_single_record -0x3894 012098 branch enable_user ,zero -0x3895 012099 increase 4 ,rega -0x3896 012100 loop light_find_controler_cmd_loop -0x3897 012101 rtn -: 012104 light_recv_adv: -0x3898 012105 fetch 1 ,mem_le_scanrsp_rcv -0x3899 012106 increase 1 ,pdata -0x389a 012107 store 1 ,mem_le_scanrsp_rcv -0x389b 012108 arg mem_le_rxbuf + 12 ,regc -: 012110 light_anylize_command: -0x389c 012111 ifetch 2 ,regc -0x389d 012112 arg 0x55aa ,temp -0x389e 012113 isub temp ,null -0x389f 012114 nrtn zero -0x38a0 012115 copy contr ,regc -0x38a1 012116 ifetcht 3 ,regc -0x38a2 012117 setarg 0xffffff -0x38a3 012118 isub temp ,null -0x38a4 012119 branch light_parse_cmd ,zero -0x38a5 012120 call light_find_controler_cmd -0x38a6 012121 branch light_parse_cmd ,user -0x38a7 012122 rtn -: 012124 light_parse_cmd: -0x38a8 012125 bpatch patch1b_3 ,mem_patch1b -0x38a9 012126 increase 4 ,regc -0x38aa 012127 ifetch 1 ,regc -0x38ab 012128 fetcht 1 ,mem_curr_packet_num -0x38ac 012129 isub temp ,null -0x38ad 012130 rtn zero -0x38ae 012131 store 1 ,mem_curr_packet_num -0x38af 012132 fetch 1 ,mem_le_req_rcv -0x38b0 012133 increase 1 ,pdata -0x38b1 012134 store 1 ,mem_le_req_rcv -0x38b2 012136 increase 1 ,regc -0x38b3 012137 ifetch 1 ,regc -0x38b4 012138 store 1 ,mem_light_crr_cmd_count -0x38b5 012139 copy pdata ,loopcnt -0x38b6 012140 rtn blank -: 012141 light_parse_cmd_loop: -0x38b7 012142 ifetch 1 ,contr -0x38b8 012143 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 -0x38b9 012144 beq light_cmd_pwm1 ,light_parse_cmd_pwm1 -0x38ba 012145 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 -0x38bb 012146 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 -0x38bc 012147 beq light_cmd_pwm4 ,light_parse_cmd_pwm4 -0x38bd 012148 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 -0x38be 012149 beq light_cmd_auto_mode ,light_parse_auto_mode -0x38bf 012150 beq light_cmd_pairing ,light_parse_pairing -0x38c0 012151 loop light_parse_cmd_loop -0x38c1 012152 rtn -: 012154 light_parse_cmd_pwm0: -0x38c2 012155 copy contr ,regc -0x38c3 012156 fetch 1 ,mem_light_pwm0 -0x38c4 012157 store 1 ,mem_pdatatemp -0x38c5 012158 arg 0 ,temp -: 012159 light_parse_cmd_pwm_common: -0x38c6 012160 storet 1 ,mem_pdatatemp + 1 -0x38c7 012161 setarg 10000 -0x38c8 012162 store 3 ,mem_pdatatemp + 2 -0x38c9 012163 ifetch 1 ,regc -0x38ca 012164 store 1 ,mem_pdatatemp + 5 -0x38cb 012165 call pwm_out_set -0x38cc 012166 and regc ,1 ,contr -0x38cd 012167 loop light_parse_cmd_loop -0x38ce 012168 rtn -: 012169 light_parse_cmd_pwm1: -0x38cf 012170 copy regc ,contr -0x38d0 012171 fetch 1 ,mem_light_pwm1 -0x38d1 012172 store 1 ,mem_pdatatemp -0x38d2 012173 arg 1 ,temp -0x38d3 012174 branch light_parse_cmd_pwm_common -: 012175 light_parse_cmd_pwm2: -0x38d4 012176 copy regc ,contr -0x38d5 012177 fetch 1 ,mem_light_pwm2 -0x38d6 012178 store 1 ,mem_pdatatemp -0x38d7 012179 arg 2 ,temp -0x38d8 012180 branch light_parse_cmd_pwm_common -: 012181 light_parse_cmd_pwm3: -0x38d9 012182 copy regc ,contr -0x38da 012183 fetch 1 ,mem_light_pwm3 -0x38db 012184 store 1 ,mem_pdatatemp -0x38dc 012185 arg 3 ,temp -0x38dd 012186 branch light_parse_cmd_pwm_common -: 012187 light_parse_cmd_pwm4: -0x38de 012188 copy regc ,contr -0x38df 012189 fetch 1 ,mem_light_pwm4 -0x38e0 012190 store 1 ,mem_pdatatemp -0x38e1 012191 arg 4 ,temp -0x38e2 012192 branch light_parse_cmd_pwm_common -: 012193 light_parse_cmd_pwm5: -0x38e3 012194 copy regc ,contr -0x38e4 012195 fetch 1 ,mem_light_pwm5 -0x38e5 012196 store 1 ,mem_pdatatemp -0x38e6 012197 arg 5 ,temp -0x38e7 012198 branch light_parse_cmd_pwm_common -: 012200 light_parse_auto_mode: -0x38e8 012201 ifetch 1 ,contr -0x38e9 012202 rtn -: 012204 light_parse_pairing: -0x38ea 012205 copy contr ,regc -0x38eb 012206 fetch 1 ,mem_light_pairing_enable -0x38ec 012207 bne 1 ,light_parse_pairing_abandon -0x38ed 012208 call update_controler_list -: 012209 light_parse_pairing_abandon: -0x38ee 012210 and regc ,4 ,contr -0x38ef 012211 rtn -: 012212 update_controler_list: -0x38f0 012213 bpatch patch1b_4 ,mem_patch1b -0x38f1 012214 call light_find_controler_pairing -0x38f2 012215 branch update_conrtoler_list_found ,user -0x38f3 012216 fetch 1 ,mem_light_next_record -0x38f4 012217 copy pdata ,temp -0x38f5 012218 increase 1 ,pdata -0x38f6 012219 store 1 ,mem_light_next_record -0x38f7 012220 call light_init_crr_cmd_count -0x38f8 012221 lshift2 temp ,temp -0x38f9 012222 setarg mem_light_clist -0x38fa 012223 iadd temp ,contw -0x38fb 012224 ifetch 4 ,regc -0x38fc 012225 istore 4 ,contw -0x38fd 012226 branch update_conrtoler_store_list -: 012227 update_conrtoler_list_found: -0x38fe 012228 add regc ,3 ,contr -0x38ff 012229 ifetch 1 ,contr -0x3900 012230 rtn blank -0x3901 012231 ifetch 4 ,regc -0x3902 012232 istore 4 ,rega -: 012233 update_conrtoler_store_list: -0x3903 012234 arg mem_light_next_record ,rega -0x3904 012235 arg 0 ,regb -0x3905 012236 arg 81 ,temp -0x3906 012237 branch iicd_write_eep_data -: 012241 lightc_init: -0x3907 012245 fetcht 1 ,mem_lightc_led_gpio -0x3908 012246 call gpio_out_inactive -0x3909 012247 rtn -: 012250 lightc_dispatch: -0x390a 012253 fetcht 1 ,mem_lightc_led_gpio -0x390b 012254 call gpio_out_active -0x390c 012257 fetcht 1 ,mem_lightc_led_gpio -0x390d 012258 call gpio_out_inactive -0x390e 012261 call lightc_start_adv -0x390f 012263 fetch 1 ,mem_adv_time -0x3910 012264 nrtn blank -0x3911 012266 call lpm_write_gpio_wakeup -0x3912 012267 hfetch 4 ,core_lpm_ctrl -0x3913 012268 set0 15 ,pdata -0x3914 012269 hstore 4 ,core_lpm_reg -0x3915 012270 call lpm_write_ctrl -0x3916 012271 arg param_hibernate_clks ,temp -0x3917 012272 branch lpm_sleep -: 012274 lightc_adv: -0x3918 012275 fetch 1 ,mem_adv_time -0x3919 012276 branch le_adv_loop_tx ,blank -0x391a 012277 increase -1 ,pdata -0x391b 012278 store 1 ,mem_adv_time -0x391c 012279 branch le_adv_loop_tx -: 012281 lightc_start_adv: -0x391d 012282 mul32 pdata ,20 ,pdata -0x391e 012283 arg mem_cmd0_string ,contr -0x391f 012284 iadd contr ,contr -0x3920 012285 ifetch 1 ,contr -0x3921 012286 rtn blank -0x3922 012287 copy pdata ,rega -0x3923 012288 copy rega ,loopcnt -0x3924 012289 arg mem_le_adv_data + 2 ,contw -0x3925 012290 call memcpy -0x3926 012291 copy rega ,pdata -0x3927 012292 increase 2 ,pdata -0x3928 012293 store 1 ,mem_le_adv_data_len -0x3929 012294 rtn -: 012301 module_init: -0x392a 012303 rtn wake -0x392b 012304 call le_modified_name -0x392c 012305 call adc_init_data -0x392d 012306 setarg module_process_idle -0x392e 012307 store 2 ,mem_cb_idle_process -0x392f 012308 setarg module_bt_conn_process -0x3930 012309 store 2 ,mem_cb_bt_process -0x3931 012310 setarg module_process_bb_event -0x3932 012311 store 2 ,mem_cb_bb_event_process -0x3933 012312 setarg module_le_conn_process -0x3934 012313 store 2 ,mem_cb_le_process -0x3935 012314 setarg module_lpm_lock -0x3936 012315 store 2 ,mem_cb_check_wakelock -0x3937 012316 setarg module_hci_cmd_transmit_le_notify -0x3938 012317 store 2 ,mem_cb_ble_transmit -0x3939 012318 setarg module_hci_event_receive_spp_data -0x393a 012319 store 2 ,mem_cb_receive_spp_data -0x393b 012320 setarg module_le_receive_data -0x393c 012321 store 2 ,mem_cb_att_write -0x393d 012322 setarg module_bb_event_timer -0x393e 012323 store 2 ,mem_cb_event_timer -0x393f 012325 call module_spp_clear_last_transmite_clock -0x3940 012326 bpatch patch1b_5 ,mem_patch1b -0x3941 012327 call module_lpm_uart_init -0x3942 012328 call module_gpio_init -0x3943 012329 call check_module_disabled -0x3944 012330 branch module_hci_event_enter_standby_mode -: 012333 module_lpm_uart_init: -0x3945 012334 fetch 4 ,mem_module_uart_rx_buffer -0x3946 012335 hstore 4 ,core_uart_rsaddr -0x3947 012337 fetch 4 ,mem_module_uart_tx_buffer -0x3948 012338 hstore 4 ,core_uart_tsaddr -0x3949 012340 hfetch 1 ,core_gpio_sel1 -0x394a 012341 or_into 0x04 ,pdata -0x394b 012342 and_into 0xfc ,pdata -0x394c 012343 hstore 1 ,core_gpio_sel1 -0x394d 012344 jam 0x00 ,core_uart_ctrl -0x394e 012346 fetch 2 ,mem_module_uart_rx_buffer -0x394f 012347 hstore 2 ,core_uart_rrptr -0x3950 012348 fetch 2 ,mem_module_uart_tx_buffer -0x3951 012349 hstore 2 ,core_uart_twptr -0x3952 012350 hstore 2 ,core_uart_trptrp -0x3953 012352 hfetch 4 ,core_gpio_pu0 -0x3954 012353 set1 7 ,pdata -0x3955 012354 hstore 4 ,core_gpio_pu0 -0x3956 012356 hfetch 2 ,core_clkoff -0x3957 012357 set0 clock_off_uart ,pdata -0x3958 012358 hstore 2 ,core_clkoff -0x3959 012359 call uart_set_baud_by_mem -0x395a 012360 jam uartclk_crystal ,core_uart_clksel -0x395b 012361 jam uart_ctrl_h4 ,core_uart_ctrl -0x395c 012363 fetch 1 ,mem_module_flag -0x395d 012364 isolate1 module_flag_uart_flow_control ,pdata -0x395e 012365 hfetcht 1 ,core_uart_ctrl -0x395f 012366 setflag true ,4 ,temp -0x3960 012367 hstoret 1 ,core_uart_ctrl -0x3961 012368 rtn -: 012372 module_lpm_init: -0x3962 012373 call module_spp_clear_last_transmite_clock -0x3963 012374 branch module_lpm_uart_init -: 012377 module_gpio_init: -0x3964 012382 fetcht 1 ,mem_module_connect_state_gpio -0x3965 012383 call gpio_config_output -0x3966 012384 call module_set_conn_pin_low -0x3967 012386 fetcht 1 ,mem_module_wake_up_gpio -0x3968 012387 branch gpio_config_input -: 012389 module_lpm_lock: -0x3969 012390 fetcht 1 ,mem_module_wake_up_gpio -0x396a 012391 call gpio_get_bit -0x396b 012392 nbranch app_put_lpm_wake_lock ,true -0x396c 012393 branch app_get_lpm_wake_lock -: 012396 module_le_conn_process: -0x396d 012397 rtn -: 012399 module_bt_conn_process: -0x396e 012400 call module_spp_enter_sniff -0x396f 012401 branch module_control_air_flow -: 012403 module_spp_enter_sniff: -0x3970 012404 fetch 1 ,mem_ui_state_map -0x3971 012405 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock -0x3972 012406 bpatch patch1b_6 ,mem_patch1b -0x3973 012407 setarg 0x3eff -0x3974 012408 fetcht 4 ,mem_last_transmite_clock -0x3975 012409 iadd temp ,temp -0x3976 012410 copy clkn_bt ,pdata -0x3977 012411 isub temp ,null -0x3978 012412 nrtn positive -0x3979 012413 fetch 2 ,mem_ui_state_map -0x397a 012414 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock -0x397b 012415 fetch 1 ,mem_module_flag -0x397c 012416 rtnbit1 moudle_task_sniff -0x397d 012417 call module_set_sniff_task_flag -0x397e 012418 call app_bt_enter_sniff -: 012419 module_spp_clear_last_transmite_clock: -0x397f 012420 copy clkn_bt ,pdata -0x3980 012421 store 4 ,mem_last_transmite_clock -0x3981 012422 rtn -: 012425 module_process_idle: -0x3982 012426 call module_control_air_flow -0x3983 012427 call l2cap_malloc_is_fifo_full -0x3984 012428 nrtn blank -0x3985 012429 branch module_process -: 012432 module_process_bb_event: -0x3986 012433 copy regc ,pdata -0x3987 012434 beq bt_evt_bb_connected ,module_process_bb_conn -0x3988 012435 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned -0x3989 012436 beq bt_evt_reconn_failed ,module_process_reconn_fail -0x398a 012437 beq bt_evt_setup_complete ,module_process_setup_complete -0x398b 012438 beq bt_evt_spp_connected ,module_process_spp_connected -0x398c 012439 beq bt_evt_spp_disconnected ,module_process_spp_disconnected -0x398d 012440 beq bt_evt_pincode_req ,module_process_evt_pincode_req -0x398e 012441 beq bt_evt_enter_sniff ,module_process_enter_sniff -0x398f 012442 beq bt_evt_exit_sniff ,module_process_exit_sniff -0x3990 012443 beq bt_evt_reconn_page_timeout ,module_process_page_time_out -0x3991 012444 beq bt_evt_le_connected ,module_process_le_conn -0x3992 012445 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn -0x3993 012446 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept -0x3994 012447 beq bt_evt_unsniff_accept ,module_process_unsniff_accept -0x3995 012448 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept -0x3996 012449 beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail -0x3997 012450 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success -0x3998 012451 beq bt_evt_le_start_enc ,module_hci_event_start_enc -0x3999 012452 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc -0x399a 012453 beq bt_evt_le_tk_generate ,module_hci_event_le_tk -0x399b 012454 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate -0x399c 012455 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode -0x399d 012456 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail -0x399e 012457 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success -0x399f 012458 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey -0x39a0 012459 beq bt_evt_store_nvram ,module_hci_event_store_device -0x39a1 012460 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost -0x39a2 012461 rtn -: 012464 module_process_bb_event_disconned: -0x39a3 012465 call module_spp_clear_last_transmite_clock -0x39a4 012466 fetch 1 ,mem_flag_pairing_state -0x39a5 012467 ncall module_hci_event_bt_pairing_fail ,blank -0x39a6 012468 call module_disconn_start -0x39a7 012469 fetch 2 ,mem_ui_state_map -0x39a8 012470 rtnbit0 ui_state_bt_spp_conn -0x39a9 012471 branch module_spp_disconnected -: 012473 module_process_spp_connected: -0x39aa 012474 fetch 2 ,mem_ui_state_map -0x39ab 012475 set1 ui_state_bt_spp_conn ,pdata -0x39ac 012476 store 2 ,mem_ui_state_map -0x39ad 012477 fetch 1 ,mem_module_spp_lpm_mult -0x39ae 012478 store 1 ,mem_lpm_mult -0x39af 012479 call module_set_conn_pin_low -0x39b0 012480 branch module_hci_event_spp_connect -: 012482 module_process_spp_disconnected: -: 012484 module_spp_disconnected: -0x39b1 012485 fetch 2 ,mem_ui_state_map -0x39b2 012486 rtnbit0 ui_state_bt_spp_conn -0x39b3 012487 set0 ui_state_bt_spp_conn ,pdata -0x39b4 012488 store 2 ,mem_ui_state_map -0x39b5 012489 branch module_hci_event_spp_disconnect -: 012492 module_process_enter_sniff: -: 012494 module_sniff_param_check: -0x39b6 012495 call module_spp_clear_last_transmite_clock -0x39b7 012498 fetch 2 ,mem_context + coffset_tsniff -0x39b8 012499 rshift pdata ,pdata -0x39b9 012500 fetcht 2 ,mem_sniff_param_interval -0x39ba 012501 isub temp ,null -0x39bb 012502 nbranch module_sniff_param_check_unsniff ,zero -0x39bc 012503 branch app_lpm_mult_enable -: 012504 module_sniff_param_check_unsniff: -0x39bd 012505 fetch 1 ,mem_module_flag -0x39be 012506 rtnbit1 moudle_task_unsniff -0x39bf 012507 hfetch 2 ,core_uart_rxitems -0x39c0 012508 ncall module_set_unsniff_task_flag ,blank -0x39c1 012509 branch app_bt_sniff_exit -: 012511 module_process_exit_sniff: -0x39c2 012512 call module_clear_sniff_task_flag -0x39c3 012513 branch app_lpm_mult_disable -: 012515 module_process_setup_complete: -0x39c4 012516 call module_spp_clear_last_transmite_clock -0x39c5 012517 branch module_conn_start -: 012519 module_process_bb_even_le_disconn: -0x39c6 012520 call le_clr_config_more_data -0x39c7 012521 call module_disconn_start -0x39c8 012522 branch module_hci_event_le_disconnect -: 012524 module_process_evt_pincode_req: -0x39c9 012525 branch app_bt_set_pincode -: 012528 module_process_sniff_not_accept: -0x39ca 012529 branch module_clear_sniff_task_flag -: 012532 module_process_unsniff_accept: -0x39cb 012533 fetch 1 ,mem_module_flag -0x39cc 012534 bbit0 moudle_task_unsniff ,app_bt_enter_sniff -0x39cd 012535 branch module_clear_unsniff_task_flag -: 012538 module_process_unsniff_not_accept: -0x39ce 012539 branch module_clear_unsniff_task_flag -: 012542 module_process_le_conn: -0x39cf 012543 call le_send_att_exchange_mtu_requset -0x39d0 012544 call module_conn_start -0x39d1 012545 fetch 1 ,mem_module_le_lpm_mult -0x39d2 012546 store 1 ,mem_lpm_mult -0x39d3 012547 branch module_hci_event_le_connect -: 012550 module_process_bb_conn: -0x39d4 012551 jam 0 ,mem_flag_mode_ssp_pin -0x39d5 012552 call module_clear_sniff_task_flag -0x39d6 012553 branch module_clear_unsniff_task_flag -: 012555 module_process_page_time_out: -: 012556 module_process_reconn_fail: -: 012557 module_disconn_start: -0x39d7 012558 call module_start_adv_discovery_by_command -0x39d8 012559 branch module_set_conn_pin_high -: 012562 module_process_ble_ltk_lost: -0x39d9 012563 call le_send_reject_ind -0x39da 012564 branch le_send_smp_security_request -: 012567 module_set_conn_pin_high: -0x39db 012568 fetcht 1 ,mem_module_connect_state_gpio -0x39dc 012569 branch gpio_out_active -: 012571 module_conn_start: -0x39dd 012572 call module_stop_adv_discovery -0x39de 012573 branch module_set_conn_pin_low -: 012575 module_stop_adv_discovery: -0x39df 012576 fetch 1 ,mem_module_state -0x39e0 012577 isolate1 moudle_state_bt_bit ,pdata -0x39e1 012578 call app_bt_stop_discovery ,true -0x39e2 012579 fetch 1 ,mem_module_state -0x39e3 012580 isolate1 moudle_state_ble_bit ,pdata -0x39e4 012581 call app_ble_stop_adv ,true -0x39e5 012582 rtn -: 012583 module_set_conn_pin_low: -0x39e6 012584 fetcht 1 ,mem_module_connect_state_gpio -0x39e7 012585 branch gpio_out_inactive -: 012587 module_process_with_credit: -0x39e8 012588 fetch 1 ,mem_credit_flag -0x39e9 012589 rtneq credit_disable -0x39ea 012590 branch rfcomm_send_uih_without_payload -: 012592 module_process: -0x39eb 012593 hfetch 1 ,core_uart_status -0x39ec 012594 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit -0x39ed 012595 call uartd_prepare_rx -0x39ee 012596 ifetch 1 ,contru -0x39ef 012597 bne 0x01 ,module_hci_in_excp -0x39f0 012598 hfetch 2 ,core_uart_rxitems -0x39f1 012599 sub pdata ,2 ,null -0x39f2 012600 rtn positive -0x39f3 012601 ifetch 1 ,contru -0x39f4 012602 store 1 ,mem_module_uart_opcode -0x39f5 012603 ifetcht 1 ,contru -0x39f6 012604 copy contru ,rega -0x39f7 012605 storet 1 ,mem_module_uart_len -0x39f8 012606 add temp ,3 ,temp -0x39f9 012607 hfetch 2 ,core_uart_rxitems -0x39fa 012608 isub temp ,temp -0x39fb 012609 nrtn positive -0x39fc 012610 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x39fd 012611 call module_hci_cmd_control -0x39fe 012612 fetch 1 ,mem_module_temp_nl_discard_packet -0x39ff 012613 rtneq hci_not_discard_packet -0x3a00 012614 branch module_hci_dicard_packet -: 012616 module_hci_in_excp: -0x3a01 012617 call delay_10ms -0x3a02 012618 call module_hci_event_invalid_packet -0x3a03 012619 branch module_hci_release_except -: 012622 module_hci_release_except: -0x3a04 012623 bpatch patch1b_7 ,mem_patch1b -0x3a05 012624 hfetch 2 ,core_uart_rxitems -0x3a06 012625 rtn blank -0x3a07 012626 call uartd_prepare_rx -0x3a08 012627 ifetch 1 ,contru -0x3a09 012628 sub pdata ,0x01 ,null -0x3a0a 012629 ncall module_hci_dicard_bytes ,zero -0x3a0b 012630 nbranch module_hci_release_except ,zero -0x3a0c 012631 ifetch 1 ,contru -0x3a0d 012632 rtneq hci_cmd_spp_data_req -0x3a0e 012633 rtneq hci_cmd_set_credit_given -0x3a0f 012634 increase -1 ,contru -0x3a10 012635 call module_hci_dicard_bytes -0x3a11 012636 branch module_hci_release_except -: 012638 module_hci_dicard_packet: -0x3a12 012639 call uartd_prepare_rx -0x3a13 012640 increase 2 ,contru -0x3a14 012641 ifetch 1 ,contru -0x3a15 012642 iadd contru ,contru -: 012643 module_hci_dicard_bytes: -0x3a16 012644 branch uartd_rxdone -: 012647 module_hci_cmd_control: -0x3a17 012648 bpatch patch1c_0 ,mem_patch1c -0x3a18 012649 fetch 1 ,mem_module_uart_opcode -0x3a19 012650 beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr -0x3a1a 012651 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr -0x3a1b 012652 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility -0x3a1c 012653 beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name -0x3a1d 012654 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name -0x3a1e 012655 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data -0x3a1f 012656 beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data -0x3a20 012657 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status -0x3a21 012658 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode -0x3a22 012659 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode -0x3a23 012660 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode -0x3a24 012661 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud -0x3a25 012662 beq hci_cmd_version_req ,module_hci_cmd_version_request -0x3a26 012663 beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect -0x3a27 012664 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect -0x3a28 012665 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram -0x3a29 012666 beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey -0x3a2a 012667 beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given -0x3a2b 012668 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv -0x3a2c 012669 beq hci_cmd_power_req ,module_hci_cmd_power_request -0x3a2d 012670 beq hci_cmd_power_set ,module_hci_cmd_power_set -0x3a2e 012671 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry -0x3a2f 012672 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio -0x3a30 012673 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio -0x3a31 012674 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode -0x3a32 012675 beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data -0x3a33 012676 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data -0x3a34 012677 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req -0x3a35 012678 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter -0x3a36 012679 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing -0x3a37 012680 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio -0x3a38 012681 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power -0x3a39 012682 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey -0x3a3a 012683 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag -0x3a3b 012684 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip -0x3a3c 012685 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey -0x3a3d 012686 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm -0x3a3e 012687 branch module_hci_event_receive_invalid_cmd -: 012692 module_hci_cmd_set_bt_addr: -0x3a3f 012693 fetch 1 ,mem_module_uart_len -0x3a40 012694 bne 6 ,module_hci_event_receive_invalid_cmd -0x3a41 012695 ifetch 6 ,contru -0x3a42 012696 store 6 ,mem_lap -0x3a43 012697 branch module_hci_event_receive_valid_cmd -: 012700 module_hci_cmd_set_le_addr: -0x3a44 012701 fetch 1 ,mem_module_uart_len -0x3a45 012702 bne 6 ,module_hci_event_receive_invalid_cmd -0x3a46 012703 ifetch 6 ,contru -0x3a47 012704 store 6 ,mem_le_lap -0x3a48 012705 branch module_hci_event_receive_valid_cmd -: 012709 module_hci_cmd_set_visibility: -0x3a49 012710 fetch 1 ,mem_module_uart_len -0x3a4a 012711 bne 1 ,module_hci_event_receive_invalid_cmd -0x3a4b 012712 copy rega ,contru -0x3a4c 012713 call module_hci_event_receive_valid_cmd -0x3a4d 012714 ifetcht 1 ,contru -0x3a4e 012715 storet 1 ,mem_module_bluetooth_stauts_by_command -0x3a4f 012716 fetch 2 ,mem_ui_state_map -0x3a50 012717 rtnbit1 ui_state_ble_connected -0x3a51 012718 rtnbit1 ui_state_bt_connected -: 012719 module_start_adv_discovery_by_command: -0x3a52 012720 fetch 1 ,mem_module_state -0x3a53 012721 isolate1 moudle_state_bt_bit ,pdata -0x3a54 012722 nbranch moudle_start_adv_by_command ,true -0x3a55 012723 fetcht 1 ,mem_module_bluetooth_stauts_by_command -0x3a56 012724 and temp ,0x03 ,pdata -0x3a57 012725 store 1 ,mem_scan_mode -: 012726 moudle_start_adv_by_command: -0x3a58 012727 fetch 1 ,mem_module_state -0x3a59 012728 isolate1 moudle_state_ble_bit ,pdata -0x3a5a 012729 nrtn true -0x3a5b 012730 fetcht 1 ,mem_module_bluetooth_stauts_by_command -0x3a5c 012731 isolate1 2 ,temp -0x3a5d 012732 branch app_ble_start_adv ,true -0x3a5e 012733 branch app_ble_stop_adv -: 012737 module_hci_cmd_set_bt_name: -0x3a5f 012738 fetch 1 ,mem_module_uart_len -0x3a60 012739 sub pdata ,67 ,null -0x3a61 012740 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3a62 012741 store 1 ,mem_local_name_length -0x3a63 012742 arg 8 ,loopcnt -0x3a64 012743 call memset0 -0x3a65 012744 fetch 1 ,mem_module_uart_len -0x3a66 012745 copy pdata ,loopcnt -0x3a67 012746 copy rega ,contru -0x3a68 012747 arg mem_local_name ,contw -0x3a69 012748 call uart_copy_rx_bytes_fast -0x3a6a 012749 branch module_hci_event_receive_valid_cmd -: 012753 module_hci_cmd_set_le_name: -0x3a6b 012754 fetch 1 ,mem_module_uart_len -0x3a6c 012755 sub pdata ,29 ,null -0x3a6d 012756 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3a6e 012757 store 1 ,mem_le_name_len -0x3a6f 012758 copy pdata ,loopcnt -0x3a70 012759 copy rega ,contru -0x3a71 012760 arg mem_le_name ,contw -0x3a72 012761 call uart_copy_rx_bytes_fast -0x3a73 012762 call le_modified_name -0x3a74 012763 branch module_hci_event_receive_valid_cmd -: 012767 module_hci_cmd_receive_spp_data: -0x3a75 012768 fetch 1 ,mem_ui_state_map -0x3a76 012769 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd -0x3a77 012770 call app_check_sniff -0x3a78 012771 branch module_hci_cmd_spp_exit_sniff ,true -0x3a79 012772 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3a7a 012774 call module_spp_clear_last_transmite_clock -0x3a7b 012775 fetch 1 ,mem_remote_credits -0x3a7c 012776 rtn blank -0x3a7d 012777 fetch 2 ,mem_nl_rx_len_all -0x3a7e 012778 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all -0x3a7f 012779 fetch 1 ,mem_module_uart_len -0x3a80 012780 store 2 ,mem_nl_rx_len_all -0x3a81 012782 copy rega ,contru -0x3a82 012785 copy contru ,pdata -0x3a83 012786 store 2 ,mem_nl_rx_data_src -: 012787 module_hci_cmd_pass_init_ng_rx_len_all: -0x3a84 012788 call module_hci_cmd_get_current_packet_len_and_remain_len -0x3a85 012789 branch spp_tx_rfcomm_packet -: 012791 module_hci_cmd_spp_exit_sniff: -0x3a86 012792 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3a87 012793 branch module_exit_sniff -: 012795 module_hci_cmd_get_current_packet_len_and_remain_len: -0x3a88 012796 call module_hci_cmd_get_current_patcket_len -0x3a89 012797 fetch 2 ,mem_nl_rx_len_all -0x3a8a 012798 fetcht 2 ,mem_current_packet_length -0x3a8b 012799 isub temp ,pdata -0x3a8c 012800 store 2 ,mem_nl_rx_len_all -0x3a8d 012801 rtn -: 012803 module_hci_cmd_get_current_patcket_len: -0x3a8e 012804 fetch 2 ,mem_nl_rx_len_all -0x3a8f 012805 arg dm_refcom_buff_len ,temp -0x3a90 012806 call not_greater_than -0x3a91 012807 fetcht 2 ,mem_rfcomm_max_frame_size -0x3a92 012808 call not_greater_than -0x3a93 012809 fetcht 2 ,mem_pn_max_frame_size -0x3a94 012810 call not_greater_than -0x3a95 012811 store 2 ,mem_current_packet_length -0x3a96 012812 rtn -: 012814 module_hci_command_tx_spp_tx_complete: -0x3a97 012815 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x3a98 012816 jam hci_cmd_spp_data_req ,mem_module_uart_opcode -0x3a99 012817 branch module_hci_event_receive_valid_cmd -: 012821 module_hci_cmd_receive_le_data: -0x3a9a 012822 fetch 2 ,mem_ui_state_map -0x3a9b 012823 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd -0x3a9c 012824 call module_check_ble_encrypt_state -0x3a9d 012825 branch module_hci_event_receive_invalid_cmd ,user -0x3a9e 012826 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3a9f 012827 fetch 1 ,mem_module_flag -0x3aa0 012828 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish -0x3aa1 012829 fetch 1 ,mem_module_hci_notify_len -0x3aa2 012830 nrtn blank -0x3aa3 012831 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x3aa4 012832 ifetch 2 ,contru -0x3aa5 012833 store 2 ,mem_module_hci_notify_handle -0x3aa6 012834 copy contru ,pdata -0x3aa7 012835 store 2 ,mem_module_hci_nofiy_addr -0x3aa8 012836 fetch 1 ,mem_module_uart_len -0x3aa9 012837 pincrease -2 -0x3aaa 012838 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3aab 012839 branch module_hci_event_receive_invalid_cmd ,zero -0x3aac 012840 store 1 ,mem_module_hci_notify_len -0x3aad 012841 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x3aae 012842 call le_set_config_more_data -0x3aaf 012843 call module_hci_cmd_transmit_le_notify -0x3ab0 012844 call module_hci_cmd_transmit_le_notify -0x3ab1 012845 call module_hci_cmd_transmit_le_notify -0x3ab2 012846 fetch 1 ,mem_module_flag -0x3ab3 012847 rtnbit0 module_flag_ble_data_finish -: 012848 module_hci_cmd_receive_le_data_finish: -0x3ab4 012849 jam hci_discard_packet ,mem_module_temp_nl_discard_packet -0x3ab5 012850 call module_clear_le_tx_data_flag -0x3ab6 012851 branch module_hci_event_receive_valid_cmd -: 012853 module_hci_cmd_transmit_le_notify: -0x3ab7 012854 fetch 1 ,mem_module_hci_notify_len -0x3ab8 012855 rtn blank -0x3ab9 012856 call le_fifo_check_nearly_full -0x3aba 012857 nrtn blank -0x3abb 012858 call module_get_le_remote_mtu -0x3abc 012859 bpatch patch1c_1 ,mem_patch1c -0x3abd 012860 add temp ,-3 ,pdata -0x3abe 012861 fetcht 1 ,mem_module_hci_notify_len -0x3abf 012862 call not_greater_than -0x3ac0 012863 copy pdata ,rega -0x3ac1 012864 copy temp ,pdata -0x3ac2 012865 isub rega ,pdata -0x3ac3 012866 store 1 ,mem_module_hci_notify_len -0x3ac4 012867 fetcht 2 ,mem_module_hci_notify_handle -0x3ac5 012868 call le_att_malloc_tx_notify -0x3ac6 012869 fetch 2 ,mem_module_hci_nofiy_addr -0x3ac7 012870 copy pdata ,contru -0x3ac8 012871 copy rega ,loopcnt -0x3ac9 012872 call uart_copy_rx_bytes_fast -0x3aca 012873 copy contru ,pdata -0x3acb 012874 store 2 ,mem_module_hci_nofiy_addr -0x3acc 012875 fetch 1 ,mem_module_hci_notify_len -0x3acd 012876 nrtn blank -0x3ace 012877 branch module_set_le_tx_data_flag -: 012881 module_get_le_remote_mtu: -0x3acf 012882 arg 0x17 ,temp -0x3ad0 012883 fetch 1 ,mem_module_flag -0x3ad1 012884 rtnbit1 module_flag_ble_send_mtu23 -0x3ad2 012885 fetcht 2 ,mem_le_remote_mtu -0x3ad3 012886 rtn -: 012888 module_check_ble_encrypt_state: -0x3ad4 012889 fetch 1 ,mem_module_flag -0x3ad5 012890 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state -0x3ad6 012891 branch disable_user -: 012895 module_hci_cmd_inquire_status: -0x3ad7 012896 branch module_hci_event_status_res -: 012900 module_hci_cmd_set_pairing_mode: -0x3ad8 012901 copy rega ,contru -0x3ad9 012902 ifetch 1 ,contru -0x3ada 012903 beq pairing_pincode ,module_hci_pairing_pincode_mode -0x3adb 012904 beq pairing_justwork ,module_hci_pairing_just_work_mode -0x3adc 012905 beq pairing_passkey ,module_hci_pairing_passkey -0x3add 012906 beq pairing_confirm ,module_hci_pairing_numeric_comparison -0x3ade 012907 branch module_hci_event_receive_invalid_cmd -: 012908 module_hci_pairing_pincode_mode: -0x3adf 012909 call ssp_disable -0x3ae0 012910 jam 0 ,mem_ssp_enable -0x3ae1 012911 branch module_hci_event_receive_valid_cmd -: 012912 module_hci_pairing_just_work_mode: -0x3ae2 012913 setarg ssp_mode_just_work_io_cap_data -: 012914 module_hci_sspairing_mode: -0x3ae3 012915 store 3 ,mem_sp_iocap_local -0x3ae4 012916 store 1 ,mem_ssp_mode_flag -0x3ae5 012917 call ssp_enable -0x3ae6 012918 jam 1 ,mem_ssp_enable -0x3ae7 012919 branch module_hci_event_receive_valid_cmd -: 012920 module_hci_pairing_passkey: -0x3ae8 012921 setarg ssp_mode_passkey_io_cap_data -0x3ae9 012922 branch module_hci_sspairing_mode -: 012924 module_hci_pairing_numeric_comparison: -0x3aea 012925 setarg ssp_mode_ssp_pin_io_cap_data -0x3aeb 012926 branch module_hci_sspairing_mode -: 012929 module_hci_cmd_set_pincode: -0x3aec 012930 fetch 1 ,mem_module_uart_len -0x3aed 012931 sub pdata ,16 ,null -0x3aee 012932 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3aef 012933 store 1 ,mem_pin_length -0x3af0 012934 copy pdata ,loopcnt -0x3af1 012935 arg mem_pin ,contw -0x3af2 012936 call uart_copy_rx_bytes -0x3af3 012937 branch module_hci_event_receive_valid_cmd -: 012941 module_hci_cmd_set_uart_control_mode: -0x3af4 012942 copy rega ,contru -0x3af5 012943 ifetch 1 ,contru -0x3af6 012944 hfetcht 1 ,core_uart_ctrl -0x3af7 012945 nsetflag blank ,4 ,temp -0x3af8 012946 hstoret 1 ,core_uart_ctrl -0x3af9 012947 branch module_hci_event_receive_valid_cmd -: 012951 module_hci_cmd_set_uart_baud: -0x3afa 012952 fetch 1 ,mem_module_uart_len -0x3afb 012953 copy pdata ,loopcnt -0x3afc 012954 copy rega ,contru -0x3afd 012955 call string2dec_from_uart -0x3afe 012956 setarg uart_clk_24 -0x3aff 012957 idiv temp -0x3b00 012958 call wait_div_end -0x3b01 012959 quotient pdata -: 012960 module_hci_cmd_set_uart_baud_ok: -0x3b02 012961 store uart_baud_len ,mem_baud -0x3b03 012962 call module_hci_event_receive_valid_cmd -0x3b04 012963 call wait_uarttx -0x3b05 012964 branch uart_set_baud_by_mem -: 012968 module_hci_cmd_version_request: -0x3b06 012969 arg 2 ,rega -0x3b07 012970 arg mem_soft_version_num ,regb -0x3b08 012971 arg 0 ,temp -0x3b09 012972 branch module_hci_event_set_cmd -: 012973 module_hci_event_set_cmd_send_response: -0x3b0a 012974 store 2 ,mem_event_cmd_response_content -0x3b0b 012975 arg mem_event_cmd_response_content ,regb -0x3b0c 012976 arg 0 ,temp -0x3b0d 012977 branch module_hci_event_set_cmd -: 012981 module_hci_cmd_bt_disconnect: -0x3b0e 012982 fetch 2 ,mem_ui_state_map -0x3b0f 012983 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd -: 012984 module_hci_cmd_bt_disconnect_doing: -0x3b10 012985 call module_hci_event_receive_valid_cmd -0x3b11 012986 branch app_bt_disconnect -: 012990 module_hci_cmd_ble_disconnect: -0x3b12 012991 fetch 2 ,mem_ui_state_map -0x3b13 012992 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd -: 012993 module_hci_cmd_ble_disconnect_doing: -0x3b14 012994 call module_hci_event_receive_valid_cmd -0x3b15 012995 branch app_ble_disconnect -: 013001 module_hci_cmd_set_nvram: -0x3b16 013002 fetch 1 ,mem_module_uart_len -0x3b17 013003 copy pdata ,loopcnt -0x3b18 013004 copy rega ,contru -0x3b19 013005 fetch 2 ,mem_nv_data_ptr -0x3b1a 013006 icopy contw -0x3b1b 013007 call uart_copy_rx_bytes_fast -0x3b1c 013008 branch module_hci_event_receive_valid_cmd -: 013012 module_hci_cmd_confirm_gkey: -0x3b1d 013013 fetch 1 ,mem_ui_state_map -0x3b1e 013014 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd -0x3b1f 013015 ifetch 1 ,contru -0x3b20 013016 fetcht 1 ,mem_flag_mode_ssp_pin -0x3b21 013017 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp -0x3b22 013018 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp -0x3b23 013019 storet 1 ,mem_flag_mode_ssp_pin -0x3b24 013021 call module_hci_event_receive_valid_cmd -0x3b25 013023 fetch 1 ,mem_flag_mode_ssp_pin -0x3b26 013024 bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 -0x3b27 013025 rtn -: 013027 dhkey_not_accept: -0x3b28 013028 jam 0 ,mem_flag_mode_ssp_pin -0x3b29 013029 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp -0x3b2a 013030 branch ui_ipc_send_cmd -: 013033 module_hci_cmd_spp_number_comparison_result_is1: -0x3b2b 013034 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed -0x3b2c 013035 branch dhkey_not_accept -: 013039 module_hci_cmd_set_credit_given: -0x3b2d 013040 fetch 1 ,mem_ui_state_map -0x3b2e 013041 rtnbit0 ui_state_bt_spp_conn -0x3b2f 013042 fetch 1 ,mem_credit_flag -0x3b30 013043 rtneq credit_disable -0x3b31 013044 ifetch 1 ,contru -0x3b32 013045 fetcht 1 ,mem_credit_given -0x3b33 013046 iadd temp ,temp -0x3b34 013047 storet 1 ,mem_credit_given -0x3b35 013048 rtn -: 013052 module_hci_cmd_auto_adv: -0x3b36 013053 arg 0x40 ,loopcnt -0x3b37 013054 arg mem_le_adv_data_len ,contw -0x3b38 013055 call clear_mem -0x3b39 013056 setarg 0 -0x3b3a 013057 store 1 ,mem_regb -0x3b3b 013058 copy rega ,contru -: 013059 module_hci_cmd_auto_adv_loop: -0x3b3c 013060 copy contru ,pdata -0x3b3d 013061 store 2 ,mem_regc -0x3b3e 013062 call module_hci_cmd_auto_adv_adv_analys -0x3b3f 013064 fetch 1 ,mem_regb -0x3b40 013065 fetcht 1 ,mem_temp -0x3b41 013066 increase 1 ,temp -0x3b42 013067 iadd temp ,pdata -0x3b43 013068 store 1 ,mem_regb -0x3b44 013070 sub pdata ,31 ,null -0x3b45 013071 nbranch module_hci_cmd_auto_adv_store_scan ,positive -: 013072 module_hci_cmd_auto_adv_store_adv: -0x3b46 013073 fetcht 1 ,mem_le_adv_data_len -0x3b47 013074 setarg mem_le_adv_data -0x3b48 013075 iadd temp ,pdata -0x3b49 013076 store 2 ,mem_contw -0x3b4a 013077 fetcht 1 ,mem_temp -0x3b4b 013078 increase 1 ,temp -0x3b4c 013079 fetch 1 ,mem_le_adv_data_len -0x3b4d 013080 iadd temp ,pdata -0x3b4e 013081 store 1 ,mem_le_adv_data_len -0x3b4f 013082 branch module_hci_cmd_auto_adv_store_common -: 013083 module_hci_cmd_auto_adv_store_scan: -0x3b50 013084 fetcht 1 ,mem_le_scan_data_len -0x3b51 013085 setarg mem_le_scan_data -0x3b52 013086 iadd temp ,pdata -0x3b53 013087 store 2 ,mem_contw -0x3b54 013088 fetcht 1 ,mem_temp -0x3b55 013089 increase 1 ,temp -0x3b56 013090 fetch 1 ,mem_le_scan_data_len -0x3b57 013091 iadd temp ,pdata -0x3b58 013092 store 1 ,mem_le_scan_data_len -: 013093 module_hci_cmd_auto_adv_store_common: -0x3b59 013094 fetch 2 ,mem_contw -0x3b5a 013095 copy pdata ,contw -0x3b5b 013096 fetch 2 ,mem_regc -0x3b5c 013097 copy pdata ,contru -0x3b5d 013099 copy temp ,loopcnt -0x3b5e 013100 call uart_copy_rx_bytes_fast -0x3b5f 013102 fetch 1 ,mem_module_uart_len -0x3b60 013103 fetcht 1 ,mem_regb -0x3b61 013104 isub temp ,null -0x3b62 013105 nbranch module_hci_cmd_auto_adv_loop ,zero -0x3b63 013106 branch module_hci_event_receive_valid_cmd -: 013109 module_hci_cmd_auto_adv_adv_analys: -0x3b64 013110 ifetch 1 ,contru -0x3b65 013111 store 1 ,mem_temp -0x3b66 013112 ifetch 1 ,contru -0x3b67 013113 store 1 ,mem_rega -0x3b68 013114 rtn -: 013118 module_hci_cmd_power_request: -0x3b69 013119 arg 0 ,temp -0x3b6a 013120 arg 2 ,rega -0x3b6b 013121 fetch 2 ,mem_module_vdd_quotient -0x3b6c 013122 store 2 ,mem_event_cmd_response_content -0x3b6d 013123 arg mem_event_cmd_response_content ,regb -0x3b6e 013124 branch module_hci_event_set_cmd -: 013128 module_hci_cmd_power_set: -0x3b6f 013129 fetch 1 ,mem_module_uart_len -0x3b70 013130 bne 1 ,module_hci_event_receive_invalid_cmd -0x3b71 013131 ifetch 1 ,contru -0x3b72 013132 store 1 ,mem_module_read_vdd_flag -0x3b73 013133 setarg 0x00 -0x3b74 013134 store 2 ,mem_module_vdd_quotient -0x3b75 013135 branch module_hci_event_receive_valid_cmd -: 013139 module_hci_cmd_passkey_entry: -0x3b76 013140 ifetch 4 ,contru -0x3b77 013141 store 4 ,mem_pin -0x3b78 013142 jam 4 ,mem_pin_length -0x3b79 013143 jam 0 ,mem_authentication_passkey_times -0x3b7a 013144 call module_hci_event_receive_valid_cmd -0x3b7b 013145 branch authentication_passkey -: 013149 module_hci_cmd_set_gpio: -0x3b7c 013150 fetch 1 ,mem_module_uart_len -0x3b7d 013151 bne 3 ,module_hci_event_receive_invalid_cmd -0x3b7e 013152 ifetch 1 ,contru -0x3b7f 013153 beq hci_cmd_config_gpio_input ,module_set_gpio_input -0x3b80 013154 beq hci_cmd_config_gpio_output ,module_set_gpio_output -0x3b81 013155 branch module_hci_event_receive_invalid_cmd -: 013157 module_set_gpio_input: -0x3b82 013158 ifetcht 1 ,contru -0x3b83 013159 ifetch 1 ,contru -0x3b84 013160 beq gpio_input_high_impedance ,module_set_gpio_high_impedance -0x3b85 013161 nsetflag blank ,7 ,temp -0x3b86 013162 call gpio_config_input -0x3b87 013163 branch module_hci_event_receive_valid_cmd -: 013165 module_set_gpio_high_impedance: -0x3b88 013166 call gpio_set_high_impedance -0x3b89 013167 branch module_hci_event_receive_valid_cmd -: 013169 module_set_gpio_output: -0x3b8a 013170 ifetcht 1 ,contru -0x3b8b 013171 call gpio_config_output0 -0x3b8c 013172 ifetch 1 ,contru -0x3b8d 013173 isolate1 0 ,pdata -0x3b8e 013174 call gpio_out_flag -0x3b8f 013175 branch module_hci_event_receive_valid_cmd -: 013179 module_hci_cmd_read_gpio: -0x3b90 013180 fetch 1 ,mem_module_uart_len -0x3b91 013181 bne 1 ,module_hci_event_receive_invalid_cmd -0x3b92 013182 ifetcht 1 ,contru -0x3b93 013183 call gpio_get_bit -0x3b94 013184 setarg 0x0 -0x3b95 013185 nsetflag true ,0 ,pdata -0x3b96 013186 arg 1 ,rega -0x3b97 013187 branch module_hci_event_set_cmd_send_response -: 013191 module_hci_cmd_le_set_pairing_mode: -0x3b98 013192 copy rega ,contru -0x3b99 013193 ifetch 1 ,contru -0x3b9a 013194 copy pdata ,temp -0x3b9b 013195 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork -0x3b9c 013196 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric -0x3b9d 013197 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey -0x3b9e 013198 store 1 ,mem_le_pairing_mode -0x3b9f 013199 beq le_pairing_mode_none ,module_le_set_no_pairing -0x3ba0 013200 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work -0x3ba1 013201 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey -0x3ba2 013202 branch module_hci_event_receive_invalid_cmd -: 013204 module_le_set_pairing_mode_secure_justwork: -0x3ba3 013205 fetch 1 ,mem_le_secure_connect_enable -0x3ba4 013206 branch module_hci_event_receive_invalid_cmd ,blank -0x3ba5 013207 storet 1 ,mem_le_pairing_mode -0x3ba6 013208 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x3ba7 013209 branch module_le_set_noinputnooutput -: 013210 module_le_set_pairing_mode_secure_numeric: -0x3ba8 013211 fetch 1 ,mem_le_secure_connect_enable -0x3ba9 013212 branch module_hci_event_receive_invalid_cmd ,blank -0x3baa 013213 storet 1 ,mem_le_pairing_mode -0x3bab 013214 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x3bac 013215 jam flag_iocap_displayyesno ,mem_le_pres_iocap -0x3bad 013216 branch module_hci_event_receive_valid_cmd -: 013217 module_le_set_pairing_mode_secure_passkey: -0x3bae 013218 fetch 1 ,mem_le_secure_connect_enable -0x3baf 013219 branch module_hci_event_receive_invalid_cmd ,blank -0x3bb0 013220 storet 1 ,mem_le_pairing_mode -0x3bb1 013221 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x3bb2 013222 branch module_le_set_displayonly -: 013223 module_le_set_no_pairing: -0x3bb3 013224 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth -: 013225 module_le_set_noinputnooutput: -0x3bb4 013226 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap -0x3bb5 013227 branch module_hci_event_receive_valid_cmd -: 013228 module_le_set_pairing_mode_lagacy_just_work: -0x3bb6 013229 jam flag_le_bonding_mitm ,mem_le_pres_auth -0x3bb7 013230 branch module_le_set_noinputnooutput -: 013231 module_le_set_pairing_mode_lagacy_passkey: -0x3bb8 013232 jam flag_le_bonding_mitm ,mem_le_pres_auth -: 013233 module_le_set_displayonly: -0x3bb9 013234 jam flag_iocap_displayonly ,mem_le_pres_iocap -0x3bba 013235 branch module_hci_event_receive_valid_cmd -: 013239 module_hci_cmd_le_set_adv_data: -0x3bbb 013240 fetch 1 ,mem_module_uart_len -0x3bbc 013241 sub pdata ,31 ,null -0x3bbd 013242 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3bbe 013243 store 1 ,mem_le_adv_data_len -0x3bbf 013244 copy pdata ,loopcnt -0x3bc0 013245 copy rega ,contru -0x3bc1 013246 arg mem_le_adv_data ,contw -0x3bc2 013247 call uart_copy_rx_bytes_fast -0x3bc3 013248 branch module_hci_event_receive_valid_cmd -: 013252 module_hci_cmd_le_set_scan_data: -0x3bc4 013253 fetch 1 ,mem_module_uart_len -0x3bc5 013254 sub pdata ,31 ,null -0x3bc6 013255 nbranch module_hci_event_receive_invalid_cmd ,positive -0x3bc7 013256 store 1 ,mem_le_scan_data_len -0x3bc8 013257 copy pdata ,loopcnt -0x3bc9 013258 copy rega ,contru -0x3bca 013259 arg mem_le_scan_data ,contw -0x3bcb 013260 call uart_copy_rx_bytes_fast -0x3bcc 013261 branch module_hci_event_receive_valid_cmd -: 013265 module_hci_cmd_le_send_conn_update_req: -0x3bcd 013266 fetch 2 ,mem_ui_state_map -0x3bce 013267 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd -0x3bcf 013268 fetch 1 ,mem_module_uart_len -0x3bd0 013269 bne 0x08 ,module_hci_event_receive_invalid_cmd -0x3bd1 013270 copy rega ,contru -0x3bd2 013271 ifetch 8 ,contru -0x3bd3 013272 store 8 ,mem_le_interval_min -0x3bd4 013273 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x3bd5 013274 call ui_ipc_send_cmd -0x3bd6 013275 branch module_hci_event_receive_valid_cmd -: 013279 module_hci_cmd_set_le_adv_parameter: -0x3bd7 013280 ifetch 2 ,contru -0x3bd8 013281 store 2 ,mem_le_adv_interval -0x3bd9 013282 branch module_hci_event_receive_valid_cmd -: 013286 module_hci_cmd_le_start_pairing: -0x3bda 013287 fetch 1 ,mem_le_pairing_mode -0x3bdb 013288 branch module_hci_event_receive_invalid_cmd ,blank -0x3bdc 013289 fetch 1 ,mem_le_pairing_state -0x3bdd 013290 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd -0x3bde 013291 fetch 1 ,mem_le_enc_state -0x3bdf 013292 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd -0x3be0 013293 call check_51cmd_le_smp_sec_req -0x3be1 013294 branch module_hci_event_receive_valid_cmd -: 013298 module_hci_cmd_set_wake_gpio: -0x3be2 013299 fetch 1 ,mem_module_uart_len -0x3be3 013300 bne 5 ,module_hci_event_receive_invalid_cmd -0x3be4 013301 ifetch 1 ,contru -0x3be5 013302 store 1 ,mem_module_mcu_wake_pin -0x3be6 013303 ifetch 4 ,contru -0x3be7 013304 store 4 ,mem_module_mcu_wake_delay_us -0x3be8 013305 fetcht 1 ,mem_module_mcu_wake_pin -0x3be9 013306 call gpio_config_output -0x3bea 013307 call module_set_mcu_wake_pin_low -0x3beb 013308 branch module_hci_event_receive_valid_cmd -: 013312 module_hci_cmd_set_tx_power: -0x3bec 013313 fetch 1 ,mem_module_uart_len -0x3bed 013314 bne 0x01 ,module_hci_event_receive_invalid_cmd -0x3bee 013315 ifetch 1 ,contru -0x3bef 013316 store 1 ,mem_tx_power -0x3bf0 013317 branch module_hci_event_receive_valid_cmd -: 013321 module_hci_cmd_le_confirm_gkey: -0x3bf1 013322 ifetch 1 ,contru -0x3bf2 013323 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail -0x3bf3 013324 fetch 1 ,mem_le_secure_connect_state -0x3bf4 013325 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok -0x3bf5 013326 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok -0x3bf6 013327 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok -0x3bf7 013328 branch module_hci_event_receive_invalid_cmd -: 013329 module_hci_cmd_le_confirm_gkey_ok: -0x3bf8 013330 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag -0x3bf9 013331 branch module_hci_event_receive_valid_cmd -: 013333 module_hci_cmd_le_confirm_gkey_fail: -0x3bfa 013334 call le_send_pairing_confirm_value_failed -0x3bfb 013335 branch module_hci_event_receive_valid_cmd -: 013339 module_hci_cmd_set_reject_justwork_flag: -0x3bfc 013340 fetch 1 ,mem_module_uart_len -0x3bfd 013341 bne 0x01 ,module_hci_event_receive_invalid_cmd -0x3bfe 013342 call module_hci_event_receive_valid_cmd -0x3bff 013343 ifetch 1 ,contru -0x3c00 013344 branch classic_bt_clr_reject_justwork_flag ,blank -0x3c01 013345 branch classic_bt_set_reject_justwork_flag -: 013349 module_hci_cmd_reset_chip: -0x3c02 013350 call module_hci_event_receive_valid_cmd -0x3c03 013351 call wait_uarttx -0x3c04 013352 jam 0x01 ,core_reset -0x3c05 013353 branch loop -: 013357 module_hci_cmd_le_set_fixed_passkey: -0x3c06 013358 fetch 1 ,mem_module_uart_len -0x3c07 013359 beq 0 ,module_hci_event_receive_invalid_cmd -0x3c08 013360 ifetch 1 ,contru -0x3c09 013361 branch module_hci_cmd_le_set_random_passkey ,blank -0x3c0a 013362 fetch 1 ,mem_module_uart_len -0x3c0b 013363 bne 5 ,module_hci_event_receive_invalid_cmd -0x3c0c 013364 ifetch 4 ,contru -0x3c0d 013365 arg 1000000 ,temp -0x3c0e 013366 isub temp ,null -0x3c0f 013367 branch module_hci_event_receive_invalid_cmd ,positive -0x3c10 013368 store 4 ,mem_le_tk -0x3c11 013369 call le_set_config_fixed_tk -0x3c12 013370 branch module_hci_event_receive_valid_cmd -: 013372 module_hci_cmd_le_set_random_passkey: -0x3c13 013373 call le_clr_config_fixed_tk -0x3c14 013374 branch module_hci_event_receive_valid_cmd -: 013378 module_hci_test_cmde_close_lpm: -0x3c15 013379 jam 0 ,mem_lpm_mode -0x3c16 013380 branch module_hci_event_receive_valid_cmd -: 013385 module_hci_event_receive_invalid_cmd: -0x3c17 013386 arg 1 ,temp -0x3c18 013387 arg 0 ,rega -0x3c19 013388 branch module_hci_event_set_cmd -: 013391 module_hci_event_receive_valid_cmd: -0x3c1a 013392 arg 0 ,temp -0x3c1b 013393 arg 0 ,rega -0x3c1c 013394 branch module_hci_event_set_cmd -: 013398 module_hci_event_spp_connect: -0x3c1d 013399 jam hci_event_spp_conn_rep ,mem_module_uart_opcode -0x3c1e 013400 branch module_hci_event_enter_standby_mode_len0 -: 013404 module_hci_event_le_connect: -0x3c1f 013405 jam hci_event_le_conn_rep ,mem_module_uart_opcode -0x3c20 013406 branch module_hci_event_enter_standby_mode_len0 -: 013410 module_hci_event_spp_disconnect: -0x3c21 013411 jam hci_event_spp_dis_rep ,mem_module_uart_opcode -0x3c22 013412 branch module_hci_event_enter_standby_mode_len0 -: 013416 module_hci_event_le_disconnect: -0x3c23 013417 jam hci_event_le_dis_rep ,mem_module_uart_opcode -0x3c24 013418 branch module_hci_event_enter_standby_mode_len0 -: 013426 module_hci_event_set_cmd: -0x3c25 013427 fetch 1 ,mem_module_uart_opcode -0x3c26 013428 copy pdata ,regc -0x3c27 013429 jam hci_event_cmd_res ,mem_module_uart_opcode -0x3c28 013430 setarg 2 -0x3c29 013431 iadd rega ,pdata -0x3c2a 013432 call module_hci_prepare_tx -0x3c2b 013433 copy regc ,pdata -0x3c2c 013434 istore 1 ,contwu -0x3c2d 013435 istoret 1 ,contwu -0x3c2e 013436 copy rega ,loopcnt -0x3c2f 013437 copy regb ,contr -0x3c30 013438 call uart_copy_tx_bytes -0x3c31 013439 branch uartd_send -: 013443 module_hci_event_receive_spp_data: -0x3c32 013445 call module_spp_clear_last_transmite_clock -0x3c33 013446 jam hci_event_spp_data_rep ,mem_module_uart_opcode -0x3c34 013447 fetch 1 ,mem_current_length -0x3c35 013448 rtn blank -0x3c36 013449 call module_hci_prepare_tx -0x3c37 013450 fetch 1 ,mem_current_length -0x3c38 013451 copy pdata ,loopcnt -0x3c39 013452 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x3c3a 013453 copy pdata ,contr -0x3c3b 013454 call uart_copy_tx_bytes_fast -0x3c3c 013455 branch uartd_send -: 013459 module_hci_event_receive_le_data: -0x3c3d 013460 jam hci_event_le_data_rep ,mem_module_uart_opcode -0x3c3e 013461 fetch 1 ,mem_module_le_rx_data_len -0x3c3f 013462 icopy loopcnt -0x3c40 013463 increase 2 ,pdata -0x3c41 013464 call module_hci_prepare_tx -0x3c42 013465 fetch 2 ,mem_module_le_rx_data_handle -0x3c43 013466 istore 2 ,contwu -0x3c44 013467 fetch 2 ,mem_module_le_rx_data_address -0x3c45 013468 icopy contr -0x3c46 013469 call uart_copy_tx_bytes_fast -0x3c47 013470 branch uartd_send -: 013474 module_hci_event_enter_standby_mode: -0x3c48 013475 jam hci_event_standby_rep ,mem_module_uart_opcode -: 013476 module_hci_event_enter_standby_mode_len0: -0x3c49 013477 setarg 0 -0x3c4a 013478 call module_hci_prepare_tx -0x3c4b 013479 branch uartd_send -: 013483 module_hci_event_status_res: -0x3c4c 013484 jam hci_event_status_res ,mem_module_uart_opcode -0x3c4d 013485 setarg 1 -0x3c4e 013486 call module_hci_prepare_tx -0x3c4f 013488 call module_hci_read_bt_status -0x3c50 013490 fetch 2 ,mem_ui_state_map -0x3c51 013491 arg ui_state_bt_hid_conn ,queue -0x3c52 013492 qisolate1 pdata -0x3c53 013493 setflag true ,3 ,temp -0x3c54 013495 arg ui_state_ble_connected ,queue -0x3c55 013496 qisolate1 pdata -0x3c56 013497 setflag true ,5 ,temp -0x3c57 013499 fetch 1 ,mem_ui_state_map -0x3c58 013500 arg ui_state_bt_spp_conn ,queue -0x3c59 013501 qisolate1 pdata -0x3c5a 013502 setflag true ,4 ,temp -0x3c5b 013504 istoret 1 ,contwu -0x3c5c 013505 branch uartd_send -: 013509 module_hci_read_bt_status: -0x3c5d 013510 arg 0 ,temp -0x3c5e 013511 fetch 1 ,mem_scan_mode -0x3c5f 013512 arg inq_scan_mode ,queue -0x3c60 013513 qisolate1 pdata -0x3c61 013514 setflag true ,0 ,temp -0x3c62 013515 arg page_scan_mode ,queue -0x3c63 013516 qisolate1 pdata -0x3c64 013517 setflag true ,1 ,temp -0x3c65 013519 fetch 1 ,mem_le_adv_enable -0x3c66 013520 arg 0 ,queue -0x3c67 013521 qisolate1 pdata -0x3c68 013522 setflag true ,2 ,temp -0x3c69 013523 rtn -: 013527 module_hci_event_store_device: -0x3c6a 013528 jam hci_event_nvram_rep ,mem_module_uart_opcode -0x3c6b 013529 fetch 1 ,mem_nv_data_number -0x3c6c 013530 mul32 pdata ,34 ,pdata -0x3c6d 013531 icopy loopcnt -0x3c6e 013532 call module_hci_prepare_tx -0x3c6f 013533 fetch 2 ,mem_nv_data_ptr -0x3c70 013534 icopy contr -0x3c71 013535 call uart_copy_tx_bytes_fast -0x3c72 013536 branch uartd_send -: 013540 module_hci_event_gkey_generate: -0x3c73 013541 jam hci_event_gkey ,mem_module_uart_opcode -0x3c74 013542 setarg 4 -0x3c75 013543 call module_hci_prepare_tx -0x3c76 013544 fetch 4 ,mem_gkey -0x3c77 013545 istore 4 ,contwu -0x3c78 013546 branch uartd_send -: 013550 module_hci_event_invalid_packet: -0x3c79 013551 jam hci_event_invalid_packet ,mem_module_uart_opcode -0x3c7a 013552 hfetch 2 ,core_uart_rxitems -0x3c7b 013553 arg 0xff ,temp -0x3c7c 013554 call not_greater_than -0x3c7d 013555 copy pdata ,loopcnt -0x3c7e 013556 call module_hci_prepare_tx -0x3c7f 013557 call uartd_prepare_rx -0x3c80 013558 call uart_copy_rx2tx -0x3c81 013559 branch uartd_send -: 013563 module_hci_event_passkey_entry_mode: -0x3c82 013564 jam hci_event_get_passkey ,mem_module_uart_opcode -0x3c83 013565 branch module_hci_event_enter_standby_mode_len0 -: 013569 module_hci_event_le_tk: -0x3c84 013570 jam hci_event_le_tk ,mem_module_uart_opcode -0x3c85 013571 setarg 4 -0x3c86 013572 call module_hci_prepare_tx -0x3c87 013573 fetch 4 ,mem_le_tk -0x3c88 013574 istore 4 ,contwu -0x3c89 013575 branch uartd_send -: 013579 module_hci_event_le_pairing_fail: -0x3c8a 013580 arg flag_ble_pairing_fail ,rega -0x3c8b 013581 branch module_hci_event_pairing_completed -: 013583 module_hci_event_le_pairing_success: -0x3c8c 013584 arg flag_ble_pairing_success ,rega -0x3c8d 013585 branch module_hci_event_pairing_completed -: 013587 module_hci_event_bt_pairing_fail: -0x3c8e 013588 arg flag_bt_pairing_fail ,rega -0x3c8f 013589 branch module_hci_event_pairing_completed -: 013591 module_hci_event_bt_pairing_success: -0x3c90 013592 arg flag_bt_pairing_success ,rega -: 013594 module_hci_event_pairing_completed: -0x3c91 013595 jam 0 ,mem_flag_mode_ssp_pin -0x3c92 013596 jam hci_event_le_pairing_state ,mem_module_uart_opcode -0x3c93 013597 setarg 2 -0x3c94 013598 call module_hci_prepare_tx -0x3c95 013599 copy rega ,pdata -0x3c96 013600 istore 2 ,contwu -0x3c97 013601 branch uartd_send -: 013605 module_hci_event_pause_enc: -0x3c98 013606 arg flag_event_pause_enc ,regc -0x3c99 013607 branch module_hci_event_enc -: 013609 module_hci_event_start_enc: -0x3c9a 013610 arg flag_event_start_enc ,regc -: 013612 module_hci_event_enc: -0x3c9b 013613 jam hci_event_le_encryption_state ,mem_module_uart_opcode -0x3c9c 013614 setarg 1 -0x3c9d 013615 call module_hci_prepare_tx -0x3c9e 013616 copy regc ,pdata -0x3c9f 013617 istore 1 ,contwu -0x3ca0 013618 branch uartd_send -: 013622 module_hci_event_le_gkey: -0x3ca1 013623 jam hci_event_le_gkey ,mem_module_uart_opcode -0x3ca2 013624 setarg 4 -0x3ca3 013625 call module_hci_prepare_tx -0x3ca4 013626 fetch 4 ,mem_gkey -0x3ca5 013627 istore 4 ,contwu -0x3ca6 013628 branch uartd_send -: 013639 module_hci_prepare_tx: -0x3ca7 013640 jam 0x02 ,mem_module_uart_cmd -0x3ca8 013641 store 1 ,mem_module_uart_len -0x3ca9 013642 storet 8 ,mem_temp -0x3caa 013643 bpatch patch1c_2 ,mem_patch1c -0x3cab 013644 call module_set_mcu_wake_pin_high_delay -0x3cac 013645 fetcht 8 ,mem_temp -0x3cad 013646 call uartd_prepare_tx -0x3cae 013647 fetch 3 ,mem_module_uart_cmd -0x3caf 013648 istore 3 ,contwu -0x3cb0 013649 rtn -: 013652 module_set_mcu_wake_pin_high_delay: -0x3cb1 013653 call module_check_mcu_wake_pin_high -0x3cb2 013654 rtn true -: 013655 module_set_mcu_wake_pin_h_delay: -0x3cb3 013656 call module_set_mcu_wake_pin_high -0x3cb4 013657 fetch 4 ,mem_module_mcu_wake_delay_us -0x3cb5 013658 rshift2 pdata ,pdata -0x3cb6 013659 rtn blank -0x3cb7 013660 branch delay -: 013662 module_set_mcu_wake_pin_high: -0x3cb8 013664 fetcht 1 ,mem_module_mcu_wake_pin -0x3cb9 013665 branch gpio_out_active -: 013667 module_check_mcu_wake_pin_high: -0x3cba 013668 fetcht 1 ,mem_module_mcu_wake_pin -0x3cbb 013669 branch gpio_check_active -: 013671 module_set_mcu_wake_pin_low: -0x3cbc 013672 fetcht 1 ,mem_module_mcu_wake_pin -0x3cbd 013673 branch gpio_out_inactive -: 013676 delay: -0x3cbe 013677 increase -1 ,pdata -0x3cbf 013678 nop 38 -0x3cc0 013679 nbranch delay ,blank -0x3cc1 013680 rtn -: 013689 module_le_receive_data: -0x3cc2 013690 call module_check_ble_encrypt_state -0x3cc3 013691 rtn user -0x3cc4 013692 copy rega ,pdata -0x3cc5 013693 store 2 ,mem_module_le_rx_data_address -0x3cc6 013694 copy regb ,pdata -0x3cc7 013695 store 1 ,mem_module_le_rx_data_len -0x3cc8 013696 fetch 2 ,mem_le_att_handle -0x3cc9 013697 fetcht 2 ,mem_module_data_write_handle -0x3cca 013698 isub temp ,null -0x3ccb 013699 branch module_le_receive_data_ok ,zero -0x3ccc 013700 fetcht 2 ,mem_module_data_write_handle2 -0x3ccd 013701 isub temp ,null -0x3cce 013702 nrtn zero -: 013703 module_le_receive_data_ok: -0x3ccf 013704 store 2 ,mem_module_le_rx_data_handle -0x3cd0 013705 branch module_hci_event_receive_le_data -: 013710 module_exit_sniff: -0x3cd1 013711 fetch 1 ,mem_module_flag -0x3cd2 013712 rtnbit1 moudle_task_unsniff -0x3cd3 013713 call module_set_unsniff_task_flag -0x3cd4 013714 branch app_bt_sniff_exit -: 013717 module_set_lpm_mult_2: -0x3cd5 013718 jam 2 ,mem_lpm_mult -0x3cd6 013719 rtn -: 013723 module_bb_event_timer: -0x3cd7 013724 branch module_read_vdd_timer -: 013726 module_read_vdd_timer: -0x3cd8 013727 fetch 1 ,mem_module_read_vdd_flag -0x3cd9 013728 rtn blank -0x3cda 013729 fetch 1 ,mem_module_read_vdd_count -0x3cdb 013730 rtn blank -0x3cdc 013731 increase -1 ,pdata -0x3cdd 013732 store 1 ,mem_module_read_vdd_count -0x3cde 013733 nrtn blank -0x3cdf 013734 jam flag_module_read_vdd_count ,mem_module_read_vdd_count -0x3ce0 013735 call adc_set_mode -0x3ce1 013736 call vdd_calculate_by_mode -0x3ce2 013737 div pdata ,0x64 -0x3ce3 013738 call wait_div_end -0x3ce4 013739 quotient pdata -0x3ce5 013740 remainder temp -0x3ce6 013741 store 1 ,mem_module_vdd_quotient -0x3ce7 013742 storet 1 ,mem_module_vdd_remainder -0x3ce8 013743 rtn -: 013746 module_control_air_flow: -0x3ce9 013747 call check_uart_tx_buff -0x3cea 013748 branch app_l2cap_flow_control_enable ,positive -0x3ceb 013749 branch app_l2cap_flow_control_disable -: 013753 module_set_sniff_task_flag: -0x3cec 013754 arg moudle_task_sniff ,queue -0x3ced 013755 branch module_set_state -: 013757 module_clear_sniff_task_flag: -0x3cee 013758 arg moudle_task_sniff ,queue -0x3cef 013759 branch module_clr_state -: 013761 module_set_unsniff_task_flag: -0x3cf0 013762 arg moudle_task_unsniff ,queue -0x3cf1 013763 branch module_set_state -: 013765 module_clear_unsniff_task_flag: -0x3cf2 013766 arg moudle_task_unsniff ,queue -0x3cf3 013767 branch module_clr_state -: 013769 module_set_le_tx_data_flag: -0x3cf4 013770 arg module_flag_ble_data_finish ,queue -0x3cf5 013771 branch module_set_state -: 013773 module_clear_le_tx_data_flag: -0x3cf6 013774 arg module_flag_ble_data_finish ,queue -0x3cf7 013775 branch module_clr_state -: 013777 module_clr_state: -0x3cf8 013778 fetch 1 ,mem_module_flag -0x3cf9 013779 qset0 pdata -0x3cfa 013780 store 1 ,mem_module_flag -0x3cfb 013781 rtn -: 013783 module_set_state: -0x3cfc 013784 fetch 1 ,mem_module_flag -0x3cfd 013785 qset1 pdata -0x3cfe 013786 store 1 ,mem_module_flag -0x3cff 013787 rtn -: 013797 mouse_init: -0x3d00 013798 call mouse_setting_config -0x3d01 013799 call spi_ncs_enable -0x3d02 013800 call mouse_init_sunt -0x3d03 013801 call mouse_dpi_config -0x3d04 013802 call spi_ncs_disable -0x3d05 013803 rtn wake -0x3d06 013804 call mouse_cheak_enable_usb -0x3d07 013805 call mouse_cb_fuction -0x3d08 013808 fetch mouse_flag_len ,mem_mouse_flag -0x3d09 013809 rtnbit1 mouse_enable_usb -0x3d0a 013810 call mouse_wakeup_from_power -0x3d0b 013811 rtnmark1 mark_24g -0x3d0c 013812 fetch 2 ,mem_ui_state_map -0x3d0d 013813 bbit1 ui_state_btn_down ,mouse_start_discovery -0x3d0e 013814 branch mouse_check_reconn_target -: 013817 mouse_delay_4s: -0x3d0f 013818 fetch mouse_flag_len ,mem_mouse_flag -0x3d10 013819 rtnbit0 mouse_enable_init_delay -0x3d11 013820 arg 20 ,loopcnt -: 013821 mouse_delay_20ms: -0x3d12 013822 setarg 200000 -0x3d13 013823 call sleep -0x3d14 013824 loop delay_10ms -0x3d15 013825 rtn -: 013828 mouse_cheak_enable_usb: -0x3d16 013829 fetch mouse_flag_len ,mem_mouse_flag -0x3d17 013830 rtnbit0 mouse_enable_usb -0x3d18 013831 branch usb_init -: 013834 mouse_cb_fuction: -0x3d19 013835 setarg mouse_le -0x3d1a 013836 store 2 ,mem_cb_le_process -0x3d1b 013837 setarg mouse_send_process -0x3d1c 013838 store 2 ,mem_cb_bt_process -0x3d1d 013839 setarg mouse_process_lpm_before -0x3d1e 013840 store 2 ,mem_cb_before_lpm -0x3d1f 013841 setarg mouse_priority_bb_event -0x3d20 013842 store 2 ,mem_cb_bb_event_process -0x3d21 013843 setarg mouse_idle -0x3d22 013844 store 2 ,mem_cb_idle_process -0x3d23 013845 setarg mouse_before_hibernate -0x3d24 013846 store 2 ,mem_cb_before_hibernate -0x3d25 013847 setarg le_mouse_bb_event_connect_complete -0x3d26 013848 store 2 ,mem_cb_att_write -0x3d27 013850 call g24_head_ptr2regc -0x3d28 013851 setarg mouse_g24_package_data -0x3d29 013852 add regc ,offset_24g_cb_data ,contw -0x3d2a 013853 istore 2 ,contw -0x3d2b 013854 setarg mouse_g24_enter_lpm -0x3d2c 013855 add regc ,offset_24g_cb_lpm_prepare ,contw -0x3d2d 013856 istore 2 ,contw -0x3d2e 013857 setarg mouse_lpm_before_common -0x3d2f 013858 add regc ,offset_24g_cb_lpm_before ,contw -0x3d30 013859 istore 2 ,contw -0x3d31 013861 setarg mouse_bb_event_timer -0x3d32 013862 store 2 ,mem_cb_event_timer -0x3d33 013863 setarg mouse_spi_write_flash_cb -0x3d34 013864 store 2 ,mem_cb_spi_flash_write_complate -0x3d35 013865 rtn -: 013866 mouse_spi_write_flash_cb: -: 013867 mouse_spi_init: -0x3d36 013868 fetch mouse_flag_len ,mem_mouse_flag -0x3d37 013869 bbit0 mouse_enable_spi2 ,spid_init -0x3d38 013870 branch spid_init2 -: 013872 mouse_setting_config: -0x3d39 013873 rtn wake -0x3d3a 013874 call g24_set_device_addr -0x3d3b 013875 call mouse_gpio_init -0x3d3c 013876 call mouse_param_init -0x3d3d 013877 call mouse_adc_init -0x3d3e 013878 call le_set_config_fixed_ltk -0x3d3f 013879 call le_set_justwork -0x3d40 013880 call le_set_fixed_ltk -0x3d41 013881 call le_set_config_read_authentication -0x3d42 013882 fetch mouse_flag_len ,mem_mouse_flag -0x3d43 013883 bbit1 mouse_enable_eeprom ,mouse_init_iic -0x3d44 013884 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak -0x3d45 013885 rtn -: 013887 mouse_init_iic: -0x3d46 013888 call iic_init_390k -0x3d47 013889 fetch mouse_flag_len ,mem_mouse_flag -0x3d48 013890 isolate1 mouse_enable_2k_eeprom ,pdata -0x3d49 013891 ncall clear_eeprom_size_2k ,true -0x3d4a 013892 call mouse_load_eeprom_dpi -0x3d4b 013893 call mouse_init_environment -0x3d4c 013894 call mouse_set_24g_addr_eeprom -0x3d4d 013895 branch iicd_read_eep_data -: 013897 mouse_wakeup_from_power: -0x3d4e 013898 fetch mouse_flag_len ,mem_mouse_flag -0x3d4f 013899 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power -0x3d50 013900 fetch 1 ,mem_wakup_from_power_flag -0x3d51 013901 isolate0 gpio_latch ,pdata -0x3d52 013902 nrtn true -: 013903 mouse_wakeup_no_from_power: -0x3d53 013904 fetch 1 ,mem_reconn_times_init -0x3d54 013905 store 1 ,mem_reconn_times -0x3d55 013906 fetch 1 ,mem_config_function_enable -0x3d56 013907 rtnbit1 enable_select_device_by_switch -: 013908 mouse_start_24g_mode: -0x3d57 013909 fetch mouse_flag_len ,mem_mouse_flag -0x3d58 013910 rtnbit0 mouse_enable_24g -0x3d59 013911 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start -0x3d5a 013912 branch g24_check_51cmd_start_24g -: 013913 le_mouse_bb_event_connect_complete: -0x3d5b 013914 fetch 1 ,mem_le_att_handle -0x3d5c 013915 sub pdata ,26 ,pdata -0x3d5d 013916 nrtn zero -0x3d5e 013917 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x3d5f 013918 call ui_ipc_send_cmd -: 013919 mouse_le_write_enable: -0x3d60 013920 arg write_req_enable_flag ,queue -0x3d61 013921 branch mouse_le_enable_connect_flag -: 013923 mouse_dpi_up: -0x3d62 013924 fetch 1 ,mem_mouse_dpi_button_state -0x3d63 013925 rtneq dpi_button_state_up -0x3d64 013926 jam dpi_button_state_up ,mem_mouse_dpi_button_state -0x3d65 013927 rtn -: 013928 mouse_dpi_config: -0x3d66 013929 fetch 1 ,mem_config_sensor_motion -0x3d67 013930 and pdata ,0x0f ,pdata -0x3d68 013931 store 1 ,mem_mouse_dpi -0x3d69 013932 branch mouse_seting_dpi + 2 -: 013935 mouse_dpi_cheak: -0x3d6a 013936 fetcht 1 ,mem_dpi_button_gpio -0x3d6b 013937 call gpio_get_bit -0x3d6c 013938 nbranch mouse_dpi_up ,true -: 013939 mouse_dpi_down: -0x3d6d 013940 fetch 1 ,mem_mouse_dpi_button_state -0x3d6e 013941 rtneq dpi_button_state_down -0x3d6f 013942 jam dpi_button_state_down ,mem_mouse_dpi_button_state -0x3d70 013943 fetch 1 ,mem_mouse_dpi -0x3d71 013944 increase 1 ,pdata -0x3d72 013945 and pdata ,0x03 ,pdata -0x3d73 013946 store 1 ,mem_mouse_dpi -0x3d74 013947 call mouse_seting_dpi -0x3d75 013948 fetch mouse_flag_len ,mem_mouse_flag -0x3d76 013949 bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi -0x3d77 013950 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi -0x3d78 013951 rtn -: 013952 mouse_before_store_flash_cpi: -0x3d79 013953 arg mouse_spi2_clk_gpio ,temp -0x3d7a 013954 call gpio_config_output -0x3d7b 013955 arg mouse_spi2_sdio_gpio ,temp -0x3d7c 013956 call gpio_config_output -0x3d7d 013957 branch mouse_store_flash_device_info -: 013959 mouse_seting_dpi: -0x3d7e 013960 bpatch patch1c_3 ,mem_patch1c -0x3d7f 013961 call mosue_dpi_led_blink_init -0x3d80 013962 fetch 1 ,mem_config_sensor_type -0x3d81 013963 beq p3610 ,mouse_seting_3610_dpi -0x3d82 013964 beq p3212 ,mouse_seting_3212_dpi -0x3d83 013965 fetch 1 ,mem_mouse_dpi -0x3d84 013966 beq mouse_dpi_level1 ,mouse_set_cpi1 -0x3d85 013967 beq mouse_dpi_level2 ,mouse_set_cpi2 -0x3d86 013968 beq mouse_dpi_level3 ,mouse_set_cpi3 -0x3d87 013969 beq mouse_dpi_level4 ,mouse_set_cpi4 -: 013970 mouse_set_cpi2: -0x3d88 013971 fetch 1 ,mem_320x_dpi_2 -0x3d89 013972 branch mouse_p3205_dpi -: 013973 mouse_set_cpi1: -0x3d8a 013974 fetch 1 ,mem_320x_dpi_1 -0x3d8b 013975 branch mouse_p3205_dpi -: 013976 mouse_set_cpi3: -0x3d8c 013977 fetch 1 ,mem_320x_dpi_3 -0x3d8d 013978 branch mouse_p3205_dpi -: 013979 mouse_set_cpi4: -0x3d8e 013980 fetch 1 ,mem_320x_dpi_4 -0x3d8f 013981 branch mouse_p3205_dpi -: 013982 moue_seting_cpi_count: -0x3d90 013983 fetch 1 ,mem_config_sensor_type -0x3d91 013984 rtneq p3065_xy -0x3d92 013985 fetch 1 ,mem_mouse_cpi_count -0x3d93 013986 increase 1 ,pdata -0x3d94 013987 store 1 ,mem_mouse_cpi_count -0x3d95 013988 rtn -: 013990 mouse_seting_3212_dpi: -0x3d96 013991 fetch 1 ,mem_mouse_dpi -0x3d97 013992 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 -0x3d98 013993 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 -0x3d99 013994 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 -0x3d9a 013995 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 -: 013996 mouse_set_p3212_cpi2: -0x3d9b 013997 fetch 1 ,mem_3212_dpi_2 -0x3d9c 013998 branch mouse_p3212_dpi -: 013999 mouse_set_p3212_cpi1: -0x3d9d 014000 fetch 1 ,mem_3212_dpi_1 -0x3d9e 014001 branch mouse_p3212_dpi -: 014002 mouse_set_p3212_cpi3: -0x3d9f 014003 fetch 1 ,mem_3212_dpi_3 -0x3da0 014004 branch mouse_p3212_dpi -: 014005 mouse_set_p3212_cpi4: -0x3da1 014006 fetch 1 ,mem_3212_dpi_4 -: 014007 mouse_p3212_dpi: -0x3da2 014008 store 1 ,mem_mouse_cpi_count -0x3da3 014009 lshift8 pdata ,pdata -0x3da4 014010 copy pdata ,rega -0x3da5 014011 add pdata ,mouse_p3212_dpi_xaddress ,pdata -0x3da6 014012 call twspi_write -0x3da7 014013 copy rega ,pdata -0x3da8 014014 add pdata ,mouse_p3212_dpi_yaddress ,pdata -0x3da9 014015 branch twspi_write -: 014017 mouse_seting_3610_dpi: -0x3daa 014018 fetch 1 ,mem_mouse_dpi -0x3dab 014019 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 -0x3dac 014020 beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 -0x3dad 014021 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 -0x3dae 014022 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 -: 014023 mouse_set_p3610_cpi2: -0x3daf 014024 fetch 1 ,mem_3610_dpi_2 -0x3db0 014025 branch mouse_p3610_dpi -: 014026 mouse_set_p3610_cpi1: -0x3db1 014027 fetch 1 ,mem_3610_dpi_1 -0x3db2 014028 branch mouse_p3610_dpi -: 014029 mouse_set_p3610_cpi3: -0x3db3 014030 fetch 1 ,mem_3610_dpi_3 -0x3db4 014031 branch mouse_p3610_dpi -: 014032 mouse_set_p3610_cpi4: -0x3db5 014033 fetch 1 ,mem_3610_dpi_4 -: 014034 mouse_p3610_dpi: -0x3db6 014035 store 1 ,mem_mouse_cpi_count -0x3db7 014036 call mouse_spi_sdio_gpio_pollup -0x3db8 014037 fetch 1 ,mem_mouse_cpi_count -: 014038 mouse_reset_p3610_dpi: -0x3db9 014039 add pdata ,0x80 ,pdata -0x3dba 014040 lshift8 pdata ,pdata -0x3dbb 014041 add pdata ,mouse_p3610_dpi_address ,pdata -0x3dbc 014042 copy pdata ,rega -0x3dbd 014043 branch mouse_set_sensor_reg -: 014045 mouse_p3205_dpi: -0x3dbe 014046 store 1 ,mem_mouse_cpi_count -0x3dbf 014047 call moue_seting_cpi_count -0x3dc0 014048 fetch 1 ,mem_mouse_cpi_count -0x3dc1 014049 setarg mouse_dpi_address -0x3dc2 014050 call twspi_read -0x3dc3 014051 and pdata ,0xf8 ,temp -0x3dc4 014052 fetch 1 ,mem_mouse_cpi_count -0x3dc5 014053 iadd temp ,pdata -0x3dc6 014054 lshift8 pdata ,pdata -0x3dc7 014055 add pdata ,mouse_dpi_address ,pdata -0x3dc8 014056 branch twspi_write -: 014059 mouse_init_environment: -0x3dc9 014060 call app_initflag_check -0x3dca 014061 branch mouse_eeprom_load_recon_info ,zero -0x3dcb 014062 call mouse_ble_init_address -0x3dcc 014063 call mouse_store_eeprom_device_info -0x3dcd 014064 branch app_initflag_store -: 014067 mouse_24g_pairing_button: -0x3dce 014068 fetch 2 ,mem_24g_pairing_timer_count -0x3dcf 014069 rtn blank -0x3dd0 014070 fetch mouse_flag_len ,mem_mouse_flag -0x3dd1 014071 rtnbit0 mouse_enable_24g -0x3dd2 014072 rtnbit1 mosue_24g_pairing_flag -0x3dd3 014073 rtnmark1 mark_24g -0x3dd4 014074 call mouse_check_key_gpio -0x3dd5 014075 rtnne mouse_lmr_button -0x3dd6 014076 call mouse_devce_led_off -0x3dd7 014077 arg mosue_24g_pairing_flag ,queue -0x3dd8 014078 call mouse_enable_function_flag -0x3dd9 014079 setarg 0 -0x3dda 014080 store 2 ,mem_mouse_direct_timer -0x3ddb 014081 store 1 ,mem_mouse_send_blank_timer -0x3ddc 014082 call g24_set0_mem_check_dongle_times -0x3ddd 014084 fetch 2 ,mem_ui_state_map -0x3dde 014085 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect -0x3ddf 014086 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x3de0 014087 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x3de1 014088 call mouse_stop_discovery -0x3de2 014089 branch g24_start_pairing_sm1 -: 014092 mouse_idle: -0x3de3 014093 call mouse_24g_pairing_button -0x3de4 014094 call ui_check_paring_button -0x3de5 014095 call mouse_dpi_cheak -0x3de6 014096 call mouse_usb_isr -0x3de7 014097 call mouse_wheel_check -0x3de8 014098 branch mouse_usb_mode -: 014099 mouse_usb_isr: -0x3de9 014100 fetch mouse_flag_len ,mem_mouse_flag -0x3dea 014101 rtnbit0 mouse_enable_usb -0x3deb 014102 call usb_isr -0x3dec 014103 branch usb_offline_state -: 014105 mouse_cheak_usb: -0x3ded 014106 hfetch 1 ,core_usb_addr -0x3dee 014107 bbit0 7 ,mouse_usb_no_exsit -0x3def 014108 bbit1 7 ,mouse_usb_exsit -0x3df0 014109 rtn -: 014110 mouse_usb_no_exsit: -0x3df1 014111 fetch 1 ,mem_usb_addr -0x3df2 014112 rtnbit0 7 -0x3df3 014113 branch soft_reset_chip -: 014114 mouse_usb_exsit: -0x3df4 014115 fetch 1 ,mem_usb_addr -0x3df5 014116 rtnbit1 7 -0x3df6 014117 branch mouse_stop_bluetooth_mode -: 014119 mouse_usb_mode: -0x3df7 014120 call mouse_cheak_usb -0x3df8 014121 hfetch 1 ,core_usb_addr -0x3df9 014122 store 1 ,mem_usb_addr -0x3dfa 014123 rtnbit0 7 -0x3dfb 014124 call mouse_clkn_check -0x3dfc 014125 fetch 4 ,mem_btclk_sensor -0x3dfd 014126 fetcht 1 ,mem_wire_usb_interval -0x3dfe 014127 iadd temp ,temp -0x3dff 014128 copy clkn_bt ,pdata -0x3e00 014129 isub temp ,null -0x3e01 014130 nrtn positive -0x3e02 014131 store 4 ,mem_btclk_sensor -0x3e03 014132 call mouse_motion -0x3e04 014133 nrtn user -0x3e05 014134 jam 4 ,mem_usb_tx_enable -0x3e06 014135 branch mouse_wired_to_usb -: 014137 mouse_clkn_check: -0x3e07 014138 fetcht 4 ,mem_btclk_sensor -0x3e08 014139 copy clkn_bt ,pdata -0x3e09 014140 isub temp ,null -0x3e0a 014141 ncall mouse_clkn_timeout ,positive -0x3e0b 014142 rtn -: 014143 mouse_clkn_timeout: -0x3e0c 014144 setarg 0 -0x3e0d 014145 store 4 ,mem_btclk_sensor -0x3e0e 014146 rtn -: 014150 mouse_wired_to_usb: -0x3e0f 014151 fetch 1 ,mem_usb_tx_enable -0x3e10 014152 rtnbit0 2 -0x3e11 014153 branch mouse_data_push -: 014154 mouse_data_push: -0x3e12 014155 hfetch 1 ,core_usb_addr -0x3e13 014156 rtnbit0 7 -0x3e14 014157 jam usb_ep2_ms ,mem_usb_ep2_data -0x3e15 014158 setarg ms_report_id -0x3e16 014159 store 1 ,mem_usb_mouse_data -0x3e17 014160 fetch 7 ,mem_mouse_key -0x3e18 014161 istore 7 ,contw -0x3e19 014162 rtn -: 014165 mouse_enable_clock_qdecoder: -0x3e1a 014166 hfetch 2 ,core_clkoff -0x3e1b 014167 set0 clock_off_qdecoder ,pdata -0x3e1c 014168 hstore 2 ,core_clkoff -0x3e1d 014169 rtn -: 014171 mouse_param_init: -0x3e1e 014172 setarg 0x8c00 -0x3e1f 014173 store 2 ,mem_ui_uuid_table -0x3e20 014174 setarg 0x8e7a -0x3e21 014175 store 2 ,mem_ui_le_uuid_table -0x3e22 014176 setarg 0x2402 -0x3e23 014177 store 2 ,mem_fcomp_mul -0x3e24 014178 setarg 0x2580 -0x3e25 014179 store 3 ,mem_class -0x3e26 014180 jam 3 ,mem_lpm_mult_timeout -0x3e27 014181 jam 8 ,mem_lpm_overhead -0x3e28 014182 jam dpi_button_state_up ,mem_select_device_button_statue -0x3e29 014183 setarg 0x0200 -0x3e2a 014184 store 2 ,mem_lpm_interval -0x3e2b 014185 jam 0x17 ,mem_le_local_mtu -0x3e2c 014186 jam 0x17 ,mem_le_remote_mtu -0x3e2d 014188 setarg 0x0a77 -0x3e2e 014189 store 2 ,mem_spi_init_clk -0x3e2f 014205 setsect 0 ,0x306 -0x3e30 014206 setsect 1 ,0x4440 -0x3e31 014207 setsect 2 ,0x10000 -0x3e32 014208 setsect 3 ,0x4408 -0x3e33 014209 store 9 ,mem_all_uuid_16bits -0x3e34 014210 setsect 0 ,0x1224 -0x3e35 014211 setsect 1 ,0x4000 -0x3e36 014212 setsect 2 ,0x0 -0x3e37 014213 istore 5 ,contw -0x3e38 014215 setsect 0 ,0x3ffff -0x3e39 014216 setsect 1 ,0x2fe23 -0x3e3a 014217 setsect 2 ,0x199d9 -0x3e3b 014218 setsect 3 ,0x20d -0x3e3c 014219 store 8 ,mem_features -0x3e3d 014221 setarg 0x012c -0x3e3e 014222 store 2 ,mem_24g_pairing_timer_count -0x3e3f 014223 call le_modified_name -0x3e40 014224 fetch mouse_flag_len ,mem_mouse_flag -0x3e41 014225 rtnbit0 mouse_enable_gpio_control_adc_sensor -0x3e42 014226 call mouse_sensor_set_angle -0x3e43 014227 branch mouse_select_adc -: 014229 mouse_sensor_set_angle: -0x3e44 014230 fetcht 1 ,mem_select_sensor_angle_gpio -0x3e45 014231 call gpio_config_input -0x3e46 014232 fetcht 1 ,mem_select_sensor_angle_gpio -0x3e47 014233 call gpio_get_bit -0x3e48 014234 jam mouse_3clk_angle ,mem_config_sensor_angle -0x3e49 014235 rtn true -0x3e4a 014236 jam mouse_12clk_angle ,mem_config_sensor_angle -0x3e4b 014237 rtn -: 014239 mouse_select_adc: -0x3e4c 014240 fetcht 1 ,mem_select_adc_gpio -0x3e4d 014241 call gpio_config_input -0x3e4e 014242 fetcht 1 ,mem_select_adc_gpio -0x3e4f 014243 call gpio_get_bit -0x3e50 014244 jam adc_config_vinlpm ,mem_adc_config_flag -0x3e51 014245 rtn true -0x3e52 014246 jam adc_config_gpio ,mem_adc_config_flag -0x3e53 014247 rtn -: 014250 mouse_adc_init: -0x3e54 014251 fetch 1 ,mem_adc_config_flag -0x3e55 014252 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm -0x3e56 014253 beq adc_config_hvin ,mouse_adc_init_data_hvin -0x3e57 014254 beq adc_config_gpio ,mouse_adc_init_data_io -0x3e58 014255 branch mouse_adc_init_data_vinlpm -: 014257 mouse_adc_init_data_vinlpm: -0x3e59 014258 fetcht 2 ,mem_2v_adc_vinlpm_data -0x3e5a 014259 fetch 2 ,mem_3v_adc_vinlpm_data -0x3e5b 014260 isub temp ,pdata -0x3e5c 014261 mul32 pdata ,20 ,pdata -0x3e5d 014262 div pdata ,100 -0x3e5e 014263 call wait_div_end -0x3e5f 014264 quotient pdata -0x3e60 014265 store 2 ,mem_adc_reference_voltage -0x3e61 014266 rtn -: 014267 mouse_adc_init_data_hvin: -0x3e62 014268 fetcht 2 ,mem_1v_adc_hvin_data -0x3e63 014269 fetch 2 ,mem_5v_adc_hvin_data -0x3e64 014270 isub temp ,pdata -0x3e65 014271 mul32 pdata ,230 ,pdata -0x3e66 014272 div pdata ,400 -0x3e67 014273 call wait_div_end -0x3e68 014274 quotient pdata -0x3e69 014275 store 2 ,mem_adc_reference_voltage -0x3e6a 014276 rtn -: 014277 mouse_adc_init_data_io: -0x3e6b 014278 fetch 2 ,mem_1v_adc_io_data -0x3e6c 014279 store 2 ,mem_adc_reference_voltage -0x3e6d 014280 rtn -: 014281 mouse_gpio_init: -0x3e6e 014282 fetcht 1 ,mem_eeprom_wp_gpio -0x3e6f 014283 call gpio_config_output -0x3e70 014284 call usb_offline_check_init -0x3e71 014285 fetcht 1 ,mem_lbutton_gpio -0x3e72 014286 call gpio_config_input -0x3e73 014287 fetcht 1 ,mem_rbutton_gpio -0x3e74 014288 call gpio_config_input -0x3e75 014289 fetcht 1 ,mem_mbutton_gpio -0x3e76 014290 call gpio_config_input -0x3e77 014291 fetcht 1 ,mem_sensor_data_gpio -0x3e78 014292 call gpio_config_input -0x3e79 014294 fetcht 1 ,mem_sensor_reset_gpio -0x3e7a 014295 call gpio_config_output -0x3e7b 014297 fetcht 1 ,mem_whee_a_data_gpio -0x3e7c 014298 call gpio_config_input -0x3e7d 014300 fetcht 1 ,mem_whee_b_data_gpio -0x3e7e 014301 call gpio_config_input -0x3e7f 014303 fetcht 1 ,mem_whee_ta_data_gpio -0x3e80 014304 call gpio_config_input -0x3e81 014305 fetcht 1 ,mem_whee_tb_data_gpio -0x3e82 014306 call gpio_config_input -0x3e83 014308 fetcht 1 ,mem_bk_button_gpio -0x3e84 014309 call gpio_config_input -0x3e85 014310 fetcht 1 ,mem_fw_button_gpio -0x3e86 014311 call gpio_config_input -0x3e87 014313 fetcht 1 ,mem_config_low_voltage_alarm_gpio -0x3e88 014314 call gpio_config_output -0x3e89 014316 fetcht 1 ,mem_config_device1_led_gpio -0x3e8a 014317 call gpio_config_output -0x3e8b 014319 fetcht 1 ,mem_config_device2_led_gpio -0x3e8c 014320 call gpio_config_output -0x3e8d 014322 fetcht 1 ,mem_config_device3_led_gpio -0x3e8e 014323 call gpio_config_output -0x3e8f 014325 fetcht 1 ,mem_dpi_led_gpio -0x3e90 014326 call gpio_config_output -0x3e91 014328 fetcht 1 ,mem_config_select_device_button_gpio -0x3e92 014329 call gpio_config_input -0x3e93 014331 fetcht 1 ,mem_config_bt_button_gpio -0x3e94 014332 call gpio_config_input -0x3e95 014334 fetcht 1 ,mem_dpi_button_gpio -0x3e96 014335 branch gpio_config_input -: 014337 mouse_wheel_gpio_set_wake: -0x3e97 014338 fetcht 1 ,mem_whee_a_data_gpio -0x3e98 014339 call gpio_set_wake_by_current_state -0x3e99 014340 fetcht 1 ,mem_whee_b_data_gpio -0x3e9a 014341 call gpio_set_wake_by_current_state -0x3e9b 014342 fetcht 1 ,mem_whee_ta_data_gpio -0x3e9c 014343 call gpio_set_wake_by_current_state -0x3e9d 014344 fetcht 1 ,mem_whee_tb_data_gpio -0x3e9e 014345 branch gpio_set_wake_by_current_state -: 014347 mouse_before_hibernate_wheel_gpio_set: -0x3e9f 014348 fetcht 1 ,mem_whee_a_data_gpio -0x3ea0 014349 call mouse_gpio_set_pupd_by_input -0x3ea1 014350 fetcht 1 ,mem_whee_b_data_gpio -0x3ea2 014351 call mouse_gpio_set_pupd_by_input -0x3ea3 014352 fetcht 1 ,mem_whee_ta_data_gpio -0x3ea4 014353 call mouse_gpio_set_pupd_by_input -0x3ea5 014354 fetcht 1 ,mem_whee_tb_data_gpio -0x3ea6 014355 branch mouse_gpio_set_pupd_by_input -: 014357 mouse_gpio_set_pupd_by_input: -0x3ea7 014358 sub temp ,ui_button_gpio_disable ,null -0x3ea8 014359 rtn zero -0x3ea9 014360 and temp ,0x7f ,queue -0x3eaa 014361 hfetch 4 ,core_gpio_in -0x3eab 014362 qisolate1 pdata -0x3eac 014363 hfetch 4 ,core_gpio_pu0 -0x3ead 014364 qsetflag true ,pdata -0x3eae 014365 hstore 4 ,core_gpio_pu0 -0x3eaf 014366 hfetch 4 ,core_gpio_pd0 -0x3eb0 014367 nqsetflag true ,pdata -0x3eb1 014368 hstore 4 ,core_gpio_pd0 -0x3eb2 014369 rtn -: 014371 mouse_before_hibernate: -0x3eb3 014372 enable user -0x3eb4 014373 hfetch 4 ,0x8138 -0x3eb5 014374 setflag user ,26 ,pdata -0x3eb6 014375 hstore 4 ,core_lpm_reg -0x3eb7 014376 call lpm_write_ctrl -0x3eb8 014377 call mouse_devce_led_off -0x3eb9 014378 call mouse_before_hibernate_wheel_gpio_set -0x3eba 014380 branch mouse_lpm_before_common -: 014384 mouse_process_lpm_before: -0x3ebb 014385 call mouse_lpm_before_common -0x3ebc 014386 fetch 1 ,mem_lpm_current_mult -0x3ebd 014387 nrtn blank -0x3ebe 014388 branch gpio_clr_wake -: 014390 mouse_lpm_before_common: -0x3ebf 014391 call mouse_wheel_check -0x3ec0 014392 arg mouse_spi1_clk_gpio ,temp -0x3ec1 014393 fetch mouse_flag_len ,mem_mouse_flag -0x3ec2 014394 isolate1 mouse_enable_spi2 ,pdata -0x3ec3 014395 call mouse_spi_clk_gpio ,true -0x3ec4 014396 call gpio_config_output -0x3ec5 014397 call twspi_disable -0x3ec6 014401 fetcht 1 ,mem_lbutton_gpio -0x3ec7 014402 call gpio_set_wake_by_current_state -0x3ec8 014403 fetcht 1 ,mem_rbutton_gpio -0x3ec9 014404 call gpio_set_wake_by_current_state -0x3eca 014405 fetcht 1 ,mem_mbutton_gpio -0x3ecb 014406 call gpio_set_wake_by_current_state -0x3ecc 014408 fetcht 1 ,mem_bk_button_gpio -0x3ecd 014409 call gpio_set_wake_by_current_state -0x3ece 014410 fetcht 1 ,mem_fw_button_gpio -0x3ecf 014411 call gpio_set_wake_by_current_state -0x3ed0 014412 fetcht 1 ,mem_dpi_button_gpio -0x3ed1 014413 call gpio_set_wake_by_current_state -0x3ed2 014414 fetcht 1 ,mem_config_select_device_button_gpio -0x3ed3 014415 call gpio_set_wake_by_current_state -0x3ed4 014416 fetcht 1 ,mem_whee_a_data_gpio -0x3ed5 014417 call gpio_set_wake_by_current_state -0x3ed6 014418 fetcht 1 ,mem_whee_b_data_gpio -0x3ed7 014419 call gpio_set_wake_by_current_state -0x3ed8 014420 fetcht 1 ,mem_whee_ta_data_gpio -0x3ed9 014421 call gpio_set_wake_by_current_state -0x3eda 014422 fetcht 1 ,mem_whee_tb_data_gpio -0x3edb 014423 call gpio_set_wake_by_current_state -0x3edc 014424 fetcht 1 ,mem_sensor_data_gpio -0x3edd 014425 branch gpio_set_wake -: 014429 mouse_spi_clk_gpio: -0x3ede 014430 arg mouse_spi2_clk_gpio ,temp -0x3edf 014431 rtn -: 014433 mouse_wheel_check: -0x3ee0 014434 bpatch patch1c_4 ,mem_patch1c -0x3ee1 014435 call mouse_t_wheel_scan -0x3ee2 014436 call mouse_wheel_scan -0x3ee3 014437 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3ee4 014438 fetcht 1 ,mem_wheel_tb_old_pinlevel -0x3ee5 014439 store 1 ,mem_wheel_tb_old_pinlevel -0x3ee6 014440 isub temp ,null -0x3ee7 014441 nbranch app_lpm_wake_auto_lock ,zero -0x3ee8 014442 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3ee9 014443 fetcht 1 ,mem_mwheel_b_old_pinlevel -0x3eea 014444 store 1 ,mem_mwheel_b_old_pinlevel -0x3eeb 014445 isub temp ,null -0x3eec 014446 nbranch app_lpm_wake_auto_lock ,zero -0x3eed 014447 rtn -: 014448 mouse_t_wheel_scan: -0x3eee 014449 fetch 1 ,mem_whee_ta_data_gpio -0x3eef 014450 rtneq gpio_disable -0x3ef0 014451 arg 0 ,rega -0x3ef1 014452 fetcht 1 ,mem_whee_ta_data_gpio -0x3ef2 014453 call gpio_get_bit -0x3ef3 014454 setflag true ,0 ,rega -0x3ef4 014455 fetcht 1 ,mem_whee_tb_data_gpio -0x3ef5 014456 call gpio_get_bit -0x3ef6 014457 setflag true ,1 ,rega -0x3ef7 014458 copy rega ,pdata -0x3ef8 014459 store 1 ,mem_wheel_tb_new_pinlevel -0x3ef9 014460 beq 0x01 ,mouse_t_wheel_scan_judge1 -0x3efa 014461 beq 0x02 ,mouse_t_wheel_scan_judge2 -0x3efb 014462 fetch 1 ,mem_wheel_tog -0x3efc 014463 bbit1 7 ,mouse_t_wheel_scan_judge3 -0x3efd 014464 rtn -: 014466 mouse_t_wheel_scan_judge1: -0x3efe 014467 fetch 1 ,mem_wheel_tb_old_pinlevel -0x3eff 014468 beq 0 ,mouse_t_wheel_scan_judge11 -0x3f00 014469 beq 3 ,mouse_t_wheel_scan_judge12 -0x3f01 014470 rtn -: 014471 mouse_t_wheel_scan_judge2: -0x3f02 014472 fetch 1 ,mem_wheel_tb_old_pinlevel -0x3f03 014473 beq 0 ,mouse_t_wheel_scan_judge21 -0x3f04 014474 beq 3 ,mouse_t_wheel_scan_judge22 -0x3f05 014475 rtn -: 014476 mouse_t_wheel_scan_judge11: -0x3f06 014477 jam 0x82 ,mem_wheel_tog -0x3f07 014478 rtn -: 014479 mouse_t_wheel_scan_judge12: -0x3f08 014480 jam 0x81 ,mem_wheel_tog -0x3f09 014481 rtn -: 014482 mouse_t_wheel_scan_judge21: -0x3f0a 014483 jam 0x80 ,mem_wheel_tog -0x3f0b 014484 rtn -: 014485 mouse_t_wheel_scan_judge22: -0x3f0c 014486 jam 0x83 ,mem_wheel_tog -0x3f0d 014487 rtn -: 014488 mouse_t_wheel_scan_judge3: -0x3f0e 014489 fetch 1 ,mem_wheel_tog -0x3f0f 014490 set0 7 ,pdata -0x3f10 014491 store 1 ,mem_wheel_tog -0x3f11 014492 beq 0 ,mouse_t_wheel_scan_judge30 -0x3f12 014493 beq 1 ,mouse_t_wheel_scan_judge31 -0x3f13 014494 beq 2 ,mouse_t_wheel_scan_judge32 -0x3f14 014495 beq 3 ,mouse_t_wheel_scan_judge33 -0x3f15 014496 rtn -: 014497 mouse_t_wheel_scan_judge30: -0x3f16 014498 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f17 014499 beq 3 ,mouse_wheel_t_forward -0x3f18 014500 rtn -: 014501 mouse_t_wheel_scan_judge31: -0x3f19 014502 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f1a 014503 beq 0 ,mouse_wheel_t_forward -0x3f1b 014504 rtn -: 014505 mouse_t_wheel_scan_judge32: -0x3f1c 014506 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f1d 014507 beq 3 ,mouse_wheel_t_back -0x3f1e 014508 rtn -: 014509 mouse_t_wheel_scan_judge33: -0x3f1f 014510 fetch 1 ,mem_wheel_tb_new_pinlevel -0x3f20 014511 beq 0 ,mouse_wheel_t_back -0x3f21 014512 rtn -: 014513 mouse_wheel_t_forward: -0x3f22 014514 fetch 1 ,mem_mouse_tz_data_count1 -0x3f23 014515 increase 1 ,pdata -0x3f24 014516 store 1 ,mem_mouse_tz_data_count1 -0x3f25 014517 sub pdata ,1 ,null -0x3f26 014518 rtn positive -0x3f27 014519 jam 0 ,mem_mouse_tz_data_count1 -0x3f28 014520 fetch 1 ,mem_mouse_tz_data -0x3f29 014521 increase 1 ,pdata -0x3f2a 014522 store 1 ,mem_mouse_tz_data -0x3f2b 014523 rtn -: 014524 mouse_wheel_t_back: -0x3f2c 014525 fetch 1 ,mem_mouse_tz_data_count -0x3f2d 014526 increase 1 ,pdata -0x3f2e 014527 store 1 ,mem_mouse_tz_data_count -0x3f2f 014528 sub pdata ,1 ,null -0x3f30 014529 rtn positive -0x3f31 014530 jam 0 ,mem_mouse_tz_data_count -0x3f32 014531 fetch 1 ,mem_mouse_tz_data -0x3f33 014532 increase -1 ,pdata -0x3f34 014533 store 1 ,mem_mouse_tz_data -0x3f35 014534 rtn -: 014537 mouse_wheel_scan: -0x3f36 014538 fetch 1 ,mem_whee_a_data_gpio -0x3f37 014539 rtneq gpio_disable -0x3f38 014540 arg 0 ,rega -0x3f39 014541 fetcht 1 ,mem_whee_a_data_gpio -0x3f3a 014542 call gpio_get_bit -0x3f3b 014543 setflag true ,0 ,rega -0x3f3c 014544 fetcht 1 ,mem_whee_b_data_gpio -0x3f3d 014545 call gpio_get_bit -0x3f3e 014546 setflag true ,1 ,rega -0x3f3f 014547 copy rega ,pdata -0x3f40 014548 store 1 ,mem_mwheel_b_new_pinlevel -0x3f41 014549 beq 0x01 ,mouse_wheel_scan_judge1 -0x3f42 014550 beq 0x02 ,mouse_wheel_scan_judge2 -0x3f43 014551 fetch 1 ,mem_mwheel_tog -0x3f44 014552 bbit1 7 ,mouse_wheel_scan_judge3 -0x3f45 014553 rtn -: 014555 mouse_wheel_scan_judge1: -0x3f46 014556 fetch 1 ,mem_mwheel_b_old_pinlevel -0x3f47 014557 beq 0 ,mouse_wheel_scan_judge11 -0x3f48 014558 beq 3 ,mouse_wheel_scan_judge12 -0x3f49 014559 rtn -: 014560 mouse_wheel_scan_judge2: -0x3f4a 014561 fetch 1 ,mem_mwheel_b_old_pinlevel -0x3f4b 014562 beq 0 ,mouse_wheel_scan_judge21 -0x3f4c 014563 beq 3 ,mouse_wheel_scan_judge22 -0x3f4d 014564 rtn -: 014565 mouse_wheel_scan_judge11: -0x3f4e 014566 jam 0x82 ,mem_mwheel_tog -0x3f4f 014567 rtn -: 014568 mouse_wheel_scan_judge12: -0x3f50 014569 jam 0x81 ,mem_mwheel_tog -0x3f51 014570 rtn -: 014571 mouse_wheel_scan_judge21: -0x3f52 014572 jam 0x80 ,mem_mwheel_tog -0x3f53 014573 rtn -: 014574 mouse_wheel_scan_judge22: -0x3f54 014575 jam 0x83 ,mem_mwheel_tog -0x3f55 014576 rtn -: 014577 mouse_wheel_scan_judge3: -0x3f56 014578 fetch 1 ,mem_mwheel_tog -0x3f57 014579 set0 7 ,pdata -0x3f58 014580 store 1 ,mem_mwheel_tog -0x3f59 014581 beq 0 ,mouse_wheel_scan_judge30 -0x3f5a 014582 beq 1 ,mouse_wheel_scan_judge31 -0x3f5b 014583 beq 2 ,mouse_wheel_scan_judge32 -0x3f5c 014584 beq 3 ,mouse_wheel_scan_judge33 -0x3f5d 014585 rtn -: 014586 mouse_wheel_scan_judge30: -0x3f5e 014587 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f5f 014588 beq 3 ,mouse_wheel_forward -0x3f60 014589 rtn -: 014590 mouse_wheel_scan_judge31: -0x3f61 014591 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f62 014592 beq 0 ,mouse_wheel_forward -0x3f63 014593 rtn -: 014594 mouse_wheel_scan_judge32: -0x3f64 014595 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f65 014596 beq 3 ,mouse_wheel_back -0x3f66 014597 rtn -: 014598 mouse_wheel_scan_judge33: -0x3f67 014599 fetch 1 ,mem_mwheel_b_new_pinlevel -0x3f68 014600 beq 0 ,mouse_wheel_back -0x3f69 014601 rtn -: 014602 mouse_wheel_forward: -0x3f6a 014603 jam 0 ,mem_mouse_z_data_count1 -0x3f6b 014604 fetch 1 ,mem_mouse_z_data -0x3f6c 014605 increase 1 ,pdata -0x3f6d 014606 store 1 ,mem_mouse_z_data -0x3f6e 014607 rtn -: 014608 mouse_wheel_back: -0x3f6f 014609 jam 0 ,mem_mouse_z_data_count -0x3f70 014610 fetch 1 ,mem_mouse_z_data -0x3f71 014611 increase -1 ,pdata -0x3f72 014612 store 1 ,mem_mouse_z_data -0x3f73 014613 rtn -: 014616 mouse_hid_connected: -0x3f74 014617 setarg hid_handshake_timeout -0x3f75 014618 store 1 ,mem_hid_handshake_timer_count -0x3f76 014619 rtn -: 014621 mouse_send_process: -0x3f77 014622 fetch 1 ,mem_app_handshake_flag -0x3f78 014623 rtn blank -0x3f79 014624 call l2cap_malloc_is_fifo_nearly_full -0x3f7a 014625 nrtn blank -0x3f7b 014626 fetch mouse_flag_len ,mem_mouse_flag -0x3f7c 014627 bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data -0x3f7d 014628 bbit1 mouse_select_device_flag ,mouse_send_empty_data -0x3f7e 014629 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data -0x3f7f 014630 call mouse_motion -0x3f80 014631 nrtn user -: 014632 mouse_send_data: -0x3f81 014633 arg 9 ,rega -0x3f82 014634 call hid_malloc_tx_buff -0x3f83 014635 fetch 2 ,mem_hid_int_remote_cid -0x3f84 014636 istore 2 ,contw -0x3f85 014637 setarg 0x02a1 -0x3f86 014638 istore 2 ,contw -0x3f87 014639 fetch 7 ,mem_mouse_key -0x3f88 014640 istore 7 ,contw -0x3f89 014641 rtn -: 014644 mouse_send_empty_data: -0x3f8a 014645 setarg 0 -0x3f8b 014646 store 7 ,mem_mouse_key -0x3f8c 014647 branch mouse_send_data -: 014650 mouse_no_data_timer_init: -0x3f8d 014651 fetch 2 ,mem_mouse_no_data_timeout -0x3f8e 014652 store 2 ,mem_mouse_no_data_timer -0x3f8f 014653 rtn -: 014656 mouse_fill_data_le: -0x3f90 014657 bpatch patch1c_5 ,mem_patch1c -0x3f91 014658 arg 7 ,rega -0x3f92 014659 fetcht 2 ,mem_le_notify_handle -0x3f93 014660 call le_att_malloc_tx_notify -0x3f94 014661 fetch 7 ,mem_mouse_key -0x3f95 014662 istore 7 ,contw -0x3f96 014663 rtn -: 014665 mouse_motion: -0x3f97 014666 bpatch patch1c_6 ,mem_patch1c -0x3f98 014667 disable user -0x3f99 014668 setarg 0 -0x3f9a 014669 store 6 ,mem_mouse_x -0x3f9b 014670 call mouse_cheak_sensor_data -0x3f9c 014671 call mouse_zwheel -0x3f9d 014672 call mouse_t_zwheel -0x3f9e 014673 call mouse_key -0x3f9f 014674 nrtn user -0x3fa0 014675 call mouse_no_data_timer_init -0x3fa1 014676 arg mouse_statue_up_flag ,queue -0x3fa2 014677 branch mouse_enable_function_flag -: 014679 motion_6clk_direction_dispose: -0x3fa3 014680 fetch 2 ,mem_mouse_x -0x3fa4 014681 sub pdata ,0 ,pdata -0x3fa5 014682 store 2 ,mem_mouse_x -0x3fa6 014683 branch enable_user -: 014684 motion_12clk_direction_dispose: -0x3fa7 014685 fetch 2 ,mem_mouse_y -0x3fa8 014686 sub pdata ,0 ,pdata -0x3fa9 014687 store 2 ,mem_mouse_y -0x3faa 014688 branch enable_user -: 014689 motion_9clk_direction_dispose: -0x3fab 014690 fetch 2 ,mem_mouse_y -0x3fac 014691 sub pdata ,0 ,pdata -0x3fad 014692 store 2 ,mem_mouse_y -0x3fae 014693 fetch 2 ,mem_mouse_x -0x3faf 014694 sub pdata ,0 ,pdata -0x3fb0 014695 store 2 ,mem_mouse_x -0x3fb1 014696 call mouse_sensor_data_swap_places -0x3fb2 014697 branch enable_user -: 014698 motion_3clk_direction_dispose: -0x3fb3 014699 call mouse_sensor_data_swap_places -0x3fb4 014700 branch enable_user -: 014701 mouse_cheak_sensor_data: -0x3fb5 014702 fetch 1 ,mem_spi_write_flash_sm -0x3fb6 014703 rtnne flash_sm_no_buys -0x3fb7 014704 fetch 1 ,mem_config_sensor_type -0x3fb8 014705 beq p3205 ,mouse_p32xx_sensor_motion -0x3fb9 014706 beq p3065 ,mouse_p32xx_sensor_motion -0x3fba 014707 beq ka8 ,mouse_p32xx_sensor_motion -0x3fbb 014708 beq p3204 ,mouse_p32xx_sensor_motion -0x3fbc 014709 beq p3212 ,mouse_p3212_sensor_motion -0x3fbd 014710 beq p3610 ,mouse_p3610_sensor_motion -0x3fbe 014711 beq p3065_xy ,mouse_p32xx_sensor_motion -0x3fbf 014712 branch mouse_p32xx_sensor_motion -: 014714 mouse_clear_sensor_data: -0x3fc0 014715 fetch 1 ,mem_mouse_move_flag -0x3fc1 014716 call mouse_read_sensor_common ,blank -0x3fc2 014717 jam 1 ,mem_mouse_move_flag -0x3fc3 014718 rtn -: 014721 mouse_p3212_sensor_motion: -0x3fc4 014722 call mouse_clear_sensor_data -0x3fc5 014723 fetcht 1 ,mem_sensor_data_gpio -0x3fc6 014724 call gpio_get_bit -0x3fc7 014725 nrtn true -: 014726 mouse_p3212_sensor_motion_next: -0x3fc8 014727 setarg pan_reg_pid_l -0x3fc9 014728 call twspi_read -0x3fca 014729 bne p32xx_id1 ,mouse_twspi_reset -0x3fcb 014730 setarg pan_reg_motion_staus -0x3fcc 014731 call twspi_read -0x3fcd 014732 rtnbit0 7 -0x3fce 014733 call mouse_read_sensor_common -0x3fcf 014734 call mouse_read_3212sensor_xy_high -0x3fd0 014735 store 1 ,mem_mouse_xy_h -0x3fd1 014736 rshift4 pdata ,pdata -0x3fd2 014737 call extsign_bit3 -0x3fd3 014738 store 1 ,mem_mouse_x + 1 -0x3fd4 014739 fetch 1 ,mem_mouse_xy_h -0x3fd5 014740 and pdata ,0x0f ,pdata -0x3fd6 014741 call extsign_bit3 -0x3fd7 014742 store 1 ,mem_mouse_y + 1 -0x3fd8 014743 fetch 1 ,mem_config_sensor_angle -0x3fd9 014744 beq mouse_6clk_angle ,motion_6clk_direction_dispose -0x3fda 014745 beq mouse_9clk_angle ,motion_9clk_direction_dispose -0x3fdb 014746 beq mouse_12clk_angle ,motion_12clk_direction_dispose -0x3fdc 014747 beq mouse_3clk_angle ,motion_3clk_direction_dispose -0x3fdd 014748 rtn -: 014750 mouse_read_3212sensor_xy_high: -0x3fde 014751 setarg 0x12 -0x3fdf 014752 branch twspi_read -: 014754 mouse_p3065_judge: -0x3fe0 014755 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 -0x3fe1 014756 branch mouse_twspi_reset -: 014758 mouse_p32xx_sensor_motion: -0x3fe2 014759 call mouse_clear_sensor_data -0x3fe3 014760 disable user -0x3fe4 014761 fetcht 1 ,mem_sensor_data_gpio -0x3fe5 014762 call gpio_get_bit -0x3fe6 014763 nrtn true -: 014764 mouse_p32xx_sensor_motion_2: -0x3fe7 014765 setarg pan_reg_pid_l -0x3fe8 014766 call twspi_read -0x3fe9 014767 bne p32xx_id1 ,mouse_p3065_judge -: 014768 mouse_p32xx_sensor_motion_1: -0x3fea 014769 setarg pan_reg_motion_staus -0x3feb 014770 call twspi_read -0x3fec 014771 rtnbit0 7 -0x3fed 014772 call mouse_read_sensor_common -0x3fee 014773 fetch 1 ,mem_mouse_x -0x3fef 014774 call extsign -0x3ff0 014775 store 2 ,mem_mouse_x -0x3ff1 014776 fetch 1 ,mem_mouse_y -0x3ff2 014777 call extsign -0x3ff3 014778 store 2 ,mem_mouse_y -0x3ff4 014779 fetch 1 ,mem_config_sensor_angle -0x3ff5 014780 beq mouse_6clk_angle ,motion32xx_6clk_direction_selection -0x3ff6 014781 beq mouse_9clk_angle ,motion32xx_9clk_direction_selection -0x3ff7 014782 beq mouse_12clk_angle ,motion32xx_12clk_direction_selection -0x3ff8 014783 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection -0x3ff9 014784 rtn -: 014786 motion32xx_6clk_direction_selection: -0x3ffa 014787 call motion_6clk_direction_dispose -0x3ffb 014788 branch mouse_sensor_sdio_low -: 014789 motion32xx_9clk_direction_selection: -0x3ffc 014790 call motion_9clk_direction_dispose -0x3ffd 014791 branch mouse_sensor_sdio_low -: 014792 motion32xx_12clk_direction_selection: -0x3ffe 014793 call motion_12clk_direction_dispose -0x3fff 014794 branch mouse_sensor_sdio_low -: 014795 motion32xx_3clk_direction_selection: -0x4000 014796 call motion_3clk_direction_dispose -0x4001 014797 branch mouse_sensor_sdio_low -: 014799 mouse_sensor_data_swap_places: -0x4002 014800 fetch 2 ,mem_mouse_y -0x4003 014801 fetcht 2 ,mem_mouse_x -0x4004 014802 store 2 ,mem_mouse_x -0x4005 014803 storet 2 ,mem_mouse_y -0x4006 014804 rtn -: 014806 mouse_p3610sensor_read: -0x4007 014807 call spi_ncs_enable -0x4008 014808 nop 100 -0x4009 014809 copy regb ,pdata -0x400a 014810 call twspi_read -0x400b 014811 copy pdata ,regb -0x400c 014812 call spi_ncs_disable -0x400d 014813 nop 100 -0x400e 014814 copy regb ,pdata -0x400f 014815 rtn -: 014816 mouse_p3610_sensor_motion: -0x4010 014817 disable user -0x4011 014818 fetcht 1 ,mem_sensor_data_gpio -0x4012 014819 call gpio_get_bit -0x4013 014820 nrtn true -0x4014 014821 arg pan_reg_motion_staus ,regb -0x4015 014822 call mouse_p3610sensor_read -0x4016 014823 rtnbit0 7 -0x4017 014824 arg pan_reg_pid_l ,regb -0x4018 014825 call mouse_p3610sensor_read -0x4019 014826 store 1 ,mem_sensor_id1 -0x401a 014827 bne p3610_id1 ,mouse_init_3610sensor_reset -0x401b 014828 fetch 1 ,mem_mouse_move_flag -0x401c 014829 call mouse_read_sensor3610_data ,blank -0x401d 014830 jam 1 ,mem_mouse_move_flag -0x401e 014831 call mouse_read_sensor3610_data -0x401f 014832 fetch 1 ,mem_mouse_xy_h -0x4020 014833 rshift4 pdata ,pdata -0x4021 014834 call extsign_bit3 -0x4022 014835 store 1 ,mem_mouse_x + 1 -0x4023 014836 fetch 1 ,mem_mouse_xy_h -0x4024 014837 and pdata ,0x0f ,pdata -0x4025 014838 call extsign_bit3 -0x4026 014839 store 1 ,mem_mouse_y + 1 -0x4027 014840 fetch 1 ,mem_config_sensor_angle -0x4028 014841 beq 0 ,motion3610_6clk_direction_selection -0x4029 014842 beq 1 ,motion3610_9clk_direction_selection -0x402a 014843 beq 2 ,motion3610_12clk_direction_selection -0x402b 014844 beq 3 ,motion3610_3clk_direction_selection -0x402c 014845 rtn -: 014847 mouse_3610_smart_select: -0x402d 014848 fetch 1 ,mem_sensor_smart_flag -0x402e 014849 beq p3610_smart_enable ,mouse_3610_smart_disable -0x402f 014850 beq p3610_smart_disable ,mouse_3610_smart_enable -0x4030 014851 rtn -: 014854 motion3610_6clk_direction_selection: -0x4031 014855 call motion_6clk_direction_dispose -0x4032 014856 branch mouse_3610_smart_select -: 014858 motion3610_12clk_direction_selection: -0x4033 014859 call motion_12clk_direction_dispose -0x4034 014860 branch mouse_3610_smart_select -: 014862 motion3610_9clk_direction_selection: -0x4035 014863 call motion_9clk_direction_dispose -0x4036 014864 branch mouse_3610_smart_select -: 014866 motion3610_3clk_direction_selection: -0x4037 014867 call motion_3clk_direction_dispose -0x4038 014868 branch mouse_3610_smart_select -: 014870 mouse_read_sensor3610_data: -0x4039 014871 call spi_ncs_enable -0x403a 014872 call mouse_read_sensor_common -0x403b 014873 arg 5 ,pdata -0x403c 014874 call twspi_read -0x403d 014875 store 1 ,mem_mouse_xy_h -0x403e 014876 arg 7 ,pdata -0x403f 014877 call twspi_read -0x4040 014878 store 1 ,mem_sensor_shutter_hi -0x4041 014879 arg 8 ,pdata -0x4042 014880 call twspi_read -0x4043 014881 store 1 ,mem_sensor_shutter_lo -0x4044 014882 branch spi_ncs_disable -: 014885 mouse_3610_smart_enable: -0x4045 014886 fetch 1 ,mem_sensor_shutter_hi -0x4046 014887 rtnne 0 -0x4047 014888 fetch 1 ,mem_sensor_shutter_lo -0x4048 014889 sub pdata ,45 ,null -0x4049 014890 rtn positive -0x404a 014891 jam p3610_smart_enable ,mem_sensor_smart_flag -0x404b 014892 setarg 0xba41 -0x404c 014893 call sensor_write -0x404d 014894 setarg 0x0032 -0x404e 014895 call sensor_write -0x404f 014896 setarg 0xb541 -0x4050 014897 branch sensor_write -: 014898 mouse_3610_smart_disable: -0x4051 014899 fetch 1 ,mem_sensor_shutter_hi -0x4052 014900 rtnne 0 -0x4053 014901 fetch 1 ,mem_sensor_shutter_lo -0x4054 014902 sub pdata ,45 ,null -0x4055 014903 nrtn positive -0x4056 014904 jam p3610_smart_disable ,mem_sensor_smart_flag -0x4057 014905 setarg 0xba41 -0x4058 014906 call sensor_write -0x4059 014907 setarg 0x8032 -0x405a 014908 call sensor_write -0x405b 014909 setarg 0xb541 -0x405c 014910 branch sensor_write -: 014914 mouse_read_sensor_common: -0x405d 014915 arg pan_reg_delta_x ,pdata -0x405e 014916 call twspi_read -0x405f 014917 store 2 ,mem_mouse_x -0x4060 014918 arg pan_reg_delta_y ,pdata -0x4061 014919 call twspi_read -0x4062 014920 store 2 ,mem_mouse_y -0x4063 014921 rtn -: 014923 mouse_set_qdecoder_x: -0x4064 014924 arg mouse_default_xa_gpio ,temp -0x4065 014925 call gpio_config_input -0x4066 014926 arg mouse_default_xa_gpio ,temp -0x4067 014927 call gpio_get_bit -0x4068 014928 rtn true -0x4069 014929 hfetch 1 ,core_qdec_cntx -0x406a 014930 set1 4 ,pdata -0x406b 014931 hstore 1 ,core_qdec_cntx -0x406c 014932 rtn -: 014934 mouse_hardware_zwheel: -0x406d 014935 fetcht 1 ,mem_mouse_z_data -0x406e 014936 hfetch 1 ,core_qdec_cntx -0x406f 014937 iadd temp ,pdata -0x4070 014938 rtn blank -0x4071 014939 store 1 ,mem_mouse_z -0x4072 014940 jam 0 ,mem_mouse_z_data -0x4073 014941 branch enable_user -: 014942 mouse_hardware_zwheel_beforelpm: -0x4074 014943 fetcht 1 ,mem_mouse_z_data -0x4075 014944 hfetch 1 ,core_qdec_cntx -0x4076 014945 iadd temp ,pdata -0x4077 014946 store 1 ,mem_mouse_z_data -0x4078 014947 rtn -: 014948 mouse_zwheel: -0x4079 014949 fetch 1 ,mem_mouse_z_data -0x407a 014950 rtn blank -0x407b 014951 store 1 ,mem_mouse_z -0x407c 014952 jam 0 ,mem_mouse_z_data -0x407d 014953 branch enable_user -: 014955 mouse_t_zwheel: -0x407e 014956 fetch 1 ,mem_mouse_tz_data -0x407f 014957 rtn blank -0x4080 014958 store 1 ,mem_mouse_tz -0x4081 014959 jam 0 ,mem_mouse_tz_data -0x4082 014960 branch enable_user -: 014962 mouse_check_key_gpio: -0x4083 014963 arg 0 ,rega -0x4084 014964 fetcht 1 ,mem_lbutton_gpio -0x4085 014965 call gpio_get_bit -0x4086 014966 setflag true ,0 ,rega -0x4087 014967 fetcht 1 ,mem_rbutton_gpio -0x4088 014968 call gpio_get_bit -0x4089 014969 setflag true ,1 ,rega -0x408a 014970 fetcht 1 ,mem_mbutton_gpio -0x408b 014971 call gpio_get_bit -0x408c 014972 setflag true ,2 ,rega -0x408d 014973 call mouse_check_s_key_gpio -: 014974 mouse_check_key_gpio_output: -0x408e 014975 copy rega ,pdata -0x408f 014976 rtn -: 014977 mouse_check_s_key_gpio: -0x4090 014978 fetch 1 ,mem_bk_button_gpio -0x4091 014979 rtneq gpio_disable -0x4092 014980 fetcht 1 ,mem_bk_button_gpio -0x4093 014981 call gpio_get_bit -0x4094 014982 setflag true ,3 ,rega -0x4095 014983 fetcht 1 ,mem_fw_button_gpio -0x4096 014984 call gpio_get_bit -0x4097 014985 setflag true ,4 ,rega -0x4098 014986 rtn -: 014988 mouse_key: -0x4099 014989 call mouse_check_key_gpio -0x409a 014990 call mouse_set_mult -0x409b 014991 call mouse_24g_key -0x409c 014992 copy rega ,pdata -0x409d 014993 fetcht 1 ,mem_mouse_key -0x409e 014994 store 1 ,mem_mouse_key -0x409f 014995 ixor temp ,pdata -0x40a0 014996 sub pdata ,0 ,null -0x40a1 014997 rtn zero -0x40a2 014998 branch enable_user -: 015000 mouse_24g_key: -0x40a3 015001 rtnmark0 mark_24g -0x40a4 015002 copy rega ,pdata -0x40a5 015003 rtn blank -0x40a6 015004 store 1 ,mem_mouse_key -0x40a7 015005 branch enable_user -: 015008 mouse_set_mult: -0x40a8 015009 fetch 2 ,mem_ui_state_map -0x40a9 015010 bbit1 ui_state_ble_connected ,mouse_set_ble_mult -0x40aa 015011 fetch 2 ,mem_ui_state_map -0x40ab 015012 bbit1 ui_state_bt_connected ,mouse_set_bt_mult -0x40ac 015013 rtn -: 015014 mouse_set_ble_mult: -0x40ad 015015 copy rega ,pdata -0x40ae 015016 nbranch le_set_config_short_mult ,blank -0x40af 015017 branch le_clr_config_short_mult -: 015018 mouse_set_bt_mult: -0x40b0 015019 copy rega ,pdata -0x40b1 015020 nbranch classic_bt_set_mult_short_flag ,blank -0x40b2 015021 branch classic_bt_clr_mult_short_flag -: 015024 mouse_sensor_sdio_low: -0x40b3 015025 bpatch patch1c_7 ,mem_patch1c -0x40b4 015026 arg mouse_spi1_sdio_gpio ,temp -0x40b5 015027 fetch mouse_flag_len ,mem_mouse_flag -0x40b6 015028 isolate1 mouse_enable_spi2 ,pdata -0x40b7 015029 call mouse_sensor_sdio_low2 ,true -0x40b8 015030 call gpio_get_bit -0x40b9 015031 rtn true -0x40ba 015032 setarg 0x0a -0x40bb 015033 call twspi_read -0x40bc 015034 nop 1000 -0x40bd 015035 branch mouse_sensor_sdio_low -: 015036 mouse_sensor_sdio_low2: -0x40be 015037 arg mouse_spi2_sdio_gpio ,temp -0x40bf 015038 rtn -: 015040 mouse_spi_sdio_gpio_pollup: -0x40c0 015041 fetch mouse_flag_len ,mem_mouse_flag -0x40c1 015042 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup -: 015043 mouse_spi1_sdio_gpio_pollup: -0x40c2 015044 arg mouse_spi1_sdio_gpio ,temp -0x40c3 015045 branch gpio_config_input_without_wake -: 015046 mouse_spi2_sdio_gpio_pollup: -0x40c4 015047 arg mouse_spi2_sdio_gpio ,temp -0x40c5 015048 branch gpio_config_input_without_wake -: 015051 mouse_init_sunt: -0x40c6 015052 call mouse_spi_init -0x40c7 015053 rtn wake -0x40c8 015054 call mouse_spi_sdio_gpio_pollup -0x40c9 015055 fetch 1 ,mem_config_sensor_type -0x40ca 015056 beq p3610 ,mouse_init_3610sensor -: 015057 mouse_init_sensor: -0x40cb 015058 call mouse_read_sensor_id -0x40cc 015059 beq p32xx_id1 ,mouse_init_p32xx_id2_judge -0x40cd 015060 beq p3065_id1 ,mouse_p3065_init_param -0x40ce 015061 call mouse_twspi_reset -0x40cf 015062 nop 1000 -0x40d0 015063 branch mouse_init_sensor -: 015064 mouse_twspi_reset: -0x40d1 015065 bpatch patch1d_0 ,mem_patch1d -0x40d2 015066 fetch mouse_flag_len ,mem_mouse_flag -0x40d3 015067 bbit1 mouse_enable_spi2 ,twspi_reset2 -0x40d4 015068 branch twspi_reset -: 015070 mouse_init_3610sensor: -0x40d5 015071 call mouse_read_sensor_id -0x40d6 015072 beq p3610_id1 ,mouse_init_p3610 -0x40d7 015073 call mouse_init_3610sensor_reset -0x40d8 015074 branch mouse_init_3610sensor -: 015076 mouse_read_sensor_id: -0x40d9 015077 setarg pan_reg_pid_h -0x40da 015078 call twspi_read -0x40db 015079 store 1 ,mem_sensor_id2 -0x40dc 015080 setarg pan_reg_pid_l -0x40dd 015081 call twspi_read -0x40de 015082 store 1 ,mem_sensor_id1 -0x40df 015083 rtn -: 015084 mouse_init_p32xx_id2_judge: -0x40e0 015085 fetch 1 ,mem_sensor_id2 -0x40e1 015086 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param -0x40e2 015087 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param -0x40e3 015088 beq p3212_id2 ,mouse_3212_init_param -0x40e4 015089 beq pka8_id2 ,mouse_ka8_init_param -0x40e5 015090 rtn -: 015091 mouse_ka8_init_param: -0x40e6 015092 jam ka8 ,mem_config_sensor_type -0x40e7 015093 rtn -: 015094 mouse_p3065xy_init_param: -0x40e8 015095 jam p3065_xy ,mem_config_sensor_type -0x40e9 015096 rtn -: 015097 mouse_p3065_init_param: -0x40ea 015098 fetch 1 ,mem_sensor_id2 -0x40eb 015099 beq p3065_xy_id2 ,mouse_p3065xy_init_param -0x40ec 015100 jam p3065 ,mem_config_sensor_type -0x40ed 015101 rtn -: 015102 mouse_3212_init_param: -0x40ee 015103 jam p3212 ,mem_config_sensor_type -0x40ef 015104 call mouse_sensor_disable_wp -0x40f0 015105 setarg 0x3426 -0x40f1 015106 call twspi_write -0x40f2 015107 setarg 0x0419 -0x40f3 015108 call twspi_write -: 015109 mouse_sensor_enable_wp: -0x40f4 015110 setarg 0x0009 -0x40f5 015111 branch twspi_write -: 015112 mouse_sensor_disable_wp: -0x40f6 015113 setarg 0x5a09 -0x40f7 015114 branch twspi_write -: 015116 mouse_3204_3l_init_param: -0x40f8 015117 jam p3204 ,mem_config_sensor_type -0x40f9 015118 call mouse_sensor_disable_wp -0x40fa 015119 setarg 0x0f0d -0x40fb 015120 call twspi_write -0x40fc 015121 setarg 0xe31d -0x40fd 015122 call twspi_write -0x40fe 015123 setarg 0xd27d -0x40ff 015124 call twspi_write -0x4100 015125 call mouse_32xx_init_param -0x4101 015126 branch mouse_32xx_init_param_1 -: 015128 mouse_32xx_init_param: -0x4102 015129 setarg 0x351b -0x4103 015130 call twspi_write -0x4104 015131 setarg 0xb428 -0x4105 015132 call twspi_write -0x4106 015133 setarg 0x4629 -0x4107 015134 call twspi_write -0x4108 015135 setarg 0x962a -0x4109 015136 call twspi_write -0x410a 015137 setarg 0x8c2b -0x410b 015138 call twspi_write -0x410c 015139 setarg 0x6e2c -0x410d 015140 call twspi_write -0x410e 015141 setarg 0x642d -0x410f 015142 call twspi_write -0x4110 015143 setarg 0x5f38 -0x4111 015144 call twspi_write -0x4112 015145 setarg 0x0f39 -0x4113 015146 call twspi_write -0x4114 015147 setarg 0x323a -0x4115 015148 call twspi_write -0x4116 015149 setarg 0x473b -0x4117 015150 call twspi_write -0x4118 015151 setarg 0x1042 -0x4119 015152 branch twspi_write -: 015153 mouse_32xx_init_param_1: -0x411a 015154 setarg 0x2e54 -0x411b 015155 call twspi_write -0x411c 015156 setarg 0xf255 -0x411d 015157 call twspi_write -0x411e 015158 setarg 0xf461 -0x411f 015159 call twspi_write -0x4120 015160 setarg 0x7063 -0x4121 015161 call twspi_write -0x4122 015162 setarg 0x5275 -0x4123 015163 call twspi_write -0x4124 015164 setarg 0x4176 -0x4125 015165 call twspi_write -0x4126 015166 setarg 0xed77 -0x4127 015167 call twspi_write -0x4128 015168 setarg 0x2378 -0x4129 015169 call twspi_write -0x412a 015170 setarg 0x4679 -0x412b 015171 call twspi_write -0x412c 015172 setarg 0xe57a -0x412d 015173 call twspi_write -0x412e 015174 setarg 0x487c -0x412f 015175 call twspi_write -0x4130 015176 setarg 0x777e -0x4131 015177 call twspi_write -0x4132 015178 setarg 0x017f -0x4133 015179 call twspi_write -0x4134 015180 setarg 0x000b -0x4135 015181 call twspi_write -0x4136 015182 setarg 0x007f -0x4137 015183 call twspi_write -0x4138 015184 branch mouse_sensor_enable_wp -: 015187 mouse_3205_3t_init_param: -0x4139 015188 jam p3205 ,mem_config_sensor_type -0x413a 015189 call mouse_sensor_disable_wp -0x413b 015190 setarg 0x100d -0x413c 015191 call twspi_write -0x413d 015192 setarg 0xed1d -0x413e 015193 call twspi_write -0x413f 015194 setarg 0x807d -0x4140 015195 call twspi_write -0x4141 015196 call mouse_32xx_init_param -0x4142 015197 setarg 0x0943 -0x4143 015198 call twspi_write -0x4144 015199 branch mouse_32xx_init_param_1 -: 015202 mouse_init_3610sensor_reset: -0x4145 015203 fetcht 1 ,mem_sensor_reset_gpio -0x4146 015204 call gpio_out_active -0x4147 015205 call delay_10ms -0x4148 015206 fetcht 1 ,mem_sensor_reset_gpio -0x4149 015207 call gpio_out_inactive -0x414a 015208 branch delay_10ms -: 015210 mouse_init_p3610: -0x414b 015211 jam p3610 ,mem_config_sensor_type -0x414c 015212 setarg 0xba41 -0x414d 015213 call sensor_write -0x414e 015214 setarg 0x0d11 -0x414f 015215 call sensor_write -0x4150 015216 setarg 0x041b -0x4151 015217 call sensor_write -0x4152 015218 setarg 0x041c -0x4153 015219 call sensor_write -0x4154 015220 setarg 0x0f1d -0x4155 015221 call sensor_write -0x4156 015222 setarg 0x0032 -0x4157 015223 call sensor_write -0x4158 015224 setarg 0xb541 -0x4159 015225 branch sensor_write -: 015229 mouse_set_sensor_reg: -0x415a 015230 setarg 0xba41 -0x415b 015231 call sensor_write -0x415c 015232 nop 4000 -0x415d 015233 setarg 0xff7f -0x415e 015234 call sensor_write -0x415f 015235 copy rega ,pdata -0x4160 015236 call sensor_write -0x4161 015237 setarg 0x007f -0x4162 015238 call sensor_write -0x4163 015239 setarg 0xb541 -0x4164 015240 branch sensor_write -: 015242 extsign: -0x4165 015243 rtnbit0 7 -0x4166 015244 arg 0xff00 ,temp -0x4167 015245 ior temp ,pdata -0x4168 015246 rtn -: 015248 extsign_bit3: -0x4169 015249 rtnbit0 3 -0x416a 015250 arg 0xf0 ,temp -0x416b 015251 ior temp ,pdata -0x416c 015252 rtn -: 015255 mouse_le: -0x416d 015256 call le_fifo_check_nearly_full -0x416e 015257 nrtn blank -0x416f 015258 fetch 1 ,mem_le_connect_status_flag -0x4170 015259 and pdata ,0x03 ,pdata -0x4171 015260 rtnne 0x03 -0x4172 015261 fetch mouse_flag_len ,mem_mouse_flag -0x4173 015262 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet -0x4174 015263 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet -0x4175 015264 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet -0x4176 015265 call mouse_motion -0x4177 015266 nrtn user -0x4178 015267 branch mouse_fill_data_le -: 015269 mouse_le_send_empty_packet: -0x4179 015270 setarg 0 -0x417a 015271 store 7 ,mem_mouse_key -0x417b 015272 branch mouse_fill_data_le -: 015274 mouse_priority_bb_event: -0x417c 015275 copy regc ,pdata -0x417d 015276 beq bt_evt_le_connected ,mouse_le_bb_event_connected -0x417e 015277 beq bt_evt_bb_connected ,mouse_stop_discovery -0x417f 015278 beq bt_evt_le_disconnected ,mouse_bb_disconnected -0x4180 015279 beq bt_evt_bb_disconnected ,mouse_bb_disconnected -0x4181 015280 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete -0x4182 015281 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn -0x4183 015282 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake -0x4184 015283 beq bt_evt_hid_connected ,mouse_bt_hid_connected -0x4185 015284 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed -0x4186 015285 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout -0x4187 015286 beq bt_evt_pincode_req ,mouse_bb_event_pincode -0x4188 015287 beq bt_evt_remote_unsniff ,app_start_auto_sniff -0x4189 015288 beq bt_evt_le_pairing_success ,mouse_le_pairing_success -0x418a 015289 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt -0x418b 015290 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete -0x418c 015291 beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug -0x418d 015292 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete -0x418e 015293 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail -0x418f 015294 beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success -0x4190 015295 rtn -: 015298 mouse_le_pairing_complete: -0x4191 015299 branch app_ble_store_reconn_info -: 015301 mouse_24g_attempt_fail: -0x4192 015302 jam 1 ,mem_mouse_24g_enter_lpm_enable -0x4193 015303 fetch 1 ,mem_reconn_times -0x4194 015304 nbranch mouse_polling_device ,blank -0x4195 015305 fetch 1 ,mem_device_flag -0x4196 015306 fetcht 1 ,mem_24g_device_number -0x4197 015307 isub temp ,null -0x4198 015308 branch app_enter_hibernate ,zero -0x4199 015309 rtn -: 015310 mouse_24g_attempt_success: -0x419a 015311 jam 1 ,mem_mouse_24g_enter_lpm_enable -0x419b 015312 rtn -: 015313 mouse_24g_pairing_complete: -0x419c 015314 jam 1 ,mem_mouse_24g_enter_lpm_enable -0x419d 015315 arg mosue_24g_pairing_flag ,queue -0x419e 015316 call mouse_disable_function_flag -0x419f 015317 setarg 0 -0x41a0 015318 store 2 ,mem_24g_pairing_timer_count -0x41a1 015319 jam 0 ,mem_mouse_move_flag -0x41a2 015321 fetch 1 ,mem_config_sensor_type -0x41a3 015322 sub pdata ,p3610 ,null -0x41a4 015323 call mouse_read_sensor3610_data ,zero -0x41a5 015324 ncall mouse_read_sensor_common ,zero -0x41a6 015326 fetch 1 ,mouse_flag_len ,mem_mouse_flag -0x41a7 015327 bbit1 mouse_enable_flash ,mouse_store_flash_24g_address -0x41a8 015328 call mouse_set_24g_addr_eeprom -0x41a9 015329 branch iicd_write_protect_eep_data -: 015331 mouse_set_24g_addr_eeprom: -0x41aa 015332 call g24_head_ptr2regc -0x41ab 015333 add regc ,offset_24g_addr ,rega -0x41ac 015334 arg mouse_g24_addr_eeprom_offect ,regb -0x41ad 015335 arg 4 ,temp -0x41ae 015336 rtn -: 015338 mouse_store_flash_24g_address: -0x41af 015339 call g24_head_ptr2regc -0x41b0 015340 add regc ,offset_24g_addr ,regb -0x41b1 015341 ifetch 1 ,regb -0x41b2 015342 store 1 ,mem_mouse_24g_addr -0x41b3 015343 branch mouse_store_flash_device_info -: 015346 mouse_le_pairing_success: -0x41b4 015347 arg ll_pairing_success_flag ,queue -0x41b5 015348 branch mouse_le_enable_connect_flag -: 015349 mouse_le_ll_start_encryt: -0x41b6 015350 jam 2 ,mem_le_start_encrypt_timer -0x41b7 015351 arg ll_start_enc_flag ,queue -0x41b8 015352 branch mouse_le_enable_connect_flag -: 015355 mouse_le_enable_connect_flag: -0x41b9 015356 fetch 1 ,mem_le_connect_status_flag -0x41ba 015357 qset1 pdata -0x41bb 015358 store 1 ,mem_le_connect_status_flag -0x41bc 015359 rtn -: 015361 mouse_le_disable_connect_flag: -0x41bd 015362 fetch 1 ,mem_le_connect_status_flag -0x41be 015363 qset0 pdata -0x41bf 015364 store 1 ,mem_le_connect_status_flag -0x41c0 015365 rtn -: 015366 mouse_le_clean_connect_flag: -0x41c1 015367 jam 0 ,mem_le_connect_status_flag -0x41c2 015368 rtn -: 015370 mouse_le_bb_event_connected: -0x41c3 015371 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag -0x41c4 015372 set0 app_disc_by_button ,pdata -0x41c5 015373 store app_disc_rsn_size ,mem_app_disconn_reason_flag -0x41c6 015374 setarg 0 -0x41c7 015375 store 2 ,mem_mouse_direct_timer -0x41c8 015376 call mouse_no_data_timer_init -0x41c9 015377 branch mouse_stop_discovery -: 015379 mouse_bb_event_pincode: -0x41ca 015380 call pincode_reinit -0x41cb 015381 branch app_bt_set_pincode -: 015382 mouse_bb_event_reconn_timeout: -: 015383 mouse_bb_event_reconn_failed: -0x41cc 015384 fetch 1 ,mem_reconn_times -0x41cd 015385 nbranch mouse_polling_device ,blank -0x41ce 015386 fetch 2 ,mem_ui_state_map -0x41cf 015387 bbit1 ui_state_btn_down ,mouse_start_discovery -0x41d0 015388 fetch mouse_flag_len ,mem_mouse_flag -0x41d1 015389 bbit1 mouse_select_device_flag ,mouse_soft_reset -0x41d2 015390 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery -0x41d3 015391 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 -0x41d4 015392 branch app_bb_hibernate -: 015395 mouse_bt_hid_connected: -0x41d5 015396 branch mouse_hid_connected -: 015398 mouse_bt_event_setup_complete: -0x41d6 015399 rtn -: 015401 mouse_soft_reset: -0x41d7 015402 call mouse_select_device_enable -0x41d8 015403 branch soft_reset_chip -: 015405 mouse_bb_disconnected: -0x41d9 015406 bpatch patch1d_1 ,mem_patch1d -0x41da 015407 call mouse_bb_discon_clear_stack -0x41db 015408 fetch mouse_flag_len ,mem_mouse_flag -0x41dc 015409 bbit1 mouse_select_device_flag ,mouse_soft_reset -0x41dd 015410 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 -0x41de 015411 fetch 1 ,mem_reconn_times -0x41df 015412 nbranch mouse_polling_device ,blank -0x41e0 015413 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x41e1 015414 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn -0x41e2 015415 bbit1 app_disc_by_button ,app_disconn_reason_clear -0x41e3 015416 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing -0x41e4 015417 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate -0x41e5 015418 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate -0x41e6 015419 branch mouse_start_discovery -: 015420 mouse_bb_discon_clear_stack: -0x41e7 015421 setarg 0 -0x41e8 015422 store 8 ,mem_wheel_tb_old_pinlevel -0x41e9 015423 istore 4 ,contw -0x41ea 015424 jam 0 ,mem_mouse_send_blank_timer -0x41eb 015425 jam 0 ,mem_mouse_move_flag -0x41ec 015426 jam app_handshake_null ,mem_app_handshake_flag -0x41ed 015427 jam 0 ,mem_ltk_exists -0x41ee 015428 rtn -: 015430 mouse_event_light_state_pairing: -0x41ef 015431 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate -0x41f0 015432 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate -0x41f1 015433 branch mouse_start_discovery -: 015434 mouse_event_light_state_hibernate: -0x41f2 015435 fetch 2 ,mem_ui_state_map -0x41f3 015436 bbit1 ui_state_btn_down ,mouse_start_discovery -0x41f4 015437 branch app_bb_hibernate -: 015439 mouse4_0_event_bb_disconn: -0x41f5 015440 call mouse_le_clean_connect_flag -0x41f6 015441 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x41f7 015442 bbit1 app_disc_by_button ,app_disconn_reason_clear -0x41f8 015443 branch app_bb_hibernate -: 015445 mouse_bb_event_timer: -0x41f9 015446 call mouse_adc_read -0x41fa 015447 call mouse_24g_delay_timer -0x41fb 015448 call mouse_ban_24g_pairing_timer -0x41fc 015449 call mouse_dpi_led_blink_delay_timer -0x41fd 015450 call mouse_statue_up_timer -0x41fe 015452 call mouse_statue_cheak_timer -0x41ff 015453 call mouse_select_device -0x4200 015454 call mouse_bt_discovery_cheak -0x4201 015455 call mouse_low_voltage_led_timer -0x4202 015456 call mouse_sensor_led_contrl_timer -0x4203 015457 call mouse_check_hid_handshake_timer -0x4204 015458 call mouse_check_discovery_timeout_timer -0x4205 015459 call mouse_check_direct_timeout_timer -0x4206 015460 call mouse_check_no_data_timeout_timer -0x4207 015461 call mouse_check_mouse_state_timer -0x4208 015462 branch mouse_le_enable_att_list_timer -: 015466 mouse_sensor_led_contrl_timer: -0x4209 015467 fetch 1 ,mem_mouse_sensor_timer_count -0x420a 015468 rtn blank -0x420b 015469 increase -1 ,pdata -0x420c 015470 store 1 ,mem_mouse_sensor_timer_count -0x420d 015471 nrtn blank -0x420e 015472 branch mouse_sensor_led_contrl -: 015473 mouse_sensor_led_contrl: -0x420f 015474 fetch 1 ,mem_sensor_led_style -0x4210 015475 rtneq ui_led_state_blink_stop -0x4211 015476 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking -: 015477 mouse_sensor_led_blink_state_lighting: -0x4212 015478 call mouse_sensor_led_on -0x4213 015479 jam ui_led_state_blink_darking ,mem_sensor_led_style -0x4214 015480 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count -0x4215 015481 rtn -: 015482 mouse_sensor_led_blink_state_darking: -0x4216 015483 call mouse_sensor_led_off -0x4217 015484 jam ui_led_state_blink_lighting ,mem_sensor_led_style -0x4218 015485 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count -0x4219 015486 rtn -: 015488 mouse_sensor_led_blink_stop: -: 015489 mouse_sensor_reset: -0x421a 015490 setarg 0x8006 -0x421b 015491 call twspi_write -0x421c 015492 nop 1000 -0x421d 015493 jam 0x00 ,mem_mouse_sensor_timer_count -0x421e 015494 jam ui_led_state_blink_stop ,mem_sensor_led_style -0x421f 015495 branch mouse_init_p32xx_id2_judge -: 015497 mouse_p3212sensor_led_on: -0x4220 015498 setarg 0xa006 -0x4221 015499 call twspi_write -0x4222 015500 setarg 0xa005 -0x4223 015501 branch twspi_write -: 015502 mouse_sensor_led_on_global: -0x4224 015503 jam 0 ,mem_mouse_sensor_timer_count -: 015504 mouse_sensor_led_on: -0x4225 015505 fetch 1 ,mem_config_sensor_type -0x4226 015506 beq p3212 ,mouse_p3212sensor_led_on -0x4227 015507 setarg 0x0106 -0x4228 015508 call twspi_write -0x4229 015509 setarg 0xa105 -0x422a 015510 branch twspi_write -: 015512 mouse_sensor_led_off_global: -0x422b 015513 jam 0 ,mem_mouse_sensor_timer_count -: 015514 mouse_sensor_led_off: -0x422c 015515 setarg 0x0906 -0x422d 015516 branch twspi_write -: 015517 mouse_sensor_start_blink: -0x422e 015518 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count -0x422f 015519 jam ui_led_state_blink_start ,mem_sensor_led_style -0x4230 015520 rtn -: 015522 mouse_check_hid_handshake_timer: -0x4231 015523 arg mem_hid_handshake_timer_count ,regc -0x4232 015524 arg mouse_bt_hid_handshake ,regb -0x4233 015525 branch timer_single_step -: 015527 mouse_check_discovery_timeout_timer: -0x4234 015528 arg mem_mouse_discovery_timer ,regc -0x4235 015529 arg mouse_check_discovery_timeout ,regb -0x4236 015530 branch timer_single_step_2b -: 015532 mouse_check_direct_timeout_timer: -0x4237 015533 arg mem_mouse_direct_timer ,regc -0x4238 015534 arg mouse_check_direct_timeout ,regb -0x4239 015535 branch timer_single_step_2b -: 015537 mouse_check_no_data_timeout_timer: -0x423a 015538 arg mem_mouse_no_data_timer ,regc -0x423b 015539 arg mouse_check_no_data_timeout ,regb -0x423c 015540 branch timer_single_step_2b -: 015542 mouse_check_mouse_state_timer: -0x423d 015543 arg mem_mouse_statue_led_timer ,regc -0x423e 015544 arg mouse_statue_led_off ,regb -0x423f 015545 branch timer_single_step -: 015549 mouse_le_enable_att_list_timer: -0x4240 015550 arg mem_le_start_encrypt_timer ,regc -0x4241 015551 arg mouse_le_enable_att_list ,regb -0x4242 015552 branch timer_single_step -: 015554 mouse_24g_delay_timer: -0x4243 015555 arg mem_24g_enter_lpm_timer ,regc -0x4244 015556 arg mouse_24g_delay ,regb -0x4245 015557 branch timer_single_step -: 015559 mouse_ban_24g_pairing_timer: -0x4246 015560 arg mem_24g_pairing_timer_count ,regc -0x4247 015561 arg mouse_ban_24g_pairing ,regb -0x4248 015562 branch timer_single_step_2b -: 015563 mouse_ban_24g_pairing: -: 015564 mouse_24g_delay: -0x4249 015565 rtn -: 015568 mosue_dpi_led_blink_init: -0x424a 015569 fetch mouse_flag_len ,mem_mouse_flag -0x424b 015570 rtnbit0 mouse_enable_dpi_led_blink -0x424c 015571 jam 10 ,mem_mouse_dpi_led_delay_count -0x424d 015572 fetch 1 ,mem_dpi_led_gpio -0x424e 015573 store 1 ,mem_mouse_struct_led_gpio -0x424f 015574 rtn -: 015577 mouse_dpi_led_blink_delay_timer: -0x4250 015578 arg mem_mouse_dpi_led_delay_count ,regc -0x4251 015579 arg mouse_dpi_led_setting ,regb -0x4252 015580 branch timer_single_step -: 015581 mouse_dpi_led_setting: -0x4253 015582 fetch 1 ,mem_dpi_led_gpio -0x4254 015583 store 1 ,mem_mouse_struct_led_gpio -0x4255 015584 setarg led_dpi_blink -0x4256 015585 store 2 ,mem_mouse_on_time -0x4257 015586 store 2 ,mem_mouse_off_time -0x4258 015587 arg 0 ,rega -0x4259 015588 fetcht 1 ,mem_mouse_dpi -0x425a 015589 increase 1 ,temp -0x425b 015590 storet 1 ,mem_mouse_blink_count -0x425c 015591 jam ui_led_state_blink_start ,mem_mouse_led_type -0x425d 015592 rtn -: 015594 mouse_le_enable_att_list: -0x425e 015595 fetch 1 ,mem_le_connect_status_flag -0x425f 015596 rtnbit1 ll_pairing_success_flag -0x4260 015597 jam bt_cmd_le_update_conn ,mem_fifo_temp -0x4261 015598 call ui_ipc_send_cmd -0x4262 015599 arg write_req_enable_flag ,queue -0x4263 015600 branch mouse_le_enable_connect_flag -: 015603 mouse_check_discovery_timeout: -0x4264 015604 call mouse_stop_discovery -0x4265 015605 branch app_enter_hibernate -: 015607 mouse_check_direct_timeout: -0x4266 015608 call app_ble_stop_direct_adv -0x4267 015609 fetch 1 ,mem_reconn_times -0x4268 015610 nbranch mouse_polling_device ,blank -0x4269 015611 branch app_enter_hibernate -: 015613 mouse_check_no_data_timeout: -0x426a 015614 bmark1 mark_24g ,check_51cmd_hibernate -0x426b 015615 branch mouse_disconnect -: 015619 mouse_bb_event_discovery_btn: -0x426c 015620 bpatch patch1d_2 ,mem_patch1d -0x426d 015621 jam 0 ,mem_mouse_send_blank_timer -0x426e 015622 call mouse_disconnect -0x426f 015623 call mouse_le_clean_connect_flag -0x4270 015624 branch mouse_start_discovery -: 015628 mouse3_0_check_reconn_target: -0x4271 015629 fetch 6 ,mem_hci_plap -0x4272 015630 branch app_bt_start_discovery_short ,blank -0x4273 015631 call mouse_reconn_setting_led_gpio -0x4274 015632 jam 0x17 ,mem_connection_options -0x4275 015633 fetch 1 ,mem_ssp_enable -0x4276 015634 nbranch app_bt_start_reconnect ,blank -0x4277 015635 jam 0x04 ,mem_connection_options -0x4278 015636 branch app_bt_start_reconnect -: 015638 mouse4_0_check_reconn_target: -0x4279 015639 fetch 2 ,mem_mouse_direct_timeout -0x427a 015640 store 2 ,mem_mouse_direct_timer -0x427b 015641 call mouse_reconn_setting_led_gpio -0x427c 015642 call app_lpm_mult_disable -0x427d 015643 branch check_51cmd_adv -: 015645 mouse_reconn_setting_led_gpio: -0x427e 015646 setarg led_reconnect_blink -0x427f 015647 store 2 ,mem_mouse_on_time -0x4280 015648 store 2 ,mem_mouse_off_time -0x4281 015649 branch mouse_setting_led_gpio_comman -: 015651 mouse_discover_setting_led_gpio: -0x4282 015652 setarg led_discovery_blink -0x4283 015653 store 2 ,mem_mouse_on_time -0x4284 015654 store 2 ,mem_mouse_off_time -: 015655 mouse_setting_led_gpio_comman: -0x4285 015656 fetch 1 ,mem_device_flag -0x4286 015657 beq mode_bt_device1 ,mouse_device_led1 -0x4287 015658 beq mode_bt_device2 ,mouse_device_led2 -0x4288 015659 beq mode_bt_device3 ,mouse_device_led3 -0x4289 015660 rtn -: 015661 mouse_device_led1: -0x428a 015662 fetch 1 ,mem_config_device1_led_gpio -0x428b 015663 branch mouse_led_blink -: 015664 mouse_device_led2: -0x428c 015665 fetch 1 ,mem_config_device2_led_gpio -0x428d 015666 branch mouse_led_blink -: 015667 mouse_device_led3: -0x428e 015668 fetch 1 ,mem_config_device3_led_gpio -: 015669 mouse_led_blink: -0x428f 015670 store 1 ,mem_temp -0x4290 015671 call mouse_devce_led_off -0x4291 015672 fetch 1 ,mem_temp -0x4292 015673 store 1 ,mem_mouse_struct_led_gpio -0x4293 015674 arg 0 ,rega -0x4294 015675 jam ui_led_state_blink_start ,mem_mouse_led_type -0x4295 015676 branch ui_led_blink_start_global -: 015678 mouse_led_off: -0x4296 015679 arg 0 ,rega -0x4297 015680 branch ui_led_off_global -: 015681 mouse_led_on: -0x4298 015682 arg 0 ,rega -0x4299 015683 branch ui_led_on_global -: 015685 mouse4_0_bb_event_discovery_btn: -0x429a 015686 branch mouse_le_clean_connect_flag -: 015688 mouse_bt_hid_handshake: -0x429b 015689 jam app_handshake_done ,mem_app_handshake_flag -0x429c 015690 call app_lpm_mult_enable -0x429d 015691 call app_bt_store_reconn_info -0x429e 015692 setarg 0 -0x429f 015693 store 2 ,mem_discovery_timeout_timer_count -0x42a0 015694 store 1 ,mem_hid_handshake_timer_count -0x42a1 015695 branch app_bt_enter_sniff -: 015697 mouse_check_reconn_target: -0x42a2 015698 call mouse_cheak_select_device_by_switch -0x42a3 015699 fetch 1 ,mem_device_flag -0x42a4 015700 fetcht 1 ,mem_24g_device_number -0x42a5 015701 isub temp ,null -0x42a6 015702 branch mouse_connect_24g_mode ,zero -0x42a7 015703 fetch 1 ,mem_xrecord_mode -0x42a8 015704 beq rec_3_mode ,mouse3_0_check_reconn_target -0x42a9 015705 beq rec_4_mode ,mouse4_0_check_reconn_target -0x42aa 015706 branch mouse_start_discovery -: 015707 mouse_connect_24g_mode: -0x42ab 015708 call mouse_start_24g_mode -0x42ac 015709 rtnmark1 mark_24g -0x42ad 015710 fetch 1 ,mem_reconn_times -0x42ae 015711 nbranch mouse_polling_device ,blank -0x42af 015712 rtn -: 015714 mouse_start_discovery: -0x42b0 015715 bpatch patch1d_3 ,mem_patch1d -0x42b1 015716 fetch 2 ,mem_ui_state_map -0x42b2 015717 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom -0x42b3 015718 fetch mouse_flag_len ,mem_mouse_flag -0x42b4 015719 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom -0x42b5 015720 random pdata -0x42b6 015721 store 1 ,mem_le_lap + 1 -: 015722 mouse_start_discovery_norandom: -0x42b7 015723 call app_lpm_mult_disable -0x42b8 015724 fetch 2 ,mem_discovery_timeout -0x42b9 015725 store 2 ,mem_mouse_discovery_timer -0x42ba 015726 jam 6 ,mem_connection_options -0x42bb 015727 setarg 0 -0x42bc 015728 store 2 ,mem_mouse_no_data_timer -0x42bd 015729 store 2 ,mem_mouse_direct_timer -0x42be 015730 arg mouse_store_eeprom_flag ,queue -0x42bf 015731 call mouse_enable_function_flag -0x42c0 015732 call mouse_bt_discovery_button_down_disable -0x42c1 015733 fetch 1 ,mem_device_option -0x42c2 015734 isolate1 mode_4_mouse ,pdata -0x42c3 015735 call check_51cmd_adv ,true -0x42c4 015736 fetch 1 ,mem_device_option -0x42c5 015737 isolate1 mode_3_mouse ,pdata -0x42c6 015738 call check_51cmd_start_discovery ,true -0x42c7 015739 fetch mouse_flag_len ,mem_mouse_flag -0x42c8 015740 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink -0x42c9 015741 branch mouse_discover_setting_led_gpio -: 015743 mouse_stop_discovery: -0x42ca 015744 bpatch patch1d_4 ,mem_patch1d -0x42cb 015745 fetch 1 ,mem_device_option -0x42cc 015746 isolate1 mode_4_mouse ,pdata -0x42cd 015747 call mouse_stop_le_adv ,true -0x42ce 015748 fetch 1 ,mem_device_option -0x42cf 015749 isolate1 mode_3_mouse ,pdata -0x42d0 015750 call mouse_stop_bt3_discovery ,true -0x42d1 015751 fetch mouse_flag_len ,mem_mouse_flag -0x42d2 015752 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop -0x42d3 015753 branch mouse_devce_led_off -: 015754 mouse_stop_le_adv: -0x42d4 015755 setarg 0 -0x42d5 015756 store 2 ,mem_mouse_direct_timer -0x42d6 015757 branch check_51cmd_stop_adv -: 015758 mouse_stop_bt3_discovery: -0x42d7 015759 setarg 0 -0x42d8 015760 store 2 ,mem_mouse_discovery_timer -0x42d9 015761 branch check_51cmd_stop_discovery -: 015767 mouse_store_remote_bdaddr: -0x42da 015768 fetch mouse_flag_len ,mem_mouse_flag -0x42db 015769 rtnbit0 mouse_store_eeprom_flag -0x42dc 015770 arg mouse_store_eeprom_flag ,queue -0x42dd 015771 call mouse_disable_function_flag -0x42de 015772 call mouse_check_device_addr -: 015773 mouse_unplug_clean_bdaddr: -0x42df 015774 call mouse_before_store_reconn_info -0x42e0 015775 fetch mouse_flag_len ,mem_mouse_flag -0x42e1 015776 bbit1 mouse_enable_flash ,mouse_store_flash_device_info -0x42e2 015777 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info -0x42e3 015778 rtn -: 015779 mouse_store_eeprom_device_info: -0x42e4 015780 arg 88 ,temp -0x42e5 015781 arg mem_device_flag ,rega -0x42e6 015782 arg mouse_info_eeprom_offect ,regb -0x42e7 015783 branch iicd_write_protect_eep_data -: 015785 mouse_check_device_addr: -0x42e8 015786 fetch 1 ,mem_record_bt_mode -0x42e9 015787 beq rec_4_mode ,mouse_check_le_device_addr -0x42ea 015788 beq rec_3_mode ,mouse_check_bt_device_addr -0x42eb 015789 rtn -: 015790 mouse_check_le_device_addr: -0x42ec 015791 store 1 ,mem_device_addr_temp -0x42ed 015792 fetch 6 ,mem_le_plap -0x42ee 015793 branch mouse_check_bt_device_addr_common -: 015794 mouse_check_bt_device_addr: -0x42ef 015795 store 1 ,mem_device_addr_temp -0x42f0 015796 fetch 6 ,mem_plap -: 015797 mouse_check_bt_device_addr_common: -0x42f1 015798 store 6 ,mem_device_addr_temp + 1 -0x42f2 015799 fetch 7 ,mem_device_addr_temp -0x42f3 015800 arg mem_device1_type ,contr -0x42f4 015801 arg 3 ,loopcnt -: 015802 mouse_check_device_addr_end: -0x42f5 015803 ifetcht 7 ,contr -0x42f6 015804 isub temp ,null -0x42f7 015805 branch mouse_clean_addr ,zero -0x42f8 015806 increase 22 ,contr -0x42f9 015807 loop mouse_check_device_addr_end -0x42fa 015808 rtn -: 015809 mouse_before_store_reconn_info: -0x42fb 015810 arg mem_device1_type ,rega -0x42fc 015811 fetch 1 ,mem_device_flag -0x42fd 015812 increase -1 ,pdata -0x42fe 015813 mul32 pdata ,29 ,pdata -0x42ff 015814 iadd rega ,rega -0x4300 015815 fetch 1 ,mem_record_bt_mode -0x4301 015816 istore 1 ,rega -0x4302 015817 beq rec_4_mode ,mouse_store_le_device -0x4303 015818 beq rec_3_mode ,mouse_store_bt_device -0x4304 015819 rtn -: 015821 mouse_store_le_device: -0x4305 015822 fetch 6 ,mem_le_plap -0x4306 015823 istore 6 ,contw -0x4307 015824 arg mem_le_ltk ,contr -0x4308 015825 call memcpy16 -0x4309 015826 fetch 6 ,mem_le_lap -0x430a 015827 istore 6 ,contw -0x430b 015828 rtn -: 015829 mouse_store_bt_device: -0x430c 015830 fetch 6 ,mem_plap -0x430d 015831 istore 6 ,contw -0x430e 015832 arg mem_link_key ,contr -0x430f 015833 branch memcpy16 -: 015835 mouse_clean_addr: -0x4310 015836 increase -6 ,contr -0x4311 015837 copy contr ,contw -0x4312 015838 fetcht 6 ,mem_device_addr_temp + 1 -0x4313 015839 increase 3 ,temp -0x4314 015840 istoret 6 ,contw -0x4315 015841 rtn -: 015845 mouse_eeprom_load_recon_info: -0x4316 015846 arg 88 ,temp -0x4317 015847 arg mem_device_flag ,rega -0x4318 015848 arg mouse_info_eeprom_offect ,regb -0x4319 015849 call iicd_read_eep_data -: 015850 mouse_select_reconn_device: -0x431a 015851 arg mem_device1_type ,rega -0x431b 015852 fetch 1 ,mem_device_flag -0x431c 015853 fetcht 1 ,mem_24g_device_number -0x431d 015854 isub temp ,null -0x431e 015855 rtn zero -0x431f 015856 increase -1 ,pdata -0x4320 015857 mul32 pdata ,29 ,pdata -0x4321 015858 iadd rega ,rega -0x4322 015859 ifetch 1 ,rega -0x4323 015860 store 1 ,mem_xrecord_mode -0x4324 015861 beq rec_3_mode ,mouse_load_bt_device -0x4325 015862 beq rec_4_mode ,mouse_load_le_device -0x4326 015863 rtn -: 015865 mouse_load_bt_device: -0x4327 015866 ifetch 6 ,contr -: 015867 mouse_load_bt_device_end: -0x4328 015868 store 6 ,mem_hci_plap -0x4329 015869 arg mem_link_key ,contw -0x432a 015870 call memcpy16 -0x432b 015871 branch check_link_key_load -: 015873 mouse_load_le_device: -0x432c 015874 ifetch 6 ,contr -: 015875 mouse_load_le_device_end: -0x432d 015876 store 6 ,mem_hci_plap -0x432e 015877 arg mem_le_ltk ,contw -0x432f 015878 call memcpy16 -0x4330 015879 ifetch 6 ,contr -0x4331 015880 store 6 ,mem_le_lap -0x4332 015881 rtn -: 015884 mouse_select_device: -0x4333 015885 fetch 1 ,mem_config_function_enable -0x4334 015886 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button -0x4335 015887 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch -0x4336 015888 branch mouse_select_device_by_combination_key -: 015890 mouse_select_device_by_combination_key: -0x4337 015891 call mouse_check_key_gpio -0x4338 015892 beq mouse_rm_button ,mouse_select_device_commbination_key_down -: 015893 mouse_select_device_commbination_key_up: -0x4339 015894 jam 30 ,mem_combination_select_device_count -0x433a 015895 fetch 1 ,mem_select_device_button_statue -0x433b 015896 rtneq dpi_button_state_up -0x433c 015897 jam dpi_button_state_up ,mem_select_device_button_statue -0x433d 015898 rtn -: 015900 mouse_select_device_commbination_key_down: -0x433e 015901 call mouse_combination_select_device_timer -0x433f 015902 fetch 1 ,mem_select_device_button_statue -0x4340 015903 rtneq dpi_button_state_down -0x4341 015904 jam dpi_button_state_down ,mem_select_device_button_statue -0x4342 015905 branch mouse_select_device_enable -: 015907 mouse_combination_select_device_timer: -0x4343 015908 fetch 1 ,mem_combination_select_device_count -0x4344 015909 rtn blank -0x4345 015910 pincrease -1 -0x4346 015911 store 1 ,mem_combination_select_device_count -0x4347 015912 nrtn blank -0x4348 015913 branch mouse_ready_reconnection_by_button -: 015915 mouse_select_device_by_button: -0x4349 015916 fetch 1 ,mem_config_select_device_button_gpio -0x434a 015917 rtneq gpio_disable -0x434b 015918 fetcht 1 ,mem_config_select_device_button_gpio -0x434c 015919 call gpio_get_bit -0x434d 015920 branch mouse_select_device_button_down ,true -: 015921 mouse_select_device_button_up: -0x434e 015922 fetch 1 ,mem_select_device_button_statue -0x434f 015923 rtneq dpi_button_state_up -0x4350 015924 jam dpi_button_state_up ,mem_select_device_button_statue -0x4351 015925 fetch mouse_flag_len ,mem_mouse_flag -0x4352 015926 rtnbit1 mouse_long_bt_button_flag -0x4353 015927 branch mouse_ready_reconnection_by_button -: 015929 mouse_select_device_button_down: -0x4354 015930 fetch 1 ,mem_select_device_button_statue -0x4355 015931 rtneq dpi_button_state_down -0x4356 015932 jam dpi_button_state_down ,mem_select_device_button_statue -0x4357 015933 arg mouse_long_bt_button_flag ,queue -0x4358 015934 branch mouse_disable_function_flag -: 015938 mouse_select_device_by_switch: -0x4359 015939 fetch 1 ,mouse_flag_len ,mem_mouse_flag -0x435a 015940 rtnbit0 enable_select_device_by_switch -0x435b 015941 fetch 1 ,mem_device_flag -0x435c 015942 beq mode_bt_device1 ,mouse_select1_device -0x435d 015943 beq mode_24g_device ,mouse_select2_device -0x435e 015944 rtn -: 015945 mouse_cheak_select_device_by_switch: -0x435f 015946 fetch 1 ,mouse_flag_len ,mem_mouse_flag -0x4360 015947 rtnbit0 enable_select_device_by_switch -0x4361 015948 fetcht 1 ,mem_config_select_device_button_gpio -0x4362 015949 call gpio_get_bit -0x4363 015950 branch mouse_cheak_select_24gdevice ,true -: 015951 mouse_select_btdevice: -0x4364 015952 jam mode_bt_device1 ,mem_device_flag -0x4365 015953 rtn -: 015954 mouse_cheak_select_24gdevice: -0x4366 015955 fetch 1 ,mem_24g_device_number -0x4367 015956 store 1 ,mem_device_flag -0x4368 015957 rtn -: 015958 mouse_select1_device: -0x4369 015959 fetcht 1 ,mem_config_select_device_button_gpio -0x436a 015960 nbranch mouse_ready_reconnection_by_button ,true -0x436b 015961 rtn -: 015962 mouse_select2_device: -0x436c 015963 fetcht 1 ,mem_config_select_device_button_gpio -0x436d 015964 call gpio_get_bit -0x436e 015965 branch mouse_select_device_button_down ,true -0x436f 015966 rtn -: 015971 mouse_ready_reconnection_by_button: -0x4370 015972 fetcht 1 ,mem_device_flag -0x4371 015973 increase 1 ,temp -0x4372 015974 fetch 1 ,mem_device_number -0x4373 015975 isub temp ,null -0x4374 015976 ncall mouse_select_device_count_clean ,positive -0x4375 015977 storet 1 ,mem_device_flag -0x4376 015978 jam 0 ,mem_link_key_exists -0x4377 015979 call mouse_store_device_number2eeprom -0x4378 015980 call mouse_select_device_enable -0x4379 015982 branch mouse_set_reconnection -: 015984 mouse_store_device_number2eeprom: -0x437a 015985 arg 1 ,temp -0x437b 015986 arg mem_device_flag ,rega -0x437c 015987 arg 0 ,regb -0x437d 015988 branch iicd_write_eep_data -: 015990 mouse_set_reconnection: -0x437e 015991 call mouse_stop_bluetooth_mode -0x437f 015992 call mouse_select_device_disable -0x4380 015993 branch mouse_soft_reset -: 015994 mouse_stop_bluetooth_mode: -0x4381 015995 fetch 2 ,mem_ui_state_map -0x4382 015996 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect -0x4383 015997 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x4384 015998 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x4385 015999 branch mouse_stop_discovery -: 016001 mouse_disconnect: -0x4386 016002 bpatch patch1d_5 ,mem_patch1d -0x4387 016003 setarg 0 -0x4388 016004 store 2 ,mem_mouse_no_data_timer -0x4389 016005 fetch 2 ,mem_ui_state_map -0x438a 016006 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x438b 016007 fetch 2 ,mem_ui_state_map -0x438c 016008 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x438d 016009 rtn -: 016011 mouse_irtual_cable_unplug: -0x438e 016012 setarg 0x01 -0x438f 016013 store 6 ,mem_plap -0x4390 016014 jam rec_3_mode ,mem_record_bt_mode -0x4391 016015 branch mouse_unplug_clean_bdaddr -: 016018 mouse_cancel_reconnect: -0x4392 016019 call mouse_bt_cannel_reconn_enable -0x4393 016020 branch check_51cmd_bb_reconn_cancel -: 016022 mouse_bt_discovery_by_button: -0x4394 016023 fetch 1 ,mem_config_bt_button_gpio -0x4395 016024 rtneq gpio_disable -0x4396 016025 fetcht 1 ,mem_config_bt_button_gpio -0x4397 016026 call gpio_get_bit -0x4398 016027 branch mouse_bt_discovery_button_down ,true -: 016028 mouse_bt_discovery_button_up: -0x4399 016029 fetch 1 ,mem_ui_button_timeout -0x439a 016030 store 1 ,mem_combination_ui_button_count -0x439b 016031 fetch 1 ,mem_bt_discovey_button_statue -0x439c 016032 rtneq dpi_button_state_up -0x439d 016033 jam dpi_button_state_up ,mem_bt_discovey_button_statue -0x439e 016034 branch mouse_bt_discovery_button_down_disable -: 016035 mouse_bt_discovery_button_down: -0x439f 016036 call mouse_bt_discovry_timer -0x43a0 016037 fetch 1 ,mem_bt_discovey_button_statue -0x43a1 016038 rtneq dpi_button_state_down -0x43a2 016039 jam dpi_button_state_down ,mem_bt_discovey_button_statue -0x43a3 016040 call check_51cmd_bb_reconn_cancel -0x43a4 016041 branch mouse_bt_discovery_button_down_enable -: 016044 mouse_bt_discovery_cheak: -0x43a5 016045 fetch 1 ,mem_config_function_enable -0x43a6 016046 bbit1 enable_bt_button ,mouse_bt_discovery_by_button -: 016047 mouse_bt_discovery_commbination_key: -0x43a7 016048 call mouse_check_key_gpio -0x43a8 016049 beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down -: 016050 mouse_bt_discovery_commbination_key_up: -0x43a9 016051 fetch 1 ,mem_ui_button_timeout -0x43aa 016052 store 1 ,mem_combination_ui_button_count -0x43ab 016053 fetch 1 ,mem_bt_discovey_button_statue -0x43ac 016054 rtneq dpi_button_state_up -0x43ad 016055 jam dpi_button_state_up ,mem_bt_discovey_button_statue -0x43ae 016056 branch mouse_bt_discovery_button_down_disable -: 016059 mouse_bt_discovery_commbination_key_down: -0x43af 016060 call mouse_bt_discovry_timer -0x43b0 016061 fetch 1 ,mem_bt_discovey_button_statue -0x43b1 016062 rtneq dpi_button_state_down -0x43b2 016063 jam dpi_button_state_down ,mem_bt_discovey_button_statue -0x43b3 016064 call check_51cmd_bb_reconn_cancel -0x43b4 016065 branch mouse_bt_discovery_button_down_enable -: 016067 mouse_bt_discovry_timer: -0x43b5 016068 arg mem_combination_ui_button_count ,regc -0x43b6 016069 arg mouse_long_button_bt_discovry ,regb -0x43b7 016070 branch timer_single_step -: 016072 mouse_long_button_bt_discovry: -0x43b8 016073 arg mouse_long_bt_button_flag ,queue -0x43b9 016074 call mouse_enable_function_flag -0x43ba 016075 call app_evt_button_long_pressed -0x43bb 016076 branch mouse_bb_event_discovery_btn -: 016079 mouse_cpi_enable: -0x43bc 016080 arg mouse_cpi_flag ,queue -0x43bd 016081 branch mouse_enable_function_flag -: 016082 mouse_cpi_disable: -0x43be 016083 arg mouse_cpi_flag ,queue -0x43bf 016084 branch mouse_disable_function_flag -: 016085 mouse_select_device_enable: -0x43c0 016086 arg mouse_select_device_flag ,queue -0x43c1 016087 branch mouse_enable_function_flag -: 016088 mouse_select_device_disable: -0x43c2 016089 arg mouse_select_device_flag ,queue -0x43c3 016090 branch mouse_disable_function_flag -: 016091 mouse_bt_cannel_reconn_enable: -0x43c4 016092 arg mouse_bt_cannel_reconn_flag ,queue -0x43c5 016093 branch mouse_enable_function_flag -: 016094 mouse_bt_cannel_reconn_disable: -0x43c6 016095 arg mouse_bt_cannel_reconn_flag ,queue -0x43c7 016096 branch mouse_disable_function_flag -: 016097 mouse_bt_discovery_button_down_enable: -0x43c8 016098 arg mouse_bt_discovery_button_down_flag ,queue -0x43c9 016099 branch mouse_enable_function_flag -: 016100 mouse_bt_discovery_button_down_disable: -0x43ca 016101 arg mouse_bt_discovery_button_down_flag ,queue -0x43cb 016102 branch mouse_disable_function_flag -: 016106 mouse_select_device_count_clean: -0x43cc 016107 arg 1 ,temp -0x43cd 016108 rtn -: 016110 mouse_enable_function_flag: -0x43ce 016111 fetch mouse_flag_len ,mem_mouse_flag -0x43cf 016112 qset1 pdata -0x43d0 016113 store mouse_flag_len ,mem_mouse_flag -0x43d1 016114 rtn -: 016116 mouse_disable_function_flag: -0x43d2 016117 fetch mouse_flag_len ,mem_mouse_flag -0x43d3 016118 qset0 pdata -0x43d4 016119 store mouse_flag_len ,mem_mouse_flag -0x43d5 016120 rtn -: 016122 mouse_adc_read: -0x43d6 016123 fetch mouse_flag_len ,mem_mouse_flag -0x43d7 016124 rtnbit0 mouse_enable_adc -0x43d8 016125 fetch 1 ,mem_adc_read_timer -0x43d9 016126 increase 1 ,pdata -0x43da 016127 store 1 ,mem_adc_read_timer -0x43db 016128 sub pdata ,10 ,null -0x43dc 016129 rtn positive -0x43dd 016130 jam 0 ,mem_adc_read_timer -0x43de 016131 call adc_set_mode -0x43df 016132 call vdd_calculate_by_mode -0x43e0 016133 store 2 ,mem_mouse_vdd_now_vol -0x43e1 016134 arg mem_mouse_vdd_calculate_set ,rega -0x43e2 016135 call adc_bat_percent_lowpower_out -0x43e3 016136 fetch 1 ,mem_adc_power_flag -0x43e4 016137 bbit1 1 ,mouse_power_down -0x43e5 016138 bbit0 0 ,mouse_adc_no_low_voltage -0x43e6 016139 branch mouse_adc_low_voltage -: 016140 mouse_adc_low_voltage: -0x43e7 016141 arg mouse_low_voltage_flag ,queue -0x43e8 016142 branch mouse_enable_function_flag -: 016143 mouse_adc_no_low_voltage: -0x43e9 016144 arg mouse_low_voltage_flag ,queue -0x43ea 016145 branch mouse_disable_function_flag -: 016147 mouse_low_voltage_led_timer: -0x43eb 016148 fetch mouse_flag_len ,mem_mouse_flag -0x43ec 016149 rtnbit0 mouse_low_voltage_flag -0x43ed 016150 fetch 1 ,mem_config_low_voltage_alarm_gpio -0x43ee 016151 store 1 ,mem_mouse_struct_led_gpio -0x43ef 016152 fetch 1 ,mem_adc_low_volatage_led_timer_count -0x43f0 016153 pincrease 1 -0x43f1 016154 store 1 ,mem_adc_low_volatage_led_timer_count -0x43f2 016155 sub pdata ,20 ,null -0x43f3 016156 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive -0x43f4 016157 beq 2 ,mouse_low_voltage_led_on -0x43f5 016158 beq 4 ,mouse_low_voltage_led_off -0x43f6 016159 beq 6 ,mouse_low_voltage_led_on -0x43f7 016160 beq 8 ,mouse_low_voltage_led_off -0x43f8 016161 rtn -: 016162 mouse_adc_low_volatage_led_timer_count_clean: -0x43f9 016163 jam 1 ,mem_adc_low_volatage_led_timer_count -0x43fa 016164 branch mouse_low_voltage_led_off -: 016165 mouse_low_voltage_led_on: -0x43fb 016166 arg 0 ,rega -0x43fc 016167 jam ui_led_state_lighting ,mem_mouse_led_type -0x43fd 016168 branch ui_led_on_global -: 016169 mouse_low_voltage_led_off: -0x43fe 016170 arg 0 ,rega -0x43ff 016171 jam ui_led_state_lighting ,mem_mouse_led_type -0x4400 016172 branch ui_led_off_global -: 016174 mouse_g24_package_data: -0x4401 016175 call mouse_motion -0x4402 016176 nrtn user -0x4403 016177 arg 7 ,rega -0x4404 016178 arg mem_mouse_key ,regb -0x4405 016179 rtn -: 016181 mouse_g24_enter_lpm: -0x4406 016182 fetch 1 ,mem_mouse_24g_enter_lpm_enable -0x4407 016183 rtn blank -0x4408 016185 fetcht 1 ,mem_dpi_button_gpio -0x4409 016186 call gpio_get_bit -0x440a 016187 call mouse_24g_dpi_delay_init ,true -0x440b 016188 fetch 1 ,mem_24g_enter_lpm_timer -0x440c 016189 nrtn blank -0x440d 016190 call mouse_check_key_gpio -0x440e 016191 nrtn blank -0x440f 016192 branch g24_lpm_long_sleep -: 016194 mouse_24g_dpi_delay_init: -0x4410 016195 fetch 1 ,mem_dpi_button_gpio -0x4411 016196 rtneq ui_button_gpio_disable -0x4412 016197 jam 10 ,mem_24g_enter_lpm_timer -0x4413 016198 rtn -: 016201 mouse_load_flash_info_cheak: -0x4414 016202 call mouse_load_flash_flag -0x4415 016203 fetch 2 ,mem_store_flag -0x4416 016204 arg eeprom_init_flag ,temp -0x4417 016205 isub temp ,null -0x4418 016206 branch mouse_load_flash_device_info ,zero -0x4419 016207 storet 2 ,mem_store_flag -0x441a 016208 call mouse_ble_init_address -0x441b 016209 branch mouse_store_flash_device_info -: 016210 mouse_ble_init_address: -0x441c 016211 fetch 6 ,mem_le_lap -0x441d 016212 store 6 ,mem_device1_locall_addr -0x441e 016213 add pdata ,0x0100 ,pdata -0x441f 016214 store 6 ,mem_device2_locall_addr -0x4420 016215 add pdata ,0x0100 ,pdata -0x4421 016216 store 6 ,mem_device3_locall_addr -0x4422 016217 rtn -: 016220 mouse_load_flash_flag: -0x4423 016221 setarg mem_store_flag -0x4424 016222 arg mem_mouse_information_start ,temp -0x4425 016223 isub temp ,temp -0x4426 016224 fetch 3 ,mem_flash_base -0x4427 016225 iadd temp ,pdata -0x4428 016226 arg 2 ,temp -0x4429 016227 arg mem_store_flag ,rega -0x442a 016228 branch spid_read_flash -: 016231 mouse_load_flash_device_info: -0x442b 016232 setarg mem_mouse_information_end -0x442c 016233 arg mem_mouse_information_start ,temp -0x442d 016234 isub temp ,temp -0x442e 016235 fetch 3 ,mem_flash_base -0x442f 016236 arg mem_mouse_information_start ,rega -0x4430 016237 call spid_read_flash -0x4431 016238 call mouse_select_reconn_device -0x4432 016239 fetch 4 ,mem_mouse_24g_addr -0x4433 016240 call g24_head_ptr2regc -0x4434 016241 branch g24_store_mem_addr -: 016243 mouse_store_flash_device_info: -0x4435 016244 setarg mem_mouse_information_end -0x4436 016245 arg mem_mouse_information_start ,temp -0x4437 016246 isub temp ,temp -0x4438 016247 arg mem_mouse_information_start ,rega -0x4439 016248 fetch 3 ,mem_flash_base -0x443a 016249 branch flash_write -: 016251 mouse_store_eerpom_dpi: -0x443b 016252 arg 1 ,temp -0x443c 016253 arg mem_mouse_dpi ,rega -0x443d 016254 arg mouse_dpi_eeprom_offect ,regb -0x443e 016255 branch iicd_write_protect_eep_data -: 016257 mouse_load_eeprom_dpi: -0x443f 016258 arg 1 ,temp -0x4440 016259 arg mem_mouse_dpi ,rega -0x4441 016260 arg mouse_dpi_eeprom_offect ,regb -0x4442 016261 branch iicd_read_eep_data -: 016263 mouse_statue_cheak_timer: -0x4443 016264 rtnmark1 mark_24g -0x4444 016265 fetch mouse_flag_len ,mem_mouse_flag -0x4445 016266 rtnbit0 mouse_enable_statue_up -0x4446 016267 fetch 1 ,mem_mouse_1step_up_count -0x4447 016268 pincrease 1 -0x4448 016269 and pdata ,0x07 ,pdata -0x4449 016270 store 1 ,mem_mouse_1step_up_count -0x444a 016271 rtnne 0x07 -0x444b 016272 fetch 2 ,mem_ui_state_map -0x444c 016273 bbit1 ui_state_bt_connected ,mouse_check_statue_up -0x444d 016274 bbit1 ui_state_ble_connected ,mouse_check_statue_up -0x444e 016275 rtn -: 016280 mouse_check_statue_up: -0x444f 016281 bpatch patch1d_6 ,mem_patch1d -0x4450 016282 fetch 1 ,mem_mouse_2step_up_count -0x4451 016283 nrtn blank -0x4452 016284 fetch mouse_flag_len ,mem_mouse_flag -0x4453 016285 rtnbit0 mouse_statue_up_flag -0x4454 016286 fetch 1 ,mem_sensor_squal_reg -0x4455 016287 call sensor_read -0x4456 016288 store 1 ,mem_sensor_iqc -0x4457 016289 sub pdata ,0x10 ,null -0x4458 016290 branch mouse_statue_up_timer_init ,positive -0x4459 016291 jam 0 ,mem_mouse_2step_up_count -0x445a 016292 rtn -: 016294 mouse_statue_up_timer_init: -0x445b 016295 jam 30 ,mem_mouse_2step_up_count -0x445c 016296 rtn -: 016297 mouse_statue_up_timer: -0x445d 016298 arg mem_mouse_2step_up_count ,regc -0x445e 016299 arg mouse_statue_up ,regb -0x445f 016300 branch timer_single_step -: 016302 mouse_statue_up: -0x4460 016303 fetch 1 ,mem_sensor_squal_reg -0x4461 016304 call twspi_read -0x4462 016305 sub pdata ,0x10 ,null -0x4463 016306 nrtn positive -0x4464 016307 fetch mouse_flag_len ,mem_mouse_flag -0x4465 016308 rtnbit0 mouse_statue_up_flag -0x4466 016309 arg mouse_statue_up_flag ,queue -0x4467 016310 call mouse_disable_function_flag -0x4468 016311 jam 0 ,mem_lpm_mult -0x4469 016312 jam 30 ,mem_mouse_statue_led_timer -0x446a 016313 call mouse_devce_led_off -0x446b 016314 fetch mouse_flag_len ,mem_mouse_flag -0x446c 016315 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up -: 016316 mouse_two_device_statue_up: -0x446d 016317 fetch 1 ,mem_device_flag -0x446e 016318 beq mode_bt_device1 ,mouse_device1_led_on -0x446f 016319 beq mode_bt_device2 ,mouse_device_blink_led_init -0x4470 016320 rtn -: 016321 mouse_three_device_statue_up: -0x4471 016322 fetch 1 ,mem_device_flag -0x4472 016323 beq mode_bt_device1 ,mouse_device1_led_on -0x4473 016324 beq mode_bt_device2 ,mouse_device2_led_on -0x4474 016325 beq mode_bt_device3 ,mouse_device3_led_on -0x4475 016326 rtn -: 016328 mouse_device_blink_led_init: -0x4476 016329 fetch 1 ,mem_config_device1_led_gpio -0x4477 016330 branch mouse_led_blink -: 016334 mouse_statue_led_off: -0x4478 016335 jam 0x20 ,mem_lpm_mult -0x4479 016336 branch mouse_devce_led_off -: 016340 mouse_devce1_led_off: -0x447a 016341 fetch 1 ,mem_config_device1_led_gpio -0x447b 016342 rtneq gpio_disable -0x447c 016343 store 1 ,mem_mouse_struct_led_gpio -0x447d 016344 branch mouse_led_off -: 016346 mouse_devce2_led_off: -0x447e 016347 fetch 1 ,mem_config_device2_led_gpio -0x447f 016348 rtneq gpio_disable -0x4480 016349 store 1 ,mem_mouse_struct_led_gpio -0x4481 016350 branch mouse_led_off -: 016352 mouse_devce_led_off: -0x4482 016353 call mouse_led_off -0x4483 016354 call mouse_devce1_led_off -0x4484 016355 call mouse_devce2_led_off -: 016356 mouse_devce3_led_off: -0x4485 016357 fetch 1 ,mem_config_device3_led_gpio -0x4486 016358 rtneq gpio_disable -0x4487 016359 store 1 ,mem_mouse_struct_led_gpio -0x4488 016360 branch mouse_led_off -: 016362 mouse_device1_led_on: -0x4489 016363 fetch 1 ,mem_config_device1_led_gpio -0x448a 016364 store 1 ,mem_mouse_struct_led_gpio -0x448b 016365 branch mouse_led_on -: 016366 mouse_device2_led_on: -0x448c 016367 fetch 1 ,mem_config_device2_led_gpio -0x448d 016368 store 1 ,mem_mouse_struct_led_gpio -0x448e 016369 branch mouse_led_on -: 016370 mouse_device3_led_on: -0x448f 016371 fetch 1 ,mem_config_device3_led_gpio -0x4490 016372 store 1 ,mem_mouse_struct_led_gpio -0x4491 016373 branch mouse_led_on -: 016377 mouse_polling_device: -0x4492 016378 bpatch patch1d_7 ,mem_patch1d -0x4493 016379 fetch 1 ,mem_reconn_times -0x4494 016380 increase -1 ,pdata -0x4495 016381 store 1 ,mem_reconn_times -0x4496 016382 fetcht 1 ,mem_device_flag -0x4497 016383 increase 1 ,temp -0x4498 016384 fetch 1 ,mem_device_number -0x4499 016385 isub temp ,null -0x449a 016386 ncall mouse_select_device_count_clean ,positive -0x449b 016387 storet 1 ,mem_device_flag -0x449c 016388 jam 0 ,mem_link_key_exists -0x449d 016389 call mouse_store_device_number2eeprom -0x449e 016390 call mouse_before_store_reconn_info -0x449f 016391 branch mouse_check_reconn_target -: 016393 mouse_power_down: -0x44a0 016394 call mouse_devce_led_off -0x44a1 016395 setarg 0 -0x44a2 016396 store 8 ,mem_gpio_wakeup_low -0x44a3 016397 branch lpm_hibernate -: 016408 remote_car_init: -0x44a4 016409 rtn wake -0x44a5 016410 hfetch 1 ,core_gpio_sel1 -0x44a6 016411 and_into 0xf0 ,pdata -0x44a7 016412 hstore 1 ,core_gpio_sel1 -0x44a8 016413 call keyscan_key_init -0x44a9 016414 setarg remote_car_le_before_hibernate -0x44aa 016415 store 2 ,mem_cb_before_hibernate -0x44ab 016417 setarg remote_car_process_lpm_before -0x44ac 016418 store 2 ,mem_cb_before_lpm -0x44ad 016420 setarg remote_car_scale_process_idle -0x44ae 016421 store 2 ,mem_cb_idle_process -0x44af 016423 setarg remote_car_scale_process_bb_event -0x44b0 016424 store 2 ,mem_cb_bb_event_process -0x44b1 016426 setarg app_get_lpm_wake_lock -0x44b2 016427 store 2 ,mem_cb_check_wakelock -0x44b3 016429 call g24_head_ptr2regc -0x44b4 016430 setarg remote_car_g24_package_data -0x44b5 016431 add regc ,offset_24g_cb_data ,contw -0x44b6 016432 istore 2 ,contw -0x44b7 016434 setarg remote_car_g24_enter_lpm -0x44b8 016435 add regc ,offset_24g_cb_lpm_prepare ,contw -0x44b9 016436 istore 2 ,contw -0x44ba 016438 setarg remote_car_process_lpm_before -0x44bb 016439 add regc ,offset_24g_cb_lpm_before ,contw -0x44bc 016440 istore 2 ,contw -0x44bd 016442 setarg remote_car_event_timer -0x44be 016443 store 2 ,mem_cb_event_timer -0x44bf 016445 setarg remote_car_power_off_signal -0x44c0 016446 store 2 ,mem_remote_car_power_off_cb -0x44c1 016448 setarg remote_car_soft_switch_power_on_signal -0x44c2 016449 store 2 ,mem_remote_car_power_standby_cb -0x44c3 016451 setarg remote_car_send_key_data -0x44c4 016452 store 2 ,mem_cb_remote_car_keyscan -0x44c5 016454 bpatch patch1e_0 ,mem_patch1e -0x44c6 016455 call remote_car_init_environment -0x44c7 016456 call queue_init -0x44c8 016457 jam 2 ,mem_lpm_mult -0x44c9 016458 fetch 1 ,mem_remote_car_config_soft_switch_enable -0x44ca 016459 store 1 ,mem_remote_car_hard_soft_switch -0x44cb 016460 beq hard_switch ,remote_car_hard_switch_power_on_signal -0x44cc 016461 fetch 1 ,mem_remote_car_config_soft_switch_gpio -0x44cd 016462 store 1 ,mem_ui_button_gpio -: 016463 remote_car_soft_switch_power_on_init: -0x44ce 016464 call remote_car_ui_led_init -0x44cf 016465 call ui_button_init -0x44d0 016466 call ui_button_polling -0x44d1 016467 jam power_starting ,mem_remote_car_power_state -0x44d2 016468 fetch 2 ,mem_ui_state_map -0x44d3 016469 rtnbit1 ui_state_btn_down -0x44d4 016470 branch app_enter_hibernate -: 016474 remote_car_hard_switch_power_on_signal: -0x44d5 016475 jam power_standby ,mem_remote_car_power_state -: 016476 remote_car_soft_switch_power_on_signal: -0x44d6 016477 call remote_car_ui_led_init -0x44d7 016479 arg 0 ,rega -0x44d8 016480 call ui_led_blink_start_global -: 016481 remote_car_connect_24g_mode: -0x44d9 016482 branch g24_auto_pair_start -: 016484 remote_car_power_off_signal: -0x44da 016485 branch remote_car_ui_led_init -: 016487 remote_car_ui_led_init: -0x44db 016488 bpatch patch1e_1 ,mem_patch1e -0x44dc 016489 fetch 1 ,mem_remote_car_config_connect_led_gpio -0x44dd 016490 bne invalid_pin_num ,remote_car_pairing_led_gpio_set -: 016491 remote_car_ui_led_init_1: -0x44de 016492 fetcht 1 ,mem_remote_car_led_map -0x44df 016493 branch gpio_config_output -: 016494 remote_car_pairing_led_gpio_set: -0x44e0 016495 store 1 ,mem_remote_car_led_map -0x44e1 016496 branch remote_car_ui_led_init_1 -: 016499 remote_car_init_environment: -0x44e2 016500 call g24_set_device_addr -0x44e3 016501 fetch 2 ,mem_remote_car_no_data_timeout -0x44e4 016502 store 2 ,mem_remote_car_no_data_timer -0x44e5 016503 branch remote_car_get_adc_default_data -: 016505 remote_car_le_before_hibernate: -: 016510 remote_car_in_enter_hibernate: -0x44e6 016511 call gpio_set_before_lpm_common -0x44e7 016512 call remote_car_process_lpm_before -0x44e8 016513 branch app_enter_hibernate -: 016515 remote_car_process_lpm_before: -0x44e9 016516 branch keyscan_process_lpm_before -: 016518 remote_car_g24_enter_lpm: -0x44ea 016519 fetch 1 ,mem_remote_car_24g_enter_lpm_enable -0x44eb 016520 rtn blank -0x44ec 016522 branch g24_lpm_long_sleep -: 016524 remote_car_process_auto_pair_exit: -0x44ed 016525 rtn -: 016527 remote_car_key_scan_process: -0x44ee 016528 branch keyscan_key_process -: 016530 remote_car_scale_process_idle: -0x44ef 016531 call remote_car_rocker_process -0x44f0 016532 call remote_car_24g_status_process -0x44f1 016533 branch remote_car_key_scan_process -: 016535 remote_car_scale_process_bb_event: -0x44f2 016536 copy regc ,pdata -0x44f3 016537 beq bt_evt_button_up ,app_event_button_up -0x44f4 016538 beq bt_evt_button_long_pressed ,app_button_long_pressed -0x44f5 016539 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete -0x44f6 016540 beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success -0x44f7 016541 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail -0x44f8 016542 rtn -: 016544 remote_car_24g_attempt_fail: -0x44f9 016545 jam 1 ,mem_remote_car_24g_enter_lpm_enable -0x44fa 016546 rtn -: 016548 remote_car_24g_pairing_complete: -0x44fb 016549 jam 1 ,mem_remote_car_24g_enter_lpm_enable -0x44fc 016550 jam work_paired ,mem_remote_car_24g_auto_work_step -0x44fd 016551 jam work_paired ,mem_remote_car_24g_pair_success_flag -0x44fe 016552 rtn -: 016554 remote_car_24g_attempt_success: -0x44ff 016555 jam 1 ,mem_remote_car_24g_enter_lpm_enable -0x4500 016556 jam work_paired ,mem_remote_car_24g_auto_work_step -0x4501 016557 jam work_paired ,mem_remote_car_24g_pair_success_flag -0x4502 016558 rtn -: 016560 remote_car_24g_status_process: -0x4503 016561 fetch 1 ,mem_remote_car_24g_auto_work_step -0x4504 016562 rtneq power_on -0x4505 016563 fetch 1 ,mem_remote_car_24g_status -0x4506 016564 rtneq work_paired -0x4507 016565 jam work_paired ,mem_remote_car_24g_status -: 016566 remote_car_scale_process_paired: -0x4508 016567 arg 0 ,rega -0x4509 016568 branch ui_led_off_global -: 016569 remote_car_scale_process_shutdown: -0x450a 016570 arg 0 ,rega -0x450b 016571 call ui_led_off_global -0x450c 016572 call remote_car_ui_led_init -0x450d 016573 branch app_enter_hibernate -: 016575 remote_car_event_timer: -0x450e 016576 call app_power_timer -0x450f 016577 branch remote_car_no_data_timer -: 016579 remote_car_no_data_timer: -0x4510 016580 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable -0x4511 016581 rtn blank -0x4512 016582 arg mem_remote_car_no_data_timer ,regc -0x4513 016583 arg remote_car_scale_process_shutdown ,regb -0x4514 016584 branch timer_single_step_2b -: 016587 remote_car_get_adc_default_data: -0x4515 016588 call remote_car_rocker_get_x -0x4516 016589 storet 2 ,mem_current_vdd_value_default_mid_x -0x4517 016590 call remote_car_rocker_get_y -0x4518 016591 storet 2 ,mem_current_vdd_value_default_mid_y -0x4519 016592 rtn -: 016593 remote_car_rocker_data_get: -: 016594 remote_car_rocker_get_x: -0x451a 016595 fetch 2 ,mem_current_vdd_value_default_mid_x -0x451b 016596 store 2 ,mem_current_vdd_value_default_mid_temp -0x451c 016597 call remote_car_get_adc_from_gpio6 -0x451d 016598 call remote_car_rocker_get_value -0x451e 016599 store 1 ,mem_rocker_status -: 016600 remote_car_rocker_get_y: -0x451f 016601 fetch 2 ,mem_current_vdd_value_default_mid_y -0x4520 016602 store 2 ,mem_current_vdd_value_default_mid_temp -0x4521 016603 call remote_car_get_adc_from_gpio7 -0x4522 016604 call remote_car_rocker_get_value -0x4523 016605 store 1 ,mem_rocker_status + 1 -0x4524 016606 rtn -: 016607 remote_car_rocker_get_value: -0x4525 016608 fetch 2 ,mem_current_vdd_default_range -0x4526 016609 copy pdata ,rega -0x4527 016610 fetch 2 ,mem_current_vdd_value_default_mid_temp -0x4528 016611 call remote_car_rocker_mid_value_adjust -0x4529 016612 fetch 1 ,mem_rocker_work_status -0x452a 016613 nbranch remote_car_rocker_translate_key ,blank -0x452b 016614 nrtn positive -0x452c 016615 fetcht 2 ,mem_current_vdd_value_default_mid_temp -0x452d 016616 rtn -: 016617 remote_car_rocker_mid_value_adjust: -0x452e 016618 isub temp ,pdata -0x452f 016619 branch remote_car_rocker_mid_adjust_positive ,positive -0x4530 016620 sub pdata ,0 ,pdata -0x4531 016621 jam 1 ,mem_rocker_negative_flag -0x4532 016622 isub rega ,null -0x4533 016623 rtn -: 016624 remote_car_rocker_mid_adjust_positive: -0x4534 016625 jam 0 ,mem_rocker_negative_flag -0x4535 016626 isub rega ,null -0x4536 016627 rtn -: 016628 remote_car_rocker_translate_key: -0x4537 016629 nbranch remote_car_rocker_middle_key ,positive -0x4538 016630 fetch 1 ,mem_rocker_negative_flag -0x4539 016631 nbranch remote_car_rocker_negative_key ,blank -: 016632 remote_car_rocker_positive_key: -0x453a 016633 setarg rocker_positive_key -0x453b 016634 rtn -: 016635 remote_car_rocker_negative_key: -0x453c 016636 setarg rocker_negative_key -0x453d 016637 rtn -: 016638 remote_car_rocker_middle_key: -0x453e 016639 setarg rocker_middle_key -0x453f 016640 rtn -: 016641 remote_car_get_adc_from_gpio6: -0x4540 016642 jam 0x33 ,mem_adc_channel -0x4541 016643 branch adc_set_mode -: 016644 remote_car_get_adc_from_gpio7: -0x4542 016645 jam 0x34 ,mem_adc_channel -0x4543 016646 branch adc_set_mode -: 016649 remote_car_rocker_process: -0x4544 016650 fetch 1 ,mem_remote_car_config_check_way -0x4545 016651 rtnne car_remote_check_rocker -: 016652 remote_car_read_rocker_check_start: -0x4546 016653 bpatch patch1e_2 ,mem_patch1e -0x4547 016654 jam 1 ,mem_rocker_work_status -0x4548 016655 call remote_car_rocker_data_get -0x4549 016656 fetch 2 ,mem_rocker_status -0x454a 016657 fetcht 2 ,mem_rocker_last_status -0x454b 016658 isub temp ,null -0x454c 016659 rtn zero -0x454d 016660 store 2 ,mem_rocker_last_status -0x454e 016661 call remote_car_rocker_x_to_key -0x454f 016662 branch remote_car_rocker_y_to_key -: 016664 remote_car_rocker_x_to_key: -0x4550 016665 fetch 1 ,mem_rocker_x_status -0x4551 016666 branch rocker_to_queue_set_0 ,blank -0x4552 016667 increase -1 ,pdata -0x4553 016668 branch remote_car_rocker_to_key -: 016669 remote_car_rocker_y_to_key: -0x4554 016670 fetch 1 ,mem_rocker_y_status -0x4555 016671 branch rocker_to_queue_set_2 ,blank -0x4556 016672 increase 1 ,pdata -: 016673 remote_car_rocker_to_key: -0x4557 016674 copy pdata ,queue -0x4558 016675 arg 1 ,rega -0x4559 016676 branch remote_car_send_key_data -: 016678 rocker_to_queue_set_0: -0x455a 016679 arg 0 ,queue -0x455b 016680 arg 0 ,rega -0x455c 016681 branch remote_car_send_key_data -: 016682 rocker_to_queue_set_2: -0x455d 016683 arg 2 ,queue -0x455e 016684 arg 0 ,rega -0x455f 016685 branch remote_car_send_key_data -: 016687 remote_car_send_key_data: -0x4560 016688 copy rega ,pdata -0x4561 016689 store 1 ,mem_remote_key_status -0x4562 016690 fetch 1 ,mem_remote_car_24g_auto_work_step -0x4563 016691 beq power_on ,g24_auto_pair_start -0x4564 016692 fetch 2 ,mem_remote_car_no_data_timeout -0x4565 016693 store 2 ,mem_remote_car_no_data_timer -0x4566 016694 fetch 1 ,mem_remote_key_status -0x4567 016695 branch remote_car_key_is_release ,blank -: 016696 remote_car_key_is_press: -0x4568 016697 bpatch patch1e_3 ,mem_patch1e -0x4569 016698 arg 0 ,rega -0x456a 016699 call ui_led_on_global -: 016700 remote_car_attack_key_press: -0x456b 016701 copy queue ,pdata -0x456c 016702 beq 4 ,remote_car_send_attack_key4_press -0x456d 016703 beq 5 ,remote_car_send_attack_key5_press -0x456e 016704 beq 6 ,remote_car_send_fire_key6_press -: 016707 remote_car_motor_key_press: -0x456f 016708 call remote_car_device_layout_select -0x4570 016709 beq control_f_b_ten ,remote_car_single_motor_key_is_press -0x4571 016710 beq control_l_r_ten ,remote_car_double_motor_key_press -0x4572 016711 beq control_l_r_lr ,remote_car_single_motor_key_is_press -0x4573 016712 rtn -: 016714 remote_car_single_motor_key_is_press: -0x4574 016715 copy queue ,pdata -0x4575 016716 beq 0 ,remote_car_send_motor1_key0_press -0x4576 016717 beq 1 ,remote_car_send_motor1_key1_press -0x4577 016718 beq 2 ,remote_car_send_motor2_key2_press -0x4578 016719 beq 3 ,remote_car_send_motor2_key3_press -0x4579 016720 rtn -: 016722 remote_car_double_motor_key_press: -0x457a 016723 copy queue ,pdata -0x457b 016724 beq 0 ,remote_car_send_double_motor_key0_press -0x457c 016725 beq 1 ,remote_car_send_double_motor_key1_press -0x457d 016726 beq 2 ,remote_car_send_double_motor_key2_press -0x457e 016727 beq 3 ,remote_car_send_double_motor_key3_press -0x457f 016728 rtn -: 016730 remote_car_key_is_release: -0x4580 016731 bpatch patch1e_4 ,mem_patch1e -0x4581 016732 arg 0 ,rega -0x4582 016733 call ui_led_off_global -: 016734 remote_car_attack_key_release: -0x4583 016735 copy queue ,pdata -0x4584 016736 beq 4 ,remote_car_send_attack_key4_rel -0x4585 016737 beq 5 ,remote_car_send_attack_key5_rel -: 016740 remote_car_motor_key_release: -0x4586 016741 call remote_car_device_layout_select -0x4587 016742 beq control_f_b_ten ,remote_car_single_motor_key_rel -0x4588 016743 beq control_l_r_ten ,remote_car_double_motor_key_rel -0x4589 016744 beq control_l_r_lr ,remote_car_single_motor_key_rel -0x458a 016745 rtn -: 016747 remote_car_device_layout_select: -0x458b 016748 fetch 1 ,mem_remote_car_config_layout -0x458c 016749 fetcht 1 ,mem_remote_car_config_key_map -0x458d 016750 ior temp ,pdata -0x458e 016751 rtn -: 016754 remote_car_send_motor1_key0_press: -0x458f 016755 jam motor_positive ,mem_remote_car_24g_motor1_payload -0x4590 016756 branch remote_car_send_key -: 016757 remote_car_send_motor1_key1_press: -0x4591 016758 jam motor_negative ,mem_remote_car_24g_motor1_payload -0x4592 016759 branch remote_car_send_key -: 016760 remote_car_send_motor2_key2_press: -0x4593 016761 jam motor_positive ,mem_remote_car_24g_motor2_payload -0x4594 016762 branch remote_car_send_key -: 016763 remote_car_send_motor2_key3_press: -0x4595 016764 jam motor_negative ,mem_remote_car_24g_motor2_payload -0x4596 016765 branch remote_car_send_key -: 016768 remote_car_send_double_motor_key0_press: -0x4597 016769 jam motor_positive ,mem_remote_car_24g_motor1_payload -0x4598 016770 jam motor_positive ,mem_remote_car_24g_motor2_payload -0x4599 016771 branch remote_car_send_key -: 016772 remote_car_send_double_motor_key1_press: -0x459a 016773 jam motor_negative ,mem_remote_car_24g_motor1_payload -0x459b 016774 jam motor_negative ,mem_remote_car_24g_motor2_payload -0x459c 016775 branch remote_car_send_key -: 016776 remote_car_send_double_motor_key2_press: -0x459d 016777 jam motor_negative ,mem_remote_car_24g_motor1_payload -0x459e 016778 jam motor_positive ,mem_remote_car_24g_motor2_payload -0x459f 016779 branch remote_car_send_key -: 016780 remote_car_send_double_motor_key3_press: -0x45a0 016781 jam motor_positive ,mem_remote_car_24g_motor1_payload -0x45a1 016782 jam motor_negative ,mem_remote_car_24g_motor2_payload -0x45a2 016783 branch remote_car_send_key -: 016786 remote_car_send_attack_key4_press: -0x45a3 016787 jam motor_positive ,mem_remote_car_24g_motor3_payload -0x45a4 016788 branch remote_car_send_key -: 016789 remote_car_send_attack_key5_press: -0x45a5 016790 jam motor_negative ,mem_remote_car_24g_motor3_payload -0x45a6 016791 branch remote_car_send_key -: 016793 remote_car_send_fire_key6_press: -0x45a7 016794 jam 0x01 ,mem_remote_car_24g_fire_send_payload -0x45a8 016795 branch remote_car_send_attack -: 016797 remote_car_single_motor_key_rel: -0x45a9 016798 copy queue ,pdata -0x45aa 016799 beq 0 ,remote_car_send_motor1_key0_rel -0x45ab 016800 beq 1 ,remote_car_send_motor1_key1_rel -0x45ac 016801 beq 2 ,remote_car_send_motor2_key2_rel -0x45ad 016802 beq 3 ,remote_car_send_motor2_key3_rel -0x45ae 016803 rtn -: 016805 remote_car_double_motor_key_rel: -0x45af 016806 copy queue ,pdata -0x45b0 016807 beq 0 ,remote_car_send_double_motor_key0_rel -0x45b1 016808 beq 1 ,remote_car_send_double_motor_key1_rel -0x45b2 016809 beq 2 ,remote_car_send_double_motor_key2_rel -0x45b3 016810 beq 3 ,remote_car_send_double_motor_key3_rel -0x45b4 016811 rtn -: 016813 remote_car_send_motor1_key0_rel: -: 016814 remote_car_send_motor1_key1_rel: -0x45b5 016815 jam motor_stop ,mem_remote_car_24g_motor1_payload -0x45b6 016816 branch remote_car_send_key -: 016817 remote_car_send_motor2_key2_rel: -: 016818 remote_car_send_motor2_key3_rel: -0x45b7 016819 jam motor_stop ,mem_remote_car_24g_motor2_payload -0x45b8 016820 branch remote_car_send_key -: 016822 remote_car_send_double_motor_key0_rel: -: 016823 remote_car_send_double_motor_key1_rel: -: 016824 remote_car_send_double_motor_key2_rel: -: 016825 remote_car_send_double_motor_key3_rel: -0x45b9 016826 jam motor_stop ,mem_remote_car_24g_motor1_payload -0x45ba 016827 jam motor_stop ,mem_remote_car_24g_motor2_payload -0x45bb 016828 branch remote_car_send_key -: 016830 remote_car_send_attack_key4_rel: -: 016831 remote_car_send_attack_key5_rel: -0x45bc 016832 jam motor_stop ,mem_remote_car_24g_motor3_payload -0x45bd 016833 branch remote_car_send_key -: 016835 remote_car_send_key: -0x45be 016836 arg mem_remote_car_24g_motor_packet ,rega -0x45bf 016837 branch queue_push -: 016838 remote_car_send_attack: -0x45c0 016839 arg mem_remote_car_24g_fire_packet ,rega -0x45c1 016840 branch queue_push -: 016842 remote_car_g24_package_data: -0x45c2 016843 fetch 1 ,mem_remote_car_24g_pair_success_flag -0x45c3 016844 beq work_paired ,remote_car_g24_send_empty -0x45c4 016845 arg mem_remote_car_24g_tx_temp ,rega -0x45c5 016846 call queue_pop -0x45c6 016847 nbranch remote_car_moto_data ,user -: 016848 remote_car_g24_package_data_continue: -0x45c7 016849 arg mem_remote_car_24g_tx_temp ,contr -0x45c8 016850 ifetch 1 ,contr -0x45c9 016851 copy pdata ,rega -0x45ca 016852 arg mem_remote_car_24g_tx_temp + 1 ,regb -0x45cb 016855 rtn -: 016857 remote_car_g24_send_empty: -0x45cc 016858 jam 0 ,mem_remote_car_24g_pair_success_flag -0x45cd 016859 enable user -0x45ce 016860 arg 1 ,rega -0x45cf 016861 arg mem_remote_car_empty_packet ,regb -0x45d0 016862 rtn -: 016864 remote_car_moto_data: -0x45d1 016865 fetch 1 ,mem_remote_car_24g_tx_temp + 3 -0x45d2 016866 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next -0x45d3 016867 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next -0x45d4 016868 rtn -: 016869 remote_car_moto_data_next: -0x45d5 016870 fetch 1 ,mem_remote_car_24g_tx_temp + 6 -0x45d6 016871 nbranch remote_car_moto_data_enable_user ,blank -0x45d7 016872 fetch 1 ,mem_remote_car_24g_tx_temp + 8 -0x45d8 016873 nbranch remote_car_moto_data_enable_user ,blank -0x45d9 016874 fetch 1 ,mem_remote_car_24g_tx_temp + 10 -0x45da 016875 nbranch remote_car_moto_data_enable_user ,blank -0x45db 016876 rtn -: 016877 remote_car_moto_data_enable_user: -0x45dc 016878 enable user -0x45dd 016879 branch remote_car_g24_package_data_continue -: 016887 shutter_init: -0x45de 016888 rtn wake -0x45df 016889 hfetch 1 ,core_gpio_sel1 -0x45e0 016890 and_into 0xfc ,pdata -0x45e1 016891 hstore 1 ,core_gpio_sel1 -0x45e2 016892 setarg shutter_le_before_hibernate -0x45e3 016893 store 2 ,mem_cb_before_hibernate -0x45e4 016895 setarg shutter_process_lpm_before -0x45e5 016896 store 2 ,mem_cb_before_lpm -0x45e6 016898 setarg app_enter_hibernate -0x45e7 016899 store 2 ,mem_cb_discovry_timeout -0x45e8 016901 setarg shutter_process_idle -0x45e9 016902 store 2 ,mem_cb_idle_process -0x45ea 016904 setarg shutter_process_bb_event -0x45eb 016905 store 2 ,mem_cb_bb_event_process -0x45ec 016907 setarg shutter_le_scale_lpm_lock -0x45ed 016908 store 2 ,mem_cb_check_wakelock -0x45ee 016910 setarg ble_shutter_receive_data -0x45ef 016911 store 2 ,mem_cb_att_write -0x45f0 016913 setarg shutter_le_bb_event_timer -0x45f1 016914 store 2 ,mem_cb_event_timer -0x45f2 016916 setarg shutter_key_change -0x45f3 016917 store 2 ,mem_cb_shutter_keycan -0x45f4 016919 setarg shutter_soft_swtich_power_on -0x45f5 016920 store 2 ,mem_shutter_soft_switch_poweron_callback_function -0x45f6 016921 setarg shutter_soft_swtich_power_off -0x45f7 016922 store 2 ,mem_shutter_soft_switch_poweroff_callback_function -0x45f8 016924 call le_modified_name -0x45f9 016925 call shutter_load_bluetooth_config_by_user_config -0x45fa 016926 call shutter_init_bluetooth_config -0x45fb 016927 call shutter_init_param -0x45fc 016928 call keyscan_key_init -0x45fd 016929 call shutter_load_buffer_config_form_datarom -0x45fe 016930 call queue_init -0x45ff 016931 call ui_led_init_global -0x4600 016932 call shutter_load_bluetooth_config -0x4601 016933 call shutter_load_bluetooth_config_by_eeprom -0x4602 016935 bpatch patch1e_5 ,mem_patch1e -0x4603 016936 call classic_shutter_load_reconn_info -0x4604 016937 fetch 1 ,mem_shutter_hard_soft_switch_case -0x4605 016938 beq hard_switch ,shutter_hart_swtich_power_on -0x4606 016939 fetch 1 ,mem_shutter_soft_switch_button_gpio -0x4607 016940 store 1 ,mem_ui_button_gpio -0x4608 016941 branch ui_soft_swtich_init -: 016944 shutter_hart_swtich_power_on: -0x4609 016945 jam ui_button_gpio_disable ,mem_ui_button_gpio -0x460a 016946 jam ss_state_power_on ,mem_shutter_soft_switch_power_state -0x460b 016947 branch shutter_start_reconnect -: 016951 shutter_le_scale_lpm_lock: -0x460c 016952 fetch 1 ,mem_shutter_soft_switch_power_state -0x460d 016953 beq ss_state_power_off ,app_get_lpm_wake_lock -0x460e 016954 call l2cap_malloc_get_full_map -0x460f 016955 fetch 1 ,mem_used_map -0x4610 016956 nbranch app_get_lpm_wake_lock ,blank -0x4611 016957 branch app_put_lpm_wake_lock -: 016961 shutter_process_bb_event: -0x4612 016962 copy regc ,pdata -0x4613 016964 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect -0x4614 016965 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect -0x4615 016966 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed -0x4616 016967 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete -0x4617 016968 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect -0x4618 016969 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect -0x4619 016970 beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake -0x461a 016971 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout -0x461b 016972 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug -0x461c 016973 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff -0x461d 016974 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information -0x461e 016976 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect -0x461f 016977 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect -0x4620 016978 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete -0x4621 016979 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response -0x4622 016981 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press -0x4623 016982 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down -0x4624 016983 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up -0x4625 016984 rtn -: 016989 classic_shutter_process_baseband_connect: -0x4626 016990 jam 0 ,mem_classic_shutter_hid_disconn_count -0x4627 016991 jam 0 ,mem_classic_shutter_cable_unplug_conut -0x4628 016992 rtn -: 016995 classic_shutter_process_baseband_disconnect: -0x4629 016996 call classic_shutter_disconnect_clear_flag -0x462a 016997 branch classic_shutter_process_reconnect_failed -: 016999 classic_shutter_disconnect_clear_flag: -0x462b 017000 jam app_handshake_null ,mem_app_handshake_flag -0x462c 017001 jam 0 ,mem_hid_handshake_timer_count -0x462d 017002 jam 0 ,mem_unsniff2sniff_timer_count -0x462e 017003 jam 0 ,mem_classic_shutter_cable_unplug_conut -0x462f 017004 jam 0 ,mem_classic_shutter_hid_disconn_count -0x4630 017005 branch queue_init -: 017008 classic_shutter_process_reconnect_failed: -0x4631 017009 call app_disconn_reason_clear -0x4632 017010 branch shutter_start_bluetooth_discovery -: 017013 classic_shutter_process_setup_complete: -0x4633 017014 call shutter_stop_bluetooth_discovery -0x4634 017015 branch app_led_stop_blink -: 017018 classic_shutter_process_hid_connect: -0x4635 017019 setarg hid_handshake_timeout -0x4636 017020 store 1 ,mem_hid_handshake_timer_count -0x4637 017021 rtn -: 017024 classic_shutter_process_hid_disconnect: -0x4638 017025 jam 0 ,mem_classic_shutter_cable_unplug_conut -0x4639 017026 setarg flag_shutter_hid_disconn_timeout -0x463a 017027 store 1 ,mem_classic_shutter_hid_disconn_count -0x463b 017028 rtn -: 017031 classic_shutter_process_hid_handshake: -0x463c 017032 fetch 1 ,mem_app_handshake_flag -0x463d 017033 rtneq app_handshake_done -0x463e 017034 jam app_handshake_done ,mem_app_handshake_flag -0x463f 017035 call app_lpm_mult_enable -0x4640 017036 call app_store_reconn_info -0x4641 017037 call shutter_stop_bluetooth_discovery -0x4642 017038 call app_led_off -0x4643 017039 branch app_bt_enter_sniff -: 017042 classic_shutter_process_reconnect_page_timeout: -0x4644 017043 branch classic_shutter_process_reconnect_failed -: 017046 classic_shutter_process_virtual_cable_unplug: -0x4645 017047 setarg flag_shutter_cable_unplug_timeout -0x4646 017048 store 1 ,mem_classic_shutter_cable_unplug_conut -0x4647 017049 rtn -: 017052 classic_shutter_process_remote_unsniff: -0x4648 017053 branch app_start_auto_sniff -: 017057 classic_shutter_process_store_reconnect_information: -0x4649 017058 arg nvram_eeprom_offset ,regb -0x464a 017059 fetch 1 ,mem_nv_data_number -0x464b 017060 mul32 pdata ,34 ,temp -0x464c 017061 fetch 2 ,mem_nv_data_ptr -0x464d 017062 copy pdata ,rega -0x464e 017063 branch iicd_write_eep_data -: 017065 classic_shutter_load_reconn_info: -0x464f 017066 arg nvram_eeprom_offset ,regb -0x4650 017067 fetch 1 ,mem_shutter_bluetooth_type -0x4651 017068 rtnbit0 classic_shutter -0x4652 017069 fetch 1 ,mem_nv_data_number -0x4653 017070 rtn blank -0x4654 017071 mul32 pdata ,34 ,temp -0x4655 017072 fetch 2 ,mem_nv_data_ptr -0x4656 017073 copy pdata ,rega -0x4657 017074 branch iicd_read_eep_data -: 017078 ble_shutter_process_baseband_connect: -0x4658 017079 call shutter_stop_bluetooth_discovery -0x4659 017080 setarg 0 -0x465a 017081 store 2 ,mem_ble_shutter_reconn_timer -0x465b 017082 branch app_led_off -: 017085 ble_shutter_process_baseband_disconnect: -0x465c 017086 call queue_init -0x465d 017087 jam 0 ,mem_ble_shutter_enable_notify -0x465e 017088 branch shutter_start_reconnect -: 017091 ble_shutter_process_reconnect_complete: -0x465f 017092 call queue_init -0x4660 017093 jam 1 ,mem_ble_shutter_enable_notify -0x4661 017094 fetch 8 ,mem_ble_shutter_interval_min -0x4662 017095 store 8 ,mem_le_interval_min -0x4663 017096 call app_lpm_mult_enable -0x4664 017097 branch le_l2cap_tx_update_req -: 017100 ble_shutter_process_parse_connect_parameter_update_response: -0x4665 017101 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x4666 017102 rtneq ble_signaling_connect_parameter_update_accepted -0x4667 017103 fetch 8 ,mem_ble_shutter_interval_min_new -0x4668 017104 rtn blank -0x4669 017105 store 8 ,mem_le_interval_min -0x466a 017106 branch le_l2cap_tx_update_req -: 017110 shutter_process_soft_swtich_button_long_press: -0x466b 017111 branch ui_soft_switch_botton_long_press -: 017113 shutter_process_soft_swtich_button_down: -0x466c 017114 fetch 1 ,mem_shutter_hard_soft_switch_case -0x466d 017115 rtneq hard_switch -0x466e 017116 fetch 1 ,mem_shutter_soft_switch_power_state -0x466f 017117 rtnne ss_state_power_on -0x4670 017118 call shutter_store_currenct_led_state -0x4671 017119 branch app_led_on -: 017121 shutter_store_currenct_led_state: -0x4672 017122 jam 1 ,mem_shutter_soft_swtich_botton_down -0x4673 017123 arg 11 ,loopcnt -0x4674 017124 arg mem_shutter_soft_swtich_led_struct_temp ,contw -0x4675 017125 arg mem_shutter_led_struct_app_led ,contr -0x4676 017126 branch memcpy -: 017128 shutter_process_soft_swtich_button_up: -0x4677 017129 fetch 1 ,mem_shutter_hard_soft_switch_case -0x4678 017130 rtneq hard_switch -0x4679 017131 fetch 1 ,mem_shutter_soft_switch_power_state -0x467a 017132 beq ss_state_power_on ,shutter_load_currenct_led_state -0x467b 017133 branch ui_soft_switch_botton_up -: 017135 shutter_load_currenct_led_state: -0x467c 017136 fetch 1 ,mem_shutter_soft_swtich_botton_down -0x467d 017137 rtnne 1 -0x467e 017138 jam 0 ,mem_shutter_soft_swtich_botton_down -0x467f 017139 fetch 2 ,mem_ui_state_map -0x4680 017140 bbit1 ui_state_bt_connected ,app_led_off -0x4681 017141 bbit1 ui_state_ble_connected ,app_led_off -0x4682 017142 arg 11 ,loopcnt -0x4683 017143 arg mem_shutter_soft_swtich_led_struct_temp ,contr -0x4684 017144 arg mem_shutter_led_struct_app_led ,contw -0x4685 017145 branch memcpy -: 017150 shutter_le_bb_event_timer: -0x4686 017152 call shutter_check_sleep_timer -0x4687 017155 call shutter_check_power_off_timer -0x4688 017158 call classic_shutter_check_unplug_timer -0x4689 017159 call classic_shutter_hid_handshake_timer -0x468a 017160 call classic_shutter_hid_disconn_timer -0x468b 017163 branch ble_shutter_reconn_timer -: 017167 shutter_check_sleep_timer: -0x468c 017168 arg mem_shutter_sleep_timer ,regc -0x468d 017169 arg shutter_sleep_timeout ,regb -0x468e 017170 branch timer_single_step_2b -: 017171 shutter_sleep_timeout: -0x468f 017172 jam ss_state_power_off ,mem_shutter_soft_switch_power_state -0x4690 017173 call app_led_off -0x4691 017174 call shutter_disconnect_current_connection -0x4692 017175 branch shutter_wait_power_off -: 017178 shutter_check_power_off_timer: -0x4693 017179 arg mem_shutter_power_off_timer ,regc -0x4694 017180 arg shutter_check_power_off_timeout ,regb -0x4695 017181 branch timer_single_step -: 017183 shutter_check_power_off_timeout: -0x4696 017184 fetch 2 ,mem_ui_state_map -0x4697 017185 bbit1 ui_state_ble_connected ,shutter_wait_power_off -0x4698 017186 bbit1 ui_state_bt_connected ,shutter_wait_power_off -0x4699 017187 fetch 1 ,mem_shutter_led_struct_app_led_type -0x469a 017188 beq ui_led_state_blink_start ,shutter_wait_power_off -0x469b 017189 beq ui_led_state_blink_lighting ,shutter_wait_power_off -0x469c 017190 beq ui_led_state_blink_darking ,shutter_wait_power_off -0x469d 017191 branch app_enter_hibernate -: 017195 classic_shutter_check_unplug_timer: -0x469e 017196 arg mem_classic_shutter_cable_unplug_conut ,regc -0x469f 017197 arg classic_shutter_unplug_timeout ,regb -0x46a0 017198 branch timer_single_step -: 017200 classic_shutter_unplug_timeout: -0x46a1 017201 fetch 1 ,mem_control_tasks -0x46a2 017202 set1 l2cap_disconnect_interrupt ,pdata -0x46a3 017203 set1 l2cap_disconnect_control ,pdata -0x46a4 017204 store 1 ,mem_control_tasks -0x46a5 017205 rtn -: 017207 classic_shutter_hid_handshake_timer: -0x46a6 017208 arg mem_hid_handshake_timer_count ,regc -0x46a7 017209 arg classic_shutter_process_hid_handshake ,regb -0x46a8 017210 branch timer_single_step -: 017212 classic_shutter_hid_disconn_timer: -0x46a9 017213 arg mem_classic_shutter_hid_disconn_count ,regc -0x46aa 017214 arg app_bt_disconnect ,regb -0x46ab 017215 branch timer_single_step -: 017220 ble_shutter_reconn_timer: -0x46ac 017221 fetch 1 ,mem_shutter_soft_switch_power_state -0x46ad 017222 rtnne ss_state_power_on -0x46ae 017223 arg mem_ble_shutter_reconn_timer ,regc -0x46af 017224 arg shutter_start_bluetooth_discovery ,regb -0x46b0 017225 branch timer_single_step_2b -: 017228 shutter_process_idle: -0x46b1 017229 call shutter_send_data_to_master -0x46b2 017230 branch keyscan_key_process -: 017233 shutter_process_lpm_before: -0x46b3 017234 branch keyscan_process_lpm_before -: 017236 shutter_le_before_hibernate: -0x46b4 017237 call gpio_set_before_lpm_common -0x46b5 017238 branch shutter_process_lpm_before -: 017244 shutter_stop_bluetooth_discovery: -0x46b6 017245 fetch 1 ,mem_shutter_bluetooth_type -0x46b7 017246 bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery -0x46b8 017247 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery -0x46b9 017248 rtn -: 017250 ble_shutter_stop_bluetooth_discovery: -0x46ba 017251 fetch 2 ,mem_ble_shutter_connect_timeout -0x46bb 017252 store 2 ,mem_shutter_sleep_timeout -0x46bc 017253 store 2 ,mem_shutter_sleep_timer -0x46bd 017254 branch app_ble_stop_adv -: 017256 classic_shutter_stop_bluetooth_discovery: -0x46be 017257 fetch 2 ,mem_classic_shutter_connect_timeout -0x46bf 017258 store 2 ,mem_shutter_sleep_timeout -0x46c0 017259 store 2 ,mem_shutter_sleep_timer -0x46c1 017260 branch app_bt_stop_discovery -: 017262 shutter_start_bluetooth_discovery: -0x46c2 017263 fetch 1 ,mem_shutter_soft_switch_power_state -0x46c3 017264 rtnne ss_state_power_on -0x46c4 017265 fetch 1 ,mem_shutter_bluetooth_type -0x46c5 017266 bbit1 classic_shutter ,classic_shutter_start_discovery -0x46c6 017267 bbit1 ble_shutter ,ble_shutter_start_discovery -0x46c7 017268 rtn -: 017270 classic_shutter_start_discovery: -0x46c8 017271 fetch 2 ,mem_classic_shutter_discovery_timeout , -0x46c9 017272 store 2 ,mem_shutter_sleep_timeout -0x46ca 017273 store 2 ,mem_shutter_sleep_timer -0x46cb 017274 branch app_bt_start_discovery_short -: 017276 ble_shutter_start_discovery: -0x46cc 017277 fetch 2 ,mem_ui_state_map -0x46cd 017278 rtnbit1 ui_state_ble_connected -0x46ce 017279 fetch 2 ,mem_ble_shutter_discovery_timeout -0x46cf 017280 store 2 ,mem_shutter_sleep_timeout -0x46d0 017281 store 2 ,mem_shutter_sleep_timer -0x46d1 017282 fetch 2 ,mem_ble_shutter_discovery_adv_interval -0x46d2 017283 call shutter_ble_adv_interval_set -0x46d3 017284 call app_led_start_blink -0x46d4 017285 fetch 4 ,mem_ble_shutter_discovery_blink_on_time -0x46d5 017286 store 4 ,mem_shutter_led_struct_app_led_on_time -0x46d6 017287 fetch 2 ,mem_ui_state_map -0x46d7 017288 rtnbit1 ui_state_ble_adv -0x46d8 017289 branch app_ble_start_adv -: 017292 shutter_start_reconnect: -0x46d9 017293 fetch 1 ,mem_shutter_soft_switch_power_state -0x46da 017294 rtnne ss_state_power_on -0x46db 017295 fetch 1 ,mem_shutter_bluetooth_type -0x46dc 017296 bbit1 classic_shutter ,classic_shutter_start_reconnect -0x46dd 017297 bbit1 ble_shutter ,ble_shutter_start_reconnect -0x46de 017298 rtn -: 017300 classic_shutter_start_reconnect: -0x46df 017301 call app_check_reconn_target -0x46e0 017302 branch shutter_start_bluetooth_discovery ,blank -0x46e1 017303 call app_led_on -0x46e2 017304 call app_bt_stop_discovery -0x46e3 017305 branch app_bt_start_reconnect -: 017307 ble_shutter_start_reconnect: -0x46e4 017308 fetch 2 ,mem_ble_shutter_reconn_timer -0x46e5 017309 fetcht 2 ,mem_ble_shutter_reconn_timeout -0x46e6 017310 storet 2 ,mem_ble_shutter_reconn_timer -0x46e7 017311 nrtn blank -0x46e8 017312 fetch 2 ,mem_ble_shutter_reconn_dav_interval -0x46e9 017313 call shutter_ble_adv_interval_set -0x46ea 017314 call app_led_start_blink -0x46eb 017315 fetch 4 ,mem_ble_shutter_reconn_blink_on_time -0x46ec 017316 store 4 ,mem_shutter_led_struct_app_led_on_time -0x46ed 017317 fetch 2 ,mem_ui_state_map -0x46ee 017318 rtnbit1 ui_state_ble_adv -0x46ef 017319 branch app_ble_start_adv -: 017322 shutter_ble_adv_interval_set: -0x46f0 017323 store 2 ,mem_lpm_interval -0x46f1 017324 increase -4 ,pdata -0x46f2 017325 store 2 ,mem_le_adv_interval -0x46f3 017326 rtn -: 017329 shutter_disconnect_current_connection: -0x46f4 017330 fetch 2 ,mem_ui_state_map -0x46f5 017331 bbit1 ui_state_ble_connected ,app_ble_disconnect -0x46f6 017332 bbit1 ui_state_bt_connected ,app_bt_disconnect -0x46f7 017333 branch shutter_stop_bluetooth_discovery -: 017337 app_check_reconn_target: -0x46f8 017338 fetch 1 ,mem_nv_data_number -0x46f9 017339 copy pdata ,loopcnt -0x46fa 017340 fetch 2 ,mem_nv_data_ptr -0x46fb 017341 copy pdata ,rega -: 017342 app_check_reconn_target_loop: -0x46fc 017343 ifetch 2 ,rega -0x46fd 017344 beq 0 ,found_reconn_device -0x46fe 017345 increase nv_data_len ,rega -0x46ff 017346 loop app_check_reconn_target_loop -0x4700 017347 branch enable_blank -: 017349 found_reconn_device: -0x4701 017350 ifetch 6 ,contr -0x4702 017351 store 6 ,mem_hci_plap -0x4703 017352 increase 10 ,contr -0x4704 017353 arg mem_link_key ,contw -0x4705 017354 call memcpy16 -0x4706 017355 call check_link_key_load -0x4707 017356 branch disable_blank -: 017362 shutter_check_data_enable: -0x4708 017363 call disable_user -0x4709 017364 fetch 2 ,mem_ui_state_map -0x470a 017365 bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable -0x470b 017366 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable -0x470c 017367 rtn -: 017369 shutter_check_bt_data_enable: -0x470d 017370 fetch 1 ,mem_hid_interrupt_state -0x470e 017371 rtnne 0x3f -0x470f 017372 branch enable_user -: 017374 shutter_check_ble_data_enable: -0x4710 017375 fetch 1 ,mem_ble_shutter_enable_notify -0x4711 017376 rtn blank -0x4712 017377 branch enable_user -: 017382 shutter_check_bluetooth_conn: -0x4713 017383 call disable_user -0x4714 017384 fetch 2 ,mem_ui_state_map -0x4715 017385 rtnbit1 ui_state_bt_connected -0x4716 017386 rtnbit1 ui_state_ble_connected -0x4717 017387 branch enable_user -: 017391 shutter_change_bluetooth_status_bt_disconn: -0x4718 017392 fetch 1 ,mem_shutter_bluetooth_type -0x4719 017393 bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn -0x471a 017394 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn -0x471b 017395 rtn -: 017397 classic_shutter_change_bluetooth_status_bt_disconn: -0x471c 017398 fetch 1 ,mem_scan_mode -0x471d 017399 rtnne 0x03 -0x471e 017400 branch shutter_start_reconnect -: 017402 ble_shutter_change_bluetooth_status_bt_disconn: -0x471f 017403 branch shutter_start_reconnect -: 017406 shutter_check_send_data: -0x4720 017407 disable user2 -0x4721 017408 fetch 2 ,mem_shutter_sleep_timeout -0x4722 017409 store 2 ,mem_shutter_sleep_timer -0x4723 017411 call shutter_check_bluetooth_conn -0x4724 017412 branch shutter_change_bluetooth_status_bt_disconn ,user -0x4725 017414 call shutter_check_data_enable -0x4726 017415 nrtn user -0x4727 017416 enable user2 -0x4728 017417 rtn -: 017421 shutter_key_change: -0x4729 017422 call shutter_check_send_data -0x472a 017423 nrtn user2 -0x472b 017424 deposit rega -0x472c 017425 branch shutter_key_release ,blank -: 017426 shutter_key_press: -0x472d 017427 call app_led_on -0x472e 017428 arg mem_key0_press ,regc -0x472f 017429 branch push_queue_press_or_release -: 017431 shutter_key_release: -0x4730 017432 call app_led_off -0x4731 017433 arg mem_key0_release ,regc -: 017435 push_queue_press_or_release: -0x4732 017436 arg max_queue_num ,pdata -0x4733 017437 imul32 queue ,pdata -0x4734 017438 iadd regc ,regc -: 017441 push_buffer_in_queue: -0x4735 017442 ifetch 1 ,regc -0x4736 017443 rtn blank -0x4737 017444 call queue_push_one_byte -0x4738 017445 increase 1 ,regc -0x4739 017446 branch push_buffer_in_queue -: 017449 shutter_send_data_to_master: -0x473a 017450 fetch 2 ,mem_ui_state_map -0x473b 017451 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data -0x473c 017452 bbit1 ui_state_bt_connected ,pop_queue_to_classic_data -0x473d 017453 rtn -: 017455 pop_queue_to_ble_data: -0x473e 017456 call le_fifo_check_nearly_full -0x473f 017457 nrtn blank -0x4740 017458 call queue_pop_one_byte -0x4741 017459 nrtn user -0x4742 017460 pincrease -1 -0x4743 017461 mul32 pdata ,shutter_ble_data_buffer ,pdata -0x4744 017462 arg mem_ble_data_buffer1 ,temp -0x4745 017463 iadd temp ,contr -: 017464 le_send_notify_from_list: -0x4746 017465 ifetch 1 ,contr -0x4747 017466 copy pdata ,rega -0x4748 017467 ifetcht 2 ,contr -0x4749 017468 call store_contr -0x474a 017469 call le_att_malloc_tx_notify -0x474b 017470 copy rega ,loopcnt -0x474c 017471 call get_contr -0x474d 017472 branch memcpy -: 017475 pop_queue_to_classic_data: -0x474e 017476 call l2cap_malloc_is_fifo_nearly_full -0x474f 017477 nrtn blank -0x4750 017478 call queue_pop_one_byte -0x4751 017479 nrtn user -0x4752 017480 pincrease -1 -0x4753 017481 mul32 pdata ,shutter_classic_data_buffer ,pdata -0x4754 017482 arg mem_classic_data_buffer1 ,temp -0x4755 017483 iadd temp ,contr -0x4756 017484 ifetch 5 ,contr -0x4757 017485 store 5 ,mem_classic_data_buffer -: 017486 classic_send_hid_data: -0x4758 017487 fetch 1 ,mem_classic_data_buffer -0x4759 017488 copy pdata ,rega -0x475a 017489 call hid_malloc_tx_buff -0x475b 017490 fetch 2 ,mem_hid_int_remote_cid -0x475c 017491 istore 2 ,contw -0x475d 017492 setarg 0xa1 -0x475e 017493 istore 1 ,contw -0x475f 017494 fetch 4 ,mem_classic_data_buffer + 1 -0x4760 017495 istore 9 ,contw -0x4761 017496 rtn -: 017500 queue_push_one_byte: -0x4762 017501 store 1 ,mem_pdatatemp -0x4763 017502 arg mem_pdatatemp ,rega -0x4764 017503 branch queue_push -: 017505 queue_pop_one_byte: -0x4765 017506 arg mem_pdatatemp ,rega -0x4766 017507 call queue_pop -0x4767 017508 nrtn user -0x4768 017509 fetch 1 ,mem_pdatatemp -0x4769 017510 rtn -: 017513 ble_shutter_receive_data: -0x476a 017514 fetch 2 ,mem_le_att_handle -0x476b 017515 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete -0x476c 017516 rtn -: 017518 shutter_init_param: -0x476d 017519 setarg 0x02 -0x476e 017520 store 1 ,mem_shutter_power_off_timeout -0x476f 017522 setarg 0x00200008 -0x4770 017523 store 4 ,mem_ble_shutter_interval_min -0x4771 017524 setarg 0x012c0005 -0x4772 017525 istore 4 ,contw -0x4773 017528 jam 0x17 ,mem_le_local_mtu -0x4774 017531 setarg 0x1b -0x4775 017532 store 2 ,mem_le_pairing_handle -0x4776 017533 call le_set_config_fixed_ltk -0x4777 017534 call le_set_fixed_ltk -0x4778 017535 call le_set_justwork -0x4779 017536 branch le_set_config_read_authentication -: 017539 shutter_load_buffer_config_form_datarom: -0x477a 017541 arg ble_key_value_list_size ,loopcnt -0x477b 017542 arg mem_ble_data_buffer1 ,contw -0x477c 017543 arg ble_shutter_key_value_list ,contr -0x477d 017544 call memcpy_fast -0x477e 017545 arg bt_key_value_list_size ,loopcnt -0x477f 017546 arg mem_classic_data_buffer1 ,contw -0x4780 017547 arg classic_shutter_key_value_list ,contr -0x4781 017548 branch memcpy_fast -: 017551 shutter_load_ble_gatt_form_datarom: -0x4782 017552 arg ble_gatt_list_size ,loopcnt -0x4783 017553 arg ble_shutter_gatt_list ,contr -0x4784 017554 branch memcpy_fast -: 017557 shutter_load_bt_sdp_form_datarom: -0x4785 017558 arg bt_sdp_list_size ,loopcnt -0x4786 017559 arg classic_shutter_sdp_list ,contr -0x4787 017560 branch memcpy_fast -: 017564 shutter_init_bluetooth_config: -0x4788 017565 call shutter_check_load_config_flag -0x4789 017566 nrtn user -0x478a 017567 fetch 1 ,mem_shutter_config_select_gpio1 -0x478b 017568 call shutter_init_bluetooth_config_gpio_input -0x478c 017569 fetch 1 ,mem_shutter_config_select_gpio2 -0x478d 017570 call shutter_init_bluetooth_config_gpio_input -0x478e 017571 fetch 1 ,mem_shutter_config_select_gpio3 -0x478f 017572 branch shutter_init_bluetooth_config_gpio_input -: 017574 shutter_init_bluetooth_config_gpio_input: -0x4790 017575 rtn blank -0x4791 017576 or pdata ,0x80 ,temp -0x4792 017577 branch gpio_config_input_nowake -: 017580 shutter_load_bluetooth_config: -0x4793 017581 call shutter_check_load_config_flag -0x4794 017582 nrtn user -0x4795 017583 call shutter_load_bluetooth_config_label -0x4796 017584 branch shutter_load_bluetooth_config_by_otp -: 017586 shutter_load_bluetooth_config_label: -0x4797 017587 arg 0 ,rega -0x4798 017588 fetch 1 ,mem_shutter_config_select_gpio1 -0x4799 017589 call shutter_load_bluetooth_config_read_gpio_input -0x479a 017590 nsetflag blank ,0 ,rega -0x479b 017591 fetch 1 ,mem_shutter_config_select_gpio2 -0x479c 017592 call shutter_load_bluetooth_config_read_gpio_input -0x479d 017593 nsetflag blank ,1 ,rega -0x479e 017594 fetch 1 ,mem_shutter_config_select_gpio3 -0x479f 017595 call shutter_load_bluetooth_config_read_gpio_input -0x47a0 017596 nsetflag blank ,2 ,rega -0x47a1 017597 copy rega ,pdata -0x47a2 017598 store 1 ,mem_shutter_config_label -0x47a3 017599 fetch 1 ,mem_shutter_config_size -0x47a4 017600 imul32 rega ,pdata -0x47a5 017601 fetcht 2 ,mem_shutter_config_otp_base_address -0x47a6 017602 iadd temp ,pdata -0x47a7 017603 store 2 ,mem_shutter_config_otp_addr -0x47a8 017604 rtn -: 017606 shutter_load_bluetooth_config_read_gpio_input: -0x47a9 017607 rtn blank -0x47aa 017608 or pdata ,0x80 ,temp -0x47ab 017609 call gpio_get_bit -0x47ac 017610 nbranch enable_blank ,true -0x47ad 017611 branch disable_blank -: 017614 shutter_check_load_config_flag: -0x47ae 017615 call disable_user -0x47af 017616 fetch 1 ,mem_shutter_config_user_size -0x47b0 017617 nrtn blank -0x47b1 017618 fetch 1 ,mem_shutter_config_enable -0x47b2 017619 rtn blank -0x47b3 017620 branch enable_user -: 017623 shutter_load_bluetooth_config_by_otp: -0x47b4 017624 call otp_enable_chgpump -0x47b5 017625 fetch 2 ,mem_shutter_config_otp_addr -0x47b6 017626 arg mem_shutter_config_data_temp ,rega -0x47b7 017627 fetcht 1 ,mem_shutter_config_size -0x47b8 017628 call otpd_read_data -0x47b9 017629 call otp_disable_chgpump -: 017630 shutter_load_bluetooth_config_store_name: -0x47ba 017631 fetch 1 ,mem_shutter_config_data_temp -0x47bb 017632 copy pdata ,loopcnt -0x47bc 017633 store 1 ,mem_le_name_len -0x47bd 017634 call memcpy_fast -0x47be 017635 fetch 1 ,mem_shutter_config_data_temp -0x47bf 017636 copy pdata ,loopcnt -0x47c0 017637 store 1 ,mem_local_name_length -0x47c1 017638 call memcpy_fast -0x47c2 017639 ifetch 1 ,contr -0x47c3 017640 store 1 ,mem_shutter_key_num -0x47c4 017641 ifetch 1 ,contr -0x47c5 017642 store 1 ,mem_shutter_hard_soft_switch_case -0x47c6 017643 rtn -: 017646 shutter_load_bluetooth_config_by_eeprom: -0x47c7 017647 fetch 1 ,mem_shutter_bluetooth_type -0x47c8 017648 rtnbit0 classic_shutter -0x47c9 017649 arg 3 ,temp -0x47ca 017650 fetch 2 ,mem_shutter_config_eeprom_offset_addr -0x47cb 017651 copy pdata ,regb -0x47cc 017652 arg mem_shutter_config_eeprom_start_flag ,rega -0x47cd 017653 call iicd_read_eep_data -0x47ce 017654 fetcht 2 ,mem_shutter_config_eeprom_start_flag -0x47cf 017655 setarg shutter_eeprom_config_crc -0x47d0 017656 isub temp ,null -0x47d1 017657 nrtn zero -0x47d2 017658 fetch 1 ,mem_shutter_config_user_size -0x47d3 017659 rtn blank -0x47d4 017660 copy pdata ,temp -0x47d5 017661 fetch 2 ,mem_shutter_config_eeprom_offset_addr -0x47d6 017662 add pdata ,3 ,regb -0x47d7 017663 arg mem_shutter_config_data_temp ,rega -0x47d8 017664 call iicd_read_eep_data -0x47d9 017665 branch shutter_store_config -: 017667 shutter_load_bluetooth_config_by_user_config: -0x47da 017668 fetch 2 ,mem_shutter_config_user_otp_address -0x47db 017669 rtn blank -0x47dc 017670 call otp_enable_chgpump -0x47dd 017671 arg 1 ,temp -0x47de 017672 arg mem_shutter_config_user_size ,rega -0x47df 017673 call otpd_read_data -0x47e0 017675 fetch 1 ,mem_shutter_config_user_size -0x47e1 017676 rtn blank -0x47e2 017678 fetch 2 ,mem_shutter_config_user_otp_address -0x47e3 017679 pincrease 1 -0x47e4 017680 arg mem_shutter_config_data_temp ,rega -0x47e5 017681 fetcht 1 ,mem_shutter_config_user_size -0x47e6 017682 call otpd_read_data -0x47e7 017683 call otp_disable_chgpump -: 017684 shutter_store_config: -0x47e8 017685 call shutter_load_bluetooth_config_store_name -: 017686 shutter_load_bluetooth_config_custom: -0x47e9 017687 ifetch 2 ,contr -0x47ea 017688 rtn blank -0x47eb 017689 copy pdata ,contw -0x47ec 017690 ifetcht 1 ,contr -0x47ed 017691 copy temp ,loopcnt -0x47ee 017692 call memcpy -0x47ef 017693 branch shutter_load_bluetooth_config_custom -: 017697 shutter_random_mac_addr: -0x47f0 017698 fetch 1 ,mem_shutter_bluetooth_type -0x47f1 017699 rtnbit0 classic_shutter -0x47f2 017700 fetch 2 ,mem_classic_shutter_random_mac_offset_addr -0x47f3 017701 copy pdata ,regb -0x47f4 017702 arg 4 ,temp -0x47f5 017703 arg mem_shutter_random_mac_data_temp ,rega -0x47f6 017704 call iicd_read_eep_data -0x47f7 017705 fetch 1 ,mem_shutter_random_mac_data_temp -0x47f8 017706 bne 1 ,shutter_write_random_mac_addr_to_eeprom -: 017707 shutter_write_random_mac_addr_to_eeprom: -0x47f9 017708 setarg 1 -0x47fa 017709 store 1 ,mem_shutter_random_mac_data_temp -0x47fb 017710 force 3 ,loopcnt -0x47fc 017711 call generate_random_loop -0x47fd 017712 fetch 2 ,mem_classic_shutter_random_mac_offset_addr -0x47fe 017713 copy pdata ,regb -0x47ff 017714 arg 4 ,temp -0x4800 017715 arg mem_shutter_random_mac_data_temp ,rega -0x4801 017716 call iicd_write_eep_data -: 017717 shutter_write_random_mac_addr: -0x4802 017718 fetch 3 ,mem_shutter_random_mac_data_temp + 1 -0x4803 017719 store 3 ,mem_lap -0x4804 017720 store 3 ,mem_le_lap -0x4805 017721 rtn -: 017724 shutter_soft_swtich_power_on: -0x4806 017725 branch shutter_start_reconnect -: 017728 shutter_soft_swtich_power_off: -0x4807 017729 arg 0 ,rega -0x4808 017730 arg mem_shutter_power_off_led_style ,regc -0x4809 017731 call ui_led_set_style_global -0x480a 017732 call shutter_disconnect_current_connection -: 017733 shutter_wait_power_off: -0x480b 017734 fetch 1 ,mem_shutter_power_off_timeout -0x480c 017735 store 1 ,mem_shutter_power_off_timer -0x480d 017736 rtn -: 017740 ui_soft_swtich_init: -0x480e 017741 setarg ss_state_power_up -0x480f 017742 call ui_soft_swtich_init_power_on_time -0x4810 017743 jam ui_button_state_up ,mem_ui_button_last_state -0x4811 017744 call ui_button_init -0x4812 017745 call ui_button_polling -0x4813 017746 fetch 2 ,mem_ui_state_map -0x4814 017747 rtnbit1 ui_state_btn_down -0x4815 017748 branch app_enter_hibernate -: 017750 ui_soft_swtich_init_power_on_time: -0x4816 017751 fetcht 2 ,mem_power_param_ptr -0x4817 017752 istore 1 ,temp -0x4818 017753 ifetch 1 ,contw -0x4819 017754 store 1 ,mem_ui_button_timeout -0x481a 017755 rtn -: 017758 ui_soft_switch_botton_up: -0x481b 017759 fetch 2 ,mem_power_param_ptr -0x481c 017760 ifetch 1 ,pdata -0x481d 017761 rtnne ss_state_power_up -0x481e 017762 branch app_enter_hibernate -: 017765 ui_soft_switch_botton_long_press: -0x481f 017766 fetcht 2 ,mem_power_param_ptr -0x4820 017767 ifetch 1 ,temp -0x4821 017768 beq ss_state_power_on ,ui_soft_switch_power_off -: 017769 ui_soft_switch_power_on: -0x4822 017770 setarg ss_state_power_on -0x4823 017771 fetcht 2 ,mem_power_param_ptr -0x4824 017772 istore 1 ,temp -0x4825 017773 add temp ,ss_power_off_time ,contr -0x4826 017774 ifetch 1 ,contr -0x4827 017775 istore 1 ,mem_ui_button_timeout -0x4828 017776 ifetch 2 ,contr -0x4829 017777 branch callback_func -: 017779 ui_soft_switch_power_off: -0x482a 017780 setarg ss_state_power_off -0x482b 017781 call ui_soft_swtich_init_power_on_time -0x482c 017782 add temp ,ss_power_off_cb ,contr -0x482d 017783 ifetch 2 ,contr -0x482e 017784 branch app_enter_hibernate ,blank -0x482f 017785 branch callback_func -: 017791 shutter_byteswap: -0x4830 017792 store 6 ,mem_tmp_buffer -0x4831 017793 fetch 1 ,mem_tmp_buffer -0x4832 017794 store 1 ,mem_tmp_buffer + 11 -0x4833 017795 ifetch 1 ,contr -0x4834 017796 store 1 ,mem_tmp_buffer + 10 -0x4835 017797 ifetch 1 ,contr -0x4836 017798 store 1 ,mem_tmp_buffer + 9 -0x4837 017799 ifetch 1 ,contr -0x4838 017800 store 1 ,mem_tmp_buffer + 8 -0x4839 017801 ifetch 1 ,contr -0x483a 017802 store 1 ,mem_tmp_buffer + 7 -0x483b 017803 ifetch 1 ,contr -0x483c 017804 store 1 ,mem_tmp_buffer + 6 -0x483d 017805 fetch 6 ,mem_tmp_buffer + 6 -0x483e 017806 rtn -: 017808 shutter_random_addr_by_otp: -0x483f 017809 call load_adc_init -0x4840 017810 fetch 1 ,mem_1v_adc_io_data -0x4841 017811 store 1 ,mem_le_lap -0x4842 017812 fetch 1 ,mem_5v_adc_hvin_data -0x4843 017813 istore 1 ,contw -0x4844 017814 fetch 1 ,mem_3v_adc_vinlpm_data -0x4845 017815 istore 1 ,contw -0x4846 017816 fetch 3 ,mem_le_lap -0x4847 017817 store 3 ,mem_lap -0x4848 017818 rtn -: 017830 sim_iic_read_eep_data: -0x4849 017831 fetch 2 ,mem_eeprom_base -0x484a 017832 iadd regb ,pdata -0x484b 017833 byteswap pdata ,pdata -0x484c 017834 store 2 ,mem_addr_mi -0x484d 017835 copy temp ,regb -0x484e 017837 call sim_iic_start -0x484f 017838 setarg 0xa0 -0x4850 017839 call sim_iic_send_byte -0x4851 017840 fetch 1 ,mem_addr_mi -0x4852 017841 call sim_iic_send_byte -0x4853 017842 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k -0x4854 017843 fetch 1 ,mem_addr_mi + 1 -0x4855 017844 call sim_iic_send_byte -: 017845 sim_iic_read_eep_data_2k: -0x4856 017846 call sim_iic_stop -0x4857 017848 call sim_iic_start -0x4858 017849 setarg 0xa1 -0x4859 017850 call sim_iic_send_byte -: 017852 sim_iic_read_eep_data_loop: -0x485a 017853 call sim_iic_read_byte -0x485b 017854 istore 1 ,rega -0x485c 017855 increase 1 ,rega -0x485d 017856 increase -1 ,regb -0x485e 017857 nbranch sim_iic_read_eep_data_loop ,zero -0x485f 017858 branch sim_iic_stop -: 017869 sim_iic_write_eep_data: -0x4860 017870 byteswap regb ,pdata -0x4861 017871 store 2 ,mem_addr_mi -0x4862 017872 copy temp ,regb -0x4863 017874 call sim_iic_start -0x4864 017875 setarg 0xa0 -0x4865 017876 call sim_iic_send_byte -0x4866 017878 fetch 1 ,mem_addr_mi -0x4867 017879 call sim_iic_send_byte -0x4868 017880 bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop -0x4869 017881 fetch 1 ,mem_addr_mi + 1 -0x486a 017882 call sim_iic_send_byte -: 017883 sim_iic_write_eep_data_loop: -0x486b 017884 ifetch 1 ,rega -0x486c 017885 call sim_iic_send_byte -0x486d 017886 increase 1 ,rega -0x486e 017887 increase -1 ,regb -0x486f 017888 nbranch sim_iic_write_eep_data_loop ,zero -0x4870 017889 branch sim_iic_stop -: 017893 sim_iic_wait_ack: -0x4871 017894 arg 10 ,loopcnt -0x4872 017895 call sim_iic_release_sda -0x4873 017896 call sim_iic_scl_output_high -0x4874 017897 call sim_iic_delay -: 017898 sim_iic_wait_ack_loop: -0x4875 017899 call sim_iic_read_sda_level -0x4876 017900 branch sim_iic_scl_output_low ,blank -0x4877 017901 loop sim_iic_wait_ack_loop -0x4878 017902 branch sim_iic_scl_output_low -: 017906 sim_iic_ack_slave: -0x4879 017907 call sim_iic_scl_output_low -0x487a 017908 call sim_iic_sda_output_low -0x487b 017909 call sim_iic_delay -0x487c 017910 call sim_iic_scl_output_high -0x487d 017911 call sim_iic_delay -0x487e 017912 branch sim_iic_scl_output_low -: 017917 sim_iic_read_byte: -0x487f 017918 arg 8 ,loopcnt -0x4880 017919 arg 0 ,regc -0x4881 017920 call sim_iic_release_sda -: 017921 sim_iic_read_byte_loop: -0x4882 017922 call sim_iic_scl_output_high -0x4883 017923 call sim_iic_delay -0x4884 017924 lshift regc ,regc -0x4885 017925 call sim_iic_read_sda_level -0x4886 017926 iadd regc ,regc -0x4887 017927 call sim_iic_delay -0x4888 017928 call sim_iic_scl_output_low -0x4889 017929 loop sim_iic_read_byte_loop -0x488a 017930 call sim_iic_ack_slave -0x488b 017931 copy regc ,pdata -0x488c 017932 rtn -: 017936 sim_iic_send_byte: -0x488d 017937 arg 8 ,loopcnt -0x488e 017938 copy pdata ,regc -0x488f 017939 call sim_iic_scl_output_low -: 017940 sim_iic_send_byte_loop: -0x4890 017941 isolate1 7 ,regc -0x4891 017942 call sim_iic_sda_output_high ,true -0x4892 017943 ncall sim_iic_sda_output_low ,true -0x4893 017944 lshift regc ,regc -0x4894 017945 call sim_iic_delay -0x4895 017946 call sim_iic_scl_output_high -0x4896 017947 call sim_iic_delay -0x4897 017948 call sim_iic_scl_output_low -0x4898 017949 call sim_iic_delay -0x4899 017950 loop sim_iic_send_byte_loop -0x489a 017951 branch sim_iic_wait_ack -: 017955 sim_iic_start: -0x489b 017956 call sim_iic_sda_output_high -0x489c 017957 call sim_iic_scl_output_high -0x489d 017958 call sim_iic_delay -0x489e 017959 call sim_iic_sda_output_low -0x489f 017960 call sim_iic_delay -0x48a0 017961 branch sim_iic_scl_output_low -: 017965 sim_iic_stop: -0x48a1 017966 call sim_iic_sda_output_low -0x48a2 017967 call sim_iic_scl_output_high -0x48a3 017968 call sim_iic_delay -0x48a4 017969 call sim_iic_sda_output_high -0x48a5 017970 branch sim_iic_delay -: 017974 sim_iic_scl_output_high: -0x48a6 017975 enable user -0x48a7 017976 fetch 1 ,sim_iic_scl_gpio_num -0x48a8 017977 branch sim_iic_config_gpio -: 017980 sim_iic_scl_output_low: -0x48a9 017981 disable user -0x48aa 017982 fetch 1 ,sim_iic_scl_gpio_num -0x48ab 017983 branch sim_iic_config_gpio -: 017986 sim_iic_sda_output_high: -0x48ac 017987 enable user -0x48ad 017988 fetch 1 ,sim_iic_sda_gpio_num -0x48ae 017989 branch sim_iic_config_gpio -: 017992 sim_iic_sda_output_low: -0x48af 017993 disable user -0x48b0 017994 fetch 1 ,sim_iic_sda_gpio_num -0x48b1 017995 branch sim_iic_config_gpio -: 018000 sim_iic_config_gpio: -0x48b2 018001 and pdata ,0x07 ,queue -0x48b3 018002 rshift3 pdata ,pdata -0x48b4 018003 arg core_gpio_oe0 ,temp -0x48b5 018004 iadd temp ,temp -0x48b6 018005 ifetch 1 ,temp -0x48b7 018006 qset1 pdata -0x48b8 018007 istore 1 ,temp -0x48b9 018008 increase 4 ,temp -0x48ba 018009 ifetch 1 ,temp -0x48bb 018010 qsetflag user ,pdata -0x48bc 018011 istore 1 ,temp -0x48bd 018012 rtn -: 018015 sim_iic_release_sda: -0x48be 018016 fetch 1 ,sim_iic_sda_gpio_num -0x48bf 018017 and pdata ,0x07 ,queue -0x48c0 018018 rshift3 pdata ,pdata -0x48c1 018019 arg core_gpio_oe0 ,temp -0x48c2 018020 iadd temp ,temp -0x48c3 018021 ifetch 1 ,temp -0x48c4 018022 qset0 pdata -0x48c5 018023 istore 1 ,temp -0x48c6 018024 rtn -: 018029 sim_iic_read_sda_level: -0x48c7 018030 nop 4 -0x48c8 018031 fetch 1 ,sim_iic_sda_gpio_num -0x48c9 018032 and pdata ,0x07 ,queue -0x48ca 018033 rshift3 pdata ,pdata -0x48cb 018034 arg core_gpio_in ,temp -0x48cc 018035 iadd temp ,temp -0x48cd 018036 setarg 0 -0x48ce 018037 ifetcht 1 ,temp -0x48cf 018038 qisolate1 temp -0x48d0 018039 setflag true ,0 ,pdata -0x48d1 018040 rtn -: 018043 sim_iic_delay: -0x48d2 018045 rtn -: 018051 usb_isr: -0x48d3 018052 bpatch patch1e_6 ,mem_patch1e -0x48d4 018053 hfetch 1 ,core_usb_status -0x48d5 018054 isolate1 7 ,pdata -0x48d6 018055 call usb_init ,true -0x48d7 018056 call usb_nak_state_judge -0x48d8 018057 hfetch 1 ,core_usb_status -0x48d9 018058 store 1 ,mem_usb_status -0x48da 018059 hfetch 1 ,core_usb_fifo_empty -0x48db 018060 store 1 ,mem_usb_fifo_empty -0x48dc 018061 hstore 1 ,core_usb_fifo_empty -0x48dd 018062 pinvert -0x48de 018063 fetcht 1 ,mem_usb_tx_wait -0x48df 018064 iand temp ,pdata -0x48e0 018065 store 1 ,mem_usb_tx_wait -0x48e1 018066 jam 0xe0 ,core_usb_status -0x48e2 018067 fetch 1 ,mem_usb_fifo_empty -0x48e3 018068 compare 0x1 ,pdata ,0x1 -0x48e4 018069 call usb0_fifo_empty ,true -0x48e5 018070 fetch 1 ,mem_usb_status -0x48e6 018071 compare 0x1 ,pdata ,0x1 -0x48e7 018072 call usb_status1 ,true -0x48e8 018073 call usb_tx -0x48e9 018074 branch usb_nak_state -: 018076 usb_init: -0x48ea 018077 bpatch patch1e_7 ,mem_patch1e -0x48eb 018078 call usb_init_param -0x48ec 018079 jam 0x00 ,core_usb_config -0x48ed 018080 nop 10000 -0x48ee 018081 jam 0xc0 ,core_usb_trig -0x48ef 018082 hfetch 2 ,core_clkoff -0x48f0 018083 set0 clock_off_usb ,pdata -0x48f1 018084 hstore 2 ,core_clkoff -0x48f2 018085 jam 0x3c ,core_usb_config -0x48f3 018086 jam 0xff ,core_usb_status -0x48f4 018087 jam 0xff ,core_usb_fifo_empty -0x48f5 018088 jam 0 ,core_usb_addr -0x48f6 018089 jam dev_default ,mem_usb0_state -0x48f7 018090 setarg mem_usb_clear_mem_end -0x48f8 018091 arg mem_usb_clear_mem_start ,contw -0x48f9 018092 isub contw ,loopcnt -0x48fa 018093 branch clear_mem -: 018095 usb_offline_check_init: -0x48fb 018096 fetcht 1 ,mem_usb_offline_check_gpio -0x48fc 018097 branch gpio_config_input -: 018098 usb_offline_state: -0x48fd 018099 fetch 1 ,mem_usb_device_enumeration_endflag -0x48fe 018100 rtn blank -0x48ff 018101 fetcht 1 ,mem_usb_offline_check_gpio -0x4900 018102 call gpio_get_bit -0x4901 018103 branch usb_init ,true -0x4902 018104 rtn -: 018107 usb_nak_state: -0x4903 018108 arg timer_nak ,queue -0x4904 018109 call timer_check -0x4905 018110 nrtn blank -0x4906 018111 fetch 1 ,mem_usb_wakestate_onetime_flag -0x4907 018112 nrtn blank -0x4908 018113 fetch 1 ,mem_usb_device_enumeration_endflag -0x4909 018114 ncall usb_mac_wakeup_judge ,blank -0x490a 018115 rtn -: 018117 usb_mem_devicedesc_init: -0x490b 018118 arg mem_devicedesc ,contw -0x490c 018119 setsect 0 ,0x11212 -0x490d 018120 setsect 1 ,0x8000 -0x490e 018121 setsect 2 ,0x0 -0x490f 018122 setsect 3 ,0x10000 -0x4910 018123 istore 9 ,contw -0x4911 018124 setsect 0 ,0x22412 -0x4912 018125 setsect 1 ,0x8604 -0x4913 018126 setsect 2 ,0x1000 -0x4914 018127 setsect 3 ,0x8 -0x4915 018128 istore 9 ,contw -0x4916 018129 setsect 0 ,0x1 -0x4917 018130 istore 1 ,contw -0x4918 018131 rtn -: 018133 usb_init_param: -0x4919 018134 jam 2 ,mem_usb0_state -0x491a 018135 setarg 0x0 -0x491b 018136 store 1 ,mem_remain -0x491c 018137 store 2 ,mem_usb_zero_packet -0x491d 018138 pincrease 1 -0x491e 018139 store 2 ,mem_usb_ones_packet -0x491f 018140 pincrease 1 -0x4920 018141 store 2 ,mem_usb_two_packet -0x4921 018142 setarg hid_kbdata_addr -0x4922 018143 store 2 ,mem_hidreportdesc_kb -0x4923 018144 setarg hid_msdata_addr -0x4924 018145 store 2 ,mem_hidreportdesc_m -0x4925 018146 arg mem_confdesc ,contw -0x4926 018147 arg hid_confdata_addr ,contr -0x4927 018148 call memcpy64 -0x4928 018149 fetch 1 ,mem_usb_tx_interval -0x4929 018150 ncall usb_tx_interval_config ,blank -0x492a 018151 branch usb_mem_devicedesc_init -: 018153 usb_tx_interval_config: -0x492b 018154 store 1 ,mem_confdesc + 34 -0x492c 018155 store 1 ,mem_confdesc + 59 -0x492d 018156 rtn -: 018157 usb_nak_state_judge: -0x492e 018158 hfetch 1 ,core_usb_status -0x492f 018159 bbit1 usb_status_nak ,usb_nak_state_timer_init -0x4930 018160 rtn -: 018162 usb_nak_state_timer_init: -0x4931 018163 call usb0_attached_state_judge -0x4932 018164 call timer_reinit -0x4933 018165 setarg timer_nak_delay -0x4934 018166 arg timer_nak ,queue -0x4935 018167 branch timer_init -: 018169 usb0_attached_state_judge: -0x4936 018170 fetch 1 ,mem_usb_state -0x4937 018171 bne usb_connected ,usb_clear_halt_dispose -0x4938 018172 jam 0 ,mem_usb_wakestate_onetime_flag -0x4939 018173 jam 0 ,mem_usb_mac_wakeup_trig -0x493a 018174 rtn -: 018175 usb_clear_halt_dispose: -0x493b 018176 fetch 1 ,mem_usb_clear_halt -0x493c 018177 rtn blank -0x493d 018178 jam 0 ,mem_usb_clear_halt -0x493e 018179 jam usb_connected ,mem_usb_state -0x493f 018180 jam 1 ,mem_usb_device_enumeration_endflag -0x4940 018181 rtn -: 018183 usb0_fifo_empty: -0x4941 018184 jam 0x1 ,core_usb_fifo_empty -0x4942 018185 branch usb0_tx -: 018187 usb_rx_no_data: -0x4943 018188 fetch 1 ,mem_usb_status -0x4944 018189 bbit1 usb_status_setup ,usb_class_type -0x4945 018190 rtn -: 018192 usb_rx_read: -0x4946 018193 hfetch 1 ,core_usb_ep -0x4947 018194 istore 1 ,contw -0x4948 018195 loop usb_rx_read -0x4949 018196 rtn -: 018198 usb_status1: -0x494a 018199 bpatch patch1f_0 ,mem_patch1f -0x494b 018200 jam 0x11 ,core_usb_status -0x494c 018201 hfetch 1 ,core_usb_ep_len -0x494d 018202 store 1 ,mem_usb_read_len -0x494e 018203 copy pdata ,loopcnt -0x494f 018204 branch usb_rx_no_data ,blank -0x4950 018205 arg mem_usb_setup ,contw -0x4951 018206 call usb_rx_read -0x4952 018207 fetch 1 ,mem_usb_read_len -0x4953 018208 sub pdata ,7 ,null -0x4954 018209 rtn positive -: 018210 usb_class_type: -0x4955 018211 fetch 1 ,mem_usb_setup_bmrequesttype -0x4956 018212 and_into 0x80 ,pdata -0x4957 018213 beq in_device ,usb_in_device -0x4958 018214 beq out_device ,usb_out_device -0x4959 018215 branch assert -: 018217 usb_in_device: -0x495a 018218 fetch 1 ,mem_usb_setup_bmrequesttype -0x495b 018219 rshift4 pdata ,pdata -0x495c 018220 rshift pdata ,pdata -0x495d 018221 and_into 0x03 ,pdata -0x495e 018222 beq standard_req ,usb_in_standard_req -0x495f 018223 beq class_req ,usb_in_class_req -0x4960 018224 beq manufacturer_req ,usb_in_manufacturer_req -0x4961 018225 branch assert -: 018227 usb_out_device: -0x4962 018228 fetch 1 ,mem_usb_setup_bmrequesttype -0x4963 018229 rshift4 pdata ,pdata -0x4964 018230 rshift pdata ,pdata -0x4965 018231 and_into 0x03 ,pdata -0x4966 018232 beq standard_req ,usb_out_standard_req -0x4967 018233 beq class_req ,usb_out_class_req -0x4968 018234 beq manufacturer_req ,usb_out_manufacturer_req -0x4969 018235 branch assert -: 018237 usb_in_standard_req: -0x496a 018238 fetch 1 ,mem_usb_setup_brequest -0x496b 018239 beq get_configuration ,usb0_request_get_configuration -0x496c 018240 beq get_descriptor ,usb0_request_get_descriptor -0x496d 018241 beq get_interface ,usb0_request_get_interface -0x496e 018242 beq get_status ,usb0_request_get_status -0x496f 018243 branch usb0_force_stall -: 018245 usb_in_class_req: -0x4970 018246 fetch 1 ,mem_usb_setup_brequest -0x4971 018247 beq get_idle ,usb_get_idle -0x4972 018248 beq get_report ,usb_get_report -0x4973 018249 beq get_protocol ,usb_get_protocol_req -0x4974 018250 branch usb0_force_stall -: 018252 usb_in_manufacturer_req: -0x4975 018253 branch usb0_force_stall -: 018255 usb_out_standard_req: -0x4976 018256 fetch 1 ,mem_usb_setup_brequest -0x4977 018257 beq clear_feature ,usb0_request_clear_feature -0x4978 018258 beq set_feature ,usb0_request_set_feature -0x4979 018259 beq set_address ,usb0_request_set_address -0x497a 018260 beq set_configuration ,usb0_request_set_configuration -0x497b 018261 beq set_interface ,usb0_request_set_interface -0x497c 018262 beq set_descriptor ,usb0_force_stall -0x497d 018263 branch usb0_force_stall -: 018265 usb_out_class_req: -0x497e 018266 fetch 1 ,mem_usb_setup_brequest -0x497f 018267 beq set_idle ,usb_set_idle -0x4980 018268 beq set_report ,usb_set_report -0x4981 018269 beq set_protocol ,usb_set_protocol_req -0x4982 018270 branch usb0_force_stall -: 018272 usb_out_manufacturer_req: -0x4983 018273 branch usb0_force_stall -: 018275 usb0_force_stall: -0x4984 018276 hfetch 1 ,core_usb_stall -0x4985 018277 set1 0 ,pdata -0x4986 018278 hstore 1 ,core_usb_stall -0x4987 018279 branch usb0_reply_zerolen -: 018281 usb0_reply_zerolen: -0x4988 018282 jam 0x40 ,core_usb_clear -0x4989 018283 rtn -: 018285 usb0_request_get_configuration: -0x498a 018286 fetch 1 ,mem_usb_setup_bmrequesttype -0x498b 018287 bne in_device ,usb0_force_stall -0x498c 018288 fetch 1 ,mem_usb_setup_windex -0x498d 018289 bne 0 ,usb0_force_stall -0x498e 018290 fetch 1 ,mem_usb_setup_windex + 1 -0x498f 018291 bne 0 ,usb0_force_stall -0x4990 018292 fetch 1 ,mem_usb_setup_blength -0x4991 018293 bne 1 ,usb0_force_stall -0x4992 018294 fetch 1 ,mem_usb_setup_blengthh -0x4993 018295 bne 0 ,usb0_force_stall -0x4994 018296 fetch 1 ,mem_usb_setup_bvalue -0x4995 018297 bne 0 ,usb0_force_stall -0x4996 018298 fetch 1 ,mem_usb_setup_bvalue + 1 -0x4997 018299 bne 0 ,usb0_force_stall -0x4998 018300 fetch 1 ,mem_usb0_state -0x4999 018301 beq dev_configured ,usb0_request_get_cfg_dev_cfg -0x499a 018302 beq dev_address ,usb0_request_get_cfg_dev_addr -0x499b 018303 branch usb0_force_stall -: 018305 usb0_request_get_cfg_dev_cfg: -0x499c 018306 arg 1 ,regb -0x499d 018307 branch usb_send_ones_packet -: 018309 usb0_request_get_cfg_dev_addr: -0x499e 018310 arg 1 ,regb -0x499f 018311 branch usb_send_zero_packet -: 018313 usb0_request_get_descriptor: -0x49a0 018314 bpatch patch1f_1 ,mem_patch1f -0x49a1 018315 set0 mark_isstr ,mark -0x49a2 018316 fetch 1 ,mem_usb_setup_bvalueh -0x49a3 018317 beq dsc_device ,dsc_device_info -0x49a4 018318 beq dsc_config ,dsc_config_info -0x49a5 018319 beq dsc_string ,dsc_string_info -0x49a6 018320 beq dsc_hid ,dsc_hid_info -0x49a7 018321 beq dsc_hid_report ,dsc_hid_report_info -0x49a8 018322 branch usb0_force_stall -: 018324 dsc_hid_info: -0x49a9 018325 jam 0 ,mem_usb_get_protocol_flag -0x49aa 018326 fetch 1 ,mem_usb_setup_windex -0x49ab 018327 beq 0 ,dsc_hid_info_interface0 -0x49ac 018328 beq 1 ,dsc_hid_info_interface1 -0x49ad 018329 branch usb0_force_stall -: 018331 dsc_hid_info_interface0: -0x49ae 018332 arg mem_confdesc + 19 ,rega -0x49af 018333 ifetch 1 ,rega -0x49b0 018334 iforce regb -0x49b1 018335 branch usb0_respond -: 018337 dsc_hid_info_interface1: -0x49b2 018338 arg mem_confdesc + 44 ,rega -0x49b3 018339 ifetch 1 ,rega -0x49b4 018340 iforce regb -0x49b5 018341 branch usb0_respond -: 018343 dsc_device_info: -0x49b6 018347 fetch 1 ,mem_usb_set_high_addr_flag -0x49b7 018348 ncall usb_set_high_addr ,blank -0x49b8 018349 setarg mem_devicedesc -0x49b9 018350 fetcht 1 ,mem_devicedesc -: 018351 dsc_info_set_data_len: -0x49ba 018352 store 2 ,mem_dsc_info_data_pointer -0x49bb 018353 storet 1 ,mem_dsc_info_len -0x49bc 018354 fetch 1 ,mem_usb_setup_blength -0x49bd 018355 isub temp ,null -0x49be 018356 nbranch dsc_info_set_current_data_len ,positive -: 018357 dsc_info_set_initial_data_len: -0x49bf 018358 fetch 1 ,mem_dsc_info_len -: 018359 dsc_info_set_data_size_completed: -0x49c0 018360 iforce regb -0x49c1 018361 fetch 2 ,mem_dsc_info_data_pointer -0x49c2 018362 add pdata ,1 ,pdata -0x49c3 018363 iforce rega -0x49c4 018364 branch usb0_respond -: 018365 dsc_info_set_current_data_len: -0x49c5 018366 fetch 1 ,mem_usb_setup_blength -0x49c6 018367 branch dsc_info_set_data_size_completed -: 018369 usb_set_high_addr: -0x49c7 018370 hfetch 1 ,core_usb_addr -0x49c8 018371 ncall usb0_set_addr ,blank -0x49c9 018372 jam 0 ,mem_usb_set_high_addr_flag -0x49ca 018373 rtn -: 018374 usb0_set_addr: -0x49cb 018375 hfetch 1 ,core_usb_addr -0x49cc 018376 set1 7 ,pdata -0x49cd 018377 hstore 1 ,core_usb_addr -0x49ce 018378 rtn -: 018380 dsc_config_info: -0x49cf 018381 setarg mem_confdesc -0x49d0 018382 fetcht 1 ,mem_confdesc -0x49d1 018383 branch dsc_info_set_data_len -: 018385 dsc_string_info: -0x49d2 018386 fetch 1 ,mem_usb_setup_bvalue -0x49d3 018387 sub pdata ,3 ,null -0x49d4 018388 nbranch usb0_force_stall ,positive -0x49d5 018389 fetch 1 ,mem_usb_setup_bvalue -0x49d6 018390 arg mem_string0 ,rega -0x49d7 018391 beq 0 ,usb0_respond_length -0x49d8 018392 set1 mark_isstr ,mark -0x49d9 018393 arg mem_string1 ,rega -0x49da 018394 beq 1 ,usb0_respond_length -0x49db 018395 arg mem_string2 ,rega -0x49dc 018396 beq 2 ,usb0_respond_length -0x49dd 018397 arg mem_string3 ,rega -0x49de 018398 beq 3 ,usb0_respond_length -0x49df 018399 rtn -: 018401 dsc_hid_report_info: -0x49e0 018402 fetch 2 ,mem_usb_setup_windex -0x49e1 018403 beq 1 ,dsc_hid_report_info0 -0x49e2 018404 fetch 2 ,mem_hidreportdesc_kb -0x49e3 018405 copy pdata ,rega -0x49e4 018407 branch usb0_respond_length -: 018408 dsc_hid_report_info0: -0x49e5 018409 jam 1 ,mem_usb_device_enumeration_endflag -0x49e6 018410 jam usb_got_report_req ,mem_usb_state -0x49e7 018411 fetch 2 ,mem_hidreportdesc_m -0x49e8 018412 copy pdata ,rega -0x49e9 018414 branch usb0_respond_length -: 018417 usb0_request_get_interface: -0x49ea 018418 fetch 1 ,mem_usb0_state -0x49eb 018419 bne dev_configured ,usb0_force_stall -0x49ec 018420 fetch 1 ,mem_usb_setup_bmrequesttype -0x49ed 018421 bne in_interface ,usb0_force_stall -0x49ee 018422 fetch 1 ,mem_usb_setup_bvalue -0x49ef 018423 bne 0 ,usb0_force_stall -0x49f0 018424 fetch 1 ,mem_usb_setup_bvalueh -0x49f1 018425 bne 0 ,usb0_force_stall -0x49f2 018426 fetch 1 ,mem_usb_setup_blength -0x49f3 018427 bne 1 ,usb0_force_stall -0x49f4 018428 fetch 1 ,mem_usb_setup_blengthh -0x49f5 018429 bne 0 ,usb0_force_stall -0x49f6 018430 fetch 1 ,mem_usb_setup_windex -0x49f7 018431 bne 0 ,usb0_force_stall -0x49f8 018432 fetch 1 ,mem_usb_setup_windex + 1 -0x49f9 018433 bne 0 ,usb0_force_stall -0x49fa 018434 arg 1 ,regb -0x49fb 018435 branch usb_send_zero_packet -: 018438 usb0_request_get_status: -0x49fc 018439 fetch 1 ,mem_usb0_state -0x49fd 018440 beq dev_default ,usb0_force_stall -0x49fe 018441 fetch 1 ,mem_usb_setup_bvalue -0x49ff 018442 bne 0 ,usb0_force_stall -0x4a00 018443 fetch 1 ,mem_usb_setup_bvalueh -0x4a01 018444 bne 0 ,usb0_force_stall -0x4a02 018445 fetch 1 ,mem_usb_setup_blength -0x4a03 018446 bne 2 ,usb0_force_stall -0x4a04 018447 fetch 1 ,mem_usb_setup_blengthh -0x4a05 018448 bne 0 ,usb0_force_stall -0x4a06 018449 fetch 1 ,mem_usb_setup_windex + 1 -0x4a07 018450 bne 0 ,usb0_force_stall -0x4a08 018451 fetch 1 ,mem_usb_setup_bmrequesttype -0x4a09 018452 beq in_device ,usb0_get_status_in_device -0x4a0a 018453 beq in_interface ,usb0_get_status_in_interface -0x4a0b 018454 beq in_endpoint ,usb0_get_status_in_endpoint -0x4a0c 018455 branch usb0_force_stall -: 018457 usb0_get_status_in_device: -0x4a0d 018458 fetch 1 ,mem_usb_setup_windex -0x4a0e 018459 bne 0 ,usb0_force_stall -0x4a0f 018460 arg 2 ,regb -0x4a10 018461 fetch 1 ,mem_usb_remote_wakeup -0x4a11 018462 beq 0x01 ,usb_send_two_packet -: 018464 usb_send_zero_packet: -0x4a12 018465 arg mem_usb_zero_packet ,rega -0x4a13 018466 branch usb0_respond -: 018467 usb_send_ones_packet: -0x4a14 018468 arg mem_usb_ones_packet ,rega -0x4a15 018469 branch usb0_respond -: 018470 usb_send_two_packet: -0x4a16 018471 arg mem_usb_two_packet ,rega -0x4a17 018472 branch usb0_respond -: 018474 usb0_get_status_in_interface: -0x4a18 018475 fetch 1 ,mem_usb0_state -0x4a19 018476 bne dev_configured ,usb0_force_stall -0x4a1a 018477 arg 2 ,regb -0x4a1b 018478 branch usb_send_zero_packet -: 018480 usb0_get_status_in_endpoint: -0x4a1c 018481 fetch 1 ,mem_usb0_state -0x4a1d 018482 bne dev_configured ,usb0_force_stall -0x4a1e 018483 fetch 1 ,mem_usb_setup_windex -0x4a1f 018484 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 -0x4a20 018485 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 -0x4a21 018486 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 -0x4a22 018487 and_into 0x7f ,pdata -0x4a23 018488 beq 0x00 ,usb0_get_status_in_ep_in_ep0 -0x4a24 018489 branch usb0_force_stall -: 018491 usb0_get_status_in_ep_in_ep0: -0x4a25 018492 fetch 1 ,mem_usb_ep0_stall_status -: 018493 usb0_get_status_in_ep_in_ack: -0x4a26 018494 arg 2 ,regb -0x4a27 018495 beq 1 ,usb_send_ones_packet -0x4a28 018496 branch usb_send_zero_packet -: 018497 usb0_get_status_in_ep_in_ep1: -0x4a29 018498 fetch 1 ,mem_usb_ep1_stall_status -0x4a2a 018499 branch usb0_get_status_in_ep_in_ack -: 018500 usb0_get_status_in_ep_in_ep2: -0x4a2b 018501 fetch 1 ,mem_usb_ep2_stall_status -0x4a2c 018502 branch usb0_get_status_in_ep_in_ack -: 018503 usb0_get_status_in_ep_in_ep3: -0x4a2d 018504 fetch 1 ,mem_usb_ep3_stall_status -0x4a2e 018505 branch usb0_get_status_in_ep_in_ack -: 018507 usb_get_idle: -0x4a2f 018508 jam 1 ,mem_usb_idle_flag -0x4a30 018509 arg mem_usb_idle_rate ,rega -0x4a31 018510 arg 1 ,regb -0x4a32 018511 branch usb0_respond -: 018513 usb_get_report: -0x4a33 018514 fetch 2 ,mem_usb_setup_bvalue -0x4a34 018515 arg pc_get_report ,temp -0x4a35 018516 isub temp ,null -0x4a36 018517 nbranch usb0_force_stall ,zero -0x4a37 018518 set0 mark_isstr ,mark -: 018519 usb_get_report_dispose: -0x4a38 018520 fetch 1 ,mem_usb0_data_ready_report -0x4a39 018521 nbranch usb_get_report_data_success ,blank -0x4a3a 018522 jam pc_get_nondata ,mem_usb0_get_report_data -: 018523 usb_get_report_send_data: -0x4a3b 018524 fetch 1 ,mem_usb_setup_blength -0x4a3c 018525 iforce regb -0x4a3d 018526 arg mem_usb0_get_report_data ,rega -0x4a3e 018527 call usb0_respond -: 018528 usb_get_report_data_release: -0x4a3f 018529 arg mem_usb0_get_report_data ,contw -0x4a40 018530 arg 8 ,loopcnt -0x4a41 018531 branch memset0 -: 018532 usb_get_report_data_success: -0x4a42 018533 jam 0 ,mem_usb0_data_ready_report -0x4a43 018534 jam pc_get_data ,mem_usb0_get_report_data -0x4a44 018535 branch usb_get_report_send_data -: 018537 usb_get_protocol_req: -0x4a45 018538 fetch 1 ,mem_usb_setup_blength -0x4a46 018539 bne 1 ,usb0_force_stall -0x4a47 018540 jam 1 ,mem_usb_get_protocol_flag -0x4a48 018541 arg 1 ,regb -0x4a49 018542 fetch 1 ,mem_usb_set_protocol_value -0x4a4a 018543 beq 0 ,usb_get_report_protocol -0x4a4b 018544 beq 1 ,usb_get_boot_protocol -0x4a4c 018545 branch usb_send_zero_packet -: 018546 usb_get_report_protocol: -0x4a4d 018547 branch usb_send_ones_packet -: 018548 usb_get_boot_protocol: -0x4a4e 018549 branch usb_send_zero_packet -: 018554 usb0_request_clear_feature: -0x4a4f 018555 fetch 1 ,mem_usb0_state -0x4a50 018556 bne dev_configured ,usb0_force_stall -0x4a51 018557 fetch 1 ,mem_usb_setup_blength -0x4a52 018558 bne 0 ,usb0_force_stall -0x4a53 018559 fetch 1 ,mem_usb_setup_blengthh -0x4a54 018560 bne 0 ,usb0_force_stall -0x4a55 018561 fetch 1 ,mem_usb_setup_bvalueh -0x4a56 018562 bne 0 ,usb0_force_stall -0x4a57 018563 fetch 1 ,mem_usb_setup_windex + 1 -0x4a58 018564 bne 0 ,usb0_force_stall -0x4a59 018565 fetch 1 ,mem_usb_setup_bmrequesttype -0x4a5a 018566 beq out_device ,usb0_request_clear_feature_out_device -0x4a5b 018567 beq out_interface ,usb0_request_clear_feature_out_interface -0x4a5c 018568 beq out_endpoint ,usb0_request_clear_feature_out_endpoint -0x4a5d 018569 branch usb0_force_stall -: 018571 usb0_request_clear_feature_out_device: -0x4a5e 018572 fetch 1 ,mem_usb_setup_bvalue -0x4a5f 018573 bne device_remote_wakeup ,usb0_force_stall -0x4a60 018574 hfetch 1 ,core_usb_config -0x4a61 018575 set0 7 ,pdata -0x4a62 018576 hstore 1 ,core_usb_config -0x4a63 018577 jam 0 ,mem_usb_remote_wakeup -0x4a64 018578 jam 1 ,mem_usb_clear_remote_wakeup -0x4a65 018579 branch usb0_reply_zerolen -: 018581 usb0_request_clear_feature_out_interface: -0x4a66 018582 branch usb0_force_stall -: 018584 usb0_request_clear_feature_out_endpoint: -0x4a67 018585 fetch 1 ,mem_usb_setup_bvalue -0x4a68 018586 bne endpoint_halt ,usb0_force_stall -0x4a69 018587 fetch 1 ,mem_usb_setup_windex -0x4a6a 018588 beq in_ep1 ,usb0_force_stall_ep1_in_off -0x4a6b 018589 beq in_ep2 ,usb0_force_stall_ep2_in_off -0x4a6c 018590 beq in_ep3 ,usb0_force_stall_ep3_in_off -0x4a6d 018591 and_into 0x7f ,pdata -0x4a6e 018592 beq 0x00 ,usb0_force_stall_ep0_in_off -0x4a6f 018593 branch usb0_force_stall -: 018595 usb0_force_stall_ep0_in_off: -0x4a70 018596 jam 0 ,mem_usb_ep0_stall_status -0x4a71 018597 branch usb0_reply_zerolen -: 018598 usb0_force_stall_ep1_in_off: -0x4a72 018599 jam 0 ,mem_usb_ep1_stall_status -: 018600 usb0_force_stall_ep1_in_off_reply: -0x4a73 018601 jam 1 ,mem_usb_clear_halt -0x4a74 018602 branch usb0_reply_zerolen -: 018603 usb0_force_stall_ep2_in_off: -0x4a75 018604 jam 0 ,mem_usb_ep2_stall_status -0x4a76 018605 branch usb0_force_stall_ep1_in_off_reply -: 018606 usb0_force_stall_ep3_in_off: -0x4a77 018607 jam 0 ,mem_usb_ep3_stall_status -0x4a78 018608 branch usb0_force_stall_ep1_in_off_reply -: 018611 usb0_request_set_feature: -0x4a79 018612 fetch 1 ,mem_usb_setup_blength -0x4a7a 018613 bne 0 ,usb0_force_stall -0x4a7b 018614 fetch 1 ,mem_usb_setup_blengthh -0x4a7c 018615 bne 0 ,usb0_force_stall -0x4a7d 018616 fetch 1 ,mem_usb_setup_bmrequesttype -0x4a7e 018617 beq out_device ,usb0_request_set_feature_out_device -0x4a7f 018618 beq out_interface ,usb0_request_set_feature_out_interface -0x4a80 018619 beq out_endpoint ,usb0_request_set_feature_out_endpoint -0x4a81 018620 branch usb0_force_stall -: 018622 usb0_request_set_feature_out_device: -0x4a82 018623 fetch 1 ,mem_usb_setup_bvalue -0x4a83 018624 bne device_remote_wakeup ,usb0_force_stall -0x4a84 018625 hfetch 1 ,core_usb_config -0x4a85 018626 set1 7 ,pdata -0x4a86 018627 hstore 1 ,core_usb_config -0x4a87 018628 jam 1 ,mem_usb_remote_wakeup -0x4a88 018629 jam usb_sleep ,mem_usb_state -0x4a89 018630 jam 0 ,mem_usb_tx_win_enable -0x4a8a 018631 call usb0_reply_zerolen -: 018632 usb_wakeup_timer_reinit: -0x4a8b 018633 call timer_reinit -0x4a8c 018634 setarg timer_wakeup_delay -0x4a8d 018635 arg timer_wakeup ,queue -0x4a8e 018636 branch timer_init -: 018638 usb0_request_set_feature_out_interface: -0x4a8f 018639 branch usb0_force_stall -: 018641 usb0_request_set_feature_out_endpoint: -0x4a90 018642 fetch 1 ,mem_usb_setup_bvalue -0x4a91 018643 bne endpoint_halt ,usb0_force_stall -0x4a92 018644 fetch 1 ,mem_usb_setup_bvalueh -0x4a93 018645 bne 0 ,usb0_force_stall -0x4a94 018646 fetch 1 ,mem_usb_setup_windex -0x4a95 018647 beq in_ep1 ,usb0_force_stall_ep1_in_on -0x4a96 018648 beq in_ep2 ,usb0_force_stall_ep2_in_on -0x4a97 018649 beq in_ep3 ,usb0_force_stall_ep3_in_on -0x4a98 018650 and_into 0x7f ,pdata -0x4a99 018651 beq 0x00 ,usb0_force_stall_ep0_in_on -0x4a9a 018652 branch usb0_force_stall -: 018654 usb0_force_stall_ep0_in_on: -0x4a9b 018655 jam 1 ,mem_usb_ep0_stall_status -0x4a9c 018656 branch usb0_reply_zerolen -: 018657 usb0_force_stall_ep1_in_on: -0x4a9d 018658 jam 1 ,mem_usb_ep1_stall_status -0x4a9e 018659 branch usb0_reply_zerolen -: 018660 usb0_force_stall_ep2_in_on: -0x4a9f 018661 jam 1 ,mem_usb_ep2_stall_status -0x4aa0 018662 branch usb0_reply_zerolen -: 018663 usb0_force_stall_ep3_in_on: -0x4aa1 018664 jam 1 ,mem_usb_ep3_stall_status -0x4aa2 018665 branch usb0_reply_zerolen -: 018668 usb0_request_set_address: -0x4aa3 018669 fetch 1 ,mem_usb_setup_bmrequesttype -0x4aa4 018670 bne out_device ,usb0_force_stall -0x4aa5 018671 fetch 1 ,mem_usb_setup_windex -0x4aa6 018672 bne 0 ,usb0_force_stall -0x4aa7 018673 fetch 1 ,mem_usb_setup_windex + 1 -0x4aa8 018674 bne 0 ,usb0_force_stall -0x4aa9 018675 fetch 1 ,mem_usb_setup_blength -0x4aaa 018676 bne 0 ,usb0_force_stall -0x4aab 018677 fetch 1 ,mem_usb_setup_blengthh -0x4aac 018678 bne 0 ,usb0_force_stall -0x4aad 018679 fetch 1 ,mem_usb_setup_bvalueh -0x4aae 018680 bne 0 ,usb0_force_stall -0x4aaf 018681 fetch 1 ,mem_usb_setup_bvalue -0x4ab0 018682 and_into 0x80 ,pdata -0x4ab1 018683 bne 0 ,usb0_force_stall -0x4ab2 018684 fetch 1 ,mem_usb_setup_bvalue -0x4ab3 018685 bne 0 ,usb_usb0_state_set_dev_addr -: 018686 usb_usb0_state_set_dev_default: -0x4ab4 018687 jam dev_default ,mem_usb0_state -: 018688 usb0_request_set_wait_address: -0x4ab5 018689 fetch 1 ,mem_usb_setup_bvalue -0x4ab6 018690 hstore 1 ,core_usb_addr -0x4ab7 018691 call usb0_reply_zerolen -0x4ab8 018692 jam 1 ,mem_usb_set_high_addr_flag -0x4ab9 018693 rtn -: 018694 usb_usb0_state_set_dev_addr: -0x4aba 018695 jam dev_address ,mem_usb0_state -0x4abb 018696 branch usb0_request_set_wait_address -: 018699 usb0_request_set_configuration: -0x4abc 018700 fetch 1 ,mem_usb0_state -0x4abd 018701 beq dev_default ,usb0_force_stall -0x4abe 018702 fetch 1 ,mem_usb_setup_bmrequesttype -0x4abf 018703 bne out_device ,usb0_force_stall -0x4ac0 018704 fetch 1 ,mem_usb_setup_windex -0x4ac1 018705 bne 0 ,usb0_force_stall -0x4ac2 018706 fetch 1 ,mem_usb_setup_windex + 1 -0x4ac3 018707 bne 0 ,usb0_force_stall -0x4ac4 018708 fetch 1 ,mem_usb_setup_blength -0x4ac5 018709 bne 0 ,usb0_force_stall -0x4ac6 018710 fetch 1 ,mem_usb_setup_blengthh -0x4ac7 018711 bne 0 ,usb0_force_stall -0x4ac8 018712 fetch 1 ,mem_usb_setup_bvalue + 1 -0x4ac9 018713 bne 0 ,usb0_force_stall -0x4aca 018714 fetch 1 ,mem_usb_setup_bvalue -0x4acb 018715 sub pdata ,usb_max_num_cfg ,null -0x4acc 018716 nbranch usb0_force_stall ,positive -0x4acd 018717 fetch 1 ,mem_usb0_state -0x4ace 018718 beq dev_address ,usb0_request_set_cfg_addr_state -0x4acf 018719 beq dev_configured ,usb0_request_set_cfg_cfg_state -0x4ad0 018720 branch usb0_force_stall -: 018722 usb0_request_set_cfg_addr_state: -: 018723 usb0_request_set_cfg_cfg_state: -0x4ad1 018724 fetch 1 ,mem_usb_setup_bvalue -0x4ad2 018725 beq 0 ,usb0_request_set_cfg_stay_addr_state -0x4ad3 018726 jam dev_configured ,mem_usb0_state -0x4ad4 018727 branch usb0_reply_zerolen -: 018728 usb0_request_set_cfg_stay_addr_state: -0x4ad5 018729 jam dev_address ,mem_usb0_state -0x4ad6 018730 branch usb0_reply_zerolen -: 018733 usb0_request_set_interface: -0x4ad7 018734 fetch 1 ,mem_usb0_state -0x4ad8 018735 bne dev_configured ,usb0_force_stall -0x4ad9 018736 fetch 1 ,mem_usb_setup_bmrequesttype -0x4ada 018737 bne out_interface ,usb0_force_stall -0x4adb 018738 fetch 1 ,mem_usb_setup_bvalue -0x4adc 018739 bne 0 ,usb0_force_stall -0x4add 018740 fetch 1 ,mem_usb_setup_bvalueh -0x4ade 018741 bne 0 ,usb0_force_stall -0x4adf 018742 fetch 1 ,mem_usb_setup_blength -0x4ae0 018743 bne 0 ,usb0_force_stall -0x4ae1 018744 fetch 1 ,mem_usb_setup_blengthh -0x4ae2 018745 bne 0 ,usb0_force_stall -0x4ae3 018746 fetch 1 ,mem_usb_setup_windex -0x4ae4 018747 bne 0 ,usb0_force_stall -0x4ae5 018748 fetch 1 ,mem_usb_setup_windex + 1 -0x4ae6 018749 bne 0 ,usb0_force_stall -0x4ae7 018750 branch usb0_reply_zerolen -: 018753 usb_set_idle: -0x4ae8 018754 jam 1 ,mem_usb_idle_flag -0x4ae9 018755 fetch 1 ,mem_usb_setup_bvalueh -0x4aea 018756 store 1 ,mem_usb_idle_rate -0x4aeb 018757 fetch 1 ,mem_usb_setup_windex -0x4aec 018758 sub pdata ,1 ,null -0x4aed 018759 call usb_clear_remote_wakeup_set0 ,zero -0x4aee 018760 fetch 1 ,mem_usb_state -0x4aef 018761 bne usb_resume ,usb0_reply_zerolen -0x4af0 018762 jam usb_connected ,mem_usb_state -0x4af1 018763 call usb0_reply_zerolen -0x4af2 018764 nop 30000 -0x4af3 018765 nop 30000 -0x4af4 018766 rtn -: 018767 usb_clear_remote_wakeup_set0: -0x4af5 018768 jam 1 ,mem_usb_device_enumeration_endflag -0x4af6 018769 jam 0 ,mem_usb_clear_remote_wakeup -0x4af7 018770 jam usb_resume ,mem_usb_state -0x4af8 018771 rtn -: 018774 usb_set_report: -0x4af9 018775 jam 1 ,mem_usb0_get_set_report -0x4afa 018776 call usb_set_report_resume_judge -0x4afb 018777 fetch 2 ,mem_usb_setup_bvalue -0x4afc 018778 store 2 ,mem_usb_setup_bvalue_temp -0x4afd 018779 fetch 1 ,mem_usb_setup_blength -0x4afe 018780 iforce loopcnt -0x4aff 018781 arg mem_usb0_setup ,contr -0x4b00 018782 arg mem_usb0_set_report_data ,contw -0x4b01 018783 call memcpy -0x4b02 018784 branch usb0_reply_zerolen -: 018786 usb_set_report_resume_judge: -0x4b03 018787 fetch 2 ,mem_usb_setup_bvalue -0x4b04 018788 arg pc_set_report_bvalue ,temp -0x4b05 018789 isub temp ,null -0x4b06 018790 nrtn zero -0x4b07 018791 fetch 2 ,mem_usb_setup_windex -0x4b08 018792 arg pc_set_report_windex ,temp -0x4b09 018793 isub temp ,null -0x4b0a 018794 nrtn zero -0x4b0b 018795 fetch 2 ,mem_usb_setup_blength -0x4b0c 018796 arg pc_set_report_blength ,temp -0x4b0d 018797 isub temp ,null -0x4b0e 018798 nrtn zero -0x4b0f 018799 jam 1 ,mem_usb_tx_win_enable -0x4b10 018800 rtn -: 018803 usb_set_protocol_req: -0x4b11 018804 fetch 1 ,mem_usb_setup_blength -0x4b12 018805 bne 0 ,usb0_force_stall -0x4b13 018806 fetch 1 ,mem_usb_setup_bvalue -0x4b14 018807 beq boot_protocol ,usb_set_boot_protocol -0x4b15 018808 beq report_protocol ,usb_set_report_protocol -0x4b16 018809 branch usb0_force_stall -: 018810 usb_set_boot_protocol: -0x4b17 018811 jam 0 ,mem_usb_set_protocol_status -0x4b18 018812 jam 1 ,mem_usb_set_protocol_value -0x4b19 018813 branch usb0_reply_zerolen -: 018814 usb_set_report_protocol: -0x4b1a 018815 jam 1 ,mem_usb_tx_mac_enable -0x4b1b 018816 jam 1 ,mem_usb_set_protocol_status -0x4b1c 018817 jam 0 ,mem_usb_set_protocol_value -0x4b1d 018818 branch usb0_reply_zerolen -: 018821 usb0_respond_length: -0x4b1e 018822 ifetch 1 ,rega -0x4b1f 018823 iforce regb -0x4b20 018824 increase 1 ,rega -: 018826 usb0_respond: -0x4b21 018827 bpatch patch1f_2 ,mem_patch1f -0x4b22 018828 bmark0 mark_isstr ,usb0_respond0 -0x4b23 018829 add regb ,1 ,pdata -0x4b24 018830 lshift pdata ,pdata -0x4b25 018831 hstore 1 ,core_usb_dfifo0 -0x4b26 018832 jam 3 ,core_usb_dfifo0 -0x4b27 018833 fetch 1 ,mem_usb_setup_blength -0x4b28 018834 increase -2 ,pdata -0x4b29 018835 rshift pdata ,pdata -0x4b2a 018836 store 1 ,mem_usb_setup_blength -0x4b2b 018837 beq 0 ,usb_no_respond_data -: 018838 usb0_respond0: -0x4b2c 018839 fetch 2 ,mem_usb_setup_blength -0x4b2d 018840 isub regb ,null -0x4b2e 018841 branch usb0_respond1 ,positive -0x4b2f 018842 copy pdata ,regb -: 018843 usb0_respond1: -0x4b30 018844 deposit rega -0x4b31 018845 store 2 ,mem_bufptr -0x4b32 018846 deposit regb -0x4b33 018847 store 1 ,mem_remain -0x4b34 018848 branch usb0_tx -: 018850 usb_no_respond_data: -0x4b35 018851 arg 0 ,queue -0x4b36 018852 branch usb_trig -: 018855 usb0_tx: -0x4b37 018856 bpatch patch1f_3 ,mem_patch1f -0x4b38 018857 fetch 1 ,mem_remain -0x4b39 018858 rtn blank -0x4b3a 018859 copy pdata ,loopcnt -0x4b3b 018860 sub pdata ,ep0_packet_size ,null -0x4b3c 018861 branch usb0_tx_info ,positive -0x4b3d 018862 arg ep0_packet_size ,loopcnt -: 018863 usb0_tx_info: -0x4b3e 018864 fetch 1 ,mem_remain -0x4b3f 018865 isub loopcnt ,pdata -0x4b40 018866 store 1 ,mem_remain -0x4b41 018867 fetch 2 ,mem_bufptr -0x4b42 018868 copy pdata ,contr -: 018869 usb0_tx0: -0x4b43 018870 ifetch 1 ,contr -0x4b44 018871 hstore 1 ,core_usb_dfifo0 -0x4b45 018872 bmark0 mark_isstr ,usb0_tx1 -0x4b46 018873 jam 0 ,core_usb_dfifo0 -: 018874 usb0_tx1: -0x4b47 018875 loop usb0_tx0 -0x4b48 018876 copy contr ,pdata -0x4b49 018877 store 2 ,mem_bufptr -0x4b4a 018878 arg 0 ,queue -0x4b4b 018879 call usb_trig -0x4b4c 018880 fetch 1 ,mem_remain -0x4b4d 018881 nrtn blank -0x4b4e 018882 fetch 1 ,mem_usb_state -0x4b4f 018883 rtnne usb_got_report_req -0x4b50 018884 jam usb_connected ,mem_usb_state -0x4b51 018885 rtn -: 018888 usb_tx_ep1: -0x4b52 018889 arg core_usb_dfifo1 ,rega -0x4b53 018890 arg 1 ,queue -: 018891 usb_tx_loop: -0x4b54 018892 ifetch 1 ,contr -0x4b55 018893 istore 1 ,rega -0x4b56 018894 loop usb_tx_loop -: 018895 usb_trig: -0x4b57 018896 setarg 0 -0x4b58 018897 qset1 pdata -0x4b59 018898 hstore 1 ,core_usb_trig -0x4b5a 018899 fetcht 1 ,mem_usb_tx_wait -0x4b5b 018900 ior temp ,pdata -0x4b5c 018901 store 1 ,mem_usb_tx_wait -0x4b5d 018902 rtn -: 018904 usb_tx_ep2: -0x4b5e 018905 arg 2 ,queue -0x4b5f 018906 arg core_usb_dfifo2 ,rega -0x4b60 018907 branch usb_tx_loop -: 018909 usb_tx: -0x4b61 018910 bpatch patch1f_4 ,mem_patch1f -0x4b62 018911 fetch 1 ,mem_usb_tx_enable -0x4b63 018912 rtn blank -0x4b64 018913 fetch 1 ,mem_usb_tx_wait -0x4b65 018914 nbranch usb_inwake_state_tx_dispose ,blank -0x4b66 018915 fetch 1 ,mem_usb_device_enumeration_endflag -0x4b67 018916 branch usb_tx_fifo_release ,blank -0x4b68 018917 fetch 1 ,mem_usb_state -0x4b69 018918 beq usb_sleep ,usb_windows_wakeup -0x4b6a 018919 bne usb_connected ,usb_tx_fifo_release -0x4b6b 018920 fetch 1 ,mem_usb_clear_remote_wakeup -0x4b6c 018921 nbranch usb_tx_fifo_release ,blank -0x4b6d 018922 call usb_tx_data_ep1 -0x4b6e 018923 branch usb_tx_data_ep2 -: 018925 usb_tx_data_ep1: -0x4b6f 018926 fetch 1 ,mem_usb_tx_enable -0x4b70 018927 rtnbit0 1 -0x4b71 018928 fetch 1 ,mem_usb_tx_wait -0x4b72 018929 rtnbit1 1 -0x4b73 018930 fetch 1 ,mem_usb_tx_enable -0x4b74 018931 set0 1 ,pdata -0x4b75 018932 store 1 ,mem_usb_tx_enable -0x4b76 018933 fetch 1 ,mem_usb_ep1_data -0x4b77 018934 rtn blank -0x4b78 018935 beq usb_ep1_kb ,usb_tx_kb_normal_data -0x4b79 018936 branch assert -: 018938 usb_tx_data_ep2: -0x4b7a 018939 fetch 1 ,mem_usb_tx_enable -0x4b7b 018940 rtnbit0 2 -0x4b7c 018941 fetch 1 ,mem_usb_tx_wait -0x4b7d 018942 rtnbit1 2 -0x4b7e 018943 fetch 1 ,mem_usb_tx_enable -0x4b7f 018944 set0 2 ,pdata -0x4b80 018945 store 1 ,mem_usb_tx_enable -0x4b81 018946 fetch 1 ,mem_usb_ep2_data -0x4b82 018947 rtn blank -0x4b83 018948 beq usb_ep2_ms ,usb_tx_ms_data -0x4b84 018949 beq usb_ep2_multikey ,usb_tx_kb_multikey_data -0x4b85 018950 branch assert -: 018952 usb_tx_fifo_release: -0x4b86 018954 arg mem_usb_mouse_data ,contw -0x4b87 018955 arg 6 ,loopcnt -0x4b88 018956 branch memset0 -: 018958 usb_tx_ms_data: -0x4b89 018959 fetch 1 ,mem_usb_idle_flag -0x4b8a 018960 fetcht 1 ,mem_usb_get_protocol_flag -0x4b8b 018961 iand temp ,pdata -0x4b8c 018962 branch usb_tx_ms_data_normal_mode ,blank -0x4b8d 018963 fetcht 1 ,mem_usb_set_protocol_status -0x4b8e 018964 iadd temp ,pdata -0x4b8f 018965 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode -0x4b90 018966 branch usb_tx_ms_data_normal_mode -: 018968 usb_tx_ms_data_mac_boot_mode: -0x4b91 018969 jam 0 ,mem_usb_ep2_data -: 018970 usb_tx_ms_data_mac_boot_regroup: -0x4b92 018971 fetch 1 ,mem_usb_mouse_data + 1 -0x4b93 018972 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey -0x4b94 018973 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey -0x4b95 018974 fetch 1 ,mem_usb_mouse_data + 1 -0x4b96 018975 store 1 ,mem_usb_mouse_data -0x4b97 018976 fetch 1 ,mem_usb_mouse_data + 2 -0x4b98 018977 istore 1 ,contw -0x4b99 018978 fetch 1 ,mem_usb_mouse_data + 4 -0x4b9a 018979 istore 1 ,contw -0x4b9b 018980 fetch 1 ,mem_usb_mouse_data + 6 -0x4b9c 018981 istore 1 ,contw -0x4b9d 018982 arg 4 ,loopcnt -0x4b9e 018983 arg mem_usb_mouse_data ,contr -0x4b9f 018984 branch usb_tx_ep2 -: 018986 usb_tx_ms_data_normal_mode: -0x4ba0 018987 jam 0 ,mem_usb_ep2_data -: 018988 usb_tx_mac_boot_ms_regroup_r_or_lrkey: -0x4ba1 018989 arg 8 ,loopcnt -0x4ba2 018990 arg mem_usb_mouse_data ,contr -0x4ba3 018991 branch usb_tx_ep2 -: 018993 usb_tx_kb_multikey_data: -0x4ba4 018994 jam 0 ,mem_usb_ep2_data -0x4ba5 018995 arg 3 ,loopcnt -0x4ba6 018996 arg mem_usb_kb_multikey ,contr -0x4ba7 018997 branch usb_tx_ep2 -: 018999 usb_tx_kb_normal_data: -0x4ba8 019000 jam 0 ,mem_usb_ep1_data -0x4ba9 019001 arg 8 ,loopcnt -0x4baa 019002 arg mem_usb_kb_data ,contr -0x4bab 019003 branch usb_tx_ep1 -: 019005 usb_inwake_state_tx_dispose: -0x4bac 019006 fetch 1 ,mem_usb_state -0x4bad 019007 beq usb_sleep ,usb_clear_tx_wait -0x4bae 019008 beq usb_connected ,usb_mac_wakeup_trig -0x4baf 019009 rtn -: 019010 usb_clear_tx_wait: -0x4bb0 019011 jam 0 ,mem_usb_tx_wait -0x4bb1 019012 rtn -: 019013 usb_mac_wakeup_trig: -0x4bb2 019014 hfetch 1 ,core_usb_config -0x4bb3 019015 set1 7 ,pdata -0x4bb4 019016 hstore 1 ,core_usb_config -0x4bb5 019017 jam 1 ,mem_usb_mac_wakeup_trig -0x4bb6 019018 rtn -: 019020 usb_mac_wakeup_judge: -0x4bb7 019021 fetch 1 ,mem_usb_state -0x4bb8 019022 rtneq usb_sleep -0x4bb9 019023 beq usb_connected ,usb_mac_wakeup -0x4bba 019024 rtn -: 019025 usb_mac_wakeup: -0x4bbb 019026 fetch 1 ,mem_usb_mac_wakeup_trig -0x4bbc 019027 rtn blank -0x4bbd 019028 jam 1 ,mem_usb_wakestate_onetime_flag -0x4bbe 019029 branch usb_wakeup -: 019031 usb_windows_wakeup: -0x4bbf 019032 arg timer_wakeup ,queue -0x4bc0 019033 call timer_check -0x4bc1 019034 nrtn blank -: 019035 usb_wakeup: -0x4bc2 019036 hfetch 1 ,core_usb_config -0x4bc3 019037 rtnbit0 7 -0x4bc4 019038 jam 0xfc ,core_usb_config -0x4bc5 019039 nop 30000 -0x4bc6 019040 jam 0x3c ,core_usb_config -0x4bc7 019041 rtn -: 019048 hci_rx_h4: -0x4bc8 019049 bpatch patch1f_5 ,mem_patch1f -0x4bc9 019050 fetch 1 ,mem_hci_cmd -0x4bca 019051 nrtn blank -: 019052 hci_rx_h4_1: -0x4bcb 019053 call hci_h4_parse_packet -0x4bcc 019054 ncall h4_rx_discard_packet ,user -0x4bcd 019055 rtn -: 019057 hci_h4_parse_packet: -0x4bce 019058 bpatch patch1f_6 ,mem_patch1f -0x4bcf 019059 copy contru ,rega -0x4bd0 019060 arg 4 ,temp -0x4bd1 019061 ifetch 1 ,contru -0x4bd2 019062 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len -0x4bd3 019063 increase 1 ,temp -0x4bd4 019064 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len -0x4bd5 019065 copy contru ,pdata -0x4bd6 019066 hstore 2 ,core_uart_rrptr -0x4bd7 019067 rtn -: 019068 hci_h4_parse_packet_wait_len: -0x4bd8 019069 hfetch 2 ,core_uart_rxitems -0x4bd9 019070 isub temp ,null -0x4bda 019071 nbranch hci_h4_parse_packet_wait_len ,positive -0x4bdb 019073 disable user -0x4bdc 019074 copy rega ,contru -0x4bdd 019075 call h4_get_rx_payload_len -0x4bde 019076 iadd temp ,temp -: 019077 hci_h4_parse_packet_wait: -0x4bdf 019078 hfetch 2 ,core_uart_rxitems -0x4be0 019079 isub temp ,null -0x4be1 019080 nbranch hci_h4_parse_packet_wait ,positive -0x4be2 019081 copy rega ,contru -0x4be3 019082 ifetch 1 ,contru -0x4be4 019083 beq hci_h4_type_cmd ,process_hci_cmd -0x4be5 019084 branch assert -: 019086 h4_rx_discard_packet: -0x4be6 019087 bpatch patch1f_7 ,mem_patch1f -0x4be7 019088 hfetch 2 ,core_uart_rrptr -0x4be8 019089 iforce contru -0x4be9 019090 call h4_get_rx_payload_len -0x4bea 019091 iadd contru ,contru -0x4beb 019092 deposit contru -0x4bec 019093 hstore 2 ,core_uart_rrptr -0x4bed 019094 rtn -: 019099 h4_get_rx_payload_len: -0x4bee 019100 ifetch 1 ,contru -0x4bef 019101 increase 2 ,contru -0x4bf0 019102 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl -0x4bf1 019103 ifetch 1 ,contru -0x4bf2 019104 rtn -: 019105 h4_get_rx_payload_len_acl: -0x4bf3 019106 ifetch 2 ,contru -0x4bf4 019107 rtn -: 019109 h4_get_tx_ptr: -0x4bf5 019110 hfetch 2 ,core_uart_twptr -0x4bf6 019111 increase -5 ,contwu -0x4bf7 019112 iadd contwu ,contwu -0x4bf8 019113 rtn -: 019115 h4_send_packet_event: -0x4bf9 019116 arg hci_h4_type_event ,temp -0x4bfa 019117 branch h4_send_packet -: 019118 h4_send_packet_acl: -0x4bfb 019119 arg hci_h4_type_acl ,temp -: 019120 h4_send_packet: -0x4bfc 019121 bpatchx patch20_0 ,mem_patch20 -0x4bfd 019122 increase 1 ,loopcnt -0x4bfe 019123 hfetch 2 ,core_uart_twptr -0x4bff 019124 copy pdata ,contwu -0x4c00 019125 copy loopcnt ,pdata -0x4c01 019126 istoret 1 ,contwu -0x4c02 019127 increase -1 ,pdata -0x4c03 019128 iadd contwu ,contwu -0x4c04 019129 copy contwu ,pdata -0x4c05 019130 store 2 ,mem_hci_acl_tx_trigger_wptr -0x4c06 019131 copy temp ,pdata -0x4c07 019132 rtneq hci_h4_type_acl -0x4c08 019133 fetch 2 ,mem_hci_acl_tx_trigger_wptr -0x4c09 019134 hstore 2 ,core_uart_twptr -0x4c0a 019135 branch h4_send_acl_trigger_clear -: 019138 h4_send_acl_trigger_clear: -0x4c0b 019139 setarg 0 -0x4c0c 019140 store 2 ,mem_hci_acl_tx_trigger_wptr -0x4c0d 019141 rtn -: 019148 hci_init: -0x4c0e 019149 rtn wake -0x4c0f 019150 setarg hci_idle_dispatch -0x4c10 019151 store 2 ,mem_cb_idle_process -0x4c11 019153 setarg uart_baud_115200 -0x4c12 019154 store uart_baud_len ,mem_baud -: 019155 hci_lpm_init: -0x4c13 019156 setarg mem_h5rx_buf -0x4c14 019157 hstore 2 ,core_uart_rsaddr -0x4c15 019158 setarg mem_h5rx_buf_end -0x4c16 019159 hstore 2 ,core_uart_readdr -0x4c17 019160 setarg mem_h5tx_buf -0x4c18 019161 hstore 2 ,core_uart_tsaddr -0x4c19 019162 call hci_sel_init -: 019163 hci_reinit: -0x4c1a 019164 jam 0x0 ,core_uart_ctrl -0x4c1b 019165 setarg mem_h5tx_buf -0x4c1c 019166 hstore 2 ,core_uart_twptr -0x4c1d 019167 hstore 2 ,core_uart_trptrp -0x4c1e 019168 setarg mem_h5rx_buf -0x4c1f 019169 hstore 2 ,core_uart_rrptr -0x4c20 019170 store 2 ,mem_h5rx_rptr -: 019171 hci_init_common: -0x4c21 019172 hfetch 2 ,core_clkoff -0x4c22 019173 set0 clock_off_uart ,pdata -0x4c23 019174 hstore 2 ,core_clkoff -0x4c24 019175 call uart_set_baud_by_mem -0x4c25 019176 jam uartclk_dpll ,core_uart_clksel -0x4c26 019177 jam uart_ctrl_h4 ,core_uart_ctrl -0x4c27 019178 rtn -: 019180 hci_sel_init: -0x4c28 019181 setarg mem_h5tx_buf_end -0x4c29 019182 hstore 2 ,core_uart_teaddr -0x4c2a 019183 hfetch 1 ,core_gpio_sel1 -0x4c2b 019184 or_into 0x07 ,pdata -0x4c2c 019185 hstore 1 ,core_gpio_sel1 -0x4c2d 019186 rtn -: 019189 hci_rx_packet: -0x4c2e 019190 bpatchx patch20_1 ,mem_patch20 -0x4c2f 019191 hfetch 1 ,core_uart_status -0x4c30 019192 iforce regb -0x4c31 019193 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont -0x4c32 019194 hfetch 2 ,core_uart_rxitems -0x4c33 019195 iforce regc -0x4c34 019196 arg 0x44f ,temp -0x4c35 019197 isub temp ,null -0x4c36 019198 nrtn zero -: 019199 hci_rx_packet_cont: -0x4c37 019200 hfetch 2 ,core_uart_rrptr -0x4c38 019201 iforce contru -0x4c39 019202 branch hci_rx_h4 -: 019204 uart_send_byte: -0x4c3a 019205 hfetcht 1 ,core_uart_status -0x4c3b 019206 isolate1 6 ,temp -0x4c3c 019207 branch uart_send_byte ,true -0x4c3d 019208 hstore 1 ,core_uart_txd -0x4c3e 019209 rtn -: 019211 process_hci_cmd: -0x4c3f 019212 bpatchx patch20_2 ,mem_patch20 -0x4c40 019213 fetch 1 ,mem_hci_cmd -0x4c41 019214 branch process_hci_cmd_cont ,blank -0x4c42 019215 enable user -0x4c43 019216 rtn -: 019217 process_hci_cmd_cont: -0x4c44 019218 ifetch 2 ,contru -0x4c45 019219 iforce alarm -0x4c46 019220 iforce queue -0x4c47 019221 ifetch 1 ,contru -0x4c48 019222 iforce temp -0x4c49 019223 rshift2 alarm ,pdata -0x4c4a 019224 rshift8 pdata ,pdata -0x4c4b 019225 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific -0x4c4c 019226 rtn -: 019229 phci_grp_vendor_specific: -0x4c4d 019230 bpatchx patch20_3 ,mem_patch20 -0x4c4e 019231 deposit queue -0x4c4f 019232 beq hci_vendor_cmd_reset ,hci_normal_reply -0x4c50 019233 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid -0x4c51 019234 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud -0x4c52 019235 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch -0x4c53 019236 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done -0x4c54 019237 beq hci_vendor_cmd_echo ,hci_normal_reply -0x4c55 019238 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr -0x4c56 019239 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm -0x4c57 019241 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem -0x4c58 019242 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep -0x4c59 019243 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init -0x4c5a 019244 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec -0x4c5b 019245 branch hci_normal_reply -: 019247 phci_grp_vendor_enter_lpm: -0x4c5c 019248 call hci_normal_reply -0x4c5d 019249 call wait_uarttx -0x4c5e 019250 call gpio_pu_uart_tx -: 019251 hci_enter_lpm: -0x4c5f 019252 call app_put_lpm_wake_lock -0x4c60 019253 call app_l2cap_flow_control_enable -0x4c61 019254 branch gpio_rx_config_input_with_pu -: 019256 hci_exit_lpm: -0x4c62 019257 jam hci_rx_ready ,mem_hci_lt_rx_state -0x4c63 019258 call app_get_lpm_wake_lock -0x4c64 019259 call hci_lpm_init -0x4c65 019260 branch app_l2cap_flow_control_disable -: 019262 phci_grp_vendor_chipid: -0x4c66 019263 call hci_get_cmd_complete_ptr -0x4c67 019264 hfetch 2 ,core_chipid -0x4c68 019265 istore 2 ,contwu -0x4c69 019266 force 6 ,loopcnt -0x4c6a 019267 branch hci_command_complete -: 019269 phci_grp_vendor_baud: -0x4c6b 019270 ifetch 2 ,contru -0x4c6c 019271 store 2 ,mem_baud -0x4c6d 019272 hstore 2 ,core_uart_baud -0x4c6e 019273 rtn -: 019276 phci_grp_vendor_patch_common: -0x4c6f 019278 ifetch 1 ,contru -0x4c70 019279 copy pdata ,temp -0x4c71 019280 hstore 1 ,core_ucode_low -0x4c72 019281 ifetch 1 ,contru -0x4c73 019282 iadd temp ,temp -0x4c74 019283 set1 7 ,pdata -0x4c75 019284 hstore 1 ,core_ucode_ctrl -0x4c76 019285 ifetch 1 ,contru -0x4c77 019286 iadd temp ,temp -0x4c78 019287 copy pdata ,loopcnt -0x4c79 019288 rtn -: 019290 phci_grp_vendor_patch: -0x4c7a 019291 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad -0x4c7b 019292 call phci_grp_vendor_patch_common -: 019293 phci_grp_vendor_patch_loop: -0x4c7c 019294 ifetch 1 ,contru -0x4c7d 019295 hstore 1 ,core_ucode_data -0x4c7e 019296 iadd temp ,temp -0x4c7f 019297 loop phci_grp_vendor_patch_loop -: 019298 phci_grp_vendor_patch_check_sum: -0x4c80 019299 and temp ,0xff ,temp -0x4c81 019300 ifetch 1 ,contru -0x4c82 019301 isub temp ,null -0x4c83 019302 nbranch phci_grp_vendor_patch_bad ,zero -0x4c84 019303 branch hci_normal_reply -: 019306 phci_grp_vendor_patch_sec: -0x4c85 019307 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad -0x4c86 019308 call phci_grp_vendor_patch_common -0x4c87 019309 store 8 ,mem_pdatatemp -: 019310 phci_grp_vendor_patch_sec_loop: -0x4c88 019311 call do_aes_cbc -0x4c89 019312 arg 16 ,loopcnt -0x4c8a 019313 arg mem_temp_block0 ,contw -0x4c8b 019314 call load_uart_sum_loop -0x4c8c 019315 storet 8 ,mem_temp -0x4c8d 019316 arg mem_temp_block2 ,contw -0x4c8e 019317 call store_aes_result -0x4c8f 019318 arg mem_temp_block2 ,rega -0x4c90 019319 arg mem_temp_block0 ,regb -0x4c91 019320 arg mem_temp_block3 ,contw -0x4c92 019321 call xor16 -0x4c93 019322 arg 16 ,loopcnt -0x4c94 019323 arg mem_temp_block3 ,contr -0x4c95 019324 call load_ucode_only_loop -0x4c96 019325 fetcht 8 ,mem_temp -0x4c97 019326 fetch 8 ,mem_pdatatemp -0x4c98 019327 increase -16 ,pdata -0x4c99 019328 store 8 ,mem_pdatatemp -0x4c9a 019329 nbranch phci_grp_vendor_patch_sec_loop ,blank -0x4c9b 019330 branch phci_grp_vendor_patch_check_sum -: 019332 load_ucode_only_loop: -0x4c9c 019333 ifetch 1 ,contr -0x4c9d 019334 hstore 1 ,core_ucode_data -0x4c9e 019335 loop load_ucode_only_loop -0x4c9f 019336 rtn -: 019338 load_uart_sum_loop: -0x4ca0 019339 ifetch 1 ,contru -0x4ca1 019340 istore 1 ,contw -0x4ca2 019341 iadd temp ,temp -0x4ca3 019342 loop load_uart_sum_loop -0x4ca4 019343 rtn -: 019345 phci_grp_vendor_patch_sec_init: -0x4ca5 019346 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad -0x4ca6 019347 arg 0 ,temp -0x4ca7 019348 arg 16 ,loopcnt -0x4ca8 019349 arg mem_temp_block0 ,contw -0x4ca9 019350 call load_uart_sum_loop -0x4caa 019351 hfetch 1 ,core_gpio_key2 -0x4cab 019352 and_into 0xfd ,pdata -0x4cac 019353 hstore 1 ,core_gpio_key2 -0x4cad 019354 arg mem_temp_block0 ,contr -0x4cae 019355 arg 16 ,loopcnt -0x4caf 019356 call aes_load_data -0x4cb0 019357 call aes_init -0x4cb1 019358 call aes_clear_data -0x4cb2 019359 branch phci_grp_vendor_patch_check_sum -: 019362 phci_grp_vendor_done: -0x4cb3 019363 arg 0x20 ,loopcnt -0x4cb4 019364 arg mem_patch00 ,contw -0x4cb5 019365 arg 0 ,temp -: 019366 phci_grp_vendor_done_loop: -0x4cb6 019367 ifetch 1 ,contru -0x4cb7 019368 istore 1 ,contw -0x4cb8 019369 iadd temp ,temp -0x4cb9 019370 loop phci_grp_vendor_done_loop -0x4cba 019371 and temp ,0xff ,temp -0x4cbb 019372 ifetch 1 ,contru -0x4cbc 019373 isub temp ,null -0x4cbd 019374 nbranch phci_grp_vendor_patch_bad ,zero -0x4cbe 019375 jam 0 ,core_ucode_ctrl -0x4cbf 019376 call hci_normal_reply -0x4cc0 019377 call h4_rx_discard_packet -0x4cc1 019378 call clear_key_buf -0x4cc2 019379 call wait_uarttx -0x4cc3 019380 branch soft_reset -: 019382 phci_grp_vendor_patch_bad: -0x4cc4 019383 jam 0 ,core_ucode_ctrl -0x4cc5 019384 branch start -: 019386 phci_grp_vendor_bdaddr: -0x4cc6 019387 ifetch 6 ,contru -0x4cc7 019388 store 6 ,mem_lap -0x4cc8 019389 branch hci_normal_reply -: 019392 phci_grp_vendor_mem: -0x4cc9 019393 ifetch 1 ,contru -0x4cca 019394 store 1 ,mem_hci_curr_len -0x4ccb 019395 copy pdata ,loopcnt -0x4ccc 019396 ifetch 2 ,contru -0x4ccd 019397 store 2 ,mem_hci_curr_target -0x4cce 019398 copy pdata ,contw -0x4ccf 019399 call uart_copy_rx_bytes -0x4cd0 019400 branch hci_normal_reply -: 019403 phci_grp_vendor_eep: -0x4cd1 019404 ifetch 1 ,contru -0x4cd2 019405 store 1 ,mem_hci_curr_len -0x4cd3 019406 copy pdata ,loopcnt -0x4cd4 019407 ifetch 2 ,contru -0x4cd5 019408 store 2 ,mem_hci_curr_target -0x4cd6 019409 arg mem_l2cap_rxbuff1 ,contw -0x4cd7 019410 call uart_copy_rx_bytes -0x4cd8 019411 fetcht 1 ,mem_hci_curr_len -0x4cd9 019412 arg mem_l2cap_rxbuff1 ,rega -0x4cda 019413 fetch 2 ,mem_hci_curr_target -0x4cdb 019414 branch iicd_write_ota_data -: 019419 hci_normal_reply: -0x4cdc 019420 force 4 ,loopcnt -: 019421 hci_command_complete: -0x4cdd 019422 call hci_get_payload_ptr -0x4cde 019423 force 0x1 ,pdata -0x4cdf 019424 istore 1 ,contwu -0x4ce0 019425 deposit alarm -0x4ce1 019426 istore 3 ,contwu -0x4ce2 019427 force hci_event_command_complete ,queue -: 019428 hci_send_event: -0x4ce3 019429 bpatchx patch20_4 ,mem_patch20 -0x4ce4 019430 call hci_get_packet_ptr -0x4ce5 019431 deposit queue -0x4ce6 019432 istore 1 ,contwu -0x4ce7 019433 deposit loopcnt -0x4ce8 019434 istore 1 ,contwu -: 019435 hci_send_event_raw: -0x4ce9 019436 force 5 ,queue -0x4cea 019437 increase 2 ,loopcnt -: 019438 hci_send_packet: -0x4ceb 019439 branch h4_send_packet_event -: 019441 hci_send_commu_ready_event: -0x4cec 019442 force hci_event_vendor_specific ,queue -0x4ced 019443 call hci_get_payload_ptr -0x4cee 019444 setarg hci_vendor_event_commu_ready -0x4cef 019445 istore 1 ,contwu -0x4cf0 019446 force 1 ,loopcnt -0x4cf1 019447 branch hci_send_event -: 019449 hci_get_cmd_complete_ptr: -0x4cf2 019450 force 12 ,contwu -0x4cf3 019451 branch hci_get_tx_ptr -: 019453 hci_get_payload_ptr: -0x4cf4 019454 force 8 ,contwu -0x4cf5 019455 branch hci_get_tx_ptr -: 019457 hci_get_packet_ptr: -0x4cf6 019458 force 6 ,contwu -: 019459 hci_get_tx_ptr: -0x4cf7 019460 branch h4_get_tx_ptr -: 019464 calc_tx_crc16: -0x4cf8 019465 pulse crc16 -0x4cf9 019466 enable enable_crc -: 019467 crcloop: -0x4cfa 019468 ifetch 1 ,contwu -0x4cfb 019469 inject bucket ,8 -0x4cfc 019470 loop crcloop -0x4cfd 019471 enable enable_parity -0x4cfe 019472 inject bucket ,16 -0x4cff 019473 disable enable_parity -0x4d00 019474 disable enable_crc -0x4d01 019475 disable crc16 -0x4d02 019476 byteswap pdata ,pdata -0x4d03 019477 rtn -: 019481 cmd_exit: -0x4d04 019482 jam 0 ,mem_hci_cmd -0x4d05 019483 rtn -: 019484 cmd_check_plap: -0x4d06 019485 fetch 6 ,mem_hci_plap -0x4d07 019486 fetcht 6 ,mem_plap -0x4d08 019487 isub temp ,null -0x4d09 019488 rtn -: 019493 cmd_pair: -0x4d0a 019494 fetch 1 ,mem_op -0x4d0b 019495 bbit1 op_inrand_req ,cmd_pair_passive -0x4d0c 019496 call tid_initiate -0x4d0d 019497 jam lmp_in_rand ,mem_lmo_opcode2 -0x4d0e 019498 branch cmd_exit -: 019499 cmd_pair_passive: -0x4d0f 019500 set0 op_inrand_req ,pdata -0x4d10 019501 store 1 ,mem_op -0x4d11 019502 call lmp_accept_inrand -0x4d12 019503 setarg 0 -0x4d13 019504 setflag master ,smap_lmptid ,pdata -0x4d14 019505 store 1 ,mem_lmo_tid2 -0x4d15 019506 branch cmd_exit -0x4d16 019507 rtn -: 019508 cmd_in_sniff: -0x4d17 019509 jam lmp_sniff_req ,mem_lmo_opcode2 -0x4d18 019510 arg mem_sniff_payload ,contw -0x4d19 019511 setarg 0 -0x4d1a 019512 isolate1 27 ,clke_bt -0x4d1b 019513 setflag true ,1 ,pdata -0x4d1c 019514 istore 1 ,contw -0x4d1d 019515 setarg 0 -0x4d1e 019516 istore 2 ,contw -0x4d1f 019517 fetch 2 ,mem_sniff_param_interval -0x4d20 019518 istore 2 ,contw -0x4d21 019519 fetch 1 ,mem_sniff_param_attempt -0x4d22 019520 istore 2 ,contw -0x4d23 019521 fetch 1 ,mem_sniff_param_timeout -0x4d24 019522 istore 2 ,contw -0x4d25 019523 branch cmd_exit -: 019525 cmd_exit_sniff: -0x4d26 019526 jam lmp_unsniff_req ,mem_lmo_opcode2 -0x4d27 019527 branch cmd_exit -: 019529 hci_idle_dispatch: -0x4d28 019530 call gpio_check_uart_state -0x4d29 019531 rtn true -0x4d2a 019532 arg uart_wakeup_rx ,temp -0x4d2b 019533 call gpio_get_bit -0x4d2c 019534 nbranch uart_wake_up ,true -0x4d2d 019535 jam hci_rx_wake ,mem_hci_lt_rx_state -0x4d2e 019536 rtn -: 019537 uart_wake_up: -0x4d2f 019538 fetch 1 ,mem_hci_lt_rx_state -0x4d30 019539 rtnne hci_rx_wake -0x4d31 019540 call hci_exit_lpm -0x4d32 019541 branch hci_send_commu_ready_event -: 019555 hid_rx_process: -0x4d33 019556 bpatchx patch20_5 ,mem_patch20 -0x4d34 019557 fetch 2 ,mem_l2cap_payload_ptr -0x4d35 019558 copy pdata ,contr -0x4d36 019559 ifetch 1 ,contr -0x4d37 019560 and pdata ,0x0f ,temp -0x4d38 019561 rshift4 pdata ,pdata -0x4d39 019562 beq hid_type_set_idle ,hid_rx_process_handshake -0x4d3a 019563 beq hid_type_set_protocol ,hid_rx_process_handshake -0x4d3b 019564 beq hid_type_data ,hid_rx_process_data -0x4d3c 019565 beq hid_type_set_report ,hid_rx_process_set_report -0x4d3d 019566 beq hid_type_control ,hid_rx_process_hid_control -0x4d3e 019567 rtn -: 019569 hid_rx_process_hid_control: -0x4d3f 019570 copy temp ,pdata -0x4d40 019571 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug -0x4d41 019572 beq hid_control_p_suspend ,hid_rx_process_suspend -0x4d42 019573 rtn -: 019575 hid_rx_process_virtual_cable_unplug: -0x4d43 019576 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp -0x4d44 019577 call ui_ipc_send_event -0x4d45 019578 fetch 1 ,mem_device_option -0x4d46 019579 rtnbit0 dvc_op_mouse -0x4d47 019580 copy temp ,pdata -0x4d48 019581 beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug -0x4d49 019582 rtn -: 019583 hid_rx_process_suspend: -0x4d4a 019584 rtn -: 019586 hid_rx_process_set_report: -0x4d4b 019587 call hid_rx_process_data -0x4d4c 019588 arg 0x01 ,rega -0x4d4d 019589 call hid_malloc_tx_buff -0x4d4e 019590 fetch 2 ,mem_hid_ctrl_remote_cid -0x4d4f 019591 istore 2 ,contw -0x4d50 019592 setarg 0x00 -0x4d51 019593 istore 1 ,contw -0x4d52 019594 rtn -: 019596 hid_rx_process_handshake: -0x4d53 019597 arg 1 ,rega -0x4d54 019598 call hid_malloc_tx_buff -0x4d55 019599 fetch 2 ,mem_hid_ctrl_remote_cid -0x4d56 019600 istore 2 ,contw -0x4d57 019601 setarg 0 -0x4d58 019602 istore 1 ,contw -0x4d59 019603 jam 1 ,mem_ui_data_txbuff_length -0x4d5a 019604 fetch 1 ,mem_hid_control_state -0x4d5b 019605 set1 l2cap_channel_hid_handshake_done -0x4d5c 019606 store 1 ,mem_hid_control_state -0x4d5d 019607 jam bt_evt_hid_handshake ,mem_fifo_temp -0x4d5e 019608 branch ui_ipc_send_event -: 019610 hid_rx_process_data: -0x4d5f 019611 ifetch 1 ,contr -0x4d60 019612 beq hid_report_id_kb ,hid_rx_process_data_hid_kb -0x4d61 019613 rtn -: 019615 hid_rx_process_data_hid_kb: -0x4d62 019616 rtn -: 019619 hid_malloc_tx_buff: -0x4d63 019620 call l2cap_malloc -0x4d64 019621 copy rega ,temp -0x4d65 019622 storet 1 ,mem_ui_data_txbuff_length -0x4d66 019623 copy pdata ,contw -0x4d67 019624 copy rega ,pdata -0x4d68 019625 istore 2 ,contw -0x4d69 019626 rtn -: 019643 l2cap_init: -0x4d6a 019644 branch l2cap_init_wake ,wake -: 019645 l2cap_init_work: -0x4d6b 019646 setarg mem_l2cap_xmem_end -0x4d6c 019647 arg mem_l2cap_xmem_start ,contw -0x4d6d 019648 isub contw ,loopcnt -0x4d6e 019649 call clear_mem -: 019650 l2cap_init_wake: -0x4d6f 019651 bpatchx patch20_6 ,mem_patch20 -0x4d70 019652 setarg mem_sdp_mem_end -0x4d71 019653 arg mem_sdp_mem_start ,contw -0x4d72 019654 isub contw ,loopcnt -0x4d73 019655 call clear_mem -0x4d74 019656 setarg mem_l2cap_mem_end -0x4d75 019657 arg mem_l2cap_mem_start ,contw -0x4d76 019658 isub contw ,loopcnt -0x4d77 019659 call clear_mem -0x4d78 019660 branch l2cap_lpm_load_txbuf -: 019662 process_rx_l2cap_pkt: -0x4d79 019663 bpatchx patch20_7 ,mem_patch20 -0x4d7a 019664 copy contr ,temp -0x4d7b 019667 copy temp ,contr -0x4d7c 019668 ifetch 2 ,contr -0x4d7d 019669 store 2 ,mem_l2cap_rx_pkt_length -0x4d7e 019670 ifetch 2 ,contr -0x4d7f 019671 store 2 ,mem_l2cap_rx_cid -0x4d80 019672 deposit contr -0x4d81 019673 store 2 ,mem_l2cap_payload_ptr -0x4d82 019674 fetch 1 ,memui_reconnect_mode -0x4d83 019675 beq no_reconnection ,l2cap_rx_multiplexing -0x4d84 019676 branch ml2cap_rx_multiplexing -: 019678 l2cap_rx_multiplexing: -0x4d85 019679 fetch 2 ,mem_l2cap_rx_pkt_length -0x4d86 019680 branch l2cap_rx_reset_state ,blank -0x4d87 019681 bpatchx patch21_0 ,mem_patch21 -0x4d88 019682 fetch 1 ,mem_l2cap_rx_cid -0x4d89 019683 beq l2cap_signal_channel ,l2cap_call_proc_signal -: 019684 l2cap_rx_multiplexing0: -0x4d8a 019685 beq l2cap_sdp_channel ,l2cap_call_proc_sdp -0x4d8b 019686 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm -0x4d8c 019687 beq l2cap_hid_control_channel ,l2cap_call_proc_hid -0x4d8d 019688 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid -0x4d8e 019689 branch l2cap_rx_reset_state -: 019691 l2cap_check_map: -0x4d8f 019694 bpatchx patch21_1 ,mem_patch21 -0x4d90 019695 call l2cap_malloc_get_full_map -0x4d91 019696 fetch 1 ,mem_used_map -0x4d92 019697 beq 0 ,set_pdata_0 -0x4d93 019698 beq 1 ,set_pdata_0 -0x4d94 019699 beq 2 ,set_pdata_0 -0x4d95 019700 beq 3 ,set_pdata_0 -0x4d96 019701 beq 0x81 ,set_pdata_0 -0x4d97 019702 beq 0xc0 ,set_pdata_0 -0x4d98 019703 beq 0x80 ,set_pdata_0 -0x4d99 019704 beq 0x40 ,set_pdata_0 -0x4d9a 019705 rtn -: 019707 set_pdata_0: -0x4d9b 019708 setarg 0 -0x4d9c 019709 rtn -: 019712 l2cap_call_proc_signal: -0x4d9d 019713 call l2cap_check_map -0x4d9e 019714 nrtn blank -: 019715 l2cap_call_proc_signal0: -0x4d9f 019716 call l2cap_malloc_signal_channel -0x4da0 019717 call l2cap_process_signal_pkt -0x4da1 019718 fetcht 2 ,mem_l2cap_signal_tx_length -0x4da2 019719 branch l2cap_call_proc_no_reply ,blank -0x4da3 019720 call l2cap_get_signal_tx_buff -0x4da4 019721 fetch 2 ,mem_l2cap_signal_tx_length -0x4da5 019722 istore 2 ,contw -0x4da6 019723 force l2cap_signal_channel ,pdata -0x4da7 019724 istore 2 ,contw -0x4da8 019725 branch l2cap_rx_reset_state -: 019727 l2cap_call_proc_sigal_pending: -0x4da9 019728 fetch 1 ,mem_l2cap_pending_item -0x4daa 019729 rtn blank -0x4dab 019730 copy pdata ,rega -0x4dac 019731 bpatchx patch21_2 ,mem_patch21 -0x4dad 019732 fetch 4 ,mem_l2cap_sdpres_delay_time -0x4dae 019733 arg 0x100 ,temp -0x4daf 019734 iadd temp ,temp -0x4db0 019735 copy clkn_bt ,pdata -0x4db1 019736 isub temp ,null -0x4db2 019737 nrtn positive -0x4db3 019738 jam 0 ,mem_l2cap_pending_item -0x4db4 019739 copy rega ,pdata -0x4db5 019740 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ -0x4db6 019741 branch assert -: 019742 l2cap_sdp_conn_succ: -0x4db7 019743 arg 0 ,debug -0x4db8 019744 call l2cap_malloc_signal_channel -0x4db9 019745 call restore_l2cap_req_param -0x4dba 019746 call l2cap_get_signal_tx_payload -0x4dbb 019747 call save_cont_pointers -0x4dbc 019748 call send_connection_sdp_res -0x4dbd 019749 call l2cap_get_signal_tx_buff -0x4dbe 019751 setarg 0x000c -0x4dbf 019752 istore 2 ,contw -0x4dc0 019753 force l2cap_signal_channel ,pdata -0x4dc1 019754 istore 2 ,contw -0x4dc2 019755 branch l2cap_rx_reset_state -: 019759 l2cap_reset_sdp_map: -0x4dc3 019760 bpatchx patch21_3 ,mem_patch21 -0x4dc4 019761 fetch 2 ,mem_sdp_tx_pkt_length -0x4dc5 019762 increase 4 ,pdata -0x4dc6 019763 rshift4 pdata ,pdata -0x4dc7 019764 rshift3 pdata ,pdata -0x4dc8 019765 add pdata ,1 ,temp -0x4dc9 019766 arg mem_tx_fifo3 ,contr -0x4dca 019767 ifetch 3 ,contr -0x4dcb 019768 rtn blank -0x4dcc 019769 store 3 ,mem_tx_fifo_map_temp -0x4dcd 019770 fetch 1 ,mem_tx_fifo_map_temp -0x4dce 019771 copy pdata ,rega -0x4dcf 019772 call check_l2cap_map -0x4dd0 019773 copy regb ,pdata -0x4dd1 019774 store 1 ,mem_tx_fifo3 -0x4dd2 019775 rtn -: 019777 check_l2cap_map: -0x4dd3 019778 arg 0 ,queue -0x4dd4 019779 arg 0 ,regb -: 019781 check_l2cap_map_loop: -0x4dd5 019782 sub queue ,7 ,null -0x4dd6 019783 nrtn positive -0x4dd7 019784 qisolate1 rega -0x4dd8 019785 branch check_l2cap_map_used ,true -0x4dd9 019786 branch check_l2cap_map_used2 -: 019788 check_l2cap_map_used: -0x4dda 019789 copy temp ,pdata -0x4ddb 019790 branch check_l2cap_map_used2 ,blank -0x4ddc 019791 qset1 regb -0x4ddd 019792 increase -1 ,temp -: 019794 check_l2cap_map_used2: -0x4dde 019795 increase 1 ,queue -0x4ddf 019796 branch check_l2cap_map_loop -: 019798 l2cap_call_proc_sdp: -0x4de0 019799 call l2cap_malloc_is_fifo_empty -0x4de1 019800 nrtn blank -0x4de2 019801 call l2cap_check_map -0x4de3 019802 nrtn blank -0x4de4 019803 call l2cap_malloc_sdp_channel -0x4de5 019804 call sdp_process -0x4de6 019805 call l2cap_reset_sdp_map -0x4de7 019806 branch l2cap_call_proc_sdp_common -: 019809 ml2cap_call_proc_sdp: -0x4de8 019810 call l2cap_malloc_is_fifo_empty -0x4de9 019811 nrtn blank -0x4dea 019812 call l2cap_malloc_sdp_channel -0x4deb 019813 call sdp_process -: 019814 l2cap_call_proc_sdp_common: -0x4dec 019815 call l2cap_get_sdp_tx_buff -0x4ded 019816 fetch 2 ,mem_sdp_tx_pkt_length -0x4dee 019817 branch l2cap_call_proc_no_reply ,blank -0x4def 019818 istore 2 ,contw -0x4df0 019819 fetch 2 ,mem_sdp_remote_cid -0x4df1 019820 istore 2 ,contw -0x4df2 019821 branch l2cap_rx_reset_state -: 019823 l2cap_call_proc_hid: -0x4df3 019824 call hid_rx_process -0x4df4 019825 branch l2cap_rx_reset_state -: 019827 l2cap_call_proc_rfcomm: -0x4df5 019828 bpatchx patch21_4 ,mem_patch21 -0x4df6 019829 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag -0x4df7 019830 call rfcomm_rx_process -0x4df8 019831 fetch 1 ,mem_rfcomm_malloc_fail_flag -0x4df9 019832 rtneq rfcomm_malloc_fail -0x4dfa 019833 branch l2cap_rx_reset_state -: 019834 l2cap_call_proc_no_reply: -0x4dfb 019835 call l2cap_malloc_discard -: 019837 l2cap_rx_reset_state: -0x4dfc 019838 setarg 0 -0x4dfd 019839 store 2 ,mem_l2cap_rx_pkt_length -0x4dfe 019840 store 2 ,mem_l2cap_rx_cid -0x4dff 019841 jam l2cap_rx_done ,mem_l2cap_rx_done -0x4e00 019842 rtn -: 019844 l2cap_process_signal_pkt: -0x4e01 019845 bpatchx patch21_5 ,mem_patch21 -0x4e02 019846 call l2cap_get_signal_tx_payload -0x4e03 019847 force 0 ,regb -0x4e04 019848 fetch 2 ,mem_l2cap_rx_pkt_length -0x4e05 019849 copy pdata ,regc -0x4e06 019850 fetch 2 ,mem_l2cap_payload_ptr -0x4e07 019851 iforce contr -: 019852 l2cap_process_signal_pkt_loop: -0x4e08 019853 call l2cap_process_one_signal -0x4e09 019854 deposit regc -0x4e0a 019855 increase -4 ,regc -0x4e0b 019856 increase -4 ,pdata -0x4e0c 019857 nbranch l2cap_process_signal_pkt_loop ,blank -0x4e0d 019858 copy regb ,pdata -0x4e0e 019859 store 2 ,mem_l2cap_signal_tx_length -0x4e0f 019860 rtn -: 019862 l2cap_process_one_signal: -0x4e10 019863 bpatchx patch21_6 ,mem_patch21 -0x4e11 019864 ifetch 1 ,contr -0x4e12 019865 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject -0x4e13 019866 beq signal_connect_req ,l2cap_proc_signal_connect_req -0x4e14 019867 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp -0x4e15 019868 beq signal_config_req ,l2cap_proc_signal_config_req -0x4e16 019869 beq signal_config_rsp ,l2cap_proc_signal_config_rsp -0x4e17 019870 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req -0x4e18 019871 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp -0x4e19 019872 beq signal_echo_req ,l2cap_proc_signal_echo_req -0x4e1a 019873 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp -0x4e1b 019874 beq signal_info_req ,l2cap_proc_signal_info_req -0x4e1c 019875 beq signal_info_rsp ,l2cap_proc_signal_info_rsp -0x4e1d 019876 call l2cap_reject_command -: 019877 l2cap_process_one_signal_rtn: -0x4e1e 019878 rtn -: 019880 l2cap_proc_signal_info_req: -0x4e1f 019881 ifetch 1 ,contr -0x4e20 019882 copy pdata ,queue -0x4e21 019883 ifetch 2 ,contr -0x4e22 019884 copy pdata ,rega -0x4e23 019885 copy regc ,pdata -0x4e24 019886 isub rega ,regc -0x4e25 019887 setarg signal_info_rsp -0x4e26 019888 istore 1 ,contw -0x4e27 019889 copy queue ,pdata -0x4e28 019890 istore 1 ,contw -0x4e29 019891 ifetch 2 ,contr -: 019892 l2cap_proc_signal_info_req_reply: -0x4e2a 019893 beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext -0x4e2b 019894 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix -0x4e2c 019895 rtn -: 019896 l2cap_proc_signal_info_req_ext: -0x4e2d 019897 setarg 0x020008 -0x4e2e 019898 istore 6 ,contw -0x4e2f 019899 setarg 0x0280 -0x4e30 019900 istore 4 ,contw -0x4e31 019901 force 12 ,pdata -0x4e32 019902 branch l2cap_proc_signal_info_req_common -: 019903 l2cap_proc_signal_info_req_fix: -0x4e33 019904 setarg 0x3000c -0x4e34 019905 istore 6 ,contw -0x4e35 019906 setarg 0x0006 -0x4e36 019907 istore 8 ,contw -0x4e37 019908 force 16 ,pdata -: 019909 l2cap_proc_signal_info_req_common: -0x4e38 019910 iadd regb ,regb -0x4e39 019911 branch l2cap_process_one_signal_rtn -: 019913 ml2cap_proc_signal_info_req: -0x4e3a 019914 ifetch 1 ,contr -0x4e3b 019915 copy pdata ,queue -0x4e3c 019916 ifetch 2 ,contr -0x4e3d 019917 copy pdata ,rega -0x4e3e 019918 ifetch 2 ,contr -0x4e3f 019919 store 2 ,mem_temp -0x4e40 019920 copy regc ,pdata -0x4e41 019921 isub rega ,regc -0x4e42 019922 call l2cap_get_signal_tx_payload -0x4e43 019923 setarg signal_info_rsp -0x4e44 019924 istore 1 ,contw -0x4e45 019925 copy queue ,pdata -0x4e46 019926 istore 1 ,contw -0x4e47 019927 fetch 2 ,mem_temp -0x4e48 019928 branch l2cap_proc_signal_info_req_reply -: 019932 l2cap_proc_signal_cmd_reject: -0x4e49 019933 ifetch 1 ,contr -0x4e4a 019934 copy pdata ,queue -0x4e4b 019935 ifetch 2 ,contr -0x4e4c 019936 copy pdata ,rega -0x4e4d 019937 iadd contr ,contr -0x4e4e 019938 copy regc ,pdata -0x4e4f 019939 isub rega ,regc -: 019940 l2cap_proc_signal_cmd_reject_rtn: -0x4e50 019941 branch l2cap_process_one_signal_rtn -: 019943 l2cap_proc_signal_connect_req: -0x4e51 019944 call save_cont_pointers -0x4e52 019947 call load_cont_pointers -0x4e53 019948 arg 0 ,debug -0x4e54 019949 ifetch 1 ,contr -0x4e55 019950 copy pdata ,queue -0x4e56 019951 ifetch 2 ,contr -0x4e57 019952 copy pdata ,rega -0x4e58 019953 ifetch 2 ,contr -0x4e59 019954 copy pdata ,temp -0x4e5a 019955 ifetch 2 ,contr -0x4e5b 019956 copy pdata ,timeup -0x4e5c 019957 bpatchx patch21_7 ,mem_patch21 -0x4e5d 019958 copy temp ,pdata -0x4e5e 019959 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp -0x4e5f 019960 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm -0x4e60 019961 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl -0x4e61 019962 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int -0x4e62 019963 call l2cap_reject_command -0x4e63 019964 branch l2cap_proc_signal_connect_req_rtn -: 019966 l2cap_proc_signal_connect_req_sdp: -0x4e64 019967 call save_cont_pointers -0x4e65 019968 arg l2cap_sdp_channel ,temp -0x4e66 019969 fetch 2 ,mem_sdp_remote_cid -0x4e67 019970 nbranch already_connected ,blank -0x4e68 019971 copy timeup ,pdata -0x4e69 019972 store 2 ,mem_sdp_remote_cid -0x4e6a 019973 copy clkn_bt ,pdata -0x4e6b 019974 store 4 ,mem_l2cap_sdpres_delay_time -0x4e6c 019975 call store_l2cap_req_param -0x4e6d 019976 branch send_connection_pending -: 019978 store_l2cap_req_param: -0x4e6e 019979 storet 2 ,mem_psm -0x4e6f 019980 deposit timeup -0x4e70 019981 store 2 ,mem_scid -0x4e71 019982 deposit rega -0x4e72 019983 store 2 ,mem_cmd_length -0x4e73 019984 deposit regb -0x4e74 019985 store 2 ,mem_tt2 -0x4e75 019986 deposit regc -0x4e76 019987 store 2 ,mem_tt3 -0x4e77 019988 deposit queue -0x4e78 019989 store 2 ,mem_id -0x4e79 019990 rtn -: 019992 restore_l2cap_req_param: -0x4e7a 019993 fetcht 2 ,mem_psm -0x4e7b 019994 fetch 2 ,mem_scid -0x4e7c 019995 copy pdata ,timeup -0x4e7d 019996 fetch 2 ,mem_cmd_length -0x4e7e 019997 copy pdata ,rega -0x4e7f 019998 fetch 2 ,mem_tt2 -0x4e80 019999 copy pdata ,regb -0x4e81 020000 fetch 2 ,mem_tt3 -0x4e82 020001 copy pdata ,regc -0x4e83 020002 fetch 2 ,mem_id -0x4e84 020003 copy pdata ,queue -0x4e85 020004 rtn -: 020006 l2cap_proc_signal_connect_req_rfcomm: -0x4e86 020007 call save_cont_pointers -0x4e87 020008 setarg l2cap_rfcomm_channel -0x4e88 020009 arg l2cap_rfcomm_channel ,temp -0x4e89 020010 fetch 2 ,mem_rfcomm_remote_cid -0x4e8a 020011 nbranch already_connected ,blank -0x4e8b 020012 copy timeup ,pdata -0x4e8c 020013 store 2 ,mem_rfcomm_remote_cid -0x4e8d 020014 fetch 1 ,mem_rfcomm_state -0x4e8e 020015 set1 l2cap_channel_state_conn_req ,pdata -0x4e8f 020016 set1 l2cap_channel_state_conn_res ,pdata -0x4e90 020017 store 1 ,mem_rfcomm_state -0x4e91 020018 branch send_connection_res -: 020019 l2cap_proc_signal_connect_req_hid_ctrl: -0x4e92 020020 call save_cont_pointers -0x4e93 020021 arg l2cap_hid_control_channel ,temp -0x4e94 020022 fetch 2 ,mem_hid_ctrl_remote_cid -0x4e95 020023 nbranch already_connected ,blank -0x4e96 020024 copy timeup ,pdata -0x4e97 020025 store 2 ,mem_hid_ctrl_remote_cid -0x4e98 020026 fetch 1 ,mem_hid_control_state -0x4e99 020027 set1 l2cap_channel_state_conn_req ,pdata -0x4e9a 020028 set1 l2cap_channel_state_conn_res ,pdata -0x4e9b 020029 store 1 ,mem_hid_control_state -0x4e9c 020030 branch send_connection_res -: 020031 l2cap_proc_signal_connect_req_hid_int: -0x4e9d 020032 call save_cont_pointers -0x4e9e 020033 deposit clke -0x4e9f 020034 arg l2cap_hid_interrupt_channel ,temp -0x4ea0 020035 fetch 2 ,mem_hid_int_remote_cid -0x4ea1 020036 nbranch already_connected ,blank -0x4ea2 020037 copy timeup ,pdata -0x4ea3 020038 store 2 ,mem_hid_int_remote_cid -0x4ea4 020039 fetch 1 ,mem_hid_interrupt_state -0x4ea5 020040 set1 l2cap_channel_state_conn_req ,pdata -0x4ea6 020041 set1 l2cap_channel_state_conn_res ,pdata -0x4ea7 020042 store 1 ,mem_hid_interrupt_state -0x4ea8 020043 branch send_connection_res -: 020045 send_connection_pending: -0x4ea9 020046 setarg l2cap_connect_pending -0x4eaa 020047 store 2 ,meml2cap_t1 -0x4eab 020048 jam l2cap_sdp_channel ,mem_l2cap_pending_item -0x4eac 020049 branch send_connection_res0 -: 020050 send_connection_sdp_res: -0x4ead 020051 fetch 1 ,mem_sdp_state -0x4eae 020052 set1 l2cap_channel_state_conn_req ,pdata -0x4eaf 020053 set1 l2cap_channel_state_conn_res ,pdata -0x4eb0 020054 store 1 ,mem_sdp_state -: 020055 send_connection_res: -0x4eb1 020056 setarg l2cap_connect_successful -0x4eb2 020057 store 2 ,meml2cap_t1 -: 020058 send_connection_res0: -0x4eb3 020059 bpatchx patch22_0 ,mem_patch22 -0x4eb4 020060 call load_cont_pointers -0x4eb5 020061 setarg signal_connect_rsp -0x4eb6 020062 istore 1 ,contw -0x4eb7 020063 copy queue ,pdata -0x4eb8 020064 istore 1 ,contw -0x4eb9 020065 setarg 0x0008 -0x4eba 020066 istore 2 ,contw -0x4ebb 020067 copy temp ,pdata -0x4ebc 020068 istore 2 ,contw -0x4ebd 020069 copy timeup ,pdata -0x4ebe 020070 istore 2 ,contw -0x4ebf 020071 fetch 2 ,meml2cap_t1 -0x4ec0 020072 beq l2cap_connect_pending ,connect_pending -0x4ec1 020073 isolate0 0 ,debug -0x4ec2 020074 branch connect_suc ,true -0x4ec3 020075 setarg l2cap_connect_refused_no_resources -: 020076 connect_suc: -0x4ec4 020077 istore 2 ,contw -0x4ec5 020078 force 0x0000 ,pdata -0x4ec6 020079 istore 2 ,contw -0x4ec7 020080 setarg 12 -0x4ec8 020081 branch connect_req_update_byte_counts -: 020082 connect_pending: -0x4ec9 020083 istore 2 ,contw -0x4eca 020084 force 0x0002 ,pdata -0x4ecb 020085 istore 2 ,contw -0x4ecc 020086 setarg 12 -0x4ecd 020087 branch connect_req_update_byte_counts -: 020089 already_connected: -0x4ece 020090 set1 0 ,debug -0x4ecf 020091 branch send_connection_res -: 020092 connect_req_update_byte_counts: -0x4ed0 020093 iadd regb ,regb -0x4ed1 020094 copy regc ,pdata -0x4ed2 020095 isub rega ,regc -0x4ed3 020096 branch l2cap_proc_signal_connect_req_rtn -: 020097 l2cap_proc_signal_connect_req_rtn: -0x4ed4 020098 branch l2cap_process_one_signal_rtn -: 020100 l2cap_proc_signal_connect_rsp: -0x4ed5 020101 ifetch 1 ,contr -0x4ed6 020102 copy pdata ,queue -0x4ed7 020103 ifetch 2 ,contr -0x4ed8 020104 copy pdata ,rega -0x4ed9 020105 copy regc ,pdata -0x4eda 020106 isub rega ,regc -0x4edb 020107 ifetch 2 ,contr -0x4edc 020108 copy pdata ,timeup -0x4edd 020109 ifetch 2 ,contr -0x4ede 020110 copy pdata ,temp -0x4edf 020111 bpatchx patch22_1 ,mem_patch22 -0x4ee0 020112 setarg l2cap_sdp_channel -0x4ee1 020113 isub temp ,null -0x4ee2 020114 branch l2cap_proc_signal_connect_rsp_sdp ,zero -0x4ee3 020115 setarg l2cap_rfcomm_channel -0x4ee4 020116 isub temp ,null -0x4ee5 020117 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero -0x4ee6 020118 setarg l2cap_hid_control_channel -0x4ee7 020119 isub temp ,null -0x4ee8 020120 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero -0x4ee9 020121 setarg l2cap_hid_interrupt_channel -0x4eea 020122 isub temp ,null -0x4eeb 020123 branch l2cap_proc_signal_connect_rsp_hid_int ,zero -0x4eec 020124 rtn -: 020126 l2cap_proc_signal_connect_rsp_sdp: -0x4eed 020127 copy timeup ,pdata -0x4eee 020128 store 2 ,mem_sdp_remote_cid -0x4eef 020129 fetch 1 ,mem_sdp_state -0x4ef0 020130 set1 l2cap_channel_state_conn_res ,pdata -0x4ef1 020131 store 1 ,mem_sdp_state -0x4ef2 020132 branch l2cap_process_one_signal_rtn -: 020133 l2cap_proc_signal_connect_rsp_rfcomm: -0x4ef3 020134 copy timeup ,pdata -0x4ef4 020135 store 2 ,mem_rfcomm_remote_cid -0x4ef5 020136 fetch 1 ,mem_rfcomm_state -0x4ef6 020137 set1 l2cap_channel_state_conn_res ,pdata -0x4ef7 020138 store 1 ,mem_rfcomm_state -0x4ef8 020139 rtn -: 020140 l2cap_proc_signal_connect_rsp_hid_int: -0x4ef9 020141 copy timeup ,pdata -0x4efa 020142 store 2 ,mem_hid_ctrl_remote_cid -0x4efb 020143 fetch 1 ,mem_hid_interrupt_state -0x4efc 020144 set1 l2cap_channel_state_conn_res ,pdata -0x4efd 020145 store 1 ,mem_hid_interrupt_state -0x4efe 020146 rtn -: 020147 l2cap_proc_signal_connect_rsp_hid_ctrl: -0x4eff 020148 copy timeup ,pdata -0x4f00 020149 store 2 ,mem_hid_int_remote_cid -0x4f01 020150 fetch 1 ,mem_hid_control_state -0x4f02 020151 set1 l2cap_channel_state_conn_res ,pdata -0x4f03 020152 store 1 ,mem_hid_control_state -0x4f04 020153 rtn -: 020155 l2cap_proc_signal_config_req: -0x4f05 020156 ifetch 1 ,contr -0x4f06 020157 copy pdata ,queue -0x4f07 020158 ifetch 2 ,contr -0x4f08 020159 copy pdata ,rega -0x4f09 020160 copy regc ,pdata -0x4f0a 020161 isub rega ,regc -0x4f0b 020162 ifetch 2 ,contr -0x4f0c 020163 copy pdata ,temp -0x4f0d 020164 copy temp ,rega -0x4f0e 020165 bpatchx patch22_2 ,mem_patch22 -0x4f0f 020166 setarg l2cap_sdp_channel -0x4f10 020167 isub temp ,null -0x4f11 020168 branch l2cap_proc_signal_config_req_sdp ,zero -0x4f12 020169 setarg l2cap_rfcomm_channel -0x4f13 020170 isub temp ,null -0x4f14 020171 branch l2cap_proc_signal_config_req_rfcomm ,zero -0x4f15 020172 setarg l2cap_hid_control_channel -0x4f16 020173 isub temp ,null -0x4f17 020174 branch l2cap_proc_signal_config_req_hid_ctrl ,zero -0x4f18 020175 setarg l2cap_hid_interrupt_channel -0x4f19 020176 isub temp ,null -0x4f1a 020177 branch l2cap_proc_signal_config_req_hid_int ,zero -0x4f1b 020178 branch l2cap_reject_command -: 020180 l2cap_proc_signal_config_req_sdp: -0x4f1c 020181 copy contw ,timeup -0x4f1d 020182 fetch 1 ,mem_sdp_state -0x4f1e 020183 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f1f 020184 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f20 020186 store 1 ,mem_sdp_state -0x4f21 020187 copy timeup ,contw -0x4f22 020188 arg l2cap_sdp_channel ,timeup -0x4f23 020189 fetch 2 ,mem_sdp_remote_cid -0x4f24 020190 copy pdata ,temp -0x4f25 020191 branch l2cap_send_config_rsp -: 020192 l2cap_proc_signal_config_req_hid_ctrl: -0x4f26 020193 copy contw ,timeup -0x4f27 020194 fetch 1 ,mem_hid_control_state -0x4f28 020195 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f29 020196 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f2a 020198 store 1 ,mem_hid_control_state -0x4f2b 020199 copy timeup ,contw -0x4f2c 020200 arg l2cap_hid_control_channel ,timeup -0x4f2d 020201 fetch 2 ,mem_hid_ctrl_remote_cid -0x4f2e 020202 copy pdata ,temp -0x4f2f 020203 branch l2cap_send_config_rsp -: 020204 l2cap_proc_signal_config_req_hid_int: -0x4f30 020205 copy contw ,timeup -0x4f31 020206 fetch 1 ,mem_hid_interrupt_state -0x4f32 020207 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f33 020208 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f34 020210 store 1 ,mem_hid_interrupt_state -0x4f35 020211 copy timeup ,contw -0x4f36 020212 arg l2cap_hid_interrupt_channel ,timeup -0x4f37 020213 fetch 2 ,mem_hid_int_remote_cid -0x4f38 020214 copy pdata ,temp -0x4f39 020215 branch l2cap_send_config_rsp -: 020216 l2cap_proc_signal_config_req_rfcomm: -0x4f3a 020217 copy contw ,timeup -0x4f3b 020218 fetch 1 ,mem_rfcomm_state -0x4f3c 020219 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x4f3d 020220 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x4f3e 020222 store 1 ,mem_rfcomm_state -0x4f3f 020224 copy timeup ,contw -0x4f40 020225 arg l2cap_rfcomm_channel ,timeup -0x4f41 020226 fetch 2 ,mem_rfcomm_remote_cid -0x4f42 020227 copy pdata ,temp -: 020228 l2cap_send_config_rsp: -0x4f43 020229 bpatchx patch22_3 ,mem_patch22 -0x4f44 020230 setarg signal_config_rsp -0x4f45 020231 istore 1 ,contw -0x4f46 020232 copy queue ,pdata -0x4f47 020233 istore 1 ,contw -0x4f48 020234 setarg 0x0006 -0x4f49 020235 istore 2 ,contw -0x4f4a 020236 copy temp ,pdata -0x4f4b 020237 istore 2 ,contw -0x4f4c 020238 force 0x00 ,pdata -0x4f4d 020239 istore 2 ,contw -0x4f4e 020240 force l2cap_config_success ,pdata -0x4f4f 020241 istore 2 ,contw -0x4f50 020242 force 10 ,pdata -0x4f51 020243 iadd regb ,regb -0x4f52 020245 storet 2 ,mem_config_req_dest_cid -0x4f53 020246 copy queue ,pdata -0x4f54 020247 store 1 ,mem_config_identifier -0x4f55 020248 force l2cap_sdp_channel ,pdata -0x4f56 020249 icompare 0xff ,timeup -0x4f57 020250 branch l2cap_send_config_rsp_is_sdp ,true -0x4f58 020251 increase 1 ,pdata -: 020252 l2cap_send_config_rsp_is_sdp: -0x4f59 020254 rtn -: 020255 l2cap_check_channel_state: -0x4f5a 020256 disable user -0x4f5b 020257 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata -0x4f5c 020258 rtnbit0 l2cap_channel_state_conn_req ,pdata -0x4f5d 020259 rtnbit0 l2cap_channel_state_conn_res ,pdata -0x4f5e 020260 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x4f5f 020261 copy contr ,contw -0x4f60 020262 increase -1 ,contw -0x4f61 020263 istore 1 ,contw -0x4f62 020264 enable user -0x4f63 020265 rtn -: 020266 l2cap_send_config_req: -: 020267 l2cap_send_config_req_sdp: -0x4f64 020268 fetch 1 ,mem_sdp_state -0x4f65 020269 call l2cap_check_channel_state -0x4f66 020270 nbranch l2cap_send_config_req_rfcomm ,user -0x4f67 020271 jam l2cap_sdp_channel ,mem_send_config_req -0x4f68 020272 fetch 2 ,mem_sdp_remote_cid -0x4f69 020273 store 2 ,mem_config_req_dest_cid -0x4f6a 020274 branch l2cap_generate_config_req -: 020275 l2cap_send_config_req_rfcomm: -0x4f6b 020276 fetch 1 ,mem_rfcomm_state -0x4f6c 020277 call l2cap_check_channel_state -0x4f6d 020278 nbranch l2cap_send_config_req_hid_ctrl ,user -0x4f6e 020279 jam l2cap_rfcomm_channel ,mem_send_config_req -0x4f6f 020280 fetch 2 ,mem_rfcomm_remote_cid -0x4f70 020281 store 2 ,mem_config_req_dest_cid -0x4f71 020282 branch l2cap_generate_config_req -: 020283 l2cap_send_config_req_hid_ctrl: -0x4f72 020284 fetch 1 ,mem_hid_control_state -0x4f73 020285 call l2cap_check_channel_state -0x4f74 020286 nbranch l2cap_send_config_req_hid_int ,user -0x4f75 020287 jam l2cap_hid_control_channel ,mem_send_config_req -0x4f76 020288 fetch 2 ,mem_hid_ctrl_remote_cid -0x4f77 020289 store 2 ,mem_config_req_dest_cid -0x4f78 020290 branch l2cap_generate_config_req -: 020291 l2cap_send_config_req_hid_int: -0x4f79 020292 fetch 1 ,mem_hid_interrupt_state -0x4f7a 020293 call l2cap_check_channel_state -0x4f7b 020294 nrtn user -0x4f7c 020295 jam l2cap_hid_interrupt_channel ,mem_send_config_req -0x4f7d 020296 fetch 2 ,mem_hid_int_remote_cid -0x4f7e 020297 store 2 ,mem_config_req_dest_cid -: 020300 l2cap_generate_config_req: -0x4f7f 020301 bpatchx patch22_4 ,mem_patch22 -0x4f80 020302 call l2cap_get_req_id -0x4f81 020303 call l2cap_malloc_signal_channel -0x4f82 020304 force 0 ,regb -0x4f83 020305 call l2cap_get_signal_tx_payload -0x4f84 020306 force signal_config_req ,pdata -0x4f85 020307 istore 1 ,contw -0x4f86 020308 fetch 1 ,mem_ml2cap_comm_id -0x4f87 020309 istore 1 ,contw -0x4f88 020310 setarg 0x0008 -0x4f89 020311 istore 2 ,contw -0x4f8a 020312 fetch 2 ,mem_config_req_dest_cid -0x4f8b 020313 istore 2 ,contw -0x4f8c 020314 setarg 0x0000 -0x4f8d 020315 istore 2 ,contw -0x4f8e 020316 force 1 ,pdata -0x4f8f 020317 istore 1 ,contw -0x4f90 020318 force 2 ,pdata -0x4f91 020319 istore 1 ,contw -0x4f92 020320 fetch 1 ,mem_send_config_req -0x4f93 020321 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm -0x4f94 020322 setarg l2cap_config_mtu_sdp -0x4f95 020323 istore 2 ,contw -0x4f96 020324 branch l2cap_generate_config_req_done -: 020325 l2cap_generate_config_req_rfcomm: -0x4f97 020326 setarg l2cap_config_mtu_rfcomm -0x4f98 020327 istore 2 ,contw -: 020328 l2cap_generate_config_req_done: -0x4f99 020329 arg 0x0c ,temp -0x4f9a 020330 storet 2 ,mem_l2cap_signal_tx_length -0x4f9b 020331 call l2cap_get_signal_tx_buff -0x4f9c 020332 fetch 2 ,mem_l2cap_signal_tx_length -0x4f9d 020333 istore 2 ,contw -0x4f9e 020334 force l2cap_signal_channel ,pdata -0x4f9f 020335 istore 2 ,contw -0x4fa0 020336 jam 0 ,mem_send_config_req -: 020337 l2cap_proc_signal_config_req_rtn: -0x4fa1 020338 branch l2cap_process_one_signal_rtn -: 020340 l2cap_proc_signal_config_rsp: -0x4fa2 020341 increase 1 ,contr -0x4fa3 020342 ifetch 2 ,contr -0x4fa4 020343 copy pdata ,rega -0x4fa5 020344 copy regc ,pdata -0x4fa6 020345 isub rega ,regc -0x4fa7 020346 ifetch 2 ,contr -0x4fa8 020347 copy pdata ,rega -0x4fa9 020348 bpatchx patch22_5 ,mem_patch22 -0x4faa 020349 setarg l2cap_sdp_channel -0x4fab 020350 isub rega ,null -0x4fac 020351 branch l2cap_proc_signal_config_rsp_sdp ,zero -0x4fad 020352 setarg l2cap_rfcomm_channel -0x4fae 020353 isub rega ,null -0x4faf 020354 branch l2cap_proc_signal_config_rsp_rfcomm ,zero -0x4fb0 020355 setarg l2cap_hid_control_channel -0x4fb1 020356 isub rega ,null -0x4fb2 020357 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero -0x4fb3 020358 setarg l2cap_hid_interrupt_channel -0x4fb4 020359 isub rega ,null -0x4fb5 020360 branch l2cap_proc_signal_config_rsp_hid_int ,zero -0x4fb6 020361 increase 2 ,contr -0x4fb7 020362 ifetch 2 ,contr -0x4fb8 020363 iforce null -0x4fb9 020364 branch l2cap_process_one_signal_rtn -: 020365 l2cap_proc_signal_config_rsp_sdp: -0x4fba 020366 fetch 1 ,mem_sdp_state -0x4fbb 020367 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fbc 020368 store 1 ,mem_sdp_state -0x4fbd 020369 branch l2cap_process_one_signal_rtn -: 020370 l2cap_proc_signal_config_rsp_rfcomm: -0x4fbe 020371 fetch 1 ,mem_rfcomm_state -0x4fbf 020372 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fc0 020373 store 1 ,mem_rfcomm_state -0x4fc1 020374 branch l2cap_process_one_signal_rtn -: 020375 l2cap_proc_signal_config_rsp_hid_ctrl: -0x4fc2 020376 fetch 1 ,mem_hid_control_state -0x4fc3 020377 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fc4 020378 store 1 ,mem_hid_control_state -0x4fc5 020379 branch l2cap_process_one_signal_rtn -: 020380 l2cap_proc_signal_config_rsp_hid_int: -0x4fc6 020381 fetch 1 ,mem_hid_interrupt_state -0x4fc7 020382 set1 l2cap_channel_state_rcv_cfg_res ,pdata -0x4fc8 020383 store 1 ,mem_hid_interrupt_state -0x4fc9 020384 jam bt_evt_hid_connected ,mem_fifo_temp -0x4fca 020385 branch ui_ipc_send_event -: 020389 l2cap_proc_signal_disconnect_req: -0x4fcb 020390 ifetch 1 ,contr -0x4fcc 020391 copy pdata ,queue -0x4fcd 020392 ifetch 2 ,contr -0x4fce 020393 copy pdata ,rega -0x4fcf 020394 copy regc ,pdata -0x4fd0 020395 isub rega ,regc -0x4fd1 020396 ifetch 2 ,contr -0x4fd2 020397 copy pdata ,rega -0x4fd3 020398 ifetch 2 ,contr -0x4fd4 020399 copy pdata ,timeup -0x4fd5 020400 copy rega ,temp -0x4fd6 020401 call save_cont_pointers -0x4fd7 020402 bpatchx patch22_6 ,mem_patch22 -0x4fd8 020403 setarg l2cap_sdp_channel -0x4fd9 020404 isub temp ,null -0x4fda 020405 branch l2cap_proc_signal_disconnect_req_sdp ,zero -0x4fdb 020406 setarg l2cap_rfcomm_channel -0x4fdc 020407 isub temp ,null -0x4fdd 020408 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero -0x4fde 020409 setarg l2cap_hid_control_channel -0x4fdf 020410 isub temp ,null -0x4fe0 020411 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero -0x4fe1 020412 setarg l2cap_hid_interrupt_channel -0x4fe2 020413 isub temp ,null -0x4fe3 020414 branch l2cap_proc_signal_disconnect_req_hid_int ,zero -0x4fe4 020415 call l2cap_reject_command -0x4fe5 020416 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020417 l2cap_proc_signal_disconnect_req_hid_ctrl: -0x4fe6 020418 copy timeup ,temp -0x4fe7 020419 fetch 2 ,mem_hid_ctrl_remote_cid -0x4fe8 020420 isub temp ,null -0x4fe9 020421 branch l2cap_disconnect_hid_control_now ,zero -0x4fea 020422 call l2cap_reject_command -0x4feb 020423 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020424 l2cap_proc_signal_disconnect_req_hid_int: -0x4fec 020425 copy timeup ,temp -0x4fed 020426 fetch 2 ,mem_hid_int_remote_cid -0x4fee 020427 isub temp ,null -0x4fef 020428 branch l2cap_disconnect_hid_interrupt_now ,zero -0x4ff0 020429 call l2cap_reject_command -0x4ff1 020430 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020432 l2cap_proc_signal_disconnect_req_sdp: -0x4ff2 020433 copy timeup ,temp -0x4ff3 020434 fetch 2 ,mem_sdp_remote_cid -0x4ff4 020435 isub temp ,null -0x4ff5 020436 branch l2cap_disconnect_sdp_now ,zero -0x4ff6 020437 call l2cap_reject_command -0x4ff7 020438 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020439 l2cap_disconnect_hid_control_now: -0x4ff8 020440 call l2cap_reset_hid_ctrl_state -0x4ff9 020441 branch l2cap_send_disconnect_rsp_pkt -: 020442 l2cap_disconnect_hid_interrupt_now: -0x4ffa 020443 call l2cap_reset_hid_int_state -0x4ffb 020444 fetch 2 ,mem_hid_ctrl_remote_cid -0x4ffc 020445 branch l2cap_send_disconnect_rsp_pkt ,blank -0x4ffd 020453 branch l2cap_send_disconnect_rsp_pkt -: 020455 l2cap_disconnect_sdp_now: -0x4ffe 020456 call l2cap_reset_sdp_channel_state -0x4fff 020457 fetch 1 ,mem_upper_sm_ss -0x5000 020458 nbranch l2cap_send_disconnect_rsp_pkt ,blank -0x5001 020461 branch l2cap_send_disconnect_rsp_pkt -: 020462 l2cap_proc_signal_disconnect_req_rfcomm: -0x5002 020463 copy timeup ,temp -0x5003 020464 fetch 2 ,mem_rfcomm_remote_cid -0x5004 020465 isub temp ,null -0x5005 020466 branch l2cap_disconnect_rfcomm_now ,zero -0x5006 020467 call l2cap_reject_command -0x5007 020468 branch l2cap_proc_signal_disconnect_req_err_rtn -: 020469 l2cap_disconnect_rfcomm_now: -0x5008 020470 call l2cap_reset_rfcomm_channel_state -0x5009 020471 branch l2cap_send_disconnect_rsp_pkt -: 020472 l2cap_send_disconnect_rsp_pkt: -0x500a 020473 call load_cont_pointers -0x500b 020474 setarg signal_disconnect_rsp -0x500c 020475 istore 1 ,contw -0x500d 020476 copy queue ,pdata -0x500e 020477 istore 1 ,contw -0x500f 020478 setarg 0x0004 -0x5010 020479 istore 2 ,contw -0x5011 020480 copy rega ,pdata -0x5012 020481 istore 2 ,contw -0x5013 020482 copy timeup ,pdata -0x5014 020483 istore 2 ,contw -0x5015 020484 force 8 ,pdata -0x5016 020485 branch l2cap_proc_signal_disconnect_req_rtn -: 020486 l2cap_proc_signal_disconnect_req_err_rtn: -0x5017 020487 call load_cont_pointers -0x5018 020488 branch l2cap_proc_signal_disconnect_req_rtn -: 020489 l2cap_proc_signal_disconnect_req_rtn: -0x5019 020490 iadd regb ,regb -0x501a 020491 branch l2cap_process_one_signal_rtn -: 020492 l2cap_proc_signal_disconnect_rsp: -0x501b 020493 ifetch 1 ,contr -0x501c 020494 copy pdata ,queue -0x501d 020495 ifetch 2 ,contr -0x501e 020496 copy pdata ,rega -0x501f 020497 copy regc ,pdata -0x5020 020498 isub rega ,regc -0x5021 020499 ifetch 2 ,contr -0x5022 020500 copy pdata ,timeup -0x5023 020501 ifetch 2 ,contr -0x5024 020502 copy pdata ,temp -0x5025 020503 call save_cont_pointers -0x5026 020504 bpatchx patch22_7 ,mem_patch22 -0x5027 020505 setarg l2cap_sdp_channel -0x5028 020506 isub temp ,null -0x5029 020507 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero -0x502a 020508 setarg l2cap_rfcomm_channel -0x502b 020509 isub temp ,null -0x502c 020510 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero -0x502d 020511 setarg l2cap_hid_control_channel -0x502e 020512 isub temp ,null -0x502f 020513 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero -0x5030 020514 setarg l2cap_hid_interrupt_channel -0x5031 020515 isub temp ,null -0x5032 020516 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero -0x5033 020517 call l2cap_reject_command -0x5034 020518 branch l2cap_proc_signal_disconnect_rsp_err_rtn -: 020519 l2cap_proc_signal_disconnect_rsp_sdp: -0x5035 020520 copy temp ,rega -0x5036 020521 copy timeup ,temp -0x5037 020522 fetch 2 ,mem_sdp_remote_cid -0x5038 020523 isub temp ,null -0x5039 020524 call l2cap_reset_sdp_channel_state ,zero -0x503a 020525 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020526 l2cap_proc_signal_disconnect_rsp_rfcomm: -0x503b 020527 copy temp ,rega -0x503c 020528 copy timeup ,temp -0x503d 020529 fetch 2 ,mem_rfcomm_remote_cid -0x503e 020530 isub temp ,null -0x503f 020531 call l2cap_reset_rfcomm_channel_state ,zero -0x5040 020532 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020533 l2cap_proc_signal_disconnect_rsp_hid_ctrl: -0x5041 020534 copy temp ,rega -0x5042 020535 copy timeup ,temp -0x5043 020536 fetch 2 ,mem_hid_ctrl_remote_cid -0x5044 020537 isub temp ,null -0x5045 020538 call l2cap_reset_hid_ctrl_state ,zero -0x5046 020539 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020540 l2cap_proc_signal_disconnect_rsp_hid_int: -0x5047 020541 copy temp ,rega -0x5048 020542 copy timeup ,temp -0x5049 020543 fetch 2 ,mem_hid_int_remote_cid -0x504a 020544 isub temp ,null -0x504b 020545 call l2cap_reset_hid_int_state ,zero -0x504c 020546 branch l2cap_proc_signal_disconnect_rsp_rtn -: 020547 l2cap_proc_signal_disconnect_rsp_rtn: -0x504d 020548 call load_cont_pointers -0x504e 020549 branch l2cap_process_one_signal_rtn -: 020550 l2cap_proc_signal_disconnect_rsp_err_rtn: -0x504f 020551 branch l2cap_process_one_signal_rtn -: 020554 l2cap_proc_signal_echo_req: -0x5050 020555 ifetch 1 ,contr -0x5051 020556 copy pdata ,queue -0x5052 020557 ifetch 2 ,contr -0x5053 020558 copy pdata ,rega -0x5054 020559 iadd contr ,contr -0x5055 020560 setarg 9 -0x5056 020561 istore 1 ,contw -0x5057 020562 copy queue ,pdata -0x5058 020563 istore 1 ,contw -0x5059 020564 force 0x0000 ,pdata -0x505a 020565 istore 2 ,contw -0x505b 020566 force 4 ,pdata -0x505c 020567 iadd regb ,regb -0x505d 020568 copy regc ,pdata -0x505e 020569 isub rega ,regc -0x505f 020570 branch l2cap_process_one_signal_rtn -: 020571 l2cap_proc_signal_echo_rsp: -0x5060 020572 branch l2cap_process_one_signal_rtn -: 020574 l2cap_proc_signal_info_rsp: -0x5061 020575 branch l2cap_process_one_signal_rtn -: 020576 l2cap_reject_command: -0x5062 020577 force 0 ,regb -0x5063 020578 call l2cap_get_signal_tx_payload -0x5064 020579 setarg signal_cmd_reject -0x5065 020580 istore 1 ,contw -0x5066 020581 copy queue ,pdata -0x5067 020582 istore 1 ,contw -0x5068 020583 setarg 2 -0x5069 020584 istore 2 ,contw -0x506a 020585 setarg cmd_not_understood -0x506b 020586 istore 2 ,contw -0x506c 020587 increase 6 ,regb -0x506d 020588 arg 4 ,regc -0x506e 020589 branch l2cap_process_one_signal_rtn -: 020593 l2cap_reset_rfcomm_channel_state: -0x506f 020594 setarg 0 -0x5070 020595 store 2 ,mem_rfcomm_tx_pkt_length -0x5071 020596 store 2 ,mem_rfcomm_remote_cid -0x5072 020597 jam 0 ,mem_rfcomm_state -0x5073 020598 rtn -: 020599 l2cap_reset_sdp_channel_state: -0x5074 020600 setarg 0 -0x5075 020601 store 2 ,mem_sdp_tx_pkt_length -0x5076 020602 store 2 ,mem_sdp_remote_cid -0x5077 020603 jam 0 ,mem_sdp_state -0x5078 020604 rtn -: 020605 l2cap_reset_hid_ctrl_state: -0x5079 020606 setarg 0 -0x507a 020607 store 2 ,mem_hid_ctrl_remote_cid -0x507b 020608 jam 0 ,mem_hid_control_state -0x507c 020609 fetch 1 ,mem_hid_interrupt_state -0x507d 020610 beq 0 ,l2cap_reset_hid_disconnected -0x507e 020611 rtn -: 020613 l2cap_reset_hid_int_state: -0x507f 020614 setarg 0 -0x5080 020615 store 2 ,mem_hid_int_remote_cid -0x5081 020616 jam 0 ,mem_hid_interrupt_state -0x5082 020617 fetch 1 ,mem_hid_control_state -0x5083 020618 beq 0 ,l2cap_reset_hid_disconnected -0x5084 020619 rtn -: 020621 l2cap_reset_hid_disconnected: -0x5085 020622 jam bt_evt_hid_disconnected ,mem_fifo_temp -0x5086 020623 branch ui_ipc_send_event -: 020625 l2cap_disconnect_interrupt_req: -0x5087 020626 fetch 1 ,mem_control_tasks -0x5088 020627 set0 l2cap_disconnect_interrupt ,pdata -0x5089 020628 store 1 ,mem_control_tasks -0x508a 020629 fetch 2 ,mem_hid_int_remote_cid -0x508b 020630 rtn blank -0x508c 020631 call l2cap_malloc_signal_channel -0x508d 020632 fetch 2 ,mem_hid_int_remote_cid -0x508e 020633 copy pdata ,rega -0x508f 020634 force l2cap_hid_interrupt_channel ,regb -0x5090 020635 branch l2cap_generate_disconnect_req -: 020636 l2cap_disconnect_control_req: -0x5091 020637 fetch 1 ,mem_control_tasks -0x5092 020638 set0 l2cap_disconnect_control ,pdata -0x5093 020639 store 1 ,mem_control_tasks -0x5094 020640 fetch 2 ,mem_hid_ctrl_remote_cid -0x5095 020641 rtn blank -0x5096 020642 call l2cap_malloc_signal_channel -0x5097 020643 fetch 2 ,mem_hid_ctrl_remote_cid -0x5098 020644 copy pdata ,rega -0x5099 020645 force l2cap_hid_control_channel ,regb -: 020646 l2cap_generate_disconnect_req: -0x509a 020647 call l2cap_get_req_id -0x509b 020648 call l2cap_get_signal_tx_payload -0x509c 020649 force signal_disconnect_req ,pdata -0x509d 020650 istore 1 ,contw -0x509e 020651 fetch 1 ,mem_ml2cap_comm_id -0x509f 020652 istore 1 ,contw -0x50a0 020653 setarg 0x0004 -0x50a1 020654 istore 2 ,contw -0x50a2 020655 copy rega ,pdata -0x50a3 020656 istore 2 ,contw -0x50a4 020657 copy regb ,pdata -0x50a5 020658 istore 2 ,contw -0x50a6 020659 force 0x08 ,temp -0x50a7 020660 branch ml2cap_send_signal -: 020662 ml2cap_send_signal_connect_req: -0x50a8 020663 bpatchx patch23_0 ,mem_patch23 -0x50a9 020664 call l2cap_get_req_id -0x50aa 020665 call l2cap_get_signal_tx_payload -0x50ab 020666 setarg signal_connect_req -0x50ac 020667 istore 1 ,contw -0x50ad 020668 fetch 1 ,mem_ml2cap_comm_id -0x50ae 020669 istore 1 ,contw -0x50af 020670 setarg 0x0004 -0x50b0 020671 istore 2 ,contw -0x50b1 020672 copy temp ,pdata -0x50b2 020673 istore 2 ,contw -0x50b3 020674 copy timeup ,pdata -0x50b4 020675 istore 2 ,contw -0x50b5 020676 arg 8 ,temp -0x50b6 020677 branch ml2cap_send_signal -: 020678 ml2cap_send_signal_config_req: -0x50b7 020679 bpatchx patch23_1 ,mem_patch23 -0x50b8 020680 call l2cap_get_req_id -0x50b9 020681 call l2cap_get_signal_tx_payload -0x50ba 020682 setarg signal_config_req -0x50bb 020683 istore 1 ,contw -0x50bc 020684 fetch 1 ,mem_ml2cap_comm_id -0x50bd 020685 istore 1 ,contw -0x50be 020686 setarg 0x0008 -0x50bf 020687 istore 2 ,contw -0x50c0 020689 copy temp ,pdata -0x50c1 020691 istore 2 ,contw -0x50c2 020692 setarg 0x0000 -0x50c3 020693 istore 2 ,contw -0x50c4 020694 setarg 0x01 -0x50c5 020695 istore 1 ,contw -0x50c6 020696 setarg 0x02 -0x50c7 020697 istore 1 ,contw -0x50c8 020698 setarg l2cap_config_mtu_rfcomm -0x50c9 020699 istore 2 ,contw -0x50ca 020700 arg 0xc ,temp -0x50cb 020701 branch ml2cap_send_signal -: 020702 ml2cap_send_signal_disconn_req: -0x50cc 020703 bpatchx patch23_2 ,mem_patch23 -0x50cd 020704 call l2cap_get_req_id -0x50ce 020705 call l2cap_get_signal_tx_payload -0x50cf 020706 setarg signal_disconnect_req -0x50d0 020707 istore 1 ,contw -0x50d1 020708 fetch 1 ,mem_ml2cap_comm_id -0x50d2 020709 increase 1 ,pdata -0x50d3 020710 copy contw ,rega -0x50d4 020711 store 1 ,mem_ml2cap_comm_id -0x50d5 020712 copy rega ,contw -0x50d6 020713 istore 1 ,contw -0x50d7 020714 setarg 0x0004 -0x50d8 020715 istore 2 ,contw -0x50d9 020716 copy temp ,pdata -0x50da 020717 istore 2 ,contw -0x50db 020718 copy timeup ,pdata -0x50dc 020719 istore 2 ,contw -0x50dd 020720 arg 0x8 ,temp -: 020723 ml2cap_send_signal: -0x50de 020724 storet 2 ,mem_l2cap_signal_tx_length -0x50df 020725 copy temp ,pdata -0x50e0 020726 branch l2cap_malloc_discard ,blank -0x50e1 020727 call l2cap_get_signal_tx_buff -0x50e2 020728 fetch 2 ,mem_l2cap_signal_tx_length -0x50e3 020729 istore 2 ,contw -0x50e4 020730 force l2cap_signal_channel ,pdata -0x50e5 020731 istore 2 ,contw -0x50e6 020732 rtn -: 020734 msdp_send_req_done: -0x50e7 020735 fetch 2 ,mem_sdp_tx_pkt_length -0x50e8 020736 branch assert ,blank -0x50e9 020737 call l2cap_get_sdp_tx_buff -0x50ea 020738 fetch 2 ,mem_sdp_tx_pkt_length -0x50eb 020739 istore 2 ,contw -0x50ec 020740 fetch 2 ,mem_sdp_remote_cid -0x50ed 020741 istore 2 ,contw -0x50ee 020742 rtn -: 020743 ml2cap_rx_multiplexing: -0x50ef 020744 fetch 2 ,mem_l2cap_rx_pkt_length -0x50f0 020745 branch l2cap_rx_reset_state ,blank -0x50f1 020746 bpatchx patch23_3 ,mem_patch23 -0x50f2 020747 fetch 1 ,mem_l2cap_rx_cid -0x50f3 020748 beq l2cap_signal_channel ,ml2cap_call_proc_signal -0x50f4 020749 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp -0x50f5 020750 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm -0x50f6 020751 beq l2cap_hid_control_channel ,l2cap_call_proc_hid -0x50f7 020752 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid -0x50f8 020753 branch l2cap_rx_reset_state -: 020755 ml2cap_call_proc_signal: -0x50f9 020756 bpatchx patch23_4 ,mem_patch23 -0x50fa 020757 call l2cap_malloc_signal_channel -0x50fb 020758 force 0 ,regb -0x50fc 020759 call l2cap_get_signal_tx_payload -0x50fd 020760 copy pdata ,contw -0x50fe 020761 fetch 2 ,mem_l2cap_rx_pkt_length -0x50ff 020762 copy pdata ,regc -0x5100 020763 fetch 2 ,mem_l2cap_payload_ptr -0x5101 020764 iforce contr -: 020765 ml2cap_proc_one_comm_loop: -0x5102 020766 call ml2cap_proc_one_comm -0x5103 020767 increase -4 ,regc -0x5104 020768 nbranch ml2cap_proc_one_comm_loop ,zero -0x5105 020769 copy regb ,temp -0x5106 020770 call ml2cap_send_signal -0x5107 020771 branch l2cap_rx_reset_state -: 020773 ml2cap_proc_one_comm: -0x5108 020774 ifetch 1 ,contr -0x5109 020775 beq signal_connect_req ,ml2cap_proc_signal_connect_req -0x510a 020776 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject -0x510b 020777 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp -0x510c 020778 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp -0x510d 020779 beq signal_config_req ,ml2cap_proc_signal_config_req -0x510e 020780 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp -0x510f 020781 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req -0x5110 020782 beq signal_echo_req ,l2cap_proc_signal_echo_req -0x5111 020783 beq signal_info_req ,ml2cap_proc_signal_info_req -0x5112 020784 branch ml2cap_proc_send_reject -: 020786 ml2cap_proc_signal_connect_req: -0x5113 020787 call save_cont_pointers -0x5114 020789 call load_cont_pointers -0x5115 020790 branch l2cap_proc_signal_connect_req -: 020791 ml2cap_proc_signal_cmd_reject: -0x5116 020792 ifetch 1 ,contr -0x5117 020793 copy pdata ,queue -0x5118 020794 ifetch 2 ,contr -0x5119 020795 copy pdata ,rega -0x511a 020796 copy regc ,pdata -0x511b 020797 isub rega ,regc -: 020798 mvptr: -0x511c 020799 ifetch 1 ,contr -0x511d 020800 increase -1 ,rega -0x511e 020801 nbranch mvptr ,zero -0x511f 020802 rtn -: 020803 ml2cap_proc_signal_connect_rsp: -0x5120 020804 ifetch 1 ,contr -0x5121 020805 copy pdata ,queue -0x5122 020806 ifetch 2 ,contr -0x5123 020807 copy pdata ,rega -0x5124 020808 ifetch 2 ,contr -0x5125 020809 copy pdata ,timeup -0x5126 020810 ifetch 2 ,contr -0x5127 020811 copy pdata ,temp -0x5128 020812 ifetch 2 ,contr -0x5129 020813 sub pdata ,0 ,null -0x512a 020814 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero -0x512b 020815 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result -0x512c 020816 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result -0x512d 020817 branch ml2cap_proc_signal_connect_rsp_mnosucc -: 020818 ml2cap_proc_signal_connect_refused_result: -0x512e 020819 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp -0x512f 020820 call ui_ipc_send_event -: 020821 ml2cap_proc_signal_connect_rsp_mnosucc: -0x5130 020822 ifetch 2 ,contr -0x5131 020823 branch mnosucc -: 020824 ml2cap_proc_signal_connect_rsp_sucessful: -0x5132 020825 call save_cont_pointers -0x5133 020829 bpatchx patch23_5 ,mem_patch23 -0x5134 020830 setarg l2cap_sdp_channel -0x5135 020831 isub temp ,null -0x5136 020832 branch ml2cap_proc_signal_connect_rsp_sdp ,zero -0x5137 020833 setarg l2cap_rfcomm_channel -0x5138 020834 isub temp ,null -0x5139 020835 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero -0x513a 020836 setarg l2cap_hid_interrupt_channel -0x513b 020837 isub temp ,null -0x513c 020838 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero -0x513d 020839 setarg l2cap_hid_control_channel -0x513e 020840 isub temp ,null -0x513f 020841 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero -0x5140 020842 branch mnosucc -: 020843 ml2cap_proc_signal_connect_rsp_sdp: -0x5141 020844 copy timeup ,pdata -0x5142 020845 store 2 ,mem_sdp_remote_cid -0x5143 020846 fetch 1 ,mem_sdp_state -0x5144 020847 set1 l2cap_channel_state_conn_res -0x5145 020848 store 1 ,mem_sdp_state -0x5146 020849 branch mnosucc1 -: 020850 ml2cap_proc_signal_connect_rsp_rfcomm: -0x5147 020851 copy timeup ,pdata -0x5148 020852 store 2 ,mem_rfcomm_remote_cid -0x5149 020853 fetch 1 ,mem_rfcomm_state -0x514a 020854 set1 l2cap_channel_state_conn_res -0x514b 020855 store 1 ,mem_rfcomm_state -0x514c 020856 branch mnosucc1 -: 020857 ml2cap_proc_signal_connect_rsp_hid_ctrl: -0x514d 020858 copy timeup ,pdata -0x514e 020859 store 2 ,mem_hid_ctrl_remote_cid -0x514f 020860 fetch 1 ,mem_hid_control_state -0x5150 020861 set1 l2cap_channel_state_conn_res -0x5151 020862 store 1 ,mem_hid_control_state -0x5152 020863 branch mnosucc1 -: 020864 ml2cap_proc_signal_connect_rsp_hid_int: -0x5153 020865 copy timeup ,pdata -0x5154 020866 store 2 ,mem_hid_int_remote_cid -0x5155 020867 fetch 1 ,mem_hid_interrupt_state -0x5156 020868 set1 l2cap_channel_state_conn_res -0x5157 020869 store 1 ,mem_hid_interrupt_state -: 020872 mnosucc1: -0x5158 020873 call load_cont_pointers -: 020874 mnosucc: -0x5159 020875 copy regc ,pdata -0x515a 020876 isub rega ,regc -0x515b 020877 rtn -: 020879 ml2cap_proc_signal_config_rsp: -0x515c 020880 ifetch 1 ,contr -0x515d 020881 copy pdata ,queue -0x515e 020882 ifetch 2 ,contr -0x515f 020883 copy pdata ,rega -0x5160 020884 copy regc ,pdata -0x5161 020885 isub rega ,regc -0x5162 020886 ifetch 2 ,contr -0x5163 020887 copy pdata ,timeup -0x5164 020888 ifetch 2 ,contr -0x5165 020889 ifetch 2 ,contr -0x5166 020890 nbranch mcrsdone1 ,blank -0x5167 020891 call save_cont_pointers -0x5168 020895 copy timeup ,temp -0x5169 020896 bpatchx patch23_6 ,mem_patch23 -0x516a 020897 setarg l2cap_sdp_channel -0x516b 020898 isub temp ,null -0x516c 020899 branch ml2cap_proc_signal_config_rsp_sdp ,zero -0x516d 020900 setarg l2cap_rfcomm_channel -0x516e 020901 isub temp ,null -0x516f 020902 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero -0x5170 020903 setarg l2cap_hid_control_channel -0x5171 020904 isub temp ,null -0x5172 020905 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero -0x5173 020906 setarg l2cap_hid_interrupt_channel -0x5174 020907 isub temp ,null -0x5175 020908 branch ml2cap_proc_signal_config_rsp_hid_int ,zero -: 020909 ml2cap_proc_signal_config_rsp_sdp: -0x5176 020910 fetch 1 ,mem_sdp_state -0x5177 020911 set1 l2cap_channel_state_rcv_cfg_res -0x5178 020912 store 1 ,mem_sdp_state -0x5179 020913 rtn -: 020914 ml2cap_proc_signal_config_rsp_rfcomm: -0x517a 020915 fetch 1 ,mem_rfcomm_state -0x517b 020916 set1 l2cap_channel_state_rcv_cfg_res -0x517c 020917 store 1 ,mem_rfcomm_state -0x517d 020918 rtn -: 020919 ml2cap_proc_signal_config_rsp_hid_ctrl: -0x517e 020920 fetch 1 ,mem_hid_control_state -0x517f 020921 set1 l2cap_channel_state_rcv_cfg_res -0x5180 020922 store 1 ,mem_hid_control_state -0x5181 020923 rtn -: 020924 ml2cap_proc_signal_config_rsp_hid_int: -0x5182 020925 fetch 1 ,mem_hid_interrupt_state -0x5183 020926 set1 l2cap_channel_state_rcv_cfg_res -0x5184 020927 store 1 ,mem_hid_interrupt_state -0x5185 020928 jam bt_evt_hid_connected ,mem_fifo_temp -0x5186 020929 branch ui_ipc_send_event -: 020932 mcfrsdone: -0x5187 020933 call load_cont_pointers -: 020934 mcrsdone1: -0x5188 020935 increase -6 ,rega -: 020936 mloop2: -0x5189 020937 branch mcrsdone ,zero -0x518a 020938 increase 1 ,contr -0x518b 020939 increase -1 ,rega -0x518c 020940 branch mloop2 -: 020941 mcrsdone: -0x518d 020942 rtn -: 020943 ml2cap_proc_signal_config_req: -0x518e 020944 ifetch 1 ,contr -0x518f 020945 copy pdata ,queue -0x5190 020946 ifetch 2 ,contr -0x5191 020947 copy pdata ,rega -0x5192 020948 copy regc ,pdata -0x5193 020949 isub rega ,regc -0x5194 020950 ifetch 2 ,contr -0x5195 020951 increase 2 ,contr -0x5196 020952 copy pdata ,temp -0x5197 020953 setarg signal_config_rsp -0x5198 020954 istore 1 ,contw -0x5199 020955 copy queue ,pdata -0x519a 020956 istore 1 ,contw -0x519b 020957 increase 2 ,rega -0x519c 020958 copy rega ,pdata -0x519d 020959 istore 2 ,contw -0x519e 020960 call save_cont_pointers -0x519f 020961 bpatchx patch23_7 ,mem_patch23 -0x51a0 020962 setarg l2cap_sdp_channel -0x51a1 020963 isub temp ,null -0x51a2 020964 branch ml2cap_proc_signal_config_req_sdp ,zero -0x51a3 020965 setarg l2cap_rfcomm_channel -0x51a4 020966 isub temp ,null -0x51a5 020967 branch ml2cap_proc_signal_config_req_rfcomm ,zero -0x51a6 020968 setarg l2cap_hid_control_channel -0x51a7 020969 isub temp ,null -0x51a8 020970 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero -0x51a9 020971 setarg l2cap_hid_interrupt_channel -0x51aa 020972 isub temp ,null -0x51ab 020973 branch ml2cap_proc_signal_config_req_hid_int ,zero -0x51ac 020974 branch mcfgrq_done -: 020975 ml2cap_proc_signal_config_req_sdp: -0x51ad 020976 fetch 1 ,mem_sdp_state -0x51ae 020977 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51af 020978 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51b0 020979 store 1 ,mem_sdp_state -0x51b1 020980 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq -0x51b2 020981 fetcht 1 ,mem_control_tasks -0x51b3 020982 set1 l2cap_init_config_req ,temp -0x51b4 020983 storet 1 ,mem_control_tasks -0x51b5 020984 copy queue ,pdata -0x51b6 020985 increase 1 ,pdata -0x51b7 020986 store 1 ,mem_config_identifier -0x51b8 020987 fetch 1 ,mem_sdp_state -0x51b9 020988 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x51ba 020989 store 1 ,mem_sdp_state -: 020990 ml2cap_proc_signal_config_req_sdp_nsndreq: -0x51bb 020991 fetch 2 ,mem_sdp_remote_cid -0x51bc 020992 store 2 ,mem_config_req_dest_cid -0x51bd 020993 branch mcfgrq_done -: 020994 ml2cap_proc_signal_config_req_rfcomm: -0x51be 020995 fetch 1 ,mem_rfcomm_state -0x51bf 020996 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51c0 020997 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51c1 020998 store 1 ,mem_rfcomm_state -0x51c2 020999 fetch 2 ,mem_rfcomm_remote_cid -0x51c3 021000 branch mcfgrq_done -: 021001 ml2cap_proc_signal_config_req_hid_ctrl: -0x51c4 021002 fetch 1 ,mem_hid_control_state -0x51c5 021003 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51c6 021004 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51c7 021005 store 1 ,mem_hid_control_state -0x51c8 021006 fetch 2 ,mem_hid_ctrl_remote_cid -0x51c9 021007 branch mcfgrq_done -: 021008 ml2cap_proc_signal_config_req_hid_int: -0x51ca 021009 fetch 1 ,mem_hid_interrupt_state -0x51cb 021010 set1 l2cap_channel_state_rcv_cfg_req ,pdata -0x51cc 021011 set1 l2cap_channel_state_snd_cfg_res ,pdata -0x51cd 021012 store 1 ,mem_hid_interrupt_state -0x51ce 021013 fetch 2 ,mem_hid_int_remote_cid -: 021016 mcfgrq_done: -0x51cf 021017 copy pdata ,timeup -0x51d0 021018 call load_cont_pointers -0x51d1 021020 copy timeup ,pdata -0x51d2 021022 istore 2 ,contw -0x51d3 021023 force 0x0000 ,pdata -0x51d4 021024 istore 2 ,contw -0x51d5 021025 force 0x0000 ,pdata -0x51d6 021026 istore 2 ,contw -0x51d7 021027 force 10 ,pdata -0x51d8 021028 iadd regb ,regb -0x51d9 021029 increase -6 ,rega -: 021030 mloop1: -0x51da 021031 branch mcrqdone ,zero -0x51db 021032 ifetch 1 ,contr -0x51dc 021033 istore 1 ,contw -0x51dd 021034 increase 1 ,regb -0x51de 021035 increase -1 ,rega -0x51df 021036 branch mloop1 -: 021037 mcrqdone: -0x51e0 021038 rtn -: 021039 ml2cap_proc_signal_disconn_req: -0x51e1 021040 ifetch 1 ,contr -0x51e2 021041 copy pdata ,queue -0x51e3 021042 ifetch 2 ,contr -0x51e4 021043 copy pdata ,rega -0x51e5 021044 copy regc ,pdata -0x51e6 021045 isub rega ,regc -0x51e7 021047 ifetch 2 ,contr -0x51e8 021048 copy pdata ,rega -0x51e9 021049 ifetch 2 ,contr -0x51ea 021050 copy pdata ,timeup -0x51eb 021051 call save_cont_pointers -0x51ec 021052 bpatchx patch24_0 ,mem_patch24 -0x51ed 021053 setarg l2cap_sdp_channel -0x51ee 021054 copy rega ,temp -0x51ef 021055 isub temp ,null -0x51f0 021056 branch ml2cap_proc_signal_disconn_sdp ,zero -0x51f1 021057 setarg l2cap_hid_control_channel -0x51f2 021058 copy rega ,temp -0x51f3 021059 isub temp ,null -0x51f4 021060 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero -0x51f5 021061 setarg l2cap_hid_interrupt_channel -0x51f6 021062 copy rega ,temp -0x51f7 021063 isub temp ,null -0x51f8 021064 branch ml2cap_proc_signal_disconn_hid_int ,zero -0x51f9 021065 branch mclsrfc -: 021066 ml2cap_proc_signal_disconn_sdp: -0x51fa 021067 setarg 0x0000 -0x51fb 021068 store 2 ,mem_sdp_tx_pkt_length -0x51fc 021069 store 2 ,mem_sdp_remote_cid -0x51fd 021070 store 1 ,mem_sdp_state -0x51fe 021071 branch mclssdp -: 021072 ml2cap_proc_signal_disconn_hid_ctrl: -0x51ff 021073 call l2cap_reset_hid_ctrl_state -0x5200 021074 branch mclssdp -: 021075 ml2cap_proc_signal_disconn_hid_int: -0x5201 021076 call l2cap_reset_hid_int_state -0x5202 021082 branch mclssdp -: 021083 mclsrfc: -0x5203 021084 setarg 0x0000 -0x5204 021085 store 2 ,mem_rfcomm_tx_pkt_length -: 021086 mclssdp: -0x5205 021087 call load_cont_pointers -0x5206 021088 setarg signal_disconnect_rsp -0x5207 021089 istore 1 ,contw -0x5208 021090 copy queue ,pdata -0x5209 021091 istore 1 ,contw -0x520a 021092 setarg 0x0004 -0x520b 021093 istore 2 ,contw -0x520c 021094 copy rega ,pdata -0x520d 021095 istore 2 ,contw -0x520e 021096 copy timeup ,pdata -0x520f 021097 istore 2 ,contw -0x5210 021098 force 8 ,pdata -0x5211 021099 iadd regb ,regb -0x5212 021100 rtn -: 021102 ml2cap_proc_signal_disconn_rsp: -0x5213 021103 ifetch 1 ,contr -0x5214 021104 copy pdata ,queue -0x5215 021105 ifetch 2 ,contr -0x5216 021106 copy pdata ,rega -0x5217 021107 ifetch 2 ,contr -0x5218 021108 copy pdata ,timeup -0x5219 021109 ifetch 2 ,contr -0x521a 021110 copy pdata ,temp -0x521b 021111 call save_cont_pointers -0x521c 021112 bpatchx patch24_1 ,mem_patch24 -0x521d 021113 fetch 1 ,mem_ml2cap_comm_id -0x521e 021114 icompare 0xff ,queue -0x521f 021115 nbranch mdisdone ,true -0x5220 021116 setarg l2cap_sdp_channel -0x5221 021117 isub temp ,null -0x5222 021118 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero -0x5223 021119 setarg l2cap_rfcomm_channel -0x5224 021120 isub temp ,null -0x5225 021121 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero -0x5226 021122 branch mdisdone -: 021123 ml2cap_proc_signal_disconn_rsp_sdp: -0x5227 021124 jam 0 ,mem_sdp_remote_cid -0x5228 021125 jam 0 ,mem_sdp_state -0x5229 021126 branch mdisdone -: 021127 ml2cap_proc_signal_disconn_rsp_rfcomm: -: 021130 mdisdone: -0x522a 021131 call load_cont_pointers -0x522b 021132 copy regc ,pdata -0x522c 021133 isub rega ,regc -0x522d 021134 rtn -: 021136 ml2cap_proc_send_reject: -0x522e 021137 setarg signal_cmd_reject -0x522f 021138 istore 1 ,contw -0x5230 021139 ifetch 1 ,contr -0x5231 021140 istore 1 ,contw -0x5232 021141 setarg 0x0002 -0x5233 021142 istore 2 ,contw -0x5234 021143 setarg 0x0000 -0x5235 021144 istore 2 ,contw -0x5236 021145 setarg 0x0006 -0x5237 021146 iadd regb ,regb -0x5238 021147 force 4 ,regc -0x5239 021148 rtn -: 021151 l2cap_get_req_id: -0x523a 021152 fetch 1 ,mem_ml2cap_comm_id -0x523b 021153 increase 1 ,pdata -0x523c 021154 bne 0 ,l2cap_get_req_id_ok -0x523d 021155 increase 1 ,pdata -: 021156 l2cap_get_req_id_ok: -0x523e 021157 store 1 ,mem_ml2cap_comm_id -0x523f 021158 rtn -: 021168 l2cap_malloc: -0x5240 021169 bpatchx patch24_2 ,mem_patch24 -0x5241 021170 arg 0 ,regb -0x5242 021171 call l2cap_malloc_is_fifo_full -0x5243 021172 nbranch assert ,blank -0x5244 021173 call l2cap_malloc_get_full_map -0x5245 021174 arg mem_tx_buff0 ,regb -0x5246 021175 arg 0 ,queue -: 021176 l2cap_malloc_loop: -0x5247 021177 fetcht 1 ,mem_used_map -0x5248 021178 qisolate1 temp -0x5249 021179 branch l2cap_malloc_next ,true -0x524a 021180 call l2cap_malloc_enough -0x524b 021181 sub timeup ,0 ,null -0x524c 021182 branch l2cap_malloc_next ,positive -0x524d 021183 call l2cap_malloc_into_fifo -0x524e 021184 branch l2cap_malloc_rtn -: 021185 l2cap_malloc_next: -0x524f 021186 increase 128 ,regb -0x5250 021187 increase 1 ,queue -0x5251 021188 setarg 8 -0x5252 021189 isub queue ,null -0x5253 021190 branch l2cap_malloc_loop ,positive -0x5254 021191 arg 0 ,regb -: 021192 l2cap_malloc_rtn: -0x5255 021193 copy regb ,pdata -0x5256 021194 branch assert ,blank -0x5257 021195 rtn -: 021203 l2cap_malloc_fifo_out: -0x5258 021204 bpatchx patch24_3 ,mem_patch24 -0x5259 021205 call l2cap_malloc_fifo_get_first_ptr -0x525a 021206 increase 1 ,contr -0x525b 021207 ifetch 2 ,contr -0x525c 021208 rtn -: 021214 l2cap_malloc_free: -0x525d 021215 bpatchx patch24_4 ,mem_patch24 -0x525e 021216 call l2cap_malloc_fifo_get_first_ptr -0x525f 021217 copy contr ,contw -0x5260 021218 copy contr ,temp -0x5261 021219 setarg 0 -0x5262 021220 istore 3 ,contw -0x5263 021221 rtn -: 021226 l2cap_malloc_discard: -0x5264 021227 bpatchx patch24_5 ,mem_patch24 -0x5265 021228 call l2cap_malloc_is_fifo_empty -0x5266 021229 branch assert ,blank -0x5267 021230 fetch 3 ,mem_tx_fifo2 -0x5268 021231 store 3 ,mem_tx_fifo3 -0x5269 021232 fetch 3 ,mem_tx_fifo1 -0x526a 021233 store 3 ,mem_tx_fifo2 -0x526b 021234 fetch 3 ,mem_tx_fifo0 -0x526c 021235 store 3 ,mem_tx_fifo1 -0x526d 021236 rtn -: 021242 l2cap_malloc_is_fifo_full: -0x526e 021243 bpatchx patch24_6 ,mem_patch24 -0x526f 021244 fetch 3 ,mem_tx_fifo0 -0x5270 021245 rtn -: 021251 l2cap_malloc_is_fifo_nearly_full: -0x5271 021252 bpatchx patch24_7 ,mem_patch24 -0x5272 021253 fetch 3 ,mem_tx_fifo1 -0x5273 021254 rtn -: 021260 l2cap_malloc_is_fifo_empty: -0x5274 021261 bpatchx patch25_0 ,mem_patch25 -0x5275 021262 fetch 3 ,mem_tx_fifo3 -0x5276 021263 rtn -: 021268 l2cap_malloc_fifo_get_first_ptr: -0x5277 021269 call l2cap_malloc_is_fifo_empty -0x5278 021270 branch assert ,blank -0x5279 021271 arg mem_tx_fifo0 ,contr -: 021272 l2cap_malloc_free_loop: -0x527a 021273 ifetch 3 ,contr -0x527b 021274 branch l2cap_malloc_free_loop ,blank -0x527c 021275 increase -3 ,contr -0x527d 021276 rtn -: 021283 l2cap_malloc_get_full_map: -0x527e 021284 bpatchx patch25_1 ,mem_patch25 -0x527f 021285 arg 4 ,loopcnt -0x5280 021286 arg mem_tx_fifo0_map ,contr -0x5281 021287 arg 0 ,temp -: 021288 l2cap_malloc_get_full_map_loop: -0x5282 021289 ifetch 3 ,contr -0x5283 021290 and pdata ,0xff ,pdata -0x5284 021291 ior temp ,temp -0x5285 021292 loop l2cap_malloc_get_full_map_loop -0x5286 021293 storet 1 ,mem_used_map -0x5287 021294 rtn -: 021302 l2cap_malloc_into_fifo: -0x5288 021303 bpatchx patch25_2 ,mem_patch25 -0x5289 021304 call l2cap_malloc_is_fifo_full -0x528a 021305 nbranch assert ,blank -0x528b 021306 call l2cap_malloc_is_fifo_empty -0x528c 021307 branch l2cap_malloc_into_fifo_no_push ,blank -0x528d 021308 fetch 3 ,mem_tx_fifo1 -0x528e 021309 store 3 ,mem_tx_fifo0 -0x528f 021310 ifetch 3 ,contr -0x5290 021311 istore 3 ,contw -0x5291 021312 ifetch 3 ,contr -0x5292 021313 istore 3 ,contw -0x5293 021314 setarg 0 -0x5294 021315 istore 3 ,contw -: 021316 l2cap_malloc_into_fifo_no_push: -0x5295 021317 arg 0 ,temp -0x5296 021318 copy timeup ,pdata -0x5297 021319 iadd queue ,pdata -: 021320 l2cap_malloc_into_fifo_loop: -0x5298 021321 qset1 temp -0x5299 021322 increase 1 ,queue -0x529a 021323 isub queue ,null -0x529b 021324 nbranch l2cap_malloc_into_fifo_loop ,zero -0x529c 021326 lshift8 regb ,pdata -0x529d 021327 ior temp ,pdata -0x529e 021328 store 3 ,mem_tx_fifo3 -0x529f 021329 rtn -: 021339 l2cap_malloc_enough: -0x52a0 021340 bpatchx patch25_3 ,mem_patch25 -0x52a1 021341 call l2cap_malloc_get_full_map -0x52a2 021342 copy queue ,regc -0x52a3 021343 arg 0 ,temp -0x52a4 021344 arg 0 ,timeup -: 021346 l2cap_malloc_enough_loop: -0x52a5 021347 copy queue ,pdata -0x52a6 021348 beq 8 ,l2cap_malloc_enough_end -0x52a7 021349 fetch 1 ,mem_used_map -0x52a8 021350 qisolate1 pdata -0x52a9 021351 branch l2cap_malloc_enough_end ,true -0x52aa 021352 increase 128 ,temp -0x52ab 021353 increase 1 ,queue -0x52ac 021354 copy rega ,pdata -0x52ad 021355 isub temp ,null -0x52ae 021356 branch l2cap_malloc_enough_end ,zero -0x52af 021357 branch l2cap_malloc_enough_loop ,positive -: 021358 l2cap_malloc_enough_end: -0x52b0 021359 copy temp ,pdata -0x52b1 021360 isub rega ,null -0x52b2 021361 nbranch l2cap_malloc_enough_rtn ,positive -0x52b3 021362 copy queue ,pdata -0x52b4 021363 copy regc ,temp -0x52b5 021364 isub temp ,timeup -: 021365 l2cap_malloc_enough_rtn: -0x52b6 021366 copy regc ,queue -0x52b7 021367 rtn -: 021370 l2cap_malloc_signal_channel: -0x52b8 021371 bpatchx patch25_4 ,mem_patch25 -0x52b9 021372 arg l2cap_signal_malloc_size ,rega -0x52ba 021373 call l2cap_malloc -0x52bb 021374 store 2 ,mem_l2cap_signal_tx_buff_ptr -0x52bc 021375 increase 4 ,pdata -0x52bd 021376 store 2 ,mem_l2cap_signal_tx_payload_ptr -0x52be 021377 setarg 0 -0x52bf 021378 store 2 ,mem_l2cap_signal_tx_length -0x52c0 021379 rtn -: 021381 l2cap_get_signal_tx_buff: -0x52c1 021382 fetch 2 ,mem_l2cap_signal_tx_buff_ptr -0x52c2 021383 branch l2cap_util_pdata_to_contw -: 021385 l2cap_get_signal_tx_payload: -0x52c3 021386 fetch 2 ,mem_l2cap_signal_tx_payload_ptr -0x52c4 021387 branch l2cap_util_pdata_to_contw -: 021390 l2cap_malloc_sdp_channel: -0x52c5 021391 bpatchx patch25_5 ,mem_patch25 -0x52c6 021392 arg sdp_malloc_size ,rega -0x52c7 021393 call l2cap_malloc -0x52c8 021394 store 2 ,mem_sdp_tx_buff_ptr -0x52c9 021395 increase 4 ,pdata -0x52ca 021396 store 2 ,mem_sdp_tx_payload_ptr -0x52cb 021397 setarg 0 -0x52cc 021398 store 2 ,mem_sdp_tx_pkt_length -0x52cd 021399 rtn -: 021401 l2cap_get_sdp_tx_buff: -0x52ce 021402 fetch 2 ,mem_sdp_tx_buff_ptr -0x52cf 021403 branch l2cap_util_pdata_to_contw -: 021405 l2cap_get_sdp_tx_payload: -0x52d0 021406 fetch 2 ,mem_sdp_tx_payload_ptr -0x52d1 021407 branch l2cap_util_pdata_to_contw -: 021410 l2cap_malloc_rfcomm_channel: -0x52d2 021411 bpatchx patch25_6 ,mem_patch25 -0x52d3 021412 call push_stack -0x52d4 021413 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag -0x52d5 021414 call l2cap_malloc_is_fifo_full -0x52d6 021415 nrtn blank -0x52d7 021416 arg rfcomm_malloc_size ,rega -0x52d8 021417 call l2cap_malloc -0x52d9 021418 store 2 ,mem_rfcomm_tx_buff_ptr -0x52da 021419 increase 4 ,pdata -0x52db 021420 store 2 ,mem_rfcomm_tx_payload_ptr -0x52dc 021421 setarg 0 -0x52dd 021422 store 2 ,mem_rfcomm_tx_pkt_length -0x52de 021423 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag -0x52df 021424 branch pop_stack -: 021426 l2cap_get_rfcomm_tx_buff: -0x52e0 021427 fetch 2 ,mem_rfcomm_tx_buff_ptr -0x52e1 021428 branch l2cap_util_pdata_to_contw -: 021430 l2cap_util_pdata_to_contw: -0x52e2 021431 branch assert ,blank -0x52e3 021432 copy pdata ,contw -0x52e4 021433 rtn -: 021436 l2cap_lpm_save_calc_len: -0x52e5 021437 bpatchx patch25_7 ,mem_patch25 -0x52e6 021438 arg 0 ,regb -0x52e7 021439 arg mem_tx_fifo0_map ,rega -0x52e8 021440 increase -2 ,rega -: 021441 l2cap_lpm_save_calc_len_loop: -0x52e9 021442 increase 2 ,rega -0x52ea 021443 setarg mem_tx_fifo_end -0x52eb 021444 isub rega ,null -0x52ec 021445 branch l2cap_lpm_save_calc_len_end ,zero -0x52ed 021446 ifetch 1 ,rega -0x52ee 021447 increase 1 ,rega -0x52ef 021448 branch l2cap_lpm_save_calc_len_loop ,blank -0x52f0 021449 ifetcht 2 ,rega -0x52f1 021450 ifetch 2 ,temp -0x52f2 021451 iadd regb ,regb -0x52f3 021452 increase 4 ,regb -0x52f4 021453 branch l2cap_lpm_save_calc_len_loop -: 021454 l2cap_lpm_save_calc_len_end: -0x52f5 021455 copy regb ,pdata -0x52f6 021456 rtn -: 021459 l2cap_lpm_get_wake_lock: -0x52f7 021460 arg wake_lock_l2cap_tx ,queue -0x52f8 021461 branch lpm_get_wake_lock -: 021463 l2cap_lpm_put_wake_lock: -0x52f9 021464 arg wake_lock_l2cap_tx ,queue -0x52fa 021465 branch lpm_put_wake_lock -: 021467 l2cap_lpm_save_txbuf: -0x52fb 021468 bpatchx patch26_0 ,mem_patch26 -0x52fc 021469 call l2cap_malloc_get_full_map -0x52fd 021470 fetch 1 ,mem_used_map -0x52fe 021471 rtn blank -0x52ff 021472 call l2cap_lpm_save_calc_len -0x5300 021473 arg l2cap_lpm_txbuf_len ,temp -0x5301 021474 isub temp ,null -0x5302 021475 branch l2cap_lpm_get_wake_lock ,positive -0x5303 021476 call l2cap_lpm_put_wake_lock -0x5304 021477 arg mem_l2cap_lpm_txbuf ,contw -0x5305 021478 arg mem_tx_fifo0 ,rega -: 021479 l2cap_lpm_save_txbuf_loop: -0x5306 021480 setarg mem_tx_fifo_end -0x5307 021481 isub rega ,null -0x5308 021482 rtn zero -0x5309 021483 ifetch 1 ,rega -0x530a 021484 increase 1 ,rega -0x530b 021485 nbranch l2cap_lpm_save_txbuf_nempty ,blank -0x530c 021486 istore 2 ,contw -0x530d 021487 increase 2 ,rega -0x530e 021488 branch l2cap_lpm_save_txbuf_loop -: 021489 l2cap_lpm_save_txbuf_nempty: -0x530f 021490 ifetch 2 ,rega -0x5310 021491 increase 2 ,rega -0x5311 021492 copy pdata ,contr -0x5312 021493 ifetch 2 ,contr -0x5313 021494 istore 2 ,contw -0x5314 021495 copy pdata ,loopcnt -0x5315 021496 increase 2 ,loopcnt -0x5316 021497 call memcpy -0x5317 021498 branch l2cap_lpm_save_txbuf_loop -: 021500 l2cap_lpm_load_txbuf: -0x5318 021501 bpatchx patch26_1 ,mem_patch26 -0x5319 021502 call l2cap_malloc_get_full_map -0x531a 021503 fetch 1 ,mem_used_map -0x531b 021504 rtn blank -0x531c 021505 arg mem_tx_fifo0_ptr ,rega -0x531d 021506 increase -3 ,rega -0x531e 021507 arg mem_l2cap_lpm_txbuf ,contr -: 021508 l2cap_lpm_load_txbuf_loop: -0x531f 021509 increase 3 ,rega -0x5320 021510 setarg mem_tx_fifo_end + 1 -0x5321 021511 isub rega ,null -0x5322 021512 rtn zero -0x5323 021513 ifetch 2 ,contr -0x5324 021514 branch l2cap_lpm_load_txbuf_loop ,blank -0x5325 021515 increase 4 ,pdata -0x5326 021516 copy pdata ,loopcnt -0x5327 021517 copy contr ,regb -0x5328 021518 ifetch 2 ,rega -0x5329 021519 copy pdata ,contw -0x532a 021520 copy regb ,contr -0x532b 021521 increase -2 ,contr -0x532c 021522 call memcpy -0x532d 021523 branch l2cap_lpm_load_txbuf_loop -: 021533 le_init_conn: -0x532e 021534 bpatchx patch26_2 ,mem_patch26 -0x532f 021535 disable wake -0x5330 021536 jam 1 ,mem_le_conn_handle -0x5331 021537 jam 3 ,mem_le_state -0x5332 021538 jam 1 ,mem_le_arq -0x5333 021539 setarg -1 -0x5334 021540 store 2 ,mem_le_event_count -0x5335 021541 force 0 ,pdata -0x5336 021542 store 1 ,mem_le_ch -0x5337 021543 store 1 ,mem_le_op -0x5338 021544 store 3 ,mem_sniff_rcv -0x5339 021545 store 3 ,mem_sniff_lost -0x533a 021546 store 5 ,mem_le_pcnt_tx -0x533b 021547 set1 39 ,pdata -0x533c 021548 store 5 ,mem_le_pcnt_rx -0x533d 021549 jam 1 ,mem_le_txheader -0x533e 021550 jam 0 ,mem_le_txlen -0x533f 021551 branch le_supervision_flush -: 021553 le_init_master: -0x5340 021554 bpatchx patch26_3 ,mem_patch26 -0x5341 021555 enable master -0x5342 021556 jam lemode_master ,mem_le_mode -0x5343 021557 jam 1 ,mem_le_att_handle -0x5344 021558 jam 1 ,mem_le_search_handle_start -0x5345 021559 setarg 0xffff -0x5346 021560 store 2 ,mem_le_search_handle_end -0x5347 021561 force 0 ,pdata -0x5348 021562 store 5 ,mem_le_pcnt_rx -0x5349 021563 set1 39 ,pdata -0x534a 021564 store 5 ,mem_le_pcnt_tx -0x534b 021565 branch le_init_conn -: 021568 le_init_slave: -0x534c 021569 bpatchx patch26_4 ,mem_patch26 -0x534d 021570 disable master -0x534e 021571 setarg 0x17 -0x534f 021572 store 2 ,mem_le_remote_mtu -0x5350 021573 jam lemode_slave ,mem_le_mode -0x5351 021574 jam 0 ,mem_le_adv_enable -0x5352 021575 jam 0 ,mem_lpm_current_mult -0x5353 021576 jam flag_le_pairing_null ,mem_le_pairing_state -0x5354 021577 jam flag_le_enc_null ,mem_le_enc_state -0x5355 021578 fetch 2 ,mem_le_superto -0x5356 021579 store 2 ,mem_le_init_superto -0x5357 021580 fetch 2 ,mem_le_tsniff -0x5358 021581 mul32 pdata ,5 ,pdata -0x5359 021582 rshift4 pdata ,pdata -0x535a 021583 store 2 ,mem_le_superto -0x535b 021584 branch le_init_conn -: 021590 le_dispatch: -0x535c 021591 call le_enable -0x535d 021592 call le_scan -0x535e 021593 call le_adv -0x535f 021594 branch le_disable -: 021596 le_conn_dispatch: -0x5360 021597 bpatchx patch26_5 ,mem_patch26 -0x5361 021598 call le_enable -0x5362 021599 call app_process_ble -0x5363 021600 fetch 1 ,mem_le_mode -0x5364 021601 beq lemode_master ,le_master_dispatch -0x5365 021602 branch le_slave_dispatch -: 021608 le_master_dispatch: -0x5366 021609 bpatchx patch26_6 ,mem_patch26 -0x5367 021610 enable master -0x5368 021611 call le_supervision_update -0x5369 021612 branch le_master_disconn ,positive -0x536a 021613 call check_ble_disabled -0x536b 021614 call le_setup -0x536c 021615 call le_prepare_tx -0x536d 021616 disable match -0x536e 021617 call le_transmit_receive_sifs -0x536f 021618 nrtn match -0x5370 021619 bpatchx patch26_7 ,mem_patch26 -0x5371 021620 fetch 1 ,mem_le_conn_rcv -0x5372 021621 increase 1 ,pdata -0x5373 021622 store 1 ,mem_le_conn_rcv -0x5374 021623 call le_acknowledge -0x5375 021624 disable master -0x5376 021625 rtn -: 021627 le_master_disconn: -0x5377 021628 call le_disconnect -0x5378 021629 disable master -0x5379 021630 rtn -: 021635 le_slave_dispatch: -0x537a 021636 bpatchx patch27_0 ,mem_patch27 -0x537b 021637 jam 0 ,mem_le_md_count -0x537c 021638 call sp_calc_sequence_256 -0x537d 021639 call le_secure_connect_sm -0x537e 021640 disable attempt -0x537f 021641 call le_supervision_update -0x5380 021642 branch le_slave_disconn ,positive -0x5381 021643 call check_ble_disabled -0x5382 021644 call le_setup -0x5383 021645 call le_receive_slave -0x5384 021646 nbranch le_slave_unsync ,sync -0x5385 021647 call le_got_first_packet -0x5386 021648 branch le_slave_match ,match -0x5387 021649 branch le_slave_cont -: 021652 le_slave_match: -0x5388 021653 bpatchx patch27_1 ,mem_patch27 -0x5389 021654 fetch 1 ,mem_le_md_count -0x538a 021655 pincrease 1 -0x538b 021656 store 1 ,mem_le_md_count -0x538c 021657 beq le_md_max_count ,le_slave_cont -0x538d 021658 call le_acknowledge -0x538e 021659 call le_prepare_tx -0x538f 021660 call le_transmit_norx -0x5390 021661 call le_parse -0x5391 021662 fetch 2 ,mem_cb_ble_transmit -0x5392 021663 call callback_func -0x5393 021664 call le_check_md -0x5394 021665 branch le_slave_more_data ,user -: 021666 le_slave_cont: -0x5395 021667 bpatchx patch27_2 ,mem_patch27 -0x5396 021668 call le_pairing_sm -0x5397 021669 call le_check_paring_time -0x5398 021670 call check_51cmd -0x5399 021671 fetch 1 ,mem_le_op -0x539a 021672 bbit1 op_disconn ,le_slave_disconn -: 021673 le_slave_unsync: -0x539b 021674 bpatchx patch27_3 ,mem_patch27 -0x539c 021675 call le_lpm_set_mult -0x539d 021676 call le_update_channel_map -0x539e 021677 call le_update_param -0x539f 021678 branch calc_clke_offset -: 021681 le_check_md: -0x53a0 021682 disable user -0x53a1 021683 bmark1 mark_ble_rx_md ,enable_user -0x53a2 021684 bmark1 mark_ble_tx_md ,enable_user -0x53a3 021685 rtn -: 021688 le_slave_more_data: -0x53a4 021689 bpatchx patch27_4 ,mem_patch27 -0x53a5 021690 enable attempt -0x53a6 021691 call le_transmit_receive_sifs_notx -0x53a7 021692 branch le_slave_match ,match -0x53a8 021693 branch le_slave_cont -: 021695 le_slave_disconn: -: 021698 le_disconnect: -0x53a9 021699 bpatchx patch27_5 ,mem_patch27 -0x53aa 021700 call le_clear_connection_info -0x53ab 021701 call app_disconn_reason_collect_ble -0x53ac 021702 call sp_initialize_256 -0x53ad 021703 jam bt_evt_le_disconnected ,mem_fifo_temp -0x53ae 021704 branch ui_ipc_send_event -: 021706 le_clear_connection_info: -0x53af 021707 setarg 0 -0x53b0 021708 store 9 ,mem_le_tx_buff_used -0x53b1 021709 jam 0 ,mem_le_conn_handle -0x53b2 021710 jam lemode_idle ,mem_le_mode -0x53b3 021711 jam 0 ,mem_le_state -0x53b4 021712 jam flag_le_enc_null ,mem_le_enc_state -0x53b5 021713 jam flag_le_pairing_null ,mem_le_pairing_state -0x53b6 021714 rtn -: 021716 le_got_first_packet: -0x53b7 021717 bpatchx patch27_6 ,mem_patch27 -0x53b8 021718 fetch 1 ,mem_le_conn_rcv -0x53b9 021719 increase 1 ,pdata -0x53ba 021720 store 1 ,mem_le_conn_rcv -0x53bb 021721 fetch 1 ,mem_le_state -0x53bc 021722 rtnbit1 lestate_got_first_packet -0x53bd 021723 set1 lestate_got_first_packet -0x53be 021724 store 1 ,mem_le_state -0x53bf 021725 fetch 2 ,mem_le_init_superto -0x53c0 021726 store 2 ,mem_le_superto -0x53c1 021727 setarg 0 -0x53c2 021728 store 4 ,mem_le_transmit_window -0x53c3 021729 rtn -: 021732 le_enable: -0x53c4 021733 bpatchx patch27_7 ,mem_patch27 -0x53c5 021734 jam 0x36 ,rf_adc_goff -0x53c6 021735 jam 0x5f ,rf_agc_nsat -0x53c7 021736 enable le -0x53c8 021737 jam 7 ,rfen_ulp -0x53c9 021738 call check_ble_disabled -0x53ca 021739 fetch 1 ,mem_250k_freq_enable -0x53cb 021740 rtn blank -0x53cc 021741 jam 0xb8 ,rf_iq_gain -0x53cd 021742 rtn -: 021744 le_disable: -0x53ce 021745 bpatchx patch28_0 ,mem_patch28 -0x53cf 021746 jam 0x2e ,rf_adc_goff -0x53d0 021747 jam 0xff ,rf_agc_nsat -0x53d1 021748 disable le -0x53d2 021749 jam 3 ,rfen_ulp -0x53d3 021750 arg 0 ,stop_watch -0x53d4 021751 rtn -: 021753 le_prep: -0x53d5 021754 disable enable_crc -0x53d6 021755 disable enable_white -0x53d7 021756 fetch 3 ,mem_le_crcinit -0x53d8 021757 iforce crc24_init -0x53d9 021758 fetch 1 ,mem_le_ch_mapped -: 021759 le_prep2: -0x53da 021760 reverse pdata ,temp -0x53db 021761 set1 1 ,temp -0x53dc 021762 rshift temp ,white_init -0x53dd 021763 rtn -: 021766 lerx_setfreq: -0x53de 021767 call le_setfreq -0x53df 021768 call set_freq_rx -0x53e0 021769 setarg param_pll_setup -0x53e1 021770 call sleep -0x53e2 021771 branch rf_rx_enable -: 021773 letx_setfreq: -0x53e3 021774 branch txon ,match -: 021775 letx_setfreq0: -0x53e4 021776 call le_setfreq -0x53e5 021777 branch set_freq_tx -: 021778 le_setfreq: -0x53e6 021779 bpatchx patch28_1 ,mem_patch28 -0x53e7 021780 call set_sync_on -0x53e8 021781 fetch 1 ,mem_le_testtype -0x53e9 021782 nbranch le_ctf_test ,blank -0x53ea 021783 fetch 1 ,mem_le_ch_mapped -0x53eb 021784 sub pdata ,36 ,null -0x53ec 021785 branch le_ctf_normal ,positive -0x53ed 021786 force 0 ,temp -0x53ee 021787 rtneq 37 -0x53ef 021788 force 24 ,temp -0x53f0 021789 rtneq 38 -0x53f1 021790 force 78 ,temp -0x53f2 021791 rtn -: 021793 le_ctf_normal: -0x53f3 021794 sub pdata ,10 ,null -0x53f4 021795 branch le_ctf_low ,positive -0x53f5 021796 increase 1 ,pdata -: 021798 le_ctf_low: -0x53f6 021799 lshift pdata ,pdata -0x53f7 021800 add pdata ,2 ,temp -0x53f8 021801 rtn -: 021803 le_ctf_test: -0x53f9 021804 fetch 1 ,mem_le_ch_mapped -0x53fa 021805 lshift pdata ,temp -0x53fb 021806 rtn -: 021808 le_sca_map: -0x53fc 021809 arg 500 ,temp -0x53fd 021810 rtn blank -0x53fe 021811 arg 250 ,temp -0x53ff 021812 rtneq 1 -0x5400 021813 arg 150 ,temp -0x5401 021814 rtneq 2 -0x5402 021815 arg 100 ,temp -0x5403 021816 rtneq 3 -0x5404 021817 arg 75 ,temp -0x5405 021818 rtneq 4 -0x5406 021819 arg 50 ,temp -0x5407 021820 rtneq 5 -0x5408 021821 arg 40 ,temp -0x5409 021822 rtneq 6 -0x540a 021823 arg 20 ,temp -0x540b 021824 rtn -: 021828 le_adv_access: -0x540c 021829 setarg 0x8e89be -0x540d 021830 lshift8 pdata ,pdata -0x540e 021831 or_into 0xd6 ,pdata -0x540f 021832 iforce access -0x5410 021833 setarg 0x555555 -0x5411 021834 store 3 ,mem_le_crcinit -0x5412 021835 rtn -: 021837 le_setup: -0x5413 021838 bpatchx patch28_2 ,mem_patch28 -0x5414 021839 enable swfine -0x5415 021840 fetch 4 ,mem_le_access -0x5416 021841 iforce access -0x5417 021842 call le_map_channel -0x5418 021843 setarg 0x200 -0x5419 021844 branch le_setup_master ,master -0x541a 021845 fetch 2 ,mem_le_receive_window -0x541b 021846 rshift pdata ,pdata -: 021847 le_setup_master: -0x541c 021848 arg param_pll_setup ,temp -0x541d 021849 iadd temp ,pdata -0x541e 021850 call ahead_window -0x541f 021851 deposit clke -0x5420 021852 store 6 ,mem_le_rxon_ts -0x5421 021853 rtn -: 021855 le_next_adv_channel: -0x5422 021856 bpatchx patch28_3 ,mem_patch28 -0x5423 021857 fetch 1 ,mem_le_ch_mapped -0x5424 021858 beq 37 ,le_next_adv_channel_curr_channel_37 -0x5425 021859 beq 38 ,le_next_adv_channel_curr_channel_38 -0x5426 021860 beq 39 ,le_next_adv_channel_curr_channel_39 -0x5427 021861 branch le_next_adv_channel_curr_channel_39 -: 021863 le_next_adv_channel_curr_channel_37: -0x5428 021864 fetcht 1 ,mem_le_adv_channel_map -0x5429 021865 isolate1 bit_adv_channel_map_38 ,temp -0x542a 021866 branch set_le_next_adv_channel_38 ,true -0x542b 021867 isolate1 bit_adv_channel_map_39 ,temp -0x542c 021868 branch set_le_next_adv_channel_39 ,true -0x542d 021869 branch set_le_next_adv_channel_37 -: 021872 le_next_adv_channel_curr_channel_38: -0x542e 021873 fetcht 1 ,mem_le_adv_channel_map -0x542f 021874 isolate1 bit_adv_channel_map_39 ,temp -0x5430 021875 branch set_le_next_adv_channel_39 ,true -0x5431 021876 isolate1 bit_adv_channel_map_37 ,temp -0x5432 021877 branch set_le_next_adv_channel_37 ,true -0x5433 021878 branch set_le_next_adv_channel_38 -: 021881 le_next_adv_channel_curr_channel_39: -0x5434 021882 fetcht 1 ,mem_le_adv_channel_map -0x5435 021883 isolate1 bit_adv_channel_map_37 ,temp -0x5436 021884 branch set_le_next_adv_channel_37 ,true -0x5437 021885 isolate1 bit_adv_channel_map_38 ,temp -0x5438 021886 branch set_le_next_adv_channel_38 ,true -0x5439 021887 branch set_le_next_adv_channel_39 -: 021891 set_le_next_adv_channel_37: -0x543a 021892 jam 37 ,mem_le_ch_mapped -0x543b 021893 fetch 1 ,mem_le_adv_channel_map_temp -0x543c 021894 set1 bit_adv_channel_map_37 ,pdata -0x543d 021895 store 1 ,mem_le_adv_channel_map_temp -0x543e 021896 rtn -: 021898 set_le_next_adv_channel_38: -0x543f 021899 jam 38 ,mem_le_ch_mapped -0x5440 021900 fetch 1 ,mem_le_adv_channel_map_temp -0x5441 021901 set1 bit_adv_channel_map_38 ,pdata -0x5442 021902 store 1 ,mem_le_adv_channel_map_temp -0x5443 021903 rtn -: 021905 set_le_next_adv_channel_39: -0x5444 021906 jam 39 ,mem_le_ch_mapped -0x5445 021907 fetch 1 ,mem_le_adv_channel_map_temp -0x5446 021908 set1 bit_adv_channel_map_39 ,pdata -0x5447 021909 store 1 ,mem_le_adv_channel_map_temp -0x5448 021910 rtn -: 021914 le_context_nexthop: -0x5449 021915 bpatchx patch28_4 ,mem_patch28 -0x544a 021916 add rega ,coffset_mode ,contr -0x544b 021917 ifetch 1 ,contr -0x544c 021918 rtnbit0 mode_le -0x544d 021919 add rega ,coffset_le_event_cnt ,contw -0x544e 021920 ifetch 2 ,contw -0x544f 021921 increase 1 ,pdata -0x5450 021922 istore 2 ,contw -0x5451 021923 add rega ,coffset_le_hop ,contr -0x5452 021924 ifetch 1 ,contr -0x5453 021925 add rega ,coffset_le_ch ,contw -0x5454 021926 ifetcht 1 ,contw -0x5455 021927 iadd temp ,pdata -0x5456 021928 sub pdata ,36 ,null -0x5457 021929 branch le_nexthop_nowrap ,positive -0x5458 021930 increase -37 ,pdata -: 021931 le_nexthop_nowrap: -0x5459 021932 istore 1 ,contw -0x545a 021933 rtn -: 021936 le_calc_channel_map: -0x545b 021937 bpatchx patch28_5 ,mem_patch28 -0x545c 021938 fetch 5 ,mem_le_channel_map -0x545d 021939 force 0 ,temp -0x545e 021940 force 37 ,loopcnt -: 021941 le_count_channels_loop: -0x545f 021942 bbit0 0 ,le_count_channels_notused -0x5460 021943 increase 1 ,temp -: 021944 le_count_channels_notused: -0x5461 021945 rshift pdata ,pdata -0x5462 021946 loop le_count_channels_loop -0x5463 021947 add temp ,-1 ,pdata -0x5464 021948 store 1 ,mem_le_channels -0x5465 021949 rtn -: 021951 le_map_channel: -0x5466 021952 bpatchx patch28_6 ,mem_patch28 -0x5467 021953 fetch 1 ,mem_le_ch -0x5468 021954 iforce queue -0x5469 021955 fetcht 5 ,mem_le_channel_map -0x546a 021956 qisolate1 temp -0x546b 021957 branch le_map_channel_end ,true -: 021958 le_map_channel_next: -0x546c 021959 bpatchx patch28_7 ,mem_patch28 -0x546d 021960 fetch 1 ,mem_le_channels -0x546e 021961 isub queue ,pdata -0x546f 021962 branch le_map_channel_cont ,positive -0x5470 021963 sub pdata ,-1 ,queue -0x5471 021964 branch le_map_channel_next -: 021965 le_map_channel_cont: -0x5472 021966 copy queue ,loopcnt -0x5473 021967 force 0 ,queue -: 021968 le_map_channel_loop: -0x5474 021969 qisolate1 temp -0x5475 021970 branch le_map_channel_skip ,true -0x5476 021971 increase 1 ,loopcnt -: 021972 le_map_channel_skip: -0x5477 021973 deposit loopcnt -0x5478 021974 branch le_map_channel_end ,blank -0x5479 021975 increase 1 ,queue -0x547a 021976 increase -1 ,loopcnt -0x547b 021977 branch le_map_channel_loop -: 021978 le_map_channel_end: -0x547c 021979 deposit queue -0x547d 021980 store 1 ,mem_le_ch_mapped -0x547e 021981 rtn -: 021984 le_wait_tx: -0x547f 021985 branch le_wait_master ,master -0x5480 021986 until null ,timeout -0x5481 021987 rtn -: 021989 le_wait_master: -0x5482 021990 arg 0xea0 ,timeup -0x5483 021991 until clkn_rt ,meet -0x5484 021992 rtn -: 021994 le_receive_adv: -0x5485 021995 disable swfine -0x5486 021996 fetch 2 ,mem_le_scan_window -0x5487 021997 copy pdata ,timeup -0x5488 021998 branch le_receive_packet -: 022001 le_receive_slave: -0x5489 022002 bpatchx patch29_0 ,mem_patch29 -0x548a 022003 enable swfine -0x548b 022004 fetch 2 ,mem_le_receive_window -0x548c 022005 fetcht 4 ,mem_le_transmit_window -0x548d 022006 iadd temp ,timeup -: 022007 le_receive_packet: -0x548e 022008 call lerx_setfreq -: 022009 le_receive_rxon: -0x548f 022010 bpatchx patch29_1 ,mem_patch29 -0x5490 022011 call le_prep -0x5491 022012 disable match -0x5492 022013 enable decode_fec0 -0x5493 022014 enable is_rx -0x5494 022015 disable is_tx -0x5495 022016 copy timeup ,stop_watch -0x5496 022017 correlate null ,timeout -0x5497 022018 branch le_receive_on_attempt ,attempt -0x5498 022019 copy clke ,temp -0x5499 022020 storet 6 ,mem_sync_clke -: 022021 le_receive_on_attempt: -0x549a 022022 nbranch end_of_packet ,sync -0x549b 022023 branch le_receive_skip ,attempt -0x549c 022024 arg param_clke_cal_le ,clke_rt -0x549d 022025 copy bt_clk ,clke_bt -0x549e 022026 fetch 1 ,mem_le_state -0x549f 022027 bbit0 lestate_got_first_packet ,le_receive_skip -0x54a0 022028 call lpm_adjust_clk ,wake -: 022029 le_receive_skip: -0x54a1 022030 bpatchx patch29_2 ,mem_patch29 -0x54a2 022031 call save_rssi -0x54a3 022032 enable enable_white -0x54a4 022033 enable enable_crc -0x54a5 022034 parse demod ,bucket ,8 -0x54a6 022035 rshift3 pwindow ,pdata -0x54a7 022036 store 1 ,mem_le_rxbuf -0x54a8 022037 parse demod ,bucket ,8 -0x54a9 022038 rshift3 pwindow ,pdata -0x54aa 022039 istore 1 ,contw -0x54ab 022040 and pdata ,0x3f ,loopcnt -0x54ac 022041 branch lerx_nopayload ,zero -: 022043 lerx_loop: -0x54ad 022044 parse demod ,bucket ,8 -0x54ae 022045 rshift3 pwindow ,pdata -0x54af 022046 istore 1 ,contw -0x54b0 022047 loop lerx_loop -: 022049 lerx_nopayload: -0x54b1 022050 bpatchx patch29_3 ,mem_patch29 -0x54b2 022051 parse demod ,bucket ,24 -0x54b3 022052 enable swfine -0x54b4 022053 arg param_sifs ,stop_watch -0x54b5 022054 rshift32 pdata ,pdata -0x54b6 022055 rshift16 pdata ,pdata -0x54b7 022056 istore 3 ,contw -0x54b8 022057 branch end_of_packet ,crc_failed -0x54b9 022058 enable match -0x54ba 022059 fetch 1 ,mem_last_freq -0x54bb 022060 add pdata ,0 ,rega -0x54bc 022061 call rf_write_freq -0x54bd 022062 disable decode_fec0 -0x54be 022063 branch set_sync_on -: 022065 le_transmit_receive_sifs: -0x54bf 022066 bpatchx patch29_4 ,mem_patch29 -0x54c0 022067 call le_transmit -: 022068 le_transmit_receive_sifs_notx: -0x54c1 022069 fetcht 1 ,mem_last_freq -0x54c2 022070 call set_freq_rx -0x54c3 022071 call rf_rx_enable -0x54c4 022072 enable swfine -0x54c5 022073 arg 5500 ,timeup -0x54c6 022074 branch le_receive_rxon -: 022076 le_transmit_norx: -0x54c7 022077 call le_transmit -0x54c8 022078 branch end_of_packet -: 022080 le_transmit: -0x54c9 022081 bpatchx patch29_5 ,mem_patch29 -0x54ca 022082 call le_prep -0x54cb 022083 call letx_setfreq -0x54cc 022084 branch le_transmit0 -: 022086 le_transmit0: -0x54cd 022087 set1 txgfsk ,radio_ctrl -0x54ce 022088 enable encode_fec0 -0x54cf 022089 enable is_tx -0x54d0 022090 disable is_rx -0x54d1 022091 call le_wait_tx -0x54d2 022092 rshift16 access ,pdata -0x54d3 022093 rshift8 pdata ,pdata -0x54d4 022094 rshift4 pdata ,pdata -0x54d5 022095 inject mod ,40 -0x54d6 022096 enable enable_white -0x54d7 022097 enable enable_crc -0x54d8 022098 bpatchx patch29_6 ,mem_patch29 -0x54d9 022099 fetch 1 ,mem_le_txheader -0x54da 022100 inject mod ,8 -0x54db 022101 ifetch 1 ,contr -0x54dc 022102 and pdata ,0x3f ,loopcnt -0x54dd 022103 inject mod ,8 -0x54de 022104 branch letr_nopayload ,zero -: 022105 letr_loop: -0x54df 022106 ifetch 1 ,contr -0x54e0 022107 inject mod ,8 -0x54e1 022108 loop letr_loop -: 022110 letr_nopayload: -0x54e2 022111 enable enable_parity -0x54e3 022112 inject mod ,24 -0x54e4 022113 disable enable_parity -0x54e5 022114 until null ,tx_clear -0x54e6 022115 nop 100 -0x54e7 022116 disable encode_fec0 -0x54e8 022117 rtn -: 022119 le_send_adv_ind: -0x54e9 022120 bpatchx patch29_7 ,mem_patch29 -0x54ea 022121 fetch 1 ,mem_le_adv_type -0x54eb 022122 beq adv_direct_ind ,le_send_adv_direct_ind -0x54ec 022123 fetch 1 ,mem_le_adv_own_addr_type -0x54ed 022124 lshift4 pdata ,pdata -0x54ee 022125 lshift2 pdata ,pdata -0x54ef 022126 store 1 ,mem_le_txheader -0x54f0 022127 fetcht 1 ,mem_le_adv_data_len -0x54f1 022128 add temp ,6 ,pdata -0x54f2 022129 store 1 ,mem_le_txlen -0x54f3 022130 fetch 6 ,mem_le_lap -0x54f4 022131 store 6 ,mem_le_txpayload -0x54f5 022132 copy temp ,loopcnt -0x54f6 022133 arg mem_le_adv_data ,contr -0x54f7 022134 call memcpy_fast -0x54f8 022135 branch le_send_adv_transmit -: 022136 le_send_adv_direct_ind: -0x54f9 022137 fetch 1 ,mem_le_adv_direct_addr_type -0x54fa 022138 lshift4 pdata ,pdata -0x54fb 022139 lshift2 pdata ,pdata -0x54fc 022140 increase 1 ,pdata -0x54fd 022141 store 1 ,mem_le_txheader -0x54fe 022142 setarg 12 -0x54ff 022143 store 1 ,mem_le_txlen -0x5500 022144 fetch 6 ,mem_le_lap -0x5501 022145 store 6 ,mem_le_txpayload -0x5502 022146 fetch 6 ,mem_hci_plap -0x5503 022147 istore 6 ,contw -: 022148 le_send_adv_transmit: -0x5504 022149 bpatchx patch2a_0 ,mem_patch2a -0x5505 022150 fetch 1 ,mem_le_adv_transmit -0x5506 022151 increase 1 ,pdata -0x5507 022152 store 1 ,mem_le_adv_transmit -0x5508 022153 arg 1800 ,stop_watch -0x5509 022154 disable match -0x550a 022155 branch le_transmit_receive_sifs -: 022157 le_send_scan_request: -0x550b 022158 bpatchx patch2a_1 ,mem_patch2a -0x550c 022159 fetch 1 ,mem_le_scan_type -0x550d 022160 rtnne le_scan_type_active -0x550e 022161 fetch 1 ,mem_le_adv_transmit -0x550f 022162 increase 1 ,pdata -0x5510 022163 store 1 ,mem_le_adv_transmit -0x5511 022164 arg 0x0c03 ,temp -0x5512 022165 fetch 1 ,mem_le_scan_own_addr_type -0x5513 022166 nsetflag blank ,le_sender_addr_bit ,temp -0x5514 022167 copy rega ,pdata -0x5515 022168 nsetflag blank ,le_receiver_addr_bit ,temp -0x5516 022169 storet 2 ,mem_le_txheader -0x5517 022170 fetch 6 ,mem_le_lap -0x5518 022171 istore 6 ,contw -0x5519 022172 fetch 6 ,mem_le_plap -0x551a 022173 istore 6 ,contw -0x551b 022174 branch le_transmit_receive_sifs -: 022177 le_send_scan_response: -0x551c 022178 bpatchx patch2a_2 ,mem_patch2a -0x551d 022179 arg scan_rsp ,temp -0x551e 022180 fetch 1 ,mem_le_adv_own_addr_type -0x551f 022181 nsetflag blank ,le_sender_addr_bit ,temp -0x5520 022182 storet 1 ,mem_le_txheader -0x5521 022183 fetcht 1 ,mem_le_scan_data_len -0x5522 022184 add temp ,6 ,pdata -0x5523 022185 store 1 ,mem_le_txlen -0x5524 022186 fetch 6 ,mem_le_lap -0x5525 022187 store 6 ,mem_le_txpayload -0x5526 022188 arg mem_le_scan_data ,contr -0x5527 022189 copy temp ,loopcnt -0x5528 022190 call memcpy_fast -0x5529 022191 call le_transmit_norx -0x552a 022192 branch le_adv_not_match -: 022194 le_connect_request: -0x552b 022195 bpatchx patch2a_3 ,mem_patch2a -0x552c 022196 force -1 ,pdata -0x552d 022197 setsect 2 ,1 -0x552e 022198 store 5 ,mem_le_channel_map -0x552f 022199 call le_calc_channel_map -0x5530 022200 force 4 ,loopcnt -0x5531 022201 arg mem_le_access ,contw -0x5532 022202 call generate_random_loop -0x5533 022203 fetch 2 ,mem_le_timeout -0x5534 022204 store 2 ,mem_le_superto -: 022205 le_con_req_hop_retry: -0x5535 022206 random pdata -0x5536 022207 and_into 0xf ,pdata -0x5537 022208 sub pdata ,4 ,null -0x5538 022209 branch le_con_req_hop_retry ,positive -0x5539 022210 store 1 ,mem_le_hop -0x553a 022211 store 1 ,mem_tmp1 -0x553b 022212 bpatchx patch2a_4 ,mem_patch2a -0x553c 022213 fetcht 2 ,mem_le_conn_interval -0x553d 022214 storet 2 ,mem_le_tsniff -0x553e 022215 copy temp ,regc -0x553f 022216 add clkn_bt ,7 ,pdata -0x5540 022217 idiv regc -0x5541 022218 call wait_div_end -0x5542 022219 remainder rega -0x5543 022220 isub rega ,pdata -0x5544 022221 iadd regc ,pdata -0x5545 022222 fetcht 2 ,mem_le_dsniff -0x5546 022223 iadd temp ,pdata -0x5547 022224 store 4 ,mem_le_anchor -0x5548 022225 isub clkn_bt ,rega -0x5549 022226 increase -6 ,rega -0x554a 022227 arg 0x2205 ,regb -0x554b 022228 fetch 1 ,mem_le_conn_own_addr_type -0x554c 022229 nsetflag blank ,le_sender_addr_bit ,regb -0x554d 022230 fetch 1 ,mem_le_conn_peer_addr_type -0x554e 022231 nsetflag blank ,le_receiver_addr_bit ,regb -0x554f 022232 copy regb ,pdata -0x5550 022233 store 2 ,mem_le_txheader -0x5551 022234 fetch 6 ,mem_le_lap -0x5552 022235 istore 6 ,contw -0x5553 022236 fetch 6 ,mem_le_plap -0x5554 022237 istore 6 ,contw -0x5555 022238 fetch 4 ,mem_le_access -0x5556 022239 istore 4 ,contw -0x5557 022240 random pdata -0x5558 022241 istore 2 ,contw -0x5559 022242 random pdata -0x555a 022243 istore 1 ,contw -0x555b 022244 force 2 ,pdata -0x555c 022245 istore 1 ,contw -0x555d 022246 rshift2 rega ,pdata -0x555e 022247 istore 2 ,contw -0x555f 022248 rshift2 regc ,pdata -0x5560 022249 istore 2 ,contw -0x5561 022250 bpatchx patch2a_5 ,mem_patch2a -0x5562 022251 setarg 0 -0x5563 022252 istore 2 ,contw -0x5564 022253 fetch 2 ,mem_le_timeout -0x5565 022254 istore 2 ,contw -0x5566 022255 fetch 5 ,mem_le_channel_map -0x5567 022256 istore 5 ,contw -0x5568 022257 fetch 1 ,mem_le_hop -0x5569 022258 arg param_le_sca ,temp -0x556a 022259 ior temp ,pdata -0x556b 022260 istore 1 ,contw -0x556c 022261 call le_transmit_norx -0x556d 022262 setarg mem_le_txheader -0x556e 022263 add pdata ,18 ,contr -0x556f 022264 ifetch 3 ,contr -0x5570 022265 store 3 ,mem_le_crcinit -0x5571 022266 rtn -: 022268 le_init_adv: -0x5572 022269 bpatchx patch2a_6 ,mem_patch2a -0x5573 022270 disable master -0x5574 022271 branch le_adv_access -: 022275 le_update_param: -0x5575 022276 fetch 1 ,mem_le_state -0x5576 022277 rtnbit0 lestate_update_param -0x5577 022278 fetch 2 ,mem_le_event_count -0x5578 022279 fetcht 2 ,mem_le_instant -0x5579 022280 isub temp ,pdata -0x557a 022281 nrtn positive -0x557b 022282 store 2 ,mem_pdatatemp -0x557c 022283 bpatchx patch2a_7 ,mem_patch2a -0x557d 022284 fetch 1 ,mem_le_state -0x557e 022285 set0 lestate_update_param ,pdata -0x557f 022286 set0 lestate_got_first_packet ,pdata -0x5580 022287 store 1 ,mem_le_state -0x5581 022288 fetch 4 ,mem_le_anchor -0x5582 022289 fetcht 2 ,mem_le_tsniff -0x5583 022290 storet 2 ,mem_temp -0x5584 022291 isub temp ,rega -0x5585 022292 bpatchx patch2b_0 ,mem_patch2b -0x5586 022293 fetch 1 ,mem_le_new_param -0x5587 022294 store 1 ,mem_le_window_size -0x5588 022295 ifetcht 2 ,contr -0x5589 022296 ifetch 2 ,contr -0x558a 022297 lshift2 pdata ,pdata -0x558b 022298 store 2 ,mem_le_tsniff -0x558c 022299 lshift2 temp ,temp -0x558d 022300 iadd temp ,pdata -0x558e 022301 ifetcht 4 ,contr -0x558f 022302 storet 4 ,mem_le_slave_latency -0x5590 022303 iadd rega ,pdata -0x5591 022304 copy pdata ,regab -0x5592 022305 fetch 2 ,mem_le_tsniff -0x5593 022306 fetcht 2 ,mem_temp -0x5594 022307 isub temp ,pdata -0x5595 022308 fetcht 2 ,mem_pdatatemp -0x5596 022309 imul32 temp ,pdata -0x5597 022310 iadd regab ,pdata -0x5598 022311 store 4 ,mem_le_anchor -0x5599 022312 call le_receive_window_size -0x559a 022313 fetch 2 ,mem_le_superto -0x559b 022314 store 2 ,mem_le_init_superto -0x559c 022315 rtn -: 022318 le_update_channel_map: -0x559d 022319 bpatchx patch2b_1 ,mem_patch2b -0x559e 022320 fetch 1 ,mem_le_state -0x559f 022321 rtnbit0 lestate_update_map -0x55a0 022322 fetch 2 ,mem_le_event_count -0x55a1 022323 fetcht 2 ,mem_le_instant -0x55a2 022324 isub temp ,pdata -0x55a3 022325 nrtn positive -0x55a4 022326 fetch 1 ,mem_le_state -0x55a5 022327 set0 lestate_update_map ,pdata -0x55a6 022328 store 1 ,mem_le_state -0x55a7 022329 fetch 5 ,mem_le_new_map -0x55a8 022330 store 5 ,mem_le_channel_map -0x55a9 022331 branch le_calc_channel_map -: 022334 le_acknowledge: -0x55aa 022335 bpatchx patch2b_2 ,mem_patch2b -0x55ab 022336 call le_supervision_flush -0x55ac 022337 call le_check_wak -0x55ad 022338 fetch 1 ,mem_le_rxbuf -0x55ae 022339 isolate1 md ,pdata -0x55af 022340 setflag true ,mark_ble_rx_md ,mark -0x55b0 022341 rshift pdata ,pdata -0x55b1 022342 ixor temp ,pdata -0x55b2 022343 isolate1 nesn ,pdata -0x55b3 022344 setflag true ,mark_old_packet ,mark -0x55b4 022345 rtnmark1 mark_old_packet -0x55b5 022346 fetch 1 ,mem_le_rxbuf + 1 -0x55b6 022347 branch le_ack_unenc ,blank -0x55b7 022348 fetch 1 ,mem_le_state -0x55b8 022349 bbit0 lestate_encryption ,le_ack_unenc -0x55b9 022350 call load_sk -0x55ba 022351 call le_decrypt -0x55bb 022352 nrtn blank -: 022353 le_ack_unenc: -0x55bc 022354 fetcht 1 ,mem_le_arq -0x55bd 022355 setflip nesn ,temp -0x55be 022356 storet 1 ,mem_le_arq -0x55bf 022357 rtn -: 022360 le_check_wak: -0x55c0 022361 bpatchx patch2b_3 ,mem_patch2b -0x55c1 022362 fetcht 1 ,mem_le_arq -0x55c2 022363 isolate0 wak ,temp -0x55c3 022364 rtn true -0x55c4 022365 fetch 1 ,mem_le_rxbuf -0x55c5 022366 lshift pdata ,pdata -0x55c6 022367 ixor temp ,pdata -0x55c7 022368 rtnbit0 sn -0x55c8 022369 set0 wak ,temp -0x55c9 022370 setflip sn ,temp -0x55ca 022371 storet 1 ,mem_le_arq -0x55cb 022372 compare 3 ,temp ,3 -0x55cc 022373 nrtn true -0x55cd 022374 fetch 1 ,mem_le_txpayload -0x55ce 022375 beq ll_start_enc_req ,le_set_enc -0x55cf 022376 fetch 1 ,mem_le_enc_state -0x55d0 022377 beq flag_le_enc_pause ,le_clear_enc -0x55d1 022378 rtn -: 022381 le_set_enc: -0x55d2 022382 fetch 1 ,mem_le_state -0x55d3 022383 set1 lestate_encryption ,pdata -0x55d4 022384 store 1 ,mem_le_state -0x55d5 022385 rtn -: 022387 le_clear_enc: -0x55d6 022388 bpatchx patch2b_4 ,mem_patch2b -0x55d7 022389 jam flag_le_enc_null ,mem_le_enc_state -0x55d8 022390 arg 0 ,pdata -0x55d9 022391 store 4 ,mem_le_last_mic -0x55da 022392 store 5 ,mem_le_pcnt_tx -0x55db 022393 set1 39 ,pdata -0x55dc 022394 store 5 ,mem_le_pcnt_rx -0x55dd 022395 fetch 1 ,mem_le_state -0x55de 022396 set0 lestate_encryption ,pdata -0x55df 022397 store 1 ,mem_le_state -0x55e0 022398 rtn -: 022401 le_wait_adv: -0x55e1 022402 bpatchx patch2b_5 ,mem_patch2b -0x55e2 022403 call le_next_adv_channel -0x55e3 022404 call le_receive_adv -0x55e4 022405 fetch 1 ,mem_le_adv_waitcnt -0x55e5 022406 increase 1 ,pdata -0x55e6 022407 store 1 ,mem_le_adv_waitcnt -0x55e7 022408 rtn -: 022411 le_scan: -0x55e8 022412 bpatchx patch2b_6 ,mem_patch2b -0x55e9 022413 fetch 1 ,mem_le_scan_enable -0x55ea 022414 rtnne le_scan_enable -0x55eb 022415 arg le_scan_interval_timer ,queue -0x55ec 022416 call timer_check -0x55ed 022417 nrtn blank -0x55ee 022418 fetch 2 ,mem_le_scan_interval -0x55ef 022419 fetcht 2 ,mem_le_scan_window -0x55f0 022420 isub temp ,pdata -0x55f1 022421 arg le_scan_interval_timer ,queue -0x55f2 022422 call timer_init -0x55f3 022423 disable master -0x55f4 022424 call le_init_adv -0x55f5 022425 call le_wait_adv -0x55f6 022426 nrtn match -0x55f7 022427 bpatchx patch2b_7 ,mem_patch2b -0x55f8 022428 fetch 6 ,mem_le_rxbuf + 2 -0x55f9 022429 store 6 ,mem_le_plap -0x55fa 022432 fetch 1 ,mem_le_adv_rcv -0x55fb 022433 increase 1 ,pdata -0x55fc 022434 store 1 ,mem_le_adv_rcv -0x55fd 022435 call le_create_conn -0x55fe 022436 rtn master -0x55ff 022437 call le_send_scan_request -0x5600 022438 nrtn match -0x5601 022439 bpatchx patch2c_0 ,mem_patch2c -0x5602 022440 fetch 1 ,mem_le_scanrsp_rcv -0x5603 022441 increase 1 ,pdata -0x5604 022442 store 1 ,mem_le_scanrsp_rcv -0x5605 022443 fetch 9 ,mem_le_rxbuf + 8 -0x5606 022444 store 9 ,mem_tmp_buffer -0x5607 022445 rtn -: 022447 le_create_conn: -0x5608 022448 bpatchx patch2c_1 ,mem_patch2c -0x5609 022449 fetch 1 ,mem_cmd_le_create_conn -0x560a 022450 rtnne hci_cmd_le_create_conn -0x560b 022451 fetch 6 ,mem_le_plap -0x560c 022452 fetcht 6 ,mem_le_conn_peer_addr -0x560d 022453 isub temp ,null -0x560e 022454 nrtn zero -0x560f 022455 call context_new -0x5610 022456 nrtn zero -0x5611 022457 call le_connect_request -0x5612 022458 call le_init_master -0x5613 022459 bpatchx patch2c_2 ,mem_patch2c -0x5614 022460 jam 0 ,mem_hci_cmd -0x5615 022461 jam 0 ,mem_le_peer_sca -0x5616 022462 jam 0 ,mem_le_scan_enable -0x5617 022463 jam 0 ,mem_cmd_le_create_conn -0x5618 022464 branch context_save -: 022466 le_scan_check_sender_addr_type: -0x5619 022467 arg 1 ,rega -0x561a 022468 fetch 1 ,mem_le_rxbuf -0x561b 022469 rtnbit1 le_sender_addr_bit -0x561c 022470 arg 0 ,rega -0x561d 022471 rtn -: 022475 le_prepare_tx: -0x561e 022476 bpatchx patch2c_3 ,mem_patch2c -0x561f 022477 fetch 1 ,mem_le_arq -0x5620 022478 rtnbit1 wak -0x5621 022479 call le_check_tx_md -0x5622 022480 call le_fifo_get_first_tx_ptr -0x5623 022481 branch le_send_empty ,blank -0x5624 022482 ifetch 1 ,contr -0x5625 022483 ifetcht 1 ,contr -0x5626 022484 copy temp ,rega -0x5627 022485 isub rega ,pdata -0x5628 022486 arg le_max_paket_len ,temp -0x5629 022487 call not_greater_than -0x562a 022488 copy pdata ,temp -0x562b 022489 ifetch 1 ,contr -0x562c 022490 copy pdata ,type -0x562d 022491 copy rega ,pdata -0x562e 022492 iadd contr ,contr -0x562f 022493 arg mem_le_txpayload ,contw -0x5630 022494 copy temp ,loopcnt -0x5631 022495 call memcpy -0x5632 022496 call le_update_tx_type -0x5633 022497 call le_send_packet -0x5634 022499 call le_fifo_get_first_tx_ptr -0x5635 022500 ifetch 1 ,contr -0x5636 022501 copy pdata ,rega -0x5637 022502 copy contr ,regc -0x5638 022503 ifetcht 1 ,contr -0x5639 022504 copy temp ,regb -0x563a 022505 isub regb ,pdata -0x563b 022506 arg le_max_paket_len ,temp -0x563c 022507 call not_greater_than -0x563d 022508 iadd regb ,pdata -0x563e 022509 istore 1 ,regc -0x563f 022510 isub rega ,null -0x5640 022511 nrtn zero -0x5641 022512 branch le_fifo_release_first_node -: 022515 le_check_tx_md: -0x5642 022516 call le_check_continue -0x5643 022517 rtnmark1 mark_ble_tx_md -0x5644 022518 fetch 1 ,mem_le_configuration -0x5645 022519 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md -0x5646 022520 call le_fifo_get_second_tx_ptr -0x5647 022521 branch le_clear_md ,blank -0x5648 022522 branch le_set_md -: 022525 le_check_continue: -0x5649 022526 call le_fifo_get_first_tx_ptr -0x564a 022527 branch le_clear_md ,blank -0x564b 022528 ifetch 1 ,contr -0x564c 022529 ifetcht 1 ,contr -0x564d 022530 isub temp ,pdata -0x564e 022531 sub pdata ,le_max_paket_len ,null -0x564f 022532 branch le_clear_md ,positive -: 022533 le_set_md: -0x5650 022534 set1 mark_ble_tx_md ,mark -0x5651 022535 rtn -: 022537 le_clear_md: -0x5652 022538 set0 mark_ble_tx_md ,mark -0x5653 022539 rtn -: 022541 le_update_tx_type: -0x5654 022542 copy rega ,pdata -0x5655 022543 rtn blank -0x5656 022544 arg llid_continue ,type -0x5657 022545 rtn -: 022548 le_att_check_notification_enable: -0x5658 022549 bpatchx patch2c_4 ,mem_patch2c -0x5659 022550 increase 1 ,temp -0x565a 022551 call le_att_get_handle_ptr -0x565b 022552 increase -2 ,contr -0x565c 022553 ifetch 2 ,contr -0x565d 022554 arg client_charactertic_configuration ,temp -0x565e 022555 isub temp ,null -0x565f 022556 nrtn zero -0x5660 022557 increase 1 ,contr -0x5661 022558 copy contr ,rega -0x5662 022559 ifetch 1 ,contr -0x5663 022560 rtn -: 022563 le_send_empty: -0x5664 022564 force 0 ,temp -0x5665 022565 force 1 ,type -: 022567 le_send_packet: -0x5666 022568 bpatchx patch2c_5 ,mem_patch2c -0x5667 022569 storet 1 ,mem_le_txlen -0x5668 022570 fetcht 1 ,mem_le_arq -0x5669 022571 set1 wak ,temp -0x566a 022572 and temp ,0xfc ,pdata -0x566b 022573 ior type ,pdata -0x566c 022574 store 1 ,mem_le_arq -0x566d 022575 and_into 0x1f ,pdata -0x566e 022576 isolate1 mark_ble_tx_md ,mark -0x566f 022577 setflag true ,md ,pdata -0x5670 022578 store 1 ,mem_le_txheader -0x5671 022580 fetch 1 ,mem_le_txheader -0x5672 022581 compare 1 ,type ,3 -0x5673 022582 nbranch le_send_no_txlen ,true -0x5674 022583 fetch 1 ,mem_le_txlen -0x5675 022584 rtn blank -: 022585 le_send_no_txlen: -0x5676 022586 fetch 1 ,mem_le_state -0x5677 022587 rtnbit0 lestate_encryption -0x5678 022588 call load_sk -0x5679 022589 branch le_encrypt -: 022592 get_lpm_wake_ble_rx_lock: -0x567a 022593 arg wake_lock_ble_rx ,queue -0x567b 022594 branch lpm_get_wake_lock -: 022596 put_lpm_wake_ble_rx_lock: -0x567c 022597 arg wake_lock_ble_rx ,queue -0x567d 022598 branch lpm_put_wake_lock -: 022601 le_parse: -0x567e 022602 bpatchx patch2c_6 ,mem_patch2c -0x567f 022603 rtnmark1 mark_old_packet -0x5680 022604 call le_fifo_check_full -0x5681 022605 nrtn blank -0x5682 022606 fetch 1 ,mem_le_rxbuf -0x5683 022607 and pdata ,0x3 ,pdata -0x5684 022608 store 1 ,mem_le_packet_llid -0x5685 022609 ifetch 1 ,contr -0x5686 022610 and pdata ,0x1f ,pdata -0x5687 022611 store 1 ,mem_le_packet_size -0x5688 022612 rtn blank -0x5689 022613 copy contr ,pdata -0x568a 022614 store 2 ,mem_le_payload_ptr -0x568b 022615 fetch 1 ,mem_le_packet_llid -0x568c 022616 beq llid_le_ll ,le_parse_ll -: 022617 le_parse_l2cap: -0x568d 022618 call le_check_l2cap_complete -0x568e 022619 nbranch get_lpm_wake_ble_rx_lock ,user -0x568f 022620 call put_lpm_wake_ble_rx_lock -0x5690 022621 fetch 2 ,mem_le_payload_ptr -0x5691 022622 copy pdata ,contr -0x5692 022623 ifetch 2 ,contr -0x5693 022624 store 2 ,mem_le_l2cap_size -0x5694 022625 bpatchx patch2c_7 ,mem_patch2c -0x5695 022626 ifetch 2 ,contr -0x5696 022627 beq le_l2cap_cid_att ,le_parse_att -0x5697 022628 beq le_l2cap_cid_smp ,le_parse_smp -0x5698 022629 beq le_l2cap_cid_signal ,le_parse_signaling -0x5699 022630 rtn -: 022633 le_check_l2cap_complete: -0x569a 022634 fetch 1 ,mem_le_packet_llid -0x569b 022635 beq llid_start ,le_check_l2cap_llid_start -0x569c 022636 beq llid_continue ,le_check_l2cap_llid_continue -0x569d 022637 rtn -: 022642 le_check_l2cap_cid_legal: -0x569e 022643 call enable_user -0x569f 022644 arg le_l2cap_cid_att ,temp -0x56a0 022645 isub pdata ,null -0x56a1 022646 rtn zero -0x56a2 022647 arg le_l2cap_cid_signal ,temp -0x56a3 022648 isub pdata ,null -0x56a4 022649 rtn zero -0x56a5 022650 arg le_l2cap_cid_smp ,temp -0x56a6 022651 isub pdata ,null -0x56a7 022652 rtn zero -0x56a8 022653 branch disable_user -: 022656 le_check_l2cap_llid_start: -0x56a9 022657 fetch 2 ,mem_le_payload_ptr -0x56aa 022658 copy pdata ,contr -0x56ab 022659 ifetch 2 ,contr -0x56ac 022660 store 2 ,mem_le_l2cap_size -0x56ad 022661 ifetch 2 ,contr -0x56ae 022662 call le_check_l2cap_cid_legal -0x56af 022663 nrtn user -0x56b0 022664 fetcht 1 ,mem_le_packet_size -0x56b1 022665 storet 1 ,mem_le_packet_len_recved -0x56b2 022666 fetch 2 ,mem_le_l2cap_size -0x56b3 022667 increase 4 ,pdata -0x56b4 022668 isub temp ,null -0x56b5 022669 branch enable_user ,zero -0x56b6 022670 fetch 1 ,mem_le_packet_size -0x56b7 022671 copy pdata ,loopcnt -0x56b8 022672 arg mem_le_l2capbuf ,contw -0x56b9 022673 fetch 2 ,mem_le_payload_ptr -0x56ba 022674 copy pdata ,contr -0x56bb 022675 call memcpy -0x56bc 022676 branch disable_user -: 022681 le_check_l2cap_continue_legal: -0x56bd 022682 call enable_user -0x56be 022683 fetch 1 ,mem_le_packet_len_recved -0x56bf 022684 nrtn blank -0x56c0 022685 branch disable_user -: 022687 le_check_l2cap_llid_continue: -0x56c1 022688 call le_check_l2cap_continue_legal -0x56c2 022689 nrtn user -0x56c3 022690 fetch 1 ,mem_le_packet_len_recved -0x56c4 022691 arg mem_le_l2capbuf ,contw -0x56c5 022692 iadd contw ,rega -0x56c6 022693 fetcht 1 ,mem_le_packet_size -0x56c7 022694 iadd temp ,pdata -0x56c8 022695 store 1 ,mem_le_packet_len_recved -0x56c9 022696 fetch 1 ,mem_le_packet_size -0x56ca 022697 copy pdata ,loopcnt -0x56cb 022698 copy rega ,contw -0x56cc 022699 fetch 2 ,mem_le_payload_ptr -0x56cd 022700 copy pdata ,contr -0x56ce 022701 call memcpy_fast -0x56cf 022702 setarg mem_le_l2capbuf -0x56d0 022703 store 2 ,mem_le_payload_ptr -0x56d1 022704 fetch 2 ,mem_le_l2cap_size -0x56d2 022705 increase 4 ,pdata -0x56d3 022706 fetcht 1 ,mem_le_packet_len_recved -0x56d4 022707 isub temp ,null -0x56d5 022708 branch enable_user ,zero -0x56d6 022709 branch disable_user -: 022715 le_get_search_att_type: -0x56d7 022716 call store_contr -0x56d8 022717 arg mem_le_search_att_type_length ,contw -: 022718 le_get_search_common: -0x56d9 022719 fetch 2 ,mem_le_l2cap_size -0x56da 022720 increase -5 ,pdata -: 022721 le_get_search_common2: -0x56db 022722 istore 1 ,contw -0x56dc 022723 copy pdata ,loopcnt -0x56dd 022724 call get_contr -0x56de 022725 branch memcpy_fast -: 022727 le_get_search_att_uuid: -0x56df 022728 call store_contr -0x56e0 022729 arg mem_le_search_uuid_length ,contw -0x56e1 022730 branch le_get_search_common -: 022734 le_writeatt_cb: -0x56e2 022735 fetch 2 ,mem_cb_att_write -0x56e3 022736 branch callback_func -: 022738 le_supervision_update: -0x56e4 022739 fetcht 4 ,mem_le_supervision_timer -0x56e5 022740 call get_clkbt -0x56e6 022741 isub temp ,timeup -0x56e7 022742 deposit timeup -0x56e8 022743 fetcht 2 ,mem_le_superto -0x56e9 022744 lshift4 temp ,temp -0x56ea 022745 lshift temp ,temp -0x56eb 022746 isub temp ,pdata -0x56ec 022747 rtn -: 022749 le_supervision_flush: -0x56ed 022750 call get_clkbt -0x56ee 022751 store 4 ,mem_le_supervision_timer -0x56ef 022752 rtn -: 022755 le_adv: -0x56f0 022756 jam 36 ,mem_le_ch_mapped -0x56f1 022757 jam 0 ,mem_le_adv_channel_map_temp -: 022758 le_adv_loop: -0x56f2 022759 bpatchx patch2d_0 ,mem_patch2d -0x56f3 022760 fetch 1 ,mem_le_adv_enable -0x56f4 022761 rtn blank -0x56f5 022762 arg le_adv_interval_timer ,queue -0x56f6 022763 call timer_check -0x56f7 022764 nrtn blank -0x56f8 022765 bpatchx patch2d_1 ,mem_patch2d -: 022766 le_adv_loop_tx: -0x56f9 022767 disable master -0x56fa 022768 enable swfine -0x56fb 022769 call le_init_adv -0x56fc 022770 call le_next_adv_channel -0x56fd 022771 call le_send_adv_ind -0x56fe 022772 nbranch le_adv_not_match ,match -0x56ff 022773 fetch 1 ,mem_le_req_rcv -0x5700 022774 increase 1 ,pdata -0x5701 022775 store 1 ,mem_le_req_rcv -0x5702 022776 fetch 1 ,mem_le_rxbuf -0x5703 022777 and pdata ,0x0f ,pdata -0x5704 022778 beq scan_req ,le_send_scan_response -0x5705 022779 beq connect_req ,le_parse_connect_req -: 022780 le_adv_not_match: -0x5706 022781 bpatchx patch2d_2 ,mem_patch2d -0x5707 022782 random pdata -0x5708 022783 arg 0x1ff ,temp -0x5709 022784 iand temp ,pdata -0x570a 022785 add pdata ,250 ,pdata -0x570b 022786 call delay -0x570c 022787 fetch 1 ,mem_le_adv_channel_map_temp -0x570d 022788 fetcht 1 ,mem_le_adv_channel_map -0x570e 022789 isub temp ,null -0x570f 022790 nbranch le_adv_loop ,zero -0x5710 022791 arg le_adv_interval_timer ,queue -0x5711 022792 fetch 2 ,mem_le_adv_interval -0x5712 022793 branch timer_init -: 022796 le_receive_window_size: -0x5713 022797 bpatchx patch2d_3 ,mem_patch2d -0x5714 022798 fetch 1 ,mem_le_peer_sca -0x5715 022799 call le_sca_map -0x5716 022800 fetch 2 ,mem_le_tsniff -0x5717 022801 imul32 temp ,pdata -0x5718 022802 arg 375 ,temp -0x5719 022803 imul32 temp ,pdata -0x571a 022804 arg 100000 ,temp -0x571b 022805 idiv temp -0x571c 022806 fetch 1 ,mem_le_window_size -0x571d 022807 arg 20000 ,temp -0x571e 022808 imul32 temp ,pdata -0x571f 022809 iadd temp ,pdata -0x5720 022810 store 4 ,mem_le_transmit_window -0x5721 022811 bpatchx patch2d_4 ,mem_patch2d -0x5722 022812 fetch 2 ,mem_rx_window_sniff -0x5723 022813 call wait_div_end -0x5724 022814 quotient temp -0x5725 022815 iadd temp ,pdata -0x5726 022816 store 2 ,mem_le_receive_window -0x5727 022817 rtn -: 022819 le_parse_connect_req: -0x5728 022820 bpatchx patch2d_5 ,mem_patch2d -0x5729 022821 fetch 6 ,mem_le_rxbuf + 8 -0x572a 022822 fetcht 6 ,mem_le_lap -0x572b 022823 isub temp ,null -0x572c 022824 nrtn zero -0x572d 022825 call le_scan_check_sender_addr_type -0x572e 022826 copy rega ,pdata -0x572f 022827 store 1 ,mem_le_conn_peer_addr_type -0x5730 022828 fetch 7 ,mem_le_rxbuf + 21 -0x5731 022829 store 7 ,mem_tmp_buffer -0x5732 022830 ifetch 8 ,contr -0x5733 022831 istore 8 ,contw -0x5734 022832 fetch 6 ,mem_le_rxbuf + 2 -0x5735 022833 store 6 ,mem_le_plap -0x5736 022834 increase 6 ,contr -0x5737 022835 ifetch 8 ,contr -0x5738 022836 store 8 ,mem_le_access -0x5739 022837 ifetcht 2 ,contr -0x573a 022838 bpatchx patch2d_6 ,mem_patch2d -0x573b 022839 lshift2 temp ,temp -0x573c 022840 ifetch 2 ,contr -0x573d 022841 lshift2 pdata ,pdata -0x573e 022842 store 2 ,mem_le_tsniff -0x573f 022843 store 4 ,mem_le_anchor -0x5740 022844 isub temp ,pdata -0x5741 022845 add pdata ,-2 ,clke_bt -0x5742 022846 ifetch 9 ,contr -0x5743 022847 store 9 ,mem_le_slave_latency -0x5744 022848 bpatchx patch2d_7 ,mem_patch2d -0x5745 022849 ifetch 1 ,contr -0x5746 022850 rshift4 pdata ,temp -0x5747 022851 rshift temp ,temp -0x5748 022852 storet 1 ,mem_le_peer_sca -0x5749 022853 and_into 0x1f ,pdata -0x574a 022854 store 1 ,mem_le_hop -0x574b 022855 call le_receive_window_size -0x574c 022856 call le_calc_channel_map -0x574d 022857 call le_init_slave -0x574e 022858 call context_new -0x574f 022859 nrtn zero -0x5750 022860 bpatchx patch2e_0 ,mem_patch2e -0x5751 022861 call calc_clke_offset -0x5752 022862 call le_l2cap_reset_signaling_identifier -0x5753 022863 jam bt_evt_le_connected ,mem_fifo_temp -0x5754 022864 call ui_ipc_send_event -0x5755 022865 branch context_save -: 022868 le_init_attlist_search: -0x5756 022869 bpatchx patch2e_1 ,mem_patch2e -0x5757 022870 fetch 2 ,mem_le_search_handle_start -0x5758 022871 iforce regb -0x5759 022872 fetch 2 ,mem_le_search_handle_end -0x575a 022873 iforce regc -0x575b 022874 fetch 2 ,mem_ui_le_uuid_table -0x575c 022875 iforce contr -0x575d 022876 enable user -0x575e 022877 rtn -: 022880 le_att_handle_inrange: -0x575f 022881 ifetch 2 ,contr -0x5760 022882 rtn blank -0x5761 022883 isub regb ,null -0x5762 022884 nrtn positive -0x5763 022885 isub regc ,null -0x5764 022886 rtn zero -0x5765 022887 branch le_att_handle_blank ,positive -0x5766 022888 force 1 ,null -0x5767 022889 rtn -: 022890 le_att_handle_blank: -0x5768 022891 force 0 ,pdata -0x5769 022892 rtn -: 022896 le_att_get_handle_ptr: -0x576a 022897 call le_att_get_handle_ptr2 -0x576b 022898 branch le_att_get_handle_ptr_found ,zero -0x576c 022899 rtn -: 022901 le_att_get_handle_ptr2: -0x576d 022902 bpatchx patch2e_2 ,mem_patch2e -0x576e 022903 fetch 2 ,mem_ui_le_uuid_table -0x576f 022904 iforce contr -: 022905 le_att_get_handle_loop1: -0x5770 022906 ifetch 2 ,contr -0x5771 022907 rtn blank -0x5772 022908 isub temp ,null -0x5773 022909 rtn zero -0x5774 022910 ifetch 1 ,contr -0x5775 022911 iadd contr ,contr -0x5776 022912 ifetch 1 ,contr -0x5777 022913 iadd contr ,contr -0x5778 022914 branch le_att_get_handle_loop1 -: 022915 le_att_get_handle_ptr_found: -0x5779 022916 ifetch 1 ,contr -0x577a 022917 iadd contr ,contr -0x577b 022918 rtn -: 022922 le_att_get_short_uuid_ptr: -0x577c 022923 bpatchx patch2e_3 ,mem_patch2e -0x577d 022924 fetch 2 ,mem_ui_le_uuid_table -0x577e 022925 iforce contr -: 022926 le_att_get_short_uuid_loop: -0x577f 022927 ifetch 2 ,contr -0x5780 022928 rtn blank -0x5781 022929 ifetch 1 ,contr -0x5782 022930 iadd contr ,contr -0x5783 022931 increase -2 ,contr -0x5784 022932 ifetch 2 ,contr -0x5785 022933 isub temp ,null -0x5786 022934 rtn zero -0x5787 022935 ifetch 1 ,contr -0x5788 022936 iadd contr ,contr -0x5789 022937 branch le_att_get_short_uuid_loop -: 022941 le_att_get_handle_info_from_ptr: -0x578a 022942 fetch 2 ,mem_le_cur_attlist_start_ptr -0x578b 022943 branch le_att_get_handle_info_fast -: 022945 le_att_get_handle_info: -0x578c 022946 bpatchx patch2e_4 ,mem_patch2e -0x578d 022947 fetch 2 ,mem_ui_le_uuid_table -: 022948 le_att_get_handle_info_fast: -0x578e 022949 iforce contr -0x578f 022950 copy temp ,rega -: 022951 le_att_get_handle_loop: -0x5790 022952 ifetch 2 ,contr -0x5791 022953 branch le_att_unfind_handle ,blank -0x5792 022954 isub rega ,null -0x5793 022955 branch le_att_finded_handle ,zero -0x5794 022956 ifetch 1 ,contr -0x5795 022957 iadd contr ,contr -0x5796 022958 ifetch 1 ,contr -0x5797 022959 iadd contr ,contr -0x5798 022960 branch le_att_get_handle_loop -: 022961 le_att_unfind_handle: -0x5799 022962 branch disable_blank -: 022964 le_att_finded_handle: -0x579a 022965 ifetch 1 ,contr -0x579b 022966 store 1 ,mem_le_cur_uuid_length -0x579c 022967 copy pdata ,loopcnt -0x579d 022968 arg mem_le_cur_uuid ,contw -0x579e 022969 call memcpy_fast -0x579f 022970 ifetch 1 ,contr -0x57a0 022971 store 1 ,mem_le_curr_att_len -0x57a1 022972 call store_contr -0x57a2 022973 branch enable_blank -: 022976 le_modified_name: -0x57a3 022977 bpatchx patch2e_5 ,mem_patch2e -0x57a4 022978 call le_modified_name_att_list -0x57a5 022979 branch le_modified_name_adv -: 022981 le_modified_name_att_list: -0x57a6 022982 arg uuid_chrctr_device_name ,temp -0x57a7 022983 call le_att_get_short_uuid_ptr -0x57a8 022984 rtn blank -0x57a9 022985 ifetch 1 ,contr -0x57aa 022986 copy contr ,contw -0x57ab 022987 fetcht 1 ,mem_le_name_len -0x57ac 022988 copy temp ,loopcnt -0x57ad 022989 isub temp ,null -0x57ae 022990 nbranch le_name_length_longer_than_att ,positive -0x57af 022991 isub temp ,temp -0x57b0 022992 arg mem_le_name ,contr -0x57b1 022993 call memcpy -0x57b2 022994 copy temp ,loopcnt -0x57b3 022995 ncall memcpy_empty ,zero -0x57b4 022996 rtn -: 022997 le_name_length_longer_than_att: -0x57b5 022998 copy pdata ,loopcnt -0x57b6 022999 arg mem_le_name ,contr -0x57b7 023000 branch memcpy_fast -: 023003 le_modified_name_adv: -0x57b8 023004 arg mem_le_adv_data_len + 32 ,regc -0x57b9 023005 arg mem_le_adv_data ,rega -0x57ba 023006 call le_modified_name_adv_and_scan -0x57bb 023007 setarg 0 -0x57bc 023008 setflag user ,0 ,pdata -0x57bd 023009 store 1 ,mem_pdatatemp -0x57be 023010 arg mem_le_scan_data_len + 32 ,regc -0x57bf 023011 arg mem_le_scan_data ,rega -0x57c0 023012 call le_modified_name_adv_and_scan -0x57c1 023013 rtn user -0x57c2 023014 fetch 1 ,mem_pdatatemp -0x57c3 023015 branch assert ,blank -0x57c4 023016 rtn -: 023019 le_modified_name_adv_and_scan: -0x57c5 023020 bpatchx patch2e_6 ,mem_patch2e -0x57c6 023021 call enable_user -0x57c7 023022 call clear_temp_block -0x57c8 023023 arg 0 ,regb -0x57c9 023024 arg mem_le_data_temp ,contw -0x57ca 023025 call le_modified_name_adv_loop -0x57cb 023026 fetch 1 ,mem_le_name_len -0x57cc 023027 add pdata ,1 ,temp -0x57cd 023028 iadd regb ,rega -0x57ce 023029 increase 2 ,rega -0x57cf 023030 sub rega ,0x1f ,null -0x57d0 023031 nbranch le_modified_name_adv_and_scan_name_overflow ,positive -0x57d1 023032 istoret 1 ,contw -0x57d2 023033 arg gap_adtype_local_name_complete ,temp -0x57d3 023034 istoret 1 ,contw -0x57d4 023035 iforce loopcnt -0x57d5 023036 call memcpy_fast -0x57d6 023037 copy rega ,regb -: 023038 le_modified_name_adv_and_scan_store_data: -0x57d7 023039 deposit regb -0x57d8 023040 store 1 ,mem_le_data_len_temp -0x57d9 023041 arg mem_le_data_len_temp ,contr -0x57da 023042 setarg -32 -0x57db 023043 iadd regc ,contw -0x57dc 023044 branch memcpy32 -: 023046 le_modified_name_adv_and_scan_name_overflow: -0x57dd 023047 call disable_user -0x57de 023048 branch le_modified_name_adv_and_scan_store_data -: 023050 le_modified_name_adv_loop: -0x57df 023051 ifetch 1 ,rega -0x57e0 023052 rtn blank -0x57e1 023053 pincrease 1 -0x57e2 023054 ifetcht 1 ,contr -0x57e3 023055 sub temp ,gap_adtype_local_name_complete ,null -0x57e4 023056 branch le_modified_name_adv_found_name ,zero -0x57e5 023057 iadd regb ,regb -0x57e6 023058 copy rega ,contr -0x57e7 023059 iforce loopcnt -0x57e8 023060 call memcpy_fast -0x57e9 023061 copy contr ,rega -: 023062 le_modified_name_adv_loop2: -0x57ea 023063 deposit rega -0x57eb 023064 isub regc ,null -0x57ec 023065 rtn positive -0x57ed 023066 branch le_modified_name_adv_loop -: 023068 le_modified_name_adv_found_name: -0x57ee 023069 iadd rega ,rega -0x57ef 023070 branch le_modified_name_adv_loop2 -: 023073 memcpy_empty: -0x57f0 023074 setarg space -0x57f1 023075 istore 1 ,contw -0x57f2 023076 loop memcpy_empty -0x57f3 023077 rtn -: 023080 le_lpm_set_mult: -0x57f4 023081 bpatchx patch2e_7 ,mem_patch2e -0x57f5 023082 disable wake -0x57f6 023083 branch le_lpm_set_mult_attempt ,attempt -0x57f7 023084 nbranch le_lpm_lost ,match -: 023085 le_lpm_set_mult_attempt: -0x57f8 023086 call lpm_match -0x57f9 023087 fetch 2 ,mem_rx_window_sniff -0x57fa 023088 store 2 ,mem_le_receive_window -0x57fb 023090 nbranch lpm_mult_short ,match -0x57fc 023091 bmark1 mark_old_packet ,lpm_mult_short -0x57fd 023093 fetch 1 ,mem_le_packet_size -0x57fe 023094 nbranch lpm_mult_short ,blank -0x57ff 023095 fetch 1 ,mem_le_txlen -0x5800 023096 nbranch lpm_mult_short ,blank -0x5801 023098 fetch 1 ,mem_le_configuration -0x5802 023099 bbit1 bit_ble_short_mult ,lpm_mult_short -0x5803 023101 fetch 1 ,mem_le_state -0x5804 023102 bbit1 lestate_update_param ,lpm_mult_short -0x5805 023103 branch lpm_mult_wait_timeout -: 023105 le_lpm_lost: -0x5806 023106 fetcht 2 ,mem_rx_window_sniff -0x5807 023107 rshift temp ,temp -0x5808 023108 fetch 2 ,mem_le_receive_window -0x5809 023109 iadd temp ,pdata -0x580a 023110 store 2 ,mem_le_receive_window -0x580b 023111 branch lpm_lost -: 023114 le_set_config_fixed_tk: -0x580c 023115 arg bit_ble_passkey_fixed_key ,queue -0x580d 023116 branch le_set_config -: 023118 le_clr_config_fixed_tk: -0x580e 023119 arg bit_ble_passkey_fixed_key ,queue -0x580f 023120 branch le_clr_config -: 023122 le_set_config_fixed_ltk: -0x5810 023123 arg bit_ble_pairing_fixed_ltk ,queue -0x5811 023124 branch le_set_config -: 023126 le_clr_config_fixed_ltk: -0x5812 023127 arg bit_ble_pairing_fixed_ltk ,queue -0x5813 023128 branch le_clr_config -: 023130 le_set_config_more_data: -0x5814 023131 arg bit_ble_transmit_packet_by_md ,queue -0x5815 023132 branch le_set_config -: 023134 le_clr_config_more_data: -0x5816 023135 arg bit_ble_transmit_packet_by_md ,queue -0x5817 023136 branch le_clr_config -: 023138 le_set_config_read_authentication: -0x5818 023139 arg bit_ble_read_auth ,queue -0x5819 023140 branch le_set_config -: 023142 le_clr_config_read_authentication: -0x581a 023143 arg bit_ble_read_auth ,queue -0x581b 023144 branch le_clr_config -: 023146 le_set_config_write_authentication: -0x581c 023147 arg bit_ble_write_auth ,queue -0x581d 023148 branch le_set_config -: 023150 le_clr_config_write_authentication: -0x581e 023151 arg bit_ble_write_auth ,queue -0x581f 023152 branch le_clr_config -: 023154 le_set_config_short_mult: -0x5820 023155 arg bit_ble_short_mult ,queue -0x5821 023156 branch le_set_config -: 023158 le_clr_config_short_mult: -0x5822 023159 arg bit_ble_short_mult ,queue -0x5823 023160 branch le_clr_config -: 023163 le_set_config: -0x5824 023164 fetch 1 ,mem_le_configuration -0x5825 023165 qset1 pdata -0x5826 023166 store 1 ,mem_le_configuration -0x5827 023167 rtn -: 023169 le_clr_config: -0x5828 023170 fetch 1 ,mem_le_configuration -0x5829 023171 qset0 pdata -0x582a 023172 store 1 ,mem_le_configuration -0x582b 023173 rtn -: 023175 le_set_fixed_ltk: -0x582c 023176 setarg 0x112233 -0x582d 023177 store 3 ,mem_le_fixed_ltk -0x582e 023178 setarg 0x445566 -0x582f 023179 istore 3 ,contw -0x5830 023180 setarg 0x778899 -0x5831 023181 istore 3 ,contw -0x5832 023182 setarg 0x001122 -0x5833 023183 istore 3 ,contw -0x5834 023184 setarg 0x334455 -0x5835 023185 istore 3 ,contw -0x5836 023186 setarg 0x66 -0x5837 023187 istore 1 ,contw -0x5838 023188 rtn -: 023191 le_set_justwork: -0x5839 023192 setarg 0x01000302 -0x583a 023193 store 4 ,mem_le_pres -0x583b 023194 setarg 0x010010 -0x583c 023195 store 3 ,mem_le_pres_max_keysize -0x583d 023196 jam 1 ,mem_le_pairing_mode -0x583e 023197 rtn -: 023201 le_fifo_malloc_tx_empty: -0x583f 023202 arg 0 ,rega -0x5840 023203 arg llid_empty ,type -0x5841 023204 branch le_fifo_malloc_tx -: 023208 le_fifo_malloc_tx_ll: -0x5842 023209 arg llid_le_ll ,type -0x5843 023210 call le_fifo_malloc_tx -0x5844 023211 copy regb ,pdata -0x5845 023212 istore 1 ,contw -0x5846 023213 rtn -: 023217 le_fifo_malloc_tx_l2cap: -0x5847 023218 force llid_l2cap_start ,type -0x5848 023219 increase 4 ,rega -0x5849 023220 call le_fifo_malloc_tx -0x584a 023221 increase -4 ,rega -0x584b 023222 copy rega ,pdata -0x584c 023223 istore 2 ,contw -0x584d 023224 copy regb ,pdata -0x584e 023225 istore 2 ,contw -0x584f 023226 rtn -: 023230 le_fifo_malloc_tx: -0x5850 023231 sub rega ,240 ,null -0x5851 023232 nbranch assert ,positive -0x5852 023233 fetch 1 ,mem_le_tx_buff_used -0x5853 023234 arg 1 ,temp -0x5854 023235 arg le_tx_buff_count ,loopcnt -: 023236 le_fifo_malloc_tx_loop: -0x5855 023237 iand temp ,null -0x5856 023238 branch le_fifo_malloc_tx_got_empty ,zero -0x5857 023239 lshift temp ,temp -0x5858 023240 loop le_fifo_malloc_tx_loop -0x5859 023241 branch assert -: 023242 le_fifo_malloc_tx_got_empty: -0x585a 023243 ixor temp ,pdata -0x585b 023244 store 1 ,mem_le_tx_buff_used -0x585c 023245 sub loopcnt ,le_tx_buff_count ,pdata -0x585d 023246 lshift4 pdata ,pdata -0x585e 023247 lshift4 pdata ,pdata -0x585f 023248 arg mem_le_tx_buffer0 ,temp -0x5860 023249 iadd temp ,temp -: 023250 le_fifo_tx_find_empty_ptr: -0x5861 023251 arg 0 ,loopcnt -0x5862 023252 arg mem_le_tx_ptr0 ,contr -: 023253 le_fifo_tx_find_empty_ptr_loop: -0x5863 023254 ifetch 2 ,contr -0x5864 023255 branch le_fifo_tx_found_empty_ptr ,blank -0x5865 023256 copy loopcnt ,pdata -0x5866 023257 increase 1 ,loopcnt -0x5867 023258 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop -0x5868 023259 branch assert -: 023262 le_fifo_tx_found_empty_ptr: -0x5869 023263 increase -2 ,contr -0x586a 023264 istoret 2 ,contr -0x586b 023265 copy temp ,contw -0x586c 023266 copy rega ,pdata -0x586d 023267 istore 1 ,contw -0x586e 023268 setarg 0 -0x586f 023269 istore 1 ,contw -0x5870 023270 copy type ,pdata -0x5871 023271 istore 1 ,contw -0x5872 023272 rtn -: 023276 le_fifo_get_first_tx_ptr: -0x5873 023277 fetch 2 ,mem_le_tx_ptr0 -0x5874 023278 copy pdata ,contr -0x5875 023279 rtn -: 023281 le_fifo_get_second_tx_ptr: -0x5876 023282 fetch 2 ,mem_le_tx_ptr1 -0x5877 023283 copy pdata ,contr -0x5878 023284 rtn -: 023286 le_fifo_get_last_tx_ptr: -0x5879 023287 call le_fifo_get_last_tx_ptr0 -0x587a 023288 copy pdata ,contr -0x587b 023289 rtn -: 023290 le_fifo_get_last_tx_ptr0: -0x587c 023291 fetch 2 ,mem_le_tx_ptr3 -0x587d 023292 nrtn blank -0x587e 023293 fetch 2 ,mem_le_tx_ptr2 -0x587f 023294 nrtn blank -0x5880 023295 fetch 2 ,mem_le_tx_ptr1 -0x5881 023296 nrtn blank -0x5882 023297 fetch 2 ,mem_le_tx_ptr0 -0x5883 023298 rtn -: 023300 le_fifo_get_first_l2cap_ptr: -0x5884 023301 call le_fifo_get_first_tx_ptr -0x5885 023302 increase 3 ,contr -0x5886 023303 rtn -: 023305 le_fifo_get_first_att_ptr: -0x5887 023306 call le_fifo_get_first_tx_ptr -0x5888 023307 increase 7 ,contr -0x5889 023308 rtn -: 023310 le_fifo_get_last_att_ptr: -0x588a 023311 call le_fifo_get_last_tx_ptr -0x588b 023312 increase 7 ,contr -0x588c 023313 rtn -: 023315 le_fifo_get_last_l2cap_ptr: -0x588d 023316 call le_fifo_get_last_tx_ptr -0x588e 023317 increase 3 ,contr -0x588f 023318 rtn -: 023322 le_fifo_check_full: -0x5890 023323 fetch 2 ,mem_le_tx_ptr3 -0x5891 023324 rtn -: 023327 le_fifo_check_nearly_full: -0x5892 023328 fetch 2 ,mem_le_tx_ptr2 -0x5893 023329 rtn -: 023332 le_fifo_check_empty: -0x5894 023333 fetch 2 ,mem_le_tx_ptr0 -0x5895 023334 rtn -: 023337 le_fifo_release_first_node: -0x5896 023338 fetch 2 ,mem_le_tx_ptr0 -0x5897 023339 arg mem_le_tx_buffer0 ,temp -0x5898 023340 isub temp ,pdata -0x5899 023341 rshift4 pdata ,pdata -0x589a 023342 rshift4 pdata ,queue -0x589b 023343 fetch 1 ,mem_le_tx_buff_used -0x589c 023344 qset0 pdata -0x589d 023345 store 1 ,mem_le_tx_buff_used -0x589e 023346 arg 0 ,loopcnt -: 023347 le_fifo_release_first_node_loop: -0x589f 023348 lshift loopcnt ,pdata -0x58a0 023349 arg mem_le_tx_ptr1 ,temp -0x58a1 023350 iadd temp ,temp -0x58a2 023351 ifetch 2 ,temp -0x58a3 023352 increase -2 ,temp -0x58a4 023353 istore 2 ,temp -0x58a5 023354 copy loopcnt ,pdata -0x58a6 023355 increase 1 ,loopcnt -0x58a7 023356 bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop -0x58a8 023357 setarg 0 -0x58a9 023358 istore 2 ,temp -0x58aa 023359 rtn -: 023365 le_parse_att: -0x58ab 023366 ifetch 3 ,contr -0x58ac 023367 store 3 ,mem_le_att_opcode -0x58ad 023368 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request -0x58ae 023369 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response -0x58af 023370 beq attop_find_information_request ,le_parse_att_find_information_request -0x58b0 023371 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request -0x58b1 023372 beq attop_read_by_type_request ,le_parse_att_read_by_type_request -0x58b2 023373 beq attop_read_request ,le_parse_att_read_request -0x58b3 023374 beq attop_read_blob_request ,le_parse_att_read_blob_request -0x58b4 023375 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request -0x58b5 023376 beq attop_write_request ,le_parse_att_write_request -0x58b6 023377 beq attop_prepare_write_request ,le_parse_att_prepare_write_request -0x58b7 023378 beq attop_execute_write_request ,le_parse_att_execute_write_request -0x58b8 023379 beq attop_write_command ,le_parse_att_write_command -0x58b9 023380 rtn -: 023383 le_send_att_exchange_mtu_requset: -0x58ba 023384 force 3 ,rega -0x58bb 023385 call le_fifo_malloc_tx_l2cap_gatt -0x58bc 023386 setarg attop_exchange_mtu_request -0x58bd 023387 istore 1 ,contw -0x58be 023388 fetch 2 ,mem_le_local_mtu -0x58bf 023389 istore 2 ,contw -0x58c0 023390 rtn -: 023393 le_parse_att_exchange_mtu_request: -0x58c1 023394 call le_parse_att_exchange_mtu_response -: 023395 le_send_att_exchange_mtu_response: -0x58c2 023396 force 3 ,rega -0x58c3 023397 call le_fifo_malloc_tx_l2cap_gatt -0x58c4 023398 setarg attop_exchange_mtu_response -0x58c5 023399 istore 1 ,contw -0x58c6 023400 fetch 2 ,mem_le_local_mtu -0x58c7 023401 istore 2 ,contw -0x58c8 023402 rtn -: 023404 le_parse_att_exchange_mtu_response: -0x58c9 023405 rshift8 pdata ,pdata -0x58ca 023406 store 2 ,mem_le_remote_mtu -0x58cb 023407 rtn -: 023409 le_parse_att_find_information_request: -0x58cc 023410 call le_get_search_handle_start_end_common -0x58cd 023411 call enable_user -0x58ce 023412 branch le_send_att_find_information_response -: 023414 le_send_att_find_information_response: -0x58cf 023415 arg 3 ,timeup -0x58d0 023416 call le_init_attlist_search -: 023417 le_send_att_find_information_res_loop: -0x58d1 023418 call le_att_handle_inrange -0x58d2 023419 branch le_send_att_find_information_res_end ,blank -0x58d3 023420 nbranch le_send_att_find_information_res_next ,positive -0x58d4 023421 increase -2 ,contr -0x58d5 023422 call store_contr -0x58d6 023423 call get_contw -0x58d7 023424 nbranch le_send_att_find_information_res_store_info ,user -0x58d8 023425 call push_stack_rega_b_c -0x58d9 023426 call disable_user -0x58da 023427 force 20 ,rega -0x58db 023428 call le_fifo_malloc_tx_l2cap_gatt -0x58dc 023429 call pop_stack_rega_b_c -0x58dd 023430 setarg attop_find_information_response -0x58de 023431 istore 1 ,contw -0x58df 023432 setarg uuid_size_16bit -0x58e0 023433 istore 1 ,contw -: 023434 le_send_att_find_information_res_store_info: -0x58e1 023435 call get_contr -0x58e2 023436 ifetch 2 ,contr -0x58e3 023437 istore 2 ,contw -0x58e4 023438 ifetch 1 ,contr -0x58e5 023439 copy pdata ,loopcnt -0x58e6 023440 call memcpy -0x58e7 023441 call store_contw -0x58e8 023442 increase -1 ,timeup -0x58e9 023443 branch le_send_att_find_information_res_end ,zero -: 023444 le_send_att_find_information_res_cont: -0x58ea 023445 ifetch 1 ,contr -0x58eb 023446 iadd contr ,contr -0x58ec 023447 branch le_send_att_find_information_res_loop -: 023448 le_send_att_find_information_res_next: -0x58ed 023449 ifetch 1 ,contr -0x58ee 023450 iadd contr ,contr -0x58ef 023451 branch le_send_att_find_information_res_cont -: 023452 le_send_att_find_information_res_end: -0x58f0 023453 branch le_send_att_error_response_notfound ,user -0x58f1 023454 branch le_send_auto_len_by_mem -: 023457 le_parse_att_find_by_type_value_request: -0x58f2 023458 call le_get_search_handle_start_end_common -0x58f3 023459 ifetch 2 ,contr -0x58f4 023460 store 2 ,mem_le_search_uuid -0x58f5 023461 call store_contr -0x58f6 023462 arg mem_le_search_att_type_length ,contw -0x58f7 023463 fetch 2 ,mem_le_l2cap_size -0x58f8 023464 increase -7 ,pdata -0x58f9 023465 call le_get_search_common2 -0x58fa 023466 branch le_send_att_find_by_type_value_response -: 023469 le_start_end_handle_check_1: -0x58fb 023470 disable user -0x58fc 023471 fetcht 2 ,mem_le_search_handle_start -0x58fd 023472 fetch 2 ,mem_le_search_handle_end -0x58fe 023473 isub temp ,null -0x58ff 023474 nbranch le_start_end_handle_check_1_fail ,positive -0x5900 023475 deposit temp -0x5901 023476 rtnne 0 -: 023477 le_start_end_handle_check_1_fail: -0x5902 023478 enable user -0x5903 023479 jam att_err_invalid_handle ,mem_le_err_code -0x5904 023480 branch le_send_att_error_response -: 023483 le_send_att_find_by_type_value_response: -0x5905 023484 call le_start_end_handle_check_1 -0x5906 023485 rtn user -0x5907 023486 fetcht 2 ,mem_le_search_uuid -0x5908 023487 setarg uuid_gatt_primary_service -0x5909 023488 isub temp ,null -0x590a 023489 branch le_send_att_find_by_type_value_res_primary ,zero -0x590b 023490 branch le_send_att_error_response_notfound -: 023493 le_send_att_find_by_type_value_res_primary: -0x590c 023494 jam le_find_by_type_val_res_not_found ,mem_le_search_res -0x590d 023495 fetcht 2 ,mem_le_search_handle_start -0x590e 023496 storet 2 ,mem_temp -0x590f 023497 call le_att_get_handle_info -0x5910 023498 nbranch le_send_att_error_response_notfound ,blank -: 023499 le_send_att_find_primary_search_loop: -0x5911 023500 fetcht 2 ,mem_temp -0x5912 023501 call le_att_get_handle_info -0x5913 023502 nbranch le_send_att_error_response_notfound2 ,blank -0x5914 023503 copy contr ,rega -0x5915 023504 fetch 1 ,mem_le_curr_att_len -0x5916 023505 copy pdata ,loopcnt -0x5917 023506 fetcht 1 ,mem_le_search_att_type_length -0x5918 023507 isub temp ,null -0x5919 023508 nbranch le_send_att_find_primary_search_loop1 ,zero -0x591a 023509 arg mem_le_search_att_type ,regb -0x591b 023510 call string_compare -0x591c 023512 branch le_send_att_find_primary_search_end_start_handle_found ,zero -0x591d 023514 fetch 2 ,mem_le_cur_uuid -0x591e 023515 fetcht 2 ,mem_le_search_uuid -0x591f 023516 isub temp ,null -0x5920 023517 branch le_send_att_find_primary_search_end_ending_handle_found ,zero -: 023518 le_send_att_find_primary_search_loop1: -0x5921 023519 fetch 2 ,mem_temp -0x5922 023520 increase 1 ,pdata -0x5923 023521 store 2 ,mem_temp -0x5924 023522 branch le_send_att_find_primary_search_loop -: 023524 le_send_att_error_response_notfound2: -0x5925 023525 fetch 1 ,mem_le_search_res -0x5926 023526 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found -0x5927 023527 branch le_send_att_error_response_notfound -: 023530 le_send_att_find_primary_search_end_start_handle_found: -0x5928 023531 fetch 2 ,mem_le_cur_uuid -0x5929 023532 fetcht 2 ,mem_le_search_uuid -0x592a 023533 isub temp ,null -0x592b 023534 nbranch le_send_att_find_primary_search_loop1 ,zero -0x592c 023535 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res -0x592d 023537 fetcht 2 ,mem_temp -0x592e 023538 storet 2 ,mem_le_cur_handle_start -0x592f 023539 branch le_send_att_find_primary_search_loop1 -: 023541 le_send_att_find_primary_search_end_ending_handle_found: -0x5930 023542 fetch 1 ,mem_le_search_res -0x5931 023543 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 -0x5932 023544 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res -0x5933 023545 fetcht 2 ,mem_temp -0x5934 023546 increase -1 ,temp -0x5935 023547 storet 2 ,mem_le_cur_handle_end -: 023549 le_send_att_find_primary_search_end: -0x5936 023550 arg 5 ,rega -0x5937 023551 call le_fifo_malloc_tx_l2cap_gatt -0x5938 023552 setarg attop_find_by_type_value_response -0x5939 023553 istore 1 ,contw -0x593a 023554 fetch 2 ,mem_le_cur_handle_start -0x593b 023555 istore 2 ,contw -0x593c 023556 fetch 2 ,mem_le_cur_handle_end -0x593d 023557 istore 2 ,contw -0x593e 023558 rtn -: 023562 le_parse_att_read_by_type_request: -0x593f 023563 call le_get_search_handle_start_end_common -0x5940 023564 call le_get_search_att_uuid -0x5941 023565 branch le_send_att_read_by_type_response -: 023567 le_send_att_read_by_type_response: -0x5942 023568 fetcht 2 ,mem_le_search_handle_start -0x5943 023569 storet 2 ,mem_temp -0x5944 023570 call le_init_attlist_search -0x5945 023571 call le_att_get_handle_ptr2 -0x5946 023572 increase -2 ,contr -0x5947 023573 copy contr ,pdata -0x5948 023574 store 2 ,mem_le_cur_attlist_start_ptr -0x5949 023576 fetcht 2 ,mem_le_search_uuid -0x594a 023577 setarg uuid_chrctr_device_name -0x594b 023578 isub temp ,null -0x594c 023579 branch le_send_att_read_by_type_res_device_name ,zero -0x594d 023580 setarg uuid_gatt_characteristic -0x594e 023581 isub temp ,null -0x594f 023582 nbranch le_send_att_read_by_type_res_not_characteristic ,zero -0x5950 023583 arg 2 ,timeup -: 023584 le_send_att_read_by_type_response_loop: -0x5951 023585 call le_att_check_handle_end -0x5952 023586 nbranch le_send_att_read_by_type_response_end ,positive -0x5953 023587 fetcht 2 ,mem_temp -0x5954 023588 call le_att_get_handle_info_from_ptr -0x5955 023589 beq 1 ,le_send_att_read_by_type_response_end -0x5956 023590 call le_att_same_uuid -0x5957 023591 nbranch le_send_att_read_by_type_response_next_handle ,zero -0x5958 023592 nbranch le_send_att_read_by_type_res_found_next ,user -0x5959 023593 disable user -0x595a 023594 arg 20 ,rega -0x595b 023595 call le_fifo_malloc_tx_l2cap_gatt -0x595c 023596 setarg attop_read_by_type_response -0x595d 023597 istore 1 ,contw -0x595e 023598 copy contw ,alarm -0x595f 023599 increase 1 ,contw -0x5960 023601 call le_send_att_read_by_type_write_properties -0x5961 023602 call le_att_next_handle -0x5962 023603 call le_att_get_handle_info_from_ptr -0x5963 023604 call le_send_att_read_by_type_write_uuid -0x5964 023605 fetch 1 ,mem_le_cur_uuid_length -0x5965 023606 increase 5 ,pdata -0x5966 023607 istore 1 ,alarm -0x5967 023608 fetch 1 ,mem_le_cur_uuid_length -0x5968 023609 beq 16 ,le_send_att_read_by_type_response_end -0x5969 023610 increase -1 ,timeup -0x596a 023611 branch le_send_att_read_by_type_response_end ,zero -: 023612 le_send_att_read_by_type_response_next_handle: -0x596b 023613 call le_att_next_handle -0x596c 023614 branch le_send_att_read_by_type_response_loop -: 023615 le_send_att_read_by_type_response_end: -0x596d 023616 branch le_send_att_error_response_notfound ,user -0x596e 023617 branch le_send_auto_len_by_mem -: 023619 le_send_att_read_by_type_res_found_next: -0x596f 023620 call le_store_att_record -0x5970 023621 call le_att_next_handle -0x5971 023622 call le_att_get_handle_info_from_ptr -0x5972 023623 fetch 1 ,mem_le_cur_uuid_length -0x5973 023624 beq 16 ,le_send_att_read_by_type_response_end -0x5974 023626 call get_contw -0x5975 023627 fetch 2 ,mem_temp -0x5976 023628 increase -1 ,pdata -0x5977 023629 istore 2 ,contw -0x5978 023630 call le_write_att_record_common -0x5979 023631 call le_send_att_read_by_type_write_uuid -0x597a 023632 increase -1 ,timeup -0x597b 023633 branch le_send_att_read_by_type_response_end ,zero -0x597c 023634 branch le_send_att_read_by_type_response_next_handle -: 023637 le_send_att_read_by_type_write_properties: -0x597d 023638 fetch 2 ,mem_temp -0x597e 023639 istore 2 ,contw -0x597f 023641 fetch 1 ,mem_le_curr_att_len -0x5980 023642 copy pdata ,loopcnt -0x5981 023643 call get_contr -0x5982 023644 call memcpy_fast -0x5983 023645 branch store_contw -: 023646 le_send_att_read_by_type_write_uuid: -0x5984 023647 call get_contw -0x5985 023648 fetch 2 ,mem_temp -0x5986 023649 istore 2 ,contw -0x5987 023650 call store_contw -0x5988 023651 fetch 1 ,mem_le_cur_uuid_length -0x5989 023652 copy pdata ,loopcnt -0x598a 023653 call get_contw -0x598b 023654 call get_contr -0x598c 023655 isub loopcnt ,contr -0x598d 023656 increase -1 ,contr -0x598e 023657 call memcpy_fast -0x598f 023658 branch store_contw -: 023662 le_send_att_read_by_type_res_not_characteristic: -0x5990 023663 fetcht 2 ,mem_le_search_handle_start -0x5991 023664 storet 2 ,mem_temp -: 023665 le_send_att_read_by_type_res_not_char_loop: -0x5992 023666 call le_att_check_handle_end -0x5993 023667 nbranch le_send_att_error_response_notfound ,positive -0x5994 023668 call le_att_get_handle_info_from_ptr -0x5995 023669 beq 1 ,le_send_att_error_response_notfound -0x5996 023670 call le_att_same_uuid -0x5997 023671 nbranch le_send_att_read_by_type_res_not_char_next ,zero -: 023673 le_send_att_read_by_type_res_not_char_common: -0x5998 023674 arg 20 ,rega -0x5999 023675 call le_fifo_malloc_tx_l2cap_gatt -0x599a 023676 setarg attop_read_by_type_response -0x599b 023677 istore 1 ,contw -0x599c 023678 fetch 1 ,mem_le_curr_att_len -0x599d 023679 copy pdata ,loopcnt -0x599e 023680 increase 2 ,pdata -0x599f 023681 istore 1 ,contw -0x59a0 023682 fetch 2 ,mem_temp -0x59a1 023683 istore 2 ,contw -0x59a2 023684 call get_contr -0x59a3 023685 call memcpy_fast -0x59a4 023686 call store_contw -0x59a5 023687 branch le_send_auto_len_by_mem -: 023689 le_send_att_read_by_type_res_not_char_next: -0x59a6 023690 call le_att_next_handle -0x59a7 023691 branch le_send_att_read_by_type_res_not_char_loop -: 023694 le_send_att_read_by_type_res_device_name: -0x59a8 023695 arg uuid_chrctr_device_name ,temp -0x59a9 023696 call le_att_get_short_uuid_ptr -0x59aa 023697 rtn blank -0x59ab 023698 increase -5 ,contr -0x59ac 023699 ifetch 2 ,contr -0x59ad 023700 store 2 ,mem_temp -0x59ae 023701 arg 20 ,rega -0x59af 023702 call le_fifo_malloc_tx_l2cap_gatt -0x59b0 023703 setarg attop_read_by_type_response -0x59b1 023704 istore 1 ,contw -0x59b2 023705 fetch 1 ,mem_le_name_len -0x59b3 023706 copy pdata ,loopcnt -0x59b4 023707 increase 2 ,pdata -0x59b5 023708 istore 1 ,contw -0x59b6 023709 fetch 2 ,mem_temp -0x59b7 023710 istore 2 ,contw -0x59b8 023711 arg mem_le_name ,contr -0x59b9 023712 call memcpy_fast -0x59ba 023713 call store_contw -0x59bb 023714 branch le_send_auto_len_by_mem -: 023718 le_parse_att_read_request: -0x59bc 023719 fetcht 2 ,mem_le_att_handle -0x59bd 023720 fetch 1 ,mem_le_configuration -0x59be 023721 bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth -: 023723 le_send_att_read_response: -0x59bf 023724 call le_att_get_handle_ptr -0x59c0 023725 branch le_send_att_error_response_notfound ,blank -0x59c1 023726 increase -2 ,contr -0x59c2 023727 ifetch 2 ,contr -0x59c3 023728 arg uuid_chrctr_device_name ,temp -0x59c4 023729 isub temp ,null -0x59c5 023730 branch le_send_device_name ,zero -0x59c6 023731 ifetch 1 ,contr -0x59c7 023732 sub pdata ,22 ,null -0x59c8 023733 branch le_send_att_read_response_less ,positive -0x59c9 023734 force 22 ,pdata -: 023735 le_send_att_read_response_less: -0x59ca 023736 copy pdata ,regc -0x59cb 023737 call store_contr -0x59cc 023738 add regc ,1 ,rega -0x59cd 023739 call le_fifo_malloc_tx_l2cap_gatt -0x59ce 023740 setarg attop_read_response -0x59cf 023741 istore 1 ,contw -0x59d0 023742 copy regc ,loopcnt -0x59d1 023743 call get_contr -0x59d2 023744 branch memcpy -: 023746 le_send_device_name: -0x59d3 023747 call store_contr -0x59d4 023748 fetch 1 ,mem_le_name_len -0x59d5 023749 add pdata ,1 ,rega -0x59d6 023750 call le_fifo_malloc_tx_l2cap_gatt -0x59d7 023751 setarg attop_read_response -0x59d8 023752 istore 1 ,contw -0x59d9 023753 fetch 1 ,mem_le_name_len -0x59da 023754 copy pdata ,loopcnt -0x59db 023755 arg mem_le_name ,contr -0x59dc 023756 branch memcpy -: 023759 le_send_att_read_response_check_auth: -0x59dd 023760 fetch 2 ,mem_le_pairing_handle -0x59de 023761 isub temp ,null -0x59df 023762 nbranch le_send_att_read_response ,zero -0x59e0 023764 call le_check_encrypt_state -0x59e1 023765 nbranch le_send_att_read_response ,user -0x59e2 023766 jam att_err_insufficient_authentication ,mem_le_err_code -0x59e3 023767 branch le_send_att_error_response -: 023770 le_parse_att_read_blob_request: -0x59e4 023771 ifetch 2 ,contr -0x59e5 023772 store 2 ,mem_le_att_offset -: 023773 le_send_att_read_blob_response: -0x59e6 023774 arg 20 ,rega -0x59e7 023775 call le_fifo_malloc_tx_l2cap_gatt -0x59e8 023776 setarg attop_read_blob_response -0x59e9 023777 istore 1 ,contw -0x59ea 023778 fetch 2 ,mem_le_att_offset -0x59eb 023779 iforce rega -0x59ec 023780 fetcht 2 ,mem_le_att_handle -0x59ed 023781 call le_att_get_handle_ptr -0x59ee 023782 branch le_send_att_error_response_notfound ,blank -0x59ef 023783 ifetch 1 ,contr -0x59f0 023784 isub rega ,loopcnt -0x59f1 023785 nbranch le_send_att_error_response_notfound ,positive -0x59f2 023786 sub loopcnt ,22 ,null -0x59f3 023787 branch le_send_att_read_blob_response_less ,positive -0x59f4 023788 force 22 ,loopcnt -: 023789 le_send_att_read_blob_response_less: -0x59f5 023790 deposit rega -0x59f6 023791 iadd contr ,contr -0x59f7 023792 call memcpy_fast -0x59f8 023793 call store_contw -0x59f9 023794 branch le_send_auto_len_by_mem -: 023797 le_parse_att_read_by_group_type_request: -0x59fa 023798 call le_get_search_handle_start_end_common -0x59fb 023799 call le_get_search_att_type -0x59fc 023800 branch le_send_att_read_by_group_type_response -: 023805 le_send_att_read_by_group_type_response: -0x59fd 023806 arg 2 ,timeup -0x59fe 023807 fetcht 2 ,mem_le_search_handle_start -0x59ff 023811 storet 2 ,mem_temp -0x5a00 023812 call le_init_attlist_search -0x5a01 023813 call le_att_get_handle_ptr2 -0x5a02 023814 increase -2 ,contr -0x5a03 023815 copy contr ,pdata -0x5a04 023816 store 2 ,mem_le_cur_attlist_start_ptr -: 023817 le_send_att_read_by_group_type_response_loop: -0x5a05 023818 call le_att_check_handle_end -0x5a06 023819 nbranch le_send_att_read_by_group_type_end0 ,positive -0x5a07 023820 fetcht 2 ,mem_temp -0x5a08 023821 call le_att_get_handle_info_from_ptr -0x5a09 023822 beq 1 ,le_send_att_read_by_group_type_end1 -0x5a0a 023824 call le_att_same_type -0x5a0b 023825 nbranch le_send_att_read_by_group_type_next_handle ,zero -0x5a0c 023826 copy timeup ,pdata -0x5a0d 023827 beq 0 ,le_send_att_read_by_group_type_end1 -0x5a0e 023828 nbranch le_send_att_read_by_group_type_store_write_record ,user -0x5a0f 023829 disable user -0x5a10 023831 arg 20 ,rega -0x5a11 023832 call le_fifo_malloc_tx_l2cap_gatt -0x5a12 023833 setarg attop_read_by_group_type_response -0x5a13 023834 istore 1 ,contw -0x5a14 023835 fetch 1 ,mem_le_curr_att_len -0x5a15 023836 increase 4 ,pdata -0x5a16 023837 istore 1 ,contw -0x5a17 023838 call store_contw -0x5a18 023839 branch le_send_att_read_by_group_type_store_record -: 023840 le_send_att_read_by_group_type_store_write_record: -0x5a19 023841 fetch 1 ,mem_le_curr_att_len -0x5a1a 023842 beq 16 ,le_send_att_read_by_group_type_end1 -0x5a1b 023843 fetch 2 ,mem_temp -0x5a1c 023844 increase -1 ,pdata -0x5a1d 023845 store 2 ,mem_le_cur_handle_end -0x5a1e 023846 call le_write_att_record -: 023847 le_send_att_read_by_group_type_store_record: -0x5a1f 023848 fetch 2 ,mem_temp -0x5a20 023849 store 2 ,mem_le_cur_handle_start -0x5a21 023850 call le_store_att_record -0x5a22 023851 increase -1 ,timeup -: 023853 le_send_att_read_by_group_type_next_handle: -0x5a23 023854 call le_att_next_handle -0x5a24 023855 branch le_send_att_read_by_group_type_response_loop -: 023857 le_send_att_read_by_group_type_end0: -0x5a25 023858 fetch 2 ,mem_temp -0x5a26 023859 store 2 ,mem_le_cur_handle_end -0x5a27 023860 branch le_send_att_read_by_group_type_end_common -: 023861 le_send_att_read_by_group_type_end1: -0x5a28 023862 fetch 2 ,mem_temp -0x5a29 023863 increase -1 ,pdata -0x5a2a 023864 store 2 ,mem_le_cur_handle_end -0x5a2b 023865 branch le_send_att_read_by_group_type_end_common -: 023866 le_send_att_read_by_group_type_end_common: -0x5a2c 023867 branch le_send_att_error_response_notfound ,user -0x5a2d 023868 call le_write_att_record -0x5a2e 023869 branch le_send_auto_len_by_mem -: 023874 le_parse_att_write_request: -0x5a2f 023875 copy contr ,rega -0x5a30 023876 fetch 2 ,mem_le_l2cap_size -0x5a31 023877 add pdata ,-3 ,regb -0x5a32 023878 call le_writeatt_cb -: 023879 le_send_att_write_response_check_auth: -0x5a33 023880 fetch 1 ,mem_le_configuration -0x5a34 023881 bbit0 bit_ble_write_auth ,le_send_att_write_response -0x5a35 023883 fetcht 2 ,mem_le_att_handle -0x5a36 023884 fetch 2 ,mem_le_pairing_handle -0x5a37 023885 isub temp ,null -0x5a38 023886 nbranch le_send_att_write_response ,zero -0x5a39 023887 call le_check_encrypt_state -0x5a3a 023888 nbranch le_send_att_write_response ,user -0x5a3b 023889 jam att_err_insufficient_authentication ,mem_le_err_code -0x5a3c 023890 branch le_send_att_error_response -: 023892 le_send_att_write_response: -0x5a3d 023893 force 1 ,rega -0x5a3e 023894 call le_fifo_malloc_tx_l2cap_gatt -0x5a3f 023895 setarg attop_write_response -0x5a40 023896 istore 1 ,contw -0x5a41 023897 rtn -: 023899 le_check_encrypt_state: -0x5a42 023900 call disable_user -0x5a43 023901 fetch 1 ,mem_le_pairing_mode -0x5a44 023902 rtneq le_pairing_mode_none -0x5a45 023903 fetch 1 ,mem_context -0x5a46 023904 rtnbit1 lestate_encryption -0x5a47 023905 branch enable_user -: 023908 le_parse_att_prepare_write_request: -0x5a48 023909 add contr ,2 ,rega -0x5a49 023910 fetch 2 ,mem_le_l2cap_size -0x5a4a 023911 add pdata ,-5 ,regb -0x5a4b 023912 call le_writeatt_cb -0x5a4c 023913 branch le_send_att_prepare_write_response -: 023916 le_send_att_prepare_write_response: -0x5a4d 023917 fetch 2 ,mem_le_l2cap_size -0x5a4e 023918 copy pdata ,rega -0x5a4f 023919 call le_fifo_malloc_tx_l2cap_gatt -0x5a50 023920 setarg attop_prepare_write_response -0x5a51 023921 istore 1 ,contw -0x5a52 023922 fetch 2 ,mem_le_att_handle -0x5a53 023923 istore 2 ,contw -0x5a54 023924 fetch 2 ,mem_le_l2cap_size -0x5a55 023925 add pdata ,-5 ,loopcnt -0x5a56 023926 fetch 2 ,mem_le_payload_ptr -0x5a57 023927 add pdata ,7 ,contr -0x5a58 023928 ifetch 2 ,contr -0x5a59 023929 istore 2 ,contw -0x5a5a 023930 branch memcpy_fast -: 023934 le_parse_att_execute_write_request: -: 023936 le_send_att_execute_write_response: -0x5a5b 023937 force 1 ,rega -0x5a5c 023938 call le_fifo_malloc_tx_l2cap_gatt -0x5a5d 023939 setarg attop_execute_write_response -0x5a5e 023940 istore 1 ,contw -0x5a5f 023941 rtn -: 023945 le_parse_att_write_command: -0x5a60 023946 copy contr ,rega -0x5a61 023947 fetch 2 ,mem_le_l2cap_size -0x5a62 023948 add pdata ,-3 ,regb -0x5a63 023949 branch le_writeatt_cb -: 023954 le_att_malloc_tx_notify: -0x5a64 023955 copy temp ,regc -0x5a65 023956 increase 3 ,rega -0x5a66 023957 call le_fifo_malloc_tx_l2cap_gatt -0x5a67 023958 increase -3 ,rega -0x5a68 023959 setarg attop_handle_value_notification -0x5a69 023960 istore 1 ,contw -0x5a6a 023961 copy regc ,temp -0x5a6b 023962 istoret 2 ,contw -0x5a6c 023963 rtn -: 023966 le_att_malloc_tx_indication: -0x5a6d 023967 copy temp ,regc -0x5a6e 023968 increase 3 ,rega -0x5a6f 023969 call le_fifo_malloc_tx_l2cap_gatt -0x5a70 023970 increase -3 ,rega -0x5a71 023971 setarg attop_handle_value_indication -0x5a72 023972 istore 1 ,contw -0x5a73 023973 copy regc ,temp -0x5a74 023974 istoret 2 ,contw -0x5a75 023975 rtn -: 023980 le_send_att_error_response_notfound: -0x5a76 023981 jam att_err_attribute_not_found ,mem_le_err_code -: 023982 le_send_att_error_response: -0x5a77 023983 force 5 ,rega -0x5a78 023984 call le_fifo_malloc_tx_l2cap_gatt -0x5a79 023985 setarg attop_error_response -0x5a7a 023986 istore 1 ,contw -0x5a7b 023987 fetch 1 ,mem_le_att_opcode -0x5a7c 023988 istore 1 ,contw -0x5a7d 023989 fetch 2 ,mem_le_att_handle -0x5a7e 023990 istore 2 ,contw -0x5a7f 023991 fetch 1 ,mem_le_err_code -0x5a80 023992 istore 1 ,contw -0x5a81 023993 rtn -: 023996 le_fifo_malloc_tx_l2cap_gatt: -0x5a82 023997 force le_l2cap_cid_att ,regb -0x5a83 023998 branch le_fifo_malloc_tx_l2cap -: 024001 le_att_next_handle: -0x5a84 024002 fetcht 2 ,mem_temp -0x5a85 024003 increase 1 ,temp -0x5a86 024004 storet 2 ,mem_temp -0x5a87 024005 rtn -: 024007 le_att_check_handle_end: -0x5a88 024008 fetcht 2 ,mem_temp -0x5a89 024009 fetch 2 ,mem_le_search_handle_end -0x5a8a 024010 isub temp ,null -0x5a8b 024011 rtn -: 024014 le_att_same_type: -0x5a8c 024015 fetcht 1 ,mem_le_search_att_type_length -0x5a8d 024016 arg mem_le_search_att_type ,rega -: 024017 le_att_check_same_common: -0x5a8e 024018 fetch 1 ,mem_le_cur_uuid_length -0x5a8f 024019 copy pdata ,loopcnt -0x5a90 024020 isub temp ,null -0x5a91 024021 nrtn zero -0x5a92 024022 arg mem_le_cur_uuid ,regb -0x5a93 024023 branch string_compare -: 024025 le_att_same_uuid: -0x5a94 024026 fetcht 1 ,mem_le_search_uuid_length -0x5a95 024027 arg mem_le_search_uuid ,rega -0x5a96 024028 branch le_att_check_same_common -: 024031 le_store_att_record: -0x5a97 024032 fetch 1 ,mem_le_curr_att_len -0x5a98 024033 store 1 ,mem_tmp_buffer -0x5a99 024034 copy pdata ,loopcnt -0x5a9a 024035 call get_contr -0x5a9b 024036 branch memcpy_fast -: 024039 le_write_att_record: -0x5a9c 024040 call get_contw -0x5a9d 024041 fetch 2 ,mem_le_cur_handle_start -0x5a9e 024042 istore 2 ,contw -0x5a9f 024043 fetch 2 ,mem_le_cur_handle_end -0x5aa0 024044 istore 2 ,contw -: 024045 le_write_att_record_common: -0x5aa1 024046 fetch 1 ,mem_tmp_buffer -0x5aa2 024047 copy pdata ,loopcnt -0x5aa3 024048 call memcpy_fast -0x5aa4 024049 branch store_contw -: 024053 le_send_auto_len_by_mem: -0x5aa5 024054 call get_contw -0x5aa6 024055 call le_fifo_get_last_att_ptr -0x5aa7 024056 copy contw ,pdata -0x5aa8 024057 isub contr ,rega -0x5aa9 024058 call le_fifo_get_last_l2cap_ptr -0x5aaa 024059 copy rega ,pdata -0x5aab 024060 istore 2 ,contr -0x5aac 024061 increase 4 ,rega -0x5aad 024062 call le_fifo_get_last_tx_ptr -0x5aae 024063 copy rega ,pdata -0x5aaf 024064 istore 1 ,contr -0x5ab0 024065 rtn -: 024068 le_get_search_handle_start_end_common: -0x5ab1 024069 rshift8 pdata ,pdata -0x5ab2 024070 store 2 ,mem_le_search_handle_start -0x5ab3 024071 ifetch 2 ,contr -0x5ab4 024072 store 2 ,mem_le_search_handle_end -0x5ab5 024073 rtn -: 024078 le_parse_signaling: -0x5ab6 024079 ifetch 1 ,contr -0x5ab7 024080 ifetcht 1 ,contr -0x5ab8 024081 ifetcht 2 ,contr -0x5ab9 024082 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp -0x5aba 024083 rtn -: 024084 le_l2cap_parse_conn_parameter_update_rsp: -0x5abb 024085 ifetch 2 ,contr -0x5abc 024086 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0x5abd 024087 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp -0x5abe 024088 branch ui_ipc_send_event -: 024094 le_l2cap_tx_update_req: -0x5abf 024095 arg 0x0c ,rega -0x5ac0 024096 arg l2cap_connection_parameter_update_request ,regc -0x5ac1 024097 call le_fifo_malloc_tx_l2cap_signaling -0x5ac2 024098 setarg 0x08 -0x5ac3 024099 istore 2 ,contw -0x5ac4 024100 fetch 8 ,mem_le_interval_min -0x5ac5 024101 istore 8 ,contw -0x5ac6 024102 rtn -: 024106 le_fifo_malloc_tx_l2cap_signaling: -0x5ac7 024107 call le_l2cap_update_signaling_identifier -0x5ac8 024108 arg le_l2cap_cid_signal ,regb -0x5ac9 024109 call le_fifo_malloc_tx_l2cap -0x5aca 024110 copy regc ,pdata -0x5acb 024111 istore 1 ,contw -0x5acc 024112 fetch 1 ,mem_le_signaling_identifier -0x5acd 024113 istore 1 ,contw -0x5ace 024114 rtn -: 024117 le_l2cap_update_signaling_identifier: -0x5acf 024118 fetch 1 ,mem_le_signaling_identifier -0x5ad0 024120 pincrease 1 -0x5ad1 024121 store 1 ,mem_le_signaling_identifier -0x5ad2 024122 rtnne 0 -: 024124 le_l2cap_reset_signaling_identifier: -0x5ad3 024125 jam 1 ,mem_le_signaling_identifier -0x5ad4 024126 rtn -: 024131 le_pairing_mode_init: -0x5ad5 024132 fetch 1 ,mem_le_pairing_mode -0x5ad6 024133 beq le_pairing_mode_none ,le_set_no_pairing -0x5ad7 024134 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work -0x5ad8 024135 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey -0x5ad9 024136 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork -0x5ada 024137 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric -0x5adb 024138 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey -0x5adc 024139 rtn -: 024141 le_set_pairing_mode_secure_justwork: -0x5add 024142 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x5ade 024143 branch le_set_noinputnooutput -: 024144 le_set_pairing_mode_secure_numeric: -0x5adf 024145 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x5ae0 024146 jam flag_iocap_displayyesno ,mem_le_pres_iocap -0x5ae1 024147 rtn -: 024148 le_set_pairing_mode_secure_passkey: -0x5ae2 024149 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth -0x5ae3 024150 branch le_set_displayonly -: 024151 le_set_no_pairing: -0x5ae4 024152 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth -: 024153 le_set_noinputnooutput: -0x5ae5 024154 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap -0x5ae6 024155 rtn -: 024156 le_set_pairing_mode_lagacy_just_work: -0x5ae7 024157 jam flag_le_bonding_mitm ,mem_le_pres_auth -0x5ae8 024158 branch le_set_noinputnooutput -: 024159 le_set_pairing_mode_lagacy_passkey: -0x5ae9 024160 jam flag_le_bonding_mitm ,mem_le_pres_auth -: 024161 le_set_displayonly: -0x5aea 024162 jam flag_iocap_displayonly ,mem_le_pres_iocap -0x5aeb 024163 rtn -: 024166 le_secure_connection_enable: -0x5aec 024167 fetch 1 ,mem_le_pres_auth -0x5aed 024168 set1 le_auth_secure_connection_pairing_bit ,pdata -0x5aee 024169 store 1 ,mem_le_pres_auth -0x5aef 024170 rtn -: 024171 le_secure_connection_disable: -0x5af0 024172 fetch 1 ,mem_le_pres_auth -0x5af1 024173 set0 le_auth_secure_connection_pairing_bit ,pdata -0x5af2 024174 store 1 ,mem_le_pres_auth -0x5af3 024175 rtn -: 024177 le_parse_smp: -0x5af4 024178 ifetch 1 ,contr -0x5af5 024179 beq smp_pairing_request ,le_parse_smp_pairing_request -0x5af6 024181 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm -0x5af7 024182 beq smp_pairing_random ,le_parse_smp_pairing_random -0x5af8 024183 beq smp_pairing_failed ,le_parse_smp_pairing_failed -0x5af9 024184 beq smp_encryption_information ,le_parse_smp_encryption_information -0x5afa 024185 beq smp_master_identification ,le_parse_smp_master_identification -0x5afb 024186 beq smp_identity_information ,le_parse_smp_identity_information -0x5afc 024187 beq smp_identity_address_information ,le_parse_smp_identity_address_information -0x5afd 024188 beq smp_signing_information ,le_parse_smp_signing_information -0x5afe 024189 beq smp_security_request ,le_parse_smp_security_request -0x5aff 024190 beq smp_pairing_public_key ,le_parse_smp_public_key -0x5b00 024191 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check -0x5b01 024192 rtn -: 024196 le_send_smp_security_request: -0x5b02 024197 force 2 ,rega -0x5b03 024198 call le_fifo_malloc_tx_l2cap_smp -0x5b04 024199 setarg smp_security_request -0x5b05 024200 istore 1 ,contw -0x5b06 024201 fetch 1 ,mem_le_pres_auth -0x5b07 024202 istore 1 ,contw -0x5b08 024203 rtn -: 024205 le_parse_smp_pairing_request: -0x5b09 024206 store 1 ,mem_le_preq -0x5b0a 024207 ifetch 6 ,contr -0x5b0b 024208 istore 6 ,contw -0x5b0c 024209 fetch 1 ,mem_le_pairing_mode -0x5b0d 024210 beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing -0x5b0e 024211 call le_send_smp_pairing_response -0x5b0f 024212 call le_check_master_support_secure_connect -0x5b10 024213 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state -0x5b11 024214 fetch 1 ,mem_le_preq_iocap -0x5b12 024215 beq flag_iocap_displayonly ,le_set_tk_0 -0x5b13 024216 beq flag_iocap_displayyesno ,le_set_tk_0 -0x5b14 024217 beq flag_iocap_noinputnooutput ,le_set_tk_0 -0x5b15 024218 fetch 1 ,mem_le_pairing_mode -0x5b16 024219 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey -0x5b17 024220 rtneq le_pairing_mode_secure_connect_passkey -: 024221 le_set_tk_0: -0x5b18 024222 arg 0 ,pdata -0x5b19 024223 store 4 ,mem_le_tk -0x5b1a 024224 rtn -: 024226 le_parse_smp_pairing_req_passkey: -0x5b1b 024227 fetch 1 ,mem_le_configuration -0x5b1c 024228 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey -: 024229 le_genernate_tk: -0x5b1d 024230 arg mem_le_tk ,rega -0x5b1e 024231 copy rega ,contw -0x5b1f 024232 arg 3 ,loopcnt -0x5b20 024233 call generate_random_loop -0x5b21 024234 fetch 2 ,mem_le_tk + 2 -0x5b22 024235 and_into 0x7 ,pdata -0x5b23 024236 store 2 ,mem_le_tk + 2 -: 024237 le_parse_smp_pairing_req_fixed_passkey: -0x5b24 024238 jam bt_evt_le_tk_generate ,mem_fifo_temp -0x5b25 024239 branch ui_ipc_send_event -: 024241 le_check_master_support_secure_connect: -0x5b26 024242 fetch 1 ,mem_le_preq_auth -0x5b27 024243 rtnbit1 le_auth_secure_connection_pairing_bit -0x5b28 024244 fetch 1 ,mem_le_pairing_mode -0x5b29 024245 rtnbit0 le_pairing_mode_secure_connect_bit -0x5b2a 024246 branch app_ble_disconnect -: 024248 le_send_smp_pairing_response: -0x5b2b 024249 force 7 ,rega -0x5b2c 024250 call le_fifo_malloc_tx_l2cap_smp -0x5b2d 024251 fetch 7 ,mem_le_pres -0x5b2e 024252 istore 7 ,contw -0x5b2f 024253 rtn -: 024256 le_parse_smp_pairing_confirm: -0x5b30 024257 copy contr ,rega -0x5b31 024258 fetch 1 ,mem_le_pairing_mode -0x5b32 024259 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey -0x5b33 024260 copy rega ,contr -0x5b34 024261 arg mem_le_rconfirm ,contw -0x5b35 024262 call memcpy16 -0x5b36 024263 branch le_send_smp_pairing_confirm -: 024264 le_parse_smp_pairing_confirm_secure_passkey: -0x5b37 024265 copy rega ,contr -0x5b38 024266 arg mem_le_rconfirm ,contw -0x5b39 024267 call memcpy16 -0x5b3a 024268 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5b3b 024269 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state -0x5b3c 024270 rtn -: 024273 le_send_smp_pairing_confirm: -0x5b3d 024274 fetch 1 ,mem_le_pairing_mode -0x5b3e 024275 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc -0x5b3f 024276 call generate_confirm -0x5b40 024277 force 17 ,rega -0x5b41 024278 call le_fifo_malloc_tx_l2cap_smp -0x5b42 024279 setarg smp_pairing_confirm -0x5b43 024280 istore 1 ,contw -0x5b44 024281 branch store_aes_result -: 024284 le_send_smp_pairing_confirm_sc: -0x5b45 024285 arg mem_le_srand ,contw -0x5b46 024286 call generate_random -0x5b47 024287 call function_f4_cb -0x5b48 024288 force 17 ,rega -0x5b49 024289 call le_fifo_malloc_tx_l2cap_smp -0x5b4a 024290 setarg smp_pairing_confirm -0x5b4b 024291 istore 1 ,contw -0x5b4c 024292 branch load_inverse_result -: 024296 le_parse_smp_pairing_random: -0x5b4d 024297 copy contr ,rega -0x5b4e 024298 fetch 1 ,mem_le_pairing_mode -0x5b4f 024299 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc -0x5b50 024300 copy rega ,contr -0x5b51 024301 call authenticate_rconfirm -0x5b52 024302 branch le_parse_smp_pairing_random_success ,zero -: 024303 le_send_pairing_confirm_value_failed: -0x5b53 024304 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason -: 024305 le_send_pairing_failed: -0x5b54 024306 force 2 ,rega -0x5b55 024307 call le_fifo_malloc_tx_l2cap_smp -0x5b56 024308 setarg smp_pairing_failed -0x5b57 024309 istore 1 ,contw -0x5b58 024310 fetch 1 ,mem_le_ll_pairing_fail_reason -0x5b59 024311 istore 1 ,contw -: 024312 le_parse_smp_pairing_failed: -0x5b5a 024313 force smp_pairing_timer ,queue -0x5b5b 024314 call timer_stop -0x5b5c 024315 jam flag_le_pairing_null ,mem_le_pairing_state -0x5b5d 024316 jam bt_evt_le_pairing_fail ,mem_fifo_temp -0x5b5e 024317 branch ui_ipc_send_event -: 024319 le_smp_pairing_fail_reason_not_support_pairing: -0x5b5f 024320 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason -0x5b60 024321 branch le_send_pairing_failed -: 024324 le_parse_smp_pairing_random_sc: -0x5b61 024325 arg mem_le_mrand ,contw -0x5b62 024326 copy rega ,contr -0x5b63 024327 call memcpy16 -0x5b64 024328 fetch 1 ,mem_le_pairing_mode -0x5b65 024329 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey -0x5b66 024330 call function_g2 -0x5b67 024333 call le_send_smp_pairing_random -0x5b68 024334 fetch 1 ,mem_le_pairing_mode -0x5b69 024335 rtnne le_pairing_mode_secure_connect_numeric -0x5b6a 024336 jam bt_evt_le_gkey_generate ,mem_fifo_temp -0x5b6b 024337 branch ui_ipc_send_event -: 024339 le_parse_smp_pairing_random_sc_passkey: -0x5b6c 024340 call function_f4_ca -0x5b6d 024341 arg mem_aes_cmac_temp ,contw -0x5b6e 024342 call load_inverse_result -0x5b6f 024343 arg mem_aes_cmac_temp ,rega -0x5b70 024344 arg mem_le_rconfirm ,regb -0x5b71 024345 arg 16 ,loopcnt -0x5b72 024346 call string_compare -0x5b73 024347 nbranch le_send_pairing_confirm_value_failed ,zero -0x5b74 024348 branch le_send_smp_pairing_random -: 024350 le_parse_smp_pairing_random_success: -0x5b75 024351 call generate_stk -0x5b76 024352 jam bt_evt_le_pairing_success ,mem_fifo_temp -0x5b77 024353 call ui_ipc_send_event -0x5b78 024354 jam 1 ,mem_ltk_exists -0x5b79 024355 jam flag_le_pairing_after_auth ,mem_le_pairing_state -: 024357 le_send_smp_pairing_random: -0x5b7a 024358 force 17 ,rega -0x5b7b 024359 call le_fifo_malloc_tx_l2cap_smp -0x5b7c 024360 setarg smp_pairing_random -0x5b7d 024361 istore 1 ,contw -0x5b7e 024362 arg mem_le_srand ,contr -0x5b7f 024363 branch memcpy16 -: 024365 le_parse_smp_encryption_information: -0x5b80 024366 arg mem_le_peer_ltk ,contw -0x5b81 024367 branch memcpy16 -: 024369 le_send_smp_encryption_information: -0x5b82 024370 force 17 ,rega -0x5b83 024371 call le_fifo_malloc_tx_l2cap_smp -0x5b84 024372 setarg smp_encryption_information -0x5b85 024373 istore 1 ,contw -0x5b86 024374 fetch 1 ,mem_le_configuration -0x5b87 024375 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk -0x5b88 024376 arg mem_le_ltk ,contr -0x5b89 024377 branch memcpy16 -: 024379 le_send_fixed_ltk: -0x5b8a 024380 arg mem_le_fixed_ltk ,contr -0x5b8b 024381 branch memcpy16 -: 024384 le_send_smp_master_identification: -0x5b8c 024385 arg mem_le_ediv ,contw -0x5b8d 024386 force 10 ,loopcnt -0x5b8e 024387 call generate_random_loop -0x5b8f 024388 force 11 ,rega -0x5b90 024389 call le_fifo_malloc_tx_l2cap_smp -0x5b91 024390 setarg smp_master_identification -0x5b92 024391 istore 1 ,contw -0x5b93 024392 fetch 2 ,mem_le_ediv -0x5b94 024393 istore 2 ,contw -0x5b95 024394 fetch 8 ,mem_le_rand -0x5b96 024395 istore 8 ,contw -0x5b97 024396 rtn -: 024398 le_send_smp_identity_information: -0x5b98 024399 force 17 ,rega -0x5b99 024400 call le_fifo_malloc_tx_l2cap_smp -0x5b9a 024401 setarg smp_identity_information -0x5b9b 024402 istore 1 ,contw -0x5b9c 024403 setarg 0 -0x5b9d 024404 istore 8 ,contw -0x5b9e 024405 istore 8 ,contw -0x5b9f 024406 rtn -: 024409 le_send_smp_identity_address_information: -0x5ba0 024410 force 8 ,rega -0x5ba1 024411 call le_fifo_malloc_tx_l2cap_smp -0x5ba2 024412 setarg smp_identity_address_information -0x5ba3 024413 istore 1 ,contw -0x5ba4 024414 fetch 1 ,mem_le_conn_own_addr_type -0x5ba5 024415 istore 1 ,contw -0x5ba6 024416 fetch 6 ,mem_le_lap -0x5ba7 024417 istore 6 ,contw -0x5ba8 024418 rtn -: 024421 le_send_pairing_fail_unspecified_reason: -0x5ba9 024422 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason -0x5baa 024423 branch le_send_pairing_failed -: 024425 le_check_init_key_distribution: -0x5bab 024426 fetch 1 ,mem_le_pres_init_key_distribution -0x5bac 024427 fetcht 1 ,mem_le_pres_init_key_distribution -0x5bad 024428 iand temp ,pdata -0x5bae 024429 rtn -: 024431 le_parse_smp_identity_information: -0x5baf 024432 arg mem_le_irk ,contw -0x5bb0 024433 call memcpy16 -0x5bb1 024434 call le_check_init_key_distribution -0x5bb2 024435 isolate0 le_initator_irk_bit ,pdata -0x5bb3 024436 branch le_send_pairing_fail_unspecified_reason ,true -0x5bb4 024437 fetch 1 ,mem_device_option -0x5bb5 024438 rtnne dvc_op_module -0x5bb6 024439 call le_check_master_addr_type -0x5bb7 024440 nrtn user -0x5bb8 024441 branch app_ble_store_reconn_info -: 024444 le_check_master_addr_type: -0x5bb9 024445 call disable_user -0x5bba 024446 fetch 1 ,mem_le_conn_peer_addr_type -0x5bbb 024447 rtneq master_public_addr -0x5bbc 024448 fetch 1 ,mem_le_plap + 5 -0x5bbd 024449 compare 0xc0 ,pdata ,0xc0 -0x5bbe 024450 rtn true -0x5bbf 024451 branch enable_user -: 024453 le_parse_smp_identity_address_information: -0x5bc0 024454 call le_check_init_key_distribution -0x5bc1 024455 isolate0 le_initator_irk_bit ,pdata -0x5bc2 024456 branch le_send_pairing_fail_unspecified_reason ,true -0x5bc3 024457 rtn -: 024459 le_parse_smp_master_identification: -: 024460 le_parse_smp_signing_information: -: 024461 le_parse_smp_security_request: -0x5bc4 024462 rtn -: 024464 le_parse_smp_public_key: -0x5bc5 024465 arg mem_le_pubkey_remote_x_256 ,contw -0x5bc6 024466 call memcpy64 -0x5bc7 024467 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5bc8 024468 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state -0x5bc9 024469 rtn -: 024471 le_parse_smp_dhkey_check: -0x5bca 024472 arg mem_sp_confirm_remote ,contw -0x5bcb 024473 call memcpy16 -0x5bcc 024474 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state -0x5bcd 024475 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5bce 024476 rtn -: 024478 le_send_smp_pairing_public_key: -0x5bcf 024479 force 65 ,rega -0x5bd0 024480 call le_fifo_malloc_tx_l2cap_smp -0x5bd1 024481 setarg smp_pairing_public_key -0x5bd2 024482 istore 1 ,contw -0x5bd3 024483 arg mem_le_pubkey_local_x_256 ,contr -0x5bd4 024484 branch memcpy64 -: 024486 le_send_smp_pairing_dhkey_check: -0x5bd5 024487 call function_f6_eb -0x5bd6 024488 force 17 ,rega -0x5bd7 024489 call le_fifo_malloc_tx_l2cap_smp -0x5bd8 024490 setarg smp_pairing_dhkey_check -0x5bd9 024491 istore 1 ,contw -0x5bda 024492 branch load_inverse_result -: 024495 le_check_paring_time: -0x5bdb 024496 fetch 1 ,mem_le_pairing_state -0x5bdc 024497 rtneq flag_le_pairing_end -0x5bdd 024498 arg flag_le_pairing_rcv_pairing_req ,temp -0x5bde 024499 isub temp ,null -0x5bdf 024500 nrtn positive -0x5be0 024501 arg smp_pairing_timer ,queue -0x5be1 024502 call timer_check -0x5be2 024503 nrtn blank -0x5be3 024504 branch le_send_pairing_fail_unspecified_reason -: 024506 le_pairing_sm: -0x5be4 024507 bpatchx patch2f_0 ,mem_patch2f -0x5be5 024508 fetch 1 ,mem_le_pairing_state -0x5be6 024509 beq flag_le_pairing_null ,le_pairing_sm_null -0x5be7 024510 beq flag_le_pairing_start ,le_pairing_sm_start -0x5be8 024511 beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req -0x5be9 024512 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req -0x5bea 024513 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth -0x5beb 024514 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information -0x5bec 024515 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification -0x5bed 024516 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information -0x5bee 024517 rtn -: 024519 le_pairing_sm_null: -: 024520 le_pairing_sm_send_sec_req: -0x5bef 024521 fetch 1 ,mem_le_enc_state -0x5bf0 024522 rtnne flag_le_send_start_enc_rsp -0x5bf1 024523 jam flag_le_enc_end ,mem_le_enc_state -0x5bf2 024524 jam flag_le_pairing_end ,mem_le_pairing_state -0x5bf3 024525 jam bt_evt_le_reconnect_complete ,mem_fifo_temp -0x5bf4 024526 branch ui_ipc_send_event -: 024529 le_pairing_sm_start: -0x5bf5 024530 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state -0x5bf6 024531 branch le_send_smp_security_request -: 024533 le_pairing_sm_rcv_pairing_req: -0x5bf7 024534 jam flag_le_pairing_auth ,mem_le_pairing_state -0x5bf8 024535 setarg timer_smp_pairing_timeout -0x5bf9 024536 arg smp_pairing_timer ,queue -0x5bfa 024537 branch timer_init -: 024539 le_pairing_sm_after_auth: -0x5bfb 024540 fetch 1 ,mem_le_enc_state -0x5bfc 024541 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc -0x5bfd 024542 rtn -: 024544 le_pairing_sm_after_auth_start_enc: -0x5bfe 024545 jam flag_le_paring_send_enc_information ,mem_le_pairing_state -0x5bff 024546 jam bt_evt_le_enc_info ,mem_fifo_temp -0x5c00 024547 call ui_ipc_send_event -0x5c01 024548 call le_send_smp_encryption_information -0x5c02 024549 fetch 1 ,mem_device_option -0x5c03 024550 rtnne dvc_op_module -0x5c04 024551 call le_check_master_addr_type -0x5c05 024552 rtn user -0x5c06 024553 branch app_ble_store_reconn_info -: 024556 le_pairng_sm_send_enc_information: -0x5c07 024557 jam flag_le_paring_send_master_identification ,mem_le_pairing_state -0x5c08 024558 branch le_send_smp_master_identification -: 024560 le_pairng_sm_send_master_indentification: -0x5c09 024561 fetch 1 ,mem_le_preq_resp_key_distribution -0x5c0a 024562 fetcht 1 ,mem_le_pres_resp_key_distribution -0x5c0b 024563 iand temp ,pdata -0x5c0c 024564 isolate0 le_initator_irk_bit ,pdata -0x5c0d 024565 branch le_parse_start_enc_rsp_after_auth_end ,true -0x5c0e 024566 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state -0x5c0f 024567 branch le_send_smp_identity_information -: 024569 le_pairng_sm_send_indentity_information: -0x5c10 024570 call le_send_smp_identity_address_information -0x5c11 024571 branch le_parse_start_enc_rsp_after_auth_end -: 024574 le_parse_start_enc_rsp_after_auth_end: -0x5c12 024575 force smp_pairing_timer ,queue -0x5c13 024576 call timer_stop -0x5c14 024577 jam flag_le_enc_end ,mem_le_enc_state -0x5c15 024578 jam flag_le_pairing_end ,mem_le_pairing_state -0x5c16 024579 jam bt_evt_le_pairing_complete ,mem_fifo_temp -0x5c17 024580 branch ui_ipc_send_event -: 024584 le_secure_connect_sm: -0x5c18 024585 bpatchx patch2f_1 ,mem_patch2f -0x5c19 024586 fetch 1 ,mem_le_pairing_mode -0x5c1a 024587 rtnbit0 le_pairing_mode_secure_connect_bit -0x5c1b 024588 fetch 1 ,mem_le_secure_connect_flag -0x5c1c 024589 rtnne le_sp_flag_commit_256 -0x5c1d 024590 jam sp_flag_standby ,mem_le_secure_connect_flag -0x5c1e 024591 fetch 1 ,mem_le_secure_connect_state -0x5c1f 024592 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key -0x5c20 024593 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key -0x5c21 024594 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key -0x5c22 024595 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey -0x5c23 024596 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey -0x5c24 024597 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm -0x5c25 024598 rtn -: 024601 le_sc_sm_passkey_wait_confirm: -0x5c26 024602 fetch 1 ,mem_authentication_passkey_times -0x5c27 024603 copy pdata ,queue -0x5c28 024604 increase 1 ,pdata -0x5c29 024605 store 1 ,mem_authentication_passkey_times -0x5c2a 024606 fetch 4 ,mem_le_tk -0x5c2b 024607 qisolate1 pdata -0x5c2c 024608 setarg 0x80 -0x5c2d 024609 setflag true ,0 ,pdata -0x5c2e 024610 store 1 ,mem_passkey_1bit -0x5c2f 024611 branch le_sc_sm_ready_send_pairing_confirm -: 024613 le_sc_sm_wait_confirm_gkey: -0x5c30 024614 fetch 1 ,mem_le_sc_confirm_gkey_flag -0x5c31 024615 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag -0x5c32 024616 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok -0x5c33 024617 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c34 024618 rtn -: 024620 le_sc_confirm_gkey_ok: -0x5c35 024621 jam bt_evt_le_pairing_success ,mem_fifo_temp -0x5c36 024622 call ui_ipc_send_event -0x5c37 024623 jam flag_le_pairing_after_auth ,mem_le_pairing_state -0x5c38 024624 branch le_send_smp_pairing_dhkey_check -: 024626 le_sc_sm_receive_dhkey: -0x5c39 024627 fetch 1 ,mem_sp_dhkey_invalid -0x5c3a 024628 beq sp_key_valid_256 ,le_dhkey_ready -0x5c3b 024629 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c3c 024630 rtn -: 024632 le_dhkey_ready: -0x5c3d 024633 call function_f5 -0x5c3e 024637 fetch 1 ,mem_le_pairing_mode -0x5c3f 024638 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common -0x5c40 024639 call le_set_tk_0 -: 024640 le_dhkey_ready_common: -0x5c41 024641 call function_f6_ea -0x5c42 024642 arg mem_aes_cmac_temp ,rega -0x5c43 024643 arg mem_sp_confirm_remote ,regb -0x5c44 024644 arg 16 ,loopcnt -0x5c45 024645 call string_compare -0x5c46 024646 branch le_dhkey_check_ok ,zero -: 024647 le_dhkey_check_fail: -0x5c47 024648 jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason -0x5c48 024649 branch le_send_pairing_failed -: 024652 le_dhkey_check_ok: -0x5c49 024653 call sp_calc_check_publickey_256 -0x5c4a 024654 nbranch le_dhkey_check_fail ,zero -0x5c4b 024655 jam 1 ,mem_ltk_exists -0x5c4c 024656 fetch 1 ,mem_le_pairing_mode -0x5c4d 024657 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok -0x5c4e 024658 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok -0x5c4f 024659 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c50 024660 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state -0x5c51 024661 rtn -: 024663 le_sc_sm_send_public_key: -0x5c52 024664 fetch 1 ,mem_le_pairing_mode -0x5c53 024665 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey -0x5c54 024666 jam 0 ,mem_passkey_1bit -: 024667 le_sc_sm_ready_send_pairing_confirm: -0x5c55 024668 branch le_send_smp_pairing_confirm -: 024670 le_sc_sm_send_public_key_passkey: -0x5c56 024674 jam 0 ,mem_authentication_passkey_times -0x5c57 024675 branch le_parse_smp_pairing_req_passkey -: 024678 le_sc_sm_receive_public_key: -0x5c58 024679 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c59 024680 fetch 1 ,mem_le_sc_local_key_invalid -0x5c5a 024681 beq sp_key_valid_256 ,le_public_key_ready -0x5c5b 024683 rtn -: 024685 le_public_key_ready: -0x5c5c 024686 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state -0x5c5d 024687 jam sp_key_invalid ,mem_sp_dhkey_invalid -0x5c5e 024688 branch sp_dhkey_calc_256 -: 024690 le_sc_sm_wait_send_public_key: -0x5c5f 024691 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag -0x5c60 024692 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state -0x5c61 024693 branch le_send_smp_pairing_public_key -: 024697 le_fifo_malloc_tx_l2cap_smp: -0x5c62 024698 force le_l2cap_cid_smp ,regb -0x5c63 024699 branch le_fifo_malloc_tx_l2cap -: 024703 le_parse_ll: -0x5c64 024704 fetch 1 ,mem_le_rxbuf + 2 -0x5c65 024705 beq ll_connection_update_req ,le_parse_connection_update_req -0x5c66 024706 beq ll_channel_map_req ,le_parse_channel_map_req -0x5c67 024707 beq ll_terminate_ind ,le_parse_terminate_ind -0x5c68 024708 beq ll_enc_req ,le_parse_enc_req -0x5c69 024709 beq ll_enc_rsp ,le_parse_enc_rsp -0x5c6a 024710 beq ll_start_enc_req ,le_parse_start_enc_req -0x5c6b 024711 beq ll_start_enc_rsp ,le_parse_start_enc_rsp -0x5c6c 024712 beq ll_unknown_rsp ,le_parse_unknown_rsp -0x5c6d 024713 beq ll_feature_req ,le_parse_feature_req -0x5c6e 024714 beq ll_feature_rsp ,le_parse_feature_rsp -0x5c6f 024715 beq ll_pause_enc_req ,le_parse_pause_enc_req -0x5c70 024716 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp -0x5c71 024717 beq ll_version_ind ,le_parse_version_ind -0x5c72 024718 beq ll_reject_ind ,le_parse_reject_ind -0x5c73 024719 beq ll_ping_req ,le_parse_ping_req -0x5c74 024720 beq ll_ping_rsp ,le_parse_ping_rsp -0x5c75 024721 arg 2 ,rega -0x5c76 024722 arg ll_unknown_rsp ,regb -0x5c77 024723 call le_fifo_malloc_tx_ll -0x5c78 024724 fetch 1 ,mem_le_rxbuf + 2 -0x5c79 024725 istore 1 ,contw -0x5c7a 024726 rtn -: 024729 le_parse_connection_update_req: -0x5c7b 024730 ifetch 9 ,contr -0x5c7c 024731 store 9 ,mem_le_new_param -0x5c7d 024732 ifetch 2 ,contr -0x5c7e 024733 store 2 ,mem_le_instant -0x5c7f 024734 fetch 1 ,mem_le_state -0x5c80 024735 set1 lestate_update_param ,pdata -0x5c81 024736 store 1 ,mem_le_state -0x5c82 024737 rtn -: 024739 le_parse_channel_map_req: -0x5c83 024740 ifetch 5 ,contr -0x5c84 024741 store 5 ,mem_le_new_map -0x5c85 024742 ifetch 2 ,contr -0x5c86 024743 store 2 ,mem_le_instant -0x5c87 024744 fetcht 2 ,mem_le_event_count -0x5c88 024745 isub temp ,null -0x5c89 024746 nbranch le_parse_terminate_ind ,positive -0x5c8a 024747 fetch 1 ,mem_le_state -0x5c8b 024748 set1 lestate_update_map ,pdata -0x5c8c 024749 store 1 ,mem_le_state -0x5c8d 024750 rtn -: 024753 le_parse_terminate_ind: -0x5c8e 024754 setarg 20 -0x5c8f 024755 store 2 ,mem_le_superto -0x5c90 024756 store 2 ,mem_le_init_superto -0x5c91 024757 rtn -: 024759 le_send_terminate_ind_user_terminated: -0x5c92 024760 arg error_remote_user_terminated_connection ,regc -: 024763 le_send_terminate_ind: -0x5c93 024764 arg 2 ,rega -0x5c94 024765 arg ll_terminate_ind ,regb -0x5c95 024766 call le_fifo_malloc_tx_ll -0x5c96 024767 copy regc ,pdata -0x5c97 024768 istore 1 ,contw -0x5c98 024769 rtn -: 024771 le_parse_feature_req: -: 024773 le_send_feature_rsp: -0x5c99 024774 arg 9 ,rega -0x5c9a 024775 arg ll_feature_rsp ,regb -0x5c9b 024776 call le_fifo_malloc_tx_ll -0x5c9c 024777 setarg param_le_features -0x5c9d 024778 istore 8 ,contw -0x5c9e 024779 rtn -: 024782 le_parse_version_ind: -0x5c9f 024783 rtn master -: 024784 le_send_version_ind: -0x5ca0 024785 arg 6 ,rega -0x5ca1 024786 arg ll_version_ind ,regb -0x5ca2 024787 call le_fifo_malloc_tx_ll -0x5ca3 024788 fetch 5 ,mem_lmp_version -0x5ca4 024789 istore 5 ,contw -0x5ca5 024790 rtn -: 024793 le_parse_ping_req: -0x5ca6 024794 arg ll_ping_rsp ,regb -0x5ca7 024795 branch le_send_ll_one_lenth -: 024798 le_send_ll_one_lenth: -0x5ca8 024799 arg 1 ,rega -0x5ca9 024800 branch le_fifo_malloc_tx_ll -: 024803 le_parse_enc_req: -0x5caa 024804 ifetch 8 ,contr -0x5cab 024805 store 8 ,mem_le_rand -0x5cac 024806 ifetch 2 ,contr -0x5cad 024807 store 2 ,mem_le_ediv -0x5cae 024808 ifetch 8 ,contr -0x5caf 024809 store 8 ,mem_le_skdm -0x5cb0 024810 ifetch 4 ,contr -0x5cb1 024811 store 4 ,mem_le_ivm -0x5cb2 024812 call le_send_enc_rsp -0x5cb3 024813 bpatchx patch2f_2 ,mem_patch2f -0x5cb4 024814 fetch 1 ,mem_le_pairing_state -0x5cb5 024815 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth -0x5cb6 024816 fetch 1 ,mem_le_configuration -0x5cb7 024817 bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk -0x5cb8 024818 fetch 1 ,mem_nv_data_number -0x5cb9 024819 ncall load_device_list_mode_4 ,blank -0x5cba 024820 fetch 1 ,mem_ltk_exists -0x5cbb 024821 beq 0 ,le_ltk_lost -: 024822 le_parse_enc_req_after_auth: -0x5cbc 024823 jam flag_le_rcv_enc_start ,mem_le_enc_state -0x5cbd 024824 call le_send_start_enc_req -0x5cbe 024825 branch generate_sk -: 024827 le_parse_enc_req_fixed_ltk: -0x5cbf 024828 jam 1 ,mem_ltk_exists -0x5cc0 024829 arg mem_le_fixed_ltk ,contr -0x5cc1 024830 arg mem_le_ltk ,contw -0x5cc2 024831 call memcpy16 -0x5cc3 024832 branch le_parse_enc_req_after_auth -: 024835 le_ltk_lost: -0x5cc4 024836 bpatchx patch2f_3 ,mem_patch2f -0x5cc5 024837 jam flag_le_enc_null ,mem_le_enc_state -0x5cc6 024838 jam flag_le_enc_null ,mem_le_pairing_state -0x5cc7 024839 jam bt_evt_le_ltk_lost ,mem_fifo_temp -0x5cc8 024840 branch ui_ipc_send_event -: 024842 le_send_reject_ind: -0x5cc9 024843 arg 2 ,rega -0x5cca 024844 arg ll_reject_ind ,regb -0x5ccb 024845 call le_fifo_malloc_tx_ll -0x5ccc 024846 setarg le_err_pin_or_key_missing -0x5ccd 024847 istore 1 ,contw -0x5cce 024848 rtn -: 024850 le_send_enc_rsp: -0x5ccf 024851 arg mem_le_skds ,contw -0x5cd0 024852 force 8 ,loopcnt -0x5cd1 024853 call generate_random_loop -0x5cd2 024854 arg mem_le_ivs ,contw -0x5cd3 024855 force 4 ,loopcnt -0x5cd4 024856 call generate_random_loop -0x5cd5 024857 arg 13 ,rega -0x5cd6 024858 arg ll_enc_rsp ,regb -0x5cd7 024859 call le_fifo_malloc_tx_ll -0x5cd8 024860 fetch 8 ,mem_le_skds -0x5cd9 024861 istore 8 ,contw -0x5cda 024862 fetch 4 ,mem_le_ivs -0x5cdb 024863 istore 4 ,contw -0x5cdc 024864 rtn -: 024866 le_send_start_enc_req: -0x5cdd 024867 arg ll_start_enc_req ,regb -0x5cde 024868 branch le_send_ll_one_lenth -: 024870 le_send_start_enc_rsp: -0x5cdf 024871 arg ll_start_enc_rsp ,regb -0x5ce0 024872 branch le_send_ll_one_lenth -: 024875 le_parse_enc_rsp: -0x5ce1 024876 ifetch 8 ,contr -0x5ce2 024877 store 8 ,mem_le_skds -0x5ce3 024878 ifetch 4 ,contr -0x5ce4 024879 store 4 ,mem_le_ivs -0x5ce5 024880 branch generate_sk -: 024882 le_parse_start_enc_req: -0x5ce6 024883 fetch 1 ,mem_le_state -0x5ce7 024884 set1 lestate_encryption ,pdata -0x5ce8 024885 store 1 ,mem_le_state -0x5ce9 024886 rtn -: 024888 le_parse_start_enc_rsp: -0x5cea 024889 rtn master -0x5ceb 024890 jam bt_evt_le_start_enc ,mem_fifo_temp -0x5cec 024891 call ui_ipc_send_event -0x5ced 024892 jam flag_le_send_start_enc_rsp ,mem_le_enc_state -0x5cee 024893 branch le_send_start_enc_rsp -: 024895 le_parse_pause_enc_req: -0x5cef 024896 jam flag_le_enc_pause ,mem_le_enc_state -0x5cf0 024897 call le_send_pause_enc_rsp -0x5cf1 024898 jam bt_evt_le_pause_enc ,mem_fifo_temp -0x5cf2 024899 branch ui_ipc_send_event -: 024901 le_send_pause_enc_rsp: -0x5cf3 024902 arg ll_pause_enc_rsp ,regb -0x5cf4 024903 branch le_send_ll_one_lenth -: 024906 le_parse_feature_rsp: -: 024907 le_parse_unknown_rsp: -: 024908 le_parse_pause_enc_rsp: -: 024909 le_parse_reject_ind: -: 024910 le_parse_ping_rsp: -0x5cf5 024911 rtn -: 024918 init_lmp: -0x5cf6 024919 rtn wake -: 024920 init_lmp_work: -0x5cf7 024921 bpatchx patch2f_4 ,mem_patch2f -0x5cf8 024922 setarg 0 -0x5cf9 024923 store 1 ,mem_lmp_to_send -0x5cfa 024924 store 1 ,mem_conn_sm -0x5cfb 024925 store 1 ,mem_lmo_opcode1 -0x5cfc 024926 store 1 ,mem_lmo_opcode2 -0x5cfd 024927 store 1 ,mem_esco_addr -0x5cfe 024928 store 1 ,mem_auth_enable -0x5cff 024929 store 1 ,mem_connection_options -0x5d00 024930 store 1 ,mem_pairing_auth -0x5d01 024931 jam switch_flag_init ,mem_switch_flag -0x5d02 024932 jam 0 ,mem_switch_fail_master_count -0x5d03 024933 jam null_encryp ,mem_wait_encryption -: 024934 init_lmp_reinit: -0x5d04 024935 jam 0 ,mem_pairing_auth -0x5d05 024936 jam 0 ,mem_sp_localsm -0x5d06 024937 jam 0 ,mem_lmp_conn_state -: 024939 parse_rx_done: -0x5d07 024940 rtn -: 024942 parse_lmp: -0x5d08 024943 bpatchx patch2f_5 ,mem_patch2f -0x5d09 024944 call setlocalsm_master ,master -0x5d0a 024945 ncall setlocalsm_slave ,master -0x5d0b 024946 call lmo_fifo_check -0x5d0c 024947 nrtn blank -0x5d0d 024948 fetch 1 ,mem_state_map -0x5d0e 024949 rtnbit0 smap_rxlmp -0x5d0f 024950 set0 smap_rxlmp ,pdata -0x5d10 024951 set0 mark_rxbuf_inuse ,mark -0x5d11 024952 store 1 ,mem_state_map -0x5d12 024953 fetch 1 ,mem_rxbuf -0x5d13 024954 fetcht 1 ,mem_state_map -0x5d14 024955 isolate1 smap_lmptidinit ,pdata -0x5d15 024956 setflag true ,smap_lmptid ,temp -0x5d16 024957 storet 1 ,mem_state_map -0x5d17 024958 and_into 0x2 ,temp -0x5d18 024959 storet 1 ,mem_lmo_tid2 -0x5d19 024960 fetcht 1 ,mem_state_map -0x5d1a 024961 rshift pdata ,pdata -0x5d1b 024962 store 1 ,mem_lmi_opcode2 -0x5d1c 024963 bpatchx patch2f_6 ,mem_patch2f -0x5d1d 024964 fetch 1 ,mem_lmi_opcode2 -0x5d1e 024965 beq lmp_escape ,parse_lmp_escape -0x5d1f 024966 beq lmp_accepted ,parse_lmp_accepted -0x5d20 024967 beq lmp_not_accepted ,parse_lmp_not_accepted -0x5d21 024968 beq lmp_set_afh ,parse_lmp_set_afh -0x5d22 024969 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req -0x5d23 024970 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req -0x5d24 024971 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key -0x5d25 024972 beq lmp_auto_rate ,parse_lmp_auto_rate -0x5d26 024973 beq lmp_test_control ,parse_lmp_test_control -0x5d27 024974 beq lmp_test_activate ,parse_lmp_test_activate -0x5d28 024975 beq lmp_setup_complete ,parse_lmp_setup_complete -0x5d29 024976 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout -0x5d2a 024977 beq lmp_features_req ,parse_lmp_features_req -0x5d2b 024978 beq lmp_host_connection_req ,parse_lmp_conn_req -0x5d2c 024979 beq lmp_version_req ,parse_lmp_version_req -0x5d2d 024980 beq lmp_version_res ,parse_lmp_version_res -0x5d2e 024981 beq lmp_detach ,parse_lmp_detach -0x5d2f 024982 beq lmp_max_slot ,parse_lmp_max_slot -0x5d30 024983 beq lmp_max_slot_req ,parse_lmp_max_slot_req -0x5d31 024984 beq lmp_name_req ,parse_lmp_name_req -0x5d32 024985 beq lmp_name_res ,parse_lmp_name_res -0x5d33 024986 beq lmp_features_res ,parse_lmp_features_res -0x5d34 024987 beq lmp_comb_key ,parse_lmp_comb_key -0x5d35 024988 beq lmp_au_rand ,parse_lmp_au_rand -0x5d36 024989 beq lmp_in_rand ,parse_lmp_in_rand -0x5d37 024990 beq lmp_sres ,parse_lmp_sres -0x5d38 024991 beq lmp_incr_power_req ,parse_lmp_incr_power -0x5d39 024992 beq lmp_decr_power_req ,parse_lmp_decr_power -0x5d3a 024993 beq lmp_max_power ,parse_lmp_max_power -0x5d3b 024994 beq lmp_min_power ,parse_lmp_min_power -0x5d3c 024995 beq lmp_page_mode_req ,parse_lmp_page_mode_req -0x5d3d 024996 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req -0x5d3e 024997 beq lmp_preferred_rate ,parse_lmp_preferred_rate -0x5d3f 024998 beq lmp_slot_offset ,parse_lmp_slot_offset -0x5d40 024999 beq lmp_sniff_req ,parse_lmp_sniff_req -0x5d41 025000 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req -0x5d42 025001 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req -0x5d43 025002 beq lmp_switch_req ,parse_lmp_switch_req -0x5d44 025003 beq lmp_temp_rand ,parse_lmp_temp_rand -0x5d45 025004 beq lmp_temp_key ,parse_lmp_temp_key -0x5d46 025005 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req -0x5d47 025006 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res -0x5d48 025007 beq lmp_unit_key ,parse_lmp_unit_key -0x5d49 025008 beq lmp_unsniff_req ,parse_lmp_unsniff_req -0x5d4a 025009 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key -0x5d4b 025010 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header -0x5d4c 025011 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload -0x5d4d 025012 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm -0x5d4e 025013 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number -0x5d4f 025014 beq lmp_dhkey_check ,parse_dhkey_check -0x5d50 025015 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res -0x5d51 025016 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req -: 025019 reject_unknown_packet: -0x5d52 025020 jam unknown_lmp_pdu ,mem_lmo_reason2 -: 025021 reject_lmp_packet: -0x5d53 025022 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5d54 025023 rtn -: 025025 parse_lmp_clkoffset_req: -0x5d55 025026 jam lmp_clkoffset_res ,mem_lmo_opcode2 -0x5d56 025027 rtn -: 025029 parse_enc_key_size_mask_req: -0x5d57 025030 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 -0x5d58 025031 rtn -: 025033 parse_lmp_set_afh: -0x5d59 025034 fetch 4 ,mem_rxbuf + 1 -0x5d5a 025035 lshift pdata ,pdata -0x5d5b 025036 store 4 ,mem_afh_instant -0x5d5c 025037 fetch 1 ,mem_rxbuf + 5 -0x5d5d 025038 store 1 ,mem_afh_new_mod -0x5d5e 025039 fetch 5 ,mem_rxbuf + 6 -0x5d5f 025040 store 5 ,mem_afh_map_new -0x5d60 025041 fetch 5 ,mem_rxbuf + 11 -0x5d61 025042 istore 5 ,contw -0x5d62 025043 fetch 1 ,mem_mode -0x5d63 025044 set1 afh_change ,pdata -0x5d64 025045 store 1 ,mem_mode -0x5d65 025046 rtn -: 025047 parse_lmp_escape: -0x5d66 025048 bpatchx patch2f_7 ,mem_patch2f -0x5d67 025049 fetch 1 ,mem_rxbuf + 1 -0x5d68 025050 set1 7 ,pdata -0x5d69 025051 store 1 ,mem_lmi_opcode2 -0x5d6a 025052 beq lmp_ext_accepted ,parse_lmpext_accepted -0x5d6b 025053 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted -0x5d6c 025054 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req -0x5d6d 025055 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res -0x5d6e 025056 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req -0x5d6f 025057 beq lmp_ext_features_req ,parse_lmpext_features_req -0x5d70 025058 beq lmp_ext_features_res ,parse_lmpext_features_res -0x5d71 025059 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req -0x5d72 025060 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt -0x5d73 025061 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt -0x5d74 025062 beq lmp_io_cap_req ,parse_lmpext_iocap_req -0x5d75 025063 beq lmp_io_cap_res ,parse_lmpext_iocap_res -0x5d76 025064 rtneq lmp_ext_features_res -: 025067 reject_unknown_ext_packet: -0x5d77 025068 jam lmp_not_accepted_ext ,mem_lmo_opcode2 -0x5d78 025069 jam unknown_lmp_pdu ,mem_lmo_reason2 -0x5d79 025071 rtn -: 025072 parse_lmpext_chn_classification_req: -0x5d7a 025073 jam lmp_not_accepted_ext ,mem_lmo_opcode2 -0x5d7b 025074 jam not_support_chn_classification ,mem_lmo_reason2 -0x5d7c 025075 rtn -: 025077 parse_lmpext_iocap_req: -0x5d7d 025078 call iocap_lmpext_load -0x5d7e 025079 jam lmp_io_cap_res ,mem_lmo_opcode2 -0x5d7f 025080 rtn -: 025082 parse_lmpext_iocap_res: -0x5d80 025083 call iocap_lmpext_load -0x5d81 025084 branch iocap_lmpext_common -: 025086 iocap_lmpext_load: -0x5d82 025087 arg mem_sp_iocap_remote ,contw -0x5d83 025088 fetch 3 ,mem_rxbuf + 2 -0x5d84 025089 istore 3 ,contw -0x5d85 025090 rtn -: 025092 iocap_lmpext_common: -0x5d86 025093 branch master_set_mem_master_sp_flag ,true -0x5d87 025094 rtn -: 025095 parse_lmpext_accepted: -0x5d88 025096 fetch 1 ,mem_rxbuf + 3 -0x5d89 025097 set1 7 ,pdata -0x5d8a 025098 store 1 ,mem_lmi_accepted_opcode -0x5d8b 025099 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt -0x5d8c 025100 rtn -: 025103 parse_lmpext_not_accepted: -0x5d8d 025104 fetch 1 ,mem_rxbuf + 3 -0x5d8e 025105 set1 7 ,pdata -0x5d8f 025106 store 1 ,mem_lmi_accepted_opcode -0x5d90 025107 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt -0x5d91 025108 rtn -: 025110 parse_lmpext_accepted_ptt: -0x5d92 025111 fetch 1 ,mem_ptt -0x5d93 025112 fetcht 1 ,mem_state_map -0x5d94 025113 nsetflag blank ,smap_edr ,temp -0x5d95 025114 storet 1 ,mem_state_map -: 025115 parse_lmpext_not_accepted_ptt: -0x5d96 025116 fetch 1 ,mem_state -0x5d97 025117 rtnbit0 state_init_seq -0x5d98 025118 set0 state_init_seq ,pdata -0x5d99 025119 store 1 ,mem_state -0x5d9a 025120 fetch 1 ,mem_auth_enable -0x5d9b 025121 nrtn blank -0x5d9c 025122 jam lmp_setup_complete ,mem_lmo_opcode2 -0x5d9d 025123 rtn -: 025125 parse_lmpext_pause_encrypt: -0x5d9e 025126 nbranch parse_lmpext_pause_encrypt_slave ,master -0x5d9f 025127 jam lmp_stop_encryption_req ,mem_lmo_opcode2 -0x5da0 025128 branch tid_reply -: 025130 parse_lmpext_pause_encrypt_slave: -0x5da1 025131 jam lmp_pause_encryption_req ,mem_lmo_opcode2 -0x5da2 025132 rtn -: 025134 parse_lmpext_resume_encrypt: -0x5da3 025137 call tid_reply -0x5da4 025138 branch lmp_start_encryption -: 025140 parse_lmpext_features_req: -0x5da5 025141 jam lmp_ext_features_res ,mem_lmo_opcode2 -0x5da6 025142 rtn -: 025144 parse_lmpext_features_res: -0x5da7 025145 fetcht 1 ,mem_rxbuf + 4 -0x5da8 025146 and temp ,0x1 ,temp -0x5da9 025147 storet 1 ,mem_remote_sppcap -0x5daa 025148 fetch 1 ,mem_hci_cmd -0x5dab 025149 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci -0x5dac 025150 jam 0 ,mem_hci_cmd -: 025151 parse_lmpext_features_res_not_hci: -0x5dad 025152 fetch 1 ,mem_conn_sm -0x5dae 025153 rtnne conn_sm_wait_features_ext -0x5daf 025154 jam conn_sm_send_conn_req ,mem_conn_sm -0x5db0 025155 branch process_conn_sm -: 025157 parse_lmp_accepted: -0x5db1 025158 bpatchx patch30_0 ,mem_patch30 -0x5db2 025159 fetch 1 ,mem_rxbuf + 1 -0x5db3 025160 store 1 ,mem_lmi_accepted_opcode -0x5db4 025161 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn -0x5db5 025162 beq lmp_in_rand ,parse_lmp_accepted_inrand -0x5db6 025163 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode -0x5db7 025164 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize -0x5db8 025165 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc -0x5db9 025166 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc -0x5dba 025167 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req -0x5dbb 025168 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req -0x5dbc 025169 beq lmp_switch_req ,parse_lmp_accepted_switch -0x5dbd 025171 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header -0x5dbe 025172 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload -0x5dbf 025173 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number -0x5dc0 025174 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check -0x5dc1 025175 rtn -: 025177 parse_lmp_not_accepted: -0x5dc2 025178 bpatchx patch30_1 ,mem_patch30 -0x5dc3 025179 fetch 1 ,mem_rxbuf + 1 -0x5dc4 025180 store 1 ,mem_lmi_accepted_opcode -0x5dc5 025181 beq lmp_name_req ,parse_lmp_not_accepted_name_req -0x5dc6 025182 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn -0x5dc7 025183 beq lmp_au_rand ,parse_lmp_not_accepted_aurand -0x5dc8 025184 beq lmp_in_rand ,parse_lmp_not_accepted_inrand -0x5dc9 025185 beq lmp_switch_req ,parse_lmp_not_accepted_switch -0x5dca 025187 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number -0x5dcb 025188 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check -0x5dcc 025189 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req -0x5dcd 025190 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req -0x5dce 025191 rtn -: 025193 parse_lmp_accepted_switch: -0x5dcf 025194 jam bt_evt_switch_accept ,mem_fifo_temp -0x5dd0 025195 call ui_ipc_send_event -0x5dd1 025196 branch role_switch_prepare0 -: 025197 parse_lmp_not_accepted_switch: -0x5dd2 025198 jam bt_evt_switch_not_accept ,mem_fifo_temp -0x5dd3 025199 call ui_ipc_send_event -0x5dd4 025200 jam switch_flag_not_accept ,mem_switch_flag -0x5dd5 025201 setarg timer_switch_waite -0x5dd6 025202 arg switch_wait_timer ,queue -0x5dd7 025203 branch timer_init -: 025206 parse_lmp_accepted_hostconn: -0x5dd8 025209 fetch 1 ,mem_lmp_conn_state -0x5dd9 025210 set1 received_conn_req ,pdata -0x5dda 025211 store 1 ,mem_lmp_conn_state -0x5ddb 025212 jam bt_evt_bb_connected ,mem_fifo_temp -0x5ddc 025213 call ui_ipc_send_event -0x5ddd 025214 jam lmp_packet_type_table_req ,mem_lmo_opcode2 -: 025216 parse_lmp_accepted_hostconn_ctn: -0x5dde 025218 fetch 1 ,mem_conn_sm -0x5ddf 025219 bne conn_sm_wait_conn_accept ,parse_rx_done -0x5de0 025222 jam conn_sm_auth_pair ,mem_conn_sm -0x5de1 025223 rtn -: 025231 parse_lmp_not_accepted_hostconn: -0x5de2 025232 jam acl_connection_already_exists ,mem_disconn_reason_send -0x5de3 025233 jam lmp_detach ,mem_lmo_opcode2 -0x5de4 025235 jam conn_sm_standby ,mem_conn_sm -0x5de5 025237 branch parse_rx_done ,true -0x5de6 025238 rtn -: 025240 parse_lmp_accepted_inrand: -0x5de7 025241 fetch 1 ,mem_link_key_exists -0x5de8 025242 nrtn blank -0x5de9 025243 call clear_linkkey -0x5dea 025244 call lmp_generate_key -0x5deb 025245 rtn master -0x5dec 025246 set1 mark_slave_in_rand_accepted ,mark -0x5ded 025247 rtn -: 025249 parse_lmp_accepted_enc_mode: -0x5dee 025250 nrtn master -0x5def 025251 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 -0x5df0 025252 fetch 1 ,mem_state_map -0x5df1 025253 rtnbit0 smap_encryption -0x5df2 025254 jam lmp_stop_encryption_req ,mem_lmo_opcode2 -0x5df3 025255 rtn -: 025257 parse_lmp_accepted_enc_keysize: -0x5df4 025258 branch lmp_start_encryption -: 025260 parse_lmp_accepted_start_enc: -0x5df5 025261 call send_create_conn_start_l2cap_timer_sm -0x5df6 025262 fetch 1 ,mem_state -0x5df7 025263 rtnbit1 state_conn_comp -0x5df8 025264 jam lmp_setup_complete ,mem_lmo_opcode2 -0x5df9 025265 fetch 1 ,mem_conn_sm -0x5dfa 025266 rtnne conn_sm_encrypt_wait -0x5dfb 025267 jam conn_sm_encrypt_wait_clear ,mem_conn_sm -0x5dfc 025268 rtn -: 025270 parse_lmp_accepted_stop_enc: -0x5dfd 025278 rtn -: 025280 parse_lmp_not_accepted_aurand: -: 025281 parse_lmp_not_accepted_aurand_send_detach: -0x5dfe 025282 jam lmp_detach ,mem_lmo_opcode2 -0x5dff 025283 jam other_end_terminated ,mem_disconn_reason_send -0x5e00 025284 rtn -: 025286 parse_lmp_not_accepted_inrand: -0x5e01 025287 fetch 1 ,mem_rxbuf + 2 -0x5e02 025288 beq key_missing ,parse_lmp_inrand_key_missing -0x5e03 025289 rtnne pairing_not_allowed -0x5e04 025290 jam pairing_not_allowed ,mem_disconn_reason_send -0x5e05 025291 jam lmp_detach ,mem_lmo_opcode2 -0x5e06 025292 rtn -: 025293 parse_lmp_inrand_key_missing: -0x5e07 025294 jam key_missing ,mem_disconn_reason_send -0x5e08 025295 jam lmp_detach ,mem_lmo_opcode2 -0x5e09 025296 rtn -: 025298 parse_lmp_not_accepted_name_req: -0x5e0a 025299 rtn -: 025301 parse_lmp_not_accepted_simple_pairing_number: -0x5e0b 025302 jam sp_stat_null ,mem_sp_state -0x5e0c 025303 jam lmp_detach ,mem_lmo_opcode2 -0x5e0d 025304 branch parse_rx_done -: 025306 parse_lmp_not_accepted_dhkey_check: -0x5e0e 025307 jam sp_stat_null ,mem_sp_state -0x5e0f 025308 jam lmp_detach ,mem_lmo_opcode2 -0x5e10 025309 branch parse_rx_done -: 025310 parse_lmp_not_accepted_unsniff_req: -0x5e11 025311 jam bt_evt_unsniff_not_accept ,mem_fifo_temp -0x5e12 025312 branch ui_ipc_send_event -: 025314 parse_lmp_accepted_unsniff_req: -0x5e13 025315 jam bt_evt_unsniff_accept ,mem_fifo_temp -0x5e14 025316 call ui_ipc_send_event -0x5e15 025317 branch sniff_exit -: 025319 parse_lmp_accepted_sniff_req: -0x5e16 025320 jam bt_evt_sniff_accept ,mem_fifo_temp -0x5e17 025321 call ui_ipc_send_event -0x5e18 025322 setarg 0 -0x5e19 025323 store 2 ,mem_dsniff -0x5e1a 025324 fetch 2 ,mem_sniff_param_interval -0x5e1b 025325 lshift pdata ,pdata -0x5e1c 025326 store 2 ,mem_tsniff -0x5e1d 025327 fetch 1 ,mem_sniff_param_attempt -0x5e1e 025328 store 1 ,mem_sniff_attempt -0x5e1f 025329 fetch 1 ,mem_sniff_param_timeout -0x5e20 025330 store 1 ,mem_sniff_timeout -0x5e21 025331 branch sniff_init -: 025333 parse_lmp_not_acdcept_sniff_req: -0x5e22 025334 jam bt_evt_sniff_not_accept ,mem_fifo_temp -0x5e23 025335 branch ui_ipc_send_event -: 025337 parse_lmp_crypt_key: -0x5e24 025338 fetcht 1 ,mem_rxbuf + 1 -0x5e25 025339 storet 1 ,mem_key_size -0x5e26 025340 branch accept_lmp_msg -: 025342 parse_lmp_setup_complete: -0x5e27 025343 fetch 1 ,mem_lmp_conn_state -0x5e28 025344 set1 received_setup_complete ,pdata -0x5e29 025345 store 1 ,mem_lmp_conn_state -0x5e2a 025346 rtnbit1 sent_setup_complete -0x5e2b 025347 jam lmp_setup_complete ,mem_lmo_opcode2 -0x5e2c 025348 branch parse_rx_done -: 025350 parse_lmp_max_slot: -0x5e2d 025353 rtn -: 025355 parse_lmp_max_slot_req: -0x5e2e 025356 fetch 1 ,mem_max_slot -0x5e2f 025357 fetcht 1 ,mem_rxbuf + 1 -0x5e30 025358 isub temp ,null -0x5e31 025360 branch accept_lmp_msg ,positive -0x5e32 025361 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5e33 025362 jam unspecified_error ,mem_lmo_reason2 -0x5e34 025363 jam lmp_max_slot_req ,mem_lmi_opcode2 -0x5e35 025364 rtn -: 025366 parse_lmp_detach: -0x5e36 025367 call prepare_disconnect -0x5e37 025368 branch accept_lmp_msg -: 025370 accept_lmp_msg: -0x5e38 025371 jam lmp_accepted ,mem_lmo_opcode2 -0x5e39 025372 rtn -: 025374 parse_lmp_incr_power: -0x5e3a 025375 jam lmp_max_power ,mem_lmo_opcode2 -0x5e3b 025376 rtn -: 025378 parse_lmp_decr_power: -0x5e3c 025379 jam lmp_min_power ,mem_lmo_opcode2 -0x5e3d 025380 rtn -: 025382 parse_lmp_version_res: -0x5e3e 025383 fetch 1 ,mem_conn_sm -0x5e3f 025384 rtneq conn_sm_wait_version -0x5e40 025386 jam conn_sm_send_features ,mem_conn_sm -0x5e41 025388 rtn -: 025391 parse_lmp_auto_rate: -0x5e42 025392 rtn -: 025394 parse_lmp_in_rand: -0x5e43 025395 call lmp_copy_rand -0x5e44 025396 jam pincode_state_wait_pincode ,mem_pincode_state -0x5e45 025397 jam bt_evt_pincode_req ,mem_fifo_temp -0x5e46 025398 call ui_ipc_send_event -0x5e47 025400 call tid_check -0x5e48 025401 nbranch lmp_accept_inrand ,true -0x5e49 025403 nbranch parse_lmp_inrand_res ,master -0x5e4a 025404 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5e4b 025405 jam lmp_in_rand ,mem_lmi_opcode2 -0x5e4c 025406 jam transaction_collision ,mem_lmo_reason2 -0x5e4d 025407 rtn -: 025408 parse_lmp_inrand_res: -0x5e4e 025409 fetch 1 ,mem_op -0x5e4f 025410 set1 op_inrand_req ,pdata -0x5e50 025411 store 1 ,mem_op -0x5e51 025412 rtn -: 025415 pop_tid_follow: -0x5e52 025416 fetcht 1 ,mem_state_map -0x5e53 025417 nsetflag blank ,smap_lmptid ,temp -0x5e54 025418 storet 1 ,mem_state_map -0x5e55 025419 rtn -: 025422 push_tid_follow: -0x5e56 025423 fetch 1 ,mem_lmo_tid2 -0x5e57 025424 rshift pdata ,pdata -0x5e58 025425 and_into 1 ,pdata -0x5e59 025426 rtn -: 025428 parse_lmp_au_rand_moudle: -0x5e5a 025429 fetch 1 ,mem_nv_data_number -0x5e5b 025430 rtn blank -0x5e5c 025431 fetch 1 ,mem_pairing_auth -0x5e5d 025432 call load_device_list ,blank -0x5e5e 025433 rtn -: 025435 parse_lmp_au_rand: -0x5e5f 025436 call parse_lmp_au_rand_moudle -0x5e60 025437 call push_tid_follow -0x5e61 025438 store 1 ,mem_sres_tid -0x5e62 025439 call lmp_copy_rand -0x5e63 025440 jam lmp_sres ,mem_lmo_opcode2 -0x5e64 025441 fetch 1 ,mem_link_key_exists -0x5e65 025442 nrtn blank -0x5e66 025443 fetch 1 ,mem_state -0x5e67 025444 rtnbit1 state_combkey -0x5e68 025445 jam key_missing ,mem_lmo_reason2 -0x5e69 025446 branch reject_lmp_packet -: 025448 parse_lmp_sres: -0x5e6a 025449 arg mem_plap ,rega -0x5e6b 025450 call function_e1 -0x5e6c 025451 fetch 4 ,mem_rxbuf + 1 -0x5e6d 025452 fetcht 4 ,mem_input_store -0x5e6e 025453 isub temp ,null -0x5e6f 025454 branch authentication_ok ,zero -0x5e70 025455 jam lmp_detach ,mem_lmo_opcode2 -0x5e71 025456 jam authentication_failure_error ,mem_disconn_reason_send -0x5e72 025457 rtn -: 025458 authentication_ok: -0x5e73 025459 call authentication_ok_common -0x5e74 025460 fetch 1 ,mem_ssp_enable -0x5e75 025461 branch pairing_success ,blank -0x5e76 025462 rtn -: 025465 authentication_ok_common: -0x5e77 025466 call copy_aco -0x5e78 025467 call linkkey_ready -0x5e79 025468 fetch 1 ,mem_op -0x5e7a 025469 isolate1 op_auth_req ,pdata -0x5e7b 025470 set0 op_auth_req ,pdata -0x5e7c 025471 store 1 ,mem_op -0x5e7d 025472 fetch 1 ,mem_conn_sm -0x5e7e 025473 beq conn_sm_auth_wait ,authentication_ok_conn_sm -0x5e7f 025474 beq conn_sm_pairing_wait ,authentication_ok_conn_sm -0x5e80 025475 rtn -: 025476 authentication_ok_conn_sm: -0x5e81 025477 fetch 1 ,mem_pairing_auth -0x5e82 025478 rtnne defalt_pairing_auth -0x5e83 025479 fetch 1 ,mem_state_map -0x5e84 025480 rtnbit1 smap_encryption -0x5e85 025481 branch host_create_conn_encrypt -: 025483 parse_lmp_comb_key: -0x5e86 025484 arg mem_rxbuf + 1 ,rega -0x5e87 025485 arg mem_kinit ,regb -0x5e88 025486 arg mem_random_number ,contw -0x5e89 025487 call xor16 -0x5e8a 025488 arg mem_plap ,rega -0x5e8b 025489 call generate_linkkey -0x5e8c 025490 jam lmp_au_rand ,mem_lmo_opcode2 -0x5e8d 025491 fetch 1 ,mem_state -0x5e8e 025492 bbit0 state_combkey ,lmp_generate_key -0x5e8f 025493 rtn -: 025495 parse_lmp_name_res: -0x5e90 025496 fetch 2 ,mem_len -0x5e91 025497 add pdata ,-3 ,loopcnt -0x5e92 025498 fetcht 1 ,mem_rxbuf + 1 -0x5e93 025499 setarg mem_tmp_buffer -0x5e94 025500 iadd temp ,contw -0x5e95 025501 arg mem_rxbuf + 3 ,contr -0x5e96 025502 call memcpy -0x5e97 025503 fetcht 1 ,mem_name_offset -0x5e98 025504 fetch 1 ,mem_rxbuf + 2 -0x5e99 025505 isub temp ,pdata -0x5e9a 025506 sub pdata ,14 ,null -0x5e9b 025507 branch parse_lmp_name_res_end ,positive -0x5e9c 025508 add temp ,14 ,pdata -0x5e9d 025509 store 1 ,mem_name_offset -0x5e9e 025510 jam lmp_name_req ,mem_lmo_opcode2 -0x5e9f 025511 rtn -: 025512 parse_lmp_name_res_end: -0x5ea0 025513 fetch 1 ,mem_state_map -0x5ea1 025514 set1 smap_name_res ,pdata -0x5ea2 025515 store 1 ,mem_state_map -0x5ea3 025516 bbit1 smap_name_req ,lmp_disconnect -0x5ea4 025517 rtn -: 025518 parse_lmp_name_req: -0x5ea5 025519 fetch 1 ,mem_rxbuf + 1 -0x5ea6 025520 store 1 ,mem_lmi_opcode2 -0x5ea7 025521 jam lmp_name_res ,mem_lmo_opcode2 -0x5ea8 025522 rtn -: 025524 parse_lmp_conn_req: -0x5ea9 025525 branch accept_lmp_msg -: 025527 parse_lmp_timing_accuracy_req: -0x5eaa 025528 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 -0x5eab 025529 rtn -: 025531 parse_lmp_features_req: -0x5eac 025532 jam lmp_features_res ,mem_lmo_opcode2 -0x5ead 025533 rtn -: 025535 parse_lmp_version_req: -0x5eae 025536 jam lmp_version_res ,mem_lmo_opcode2 -0x5eaf 025537 rtn -: 025539 parse_lmp_supervision_timeout: -0x5eb0 025542 rtn -: 025546 parse_lmp_sniff_subrating_req: -0x5eb1 025547 fetch 2 ,mem_tsniff -0x5eb2 025548 iforce temp -0x5eb3 025549 fetch 1 ,mem_rxbuf + 2 -0x5eb4 025550 store 1 ,mem_subsniff_rate -0x5eb5 025551 imul32 temp ,temp -0x5eb6 025552 fetch 2 ,mem_rxbuf + 3 -0x5eb7 025553 lshift pdata ,pdata -0x5eb8 025554 store 2 ,mem_subsniff_tcmax -0x5eb9 025555 fetch 4 ,mem_rxbuf + 5 -0x5eba 025556 lshift pdata ,pdata -0x5ebb 025557 store 4 ,mem_subsniff_instant -0x5ebc 025559 deposit temp -0x5ebd 025560 store 2 ,mem_subsniff_tsniff -0x5ebe 025561 rtn -: 025562 parse_lmpext_packet_type_table_req: -0x5ebf 025563 fetcht 1 ,mem_ptt -0x5ec0 025564 fetch 1 ,mem_rxbuf + 2 -0x5ec1 025565 ixor temp ,null -0x5ec2 025566 nbranch reject_unknown_ext_packet ,zero -0x5ec3 025567 isolate1 0 ,pdata -0x5ec4 025568 fetch 1 ,mem_state_map -0x5ec5 025569 setflag true ,smap_edr ,pdata -0x5ec6 025570 store 1 ,mem_state_map -0x5ec7 025571 jam lmp_ext_accepted ,mem_lmo_opcode2 -0x5ec8 025572 jam lmp_packet_type_table_req ,mem_lmi_opcode2 -0x5ec9 025573 rtn -: 025576 parse_lmp_sniff_subrating_res: -: 025577 parse_lmp_preferred_rate: -: 025578 parse_lmp_max_power: -: 025579 parse_lmp_min_power: -0x5eca 025580 rtn -: 025581 parse_lmp_page_mode_req: -0x5ecb 025583 branch accept_lmp_msg -: 025584 parse_lmp_page_scan_mode_req: -0x5ecc 025587 branch accept_lmp_msg -: 025591 parse_lmp_slot_offset: -0x5ecd 025592 fetch 2 ,mem_rxbuf + 1 -0x5ece 025593 store 2 ,mem_slot_offset -0x5ecf 025594 rtn -: 025596 parse_lmp_sniff_req_check_sniff_para: -0x5ed0 025597 fetch 2 ,mem_rxbuf + 4 -0x5ed1 025598 fetcht 1 ,mem_lpm_mult -0x5ed2 025599 imul32 temp ,pdata -0x5ed3 025600 arg 0x640 ,temp -0x5ed4 025601 isub temp ,null -0x5ed5 025603 rtn -: 025605 parse_lmp_sniff_req: -0x5ed6 025606 fetch 2 ,mem_rxbuf + 6 -0x5ed7 025607 branch lmp_reject_sniff ,blank -0x5ed8 025608 call parse_lmp_sniff_req_check_sniff_para -0x5ed9 025609 branch lmp_reject_sniff ,positive -0x5eda 025610 fetch 1 ,mem_device_option -0x5edb 025611 sub pdata ,dvc_op_module ,null -0x5edc 025612 call module_set_lpm_mult_2 ,zero -0x5edd 025613 fetch 1 ,mem_state -0x5ede 025614 bbit1 state_insniff ,lmp_reject_sniff -0x5edf 025615 fetch 2 ,mem_rxbuf + 2 -0x5ee0 025616 lshift pdata ,pdata -0x5ee1 025617 store 2 ,mem_dsniff -0x5ee2 025618 fetch 2 ,mem_rxbuf + 4 -0x5ee3 025619 lshift pdata ,pdata -0x5ee4 025620 store 2 ,mem_tsniff -0x5ee5 025621 fetch 2 ,mem_rxbuf + 6 -0x5ee6 025622 store 1 ,mem_sniff_attempt -0x5ee7 025623 iforce temp -0x5ee8 025624 fetch 2 ,mem_rxbuf + 8 -0x5ee9 025625 store 1 ,mem_sniff_timeout -0x5eea 025626 isub temp ,null -0x5eeb 025627 nbranch set_big_value_to_attempt ,positive -0x5eec 025628 store 1 ,mem_sniff_attempt -: 025629 set_big_value_to_attempt: -0x5eed 025631 jam lmp_accepted ,mem_lmo_opcode2 -0x5eee 025632 jam lmp_sniff_req ,mem_lmi_opcode2 -0x5eef 025633 rtn -: 025635 lmp_reject_sniff: -0x5ef0 025636 jam pdu_not_allowed ,mem_lmo_reason2 -0x5ef1 025637 branch reject_lmp_packet -: 025639 parse_lmp_start_encryption_req: -0x5ef2 025640 call accept_lmp_msg -0x5ef3 025641 call lmp_copy_rand -0x5ef4 025642 call function_e3 -0x5ef5 025643 branch start_encryption -: 025645 parse_lmp_stop_encryption_req: -0x5ef6 025646 call accept_lmp_msg -0x5ef7 025647 branch stop_encryption -: 025650 parse_lmp_switch_req: -0x5ef8 025651 fetch 4 ,mem_rxbuf + 1 -0x5ef9 025652 lshift pdata ,pdata -0x5efa 025654 branch parse_lmp_switch_accept ,master -0x5efb 025655 fetcht 1 ,mem_link_key_exists -0x5efc 025656 nbranch parse_lmp_switch_req_clear_mark ,blank -: 025657 parse_lmp_switch_req_not_accept: -0x5efd 025658 jam lmp_not_accepted ,mem_lmo_opcode2 -0x5efe 025659 jam lmp_switch_req ,mem_lmi_opcode2 -0x5eff 025660 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f00 025661 rtn -: 025662 parse_lmp_switch_req_clear_mark: -0x5f01 025663 jam lmp_slot_offset ,mem_lmo_opcode2 -0x5f02 025664 jam 0 ,mem_conn_sm -0x5f03 025665 branch role_switch_prepare -: 025667 parse_lmp_switch_accept: -0x5f04 025668 call role_switch_prepare -0x5f05 025669 set1 mark_reconn_recieve_switch ,mark -0x5f06 025670 fetch 1 ,mem_connection_options -0x5f07 025671 set0 connection_switch ,pdata -0x5f08 025672 store 1 ,mem_connection_options -0x5f09 025673 branch accept_lmp_msg -: 025677 parse_lmp_temp_rand: -: 025678 parse_lmp_temp_key: -: 025679 parse_lmp_timing_accuracy_res: -: 025680 parse_lmp_unit_key: -: 025681 parse_lmp_use_semi_permanend_key: -0x5f0a 025682 rtn -: 025685 parse_lmp_unsniff_req: -0x5f0b 025686 jam lmp_accepted ,mem_lmo_opcode2 -0x5f0c 025687 jam lmp_unsniff_req ,mem_lmi_opcode2 -0x5f0d 025688 jam bt_evt_remote_unsniff ,mem_fifo_temp -0x5f0e 025689 call ui_ipc_send_event -0x5f0f 025690 branch sniff_exit -: 025692 parse_lmp_encapsulated_header: -0x5f10 025693 fetch 1 ,mem_rxbuf + 1 -0x5f11 025694 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject -0x5f12 025695 fetch 1 ,mem_rxbuf + 2 -0x5f13 025696 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject -0x5f14 025697 fetch 1 ,mem_rxbuf + 3 -0x5f15 025698 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject -0x5f16 025699 call check_localsm -0x5f17 025700 branch parse_lmp_encapsulated_header_master ,true -0x5f18 025701 jam sp_stat_key_recv ,mem_sp_state -: 025702 parse_lmp_encapsulated_header_master: -0x5f19 025703 jam lmp_accepted ,mem_lmo_opcode2 -0x5f1a 025704 jam lmp_encapsulated_header ,mem_lmi_opcode2 -0x5f1b 025705 branch parse_rx_done -: 025707 parse_lmp_encapsulated_header_reject: -0x5f1c 025708 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f1d 025709 branch reject_lmp_packet -: 025711 parse_lmp_accepted_encapsulated_header: -0x5f1e 025714 jam lmp_encapsulated_payload ,mem_lmo_opcode2 -0x5f1f 025716 rtn -: 025717 parse_lmp_accepted_simple_pairing_number: -0x5f20 025718 fetch 1 ,mem_ssp_mode_flag -0x5f21 025719 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin -0x5f22 025720 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey -: 025721 parse_lmp_accepted_simple_pairing_number_common: -0x5f23 025722 call check_localsm -0x5f24 025723 rtn true -0x5f25 025724 jam sp_stat_confirm_recv ,mem_sp_state -0x5f26 025725 rtn -: 025727 parse_lmp_accepted_simple_pairing_number_ssp_pin: -0x5f27 025728 call g_noninit_number_confirm -0x5f28 025729 jam bt_evt_bt_gkey_generate ,mem_fifo_temp -0x5f29 025730 call ui_ipc_send_event -0x5f2a 025731 branch parse_lmp_accepted_simple_pairing_number_common -: 025734 parse_lmp_accepted_simple_pairing_number_passkey: -0x5f2b 025735 call check_localsm -0x5f2c 025736 rtn true -0x5f2d 025737 fetch 1 ,mem_authentication_passkey_times -0x5f2e 025738 beq 19 ,authentication_passkey_end -0x5f2f 025739 increase 1 ,pdata -0x5f30 025740 store 1 ,mem_authentication_passkey_times -: 025743 authentication_passkey: -0x5f31 025744 jam sp_flag_commit ,mem_sp_flag -0x5f32 025745 jam sp_stat_commit_calc ,mem_sp_state -0x5f33 025746 fetch 1 ,mem_authentication_passkey_times -0x5f34 025747 copy pdata ,queue -0x5f35 025748 fetch 6 ,mem_pin -0x5f36 025749 qisolate1 pdata -0x5f37 025750 setarg 0x80 -0x5f38 025751 setflag true ,0 ,pdata -0x5f39 025752 store 1 ,mem_passkey_1bit -0x5f3a 025753 rtn -: 025755 authentication_passkey_end: -0x5f3b 025756 jam sp_stat_confirm_recv ,mem_sp_state -0x5f3c 025757 rtn -: 025759 parse_lmp_accepted_dhkey_check: -0x5f3d 025760 call parse_lmp_accepted_dhkey_check_common -: 025761 pairing_success: -0x5f3e 025762 fetch 1 ,mem_flag_pairing_state -0x5f3f 025763 rtn blank -0x5f40 025764 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state -0x5f41 025765 jam bt_evt_bt_pairing_success ,mem_fifo_temp -0x5f42 025766 branch ui_ipc_send_event -: 025769 parse_lmp_accepted_dhkey_check_common: -0x5f43 025771 call check_localsm -0x5f44 025772 ncall g_noninit ,true -0x5f45 025773 call g_init ,true -0x5f46 025774 call check_localsm -0x5f47 025775 rtn true -0x5f48 025776 jam sp_stat_link_key_calc ,mem_sp_state -0x5f49 025777 jam sp_flag_commit ,mem_sp_flag -0x5f4a 025778 rtn -: 025780 parse_simple_pairing_confirm: -0x5f4b 025781 arg mem_sp_confirm_remote ,contw -0x5f4c 025782 arg mem_rxbuf + 1 ,contr -0x5f4d 025783 call memcpy16 -0x5f4e 025784 fetch 1 ,mem_ssp_mode_flag -0x5f4f 025785 rtneq ssp_mode_passkey_entry_flag -0x5f50 025786 branch master_set_mem_master_sp_flag -: 025788 parse_lmp_encapsulated_payload: -0x5f51 025789 fetch 1 ,mem_master_sp_state -0x5f52 025790 beq sp_stat_random_send ,parse_encapsulated_payload_master -0x5f53 025791 fetch 1 ,mem_sp_state -0x5f54 025792 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject -: 025793 parse_encapsulated_payload_master: -0x5f55 025794 fetch 1 ,mem_sp_remote_key_recv_count -0x5f56 025795 sub pdata ,0x20 ,contw -0x5f57 025796 nbranch parse_lmp_encapsulated_payload_reject ,positive -0x5f58 025797 arg mem_sp_pubkey_remote ,contw -0x5f59 025798 iadd contw ,contw -0x5f5a 025799 fetch 8 ,mem_rxbuf + 1 -0x5f5b 025800 istore 8 ,contw -0x5f5c 025801 fetch 8 ,mem_rxbuf + 9 -0x5f5d 025802 istore 8 ,contw -0x5f5e 025803 fetch 1 ,mem_sp_remote_key_recv_count -0x5f5f 025804 increase 16 ,pdata -0x5f60 025805 store 1 ,mem_sp_remote_key_recv_count -0x5f61 025806 bne encapsulated_len_p192 ,accept_lmp_msg -: 025807 parse_lmp_encapsulated_payload_completed: -0x5f62 025808 call check_localsm -0x5f63 025809 branch accept_lmp_msg ,true -0x5f64 025810 jam sp_key_valid ,mem_sp_remote_key_invalid -0x5f65 025811 jam sp_stat_key_generate ,mem_sp_state -0x5f66 025812 jam sp_flag_commit ,mem_sp_flag -0x5f67 025813 branch accept_lmp_msg -: 025814 parse_lmp_encapsulated_payload_reject: -0x5f68 025815 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f69 025816 branch reject_lmp_packet -: 025817 parse_lmp_accepted_encapsulated_payload: -0x5f6a 025818 fetch 1 ,mem_sp_local_key_send_count -0x5f6b 025819 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted -0x5f6c 025820 jam lmp_encapsulated_payload ,mem_lmo_opcode2 -0x5f6d 025821 branch parse_rx_done -: 025823 parse_lmp_encapsulated_payload_all_accepted: -0x5f6e 025824 call check_localsm -0x5f6f 025825 branch parse_lmp_encapsulated_payload_all_accepted_master ,true -0x5f70 025826 fetch 1 ,mem_ssp_mode_flag -0x5f71 025827 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey -0x5f72 025828 jam sp_flag_commit ,mem_sp_flag -0x5f73 025829 jam sp_stat_commit_calc ,mem_sp_state -0x5f74 025830 branch parse_rx_done -: 025832 parse_lmp_encapsulated_payload_all_accepted_get_passkey: -0x5f75 025833 jam bt_evt_bt_get_passkey ,mem_fifo_temp -0x5f76 025834 branch ui_ipc_send_event -: 025837 parse_lmp_encapsulated_payload_all_accepted_master: -0x5f77 025839 branch parse_rx_done -: 025841 parse_lmp_simple_pairing_number: -0x5f78 025842 fetch 1 ,mem_master_sp_state -0x5f79 025843 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master -0x5f7a 025844 fetch 1 ,mem_sp_state -0x5f7b 025845 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject -: 025846 parse_lmp_simple_pairing_number_master: -0x5f7c 025847 arg mem_sp_random_remote ,contw -0x5f7d 025848 fetch 8 ,mem_rxbuf + 1 -0x5f7e 025849 istore 8 ,contw -0x5f7f 025850 fetch 8 ,mem_rxbuf + 9 -0x5f80 025851 istore 8 ,contw -0x5f81 025852 call check_localsm -0x5f82 025853 branch parse_lmp_simple_pairing_number_master0 ,true -0x5f83 025854 jam sp_stat_random_send ,mem_sp_state -0x5f84 025855 jam sp_flag_commit ,mem_sp_flag -0x5f85 025856 branch accept_lmp_msg -: 025857 parse_lmp_simple_pairing_number_master0: -0x5f86 025858 jam sp_stat_commit_calc ,mem_master_sp_state -0x5f87 025859 branch master_set_mem_master_sp_flag -: 025862 parse_lmp_simple_pairing_number_reject: -0x5f88 025863 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f89 025864 branch reject_lmp_packet -: 025866 parse_dhkey_check: -0x5f8a 025867 fetch 1 ,mem_master_sp_state -0x5f8b 025868 beq sp_stat_confirm_send ,parse_dhkey_check_master -0x5f8c 025869 fetch 1 ,mem_sp_state -0x5f8d 025870 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject -: 025871 parse_dhkey_check_master: -0x5f8e 025872 arg mem_sp_check_result ,contw -0x5f8f 025873 arg mem_rxbuf + 1 ,contr -0x5f90 025874 call memcpy16 -0x5f91 025875 call check_localsm -0x5f92 025876 branch parse_dhkey_check_master0 ,true -0x5f93 025877 fetch 1 ,mem_ssp_mode_flag -0x5f94 025878 beq ssp_mode_ssp_pin_flag ,number_comparison_mode -: 025879 number_comparison_successed: -0x5f95 025880 jam 0 ,mem_flag_mode_ssp_pin -0x5f96 025881 jam sp_stat_confirm_check ,mem_sp_state -0x5f97 025882 jam sp_flag_commit ,mem_sp_flag -0x5f98 025883 jam lmp_dhkey_check ,mem_lmi_opcode2 -0x5f99 025884 branch parse_rx_done -: 025886 parse_dhkey_check_master0: -0x5f9a 025887 jam sp_stat_confirm_check ,mem_master_sp_state -0x5f9b 025888 jam sp_flag_commit ,mem_master_sp_flag -0x5f9c 025889 branch parse_rx_done -: 025890 parse_lmp_dhkey_check_reject: -0x5f9d 025891 jam pdu_not_allowed ,mem_lmo_reason2 -0x5f9e 025892 branch reject_lmp_packet -: 025894 number_comparison_mode: -0x5f9f 025895 fetch 1 ,mem_flag_mode_ssp_pin -0x5fa0 025896 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result -0x5fa1 025897 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata -0x5fa2 025898 store 1 ,mem_flag_mode_ssp_pin -0x5fa3 025899 rtn -: 025901 comparison_result: -0x5fa4 025902 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed -0x5fa5 025903 jam 0 ,mem_flag_mode_ssp_pin -0x5fa6 025904 branch parse_lmp_dhkey_check_reject -: 025907 parse_lmp_clkoffset_res: -0x5fa7 025908 branch parse_rx_done -: 025910 parse_lmp_encryption_mode_req: -0x5fa8 025911 fetch 1 ,mem_connection_options -0x5fa9 025912 set0 connection_encrypt -0x5faa 025913 store 1 ,mem_connection_options -0x5fab 025914 call accept_lmp_msg -0x5fac 025915 nrtn master -0x5fad 025916 fetch 1 ,mem_rxbuf + 1 -0x5fae 025917 fetcht 1 ,mem_op -0x5faf 025918 setflag blank ,op_stop_enc ,temp -0x5fb0 025919 nsetflag blank ,op_start_enc ,temp -0x5fb1 025920 storet 1 ,mem_op -0x5fb2 025921 rtn -: 025923 parse_lmp_features_res: -0x5fb3 025924 fetcht 8 ,mem_rxbuf + 1 -: 025925 parse_lmp_features_res_not_hci: -0x5fb4 025926 fetch 1 ,mem_conn_sm -0x5fb5 025927 rtnne conn_sm_wait_features_res -0x5fb6 025929 fetch 1 ,mem_connection_options -0x5fb7 025930 bbit0 connection_feature_ext ,parse_lmp_send_conn -0x5fb8 025932 jam conn_sm_send_features_ext ,mem_conn_sm -0x5fb9 025933 rtn -: 025934 parse_lmp_send_conn: -0x5fba 025935 jam conn_sm_send_conn_req ,mem_conn_sm -0x5fbb 025936 rtn -: 025937 parse_lmp_test_activate: -0x5fbc 025938 fetch 1 ,mem_debug_config -0x5fbd 025939 store 1 ,mem_test_mode_old_debug_config -0x5fbe 025940 jam lmp_accepted ,mem_lmo_opcode2 -0x5fbf 025941 jam lmp_test_activate ,mem_lmi_opcode2 -0x5fc0 025942 rtn -: 025943 parse_lmp_test_control: -0x5fc1 025946 jam lmp_accepted ,mem_lmo_opcode2 -0x5fc2 025947 jam lmp_test_control ,mem_lmi_opcode2 -0x5fc3 025948 force 9 ,loopcnt -0x5fc4 025949 arg mem_rxbuf + 1 ,contr -0x5fc5 025950 arg mem_temp_payload ,contw -: 025951 parse_lmp_test_xor: -0x5fc6 025952 ifetch 1 ,contr -0x5fc7 025953 xor_into 0x55 ,pdata -0x5fc8 025954 istore 1 ,contw -0x5fc9 025955 loop parse_lmp_test_xor -0x5fca 025956 fetch 1 ,test_mode_scenario -0x5fcb 025957 fetcht 1 ,mem_tester_emulate -0x5fcc 025958 set0 tester_no_whitening ,temp -0x5fcd 025959 set0 tester_pattern_test ,temp -0x5fce 025960 beq exit_test_mode ,parse_lmp_test_control_exit -0x5fcf 025961 beq pause_test_mode ,parse_lmp_test_control_pause -0x5fd0 025962 beq closed_loop_back_acl ,parse_lmp_test_control_loopback -0x5fd1 025963 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite -0x5fd2 025964 beq closed_loop_back_sco ,parse_lmp_test_control_loopback -0x5fd3 025965 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite -0x5fd4 025966 beq zero_pattern ,parse_lmp_test_control_pattern -0x5fd5 025967 beq one_pattern ,parse_lmp_test_control_pattern -0x5fd6 025968 beq alt_pattern ,parse_lmp_test_control_pattern -0x5fd7 025969 beq alt2_pattern ,parse_lmp_test_control_pattern -0x5fd8 025970 beq pseudorandom ,parse_lmp_test_control_pattern -0x5fd9 025971 rtn -: 025972 parse_lmp_test_control_exit: -0x5fda 025974 fetch 1 ,mem_tester_emulate -0x5fdb 025975 set1 tester_exit ,pdata -0x5fdc 025976 set1 tester_change ,pdata -0x5fdd 025977 store 1 ,mem_tester_emulate -0x5fde 025978 rtn -: 025979 parse_lmp_test_control_pattern: -0x5fdf 025980 set1 tester_pattern_test ,temp -0x5fe0 025981 jam 5 ,mem_lch_code -0x5fe1 025982 fetch 2 ,test_mode_data_length -0x5fe2 025983 iforce loopcnt -0x5fe3 025984 store 2 ,mem_len -0x5fe4 025985 arg mem_rxbuf ,contw -0x5fe5 025986 call pn9 -: 025987 parse_lmp_test_control_loopback_nowhite: -0x5fe6 025988 set1 tester_no_whitening ,temp -: 025989 parse_lmp_test_control_loopback: -0x5fe7 025990 set1 tester_change ,temp -0x5fe8 025991 force 0 ,pdata -0x5fe9 025992 store 1 ,mem_slave_rcvcnt -0x5fea 025993 store 2 ,mem_tst_pktcnt_crc -0x5feb 025994 store 2 ,mem_tst_pktcnt_dmh -0x5fec 025995 store 2 ,mem_tst_pktcnt_hec -0x5fed 025996 store 2 ,mem_tst_pktcnt_sync -0x5fee 025997 fetch 1 ,test_mode_hopping_mode -0x5fef 025998 compare fixed_freq ,pdata ,0xff -0x5ff0 025999 setflag true ,tester_fixed_freq ,temp -0x5ff1 026000 storet 1 ,mem_tester_emulate -0x5ff2 026001 rtn -: 026003 parse_lmp_test_control_pause: -0x5ff3 026004 set0 mark_testmode ,mark -0x5ff4 026005 jam 0 ,mem_tester_emulate -0x5ff5 026006 fetch 1 ,mem_debug_config -0x5ff6 026007 set0 debug_tx_pattern ,pdata -0x5ff7 026008 store 1 ,mem_debug_config -0x5ff8 026009 rtn -: 026015 lmp_copy_rand: -0x5ff9 026016 arg mem_rxbuf + 1 ,contr -0x5ffa 026017 arg mem_random_number ,contw -0x5ffb 026018 branch memcpy16 -: 026020 lmp_generate_key: -0x5ffc 026021 jam lmp_comb_key ,mem_lmo_opcode2 -0x5ffd 026022 rtn -: 026024 lmp_start_encryption: -0x5ffe 026025 nrtn master -0x5fff 026026 jam lmp_start_encryption_req ,mem_lmo_opcode2 -0x6000 026027 rtn -: 026029 lmp_accept_inrand: -0x6001 026030 arg mem_lap ,rega -0x6002 026031 call generate_kinit -0x6003 026032 jam lmp_accepted ,mem_lmo_opcode2 -0x6004 026033 jam lmp_in_rand ,mem_lmi_opcode2 -0x6005 026034 rtn -: 026036 lmp_disconnect: -0x6006 026037 jam 10 ,mem_conn_timer -0x6007 026038 jam lmp_detach ,mem_lmo_opcode2 -0x6008 026039 jam local_host ,mem_disconn_reason_send -0x6009 026040 rtn -: 026046 send_lmp: -0x600a 026047 bpatchx patch30_2 ,mem_patch30 -0x600b 026048 disable user -0x600c 026049 call lmo_fifo_process -0x600d 026050 fetch 1 ,mem_lmp_to_send -0x600e 026051 rtn blank -0x600f 026056 bbit1 7 ,send_lmp_escape -: 026057 send_lmp0: -0x6010 026058 beq lmp_name_req ,send_lmp_name_req -0x6011 026059 beq lmp_name_res ,send_lmp_name_res -0x6012 026060 beq lmp_accepted ,send_lmp_accepted -0x6013 026061 beq lmp_not_accepted ,send_lmp_not_accepted -0x6014 026062 beq lmp_features_req ,send_lmp_features_req -0x6015 026063 beq lmp_features_res ,send_lmp_features_res -0x6016 026064 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res -0x6017 026065 beq lmp_version_req ,send_lmp_version_req -0x6018 026066 beq lmp_version_res ,send_lmp_version_res -0x6019 026067 beq lmp_setup_complete ,send_lmp_setup_complete -0x601a 026068 beq lmp_supervision_timeout ,send_lmp_superto -0x601b 026069 beq lmp_host_connection_req ,send_lmp_no_payload -0x601c 026070 beq lmp_in_rand ,send_lmp_inrand -0x601d 026071 beq lmp_comb_key ,send_lmp_comb_key -0x601e 026072 beq lmp_au_rand ,send_lmp_aurand -0x601f 026073 beq lmp_sres ,send_lmp_sres -0x6020 026074 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req -0x6021 026075 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req -0x6022 026076 beq lmp_start_encryption_req ,send_lmp_start_encryption -0x6023 026077 beq lmp_detach ,send_lmp_detach -0x6024 026078 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req -0x6025 026079 beq lmp_unit_key ,send_lmp_unit_key -0x6026 026081 beq lmp_incr_power_req ,send_lmp_inc_power -0x6027 026082 beq lmp_clkoffset_res ,send_lmp_clkoffset_res -0x6028 026083 beq lmp_max_power ,send_lmp_nopayload_reply -0x6029 026084 beq lmp_max_slot ,send_lmp_max_slot -0x602a 026085 beq lmp_max_slot_req ,send_lmp_max_slot_req -0x602b 026086 beq lmp_min_power ,send_lmp_nopayload_reply -0x602c 026087 beq lmp_slot_offset ,send_lmp_slot_offset -0x602d 026088 beq lmp_switch_req ,send_lmp_switch_req -0x602e 026089 beq lmp_sniff_req ,send_lmp_sniff_req -0x602f 026090 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req -0x6030 026091 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req -0x6031 026092 beq lmp_unsniff_req ,send_lmp_unsniff_req -0x6032 026093 beq lmp_encapsulated_header ,send_lmp_encapsulated_header -0x6033 026094 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload -0x6034 026095 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm -0x6035 026096 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number -0x6036 026097 beq lmp_dhkey_check ,send_lmp_dhkey_check -0x6037 026098 beq lmp_auto_rate ,send_lmp_auto_rate -0x6038 026099 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res -0x6039 026101 beq lmp_clkoffset_req ,send_lmp_clkoffset_req -0x603a 026102 beq lmp_quality_of_service ,send_lmp_quality_of_service -0x603b 026103 beq lmp_test_activate ,send_lmp_test_activate -0x603c 026104 beq lmp_test_control ,send_lmp_test_control -: 026105 send_lmp_error: -0x603d 026106 branch assert -0x603e 026107 rtn -: 026108 send_lmp_escape: -0x603f 026109 beq lmp_ext_accepted ,send_lmpext_accepted -0x6040 026110 beq lmp_ext_features_res ,send_lmpext_features_res -0x6041 026111 beq lmp_not_accepted_ext ,send_lmpext_not_accepted -0x6042 026112 beq lmp_ext_features_req ,send_lmpext_features_req -0x6043 026113 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req -0x6044 026114 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req -0x6045 026115 beq lmp_io_cap_req ,send_lmp_io_cap_req -0x6046 026116 beq lmp_io_cap_res ,send_lmpext_io_cap_res -0x6047 026117 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req -0x6048 026118 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res -0x6049 026119 branch assert -: 026125 send_lmp_accepted: -0x604a 026126 force 2 ,pdata -0x604b 026127 call msg_send_lmp -0x604c 026128 fetch 1 ,mem_lmi_opcode -0x604d 026129 istore 1 ,contw -0x604e 026130 call send_lmp_follow -0x604f 026131 bpatchx patch30_3 ,mem_patch30 -0x6050 026132 fetch 1 ,mem_lmi_opcode -0x6051 026133 beq lmp_in_rand ,send_lmp_accepted_inrand -0x6052 026134 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode -0x6053 026135 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key -0x6054 026136 beq lmp_sniff_req ,send_lmp_accept_sniff_req -0x6055 026137 beq lmp_host_connection_req ,send_lmp_accepted_connection -0x6056 026138 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check -0x6057 026139 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm -0x6058 026140 rtn -: 026142 send_create_conn_start_l2cap_timer_sm: -0x6059 026143 fetch 1 ,mem_conn_sm -0x605a 026144 rtn blank -0x605b 026145 jam conn_sm_wait_done ,mem_conn_sm -0x605c 026146 setarg timer_enpt_waite -0x605d 026147 arg enpt_delay_timer ,queue -0x605e 026148 branch timer_init -: 026150 send_lmp_accept_sniff_req: -0x605f 026151 branch sniff_init -: 026152 send_lmp_not_accepted: -0x6060 026153 force 3 ,pdata -0x6061 026154 call msg_send_lmp -0x6062 026155 fetch 1 ,mem_lmi_opcode -0x6063 026156 beq lmp_au_rand ,send_not_accept_aurand -0x6064 026157 istore 1 ,contw -0x6065 026158 fetch 1 ,mem_lmo_reason -0x6066 026159 istore 1 ,contw -0x6067 026160 branch send_lmp_follow -: 026162 send_not_accept_aurand: -0x6068 026163 istore 1 ,contw -0x6069 026164 fetch 1 ,mem_lmo_reason -0x606a 026165 istore 1 ,contw -0x606b 026166 arg mem_sres_tid ,temp -0x606c 026167 branch special_tid_store -: 026169 send_lmpext_accepted: -0x606d 026170 force 4 ,queue -0x606e 026171 call send_lmpext -0x606f 026172 setarg lmp_escape -0x6070 026173 istore 1 ,contw -0x6071 026174 fetch 1 ,mem_lmi_opcode -0x6072 026175 set0 7 ,pdata -0x6073 026176 istore 1 ,contw -0x6074 026177 fetch 1 ,mem_lmi_opcode -0x6075 026178 branch send_lmp_follow -: 026180 send_lmpext_not_accepted: -0x6076 026181 force 5 ,queue -0x6077 026182 call send_lmpext -0x6078 026183 setarg lmp_escape -0x6079 026184 istore 1 ,contw -0x607a 026185 fetch 1 ,mem_lmi_opcode -0x607b 026186 set0 7 ,pdata -0x607c 026187 istore 1 ,contw -0x607d 026188 fetch 1 ,mem_lmo_reason -0x607e 026189 istore 1 ,contw -0x607f 026190 branch send_lmp_follow -: 026193 send_lmp_accepted_inrand: -0x6080 026194 call clear_linkkey -0x6081 026195 call tid_check -0x6082 026196 rtn true -0x6083 026197 branch lmp_generate_key -: 026199 send_lmp_accepted_enc_mode: -0x6084 026200 fetch 1 ,mem_op -0x6085 026201 bbit1 op_start_enc ,send_lmp_accepted_enc_start -0x6086 026202 rtnbit0 op_stop_enc -0x6087 026203 jam lmp_stop_encryption_req ,mem_lmo_opcode2 -0x6088 026204 set0 op_stop_enc ,pdata -0x6089 026205 call tid_reply -0x608a 026206 branch send_lmp_accepted_enc_exit -: 026207 send_lmp_accepted_enc_start: -0x608b 026208 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 -0x608c 026209 set0 op_start_enc ,pdata -: 026210 send_lmp_accepted_enc_exit: -0x608d 026211 store 1 ,mem_op -0x608e 026212 rtn -: 026214 send_lmp_accepted_enc_key: -0x608f 026215 call check_localsm -0x6090 026216 branch lmp_start_encryption ,true -0x6091 026217 rtn -: 026219 send_lmp_accepted_connection: -0x6092 026220 jam lmp_packet_type_table_req ,mem_lmo_opcode2 -0x6093 026222 fetch 1 ,mem_lmp_conn_state -0x6094 026223 set1 received_conn_req ,pdata -0x6095 026224 store 1 ,mem_lmp_conn_state -0x6096 026225 jam bt_evt_bb_connected ,mem_fifo_temp -0x6097 026226 branch ui_ipc_send_event -: 026229 send_lmp_accept_dhkey_check: -0x6098 026230 rtn -: 026234 send_lmpext_features_res: -0x6099 026235 force 12 ,queue -0x609a 026236 call send_lmpext -0x609b 026237 setarg 0x01 -0x609c 026238 istore 1 ,contw -0x609d 026239 fetch 2 ,mem_lmpext_ssp_enable -0x609e 026240 istore 2 ,contw -0x609f 026241 setarg 0 -0x60a0 026242 istore 3 ,contw -0x60a1 026243 setarg 0x00 -0x60a2 026244 istore 4 ,contw -0x60a3 026245 branch send_lmp_reply -: 026246 send_lmpext_io_cap_res: -0x60a4 026247 force 5 ,queue -0x60a5 026248 call send_lmpext -0x60a6 026249 fetch 3 ,mem_sp_iocap_local -0x60a7 026250 istore 3 ,contw -0x60a8 026251 call send_lmp_reply -0x60a9 026252 jam flag_pairing_state_pairing ,mem_flag_pairing_state -0x60aa 026253 fetch 1 ,mem_sp_iocap_local -0x60ab 026254 beq display_yesno ,responder_iocap_display_yesno -0x60ac 026255 beq keyboard_only ,responder_iocap_keyboard_only -0x60ad 026256 beq no_input_no_output ,responder_iocap_no_input_no_output -0x60ae 026257 rtn -: 026259 responder_iocap_keyboard_only: -0x60af 026260 fetch 1 ,mem_sp_iocap_remote -0x60b0 026261 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only -0x60b1 026262 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno -0x60b2 026263 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only -0x60b3 026264 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output -0x60b4 026265 rtn -: 026268 responder_iocap_display_yesno: -0x60b5 026269 fetch 1 ,mem_sp_iocap_remote -0x60b6 026270 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only -0x60b7 026271 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno -0x60b8 026272 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only -0x60b9 026273 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output -0x60ba 026274 rtn -: 026277 responder_iocap_no_input_no_output: -0x60bb 026278 fetch 1 ,mem_sp_iocap_remote -0x60bc 026279 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only -0x60bd 026280 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno -0x60be 026281 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only -0x60bf 026282 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output -0x60c0 026283 rtn -: 026285 responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: -: 026286 responder_iocap_display_yesno_initiator_iocap_no_input_no_output: -: 026287 responder_iocap_display_yesno_initiator_iocap_display_only: -: 026288 responder_iocap_no_input_no_output_initiator_iocap_display_only: -: 026289 responder_iocap_no_input_no_output_initiator_iocap_display_yesno: -: 026290 responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: -: 026291 responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: -: 026292 set_ssp_mode_justwork: -0x60c1 026293 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag -0x60c2 026294 fetch 1 ,mem_classic_bt_flag -0x60c3 026295 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect -0x60c4 026296 rtn -: 026298 responder_iocap_display_yesno_initiator_iocap_display_yesno: -: 026299 set_ssp_mode_numeric_comparison: -0x60c5 026300 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag -0x60c6 026301 rtn -: 026303 responder_iocap_keyboard_only_initiator_iocap_display_yesno: -: 026304 responder_iocap_keyboard_only_initiator_iocap_keyboard_only: -: 026305 responder_iocap_keyboard_only_initiator_iocap_display_only: -: 026306 responder_iocap_display_yesno_initiator_iocap_keyboard_only: -: 026307 set_ssp_mode_passkey: -0x60c7 026308 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag -0x60c8 026309 rtn -: 026312 classic_bt_set_reject_justwork_flag: -0x60c9 026313 arg flag_ssp_reject_justwork ,queue -0x60ca 026314 branch classic_bluetooth_set_flag -: 026316 classic_bt_clr_reject_justwork_flag: -0x60cb 026317 arg flag_ssp_reject_justwork ,queue -0x60cc 026318 branch classic_bluetooth_clr_flag -: 026320 classic_bluetooth_set_flag: -0x60cd 026321 fetch 1 ,mem_classic_bt_flag -0x60ce 026322 qset1 pdata -0x60cf 026323 store 1 ,mem_classic_bt_flag -0x60d0 026324 rtn -: 026326 classic_bluetooth_clr_flag: -0x60d1 026327 fetch 1 ,mem_classic_bt_flag -0x60d2 026328 qset0 pdata -0x60d3 026329 store 1 ,mem_classic_bt_flag -0x60d4 026330 rtn -: 026333 send_lmp_io_cap_req: -0x60d5 026334 force 5 ,queue -0x60d6 026335 call send_lmpext -0x60d7 026336 fetch 3 ,mem_sp_iocap_local -0x60d8 026337 istore 3 ,contw -0x60d9 026338 branch send_lmp_request -: 026341 send_lmpext_sniff_subrating_req: -0x60da 026343 rtn -: 026344 send_lmpext_sniff_subrating_res: -0x60db 026345 force 9 ,queue -0x60dc 026346 call send_lmpext -0x60dd 026347 fetch 1 ,mem_subsniff_rate -0x60de 026348 istore 1 ,contw -0x60df 026349 fetch 2 ,mem_subsniff_tcmax -0x60e0 026350 istore 2 ,contw -0x60e1 026351 fetch 4 ,mem_subsniff_instant -0x60e2 026352 istore 4 ,contw -0x60e3 026353 branch send_lmp_reply -: 026355 send_lmp_name_res: -0x60e4 026356 force 17 ,pdata -0x60e5 026357 call msg_send_lmp -0x60e6 026358 fetch 1 ,mem_lmi_opcode -0x60e7 026359 copy pdata ,temp -0x60e8 026360 beq 0x00 ,send_lmp_name_res_offset_ok -0x60e9 026361 beq 0x0e ,send_lmp_name_res_offset_ok -0x60ea 026362 beq 0x1c ,send_lmp_name_res_offset_ok -0x60eb 026363 rtn -: 026364 send_lmp_name_res_offset_ok: -0x60ec 026365 istore 1 ,contw -0x60ed 026366 fetch 1 ,mem_local_name_length -0x60ee 026367 istore 1 ,contw -0x60ef 026368 arg 14 ,loopcnt -0x60f0 026369 setarg mem_local_name -0x60f1 026370 iadd temp ,contr -0x60f2 026371 call memcpy -0x60f3 026372 branch send_lmp_reply -: 026375 send_lmp_timing_accuracy_res: -0x60f4 026376 force 3 ,pdata -0x60f5 026377 call msg_send_lmp -0x60f6 026378 setarg 0x0114 -0x60f7 026379 istore 2 ,contw -0x60f8 026380 branch send_lmp_reply -: 026382 send_lmp_clkoffset_res: -0x60f9 026384 force 3 ,pdata -0x60fa 026385 call msg_send_lmp -0x60fb 026386 fetch 4 ,mem_clke_bt -0x60fc 026387 isub clkn_bt ,pdata -0x60fd 026388 branch send_lmp_clkoffset_res_master ,master -0x60fe 026389 sub pdata ,0 ,pdata -: 026390 send_lmp_clkoffset_res_master: -0x60ff 026392 rshift2 pdata ,pdata -0x6100 026393 set0 15 ,pdata -0x6101 026394 istore 2 ,contw -0x6102 026395 branch send_lmp_reply -: 026397 send_lmp_version_res: -0x6103 026398 force 6 ,pdata -0x6104 026399 call msg_send_lmp -0x6105 026400 fetch 5 ,mem_lmp_version -0x6106 026401 istore 5 ,contw -0x6107 026402 branch send_lmp_reply -: 026404 send_lmp_features_res: -0x6108 026405 force 9 ,pdata -0x6109 026406 call msg_send_lmp -0x610a 026407 fetch 8 ,mem_features -0x610b 026408 istore 8 ,contw -0x610c 026409 branch send_lmp_reply -: 026416 send_lmpext_features_req: -0x610d 026417 force 12 ,queue -0x610e 026418 call send_lmpext -0x610f 026419 setarg 0x01 -0x6110 026420 istore 1 ,contw -0x6111 026421 fetch 2 ,mem_lmpext_ssp_enable -0x6112 026422 istore 2 ,contw -0x6113 026423 setarg 0 -0x6114 026424 istore 3 ,contw -0x6115 026425 setarg 0x00 -0x6116 026426 istore 4 ,contw -0x6117 026427 branch send_lmp_request -: 026429 send_lmpext_packet_type_table_req: -0x6118 026430 force 3 ,queue -0x6119 026431 call send_lmpext -0x611a 026432 fetch 1 ,mem_ptt -0x611b 026433 istore 1 ,contw -0x611c 026434 disable user -0x611d 026435 call send_lmp_request -0x611e 026436 nrtn user -0x611f 026437 nrtn master -0x6120 026438 fetch 1 ,mem_afh_cfg -0x6121 026439 rtnbit0 afh_cfg_on -0x6122 026440 call afh_init -0x6123 026441 branch afh_open_all_channels -: 026444 ssp_enable: -0x6124 026445 bpatchx patch30_4 ,mem_patch30 -0x6125 026446 fetch 1 ,mem_features + 6 -0x6126 026447 set1 param_featrue_ssp ,pdata -0x6127 026448 store 1 ,mem_features + 6 -0x6128 026449 setarg param_lmpext_ssp_enable -0x6129 026450 store 2 ,mem_lmpext_ssp_enable -0x612a 026451 rtn -: 026453 ssp_disable: -0x612b 026454 bpatchx patch30_5 ,mem_patch30 -0x612c 026455 fetch 1 ,mem_features + 6 -0x612d 026456 set0 param_featrue_ssp ,pdata -0x612e 026457 store 1 ,mem_features + 6 -0x612f 026458 setarg 0 -0x6130 026459 store 2 ,mem_lmpext_ssp_enable -0x6131 026460 rtn -: 026462 afh_init: -0x6132 026463 jam 0x3 ,mem_afh_cfg -0x6133 026464 setarg 0 -0x6134 026465 store 4 ,mem_afh_timer -0x6135 026466 arg mem_afh_map_lo ,contw -0x6136 026467 call afh_reset_map -0x6137 026468 arg mem_afh_map_new ,contw -0x6138 026469 call afh_reset_map -0x6139 026470 arg mem_afh_classify_channel_map ,contw -0x613a 026471 call afh_reset_map -0x613b 026472 branch afh_clear_error_counter -: 026473 afh_open_all_channels: -0x613c 026474 arg mem_afh_map_new ,contw -0x613d 026475 call afh_reset_map -0x613e 026476 call afh_clear_error_counter -0x613f 026477 branch afh_set_send_flag -: 026480 afh_reset_map: -0x6140 026481 setarg 0xffffff -0x6141 026482 istore 3 ,contw -0x6142 026483 istore 3 ,contw -0x6143 026484 istore 3 ,contw -0x6144 026485 setarg 0x7f -0x6145 026486 istore 1 ,contw -0x6146 026487 rtn -: 026488 afh_clear_error_counter: -0x6147 026489 setarg 0 -0x6148 026490 store 2 ,mem_afh_error_total -0x6149 026491 rtn -: 026492 afh_set_send_flag: -0x614a 026493 fetch 1 ,mem_afh_cfg -0x614b 026494 set1 send_lmp_set_afh ,pdata -0x614c 026495 store 1 ,mem_afh_cfg -0x614d 026496 rtn -: 026499 send_lmpext_pause_encryption_req: -0x614e 026500 force 2 ,queue -0x614f 026501 call send_lmpext -0x6150 026502 nbranch send_lmp_reply ,master -0x6151 026504 branch send_lmp_request -: 026508 send_lmp_detach: -0x6152 026509 force 2 ,pdata -0x6153 026510 call msg_send_lmp -0x6154 026511 fetch 1 ,mem_disconn_reason_send -0x6155 026512 istore 1 ,contw -0x6156 026513 call send_lmp_request -: 026514 prepare_disconnect: -0x6157 026515 fetch 1 ,mem_op -0x6158 026516 set1 op_disconn ,pdata -0x6159 026517 store 1 ,mem_op -0x615a 026518 jam 50 ,mem_conn_timer -0x615b 026519 rtn -: 026522 send_lmp_no_payload: -0x615c 026523 force 1 ,pdata -0x615d 026524 call msg_send_lmp -0x615e 026525 branch send_lmp_request -: 026526 send_lmp_nopayload_reply: -0x615f 026527 force 1 ,pdata -0x6160 026528 call msg_send_lmp -0x6161 026529 branch send_lmp_reply -: 026532 send_lmp_encryption_mode_req: -0x6162 026533 force 2 ,pdata -0x6163 026534 call msg_send_lmp -0x6164 026535 fetch 1 ,mem_state_map -0x6165 026536 isolate0 smap_encryption ,pdata -0x6166 026537 setflag true ,0 ,pdata -0x6167 026538 and_into 1 ,pdata -0x6168 026539 istore 1 ,contw -0x6169 026540 branch send_lmp_request -: 026543 send_lmp_superto: -0x616a 026544 force 3 ,pdata -0x616b 026545 call msg_send_lmp -0x616c 026546 fetch 2 ,mem_supervision_to -0x616d 026547 istore 2 ,contw -0x616e 026548 branch send_lmp_request -: 026550 send_lmp_name_req: -0x616f 026551 jam 250 ,mem_conn_timer -0x6170 026552 force 2 ,pdata -0x6171 026553 call msg_send_lmp -0x6172 026554 fetch 1 ,mem_name_offset -0x6173 026555 istore 1 ,contw -0x6174 026556 branch send_lmp_request -: 026558 send_lmp_test_control: -0x6175 026559 force 10 ,pdata -0x6176 026560 call msg_send_lmp -0x6177 026561 arg mem_temp_payload ,contr -0x6178 026562 force 9 ,loopcnt -: 026563 send_lmp_test_control_loop: -0x6179 026564 ifetch 1 ,contr -0x617a 026565 xor_into 0x55 ,pdata -0x617b 026566 istore 1 ,contw -0x617c 026567 loop send_lmp_test_control_loop -0x617d 026568 branch send_lmp_request -: 026570 send_lmp_quality_of_service_req: -0x617e 026571 branch send_lmp_request -: 026572 send_lmp_unit_key: -0x617f 026573 branch send_lmp_request -: 026575 send_lmp_slot_offset: -0x6180 026576 rtn master -0x6181 026577 call calc_slot_offset -0x6182 026578 force 9 ,pdata -0x6183 026579 call msg_send_lmp -0x6184 026580 fetch 2 ,mem_slot_offset -0x6185 026581 istore 2 ,contw -0x6186 026582 fetch 3 ,mem_lap -0x6187 026583 istore 3 ,contw -0x6188 026584 fetch 1 ,mem_uap -0x6189 026585 istore 1 ,contw -0x618a 026586 fetch 2 ,mem_nap -0x618b 026587 istore 2 ,contw -0x618c 026588 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply -0x618d 026589 set0 mark_switch_initiated ,mark -0x618e 026590 call send_lmp_request -0x618f 026591 jam lmp_switch_req ,mem_lmo_opcode2 -0x6190 026592 rtn -: 026593 send_lmp_slot_offset_reply: -0x6191 026594 call send_lmp_reply -0x6192 026595 jam lmp_accepted ,mem_lmo_opcode2 -0x6193 026596 jam lmp_switch_req ,mem_lmi_opcode2 -0x6194 026597 rtn -: 026599 send_lmp_switch_req: -0x6195 026600 arg 0x200 ,temp -0x6196 026601 branch switch_on_native ,master -0x6197 026602 deposit clke_bt -0x6198 026603 branch switch_slack -: 026604 switch_on_native: -0x6199 026605 deposit clkn_bt -: 026606 switch_slack: -0x619a 026607 deposit bt_clk -0x619b 026608 iadd temp ,pdata -0x619c 026609 and_into 0x1fc ,pdata -0x619d 026610 store 4 ,mem_sniff_anchor -0x619e 026611 force 5 ,pdata -0x619f 026612 call msg_send_lmp -0x61a0 026613 fetch 4 ,mem_sniff_anchor -0x61a1 026614 rshift pdata ,pdata -0x61a2 026615 istore 4 ,contw -0x61a3 026616 branch send_lmp_request -: 026618 send_lmp_sniff_req: -0x61a4 026619 force 10 ,pdata -0x61a5 026620 call msg_send_lmp -0x61a6 026621 arg mem_sniff_payload ,contr -0x61a7 026622 ifetch 9 ,contr -0x61a8 026623 istore 9 ,contw -0x61a9 026624 branch send_lmp_request -: 026627 send_lmp_timing_accuracy_req: -0x61aa 026629 force 3 ,pdata -0x61ab 026630 call msg_send_lmp -0x61ac 026631 setarg 0x0114 -0x61ad 026632 istore 2 ,contw -0x61ae 026633 branch send_lmp_request -: 026635 send_lmp_unsniff_req: -0x61af 026637 force 1 ,pdata -0x61b0 026638 call msg_send_lmp -0x61b1 026647 branch send_lmp_request -: 026650 send_lmp_max_slot: -0x61b2 026651 force 2 ,pdata -0x61b3 026652 call msg_send_lmp -0x61b4 026653 fetch 1 ,mem_max_slot -0x61b5 026654 istore 1 ,contw -0x61b6 026655 branch send_lmp_request -: 026658 send_lmp_max_slot_req: -0x61b7 026659 force 2 ,pdata -0x61b8 026660 call msg_send_lmp -0x61b9 026661 setarg 0x05 -0x61ba 026662 istore 1 ,contw -0x61bb 026663 branch send_lmp_request -: 026666 send_lmp_inc_power: -0x61bc 026667 force 2 ,pdata -0x61bd 026668 call msg_send_lmp -0x61be 026669 setarg 0x00 -0x61bf 026670 istore 1 ,contw -0x61c0 026671 branch send_lmp_request -: 026674 send_lmp_setup_complete_by_module: -0x61c1 026675 jam lmp_max_slot_req ,mem_lmo_opcode2 -0x61c2 026676 rtn -: 026677 send_lmp_setup_complete: -0x61c3 026678 fetch 1 ,mem_device_option -0x61c4 026679 sub pdata ,dvc_op_module ,null -0x61c5 026680 call send_lmp_setup_complete_by_module ,zero -0x61c6 026681 fetch 1 ,mem_state -0x61c7 026682 set1 state_conn_comp ,pdata -0x61c8 026683 store 1 ,mem_state -0x61c9 026684 copy clkn_bt ,pdata -0x61ca 026685 store 4 ,mem_aurand_send_delay_time -0x61cb 026686 fetch 1 ,mem_lmp_conn_state -0x61cc 026687 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent -0x61cd 026688 set1 sent_setup_complete ,pdata -0x61ce 026689 store 1 ,mem_lmp_conn_state -0x61cf 026690 jam bt_evt_setup_complete ,mem_fifo_temp -0x61d0 026691 call ui_ipc_send_event -0x61d1 026692 force 1 ,pdata -0x61d2 026693 call msg_send_lmp -0x61d3 026694 branch send_lmp_request -: 026695 send_lmp_setup_complete_has_sent: -0x61d4 026696 jam 0 ,mem_lmp_to_send -0x61d5 026697 rtn -: 026699 send_lmp_version_req: -0x61d6 026700 force 6 ,pdata -0x61d7 026701 call msg_send_lmp -0x61d8 026702 fetch 5 ,mem_lmp_version -0x61d9 026703 istore 5 ,contw -0x61da 026704 branch send_lmp_request -: 026706 send_lmp_features_req: -0x61db 026707 force 9 ,pdata -0x61dc 026708 call msg_send_lmp -0x61dd 026709 fetch 8 ,mem_features -0x61de 026710 istore 8 ,contw -0x61df 026711 branch send_lmp_request -: 026713 sp_master_send_io_cap_get: -0x61e0 026714 jam sp_flag_commit ,mem_master_sp_flag -0x61e1 026715 fetch 1 ,mem_sp_local_key_invalid -0x61e2 026716 rtnne sp_key_valid -0x61e3 026717 jam sp_master_stat_start_done ,mem_master_sp_state -0x61e4 026718 rtn -: 026720 sp_master_send_io_cap_send: -0x61e5 026721 call tid_initiate -0x61e6 026722 jam lmp_io_cap_req ,mem_lmo_opcode2 -0x61e7 026723 jam sp_stat_key_send ,mem_master_sp_state -0x61e8 026724 rtn -: 026727 sp_master_send_lmp_encapsulated_header: -0x61e9 026728 call tid_initiate -0x61ea 026729 jam lmp_encapsulated_header ,mem_lmo_opcode2 -0x61eb 026730 jam sp_stat_random_send ,mem_master_sp_state -0x61ec 026731 rtn -: 026733 sp_master_commitment_compare: -0x61ed 026734 arg mem_sp_calc_result_high ,rega -0x61ee 026735 arg mem_sp_confirm_remote ,regb -0x61ef 026736 arg 16 ,loopcnt -0x61f0 026737 call string_compare -0x61f1 026738 branch sp_master_commitment_compare_success ,zero -0x61f2 026739 jam sp_stat_null ,mem_master_sp_state -0x61f3 026740 call master_clear_mem_master_sp_flag -0x61f4 026741 jam pdu_not_allowed ,mem_lmo_reason2 -0x61f5 026742 jam lmp_simple_pairing_number ,mem_lmi_opcode2 -0x61f6 026743 branch reject_lmp_packet -: 026744 sp_master_commitment_compare_success: -0x61f7 026745 jam sp_stat_confirm_calc ,mem_master_sp_state -0x61f8 026746 call master_set_mem_master_sp_flag -0x61f9 026747 jam lmp_simple_pairing_number ,mem_lmi_opcode2 -0x61fa 026748 branch accept_lmp_msg -: 026752 sp_master_send_lmp_simple_pairing_number: -0x61fb 026753 jam lmp_simple_pairing_number ,mem_lmo_opcode2 -0x61fc 026754 rtn -: 026758 sp_send_lmp_encapsulated_header: -0x61fd 026761 jam lmp_encapsulated_header ,mem_lmo_opcode2 -0x61fe 026763 rtn -: 026769 send_lmp_encapsulated_header: -0x61ff 026770 jam 0 ,mem_sp_local_key_send_count -0x6200 026771 force 4 ,pdata -0x6201 026772 call msg_send_lmp -0x6202 026773 force encapsulated_major_type_p192 ,pdata -0x6203 026774 istore 1 ,contw -0x6204 026775 force encapsulated_minor_type_p192 ,pdata -0x6205 026776 istore 1 ,contw -0x6206 026777 force encapsulated_len_p192 ,pdata -0x6207 026778 istore 1 ,contw -0x6208 026779 call check_localsm -0x6209 026780 branch send_lmp_request ,true -0x620a 026781 branch send_lmp_reply -: 026783 send_lmp_encapsulated_payload: -0x620b 026785 force 17 ,pdata -0x620c 026786 call msg_send_lmp -0x620d 026787 fetch 1 ,mem_sp_local_key_send_count -0x620e 026788 arg mem_sp_pubkey_local ,contr -0x620f 026789 iadd contr ,contr -0x6210 026790 ifetch 8 ,contr -0x6211 026791 istore 8 ,contw -0x6212 026792 ifetch 8 ,contr -0x6213 026793 istore 8 ,contw -0x6214 026794 fetch 1 ,mem_sp_local_key_send_count -0x6215 026795 increase 16 ,pdata -0x6216 026796 store 1 ,mem_sp_local_key_send_count -0x6217 026797 call check_localsm -0x6218 026798 branch send_lmp_request ,true -0x6219 026799 branch send_lmp_reply -: 026802 sp_send_lmp_simple_pairing_comfirm: -0x621a 026803 jam sp_stat_random_recv ,mem_sp_state -0x621b 026804 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 -0x621c 026805 rtn -: 026806 send_lmp_simple_pairing_comfirm: -0x621d 026809 force 17 ,pdata -0x621e 026810 call msg_send_lmp -0x621f 026811 arg mem_sp_calc_result_high ,contr -0x6220 026812 ifetch 8 ,contr -0x6221 026813 istore 8 ,contw -0x6222 026814 ifetch 8 ,contr -0x6223 026815 istore 8 ,contw -0x6224 026816 branch send_lmp_reply -: 026818 sp_send_lmp_simple_pairing_number: -0x6225 026819 jam lmp_simple_pairing_number ,mem_lmo_opcode2 -0x6226 026820 rtn -: 026822 send_lmp_simple_pairing_number: -0x6227 026824 call check_localsm -0x6228 026825 call sp_local_random_key_generator ,true -0x6229 026826 force 17 ,pdata -0x622a 026827 call msg_send_lmp -0x622b 026828 arg mem_sp_random_local ,contr -0x622c 026829 ifetch 8 ,contr -0x622d 026830 istore 8 ,contw -0x622e 026831 ifetch 8 ,contr -0x622f 026832 istore 8 ,contw -0x6230 026833 call check_localsm -0x6231 026834 nbranch send_lmp_reply ,true -0x6232 026835 branch send_lmp_request ,true -: 026837 master_sp_sm_end: -0x6233 026839 jam sp_stat_done ,mem_master_sp_state -: 026840 sp_aurand_send: -0x6234 026841 call tid_initiate -0x6235 026842 jam lmp_au_rand ,mem_lmo_opcode2 -0x6236 026843 call check_localsm_master -0x6237 026844 branch sp_master_key_prarm_push ,true -0x6238 026845 branch sp_link_key_prarm_push -: 026846 master_sp_send_lmp_dhkey_check: -0x6239 026847 call tid_reply -: 026848 sp_send_lmp_dhkey_check: -0x623a 026849 jam lmp_dhkey_check ,mem_lmo_opcode2 -0x623b 026850 rtn -: 026851 send_lmp_dhkey_check: -0x623c 026853 force 17 ,pdata -0x623d 026854 call msg_send_lmp -0x623e 026855 arg mem_sp_calc_result_high ,contr -0x623f 026856 ifetch 8 ,contr -0x6240 026857 istore 8 ,contw -0x6241 026858 ifetch 8 ,contr -0x6242 026859 istore 8 ,contw -0x6243 026860 call check_localsm -0x6244 026861 nbranch send_lmp_reply ,true -0x6245 026862 branch send_lmp_request ,true -: 026864 send_lmp_enc_key_size_mask_res: -0x6246 026865 force 3 ,pdata -0x6247 026866 call msg_send_lmp -0x6248 026867 setarg 0xfffe -0x6249 026868 istore 2 ,contw -0x624a 026869 branch send_lmp_reply -: 026871 send_lmp_auto_rate: -0x624b 026872 branch send_lmp_request -: 026873 send_lmp_clkoffset_req: -0x624c 026874 branch send_lmp_request -: 026875 send_lmp_quality_of_service: -0x624d 026876 branch send_lmp_request -: 026877 send_lmp_test_activate: -0x624e 026878 branch send_lmp_request -: 026883 send_lmp_comb_key: -0x624f 026884 call generate_random_number -0x6250 026885 arg mem_lap ,rega -0x6251 026886 call generate_linkkey -0x6252 026887 force 17 ,pdata -0x6253 026888 call msg_send_lmp -0x6254 026889 arg mem_kinit ,rega -0x6255 026890 arg mem_random_number ,regb -0x6256 026891 call xor16 -0x6257 026892 nbranch send_lmp_follow ,master -0x6258 026893 branch send_lmp_tid -: 026895 send_lmp_inrand: -0x6259 026896 call generate_random_number -0x625a 026897 arg mem_plap ,rega -0x625b 026898 call generate_kinit -: 026899 send_lmp_rand: -0x625c 026900 force 17 ,pdata -0x625d 026901 call msg_send_lmp -0x625e 026902 arg mem_random_number ,contr -0x625f 026903 call memcpy16 -0x6260 026904 fetch 1 ,mem_conn_sm -0x6261 026905 beq conn_sm_auth_wait ,send_lmp_request -0x6262 026906 beq conn_sm_pairing_wait ,send_lmp_request -0x6263 026907 branch send_lmp_tid -: 026909 send_lmp_aurand: -0x6264 026910 fetch 1 ,mem_pairing_auth -0x6265 026911 branch send_lmp_aurand_notpairing ,blank -0x6266 026912 call check_localsm -0x6267 026913 call tid_initiate ,true -0x6268 026914 ncall tid_reply ,true -0x6269 026915 branch send_lmp_aurand_common -: 026916 send_lmp_aurand_notpairing: -0x626a 026917 call tid_initiate -: 026918 send_lmp_aurand_common: -0x626b 026919 call generate_random_number -0x626c 026920 branch send_lmp_rand -: 026922 send_lmp_sres: -0x626d 026923 arg mem_lap ,rega -0x626e 026924 call function_e1 -0x626f 026925 force 5 ,pdata -0x6270 026926 call msg_send_lmp -0x6271 026927 fetch 4 ,mem_input_store -0x6272 026928 istore 4 ,contw -0x6273 026929 arg mem_sres_tid ,temp -0x6274 026930 call special_tid_store -0x6275 026931 call copy_aco -0x6276 026932 call check_localsm -0x6277 026933 branch send_lmp_sres_master ,true -0x6278 026934 jam done_encryp ,mem_wait_encryption -0x6279 026935 fetch 1 ,mem_pairing_auth -0x627a 026936 rtn blank -0x627b 026937 jam lmp_au_rand ,mem_lmo_opcode2 -: 026938 send_lmp_sres_master: -0x627c 026939 fetch 1 ,mem_link_key_exists -0x627d 026940 rtn blank -: 026941 send_lmp_sres_startenc: -0x627e 026942 call check_localsm -0x627f 026943 nbranch send_lmp_sres_startenc_slave ,true -0x6280 026944 fetch 1 ,mem_auth_enable -0x6281 026945 rtn blank -0x6282 026946 jam lmp_encryption_mode_req ,mem_lmo_opcode2 -0x6283 026947 rtn -: 026948 send_lmp_sres_startenc_slave: -0x6284 026949 rtnmark0 mark_slave_in_rand_accepted -0x6285 026950 set0 mark_slave_in_rand_accepted ,mark -0x6286 026951 jam lmp_encryption_mode_req ,mem_lmo_opcode2 -0x6287 026952 rtn -: 026956 send_lmp_start_encryption: -0x6288 026957 call generate_random_number -0x6289 026958 call function_e3 -0x628a 026959 force 17 ,pdata -0x628b 026960 call msg_send_lmp -0x628c 026961 arg mem_random_number ,contr -0x628d 026962 call memcpy16 -0x628e 026963 branch send_lmp_tid -: 026965 send_lmp_stop_encryption_req: -0x628f 026966 force 1 ,pdata -0x6290 026967 call msg_send_lmp -0x6291 026968 branch send_lmp_tid -: 026970 send_lmp_encryption_key_size_req: -0x6292 026971 force 2 ,pdata -0x6293 026972 call msg_send_lmp -0x6294 026973 force 16 ,pdata -0x6295 026974 istore 1 ,contw -0x6296 026975 store 1 ,mem_key_size -0x6297 026976 branch send_lmp_tid -: 026978 msg_send_lmp: -0x6298 026980 lshift3 pdata ,pdata -0x6299 026981 or_into 0x07 ,pdata -0x629a 026982 store 1 ,mem_lmo_header_length -0x629b 026983 arg 17 ,loopcnt -0x629c 026984 arg mem_lmo_payload ,contw -0x629d 026985 call clear_mem -0x629e 026986 arg mem_lmo_payload ,contw -0x629f 026987 rtn -: 026989 send_lmpext: -0x62a0 026990 and pdata ,0x7f ,rega -0x62a1 026991 jam lmp_escape ,mem_lmp_to_send -0x62a2 026992 deposit queue -0x62a3 026993 call msg_send_lmp -0x62a4 026994 deposit rega -0x62a5 026995 istore 1 ,contw -0x62a6 026996 rtn -: 026998 send_lmp_follow: -0x62a7 026999 fetch 1 ,mem_lmp_to_send -0x62a8 027000 lshift pdata ,pdata -0x62a9 027001 fetcht 1 ,mem_state_map -0x62aa 027002 isolate1 smap_lmptid ,temp -0x62ab 027003 setflag true ,0 ,pdata -0x62ac 027004 branch send_lmp_exit -: 027007 send_lmp_tid: -0x62ad 027008 fetcht 1 ,mem_state_map -0x62ae 027009 and_into 1 ,temp -0x62af 027010 branch send_lmp_end -: 027012 send_lmp_reply: -0x62b0 027013 force 0 ,temp -0x62b1 027014 branch send_lmp_end -: 027016 send_lmp_request: -0x62b2 027017 force 1 ,temp -: 027018 send_lmp_end: -0x62b3 027019 fetch 1 ,mem_lmp_to_send -0x62b4 027020 lshift pdata ,pdata -0x62b5 027021 setflag master ,0 ,pdata -0x62b6 027022 ixor temp ,pdata -: 027023 send_lmp_exit: -0x62b7 027024 store 1 ,mem_lmo_header_opcode -0x62b8 027025 jam 0 ,mem_lmp_to_send -0x62b9 027026 call lmo_fifo_process_lmo0empty -0x62ba 027027 enable user -0x62bb 027028 rtn -: 027031 lmo_fifo_check: -0x62bc 027032 fetch 1 ,mem_lmo_opcode2 -0x62bd 027033 rtn blank -0x62be 027034 call lmo_fifo_process -0x62bf 027035 fetch 1 ,mem_lmo_opcode2 -0x62c0 027036 rtn -: 027038 lmo_fifo_process: -0x62c1 027039 bpatchx patch30_6 ,mem_patch30 -0x62c2 027040 fetch 1 ,mem_lmp_to_send -0x62c3 027041 branch lmo_fifo_process_lmo0empty ,blank -0x62c4 027042 fetch 1 ,mem_lmo_opcode1 -0x62c5 027043 nrtn blank -0x62c6 027044 branch lmo_fifo_process_lmo2to1 -: 027045 lmo_fifo_process_lmo0empty: -0x62c7 027046 fetch 1 ,mem_lmo_opcode1 -0x62c8 027047 branch lmo_fifo_process_lmo1_empty ,blank -0x62c9 027048 fetch 3 ,mem_lmo_opcode1 -0x62ca 027049 store 3 ,mem_lmp_to_send -0x62cb 027050 fetcht 1 ,mem_lmo_tid1 -0x62cc 027051 fetch 1 ,mem_state_map -0x62cd 027052 set0 smap_lmptid ,pdata -0x62ce 027053 ior temp ,pdata -0x62cf 027054 store 1 ,mem_state_map -0x62d0 027055 jam 0 ,mem_lmo_opcode1 -: 027056 lmo_fifo_process_lmo2to1: -0x62d1 027057 fetch 1 ,mem_lmo_opcode2 -0x62d2 027058 rtn blank -0x62d3 027059 fetch 4 ,mem_lmo_opcode2 -0x62d4 027060 store 4 ,mem_lmo_opcode1 -0x62d5 027061 jam 0 ,mem_lmo_opcode2 -0x62d6 027062 rtn -: 027063 lmo_fifo_process_lmo1_empty: -0x62d7 027064 fetch 1 ,mem_lmo_opcode2 -0x62d8 027065 rtn blank -0x62d9 027066 fetch 3 ,mem_lmo_opcode2 -0x62da 027067 store 3 ,mem_lmp_to_send -0x62db 027068 fetcht 1 ,mem_lmo_tid2 -0x62dc 027069 fetch 1 ,mem_state_map -0x62dd 027070 set0 smap_lmptid ,pdata -0x62de 027071 ior temp ,pdata -0x62df 027072 store 1 ,mem_state_map -0x62e0 027073 jam 0 ,mem_lmo_opcode2 -0x62e1 027074 rtn -: 027077 special_tid_store: -0x62e2 027078 bpatchx patch30_7 ,mem_patch30 -0x62e3 027079 fetch 1 ,mem_state_map -0x62e4 027080 copy pdata ,regc -0x62e5 027081 ifetch 1 ,temp -0x62e6 027082 call pop_tid_follow -0x62e7 027083 call send_lmp_follow -0x62e8 027084 copy regc ,pdata -0x62e9 027085 store 1 ,mem_state_map -0x62ea 027086 rtn -: 027088 tid_reply: -0x62eb 027089 fetcht 1 ,mem_state_map -0x62ec 027090 set0 smap_lmptidinit ,temp -0x62ed 027091 storet 1 ,mem_state_map -0x62ee 027092 rtn -: 027094 tid_initiate: -0x62ef 027095 fetcht 1 ,mem_state_map -0x62f0 027096 set1 smap_lmptidinit ,temp -0x62f1 027097 storet 1 ,mem_state_map -0x62f2 027098 rtn -: 027101 tid_check: -0x62f3 027102 nsetflag master ,smap_lmptid ,pdata -0x62f4 027103 fetcht 1 ,mem_state_map -0x62f5 027104 ixor temp ,pdata -0x62f6 027105 isolate1 smap_lmptid ,pdata -0x62f7 027106 rtn -: 027109 tid_set_reply: -0x62f8 027110 fetch 1 ,mem_state_map -0x62f9 027111 setflag master ,smap_lmptid ,pdata -0x62fa 027112 store 1 ,mem_state_map -0x62fb 027113 rtn -: 027116 check_localsm: -0x62fc 027117 fetch 1 ,mem_sp_localsm -0x62fd 027118 compare local_statemachine ,pdata ,0x7f -0x62fe 027119 rtn -: 027120 setlocalsm_master: -0x62ff 027121 fetch 1 ,mem_sp_localsm -0x6300 027122 set1 7 ,pdata -0x6301 027123 store 1 ,mem_sp_localsm -0x6302 027124 rtn -: 027125 setlocalsm_slave: -0x6303 027126 fetch 1 ,mem_sp_localsm -0x6304 027127 set0 7 ,pdata -0x6305 027128 store 1 ,mem_sp_localsm -0x6306 027129 rtn -: 027130 check_localsm_master: -0x6307 027131 fetch 1 ,mem_sp_localsm -0x6308 027132 isolate1 7 ,pdata -0x6309 027133 store 1 ,mem_sp_localsm -0x630a 027134 rtn -: 027136 generate_random_number: -0x630b 027138 arg mem_random_number ,contw -: 027139 generate_random: -0x630c 027140 force 16 ,loopcnt -: 027141 generate_random_another: -: 027142 generate_random_loop: -0x630d 027143 random pdata -0x630e 027144 istore 1 ,contw -0x630f 027145 loop generate_random_another -0x6310 027146 rtn -: 027148 generate_linkkey: -0x6311 027149 call function_e21 -0x6312 027150 arg mem_link_key ,rega -0x6313 027151 arg mem_input_store ,regb -0x6314 027152 ifetch 8 ,rega -0x6315 027153 fetcht 1 ,mem_state -0x6316 027154 nsetflag blank ,state_combkey ,temp -0x6317 027155 storet 1 ,mem_state -0x6318 027156 copy rega ,contw -0x6319 027157 call xor16 -0x631a 027158 branch generate_linkkey_continue -: 027164 process_conn_sm: -0x631b 027166 bpatchx patch31_0 ,mem_patch31 -0x631c 027168 call lmo_fifo_check -0x631d 027169 nrtn blank -: 027170 process_conn_sm_continue: -0x631e 027171 fetch 1 ,mem_conn_sm -0x631f 027172 rtn blank -0x6320 027176 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req -0x6321 027177 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept -0x6322 027178 beq conn_sm_send_features ,host_create_conn_send_features -0x6323 027179 beq conn_sm_wait_features_res ,host_create_conn_waiting -0x6324 027180 beq conn_sm_send_switch ,host_create_conn_send_switch -0x6325 027181 beq conn_sm_auth_pair ,host_create_conn_auth_pair -0x6326 027182 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait -0x6327 027183 beq conn_sm_encrypt ,host_create_conn_encrypt -0x6328 027184 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait -0x6329 027185 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear -0x632a 027186 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete -0x632b 027187 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete -0x632c 027188 beq conn_sm_detach_delay ,host_create_conn_master_detach -0x632d 027189 beq conn_sm_send_version ,host_create_conn_send_version -0x632e 027190 beq conn_sm_wait_version ,host_create_conn_waiting -0x632f 027191 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch -0x6330 027192 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext -0x6331 027193 beq conn_sm_wait_features_ext ,host_create_conn_waiting -0x6332 027194 beq conn_sm_pairing ,host_create_conn_pairing -0x6333 027195 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait -0x6334 027196 beq conn_sm_auth ,host_create_conn_auth -0x6335 027197 beq conn_sm_auth_wait ,host_create_conn_auth_wait -0x6336 027198 beq conn_sm_done ,host_create_conn_done -0x6337 027199 beq conn_sm_wait_done ,host_create_conn_done_wait -0x6338 027200 jam conn_sm_standby ,mem_conn_sm -0x6339 027202 rtn -: 027203 host_create_conn_done: -0x633a 027204 fetch 1 ,mem_lmp_conn_state -0x633b 027205 rtnbit0 received_setup_complete -0x633c 027206 rtnbit0 sent_setup_complete -0x633d 027207 jam conn_sm_standby ,mem_conn_sm -0x633e 027208 call host_conn_judge_encrypt -0x633f 027209 branch scheduler_start_upper_sm -: 027211 host_conn_judge_encrypt: -0x6340 027212 fetch 1 ,mem_connection_options -0x6341 027213 rtnbit0 connection_encrypt -0x6342 027214 jam conn_sm_encrypt_wait ,mem_conn_sm -0x6343 027215 rtn -: 027217 host_create_conn_done_wait: -0x6344 027218 arg enpt_delay_timer ,queue -0x6345 027219 call timer_check -0x6346 027220 nrtn blank -0x6347 027221 jam conn_sm_done ,mem_conn_sm -0x6348 027222 rtn -: 027224 host_create_conn_auth: -0x6349 027225 fetch 1 ,mem_connection_options -0x634a 027226 set0 connection_auth ,pdata -0x634b 027227 store 1 ,mem_connection_options -0x634c 027228 jam conn_sm_auth_wait ,mem_conn_sm -0x634d 027229 jam lmp_au_rand ,mem_lmo_opcode2 -0x634e 027230 rtn -: 027231 host_create_conn_auth_wait: -0x634f 027232 rtn -: 027233 host_create_conn_pairing: -0x6350 027234 fetch 1 ,mem_pincode_state -0x6351 027235 rtnne pincode_state_pincode_ready -0x6352 027236 call host_auth -0x6353 027237 jam conn_sm_pairing_wait ,mem_conn_sm -0x6354 027238 rtn -: 027240 host_create_conn_pairing_wait: -0x6355 027241 rtn -: 027242 host_creat_conn_send_feat_ext: -0x6356 027243 jam conn_sm_wait_features_ext ,mem_conn_sm -0x6357 027244 jam lmp_ext_features_req ,mem_lmo_opcode2 -0x6358 027245 rtn -: 027246 host_create_conn_send_version: -0x6359 027247 jam conn_sm_wait_version ,mem_conn_sm -0x635a 027248 jam lmp_version_req ,mem_lmo_opcode2 -0x635b 027249 rtn -: 027251 host_creat_conn_wait_switch: -0x635c 027252 fetch 1 ,mem_switch_flag -0x635d 027253 rtneq switch_flag_init -0x635e 027254 beq switch_flag_accept ,host_create_conn_switch_accept -0x635f 027255 arg switch_wait_timer ,queue -0x6360 027256 call timer_check -0x6361 027257 nrtn blank -0x6362 027258 jam switch_flag_init ,mem_switch_flag -0x6363 027259 branch host_create_conn_switch -: 027260 host_create_conn_switch_accept: -0x6364 027261 rtn master -0x6365 027262 branch host_create_conn_auth_pair -: 027264 host_create_conn_send_features: -0x6366 027265 jam conn_sm_wait_features_res ,mem_conn_sm -0x6367 027266 jam lmp_features_req ,mem_lmo_opcode2 -0x6368 027267 rtn -: 027268 host_create_conn_send_switch: -0x6369 027269 jam lmp_switch_req ,mem_lmo_opcode2 -0x636a 027270 set1 mark_switch_initiated ,mark -0x636b 027271 jam conn_sm_wait_conn_accept ,mem_conn_sm -0x636c 027272 setarg 0x1ff -0x636d 027273 store 2 ,mem_soft_timer -0x636e 027274 rtn -: 027275 host_create_conn_send_conn_req: -0x636f 027276 jam conn_sm_wait_conn_accept ,mem_conn_sm -0x6370 027277 jam 0xff ,mem_soft_timer -0x6371 027278 set0 mark_reconn_recieve_switch ,mark -0x6372 027279 jam lmp_host_connection_req ,mem_lmo_opcode2 -0x6373 027280 branch init_lmp_reinit -: 027281 host_create_conn_wait_accept: -0x6374 027282 rtnmark1 mark_reconn_recieve_switch -0x6375 027283 fetch 2 ,mem_soft_timer -0x6376 027284 sub pdata ,1 ,pdata -0x6377 027285 branch host_create_conn_resend ,zero -0x6378 027286 store 2 ,mem_soft_timer -0x6379 027287 rtn -: 027288 host_create_conn_resend: -0x637a 027289 jam conn_sm_send_switch ,mem_conn_sm -0x637b 027290 rtn -: 027291 host_create_conn_waiting: -0x637c 027293 rtn -: 027295 host_create_conn_switch: -0x637d 027296 fetch 1 ,mem_lmp_conn_state -0x637e 027297 rtnbit0 sent_setup_complete -0x637f 027298 rtnbit0 received_setup_complete -0x6380 027299 fetch 1 ,mem_connection_options -0x6381 027300 set0 connection_switch ,pdata -0x6382 027301 store 1 ,mem_connection_options -0x6383 027302 jam lmp_switch_req ,mem_lmo_opcode2 -0x6384 027303 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm -0x6385 027304 rtn -: 027306 host_create_conn_send_setup_complete: -0x6386 027307 jam conn_sm_wait_setup_complete ,mem_conn_sm -0x6387 027308 jam lmp_setup_complete ,mem_lmo_opcode2 -0x6388 027309 rtn -: 027311 host_create_conn_wait_setup_complete: -0x6389 027312 fetch 1 ,mem_lmp_conn_state -0x638a 027313 rtnbit0 received_setup_complete -0x638b 027314 jam conn_sm_standby ,mem_conn_sm -0x638c 027316 rtn -: 027317 host_create_conn_wait_setup_complete_rtn: -0x638d 027318 jam conn_sm_auth_pair ,mem_conn_sm -0x638e 027319 rtn -: 027321 host_create_conn_master_detach: -0x638f 027322 fetch 1 ,mem_soft_timer -0x6390 027323 increase -1 ,pdata -0x6391 027324 branch host_create_conn_send_detach ,blank -0x6392 027325 store 1 ,mem_soft_timer -0x6393 027326 rtn -: 027327 host_create_conn_send_detach: -0x6394 027328 jam lmp_detach ,mem_lmo_opcode2 -0x6395 027329 jam local_host ,mem_disconn_reason_send -0x6396 027330 jam 0 ,mem_conn_sm -0x6397 027331 rtn -: 027332 host_create_conn_auth_pair: -0x6398 027334 fetch 1 ,mem_connection_options -0x6399 027335 bbit1 connection_switch ,host_create_conn_switch -0x639a 027336 bbit1 connection_auth ,host_create_conn_auth_pair_true -: 027337 host_create_conn_sm_done: -0x639b 027338 jam conn_sm_done ,mem_conn_sm -0x639c 027339 rtn -: 027340 host_create_conn_auth_pair_true: -0x639d 027341 fetch 1 ,mem_link_key_exists -0x639e 027342 branch host_create_conn_auth_pair_nokey ,blank -0x639f 027343 fetch 1 ,mem_lmp_conn_state -0x63a0 027344 rtnbit0 sent_setup_complete -0x63a1 027345 rtnbit0 received_setup_complete -0x63a2 027346 fetch 4 ,mem_aurand_send_delay_time -0x63a3 027347 arg 100 ,temp -0x63a4 027348 iadd temp ,temp -0x63a5 027349 copy clkn_bt ,pdata -0x63a6 027350 isub temp ,null -0x63a7 027351 nrtn positive -0x63a8 027352 branch host_create_conn_auth -: 027356 host_create_conn_auth_pair_nokey: -0x63a9 027357 jam conn_sm_pairing ,mem_conn_sm -0x63aa 027358 jam 4 ,mem_pin_length -0x63ab 027359 setarg 0x3030 -0x63ac 027360 store 2 ,mem_pin -0x63ad 027361 istore 2 ,contw -0x63ae 027362 jam pincode_state_pincode_ready ,mem_pincode_state -0x63af 027363 branch host_create_conn_pairing -: 027365 host_create_conn_auth_pair_wait: -0x63b0 027366 rtn -: 027367 host_create_conn_encrypt: -0x63b1 027368 fetch 1 ,mem_connection_options -0x63b2 027369 bbit1 connection_encrypt ,host_create_conn_encrypt_start -0x63b3 027370 jam conn_sm_done ,mem_conn_sm -0x63b4 027371 rtn -: 027373 host_create_conn_encrypt_start: -0x63b5 027374 fetch 1 ,mem_connection_options -0x63b6 027375 set0 connection_encrypt ,pdata -0x63b7 027376 store 1 ,mem_connection_options -0x63b8 027377 jam lmp_encryption_mode_req ,mem_lmo_opcode2 -0x63b9 027378 rtn -: 027380 host_create_conn_encrypt_wait: -0x63ba 027381 fetch 1 ,mem_wait_encryption -0x63bb 027382 rtn blank -0x63bc 027383 jam conn_sm_standby ,mem_conn_sm -0x63bd 027384 branch host_create_conn_encrypt_start -: 027386 host_create_conn_encrypt_wait_clear: -0x63be 027387 jam conn_sm_send_setup_complete ,mem_conn_sm -0x63bf 027388 rtn -: 027390 host_auth: -0x63c0 027391 fetch 1 ,mem_op -0x63c1 027392 bbit1 op_inrand_req ,remote_auth -0x63c2 027393 call tid_initiate -0x63c3 027394 jam lmp_in_rand ,mem_lmo_opcode2 -0x63c4 027395 branch cmd_exit -: 027396 remote_auth: -0x63c5 027397 fetch 1 ,mem_op -0x63c6 027398 set0 op_inrand_req ,pdata -0x63c7 027399 store 1 ,mem_op -0x63c8 027400 call lmp_accept_inrand -0x63c9 027401 call tid_set_reply -0x63ca 027402 branch cmd_exit -: 027404 pincode_reinit: -0x63cb 027405 setarg 4 -0x63cc 027406 store 1 ,mem_pin_length -0x63cd 027407 setarg 0x3030 -0x63ce 027408 istore 2 ,contw -0x63cf 027409 istore 2 ,contw -0x63d0 027410 rtn -: 027416 twspi_reset: -0x63d1 027417 bpatchx patch31_4 ,mem_patch31 -0x63d2 027418 hfetch 1 ,core_gpio_oe3 -0x63d3 027419 arg 0x06 ,temp -0x63d4 027420 ior temp ,pdata -0x63d5 027421 hstore 1 ,core_gpio_oe3 -0x63d6 027422 hfetch 1 ,core_gpio_out3 -0x63d7 027423 ior temp ,pdata -0x63d8 027424 hstore 1 ,core_gpio_out3 -0x63d9 027425 call twspi_disable -0x63da 027426 hfetch 1 ,core_gpio_out3 -0x63db 027427 set0 1 ,pdata -0x63dc 027428 set0 2 ,pdata -0x63dd 027429 hstore 1 ,core_gpio_out3 -0x63de 027430 nop 30 -0x63df 027431 branch twspi_enable -: 027433 twspi_reset2: -0x63e0 027434 hfetch 1 ,core_gpio_oe3 -0x63e1 027435 arg 0xc0 ,temp -0x63e2 027436 ior temp ,pdata -0x63e3 027437 hstore 1 ,core_gpio_oe3 -0x63e4 027438 hfetch 1 ,core_gpio_out3 -0x63e5 027439 ior temp ,pdata -0x63e6 027440 hstore 1 ,core_gpio_out3 -0x63e7 027441 call twspi_disable -0x63e8 027442 hfetch 1 ,core_gpio_out3 -0x63e9 027443 set0 6 ,pdata -0x63ea 027444 set0 7 ,pdata -0x63eb 027445 hstore 1 ,core_gpio_out3 -0x63ec 027446 nop 30 -0x63ed 027447 branch twspi_enable2 -: 027449 twspi_disable: -0x63ee 027450 hfetch 1 ,core_gpio_sel1 -0x63ef 027451 and pdata ,0xfc ,pdata -0x63f0 027452 hstore 1 ,core_gpio_sel1 -0x63f1 027453 rtn -: 027454 twspi_enable: -0x63f2 027455 hfetch 1 ,core_gpio_sel1 -0x63f3 027456 or pdata ,0x01 ,pdata -0x63f4 027457 hstore 1 ,core_gpio_sel1 -0x63f5 027458 rtn -: 027459 twspi_enable2: -0x63f6 027460 hfetch 1 ,core_gpio_sel1 -0x63f7 027461 or pdata ,0x03 ,pdata -0x63f8 027462 set0 4 ,pdata -0x63f9 027463 hstore 1 ,core_gpio_sel1 -0x63fa 027464 rtn -: 027468 sensor_read: -0x63fb 027469 copy pdata ,regb -0x63fc 027470 call spi_ncs_enable -0x63fd 027471 nop 100 -0x63fe 027472 copy regb ,pdata -0x63ff 027473 call twspi_read -0x6400 027474 copy pdata ,regb -0x6401 027475 call spi_ncs_disable -0x6402 027476 nop 100 -0x6403 027477 copy regb ,pdata -0x6404 027478 rtn -: 027480 sensor_write: -0x6405 027481 copy pdata ,regb -0x6406 027482 call spi_ncs_enable -0x6407 027483 nop 100 -0x6408 027484 copy regb ,pdata -0x6409 027485 call twspi_write -0x640a 027486 call spi_ncs_disable -0x640b 027487 nop 100 -0x640c 027488 rtn -: 027491 spi_ncs_gpio_init: -0x640d 027492 fetcht 1 ,mem_spi_ncs_gpio -0x640e 027493 branch gpio_config_output -: 027496 spi_ncs_enable: -0x640f 027497 fetcht 1 ,mem_spi_ncs_gpio -0x6410 027498 branch gpio_out_active -: 027501 spi_ncs_disable: -0x6411 027502 fetcht 1 ,mem_spi_ncs_gpio -0x6412 027503 branch gpio_out_inactive -: 027506 twspi_write: -0x6413 027507 branch spid_write_reg -: 027509 twspi_read: -0x6414 027510 branch spid_read_reg -: 027517 read_function_aes: -0x6415 027518 nbranch read_function ,user -0x6416 027519 hfetch 1 ,core_gpio_key2 -0x6417 027520 or_into 0x2 ,pdata -0x6418 027521 hstore 1 ,core_gpio_key2 -: 027522 read_function: -0x6419 027523 copy temp ,null -0x641a 027524 branch read_fuction_zero ,zero -0x641b 027525 copy regc ,pc -: 027526 read_fuction_zero: -0x641c 027527 isolate0 0 ,null -0x641d 027528 branch set_ucode_status -: 027531 get_block_header: -0x641e 027532 force 4 ,temp -: 027533 get_block_header0: -0x641f 027534 arg mem_ucode_buf ,rega -0x6420 027535 hfetch 1 ,core_gpio_key2 -0x6421 027536 and_into 0xfd ,pdata -0x6422 027537 hstore 1 ,core_gpio_key2 -0x6423 027538 call read_function -0x6424 027539 arg 0x55aa ,rega -0x6425 027540 fetch 2 ,mem_ucode_buf -0x6426 027541 ifetcht 2 ,contr -0x6427 027542 isub rega ,null -0x6428 027543 rtn -: 027545 read_first_block: -0x6429 027546 arg 2 ,temp -0x642a 027547 arg mem_ucode_ptr ,rega -0x642b 027548 call read_function -0x642c 027549 fetch 2 ,mem_ucode_ptr -0x642d 027550 store 2 ,mem_addr_mi -0x642e 027551 call get_iv ,user -0x642f 027552 rtn -: 027554 get_iv: -0x6430 027555 arg 16 ,temp -0x6431 027556 arg mem_ucode_keybuf ,rega -0x6432 027557 hfetch 1 ,core_gpio_key2 -0x6433 027558 and_into 0xfd ,pdata -0x6434 027559 hstore 1 ,core_gpio_key2 -0x6435 027560 call read_function -0x6436 027561 arg mem_ucode_keybuf ,contr -0x6437 027562 arg 16 ,loopcnt -0x6438 027563 call aes_load_data -0x6439 027564 call aes_init -0x643a 027565 call aes_clear_data -0x643b 027566 branch do_aes_cbc -: 027568 load_storage: -0x643c 027569 disable match -0x643d 027570 call get_block_header -0x643e 027571 nrtn zero -0x643f 027572 enable match -0x6440 027573 jam 0x80 ,core_ucode_ctrl -0x6441 027574 jam 0 ,core_ucode_hi -0x6442 027575 jam 0 ,core_ucode_low -0x6443 027576 arg core_ucode_data ,rega -0x6444 027577 call read_function_aes -0x6445 027578 jam 0x0 ,core_ucode_ctrl -: 027579 load_storage_loop: -0x6446 027580 arg 6 ,temp -0x6447 027581 call get_block_header0 -0x6448 027582 nrtn zero -0x6449 027583 ifetch 2 ,contr -0x644a 027584 iforce rega -0x644b 027585 call read_function -0x644c 027586 branch load_storage_loop -: 027590 reload_eeprom: -0x644d 027591 call clean_mem -0x644e 027592 setarg 0x1000 -0x644f 027593 store 2 ,mem_addr_mi -0x6450 027594 arg iicd_read_eep ,regc -0x6451 027595 arg 2 ,loopcnt -: 027596 reload_eeprom_loop: -0x6452 027597 call get_block_header -0x6453 027598 nrtn zero -0x6454 027599 fetch 2 ,mem_addr_mi -0x6455 027600 byteswap pdata ,pdata -0x6456 027601 iadd temp ,pdata -0x6457 027602 byteswap pdata ,pdata -0x6458 027603 store 2 ,mem_addr_mi -0x6459 027604 loop reload_eeprom_loop -0x645a 027605 branch load_storage_loop -: 027607 loadcode: -0x645b 027608 call clean_mem -0x645c 027609 disable user -0x645d 027610 call otp_enable_chgpump -0x645e 027611 setarg otp_ucode_flag -0x645f 027612 arg mem_otp_ucode_flag ,rega -0x6460 027613 arg 2 ,temp -0x6461 027614 call otpd_read_data -0x6462 027615 fetch 2 ,mem_otp_ucode_flag -0x6463 027616 bbit0 otp_uflag_aes ,loadcode_otp -0x6464 027617 jam 0x25 ,core_clkoff -0x6465 027618 setarg otp_ucode_aeskey -0x6466 027619 arg mem_ucode_keybuf ,rega -0x6467 027620 arg 16 ,temp -0x6468 027621 call otpd_read_data -0x6469 027622 jam lock_otp ,core_misc_ctrl -0x646a 027623 set1 mark_otp_encrypt ,mark -0x646b 027624 arg mem_ucode_keybuf ,contr -0x646c 027625 call load_key -0x646d 027626 enable user -: 027627 loadcode_otp: -0x646e 027628 jam 0 ,mem_loadcode_times -: 027629 loadcode_otp_2: -0x646f 027630 call loadcode_check_times -0x6470 027631 fetch 2 ,mem_otp_ucode_flag -0x6471 027632 byteswap pdata ,pdata -0x6472 027633 arg 0x7ff ,temp -0x6473 027634 iand temp ,pdata -0x6474 027635 branch loadcode_iic ,zero -0x6475 027636 call otp_set_addr -0x6476 027637 arg otpd_read_code ,regc -0x6477 027638 call get_iv ,user -0x6478 027639 call load_storage -0x6479 027640 fetch 1 ,mem_ucode_status -0x647a 027641 bbit0 0 ,loadcode_otp_2 -: 027643 loadcode_iic: -0x647b 027644 call otp_disable_chgpump -0x647c 027645 jam 0 ,mem_loadcode_times -: 027646 loadcode_iic_2: -0x647d 027647 call loadcode_check_times -0x647e 027648 call clear_eeprom_size_2k -0x647f 027649 fetch 1 ,mem_otp_ucode_flag -0x6480 027650 bbit1 otp_uflag_skip_eep ,loadcode_spi -0x6481 027651 call loadcode_iic_by_eeprom -0x6482 027652 nbranch loadcode_iic_eeprom_2k ,match -0x6483 027653 fetch 1 ,mem_ucode_status -0x6484 027654 bbit0 0 ,loadcode_iic_2 -0x6485 027655 branch loadcode_hci -: 027656 loadcode_iic_eeprom_2k: -0x6486 027657 call set_eeprom_size_2k -0x6487 027658 fetch 1 ,mem_otp_ucode_flag -0x6488 027659 bbit1 otp_uflag_skip_eep ,loadcode_spi -0x6489 027660 call loadcode_iic_by_eeprom -0x648a 027661 nbranch loadcode_spi ,match -0x648b 027662 fetch 1 ,mem_ucode_status -0x648c 027663 bbit0 0 ,loadcode_iic_2 -0x648d 027664 branch loadcode_hci -: 027666 loadcode_spi: -0x648e 027667 jam 0 ,mem_loadcode_times -: 027668 loadcode_spi_2: -0x648f 027669 call loadcode_check_times -0x6490 027670 fetch 1 ,mem_otp_ucode_flag -0x6491 027671 bbit1 otp_uflag_skip_flash ,loadcode_hci -0x6492 027672 setarg 0x0 -0x6493 027673 store 3 ,mem_addr_hi -0x6494 027674 call spid_init_flash -0x6495 027675 arg spid_load_flash ,regc -0x6496 027676 call read_first_block -0x6497 027677 call load_storage -0x6498 027678 nbranch loadcode_hci ,match -0x6499 027679 fetch 1 ,mem_ucode_status -0x649a 027680 bbit0 0 ,loadcode_spi_2 -: 027682 loadcode_hci: -0x649b 027683 bmark1 mark_otp_encrypt ,loadcode_hci_enc -0x649c 027684 call clear_key_buf -: 027685 loadcode_hci_enc: -0x649d 027686 fetch 1 ,mem_otp_ucode_flag -0x649e 027687 bbit0 otp_uflag_hci ,clear_key_buf -0x649f 027688 jam 0x21 ,core_clkoff -0x64a0 027689 call hci_init -: 027690 loadcode_hci_loop: -0x64a1 027691 call hci_rx_packet -0x64a2 027692 branch loadcode_hci_loop -: 027694 clear_key_buf: -0x64a3 027695 setarg 0 -0x64a4 027696 store 8 ,mem_ucode_keybuf -0x64a5 027697 store 8 ,mem_ucode_keybuf + 8 -0x64a6 027698 force regidx_key ,regext_index -0x64a7 027699 call aes_clear -0x64a8 027700 jam 0x21 ,core_clkoff -0x64a9 027701 rtn -: 027704 loadcode_iic_by_eeprom: -0x64aa 027705 setarg 0x0 -0x64ab 027706 store 2 ,mem_addr_mi -0x64ac 027707 arg iicd_read_eep ,regc -0x64ad 027708 call iicd_init_12m -0x64ae 027709 call read_first_block -0x64af 027710 branch load_storage -: 027713 loadcode_check_times: -0x64b0 027714 fetch 1 ,mem_loadcode_times -0x64b1 027715 increase 1 ,pdata -0x64b2 027716 sub pdata ,3 ,null -0x64b3 027717 nbranch loadcode_error ,positive -0x64b4 027718 store 1 ,mem_loadcode_times -0x64b5 027719 rtn -: 027721 loadcode_error: -0x64b6 027722 call clear_key_buf -0x64b7 027723 call ice_break -0x64b8 027724 rtn -: 027728 set_ucode_status: -0x64b9 027729 fetch 1 ,mem_ucode_status -0x64ba 027730 lshift pdata ,pdata -0x64bb 027731 setflag true ,0 ,pdata -0x64bc 027732 isolate0 15 ,rega -0x64bd 027733 rtn true -0x64be 027734 store 1 ,mem_ucode_status -0x64bf 027735 rtn -: 027738 decrypt_code: -0x64c0 027739 hfetch 1 ,core_gpio_key2 -0x64c1 027740 rtnbit0 1 -0x64c2 027741 branch decrypt_code_skip -: 027742 decrypt_code_loop: -0x64c3 027743 hfetch 1 ,core_dma_status -0x64c4 027744 qisolate1 pdata -0x64c5 027745 rtn true -: 027746 decrypt_code_skip: -0x64c6 027747 hfetch 1 ,core_misc_status -0x64c7 027748 bbit0 1 ,decrypt_code_loop -0x64c8 027749 call do_aes_cbc -0x64c9 027750 branch decrypt_code_loop -: 027754 load_ucode: -0x64ca 027755 fetch 2 ,mem_patch_ptr -0x64cb 027756 rtn blank -0x64cc 027757 jam 0x80 ,core_ucode_ctrl -0x64cd 027758 jam 0 ,core_ucode_hi -0x64ce 027759 jam 0 ,core_ucode_low -0x64cf 027760 fetcht 2 ,mem_patch_len -0x64d0 027761 lshift2 temp ,loopcnt -0x64d1 027762 iforce contr -: 027763 load_ucode_loop: -0x64d2 027764 ifetch 1 ,contr -0x64d3 027765 hstore 1 ,core_ucode_data -0x64d4 027766 loop load_ucode_loop -0x64d5 027767 jam 0x0 ,core_ucode_ctrl -0x64d6 027768 rtn -: 027773 spid_init: -0x64d7 027774 bpatchx patch31_5 ,mem_patch31 -0x64d8 027775 call spid_init_common -0x64d9 027776 branch twspi_enable -: 027778 spid_init2: -0x64da 027779 call spid_init_common -0x64db 027780 call twspi_disable -0x64dc 027781 branch twspi_enable2 -: 027783 spid_init_common: -0x64dd 027784 fetch 1 ,mem_spi_init_clk -0x64de 027785 hstore 1 ,core_spid_ctrl -0x64df 027786 fetch 1 ,mem_spi_init_delay_time -0x64e0 027787 hstore 1 ,core_spid_delay -0x64e1 027788 setarg mem_spid_tbuf -0x64e2 027789 hstore 2 ,core_spid_txaddr -0x64e3 027790 setarg mem_spid_rbuf -0x64e4 027791 hstore 2 ,core_spid_rxaddr -0x64e5 027792 branch twspi_disable -: 027794 spid_reset: -0x64e6 027795 hfetch 1 ,core_spid_ctrl -0x64e7 027796 set1 7 ,pdata -0x64e8 027797 hstore 1 ,core_spid_ctrl -0x64e9 027798 set0 7 ,pdata -0x64ea 027799 hstore 1 ,core_spid_ctrl -0x64eb 027800 rtn -: 027804 spid_write_reg: -0x64ec 027805 set1 7 ,pdata -0x64ed 027806 store 2 ,mem_spid_tbuf -0x64ee 027807 bpatchx patch31_6 ,mem_patch31 -0x64ef 027808 jam 2 ,core_spid_txlen -0x64f0 027809 jam 0 ,core_spid_rxlen -0x64f1 027810 jam spid_start ,core_misc_ctrl -0x64f2 027811 branch wait_spid_done -: 027814 spid_read_reg: -0x64f3 027815 force 1 ,temp -: 027817 spid_read_regs: -0x64f4 027819 store 1 ,mem_spid_tbuf -0x64f5 027820 bpatchx patch31_7 ,mem_patch31 -0x64f6 027821 jam 1 ,core_spid_txlen -0x64f7 027822 hstoret 2 ,core_spid_rxlen -0x64f8 027823 jam spid_start ,core_misc_ctrl -0x64f9 027824 call wait_spid_done -0x64fa 027825 fetch 1 ,mem_spid_rbuf -0x64fb 027826 rtn -: 027828 wait_spid_done: -0x64fc 027829 fetch 2 ,mem_afh_error_total -0x64fd 027830 increase 1 ,pdata -0x64fe 027831 store 2 ,mem_afh_error_total -0x64ff 027832 hfetch 1 ,core_dma_status -0x6500 027833 bbit0 spid_done ,wait_spid_done -0x6501 027834 rtn -: 027836 spid_init_flash: -0x6502 027837 jam 0x40 ,core_spid_ctrl -0x6503 027838 jam 0x0 ,core_spid_delay -0x6504 027839 hfetch 1 ,core_gpio_sel1 -0x6505 027840 set0 0 ,pdata -0x6506 027841 set1 1 ,pdata -0x6507 027842 hstore 1 ,core_gpio_sel1 -0x6508 027843 setarg 0 -0x6509 027844 store 4 ,mem_spid_tbuf -0x650a 027845 rtn -: 027848 spid_unlock_flash: -0x650b 027849 setarg 0 -0x650c 027850 hstore 2 ,core_spid_rxlen -0x650d 027851 setarg 1 -0x650e 027852 hstore 2 ,core_spid_txlen -0x650f 027853 setarg mem_spid_tbuf -0x6510 027854 hstore 2 ,core_spid_txaddr -0x6511 027855 jam 6 ,mem_spid_tbuf -0x6512 027856 jam spid_start ,core_misc_ctrl -0x6513 027857 branch wait_spid_done -: 027872 flash_write: -0x6514 027873 disable user -0x6515 027874 copy pdata ,regb -0x6516 027875 fetch 1 ,mem_spi_write_flash_sm -0x6517 027876 rtnne flash_sm_no_buys -0x6518 027877 enable user -0x6519 027878 copy regb ,pdata -0x651a 027879 branch flash_write_start -: 027882 flash_write_spi_sm_timer: -0x651b 027883 fetch 1 ,mem_spi_write_flash_sm -0x651c 027884 beq flash_sm_start ,flash_write_start -0x651d 027885 beq flash_sm_erase_sector ,flash_erase_sector -0x651e 027886 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector -0x651f 027887 beq flash_sm_write_data ,flash_write_data -0x6520 027888 beq flash_sm_wait_write_data ,flash_wait_write_data -0x6521 027889 rtn -: 027891 flash_write_start: -0x6522 027892 store 3 ,mem_spi_write_addr -0x6523 027893 copy rega ,pdata -0x6524 027894 store 2 ,mem_spi_write_ptr -0x6525 027895 storet 2 ,mem_spi_write_len -0x6526 027896 jam flash_sm_erase_sector ,mem_spi_write_flash_sm -0x6527 027897 branch spid_init_flash -: 027898 flash_erase_sector: -0x6528 027899 call spid_init_flash -0x6529 027900 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm -0x652a 027901 call spid_unlock_flash -0x652b 027902 arg mem_spid_tbuf ,rega -0x652c 027903 fetch 3 ,mem_spi_write_addr -0x652d 027904 jam 4 ,core_spid_txlen -0x652e 027905 arg flash_command_sector_erase ,temp -0x652f 027906 branch spid_write_flash_common -: 027908 flash_wait_erase_sector: -0x6530 027909 call spid_init_flash -0x6531 027910 call spid_unlock_flash -0x6532 027911 setarg flash_read_satus -0x6533 027912 call spid_read_reg -0x6534 027913 rtnbit1 flash_status_wip -0x6535 027914 jam flash_sm_write_data ,mem_spi_write_flash_sm -0x6536 027915 rtn -: 027916 flash_write_data: -0x6537 027917 call spid_init_flash -0x6538 027918 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm -0x6539 027919 call spid_unlock_flash -0x653a 027920 call flash_data_preserve -0x653b 027921 call spid_write_flash -0x653c 027922 branch flash_data_recover -: 027923 flash_wait_write_data: -0x653d 027924 call spid_init_flash -0x653e 027925 call spid_unlock_flash -0x653f 027926 setarg flash_read_satus -0x6540 027927 call spid_read_reg -0x6541 027928 rtnbit1 flash_status_wip -0x6542 027929 jam flash_sm_no_buys ,mem_spi_write_flash_sm -0x6543 027930 fetch 2 ,mem_cb_spi_flash_write_complate -0x6544 027931 branch callback_func -: 027932 flash_data_recover: -0x6545 027933 fetch 4 ,mem_temp -0x6546 027934 fetcht 2 ,mem_spi_write_ptr -0x6547 027935 increase -4 ,temp -0x6548 027936 istore 4 ,temp -0x6549 027937 rtn -: 027938 flash_data_preserve: -0x654a 027939 fetcht 2 ,mem_spi_write_ptr -0x654b 027940 copy temp ,rega -0x654c 027941 increase -4 ,temp -0x654d 027942 ifetch 4 ,temp -0x654e 027943 store 4 ,mem_temp -0x654f 027944 fetcht 2 ,mem_spi_write_len -0x6550 027945 fetch 3 ,mem_spi_write_addr -0x6551 027946 rtn -: 027950 spid_write_flash: -0x6552 027951 increase 4 ,temp -0x6553 027952 hstoret 2 ,core_spid_txlen -0x6554 027953 arg flash_command_write_data ,temp -0x6555 027954 increase -4 ,rega -: 027955 spid_write_flash_common: -0x6556 027957 istoret 1 ,rega -0x6557 027958 rshift16 pdata ,temp -0x6558 027959 istoret 1 ,contw -0x6559 027960 rshift8 pdata ,temp -0x655a 027961 istoret 1 ,contw -0x655b 027962 istore 1 ,contw -0x655c 027963 deposit rega -0x655d 027964 hstore 2 ,core_spid_txaddr -0x655e 027965 setarg 0 -0x655f 027966 hstore 2 ,core_spid_rxlen -0x6560 027967 jam spid_start ,core_misc_ctrl -0x6561 027968 branch wait_spid_done -: 027972 spid_read_flash: -0x6562 027973 hstoret 2 ,core_spid_rxlen -0x6563 027974 rshift16 pdata ,temp -0x6564 027975 storet 1 ,mem_addr_hi -0x6565 027976 rshift8 pdata ,temp -0x6566 027977 storet 1 ,mem_addr_mi -0x6567 027978 store 1 ,mem_addr_lo -0x6568 027979 setarg 4 -0x6569 027980 hstore 2 ,core_spid_txlen -0x656a 027981 jam flash_command_read_data ,mem_spid_tbuf -0x656b 027982 setarg mem_spid_tbuf -0x656c 027983 hstore 2 ,core_spid_txaddr -0x656d 027984 deposit rega -0x656e 027985 hstore 2 ,core_spid_rxaddr -0x656f 027986 hfetch 1 ,core_spid_ctrl -0x6570 027987 isolate0 15 ,rega -0x6571 027988 setflag true ,6 ,pdata -0x6572 027989 hstore 1 ,core_spid_ctrl -0x6573 027990 jam spid_start ,core_misc_ctrl -: 027991 spi_read_flash_wait: -0x6574 027992 hfetch 1 ,core_dma_status -0x6575 027993 bbit1 7 ,spi_read_flash_wait -0x6576 027994 arg spid_done ,queue -0x6577 027995 branch wait_spid_done -: 027999 spid_load_flash: -0x6578 028000 hstoret 2 ,core_spid_rxlen -0x6579 028001 setarg 4 -0x657a 028002 hstore 2 ,core_spid_txlen -0x657b 028003 jam 3 ,mem_spid_tbuf -0x657c 028004 setarg mem_spid_tbuf -0x657d 028005 hstore 2 ,core_spid_txaddr -0x657e 028006 deposit rega -0x657f 028007 hstore 2 ,core_spid_rxaddr -0x6580 028008 hfetch 1 ,core_spid_ctrl -0x6581 028009 isolate0 15 ,rega -0x6582 028010 setflag true ,6 ,pdata -0x6583 028011 hstore 1 ,core_spid_ctrl -0x6584 028012 jam spid_start ,core_misc_ctrl -: 028013 spi_load_flash_wait: -0x6585 028014 hfetch 1 ,core_dma_status -0x6586 028015 bbit1 7 ,spi_load_flash_wait -0x6587 028016 arg spid_done ,queue -0x6588 028017 call decrypt_code -0x6589 028018 call wait_spid_done -0x658a 028019 isolate1 spid_crcok ,pdata -0x658b 028020 call set_ucode_status -0x658c 028021 fetch 1 ,mem_addr_hi -0x658d 028022 lshift16 pdata ,regb -0x658e 028023 fetch 1 ,mem_addr_mi -0x658f 028024 lshift8 pdata ,pdata -0x6590 028025 ior regb ,regb -0x6591 028026 fetch 1 ,mem_addr_lo -0x6592 028027 ior regb ,pdata -0x6593 028028 iadd temp ,pdata -0x6594 028029 store 1 ,mem_addr_lo -0x6595 028030 rshift8 pdata ,pdata -0x6596 028031 store 1 ,mem_addr_mi -0x6597 028032 rshift8 pdata ,pdata -0x6598 028033 store 1 ,mem_addr_hi -0x6599 028034 rtn -: 028039 soft_reset_chip: -0x659a 028040 jam 1 ,core_reset -0x659b 028041 rtn -: 028047 iic_init_390k: -0x659c 028048 jam 12 ,core_iicd_scl_low -0x659d 028049 jam 13 ,core_iicd_scl_high -0x659e 028050 jam 13 ,core_iicd_start_setup -0x659f 028051 jam 13 ,core_iicd_start_hold -0x65a0 028052 jam 13 ,core_iicd_stop_setup -0x65a1 028053 jam 12 ,core_iicd_data_setup -0x65a2 028054 branch iicd_init_gpio -: 028057 iicd_init_12m: -0x65a3 028058 jam 5 ,core_iicd_scl_low -0x65a4 028059 jam 7 ,core_iicd_scl_high -0x65a5 028060 jam 7 ,core_iicd_start_setup -0x65a6 028061 jam 7 ,core_iicd_start_hold -0x65a7 028062 jam 7 ,core_iicd_stop_setup -0x65a8 028063 jam 5 ,core_iicd_data_setup -: 028064 iicd_init_gpio: -0x65a9 028065 hfetch 1 ,core_gpio_pu3 -0x65aa 028066 or_into 0xc0 ,pdata -0x65ab 028067 hstore 1 ,core_gpio_pu3 -0x65ac 028068 hfetch 1 ,core_gpio_sel1 -0x65ad 028069 or_into 0x10 ,pdata -0x65ae 028070 hstore 1 ,core_gpio_sel1 -0x65af 028071 rtn -: 028075 wait_iicd_done: -0x65b0 028076 hfetch 1 ,core_dma_status -0x65b1 028077 bbit0 iicd_done ,wait_iicd_done -0x65b2 028078 rtn -: 028086 iicd_read_data: -0x65b3 028087 hstore 2 ,core_iicd_txlen -0x65b4 028088 deposit rega -0x65b5 028089 hstore 2 ,core_iicd_txaddr -0x65b6 028090 deposit regb -0x65b7 028091 hstore 2 ,core_iicd_rxaddr -0x65b8 028092 deposit temp -0x65b9 028093 hstore 2 ,core_iicd_rxlen -0x65ba 028094 arg 1 ,temp -0x65bb 028095 nsetflag blank ,1 ,temp -0x65bc 028096 hstore 1 ,core_iicd_ctrl -0x65bd 028097 jam iicd_start ,core_misc_ctrl -0x65be 028098 branch wait_iicd_done -: 028101 set_eeprom_size_2k: -0x65bf 028102 set1 mark_eeprom_size ,mark -0x65c0 028103 jam 0x08 ,mem_eeprom_block_size -0x65c1 028104 rtn -: 028106 clear_eeprom_size_2k: -0x65c2 028107 set0 mark_eeprom_size ,mark -0x65c3 028108 jam 0x20 ,mem_eeprom_block_size -0x65c4 028109 rtn -: 028112 iicd_read_eep_data_size_2k: -0x65c5 028113 fetch 1 ,mem_eeprom_base -0x65c6 028114 iadd regb ,pdata -0x65c7 028115 store 1 ,mem_addr_mi -0x65c8 028116 branch iicd_read_eep_size_2k -: 028118 iicd_read_eep_size_2k_lcadcode: -0x65c9 028119 fetch 2 ,mem_addr_mi -0x65ca 028120 byteswap pdata ,pdata -0x65cb 028121 store 1 ,mem_addr_mi -: 028126 iicd_read_eep_size_2k: -0x65cc 028127 setarg 3 -0x65cd 028128 hstore 2 ,core_iicd_txlen -0x65ce 028129 jam 0xa0 ,mem_iicd_tbuf -0x65cf 028130 jam 0xa1 ,mem_iicd_tbuf + 2 -0x65d0 028131 branch iicd_read_eep_common -: 028137 iicd_write_protect_eep_data: -0x65d1 028138 storet 2 ,mem_temp -0x65d2 028139 call iicd_eeprom_write_enable -0x65d3 028140 fetcht 2 ,mem_temp -0x65d4 028141 call iicd_write_eep_data -0x65d5 028142 branch iicd_eeprom_write_disable -: 028144 iicd_eeprom_write_enable: -0x65d6 028145 fetch 1 ,mem_eeprom_wp_gpio -0x65d7 028146 rtneq gpio_disable -0x65d8 028147 bbit0 6 ,iicd_wp_gpio_output_low -0x65d9 028148 setarg 150000 -0x65da 028149 call sleep -: 028150 iicd_wp_gpio_output_low: -0x65db 028151 fetcht 1 ,mem_eeprom_wp_gpio -0x65dc 028152 branch gpio_out_active -: 028154 iicd_eeprom_write_disable: -0x65dd 028155 fetcht 1 ,mem_eeprom_wp_gpio -0x65de 028156 branch gpio_out_inactive -: 028161 iicd_read_eep_data: -0x65df 028162 bpatchx patch32_0 ,mem_patch32 -0x65e0 028163 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k -0x65e1 028164 fetch 2 ,mem_eeprom_base -0x65e2 028165 iadd regb ,pdata -0x65e3 028166 byteswap pdata ,pdata -0x65e4 028167 store 2 ,mem_addr_mi -: 028170 iicd_read_eep: -0x65e5 028171 bpatchx patch32_1 ,mem_patch32 -0x65e6 028172 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode -0x65e7 028173 setarg 4 -0x65e8 028174 hstore 2 ,core_iicd_txlen -0x65e9 028175 jam 0xa0 ,mem_iicd_tbuf -0x65ea 028176 jam 0xa1 ,mem_iicd_tbuf + 3 -: 028177 iicd_read_eep_common: -0x65eb 028178 setarg mem_iicd_tbuf -0x65ec 028179 hstore 2 ,core_iicd_txaddr -0x65ed 028180 hstoret 2 ,core_iicd_rxlen -0x65ee 028181 deposit rega -0x65ef 028182 hstore 2 ,core_iicd_rxaddr -0x65f0 028183 setarg 2 -0x65f1 028184 isolate0 15 ,rega -0x65f2 028185 setflag true ,0 ,pdata -0x65f3 028186 hstore 1 ,core_iicd_ctrl -0x65f4 028187 jam iicd_start ,core_misc_ctrl -0x65f5 028188 arg iicd_done ,queue -0x65f6 028189 call decrypt_code -0x65f7 028190 call wait_iicd_done -0x65f8 028191 isolate1 iicd_crcok ,pdata -0x65f9 028192 call set_ucode_status -0x65fa 028193 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k -0x65fb 028194 fetch 2 ,mem_addr_mi -0x65fc 028195 byteswap pdata ,pdata -0x65fd 028196 iadd temp ,pdata -0x65fe 028197 byteswap pdata ,pdata -0x65ff 028198 store 2 ,mem_addr_mi -0x6600 028199 rtn -: 028201 iicd_read_eep_load_code_size_2k: -0x6601 028202 fetch 1 ,mem_addr_mi -0x6602 028203 iadd temp ,pdata -0x6603 028204 byteswap pdata ,pdata -0x6604 028205 store 2 ,mem_addr_mi -0x6605 028206 rtn -: 028212 iicd_write_eep_data: -0x6606 028213 fetch 2 ,mem_eeprom_base -0x6607 028214 iadd regb ,pdata -: 028217 iicd_write_ota_data: -0x6608 028218 store 2 ,mem_pdatatemp -0x6609 028219 bpatchx patch32_2 ,mem_patch32 -0x660a 028220 storet 2 ,mem_temp -0x660b 028221 copy rega ,pdata -0x660c 028222 store 2 ,mem_contr -: 028223 iicd_write_eep_loop: -0x660d 028224 call iicd_eep_transparency -0x660e 028226 fetcht 2 ,mem_regb -0x660f 028227 fetch 2 ,mem_contr -0x6610 028228 copy pdata ,rega -0x6611 028229 fetch 2 ,mem_pdatatemp -0x6612 028231 call iicd_write_eep -0x6613 028233 fetch 2 ,mem_regb -0x6614 028234 fetcht 2 ,mem_contr -0x6615 028235 iadd temp ,temp -0x6616 028236 storet 2 ,mem_contr -0x6617 028237 fetcht 2 ,mem_pdatatemp -0x6618 028238 iadd temp ,temp -0x6619 028239 storet 2 ,mem_pdatatemp -0x661a 028240 fetch 2 ,mem_temp -0x661b 028241 nbranch iicd_write_eep_loop ,blank -0x661c 028242 rtn -: 028250 iicd_eep_transparency: -0x661d 028251 bpatchx patch32_3 ,mem_patch32 -0x661e 028252 fetch 1 ,mem_eeprom_block_size -0x661f 028253 increase -1 ,pdata -0x6620 028254 fetcht 2 ,mem_pdatatemp -0x6621 028255 ior temp ,pdata -0x6622 028256 increase 1 ,pdata -0x6623 028257 store 3 ,mem_regc -0x6624 028259 fetch 2 ,mem_temp -0x6625 028260 iadd temp ,pdata -0x6626 028262 fetcht 3 ,mem_regc -0x6627 028263 isub temp ,pdata -0x6628 028264 nbranch iicd_eep_deal_short_packet ,positive -0x6629 028265 store 2 ,mem_temp -0x662a 028266 fetch 3 ,mem_regc -0x662b 028267 fetcht 2 ,mem_pdatatemp -0x662c 028268 isub temp ,pdata -0x662d 028269 store 2 ,mem_regb -0x662e 028270 rtn -: 028271 iicd_eep_deal_short_packet: -0x662f 028272 fetch 2 ,mem_temp -0x6630 028273 store 2 ,mem_regb -0x6631 028274 setarg 0 -0x6632 028275 store 2 ,mem_temp -0x6633 028276 rtn -: 028278 iicd_write_eep_size_2k: -0x6634 028279 increase 2 ,temp -0x6635 028280 hstoret 2 ,core_iicd_txlen -0x6636 028281 increase -2 ,rega -0x6637 028282 ifetcht 3 ,rega -0x6638 028283 copy temp ,regb -0x6639 028284 arg 0xa0 ,temp -0x663a 028285 istoret 1 ,rega -0x663b 028287 istore 1 ,contw -0x663c 028288 branch iicd_write_eep_common -: 028291 iicd_write_eep: -0x663d 028292 copy pdata ,regb -0x663e 028293 bpatchx patch32_4 ,mem_patch32 -0x663f 028294 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k -0x6640 028295 copy regb ,pdata -0x6641 028296 increase 3 ,temp -0x6642 028297 hstoret 2 ,core_iicd_txlen -0x6643 028298 increase -3 ,rega -0x6644 028299 ifetcht 3 ,rega -0x6645 028300 copy temp ,regb -0x6646 028301 arg 0xa0 ,temp -0x6647 028302 istoret 1 ,rega -0x6648 028303 byteswap pdata ,pdata -0x6649 028304 istore 2 ,contw -: 028305 iicd_write_eep_common: -0x664a 028306 deposit rega -0x664b 028307 hstore 2 ,core_iicd_txaddr -0x664c 028308 setarg 0 -0x664d 028309 hstore 2 ,core_iicd_rxlen -0x664e 028310 jam 1 ,core_iicd_ctrl -0x664f 028311 jam iicd_start ,core_misc_ctrl -0x6650 028312 call wait_iicd_done -0x6651 028313 copy regb ,pdata -0x6652 028314 istore 3 ,rega -: 028316 iic_check_eeprom_standby: -0x6653 028317 bpatchx patch32_5 ,mem_patch32 -0x6654 028318 jam 0 ,mem_iicd_tbuf + 3 -: 028319 iic_check_eeprom_standby_wait: -0x6655 028320 setarg 1 -0x6656 028321 hstore 2 ,core_iicd_txlen -0x6657 028322 jam 0xa0 ,mem_iicd_tbuf -0x6658 028323 setarg mem_iicd_tbuf -0x6659 028324 hstore 2 ,core_iicd_txaddr -0x665a 028325 setarg 0 -0x665b 028326 hstore 2 ,core_iicd_rxlen -0x665c 028327 hstore 2 ,core_iicd_rxaddr -0x665d 028328 setarg 3 -0x665e 028329 hstore 1 ,core_iicd_ctrl -0x665f 028330 jam iicd_start ,core_misc_ctrl -0x6660 028331 call wait_iicd_done -0x6661 028332 hfetch 1 ,core_dma_status -0x6662 028333 rtnbit0 iicd_ack -0x6663 028334 nop 1500 -0x6664 028335 fetch 1 ,mem_iicd_tbuf + 3 -0x6665 028336 increase 1 ,pdata -0x6666 028337 store 1 ,mem_iicd_tbuf + 3 -0x6667 028338 sub pdata ,40 ,null -0x6668 028339 nrtn positive -0x6669 028340 branch iic_check_eeprom_standby_wait -: 028344 otp_enable_chgpump: -0x666a 028345 jam 0x70 ,rfen_chgpump -0x666b 028346 nop param_chgpump_delay -0x666c 028347 rtn -: 028349 otp_disable_chgpump: -0x666d 028350 jam 0x30 ,rfen_chgpump -0x666e 028351 rtn -: 028353 otp_set_addr: -0x666f 028354 lshift3 pdata ,pdata -0x6670 028355 hstore 2 ,core_otp_addr -0x6671 028356 jam 0 ,core_otpd_ctrl -0x6672 028357 rtn -: 028360 otp_write: -0x6673 028361 call otp_set_addr -0x6674 028362 call otp_ce -: 028363 otp_program: -0x6675 028364 ifetcht 1 ,rega -0x6676 028365 increase 1 ,rega -0x6677 028366 force 0 ,queue -: 028367 otp_program_bit: -0x6678 028368 qisolate0 temp -0x6679 028369 branch otp_skip_0 ,true -0x667a 028370 hfetch 1 ,core_otp_din -0x667b 028371 set1 6 ,pdata -0x667c 028372 set1 7 ,pdata -0x667d 028373 hstore 1 ,core_otp_din -0x667e 028374 jam 0x02 ,core_otp_ctrl -0x667f 028375 jam 0x82 ,core_otp_ctrl -0x6680 028376 set0 7 ,pdata -0x6681 028377 hstore 1 ,core_otp_din -0x6682 028378 jam 0x8a ,core_otp_ctrl -0x6683 028379 nop 11 -0x6684 028380 jam 0xca ,core_otp_ctrl -0x6685 028381 nop 33 -0x6686 028382 jam 0x4a ,core_otp_ctrl -0x6687 028383 nop 44 -0x6688 028384 jam 0xca ,core_otp_ctrl -0x6689 028385 nop 22 -0x668a 028386 jam 0x8a ,core_otp_ctrl -0x668b 028387 nop 33 -0x668c 028388 jam 0x82 ,core_otp_ctrl -0x668d 028389 nop 1 -0x668e 028390 jam 0x92 ,core_otp_ctrl -0x668f 028391 nop 10 -0x6690 028392 jam 0xb2 ,core_otp_ctrl -0x6691 028393 hfetch 1 ,core_otp_rdata -0x6692 028394 jam 0x92 ,core_otp_ctrl -0x6693 028395 nop 1 -0x6694 028396 jam 0x82 ,core_otp_ctrl -0x6695 028397 qisolate0 pdata -0x6696 028398 branch otp_program_bit ,true -: 028399 otp_skip_0: -0x6697 028400 hfetch 2 ,core_otp_addr -0x6698 028401 increase 1 ,pdata -0x6699 028402 hstore 2 ,core_otp_addr -0x669a 028403 increase 1 ,queue -0x669b 028404 compare 8 ,queue ,0xf -0x669c 028405 nbranch otp_program_bit ,true -0x669d 028406 loop otp_program -0x669e 028407 jam 0x83 ,core_otp_ctrl -0x669f 028408 rtn -: 028410 otp_ce: -0x66a0 028411 jam 0x82 ,core_otp_ctrl -0x66a1 028412 nop 12 -0x66a2 028413 jam 0x80 ,core_otp_ctrl -0x66a3 028414 jam 0x82 ,core_otp_ctrl -0x66a4 028415 nop 150 -0x66a5 028416 rtn -: 028419 otpd_read_init: -0x66a6 028420 call otp_ce -0x66a7 028421 jam 0xa2 ,core_otp_ctrl -0x66a8 028422 deposit rega -0x66a9 028423 hstore 2 ,core_otpd_addr -0x66aa 028424 set1 11 ,temp -0x66ab 028425 isolate0 15 ,pdata -0x66ac 028426 setflag true ,15 ,temp -0x66ad 028427 hstoret 2 ,core_otpd_len -0x66ae 028428 jam otpd_start ,core_misc_ctrl -0x66af 028429 rtn -: 028431 otpd_wait_end: -0x66b0 028432 hfetch 1 ,core_dma_status -0x66b1 028433 bbit0 otpd_done ,otpd_wait_end -0x66b2 028434 rtn -: 028437 otpd_read_data: -0x66b3 028438 call otp_set_addr -0x66b4 028439 call otpd_read_init -0x66b5 028440 call otpd_wait_end -0x66b6 028441 jam 0x83 ,core_otp_ctrl -0x66b7 028442 rtn -: 028447 otpd_read_code: -0x66b8 028448 hfetch 2 ,core_current_otp_addr -0x66b9 028449 hstore 2 ,core_otp_addr -0x66ba 028450 call otpd_read_init -0x66bb 028451 arg otpd_done ,queue -0x66bc 028452 call decrypt_code -0x66bd 028453 call otpd_wait_end -0x66be 028454 isolate1 otpd_crcok ,pdata -0x66bf 028455 call set_ucode_status -0x66c0 028456 jam 0x83 ,core_otp_ctrl -0x66c1 028457 rtn -: 028460 uartd_prepare_tx: -0x66c2 028461 hfetch 2 ,core_uart_twptr -0x66c3 028462 iforce contwu -0x66c4 028463 rtn -: 028465 uartd_send: -0x66c5 028466 deposit contwu -0x66c6 028467 hstore 2 ,core_uart_twptr -0x66c7 028468 rtn -: 028470 uartd_rxdone: -0x66c8 028471 deposit contru -0x66c9 028472 hstore 2 ,core_uart_rrptr -0x66ca 028473 rtn -: 028475 uartd_prepare_rx: -0x66cb 028476 hfetch 2 ,core_uart_rrptr -0x66cc 028477 copy pdata ,contru -0x66cd 028478 rtn -: 028480 uart_set_baud_by_mem: -0x66ce 028481 fetch uart_baud_len ,mem_baud -0x66cf 028482 hstore uart_baud_len ,core_uart_baud -0x66d0 028483 rtn -: 028485 uart_copy_tx_bytes_fast: -0x66d1 028486 deposit loopcnt -0x66d2 028487 rtn blank -: 028488 uart_copy_tx_bytes_fast_loop: -0x66d3 028489 increase -8 ,loopcnt -0x66d4 028490 call uart_tx_8_bytes ,positive -0x66d5 028491 rtn zero -0x66d6 028492 branch uart_copy_tx_bytes_fast_loop ,positive -0x66d7 028493 increase 8 ,loopcnt -: 028494 uart_copy_tx_bytes_fast_loop_four: -0x66d8 028495 increase -4 ,loopcnt -0x66d9 028496 call uart_tx_4_bytes ,positive -0x66da 028497 rtn zero -0x66db 028498 branch uart_copy_tx_bytes_fast_loop_four ,positive -0x66dc 028499 increase 4 ,loopcnt -0x66dd 028500 branch uart_copy_tx_bytes -: 028502 uart_tx_8_bytes: -0x66de 028503 ifetch 8 ,contr -0x66df 028504 istore 8 ,contwu -0x66e0 028505 rtn -: 028507 uart_tx_4_bytes: -0x66e1 028508 ifetch 4 ,contr -0x66e2 028509 istore 4 ,contwu -0x66e3 028510 rtn -: 028512 uart_copy_tx_bytes: -0x66e4 028513 deposit loopcnt -0x66e5 028514 rtn blank -: 028515 uart_copy_tx_bytes_loop: -0x66e6 028516 ifetch 1 ,contr -0x66e7 028517 istore 1 ,contwu -0x66e8 028518 loop uart_copy_tx_bytes_loop -0x66e9 028519 rtn -: 028521 uart_copy_rx_bytes_fast: -0x66ea 028522 deposit loopcnt -0x66eb 028523 rtn blank -: 028524 uart_copy_rx_bytes_fast_loop: -0x66ec 028525 increase -8 ,loopcnt -0x66ed 028526 call uart_rx_8_bytes ,positive -0x66ee 028527 rtn zero -0x66ef 028528 branch uart_copy_rx_bytes_fast_loop ,positive -0x66f0 028529 increase 8 ,loopcnt -: 028530 uart_copy_rx_bytes_fast_loop_four: -0x66f1 028531 increase -4 ,loopcnt -0x66f2 028532 call uart_rx_4_bytes ,positive -0x66f3 028533 rtn zero -0x66f4 028534 branch uart_copy_rx_bytes_fast_loop_four ,positive -0x66f5 028535 increase 4 ,loopcnt -0x66f6 028536 branch uart_copy_rx_bytes -: 028538 uart_rx_8_bytes: -0x66f7 028539 ifetch 8 ,contru -0x66f8 028540 istore 8 ,contw -0x66f9 028541 rtn -: 028543 uart_rx_4_bytes: -0x66fa 028544 ifetch 4 ,contru -0x66fb 028545 istore 4 ,contw -0x66fc 028546 rtn -: 028549 uart_copy_rx_bytes: -0x66fd 028550 deposit loopcnt -0x66fe 028551 rtn blank -: 028552 uart_copy_rx_bytes_loop: -0x66ff 028553 ifetch 1 ,contru -0x6700 028554 istore 1 ,contw -0x6701 028555 loop uart_copy_rx_bytes_loop -0x6702 028556 rtn -: 028559 uart_copy_rx2tx: -0x6703 028560 deposit loopcnt -0x6704 028561 rtn blank -: 028562 uart_copy_rx2tx_loop: -0x6705 028563 ifetch 1 ,contru -0x6706 028564 istore 1 ,contwu -0x6707 028565 loop uart_copy_rx2tx_loop -0x6708 028566 rtn -: 028571 app_store_nvram_event: -0x6709 028572 jam bt_evt_store_nvram ,mem_fifo_temp -0x670a 028573 branch ui_ipc_send_event -: 028575 check_51cmd_store_reconn_info: -: 028576 check_51cmd_update_device_record: -0x670b 028577 bpatchx patch32_6 ,mem_patch32 -0x670c 028578 fetch 1 ,mem_nv_data_number -0x670d 028579 rtn blank -0x670e 028580 call check_nvram -0x670f 028581 call init_device_list ,zero -0x6710 028582 call nvram_find_addr_from_bd_list -: 028583 write_device_record: -0x6711 028584 fetch 1 ,mem_nv_data_number -0x6712 028585 icopy regc -0x6713 028586 fetcht 2 ,mem_nv_data_ptr -0x6714 028587 storet 2 ,mem_list_item_ptr -: 028588 write_device_loop_find: -0x6715 028589 copy regc ,pdata -0x6716 028590 branch app_store_nvram_event ,blank -0x6717 028591 increase -1 ,regc -0x6718 028592 copy temp ,rega -0x6719 028593 ifetch 1 ,rega -0x671a 028594 fetcht 1 ,mem_select_list_item -0x671b 028595 isub temp ,null -0x671c 028596 call set_index_finded_device ,zero -0x671d 028597 branch write_device_loop_find0 ,positive -0x671e 028598 ifetch 1 ,rega -0x671f 028599 increase 1 ,pdata -0x6720 028600 istore 1 ,rega -: 028601 write_device_loop_find0: -0x6721 028602 fetcht 2 ,mem_list_item_ptr -0x6722 028603 increase nv_data_len ,temp -0x6723 028604 storet 2 ,mem_list_item_ptr -0x6724 028605 branch write_device_loop_find -: 028607 set_index_finded_device: -0x6725 028608 setarg 0 -0x6726 028609 istore 1 ,rega -0x6727 028610 fetch 1 ,mem_temp_reconn_record -0x6728 028611 istore 1 ,contw -0x6729 028612 bne rec_3_mode ,set_index_finded_device_ble_mode -0x672a 028613 arg mem_link_key ,regb -: 028614 set_index_find_device_master_addr: -0x672b 028615 ifetch 6 ,contr -0x672c 028616 istore 8 ,contw -0x672d 028617 setarg 0 -0x672e 028618 istore 8 ,contw -0x672f 028619 copy regb ,contr -: 028620 store_rec_data_common: -0x6730 028621 call memcpy16 -0x6731 028622 force 1 ,null -0x6732 028623 rtn -: 028625 set_index_finded_device_ble_mode: -0x6733 028626 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk -0x6734 028627 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv -0x6735 028628 arg mem_le_ltk ,regb -0x6736 028629 branch set_index_find_device_master_addr -: 028631 set_index_finded_device_irk: -0x6737 028632 arg mem_le_irk ,contr -0x6738 028633 call memcpy16 -: 028634 store_ble_rec_data_common: -0x6739 028635 arg mem_le_ltk ,contr -0x673a 028636 branch store_rec_data_common -: 028638 set_index_finded_device_ediv: -0x673b 028639 arg mem_le_rand ,contr -0x673c 028640 call memcpy16 -0x673d 028641 branch store_ble_rec_data_common -: 028644 nvram_find_addr_from_bd_list: -0x673e 028645 call disable_user -0x673f 028646 fetch 1 ,mem_nv_data_number -0x6740 028647 rtn blank -0x6741 028648 fetch 2 ,mem_ui_state_map -0x6742 028649 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode -: 028650 find_addr_from_bd_list_ble_mode: -0x6743 028651 bpatchx patch32_7 ,mem_patch32 -0x6744 028652 fetch 1 ,mem_le_conn_peer_addr_type -0x6745 028653 beq master_public_addr ,find_addr_from_bd_list_static_addr -0x6746 028654 fetch 1 ,mem_le_plap + 5 -0x6747 028655 compare 0xc0 ,pdata ,0xc0 -0x6748 028656 branch find_addr_from_bd_list_static_addr ,true -0x6749 028657 compare 0x40 ,pdata ,0xc0 -0x674a 028658 branch find_addr_from_bd_list_random_addr ,true -0x674b 028659 compare 0x00 ,pdata ,0xc0 -0x674c 028660 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true -: 028661 find_addr_from_bd_list_static_addr: -0x674d 028662 jam rec_4_mode_static_address ,mem_temp_reconn_record -0x674e 028663 fetch 6 ,mem_le_plap -0x674f 028664 branch find_addr_from_bd_list_common -: 028666 find_addr_from_bd_list_random_non_resolvable_private_address: -0x6750 028667 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record -0x6751 028668 branch find_addr_from_bd_list_common -: 028671 find_addr_from_bd_list_random_addr: -0x6752 028672 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record -0x6753 028673 branch find_addr_from_bd_list_common -: 028676 find_addr_from_bd_list_spp_mode: -0x6754 028677 bpatchx patch33_0 ,mem_patch33 -0x6755 028678 jam rec_3_mode ,mem_temp_reconn_record -0x6756 028679 fetch 6 ,mem_plap -: 028680 find_addr_from_bd_list_common: -0x6757 028681 store 6 ,mem_temp_reconn_record + 1 -0x6758 028682 fetch 2 ,mem_nv_data_ptr -0x6759 028683 ifetcht 1 ,pdata -0x675a 028684 pincrease 1 -0x675b 028685 store 2 ,mem_list_item_ptr -0x675c 028686 storet 1 ,mem_select_list_item -0x675d 028687 fetch 1 ,mem_nv_data_number -0x675e 028688 icopy regc -: 028689 nvram_find_addr_from_list: -0x675f 028690 fetch 2 ,mem_list_item_ptr -0x6760 028691 copy pdata ,rega -0x6761 028692 call nvram_find_addr_from_list_compare -0x6762 028693 rtn user -0x6763 028694 fetcht 2 ,mem_list_item_ptr -0x6764 028695 increase nv_data_len ,temp -0x6765 028696 storet 2 ,mem_list_item_ptr -0x6766 028697 increase -1 ,temp -0x6767 028698 ifetch 1 ,temp -0x6768 028699 store 1 ,mem_select_list_item -0x6769 028700 increase -1 ,regc -0x676a 028701 nbranch nvram_find_addr_from_list ,zero -0x676b 028702 fetch 1 ,mem_nv_data_number -0x676c 028703 pincrease decreased_one -0x676d 028704 store 1 ,mem_select_list_item -0x676e 028705 rtn -: 028706 nvram_find_addr_from_list_compare: -0x676f 028707 fetch 1 ,mem_temp_reconn_record -0x6770 028708 bne rec_3_mode ,find_addr_from_list_compare_ble_mode -: 028709 find_master_addr_from_list_compare: -0x6771 028710 arg mem_temp_reconn_record ,regb -0x6772 028711 arg 7 ,loopcnt -0x6773 028712 call string_compare -0x6774 028713 branch enable_user ,zero -0x6775 028714 rtn -: 028716 find_addr_from_list_compare_ble_mode: -0x6776 028717 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare -0x6777 028718 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare -0x6778 028719 branch find_master_addr_from_list_compare -: 028721 find_irk_form_list_compare: -0x6779 028722 ifetcht 1 ,rega -0x677a 028723 isub temp ,null -0x677b 028724 nrtn zero -0x677c 028725 arg mem_le_prand ,contw -0x677d 028726 arg 16 ,loopcnt -0x677e 028727 call clear_mem -0x677f 028728 fetch 3 ,mem_le_plap + 3 -0x6780 028729 store 3 ,mem_le_prand -0x6781 028730 call genernate_master_macaddress -0x6782 028731 fetch 2 ,mem_le_aes_128 + 13 -0x6783 028732 byteswap pdata ,pdata -0x6784 028733 lshift8 pdata ,temp -0x6785 028734 ifetch 1 ,contr -0x6786 028735 iadd temp ,pdata -0x6787 028736 fetcht 3 ,mem_le_plap -0x6788 028737 isub temp ,null -0x6789 028738 branch enable_user ,zero -0x678a 028739 rtn -: 028742 genernate_master_macaddress: -0x678b 028743 arg mem_le_prand ,contr -0x678c 028744 call load_data128 -0x678d 028746 ifetch 1 ,rega -0x678e 028747 call load_regext -0x678f 028748 force 0x38 ,aes_ctrl -0x6790 028749 force 0x0 ,aes_ctrl -0x6791 028750 call wait_aes -0x6792 028751 arg mem_le_aes_128 ,contw -0x6793 028752 branch store_aes_result -: 028754 find_ediv_form_list_compare: -0x6794 028755 ifetcht 1 ,rega -0x6795 028756 isub temp ,null -0x6796 028757 nrtn zero -0x6797 028758 copy contr ,rega -0x6798 028759 add contr ,8 ,regc -0x6799 028760 arg mem_le_rand ,regb -0x679a 028761 arg 8 ,loopcnt -0x679b 028762 call string_compare -0x679c 028763 branch enable_user ,zero -0x679d 028764 copy regc ,rega -0x679e 028765 arg mem_le_irk ,regb -0x679f 028766 arg 8 ,loopcnt -0x67a0 028767 call string_compare -0x67a1 028768 branch enable_user ,zero -0x67a2 028769 rtn -: 028771 check_nvram: -0x67a3 028772 fetch 2 ,mem_nv_data_ptr -0x67a4 028773 ifetcht 1 ,pdata -0x67a5 028774 pincrease nv_data_len -0x67a6 028775 ifetch 1 ,pdata -0x67a7 028776 isub temp ,null -0x67a8 028777 rtn -: 028779 init_device_list: -0x67a9 028780 fetch 1 ,mem_nv_data_number -0x67aa 028781 icopy loopcnt -0x67ab 028782 fetcht 2 ,mem_nv_data_ptr -0x67ac 028783 setarg 0 -: 028784 init_device_list_loop: -0x67ad 028785 istore 1 ,temp -0x67ae 028786 increase nv_data_len ,temp -0x67af 028787 pincrease 1 -0x67b0 028788 loop init_device_list_loop -0x67b1 028789 rtn -: 028791 load_device_list: -0x67b2 028792 bpatchx patch33_1 ,mem_patch33 -0x67b3 028793 call nvram_find_addr_from_bd_list -0x67b4 028794 fetch 1 ,mem_state -0x67b5 028795 setflag user ,state_combkey ,pdata -0x67b6 028796 store 1 ,mem_state -0x67b7 028797 nbranch clear_key_exists ,user -0x67b8 028798 add rega ,10 ,contr -0x67b9 028800 arg mem_link_key ,contw -0x67ba 028801 call memcpy16 -0x67bb 028802 branch check_link_key_load -: 028803 clear_key_exists: -0x67bc 028804 jam 0 ,mem_link_key_exists -0x67bd 028805 rtn -: 028807 load_device_list_mode_4: -0x67be 028808 fetch 9 ,mem_le_ediv -0x67bf 028809 branch clear_ltk_exists ,blank -0x67c0 028810 call nvram_find_addr_from_bd_list -0x67c1 028811 nbranch clear_ltk_exists ,user -0x67c2 028812 fetch 2 ,mem_list_item_ptr -0x67c3 028813 add pdata ,1 ,contr -0x67c4 028814 arg mem_le_irk ,contw -0x67c5 028815 call memcpy16 -0x67c6 028816 arg mem_le_ltk ,contw -0x67c7 028817 call memcpy16 -0x67c8 028818 jam 1 ,mem_ltk_exists -0x67c9 028819 rtn -: 028821 clear_ltk_exists: -0x67ca 028822 jam 0 ,mem_ltk_exists -0x67cb 028823 rtn -: 028826 eeprom_store_le_reconn_info: -0x67cc 028827 fetch 6 ,mem_le_plap -0x67cd 028828 store 6 ,mem_temp_lap -0x67ce 028829 jam rec_4_mode ,mem_record_bt_mode -0x67cf 028830 branch eeprom_store_reconn_info -: 028831 eeprom_store_bd_reconn_info: -0x67d0 028832 fetch 6 ,mem_plap -0x67d1 028833 store 6 ,mem_temp_lap -0x67d2 028834 jam rec_3_mode ,mem_record_bt_mode -: 028835 eeprom_store_reconn_info: -0x67d3 028836 fetch 1 ,mem_device_option -0x67d4 028837 beq dvc_op_module ,check_51cmd_update_device_record -0x67d5 028838 bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr -0x67d6 028839 rtn -: 028842 check_link_key_load: -0x67d7 028843 fetch 8 ,mem_link_key -0x67d8 028844 fetcht 8 ,mem_link_key + 8 -0x67d9 028845 ior temp ,pdata -0x67da 028846 rtn blank -0x67db 028847 jam 1 ,mem_link_key_exists -0x67dc 028848 rtn -: 028855 gpio_set_wake_by_current_state: -0x67dd 028856 bpatchx patch33_2 ,mem_patch33 -0x67de 028857 set1 7 ,temp -0x67df 028858 call gpio_get_bit -0x67e0 028859 nsetflag true ,7 ,temp -: 028864 gpio_set_wake: -0x67e1 028865 bpatchx patch33_3 ,mem_patch33 -0x67e2 028866 sub temp ,ui_button_gpio_disable ,null -0x67e3 028867 rtn zero -0x67e4 028868 isolate0 7 ,temp -0x67e5 028869 and temp ,0x1f ,queue -0x67e6 028870 fetch 4 ,mem_gpio_wakeup_low -0x67e7 028871 qsetflag true ,pdata -0x67e8 028872 store 4 ,mem_gpio_wakeup_low -0x67e9 028873 fetch 4 ,mem_gpio_wakeup_high -0x67ea 028874 nqsetflag true ,pdata -0x67eb 028875 store 4 ,mem_gpio_wakeup_high -0x67ec 028876 rtn -: 028879 gpio_clr_wake: -0x67ed 028880 bpatchx patch33_4 ,mem_patch33 -0x67ee 028881 sub temp ,ui_button_gpio_disable ,null -0x67ef 028882 rtn zero -0x67f0 028883 isolate0 7 ,temp -0x67f1 028884 and temp ,0x1f ,queue -0x67f2 028885 fetch 4 ,mem_gpio_wakeup_low -0x67f3 028886 qset0 pdata -0x67f4 028887 store 4 ,mem_gpio_wakeup_low -0x67f5 028888 fetch 4 ,mem_gpio_wakeup_high -0x67f6 028889 qset0 pdata -0x67f7 028890 store 4 ,mem_gpio_wakeup_high -0x67f8 028891 rtn -: 028894 gpio_config_input_nowake: -0x67f9 028895 call gpio_clr_wake -0x67fa 028896 branch gpio_config_input_without_wake -: 028899 gpio_config_input: -0x67fb 028900 sub temp ,ui_button_gpio_disable ,null -0x67fc 028901 rtn zero -0x67fd 028902 ncall gpio_set_wake ,wake -: 028904 gpio_config_input_without_wake: -0x67fe 028905 arg core_gpio_pd0 ,contw -0x67ff 028906 call gpio_set_bit -0x6800 028907 setflip gpio_active_bit ,temp -0x6801 028908 arg core_gpio_pu0 ,contw -0x6802 028909 call gpio_set_bit -0x6803 028910 set0 gpio_active_bit ,temp -0x6804 028911 arg core_gpio_oe0 ,contw -0x6805 028912 branch gpio_set_bit -: 028915 gpio_set_high_impedance: -0x6806 028916 arg core_gpio_pd0 ,contw -0x6807 028917 call gpio_set_bit -0x6808 028918 set0 gpio_active_bit ,temp -0x6809 028919 arg core_gpio_pu0 ,contw -0x680a 028920 call gpio_set_bit -0x680b 028921 set0 gpio_active_bit ,temp -0x680c 028922 arg core_gpio_oe0 ,contw -0x680d 028923 branch gpio_set_bit -: 028927 gpio_config_output: -0x680e 028928 sub temp ,ui_button_gpio_disable ,null -0x680f 028929 rtn zero -0x6810 028930 setflip gpio_active_bit ,temp -0x6811 028931 call gpio_out -: 028932 gpio_config_output0: -0x6812 028933 set1 gpio_active_bit ,temp -0x6813 028934 arg core_gpio_oe0 ,contw -0x6814 028935 branch gpio_set_bit -: 028937 gpio_common: -0x6815 028938 and temp ,0x07 ,queue -0x6816 028939 rshift3 temp ,pdata -0x6817 028940 and_into 3 ,pdata -0x6818 028941 iadd contw ,contw -0x6819 028942 ifetch 1 ,contw -0x681a 028943 rtn -: 028945 gpio_check_active: -0x681b 028946 arg core_gpio_out0 ,contw -0x681c 028947 branch get_bit_common -: 028951 gpio_get_bit: -0x681d 028952 arg core_gpio_in ,contw -: 028953 get_bit_common: -0x681e 028954 call gpio_common -0x681f 028955 isolate1 gpio_active_bit ,temp -0x6820 028956 branch gpio_get_bit_reverse ,true -0x6821 028957 qisolate0 pdata -0x6822 028958 rtn -: 028959 gpio_get_bit_reverse: -0x6823 028960 qisolate1 pdata -0x6824 028961 rtn -: 028963 gpio_out_inactive: -0x6825 028964 sub temp ,ui_button_gpio_disable ,null -0x6826 028965 rtn zero -0x6827 028966 isolate1 7 ,null -0x6828 028967 branch gpio_out_flag -: 028969 gpio_out_active: -0x6829 028970 sub temp ,ui_button_gpio_disable ,null -0x682a 028971 rtn zero -0x682b 028972 isolate0 7 ,null -: 028975 gpio_out_flag: -0x682c 028976 setarg 0 -0x682d 028977 nsetflag true ,gpio_active_bit ,pdata -0x682e 028978 ixor temp ,temp -: 028981 gpio_out: -0x682f 028982 arg core_gpio_out0 ,contw -: 028985 gpio_set_bit: -0x6830 028986 call gpio_common -0x6831 028987 isolate1 gpio_active_bit ,temp -0x6832 028988 qsetflag true ,pdata -0x6833 028989 istore 1 ,contw -0x6834 028990 rtn -: 028992 gpio_set_before_lpm_common: -0x6835 028993 arg -1 ,rega -0x6836 028994 hfetch 1 ,core_gpio_sel1 -0x6837 028995 compare 0x02 ,pdata ,0x03 -0x6838 028996 call neglact4_from_23_pin ,true -0x6839 028998 compare 0x01 ,pdata ,0x03 -0x683a 028999 call neglact2_form_25_pin ,true -0x683b 029001 compare 0x03 ,pdata ,0x03 -0x683c 029002 call neglact2_form_25_pin ,true -0x683d 029004 isolate1 2 ,pdata -0x683e 029005 call neglect2_from_6_pin ,true -0x683f 029007 isolate1 3 ,pdata -0x6840 029008 call neglect4_from_9_pin ,true -0x6841 029010 isolate1 4 ,pdata -0x6842 029011 call neglact2_form_30_pin ,true -0x6843 029013 isolate1 6 ,pdata -0x6844 029014 nsetflag true ,04 ,rega -0x6845 029016 isolate1 7 ,pdata -0x6846 029017 nsetflag true ,05 ,rega -0x6847 029019 hfetch 1 ,core_gpio_sel2 -0x6848 029020 isolate1 0 ,pdata -0x6849 029021 nsetflag true ,27 ,rega -0x684a 029022 isolate1 1 ,pdata -0x684b 029023 nsetflag true ,28 ,rega -0x684c 029024 isolate1 2 ,pdata -0x684d 029025 nsetflag true ,03 ,rega -0x684e 029026 isolate1 3 ,pdata -0x684f 029027 nsetflag true ,08 ,rega -0x6850 029028 isolate1 4 ,pdata -0x6851 029029 nsetflag true ,20 ,rega -0x6852 029030 isolate1 5 ,pdata -0x6853 029031 nsetflag true ,21 ,rega -0x6854 029032 isolate1 6 ,pdata -0x6855 029033 nsetflag true ,22 ,rega -0x6856 029034 isolate1 7 ,pdata -0x6857 029035 nsetflag true ,23 ,rega -0x6858 029037 hfetch 1 ,core_gpio_sel -0x6859 029038 isolate1 0 ,pdata -0x685a 029039 nsetflag true ,05 ,rega -0x685b 029040 isolate1 1 ,pdata -0x685c 029041 nsetflag true ,06 ,rega -0x685d 029042 isolate1 2 ,pdata -0x685e 029043 nsetflag true ,07 ,rega -0x685f 029044 isolate1 3 ,pdata -0x6860 029045 nsetflag true ,18 ,rega -0x6861 029046 isolate1 4 ,pdata -0x6862 029047 nsetflag true ,19 ,rega -0x6863 029048 isolate1 5 ,pdata -0x6864 029049 nsetflag true ,20 ,rega -0x6865 029050 isolate1 6 ,pdata -0x6866 029051 nsetflag true ,21 ,rega -0x6867 029052 isolate1 7 ,pdata -0x6868 029053 nsetflag true ,22 ,rega -0x6869 029055 hfetch 1 ,core_uart_ctrl -0x686a 029056 isolate1 4 ,pdata -0x686b 029057 call neglact2_form_2_pin ,true -0x686c 029058 bpatchx patch33_5 ,mem_patch33 -0x686d 029060 hfetch 4 ,core_gpio_pu0 -0x686e 029061 hfetcht 4 ,core_gpio_pd0 -0x686f 029062 ior temp ,pdata -0x6870 029063 invert pdata ,pdata -0x6871 029064 iand rega ,pdata -0x6872 029066 hstore 4 ,core_gpio_oe0 -0x6873 029067 rtn -: 029070 neglect2_from_6_pin: -0x6874 029071 arg 6 ,queue -0x6875 029072 branch neglect_2_pin -: 029073 neglect4_from_9_pin: -0x6876 029074 arg 9 ,queue -0x6877 029075 branch neglact_4_pin -: 029076 neglact4_from_23_pin: -0x6878 029077 arg 23 ,queue -0x6879 029078 branch neglact_4_pin -: 029079 neglact2_form_25_pin: -0x687a 029080 arg 25 ,queue -0x687b 029081 branch neglect_2_pin -: 029082 neglact2_form_30_pin: -0x687c 029083 arg 30 ,queue -0x687d 029084 branch neglect_2_pin -: 029085 neglact2_form_2_pin: -0x687e 029086 arg 2 ,queue -0x687f 029087 branch neglect_2_pin -: 029088 neglact_1_pin: -0x6880 029089 arg 1 ,loopcnt -0x6881 029090 branch neglect_pin_loop -: 029091 neglact_4_pin: -0x6882 029092 arg 4 ,loopcnt -0x6883 029093 branch neglect_pin_loop -: 029094 neglect_2_pin: -0x6884 029095 arg 2 ,loopcnt -: 029096 neglect_pin_loop: -0x6885 029097 qset0 rega -0x6886 029098 increase 1 ,queue -0x6887 029099 loop neglect_pin_loop -0x6888 029100 rtn -: 029108 gpio_cfg_uart_tx_output: -0x6889 029109 call gpio_uart2gpio -0x688a 029110 arg uart_wakeup_tx ,temp -0x688b 029111 branch gpio_config_output -: 029113 gpio_pu_uart_tx: -0x688c 029114 call gpio_cfg_uart_tx_output -0x688d 029115 arg uart_wakeup_tx ,temp -0x688e 029116 branch gpio_out_inactive -: 029120 gpio_rx_config_input_with_pu: -0x688f 029121 call gpio_uart2gpio -0x6890 029122 hfetch 1 ,core_gpio_pu0 -0x6891 029123 set1 uart_wakeup_rx ,pdata -0x6892 029124 hstore 1 ,core_gpio_pu0 -0x6893 029125 arg uart_wakeup_rx ,temp -0x6894 029126 branch gpio_config_input -: 029128 gpio_uart2gpio: -0x6895 029129 hfetch 1 ,core_gpio_sel1 -0x6896 029130 and_into 0xfb ,pdata -0x6897 029131 hstore 1 ,core_gpio_sel1 -0x6898 029132 rtn -: 029134 gpio_check_uart_state: -0x6899 029135 hfetch 1 ,core_gpio_sel1 -0x689a 029136 isolate1 2 ,pdata -0x689b 029137 rtn -: 029139 load_chip_option: -0x689c 029140 call otp_enable_chgpump -0x689d 029141 setarg otp_chip_functions -0x689e 029142 arg mem_chip_functions ,rega -0x689f 029143 arg 0x02 ,temp -0x68a0 029144 call otpd_read_data -0x68a1 029145 branch otp_disable_chgpump -: 029148 load_adc_init: -0x68a2 029149 call otp_enable_chgpump -0x68a3 029150 setarg otp_adc_io_0_5v_addr -0x68a4 029151 arg mem_0_5_adc_io_data ,rega -0x68a5 029152 arg 14 ,temp -0x68a6 029153 call otpd_read_data -0x68a7 029154 branch otp_disable_chgpump -: 029158 adc_init_data: -0x68a8 029159 bpatchx patch33_6 ,mem_patch33 -0x68a9 029161 call load_adc_init -0x68aa 029163 fetch 1 ,mem_adc_config_flag -0x68ab 029164 beq adc_config_vinlpm ,adc_init_data_vinlpm -0x68ac 029165 beq adc_config_hvin ,adc_init_data_hvin -0x68ad 029166 beq adc_config_gpio ,adc_init_data_io -0x68ae 029167 rtn -: 029169 adc_init_data_vinlpm: -0x68af 029170 fetcht 2 ,mem_otp_adc_flag -0x68b0 029171 setarg otp_adc_flag -0x68b1 029172 isub temp ,null -0x68b2 029173 branch adc_check_data_vinlpm ,zero -0x68b3 029174 setarg 0x4dfa -0x68b4 029175 store 2 ,mem_3v_adc_vinlpm_data -0x68b5 029176 setarg 0x4894 -0x68b6 029177 store 2 ,mem_2v_adc_vinlpm_data -0x68b7 029178 branch set_vdd_reference_voltage_1v -: 029180 adc_check_data_vinlpm: -0x68b8 029181 fetch 2 ,mem_3v_adc_vinlpm_data -0x68b9 029182 nbranch adc_check_2v_vinlpm ,blank -0x68ba 029183 setarg 0x4dfa -0x68bb 029184 store 2 ,mem_3v_adc_vinlpm_data -: 029185 adc_check_2v_vinlpm: -0x68bc 029186 fetch 2 ,mem_2v_adc_vinlpm_data -0x68bd 029187 nbranch set_vdd_reference_voltage_1v ,blank -0x68be 029188 setarg 0x4894 -0x68bf 029189 store 2 ,mem_2v_adc_vinlpm_data -: 029190 set_vdd_reference_voltage_1v: -0x68c0 029191 setarg 100 -0x68c1 029192 store 2 ,mem_reference_voltage -0x68c2 029193 rtn -: 029195 adc_init_data_hvin: -0x68c3 029196 fetcht 2 ,mem_otp_adc_flag -0x68c4 029197 setarg otp_adc_flag -0x68c5 029198 isub temp ,null -0x68c6 029199 branch adc_check_data_hvin ,zero -0x68c7 029200 setarg 0x5932 -0x68c8 029201 store 2 ,mem_5v_adc_hvin_data -0x68c9 029202 setarg 0x4323 -0x68ca 029203 store 2 ,mem_1v_adc_hvin_data -0x68cb 029204 branch set_vdd_reference_voltage_4v -: 029206 adc_check_data_hvin: -0x68cc 029207 fetch 2 ,mem_5v_adc_hvin_data -0x68cd 029208 nbranch adc_check_1v_hvin ,blank -0x68ce 029209 setarg 0x5932 -0x68cf 029210 store 2 ,mem_5v_adc_hvin_data -: 029211 adc_check_1v_hvin: -0x68d0 029212 fetch 2 ,mem_1v_adc_hvin_data -0x68d1 029213 nbranch set_vdd_reference_voltage_4v ,blank -0x68d2 029214 setarg 0x4323 -0x68d3 029215 store 2 ,mem_1v_adc_hvin_data -: 029216 set_vdd_reference_voltage_4v: -0x68d4 029217 setarg 400 -0x68d5 029218 store 2 ,mem_reference_voltage -0x68d6 029219 rtn -: 029221 adc_init_data_io: -0x68d7 029222 fetcht 2 ,mem_otp_adc_flag -0x68d8 029223 setarg otp_adc_flag -0x68d9 029224 isub temp ,null -0x68da 029225 branch adc_check_data_io ,zero -0x68db 029226 setarg 0x6946 -0x68dc 029227 store 2 ,mem_1v_adc_io_data -0x68dd 029228 setarg 0x5377 -0x68de 029229 store 2 ,mem_0_5_adc_io_data -0x68df 029230 branch set_vdd_reference_voltage_0_5v -: 029232 adc_check_data_io: -0x68e0 029233 fetch 2 ,mem_1v_adc_io_data -0x68e1 029234 nbranch adc_check_0_5v_io ,blank -0x68e2 029235 setarg 0x6946 -0x68e3 029236 store 2 ,mem_1v_adc_io_data -: 029237 adc_check_0_5v_io: -0x68e4 029238 fetch 2 ,mem_0_5_adc_io_data -0x68e5 029239 nbranch set_vdd_reference_voltage_0_5v ,blank -0x68e6 029240 setarg 0x5377 -0x68e7 029241 store 2 ,mem_0_5_adc_io_data -: 029242 set_vdd_reference_voltage_0_5v: -0x68e8 029243 setarg 50 -0x68e9 029244 store 2 ,mem_reference_voltage -0x68ea 029245 rtn -: 029248 adc_set_mode: -0x68eb 029249 fetch 1 ,mem_adc_config_flag -0x68ec 029250 beq adc_config_vinlpm ,adc_check_vinlpm -0x68ed 029251 beq adc_config_hvin ,adc_check_hvin -0x68ee 029252 beq adc_config_gpio ,adc_check_gpio -0x68ef 029253 rtn -: 029254 adc_check_vinlpm: -0x68f0 029255 jam 0xbf ,rf_adc_mode -0x68f1 029256 branch read_adc -: 029257 adc_check_hvin: -0x68f2 029258 jam 0xaf ,rf_adc_mode -0x68f3 029259 branch read_adc -: 029260 adc_check_gpio: -0x68f4 029261 jam 0x8f ,rf_adc_mode -0x68f5 029262 fetch 1 ,mem_adc_channel -0x68f6 029263 hstore 1 ,rf_adc_ch -0x68f7 029264 branch read_adc -: 029265 read_adc: -0x68f8 029266 bpatchx patch33_7 ,mem_patch33 -0x68f9 029267 hfetch 1 ,core_uart_baud + 1 -0x68fa 029268 set1 7 ,pdata -0x68fb 029269 hstore 1 ,core_uart_baud + 1 -0x68fc 029270 hfetch 1 ,rf_adc_ch -0x68fd 029271 or_into 0x30 ,pdata -0x68fe 029272 hstore 1 ,rf_adc_ch -0x68ff 029273 jam 0x7c ,rfen_adc -0x6900 029274 jam 0xaa ,rf_adc_gc -0x6901 029275 nop 5000 -0x6902 029276 hfetcht 2 ,core_adc_sum -0x6903 029277 hfetch 1 ,core_uart_baud + 1 -0x6904 029278 set0 7 ,pdata -0x6905 029279 hstore 1 ,core_uart_baud + 1 -0x6906 029280 storet 2 ,mem_adc_current_value -0x6907 029281 rtn -: 029283 vdd_calculate_by_mode: -0x6908 029284 bpatchx patch34_0 ,mem_patch34 -0x6909 029285 fetch 1 ,mem_adc_config_flag -0x690a 029286 beq adc_config_vinlpm ,vdd_calculate_vinlpm -0x690b 029287 beq adc_config_hvin ,vdd_calculate_hvin -0x690c 029288 beq adc_config_gpio ,vdd_calculate_io -0x690d 029289 rtn -: 029291 vdd_calculate_vinlpm: -0x690e 029292 fetch 2 ,mem_3v_adc_vinlpm_data -0x690f 029293 fetcht 2 ,mem_2v_adc_vinlpm_data -0x6910 029294 arg 200 ,regc -0x6911 029295 branch vdd_calculate -: 029297 vdd_calculate_hvin: -0x6912 029298 fetch 2 ,mem_5v_adc_hvin_data -0x6913 029299 fetcht 2 ,mem_1v_adc_hvin_data -0x6914 029300 arg 100 ,regc -0x6915 029301 branch vdd_calculate -: 029303 vdd_calculate_io: -0x6916 029304 fetch 2 ,mem_1v_adc_io_data -0x6917 029305 fetcht 2 ,mem_0_5_adc_io_data -0x6918 029306 arg 50 ,regc -0x6919 029307 branch vdd_calculate -: 029309 vdd_calculate: -0x691a 029310 isub temp ,rega -0x691b 029311 fetch 2 ,mem_adc_current_value -0x691c 029312 isub temp ,pdata -0x691d 029313 nbranch vdd_calculate1 ,positive -0x691e 029314 fetcht 2 ,mem_reference_voltage -0x691f 029315 imul32 temp ,regb -0x6920 029316 copy regc ,pdata -0x6921 029317 imul32 rega ,pdata -0x6922 029318 iadd regb ,pdata -: 029319 vdd_calculate2: -0x6923 029320 idiv rega -0x6924 029321 call wait_div_end -0x6925 029322 quotient pdata -0x6926 029323 rtn -: 029325 vdd_calculate1: -0x6927 029326 copy temp ,pdata -0x6928 029327 fetcht 2 ,mem_adc_current_value -0x6929 029328 isub temp ,pdata -0x692a 029329 fetcht 2 ,mem_reference_voltage -0x692b 029330 imul32 temp ,regb -0x692c 029331 copy regc ,pdata -0x692d 029332 imul32 rega ,pdata -0x692e 029333 isub regb ,pdata -0x692f 029334 branch vdd_calculate2 -: 029345 adc_bat_percent_lowpower_out: -0x6930 029346 ifetch 8 ,rega -0x6931 029347 store 8 ,mem_pdatatemp -0x6932 029348 fetch 2 ,mem_pdatatemp -0x6933 029349 fetcht 2 ,mem_pdatatemp + 2 -0x6934 029350 isub temp ,rega -0x6935 029351 fetch 2 ,mem_pdatatemp + 6 -0x6936 029352 isub temp ,regb -0x6937 029353 fetcht 2 ,mem_pdatatemp + 4 -0x6938 029354 isub temp ,null -0x6939 029355 ncall adc_set_low_power_flag ,positive -0x693a 029356 mul32 regb ,100 ,pdata -0x693b 029357 idiv rega -0x693c 029358 call wait_div_end -0x693d 029359 quotient pdata -0x693e 029360 call adc_set_no_power_flag ,blank -0x693f 029361 rtn -: 029362 adc_set_low_power_flag: -0x6940 029363 fetch 1 ,mem_adc_power_flag -0x6941 029364 set1 0 ,pdata -0x6942 029365 store 1 ,mem_adc_power_flag -0x6943 029366 rtn -: 029367 adc_set_no_power_flag: -0x6944 029368 fetcht 1 ,mem_adc_power_flag -0x6945 029369 set1 1 ,temp -0x6946 029370 storet 1 ,mem_adc_power_flag -0x6947 029371 rtn -: 029376 keyscan_key_init: -0x6948 029377 fetch 2 ,mem_key_num_ptr -0x6949 029378 ifetch 1 ,pdata -: 029379 keyscan_key_init_next: -0x694a 029380 rtn blank -0x694b 029381 copy pdata ,loopcnt -0x694c 029383 fetch 2 ,mem_keyscan_ptr -0x694d 029384 increase 3 ,pdata -0x694e 029385 copy pdata ,rega -: 029386 keyscan_key_init_lp1: -0x694f 029387 ifetcht 1 ,rega -0x6950 029388 call gpio_config_input -0x6951 029389 increase key_conf_struct_len ,rega -0x6952 029390 loop keyscan_key_init_lp1 -: 029391 keyscan_key_init_end: -0x6953 029392 rtn -: 029394 keyscan_scan_key: -0x6954 029395 fetch 2 ,mem_keyscan_ptr -0x6955 029396 increase 3 ,pdata -0x6956 029397 copy pdata ,rega -0x6957 029399 force 0 ,regb -0x6958 029400 jam 0 ,mem_key_value_temp -: 029401 keyscan_scan_key_lp1: -0x6959 029402 ifetcht 1 ,rega -0x695a 029403 call gpio_get_bit -0x695b 029404 bpatchx patch34_1 ,mem_patch34 -0x695c 029405 fetch 2 ,mem_key_value_temp -0x695d 029406 copy regb ,queue -0x695e 029407 qsetflag true ,pdata -0x695f 029408 store 2 ,mem_key_value_temp -0x6960 029409 increase key_conf_struct_len ,rega -0x6961 029410 increase 1 ,regb -0x6962 029411 fetch 2 ,mem_key_num_ptr -0x6963 029412 ifetch 1 ,pdata -: 029413 keyscan_scan_key_lp1_next: -0x6964 029414 ixor regb ,null -0x6965 029415 nbranch keyscan_scan_key_lp1 ,zero -0x6966 029416 fetch 2 ,mem_key_value_temp -0x6967 029417 fetcht 2 ,mem_key_value -0x6968 029418 ixor temp ,null -0x6969 029419 rtn zero -0x696a 029420 enable user -0x696b 029421 rtn -: 029423 keyscan_process_lpm_before: -0x696c 029424 fetch 2 ,mem_key_num_ptr -0x696d 029425 ifetch 1 ,pdata -: 029426 keyscan_process_lpm_before_next: -0x696e 029427 rtn blank -0x696f 029428 copy pdata ,loopcnt -0x6970 029429 fetch 2 ,mem_keyscan_ptr -0x6971 029430 increase 3 ,pdata -0x6972 029431 copy pdata ,rega -: 029432 keyscan_process_lpm_before_lp1: -0x6973 029433 ifetcht 1 ,rega -0x6974 029434 call gpio_set_wake_by_current_state -0x6975 029435 increase key_conf_struct_len ,rega -0x6976 029436 loop keyscan_process_lpm_before_lp1 -: 029437 keyscan_process_lpm_before_end: -0x6977 029438 rtn -: 029440 keyscan_key_process: -0x6978 029441 arg key_scan_timer ,queue -0x6979 029442 call timer_check -0x697a 029443 nrtn blank -0x697b 029444 setarg 0x20 -0x697c 029445 arg key_scan_timer ,queue -0x697d 029446 call timer_init -0x697e 029447 disable user -0x697f 029448 call keyscan_process_lpm_before -0x6980 029449 bpatchx patch34_2 ,mem_patch34 -0x6981 029450 fetch 2 ,mem_key_num_ptr -0x6982 029451 ifetch 1 ,pdata -: 029452 keyscan_key_process_next: -0x6983 029453 rtn blank -0x6984 029454 call keyscan_scan_key -0x6985 029455 nbranch lpm_button_clean_wake_lock ,user -0x6986 029456 call lpm_button_get_wake_lock -0x6987 029457 disable user -0x6988 029458 fetch 2 ,mem_key_value_temp -0x6989 029459 store 2 ,mem_key_value_temp4 -0x698a 029460 jam 0 ,mem_key_value_temp6 -0x698b 029461 force 0 ,queue -: 029462 keyscan_key_lp1: -0x698c 029463 fetch 2 ,mem_key_value -0x698d 029464 rshift pdata ,temp -0x698e 029465 storet 2 ,mem_key_value -0x698f 029466 and pdata ,0x01 ,pdata -0x6990 029467 fetcht 2 ,mem_key_value_temp4 -0x6991 029468 and temp ,0x01 ,rega -0x6992 029469 rshift temp ,temp -0x6993 029470 storet 2 ,mem_key_value_temp4 -0x6994 029471 ixor rega ,null -0x6995 029472 ncall keyscan_send_key_data ,zero -0x6996 029473 fetch 2 ,mem_key_num_ptr -0x6997 029474 ifetch 1 ,pdata -: 029475 keyscan_key_lp1_next: -0x6998 029476 fetcht 1 ,mem_key_value_temp6 -0x6999 029477 increase 1 ,temp -0x699a 029478 storet 1 ,mem_key_value_temp6 -0x699b 029479 copy temp ,queue -0x699c 029480 ixor queue ,null -0x699d 029481 nbranch keyscan_key_lp1 ,zero -0x699e 029482 fetch 2 ,mem_key_value_temp -0x699f 029483 store 2 ,mem_key_value -0x69a0 029484 rtn -: 029485 keyscan_send_key_data: -0x69a1 029486 bpatchx patch34_3 ,mem_patch34 -0x69a2 029487 fetch 2 ,mem_keyscan_ptr -0x69a3 029488 increase 1 ,pdata -0x69a4 029489 ifetch 2 ,pdata -0x69a5 029490 branch callback_func -: 029501 pwm_init: -0x69a6 029502 hfetch 1 ,core_clksel -0x69a7 029503 ior rega ,pdata -0x69a8 029504 hstore 1 ,core_clksel -0x69a9 029505 hfetch 2 ,core_clkoff -0x69aa 029506 set0 clock_off_pwm ,pdata -0x69ab 029507 hstore 2 ,core_clkoff -: 029508 delay_nop100: -0x69ac 029509 nop 100 -0x69ad 029510 rtn -: 029521 pwm_out_set: -0x69ae 029522 fetcht 3 ,mem_pdatatemp + 2 -0x69af 029523 setarg pwm_12mhz -0x69b0 029524 idiv temp -0x69b1 029525 call wait_div_end -0x69b2 029526 quotient temp -0x69b3 029527 fetch 1 ,mem_pdatatemp + 5 -0x69b4 029528 imul32 temp ,pdata -0x69b5 029529 div pdata ,100 -0x69b6 029530 call wait_div_end -0x69b7 029531 quotient rega -0x69b8 029532 copy temp ,pdata -0x69b9 029533 isub rega ,regb -0x69ba 029534 fetch 1 ,mem_pdatatemp + 1 -0x69bb 029535 call pwm_duty_cycle_set -0x69bc 029536 fetch 1 ,mem_pdatatemp -0x69bd 029537 branch pwm_enable -: 029540 pwm_duty_cycle_set: -0x69be 029541 beq 0 ,pwm_pwm0_duty_set -0x69bf 029542 beq 1 ,pwm_pwm1_duty_set -0x69c0 029543 beq 2 ,pwm_pwm2_duty_set -0x69c1 029544 beq 3 ,pwm_pwm3_duty_set -0x69c2 029545 beq 4 ,pwm_pwm4_duty_set -0x69c3 029546 beq 5 ,pwm_pwm5_duty_set -: 029547 pwm_pwm0_duty_set: -0x69c4 029548 arg core_pwm_pcnt0 ,contw -0x69c5 029549 branch pwm_set_pncnt -: 029550 pwm_pwm1_duty_set: -0x69c6 029551 arg core_pwm_pcnt1 ,contw -0x69c7 029552 branch pwm_set_pncnt -: 029553 pwm_pwm2_duty_set: -0x69c8 029554 arg core_pwm_pcnt2 ,contw -0x69c9 029555 branch pwm_set_pncnt -: 029556 pwm_pwm3_duty_set: -0x69ca 029557 arg core_pwm_pcnt3 ,contw -0x69cb 029558 branch pwm_set_pncnt -: 029559 pwm_pwm4_duty_set: -0x69cc 029560 arg core_pwm_pcnt4 ,contw -0x69cd 029561 branch pwm_set_pncnt -: 029562 pwm_pwm5_duty_set: -0x69ce 029563 arg core_pwm_pcnt5 ,contw -0x69cf 029564 branch pwm_set_pncnt -: 029565 pwm_set_pncnt: -0x69d0 029566 copy rega ,pdata -0x69d1 029567 istore 2 ,contw -0x69d2 029568 copy regb ,pdata -0x69d3 029569 istore 2 ,contw -0x69d4 029570 rtn -: 029574 pwm_enable: -0x69d5 029575 enable user -0x69d6 029576 branch pwm_gpio_set -: 029577 pwm_disable: -0x69d7 029578 disable user -: 029579 pwm_gpio_set: -0x69d8 029580 beq 4 ,pwm_gpio4_set -0x69d9 029581 beq 5 ,pwm_gpio5_set -0x69da 029582 beq 27 ,pwm_gpio27_set -0x69db 029583 beq 28 ,pwm_gpio28_set -0x69dc 029584 beq 3 ,pwm_gpio3_set -0x69dd 029585 beq 8 ,pwm_gpio8_set -0x69de 029586 beq 20 ,pwm_gpio20_set -0x69df 029587 beq 21 ,pwm_gpio21_set -0x69e0 029588 beq 22 ,pwm_gpio22_set -0x69e1 029589 beq 23 ,pwm_gpio23_set -0x69e2 029590 rtn -: 029593 pwm_gpio4_set: -0x69e3 029594 arg 6 ,queue -0x69e4 029595 branch pwm_one_set_select -: 029596 pwm_gpio5_set: -0x69e5 029597 arg 7 ,queue -0x69e6 029598 branch pwm_one_set_select -: 029599 pwm_gpio27_set: -0x69e7 029600 arg 8 ,queue -0x69e8 029601 branch pwm_one_set_select -: 029602 pwm_gpio28_set: -0x69e9 029603 arg 9 ,queue -0x69ea 029604 branch pwm_one_set_select -: 029605 pwm_gpio3_set: -0x69eb 029606 arg 10 ,queue -0x69ec 029607 branch pwm_one_set_select -: 029608 pwm_gpio8_set: -0x69ed 029609 arg 11 ,queue -0x69ee 029610 branch pwm_one_set_select -: 029611 pwm_gpio20_set: -0x69ef 029612 arg 12 ,queue -0x69f0 029613 branch pwm_tw0_set_select -: 029614 pwm_gpio21_set: -0x69f1 029615 arg 13 ,queue -0x69f2 029616 branch pwm_tw0_set_select -: 029617 pwm_gpio22_set: -0x69f3 029618 arg 14 ,queue -0x69f4 029619 branch pwm_tw0_set_select -: 029620 pwm_gpio23_set: -0x69f5 029621 arg 15 ,queue -0x69f6 029622 branch pwm_tw0_set_select -: 029624 pwm_set_select: -0x69f7 029625 hfetch 2 ,core_gpio_sel1 -0x69f8 029626 qsetflag user ,pdata -0x69f9 029627 hstore 2 ,core_gpio_sel1 -0x69fa 029628 copy rega ,queue -0x69fb 029629 hfetch 1 ,core_gpio_key2 -0x69fc 029630 qsetflag user ,pdata -0x69fd 029631 hstore 1 ,core_gpio_key2 -0x69fe 029632 rtn -: 029634 pwm_one_set_select: -0x69ff 029635 add queue ,-4 ,rega -0x6a00 029636 branch pwm_set_select -: 029638 pwm_tw0_set_select: -0x6a01 029639 add queue ,-10 ,rega -0x6a02 029640 branch pwm_set_select -: 029645 rfcomm_init: -0x6a03 029646 rtn wake -0x6a04 029647 jam 0 ,mem_rfcomm_send_more_pkt -0x6a05 029648 jam bits9600 ,memremoterpnbitrate -0x6a06 029649 jam databits8 ,memremoteprndatabits -0x6a07 029650 jam 0x11 ,memremoteprnxon -0x6a08 029651 jam 0x13 ,memremoteprnxoff -0x6a09 029652 setarg 0 -0x6a0a 029653 store 3 ,memremoteprnstopbit -0x6a0b 029654 store 1 ,mem_spp_state -0x6a0c 029655 jam 0 ,memui_reconnect_mode -: 029657 rfcomm_init_spp: -0x6a0d 029658 bpatchx patch34_4 ,mem_patch34 -0x6a0e 029659 setarg 0 -0x6a0f 029660 store 1 ,mem_spp_state -0x6a10 029661 store 1 ,mem_remote_spp_channel -0x6a11 029662 store 1 ,mem_pn_dlci -0x6a12 029663 fetch 1 ,mem_credit_flag -0x6a13 029664 beq credit_enable ,rfcomm_init_spp_with_credit -0x6a14 029665 jam 0x50 ,mem_credit_given -0x6a15 029666 rtn -: 029668 rfcomm_init_spp_with_credit: -0x6a16 029669 jam 0x00 ,mem_credit_given -0x6a17 029670 rtn -: 029672 set_cr_bit: -0x6a18 029673 or_into 0x02 ,temp -0x6a19 029674 rtn -: 029686 rfcomm_calculate_fcs_sabm: -0x6a1a 029687 copy temp ,pdata -0x6a1b 029688 reverse pdata ,pdata -0x6a1c 029689 store 1 ,memfcstemp3 -0x6a1d 029690 force ini_tx_sabm ,pdata -0x6a1e 029691 reverse pdata ,pdata -0x6a1f 029692 store 1 ,memfcstemp2 -0x6a20 029693 force 0x01 ,pdata -0x6a21 029694 reverse pdata ,pdata -0x6a22 029695 store 1 ,memfcstemp1 -0x6a23 029696 call caculate_fcs -0x6a24 029697 copy temp ,pdata -0x6a25 029698 rtn -: 029699 rfcomm_calculate_fcs_ua: -0x6a26 029700 reverse pdata ,pdata -0x6a27 029701 store 1 ,memfcstemp3 -0x6a28 029702 force rsp_tx_ua ,pdata -0x6a29 029703 reverse pdata ,pdata -0x6a2a 029704 store 1 ,memfcstemp2 -0x6a2b 029705 force 0x01 ,pdata -0x6a2c 029706 reverse pdata ,pdata -0x6a2d 029707 store 1 ,memfcstemp1 -0x6a2e 029708 branch caculate_fcs -: 029710 rfcomm_calculate_fcs_dlci0: -0x6a2f 029711 fetch 1 ,mem_rfcomm_initiator -0x6a30 029712 branch rfcomm_calculate_fcs_dlci0_res ,blank -0x6a31 029713 setarg 0x70 -0x6a32 029714 rtn -: 029715 rfcomm_calculate_fcs_dlci0_res: -0x6a33 029716 setarg 0xaa -0x6a34 029717 rtn -: 029719 rfcomm_save_fcs_uih: -0x6a35 029720 reverse pdata ,pdata -0x6a36 029721 store 1 ,memfcstemp3 -0x6a37 029722 force rsp_rx_uih ,pdata -0x6a38 029723 call caculate_uihdata_fcs -0x6a39 029724 fetcht 2 ,mem_contw_temp -0x6a3a 029725 copy temp ,contw -0x6a3b 029726 istore 1 ,contw -0x6a3c 029727 copy contw ,temp -0x6a3d 029728 storet 2 ,mem_contw_temp -0x6a3e 029729 force rsp_rx_uih_wdata ,pdata -0x6a3f 029730 call caculate_uihdata_fcs -0x6a40 029731 fetcht 2 ,mem_contw_temp -0x6a41 029732 copy temp ,contw -0x6a42 029733 istore 1 ,contw -0x6a43 029734 rtn -: 029743 caculate_uihdata_fcs: -0x6a44 029744 reverse pdata ,pdata -0x6a45 029745 store 1 ,memfcstemp2 -0x6a46 029746 fetch 2 ,memfcstemp2 -0x6a47 029747 lshift8 pdata ,pdata -0x6a48 029748 store 3 ,mem_mod2div_temp -0x6a49 029749 arg 0x107 ,rega -0x6a4a 029750 arg 0xf ,regb -0x6a4b 029751 call mod2div -0x6a4c 029752 xor_into 0xd7 ,pdata -0x6a4d 029753 invert pdata ,pdata -0x6a4e 029754 reverse pdata ,pdata -0x6a4f 029755 rtn -: 029765 caculate_fcs: -0x6a50 029766 fetch 3 ,memfcstemp1 -0x6a51 029767 store 3 ,mem_mod2div_temp -0x6a52 029768 arg 0x107 ,rega -0x6a53 029769 arg 0xf ,regb -0x6a54 029770 call mod2div -0x6a55 029771 lshift8 pdata ,pdata -0x6a56 029772 arg 0x7 ,regb -0x6a57 029773 call mod2div -0x6a58 029774 xor_into 0x2b ,pdata -0x6a59 029775 invert pdata ,pdata -0x6a5a 029776 reverse pdata ,pdata -0x6a5b 029777 copy pdata ,temp -0x6a5c 029778 rtn -: 029780 mod2div: -0x6a5d 029781 arg 0 ,regc -0x6a5e 029782 copy regb ,loopcnt -0x6a5f 029783 call right_shift_n -0x6a60 029784 icopy temp -: 029785 mod2div_loop: -0x6a61 029790 copy temp ,pdata -0x6a62 029791 lshift regc ,regc -0x6a63 029792 bbit0 8 ,mod2div_not_enough_reduction -0x6a64 029793 ixor rega ,temp -0x6a65 029794 increase 1 ,regc -: 029795 mod2div_not_enough_reduction: -0x6a66 029796 lshift temp ,temp -0x6a67 029797 fetch 3 ,mem_mod2div_temp -0x6a68 029798 increase -1 ,regb -0x6a69 029799 compare 0xff ,regb ,0xff -0x6a6a 029800 branch mod2div_end ,true -0x6a6b 029801 copy regb ,loopcnt -0x6a6c 029802 call right_shift_n -0x6a6d 029803 isolate1 0 ,pdata -0x6a6e 029804 setflag true ,0 ,temp -0x6a6f 029805 branch mod2div_loop -: 029806 mod2div_end: -0x6a70 029808 rshift temp ,pdata -0x6a71 029809 rtn -: 029811 get_rfcomm_snd_adss: -0x6a72 029812 fetcht 1 ,mem_pn_dlci -: 029813 dlci_to_address_cmd: -0x6a73 029815 lshift2 temp ,temp -0x6a74 029816 set1 rfcomm_address_ext_len ,temp -0x6a75 029817 fetch 1 ,mem_rfcomm_initiator -0x6a76 029818 ncall set_cr_bit ,blank -0x6a77 029819 storet 1 ,mem_rfcomm_send_adss -0x6a78 029820 rtn -: 029822 channel_to_dlci: -0x6a79 029824 lshift temp ,temp -0x6a7a 029825 fetch 1 ,mem_rfcomm_initiator -0x6a7b 029826 setflag blank ,0 ,temp -0x6a7c 029828 rtn -: 029829 rfcomm_rx_process_dlci0_sabm: -0x6a7d 029830 fetcht 1 ,mem_current_channel -0x6a7e 029831 jam 0xd7 ,mem_current_fcs -0x6a7f 029832 call rfcomm_send_ua -0x6a80 029833 fetch 1 ,mem_rfcomm_state -0x6a81 029834 set1 l2cap_channel_rfcomm_only_sabm ,pdata -0x6a82 029835 set1 l2cap_channel_rfcomm_only_ua ,pdata -0x6a83 029836 store 1 ,mem_rfcomm_state -0x6a84 029837 jam 0 ,mem_rfcomm_initiator -0x6a85 029838 branch rfcomm_rx_process_end -: 029839 rfcomm_rx_process_dlci0_ua: -0x6a86 029840 fetch 1 ,mem_rfcomm_state -0x6a87 029841 set1 l2cap_channel_rfcomm_only_ua ,pdata -0x6a88 029842 store 1 ,mem_rfcomm_state -0x6a89 029843 branch rfcomm_rx_process_end -: 029846 rfcomm_rx_process: -0x6a8a 029847 bpatchx patch34_5 ,mem_patch34 -0x6a8b 029848 fetch 1 ,memui_reconnect_mode -0x6a8c 029849 beq no_reconnection ,rfcomm_rx_process_remote_page -0x6a8d 029850 branch rfcomm_rx_process_reconn -: 029852 rfcomm_rx_process_remote_page: -0x6a8e 029853 fetch 2 ,mem_l2cap_payload_ptr -0x6a8f 029854 copy pdata ,contr -0x6a90 029855 call get_rfcomm_head_struct -0x6a91 029856 fetch 1 ,mem_current_channel -0x6a92 029857 beq 0 ,parse_dlci0_rp -0x6a93 029858 branch parse_uih_rp -: 029859 parse_dlci0_rp: -0x6a94 029860 bpatchx patch34_6 ,mem_patch34 -0x6a95 029861 fetch 1 ,mem_current_frame_type -0x6a96 029862 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm -0x6a97 029863 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua -0x6a98 029864 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih -0x6a99 029865 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event -0x6a9a 029866 rtn -: 029869 parse_dlci0_rp_uih: -0x6a9b 029870 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x6a9c 029871 copy pdata ,contr -0x6a9d 029872 call get_rfcomm_uih_head_struct -0x6a9e 029873 fetch 1 ,mem_uih_cmd_type -0x6a9f 029874 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd -0x6aa0 029875 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res -0x6aa1 029876 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd -0x6aa2 029877 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res -0x6aa3 029878 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port -0x6aa4 029879 branch rfcomm_rx_process_end -: 029881 parse_dlci0_rp_uih_pn_cmd: -0x6aa5 029882 call parse_dlci0_rp_uih_pn_res_common -0x6aa6 029884 branch parse_dlci0_rp_uih_pn_cmd_spp -: 029886 parse_dlci0_rp_uih_pn_cmd_spp: -0x6aa7 029887 fetch 1 ,mem_spp_state -0x6aa8 029888 set1 rfcomm_channel_state_pn_cmd ,pdata -0x6aa9 029889 set1 rfcomm_channel_state_pn_res ,pdata -0x6aaa 029890 store 1 ,mem_spp_state -0x6aab 029891 call rfcomm_send_param_neg_res -0x6aac 029892 branch rfcomm_rx_process_end -: 029894 parse_dlci0_rp_uih_pn_res: -0x6aad 029895 call parse_dlci0_rp_uih_pn_res_common -0x6aae 029896 branch rfcomm_rx_process_end -: 029898 parse_dlci0_rp_uih_pn_res_common: -0x6aaf 029899 call get_param_payload_ptr -0x6ab0 029900 branch get_rfcomm_prarmer_negotiation -: 029902 get_rfcomm_param_modem_status: -0x6ab1 029903 call get_param_payload_ptr -0x6ab2 029904 ifetch 1 ,contr -0x6ab3 029905 rshift3 pdata ,pdata -0x6ab4 029906 store 1 ,mem_ms_channel -0x6ab5 029907 ifetch 1 ,contr -0x6ab6 029908 store 1 ,mem_ms_param -0x6ab7 029909 rtn -: 029912 get_rfcomm_head_struct: -0x6ab8 029913 ifetch 1 ,contr -0x6ab9 029914 store 1 ,mem_current_adss -0x6aba 029915 rshift3 pdata ,pdata -0x6abb 029916 store 1 ,mem_current_channel -0x6abc 029917 ifetch 1 ,contr -0x6abd 029918 store 1 ,mem_current_frame_type -: 029919 get_rfcomm_current_length: -0x6abe 029920 call get_rfcomm_length_common -0x6abf 029921 storet 2 ,mem_current_length -0x6ac0 029922 copy contr ,pdata -0x6ac1 029923 store 2 ,mem_rfcomm_uih_payload_ptr -0x6ac2 029924 rtn -: 029926 get_rfcomm_uih_head_struct: -0x6ac3 029927 ifetch 1 ,contr -0x6ac4 029928 rshift pdata ,pdata -0x6ac5 029929 store 1 ,mem_uih_cmd_type -0x6ac6 029930 call get_rfcomm_length_common -0x6ac7 029931 storet 2 ,mem_uih_length -0x6ac8 029932 copy contr ,pdata -0x6ac9 029933 store 2 ,mem_param_payload_ptr -0x6aca 029934 rtn -: 029937 get_param_payload_ptr: -0x6acb 029938 fetch 2 ,mem_param_payload_ptr -0x6acc 029939 copy pdata ,contr -0x6acd 029940 rtn -: 029942 get_rfcomm_length_common: -0x6ace 029943 ifetch 1 ,contr -0x6acf 029944 copy pdata ,temp -0x6ad0 029945 rshift temp ,temp -0x6ad1 029946 rtnbit1 0 -0x6ad2 029947 ifetch 1 ,contr -0x6ad3 029948 lshift3 pdata ,pdata -0x6ad4 029949 lshift4 pdata ,pdata -0x6ad5 029950 iadd temp ,temp -0x6ad6 029951 rtn -: 029953 get_rfcomm_prarmer_negotiation: -0x6ad7 029954 ifetch 1 ,contr -0x6ad8 029955 store 1 ,mem_pn_dlci -0x6ad9 029956 ifetch 1 ,contr -0x6ada 029957 store 1 ,mem_pn_credit_flow_type_info -0x6adb 029958 ifetch 1 ,contr -0x6adc 029959 store 1 ,mem_pn_priority -0x6add 029960 ifetch 1 ,contr -0x6ade 029961 store 1 ,mem_pn_acknowledg_timer -0x6adf 029962 ifetch 2 ,contr -0x6ae0 029963 store 2 ,mem_pn_max_frame_size -0x6ae1 029964 ifetch 1 ,contr -0x6ae2 029965 store 1 ,mem_pn_max_retrans -0x6ae3 029966 ifetch 1 ,contr -0x6ae4 029967 store 1 ,mem_remote_credits -0x6ae5 029968 rtn -: 029971 parse_dlci0_rp_uih_ms_cmd: -0x6ae6 029972 call get_rfcomm_param_modem_status -0x6ae7 029974 branch parse_dlci0_rp_uih_ms_cmd_spp -: 029976 parse_dlci0_rp_uih_ms_cmd_spp: -0x6ae8 029977 fetch 1 ,mem_spp_state -0x6ae9 029978 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata -0x6aea 029979 set1 rfcomm_channel_state_snd_ms_res ,pdata -0x6aeb 029980 store 1 ,mem_spp_state -0x6aec 029981 fetcht 1 ,mem_pn_dlci -0x6aed 029982 lshift2 temp ,temp -0x6aee 029983 or_into 3 ,temp -0x6aef 029984 call rfcomm_send_modem_status_res -0x6af0 029985 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt -0x6af1 029986 branch rfcomm_rx_process_end -: 029988 parse_dlci0_rp_uih_ms_res: -0x6af2 029989 jam bt_evt_spp_connected ,mem_fifo_temp -0x6af3 029990 call ui_ipc_send_event -0x6af4 029991 call get_rfcomm_param_modem_status -0x6af5 029992 fetch 1 ,mem_ms_channel -0x6af6 029993 sub pdata ,1 ,null -0x6af7 029994 branch parse_dlci0_rp_uih_ms_res_spp ,zero -0x6af8 029995 branch assert -: 029996 parse_dlci0_rp_uih_ms_res_spp: -0x6af9 029997 fetch 1 ,mem_spp_state -0x6afa 029998 set1 rfcomm_channel_state_rcv_ms_res ,pdata -0x6afb 029999 store 1 ,mem_spp_state -0x6afc 030000 branch rfcomm_rx_process_end -: 030002 parse_dlci0_rp_uih_cmd_port: -0x6afd 030003 call get_param_payload_ptr -0x6afe 030004 ifetch 1 ,contr -0x6aff 030005 store 1 ,mem_rpn_dlci -0x6b00 030006 call l2cap_malloc_rfcomm_channel -0x6b01 030007 call l2cap_get_rfcomm_tx_buff -0x6b02 030008 setarg 0x000e -0x6b03 030009 istore 2 ,contw -0x6b04 030010 fetch 2 ,mem_rfcomm_remote_cid -0x6b05 030011 istore 2 ,contw -0x6b06 030012 fetch 1 ,mem_rfcomm_initiator -0x6b07 030014 lshift pdata ,pdata -0x6b08 030015 set1 0 ,pdata -0x6b09 030016 istore 1 ,contw -0x6b0a 030017 bpatchx patch34_7 ,mem_patch34 -0x6b0b 030018 setarg 0x15ef -0x6b0c 030019 istore 2 ,contw -0x6b0d 030020 setarg 0x1191 -0x6b0e 030021 istore 2 ,contw -0x6b0f 030024 fetch 1 ,mem_rpn_dlci -0x6b10 030025 istore 1 ,contw -0x6b11 030026 setarg 0x000007 -0x6b12 030027 istore 5 ,contw -0x6b13 030030 setarg 0x01 -0x6b14 030031 istore 2 ,contw -0x6b15 030034 call rfcomm_calculate_fcs_dlci0 -0x6b16 030035 istore 1 ,contw -0x6b17 030036 rtn -: 030040 parse_uih_rp: -0x6b18 030041 branch parse_uih_rp_spp -: 030043 parse_uih_rp_spp: -0x6b19 030044 bpatchx patch35_0 ,mem_patch35 -0x6b1a 030045 fetch 1 ,mem_current_frame_type -0x6b1b 030046 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua -0x6b1c 030047 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm -0x6b1d 030048 beq rfcomm_frame_type_uih ,parse_uih_spp_uih -0x6b1e 030049 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits -0x6b1f 030050 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn -0x6b20 030051 rtn -: 030052 parse_uih_rp_spp_ua: -0x6b21 030053 fetch 1 ,mem_spp_state -0x6b22 030054 set1 rfcomm_channel_state_ua ,pdata -0x6b23 030055 store 1 ,mem_spp_state -0x6b24 030056 branch rfcomm_rx_process_end -: 030057 parse_uih_rp_spp_sabm: -0x6b25 030058 fetch 1 ,mem_spp_state -0x6b26 030059 set1 rfcomm_channel_state_ua ,pdata -0x6b27 030060 set1 rfcomm_channel_state_sabm ,pdata -0x6b28 030061 store 1 ,mem_spp_state -0x6b29 030062 fetch 1 ,mem_current_adss -0x6b2a 030063 call rfcomm_calculate_fcs_ua -0x6b2b 030064 store 1 ,mem_current_fcs -0x6b2c 030065 call rfcomm_send_ua -0x6b2d 030066 fetch 1 ,mem_current_adss -0x6b2e 030067 rshift2 pdata ,pdata -0x6b2f 030068 store 1 ,mem_pn_dlci -0x6b30 030069 lshift2 pdata ,pdata -0x6b31 030070 set0 rfcomm_address_cr ,pdata -0x6b32 030071 set1 rfcomm_address_ext_len ,pdata -0x6b33 030072 arg mem_hiufcs_spp ,temp -0x6b34 030073 storet 2 ,mem_contw_temp -0x6b35 030074 call rfcomm_save_fcs_uih -0x6b36 030075 branch rfcomm_rx_process_end -: 030077 parse_uih_spp_uih_credits: -0x6b37 030078 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x6b38 030079 copy pdata ,contr -0x6b39 030080 increase 1 ,pdata -0x6b3a 030081 store 2 ,mem_rfcomm_uih_payload_ptr -0x6b3b 030082 ifetch 1 ,contr -0x6b3c 030083 fetcht 1 ,mem_remote_credits -0x6b3d 030084 iadd temp ,pdata -0x6b3e 030085 store 1 ,mem_remote_credits -: 030086 parse_uih_spp_uih: -0x6b3f 030087 call rfcomm_increase_credit_given -: 030088 parse_uih_spp_uih_cont: -0x6b40 030089 call get_rfcomm_snd_adss -0x6b41 030090 call rfcomm_send_uih_without_payload -0x6b42 030091 call spp_process_rx_data -0x6b43 030092 branch rfcomm_rx_process_end -: 030094 parse_uih_rp_spp_disconn_send_event: -0x6b44 030095 jam bt_evt_spp_disconnected ,mem_fifo_temp -0x6b45 030096 call ui_ipc_send_event -: 030097 parse_uih_rp_spp_disconn: -0x6b46 030098 call rfcomm_init_spp -0x6b47 030099 fetch 1 ,mem_current_adss -0x6b48 030100 call rfcomm_calculate_fcs_ua -0x6b49 030101 store 1 ,mem_current_fcs -0x6b4a 030102 call rfcomm_send_ua -0x6b4b 030103 branch rfcomm_rx_process_end -: 030108 rfcomm_rx_process_reconn: -0x6b4c 030109 fetch 2 ,mem_l2cap_payload_ptr -0x6b4d 030110 copy pdata ,contr -0x6b4e 030111 call get_rfcomm_head_struct -0x6b4f 030112 fetch 1 ,mem_current_channel -0x6b50 030113 beq 0 ,parse_dlci0_reconn -0x6b51 030114 branch parse_uih_reconn -: 030116 parse_dlci0_reconn: -0x6b52 030117 bpatchx patch35_1 ,mem_patch35 -0x6b53 030118 fetch 1 ,mem_current_frame_type -0x6b54 030119 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm -0x6b55 030120 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua -0x6b56 030121 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih -0x6b57 030122 branch rfcomm_rx_process_end -: 030123 parse_dlci0_reconn_uih: -0x6b58 030124 fetch 2 ,mem_rfcomm_uih_payload_ptr -0x6b59 030125 copy pdata ,contr -0x6b5a 030126 call get_rfcomm_uih_head_struct -0x6b5b 030127 fetch 1 ,mem_uih_cmd_type -0x6b5c 030128 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd -0x6b5d 030129 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd -0x6b5e 030130 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd -0x6b5f 030131 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res -0x6b60 030132 branch rfcomm_rx_process_end -: 030134 parse_dlci0_reconn_uih_pn_cmd: -0x6b61 030135 call parse_dlci0_rp_uih_pn_res_common -0x6b62 030136 fetch 1 ,mem_pn_dlci -0x6b63 030137 rshift pdata ,pdata -0x6b64 030138 fetcht 1 ,mem_remote_spp_channel -0x6b65 030139 isub temp ,null -0x6b66 030140 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero -0x6b67 030141 branch assert -: 030142 parse_dlci0_reconn_uih_pn_cmd_spp: -0x6b68 030143 fetch 1 ,mem_spp_state -0x6b69 030144 set1 rfcomm_channel_state_pn_res ,pdata -0x6b6a 030145 store 1 ,mem_spp_state -0x6b6b 030146 branch rfcomm_rx_process_end -: 030148 parse_dlci0_reconn_uih_ms_cmd: -0x6b6c 030149 call get_rfcomm_param_modem_status -0x6b6d 030150 fetch 1 ,mem_ms_channel -0x6b6e 030151 fetcht 1 ,mem_remote_spp_channel -0x6b6f 030152 isub temp ,null -0x6b70 030153 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero -0x6b71 030154 branch assert -0x6b72 030155 branch rfcomm_rx_process_end -: 030156 parse_dlci0_reconn_uih_ms_cmd_spp: -0x6b73 030157 fetch 1 ,mem_spp_state -0x6b74 030158 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata -0x6b75 030159 set1 rfcomm_channel_state_snd_ms_res ,pdata -0x6b76 030160 store 1 ,mem_spp_state -0x6b77 030161 fetcht 1 ,mem_pn_dlci -0x6b78 030162 lshift2 temp ,temp -0x6b79 030163 or_into 3 ,temp -0x6b7a 030164 call rfcomm_send_modem_status_res -0x6b7b 030165 branch rfcomm_rx_process_end -: 030167 parse_dlci0_reconn_uih_ms_res: -0x6b7c 030168 call get_rfcomm_param_modem_status -0x6b7d 030169 fetch 1 ,mem_ms_channel -0x6b7e 030170 fetcht 1 ,mem_remote_spp_channel -0x6b7f 030171 isub temp ,null -0x6b80 030172 branch parse_dlci0_reconn_uih_ms_res_spp ,zero -0x6b81 030173 branch assert -: 030174 parse_dlci0_reconn_uih_ms_res_spp: -0x6b82 030175 fetch 1 ,mem_spp_state -0x6b83 030176 set1 rfcomm_channel_state_rcv_ms_res ,pdata -0x6b84 030177 store 1 ,mem_spp_state -0x6b85 030178 branch rfcomm_rx_process_end -: 030180 parse_uih_reconn: -0x6b86 030181 fetch 1 ,mem_current_channel -0x6b87 030182 fetcht 1 ,mem_remote_spp_channel -0x6b88 030183 isub temp ,null -0x6b89 030184 branch parse_uih_reconn_spp ,zero -0x6b8a 030185 branch assert -0x6b8b 030186 branch rfcomm_rx_process_end -: 030188 parse_uih_reconn_spp: -0x6b8c 030189 fetch 1 ,mem_current_frame_type -0x6b8d 030190 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua -0x6b8e 030191 beq rfcomm_frame_type_uih ,parse_uih_spp_uih -0x6b8f 030192 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits -0x6b90 030193 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn -: 030194 parse_uih_reconn_spp_ua: -0x6b91 030195 fetch 1 ,mem_spp_state -0x6b92 030196 set1 rfcomm_channel_state_ua ,pdata -0x6b93 030197 store 1 ,mem_spp_state -0x6b94 030198 branch rfcomm_rx_process_end -: 030199 parse_uih_reconn_spp_sabm: -0x6b95 030200 branch parse_uih_reconn_spp_sabm -: 030201 parse_uih_reconn_spp_disconn: -0x6b96 030202 branch parse_uih_rp_spp_disconn -: 030203 rfcomm_rx_process_end: -0x6b97 030204 rtn -: 030206 rfcomm_send_more_pkt: -0x6b98 030207 fetch 1 ,mem_rfcomm_send_more_pkt -0x6b99 030208 rtn blank -0x6b9a 030209 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp -0x6b9b 030210 branch assert -: 030212 rfcomm_send_more_pkt_msc_cmd_spp: -0x6b9c 030213 jam 0 ,mem_rfcomm_send_more_pkt -0x6b9d 030214 call l2cap_malloc_rfcomm_channel -0x6b9e 030215 arg spp_slave_channel ,temp -0x6b9f 030216 fetcht 1 ,mem_pn_dlci -0x6ba0 030217 lshift2 temp ,temp -: 030218 rfcomm_send_more_pkt_msc_cmd_spp0: -0x6ba1 030219 or_into 0x03 ,temp -0x6ba2 030220 arg 0xaa ,rega -0x6ba3 030221 call rfcomm_send_modem_status_cmd -0x6ba4 030222 call l2cap_get_rfcomm_tx_buff -0x6ba5 030223 copy contw ,contr -0x6ba6 030224 ifetch 2 ,contr -0x6ba7 030225 branch assert ,blank -0x6ba8 030226 rtn -: 030228 rfcomm_send_sabm: -0x6ba9 030229 call l2cap_get_rfcomm_tx_buff -0x6baa 030230 setarg 0x0004 -0x6bab 030231 istore 2 ,contw -0x6bac 030232 fetch 2 ,mem_rfcomm_remote_cid -0x6bad 030233 istore 2 ,contw -0x6bae 030234 fetch 1 ,mem_current_adss -0x6baf 030235 istore 1 ,contw -0x6bb0 030236 bpatchx patch35_2 ,mem_patch35 -0x6bb1 030237 setarg 0x013f -0x6bb2 030238 istore 2 ,contw -0x6bb3 030239 fetch 1 ,mem_current_fcs -0x6bb4 030240 istore 1 ,contw -0x6bb5 030241 rtn -: 030242 rfcomm_send_ua: -0x6bb6 030243 call l2cap_malloc_rfcomm_channel -0x6bb7 030244 call l2cap_get_rfcomm_tx_buff -0x6bb8 030245 setarg 0x0004 -0x6bb9 030246 istore 2 ,contw -0x6bba 030247 fetch 2 ,mem_rfcomm_remote_cid -0x6bbb 030248 istore 2 ,contw -0x6bbc 030249 fetch 1 ,mem_current_adss -0x6bbd 030250 istore 1 ,contw -0x6bbe 030251 bpatchx patch35_3 ,mem_patch35 -0x6bbf 030252 setarg 0x0173 -0x6bc0 030253 istore 2 ,contw -0x6bc1 030254 fetch 1 ,mem_current_fcs -0x6bc2 030255 istore 1 ,contw -0x6bc3 030256 rtn -: 030257 rfcomm_send_param_neg_cmd: -0x6bc4 030258 call l2cap_get_rfcomm_tx_buff -0x6bc5 030259 setarg 0x000e -0x6bc6 030260 istore 2 ,contw -0x6bc7 030261 fetch 2 ,mem_rfcomm_remote_cid -0x6bc8 030262 istore 2 ,contw -0x6bc9 030263 fetch 1 ,mem_rfcomm_initiator -0x6bca 030264 lshift pdata ,pdata -0x6bcb 030265 set1 0 ,pdata -0x6bcc 030266 istore 1 ,contw -0x6bcd 030267 bpatchx patch35_4 ,mem_patch35 -0x6bce 030268 setarg 0x15ef -0x6bcf 030269 istore 2 ,contw -0x6bd0 030270 setarg 0x1183 -0x6bd1 030271 istore 2 ,contw -0x6bd2 030272 copy temp ,pdata -0x6bd3 030273 istore 1 ,contw -0x6bd4 030274 setarg 0x0000f0 -0x6bd5 030275 istore 3 ,contw -0x6bd6 030276 setarg rfcomm_max_frame_size -0x6bd7 030277 istore 2 ,contw -0x6bd8 030278 setarg 0 -0x6bd9 030279 istore 1 ,contw -0x6bda 030280 setarg 0x01 -0x6bdb 030281 istore 1 ,contw -0x6bdc 030282 call rfcomm_calculate_fcs_dlci0 -0x6bdd 030283 istore 1 ,contw -0x6bde 030284 jam 0x10 ,mem_credit_given -0x6bdf 030285 rtn -: 030286 rfcomm_send_param_neg_res: -0x6be0 030287 call l2cap_malloc_rfcomm_channel -0x6be1 030288 call l2cap_get_rfcomm_tx_buff -0x6be2 030289 setarg 0x000e -0x6be3 030290 istore 2 ,contw -0x6be4 030291 fetch 2 ,mem_rfcomm_remote_cid -0x6be5 030292 istore 2 ,contw -0x6be6 030293 fetch 1 ,mem_rfcomm_initiator -0x6be7 030294 lshift pdata ,pdata -0x6be8 030295 set1 0 ,pdata -0x6be9 030296 istore 1 ,contw -0x6bea 030297 bpatchx patch35_5 ,mem_patch35 -0x6beb 030298 setarg 0x15ef -0x6bec 030299 istore 2 ,contw -0x6bed 030300 setarg 0x1181 -0x6bee 030301 istore 2 ,contw -0x6bef 030302 fetch 1 ,mem_pn_dlci -0x6bf0 030303 istore 1 ,contw -0x6bf1 030304 setarg 0x0000e0 -0x6bf2 030305 istore 3 ,contw -0x6bf3 030306 fetch 2 ,mem_rfcomm_max_frame_size -0x6bf4 030307 istore 2 ,contw -0x6bf5 030308 setarg 0x00 -0x6bf6 030309 istore 1 ,contw -0x6bf7 030310 fetch 1 ,mem_rfcomm_credit_init_data -0x6bf8 030311 istore 1 ,contw -0x6bf9 030312 call rfcomm_calculate_fcs_dlci0 -0x6bfa 030313 istore 1 ,contw -0x6bfb 030314 rtn -: 030315 rfcomm_send_modem_status_cmd: -0x6bfc 030316 call l2cap_get_rfcomm_tx_buff -0x6bfd 030317 setarg 0x0008 -0x6bfe 030318 istore 2 ,contw -0x6bff 030319 fetch 2 ,mem_rfcomm_remote_cid -0x6c00 030320 istore 2 ,contw -0x6c01 030321 fetch 1 ,mem_rfcomm_initiator -0x6c02 030322 lshift pdata ,pdata -0x6c03 030323 set1 0 ,pdata -0x6c04 030324 istore 1 ,contw -0x6c05 030325 bpatchx patch35_6 ,mem_patch35 -0x6c06 030326 setarg 0x09ef -0x6c07 030327 istore 2 ,contw -0x6c08 030328 setarg 0x05e3 -0x6c09 030329 istore 2 ,contw -0x6c0a 030330 copy temp ,pdata -0x6c0b 030331 istore 1 ,contw -0x6c0c 030332 setarg 0x8d -0x6c0d 030333 istore 1 ,contw -0x6c0e 030334 call rfcomm_calculate_fcs_dlci0 -0x6c0f 030335 istore 1 ,contw -0x6c10 030336 rtn -: 030338 rfcomm_send_modem_status_res: -0x6c11 030339 call l2cap_malloc_rfcomm_channel -0x6c12 030340 call l2cap_get_rfcomm_tx_buff -0x6c13 030341 setarg 0x0008 -0x6c14 030342 istore 2 ,contw -0x6c15 030343 fetch 2 ,mem_rfcomm_remote_cid -0x6c16 030344 istore 2 ,contw -0x6c17 030345 copy temp ,timeup -0x6c18 030346 fetch 1 ,mem_rfcomm_initiator -0x6c19 030347 lshift pdata ,pdata -0x6c1a 030348 set1 0 ,pdata -0x6c1b 030349 istore 1 ,contw -0x6c1c 030350 bpatchx patch35_7 ,mem_patch35 -0x6c1d 030351 setarg 0x09ef -0x6c1e 030352 istore 2 ,contw -0x6c1f 030353 setarg 0x05e1 -0x6c20 030354 istore 2 ,contw -0x6c21 030355 copy timeup ,pdata -0x6c22 030356 istore 1 ,contw -0x6c23 030357 setarg 0x8d -0x6c24 030358 istore 1 ,contw -0x6c25 030359 call rfcomm_calculate_fcs_dlci0 -0x6c26 030360 istore 1 ,contw -0x6c27 030361 rtn -: 030363 rfcomm_send_uih_without_payload: -0x6c28 030364 bpatchx patch36_0 ,mem_patch36 -0x6c29 030365 fetch 1 ,mem_credit_given -0x6c2a 030366 rtn blank -0x6c2b 030367 hfetch 2 ,core_uart_rxitems -0x6c2c 030368 nrtn blank -0x6c2d 030369 copy rega ,pdata -0x6c2e 030370 store 1 ,mem_pdatatemp + 1 -0x6c2f 030371 storet 1 ,mem_pdatatemp -0x6c30 030372 call l2cap_malloc_is_fifo_full -0x6c31 030373 nrtn blank -0x6c32 030374 call l2cap_malloc_rfcomm_channel -0x6c33 030375 call l2cap_get_rfcomm_tx_buff -0x6c34 030376 setarg 0x05 -0x6c35 030377 istore 2 ,contw -0x6c36 030378 fetch 2 ,mem_rfcomm_remote_cid -0x6c37 030379 istore 2 ,contw -0x6c38 030380 fetch 1 ,mem_rfcomm_send_adss -0x6c39 030381 istore 1 ,contw -0x6c3a 030382 setarg 0x01ff -0x6c3b 030383 istore 2 ,contw -0x6c3c 030384 fetch 1 ,mem_credit_given -0x6c3d 030385 istore 1 ,contw -0x6c3e 030386 fetch 1 ,mem_hiufcs_spp_wcredits -0x6c3f 030387 istore 1 ,contw -0x6c40 030388 jam 0 ,mem_credit_given -0x6c41 030389 rtn -: 030391 rfcomm_increase_credit_given: -0x6c42 030392 bpatchx patch36_1 ,mem_patch36 -0x6c43 030393 fetch 1 ,mem_credit_flag -0x6c44 030394 rtneq credit_enable -0x6c45 030395 fetch 2 ,mem_current_length -0x6c46 030396 rtn blank -0x6c47 030397 fetch 1 ,mem_credit_given -0x6c48 030398 increase 1 ,pdata -0x6c49 030399 store 1 ,mem_credit_given -0x6c4a 030400 rtn -: 030402 spp_process_rx_data: -0x6c4b 030403 fetch 2 ,mem_cb_receive_spp_data -0x6c4c 030404 branch callback_func -: 030406 spp_tx_rfcomm_packet: -0x6c4d 030407 bpatchx patch36_2 ,mem_patch36 -0x6c4e 030409 fetch 1 ,mem_remote_credits -0x6c4f 030410 rtn blank -0x6c50 030411 increase -1 ,pdata -0x6c51 030412 store 1 ,mem_remote_credits -0x6c52 030413 fetch 2 ,mem_pn_max_frame_size -0x6c53 030414 fetcht 2 ,mem_current_packet_length -0x6c54 030415 isub temp ,null -0x6c55 030416 branch ssp_tx_rfcomm_from_uart ,positive -0x6c56 030417 store 2 ,mem_current_packet_length -: 030418 ssp_tx_rfcomm_from_uart: -0x6c57 030419 fetch 1 ,mem_credit_given -0x6c58 030420 branch ssp_tx_rfcomm_from_uart_without_credit ,blank -0x6c59 030421 jam 1 ,mem_rfcomm_send_offset -0x6c5a 030422 fetch 1 ,mem_hiufcs_spp_wcredits -0x6c5b 030423 store 1 ,mem_rfcomm_send_fcs -0x6c5c 030424 setarg rsp_rx_uih_wdata -0x6c5d 030425 store 1 ,mem_rfcomm_send_frame_type -0x6c5e 030426 branch ssp_tx_rfcomm_from_uart_common -: 030427 ssp_tx_rfcomm_from_uart_without_credit: -0x6c5f 030428 jam 0 ,mem_rfcomm_send_offset -0x6c60 030429 fetch 1 ,mem_hiufcs_spp -0x6c61 030430 store 1 ,mem_rfcomm_send_fcs -0x6c62 030431 setarg rsp_tx_uih -0x6c63 030432 store 1 ,mem_rfcomm_send_frame_type -: 030433 ssp_tx_rfcomm_from_uart_common: -0x6c64 030434 bpatchx patch36_3 ,mem_patch36 -0x6c65 030435 fetch 2 ,mem_current_packet_length -0x6c66 030436 sub pdata ,127 ,null -0x6c67 030437 branch ssp_tx_rfcomm_from_uart_common0 ,positive -0x6c68 030438 fetch 1 ,mem_rfcomm_send_offset -0x6c69 030439 increase 1 ,pdata -0x6c6a 030440 store 1 ,mem_rfcomm_send_offset -: 030441 ssp_tx_rfcomm_from_uart_common0: -0x6c6b 030442 call get_rfcomm_snd_adss -0x6c6c 030443 fetch 2 ,mem_current_packet_length -0x6c6d 030444 increase 8 ,pdata -0x6c6e 030445 fetcht 1 ,mem_rfcomm_send_offset -0x6c6f 030446 iadd temp ,rega -0x6c70 030448 call l2cap_malloc -0x6c71 030449 store 2 ,mem_rfcomm_tx_buff_ptr -0x6c72 030450 increase 4 ,pdata -0x6c73 030451 store 2 ,mem_rfcomm_tx_payload_ptr -0x6c74 030452 copy pdata ,contw -0x6c75 030453 fetch 1 ,mem_rfcomm_send_adss -0x6c76 030454 istore 1 ,contw -0x6c77 030455 fetch 1 ,mem_rfcomm_send_frame_type -0x6c78 030456 istore 1 ,contw -0x6c79 030457 call ssp_tx_write_length -0x6c7a 030458 call ssp_tx_write_given_credit -0x6c7b 030459 bpatchx patch36_4 ,mem_patch36 -0x6c7c 030460 fetch 2 ,mem_nl_rx_data_src -0x6c7d 030461 copy pdata ,contru -0x6c7e 030462 fetch 2 ,mem_current_packet_length -0x6c7f 030463 copy pdata ,loopcnt -0x6c80 030464 call uart_copy_rx_bytes_fast -0x6c81 030465 copy contw ,temp -0x6c82 030466 copy contru ,pdata -0x6c83 030467 store 2 ,mem_nl_rx_data_src -0x6c84 030468 copy temp ,contw -0x6c85 030469 fetch 1 ,mem_rfcomm_send_fcs -0x6c86 030470 istore 1 ,contw -0x6c87 030471 fetch 2 ,mem_rfcomm_tx_buff_ptr -0x6c88 030472 copy pdata ,contw -0x6c89 030473 fetch 2 ,mem_current_packet_length -0x6c8a 030474 fetcht 1 ,mem_rfcomm_send_offset -0x6c8b 030475 iadd temp ,pdata -0x6c8c 030476 increase 4 ,pdata -0x6c8d 030477 istore 2 ,contw -0x6c8e 030478 fetch 2 ,mem_rfcomm_remote_cid -0x6c8f 030479 istore 2 ,contw -0x6c90 030480 jam 0 ,mem_credit_given -0x6c91 030481 fetch 2 ,mem_nl_rx_len_all -0x6c92 030482 beq 0 ,module_hci_command_tx_spp_tx_complete -0x6c93 030483 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet -0x6c94 030484 rtn -: 030486 ssp_tx_write_length: -0x6c95 030487 bpatchx patch36_5 ,mem_patch36 -0x6c96 030488 fetch 2 ,mem_current_packet_length -0x6c97 030489 sub pdata ,0x7f ,null -0x6c98 030490 nbranch ssp_tx_write_long_packet ,positive -0x6c99 030491 lshift pdata ,pdata -0x6c9a 030492 set1 0 ,pdata -0x6c9b 030493 istore 1 ,contw -0x6c9c 030494 rtn -: 030495 ssp_tx_write_long_packet: -0x6c9d 030496 fetch 2 ,mem_current_packet_length -0x6c9e 030497 rshift3 pdata ,pdata -0x6c9f 030498 rshift4 pdata ,temp -0x6ca0 030499 and_into 0x7f ,pdata -0x6ca1 030500 lshift pdata ,pdata -0x6ca2 030501 set0 0 ,pdata -0x6ca3 030502 istore 1 ,contw -0x6ca4 030503 istoret 1 ,contw -0x6ca5 030504 rtn -: 030505 ssp_tx_write_given_credit: -0x6ca6 030506 fetch 1 ,mem_credit_given -0x6ca7 030507 rtn blank -0x6ca8 030508 istore 1 ,contw -0x6ca9 030509 rtn -: 030514 scheduler_process: -0x6caa 030515 bpatchx patch36_6 ,mem_patch36 -0x6cab 030516 call check_51cmd -0x6cac 030517 call app_process_bb_event -0x6cad 030518 call process_conn_sm -0x6cae 030520 bpatchx patch36_7 ,mem_patch36 -0x6caf 030521 call sp_calc_sequence -0x6cb0 030522 call simple_pairing_sequence -0x6cb1 030523 call master_simple_paring_sequence -0x6cb2 030526 call l2cap_malloc_is_fifo_full -0x6cb3 030527 nrtn blank -0x6cb4 030529 call l2cap_call_proc_sigal_pending -0x6cb5 030530 call l2cap_malloc_is_fifo_full -0x6cb6 030531 nrtn blank -0x6cb7 030532 bpatchx patch37_0 ,mem_patch37 -0x6cb8 030534 call process_upper_sm -0x6cb9 030535 call l2cap_send_config_req -0x6cba 030536 call rfcomm_send_more_pkt -: 030537 scheduler_process0: -0x6cbb 030538 call scheduler_tx_disconnect_hid -0x6cbc 030539 bpatchx patch37_1 ,mem_patch37 -0x6cbd 030542 branch app_process_bt -: 030544 scheduler_tx_disconnect_hid: -0x6cbe 030545 fetch 1 ,mem_control_tasks -0x6cbf 030546 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req -0x6cc0 030547 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req -0x6cc1 030548 rtn -: 030550 scheduler_tx_l2cap_pkt: -0x6cc2 030551 bpatchx patch37_2 ,mem_patch37 -0x6cc3 030552 call l2cap_malloc_is_fifo_empty -0x6cc4 030553 rtn blank -0x6cc5 030554 fetch 1 ,mem_op -0x6cc6 030555 rtnbit1 op_txl2cap -0x6cc7 030556 call l2cap_malloc_fifo_out -0x6cc8 030557 store 2 ,mem_txptr -0x6cc9 030558 copy pdata ,contr -0x6cca 030559 ifetch 2 ,contr -0x6ccb 030560 increase 4 ,pdata -0x6ccc 030561 store 2 ,mem_tx_len -0x6ccd 030562 jam 6 ,mem_tx_lch -0x6cce 030563 bpatchx patch37_3 ,mem_patch37 -0x6ccf 030564 fetch 2 ,mem_l2cap_tx_multi_offset -0x6cd0 030565 branch scheduler_tx_l2cap_start_pkt ,blank -0x6cd1 030566 fetch 1 ,mem_op -0x6cd2 030567 rtnbit0 op_pkt_comp -0x6cd3 030568 set0 op_pkt_comp ,pdata -0x6cd4 030569 store 1 ,mem_op -0x6cd5 030570 jam 5 ,mem_tx_lch -0x6cd6 030571 fetcht 2 ,mem_l2cap_tx_multi_offset -0x6cd7 030572 fetch 2 ,mem_txptr -0x6cd8 030573 iadd temp ,pdata -0x6cd9 030574 store 2 ,mem_txptr -0x6cda 030575 fetch 2 ,mem_tx_len -0x6cdb 030576 isub temp ,pdata -0x6cdc 030577 store 2 ,mem_tx_len -: 030578 scheduler_tx_l2cap_start_pkt: -0x6cdd 030579 bpatchx patch37_4 ,mem_patch37 -0x6cde 030580 fetch 2 ,mem_tx_len -0x6cdf 030581 branch assert ,blank -0x6ce0 030582 arg l2cap_max_pkt_len ,temp -0x6ce1 030583 isub temp ,pdata -0x6ce2 030584 nbranch scheduler_tx_l2cap_last_pkt ,positive -0x6ce3 030585 bpatchx patch37_5 ,mem_patch37 -0x6ce4 030586 storet 2 ,mem_tx_len -0x6ce5 030587 fetch 2 ,mem_l2cap_tx_multi_offset -0x6ce6 030588 iadd temp ,pdata -0x6ce7 030589 store 2 ,mem_l2cap_tx_multi_offset -0x6ce8 030590 branch scheduler_tx_l2cap_pkt_end -: 030591 scheduler_tx_l2cap_last_pkt: -0x6ce9 030592 setarg 0 -0x6cea 030593 store 2 ,mem_l2cap_tx_multi_offset -: 030594 scheduler_tx_l2cap_pkt_end: -0x6ceb 030595 fetch 1 ,mem_op -0x6cec 030596 set1 op_txl2cap ,pdata -0x6ced 030597 store 1 ,mem_op -0x6cee 030598 rtn -: 030600 scheduler_start_upper_sm: -0x6cef 030601 fetch 1 ,mem_ui_profile_supported -0x6cf0 030602 bbit1 support_hid ,scheduler_start_upper_sm_hid -0x6cf1 030603 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn -0x6cf2 030604 rtn -: 030605 scheduler_start_upper_sm_hid: -0x6cf3 030606 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn -0x6cf4 030607 rtn -: 030609 process_upper_sm: -0x6cf5 030610 fetch 1 ,memui_reconnect_mode -0x6cf6 030611 nbranch process_upper_sm_reconn ,blank -: 030612 process_upper_sm_remote_page: -0x6cf7 030613 fetch 1 ,mem_upper_sm_remote_page -0x6cf8 030615 rtn blank -0x6cf9 030617 jam 0 ,mem_upper_sm_remote_page -: 030618 process_upper_sm_rp_wait: -0x6cfa 030619 rtn -: 030622 process_upper_sm_reconn: -0x6cfb 030623 bpatchx patch37_6 ,mem_patch37 -0x6cfc 030624 fetch 1 ,mem_upper_sm_reconn -0x6cfd 030625 rtn blank -0x6cfe 030626 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn -0x6cff 030627 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait -0x6d00 030628 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg -0x6d01 030629 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait -0x6d02 030630 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp -0x6d03 030631 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait -0x6d04 030632 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn -0x6d05 030633 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait -0x6d06 030634 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn -0x6d07 030635 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait -0x6d08 030636 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg -0x6d09 030637 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait -0x6d0a 030638 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn -0x6d0b 030639 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait -0x6d0c 030640 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg -0x6d0d 030641 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait -0x6d0e 030642 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn -0x6d0f 030643 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait -0x6d10 030644 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg -0x6d11 030645 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait -0x6d12 030646 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm -0x6d13 030647 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait -0x6d14 030648 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn -0x6d15 030649 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait -0x6d16 030650 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm -0x6d17 030651 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait -0x6d18 030652 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms -0x6d19 030653 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait -: 030654 process_upper_sm_reconn_wait: -0x6d1a 030655 rtn -: 030656 process_upper_sm_reconn_sdp_conn: -0x6d1b 030657 call upper_sm_send_sdp_conn -0x6d1c 030658 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn -0x6d1d 030659 fetch 1 ,mem_sdp_state -0x6d1e 030660 set1 l2cap_channel_state_conn_req ,pdata -0x6d1f 030661 store 1 ,mem_sdp_state -0x6d20 030662 rtn -: 030663 process_upper_sm_reconn_sdp_cfg: -0x6d21 030664 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn -0x6d22 030665 fetch 1 ,mem_sdp_state -0x6d23 030666 rtnbit1 l2cap_channel_state_snd_cfg_req -0x6d24 030667 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn -0x6d25 030668 call upper_sm_send_sdp_cfg -0x6d26 030669 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn -0x6d27 030670 fetch 1 ,mem_sdp_state -0x6d28 030671 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d29 030672 store 1 ,mem_sdp_state -0x6d2a 030673 rtn -: 030674 process_upper_sm_reconn_ss_spp: -0x6d2b 030675 call l2cap_malloc_is_fifo_empty -0x6d2c 030676 nrtn blank -0x6d2d 030677 call upper_sm_send_ss_spp -0x6d2e 030678 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn -0x6d2f 030679 rtn -: 030680 process_upper_sm_reconn_sdp_disconn: -0x6d30 030681 call upper_sm_send_sdp_disconn -0x6d31 030682 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn -0x6d32 030683 rtn -: 030684 process_upper_sm_reconn_hid_ctrl_conn: -0x6d33 030685 call upper_sm_send_hid_ctrl_conn -0x6d34 030686 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn -0x6d35 030687 fetch 1 ,mem_hid_control_state -0x6d36 030688 set1 l2cap_channel_state_conn_req ,pdata -0x6d37 030689 store 1 ,mem_hid_control_state -0x6d38 030690 rtn -: 030691 process_upper_sm_reconn_hid_ctrl_cfg: -0x6d39 030692 call upper_sm_send_hid_ctrl_cfg -0x6d3a 030693 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn -0x6d3b 030694 fetch 1 ,mem_hid_control_state -0x6d3c 030695 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d3d 030696 store 1 ,mem_hid_control_state -0x6d3e 030697 rtn -: 030698 process_upper_sm_reconn_hid_int_conn: -0x6d3f 030699 call upper_sm_send_hid_int_conn -0x6d40 030700 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn -0x6d41 030701 fetch 1 ,mem_hid_interrupt_state -0x6d42 030702 set1 l2cap_channel_state_conn_req ,pdata -0x6d43 030703 store 1 ,mem_hid_interrupt_state -0x6d44 030704 rtn -: 030705 process_upper_sm_reconn_hid_int_cfg: -0x6d45 030706 call upper_sm_send_hid_int_cfg -0x6d46 030707 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn -0x6d47 030708 fetch 1 ,mem_hid_interrupt_state -0x6d48 030709 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d49 030710 store 1 ,mem_hid_interrupt_state -0x6d4a 030711 rtn -: 030712 process_upper_sm_reconn_rfcomm_conn: -0x6d4b 030713 call upper_sm_send_rfcomm_conn -0x6d4c 030714 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn -0x6d4d 030715 fetch 1 ,mem_rfcomm_state -0x6d4e 030716 set1 l2cap_channel_state_conn_req ,pdata -0x6d4f 030717 store 1 ,mem_rfcomm_state -0x6d50 030718 rtn -: 030719 process_upper_sm_reconn_rfcomm_cfg: -0x6d51 030720 call upper_sm_send_rfcomm_cfg -0x6d52 030721 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn -0x6d53 030722 fetch 1 ,mem_rfcomm_state -0x6d54 030723 set1 l2cap_channel_state_snd_cfg_req ,pdata -0x6d55 030724 store 1 ,mem_rfcomm_state -0x6d56 030725 rtn -: 030726 process_upper_sm_reconn_rfcomm_sabm: -0x6d57 030727 call upper_sm_send_rfcomm_sabm -0x6d58 030728 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn -0x6d59 030729 fetch 1 ,mem_rfcomm_state -0x6d5a 030730 set1 l2cap_channel_rfcomm_only_sabm ,pdata -0x6d5b 030731 store 1 ,mem_rfcomm_state -0x6d5c 030732 rtn -: 030733 process_upper_sm_reconn_spp_cmd_pn: -0x6d5d 030734 call upper_sm_send_spp_cmd_pn -0x6d5e 030735 fetch 1 ,mem_spp_state -0x6d5f 030736 set1 rfcomm_channel_state_pn_cmd -0x6d60 030737 store 1 ,mem_spp_state -0x6d61 030738 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn -0x6d62 030739 rtn -: 030740 process_upper_sm_reconn_spp_sabm: -0x6d63 030741 call upper_sm_send_spp_sabm -0x6d64 030742 fetch 1 ,mem_spp_state -0x6d65 030743 set1 rfcomm_channel_state_sabm -0x6d66 030744 store 1 ,mem_spp_state -0x6d67 030745 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn -0x6d68 030746 fetch 1 ,mem_remote_spp_channel -0x6d69 030747 lshift3 pdata ,pdata -0x6d6a 030748 or_into 3 ,pdata -0x6d6b 030749 arg mem_hiufcs_spp ,temp -0x6d6c 030750 storet 2 ,mem_contw_temp -0x6d6d 030751 branch rfcomm_save_fcs_uih -: 030752 process_upper_sm_reconn_spp_cmd_ms: -0x6d6e 030753 call upper_sm_send_spp_cmd_ms -0x6d6f 030754 fetch 1 ,mem_spp_state -0x6d70 030755 set1 rfcomm_channel_state_snd_ms_cmd -0x6d71 030756 store 1 ,mem_spp_state -0x6d72 030757 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn -0x6d73 030758 rtn -: 030760 process_upper_sm_reconn_sdp_conn_wait: -0x6d74 030761 fetch 1 ,mem_sdp_state -0x6d75 030762 rtnbit0 l2cap_channel_state_conn_res -0x6d76 030763 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn -0x6d77 030764 branch process_upper_sm_reconn -: 030765 process_upper_sm_reconn_sdp_cfg_wait: -0x6d78 030766 fetch 1 ,mem_sdp_state -0x6d79 030767 rtnne l2cap_channel_setup_complete -0x6d7a 030768 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn -: 030769 process_upper_sm_reconn_ss_spp_wait: -0x6d7b 030770 fetch 1 ,mem_message_to_uppersm -0x6d7c 030771 rtnne recieve_ss_reasult_hf -0x6d7d 030772 jam 0 ,mem_message_to_uppersm -0x6d7e 030773 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn -0x6d7f 030774 branch process_upper_sm_reconn -: 030775 process_upper_sm_reconn_sdp_disconn_wait: -0x6d80 030776 fetch 1 ,mem_sdp_state -0x6d81 030777 nrtn blank -0x6d82 030778 fetch 1 ,mem_ui_profile_supported -0x6d83 030779 bbit1 support_hid ,process_upper_sm_reconn_setup_hid -0x6d84 030780 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm -0x6d85 030781 branch process_upper_sm_reconn_termination -: 030782 process_upper_sm_reconn_hid_ctrl_conn_wait: -0x6d86 030783 fetch 1 ,mem_hid_control_state -0x6d87 030784 rtnbit0 l2cap_channel_state_conn_res -0x6d88 030785 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn -0x6d89 030786 branch process_upper_sm_reconn -: 030787 process_upper_sm_reconn_hid_ctrl_cfg_wait: -0x6d8a 030788 fetch 1 ,mem_hid_control_state -0x6d8b 030789 rtnne l2cap_channel_setup_complete -0x6d8c 030790 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn -0x6d8d 030791 branch process_upper_sm_reconn -: 030792 process_upper_sm_reconn_hid_int_conn_wait: -0x6d8e 030793 fetch 1 ,mem_hid_interrupt_state -0x6d8f 030794 rtnbit0 l2cap_channel_state_conn_res -0x6d90 030795 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn -0x6d91 030796 branch process_upper_sm_reconn -: 030797 process_upper_sm_reconn_hid_int_cfg_wait: -0x6d92 030798 fetch 1 ,mem_hid_interrupt_state -0x6d93 030799 rtnne l2cap_channel_setup_complete -0x6d94 030800 fetch 1 ,mem_ui_profile_supported -0x6d95 030801 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm -0x6d96 030802 branch process_upper_sm_reconn_termination -: 030803 process_upper_sm_reconn_rfcomm_conn_wait: -0x6d97 030804 fetch 1 ,mem_rfcomm_state -0x6d98 030805 rtnbit0 l2cap_channel_state_conn_res -0x6d99 030806 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn -0x6d9a 030807 branch process_upper_sm_reconn -: 030808 process_upper_sm_reconn_rfcomm_cfg_wait: -0x6d9b 030809 fetch 1 ,mem_rfcomm_state -0x6d9c 030810 rtnne l2cap_channel_setup_complete -0x6d9d 030811 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn -0x6d9e 030812 branch process_upper_sm_reconn -: 030813 process_upper_sm_reconn_rfcomm_sabm_wait: -0x6d9f 030814 fetch 1 ,mem_rfcomm_state -0x6da0 030815 rtnne l2cap_channel_rfcomm_dlci0_opened -0x6da1 030816 fetch 1 ,mem_ui_profile_supported -0x6da2 030817 bbit1 support_spp ,process_upper_sm_reconn_setup_spp -0x6da3 030818 branch process_upper_sm_reconn_termination -: 030819 process_upper_sm_reconn_spp_cmd_pn_wait: -0x6da4 030820 fetch 1 ,mem_spp_state -0x6da5 030821 rtnbit0 rfcomm_channel_state_pn_res -0x6da6 030822 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn -0x6da7 030823 branch process_upper_sm_reconn -: 030824 process_upper_sm_reconn_spp_sabm_wait: -0x6da8 030825 fetch 1 ,mem_spp_state -0x6da9 030826 rtnbit0 rfcomm_channel_state_ua -0x6daa 030827 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn -0x6dab 030828 branch process_upper_sm_reconn -: 030829 process_upper_sm_reconn_spp_cmd_ms_wait: -0x6dac 030830 fetch 1 ,mem_spp_state -0x6dad 030831 rtnne rfcomm_channel_setup_complete -0x6dae 030832 branch process_upper_sm_reconn_termination -: 030834 process_upper_sm_reconn_setup_hid: -0x6daf 030835 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn -0x6db0 030836 branch process_upper_sm_reconn -: 030838 process_upper_sm_reconn_setup_rfcomm: -0x6db1 030839 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn -0x6db2 030840 branch process_upper_sm_reconn -: 030841 process_upper_sm_reconn_setup_spp: -0x6db3 030842 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn -0x6db4 030843 branch process_upper_sm_reconn -: 030847 process_upper_sm_reconn_termination: -0x6db5 030848 jam 0 ,mem_upper_sm_reconn -0x6db6 030849 rtn -: 030850 upper_sm_send_sdp_conn: -0x6db7 030851 bpatchx patch37_7 ,mem_patch37 -0x6db8 030852 call l2cap_malloc_signal_channel -0x6db9 030853 setarg psm_sdp -0x6dba 030854 copy pdata ,temp -0x6dbb 030855 setarg l2cap_sdp_channel -0x6dbc 030856 copy pdata ,timeup -0x6dbd 030857 branch ml2cap_send_signal_connect_req -: 030859 upper_sm_send_sdp_cfg: -0x6dbe 030860 bpatchx patch38_0 ,mem_patch38 -0x6dbf 030861 call l2cap_malloc_signal_channel -0x6dc0 030862 fetch 2 ,mem_sdp_remote_cid -0x6dc1 030863 copy pdata ,temp -0x6dc2 030864 branch ml2cap_send_signal_config_req -: 030866 upper_sm_send_sdp_disconn: -0x6dc3 030867 bpatchx patch38_1 ,mem_patch38 -0x6dc4 030868 call l2cap_malloc_signal_channel -0x6dc5 030869 fetch 2 ,mem_sdp_remote_cid -0x6dc6 030870 copy pdata ,temp -0x6dc7 030871 arg l2cap_sdp_channel ,timeup -0x6dc8 030872 call ml2cap_send_signal_disconn_req -0x6dc9 030873 fetch 1 ,mem_sdp_state -0x6dca 030874 set0 l2cap_channel_state_rcv_cfg_res ,pdata -0x6dcb 030875 store 1 ,mem_sdp_state -0x6dcc 030876 rtn -: 030878 upper_sm_send_ss_spp: -0x6dcd 030879 bpatchx patch38_2 ,mem_patch38 -0x6dce 030880 call l2cap_malloc_sdp_channel -0x6dcf 030881 call sdp_send_spp_request -0x6dd0 030882 branch msdp_send_req_done -: 030884 upper_sm_send_rfcomm_conn: -0x6dd1 030885 bpatchx patch38_3 ,mem_patch38 -0x6dd2 030886 call l2cap_malloc_signal_channel -0x6dd3 030887 setarg psm_rfcomm -0x6dd4 030888 copy pdata ,temp -0x6dd5 030889 setarg l2cap_rfcomm_channel -0x6dd6 030890 copy pdata ,timeup -0x6dd7 030891 branch ml2cap_send_signal_connect_req -: 030893 upper_sm_send_rfcomm_cfg: -0x6dd8 030894 bpatchx patch38_4 ,mem_patch38 -0x6dd9 030895 call l2cap_malloc_signal_channel -0x6dda 030896 fetch 2 ,mem_rfcomm_remote_cid -0x6ddb 030897 copy pdata ,temp -0x6ddc 030898 branch ml2cap_send_signal_config_req -: 030900 upper_sm_send_hid_ctrl_conn: -0x6ddd 030901 bpatchx patch38_5 ,mem_patch38 -0x6dde 030902 call l2cap_malloc_signal_channel -0x6ddf 030903 setarg psm_hid_control -0x6de0 030904 copy pdata ,temp -0x6de1 030905 setarg l2cap_hid_control_channel -0x6de2 030906 copy pdata ,timeup -0x6de3 030907 branch ml2cap_send_signal_connect_req -: 030909 upper_sm_send_hid_ctrl_cfg: -0x6de4 030910 bpatchx patch38_6 ,mem_patch38 -0x6de5 030911 call l2cap_malloc_signal_channel -0x6de6 030912 fetch 2 ,mem_hid_ctrl_remote_cid -0x6de7 030913 copy pdata ,temp -0x6de8 030914 branch ml2cap_send_signal_config_req -: 030916 upper_sm_send_hid_int_conn: -0x6de9 030917 bpatchx patch38_7 ,mem_patch38 -0x6dea 030918 call l2cap_malloc_signal_channel -0x6deb 030919 setarg psm_hid_interrupt -0x6dec 030920 copy pdata ,temp -0x6ded 030921 setarg l2cap_hid_interrupt_channel -0x6dee 030922 copy pdata ,timeup -0x6def 030923 branch ml2cap_send_signal_connect_req -: 030925 upper_sm_send_hid_int_cfg: -0x6df0 030926 bpatchx patch39_0 ,mem_patch39 -0x6df1 030927 call l2cap_malloc_signal_channel -0x6df2 030928 fetch 2 ,mem_hid_int_remote_cid -0x6df3 030929 copy pdata ,temp -0x6df4 030930 branch ml2cap_send_signal_config_req -: 030932 upper_sm_send_rfcomm_sabm: -0x6df5 030933 bpatchx patch39_1 ,mem_patch39 -0x6df6 030934 call l2cap_malloc_rfcomm_channel -0x6df7 030936 jam 3 ,mem_current_adss -0x6df8 030937 jam 0x1c ,mem_current_fcs -0x6df9 030938 call rfcomm_send_sabm -0x6dfa 030939 jam 1 ,mem_rfcomm_initiator -0x6dfb 030940 rtn -: 030942 upper_sm_send_spp_cmd_pn: -0x6dfc 030943 bpatchx patch39_2 ,mem_patch39 -0x6dfd 030944 call l2cap_malloc_rfcomm_channel -0x6dfe 030945 fetcht 1 ,mem_remote_spp_channel -0x6dff 030946 call channel_to_dlci -0x6e00 030947 storet 1 ,mem_pn_dlci -0x6e01 030948 branch rfcomm_send_param_neg_cmd -: 030950 upper_sm_send_spp_sabm: -0x6e02 030951 bpatchx patch39_3 ,mem_patch39 -0x6e03 030952 call l2cap_malloc_rfcomm_channel -0x6e04 030953 fetcht 1 ,mem_pn_dlci -0x6e05 030954 call dlci_to_address_cmd -0x6e06 030955 call rfcomm_calculate_fcs_sabm -0x6e07 030956 store 1 ,mem_current_fcs -0x6e08 030957 fetcht 1 ,mem_pn_dlci -0x6e09 030958 call dlci_to_address_cmd -0x6e0a 030959 storet 1 ,mem_current_adss -0x6e0b 030960 branch rfcomm_send_sabm -: 030962 upper_sm_send_spp_cmd_ms: -0x6e0c 030963 bpatchx patch39_4 ,mem_patch39 -0x6e0d 030964 call l2cap_malloc_rfcomm_channel -0x6e0e 030965 fetcht 1 ,mem_pn_dlci -0x6e0f 030966 call dlci_to_address_cmd -0x6e10 030967 branch rfcomm_send_modem_status_cmd -: 030980 sdp_process: -0x6e11 030981 bpatchx patch39_5 ,mem_patch39 -0x6e12 030982 fetch 2 ,mem_l2cap_payload_ptr -0x6e13 030983 iforce contr -0x6e14 030986 ifetch 1 ,contr -0x6e15 030987 copy pdata ,regb -0x6e16 030988 store 1 ,mem_sdp_pduid -0x6e17 030989 ifetch 2 ,contr -0x6e18 030990 store 2 ,mem_sdp_transactionid -0x6e19 030991 ifetch 1 ,contr -0x6e1a 030992 lshift8 pdata ,timeup -0x6e1b 030993 ifetch 1 ,contr -0x6e1c 030994 iadd timeup ,timeup -0x6e1d 030995 bpatchx patch39_6 ,mem_patch39 -0x6e1e 030996 copy contr ,temp -0x6e1f 030997 arg 4 ,loopcnt -0x6e20 030998 arg mem_sdp_handle_list ,contw -0x6e21 030999 call memset0 -0x6e22 031000 copy temp ,contr -0x6e23 031001 deposit regb -0x6e24 031002 beq sdp_error_res ,sdp_process_error_res -0x6e25 031003 beq sdp_search_req ,sdp_process_ss_req -0x6e26 031004 beq sdp_search_res ,sdp_process_ss_res -0x6e27 031005 beq sdp_attribute_req ,sdp_process_sa_req -0x6e28 031006 beq sdp_attribute_res ,sdp_process_sa_res -0x6e29 031007 beq sdp_searchattrib_req ,sdp_process_ssa_req -0x6e2a 031008 beq sdp_searchattrib_res ,sdp_process_ssa_res -0x6e2b 031009 branch sdp_insufficient_resource -: 031020 sdp_process_ss_req: -0x6e2c 031021 bpatchx patch39_7 ,mem_patch39 -0x6e2d 031022 call ask_serviceclassid -0x6e2e 031023 compare 1 ,temp ,0xff -0x6e2f 031024 branch ss_empty_rsp ,true -0x6e30 031025 compare 0xff ,temp ,0xff -0x6e31 031026 branch sdp_invalid_request_syntax ,true -0x6e32 031028 ifetch 2 ,contr -0x6e33 031029 store 2 ,mem_sdp_record_maxcnt -0x6e34 031030 increase -2 ,timeup -0x6e35 031032 increase -1 ,timeup -0x6e36 031033 nbranch sdp_invalid_pdu_size ,zero -0x6e37 031034 arg mem_sdp_uuid_search_ptr ,timeup -0x6e38 031035 ifetch 2 ,timeup -0x6e39 031036 rtn blank -0x6e3a 031037 call search_all_uuid -0x6e3b 031038 call l2cap_get_sdp_tx_payload -0x6e3c 031039 force 3 ,pdata -0x6e3d 031040 istore 1 ,contw -0x6e3e 031041 fetch 2 ,mem_sdp_transactionid -0x6e3f 031042 istore 2 ,contw -0x6e40 031043 lshift2 queue ,pdata -0x6e41 031044 add pdata ,5 ,pdata -0x6e42 031045 add pdata ,5 ,regc -0x6e43 031046 byteswap pdata ,pdata -0x6e44 031047 istore 2 ,contw -0x6e45 031048 deposit queue -0x6e46 031049 byteswap pdata ,pdata -0x6e47 031050 istore 2 ,contw -0x6e48 031051 istore 2 ,contw -0x6e49 031052 arg mem_sdp_handle_list ,contr -0x6e4a 031053 copy queue ,loopcnt -0x6e4b 031054 branch ss_req_blank ,zero -: 031055 ss_req_loop: -0x6e4c 031056 ifetch 4 ,contr -0x6e4d 031057 istore 4 ,contw -0x6e4e 031058 loop ss_req_loop -: 031059 ss_req_blank: -0x6e4f 031060 force 0 ,pdata -0x6e50 031061 istore 1 ,contw -0x6e51 031062 deposit regc -0x6e52 031063 store 2 ,mem_sdp_tx_pkt_length -0x6e53 031065 rtn -: 031076 sdp_process_sa_req: -0x6e54 031077 bpatchx patch3a_0 ,mem_patch3a -0x6e55 031078 ifetch 4 ,contr -0x6e56 031079 store 4 ,mem_sdp_record_handle -0x6e57 031080 increase -4 ,timeup -0x6e58 031081 call sdp_store_maxbyte -0x6e59 031082 store 2 ,mem_sdp_attribute_maxbyte -0x6e5a 031083 increase -2 ,timeup -0x6e5b 031084 call dataelementtype6 -0x6e5c 031085 branch sdp_invalid_request_syntax ,zero -0x6e5d 031086 compare 5 ,rega ,0xff -0x6e5e 031088 branch sa_judge_wholerange ,true -: 031089 sa_isnot_wholerange: -0x6e5f 031090 arg mem_sdp_attrib_list ,contw -0x6e60 031091 force 0 ,queue -0x6e61 031092 branch sa_req_loop -: 031093 sa_judge_wholerange: -0x6e62 031094 ifetch 1 ,contr -0x6e63 031095 bne sdp_attribute_range ,sdp_invalid_request_syntax -0x6e64 031096 ifetch 2 ,contr -0x6e65 031097 nbranch sa_judge_wholerange_false1 ,blank -0x6e66 031098 ifetch 1 ,contr -0x6e67 031099 bne 0xff ,sa_judge_wholerange_false2 -0x6e68 031100 ifetch 1 ,contr -0x6e69 031101 bne 0xff ,sa_judge_wholerange_false3 -0x6e6a 031102 branch sa_req_all -: 031103 sa_judge_wholerange_false3: -0x6e6b 031104 increase -5 ,contr -0x6e6c 031105 branch sa_isnot_wholerange -: 031106 sa_judge_wholerange_false2: -0x6e6d 031107 increase -4 ,contr -0x6e6e 031108 branch sa_isnot_wholerange -: 031109 sa_judge_wholerange_false1: -0x6e6f 031110 increase -3 ,contr -0x6e70 031111 branch sa_isnot_wholerange -: 031112 sa_req_loop: -0x6e71 031113 ifetch 1 ,contr -0x6e72 031114 beq sdp_attribute_id ,sa_req_one_id -0x6e73 031115 beq sdp_attribute_range ,sa_req_range -: 031116 sa_req_range: -0x6e74 031117 ifetch 2 ,contr -0x6e75 031118 istore 2 ,contw -0x6e76 031119 increase 1 ,queue -0x6e77 031120 byteswap pdata ,regb -0x6e78 031121 ifetch 2 ,contr -0x6e79 031122 byteswap pdata ,pdata -: 031123 sa_req_range_id_increase: -0x6e7a 031124 increase 1 ,regb -0x6e7b 031125 isub regb ,null -0x6e7c 031126 nbranch sa_req_range_id_finish ,positive -0x6e7d 031127 copy pdata ,regc -0x6e7e 031128 byteswap regb ,pdata -0x6e7f 031129 istore 2 ,contw -0x6e80 031130 increase 1 ,queue -0x6e81 031131 copy regc ,pdata -0x6e82 031132 branch sa_req_range_id_increase -: 031133 sa_req_range_id_finish: -0x6e83 031134 increase -5 ,timeup -0x6e84 031135 increase -5 ,rega -0x6e85 031136 branch sa_req_check_next_id -: 031137 sa_req_one_id: -0x6e86 031138 ifetch 2 ,contr -0x6e87 031139 istore 2 ,contw -0x6e88 031140 increase 1 ,queue -0x6e89 031141 increase -3 ,timeup -0x6e8a 031142 increase -3 ,rega -: 031143 sa_req_check_next_id: -0x6e8b 031144 nbranch sdp_invalid_request_syntax ,positive -0x6e8c 031145 nbranch sa_req_loop ,zero -0x6e8d 031146 increase -1 ,timeup -0x6e8e 031147 nbranch sdp_invalid_request_syntax ,zero -0x6e8f 031149 call l2cap_get_sdp_tx_payload -0x6e90 031150 increase 10 ,contw -0x6e91 031151 arg mem_sdp_attrib_list ,rega -: 031152 sa_req_handle_attributelist_next: -0x6e92 031153 copy queue ,pdata -0x6e93 031154 branch sa_req_handle_attributelist_end ,blank -0x6e94 031155 ifetch 2 ,rega -0x6e95 031156 branch sa_req_handle_attributelist_end ,blank -0x6e96 031157 iforce regb -0x6e97 031158 fetch 4 ,mem_sdp_record_handle -0x6e98 031159 iforce temp -0x6e99 031160 call search_handle_attrib -0x6e9a 031161 copy contr ,pdata -0x6e9b 031162 branch sa_req_handle_attributelist_notfound ,blank -0x6e9c 031163 increase -3 ,contr -0x6e9d 031164 ifetch 3 ,contr -0x6e9e 031165 istore 3 ,contw -0x6e9f 031166 call sdp_data_len -0x6ea0 031167 iforce loopcnt -0x6ea1 031168 call memcpy -: 031169 sa_req_handle_attributelist_notfound: -0x6ea2 031170 increase 2 ,rega -0x6ea3 031171 increase -1 ,queue -0x6ea4 031172 branch sa_req_handle_attributelist_next -: 031174 sa_req_handle_attributelist_end: -0x6ea5 031175 arg sdp_attribute_res ,rega -0x6ea6 031176 call ssa_req_range_lastfreg_common -0x6ea7 031177 fetch 2 ,mem_sdp_tx_pkt_length -0x6ea8 031178 beq 11 ,sa_empty_rsp -0x6ea9 031179 branch ssa_req_range_attrbutes_length_no_continue -: 031182 sdp_store_continue_common: -0x6eaa 031183 ifetch 1 ,contr -0x6eab 031184 beq 0 ,sdp_store_continue_0byte -0x6eac 031185 beq 1 ,sdp_store_continue_1byte -0x6ead 031186 beq 2 ,sdp_store_continue_2byte -: 031187 sdp_store_continue_0byte: -0x6eae 031188 increase -1 ,timeup -0x6eaf 031189 branch sdp_store_continue_end -: 031190 sdp_store_continue_1byte: -0x6eb0 031191 ifetch 1 ,contr -0x6eb1 031192 increase -2 ,timeup -0x6eb2 031193 branch sdp_store_continue_end -: 031194 sdp_store_continue_2byte: -0x6eb3 031195 ifetch 2 ,contr -0x6eb4 031196 byteswap pdata ,pdata -0x6eb5 031197 increase -3 ,timeup -: 031198 sdp_store_continue_end: -0x6eb6 031199 store 2 ,mem_sdp_continue_byte -0x6eb7 031200 rtn -: 031202 sa_req_all: -0x6eb8 031203 increase -5 ,timeup -0x6eb9 031204 call sdp_store_continue_common -0x6eba 031205 nbranch sdp_invalid_pdu_size ,zero -0x6ebb 031206 fetcht 4 ,mem_sdp_record_handle -0x6ebc 031207 call search_handle -0x6ebd 031208 nbranch sdp_invalid_service_record_handle ,zero -0x6ebe 031209 copy contr ,rega -0x6ebf 031210 call l2cap_get_sdp_tx_payload -0x6ec0 031211 copy rega ,contr -0x6ec1 031212 increase 3 ,contw -0x6ec2 031213 copy contr ,timeup -0x6ec3 031214 call sdp_get_data -0x6ec4 031215 copy pdata ,rega -0x6ec5 031217 fetch 2 ,mem_sdp_continue_byte -0x6ec6 031218 copy pdata ,regb -0x6ec7 031219 copy rega ,pdata -0x6ec8 031220 isub regb ,regb -0x6ec9 031221 fetch 2 ,mem_sdp_attribute_maxbyte -0x6eca 031222 isub regb ,null -0x6ecb 031223 nbranch sa_req_all_fragment_sdp ,positive -0x6ecc 031225 disable user -0x6ecd 031226 fetch 2 ,mem_sdp_continue_byte -0x6ece 031227 branch sa_req_all_fisrt_fragment ,blank -0x6ecf 031228 iadd timeup ,contr -0x6ed0 031229 increase 3 ,regb -0x6ed1 031230 copy regb ,loopcnt -0x6ed2 031231 copy loopcnt ,pdata -0x6ed3 031232 increase 3 ,pdata -0x6ed4 031233 byteswap pdata ,pdata -0x6ed5 031234 istore 2 ,contw -0x6ed6 031235 copy loopcnt ,pdata -0x6ed7 031236 byteswap pdata ,pdata -0x6ed8 031237 istore 2 ,contw -0x6ed9 031238 branch sa_req_all_answer_attributelist_full_loop -: 031239 sa_req_all_fisrt_fragment: -0x6eda 031240 add rega ,6 ,loopcnt -0x6edb 031241 branch sa_req_all_parlength_continue_byte ,user -0x6edc 031242 byteswap loopcnt ,pdata -0x6edd 031243 branch sa_req_all_parlength_continue_byte_end -: 031244 sa_req_all_parlength_continue_byte: -0x6ede 031245 copy loopcnt ,pdata -0x6edf 031246 increase 2 ,pdata -0x6ee0 031247 byteswap pdata ,pdata -: 031248 sa_req_all_parlength_continue_byte_end: -0x6ee1 031249 istore 2 ,contw -0x6ee2 031250 increase -3 ,loopcnt -0x6ee3 031251 byteswap loopcnt ,pdata -0x6ee4 031252 istore 2 ,contw -0x6ee5 031253 copy timeup ,contr -0x6ee6 031254 branch sa_req_all_answer_attributelist_full_loop -: 031255 sa_req_all_fragment_sdp: -0x6ee7 031256 enable user -0x6ee8 031258 fetch 2 ,mem_sdp_attribute_maxbyte -0x6ee9 031259 copy pdata ,rega -0x6eea 031260 copy rega ,loopcnt -0x6eeb 031261 fetch 2 ,mem_sdp_continue_byte -0x6eec 031262 branch sa_req_all_fisrt_fragment ,blank -0x6eed 031263 iadd timeup ,contr -0x6eee 031264 copy rega ,pdata -0x6eef 031265 increase 5 ,pdata -0x6ef0 031266 byteswap pdata ,pdata -0x6ef1 031267 istore 2 ,contw -0x6ef2 031268 copy rega ,pdata -0x6ef3 031269 byteswap pdata ,pdata -0x6ef4 031270 istore 2 ,contw -: 031271 sa_req_all_answer_attributelist_full_loop: -0x6ef5 031272 call memcpy -0x6ef6 031273 nbranch sa_req_all_last_frag_continue ,user -0x6ef7 031274 force 2 ,pdata -0x6ef8 031275 istore 1 ,contw -0x6ef9 031276 copy contr ,pdata -0x6efa 031277 isub timeup ,pdata -0x6efb 031278 byteswap pdata ,pdata -0x6efc 031279 istore 2 ,contw -0x6efd 031280 branch sa_req_all_frag_end -: 031281 sa_req_all_last_frag_continue: -0x6efe 031282 force 0 ,pdata -0x6eff 031283 istore 1 ,contw -: 031284 sa_req_all_frag_end: -0x6f00 031285 arg sdp_attribute_res ,rega -0x6f01 031286 branch ssa_req_range_common -: 031297 sdp_process_ssa_req: -0x6f02 031298 bpatchx patch3a_1 ,mem_patch3a -0x6f03 031299 call ask_serviceclassid -0x6f04 031300 compare 0xff ,temp ,0xff -0x6f05 031301 branch sdp_invalid_request_syntax ,true -0x6f06 031302 call sdp_store_maxbyte -0x6f07 031303 store 2 ,mem_sdp_attribute_maxbyte -0x6f08 031304 increase -2 ,timeup -0x6f09 031305 call dataelementtype6 -0x6f0a 031306 arg mem_sdp_attrib_list ,contw -0x6f0b 031307 force 0 ,queue -: 031308 ssa_req_loop: -0x6f0c 031309 ifetch 1 ,contr -0x6f0d 031310 beq sdp_attribute_range ,ssa_req_range -0x6f0e 031311 ifetch 2 ,contr -0x6f0f 031312 istore 2 ,contw -0x6f10 031313 increase 1 ,queue -0x6f11 031314 increase -3 ,timeup -0x6f12 031315 increase -3 ,rega -0x6f13 031316 nbranch sdp_invalid_request_syntax ,positive -0x6f14 031317 nbranch ssa_req_loop ,zero -0x6f15 031318 increase -1 ,timeup -0x6f16 031319 nbranch sdp_invalid_request_syntax ,zero -0x6f17 031320 call l2cap_get_sdp_tx_payload -0x6f18 031321 increase 13 ,contw -0x6f19 031322 fetch 2 ,mem_sdp_uuid_search_ptr -0x6f1a 031323 iforce regc -0x6f1b 031324 arg mem_sdp_attrib_list ,rega -: 031325 ssa_req_attributelist_next: -0x6f1c 031326 ifetch 2 ,rega -0x6f1d 031327 branch ssa_req_attributelist_end ,blank -0x6f1e 031328 iforce regb -0x6f1f 031329 call search_attrib -0x6f20 031330 branch ssa_req_attributelist_notfound ,blank -0x6f21 031331 increase -3 ,contr -0x6f22 031332 ifetch 3 ,contr -0x6f23 031333 istore 3 ,contw -0x6f24 031334 call sdp_data_len -0x6f25 031335 iforce loopcnt -0x6f26 031336 call memcpy -: 031337 ssa_req_attributelist_notfound: -0x6f27 031338 increase 2 ,rega -0x6f28 031339 branch ssa_req_attributelist_next -: 031341 ssa_req_attributelist_end: -0x6f29 031342 call ssa_req_range_lastfreg -0x6f2a 031343 fetch 2 ,mem_sdp_tx_pkt_length -0x6f2b 031344 beq 14 ,ssa_empty_rsp -0x6f2c 031345 call ssa_req_range_attrbutes_length_no_continue -0x6f2d 031346 branch ssa_req_range_attrbutes_length_no_continue -: 031349 sdp_store_maxbyte: -0x6f2e 031350 ifetch 2 ,contr -0x6f2f 031351 byteswap pdata ,pdata -0x6f30 031352 increase -3 ,pdata -0x6f31 031353 arg 200 ,temp -0x6f32 031354 isub temp ,null -0x6f33 031355 nrtn positive -0x6f34 031356 setarg 200 -0x6f35 031357 rtn -: 031360 ssa_req_range: -0x6f36 031361 increase 4 ,contr -0x6f37 031362 increase -5 ,timeup -0x6f38 031363 increase -5 ,rega -0x6f39 031364 nbranch sdp_invalid_request_syntax ,zero -0x6f3a 031365 call sdp_store_continue_common -0x6f3b 031366 nbranch sdp_invalid_pdu_size ,zero -0x6f3c 031367 arg mem_sdp_uuid_search_ptr ,timeup -0x6f3d 031368 call search_all_uuid -0x6f3e 031369 deposit queue -0x6f3f 031370 branch ssa_empty_rsp ,blank -0x6f40 031371 store 1 ,mem_handle_humber -0x6f41 031373 copy regb ,pdata -0x6f42 031374 store 2 ,mem_sdp_all_length -0x6f43 031375 arg 0 ,queue -0x6f44 031376 arg 0 ,rega -0x6f45 031377 call l2cap_get_sdp_tx_payload -0x6f46 031378 increase 10 ,contw -: 031379 ssa_req_range_find_handle: -0x6f47 031380 call ssa_req_range_get_length -0x6f48 031381 nbranch assert ,user -0x6f49 031382 copy contr ,timeup -0x6f4a 031383 copy pdata ,regc -0x6f4b 031384 iadd rega ,rega -0x6f4c 031387 fetch 2 ,mem_sdp_continue_byte -0x6f4d 031388 copy pdata ,regb -0x6f4e 031389 branch ssa_req_range_first_freg ,blank -: 031390 ssa_req_range_later_freg_with_continue: -0x6f4f 031391 copy rega ,pdata -0x6f50 031392 isub regb ,regb -0x6f51 031393 branch ssa_req_range_next_handle ,zero -0x6f52 031394 nbranch ssa_req_range_next_handle ,positive -0x6f53 031395 fetch 2 ,mem_sdp_attribute_maxbyte -0x6f54 031396 isub regb ,null -0x6f55 031397 branch ssa_req_range_maxbyte_with_continue ,zero -0x6f56 031398 nbranch ssa_req_range_maxbyte_with_continue ,positive -: 031401 ssa_req_range_send_not_maxbyte: -0x6f57 031402 copy regb ,loopcnt -0x6f58 031403 call ssa_req_range_maxbyte_with_continue_cpy -0x6f59 031404 fetch 1 ,mem_handle_humber -0x6f5a 031405 increase 1 ,queue -0x6f5b 031406 isub queue ,null -0x6f5c 031407 branch ssa_req_range_lastfreg ,zero -0x6f5d 031408 branch ssa_req_range_freg_with_continue -: 031410 ssa_req_range_maxbyte_with_continue: -0x6f5e 031411 copy pdata ,loopcnt -0x6f5f 031412 call ssa_req_range_maxbyte_with_continue_cpy -0x6f60 031413 branch ssa_req_range_freg_with_continue -: 031415 ssa_req_range_maxbyte_with_continue_cpy: -0x6f61 031416 increase -3 ,contw -0x6f62 031417 copy loopcnt ,temp -0x6f63 031418 copy regc ,pdata -0x6f64 031419 isub regb ,pdata -0x6f65 031420 iadd timeup ,contr -0x6f66 031421 branch memcpy -: 031423 ssa_req_range_next_handle: -0x6f67 031424 fetch 1 ,mem_handle_humber -0x6f68 031425 increase 1 ,queue -0x6f69 031426 isub queue ,null -0x6f6a 031427 rtn zero -0x6f6b 031428 branch ssa_req_range_find_handle -: 031430 ssa_req_range_get_length: -0x6f6c 031431 call disable_user -0x6f6d 031432 arg mem_sdp_handle_list ,contr -0x6f6e 031433 lshift2 queue ,pdata -0x6f6f 031434 iadd contr ,contr -0x6f70 031435 ifetcht 4 ,contr -0x6f71 031436 call search_handle -0x6f72 031437 nrtn zero -0x6f73 031438 call sdp_data_len -0x6f74 031439 branch enable_user -: 031441 ssa_req_range_first_freg: -0x6f75 031442 fetch 2 ,mem_sdp_attribute_maxbyte -0x6f76 031443 isub rega ,null -0x6f77 031444 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive -0x6f78 031445 copy rega ,loopcnt -0x6f79 031446 copy loopcnt ,temp -0x6f7a 031447 copy timeup ,contr -0x6f7b 031448 call memcpy -0x6f7c 031449 fetch 2 ,mem_sdp_all_length -0x6f7d 031450 isub rega ,null -0x6f7e 031451 branch ssa_req_range_freg_no_continue ,zero -: 031452 ssa_req_range_firstfreg_not_maxbyte_with_continue: -0x6f7f 031453 call ssa_req_range_freg_with_continue -0x6f80 031454 branch ssa_req_range_attrbutes_length -: 031456 ssa_req_range_freg_no_continue: -0x6f81 031457 call ssa_req_range_lastfreg -0x6f82 031458 branch ssa_req_range_attrbutes_length -: 031460 ssa_req_range_lastfreg: -0x6f83 031461 arg sdp_searchattrib_res ,rega -: 031462 ssa_req_range_lastfreg_common: -0x6f84 031463 force 0 ,pdata -0x6f85 031464 istore 1 ,contw -0x6f86 031465 call ssa_req_range_common -0x6f87 031466 fetcht 2 ,mem_sdp_tx_pkt_length -0x6f88 031467 increase -5 ,temp -0x6f89 031468 byteswap temp ,pdata -0x6f8a 031469 istore 2 ,contw -0x6f8b 031470 increase -3 ,temp -0x6f8c 031471 byteswap temp ,pdata -0x6f8d 031472 istore 2 ,contw -0x6f8e 031473 rtn -: 031475 ssa_req_range_firstfreg_maxbyte_with_continue: -0x6f8f 031476 copy pdata ,loopcnt -0x6f90 031477 copy loopcnt ,temp -0x6f91 031478 copy timeup ,contr -0x6f92 031479 call memcpy -0x6f93 031480 call ssa_req_range_freg_with_continue -: 031481 ssa_req_range_attrbutes_length: -0x6f94 031482 setarg 0x36 -0x6f95 031483 istore 1 ,contw -0x6f96 031484 fetch 2 ,mem_sdp_all_length -0x6f97 031485 byteswap pdata ,pdata -0x6f98 031486 istore 2 ,contw -0x6f99 031487 rtn -: 031489 ssa_req_range_attrbutes_length_no_continue: -0x6f9a 031490 setarg 0x36 -0x6f9b 031491 istore 1 ,contw -0x6f9c 031492 increase -3 ,temp -0x6f9d 031493 byteswap temp ,pdata -0x6f9e 031494 istore 2 ,contw -0x6f9f 031495 rtn -: 031497 ssa_req_range_freg_with_continue: -0x6fa0 031498 arg sdp_searchattrib_res ,rega -0x6fa1 031499 setarg 2 -0x6fa2 031500 istore 1 ,contw -0x6fa3 031501 fetch 2 ,mem_sdp_continue_byte -0x6fa4 031502 iadd temp ,temp -0x6fa5 031503 byteswap temp ,pdata -0x6fa6 031504 istore 2 ,contw -0x6fa7 031505 call ssa_req_range_common -0x6fa8 031506 fetcht 2 ,mem_sdp_tx_pkt_length -0x6fa9 031507 increase -5 ,temp -0x6faa 031508 byteswap temp ,pdata -0x6fab 031509 istore 2 ,contw -0x6fac 031510 increase -5 ,temp -0x6fad 031511 byteswap temp ,pdata -0x6fae 031512 istore 2 ,contw -0x6faf 031513 rtn -: 031515 ssa_req_range_common: -0x6fb0 031516 fetch 2 ,mem_sdp_tx_payload_ptr -0x6fb1 031517 isub contw ,pdata -0x6fb2 031518 sub pdata ,0 ,pdata -0x6fb3 031519 store 2 ,mem_sdp_tx_pkt_length -0x6fb4 031520 call l2cap_get_sdp_tx_payload -0x6fb5 031521 copy rega ,pdata -0x6fb6 031522 istore 1 ,contw -0x6fb7 031523 fetch 2 ,mem_sdp_transactionid -0x6fb8 031524 istore 2 ,contw -0x6fb9 031525 rtn -: 031538 sdp_process_ssa_res: -: 031539 sdp_process_ss_res: -: 031540 sdp_process_sa_res: -: 031541 sdp_process_error_res: -0x6fba 031542 rtn -: 031575 sdp_invalid_service_record_handle: -0x6fbb 031576 setarg 0x0200 -0x6fbc 031577 store 2 ,mem_sdp_error_code -0x6fbd 031578 branch sdp_error_response -: 031579 sdp_invalid_pdu_size: -0x6fbe 031580 setarg 0x0400 -0x6fbf 031581 store 2 ,mem_sdp_error_code -0x6fc0 031582 branch sdp_error_response -: 031583 sdp_insufficient_resource: -0x6fc1 031584 setarg 0x0600 -0x6fc2 031585 store 2 ,mem_sdp_error_code -0x6fc3 031586 branch sdp_error_response -: 031587 sdp_invalid_request_syntax: -0x6fc4 031588 setarg 0x0300 -0x6fc5 031589 store 2 ,mem_sdp_error_code -: 031590 sdp_error_response: -0x6fc6 031591 call l2cap_get_sdp_tx_payload -0x6fc7 031592 istore 1 ,contw -0x6fc8 031593 fetch 2 ,mem_sdp_transactionid -0x6fc9 031594 istore 2 ,contw -0x6fca 031595 setarg 0x0200 -0x6fcb 031596 istore 2 ,contw -0x6fcc 031597 fetch 2 ,mem_sdp_error_code -0x6fcd 031598 istore 2 ,contw -0x6fce 031599 jam 7 ,mem_sdp_tx_pkt_length -0x6fcf 031600 rtn -: 031605 ask_serviceclassid: -0x6fd0 031606 arg 0 ,regb -0x6fd1 031607 force 0 ,temp -0x6fd2 031608 arg mem_sdp_uuid_search_ptr ,contw -0x6fd3 031609 call dataelementtype6 -0x6fd4 031610 branch asksrv_error ,zero -: 031611 classidloop: -0x6fd5 031612 increase 1 ,regb -0x6fd6 031613 ifetch 1 ,contr -0x6fd7 031614 increase -1 ,rega -0x6fd8 031615 increase -1 ,timeup -0x6fd9 031616 compare 0x18 ,pdata ,0xf8 -0x6fda 031617 nbranch asksrv_error ,true -0x6fdb 031618 compare 0x04 ,pdata ,0x07 -0x6fdc 031619 nbranch cmp032 ,true -0x6fdd 031620 force 1 ,temp -: 031621 skip2bytes: -0x6fde 031622 ifetch 1 ,contr -0x6fdf 031623 increase -1 ,rega -0x6fe0 031624 increase -1 ,timeup -0x6fe1 031625 bne 0x00 ,frstbwrong -0x6fe2 031626 ifetch 1 ,contr -0x6fe3 031627 increase -1 ,rega -0x6fe4 031628 increase -1 ,timeup -0x6fe5 031629 beq 0x00 ,cmpuuid -0x6fe6 031630 branch scndbwrong -: 031631 frstbwrong: -0x6fe7 031632 increase 1 ,contr -0x6fe8 031633 increase -1 ,rega -0x6fe9 031634 increase -1 ,timeup -: 031635 scndbwrong: -0x6fea 031636 increase 2 ,contr -0x6feb 031637 increase -2 ,rega -0x6fec 031638 increase -2 ,timeup -0x6fed 031639 compare 0x00 ,temp ,0xff -0x6fee 031640 branch loopornot ,true -0x6fef 031641 increase 12 ,contr -0x6ff0 031642 increase -12 ,rega -0x6ff1 031643 increase -12 ,timeup -0x6ff2 031644 branch loopornot -: 031645 cmp032: -0x6ff3 031646 compare 0x02 ,pdata ,0x07 -0x6ff4 031647 nbranch cmp016 ,true -0x6ff5 031648 branch skip2bytes -: 031649 cmp016: -0x6ff6 031650 compare 0x01 ,pdata ,0x07 -0x6ff7 031651 nbranch asksrv_error ,true -: 031652 cmpuuid: -0x6ff8 031653 increase -2 ,rega -0x6ff9 031654 increase -2 ,timeup -0x6ffa 031655 ifetch 2 ,contr -0x6ffb 031656 sub regb ,4 ,null -0x6ffc 031657 branch uuidsize ,zero -0x6ffd 031658 istore 2 ,contw -: 031659 uuidsize: -0x6ffe 031660 compare 0x00 ,temp ,0xff -0x6fff 031661 branch loopornot ,true -0x7000 031662 copy contr ,temp -0x7001 031663 ifetch 1 ,contr -0x7002 031664 bne 0x00 ,wrong12b -0x7003 031665 ifetch 1 ,contr -0x7004 031666 bne 0x00 ,wrong12b -0x7005 031667 ifetch 1 ,contr -0x7006 031668 bne 0x10 ,wrong12b -0x7007 031669 ifetch 1 ,contr -0x7008 031670 bne 0x00 ,wrong12b -0x7009 031671 ifetch 1 ,contr -0x700a 031672 bne 0x80 ,wrong12b -0x700b 031673 ifetch 1 ,contr -0x700c 031674 bne 0x00 ,wrong12b -0x700d 031675 ifetch 1 ,contr -0x700e 031676 bne 0x00 ,wrong12b -0x700f 031677 ifetch 1 ,contr -0x7010 031678 bne 0x80 ,wrong12b -0x7011 031679 ifetch 1 ,contr -0x7012 031680 bne 0x5f ,wrong12b -0x7013 031681 ifetch 1 ,contr -0x7014 031682 bne 0x9b ,wrong12b -0x7015 031683 ifetch 1 ,contr -0x7016 031684 bne 0x34 ,wrong12b -0x7017 031685 ifetch 1 ,contr -0x7018 031686 beq 0xfb ,chck12dn -: 031687 wrong12b: -0x7019 031688 copy temp ,contr -: 031689 wrong12b1: -0x701a 031690 increase 12 ,contr -0x701b 031691 force 0x00 ,queue -0x701c 031692 force 0x00 ,temp -0x701d 031693 branch chck12dn -: 031695 chck12dn: -0x701e 031696 increase -12 ,timeup -0x701f 031697 increase -12 ,rega -: 031698 loopornot: -0x7020 031699 force 0x00 ,temp -0x7021 031700 compare 0x00 ,rega ,0xff -0x7022 031701 nbranch classidloop ,true -0x7023 031702 force 0 ,pdata -0x7024 031703 istore 2 ,contw -0x7025 031704 rtn -: 031705 asksrv_error: -0x7026 031706 arg 0xff ,temp -0x7027 031707 rtn -: 031717 dataelementtype6: -0x7028 031718 bpatchx patch3a_4 ,mem_patch3a -0x7029 031719 ifetch 1 ,contr -0x702a 031720 increase -1 ,timeup -0x702b 031721 compare 0x30 ,pdata ,0xf8 -0x702c 031722 nbranch dsize_error ,true -0x702d 031723 compare 0x07 ,pdata ,0x07 -0x702e 031724 branch dsize32 ,true -0x702f 031725 compare 0x06 ,pdata ,0x07 -0x7030 031726 branch dsize16 ,true -0x7031 031727 compare 0x05 ,pdata ,0x07 -0x7032 031728 nbranch dsize_error ,true -0x7033 031730 ifetch 1 ,contr -0x7034 031731 copy pdata ,rega -0x7035 031732 increase -1 ,timeup -0x7036 031733 branch dsize -: 031734 dsize32: -0x7037 031735 increase 2 ,contr -0x7038 031736 increase -2 ,timeup -: 031737 dsize16: -0x7039 031738 ifetch 2 ,contr -0x703a 031739 byteswap pdata ,rega -0x703b 031740 increase -2 ,timeup -: 031741 dsize: -0x703c 031742 force 0x01 ,pdata -0x703d 031743 rtn -: 031744 dsize_error: -0x703e 031745 force 0x00 ,pdata -0x703f 031746 rtn -: 031756 ss_empty_rsp: -0x7040 031757 setarg sdp_search_res -0x7041 031758 store 1 ,mem_sdp_pduid -0x7042 031759 branch empty_response -: 031760 sa_empty_rsp: -0x7043 031761 setarg sdp_attribute_res -0x7044 031762 store 1 ,mem_sdp_pduid -0x7045 031763 branch empty_response -: 031764 ssa_empty_rsp: -0x7046 031765 setarg sdp_searchattrib_res -0x7047 031766 store 1 ,mem_sdp_pduid -: 031767 empty_response: -0x7048 031768 call l2cap_get_sdp_tx_payload -0x7049 031771 fetch 1 ,mem_sdp_pduid -0x704a 031772 copy pdata ,regb -0x704b 031773 istore 1 ,contw -0x704c 031774 fetch 2 ,mem_sdp_transactionid -0x704d 031775 istore 2 ,contw -0x704e 031776 setarg 0x0500 -0x704f 031777 istore 2 ,contw -0x7050 031778 compare sdp_attribute_res ,regb ,0xff -0x7051 031779 branch fullsearch ,true -0x7052 031780 compare sdp_searchattrib_res ,regb ,0xff -0x7053 031781 branch fullsearch ,true -0x7054 031782 setarg 0x000000 -0x7055 031783 istore 5 ,contw -0x7056 031784 branch outempty -: 031786 fullsearch: -0x7057 031787 setarg 0x350200 -0x7058 031788 istore 5 ,contw -: 031789 outempty: -0x7059 031790 jam 10 ,mem_sdp_tx_pkt_length -0x705a 031791 rtn -: 031794 sdp_data_len: -0x705b 031795 call store_contw -0x705c 031796 call store_contr -0x705d 031797 call sdp_get_data -0x705e 031798 call get_contw -0x705f 031799 call get_contr -0x7060 031800 copy temp ,pdata -0x7061 031801 rtn -: 031804 sdp_get_data: -0x7062 031805 ifetch 1 ,contr -0x7063 031806 and pdata ,0x7 ,loopcnt -0x7064 031807 rshift3 pdata ,pdata -0x7065 031808 bne 0 ,sdp_get_data_type_not0 -: 031809 sdp_get_data_type0: -0x7066 031810 force 1 ,pdata -0x7067 031811 force 1 ,temp -0x7068 031812 rtn -: 031814 sdp_get_data_type_not0_sizeindex01234: -0x7069 031815 call left_shift_n -0x706a 031816 add pdata ,1 ,temp -0x706b 031817 rtn -: 031818 sdp_get_data_type_not0: -0x706c 031819 deposit loopcnt -0x706d 031820 sub pdata ,4 ,null -0x706e 031821 branch sdp_get_data_type_not0_sizeindex01234 ,positive -0x706f 031822 beq 5 ,sdp_get_data_type_not0_sizeindex5 -0x7070 031823 beq 6 ,sdp_get_data_type_not0_sizeindex6 -0x7071 031824 beq 7 ,sdp_get_data_type_not0_sizeindex7 -0x7072 031825 rtn -: 031827 sdp_get_data_type_not0_sizeindex5: -0x7073 031828 ifetch 1 ,contr -0x7074 031829 add pdata ,2 ,temp -0x7075 031830 rtn -: 031831 sdp_get_data_type_not0_sizeindex6: -0x7076 031832 ifetch 2 ,contr -0x7077 031833 byteswap pdata ,pdata -0x7078 031834 add pdata ,3 ,temp -0x7079 031835 rtn -: 031836 sdp_get_data_type_not0_sizeindex7: -0x707a 031837 ifetch 2 ,contr -0x707b 031838 byteswap pdata ,pdata -0x707c 031839 ifetcht 2 ,contr -0x707d 031840 byteswap temp ,temp -0x707e 031841 lshift16 temp ,temp -0x707f 031842 iadd temp ,pdata -0x7080 031843 add pdata ,5 ,temp -0x7081 031844 rtn -: 031850 search_all_uuid: -0x7082 031851 bpatchx patch3a_5 ,mem_patch3a -0x7083 031852 force 0 ,queue -0x7084 031853 arg 0 ,regb -0x7085 031854 arg mem_sdp_handle_list ,contw -: 031855 search_all_uuid_llop: -0x7086 031856 ifetch 2 ,timeup -0x7087 031857 rtn blank -0x7088 031858 call search_uuid -0x7089 031859 copy queue ,pdata -0x708a 031860 rtneq sdp_max_handle_number -0x708b 031861 increase 2 ,timeup -0x708c 031862 branch search_all_uuid_llop -: 031864 search_uuid: -0x708d 031866 iforce regc -0x708e 031868 fetch 2 ,mem_ui_uuid_table -0x708f 031869 iforce contr -: 031870 search_uuid_next: -0x7090 031871 copy queue ,pdata -0x7091 031872 rtneq sdp_max_handle_number -0x7092 031873 disable user -0x7093 031874 ifetch 1 ,contr -0x7094 031875 rtn blank -0x7095 031876 iforce loopcnt -: 031877 search_uuid_loop: -0x7096 031878 ifetch 2 ,contr -0x7097 031879 isub regc ,null -0x7098 031880 nbranch search_uuid_not_found ,zero -0x7099 031881 enable user -: 031882 search_uuid_not_found: -0x709a 031883 loop search_uuid_loop -0x709b 031884 ifetcht 4 ,contr -0x709c 031885 copy contr ,rega -0x709d 031886 nbranch search_uuid_nomatch ,user -0x709e 031887 arg mem_sdp_handle_list ,contr -0x709f 031888 arg sdp_max_handle_number ,loopcnt -: 031889 search_uuid_check_same_handle: -0x70a0 031890 ifetch 4 ,contr -0x70a1 031891 branch search_uuid_store_handle ,blank -0x70a2 031892 isub temp ,null -0x70a3 031893 branch search_uuid_nomatch ,zero -0x70a4 031894 loop search_uuid_check_same_handle -0x70a5 031895 rtn -: 031896 search_uuid_store_handle: -0x70a6 031897 istoret 4 ,contw -0x70a7 031898 increase 1 ,queue -0x70a8 031899 copy rega ,contr -0x70a9 031900 call sdp_data_len -0x70aa 031901 iadd regb ,regb -0x70ab 031902 iadd contr ,contr -0x70ac 031903 branch search_uuid_next -: 031904 search_uuid_nomatch: -0x70ad 031905 copy rega ,contr -0x70ae 031906 call sdp_get_data -0x70af 031907 iadd contr ,contr -0x70b0 031908 branch search_uuid_next -: 031914 search_handle: -0x70b1 031915 bpatchx patch3a_6 ,mem_patch3a -0x70b2 031916 fetch 2 ,mem_ui_uuid_table -0x70b3 031917 iforce contr -: 031918 search_handle_loop: -0x70b4 031919 ifetch 1 ,contr -0x70b5 031920 branch disable_zero ,blank -0x70b6 031921 lshift pdata ,pdata -0x70b7 031922 iadd contr ,contr -0x70b8 031923 ifetch 4 ,contr -0x70b9 031924 isub temp ,null -0x70ba 031925 rtn zero -0x70bb 031926 deposit contw -0x70bc 031927 store 2 ,mem_contw -0x70bd 031928 storet 8 ,mem_temp -0x70be 031929 call sdp_get_data -0x70bf 031930 iadd contr ,contr -0x70c0 031931 copy contr ,pdata -0x70c1 031932 fetcht 2 ,mem_contw -0x70c2 031933 copy temp ,contw -0x70c3 031934 fetcht 8 ,mem_temp -0x70c4 031935 copy pdata ,contr -0x70c5 031936 branch search_handle_loop -: 031942 search_attrib: -0x70c6 031943 bpatchx patch3a_7 ,mem_patch3a -0x70c7 031944 fetch 2 ,mem_ui_uuid_table -0x70c8 031945 iforce contr -: 031946 search_attrib_next: -0x70c9 031947 ifetch 1 ,contr -0x70ca 031948 branch search_attrib_end ,blank -0x70cb 031949 iforce loopcnt -: 031950 search_attrib_loop: -0x70cc 031951 ifetch 2 ,contr -0x70cd 031952 isub regc ,null -0x70ce 031953 branch search_attrib_found_uuid ,zero -0x70cf 031954 loop search_attrib_loop -0x70d0 031955 increase 4 ,contr -0x70d1 031956 call sdp_get_data -0x70d2 031957 iadd contr ,contr -0x70d3 031958 branch search_attrib_next -: 031959 search_attrib_found_uuid: -0x70d4 031960 increase -1 ,loopcnt -0x70d5 031961 lshift loopcnt ,pdata -0x70d6 031962 iadd contr ,contr -0x70d7 031963 increase 4 ,contr -0x70d8 031964 call sdp_get_data -0x70d9 031965 iadd contr ,timeup -: 031966 search_attrib_loop_attribs: -0x70da 031967 increase 1 ,contr -0x70db 031968 ifetch 2 ,contr -0x70dc 031969 isub regb ,null -0x70dd 031973 branch disable_blank ,zero -0x70de 031974 call sdp_data_len -0x70df 031975 iadd contr ,contr -0x70e0 031976 deposit timeup -0x70e1 031977 isub contr ,null -0x70e2 031978 branch search_attrib_end ,zero -0x70e3 031979 branch search_attrib_loop_attribs -: 031980 search_attrib_end: -0x70e4 031981 force 0 ,contr -0x70e5 031982 force 0 ,pdata -0x70e6 031983 rtn -: 031989 search_handle_attrib: -0x70e7 031990 bpatchx patch3b_0 ,mem_patch3b -0x70e8 031991 fetch 2 ,mem_ui_uuid_table -0x70e9 031992 iforce contr -: 031993 search_handle_attrib_next: -0x70ea 031994 ifetch 1 ,contr -0x70eb 031995 branch search_handle_attrib_end ,blank -0x70ec 031996 lshift pdata ,pdata -0x70ed 031997 iadd contr ,contr -0x70ee 031998 ifetch 4 ,contr -0x70ef 031999 isub temp ,null -0x70f0 032000 branch search_handl_attrib_found_handle ,zero -0x70f1 032001 call sdp_get_data -0x70f2 032002 iadd contr ,contr -0x70f3 032003 branch search_handle_attrib_next -: 032004 search_handl_attrib_found_handle: -0x70f4 032005 call sdp_get_data -0x70f5 032006 iadd contr ,timeup -: 032007 search_handle_attrib_loop_attribs: -0x70f6 032008 increase 1 ,contr -0x70f7 032009 ifetch 2 ,contr -0x70f8 032010 isub regb ,null -0x70f9 032011 rtn zero -0x70fa 032012 call sdp_data_len -0x70fb 032013 iadd contr ,contr -0x70fc 032014 deposit timeup -0x70fd 032015 isub contr ,null -0x70fe 032016 branch search_handle_attrib_end ,zero -0x70ff 032017 branch search_handle_attrib_loop_attribs -: 032018 search_handle_attrib_end: -0x7100 032019 force 0 ,contr -0x7101 032020 rtn -: 032024 search_rfcomm_cn: -0x7102 032025 arg 0x0400 ,regb -0x7103 032026 call search_handl_attrib_found_handle -0x7104 032027 arg 0x0300 ,regb -0x7105 032028 call search_uuid_in_data -0x7106 032029 nrtn user -0x7107 032030 sub rega ,3 ,null -0x7108 032031 branch disable_user ,positive -0x7109 032032 ifetch 1 ,contr -0x710a 032033 bne 0x08 ,disable_user -0x710b 032034 ifetch 1 ,contr -0x710c 032035 rtn -: 032040 search_uuid_in_data: -0x710d 032041 bpatchx patch3b_1 ,mem_patch3b -0x710e 032042 call sdp_get_data -0x710f 032043 copy pdata ,rega -: 032044 search_uuid_in_data_loop: -0x7110 032045 ifetch 1 ,contr -0x7111 032046 and pdata ,0x7 ,loopcnt -0x7112 032047 rshift3 pdata ,pdata -0x7113 032048 sub pdata ,3 ,null -0x7114 032049 branch search_uuid_in_data_found_uuid ,zero -0x7115 032050 copy loopcnt ,pdata -0x7116 032051 beq 5 ,search_uuid_in_data_found_element_index5 -0x7117 032052 beq 6 ,search_uuid_in_data_found_element_index6 -0x7118 032053 beq 7 ,search_uuid_in_data_found_element_index7 -0x7119 032054 increase -1 ,contr -0x711a 032055 call sdp_get_data -0x711b 032056 iadd contr ,contr -0x711c 032057 copy rega ,pdata -0x711d 032058 isub temp ,rega -0x711e 032059 branch disable_user ,zero -0x711f 032060 branch search_uuid_in_data_loop -: 032062 search_uuid_in_data_found_element_index5: -0x7120 032063 increase -2 ,rega -0x7121 032064 increase 1 ,contr -0x7122 032065 branch search_uuid_in_data_loop -: 032066 search_uuid_in_data_found_element_index6: -0x7123 032067 increase -3 ,rega -0x7124 032068 increase 2 ,contr -0x7125 032069 branch search_uuid_in_data_loop -: 032070 search_uuid_in_data_found_element_index7: -0x7126 032071 increase -5 ,rega -0x7127 032072 increase 4 ,contr -0x7128 032073 branch search_uuid_in_data_loop -: 032075 search_uuid_in_data_found_uuid: -0x7129 032076 increase -1 ,rega -0x712a 032077 copy loopcnt ,pdata -0x712b 032078 beq 1 ,search_uuid_in_data_type_uuid_16 -0x712c 032079 beq 2 ,search_uuid_in_data_type_uuid_32 -0x712d 032080 beq 4 ,search_uuid_in_data_type_uuid_128 -0x712e 032081 branch disable_user -: 032082 search_uuid_in_data_type_uuid_128: -0x712f 032083 increase -12 ,rega -: 032084 search_uuid_in_data_type_uuid_32: -0x7130 032085 ifetch 2 ,contr -0x7131 032086 increase -2 ,rega -: 032087 search_uuid_in_data_type_uuid_16: -0x7132 032088 ifetch 2 ,contr -0x7133 032089 isub regb ,null -0x7134 032090 branch enable_user ,zero -0x7135 032091 increase -2 ,rega -0x7136 032092 branch disable_user ,zero -0x7137 032093 branch search_uuid_in_data_loop -: 032152 sdp_send_spp_request: -0x7138 032153 call l2cap_get_sdp_tx_payload -0x7139 032154 copy pdata ,contw -0x713a 032155 setarg 6 -0x713b 032156 istore 1 ,contw -0x713c 032157 setarg sdp_tid_spp -0x713d 032158 istore 2 ,contw -0x713e 032159 setarg 0x0f00 -0x713f 032160 istore 2 ,contw -0x7140 032161 setarg 0x1a0535 -0x7141 032162 istore 3 ,contw -0x7142 032163 setarg 0x0111 -0x7143 032164 lshift16 pdata ,pdata -0x7144 032165 istore 4 ,contw -0x7145 032166 setarg 0x2600 -0x7146 032167 istore 2 ,contw -0x7147 032168 setarg 0x0335 -0x7148 032169 istore 2 ,contw -0x7149 032170 setarg 0x0009 -0x714a 032171 istore 2 ,contw -0x714b 032172 setarg 0x0004 -0x714c 032173 istore 2 ,contw -0x714d 032174 jam 0x14 ,mem_sdp_tx_pkt_length -0x714e 032175 rtn -: 032179 function_g2: -0x714f 032180 bpatchx patch3b_2 ,mem_patch3b -0x7150 032181 jam 80 ,mem_aes_cmac_data_length -0x7151 032182 arg memdat ,contw -0x7152 032183 arg mem_le_srand ,contr -0x7153 032184 call memcpy16 -0x7154 032185 arg mem_le_pubkey_local_x_256 ,contr -0x7155 032186 call memcpy32 -0x7156 032187 arg mem_le_pubkey_remote_x_256 ,contr -0x7157 032188 call memcpy32 -0x7158 032189 call inverse_memdat -0x7159 032190 arg mem_le_mrand ,contr -0x715a 032191 call store_inverse_k -0x715b 032192 call function_aes_cmac -0x715c 032194 arg mem_aes_cmac_temp ,contw -0x715d 032195 call load_inverse_result -0x715e 032196 setarg 1000000 -0x715f 032197 copy pdata ,rega -0x7160 032198 fetch 4 ,mem_aes_cmac_temp -0x7161 032199 idiv rega -0x7162 032200 call wait_div_end -0x7163 032201 remainder pdata -0x7164 032202 store 4 ,mem_gkey -0x7165 032204 rtn -: 032206 function_f6_eb: -0x7166 032207 jam 65 ,mem_aes_cmac_data_length -0x7167 032208 arg memdat ,contw -0x7168 032209 call store_addr_common_a -0x7169 032210 call store_addr_common_b -0x716a 032211 fetch 3 ,mem_le_pres + 1 -0x716b 032212 istore 3 ,contw -0x716c 032215 call get_r -0x716d 032217 arg mem_le_mrand ,contr -0x716e 032218 call memcpy16 -0x716f 032219 arg mem_le_srand ,contr -0x7170 032220 call memcpy16 -0x7171 032221 call inverse_memdat -0x7172 032222 arg mem_le_mackey ,contr -0x7173 032223 arg mem_aes_cmac_k ,contw -0x7174 032224 call memcpy16 -0x7175 032226 branch function_aes_cmac -: 032230 get_r: -0x7176 032231 fetch 4 ,mem_le_tk -0x7177 032232 istore 4 ,contw -0x7178 032233 call memset0_4 -0x7179 032234 branch memset0_8 -: 032236 function_f6_ea: -0x717a 032237 bpatchx patch3b_3 ,mem_patch3b -0x717b 032238 jam 65 ,mem_aes_cmac_data_length -0x717c 032239 arg memdat ,contw -0x717d 032240 call store_addr_common_b -0x717e 032241 call store_addr_common_a -0x717f 032242 fetch 3 ,mem_le_preq + 1 -0x7180 032243 istore 3 ,contw -0x7181 032246 call get_r -0x7182 032247 arg mem_le_srand ,contr -0x7183 032248 call memcpy16 -0x7184 032249 arg mem_le_mrand ,contr -0x7185 032250 call memcpy16 -0x7186 032251 call inverse_memdat -0x7187 032252 arg mem_le_mackey ,contr -0x7188 032253 arg mem_aes_cmac_k ,contw -0x7189 032254 call memcpy16 -0x718a 032256 call function_aes_cmac -0x718b 032257 arg mem_aes_cmac_temp ,contw -0x718c 032258 branch load_inverse_result -: 032260 function_f5: -0x718d 032261 jam 32 ,mem_aes_cmac_data_length -0x718e 032262 arg mem_le_dhkey_256 ,contr -0x718f 032263 arg memdat ,contw -0x7190 032264 call memcpy32 -0x7191 032265 call inverse_memdat -0x7192 032266 arg mem_le_slat ,contr -0x7193 032267 call store_inverse_k -0x7194 032268 call function_aes_cmac -0x7195 032269 arg mem_aes_cmac_k ,contw -0x7196 032270 call store_aes_result -0x7197 032271 arg 1 ,temp -0x7198 032272 call function_f5_common -0x7199 032273 arg mem_le_ltk ,contw -0x719a 032274 call load_inverse_result -0x719b 032275 arg 0 ,temp -0x719c 032276 call function_f5_common -0x719d 032277 arg mem_le_mackey ,contw -0x719e 032279 branch store_aes_result -: 032282 function_f5_common: -0x719f 032283 bpatchx patch3b_4 ,mem_patch3b -0x71a0 032284 jam 53 ,mem_aes_cmac_data_length -0x71a1 032285 setarg 0x100 -0x71a2 032286 store 2 ,memdat -0x71a3 032287 call store_addr_common_b -0x71a4 032288 call store_addr_common_a -0x71a5 032289 arg mem_le_srand ,contr -0x71a6 032290 call memcpy16 -0x71a7 032291 arg mem_le_mrand ,contr -0x71a8 032292 call memcpy16 -0x71a9 032294 setarg 0x6c65 -0x71aa 032295 istore 2 ,contw -0x71ab 032296 setarg 0x6274 -0x71ac 032297 istore 2 ,contw -0x71ad 032298 istoret 1 ,contw -0x71ae 032299 call inverse_memdat -0x71af 032300 branch function_aes_cmac -: 032302 store_addr_common_b: -0x71b0 032303 fetch 6 ,mem_le_lap -0x71b1 032304 istore 6 ,contw -0x71b2 032305 fetch 1 ,mem_le_conn_own_addr_type -0x71b3 032306 istore 1 ,contw -0x71b4 032307 rtn -: 032309 store_addr_common_a: -0x71b5 032310 fetch 6 ,mem_le_plap -0x71b6 032311 istore 6 ,contw -0x71b7 032316 fetch 1 ,mem_le_conn_peer_addr_type -0x71b8 032317 istore 1 ,contw -0x71b9 032318 rtn -: 032320 function_f4_ca: -0x71ba 032321 jam 65 ,mem_aes_cmac_data_length -0x71bb 032322 fetch 1 ,mem_passkey_1bit -0x71bc 032323 store 1 ,memdat -0x71bd 032324 arg mem_le_pubkey_local_x_256 ,contr -0x71be 032325 call memcpy32 -0x71bf 032326 arg mem_le_pubkey_remote_x_256 ,contr -0x71c0 032327 call memcpy32 -0x71c1 032328 call inverse_memdat -0x71c2 032329 arg mem_le_mrand ,contr -0x71c3 032330 call store_inverse_k -0x71c4 032331 branch function_aes_cmac -: 032334 function_f4_cb: -0x71c5 032335 jam 65 ,mem_aes_cmac_data_length -0x71c6 032336 fetch 1 ,mem_passkey_1bit -0x71c7 032337 store 1 ,memdat -0x71c8 032338 arg mem_le_pubkey_remote_x_256 ,contr -0x71c9 032339 call memcpy32 -0x71ca 032340 arg mem_le_pubkey_local_x_256 ,contr -0x71cb 032341 call memcpy32 -0x71cc 032342 call inverse_memdat -0x71cd 032343 arg mem_le_srand ,contr -0x71ce 032344 call store_inverse_k -0x71cf 032345 branch function_aes_cmac -: 032347 function_aes_cmac: -0x71d0 032348 bpatchx patch3b_5 ,mem_patch3b -0x71d1 032349 call function_aes_cmac_generate_subkey -0x71d2 032353 fetch 1 ,mem_aes_cmac_data_length -0x71d3 032354 copy pdata ,temp -: 032355 function_ceil16: -0x71d4 032356 increase 15 ,pdata -0x71d5 032357 rshift4 pdata ,pdata -0x71d6 032358 copy pdata ,regb -0x71d7 032359 branch function_aes_cmac_set_flag_0_balnk ,blank -0x71d8 032360 and temp ,0x0f ,pdata -0x71d9 032361 nbranch function_aes_cmac_set_flag_0 ,blank -0x71da 032363 arg mem_aes_cmac_k1 ,regc -0x71db 032364 arg memdat ,pdata -0x71dc 032365 increase -16 ,pdata -0x71dd 032368 iadd temp ,rega -0x71de 032369 arg mem_aes_cmac_m_last ,contw -0x71df 032370 arg 4 ,loopcnt -0x71e0 032371 call xor_loop -0x71e1 032375 branch function_aes_cmac_aes -: 032377 function_aes_cmac_set_flag_0_balnk: -0x71e2 032378 arg 1 ,regb -0x71e3 032379 arg 0 ,rega -0x71e4 032381 branch function_aes_cmac_set_flag_0_common -: 032384 function_aes_cmac_set_flag_0: -0x71e5 032386 and temp ,0x0f ,rega -: 032387 function_aes_cmac_set_flag_0_common: -0x71e6 032388 arg memdat ,pdata -0x71e7 032389 iadd temp ,pdata -0x71e8 032390 isub rega ,contr -0x71e9 032392 arg mem_aes_cmac_temp ,contw -0x71ea 032393 call function_aes_cmac_padding -0x71eb 032395 arg mem_aes_cmac_k2 ,regc -0x71ec 032396 arg mem_aes_cmac_temp ,rega -0x71ed 032397 arg mem_aes_cmac_m_last ,contw -0x71ee 032398 arg 4 ,loopcnt -0x71ef 032399 call xor_loop -: 032406 function_aes_cmac_aes: -0x71f0 032411 call aes_clear_data -0x71f1 032412 call aes_init -0x71f2 032415 arg memdat ,contr -: 032416 function_aes_cmac_aes_loop: -0x71f3 032418 increase -1 ,regb -0x71f4 032419 deposit regb -0x71f5 032420 branch function_aes_cmac_aes_loop_end ,blank -0x71f6 032421 call load_data128 -0x71f7 032422 call do_aes_cbc -0x71f8 032423 branch function_aes_cmac_aes_loop -: 032425 function_aes_cmac_aes_loop_end: -0x71f9 032426 arg mem_aes_cmac_temp ,contw -0x71fa 032427 call store_aes_result -0x71fb 032428 arg mem_aes_cmac_m_last ,contr -0x71fc 032429 call load_data128 -0x71fd 032430 call aes_init -0x71fe 032431 arg mem_aes_cmac_temp ,contr -0x71ff 032432 call load_data128 -0x7200 032433 branch do_aes_cbc -: 032437 load_inverse_result: -0x7201 032439 copy contw ,rega -0x7202 032440 call store_aes_result -0x7203 032442 arg 16 ,loopcnt -0x7204 032443 branch inverse_data -: 032445 store_inverse_k: -0x7205 032446 arg mem_aes_cmac_k ,contw -0x7206 032447 call memcpy16 -: 032448 inverse_k: -0x7207 032449 arg 16 ,loopcnt -0x7208 032450 arg mem_aes_cmac_k ,rega -0x7209 032451 branch inverse_data -: 032453 inverse_memdat: -0x720a 032454 fetch 1 ,mem_aes_cmac_data_length -0x720b 032455 copy pdata ,loopcnt -0x720c 032456 arg memdat ,rega -0x720d 032457 branch inverse_data -: 032459 bn_lshift_0_inverse: -0x720e 032460 ifetch 1 ,rega -0x720f 032461 lshift pdata ,pdata -0x7210 032462 isolate1 0 ,regc -0x7211 032463 setflag true ,0 ,pdata -0x7212 032464 isolate1 8 ,pdata -0x7213 032465 setflag true ,0 ,regc -0x7214 032466 istore 1 ,rega -0x7215 032467 increase -1 ,rega -0x7216 032468 loop bn_lshift_0_inverse -0x7217 032469 rtn -: 032471 function_aes_cmac_k1_inverse: -0x7218 032472 arg mem_aes_cmac_k1 ,rega -: 032473 function_aes_cmac_inverse_common: -0x7219 032474 increase 15 ,rega -0x721a 032475 force 16 ,loopcnt -0x721b 032476 force 0 ,regc -0x721c 032477 branch bn_lshift_0_inverse -: 032479 function_aes_cmac_k2_inverse: -0x721d 032480 arg mem_aes_cmac_k2 ,rega -0x721e 032481 branch function_aes_cmac_inverse_common -: 032484 function_aes_cmac_generate_subkey: -0x721f 032485 arg mem_aes_cmac_k ,contr -0x7220 032486 call load_key -0x7221 032489 force regidx_xor ,regext_index -0x7222 032490 call aes_clear -0x7223 032491 call aes_clear_data -0x7224 032492 call do_aes_ocb -0x7225 032497 arg mem_aes_cmac_k1 ,contw -0x7226 032498 call store_aes_result -: 032499 function_aes_cmac_k1: -0x7227 032500 bpatchx patch3b_6 ,mem_patch3b -0x7228 032501 fetch 1 ,mem_aes_cmac_k1 -0x7229 032502 isolate1 7 ,pdata -0x722a 032503 nbranch function_aes_cmac_k1_0 ,true -0x722b 032504 call function_aes_cmac_k1_inverse -0x722c 032507 arg mem_aes_cmac_k1 ,regc -0x722d 032509 arg mem_aes_cmac_k1 ,contw -0x722e 032512 call function_aes_cmac_xor_rb -0x722f 032513 branch function_aes_cmac_k2 -: 032514 function_aes_cmac_k1_0: -0x7230 032515 call function_aes_cmac_k1_inverse -: 032516 function_aes_cmac_k2: -0x7231 032518 arg mem_aes_cmac_k1 ,contr -0x7232 032519 arg mem_aes_cmac_k2 ,contw -0x7233 032520 call memcpy16 -0x7234 032521 fetch 1 ,mem_aes_cmac_k2 -0x7235 032522 isolate1 7 ,pdata -0x7236 032523 nbranch function_aes_cmac_k2_inverse ,true -0x7237 032524 call function_aes_cmac_k2_inverse -0x7238 032526 arg mem_aes_cmac_k2 ,regc -0x7239 032528 arg mem_aes_cmac_k2 ,contw -: 032534 function_aes_cmac_xor_rb: -0x723a 032535 arg 3 ,loopcnt -: 032536 function_aes_cmac_xor_rb_loop: -0x723b 032537 arg 0 ,temp -0x723c 032538 call function_aes_cmac_xor_loop_common -0x723d 032539 increase 4 ,regc -0x723e 032540 loop function_aes_cmac_xor_rb_loop -0x723f 032541 arg 0x8700 ,temp -0x7240 032542 lshift16 temp ,temp -: 032543 function_aes_cmac_xor_loop_common: -0x7241 032544 ifetch 4 ,regc -0x7242 032545 ixor temp ,pdata -0x7243 032546 istore 4 ,contw -0x7244 032547 rtn -: 032553 function_aes_cmac_padding: -0x7245 032554 bpatchx patch3b_7 ,mem_patch3b -0x7246 032555 arg 16 ,loopcnt -0x7247 032556 arg 0 ,pdata -: 032557 function_aes_cmac_padding_loop: -0x7248 032558 isub rega ,null -0x7249 032559 branch function_aes_cmac_padding_beq_length ,zero -0x724a 032560 branch function_aes_cmac_padding_big_length ,positive -0x724b 032561 ifetcht 1 ,contr -0x724c 032562 istoret 1 ,contw -: 032563 function_aes_cmac_padding_loop2: -0x724d 032564 increase 1 ,pdata -0x724e 032565 loop function_aes_cmac_padding_loop -0x724f 032566 rtn -: 032567 function_aes_cmac_padding_beq_length: -0x7250 032568 arg 0x80 ,temp -: 032569 function_aes_cmac_padding_common: -0x7251 032570 istoret 1 ,contw -0x7252 032571 branch function_aes_cmac_padding_loop2 -: 032573 function_aes_cmac_padding_big_length: -0x7253 032574 arg 0 ,temp -0x7254 032575 branch function_aes_cmac_padding_common -: 032578 generate_kinit: -0x7255 032579 call function_e22 -0x7256 032580 arg mem_input_store ,contr -0x7257 032581 arg mem_kinit ,contw -0x7258 032582 branch memcpy16 -: 032585 function_e21: -0x7259 032586 disable user -0x725a 032587 call function_expand -0x725b 032588 arg mem_random_number ,contr -0x725c 032589 arg mem_x ,contw -0x725d 032590 force 15 ,loopcnt -0x725e 032591 call memcpy -0x725f 032592 ifetch 1 ,contr -0x7260 032593 xor_into 6 ,pdata -0x7261 032594 istore 1 ,contw -0x7262 032595 setarg mem_y -0x7263 032596 store 2 ,memp_ar_input -0x7264 032597 setarg mem_x -0x7265 032598 store 2 ,memp_ar_key -0x7266 032599 set1 mark_ar2 ,mark -0x7267 032600 branch function_ar -: 032604 function_e22: -0x7268 032605 fetcht 1 ,mem_pin_length -0x7269 032606 force 16 ,regb -0x726a 032607 add temp ,6 ,regc -0x726b 032608 sub regc ,16 ,null -0x726c 032609 branch function_e22_pin_init ,positive -0x726d 032610 force 16 ,regc -: 032611 function_e22_pin_init: -0x726e 032612 arg mem_x ,contw -: 032613 function_e22_genx_pin: -0x726f 032614 arg mem_pin ,contr -0x7270 032615 copy temp ,loopcnt -0x7271 032616 disable user -: 032617 function_e22_genx_loop: -0x7272 032618 ifetch 1 ,contr -0x7273 032619 istore 1 ,contw -0x7274 032620 increase -1 ,regb -0x7275 032621 branch function_e22_genx_end ,zero -0x7276 032622 loop function_e22_genx_loop -0x7277 032623 branch function_e22_genx_pin ,user -0x7278 032624 enable user -0x7279 032625 force 6 ,loopcnt -0x727a 032626 copy rega ,contr -0x727b 032627 branch function_e22_genx_loop -: 032628 function_e22_genx_end: -0x727c 032629 arg mem_random_number ,contr -0x727d 032630 arg mem_y ,contw -0x727e 032631 call memcpy16 -0x727f 032632 fetch 1 ,mem_y15 -0x7280 032633 ixor regc ,pdata -0x7281 032634 store 1 ,mem_y15 -0x7282 032635 setarg mem_y -0x7283 032636 store 2 ,memp_ar_input -0x7284 032637 setarg mem_x -0x7285 032638 store 2 ,memp_ar_key -0x7286 032639 set1 mark_ar2 ,mark -0x7287 032640 branch function_ar -: 032645 function_e1: -0x7288 032646 disable user -0x7289 032647 call function_expand -0x728a 032648 branch function_hash -: 032650 function_e3: -0x728b 032651 arg mem_aco ,rega -0x728c 032652 enable user -0x728d 032653 call function_expand -0x728e 032654 call function_hash -0x728f 032655 arg mem_input_store ,contr -0x7290 032656 arg mem_kc ,contw -0x7291 032657 branch memcpy16 -: 032660 function_hash: -0x7292 032661 setarg mem_random_number -0x7293 032662 store 2 ,memp_ar_input -0x7294 032663 setarg mem_link_key -0x7295 032664 store 2 ,memp_ar_key -0x7296 032665 set0 mark_ar2 ,mark -0x7297 032666 call function_ar -0x7298 032667 arg mem_input_store ,rega -0x7299 032668 arg mem_random_number ,regb -0x729a 032669 arg mem_x ,contw -0x729b 032670 call xor16 -0x729c 032671 arg mem_x ,rega -0x729d 032672 arg mem_y ,regb -0x729e 032673 copy regb ,contw -0x729f 032674 enable user -0x72a0 032675 call add16 -0x72a1 032676 call key_offset -0x72a2 032677 setarg mem_y -0x72a3 032678 store 2 ,memp_ar_input -0x72a4 032679 setarg mem_x -0x72a5 032680 store 2 ,memp_ar_key -0x72a6 032681 set1 mark_ar2 ,mark -0x72a7 032682 branch function_ar -: 032686 function_ar: -0x72a8 032687 jam 0 ,mem_ar_hround -0x72a9 032688 fetch 2 ,memp_ar_key -0x72aa 032689 iforce contr -0x72ab 032690 arg mem_key_store ,contw -0x72ac 032691 call memcpy16 -0x72ad 032692 fetch 2 ,memp_ar_input -0x72ae 032693 iforce contr -0x72af 032694 arg mem_input_store ,contw -0x72b0 032695 call memcpy16 -: 032697 function_ar_loop: -0x72b1 032698 call key_scheduling -0x72b2 032699 disable user -0x72b3 032700 bmark0 mark_ar2 ,function_ar_original -0x72b4 032701 fetch 1 ,mem_ar_hround -0x72b5 032702 bne 4 ,function_ar_original -0x72b6 032703 fetch 2 ,memp_ar_input -0x72b7 032704 iforce regb -0x72b8 032705 call xor_mod32_ar2 -: 032706 function_ar_original: -0x72b9 032707 call xor_mod32 -0x72ba 032708 call el_boxes -0x72bb 032709 fetch 1 ,mem_ar_hround -0x72bc 032710 increase 1 ,pdata -0x72bd 032711 store 1 ,mem_ar_hround -0x72be 032713 call key_scheduling -0x72bf 032714 enable user -0x72c0 032715 call xor_mod32 -0x72c1 032716 call pht -0x72c2 032717 call permute -0x72c3 032718 call pht -0x72c4 032719 call permute -0x72c5 032720 call pht -0x72c6 032721 call permute -0x72c7 032722 call pht -0x72c8 032723 fetch 1 ,mem_ar_hround -0x72c9 032724 increase 1 ,pdata -0x72ca 032725 store 1 ,mem_ar_hround -0x72cb 032726 bne 16 ,function_ar_loop -0x72cc 032727 call key_scheduling -0x72cd 032728 disable user -0x72ce 032729 branch xor_mod32 -: 032733 key_scheduling: -0x72cf 032734 fetch 1 ,mem_ar_hround -0x72d0 032735 arg mem_key_store ,contr -0x72d1 032736 branch key_sched_zero ,blank -0x72d2 032737 iforce regb -0x72d3 032738 force 17 ,loopcnt -0x72d4 032739 copy contr ,contw -: 032740 key_rotateloop: -0x72d5 032741 ifetch 1 ,contr -0x72d6 032742 lshift3 pdata ,temp -0x72d7 032743 rshift2 pdata ,pdata -0x72d8 032744 rshift3 pdata ,pdata -0x72d9 032745 ior temp ,pdata -0x72da 032746 istore 1 ,contw -0x72db 032747 loop key_rotateloop -0x72dc 032748 setarg mem_key_store -0x72dd 032749 iadd regb ,contr -0x72de 032750 force 16 ,loopcnt -0x72df 032751 arg mem_round_key ,contw -: 032752 key_select_octet_loop: -0x72e0 032753 ifetch 1 ,contr -0x72e1 032754 istore 1 ,contw -0x72e2 032755 compare mem_key_store_end ,contr ,0xff -0x72e3 032756 nbranch key_select_octet_nwrap ,true -0x72e4 032757 increase -17 ,contr -: 032758 key_select_octet_nwrap: -0x72e5 032759 loop key_select_octet_loop -0x72e6 032760 force 0 ,rega -0x72e7 032761 add regb ,-1 ,regc -0x72e8 032762 lshift2 regc ,regc -0x72e9 032763 lshift2 regc ,regc -0x72ea 032764 call enable_authrom -0x72eb 032765 setarg mem_b_box -0x72ec 032766 iadd regc ,regc -0x72ed 032767 arg mem_round_key ,contw -0x72ee 032768 force 16 ,loopcnt -: 032769 bias_round_key_loop: -0x72ef 032770 ifetcht 1 ,regc -0x72f0 032771 ifetch 1 ,contw -0x72f1 032772 iadd temp ,pdata -0x72f2 032773 istore 1 ,contw -0x72f3 032774 increase 1 ,regc -0x72f4 032775 loop bias_round_key_loop -0x72f5 032776 branch disable_authrom -: 032778 key_sched_zero: -0x72f6 032779 force 16 ,loopcnt -0x72f7 032780 force 0 ,temp -: 032781 create_byte_16_loop: -0x72f8 032782 ifetch 1 ,contr -0x72f9 032783 ixor temp ,temp -0x72fa 032784 loop create_byte_16_loop -0x72fb 032785 deposit temp -0x72fc 032786 istore 1 ,contr -0x72fd 032787 arg mem_key_store ,contr -0x72fe 032788 arg mem_round_key ,contw -0x72ff 032789 branch memcpy16 -: 032791 xor_mod32: -0x7300 032792 arg mem_round_key ,regb -: 032793 xor_mod32_ar2: -0x7301 032794 force 16 ,loopcnt -0x7302 032795 arg mem_input_store ,rega -0x7303 032796 copy rega ,contw -: 032797 xor_mod32_loop: -0x7304 032798 ifetcht 1 ,rega -0x7305 032799 ifetch 1 ,regb -0x7306 032800 ixor temp ,alarm -0x7307 032801 and loopcnt ,3 ,regc -0x7308 032802 nbranch xor_mod32_invert ,user -0x7309 032803 xor_into 3 ,regc -: 032804 xor_mod32_invert: -0x730a 032805 sub regc ,1 ,regc -0x730b 032806 branch xor_even ,positive -0x730c 032807 iadd temp ,alarm -: 032808 xor_even: -0x730d 032809 deposit alarm -0x730e 032810 istore 1 ,contw -0x730f 032811 increase 1 ,rega -0x7310 032812 increase 1 ,regb -0x7311 032813 loop xor_mod32_loop -0x7312 032814 rtn -: 032816 el_boxes: -0x7313 032817 call enable_authrom -0x7314 032818 force 16 ,loopcnt -0x7315 032819 arg mem_input_store ,rega -: 032820 el_box_loop: -0x7316 032821 ifetch 1 ,rega -0x7317 032822 arg mem_e_box ,contr -0x7318 032823 and loopcnt ,3 ,regc -0x7319 032824 sub regc ,1 ,null -0x731a 032825 branch e_boxes ,positive -0x731b 032826 arg mem_l_box ,contr -: 032827 e_boxes: -0x731c 032828 iadd contr ,contr -0x731d 032829 ifetch 1 ,contr -0x731e 032830 istore 1 ,rega -0x731f 032831 increase 1 ,rega -0x7320 032832 loop el_box_loop -0x7321 032833 branch disable_authrom -: 032835 pht: -0x7322 032836 force 8 ,loopcnt -0x7323 032837 arg mem_input_store ,contr -0x7324 032838 copy contr ,contw -: 032839 pht_loop: -0x7325 032840 ifetch 1 ,contr -0x7326 032841 iforce rega -0x7327 032842 ifetch 1 ,contr -0x7328 032843 iforce regb -0x7329 032844 lshift rega ,pdata -0x732a 032845 iadd regb ,pdata -0x732b 032846 istore 1 ,contw -0x732c 032847 deposit rega -0x732d 032848 iadd regb ,pdata -0x732e 032849 istore 1 ,contw -0x732f 032850 loop pht_loop -0x7330 032851 rtn -: 032854 permute: -0x7331 032855 setarg 0x8ae42c -0x7332 032856 iforce temp -0x7333 032857 force 7 ,loopcnt -0x7334 032858 call permute_exchange -0x7335 032859 setarg 0xd751b -0x7336 032860 iforce temp -0x7337 032861 force 5 ,loopcnt -0x7338 032862 call permute_exchange -0x7339 032863 fetch 1 ,mem_input_store + 15 -0x733a 032864 iforce rega -0x733b 032865 fetch 1 ,mem_input_store + 3 -0x733c 032866 store 1 ,mem_input_store + 15 -0x733d 032867 deposit rega -0x733e 032868 store 1 ,mem_input_store + 3 -0x733f 032869 rtn -: 032871 permute_exchange: -0x7340 032872 and temp ,0xf ,regb -: 032873 permute_loop: -0x7341 032874 and temp ,0xf ,pdata -0x7342 032875 arg mem_input_store ,contw -0x7343 032876 iadd contw ,contw -0x7344 032877 ifetch 1 ,contw -0x7345 032878 iforce regc -0x7346 032879 deposit rega -0x7347 032880 istore 1 ,contw -0x7348 032881 copy regc ,rega -0x7349 032882 rshift4 temp ,temp -0x734a 032883 loop permute_loop -0x734b 032884 setarg mem_input_store -0x734c 032885 iadd regb ,contw -0x734d 032886 deposit rega -0x734e 032887 istore 1 ,contw -0x734f 032888 rtn -: 032890 add16: -0x7350 032891 enable user -0x7351 032892 branch xor_add16 -: 032894 xor16: -0x7352 032895 disable user -: 032896 xor_add16: -0x7353 032897 force 16 ,loopcnt -: 032898 xoradd_loop: -0x7354 032899 ifetcht 1 ,rega -0x7355 032900 ifetch 1 ,regb -0x7356 032901 branch xoradd_add ,user -0x7357 032902 ixor temp ,pdata -0x7358 032903 branch xoradd_store -: 032904 xoradd_add: -0x7359 032905 iadd temp ,pdata -: 032906 xoradd_store: -0x735a 032907 istore 1 ,contw -0x735b 032908 increase 1 ,rega -0x735c 032909 increase 1 ,regb -0x735d 032910 loop xoradd_loop -0x735e 032911 rtn -: 032914 function_expand: -0x735f 032915 arg mem_y ,contw -0x7360 032916 ifetch 6 ,rega -0x7361 032917 istore 6 ,contw -0x7362 032918 branch expand_12 ,user -0x7363 032919 ifetch 6 ,rega -0x7364 032920 branch expand_cont -: 032921 expand_12: -0x7365 032922 ifetch 6 ,contr -: 032923 expand_cont: -0x7366 032924 istore 6 ,contw -0x7367 032925 ifetch 4 ,rega -0x7368 032926 istore 4 ,contw -0x7369 032927 rtn -: 032929 key_offset: -0x736a 032930 arg mem_link_key ,contr -0x736b 032931 arg mem_x ,contw -0x736c 032932 arg 0 ,temp -0x736d 032933 setarg 0x8395a7 -0x736e 032934 call concatenate_temp24 -0x736f 032935 setarg 0xb3c1df -0x7370 032936 call concatenate_temp24 -0x7371 032937 setarg 0xe5e9 -0x7372 032938 call concatenate_temp16 -0x7373 032939 copy temp ,regab -0x7374 032940 disable user -0x7375 032941 call key_addxor -0x7376 032942 copy regab ,temp -0x7377 032943 enable user -0x7378 032944 branch key_addxor -: 032946 key_addxor: -0x7379 032947 force 8 ,loopcnt -: 032948 key_addxor_loop: -0x737a 032949 ifetch 1 ,contr -0x737b 032950 compare 1 ,loopcnt ,1 -0x737c 032951 branch key_high ,user -0x737d 032952 branch key_xor ,true -: 032953 key_add: -0x737e 032954 iadd temp ,pdata -0x737f 032955 branch key_store -: 032956 key_high: -0x7380 032957 branch key_add ,true -: 032958 key_xor: -0x7381 032959 ixor temp ,pdata -: 032960 key_store: -0x7382 032961 istore 1 ,contw -0x7383 032962 rshift8 temp ,temp -0x7384 032963 loop key_addxor_loop -0x7385 032964 rtn -: 032966 copy_aco: -0x7386 032967 fetch 6 ,mem_input_store + 4 -0x7387 032968 store 6 ,mem_aco -0x7388 032969 ifetch 6 ,contr -0x7389 032970 istore 6 ,contw -0x738a 032971 rtn -: 032973 concatenate_temp24: -0x738b 032974 lshift8 temp ,temp -: 032975 concatenate_temp16: -0x738c 032976 lshift16 temp ,temp -0x738d 032977 ior temp ,temp -0x738e 032978 rtn -: 032982 loop1: -0x738f 032983 branch loop1 -: 032987 generate_stk: -0x7390 032988 bpatchx patch3c_0 ,mem_patch3c -0x7391 032989 call function_s1 -0x7392 032990 arg mem_le_ltk ,contw -0x7393 032991 branch store_aes_result -: 032994 authenticate_rconfirm: -0x7394 032995 arg mem_le_srand ,contw -0x7395 032996 branch authenticate_mconfirm ,master -0x7396 032997 arg mem_le_mrand ,contw -: 032998 authenticate_mconfirm: -0x7397 032999 copy contr ,rega -0x7398 033000 call memcpy16 -0x7399 033001 call function_c1 -0x739a 033002 arg mem_le_rconfirm ,contr -0x739b 033003 branch compare_res -: 033005 generate_confirm: -0x739c 033006 arg mem_le_mrand ,rega -0x739d 033007 branch generate_mrand ,master -0x739e 033008 arg mem_le_srand ,rega -: 033009 generate_mrand: -0x739f 033010 copy rega ,contw -0x73a0 033011 call generate_random -0x73a1 033012 branch function_c1 -: 033014 generate_sk: -0x73a2 033015 arg mem_le_skdm ,contr -0x73a3 033016 call load_data128 -0x73a4 033017 arg mem_le_ltk ,contr -0x73a5 033018 call load_regext -0x73a6 033019 force 0x38 ,aes_ctrl -0x73a7 033020 force 0x0 ,aes_ctrl -0x73a8 033021 call wait_aes -0x73a9 033022 arg mem_le_sk ,contw -0x73aa 033023 branch store_aes_result -: 033026 first_block_counter: -0x73ab 033027 force 0x49 ,pdata -0x73ac 033028 branch first_block -: 033029 first_block_data: -0x73ad 033030 force 1 ,pdata -: 033031 first_block: -0x73ae 033032 force regidx_data ,regext_index -0x73af 033033 lshift8 temp ,regext -0x73b0 033034 ior regext ,regext -0x73b1 033035 increase 1 ,regext_index -0x73b2 033036 rshift8 temp ,regext -0x73b3 033037 rshift16 regext ,regext -0x73b4 033038 fetch 2 ,mem_le_ivm -0x73b5 033039 lshift16 ,pdata ,pdata -0x73b6 033040 ior regext ,regext -0x73b7 033041 increase 1 ,regext_index -0x73b8 033042 ifetch 4 ,contr -0x73b9 033043 iforce regext -0x73ba 033044 increase 1 ,regext_index -0x73bb 033045 ifetch 2 ,contr -0x73bc 033046 byteswap rega ,regext -0x73bd 033047 lshift16 regext ,regext -0x73be 033048 ior regext ,regext -0x73bf 033049 increase 1 ,regext_index -0x73c0 033050 rtn -: 033054 generate_mic: -0x73c1 033055 add regc ,1 ,contr -0x73c2 033056 ifetch 1 ,contr -0x73c3 033057 iforce rega -0x73c4 033058 call first_block_counter -0x73c5 033059 call do_aes_ocb -0x73c6 033061 force regidx_data ,regext_index -0x73c7 033062 ifetch 1 ,regc -0x73c8 033063 and_into 0x3 ,pdata -0x73c9 033064 lshift16 pdata ,regext -0x73ca 033065 set1 8 ,regext -0x73cb 033066 call clear_hidata -0x73cc 033067 call do_aes_cbc -0x73cd 033069 copy rega ,loopcnt -0x73ce 033070 add regc ,2 ,contr -0x73cf 033071 call padding_data -: 033072 generate_mic_loop: -0x73d0 033073 call aes_load_data -0x73d1 033074 call do_aes_cbc -0x73d2 033075 deposit loopcnt -0x73d3 033076 branch generate_mic_end ,blank -0x73d4 033077 branch generate_mic_loop -: 033078 generate_mic_end: -0x73d5 033079 force regidx_result ,regext_index -0x73d6 033080 deposit regext -0x73d7 033081 store 4 ,mem_le_mic -0x73d8 033082 rtn -: 033084 aes_crypt_data: -0x73d9 033085 increase 1 ,rega -0x73da 033086 call first_block_data -0x73db 033087 copy regc ,contr -0x73dc 033088 call aes_load_xor -0x73dd 033089 call do_aes_ctr -0x73de 033090 call store_enc_data -0x73df 033091 increase 16 ,regc -0x73e0 033092 increase -16 ,regb -0x73e1 033093 branch aes_crypt_data ,positive -0x73e2 033094 rtn -: 033096 le_encrypt: -0x73e3 033097 bpatchx patch3c_1 ,mem_patch3c -0x73e4 033098 arg mem_le_txheader ,regc -0x73e5 033099 fetcht 5 ,mem_le_pcnt_tx -0x73e6 033100 call generate_mic -0x73e7 033101 force regidx_xor ,regext_index -0x73e8 033102 iforce regext -0x73e9 033103 force 0 ,rega -0x73ea 033104 call first_block_data -0x73eb 033105 call do_aes_ctr -0x73ec 033106 arg mem_le_txpayload ,regc -0x73ed 033107 fetch 1 ,mem_le_txlen -0x73ee 033108 add pdata ,-1 ,regb -0x73ef 033109 iadd regc ,contw -0x73f0 033110 force regidx_result ,regext_index -0x73f1 033111 deposit regext -0x73f2 033112 istore 4 ,contw -0x73f3 033113 call aes_crypt_data -0x73f4 033114 fetch 1 ,mem_le_txlen -0x73f5 033115 increase 4 ,pdata -0x73f6 033116 store 1 ,mem_le_txlen -0x73f7 033117 fetcht 5 ,mem_le_pcnt_tx -0x73f8 033118 increase 1 ,temp -0x73f9 033119 storet 5 ,mem_le_pcnt_tx -0x73fa 033120 rtn -: 033122 le_decrypt: -0x73fb 033123 bpatchx patch3c_2 ,mem_patch3c -0x73fc 033124 fetch 1 ,mem_le_rxbuf + 1 -0x73fd 033125 sub pdata ,20 ,null -0x73fe 033126 branch le_dec_cont ,positive -: 033127 le_dec_cont: -0x73ff 033128 arg mem_le_rxbuf + 2 ,regc -0x7400 033129 add pdata ,-1 ,regb -0x7401 033130 increase -4 ,pdata -0x7402 033131 store 1 ,mem_le_rxbuf + 1 -0x7403 033132 iadd regc ,contr -0x7404 033133 ifetch 4 ,contr -0x7405 033134 force regidx_xor ,regext_index -0x7406 033135 iforce regext -0x7407 033136 force 0 ,rega -0x7408 033137 fetcht 5 ,mem_le_pcnt_rx -0x7409 033138 call first_block_data -0x740a 033139 call do_aes_ctr -0x740b 033140 force regidx_result ,regext_index -0x740c 033141 deposit regext -0x740d 033142 store 4 ,mem_le_peer_mic -0x740e 033143 call aes_crypt_data -0x740f 033144 arg mem_le_rxbuf ,regc -0x7410 033145 call generate_mic -0x7411 033146 fetcht 4 ,mem_le_peer_mic -0x7412 033147 isub temp ,pdata -0x7413 033148 nrtn blank -0x7414 033149 fetch 4 ,mem_le_last_mic -0x7415 033150 isub temp ,pdata -0x7416 033151 rtn blank -0x7417 033152 storet 4 ,mem_le_last_mic -0x7418 033153 fetch 5 ,mem_le_pcnt_rx -0x7419 033154 increase 1 ,pdata -0x741a 033155 store 5 ,mem_le_pcnt_rx -0x741b 033156 force 0 ,pdata -0x741c 033157 rtn -: 033159 wait_aes: -0x741d 033160 nbranch wait_aes ,aes_ready -0x741e 033161 rtn -: 033163 do_aes_ocb: -0x741f 033164 force 0x30 ,aes_ctrl -0x7420 033165 force 0x0 ,aes_ctrl -0x7421 033166 branch wait_aes -: 033168 do_aes_cbc: -0x7422 033169 force 0x32 ,aes_ctrl -0x7423 033170 force 0x2 ,aes_ctrl -0x7424 033171 branch wait_aes -: 033173 do_aes_ctr: -0x7425 033174 force 0x34 ,aes_ctrl -0x7426 033175 force 0x4 ,aes_ctrl -0x7427 033176 branch wait_aes -: 033179 aes_init: -0x7428 033180 force 1 ,aes_ctrl -0x7429 033181 force 0 ,aes_ctrl -0x742a 033182 rtn -: 033183 function_s1: -0x742b 033184 force regidx_data ,regext_index -0x742c 033185 fetch 4 ,mem_le_mrand -0x742d 033186 iforce regext -0x742e 033187 increase 1 ,regext_index -0x742f 033188 ifetch 4 ,contr -0x7430 033189 iforce regext -0x7431 033190 increase 1 ,regext_index -0x7432 033191 fetch 4 ,mem_le_srand -0x7433 033192 iforce regext -0x7434 033193 increase 1 ,regext_index -0x7435 033194 ifetch 4 ,contr -0x7436 033195 iforce regext -0x7437 033196 increase 1 ,regext_index -0x7438 033197 call aes_clear -0x7439 033198 increase -4 ,regext_index -0x743a 033199 fetch 4 ,mem_le_tk -0x743b 033200 copy pdata ,regext -0x743c 033201 increase 4 ,regext_index -0x743d 033202 force 0x38 ,aes_ctrl -0x743e 033203 force 0x8 ,aes_ctrl -0x743f 033204 branch wait_aes -: 033207 function_c1: -0x7440 033208 bpatchx patch3c_3 ,mem_patch3c -0x7441 033209 fetch 6 ,mem_le_lap -0x7442 033210 fetcht 6 ,mem_le_plap -0x7443 033211 branch function_c1_master ,master -0x7444 033212 fetch 6 ,mem_le_plap -0x7445 033213 fetcht 6 ,mem_le_lap -: 033214 function_c1_master: -0x7446 033215 force regidx_xor ,regext_index -0x7447 033216 copy temp ,regext -0x7448 033217 increase 1 ,regext_index -0x7449 033218 rshift32 temp ,regext -0x744a 033219 lshift16 pdata ,pdata -0x744b 033220 ior regext ,regext -0x744c 033221 increase 1 ,regext_index -0x744d 033222 rshift32 pdata ,regext -0x744e 033223 increase 1 ,regext_index -0x744f 033224 force 0 ,regext -0x7450 033225 force 0 ,pdata -0x7451 033226 fetch 1 ,mem_le_conn_peer_addr_type -0x7452 033227 fetcht 1 ,mem_le_adv_own_addr_type -0x7453 033228 nbranch function_c1_irat ,master -0x7454 033230 fetch 1 ,mem_le_conn_own_addr_type -0x7455 033231 fetcht 1 ,mem_le_conn_peer_addr_type -: 033232 function_c1_irat: -0x7456 033233 store 1 ,mem_le_iat -0x7457 033234 storet 1 ,mem_le_rat -0x7458 033235 force regidx_data ,regext_index -0x7459 033236 arg mem_le_iat ,regb -0x745a 033237 force 4 ,loopcnt -: 033238 function_c1_loop1: -0x745b 033239 ifetch 4 ,rega -0x745c 033240 ifetcht 4 ,regb -0x745d 033241 ixor temp ,regext -0x745e 033242 increase 1 ,regext_index -0x745f 033243 increase 4 ,rega -0x7460 033244 increase 4 ,regb -0x7461 033245 loop function_c1_loop1 -0x7462 033246 call aes_clear -0x7463 033247 increase -4 ,regext_index -0x7464 033248 fetch 4 ,mem_le_tk -0x7465 033249 copy pdata ,regext -0x7466 033250 increase 4 ,regext_index -0x7467 033251 force 0x38 ,aes_ctrl -0x7468 033252 force 0xc ,aes_ctrl -0x7469 033253 call wait_aes -0x746a 033255 call aes_clear_data -0x746b 033256 force 0x3a ,aes_ctrl -0x746c 033257 force 0x8 ,aes_ctrl -0x746d 033258 branch wait_aes -: 033260 padding_data: -0x746e 033261 compare 0 ,loopcnt ,3 -0x746f 033262 rtn true -0x7470 033263 deposit contr -0x7471 033264 iadd loopcnt ,contw -0x7472 033265 force 0 ,pdata -: 033266 padding_loop: -0x7473 033267 istore 1 ,contw -0x7474 033268 increase 1 ,loopcnt -0x7475 033269 compare 0 ,loopcnt ,3 -0x7476 033270 rtn true -0x7477 033271 branch padding_loop -: 033273 aes_load_data: -0x7478 033274 force regidx_data ,regext_index -: 033275 load_data_loop: -0x7479 033276 deposit loopcnt -0x747a 033277 branch load_data_padding ,blank -0x747b 033278 ifetch 4 ,contr -0x747c 033279 increase -4 ,loopcnt -: 033280 load_data_padding: -0x747d 033281 iforce regext -0x747e 033282 increase 1 ,regext_index -0x747f 033283 compare regidx_key ,regext_index ,0xf -0x7480 033284 rtn true -0x7481 033285 branch load_data_loop -: 033287 aes_load_xor: -0x7482 033288 force regidx_xor ,regext_index -0x7483 033289 branch load_regext -: 033290 load_key: -0x7484 033291 force regidx_key ,regext_index -0x7485 033292 branch load_regext -: 033293 load_data128: -0x7486 033294 force regidx_data ,regext_index -: 033295 load_regext: -0x7487 033296 force 4 ,loopcnt -: 033297 load_regext_loop: -0x7488 033298 ifetch 4 ,contr -0x7489 033299 iforce regext -0x748a 033300 increase 1 ,regext_index -0x748b 033301 loop load_regext_loop -0x748c 033302 rtn -: 033304 load_sk: -0x748d 033305 arg mem_le_sk ,contr -0x748e 033306 branch load_key -: 033308 clear_hidata: -0x748f 033309 force 4 ,loopcnt -0x7490 033310 branch clear_data_rest -: 033312 aes_clear_data: -0x7491 033313 force regidx_data ,regext_index -: 033314 aes_clear: -0x7492 033315 force 4 ,loopcnt -: 033316 clear_loop: -0x7493 033317 force 0 ,regext -: 033318 clear_data_rest: -0x7494 033319 increase 1 ,regext_index -0x7495 033320 loop clear_loop -0x7496 033321 rtn -: 033323 store_aes_result: -0x7497 033324 force regidx_result ,regext_index -0x7498 033325 force 4 ,loopcnt -: 033326 send_aes_result_loop: -0x7499 033327 deposit regext -0x749a 033328 istore 4 ,contw -0x749b 033329 increase 1 ,regext_index -0x749c 033330 loop send_aes_result_loop -0x749d 033331 rtn -: 033333 store_enc_data: -0x749e 033334 force regidx_result ,regext_index -0x749f 033335 copy regc ,contw -0x74a0 033336 add regb ,1 ,loopcnt -0x74a1 033337 sub loopcnt ,15 ,null -0x74a2 033338 branch store_enc_loop ,positive -0x74a3 033339 force 16 ,loopcnt -: 033340 store_enc_loop: -0x74a4 033341 deposit regext -0x74a5 033342 sub loopcnt ,3 ,null -0x74a6 033343 branch store_enc_byte ,positive -0x74a7 033344 istore 4 ,contw -0x74a8 033345 increase -4 ,loopcnt -0x74a9 033346 rtn zero -0x74aa 033347 increase 1 ,regext_index -0x74ab 033348 branch store_enc_loop -: 033349 store_enc_byte: -0x74ac 033350 istore 1 ,contw -0x74ad 033351 rshift8 pdata ,pdata -0x74ae 033352 loop store_enc_byte -0x74af 033353 rtn -: 033356 compare_res: -0x74b0 033357 force regidx_result ,regext_index -0x74b1 033358 force 4 ,loopcnt -: 033359 compare_res_loop: -0x74b2 033360 ifetch 4 ,contr -0x74b3 033361 isub regext ,null -0x74b4 033362 nrtn zero -0x74b5 033363 increase 1 ,regext_index -0x74b6 033364 loop compare_res_loop -0x74b7 033365 force 0 ,null -0x74b8 033366 rtn -: 033368 enable_authrom: -0x74b9 033369 hfetch 1 ,core_clkoff -0x74ba 033370 set0 clock_off_auth_rom ,pdata -0x74bb 033371 hstore 1 ,core_clkoff -0x74bc 033372 rtn -: 033374 disable_authrom: -0x74bd 033375 hfetch 1 ,core_clkoff -0x74be 033376 set1 clock_off_auth_rom ,pdata -0x74bf 033377 hstore 1 ,core_clkoff -0x74c0 033378 rtn -: 033380 init_memp: -0x74c1 033381 arg mem_p ,contw -0x74c2 033382 setsect 0 ,0x3ffff -0x74c3 033383 setsect 1 ,0x3ffff -0x74c4 033384 setsect 2 ,0x3ffff -0x74c5 033385 setsect 3 ,0x3fbff -0x74c6 033386 istore 9 ,contw -0x74c7 033387 setsect 0 ,0x3ffff -0x74c8 033388 setsect 1 ,0x3ffff -0x74c9 033389 setsect 2 ,0x3ffff -0x74ca 033390 setsect 3 ,0x3ffff -0x74cb 033391 istore 9 ,contw -0x74cc 033392 setsect 0 ,0x3ffff -0x74cd 033393 setsect 1 ,0x3ffff -0x74ce 033394 setsect 2 ,0x3cfff -0x74cf 033395 setsect 3 ,0x3ffff -0x74d0 033396 istore 9 ,contw -0x74d1 033397 setsect 0 ,0x3ffff -0x74d2 033398 setsect 1 ,0x3ffff -0x74d3 033399 setsect 2 ,0x3ffef -0x74d4 033400 setsect 3 ,0x3ffff -0x74d5 033401 istore 9 ,contw -0x74d6 033402 setsect 0 ,0x3ffff -0x74d7 033403 setsect 1 ,0x3ffff -0x74d8 033404 setsect 2 ,0x3ffff -0x74d9 033405 setsect 3 ,0x3ffff -0x74da 033406 istore 9 ,contw -0x74db 033407 setsect 0 ,0x3ffff -0x74dc 033408 setsect 1 ,0x26c7f -0x74dd 033409 setsect 2 ,0x146b -0x74de 033410 setsect 3 ,0x37bb3 -0x74df 033411 istore 9 ,contw -0x74e0 033412 setsect 0 ,0x1feb8 -0x74e1 033413 setsect 1 ,0x10c12 -0x74e2 033414 setsect 2 ,0x2b722 -0x74e3 033415 setsect 3 ,0x29fa6 -0x74e4 033416 istore 9 ,contw -0x74e5 033417 setsect 0 ,0xe70f -0x74e6 033418 setsect 1 ,0x16720 -0x74e7 033419 setsect 2 ,0x519e -0x74e8 033420 setsect 3 ,0x19084 -0x74e9 033421 istore 9 ,contw -0x74ea 033422 setsect 0 ,0x31012 -0x74eb 033423 setsect 1 ,0x360bf -0x74ec 033424 setsect 2 ,0x3f0af -0x74ed 033425 setsect 3 ,0x3d3 -0x74ee 033426 istore 9 ,contw -0x74ef 033427 setsect 0 ,0x3a188 -0x74f0 033428 setsect 1 ,0x3ad0 -0x74f1 033429 setsect 2 ,0x3cbf2 -0x74f2 033430 setsect 3 ,0x243d9 -0x74f3 033431 istore 9 ,contw -0x74f4 033432 setsect 0 ,0x2b030 -0x74f5 033433 setsect 1 ,0x36a03 -0x74f6 033434 setsect 2 ,0x11188 -0x74f7 033435 setsect 3 ,0x1e520 -0x74f8 033436 istore 9 ,contw -0x74f9 033437 setsect 0 ,0x3a11e -0x74fa 033438 setsect 1 ,0xfe5d -0x74fb 033439 setsect 2 ,0xdd57 -0x74fc 033440 setsect 3 ,0x1ac93 -0x74fd 033441 istore 9 ,contw -0x74fe 033442 setsect 0 ,0x11ed -0x74ff 033443 setsect 1 ,0x218c4 -0x7500 033444 setsect 2 ,0x8da7 -0x7501 033445 setsect 3 ,0x257ff -0x7502 033446 istore 9 ,contw -0x7503 033447 setsect 0 ,0x3192b -0x7504 033448 setsect 1 ,0x34641 -0x7505 033449 setsect 2 ,0x1be0c -0x7506 033450 setsect 3 ,0x366ad -0x7507 033451 istore 9 ,contw -0x7508 033452 setsect 0 ,0x1f83 -0x7509 033453 setsect 1 ,0x15a23 -0x750a 033454 setsect 2 ,0x3f9b0 -0x750b 033455 setsect 3 ,0x3949 -0x750c 033456 istore 9 ,contw -0x750d 033457 setsect 0 ,0x13a51 -0x750e 033458 setsect 1 ,0x153fd -0x750f 033459 setsect 2 ,0x3372a -0x7510 033460 setsect 3 ,0xf1bb -0x7511 033461 istore 9 ,contw -0x7512 033462 setsect 0 ,0x3ae85 -0x7513 033463 setsect 1 ,0x1eed9 -0x7514 033464 setsect 2 ,0x9e66 -0x7515 033465 setsect 3 ,0x1a8 -0x7516 033466 istore 8 ,contw -0x7517 033467 rtn -: 033471 init_memp_256: -0x7518 033472 arg mem_p_256 ,contw -0x7519 033473 setsect 0 ,0x3ffff -0x751a 033474 setsect 1 ,0x3ffff -0x751b 033475 setsect 2 ,0x3ffff -0x751c 033476 setsect 3 ,0x3ffff -0x751d 033477 istore 9 ,contw -0x751e 033478 setsect 0 ,0x3ffff -0x751f 033479 setsect 1 ,0x3f -0x7520 033480 setsect 2 ,0x0 -0x7521 033481 setsect 3 ,0x0 -0x7522 033482 istore 9 ,contw -0x7523 033483 setsect 0 ,0x0 -0x7524 033484 setsect 1 ,0x0 -0x7525 033485 setsect 2 ,0x1000 -0x7526 033486 setsect 3 ,0x0 -0x7527 033487 istore 9 ,contw -0x7528 033488 setsect 0 ,0x3ff00 -0x7529 033489 setsect 1 ,0x3ffff -0x752a 033490 setsect 2 ,0x3ffcf -0x752b 033491 setsect 3 ,0x3ffff -0x752c 033492 istore 9 ,contw -0x752d 033493 setsect 0 ,0x3ffff -0x752e 033494 setsect 1 ,0x3ffff -0x752f 033495 setsect 2 ,0x3ffff -0x7530 033496 setsect 3 ,0x3ff -0x7531 033497 istore 9 ,contw -0x7532 033498 setsect 0 ,0x0 -0x7533 033499 setsect 1 ,0x0 -0x7534 033500 setsect 2 ,0x0 -0x7535 033501 setsect 3 ,0x0 -0x7536 033502 istore 9 ,contw -0x7537 033503 setsect 0 ,0x10000 -0x7538 033504 setsect 1 ,0x0 -0x7539 033505 setsect 2 ,0x3f000 -0x753a 033506 setsect 3 ,0x3ffff -0x753b 033507 istore 9 ,contw -0x753c 033508 setsect 0 ,0x296ff -0x753d 033509 setsect 1 ,0x22630 -0x753e 033510 setsect 2 ,0x3945d -0x753f 033511 setsect 3 ,0x3d284 -0x7540 033512 istore 9 ,contw -0x7541 033513 setsect 0 ,0x333a0 -0x7542 033514 setsect 1 ,0x4b7a -0x7543 033515 setsect 2 ,0x37d8 -0x7544 033516 setsect 3 ,0x3c9dc -0x7545 033517 istore 9 ,contw -0x7546 033518 setsect 0 ,0x3a440 -0x7547 033519 setsect 1 ,0x1b958 -0x7548 033520 setsect 2 ,0x38bce -0x7549 033521 setsect 3 ,0x1091f -0x754a 033522 istore 9 ,contw -0x754b 033523 setsect 0 ,0x2e12c -0x754c 033524 setsect 1 ,0x1f47c -0x754d 033525 setsect 2 ,0x356b1 -0x754e 033526 setsect 3 ,0x2fd47 -0x754f 033527 istore 9 ,contw -0x7550 033528 setsect 0 ,0x6837 -0x7551 033529 setsect 1 ,0x2ed90 -0x7552 033530 setsect 2 ,0x1ecec -0x7553 033531 setsect 3 ,0x1acc5 -0x7554 033532 istore 9 ,contw -0x7555 033533 setsect 0 ,0x23357 -0x7556 033534 setsect 1 ,0x18af3 -0x7557 033535 setsect 2 ,0xf9e1 -0x7558 033536 setsect 3 ,0x129f0 -0x7559 033537 istore 9 ,contw -0x755a 033538 setsect 0 ,0x2e7eb -0x755b 033539 setsect 1 ,0x3e6e3 -0x755c 033540 setsect 2 ,0x3e1a7 -0x755d 033541 setsect 3 ,0x10b8b -0x755e 033542 istore 9 ,contw -0x755f 033543 setsect 0 ,0x24fe3 -0x7560 033544 setsect 1 ,0x20ef -0x7561 033545 setsect 2 ,0x1b5a6 -0x7562 033546 setsect 3 ,0xdc2f -0x7563 033547 istore 9 ,contw -0x7564 033548 setsect 0 ,0x13860 -0x7565 033549 setsect 1 ,0x2bd69 -0x7566 033550 setsect 2 ,0x391a -0x7567 033551 setsect 3 ,0x1b222 -0x7568 033552 istore 9 ,contw -0x7569 033553 rtn -: 033556 publickey_init: -0x756a 033557 fetch 1 ,mem_ssp_enable -0x756b 033558 nbranch sp_initialize ,blank -0x756c 033559 branch sp_initialize_256 -: 033561 sp_calc_sequence_256_check: -0x756d 033562 bpatchx patch3c_4 ,mem_patch3c -0x756e 033563 fetch 1 ,mem_ssp_enable -0x756f 033564 rtn blank -0x7570 033565 fetch 1 ,mem_sp_local_key_invalid -0x7571 033566 rtnne sp_key_valid -0x7572 033567 fetch 1 ,mem_le_secure_connect_enable -0x7573 033568 rtn blank -0x7574 033569 fetch 1 ,mem_le_sc_local_key_invalid -0x7575 033570 rtneq sp_key_valid_256 -0x7576 033571 fetch 2 ,mem_ui_state_map -0x7577 033572 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 -0x7578 033573 fetch 1 ,mem_le_sc_calc -0x7579 033574 beq sp_calc_standby ,sp_initialize_256 -0x757a 033575 rtn -: 033576 stop_publickey_calc_256: -0x757b 033577 jam sp_calc_standby ,mem_le_sc_calc -0x757c 033578 rtn -: 033581 sp_initialize: -0x757d 033582 bpatchx patch3c_5 ,mem_patch3c -0x757e 033583 fetch 1 ,mem_ssp_enable -0x757f 033584 branch ssp_disable ,blank -0x7580 033585 call ssp_enable -0x7581 033586 call sp_clear_flags -0x7582 033587 branch sp_pubkey_calc -: 033589 sp_clear_flags: -0x7583 033590 setarg 0 -0x7584 033591 store 8 ,mem_sp_state_start -0x7585 033592 store 4 ,mem_sp_flag_start -0x7586 033593 store 7 ,mem_sp_iocap_remote -0x7587 033594 rtn -: 033596 sp_generate_local_key: -0x7588 033597 jam sp_flag_commit ,mem_sp_flag -0x7589 033598 branch sp_generate_local_key0 -: 033599 sp_master_generate_local_key: -0x758a 033600 fetch 1 ,mem_sp_local_key_invalid -0x758b 033601 beq sp_key_valid ,sp_dhkey_calc -0x758c 033602 branch assert -: 033603 sp_generate_local_key0: -0x758d 033604 fetch 1 ,mem_sp_local_key_invalid -0x758e 033605 beq sp_key_valid ,sp_start_send_pubkey -0x758f 033606 branch sp_pubkey_calc -: 033608 sp_start_send_pubkey: -0x7590 033609 call sp_dhkey_calc -0x7591 033610 fetch 1 ,mem_master_sp_state -0x7592 033611 nrtn blank -0x7593 033612 jam sp_stat_key_send ,mem_sp_state -0x7594 033613 rtn -: 033616 sp_calc_check_publickey_256: -0x7595 033617 call sp_calc_b256 -0x7596 033618 arg mem_le_pubkey_remote_y_256 ,rega -0x7597 033619 arg mem_t7_256 ,contw -0x7598 033620 call bn_sqrmod_256 -0x7599 033621 arg mem_le_pubkey_remote_x_256 ,rega -0x759a 033622 arg mem_t2_256 ,contw -0x759b 033623 call bn_sqrmod_256 -0x759c 033624 arg mem_t2_256 ,rega -0x759d 033625 arg mem_le_pubkey_remote_x_256 ,regb -0x759e 033626 arg mem_t2_256 ,contw -0x759f 033627 call bn_mulmod_256 -0x75a0 033628 arg mem_a_256 ,rega -0x75a1 033629 arg mem_le_pubkey_remote_x_256 ,regb -0x75a2 033630 arg mem_t3_256 ,contw -0x75a3 033631 call bn_mulmod_256 -0x75a4 033632 arg mem_t3_256 ,rega -0x75a5 033633 arg mem_t2_256 ,regb -0x75a6 033634 arg mem_t2_256 ,contw -0x75a7 033635 call bn_addmod_256 -0x75a8 033636 arg mem_t0_256 ,rega -0x75a9 033637 arg mem_t2_256 ,regb -0x75aa 033638 arg mem_t0_256 ,contw -0x75ab 033639 call bn_addmod_256 -0x75ac 033640 arg 32 ,loopcnt -0x75ad 033641 arg mem_t7_256 ,rega -0x75ae 033642 arg mem_t0_256 ,regb -0x75af 033643 branch string_compare -: 033645 sp_calc_b256: -0x75b0 033646 arg mem_gy_256 ,rega -0x75b1 033647 arg mem_t0_256 ,contw -0x75b2 033648 call bn_sqrmod_256 -0x75b3 033649 arg mem_gx_256 ,rega -0x75b4 033650 arg mem_t2_256 ,contw -0x75b5 033651 call bn_sqrmod_256 -0x75b6 033652 arg mem_t2_256 ,rega -0x75b7 033653 arg mem_gx_256 ,regb -0x75b8 033654 arg mem_t2_256 ,contw -0x75b9 033655 call bn_mulmod_256 -0x75ba 033656 arg mem_a_256 ,rega -0x75bb 033657 arg mem_gx_256 ,regb -0x75bc 033658 arg mem_t3_256 ,contw -0x75bd 033659 call bn_mulmod_256 -0x75be 033660 arg mem_t3_256 ,rega -0x75bf 033661 arg mem_t2_256 ,regb -0x75c0 033662 arg mem_t2_256 ,contw -0x75c1 033663 call bn_addmod_256 -0x75c2 033664 arg mem_t0_256 ,rega -0x75c3 033665 arg mem_t2_256 ,regb -0x75c4 033666 arg mem_t0_256 ,contw -0x75c5 033667 branch bn_submod_256 -: 033669 sp_calc_check_publickey: -0x75c6 033670 call sp_calc_b -0x75c7 033671 arg mem_sp_pubkey_remote_y ,rega -0x75c8 033672 arg mem_t7_256 ,contw -0x75c9 033673 call bn_sqrmod -0x75ca 033674 arg mem_sp_pubkey_remote_x ,rega -0x75cb 033675 arg mem_t2_256 ,contw -0x75cc 033676 call bn_sqrmod -0x75cd 033677 arg mem_t2_256 ,rega -0x75ce 033678 arg mem_sp_pubkey_remote_x ,regb -0x75cf 033679 arg mem_t2_256 ,contw -0x75d0 033680 call bn_mulmod -0x75d1 033681 arg mem_a ,rega -0x75d2 033682 arg mem_sp_pubkey_remote_x ,regb -0x75d3 033683 arg mem_t3_256 ,contw -0x75d4 033684 call bn_mulmod -0x75d5 033685 arg mem_t3_256 ,rega -0x75d6 033686 arg mem_t2_256 ,regb -0x75d7 033687 arg mem_t2_256 ,contw -0x75d8 033688 call bn_addmod -0x75d9 033689 arg mem_t0_256 ,rega -0x75da 033690 arg mem_t2_256 ,regb -0x75db 033691 arg mem_t0_256 ,contw -0x75dc 033692 call bn_addmod -0x75dd 033693 arg 24 ,loopcnt -0x75de 033694 arg mem_t7_256 ,rega -0x75df 033695 arg mem_t0_256 ,regb -0x75e0 033696 branch string_compare -: 033698 sp_calc_b: -0x75e1 033699 arg mem_gy ,rega -0x75e2 033700 arg mem_t0_256 ,contw -0x75e3 033701 call bn_sqrmod -0x75e4 033702 arg mem_gx ,rega -0x75e5 033703 arg mem_t2_256 ,contw -0x75e6 033704 call bn_sqrmod -0x75e7 033705 arg mem_t2_256 ,rega -0x75e8 033706 arg mem_gx ,regb -0x75e9 033707 arg mem_t2_256 ,contw -0x75ea 033708 call bn_mulmod -0x75eb 033709 arg mem_a ,rega -0x75ec 033710 arg mem_gx ,regb -0x75ed 033711 arg mem_t3_256 ,contw -0x75ee 033712 call bn_mulmod -0x75ef 033713 arg mem_t3_256 ,rega -0x75f0 033714 arg mem_t2_256 ,regb -0x75f1 033715 arg mem_t2_256 ,contw -0x75f2 033716 call bn_addmod -0x75f3 033717 arg mem_t0_256 ,rega -0x75f4 033718 arg mem_t2_256 ,regb -0x75f5 033719 arg mem_t0_256 ,contw -0x75f6 033720 branch bn_submod -: 033723 sp_calculate_commitment: -0x75f7 033724 fetch 1 ,mem_sp_calc -0x75f8 033725 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc -0x75f9 033726 call sp_local_random_key_generator -0x75fa 033727 arg mem_sp_prarm_stack ,contw -0x75fb 033728 setarg mem_sp_random_local_end -0x75fc 033729 istore 2 ,contw -0x75fd 033730 setarg mem_sp_pubkey_local_x_end -0x75fe 033731 istore 2 ,contw -0x75ff 033732 setarg mem_sp_pubkey_remote_x_end -0x7600 033733 istore 2 ,contw -0x7601 033734 branch sp_calculate_commitment0 -: 033735 master_sp_calculate_commitment: -0x7602 033736 arg mem_sp_prarm_stack ,contw -0x7603 033737 setarg mem_sp_random_remote_end -0x7604 033738 istore 2 ,contw -0x7605 033739 setarg mem_sp_pubkey_remote_x_end -0x7606 033740 istore 2 ,contw -0x7607 033741 setarg mem_sp_pubkey_local_x_end -0x7608 033742 istore 2 ,contw -: 033743 sp_calculate_commitment0: -0x7609 033744 call function_f1 -0x760a 033745 fetch 1 ,mem_master_sp_state -0x760b 033746 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 -0x760c 033747 jam sp_flag_commit ,mem_sp_flag -0x760d 033748 jam sp_stat_commit_send ,mem_sp_state -0x760e 033749 rtn -: 033750 master_sp_calculate_commitment0: -0x760f 033751 jam sp_stat_commitment_compare ,mem_master_sp_state -0x7610 033752 call sp_master_generate_local_key -0x7611 033753 branch master_set_mem_master_sp_flag -: 033755 sp_local_random_key_generator: -0x7612 033756 arg mem_sp_random_local ,contw -0x7613 033757 force 8 ,queue -0x7614 033758 branch random_generator -: 033760 sp_calculate_commitment_wait_dhkey_calc: -0x7615 033761 jam sp_flag_commit ,mem_sp_flag -0x7616 033762 rtn -: 033764 sp_confirm_check: -0x7617 033766 bpatchx patch3c_6 ,mem_patch3c -0x7618 033767 arg mem_addr_value ,contw -0x7619 033768 fetch 6 ,mem_lap -0x761a 033769 istore 6 ,contw -0x761b 033770 fetch 6 ,mem_plap -0x761c 033771 istore 6 ,contw -0x761d 033772 fetch 3 ,mem_sp_iocap_remote -0x761e 033773 istore 3 ,contw -0x761f 033775 call function_f3a -0x7620 033777 arg mem_sp_calc_result_high ,rega -0x7621 033778 arg mem_sp_check_result ,regb -0x7622 033779 force 4 ,queue -0x7623 033780 call compare4 -0x7624 033781 nbranch sp_confirm_check_failed ,true -0x7625 033783 call sp_confirm_check_success -0x7626 033784 jam lmp_dhkey_check ,mem_lmi_opcode2 -0x7627 033785 branch tid_set_reply -: 033787 sp_confirm_check_success: -0x7628 033788 fetch 1 ,mem_master_sp_state -0x7629 033789 beq sp_stat_confirm_check ,sp_confirm_check_success_master -0x762a 033790 jam sp_stat_confirm_calc ,mem_sp_state -0x762b 033791 jam sp_flag_commit ,mem_sp_flag -0x762c 033792 jam lmp_accepted ,mem_lmo_opcode2 -0x762d 033793 rtn -: 033794 sp_confirm_check_success_master: -0x762e 033795 jam lmp_accepted ,mem_lmo_opcode2 -0x762f 033796 jam sp_state_end ,mem_master_sp_state -0x7630 033797 branch master_set_mem_master_sp_flag -: 033800 sp_confirm_check_failed: -0x7631 033801 fetch 1 ,mem_master_sp_state -0x7632 033802 beq sp_stat_confirm_check ,sp_confirm_check_failed_master -0x7633 033803 jam sp_stat_null ,mem_sp_state -0x7634 033804 jam lmp_not_accepted ,mem_lmo_opcode2 -0x7635 033806 jam authentication_failure_error ,mem_lmo_reason2 -0x7636 033807 rtn -: 033808 sp_confirm_check_failed_master: -0x7637 033809 jam lmp_not_accepted ,mem_lmo_opcode2 -0x7638 033810 jam sp_stat_null ,mem_master_sp_state -0x7639 033811 rtn -: 033813 sp_confirm_calc: -0x763a 033814 fetch 1 ,mem_sp_dh_ready -0x763b 033815 beq sp_flag_commit ,sp_confirm_calc_ready -0x763c 033816 jam sp_stat_confirm_calc ,mem_master_sp_state -0x763d 033817 branch master_set_mem_master_sp_flag -: 033818 sp_confirm_calc_ready: -0x763e 033819 arg mem_addr_value ,contw -0x763f 033820 fetch 6 ,mem_plap -0x7640 033821 istore 6 ,contw -0x7641 033822 fetch 6 ,mem_lap -0x7642 033823 istore 6 ,contw -0x7643 033824 fetch 3 ,mem_sp_iocap_local -0x7644 033825 istore 3 ,contw -0x7645 033827 call function_f3b -0x7646 033828 fetch 1 ,mem_master_sp_state -0x7647 033829 beq sp_stat_confirm_calc ,sp_confirm_calc_master -0x7648 033830 jam sp_stat_confirm_send ,mem_sp_state -0x7649 033831 jam sp_flag_commit ,mem_sp_flag -0x764a 033832 rtn -: 033833 sp_confirm_calc_master: -0x764b 033834 jam sp_stat_confirm_send ,mem_master_sp_state -0x764c 033835 jam sp_flag_commit ,mem_master_sp_flag -0x764d 033836 rtn -: 033838 sp_master_key_prarm_push: -0x764e 033839 arg mem_sp_prarm_stack ,contw -0x764f 033840 fetch 6 ,mem_plap -0x7650 033841 istore 6 ,contw -0x7651 033842 fetch 6 ,mem_lap -0x7652 033843 istore 6 ,contw -0x7653 033844 setarg mem_sp_random_local_end -0x7654 033845 istore 2 ,contw -0x7655 033846 setarg mem_sp_random_remote_end -0x7656 033847 istore 2 ,contw -0x7657 033848 branch sp_link_key_calc -: 033849 sp_link_key_prarm_push: -0x7658 033850 jam sp_stat_done ,mem_sp_state -0x7659 033851 arg mem_sp_prarm_stack ,contw -0x765a 033852 fetch 6 ,mem_lap -0x765b 033853 istore 6 ,contw -0x765c 033854 fetch 6 ,mem_plap -0x765d 033855 istore 6 ,contw -0x765e 033856 setarg mem_sp_random_remote_end -0x765f 033857 istore 2 ,contw -0x7660 033858 setarg mem_sp_random_local_end -0x7661 033859 istore 2 ,contw -: 033860 sp_link_key_calc: -0x7662 033862 arg mem_addr_value ,contw -0x7663 033863 fetch 6 ,mem_sp_prarm_stack -0x7664 033864 istore 6 ,contw -0x7665 033865 fetch 6 ,mem_sp_prarm_stack + 6 -0x7666 033866 istore 6 ,contw -0x7667 033868 call function_f2 -0x7668 033871 jam 1 ,mem_link_key_exists -0x7669 033872 arg mem_link_key ,contw -0x766a 033873 arg mem_sp_calc_result_high ,contr -0x766b 033874 call memcpy16 -0x766c 033875 branch generate_linkkey_continue -: 033878 sp_pubkey_calc: -0x766d 033879 bpatchx patch3c_7 ,mem_patch3c -0x766e 033880 fetch 1 ,mem_sp_local_key_invalid -0x766f 033881 rtnne sp_key_invalid -0x7670 033882 fetch 1 ,mem_sp_calc -0x7671 033883 rtnne sp_calc_standby -0x7672 033884 arg mem_sp_private_key ,contw -0x7673 033885 force 11 ,queue -0x7674 033886 call random_generator -0x7675 033887 random pdata -0x7676 033888 rshift pdata ,pdata -0x7677 033889 istore 2 ,contw -0x7678 033891 arg mem_k ,contw -0x7679 033892 arg mem_sp_private_key ,contr -0x767a 033893 call memcpy24 -0x767b 033895 arg mem_ax ,contw -0x767c 033896 arg mem_gx ,contr -0x767d 033897 call memcpy48 -0x767e 033899 arg mem_az ,contw -0x767f 033900 call bn_zero -0x7680 033901 jam 1 ,mem_az -0x7681 033903 call eckp_calc_init -0x7682 033904 jam sp_calc_pubkey ,mem_sp_calc -0x7683 033905 rtn -: 033907 sp_pubkey_generated: -0x7684 033908 arg mem_sp_pubkey_local ,contw -0x7685 033909 arg mem_bx ,contr -0x7686 033910 call memcpy48 -0x7687 033911 jam sp_key_valid ,mem_sp_local_key_invalid -0x7688 033912 jam sp_calc_standby ,mem_sp_calc -0x7689 033913 rtn -: 033915 sp_dhkey_calc: -0x768a 033916 bpatchx patch3d_0 ,mem_patch3d -0x768b 033917 fetch 1 ,mem_sp_dhkey_invalid -0x768c 033918 rtnne sp_key_invalid -0x768d 033919 fetch 1 ,mem_sp_calc -0x768e 033920 rtnne sp_calc_standby -0x768f 033922 arg mem_k ,contw -0x7690 033923 arg mem_sp_private_key ,contr -0x7691 033924 call memcpy24 -0x7692 033926 arg mem_ax ,contw -0x7693 033927 arg mem_sp_pubkey_remote ,contr -0x7694 033928 call memcpy48 -0x7695 033930 arg mem_az ,contw -0x7696 033931 call bn_zero -0x7697 033932 jam 1 ,mem_az -0x7698 033934 call eckp_calc_init -0x7699 033935 jam sp_calc_dhkey ,mem_sp_calc -0x769a 033936 rtn -: 033938 sp_dhkey_generated: -0x769b 033939 jam sp_flag_commit ,mem_sp_dh_ready -0x769c 033940 arg mem_sp_dhkey ,contw -0x769d 033941 arg mem_bx ,contr -0x769e 033942 call memcpy24 -0x769f 033943 jam sp_key_valid ,mem_sp_dhkey_invalid -0x76a0 033944 jam sp_calc_standby ,mem_sp_calc -0x76a1 033945 rtn -: 033947 random_generator: -0x76a2 033948 increase -1 ,queue -0x76a3 033949 nrtn positive -0x76a4 033950 random pdata -0x76a5 033951 istore 2 ,contw -0x76a6 033952 branch random_generator -: 033953 compare4: -0x76a7 033954 increase -1 ,queue -0x76a8 033955 nbranch compare4_success ,positive -0x76a9 033956 ifetch 4 ,rega -0x76aa 033957 copy pdata ,temp -0x76ab 033958 ifetch 4 ,regb -0x76ac 033959 iflip temp ,pdata -0x76ad 033960 nbranch compare4_failed ,zero -0x76ae 033961 increase 4 ,rega -0x76af 033962 increase 4 ,regb -0x76b0 033963 branch compare4 -: 033964 compare4_failed: -0x76b1 033965 disable true -0x76b2 033966 rtn -: 033967 compare4_success: -0x76b3 033968 enable true -0x76b4 033969 rtn -: 033976 simple_pairing_sequence: -0x76b5 033977 bpatchx patch3d_1 ,mem_patch3d -0x76b6 033978 fetch 1 ,mem_sp_flag -0x76b7 033979 rtn blank -0x76b8 033980 call lmo_fifo_check -0x76b9 033981 nrtn blank -0x76ba 033982 jam sp_flag_standby ,mem_sp_flag -0x76bb 033983 fetch 1 ,mem_sp_state -0x76bc 033984 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header -0x76bd 033985 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm -0x76be 033986 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number -0x76bf 033987 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check -0x76c0 033988 beq sp_stat_key_generate ,sp_generate_local_key -0x76c1 033989 beq sp_stat_commit_calc ,sp_calculate_commitment -0x76c2 033990 beq sp_stat_confirm_check ,sp_confirm_check -0x76c3 033991 beq sp_stat_confirm_calc ,sp_confirm_calc -0x76c4 033992 beq sp_stat_link_key_calc ,sp_link_key_prarm_push -0x76c5 033994 rtn -: 033996 master_simple_paring_sequence: -0x76c6 033997 bpatchx patch3d_2 ,mem_patch3d -0x76c7 033998 fetch 1 ,mem_master_sp_flag -0x76c8 033999 rtn blank -0x76c9 034000 call lmo_fifo_check -0x76ca 034001 nrtn blank -0x76cb 034002 jam sp_flag_standby ,mem_master_sp_flag -0x76cc 034003 fetch 1 ,mem_master_sp_state -0x76cd 034004 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get -0x76ce 034005 beq sp_master_stat_start_done ,sp_master_send_io_cap_send -0x76cf 034006 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header -0x76d0 034007 beq sp_stat_commit_calc ,master_sp_calculate_commitment -0x76d1 034008 beq sp_stat_commitment_compare ,sp_master_commitment_compare -0x76d2 034009 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number -0x76d3 034010 beq sp_stat_confirm_calc ,sp_confirm_calc -0x76d4 034011 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check -0x76d5 034012 beq sp_stat_confirm_check ,sp_confirm_check -0x76d6 034013 beq sp_state_end ,master_sp_sm_end -0x76d7 034014 rtn -: 034016 master_set_mem_master_sp_flag: -0x76d8 034017 jam sp_flag_commit ,mem_master_sp_flag -0x76d9 034018 rtn -: 034020 master_clear_mem_master_sp_flag: -0x76da 034021 jam sp_flag_standby ,mem_master_sp_flag -0x76db 034022 rtn -: 034023 sp_calc_sequence: -0x76dc 034024 bpatchx patch3d_3 ,mem_patch3d -0x76dd 034025 fetch 1 ,mem_ssp_enable -0x76de 034026 rtn blank -0x76df 034027 fetch 1 ,mem_sp_calc -0x76e0 034028 rtn blank -0x76e1 034029 increase 0x80 ,pdata -0x76e2 034030 store 1 ,mem_sp_calc -0x76e3 034031 rtnbit1 7 -0x76e4 034032 fetch 1 ,mem_ec_loopc -0x76e5 034033 branch sp_calc_sequence_done ,blank -0x76e6 034034 branch eckp_calc -: 034036 sp_calc_sequence_done: -0x76e7 034037 call ecunmapz -0x76e8 034038 fetch 1 ,mem_sp_calc -0x76e9 034039 beq sp_calc_pubkey ,sp_pubkey_generated -0x76ea 034040 beq sp_calc_dhkey ,sp_dhkey_generated -0x76eb 034041 rtn -: 034044 bn_testbit: -0x76ec 034045 and pdata ,7 ,queue -0x76ed 034046 rshift3 pdata ,pdata -0x76ee 034047 iadd contr ,contr -0x76ef 034048 ifetch 1 ,contr -0x76f0 034049 qisolate0 pdata -0x76f1 034050 rtn -: 034053 ec_copy: -0x76f2 034054 call memcpy24 -0x76f3 034055 call memcpy24 -0x76f4 034056 branch memcpy24 -: 034059 bn_eq_zero: -0x76f5 034060 ifetch 8 ,contr -0x76f6 034061 nrtn blank -0x76f7 034062 ifetch 8 ,contr -0x76f8 034063 nrtn blank -0x76f9 034064 ifetch 8 ,contr -0x76fa 034065 rtn -: 034070 bn_eq_0: -0x76fb 034071 ifetch 4 ,rega -0x76fc 034072 iforce temp -0x76fd 034073 ifetch 4 ,regb -0x76fe 034074 isub temp ,null -0x76ff 034075 nrtn zero -0x7700 034076 increase 4 ,rega -0x7701 034077 increase 4 ,regb -0x7702 034078 loop bn_eq_0 -0x7703 034079 rtn -: 034082 bn_bigeq: -0x7704 034083 force 6 ,loopcnt -0x7705 034084 increase 20 ,rega -0x7706 034085 increase 20 ,regb -: 034086 bn_bigeq_0: -0x7707 034087 ifetch 4 ,regb -0x7708 034088 iforce temp -0x7709 034089 ifetch 4 ,rega -0x770a 034090 isub temp ,pdata -0x770b 034091 nrtn positive -0x770c 034092 nrtn blank -0x770d 034093 increase -4 ,rega -0x770e 034094 increase -4 ,regb -0x770f 034095 loop bn_bigeq_0 -0x7710 034096 rtn -: 034098 bn_add: -0x7711 034099 force 6 ,loopcnt -0x7712 034100 force 0 ,regc -: 034101 bn_add_0: -0x7713 034102 ifetch 4 ,rega -0x7714 034103 iforce temp -0x7715 034104 ifetch 4 ,regb -0x7716 034105 iadd temp ,pdata -0x7717 034106 iadd regc ,pdata -0x7718 034107 istore 4 ,contw -0x7719 034108 isolate1 32 ,pdata -0x771a 034109 setflag true ,0 ,regc -0x771b 034110 increase 4 ,rega -0x771c 034111 increase 4 ,regb -0x771d 034112 loop bn_add_0 -0x771e 034113 rtn -: 034115 bn_sub: -0x771f 034116 force 6 ,loopcnt -0x7720 034117 force 0 ,regc -: 034118 bn_sub_0: -0x7721 034119 ifetch 4 ,regb -0x7722 034120 iforce temp -0x7723 034121 ifetch 4 ,rega -0x7724 034122 isub temp ,pdata -0x7725 034123 isub regc ,pdata -0x7726 034124 istore 4 ,contw -0x7727 034125 isolate1 32 ,pdata -0x7728 034126 setflag true ,0 ,regc -0x7729 034127 increase 4 ,rega -0x772a 034128 increase 4 ,regb -0x772b 034129 loop bn_sub_0 -0x772c 034130 rtn -: 034132 bn_rshift6: -0x772d 034133 force 6 ,loopcnt -0x772e 034134 increase 20 ,rega -: 034135 bn_rshift: -0x772f 034136 force 0 ,regc -: 034137 bn_rshift_0: -0x7730 034138 ifetch 4 ,rega -0x7731 034139 isolate1 0 ,pdata -0x7732 034140 setflag true ,1 ,regc -0x7733 034141 rshift pdata ,pdata -0x7734 034142 isolate1 0 ,regc -0x7735 034143 setflag true ,31 ,pdata -0x7736 034144 istore 4 ,rega -0x7737 034145 increase -4 ,rega -0x7738 034146 rshift regc ,regc -0x7739 034147 loop bn_rshift_0 -0x773a 034148 rtn -: 034150 bn_lshift: -0x773b 034151 force 6 ,loopcnt -0x773c 034152 force 0 ,regc -: 034153 bn_lshift_0: -0x773d 034154 ifetch 4 ,rega -0x773e 034155 isolate1 31 ,pdata -0x773f 034156 setflag true ,1 ,regc -0x7740 034157 lshift pdata ,pdata -0x7741 034158 isolate1 0 ,regc -0x7742 034159 setflag true ,0 ,pdata -0x7743 034160 istore 4 ,rega -0x7744 034161 increase 4 ,rega -0x7745 034162 rshift regc ,regc -0x7746 034163 loop bn_lshift_0 -0x7747 034164 rtn -: 034166 bn_lshiftmod: -0x7748 034167 call bn_lshift -: 034168 bn_lshiftmod_ismod: -0x7749 034169 isolate1 0 ,regc -0x774a 034170 branch bn_lshiftmod_0 ,true -0x774b 034171 arg mem_p ,regb -0x774c 034172 copy rega ,regc -0x774d 034173 increase -24 ,rega -0x774e 034174 call bn_bigeq -0x774f 034175 nrtn positive -0x7750 034176 copy regc ,rega -: 034177 bn_lshiftmod_0: -0x7751 034178 increase -24 ,rega -0x7752 034179 arg mem_p ,regb -0x7753 034180 copy rega ,contw -0x7754 034181 branch bn_sub -: 034184 bn_addmod: -0x7755 034185 call bn_add -0x7756 034186 copy contw ,rega -0x7757 034187 branch bn_lshiftmod_ismod -: 034189 bn_submod: -0x7758 034190 call bn_sub -0x7759 034191 isolate0 0 ,regc -0x775a 034192 rtn true -0x775b 034193 arg mem_p ,regb -0x775c 034194 add contw ,-24 ,rega -0x775d 034195 copy rega ,contw -0x775e 034196 branch bn_add -: 034199 bn_p192mod: -0x775f 034200 copy contw ,timeup -0x7760 034201 copy rega ,alarm -0x7761 034202 arg mem_tmp2 ,regb -0x7762 034203 copy regb ,contw -0x7763 034204 add rega ,24 ,contr -0x7764 034205 ifetch 8 ,contr -0x7765 034206 istore 8 ,contw -0x7766 034207 istore 8 ,contw -0x7767 034208 force 0 ,pdata -0x7768 034209 istore 8 ,contw -0x7769 034210 copy timeup ,contw -0x776a 034211 call bn_addmod -0x776b 034212 arg mem_tmp2 ,regb -0x776c 034213 copy regb ,contw -0x776d 034214 force 0 ,pdata -0x776e 034215 istore 8 ,contw -0x776f 034216 add alarm ,32 ,contr -0x7770 034217 ifetch 8 ,contr -0x7771 034218 istore 8 ,contw -0x7772 034219 istore 8 ,contw -0x7773 034220 copy timeup ,rega -0x7774 034221 copy rega ,contw -0x7775 034222 call bn_addmod -0x7776 034223 arg mem_tmp2 ,regb -0x7777 034224 copy regb ,contw -0x7778 034225 add alarm ,40 ,contr -0x7779 034226 ifetch 8 ,contr -0x777a 034227 istore 8 ,contw -0x777b 034228 istore 8 ,contw -0x777c 034229 istore 8 ,contw -0x777d 034230 copy timeup ,rega -0x777e 034231 copy rega ,contw -0x777f 034232 branch bn_addmod -: 034235 bn_load: -0x7780 034236 force 6 ,loopcnt -: 034237 bn_load_0: -0x7781 034238 ifetch 4 ,contr -0x7782 034239 iforce regext -0x7783 034240 increase 1 ,regext_index -0x7784 034241 loop bn_load_0 -0x7785 034242 rtn -: 034246 bn_mulmod: -0x7786 034247 copy contw ,timeup -0x7787 034248 arg mem_tmp1 ,contw -0x7788 034249 call bn_zero -0x7789 034250 arg mem_tmp1 ,contw -0x778a 034251 copy rega ,contr -0x778b 034252 force 0 ,regext_index -0x778c 034253 call bn_load -0x778d 034254 copy regb ,contr -0x778e 034255 call bn_load -0x778f 034256 force 0 ,regb -: 034257 bn_mulmod_1: -0x7790 034258 force 0 ,temp -0x7791 034259 force 6 ,regc -: 034260 bn_mulmod_0: -0x7792 034261 ifetch 4 ,contw -0x7793 034262 iforce rega -0x7794 034263 copy regb ,regext_index -0x7795 034264 deposit regext -0x7796 034265 copy regc ,regext_index -0x7797 034266 imul32 regext ,pdata -0x7798 034267 iadd rega ,pdata -0x7799 034268 iadd temp ,pdata -0x779a 034269 istore 4 ,contw -0x779b 034270 rshift32 pdata ,temp -0x779c 034271 increase 1 ,regc -0x779d 034272 compare 12 ,regc ,0xff -0x779e 034273 nbranch bn_mulmod_0 ,true -0x779f 034274 deposit temp -0x77a0 034275 istore 4 ,contw -0x77a1 034276 increase -24 ,contw -0x77a2 034277 increase 1 ,regb -0x77a3 034278 compare 6 ,regb ,0xff -0x77a4 034279 nbranch bn_mulmod_1 ,true -0x77a5 034280 arg mem_tmp1 ,rega -0x77a6 034281 copy timeup ,contw -0x77a7 034282 branch bn_p192mod -: 034285 bn_sqrmod: -0x77a8 034286 copy rega ,regb -0x77a9 034287 branch bn_mulmod -: 034289 bn_rshifteven: -0x77aa 034290 copy rega ,alarm -: 034291 bn_rshifteven_1: -0x77ab 034292 copy alarm ,rega -0x77ac 034293 ifetch 1 ,rega -0x77ad 034294 isolate1 0 ,pdata -0x77ae 034295 rtn true -0x77af 034296 call bn_rshift6 -0x77b0 034297 ifetch 1 ,regb -0x77b1 034298 isolate0 0 ,pdata -0x77b2 034299 branch bn_rshifteven_0 ,true -0x77b3 034300 arg mem_p ,rega -0x77b4 034301 copy regb ,contw -0x77b5 034302 call bn_add -0x77b6 034303 ifetch 1 ,regb -0x77b7 034304 iadd regc ,pdata -0x77b8 034305 istore 1 ,regb -0x77b9 034306 increase -24 ,regb -: 034307 bn_rshifteven_0: -0x77ba 034308 add regb ,24 ,rega -0x77bb 034309 force 7 ,loopcnt -0x77bc 034310 call bn_rshift -0x77bd 034311 branch bn_rshifteven_1 -: 034314 bn_invmod: -0x77be 034315 copy contw ,timeup -0x77bf 034316 arg mem_tmp0 ,contw -0x77c0 034317 call bn_zero -0x77c1 034318 force 0 ,pdata -0x77c2 034319 store 4 ,mem_tmp5 -0x77c3 034320 store 4 ,mem_t2 -0x77c4 034321 jam 1 ,mem_tmp0 -0x77c5 034322 arg mem_tmp1 ,contw -0x77c6 034323 call bn_zero -0x77c7 034324 arg mem_p ,contr -0x77c8 034325 arg mem_tmp2 ,contw -0x77c9 034326 call memcpy24 -0x77ca 034327 copy rega ,contr -0x77cb 034328 arg mem_tmp3 ,contw -0x77cc 034329 call memcpy24 -: 034330 bn_invmod_2: -0x77cd 034331 arg mem_tmp3 ,contr -0x77ce 034332 call bn_eq_zero -0x77cf 034333 branch bn_invmod_0 ,blank -0x77d0 034334 arg mem_tmp3 ,rega -0x77d1 034335 arg mem_tmp0 ,regb -0x77d2 034336 call bn_rshifteven -0x77d3 034338 arg mem_tmp2 ,rega -0x77d4 034339 arg mem_tmp1 ,regb -0x77d5 034340 call bn_rshifteven -0x77d6 034341 arg mem_tmp3 ,rega -0x77d7 034342 arg mem_tmp2 ,regb -0x77d8 034343 call bn_bigeq -0x77d9 034344 branch bn_invmod_1 ,positive -0x77da 034345 arg mem_tmp2 ,rega -0x77db 034346 arg mem_tmp3 ,regb -0x77dc 034347 copy rega ,contw -0x77dd 034348 call bn_sub -0x77de 034349 arg mem_tmp0 ,rega -0x77df 034350 arg mem_tmp1 ,regb -0x77e0 034351 copy regb ,contw -0x77e1 034352 call bn_add -0x77e2 034353 ifetch 1 ,rega -0x77e3 034354 iadd regc ,regc -0x77e4 034355 ifetch 1 ,regb -0x77e5 034356 iadd regc ,pdata -0x77e6 034357 istore 1 ,regb -0x77e7 034358 branch bn_invmod_2 -: 034359 bn_invmod_1: -0x77e8 034360 arg mem_tmp3 ,rega -0x77e9 034361 arg mem_tmp2 ,regb -0x77ea 034362 copy rega ,contw -0x77eb 034363 call bn_sub -0x77ec 034364 arg mem_tmp1 ,rega -0x77ed 034365 arg mem_tmp0 ,regb -0x77ee 034366 copy regb ,contw -0x77ef 034367 call bn_add -0x77f0 034368 ifetch 1 ,rega -0x77f1 034369 iadd regc ,regc -0x77f2 034370 ifetch 1 ,regb -0x77f3 034371 iadd regc ,pdata -0x77f4 034372 istore 1 ,regb -0x77f5 034373 branch bn_invmod_2 -: 034374 bn_invmod_0: -0x77f6 034375 arg mem_tmp0 ,contw -0x77f7 034376 call bn_zero -0x77f8 034377 fetch 1 ,mem_tmp5 -0x77f9 034378 store 1 ,mem_tmp0 -0x77fa 034379 store 1 ,mem_tmp0a -0x77fb 034380 arg mem_tmp0 ,rega -0x77fc 034381 arg mem_tmp1 ,regb -0x77fd 034382 copy regb ,contw -0x77fe 034383 call bn_addmod -0x77ff 034384 arg mem_p ,rega -0x7800 034385 arg mem_tmp1 ,regb -0x7801 034386 copy timeup ,contw -0x7802 034387 branch bn_submod -: 034392 ecdbl: -0x7803 034393 arg mem_cz ,rega -0x7804 034394 arg mem_t2 ,contw -0x7805 034395 call bn_sqrmod -0x7806 034396 arg mem_t2 ,rega -0x7807 034397 arg mem_t3 ,contw -0x7808 034398 call bn_sqrmod -0x7809 034399 arg mem_a ,rega -0x780a 034400 arg mem_t3 ,regb -0x780b 034401 arg mem_t3 ,contw -0x780c 034402 call bn_mulmod -0x780d 034403 arg mem_cx ,rega -0x780e 034404 arg mem_t2 ,contw -0x780f 034405 call bn_sqrmod -0x7810 034406 arg mem_t2 ,contr -0x7811 034407 arg mem_t1 ,contw -0x7812 034408 call memcpy24 -0x7813 034409 arg mem_t1 ,rega -0x7814 034410 call bn_lshiftmod -0x7815 034411 arg mem_t2 ,rega -0x7816 034412 arg mem_t1 ,regb -0x7817 034413 arg mem_t2 ,contw -0x7818 034414 call bn_addmod -0x7819 034415 arg mem_t2 ,rega -0x781a 034416 arg mem_t3 ,regb -0x781b 034417 arg mem_t2 ,contw -0x781c 034418 call bn_addmod -0x781d 034419 arg mem_cx ,contr -0x781e 034420 arg mem_t1 ,contw -0x781f 034421 call memcpy24 -0x7820 034422 arg mem_cy ,rega -0x7821 034423 arg mem_t3 ,contw -0x7822 034424 call bn_sqrmod -0x7823 034425 arg mem_t1 ,rega -0x7824 034426 call bn_lshiftmod -0x7825 034427 arg mem_t1 ,rega -0x7826 034428 call bn_lshiftmod -0x7827 034429 arg mem_t1 ,rega -0x7828 034430 arg mem_t3 ,regb -0x7829 034431 arg mem_t1 ,contw -0x782a 034432 call bn_mulmod -0x782b 034433 arg mem_t3 ,rega -0x782c 034434 arg mem_t0 ,contw -0x782d 034435 call bn_sqrmod -0x782e 034436 arg mem_t0 ,rega -0x782f 034437 call bn_lshiftmod -0x7830 034438 arg mem_t0 ,rega -0x7831 034439 call bn_lshiftmod -0x7832 034440 arg mem_t0 ,rega -0x7833 034441 call bn_lshiftmod -0x7834 034442 arg mem_cy ,contr -0x7835 034443 arg mem_t3 ,contw -0x7836 034444 call memcpy24 -0x7837 034445 arg mem_t3 ,rega -0x7838 034446 call bn_lshiftmod -0x7839 034447 arg mem_t3 ,rega -0x783a 034448 arg mem_cz ,regb -0x783b 034449 arg mem_cz ,contw -0x783c 034450 call bn_mulmod -0x783d 034451 arg mem_t2 ,rega -0x783e 034452 arg mem_t3 ,contw -0x783f 034453 call bn_sqrmod -0x7840 034454 arg mem_t3 ,rega -0x7841 034455 arg mem_t1 ,regb -0x7842 034456 arg mem_t3 ,contw -0x7843 034457 call bn_submod -0x7844 034458 arg mem_t3 ,rega -0x7845 034459 arg mem_t1 ,regb -0x7846 034460 arg mem_cx ,contw -0x7847 034461 call bn_submod -0x7848 034462 arg mem_t1 ,rega -0x7849 034463 arg mem_cx ,regb -0x784a 034464 arg mem_t3 ,contw -0x784b 034465 call bn_submod -0x784c 034466 arg mem_t3 ,rega -0x784d 034467 arg mem_t2 ,regb -0x784e 034468 arg mem_t3 ,contw -0x784f 034469 call bn_mulmod -0x7850 034470 arg mem_t3 ,rega -0x7851 034471 arg mem_t0 ,regb -0x7852 034472 arg mem_cy ,contw -0x7853 034473 branch bn_submod -: 034477 ecadd: -0x7854 034478 arg mem_az ,rega -0x7855 034479 arg mem_t7 ,contw -0x7856 034480 call bn_sqrmod -0x7857 034481 arg mem_cx ,rega -0x7858 034482 arg mem_t7 ,regb -0x7859 034483 arg mem_t0 ,contw -0x785a 034484 call bn_mulmod -0x785b 034485 arg mem_az ,rega -0x785c 034486 arg mem_t7 ,regb -0x785d 034487 arg mem_t7 ,contw -0x785e 034488 call bn_mulmod -0x785f 034489 arg mem_cy ,rega -0x7860 034490 arg mem_t7 ,regb -0x7861 034491 arg mem_t1 ,contw -0x7862 034492 call bn_mulmod -0x7863 034493 arg mem_cz ,rega -0x7864 034494 arg mem_t7 ,contw -0x7865 034495 call bn_sqrmod -0x7866 034496 arg mem_ax ,rega -0x7867 034497 arg mem_t7 ,regb -0x7868 034498 arg mem_t2 ,contw -0x7869 034499 call bn_mulmod -0x786a 034500 arg mem_cz ,rega -0x786b 034501 arg mem_t7 ,regb -0x786c 034502 arg mem_t7 ,contw -0x786d 034503 call bn_mulmod -0x786e 034504 arg mem_ay ,rega -0x786f 034505 arg mem_t7 ,regb -0x7870 034506 arg mem_t3 ,contw -0x7871 034507 call bn_mulmod -0x7872 034508 arg mem_t0 ,rega -0x7873 034509 arg mem_t2 ,regb -0x7874 034510 arg mem_t7 ,contw -0x7875 034511 call bn_submod -0x7876 034512 arg mem_t0 ,rega -0x7877 034513 arg mem_t2 ,regb -0x7878 034514 arg mem_t0 ,contw -0x7879 034515 call bn_addmod -0x787a 034516 arg mem_t1 ,rega -0x787b 034517 arg mem_t3 ,regb -0x787c 034518 arg mem_t2 ,contw -0x787d 034519 call bn_submod -0x787e 034520 arg mem_t1 ,rega -0x787f 034521 arg mem_t3 ,regb -0x7880 034522 arg mem_t1 ,contw -0x7881 034523 call bn_addmod -0x7882 034524 arg mem_t1 ,rega -0x7883 034525 arg mem_t7 ,regb -0x7884 034526 arg mem_t1 ,contw -0x7885 034527 call bn_mulmod -0x7886 034528 arg mem_cz ,rega -0x7887 034529 arg mem_az ,regb -0x7888 034530 arg mem_t3 ,contw -0x7889 034531 call bn_mulmod -0x788a 034532 arg mem_t3 ,rega -0x788b 034533 arg mem_t7 ,regb -0x788c 034534 arg mem_cz ,contw -0x788d 034535 call bn_mulmod -0x788e 034536 arg mem_t7 ,rega -0x788f 034537 arg mem_t7 ,contw -0x7890 034538 call bn_sqrmod -0x7891 034539 arg mem_t7 ,rega -0x7892 034540 arg mem_t0 ,regb -0x7893 034541 arg mem_t3 ,contw -0x7894 034542 call bn_mulmod -0x7895 034543 arg mem_t7 ,rega -0x7896 034544 arg mem_t1 ,regb -0x7897 034545 arg mem_t1 ,contw -0x7898 034546 call bn_mulmod -0x7899 034547 arg mem_t2 ,rega -0x789a 034548 arg mem_cx ,contw -0x789b 034549 call bn_sqrmod -0x789c 034550 arg mem_cx ,rega -0x789d 034551 arg mem_t3 ,regb -0x789e 034552 arg mem_cx ,contw -0x789f 034553 call bn_submod -0x78a0 034554 arg mem_cx ,contr -0x78a1 034555 arg mem_t7 ,contw -0x78a2 034556 call memcpy24 -0x78a3 034557 arg mem_t7 ,rega -0x78a4 034558 call bn_lshiftmod -0x78a5 034559 arg mem_t3 ,rega -0x78a6 034560 arg mem_t7 ,regb -0x78a7 034561 arg mem_t3 ,contw -0x78a8 034562 call bn_submod -0x78a9 034563 arg mem_t3 ,rega -0x78aa 034564 arg mem_t2 ,regb -0x78ab 034565 arg mem_t2 ,contw -0x78ac 034566 call bn_mulmod -0x78ad 034567 arg mem_t2 ,rega -0x78ae 034568 arg mem_t1 ,regb -0x78af 034569 arg mem_cy ,contw -0x78b0 034570 call bn_submod -0x78b1 034571 arg mem_cy ,rega -0x78b2 034572 arg mem_p ,regb -0x78b3 034573 arg mem_cy ,contw -0x78b4 034574 force 0 ,regc -0x78b5 034575 fetch 1 ,mem_cy -0x78b6 034576 isolate1 0 ,pdata -0x78b7 034577 call bn_add ,true -0x78b8 034578 copy regc ,alarm -0x78b9 034579 arg mem_cy ,rega -0x78ba 034580 call bn_rshift6 -0x78bb 034581 fetch 1 ,mem_cy5 -0x78bc 034582 isolate1 0 ,alarm -0x78bd 034583 setflag true ,7 ,pdata -0x78be 034584 store 1 ,mem_cy5 -0x78bf 034585 rtn -: 034589 eckp_0: -0x78c0 034590 fetch 1 ,mem_ec_loopc -0x78c1 034591 increase -1 ,pdata -0x78c2 034592 nrtn positive -0x78c3 034593 store 1 ,mem_ec_loopc -0x78c4 034594 fetch 1 ,mem_ec_infinite -0x78c5 034595 call ecdbl ,blank -0x78c6 034596 fetch 1 ,mem_ec_loopc -0x78c7 034597 arg mem_k ,contr -0x78c8 034598 call bn_testbit -0x78c9 034599 branch eckp_0 ,true -0x78ca 034600 fetch 1 ,mem_ec_infinite -0x78cb 034601 nbranch eckp_1 ,blank -0x78cc 034602 call ecadd -0x78cd 034603 branch eckp_0 -: 034604 eckp_1: -0x78ce 034605 jam 0 ,mem_ec_infinite -0x78cf 034606 arg mem_ax ,contr -0x78d0 034607 arg mem_cx ,contw -0x78d1 034608 call ec_copy -0x78d2 034609 branch eckp_0 -: 034612 ecunmapz: -0x78d3 034613 arg mem_cz ,rega -0x78d4 034614 arg mem_t3 ,contw -0x78d5 034615 call bn_invmod -0x78d6 034616 arg mem_t3 ,rega -0x78d7 034617 arg mem_t1 ,contw -0x78d8 034618 call bn_sqrmod -0x78d9 034619 arg mem_cx ,rega -0x78da 034620 arg mem_t1 ,regb -0x78db 034621 arg mem_bx ,contw -0x78dc 034622 call bn_mulmod -0x78dd 034623 arg mem_t3 ,rega -0x78de 034624 arg mem_t1 ,regb -0x78df 034625 arg mem_t2 ,contw -0x78e0 034626 call bn_mulmod -0x78e1 034627 arg mem_cy ,rega -0x78e2 034628 arg mem_t2 ,regb -0x78e3 034629 arg mem_by ,contw -0x78e4 034630 branch bn_mulmod -: 034634 sha_endian_swap2: -0x78e5 034635 ifetch 4 ,contr -0x78e6 034636 force 4 ,rega -0x78e7 034637 increase 3 ,contw -: 034638 sha_endian_loop: -0x78e8 034639 istore 1 ,contw -0x78e9 034640 rshift8 pdata ,pdata -0x78ea 034641 increase -2 ,contw -0x78eb 034642 increase -1 ,rega -0x78ec 034643 nbranch sha_endian_loop ,zero -0x78ed 034644 increase 5 ,contw -0x78ee 034645 loop sha_endian_swap2 -0x78ef 034646 rtn -: 034649 sha_getw: -0x78f0 034650 lshift2 queue ,pdata -0x78f1 034651 iadd timeup ,contr -0x78f2 034652 ifetch 4 ,contr -0x78f3 034653 rtn -: 034655 sha_r: -0x78f4 034656 force 16 ,alarm -0x78f5 034657 arg memdat ,timeup -: 034658 sha_r_loop: -0x78f6 034659 add alarm ,-7 ,queue -0x78f7 034660 call sha_getw -0x78f8 034661 iforce temp -0x78f9 034662 add alarm ,-16 ,queue -0x78fa 034663 call sha_getw -0x78fb 034664 iadd temp ,temp -0x78fc 034665 add alarm ,-2 ,queue -0x78fd 034666 call sha_getw -0x78fe 034667 shasx pdata ,1 ,pdata -0x78ff 034668 iadd temp ,temp -0x7900 034669 add alarm ,-15 ,queue -0x7901 034670 call sha_getw -0x7902 034671 shasx pdata ,0 ,pdata -0x7903 034672 iadd temp ,temp -0x7904 034673 lshift2 alarm ,pdata -0x7905 034674 iadd timeup ,contw -0x7906 034675 istoret 4 ,contw -0x7907 034676 increase 1 ,alarm -0x7908 034677 compare 64 ,alarm ,0xff -0x7909 034678 nbranch sha_r_loop ,true -0x790a 034679 rtn -: 034682 sha_init: -0x790b 034683 arg memh0 ,contr -0x790c 034684 force 7 ,regext_index -: 034685 sha_init_0: -0x790d 034686 ifetch 4 ,contr -0x790e 034687 iforce regext -0x790f 034688 increase -1 ,regext_index -0x7910 034689 branch sha_init_0 ,positive -0x7911 034690 rtn -: 034692 sha: -0x7912 034693 bpatchx patch3d_4 ,mem_patch3d -0x7913 034694 call sha_r -0x7914 034695 arg memahbak ,contw -0x7915 034696 force 0 ,regext_index -: 034697 sha_0: -0x7916 034698 deposit regext -0x7917 034699 istore 4 ,contw -0x7918 034700 increase 1 ,regext_index -0x7919 034701 compare 8 ,regext_index ,0xff -0x791a 034702 nbranch sha_0 ,true -0x791b 034703 call enable_authrom -0x791c 034704 arg memk ,timeup -0x791d 034705 arg memdat ,alarm -0x791e 034706 force 64 ,loopcnt -: 034707 sha_loop: -0x791f 034708 ifetcht 4 ,alarm -0x7920 034709 ifetch 4 ,timeup -0x7921 034710 increase 4 ,timeup -0x7922 034711 increase 4 ,alarm -0x7923 034712 iadd temp ,pdata -0x7924 034713 force 7 ,regext_index -0x7925 034714 iadd regext ,temp -0x7926 034715 force 4 ,regext_index -0x7927 034716 shasx regext ,3 ,pdata -0x7928 034717 iadd temp ,temp -0x7929 034718 force 5 ,regext_index -0x792a 034719 deposit regext -0x792b 034720 force 6 ,regext_index -0x792c 034721 ixor regext ,pdata -0x792d 034722 force 4 ,regext_index -0x792e 034723 iand regext ,pdata -0x792f 034724 force 6 ,regext_index -0x7930 034725 ixor regext ,pdata -0x7931 034726 iadd temp ,temp -0x7932 034727 force 7 ,regext_index -0x7933 034728 copy temp ,regext -0x7934 034729 force 3 ,regext_index -0x7935 034730 deposit regext -0x7936 034731 iadd temp ,regext -0x7937 034732 force 0 ,regext_index -0x7938 034733 deposit regext -0x7939 034734 force 1 ,regext_index -0x793a 034735 iand regext ,temp -0x793b 034736 ior regext ,pdata -0x793c 034737 force 2 ,regext_index -0x793d 034738 iand regext ,pdata -0x793e 034739 ior temp ,temp -0x793f 034740 force 0 ,regext_index -0x7940 034741 shasx regext ,2 ,pdata -0x7941 034742 iadd temp ,pdata -0x7942 034743 force 7 ,regext_index -0x7943 034744 iadd regext ,regext -0x7944 034745 regexrot -0x7945 034746 loop sha_loop -0x7946 034747 arg memahbak ,contr -0x7947 034748 force 0 ,regext_index -: 034749 sha_1: -0x7948 034750 ifetch 4 ,contr -0x7949 034751 iadd regext ,regext -0x794a 034752 increase 1 ,regext_index -0x794b 034753 compare 8 ,regext_index ,0xff -0x794c 034754 nbranch sha_1 ,true -0x794d 034755 branch disable_authrom -: 034758 sha_result: -0x794e 034759 arg memresult ,contw -0x794f 034760 force 7 ,regext_index -: 034761 sha_regext_save: -0x7950 034762 deposit regext -0x7951 034763 istore 4 ,contw -0x7952 034764 increase -1 ,regext_index -0x7953 034765 branch sha_regext_save ,positive -0x7954 034766 rtn -: 034768 pad_xor: -0x7955 034770 arg memdat ,contw -0x7956 034771 increase -4 ,contr -0x7957 034772 sub loopcnt ,16 ,rega -: 034773 pad_xor_0: -0x7958 034774 ifetch 4 ,contr -0x7959 034775 ixor temp ,pdata -0x795a 034776 istore 4 ,contw -0x795b 034777 increase -8 ,contr -0x795c 034778 loop pad_xor_0 -0x795d 034779 copy rega ,loopcnt -0x795e 034780 deposit temp -: 034781 pad_xor_1: -0x795f 034782 istore 4 ,contw -0x7960 034783 loop pad_xor_1 -0x7961 034784 rtn -: 034786 g_noninit_number_confirm: -0x7962 034787 call g_noninit0 -0x7963 034788 call sha_result -0x7964 034789 branch g_common0 -: 034791 g_noninit: -0x7965 034792 call g_noninit0 -0x7966 034793 branch g_common0 -: 034795 g_noninit0: -0x7967 034796 arg mem_sp_pubkey_remote_x_end ,contr -0x7968 034797 arg memdat ,contw -0x7969 034798 force 6 ,loopcnt -0x796a 034799 call memcpy_dword_swap -0x796b 034800 arg mem_sp_pubkey_local_x_end ,contr -0x796c 034801 force 6 ,loopcnt -0x796d 034802 call memcpy_dword_swap -0x796e 034803 arg mem_sp_random_remote_end ,contr -0x796f 034804 call memcpy_dword_swap4 -0x7970 034805 call sha_init -0x7971 034806 call sha -0x7972 034807 arg mem_sp_random_local_end ,contr -0x7973 034808 arg memdat ,contw -0x7974 034809 branch g_common -: 034811 g_init: -0x7975 034812 arg mem_sp_pubkey_local_x_end ,contr -0x7976 034813 arg memdat ,contw -0x7977 034814 force 6 ,loopcnt -0x7978 034815 call memcpy_dword_swap -0x7979 034816 arg mem_sp_pubkey_remote_x_end ,contr -0x797a 034817 force 6 ,loopcnt -0x797b 034818 call memcpy_dword_swap -0x797c 034819 arg mem_sp_random_local_end ,contr -0x797d 034820 call memcpy_dword_swap4 -0x797e 034821 call sha_init -0x797f 034822 call sha -0x7980 034823 arg mem_sp_random_remote_end ,contr -0x7981 034824 arg memdat ,contw -0x7982 034825 call g_common -0x7983 034826 branch g_common0 -: 034828 g_common: -0x7984 034829 call memcpy_dword_swap4 -0x7985 034830 setarg 0x800000 -0x7986 034831 lshift8 pdata ,pdata -0x7987 034832 istore 4 ,contw -0x7988 034833 force 5 ,loopcnt -0x7989 034834 call memset0 -0x798a 034835 setarg 640 -0x798b 034836 istore 4 ,contw -0x798c 034837 branch sha -: 034838 g_common0: -0x798d 034839 fetch 4 ,memresult -0x798e 034841 arg 1000 ,rega -0x798f 034842 idiv rega -0x7990 034843 call wait_div_end -0x7991 034844 remainder pdata -0x7992 034845 store 4 ,mem_gkey -0x7993 034846 quotient pdata -0x7994 034847 arg 1000 ,rega -0x7995 034848 idiv rega -0x7996 034849 call wait_div_end -0x7997 034850 remainder pdata -0x7998 034851 arg 1000 ,rega -0x7999 034852 imul32 rega ,pdata -0x799a 034853 fetcht 4 ,mem_gkey -0x799b 034854 iadd temp ,pdata -0x799c 034855 store 4 ,mem_gkey -0x799d 034856 rtn -: 034858 function_f1_no_key: -0x799e 034859 jam 0 ,mem_passkey_1bit -0x799f 034860 branch function_f1_common -: 034862 function_f1: -0x79a0 034863 fetch 1 ,mem_ssp_mode_flag -0x79a1 034864 bne ssp_mode_passkey_entry_flag ,function_f1_no_key -: 034865 function_f1_common: -0x79a2 034866 bpatchx patch3d_5 ,mem_patch3d -0x79a3 034867 setarg 0x363636 -0x79a4 034868 lshift8 pdata ,temp -0x79a5 034869 or_into 0x36 ,temp -0x79a6 034870 fetch 2 ,mem_sp_prarm_stack -0x79a7 034871 copy pdata ,contr -0x79a8 034872 force 4 ,loopcnt -0x79a9 034873 call pad_xor -0x79aa 034874 call sha_init -0x79ab 034875 call sha -0x79ac 034876 fetch 2 ,mem_sp_prarm_stack + 2 -0x79ad 034877 copy pdata ,contr -0x79ae 034878 arg memdat ,contw -0x79af 034879 force 6 ,loopcnt -0x79b0 034880 call memcpy_dword_swap -0x79b1 034881 fetch 2 ,mem_sp_prarm_stack + 4 -0x79b2 034882 copy pdata ,contr -0x79b3 034883 force 6 ,loopcnt -0x79b4 034884 call memcpy_dword_swap -0x79b5 034885 setarg 0x800000 -0x79b6 034886 istore 3 ,contw -0x79b7 034888 fetch 1 ,mem_passkey_1bit -0x79b8 034890 istore 1 ,contw -0x79b9 034891 force 0 ,pdata -0x79ba 034892 istore 8 ,contw -0x79bb 034893 setarg 0x0388 -0x79bc 034894 istore 4 ,contw -0x79bd 034895 call sha -0x79be 034896 call sha_result -0x79bf 034897 arg memresult ,contr -0x79c0 034898 arg memahsave ,contw -0x79c1 034899 call memcpy32 -0x79c2 034901 setarg 0x5c5c5c -0x79c3 034902 lshift8 pdata ,temp -0x79c4 034903 or_into 0x5c ,temp -0x79c5 034904 fetch 2 ,mem_sp_prarm_stack -0x79c6 034905 copy pdata ,contr -0x79c7 034906 force 4 ,loopcnt -0x79c8 034907 call pad_xor -0x79c9 034908 call sha_init -0x79ca 034909 call sha -0x79cb 034910 arg memahsave_end ,contr -0x79cc 034911 arg memdat ,contw -0x79cd 034912 force 8 ,loopcnt -0x79ce 034913 call memcpy_dword_swap -0x79cf 034914 setarg 0x800000 -0x79d0 034915 lshift8 pdata ,pdata -0x79d1 034916 istore 4 ,contw -0x79d2 034917 call bn_zero -0x79d3 034918 setarg 0x0300 -0x79d4 034919 istore 4 ,contw -0x79d5 034920 call sha -0x79d6 034921 branch sha_result -: 034924 function_f2: -0x79d7 034925 setarg 0x363636 -0x79d8 034926 lshift8 pdata ,temp -0x79d9 034927 or_into 0x36 ,temp -0x79da 034928 arg mem_sp_dhkey_end ,contr -0x79db 034929 force 6 ,loopcnt -0x79dc 034930 call pad_xor -0x79dd 034931 call sha_init -0x79de 034932 call sha -0x79df 034933 fetch 2 ,mem_sp_prarm_stack + 12 -0x79e0 034934 copy pdata ,contr -0x79e1 034935 arg memdat ,contw -0x79e2 034936 call memcpy_dword_swap4 -0x79e3 034937 fetch 2 ,mem_sp_prarm_stack + 14 -0x79e4 034938 copy pdata ,contr -0x79e5 034939 call memcpy_dword_swap4 -0x79e6 034941 setarg 0x62746c -0x79e7 034942 lshift8 pdata ,pdata -0x79e8 034943 or_into 0x6b ,pdata -0x79e9 034944 istore 4 ,contw -0x79ea 034945 arg mem_addr_value_end ,contr -0x79eb 034946 force 3 ,loopcnt -0x79ec 034947 call memcpy_dword_swap -0x79ed 034949 setarg 0x800000 -0x79ee 034950 lshift8 pdata ,pdata -0x79ef 034951 istore 4 ,contw -0x79f0 034952 force 0 ,pdata -0x79f1 034953 istore 8 ,contw -0x79f2 034954 setarg 0x0380 -0x79f3 034955 istore 4 ,contw -0x79f4 034956 call sha -0x79f5 034958 call sha_result -0x79f6 034959 arg memresult ,contr -0x79f7 034960 arg memahsave ,contw -0x79f8 034961 call memcpy32 -0x79f9 034963 setarg 0x5c5c5c -0x79fa 034964 lshift8 pdata ,temp -0x79fb 034965 or_into 0x5c ,temp -0x79fc 034966 arg mem_sp_dhkey_end ,contr -0x79fd 034967 force 6 ,loopcnt -0x79fe 034968 call pad_xor -0x79ff 034969 call sha_init -0x7a00 034970 call sha -0x7a01 034971 arg memahsave_end ,contr -0x7a02 034972 arg memdat ,contw -0x7a03 034973 force 8 ,loopcnt -0x7a04 034974 call memcpy_dword_swap -0x7a05 034975 setarg 0x800000 -0x7a06 034976 lshift8 pdata ,pdata -0x7a07 034977 istore 4 ,contw -0x7a08 034978 call bn_zero -0x7a09 034979 setarg 0x0300 -0x7a0a 034980 istore 4 ,contw -0x7a0b 034981 call sha -0x7a0c 034982 branch sha_result -: 034985 function_f3a: -0x7a0d 034986 fetch 1 ,mem_ssp_mode_flag -0x7a0e 034987 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin -: 034988 function_f3a_common: -0x7a0f 034989 bpatchx patch3d_6 ,mem_patch3d -0x7a10 034990 setarg 0x363636 -0x7a11 034991 lshift8 pdata ,temp -0x7a12 034992 or_into 0x36 ,temp -0x7a13 034993 arg mem_sp_dhkey_end ,contr -0x7a14 034994 force 6 ,loopcnt -0x7a15 034995 call pad_xor -0x7a16 034996 call sha_init -0x7a17 034997 call sha -0x7a18 034998 arg mem_sp_random_remote_end ,contr -0x7a19 034999 arg memdat ,contw -0x7a1a 035000 call memcpy_dword_swap4 -0x7a1b 035001 arg mem_sp_random_local_end ,contr -0x7a1c 035002 call memcpy_dword_swap4 -0x7a1d 035003 branch function_f3_common -: 035005 function_f3a_no_pin: -0x7a1e 035006 setarg 0 -0x7a1f 035007 store 4 ,mem_pin -0x7a20 035008 branch function_f3a_common -: 035010 function_f3b_no_pin: -0x7a21 035011 setarg 0 -0x7a22 035012 store 4 ,mem_pin -0x7a23 035013 branch function_f3b_common -: 035016 function_f3b: -0x7a24 035017 fetch 1 ,mem_ssp_mode_flag -0x7a25 035018 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin -: 035019 function_f3b_common: -0x7a26 035020 setarg 0x363636 -0x7a27 035021 lshift8 pdata ,temp -0x7a28 035022 or_into 0x36 ,temp -0x7a29 035023 arg mem_sp_dhkey_end ,contr -0x7a2a 035024 force 6 ,loopcnt -0x7a2b 035025 call pad_xor -0x7a2c 035026 call sha_init -0x7a2d 035027 call sha -0x7a2e 035029 arg mem_sp_random_local_end ,contr -0x7a2f 035030 arg memdat ,contw -0x7a30 035031 call memcpy_dword_swap4 -0x7a31 035032 arg mem_sp_random_remote_end ,contr -0x7a32 035033 call memcpy_dword_swap4 -: 035034 function_f3_common: -0x7a33 035035 setarg 0x0 -0x7a34 035036 istore 8 ,contw -0x7a35 035037 istore 4 ,contw -0x7a36 035038 fetch 4 ,mem_pin -0x7a37 035039 istore 4 ,contw -0x7a38 035041 copy contw ,temp -0x7a39 035042 jam 0x80 ,mem_addr_padding -0x7a3a 035043 copy temp ,contw -0x7a3b 035044 arg mem_addr_iocap_end ,contr -0x7a3c 035045 call memcpy_dword_swap4 -0x7a3d 035047 call sha -0x7a3e 035049 arg memdat ,contw -0x7a3f 035050 force 7 ,loopcnt -0x7a40 035051 call memset0 -0x7a41 035052 istore 4 ,contw -0x7a42 035053 setarg 0x03F8 -0x7a43 035054 istore 4 ,contw -0x7a44 035055 call sha -0x7a45 035056 call sha_result -0x7a46 035058 arg memresult ,contr -0x7a47 035059 arg memahsave ,contw -0x7a48 035060 call memcpy32 -0x7a49 035062 setarg 0x5c5c5c -0x7a4a 035063 lshift8 pdata ,temp -0x7a4b 035064 or_into 0x5c ,temp -0x7a4c 035065 arg mem_sp_dhkey_end ,contr -0x7a4d 035066 force 6 ,loopcnt -0x7a4e 035067 call pad_xor -0x7a4f 035068 call sha_init -0x7a50 035069 call sha -0x7a51 035070 arg memahsave_end ,contr -0x7a52 035071 arg memdat ,contw -0x7a53 035072 force 8 ,loopcnt -0x7a54 035073 call memcpy_dword_swap -0x7a55 035074 setarg 0x800000 -0x7a56 035075 lshift8 pdata ,pdata -0x7a57 035076 istore 4 ,contw -0x7a58 035077 call bn_zero -0x7a59 035078 setarg 0x0300 -0x7a5a 035079 istore 4 ,contw -0x7a5b 035080 call sha -0x7a5c 035081 branch sha_result -: 035088 eckp_calc_init: -0x7a5d 035089 jam 192 ,mem_ec_loopc -: 035090 eckp_calc_init_1: -0x7a5e 035091 fetch 1 ,mem_ec_loopc -0x7a5f 035092 rtn blank -0x7a60 035093 increase -1 ,pdata -0x7a61 035094 store 1 ,mem_ec_loopc -0x7a62 035095 arg mem_k ,contr -0x7a63 035096 call bn_testbit -0x7a64 035097 branch eckp_calc_init_1 ,true -0x7a65 035098 arg mem_ax ,contr -0x7a66 035099 arg mem_cx ,contw -0x7a67 035100 branch ec_copy -: 035102 eckp_calc: -0x7a68 035103 call ecdbl -0x7a69 035104 fetch 1 ,mem_ec_loopc -0x7a6a 035105 increase -1 ,pdata -0x7a6b 035106 store 1 ,mem_ec_loopc -0x7a6c 035107 arg mem_k ,contr -0x7a6d 035108 call bn_testbit -0x7a6e 035109 rtn true -0x7a6f 035110 branch ecadd -: 035112 memcpy_dword_swap4: -0x7a70 035113 force 4 ,loopcnt -: 035114 memcpy_dword_swap: -0x7a71 035115 increase -4 ,contr -: 035116 memcpy_dword_swap_loop: -0x7a72 035117 ifetch 4 ,contr -0x7a73 035118 istore 4 ,contw -0x7a74 035119 increase -8 ,contr -0x7a75 035120 loop memcpy_dword_swap_loop -0x7a76 035121 rtn -: 035126 sp_initialize_256: -0x7a77 035127 bpatchx patch3d_7 ,mem_patch3d -0x7a78 035128 fetch 1 ,mem_le_secure_connect_enable -0x7a79 035129 branch le_secure_connection_disable ,blank -0x7a7a 035130 call le_secure_connection_enable -0x7a7b 035131 call sp_clear_flags -0x7a7c 035133 branch sp_pubkey_calc_256 -: 035138 sp_pubkey_calc_256: -0x7a7d 035139 fetch 1 ,mem_le_sc_local_key_invalid -0x7a7e 035140 rtnne sp_key_invalid -0x7a7f 035141 fetch 1 ,mem_le_sc_calc -0x7a80 035142 rtnne sp_calc_standby -0x7a81 035144 arg mem_le_private_key_256 ,contw -0x7a82 035145 force 15 ,queue -0x7a83 035146 call random_generator -0x7a84 035147 random pdata -0x7a85 035148 rshift pdata ,pdata -0x7a86 035149 istore 2 ,contw -0x7a87 035151 arg mem_k_256 ,contw -0x7a88 035152 arg mem_le_private_key_256 ,contr -0x7a89 035153 call memcpy32 -0x7a8a 035155 arg mem_ax_256 ,contw -0x7a8b 035156 arg mem_gx_256 ,contr -0x7a8c 035157 call memcpy64 -0x7a8d 035159 arg mem_az_256 ,contw -0x7a8e 035160 call clear_mem_256 -0x7a8f 035161 jam 1 ,mem_az_256 -0x7a90 035163 call eckp_calc_init_256 -0x7a91 035164 jam sp_calc_pubkey_256 ,mem_le_sc_calc -0x7a92 035165 rtn -: 035167 sp_pubkey_generated_256: -0x7a93 035168 arg mem_le_pubkey_local_x_256 ,contw -0x7a94 035169 arg mem_bx_256 ,contr -0x7a95 035170 call memcpy64 -0x7a96 035171 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid -0x7a97 035172 jam sp_calc_standby ,mem_le_sc_calc -0x7a98 035173 rtn -: 035177 sp_dhkey_calc_256: -0x7a99 035178 fetch 1 ,mem_sp_dhkey_invalid -0x7a9a 035179 rtnne sp_key_invalid -0x7a9b 035180 fetch 1 ,mem_le_sc_calc -0x7a9c 035181 rtnne sp_calc_standby -0x7a9d 035183 arg mem_k_256 ,contw -0x7a9e 035184 arg mem_le_private_key_256 ,contr -0x7a9f 035185 call memcpy32 -0x7aa0 035187 arg mem_ax_256 ,contw -0x7aa1 035188 arg mem_le_pubkey_remote_x_256 ,contr -0x7aa2 035189 call memcpy64 -0x7aa3 035191 arg mem_az_256 ,contw -0x7aa4 035192 call clear_mem_256 -0x7aa5 035193 jam 1 ,mem_az_256 -0x7aa6 035195 call eckp_calc_init_256 -0x7aa7 035196 jam sp_calc_dhkey_256 ,mem_le_sc_calc -0x7aa8 035197 rtn -: 035200 sp_dhkey_generated_256: -0x7aa9 035202 arg mem_le_dhkey_256 ,contw -0x7aaa 035203 arg mem_bx_256 ,contr -0x7aab 035204 call memcpy32 -0x7aac 035205 jam sp_key_valid_256 ,mem_sp_dhkey_invalid -0x7aad 035206 jam sp_calc_standby ,mem_le_sc_calc -0x7aae 035207 rtn -: 035211 sp_calc_sequence_256: -0x7aaf 035212 fetch 1 ,mem_le_secure_connect_enable -0x7ab0 035213 rtn blank -0x7ab1 035214 fetch 1 ,mem_le_sc_calc -0x7ab2 035215 rtn blank -0x7ab3 035216 increase 0x80 ,pdata -0x7ab4 035217 store 1 ,mem_le_sc_calc -0x7ab5 035218 rtnbit1 7 -0x7ab6 035219 fetch 2 ,mem_ec_loopc -0x7ab7 035220 branch sp_calc_sequence_done_256 ,blank -0x7ab8 035221 branch eckp_calc_256 -: 035223 sp_calc_sequence_done_256: -0x7ab9 035224 bpatchx patch3e_0 ,mem_patch3e -0x7aba 035225 call ecunmapz_256 -0x7abb 035226 fetch 1 ,mem_le_sc_calc -0x7abc 035227 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 -0x7abd 035228 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 -0x7abe 035229 rtn -: 035232 eckp_calc_256: -0x7abf 035233 call ecdbl_256 -0x7ac0 035234 fetch 2 ,mem_ec_loopc -0x7ac1 035235 increase -1 ,pdata -0x7ac2 035236 store 2 ,mem_ec_loopc -0x7ac3 035237 arg mem_k_256 ,contr -0x7ac4 035238 call bn_testbit -0x7ac5 035239 rtn true -0x7ac6 035240 branch ecadd_256 -: 035242 eckp_calc_init_256: -0x7ac7 035243 bpatchx patch3e_1 ,mem_patch3e -0x7ac8 035244 setarg 256 ,pdata -0x7ac9 035245 store 2 ,mem_ec_loopc -: 035246 eckp_calc_init_256_1: -0x7aca 035247 fetch 2 ,mem_ec_loopc -0x7acb 035248 rtn blank -0x7acc 035249 increase -1 ,pdata -0x7acd 035250 store 2 ,mem_ec_loopc -0x7ace 035251 arg mem_k_256 ,contr -0x7acf 035252 call bn_testbit -0x7ad0 035253 branch eckp_calc_init_256_1 ,true -0x7ad1 035254 arg mem_ax_256 ,contr -0x7ad2 035255 arg mem_cx_256 ,contw -0x7ad3 035256 branch memcpy96 -: 035259 ecunmapz_256: -0x7ad4 035260 arg mem_cz_256 ,rega -0x7ad5 035261 arg mem_t3_256 ,contw -0x7ad6 035262 call bn_invmod_256 -0x7ad7 035263 arg mem_t3_256 ,rega -0x7ad8 035264 arg mem_t1_256 ,contw -0x7ad9 035265 call bn_sqrmod_256 -0x7ada 035266 arg mem_cx_256 ,rega -0x7adb 035267 arg mem_t1_256 ,regb -0x7adc 035268 arg mem_bx_256 ,contw -0x7add 035269 call bn_mulmod_256 -0x7ade 035270 arg mem_t3_256 ,rega -0x7adf 035271 arg mem_t1_256 ,regb -0x7ae0 035272 arg mem_t2_256 ,contw -0x7ae1 035273 call bn_mulmod_256 -0x7ae2 035274 arg mem_cy_256 ,rega -0x7ae3 035275 arg mem_t2_256 ,regb -0x7ae4 035276 arg mem_by_256 ,contw -0x7ae5 035277 branch bn_mulmod_256 -: 035279 ecdbl_256: -0x7ae6 035280 arg mem_cz_256 ,rega -0x7ae7 035281 arg mem_t2_256 ,contw -0x7ae8 035282 call bn_sqrmod_256 -0x7ae9 035283 arg mem_t2_256 ,rega -0x7aea 035284 arg mem_t3_256 ,contw -0x7aeb 035285 call bn_sqrmod_256 -0x7aec 035287 arg mem_a_256 ,rega -0x7aed 035288 arg mem_t3_256 ,regb -0x7aee 035289 arg mem_t3_256 ,contw -0x7aef 035290 call bn_mulmod_256 -0x7af0 035291 arg mem_cx_256 ,rega -0x7af1 035292 arg mem_t2_256 ,contw -0x7af2 035293 call bn_sqrmod_256 -0x7af3 035295 arg mem_t2_256 ,contr -0x7af4 035296 arg mem_t1_256 ,contw -0x7af5 035297 call memcpy32 -0x7af6 035298 arg mem_t1_256 ,rega -0x7af7 035299 call bn_lshiftmod_256 -0x7af8 035300 arg mem_t2_256 ,rega -0x7af9 035301 arg mem_t1_256 ,regb -0x7afa 035302 arg mem_t2_256 ,contw -0x7afb 035303 call bn_addmod_256 -0x7afc 035305 arg mem_t2_256 ,rega -0x7afd 035306 arg mem_t3_256 ,regb -0x7afe 035307 arg mem_t2_256 ,contw -0x7aff 035308 call bn_addmod_256 -0x7b00 035310 arg mem_cx_256 ,contr -0x7b01 035311 arg mem_t1_256 ,contw -0x7b02 035312 call memcpy32 -0x7b03 035313 arg mem_cy_256 ,rega -0x7b04 035314 arg mem_t3_256 ,contw -0x7b05 035315 call bn_sqrmod_256 -0x7b06 035316 arg mem_t1_256 ,rega -0x7b07 035317 call bn_lshiftmod_256 -0x7b08 035318 arg mem_t1_256 ,rega -0x7b09 035319 call bn_lshiftmod_256 -0x7b0a 035320 arg mem_t1_256 ,rega -0x7b0b 035321 arg mem_t3_256 ,regb -0x7b0c 035322 arg mem_t1_256 ,contw -0x7b0d 035323 call bn_mulmod_256 -0x7b0e 035324 arg mem_t3_256 ,rega -0x7b0f 035325 arg mem_t0_256 ,contw -0x7b10 035326 call bn_sqrmod_256 -0x7b11 035327 arg mem_t0_256 ,rega -0x7b12 035328 call bn_lshiftmod_256 -0x7b13 035329 arg mem_t0_256 ,rega -0x7b14 035330 call bn_lshiftmod_256 -0x7b15 035331 arg mem_t0_256 ,rega -0x7b16 035332 call bn_lshiftmod_256 -0x7b17 035333 arg mem_cy_256 ,contr -0x7b18 035334 arg mem_t3_256 ,contw -0x7b19 035335 call memcpy32 -0x7b1a 035336 arg mem_t3_256 ,rega -0x7b1b 035337 call bn_lshiftmod_256 -0x7b1c 035338 arg mem_t3_256 ,rega -0x7b1d 035339 arg mem_cz_256 ,regb -0x7b1e 035340 arg mem_cz_256 ,contw -0x7b1f 035341 call bn_mulmod_256 -0x7b20 035344 arg mem_t2_256 ,rega -0x7b21 035345 arg mem_t3_256 ,contw -0x7b22 035346 call bn_sqrmod_256 -0x7b23 035348 arg mem_t3_256 ,rega -0x7b24 035349 arg mem_t1_256 ,regb -0x7b25 035350 arg mem_t3_256 ,contw -0x7b26 035351 call bn_submod_256 -0x7b27 035352 arg mem_t3_256 ,rega -0x7b28 035353 arg mem_t1_256 ,regb -0x7b29 035354 arg mem_cx_256 ,contw -0x7b2a 035355 call bn_submod_256 -0x7b2b 035356 arg mem_t1_256 ,rega -0x7b2c 035357 arg mem_cx_256 ,regb -0x7b2d 035358 arg mem_t3_256 ,contw -0x7b2e 035359 call bn_submod_256 -0x7b2f 035360 arg mem_t3_256 ,rega -0x7b30 035361 arg mem_t2_256 ,regb -0x7b31 035362 arg mem_t3_256 ,contw -0x7b32 035363 call bn_mulmod_256 -0x7b33 035364 arg mem_t3_256 ,rega -0x7b34 035365 arg mem_t0_256 ,regb -0x7b35 035366 arg mem_cy_256 ,contw -0x7b36 035367 branch bn_submod_256 -: 035369 ecadd_256: -0x7b37 035371 arg mem_az_256 ,rega -0x7b38 035372 arg mem_t7_256 ,contw -0x7b39 035373 call bn_sqrmod_256 -0x7b3a 035374 arg mem_cx_256 ,rega -0x7b3b 035375 arg mem_t7_256 ,regb -0x7b3c 035376 arg mem_t0_256 ,contw -0x7b3d 035377 call bn_mulmod_256 -0x7b3e 035380 arg mem_az_256 ,rega -0x7b3f 035381 arg mem_t7_256 ,regb -0x7b40 035382 arg mem_t7_256 ,contw -0x7b41 035383 call bn_mulmod_256 -0x7b42 035384 arg mem_cy_256 ,rega -0x7b43 035385 arg mem_t7_256 ,regb -0x7b44 035386 arg mem_t1_256 ,contw -0x7b45 035387 call bn_mulmod_256 -0x7b46 035390 arg mem_cz_256 ,rega -0x7b47 035391 arg mem_t7_256 ,contw -0x7b48 035392 call bn_sqrmod_256 -0x7b49 035393 arg mem_ax_256 ,rega -0x7b4a 035394 arg mem_t7_256 ,regb -0x7b4b 035395 arg mem_t2_256 ,contw -0x7b4c 035396 call bn_mulmod_256 -0x7b4d 035398 arg mem_cz_256 ,rega -0x7b4e 035399 arg mem_t7_256 ,regb -0x7b4f 035400 arg mem_t7_256 ,contw -0x7b50 035401 call bn_mulmod_256 -0x7b51 035402 arg mem_ay_256 ,rega -0x7b52 035403 arg mem_t7_256 ,regb -0x7b53 035404 arg mem_t3_256 ,contw -0x7b54 035405 call bn_mulmod_256 -0x7b55 035410 arg mem_t0_256 ,regb -0x7b56 035411 arg mem_t2_256 ,rega -0x7b57 035412 arg mem_t7_256 ,contw -0x7b58 035413 call bn_submod_256 -0x7b59 035414 arg mem_t0_256 ,rega -0x7b5a 035415 arg mem_t2_256 ,regb -0x7b5b 035416 arg mem_t0_256 ,contw -0x7b5c 035417 call bn_addmod_256 -0x7b5d 035420 arg mem_t1_256 ,regb -0x7b5e 035421 arg mem_t3_256 ,rega -0x7b5f 035422 arg mem_t2_256 ,contw -0x7b60 035423 call bn_submod_256 -0x7b61 035424 arg mem_t1_256 ,rega -0x7b62 035425 arg mem_t3_256 ,regb -0x7b63 035426 arg mem_t1_256 ,contw -0x7b64 035427 call bn_addmod_256 -0x7b65 035428 arg mem_t1_256 ,rega -0x7b66 035429 arg mem_t7_256 ,regb -0x7b67 035430 arg mem_t1_256 ,contw -0x7b68 035431 call bn_mulmod_256 -0x7b69 035432 arg mem_cz_256 ,rega -0x7b6a 035433 arg mem_az_256 ,regb -0x7b6b 035434 arg mem_t3_256 ,contw -0x7b6c 035435 call bn_mulmod_256 -0x7b6d 035436 arg mem_t3_256 ,rega -0x7b6e 035437 arg mem_t7_256 ,regb -0x7b6f 035438 arg mem_cz_256 ,contw -0x7b70 035439 call bn_mulmod_256 -0x7b71 035441 arg mem_t7_256 ,rega -0x7b72 035442 arg mem_t7_256 ,contw -0x7b73 035443 call bn_sqrmod_256 -0x7b74 035444 arg mem_t7_256 ,rega -0x7b75 035445 arg mem_t0_256 ,regb -0x7b76 035446 arg mem_t3_256 ,contw -0x7b77 035447 call bn_mulmod_256 -0x7b78 035448 arg mem_t7_256 ,rega -0x7b79 035449 arg mem_t1_256 ,regb -0x7b7a 035450 arg mem_t1_256 ,contw -0x7b7b 035451 call bn_mulmod_256 -0x7b7c 035452 arg mem_t2_256 ,rega -0x7b7d 035453 arg mem_cx_256 ,contw -0x7b7e 035454 call bn_sqrmod_256 -0x7b7f 035455 arg mem_cx_256 ,rega -0x7b80 035456 arg mem_t3_256 ,regb -0x7b81 035457 arg mem_cx_256 ,contw -0x7b82 035458 call bn_submod_256 -0x7b83 035459 arg mem_cx_256 ,contr -0x7b84 035460 arg mem_t7_256 ,contw -0x7b85 035461 call memcpy32 -0x7b86 035462 arg mem_t7_256 ,rega -0x7b87 035463 call bn_lshiftmod_256 -0x7b88 035464 arg mem_t3_256 ,rega -0x7b89 035465 arg mem_t7_256 ,regb -0x7b8a 035466 arg mem_t3_256 ,contw -0x7b8b 035467 call bn_submod_256 -0x7b8c 035468 arg mem_t3_256 ,rega -0x7b8d 035469 arg mem_t2_256 ,regb -0x7b8e 035470 arg mem_t2_256 ,contw -0x7b8f 035471 call bn_mulmod_256 -0x7b90 035472 arg mem_t2_256 ,rega -0x7b91 035473 arg mem_t1_256 ,regb -0x7b92 035474 arg mem_cy_256 ,contw -0x7b93 035475 call bn_submod_256 -0x7b94 035476 arg mem_cy_256 ,rega -0x7b95 035477 arg mem_p_256 ,regb -0x7b96 035478 arg mem_cy_256 ,contw -0x7b97 035479 force 0 ,regc -0x7b98 035480 fetch 1 ,mem_cy_256 -0x7b99 035481 isolate1 0 ,pdata -0x7b9a 035482 call bn_add_256 ,true -0x7b9b 035483 copy regc ,alarm -0x7b9c 035484 arg mem_cy_256 ,rega -0x7b9d 035485 call bn_rshift_256 -0x7b9e 035486 fetch 1 ,mem_cy5_256 -0x7b9f 035487 isolate1 0 ,alarm -0x7ba0 035488 setflag true ,7 ,pdata -0x7ba1 035489 store 1 ,mem_cy5_256 -0x7ba2 035490 rtn -: 035492 bn_invmod_256: -0x7ba3 035493 copy contw ,timeup -0x7ba4 035494 arg mem_tmp0_256 ,contw -0x7ba5 035495 call clear_mem_256 -0x7ba6 035496 force 0 ,pdata -0x7ba7 035498 store 4 ,mem_t2_256 -0x7ba8 035499 jam 1 ,mem_tmp0_256 -0x7ba9 035500 arg mem_tmp1_256 ,contw -0x7baa 035501 call clear_mem_512 -0x7bab 035502 arg mem_p_256 ,contr -0x7bac 035503 arg mem_tmp2_256 ,contw -0x7bad 035504 call memcpy32 -0x7bae 035505 copy rega ,contr -0x7baf 035506 arg mem_tmp3_256 ,contw -0x7bb0 035507 call memcpy32 -: 035513 bn_invmod_256_2: -0x7bb1 035514 arg mem_tmp3_256 ,contr -0x7bb2 035515 call bn_eq_zero_256 -0x7bb3 035516 branch bn_invmod_256_0 ,blank -0x7bb4 035521 arg mem_tmp3_256 ,rega -0x7bb5 035522 arg mem_tmp0_256 ,regb -0x7bb6 035523 call bn_rshifteven_256 -0x7bb7 035524 arg mem_tmp2_256 ,rega -0x7bb8 035525 arg mem_tmp1_256 ,regb -0x7bb9 035526 call bn_rshifteven_256 -0x7bba 035528 arg mem_tmp3_256 ,rega -0x7bbb 035529 arg mem_tmp2_256 ,regb -0x7bbc 035530 call bn_bigeq_256 -0x7bbd 035531 branch bn_invmod_256_1 ,positive -0x7bbe 035532 arg mem_tmp2_256 ,rega -0x7bbf 035533 arg mem_tmp3_256 ,regb -0x7bc0 035534 copy rega ,contw -0x7bc1 035535 call bn_sub_256 -0x7bc2 035536 arg mem_tmp0_256 ,rega -0x7bc3 035537 arg mem_tmp1_256 ,regb -0x7bc4 035538 copy regb ,contw -0x7bc5 035539 call bn_add_256 -0x7bc6 035540 ifetch 1 ,rega -0x7bc7 035541 iadd regc ,regc -0x7bc8 035542 ifetch 1 ,regb -0x7bc9 035543 iadd regc ,pdata -0x7bca 035544 istore 1 ,regb -0x7bcb 035545 branch bn_invmod_256_2 -: 035546 bn_invmod_256_1: -0x7bcc 035547 arg mem_tmp3_256 ,rega -0x7bcd 035548 arg mem_tmp2_256 ,regb -0x7bce 035549 copy rega ,contw -0x7bcf 035550 call bn_sub_256 -0x7bd0 035551 arg mem_tmp1_256 ,rega -0x7bd1 035552 arg mem_tmp0_256 ,regb -0x7bd2 035553 copy regb ,contw -0x7bd3 035554 call bn_add_256 -0x7bd4 035555 ifetch 1 ,rega -0x7bd5 035556 iadd regc ,regc -0x7bd6 035557 ifetch 1 ,regb -0x7bd7 035558 iadd regc ,pdata -0x7bd8 035559 istore 1 ,regb -0x7bd9 035560 branch bn_invmod_256_2 -: 035561 bn_invmod_256_0: -0x7bda 035563 arg mem_tmp1_256 ,rega -0x7bdb 035564 copy timeup ,contw -0x7bdc 035565 call bn_p256mod -0x7bdd 035567 arg mem_p_256 ,rega -0x7bde 035568 copy timeup ,regb -0x7bdf 035569 copy timeup ,contw -0x7be0 035570 branch bn_submod_256 -: 035573 bn_mulmod_256: -0x7be1 035574 copy contw ,timeup -0x7be2 035576 force 0 ,regext_index -0x7be3 035578 arg mem_tmp1_256 ,contw -0x7be4 035579 call clear_mem_512 -0x7be5 035580 arg mem_regext ,contw -0x7be6 035581 call clear_mem_512 -0x7be7 035585 copy rega ,contr -0x7be8 035587 jam 0 ,mem_regext -0x7be9 035588 setarg 0 -0x7bea 035589 call bn_load_mem -0x7beb 035590 copy regb ,contr -0x7bec 035591 call bn_load_256 -0x7bed 035594 force 0 ,queue -0x7bee 035595 arg mem_tmp1_256 ,contw -: 035596 bn_mulmod_256_1: -0x7bef 035599 arg mem_regext ,temp -0x7bf0 035600 copy queue ,regb -0x7bf1 035601 lshift2 regb ,pdata -0x7bf2 035603 iadd temp ,regb -0x7bf3 035604 force 0 ,temp -0x7bf4 035605 force 0 ,regc -: 035606 bn_mulmod_256_0: -0x7bf5 035611 ifetch 4 ,contw -0x7bf6 035612 iforce rega -0x7bf7 035615 ifetch 4 ,regb -0x7bf8 035616 copy regc ,regext_index -0x7bf9 035617 imul32 regext ,pdata -0x7bfa 035618 iadd rega ,pdata -0x7bfb 035619 iadd temp ,pdata -0x7bfc 035620 istore 4 ,contw -0x7bfd 035621 rshift32 pdata ,temp -0x7bfe 035622 increase 1 ,regc -0x7bff 035623 compare 8 ,regc ,0xff -0x7c00 035624 nbranch bn_mulmod_256_0 ,true -0x7c01 035626 deposit temp -0x7c02 035627 istore 4 ,contw -0x7c03 035628 increase -32 ,contw -0x7c04 035631 increase 1 ,queue -0x7c05 035632 compare 8 ,queue ,0xff -0x7c06 035633 nbranch bn_mulmod_256_1 ,true -0x7c07 035634 arg mem_tmp1_256 ,rega -0x7c08 035635 copy timeup ,contw -0x7c09 035636 branch bn_p256mod -: 035638 bn_p256mod: -0x7c0a 035639 bpatchx patch3e_2 ,mem_patch3e -0x7c0b 035640 copy contw ,timeup -0x7c0c 035641 copy rega ,alarm -0x7c0d 035642 arg mem_tmp2_256 ,regb -0x7c0e 035643 copy regb ,contw -0x7c0f 035644 call memset0_4 -0x7c10 035645 istore 8 ,contw -0x7c11 035646 add rega ,44 ,contr -0x7c12 035647 call memcpy8 -0x7c13 035648 call memcpy12 -0x7c14 035649 copy regb ,rega -0x7c15 035650 call bn_lshiftmod_256 -0x7c16 035651 arg mem_tmp2_256 ,regb -0x7c17 035652 copy alarm ,rega -0x7c18 035653 copy timeup ,contw -0x7c19 035654 call bn_addmod_256 -0x7c1a 035656 arg mem_tmp2_256 ,regb -0x7c1b 035657 copy regb ,contw -0x7c1c 035658 call memset0_4 -0x7c1d 035659 istore 8 ,contw -0x7c1e 035660 add alarm ,48 ,contr -0x7c1f 035661 call memcpy16 -0x7c20 035662 call memset0_4 -0x7c21 035663 copy regb ,rega -0x7c22 035664 call bn_lshiftmod_256 -0x7c23 035668 arg mem_tmp2_256 ,regb -0x7c24 035669 copy timeup ,rega -0x7c25 035670 copy rega ,contw -0x7c26 035671 call bn_addmod_256 -0x7c27 035675 arg mem_tmp2_256 ,regb -0x7c28 035676 copy regb ,contw -0x7c29 035677 add alarm ,32 ,contr -0x7c2a 035678 call memcpy12 -0x7c2b 035679 call memset0_4 -0x7c2c 035680 istore 8 ,contw -0x7c2d 035681 add alarm ,56 ,contr -0x7c2e 035682 call memcpy8 -0x7c2f 035683 copy timeup ,rega -0x7c30 035684 copy rega ,contw -0x7c31 035685 call bn_addmod_256 -0x7c32 035689 arg mem_tmp2_256 ,regb -0x7c33 035690 copy regb ,contw -0x7c34 035691 add alarm ,36 ,contr -0x7c35 035692 call memcpy12 -0x7c36 035693 add alarm ,52 ,contr -0x7c37 035694 call memcpy12 -0x7c38 035695 add alarm ,52 ,contr -0x7c39 035696 call memcpy4 -0x7c3a 035697 add alarm ,32 ,contr -0x7c3b 035698 call memcpy4 -0x7c3c 035699 copy timeup ,rega -0x7c3d 035700 copy rega ,contw -0x7c3e 035701 call bn_addmod_256 -0x7c3f 035704 arg mem_tmp2_256 ,regb -0x7c40 035705 copy regb ,contw -0x7c41 035706 add alarm ,44 ,contr -0x7c42 035707 call memcpy12 -0x7c43 035708 call memset0_4 -0x7c44 035709 istore 8 ,contw -0x7c45 035710 add alarm ,32 ,contr -0x7c46 035711 call memcpy4 -0x7c47 035712 add alarm ,40 ,contr -0x7c48 035713 call memcpy4 -0x7c49 035714 copy timeup ,rega -0x7c4a 035715 copy rega ,contw -0x7c4b 035716 call bn_submod_256 -0x7c4c 035719 arg mem_tmp2_256 ,regb -0x7c4d 035720 copy regb ,contw -0x7c4e 035721 add alarm ,48 ,contr -0x7c4f 035722 call memcpy8 -0x7c50 035723 call memcpy8 -0x7c51 035724 force 0 ,pdata -0x7c52 035725 istore 8 ,contw -0x7c53 035726 add alarm ,36 ,contr -0x7c54 035727 call memcpy4 -0x7c55 035728 add alarm ,44 ,contr -0x7c56 035729 call memcpy4 -0x7c57 035730 copy timeup ,rega -0x7c58 035731 copy rega ,contw -0x7c59 035732 call bn_submod_256 -0x7c5a 035735 arg mem_tmp2_256 ,regb -0x7c5b 035736 copy regb ,contw -0x7c5c 035737 add alarm ,52 ,contr -0x7c5d 035738 call memcpy12 -0x7c5e 035739 add alarm ,32 ,contr -0x7c5f 035740 call memcpy12 -0x7c60 035741 call memset0_4 -0x7c61 035742 add alarm ,48 ,contr -0x7c62 035743 call memcpy4 -0x7c63 035744 copy timeup ,rega -0x7c64 035745 copy rega ,contw -0x7c65 035746 call bn_submod_256 -0x7c66 035749 arg mem_tmp2_256 ,regb -0x7c67 035750 copy regb ,contw -0x7c68 035751 add alarm ,56 ,contr -0x7c69 035752 call memcpy8 -0x7c6a 035753 call memset0_4 -0x7c6b 035754 add alarm ,36 ,contr -0x7c6c 035755 call memcpy12 -0x7c6d 035756 call memset0_4 -0x7c6e 035757 add alarm ,52 ,contr -0x7c6f 035758 call memcpy4 -0x7c70 035759 copy timeup ,rega -0x7c71 035760 copy rega ,contw -0x7c72 035761 branch bn_submod_256 -: 035764 bn_load_mem: -0x7c73 035765 force 32 ,loopcnt -0x7c74 035766 arg mem_regext ,contw -0x7c75 035767 iadd contw ,contw -0x7c76 035768 branch memcpy -: 035770 bn_load_256: -0x7c77 035771 force 8 ,loopcnt -0x7c78 035772 branch bn_load_0 -: 035774 bn_sqrmod_256: -0x7c79 035775 copy rega ,regb -0x7c7a 035776 branch bn_mulmod_256 -: 035778 bn_add_256: -0x7c7b 035779 force 8 ,loopcnt -0x7c7c 035780 branch bn_add + 1 -: 035782 bn_addmod_256: -0x7c7d 035783 call bn_add_256 -0x7c7e 035784 copy contw ,rega -0x7c7f 035785 branch bn_lshiftmod_ismod_256 -: 035787 bn_lshiftmod_256: -0x7c80 035788 call bn_lshift_256 -: 035789 bn_lshiftmod_ismod_256: -0x7c81 035790 isolate1 0 ,regc -0x7c82 035791 branch bn_lshiftmod_p_256 ,true -0x7c83 035792 arg mem_p_256 ,regb -0x7c84 035793 copy rega ,regc -0x7c85 035794 increase -32 ,rega -0x7c86 035795 call bn_bigeq_256 -0x7c87 035796 nrtn positive -0x7c88 035797 copy regc ,rega -0x7c89 035798 branch sub_p2_256 -: 035800 bn_lshiftmod_p_256: -0x7c8a 035801 call sub_p2_256 -0x7c8b 035803 copy rega ,regc -0x7c8c 035804 increase -32 ,rega -0x7c8d 035805 arg mem_p_256 ,regb -0x7c8e 035806 call bn_bigeq_256 -0x7c8f 035807 nrtn positive -0x7c90 035808 copy regc ,rega -0x7c91 035809 branch sub_p2_256 -: 035812 sub_p2_256: -0x7c92 035813 increase -32 ,rega -0x7c93 035814 arg mem_p_256 ,regb -0x7c94 035815 copy rega ,contw -0x7c95 035816 branch bn_sub_256 -: 035821 bn_submod_256: -0x7c96 035822 call bn_sub_256 -0x7c97 035824 branch bn_submod_256_np ,true -0x7c98 035827 add contw ,-32 ,rega -0x7c99 035828 arg mem_p_256 ,regb -0x7c9a 035829 call bn_bigeq_256 -0x7c9b 035830 nrtn positive -0x7c9c 035831 arg mem_p_256 ,regb -0x7c9d 035832 add contw ,-32 ,rega -0x7c9e 035834 copy rega ,contw -0x7c9f 035835 branch bn_sub_256 -: 035836 bn_submod_256_np: -0x7ca0 035837 add contw ,-32 ,rega -0x7ca1 035838 arg mem_p_256 ,regb -0x7ca2 035839 copy rega ,contw -0x7ca3 035840 call bn_add_256 -0x7ca4 035842 rtn true -0x7ca5 035843 add contw ,-32 ,rega -0x7ca6 035844 arg mem_p_256 ,regb -0x7ca7 035845 copy rega ,contw -0x7ca8 035846 branch bn_add_256 -: 035850 bn_sub_256: -0x7ca9 035851 force 8 ,loopcnt -0x7caa 035852 branch bn_sub + 1 -: 035854 bn_rshift_256: -0x7cab 035855 force 8 ,loopcnt -0x7cac 035856 increase 28 ,rega -0x7cad 035857 branch bn_rshift -: 035859 bn_lshift_256: -0x7cae 035860 force 8 ,loopcnt -0x7caf 035861 force 0 ,regc -0x7cb0 035862 branch bn_lshift_0 -: 035864 bn_bigeq_256: -0x7cb1 035865 force 8 ,loopcnt -0x7cb2 035866 increase 28 ,rega -0x7cb3 035867 increase 28 ,regb -0x7cb4 035868 branch bn_bigeq_0 -: 035871 bn_eq_zero_256: -0x7cb5 035872 ifetch 8 ,contr -0x7cb6 035873 nrtn blank -0x7cb7 035874 branch bn_eq_zero -: 035879 bn_rshifteven_256: -0x7cb8 035880 copy rega ,alarm -: 035881 bn_rshifteven_256_1: -0x7cb9 035882 copy alarm ,rega -0x7cba 035883 ifetch 1 ,rega -0x7cbb 035884 isolate1 0 ,pdata -0x7cbc 035885 rtn true -0x7cbd 035886 call bn_rshift_256 -0x7cbe 035887 ifetch 1 ,regb -0x7cbf 035888 isolate0 0 ,pdata -0x7cc0 035889 branch bn_rshifteven_256_0 ,true -0x7cc1 035890 arg mem_p_256 ,rega -0x7cc2 035891 copy regb ,contw -0x7cc3 035892 call bn_add_256 -0x7cc4 035893 ifetch 1 ,regb -0x7cc5 035894 iadd regc ,pdata -0x7cc6 035895 istore 1 ,regb -0x7cc7 035896 increase -32 ,regb -: 035897 bn_rshifteven_256_0: -0x7cc8 035898 add regb ,32 ,rega -0x7cc9 035899 force 9 ,loopcnt -0x7cca 035900 call bn_rshift -0x7ccb 035901 branch bn_rshifteven_256_1 -: 035905 ui_init: -0x7ccc 035906 call lpm_disable_exen_output -0x7ccd 035907 rtn wake -0x7cce 035908 call ui_button_init -0x7ccf 035909 call ui_timer_init -0x7cd0 035910 branch ui_led_init_global -: 035912 ui_dispatch: -0x7cd1 035913 call ui_led_dispatch -0x7cd2 035915 branch ui_timer_check -: 035917 ui_button_init: -0x7cd3 035918 fetch 1 ,mem_ui_button_gpio -0x7cd4 035919 rtneq ui_button_gpio_disable -0x7cd5 035920 iforce temp -0x7cd6 035921 call gpio_config_output -0x7cd7 035922 fetcht 1 ,mem_ui_button_gpio -0x7cd8 035923 call gpio_out_inactive -0x7cd9 035924 nop 100 -0x7cda 035925 fetcht 1 ,mem_ui_button_gpio -0x7cdb 035926 call gpio_config_input -0x7cdc 035927 branch ui_button_polling -: 035931 ui_button_polling: -0x7cdd 035932 bpatchx patch3e_3 ,mem_patch3e -0x7cde 035933 fetch 1 ,mem_ui_button_gpio -0x7cdf 035934 rtneq ui_button_gpio_disable -0x7ce0 035935 copy pdata ,temp -0x7ce1 035936 call gpio_get_bit -0x7ce2 035937 nbranch ui_button_up ,true -: 035939 ui_button_down: -0x7ce3 035940 call ui_button_check_long_press -0x7ce4 035941 fetch 2 ,mem_ui_state_map -0x7ce5 035942 set1 ui_state_btn_down -0x7ce6 035943 store 2 ,mem_ui_state_map -0x7ce7 035944 fetch 1 ,mem_ui_button_last_state -0x7ce8 035945 rtneq ui_button_state_down -0x7ce9 035946 jam ui_button_state_down ,mem_ui_button_last_state -0x7cea 035948 fetch 1 ,mem_ui_button_timeout -0x7ceb 035949 store 1 ,mem_ui_button_timer -0x7cec 035950 call lpm_button_get_wake_lock -0x7ced 035951 jam bt_evt_button_down ,mem_fifo_temp -0x7cee 035952 branch ui_ipc_send_event -: 035953 ui_button_up: -0x7cef 035954 fetch 2 ,mem_ui_state_map -0x7cf0 035955 set0 ui_state_btn_down -0x7cf1 035956 store 2 ,mem_ui_state_map -0x7cf2 035957 fetch 1 ,mem_ui_button_last_state -0x7cf3 035958 rtneq ui_button_state_up -0x7cf4 035959 jam ui_button_state_up ,mem_ui_button_last_state -0x7cf5 035961 jam 0 ,mem_ui_button_timer -0x7cf6 035962 call lpm_button_clean_wake_lock -0x7cf7 035963 jam bt_evt_button_up ,mem_fifo_temp -0x7cf8 035964 branch ui_ipc_send_event -: 035966 ui_button_check_long_press: -0x7cf9 035967 fetch 1 ,mem_ui_button_timer -0x7cfa 035968 rtn blank -0x7cfb 035969 increase -1 ,pdata -0x7cfc 035970 store 1 ,mem_ui_button_timer -0x7cfd 035971 nrtn blank -0x7cfe 035973 jam bt_evt_button_long_pressed ,mem_fifo_temp -0x7cff 035974 branch ui_ipc_send_event -: 035976 lpm_button_get_wake_lock: -0x7d00 035977 arg wake_lock_button ,queue -0x7d01 035978 branch lpm_get_wake_lock -: 035980 lpm_button_clean_wake_lock: -0x7d02 035981 arg wake_lock_button ,queue -0x7d03 035982 branch lpm_put_wake_lock -: 036004 calc_curr_struct_prt: -0x7d04 036005 fetch 2 ,mem_ui_led_struct_ptr -0x7d05 036006 mul32 rega ,led_offset_length ,regb -0x7d06 036007 iadd regb ,regb -0x7d07 036008 rtn -: 036011 ui_led_init_global: -0x7d08 036012 fetch 1 ,mem_ui_led_struct_num -0x7d09 036013 rtn blank -0x7d0a 036014 copy pdata ,loopcnt -0x7d0b 036015 fetch 2 ,mem_ui_led_struct_ptr -0x7d0c 036016 copy pdata ,regb -: 036017 ui_led_init_loop: -0x7d0d 036018 add regb ,led_offset_led_gpio ,regc -0x7d0e 036019 ifetcht 1 ,regc -0x7d0f 036020 call gpio_config_output -0x7d10 036021 call ui_led_off_static -0x7d11 036022 increase led_offset_length ,regb -0x7d12 036023 loop ui_led_init_loop -0x7d13 036024 rtn -: 036028 ui_led_on_global: -0x7d14 036029 call calc_curr_struct_prt -0x7d15 036030 setarg ui_led_state_lighting -0x7d16 036031 istore 1 ,regb -0x7d17 036032 call ui_led_stop_timer -0x7d18 036033 branch ui_led_on_static -: 036037 ui_led_blink_stop_global: -: 036038 ui_led_off_global: -0x7d19 036039 call calc_curr_struct_prt -0x7d1a 036040 setarg ui_led_state_darking -0x7d1b 036041 istore 1 ,regb -0x7d1c 036042 call ui_led_stop_timer -0x7d1d 036043 branch ui_led_off_static -: 036047 ui_led_blink_start_global: -0x7d1e 036048 call calc_curr_struct_prt -0x7d1f 036049 setarg ui_led_state_blink_start -0x7d20 036050 istore 1 ,regb -0x7d21 036051 setarg led_infinite_flash_num -0x7d22 036052 istore 1 ,contw -0x7d23 036053 branch ui_led_off_static -: 036058 ui_led_set_style_global: -0x7d24 036059 call calc_curr_struct_prt -0x7d25 036060 arg led_offset_length ,loopcnt -0x7d26 036061 copy regc ,contr -0x7d27 036062 copy regb ,contw -0x7d28 036063 branch memcpy_fast -: 036067 ui_led_dispatch: -0x7d29 036068 fetch 1 ,mem_ui_led_struct_num -0x7d2a 036069 rtn blank -0x7d2b 036070 arg 0 ,rega -: 036071 ui_led_blink_polling: -0x7d2c 036072 call ui_led_change_style_by_type -0x7d2d 036073 increase 1 ,rega -0x7d2e 036074 fetch 1 ,mem_ui_led_struct_num -0x7d2f 036075 isub rega ,null -0x7d30 036076 rtn zero -0x7d31 036077 branch ui_led_blink_polling -: 036080 ui_led_off_static: -0x7d32 036081 add regb ,led_offset_led_gpio ,regc -0x7d33 036082 ifetcht 1 ,regc -0x7d34 036083 branch gpio_out_inactive -: 036086 ui_led_on_static: -0x7d35 036087 add regb ,led_offset_led_gpio ,regc -0x7d36 036088 ifetcht 1 ,regc -0x7d37 036089 branch gpio_out_active -: 036093 ui_led_change_style_by_type: -0x7d38 036094 add rega ,ui_led_blink ,queue -0x7d39 036095 call timer_check -0x7d3a 036096 nrtn blank -0x7d3b 036098 call calc_curr_struct_prt -0x7d3c 036100 ifetch 1 ,regb -0x7d3d 036102 beq ui_led_state_lighting ,ui_led_on_static -0x7d3e 036103 beq ui_led_state_darking ,ui_led_off_static -0x7d3f 036104 beq ui_led_state_blink_stop ,ui_led_off_static -0x7d40 036105 beq ui_led_state_blink_darking ,ui_led_blink_state_darking -: 036106 ui_led_blink_state_lighting: -0x7d41 036107 call ui_led_on_static -0x7d42 036108 add regb ,led_offset_cb_ledon ,regc -0x7d43 036109 call push_stack -0x7d44 036110 ifetch 2 ,regc -0x7d45 036111 call callback_func -0x7d46 036112 call pop_stack -0x7d47 036113 setarg ui_led_state_blink_darking -0x7d48 036114 istore 1 ,regb -0x7d49 036115 add regb ,led_offset_on_time ,regc -0x7d4a 036116 ifetch 2 ,regc -0x7d4b 036117 branch ui_led_blink_timer_start -: 036120 ui_led_blink_state_darking: -0x7d4c 036121 call ui_led_off_static -0x7d4d 036122 add regb ,led_offset_cb_ledoff ,regc -0x7d4e 036123 call push_stack -0x7d4f 036124 ifetch 2 ,regc -0x7d50 036125 call callback_func -0x7d51 036126 call pop_stack -0x7d52 036128 add regb ,led_offset_blink_count ,regc -0x7d53 036129 ifetch 1 ,regc -0x7d54 036130 beq led_infinite_flash_num ,ui_led_blink_infinite -0x7d55 036131 increase -1 ,pdata -0x7d56 036132 istore 1 ,regc -0x7d57 036133 branch ui_led_blink_stop_global ,blank -: 036134 ui_led_blink_infinite: -0x7d58 036135 setarg ui_led_state_blink_lighting -0x7d59 036136 istore 1 ,regb -0x7d5a 036137 add regb ,led_offset_off_time ,regc -0x7d5b 036138 ifetch 2 ,regc -: 036139 ui_led_blink_timer_start: -0x7d5c 036140 add rega ,ui_led_blink ,queue -0x7d5d 036141 branch timer_init -: 036143 ui_led_stop_timer: -0x7d5e 036144 setarg 0 -0x7d5f 036145 branch ui_led_blink_timer_start -: 036151 ui_timer_timeout: -0x7d60 036152 setarg 0x1000 -0x7d61 036153 lshift16 pdata ,pdata -0x7d62 036154 iadd regb ,regb -0x7d63 036155 rtn -: 036157 ui_timer_check: -0x7d64 036158 bpatchx patch3e_4 ,mem_patch3e -0x7d65 036159 arg 0 ,rega -0x7d66 036160 fetcht 4 ,mem_ui_timer_last_btclk -0x7d67 036161 copy clkn_bt ,regb -0x7d68 036162 copy regb ,pdata -0x7d69 036163 isub temp ,null -0x7d6a 036164 ncall ui_timer_timeout ,positive -: 036166 ui_timer_check_loop: -0x7d6b 036167 copy regb ,pdata -0x7d6c 036168 increase 160 ,temp -0x7d6d 036169 increase 160 ,temp -0x7d6e 036170 isub temp ,null -0x7d6f 036171 nbranch ui_timer_check_end ,positive -0x7d70 036172 increase 1 ,rega -0x7d71 036173 and rega ,0x0f ,pdata -0x7d72 036174 nbranch ui_timer_check_loop ,blank -0x7d73 036175 arg 0 ,rega -0x7d74 036176 call ui_timer_check_send_evt -: 036177 ui_timer_init: -0x7d75 036178 copy clkn_bt ,pdata -0x7d76 036179 store 4 ,mem_ui_timer_last_btclk -0x7d77 036180 rtn -: 036181 ui_timer_check_end: -0x7d78 036182 bpatchx patch3e_5 ,mem_patch3e -0x7d79 036183 copy rega ,pdata -0x7d7a 036184 rtn blank -0x7d7b 036185 increase -160 ,temp -0x7d7c 036186 increase -160 ,temp -0x7d7d 036187 set0 28 ,temp -0x7d7e 036188 storet 4 ,mem_ui_timer_last_btclk -: 036189 ui_timer_check_send_evt: -0x7d7f 036190 branch app_evt_timer -: 036197 ui_ipc_get_lock: -0x7d80 036198 jam 1 ,mem_ipc_lock_bt -: 036199 ui_ipc_get_lock_wait: -0x7d81 036200 fetch 1 ,mem_ipc_lock_c51 -0x7d82 036201 nbranch ui_ipc_get_lock_wait ,blank -0x7d83 036202 rtn -: 036204 ui_ipc_put_lock: -0x7d84 036205 jam 0 ,mem_ipc_lock_bt -0x7d85 036206 rtn -: 036210 ui_ipc_send_event: -0x7d86 036211 bpatchx patch3e_6 ,mem_patch3e -0x7d87 036212 call ui_ipc_get_lock -0x7d88 036213 copy rega ,pdata -0x7d89 036214 store 4 ,mem_ipc_rega_temp -0x7d8a 036215 arg mem_ipc_fifo_bt2c51 ,rega -0x7d8b 036216 call fifo_in -0x7d8c 036217 fetch 4 ,mem_ipc_rega_temp -0x7d8d 036218 copy pdata ,rega -0x7d8e 036219 branch ui_ipc_put_lock -: 036221 ui_ipc_send_cmd: -0x7d8f 036222 bpatchx patch3e_7 ,mem_patch3e -0x7d90 036223 call ui_ipc_get_lock -0x7d91 036224 copy rega ,pdata -0x7d92 036225 store 4 ,mem_ipc_rega_temp -0x7d93 036226 arg mem_ipc_fifo_c512bt ,rega -0x7d94 036227 call fifo_in -0x7d95 036228 fetch 4 ,mem_ipc_rega_temp -0x7d96 036229 copy pdata ,rega -0x7d97 036230 branch ui_ipc_put_lock -: 036232 ui_ipc_clean_all_fifo: -0x7d98 036233 setarg 0 -0x7d99 036234 store util_fifo_len ,mem_ipc_fifo_c512bt -0x7d9a 036235 store util_fifo_len ,mem_ipc_fifo_bt2c51 -0x7d9b 036236 rtn -: 036238 check_51cmd: -0x7d9c 036239 bpatchx patch3f_0 ,mem_patch3f -0x7d9d 036240 fetch 1 ,mem_hci_cmd -0x7d9e 036241 nrtn blank -0x7d9f 036242 arg mem_ipc_fifo_c512bt ,rega -0x7da0 036243 call fifo_is_empty -0x7da1 036244 rtn blank -0x7da2 036245 jam ipc_continue_process ,mem_ipc_skip_continue_proc -0x7da3 036246 call check_51cmd_once -0x7da4 036247 fetch 1 ,mem_ipc_skip_continue_proc -0x7da5 036248 branch check_51cmd ,blank -0x7da6 036249 rtn -: 036251 check_51cmd_once: -0x7da7 036252 call ui_ipc_get_lock -0x7da8 036253 arg mem_ipc_fifo_c512bt ,rega -0x7da9 036254 call fifo_out -0x7daa 036255 copy pdata ,temp -0x7dab 036256 call ui_ipc_put_lock -0x7dac 036257 bpatchx patch3f_1 ,mem_patch3f -0x7dad 036258 copy temp ,pdata -0x7dae 036259 rtn blank -0x7daf 036260 beq bt_cmd_start_discovery ,check_51cmd_start_discovery -0x7db0 036261 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery -0x7db1 036262 beq bt_cmd_reconnect ,check_51cmd_reconnect -0x7db2 036263 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating -0x7db3 036264 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating -0x7db4 036265 beq bt_cmd_sniff_test ,check_51cmd_sniff_test -0x7db5 036266 beq bt_cmd_start_inquiry ,check_51cmd_inq -0x7db6 036267 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq -0x7db7 036268 beq bt_cmd_start_adv ,check_51cmd_adv -0x7db8 036269 beq bt_cmd_stop_adv ,check_51cmd_stop_adv -0x7db9 036270 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv -0x7dba 036271 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv -0x7dbb 036272 beq bt_cmd_led_off ,check_51cmd_led_off -0x7dbc 036273 beq bt_cmd_led_on ,check_51cmd_led_on -0x7dbd 036274 beq bt_cmd_led_blink ,check_51cmd_led_start_blink -0x7dbe 036275 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con -0x7dbf 036276 beq bt_cmd_le_start_scan ,check_51cmd_start_scan -0x7dc0 036277 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan -0x7dc1 036278 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate -0x7dc2 036279 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req -0x7dc3 036280 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel -0x7dc4 036282 store 1 ,mem_fifo_temp -0x7dc5 036283 bpatchx patch3f_2 ,mem_patch3f -0x7dc6 036284 call lmo_fifo_check -0x7dc7 036285 nbranch check_51cmd_restore ,blank -: 036286 check_51cmd_once_continue: -0x7dc8 036287 fetch 1 ,mem_fifo_temp -0x7dc9 036288 bmark0 mark_context ,check_51cmd_check_idle -0x7dca 036289 beq bt_cmd_disconnect ,check_51cmd_disconnect -0x7dcb 036290 beq bt_cmd_enter_sniff ,cmd_in_sniff -0x7dcc 036291 beq bt_cmd_exit_sniff ,cmd_exit_sniff -0x7dcd 036292 beq bt_cmd_set_pin_code ,check_51cmd_pincode -0x7dce 036293 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect -0x7dcf 036294 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param -0x7dd0 036295 beq bt_cmd_role_switch ,check_51cmd_role_switch -0x7dd1 036296 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info -0x7dd2 036297 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info -0x7dd3 036298 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept -0x7dd4 036299 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info -0x7dd5 036300 rtn -: 036302 check_51cmd_check_idle: -0x7dd6 036303 store 1 ,mem_fifo_temp -0x7dd7 036304 call context_check_idle -0x7dd8 036305 branch check_51cmd_restore ,zero -0x7dd9 036306 call context_search_plap -0x7dda 036307 nrtn zero -: 036308 check_51cmd_restore: -0x7ddb 036309 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc -0x7ddc 036310 branch ui_ipc_send_cmd -: 036315 check_51cmd_start_discovery: -0x7ddd 036316 fetch 2 ,mem_ui_state_map -0x7dde 036317 set1 ui_state_bt_discovery -0x7ddf 036318 store 2 ,mem_ui_state_map -0x7de0 036319 jam 3 ,mem_scan_mode -0x7de1 036320 rtn -: 036324 check_51cmd_stop_discovery: -0x7de2 036325 jam 0 ,mem_hid_handshake_timer_count -0x7de3 036326 jam 0 ,mem_scan_mode -0x7de4 036327 fetch 2 ,mem_ui_state_map -0x7de5 036328 set0 ui_state_bt_discovery -0x7de6 036329 store 2 ,mem_ui_state_map -0x7de7 036330 rtn -: 036334 check_51cmd_reconnect: -0x7de8 036335 jam hci_cmd_create_conn ,mem_hci_cmd -0x7de9 036336 rtn -: 036340 check_51cmd_disconnect: -0x7dea 036341 jam lmp_detach ,mem_lmo_opcode2 -0x7deb 036342 jam other_end_terminated ,mem_disconn_reason_send -0x7dec 036343 rtn -: 036347 check_51cmd_enter_sniff_subrating: -0x7ded 036348 rtn -: 036352 check_51cmd_exit_sniff_subrating: -0x7dee 036353 rtn -: 036357 check_51cmd_sniff_test: -0x7def 036358 rtn -: 036362 check_51cmd_pincode: -0x7df0 036363 jam pincode_state_pincode_ready ,mem_pincode_state -0x7df1 036364 branch cmd_pair -: 036368 check_51cmd_inq: -0x7df2 036369 rtn -: 036373 check_51cmd_stop_inq: -0x7df3 036374 rtn -: 036378 check_51cmd_adv: -0x7df4 036379 jam on ,mem_le_adv_enable -0x7df5 036380 jam adv_ind ,mem_le_adv_type -0x7df6 036381 fetch 2 ,mem_ui_state_map -0x7df7 036382 set1 ui_state_ble_adv ,pdata -0x7df8 036383 store 2 ,mem_ui_state_map -0x7df9 036384 rtn -: 036388 check_51cmd_stop_adv: -0x7dfa 036389 fetch 2 ,mem_ui_state_map -0x7dfb 036390 set0 ui_state_ble_adv ,pdata -0x7dfc 036391 store 2 ,mem_ui_state_map -0x7dfd 036392 jam off ,mem_le_adv_enable -0x7dfe 036393 rtn -: 036397 check_51cmd_direct_adv: -0x7dff 036398 jam on ,mem_le_adv_enable -0x7e00 036399 jam adv_direct_ind ,mem_le_adv_type -0x7e01 036400 fetch 2 ,mem_ui_state_map -0x7e02 036401 set1 ui_state_ble_adv ,pdata -0x7e03 036402 store 2 ,mem_ui_state_map -0x7e04 036403 rtn -: 036407 check_51cmd_stop_direct_adv: -0x7e05 036408 fetch 2 ,mem_ui_state_map -0x7e06 036409 set0 ui_state_ble_adv ,pdata -0x7e07 036410 store 2 ,mem_ui_state_map -0x7e08 036411 jam off ,mem_le_adv_enable -0x7e09 036412 rtn -: 036416 check_51cmd_le_disconnect: -0x7e0a 036417 setarg 20 -0x7e0b 036418 store 2 ,mem_le_superto -0x7e0c 036419 store 2 ,mem_le_init_superto -0x7e0d 036420 branch le_send_terminate_ind_user_terminated -: 036424 check_51cmd_ble_update_connect_param: -0x7e0e 036425 branch le_l2cap_tx_update_req -: 036429 check_51cmd_led_off: -0x7e0f 036430 arg 0 ,rega -0x7e10 036431 branch ui_led_off_global -: 036435 check_51cmd_led_on: -0x7e11 036436 arg 0 ,rega -0x7e12 036437 branch ui_led_on_global -: 036441 check_51cmd_led_start_blink: -0x7e13 036442 arg 0 ,rega -0x7e14 036443 branch ui_led_blink_start_global -: 036447 check_51cmd_le_start_con: -0x7e15 036448 jam on ,mem_le_scan_enable -0x7e16 036449 jam hci_cmd_le_create_conn ,mem_hci_cmd -0x7e17 036452 rtn -: 036456 check_51cmd_start_scan: -0x7e18 036457 jam on ,mem_le_scan_enable -0x7e19 036458 rtn -: 036462 check_51cmd_stop_scan: -0x7e1a 036463 jam off ,mem_le_scan_enable -0x7e1b 036464 jam 0 ,mem_hci_cmd -0x7e1c 036465 rtn -: 036469 check_51cmd_hibernate: -0x7e1d 036470 fetch 2 ,mem_cb_before_hibernate -0x7e1e 036471 call callback_func -0x7e1f 036472 fetch 1 ,mem_ui_button_gpio -0x7e20 036473 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled -0x7e21 036474 copy pdata ,temp -0x7e22 036475 call gpio_config_input -: 036476 check_51cmd_hibernate_btn_disabled: -0x7e23 036477 call ui_ipc_clean_all_fifo -0x7e24 036478 branch lpm_hibernate -: 036482 check_51cmd_le_smp_sec_req: -0x7e25 036483 branch le_send_smp_security_request -: 036487 check_51cmd_role_switch: -0x7e26 036488 jam lmp_slot_offset ,mem_lmo_opcode2 -0x7e27 036489 set1 mark_switch_initiated ,mark -0x7e28 036490 nrtn master -0x7e29 036491 jam switch_flag_init ,mem_switch_flag -0x7e2a 036492 jam lmp_switch_req ,mem_lmo_opcode2 -0x7e2b 036493 fetch 1 ,mem_connection_options -0x7e2c 036494 set0 connection_switch ,pdata -0x7e2d 036495 store 1 ,mem_connection_options -0x7e2e 036496 rtn -: 036500 check_51cmd_bb_reconn_cancel: -0x7e2f 036501 force page_length_timer ,queue -0x7e30 036502 branch timer_stop -: 036506 check_51cmd_dhkey_not_accept: -0x7e31 036507 call tid_set_reply -0x7e32 036508 jam lmp_dhkey_check ,mem_lmi_opcode2 -0x7e33 036509 branch parse_lmp_dhkey_check_reject -: 036512 ui_check_paring_button: -0x7e34 036513 fetch 1 ,mem_ui_state_map -0x7e35 036514 rtnbit0 ui_state_btn_down -0x7e36 036515 rtnbit0 ui_state_bt_reconnect -0x7e37 036516 branch check_51cmd_bb_reconn_cancel -: 036521 queue_init: -0x7e38 036522 fetch 2 ,mem_queue_ptr -0x7e39 036523 add pdata ,queue_offset_curr_num ,contw -0x7e3a 036524 setarg 0 -0x7e3b 036525 istore 3 ,contw -0x7e3c 036526 rtn -: 036530 queue_push: -0x7e3d 036531 call disable_user -0x7e3e 036532 call queue_full -0x7e3f 036533 rtn blank -0x7e40 036534 fetch 2 ,mem_queue_ptr -0x7e41 036535 add pdata ,queue_offset_curr_num ,regb -0x7e42 036536 ifetcht 1 ,regb -0x7e43 036537 increase 1 ,temp -0x7e44 036538 istoret 1 ,regb -0x7e45 036540 ifetcht 1 ,pdata -0x7e46 036541 copy temp ,loopcnt -0x7e47 036542 add pdata ,queue_offset_write_ptr ,regb -0x7e48 036543 ifetch 1 ,regb -0x7e49 036544 imul32 temp ,pdata -0x7e4a 036545 iadd contr ,contw -0x7e4b 036546 copy rega ,contr -: 036547 calc_queue_next_ptr: -0x7e4c 036548 call memcpy -0x7e4d 036549 call queue_get_size -0x7e4e 036550 pincrease -1 -0x7e4f 036551 ifetcht 1 ,regb -0x7e50 036552 increase 1 ,temp -0x7e51 036553 iand temp ,temp -0x7e52 036554 istoret 1 ,regb -0x7e53 036555 branch enable_user -: 036560 queue_pop: -0x7e54 036561 call disable_user -0x7e55 036562 call queue_empty -0x7e56 036563 rtn blank -0x7e57 036564 fetch 2 ,mem_queue_ptr -0x7e58 036565 add pdata ,queue_offset_curr_num ,regb -0x7e59 036566 ifetcht 1 ,regb -0x7e5a 036567 increase -1 ,temp -0x7e5b 036568 istoret 1 ,regb -0x7e5c 036569 ifetcht 1 ,pdata -0x7e5d 036570 copy temp ,loopcnt -0x7e5e 036571 add pdata ,queue_offset_read_ptr ,regb -0x7e5f 036572 ifetch 1 ,regb -0x7e60 036573 imul32 temp ,pdata -0x7e61 036574 iadd contr ,contr -0x7e62 036575 increase 1 ,contr -0x7e63 036576 copy rega ,contw -0x7e64 036577 branch calc_queue_next_ptr -: 036581 queue_empty: -0x7e65 036582 fetch 2 ,mem_queue_ptr -0x7e66 036583 add pdata ,queue_offset_curr_num ,contr -0x7e67 036584 ifetch 1 ,contr -0x7e68 036585 rtn -: 036588 queue_full: -0x7e69 036589 call queue_get_size -0x7e6a 036590 ifetcht 1 ,contr -0x7e6b 036591 isub temp ,pdata -0x7e6c 036592 rtn -: 036595 queue_get_size: -0x7e6d 036596 fetch 2 ,mem_queue_ptr -0x7e6e 036597 add pdata ,queue_offset_length ,contr -0x7e6f 036598 ifetch 1 ,contr -0x7e70 036599 rtn -: 036607 right_shift_n: -0x7e71 036608 sub loopcnt ,0 ,null -0x7e72 036609 rtn zero -: 036610 right_shift_n_loop: -0x7e73 036611 rshift pdata ,pdata -0x7e74 036612 loop right_shift_n_loop -0x7e75 036613 rtn -: 036616 left_shift_n: -0x7e76 036617 force 1 ,pdata -0x7e77 036618 sub loopcnt ,0 ,null -0x7e78 036619 rtn zero -: 036620 left_shift_n_loop: -0x7e79 036621 lshift pdata ,pdata -0x7e7a 036622 loop left_shift_n_loop -0x7e7b 036623 rtn -: 036624 push_stack: -0x7e7c 036625 deposit contw -0x7e7d 036626 store 2 ,mem_contw -0x7e7e 036627 storet 8 ,mem_temp -0x7e7f 036628 deposit timeup -0x7e80 036629 store 4 ,mem_timeup -0x7e81 036630 call push_stack_rega_b_c -0x7e82 036631 deposit contr -0x7e83 036632 store 2 ,mem_contr -0x7e84 036633 rtn -: 036635 push_stack_rega_b_c: -0x7e85 036636 deposit rega -0x7e86 036637 store 4 ,mem_rega -0x7e87 036638 deposit regb -0x7e88 036639 store 4 ,mem_regb -0x7e89 036640 deposit regc -0x7e8a 036641 store 3 ,mem_regc -0x7e8b 036642 rtn -: 036644 pop_stack: -0x7e8c 036645 fetcht 8 ,mem_temp -0x7e8d 036646 fetch 4 ,mem_timeup -0x7e8e 036647 iforce timeup -0x7e8f 036648 call pop_stack_rega_b_c -0x7e90 036649 fetch 2 ,mem_contw -0x7e91 036650 iforce contw -0x7e92 036651 fetch 2 ,mem_contr -0x7e93 036652 iforce contr -0x7e94 036653 rtn -: 036655 pop_stack_rega_b_c: -0x7e95 036656 fetch 4 ,mem_rega -0x7e96 036657 iforce rega -0x7e97 036658 fetch 4 ,mem_regb -0x7e98 036659 iforce regb -0x7e99 036660 fetch 3 ,mem_regc -0x7e9a 036661 iforce regc -0x7e9b 036662 rtn -: 036664 get_contw: -0x7e9c 036665 fetch 2 ,mem_contw -0x7e9d 036666 copy pdata ,contw -0x7e9e 036667 rtn -: 036668 get_contr: -0x7e9f 036669 fetch 2 ,mem_contr -0x7ea0 036670 copy pdata ,contr -0x7ea1 036671 rtn -: 036672 store_contw: -0x7ea2 036673 copy contw ,pdata -0x7ea3 036674 store 2 ,mem_contw -0x7ea4 036675 rtn -: 036676 store_contr: -0x7ea5 036677 copy contr ,pdata -0x7ea6 036678 store 2 ,mem_contr -0x7ea7 036679 rtn -: 036683 save_cont_pointers: -0x7ea8 036684 copy contw ,pdata -0x7ea9 036685 store 2 ,mem_hold_contw -0x7eaa 036686 copy contr ,pdata -0x7eab 036687 store 2 ,mem_hold_contr -0x7eac 036688 rtn -: 036689 load_cont_pointers: -0x7ead 036690 fetch 2 ,mem_hold_contw -0x7eae 036691 copy pdata ,contw -0x7eaf 036692 fetch 2 ,mem_hold_contr -0x7eb0 036693 copy pdata ,contr -0x7eb1 036694 rtn -: 036696 memcpy96: -0x7eb2 036697 call memcpy32 -: 036698 memcpy64: -0x7eb3 036699 call memcpy32 -0x7eb4 036700 branch memcpy32 -: 036701 memcpy12: -0x7eb5 036702 call memcpy8 -: 036703 memcpy4: -0x7eb6 036704 ifetch 4 ,contr -0x7eb7 036705 istore 4 ,contw -0x7eb8 036706 rtn -: 036707 memcpy8: -0x7eb9 036708 ifetch 8 ,contr -0x7eba 036709 istore 8 ,contw -0x7ebb 036710 rtn -: 036712 memcpy48: -0x7ebc 036713 call memcpy16 -: 036714 memcpy32: -0x7ebd 036715 call memcpy8 -: 036716 memcpy24: -0x7ebe 036717 call memcpy8 -: 036718 memcpy16: -0x7ebf 036719 call memcpy8 -0x7ec0 036720 branch memcpy8 -: 036724 delay_10ms: -0x7ec1 036725 arg 10 ,loopcnt -: 036726 delay_ms_wait: -0x7ec2 036727 nop 12000 -0x7ec3 036728 loop delay_ms_wait -0x7ec4 036729 rtn -: 036731 bn_zero: -0x7ec5 036732 force 3 ,loopcnt -: 036733 memset0: -0x7ec6 036734 force 0 ,pdata -: 036735 memset8: -0x7ec7 036736 istore 8 ,contw -0x7ec8 036737 loop memset8 -0x7ec9 036738 rtn -: 036740 memset0_8: -0x7eca 036741 force 0 ,pdata -0x7ecb 036742 istore 8 ,contw -0x7ecc 036743 rtn -: 036744 memset0_4: -0x7ecd 036745 force 0 ,pdata -0x7ece 036746 istore 4 ,contw -0x7ecf 036747 rtn -: 036749 clear_mem_256: -0x7ed0 036750 force 4 ,loopcnt -0x7ed1 036751 branch memset0 -: 036752 clear_mem_512: -0x7ed2 036753 force 8 ,loopcnt -0x7ed3 036754 branch memset0 -: 036756 clear_mem: -0x7ed4 036757 deposit loopcnt -0x7ed5 036758 rtn blank -0x7ed6 036759 setarg 0 -: 036760 clear_mem_loop: -0x7ed7 036761 istore 1 ,contw -0x7ed8 036762 loop clear_mem_loop -0x7ed9 036763 rtn -: 036766 clear_temp_block: -0x7eda 036767 arg 32 ,loopcnt -0x7edb 036768 arg mem_temp_block0 ,contw -0x7edc 036769 branch clear_mem -: 036771 xor_loop: -0x7edd 036772 ifetch 4 ,regc -0x7ede 036773 ifetcht 4 ,rega -0x7edf 036774 ixor temp ,pdata -0x7ee0 036775 istore 4 ,contw -0x7ee1 036776 increase 4 ,rega -0x7ee2 036777 increase 4 ,regc -0x7ee3 036778 loop xor_loop -0x7ee4 036779 rtn -: 036783 inverse_data: -0x7ee5 036784 bpatchx patch3f_3 ,mem_patch3f -0x7ee6 036785 copy loopcnt ,pdata -0x7ee7 036786 sub pdata ,1 ,null -0x7ee8 036787 rtn positive -0x7ee9 036788 iadd rega ,regb -0x7eea 036789 increase -1 ,regb -0x7eeb 036790 rshift loopcnt ,loopcnt -: 036791 inverse_loop: -0x7eec 036792 ifetcht 1 ,rega -0x7eed 036793 ifetch 1 ,regb -0x7eee 036794 istore 1 ,rega -0x7eef 036795 istoret 1 ,regb -0x7ef0 036796 increase -1 ,regb -0x7ef1 036797 increase 1 ,rega -0x7ef2 036798 loop inverse_loop -0x7ef3 036799 rtn -: 036802 memcpy_fast: -0x7ef4 036803 deposit loopcnt -0x7ef5 036804 rtn blank -: 036805 memcpy_fast_loop: -0x7ef6 036806 increase -8 ,loopcnt -0x7ef7 036807 call memcpy8 ,positive -0x7ef8 036808 rtn zero -0x7ef9 036809 branch memcpy_fast_loop ,positive -0x7efa 036810 increase 8 ,loopcnt -: 036811 memcpy_fast_loop_four: -0x7efb 036812 increase -4 ,loopcnt -0x7efc 036813 call memcpy4 ,positive -0x7efd 036814 rtn zero -0x7efe 036815 branch memcpy_fast_loop_four ,positive -0x7eff 036816 increase 4 ,loopcnt -0x7f00 036817 branch memcpy -: 036819 memcpy: -0x7f01 036820 deposit loopcnt -0x7f02 036821 rtn blank -: 036822 memcpy_loop: -0x7f03 036823 ifetch 1 ,contr -0x7f04 036824 istore 1 ,contw -0x7f05 036825 loop memcpy_loop -0x7f06 036826 rtn -: 036828 timer_stop: -0x7f07 036829 setarg 0 -: 036830 timer_init: -0x7f08 036831 rshift clkn_bt ,temp -0x7f09 036832 storet 4 ,mem_last_clkn -0x7f0a 036833 arg mem_timers ,contw -0x7f0b 036834 iforce temp -0x7f0c 036835 lshift queue ,pdata -0x7f0d 036836 iadd contw ,contw -0x7f0e 036837 istoret 2 ,contw -0x7f0f 036838 bpatchx patch3f_4 ,mem_patch3f -0x7f10 036839 rtn -: 036841 timer_check_timeout: -0x7f11 036842 arg 0x800 ,timeup -0x7f12 036843 lshift16 timeup ,timeup -0x7f13 036844 iadd timeup ,pdata -0x7f14 036845 rtn -: 036848 timer_reinit: -0x7f15 036849 arg 0 ,queue -: 036850 timer_check: -0x7f16 036851 bpatchx patch3f_5 ,mem_patch3f -0x7f17 036852 fetcht 4 ,mem_last_clkn -0x7f18 036853 rshift clkn_bt ,pdata -0x7f19 036854 store 4 ,mem_last_clkn -0x7f1a 036855 isub temp ,null -0x7f1b 036856 ncall timer_check_timeout ,positive -0x7f1c 036857 isub temp ,timeup -0x7f1d 036858 copy timeup ,temp -0x7f1e 036859 arg mem_timers ,contr -0x7f1f 036860 copy contr ,contw -0x7f20 036861 arg 16 ,loopcnt -: 036862 timer_loop: -0x7f21 036863 ifetch 2 ,contr -0x7f22 036864 isub temp ,pdata -0x7f23 036865 branch timer_counting ,positive -0x7f24 036866 force 0 ,pdata -: 036867 timer_counting: -0x7f25 036868 istore 2 ,contw -0x7f26 036869 loop timer_loop -0x7f27 036870 arg mem_timers ,contr -0x7f28 036871 lshift queue ,pdata -0x7f29 036872 iadd contr ,contr -0x7f2a 036873 ifetch 2 ,contr -0x7f2b 036874 rtn -: 036879 clk_add: -0x7f2c 036880 iadd temp ,temp -0x7f2d 036881 copy temp ,loopcnt -0x7f2e 036882 setarg 3750 -0x7f2f 036883 isub loopcnt ,pdata -0x7f30 036884 rtn positive -0x7f31 036885 sub pdata ,0 ,pdata -0x7f32 036886 rshift16 temp ,temp -0x7f33 036887 increase 1 ,temp -0x7f34 036888 lshift16 temp ,temp -0x7f35 036889 ior temp ,temp -0x7f36 036890 rtn -: 036892 clk_diff_rt: -0x7f37 036893 call clk_diff -0x7f38 036894 branch clk2rt -: 036897 clk_diff: -0x7f39 036898 disable user -0x7f3a 036899 isub temp ,pdata -0x7f3b 036900 branch clk_diff_pos ,positive -0x7f3c 036901 enable user -0x7f3d 036902 sub pdata ,0 ,pdata -: 036903 clk_diff_pos: -0x7f3e 036904 rtnbit0 15 -0x7f3f 036905 arg -61786 ,temp -0x7f40 036906 iadd temp ,pdata -0x7f41 036907 set0 64 ,pdata -0x7f42 036908 rtn -: 036910 clk2rt: -0x7f43 036911 iforce contr -0x7f44 036912 rshift16 pdata ,pdata -0x7f45 036913 arg 3750 ,temp -0x7f46 036914 imul32 temp ,pdata -0x7f47 036915 iadd contr ,pdata -0x7f48 036916 rtn -: 036919 clk2lpo: -0x7f49 036920 lshift8 pdata ,pdata -0x7f4a 036921 lshift4 pdata ,pdata -0x7f4b 036922 fetcht 3 ,mem_clks_per_lpo -0x7f4c 036923 idiv temp -0x7f4d 036924 call wait_div_end -0x7f4e 036925 quotient temp -0x7f4f 036926 rtn -: 036929 clk2bt: -0x7f50 036930 arg 3750 ,temp -0x7f51 036931 idiv temp -0x7f52 036932 call wait_div_end -0x7f53 036933 quotient pdata -0x7f54 036934 lshift16 pdata ,pdata -: 036935 clk2bt_next: -0x7f55 036936 remainder temp -0x7f56 036937 ior temp ,temp -0x7f57 036938 rtn -: 036945 string2dec_from_uart: -0x7f58 036946 arg 0 ,temp -: 036947 string2dec_from_uart_done: -0x7f59 036948 copy temp ,regc -0x7f5a 036949 ifetch 1 ,contru -0x7f5b 036950 call uchar2dialog -0x7f5c 036951 copy regc ,temp -0x7f5d 036952 call swap -0x7f5e 036953 arg 10 ,regb -0x7f5f 036954 imul32 regb ,pdata -0x7f60 036955 iadd temp ,pdata -0x7f61 036956 copy pdata ,temp -0x7f62 036957 loop string2dec_from_uart_done -0x7f63 036958 rtn -: 036962 uchar2dialog: -0x7f64 036963 arg 0x3a ,temp -0x7f65 036964 isub temp ,null -0x7f66 036965 nbranch uchar2dialog_number ,positive -0x7f67 036966 arg 0x61 ,temp -0x7f68 036967 isub temp ,null -0x7f69 036968 branch uchar2dialog_a2f ,positive -0x7f6a 036969 arg 0x37 ,temp -0x7f6b 036970 isub temp ,pdata -0x7f6c 036971 rtn -: 036972 uchar2dialog_number: -0x7f6d 036973 arg 0x30 ,temp -0x7f6e 036974 isub temp ,pdata -0x7f6f 036975 rtn -: 036976 uchar2dialog_a2f: -0x7f70 036977 arg 0x57 ,temp -0x7f71 036978 isub temp ,pdata -0x7f72 036979 rtn -: 036981 pn9: -0x7f73 036982 copy temp ,alarm -0x7f74 036983 setarg 0x1ff -0x7f75 036984 force 0 ,regb -: 036985 pn9_loop: -0x7f76 036986 rshift3 pdata ,rega -0x7f77 036987 rshift rega ,rega -0x7f78 036988 ixor rega ,rega -0x7f79 036989 isolate1 0 ,rega -0x7f7a 036990 setflag true ,9 ,pdata -0x7f7b 036991 rshift temp ,temp -0x7f7c 036992 isolate1 0 ,pdata -0x7f7d 036993 setflag true ,7 ,temp -0x7f7e 036994 rshift pdata ,pdata -0x7f7f 036995 increase 1 ,regb -0x7f80 036996 compare 0 ,regb ,0x7 -0x7f81 036997 nbranch pn9_loop ,true -0x7f82 036998 istoret 1 ,contw -0x7f83 036999 loop pn9_loop -0x7f84 037000 copy alarm ,temp -0x7f85 037001 rtn -: 037004 wait_div_end: -0x7f86 037005 rtn modone -0x7f87 037006 branch wait_div_end -: 037016 compare_loop: -: 037017 string_compare: -0x7f88 037018 ifetch 1 ,rega -0x7f89 037019 ifetcht 1 ,regb -0x7f8a 037020 isub temp ,null -0x7f8b 037021 nrtn zero -0x7f8c 037022 increase 1 ,rega -0x7f8d 037023 increase 1 ,regb -0x7f8e 037024 loop string_compare -0x7f8f 037025 force 0 ,null -0x7f90 037026 rtn -: 037029 ceiling: -0x7f91 037030 isub temp ,null -0x7f92 037031 nrtn positive -0x7f93 037032 deposit temp -0x7f94 037033 rtn -: 037035 swap: -0x7f95 037036 iadd temp ,pdata -0x7f96 037037 isub temp ,temp -0x7f97 037038 isub temp ,pdata -0x7f98 037039 rtn -: 037041 clean_mem: -0x7f99 037042 arg 0x200 ,loopcnt -0x7f9a 037043 arg 0x4000 ,contw -0x7f9b 037044 branch memset0 -: 037047 callback_func: -0x7f9c 037048 rtn blank -0x7f9d 037049 copy pdata ,pc -: 037052 wait_uarttx: -0x7f9e 037053 hfetch 2 ,core_uart_txitems -0x7f9f 037054 nbranch wait_uarttx ,blank -0x7fa0 037055 rtn -: 037057 ice_break: -0x7fa1 037058 jam 0x1 ,core_ice_ctrl -0x7fa2 037059 rtn -: 037061 ice_setbp: -0x7fa3 037062 hstore 2 ,core_ice_break0 -0x7fa4 037063 hfetch 1 ,core_ice_ctrl -0x7fa5 037064 set1 4 ,pdata -0x7fa6 037065 hstore 1 ,core_ice_ctrl -0x7fa7 037066 rtn -: 037067 ice_setbp2: -0x7fa8 037068 hstore 2 ,core_ice_break1 -0x7fa9 037069 hfetch 1 ,core_ice_ctrl -0x7faa 037070 set1 6 ,pdata -0x7fab 037071 hstore 1 ,core_ice_ctrl -0x7fac 037072 rtn -: 037074 ice_set_write_bp: -0x7fad 037075 hstore 2 ,core_ice_break0 -0x7fae 037076 jam 0x30 ,core_ice_ctrl -0x7faf 037077 rtn -: 037081 test_enable_white: -0x7fb0 037082 hfetch 1 ,core_config -0x7fb1 037083 set0 whiteoff_bit ,pdata -0x7fb2 037084 hstore 1 ,core_config -0x7fb3 037085 rtn -: 037087 check_uart_tx_buff: -0x7fb4 037088 hfetch 2 ,core_uart_txitems -0x7fb5 037089 arg uart_air_control_threshold ,temp -: 037090 pdata_sub_temp: -0x7fb6 037091 isub temp ,null -0x7fb7 037092 rtn -: 037098 fifo_in: -0x7fb8 037099 bpatchx patch3f_6 ,mem_patch3f -0x7fb9 037100 ifetcht util_fifo_len ,rega -0x7fba 037101 and temp ,0xff ,pdata -0x7fbb 037102 nbranch fifo_in_push ,blank -0x7fbc 037103 rshift8 temp ,pdata -0x7fbd 037104 istore util_fifo_len ,rega -: 037105 fifo_in_push: -0x7fbe 037106 increase util_fifo_len + util_fifo_offset ,rega -0x7fbf 037107 ifetch 1 ,rega -0x7fc0 037108 nbranch assert ,blank -0x7fc1 037109 fetch 1 ,mem_fifo_temp -0x7fc2 037110 istore 1 ,rega -0x7fc3 037111 rtn -: 037116 fifo_out: -0x7fc4 037117 bpatchx patch3f_7 ,mem_patch3f -0x7fc5 037118 arg util_fifo_len ,loopcnt -0x7fc6 037119 ifetch util_fifo_len ,rega -0x7fc7 037120 rtn blank -: 037121 fifo_out_loop: -0x7fc8 037122 ifetch 1 ,rega -0x7fc9 037123 nbranch fifo_out_end ,blank -0x7fca 037124 increase 1 ,rega -0x7fcb 037125 loop fifo_out_loop -0x7fcc 037126 branch assert -: 037127 fifo_out_end: -0x7fcd 037128 arg 0 ,temp -0x7fce 037129 istoret 1 ,rega -0x7fcf 037130 rtn -: 037135 fifo_is_empty: -0x7fd0 037136 ifetch util_fifo_len ,rega -0x7fd1 037137 rtn -: 037142 fifo_is_full: -0x7fd2 037143 ifetch 1 ,rega -0x7fd3 037144 rtn -: 037147 fifo_is_near_full: -0x7fd4 037148 ifetch 2 ,rega -0x7fd5 037149 rtn -: 037153 fifo_content_count: -0x7fd6 037154 arg 0 ,temp -: 037155 fifo_content_count_loop: -0x7fd7 037156 fetch 1 ,contr -0x7fd8 037157 loop fifo_content_count_loop ,blank -0x7fd9 037158 increase 1 ,temp -0x7fda 037159 loop fifo_content_count_loop -0x7fdb 037160 copy temp ,pdata -0x7fdc 037161 rtn -: 037163 not_greater_than: -0x7fdd 037164 isub temp ,null -0x7fde 037165 nrtn positive -0x7fdf 037166 copy temp ,pdata -0x7fe0 037167 rtn -: 037170 disable_positive: -0x7fe1 037171 force -1 ,null -0x7fe2 037172 rtn -: 037173 enable_positive: -: 037174 disable_zero: -0x7fe3 037175 force 1 ,null -0x7fe4 037176 rtn -: 037177 enable_zero: -0x7fe5 037178 force 0 ,null -0x7fe6 037179 rtn -: 037181 enable_user: -0x7fe7 037182 enable user -0x7fe8 037183 rtn -: 037185 disable_user: -0x7fe9 037186 disable user -0x7fea 037187 rtn -: 037189 enable_user2: -0x7feb 037190 enable user2 -0x7fec 037191 rtn -: 037193 disable_user2: -0x7fed 037194 disable user2 -0x7fee 037195 rtn -: 037197 disable_blank: -0x7fef 037198 setarg 1 -0x7ff0 037199 rtn -: 037201 enable_blank: -0x7ff1 037202 setarg 0 -0x7ff2 037203 rtn -: 037206 reverse_byte: -0x7ff3 037207 copy loopcnt ,pdata -0x7ff4 037208 rtn blank -0x7ff5 037209 copy contr ,pdata -0x7ff6 037210 iadd loopcnt ,pdata -0x7ff7 037211 increase -1 ,pdata -0x7ff8 037212 copy pdata ,contr -: 037213 reverse_loop: -0x7ff9 037214 ifetch 1 ,contr -0x7ffa 037215 increase -2 ,contr -0x7ffb 037216 istore 1 ,contw -0x7ffc 037217 loop reverse_loop -0x7ffd 037218 rtn +: 003272 start: +0x2000 003273 call lpmstate +: 003275 soft_reset: +0x2001 003276 bpatch patch00_0 ,mem_patch00 +0x2002 003277 clear_stack +0x2003 003278 call spi_ncs_gpio_init +0x2004 003279 call initialize_radio +0x2005 003280 call iicd_init_12m +0x2006 003281 call init_param +0x2007 003282 call l2cap_init +0x2008 003283 bpatch patch00_1 ,mem_patch00 +0x2009 003284 call rfcomm_init +0x200a 003285 call init_lmp +0x200b 003286 call ui_init +0x200c 003287 call app_init +0x200d 003288 ncall load_chip_option ,wake +0x200e 003289 bpatch patch00_2 ,mem_patch00 +0x200f 003290 call app_lpm_init ,wake +0x2010 003291 call publickey_init +0x2011 003292 call lpm_recover_clk ,wake +: 003293 main_loop: +0x2012 003294 bpatch patch00_3 ,mem_patch00 +0x2013 003295 call sp_calc_sequence +0x2014 003296 call sp_calc_sequence_256 +0x2015 003297 call sp_calc_sequence_256_check +0x2016 003298 call le_dispatch +0x2017 003299 bpatch patch00_4 ,mem_patch00 +0x2018 003300 call idle_dispatch +0x2019 003301 call app_process_idle +0x201a 003302 call inquiry_dispatch +0x201b 003303 call inquiry_scan_dispatch +0x201c 003304 call page_scan_dispatch +0x201d 003305 call connection_dispatch +0x201e 003306 call lpm_dispatch +0x201f 003307 call g24_dispatch +0x2020 003308 branch main_loop +: 003310 connection_dispatch: +0x2021 003311 call connection_incontext +0x2022 003312 rtnmark0 mark_context +0x2023 003313 set0 mark_context ,mark +0x2024 003314 call context_save +0x2025 003315 branch le_disable +: 003317 connection_incontext: +0x2026 003318 bpatch patch00_5 ,mem_patch00 +0x2027 003319 call context_search_insniff +0x2028 003320 nbranch connection_nosniff ,zero +0x2029 003321 call context_load +0x202a 003322 add rega ,coffset_mode ,contr +0x202b 003323 ifetch 1 ,contr +0x202c 003324 bbit1 mode_le ,le_conn_dispatch +0x202d 003325 bbit1 mode_master ,master_dispatch +0x202e 003326 branch slave_dispatch +: 003327 connection_nosniff: +0x202f 003328 call context_get_next +0x2030 003329 copy loopcnt ,null +0x2031 003330 rtn zero +0x2032 003331 call context_load +0x2033 003332 fetch 1 ,mem_state +0x2034 003333 bbit1 state_inpage ,master_page +0x2035 003334 fetch 1 ,mem_mode +0x2036 003335 bbit1 mode_master ,master_dispatch +0x2037 003336 branch slave_dispatch +: 003344 idle_dispatch: +0x2038 003345 fetch 1 ,mem_hci_cmd +0x2039 003346 rtn blank +0x203a 003347 beq hci_cmd_inquiry ,idle_inquiry +0x203b 003348 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel +0x203c 003349 beq hci_cmd_remote_name_req ,idle_remote_name_req +0x203d 003350 beq hci_cmd_create_conn ,idle_create_conn +0x203e 003351 beq hci_cmd_le_create_conn ,idle_le_create_conn +0x203f 003352 call context_search_conn_handle +0x2040 003353 rtn zero +0x2041 003354 call context_search_plap +0x2042 003355 rtn zero +: 003356 idle_exit: +0x2043 003357 jam 0 ,mem_hci_cmd +0x2044 003358 rtn +: 003360 idle_le_create_conn: +0x2045 003361 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn +0x2046 003362 jam 0 ,mem_hci_cmd +0x2047 003363 rtn +: 003365 idle_inquiry: +0x2048 003366 set1 mark_inquiry_on ,mark +0x2049 003367 set0 mark_inquiry_trainb ,mark +0x204a 003368 jam param_ninquiry ,mem_ninqy_index +0x204b 003369 jam 31 ,mem_nfreq_index_inq +0x204c 003370 branch idle_exit +: 003372 idle_inquiry_cancel: +0x204d 003373 set0 mark_inquiry_on ,mark +0x204e 003374 force 0 ,stop_watch +0x204f 003375 branch idle_exit +: 003377 idle_remote_name_req: +0x2050 003378 call context_search_plap +0x2051 003379 rtn zero +0x2052 003380 force lmp_name_req ,temp +0x2053 003381 jam 5 ,mem_nameres_cnt +0x2054 003382 branch idle_start_page +: 003384 idle_create_conn: +0x2055 003385 bpatch patch00_6 ,mem_patch00 +: 003386 idle_create_conn_device: +0x2056 003387 fetch 6 ,mem_hci_plap +0x2057 003388 branch idle_exit ,blank +0x2058 003389 jam reconnect_hid ,memui_reconnect_mode +0x2059 003391 jam conn_sm_wait_features_res ,mem_conn_sm +0x205a 003392 branch idle_create_conn_cont +: 003394 idle_create_conn_cont: +0x205b 003395 force lmp_version_req ,temp +: 003396 idle_start_page: +0x205c 003397 bpatch patch00_7 ,mem_patch00 +0x205d 003398 fetch 1 ,mem_page_mode +0x205e 003399 branch idle_page_mode_r0 ,blank +0x205f 003400 lshift3 pdata ,pdata +0x2060 003401 lshift4 pdata ,pdata +0x2061 003402 increase -1 ,pdata +: 003403 idle_page_mode_r0: +0x2062 003404 store 1 ,mem_npage +0x2063 003405 store 1 ,mem_npage_index +0x2064 003406 jam 31 ,mem_nfreq_index_page +0x2065 003407 set0 mark_page_trainb ,mark +0x2066 003408 call context_new +0x2067 003409 nbranch idle_page_fail ,zero +0x2068 003410 call get_free_amaddr +0x2069 003411 store 1 ,mem_amaddr +0x206a 003412 storet 1 ,mem_lmo_opcode2 +0x206b 003413 fetch 6 ,mem_hci_plap +0x206c 003414 store 6 ,mem_plap +0x206d 003415 bpatch patch01_0 ,mem_patch01 +0x206e 003416 call timer_reinit +0x206f 003417 force 0 ,pdata +0x2070 003418 compare lmp_name_req ,temp ,0xff +0x2071 003419 nsetflag true ,state_init_seq ,pdata +0x2072 003420 set1 state_inpage ,pdata +0x2073 003421 store 1 ,mem_state +0x2074 003422 jam bt_evt_reconn_started ,mem_fifo_temp +0x2075 003423 call ui_ipc_send_event +0x2076 003424 force 0 ,pdata +0x2077 003425 setflag true ,smap_name_req ,pdata +0x2078 003426 store 1 ,mem_state_map +0x2079 003427 setarg 0 +0x207a 003428 set1 mode_master ,pdata +0x207b 003429 store 1 ,mem_mode +0x207c 003430 enable master +0x207d 003431 call context_save +0x207e 003432 disable master +0x207f 003433 force page_length_timer ,queue +0x2080 003434 fetch 2 ,mem_page_to +0x2081 003435 call timer_init +0x2082 003436 branch idle_exit +: 003437 idle_page_fail: +0x2083 003438 bpatch patch01_1 ,mem_patch01 +0x2084 003439 fetch 6 ,mem_hci_plap +0x2085 003440 store 6 ,mem_plap +0x2086 003441 compare lmp_name_req ,temp ,0xff +0x2087 003442 branch idle_name_fail ,true +0x2088 003443 branch idle_exit +: 003444 idle_name_fail: +0x2089 003445 arg mem_tmp_buffer ,contw +0x208a 003446 arg 8 ,loopcnt +0x208b 003447 call memset0 +0x208c 003448 jam bt_evt_reconn_failed ,mem_fifo_temp +0x208d 003449 call ui_ipc_send_event +0x208e 003450 branch idle_exit +: 003457 inquiry_dispatch: +0x208f 003458 rtnmark0 mark_inquiry_on +0x2090 003459 force inquiry_length_timer ,queue +0x2091 003460 call timer_check +0x2092 003461 nsetflag blank ,mark_inquiry_on ,mark +0x2093 003462 nbranch inquiry_start ,blank +0x2094 003463 rtn +: 003467 inquiry_start: +0x2095 003468 bpatch patch01_2 ,mem_patch01 +0x2096 003469 fetcht 2 ,mem_inq_window +0x2097 003470 force 4 ,queue +0x2098 003471 call sniff_check_window +0x2099 003472 rtn user +0x209a 003473 call afh_clear +0x209b 003474 force 0 ,freq_mode +: 003475 inquiry_restart: +0x209c 003476 rtn timeout +0x209d 003477 set0 mark_fhs_already_good ,mark +0x209e 003478 set0 mark_fhs_eir ,mark +: 003479 inquiry_rx_restart: +0x209f 003480 add clkn_bt ,1 ,bt_clk +0x20a0 003481 isolate1 mark_inquiry_trainb ,mark +0x20a1 003482 setflag true ,2 ,freq_mode +0x20a2 003483 compare 0x00 ,bt_clk ,0x02 +0x20a3 003484 nbranch inquiry_receive ,true +: 003486 inquiry_transmit: +0x20a4 003487 bpatch patch01_3 ,mem_patch01 +0x20a5 003488 fetch 1 ,mem_inquiry_transmit +0x20a6 003489 increase 1 ,pdata +0x20a7 003490 store 1 ,mem_inquiry_transmit +0x20a8 003491 call fetch_giac +0x20a9 003492 call tx_radio_freq +0x20aa 003493 call fetch_diac +0x20ab 003494 call start_transmitter +0x20ac 003495 call start_tx_native +0x20ad 003496 call send_access_word +0x20ae 003497 call end_of_packet +0x20af 003498 call inquiry_check_train +0x20b0 003499 branch inquiry_restart +: 003501 inquiry_check_train: +0x20b1 003502 bpatch patch01_4 ,mem_patch01 +0x20b2 003503 fetch 1 ,mem_nfreq_index_inq +0x20b3 003504 increase -1 ,pdata +0x20b4 003505 store 1 ,mem_nfreq_index_inq +0x20b5 003506 rtn positive +0x20b6 003507 jam 31 ,mem_nfreq_index_inq +0x20b7 003508 fetch 1 ,mem_ninqy_index +0x20b8 003509 increase -1 ,pdata +0x20b9 003510 store 1 ,mem_ninqy_index +0x20ba 003511 rtn positive +0x20bb 003512 setflip mark_inquiry_trainb ,mark +0x20bc 003513 jam param_ninquiry ,mem_ninqy_index +0x20bd 003514 rtn +: 003516 inquiry_receive: +0x20be 003517 bpatch patch01_5 ,mem_patch01 +0x20bf 003518 call fetch_giac +0x20c0 003519 call rx_radio_freq +0x20c1 003520 call fetch_diac +0x20c2 003521 call start_rx_native +0x20c3 003522 call start_receiver +0x20c4 003523 call wait_access_clkn_rt +0x20c5 003524 branch inquiry_sync ,sync +0x20c6 003525 call inquiry_check_train +0x20c7 003526 branch inquiry_rx_restart +: 003527 inquiry_sync: +0x20c8 003528 bpatch patch01_6 ,mem_patch01 +0x20c9 003529 call save_rssi +0x20ca 003530 call scan_mode_whiten +0x20cb 003531 call receive_packet_whitened +0x20cc 003532 set0 mark_rxbuf_inuse ,mark +0x20cd 003533 rtnmark0 mark_fhs_already_good +: 003534 inquiry_receive_rtn: +0x20ce 003535 bpatch patch01_7 ,mem_patch01 +: 003536 inquiry_receive_eir_rtn: +0x20cf 003537 fetch 1 ,mem_inquiry_rcv +0x20d0 003538 increase 1 ,pdata +0x20d1 003539 store 1 ,mem_inquiry_rcv +0x20d2 003540 rtn +: 003548 master_page: +0x20d3 003549 bpatch patch02_0 ,mem_patch02 +0x20d4 003550 enable master +0x20d5 003551 enable clknt +0x20d6 003552 fetch 2 ,mem_page_interval +0x20d7 003553 branch master_page_no_interval ,blank +0x20d8 003554 force page_interval_timer ,queue +0x20d9 003555 call timer_check +0x20da 003556 nrtn blank +: 003557 master_page_no_interval: +0x20db 003558 bpatch patch02_1 ,mem_patch02 +0x20dc 003559 fetcht 2 ,mem_page_window +0x20dd 003560 force 40 ,queue +0x20de 003561 call sniff_check_window +0x20df 003562 branch page_exit ,user +0x20e0 003563 force page_length_timer ,queue +0x20e1 003564 call timer_check +0x20e2 003565 nbranch page_start ,blank +0x20e3 003566 fetch 1 ,mem_state_map +0x20e4 003567 bbit1 smap_name_req ,master_npage_timeout +0x20e5 003568 branch master_page_timeout +: 003569 master_npage_timeout: +0x20e6 003570 arg mem_tmp_buffer ,contw +0x20e7 003571 arg 8 ,loopcnt +0x20e8 003572 call memset0 +: 003573 master_page_timeout: +0x20e9 003574 bpatch patch02_2 ,mem_patch02 +0x20ea 003575 jam 0 ,mem_state +0x20eb 003576 call init_lmp_work +0x20ec 003577 jam 0 ,memui_reconnect_mode +0x20ed 003578 jam bt_evt_reconn_page_timeout ,mem_fifo_temp +0x20ee 003579 call ui_ipc_send_event +0x20ef 003580 branch page_exit +: 003582 page_start: +0x20f0 003583 bpatch patch02_3 ,mem_patch02 +0x20f1 003584 force 0 ,timeup +0x20f2 003585 until clkn_rt ,meet +0x20f3 003586 fetch 1 ,mem_page_clk +0x20f4 003587 increase -1 ,pdata +0x20f5 003588 ixor clkn_bt ,pdata +0x20f6 003589 compare 0 ,pdata ,3 +0x20f7 003590 nbranch page_start ,true +0x20f8 003591 deposit am_addr +0x20f9 003592 store 1 ,mem_fhs_am_addr +0x20fa 003593 force 0 ,n_tx_slot +0x20fb 003594 force 0 ,freq_mode +: 003596 page_restart: +0x20fc 003597 bpatch patch02_4 ,mem_patch02 +0x20fd 003598 branch page_exit ,timeout +0x20fe 003599 call fetch_page_bt_adr +0x20ff 003600 arg param_rf_setup ,timeup +0x2100 003601 until clkn_rt ,meet +: 003602 page_rx_restart: +0x2101 003603 bpatch patch02_5 ,mem_patch02 +0x2102 003604 fetch 4 ,mem_page_clk +0x2103 003605 iforce bt_clk +0x2104 003606 increase 1 ,pdata +0x2105 003607 store 4 ,mem_page_clk +0x2106 003608 isolate1 mark_page_trainb ,mark +0x2107 003609 setflag true ,2 ,freq_mode +0x2108 003610 compare 0x00 ,bt_clk ,0x02 +0x2109 003611 nbranch page_receive ,true +0x210a 003612 fetch 1 ,mem_page_transmit +0x210b 003613 increase 1 ,pdata +0x210c 003614 store 1 ,mem_page_transmit +0x210d 003615 call tx_radio_freq +0x210e 003616 call start_transmitter +0x210f 003617 call start_tx_native +0x2110 003618 call send_access_word +0x2111 003619 call end_of_packet +0x2112 003620 call page_check_train +0x2113 003621 branch page_restart +: 003622 page_exit: +0x2114 003623 bpatch patch02_6 ,mem_patch02 +0x2115 003624 disable master +0x2116 003625 fetch 2 ,mem_page_interval +0x2117 003626 rtn blank +0x2118 003627 force page_interval_timer ,queue +0x2119 003628 branch timer_init +: 003630 page_check_train: +0x211a 003631 bpatch patch02_7 ,mem_patch02 +0x211b 003632 fetch 1 ,mem_nfreq_index_page +0x211c 003633 increase -1 ,pdata +0x211d 003634 store 1 ,mem_nfreq_index_page +0x211e 003635 rtn positive +0x211f 003636 jam 31 ,mem_nfreq_index_page +0x2120 003637 fetch 1 ,mem_npage_index +0x2121 003638 increase -1 ,pdata +0x2122 003639 store 1 ,mem_npage_index +0x2123 003640 rtn positive +0x2124 003641 setflip mark_page_trainb ,mark +0x2125 003642 fetch 1 ,mem_npage +0x2126 003643 store 1 ,mem_npage_index +0x2127 003644 rtn +: 003646 page_receive: +0x2128 003647 bpatch patch03_0 ,mem_patch03 +0x2129 003648 call rx_radio_freq +0x212a 003649 call start_rx_native +0x212b 003650 call start_receiver +0x212c 003651 call wait_access_clkn_rt +0x212d 003652 branch page_sync ,sync +0x212e 003653 call page_check_train +0x212f 003654 branch page_rx_restart +: 003655 page_sync: +0x2130 003656 call end_of_packet +0x2131 003657 fetch 1 ,mem_page_rcv +0x2132 003658 increase 1 ,pdata +0x2133 003659 store 1 ,mem_page_rcv +0x2134 003660 force 0 ,stop_watch +0x2135 003661 fetch 4 ,mem_page_clk +: 003662 page_send_fhs: +0x2136 003663 bpatch patch03_1 ,mem_patch03 +0x2137 003664 call rf_setup_time_master_slot +0x2138 003665 call fetch_page_bt_adr +0x2139 003666 increase 1 ,n_tx_slot +: 003667 page_send_fhs_continue: +0x213a 003668 and_into 0x1fd ,bt_clk +0x213b 003669 and_into 0x1fc ,freq_mode +0x213c 003670 call tx_radio_freq +0x213d 003671 call start_transmitter +0x213e 003672 call start_tx_native +0x213f 003673 call send_access_word +0x2140 003674 deposit clkn_bt +0x2141 003675 store 4 ,mem_clkn_bt +0x2142 003676 force 0 ,am_addr +0x2143 003677 force type_fhs ,type +0x2144 003678 call scan_mode_whiten +0x2145 003679 call transmit_packet_whitened +: 003680 page_wait_fhs_reply: +0x2146 003681 bpatch patch03_2 ,mem_patch03 +0x2147 003682 call rf_setup_time_slave_slot +0x2148 003683 or_into 0x02 ,bt_clk +0x2149 003684 and_into 0x1fc ,freq_mode +0x214a 003685 call rx_radio_freq +0x214b 003686 call start_rx_native +0x214c 003687 call start_receiver +0x214d 003688 call wait_access_clkn_rt +0x214e 003689 call end_of_packet ,sync +0x214f 003690 branch page_wait_fhs_reply_ok ,sync +0x2150 003691 fetch 1 ,mem_fhs_wait_counter +0x2151 003692 branch page_restart ,blank +0x2152 003693 increase -1 ,pdata +0x2153 003694 store 1 ,mem_fhs_wait_counter +0x2154 003695 branch page_send_fhs +: 003697 page_wait_fhs_reply_ok: +0x2155 003698 bpatch patch03_3 ,mem_patch03 +0x2156 003699 fetch 1 ,mem_page_rcv_fhs +0x2157 003700 increase 1 ,pdata +0x2158 003701 store 1 ,mem_page_rcv_fhs +0x2159 003702 call prepare_newconn +: 003703 master_newconn_loop: +0x215a 003704 call master_newconn_once +0x215b 003705 branch newconn_poll_responded ,sync +0x215c 003706 call new_conn_timeout +0x215d 003707 nbranch master_newconn_loop ,blank +0x215e 003708 branch page_restart +: 003710 newconn_poll_responded: +0x215f 003711 bpatch patch03_4 ,mem_patch03 +0x2160 003712 fetch 1 ,mem_state +0x2161 003713 set0 state_inpage ,pdata +0x2162 003714 store 1 ,mem_state +0x2163 003715 call newconn_init +0x2164 003716 disable master +0x2165 003717 rtn +: 003720 master_dispatch: +0x2166 003721 bpatch patch03_5 ,mem_patch03 +0x2167 003722 enable master +0x2168 003723 enable clknt +0x2169 003724 call role_switch_master +0x216a 003725 rtn user +0x216b 003726 call check_bt_disabled +0x216c 003727 call rf_setup_time_master_slot +0x216d 003728 add clkn_bt ,1 ,bt_clk +0x216e 003729 call fetch_self_bt_adr +0x216f 003730 force 0x03 ,freq_mode +0x2170 003731 call scheduler_tx_l2cap_pkt +0x2171 003732 call prepare_tx +0x2172 003733 call tx_radio_freq +0x2173 003734 call start_transmitter +0x2174 003735 call start_tx_native +0x2175 003736 call send_access_word +0x2176 003737 call transmit_packet +: 003738 master_loop: +0x2177 003739 bpatch patch03_6 ,mem_patch03 +0x2178 003740 call parse_lmp +0x2179 003741 call master_conn_recv_packet +0x217a 003742 nbranch master_notmatch ,match +0x217b 003743 call supervision_flush +0x217c 003744 call parse_l2cap +0x217d 003745 fetch 1 ,mem_master_rcvcnt +0x217e 003746 increase 1 ,pdata +0x217f 003747 store 1 ,mem_master_rcvcnt +: 003748 master_notmatch: +0x2180 003749 bpatch patch03_7 ,mem_patch03 +0x2181 003750 call scheduler_process +0x2182 003751 call check_master_disconnect +0x2183 003752 nrtn master +0x2184 003753 call check_attempt +0x2185 003754 nbranch master_attempt ,blank +: 003755 master_exit: +0x2186 003756 disable master +0x2187 003757 rtn +: 003759 master_attempt: +0x2188 003760 call prepare_tx +0x2189 003761 call master_conn_send_packet +0x218a 003762 branch master_loop +: 003765 check_master_disconnect: +0x218b 003766 branch check_master_match ,match +0x218c 003767 call supervision_update +0x218d 003768 branch master_disconnect ,positive +: 003769 check_master_match: +0x218e 003770 call check_disconnect_timeout +0x218f 003771 nbranch master_disconnect ,user +0x2190 003772 fetch 1 ,mem_state_map +0x2191 003773 rtnbit0 smap_name_req +0x2192 003774 rtnbit1 smap_name_res +0x2193 003775 fetch 1 ,mem_op +0x2194 003776 rtnbit1 op_disconn +0x2195 003777 call conn_timer_expired +0x2196 003778 nrtn blank +0x2197 003779 fetch 1 ,mem_nameres_cnt +0x2198 003780 increase -1 ,pdata +0x2199 003781 store 1 ,mem_nameres_cnt +0x219a 003782 nrtn blank +0x219b 003783 branch lmp_disconnect +: 003785 master_disconnect: +0x219c 003786 bpatch patch04_0 ,mem_patch04 +0x219d 003787 call quit_connection +0x219e 003788 disable master +0x219f 003789 fetch 1 ,mem_state_map +0x21a0 003790 bbit1 smap_name_req ,master_name_disconnect +0x21a1 003791 rtn +: 003793 master_name_disconnect: +0x21a2 003794 fetch 1 ,mem_state_map +0x21a3 003795 rtnbit1 smap_name_res +: 003796 master_name_error: +0x21a4 003797 arg mem_tmp_buffer ,contw +0x21a5 003798 arg 8 ,loopcnt +0x21a6 003799 branch memset0 +: 003801 check_disconnect_timeout: +0x21a7 003802 bpatch patch04_1 ,mem_patch04 +0x21a8 003803 enable user +0x21a9 003804 fetch 1 ,mem_op +0x21aa 003805 rtnbit0 op_disconn +0x21ab 003806 call conn_timer_expired +0x21ac 003807 nrtn blank +0x21ad 003808 branch disable_user +: 003810 conn_timer_expired: +0x21ae 003811 fetch 1 ,mem_conn_timer +0x21af 003812 increase -1 ,pdata +0x21b0 003813 store 1 ,mem_conn_timer +0x21b1 003814 rtn +: 003816 linkkey_ready: +0x21b2 003817 bpatch patch04_2 ,mem_patch04 +0x21b3 003818 fetch 1 ,mem_state +0x21b4 003819 bbit1 state_linkkey ,linkkey_set +0x21b5 003820 fetch 1 ,mem_pairing_auth +0x21b6 003821 branch linkkey_set ,blank +0x21b7 003822 jam defalt_pairing_auth ,mem_pairing_auth +0x21b8 003823 jam bt_evt_linkkey_generate ,mem_fifo_temp +0x21b9 003824 call ui_ipc_send_event +0x21ba 003825 branch linkkey_set +: 003826 linkkey_set: +0x21bb 003827 bpatch patch04_3 ,mem_patch04 +0x21bc 003828 call context_traverse_linkkey +0x21bd 003829 fetch 1 ,mem_state +0x21be 003830 set1 state_linkkey ,pdata +0x21bf 003831 store 1 ,mem_state +0x21c0 003832 jam 1 ,mem_link_key_exists +0x21c1 003833 fetch 1 ,mem_conn_sm +0x21c2 003834 bne conn_sm_pairing ,linkkey_set_continue +: 003835 linkkey_set_continue: +0x21c3 003836 rtn +: 003838 generate_linkkey_continue: +0x21c4 003839 jam pairing_auth ,mem_pairing_auth +: 003840 clear_linkstate: +0x21c5 003841 fetch 1 ,mem_state +0x21c6 003842 set0 state_linkkey ,pdata +0x21c7 003843 store 1 ,mem_state +0x21c8 003844 rtn +: 003848 role_switch_check: +0x21c9 003849 bpatch patch04_4 ,mem_patch04 +0x21ca 003850 disable user +0x21cb 003851 fetch 2 ,mem_tsniff +0x21cc 003852 arg 0xffff ,temp +0x21cd 003853 isub temp ,null +0x21ce 003854 nrtn zero +0x21cf 003855 fetch 4 ,mem_sniff_anchor +0x21d0 003856 branch role_switch_clkn ,clknt +0x21d1 003857 isub clke_bt ,pdata +0x21d2 003858 branch role_switch_clke +: 003859 role_switch_clkn: +0x21d3 003860 isub clkn_bt ,pdata +: 003861 role_switch_clke: +0x21d4 003862 sub pdata ,4 ,null +0x21d5 003863 nrtn positive +0x21d6 003864 force 0 ,pdata +0x21d7 003865 store 2 ,mem_tsniff +0x21d8 003866 branch enable_user +: 003870 role_switch_prepare: +0x21d9 003871 copy pdata ,temp +0x21da 003872 bpatch patch04_5 ,mem_patch04 +0x21db 003873 storet 4 ,mem_sniff_anchor +: 003874 role_switch_prepare0: +0x21dc 003875 jam switch_flag_accept ,mem_switch_flag +0x21dd 003876 setarg 0xffff +0x21de 003877 store 2 ,mem_tsniff +0x21df 003878 jam 1 ,mem_sniff_attempt +0x21e0 003879 rtn +: 003882 role_switch_master: +0x21e1 003883 bpatch patch04_6 ,mem_patch04 +0x21e2 003884 call role_switch_check +0x21e3 003885 nrtn user +0x21e4 003886 disable user +0x21e5 003887 jam param_newconnto ,mem_newconnto_counter +0x21e6 003888 set0 mark_fhs_already_good ,mark +: 003889 roles_waitfhs_loop: +0x21e7 003890 call rf_setup_time_master_slot +0x21e8 003891 call master_recv_packet +0x21e9 003892 bmark1 mark_fhs_already_good ,roles_replyto_fhs +0x21ea 003893 call new_conn_timeout +0x21eb 003894 nbranch roles_waitfhs_loop ,blank +: 003895 role_switch_fail_master: +0x21ec 003896 bpatch patch04_7 ,mem_patch04 +0x21ed 003897 disable user +0x21ee 003898 deposit clkn_bt +0x21ef 003899 store 4 ,mem_next_btclk +0x21f0 003900 enable clknt +0x21f1 003901 enable master +0x21f2 003902 jam bt_evt_switch_fail_master ,mem_fifo_temp +0x21f3 003903 branch ui_ipc_send_event +: 003905 roles_replyto_fhs: +0x21f4 003906 bpatch patch05_0 ,mem_patch05 +0x21f5 003907 call rf_setup_time_slave_slot +0x21f6 003908 arg type_id ,type +0x21f7 003909 call master_send_packet +0x21f8 003910 disable clknt +0x21f9 003911 disable master +0x21fa 003912 call apply_switch_clke +0x21fb 003913 call prepare_newconn +: 003914 roles_newconns_loop: +0x21fc 003915 bpatch patch05_1 ,mem_patch05 +0x21fd 003916 call slave_newconn_once +0x21fe 003917 branch roles_newconns_responded ,match +0x21ff 003918 call new_conn_timeout +0x2200 003919 nbranch roles_newconns_loop ,blank +0x2201 003920 branch role_switch_fail_master +: 003921 roles_newconns_responded: +0x2202 003922 fetch 1 ,mem_mode +0x2203 003923 set0 mode_master ,pdata +0x2204 003924 store 1 ,mem_mode +0x2205 003925 call supervision_flush +0x2206 003926 call calc_clke_offset +0x2207 003927 enable user +0x2208 003928 jam bt_evt_switch_success_master ,mem_fifo_temp +0x2209 003929 branch ui_ipc_send_event +: 003934 context_load: +0x220a 003935 bpatch patch05_2 ,mem_patch05 +0x220b 003936 set1 mark_context ,mark +0x220c 003937 deposit rega +0x220d 003938 store 2 ,mem_context_ptr +0x220e 003939 force context_size ,loopcnt +0x220f 003940 arg mem_le_state ,contw +0x2210 003941 add rega ,coffset_mode ,contr +0x2211 003942 ifetch 1 ,contr +0x2212 003943 copy rega ,contr +0x2213 003944 bbit1 mode_le ,memcpy +0x2214 003945 arg mem_state ,contw +0x2215 003946 call memcpy +0x2216 003947 disable attempt +0x2217 003948 fetch 1 ,mem_amaddr +0x2218 003949 iforce am_addr +0x2219 003950 jam 1 ,mem_current_sniff_attempt +0x221a 003951 branch context_load_master ,master +0x221b 003952 jam 1 ,mem_current_sniff_attempt +: 003953 context_load_master: +0x221c 003954 fetch 1 ,mem_state +0x221d 003955 rtnbit0 state_insniff +0x221e 003956 fetch 1 ,mem_sniff_attempt +0x221f 003957 store 1 ,mem_current_sniff_attempt +0x2220 003958 fetch 1 ,mem_sniff_timeout +0x2221 003959 store 1 ,mem_current_sniff_timeout +0x2222 003960 rtn +: 003962 context_save: +0x2223 003963 bpatch patch05_3 ,mem_patch05 +0x2224 003964 fetch 2 ,mem_context_ptr +0x2225 003965 iforce contw +0x2226 003966 force context_size ,loopcnt +0x2227 003967 arg mem_le_state ,contr +0x2228 003968 branch memcpy ,le +0x2229 003969 arg mem_state ,contr +0x222a 003970 branch memcpy +: 003974 context_get_next: +0x222b 003975 arg context_num ,loopcnt +0x222c 003976 fetcht 1 ,mem_current_context +: 003977 context_get_next_loop: +0x222d 003978 increase 1 ,temp +0x222e 003979 compare context_num ,temp ,0xff +0x222f 003980 nbranch context_get_next_cont ,true +0x2230 003981 arg 0 ,temp +: 003982 context_get_next_cont: +0x2231 003983 storet 1 ,mem_current_context +0x2232 003984 mul32 temp ,context_size ,pdata +0x2233 003985 arg mem_context ,rega +0x2234 003986 iadd rega ,rega +0x2235 003987 ifetch 1 ,rega +0x2236 003988 bbit1 state_insniff ,context_get_next_sniff +0x2237 003989 rtnbit1 state_inconn +0x2238 003990 rtnbit1 state_inpage +: 003991 context_get_next_sniff: +0x2239 003992 loop context_get_next_loop +0x223a 003993 rtn +: 003995 context_new: +0x223b 003996 bpatch patch05_4 ,mem_patch05 +0x223c 003997 arg context_search_empty ,regc +0x223d 003998 call context_search +0x223e 003999 nrtn zero +0x223f 004000 deposit rega +0x2240 004001 store 2 ,mem_context_ptr +0x2241 004002 force 0 ,null +0x2242 004003 rtn +: 004007 context_check_all_wack: +0x2243 004008 call check_esco_amaddr +0x2244 004009 branch context_check_esco_wack ,true +0x2245 004010 fetch 2 ,mem_context_ptr +0x2246 004011 add pdata ,coffset_arq ,contw +0x2247 004012 fetch 1 ,mem_arq +0x2248 004013 istore 1 ,contw +0x2249 004014 arg context_check_a_wack ,regc +0x224a 004015 branch context_search +: 004017 context_check_esco_wack: +0x224b 004018 fetch 1 ,mem_arq +0x224c 004019 isolate1 wack ,pdata +0x224d 004020 branch context_esco_wack ,true +0x224e 004021 force 1 ,null +0x224f 004022 rtn +: 004023 context_esco_wack: +0x2250 004024 force 0 ,null +0x2251 004025 rtn +: 004028 context_check_idle: +0x2252 004029 arg context_check_inconn ,regc +0x2253 004030 branch context_search +: 004032 context_traverse_linkkey: +0x2254 004033 fetcht 2 ,mem_context_ptr +0x2255 004034 arg context_traverse_clearkey ,regc +0x2256 004035 branch context_search +: 004039 context_search_conn_handle: +0x2257 004040 fetcht 1 ,mem_hci_conn_handle +: 004041 context_search_conn_handle2: +0x2258 004042 arg context_search_handle ,regc +0x2259 004043 branch context_search +: 004045 context_search_plap: +0x225a 004046 bpatch patch05_5 ,mem_patch05 +0x225b 004047 fetcht 6 ,mem_hci_plap +: 004048 context_search_plap2: +0x225c 004049 arg context_search_lap ,regc +0x225d 004050 branch context_search +: 004052 context_search_insniff: +0x225e 004053 arg context_search_sniff ,regc +0x225f 004054 branch context_search +: 004056 context_search_sniff_window: +0x2260 004057 arg context_search_window ,regc +: 004058 context_search: +0x2261 004059 bpatch patch05_6 ,mem_patch05 +0x2262 004060 arg mem_context ,rega +0x2263 004061 arg context_num ,loopcnt +: 004062 context_search_loop: +0x2264 004063 ifetch 1 ,rega +0x2265 004064 copy regc ,pc +: 004065 context_search_next: +0x2266 004066 increase context_size ,rega +0x2267 004067 loop context_search_loop +0x2268 004068 force 1 ,null +0x2269 004069 rtn +: 004071 context_search_empty: +0x226a 004072 bbit1 state_inconn ,context_search_next +0x226b 004073 bbit1 state_inpage ,context_search_next +0x226c 004074 force 0 ,null +0x226d 004075 rtn +: 004077 context_search_lap: +0x226e 004078 bbit1 state_inpage ,context_search_lap_cont +0x226f 004079 bbit0 state_inconn ,context_search_next +: 004080 context_search_lap_cont: +0x2270 004081 add rega ,coffset_plap ,contr +0x2271 004082 ifetch 6 ,contr +0x2272 004083 isub temp ,null +0x2273 004084 rtn zero +0x2274 004085 branch context_search_next +: 004087 context_search_handle: +0x2275 004088 bbit0 state_inconn ,context_search_next +0x2276 004089 add rega ,coffset_conn_handle ,contr +0x2277 004090 ifetch 1 ,contr +0x2278 004091 isub temp ,null +0x2279 004092 rtn zero +0x227a 004093 branch context_search_next +: 004095 context_search_sniff: +0x227b 004096 bbit0 state_insniff ,context_search_next +: 004097 context_search_sniff_loop: +0x227c 004098 call context_get_anchor +0x227d 004099 call sign_pdata_temp +0x227e 004100 isub temp ,pdata +0x227f 004101 increase 1 ,pdata +0x2280 004102 branch context_search_sniff_miss ,positive +0x2281 004103 copy contr ,regb +0x2282 004104 store 9 ,mem_temp +0x2283 004105 fetch 1 ,mem_le_sc_calc +0x2284 004106 nbranch context_search_sniff_sc ,blank +0x2285 004107 fetch 9 ,mem_temp +0x2286 004108 copy regb ,contr +0x2287 004109 increase 5 ,pdata +0x2288 004110 branch context_search_meet1 +: 004111 context_search_sniff_sc: +0x2289 004112 fetch 9 ,mem_temp +0x228a 004113 copy regb ,contr +0x228b 004114 increase 20 ,pdata +: 004115 context_search_meet1: +0x228c 004116 nbranch context_search_next ,positive +: 004117 context_search_meet: +0x228d 004118 copy temp ,bt_clk +0x228e 004119 call context_next_anchor +0x228f 004120 force 0 ,null +0x2290 004121 rtn +: 004124 context_search_sniff_miss: +0x2291 004125 iforce regb +0x2292 004126 add rega ,coffset_tsniff ,contr +0x2293 004127 ifetch 2 ,contr +0x2294 004128 branch context_search_meet ,blank +0x2295 004129 call context_next_anchor +0x2296 004130 branch context_search_sniff_loop +: 004132 sign_pdata_temp: +0x2297 004133 rshift16 pdata ,timeup +0x2298 004134 rshift8 timeup ,timeup +0x2299 004135 branch sign_pdata_temp_p0 ,zero +0x229a 004136 compare 0xf ,timeup ,0xf +0x229b 004137 nrtn true +0x229c 004138 rshift16 temp ,timeup +0x229d 004139 rshift8 timeup ,timeup +0x229e 004140 nrtn zero +0x229f 004141 set1 28 ,temp +0x22a0 004142 rtn +: 004143 sign_pdata_temp_p0: +0x22a1 004144 rshift16 temp ,timeup +0x22a2 004145 rshift8 timeup ,timeup +0x22a3 004146 compare 0xf ,timeup ,0xf +0x22a4 004147 nrtn true +0x22a5 004148 set1 28 ,pdata +0x22a6 004149 rtn +: 004151 context_check_inconn: +0x22a7 004152 bbit0 state_inconn ,context_search_next +0x22a8 004153 force 0 ,null +0x22a9 004154 rtn +: 004156 context_check_a_wack: +0x22aa 004157 bbit0 state_inconn ,context_search_next +0x22ab 004158 add rega ,coffset_mode ,contr +0x22ac 004159 ifetch 1 ,contr +0x22ad 004160 bbit1 mode_le ,context_search_next +0x22ae 004161 add rega ,coffset_arq ,contr +0x22af 004162 ifetch 1 ,contr +0x22b0 004163 bbit0 wack ,context_search_next +0x22b1 004164 force 0 ,null +0x22b2 004165 rtn +: 004167 context_get_anchor: +0x22b3 004168 add rega ,coffset_mode ,contr +0x22b4 004169 ifetcht 1 ,contr +0x22b5 004170 deposit clkn_bt +0x22b6 004171 isolate1 mode_master ,temp +0x22b7 004172 add rega ,coffset_sniff_anchor ,contr +0x22b8 004173 ifetcht 4 ,contr +0x22b9 004174 rtn true +0x22ba 004175 add rega ,coffset_clk_offset ,contr +0x22bb 004176 ifetch 6 ,contr +0x22bc 004177 call calc_clke2 +0x22bd 004178 deposit clke_bt +0x22be 004179 rtn +: 004181 context_next_anchor: +0x22bf 004182 add rega ,coffset_tsniff ,contr +0x22c0 004183 add rega ,coffset_sniff_anchor ,contw +0x22c1 004184 ifetch 2 ,contr +0x22c2 004185 iadd temp ,timeup +0x22c3 004186 deposit timeup +0x22c4 004187 istore 4 ,contw +0x22c5 004188 branch le_context_nexthop +: 004191 context_search_window: +0x22c6 004192 bbit0 state_insniff ,context_search_next +0x22c7 004193 call context_get_anchor +0x22c8 004194 iadd stop_watch ,pdata +0x22c9 004195 iadd stop_watch ,pdata +0x22ca 004196 iadd queue ,pdata +0x22cb 004197 isub temp ,null +0x22cc 004198 nbranch context_search_next ,positive +0x22cd 004199 force 0 ,null +0x22ce 004200 rtn +: 004202 context_traverse_clearkey: +0x22cf 004203 bbit0 state_inconn ,context_search_next +0x22d0 004204 deposit temp +0x22d1 004205 isub rega ,null +0x22d2 004206 branch context_search_next ,null +0x22d3 004207 add rega ,coffset_mode ,contr +0x22d4 004208 ifetch 1 ,contr +0x22d5 004209 bbit1 mode_le ,context_search_next +0x22d6 004210 ifetch 1 ,rega +0x22d7 004211 set0 state_linkkey ,pdata +0x22d8 004212 istore 1 ,rega +0x22d9 004213 branch context_search_next +: 004216 master_conn_send_packet: +0x22da 004217 bpatch patch05_7 ,mem_patch05 +0x22db 004218 call rf_setup_time_master_slot +: 004219 master_send_packet: +0x22dc 004220 add clkn_bt ,1 ,bt_clk +0x22dd 004221 call fetch_self_bt_adr +0x22de 004222 force 0x03 ,freq_mode +0x22df 004223 call tx_radio_freq +0x22e0 004224 call start_transmitter +0x22e1 004225 call start_tx_native +0x22e2 004226 call send_access_word +0x22e3 004227 branch transmit_packet +: 004229 master_conn_recv_packet: +0x22e4 004230 bpatch patch06_0 ,mem_patch06 +0x22e5 004231 call rf_setup_time_slave_slot +: 004232 master_recv_packet: +0x22e6 004233 add clkn_bt ,1 ,bt_clk +0x22e7 004234 call fetch_self_bt_adr +0x22e8 004235 force 0x03 ,freq_mode +0x22e9 004236 call rx_radio_freq +0x22ea 004237 call init_rx_packet_flags +0x22eb 004238 call prep_crypt +0x22ec 004239 call start_rx_native +0x22ed 004240 call start_receiver +: 004241 master_rx_conn_finish_packet: +0x22ee 004242 call wait_access_clkn_rt +0x22ef 004243 nrtn sync +0x22f0 004244 call save_rssi +0x22f1 004245 branch receive_packet +: 004249 master_newconn_once: +0x22f2 004250 bpatch patch06_1 ,mem_patch06 +0x22f3 004251 fetch 1 ,mem_fhs_am_addr +0x22f4 004252 iforce am_addr +0x22f5 004253 force type_poll ,type +0x22f6 004254 call master_conn_send_packet +0x22f7 004255 branch master_conn_recv_packet +: 004266 inquiry_scan_dispatch: +0x22f8 004267 fetch 1 ,mem_scan_mode +0x22f9 004268 rtnbit0 inq_scan_mode +0x22fa 004269 force iscan_interval_timer ,queue +0x22fb 004270 call timer_check +0x22fc 004271 nrtn blank +0x22fd 004272 fetcht 2 ,mem_iscan_window +0x22fe 004273 force 4 ,queue +0x22ff 004274 call sniff_check_window +0x2300 004275 rtn user +0x2301 004276 call inquiry_scan_start +0x2302 004277 force iscan_interval_timer ,queue +0x2303 004278 fetch 2 ,mem_iscan_interval +0x2304 004279 nbranch timer_init ,sync +0x2305 004280 random pdata +0x2306 004281 iand mask3ff ,pdata +0x2307 004282 branch timer_init +: 004285 inquiry_scan_start: +0x2308 004286 bpatch patch06_2 ,mem_patch06 +0x2309 004287 jam 0 ,mem_fhs_am_addr +0x230a 004288 disable clknt +0x230b 004289 disable attempt +0x230c 004290 call afh_clear +0x230d 004291 and clkn_bt ,0x1fc ,bt_clk +0x230e 004292 force 0x01 ,freq_mode +0x230f 004293 call fetch_giac +0x2310 004294 call rx_radio_freq +0x2311 004295 setflip mark_inquiry_state ,mark +0x2312 004296 fetch 1 ,mem_inquiryscan_waitcnt +0x2313 004297 increase 1 ,pdata +0x2314 004298 store 1 ,mem_inquiryscan_waitcnt +0x2315 004299 call fetch_diac +0x2316 004300 call start_receiver +0x2317 004301 call wait_access_forever +0x2318 004302 nrtn sync +0x2319 004303 bpatch patch06_3 ,mem_patch06 +0x231a 004304 force 0 ,stop_watch +0x231b 004305 call shutdown_radio +0x231c 004306 fetch 1 ,mem_inquiryscan_rcvcnt +0x231d 004307 increase 1 ,pdata +0x231e 004308 store 1 ,mem_inquiryscan_rcvcnt +0x231f 004309 call fetch_giac +0x2320 004310 call rf_setup_time_slave_slot +0x2321 004311 or_into 0x002 ,bt_clk +0x2322 004312 force 0x01 ,freq_mode +0x2323 004313 call tx_radio_freq +0x2324 004314 call fetch_diac +0x2325 004315 call start_transmitter +0x2326 004316 call start_tx_external +0x2327 004317 deposit clkn_bt +0x2328 004318 store 4 ,mem_clkn_bt +0x2329 004319 call send_access_word +0x232a 004320 force type_fhs ,type +0x232b 004321 force 0 ,am_addr +0x232c 004322 call scan_mode_whiten +0x232d 004323 call transmit_packet_whitened +0x232e 004324 call send_eir +0x232f 004325 and_into 0x1fd ,bt_clk +0x2330 004326 increase 1 ,n_tx_slot +0x2331 004327 rtn +: 004329 send_eir: +0x2332 004330 bpatch patch06_4 ,mem_patch06 +0x2333 004331 fetch 1 ,mem_eir_enable +0x2334 004332 rtn blank +0x2335 004333 arg mem_eir ,contw +0x2336 004334 fetch 1 ,mem_local_name_length +0x2337 004335 copy pdata ,loopcnt +0x2338 004336 increase 1 ,pdata +0x2339 004337 istore 1 ,contw +0x233a 004338 copy contw ,temp +0x233b 004339 increase 1 ,pdata +0x233c 004340 store 2 ,mem_tx_len +0x233d 004341 copy temp ,contw +0x233e 004342 setarg 0x09 +0x233f 004343 istore 1 ,contw +0x2340 004344 arg mem_local_name ,contr +0x2341 004345 call memcpy +0x2342 004347 arg mem_all_uuid_128bits ,regc +0x2343 004348 arg 4 ,loopcnt +0x2344 004349 call get_all_uuid +0x2345 004350 arg mem_all_uuid_16bits ,regc +0x2346 004351 arg 1 ,loopcnt +0x2347 004352 call get_all_uuid +0x2348 004354 force type_dm3 ,type +0x2349 004355 jam 2 ,mem_tx_lch +0x234a 004356 setarg mem_eir +0x234b 004357 store 2 ,mem_txptr +0x234c 004358 call rf_setup_time_slave_slot +0x234d 004359 call tx_radio_freq +0x234e 004360 call start_transmitter +0x234f 004361 call start_tx_external +0x2350 004362 call send_access_word +0x2351 004363 call scan_mode_whiten +0x2352 004364 call transmit_packet_whitened +0x2353 004365 rtn +: 004368 get_all_uuid: +0x2354 004369 copy contw ,temp +0x2355 004370 copy regc ,contr +0x2356 004371 ifetch 1 ,contr +0x2357 004372 rtn blank +: 004373 lshift_loop: +0x2358 004374 lshift pdata ,pdata +0x2359 004375 loop lshift_loop +0x235a 004376 copy pdata ,rega +0x235b 004377 increase 2 ,pdata +0x235c 004378 copy pdata ,queue +0x235d 004379 fetch 2 ,mem_tx_len +0x235e 004380 iadd queue ,pdata +0x235f 004381 store 2 ,mem_tx_len +0x2360 004382 copy temp ,contw +0x2361 004383 copy rega ,pdata +0x2362 004384 increase 1 ,pdata +0x2363 004385 istore 1 ,contw +0x2364 004386 copy regc ,contr +0x2365 004387 ifetch 1 ,contr +0x2366 004388 ifetch 1 ,contr +0x2367 004389 istore 1 ,contw +0x2368 004390 copy rega ,loopcnt +0x2369 004391 branch memcpy +: 004397 page_scan_dispatch: +0x236a 004398 fetch 1 ,mem_scan_mode +0x236b 004399 rtnbit0 page_scan_mode +0x236c 004400 force pscan_interval_timer ,queue +0x236d 004401 call timer_check +0x236e 004402 nrtn blank +0x236f 004403 fetcht 2 ,mem_pscan_window +0x2370 004404 force 40 ,queue +0x2371 004405 call sniff_check_window +0x2372 004406 rtn user +0x2373 004407 force 0 ,am_addr +0x2374 004408 jam param_pagerespto ,mem_fhs_wait_counter +0x2375 004409 set0 mark_fhs_already_good ,mark +0x2376 004410 call page_scan_start +0x2377 004411 force pscan_interval_timer ,queue +0x2378 004412 fetch 2 ,mem_pscan_interval +0x2379 004413 branch timer_init +: 004416 page_scan_start: +0x237a 004417 bpatch patch06_5 ,mem_patch06 +0x237b 004418 disable clknt +0x237c 004419 call afh_clear +0x237d 004420 fetch 1 ,mem_pagescan_waitcnt +0x237e 004421 increase 1 ,pdata +0x237f 004422 store 1 ,mem_pagescan_waitcnt +0x2380 004423 force 0 ,n_tx_slot +0x2381 004424 call fetch_self_bt_adr +0x2382 004425 add clkn_bt ,1 ,bt_clk +0x2383 004426 force 0x02 ,freq_mode +0x2384 004427 bpatch patch06_6 ,mem_patch06 +0x2385 004428 call rx_radio_freq +0x2386 004429 call start_receiver +0x2387 004430 call wait_access_forever +0x2388 004431 nrtn sync +0x2389 004432 call shutdown_radio +0x238a 004433 fetch 1 ,mem_pagescan_rcvcnt +0x238b 004434 increase 1 ,pdata +0x238c 004435 store 1 ,mem_pagescan_rcvcnt +0x238d 004436 force 0 ,stop_watch +0x238e 004437 call rf_setup_time_slave_slot +0x238f 004438 or_into 0x002 ,bt_clk +0x2390 004439 force 0x01 ,freq_mode +0x2391 004440 call tx_radio_freq +0x2392 004441 call start_transmitter +0x2393 004442 call start_tx_external +0x2394 004443 call send_access_word +0x2395 004444 call end_of_packet +0x2396 004445 force 0 ,am_addr +0x2397 004446 arg param_rf_setup ,timeup +0x2398 004447 until clke_rt ,meet +0x2399 004448 or_into 0x03 ,clke_bt +0x239a 004449 and_into 0x1fd ,bt_clk +: 004450 page_scan_wait_fhs_restart: +0x239b 004451 bpatch patch06_7 ,mem_patch06 +0x239c 004452 increase 1 ,n_tx_slot +0x239d 004453 call rx_radio_freq +0x239e 004454 call start_receiver +0x239f 004455 call wait_access_mhalfbnd +0x23a0 004456 nbranch page_scan_wait_fhs_again ,sync +0x23a1 004457 call scan_mode_whiten +0x23a2 004458 call receive_packet_whitened +0x23a3 004459 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs +: 004460 page_scan_wait_fhs_again: +0x23a4 004461 bpatch patch07_0 ,mem_patch07 +0x23a5 004462 fetch 1 ,mem_fhs_wait_counter +0x23a6 004463 rtn blank +0x23a7 004464 increase -1 ,pdata +0x23a8 004465 store 1 ,mem_fhs_wait_counter +0x23a9 004466 call rf_setup_time_master_slot +0x23aa 004467 branch page_scan_wait_fhs_restart +: 004470 page_scan_reply_to_fhs: +0x23ab 004471 bpatch patch07_1 ,mem_patch07 +0x23ac 004472 set0 1 ,clke_bt +0x23ad 004473 set1 0 ,clke_bt +0x23ae 004474 fetch 1 ,mem_pagescan_rcvfhscnt +0x23af 004475 increase 1 ,pdata +0x23b0 004476 store 1 ,mem_pagescan_rcvfhscnt +0x23b1 004477 call rf_setup_time_slave_slot +0x23b2 004478 or_into 0x02 ,bt_clk +0x23b3 004479 call tx_radio_freq +0x23b4 004480 call start_transmitter +0x23b5 004481 call start_tx_external +0x23b6 004482 call send_access_word +0x23b7 004483 call end_of_packet +: 004484 slave_apply_clke_bt: +0x23b8 004485 compare 0x03 ,clke_bt ,0x03 +0x23b9 004486 branch slave_apply_clke_bt_now ,true +0x23ba 004487 until null ,mhalfbnd +0x23bb 004488 branch slave_apply_clke_bt +: 004489 slave_apply_clke_bt_now: +0x23bc 004490 fetch 4 ,mem_clke_bt +0x23bd 004491 or_into 0x03 ,pdata +0x23be 004492 icopy clke_bt +: 004494 start_slave_connection: +0x23bf 004495 bpatch patch07_2 ,mem_patch07 +0x23c0 004496 fetch 6 ,extm_lap +0x23c1 004497 store 6 ,mem_plap +0x23c2 004498 call prepare_newconn +: 004499 slave_newconn_loop: +0x23c3 004500 call slave_newconn_once +0x23c4 004501 branch sconn_successful ,match +0x23c5 004502 call new_conn_timeout +0x23c6 004503 nbranch slave_newconn_loop ,blank +0x23c7 004504 rtn +: 004507 sconn_successful: +0x23c8 004508 bpatch patch07_3 ,mem_patch07 +0x23c9 004509 call newconn_init +0x23ca 004510 call context_new +0x23cb 004511 nrtn zero +0x23cc 004512 jam 0 ,mem_mode +0x23cd 004513 call calc_clke_offset +0x23ce 004514 branch context_save +: 004519 slave_dispatch: +0x23cf 004520 bpatch patch07_4 ,mem_patch07 +0x23d0 004521 call calc_clke +0x23d1 004522 call role_switch_slave +0x23d2 004523 rtn user +: 004524 slave_loop: +0x23d3 004525 bpatch patch07_5 ,mem_patch07 +0x23d4 004526 call check_bt_disabled +0x23d5 004527 call scheduler_process +0x23d6 004528 call slave_conn_recv_packet +0x23d7 004529 nbranch slave_notmatch ,match +0x23d8 004530 call supervision_flush +0x23d9 004531 call scheduler_tx_l2cap_pkt +0x23da 004532 call prepare_tx +0x23db 004533 call slave_conn_send_packet +0x23dc 004534 call parse_l2cap +0x23dd 004535 call parse_lmp +0x23de 004536 fetch 1 ,mem_slave_rcvcnt +0x23df 004537 increase 1 ,pdata +0x23e0 004538 store 1 ,mem_slave_rcvcnt +0x23e1 004539 call calc_clke_offset +: 004540 slave_notmatch: +0x23e2 004541 bpatch patch07_6 ,mem_patch07 +0x23e3 004542 call lpm_set_mult +0x23e4 004543 call supervision_update +0x23e5 004544 branch slave_disconnect ,positive +0x23e6 004545 call check_disconnect_timeout +0x23e7 004546 nbranch slave_disconnect ,user +0x23e8 004547 call check_attempt +0x23e9 004548 nbranch slave_loop ,blank +0x23ea 004549 rtn +: 004551 slave_disconnect: +0x23eb 004552 bpatch patch07_7 ,mem_patch07 +0x23ec 004553 jam 0 ,mem_tester_emulate +0x23ed 004554 jam 0 ,mem_debug_config +0x23ee 004555 call quit_connection +0x23ef 004556 set0 mark_testmode ,mark +0x23f0 004557 call test_enable_white +0x23f1 004558 fetch 1 ,mem_state +0x23f2 004559 rtn +: 004562 role_switch_slave: +0x23f3 004563 bpatch patch08_0 ,mem_patch08 +0x23f4 004564 call role_switch_check +0x23f5 004565 nrtn user +0x23f6 004566 copy am_addr ,temp +0x23f7 004567 call get_free_amaddr +0x23f8 004568 store 1 ,mem_fhs_am_addr +0x23f9 004569 copy temp ,am_addr +0x23fa 004570 jam param_newconnto ,mem_newconnto_counter +: 004571 roles_sendfhs_loop: +0x23fb 004572 bpatch patch08_1 ,mem_patch08 +0x23fc 004573 call rf_setup_time_master_slot +0x23fd 004574 force type_fhs ,type +0x23fe 004575 call slave_send_access +0x23ff 004576 deposit clkn_bt +0x2400 004577 store 4 ,mem_clkn_bt +0x2401 004578 call transmit_packet +0x2402 004579 call rf_setup_time_slave_slot +0x2403 004580 enable user3 +0x2404 004581 call slave_receive_access +0x2405 004582 branch roles_got_fhs_reply ,sync +0x2406 004583 call shutdown_radio +0x2407 004584 call new_conn_timeout +0x2408 004585 nbranch roles_sendfhs_loop ,blank +0x2409 004586 rtnmark0 mark_accept_switch +0x240a 004587 jam lmp_slot_offset ,mem_lmo_opcode2 +0x240b 004588 set1 mark_switch_initiated ,mark +0x240c 004589 rtn +: 004590 roles_got_fhs_reply: +0x240d 004591 enable clknt +0x240e 004592 call prepare_newconn +0x240f 004593 call afh_clear +: 004594 roles_newconn_loop: +0x2410 004595 bpatch patch08_2 ,mem_patch08 +0x2411 004596 call master_newconn_once +0x2412 004597 branch roles_newconn_responded ,sync +0x2413 004598 call new_conn_timeout +0x2414 004599 nbranch roles_newconn_loop ,blank +0x2415 004600 disable clknt +0x2416 004601 deposit clke_bt +0x2417 004602 store 4 ,mem_next_btclk +0x2418 004603 rtn +: 004604 roles_newconn_responded: +0x2419 004605 enable master +0x241a 004606 bmark0 mark_accept_switch ,roles_newconn_nolmp +0x241b 004607 set0 mark_accept_switch ,mark +0x241c 004608 jam lmp_accepted ,mem_lmo_opcode2 +0x241d 004609 jam lmp_host_connection_req ,mem_lmi_opcode2 +0x241e 004610 call tid_set_reply +: 004611 roles_newconn_nolmp: +0x241f 004612 deposit am_addr +0x2420 004613 store 1 ,mem_amaddr +0x2421 004614 force 0 ,pdata +0x2422 004615 store 6 ,mem_clk_offset +0x2423 004616 fetch 1 ,mem_mode +0x2424 004617 set1 mode_master ,pdata +0x2425 004618 store 1 ,mem_mode +0x2426 004619 call supervision_flush +0x2427 004620 disable master +0x2428 004621 enable user +0x2429 004622 rtn +: 004626 init_rx_packet_flags: +0x242a 004627 bpatch patch08_3 ,mem_patch08 +0x242b 004628 disable match +0x242c 004629 set0 mark_loopback ,mark +0x242d 004630 set0 mark_am_addr_broadcast ,mark +0x242e 004631 set0 mark_longpacket ,mark +0x242f 004632 set0 mark_old_packet ,mark +0x2430 004633 fetch 1 ,mem_arq +0x2431 004634 set0 arqnx ,pdata +0x2432 004635 set1 flowx ,pdata +0x2433 004636 store 1 ,mem_arq +0x2434 004637 rtn +: 004639 prepare_newconn: +0x2435 004640 bpatch patch08_4 ,mem_patch08 +0x2436 004641 jam param_newconnto ,mem_newconnto_counter +0x2437 004642 jam param_newconn_arq ,mem_arq +0x2438 004643 fetch 2 ,mem_rx_window_init +0x2439 004644 store 2 ,mem_rx_window +0x243a 004645 deposit clkn_bt +0x243b 004646 store 4 ,mem_next_btclk +0x243c 004647 rtn clknt +0x243d 004648 deposit clke_bt +0x243e 004649 store 4 ,mem_next_btclk +0x243f 004650 rtn +: 004652 newconn_init: +0x2440 004653 bpatch patch08_5 ,mem_patch08 +0x2441 004654 call init_lmp_reinit +0x2442 004655 call new_conn_handle +0x2443 004656 store 1 ,mem_conn_handle +0x2444 004657 setarg 0 +0x2445 004658 store 2 ,mem_l2cap_rxbuff1_len +0x2446 004659 setarg param_supervision_to +0x2447 004660 store 2 ,mem_supervision_to +0x2448 004661 fetch 1 ,mem_state +0x2449 004662 set1 state_inconn ,pdata +0x244a 004663 store 1 ,mem_state +0x244b 004664 jam 0 ,mem_op +0x244c 004665 jam 0 ,mem_state_map +0x244d 004666 jam 0 ,mem_lpm_current_mult +0x244e 004667 branch supervision_flush +: 004670 clear_linkkey: +0x244f 004671 bpatch patch08_6 ,mem_patch08 +0x2450 004672 force 0 ,pdata +0x2451 004673 store 8 ,mem_link_key +0x2452 004674 istore 8 ,contw +0x2453 004675 call clear_linkstate +0x2454 004676 branch context_traverse_linkkey +: 004678 new_conn_timeout: +0x2455 004679 fetch 1 ,mem_newconnto_counter +0x2456 004680 increase -1 ,pdata +0x2457 004681 store 1 ,mem_newconnto_counter +0x2458 004682 rtn +: 004684 new_conn_handle: +0x2459 004685 fetch 1 ,mem_handle_num +0x245a 004686 increase 1 ,pdata +0x245b 004687 store 1 ,mem_handle_num +0x245c 004688 rtn +: 004691 quit_connection: +0x245d 004692 bpatch patch08_7 ,mem_patch08 +0x245e 004693 fetch 1 ,mem_hci_cmd +0x245f 004694 beq hci_cmd_remote_name_req ,quit_connection_name +0x2460 004695 fetch 1 ,mem_lmp_to_send +0x2461 004696 bne lmp_name_req ,quit_connection_cont +: 004697 quit_connection_name: +0x2462 004698 call cmd_check_plap +0x2463 004699 nbranch quit_connection_cont ,zero +0x2464 004700 call master_name_error +0x2465 004701 jam 0 ,mem_hci_cmd +: 004702 quit_connection_cont: +0x2466 004703 bpatch patch09_0 ,mem_patch09 +0x2467 004704 call app_disconn_reason_collect_bt +0x2468 004705 call sniff_exit +0x2469 004706 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x246a 004707 call ui_ipc_send_event +0x246b 004708 call init_lmp_work +0x246c 004709 call l2cap_init_work +0x246d 004710 call sp_initialize +0x246e 004711 fetch 1 ,mem_state +0x246f 004712 set0 state_inconn +0x2470 004713 store 1 ,mem_state +0x2471 004714 jam 0 ,memui_reconnect_mode +0x2472 004716 fetch 1 ,mem_state_map +0x2473 004717 compare 0x0 ,pdata ,0xc0 +0x2474 004718 branch quit_connection_not_clear_mark ,true +0x2475 004719 set0 mark_rxbuf_inuse ,mark +: 004720 quit_connection_not_clear_mark: +0x2476 004721 fetch 1 ,mem_arq +0x2477 004722 bbit0 wack ,quit_connection_not_clear_tx +: 004723 quit_connection_not_clear_tx: +0x2478 004724 fetch 1 ,mem_op +0x2479 004725 rtnbit0 op_txl2cap +0x247a 004726 set0 mark_tx_l2cap ,mark +0x247b 004727 rtn +: 004729 slave_newconn_once: +0x247c 004730 bpatch patch09_1 ,mem_patch09 +0x247d 004731 fetch 1 ,extm_newconn_am_addr +0x247e 004732 rtn blank +0x247f 004733 icopy am_addr +0x2480 004734 call slave_conn_recv_packet +0x2481 004735 nrtn match +0x2482 004736 force type_null ,type +0x2483 004737 call slave_conn_send_packet +0x2484 004738 deposit am_addr +0x2485 004739 store 1 ,mem_amaddr +0x2486 004740 force 0 ,pdata +0x2487 004741 store 1 ,extm_newconn_am_addr +0x2488 004742 rtn +: 004748 prepare_tx: +0x2489 004749 bpatch patch09_2 ,mem_patch09 +0x248a 004750 fetch 1 ,mem_state +0x248b 004751 bbit0 state_insco ,prepare_tx_not_sco +0x248c 004752 force type_hv3 ,type +0x248d 004753 bmark0 mark_esco ,prepare_tx_not_esco +0x248e 004754 call check_esco_amaddr +0x248f 004755 nbranch prepare_tx_not_sco ,true +0x2490 004756 branch prepare_tx_not_sco ,attempt +0x2491 004757 call set_wait_ack +0x2492 004758 setarg 2 +0x2493 004759 store 2 ,mem_retransmission_cnt +0x2494 004760 rtn +: 004761 prepare_tx_not_esco: +0x2495 004762 nrtn attempt +: 004763 prepare_tx_not_sco: +0x2496 004764 bpatch patch09_3 ,mem_patch09 +0x2497 004765 call context_check_all_wack +0x2498 004766 nbranch prepare_tx_no_retransmit ,zero +0x2499 004767 fetch 1 ,mem_arq +0x249a 004768 bbit0 wack ,prepare_tx_pollnull +: 004769 prepare_tx_retransmit: +0x249b 004770 bmark1 mark_loopback ,prepare_tx_loopback +0x249c 004771 fetch 1 ,mem_debug_config +0x249d 004772 bbit1 debug_tx_pattern ,prepare_tx_txpat +0x249e 004773 fetch 2 ,mem_retransmission_cnt +0x249f 004774 increase -1 ,pdata +0x24a0 004775 store 2 ,mem_retransmission_cnt +0x24a1 004776 branch prepare_tx_nomore_retransmit ,blank +0x24a2 004777 fetch 1 ,mem_last_type +0x24a3 004778 iforce type +0x24a4 004779 rtn +: 004781 prepare_tx_nomore_retransmit: +0x24a5 004782 bpatch patch09_4 ,mem_patch09 +0x24a6 004783 call clear_got_tx +: 004784 prepare_tx_no_retransmit: +0x24a7 004785 call check_esco_amaddr +0x24a8 004786 branch prepare_tx_pollnull ,true +0x24a9 004787 call send_lmp +0x24aa 004788 branch prepare_tx_sendlmp ,user +0x24ab 004789 fetch 1 ,mem_op +0x24ac 004790 bbit1 op_txl2cap ,prepare_tx_sendl2cap +0x24ad 004791 bmark1 mark_loopback ,prepare_tx_loopback +0x24ae 004792 fetch 1 ,mem_debug_config +0x24af 004793 bbit1 debug_tx_pattern ,prepare_tx_txpat +: 004794 prepare_tx_pollnull: +0x24b0 004795 force type_poll ,type +0x24b1 004796 rtn master +0x24b2 004797 force type_null ,type +0x24b3 004798 rtn +: 004799 prepare_tx_loopback: +0x24b4 004800 bpatch patch09_5 ,mem_patch09 +0x24b5 004801 fetch 1 ,mem_rx_type +0x24b6 004802 iforce type +0x24b7 004803 rtnne 1 +0x24b8 004804 force type_null ,type +0x24b9 004805 rtn +: 004806 prepare_tx_txpat: +0x24ba 004807 fetch 1 ,test_mode_packet_type +0x24bb 004808 and pdata ,0xf ,type +0x24bc 004809 set1 mark_loopback ,mark +0x24bd 004810 rtn +: 004811 prepare_tx_sendlmp: +0x24be 004812 force type_lmp ,type +0x24bf 004813 branch set_wait_ack +: 004814 prepare_tx_sendl2cap: +0x24c0 004815 call tx_l2cap_type +: 004817 set_wait_ack: +0x24c1 004818 bpatch patch09_6 ,mem_patch09 +0x24c2 004819 fetcht 1 ,mem_arq +0x24c3 004820 set1 wack ,temp +0x24c4 004821 storet 1 ,mem_arq +0x24c5 004822 deposit type +0x24c6 004823 store 1 ,mem_last_type +0x24c7 004824 setarg 0xffff +0x24c8 004825 store 2 ,mem_retransmission_cnt +0x24c9 004826 rtn +: 004828 tx_l2cap_type: +0x24ca 004829 bpatch patch09_7 ,mem_patch09 +0x24cb 004830 fetch 1 ,mem_state_map +0x24cc 004831 isolate1 smap_edr ,pdata +0x24cd 004832 fetch 2 ,mem_tx_len +0x24ce 004833 branch tx_l2cap_type_edr ,true +0x24cf 004834 force type_dm1 ,type +0x24d0 004835 sub pdata ,17 ,null +0x24d1 004836 rtn positive +0x24d2 004837 force type_dh1 ,type +0x24d3 004838 sub pdata ,27 ,null +0x24d4 004839 rtn positive +0x24d5 004840 force type_dm3 ,type +0x24d6 004841 sub pdata ,121 ,null +0x24d7 004842 rtn positive +0x24d8 004843 force type_dh3 ,type +0x24d9 004844 sub pdata ,183 ,null +0x24da 004845 rtn positive +0x24db 004846 force type_dm5 ,type +0x24dc 004847 sub pdata ,224 ,null +0x24dd 004848 rtn positive +0x24de 004849 force type_dh5 ,type +0x24df 004850 rtn +: 004851 tx_l2cap_type_edr: +0x24e0 004852 force type_dm1 ,type +0x24e1 004853 sub pdata ,17 ,null +0x24e2 004854 rtn positive +0x24e3 004855 force type_dh1 ,type +0x24e4 004856 sub pdata ,54 ,null +0x24e5 004857 rtn positive +0x24e6 004858 force type_dm3 ,type +0x24e7 004859 arg 367 ,temp +0x24e8 004860 isub temp ,null +0x24e9 004861 nrtn positive +0x24ea 004862 force type_dm5 ,type +0x24eb 004863 arg 679 ,temp +0x24ec 004864 isub temp ,null +0x24ed 004865 nrtn positive +0x24ee 004866 force type_dh5 ,type +0x24ef 004867 rtn +: 004876 slave_receive_master_slot: +0x24f0 004877 fetch 1 ,mem_state +0x24f1 004878 bbit0 state_insniff ,slave_receive_notsniff +0x24f2 004879 fetch 2 ,mem_tsniff +0x24f3 004880 branch slave_receive_notsniff ,blank +0x24f4 004881 nbranch slave_receive_sniff ,attempt +: 004882 slave_receive_notsniff: +0x24f5 004883 call rf_setup_time_master_slot +: 004884 slave_receive_access: +0x24f6 004885 add clke_bt ,1 ,bt_clk +: 004886 slave_receive_sniff: +0x24f7 004887 enable swfine +0x24f8 004888 fetch 2 ,mem_rx_window +0x24f9 004889 rshift pdata ,pdata +0x24fa 004890 arg param_pll_setup ,temp +0x24fb 004891 iadd temp ,pdata +0x24fc 004892 call ahead_window +0x24fd 004893 call fetch_extm_bt_adr +0x24fe 004894 force 0x03 ,freq_mode +0x24ff 004895 call rx_radio_freq +0x2500 004896 call init_rx_packet_flags +0x2501 004897 call prep_crypt +0x2502 004898 bpatch patch0a_0 ,mem_patch0a +0x2503 004899 fetch 2 ,mem_rx_window +0x2504 004900 rshift pdata ,pdata +0x2505 004901 call ahead_window +0x2506 004902 call start_receiver +0x2507 004903 enable decode_fec0 +0x2508 004904 fetch 2 ,mem_rx_window +0x2509 004905 arg param_clke_cal ,temp +0x250a 004906 iadd temp ,stop_watch +0x250b 004907 correlate null ,timeout +0x250c 004908 copy clke ,temp +0x250d 004909 storet 6 ,mem_sync_clke +0x250e 004910 disable decode_fec0 +0x250f 004911 nrtn sync +0x2510 004912 arg param_clke_cal ,clke_rt +0x2511 004913 copy bt_clk ,clke_bt +0x2512 004914 branch lpm_adjust_clk ,wake +0x2513 004915 rtn +: 004918 slave_conn_recv_packet: +0x2514 004919 bpatch patch0a_1 ,mem_patch0a +0x2515 004920 call slave_receive_master_slot +0x2516 004921 nbranch shutdown_radio ,sync +0x2517 004922 call save_rssi +0x2518 004923 bmark0 mark_testmode ,receive_packet +0x2519 004924 fetch 2 ,mem_tst_pktcnt_sync +0x251a 004925 increase 1 ,pdata +0x251b 004926 store 2 ,mem_tst_pktcnt_sync +: 004927 receive_packet: +0x251c 004928 rshift bt_clk ,temp +0x251d 004929 or temp ,0x40 ,white_init +: 004930 receive_packet_whitened: +0x251e 004931 bpatch patch0a_2 ,mem_patch0a +0x251f 004932 enable enable_white +0x2520 004933 enable enable_hec +0x2521 004934 enable decode_fec1 +0x2522 004935 parse demod ,bucket ,3 +0x2523 004936 rshift8 pwindow ,pdata +0x2524 004937 store 1 ,mem_temp_am_addr +0x2525 004938 parse demod ,bucket ,4 +0x2526 004939 inject bucket ,7 +0x2527 004940 copy pwindow ,pdata +0x2528 004941 store 1 ,mem_rx_type +0x2529 004942 parse demod ,bucket ,3 +0x252a 004943 rshift8 pwindow ,pdata +0x252b 004944 store 1 ,mem_temp_arq +0x252c 004945 fetch 1 ,mem_rx_type +0x252d 004946 sub pdata ,3 ,null +0x252e 004947 branch receive_packet_noedr ,positive +0x252f 004948 beq 7 ,receive_packet_noedr +0x2530 004949 fetch 1 ,mem_state_map +0x2531 004950 isolate1 smap_edr ,pdata +0x2532 004951 setflag true ,psk ,radio_ctrl +: 004952 receive_packet_noedr: +0x2533 004953 bpatch patch0a_3 ,mem_patch0a +0x2534 004954 parse demod ,bucket ,8 +0x2535 004955 disable decode_fec1 +0x2536 004956 disable enable_hec +0x2537 004957 branch error_header ,crc_failed +0x2538 004958 bmark0 mark_testmode ,receive_packet_amchk +0x2539 004959 fetch 2 ,mem_tst_pktcnt_hec +0x253a 004960 increase 1 ,pdata +0x253b 004961 store 2 ,mem_tst_pktcnt_hec +: 004962 receive_packet_amchk: +0x253c 004963 bpatch patch0a_4 ,mem_patch0a +0x253d 004964 fetch 1 ,mem_temp_am_addr +0x253e 004965 compare 0 ,pdata ,0x07 +0x253f 004966 setflag true ,mark_am_addr_broadcast ,mark +0x2540 004967 branch am_addr_ok ,true +0x2541 004968 icompare 0x07 ,am_addr +0x2542 004969 branch am_addr_match ,true +0x2543 004970 bmark0 mark_esco ,end_of_packet +0x2544 004971 fetcht 1 ,mem_saved_amaddr +0x2545 004972 icompare 0x7 ,temp +0x2546 004973 nbranch end_of_packet ,true +0x2547 004974 fetch 1 ,mem_arq +0x2548 004975 set0 arqnx ,pdata +0x2549 004976 set1 flowx ,pdata +0x254a 004977 store 1 ,mem_arq +: 004978 am_addr_match: +0x254b 004979 enable match +: 004980 am_addr_ok: +0x254c 004981 bpatch patch0a_5 ,mem_patch0a +0x254d 004982 fetch 1 ,mem_rx_type +0x254e 004983 icopy type +0x254f 004984 bmark1 mark_am_addr_broadcast ,arqn_bypass +0x2550 004985 fetcht 1 ,mem_temp_arq +0x2551 004986 fetch 1 ,mem_arq +0x2552 004987 set0 flow ,pdata +0x2553 004988 isolate1 flow ,temp +0x2554 004989 setflag true ,flow ,pdata +0x2555 004990 isolate1 arqn ,temp +0x2556 004991 setflag true ,arqn ,pdata +0x2557 004992 store 1 ,mem_arq +0x2558 004993 isolate0 arqn ,temp +0x2559 004994 branch arqn_bypass ,true +0x255a 004995 call clear_got_tx +: 004996 arqn_bypass: +0x255b 004997 bpatch patch0a_6 ,mem_patch0a +0x255c 004998 arg 0 ,temp +0x255d 004999 call reserve_slot +0x255e 005000 and type ,0xf ,pdata +0x255f 005001 beq type_poll ,process_poll +0x2560 005002 beq type_null ,end_of_packet +0x2561 005003 beq type_fhs ,process_fhs +0x2562 005004 fetcht 1 ,mem_temp_arq +0x2563 005005 fetch 1 ,mem_arq +0x2564 005006 icompare 0x04 ,temp +0x2565 005007 nbranch rx_type_dispatch ,true +0x2566 005008 bmark0 mark_am_addr_broadcast ,failed_seqn +0x2567 005009 bbit0 bcast1 ,rx_type_dispatch +: 005010 failed_seqn: +0x2568 005011 set1 mark_old_packet ,mark +: 005012 rx_type_dispatch: +0x2569 005013 bpatch patch0a_7 ,mem_patch0a +0x256a 005014 deposit type +0x256b 005015 beq type_dm1 ,process_dm1 +0x256c 005016 beq type_dh1 ,process_dh1 +0x256d 005017 beq type_hv3 ,process_hev +0x256e 005018 beq type_3dh1 ,process_3dh1 +0x256f 005019 arg 4 ,temp +0x2570 005020 call reserve_slot +0x2571 005021 beq type_dm3 ,process_dm3 +0x2572 005022 beq type_dh3 ,process_dh3 +0x2573 005023 arg 8 ,temp +0x2574 005024 call reserve_slot +0x2575 005025 beq type_dm5 ,process_dm5 +0x2576 005026 beq type_dh5 ,process_dh5 +0x2577 005027 rtn +: 005030 process_hev: +0x2578 005031 bpatch patch0b_0 ,mem_patch0b +0x2579 005032 enable decode_fec0 +0x257a 005033 enable enable_crc +0x257b 005034 enable encrypt +0x257c 005035 arg mem_sco_ibuf ,contw +0x257d 005036 force 30 ,loopcnt +: 005037 process_hev_loop: +0x257e 005038 parse demod ,bucket ,8 +0x257f 005039 rshift3 pwindow ,pdata +0x2580 005040 istore 1 ,contw +0x2581 005041 loop process_hev_loop +0x2582 005042 bmark0 mark_esco ,end_of_packet +0x2583 005043 parse demod ,bucket ,16 +0x2584 005044 nsetflag crc_failed ,mark_esco_rxok ,mark +0x2585 005045 branch error_payload ,crc_failed +0x2586 005046 branch ack_payload +: 005049 process_poll: +0x2587 005050 branch end_of_packet +: 005052 process_dm3: +: 005053 process_dm5: +0x2588 005054 set1 mark_longpacket ,mark +: 005055 process_dm1: +0x2589 005056 enable decode_fec2 +0x258a 005057 branch process_dmh +: 005059 process_dh3: +: 005060 process_dh5: +0x258b 005061 set1 mark_longpacket ,mark +: 005062 process_3dh1: +0x258c 005063 set1 psk3m ,radio_ctrl +: 005064 process_dh1: +0x258d 005065 enable decode_fec0 +: 005066 process_dmh: +0x258e 005067 bpatch patch0b_1 ,mem_patch0b +0x258f 005068 bmark1 mark_rxbuf_inuse ,end_of_packet +0x2590 005069 isolate0 psk ,radio_ctrl +0x2591 005070 branch process_dmh_noedr ,true +0x2592 005071 disable enable_white +0x2593 005072 enable decode_fec0 +0x2594 005073 disable decode_fec2 +0x2595 005074 add clkn_bt ,2 ,timeup +0x2596 005075 correlate clkn_bt ,meet +0x2597 005076 nbranch error_payload ,sync +0x2598 005077 set1 mark_longpacket ,mark +0x2599 005078 enable enable_white +: 005079 process_dmh_noedr: +0x259a 005080 bpatch patch0b_2 ,mem_patch0b +0x259b 005081 enable encrypt +0x259c 005082 enable enable_crc +0x259d 005083 parse demod ,bucket ,3 +0x259e 005084 rshift8 pwindow ,pdata +0x259f 005085 store 1 ,mem_lch_code +0x25a0 005086 parse demod ,bucket ,5 +0x25a1 005087 bmark1 mark_longpacket ,process_dmh_long +0x25a2 005088 rshift3 pwindow ,loopcnt +0x25a3 005089 rshift3 loopcnt ,loopcnt +0x25a4 005090 branch process_dmh_common +: 005091 process_dmh_long: +0x25a5 005092 parse demod ,bucket ,5 +0x25a6 005093 rshift pwindow ,loopcnt +0x25a7 005094 parse demod ,bucket ,3 +: 005095 process_dmh_common: +0x25a8 005096 bpatch patch0b_3 ,mem_patch0b +0x25a9 005097 deposit loopcnt +0x25aa 005098 store 2 ,mem_len +0x25ab 005099 branch process_dmh_data_end ,blank +0x25ac 005100 isub mask3ff ,null +0x25ad 005101 branch error_payload ,positive +0x25ae 005102 bpatch patch0b_4 ,mem_patch0b +0x25af 005103 set0 mark_fhs_eir ,mark +0x25b0 005104 fetch 1 ,mem_lch_code +0x25b1 005105 and_into 0x03 ,pdata +0x25b2 005106 arg mem_rxbuf ,contw +0x25b3 005107 beq llid_lmp ,process_lmp +0x25b4 005108 bmark1 mark_testmode ,process_dmh_data +0x25b5 005110 fetch 1 ,mem_lch_code +0x25b6 005111 and_into 0x03 ,pdata +0x25b7 005112 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt +0x25b8 005113 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt +0x25b9 005114 branch error_payload +: 005116 process_lmp: +0x25ba 005117 fetch 2 ,mem_len +0x25bb 005118 sub pdata ,0x70 ,null +0x25bc 005119 nbranch error_payload ,positive +0x25bd 005120 bmark1 mark_old_packet ,ack_payload +0x25be 005121 branch process_dmh_data +: 005124 process_dmh_data_l2cap_start_pkt: +0x25bf 005125 bpatch patch0b_5 ,mem_patch0b +0x25c0 005126 bmark1 mark_old_packet ,ack_payload +0x25c1 005127 fetch 2 ,mem_len +0x25c2 005128 arg 0x2e0 ,temp +0x25c3 005129 isub temp ,null +0x25c4 005130 branch error_payload ,positive +0x25c5 005131 fetch 1 ,mem_l2cap_rxbuff_inuse +0x25c6 005132 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 +0x25c7 005133 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 +0x25c8 005134 branch end_of_packet +: 005135 process_dmh_data_into_buff1: +0x25c9 005136 jam 1 ,mem_l2cap_rxbuff_new +0x25ca 005137 fetch 2 ,mem_l2cap_rxbuff1_len +0x25cb 005138 bne 0 ,end_of_packet +0x25cc 005139 arg mem_l2cap_rxbuff1 ,contw +0x25cd 005140 branch process_dmh_data +: 005141 process_dmh_data_into_buff2: +0x25ce 005142 jam 2 ,mem_l2cap_rxbuff_new +0x25cf 005143 fetch 2 ,mem_l2cap_rxbuff2_len +0x25d0 005144 bne 0 ,end_of_packet +0x25d1 005145 arg mem_l2cap_rxbuff2 ,contw +0x25d2 005146 branch process_dmh_data +: 005148 process_dmh_data_l2cap_continue_pkt: +0x25d3 005149 bpatch patch0b_6 ,mem_patch0b +0x25d4 005150 bmark1 mark_old_packet ,ack_payload +0x25d5 005151 fetch 2 ,mem_len +0x25d6 005152 arg 0x2e0 ,temp +0x25d7 005153 isub temp ,null +0x25d8 005154 branch error_payload ,positive +0x25d9 005155 fetch 1 ,mem_l2cap_rxbuff_new +0x25da 005156 beq 1 ,process_dmh_data_l2cap_continue_pkt1 +0x25db 005157 beq 2 ,process_dmh_data_l2cap_continue_pkt2 +0x25dc 005158 branch end_of_packet +: 005159 process_dmh_data_l2cap_continue_pkt1: +0x25dd 005160 arg mem_l2cap_rxbuff1 ,contw +0x25de 005161 fetch 2 ,mem_l2cap_rxbuff1_len +0x25df 005162 iadd contw ,contw +0x25e0 005163 branch process_dmh_data +: 005164 process_dmh_data_l2cap_continue_pkt2: +0x25e1 005165 arg mem_l2cap_rxbuff2 ,contw +0x25e2 005166 fetch 2 ,mem_l2cap_rxbuff2_len +0x25e3 005167 iadd contw ,contw +: 005168 process_dmh_data: +0x25e4 005169 parse demod ,bucket ,8 +0x25e5 005170 rshift3 pwindow ,pdata +0x25e6 005171 istore 1 ,contw +0x25e7 005172 loop process_dmh_data +: 005173 process_dmh_data_end: +0x25e8 005174 bpatch patch0b_7 ,mem_patch0b +0x25e9 005175 parse demod ,bucket ,16 +0x25ea 005176 branch error_payload_crc ,crc_failed +0x25eb 005177 fetch 1 ,mem_l2cap_flow_ctrl_flag +0x25ec 005178 beq l2cap_flow_ctrl_enable ,end_of_packet +0x25ed 005179 bmark1 mark_testmode ,process_dmh_cont +0x25ee 005180 bmark1 mark_old_packet ,redundant_payload +0x25ef 005181 fetch 1 ,mem_lch_code +0x25f0 005182 compare 3 ,pdata ,3 +0x25f1 005183 branch process_dmh_cont ,true +0x25f2 005184 fetch 2 ,mem_len +0x25f3 005185 branch process_dmh_cont ,blank +0x25f4 005186 bpatch patch0c_0 ,mem_patch0c +0x25f5 005187 fetch 1 ,mem_l2cap_rxbuff_new +0x25f6 005188 beq 1 ,process_l2cap_pass_crc_buff1 +0x25f7 005189 beq 2 ,process_l2cap_pass_crc_buff2 +0x25f8 005190 branch assert +: 005191 process_l2cap_pass_crc_buff1: +0x25f9 005192 fetch 2 ,mem_l2cap_rxbuff1_len +0x25fa 005193 fetcht 2 ,mem_len +0x25fb 005194 iadd temp ,pdata +0x25fc 005195 store 2 ,mem_l2cap_rxbuff1_len +0x25fd 005196 beq 0 ,assert +0x25fe 005197 fetcht 2 ,mem_l2cap_rxbuff1 +0x25ff 005198 increase 4 ,temp +0x2600 005199 isub temp ,null +0x2601 005200 call l2cap_buff1_inuse ,zero +0x2602 005201 branch process_dmh_cont +: 005202 process_l2cap_pass_crc_buff2: +0x2603 005203 fetch 2 ,mem_l2cap_rxbuff2_len +0x2604 005204 fetcht 2 ,mem_len +0x2605 005205 iadd temp ,pdata +0x2606 005206 store 2 ,mem_l2cap_rxbuff2_len +0x2607 005207 beq 0 ,assert +0x2608 005208 fetcht 2 ,mem_l2cap_rxbuff2 +0x2609 005209 add temp ,4 ,temp +0x260a 005210 isub temp ,null +0x260b 005211 call l2cap_buff2_inuse ,zero +0x260c 005212 branch process_dmh_cont +: 005213 process_dmh_cont: +0x260d 005214 bpatch patch0c_1 ,mem_patch0c +0x260e 005215 fetcht 1 ,mem_state_map +0x260f 005216 fetch 1 ,mem_lch_code +0x2610 005217 compare 3 ,pdata ,0x03 +0x2611 005218 setflag true ,smap_rxlmp ,temp +0x2612 005219 nsetflag true ,smap_rxl2cap ,temp +0x2613 005220 storet 1 ,mem_state_map +0x2614 005221 nbranch process_dmh_cont_rxbuf_not_use ,true +0x2615 005222 set1 mark_rxbuf_inuse ,mark +: 005223 process_dmh_cont_rxbuf_not_use: +0x2616 005224 bmark0 mark_testmode ,ack_payload +0x2617 005225 isolate1 smap_rxlmp ,temp +0x2618 005226 branch ack_payload ,true +0x2619 005227 fetch 2 ,mem_tst_pktcnt_crc +0x261a 005228 increase 1 ,pdata +0x261b 005229 store 2 ,mem_tst_pktcnt_crc +0x261c 005230 set1 mark_loopback ,mark +0x261d 005231 set0 smap_rxl2cap ,temp +0x261e 005232 set0 mark_rxbuf_inuse ,mark +0x261f 005233 storet 1 ,mem_state_map +: 005234 ack_payload: +0x2620 005235 bpatch patch0c_2 ,mem_patch0c +0x2621 005236 fetcht 1 ,mem_temp_arq +0x2622 005237 fetch 1 ,mem_arq +0x2623 005238 set1 arqnx ,pdata +0x2624 005239 isolate1 seqn ,temp +0x2625 005240 setflag true ,seqn ,pdata +0x2626 005241 isolate1 mark_am_addr_broadcast ,mark +0x2627 005242 setflag true ,bcast1 ,pdata +0x2628 005243 store 1 ,mem_arq +0x2629 005244 fetch 2 ,mem_len +0x262a 005245 nbranch end_of_packet ,blank +0x262b 005246 fetch 1 ,mem_state_map +0x262c 005247 set0 smap_rxl2cap ,pdata +0x262d 005248 store 1 ,mem_state_map +0x262e 005249 fetch 1 ,mem_lch_code +0x262f 005250 compare 0x01 ,pdata ,0x07 +0x2630 005252 branch end_of_packet +: 005254 error_header: +0x2631 005255 bpatch patch0c_3 ,mem_patch0c +0x2632 005256 disable match +0x2633 005257 fetch 2 ,mem_rx_hec_err +0x2634 005258 increase 1 ,pdata +0x2635 005259 store 2 ,mem_rx_hec_err +0x2636 005260 branch end_of_packet +: 005261 error_payload_crc: +0x2637 005262 fetch 2 ,mem_rx_crc_err +0x2638 005263 increase 1 ,pdata +0x2639 005264 store 2 ,mem_rx_crc_err +0x263a 005265 call discard_pkt +0x263b 005266 bmark0 mark_testmode ,error_payload +0x263c 005267 set1 mark_loopback ,mark +: 005268 error_payload: +0x263d 005269 branch end_of_packet +: 005271 discard_pkt: +0x263e 005272 bpatch patch0c_4 ,mem_patch0c +0x263f 005273 fetch 1 ,mem_lch_code +0x2640 005274 compare 3 ,pdata ,0x03 +0x2641 005275 nbranch discard_pkt_l2cap ,true +: 005276 discard_pkt_lmp: +0x2642 005277 fetcht 1 ,mem_state_map +0x2643 005278 set0 smap_rxlmp ,temp +0x2644 005279 storet 1 ,mem_state_map +0x2645 005280 rtn +: 005281 discard_pkt_l2cap: +0x2646 005284 fetcht 1 ,mem_state_map +0x2647 005285 set0 smap_rxl2cap ,temp +0x2648 005286 storet 1 ,mem_state_map +0x2649 005287 branch h4_send_acl_trigger_clear +: 005289 redundant_payload: +0x264a 005290 fetch 1 ,mem_arq +0x264b 005291 set1 arqnx ,pdata +0x264c 005292 store 1 ,mem_arq +: 005293 end_of_packet: +0x264d 005294 bpatch patch0c_5 ,mem_patch0c +0x264e 005295 disable encode_fec0 +0x264f 005296 disable encode_fec2 +0x2650 005297 disable decode_fec0 +0x2651 005298 disable decode_fec2 +0x2652 005299 disable enable_crc +0x2653 005300 disable encrypt +0x2654 005301 disable enable_white +0x2655 005302 branch shutdown_radio ,is_rx +0x2656 005303 until null ,tx_clear +0x2657 005304 nop 100 +0x2658 005305 branch shutdown_radio +: 005307 process_fhs: +0x2659 005308 bpatch patch0c_6 ,mem_patch0c +0x265a 005309 enable enable_crc +0x265b 005310 enable decode_fec2 +0x265c 005311 parse demod ,bucket ,72 +0x265d 005312 isolate1 58 ,pdata +0x265e 005313 setflag true ,mark_fhs_eir ,mark +0x265f 005314 copy bt_adr ,temp +0x2660 005315 ialigned bt_adr +0x2661 005316 ialigned fhs0 +0x2662 005317 pulse recalc +0x2663 005318 setsect 2 ,0xfffff +0x2664 005319 setsect 3 ,0x0ffff +0x2665 005320 nop 32 +0x2666 005321 iverify fhs_parity +0x2667 005322 deposit lap +0x2668 005323 store 3 ,extm_lap +0x2669 005324 deposit uap +0x266a 005325 store 1 ,extm_uap +0x266b 005326 copy temp ,bt_adr +0x266c 005327 branch fhs_parity_ok ,true +0x266d 005328 branch error_payload +: 005329 fhs_parity_ok: +0x266e 005330 bpatch patch0c_7 ,mem_patch0c +0x266f 005331 parse demod ,bucket ,72 +0x2670 005332 ialigned fhs1 +0x2671 005333 ialigned am_addr +0x2672 005334 ialigned nap +0x2673 005335 ialigned regb +0x2674 005336 force 0 ,pdata +0x2675 005337 parse demod ,bucket ,16 +0x2676 005338 branch error_payload ,crc_failed +0x2677 005339 setarg 0x0ffffffc +0x2678 005340 iand regb ,pdata +0x2679 005341 store 4 ,mem_clke_bt +0x267a 005342 deposit fhs_class +0x267b 005343 store 3 ,extm_class +0x267c 005344 deposit fhs_misc +0x267d 005345 store 1 ,extm_fhs_misc +0x267e 005346 deposit am_addr +0x267f 005347 store 1 ,extm_newconn_am_addr +0x2680 005348 deposit nap +0x2681 005349 store 2 ,extm_nap +0x2682 005350 deposit bt_clk +0x2683 005351 inject rxf ,32 +0x2684 005352 compare type_fhs ,type ,0x0f +0x2685 005353 setflag true ,mark_fhs_already_good ,mark +0x2686 005354 branch end_of_packet +: 005356 clear_got_tx: +0x2687 005357 bpatch patch0d_0 ,mem_patch0d +0x2688 005358 fetch 1 ,mem_arq +0x2689 005359 rtnbit0 wack +0x268a 005360 set0 wack ,pdata +0x268b 005361 setflip seqnx ,pdata +0x268c 005362 store 1 ,mem_arq +0x268d 005363 fetch 1 ,mem_last_type +0x268e 005364 beq type_lmp ,clear_got_txlmp +0x268f 005365 rtneq type_hv3 +0x2690 005366 fetch 1 ,mem_op +0x2691 005367 rtnbit0 op_txl2cap ,pdata +0x2692 005368 set0 op_txl2cap ,pdata +0x2693 005369 set1 op_pkt_comp ,pdata +0x2694 005370 store 1 ,mem_op +0x2695 005371 set0 mark_tx_l2cap ,mark +0x2696 005372 fetch 2 ,mem_l2cap_tx_multi_offset +0x2697 005373 nrtn blank +0x2698 005374 fetch 1 ,mem_op +0x2699 005375 set0 op_pkt_comp ,pdata +0x269a 005376 store 1 ,mem_op +0x269b 005377 branch l2cap_malloc_free +: 005379 clear_got_txlmp: +0x269c 005380 bpatch patch0d_1 ,mem_patch0d +0x269d 005381 fetch 1 ,mem_lmo_header_opcode +0x269e 005382 rshift pdata ,pdata +0x269f 005383 beq lmp_start_encryption_req ,start_encryption +0x26a0 005384 beq lmp_stop_encryption_req ,stop_encryption +0x26a1 005385 beq lmp_unsniff_req ,sniff_exit +0x26a2 005386 beq lmp_escape ,clear_lmp_escape +0x26a3 005387 rtnne lmp_accepted +0x26a4 005388 fetch 1 ,mem_lmo_payload +0x26a5 005389 beq lmp_sco_link_req ,sco_link_req_by_slave +0x26a6 005390 beq lmp_start_encryption_req ,clear_send_setup_complete +0x26a7 005391 rtn +: 005393 clear_lmp_escape: +0x26a8 005394 fetch 1 ,mem_lmo_payload +0x26a9 005395 set1 7 ,pdata +0x26aa 005396 rtn +: 005397 clear_send_setup_complete: +0x26ab 005398 rtn master +0x26ac 005399 fetch 1 ,mem_state +0x26ad 005400 rtnbit1 state_conn_comp +0x26ae 005401 jam lmp_setup_complete ,mem_lmo_opcode2 +0x26af 005402 rtn +: 005405 sco_link_req_by_slave: +0x26b0 005406 rtn master +0x26b1 005407 fetch 1 ,mem_mode +0x26b2 005408 isolate1 send_sco_when_slave ,pdata +0x26b3 005409 branch clean_mem_mode ,true +0x26b4 005411 rtn +: 005412 clean_mem_mode: +0x26b5 005413 set0 send_sco_when_slave ,pdata +0x26b6 005414 store 1 ,mem_mode +0x26b7 005415 rtn +: 005417 start_encryption: +0x26b8 005418 bpatch patch0d_2 ,mem_patch0d +0x26b9 005419 fetch 1 ,mem_state_map +0x26ba 005420 set1 smap_encryption ,pdata +0x26bb 005421 store 1 ,mem_state_map +0x26bc 005422 jam 1 ,core_encrypt +0x26bd 005423 fetch 1 ,mem_state +0x26be 005424 isolate1 state_conn_comp ,pdata +0x26bf 005425 rtn +: 005427 stop_encryption: +0x26c0 005428 bpatch patch0d_3 ,mem_patch0d +0x26c1 005429 fetch 1 ,mem_state_map +0x26c2 005430 set0 smap_encryption ,pdata +0x26c3 005431 store 1 ,mem_state_map +0x26c4 005432 jam 0 ,core_encrypt +0x26c5 005433 rtn +: 005436 sniff_init: +0x26c6 005437 bpatch patch0d_4 ,mem_patch0d +0x26c7 005438 copy clkn_bt ,pdata +0x26c8 005439 store 4 ,mem_lpm_delay_after_sniff +0x26c9 005440 add clkn_bt ,3 ,rega +0x26ca 005441 branch sniff_init_master ,master +0x26cb 005442 add clke_bt ,3 ,rega +: 005443 sniff_init_master: +0x26cc 005444 fetcht 2 ,mem_tsniff +0x26cd 005445 deposit rega +0x26ce 005446 set0 27 ,pdata +0x26cf 005447 idiv temp +0x26d0 005448 fetch 2 ,mem_dsniff +0x26d1 005449 call wait_div_end +0x26d2 005450 remainder regc +0x26d3 005451 isub regc ,pdata +0x26d4 005452 branch sniff_init_nowrap ,positive +0x26d5 005453 iadd temp ,pdata +: 005454 sniff_init_nowrap: +0x26d6 005455 iadd rega ,pdata +0x26d7 005456 store 4 ,mem_sniff_anchor +0x26d8 005457 jam switch_flag_init ,mem_switch_flag +0x26d9 005458 fetch 1 ,mem_state +0x26da 005459 set1 state_insniff ,pdata +0x26db 005460 store 1 ,mem_state +0x26dc 005461 fetch 1 ,mem_sniff_attempt +0x26dd 005462 store 1 ,mem_current_sniff_attempt +0x26de 005463 setarg 0 +0x26df 005464 store 3 ,mem_sniff_rcv +0x26e0 005465 store 3 ,mem_sniff_lost +0x26e1 005466 store 1 ,mem_sniff_unint_lost +0x26e2 005467 jam bt_evt_enter_sniff ,mem_fifo_temp +0x26e3 005468 call ui_ipc_send_event +0x26e4 005469 fetch 2 ,mem_rx_window_sniff +0x26e5 005470 store 2 ,mem_rx_window +0x26e6 005471 nrtn master +0x26e7 005472 add am_addr ,-1 ,queue +0x26e8 005473 rtn +: 005475 sniff_exit: +0x26e9 005476 bpatch patch0d_5 ,mem_patch0d +0x26ea 005477 fetch 1 ,mem_state +0x26eb 005478 rtnbit0 state_insniff +0x26ec 005479 set0 state_insniff ,pdata +0x26ed 005480 store 1 ,mem_state +0x26ee 005481 fetch 2 ,mem_rx_window_init +0x26ef 005482 store 2 ,mem_rx_window +0x26f0 005483 disable wake +0x26f1 005484 jam bt_evt_exit_sniff ,mem_fifo_temp +0x26f2 005485 branch ui_ipc_send_event +: 005488 check_attempt: +0x26f3 005489 bpatch patch0d_6 ,mem_patch0d +0x26f4 005490 enable attempt +0x26f5 005491 fetch 1 ,mem_state +0x26f6 005492 bbit1 state_insniff ,check_attempt_sniff +0x26f7 005493 rtnmark1 mark_testmode +0x26f8 005494 fetch 1 ,mem_arq +0x26f9 005495 rtnbit1 wack +0x26fa 005496 fetch 1 ,mem_lmp_to_send +0x26fb 005497 nrtn blank +0x26fc 005498 fetch 1 ,mem_op +0x26fd 005499 rtnbit1 op_txl2cap +: 005500 check_attempt_nomore: +0x26fe 005501 force 0 ,pdata +0x26ff 005502 rtn +: 005504 check_attempt_sniff: +0x2700 005505 bbit0 state_insco ,check_attempt_not_sco +0x2701 005506 fetch 1 ,mem_current_sniff_attempt +0x2702 005507 beq 2 ,check_attempt_sniff_restore_sco +0x2703 005508 fetch 1 ,mem_arq +0x2704 005509 bbit1 wack ,check_attempt_notimeout +0x2705 005510 bmark0 mark_esco_rxok ,check_attempt_notimeout +: 005511 check_attempt_sniff_restore_sco: +0x2706 005512 nbranch check_attempt_notimeout ,master +0x2707 005513 fetch 1 ,mem_lmp_to_send +0x2708 005514 nbranch check_attempt_notimeout ,blank +: 005515 check_attempt_sco_master: +0x2709 005516 fetch 1 ,mem_sco_poll +0x270a 005517 increase -1 ,pdata +0x270b 005518 store 1 ,mem_sco_poll +0x270c 005519 nbranch check_attempt_nomore ,blank +0x270d 005520 jam param_sco_poll ,mem_sco_poll +0x270e 005521 branch check_attempt_notimeout +: 005528 check_attempt_not_sco: +0x270f 005529 fetch 1 ,mem_current_sniff_attempt +0x2710 005530 bne 1 ,check_attempt_notimeout +0x2711 005531 fetch 1 ,mem_current_sniff_timeout +0x2712 005532 branch check_attempt_notimeout ,blank +0x2713 005533 increase -1 ,pdata +0x2714 005534 store 1 ,mem_current_sniff_timeout +0x2715 005535 fetch 1 ,mem_arq +0x2716 005536 rtnbit1 wack +0x2717 005537 nrtn match +: 005538 check_attempt_notimeout: +0x2718 005539 fetch 1 ,mem_current_sniff_attempt +0x2719 005540 increase -1 ,pdata +0x271a 005541 store 1 ,mem_current_sniff_attempt +0x271b 005542 rtn +: 005553 sniff_check_window: +0x271c 005554 bpatch patch0d_7 ,mem_patch0d +0x271d 005555 disable swfine +0x271e 005556 copy temp ,stop_watch +0x271f 005557 call context_search_sniff_window +0x2720 005558 disable user +0x2721 005559 nrtn zero +0x2722 005560 force 0 ,stop_watch +0x2723 005561 enable user +0x2724 005562 rtn +: 005565 check_esco_amaddr: +0x2725 005566 fetch 1 ,mem_esco_addr +0x2726 005567 icompare 0xff ,am_addr +0x2727 005568 rtn +: 005571 parse_l2cap: +0x2728 005572 bpatch patch0e_0 ,mem_patch0e +0x2729 005573 set0 mark_rxbuf_inuse ,mark +: 005574 parse_l2cap_cont: +0x272a 005575 jam l2cap_rx_clear ,mem_l2cap_rx_done +0x272b 005576 fetch 1 ,mem_l2cap_rxbuff_inuse +0x272c 005577 rtn blank +0x272d 005578 isolate1 l2cap_inuse_buff1 ,pdata +0x272e 005579 arg mem_l2cap_rxbuff1 ,contr +0x272f 005580 call process_rx_l2cap_pkt ,true +0x2730 005581 bpatch patch0e_1 ,mem_patch0e +0x2731 005582 fetch 1 ,mem_l2cap_rx_done +0x2732 005583 beq l2cap_rx_done ,parse_l2cap_release_buff1 +0x2733 005585 jam l2cap_rx_clear ,mem_l2cap_rx_done +0x2734 005586 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2735 005587 rtnbit0 l2cap_inuse_buff2 +0x2736 005588 arg mem_l2cap_rxbuff2 ,contr +0x2737 005589 call process_rx_l2cap_pkt +0x2738 005590 fetch 1 ,mem_l2cap_rx_done +0x2739 005591 beq l2cap_rx_done ,parse_l2cap_release_buff2 +0x273a 005592 rtn +: 005594 parse_l2cap_release_buff1: +0x273b 005595 fetch 1 ,mem_l2cap_rxbuff_inuse +0x273c 005596 set0 l2cap_inuse_buff1 ,pdata +0x273d 005597 store 1 ,mem_l2cap_rxbuff_inuse +0x273e 005598 setarg 0 +0x273f 005599 store 2 ,mem_l2cap_rxbuff1_len +0x2740 005600 rtn +: 005601 parse_l2cap_release_buff2: +0x2741 005602 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2742 005603 set0 l2cap_inuse_buff2 ,pdata +0x2743 005604 store 1 ,mem_l2cap_rxbuff_inuse +0x2744 005605 setarg 0 +0x2745 005606 store 2 ,mem_l2cap_rxbuff2_len +0x2746 005607 rtn +: 005609 l2cap_buff1_inuse: +0x2747 005610 fetch 1 ,mem_l2cap_rxbuff_inuse +0x2748 005611 set1 l2cap_inuse_buff1 ,pdata +0x2749 005612 store 1 ,mem_l2cap_rxbuff_inuse +0x274a 005613 rtn +: 005615 l2cap_buff2_inuse: +0x274b 005616 fetch 1 ,mem_l2cap_rxbuff_inuse +0x274c 005617 set1 l2cap_inuse_buff2 ,pdata +0x274d 005618 store 1 ,mem_l2cap_rxbuff_inuse +0x274e 005619 rtn +: 005625 slave_send_access: +0x274f 005626 bpatch patch0e_2 ,mem_patch0e +0x2750 005627 add clke_bt ,1 ,bt_clk +0x2751 005628 call fetch_extm_bt_adr +0x2752 005629 force 0x03 ,freq_mode +0x2753 005630 call tx_radio_freq +0x2754 005631 call start_transmitter +0x2755 005632 call start_tx_external +0x2756 005633 branch send_access_word +: 005636 slave_conn_send_packet: +0x2757 005637 bpatch patch0e_3 ,mem_patch0e +0x2758 005638 call rf_setup_time_slave_slot +0x2759 005639 deposit clke_bt +0x275a 005640 fetcht 4 ,mem_next_btclk +0x275b 005641 isub temp ,pdata +0x275c 005642 rtnne 1 +0x275d 005643 compare type_null ,type ,0x1f +0x275e 005644 nbranch slave_conn_send_access ,true +0x275f 005645 fetch 1 ,mem_rx_type +0x2760 005646 rtn blank +: 005647 slave_conn_send_access: +0x2761 005648 call slave_send_access +: 005649 transmit_packet: +0x2762 005650 compare type_id ,type ,0x1f +0x2763 005651 branch end_of_packet ,true +0x2764 005652 rshift bt_clk ,temp +0x2765 005653 or temp ,0x40 ,white_init +: 005654 transmit_packet_whitened: +0x2766 005655 bpatch patch0e_4 ,mem_patch0e +0x2767 005656 enable enable_white +0x2768 005657 enable enable_hec +0x2769 005658 enable encode_fec1 +0x276a 005659 set0 mark_longpacket ,mark +0x276b 005660 deposit am_addr +0x276c 005661 inject mod ,3 +0x276d 005662 deposit type +0x276e 005663 inject mod ,4 +0x276f 005664 fetch 1 ,mem_arq +0x2770 005665 inject bucket ,4 +0x2771 005666 inject mod ,3 +0x2772 005667 enable enable_parity +0x2773 005668 inject mod ,8 +0x2774 005669 disable encode_fec1 +0x2775 005670 disable enable_parity +0x2776 005671 disable enable_hec +0x2777 005672 set0 psk3m ,radio_ctrl +0x2778 005673 arg 0 ,temp +0x2779 005674 call reserve_slot +0x277a 005675 bpatch patch0e_5 ,mem_patch0e +0x277b 005676 and type ,0x1f ,pdata +0x277c 005677 beq type_lmp ,transmit_lmp +0x277d 005678 beq type_null ,end_of_packet +0x277e 005679 beq type_poll ,end_of_packet +0x277f 005680 beq type_fhs ,transmit_fhs +0x2780 005681 beq type_dm1 ,transmit_dm1 +0x2781 005682 beq type_dh1 ,transmit_dh1 +0x2782 005683 beq type_hv3 ,transmit_hev +0x2783 005684 beq type_3dh1 ,transmit_3dh1 +0x2784 005685 arg 4 ,temp +0x2785 005686 call reserve_slot +0x2786 005687 beq type_dm3 ,transmit_dm3 +0x2787 005688 beq type_dh3 ,transmit_dh3 +0x2788 005689 arg 8 ,temp +0x2789 005690 call reserve_slot +0x278a 005691 beq type_dh5 ,transmit_dh5 +0x278b 005692 branch transmit_dm5 +: 005695 transmit_hev: +0x278c 005696 bpatch patch0e_6 ,mem_patch0e +0x278d 005697 enable encode_fec0 +0x278e 005698 enable enable_crc +0x278f 005699 enable encrypt +0x2790 005700 force 30 ,loopcnt +0x2791 005701 arg mem_sco_obuf ,contr +: 005702 transmit_ev_loop: +0x2792 005703 ifetch 1 ,contr +0x2793 005704 inject mod ,8 +0x2794 005705 loop transmit_ev_loop +0x2795 005706 bmark1 mark_esco ,transmit_end +0x2796 005707 branch end_of_packet +: 005709 transmit_fhs: +0x2797 005710 bpatch patch0e_7 ,mem_patch0e +0x2798 005711 fetch 1 ,mem_fhs_am_addr +0x2799 005712 icopy am_addr +0x279a 005713 fetch 1 ,mem_fhs_misc +0x279b 005714 icopy fhs_misc +0x279c 005715 fetch 3 ,mem_class +0x279d 005716 icopy fhs_class +0x279e 005717 fetch 2 ,mem_nap +0x279f 005718 icopy nap +0x27a0 005719 enable enable_crc +0x27a1 005720 enable encode_fec2 +0x27a2 005721 copy bt_adr ,rega +0x27a3 005722 call fetch_self_bt_adr +0x27a4 005723 pulse recalc +0x27a5 005724 nop 32 +0x27a6 005725 copy bt_clk ,timeup +0x27a7 005726 fetch 4 ,mem_clkn_bt +0x27a8 005727 icopy bt_clk +0x27a9 005728 preload fhs0 +0x27aa 005729 set1 58 ,pdata +0x27ab 005730 inject mod ,72 +0x27ac 005731 preload fhs1 +0x27ad 005732 inject mod ,72 +0x27ae 005733 copy timeup ,bt_clk +0x27af 005734 copy rega ,bt_adr +0x27b0 005735 enable enable_parity +0x27b1 005736 inject mod ,16 +0x27b2 005737 disable enable_parity +0x27b3 005738 branch end_of_packet +: 005740 transmit_lmp: +0x27b4 005741 bpatch patch0f_0 ,mem_patch0f +0x27b5 005742 enable encrypt +0x27b6 005743 enable enable_crc +0x27b7 005744 enable encode_fec2 +0x27b8 005745 fetch 1 ,mem_lmo_header_length +0x27b9 005746 and pdata ,0x1f8 ,temp +0x27ba 005747 arg mem_lmo_header_length ,contr +0x27bb 005748 increase 8 ,temp +: 005749 transmit_lmp_loop: +0x27bc 005750 add temp ,-72 ,regc +0x27bd 005751 nbranch transmit_lmp_finish ,positive +0x27be 005752 ifetch 9 ,contr +0x27bf 005753 inject mod ,72 +0x27c0 005754 copy regc ,temp +0x27c1 005755 branch transmit_lmp_loop +: 005756 transmit_lmp_finish: +0x27c2 005757 ifetch 9 ,contr +0x27c3 005758 iinject mod ,temp +0x27c4 005759 branch transmit_end +: 005761 transmit_dm1: +0x27c5 005762 enable encode_fec2 +0x27c6 005763 branch transmit_dmh +: 005764 transmit_dm3: +: 005765 transmit_dm5: +0x27c7 005766 enable encode_fec2 +0x27c8 005767 set1 mark_longpacket ,mark +0x27c9 005768 branch transmit_dmh +: 005770 transmit_3dh1: +0x27ca 005771 set1 psk3m ,radio_ctrl +: 005772 transmit_dh1: +0x27cb 005773 enable encode_fec0 +0x27cc 005774 branch transmit_dmh +: 005776 transmit_dh3: +: 005777 transmit_dh5: +0x27cd 005778 set1 psk3m ,radio_ctrl +0x27ce 005779 enable encode_fec0 +0x27cf 005780 set1 mark_longpacket ,mark +: 005782 transmit_dmh: +0x27d0 005783 bpatch patch0f_1 ,mem_patch0f +0x27d1 005784 fetch 1 ,mem_state_map +0x27d2 005785 bbit0 smap_edr ,transmit_noedr +0x27d3 005786 sub type ,3 ,null +0x27d4 005787 branch transmit_noedr ,positive +0x27d5 005788 disable encrypt +0x27d6 005789 disable encode_fec2 +0x27d7 005790 enable encode_fec0 +0x27d8 005791 disable enable_white +0x27d9 005792 set1 psk ,radio_ctrl +0x27da 005793 isolate1 psk3m ,radio_ctrl +0x27db 005794 branch transmit_edr3m ,true +0x27dc 005795 setarg 0xabeee +0x27dd 005796 inject mod ,20 +0x27de 005797 branch transmit_edr_sync_end +: 005798 transmit_edr3m: +0x27df 005799 setarg 0x5faeba +0x27e0 005800 inject mod ,24 +0x27e1 005801 setarg 0x12 +0x27e2 005802 inject mod ,6 +: 005803 transmit_edr_sync_end: +0x27e3 005804 enable enable_white +0x27e4 005805 set1 mark_longpacket ,mark +: 005806 transmit_noedr: +0x27e5 005807 enable encrypt +0x27e6 005808 enable enable_crc +0x27e7 005809 bmark1 mark_loopback ,transmit_loopback +0x27e8 005810 fetch 1 ,mem_tx_lch +0x27e9 005811 inject mod ,3 +0x27ea 005812 fetch 2 ,mem_tx_len +0x27eb 005813 iforce loopcnt +0x27ec 005814 bmark1 mark_longpacket ,transmit_long +0x27ed 005815 inject mod ,5 +0x27ee 005816 branch transmit_stuff +: 005817 transmit_long: +0x27ef 005818 inject mod ,13 +: 005819 transmit_stuff: +0x27f0 005820 deposit loopcnt +0x27f1 005821 branch transmit_end ,blank +0x27f2 005822 fetch 2 ,mem_txptr +0x27f3 005823 iforce contr +: 005824 transmit_stuff_loop: +0x27f4 005825 ifetch 1 ,contr +0x27f5 005826 inject mod ,8 +0x27f6 005827 loop transmit_stuff_loop +: 005830 transmit_end: +0x27f7 005831 enable enable_parity +0x27f8 005832 inject mod ,16 +0x27f9 005833 disable enable_parity +0x27fa 005834 call set_wait_ack +0x27fb 005835 fetch 1 ,mem_state_map +0x27fc 005836 bbit0 smap_edr ,end_of_packet +0x27fd 005837 force 0 ,pdata +0x27fe 005838 inject mod ,6 +0x27ff 005839 branch end_of_packet +: 005842 transmit_loopback: +0x2800 005843 bpatch patch0f_2 ,mem_patch0f +0x2801 005844 bmark1 mark_longpacket ,transmit_loopback_long +: 005845 transmit_loopback_short: +0x2802 005846 fetch 1 ,mem_lch_code +0x2803 005847 inject mod ,3 +0x2804 005848 fetch 1 ,mem_len +0x2805 005849 iforce regc +0x2806 005850 inject mod ,5 +0x2807 005851 branch transmit_loopback_cont +: 005852 transmit_loopback_long: +0x2808 005853 fetch 1 ,mem_lch_code +0x2809 005854 inject mod ,3 +0x280a 005855 fetch 2 ,mem_len +0x280b 005856 iforce regc +0x280c 005857 inject mod ,13 +: 005858 transmit_loopback_cont: +0x280d 005859 arg mem_rxbuf ,contr +: 005860 transmit_loopback_loop: +0x280e 005861 copy regc ,null +0x280f 005862 branch transmit_loopback_end ,zero +0x2810 005863 ifetch 1 ,contr +0x2811 005864 inject mod ,8 +0x2812 005865 increase -1 ,regc +0x2813 005866 branch transmit_loopback_loop +: 005867 transmit_loopback_end: +0x2814 005868 fetch 2 ,mem_tst_pktcnt_dmh +0x2815 005869 increase 1 ,pdata +0x2816 005870 store 2 ,mem_tst_pktcnt_dmh +0x2817 005871 branch transmit_end +: 005874 apply_switch_clke: +0x2818 005875 fetch 4 ,mem_clke_bt +0x2819 005876 add pdata ,7 ,rega +0x281a 005877 fetch 2 ,mem_slot_offset +0x281b 005878 nbranch apply_switch_nozero ,blank +0x281c 005879 increase -3 ,rega +0x281d 005880 branch apply_switch_wait_loop +: 005881 apply_switch_nozero: +0x281e 005882 mul32 pdata ,12 ,pdata +0x281f 005883 hfetcht 2 ,core_halfslot +0x2820 005884 increase 1 ,temp +: 005885 apply_switch_loop: +0x2821 005886 isub temp ,pdata +0x2822 005887 nbranch apply_switch_bt ,positive +0x2823 005888 increase -1 ,rega +0x2824 005889 branch apply_switch_loop +: 005890 apply_switch_bt: +0x2825 005891 sub pdata ,0 ,pdata +: 005892 apply_switch_wait_loop: +0x2826 005893 until null ,oneslot +0x2827 005894 compare 0 ,clkn_bt ,3 +0x2828 005895 nbranch apply_switch_wait_loop ,true +0x2829 005896 iforce clke_rt +0x282a 005897 copy rega ,clke_bt +0x282b 005898 iforce clke_rt +0x282c 005899 rtn +: 005902 calc_slot_offset: +0x282d 005903 bpatch patch0f_3 ,mem_patch0f +0x282e 005904 until null ,halfslot +0x282f 005905 deposit clke +0x2830 005906 iforce contr +0x2831 005907 rshift16 ,pdata ,pdata +0x2832 005908 isub clkn_bt ,loopcnt +0x2833 005909 and_into 3 ,loopcnt +0x2834 005910 nbranch calc_bt_portion ,zero +0x2835 005911 force 0 ,pdata +0x2836 005912 branch calc_skip_bt +: 005913 calc_bt_portion: +0x2837 005914 arg 3750 ,temp +0x2838 005915 force 0 ,pdata +: 005916 calc_slot_offset_loop: +0x2839 005917 iadd temp ,pdata +0x283a 005918 loop calc_slot_offset_loop +: 005919 calc_skip_bt: +0x283b 005920 iadd contr ,pdata +0x283c 005921 div pdata ,12 +0x283d 005922 call wait_div_end +0x283e 005923 quotient pdata +0x283f 005924 store 2 ,mem_slot_offset +0x2840 005925 rtn +: 005927 calc_clke_offset: +0x2841 005928 bpatch patch0f_4 ,mem_patch0f +0x2842 005929 deposit clke +0x2843 005930 copy clkn ,temp +0x2844 005931 isub temp ,null +0x2845 005932 nsetflag positive ,44 ,pdata +0x2846 005933 isub temp ,temp +0x2847 005934 setarg 3750 +0x2848 005935 isolate0 15 ,temp +0x2849 005936 branch calc_clke_pos ,true +0x284a 005937 setarg -61786 +0x284b 005938 iadd temp ,temp +: 005939 calc_clke_pos: +0x284c 005940 storet 6 ,mem_le_clk_offset +0x284d 005941 rtn le +0x284e 005942 storet 6 ,mem_clk_offset +0x284f 005943 rtn +: 005945 calc_clke: +0x2850 005946 disable clknt +0x2851 005947 fetch 6 ,mem_le_clk_offset +0x2852 005948 branch calc_clke2 ,le +0x2853 005949 fetch 6 ,mem_clk_offset +: 005950 calc_clke2: +0x2854 005951 iadd clkn ,alarm +0x2855 005952 increase 10 ,alarm +0x2856 005953 setarg 3750 +0x2857 005954 isub alarm ,pdata +0x2858 005955 isolate0 15 ,pdata +0x2859 005956 branch calc_clke_pos_adj ,true +0x285a 005957 setarg 0xf15a +0x285b 005958 iadd alarm ,alarm +: 005959 calc_clke_pos2: +0x285c 005960 copy alarm ,clke +0x285d 005961 rtn +: 005962 calc_clke_pos_adj: +0x285e 005963 force 0 ,null +0x285f 005964 branch calc_clke_pos2 +: 005971 calc_radio_freq: +0x2860 005972 bpatch patch0f_5 ,mem_patch0f +0x2861 005973 call set_sync_on +0x2862 005974 copy bt_clk ,pdata +0x2863 005975 and_into 0x180 ,pdata +0x2864 005976 compare 3 ,freq_mode ,0x07 +0x2865 005977 nbranch freq_not_connection ,true +0x2866 005978 rshift3 pdata ,pdata +0x2867 005979 iadd freq_index ,pdata +0x2868 005980 branch do_hop_mod_now +: 005981 freq_not_connection: +0x2869 005982 copy freq_index ,pdata +: 005983 do_hop_mod_now: +0x286a 005984 div pdata ,79 +0x286b 005985 pulse recalc +0x286c 005986 call wait_div_end +0x286d 005987 remainder rega +0x286e 005988 add rega ,-40 ,temp +0x286f 005989 branch odd_half ,positive +0x2870 005990 lshift rega ,temp +0x2871 005991 branch freq_result +: 005992 odd_half: +0x2872 005993 lshift temp ,temp +0x2873 005994 increase 1 ,temp +: 005995 freq_result: +0x2874 005996 bpatch patch0f_6 ,mem_patch0f +0x2875 005997 fetch 1 ,mem_mode +0x2876 005998 bbit0 afh_change ,afh_process_con +: 005999 afh_process_0: +0x2877 006000 fetch 4 ,mem_afh_instant +0x2878 006001 isub bt_clk ,null +0x2879 006002 branch afh_process_con ,positive +0x287a 006003 call afh_clear +0x287b 006004 fetch 1 ,mem_afh_new_mod +0x287c 006005 rtn blank +0x287d 006006 fetch 1 ,mem_mode +0x287e 006007 set1 afh_enable ,pdata +0x287f 006008 store 1 ,mem_mode +0x2880 006009 fetch 5 ,mem_afh_map_new +0x2881 006010 store 5 ,mem_afh_map_lo +0x2882 006011 ifetch 5 ,contr +0x2883 006012 store 5 ,mem_afh_map_hi +0x2884 006013 call afh_process_freq_map +: 006014 afh_process_con: +0x2885 006015 fetch 1 ,mem_mode +0x2886 006016 rtnbit0 afh_enable +0x2887 006017 isolate1 1 ,bt_clk +0x2888 006018 branch afh_same_channel ,true +0x2889 006019 rshift3 temp ,rega +0x288a 006020 and temp ,7 ,queue +0x288b 006021 setarg mem_afh_map_lo +0x288c 006022 iadd rega ,rega +0x288d 006023 ifetch 1 ,rega +0x288e 006024 qisolate0 pdata +0x288f 006025 branch afh_process_1 ,true +0x2890 006026 deposit temp +0x2891 006027 branch afh_process_end +: 006028 afh_process_1: +0x2892 006029 fetch 1 ,mem_afh_used +0x2893 006030 iforce regb +0x2894 006031 deposit bt_clk +0x2895 006032 and_into 0x180 ,pdata +0x2896 006033 rshift3 pdata ,pdata +0x2897 006034 iadd freq_index ,pdata +0x2898 006035 idiv regb +0x2899 006036 setarg mem_afh_map +0x289a 006037 call wait_div_end +0x289b 006038 remainder rega +0x289c 006039 iadd rega ,contr +0x289d 006040 ifetch 1 ,contr +: 006041 afh_process_end: +0x289e 006042 store 1 ,mem_afh_index +0x289f 006043 iforce temp +0x28a0 006044 rtn +: 006046 afh_same_channel: +0x28a1 006047 fetch 1 ,mem_afh_index +0x28a2 006048 iforce temp +0x28a3 006049 rtn +: 006051 afh_clear: +0x28a4 006052 fetch 1 ,mem_mode +0x28a5 006053 set0 afh_enable ,pdata +0x28a6 006054 set0 afh_change ,pdata +0x28a7 006055 store 1 ,mem_mode +0x28a8 006056 rtn +: 006062 afh_process_freq_map: +0x28a9 006063 bpatch patch0f_7 ,mem_patch0f +0x28aa 006064 arg mem_afh_map ,contw +0x28ab 006065 force 10 ,loopcnt +0x28ac 006066 call memset0 +0x28ad 006067 arg mem_afh_map ,contw +0x28ae 006068 force 0 ,regc +0x28af 006069 force 2 ,queue +: 006070 process_freq_3: +0x28b0 006071 fetch 5 ,mem_afh_map_lo +0x28b1 006072 iforce temp +0x28b2 006073 compare 2 ,queue ,0xff +0x28b3 006074 branch process_freq_1 ,true +0x28b4 006075 rshift temp ,temp +: 006076 process_freq_1: +0x28b5 006077 isolate0 0 ,temp +0x28b6 006078 branch process_freq_0 ,true +0x28b7 006079 deposit regc +0x28b8 006080 istore 1 ,contw +: 006081 process_freq_0: +0x28b9 006082 rshift2 temp ,temp +0x28ba 006083 increase 2 ,regc +0x28bb 006084 compare 40 ,regc ,0xfe +0x28bc 006085 nbranch process_freq_2 ,true +0x28bd 006086 fetch 5 ,mem_afh_map_hi +0x28be 006087 iforce temp +0x28bf 006088 compare 2 ,queue ,0xff +0x28c0 006089 branch process_freq_2 ,true +0x28c1 006090 rshift temp ,temp +: 006091 process_freq_2: +0x28c2 006092 sub regc ,78 ,null +0x28c3 006093 branch process_freq_1 ,positive +0x28c4 006094 force 1 ,regc +0x28c5 006095 increase -1 ,queue +0x28c6 006096 nbranch process_freq_3 ,zero +0x28c7 006097 arg mem_afh_map ,rega +0x28c8 006098 deposit contw +0x28c9 006099 isub rega ,pdata +0x28ca 006100 store 1 ,mem_afh_used +0x28cb 006101 rtn +: 006103 rx_radio_freq: +0x28cc 006104 bpatch patch10_0 ,mem_patch10 +0x28cd 006105 call calc_radio_freq +0x28ce 006106 fetch 1 ,mem_debug_config +0x28cf 006107 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now +0x28d0 006108 fetcht 1 ,mem_rx_fixed_freq +: 006109 rx_radio_freq_now: +0x28d1 006110 branch set_freq_rx +: 006113 tx_radio_freq: +0x28d2 006114 bpatch patch10_1 ,mem_patch10 +0x28d3 006115 call calc_radio_freq +0x28d4 006116 fetch 1 ,mem_debug_config +0x28d5 006117 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now +0x28d6 006118 fetcht 1 ,mem_tx_fixed_freq +: 006119 tx_radio_freq_now: +0x28d7 006120 branch set_freq_tx +: 006123 fetch_giac: +0x28d8 006124 force 0 ,uap +0x28d9 006125 fetch 3 ,mem_glap +0x28da 006126 iforce lap +0x28db 006127 rtn +: 006129 fetch_page_bt_adr: +0x28dc 006130 bpatch patch10_2 ,mem_patch10 +0x28dd 006131 fetch 1 ,mem_hci_puap +0x28de 006132 icopy uap +0x28df 006133 fetch 3 ,mem_hci_plap +0x28e0 006134 icopy lap +0x28e1 006135 rtn +: 006137 fetch_self_bt_adr: +0x28e2 006138 bpatch patch10_3 ,mem_patch10 +0x28e3 006139 fetch 2 ,mem_nap +0x28e4 006140 icopy nap +0x28e5 006141 fetch 1 ,mem_uap +0x28e6 006142 icopy uap +0x28e7 006143 fetch 3 ,mem_lap +0x28e8 006144 icopy lap +0x28e9 006145 rtn +: 006147 fetch_extm_bt_adr: +0x28ea 006148 bpatch patch10_4 ,mem_patch10 +0x28eb 006149 fetch 2 ,mem_pnap +0x28ec 006150 icopy nap +0x28ed 006151 fetch 1 ,mem_puap +0x28ee 006152 icopy uap +0x28ef 006153 fetch 3 ,mem_plap +0x28f0 006154 icopy lap +0x28f1 006155 rtn +: 006158 fetch_diac: +0x28f2 006159 bmark1 mark_all_diac ,fetch_diac_do +0x28f3 006160 rtnmark0 mark_inquiry_state +0x28f4 006161 rtnmark0 mark_periodical_diac +: 006162 fetch_diac_do: +0x28f5 006163 and_into -256 ,lap +0x28f6 006164 pulse recalc +0x28f7 006165 nop 32 +0x28f8 006166 rtn +: 006169 shutdown_radio: +0x28f9 006170 bpatch patch10_5 ,mem_patch10 +0x28fa 006171 branch shutdown_radio0 ,is_rx +0x28fb 006172 jam 0xd4 ,rf_tx_pa_ib +0x28fc 006173 nop 4 +0x28fd 006174 jam 0xd2 ,rf_tx_pa_ib +0x28fe 006175 nop 4 +0x28ff 006176 jam 0xd1 ,rf_tx_pa_ib +0x2900 006177 nop 4 +0x2901 006178 fetch 1 ,mem_tx_power +0x2902 006179 beq tx_power_0db ,shutdown_radio_0db +0x2903 006180 beq tx_power_3db ,shutdown_radio_3db +0x2904 006181 beq tx_power_5db ,shutdown_radio_5db +0x2905 006182 beq tx_power_f3db ,shutdown_radio_f3db +0x2906 006183 beq tx_power_f5db ,shutdown_radio_f5db +0x2907 006184 beq tx_power_pair ,shutdown_radio_pair +: 006185 shutdown_radio_5db: +: 006186 shutdown_radio_0db: +0x2908 006187 jam 0xd0 ,rf_tx_pa_ib +0x2909 006188 jam 0xe0 ,rf_tx_pa_gc +: 006189 shutdown_radio0: +0x290a 006190 force 0 ,radio_ctrl +0x290b 006191 disable is_rx +0x290c 006192 disable is_tx +0x290d 006193 pulse packet_end +0x290e 006194 jam 0x0 ,rfen_mdm +0x290f 006195 jam 0x0 ,rfen_tx +0x2910 006196 jam 0x0 ,rfen_rx +0x2911 006197 jam 0 ,rfen_sn +0x2912 006198 jam 0x70 ,rfen_msc +0x2913 006199 jam 0x0 ,rfen_adc +0x2914 006200 rtn +: 006202 shutdown_radio_pair: +: 006203 shutdown_radio_f5db: +: 006204 shutdown_radio_f3db: +: 006205 shutdown_radio_3db: +0x2915 006206 jam 0xd0 ,rf_tx_pa_ib +0x2916 006207 jam 0xc0 ,rf_tx_pa_gc +0x2917 006208 branch shutdown_radio0 +: 006210 set_sync_on: +0x2918 006211 bpatch patch10_6 ,mem_patch10 +0x2919 006212 jam 0x0 ,rfen_mdm +0x291a 006213 jam 0x0 ,rfen_tx +0x291b 006214 jam 0x18 ,rfen_rx +0x291c 006215 jam 0xa7 ,rfen_sn +0x291d 006216 jam 0x7f ,rfen_msc +0x291e 006217 rtn +: 006219 set_freq_rx: +0x291f 006220 bpatch patch10_7 ,mem_patch10 +0x2920 006222 storet 1 ,mem_last_freq +0x2921 006223 add temp ,rx_freq_offset ,rega +0x2922 006224 jam 0x07 ,rf_balun_ctrim +0x2923 006225 branch rf_write_freq +: 006226 rf_rx_enable: +0x2924 006227 bpatch patch11_0 ,mem_patch11 +0x2925 006228 jam 0xcf ,rfen_tx +0x2926 006229 nop 10 +0x2927 006230 jam 0xff ,rfen_rx +0x2928 006231 jam 0xaf ,rfen_sn +0x2929 006232 jam 0xff ,rfen_msc +0x292a 006233 nop 10 +0x292b 006234 jam 0xa0 ,rfen_mdm +0x292c 006235 rtn +: 006237 set_freq_tx_offset: +0x292d 006238 fetch 1 ,mem_250k_freq_enable +0x292e 006239 branch set_freq_tx_2m_offset ,blank +: 006240 set_freq_tx_0m_offset: +0x292f 006241 add temp ,2 ,rega +0x2930 006242 rtn +: 006243 set_freq_tx_2m_offset: +0x2931 006244 add temp ,0 ,rega +0x2932 006245 rtn +: 006247 set_freq_tx: +0x2933 006248 bpatch patch11_1 ,mem_patch11 +0x2934 006249 storet 1 ,mem_last_freq +0x2935 006250 call set_freq_tx_offset +0x2936 006251 call rf_write_freq +0x2937 006252 setarg param_pll_setup +0x2938 006253 call sleep +: 006254 txon: +0x2939 006255 jam 0x1 ,rfen_adc +0x293a 006256 jam 0x3c ,rfen_rx +0x293b 006257 jam 0xe0 ,rfen_tx +0x293c 006258 jam 0x12 ,rf_balun_ctrim +0x293d 006259 nop 10 +0x293e 006260 jam 0x01 ,rfen_mdm +0x293f 006261 jam 0x3d ,rfen_mdm +0x2940 006262 nop 10 +0x2941 006263 jam 0xb7 ,rfen_sn +0x2942 006264 nop 10 +0x2943 006265 jam 0x7f ,rfen_mdm +: 006266 txon_power_select: +0x2944 006267 fetch 1 ,mem_tx_power +0x2945 006268 beq tx_power_0db ,set_tx_power_0db +0x2946 006269 beq tx_power_3db ,set_tx_power_3db +0x2947 006270 beq tx_power_5db ,set_tx_power_5db +0x2948 006271 beq tx_power_f3db ,set_tx_power_f3db +0x2949 006272 beq tx_power_f5db ,set_tx_power_f5db +0x294a 006273 beq tx_power_pair ,set_tx_power_pair +: 006274 set_tx_power_0db: +0x294b 006275 jam 0xf0 ,rf_tx_pa_gc +0x294c 006276 call txon_common +0x294d 006277 jam 0xd8 ,rf_tx_pa_ib +0x294e 006278 rtn +: 006280 set_tx_power_3db: +0x294f 006281 jam 0xdf ,rf_tx_pa_gc +0x2950 006282 call txon_common +0x2951 006283 jam 0xdf ,rf_tx_pa_ib +0x2952 006284 rtn +: 006286 set_tx_power_5db: +0x2953 006287 jam 0xff ,rf_tx_pa_gc +0x2954 006288 call txon_common +0x2955 006289 jam 0xdf ,rf_tx_pa_ib +0x2956 006290 rtn +: 006291 set_tx_power_f3db: +0x2957 006292 jam 0xce ,rf_tx_pa_gc +0x2958 006293 call txon_common +0x2959 006294 jam 0xd8 ,rf_tx_pa_ib +0x295a 006295 rtn +: 006297 set_tx_power_f5db: +0x295b 006298 jam 0xcb ,rf_tx_pa_gc +0x295c 006299 call txon_common +0x295d 006300 jam 0xd8 ,rf_tx_pa_ib +0x295e 006301 rtn +: 006303 set_tx_power_pair: +0x295f 006304 jam 0xd0 ,rf_tx_pa_ib +0x2960 006305 jam 0xc0 ,rf_tx_pa_gc +0x2961 006306 jam 0x4c ,0x8957 +0x2962 006307 jam 0x6c ,0x8958 +0x2963 006308 jam 0x50 ,0x8959 +0x2964 006309 rtn +: 006311 txon_common: +0x2965 006312 nop 4 +0x2966 006313 jam 0xd1 ,rf_tx_pa_ib +0x2967 006314 nop 4 +0x2968 006315 jam 0xd2 ,rf_tx_pa_ib +0x2969 006316 nop 4 +0x296a 006317 jam 0xd4 ,rf_tx_pa_ib +0x296b 006318 rtn +: 006321 initialize_radio: +0x296c 006322 jam clksel_rc ,core_clksel +: 006323 initialize_radio_wait: +0x296d 006324 fetch 2 ,mem_rf_init_ptr +0x296e 006325 bbit0 14 ,initialize_radio_wait +0x296f 006326 iforce contr +0x2970 006327 arg 0x8900 ,temp +: 006328 initialize_radio_loop: +0x2971 006329 ifetch 1 ,contr +0x2972 006330 beq 0xff ,initialize_radio_cont +0x2973 006331 ior temp ,contw +0x2974 006332 ifetch 1 ,contr +0x2975 006333 istore 1 ,contw +0x2976 006334 branch initialize_radio_loop +: 006335 initialize_radio_cont: +0x2977 006336 bpatch patch11_2 ,mem_patch11 +0x2978 006337 call lpm_cal_xtal_startup +0x2979 006338 call switchto_dpllclk +0x297a 006340 setarg param_dpll_start_delay +0x297b 006341 iadd clkn_bt ,pdata +0x297c 006342 store 4 ,mem_dpll_clkn +0x297d 006343 set1 reset ,radio_ctrl +0x297e 006344 force 0 ,radio_ctrl +0x297f 006345 ncall do_rccal ,wake +0x2980 006346 branch set_rccal +: 006349 rf_write_freq: +0x2981 006350 bpatch patch11_3 ,mem_patch11 +0x2982 006351 setarg 2400 +0x2983 006352 iadd rega ,temp +0x2984 006353 fetch 1 ,mem_fcomp_mul +0x2985 006354 jam 0x04 ,rf_pll_rstn +0x2986 006355 imul32 temp ,pdata +0x2987 006356 fetcht 1 ,mem_fcomp_div +0x2988 006357 idiv temp +0x2989 006358 call wait_div_end +0x298a 006359 quotient rega +0x298b 006360 remainder pdata +0x298c 006361 lshift16 pdata ,pdata +0x298d 006362 lshift4 pdata ,pdata +0x298e 006363 idiv temp +0x298f 006364 call wait_div_end +0x2990 006365 quotient pdata +0x2991 006366 lshift8 pdata ,pdata +0x2992 006367 lshift pdata ,pdata +0x2993 006368 ior rega ,pdata +0x2994 006369 hstore 4 ,rf_pll_intg +0x2995 006370 jam 0x44 ,rf_pll_rstn +0x2996 006371 jam 0xc4 ,rf_pll_rstn +0x2997 006372 rtn +: 006375 do_rccal: +0x2998 006376 bpatch patch11_4 ,mem_patch11 +0x2999 006377 jam 0x02 ,rfen_adc +0x299a 006378 setarg 250000 +0x299b 006379 call sleep +0x299c 006380 jam 0x7f ,rfen_rx +0x299d 006381 nop 130 +0x299e 006382 jam 0x30 ,rf_rccal_ctrl +0x299f 006383 jam 0xd0 ,rfen_tx +0x29a0 006384 jam 0x70 ,rf_rccal_ctrl +0x29a1 006385 jam 0xf0 ,rf_rccal_ctrl +0x29a2 006386 force 50 ,loopcnt +: 006387 do_rccal_loop: +0x29a3 006388 hfetch 1 ,rf_rccal_result +0x29a4 006389 bbit1 5 ,do_rccal_end +0x29a5 006390 loop do_rccal_loop +: 006391 do_rccal_end: +0x29a6 006392 store 1 ,mem_rf_rccal +0x29a7 006393 jam 0 ,rfen_tx +0x29a8 006394 jam 0 ,rfen_rx +0x29a9 006395 jam 0x00 ,rfen_adc +0x29aa 006396 rtn +: 006398 set_rccal: +0x29ab 006399 bpatch patch11_5 ,mem_patch11 +0x29ac 006400 fetch 1 ,mem_rf_rccal +0x29ad 006401 set1 5 ,pdata +0x29ae 006402 hstore 1 ,rf_rccal_ctrl +0x29af 006403 hfetcht 1 ,rf_bpf_ctrim +0x29b0 006404 and_into 7 ,temp +0x29b1 006405 lshift3 pdata ,pdata +0x29b2 006406 ior temp ,pdata +0x29b3 006407 hstore 1 ,rf_bpf_ctrim +0x29b4 006408 hfetch 1 ,rf_bpf_ib +0x29b5 006409 set0 bpf_rccal ,pdata +0x29b6 006410 hstore 1 ,rf_bpf_ib +0x29b7 006411 hfetch 1 ,rf_adc_rccal +0x29b8 006412 set0 adc_rccal ,pdata +0x29b9 006413 hstore 1 ,rf_adc_rccal +0x29ba 006414 rtn +: 006416 save_rssi: +0x29bb 006417 bpatch patch11_6 ,mem_patch11 +0x29bc 006418 hfetch 2 ,rf_afc_d2a +0x29bd 006419 rshift4 pdata ,pdata +0x29be 006420 rshift3 pdata ,pdata +0x29bf 006421 sub pdata ,0 ,pdata +: 006422 bcd: +0x29c0 006423 and_into 0xff ,pdata +0x29c1 006424 div pdata ,10 +0x29c2 006425 call wait_div_end +0x29c3 006426 quotient pdata +0x29c4 006427 lshift4 pdata ,pdata +0x29c5 006428 remainder temp +0x29c6 006429 ior temp ,pdata +0x29c7 006430 store 1 ,mem_rssi +0x29c8 006431 rtn +: 006434 switchto_dpllclk: +0x29c9 006435 jam clksel_rc ,core_clksel +0x29ca 006436 hfetch 1 ,rf_clkpll_frac + 2 +0x29cb 006437 set0 4 ,pdata +0x29cc 006438 set0 5 ,pdata +0x29cd 006439 hstore 1 ,rf_clkpll_frac + 2 +0x29ce 006440 jam 0x00 ,rfen_ck +0x29cf 006441 jam 0x00 ,rfen_msc +0x29d0 006442 jam 0x70 ,rfen_msc +0x29d1 006443 jam 0xff ,rfen_ck +0x29d2 006444 hfetch 1 ,rf_clkpll_frac + 2 +0x29d3 006445 set1 4 ,pdata +0x29d4 006446 set1 5 ,pdata +0x29d5 006447 hstore 1 ,rf_clkpll_frac + 2 +0x29d6 006448 call init_lpm_ctrl +0x29d7 006449 hfetch 1 ,rf_clkpll_int +0x29d8 006450 set1 7 ,pdata +0x29d9 006451 hstore 1 ,rf_clkpll_int +0x29da 006452 set0 7 ,pdata +0x29db 006453 hstore 1 ,rf_clkpll_int +0x29dc 006454 set1 7 ,pdata +0x29dd 006455 hstore 1 ,rf_clkpll_int +0x29de 006456 jam clksel_dpll ,core_clksel +0x29df 006457 nop 1 +0x29e0 006458 jam clksel_xtal ,core_clksel +0x29e1 006459 hfetch 1 ,rf_clkpll_frac + 2 +0x29e2 006460 and_into 0xcf ,pdata +0x29e3 006461 hstore 1 ,rf_clkpll_frac + 2 +0x29e4 006462 or_into 0x30 ,pdata +0x29e5 006463 hstore 1 ,rf_clkpll_frac + 2 +0x29e6 006464 rtn +: 006467 xtal_fast_wake: +0x29e7 006468 setarg 0xf0f +0x29e8 006469 branch lpm_write_config +: 006471 init_lpm_ctrl: +0x29e9 006472 setarg 0x80f +0x29ea 006473 branch lpm_write_config +: 006477 start_receiver: +0x29eb 006478 bpatch patch11_7 ,mem_patch11 +0x29ec 006479 call rf_rx_enable +0x29ed 006480 disable is_tx +0x29ee 006481 enable is_rx +0x29ef 006482 pulse init_encrypt +0x29f0 006483 rtn +: 006485 prep_crypt: +0x29f1 006486 bpatch patch12_0 ,mem_patch12 +0x29f2 006487 fetch 1 ,mem_state_map +0x29f3 006488 isolate1 smap_encryption ,pdata +0x29f4 006489 setflag true ,0 ,pdata +0x29f5 006490 hstore 1 ,core_encrypt +0x29f6 006491 arg mem_kc ,contr +0x29f7 006492 ifetch 9 ,contr +0x29f8 006493 iforce kc_ls +0x29f9 006494 ifetch 7 ,contr +0x29fa 006495 iforce kc_ms +0x29fb 006496 fetch 1 ,mem_key_size +0x29fc 006497 add pdata ,-1 ,g1l +0x29fd 006498 pulse kc_p_activate +0x29fe 006499 rtn +: 006501 wait_access_end: +0x29ff 006502 deposit clke +0x2a00 006503 store 6 ,mem_sync_clke +0x2a01 006504 disable decode_fec0 +0x2a02 006505 nbranch shutdown_radio ,sync +0x2a03 006506 arg param_clke_cal ,clke_rt +0x2a04 006507 increase 1 ,clke_bt +0x2a05 006508 and_into 0x1fc ,clke_bt +0x2a06 006509 rtn +: 006513 wait_access_mhalfbnd: +0x2a07 006514 enable decode_fec0 +: 006515 wait_access_mhalfbnd_correlate: +0x2a08 006516 correlate null ,mhalfbnd +0x2a09 006517 branch wait_access_end ,sync +0x2a0a 006518 compare 0x02 ,clke_bt ,0x02 +0x2a0b 006519 nbranch wait_access_mhalfbnd_correlate ,true +0x2a0c 006520 branch wait_access_end +: 006522 wait_access_clkn_rt: +0x2a0d 006523 bpatch patch12_1 ,mem_patch12 +0x2a0e 006524 arg param_conn_access ,timeup +0x2a0f 006525 enable decode_fec0 +0x2a10 006526 correlate clkn_rt ,meet +0x2a11 006527 disable decode_fec0 +0x2a12 006528 nbranch shutdown_radio ,sync +0x2a13 006529 rtn +: 006531 wait_access_forever: +0x2a14 006532 bpatch patch12_2 ,mem_patch12 +0x2a15 006533 enable decode_fec0 +0x2a16 006534 correlate null ,timeout +0x2a17 006535 disable decode_fec0 +0x2a18 006536 nbranch shutdown_radio ,sync +0x2a19 006537 arg param_clke_cal ,clke_rt +0x2a1a 006538 and_into 0x1fc ,clke_bt +0x2a1b 006539 rtn +: 006542 reserve_slot: +0x2a1c 006543 bpatch patch12_3 ,mem_patch12 +0x2a1d 006544 iforce rega +0x2a1e 006545 deposit bt_clk +0x2a1f 006546 iadd temp ,timeup +0x2a20 006547 copy timeup ,pdata +0x2a21 006548 store 4 ,mem_next_btclk +0x2a22 006549 deposit rega +0x2a23 006550 rtn +: 006553 ahead_window: +0x2a24 006554 copy pdata ,temp +0x2a25 006555 bpatch patch12_4 ,mem_patch12 +0x2a26 006556 copy temp ,pdata +0x2a27 006557 call clk2bt +0x2a28 006558 lshift16 bt_clk ,pdata +0x2a29 006559 set1 44 ,pdata +0x2a2a 006560 call clk_diff +0x2a2b 006561 set0 44 ,pdata +0x2a2c 006562 call get_clk +0x2a2d 006563 call clk_diff +0x2a2e 006564 rtn user +0x2a2f 006565 call clk2rt +0x2a30 006566 iforce stop_watch +0x2a31 006567 until null ,timeout +0x2a32 006568 rtn +: 006571 setup_clk: +0x2a33 006572 bpatch patch12_5 ,mem_patch12 +0x2a34 006573 branch setup_clkn ,clknt +0x2a35 006574 until clke_rt ,meet +: 006575 skip_setup_clke: +0x2a36 006576 copy clke_bt ,temp +0x2a37 006577 branch setup_clknbt +: 006578 setup_clkn: +0x2a38 006579 branch skip_setup_clkn ,attempt +0x2a39 006580 until clkn_rt ,meet +: 006581 skip_setup_clkn: +0x2a3a 006582 copy clkn_bt ,temp +: 006583 setup_clknbt: +0x2a3b 006584 branch setup_clk11 ,user +0x2a3c 006585 compare 1 ,temp ,3 +0x2a3d 006586 nbranch setup_clk ,true +: 006587 setup_complete: +0x2a3e 006588 bpatch patch12_6 ,mem_patch12 +0x2a3f 006589 fetch 1 ,mem_state +0x2a40 006590 rtnbit0 state_inconn +0x2a41 006591 fetch 4 ,mem_next_btclk +0x2a42 006592 isub temp ,pdata +0x2a43 006593 nrtn positive +0x2a44 006594 sub pdata ,0xff ,null +0x2a45 006595 branch setup_clk ,positive +0x2a46 006596 rtn +: 006597 setup_clk11: +0x2a47 006598 compare 3 ,temp ,3 +0x2a48 006599 nbranch setup_clk ,true +0x2a49 006600 branch setup_complete +: 006602 rf_setup_time: +0x2a4a 006603 bpatch patch12_7 ,mem_patch12 +0x2a4b 006604 arg param_rf_setup ,timeup +0x2a4c 006605 branch setup_clk +: 006607 rf_setup_time_slave_slot: +0x2a4d 006608 disable user +0x2a4e 006609 branch rf_setup_time +: 006611 rf_setup_time_master_slot: +0x2a4f 006612 enable user +0x2a50 006613 branch rf_setup_time +: 006615 start_transmitter: +0x2a51 006616 bpatch patch13_0 ,mem_patch13 +0x2a52 006617 call prep_crypt +0x2a53 006618 disable is_rx +0x2a54 006619 enable is_tx +0x2a55 006620 rtn +: 006624 start_tx_native: +0x2a56 006625 bpatch patch13_1 ,mem_patch13 +0x2a57 006626 arg param_tx_setup ,timeup +0x2a58 006627 until clkn_rt ,meet +0x2a59 006628 pulse init_encrypt +0x2a5a 006629 rtn +: 006631 start_rx_native: +0x2a5b 006632 bpatch patch13_2 ,mem_patch13 +0x2a5c 006633 arg param_rx_setup ,timeup +0x2a5d 006634 until clkn_rt ,meet +0x2a5e 006635 rtn +: 006638 start_tx_external: +0x2a5f 006639 bpatch patch13_3 ,mem_patch13 +0x2a60 006640 arg param_tx_setup ,timeup +0x2a61 006641 until clke_rt ,meet +0x2a62 006642 pulse init_encrypt +0x2a63 006643 rtn +: 006645 send_access_word: +0x2a64 006646 bpatch patch13_4 ,mem_patch13 +0x2a65 006647 preload access +0x2a66 006648 enable encode_fec0 +0x2a67 006649 set1 txgfsk ,radio_ctrl +0x2a68 006650 inject mod ,72 +0x2a69 006651 disable encode_fec0 +0x2a6a 006652 rtn +: 006655 scan_mode_whiten: +0x2a6b 006656 copy xin ,temp +0x2a6c 006657 or_into 0x60 ,temp +0x2a6d 006658 copy temp ,white_init +0x2a6e 006659 rtn +: 006664 get_free_amaddr: +0x2a6f 006665 bpatch patch13_5 ,mem_patch13 +0x2a70 006666 fetch 1 ,mem_current_amaddr +0x2a71 006667 increase 1 ,pdata +0x2a72 006668 bne param_esco_addr ,get_free_amaddr_cont +0x2a73 006669 force 1 ,pdata +: 006670 get_free_amaddr_cont: +0x2a74 006671 store 1 ,mem_current_amaddr +0x2a75 006672 iforce am_addr +0x2a76 006673 rtn +: 006675 get_clk: +0x2a77 006676 copy clkn ,temp +0x2a78 006677 rtn master +0x2a79 006678 copy clke ,temp +0x2a7a 006679 rtn +: 006681 get_clkbt: +0x2a7b 006682 deposit clkn_bt +0x2a7c 006683 rtn master +0x2a7d 006684 deposit clke_bt +0x2a7e 006685 rtn +: 006688 supervision_update: +0x2a7f 006689 bpatch patch13_6 ,mem_patch13 +0x2a80 006690 fetcht 4 ,mem_supervision_timer +0x2a81 006691 call get_clkbt +0x2a82 006692 isub temp ,timeup +0x2a83 006693 deposit timeup +0x2a84 006694 fetcht 2 ,mem_supervision_to +0x2a85 006695 lshift temp ,temp +0x2a86 006696 isub temp ,pdata +0x2a87 006697 rtn +: 006699 supervision_flush: +0x2a88 006700 bpatch patch13_7 ,mem_patch13 +0x2a89 006701 call get_clkbt +0x2a8a 006702 store 4 ,mem_supervision_timer +0x2a8b 006703 rtn +: 006705 assert: +0x2a8c 006706 bpatch patch14_0 ,mem_patch14 +0x2a8d 006707 branch assert +: 006709 loop: +0x2a8e 006710 branch loop +: 006712 sleep: +0x2a8f 006713 rtn blank +0x2a90 006715 rshift pdata ,pdata +0x2a91 006716 increase -3 ,pdata +: 006717 sleep_loop: +0x2a92 006718 increase -1 ,pdata +0x2a93 006719 nbranch sleep_loop ,zero +0x2a94 006720 force 0 ,pdata +0x2a95 006721 rtn +: 006725 init_param: +0x2a96 006727 arg 0x10 ,loopcnt +0x2a97 006728 arg 0 ,contw +0x2a98 006729 call memset0 +0x2a99 006730 arg mem_le_state ,contw +0x2a9a 006731 arg 10 ,loopcnt +0x2a9b 006732 call memset0 +0x2a9c 006733 jam 0 ,mem_sp_calc +0x2a9d 006734 jam 0 ,mem_fifo_temp +0x2a9e 006735 jam 0 ,mem_le_testtype +0x2a9f 006736 jam 0 ,mem_debug_config +0x2aa0 006737 jam 0 ,mem_lmp_conn_state +0x2aa1 006738 bpatch patch14_1 ,mem_patch14 +0x2aa2 006739 jam 0 ,mem_connection_options +0x2aa3 006740 jam 0 ,mem_tester_emulate +0x2aa4 006741 jam 0 ,mem_tester_cnt +0x2aa5 006742 setarg param_glap +0x2aa6 006743 store 3 ,mem_glap +0x2aa7 006744 setarg param_acl_pktlen +0x2aa8 006745 store 2 ,mem_acl_pktlen +0x2aa9 006746 jam param_sco_pktlen ,mem_sco_pktlen +0x2aaa 006747 jam param_acl_pktcnt ,mem_acl_pktcnt +0x2aab 006748 jam param_sco_pktcnt ,mem_sco_pktcnt +0x2aac 006749 setarg param_hci_version +0x2aad 006750 store 3 ,mem_hci_version +0x2aae 006755 jam 0x60 ,mem_fhs_misc +0x2aaf 006756 jam param_max_slot ,mem_max_slot +0x2ab0 006757 jam 0x02 ,mem_fw_ver +0x2ab1 006758 fetch 1 ,mem_ssp_enable +0x2ab2 006759 ncall init_memp ,blank +0x2ab3 006760 fetch 1 ,mem_le_secure_connect_enable +0x2ab4 006761 ncall init_memp_256 ,blank +0x2ab5 006762 bpatch patch14_2 ,mem_patch14 +0x2ab6 006763 rtn wake +0x2ab7 006764 setarg 0 +0x2ab8 006765 store 2 ,mem_tx_len +0x2ab9 006766 rshift clkn_bt ,pdata +0x2aba 006767 store 4 ,mem_last_clkn +0x2abb 006768 rtn +: 006775 lpmstate: +0x2abc 006776 setarg 0xee21 +0x2abd 006777 hstore 2 ,core_clkoff +0x2abe 006778 hfetch 4 ,core_gpio_in +0x2abf 006779 store 4 ,mem_saved_gpio_in +0x2ac0 006780 hfetch 1 ,core_lpm_ldocnt +0x2ac1 006781 store 1 ,mem_wakup_from_power_flag +0x2ac2 006782 bbit0 gpio_latch ,loadcode +0x2ac3 006783 enable wake +0x2ac4 006784 bbit0 cold_wake ,lpmwake +0x2ac5 006785 disable wake +0x2ac6 006786 deposit auxcnt +0x2ac7 006787 nbranch lpmwake ,blank +0x2ac8 006788 hfetch 1 ,core_lpm_ctrl + 3 +0x2ac9 006789 bbit1 reload_code ,lpmwake +0x2aca 006790 arg param_hibernate_clks ,temp +0x2acb 006791 branch lpm_enter_sleep +: 006792 lpmwake: +0x2acc 006793 hfetch 3 ,core_lpm_xtalcnt +0x2acd 006794 hstore 3 ,core_lpm_reg +0x2ace 006795 ifetch 1 ,contr +0x2acf 006796 or_into isogate_mask ,pdata +0x2ad0 006797 istore 1 ,contw +0x2ad1 006798 call lpm_write_ctrl2 +0x2ad2 006799 hfetch 1 ,core_lpm_isogate +0x2ad3 006800 set1 enable_retmem ,pdata +0x2ad4 006801 hstore 1 ,core_lpm_isogate +0x2ad5 006802 call lpm_write_ctrl2 +0x2ad6 006803 call lpm_load_context ,wake +0x2ad7 006804 hfetch 1 ,core_lpm_reg + 2 +0x2ad8 006805 set0 gpio_latch ,pdata +0x2ad9 006806 hstore 1 ,core_lpm_reg + 2 +0x2ada 006807 call lpm_write_ctrl2 +0x2adb 006808 nbranch loadcode ,wake +0x2adc 006809 rtnmark0 mark_otp_encrypt +0x2add 006810 jam lock_otp ,core_misc_ctrl +0x2ade 006811 rtn +: 006813 lpm_load_context: +0x2adf 006814 fetch 1 ,mem_saved_spidctrl +0x2ae0 006815 hstore 1 ,core_spid_ctrl +0x2ae1 006816 fetch 3 ,mem_saved_gsel +0x2ae2 006817 hstore 3 ,core_gpio_sel +0x2ae3 006818 fetch 4 ,mem_saved_gpio + 4 +0x2ae4 006819 hstore 4 ,core_gpio_out0 +0x2ae5 006820 fetch 4 ,mem_saved_gpio +0x2ae6 006821 hstore 4 ,core_gpio_oe0 +0x2ae7 006822 fetch 8 ,mem_saved_gpio + 8 +0x2ae8 006823 hstore 8 ,core_gpio_pu0 +0x2ae9 006824 fetch 8 ,mem_saved_mark +0x2aea 006825 iforce mark +0x2aeb 006826 hfetch 8 ,core_gpio_wakeup_low +0x2aec 006827 store 8 ,mem_gpio_wakeup_low +0x2aed 006828 call load_ucode +0x2aee 006829 rtn +: 006831 lpm_save_context: +0x2aef 006832 deposit mark +0x2af0 006833 store 8 ,mem_saved_mark +0x2af1 006834 hfetch 8 ,core_gpio_oe0 +0x2af2 006835 store 8 ,mem_saved_gpio +0x2af3 006836 ifetch 8 ,contr +0x2af4 006837 istore 8 ,contw +0x2af5 006838 hfetch 3 ,core_gpio_sel +0x2af6 006839 store 3 ,mem_saved_gsel +0x2af7 006840 hfetch 1 ,core_spid_ctrl +0x2af8 006841 store 1 ,mem_saved_spidctrl +0x2af9 006842 branch lpm_write_gpio_wakeup +: 006844 lpo_calibration: +0x2afa 006845 hfetch 1 ,core_bist_ctrl +0x2afb 006846 nbranch lpo_cal_inited ,blank +0x2afc 006847 fetch 3 ,mem_clks_per_lpo +0x2afd 006848 nrtn blank +0x2afe 006849 jam 0xc0 ,core_bist_ctrl +0x2aff 006850 jam ccnt_start ,core_misc_ctrl +: 006851 lpo_cal_inited: +0x2b00 006852 hfetch 1 ,core_perf_status +0x2b01 006853 rtnbit0 1 +0x2b02 006854 hfetch 3 ,core_clk_counter +0x2b03 006855 store 3 ,mem_clks_per_lpo +0x2b04 006856 rtn +: 006860 lpm_adjust_clk: +0x2b05 006861 bpatch patch14_3 ,mem_patch14 +0x2b06 006862 deposit clke +0x2b07 006863 call clk_diff_rt +0x2b08 006864 fetcht 4 ,mem_sleep_counter_all +0x2b09 006865 sub temp ,0xff ,null +0x2b0a 006866 rtn positive +0x2b0b 006867 lshift8 pdata ,pdata +0x2b0c 006868 lshift4 pdata ,pdata +0x2b0d 006869 idiv temp +0x2b0e 006870 call wait_div_end +0x2b0f 006871 quotient pdata +0x2b10 006872 arg param_lpm_adjmax ,temp +0x2b11 006873 call ceiling +0x2b12 006874 store 1 ,mem_lpm_adjust +0x2b13 006875 nbranch lpm_adjust_positive ,user +0x2b14 006876 sub pdata ,0 ,pdata +: 006877 lpm_adjust_positive: +0x2b15 006878 fetcht 3 ,mem_clks_per_lpo +0x2b16 006879 iadd temp ,pdata +0x2b17 006880 store 3 ,mem_clks_per_lpo +: 006881 lpm_clear_counter: +0x2b18 006882 setarg 0 +0x2b19 006883 store 4 ,mem_sleep_counter_all +0x2b1a 006884 rtn +: 006888 lpm_doze: +0x2b1b 006889 fetch 1 ,mem_lpm_config + 2 +0x2b1c 006890 set1 reload_code ,pdata +0x2b1d 006891 store 1 ,mem_lpm_config + 2 +0x2b1e 006892 branch lpm_hibernate_normal +: 006896 lpm_hibernate: +0x2b1f 006897 arg param_hibernate_clks ,temp +0x2b20 006898 fetch 1 ,mem_lpm_config + 1 +0x2b21 006899 set0 7 ,pdata +0x2b22 006900 store 1 ,mem_lpm_config + 1 +: 006901 lpm_hibernate_normal: +0x2b23 006902 bpatch patch14_4 ,mem_patch14 +0x2b24 006903 call lpm_write_gpio_wakeup +0x2b25 006904 fetch 1 ,mem_lpm_hibernate_switch +0x2b26 006905 store 1 ,mem_lpm_xtalcnt + 4 +0x2b27 006906 fetch 1 ,mem_lpm_xtalcnt + 2 +0x2b28 006907 set1 cold_wake ,pdata +0x2b29 006908 store 1 ,mem_lpm_xtalcnt + 2 +: 006911 lpm_sleep: +0x2b2a 006912 bpatch patch14_5 ,mem_patch14 +0x2b2b 006913 call xtal_fast_wake +0x2b2c 006914 fetch 4 ,mem_sleep_counter_all +0x2b2d 006915 iadd temp ,pdata +0x2b2e 006916 store 4 ,mem_sleep_counter_all +0x2b2f 006917 call lpm_save_context +0x2b30 006918 fetch 5 ,mem_lpm_xtalcnt +0x2b31 006919 hstore 4 ,core_lpm_reg +0x2b32 006920 rshift32 pdata ,rega +0x2b33 006921 until null ,lpo_edge +0x2b34 006922 deposit clkn +0x2b35 006923 store 6 ,mem_sleep_clkn +0x2b36 006924 jam lpmreg_sel_ctrl2 ,core_lpm_wr +0x2b37 006925 until null ,lpo_edge +0x2b38 006926 until null ,lpo_edge +0x2b39 006927 deposit rega +0x2b3a 006928 hstore 1 ,core_lpm_isogate +0x2b3b 006929 jam lpmreg_sel_ctrl2 ,core_lpm_wr +: 006930 lpm_enter_sleep: +0x2b3c 006931 until null ,lpo_edge +0x2b3d 006932 until null ,lpo_edge +0x2b3e 006933 hstoret 4 ,core_lpm_reg +0x2b3f 006934 jam lpmreg_sel_counter ,core_lpm_wr +0x2b40 006935 until null ,never +: 006940 lpm_recover_clk: +0x2b41 006941 bpatch patch14_6 ,mem_patch14 +0x2b42 006942 setarg 0 +0x2b43 006943 copy auxcnt ,null +0x2b44 006944 branch lpm_recover_timeout ,zero +0x2b45 006945 hfetch 1 ,core_lpm_xtalcnt +0x2b46 006946 hfetcht 1 ,core_lpm_buckcnt +0x2b47 006947 isub temp ,null +0x2b48 006948 branch lpm_recover_xtal ,positive +0x2b49 006949 deposit temp +: 006950 lpm_recover_xtal: +0x2b4a 006951 isub auxcnt ,pdata +0x2b4b 006952 increase 1 ,pdata +: 006953 lpm_recover_timeout: +0x2b4c 006954 increase 8 ,pdata +0x2b4d 006955 until null ,lpo_edge +0x2b4e 006956 iadd lpo_time ,pdata +0x2b4f 006957 fetcht 4 ,mem_sleep_counter +0x2b50 006958 iadd temp ,pdata +0x2b51 006959 fetcht 3 ,mem_clks_per_lpo +0x2b52 006960 imul32 temp ,pdata +0x2b53 006961 rshift8 pdata ,pdata +0x2b54 006962 rshift4 pdata ,pdata +0x2b55 006963 increase param_lpm_fix ,pdata +0x2b56 006964 arg 3750 ,temp +0x2b57 006965 idiv temp +0x2b58 006966 call wait_div_end +0x2b59 006967 quotient pdata +0x2b5a 006968 lshift16 pdata ,pdata +0x2b5b 006969 remainder temp +0x2b5c 006970 ior temp ,pdata +0x2b5d 006971 fetcht 6 ,mem_sleep_clkn +0x2b5e 006972 call clk_add +0x2b5f 006973 copy temp ,clkn +0x2b60 006974 fetch 6 ,mem_context + coffset_clk_offset +0x2b61 006975 call calc_clke2 +0x2b62 006976 deposit clke +0x2b63 006977 store 6 ,mem_pdatatemp +0x2b64 006978 deposit auxcnt +0x2b65 006979 istore 1 ,contw +0x2b66 006980 hfetch 1 ,core_gpio_in1 +0x2b67 006981 or_into 0xf0 ,pdata +0x2b68 006982 istore 1 ,contw +0x2b69 006983 rtn +: 006985 lpm_dispatch: +0x2b6a 006986 bpatch patch14_7 ,mem_patch14 +0x2b6b 006987 call lpo_calibration +0x2b6c 006988 fetch 3 ,mem_clks_per_lpo +0x2b6d 006989 rtn blank +0x2b6e 006990 fetch 1 ,mem_lpm_mode +0x2b6f 006991 rtn blank +0x2b70 006992 fetch 1 ,mem_ssp_enable +0x2b71 006993 branch lpm_dispatch_next ,blank +0x2b72 006994 fetch 1 ,mem_sp_local_key_invalid +0x2b73 006995 rtn blank +: 006996 lpm_dispatch_next: +0x2b74 006997 fetch 1 ,mem_le_sc_calc +0x2b75 006998 nrtn blank +0x2b76 006999 call lpm_check_wake_lock +0x2b77 007000 nrtn blank +0x2b78 007001 fetch 1 ,mem_context +0x2b79 007002 compare 3 ,pdata ,0x7 +0x2b7a 007003 nbranch lpm_dispatch_unconn ,true +0x2b7b 007004 fetch 2 ,mem_context + coffset_tsniff +0x2b7c 007005 rtn blank +0x2b7d 007006 rtn wake +0x2b7e 007007 bpatch patch15_0 ,mem_patch15 +: 007008 lpm_dispatch_next2: +0x2b7f 007009 fetcht 1 ,mem_lpm_current_mult +0x2b80 007010 fetch 2 ,mem_context + coffset_tsniff +0x2b81 007011 imul32 temp ,pdata +0x2b82 007012 rshift4 temp ,temp +0x2b83 007013 rshift2 temp ,temp +0x2b84 007014 isub temp ,pdata +0x2b85 007015 fetcht 4 ,mem_context + coffset_sniff_anchor +0x2b86 007016 iadd temp ,pdata +0x2b87 007017 fetcht 1 ,mem_lpm_overhead +0x2b88 007018 isub temp ,pdata +0x2b89 007019 lshift16 pdata ,alarm +0x2b8a 007020 bpatch patch15_1 ,mem_patch15 +0x2b8b 007021 fetch 2 ,mem_context + coffset_rx_window +0x2b8c 007022 rshift pdata ,pdata +0x2b8d 007023 call clk2bt +0x2b8e 007024 deposit alarm +0x2b8f 007025 call clk_diff +0x2b90 007026 copy clke ,temp +0x2b91 007027 call clk_diff_rt +0x2b92 007028 rtn user +: 007029 lpm_dispatch_sleep: +0x2b93 007030 call clk2lpo +: 007031 lpm_dispatch_lpo: +0x2b94 007032 bpatch patch15_2 ,mem_patch15 +0x2b95 007033 fetch 1 ,mem_lpm_xtalcnt +0x2b96 007034 isub temp ,null +0x2b97 007035 branch lpm_clear_counter ,positive +0x2b98 007036 storet 4 ,mem_sleep_counter +0x2b99 007037 call app_will_enter_lpm +0x2b9a 007038 call l2cap_lpm_save_txbuf +0x2b9b 007039 fetcht 4 ,mem_sleep_counter +0x2b9c 007040 branch lpm_sleep +: 007042 lpm_dispatch_unconn: +0x2b9d 007043 bpatch patch15_3 ,mem_patch15 +0x2b9e 007044 fetch 1 ,mem_context +0x2b9f 007045 rtnbit1 state_inconn +0x2ba0 007046 rtnbit1 state_inpage +0x2ba1 007047 fetch 1 ,mem_ssp_enable +0x2ba2 007048 branch lpm_unconn_nossp ,blank +0x2ba3 007049 fetch 1 ,mem_sp_local_key_invalid +0x2ba4 007050 rtn blank +: 007051 lpm_unconn_nossp: +0x2ba5 007052 bpatch patch15_4 ,mem_patch15 +0x2ba6 007053 fetch 1 ,mem_le_adv_enable +0x2ba7 007054 nbranch lpm_unconn_cont ,blank +0x2ba8 007055 fetch 1 ,mem_scan_mode +0x2ba9 007056 rtn blank +: 007057 lpm_unconn_cont: +0x2baa 007058 fetch 2 ,mem_lpm_interval +0x2bab 007059 rtn blank +: 007060 lpm_sleep_btclk: +0x2bac 007061 fetcht 1 ,mem_lpm_overhead +0x2bad 007062 isub temp ,pdata +0x2bae 007063 arg 7500 ,temp +0x2baf 007064 imul32 temp ,pdata +0x2bb0 007065 branch lpm_dispatch_sleep +: 007067 lpm_set_mult: +0x2bb1 007068 bpatch patch15_5 ,mem_patch15 +0x2bb2 007069 disable wake +0x2bb3 007070 fetch 1 ,mem_state +0x2bb4 007071 rtnbit0 state_insniff +0x2bb5 007072 nbranch lpm_not_match ,match +0x2bb6 007073 call lpm_match +0x2bb7 007074 fetch 2 ,mem_rx_window_sniff +0x2bb8 007075 store 2 ,mem_rx_window +0x2bb9 007076 fetch 1 ,mem_arq +0x2bba 007077 bbit1 wack ,lpm_mult_short +0x2bbb 007078 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x2bbc 007079 call l2cap_malloc_is_fifo_empty +0x2bbd 007080 nbranch lpm_mult_short ,blank +0x2bbe 007081 fetch 1 ,mem_classic_bt_flag +0x2bbf 007082 bbit1 short_mult_flag ,lpm_mult_short +: 007083 lpm_mult_wait_timeout: +0x2bc0 007084 jam 0 ,mem_lpm_current_mult +0x2bc1 007085 bmark0 mark_lpm_mult_enable ,lpm_mult_short +0x2bc2 007086 fetch 1 ,mem_lpm_mult_cnt +0x2bc3 007087 branch lpm_mult_long ,blank +0x2bc4 007088 increase -1 ,pdata +0x2bc5 007089 store 1 ,mem_lpm_mult_cnt +0x2bc6 007090 rtn +: 007093 classic_bt_set_mult_short_flag: +0x2bc7 007094 arg short_mult_flag ,queue +0x2bc8 007095 branch classic_bluetooth_set_flag +: 007097 classic_bt_clr_mult_short_flag: +0x2bc9 007098 arg short_mult_flag ,queue +0x2bca 007099 branch classic_bluetooth_clr_flag +: 007103 lpm_match: +0x2bcb 007104 jam 0 ,mem_sniff_unint_lost +0x2bcc 007105 fetch 3 ,mem_sniff_rcv +0x2bcd 007106 increase 1 ,pdata +0x2bce 007107 store 3 ,mem_sniff_rcv +0x2bcf 007108 rtn +: 007110 lpm_not_match: +0x2bd0 007111 bpatch patch15_6 ,mem_patch15 +0x2bd1 007112 fetcht 2 ,mem_rx_window_sniff +0x2bd2 007113 rshift temp ,temp +0x2bd3 007114 fetch 2 ,mem_rx_window +0x2bd4 007115 iadd temp ,pdata +0x2bd5 007116 store 2 ,mem_rx_window +: 007117 lpm_lost: +0x2bd6 007118 jam 0 ,mem_lpm_current_mult +0x2bd7 007119 fetch 3 ,mem_sniff_lost +0x2bd8 007120 increase 1 ,pdata +0x2bd9 007121 store 3 ,mem_sniff_lost +0x2bda 007122 fetch 1 ,mem_sniff_unint_lost +0x2bdb 007123 increase 1 ,pdata +0x2bdc 007124 store 1 ,mem_sniff_unint_lost +0x2bdd 007125 rtn +: 007127 lpm_mult_short: +0x2bde 007128 jam 0 ,mem_lpm_current_mult +0x2bdf 007129 fetch 1 ,mem_lpm_mult_timeout +0x2be0 007130 store 1 ,mem_lpm_mult_cnt +0x2be1 007131 rtn +: 007133 lpm_mult_long: +0x2be2 007134 fetcht 1 ,mem_lpm_mult +0x2be3 007135 storet 1 ,mem_lpm_current_mult +0x2be4 007136 rtn +: 007138 lpm_cal_xtal_startup: +0x2be5 007139 bpatch patch15_7 ,mem_patch15 +0x2be6 007140 fetch 1 ,mem_lpm_xtalcnt +0x2be7 007141 nrtn blank +0x2be8 007142 jam clksel_rc ,core_clksel +0x2be9 007143 setarg 0xf0c +0x2bea 007144 call lpm_write_config +0x2beb 007145 setarg 200000 +0x2bec 007146 call sleep +0x2bed 007147 until null ,lpo_edge +0x2bee 007148 copy lpo_time ,alarm +0x2bef 007149 call xtal_fast_wake +0x2bf0 007150 jam clksel_xtal ,core_clksel +0x2bf1 007151 nop 10 +0x2bf2 007152 until null ,lpo_edge +0x2bf3 007153 deposit lpo_time +0x2bf4 007154 isub alarm ,pdata +0x2bf5 007155 increase 0x30 ,pdata +0x2bf6 007156 arg 0xff ,temp +0x2bf7 007157 call ceiling +0x2bf8 007158 store 1 ,mem_lpm_xtalcnt +0x2bf9 007159 nop 30000 +0x2bfa 007160 nop 30000 +0x2bfb 007161 nop 30000 +0x2bfc 007162 rtn +: 007164 lpm_cal_xtal_startup_by_snooze: +0x2bfd 007165 fetch 1 ,mem_lpm_xtalcnt +0x2bfe 007166 nrtn blank +0x2bff 007167 jam 0xff ,core_xtal_stable_time +0x2c00 007168 jam clksel_rc ,core_clksel +0x2c01 007169 call xtal_fast_wake +0x2c02 007170 setarg 1000 +0x2c03 007171 iadd lpo_time ,alarm +0x2c04 007172 snooze +0x2c05 007173 deposit lpo_time +0x2c06 007174 nop 12000 +0x2c07 007175 nop 12000 +0x2c08 007176 nop 12000 +0x2c09 007177 nop 12000 +0x2c0a 007178 nop 12000 +0x2c0b 007179 nop 12000 +0x2c0c 007180 nop 12000 +0x2c0d 007181 nop 12000 +0x2c0e 007182 nop 12000 +0x2c0f 007183 isub alarm ,pdata +0x2c10 007184 add pdata ,0x30 ,pdata +0x2c11 007185 arg 0xff ,temp +0x2c12 007186 call ceiling +0x2c13 007187 store 1 ,mem_lpm_xtalcnt +0x2c14 007188 nop 30000 +0x2c15 007189 nop 30000 +0x2c16 007190 nop 30000 +0x2c17 007191 rtn +: 007196 lpm_write_config: +0x2c18 007197 arg 0xfff ,contw +0x2c19 007198 iand contw ,contw +0x2c1a 007199 fetch 1 ,mem_lpm_config +0x2c1b 007200 and_into 0xf0 ,pdata +0x2c1c 007201 lshift8 pdata ,pdata +0x2c1d 007202 ior contw ,pdata +0x2c1e 007203 hstore 2 ,core_lpm_reg +0x2c1f 007204 ifetch 2 ,contr +0x2c20 007205 istore 2 ,contw +: 007207 lpm_write_ctrl: +0x2c21 007208 setarg lpmreg_sel_ctrl +0x2c22 007209 branch lpm_write +: 007211 lpm_write_ctrl2: +0x2c23 007212 setarg lpmreg_sel_ctrl2 +: 007213 lpm_write: +0x2c24 007214 until null ,lpo_edge +0x2c25 007215 hstore 1 ,core_lpm_wr +0x2c26 007216 until null ,lpo_edge +0x2c27 007217 until null ,lpo_edge +0x2c28 007218 rtn +: 007221 lpm_write_gpio_wakeup: +0x2c29 007222 bpatch patch16_0 ,mem_patch16 +0x2c2a 007223 fetch 4 ,mem_gpio_wakeup_low +0x2c2b 007224 hstore 4 ,core_lpm_reg +0x2c2c 007225 setarg lpmreg_sel_gpiolow +0x2c2d 007226 call lpm_write +0x2c2e 007227 fetch 4 ,mem_gpio_wakeup_high +0x2c2f 007228 hstore 4 ,core_lpm_reg +0x2c30 007229 setarg lpmreg_sel_gpiohigh +0x2c31 007230 branch lpm_write +: 007232 lpm_get_wake_lock: +0x2c32 007233 fetch 2 ,mem_lpm_wake_lock +0x2c33 007234 qset1 pdata +0x2c34 007235 store 2 ,mem_lpm_wake_lock +0x2c35 007236 rtn +: 007238 lpm_put_wake_lock: +0x2c36 007239 fetch 2 ,mem_lpm_wake_lock +0x2c37 007240 qset0 pdata +0x2c38 007241 store 2 ,mem_lpm_wake_lock +0x2c39 007242 rtn +: 007246 lpm_check_wake_lock: +0x2c3a 007247 bpatch patch16_1 ,mem_patch16 +0x2c3b 007248 call app_check_wake_lock +0x2c3c 007249 fetch 2 ,mem_lpm_wake_lock +0x2c3d 007250 copy pdata ,rega +0x2c3e 007251 fetch 1 ,mem_state_map +0x2c3f 007252 isolate1 smap_rxlmp ,pdata +0x2c40 007253 setflag true ,wake_lock_lmp_rx ,rega +0x2c41 007254 fetch 1 ,mem_lmo_opcode1 +0x2c42 007255 fetcht 1 ,mem_lmo_opcode2 +0x2c43 007256 iadd temp ,pdata +0x2c44 007257 fetcht 1 ,mem_lmp_to_send +0x2c45 007258 iadd temp ,pdata +0x2c46 007259 nsetflag blank ,wake_lock_lmp_tx ,rega +0x2c47 007260 fetch 1 ,mem_le_tx_buff_used +0x2c48 007261 nsetflag blank ,wake_lock_ble_tx ,rega +0x2c49 007262 fetch 2 ,mem_l2cap_rxbuff1_len +0x2c4a 007263 fetcht 2 ,mem_l2cap_rxbuff2_len +0x2c4b 007264 iadd temp ,pdata +0x2c4c 007265 nsetflag blank ,wake_lock_l2cap_rx ,rega +0x2c4d 007266 fetch util_fifo_len ,mem_ipc_fifo_bt2c51 +0x2c4e 007267 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega +0x2c4f 007268 fetch util_fifo_len ,mem_ipc_fifo_c512bt +0x2c50 007269 nsetflag blank ,wake_lock_ipc_c512bt ,rega +0x2c51 007270 fetch 1 ,mem_hci_cmd +0x2c52 007271 nsetflag blank ,wake_lock_cmd ,rega +0x2c53 007272 fetch 1 ,mem_device_option +0x2c54 007273 compare dvc_op_module ,pdata ,0xff +0x2c55 007274 call lpm_uart_wake_lock ,true +0x2c56 007275 setarg -8 +0x2c57 007276 iand rega ,rega +0x2c58 007277 copy rega ,pdata +0x2c59 007278 store 2 ,mem_lpm_wake_lock +0x2c5a 007279 rtn +: 007281 lpm_uart_wake_lock: +0x2c5b 007282 hfetch 2 ,core_uart_rxitems +0x2c5c 007283 nsetflag blank ,wake_lock_uart_rx ,rega +0x2c5d 007284 hfetch 2 ,core_uart_txitems +0x2c5e 007285 nsetflag blank ,wake_lock_uart_tx ,rega +0x2c5f 007286 rtn +: 007288 lpm_shut_down: +0x2c60 007289 hfetch 4 ,core_lpm_ctrl +0x2c61 007290 set0 27 ,pdata +0x2c62 007291 hstore 4 ,core_lpm_reg +0x2c63 007292 call lpm_write_ctrl +0x2c64 007293 branch assert +: 007295 lpm_disable_exen_output: +0x2c65 007296 hfetch 4 ,core_lpm_xtalcnt +0x2c66 007297 set0 20 ,pdata +0x2c67 007298 hstore 4 ,core_lpm_reg +0x2c68 007299 branch lpm_write_ctrl2 +: 007301 check_bt_disabled: +0x2c69 007302 fetch 2 ,mem_chip_functions +0x2c6a 007303 bbit1 bt_disabled ,assert +0x2c6b 007304 rtn +: 007305 check_ble_disabled: +0x2c6c 007306 fetch 2 ,mem_chip_functions +0x2c6d 007307 bbit1 ble_disabled ,assert +0x2c6e 007308 rtn +: 007309 check_module_disabled: +0x2c6f 007310 fetch 2 ,mem_chip_functions +0x2c70 007311 bbit1 module_disable ,assert +0x2c71 007312 rtn +: 007373 g24_dispatch: +0x2c72 007374 bpatch patch16_2 ,mem_patch16 +0x2c73 007375 call g24_head_ptr2regc +0x2c74 007376 add regc ,offset_24g_mode ,regb +0x2c75 007377 ifetch 1 ,regb +0x2c76 007379 rtneq disable_24g +0x2c77 007380 beq tx_24g ,g24_transmit_process +0x2c78 007381 beq rx_24g ,g24_receive_process +0x2c79 007382 rtn +: 007384 g24_head_ptr2regc: +0x2c7a 007385 fetcht 2 ,mem_24g_head_ptr +0x2c7b 007386 copy temp ,regc +0x2c7c 007387 rtn +: 007389 g24_receive_process_init: +0x2c7d 007390 call g24_receive_init +0x2c7e 007391 branch g24_mode_switch_init +: 007393 g24_receive_process: +0x2c7f 007394 call g24_mode_switch +0x2c80 007395 call g24_dongle_work_mode_auto +0x2c81 007396 call g24_dongle_bind_mode_auto +0x2c82 007397 branch g24_dongle_search_mode_auto +: 007400 g24_pair_init: +0x2c83 007403 call g24_set0_mem_pid +0x2c84 007404 setarg g24_pair_ch +0x2c85 007405 call g24_store_mem_ch +0x2c86 007406 call g24_store_mem_pair_txpower +0x2c87 007409 add regc ,offset_24g_paring_addr ,rega +0x2c88 007410 ifetch 4 ,rega +0x2c89 007411 branch g24_store_mem_addr +: 007413 g24_ch: +0x2c8a 007414 call g24_head_ptr2regc +0x2c8b 007415 add regc ,offset_24g_current_ch_number ,regb +0x2c8c 007416 ifetcht 1 ,regb +0x2c8d 007418 call g24_ch_temp_incre_size4 +0x2c8e 007419 add regc ,offset_24g_current_ch_number ,contw +0x2c8f 007421 branch g24_contw_istoret_1byte +: 007423 g24_ch_temp_incre_size4: +0x2c90 007424 call g24_ch_calc +0x2c91 007425 increase 1 ,temp +0x2c92 007426 and_into 3 ,temp +0x2c93 007427 rtn +: 007429 g24_ch_calc: +0x2c94 007430 add regc ,offset_24g_addr ,regb +0x2c95 007431 ifetch 1 ,regb +0x2c96 007433 and_into 0x03 ,pdata +0x2c97 007434 mul32 pdata ,4 ,rega +0x2c98 007435 add regc ,offset_24g_ch_map1 ,pdata +0x2c99 007437 iadd rega ,pdata +0x2c9a 007438 iadd temp ,contr +0x2c9b 007439 ifetch 1 ,contr +0x2c9c 007441 branch g24_store_mem_ch +: 007443 g24_set_device_addr: +0x2c9d 007444 call g24_store_mem_tx_power_temp +0x2c9e 007445 call otp_enable_chgpump +0x2c9f 007446 setarg 0x7e2 +0x2ca0 007447 arg mem_temp ,rega +0x2ca1 007448 arg 4 ,temp +0x2ca2 007449 call otpd_read_data +0x2ca3 007450 call otp_disable_chgpump +0x2ca4 007451 fetch 4 ,mem_temp +0x2ca5 007452 call g24_store_mem_device_addr +0x2ca6 007454 nrtn blank +0x2ca7 007455 fetch 4 ,mem_lap +0x2ca8 007457 branch g24_store_mem_device_addr +: 007459 g24_transmit_rf_sta_init: +0x2ca9 007460 call g24_set1_mem_rf_last_sta +0x2caa 007462 setarg 0 +0x2cab 007463 call g24_store_mem_sync_cnt +: 007465 g24_transmit_rf_ctrl_clear: +0x2cac 007466 call g24_fetch_mem_data_type +0x2cad 007468 and_into bits_data ,pdata +0x2cae 007470 branch g24_store_mem_data_type +: 007472 g24_hop_ch_enable: +0x2caf 007473 call g24_fetch_mem_data_type +0x2cb0 007475 set1 bit_hop ,pdata +0x2cb1 007476 call g24_store_mem_data_type +0x2cb2 007479 branch g24_store_mem_txpayload +: 007481 g24_transmit_hop_pac_fail: +0x2cb3 007482 call g24_fetch_mem_rf_work_stage +0x2cb4 007484 beq 1 ,g24_transmit_hop_pac_fail_wo_hop +0x2cb5 007485 beq 2 ,g24_transmit_hop_pac_fail_hop_stage2 +0x2cb6 007486 rtn +: 007488 g24_transmit_hop_pac_fail_wo_hop: +0x2cb7 007489 call g24_set2_mem_sync_cnt +: 007491 g24_transmit_hop_pac_fail_stage1: +0x2cb8 007492 add regc ,offset_24g_hop_pac_retry ,contw +0x2cb9 007493 call g24_mem_set0 +0x2cba 007495 call g24_store_mem_rf_last_sta +0x2cbb 007497 branch g24_transmit_rf_ctrl_clear +: 007499 g24_transmit_hop_pac_fail_hop_stage2: +0x2cbc 007500 call g24_set0_mem_rf_hop_ch +0x2cbd 007502 branch g24_transmit_hop_pac_fail_stage1 +: 007504 g24_transmit_pac_fail_hop_stage3: +0x2cbe 007505 add regc ,offset_24g_txfail_cnt ,rega +0x2cbf 007506 ifetch 1 ,rega +0x2cc0 007508 increase 1 ,pdata +0x2cc1 007509 add regc ,offset_24g_txfail_cnt ,contw +0x2cc2 007510 istore 1 ,contw +0x2cc3 007512 beq 0x20 ,g24_tx_attempt_fail +0x2cc4 007513 call g24_fetch_mem_rf_hop_ch +0x2cc5 007515 beq 1 ,g24_rf_hop_fastly +0x2cc6 007516 setarg 1 +0x2cc7 007517 call g24_store_mem_rf_hop_ch +: 007519 g24_rf_hop_attemp_again: +0x2cc8 007520 call g24_fetch_mem_rf_hop_ch +0x2cc9 007522 bne 1 ,g24_transmit_rf_ctrl_clear +: 007523 g24_rf_hop_fastly: +0x2cca 007524 add regc ,offset_24g_hop_fastly_cnt ,rega +0x2ccb 007525 ifetch 1 ,rega +0x2ccc 007527 increase 1 ,pdata +0x2ccd 007528 call g24_store_mem_hop_fastly_cnt +0x2cce 007530 beq 4 ,g24_rf_hop_fastly_exit +0x2ccf 007531 call g24_ch +0x2cd0 007532 call g24_set2_mem_max_retry +0x2cd1 007534 branch g24_transmit_packet +: 007536 g24_rf_hop_fastly_exit: +0x2cd2 007537 call g24_set0_mem_hop_fastly_cnt +0x2cd3 007539 branch g24_transmit_rf_ctrl_clear +: 007541 g24_set0_mem_hop_fastly_cnt: +0x2cd4 007542 setarg 0 +: 007543 g24_store_mem_hop_fastly_cnt: +0x2cd5 007544 add regc ,offset_24g_hop_fastly_cnt ,contw +0x2cd6 007545 branch g24_contw_istore_1byte +: 007547 g24_transmit_hop_pac_succ_wo_hop: +0x2cd7 007548 call g24_set2_mem_sync_cnt +: 007550 g24_transmit_hop_pac_succ: +0x2cd8 007551 call g24_set0_mem_rf_hop_ch +0x2cd9 007553 call g24_set1_mem_rf_last_sta +0x2cda 007555 branch g24_transmit_rf_ctrl_clear +: 007557 g24_transmit_succ_rf_config: +0x2cdb 007558 call g24_fetch_mem_rf_work_stage +0x2cdc 007560 beq 3 ,g24_transmit_hop_pac_succ +0x2cdd 007561 call g24_fetch_mem_data_type +0x2cde 007563 isolate0 bit_hop ,pdata +0x2cdf 007564 branch g24_transmit_rf_sta_init ,true +0x2ce0 007565 call g24_fetch_mem_rf_work_stage +0x2ce1 007567 beq 1 ,g24_transmit_hop_pac_succ_wo_hop +0x2ce2 007568 beq 2 ,g24_transmit_hop_pac_succ +0x2ce3 007569 rtn +: 007571 g24_rf_sta_check: +0x2ce4 007572 call g24_fetch_mem_pairing_sm +0x2ce5 007574 rtnne state_24g_pairing_success +0x2ce6 007575 call g24_rf_laststa_synccnt_check +0x2ce7 007576 ncall g24_rf_sync_cnt_check ,user2 +0x2ce8 007577 rtn +: 007579 g24_rf_laststa_synccnt_check: +0x2ce9 007580 disable user2 +0x2cea 007581 add regc ,offset_24g_rf_last_sta ,rega +0x2ceb 007582 ifetch 1 ,rega +0x2cec 007584 rtnne 1 +0x2ced 007585 add regc ,offset_24g_sync_cnt ,rega +0x2cee 007586 ifetch 1 ,rega +0x2cef 007588 rtnne 0 +0x2cf0 007589 setarg 1 +0x2cf1 007590 call g24_store_mem_rf_work_stage +0x2cf2 007592 call g24_set4_mem_max_retry +0x2cf3 007594 branch enable_user2 +: 007596 g24_rf_sync_cnt_check: +0x2cf4 007597 add regc ,offset_24g_sync_cnt ,rega +0x2cf5 007598 ifetch 1 ,rega +0x2cf6 007600 branch g24_rf_hop_attemp ,blank +0x2cf7 007601 increase -1 ,pdata +0x2cf8 007602 call g24_store_mem_sync_cnt +0x2cf9 007604 setarg 2 +0x2cfa 007605 call g24_store_mem_rf_work_stage +0x2cfb 007607 call g24_ch +0x2cfc 007609 branch g24_set4_mem_max_retry +: 007611 g24_store_mem_rf_work_stage: +0x2cfd 007612 add regc ,offset_24g_rf_work_stage ,contw +0x2cfe 007613 branch g24_contw_istore_1byte +: 007616 g24_rf_hop_attemp: +0x2cff 007617 setarg 3 +0x2d00 007618 call g24_store_mem_rf_work_stage +0x2d01 007620 call g24_fetch_mem_rf_hop_ch +0x2d02 007622 nbranch g24_rf_hop_attemp_again ,blank +0x2d03 007623 call g24_ch +: 007625 g24_set2_mem_max_retry: +0x2d04 007626 setarg 2 +0x2d05 007627 branch g24_store_mem_max_retry +: 007629 g24_transmit_process: +0x2d06 007630 rtnmark0 mark_24g +0x2d07 007631 set1 mark_24g_conext ,mark +0x2d08 007632 bpatch patch16_3 ,mem_patch16 +0x2d09 007633 add regc ,offset_24g_tx_without_int ,rega +0x2d0a 007634 ifetch 1 ,rega +0x2d0b 007636 beq 1 ,g24_transmit_without_int +0x2d0c 007637 call g24_timer_check +0x2d0d 007638 nbranch g24_transmit_exit ,user +0x2d0e 007639 call g24_interval_calibrate +: 007640 g24_transmit_without_int: +0x2d0f 007641 add regc ,offset_24g_tx_without_int ,contw +0x2d10 007642 call g24_mem_set0 +0x2d11 007644 call g24_txdata_prep +0x2d12 007645 nbranch g24_enter_lpm ,user +0x2d13 007646 call g24_rf_sta_check +: 007647 g24_transmit_start: +0x2d14 007648 call g24_transmit_packet +0x2d15 007649 call g24_power_ctrl +: 007650 g24_transmit_exit: +0x2d16 007651 set0 mark_24g_conext ,mark +0x2d17 007652 rtn +: 007654 g24_timer_timeout: +0x2d18 007655 rtn zero +0x2d19 007656 set1 28 ,pdata +0x2d1a 007657 rtn +: 007659 g24_interval_calibrate: +0x2d1b 007660 add regc ,offset_24g_pac_index ,rega +0x2d1c 007661 ifetch 1 ,rega +0x2d1d 007663 increase 1 ,pdata +0x2d1e 007664 add regc ,offset_24g_pac_index ,contw +0x2d1f 007665 istore 1 ,contw +0x2d20 007667 beq 4 ,g24_interval_max +0x2d21 007668 beq 5 ,g24_interval_min +0x2d22 007669 rtn +: 007670 g24_interval_max: +0x2d23 007671 add regc ,offset_24g_interval_max ,rega +0x2d24 007672 ifetch 1 ,rega +: 007674 g24_interval_update: +0x2d25 007676 add regc ,offset_24g_interval ,contw +0x2d26 007677 branch g24_contw_istore_1byte +: 007679 g24_interval_min: +0x2d27 007680 add regc ,offset_24g_pac_index ,contw +0x2d28 007681 call g24_mem_set0 +0x2d29 007683 add regc ,offset_24g_interval_min ,rega +0x2d2a 007684 ifetch 1 ,rega +0x2d2b 007686 branch g24_interval_update +: 007688 g24_txdata_prep: +0x2d2c 007689 call g24_fetch_mem_pairing_sm +0x2d2d 007691 bne state_24g_pairing_success ,g24_pairing_sm +0x2d2e 007692 bpatch patch16_4 ,mem_patch16 +0x2d2f 007693 call g24_package_data +0x2d30 007694 nbranch g24_txdata_last_pac ,user +0x2d31 007695 call g24_transmit_prep +0x2d32 007696 call g24_power_ctrl_pac_incrs +: 007697 g24_txdata_enable_tx: +0x2d33 007699 setarg ensure_on_24g +: 007700 g24_store_mem_ensure: +0x2d34 007701 add regc ,offset_24g_ensure ,contw +0x2d35 007702 branch g24_contw_istore_1byte +: 007704 g24_txdata_last_pac: +0x2d36 007705 add regc ,offset_24g_ensure ,rega +0x2d37 007706 ifetch 1 ,rega +0x2d38 007708 beq ensure_on_24g ,enable_user +0x2d39 007709 rtn +: 007711 g24_package_data: +0x2d3a 007713 add regc ,offset_24g_cb_data ,temp +0x2d3b 007714 ifetch 2 ,temp +0x2d3c 007716 call callback_func +0x2d3d 007717 nrtn user +0x2d3e 007718 copy rega ,pdata +0x2d3f 007719 store 1 ,mem_rega +0x2d40 007720 add regc ,offset_24g_abort_pac ,contw +0x2d41 007721 call g24_mem_set0 +0x2d42 007723 call g24_transmit_rf_ctrl_clear +0x2d43 007724 store 1 ,mem_24g_common_temp +0x2d44 007725 fetch 1 ,mem_rega +0x2d45 007726 copy pdata ,rega +0x2d46 007727 add rega ,1 ,temp +0x2d47 007728 arg mem_24g_common_temp + 1 ,contw +0x2d48 007729 copy rega ,loopcnt +0x2d49 007730 copy regb ,contr +0x2d4a 007731 call memcpy +0x2d4b 007732 arg mem_24g_common_temp ,rega +: 007733 g24_put_data_in_buff: +0x2d4c 007734 rtnmark0 mark_24g_conext +0x2d4d 007735 add regc ,offset_24g_datalen ,contw +0x2d4e 007736 istoret 1 ,contw +0x2d4f 007738 copy temp ,loopcnt +0x2d50 007739 add regc ,offset_24g_txbuf ,contw +0x2d51 007741 copy rega ,contr +0x2d52 007742 branch memcpy +: 007744 g24_transmit_prep: +0x2d53 007746 add regc ,offset_24g_datalen ,rega +0x2d54 007747 ifetch 1 ,rega +0x2d55 007749 increase 2 ,pdata +0x2d56 007750 add regc ,offset_24g_txlen ,contw +0x2d57 007751 istore 1 ,contw +0x2d58 007754 call g24_fetch_mem_data_type +0x2d59 007756 call g24_store_mem_txpayload +0x2d5a 007759 add regc ,offset_24g_datalen ,rega +0x2d5b 007760 ifetch 1 ,rega +0x2d5c 007762 lshift3 pdata ,pdata +0x2d5d 007763 add regc ,offset_24g_pid ,rega +0x2d5e 007764 ifetcht 1 ,rega +0x2d5f 007766 and temp ,0x03 ,temp +0x2d60 007767 lshift temp ,temp +0x2d61 007768 ior temp ,pdata +0x2d62 007769 add regc ,offset_24g_no_ack ,rega +0x2d63 007770 ifetcht 1 ,rega +0x2d64 007772 iadd temp ,pdata +0x2d65 007773 istore 1 ,contw +0x2d66 007775 add regc ,offset_24g_datalen ,rega +0x2d67 007776 ifetch 1 ,rega +0x2d68 007778 iforce loopcnt +0x2d69 007779 add regc ,offset_24g_txbuf ,contr +0x2d6a 007781 branch memcpy +: 007783 g24_send_abort_packet: +0x2d6b 007784 call g24_set1_mem_abort_pac +0x2d6c 007786 call g24_set0_mem_rf_hop_ch +0x2d6d 007788 call g24_power_ctrl_reinit +0x2d6e 007789 call g24_transmit_rf_ctrl_clear +0x2d6f 007790 store 1 ,mem_24g_common_temp +0x2d70 007791 call g24_put_data_in_buff_pre +0x2d71 007792 call g24_fetch_mem_data_type +0x2d72 007794 set1 bit_abort ,pdata +0x2d73 007795 call g24_store_mem_data_type +0x2d74 007797 call g24_transmit_prep +0x2d75 007798 call g24_txdata_enable_tx +0x2d76 007799 branch g24_transmit_start +: 007801 g24_put_data_in_buff_pre: +0x2d77 007802 store 1 ,mem_24g_common_temp + 1 +0x2d78 007803 call g24_fetch_mem_device_addr +0x2d79 007805 store 4 ,mem_24g_common_temp + 2 +0x2d7a 007806 arg 6 ,temp +0x2d7b 007807 arg mem_24g_common_temp ,rega +0x2d7c 007808 branch g24_put_data_in_buff +: 007810 g24_enter_lpm: +0x2d7d 007811 add regc ,offset_24g_abort_pac ,rega +0x2d7e 007812 ifetch 1 ,rega +0x2d7f 007814 branch g24_send_abort_packet ,blank +: 007815 g24_enter_lpm_prepare: +0x2d80 007817 add regc ,offset_24g_cb_lpm_prepare ,rega +0x2d81 007818 ifetch 2 ,rega +0x2d82 007820 branch callback_func +: 007822 g24_lpm_long_sleep: +0x2d83 007823 call g24_head_ptr2regc +0x2d84 007825 call lpo_calibration +0x2d85 007826 fetch 3 ,mem_clks_per_lpo +0x2d86 007827 rtn blank +0x2d87 007828 add regc ,offset_24g_cb_lpm_before ,temp +0x2d88 007829 ifetch 2 ,temp +0x2d89 007831 call callback_func +0x2d8a 007832 add regc ,offset_24g_enter_hibernate ,temp +0x2d8b 007833 ifetch 8 ,temp +: 007834 g24_lpm_long_sleep2: +0x2d8c 007835 call clk2lpo +0x2d8d 007836 storet 4 ,mem_sleep_counter +0x2d8e 007837 branch lpm_sleep +: 007839 g24_transmit_packet: +0x2d8f 007840 call g24_head_ptr2regc +0x2d90 007841 add regc ,offset_24g_retry ,contw +0x2d91 007842 call g24_mem_set0 +: 007844 g24_transmit_loop: +0x2d92 007845 call g24_transmit_receive_ack +0x2d93 007846 nbranch g24_retransmit ,sync +0x2d94 007847 nbranch g24_retransmit ,user3 +0x2d95 007848 call g24_ackpayload_parse +0x2d96 007849 call g24_power_ctrl_ack_incrs +: 007850 g24_transmit_next_packet: +0x2d97 007851 call g24_head_ptr2regc +0x2d98 007852 add regc ,offset_24g_pid ,rega +0x2d99 007853 ifetch 1 ,rega +0x2d9a 007855 increase 1 ,pdata +0x2d9b 007856 call g24_store_mem_pid +0x2d9c 007858 call g24_fetch_mem_pairing_sm +0x2d9d 007860 bne state_24g_pairing_success ,g24_paring_mode +0x2d9e 007861 call g24_transmit_succ_rf_config +: 007862 g24_transmit_abandon: +0x2d9f 007863 setarg 0 +0x2da0 007864 add regc ,offset_24g_txfail_cnt ,contw +0x2da1 007865 istore 2 ,contw +0x2da2 007869 setarg ensure_off_24g +0x2da3 007870 branch g24_store_mem_ensure +: 007873 g24_transmit_receive_ack: +0x2da4 007874 disable user3 +0x2da5 007875 call g24_transmit +0x2da6 007876 call g24_head_ptr2regc +0x2da7 007877 add regc ,offset_24g_no_ack ,rega +0x2da8 007878 ifetch 1 ,rega +0x2da9 007880 beq no_ack_24g ,g24_transmit_no_ack +0x2daa 007881 call g24_receive_packet +0x2dab 007882 branch g24_end_of_packet +: 007883 g24_transmit_no_ack: +0x2dac 007884 call g24_end_of_packet +0x2dad 007885 branch g24_transmit_next_packet +: 007888 g24_retransmit: +0x2dae 007889 bpatch patch16_5 ,mem_patch16 +0x2daf 007890 add regc ,offset_24g_get_ack_fail ,rega +0x2db0 007891 ifetch 1 ,rega +0x2db1 007893 increase 1 ,pdata +0x2db2 007894 add regc ,offset_24g_get_ack_fail ,contw +0x2db3 007895 istore 1 ,contw +0x2db4 007897 call g24_fetch_mem_pairing_sm +0x2db5 007899 bne state_24g_pairing_success ,g24_tx_paring_retry +0x2db6 007900 add regc ,offset_24g_retry ,rega +0x2db7 007901 ifetcht 1 ,rega +0x2db8 007903 increase 1 ,temp +0x2db9 007904 add regc ,offset_24g_retry ,contw +0x2dba 007905 istoret 1 ,contw +0x2dbb 007907 add regc ,offset_24g_max_retry ,rega +0x2dbc 007908 ifetch 1 ,rega +0x2dbd 007910 isub temp ,pdata +0x2dbe 007911 nbranch g24_transmit_loop ,blank +0x2dbf 007912 bpatch patch16_6 ,mem_patch16 +0x2dc0 007913 call g24_fetch_mem_rf_work_stage +0x2dc1 007915 beq 3 ,g24_transmit_pac_fail_hop_stage3 +0x2dc2 007916 add regc ,offset_24g_hop_pac_retry ,rega +0x2dc3 007917 ifetch 1 ,rega +0x2dc4 007919 increase 1 ,pdata +0x2dc5 007920 add regc ,offset_24g_hop_pac_retry ,contw +0x2dc6 007921 istore 1 ,contw +0x2dc7 007923 beq 2 ,g24_transmit_hop_pac_fail +0x2dc8 007924 call g24_hop_ch_enable +0x2dc9 007925 setarg 1 +0x2dca 007926 call g24_store_mem_max_retry +0x2dcb 007928 branch g24_transmit_packet +: 007930 g24_tx_paring_retry: +0x2dcc 007931 add regc ,offset_24g_get_ack_fail ,rega +0x2dcd 007932 ifetch 1 ,rega +0x2dce 007934 rtnne 0xff +0x2dcf 007935 add regc ,offset_24g_get_ack_fail ,contw +0x2dd0 007936 call g24_mem_set0 +0x2dd1 007938 branch g24_stop_24g_mode +: 007940 g24_tx_attempt_fail: +0x2dd2 007941 add regc ,offset_24g_txfail_cnt ,contw +0x2dd3 007942 call g24_mem_set0 +: 007944 g24_stop_24g_mode: +0x2dd4 007945 jam bt_evt_24g_attempt_fail ,mem_fifo_temp +0x2dd5 007946 branch ui_ipc_send_event +: 007948 g24_ackpayload_parse: +0x2dd6 007949 call g24_read_len_pid_crc +0x2dd7 007950 add regc ,offset_24g_rxdata_length ,rega +0x2dd8 007951 ifetch 1 ,rega +0x2dd9 007953 rtn blank +0x2dda 007954 iforce loopcnt +0x2ddb 007955 add regc ,offset_24g_rxbuf_add2 ,contr +0x2ddc 007957 add regc ,offset_24g_rxpayload ,contw +0x2ddd 007959 branch memcpy +: 007962 g24_read_len_pid_crc: +0x2dde 007964 call g24_fetch_mem_rxbuf_add1 +0x2ddf 007966 rshift3 pdata ,pdata +0x2de0 007967 add regc ,offset_24g_rxdata_length ,contw +0x2de1 007968 istore 1 ,contw +0x2de2 007971 increase 1 ,pdata +0x2de3 007972 add regc ,offset_24g_rxbuf_add1 ,contr +0x2de4 007974 iadd contr ,contr +0x2de5 007975 ifetch 3 ,contr +0x2de6 007976 add regc ,offset_24g_sta_crc ,contw +0x2de7 007977 istore 3 ,contw +0x2de8 007980 call g24_fetch_mem_rxbuf_add1 +0x2de9 007982 rshift pdata ,pdata +0x2dea 007983 and pdata ,0x03 ,pdata +0x2deb 007984 add regc ,offset_24g_sta_pid ,contw +0x2dec 007985 istore 1 ,contw +0x2ded 007987 rtn +: 007989 g24_prep: +0x2dee 007990 disable enable_crc +0x2def 007991 disable enable_white +0x2df0 007992 setarg 0x555555 +0x2df1 007993 iforce crc24_init +0x2df2 007994 rtn +: 007996 g24_set_freq_tx: +0x2df3 007997 call set_sync_on +0x2df4 007998 add regc ,offset_24g_ch ,rega +0x2df5 007999 ifetcht 1 ,rega +0x2df6 008001 branch set_freq_tx +: 008003 g24_transmit: +0x2df7 008004 call g24_prep +0x2df8 008005 call g24_set_freq_tx +0x2df9 008006 set1 txgfsk ,radio_ctrl +0x2dfa 008007 enable encode_fec0 +0x2dfb 008008 enable is_tx +0x2dfc 008009 disable is_rx +0x2dfd 008010 call le_enable +0x2dfe 008011 call g24_fetch_mem_addr +0x2dff 008013 iforce access +0x2e00 008014 inject mod ,32 +0x2e01 008015 enable enable_crc +0x2e02 008016 add regc ,offset_24g_txlen ,rega +0x2e03 008017 ifetch 1 ,rega +0x2e04 008019 iforce loopcnt +0x2e05 008020 add regc ,offset_24g_txpayload ,contr +: 008022 g24tr_loop: +0x2e06 008023 ifetch 1 ,contr +0x2e07 008024 inject mod ,8 +0x2e08 008025 loop g24tr_loop +0x2e09 008026 enable enable_parity +0x2e0a 008027 inject mod ,24 +0x2e0b 008028 disable enable_parity +0x2e0c 008029 until null ,tx_clear +0x2e0d 008030 bpatch patch16_7 ,mem_patch16 +0x2e0e 008031 nop 100 +0x2e0f 008032 disable encode_fec0 +0x2e10 008033 rtn +: 008035 g24_receive_packet: +0x2e11 008036 disable user3 +0x2e12 008037 force 0 ,radio_ctrl +0x2e13 008038 add regc ,offset_24g_ch ,rega +0x2e14 008039 ifetcht 1 ,rega +0x2e15 008041 call set_freq_rx +0x2e16 008042 call rf_rx_enable +: 008043 g24_receive_rxon: +0x2e17 008044 call g24_prep +0x2e18 008045 enable decode_fec0 +0x2e19 008046 enable is_rx +0x2e1a 008047 disable is_tx +0x2e1b 008048 call le_enable +0x2e1c 008049 call g24_fetch_mem_addr +0x2e1d 008051 iforce access +0x2e1e 008052 enable swfine +0x2e1f 008053 add regc ,offset_24g_rx_window ,rega +0x2e20 008054 ifetch 2 ,rega +0x2e21 008056 iforce stop_watch +0x2e22 008057 correlate null ,timeout +0x2e23 008058 nbranch g24_sync_timeout ,sync +0x2e24 008059 enable enable_crc +0x2e25 008060 parse demod ,bucket ,8 +0x2e26 008061 rshift3 pwindow ,pdata +0x2e27 008062 add regc ,offset_24g_rxbuf ,contw +0x2e28 008063 istore 1 ,contw +0x2e29 008065 add regc ,offset_24g_mode ,rega +0x2e2a 008066 ifetch 1 ,rega +0x2e2b 008068 beq rx_24g ,g24_receive_skip +0x2e2c 008069 bpatch patch17_0 ,mem_patch17 +0x2e2d 008070 add regc ,offset_24g_rxbuf ,rega +0x2e2e 008071 ifetch 1 ,rega +0x2e2f 008073 add regc ,offset_24g_data_type ,rega +0x2e30 008074 ifetcht 1 ,rega +0x2e31 008076 icompare bits_data ,temp +0x2e32 008077 nbranch g24_end_of_packet ,true +: 008078 g24_receive_skip: +0x2e33 008079 parse demod ,bucket ,8 +0x2e34 008080 rshift3 pwindow ,pdata +0x2e35 008081 istore 1 ,contw +0x2e36 008082 rshift3 pdata ,pdata +0x2e37 008083 and pdata ,0x1f ,loopcnt +0x2e38 008084 branch g24rx_nopayload ,zero +: 008085 g24rx_loop: +0x2e39 008086 parse demod ,bucket ,8 +0x2e3a 008087 rshift3 pwindow ,pdata +0x2e3b 008088 istore 1 ,contw +0x2e3c 008089 loop g24rx_loop +: 008090 g24rx_nopayload: +0x2e3d 008091 parse demod ,bucket ,24 +0x2e3e 008092 rshift32 pdata ,pdata +0x2e3f 008093 rshift16 pdata ,pdata +0x2e40 008094 istore 3 ,contw +0x2e41 008095 branch g24_end_of_packet ,crc_failed +0x2e42 008096 enable user3 +0x2e43 008097 disable decode_fec0 +0x2e44 008098 rtn +: 008101 g24_end_of_packet: +0x2e45 008102 disable encode_fec0 +0x2e46 008103 disable decode_fec0 +0x2e47 008104 disable enable_crc +0x2e48 008105 disable enable_white +0x2e49 008106 branch shutdown_radio ,is_rx +0x2e4a 008107 until null ,tx_clear +0x2e4b 008108 nop 100 +0x2e4c 008109 branch shutdown_radio +: 008111 g24_sync_timeout: +0x2e4d 008112 call rssi_noise +0x2e4e 008113 branch g24_end_of_packet +: 008115 rssi_noise: +0x2e4f 008116 call save_rssi +0x2e50 008117 rtn blank +0x2e51 008118 add regc ,offset_rssi_noise_index ,rega +0x2e52 008119 ifetcht 1 ,rega +0x2e53 008121 arg mem_rssi_noise_buffer ,rega +0x2e54 008123 call rssi_noise_store +0x2e55 008124 add regc ,offset_rssi_noise_index ,contw +: 008126 g24_contw_istoret_1byte: +0x2e56 008127 istoret 1 ,contw +0x2e57 008128 rtn +: 008130 rssi_noise_store: +0x2e58 008131 arg rssi_buf_len_noise ,regb +0x2e59 008132 branch rssi_store +: 008150 rssi_store: +0x2e5a 008151 copy rega ,pdata +0x2e5b 008152 iadd temp ,contw +0x2e5c 008153 fetch 1 ,mem_rssi +0x2e5d 008154 istore 1 ,contw +0x2e5e 008155 increase 1 ,temp +0x2e5f 008156 copy regb ,pdata +0x2e60 008157 iand_into temp +0x2e61 008158 rtn +: 008160 rssi_average: +0x2e62 008161 arg 0 ,temp +0x2e63 008162 copy rega ,contr +: 008163 rssi_average_loop: +0x2e64 008164 ifetch 1 ,contr +0x2e65 008165 iadd temp ,temp +0x2e66 008166 loop rssi_average_loop +0x2e67 008167 rshift8 temp ,temp +0x2e68 008168 rtn +: 008170 g24_power_ctrl_init: +0x2e69 008171 call g24_head_ptr2regc +0x2e6a 008172 call g24_power_ctrl_incrs_level1 +0x2e6b 008173 setarg 1 +0x2e6c 008174 call g24_store_mem_power_ctrl_level +: 008176 g24_power_ctrl_reinit: +0x2e6d 008177 setarg 0 +0x2e6e 008178 call g24_store_mem_power_ctrl_pac +0x2e6f 008180 istore 1 ,contw +0x2e70 008182 rtn +: 008184 g24_power_ctrl_pac_incrs: +0x2e71 008185 call g24_fetch_mem_power_ctrl_pac +0x2e72 008187 increase 1 ,pdata +: 008188 g24_store_mem_power_ctrl_pac: +0x2e73 008190 add regc ,offset_power_ctrl_packet_cnt ,contw +0x2e74 008191 branch g24_contw_istore_1byte +: 008193 g24_power_ctrl_ack_incrs: +0x2e75 008196 add regc ,offset_power_ctrl_ack_cnt ,rega +0x2e76 008197 ifetch 1 ,rega +0x2e77 008198 increase 1 ,pdata +0x2e78 008199 add regc ,offset_power_ctrl_ack_cnt ,contw +0x2e79 008200 branch g24_contw_istore_1byte +: 008202 g24_power_ctrl: +0x2e7a 008203 bpatch patch17_1 ,mem_patch17 +0x2e7b 008204 call g24_fetch_mem_power_ctrl_pac +0x2e7c 008206 sub pdata ,power_ctrl_max_packet_cnt ,null +0x2e7d 008207 rtn positive +0x2e7e 008208 add regc ,offset_power_ctrl_ack_cnt ,rega +0x2e7f 008209 ifetcht 1 ,rega +0x2e80 008211 isub temp ,temp +0x2e81 008212 call g24_power_ctrl_reinit +0x2e82 008213 setarg offset_power_ctrl_threshold_up +0x2e83 008214 iadd regc ,rega +0x2e84 008215 ifetch 1 ,rega +0x2e85 008217 isub temp ,null +0x2e86 008218 nbranch g24_power_ctrl_incrs ,positive +0x2e87 008219 setarg offset_power_ctrl_threshold_down +0x2e88 008220 iadd regc ,rega +0x2e89 008221 ifetch 1 ,rega +0x2e8a 008223 isub temp ,null +0x2e8b 008224 branch g24_power_ctrl_decrs ,positive +0x2e8c 008225 rtn +: 008227 g24_power_ctrl_incrs: +0x2e8d 008228 add regc ,offset_power_ctrl_level ,rega +0x2e8e 008229 ifetch 1 ,rega +0x2e8f 008231 beq 2 ,g24_power_ctrl_incrs_level2 +0x2e90 008232 increase 1 ,pdata +0x2e91 008233 call g24_store_mem_power_ctrl_level +0x2e92 008235 beq 1 ,g24_power_ctrl_incrs_level1 +: 008236 g24_power_ctrl_incrs_level2: +0x2e93 008237 setarg power_ctrl_losspac_thresh_up2 +0x2e94 008238 call g24_store_mem_power_ctrl_threshold_up +0x2e95 008240 setarg power_ctrl_losspac_thresh_down2 +0x2e96 008241 call g24_store_mem_power_ctrl_threshold_down +0x2e97 008244 add regc ,offset_power_ctrl_txpwr_level2 ,rega +0x2e98 008246 branch g24_ifetch_rega_store_mem_txpower +: 008248 g24_power_ctrl_decrs: +0x2e99 008249 add regc ,offset_power_ctrl_level ,rega +0x2e9a 008250 ifetch 1 ,rega +0x2e9b 008252 beq 0 ,g24_power_ctrl_decrs_level0 +0x2e9c 008253 increase -1 ,pdata +0x2e9d 008254 call g24_store_mem_power_ctrl_level +0x2e9e 008256 beq 0 ,g24_power_ctrl_decrs_level0 +: 008257 g24_power_ctrl_decrs_level1: +: 008260 g24_power_ctrl_incrs_level1: +0x2e9f 008261 setarg power_ctrl_losspac_thresh_up1 +0x2ea0 008262 call g24_store_mem_power_ctrl_threshold_up +0x2ea1 008264 setarg power_ctrl_losspac_thresh_down1 +0x2ea2 008265 call g24_store_mem_power_ctrl_threshold_down +0x2ea3 008268 setarg offset_power_ctrl_txpwr_level1 +: 008269 g24_iadd_offset_mem_txpower: +0x2ea4 008270 iadd regc ,rega +: 008271 g24_ifetch_rega_store_mem_txpower: +0x2ea5 008272 ifetch 1 ,rega +0x2ea6 008274 branch g24_store_mem_txpower +: 008276 g24_power_ctrl_decrs_level0: +0x2ea7 008279 setarg power_ctrl_losspac_thresh_up0 +0x2ea8 008280 call g24_store_mem_power_ctrl_threshold_up +0x2ea9 008282 setarg power_ctrl_losspac_thresh_down0 +0x2eaa 008283 call g24_store_mem_power_ctrl_threshold_down +0x2eab 008286 setarg offset_power_ctrl_txpwr_level0 +0x2eac 008288 branch g24_iadd_offset_mem_txpower +: 008302 g24_start_pairing_sm1: +0x2ead 008303 set1 mark_24g ,mark +0x2eae 008304 call g24_pair_init +: 008305 g24_set_pairing_sm_1: +0x2eaf 008307 setarg state_24g_pairing_1 +0x2eb0 008308 branch g24_store_mem_pairing_sm +: 008310 g24_pairing_sm: +0x2eb1 008311 add regc ,offset_24g_ensure ,rega +0x2eb2 008312 ifetch 1 ,rega +0x2eb3 008314 beq ensure_on_24g ,enable_user +0x2eb4 008315 call g24_fetch_mem_pairing_sm +0x2eb5 008317 beq state_24g_pairing_1 ,g24_pairing_sm_1 +0x2eb6 008318 beq state_24g_pairing_2 ,g24_pairing_sm_2 +0x2eb7 008319 beq state_24g_pairing_3 ,g24_pairing_sm_3 +0x2eb8 008320 branch assert +: 008322 g24_pairing_sm_1: +0x2eb9 008323 setarg state_24g_pairing_1_waiting_ack +0x2eba 008324 call g24_store_mem_pairing_sm +0x2ebb 008326 jam 0xaa ,mem_24g_common_temp +0x2ebc 008327 branch g24_pairing_sm_common +: 008328 g24_pairing_sm_2: +0x2ebd 008329 setarg state_24g_pairing_2_waiting_ack +0x2ebe 008330 call g24_store_mem_pairing_sm +0x2ebf 008332 jam 0x55 ,mem_24g_common_temp +0x2ec0 008333 branch g24_pairing_sm_common +: 008334 g24_pairing_sm_3: +0x2ec1 008335 setarg state_24g_pairing_3_waiting_ack +0x2ec2 008336 call g24_store_mem_pairing_sm +0x2ec3 008338 jam 0x22 ,mem_24g_common_temp +: 008339 g24_pairing_sm_common: +0x2ec4 008340 call g24_fetch_mem_data_type +0x2ec5 008342 and_into bits_data ,pdata +0x2ec6 008343 store 1 ,mem_24g_common_temp + 1 +0x2ec7 008344 call g24_fetch_mem_device_addr +0x2ec8 008346 store 4 ,mem_24g_common_temp + 2 +: 008347 g24_put_pairing_data_in_buff: +0x2ec9 008348 jam 0 ,mem_24g_common_temp + 6 +0x2eca 008349 arg mem_24g_common_temp ,rega +0x2ecb 008350 arg 7 ,temp +0x2ecc 008351 call g24_put_data_in_buff +0x2ecd 008352 call g24_transmit_prep +0x2ece 008353 call g24_txdata_enable_tx +0x2ecf 008354 branch enable_user +: 008356 g24_paring_mode: +0x2ed0 008357 call g24_fetch_mem_pairing_sm +0x2ed1 008359 rtneq state_24g_pairing_success +0x2ed2 008360 beq state_24g_pairing_1_waiting_ack ,g24_pairing_sm_1_waiting_ack +0x2ed3 008361 beq state_24g_pairing_2_waiting_ack ,g24_pairing_sm_2_waiting_ack +0x2ed4 008362 beq state_24g_pairing_3_waiting_ack ,g24_pairing_sm_3_waiting_ack +0x2ed5 008363 rtn +: 008365 g24_pairing_sm_1_waiting_ack: +0x2ed6 008366 setarg state_24g_pairing_2 +0x2ed7 008367 call g24_store_mem_pairing_sm +0x2ed8 008369 branch g24_transmit_abandon +: 008370 g24_pairing_sm_2_waiting_ack: +0x2ed9 008371 setarg state_24g_pairing_3 +0x2eda 008372 call g24_store_mem_pairing_sm +0x2edb 008374 branch g24_transmit_abandon +: 008375 g24_pairing_sm_3_waiting_ack: +0x2edc 008376 setarg state_24g_pairing_success +0x2edd 008377 call g24_store_mem_pairing_sm +0x2ede 008379 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +0x2edf 008380 call ui_ipc_send_event +0x2ee0 008381 add regc ,offset_24g_rxpayload_add2 ,rega +0x2ee1 008382 ifetch 4 ,rega +0x2ee2 008384 call g24_store_mem_addr +0x2ee3 008386 branch g24_transmit_abandon +: 008388 g24_auto_pair_start: +0x2ee4 008389 set0 mark_24g ,mark +0x2ee5 008390 call g24_auto_pair_set_device_info +0x2ee6 008391 call g24_tx_attemp_data_prep +: 008392 g24_auto_pair_restart: +0x2ee7 008393 call g24_set0_mem_check_dongle_times +: 008394 g24_auto_pair_start_loop: +0x2ee8 008395 nop 2000 +0x2ee9 008396 call g24_fetch_mem_check_dongle_times +0x2eea 008397 beq 0xff ,g24_stop_24g_mode +0x2eeb 008398 call g24_transmit_receive_ack +0x2eec 008399 nbranch g24_auto_pair_retry ,sync +0x2eed 008400 nbranch g24_auto_pair_retry ,user3 +0x2eee 008401 call g24_ackpayload_parse +0x2eef 008402 call g24_head_ptr2regc +0x2ef0 008403 add regc ,offset_24g_paring_addr ,rega +0x2ef1 008404 ifetcht 4 ,rega +0x2ef2 008405 call g24_fetch_mem_addr_isub_temp +0x2ef3 008406 branch g24_start_pairing_sm1 ,zero +0x2ef4 008407 call g24_head_ptr2regc +0x2ef5 008408 add regc ,offset_24g_rxpayload_add2 ,rega +0x2ef6 008409 ifetch 4 ,rega +0x2ef7 008410 beq 0 ,g24_auto_pair_restart +0x2ef8 008411 call g24_store_mem_addr +0x2ef9 008412 branch g24_tx_attemp_dongle_succ +: 008414 g24_auto_pair_retry: +0x2efa 008415 call g24_fetch_mem_check_dongle_times +0x2efb 008416 increase 1 ,pdata +0x2efc 008417 call g24_store_mem_check_dongle_times +0x2efd 008419 call g24_fetch_mem_auto_paring_switch +0x2efe 008420 increase 1 ,pdata +0x2eff 008421 and_into 1 ,pdata +0x2f00 008422 call g24_store_mem_auto_paring_switch +0x2f01 008423 beq 0 ,g24_auto_pair_device_attemp +0x2f02 008424 beq 1 ,g24_auto_pair_pair_attemp +0x2f03 008425 rtn +: 008427 g24_fetch_mem_auto_paring_switch: +0x2f04 008428 setarg offset_24g_auto_pair_switch +0x2f05 008429 branch g24_set_rega_ifetch_1byte +: 008430 g24_store_mem_auto_paring_switch: +0x2f06 008431 arg offset_24g_auto_pair_switch ,rega +0x2f07 008432 branch g24_set_contw_with_regb_store_1byte +: 008434 g24_auto_pair_set_device_info: +0x2f08 008435 call g24_store_mem_tx_power +0x2f09 008436 call g24_fetch_mem_device_addr +0x2f0a 008437 call g24_store_mem_addr +0x2f0b 008438 branch g24_ch +: 008440 g24_auto_pair_device_attemp: +0x2f0c 008441 call g24_auto_pair_set_device_info +0x2f0d 008442 branch g24_auto_pair_start_loop +: 008444 g24_auto_pair_pair_attemp: +0x2f0e 008445 call g24_pair_init +0x2f0f 008446 branch g24_auto_pair_start_loop +: 008449 g24_start_24g_mode: +0x2f10 008450 set0 mark_24g ,mark +0x2f11 008451 call g24_ch +0x2f12 008452 call g24_fetch_mem_pairing_sm +0x2f13 008454 rtnne state_24g_pairing_success +0x2f14 008455 call g24_tx_attemp_data_prep +0x2f15 008456 call g24_set0_mem_check_dongle_times +: 008458 g24_tx_attemp_dongle_loop: +0x2f16 008459 nop 2000 +0x2f17 008460 call g24_fetch_mem_check_dongle_times +0x2f18 008462 beq 0xff ,g24_stop_24g_mode +0x2f19 008463 call g24_transmit_receive_ack +0x2f1a 008464 nbranch g24_attemp_txdata_retry ,sync +0x2f1b 008465 nbranch g24_attemp_txdata_retry ,user3 +: 008466 g24_tx_attemp_dongle_succ: +0x2f1c 008467 set1 mark_24g ,mark +0x2f1d 008468 call g24_set0_mem_check_dongle_times +0x2f1e 008469 setarg state_24g_pairing_success +0x2f1f 008470 call g24_store_mem_pairing_sm +: 008472 g24_app_tx_attempt_success: +0x2f20 008473 jam bt_evt_24g_attempt_success ,mem_fifo_temp +0x2f21 008474 branch ui_ipc_send_event +: 008476 g24_tx_attemp_data_prep: +0x2f22 008477 set1 mark_24g_conext ,mark +0x2f23 008478 jam 0xff ,mem_24g_common_temp +0x2f24 008479 call g24_fetch_mem_data_type +0x2f25 008481 call g24_put_data_in_buff_pre +0x2f26 008482 branch g24_transmit_prep +: 008484 g24_attemp_txdata_retry: +0x2f27 008485 call g24_fetch_mem_check_dongle_times +0x2f28 008487 increase 1 ,pdata +0x2f29 008488 call g24_store_mem_check_dongle_times +0x2f2a 008490 call g24_ch +0x2f2b 008491 branch g24_tx_attemp_dongle_loop +: 008493 g24_check_51cmd_start_24g: +0x2f2c 008494 call g24_store_mem_tx_power +0x2f2d 008497 setarg state_24g_pairing_success +0x2f2e 008498 call g24_store_mem_pairing_sm +0x2f2f 008500 branch g24_start_24g_mode +: 008509 dongle_init: +0x2f30 008510 bpatch patch17_2 ,mem_patch17 +0x2f31 008511 call g24_head_ptr2regc +0x2f32 008512 setarg dongle_rxdata_type1 +0x2f33 008513 add regc ,offset_24g_cb_rxdata_type1 ,contw +0x2f34 008514 istore 2 ,contw +0x2f35 008516 call g24_receive_init +0x2f36 008517 call usb_init +0x2f37 008518 call g24_fetch_mem_pair_mode +0x2f38 008520 bpatch patch17_3 ,mem_patch17 +0x2f39 008521 beq 0x00 ,dongle_auto_bind +0x2f3a 008522 beq 0x01 ,dongle_pc_bind +0x2f3b 008523 beq 0x0f ,dongle_all_powerful +0x2f3c 008524 branch assert +: 008526 g24_receive_init: +0x2f3d 008527 call g24_store_mem_tx_power_temp +0x2f3e 008528 arg 0x80 ,loopcnt +0x2f3f 008529 arg mem_rssi_noise_buffer ,contw +0x2f40 008530 branch memset0 +: 008532 dongle_all_powerful: +0x2f41 008533 call dongle_check_mode +: 008534 dongle_all_powerful_loop: +0x2f42 008535 call g24_dongle_work_mode +0x2f43 008536 call usb_isr +0x2f44 008537 branch dongle_all_powerful_loop +: 008539 dongle_pc_bind: +0x2f45 008540 bpatch patch17_4 ,mem_patch17 +0x2f46 008541 call dongle_check_mode +: 008542 dongle_pc_bind_loop: +0x2f47 008543 call g24_dongle_work_mode +0x2f48 008544 call g24_dongle_bind_mode +0x2f49 008545 call usb_isr +0x2f4a 008546 call dongle_usb_dispatch +0x2f4b 008547 branch dongle_pc_bind_loop +: 008549 dongle_check_mode: +0x2f4c 008553 call g24_set_work_mem_dongle_work_mode +0x2f4d 008554 call g24_set0_mem_dongle_mode_init +0x2f4e 008555 branch g24_set0_mem_ackpayload_enable +: 008557 g24_dongle_work_mode: +0x2f4f 008558 call g24_fetch_mem_dongle_work_mode +0x2f50 008560 rtnne dongle_work +: 008561 g24_dongle_work_mode_start: +0x2f51 008562 call g24_dongle_work_init +0x2f52 008563 call g24_ch_process +0x2f53 008564 call g24_receive_packet_start +0x2f54 008565 branch g24_blank_data_process +: 008567 g24_dongle_work_init: +0x2f55 008568 call g24_fetch_mem_dongle_mode_init +0x2f56 008570 rtnbit1 dongle_work +0x2f57 008571 set1 dongle_work ,pdata +0x2f58 008572 call g24_store_mem_dongle_mode_init +0x2f59 008574 call g24_store_mem_tx_power +0x2f5a 008577 call g24_set0_mem_ackpayload_enable +0x2f5b 008579 jam 0 ,mem_usb_tx_enable +0x2f5c 008580 call g24_set1_mem_abort_pac +0x2f5d 008582 call g24_dongle_init +: 008583 g24_rx_interrupt_clear: +0x2f5e 008584 add regc ,offset_24g_rxbuf ,contw +0x2f5f 008586 arg 66 ,loopcnt +0x2f60 008587 branch clear_mem +: 008589 g24_dongle_init: +0x2f61 008590 call g24_set0_mem_pid +0x2f62 008592 call g24_fetch_mem_rx_addr +0x2f63 008594 call g24_store_mem_addr +0x2f64 008596 branch g24_ch +: 008598 g24_ch_process: +0x2f65 008599 bpatch patch17_5 ,mem_patch17 +0x2f66 008600 call g24_fetch_mem_abort_pac +0x2f67 008602 beq 1 ,g24_noise_rssi +0x2f68 008603 call g24_fetch_mem_hop_pac +0x2f69 008605 beq 1 ,g24_ch +0x2f6a 008606 setarg offset_24g_hop_btclk +0x2f6b 008607 iadd regc ,rega +0x2f6c 008608 ifetcht 4 ,rega +0x2f6d 008610 copy clkn_bt ,pdata +0x2f6e 008611 isub temp ,null +0x2f6f 008612 ncall g24_timer_timeout ,positive +0x2f70 008613 copy pdata ,regb +0x2f71 008614 setarg offset_24g_hop_btclk +0x2f72 008615 iadd regc ,rega +0x2f73 008616 ifetch 4 ,rega +0x2f74 008617 copy pdata ,temp +0x2f75 008619 setarg offset_24g_hop_interval +0x2f76 008620 iadd regc ,rega +0x2f77 008621 copy temp ,pdata +0x2f78 008622 ifetcht 1 ,rega +0x2f79 008624 iadd temp ,temp +0x2f7a 008625 copy regb ,pdata +0x2f7b 008626 isub temp ,null +0x2f7c 008627 nrtn positive +0x2f7d 008628 set0 28 ,pdata +0x2f7e 008629 setarg offset_24g_hop_btclk +0x2f7f 008630 iadd regc ,contw +0x2f80 008631 istore 4 ,contw +: 008633 g24_ch_update: +0x2f81 008634 call g24_ch +0x2f82 008635 call g24_fetch_mem_rf_laststa +0x2f83 008637 increase 1 ,pdata +0x2f84 008638 call g24_store_mem_rf_laststa +0x2f85 008640 rtnne 2 +0x2f86 008641 call g24_set0_mem_rf_laststa +0x2f87 008645 branch g24_set1_mem_abort_pac +: 008647 g24_ch_timer_reinit: +0x2f88 008648 copy clkn_bt ,pdata +0x2f89 008649 arg offset_24g_hop_btclk ,rega +0x2f8a 008650 call g24_set_contw_with_temp +0x2f8b 008651 istore 4 ,contw +0x2f8c 008655 branch g24_set0_mem_rf_laststa +: 008657 g24_noise_rssi: +0x2f8d 008658 arg mem_rssi_noise_buffer ,rega +0x2f8e 008659 call g24_noise_rssi_average +0x2f8f 008660 add regc ,offset_rssi_noise_avg ,contw +0x2f90 008661 istoret 1 ,contw +0x2f91 008663 sub temp ,rssi_thresh_noise ,null +0x2f92 008664 nrtn positive +0x2f93 008665 branch g24_ch +: 008667 g24_noise_rssi_average: +0x2f94 008668 arg rssi_buf_len_noise + 1 ,loopcnt +0x2f95 008669 branch rssi_average +: 008671 g24_blank_data_process: +0x2f96 008672 call g24_ms_blank_data +0x2f97 008673 call g24_kb_blank_data +0x2f98 008674 branch g24_kb_mul_blank_data +: 008676 g24_ms_blank_data: +0x2f99 008677 setarg offset_24g_ms_blank_data_enable +0x2f9a 008678 call g24_set_rega_ifetch_1byte +0x2f9b 008680 rtn blank +0x2f9c 008681 arg timer_ms_blank ,queue +0x2f9d 008682 call timer_check +0x2f9e 008683 nrtn blank +0x2f9f 008684 call g24_set0_mem_ms_blank_data_enable +: 008686 g24_ms_blank_data_2usb: +0x2fa0 008687 setarg ms_report_id +0x2fa1 008688 store 1 ,mem_usb_mouse_data +0x2fa2 008689 setarg 0 +0x2fa3 008690 istore 7 ,contw +0x2fa4 008691 branch g24_data_type1_usbtx_enable +: 008693 g24_kb_blank_data: +0x2fa5 008694 setarg offset_24g_kb_blank_data_enable +0x2fa6 008695 call g24_set_rega_ifetch_1byte +0x2fa7 008697 rtn blank +0x2fa8 008698 arg timer_kb_blank ,queue +0x2fa9 008699 call timer_check +0x2faa 008700 nrtn blank +0x2fab 008701 call g24_set0_mem_kb_blank_data_enable +: 008703 g24_kb_blank_data_2usb: +0x2fac 008704 arg mem_usb_kb_data ,contw +0x2fad 008705 arg 2 ,loopcnt +0x2fae 008706 call memset0 +0x2faf 008707 jam kb_normal_report_id ,mem_usb_kb_data +0x2fb0 008708 branch g24_kb_data_into_ep1_fifo +: 008710 g24_kb_mul_blank_data: +0x2fb1 008711 setarg offset_24g_kb_mul_blank_data_enable +0x2fb2 008712 call g24_set_rega_ifetch_1byte +0x2fb3 008714 rtn blank +0x2fb4 008715 arg timer_kb_mul_blank ,queue +0x2fb5 008716 call timer_check +0x2fb6 008717 nrtn blank +0x2fb7 008718 call g24_set0_mem_kb_mul_blank_data_enable +: 008720 g24_kb_mul_blank_data_2usb: +0x2fb8 008721 arg mem_usb_kb_multikey ,contw +0x2fb9 008722 arg 2 ,loopcnt +0x2fba 008723 call memset0 +0x2fbb 008724 jam kb_multikey_report_id ,mem_usb_kb_multikey +0x2fbc 008725 branch g24_kb_mul_data_into_ep2_fifo +: 008727 g24_dongle_bind_mode: +0x2fbd 008728 call g24_fetch_mem_dongle_work_mode +0x2fbe 008730 rtnne dongle_bind +0x2fbf 008731 call g24_dongle_bind_init +0x2fc0 008732 branch g24_dongle_bind_data_process +: 008734 g24_dongle_bind_init: +0x2fc1 008735 call g24_fetch_mem_dongle_mode_init +0x2fc2 008737 rtnbit1 dongle_bind +0x2fc3 008738 set1 dongle_bind ,pdata +0x2fc4 008739 call g24_store_mem_dongle_mode_init +0x2fc5 008741 call g24_set1_mem_ackpayload_enable +0x2fc6 008743 call g24_pair_init +0x2fc7 008744 setarg 0 +0x2fc8 008745 arg offset_dongle_ms_bind_step ,rega +0x2fc9 008746 call g24_set_contw_with_temp +0x2fca 008748 branch g24_contw_istore_3byte +: 008750 g24_dongle_bind_data_process: +0x2fcb 008751 call g24_receive_transmit_ack +0x2fcc 008752 nbranch g24_rx_interrupt_clear ,user3 +0x2fcd 008753 add regc ,offset_24g_rxbuf ,contr +0x2fce 008754 setarg offset_24g_rxdata_temp +0x2fcf 008755 iadd regc ,contw +0x2fd0 008756 arg 8 ,loopcnt +0x2fd1 008757 call memcpy +0x2fd2 008758 setarg offset_24g_rxdata_temp_add2 +0x2fd3 008759 call g24_set_rega_ifetch_1byte +0x2fd4 008760 beq datatype_bind ,g24_dongle_bind_first_step +0x2fd5 008761 beq datatype_config ,g24_dongle_bind_second_step +0x2fd6 008762 beq datatype_ok ,g24_dongle_bind_third_step +0x2fd7 008763 beq 0xff ,g24_data_attemp +0x2fd8 008764 branch g24_rx_interrupt_clear +: 008766 g24_dongle_bind_first_step: +0x2fd9 008767 call g24_fetch_mem_rxdata_temp_add3_1byte +0x2fda 008768 beq bind_mouse ,g24_dongle_bind_first_step_mouse +0x2fdb 008769 beq bind_keyboard ,g24_dongle_bind_first_step_keyboard +0x2fdc 008770 rtn +: 008771 g24_dongle_bind_first_step_mouse: +0x2fdd 008772 setarg 1 +0x2fde 008773 call g24_store_mem_ms_bind_step +: 008775 g24_dongle_bind_ms_payload_cfg: +0x2fdf 008776 setarg datatype_mouse +0x2fe0 008777 call g24_store_mem_bind_payload +: 008779 g24_dongle_bind_payload_cfg: +0x2fe1 008780 setarg 0x80 +0x2fe2 008781 arg offset_24g_bind_payload_add1 ,rega +0x2fe3 008782 call g24_set_contw_with_regb_store_1byte +0x2fe4 008784 call g24_fetch_mem_rx_addr +0x2fe5 008786 arg offset_24g_bind_payload_add2 ,rega +0x2fe6 008787 call g24_set_contw_with_temp +0x2fe7 008789 branch g24_contw_istore_4byte +: 008791 g24_dongle_bind_first_step_keyboard: +0x2fe8 008792 setarg 1 +0x2fe9 008793 call g24_store_mem_kb_bind_step +: 008795 g24_dongle_bind_kb_payload_cfg: +0x2fea 008796 setarg datatype_keyboard +0x2feb 008797 call g24_store_mem_bind_payload +0x2fec 008799 branch g24_dongle_bind_payload_cfg +: 008801 g24_dongle_bind_second_step: +0x2fed 008802 call g24_fetch_mem_rxdata_temp_add3_1byte +0x2fee 008803 beq bind_mouse ,g24_dongle_bind_second_step_mouse +0x2fef 008804 beq bind_keyboard ,g24_dongle_bind_second_step_keyboard +0x2ff0 008805 rtn +: 008806 g24_dongle_bind_second_step_mouse: +0x2ff1 008807 call g24_dongle_bind_ms_payload_cfg +0x2ff2 008808 setarg offset_dongle_ms_bind_step +0x2ff3 008809 call g24_set_rega_ifetch_1byte +0x2ff4 008811 beq 1 ,g24_dongle_ms_bind_step_set2 +0x2ff5 008812 rtn +: 008813 g24_dongle_ms_bind_step_set2: +0x2ff6 008814 setarg 2 +: 008816 g24_store_mem_ms_bind_step: +0x2ff7 008817 arg offset_dongle_ms_bind_step ,rega +0x2ff8 008818 branch g24_set_contw_with_regb_store_1byte +: 008820 g24_dongle_bind_second_step_keyboard: +0x2ff9 008821 call g24_dongle_bind_kb_payload_cfg +0x2ffa 008822 setarg offset_dongle_kb_bind_step +0x2ffb 008823 call g24_set_rega_ifetch_1byte +0x2ffc 008825 beq 1 ,g24_dongle_kb_bind_step_set2 +0x2ffd 008826 rtn +: 008827 g24_dongle_kb_bind_step_set2: +0x2ffe 008828 setarg 2 +: 008830 g24_store_mem_kb_bind_step: +0x2fff 008831 arg offset_dongle_kb_bind_step ,rega +0x3000 008832 branch g24_set_contw_with_regb_store_1byte +: 008834 g24_dongle_bind_third_step: +0x3001 008835 call g24_fetch_mem_rxdata_temp_add3_1byte +0x3002 008836 beq bind_mouse ,g24_dongle_bind_third_step_mouse +0x3003 008837 beq bind_keyboard ,g24_dongle_bind_third_step_keyboard +0x3004 008838 rtn +: 008839 g24_dongle_bind_third_step_mouse: +0x3005 008840 setarg offset_dongle_ms_bind_step +0x3006 008841 call g24_set_rega_ifetch_1byte +0x3007 008843 beq 2 ,g24_dongle_ms_bind_step_success +0x3008 008844 rtn +: 008845 g24_dongle_ms_bind_step_success: +0x3009 008846 call g24_fetch_mem_bind_device_status +0x300a 008848 or_into 0x01 ,pdata +0x300b 008849 call g24_store_mem_bind_device_status +: 008851 g24_dongle_bind_exit: +0x300c 008852 setarg 0 +0x300d 008853 setarg offset_dongle_ms_bind_step +0x300e 008854 iadd regc ,contw +0x300f 008855 istore 2 ,contw +0x3010 008856 branch g24_rx_interrupt_clear +: 008858 g24_dongle_bind_third_step_keyboard: +0x3011 008859 setarg offset_dongle_kb_bind_step +0x3012 008860 call g24_set_rega_ifetch_1byte +0x3013 008862 bne 0 ,g24_dongle_kb_bind_step_success +0x3014 008863 rtn +: 008864 g24_dongle_kb_bind_step_success: +0x3015 008865 call g24_fetch_mem_bind_device_status +0x3016 008867 or_into 0x02 ,pdata +0x3017 008868 call g24_store_mem_bind_device_status +0x3018 008870 branch g24_dongle_bind_exit +: 008873 dongle_usb_dispatch: +0x3019 008874 fetch 1 ,mem_usb0_get_set_report +0x301a 008875 rtn blank +0x301b 008876 jam 0 ,mem_usb0_get_set_report +0x301c 008877 fetch 2 ,mem_usb_setup_bvalue_temp +0x301d 008878 arg pc_set_report ,temp +0x301e 008879 isub temp ,null +0x301f 008880 nrtn zero +0x3020 008882 fetch 1 ,mem_usb0_set_report_data +0x3021 008883 rtnne pc_report_id +0x3022 008884 fetch 1 ,mem_usb0_set_report_data + 1 +0x3023 008885 bpatch patch17_6 ,mem_patch17 +0x3024 008886 beq command_mode ,dongle_dispose_cmd_mode +0x3025 008887 beq command_bind ,dongle_dispose_cmd_bind +0x3026 008888 beq command_current_project ,dongle_dispose_cmd_current_project +0x3027 008889 beq command_current_mode ,dongle_dispose_cmd_current_mode +0x3028 008890 beq command_current_fw_version ,dongle_dispose_cmd_current_fw_version +0x3029 008891 beq command_user_defined ,dongle_dispose_cmd_user_defined +: 008892 usb0_data_ready_report_set0: +0x302a 008893 jam 0 ,mem_usb0_data_ready_report +0x302b 008894 rtn +: 008895 dongle_dispose_cmd_bind: +0x302c 008896 fetch 1 ,mem_usb0_set_report_data + 2 +0x302d 008897 beq com_bind_get ,dongle_dispose_cmd_get_bind +0x302e 008898 beq com_bind_exit ,dongle_dispose_cmd_exit_bind +0x302f 008899 beq com_read_mode ,dongle_dispose_cmd_read_mode +0x3030 008900 branch usb0_data_ready_report_set0 +: 008901 dongle_dispose_cmd_get_bind: +0x3031 008902 call g24_fetch_mem_bind_device_status +0x3032 008904 store 1 ,mem_usb0_get_report_data + 1 +0x3033 008905 branch usb0_data_ready_report_set1 +: 008906 dongle_dispose_cmd_exit_bind: +0x3034 008907 call g24_set_work_mem_dongle_work_mode +0x3035 008909 call g24_set0_mem_dongle_mode_init +0x3036 008911 call g24_fetch_mem_bind_device_status +0x3037 008913 store 1 ,mem_usb0_get_report_data + 1 +0x3038 008914 branch usb0_data_ready_report_set1 +: 008916 dongle_dispose_cmd_read_mode: +: 008917 dongle_dispose_in_bind_mode: +0x3039 008918 jam command_bind ,mem_usb0_get_report_data + 1 +0x303a 008919 branch usb0_data_ready_report_set1 +: 008921 dongle_dispose_cmd_mode: +0x303b 008922 fetch 1 ,mem_usb0_set_report_data + 2 +0x303c 008923 beq com_mode_bind ,dongle_enter_bind_mode +0x303d 008925 branch usb0_data_ready_report_set0 +: 008926 dongle_enter_bind_mode: +0x303e 008929 call g24_bind_mode_enable +: 008930 usb0_data_ready_report_set1: +0x303f 008931 jam 1 ,mem_usb0_data_ready_report +0x3040 008932 rtn +: 008937 dongle_dispose_cmd_current_project: +0x3041 008938 jam product_id ,mem_usb0_get_report_data + 1 +0x3042 008939 branch usb0_data_ready_report_set1 +: 008941 dongle_dispose_cmd_current_mode: +0x3043 008942 call g24_fetch_mem_dongle_work_mode +0x3044 008944 beq dongle_work ,dongle_dispose_in_work_mode +0x3045 008945 beq dongle_bind ,dongle_dispose_in_bind_mode +0x3046 008947 rtn +: 008948 dongle_dispose_in_work_mode: +0x3047 008949 jam command_mode ,mem_usb0_get_report_data + 1 +0x3048 008950 branch usb0_data_ready_report_set1 +: 008955 dongle_dispose_cmd_current_fw_version: +0x3049 008956 jam fw_version0 ,mem_usb0_get_report_data + 1 +0x304a 008957 jam fw_version1 ,mem_usb0_get_report_data + 2 +0x304b 008958 jam fw_version2 ,mem_usb0_get_report_data + 3 +0x304c 008959 branch usb0_data_ready_report_set1 +: 008961 dongle_dispose_cmd_user_defined: +0x304d 008963 call g24_set1_mem_ackpayload_enable +0x304e 008964 fetch 1 ,mem_usb0_set_report_data + 2 +0x304f 008965 increase 2 ,pdata +0x3050 008966 copy pdata ,loopcnt +0x3051 008967 arg mem_usb0_set_report_data ,contr +0x3052 008968 setarg offset_24g_ackpayload +0x3053 008969 iadd regc ,contw +0x3054 008970 branch memcpy +: 008973 dongle_auto_bind: +0x3055 008974 bpatch patch17_7 ,mem_patch17 +0x3056 008975 call g24_mode_switch_init +: 008976 dongle_auto_bind_loop: +0x3057 008977 call g24_receive_process +0x3058 008978 call usb_isr +0x3059 008979 branch dongle_auto_bind_loop +: 008981 g24_dongle_work_mode_auto: +0x305a 008982 call g24_fetch_mem_dongle_work_mode +0x305b 008984 rtnne dongle_work +0x305c 008985 call g24_dongle_work_mode_start +0x305d 008986 branch g24_rx_nodata_process +: 008988 g24_dongle_bind_mode_auto: +0x305e 008989 call g24_fetch_mem_dongle_work_mode +0x305f 008991 rtnne dongle_bind +0x3060 008992 call g24_dongle_bind_init +0x3061 008993 call g24_dongle_bind_data_process +0x3062 008994 call g24_fetch_mem_bind_device_status +0x3063 008996 rtn blank +0x3064 008997 call g24_set0_mem_mode_switch +0x3065 008999 call dongle_check_mode +0x3066 009000 call g24_enable_nodata_timer +: 009001 g24_timer_init: +0x3067 009002 setarg 0 +0x3068 009003 add regc ,offset_24g_tx_btclk ,contw +0x3069 009005 branch g24_contw_istore_4byte +: 009007 g24_timer_check: +0x306a 009008 call disable_user +0x306b 009009 add regc ,offset_24g_tx_btclk ,rega +0x306c 009010 ifetcht 4 ,rega +0x306d 009012 copy clkn_bt ,pdata +0x306e 009013 isub temp ,null +0x306f 009014 ncall g24_timer_timeout ,positive +0x3070 009015 copy pdata ,regb +0x3071 009016 add regc ,offset_24g_tx_btclk ,rega +0x3072 009017 ifetch 4 ,rega +0x3073 009019 add regc ,offset_24g_interval ,rega +0x3074 009020 ifetcht 1 ,rega +0x3075 009022 iadd temp ,temp +0x3076 009023 copy regb ,pdata +0x3077 009024 isub temp ,null +0x3078 009025 nrtn positive +0x3079 009026 set0 28 ,pdata +0x307a 009027 add regc ,offset_24g_tx_btclk ,contw +0x307b 009028 istore 4 ,contw +0x307c 009030 branch enable_user +: 009032 g24_mode_switch_init: +0x307d 009033 setarg 1 +0x307e 009034 call g24_store_mem_mode_switch +0x307f 009036 call g24_set0_mem_time_slice +0x3080 009038 setarg 0xff +0x3081 009039 add regc ,offset_24g_interval ,contw +0x3082 009040 istore 1 ,contw +0x3083 009042 branch g24_timer_init +: 009044 g24_mode_switch: +0x3084 009045 setarg offset_24g_mode_switch +0x3085 009046 call g24_set_rega_ifetch_1byte +0x3086 009048 rtn blank +0x3087 009049 call g24_timer_check +0x3088 009050 nrtn user +0x3089 009051 call g24_fetch_mem_time_slice +0x308a 009053 increase 1 ,pdata +0x308b 009054 and_into 1 ,pdata +0x308c 009055 call g24_store_mem_time_slice +0x308d 009057 beq 0 ,dongle_check_mode +0x308e 009058 beq 1 ,g24_bind_mode_enable +0x308f 009059 rtn +: 009061 g24_bind_mode_enable: +0x3090 009065 setarg dongle_bind +0x3091 009066 call g24_store_mem_dongle_work_mode +0x3092 009067 branch g24_set0_mem_dongle_mode_init +: 009069 g24_enable_nodata_timer: +0x3093 009070 setarg 1 +0x3094 009071 call g24_store_mem_nodata_timer_enable +: 009073 g24_enable_nodata_timer_init: +0x3095 009074 setarg timer_nodata_delay +0x3096 009075 arg timer_nodata ,queue +0x3097 009076 branch timer_init +: 009078 g24_rx_nodata_process: +0x3098 009079 call g24_fetch_mem_nodata_timer_enable +0x3099 009081 rtn blank +0x309a 009082 arg timer_nodata ,queue +0x309b 009083 call timer_check +0x309c 009084 nrtn blank +0x309d 009085 call g24_set0_mem_nodata_timer_enable +0x309e 009088 setarg dongle_search +0x309f 009089 call g24_store_mem_dongle_work_mode +0x30a0 009091 call g24_set0_mem_dongle_mode_init +0x30a1 009093 branch g24_rx_interrupt_clear +: 009095 g24_dongle_search_mode_auto: +0x30a2 009096 bpatch patch18_0 ,mem_patch18 +0x30a3 009097 call g24_fetch_mem_dongle_work_mode +0x30a4 009099 rtnne dongle_search +0x30a5 009100 call g24_dongle_search_mode_init +0x30a6 009101 call g24_rx_auto_addr_ch_search +0x30a7 009102 call g24_receive_transmit_ack +0x30a8 009103 nbranch g24_rx_interrupt_clear ,user3 +0x30a9 009105 call g24_dongle_search_addr_check +0x30aa 009106 call g24_receive_packet_parse ,zero +0x30ab 009110 call dongle_check_mode +0x30ac 009111 call g24_fetch_mem_dongle_mode_init +0x30ad 009113 set1 dongle_work ,pdata +0x30ae 009114 call g24_store_mem_dongle_mode_init +0x30af 009116 call g24_rx_interrupt_clear +0x30b0 009117 call g24_enable_nodata_timer +0x30b1 009118 call g24_dongle_search_addr_check +0x30b2 009119 branch g24_dg_ch_num_reinit ,zero +0x30b3 009120 setarg offset_24g_kb_addr +0x30b4 009121 call g24_set_rega_ifetcht_4byte +0x30b5 009123 call g24_fetch_mem_addr_isub_temp +0x30b6 009124 branch g24_kb_ch_num_reinit ,zero +0x30b7 009125 setarg offset_24g_mouse_addr +0x30b8 009126 call g24_set_rega_ifetcht_4byte +0x30b9 009128 call g24_fetch_mem_addr_isub_temp +0x30ba 009129 branch g24_ms_ch_num_reinit ,zero +0x30bb 009130 rtn +: 009132 g24_dongle_search_addr_check: +0x30bc 009133 setarg offset_24g_rx_addr +0x30bd 009134 call g24_set_rega_ifetcht_4byte +: 009136 g24_fetch_mem_addr_isub_temp: +0x30be 009137 call g24_fetch_mem_addr +0x30bf 009139 isub temp ,null +0x30c0 009140 rtn +: 009142 g24_dg_ch_num_reinit: +0x30c1 009143 setarg offset_24g_dg_ch_number +0x30c2 009144 call g24_set_rega_ifetch_1byte +: 009146 g24_current_ch_num_reinit: +0x30c3 009148 add regc ,offset_24g_current_ch_number ,contw +0x30c4 009149 branch g24_contw_istore_1byte +: 009151 g24_kb_ch_num_reinit: +0x30c5 009152 setarg offset_24g_kb_ch_number +0x30c6 009153 call g24_set_rega_ifetch_1byte +0x30c7 009155 branch g24_current_ch_num_reinit +: 009156 g24_ms_ch_num_reinit: +0x30c8 009157 setarg offset_24g_ms_ch_number +0x30c9 009158 call g24_set_rega_ifetch_1byte +0x30ca 009160 branch g24_current_ch_num_reinit +: 009162 g24_dongle_search_mode_init: +0x30cb 009163 call g24_fetch_mem_dongle_mode_init +0x30cc 009165 rtnbit1 dongle_search +0x30cd 009166 set1 dongle_search ,pdata +0x30ce 009167 call g24_store_mem_dongle_mode_init +0x30cf 009169 call g24_set0_mem_time_slice +0x30d0 009171 call g24_set1_mem_ackpayload_enable +0x30d1 009173 setarg 0 +0x30d2 009174 add regc ,offset_rssi_noise_dg_index ,contw +0x30d3 009175 istore 3 ,contw +0x30d4 009177 arg offset_24g_dg_config_ch_once ,rega +0x30d5 009178 call g24_set_contw_with_temp +0x30d6 009179 istore 7 ,contw +0x30d7 009182 call g24_dongle_search_addr_check +0x30d8 009183 nrtn zero +0x30d9 009184 add regc ,offset_24g_current_ch_number ,rega +0x30da 009185 ifetch 1 ,rega +0x30db 009187 arg offset_24g_dg_ch_number ,rega +0x30dc 009188 call g24_set_contw_with_regb_store_1byte +0x30dd 009190 add regc ,offset_24g_ch ,rega +0x30de 009191 ifetch 1 ,rega +0x30df 009194 branch g24_store_mem_dg_last_ch +: 009196 g24_rx_auto_addr_ch_search: +0x30e0 009197 bpatch patch18_1 ,mem_patch18 +0x30e1 009198 call g24_fetch_mem_time_slice +0x30e2 009200 increase 1 ,pdata +0x30e3 009201 and_into 3 ,pdata +0x30e4 009202 call g24_store_mem_time_slice +0x30e5 009205 beq 0 ,g24_rx_auto_bind_config_kb +0x30e6 009206 beq 1 ,g24_rx_auto_bind_config_dongle +0x30e7 009207 beq 2 ,g24_rx_auto_bind_config_mouse +0x30e8 009208 beq 3 ,g24_rx_auto_bind_config_dongle +0x30e9 009209 rtn +: 009211 g24_rx_auto_bind_config_mouse: +0x30ea 009212 call g24_dongle_bind_ms_payload_cfg +0x30eb 009213 setarg offset_24g_mouse_addr +0x30ec 009214 call g24_set_rega_ifetch_4byte +0x30ed 009216 branch g24_rx_auto_addr_ch_search ,blank +0x30ee 009217 call g24_store_mem_addr +0x30ef 009219 setarg offset_24g_ms_config_ch_once +0x30f0 009220 call g24_set_rega_ifetch_1byte +0x30f1 009222 call g24_ms_config_ch_once ,blank +0x30f2 009223 setarg offset_24g_ms_last_ch +0x30f3 009224 call g24_set_rega_ifetch_1byte +0x30f4 009226 call g24_store_mem_ch +0x30f5 009228 add regc ,offset_rssi_noise_ms_index ,rega +0x30f6 009229 ifetcht 1 ,rega +0x30f7 009231 arg mem_rssi_noise_ms_buffer ,rega +0x30f8 009232 call rssi_noise_store +0x30f9 009233 add regc ,offset_rssi_noise_ms_index ,contw +0x30fa 009234 istoret 1 ,contw +0x30fb 009236 call g24_noise_rssi_average +0x30fc 009237 add regc ,offset_rssi_noise_ms_avg ,contw +0x30fd 009238 istoret 1 ,contw +0x30fe 009240 sub temp ,rssi_thresh_noise ,null +0x30ff 009241 nrtn positive +0x3100 009242 setarg offset_24g_ms_ch_number +0x3101 009243 call g24_set_rega_ifetcht_1byte +0x3102 009245 call g24_ch_temp_incre_size4 +0x3103 009246 arg offset_24g_ms_ch_number ,rega +0x3104 009247 call g24_set_contw_with_regb2 +0x3105 009248 istoret 1 ,contw +: 009250 g24_store_mem_ms_last_ch: +0x3106 009252 arg offset_24g_ms_last_ch ,rega +0x3107 009253 branch g24_set_contw_with_regb_store_1byte +: 009255 g24_ms_config_ch_once: +0x3108 009256 setarg 1 +0x3109 009257 arg offset_24g_ms_config_ch_once ,rega +0x310a 009258 call g24_set_contw_with_regb_store_1byte +0x310b 009260 arg 0 ,temp +0x310c 009261 call g24_ch_calc +0x310d 009264 branch g24_store_mem_ms_last_ch +: 009266 g24_rx_auto_bind_config_kb: +0x310e 009267 call g24_dongle_bind_kb_payload_cfg +0x310f 009268 setarg offset_24g_kb_addr +0x3110 009269 call g24_set_rega_ifetch_4byte +0x3111 009271 branch g24_rx_auto_addr_ch_search ,blank +0x3112 009272 call g24_store_mem_addr +0x3113 009274 setarg offset_24g_kb_config_ch_once +0x3114 009275 call g24_set_rega_ifetch_1byte +0x3115 009277 call g24_kb_config_ch_once ,blank +0x3116 009278 setarg offset_24g_kb_last_ch +0x3117 009279 call g24_set_rega_ifetch_1byte +0x3118 009281 call g24_store_mem_ch +0x3119 009283 add regc ,offset_rssi_noise_kb_index ,rega +0x311a 009284 ifetcht 1 ,rega +0x311b 009286 arg mem_rssi_noise_kb_buffer ,rega +0x311c 009287 call rssi_noise_store +0x311d 009288 add regc ,offset_rssi_noise_kb_index ,contw +0x311e 009289 istoret 1 ,contw +0x311f 009291 call g24_noise_rssi_average +0x3120 009292 add regc ,offset_rssi_noise_kb_avg ,contw +0x3121 009293 istoret 1 ,contw +0x3122 009295 sub temp ,rssi_thresh_noise ,null +0x3123 009296 nrtn positive +0x3124 009297 setarg offset_24g_kb_ch_number +0x3125 009298 call g24_set_rega_ifetcht_1byte +0x3126 009300 call g24_ch_temp_incre_size4 +0x3127 009301 arg offset_24g_kb_ch_number ,rega +0x3128 009302 call g24_set_contw_with_regb2 +0x3129 009303 istoret 1 ,contw +: 009305 g24_store_mem_kb_last_ch: +0x312a 009307 arg offset_24g_kb_last_ch ,rega +0x312b 009308 branch g24_set_contw_with_regb_store_1byte +: 009310 g24_kb_config_ch_once: +0x312c 009311 setarg 1 +0x312d 009312 arg offset_24g_kb_config_ch_once ,rega +0x312e 009313 call g24_set_contw_with_regb_store_1byte +0x312f 009315 arg 0 ,temp +0x3130 009316 call g24_ch_calc +0x3131 009319 branch g24_store_mem_kb_last_ch +: 009321 g24_rx_auto_bind_config_dongle: +0x3132 009322 call g24_dongle_bind_ms_payload_cfg +0x3133 009323 call g24_fetch_mem_rx_addr +0x3134 009325 call g24_store_mem_addr +0x3135 009327 setarg offset_24g_dg_config_ch_once +0x3136 009328 call g24_set_rega_ifetch_1byte +0x3137 009330 call g24_dg_config_ch_once ,blank +0x3138 009331 call g24_dg_store_config_ch +0x3139 009332 add regc ,offset_rssi_noise_dg_index ,rega +0x313a 009333 ifetcht 1 ,rega +0x313b 009335 arg mem_rssi_noise_dg_buffer ,rega +0x313c 009336 call rssi_noise_store +0x313d 009337 add regc ,offset_rssi_noise_dg_index ,contw +0x313e 009338 istoret 1 ,contw +0x313f 009340 call g24_noise_rssi_average +0x3140 009341 add regc ,offset_rssi_noise_dg_avg ,contw +0x3141 009342 istoret 1 ,contw +0x3142 009344 sub temp ,rssi_thresh_noise ,null +0x3143 009345 nrtn positive +0x3144 009346 setarg offset_24g_dg_ch_number +0x3145 009347 call g24_set_rega_ifetcht_1byte +0x3146 009349 call g24_ch_temp_incre_size4 +0x3147 009350 arg offset_24g_dg_ch_number ,rega +0x3148 009351 call g24_set_contw_with_regb2 +0x3149 009352 istoret 1 ,contw +: 009354 g24_store_mem_dg_last_ch: +0x314a 009357 arg offset_24g_dg_last_ch ,rega +0x314b 009358 branch g24_set_contw_with_regb_store_1byte +: 009361 g24_dg_config_ch_once: +0x314c 009366 setarg 1 +0x314d 009367 arg offset_24g_dg_config_ch_once ,rega +0x314e 009368 call g24_set_contw_with_regb_store_1byte +: 009369 g24_dg_store_config_ch: +0x314f 009370 setarg offset_24g_dg_last_ch +0x3150 009371 call g24_set_rega_ifetch_1byte +0x3151 009372 branch g24_store_mem_ch +: 009375 g24_transmit_ack: +0x3152 009377 add regc ,offset_24g_rxbuf ,rega +0x3153 009378 ifetch 1 ,rega +0x3154 009380 call g24_store_mem_data_type +0x3155 009383 call g24_read_len_pid_crc +0x3156 009385 call g24_fetch_mem_rxbuf_add1 +0x3157 009387 isolate1 bit_ack_24g ,pdata +0x3158 009388 branch g24tx_no_ack ,true +: 009389 g24tx_with_ack: +0x3159 009390 call g24_ackpayload_prep +0x315a 009391 call g24_transmit_prep +0x315b 009392 call g24_transmit +: 009393 g24tx_no_ack: +0x315c 009394 branch g24_end_of_packet +: 009396 g24_ackpayload_prep: +0x315d 009397 bpatch patch18_2 ,mem_patch18 +0x315e 009398 add regc ,offset_24g_datalen ,contw +0x315f 009399 call g24_mem_set0 +0x3160 009401 setarg offset_24g_ackpayload_enable +0x3161 009402 call g24_set_rega_ifetch_1byte +0x3162 009404 rtn blank +0x3163 009405 setarg 0x06 +0x3164 009406 add regc ,offset_24g_datalen ,contw +0x3165 009407 istore 1 ,contw +0x3166 009409 arg 0x06 ,loopcnt +0x3167 009410 setarg offset_24g_bind_payload +0x3168 009411 iadd regc ,contr +0x3169 009413 add regc ,offset_24g_txbuf ,contw +0x316a 009415 branch memcpy +: 009418 g24_receive_packet_start: +0x316b 009419 call g24_receive_transmit_ack +0x316c 009420 nbranch g24_rx_interrupt_clear ,user3 +0x316d 009421 branch g24_receive_packet_parse +: 009423 g24_receive_transmit_ack: +0x316e 009424 call g24_rx_interrupt_clear +0x316f 009425 call g24_receive_packet +0x3170 009426 nrtn user3 +0x3171 009427 branch g24_transmit_ack +: 009429 g24_receive_packet_parse: +0x3172 009430 bpatch patch18_3 ,mem_patch18 +0x3173 009431 call g24_receive_packet_parse_pid_crc +0x3174 009432 nbranch g24_rx_interrupt_clear ,user +0x3175 009433 add regc ,offset_24g_rxdata_length ,rega +0x3176 009434 ifetch 1 ,rega +0x3177 009436 branch g24_rx_interrupt_clear ,blank +0x3178 009437 increase 2 ,pdata +0x3179 009438 iforce loopcnt +0x317a 009439 add regc ,offset_24g_rxbuf ,contr +0x317b 009441 setarg offset_24g_rxdata_temp +0x317c 009442 iadd regc ,contw +0x317d 009444 call memcpy +0x317e 009445 call g24_set0_mem_mode_switch +0x317f 009447 call g24_fetch_mem_pair_mode +0x3180 009449 call g24_enable_nodata_timer ,blank +0x3181 009450 setarg offset_24g_rxdata_temp_add2 +0x3182 009451 call g24_set_rega_ifetch_1byte +0x3183 009453 beq 0x01 ,g24_data_type1 +0x3184 009454 beq 0x02 ,g24_data_type2 +0x3185 009455 beq 0x03 ,g24_data_type3 +0x3186 009456 beq 0xff ,g24_data_attemp +0x3187 009457 branch g24_rx_interrupt_clear +: 009459 g24_receive_packet_parse_pid_crc: +0x3188 009460 call g24_head_ptr2regc +0x3189 009461 call disable_user +0x318a 009462 add regc ,offset_24g_sta_pid ,rega +0x318b 009463 ifetch 1 ,rega +0x318c 009465 add regc ,offset_24g_last_pid ,rega +0x318d 009466 ifetcht 1 ,rega +0x318e 009468 isub temp ,null +0x318f 009469 ncall enable_user ,zero +0x3190 009470 add regc ,offset_24g_sta_pid ,rega +0x3191 009471 ifetch 1 ,rega +0x3192 009473 add regc ,offset_24g_last_pid ,contw +0x3193 009474 istore 1 ,contw +0x3194 009476 add regc ,offset_24g_sta_crc ,rega +0x3195 009477 ifetch 3 ,rega +0x3196 009479 add regc ,offset_24g_last_crc ,rega +0x3197 009480 ifetcht 3 ,rega +0x3198 009482 isub temp ,null +0x3199 009483 ncall enable_user ,zero +0x319a 009484 add regc ,offset_24g_sta_crc ,rega +0x319b 009485 ifetch 3 ,rega +0x319c 009487 add regc ,offset_24g_last_crc ,contw +0x319d 009489 branch g24_contw_istore_3byte +: 009491 g24_data_type1: +0x319e 009492 call g24_ch_timer_reinit +0x319f 009493 call g24_fetch_mem_abort_pac +0x31a0 009494 store 1 ,mem_temp +0x31a1 009496 call g24_fetcht_mem_rxdata_temp +0x31a2 009497 fetch 1 ,mem_temp +0x31a3 009499 isolate1 bit_abort ,temp +0x31a4 009500 setflag true ,0 ,pdata +0x31a5 009501 add regc ,offset_24g_abort_pac ,contw +0x31a6 009502 istore 1 ,contw +0x31a7 009504 beq 1 ,g24_data_attemp_mouse +0x31a8 009505 call g24_fetch_mem_hop_pac +0x31a9 009507 call g24_fetcht_mem_rxdata_temp +0x31aa 009509 isolate1 bit_hop ,temp +0x31ab 009510 setflag true ,0 ,pdata +0x31ac 009511 call g24_store_mem_hop_pac +0x31ad 009513 add regc ,offset_24g_cb_rxdata_type1 ,rega +0x31ae 009514 ifetch 2 ,rega +0x31af 009516 branch callback_func +: 009518 dongle_rxdata_type1: +0x31b0 009519 setarg ms_report_id +0x31b1 009520 store 1 ,mem_usb_mouse_data +0x31b2 009521 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b3 009523 istore 7 ,contw +0x31b4 009524 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b5 009526 ncall g24_ms_enable_blank_data_forcibly ,blank +0x31b6 009527 call g24_fetch_mem_rxdata_temp_add3_7byte +0x31b7 009529 call g24_ms_disable_blank_data_forcibly ,blank +: 009530 g24_data_type1_usbtx_enable: +0x31b8 009531 jam usb_ep2_ms ,mem_usb_ep2_data +: 009532 g24_data_type1_usbtx_enable_ep2: +0x31b9 009533 fetch 1 ,mem_usb_tx_enable +0x31ba 009534 set1 2 ,pdata +0x31bb 009535 store 1 ,mem_usb_tx_enable +0x31bc 009536 rtn +: 009538 g24_ms_enable_blank_data_forcibly: +0x31bd 009539 setarg 1 +0x31be 009540 call g24_store_mem_ms_blank_data_enable +: 009542 g24_ms_enable_blank_data_timer: +0x31bf 009543 setarg timer_ms_blank_delay +0x31c0 009544 arg timer_ms_blank ,queue +0x31c1 009545 branch timer_init +: 009546 g24_ms_disable_blank_data_forcibly: +0x31c2 009547 call g24_set0_mem_ms_blank_data_enable +: 009549 g24_ms_disable_blank_data_timer: +0x31c3 009550 setarg 0 +0x31c4 009551 arg timer_ms_blank ,queue +0x31c5 009552 branch timer_init +: 009554 g24_data_type2: +0x31c6 009555 call g24_fetcht_mem_rxdata_temp +0x31c7 009557 isolate1 bit_abort ,temp +0x31c8 009558 branch g24_data_attemp_kbd ,true +0x31c9 009559 arg mem_usb_kb_data ,contw +0x31ca 009560 call g24_data_type2_reverse_data +0x31cb 009561 fetch 8 ,mem_usb_kb_data +0x31cc 009562 ncall g24_kb_enable_blank_data_forcibly ,blank +0x31cd 009563 fetch 8 ,mem_usb_kb_data +0x31ce 009564 call g24_kb_disable_blank_data_forcibly ,blank +0x31cf 009565 call g24_head_ptr2regc +0x31d0 009566 fetch 8 ,mem_usb_kb_data +0x31d1 009567 arg offset_24g_kb_data_sta_data ,rega +0x31d2 009568 call g24_set_contw_with_temp +0x31d3 009569 istore 8 ,contw +0x31d4 009571 setarg offset_24g_kb_data_last_data +0x31d5 009572 iadd regc ,rega +0x31d6 009573 ifetcht 8 ,rega +0x31d7 009575 isub temp ,null +0x31d8 009576 ncall g24_kb_data_dispose ,zero +0x31d9 009577 setarg offset_24g_kb_data_sta_data +0x31da 009578 iadd regc ,rega +0x31db 009579 ifetch 8 ,rega +0x31dc 009581 arg offset_24g_kb_data_last_data ,rega +0x31dd 009582 call g24_set_contw_with_temp +0x31de 009583 istore 8 ,contw +0x31df 009585 branch g24_rx_interrupt_clear +: 009587 g24_data_type2_reverse_data: +0x31e0 009588 setarg offset_24g_rxdata_temp_add2 +0x31e1 009589 iadd regc ,contr +0x31e2 009591 arg 9 ,loopcnt +0x31e3 009592 branch reverse_byte +: 009594 g24_kb_enable_blank_data_forcibly: +0x31e4 009595 setarg 1 +0x31e5 009596 call g24_store_mem_kb_blank_data_enable +: 009598 g24_kb_enable_blank_data_timer: +0x31e6 009599 setarg timer_kb_blank_delay +0x31e7 009600 arg timer_kb_blank ,queue +0x31e8 009601 branch timer_init +: 009603 g24_kb_disable_blank_data_forcibly: +0x31e9 009604 call g24_set0_mem_kb_blank_data_enable +: 009606 g24_kb_disable_blank_data_timer: +0x31ea 009607 setarg 0 +0x31eb 009608 arg timer_kb_blank ,queue +0x31ec 009609 branch timer_init +: 009611 g24_kb_data_dispose: +: 009612 g24_kb_data_into_ep1_fifo: +0x31ed 009613 jam usb_ep1_kb ,mem_usb_ep1_data +0x31ee 009614 fetch 1 ,mem_usb_tx_enable +0x31ef 009615 set1 1 ,pdata +0x31f0 009616 store 1 ,mem_usb_tx_enable +0x31f1 009617 rtn +: 009619 g24_data_type3: +0x31f2 009620 arg mem_usb_kb_multikey ,contw +0x31f3 009621 call g24_data_type2_reverse_data +0x31f4 009622 fetch 2 ,mem_usb_kb_multikey + 1 +0x31f5 009623 ncall g24_kb_mul_enable_blank_data_forcibly ,blank +0x31f6 009624 fetch 2 ,mem_usb_kb_multikey + 1 +0x31f7 009625 call g24_kb_mul_disable_blank_data_forcibly ,blank +0x31f8 009626 call g24_head_ptr2regc +0x31f9 009627 fetch 3 ,mem_usb_kb_multikey +0x31fa 009628 arg offset_24g_kb_multikey_sta_data ,rega +0x31fb 009629 call g24_set_contw_with_temp_store_3byte +0x31fc 009631 setarg offset_24g_kb_multikey_last_data +0x31fd 009632 iadd regc ,rega +0x31fe 009633 ifetcht 3 ,rega +0x31ff 009635 isub temp ,null +0x3200 009636 ncall g24_kb_mul_data_into_ep2_fifo ,zero +0x3201 009637 setarg offset_24g_kb_multikey_sta_data +0x3202 009638 iadd regc ,rega +0x3203 009639 ifetch 3 ,rega +0x3204 009641 arg offset_24g_kb_multikey_last_data ,rega +0x3205 009642 call g24_set_contw_with_temp_store_3byte +0x3206 009644 branch g24_rx_interrupt_clear +: 009646 g24_kb_mul_data_into_ep2_fifo: +0x3207 009647 jam usb_ep2_multikey ,mem_usb_ep2_data +0x3208 009648 branch g24_data_type1_usbtx_enable_ep2 +: 009650 g24_kb_mul_enable_blank_data_forcibly: +0x3209 009651 setarg 1 +0x320a 009652 call g24_store_mem_kb_mul_blank_data_enable +: 009654 g24_kb_mul_enable_blank_data_timer: +0x320b 009655 setarg timer_kb_mul_blank_delay +0x320c 009656 arg timer_kb_mul_blank ,queue +0x320d 009657 branch timer_init +: 009659 g24_kb_mul_disable_blank_data_forcibly: +0x320e 009660 call g24_set0_mem_kb_mul_blank_data_enable +: 009662 g24_kb_mul_disable_blank_data_timer: +0x320f 009663 setarg 0 +0x3210 009664 arg timer_kb_mul_blank ,queue +0x3211 009665 branch timer_init +: 009667 g24_data_attemp: +0x3212 009668 call g24_fetch_mem_rxdata_temp_add3_1byte +0x3213 009670 beq datatype_mouse ,g24_data_attemp_mouse +0x3214 009671 beq datatype_keyboard ,g24_data_attemp_kbd +0x3215 009672 rtn +: 009673 g24_data_attemp_mouse: +0x3216 009674 setarg offset_24g_rxdata_temp_add4 +0x3217 009675 call g24_set_rega_ifetch_4byte +0x3218 009676 arg offset_24g_mouse_addr ,rega +0x3219 009677 call g24_set_contw_with_temp +0x321a 009680 branch g24_contw_istore_4byte +: 009682 g24_data_attemp_kbd: +0x321b 009683 setarg offset_24g_rxdata_temp_add4 +0x321c 009684 call g24_set_rega_ifetch_4byte +0x321d 009685 arg offset_24g_kb_addr ,rega +0x321e 009686 call g24_set_contw_with_temp +0x321f 009689 branch g24_contw_istore_4byte +: 009691 g24_store_mem_24g_mode: +0x3220 009692 call g24_head_ptr2regc +0x3221 009693 add regc ,offset_24g_mode ,contw +0x3222 009694 istore 1 ,contw +0x3223 009695 rtn +: 009697 g24_fetch_mem_device_addr: +0x3224 009698 call g24_head_ptr2regc +0x3225 009699 add regc ,offset_24g_device_addr ,rega +0x3226 009700 branch g24_rega_ifetch_4byte +: 009701 g24_store_mem_device_addr: +0x3227 009702 call g24_head_ptr2regc +0x3228 009703 add regc ,offset_24g_device_addr ,contw +0x3229 009704 branch g24_contw_istore_4byte +: 009706 g24_fetch_mem_addr: +0x322a 009707 add regc ,offset_24g_addr ,rega +0x322b 009708 branch g24_rega_ifetch_4byte +: 009709 g24_store_mem_addr: +0x322c 009710 add regc ,offset_24g_addr ,contw +: 009711 g24_contw_istore_4byte: +0x322d 009712 istore 4 ,contw +0x322e 009713 rtn +: 009715 g24_store_mem_ch: +0x322f 009716 add regc ,offset_24g_ch ,contw +0x3230 009717 branch g24_contw_istore_1byte +: 009719 g24_set0_mem_pid: +0x3231 009720 setarg 0 +: 009721 g24_store_mem_pid: +0x3232 009722 call g24_head_ptr2regc +0x3233 009723 add regc ,offset_24g_pid ,contw +0x3234 009724 branch g24_contw_istore_1byte +: 009726 g24_store_mem_txpayload: +0x3235 009727 add regc ,offset_24g_txpayload ,contw +0x3236 009728 branch g24_contw_istore_1byte +: 009730 g24_set4_mem_max_retry: +0x3237 009731 setarg 4 +: 009732 g24_store_mem_max_retry: +0x3238 009733 add regc ,offset_24g_max_retry ,contw +0x3239 009734 branch g24_contw_istore_1byte +: 009736 g24_fetch_mem_data_type: +0x323a 009737 add regc ,offset_24g_data_type ,rega +0x323b 009738 branch g24_rega_ifetch_1byte +: 009739 g24_store_mem_data_type: +0x323c 009740 add regc ,offset_24g_data_type ,contw +0x323d 009741 branch g24_contw_istore_1byte +: 009743 g24_set2_mem_sync_cnt: +0x323e 009744 setarg 2 +: 009745 g24_store_mem_sync_cnt: +0x323f 009746 add regc ,offset_24g_sync_cnt ,contw +0x3240 009747 branch g24_contw_istore_1byte +: 009749 g24_set1_mem_rf_last_sta: +0x3241 009750 setarg 1 +: 009751 g24_store_mem_rf_last_sta: +0x3242 009752 call g24_head_ptr2regc +0x3243 009753 add regc ,offset_24g_rf_last_sta ,contw +0x3244 009754 branch g24_contw_istore_1byte +: 009756 g24_fetch_mem_hop_pac: +0x3245 009757 call g24_head_ptr2regc +0x3246 009758 add regc ,offset_24g_hop_pac ,rega +0x3247 009759 branch g24_rega_ifetch_1byte +: 009760 g24_set1_mem_hop_pac: +0x3248 009761 setarg 1 +: 009762 g24_store_mem_hop_pac: +0x3249 009763 call g24_head_ptr2regc +0x324a 009764 add regc ,offset_24g_hop_pac ,contw +0x324b 009765 branch g24_contw_istore_1byte +: 009767 g24_fetch_mem_abort_pac: +0x324c 009768 call g24_head_ptr2regc +0x324d 009769 add regc ,offset_24g_abort_pac ,rega +0x324e 009770 branch g24_rega_ifetch_1byte +: 009771 g24_set1_mem_abort_pac: +0x324f 009772 setarg 1 +: 009773 g24_store_mem_abort_pac: +0x3250 009774 call g24_head_ptr2regc +0x3251 009775 add regc ,offset_24g_abort_pac ,contw +0x3252 009776 branch g24_contw_istore_1byte +: 009778 g24_fetch_mem_pairing_sm: +0x3253 009779 call g24_head_ptr2regc +0x3254 009780 add regc ,offset_24g_pairing_sm ,rega +0x3255 009781 branch g24_rega_ifetch_1byte +: 009782 g24_store_mem_pairing_sm: +0x3256 009783 add regc ,offset_24g_pairing_sm ,contw +0x3257 009784 branch g24_contw_istore_1byte +: 009786 g24_fetch_mem_rf_hop_ch: +0x3258 009787 add regc ,offset_24g_rf_hop_ch ,rega +0x3259 009788 branch g24_rega_ifetch_1byte +: 009789 g24_set0_mem_rf_hop_ch: +0x325a 009790 setarg 0 +: 009791 g24_store_mem_rf_hop_ch: +0x325b 009792 add regc ,offset_24g_rf_hop_ch ,contw +0x325c 009793 branch g24_contw_istore_1byte +: 009795 g24_fetch_mem_rf_work_stage: +0x325d 009796 add regc ,offset_24g_rf_work_stage ,rega +0x325e 009797 branch g24_rega_ifetch_1byte +: 009799 g24_fetch_mem_rxbuf_add1: +0x325f 009800 add regc ,offset_24g_rxbuf_add1 ,rega +0x3260 009801 branch g24_rega_ifetch_1byte +: 009803 g24_fetch_mem_check_dongle_times: +0x3261 009804 add regc ,offset_24g_check_dongle_times ,rega +0x3262 009805 branch g24_rega_ifetch_1byte +: 009806 g24_set0_mem_check_dongle_times: +0x3263 009807 setarg 0 +: 009808 g24_store_mem_check_dongle_times: +0x3264 009809 call g24_head_ptr2regc +0x3265 009810 add regc ,offset_24g_check_dongle_times ,contw +0x3266 009811 branch g24_contw_istore_1byte +: 009813 g24_store_mem_tx_power: +0x3267 009814 call g24_head_ptr2regc +0x3268 009815 add regc ,offset_tx_power_temp ,rega +0x3269 009816 ifetch 1 ,rega +: 009817 g24_store_mem_txpower: +0x326a 009818 store 1 ,mem_tx_power +0x326b 009819 rtn +: 009821 g24_store_mem_tx_power_temp: +0x326c 009822 call g24_head_ptr2regc +0x326d 009823 fetch 1 ,mem_tx_power +0x326e 009825 add regc ,offset_tx_power_temp ,contw +0x326f 009826 branch g24_contw_istore_1byte +: 009828 g24_fetch_mem_power_ctrl_pac: +0x3270 009829 add regc ,offset_power_ctrl_packet_cnt ,rega +0x3271 009830 branch g24_rega_ifetch_1byte +: 009832 g24_store_mem_power_ctrl_level: +0x3272 009833 add regc ,offset_power_ctrl_level ,contw +0x3273 009834 branch g24_contw_istore_1byte +: 009836 g24_fetcht_mem_rxdata_temp: +0x3274 009837 setarg offset_24g_rxdata_temp +: 009838 g24_set_rega_ifetcht_1byte: +0x3275 009839 iadd regc ,rega +0x3276 009840 ifetcht 1 ,rega +0x3277 009841 rtn +: 009843 g24_fetch_mem_rf_laststa: +0x3278 009844 setarg offset_24g_rf_laststa +0x3279 009845 branch g24_set_rega_ifetch_1byte +: 009846 g24_set0_mem_rf_laststa: +0x327a 009847 setarg 0 +: 009848 g24_store_mem_rf_laststa: +0x327b 009849 arg offset_24g_rf_laststa ,rega +0x327c 009850 branch g24_set_contw_with_regb_store_1byte +: 009852 g24_fetch_mem_rx_addr: +0x327d 009853 setarg offset_24g_rx_addr +: 009854 g24_set_rega_ifetch_4byte: +0x327e 009855 call g24_set_rega +: 009856 g24_rega_ifetch_4byte: +0x327f 009857 ifetch 4 ,rega +0x3280 009858 rtn +: 009860 g24_fetch_mem_time_slice: +0x3281 009861 setarg offset_24g_time_slice +0x3282 009862 branch g24_set_rega_ifetch_1byte +: 009863 g24_set0_mem_time_slice: +0x3283 009864 setarg 0 +: 009865 g24_store_mem_time_slice: +0x3284 009866 arg offset_24g_time_slice ,rega +0x3285 009867 branch g24_set_contw_with_regb_store_1byte +: 009869 g24_set0_mem_mode_switch: +0x3286 009870 setarg 0 +: 009871 g24_store_mem_mode_switch: +0x3287 009872 arg offset_24g_mode_switch ,rega +0x3288 009873 branch g24_set_contw_with_regb_store_1byte +: 009875 g24_store_mem_bind_payload: +0x3289 009876 arg offset_24g_bind_payload ,rega +0x328a 009877 branch g24_set_contw_with_regb_store_1byte +: 009879 g24_fetch_mem_bind_device_status: +0x328b 009880 setarg offset_dongle_bind_device_status +0x328c 009881 branch g24_set_rega_ifetch_1byte +: 009882 g24_store_mem_bind_device_status: +0x328d 009883 arg offset_dongle_bind_device_status ,rega +0x328e 009884 branch g24_set_contw_with_regb_store_1byte +: 009886 g24_fetch_mem_dongle_work_mode: +0x328f 009887 setarg offset_dongle_work_mode +0x3290 009888 branch g24_set_rega_ifetch_1byte +: 009889 g24_set_work_mem_dongle_work_mode: +0x3291 009890 setarg dongle_work +: 009891 g24_store_mem_dongle_work_mode: +0x3292 009892 arg offset_dongle_work_mode ,rega +0x3293 009893 branch g24_set_contw_with_regb_store_1byte +: 009895 g24_fetch_mem_dongle_mode_init: +0x3294 009896 setarg offset_dongle_mode_init +0x3295 009897 branch g24_set_rega_ifetch_1byte +: 009898 g24_set0_mem_dongle_mode_init: +0x3296 009899 setarg clear_init +: 009900 g24_store_mem_dongle_mode_init: +0x3297 009901 arg offset_dongle_mode_init ,rega +0x3298 009902 branch g24_set_contw_with_regb_store_1byte +: 009904 g24_set0_mem_ackpayload_enable: +0x3299 009905 setarg 0 +: 009906 g24_store_mem_ackpayload_enable: +0x329a 009907 arg offset_24g_ackpayload_enable ,rega +0x329b 009908 branch g24_set_contw_with_regb_store_1byte +: 009909 g24_set1_mem_ackpayload_enable: +0x329c 009910 setarg 1 +0x329d 009911 branch g24_store_mem_ackpayload_enable +: 009913 g24_fetch_mem_rxdata_temp_add3_7byte: +0x329e 009914 setarg offset_24g_rxdata_temp_add3 +0x329f 009915 call g24_set_rega +0x32a0 009916 ifetch 7 ,rega +0x32a1 009917 rtn +: 009919 g24_fetch_mem_nodata_timer_enable: +0x32a2 009920 setarg offset_24g_nodata_timer_enable +0x32a3 009921 branch g24_set_rega_ifetch_1byte +: 009922 g24_set0_mem_nodata_timer_enable: +0x32a4 009923 setarg 0 +: 009924 g24_store_mem_nodata_timer_enable: +0x32a5 009925 arg offset_24g_nodata_timer_enable ,rega +0x32a6 009926 branch g24_set_contw_with_regb_store_1byte +: 009928 g24_set0_mem_ms_blank_data_enable: +0x32a7 009929 setarg 0 +: 009930 g24_store_mem_ms_blank_data_enable: +0x32a8 009931 arg offset_24g_ms_blank_data_enable ,rega +0x32a9 009932 branch g24_set_contw_with_regb_store_1byte +: 009934 g24_set0_mem_kb_blank_data_enable: +0x32aa 009935 setarg 0 +: 009936 g24_store_mem_kb_blank_data_enable: +0x32ab 009937 arg offset_24g_kb_blank_data_enable ,rega +0x32ac 009938 branch g24_set_contw_with_regb_store_1byte +: 009940 g24_set0_mem_kb_mul_blank_data_enable: +0x32ad 009941 setarg 0 +: 009942 g24_store_mem_kb_mul_blank_data_enable: +0x32ae 009943 arg offset_24g_kb_mul_blank_data_enable ,rega +0x32af 009944 branch g24_set_contw_with_regb_store_1byte +: 009946 g24_store_mem_power_ctrl_threshold_up: +0x32b0 009947 arg offset_power_ctrl_threshold_up ,rega +0x32b1 009948 branch g24_set_contw_with_regb_store_1byte +: 009950 g24_store_mem_power_ctrl_threshold_down: +0x32b2 009951 arg offset_power_ctrl_threshold_down ,rega +: 009952 g24_set_contw_with_regb_store_1byte: +0x32b3 009953 call g24_set_contw_with_regb +: 009954 g24_contw_istore_1byte: +0x32b4 009955 istore 1 ,contw +0x32b5 009956 rtn +: 009958 g24_fetch_mem_pair_mode: +0x32b6 009959 setarg offset_24g_pair_mode +0x32b7 009960 branch g24_set_rega_ifetch_1byte +: 009962 g24_store_mem_pair_mode: +0x32b8 009963 arg offset_24g_pair_mode ,rega +0x32b9 009964 branch g24_set_contw_with_regb_store_1byte +: 009966 g24_store_mem_pair_txpower: +0x32ba 009967 setarg offset_24g_pair_txpower +0x32bb 009968 call g24_set_rega_ifetch_1byte +0x32bc 009969 branch g24_store_mem_txpower +: 009971 g24_fetch_mem_rxdata_temp_add3_1byte: +0x32bd 009972 setarg offset_24g_rxdata_temp_add3 +0x32be 009973 branch g24_set_rega_ifetch_1byte +: 009975 g24_set_contw_with_temp: +0x32bf 009976 copy pdata ,temp +0x32c0 009977 copy rega ,pdata +0x32c1 009978 iadd regc ,contw +0x32c2 009979 copy temp ,pdata +0x32c3 009980 rtn +: 009982 g24_set_contw_with_temp_store_3byte: +0x32c4 009983 call g24_set_contw_with_temp +: 009984 g24_contw_istore_3byte: +0x32c5 009985 istore 3 ,contw +0x32c6 009986 rtn +: 009988 g24_set_contw_with_regb: +0x32c7 009989 call g24_head_ptr2regc +: 009990 g24_set_contw_with_regb2: +0x32c8 009991 copy pdata ,regb +0x32c9 009992 copy rega ,pdata +0x32ca 009993 iadd regc ,contw +0x32cb 009994 copy regb ,pdata +0x32cc 009995 rtn +: 009997 g24_set_rega: +0x32cd 009998 call g24_head_ptr2regc +0x32ce 009999 iadd regc ,rega +0x32cf 010000 rtn +: 010002 g24_set_rega_ifetch_1byte: +0x32d0 010003 call g24_set_rega +: 010004 g24_rega_ifetch_1byte: +0x32d1 010005 ifetch 1 ,rega +0x32d2 010006 rtn +: 010008 g24_set_rega_ifetcht_4byte: +0x32d3 010009 call g24_set_rega +0x32d4 010010 ifetcht 4 ,rega +0x32d5 010011 rtn +: 010013 g24_mem_set0: +0x32d6 010014 setarg 0 +0x32d7 010015 branch g24_contw_istore_1byte +: 010019 app_init: +0x32d8 010020 bpatch patch18_4 ,mem_patch18 +0x32d9 010021 fetch 1 ,mem_device_option +0x32da 010022 branch app_init ,blank +0x32db 010024 beq dvc_op_dongle ,dongle_init +0x32dc 010025 beq dvc_op_antilost ,antilost_init +0x32dd 010026 beq dvc_op_shutter ,shutter_init +0x32de 010027 beq dvc_op_module ,module_init +0x32df 010028 beq dvc_op_car ,car_init +0x32e0 010029 beq dvc_op_remote_car ,remote_car_init +0x32e1 010030 bbit1 dvc_op_mouse ,mouse_init +0x32e2 010031 rtn +: 010033 app_lpm_init: +0x32e3 010034 bpatch patch18_5 ,mem_patch18 +0x32e4 010035 jam 0 ,mem_tester_emulate +0x32e5 010036 jam 0 ,mem_debug_config +0x32e6 010037 jam 0 ,mem_lch_code +0x32e7 010038 setarg 0 +0x32e8 010039 store 5 ,mem_sp_state_start +0x32e9 010040 fetch 1 ,mem_device_option +0x32ea 010041 branch app_lpm_init ,blank +0x32eb 010042 beq dvc_op_module ,module_lpm_init +: 010043 app_lpm_init0: +0x32ec 010044 rtn +: 010047 app_process_idle: +0x32ed 010048 call ui_dispatch +0x32ee 010049 call check_51cmd +0x32ef 010050 call app_process_bb_event +0x32f0 010051 fetch 2 ,mem_cb_idle_process +0x32f1 010052 branch callback_func +: 010054 app_process_bt: +0x32f2 010055 fetch 2 ,mem_cb_bt_process +0x32f3 010056 branch callback_func +: 010058 app_process_ble: +0x32f4 010059 fetch 2 ,mem_cb_le_process +0x32f5 010060 branch callback_func +: 010062 app_process_bb_event: +0x32f6 010063 bpatch patch18_6 ,mem_patch18 +0x32f7 010065 arg mem_ipc_fifo_bt2c51 ,rega +0x32f8 010066 call fifo_out +0x32f9 010067 rtn blank +0x32fa 010069 copy pdata ,regc +0x32fb 010070 call app_event_normal_process +0x32fc 010071 branch app_process_bb_event_priority +: 010073 app_discard_event: +0x32fd 010074 arg 0 ,regc +0x32fe 010075 rtn +: 010080 app_event_normal_process: +0x32ff 010081 beq bt_evt_bb_connected ,app_evt_bt_conn +0x3300 010082 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed +0x3301 010083 beq bt_evt_setup_complete ,app_evt_setup_complete +0x3302 010084 beq bt_evt_hid_handshake ,app_evt_hid_handshake +0x3303 010085 beq bt_evt_hid_connected ,app_bb_event_hid_connected +0x3304 010086 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed +0x3305 010087 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn +0x3306 010088 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed +0x3307 010089 beq bt_evt_le_connected ,app_le_event_bb_connected +0x3308 010090 beq bt_evt_le_disconnected ,app_le_event_bb_disconn +0x3309 010091 beq bt_evt_reconn_started ,app_event_reconn_start +0x330a 010092 beq bt_evt_enter_sniff ,app_event_enter_sniff +0x330b 010093 beq bt_evt_exit_sniff ,app_event_exit_sniff +0x330c 010095 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused +0x330d 010096 beq bt_evt_linkkey_generate ,app_event_linkkey_generate +0x330e 010097 beq bt_evt_switch_fail_master ,app_event_switch_fail_master +0x330f 010098 beq bt_evt_switch_success_master ,app_event_switch_success +0x3310 010099 rtn +: 010102 app_evt_bt_conn: +0x3311 010103 fetch 2 ,mem_ui_state_map +0x3312 010104 set1 ui_state_bt_connected ,pdata +0x3313 010105 store 2 ,mem_ui_state_map +0x3314 010106 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3315 010107 set0 app_disc_by_button ,pdata +0x3316 010108 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3317 010109 rtn +: 010111 app_event_switch_success: +0x3318 010112 jam 0 ,mem_switch_fail_master_count +0x3319 010113 rtn +: 010115 app_event_switch_fail_master: +0x331a 010116 fetch 1 ,mem_switch_fail_master_count +0x331b 010117 increase 1 ,pdata +0x331c 010118 store 1 ,mem_switch_fail_master_count +0x331d 010119 sub pdata ,1 ,null +0x331e 010120 branch app_bt_role_switch ,positive +0x331f 010121 jam 0 ,mem_switch_fail_master_count +0x3320 010122 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3321 010123 set1 app_disc_switch_fail ,pdata +0x3322 010124 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3323 010125 branch app_bt_disconnect +: 010127 app_process_bb_event_priority: +0x3324 010128 fetch 2 ,mem_cb_bb_event_process +0x3325 010129 branch callback_func +: 010131 app_check_wake_lock: +0x3326 010132 fetch 2 ,mem_cb_check_wakelock +0x3327 010133 branch callback_func +: 010135 app_will_enter_lpm: +0x3328 010136 fetch 2 ,mem_cb_before_lpm +0x3329 010137 branch callback_func +: 010139 app_event_linkkey_generate: +0x332a 010140 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x332b 010141 set1 app_disc_after_pairing ,pdata +0x332c 010142 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x332d 010143 branch app_bt_store_reconn_info +: 010145 app_event_reconn_start: +0x332e 010146 fetch 2 ,mem_ui_state_map +0x332f 010147 set1 ui_state_bt_reconnect ,pdata +0x3330 010148 store 2 ,mem_ui_state_map +0x3331 010149 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3332 010150 set1 app_disc_after_reconn ,pdata +0x3333 010151 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3334 010152 rtn +: 010154 app_evt_setup_complete: +0x3335 010155 fetch 2 ,mem_ui_state_map +0x3336 010156 set1 ui_state_bt_setup_complete ,pdata +0x3337 010157 store 2 ,mem_ui_state_map +0x3338 010158 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3339 010159 set1 app_disc_after_setup_done ,pdata +0x333a 010160 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x333b 010161 rtn +: 010163 app_evt_hid_handshake: +0x333c 010164 fetch 2 ,mem_ui_state_map +0x333d 010165 set1 ui_state_bt_hid_handshake ,pdata +0x333e 010166 store 2 ,mem_ui_state_map +0x333f 010167 rtn +: 010169 app_event_enter_sniff: +0x3340 010170 fetch 2 ,mem_ui_state_map +0x3341 010171 set1 ui_state_bt_sniff ,pdata +0x3342 010172 store 2 ,mem_ui_state_map +0x3343 010173 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3344 010174 set1 app_disc_after_sniff ,pdata +0x3345 010175 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3346 010176 rtn +: 010178 app_event_exit_sniff: +0x3347 010179 fetch 2 ,mem_ui_state_map +0x3348 010180 set0 ui_state_bt_sniff ,pdata +0x3349 010181 store 2 ,mem_ui_state_map +0x334a 010182 rtn +: 010184 app_le_event_bb_connected: +0x334b 010185 fetch 2 ,mem_ui_state_map +0x334c 010186 set1 ui_state_ble_connected ,pdata +0x334d 010187 store 2 ,mem_ui_state_map +0x334e 010188 rtn +: 010190 app_le_event_bb_disconn: +0x334f 010191 fetch 2 ,mem_ui_state_map +0x3350 010192 set0 ui_state_ble_connected ,pdata +0x3351 010193 store 2 ,mem_ui_state_map +0x3352 010194 branch app_lpm_mult_disable +: 010196 app_bb_event_hid_connected: +0x3353 010197 fetch 2 ,mem_ui_state_map +0x3354 010198 set1 ui_state_bt_hid_conn ,pdata +0x3355 010199 store 2 ,mem_ui_state_map +0x3356 010200 rtn +: 010202 app_evt_button_long_pressed: +0x3357 010203 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x3358 010204 set1 app_disc_by_button ,pdata +0x3359 010205 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335a 010206 rtn +: 010208 app_event_ml2cap_conn_refused: +0x335b 010209 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335c 010210 set1 app_disc_l2cap_refused ,pdata +0x335d 010211 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x335e 010212 branch app_bt_disconnect +: 010215 app_evt_timer: +0x335f 010216 bpatch patch18_7 ,mem_patch18 +0x3360 010217 store 1 ,mem_app_evt_timer_count +: 010218 app_evt_100ms_loop: +0x3361 010219 fetch 1 ,mem_app_evt_timer_count +0x3362 010220 rtn blank +0x3363 010221 increase -1 ,pdata +0x3364 010222 store 1 ,mem_app_evt_timer_count +0x3365 010223 call ui_button_polling +0x3366 010224 call app_lpm_wake_auto_lock_timer +0x3367 010225 call app_unsniff_delay_timer +0x3368 010226 call app_discovery_timer +0x3369 010227 call flash_write_spi_sm_timer +0x336a 010228 fetch 2 ,mem_cb_event_timer +0x336b 010229 call callback_func +0x336c 010230 branch app_evt_100ms_loop +: 010235 timer_single_step: +0x336d 010236 ifetch 1 ,regc +0x336e 010237 rtn blank +0x336f 010238 pincrease -1 +0x3370 010239 istore 1 ,regc +0x3371 010240 nrtn blank +0x3372 010241 copy regb ,pdata +0x3373 010242 branch callback_func +: 010246 timer_single_step_2b: +0x3374 010247 ifetch 2 ,regc +0x3375 010248 rtn blank +0x3376 010249 pincrease -1 +0x3377 010250 istore 2 ,regc +0x3378 010251 nrtn blank +0x3379 010252 copy regb ,pdata +0x337a 010253 branch callback_func +: 010255 app_power_timer: +0x337b 010256 fetcht 2 ,mem_power_param_ptr +0x337c 010257 add temp ,power_timer_offset ,regc +0x337d 010258 arg app_power_timer_timeout ,regb +0x337e 010259 branch timer_single_step +: 010261 app_power_timer_timeout: +0x337f 010262 call app_got_power_state_common +0x3380 010263 beq power_starting ,app_enter_power_stanby_state +: 010264 app_enter_power_off_state: +0x3381 010265 branch app_enter_hibernate +: 010266 app_enter_power_stanby_state: +0x3382 010267 setarg power_standby +0x3383 010268 istore 1 ,regc +0x3384 010269 add temp ,power_standby_cb_offset ,regb +: 010270 app_power_cb_common: +0x3385 010271 ifetch 2 ,regb +0x3386 010272 branch callback_func +: 010274 app_unsniff_delay_timer: +0x3387 010275 arg mem_unsniff2sniff_timer_count ,regc +0x3388 010276 arg app_unsniff_delay_timeout ,regb +0x3389 010277 branch timer_single_step +: 010279 app_unsniff_delay_timeout: +0x338a 010280 call context_check_idle +0x338b 010281 branch app_bt_enter_sniff ,zero +0x338c 010282 rtn +: 010285 app_discovery_timer: +0x338d 010286 arg mem_discovery_timeout_timer_count ,regc +0x338e 010287 arg app_discovery_timeout ,regb +0x338f 010288 branch timer_single_step_2b +: 010290 app_discovery_timeout: +0x3390 010291 call app_bt_stop_discovery +0x3391 010292 call app_led_off +0x3392 010293 fetch 2 ,mem_cb_discovry_timeout +0x3393 010294 branch callback_func +: 010297 app_bb_event_reconn_failed: +0x3394 010298 call app_disconn_reason_flag_clear +: 010299 app_clear_reconnect_flag: +0x3395 010300 fetch 2 ,mem_ui_state_map +0x3396 010301 set0 ui_state_bt_reconnect ,pdata +0x3397 010302 store 2 ,mem_ui_state_map +0x3398 010303 rtn +: 010305 app_bb_event_bb_disconn: +0x3399 010306 jam 0 ,mem_unsniff2sniff_timer_count +0x339a 010307 fetch 2 ,mem_ui_state_map +0x339b 010308 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn +0x339c 010309 isolate0 ui_state_bt_setup_complete ,pdata +0x339d 010310 call app_discard_event ,true +: 010311 app_bb_event_bb_reconn_disconn: +0x339e 010312 bpatch patch19_0 ,mem_patch19 +0x339f 010313 fetch 2 ,mem_ui_state_map +0x33a0 010314 set0 ui_state_bt_connected ,pdata +0x33a1 010315 set0 ui_state_bt_setup_complete ,pdata +0x33a2 010316 set0 ui_state_bt_hid_conn ,pdata +0x33a3 010317 set0 ui_state_bt_hid_handshake ,pdata +0x33a4 010318 set0 ui_state_bt_reconnect ,pdata +0x33a5 010319 store 2 ,mem_ui_state_map +0x33a6 010320 branch app_lpm_mult_disable +: 010322 app_bb_hibernate: +0x33a7 010323 call app_disconn_reason_clear +0x33a8 010324 branch app_enter_hibernate +: 010327 app_disconn_reason_clear: +0x33a9 010328 setarg 0 +0x33aa 010329 store app_disc_rsn_size ,mem_app_disconn_reason +0x33ab 010330 rtn +: 010331 app_disconn_reason_flag_clear: +0x33ac 010332 setarg 0 +0x33ad 010333 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33ae 010334 rtn +: 010336 app_disconn_reason_collect_bt: +0x33af 010337 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b0 010338 store app_disc_rsn_size ,mem_app_disconn_reason +0x33b1 010339 setarg 0 +0x33b2 010340 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b3 010341 rtn +: 010343 app_disconn_reason_collect_ble: +0x33b4 010344 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b5 010345 set1 app_disc_ble ,pdata +0x33b6 010346 store app_disc_rsn_size ,mem_app_disconn_reason +0x33b7 010347 setarg 0 +0x33b8 010348 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x33b9 010349 rtn +: 010357 app_check_sniff: +0x33ba 010358 fetch 1 ,mem_ui_state_map +0x33bb 010359 isolate1 ui_state_bt_sniff ,pdata +0x33bc 010360 rtn +: 010368 app_initflag_store: +0x33bd 010369 setarg eeprom_init_flag +: 010370 app_flag_store: +0x33be 010371 store 2 ,mem_timeup +0x33bf 010372 bpatch patch19_1 ,mem_patch19 +0x33c0 010373 arg 2 ,temp +0x33c1 010374 arg mem_timeup ,rega +0x33c2 010375 arg eeprom_module_init_flag ,regb +0x33c3 010376 branch iicd_write_eep_data +: 010379 app_initflag_check: +0x33c4 010380 bpatch patch19_2 ,mem_patch19 +0x33c5 010381 arg 2 ,temp +0x33c6 010382 arg mem_pdatatemp ,rega +0x33c7 010383 arg eeprom_module_init_flag ,regb +0x33c8 010384 call iicd_read_eep_data +0x33c9 010385 fetch 2 ,mem_pdatatemp +0x33ca 010386 arg eeprom_init_flag ,temp +0x33cb 010387 isub temp ,null +0x33cc 010388 rtn +: 010391 app_start_auto_sniff: +0x33cd 010392 fetch 1 ,mem_unsniff2sniff_timer +0x33ce 010393 store 1 ,mem_unsniff2sniff_timer_count +0x33cf 010394 rtn +: 010396 app_get_lpm_wake_lock: +0x33d0 010397 arg wake_lock_app ,queue +0x33d1 010398 branch lpm_get_wake_lock +: 010400 app_put_lpm_wake_lock: +0x33d2 010401 arg wake_lock_app ,queue +0x33d3 010402 branch lpm_put_wake_lock +: 010404 app_lpm_wake_auto_lock: +0x33d4 010405 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer +0x33d5 010406 branch app_get_lpm_wake_lock +: 010408 app_lpm_wake_auto_lock_timer: +0x33d6 010409 arg mem_wake_up_delay_timer ,regc +0x33d7 010410 arg app_put_lpm_wake_lock ,regb +0x33d8 010411 branch timer_single_step +: 010413 app_l2cap_flow_control_enable: +0x33d9 010414 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag +0x33da 010415 rtn +: 010417 app_l2cap_flow_control_disable: +0x33db 010418 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag +0x33dc 010419 rtn +: 010421 app_bt_set_pincode: +0x33dd 010422 jam bt_cmd_set_pin_code ,mem_fifo_temp +0x33de 010423 branch ui_ipc_send_cmd +: 010425 app_bt_role_switch: +0x33df 010426 jam bt_cmd_role_switch ,mem_fifo_temp +0x33e0 010427 branch ui_ipc_send_cmd +: 010429 app_bt_start_reconnect: +0x33e1 010430 bpatch patch19_3 ,mem_patch19 +0x33e2 010431 fetch 1 ,mem_app_connection_options +0x33e3 010432 store 1 ,mem_connection_options +0x33e4 010433 jam app_flag_reconnect ,mem_reconnect_flag +0x33e5 010434 jam bt_cmd_reconnect ,mem_fifo_temp +0x33e6 010435 branch ui_ipc_send_cmd +: 010437 app_bt_reconnect_cancel: +0x33e7 010438 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp +0x33e8 010439 branch ui_ipc_send_cmd +: 010441 app_bt_disconnect: +0x33e9 010442 jam bt_cmd_disconnect ,mem_fifo_temp +0x33ea 010443 branch ui_ipc_send_cmd +: 010445 app_bt_start_discovery_short: +0x33eb 010446 fetch 2 ,mem_discovery_timeout +0x33ec 010447 store 2 ,mem_discovery_timeout_timer_count +: 010448 app_bt_start_discovery_led_blink: +0x33ed 010449 call app_led_start_blink +: 010450 app_bt_start_discovery: +0x33ee 010451 jam bt_cmd_start_discovery ,mem_fifo_temp +0x33ef 010452 branch ui_ipc_send_cmd +: 010454 app_bt_stop_discovery: +0x33f0 010455 setarg 0 +0x33f1 010456 store 2 ,mem_discovery_timeout_timer_count +0x33f2 010457 jam bt_cmd_stop_discovery ,mem_fifo_temp +0x33f3 010458 branch ui_ipc_send_cmd +: 010460 app_ble_start_direct_adv: +0x33f4 010461 jam bt_cmd_start_direct_adv ,mem_fifo_temp +0x33f5 010462 branch ui_ipc_send_cmd +: 010464 app_ble_stop_direct_adv: +0x33f6 010465 jam bt_cmd_stop_direct_adv ,mem_fifo_temp +0x33f7 010466 branch ui_ipc_send_cmd +: 010468 app_ble_stop_adv: +0x33f8 010469 jam bt_cmd_stop_adv ,mem_fifo_temp +0x33f9 010470 branch ui_ipc_send_cmd +: 010472 app_ble_start_adv: +0x33fa 010473 jam bt_cmd_start_adv ,mem_fifo_temp +0x33fb 010474 branch ui_ipc_send_cmd +: 010476 app_ble_start_scan: +0x33fc 010477 jam bt_cmd_le_start_scan ,mem_fifo_temp +0x33fd 010478 branch ui_ipc_send_cmd +: 010480 app_ble_stop_scan: +0x33fe 010481 jam bt_cmd_le_stop_scan ,mem_fifo_temp +0x33ff 010482 branch ui_ipc_send_cmd +: 010484 app_ble_start_conn: +0x3400 010485 jam bt_cmd_le_start_conn ,mem_fifo_temp +0x3401 010486 branch ui_ipc_send_cmd +: 010488 app_ble_disconnect: +0x3402 010489 jam bt_cmd_le_disconnect ,mem_fifo_temp +0x3403 010490 branch ui_ipc_send_cmd +: 010492 app_led_start_blink: +0x3404 010493 jam bt_cmd_led_blink ,mem_fifo_temp +0x3405 010494 branch ui_ipc_send_cmd +: 010496 app_led_on: +0x3406 010497 jam bt_cmd_led_on ,mem_fifo_temp +0x3407 010498 branch ui_ipc_send_cmd +: 010500 app_led_stop_blink: +: 010501 app_led_off: +0x3408 010502 jam bt_cmd_led_off ,mem_fifo_temp +0x3409 010503 branch ui_ipc_send_cmd +: 010505 app_enter_hibernate: +0x340a 010506 jam bt_cmd_enter_hibernate ,mem_fifo_temp +0x340b 010507 branch ui_ipc_send_cmd +: 010509 app_bt_sniff_exit: +0x340c 010510 jam bt_cmd_exit_sniff ,mem_fifo_temp +0x340d 010511 branch ui_ipc_send_cmd +: 010513 app_bt_enter_sniff: +0x340e 010514 jam bt_cmd_enter_sniff ,mem_fifo_temp +0x340f 010515 branch ui_ipc_send_cmd +: 010517 app_ble_store_reconn_info: +0x3410 010518 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp +0x3411 010519 branch ui_ipc_send_cmd +: 010521 app_bt_store_reconn_info: +0x3412 010522 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp +0x3413 010523 branch ui_ipc_send_cmd +: 010525 app_store_reconn_info: +0x3414 010526 jam bt_cmd_store_reconn_info ,mem_fifo_temp +0x3415 010527 branch ui_ipc_send_cmd +: 010529 app_lpm_mult_enable: +0x3416 010530 set1 mark_lpm_mult_enable ,mark +0x3417 010531 rtn +: 010533 app_lpm_mult_disable: +0x3418 010534 set0 mark_lpm_mult_enable ,mark +0x3419 010535 rtn +: 010555 app_button_long_pressed: +0x341a 010556 call app_got_power_state_common +0x341b 010557 beq power_standby ,app_power_shutting_down +: 010558 app_power_starting: +0x341c 010559 setarg power_starting +0x341d 010560 istore 1 ,regc +0x341e 010561 add temp ,power_starting_timeout_offset ,rega +0x341f 010562 add temp ,power_starting_cb_offset ,regb +: 010563 app_power_common: +0x3420 010564 ifetcht 1 ,rega +0x3421 010565 increase 1 ,regc +0x3422 010566 istoret 1 ,regc +0x3423 010567 branch app_power_cb_common +: 010569 app_power_shutting_down: +0x3424 010570 setarg power_off +0x3425 010571 istore 1 ,regc +0x3426 010572 fetch 2 ,mem_ui_state_map +0x3427 010573 bbit0 ui_state_ble_connected ,app_power_off_end +0x3428 010574 call app_ble_disconnect +: 010575 app_power_off_end: +0x3429 010576 fetcht 2 ,mem_power_param_ptr +0x342a 010577 add temp ,power_off_timeout_offset ,rega +0x342b 010578 add temp ,power_off_cb_offset ,regb +0x342c 010579 branch app_power_common +: 010581 app_got_power_state_common: +0x342d 010582 fetcht 2 ,mem_power_param_ptr +0x342e 010583 add temp ,power_state_offset ,regc +0x342f 010584 ifetch 1 ,regc +0x3430 010585 rtn +: 010587 app_event_button_up: +0x3431 010588 call app_got_power_state_common +0x3432 010589 bne power_off ,app_power_release +0x3433 010590 branch app_enter_hibernate +: 010591 app_power_release: +0x3434 010592 add temp ,ui_butten_up_cb_offset ,regb +0x3435 010593 branch app_power_cb_common +: 010595 antilost_init: +0x3436 010596 rtn wake +0x3437 010597 jam 0x00 ,core_gpio_sel1 +0x3438 010598 setarg antilost_le_before_hibernate +0x3439 010599 store 2 ,mem_cb_before_hibernate +0x343a 010600 setarg keyscan_process_lpm_before +0x343b 010601 store 2 ,mem_cb_before_lpm +0x343c 010602 setarg antilost_idle_process +0x343d 010603 store 2 ,mem_cb_idle_process +0x343e 010604 setarg antilost_le_conn_process +0x343f 010605 store 2 ,mem_cb_le_process +0x3440 010606 setarg antilost_bb_event_process +0x3441 010607 store 2 ,mem_cb_bb_event_process +0x3442 010608 setarg antilost_le_bb_event_timer +0x3443 010609 store 2 ,mem_cb_event_timer +0x3444 010610 setarg antilost_le_notification +0x3445 010611 store 2 ,mem_cb_ble_transmit +0x3446 010612 setarg antilost_lpm_lock_process +0x3447 010613 store 2 ,mem_cb_check_wakelock +0x3448 010614 setarg antilost_le_receive_data_process +0x3449 010615 store 2 ,mem_cb_att_write +0x344a 010616 bpatch patch19_4 ,mem_patch19 +0x344b 010617 call antilost_buzzer_pwm_init +0x344c 010618 call keyscan_key_init +0x344d 010619 call antilost_adc_init +0x344e 010620 call ui_led_init_global +0x344f 010621 call ui_button_init +0x3450 010622 setarg antilost_key_up_down +0x3451 010623 store 2 ,mem_cb_antl_key +0x3452 010624 setarg antilost_power_off_cb +0x3453 010625 store 2 ,mem_antl_power_off_cb +0x3454 010626 setarg antilost_power_starting_cb +0x3455 010627 store 2 ,mem_antl_power_starting_cb +0x3456 010628 setarg antilost_power_standby_cb +0x3457 010629 store 2 ,mem_antl_power_standby_cb +0x3458 010630 setarg antilost_led_on_cb +0x3459 010631 store 2 ,mem_antl_led_cb_on +0x345a 010632 setarg antilost_led_off_cb +0x345b 010633 store 2 ,mem_antl_led_cb_off +0x345c 010634 setarg antilost_buzzer_on +0x345d 010635 store 2 ,mem_antl_buzzer_cb_on +0x345e 010636 setarg antilost_buzzer_off +0x345f 010637 store 2 ,mem_antl_buzzer_cb_off +0x3460 010638 fetch 2 ,mem_ui_state_map +0x3461 010639 rtnbit1 ui_state_btn_down +0x3462 010640 branch app_enter_hibernate +: 010642 antilost_le_before_hibernate: +0x3463 010643 call antilost_led_buzzer_stop_blink +0x3464 010644 branch app_enter_hibernate +: 010646 antilost_le_notification: +0x3465 010647 call le_fifo_check_nearly_full +0x3466 010648 nrtn blank +0x3467 010649 arg mem_temp_block5 ,rega +0x3468 010650 call queue_pop +0x3469 010651 nrtn user +0x346a 010652 arg mem_temp_block5 ,contr +0x346b 010653 branch le_send_notify_from_list +: 010655 antilost_power_standby_cb: +0x346c 010656 fetch 2 ,mem_antl_le_sleep_timeout +0x346d 010657 store 2 ,mem_antl_le_sleep_timer +0x346e 010658 jam 1 ,mem_antl_key_scan_enable +0x346f 010659 branch antilost_fast_adv_start +: 010661 antilost_lpm_lock_process: +0x3470 010662 fetch 1 ,mem_antl_key_state +0x3471 010663 beq 1 ,antilost_lpm_ctrl_for_led_buzzer +0x3472 010664 fetch 2 ,mem_ui_state_map +0x3473 010665 bbit0 ui_state_ble_connected ,antilost_lpm_ctrl_for_led_buzzer +0x3474 010666 fetch 1 ,mem_antl_lost_mode +0x3475 010667 beq 1 ,app_get_lpm_wake_lock +0x3476 010668 fetch 1 ,mem_antl_queue_curr_num +0x3477 010669 nbranch app_get_lpm_wake_lock ,blank +0x3478 010670 branch app_put_lpm_wake_lock +: 010672 antilost_lpm_ctrl_for_led_buzzer: +0x3479 010673 fetch 1 ,mem_antl_led_state +0x347a 010674 fetcht 1 ,mem_antl_buzzer_state +0x347b 010675 ior temp ,pdata +0x347c 010676 beq 1 ,app_get_lpm_wake_lock +0x347d 010677 branch app_put_lpm_wake_lock +: 010679 antilost_bb_event_process: +0x347e 010680 copy regc ,pdata +0x347f 010681 beq bt_evt_button_up ,app_event_button_up +0x3480 010682 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x3481 010683 beq bt_evt_le_connected ,antilost_le_process_conn +0x3482 010684 beq bt_evt_le_disconnected ,antilost_le_process_discon +0x3483 010685 beq bt_evt_le_parse_conn_papa_update_rsp ,antilost_le_conn_param_update_rsp_recieved +0x3484 010686 rtn +: 010687 antilost_le_conn_param_update_rsp_recieved: +0x3485 010688 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x3486 010689 beq ble_signaling_connect_parameter_update_rejected ,antilost_le_conn_param_rejected +: 010690 antilost_le_conn_param_accepted: +0x3487 010691 fetch 2 ,mem_le_new_connslavelatency +0x3488 010692 branch antilost_master_nonsupport_latency ,blank +: 010693 antilost_le_conn_param_updata_procedure_sucsess: +0x3489 010694 jam conn_param_updata_procedure_complete ,mem_antl_conn_updata_procedure_state +0x348a 010695 jam 60 ,mem_antl_conn_update_timer +0x348b 010696 rtn +: 010698 antilost_le_conn_param_rejected: +0x348c 010699 fetch 2 ,mem_le_latency +0x348d 010700 branch antilost_conn_param_updata_procedure_faild ,blank +: 010701 antilost_conn_param_retransimiting: +0x348e 010702 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +0x348f 010703 fetcht 2 ,mem_interval_increment +0x3490 010704 fetch 2 ,mem_le_interval_min +0x3491 010705 iadd temp ,pdata +0x3492 010706 store 2 ,mem_le_interval_min +0x3493 010707 copy pdata ,rega +0x3494 010708 fetch 2 ,mem_le_interval_max +0x3495 010709 iadd temp ,pdata +0x3496 010710 store 2 ,mem_le_interval_max +0x3497 010711 iadd rega ,pdata +0x3498 010712 rshift pdata ,temp +0x3499 010713 fetch 2 ,mem_antl_le_unnormal_interval_max +0x349a 010714 idiv temp +0x349b 010715 call wait_div_end +0x349c 010716 quotient pdata +0x349d 010717 store 2 ,mem_le_latency +0x349e 010718 jam 1 ,mem_antl_send_updata_le_param_timer +0x349f 010719 rtn +: 010720 antilost_conn_param_updata_procedure_faild: +0x34a0 010721 jam conn_param_updata_procedure_faild ,mem_antl_conn_updata_procedure_state +0x34a1 010722 rtn +: 010724 antilost_master_nonsupport_latency: +0x34a2 010725 jam 0 ,mem_lpm_mult +0x34a3 010726 jam 0 ,mem_antl_send_updata_le_param_timer +0x34a4 010727 fetch 2 ,mem_le_new_conninterval +0x34a5 010728 fetcht 2 ,mem_antl_le_unnormal_interval_min +0x34a6 010729 isub temp ,null +0x34a7 010730 setflag positive ,0 ,rega +0x34a8 010731 fetch 2 ,mem_antl_le_unnormal_interval_max +0x34a9 010732 fetcht 2 ,mem_le_new_conninterval +0x34aa 010733 isub temp ,pdata +0x34ab 010734 setflag positive ,1 ,rega +0x34ac 010735 compare 0x03 ,rega ,0x03 +0x34ad 010736 rtn true +0x34ae 010737 fetch 8 ,mem_antl_le_unnormal_interval_min +0x34af 010738 store 8 ,mem_le_interval_min +0x34b0 010739 jam 1 ,mem_antl_send_updata_le_param_timer +0x34b1 010740 rtn +: 010743 antilost_le_bb_event_timer: +0x34b2 010745 call app_power_timer +0x34b3 010746 call antilost_double_click_timer +0x34b4 010747 call antilost_le_fast_adv_timer +0x34b5 010748 call antilost_le_sleep_timer +0x34b6 010749 call antilost_app_updata_le_param_timer +0x34b7 010750 call antilost_conn_update_timer +0x34b8 010751 branch antilost_adc_check_timer +: 010754 antilost_double_click_timer: +0x34b9 010755 arg mem_double_click_timer ,regc +0x34ba 010756 arg antilost_double_click_timeout ,regb +0x34bb 010757 branch timer_single_step +: 010758 antilost_double_click_timeout: +0x34bc 010759 jam 0 ,mem_butten_click_cnt +0x34bd 010760 rtn +: 010761 antilost_le_fast_adv_timer: +0x34be 010762 arg mem_antl_fast_adv_timer ,regc +0x34bf 010763 arg antilost_le_fast_adv_timeout ,regb +0x34c0 010764 branch timer_single_step_2b +: 010765 antilost_le_fast_adv_timeout: +0x34c1 010766 arg mem_antl_slow_adv_led_style ,regc +0x34c2 010767 arg mem_antl_slow_adv_lpm_interval ,regb +0x34c3 010768 branch antilost_adv_start_common +: 010771 antilost_conn_update_timer: +0x34c4 010772 arg mem_antl_conn_update_timer ,regc +0x34c5 010773 arg antilost_conn_update_timer_time_out ,regb +0x34c6 010774 branch timer_single_step +: 010776 antilost_conn_update_timer_time_out: +0x34c7 010777 fetch 2 ,mem_le_latency +0x34c8 010778 store 1 ,mem_lpm_mult +0x34c9 010779 rtn +: 010780 antilost_app_updata_le_param_timer: +0x34ca 010781 arg mem_antl_send_updata_le_param_timer ,regc +0x34cb 010782 arg antilost_app_updata_le_param_timeout ,regb +0x34cc 010783 branch timer_single_step +: 010784 antilost_app_updata_le_param_timeout: +0x34cd 010785 fetch 1 ,mem_le_state +0x34ce 010786 compare 0 ,pdata ,0x60 +0x34cf 010787 nbranch antilost_wait_for_updata_param_instant_expire ,true +0x34d0 010788 jam conn_param_updata_procedure_starting ,mem_antl_conn_updata_procedure_state +0x34d1 010789 call app_lpm_mult_enable +0x34d2 010790 branch le_l2cap_tx_update_req +: 010791 antilost_wait_for_updata_param_instant_expire: +0x34d3 010792 jam 1 ,mem_antl_send_updata_le_param_timer +0x34d4 010793 rtn +: 010795 antilost_le_sleep_timer: +0x34d5 010796 arg mem_antl_le_sleep_timer ,regc +0x34d6 010797 arg antilost_le_sleep_timer_timeout ,regb +0x34d7 010798 branch timer_single_step_2b +: 010801 antilost_le_sleep_timer_timeout: +0x34d8 010802 branch app_button_long_pressed +: 010804 antilost_adc_check_timer: +0x34d9 010807 arg mem_adc_timer ,regc +0x34da 010808 arg antilost_adc_check_timer_timeout ,regb +0x34db 010809 branch timer_single_step_2b +: 010810 antilost_adc_check_timer_timeout: +0x34dc 010811 fetch 2 ,mem_adc_timeout +0x34dd 010812 store 2 ,mem_adc_timer +0x34de 010813 branch antilost_battery_process +: 010816 antilost_le_process_conn: +0x34df 010817 fetch 2 ,mem_adc_timeout +0x34e0 010818 store 2 ,mem_adc_timer +0x34e1 010819 setarg 0 +0x34e2 010820 store 2 ,mem_antl_fast_adv_timer +0x34e3 010821 store 2 ,mem_antl_le_sleep_timer +0x34e4 010822 call antilost_alert_off +0x34e5 010823 call antilost_led_buzzer_stop_blink +0x34e6 010824 jam 0 ,mem_lpm_mult +0x34e7 010825 branch app_ble_stop_adv +: 010828 antilost_le_process_discon: +0x34e8 010831 setarg 0 +0x34e9 010832 store 4 ,mem_adc_timer +0x34ea 010833 store 3 ,mem_antl_conn_updata_procedure_state +0x34eb 010834 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x34ec 010836 jam 1 ,mem_alarm_config_notfy_cnt +0x34ed 010837 fetch 2 ,mem_antl_le_sleep_timeout +0x34ee 010838 store 2 ,mem_antl_le_sleep_timer +0x34ef 010839 call queue_init +0x34f0 010840 fetch 1 ,mem_antl_power_state +0x34f1 010841 rtneq power_off +0x34f2 010842 call antilost_fast_adv_start +0x34f3 010843 branch antilost_on_off_alarm_after_disconn +: 010846 antilost_le_conn_process: +0x34f4 010848 branch antilost_key_process +: 010850 antilost_idle_process: +0x34f5 010852 fetch 1 ,mem_antl_power_state +0x34f6 010853 rtnne power_standby +0x34f7 010854 branch antilost_key_process +: 010859 antilost_power_starting_cb: +0x34f8 010860 arg mem_antl_power_starting_buzzer_style ,regc +0x34f9 010861 call antilost_buzzer_configuration +0x34fa 010862 arg mem_antl_power_starting_led_style ,regc +: 010863 antilost_power_common: +0x34fb 010864 branch antilost_led_configuration +: 010866 antilost_power_off_cb: +0x34fc 010867 jam off ,mem_le_adv_enable +0x34fd 010868 arg mem_antl_power_off_buzzer_style ,regc +0x34fe 010869 call antilost_buzzer_configuration +0x34ff 010870 arg mem_antl_power_off_led_style ,regc +0x3500 010871 branch antilost_power_common +: 010873 antilost_le_receive_data_process: +0x3501 010874 fetch 1 ,mem_le_att_opcode +0x3502 010875 beq attop_write_request ,antilost_le_parse_att_write_request +0x3503 010876 rtn +: 010877 antilost_le_parse_att_write_request: +0x3504 010878 fetch 2 ,mem_le_att_handle +0x3505 010880 beq new_spec_write_handle ,antilost_cmd_parse_for_application +0x3506 010881 beq new_spec_notification_enable_handle ,antilost_notify_alarm_config_first_time +0x3507 010882 rtn +: 010887 antilost_key_process: +0x3508 010888 fetch 1 ,mem_antl_key_scan_enable +0x3509 010889 rtn blank +0x350a 010890 branch keyscan_key_process +: 010894 antilost_key_up_down: +0x350b 010895 copy rega ,pdata +0x350c 010896 branch antilost_key_is_up ,blank +: 010897 antilost_key_is_down: +0x350d 010898 copy queue ,pdata +0x350e 010899 beq 0 ,antilost_key0_down +0x350f 010900 rtn +: 010901 antilost_key_is_up: +0x3510 010902 copy queue ,pdata +0x3511 010903 beq 0 ,antilost_key0_up +0x3512 010904 rtn +: 010906 antilost_key0_down: +0x3513 010907 jam 1 ,mem_antl_key_state +0x3514 010908 arg mem_antl_key_buzzer_style ,regc +0x3515 010909 call antilost_buzzer_configuration +0x3516 010910 arg mem_antl_key_led_style ,regc +0x3517 010911 call antilost_led_configuration +0x3518 010912 fetch 2 ,mem_ui_state_map +0x3519 010913 bbit0 ui_state_ble_connected ,antilost_butten_down_while_disconn +0x351a 010914 branch antilost_butten_down_after_conn +: 010916 antilost_key0_up: +0x351b 010917 jam 0 ,mem_antl_key_state +0x351c 010918 branch antilost_double_click_timer_init +: 010922 antilost_double_click_timer_init: +0x351d 010923 fetch 1 ,mem_butten_click_cnt +0x351e 010924 rtnne 1 +0x351f 010925 jam 5 ,mem_double_click_timer +0x3520 010926 rtn +: 010928 antilost_butten_down_after_conn: +0x3521 010929 fetch 1 ,mem_butten_click_cnt +0x3522 010930 pincrease 1 +0x3523 010931 store 1 ,mem_butten_click_cnt +0x3524 010932 beq 1 ,antilost_click_once +0x3525 010933 beq 2 ,antilost_click_twice +0x3526 010934 rtn +: 010935 antilost_click_once: +0x3527 010936 call antilost_alert_off +0x3528 010937 jam opcode1_butten_click_once ,mem_antl_key0_press + 5 +0x3529 010938 arg mem_antl_key0_press ,regc +0x352a 010939 branch antilost_prepare_data_and_send +: 010940 antilost_click_twice: +0x352b 010941 jam 0 ,mem_butten_click_cnt +0x352c 010942 jam opcode2_butten_double_click ,mem_antl_key0_press + 5 +0x352d 010943 arg mem_antl_key0_press ,regc +0x352e 010944 call antilost_prepare_data_and_send +0x352f 010945 fetch 1 ,mem_antl_lost_mode +0x3530 010946 beq 1 ,antilost_alert_on +0x3531 010947 rtn +: 010949 antilost_butten_down_while_disconn: +0x3532 010950 fetch 2 ,mem_antl_le_sleep_timeout +0x3533 010951 store 2 ,mem_antl_le_sleep_timer +0x3534 010952 call antilost_alert_off +0x3535 010953 branch antilost_fast_adv_start +: 010956 antilost_cmd_parse_for_application: +0x3536 010957 bpatch patch19_5 ,mem_patch19 +0x3537 010958 call le_app_receive_data +0x3538 010959 ifetch 1 ,rega +0x3539 010960 beq opcode3_antl_start_alram ,antilost_on_of_alram +0x353a 010961 beq opcode7_antl_config_alram ,antilost_configuration_for_alram +0x353b 010962 rtn +: 010964 antilost_on_of_alram: +0x353c 010965 fetch 1 ,mem_antl_lost_mode +0x353d 010966 beq anti_le_alarm_off ,antilost_alert_on +0x353e 010967 beq anti_le_alarm_on ,antilost_alert_off +0x353f 010968 rtn +: 010970 antilost_configuration_for_alram: +0x3540 010971 ifetch 1 ,regb +0x3541 010972 beq 1 ,antilost_set_start_alarm_after_disconn +0x3542 010973 beq 0 ,antilost_set_no_alarm_after_disconn +0x3543 010974 rtn +: 010981 antilost_prepare_data_and_send: +0x3544 010982 bpatch patch19_6 ,mem_patch19 +0x3545 010983 fetch 1 ,mem_client_characteristic_configuration_descriptor +0x3546 010984 isolate1 notification_enable_bit ,pdata +0x3547 010985 nrtn true +0x3548 010986 add regc ,6 ,contr +0x3549 010987 ifetch 2 ,contr +0x354a 010988 byteswap pdata ,pdata +0x354b 010989 add pdata ,5 ,loopcnt +0x354c 010990 add regc ,3 ,contr +0x354d 010991 call calc_check_sum_start +0x354e 010992 istore 1 ,contr +0x354f 010993 copy regc ,rega +0x3550 010994 branch queue_push +: 011000 antilost_alert_on: +0x3551 011001 fetch 1 ,mem_antl_power_state +0x3552 011002 rtn blank +0x3553 011003 jam 1 ,mem_antl_lost_mode +0x3554 011004 arg mem_antl_alert_buzzer_stlye ,regc +0x3555 011005 call antilost_buzzer_configuration +0x3556 011006 arg mem_antl_alert_led_stlye ,regc +0x3557 011007 call antilost_led_configuration +0x3558 011008 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +0x3559 011009 jam 1 ,mem_antl_key0_release + 8 +0x355a 011010 arg mem_antl_key0_release ,regc +0x355b 011011 branch antilost_prepare_data_and_send +: 011012 antilost_alert_off: +0x355c 011013 fetch 1 ,mem_antl_lost_mode +0x355d 011014 rtn blank +0x355e 011015 jam 0 ,mem_antl_lost_mode +0x355f 011016 call antilost_led_buzzer_stop_blink +0x3560 011017 jam opcode4_current_alarm_state ,mem_antl_key0_release + 5 +0x3561 011018 jam 0 ,mem_antl_key0_release + 8 +0x3562 011019 arg mem_antl_key0_release ,regc +0x3563 011020 branch antilost_prepare_data_and_send +: 011022 antilost_set_start_alarm_after_disconn: +0x3564 011023 jam 1 ,mem_alarm_config +0x3565 011024 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x3566 011025 jam 1 ,mem_antl_key0_release + 8 +0x3567 011026 arg mem_antl_key0_release ,regc +0x3568 011027 branch antilost_prepare_data_and_send +: 011028 antilost_set_no_alarm_after_disconn: +0x3569 011029 jam 0 ,mem_alarm_config +0x356a 011030 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x356b 011031 jam 0 ,mem_antl_key0_release + 8 +0x356c 011032 arg mem_antl_key0_release ,regc +0x356d 011033 branch antilost_prepare_data_and_send +: 011034 antilost_on_off_alarm_after_disconn: +0x356e 011035 fetch 1 ,mem_alarm_config +0x356f 011036 rtn blank +0x3570 011037 branch antilost_alert_on +: 011039 antilost_notify_alarm_config_first_time: +0x3571 011040 ifetch 2 ,rega +0x3572 011041 store 2 ,mem_client_characteristic_configuration_descriptor +0x3573 011042 isolate1 notification_enable_bit ,pdata +0x3574 011043 nrtn true +0x3575 011044 fetch 1 ,mem_alarm_config_notfy_cnt +0x3576 011045 rtn blank +0x3577 011046 jam 0 ,mem_alarm_config_notfy_cnt +0x3578 011047 fetch 8 ,mem_antl_le_interval_min +0x3579 011048 store 8 ,mem_le_interval_min +0x357a 011049 jam 2 ,mem_antl_send_updata_le_param_timer +0x357b 011050 call antilost_battery_process +0x357c 011051 call antilost_battery_calculate_end +0x357d 011052 jam opcode7_antl_config_alram ,mem_antl_key0_release + 5 +0x357e 011053 fetch 1 ,mem_alarm_config +0x357f 011054 store 1 ,mem_antl_key0_release + 8 +0x3580 011055 arg mem_antl_key0_release ,regc +0x3581 011056 branch antilost_prepare_data_and_send +: 011060 antilost_buzzer_configuration: +0x3582 011061 arg 1 ,rega +0x3583 011062 branch antilost_configuration_common +: 011063 antilost_led_configuration: +0x3584 011064 arg 0 ,rega +: 011065 antilost_configuration_common: +0x3585 011066 branch antilost_led_buzzer_style_configuration +: 011068 antilost_led_buzzer_stop_blink: +0x3586 011069 arg 0 ,rega +0x3587 011070 call ui_led_blink_stop_global +0x3588 011071 arg 1 ,rega +0x3589 011072 call ui_led_blink_stop_global +0x358a 011073 fetch 1 ,mem_buzzer_pwm_conf +0x358b 011074 branch pwm_disable +: 011076 antilost_led_buzzer_style_configuration: +0x358c 011077 call calc_curr_struct_prt +0x358d 011078 arg 7 ,loopcnt +0x358e 011079 branch ui_led_set_style_global + 2 +: 011083 antilost_fast_adv_start: +0x358f 011084 arg mem_antl_fast_adv_led_style ,regc +0x3590 011085 arg mem_antl_lpm_interval ,regb +: 011086 antilost_adv_start_common: +0x3591 011087 call antilost_adv_interval_lpm_interval_set +0x3592 011088 call antilost_led_configuration +0x3593 011089 fetch 2 ,mem_antl_fast_adv_timeout +0x3594 011090 store 2 ,mem_antl_fast_adv_timer +0x3595 011091 branch app_ble_start_adv +: 011093 antilost_adv_interval_lpm_interval_set: +0x3596 011094 ifetch 2 ,regb +0x3597 011095 store 2 ,mem_lpm_interval +0x3598 011096 ifetch 2 ,contr +0x3599 011097 store 2 ,mem_le_adv_interval +0x359a 011098 rtn +: 011100 antilost_buzzer_pwm_init: +0x359b 011101 arg 0 ,rega +0x359c 011102 call pwm_init +0x359d 011103 fetch 6 ,mem_buzzer_pwm_conf +0x359e 011104 store 6 ,mem_pdatatemp +0x359f 011105 call pwm_out_set +0x35a0 011106 fetch 1 ,mem_buzzer_pwm_conf +0x35a1 011107 branch pwm_disable +: 011109 antilost_led_on_cb: +0x35a2 011110 jam 1 ,mem_antl_led_state +0x35a3 011111 rtn +: 011112 antilost_led_off_cb: +0x35a4 011113 jam 0 ,mem_antl_led_state +0x35a5 011114 rtn +: 011118 antilost_buzzer_off: +0x35a6 011119 jam 0 ,mem_antl_buzzer_state +0x35a7 011120 fetch 1 ,mem_buzzer_pwm_conf +0x35a8 011121 branch pwm_disable +: 011123 antilost_buzzer_on: +0x35a9 011124 jam 1 ,mem_antl_buzzer_state +0x35aa 011125 fetch 6 ,mem_buzzer_pwm_conf +0x35ab 011126 store 6 ,mem_pdatatemp +0x35ac 011127 branch pwm_out_set +: 011131 antilost_adc_init: +0x35ad 011132 jam 0 ,mem_adc_config_flag +0x35ae 011133 branch adc_init_data +: 011135 antilost_battery_process: +0x35af 011136 call adc_set_mode +0x35b0 011137 call vdd_calculate_by_mode +0x35b1 011138 store 2 ,mem_battery_current_voltage +0x35b2 011139 arg mem_battery_calculate_set ,rega +0x35b3 011140 call adc_bat_percent_lowpower_out +0x35b4 011141 store 1 ,mem_voltage_remain_percent +0x35b5 011142 beq 0 ,antilost_low_battery +0x35b6 011143 sub pdata ,0x64 ,null +0x35b7 011144 nbranch antilost_full_battery ,positive +0x35b8 011145 store 1 ,mem_antl_key0_release + 8 +: 011146 antilost_battery_calculate_end: +0x35b9 011147 jam opcode5_batter_information ,mem_antl_key0_release + 5 +0x35ba 011148 arg mem_antl_key0_release ,regc +0x35bb 011149 branch antilost_prepare_data_and_send +: 011150 antilost_full_battery: +0x35bc 011151 jam 100 ,mem_antl_key0_release + 8 +0x35bd 011152 branch antilost_battery_calculate_end +: 011154 antilost_low_battery: +0x35be 011155 branch app_button_long_pressed +: 011159 car_init: +0x35bf 011160 rtn wake +0x35c0 011161 hfetch 1 ,core_gpio_sel1 +0x35c1 011162 and_into 0xf0 ,pdata +0x35c2 011163 hstore 1 ,core_gpio_sel1 +0x35c3 011164 setarg car_le_before_hibernate +0x35c4 011165 store 2 ,mem_cb_before_hibernate +0x35c5 011167 setarg car_le_process_lpm_before +0x35c6 011168 store 2 ,mem_cb_before_lpm +0x35c7 011170 setarg app_enter_hibernate +0x35c8 011171 store 2 ,mem_cb_discovry_timeout +0x35c9 011173 setarg car_scale_process_idle +0x35ca 011174 store 2 ,mem_cb_idle_process +0x35cb 011176 setarg car_scale_process_bb_event +0x35cc 011177 store 2 ,mem_cb_bb_event_process +0x35cd 011179 setarg app_get_lpm_wake_lock +0x35ce 011180 store 2 ,mem_cb_check_wakelock +0x35cf 011182 setarg car_le_receive_data +0x35d0 011183 store 2 ,mem_cb_att_write +0x35d1 011185 setarg car_le_bb_event_timer +0x35d2 011186 store 2 ,mem_cb_event_timer +0x35d3 011188 call g24_head_ptr2regc +0x35d4 011189 setarg car_24g_receive_data +0x35d5 011190 add regc ,offset_24g_cb_rxdata_type1 ,contw +0x35d6 011191 istore 2 ,contw +0x35d7 011193 setarg car_power_off_signal +0x35d8 011194 store 2 ,mem_remote_car_power_off_cb +0x35d9 011196 setarg car_soft_switch_power_on_signal +0x35da 011197 store 2 ,mem_remote_car_power_standby_cb +0x35db 011199 bpatch patch19_7 ,mem_patch19 +0x35dc 011200 call car_init_environment +0x35dd 011201 call queue_init +0x35de 011202 jam 2 ,mem_lpm_mult +0x35df 011203 jam power_on ,mem_car_24g_received_pac +0x35e0 011204 fetch 1 ,mem_car_config_soft_switch_enable +0x35e1 011205 store 1 ,mem_car_hard_soft_switch +0x35e2 011206 beq hard_switch ,car_hard_switch_power_on_signal +0x35e3 011207 fetch 1 ,mem_car_config_soft_switch_gpio +0x35e4 011208 store 1 ,mem_ui_button_gpio +0x35e5 011209 jam off ,mem_le_adv_enable +: 011210 car_soft_switch_power_on_init: +0x35e6 011211 call car_ui_led_init +0x35e7 011212 call ui_button_init +0x35e8 011213 call ui_button_polling +0x35e9 011214 jam power_starting ,mem_car_power_state +0x35ea 011215 fetch 2 ,mem_ui_state_map +0x35eb 011216 rtnbit1 ui_state_btn_down +0x35ec 011217 branch app_enter_hibernate +: 011219 car_power_off_signal: +0x35ed 011220 branch car_ui_led_init +: 011222 car_hard_switch_power_on_signal: +0x35ee 011223 jam power_standby ,mem_car_power_state +: 011224 car_soft_switch_power_on_signal: +0x35ef 011225 jam on ,mem_le_adv_enable +0x35f0 011226 call car_ui_led_init +0x35f1 011227 arg 0 ,rega +0x35f2 011228 call ui_led_blink_start_global +0x35f3 011230 setarg fast_adv_interval_value_car +0x35f4 011231 call shutter_ble_adv_interval_set +: 011232 car_le_modified_name_adv: +0x35f5 011233 arg mem_le_name + 7 ,contw +0x35f6 011234 fetch 1 ,mem_le_lap +: 011235 car_name_loop: +0x35f7 011236 and pdata ,0xF0 ,temp +0x35f8 011237 rshift4 temp ,temp +0x35f9 011238 call car_hex_to_ascii +0x35fa 011239 istoret 1 ,contw +0x35fb 011240 and pdata ,0x0F ,temp +0x35fc 011241 call car_hex_to_ascii +0x35fd 011242 istoret 1 ,contw +0x35fe 011243 call le_modified_name_att_list +0x35ff 011244 fetcht 1 ,mem_le_name_len +0x3600 011245 copy temp ,loopcnt +0x3601 011246 arg mem_le_adv_data + 2 ,contw +0x3602 011247 arg mem_le_name ,contr +0x3603 011248 call memcpy +: 011249 car_le_modified_name_scan: +0x3604 011250 fetcht 1 ,mem_le_name_len +0x3605 011251 copy temp ,loopcnt +0x3606 011252 arg mem_le_scan_data + 2 ,contw +0x3607 011253 arg mem_le_name ,contr +0x3608 011254 branch memcpy +: 011255 car_hex_to_ascii: +0x3609 011256 sub temp ,9 ,null +0x360a 011257 branch car_hex_num ,positive +0x360b 011258 add temp ,55 ,temp +0x360c 011259 rtn +: 011260 car_hex_num: +0x360d 011261 add temp ,48 ,temp +0x360e 011262 rtn +: 011264 car_ui_led_init: +0x360f 011265 fetch 1 ,mem_car_config_blood_led1_gpio +0x3610 011266 bne invalid_pin_num ,car_blood_led_gpio_set +: 011267 car_ui_led_init_1: +0x3611 011268 fetch 1 ,mem_car_config_pairing_led_gpio +0x3612 011269 bne invalid_pin_num ,car_pairing_led_gpio_set +: 011270 car_ui_led_init_2: +0x3613 011271 fetch 1 ,mem_car_config_low_voltage_led_gpio +0x3614 011272 bne invalid_pin_num ,car_low_voltage_led_gpio_set +: 011273 car_ui_led_init_3: +0x3615 011274 fetch 1 ,mem_car_led_num +0x3616 011275 copy pdata ,loopcnt +0x3617 011276 setarg mem_car_led_map +0x3618 011277 copy pdata ,rega +: 011278 car_in_lp1: +0x3619 011279 copy rega ,contr +0x361a 011280 ifetch 1 ,contr +0x361b 011281 copy contr ,rega +0x361c 011282 beq invalid_pin_num ,car_in_lp1_end +0x361d 011283 copy pdata ,temp +0x361e 011284 call gpio_config_output +: 011285 car_in_lp1_end: +0x361f 011286 loop car_in_lp1 +: 011287 car_ui_led_init_end: +0x3620 011288 rtn +: 011289 car_blood_led_gpio_set: +0x3621 011290 fetch 8 ,mem_car_config_blood_led1_gpio +0x3622 011291 store 8 ,mem_car_led_map + 2 +0x3623 011292 branch car_ui_led_init_1 +: 011293 car_pairing_led_gpio_set: +0x3624 011294 store 1 ,mem_car_led_map +0x3625 011295 branch car_ui_led_init_2 +: 011296 car_low_voltage_led_gpio_set: +0x3626 011297 store 1 ,mem_car_led_map + 1 +0x3627 011298 branch car_ui_led_init_3 +: 011301 car_init_environment: +0x3628 011302 arg 0 ,rega +0x3629 011303 call pwm_init +0x362a 011304 call car_ir_rx_init +0x362b 011305 call g24_receive_process_init +0x362c 011306 branch car_init_adc_hvin +: 011308 car_init_adc_hvin: +0x362d 011309 jam 100 ,mem_car_notify_vdd_value_last +0x362e 011310 fetch 1 ,mem_car_config_low_voltage_led_gpio +0x362f 011311 store 1 ,mem_car_style2_struct_led_gpio +0x3630 011312 branch adc_init_data +: 011314 car_le_before_hibernate: +0x3631 011315 call gpio_set_before_lpm_common +0x3632 011316 branch keyscan_process_lpm_before +: 011318 car_le_process_lpm_before: +0x3633 011319 branch keyscan_process_lpm_before +: 011321 car_key_scan_process: +0x3634 011324 branch keyscan_key_process +: 011326 car_scale_process_idle: +0x3635 011327 call car_le_send_packet +0x3636 011328 call car_ir_receive_process +0x3637 011329 call car_g24_status_process +0x3638 011330 branch car_key_scan_process +: 011332 car_g24_status_process: +0x3639 011333 fetch 2 ,mem_ui_state_map +0x363a 011334 rtnbit1 ui_state_ble_connected +0x363b 011335 fetch 1 ,mem_car_24g_received_pac +0x363c 011336 beq work_paired ,car_g24_connected_event +0x363d 011337 rtn +: 011338 car_g24_connected_event: +0x363e 011339 fetch 1 ,mem_car_24g_status +0x363f 011340 rtneq work_paired +0x3640 011341 jam work_paired ,mem_car_24g_status +0x3641 011342 branch car_g24_connected +: 011344 car_le_send_packet: +0x3642 011345 fetch 2 ,mem_ui_state_map +0x3643 011346 rtnbit0 ui_state_ble_connected +0x3644 011347 call le_fifo_check_nearly_full +0x3645 011348 nrtn blank +0x3646 011349 arg mem_car_pop_queue_buff ,rega +0x3647 011350 call queue_pop +0x3648 011351 nrtn user +0x3649 011352 arg mem_car_pop_queue_buff ,contr +0x364a 011353 branch le_send_notify_from_list +: 011355 car_scale_process_bb_event: +0x364b 011356 copy regc ,pdata +0x364c 011357 beq bt_evt_button_up ,app_event_button_up +0x364d 011358 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x364e 011359 beq bt_evt_le_connected ,car_scale_event_le_conn +0x364f 011360 beq bt_evt_le_disconnected ,car_scale_event_le_discon +0x3650 011361 rtn +: 011363 car_scale_event_le_conn: +0x3651 011364 setarg disable_24g +0x3652 011365 call g24_store_mem_24g_mode +0x3653 011366 branch car_scale_process_conn +: 011367 car_g24_connected: +0x3654 011368 fetch 2 ,mem_car_24g_no_data_timeout_count +0x3655 011369 store 2 ,mem_car_24g_no_data_timeout_timer +: 011370 car_scale_process_conn: +0x3656 011371 jam 0x14 ,mem_car_notify_vdd_timer +0x3657 011372 jam 0 ,mem_lpm_mode +0x3658 011373 call app_ble_stop_adv +0x3659 011374 call app_lpm_mult_enable +0x365a 011375 fetch 1 ,mem_car_config_pairing_led_conn_status +0x365b 011376 beq 0x01 ,car_pairing_led_conn_status_setting +: 011377 car_scale_process_conn_next: +0x365c 011378 arg 0 ,rega +0x365d 011379 branch ui_led_on_global +: 011380 car_pairing_led_conn_status_setting: +0x365e 011381 arg 0 ,rega +0x365f 011382 branch ui_led_blink_stop_global +: 011384 car_scale_event_le_discon: +0x3660 011385 setarg rx_24g +0x3661 011386 call g24_store_mem_24g_mode +: 011387 car_g24_disconnect: +0x3662 011388 setarg 0 +0x3663 011389 store 5 ,mem_car_led_control +0x3664 011390 setarg 4 +0x3665 011391 call pwm_disable +0x3666 011392 setarg 5 +0x3667 011393 call pwm_disable +0x3668 011394 setarg 20 +0x3669 011395 call pwm_disable +0x366a 011396 setarg 21 +0x366b 011397 call pwm_disable +0x366c 011398 setarg 22 +0x366d 011399 call pwm_disable +0x366e 011400 setarg 7 +0x366f 011401 call pwm_disable +0x3670 011402 call queue_init +0x3671 011403 jam 10 ,mem_motor1_speed +0x3672 011404 jam 10 ,mem_motor2_speed +0x3673 011405 jam 10 ,mem_motor3_speed +0x3674 011407 jam 2 ,mem_lpm_mult +0x3675 011408 arg 0 ,rega +0x3676 011409 call ui_led_blink_start_global +0x3677 011411 setarg fast_adv_interval_value_car +0x3678 011412 call shutter_ble_adv_interval_set +0x3679 011413 branch app_ble_start_adv +: 011415 car_le_bb_event_timer: +0x367a 011417 call car_moto1_blank_data_timer +0x367b 011418 call car_moto2_blank_data_timer +0x367c 011419 call car_moto3_blank_data_timer +0x367d 011420 call app_power_timer +0x367e 011421 call car_led_control_timer +0x367f 011422 call car_notify_vdd_timer +0x3680 011423 call car_24g_no_data_timeout_timer +0x3681 011424 call car_ir_breakdown_timer +0x3682 011425 branch car_attack_shake_timer +: 011427 car_ir_breakdown_timer: +0x3683 011428 arg mem_car_ir_breakdown_check_timer ,regc +0x3684 011429 arg car_ir_breakdown_timeout ,regb +0x3685 011430 branch timer_single_step +: 011431 car_ir_breakdown_timeout: +0x3686 011432 call car_ir_gpio_get_status +0x3687 011433 nrtn true +0x3688 011434 jam 1 ,mem_car_ir_breakdown_flag +0x3689 011435 rtn +: 011437 car_24g_no_data_timeout_timer: +0x368a 011438 arg mem_car_24g_no_data_timeout_timer ,regc +0x368b 011439 arg car_24g_no_data_timer_timeout ,regb +0x368c 011440 branch timer_single_step_2b +: 011441 car_24g_no_data_timer_timeout: +0x368d 011442 jam work_search ,mem_car_24g_status +0x368e 011443 branch car_g24_disconnect +: 011445 car_attack_shake_timer: +0x368f 011446 arg mem_car_attack_shake_timer ,regc +0x3690 011447 arg car_attack_shake ,regb +0x3691 011448 branch timer_single_step +: 011449 car_attack_shake: +0x3692 011450 fetch 1 ,mem_car_attack_shake_flag +0x3693 011451 branch car_attack_shake_stop ,blank +0x3694 011452 jam 2 ,mem_car_attack_shake_timer +0x3695 011453 jam 0 ,mem_car_attack_shake_flag +0x3696 011454 setarg 0x0a02 +0x3697 011455 store 2 ,mem_le_receive_payload +0x3698 011456 fetch 1 ,mem_car_config_device_select +0x3699 011457 beq device_battle_tank ,car_attack_shake_front_battle_tank +: 011458 car_attack_shake_front_battle_car: +0x369a 011459 branch car_motor_control +: 011460 car_attack_shake_front_battle_tank: +0x369b 011461 setarg 0x0a02 +0x369c 011462 store 2 ,mem_le_receive_payload + 2 +0x369d 011463 branch car_motor_control +: 011464 car_attack_shake_stop: +0x369e 011465 setarg 0 +0x369f 011466 store 4 ,mem_le_receive_payload +0x36a0 011467 branch car_motor_control +: 011469 car_notify_vdd_timer: +0x36a1 011470 fetch 1 ,mem_car_config_bat_notify_enable +0x36a2 011471 rtn blank +0x36a3 011472 fetch 2 ,mem_ui_state_map +0x36a4 011473 bbit0 ui_state_ble_connected ,car_low_bat_led_off +0x36a5 011474 arg mem_car_notify_vdd_timer ,regc +0x36a6 011475 arg car_notify_vdd ,regb +0x36a7 011476 branch timer_single_step +: 011477 car_notify_vdd: +0x36a8 011478 fetch 1 ,mem_car_notify_vdd_count +0x36a9 011479 store 1 ,mem_car_notify_vdd_timer +0x36aa 011480 fetch 1 ,mem_car_working_flag +0x36ab 011481 nrtn blank +: 011482 car_read_hvin: +0x36ac 011483 call adc_set_mode +0x36ad 011484 call vdd_calculate_by_mode +0x36ae 011485 store 2 ,mem_vdd_now_vol +0x36af 011486 arg mem_vdd_calculate_set ,rega +0x36b0 011487 call adc_bat_percent_lowpower_out +0x36b1 011488 fetcht 1 ,mem_car_notify_vdd_value_last +0x36b2 011489 isub temp ,null +0x36b3 011490 branch car_notify_vdd_next2 ,positive +0x36b4 011491 store 1 ,mem_car_notify_vdd_value_last +0x36b5 011492 copy pdata ,temp +: 011493 car_notify_vdd_next2: +0x36b6 011494 storet 1 ,mem_car_notify_vdd_percent +0x36b7 011495 fetch 1 ,mem_car_config_low_voltage_percent +0x36b8 011496 isub temp ,null +0x36b9 011497 call car_enter_low_bat ,positive +0x36ba 011498 storet 1 ,mem_notify_bat_payload +0x36bb 011499 arg 6 ,loopcnt +0x36bc 011500 arg mem_notify_bat_head ,contr +0x36bd 011501 call calc_check_sum_start +0x36be 011502 store 1 ,mem_notify_bat_check_sum +0x36bf 011503 arg mem_notify_bat_packet ,rega +0x36c0 011504 branch queue_push +: 011505 car_enter_low_bat: +0x36c1 011506 fetch 1 ,mem_low_bat_flag +0x36c2 011507 nrtn blank +0x36c3 011508 jam 1 ,mem_low_bat_flag +0x36c4 011509 arg 1 ,rega +0x36c5 011510 branch ui_led_blink_start_global +: 011511 car_low_bat_led_off: +0x36c6 011512 arg 1 ,rega +0x36c7 011513 branch ui_led_blink_stop_global +: 011515 car_led_control_timer: +0x36c8 011516 arg mem_car_led_control_timer ,regc +0x36c9 011517 arg car_led_control ,regb +0x36ca 011518 branch timer_single_step +: 011519 car_led_control: +0x36cb 011520 jam 5 ,mem_car_led_control_timer +0x36cc 011521 jam 0 ,mem_car_led_no +0x36cd 011522 fetch 1 ,mem_car_led_blink_status +0x36ce 011523 beq led_on ,car_led_control_blink_off +0x36cf 011524 beq led_off ,car_led_control_blink_on +: 011525 car_led_control_set: +0x36d0 011526 arg mem_car_led_control ,contr +0x36d1 011527 copy contr ,rega +0x36d2 011528 arg 8 ,loopcnt +: 011529 car_led_control_timer_next: +0x36d3 011530 copy rega ,contr +0x36d4 011531 ifetch 1 ,contr +0x36d5 011532 copy contr ,rega +0x36d6 011533 beq led_off ,car_led_control_off +0x36d7 011534 beq led_on ,car_led_control_on +0x36d8 011535 beq led_blink ,car_led_control_blink +: 011536 car_led_control_timer_next_2: +0x36d9 011537 fetch 1 ,mem_car_led_no +0x36da 011538 increase 1 ,pdata +0x36db 011539 store 1 ,mem_car_led_no +0x36dc 011540 loop car_led_control_timer_next +0x36dd 011541 rtn +: 011542 car_led_switch: +0x36de 011543 fetch 1 ,mem_car_led_no +0x36df 011544 arg mem_car_config_blood_led_gpio ,regb +0x36e0 011545 iadd regb ,regb +0x36e1 011546 ifetcht 1 ,regb +0x36e2 011547 rtn +: 011548 car_led_control_off: +0x36e3 011549 call car_led_switch +0x36e4 011550 call gpio_out_inactive +0x36e5 011551 branch car_led_control_timer_next_2 +: 011552 car_led_control_on: +0x36e6 011553 call car_led_switch +0x36e7 011554 call gpio_out_active +0x36e8 011555 branch car_led_control_timer_next_2 +: 011556 car_led_control_blink: +0x36e9 011557 fetch 1 ,mem_car_led_blink_status +0x36ea 011558 beq led_on ,car_led_control_off +0x36eb 011559 branch car_led_control_on +: 011560 car_led_control_blink_on: +0x36ec 011561 jam led_on ,mem_car_led_blink_status +0x36ed 011562 branch car_led_control_set +: 011563 car_led_control_blink_off: +0x36ee 011564 jam led_off ,mem_car_led_blink_status +0x36ef 011565 branch car_led_control_set +: 011569 calc_check_sum_start: +0x36f0 011570 arg 0 ,rega +: 011571 calc_check_sum_loop: +0x36f1 011572 ifetch 1 ,contr +0x36f2 011573 iadd rega ,rega +0x36f3 011574 loop calc_check_sum_loop +: 011575 calc_check_sum_and: +0x36f4 011576 and rega ,0xff ,pdata +0x36f5 011577 rtn +: 011579 car_le_receive_data: +0x36f6 011580 fetch 1 ,mem_le_att_opcode +0x36f7 011581 beq attop_write_request ,car_le_parse_att_write_request +0x36f8 011582 rtn +: 011583 car_le_parse_att_write_request: +0x36f9 011584 fetch 2 ,mem_le_att_handle +0x36fa 011585 beq att_car_control_handle ,car_control_le_receive +0x36fb 011586 rtn +: 011598 le_app_receive_data: +0x36fc 011599 bpatch patch1a_0 ,mem_patch1a +0x36fd 011600 ifetch 5 ,rega +0x36fe 011601 store 5 ,mem_app_receive_temp +0x36ff 011602 fetch 2 ,mem_app_receive_temp +0x3700 011603 arg le_receive_packet_head ,temp +0x3701 011604 isub temp ,null +0x3702 011605 nrtn zero +0x3703 011606 fetch 2 ,mem_app_receive_temp + 3 +0x3704 011607 byteswap pdata ,pdata +0x3705 011608 store 2 ,mem_app_receive_temp + 3 +0x3706 011609 copy pdata ,loopcnt +0x3707 011610 increase 5 ,rega +0x3708 011611 copy rega ,contr +0x3709 011612 arg mem_app_receive_temp + 5 ,contw +0x370a 011613 call memcpy +0x370b 011614 ifetch 1 ,contr +0x370c 011615 store 1 ,mem_app_receive_temp + 15 +0x370d 011616 arg mem_app_receive_temp + 2 ,rega +0x370e 011617 arg mem_app_receive_temp + 5 ,regb +0x370f 011618 rtn +: 011620 car_control_le_receive: +0x3710 011621 setarg 0 +0x3711 011622 store 5 ,mem_le_receive_payload +0x3712 011623 store 5 ,mem_le_receive_payload + 5 +0x3713 011624 call le_app_receive_data +0x3714 011625 copy regb ,contr +0x3715 011626 arg mem_le_receive_payload ,contw +0x3716 011627 arg 10 ,loopcnt +0x3717 011628 call memcpy +: 011629 car_receive_cmd_select: +0x3718 011630 bpatch patch1a_1 ,mem_patch1a +0x3719 011631 ifetch 1 ,rega +0x371a 011632 beq car_cmd_old_car_control ,car_drive_old +0x371b 011633 beq car_cmd_old_speed_control ,car_speed_set_old +0x371c 011634 beq car_cmd_l_r_motor_control ,car_motor_control +0x371d 011635 beq car_cmd_f_b_motor_control ,car_motor_control +0x371e 011636 beq car_cmd_ir_control ,car_ir_data_rx_from_app +0x371f 011637 beq car_cmd_led_control ,car_led_control_receive +0x3720 011638 beq car_cmd_device_info ,car_info_request +0x3721 011639 rtn +: 011641 car_24g_receive_data: +0x3722 011642 fetch 2 ,mem_ui_state_map +0x3723 011643 rtnbit1 ui_state_ble_connected +0x3724 011645 fetch 2 ,mem_car_24g_no_data_timeout_count +0x3725 011646 store 2 ,mem_car_24g_no_data_timeout_timer +0x3726 011648 jam work_paired ,mem_car_24g_received_pac +0x3727 011650 setarg offset_24g_rxdata_temp_add3 +0x3728 011651 call g24_set_rega +0x3729 011652 call car_control_le_receive +0x372a 011654 fetch 1 ,mem_app_receive_temp + 2 +0x372b 011655 beq car_cmd_l_r_motor_control ,car_24g_receive_data_next +0x372c 011656 beq car_cmd_f_b_motor_control ,car_24g_receive_data_next +0x372d 011657 rtn +: 011658 car_24g_receive_data_next: +0x372e 011659 fetch 1 ,mem_le_receive_payload +0x372f 011660 ncall car_moto1_enable_blank_data_timer ,blank +0x3730 011661 fetch 1 ,mem_le_receive_payload + 2 +0x3731 011662 ncall car_moto2_enable_blank_data_timer ,blank +0x3732 011663 fetch 1 ,mem_le_receive_payload + 4 +0x3733 011664 ncall car_moto3_enable_blank_data_timer ,blank +0x3734 011665 rtn +: 011667 car_moto1_enable_blank_data_timer: +0x3735 011668 jam 5 ,mem_car_moto1_blank_timer +0x3736 011669 rtn +: 011670 car_moto2_enable_blank_data_timer: +0x3737 011671 jam 5 ,mem_car_moto2_blank_timer +0x3738 011672 rtn +: 011673 car_moto3_enable_blank_data_timer: +0x3739 011674 jam 5 ,mem_car_moto3_blank_timer +0x373a 011675 rtn +: 011677 car_moto1_blank_data_timer: +0x373b 011678 arg mem_car_moto1_blank_timer ,regc +0x373c 011679 arg car_moto1_blank_data ,regb +0x373d 011680 branch timer_single_step +: 011681 car_moto2_blank_data_timer: +0x373e 011682 arg mem_car_moto2_blank_timer ,regc +0x373f 011683 arg car_moto2_blank_data ,regb +0x3740 011684 branch timer_single_step +: 011685 car_moto3_blank_data_timer: +0x3741 011686 arg mem_car_moto3_blank_timer ,regc +0x3742 011687 arg car_moto3_blank_data ,regb +0x3743 011688 branch timer_single_step +: 011690 car_moto1_blank_data: +0x3744 011691 jam 0 ,mem_le_receive_payload +0x3745 011692 branch car_motor_control +: 011693 car_moto2_blank_data: +0x3746 011694 jam 0 ,mem_le_receive_payload + 2 +0x3747 011695 branch car_motor_control +: 011696 car_moto3_blank_data: +0x3748 011697 jam 0 ,mem_le_receive_payload + 4 +0x3749 011698 branch car_motor_control +: 011703 car_drive_old: +0x374a 011704 call car_left_right_control_old +0x374b 011705 branch car_front_back_control_old +: 011706 car_left_right_control_old: +0x374c 011707 fetch 1 ,mem_le_receive_payload +0x374d 011708 store 1 ,mem_motor2_status +0x374e 011709 branch car_motor2_control +: 011710 car_front_back_control_old: +0x374f 011711 fetch 1 ,mem_motor1_speed +0x3750 011712 call car_reset_old_speed +0x3751 011713 fetch 1 ,mem_le_receive_payload + 1 +0x3752 011714 store 1 ,mem_motor1_status +0x3753 011715 branch car_motor1_control +: 011716 car_reset_old_speed: +0x3754 011717 beq speed_level_2 ,car_reset_old_speed2 +0x3755 011718 beq speed_level_3 ,car_reset_old_speed3 +0x3756 011719 store 1 ,mem_motor1_speed +0x3757 011720 rtn +: 011721 car_reset_old_speed2: +0x3758 011722 jam speed_level_5 ,mem_motor1_speed +0x3759 011723 rtn +: 011724 car_reset_old_speed3: +0x375a 011725 jam speed_level_10 ,mem_motor1_speed +0x375b 011726 rtn +: 011727 car_speed_set_old: +0x375c 011728 fetch 1 ,mem_le_receive_payload +0x375d 011729 call car_reset_old_speed +0x375e 011730 fetch 1 ,mem_motor1_speed +0x375f 011731 call car_motor_speed_duty_setting +0x3760 011732 call car_motor_speed_duty_transform +0x3761 011733 branch pwm_pwm0_duty_set +: 011735 car_motor_control: +0x3762 011736 fetch 1 ,mem_car_24g_go_die_flag +0x3763 011737 nrtn blank +0x3764 011738 fetch 6 ,mem_le_receive_payload +0x3765 011739 store 6 ,mem_motor1_status +0x3766 011740 fetch 1 ,mem_motor1_speed +0x3767 011741 fetcht 1 ,mem_motor2_speed +0x3768 011742 iand temp ,pdata +0x3769 011743 fetcht 1 ,mem_motor3_speed +0x376a 011744 iand temp ,pdata +0x376b 011745 call car_motor_working_flag ,blank +0x376c 011746 bpatch patch1a_2 ,mem_patch1a +0x376d 011747 call car_motor1_control +0x376e 011748 call car_motor2_control +0x376f 011749 branch car_motor3_control +: 011750 car_motor1_control: +0x3770 011751 arg mem_motor1_pwm_set ,regb +0x3771 011752 arg mem_motor1_status ,contr +0x3772 011753 branch car_motor_status_select +: 011754 car_motor2_control: +0x3773 011755 arg mem_motor2_pwm_set ,regb +0x3774 011756 arg mem_motor2_status ,contr +0x3775 011757 branch car_motor_status_select +: 011758 car_motor3_control: +0x3776 011759 arg mem_motor3_pwm_set ,regb +0x3777 011760 arg mem_motor3_status ,contr +0x3778 011761 branch car_motor_status_select +: 011762 car_motor_working_flag: +0x3779 011763 jam 0 ,mem_car_working_flag +0x377a 011764 rtn +: 011766 car_motor_status_select: +0x377b 011767 ifetch 1 ,contr +0x377c 011768 beq motor_stop ,car_motor_stop +0x377d 011769 beq go_front ,car_motor_positive +0x377e 011770 beq go_back ,car_motor_negative +0x377f 011771 rtn +: 011772 car_motor_positive: +0x3780 011773 jam 0 ,mem_motor_select_p_n +0x3781 011774 branch car_motor_negative + 1 +: 011775 car_motor_negative: +0x3782 011776 jam 1 ,mem_motor_select_p_n +0x3783 011777 ifetch 1 ,contr +0x3784 011778 store 1 ,mem_car_motor_speed +0x3785 011779 ifetch 8 ,regb +0x3786 011780 branch car_motor_work +: 011782 car_motor_stop: +0x3787 011783 ifetch 1 ,regb +0x3788 011784 call pwm_disable +0x3789 011785 increase 1 ,regb +0x378a 011786 ifetch 1 ,regb +0x378b 011787 branch pwm_disable +: 011788 car_motor_work: +0x378c 011789 store 8 ,mem_motor_pwm_pin1_set +0x378d 011790 jam 1 ,mem_car_working_flag +0x378e 011791 fetch 1 ,mem_motor_select_p_n +0x378f 011792 beq 0 ,car_motor_select_positive +: 011793 car_motor_select_negative: +0x3790 011794 fetch 1 ,mem_motor_pwm_pin2_set +0x3791 011795 store 1 ,mem_motor_pwm_pin_set +0x3792 011796 fetch 1 ,mem_motor_pwm_pin1_set +: 011797 car_motor_work_next: +0x3793 011798 call pwm_disable +0x3794 011799 fetch 1 ,mem_car_motor_speed +0x3795 011800 call car_motor_speed_duty_setting +0x3796 011801 store 1 ,mem_motor_pwm_dute_set +0x3797 011802 fetch 6 ,mem_motor_pwm_pin_set +0x3798 011803 store 6 ,mem_pdatatemp +0x3799 011804 branch pwm_out_set +: 011805 car_motor_select_positive: +0x379a 011806 fetch 1 ,mem_motor_pwm_pin1_set +0x379b 011807 store 1 ,mem_motor_pwm_pin_set +0x379c 011808 fetch 1 ,mem_motor_pwm_pin2_set +0x379d 011809 branch car_motor_work_next +: 011811 car_motor_speed_duty_setting: +0x379e 011812 mul32 pdata ,5 ,pdata +0x379f 011813 add pdata ,50 ,pdata +0x37a0 011814 rtn +: 011815 car_motor_speed_duty_transform: +0x37a1 011816 arg 12000 ,temp +0x37a2 011817 imul32 temp ,pdata +0x37a3 011818 div pdata ,100 +0x37a4 011819 call wait_div_end +0x37a5 011820 quotient temp +0x37a6 011821 copy temp ,rega +0x37a7 011822 setarg 12000 +0x37a8 011823 isub temp ,regb +0x37a9 011824 rtn +: 011827 car_ir_init: +0x37aa 011828 hfetch 1 ,core_gpio_sel2 +0x37ab 011829 set1 2 ,pdata +0x37ac 011830 hstore 1 ,core_gpio_sel2 +0x37ad 011831 setarg 158 +0x37ae 011832 hstore 2 ,core_pwm_pcnt4 +0x37af 011833 hstore 2 ,core_pwm_ncnt4 +0x37b0 011834 rtn +: 011836 car_ir_data_rx_from_app: +0x37b1 011837 fetch 1 ,mem_car_24g_go_die_flag +0x37b2 011838 nrtn blank +0x37b3 011839 fetch 2 ,mem_le_receive_payload +0x37b4 011840 store 2 ,mem_ir_data +0x37b5 011841 fetch 1 ,mem_car_24g_status +0x37b6 011842 bne work_paired ,car_ir_data_tx +0x37b7 011843 fetch 2 ,mem_le_lap +0x37b8 011844 store 2 ,mem_ir_data +: 011845 car_ir_data_tx: +0x37b9 011846 bpatch patch1a_3 ,mem_patch1a +0x37ba 011847 call car_ir_init +0x37bb 011848 call car_ir_enable +0x37bc 011849 setarg 48000 +0x37bd 011850 call sleep +0x37be 011851 call car_ir_disable +0x37bf 011852 setarg 7200 +0x37c0 011853 call sleep +0x37c1 011854 arg 16 ,loopcnt +: 011855 car_ir_send_loop: +0x37c2 011856 call car_ir_enable +0x37c3 011857 fetch 2 ,mem_ir_data +0x37c4 011858 bbit1 0 ,car_ir_is_bit1 +0x37c5 011859 setarg 7200 +0x37c6 011860 call sleep +0x37c7 011861 call car_ir_disable +0x37c8 011862 branch car_ir_wait_finish +: 011864 car_ir_is_bit1: +0x37c9 011865 setarg 14400 +0x37ca 011866 call sleep +0x37cb 011867 call car_ir_disable +: 011868 car_ir_wait_finish: +0x37cc 011869 setarg 7200 +0x37cd 011870 call sleep +0x37ce 011871 fetch 2 ,mem_ir_data +0x37cf 011872 rshift pdata ,pdata +0x37d0 011873 store 2 ,mem_ir_data +0x37d1 011874 loop car_ir_send_loop +0x37d2 011876 jam 2 ,mem_car_attack_shake_timer +0x37d3 011877 jam 1 ,mem_car_attack_shake_flag +0x37d4 011878 setarg 0x0a01 +0x37d5 011879 store 2 ,mem_le_receive_payload +0x37d6 011880 fetch 1 ,mem_car_config_device_select +0x37d7 011881 beq device_battle_tank ,car_attack_shake_back_battle_tank +: 011882 car_attack_shake_back_battle_car: +0x37d8 011883 branch car_motor_control +: 011884 car_attack_shake_back_battle_tank: +0x37d9 011885 setarg 0x0a01 +0x37da 011886 store 2 ,mem_le_receive_payload + 2 +0x37db 011887 branch car_motor_control +: 011889 car_ir_enable: +0x37dc 011890 hfetch 1 ,core_gpio_key2 +0x37dd 011891 or_into 0x40 ,pdata +0x37de 011892 hstore 1 ,core_gpio_key2 +0x37df 011893 rtn +: 011894 car_ir_disable: +0x37e0 011895 hfetch 1 ,core_gpio_key2 +0x37e1 011896 and_into 0xbf ,pdata +0x37e2 011897 hstore 1 ,core_gpio_key2 +0x37e3 011898 rtn +: 011900 car_ir_rx_init: +0x37e4 011901 fetch 1 ,mem_car_config_ir_enable +0x37e5 011902 rtneq 0x00 +0x37e6 011903 call lpm_disable_exen_output +0x37e7 011904 fetcht 1 ,mem_car_config_ir_rx_gpio +0x37e8 011905 storet 1 ,mem_ir_rx_gpio +0x37e9 011906 call gpio_config_input +0x37ea 011907 call car_ir_gpio_get_status +0x37eb 011908 nrtn true +0x37ec 011909 jam 1 ,mem_car_ir_breakdown_check_timer +0x37ed 011910 rtn +: 011912 car_ir_receive_process: +0x37ee 011913 fetch 1 ,mem_car_config_ir_enable +0x37ef 011914 rtneq flag_ir_disable +0x37f0 011915 fetch 1 ,mem_car_ir_breakdown_flag +0x37f1 011916 nrtn blank +0x37f2 011917 fetch 2 ,mem_ui_state_map +0x37f3 011918 bbit1 ui_state_ble_connected ,car_ir_receive_process_next +0x37f4 011919 fetch 1 ,mem_car_24g_status +0x37f5 011920 rtnne work_paired +: 011921 car_ir_receive_process_next: +0x37f6 011922 bpatch patch1a_4 ,mem_patch1a +0x37f7 011923 call car_ir_gpio_get_status +0x37f8 011924 nrtn true +0x37f9 011925 setarg 36000 +0x37fa 011926 call sleep +0x37fb 011927 call car_ir_gpio_get_status +0x37fc 011928 nrtn true +0x37fd 011929 call car_ir_clk_get +: 011930 car_ir_packet_head_wait_end: +0x37fe 011931 call car_ir_clk_check +0x37ff 011932 nrtn positive +0x3800 011933 call car_ir_gpio_get_status +0x3801 011934 branch car_ir_packet_head_wait_end ,true +0x3802 011935 arg 0 ,rega +0x3803 011936 arg 16 ,loopcnt +0x3804 011937 call car_ir_clk_get +: 011938 car_ir_receive_process_loop: +0x3805 011939 call car_ir_clk_check +0x3806 011940 nrtn positive +0x3807 011941 call car_ir_gpio_get_status +0x3808 011942 nbranch car_ir_receive_process_loop ,true +0x3809 011943 setarg 10800 +0x380a 011944 call sleep +0x380b 011945 call car_ir_gpio_get_status +0x380c 011946 branch car_ir_get_bit1 ,true +: 011947 car_ir_get_bit0: +0x380d 011948 setarg 0 +0x380e 011949 rshift rega ,rega +0x380f 011950 ior rega ,rega +0x3810 011951 loop car_ir_receive_process_loop +0x3811 011952 branch car_ir_receive_process_end +: 011953 car_ir_get_bit1: +0x3812 011954 setarg 0x8000 +0x3813 011955 rshift rega ,rega +0x3814 011956 ior rega ,rega +0x3815 011957 call car_ir_clk_get +: 011958 car_ir_get_bit1_wait_low_end: +0x3816 011959 call car_ir_clk_check +0x3817 011960 nrtn positive +0x3818 011961 call car_ir_gpio_get_status +0x3819 011962 branch car_ir_get_bit1_wait_low_end ,true +0x381a 011963 loop car_ir_receive_process_loop +: 011964 car_ir_receive_process_end: +0x381b 011965 bpatch patch1a_5 ,mem_patch1a +0x381c 011966 copy rega ,pdata +0x381d 011967 store 2 ,mem_ir_rx_buf +0x381e 011968 store 2 ,mem_ir_notify_data + 8 +0x381f 011969 fetch 1 ,mem_car_24g_status +0x3820 011970 beq work_paired ,car_ir_24g_receive_attack +: 011971 car_ir_data_notify: +0x3821 011972 arg 0x07 ,loopcnt +0x3822 011973 arg mem_ir_notify_data_head ,contr +0x3823 011974 call calc_check_sum_start +0x3824 011975 store 1 ,mem_ir_notify_data_check_sum +0x3825 011976 arg mem_ir_notify_data ,rega +0x3826 011977 branch queue_push +: 011979 car_ir_24g_receive_attack: +0x3827 011980 fetch 1 ,mem_car_24g_ir_receive_attack_count +0x3828 011981 increase 1 ,pdata +0x3829 011982 store 1 ,mem_car_24g_ir_receive_attack_count +0x382a 011983 div pdata ,2 +0x382b 011984 call wait_div_end +0x382c 011985 quotient temp +0x382d 011986 remainder pdata +0x382e 011987 nbranch car_ir_24g_receive_attack_blink ,blank +: 011988 car_ir_24g_receive_attack_off: +0x382f 011989 fetch 1 ,mem_car_config_led_num +0x3830 011990 isub temp ,null +0x3831 011991 call car_ir_24g_go_die ,zero +0x3832 011992 arg mem_car_led_control ,pdata +0x3833 011993 increase -1 ,temp +0x3834 011994 iadd temp ,rega +0x3835 011995 arg 0 ,pdata +0x3836 011996 istore 1 ,rega +0x3837 011997 rtn +: 011998 car_ir_24g_receive_attack_blink: +0x3838 011999 arg mem_car_led_control ,pdata +0x3839 012000 iadd temp ,rega +0x383a 012001 arg 2 ,pdata +0x383b 012002 istore 1 ,rega +0x383c 012003 rtn +: 012004 car_ir_24g_go_die: +0x383d 012005 jam 1 ,mem_car_24g_go_die_flag +0x383e 012006 rtn +: 012007 car_ir_clk_get: +0x383f 012008 copy clkn_bt ,pdata +0x3840 012009 store 4 ,mem_ir_receive_clkn +0x3841 012010 rtn +: 012011 car_ir_clk_check: +0x3842 012012 copy clkn_bt ,pdata +0x3843 012013 fetcht 4 ,mem_ir_receive_clkn +0x3844 012014 isub temp ,pdata +0x3845 012015 sub pdata ,200 ,null +0x3846 012016 rtn +: 012018 car_ir_gpio_get_status: +0x3847 012019 fetcht 1 ,mem_ir_rx_gpio +0x3848 012020 branch gpio_get_bit +: 012022 car_led_control_receive: +0x3849 012023 fetch 8 ,mem_le_receive_payload +0x384a 012024 store 8 ,mem_car_led_control +0x384b 012025 rtn +: 012027 car_info_request: +0x384c 012028 fetch 1 ,mem_car_config_device_select +0x384d 012029 store 1 ,mem_car_info_request_payload +0x384e 012030 fetch 1 ,mem_car_config_motor_layout +0x384f 012031 store 1 ,mem_car_info_request_payload + 1 +0x3850 012032 fetch 1 ,mem_car_config_ir_enable +0x3851 012033 store 1 ,mem_car_info_request_payload + 2 +0x3852 012034 arg 13 ,loopcnt +0x3853 012035 arg mem_car_info_request_head ,contr +0x3854 012036 call calc_check_sum_start +0x3855 012037 store 1 ,mem_car_info_request_checksum +0x3856 012038 arg mem_car_info_request ,rega +0x3857 012039 branch queue_push +: 012045 light_init: +0x3858 012046 call clear_eeprom_size_2k +0x3859 012047 jam 0x7a ,mem_curr_packet_num +0x385a 012048 call light_load_controler_list +0x385b 012049 call light_init_crr_cmd_count +0x385c 012050 setarg light_pairing_timer +0x385d 012051 store 2 ,mem_cb_event_timer +0x385e 012052 arg 0 ,rega +0x385f 012053 branch pwm_init +: 012055 light_pairing_timer: +0x3860 012056 fetch 2 ,mem_light_pairing_timer +0x3861 012057 rtn blank +0x3862 012058 increase -1 ,pdata +0x3863 012059 store 2 ,mem_light_pairing_timer +0x3864 012060 rtnne 0 +0x3865 012061 jam 0 ,mem_light_pairing_enable +0x3866 012062 rtn +: 012064 light_init_crr_cmd_count: +0x3867 012065 bpatch patch1a_6 ,mem_patch1a +0x3868 012066 fetch 1 ,mem_light_next_record +0x3869 012067 sub pdata ,40 ,null +0x386a 012068 rtn positive +0x386b 012069 jam 0 ,mem_light_next_record +0x386c 012070 rtn +: 012072 light_load_controler_list: +0x386d 012073 arg mem_light_next_record ,rega +0x386e 012074 arg 0 ,regb +0x386f 012075 arg 81 ,temp +0x3870 012076 branch iicd_read_eep_data +: 012079 light_find_controler_pairing: +0x3871 012080 disable user +0x3872 012081 fetch 1 ,mem_light_cnum +0x3873 012082 copy pdata ,loopcnt +0x3874 012084 arg mem_light_clist ,rega +0x3875 012085 copy regc ,regb +: 012086 light_find_controler_pairing_loop: +0x3876 012087 bpatch patch1a_7 ,mem_patch1a +0x3877 012088 call light_compare_addr_record +0x3878 012089 branch enable_user ,zero +: 012090 light_find_single_pairing_diff: +0x3879 012091 increase 4 ,rega +0x387a 012092 loop light_find_controler_pairing_loop +0x387b 012093 rtn +: 012096 light_compare_addr_record: +0x387c 012097 bpatch patch1b_0 ,mem_patch1b +0x387d 012098 ifetch 3 ,rega +0x387e 012099 ifetcht 3 ,regb +0x387f 012100 isub temp ,null +0x3880 012101 rtn +: 012103 light_compare_single_record: +0x3881 012104 bpatch patch1b_1 ,mem_patch1b +0x3882 012105 ifetch 3 ,rega +0x3883 012106 ifetcht 3 ,regb +0x3884 012107 isub temp ,null +0x3885 012108 nrtn zero +0x3886 012109 ifetch 1 ,contr +0x3887 012110 sub pdata ,0 ,null +0x3888 012111 rtn zero +0x3889 012112 add rega ,3 ,contr +0x388a 012113 ifetcht 1 ,contr +0x388b 012114 isub temp ,null +0x388c 012115 rtn +: 012118 light_find_controler_cmd: +0x388d 012119 bpatch patch1b_2 ,mem_patch1b +0x388e 012120 disable user +0x388f 012121 fetch 1 ,mem_light_cnum +0x3890 012122 copy pdata ,loopcnt +0x3891 012124 arg mem_light_clist ,rega +0x3892 012125 copy regc ,regb +: 012126 light_find_controler_cmd_loop: +0x3893 012127 call light_compare_single_record +0x3894 012128 branch enable_user ,zero +0x3895 012129 increase 4 ,rega +0x3896 012130 loop light_find_controler_cmd_loop +0x3897 012131 rtn +: 012134 light_recv_adv: +0x3898 012135 fetch 1 ,mem_le_scanrsp_rcv +0x3899 012136 increase 1 ,pdata +0x389a 012137 store 1 ,mem_le_scanrsp_rcv +0x389b 012138 arg mem_le_rxbuf + 12 ,regc +: 012140 light_anylize_command: +0x389c 012141 ifetch 2 ,regc +0x389d 012142 arg 0x55aa ,temp +0x389e 012143 isub temp ,null +0x389f 012144 nrtn zero +0x38a0 012145 copy contr ,regc +0x38a1 012146 ifetcht 3 ,regc +0x38a2 012147 setarg 0xffffff +0x38a3 012148 isub temp ,null +0x38a4 012149 branch light_parse_cmd ,zero +0x38a5 012150 call light_find_controler_cmd +0x38a6 012151 branch light_parse_cmd ,user +0x38a7 012152 rtn +: 012154 light_parse_cmd: +0x38a8 012155 bpatch patch1b_3 ,mem_patch1b +0x38a9 012156 increase 4 ,regc +0x38aa 012157 ifetch 1 ,regc +0x38ab 012158 fetcht 1 ,mem_curr_packet_num +0x38ac 012159 isub temp ,null +0x38ad 012160 rtn zero +0x38ae 012161 store 1 ,mem_curr_packet_num +0x38af 012162 fetch 1 ,mem_le_req_rcv +0x38b0 012163 increase 1 ,pdata +0x38b1 012164 store 1 ,mem_le_req_rcv +0x38b2 012166 increase 1 ,regc +0x38b3 012167 ifetch 1 ,regc +0x38b4 012168 store 1 ,mem_light_crr_cmd_count +0x38b5 012169 copy pdata ,loopcnt +0x38b6 012170 rtn blank +: 012171 light_parse_cmd_loop: +0x38b7 012172 ifetch 1 ,contr +0x38b8 012173 beq light_cmd_pwm0 ,light_parse_cmd_pwm0 +0x38b9 012174 beq light_cmd_pwm1 ,light_parse_cmd_pwm1 +0x38ba 012175 beq light_cmd_pwm2 ,light_parse_cmd_pwm2 +0x38bb 012176 beq light_cmd_pwm3 ,light_parse_cmd_pwm3 +0x38bc 012177 beq light_cmd_pwm4 ,light_parse_cmd_pwm4 +0x38bd 012178 beq light_cmd_pwm5 ,light_parse_cmd_pwm5 +0x38be 012179 beq light_cmd_auto_mode ,light_parse_auto_mode +0x38bf 012180 beq light_cmd_pairing ,light_parse_pairing +0x38c0 012181 loop light_parse_cmd_loop +0x38c1 012182 rtn +: 012184 light_parse_cmd_pwm0: +0x38c2 012185 copy contr ,regc +0x38c3 012186 fetch 1 ,mem_light_pwm0 +0x38c4 012187 store 1 ,mem_pdatatemp +0x38c5 012188 arg 0 ,temp +: 012189 light_parse_cmd_pwm_common: +0x38c6 012190 storet 1 ,mem_pdatatemp + 1 +0x38c7 012191 setarg 10000 +0x38c8 012192 store 3 ,mem_pdatatemp + 2 +0x38c9 012193 ifetch 1 ,regc +0x38ca 012194 store 1 ,mem_pdatatemp + 5 +0x38cb 012195 call pwm_out_set +0x38cc 012196 and regc ,1 ,contr +0x38cd 012197 loop light_parse_cmd_loop +0x38ce 012198 rtn +: 012199 light_parse_cmd_pwm1: +0x38cf 012200 copy regc ,contr +0x38d0 012201 fetch 1 ,mem_light_pwm1 +0x38d1 012202 store 1 ,mem_pdatatemp +0x38d2 012203 arg 1 ,temp +0x38d3 012204 branch light_parse_cmd_pwm_common +: 012205 light_parse_cmd_pwm2: +0x38d4 012206 copy regc ,contr +0x38d5 012207 fetch 1 ,mem_light_pwm2 +0x38d6 012208 store 1 ,mem_pdatatemp +0x38d7 012209 arg 2 ,temp +0x38d8 012210 branch light_parse_cmd_pwm_common +: 012211 light_parse_cmd_pwm3: +0x38d9 012212 copy regc ,contr +0x38da 012213 fetch 1 ,mem_light_pwm3 +0x38db 012214 store 1 ,mem_pdatatemp +0x38dc 012215 arg 3 ,temp +0x38dd 012216 branch light_parse_cmd_pwm_common +: 012217 light_parse_cmd_pwm4: +0x38de 012218 copy regc ,contr +0x38df 012219 fetch 1 ,mem_light_pwm4 +0x38e0 012220 store 1 ,mem_pdatatemp +0x38e1 012221 arg 4 ,temp +0x38e2 012222 branch light_parse_cmd_pwm_common +: 012223 light_parse_cmd_pwm5: +0x38e3 012224 copy regc ,contr +0x38e4 012225 fetch 1 ,mem_light_pwm5 +0x38e5 012226 store 1 ,mem_pdatatemp +0x38e6 012227 arg 5 ,temp +0x38e7 012228 branch light_parse_cmd_pwm_common +: 012230 light_parse_auto_mode: +0x38e8 012231 ifetch 1 ,contr +0x38e9 012232 rtn +: 012234 light_parse_pairing: +0x38ea 012235 copy contr ,regc +0x38eb 012236 fetch 1 ,mem_light_pairing_enable +0x38ec 012237 bne 1 ,light_parse_pairing_abandon +0x38ed 012238 call update_controler_list +: 012239 light_parse_pairing_abandon: +0x38ee 012240 and regc ,4 ,contr +0x38ef 012241 rtn +: 012242 update_controler_list: +0x38f0 012243 bpatch patch1b_4 ,mem_patch1b +0x38f1 012244 call light_find_controler_pairing +0x38f2 012245 branch update_conrtoler_list_found ,user +0x38f3 012246 fetch 1 ,mem_light_next_record +0x38f4 012247 copy pdata ,temp +0x38f5 012248 increase 1 ,pdata +0x38f6 012249 store 1 ,mem_light_next_record +0x38f7 012250 call light_init_crr_cmd_count +0x38f8 012251 lshift2 temp ,temp +0x38f9 012252 setarg mem_light_clist +0x38fa 012253 iadd temp ,contw +0x38fb 012254 ifetch 4 ,regc +0x38fc 012255 istore 4 ,contw +0x38fd 012256 branch update_conrtoler_store_list +: 012257 update_conrtoler_list_found: +0x38fe 012258 add regc ,3 ,contr +0x38ff 012259 ifetch 1 ,contr +0x3900 012260 rtn blank +0x3901 012261 ifetch 4 ,regc +0x3902 012262 istore 4 ,rega +: 012263 update_conrtoler_store_list: +0x3903 012264 arg mem_light_next_record ,rega +0x3904 012265 arg 0 ,regb +0x3905 012266 arg 81 ,temp +0x3906 012267 branch iicd_write_eep_data +: 012271 lightc_init: +0x3907 012275 fetcht 1 ,mem_lightc_led_gpio +0x3908 012276 call gpio_out_inactive +0x3909 012277 rtn +: 012280 lightc_dispatch: +0x390a 012283 fetcht 1 ,mem_lightc_led_gpio +0x390b 012284 call gpio_out_active +0x390c 012287 fetcht 1 ,mem_lightc_led_gpio +0x390d 012288 call gpio_out_inactive +0x390e 012291 call lightc_start_adv +0x390f 012293 fetch 1 ,mem_adv_time +0x3910 012294 nrtn blank +0x3911 012296 call lpm_write_gpio_wakeup +0x3912 012297 hfetch 4 ,core_lpm_ctrl +0x3913 012298 set0 15 ,pdata +0x3914 012299 hstore 4 ,core_lpm_reg +0x3915 012300 call lpm_write_ctrl +0x3916 012301 arg param_hibernate_clks ,temp +0x3917 012302 branch lpm_sleep +: 012304 lightc_adv: +0x3918 012305 fetch 1 ,mem_adv_time +0x3919 012306 branch le_adv_loop_tx ,blank +0x391a 012307 increase -1 ,pdata +0x391b 012308 store 1 ,mem_adv_time +0x391c 012309 branch le_adv_loop_tx +: 012311 lightc_start_adv: +0x391d 012312 mul32 pdata ,20 ,pdata +0x391e 012313 arg mem_cmd0_string ,contr +0x391f 012314 iadd contr ,contr +0x3920 012315 ifetch 1 ,contr +0x3921 012316 rtn blank +0x3922 012317 copy pdata ,rega +0x3923 012318 copy rega ,loopcnt +0x3924 012319 arg mem_le_adv_data + 2 ,contw +0x3925 012320 call memcpy +0x3926 012321 copy rega ,pdata +0x3927 012322 increase 2 ,pdata +0x3928 012323 store 1 ,mem_le_adv_data_len +0x3929 012324 rtn +: 012331 module_init: +0x392a 012333 rtn wake +0x392b 012334 call le_modified_name +0x392c 012335 call adc_init_data +0x392d 012336 setarg module_process_idle +0x392e 012337 store 2 ,mem_cb_idle_process +0x392f 012338 setarg module_bt_conn_process +0x3930 012339 store 2 ,mem_cb_bt_process +0x3931 012340 setarg module_process_bb_event +0x3932 012341 store 2 ,mem_cb_bb_event_process +0x3933 012342 setarg module_le_conn_process +0x3934 012343 store 2 ,mem_cb_le_process +0x3935 012344 setarg module_lpm_lock +0x3936 012345 store 2 ,mem_cb_check_wakelock +0x3937 012346 setarg module_hci_cmd_transmit_le_notify +0x3938 012347 store 2 ,mem_cb_ble_transmit +0x3939 012348 setarg module_hci_event_receive_spp_data +0x393a 012349 store 2 ,mem_cb_receive_spp_data +0x393b 012350 setarg module_le_receive_data +0x393c 012351 store 2 ,mem_cb_att_write +0x393d 012352 setarg module_bb_event_timer +0x393e 012353 store 2 ,mem_cb_event_timer +0x393f 012355 call module_spp_clear_last_transmite_clock +0x3940 012356 bpatch patch1b_5 ,mem_patch1b +0x3941 012357 call module_lpm_uart_init +0x3942 012358 call module_gpio_init +0x3943 012359 call check_module_disabled +0x3944 012360 branch module_hci_event_enter_standby_mode +: 012363 module_lpm_uart_init: +0x3945 012364 fetch 4 ,mem_module_uart_rx_buffer +0x3946 012365 hstore 4 ,core_uart_rsaddr +0x3947 012367 fetch 4 ,mem_module_uart_tx_buffer +0x3948 012368 hstore 4 ,core_uart_tsaddr +0x3949 012370 hfetch 1 ,core_gpio_sel1 +0x394a 012371 or_into 0x04 ,pdata +0x394b 012372 and_into 0xfc ,pdata +0x394c 012373 hstore 1 ,core_gpio_sel1 +0x394d 012374 jam 0x00 ,core_uart_ctrl +0x394e 012376 fetch 2 ,mem_module_uart_rx_buffer +0x394f 012377 hstore 2 ,core_uart_rrptr +0x3950 012378 fetch 2 ,mem_module_uart_tx_buffer +0x3951 012379 hstore 2 ,core_uart_twptr +0x3952 012380 hstore 2 ,core_uart_trptrp +0x3953 012382 hfetch 4 ,core_gpio_pu0 +0x3954 012383 set1 7 ,pdata +0x3955 012384 hstore 4 ,core_gpio_pu0 +0x3956 012386 hfetch 2 ,core_clkoff +0x3957 012387 set0 clock_off_uart ,pdata +0x3958 012388 hstore 2 ,core_clkoff +0x3959 012389 call uart_set_baud_by_mem +0x395a 012390 jam uartclk_crystal ,core_uart_clksel +0x395b 012391 jam uart_ctrl_h4 ,core_uart_ctrl +0x395c 012393 fetch 1 ,mem_module_flag +0x395d 012394 isolate1 module_flag_uart_flow_control ,pdata +0x395e 012395 hfetcht 1 ,core_uart_ctrl +0x395f 012396 setflag true ,4 ,temp +0x3960 012397 hstoret 1 ,core_uart_ctrl +0x3961 012398 rtn +: 012402 module_lpm_init: +0x3962 012403 call module_spp_clear_last_transmite_clock +0x3963 012404 branch module_lpm_uart_init +: 012407 module_gpio_init: +0x3964 012412 fetcht 1 ,mem_module_connect_state_gpio +0x3965 012413 call gpio_config_output +0x3966 012414 call module_set_conn_pin_low +0x3967 012416 fetcht 1 ,mem_module_wake_up_gpio +0x3968 012417 branch gpio_config_input +: 012419 module_lpm_lock: +0x3969 012420 fetcht 1 ,mem_module_wake_up_gpio +0x396a 012421 call gpio_get_bit +0x396b 012422 nbranch app_put_lpm_wake_lock ,true +0x396c 012423 branch app_get_lpm_wake_lock +: 012426 module_le_conn_process: +0x396d 012427 rtn +: 012429 module_bt_conn_process: +0x396e 012430 call module_spp_enter_sniff +0x396f 012431 branch module_control_air_flow +: 012433 module_spp_enter_sniff: +0x3970 012434 fetch 1 ,mem_ui_state_map +0x3971 012435 bbit0 ui_state_bt_spp_conn ,module_spp_clear_last_transmite_clock +0x3972 012436 bpatch patch1b_6 ,mem_patch1b +0x3973 012437 setarg 0x3eff +0x3974 012438 fetcht 4 ,mem_last_transmite_clock +0x3975 012439 iadd temp ,temp +0x3976 012440 copy clkn_bt ,pdata +0x3977 012441 isub temp ,null +0x3978 012442 nrtn positive +0x3979 012443 fetch 2 ,mem_ui_state_map +0x397a 012444 bbit1 ui_state_bt_sniff ,module_spp_clear_last_transmite_clock +0x397b 012445 fetch 1 ,mem_module_flag +0x397c 012446 rtnbit1 moudle_task_sniff +0x397d 012447 call module_set_sniff_task_flag +0x397e 012448 call app_bt_enter_sniff +: 012449 module_spp_clear_last_transmite_clock: +0x397f 012450 copy clkn_bt ,pdata +0x3980 012451 store 4 ,mem_last_transmite_clock +0x3981 012452 rtn +: 012455 module_process_idle: +0x3982 012456 call module_control_air_flow +0x3983 012457 call l2cap_malloc_is_fifo_full +0x3984 012458 nrtn blank +0x3985 012459 branch module_process +: 012462 module_process_bb_event: +0x3986 012463 copy regc ,pdata +0x3987 012464 beq bt_evt_bb_connected ,module_process_bb_conn +0x3988 012465 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned +0x3989 012466 beq bt_evt_reconn_failed ,module_process_reconn_fail +0x398a 012467 beq bt_evt_setup_complete ,module_process_setup_complete +0x398b 012468 beq bt_evt_spp_connected ,module_process_spp_connected +0x398c 012469 beq bt_evt_spp_disconnected ,module_process_spp_disconnected +0x398d 012470 beq bt_evt_pincode_req ,module_process_evt_pincode_req +0x398e 012471 beq bt_evt_enter_sniff ,module_process_enter_sniff +0x398f 012472 beq bt_evt_exit_sniff ,module_process_exit_sniff +0x3990 012473 beq bt_evt_reconn_page_timeout ,module_process_page_time_out +0x3991 012474 beq bt_evt_le_connected ,module_process_le_conn +0x3992 012475 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn +0x3993 012476 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept +0x3994 012477 beq bt_evt_unsniff_accept ,module_process_unsniff_accept +0x3995 012478 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept +0x3996 012479 beq bt_evt_le_pairing_fail ,module_hci_event_le_pairing_fail +0x3997 012480 beq bt_evt_le_pairing_success ,module_hci_event_le_pairing_success +0x3998 012481 beq bt_evt_le_start_enc ,module_hci_event_start_enc +0x3999 012482 beq bt_evt_le_pause_enc ,module_hci_event_pause_enc +0x399a 012483 beq bt_evt_le_tk_generate ,module_hci_event_le_tk +0x399b 012484 beq bt_evt_bt_gkey_generate ,module_hci_event_gkey_generate +0x399c 012485 beq bt_evt_bt_get_passkey ,module_hci_event_passkey_entry_mode +0x399d 012486 beq bt_evt_bt_pairing_fail ,module_hci_event_bt_pairing_fail +0x399e 012487 beq bt_evt_bt_pairing_success ,module_hci_event_bt_pairing_success +0x399f 012488 beq bt_evt_le_gkey_generate ,module_hci_event_le_gkey +0x39a0 012489 beq bt_evt_store_nvram ,module_hci_event_store_device +0x39a1 012490 beq bt_evt_le_ltk_lost ,module_process_ble_ltk_lost +0x39a2 012491 rtn +: 012494 module_process_bb_event_disconned: +0x39a3 012495 call module_spp_clear_last_transmite_clock +0x39a4 012496 fetch 1 ,mem_flag_pairing_state +0x39a5 012497 ncall module_hci_event_bt_pairing_fail ,blank +0x39a6 012498 call module_disconn_start +0x39a7 012499 fetch 2 ,mem_ui_state_map +0x39a8 012500 rtnbit0 ui_state_bt_spp_conn +0x39a9 012501 branch module_spp_disconnected +: 012503 module_process_spp_connected: +0x39aa 012504 fetch 2 ,mem_ui_state_map +0x39ab 012505 set1 ui_state_bt_spp_conn ,pdata +0x39ac 012506 store 2 ,mem_ui_state_map +0x39ad 012507 fetch 1 ,mem_module_spp_lpm_mult +0x39ae 012508 store 1 ,mem_lpm_mult +0x39af 012509 call module_set_conn_pin_low +0x39b0 012510 branch module_hci_event_spp_connect +: 012512 module_process_spp_disconnected: +: 012514 module_spp_disconnected: +0x39b1 012515 fetch 2 ,mem_ui_state_map +0x39b2 012516 rtnbit0 ui_state_bt_spp_conn +0x39b3 012517 set0 ui_state_bt_spp_conn ,pdata +0x39b4 012518 store 2 ,mem_ui_state_map +0x39b5 012519 branch module_hci_event_spp_disconnect +: 012522 module_process_enter_sniff: +: 012524 module_sniff_param_check: +0x39b6 012525 call module_spp_clear_last_transmite_clock +0x39b7 012528 fetch 2 ,mem_context + coffset_tsniff +0x39b8 012529 rshift pdata ,pdata +0x39b9 012530 fetcht 2 ,mem_sniff_param_interval +0x39ba 012531 isub temp ,null +0x39bb 012532 nbranch module_sniff_param_check_unsniff ,zero +0x39bc 012533 branch app_lpm_mult_enable +: 012534 module_sniff_param_check_unsniff: +0x39bd 012535 fetch 1 ,mem_module_flag +0x39be 012536 rtnbit1 moudle_task_unsniff +0x39bf 012537 hfetch 2 ,core_uart_rxitems +0x39c0 012538 ncall module_set_unsniff_task_flag ,blank +0x39c1 012539 branch app_bt_sniff_exit +: 012541 module_process_exit_sniff: +0x39c2 012542 call module_clear_sniff_task_flag +0x39c3 012543 branch app_lpm_mult_disable +: 012545 module_process_setup_complete: +0x39c4 012546 call module_spp_clear_last_transmite_clock +0x39c5 012547 branch module_conn_start +: 012549 module_process_bb_even_le_disconn: +0x39c6 012550 call le_clr_config_more_data +0x39c7 012551 call module_disconn_start +0x39c8 012552 branch module_hci_event_le_disconnect +: 012554 module_process_evt_pincode_req: +0x39c9 012555 branch app_bt_set_pincode +: 012558 module_process_sniff_not_accept: +0x39ca 012559 branch module_clear_sniff_task_flag +: 012562 module_process_unsniff_accept: +0x39cb 012563 fetch 1 ,mem_module_flag +0x39cc 012564 bbit0 moudle_task_unsniff ,app_bt_enter_sniff +0x39cd 012565 branch module_clear_unsniff_task_flag +: 012568 module_process_unsniff_not_accept: +0x39ce 012569 branch module_clear_unsniff_task_flag +: 012572 module_process_le_conn: +0x39cf 012573 call le_send_att_exchange_mtu_requset +0x39d0 012574 call module_conn_start +0x39d1 012575 fetch 1 ,mem_module_le_lpm_mult +0x39d2 012576 store 1 ,mem_lpm_mult +0x39d3 012577 branch module_hci_event_le_connect +: 012580 module_process_bb_conn: +0x39d4 012581 jam 0 ,mem_flag_mode_ssp_pin +0x39d5 012582 call module_clear_sniff_task_flag +0x39d6 012583 branch module_clear_unsniff_task_flag +: 012585 module_process_page_time_out: +: 012586 module_process_reconn_fail: +: 012587 module_disconn_start: +0x39d7 012588 call module_start_adv_discovery_by_command +0x39d8 012589 branch module_set_conn_pin_high +: 012592 module_process_ble_ltk_lost: +0x39d9 012593 call le_send_reject_ind +0x39da 012594 branch le_send_smp_security_request +: 012597 module_set_conn_pin_high: +0x39db 012598 fetcht 1 ,mem_module_connect_state_gpio +0x39dc 012599 branch gpio_out_active +: 012601 module_conn_start: +0x39dd 012602 call module_stop_adv_discovery +0x39de 012603 branch module_set_conn_pin_low +: 012605 module_stop_adv_discovery: +0x39df 012606 fetch 1 ,mem_module_state +0x39e0 012607 isolate1 moudle_state_bt_bit ,pdata +0x39e1 012608 call app_bt_stop_discovery ,true +0x39e2 012609 fetch 1 ,mem_module_state +0x39e3 012610 isolate1 moudle_state_ble_bit ,pdata +0x39e4 012611 call app_ble_stop_adv ,true +0x39e5 012612 rtn +: 012613 module_set_conn_pin_low: +0x39e6 012614 fetcht 1 ,mem_module_connect_state_gpio +0x39e7 012615 branch gpio_out_inactive +: 012617 module_process_with_credit: +0x39e8 012618 fetch 1 ,mem_credit_flag +0x39e9 012619 rtneq credit_disable +0x39ea 012620 branch rfcomm_send_uih_without_payload +: 012622 module_process: +0x39eb 012623 hfetch 1 ,core_uart_status +0x39ec 012624 bbit1 uart_status_rx_fifo_empty ,module_process_with_credit +0x39ed 012625 call uartd_prepare_rx +0x39ee 012626 ifetch 1 ,contru +0x39ef 012627 bne 0x01 ,module_hci_in_excp +0x39f0 012628 hfetch 2 ,core_uart_rxitems +0x39f1 012629 sub pdata ,2 ,null +0x39f2 012630 rtn positive +0x39f3 012631 ifetch 1 ,contru +0x39f4 012632 store 1 ,mem_module_uart_opcode +0x39f5 012633 ifetcht 1 ,contru +0x39f6 012634 copy contru ,rega +0x39f7 012635 storet 1 ,mem_module_uart_len +0x39f8 012636 add temp ,3 ,temp +0x39f9 012637 hfetch 2 ,core_uart_rxitems +0x39fa 012638 isub temp ,temp +0x39fb 012639 nrtn positive +0x39fc 012640 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x39fd 012641 call module_hci_cmd_control +0x39fe 012642 fetch 1 ,mem_module_temp_nl_discard_packet +0x39ff 012643 rtneq hci_not_discard_packet +0x3a00 012644 branch module_hci_dicard_packet +: 012646 module_hci_in_excp: +0x3a01 012647 call delay_10ms +0x3a02 012648 call module_hci_event_invalid_packet +0x3a03 012649 branch module_hci_release_except +: 012652 module_hci_release_except: +0x3a04 012653 bpatch patch1b_7 ,mem_patch1b +0x3a05 012654 hfetch 2 ,core_uart_rxitems +0x3a06 012655 rtn blank +0x3a07 012656 call uartd_prepare_rx +0x3a08 012657 ifetch 1 ,contru +0x3a09 012658 sub pdata ,0x01 ,null +0x3a0a 012659 ncall module_hci_dicard_bytes ,zero +0x3a0b 012660 nbranch module_hci_release_except ,zero +0x3a0c 012661 ifetch 1 ,contru +0x3a0d 012662 rtneq hci_cmd_spp_data_req +0x3a0e 012663 rtneq hci_cmd_set_credit_given +0x3a0f 012664 increase -1 ,contru +0x3a10 012665 call module_hci_dicard_bytes +0x3a11 012666 branch module_hci_release_except +: 012668 module_hci_dicard_packet: +0x3a12 012669 call uartd_prepare_rx +0x3a13 012670 increase 2 ,contru +0x3a14 012671 ifetch 1 ,contru +0x3a15 012672 iadd contru ,contru +: 012673 module_hci_dicard_bytes: +0x3a16 012674 branch uartd_rxdone +: 012677 module_hci_cmd_control: +0x3a17 012678 bpatch patch1c_0 ,mem_patch1c +0x3a18 012679 fetch 1 ,mem_module_uart_opcode +0x3a19 012680 beq hci_cmd_set_bt_addr_req ,module_hci_cmd_set_bt_addr +0x3a1a 012681 beq hci_cmd_set_le_addr_req ,module_hci_cmd_set_le_addr +0x3a1b 012682 beq hci_cmd_set_visibility_req ,module_hci_cmd_set_visibility +0x3a1c 012683 beq hci_cmd_set_bt_name_req ,module_hci_cmd_set_bt_name +0x3a1d 012684 beq hci_cmd_set_le_name_req ,module_hci_cmd_set_le_name +0x3a1e 012685 beq hci_cmd_spp_data_req ,module_hci_cmd_receive_spp_data +0x3a1f 012686 beq hci_cmd_le_data_req ,module_hci_cmd_receive_le_data +0x3a20 012687 beq hci_cmd_status_irq ,module_hci_cmd_inquire_status +0x3a21 012688 beq hci_cmd_set_pairing_req ,module_hci_cmd_set_pairing_mode +0x3a22 012689 beq hci_cmd_set_pincode_req ,module_hci_cmd_set_pincode +0x3a23 012690 beq hci_cmd_set_uartcontrol_req ,module_hci_cmd_set_uart_control_mode +0x3a24 012691 beq hci_cmd_set_uart_baud_req ,module_hci_cmd_set_uart_baud +0x3a25 012692 beq hci_cmd_version_req ,module_hci_cmd_version_request +0x3a26 012693 beq hci_cmd_bt_disconnect ,module_hci_cmd_bt_disconnect +0x3a27 012694 beq hci_cmd_ble_disconnect ,module_hci_cmd_ble_disconnect +0x3a28 012695 beq hci_cmd_set_nvram_req ,module_hci_cmd_set_nvram +0x3a29 012696 beq hci_cmd_confirm_gkey ,module_hci_cmd_confirm_gkey +0x3a2a 012697 beq hci_cmd_set_credit_given ,module_hci_cmd_set_credit_given +0x3a2b 012698 beq hci_cmd_auto_adv_scan ,module_hci_cmd_auto_adv +0x3a2c 012699 beq hci_cmd_power_req ,module_hci_cmd_power_request +0x3a2d 012700 beq hci_cmd_power_set ,module_hci_cmd_power_set +0x3a2e 012701 beq hci_cmd_passkey_entry ,module_hci_cmd_passkey_entry +0x3a2f 012702 beq hci_cmd_set_gpio ,module_hci_cmd_set_gpio +0x3a30 012703 beq hci_cmd_read_gpio ,module_hci_cmd_read_gpio +0x3a31 012704 beq hci_cmd_le_set_pairing ,module_hci_cmd_le_set_pairing_mode +0x3a32 012705 beq hci_cmd_le_set_adv_data ,module_hci_cmd_le_set_adv_data +0x3a33 012706 beq hci_cmd_le_set_scan_data ,module_hci_cmd_le_set_scan_data +0x3a34 012707 beq hci_cmd_le_send_conn_update_req ,module_hci_cmd_le_send_conn_update_req +0x3a35 012708 beq hci_cmd_le_set_adv_parm ,module_hci_cmd_set_le_adv_parameter +0x3a36 012709 beq hci_cmd_le_start_pairing ,module_hci_cmd_le_start_pairing +0x3a37 012710 beq hci_cmd_set_wake_gpio ,module_hci_cmd_set_wake_gpio +0x3a38 012711 beq hci_cmd_set_tx_power ,module_hci_cmd_set_tx_power +0x3a39 012712 beq hci_cmd_le_confirm_gkey ,module_hci_cmd_le_confirm_gkey +0x3a3a 012713 beq hci_cmd_reject_justwork ,module_hci_cmd_set_reject_justwork_flag +0x3a3b 012714 beq hci_cmd_reset_chip_req ,module_hci_cmd_reset_chip +0x3a3c 012715 beq hci_cmd_le_set_fixed_passkey ,module_hci_cmd_le_set_fixed_passkey +0x3a3d 012716 beq hci_test_cmd_close_lpm ,module_hci_test_cmde_close_lpm +0x3a3e 012717 branch module_hci_event_receive_invalid_cmd +: 012722 module_hci_cmd_set_bt_addr: +0x3a3f 012723 fetch 1 ,mem_module_uart_len +0x3a40 012724 bne 6 ,module_hci_event_receive_invalid_cmd +0x3a41 012725 ifetch 6 ,contru +0x3a42 012726 store 6 ,mem_lap +0x3a43 012727 branch module_hci_event_receive_valid_cmd +: 012730 module_hci_cmd_set_le_addr: +0x3a44 012731 fetch 1 ,mem_module_uart_len +0x3a45 012732 bne 6 ,module_hci_event_receive_invalid_cmd +0x3a46 012733 ifetch 6 ,contru +0x3a47 012734 store 6 ,mem_le_lap +0x3a48 012735 branch module_hci_event_receive_valid_cmd +: 012739 module_hci_cmd_set_visibility: +0x3a49 012740 fetch 1 ,mem_module_uart_len +0x3a4a 012741 bne 1 ,module_hci_event_receive_invalid_cmd +0x3a4b 012742 copy rega ,contru +0x3a4c 012743 call module_hci_event_receive_valid_cmd +0x3a4d 012744 ifetcht 1 ,contru +0x3a4e 012745 storet 1 ,mem_module_bluetooth_stauts_by_command +0x3a4f 012746 fetch 2 ,mem_ui_state_map +0x3a50 012747 rtnbit1 ui_state_ble_connected +0x3a51 012748 rtnbit1 ui_state_bt_connected +: 012749 module_start_adv_discovery_by_command: +0x3a52 012750 fetch 1 ,mem_module_state +0x3a53 012751 isolate1 moudle_state_bt_bit ,pdata +0x3a54 012752 nbranch moudle_start_adv_by_command ,true +0x3a55 012753 fetcht 1 ,mem_module_bluetooth_stauts_by_command +0x3a56 012754 and temp ,0x03 ,pdata +0x3a57 012755 store 1 ,mem_scan_mode +: 012756 moudle_start_adv_by_command: +0x3a58 012757 fetch 1 ,mem_module_state +0x3a59 012758 isolate1 moudle_state_ble_bit ,pdata +0x3a5a 012759 nrtn true +0x3a5b 012760 fetcht 1 ,mem_module_bluetooth_stauts_by_command +0x3a5c 012761 isolate1 2 ,temp +0x3a5d 012762 branch app_ble_start_adv ,true +0x3a5e 012763 branch app_ble_stop_adv +: 012767 module_hci_cmd_set_bt_name: +0x3a5f 012768 fetch 1 ,mem_module_uart_len +0x3a60 012769 sub pdata ,67 ,null +0x3a61 012770 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3a62 012771 store 1 ,mem_local_name_length +0x3a63 012772 arg 8 ,loopcnt +0x3a64 012773 call memset0 +0x3a65 012774 fetch 1 ,mem_module_uart_len +0x3a66 012775 copy pdata ,loopcnt +0x3a67 012776 copy rega ,contru +0x3a68 012777 arg mem_local_name ,contw +0x3a69 012778 call uart_copy_rx_bytes_fast +0x3a6a 012779 branch module_hci_event_receive_valid_cmd +: 012783 module_hci_cmd_set_le_name: +0x3a6b 012784 fetch 1 ,mem_module_uart_len +0x3a6c 012785 sub pdata ,29 ,null +0x3a6d 012786 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3a6e 012787 store 1 ,mem_le_name_len +0x3a6f 012788 copy pdata ,loopcnt +0x3a70 012789 copy rega ,contru +0x3a71 012790 arg mem_le_name ,contw +0x3a72 012791 call uart_copy_rx_bytes_fast +0x3a73 012792 call le_modified_name +0x3a74 012793 branch module_hci_event_receive_valid_cmd +: 012797 module_hci_cmd_receive_spp_data: +0x3a75 012798 fetch 1 ,mem_ui_state_map +0x3a76 012799 bbit0 ui_state_bt_spp_conn ,module_hci_event_receive_invalid_cmd +0x3a77 012800 call app_check_sniff +0x3a78 012801 branch module_hci_cmd_spp_exit_sniff ,true +0x3a79 012802 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a7a 012804 call module_spp_clear_last_transmite_clock +0x3a7b 012805 fetch 1 ,mem_remote_credits +0x3a7c 012806 rtn blank +0x3a7d 012807 fetch 2 ,mem_nl_rx_len_all +0x3a7e 012808 bne 0 ,module_hci_cmd_pass_init_ng_rx_len_all +0x3a7f 012809 fetch 1 ,mem_module_uart_len +0x3a80 012810 store 2 ,mem_nl_rx_len_all +0x3a81 012812 copy rega ,contru +0x3a82 012815 copy contru ,pdata +0x3a83 012816 store 2 ,mem_nl_rx_data_src +: 012817 module_hci_cmd_pass_init_ng_rx_len_all: +0x3a84 012818 call module_hci_cmd_get_current_packet_len_and_remain_len +0x3a85 012819 branch spp_tx_rfcomm_packet +: 012821 module_hci_cmd_spp_exit_sniff: +0x3a86 012822 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a87 012823 branch module_exit_sniff +: 012825 module_hci_cmd_get_current_packet_len_and_remain_len: +0x3a88 012826 call module_hci_cmd_get_current_patcket_len +0x3a89 012827 fetch 2 ,mem_nl_rx_len_all +0x3a8a 012828 fetcht 2 ,mem_current_packet_length +0x3a8b 012829 isub temp ,pdata +0x3a8c 012830 store 2 ,mem_nl_rx_len_all +0x3a8d 012831 rtn +: 012833 module_hci_cmd_get_current_patcket_len: +0x3a8e 012834 fetch 2 ,mem_nl_rx_len_all +0x3a8f 012835 arg dm_refcom_buff_len ,temp +0x3a90 012836 call not_greater_than +0x3a91 012837 fetcht 2 ,mem_rfcomm_max_frame_size +0x3a92 012838 call not_greater_than +0x3a93 012839 fetcht 2 ,mem_pn_max_frame_size +0x3a94 012840 call not_greater_than +0x3a95 012841 store 2 ,mem_current_packet_length +0x3a96 012842 rtn +: 012844 module_hci_command_tx_spp_tx_complete: +0x3a97 012845 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3a98 012846 jam hci_cmd_spp_data_req ,mem_module_uart_opcode +0x3a99 012847 branch module_hci_event_receive_valid_cmd +: 012851 module_hci_cmd_receive_le_data: +0x3a9a 012852 fetch 2 ,mem_ui_state_map +0x3a9b 012853 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +0x3a9c 012854 call module_check_ble_encrypt_state +0x3a9d 012855 branch module_hci_event_receive_invalid_cmd ,user +0x3a9e 012856 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3a9f 012857 fetch 1 ,mem_module_flag +0x3aa0 012858 bbit1 module_flag_ble_data_finish ,module_hci_cmd_receive_le_data_finish +0x3aa1 012859 fetch 1 ,mem_module_hci_notify_len +0x3aa2 012860 nrtn blank +0x3aa3 012861 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3aa4 012862 ifetch 2 ,contru +0x3aa5 012863 store 2 ,mem_module_hci_notify_handle +0x3aa6 012864 copy contru ,pdata +0x3aa7 012865 store 2 ,mem_module_hci_nofiy_addr +0x3aa8 012866 fetch 1 ,mem_module_uart_len +0x3aa9 012867 pincrease -2 +0x3aaa 012868 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3aab 012869 branch module_hci_event_receive_invalid_cmd ,zero +0x3aac 012870 store 1 ,mem_module_hci_notify_len +0x3aad 012871 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x3aae 012872 call le_set_config_more_data +0x3aaf 012873 call module_hci_cmd_transmit_le_notify +0x3ab0 012874 call module_hci_cmd_transmit_le_notify +0x3ab1 012875 call module_hci_cmd_transmit_le_notify +0x3ab2 012876 fetch 1 ,mem_module_flag +0x3ab3 012877 rtnbit0 module_flag_ble_data_finish +: 012878 module_hci_cmd_receive_le_data_finish: +0x3ab4 012879 jam hci_discard_packet ,mem_module_temp_nl_discard_packet +0x3ab5 012880 call module_clear_le_tx_data_flag +0x3ab6 012881 branch module_hci_event_receive_valid_cmd +: 012883 module_hci_cmd_transmit_le_notify: +0x3ab7 012884 fetch 1 ,mem_module_hci_notify_len +0x3ab8 012885 rtn blank +0x3ab9 012886 call le_fifo_check_nearly_full +0x3aba 012887 nrtn blank +0x3abb 012888 call module_get_le_remote_mtu +0x3abc 012889 bpatch patch1c_1 ,mem_patch1c +0x3abd 012890 add temp ,-3 ,pdata +0x3abe 012891 fetcht 1 ,mem_module_hci_notify_len +0x3abf 012892 call not_greater_than +0x3ac0 012893 copy pdata ,rega +0x3ac1 012894 copy temp ,pdata +0x3ac2 012895 isub rega ,pdata +0x3ac3 012896 store 1 ,mem_module_hci_notify_len +0x3ac4 012897 fetcht 2 ,mem_module_hci_notify_handle +0x3ac5 012898 call le_att_malloc_tx_notify +0x3ac6 012899 fetch 2 ,mem_module_hci_nofiy_addr +0x3ac7 012900 copy pdata ,contru +0x3ac8 012901 copy rega ,loopcnt +0x3ac9 012902 call uart_copy_rx_bytes_fast +0x3aca 012903 copy contru ,pdata +0x3acb 012904 store 2 ,mem_module_hci_nofiy_addr +0x3acc 012905 fetch 1 ,mem_module_hci_notify_len +0x3acd 012906 nrtn blank +0x3ace 012907 branch module_set_le_tx_data_flag +: 012911 module_get_le_remote_mtu: +0x3acf 012912 arg 0x17 ,temp +0x3ad0 012913 fetch 1 ,mem_module_flag +0x3ad1 012914 rtnbit1 module_flag_ble_send_mtu23 +0x3ad2 012915 fetcht 2 ,mem_le_remote_mtu +0x3ad3 012916 rtn +: 012918 module_check_ble_encrypt_state: +0x3ad4 012919 fetch 1 ,mem_module_flag +0x3ad5 012920 bbit1 module_flag_ble_data_encrypt ,le_check_encrypt_state +0x3ad6 012921 branch disable_user +: 012925 module_hci_cmd_inquire_status: +0x3ad7 012926 branch module_hci_event_status_res +: 012930 module_hci_cmd_set_pairing_mode: +0x3ad8 012931 copy rega ,contru +0x3ad9 012932 ifetch 1 ,contru +0x3ada 012933 beq pairing_pincode ,module_hci_pairing_pincode_mode +0x3adb 012934 beq pairing_justwork ,module_hci_pairing_just_work_mode +0x3adc 012935 beq pairing_passkey ,module_hci_pairing_passkey +0x3add 012936 beq pairing_confirm ,module_hci_pairing_numeric_comparison +0x3ade 012937 branch module_hci_event_receive_invalid_cmd +: 012938 module_hci_pairing_pincode_mode: +0x3adf 012939 call ssp_disable +0x3ae0 012940 jam 0 ,mem_ssp_enable +0x3ae1 012941 branch module_hci_event_receive_valid_cmd +: 012942 module_hci_pairing_just_work_mode: +0x3ae2 012943 setarg ssp_mode_just_work_io_cap_data +: 012944 module_hci_sspairing_mode: +0x3ae3 012945 store 3 ,mem_sp_iocap_local +0x3ae4 012946 store 1 ,mem_ssp_mode_flag +0x3ae5 012947 call ssp_enable +0x3ae6 012948 jam 1 ,mem_ssp_enable +0x3ae7 012949 branch module_hci_event_receive_valid_cmd +: 012950 module_hci_pairing_passkey: +0x3ae8 012951 setarg ssp_mode_passkey_io_cap_data +0x3ae9 012952 branch module_hci_sspairing_mode +: 012954 module_hci_pairing_numeric_comparison: +0x3aea 012955 setarg ssp_mode_ssp_pin_io_cap_data +0x3aeb 012956 branch module_hci_sspairing_mode +: 012959 module_hci_cmd_set_pincode: +0x3aec 012960 fetch 1 ,mem_module_uart_len +0x3aed 012961 sub pdata ,16 ,null +0x3aee 012962 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3aef 012963 store 1 ,mem_pin_length +0x3af0 012964 copy pdata ,loopcnt +0x3af1 012965 arg mem_pin ,contw +0x3af2 012966 call uart_copy_rx_bytes +0x3af3 012967 branch module_hci_event_receive_valid_cmd +: 012971 module_hci_cmd_set_uart_control_mode: +0x3af4 012972 copy rega ,contru +0x3af5 012973 ifetch 1 ,contru +0x3af6 012974 hfetcht 1 ,core_uart_ctrl +0x3af7 012975 nsetflag blank ,4 ,temp +0x3af8 012976 hstoret 1 ,core_uart_ctrl +0x3af9 012977 branch module_hci_event_receive_valid_cmd +: 012981 module_hci_cmd_set_uart_baud: +0x3afa 012982 fetch 1 ,mem_module_uart_len +0x3afb 012983 copy pdata ,loopcnt +0x3afc 012984 copy rega ,contru +0x3afd 012985 call string2dec_from_uart +0x3afe 012986 setarg uart_clk_24 +0x3aff 012987 idiv temp +0x3b00 012988 call wait_div_end +0x3b01 012989 quotient pdata +: 012990 module_hci_cmd_set_uart_baud_ok: +0x3b02 012991 store uart_baud_len ,mem_baud +0x3b03 012992 call module_hci_event_receive_valid_cmd +0x3b04 012993 call wait_uarttx +0x3b05 012994 branch uart_set_baud_by_mem +: 012998 module_hci_cmd_version_request: +0x3b06 012999 arg 2 ,rega +0x3b07 013000 arg mem_soft_version_num ,regb +0x3b08 013001 arg 0 ,temp +0x3b09 013002 branch module_hci_event_set_cmd +: 013003 module_hci_event_set_cmd_send_response: +0x3b0a 013004 store 2 ,mem_event_cmd_response_content +0x3b0b 013005 arg mem_event_cmd_response_content ,regb +0x3b0c 013006 arg 0 ,temp +0x3b0d 013007 branch module_hci_event_set_cmd +: 013011 module_hci_cmd_bt_disconnect: +0x3b0e 013012 fetch 2 ,mem_ui_state_map +0x3b0f 013013 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +: 013014 module_hci_cmd_bt_disconnect_doing: +0x3b10 013015 call module_hci_event_receive_valid_cmd +0x3b11 013016 branch app_bt_disconnect +: 013020 module_hci_cmd_ble_disconnect: +0x3b12 013021 fetch 2 ,mem_ui_state_map +0x3b13 013022 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +: 013023 module_hci_cmd_ble_disconnect_doing: +0x3b14 013024 call module_hci_event_receive_valid_cmd +0x3b15 013025 branch app_ble_disconnect +: 013031 module_hci_cmd_set_nvram: +0x3b16 013032 fetch 1 ,mem_module_uart_len +0x3b17 013033 copy pdata ,loopcnt +0x3b18 013034 copy rega ,contru +0x3b19 013035 fetch 2 ,mem_nv_data_ptr +0x3b1a 013036 icopy contw +0x3b1b 013037 call uart_copy_rx_bytes_fast +0x3b1c 013038 branch module_hci_event_receive_valid_cmd +: 013042 module_hci_cmd_confirm_gkey: +0x3b1d 013043 fetch 1 ,mem_ui_state_map +0x3b1e 013044 bbit0 ui_state_bt_connected ,module_hci_event_receive_invalid_cmd +0x3b1f 013045 ifetch 1 ,contru +0x3b20 013046 fetcht 1 ,mem_flag_mode_ssp_pin +0x3b21 013047 setflag blank ,flag_mode_ssp_pin_comparison_result_bit ,temp +0x3b22 013048 set1 flag_mode_ssp_pin_reviceve_comparison_bit ,temp +0x3b23 013049 storet 1 ,mem_flag_mode_ssp_pin +0x3b24 013051 call module_hci_event_receive_valid_cmd +0x3b25 013053 fetch 1 ,mem_flag_mode_ssp_pin +0x3b26 013054 bbit1 flag_mode_ssp_pin_recieve_dhkey_bit ,module_hci_cmd_spp_number_comparison_result_is1 +0x3b27 013055 rtn +: 013057 dhkey_not_accept: +0x3b28 013058 jam 0 ,mem_flag_mode_ssp_pin +0x3b29 013059 jam bt_cmd_dhkey_not_accept ,mem_fifo_temp +0x3b2a 013060 branch ui_ipc_send_cmd +: 013063 module_hci_cmd_spp_number_comparison_result_is1: +0x3b2b 013064 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +0x3b2c 013065 branch dhkey_not_accept +: 013069 module_hci_cmd_set_credit_given: +0x3b2d 013070 fetch 1 ,mem_ui_state_map +0x3b2e 013071 rtnbit0 ui_state_bt_spp_conn +0x3b2f 013072 fetch 1 ,mem_credit_flag +0x3b30 013073 rtneq credit_disable +0x3b31 013074 ifetch 1 ,contru +0x3b32 013075 fetcht 1 ,mem_credit_given +0x3b33 013076 iadd temp ,temp +0x3b34 013077 storet 1 ,mem_credit_given +0x3b35 013078 rtn +: 013082 module_hci_cmd_auto_adv: +0x3b36 013083 arg 0x40 ,loopcnt +0x3b37 013084 arg mem_le_adv_data_len ,contw +0x3b38 013085 call clear_mem +0x3b39 013086 setarg 0 +0x3b3a 013087 store 1 ,mem_regb +0x3b3b 013088 copy rega ,contru +: 013089 module_hci_cmd_auto_adv_loop: +0x3b3c 013090 copy contru ,pdata +0x3b3d 013091 store 2 ,mem_regc +0x3b3e 013092 call module_hci_cmd_auto_adv_adv_analys +0x3b3f 013094 fetch 1 ,mem_regb +0x3b40 013095 fetcht 1 ,mem_temp +0x3b41 013096 increase 1 ,temp +0x3b42 013097 iadd temp ,pdata +0x3b43 013098 store 1 ,mem_regb +0x3b44 013100 sub pdata ,31 ,null +0x3b45 013101 nbranch module_hci_cmd_auto_adv_store_scan ,positive +: 013102 module_hci_cmd_auto_adv_store_adv: +0x3b46 013103 fetcht 1 ,mem_le_adv_data_len +0x3b47 013104 setarg mem_le_adv_data +0x3b48 013105 iadd temp ,pdata +0x3b49 013106 store 2 ,mem_contw +0x3b4a 013107 fetcht 1 ,mem_temp +0x3b4b 013108 increase 1 ,temp +0x3b4c 013109 fetch 1 ,mem_le_adv_data_len +0x3b4d 013110 iadd temp ,pdata +0x3b4e 013111 store 1 ,mem_le_adv_data_len +0x3b4f 013112 branch module_hci_cmd_auto_adv_store_common +: 013113 module_hci_cmd_auto_adv_store_scan: +0x3b50 013114 fetcht 1 ,mem_le_scan_data_len +0x3b51 013115 setarg mem_le_scan_data +0x3b52 013116 iadd temp ,pdata +0x3b53 013117 store 2 ,mem_contw +0x3b54 013118 fetcht 1 ,mem_temp +0x3b55 013119 increase 1 ,temp +0x3b56 013120 fetch 1 ,mem_le_scan_data_len +0x3b57 013121 iadd temp ,pdata +0x3b58 013122 store 1 ,mem_le_scan_data_len +: 013123 module_hci_cmd_auto_adv_store_common: +0x3b59 013124 fetch 2 ,mem_contw +0x3b5a 013125 copy pdata ,contw +0x3b5b 013126 fetch 2 ,mem_regc +0x3b5c 013127 copy pdata ,contru +0x3b5d 013129 copy temp ,loopcnt +0x3b5e 013130 call uart_copy_rx_bytes_fast +0x3b5f 013132 fetch 1 ,mem_module_uart_len +0x3b60 013133 fetcht 1 ,mem_regb +0x3b61 013134 isub temp ,null +0x3b62 013135 nbranch module_hci_cmd_auto_adv_loop ,zero +0x3b63 013136 branch module_hci_event_receive_valid_cmd +: 013139 module_hci_cmd_auto_adv_adv_analys: +0x3b64 013140 ifetch 1 ,contru +0x3b65 013141 store 1 ,mem_temp +0x3b66 013142 ifetch 1 ,contru +0x3b67 013143 store 1 ,mem_rega +0x3b68 013144 rtn +: 013148 module_hci_cmd_power_request: +0x3b69 013149 arg 0 ,temp +0x3b6a 013150 arg 2 ,rega +0x3b6b 013151 fetch 2 ,mem_module_vdd_quotient +0x3b6c 013152 store 2 ,mem_event_cmd_response_content +0x3b6d 013153 arg mem_event_cmd_response_content ,regb +0x3b6e 013154 branch module_hci_event_set_cmd +: 013158 module_hci_cmd_power_set: +0x3b6f 013159 fetch 1 ,mem_module_uart_len +0x3b70 013160 bne 1 ,module_hci_event_receive_invalid_cmd +0x3b71 013161 ifetch 1 ,contru +0x3b72 013162 store 1 ,mem_module_read_vdd_flag +0x3b73 013163 setarg 0x00 +0x3b74 013164 store 2 ,mem_module_vdd_quotient +0x3b75 013165 branch module_hci_event_receive_valid_cmd +: 013169 module_hci_cmd_passkey_entry: +0x3b76 013170 ifetch 4 ,contru +0x3b77 013171 store 4 ,mem_pin +0x3b78 013172 jam 4 ,mem_pin_length +0x3b79 013173 jam 0 ,mem_authentication_passkey_times +0x3b7a 013174 call module_hci_event_receive_valid_cmd +0x3b7b 013175 branch authentication_passkey +: 013179 module_hci_cmd_set_gpio: +0x3b7c 013180 fetch 1 ,mem_module_uart_len +0x3b7d 013181 bne 3 ,module_hci_event_receive_invalid_cmd +0x3b7e 013182 ifetch 1 ,contru +0x3b7f 013183 beq hci_cmd_config_gpio_input ,module_set_gpio_input +0x3b80 013184 beq hci_cmd_config_gpio_output ,module_set_gpio_output +0x3b81 013185 branch module_hci_event_receive_invalid_cmd +: 013187 module_set_gpio_input: +0x3b82 013188 ifetcht 1 ,contru +0x3b83 013189 ifetch 1 ,contru +0x3b84 013190 beq gpio_input_high_impedance ,module_set_gpio_high_impedance +0x3b85 013191 nsetflag blank ,7 ,temp +0x3b86 013192 call gpio_config_input +0x3b87 013193 branch module_hci_event_receive_valid_cmd +: 013195 module_set_gpio_high_impedance: +0x3b88 013196 call gpio_set_high_impedance +0x3b89 013197 branch module_hci_event_receive_valid_cmd +: 013199 module_set_gpio_output: +0x3b8a 013200 ifetcht 1 ,contru +0x3b8b 013201 call gpio_config_output0 +0x3b8c 013202 ifetch 1 ,contru +0x3b8d 013203 isolate1 0 ,pdata +0x3b8e 013204 call gpio_out_flag +0x3b8f 013205 branch module_hci_event_receive_valid_cmd +: 013209 module_hci_cmd_read_gpio: +0x3b90 013210 fetch 1 ,mem_module_uart_len +0x3b91 013211 bne 1 ,module_hci_event_receive_invalid_cmd +0x3b92 013212 ifetcht 1 ,contru +0x3b93 013213 call gpio_get_bit +0x3b94 013214 setarg 0x0 +0x3b95 013215 nsetflag true ,0 ,pdata +0x3b96 013216 arg 1 ,rega +0x3b97 013217 branch module_hci_event_set_cmd_send_response +: 013221 module_hci_cmd_le_set_pairing_mode: +0x3b98 013222 copy rega ,contru +0x3b99 013223 ifetch 1 ,contru +0x3b9a 013224 copy pdata ,temp +0x3b9b 013225 beq le_pairing_mode_secure_connect_justwork ,module_le_set_pairing_mode_secure_justwork +0x3b9c 013226 beq le_pairing_mode_secure_connect_numeric ,module_le_set_pairing_mode_secure_numeric +0x3b9d 013227 beq le_pairing_mode_secure_connect_passkey ,module_le_set_pairing_mode_secure_passkey +0x3b9e 013228 store 1 ,mem_le_pairing_mode +0x3b9f 013229 beq le_pairing_mode_none ,module_le_set_no_pairing +0x3ba0 013230 beq le_pairing_mode_lagacy_justwork ,module_le_set_pairing_mode_lagacy_just_work +0x3ba1 013231 beq le_pairing_mode_lagacy_passkey ,module_le_set_pairing_mode_lagacy_passkey +0x3ba2 013232 branch module_hci_event_receive_invalid_cmd +: 013234 module_le_set_pairing_mode_secure_justwork: +0x3ba3 013235 fetch 1 ,mem_le_secure_connect_enable +0x3ba4 013236 branch module_hci_event_receive_invalid_cmd ,blank +0x3ba5 013237 storet 1 ,mem_le_pairing_mode +0x3ba6 013238 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3ba7 013239 branch module_le_set_noinputnooutput +: 013240 module_le_set_pairing_mode_secure_numeric: +0x3ba8 013241 fetch 1 ,mem_le_secure_connect_enable +0x3ba9 013242 branch module_hci_event_receive_invalid_cmd ,blank +0x3baa 013243 storet 1 ,mem_le_pairing_mode +0x3bab 013244 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3bac 013245 jam flag_iocap_displayyesno ,mem_le_pres_iocap +0x3bad 013246 branch module_hci_event_receive_valid_cmd +: 013247 module_le_set_pairing_mode_secure_passkey: +0x3bae 013248 fetch 1 ,mem_le_secure_connect_enable +0x3baf 013249 branch module_hci_event_receive_invalid_cmd ,blank +0x3bb0 013250 storet 1 ,mem_le_pairing_mode +0x3bb1 013251 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x3bb2 013252 branch module_le_set_displayonly +: 013253 module_le_set_no_pairing: +0x3bb3 013254 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth +: 013255 module_le_set_noinputnooutput: +0x3bb4 013256 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +0x3bb5 013257 branch module_hci_event_receive_valid_cmd +: 013258 module_le_set_pairing_mode_lagacy_just_work: +0x3bb6 013259 jam flag_le_bonding_mitm ,mem_le_pres_auth +0x3bb7 013260 branch module_le_set_noinputnooutput +: 013261 module_le_set_pairing_mode_lagacy_passkey: +0x3bb8 013262 jam flag_le_bonding_mitm ,mem_le_pres_auth +: 013263 module_le_set_displayonly: +0x3bb9 013264 jam flag_iocap_displayonly ,mem_le_pres_iocap +0x3bba 013265 branch module_hci_event_receive_valid_cmd +: 013269 module_hci_cmd_le_set_adv_data: +0x3bbb 013270 fetch 1 ,mem_module_uart_len +0x3bbc 013271 sub pdata ,31 ,null +0x3bbd 013272 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3bbe 013273 store 1 ,mem_le_adv_data_len +0x3bbf 013274 copy pdata ,loopcnt +0x3bc0 013275 copy rega ,contru +0x3bc1 013276 arg mem_le_adv_data ,contw +0x3bc2 013277 call uart_copy_rx_bytes_fast +0x3bc3 013278 branch module_hci_event_receive_valid_cmd +: 013282 module_hci_cmd_le_set_scan_data: +0x3bc4 013283 fetch 1 ,mem_module_uart_len +0x3bc5 013284 sub pdata ,31 ,null +0x3bc6 013285 nbranch module_hci_event_receive_invalid_cmd ,positive +0x3bc7 013286 store 1 ,mem_le_scan_data_len +0x3bc8 013287 copy pdata ,loopcnt +0x3bc9 013288 copy rega ,contru +0x3bca 013289 arg mem_le_scan_data ,contw +0x3bcb 013290 call uart_copy_rx_bytes_fast +0x3bcc 013291 branch module_hci_event_receive_valid_cmd +: 013295 module_hci_cmd_le_send_conn_update_req: +0x3bcd 013296 fetch 2 ,mem_ui_state_map +0x3bce 013297 bbit0 ui_state_ble_connected ,module_hci_event_receive_invalid_cmd +0x3bcf 013298 fetch 1 ,mem_module_uart_len +0x3bd0 013299 bne 0x08 ,module_hci_event_receive_invalid_cmd +0x3bd1 013300 copy rega ,contru +0x3bd2 013301 ifetch 8 ,contru +0x3bd3 013302 store 8 ,mem_le_interval_min +0x3bd4 013303 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x3bd5 013304 call ui_ipc_send_cmd +0x3bd6 013305 branch module_hci_event_receive_valid_cmd +: 013309 module_hci_cmd_set_le_adv_parameter: +0x3bd7 013310 ifetch 2 ,contru +0x3bd8 013311 store 2 ,mem_le_adv_interval +0x3bd9 013312 branch module_hci_event_receive_valid_cmd +: 013316 module_hci_cmd_le_start_pairing: +0x3bda 013317 fetch 1 ,mem_le_pairing_mode +0x3bdb 013318 branch module_hci_event_receive_invalid_cmd ,blank +0x3bdc 013319 fetch 1 ,mem_le_pairing_state +0x3bdd 013320 bne flag_le_pairing_null ,module_hci_event_receive_invalid_cmd +0x3bde 013321 fetch 1 ,mem_le_enc_state +0x3bdf 013322 bne flag_le_enc_null ,module_hci_event_receive_invalid_cmd +0x3be0 013323 call check_51cmd_le_smp_sec_req +0x3be1 013324 branch module_hci_event_receive_valid_cmd +: 013328 module_hci_cmd_set_wake_gpio: +0x3be2 013329 fetch 1 ,mem_module_uart_len +0x3be3 013330 bne 5 ,module_hci_event_receive_invalid_cmd +0x3be4 013331 ifetch 1 ,contru +0x3be5 013332 store 1 ,mem_module_mcu_wake_pin +0x3be6 013333 ifetch 4 ,contru +0x3be7 013334 store 4 ,mem_module_mcu_wake_delay_us +0x3be8 013335 fetcht 1 ,mem_module_mcu_wake_pin +0x3be9 013336 call gpio_config_output +0x3bea 013337 call module_set_mcu_wake_pin_low +0x3beb 013338 branch module_hci_event_receive_valid_cmd +: 013342 module_hci_cmd_set_tx_power: +0x3bec 013343 fetch 1 ,mem_module_uart_len +0x3bed 013344 bne 0x01 ,module_hci_event_receive_invalid_cmd +0x3bee 013345 ifetch 1 ,contru +0x3bef 013346 store 1 ,mem_tx_power +0x3bf0 013347 branch module_hci_event_receive_valid_cmd +: 013351 module_hci_cmd_le_confirm_gkey: +0x3bf1 013352 ifetch 1 ,contru +0x3bf2 013353 beq 0x01 ,module_hci_cmd_le_confirm_gkey_fail +0x3bf3 013354 fetch 1 ,mem_le_secure_connect_state +0x3bf4 013355 beq le_sc_stat_send_public_key ,module_hci_cmd_le_confirm_gkey_ok +0x3bf5 013356 beq le_sc_stat_receive_dhkey ,module_hci_cmd_le_confirm_gkey_ok +0x3bf6 013357 beq le_sc_stat_wait_confirm_gkey ,module_hci_cmd_le_confirm_gkey_ok +0x3bf7 013358 branch module_hci_event_receive_invalid_cmd +: 013359 module_hci_cmd_le_confirm_gkey_ok: +0x3bf8 013360 jam flag_le_sc_confrim_gkey_ok ,mem_le_sc_confirm_gkey_flag +0x3bf9 013361 branch module_hci_event_receive_valid_cmd +: 013363 module_hci_cmd_le_confirm_gkey_fail: +0x3bfa 013364 call le_send_pairing_confirm_value_failed +0x3bfb 013365 branch module_hci_event_receive_valid_cmd +: 013369 module_hci_cmd_set_reject_justwork_flag: +0x3bfc 013370 fetch 1 ,mem_module_uart_len +0x3bfd 013371 bne 0x01 ,module_hci_event_receive_invalid_cmd +0x3bfe 013372 call module_hci_event_receive_valid_cmd +0x3bff 013373 ifetch 1 ,contru +0x3c00 013374 branch classic_bt_clr_reject_justwork_flag ,blank +0x3c01 013375 branch classic_bt_set_reject_justwork_flag +: 013379 module_hci_cmd_reset_chip: +0x3c02 013380 call module_hci_event_receive_valid_cmd +0x3c03 013381 call wait_uarttx +0x3c04 013382 jam 0x01 ,core_reset +0x3c05 013383 branch loop +: 013387 module_hci_cmd_le_set_fixed_passkey: +0x3c06 013388 fetch 1 ,mem_module_uart_len +0x3c07 013389 beq 0 ,module_hci_event_receive_invalid_cmd +0x3c08 013390 ifetch 1 ,contru +0x3c09 013391 branch module_hci_cmd_le_set_random_passkey ,blank +0x3c0a 013392 fetch 1 ,mem_module_uart_len +0x3c0b 013393 bne 5 ,module_hci_event_receive_invalid_cmd +0x3c0c 013394 ifetch 4 ,contru +0x3c0d 013395 arg 1000000 ,temp +0x3c0e 013396 isub temp ,null +0x3c0f 013397 branch module_hci_event_receive_invalid_cmd ,positive +0x3c10 013398 store 4 ,mem_le_tk +0x3c11 013399 call le_set_config_fixed_tk +0x3c12 013400 branch module_hci_event_receive_valid_cmd +: 013402 module_hci_cmd_le_set_random_passkey: +0x3c13 013403 call le_clr_config_fixed_tk +0x3c14 013404 branch module_hci_event_receive_valid_cmd +: 013408 module_hci_test_cmde_close_lpm: +0x3c15 013409 jam 0 ,mem_lpm_mode +0x3c16 013410 branch module_hci_event_receive_valid_cmd +: 013415 module_hci_event_receive_invalid_cmd: +0x3c17 013416 arg 1 ,temp +0x3c18 013417 arg 0 ,rega +0x3c19 013418 branch module_hci_event_set_cmd +: 013421 module_hci_event_receive_valid_cmd: +0x3c1a 013422 arg 0 ,temp +0x3c1b 013423 arg 0 ,rega +0x3c1c 013424 branch module_hci_event_set_cmd +: 013428 module_hci_event_spp_connect: +0x3c1d 013429 jam hci_event_spp_conn_rep ,mem_module_uart_opcode +0x3c1e 013430 branch module_hci_event_enter_standby_mode_len0 +: 013434 module_hci_event_le_connect: +0x3c1f 013435 jam hci_event_le_conn_rep ,mem_module_uart_opcode +0x3c20 013436 branch module_hci_event_enter_standby_mode_len0 +: 013440 module_hci_event_spp_disconnect: +0x3c21 013441 jam hci_event_spp_dis_rep ,mem_module_uart_opcode +0x3c22 013442 branch module_hci_event_enter_standby_mode_len0 +: 013446 module_hci_event_le_disconnect: +0x3c23 013447 jam hci_event_le_dis_rep ,mem_module_uart_opcode +0x3c24 013448 branch module_hci_event_enter_standby_mode_len0 +: 013456 module_hci_event_set_cmd: +0x3c25 013457 fetch 1 ,mem_module_uart_opcode +0x3c26 013458 copy pdata ,regc +0x3c27 013459 jam hci_event_cmd_res ,mem_module_uart_opcode +0x3c28 013460 setarg 2 +0x3c29 013461 iadd rega ,pdata +0x3c2a 013462 call module_hci_prepare_tx +0x3c2b 013463 copy regc ,pdata +0x3c2c 013464 istore 1 ,contwu +0x3c2d 013465 istoret 1 ,contwu +0x3c2e 013466 copy rega ,loopcnt +0x3c2f 013467 copy regb ,contr +0x3c30 013468 call uart_copy_tx_bytes +0x3c31 013469 branch uartd_send +: 013473 module_hci_event_receive_spp_data: +0x3c32 013475 call module_spp_clear_last_transmite_clock +0x3c33 013476 jam hci_event_spp_data_rep ,mem_module_uart_opcode +0x3c34 013477 fetch 1 ,mem_current_length +0x3c35 013478 rtn blank +0x3c36 013479 call module_hci_prepare_tx +0x3c37 013480 fetch 1 ,mem_current_length +0x3c38 013481 copy pdata ,loopcnt +0x3c39 013482 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x3c3a 013483 copy pdata ,contr +0x3c3b 013484 call uart_copy_tx_bytes_fast +0x3c3c 013485 branch uartd_send +: 013489 module_hci_event_receive_le_data: +0x3c3d 013490 jam hci_event_le_data_rep ,mem_module_uart_opcode +0x3c3e 013491 fetch 1 ,mem_module_le_rx_data_len +0x3c3f 013492 icopy loopcnt +0x3c40 013493 increase 2 ,pdata +0x3c41 013494 call module_hci_prepare_tx +0x3c42 013495 fetch 2 ,mem_module_le_rx_data_handle +0x3c43 013496 istore 2 ,contwu +0x3c44 013497 fetch 2 ,mem_module_le_rx_data_address +0x3c45 013498 icopy contr +0x3c46 013499 call uart_copy_tx_bytes_fast +0x3c47 013500 branch uartd_send +: 013504 module_hci_event_enter_standby_mode: +0x3c48 013505 jam hci_event_standby_rep ,mem_module_uart_opcode +: 013506 module_hci_event_enter_standby_mode_len0: +0x3c49 013507 setarg 0 +0x3c4a 013508 call module_hci_prepare_tx +0x3c4b 013509 branch uartd_send +: 013513 module_hci_event_status_res: +0x3c4c 013514 jam hci_event_status_res ,mem_module_uart_opcode +0x3c4d 013515 setarg 1 +0x3c4e 013516 call module_hci_prepare_tx +0x3c4f 013518 call module_hci_read_bt_status +0x3c50 013520 fetch 2 ,mem_ui_state_map +0x3c51 013521 arg ui_state_bt_hid_conn ,queue +0x3c52 013522 qisolate1 pdata +0x3c53 013523 setflag true ,3 ,temp +0x3c54 013525 arg ui_state_ble_connected ,queue +0x3c55 013526 qisolate1 pdata +0x3c56 013527 setflag true ,5 ,temp +0x3c57 013529 fetch 1 ,mem_ui_state_map +0x3c58 013530 arg ui_state_bt_spp_conn ,queue +0x3c59 013531 qisolate1 pdata +0x3c5a 013532 setflag true ,4 ,temp +0x3c5b 013534 istoret 1 ,contwu +0x3c5c 013535 branch uartd_send +: 013539 module_hci_read_bt_status: +0x3c5d 013540 arg 0 ,temp +0x3c5e 013541 fetch 1 ,mem_scan_mode +0x3c5f 013542 arg inq_scan_mode ,queue +0x3c60 013543 qisolate1 pdata +0x3c61 013544 setflag true ,0 ,temp +0x3c62 013545 arg page_scan_mode ,queue +0x3c63 013546 qisolate1 pdata +0x3c64 013547 setflag true ,1 ,temp +0x3c65 013549 fetch 1 ,mem_le_adv_enable +0x3c66 013550 arg 0 ,queue +0x3c67 013551 qisolate1 pdata +0x3c68 013552 setflag true ,2 ,temp +0x3c69 013553 rtn +: 013557 module_hci_event_store_device: +0x3c6a 013558 jam hci_event_nvram_rep ,mem_module_uart_opcode +0x3c6b 013559 fetch 1 ,mem_nv_data_number +0x3c6c 013560 mul32 pdata ,34 ,pdata +0x3c6d 013561 icopy loopcnt +0x3c6e 013562 call module_hci_prepare_tx +0x3c6f 013563 fetch 2 ,mem_nv_data_ptr +0x3c70 013564 icopy contr +0x3c71 013565 call uart_copy_tx_bytes_fast +0x3c72 013566 branch uartd_send +: 013570 module_hci_event_gkey_generate: +0x3c73 013571 jam hci_event_gkey ,mem_module_uart_opcode +0x3c74 013572 setarg 4 +0x3c75 013573 call module_hci_prepare_tx +0x3c76 013574 fetch 4 ,mem_gkey +0x3c77 013575 istore 4 ,contwu +0x3c78 013576 branch uartd_send +: 013580 module_hci_event_invalid_packet: +0x3c79 013581 jam hci_event_invalid_packet ,mem_module_uart_opcode +0x3c7a 013582 hfetch 2 ,core_uart_rxitems +0x3c7b 013583 arg 0xff ,temp +0x3c7c 013584 call not_greater_than +0x3c7d 013585 copy pdata ,loopcnt +0x3c7e 013586 call module_hci_prepare_tx +0x3c7f 013587 call uartd_prepare_rx +0x3c80 013588 call uart_copy_rx2tx +0x3c81 013589 branch uartd_send +: 013593 module_hci_event_passkey_entry_mode: +0x3c82 013594 jam hci_event_get_passkey ,mem_module_uart_opcode +0x3c83 013595 branch module_hci_event_enter_standby_mode_len0 +: 013599 module_hci_event_le_tk: +0x3c84 013600 jam hci_event_le_tk ,mem_module_uart_opcode +0x3c85 013601 setarg 4 +0x3c86 013602 call module_hci_prepare_tx +0x3c87 013603 fetch 4 ,mem_le_tk +0x3c88 013604 istore 4 ,contwu +0x3c89 013605 branch uartd_send +: 013609 module_hci_event_le_pairing_fail: +0x3c8a 013610 arg flag_ble_pairing_fail ,rega +0x3c8b 013611 branch module_hci_event_pairing_completed +: 013613 module_hci_event_le_pairing_success: +0x3c8c 013614 arg flag_ble_pairing_success ,rega +0x3c8d 013615 branch module_hci_event_pairing_completed +: 013617 module_hci_event_bt_pairing_fail: +0x3c8e 013618 arg flag_bt_pairing_fail ,rega +0x3c8f 013619 branch module_hci_event_pairing_completed +: 013621 module_hci_event_bt_pairing_success: +0x3c90 013622 arg flag_bt_pairing_success ,rega +: 013624 module_hci_event_pairing_completed: +0x3c91 013625 jam 0 ,mem_flag_mode_ssp_pin +0x3c92 013626 jam hci_event_le_pairing_state ,mem_module_uart_opcode +0x3c93 013627 setarg 2 +0x3c94 013628 call module_hci_prepare_tx +0x3c95 013629 copy rega ,pdata +0x3c96 013630 istore 2 ,contwu +0x3c97 013631 branch uartd_send +: 013635 module_hci_event_pause_enc: +0x3c98 013636 arg flag_event_pause_enc ,regc +0x3c99 013637 branch module_hci_event_enc +: 013639 module_hci_event_start_enc: +0x3c9a 013640 arg flag_event_start_enc ,regc +: 013642 module_hci_event_enc: +0x3c9b 013643 jam hci_event_le_encryption_state ,mem_module_uart_opcode +0x3c9c 013644 setarg 1 +0x3c9d 013645 call module_hci_prepare_tx +0x3c9e 013646 copy regc ,pdata +0x3c9f 013647 istore 1 ,contwu +0x3ca0 013648 branch uartd_send +: 013652 module_hci_event_le_gkey: +0x3ca1 013653 jam hci_event_le_gkey ,mem_module_uart_opcode +0x3ca2 013654 setarg 4 +0x3ca3 013655 call module_hci_prepare_tx +0x3ca4 013656 fetch 4 ,mem_gkey +0x3ca5 013657 istore 4 ,contwu +0x3ca6 013658 branch uartd_send +: 013669 module_hci_prepare_tx: +0x3ca7 013670 jam 0x02 ,mem_module_uart_cmd +0x3ca8 013671 store 1 ,mem_module_uart_len +0x3ca9 013672 storet 8 ,mem_temp +0x3caa 013673 bpatch patch1c_2 ,mem_patch1c +0x3cab 013674 call module_set_mcu_wake_pin_high_delay +0x3cac 013675 fetcht 8 ,mem_temp +0x3cad 013676 call uartd_prepare_tx +0x3cae 013677 fetch 3 ,mem_module_uart_cmd +0x3caf 013678 istore 3 ,contwu +0x3cb0 013679 rtn +: 013682 module_set_mcu_wake_pin_high_delay: +0x3cb1 013683 call module_check_mcu_wake_pin_high +0x3cb2 013684 rtn true +: 013685 module_set_mcu_wake_pin_h_delay: +0x3cb3 013686 call module_set_mcu_wake_pin_high +0x3cb4 013687 fetch 4 ,mem_module_mcu_wake_delay_us +0x3cb5 013688 rshift2 pdata ,pdata +0x3cb6 013689 rtn blank +0x3cb7 013690 branch delay +: 013692 module_set_mcu_wake_pin_high: +0x3cb8 013694 fetcht 1 ,mem_module_mcu_wake_pin +0x3cb9 013695 branch gpio_out_active +: 013697 module_check_mcu_wake_pin_high: +0x3cba 013698 fetcht 1 ,mem_module_mcu_wake_pin +0x3cbb 013699 branch gpio_check_active +: 013701 module_set_mcu_wake_pin_low: +0x3cbc 013702 fetcht 1 ,mem_module_mcu_wake_pin +0x3cbd 013703 branch gpio_out_inactive +: 013706 delay: +0x3cbe 013707 increase -1 ,pdata +0x3cbf 013708 nop 38 +0x3cc0 013709 nbranch delay ,blank +0x3cc1 013710 rtn +: 013719 module_le_receive_data: +0x3cc2 013720 call module_check_ble_encrypt_state +0x3cc3 013721 rtn user +0x3cc4 013722 copy rega ,pdata +0x3cc5 013723 store 2 ,mem_module_le_rx_data_address +0x3cc6 013724 copy regb ,pdata +0x3cc7 013725 store 1 ,mem_module_le_rx_data_len +0x3cc8 013726 fetch 2 ,mem_le_att_handle +0x3cc9 013727 fetcht 2 ,mem_module_data_write_handle +0x3cca 013728 isub temp ,null +0x3ccb 013729 branch module_le_receive_data_ok ,zero +0x3ccc 013730 fetcht 2 ,mem_module_data_write_handle2 +0x3ccd 013731 isub temp ,null +0x3cce 013732 nrtn zero +: 013733 module_le_receive_data_ok: +0x3ccf 013734 store 2 ,mem_module_le_rx_data_handle +0x3cd0 013735 branch module_hci_event_receive_le_data +: 013740 module_exit_sniff: +0x3cd1 013741 fetch 1 ,mem_module_flag +0x3cd2 013742 rtnbit1 moudle_task_unsniff +0x3cd3 013743 call module_set_unsniff_task_flag +0x3cd4 013744 branch app_bt_sniff_exit +: 013747 module_set_lpm_mult_2: +0x3cd5 013748 jam 2 ,mem_lpm_mult +0x3cd6 013749 rtn +: 013753 module_bb_event_timer: +0x3cd7 013754 branch module_read_vdd_timer +: 013756 module_read_vdd_timer: +0x3cd8 013757 fetch 1 ,mem_module_read_vdd_flag +0x3cd9 013758 rtn blank +0x3cda 013759 fetch 1 ,mem_module_read_vdd_count +0x3cdb 013760 rtn blank +0x3cdc 013761 increase -1 ,pdata +0x3cdd 013762 store 1 ,mem_module_read_vdd_count +0x3cde 013763 nrtn blank +0x3cdf 013764 jam flag_module_read_vdd_count ,mem_module_read_vdd_count +0x3ce0 013765 call adc_set_mode +0x3ce1 013766 call vdd_calculate_by_mode +0x3ce2 013767 div pdata ,0x64 +0x3ce3 013768 call wait_div_end +0x3ce4 013769 quotient pdata +0x3ce5 013770 remainder temp +0x3ce6 013771 store 1 ,mem_module_vdd_quotient +0x3ce7 013772 storet 1 ,mem_module_vdd_remainder +0x3ce8 013773 rtn +: 013776 module_control_air_flow: +0x3ce9 013777 call check_uart_tx_buff +0x3cea 013778 branch app_l2cap_flow_control_enable ,positive +0x3ceb 013779 branch app_l2cap_flow_control_disable +: 013783 module_set_sniff_task_flag: +0x3cec 013784 arg moudle_task_sniff ,queue +0x3ced 013785 branch module_set_state +: 013787 module_clear_sniff_task_flag: +0x3cee 013788 arg moudle_task_sniff ,queue +0x3cef 013789 branch module_clr_state +: 013791 module_set_unsniff_task_flag: +0x3cf0 013792 arg moudle_task_unsniff ,queue +0x3cf1 013793 branch module_set_state +: 013795 module_clear_unsniff_task_flag: +0x3cf2 013796 arg moudle_task_unsniff ,queue +0x3cf3 013797 branch module_clr_state +: 013799 module_set_le_tx_data_flag: +0x3cf4 013800 arg module_flag_ble_data_finish ,queue +0x3cf5 013801 branch module_set_state +: 013803 module_clear_le_tx_data_flag: +0x3cf6 013804 arg module_flag_ble_data_finish ,queue +0x3cf7 013805 branch module_clr_state +: 013807 module_clr_state: +0x3cf8 013808 fetch 1 ,mem_module_flag +0x3cf9 013809 qset0 pdata +0x3cfa 013810 store 1 ,mem_module_flag +0x3cfb 013811 rtn +: 013813 module_set_state: +0x3cfc 013814 fetch 1 ,mem_module_flag +0x3cfd 013815 qset1 pdata +0x3cfe 013816 store 1 ,mem_module_flag +0x3cff 013817 rtn +: 013827 mouse_init: +0x3d00 013828 call mouse_setting_config +0x3d01 013829 call spi_ncs_enable +0x3d02 013830 call mouse_init_sunt +0x3d03 013831 call mouse_dpi_config +0x3d04 013832 call spi_ncs_disable +0x3d05 013833 rtn wake +0x3d06 013834 call mouse_cheak_enable_usb +0x3d07 013835 call mouse_cb_fuction +0x3d08 013838 fetch mouse_flag_len ,mem_mouse_flag +0x3d09 013839 rtnbit1 mouse_enable_usb +0x3d0a 013840 call mouse_wakeup_from_power +0x3d0b 013841 rtnmark1 mark_24g +0x3d0c 013842 fetch 2 ,mem_ui_state_map +0x3d0d 013843 bbit1 ui_state_btn_down ,mouse_start_discovery +0x3d0e 013844 branch mouse_check_reconn_target +: 013847 mouse_delay_4s: +0x3d0f 013848 fetch mouse_flag_len ,mem_mouse_flag +0x3d10 013849 rtnbit0 mouse_enable_init_delay +0x3d11 013850 arg 20 ,loopcnt +: 013851 mouse_delay_20ms: +0x3d12 013852 setarg 200000 +0x3d13 013853 call sleep +0x3d14 013854 loop delay_10ms +0x3d15 013855 rtn +: 013858 mouse_cheak_enable_usb: +0x3d16 013859 fetch mouse_flag_len ,mem_mouse_flag +0x3d17 013860 rtnbit0 mouse_enable_usb +0x3d18 013861 branch usb_init +: 013864 mouse_cb_fuction: +0x3d19 013865 setarg mouse_le +0x3d1a 013866 store 2 ,mem_cb_le_process +0x3d1b 013867 setarg mouse_send_process +0x3d1c 013868 store 2 ,mem_cb_bt_process +0x3d1d 013869 setarg mouse_process_lpm_before +0x3d1e 013870 store 2 ,mem_cb_before_lpm +0x3d1f 013871 setarg mouse_priority_bb_event +0x3d20 013872 store 2 ,mem_cb_bb_event_process +0x3d21 013873 setarg mouse_idle +0x3d22 013874 store 2 ,mem_cb_idle_process +0x3d23 013875 setarg mouse_before_hibernate +0x3d24 013876 store 2 ,mem_cb_before_hibernate +0x3d25 013877 setarg le_mouse_bb_event_connect_complete +0x3d26 013878 store 2 ,mem_cb_att_write +0x3d27 013880 call g24_head_ptr2regc +0x3d28 013881 setarg mouse_g24_package_data +0x3d29 013882 add regc ,offset_24g_cb_data ,contw +0x3d2a 013883 istore 2 ,contw +0x3d2b 013884 setarg mouse_g24_enter_lpm +0x3d2c 013885 add regc ,offset_24g_cb_lpm_prepare ,contw +0x3d2d 013886 istore 2 ,contw +0x3d2e 013887 setarg mouse_lpm_before_common +0x3d2f 013888 add regc ,offset_24g_cb_lpm_before ,contw +0x3d30 013889 istore 2 ,contw +0x3d31 013891 setarg mouse_bb_event_timer +0x3d32 013892 store 2 ,mem_cb_event_timer +0x3d33 013893 setarg mouse_spi_write_flash_cb +0x3d34 013894 store 2 ,mem_cb_spi_flash_write_complate +0x3d35 013895 rtn +: 013896 mouse_spi_write_flash_cb: +: 013897 mouse_spi_init: +0x3d36 013898 fetch mouse_flag_len ,mem_mouse_flag +0x3d37 013899 bbit0 mouse_enable_spi2 ,spid_init +0x3d38 013900 branch spid_init2 +: 013902 mouse_setting_config: +0x3d39 013903 rtn wake +0x3d3a 013904 call g24_set_device_addr +0x3d3b 013905 call mouse_gpio_init +0x3d3c 013906 call mouse_param_init +0x3d3d 013907 call mouse_adc_init +0x3d3e 013908 call le_set_config_fixed_ltk +0x3d3f 013909 call le_set_justwork +0x3d40 013910 call le_set_fixed_ltk +0x3d41 013911 call le_set_config_read_authentication +0x3d42 013912 fetch mouse_flag_len ,mem_mouse_flag +0x3d43 013913 bbit1 mouse_enable_eeprom ,mouse_init_iic +0x3d44 013914 bbit1 mouse_enable_flash ,mouse_load_flash_info_cheak +0x3d45 013915 rtn +: 013917 mouse_init_iic: +0x3d46 013918 call iic_init_390k +0x3d47 013919 fetch mouse_flag_len ,mem_mouse_flag +0x3d48 013920 isolate1 mouse_enable_2k_eeprom ,pdata +0x3d49 013921 ncall clear_eeprom_size_2k ,true +0x3d4a 013922 call mouse_load_eeprom_dpi +0x3d4b 013923 call mouse_init_environment +0x3d4c 013924 call mouse_set_24g_addr_eeprom +0x3d4d 013925 branch iicd_read_eep_data +: 013927 mouse_wakeup_from_power: +0x3d4e 013928 fetch mouse_flag_len ,mem_mouse_flag +0x3d4f 013929 bbit0 mouse_enable_wakeup_from_power ,mouse_wakeup_no_from_power +0x3d50 013930 fetch 1 ,mem_wakup_from_power_flag +0x3d51 013931 isolate0 gpio_latch ,pdata +0x3d52 013932 nrtn true +: 013933 mouse_wakeup_no_from_power: +0x3d53 013934 fetch 1 ,mem_reconn_times_init +0x3d54 013935 store 1 ,mem_reconn_times +0x3d55 013936 fetch 1 ,mem_config_function_enable +0x3d56 013937 rtnbit1 enable_select_device_by_switch +: 013938 mouse_start_24g_mode: +0x3d57 013939 fetch mouse_flag_len ,mem_mouse_flag +0x3d58 013940 rtnbit0 mouse_enable_24g +0x3d59 013941 bbit1 mouse_enable_auto_24g_paring ,g24_auto_pair_start +0x3d5a 013942 branch g24_check_51cmd_start_24g +: 013943 le_mouse_bb_event_connect_complete: +0x3d5b 013944 fetch 1 ,mem_le_att_handle +0x3d5c 013945 sub pdata ,26 ,pdata +0x3d5d 013946 nrtn zero +0x3d5e 013947 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x3d5f 013948 call ui_ipc_send_cmd +: 013949 mouse_le_write_enable: +0x3d60 013950 arg write_req_enable_flag ,queue +0x3d61 013951 branch mouse_le_enable_connect_flag +: 013953 mouse_dpi_up: +0x3d62 013954 fetch 1 ,mem_mouse_dpi_button_state +0x3d63 013955 rtneq dpi_button_state_up +0x3d64 013956 jam dpi_button_state_up ,mem_mouse_dpi_button_state +0x3d65 013957 rtn +: 013958 mouse_dpi_config: +0x3d66 013959 fetch 1 ,mem_config_sensor_motion +0x3d67 013960 and pdata ,0x0f ,pdata +0x3d68 013961 store 1 ,mem_mouse_dpi +0x3d69 013962 branch mouse_seting_dpi + 2 +: 013965 mouse_dpi_cheak: +0x3d6a 013966 fetcht 1 ,mem_dpi_button_gpio +0x3d6b 013967 call gpio_get_bit +0x3d6c 013968 nbranch mouse_dpi_up ,true +: 013969 mouse_dpi_down: +0x3d6d 013970 fetch 1 ,mem_mouse_dpi_button_state +0x3d6e 013971 rtneq dpi_button_state_down +0x3d6f 013972 jam dpi_button_state_down ,mem_mouse_dpi_button_state +0x3d70 013973 fetch 1 ,mem_mouse_dpi +0x3d71 013974 increase 1 ,pdata +0x3d72 013975 and pdata ,0x03 ,pdata +0x3d73 013976 store 1 ,mem_mouse_dpi +0x3d74 013977 call mouse_seting_dpi +0x3d75 013978 fetch mouse_flag_len ,mem_mouse_flag +0x3d76 013979 bbit1 mouse_enable_eeprom ,mouse_store_eerpom_dpi +0x3d77 013980 bbit1 mouse_enable_flash ,mouse_before_store_flash_cpi +0x3d78 013981 rtn +: 013982 mouse_before_store_flash_cpi: +0x3d79 013983 arg mouse_spi2_clk_gpio ,temp +0x3d7a 013984 call gpio_config_output +0x3d7b 013985 arg mouse_spi2_sdio_gpio ,temp +0x3d7c 013986 call gpio_config_output +0x3d7d 013987 branch mouse_store_flash_device_info +: 013989 mouse_seting_dpi: +0x3d7e 013990 bpatch patch1c_3 ,mem_patch1c +0x3d7f 013991 call mosue_dpi_led_blink_init +0x3d80 013992 fetch 1 ,mem_config_sensor_type +0x3d81 013993 beq p3610 ,mouse_seting_3610_dpi +0x3d82 013994 beq p3212 ,mouse_seting_3212_dpi +0x3d83 013995 fetch 1 ,mem_mouse_dpi +0x3d84 013996 beq mouse_dpi_level1 ,mouse_set_cpi1 +0x3d85 013997 beq mouse_dpi_level2 ,mouse_set_cpi2 +0x3d86 013998 beq mouse_dpi_level3 ,mouse_set_cpi3 +0x3d87 013999 beq mouse_dpi_level4 ,mouse_set_cpi4 +: 014000 mouse_set_cpi2: +0x3d88 014001 fetch 1 ,mem_320x_dpi_2 +0x3d89 014002 branch mouse_p3205_dpi +: 014003 mouse_set_cpi1: +0x3d8a 014004 fetch 1 ,mem_320x_dpi_1 +0x3d8b 014005 branch mouse_p3205_dpi +: 014006 mouse_set_cpi3: +0x3d8c 014007 fetch 1 ,mem_320x_dpi_3 +0x3d8d 014008 branch mouse_p3205_dpi +: 014009 mouse_set_cpi4: +0x3d8e 014010 fetch 1 ,mem_320x_dpi_4 +0x3d8f 014011 branch mouse_p3205_dpi +: 014012 moue_seting_cpi_count: +0x3d90 014013 fetch 1 ,mem_config_sensor_type +0x3d91 014014 rtneq p3065_xy +0x3d92 014015 fetch 1 ,mem_mouse_cpi_count +0x3d93 014016 increase 1 ,pdata +0x3d94 014017 store 1 ,mem_mouse_cpi_count +0x3d95 014018 rtn +: 014020 mouse_seting_3212_dpi: +0x3d96 014021 fetch 1 ,mem_mouse_dpi +0x3d97 014022 beq mouse_dpi_level1 ,mouse_set_p3212_cpi1 +0x3d98 014023 beq mouse_dpi_level2 ,mouse_set_p3212_cpi2 +0x3d99 014024 beq mouse_dpi_level3 ,mouse_set_p3212_cpi3 +0x3d9a 014025 beq mouse_dpi_level4 ,mouse_set_p3212_cpi4 +: 014026 mouse_set_p3212_cpi2: +0x3d9b 014027 fetch 1 ,mem_3212_dpi_2 +0x3d9c 014028 branch mouse_p3212_dpi +: 014029 mouse_set_p3212_cpi1: +0x3d9d 014030 fetch 1 ,mem_3212_dpi_1 +0x3d9e 014031 branch mouse_p3212_dpi +: 014032 mouse_set_p3212_cpi3: +0x3d9f 014033 fetch 1 ,mem_3212_dpi_3 +0x3da0 014034 branch mouse_p3212_dpi +: 014035 mouse_set_p3212_cpi4: +0x3da1 014036 fetch 1 ,mem_3212_dpi_4 +: 014037 mouse_p3212_dpi: +0x3da2 014038 store 1 ,mem_mouse_cpi_count +0x3da3 014039 lshift8 pdata ,pdata +0x3da4 014040 copy pdata ,rega +0x3da5 014041 add pdata ,mouse_p3212_dpi_xaddress ,pdata +0x3da6 014042 call twspi_write +0x3da7 014043 copy rega ,pdata +0x3da8 014044 add pdata ,mouse_p3212_dpi_yaddress ,pdata +0x3da9 014045 branch twspi_write +: 014047 mouse_seting_3610_dpi: +0x3daa 014048 fetch 1 ,mem_mouse_dpi +0x3dab 014049 beq mouse_dpi_level1 ,mouse_set_p3610_cpi1 +0x3dac 014050 beq mouse_dpi_level2 ,mouse_set_p3610_cpi2 +0x3dad 014051 beq mouse_dpi_level3 ,mouse_set_p3610_cpi3 +0x3dae 014052 beq mouse_dpi_level4 ,mouse_set_p3610_cpi4 +: 014053 mouse_set_p3610_cpi2: +0x3daf 014054 fetch 1 ,mem_3610_dpi_2 +0x3db0 014055 branch mouse_p3610_dpi +: 014056 mouse_set_p3610_cpi1: +0x3db1 014057 fetch 1 ,mem_3610_dpi_1 +0x3db2 014058 branch mouse_p3610_dpi +: 014059 mouse_set_p3610_cpi3: +0x3db3 014060 fetch 1 ,mem_3610_dpi_3 +0x3db4 014061 branch mouse_p3610_dpi +: 014062 mouse_set_p3610_cpi4: +0x3db5 014063 fetch 1 ,mem_3610_dpi_4 +: 014064 mouse_p3610_dpi: +0x3db6 014065 store 1 ,mem_mouse_cpi_count +0x3db7 014066 call mouse_spi_sdio_gpio_pollup +0x3db8 014067 fetch 1 ,mem_mouse_cpi_count +: 014068 mouse_reset_p3610_dpi: +0x3db9 014069 add pdata ,0x80 ,pdata +0x3dba 014070 lshift8 pdata ,pdata +0x3dbb 014071 add pdata ,mouse_p3610_dpi_address ,pdata +0x3dbc 014072 copy pdata ,rega +0x3dbd 014073 branch mouse_set_sensor_reg +: 014075 mouse_p3205_dpi: +0x3dbe 014076 store 1 ,mem_mouse_cpi_count +0x3dbf 014077 call moue_seting_cpi_count +0x3dc0 014078 fetch 1 ,mem_mouse_cpi_count +0x3dc1 014079 setarg mouse_dpi_address +0x3dc2 014080 call twspi_read +0x3dc3 014081 and pdata ,0xf8 ,temp +0x3dc4 014082 fetch 1 ,mem_mouse_cpi_count +0x3dc5 014083 iadd temp ,pdata +0x3dc6 014084 lshift8 pdata ,pdata +0x3dc7 014085 add pdata ,mouse_dpi_address ,pdata +0x3dc8 014086 branch twspi_write +: 014089 mouse_init_environment: +0x3dc9 014090 call app_initflag_check +0x3dca 014091 branch mouse_eeprom_load_recon_info ,zero +0x3dcb 014092 call mouse_ble_init_address +0x3dcc 014093 call mouse_store_eeprom_device_info +0x3dcd 014094 branch app_initflag_store +: 014097 mouse_24g_pairing_button: +0x3dce 014098 fetch 2 ,mem_24g_pairing_timer_count +0x3dcf 014099 rtn blank +0x3dd0 014100 fetch mouse_flag_len ,mem_mouse_flag +0x3dd1 014101 rtnbit0 mouse_enable_24g +0x3dd2 014102 rtnbit1 mosue_24g_pairing_flag +0x3dd3 014103 rtnmark1 mark_24g +0x3dd4 014104 call mouse_check_key_gpio +0x3dd5 014105 rtnne mouse_lmr_button +0x3dd6 014106 call mouse_devce_led_off +0x3dd7 014107 arg mosue_24g_pairing_flag ,queue +0x3dd8 014108 call mouse_enable_function_flag +0x3dd9 014109 setarg 0 +0x3dda 014110 store 2 ,mem_mouse_direct_timer +0x3ddb 014111 store 1 ,mem_mouse_send_blank_timer +0x3ddc 014112 call g24_set0_mem_check_dongle_times +0x3ddd 014114 fetch 2 ,mem_ui_state_map +0x3dde 014115 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +0x3ddf 014116 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x3de0 014117 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x3de1 014118 call mouse_stop_discovery +0x3de2 014119 branch g24_start_pairing_sm1 +: 014122 mouse_idle: +0x3de3 014123 call mouse_24g_pairing_button +0x3de4 014124 call ui_check_paring_button +0x3de5 014125 call mouse_dpi_cheak +0x3de6 014126 call mouse_usb_isr +0x3de7 014127 call mouse_wheel_check +0x3de8 014128 branch mouse_usb_mode +: 014129 mouse_usb_isr: +0x3de9 014130 fetch mouse_flag_len ,mem_mouse_flag +0x3dea 014131 rtnbit0 mouse_enable_usb +0x3deb 014132 call usb_isr +0x3dec 014133 branch usb_offline_state +: 014135 mouse_cheak_usb: +0x3ded 014136 hfetch 1 ,core_usb_addr +0x3dee 014137 bbit0 7 ,mouse_usb_no_exsit +0x3def 014138 bbit1 7 ,mouse_usb_exsit +0x3df0 014139 rtn +: 014140 mouse_usb_no_exsit: +0x3df1 014141 fetch 1 ,mem_usb_addr +0x3df2 014142 rtnbit0 7 +0x3df3 014143 branch soft_reset_chip +: 014144 mouse_usb_exsit: +0x3df4 014145 fetch 1 ,mem_usb_addr +0x3df5 014146 rtnbit1 7 +0x3df6 014147 branch mouse_stop_bluetooth_mode +: 014149 mouse_usb_mode: +0x3df7 014150 call mouse_cheak_usb +0x3df8 014151 hfetch 1 ,core_usb_addr +0x3df9 014152 store 1 ,mem_usb_addr +0x3dfa 014153 rtnbit0 7 +0x3dfb 014154 call mouse_clkn_check +0x3dfc 014155 fetch 4 ,mem_btclk_sensor +0x3dfd 014156 fetcht 1 ,mem_wire_usb_interval +0x3dfe 014157 iadd temp ,temp +0x3dff 014158 copy clkn_bt ,pdata +0x3e00 014159 isub temp ,null +0x3e01 014160 nrtn positive +0x3e02 014161 store 4 ,mem_btclk_sensor +0x3e03 014162 call mouse_motion +0x3e04 014163 nrtn user +0x3e05 014164 jam 4 ,mem_usb_tx_enable +0x3e06 014165 branch mouse_wired_to_usb +: 014167 mouse_clkn_check: +0x3e07 014168 fetcht 4 ,mem_btclk_sensor +0x3e08 014169 copy clkn_bt ,pdata +0x3e09 014170 isub temp ,null +0x3e0a 014171 ncall mouse_clkn_timeout ,positive +0x3e0b 014172 rtn +: 014173 mouse_clkn_timeout: +0x3e0c 014174 setarg 0 +0x3e0d 014175 store 4 ,mem_btclk_sensor +0x3e0e 014176 rtn +: 014180 mouse_wired_to_usb: +0x3e0f 014181 fetch 1 ,mem_usb_tx_enable +0x3e10 014182 rtnbit0 2 +0x3e11 014183 branch mouse_data_push +: 014184 mouse_data_push: +0x3e12 014185 hfetch 1 ,core_usb_addr +0x3e13 014186 rtnbit0 7 +0x3e14 014187 jam usb_ep2_ms ,mem_usb_ep2_data +0x3e15 014188 setarg ms_report_id +0x3e16 014189 store 1 ,mem_usb_mouse_data +0x3e17 014190 fetch 7 ,mem_mouse_key +0x3e18 014191 istore 7 ,contw +0x3e19 014192 rtn +: 014195 mouse_enable_clock_qdecoder: +0x3e1a 014196 hfetch 2 ,core_clkoff +0x3e1b 014197 set0 clock_off_qdecoder ,pdata +0x3e1c 014198 hstore 2 ,core_clkoff +0x3e1d 014199 rtn +: 014201 mouse_param_init: +0x3e1e 014202 setarg 0x8c00 +0x3e1f 014203 store 2 ,mem_ui_uuid_table +0x3e20 014204 setarg 0x8e7a +0x3e21 014205 store 2 ,mem_ui_le_uuid_table +0x3e22 014206 setarg 0x2402 +0x3e23 014207 store 2 ,mem_fcomp_mul +0x3e24 014208 setarg 0x2580 +0x3e25 014209 store 3 ,mem_class +0x3e26 014210 jam 3 ,mem_lpm_mult_timeout +0x3e27 014211 jam 8 ,mem_lpm_overhead +0x3e28 014212 jam dpi_button_state_up ,mem_select_device_button_statue +0x3e29 014213 setarg 0x0200 +0x3e2a 014214 store 2 ,mem_lpm_interval +0x3e2b 014215 jam 0x17 ,mem_le_local_mtu +0x3e2c 014216 jam 0x17 ,mem_le_remote_mtu +0x3e2d 014218 setarg 0x0a77 +0x3e2e 014219 store 2 ,mem_spi_init_clk +0x3e2f 014235 setsect 0 ,0x306 +0x3e30 014236 setsect 1 ,0x4440 +0x3e31 014237 setsect 2 ,0x10000 +0x3e32 014238 setsect 3 ,0x4408 +0x3e33 014239 store 9 ,mem_all_uuid_16bits +0x3e34 014240 setsect 0 ,0x1224 +0x3e35 014241 setsect 1 ,0x4000 +0x3e36 014242 setsect 2 ,0x0 +0x3e37 014243 istore 5 ,contw +0x3e38 014245 setsect 0 ,0x3ffff +0x3e39 014246 setsect 1 ,0x2fe23 +0x3e3a 014247 setsect 2 ,0x199d9 +0x3e3b 014248 setsect 3 ,0x20d +0x3e3c 014249 store 8 ,mem_features +0x3e3d 014251 setarg 0x012c +0x3e3e 014252 store 2 ,mem_24g_pairing_timer_count +0x3e3f 014253 call le_modified_name +0x3e40 014254 fetch mouse_flag_len ,mem_mouse_flag +0x3e41 014255 rtnbit0 mouse_enable_gpio_control_adc_sensor +0x3e42 014256 call mouse_sensor_set_angle +0x3e43 014257 branch mouse_select_adc +: 014259 mouse_sensor_set_angle: +0x3e44 014260 fetcht 1 ,mem_select_sensor_angle_gpio +0x3e45 014261 call gpio_config_input +0x3e46 014262 fetcht 1 ,mem_select_sensor_angle_gpio +0x3e47 014263 call gpio_get_bit +0x3e48 014264 jam mouse_3clk_angle ,mem_config_sensor_angle +0x3e49 014265 rtn true +0x3e4a 014266 jam mouse_12clk_angle ,mem_config_sensor_angle +0x3e4b 014267 rtn +: 014269 mouse_select_adc: +0x3e4c 014270 fetcht 1 ,mem_select_adc_gpio +0x3e4d 014271 call gpio_config_input +0x3e4e 014272 fetcht 1 ,mem_select_adc_gpio +0x3e4f 014273 call gpio_get_bit +0x3e50 014274 jam adc_config_vinlpm ,mem_adc_config_flag +0x3e51 014275 rtn true +0x3e52 014276 jam adc_config_gpio ,mem_adc_config_flag +0x3e53 014277 rtn +: 014280 mouse_adc_init: +0x3e54 014281 fetch 1 ,mem_adc_config_flag +0x3e55 014282 beq adc_config_vinlpm ,mouse_adc_init_data_vinlpm +0x3e56 014283 beq adc_config_hvin ,mouse_adc_init_data_hvin +0x3e57 014284 beq adc_config_gpio ,mouse_adc_init_data_io +0x3e58 014285 branch mouse_adc_init_data_vinlpm +: 014287 mouse_adc_init_data_vinlpm: +0x3e59 014288 fetcht 2 ,mem_2v_adc_vinlpm_data +0x3e5a 014289 fetch 2 ,mem_3v_adc_vinlpm_data +0x3e5b 014290 isub temp ,pdata +0x3e5c 014291 mul32 pdata ,20 ,pdata +0x3e5d 014292 div pdata ,100 +0x3e5e 014293 call wait_div_end +0x3e5f 014294 quotient pdata +0x3e60 014295 store 2 ,mem_adc_reference_voltage +0x3e61 014296 rtn +: 014297 mouse_adc_init_data_hvin: +0x3e62 014298 fetcht 2 ,mem_1v_adc_hvin_data +0x3e63 014299 fetch 2 ,mem_5v_adc_hvin_data +0x3e64 014300 isub temp ,pdata +0x3e65 014301 mul32 pdata ,230 ,pdata +0x3e66 014302 div pdata ,400 +0x3e67 014303 call wait_div_end +0x3e68 014304 quotient pdata +0x3e69 014305 store 2 ,mem_adc_reference_voltage +0x3e6a 014306 rtn +: 014307 mouse_adc_init_data_io: +0x3e6b 014308 fetch 2 ,mem_1v_adc_io_data +0x3e6c 014309 store 2 ,mem_adc_reference_voltage +0x3e6d 014310 rtn +: 014311 mouse_gpio_init: +0x3e6e 014312 fetcht 1 ,mem_eeprom_wp_gpio +0x3e6f 014313 call gpio_config_output +0x3e70 014314 call usb_offline_check_init +0x3e71 014315 fetcht 1 ,mem_lbutton_gpio +0x3e72 014316 call gpio_config_input +0x3e73 014317 fetcht 1 ,mem_rbutton_gpio +0x3e74 014318 call gpio_config_input +0x3e75 014319 fetcht 1 ,mem_mbutton_gpio +0x3e76 014320 call gpio_config_input +0x3e77 014321 fetcht 1 ,mem_sensor_data_gpio +0x3e78 014322 call gpio_config_input +0x3e79 014324 fetcht 1 ,mem_sensor_reset_gpio +0x3e7a 014325 call gpio_config_output +0x3e7b 014327 fetcht 1 ,mem_whee_a_data_gpio +0x3e7c 014328 call gpio_config_input +0x3e7d 014330 fetcht 1 ,mem_whee_b_data_gpio +0x3e7e 014331 call gpio_config_input +0x3e7f 014333 fetcht 1 ,mem_whee_ta_data_gpio +0x3e80 014334 call gpio_config_input +0x3e81 014335 fetcht 1 ,mem_whee_tb_data_gpio +0x3e82 014336 call gpio_config_input +0x3e83 014338 fetcht 1 ,mem_bk_button_gpio +0x3e84 014339 call gpio_config_input +0x3e85 014340 fetcht 1 ,mem_fw_button_gpio +0x3e86 014341 call gpio_config_input +0x3e87 014343 fetcht 1 ,mem_config_low_voltage_alarm_gpio +0x3e88 014344 call gpio_config_output +0x3e89 014346 fetcht 1 ,mem_config_device1_led_gpio +0x3e8a 014347 call gpio_config_output +0x3e8b 014349 fetcht 1 ,mem_config_device2_led_gpio +0x3e8c 014350 call gpio_config_output +0x3e8d 014352 fetcht 1 ,mem_config_device3_led_gpio +0x3e8e 014353 call gpio_config_output +0x3e8f 014355 fetcht 1 ,mem_dpi_led_gpio +0x3e90 014356 call gpio_config_output +0x3e91 014358 fetcht 1 ,mem_config_select_device_button_gpio +0x3e92 014359 call gpio_config_input +0x3e93 014361 fetcht 1 ,mem_config_bt_button_gpio +0x3e94 014362 call gpio_config_input +0x3e95 014364 fetcht 1 ,mem_dpi_button_gpio +0x3e96 014365 branch gpio_config_input +: 014367 mouse_wheel_gpio_set_wake: +0x3e97 014368 fetcht 1 ,mem_whee_a_data_gpio +0x3e98 014369 call gpio_set_wake_by_current_state +0x3e99 014370 fetcht 1 ,mem_whee_b_data_gpio +0x3e9a 014371 call gpio_set_wake_by_current_state +0x3e9b 014372 fetcht 1 ,mem_whee_ta_data_gpio +0x3e9c 014373 call gpio_set_wake_by_current_state +0x3e9d 014374 fetcht 1 ,mem_whee_tb_data_gpio +0x3e9e 014375 branch gpio_set_wake_by_current_state +: 014377 mouse_before_hibernate_wheel_gpio_set: +0x3e9f 014378 fetcht 1 ,mem_whee_a_data_gpio +0x3ea0 014379 call mouse_gpio_set_pupd_by_input +0x3ea1 014380 fetcht 1 ,mem_whee_b_data_gpio +0x3ea2 014381 call mouse_gpio_set_pupd_by_input +0x3ea3 014382 fetcht 1 ,mem_whee_ta_data_gpio +0x3ea4 014383 call mouse_gpio_set_pupd_by_input +0x3ea5 014384 fetcht 1 ,mem_whee_tb_data_gpio +0x3ea6 014385 branch mouse_gpio_set_pupd_by_input +: 014387 mouse_gpio_set_pupd_by_input: +0x3ea7 014388 sub temp ,ui_button_gpio_disable ,null +0x3ea8 014389 rtn zero +0x3ea9 014390 and temp ,0x7f ,queue +0x3eaa 014391 hfetch 4 ,core_gpio_in +0x3eab 014392 qisolate1 pdata +0x3eac 014393 hfetch 4 ,core_gpio_pu0 +0x3ead 014394 qsetflag true ,pdata +0x3eae 014395 hstore 4 ,core_gpio_pu0 +0x3eaf 014396 hfetch 4 ,core_gpio_pd0 +0x3eb0 014397 nqsetflag true ,pdata +0x3eb1 014398 hstore 4 ,core_gpio_pd0 +0x3eb2 014399 rtn +: 014401 mouse_before_hibernate: +0x3eb3 014402 enable user +0x3eb4 014403 hfetch 4 ,0x8138 +0x3eb5 014404 setflag user ,26 ,pdata +0x3eb6 014405 hstore 4 ,core_lpm_reg +0x3eb7 014406 call lpm_write_ctrl +0x3eb8 014407 call mouse_devce_led_off +0x3eb9 014408 call mouse_before_hibernate_wheel_gpio_set +0x3eba 014410 branch mouse_lpm_before_common +: 014414 mouse_process_lpm_before: +0x3ebb 014415 call mouse_lpm_before_common +0x3ebc 014416 fetch 1 ,mem_lpm_current_mult +0x3ebd 014417 nrtn blank +0x3ebe 014418 branch gpio_clr_wake +: 014420 mouse_lpm_before_common: +0x3ebf 014421 call mouse_wheel_check +0x3ec0 014422 arg mouse_spi1_clk_gpio ,temp +0x3ec1 014423 fetch mouse_flag_len ,mem_mouse_flag +0x3ec2 014424 isolate1 mouse_enable_spi2 ,pdata +0x3ec3 014425 call mouse_spi_clk_gpio ,true +0x3ec4 014426 call gpio_config_output +0x3ec5 014427 call twspi_disable +0x3ec6 014431 fetcht 1 ,mem_lbutton_gpio +0x3ec7 014432 call gpio_set_wake_by_current_state +0x3ec8 014433 fetcht 1 ,mem_rbutton_gpio +0x3ec9 014434 call gpio_set_wake_by_current_state +0x3eca 014435 fetcht 1 ,mem_mbutton_gpio +0x3ecb 014436 call gpio_set_wake_by_current_state +0x3ecc 014438 fetcht 1 ,mem_bk_button_gpio +0x3ecd 014439 call gpio_set_wake_by_current_state +0x3ece 014440 fetcht 1 ,mem_fw_button_gpio +0x3ecf 014441 call gpio_set_wake_by_current_state +0x3ed0 014442 fetcht 1 ,mem_dpi_button_gpio +0x3ed1 014443 call gpio_set_wake_by_current_state +0x3ed2 014444 fetcht 1 ,mem_config_select_device_button_gpio +0x3ed3 014445 call gpio_set_wake_by_current_state +0x3ed4 014446 fetcht 1 ,mem_whee_a_data_gpio +0x3ed5 014447 call gpio_set_wake_by_current_state +0x3ed6 014448 fetcht 1 ,mem_whee_b_data_gpio +0x3ed7 014449 call gpio_set_wake_by_current_state +0x3ed8 014450 fetcht 1 ,mem_whee_ta_data_gpio +0x3ed9 014451 call gpio_set_wake_by_current_state +0x3eda 014452 fetcht 1 ,mem_whee_tb_data_gpio +0x3edb 014453 call gpio_set_wake_by_current_state +0x3edc 014454 fetcht 1 ,mem_sensor_data_gpio +0x3edd 014455 branch gpio_set_wake +: 014459 mouse_spi_clk_gpio: +0x3ede 014460 arg mouse_spi2_clk_gpio ,temp +0x3edf 014461 rtn +: 014463 mouse_wheel_check: +0x3ee0 014464 bpatch patch1c_4 ,mem_patch1c +0x3ee1 014465 call mouse_t_wheel_scan +0x3ee2 014466 call mouse_wheel_scan +0x3ee3 014467 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3ee4 014468 fetcht 1 ,mem_wheel_tb_old_pinlevel +0x3ee5 014469 store 1 ,mem_wheel_tb_old_pinlevel +0x3ee6 014470 isub temp ,null +0x3ee7 014471 nbranch app_lpm_wake_auto_lock ,zero +0x3ee8 014472 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3ee9 014473 fetcht 1 ,mem_mwheel_b_old_pinlevel +0x3eea 014474 store 1 ,mem_mwheel_b_old_pinlevel +0x3eeb 014475 isub temp ,null +0x3eec 014476 nbranch app_lpm_wake_auto_lock ,zero +0x3eed 014477 rtn +: 014478 mouse_t_wheel_scan: +0x3eee 014479 fetch 1 ,mem_whee_ta_data_gpio +0x3eef 014480 rtneq gpio_disable +0x3ef0 014481 arg 0 ,rega +0x3ef1 014482 fetcht 1 ,mem_whee_ta_data_gpio +0x3ef2 014483 call gpio_get_bit +0x3ef3 014484 setflag true ,0 ,rega +0x3ef4 014485 fetcht 1 ,mem_whee_tb_data_gpio +0x3ef5 014486 call gpio_get_bit +0x3ef6 014487 setflag true ,1 ,rega +0x3ef7 014488 copy rega ,pdata +0x3ef8 014489 store 1 ,mem_wheel_tb_new_pinlevel +0x3ef9 014490 beq 0x01 ,mouse_t_wheel_scan_judge1 +0x3efa 014491 beq 0x02 ,mouse_t_wheel_scan_judge2 +0x3efb 014492 fetch 1 ,mem_wheel_tog +0x3efc 014493 bbit1 7 ,mouse_t_wheel_scan_judge3 +0x3efd 014494 rtn +: 014496 mouse_t_wheel_scan_judge1: +0x3efe 014497 fetch 1 ,mem_wheel_tb_old_pinlevel +0x3eff 014498 beq 0 ,mouse_t_wheel_scan_judge11 +0x3f00 014499 beq 3 ,mouse_t_wheel_scan_judge12 +0x3f01 014500 rtn +: 014501 mouse_t_wheel_scan_judge2: +0x3f02 014502 fetch 1 ,mem_wheel_tb_old_pinlevel +0x3f03 014503 beq 0 ,mouse_t_wheel_scan_judge21 +0x3f04 014504 beq 3 ,mouse_t_wheel_scan_judge22 +0x3f05 014505 rtn +: 014506 mouse_t_wheel_scan_judge11: +0x3f06 014507 jam 0x82 ,mem_wheel_tog +0x3f07 014508 rtn +: 014509 mouse_t_wheel_scan_judge12: +0x3f08 014510 jam 0x81 ,mem_wheel_tog +0x3f09 014511 rtn +: 014512 mouse_t_wheel_scan_judge21: +0x3f0a 014513 jam 0x80 ,mem_wheel_tog +0x3f0b 014514 rtn +: 014515 mouse_t_wheel_scan_judge22: +0x3f0c 014516 jam 0x83 ,mem_wheel_tog +0x3f0d 014517 rtn +: 014518 mouse_t_wheel_scan_judge3: +0x3f0e 014519 fetch 1 ,mem_wheel_tog +0x3f0f 014520 set0 7 ,pdata +0x3f10 014521 store 1 ,mem_wheel_tog +0x3f11 014522 beq 0 ,mouse_t_wheel_scan_judge30 +0x3f12 014523 beq 1 ,mouse_t_wheel_scan_judge31 +0x3f13 014524 beq 2 ,mouse_t_wheel_scan_judge32 +0x3f14 014525 beq 3 ,mouse_t_wheel_scan_judge33 +0x3f15 014526 rtn +: 014527 mouse_t_wheel_scan_judge30: +0x3f16 014528 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f17 014529 beq 3 ,mouse_wheel_t_forward +0x3f18 014530 rtn +: 014531 mouse_t_wheel_scan_judge31: +0x3f19 014532 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f1a 014533 beq 0 ,mouse_wheel_t_forward +0x3f1b 014534 rtn +: 014535 mouse_t_wheel_scan_judge32: +0x3f1c 014536 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f1d 014537 beq 3 ,mouse_wheel_t_back +0x3f1e 014538 rtn +: 014539 mouse_t_wheel_scan_judge33: +0x3f1f 014540 fetch 1 ,mem_wheel_tb_new_pinlevel +0x3f20 014541 beq 0 ,mouse_wheel_t_back +0x3f21 014542 rtn +: 014543 mouse_wheel_t_forward: +0x3f22 014544 fetch 1 ,mem_mouse_tz_data_count1 +0x3f23 014545 increase 1 ,pdata +0x3f24 014546 store 1 ,mem_mouse_tz_data_count1 +0x3f25 014547 sub pdata ,1 ,null +0x3f26 014548 rtn positive +0x3f27 014549 jam 0 ,mem_mouse_tz_data_count1 +0x3f28 014550 fetch 1 ,mem_mouse_tz_data +0x3f29 014551 increase 1 ,pdata +0x3f2a 014552 store 1 ,mem_mouse_tz_data +0x3f2b 014553 rtn +: 014554 mouse_wheel_t_back: +0x3f2c 014555 fetch 1 ,mem_mouse_tz_data_count +0x3f2d 014556 increase 1 ,pdata +0x3f2e 014557 store 1 ,mem_mouse_tz_data_count +0x3f2f 014558 sub pdata ,1 ,null +0x3f30 014559 rtn positive +0x3f31 014560 jam 0 ,mem_mouse_tz_data_count +0x3f32 014561 fetch 1 ,mem_mouse_tz_data +0x3f33 014562 increase -1 ,pdata +0x3f34 014563 store 1 ,mem_mouse_tz_data +0x3f35 014564 rtn +: 014567 mouse_wheel_scan: +0x3f36 014568 fetch 1 ,mem_whee_a_data_gpio +0x3f37 014569 rtneq gpio_disable +0x3f38 014570 arg 0 ,rega +0x3f39 014571 fetcht 1 ,mem_whee_a_data_gpio +0x3f3a 014572 call gpio_get_bit +0x3f3b 014573 setflag true ,0 ,rega +0x3f3c 014574 fetcht 1 ,mem_whee_b_data_gpio +0x3f3d 014575 call gpio_get_bit +0x3f3e 014576 setflag true ,1 ,rega +0x3f3f 014577 copy rega ,pdata +0x3f40 014578 store 1 ,mem_mwheel_b_new_pinlevel +0x3f41 014579 beq 0x01 ,mouse_wheel_scan_judge1 +0x3f42 014580 beq 0x02 ,mouse_wheel_scan_judge2 +0x3f43 014581 fetch 1 ,mem_mwheel_tog +0x3f44 014582 bbit1 7 ,mouse_wheel_scan_judge3 +0x3f45 014583 rtn +: 014585 mouse_wheel_scan_judge1: +0x3f46 014586 fetch 1 ,mem_mwheel_b_old_pinlevel +0x3f47 014587 beq 0 ,mouse_wheel_scan_judge11 +0x3f48 014588 beq 3 ,mouse_wheel_scan_judge12 +0x3f49 014589 rtn +: 014590 mouse_wheel_scan_judge2: +0x3f4a 014591 fetch 1 ,mem_mwheel_b_old_pinlevel +0x3f4b 014592 beq 0 ,mouse_wheel_scan_judge21 +0x3f4c 014593 beq 3 ,mouse_wheel_scan_judge22 +0x3f4d 014594 rtn +: 014595 mouse_wheel_scan_judge11: +0x3f4e 014596 jam 0x82 ,mem_mwheel_tog +0x3f4f 014597 rtn +: 014598 mouse_wheel_scan_judge12: +0x3f50 014599 jam 0x81 ,mem_mwheel_tog +0x3f51 014600 rtn +: 014601 mouse_wheel_scan_judge21: +0x3f52 014602 jam 0x80 ,mem_mwheel_tog +0x3f53 014603 rtn +: 014604 mouse_wheel_scan_judge22: +0x3f54 014605 jam 0x83 ,mem_mwheel_tog +0x3f55 014606 rtn +: 014607 mouse_wheel_scan_judge3: +0x3f56 014608 fetch 1 ,mem_mwheel_tog +0x3f57 014609 set0 7 ,pdata +0x3f58 014610 store 1 ,mem_mwheel_tog +0x3f59 014611 beq 0 ,mouse_wheel_scan_judge30 +0x3f5a 014612 beq 1 ,mouse_wheel_scan_judge31 +0x3f5b 014613 beq 2 ,mouse_wheel_scan_judge32 +0x3f5c 014614 beq 3 ,mouse_wheel_scan_judge33 +0x3f5d 014615 rtn +: 014616 mouse_wheel_scan_judge30: +0x3f5e 014617 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f5f 014618 beq 3 ,mouse_wheel_forward +0x3f60 014619 rtn +: 014620 mouse_wheel_scan_judge31: +0x3f61 014621 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f62 014622 beq 0 ,mouse_wheel_forward +0x3f63 014623 rtn +: 014624 mouse_wheel_scan_judge32: +0x3f64 014625 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f65 014626 beq 3 ,mouse_wheel_back +0x3f66 014627 rtn +: 014628 mouse_wheel_scan_judge33: +0x3f67 014629 fetch 1 ,mem_mwheel_b_new_pinlevel +0x3f68 014630 beq 0 ,mouse_wheel_back +0x3f69 014631 rtn +: 014632 mouse_wheel_forward: +0x3f6a 014633 jam 0 ,mem_mouse_z_data_count1 +0x3f6b 014634 fetch 1 ,mem_mouse_z_data +0x3f6c 014635 increase 1 ,pdata +0x3f6d 014636 store 1 ,mem_mouse_z_data +0x3f6e 014637 rtn +: 014638 mouse_wheel_back: +0x3f6f 014639 jam 0 ,mem_mouse_z_data_count +0x3f70 014640 fetch 1 ,mem_mouse_z_data +0x3f71 014641 increase -1 ,pdata +0x3f72 014642 store 1 ,mem_mouse_z_data +0x3f73 014643 rtn +: 014646 mouse_hid_connected: +0x3f74 014647 setarg hid_handshake_timeout +0x3f75 014648 store 1 ,mem_hid_handshake_timer_count +0x3f76 014649 rtn +: 014651 mouse_send_process: +0x3f77 014652 fetch 1 ,mem_app_handshake_flag +0x3f78 014653 rtn blank +0x3f79 014654 call l2cap_malloc_is_fifo_nearly_full +0x3f7a 014655 nrtn blank +0x3f7b 014656 fetch mouse_flag_len ,mem_mouse_flag +0x3f7c 014657 bbit1 mosue_24g_pairing_flag ,mouse_send_empty_data +0x3f7d 014658 bbit1 mouse_select_device_flag ,mouse_send_empty_data +0x3f7e 014659 bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +0x3f7f 014660 call mouse_motion +0x3f80 014661 nrtn user +: 014662 mouse_send_data: +0x3f81 014663 arg 9 ,rega +0x3f82 014664 call hid_malloc_tx_buff +0x3f83 014665 fetch 2 ,mem_hid_int_remote_cid +0x3f84 014666 istore 2 ,contw +0x3f85 014667 setarg 0x02a1 +0x3f86 014668 istore 2 ,contw +0x3f87 014669 fetch 7 ,mem_mouse_key +0x3f88 014670 istore 7 ,contw +0x3f89 014671 rtn +: 014674 mouse_send_empty_data: +0x3f8a 014675 setarg 0 +0x3f8b 014676 store 7 ,mem_mouse_key +0x3f8c 014677 branch mouse_send_data +: 014680 mouse_no_data_timer_init: +0x3f8d 014681 fetch 2 ,mem_mouse_no_data_timeout +0x3f8e 014682 store 2 ,mem_mouse_no_data_timer +0x3f8f 014683 rtn +: 014686 mouse_fill_data_le: +0x3f90 014687 bpatch patch1c_5 ,mem_patch1c +0x3f91 014688 arg 7 ,rega +0x3f92 014689 fetcht 2 ,mem_le_notify_handle +0x3f93 014690 call le_att_malloc_tx_notify +0x3f94 014691 fetch 7 ,mem_mouse_key +0x3f95 014692 istore 7 ,contw +0x3f96 014693 rtn +: 014695 mouse_motion: +0x3f97 014696 bpatch patch1c_6 ,mem_patch1c +0x3f98 014697 disable user +0x3f99 014698 setarg 0 +0x3f9a 014699 store 6 ,mem_mouse_x +0x3f9b 014700 call mouse_cheak_sensor_data +0x3f9c 014701 call mouse_zwheel +0x3f9d 014702 call mouse_t_zwheel +0x3f9e 014703 call mouse_key +0x3f9f 014704 nrtn user +0x3fa0 014705 call mouse_no_data_timer_init +0x3fa1 014706 arg mouse_statue_up_flag ,queue +0x3fa2 014707 branch mouse_enable_function_flag +: 014709 motion_6clk_direction_dispose: +0x3fa3 014710 fetch 2 ,mem_mouse_x +0x3fa4 014711 sub pdata ,0 ,pdata +0x3fa5 014712 store 2 ,mem_mouse_x +0x3fa6 014713 branch enable_user +: 014714 motion_12clk_direction_dispose: +0x3fa7 014715 fetch 2 ,mem_mouse_y +0x3fa8 014716 sub pdata ,0 ,pdata +0x3fa9 014717 store 2 ,mem_mouse_y +0x3faa 014718 branch enable_user +: 014719 motion_9clk_direction_dispose: +0x3fab 014720 fetch 2 ,mem_mouse_y +0x3fac 014721 sub pdata ,0 ,pdata +0x3fad 014722 store 2 ,mem_mouse_y +0x3fae 014723 fetch 2 ,mem_mouse_x +0x3faf 014724 sub pdata ,0 ,pdata +0x3fb0 014725 store 2 ,mem_mouse_x +0x3fb1 014726 call mouse_sensor_data_swap_places +0x3fb2 014727 branch enable_user +: 014728 motion_3clk_direction_dispose: +0x3fb3 014729 call mouse_sensor_data_swap_places +0x3fb4 014730 branch enable_user +: 014731 mouse_cheak_sensor_data: +0x3fb5 014732 fetch 1 ,mem_spi_write_flash_sm +0x3fb6 014733 rtnne flash_sm_no_buys +0x3fb7 014734 fetch 1 ,mem_config_sensor_type +0x3fb8 014735 beq p3205 ,mouse_p32xx_sensor_motion +0x3fb9 014736 beq p3065 ,mouse_p32xx_sensor_motion +0x3fba 014737 beq ka8 ,mouse_p32xx_sensor_motion +0x3fbb 014738 beq p3204 ,mouse_p32xx_sensor_motion +0x3fbc 014739 beq p3212 ,mouse_p3212_sensor_motion +0x3fbd 014740 beq p3610 ,mouse_p3610_sensor_motion +0x3fbe 014741 beq p3065_xy ,mouse_p32xx_sensor_motion +0x3fbf 014742 branch mouse_p32xx_sensor_motion +: 014744 mouse_clear_sensor_data: +0x3fc0 014745 fetch 1 ,mem_mouse_move_flag +0x3fc1 014746 call mouse_read_sensor_common ,blank +0x3fc2 014747 jam 1 ,mem_mouse_move_flag +0x3fc3 014748 rtn +: 014751 mouse_p3212_sensor_motion: +0x3fc4 014752 call mouse_clear_sensor_data +0x3fc5 014753 fetcht 1 ,mem_sensor_data_gpio +0x3fc6 014754 call gpio_get_bit +0x3fc7 014755 nrtn true +: 014756 mouse_p3212_sensor_motion_next: +0x3fc8 014757 setarg pan_reg_pid_l +0x3fc9 014758 call twspi_read +0x3fca 014759 bne p32xx_id1 ,mouse_twspi_reset +0x3fcb 014760 setarg pan_reg_motion_staus +0x3fcc 014761 call twspi_read +0x3fcd 014762 rtnbit0 7 +0x3fce 014763 call mouse_read_sensor_common +0x3fcf 014764 call mouse_read_3212sensor_xy_high +0x3fd0 014765 store 1 ,mem_mouse_xy_h +0x3fd1 014766 rshift4 pdata ,pdata +0x3fd2 014767 call extsign_bit3 +0x3fd3 014768 store 1 ,mem_mouse_x + 1 +0x3fd4 014769 fetch 1 ,mem_mouse_xy_h +0x3fd5 014770 and pdata ,0x0f ,pdata +0x3fd6 014771 call extsign_bit3 +0x3fd7 014772 store 1 ,mem_mouse_y + 1 +0x3fd8 014773 fetch 1 ,mem_config_sensor_angle +0x3fd9 014774 beq mouse_6clk_angle ,motion_6clk_direction_dispose +0x3fda 014775 beq mouse_9clk_angle ,motion_9clk_direction_dispose +0x3fdb 014776 beq mouse_12clk_angle ,motion_12clk_direction_dispose +0x3fdc 014777 beq mouse_3clk_angle ,motion_3clk_direction_dispose +0x3fdd 014778 rtn +: 014780 mouse_read_3212sensor_xy_high: +0x3fde 014781 setarg 0x12 +0x3fdf 014782 branch twspi_read +: 014784 mouse_p3065_judge: +0x3fe0 014785 beq p3065_id1 ,mouse_p32xx_sensor_motion_1 +0x3fe1 014786 branch mouse_twspi_reset +: 014788 mouse_p32xx_sensor_motion: +0x3fe2 014789 call mouse_clear_sensor_data +0x3fe3 014790 disable user +0x3fe4 014791 fetcht 1 ,mem_sensor_data_gpio +0x3fe5 014792 call gpio_get_bit +0x3fe6 014793 nrtn true +: 014794 mouse_p32xx_sensor_motion_2: +0x3fe7 014795 setarg pan_reg_pid_l +0x3fe8 014796 call twspi_read +0x3fe9 014797 bne p32xx_id1 ,mouse_p3065_judge +: 014798 mouse_p32xx_sensor_motion_1: +0x3fea 014799 setarg pan_reg_motion_staus +0x3feb 014800 call twspi_read +0x3fec 014801 rtnbit0 7 +0x3fed 014802 call mouse_read_sensor_common +0x3fee 014803 fetch 1 ,mem_mouse_x +0x3fef 014804 call extsign +0x3ff0 014805 store 2 ,mem_mouse_x +0x3ff1 014806 fetch 1 ,mem_mouse_y +0x3ff2 014807 call extsign +0x3ff3 014808 store 2 ,mem_mouse_y +0x3ff4 014809 fetch 1 ,mem_config_sensor_angle +0x3ff5 014810 beq mouse_6clk_angle ,motion32xx_6clk_direction_selection +0x3ff6 014811 beq mouse_9clk_angle ,motion32xx_9clk_direction_selection +0x3ff7 014812 beq mouse_12clk_angle ,motion32xx_12clk_direction_selection +0x3ff8 014813 beq mouse_3clk_angle ,motion32xx_3clk_direction_selection +0x3ff9 014814 rtn +: 014816 motion32xx_6clk_direction_selection: +0x3ffa 014817 call motion_6clk_direction_dispose +0x3ffb 014818 branch mouse_sensor_sdio_low +: 014819 motion32xx_9clk_direction_selection: +0x3ffc 014820 call motion_9clk_direction_dispose +0x3ffd 014821 branch mouse_sensor_sdio_low +: 014822 motion32xx_12clk_direction_selection: +0x3ffe 014823 call motion_12clk_direction_dispose +0x3fff 014824 branch mouse_sensor_sdio_low +: 014825 motion32xx_3clk_direction_selection: +0x4000 014826 call motion_3clk_direction_dispose +0x4001 014827 branch mouse_sensor_sdio_low +: 014829 mouse_sensor_data_swap_places: +0x4002 014830 fetch 2 ,mem_mouse_y +0x4003 014831 fetcht 2 ,mem_mouse_x +0x4004 014832 store 2 ,mem_mouse_x +0x4005 014833 storet 2 ,mem_mouse_y +0x4006 014834 rtn +: 014836 mouse_p3610sensor_read: +0x4007 014837 call spi_ncs_enable +0x4008 014838 nop 100 +0x4009 014839 copy regb ,pdata +0x400a 014840 call twspi_read +0x400b 014841 copy pdata ,regb +0x400c 014842 call spi_ncs_disable +0x400d 014843 nop 100 +0x400e 014844 copy regb ,pdata +0x400f 014845 rtn +: 014846 mouse_p3610_sensor_motion: +0x4010 014847 disable user +0x4011 014848 fetcht 1 ,mem_sensor_data_gpio +0x4012 014849 call gpio_get_bit +0x4013 014850 nrtn true +0x4014 014851 arg pan_reg_motion_staus ,regb +0x4015 014852 call mouse_p3610sensor_read +0x4016 014853 rtnbit0 7 +0x4017 014854 arg pan_reg_pid_l ,regb +0x4018 014855 call mouse_p3610sensor_read +0x4019 014856 store 1 ,mem_sensor_id1 +0x401a 014857 bne p3610_id1 ,mouse_init_3610sensor_reset +0x401b 014858 fetch 1 ,mem_mouse_move_flag +0x401c 014859 call mouse_read_sensor3610_data ,blank +0x401d 014860 jam 1 ,mem_mouse_move_flag +0x401e 014861 call mouse_read_sensor3610_data +0x401f 014862 fetch 1 ,mem_mouse_xy_h +0x4020 014863 rshift4 pdata ,pdata +0x4021 014864 call extsign_bit3 +0x4022 014865 store 1 ,mem_mouse_x + 1 +0x4023 014866 fetch 1 ,mem_mouse_xy_h +0x4024 014867 and pdata ,0x0f ,pdata +0x4025 014868 call extsign_bit3 +0x4026 014869 store 1 ,mem_mouse_y + 1 +0x4027 014870 fetch 1 ,mem_config_sensor_angle +0x4028 014871 beq 0 ,motion3610_6clk_direction_selection +0x4029 014872 beq 1 ,motion3610_9clk_direction_selection +0x402a 014873 beq 2 ,motion3610_12clk_direction_selection +0x402b 014874 beq 3 ,motion3610_3clk_direction_selection +0x402c 014875 rtn +: 014877 mouse_3610_smart_select: +0x402d 014878 fetch 1 ,mem_sensor_smart_flag +0x402e 014879 beq p3610_smart_enable ,mouse_3610_smart_disable +0x402f 014880 beq p3610_smart_disable ,mouse_3610_smart_enable +0x4030 014881 rtn +: 014884 motion3610_6clk_direction_selection: +0x4031 014885 call motion_6clk_direction_dispose +0x4032 014886 branch mouse_3610_smart_select +: 014888 motion3610_12clk_direction_selection: +0x4033 014889 call motion_12clk_direction_dispose +0x4034 014890 branch mouse_3610_smart_select +: 014892 motion3610_9clk_direction_selection: +0x4035 014893 call motion_9clk_direction_dispose +0x4036 014894 branch mouse_3610_smart_select +: 014896 motion3610_3clk_direction_selection: +0x4037 014897 call motion_3clk_direction_dispose +0x4038 014898 branch mouse_3610_smart_select +: 014900 mouse_read_sensor3610_data: +0x4039 014901 call spi_ncs_enable +0x403a 014902 call mouse_read_sensor_common +0x403b 014903 arg 5 ,pdata +0x403c 014904 call twspi_read +0x403d 014905 store 1 ,mem_mouse_xy_h +0x403e 014906 arg 7 ,pdata +0x403f 014907 call twspi_read +0x4040 014908 store 1 ,mem_sensor_shutter_hi +0x4041 014909 arg 8 ,pdata +0x4042 014910 call twspi_read +0x4043 014911 store 1 ,mem_sensor_shutter_lo +0x4044 014912 branch spi_ncs_disable +: 014915 mouse_3610_smart_enable: +0x4045 014916 fetch 1 ,mem_sensor_shutter_hi +0x4046 014917 rtnne 0 +0x4047 014918 fetch 1 ,mem_sensor_shutter_lo +0x4048 014919 sub pdata ,45 ,null +0x4049 014920 rtn positive +0x404a 014921 jam p3610_smart_enable ,mem_sensor_smart_flag +0x404b 014922 setarg 0xba41 +0x404c 014923 call sensor_write +0x404d 014924 setarg 0x0032 +0x404e 014925 call sensor_write +0x404f 014926 setarg 0xb541 +0x4050 014927 branch sensor_write +: 014928 mouse_3610_smart_disable: +0x4051 014929 fetch 1 ,mem_sensor_shutter_hi +0x4052 014930 rtnne 0 +0x4053 014931 fetch 1 ,mem_sensor_shutter_lo +0x4054 014932 sub pdata ,45 ,null +0x4055 014933 nrtn positive +0x4056 014934 jam p3610_smart_disable ,mem_sensor_smart_flag +0x4057 014935 setarg 0xba41 +0x4058 014936 call sensor_write +0x4059 014937 setarg 0x8032 +0x405a 014938 call sensor_write +0x405b 014939 setarg 0xb541 +0x405c 014940 branch sensor_write +: 014944 mouse_read_sensor_common: +0x405d 014945 arg pan_reg_delta_x ,pdata +0x405e 014946 call twspi_read +0x405f 014947 store 2 ,mem_mouse_x +0x4060 014948 arg pan_reg_delta_y ,pdata +0x4061 014949 call twspi_read +0x4062 014950 store 2 ,mem_mouse_y +0x4063 014951 rtn +: 014953 mouse_set_qdecoder_x: +0x4064 014954 arg mouse_default_xa_gpio ,temp +0x4065 014955 call gpio_config_input +0x4066 014956 arg mouse_default_xa_gpio ,temp +0x4067 014957 call gpio_get_bit +0x4068 014958 rtn true +0x4069 014959 hfetch 1 ,core_qdec_cntx +0x406a 014960 set1 4 ,pdata +0x406b 014961 hstore 1 ,core_qdec_cntx +0x406c 014962 rtn +: 014964 mouse_hardware_zwheel: +0x406d 014965 fetcht 1 ,mem_mouse_z_data +0x406e 014966 hfetch 1 ,core_qdec_cntx +0x406f 014967 iadd temp ,pdata +0x4070 014968 rtn blank +0x4071 014969 store 1 ,mem_mouse_z +0x4072 014970 jam 0 ,mem_mouse_z_data +0x4073 014971 branch enable_user +: 014972 mouse_hardware_zwheel_beforelpm: +0x4074 014973 fetcht 1 ,mem_mouse_z_data +0x4075 014974 hfetch 1 ,core_qdec_cntx +0x4076 014975 iadd temp ,pdata +0x4077 014976 store 1 ,mem_mouse_z_data +0x4078 014977 rtn +: 014978 mouse_zwheel: +0x4079 014979 fetch 1 ,mem_mouse_z_data +0x407a 014980 rtn blank +0x407b 014981 store 1 ,mem_mouse_z +0x407c 014982 jam 0 ,mem_mouse_z_data +0x407d 014983 branch enable_user +: 014985 mouse_t_zwheel: +0x407e 014986 fetch 1 ,mem_mouse_tz_data +0x407f 014987 rtn blank +0x4080 014988 store 1 ,mem_mouse_tz +0x4081 014989 jam 0 ,mem_mouse_tz_data +0x4082 014990 branch enable_user +: 014992 mouse_check_key_gpio: +0x4083 014993 arg 0 ,rega +0x4084 014994 fetcht 1 ,mem_lbutton_gpio +0x4085 014995 call gpio_get_bit +0x4086 014996 setflag true ,0 ,rega +0x4087 014997 fetcht 1 ,mem_rbutton_gpio +0x4088 014998 call gpio_get_bit +0x4089 014999 setflag true ,1 ,rega +0x408a 015000 fetcht 1 ,mem_mbutton_gpio +0x408b 015001 call gpio_get_bit +0x408c 015002 setflag true ,2 ,rega +0x408d 015003 call mouse_check_s_key_gpio +: 015004 mouse_check_key_gpio_output: +0x408e 015005 copy rega ,pdata +0x408f 015006 rtn +: 015007 mouse_check_s_key_gpio: +0x4090 015008 fetch 1 ,mem_bk_button_gpio +0x4091 015009 rtneq gpio_disable +0x4092 015010 fetcht 1 ,mem_bk_button_gpio +0x4093 015011 call gpio_get_bit +0x4094 015012 setflag true ,3 ,rega +0x4095 015013 fetcht 1 ,mem_fw_button_gpio +0x4096 015014 call gpio_get_bit +0x4097 015015 setflag true ,4 ,rega +0x4098 015016 rtn +: 015018 mouse_key: +0x4099 015019 call mouse_check_key_gpio +0x409a 015020 call mouse_set_mult +0x409b 015021 call mouse_24g_key +0x409c 015022 copy rega ,pdata +0x409d 015023 fetcht 1 ,mem_mouse_key +0x409e 015024 store 1 ,mem_mouse_key +0x409f 015025 ixor temp ,pdata +0x40a0 015026 sub pdata ,0 ,null +0x40a1 015027 rtn zero +0x40a2 015028 branch enable_user +: 015030 mouse_24g_key: +0x40a3 015031 rtnmark0 mark_24g +0x40a4 015032 copy rega ,pdata +0x40a5 015033 rtn blank +0x40a6 015034 store 1 ,mem_mouse_key +0x40a7 015035 branch enable_user +: 015038 mouse_set_mult: +0x40a8 015039 fetch 2 ,mem_ui_state_map +0x40a9 015040 bbit1 ui_state_ble_connected ,mouse_set_ble_mult +0x40aa 015041 fetch 2 ,mem_ui_state_map +0x40ab 015042 bbit1 ui_state_bt_connected ,mouse_set_bt_mult +0x40ac 015043 rtn +: 015044 mouse_set_ble_mult: +0x40ad 015045 copy rega ,pdata +0x40ae 015046 nbranch le_set_config_short_mult ,blank +0x40af 015047 branch le_clr_config_short_mult +: 015048 mouse_set_bt_mult: +0x40b0 015049 copy rega ,pdata +0x40b1 015050 nbranch classic_bt_set_mult_short_flag ,blank +0x40b2 015051 branch classic_bt_clr_mult_short_flag +: 015054 mouse_sensor_sdio_low: +0x40b3 015055 bpatch patch1c_7 ,mem_patch1c +0x40b4 015056 arg mouse_spi1_sdio_gpio ,temp +0x40b5 015057 fetch mouse_flag_len ,mem_mouse_flag +0x40b6 015058 isolate1 mouse_enable_spi2 ,pdata +0x40b7 015059 call mouse_sensor_sdio_low2 ,true +0x40b8 015060 call gpio_get_bit +0x40b9 015061 rtn true +0x40ba 015062 setarg 0x0a +0x40bb 015063 call twspi_read +0x40bc 015064 nop 1000 +0x40bd 015065 branch mouse_sensor_sdio_low +: 015066 mouse_sensor_sdio_low2: +0x40be 015067 arg mouse_spi2_sdio_gpio ,temp +0x40bf 015068 rtn +: 015070 mouse_spi_sdio_gpio_pollup: +0x40c0 015071 fetch mouse_flag_len ,mem_mouse_flag +0x40c1 015072 bbit1 mouse_enable_spi2 ,mouse_spi2_sdio_gpio_pollup +: 015073 mouse_spi1_sdio_gpio_pollup: +0x40c2 015074 arg mouse_spi1_sdio_gpio ,temp +0x40c3 015075 branch gpio_config_input_without_wake +: 015076 mouse_spi2_sdio_gpio_pollup: +0x40c4 015077 arg mouse_spi2_sdio_gpio ,temp +0x40c5 015078 branch gpio_config_input_without_wake +: 015081 mouse_init_sunt: +0x40c6 015082 call mouse_spi_init +0x40c7 015083 rtn wake +0x40c8 015084 call mouse_spi_sdio_gpio_pollup +0x40c9 015085 fetch 1 ,mem_config_sensor_type +0x40ca 015086 beq p3610 ,mouse_init_3610sensor +: 015087 mouse_init_sensor: +0x40cb 015088 call mouse_read_sensor_id +0x40cc 015089 beq p32xx_id1 ,mouse_init_p32xx_id2_judge +0x40cd 015090 beq p3065_id1 ,mouse_p3065_init_param +0x40ce 015091 call mouse_twspi_reset +0x40cf 015092 nop 1000 +0x40d0 015093 branch mouse_init_sensor +: 015094 mouse_twspi_reset: +0x40d1 015095 bpatch patch1d_0 ,mem_patch1d +0x40d2 015096 fetch mouse_flag_len ,mem_mouse_flag +0x40d3 015097 bbit1 mouse_enable_spi2 ,twspi_reset2 +0x40d4 015098 branch twspi_reset +: 015100 mouse_init_3610sensor: +0x40d5 015101 call mouse_read_sensor_id +0x40d6 015102 beq p3610_id1 ,mouse_init_p3610 +0x40d7 015103 call mouse_init_3610sensor_reset +0x40d8 015104 branch mouse_init_3610sensor +: 015106 mouse_read_sensor_id: +0x40d9 015107 setarg pan_reg_pid_h +0x40da 015108 call twspi_read +0x40db 015109 store 1 ,mem_sensor_id2 +0x40dc 015110 setarg pan_reg_pid_l +0x40dd 015111 call twspi_read +0x40de 015112 store 1 ,mem_sensor_id1 +0x40df 015113 rtn +: 015114 mouse_init_p32xx_id2_judge: +0x40e0 015115 fetch 1 ,mem_sensor_id2 +0x40e1 015116 beq p3205_tj3t_id2 ,mouse_3205_3t_init_param +0x40e2 015117 beq p3204_tj3l_id2 ,mouse_3204_3l_init_param +0x40e3 015118 beq p3212_id2 ,mouse_3212_init_param +0x40e4 015119 beq pka8_id2 ,mouse_ka8_init_param +0x40e5 015120 rtn +: 015121 mouse_ka8_init_param: +0x40e6 015122 jam ka8 ,mem_config_sensor_type +0x40e7 015123 rtn +: 015124 mouse_p3065xy_init_param: +0x40e8 015125 jam p3065_xy ,mem_config_sensor_type +0x40e9 015126 rtn +: 015127 mouse_p3065_init_param: +0x40ea 015128 fetch 1 ,mem_sensor_id2 +0x40eb 015129 beq p3065_xy_id2 ,mouse_p3065xy_init_param +0x40ec 015130 jam p3065 ,mem_config_sensor_type +0x40ed 015131 rtn +: 015132 mouse_3212_init_param: +0x40ee 015133 jam p3212 ,mem_config_sensor_type +0x40ef 015134 call mouse_sensor_disable_wp +0x40f0 015135 setarg 0x3426 +0x40f1 015136 call twspi_write +0x40f2 015137 setarg 0x0419 +0x40f3 015138 call twspi_write +: 015139 mouse_sensor_enable_wp: +0x40f4 015140 setarg 0x0009 +0x40f5 015141 branch twspi_write +: 015142 mouse_sensor_disable_wp: +0x40f6 015143 setarg 0x5a09 +0x40f7 015144 branch twspi_write +: 015146 mouse_3204_3l_init_param: +0x40f8 015147 jam p3204 ,mem_config_sensor_type +0x40f9 015148 call mouse_sensor_disable_wp +0x40fa 015149 setarg 0x0f0d +0x40fb 015150 call twspi_write +0x40fc 015151 setarg 0xe31d +0x40fd 015152 call twspi_write +0x40fe 015153 setarg 0xd27d +0x40ff 015154 call twspi_write +0x4100 015155 call mouse_32xx_init_param +0x4101 015156 branch mouse_32xx_init_param_1 +: 015158 mouse_32xx_init_param: +0x4102 015159 setarg 0x351b +0x4103 015160 call twspi_write +0x4104 015161 setarg 0xb428 +0x4105 015162 call twspi_write +0x4106 015163 setarg 0x4629 +0x4107 015164 call twspi_write +0x4108 015165 setarg 0x962a +0x4109 015166 call twspi_write +0x410a 015167 setarg 0x8c2b +0x410b 015168 call twspi_write +0x410c 015169 setarg 0x6e2c +0x410d 015170 call twspi_write +0x410e 015171 setarg 0x642d +0x410f 015172 call twspi_write +0x4110 015173 setarg 0x5f38 +0x4111 015174 call twspi_write +0x4112 015175 setarg 0x0f39 +0x4113 015176 call twspi_write +0x4114 015177 setarg 0x323a +0x4115 015178 call twspi_write +0x4116 015179 setarg 0x473b +0x4117 015180 call twspi_write +0x4118 015181 setarg 0x1042 +0x4119 015182 branch twspi_write +: 015183 mouse_32xx_init_param_1: +0x411a 015184 setarg 0x2e54 +0x411b 015185 call twspi_write +0x411c 015186 setarg 0xf255 +0x411d 015187 call twspi_write +0x411e 015188 setarg 0xf461 +0x411f 015189 call twspi_write +0x4120 015190 setarg 0x7063 +0x4121 015191 call twspi_write +0x4122 015192 setarg 0x5275 +0x4123 015193 call twspi_write +0x4124 015194 setarg 0x4176 +0x4125 015195 call twspi_write +0x4126 015196 setarg 0xed77 +0x4127 015197 call twspi_write +0x4128 015198 setarg 0x2378 +0x4129 015199 call twspi_write +0x412a 015200 setarg 0x4679 +0x412b 015201 call twspi_write +0x412c 015202 setarg 0xe57a +0x412d 015203 call twspi_write +0x412e 015204 setarg 0x487c +0x412f 015205 call twspi_write +0x4130 015206 setarg 0x777e +0x4131 015207 call twspi_write +0x4132 015208 setarg 0x017f +0x4133 015209 call twspi_write +0x4134 015210 setarg 0x000b +0x4135 015211 call twspi_write +0x4136 015212 setarg 0x007f +0x4137 015213 call twspi_write +0x4138 015214 branch mouse_sensor_enable_wp +: 015217 mouse_3205_3t_init_param: +0x4139 015218 jam p3205 ,mem_config_sensor_type +0x413a 015219 call mouse_sensor_disable_wp +0x413b 015220 setarg 0x100d +0x413c 015221 call twspi_write +0x413d 015222 setarg 0xed1d +0x413e 015223 call twspi_write +0x413f 015224 setarg 0x807d +0x4140 015225 call twspi_write +0x4141 015226 call mouse_32xx_init_param +0x4142 015227 setarg 0x0943 +0x4143 015228 call twspi_write +0x4144 015229 branch mouse_32xx_init_param_1 +: 015232 mouse_init_3610sensor_reset: +0x4145 015233 fetcht 1 ,mem_sensor_reset_gpio +0x4146 015234 call gpio_out_active +0x4147 015235 call delay_10ms +0x4148 015236 fetcht 1 ,mem_sensor_reset_gpio +0x4149 015237 call gpio_out_inactive +0x414a 015238 branch delay_10ms +: 015240 mouse_init_p3610: +0x414b 015241 jam p3610 ,mem_config_sensor_type +0x414c 015242 setarg 0xba41 +0x414d 015243 call sensor_write +0x414e 015244 setarg 0x0d11 +0x414f 015245 call sensor_write +0x4150 015246 setarg 0x041b +0x4151 015247 call sensor_write +0x4152 015248 setarg 0x041c +0x4153 015249 call sensor_write +0x4154 015250 setarg 0x0f1d +0x4155 015251 call sensor_write +0x4156 015252 setarg 0x0032 +0x4157 015253 call sensor_write +0x4158 015254 setarg 0xb541 +0x4159 015255 branch sensor_write +: 015259 mouse_set_sensor_reg: +0x415a 015260 setarg 0xba41 +0x415b 015261 call sensor_write +0x415c 015262 nop 4000 +0x415d 015263 setarg 0xff7f +0x415e 015264 call sensor_write +0x415f 015265 copy rega ,pdata +0x4160 015266 call sensor_write +0x4161 015267 setarg 0x007f +0x4162 015268 call sensor_write +0x4163 015269 setarg 0xb541 +0x4164 015270 branch sensor_write +: 015272 extsign: +0x4165 015273 rtnbit0 7 +0x4166 015274 arg 0xff00 ,temp +0x4167 015275 ior temp ,pdata +0x4168 015276 rtn +: 015278 extsign_bit3: +0x4169 015279 rtnbit0 3 +0x416a 015280 arg 0xf0 ,temp +0x416b 015281 ior temp ,pdata +0x416c 015282 rtn +: 015285 mouse_le: +0x416d 015286 call le_fifo_check_nearly_full +0x416e 015287 nrtn blank +0x416f 015288 fetch 1 ,mem_le_connect_status_flag +0x4170 015289 and pdata ,0x03 ,pdata +0x4171 015290 rtnne 0x03 +0x4172 015291 fetch mouse_flag_len ,mem_mouse_flag +0x4173 015292 bbit1 mosue_24g_pairing_flag ,mouse_le_send_empty_packet +0x4174 015293 bbit1 mouse_select_device_flag ,mouse_le_send_empty_packet +0x4175 015294 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +0x4176 015295 call mouse_motion +0x4177 015296 nrtn user +0x4178 015297 branch mouse_fill_data_le +: 015299 mouse_le_send_empty_packet: +0x4179 015300 setarg 0 +0x417a 015301 store 7 ,mem_mouse_key +0x417b 015302 branch mouse_fill_data_le +: 015304 mouse_priority_bb_event: +0x417c 015305 copy regc ,pdata +0x417d 015306 beq bt_evt_le_connected ,mouse_le_bb_event_connected +0x417e 015307 beq bt_evt_bb_connected ,mouse_stop_discovery +0x417f 015308 beq bt_evt_le_disconnected ,mouse_bb_disconnected +0x4180 015309 beq bt_evt_bb_disconnected ,mouse_bb_disconnected +0x4181 015310 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete +0x4182 015311 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn +0x4183 015312 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake +0x4184 015313 beq bt_evt_hid_connected ,mouse_bt_hid_connected +0x4185 015314 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed +0x4186 015315 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_timeout +0x4187 015316 beq bt_evt_pincode_req ,mouse_bb_event_pincode +0x4188 015317 beq bt_evt_remote_unsniff ,app_start_auto_sniff +0x4189 015318 beq bt_evt_le_pairing_success ,mouse_le_pairing_success +0x418a 015319 beq bt_evt_le_start_enc ,mouse_le_ll_start_encryt +0x418b 015320 beq bt_evt_le_pairing_complete ,mouse_le_pairing_complete +0x418c 015321 beq bt_evt_virtual_cable_unplug ,mouse_irtual_cable_unplug +0x418d 015322 beq bt_evt_24g_pairing_complete ,mouse_24g_pairing_complete +0x418e 015323 beq bt_evt_24g_attempt_fail ,mouse_24g_attempt_fail +0x418f 015324 beq bt_evt_24g_attempt_success ,mouse_24g_attempt_success +0x4190 015325 rtn +: 015328 mouse_le_pairing_complete: +0x4191 015329 branch app_ble_store_reconn_info +: 015331 mouse_24g_attempt_fail: +0x4192 015332 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x4193 015333 fetch 1 ,mem_reconn_times +0x4194 015334 nbranch mouse_polling_device ,blank +0x4195 015335 fetch 1 ,mem_device_flag +0x4196 015336 fetcht 1 ,mem_24g_device_number +0x4197 015337 isub temp ,null +0x4198 015338 branch app_enter_hibernate ,zero +0x4199 015339 rtn +: 015340 mouse_24g_attempt_success: +0x419a 015341 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x419b 015342 rtn +: 015343 mouse_24g_pairing_complete: +0x419c 015344 jam 1 ,mem_mouse_24g_enter_lpm_enable +0x419d 015345 arg mosue_24g_pairing_flag ,queue +0x419e 015346 call mouse_disable_function_flag +0x419f 015347 setarg 0 +0x41a0 015348 store 2 ,mem_24g_pairing_timer_count +0x41a1 015349 jam 0 ,mem_mouse_move_flag +0x41a2 015351 fetch 1 ,mem_config_sensor_type +0x41a3 015352 sub pdata ,p3610 ,null +0x41a4 015353 call mouse_read_sensor3610_data ,zero +0x41a5 015354 ncall mouse_read_sensor_common ,zero +0x41a6 015356 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x41a7 015357 bbit1 mouse_enable_flash ,mouse_store_flash_24g_address +0x41a8 015358 call mouse_set_24g_addr_eeprom +0x41a9 015359 branch iicd_write_protect_eep_data +: 015361 mouse_set_24g_addr_eeprom: +0x41aa 015362 call g24_head_ptr2regc +0x41ab 015363 add regc ,offset_24g_addr ,rega +0x41ac 015364 arg mouse_g24_addr_eeprom_offect ,regb +0x41ad 015365 arg 4 ,temp +0x41ae 015366 rtn +: 015368 mouse_store_flash_24g_address: +0x41af 015369 call g24_head_ptr2regc +0x41b0 015370 add regc ,offset_24g_addr ,regb +0x41b1 015371 ifetch 1 ,regb +0x41b2 015372 store 1 ,mem_mouse_24g_addr +0x41b3 015373 branch mouse_store_flash_device_info +: 015376 mouse_le_pairing_success: +0x41b4 015377 arg ll_pairing_success_flag ,queue +0x41b5 015378 branch mouse_le_enable_connect_flag +: 015379 mouse_le_ll_start_encryt: +0x41b6 015380 jam 2 ,mem_le_start_encrypt_timer +0x41b7 015381 arg ll_start_enc_flag ,queue +0x41b8 015382 branch mouse_le_enable_connect_flag +: 015385 mouse_le_enable_connect_flag: +0x41b9 015386 fetch 1 ,mem_le_connect_status_flag +0x41ba 015387 qset1 pdata +0x41bb 015388 store 1 ,mem_le_connect_status_flag +0x41bc 015389 rtn +: 015391 mouse_le_disable_connect_flag: +0x41bd 015392 fetch 1 ,mem_le_connect_status_flag +0x41be 015393 qset0 pdata +0x41bf 015394 store 1 ,mem_le_connect_status_flag +0x41c0 015395 rtn +: 015396 mouse_le_clean_connect_flag: +0x41c1 015397 jam 0 ,mem_le_connect_status_flag +0x41c2 015398 rtn +: 015400 mouse_le_bb_event_connected: +0x41c3 015401 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag +0x41c4 015402 set0 app_disc_by_button ,pdata +0x41c5 015403 store app_disc_rsn_size ,mem_app_disconn_reason_flag +0x41c6 015404 setarg 0 +0x41c7 015405 store 2 ,mem_mouse_direct_timer +0x41c8 015406 call mouse_no_data_timer_init +0x41c9 015407 branch mouse_stop_discovery +: 015409 mouse_bb_event_pincode: +0x41ca 015410 call pincode_reinit +0x41cb 015411 branch app_bt_set_pincode +: 015412 mouse_bb_event_reconn_timeout: +: 015413 mouse_bb_event_reconn_failed: +0x41cc 015414 fetch 1 ,mem_reconn_times +0x41cd 015415 nbranch mouse_polling_device ,blank +0x41ce 015416 fetch 2 ,mem_ui_state_map +0x41cf 015417 bbit1 ui_state_btn_down ,mouse_start_discovery +0x41d0 015418 fetch mouse_flag_len ,mem_mouse_flag +0x41d1 015419 bbit1 mouse_select_device_flag ,mouse_soft_reset +0x41d2 015420 bbit1 mouse_bt_discovery_button_down_flag ,mouse_start_discovery +0x41d3 015421 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +0x41d4 015422 branch app_bb_hibernate +: 015425 mouse_bt_hid_connected: +0x41d5 015426 branch mouse_hid_connected +: 015428 mouse_bt_event_setup_complete: +0x41d6 015429 rtn +: 015431 mouse_soft_reset: +0x41d7 015432 call mouse_select_device_enable +0x41d8 015433 branch soft_reset_chip +: 015435 mouse_bb_disconnected: +0x41d9 015436 bpatch patch1d_1 ,mem_patch1d +0x41da 015437 call mouse_bb_discon_clear_stack +0x41db 015438 fetch mouse_flag_len ,mem_mouse_flag +0x41dc 015439 bbit1 mouse_select_device_flag ,mouse_soft_reset +0x41dd 015440 bbit1 mosue_24g_pairing_flag ,g24_start_pairing_sm1 +0x41de 015441 fetch 1 ,mem_reconn_times +0x41df 015442 nbranch mouse_polling_device ,blank +0x41e0 015443 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x41e1 015444 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn +0x41e2 015445 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x41e3 015446 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing +0x41e4 015447 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate +0x41e5 015448 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +0x41e6 015449 branch mouse_start_discovery +: 015450 mouse_bb_discon_clear_stack: +0x41e7 015451 setarg 0 +0x41e8 015452 store 8 ,mem_wheel_tb_old_pinlevel +0x41e9 015453 istore 4 ,contw +0x41ea 015454 jam 0 ,mem_mouse_send_blank_timer +0x41eb 015455 jam 0 ,mem_mouse_move_flag +0x41ec 015456 jam app_handshake_null ,mem_app_handshake_flag +0x41ed 015457 jam 0 ,mem_ltk_exists +0x41ee 015458 rtn +: 015460 mouse_event_light_state_pairing: +0x41ef 015461 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate +0x41f0 015462 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate +0x41f1 015463 branch mouse_start_discovery +: 015464 mouse_event_light_state_hibernate: +0x41f2 015465 fetch 2 ,mem_ui_state_map +0x41f3 015466 bbit1 ui_state_btn_down ,mouse_start_discovery +0x41f4 015467 branch app_bb_hibernate +: 015469 mouse4_0_event_bb_disconn: +0x41f5 015470 call mouse_le_clean_connect_flag +0x41f6 015471 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x41f7 015472 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x41f8 015473 branch app_bb_hibernate +: 015475 mouse_bb_event_timer: +0x41f9 015476 call mouse_adc_read +0x41fa 015477 call mouse_24g_delay_timer +0x41fb 015478 call mouse_ban_24g_pairing_timer +0x41fc 015479 call mouse_dpi_led_blink_delay_timer +0x41fd 015480 call mouse_statue_up_timer +0x41fe 015482 call mouse_statue_cheak_timer +0x41ff 015483 call mouse_select_device +0x4200 015484 call mouse_bt_discovery_cheak +0x4201 015485 call mouse_low_voltage_led_timer +0x4202 015486 call mouse_sensor_led_contrl_timer +0x4203 015487 call mouse_check_hid_handshake_timer +0x4204 015488 call mouse_check_discovery_timeout_timer +0x4205 015489 call mouse_check_direct_timeout_timer +0x4206 015490 call mouse_check_no_data_timeout_timer +0x4207 015491 call mouse_check_mouse_state_timer +0x4208 015492 branch mouse_le_enable_att_list_timer +: 015496 mouse_sensor_led_contrl_timer: +0x4209 015497 fetch 1 ,mem_mouse_sensor_timer_count +0x420a 015498 rtn blank +0x420b 015499 increase -1 ,pdata +0x420c 015500 store 1 ,mem_mouse_sensor_timer_count +0x420d 015501 nrtn blank +0x420e 015502 branch mouse_sensor_led_contrl +: 015503 mouse_sensor_led_contrl: +0x420f 015504 fetch 1 ,mem_sensor_led_style +0x4210 015505 rtneq ui_led_state_blink_stop +0x4211 015506 beq ui_led_state_blink_darking ,mouse_sensor_led_blink_state_darking +: 015507 mouse_sensor_led_blink_state_lighting: +0x4212 015508 call mouse_sensor_led_on +0x4213 015509 jam ui_led_state_blink_darking ,mem_sensor_led_style +0x4214 015510 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x4215 015511 rtn +: 015512 mouse_sensor_led_blink_state_darking: +0x4216 015513 call mouse_sensor_led_off +0x4217 015514 jam ui_led_state_blink_lighting ,mem_sensor_led_style +0x4218 015515 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x4219 015516 rtn +: 015518 mouse_sensor_led_blink_stop: +: 015519 mouse_sensor_reset: +0x421a 015520 setarg 0x8006 +0x421b 015521 call twspi_write +0x421c 015522 nop 1000 +0x421d 015523 jam 0x00 ,mem_mouse_sensor_timer_count +0x421e 015524 jam ui_led_state_blink_stop ,mem_sensor_led_style +0x421f 015525 branch mouse_init_p32xx_id2_judge +: 015527 mouse_p3212sensor_led_on: +0x4220 015528 setarg 0xa006 +0x4221 015529 call twspi_write +0x4222 015530 setarg 0xa005 +0x4223 015531 branch twspi_write +: 015532 mouse_sensor_led_on_global: +0x4224 015533 jam 0 ,mem_mouse_sensor_timer_count +: 015534 mouse_sensor_led_on: +0x4225 015535 fetch 1 ,mem_config_sensor_type +0x4226 015536 beq p3212 ,mouse_p3212sensor_led_on +0x4227 015537 setarg 0x0106 +0x4228 015538 call twspi_write +0x4229 015539 setarg 0xa105 +0x422a 015540 branch twspi_write +: 015542 mouse_sensor_led_off_global: +0x422b 015543 jam 0 ,mem_mouse_sensor_timer_count +: 015544 mouse_sensor_led_off: +0x422c 015545 setarg 0x0906 +0x422d 015546 branch twspi_write +: 015547 mouse_sensor_start_blink: +0x422e 015548 jam led_sensor_blink_cnt ,mem_mouse_sensor_timer_count +0x422f 015549 jam ui_led_state_blink_start ,mem_sensor_led_style +0x4230 015550 rtn +: 015552 mouse_check_hid_handshake_timer: +0x4231 015553 arg mem_hid_handshake_timer_count ,regc +0x4232 015554 arg mouse_bt_hid_handshake ,regb +0x4233 015555 branch timer_single_step +: 015557 mouse_check_discovery_timeout_timer: +0x4234 015558 arg mem_mouse_discovery_timer ,regc +0x4235 015559 arg mouse_check_discovery_timeout ,regb +0x4236 015560 branch timer_single_step_2b +: 015562 mouse_check_direct_timeout_timer: +0x4237 015563 arg mem_mouse_direct_timer ,regc +0x4238 015564 arg mouse_check_direct_timeout ,regb +0x4239 015565 branch timer_single_step_2b +: 015567 mouse_check_no_data_timeout_timer: +0x423a 015568 arg mem_mouse_no_data_timer ,regc +0x423b 015569 arg mouse_check_no_data_timeout ,regb +0x423c 015570 branch timer_single_step_2b +: 015572 mouse_check_mouse_state_timer: +0x423d 015573 arg mem_mouse_statue_led_timer ,regc +0x423e 015574 arg mouse_statue_led_off ,regb +0x423f 015575 branch timer_single_step +: 015579 mouse_le_enable_att_list_timer: +0x4240 015580 arg mem_le_start_encrypt_timer ,regc +0x4241 015581 arg mouse_le_enable_att_list ,regb +0x4242 015582 branch timer_single_step +: 015584 mouse_24g_delay_timer: +0x4243 015585 arg mem_24g_enter_lpm_timer ,regc +0x4244 015586 arg mouse_24g_delay ,regb +0x4245 015587 branch timer_single_step +: 015589 mouse_ban_24g_pairing_timer: +0x4246 015590 arg mem_24g_pairing_timer_count ,regc +0x4247 015591 arg mouse_ban_24g_pairing ,regb +0x4248 015592 branch timer_single_step_2b +: 015593 mouse_ban_24g_pairing: +: 015594 mouse_24g_delay: +0x4249 015595 rtn +: 015598 mosue_dpi_led_blink_init: +0x424a 015599 fetch mouse_flag_len ,mem_mouse_flag +0x424b 015600 rtnbit0 mouse_enable_dpi_led_blink +0x424c 015601 jam 10 ,mem_mouse_dpi_led_delay_count +0x424d 015602 fetch 1 ,mem_dpi_led_gpio +0x424e 015603 store 1 ,mem_mouse_struct_led_gpio +0x424f 015604 rtn +: 015607 mouse_dpi_led_blink_delay_timer: +0x4250 015608 arg mem_mouse_dpi_led_delay_count ,regc +0x4251 015609 arg mouse_dpi_led_setting ,regb +0x4252 015610 branch timer_single_step +: 015611 mouse_dpi_led_setting: +0x4253 015612 fetch 1 ,mem_dpi_led_gpio +0x4254 015613 store 1 ,mem_mouse_struct_led_gpio +0x4255 015614 setarg led_dpi_blink +0x4256 015615 store 2 ,mem_mouse_on_time +0x4257 015616 store 2 ,mem_mouse_off_time +0x4258 015617 arg 0 ,rega +0x4259 015618 fetcht 1 ,mem_mouse_dpi +0x425a 015619 increase 1 ,temp +0x425b 015620 storet 1 ,mem_mouse_blink_count +0x425c 015621 jam ui_led_state_blink_start ,mem_mouse_led_type +0x425d 015622 rtn +: 015624 mouse_le_enable_att_list: +0x425e 015625 fetch 1 ,mem_le_connect_status_flag +0x425f 015626 rtnbit1 ll_pairing_success_flag +0x4260 015627 jam bt_cmd_le_update_conn ,mem_fifo_temp +0x4261 015628 call ui_ipc_send_cmd +0x4262 015629 arg write_req_enable_flag ,queue +0x4263 015630 branch mouse_le_enable_connect_flag +: 015633 mouse_check_discovery_timeout: +0x4264 015634 call mouse_stop_discovery +0x4265 015635 branch app_enter_hibernate +: 015637 mouse_check_direct_timeout: +0x4266 015638 call app_ble_stop_direct_adv +0x4267 015639 fetch 1 ,mem_reconn_times +0x4268 015640 nbranch mouse_polling_device ,blank +0x4269 015641 branch app_enter_hibernate +: 015643 mouse_check_no_data_timeout: +0x426a 015644 bmark1 mark_24g ,check_51cmd_hibernate +0x426b 015645 branch mouse_disconnect +: 015649 mouse_bb_event_discovery_btn: +0x426c 015650 bpatch patch1d_2 ,mem_patch1d +0x426d 015651 jam 0 ,mem_mouse_send_blank_timer +0x426e 015652 call mouse_disconnect +0x426f 015653 call mouse_le_clean_connect_flag +0x4270 015654 branch mouse_start_discovery +: 015658 mouse3_0_check_reconn_target: +0x4271 015659 fetch 6 ,mem_hci_plap +0x4272 015660 branch app_bt_start_discovery_short ,blank +0x4273 015661 call mouse_reconn_setting_led_gpio +0x4274 015662 jam 0x17 ,mem_connection_options +0x4275 015663 fetch 1 ,mem_ssp_enable +0x4276 015664 nbranch app_bt_start_reconnect ,blank +0x4277 015665 jam 0x04 ,mem_connection_options +0x4278 015666 branch app_bt_start_reconnect +: 015668 mouse4_0_check_reconn_target: +0x4279 015669 fetch 2 ,mem_mouse_direct_timeout +0x427a 015670 store 2 ,mem_mouse_direct_timer +0x427b 015671 call mouse_reconn_setting_led_gpio +0x427c 015672 call app_lpm_mult_disable +0x427d 015673 branch check_51cmd_adv +: 015675 mouse_reconn_setting_led_gpio: +0x427e 015676 setarg led_reconnect_blink +0x427f 015677 store 2 ,mem_mouse_on_time +0x4280 015678 store 2 ,mem_mouse_off_time +0x4281 015679 branch mouse_setting_led_gpio_comman +: 015681 mouse_discover_setting_led_gpio: +0x4282 015682 setarg led_discovery_blink +0x4283 015683 store 2 ,mem_mouse_on_time +0x4284 015684 store 2 ,mem_mouse_off_time +: 015685 mouse_setting_led_gpio_comman: +0x4285 015686 fetch 1 ,mem_device_flag +0x4286 015687 beq mode_bt_device1 ,mouse_device_led1 +0x4287 015688 beq mode_bt_device2 ,mouse_device_led2 +0x4288 015689 beq mode_bt_device3 ,mouse_device_led3 +0x4289 015690 rtn +: 015691 mouse_device_led1: +0x428a 015692 fetch 1 ,mem_config_device1_led_gpio +0x428b 015693 branch mouse_led_blink +: 015694 mouse_device_led2: +0x428c 015695 fetch 1 ,mem_config_device2_led_gpio +0x428d 015696 branch mouse_led_blink +: 015697 mouse_device_led3: +0x428e 015698 fetch 1 ,mem_config_device3_led_gpio +: 015699 mouse_led_blink: +0x428f 015700 store 1 ,mem_temp +0x4290 015701 call mouse_devce_led_off +0x4291 015702 fetch 1 ,mem_temp +0x4292 015703 store 1 ,mem_mouse_struct_led_gpio +0x4293 015704 arg 0 ,rega +0x4294 015705 jam ui_led_state_blink_start ,mem_mouse_led_type +0x4295 015706 branch ui_led_blink_start_global +: 015708 mouse_led_off: +0x4296 015709 arg 0 ,rega +0x4297 015710 branch ui_led_off_global +: 015711 mouse_led_on: +0x4298 015712 arg 0 ,rega +0x4299 015713 branch ui_led_on_global +: 015715 mouse4_0_bb_event_discovery_btn: +0x429a 015716 branch mouse_le_clean_connect_flag +: 015718 mouse_bt_hid_handshake: +0x429b 015719 jam app_handshake_done ,mem_app_handshake_flag +0x429c 015720 call app_lpm_mult_enable +0x429d 015721 call app_bt_store_reconn_info +0x429e 015722 setarg 0 +0x429f 015723 store 2 ,mem_discovery_timeout_timer_count +0x42a0 015724 store 1 ,mem_hid_handshake_timer_count +0x42a1 015725 branch app_bt_enter_sniff +: 015727 mouse_check_reconn_target: +0x42a2 015728 call mouse_cheak_select_device_by_switch +0x42a3 015729 fetch 1 ,mem_device_flag +0x42a4 015730 fetcht 1 ,mem_24g_device_number +0x42a5 015731 isub temp ,null +0x42a6 015732 branch mouse_connect_24g_mode ,zero +0x42a7 015733 fetch 1 ,mem_xrecord_mode +0x42a8 015734 beq rec_3_mode ,mouse3_0_check_reconn_target +0x42a9 015735 beq rec_4_mode ,mouse4_0_check_reconn_target +0x42aa 015736 branch mouse_start_discovery +: 015737 mouse_connect_24g_mode: +0x42ab 015738 call mouse_start_24g_mode +0x42ac 015739 rtnmark1 mark_24g +0x42ad 015740 fetch 1 ,mem_reconn_times +0x42ae 015741 nbranch mouse_polling_device ,blank +0x42af 015742 rtn +: 015744 mouse_start_discovery: +0x42b0 015745 bpatch patch1d_3 ,mem_patch1d +0x42b1 015746 fetch 2 ,mem_ui_state_map +0x42b2 015747 bbit1 ui_state_ble_adv ,mouse_start_discovery_norandom +0x42b3 015748 fetch mouse_flag_len ,mem_mouse_flag +0x42b4 015749 bbit0 mouse_enable_ble_random_addre ,mouse_start_discovery_norandom +0x42b5 015750 random pdata +0x42b6 015751 store 1 ,mem_le_lap + 1 +: 015752 mouse_start_discovery_norandom: +0x42b7 015753 call app_lpm_mult_disable +0x42b8 015754 fetch 2 ,mem_discovery_timeout +0x42b9 015755 store 2 ,mem_mouse_discovery_timer +0x42ba 015756 jam 6 ,mem_connection_options +0x42bb 015757 setarg 0 +0x42bc 015758 store 2 ,mem_mouse_no_data_timer +0x42bd 015759 store 2 ,mem_mouse_direct_timer +0x42be 015760 arg mouse_store_eeprom_flag ,queue +0x42bf 015761 call mouse_enable_function_flag +0x42c0 015762 call mouse_bt_discovery_button_down_disable +0x42c1 015763 fetch 1 ,mem_device_option +0x42c2 015764 isolate1 mode_4_mouse ,pdata +0x42c3 015765 call check_51cmd_adv ,true +0x42c4 015766 fetch 1 ,mem_device_option +0x42c5 015767 isolate1 mode_3_mouse ,pdata +0x42c6 015768 call check_51cmd_start_discovery ,true +0x42c7 015769 fetch mouse_flag_len ,mem_mouse_flag +0x42c8 015770 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_start_blink +0x42c9 015771 branch mouse_discover_setting_led_gpio +: 015773 mouse_stop_discovery: +0x42ca 015774 bpatch patch1d_4 ,mem_patch1d +0x42cb 015775 fetch 1 ,mem_device_option +0x42cc 015776 isolate1 mode_4_mouse ,pdata +0x42cd 015777 call mouse_stop_le_adv ,true +0x42ce 015778 fetch 1 ,mem_device_option +0x42cf 015779 isolate1 mode_3_mouse ,pdata +0x42d0 015780 call mouse_stop_bt3_discovery ,true +0x42d1 015781 fetch mouse_flag_len ,mem_mouse_flag +0x42d2 015782 bbit1 mouse_enable_discovery_sensor_led ,mouse_sensor_led_blink_stop +0x42d3 015783 branch mouse_devce_led_off +: 015784 mouse_stop_le_adv: +0x42d4 015785 setarg 0 +0x42d5 015786 store 2 ,mem_mouse_direct_timer +0x42d6 015787 branch check_51cmd_stop_adv +: 015788 mouse_stop_bt3_discovery: +0x42d7 015789 setarg 0 +0x42d8 015790 store 2 ,mem_mouse_discovery_timer +0x42d9 015791 branch check_51cmd_stop_discovery +: 015797 mouse_store_remote_bdaddr: +0x42da 015798 fetch mouse_flag_len ,mem_mouse_flag +0x42db 015799 rtnbit0 mouse_store_eeprom_flag +0x42dc 015800 arg mouse_store_eeprom_flag ,queue +0x42dd 015801 call mouse_disable_function_flag +0x42de 015802 call mouse_check_device_addr +: 015803 mouse_unplug_clean_bdaddr: +0x42df 015804 call mouse_before_store_reconn_info +0x42e0 015805 fetch mouse_flag_len ,mem_mouse_flag +0x42e1 015806 bbit1 mouse_enable_flash ,mouse_store_flash_device_info +0x42e2 015807 bbit1 mouse_enable_eeprom ,mouse_store_eeprom_device_info +0x42e3 015808 rtn +: 015809 mouse_store_eeprom_device_info: +0x42e4 015810 arg 88 ,temp +0x42e5 015811 arg mem_device_flag ,rega +0x42e6 015812 arg mouse_info_eeprom_offect ,regb +0x42e7 015813 branch iicd_write_protect_eep_data +: 015815 mouse_check_device_addr: +0x42e8 015816 fetch 1 ,mem_record_bt_mode +0x42e9 015817 beq rec_4_mode ,mouse_check_le_device_addr +0x42ea 015818 beq rec_3_mode ,mouse_check_bt_device_addr +0x42eb 015819 rtn +: 015820 mouse_check_le_device_addr: +0x42ec 015821 store 1 ,mem_device_addr_temp +0x42ed 015822 fetch 6 ,mem_le_plap +0x42ee 015823 branch mouse_check_bt_device_addr_common +: 015824 mouse_check_bt_device_addr: +0x42ef 015825 store 1 ,mem_device_addr_temp +0x42f0 015826 fetch 6 ,mem_plap +: 015827 mouse_check_bt_device_addr_common: +0x42f1 015828 store 6 ,mem_device_addr_temp + 1 +0x42f2 015829 fetch 7 ,mem_device_addr_temp +0x42f3 015830 arg mem_device1_type ,contr +0x42f4 015831 arg 3 ,loopcnt +: 015832 mouse_check_device_addr_end: +0x42f5 015833 ifetcht 7 ,contr +0x42f6 015834 isub temp ,null +0x42f7 015835 branch mouse_clean_addr ,zero +0x42f8 015836 increase 22 ,contr +0x42f9 015837 loop mouse_check_device_addr_end +0x42fa 015838 rtn +: 015839 mouse_before_store_reconn_info: +0x42fb 015840 arg mem_device1_type ,rega +0x42fc 015841 fetch 1 ,mem_device_flag +0x42fd 015842 increase -1 ,pdata +0x42fe 015843 mul32 pdata ,29 ,pdata +0x42ff 015844 iadd rega ,rega +0x4300 015845 fetch 1 ,mem_record_bt_mode +0x4301 015846 istore 1 ,rega +0x4302 015847 beq rec_4_mode ,mouse_store_le_device +0x4303 015848 beq rec_3_mode ,mouse_store_bt_device +0x4304 015849 rtn +: 015851 mouse_store_le_device: +0x4305 015852 fetch 6 ,mem_le_plap +0x4306 015853 istore 6 ,contw +0x4307 015854 arg mem_le_ltk ,contr +0x4308 015855 call memcpy16 +0x4309 015856 fetch 6 ,mem_le_lap +0x430a 015857 istore 6 ,contw +0x430b 015858 rtn +: 015859 mouse_store_bt_device: +0x430c 015860 fetch 6 ,mem_plap +0x430d 015861 istore 6 ,contw +0x430e 015862 arg mem_link_key ,contr +0x430f 015863 branch memcpy16 +: 015865 mouse_clean_addr: +0x4310 015866 increase -6 ,contr +0x4311 015867 copy contr ,contw +0x4312 015868 fetcht 6 ,mem_device_addr_temp + 1 +0x4313 015869 increase 3 ,temp +0x4314 015870 istoret 6 ,contw +0x4315 015871 rtn +: 015875 mouse_eeprom_load_recon_info: +0x4316 015876 arg 88 ,temp +0x4317 015877 arg mem_device_flag ,rega +0x4318 015878 arg mouse_info_eeprom_offect ,regb +0x4319 015879 call iicd_read_eep_data +: 015880 mouse_select_reconn_device: +0x431a 015881 arg mem_device1_type ,rega +0x431b 015882 fetch 1 ,mem_device_flag +0x431c 015883 fetcht 1 ,mem_24g_device_number +0x431d 015884 isub temp ,null +0x431e 015885 rtn zero +0x431f 015886 increase -1 ,pdata +0x4320 015887 mul32 pdata ,29 ,pdata +0x4321 015888 iadd rega ,rega +0x4322 015889 ifetch 1 ,rega +0x4323 015890 store 1 ,mem_xrecord_mode +0x4324 015891 beq rec_3_mode ,mouse_load_bt_device +0x4325 015892 beq rec_4_mode ,mouse_load_le_device +0x4326 015893 rtn +: 015895 mouse_load_bt_device: +0x4327 015896 ifetch 6 ,contr +: 015897 mouse_load_bt_device_end: +0x4328 015898 store 6 ,mem_hci_plap +0x4329 015899 arg mem_link_key ,contw +0x432a 015900 call memcpy16 +0x432b 015901 branch check_link_key_load +: 015903 mouse_load_le_device: +0x432c 015904 ifetch 6 ,contr +: 015905 mouse_load_le_device_end: +0x432d 015906 store 6 ,mem_hci_plap +0x432e 015907 arg mem_le_ltk ,contw +0x432f 015908 call memcpy16 +0x4330 015909 ifetch 6 ,contr +0x4331 015910 store 6 ,mem_le_lap +0x4332 015911 rtn +: 015914 mouse_select_device: +0x4333 015915 fetch 1 ,mem_config_function_enable +0x4334 015916 bbit1 enable_select_device_by_gpio_button ,mouse_select_device_by_button +0x4335 015917 bbit1 enable_select_device_by_switch ,mouse_select_device_by_switch +0x4336 015918 branch mouse_select_device_by_combination_key +: 015920 mouse_select_device_by_combination_key: +0x4337 015921 call mouse_check_key_gpio +0x4338 015922 beq mouse_rm_button ,mouse_select_device_commbination_key_down +: 015923 mouse_select_device_commbination_key_up: +0x4339 015924 jam 30 ,mem_combination_select_device_count +0x433a 015925 fetch 1 ,mem_select_device_button_statue +0x433b 015926 rtneq dpi_button_state_up +0x433c 015927 jam dpi_button_state_up ,mem_select_device_button_statue +0x433d 015928 rtn +: 015930 mouse_select_device_commbination_key_down: +0x433e 015931 call mouse_combination_select_device_timer +0x433f 015932 fetch 1 ,mem_select_device_button_statue +0x4340 015933 rtneq dpi_button_state_down +0x4341 015934 jam dpi_button_state_down ,mem_select_device_button_statue +0x4342 015935 branch mouse_select_device_enable +: 015937 mouse_combination_select_device_timer: +0x4343 015938 fetch 1 ,mem_combination_select_device_count +0x4344 015939 rtn blank +0x4345 015940 pincrease -1 +0x4346 015941 store 1 ,mem_combination_select_device_count +0x4347 015942 nrtn blank +0x4348 015943 branch mouse_ready_reconnection_by_button +: 015945 mouse_select_device_by_button: +0x4349 015946 fetch 1 ,mem_config_select_device_button_gpio +0x434a 015947 rtneq gpio_disable +0x434b 015948 fetcht 1 ,mem_config_select_device_button_gpio +0x434c 015949 call gpio_get_bit +0x434d 015950 branch mouse_select_device_button_down ,true +: 015951 mouse_select_device_button_up: +0x434e 015952 fetch 1 ,mem_select_device_button_statue +0x434f 015953 rtneq dpi_button_state_up +0x4350 015954 jam dpi_button_state_up ,mem_select_device_button_statue +0x4351 015955 fetch mouse_flag_len ,mem_mouse_flag +0x4352 015956 rtnbit1 mouse_long_bt_button_flag +0x4353 015957 branch mouse_ready_reconnection_by_button +: 015959 mouse_select_device_button_down: +0x4354 015960 fetch 1 ,mem_select_device_button_statue +0x4355 015961 rtneq dpi_button_state_down +0x4356 015962 jam dpi_button_state_down ,mem_select_device_button_statue +0x4357 015963 arg mouse_long_bt_button_flag ,queue +0x4358 015964 branch mouse_disable_function_flag +: 015968 mouse_select_device_by_switch: +0x4359 015969 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x435a 015970 rtnbit0 enable_select_device_by_switch +0x435b 015971 fetch 1 ,mem_device_flag +0x435c 015972 beq mode_bt_device1 ,mouse_select1_device +0x435d 015973 beq mode_24g_device ,mouse_select2_device +0x435e 015974 rtn +: 015975 mouse_cheak_select_device_by_switch: +0x435f 015976 fetch 1 ,mouse_flag_len ,mem_mouse_flag +0x4360 015977 rtnbit0 enable_select_device_by_switch +0x4361 015978 fetcht 1 ,mem_config_select_device_button_gpio +0x4362 015979 call gpio_get_bit +0x4363 015980 branch mouse_cheak_select_24gdevice ,true +: 015981 mouse_select_btdevice: +0x4364 015982 jam mode_bt_device1 ,mem_device_flag +0x4365 015983 rtn +: 015984 mouse_cheak_select_24gdevice: +0x4366 015985 fetch 1 ,mem_24g_device_number +0x4367 015986 store 1 ,mem_device_flag +0x4368 015987 rtn +: 015988 mouse_select1_device: +0x4369 015989 fetcht 1 ,mem_config_select_device_button_gpio +0x436a 015990 nbranch mouse_ready_reconnection_by_button ,true +0x436b 015991 rtn +: 015992 mouse_select2_device: +0x436c 015993 fetcht 1 ,mem_config_select_device_button_gpio +0x436d 015994 call gpio_get_bit +0x436e 015995 branch mouse_select_device_button_down ,true +0x436f 015996 rtn +: 016001 mouse_ready_reconnection_by_button: +0x4370 016002 fetcht 1 ,mem_device_flag +0x4371 016003 increase 1 ,temp +0x4372 016004 fetch 1 ,mem_device_number +0x4373 016005 isub temp ,null +0x4374 016006 ncall mouse_select_device_count_clean ,positive +0x4375 016007 storet 1 ,mem_device_flag +0x4376 016008 jam 0 ,mem_link_key_exists +0x4377 016009 call mouse_store_device_number2eeprom +0x4378 016010 call mouse_select_device_enable +0x4379 016012 branch mouse_set_reconnection +: 016014 mouse_store_device_number2eeprom: +0x437a 016015 arg 1 ,temp +0x437b 016016 arg mem_device_flag ,rega +0x437c 016017 arg 0 ,regb +0x437d 016018 branch iicd_write_eep_data +: 016020 mouse_set_reconnection: +0x437e 016021 call mouse_stop_bluetooth_mode +0x437f 016022 call mouse_select_device_disable +0x4380 016023 branch mouse_soft_reset +: 016024 mouse_stop_bluetooth_mode: +0x4381 016025 fetch 2 ,mem_ui_state_map +0x4382 016026 bbit1 ui_state_bt_reconnect ,mouse_cancel_reconnect +0x4383 016027 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x4384 016028 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x4385 016029 branch mouse_stop_discovery +: 016031 mouse_disconnect: +0x4386 016032 bpatch patch1d_5 ,mem_patch1d +0x4387 016033 setarg 0 +0x4388 016034 store 2 ,mem_mouse_no_data_timer +0x4389 016035 fetch 2 ,mem_ui_state_map +0x438a 016036 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x438b 016037 fetch 2 ,mem_ui_state_map +0x438c 016038 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x438d 016039 rtn +: 016041 mouse_irtual_cable_unplug: +0x438e 016042 setarg 0x01 +0x438f 016043 store 6 ,mem_plap +0x4390 016044 jam rec_3_mode ,mem_record_bt_mode +0x4391 016045 branch mouse_unplug_clean_bdaddr +: 016048 mouse_cancel_reconnect: +0x4392 016049 call mouse_bt_cannel_reconn_enable +0x4393 016050 branch check_51cmd_bb_reconn_cancel +: 016052 mouse_bt_discovery_by_button: +0x4394 016053 fetch 1 ,mem_config_bt_button_gpio +0x4395 016054 rtneq gpio_disable +0x4396 016055 fetcht 1 ,mem_config_bt_button_gpio +0x4397 016056 call gpio_get_bit +0x4398 016057 branch mouse_bt_discovery_button_down ,true +: 016058 mouse_bt_discovery_button_up: +0x4399 016059 fetch 1 ,mem_ui_button_timeout +0x439a 016060 store 1 ,mem_combination_ui_button_count +0x439b 016061 fetch 1 ,mem_bt_discovey_button_statue +0x439c 016062 rtneq dpi_button_state_up +0x439d 016063 jam dpi_button_state_up ,mem_bt_discovey_button_statue +0x439e 016064 branch mouse_bt_discovery_button_down_disable +: 016065 mouse_bt_discovery_button_down: +0x439f 016066 call mouse_bt_discovry_timer +0x43a0 016067 fetch 1 ,mem_bt_discovey_button_statue +0x43a1 016068 rtneq dpi_button_state_down +0x43a2 016069 jam dpi_button_state_down ,mem_bt_discovey_button_statue +0x43a3 016070 call check_51cmd_bb_reconn_cancel +0x43a4 016071 branch mouse_bt_discovery_button_down_enable +: 016074 mouse_bt_discovery_cheak: +0x43a5 016075 fetch 1 ,mem_config_function_enable +0x43a6 016076 bbit1 enable_bt_button ,mouse_bt_discovery_by_button +: 016077 mouse_bt_discovery_commbination_key: +0x43a7 016078 call mouse_check_key_gpio +0x43a8 016079 beq mouse_lmr_button ,mouse_bt_discovery_commbination_key_down +: 016080 mouse_bt_discovery_commbination_key_up: +0x43a9 016081 fetch 1 ,mem_ui_button_timeout +0x43aa 016082 store 1 ,mem_combination_ui_button_count +0x43ab 016083 fetch 1 ,mem_bt_discovey_button_statue +0x43ac 016084 rtneq dpi_button_state_up +0x43ad 016085 jam dpi_button_state_up ,mem_bt_discovey_button_statue +0x43ae 016086 branch mouse_bt_discovery_button_down_disable +: 016089 mouse_bt_discovery_commbination_key_down: +0x43af 016090 call mouse_bt_discovry_timer +0x43b0 016091 fetch 1 ,mem_bt_discovey_button_statue +0x43b1 016092 rtneq dpi_button_state_down +0x43b2 016093 jam dpi_button_state_down ,mem_bt_discovey_button_statue +0x43b3 016094 call check_51cmd_bb_reconn_cancel +0x43b4 016095 branch mouse_bt_discovery_button_down_enable +: 016097 mouse_bt_discovry_timer: +0x43b5 016098 arg mem_combination_ui_button_count ,regc +0x43b6 016099 arg mouse_long_button_bt_discovry ,regb +0x43b7 016100 branch timer_single_step +: 016102 mouse_long_button_bt_discovry: +0x43b8 016103 arg mouse_long_bt_button_flag ,queue +0x43b9 016104 call mouse_enable_function_flag +0x43ba 016105 call app_evt_button_long_pressed +0x43bb 016106 branch mouse_bb_event_discovery_btn +: 016109 mouse_cpi_enable: +0x43bc 016110 arg mouse_cpi_flag ,queue +0x43bd 016111 branch mouse_enable_function_flag +: 016112 mouse_cpi_disable: +0x43be 016113 arg mouse_cpi_flag ,queue +0x43bf 016114 branch mouse_disable_function_flag +: 016115 mouse_select_device_enable: +0x43c0 016116 arg mouse_select_device_flag ,queue +0x43c1 016117 branch mouse_enable_function_flag +: 016118 mouse_select_device_disable: +0x43c2 016119 arg mouse_select_device_flag ,queue +0x43c3 016120 branch mouse_disable_function_flag +: 016121 mouse_bt_cannel_reconn_enable: +0x43c4 016122 arg mouse_bt_cannel_reconn_flag ,queue +0x43c5 016123 branch mouse_enable_function_flag +: 016124 mouse_bt_cannel_reconn_disable: +0x43c6 016125 arg mouse_bt_cannel_reconn_flag ,queue +0x43c7 016126 branch mouse_disable_function_flag +: 016127 mouse_bt_discovery_button_down_enable: +0x43c8 016128 arg mouse_bt_discovery_button_down_flag ,queue +0x43c9 016129 branch mouse_enable_function_flag +: 016130 mouse_bt_discovery_button_down_disable: +0x43ca 016131 arg mouse_bt_discovery_button_down_flag ,queue +0x43cb 016132 branch mouse_disable_function_flag +: 016136 mouse_select_device_count_clean: +0x43cc 016137 arg 1 ,temp +0x43cd 016138 rtn +: 016140 mouse_enable_function_flag: +0x43ce 016141 fetch mouse_flag_len ,mem_mouse_flag +0x43cf 016142 qset1 pdata +0x43d0 016143 store mouse_flag_len ,mem_mouse_flag +0x43d1 016144 rtn +: 016146 mouse_disable_function_flag: +0x43d2 016147 fetch mouse_flag_len ,mem_mouse_flag +0x43d3 016148 qset0 pdata +0x43d4 016149 store mouse_flag_len ,mem_mouse_flag +0x43d5 016150 rtn +: 016152 mouse_adc_read: +0x43d6 016153 fetch mouse_flag_len ,mem_mouse_flag +0x43d7 016154 rtnbit0 mouse_enable_adc +0x43d8 016155 fetch 1 ,mem_adc_read_timer +0x43d9 016156 increase 1 ,pdata +0x43da 016157 store 1 ,mem_adc_read_timer +0x43db 016158 sub pdata ,10 ,null +0x43dc 016159 rtn positive +0x43dd 016160 jam 0 ,mem_adc_read_timer +0x43de 016161 call adc_set_mode +0x43df 016162 call vdd_calculate_by_mode +0x43e0 016163 store 2 ,mem_mouse_vdd_now_vol +0x43e1 016164 arg mem_mouse_vdd_calculate_set ,rega +0x43e2 016165 call adc_bat_percent_lowpower_out +0x43e3 016166 fetch 1 ,mem_adc_power_flag +0x43e4 016167 bbit1 1 ,mouse_power_down +0x43e5 016168 bbit0 0 ,mouse_adc_no_low_voltage +0x43e6 016169 branch mouse_adc_low_voltage +: 016170 mouse_adc_low_voltage: +0x43e7 016171 arg mouse_low_voltage_flag ,queue +0x43e8 016172 branch mouse_enable_function_flag +: 016173 mouse_adc_no_low_voltage: +0x43e9 016174 arg mouse_low_voltage_flag ,queue +0x43ea 016175 branch mouse_disable_function_flag +: 016177 mouse_low_voltage_led_timer: +0x43eb 016178 fetch mouse_flag_len ,mem_mouse_flag +0x43ec 016179 rtnbit0 mouse_low_voltage_flag +0x43ed 016180 fetch 1 ,mem_config_low_voltage_alarm_gpio +0x43ee 016181 store 1 ,mem_mouse_struct_led_gpio +0x43ef 016182 fetch 1 ,mem_adc_low_volatage_led_timer_count +0x43f0 016183 pincrease 1 +0x43f1 016184 store 1 ,mem_adc_low_volatage_led_timer_count +0x43f2 016185 sub pdata ,20 ,null +0x43f3 016186 ncall mouse_adc_low_volatage_led_timer_count_clean ,positive +0x43f4 016187 beq 2 ,mouse_low_voltage_led_on +0x43f5 016188 beq 4 ,mouse_low_voltage_led_off +0x43f6 016189 beq 6 ,mouse_low_voltage_led_on +0x43f7 016190 beq 8 ,mouse_low_voltage_led_off +0x43f8 016191 rtn +: 016192 mouse_adc_low_volatage_led_timer_count_clean: +0x43f9 016193 jam 1 ,mem_adc_low_volatage_led_timer_count +0x43fa 016194 branch mouse_low_voltage_led_off +: 016195 mouse_low_voltage_led_on: +0x43fb 016196 arg 0 ,rega +0x43fc 016197 jam ui_led_state_lighting ,mem_mouse_led_type +0x43fd 016198 branch ui_led_on_global +: 016199 mouse_low_voltage_led_off: +0x43fe 016200 arg 0 ,rega +0x43ff 016201 jam ui_led_state_lighting ,mem_mouse_led_type +0x4400 016202 branch ui_led_off_global +: 016204 mouse_g24_package_data: +0x4401 016205 call mouse_motion +0x4402 016206 nrtn user +0x4403 016207 arg 7 ,rega +0x4404 016208 arg mem_mouse_key ,regb +0x4405 016209 rtn +: 016211 mouse_g24_enter_lpm: +0x4406 016212 fetch 1 ,mem_mouse_24g_enter_lpm_enable +0x4407 016213 rtn blank +0x4408 016215 fetcht 1 ,mem_dpi_button_gpio +0x4409 016216 call gpio_get_bit +0x440a 016217 call mouse_24g_dpi_delay_init ,true +0x440b 016218 fetch 1 ,mem_24g_enter_lpm_timer +0x440c 016219 nrtn blank +0x440d 016220 call mouse_check_key_gpio +0x440e 016221 nrtn blank +0x440f 016222 branch g24_lpm_long_sleep +: 016224 mouse_24g_dpi_delay_init: +0x4410 016225 fetch 1 ,mem_dpi_button_gpio +0x4411 016226 rtneq ui_button_gpio_disable +0x4412 016227 jam 10 ,mem_24g_enter_lpm_timer +0x4413 016228 rtn +: 016231 mouse_load_flash_info_cheak: +0x4414 016232 call mouse_load_flash_flag +0x4415 016233 fetch 2 ,mem_store_flag +0x4416 016234 arg eeprom_init_flag ,temp +0x4417 016235 isub temp ,null +0x4418 016236 branch mouse_load_flash_device_info ,zero +0x4419 016237 storet 2 ,mem_store_flag +0x441a 016238 call mouse_ble_init_address +0x441b 016239 branch mouse_store_flash_device_info +: 016240 mouse_ble_init_address: +0x441c 016241 fetch 6 ,mem_le_lap +0x441d 016242 store 6 ,mem_device1_locall_addr +0x441e 016243 add pdata ,0x0100 ,pdata +0x441f 016244 store 6 ,mem_device2_locall_addr +0x4420 016245 add pdata ,0x0100 ,pdata +0x4421 016246 store 6 ,mem_device3_locall_addr +0x4422 016247 rtn +: 016250 mouse_load_flash_flag: +0x4423 016251 setarg mem_store_flag +0x4424 016252 arg mem_mouse_information_start ,temp +0x4425 016253 isub temp ,temp +0x4426 016254 fetch 3 ,mem_flash_base +0x4427 016255 iadd temp ,pdata +0x4428 016256 arg 2 ,temp +0x4429 016257 arg mem_store_flag ,rega +0x442a 016258 branch spid_read_flash +: 016261 mouse_load_flash_device_info: +0x442b 016262 setarg mem_mouse_information_end +0x442c 016263 arg mem_mouse_information_start ,temp +0x442d 016264 isub temp ,temp +0x442e 016265 fetch 3 ,mem_flash_base +0x442f 016266 arg mem_mouse_information_start ,rega +0x4430 016267 call spid_read_flash +0x4431 016268 call mouse_select_reconn_device +0x4432 016269 fetch 4 ,mem_mouse_24g_addr +0x4433 016270 call g24_head_ptr2regc +0x4434 016271 branch g24_store_mem_addr +: 016273 mouse_store_flash_device_info: +0x4435 016274 setarg mem_mouse_information_end +0x4436 016275 arg mem_mouse_information_start ,temp +0x4437 016276 isub temp ,temp +0x4438 016277 arg mem_mouse_information_start ,rega +0x4439 016278 fetch 3 ,mem_flash_base +0x443a 016279 branch flash_write +: 016281 mouse_store_eerpom_dpi: +0x443b 016282 arg 1 ,temp +0x443c 016283 arg mem_mouse_dpi ,rega +0x443d 016284 arg mouse_dpi_eeprom_offect ,regb +0x443e 016285 branch iicd_write_protect_eep_data +: 016287 mouse_load_eeprom_dpi: +0x443f 016288 arg 1 ,temp +0x4440 016289 arg mem_mouse_dpi ,rega +0x4441 016290 arg mouse_dpi_eeprom_offect ,regb +0x4442 016291 branch iicd_read_eep_data +: 016293 mouse_statue_cheak_timer: +0x4443 016294 rtnmark1 mark_24g +0x4444 016295 fetch mouse_flag_len ,mem_mouse_flag +0x4445 016296 rtnbit0 mouse_enable_statue_up +0x4446 016297 fetch 1 ,mem_mouse_1step_up_count +0x4447 016298 pincrease 1 +0x4448 016299 and pdata ,0x07 ,pdata +0x4449 016300 store 1 ,mem_mouse_1step_up_count +0x444a 016301 rtnne 0x07 +0x444b 016302 fetch 2 ,mem_ui_state_map +0x444c 016303 bbit1 ui_state_bt_connected ,mouse_check_statue_up +0x444d 016304 bbit1 ui_state_ble_connected ,mouse_check_statue_up +0x444e 016305 rtn +: 016310 mouse_check_statue_up: +0x444f 016311 bpatch patch1d_6 ,mem_patch1d +0x4450 016312 fetch 1 ,mem_mouse_2step_up_count +0x4451 016313 nrtn blank +0x4452 016314 fetch mouse_flag_len ,mem_mouse_flag +0x4453 016315 rtnbit0 mouse_statue_up_flag +0x4454 016316 fetch 1 ,mem_sensor_squal_reg +0x4455 016317 call sensor_read +0x4456 016318 store 1 ,mem_sensor_iqc +0x4457 016319 sub pdata ,0x10 ,null +0x4458 016320 branch mouse_statue_up_timer_init ,positive +0x4459 016321 jam 0 ,mem_mouse_2step_up_count +0x445a 016322 rtn +: 016324 mouse_statue_up_timer_init: +0x445b 016325 jam 30 ,mem_mouse_2step_up_count +0x445c 016326 rtn +: 016327 mouse_statue_up_timer: +0x445d 016328 arg mem_mouse_2step_up_count ,regc +0x445e 016329 arg mouse_statue_up ,regb +0x445f 016330 branch timer_single_step +: 016332 mouse_statue_up: +0x4460 016333 fetch 1 ,mem_sensor_squal_reg +0x4461 016334 call twspi_read +0x4462 016335 sub pdata ,0x10 ,null +0x4463 016336 nrtn positive +0x4464 016337 fetch mouse_flag_len ,mem_mouse_flag +0x4465 016338 rtnbit0 mouse_statue_up_flag +0x4466 016339 arg mouse_statue_up_flag ,queue +0x4467 016340 call mouse_disable_function_flag +0x4468 016341 jam 0 ,mem_lpm_mult +0x4469 016342 jam 30 ,mem_mouse_statue_led_timer +0x446a 016343 call mouse_devce_led_off +0x446b 016344 fetch mouse_flag_len ,mem_mouse_flag +0x446c 016345 bbit1 mouse_enable_statue_up_three_led ,mouse_three_device_statue_up +: 016346 mouse_two_device_statue_up: +0x446d 016347 fetch 1 ,mem_device_flag +0x446e 016348 beq mode_bt_device1 ,mouse_device1_led_on +0x446f 016349 beq mode_bt_device2 ,mouse_device_blink_led_init +0x4470 016350 rtn +: 016351 mouse_three_device_statue_up: +0x4471 016352 fetch 1 ,mem_device_flag +0x4472 016353 beq mode_bt_device1 ,mouse_device1_led_on +0x4473 016354 beq mode_bt_device2 ,mouse_device2_led_on +0x4474 016355 beq mode_bt_device3 ,mouse_device3_led_on +0x4475 016356 rtn +: 016358 mouse_device_blink_led_init: +0x4476 016359 fetch 1 ,mem_config_device1_led_gpio +0x4477 016360 branch mouse_led_blink +: 016364 mouse_statue_led_off: +0x4478 016365 jam 0x20 ,mem_lpm_mult +0x4479 016366 branch mouse_devce_led_off +: 016370 mouse_devce1_led_off: +0x447a 016371 fetch 1 ,mem_config_device1_led_gpio +0x447b 016372 rtneq gpio_disable +0x447c 016373 store 1 ,mem_mouse_struct_led_gpio +0x447d 016374 branch mouse_led_off +: 016376 mouse_devce2_led_off: +0x447e 016377 fetch 1 ,mem_config_device2_led_gpio +0x447f 016378 rtneq gpio_disable +0x4480 016379 store 1 ,mem_mouse_struct_led_gpio +0x4481 016380 branch mouse_led_off +: 016382 mouse_devce_led_off: +0x4482 016383 call mouse_led_off +0x4483 016384 call mouse_devce1_led_off +0x4484 016385 call mouse_devce2_led_off +: 016386 mouse_devce3_led_off: +0x4485 016387 fetch 1 ,mem_config_device3_led_gpio +0x4486 016388 rtneq gpio_disable +0x4487 016389 store 1 ,mem_mouse_struct_led_gpio +0x4488 016390 branch mouse_led_off +: 016392 mouse_device1_led_on: +0x4489 016393 fetch 1 ,mem_config_device1_led_gpio +0x448a 016394 store 1 ,mem_mouse_struct_led_gpio +0x448b 016395 branch mouse_led_on +: 016396 mouse_device2_led_on: +0x448c 016397 fetch 1 ,mem_config_device2_led_gpio +0x448d 016398 store 1 ,mem_mouse_struct_led_gpio +0x448e 016399 branch mouse_led_on +: 016400 mouse_device3_led_on: +0x448f 016401 fetch 1 ,mem_config_device3_led_gpio +0x4490 016402 store 1 ,mem_mouse_struct_led_gpio +0x4491 016403 branch mouse_led_on +: 016407 mouse_polling_device: +0x4492 016408 bpatch patch1d_7 ,mem_patch1d +0x4493 016409 fetch 1 ,mem_reconn_times +0x4494 016410 increase -1 ,pdata +0x4495 016411 store 1 ,mem_reconn_times +0x4496 016412 fetcht 1 ,mem_device_flag +0x4497 016413 increase 1 ,temp +0x4498 016414 fetch 1 ,mem_device_number +0x4499 016415 isub temp ,null +0x449a 016416 ncall mouse_select_device_count_clean ,positive +0x449b 016417 storet 1 ,mem_device_flag +0x449c 016418 jam 0 ,mem_link_key_exists +0x449d 016419 call mouse_store_device_number2eeprom +0x449e 016420 call mouse_before_store_reconn_info +0x449f 016421 branch mouse_check_reconn_target +: 016423 mouse_power_down: +0x44a0 016424 call mouse_devce_led_off +0x44a1 016425 setarg 0 +0x44a2 016426 store 8 ,mem_gpio_wakeup_low +0x44a3 016427 branch lpm_hibernate +: 016438 remote_car_init: +0x44a4 016439 rtn wake +0x44a5 016440 hfetch 1 ,core_gpio_sel1 +0x44a6 016441 and_into 0xf0 ,pdata +0x44a7 016442 hstore 1 ,core_gpio_sel1 +0x44a8 016443 call keyscan_key_init +0x44a9 016444 setarg remote_car_le_before_hibernate +0x44aa 016445 store 2 ,mem_cb_before_hibernate +0x44ab 016447 setarg remote_car_process_lpm_before +0x44ac 016448 store 2 ,mem_cb_before_lpm +0x44ad 016450 setarg remote_car_scale_process_idle +0x44ae 016451 store 2 ,mem_cb_idle_process +0x44af 016453 setarg remote_car_scale_process_bb_event +0x44b0 016454 store 2 ,mem_cb_bb_event_process +0x44b1 016456 setarg app_get_lpm_wake_lock +0x44b2 016457 store 2 ,mem_cb_check_wakelock +0x44b3 016459 call g24_head_ptr2regc +0x44b4 016460 setarg remote_car_g24_package_data +0x44b5 016461 add regc ,offset_24g_cb_data ,contw +0x44b6 016462 istore 2 ,contw +0x44b7 016464 setarg remote_car_g24_enter_lpm +0x44b8 016465 add regc ,offset_24g_cb_lpm_prepare ,contw +0x44b9 016466 istore 2 ,contw +0x44ba 016468 setarg remote_car_process_lpm_before +0x44bb 016469 add regc ,offset_24g_cb_lpm_before ,contw +0x44bc 016470 istore 2 ,contw +0x44bd 016472 setarg remote_car_event_timer +0x44be 016473 store 2 ,mem_cb_event_timer +0x44bf 016475 setarg remote_car_power_off_signal +0x44c0 016476 store 2 ,mem_remote_car_power_off_cb +0x44c1 016478 setarg remote_car_soft_switch_power_on_signal +0x44c2 016479 store 2 ,mem_remote_car_power_standby_cb +0x44c3 016481 setarg remote_car_send_key_data +0x44c4 016482 store 2 ,mem_cb_remote_car_keyscan +0x44c5 016484 bpatch patch1e_0 ,mem_patch1e +0x44c6 016485 call remote_car_init_environment +0x44c7 016486 call queue_init +0x44c8 016487 jam 2 ,mem_lpm_mult +0x44c9 016488 fetch 1 ,mem_remote_car_config_soft_switch_enable +0x44ca 016489 store 1 ,mem_remote_car_hard_soft_switch +0x44cb 016490 beq hard_switch ,remote_car_hard_switch_power_on_signal +0x44cc 016491 fetch 1 ,mem_remote_car_config_soft_switch_gpio +0x44cd 016492 store 1 ,mem_ui_button_gpio +: 016493 remote_car_soft_switch_power_on_init: +0x44ce 016494 call remote_car_ui_led_init +0x44cf 016495 call ui_button_init +0x44d0 016496 call ui_button_polling +0x44d1 016497 jam power_starting ,mem_remote_car_power_state +0x44d2 016498 fetch 2 ,mem_ui_state_map +0x44d3 016499 rtnbit1 ui_state_btn_down +0x44d4 016500 branch app_enter_hibernate +: 016504 remote_car_hard_switch_power_on_signal: +0x44d5 016505 jam power_standby ,mem_remote_car_power_state +: 016506 remote_car_soft_switch_power_on_signal: +0x44d6 016507 call remote_car_ui_led_init +0x44d7 016509 arg 0 ,rega +0x44d8 016510 call ui_led_blink_start_global +: 016511 remote_car_connect_24g_mode: +0x44d9 016512 branch g24_auto_pair_start +: 016514 remote_car_power_off_signal: +0x44da 016515 branch remote_car_ui_led_init +: 016517 remote_car_ui_led_init: +0x44db 016518 bpatch patch1e_1 ,mem_patch1e +0x44dc 016519 fetch 1 ,mem_remote_car_config_connect_led_gpio +0x44dd 016520 bne invalid_pin_num ,remote_car_pairing_led_gpio_set +: 016521 remote_car_ui_led_init_1: +0x44de 016522 fetcht 1 ,mem_remote_car_led_map +0x44df 016523 branch gpio_config_output +: 016524 remote_car_pairing_led_gpio_set: +0x44e0 016525 store 1 ,mem_remote_car_led_map +0x44e1 016526 branch remote_car_ui_led_init_1 +: 016529 remote_car_init_environment: +0x44e2 016530 call g24_set_device_addr +0x44e3 016531 fetch 2 ,mem_remote_car_no_data_timeout +0x44e4 016532 store 2 ,mem_remote_car_no_data_timer +0x44e5 016533 branch remote_car_get_adc_default_data +: 016535 remote_car_le_before_hibernate: +: 016540 remote_car_in_enter_hibernate: +0x44e6 016541 call gpio_set_before_lpm_common +0x44e7 016542 call remote_car_process_lpm_before +0x44e8 016543 branch app_enter_hibernate +: 016545 remote_car_process_lpm_before: +0x44e9 016546 branch keyscan_process_lpm_before +: 016548 remote_car_g24_enter_lpm: +0x44ea 016549 fetch 1 ,mem_remote_car_24g_enter_lpm_enable +0x44eb 016550 rtn blank +0x44ec 016552 branch g24_lpm_long_sleep +: 016554 remote_car_process_auto_pair_exit: +0x44ed 016555 rtn +: 016557 remote_car_key_scan_process: +0x44ee 016558 branch keyscan_key_process +: 016560 remote_car_scale_process_idle: +0x44ef 016561 call remote_car_rocker_process +0x44f0 016562 call remote_car_24g_status_process +0x44f1 016563 branch remote_car_key_scan_process +: 016565 remote_car_scale_process_bb_event: +0x44f2 016566 copy regc ,pdata +0x44f3 016567 beq bt_evt_button_up ,app_event_button_up +0x44f4 016568 beq bt_evt_button_long_pressed ,app_button_long_pressed +0x44f5 016569 beq bt_evt_24g_pairing_complete ,remote_car_24g_pairing_complete +0x44f6 016570 beq bt_evt_24g_attempt_success ,remote_car_24g_attempt_success +0x44f7 016571 beq bt_evt_24g_attempt_fail ,remote_car_24g_attempt_fail +0x44f8 016572 rtn +: 016574 remote_car_24g_attempt_fail: +0x44f9 016575 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x44fa 016576 rtn +: 016578 remote_car_24g_pairing_complete: +0x44fb 016579 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x44fc 016580 jam work_paired ,mem_remote_car_24g_auto_work_step +0x44fd 016581 jam work_paired ,mem_remote_car_24g_pair_success_flag +0x44fe 016582 rtn +: 016584 remote_car_24g_attempt_success: +0x44ff 016585 jam 1 ,mem_remote_car_24g_enter_lpm_enable +0x4500 016586 jam work_paired ,mem_remote_car_24g_auto_work_step +0x4501 016587 jam work_paired ,mem_remote_car_24g_pair_success_flag +0x4502 016588 rtn +: 016590 remote_car_24g_status_process: +0x4503 016591 fetch 1 ,mem_remote_car_24g_auto_work_step +0x4504 016592 rtneq power_on +0x4505 016593 fetch 1 ,mem_remote_car_24g_status +0x4506 016594 rtneq work_paired +0x4507 016595 jam work_paired ,mem_remote_car_24g_status +: 016596 remote_car_scale_process_paired: +0x4508 016597 arg 0 ,rega +0x4509 016598 branch ui_led_off_global +: 016599 remote_car_scale_process_shutdown: +0x450a 016600 arg 0 ,rega +0x450b 016601 call ui_led_off_global +0x450c 016602 call remote_car_ui_led_init +0x450d 016603 branch app_enter_hibernate +: 016605 remote_car_event_timer: +0x450e 016606 call app_power_timer +0x450f 016607 branch remote_car_no_data_timer +: 016609 remote_car_no_data_timer: +0x4510 016610 fetch 1 ,mem_remote_car_config_timeout_shutdown_enable +0x4511 016611 rtn blank +0x4512 016612 arg mem_remote_car_no_data_timer ,regc +0x4513 016613 arg remote_car_scale_process_shutdown ,regb +0x4514 016614 branch timer_single_step_2b +: 016617 remote_car_get_adc_default_data: +0x4515 016618 call remote_car_rocker_get_x +0x4516 016619 storet 2 ,mem_current_vdd_value_default_mid_x +0x4517 016620 call remote_car_rocker_get_y +0x4518 016621 storet 2 ,mem_current_vdd_value_default_mid_y +0x4519 016622 rtn +: 016623 remote_car_rocker_data_get: +: 016624 remote_car_rocker_get_x: +0x451a 016625 fetch 2 ,mem_current_vdd_value_default_mid_x +0x451b 016626 store 2 ,mem_current_vdd_value_default_mid_temp +0x451c 016627 call remote_car_get_adc_from_gpio6 +0x451d 016628 call remote_car_rocker_get_value +0x451e 016629 store 1 ,mem_rocker_status +: 016630 remote_car_rocker_get_y: +0x451f 016631 fetch 2 ,mem_current_vdd_value_default_mid_y +0x4520 016632 store 2 ,mem_current_vdd_value_default_mid_temp +0x4521 016633 call remote_car_get_adc_from_gpio7 +0x4522 016634 call remote_car_rocker_get_value +0x4523 016635 store 1 ,mem_rocker_status + 1 +0x4524 016636 rtn +: 016637 remote_car_rocker_get_value: +0x4525 016638 fetch 2 ,mem_current_vdd_default_range +0x4526 016639 copy pdata ,rega +0x4527 016640 fetch 2 ,mem_current_vdd_value_default_mid_temp +0x4528 016641 call remote_car_rocker_mid_value_adjust +0x4529 016642 fetch 1 ,mem_rocker_work_status +0x452a 016643 nbranch remote_car_rocker_translate_key ,blank +0x452b 016644 nrtn positive +0x452c 016645 fetcht 2 ,mem_current_vdd_value_default_mid_temp +0x452d 016646 rtn +: 016647 remote_car_rocker_mid_value_adjust: +0x452e 016648 isub temp ,pdata +0x452f 016649 branch remote_car_rocker_mid_adjust_positive ,positive +0x4530 016650 sub pdata ,0 ,pdata +0x4531 016651 jam 1 ,mem_rocker_negative_flag +0x4532 016652 isub rega ,null +0x4533 016653 rtn +: 016654 remote_car_rocker_mid_adjust_positive: +0x4534 016655 jam 0 ,mem_rocker_negative_flag +0x4535 016656 isub rega ,null +0x4536 016657 rtn +: 016658 remote_car_rocker_translate_key: +0x4537 016659 nbranch remote_car_rocker_middle_key ,positive +0x4538 016660 fetch 1 ,mem_rocker_negative_flag +0x4539 016661 nbranch remote_car_rocker_negative_key ,blank +: 016662 remote_car_rocker_positive_key: +0x453a 016663 setarg rocker_positive_key +0x453b 016664 rtn +: 016665 remote_car_rocker_negative_key: +0x453c 016666 setarg rocker_negative_key +0x453d 016667 rtn +: 016668 remote_car_rocker_middle_key: +0x453e 016669 setarg rocker_middle_key +0x453f 016670 rtn +: 016671 remote_car_get_adc_from_gpio6: +0x4540 016672 jam 0x33 ,mem_adc_channel +0x4541 016673 branch adc_set_mode +: 016674 remote_car_get_adc_from_gpio7: +0x4542 016675 jam 0x34 ,mem_adc_channel +0x4543 016676 branch adc_set_mode +: 016679 remote_car_rocker_process: +0x4544 016680 fetch 1 ,mem_remote_car_config_check_way +0x4545 016681 rtnne car_remote_check_rocker +: 016682 remote_car_read_rocker_check_start: +0x4546 016683 bpatch patch1e_2 ,mem_patch1e +0x4547 016684 jam 1 ,mem_rocker_work_status +0x4548 016685 call remote_car_rocker_data_get +0x4549 016686 fetch 2 ,mem_rocker_status +0x454a 016687 fetcht 2 ,mem_rocker_last_status +0x454b 016688 isub temp ,null +0x454c 016689 rtn zero +0x454d 016690 store 2 ,mem_rocker_last_status +0x454e 016691 call remote_car_rocker_x_to_key +0x454f 016692 branch remote_car_rocker_y_to_key +: 016694 remote_car_rocker_x_to_key: +0x4550 016695 fetch 1 ,mem_rocker_x_status +0x4551 016696 branch rocker_to_queue_set_0 ,blank +0x4552 016697 increase -1 ,pdata +0x4553 016698 branch remote_car_rocker_to_key +: 016699 remote_car_rocker_y_to_key: +0x4554 016700 fetch 1 ,mem_rocker_y_status +0x4555 016701 branch rocker_to_queue_set_2 ,blank +0x4556 016702 increase 1 ,pdata +: 016703 remote_car_rocker_to_key: +0x4557 016704 copy pdata ,queue +0x4558 016705 arg 1 ,rega +0x4559 016706 branch remote_car_send_key_data +: 016708 rocker_to_queue_set_0: +0x455a 016709 arg 0 ,queue +0x455b 016710 arg 0 ,rega +0x455c 016711 branch remote_car_send_key_data +: 016712 rocker_to_queue_set_2: +0x455d 016713 arg 2 ,queue +0x455e 016714 arg 0 ,rega +0x455f 016715 branch remote_car_send_key_data +: 016717 remote_car_send_key_data: +0x4560 016718 copy rega ,pdata +0x4561 016719 store 1 ,mem_remote_key_status +0x4562 016720 fetch 1 ,mem_remote_car_24g_auto_work_step +0x4563 016721 beq power_on ,g24_auto_pair_start +0x4564 016722 fetch 2 ,mem_remote_car_no_data_timeout +0x4565 016723 store 2 ,mem_remote_car_no_data_timer +0x4566 016724 fetch 1 ,mem_remote_key_status +0x4567 016725 branch remote_car_key_is_release ,blank +: 016726 remote_car_key_is_press: +0x4568 016727 bpatch patch1e_3 ,mem_patch1e +0x4569 016728 arg 0 ,rega +0x456a 016729 call ui_led_on_global +: 016730 remote_car_attack_key_press: +0x456b 016731 copy queue ,pdata +0x456c 016732 beq 4 ,remote_car_send_attack_key4_press +0x456d 016733 beq 5 ,remote_car_send_attack_key5_press +0x456e 016734 beq 6 ,remote_car_send_fire_key6_press +: 016737 remote_car_motor_key_press: +0x456f 016738 call remote_car_device_layout_select +0x4570 016739 beq control_f_b_ten ,remote_car_single_motor_key_is_press +0x4571 016740 beq control_l_r_ten ,remote_car_double_motor_key_press +0x4572 016741 beq control_l_r_lr ,remote_car_single_motor_key_is_press +0x4573 016742 rtn +: 016744 remote_car_single_motor_key_is_press: +0x4574 016745 copy queue ,pdata +0x4575 016746 beq 0 ,remote_car_send_motor1_key0_press +0x4576 016747 beq 1 ,remote_car_send_motor1_key1_press +0x4577 016748 beq 2 ,remote_car_send_motor2_key2_press +0x4578 016749 beq 3 ,remote_car_send_motor2_key3_press +0x4579 016750 rtn +: 016752 remote_car_double_motor_key_press: +0x457a 016753 copy queue ,pdata +0x457b 016754 beq 0 ,remote_car_send_double_motor_key0_press +0x457c 016755 beq 1 ,remote_car_send_double_motor_key1_press +0x457d 016756 beq 2 ,remote_car_send_double_motor_key2_press +0x457e 016757 beq 3 ,remote_car_send_double_motor_key3_press +0x457f 016758 rtn +: 016760 remote_car_key_is_release: +0x4580 016761 bpatch patch1e_4 ,mem_patch1e +0x4581 016762 arg 0 ,rega +0x4582 016763 call ui_led_off_global +: 016764 remote_car_attack_key_release: +0x4583 016765 copy queue ,pdata +0x4584 016766 beq 4 ,remote_car_send_attack_key4_rel +0x4585 016767 beq 5 ,remote_car_send_attack_key5_rel +: 016770 remote_car_motor_key_release: +0x4586 016771 call remote_car_device_layout_select +0x4587 016772 beq control_f_b_ten ,remote_car_single_motor_key_rel +0x4588 016773 beq control_l_r_ten ,remote_car_double_motor_key_rel +0x4589 016774 beq control_l_r_lr ,remote_car_single_motor_key_rel +0x458a 016775 rtn +: 016777 remote_car_device_layout_select: +0x458b 016778 fetch 1 ,mem_remote_car_config_layout +0x458c 016779 fetcht 1 ,mem_remote_car_config_key_map +0x458d 016780 ior temp ,pdata +0x458e 016781 rtn +: 016784 remote_car_send_motor1_key0_press: +0x458f 016785 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x4590 016786 branch remote_car_send_key +: 016787 remote_car_send_motor1_key1_press: +0x4591 016788 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x4592 016789 branch remote_car_send_key +: 016790 remote_car_send_motor2_key2_press: +0x4593 016791 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x4594 016792 branch remote_car_send_key +: 016793 remote_car_send_motor2_key3_press: +0x4595 016794 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x4596 016795 branch remote_car_send_key +: 016798 remote_car_send_double_motor_key0_press: +0x4597 016799 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x4598 016800 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x4599 016801 branch remote_car_send_key +: 016802 remote_car_send_double_motor_key1_press: +0x459a 016803 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x459b 016804 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x459c 016805 branch remote_car_send_key +: 016806 remote_car_send_double_motor_key2_press: +0x459d 016807 jam motor_negative ,mem_remote_car_24g_motor1_payload +0x459e 016808 jam motor_positive ,mem_remote_car_24g_motor2_payload +0x459f 016809 branch remote_car_send_key +: 016810 remote_car_send_double_motor_key3_press: +0x45a0 016811 jam motor_positive ,mem_remote_car_24g_motor1_payload +0x45a1 016812 jam motor_negative ,mem_remote_car_24g_motor2_payload +0x45a2 016813 branch remote_car_send_key +: 016816 remote_car_send_attack_key4_press: +0x45a3 016817 jam motor_positive ,mem_remote_car_24g_motor3_payload +0x45a4 016818 branch remote_car_send_key +: 016819 remote_car_send_attack_key5_press: +0x45a5 016820 jam motor_negative ,mem_remote_car_24g_motor3_payload +0x45a6 016821 branch remote_car_send_key +: 016823 remote_car_send_fire_key6_press: +0x45a7 016824 jam 0x01 ,mem_remote_car_24g_fire_send_payload +0x45a8 016825 branch remote_car_send_attack +: 016827 remote_car_single_motor_key_rel: +0x45a9 016828 copy queue ,pdata +0x45aa 016829 beq 0 ,remote_car_send_motor1_key0_rel +0x45ab 016830 beq 1 ,remote_car_send_motor1_key1_rel +0x45ac 016831 beq 2 ,remote_car_send_motor2_key2_rel +0x45ad 016832 beq 3 ,remote_car_send_motor2_key3_rel +0x45ae 016833 rtn +: 016835 remote_car_double_motor_key_rel: +0x45af 016836 copy queue ,pdata +0x45b0 016837 beq 0 ,remote_car_send_double_motor_key0_rel +0x45b1 016838 beq 1 ,remote_car_send_double_motor_key1_rel +0x45b2 016839 beq 2 ,remote_car_send_double_motor_key2_rel +0x45b3 016840 beq 3 ,remote_car_send_double_motor_key3_rel +0x45b4 016841 rtn +: 016843 remote_car_send_motor1_key0_rel: +: 016844 remote_car_send_motor1_key1_rel: +0x45b5 016845 jam motor_stop ,mem_remote_car_24g_motor1_payload +0x45b6 016846 branch remote_car_send_key +: 016847 remote_car_send_motor2_key2_rel: +: 016848 remote_car_send_motor2_key3_rel: +0x45b7 016849 jam motor_stop ,mem_remote_car_24g_motor2_payload +0x45b8 016850 branch remote_car_send_key +: 016852 remote_car_send_double_motor_key0_rel: +: 016853 remote_car_send_double_motor_key1_rel: +: 016854 remote_car_send_double_motor_key2_rel: +: 016855 remote_car_send_double_motor_key3_rel: +0x45b9 016856 jam motor_stop ,mem_remote_car_24g_motor1_payload +0x45ba 016857 jam motor_stop ,mem_remote_car_24g_motor2_payload +0x45bb 016858 branch remote_car_send_key +: 016860 remote_car_send_attack_key4_rel: +: 016861 remote_car_send_attack_key5_rel: +0x45bc 016862 jam motor_stop ,mem_remote_car_24g_motor3_payload +0x45bd 016863 branch remote_car_send_key +: 016865 remote_car_send_key: +0x45be 016866 arg mem_remote_car_24g_motor_packet ,rega +0x45bf 016867 branch queue_push +: 016868 remote_car_send_attack: +0x45c0 016869 arg mem_remote_car_24g_fire_packet ,rega +0x45c1 016870 branch queue_push +: 016872 remote_car_g24_package_data: +0x45c2 016873 fetch 1 ,mem_remote_car_24g_pair_success_flag +0x45c3 016874 beq work_paired ,remote_car_g24_send_empty +0x45c4 016875 arg mem_remote_car_24g_tx_temp ,rega +0x45c5 016876 call queue_pop +0x45c6 016877 nbranch remote_car_moto_data ,user +: 016878 remote_car_g24_package_data_continue: +0x45c7 016879 arg mem_remote_car_24g_tx_temp ,contr +0x45c8 016880 ifetch 1 ,contr +0x45c9 016881 copy pdata ,rega +0x45ca 016882 arg mem_remote_car_24g_tx_temp + 1 ,regb +0x45cb 016885 rtn +: 016887 remote_car_g24_send_empty: +0x45cc 016888 jam 0 ,mem_remote_car_24g_pair_success_flag +0x45cd 016889 enable user +0x45ce 016890 arg 1 ,rega +0x45cf 016891 arg mem_remote_car_empty_packet ,regb +0x45d0 016892 rtn +: 016894 remote_car_moto_data: +0x45d1 016895 fetch 1 ,mem_remote_car_24g_tx_temp + 3 +0x45d2 016896 beq car_cmd_l_r_motor_control ,remote_car_moto_data_next +0x45d3 016897 beq car_cmd_f_b_motor_control ,remote_car_moto_data_next +0x45d4 016898 rtn +: 016899 remote_car_moto_data_next: +0x45d5 016900 fetch 1 ,mem_remote_car_24g_tx_temp + 6 +0x45d6 016901 nbranch remote_car_moto_data_enable_user ,blank +0x45d7 016902 fetch 1 ,mem_remote_car_24g_tx_temp + 8 +0x45d8 016903 nbranch remote_car_moto_data_enable_user ,blank +0x45d9 016904 fetch 1 ,mem_remote_car_24g_tx_temp + 10 +0x45da 016905 nbranch remote_car_moto_data_enable_user ,blank +0x45db 016906 rtn +: 016907 remote_car_moto_data_enable_user: +0x45dc 016908 enable user +0x45dd 016909 branch remote_car_g24_package_data_continue +: 016917 shutter_init: +0x45de 016918 rtn wake +0x45df 016919 hfetch 1 ,core_gpio_sel1 +0x45e0 016920 and_into 0xfc ,pdata +0x45e1 016921 hstore 1 ,core_gpio_sel1 +0x45e2 016922 setarg shutter_le_before_hibernate +0x45e3 016923 store 2 ,mem_cb_before_hibernate +0x45e4 016925 setarg shutter_process_lpm_before +0x45e5 016926 store 2 ,mem_cb_before_lpm +0x45e6 016928 setarg app_enter_hibernate +0x45e7 016929 store 2 ,mem_cb_discovry_timeout +0x45e8 016931 setarg shutter_process_idle +0x45e9 016932 store 2 ,mem_cb_idle_process +0x45ea 016934 setarg shutter_process_bb_event +0x45eb 016935 store 2 ,mem_cb_bb_event_process +0x45ec 016937 setarg shutter_le_scale_lpm_lock +0x45ed 016938 store 2 ,mem_cb_check_wakelock +0x45ee 016940 setarg ble_shutter_receive_data +0x45ef 016941 store 2 ,mem_cb_att_write +0x45f0 016943 setarg shutter_le_bb_event_timer +0x45f1 016944 store 2 ,mem_cb_event_timer +0x45f2 016946 setarg shutter_key_change +0x45f3 016947 store 2 ,mem_cb_shutter_keycan +0x45f4 016949 setarg shutter_soft_swtich_power_on +0x45f5 016950 store 2 ,mem_shutter_soft_switch_poweron_callback_function +0x45f6 016951 setarg shutter_soft_swtich_power_off +0x45f7 016952 store 2 ,mem_shutter_soft_switch_poweroff_callback_function +0x45f8 016954 call le_modified_name +0x45f9 016955 call shutter_load_bluetooth_config_by_user_config +0x45fa 016956 call shutter_init_bluetooth_config +0x45fb 016957 call shutter_init_param +0x45fc 016958 call keyscan_key_init +0x45fd 016959 call shutter_load_buffer_config_form_datarom +0x45fe 016960 call queue_init +0x45ff 016961 call ui_led_init_global +0x4600 016962 call shutter_load_bluetooth_config +0x4601 016963 call shutter_load_bluetooth_config_by_eeprom +0x4602 016965 bpatch patch1e_5 ,mem_patch1e +0x4603 016966 call classic_shutter_load_reconn_info +0x4604 016967 fetch 1 ,mem_shutter_hard_soft_switch_case +0x4605 016968 beq hard_switch ,shutter_hart_swtich_power_on +0x4606 016969 fetch 1 ,mem_shutter_soft_switch_button_gpio +0x4607 016970 store 1 ,mem_ui_button_gpio +0x4608 016971 branch ui_soft_swtich_init +: 016974 shutter_hart_swtich_power_on: +0x4609 016975 jam ui_button_gpio_disable ,mem_ui_button_gpio +0x460a 016976 jam ss_state_power_on ,mem_shutter_soft_switch_power_state +0x460b 016977 branch shutter_start_reconnect +: 016981 shutter_le_scale_lpm_lock: +0x460c 016982 fetch 1 ,mem_shutter_soft_switch_power_state +0x460d 016983 beq ss_state_power_off ,app_get_lpm_wake_lock +0x460e 016984 call l2cap_malloc_get_full_map +0x460f 016985 fetch 1 ,mem_used_map +0x4610 016986 nbranch app_get_lpm_wake_lock ,blank +0x4611 016987 branch app_put_lpm_wake_lock +: 016991 shutter_process_bb_event: +0x4612 016992 copy regc ,pdata +0x4613 016994 beq bt_evt_bb_connected ,classic_shutter_process_baseband_connect +0x4614 016995 beq bt_evt_bb_disconnected ,classic_shutter_process_baseband_disconnect +0x4615 016996 beq bt_evt_reconn_failed ,classic_shutter_process_reconnect_failed +0x4616 016997 beq bt_evt_setup_complete ,classic_shutter_process_setup_complete +0x4617 016998 beq bt_evt_hid_connected ,classic_shutter_process_hid_connect +0x4618 016999 beq bt_evt_hid_disconnected ,classic_shutter_process_hid_disconnect +0x4619 017000 beq bt_evt_hid_handshake ,classic_shutter_process_hid_handshake +0x461a 017001 beq bt_evt_reconn_page_timeout ,classic_shutter_process_reconnect_page_timeout +0x461b 017002 beq bt_evt_virtual_cable_unplug ,classic_shutter_process_virtual_cable_unplug +0x461c 017003 beq bt_evt_remote_unsniff ,classic_shutter_process_remote_unsniff +0x461d 017004 beq bt_evt_store_nvram ,classic_shutter_process_store_reconnect_information +0x461e 017006 beq bt_evt_le_connected ,ble_shutter_process_baseband_connect +0x461f 017007 beq bt_evt_le_disconnected ,ble_shutter_process_baseband_disconnect +0x4620 017008 beq bt_evt_le_reconnect_complete ,ble_shutter_process_reconnect_complete +0x4621 017009 beq bt_evt_le_parse_conn_papa_update_rsp ,ble_shutter_process_parse_connect_parameter_update_response +0x4622 017011 beq bt_evt_button_long_pressed ,shutter_process_soft_swtich_button_long_press +0x4623 017012 beq bt_evt_button_down ,shutter_process_soft_swtich_button_down +0x4624 017013 beq bt_evt_button_up ,shutter_process_soft_swtich_button_up +0x4625 017014 rtn +: 017019 classic_shutter_process_baseband_connect: +0x4626 017020 jam 0 ,mem_classic_shutter_hid_disconn_count +0x4627 017021 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x4628 017022 rtn +: 017025 classic_shutter_process_baseband_disconnect: +0x4629 017026 call classic_shutter_disconnect_clear_flag +0x462a 017027 branch classic_shutter_process_reconnect_failed +: 017029 classic_shutter_disconnect_clear_flag: +0x462b 017030 jam app_handshake_null ,mem_app_handshake_flag +0x462c 017031 jam 0 ,mem_hid_handshake_timer_count +0x462d 017032 jam 0 ,mem_unsniff2sniff_timer_count +0x462e 017033 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x462f 017034 jam 0 ,mem_classic_shutter_hid_disconn_count +0x4630 017035 branch queue_init +: 017038 classic_shutter_process_reconnect_failed: +0x4631 017039 call app_disconn_reason_clear +0x4632 017040 branch shutter_start_bluetooth_discovery +: 017043 classic_shutter_process_setup_complete: +0x4633 017044 call shutter_stop_bluetooth_discovery +0x4634 017045 branch app_led_stop_blink +: 017048 classic_shutter_process_hid_connect: +0x4635 017049 setarg hid_handshake_timeout +0x4636 017050 store 1 ,mem_hid_handshake_timer_count +0x4637 017051 rtn +: 017054 classic_shutter_process_hid_disconnect: +0x4638 017055 jam 0 ,mem_classic_shutter_cable_unplug_conut +0x4639 017056 setarg flag_shutter_hid_disconn_timeout +0x463a 017057 store 1 ,mem_classic_shutter_hid_disconn_count +0x463b 017058 rtn +: 017061 classic_shutter_process_hid_handshake: +0x463c 017062 fetch 1 ,mem_app_handshake_flag +0x463d 017063 rtneq app_handshake_done +0x463e 017064 jam app_handshake_done ,mem_app_handshake_flag +0x463f 017065 call app_lpm_mult_enable +0x4640 017066 call app_store_reconn_info +0x4641 017067 call shutter_stop_bluetooth_discovery +0x4642 017068 call app_led_off +0x4643 017069 branch app_bt_enter_sniff +: 017072 classic_shutter_process_reconnect_page_timeout: +0x4644 017073 branch classic_shutter_process_reconnect_failed +: 017076 classic_shutter_process_virtual_cable_unplug: +0x4645 017077 setarg flag_shutter_cable_unplug_timeout +0x4646 017078 store 1 ,mem_classic_shutter_cable_unplug_conut +0x4647 017079 rtn +: 017082 classic_shutter_process_remote_unsniff: +0x4648 017083 branch app_start_auto_sniff +: 017087 classic_shutter_process_store_reconnect_information: +0x4649 017088 arg nvram_eeprom_offset ,regb +0x464a 017089 fetch 1 ,mem_nv_data_number +0x464b 017090 mul32 pdata ,34 ,temp +0x464c 017091 fetch 2 ,mem_nv_data_ptr +0x464d 017092 copy pdata ,rega +0x464e 017093 branch iicd_write_eep_data +: 017095 classic_shutter_load_reconn_info: +0x464f 017096 arg nvram_eeprom_offset ,regb +0x4650 017097 fetch 1 ,mem_shutter_bluetooth_type +0x4651 017098 rtnbit0 classic_shutter +0x4652 017099 fetch 1 ,mem_nv_data_number +0x4653 017100 rtn blank +0x4654 017101 mul32 pdata ,34 ,temp +0x4655 017102 fetch 2 ,mem_nv_data_ptr +0x4656 017103 copy pdata ,rega +0x4657 017104 branch iicd_read_eep_data +: 017108 ble_shutter_process_baseband_connect: +0x4658 017109 call shutter_stop_bluetooth_discovery +0x4659 017110 setarg 0 +0x465a 017111 store 2 ,mem_ble_shutter_reconn_timer +0x465b 017112 branch app_led_off +: 017115 ble_shutter_process_baseband_disconnect: +0x465c 017116 call queue_init +0x465d 017117 jam 0 ,mem_ble_shutter_enable_notify +0x465e 017118 branch shutter_start_reconnect +: 017121 ble_shutter_process_reconnect_complete: +0x465f 017122 call queue_init +0x4660 017123 jam 1 ,mem_ble_shutter_enable_notify +0x4661 017124 fetch 8 ,mem_ble_shutter_interval_min +0x4662 017125 store 8 ,mem_le_interval_min +0x4663 017126 call app_lpm_mult_enable +0x4664 017127 branch le_l2cap_tx_update_req +: 017130 ble_shutter_process_parse_connect_parameter_update_response: +0x4665 017131 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x4666 017132 rtneq ble_signaling_connect_parameter_update_accepted +0x4667 017133 fetch 8 ,mem_ble_shutter_interval_min_new +0x4668 017134 rtn blank +0x4669 017135 store 8 ,mem_le_interval_min +0x466a 017136 branch le_l2cap_tx_update_req +: 017140 shutter_process_soft_swtich_button_long_press: +0x466b 017141 branch ui_soft_switch_botton_long_press +: 017143 shutter_process_soft_swtich_button_down: +0x466c 017144 fetch 1 ,mem_shutter_hard_soft_switch_case +0x466d 017145 rtneq hard_switch +0x466e 017146 fetch 1 ,mem_shutter_soft_switch_power_state +0x466f 017147 rtnne ss_state_power_on +0x4670 017148 call shutter_store_currenct_led_state +0x4671 017149 branch app_led_on +: 017151 shutter_store_currenct_led_state: +0x4672 017152 jam 1 ,mem_shutter_soft_swtich_botton_down +0x4673 017153 arg 11 ,loopcnt +0x4674 017154 arg mem_shutter_soft_swtich_led_struct_temp ,contw +0x4675 017155 arg mem_shutter_led_struct_app_led ,contr +0x4676 017156 branch memcpy +: 017158 shutter_process_soft_swtich_button_up: +0x4677 017159 fetch 1 ,mem_shutter_hard_soft_switch_case +0x4678 017160 rtneq hard_switch +0x4679 017161 fetch 1 ,mem_shutter_soft_switch_power_state +0x467a 017162 beq ss_state_power_on ,shutter_load_currenct_led_state +0x467b 017163 branch ui_soft_switch_botton_up +: 017165 shutter_load_currenct_led_state: +0x467c 017166 fetch 1 ,mem_shutter_soft_swtich_botton_down +0x467d 017167 rtnne 1 +0x467e 017168 jam 0 ,mem_shutter_soft_swtich_botton_down +0x467f 017169 fetch 2 ,mem_ui_state_map +0x4680 017170 bbit1 ui_state_bt_connected ,app_led_off +0x4681 017171 bbit1 ui_state_ble_connected ,app_led_off +0x4682 017172 arg 11 ,loopcnt +0x4683 017173 arg mem_shutter_soft_swtich_led_struct_temp ,contr +0x4684 017174 arg mem_shutter_led_struct_app_led ,contw +0x4685 017175 branch memcpy +: 017180 shutter_le_bb_event_timer: +0x4686 017182 call shutter_check_sleep_timer +0x4687 017185 call shutter_check_power_off_timer +0x4688 017188 call classic_shutter_check_unplug_timer +0x4689 017189 call classic_shutter_hid_handshake_timer +0x468a 017190 call classic_shutter_hid_disconn_timer +0x468b 017193 branch ble_shutter_reconn_timer +: 017197 shutter_check_sleep_timer: +0x468c 017198 arg mem_shutter_sleep_timer ,regc +0x468d 017199 arg shutter_sleep_timeout ,regb +0x468e 017200 branch timer_single_step_2b +: 017201 shutter_sleep_timeout: +0x468f 017202 jam ss_state_power_off ,mem_shutter_soft_switch_power_state +0x4690 017203 call app_led_off +0x4691 017204 call shutter_disconnect_current_connection +0x4692 017205 branch shutter_wait_power_off +: 017208 shutter_check_power_off_timer: +0x4693 017209 arg mem_shutter_power_off_timer ,regc +0x4694 017210 arg shutter_check_power_off_timeout ,regb +0x4695 017211 branch timer_single_step +: 017213 shutter_check_power_off_timeout: +0x4696 017214 fetch 2 ,mem_ui_state_map +0x4697 017215 bbit1 ui_state_ble_connected ,shutter_wait_power_off +0x4698 017216 bbit1 ui_state_bt_connected ,shutter_wait_power_off +0x4699 017217 fetch 1 ,mem_shutter_led_struct_app_led_type +0x469a 017218 beq ui_led_state_blink_start ,shutter_wait_power_off +0x469b 017219 beq ui_led_state_blink_lighting ,shutter_wait_power_off +0x469c 017220 beq ui_led_state_blink_darking ,shutter_wait_power_off +0x469d 017221 branch app_enter_hibernate +: 017225 classic_shutter_check_unplug_timer: +0x469e 017226 arg mem_classic_shutter_cable_unplug_conut ,regc +0x469f 017227 arg classic_shutter_unplug_timeout ,regb +0x46a0 017228 branch timer_single_step +: 017230 classic_shutter_unplug_timeout: +0x46a1 017231 fetch 1 ,mem_control_tasks +0x46a2 017232 set1 l2cap_disconnect_interrupt ,pdata +0x46a3 017233 set1 l2cap_disconnect_control ,pdata +0x46a4 017234 store 1 ,mem_control_tasks +0x46a5 017235 rtn +: 017237 classic_shutter_hid_handshake_timer: +0x46a6 017238 arg mem_hid_handshake_timer_count ,regc +0x46a7 017239 arg classic_shutter_process_hid_handshake ,regb +0x46a8 017240 branch timer_single_step +: 017242 classic_shutter_hid_disconn_timer: +0x46a9 017243 arg mem_classic_shutter_hid_disconn_count ,regc +0x46aa 017244 arg app_bt_disconnect ,regb +0x46ab 017245 branch timer_single_step +: 017250 ble_shutter_reconn_timer: +0x46ac 017251 fetch 1 ,mem_shutter_soft_switch_power_state +0x46ad 017252 rtnne ss_state_power_on +0x46ae 017253 arg mem_ble_shutter_reconn_timer ,regc +0x46af 017254 arg shutter_start_bluetooth_discovery ,regb +0x46b0 017255 branch timer_single_step_2b +: 017258 shutter_process_idle: +0x46b1 017259 call shutter_send_data_to_master +0x46b2 017260 branch keyscan_key_process +: 017263 shutter_process_lpm_before: +0x46b3 017264 branch keyscan_process_lpm_before +: 017266 shutter_le_before_hibernate: +0x46b4 017267 call gpio_set_before_lpm_common +0x46b5 017268 branch shutter_process_lpm_before +: 017274 shutter_stop_bluetooth_discovery: +0x46b6 017275 fetch 1 ,mem_shutter_bluetooth_type +0x46b7 017276 bbit1 classic_shutter ,classic_shutter_stop_bluetooth_discovery +0x46b8 017277 bbit1 ble_shutter ,ble_shutter_stop_bluetooth_discovery +0x46b9 017278 rtn +: 017280 ble_shutter_stop_bluetooth_discovery: +0x46ba 017281 fetch 2 ,mem_ble_shutter_connect_timeout +0x46bb 017282 store 2 ,mem_shutter_sleep_timeout +0x46bc 017283 store 2 ,mem_shutter_sleep_timer +0x46bd 017284 branch app_ble_stop_adv +: 017286 classic_shutter_stop_bluetooth_discovery: +0x46be 017287 fetch 2 ,mem_classic_shutter_connect_timeout +0x46bf 017288 store 2 ,mem_shutter_sleep_timeout +0x46c0 017289 store 2 ,mem_shutter_sleep_timer +0x46c1 017290 branch app_bt_stop_discovery +: 017292 shutter_start_bluetooth_discovery: +0x46c2 017293 fetch 1 ,mem_shutter_soft_switch_power_state +0x46c3 017294 rtnne ss_state_power_on +0x46c4 017295 fetch 1 ,mem_shutter_bluetooth_type +0x46c5 017296 bbit1 classic_shutter ,classic_shutter_start_discovery +0x46c6 017297 bbit1 ble_shutter ,ble_shutter_start_discovery +0x46c7 017298 rtn +: 017300 classic_shutter_start_discovery: +0x46c8 017301 fetch 2 ,mem_classic_shutter_discovery_timeout , +0x46c9 017302 store 2 ,mem_shutter_sleep_timeout +0x46ca 017303 store 2 ,mem_shutter_sleep_timer +0x46cb 017304 branch app_bt_start_discovery_short +: 017306 ble_shutter_start_discovery: +0x46cc 017307 fetch 2 ,mem_ui_state_map +0x46cd 017308 rtnbit1 ui_state_ble_connected +0x46ce 017309 fetch 2 ,mem_ble_shutter_discovery_timeout +0x46cf 017310 store 2 ,mem_shutter_sleep_timeout +0x46d0 017311 store 2 ,mem_shutter_sleep_timer +0x46d1 017312 fetch 2 ,mem_ble_shutter_discovery_adv_interval +0x46d2 017313 call shutter_ble_adv_interval_set +0x46d3 017314 call app_led_start_blink +0x46d4 017315 fetch 4 ,mem_ble_shutter_discovery_blink_on_time +0x46d5 017316 store 4 ,mem_shutter_led_struct_app_led_on_time +0x46d6 017317 fetch 2 ,mem_ui_state_map +0x46d7 017318 rtnbit1 ui_state_ble_adv +0x46d8 017319 branch app_ble_start_adv +: 017322 shutter_start_reconnect: +0x46d9 017323 fetch 1 ,mem_shutter_soft_switch_power_state +0x46da 017324 rtnne ss_state_power_on +0x46db 017325 fetch 1 ,mem_shutter_bluetooth_type +0x46dc 017326 bbit1 classic_shutter ,classic_shutter_start_reconnect +0x46dd 017327 bbit1 ble_shutter ,ble_shutter_start_reconnect +0x46de 017328 rtn +: 017330 classic_shutter_start_reconnect: +0x46df 017331 call app_check_reconn_target +0x46e0 017332 branch shutter_start_bluetooth_discovery ,blank +0x46e1 017333 call app_led_on +0x46e2 017334 call app_bt_stop_discovery +0x46e3 017335 branch app_bt_start_reconnect +: 017337 ble_shutter_start_reconnect: +0x46e4 017338 fetch 2 ,mem_ble_shutter_reconn_timer +0x46e5 017339 fetcht 2 ,mem_ble_shutter_reconn_timeout +0x46e6 017340 storet 2 ,mem_ble_shutter_reconn_timer +0x46e7 017341 nrtn blank +0x46e8 017342 fetch 2 ,mem_ble_shutter_reconn_dav_interval +0x46e9 017343 call shutter_ble_adv_interval_set +0x46ea 017344 call app_led_start_blink +0x46eb 017345 fetch 4 ,mem_ble_shutter_reconn_blink_on_time +0x46ec 017346 store 4 ,mem_shutter_led_struct_app_led_on_time +0x46ed 017347 fetch 2 ,mem_ui_state_map +0x46ee 017348 rtnbit1 ui_state_ble_adv +0x46ef 017349 branch app_ble_start_adv +: 017352 shutter_ble_adv_interval_set: +0x46f0 017353 store 2 ,mem_lpm_interval +0x46f1 017354 increase -4 ,pdata +0x46f2 017355 store 2 ,mem_le_adv_interval +0x46f3 017356 rtn +: 017359 shutter_disconnect_current_connection: +0x46f4 017360 fetch 2 ,mem_ui_state_map +0x46f5 017361 bbit1 ui_state_ble_connected ,app_ble_disconnect +0x46f6 017362 bbit1 ui_state_bt_connected ,app_bt_disconnect +0x46f7 017363 branch shutter_stop_bluetooth_discovery +: 017367 app_check_reconn_target: +0x46f8 017368 fetch 1 ,mem_nv_data_number +0x46f9 017369 copy pdata ,loopcnt +0x46fa 017370 fetch 2 ,mem_nv_data_ptr +0x46fb 017371 copy pdata ,rega +: 017372 app_check_reconn_target_loop: +0x46fc 017373 ifetch 2 ,rega +0x46fd 017374 beq 0 ,found_reconn_device +0x46fe 017375 increase nv_data_len ,rega +0x46ff 017376 loop app_check_reconn_target_loop +0x4700 017377 branch enable_blank +: 017379 found_reconn_device: +0x4701 017380 ifetch 6 ,contr +0x4702 017381 store 6 ,mem_hci_plap +0x4703 017382 increase 10 ,contr +0x4704 017383 arg mem_link_key ,contw +0x4705 017384 call memcpy16 +0x4706 017385 call check_link_key_load +0x4707 017386 branch disable_blank +: 017392 shutter_check_data_enable: +0x4708 017393 call disable_user +0x4709 017394 fetch 2 ,mem_ui_state_map +0x470a 017395 bbit1 ui_state_bt_connected ,shutter_check_bt_data_enable +0x470b 017396 bbit1 ui_state_ble_connected ,shutter_check_ble_data_enable +0x470c 017397 rtn +: 017399 shutter_check_bt_data_enable: +0x470d 017400 fetch 1 ,mem_hid_interrupt_state +0x470e 017401 rtnne 0x3f +0x470f 017402 branch enable_user +: 017404 shutter_check_ble_data_enable: +0x4710 017405 fetch 1 ,mem_ble_shutter_enable_notify +0x4711 017406 rtn blank +0x4712 017407 branch enable_user +: 017412 shutter_check_bluetooth_conn: +0x4713 017413 call disable_user +0x4714 017414 fetch 2 ,mem_ui_state_map +0x4715 017415 rtnbit1 ui_state_bt_connected +0x4716 017416 rtnbit1 ui_state_ble_connected +0x4717 017417 branch enable_user +: 017421 shutter_change_bluetooth_status_bt_disconn: +0x4718 017422 fetch 1 ,mem_shutter_bluetooth_type +0x4719 017423 bbit1 classic_shutter ,classic_shutter_change_bluetooth_status_bt_disconn +0x471a 017424 bbit1 ble_shutter ,ble_shutter_change_bluetooth_status_bt_disconn +0x471b 017425 rtn +: 017427 classic_shutter_change_bluetooth_status_bt_disconn: +0x471c 017428 fetch 1 ,mem_scan_mode +0x471d 017429 rtnne 0x03 +0x471e 017430 branch shutter_start_reconnect +: 017432 ble_shutter_change_bluetooth_status_bt_disconn: +0x471f 017433 branch shutter_start_reconnect +: 017436 shutter_check_send_data: +0x4720 017437 disable user2 +0x4721 017438 fetch 2 ,mem_shutter_sleep_timeout +0x4722 017439 store 2 ,mem_shutter_sleep_timer +0x4723 017441 call shutter_check_bluetooth_conn +0x4724 017442 branch shutter_change_bluetooth_status_bt_disconn ,user +0x4725 017444 call shutter_check_data_enable +0x4726 017445 nrtn user +0x4727 017446 enable user2 +0x4728 017447 rtn +: 017451 shutter_key_change: +0x4729 017452 call shutter_check_send_data +0x472a 017453 nrtn user2 +0x472b 017454 deposit rega +0x472c 017455 branch shutter_key_release ,blank +: 017456 shutter_key_press: +0x472d 017457 call app_led_on +0x472e 017458 arg mem_key0_press ,regc +0x472f 017459 branch push_queue_press_or_release +: 017461 shutter_key_release: +0x4730 017462 call app_led_off +0x4731 017463 arg mem_key0_release ,regc +: 017465 push_queue_press_or_release: +0x4732 017466 arg max_queue_num ,pdata +0x4733 017467 imul32 queue ,pdata +0x4734 017468 iadd regc ,regc +: 017471 push_buffer_in_queue: +0x4735 017472 ifetch 1 ,regc +0x4736 017473 rtn blank +0x4737 017474 call queue_push_one_byte +0x4738 017475 increase 1 ,regc +0x4739 017476 branch push_buffer_in_queue +: 017479 shutter_send_data_to_master: +0x473a 017480 fetch 2 ,mem_ui_state_map +0x473b 017481 bbit1 ui_state_ble_connected ,pop_queue_to_ble_data +0x473c 017482 bbit1 ui_state_bt_connected ,pop_queue_to_classic_data +0x473d 017483 rtn +: 017485 pop_queue_to_ble_data: +0x473e 017486 call le_fifo_check_nearly_full +0x473f 017487 nrtn blank +0x4740 017488 call queue_pop_one_byte +0x4741 017489 nrtn user +0x4742 017490 pincrease -1 +0x4743 017491 mul32 pdata ,shutter_ble_data_buffer ,pdata +0x4744 017492 arg mem_ble_data_buffer1 ,temp +0x4745 017493 iadd temp ,contr +: 017494 le_send_notify_from_list: +0x4746 017495 ifetch 1 ,contr +0x4747 017496 copy pdata ,rega +0x4748 017497 ifetcht 2 ,contr +0x4749 017498 call store_contr +0x474a 017499 call le_att_malloc_tx_notify +0x474b 017500 copy rega ,loopcnt +0x474c 017501 call get_contr +0x474d 017502 branch memcpy +: 017505 pop_queue_to_classic_data: +0x474e 017506 call l2cap_malloc_is_fifo_nearly_full +0x474f 017507 nrtn blank +0x4750 017508 call queue_pop_one_byte +0x4751 017509 nrtn user +0x4752 017510 pincrease -1 +0x4753 017511 mul32 pdata ,shutter_classic_data_buffer ,pdata +0x4754 017512 arg mem_classic_data_buffer1 ,temp +0x4755 017513 iadd temp ,contr +0x4756 017514 ifetch 5 ,contr +0x4757 017515 store 5 ,mem_classic_data_buffer +: 017516 classic_send_hid_data: +0x4758 017517 fetch 1 ,mem_classic_data_buffer +0x4759 017518 copy pdata ,rega +0x475a 017519 call hid_malloc_tx_buff +0x475b 017520 fetch 2 ,mem_hid_int_remote_cid +0x475c 017521 istore 2 ,contw +0x475d 017522 setarg 0xa1 +0x475e 017523 istore 1 ,contw +0x475f 017524 fetch 4 ,mem_classic_data_buffer + 1 +0x4760 017525 istore 9 ,contw +0x4761 017526 rtn +: 017530 queue_push_one_byte: +0x4762 017531 store 1 ,mem_pdatatemp +0x4763 017532 arg mem_pdatatemp ,rega +0x4764 017533 branch queue_push +: 017535 queue_pop_one_byte: +0x4765 017536 arg mem_pdatatemp ,rega +0x4766 017537 call queue_pop +0x4767 017538 nrtn user +0x4768 017539 fetch 1 ,mem_pdatatemp +0x4769 017540 rtn +: 017543 ble_shutter_receive_data: +0x476a 017544 fetch 2 ,mem_le_att_handle +0x476b 017545 beq gatt_keyboard_write_handle ,ble_shutter_process_reconnect_complete +0x476c 017546 rtn +: 017548 shutter_init_param: +0x476d 017549 setarg 0x02 +0x476e 017550 store 1 ,mem_shutter_power_off_timeout +0x476f 017552 setarg 0x00200008 +0x4770 017553 store 4 ,mem_ble_shutter_interval_min +0x4771 017554 setarg 0x012c0005 +0x4772 017555 istore 4 ,contw +0x4773 017558 jam 0x17 ,mem_le_local_mtu +0x4774 017561 setarg 0x1b +0x4775 017562 store 2 ,mem_le_pairing_handle +0x4776 017563 call le_set_config_fixed_ltk +0x4777 017564 call le_set_fixed_ltk +0x4778 017565 call le_set_justwork +0x4779 017566 branch le_set_config_read_authentication +: 017569 shutter_load_buffer_config_form_datarom: +0x477a 017571 arg ble_key_value_list_size ,loopcnt +0x477b 017572 arg mem_ble_data_buffer1 ,contw +0x477c 017573 arg ble_shutter_key_value_list ,contr +0x477d 017574 call memcpy_fast +0x477e 017575 arg bt_key_value_list_size ,loopcnt +0x477f 017576 arg mem_classic_data_buffer1 ,contw +0x4780 017577 arg classic_shutter_key_value_list ,contr +0x4781 017578 branch memcpy_fast +: 017581 shutter_load_ble_gatt_form_datarom: +0x4782 017582 arg ble_gatt_list_size ,loopcnt +0x4783 017583 arg ble_shutter_gatt_list ,contr +0x4784 017584 branch memcpy_fast +: 017587 shutter_load_bt_sdp_form_datarom: +0x4785 017588 arg bt_sdp_list_size ,loopcnt +0x4786 017589 arg classic_shutter_sdp_list ,contr +0x4787 017590 branch memcpy_fast +: 017594 shutter_init_bluetooth_config: +0x4788 017595 call shutter_check_load_config_flag +0x4789 017596 nrtn user +0x478a 017597 fetch 1 ,mem_shutter_config_select_gpio1 +0x478b 017598 call shutter_init_bluetooth_config_gpio_input +0x478c 017599 fetch 1 ,mem_shutter_config_select_gpio2 +0x478d 017600 call shutter_init_bluetooth_config_gpio_input +0x478e 017601 fetch 1 ,mem_shutter_config_select_gpio3 +0x478f 017602 branch shutter_init_bluetooth_config_gpio_input +: 017604 shutter_init_bluetooth_config_gpio_input: +0x4790 017605 rtn blank +0x4791 017606 or pdata ,0x80 ,temp +0x4792 017607 branch gpio_config_input_nowake +: 017610 shutter_load_bluetooth_config: +0x4793 017611 call shutter_check_load_config_flag +0x4794 017612 nrtn user +0x4795 017613 call shutter_load_bluetooth_config_label +0x4796 017614 branch shutter_load_bluetooth_config_by_otp +: 017616 shutter_load_bluetooth_config_label: +0x4797 017617 arg 0 ,rega +0x4798 017618 fetch 1 ,mem_shutter_config_select_gpio1 +0x4799 017619 call shutter_load_bluetooth_config_read_gpio_input +0x479a 017620 nsetflag blank ,0 ,rega +0x479b 017621 fetch 1 ,mem_shutter_config_select_gpio2 +0x479c 017622 call shutter_load_bluetooth_config_read_gpio_input +0x479d 017623 nsetflag blank ,1 ,rega +0x479e 017624 fetch 1 ,mem_shutter_config_select_gpio3 +0x479f 017625 call shutter_load_bluetooth_config_read_gpio_input +0x47a0 017626 nsetflag blank ,2 ,rega +0x47a1 017627 copy rega ,pdata +0x47a2 017628 store 1 ,mem_shutter_config_label +0x47a3 017629 fetch 1 ,mem_shutter_config_size +0x47a4 017630 imul32 rega ,pdata +0x47a5 017631 fetcht 2 ,mem_shutter_config_otp_base_address +0x47a6 017632 iadd temp ,pdata +0x47a7 017633 store 2 ,mem_shutter_config_otp_addr +0x47a8 017634 rtn +: 017636 shutter_load_bluetooth_config_read_gpio_input: +0x47a9 017637 rtn blank +0x47aa 017638 or pdata ,0x80 ,temp +0x47ab 017639 call gpio_get_bit +0x47ac 017640 nbranch enable_blank ,true +0x47ad 017641 branch disable_blank +: 017644 shutter_check_load_config_flag: +0x47ae 017645 call disable_user +0x47af 017646 fetch 1 ,mem_shutter_config_user_size +0x47b0 017647 nrtn blank +0x47b1 017648 fetch 1 ,mem_shutter_config_enable +0x47b2 017649 rtn blank +0x47b3 017650 branch enable_user +: 017653 shutter_load_bluetooth_config_by_otp: +0x47b4 017654 call otp_enable_chgpump +0x47b5 017655 fetch 2 ,mem_shutter_config_otp_addr +0x47b6 017656 arg mem_shutter_config_data_temp ,rega +0x47b7 017657 fetcht 1 ,mem_shutter_config_size +0x47b8 017658 call otpd_read_data +0x47b9 017659 call otp_disable_chgpump +: 017660 shutter_load_bluetooth_config_store_name: +0x47ba 017661 fetch 1 ,mem_shutter_config_data_temp +0x47bb 017662 copy pdata ,loopcnt +0x47bc 017663 store 1 ,mem_le_name_len +0x47bd 017664 call memcpy_fast +0x47be 017665 fetch 1 ,mem_shutter_config_data_temp +0x47bf 017666 copy pdata ,loopcnt +0x47c0 017667 store 1 ,mem_local_name_length +0x47c1 017668 call memcpy_fast +0x47c2 017669 ifetch 1 ,contr +0x47c3 017670 store 1 ,mem_shutter_key_num +0x47c4 017671 ifetch 1 ,contr +0x47c5 017672 store 1 ,mem_shutter_hard_soft_switch_case +0x47c6 017673 rtn +: 017676 shutter_load_bluetooth_config_by_eeprom: +0x47c7 017677 fetch 1 ,mem_shutter_bluetooth_type +0x47c8 017678 rtnbit0 classic_shutter +0x47c9 017679 arg 3 ,temp +0x47ca 017680 fetch 2 ,mem_shutter_config_eeprom_offset_addr +0x47cb 017681 copy pdata ,regb +0x47cc 017682 arg mem_shutter_config_eeprom_start_flag ,rega +0x47cd 017683 call iicd_read_eep_data +0x47ce 017684 fetcht 2 ,mem_shutter_config_eeprom_start_flag +0x47cf 017685 setarg shutter_eeprom_config_crc +0x47d0 017686 isub temp ,null +0x47d1 017687 nrtn zero +0x47d2 017688 fetch 1 ,mem_shutter_config_user_size +0x47d3 017689 rtn blank +0x47d4 017690 copy pdata ,temp +0x47d5 017691 fetch 2 ,mem_shutter_config_eeprom_offset_addr +0x47d6 017692 add pdata ,3 ,regb +0x47d7 017693 arg mem_shutter_config_data_temp ,rega +0x47d8 017694 call iicd_read_eep_data +0x47d9 017695 branch shutter_store_config +: 017697 shutter_load_bluetooth_config_by_user_config: +0x47da 017698 fetch 2 ,mem_shutter_config_user_otp_address +0x47db 017699 rtn blank +0x47dc 017700 call otp_enable_chgpump +0x47dd 017701 arg 1 ,temp +0x47de 017702 arg mem_shutter_config_user_size ,rega +0x47df 017703 call otpd_read_data +0x47e0 017705 fetch 1 ,mem_shutter_config_user_size +0x47e1 017706 rtn blank +0x47e2 017708 fetch 2 ,mem_shutter_config_user_otp_address +0x47e3 017709 pincrease 1 +0x47e4 017710 arg mem_shutter_config_data_temp ,rega +0x47e5 017711 fetcht 1 ,mem_shutter_config_user_size +0x47e6 017712 call otpd_read_data +0x47e7 017713 call otp_disable_chgpump +: 017714 shutter_store_config: +0x47e8 017715 call shutter_load_bluetooth_config_store_name +: 017716 shutter_load_bluetooth_config_custom: +0x47e9 017717 ifetch 2 ,contr +0x47ea 017718 rtn blank +0x47eb 017719 copy pdata ,contw +0x47ec 017720 ifetcht 1 ,contr +0x47ed 017721 copy temp ,loopcnt +0x47ee 017722 call memcpy +0x47ef 017723 branch shutter_load_bluetooth_config_custom +: 017727 shutter_random_mac_addr: +0x47f0 017728 fetch 1 ,mem_shutter_bluetooth_type +0x47f1 017729 rtnbit0 classic_shutter +0x47f2 017730 fetch 2 ,mem_classic_shutter_random_mac_offset_addr +0x47f3 017731 copy pdata ,regb +0x47f4 017732 arg 4 ,temp +0x47f5 017733 arg mem_shutter_random_mac_data_temp ,rega +0x47f6 017734 call iicd_read_eep_data +0x47f7 017735 fetch 1 ,mem_shutter_random_mac_data_temp +0x47f8 017736 bne 1 ,shutter_write_random_mac_addr_to_eeprom +: 017737 shutter_write_random_mac_addr_to_eeprom: +0x47f9 017738 setarg 1 +0x47fa 017739 store 1 ,mem_shutter_random_mac_data_temp +0x47fb 017740 force 3 ,loopcnt +0x47fc 017741 call generate_random_loop +0x47fd 017742 fetch 2 ,mem_classic_shutter_random_mac_offset_addr +0x47fe 017743 copy pdata ,regb +0x47ff 017744 arg 4 ,temp +0x4800 017745 arg mem_shutter_random_mac_data_temp ,rega +0x4801 017746 call iicd_write_eep_data +: 017747 shutter_write_random_mac_addr: +0x4802 017748 fetch 3 ,mem_shutter_random_mac_data_temp + 1 +0x4803 017749 store 3 ,mem_lap +0x4804 017750 store 3 ,mem_le_lap +0x4805 017751 rtn +: 017754 shutter_soft_swtich_power_on: +0x4806 017755 branch shutter_start_reconnect +: 017758 shutter_soft_swtich_power_off: +0x4807 017759 arg 0 ,rega +0x4808 017760 arg mem_shutter_power_off_led_style ,regc +0x4809 017761 call ui_led_set_style_global +0x480a 017762 call shutter_disconnect_current_connection +: 017763 shutter_wait_power_off: +0x480b 017764 fetch 1 ,mem_shutter_power_off_timeout +0x480c 017765 store 1 ,mem_shutter_power_off_timer +0x480d 017766 rtn +: 017770 ui_soft_swtich_init: +0x480e 017771 setarg ss_state_power_up +0x480f 017772 call ui_soft_swtich_init_power_on_time +0x4810 017773 jam ui_button_state_up ,mem_ui_button_last_state +0x4811 017774 call ui_button_init +0x4812 017775 call ui_button_polling +0x4813 017776 fetch 2 ,mem_ui_state_map +0x4814 017777 rtnbit1 ui_state_btn_down +0x4815 017778 branch app_enter_hibernate +: 017780 ui_soft_swtich_init_power_on_time: +0x4816 017781 fetcht 2 ,mem_power_param_ptr +0x4817 017782 istore 1 ,temp +0x4818 017783 ifetch 1 ,contw +0x4819 017784 store 1 ,mem_ui_button_timeout +0x481a 017785 rtn +: 017788 ui_soft_switch_botton_up: +0x481b 017789 fetch 2 ,mem_power_param_ptr +0x481c 017790 ifetch 1 ,pdata +0x481d 017791 rtnne ss_state_power_up +0x481e 017792 branch app_enter_hibernate +: 017795 ui_soft_switch_botton_long_press: +0x481f 017796 fetcht 2 ,mem_power_param_ptr +0x4820 017797 ifetch 1 ,temp +0x4821 017798 beq ss_state_power_on ,ui_soft_switch_power_off +: 017799 ui_soft_switch_power_on: +0x4822 017800 setarg ss_state_power_on +0x4823 017801 fetcht 2 ,mem_power_param_ptr +0x4824 017802 istore 1 ,temp +0x4825 017803 add temp ,ss_power_off_time ,contr +0x4826 017804 ifetch 1 ,contr +0x4827 017805 istore 1 ,mem_ui_button_timeout +0x4828 017806 ifetch 2 ,contr +0x4829 017807 branch callback_func +: 017809 ui_soft_switch_power_off: +0x482a 017810 setarg ss_state_power_off +0x482b 017811 call ui_soft_swtich_init_power_on_time +0x482c 017812 add temp ,ss_power_off_cb ,contr +0x482d 017813 ifetch 2 ,contr +0x482e 017814 branch app_enter_hibernate ,blank +0x482f 017815 branch callback_func +: 017821 shutter_byteswap: +0x4830 017822 store 6 ,mem_tmp_buffer +0x4831 017823 fetch 1 ,mem_tmp_buffer +0x4832 017824 store 1 ,mem_tmp_buffer + 11 +0x4833 017825 ifetch 1 ,contr +0x4834 017826 store 1 ,mem_tmp_buffer + 10 +0x4835 017827 ifetch 1 ,contr +0x4836 017828 store 1 ,mem_tmp_buffer + 9 +0x4837 017829 ifetch 1 ,contr +0x4838 017830 store 1 ,mem_tmp_buffer + 8 +0x4839 017831 ifetch 1 ,contr +0x483a 017832 store 1 ,mem_tmp_buffer + 7 +0x483b 017833 ifetch 1 ,contr +0x483c 017834 store 1 ,mem_tmp_buffer + 6 +0x483d 017835 fetch 6 ,mem_tmp_buffer + 6 +0x483e 017836 rtn +: 017838 shutter_random_addr_by_otp: +0x483f 017839 call load_adc_init +0x4840 017840 fetch 1 ,mem_1v_adc_io_data +0x4841 017841 store 1 ,mem_le_lap +0x4842 017842 fetch 1 ,mem_5v_adc_hvin_data +0x4843 017843 istore 1 ,contw +0x4844 017844 fetch 1 ,mem_3v_adc_vinlpm_data +0x4845 017845 istore 1 ,contw +0x4846 017846 fetch 3 ,mem_le_lap +0x4847 017847 store 3 ,mem_lap +0x4848 017848 rtn +: 017860 sim_iic_read_eep_data: +0x4849 017861 fetch 2 ,mem_eeprom_base +0x484a 017862 iadd regb ,pdata +0x484b 017863 byteswap pdata ,pdata +0x484c 017864 store 2 ,mem_addr_mi +0x484d 017865 copy temp ,regb +0x484e 017867 call sim_iic_start +0x484f 017868 setarg 0xa0 +0x4850 017869 call sim_iic_send_byte +0x4851 017870 fetch 1 ,mem_addr_mi +0x4852 017871 call sim_iic_send_byte +0x4853 017872 bmark1 mark_eeprom_size ,sim_iic_read_eep_data_2k +0x4854 017873 fetch 1 ,mem_addr_mi + 1 +0x4855 017874 call sim_iic_send_byte +: 017875 sim_iic_read_eep_data_2k: +0x4856 017876 call sim_iic_stop +0x4857 017878 call sim_iic_start +0x4858 017879 setarg 0xa1 +0x4859 017880 call sim_iic_send_byte +: 017882 sim_iic_read_eep_data_loop: +0x485a 017883 call sim_iic_read_byte +0x485b 017884 istore 1 ,rega +0x485c 017885 increase 1 ,rega +0x485d 017886 increase -1 ,regb +0x485e 017887 nbranch sim_iic_read_eep_data_loop ,zero +0x485f 017888 branch sim_iic_stop +: 017899 sim_iic_write_eep_data: +0x4860 017900 byteswap regb ,pdata +0x4861 017901 store 2 ,mem_addr_mi +0x4862 017902 copy temp ,regb +0x4863 017904 call sim_iic_start +0x4864 017905 setarg 0xa0 +0x4865 017906 call sim_iic_send_byte +0x4866 017908 fetch 1 ,mem_addr_mi +0x4867 017909 call sim_iic_send_byte +0x4868 017910 bmark1 mark_eeprom_size ,sim_iic_write_eep_data_loop +0x4869 017911 fetch 1 ,mem_addr_mi + 1 +0x486a 017912 call sim_iic_send_byte +: 017913 sim_iic_write_eep_data_loop: +0x486b 017914 ifetch 1 ,rega +0x486c 017915 call sim_iic_send_byte +0x486d 017916 increase 1 ,rega +0x486e 017917 increase -1 ,regb +0x486f 017918 nbranch sim_iic_write_eep_data_loop ,zero +0x4870 017919 branch sim_iic_stop +: 017923 sim_iic_wait_ack: +0x4871 017924 arg 10 ,loopcnt +0x4872 017925 call sim_iic_release_sda +0x4873 017926 call sim_iic_scl_output_high +0x4874 017927 call sim_iic_delay +: 017928 sim_iic_wait_ack_loop: +0x4875 017929 call sim_iic_read_sda_level +0x4876 017930 branch sim_iic_scl_output_low ,blank +0x4877 017931 loop sim_iic_wait_ack_loop +0x4878 017932 branch sim_iic_scl_output_low +: 017936 sim_iic_ack_slave: +0x4879 017937 call sim_iic_scl_output_low +0x487a 017938 call sim_iic_sda_output_low +0x487b 017939 call sim_iic_delay +0x487c 017940 call sim_iic_scl_output_high +0x487d 017941 call sim_iic_delay +0x487e 017942 branch sim_iic_scl_output_low +: 017947 sim_iic_read_byte: +0x487f 017948 arg 8 ,loopcnt +0x4880 017949 arg 0 ,regc +0x4881 017950 call sim_iic_release_sda +: 017951 sim_iic_read_byte_loop: +0x4882 017952 call sim_iic_scl_output_high +0x4883 017953 call sim_iic_delay +0x4884 017954 lshift regc ,regc +0x4885 017955 call sim_iic_read_sda_level +0x4886 017956 iadd regc ,regc +0x4887 017957 call sim_iic_delay +0x4888 017958 call sim_iic_scl_output_low +0x4889 017959 loop sim_iic_read_byte_loop +0x488a 017960 call sim_iic_ack_slave +0x488b 017961 copy regc ,pdata +0x488c 017962 rtn +: 017966 sim_iic_send_byte: +0x488d 017967 arg 8 ,loopcnt +0x488e 017968 copy pdata ,regc +0x488f 017969 call sim_iic_scl_output_low +: 017970 sim_iic_send_byte_loop: +0x4890 017971 isolate1 7 ,regc +0x4891 017972 call sim_iic_sda_output_high ,true +0x4892 017973 ncall sim_iic_sda_output_low ,true +0x4893 017974 lshift regc ,regc +0x4894 017975 call sim_iic_delay +0x4895 017976 call sim_iic_scl_output_high +0x4896 017977 call sim_iic_delay +0x4897 017978 call sim_iic_scl_output_low +0x4898 017979 call sim_iic_delay +0x4899 017980 loop sim_iic_send_byte_loop +0x489a 017981 branch sim_iic_wait_ack +: 017985 sim_iic_start: +0x489b 017986 call sim_iic_sda_output_high +0x489c 017987 call sim_iic_scl_output_high +0x489d 017988 call sim_iic_delay +0x489e 017989 call sim_iic_sda_output_low +0x489f 017990 call sim_iic_delay +0x48a0 017991 branch sim_iic_scl_output_low +: 017995 sim_iic_stop: +0x48a1 017996 call sim_iic_sda_output_low +0x48a2 017997 call sim_iic_scl_output_high +0x48a3 017998 call sim_iic_delay +0x48a4 017999 call sim_iic_sda_output_high +0x48a5 018000 branch sim_iic_delay +: 018004 sim_iic_scl_output_high: +0x48a6 018005 enable user +0x48a7 018006 fetch 1 ,sim_iic_scl_gpio_num +0x48a8 018007 branch sim_iic_config_gpio +: 018010 sim_iic_scl_output_low: +0x48a9 018011 disable user +0x48aa 018012 fetch 1 ,sim_iic_scl_gpio_num +0x48ab 018013 branch sim_iic_config_gpio +: 018016 sim_iic_sda_output_high: +0x48ac 018017 enable user +0x48ad 018018 fetch 1 ,sim_iic_sda_gpio_num +0x48ae 018019 branch sim_iic_config_gpio +: 018022 sim_iic_sda_output_low: +0x48af 018023 disable user +0x48b0 018024 fetch 1 ,sim_iic_sda_gpio_num +0x48b1 018025 branch sim_iic_config_gpio +: 018030 sim_iic_config_gpio: +0x48b2 018031 and pdata ,0x07 ,queue +0x48b3 018032 rshift3 pdata ,pdata +0x48b4 018033 arg core_gpio_oe0 ,temp +0x48b5 018034 iadd temp ,temp +0x48b6 018035 ifetch 1 ,temp +0x48b7 018036 qset1 pdata +0x48b8 018037 istore 1 ,temp +0x48b9 018038 increase 4 ,temp +0x48ba 018039 ifetch 1 ,temp +0x48bb 018040 qsetflag user ,pdata +0x48bc 018041 istore 1 ,temp +0x48bd 018042 rtn +: 018045 sim_iic_release_sda: +0x48be 018046 fetch 1 ,sim_iic_sda_gpio_num +0x48bf 018047 and pdata ,0x07 ,queue +0x48c0 018048 rshift3 pdata ,pdata +0x48c1 018049 arg core_gpio_oe0 ,temp +0x48c2 018050 iadd temp ,temp +0x48c3 018051 ifetch 1 ,temp +0x48c4 018052 qset0 pdata +0x48c5 018053 istore 1 ,temp +0x48c6 018054 rtn +: 018059 sim_iic_read_sda_level: +0x48c7 018060 nop 4 +0x48c8 018061 fetch 1 ,sim_iic_sda_gpio_num +0x48c9 018062 and pdata ,0x07 ,queue +0x48ca 018063 rshift3 pdata ,pdata +0x48cb 018064 arg core_gpio_in ,temp +0x48cc 018065 iadd temp ,temp +0x48cd 018066 setarg 0 +0x48ce 018067 ifetcht 1 ,temp +0x48cf 018068 qisolate1 temp +0x48d0 018069 setflag true ,0 ,pdata +0x48d1 018070 rtn +: 018073 sim_iic_delay: +0x48d2 018075 rtn +: 018081 usb_isr: +0x48d3 018082 bpatch patch1e_6 ,mem_patch1e +0x48d4 018083 hfetch 1 ,core_usb_status +0x48d5 018084 isolate1 7 ,pdata +0x48d6 018085 call usb_init ,true +0x48d7 018086 call usb_nak_state_judge +0x48d8 018087 hfetch 1 ,core_usb_status +0x48d9 018088 store 1 ,mem_usb_status +0x48da 018089 hfetch 1 ,core_usb_fifo_empty +0x48db 018090 store 1 ,mem_usb_fifo_empty +0x48dc 018091 hstore 1 ,core_usb_fifo_empty +0x48dd 018092 pinvert +0x48de 018093 fetcht 1 ,mem_usb_tx_wait +0x48df 018094 iand temp ,pdata +0x48e0 018095 store 1 ,mem_usb_tx_wait +0x48e1 018096 jam 0xe0 ,core_usb_status +0x48e2 018097 fetch 1 ,mem_usb_fifo_empty +0x48e3 018098 compare 0x1 ,pdata ,0x1 +0x48e4 018099 call usb0_fifo_empty ,true +0x48e5 018100 fetch 1 ,mem_usb_status +0x48e6 018101 compare 0x1 ,pdata ,0x1 +0x48e7 018102 call usb_status1 ,true +0x48e8 018103 call usb_tx +0x48e9 018104 branch usb_nak_state +: 018106 usb_init: +0x48ea 018107 bpatch patch1e_7 ,mem_patch1e +0x48eb 018108 call usb_init_param +0x48ec 018109 jam 0x00 ,core_usb_config +0x48ed 018110 nop 10000 +0x48ee 018111 jam 0xc0 ,core_usb_trig +0x48ef 018112 hfetch 2 ,core_clkoff +0x48f0 018113 set0 clock_off_usb ,pdata +0x48f1 018114 hstore 2 ,core_clkoff +0x48f2 018115 jam 0x3c ,core_usb_config +0x48f3 018116 jam 0xff ,core_usb_status +0x48f4 018117 jam 0xff ,core_usb_fifo_empty +0x48f5 018118 jam 0 ,core_usb_addr +0x48f6 018119 jam dev_default ,mem_usb0_state +0x48f7 018120 setarg mem_usb_clear_mem_end +0x48f8 018121 arg mem_usb_clear_mem_start ,contw +0x48f9 018122 isub contw ,loopcnt +0x48fa 018123 branch clear_mem +: 018125 usb_offline_check_init: +0x48fb 018126 fetcht 1 ,mem_usb_offline_check_gpio +0x48fc 018127 branch gpio_config_input +: 018128 usb_offline_state: +0x48fd 018129 fetch 1 ,mem_usb_device_enumeration_endflag +0x48fe 018130 rtn blank +0x48ff 018131 fetcht 1 ,mem_usb_offline_check_gpio +0x4900 018132 call gpio_get_bit +0x4901 018133 branch usb_init ,true +0x4902 018134 rtn +: 018137 usb_nak_state: +0x4903 018138 arg timer_nak ,queue +0x4904 018139 call timer_check +0x4905 018140 nrtn blank +0x4906 018141 fetch 1 ,mem_usb_wakestate_onetime_flag +0x4907 018142 nrtn blank +0x4908 018143 fetch 1 ,mem_usb_device_enumeration_endflag +0x4909 018144 ncall usb_mac_wakeup_judge ,blank +0x490a 018145 rtn +: 018147 usb_mem_devicedesc_init: +0x490b 018148 arg mem_devicedesc ,contw +0x490c 018149 setsect 0 ,0x11212 +0x490d 018150 setsect 1 ,0x8000 +0x490e 018151 setsect 2 ,0x0 +0x490f 018152 setsect 3 ,0x10000 +0x4910 018153 istore 9 ,contw +0x4911 018154 setsect 0 ,0x22412 +0x4912 018155 setsect 1 ,0x8604 +0x4913 018156 setsect 2 ,0x1000 +0x4914 018157 setsect 3 ,0x8 +0x4915 018158 istore 9 ,contw +0x4916 018159 setsect 0 ,0x1 +0x4917 018160 istore 1 ,contw +0x4918 018161 rtn +: 018163 usb_init_param: +0x4919 018164 jam 2 ,mem_usb0_state +0x491a 018165 setarg 0x0 +0x491b 018166 store 1 ,mem_remain +0x491c 018167 store 2 ,mem_usb_zero_packet +0x491d 018168 pincrease 1 +0x491e 018169 store 2 ,mem_usb_ones_packet +0x491f 018170 pincrease 1 +0x4920 018171 store 2 ,mem_usb_two_packet +0x4921 018172 setarg hid_kbdata_addr +0x4922 018173 store 2 ,mem_hidreportdesc_kb +0x4923 018174 setarg hid_msdata_addr +0x4924 018175 store 2 ,mem_hidreportdesc_m +0x4925 018176 arg mem_confdesc ,contw +0x4926 018177 arg hid_confdata_addr ,contr +0x4927 018178 call memcpy64 +0x4928 018179 fetch 1 ,mem_usb_tx_interval +0x4929 018180 ncall usb_tx_interval_config ,blank +0x492a 018181 branch usb_mem_devicedesc_init +: 018183 usb_tx_interval_config: +0x492b 018184 store 1 ,mem_confdesc + 34 +0x492c 018185 store 1 ,mem_confdesc + 59 +0x492d 018186 rtn +: 018187 usb_nak_state_judge: +0x492e 018188 hfetch 1 ,core_usb_status +0x492f 018189 bbit1 usb_status_nak ,usb_nak_state_timer_init +0x4930 018190 rtn +: 018192 usb_nak_state_timer_init: +0x4931 018193 call usb0_attached_state_judge +0x4932 018194 call timer_reinit +0x4933 018195 setarg timer_nak_delay +0x4934 018196 arg timer_nak ,queue +0x4935 018197 branch timer_init +: 018199 usb0_attached_state_judge: +0x4936 018200 fetch 1 ,mem_usb_state +0x4937 018201 bne usb_connected ,usb_clear_halt_dispose +0x4938 018202 jam 0 ,mem_usb_wakestate_onetime_flag +0x4939 018203 jam 0 ,mem_usb_mac_wakeup_trig +0x493a 018204 rtn +: 018205 usb_clear_halt_dispose: +0x493b 018206 fetch 1 ,mem_usb_clear_halt +0x493c 018207 rtn blank +0x493d 018208 jam 0 ,mem_usb_clear_halt +0x493e 018209 jam usb_connected ,mem_usb_state +0x493f 018210 jam 1 ,mem_usb_device_enumeration_endflag +0x4940 018211 rtn +: 018213 usb0_fifo_empty: +0x4941 018214 jam 0x1 ,core_usb_fifo_empty +0x4942 018215 branch usb0_tx +: 018217 usb_rx_no_data: +0x4943 018218 fetch 1 ,mem_usb_status +0x4944 018219 bbit1 usb_status_setup ,usb_class_type +0x4945 018220 rtn +: 018222 usb_rx_read: +0x4946 018223 hfetch 1 ,core_usb_ep +0x4947 018224 istore 1 ,contw +0x4948 018225 loop usb_rx_read +0x4949 018226 rtn +: 018228 usb_status1: +0x494a 018229 bpatch patch1f_0 ,mem_patch1f +0x494b 018230 jam 0x11 ,core_usb_status +0x494c 018231 hfetch 1 ,core_usb_ep_len +0x494d 018232 store 1 ,mem_usb_read_len +0x494e 018233 copy pdata ,loopcnt +0x494f 018234 branch usb_rx_no_data ,blank +0x4950 018235 arg mem_usb_setup ,contw +0x4951 018236 call usb_rx_read +0x4952 018237 fetch 1 ,mem_usb_read_len +0x4953 018238 sub pdata ,7 ,null +0x4954 018239 rtn positive +: 018240 usb_class_type: +0x4955 018241 fetch 1 ,mem_usb_setup_bmrequesttype +0x4956 018242 and_into 0x80 ,pdata +0x4957 018243 beq in_device ,usb_in_device +0x4958 018244 beq out_device ,usb_out_device +0x4959 018245 branch assert +: 018247 usb_in_device: +0x495a 018248 fetch 1 ,mem_usb_setup_bmrequesttype +0x495b 018249 rshift4 pdata ,pdata +0x495c 018250 rshift pdata ,pdata +0x495d 018251 and_into 0x03 ,pdata +0x495e 018252 beq standard_req ,usb_in_standard_req +0x495f 018253 beq class_req ,usb_in_class_req +0x4960 018254 beq manufacturer_req ,usb_in_manufacturer_req +0x4961 018255 branch assert +: 018257 usb_out_device: +0x4962 018258 fetch 1 ,mem_usb_setup_bmrequesttype +0x4963 018259 rshift4 pdata ,pdata +0x4964 018260 rshift pdata ,pdata +0x4965 018261 and_into 0x03 ,pdata +0x4966 018262 beq standard_req ,usb_out_standard_req +0x4967 018263 beq class_req ,usb_out_class_req +0x4968 018264 beq manufacturer_req ,usb_out_manufacturer_req +0x4969 018265 branch assert +: 018267 usb_in_standard_req: +0x496a 018268 fetch 1 ,mem_usb_setup_brequest +0x496b 018269 beq get_configuration ,usb0_request_get_configuration +0x496c 018270 beq get_descriptor ,usb0_request_get_descriptor +0x496d 018271 beq get_interface ,usb0_request_get_interface +0x496e 018272 beq get_status ,usb0_request_get_status +0x496f 018273 branch usb0_force_stall +: 018275 usb_in_class_req: +0x4970 018276 fetch 1 ,mem_usb_setup_brequest +0x4971 018277 beq get_idle ,usb_get_idle +0x4972 018278 beq get_report ,usb_get_report +0x4973 018279 beq get_protocol ,usb_get_protocol_req +0x4974 018280 branch usb0_force_stall +: 018282 usb_in_manufacturer_req: +0x4975 018283 branch usb0_force_stall +: 018285 usb_out_standard_req: +0x4976 018286 fetch 1 ,mem_usb_setup_brequest +0x4977 018287 beq clear_feature ,usb0_request_clear_feature +0x4978 018288 beq set_feature ,usb0_request_set_feature +0x4979 018289 beq set_address ,usb0_request_set_address +0x497a 018290 beq set_configuration ,usb0_request_set_configuration +0x497b 018291 beq set_interface ,usb0_request_set_interface +0x497c 018292 beq set_descriptor ,usb0_force_stall +0x497d 018293 branch usb0_force_stall +: 018295 usb_out_class_req: +0x497e 018296 fetch 1 ,mem_usb_setup_brequest +0x497f 018297 beq set_idle ,usb_set_idle +0x4980 018298 beq set_report ,usb_set_report +0x4981 018299 beq set_protocol ,usb_set_protocol_req +0x4982 018300 branch usb0_force_stall +: 018302 usb_out_manufacturer_req: +0x4983 018303 branch usb0_force_stall +: 018305 usb0_force_stall: +0x4984 018306 hfetch 1 ,core_usb_stall +0x4985 018307 set1 0 ,pdata +0x4986 018308 hstore 1 ,core_usb_stall +0x4987 018309 branch usb0_reply_zerolen +: 018311 usb0_reply_zerolen: +0x4988 018312 jam 0x40 ,core_usb_clear +0x4989 018313 rtn +: 018315 usb0_request_get_configuration: +0x498a 018316 fetch 1 ,mem_usb_setup_bmrequesttype +0x498b 018317 bne in_device ,usb0_force_stall +0x498c 018318 fetch 1 ,mem_usb_setup_windex +0x498d 018319 bne 0 ,usb0_force_stall +0x498e 018320 fetch 1 ,mem_usb_setup_windex + 1 +0x498f 018321 bne 0 ,usb0_force_stall +0x4990 018322 fetch 1 ,mem_usb_setup_blength +0x4991 018323 bne 1 ,usb0_force_stall +0x4992 018324 fetch 1 ,mem_usb_setup_blengthh +0x4993 018325 bne 0 ,usb0_force_stall +0x4994 018326 fetch 1 ,mem_usb_setup_bvalue +0x4995 018327 bne 0 ,usb0_force_stall +0x4996 018328 fetch 1 ,mem_usb_setup_bvalue + 1 +0x4997 018329 bne 0 ,usb0_force_stall +0x4998 018330 fetch 1 ,mem_usb0_state +0x4999 018331 beq dev_configured ,usb0_request_get_cfg_dev_cfg +0x499a 018332 beq dev_address ,usb0_request_get_cfg_dev_addr +0x499b 018333 branch usb0_force_stall +: 018335 usb0_request_get_cfg_dev_cfg: +0x499c 018336 arg 1 ,regb +0x499d 018337 branch usb_send_ones_packet +: 018339 usb0_request_get_cfg_dev_addr: +0x499e 018340 arg 1 ,regb +0x499f 018341 branch usb_send_zero_packet +: 018343 usb0_request_get_descriptor: +0x49a0 018344 bpatch patch1f_1 ,mem_patch1f +0x49a1 018345 set0 mark_isstr ,mark +0x49a2 018346 fetch 1 ,mem_usb_setup_bvalueh +0x49a3 018347 beq dsc_device ,dsc_device_info +0x49a4 018348 beq dsc_config ,dsc_config_info +0x49a5 018349 beq dsc_string ,dsc_string_info +0x49a6 018350 beq dsc_hid ,dsc_hid_info +0x49a7 018351 beq dsc_hid_report ,dsc_hid_report_info +0x49a8 018352 branch usb0_force_stall +: 018354 dsc_hid_info: +0x49a9 018355 jam 0 ,mem_usb_get_protocol_flag +0x49aa 018356 fetch 1 ,mem_usb_setup_windex +0x49ab 018357 beq 0 ,dsc_hid_info_interface0 +0x49ac 018358 beq 1 ,dsc_hid_info_interface1 +0x49ad 018359 branch usb0_force_stall +: 018361 dsc_hid_info_interface0: +0x49ae 018362 arg mem_confdesc + 19 ,rega +0x49af 018363 ifetch 1 ,rega +0x49b0 018364 iforce regb +0x49b1 018365 branch usb0_respond +: 018367 dsc_hid_info_interface1: +0x49b2 018368 arg mem_confdesc + 44 ,rega +0x49b3 018369 ifetch 1 ,rega +0x49b4 018370 iforce regb +0x49b5 018371 branch usb0_respond +: 018373 dsc_device_info: +0x49b6 018377 fetch 1 ,mem_usb_set_high_addr_flag +0x49b7 018378 ncall usb_set_high_addr ,blank +0x49b8 018379 setarg mem_devicedesc +0x49b9 018380 fetcht 1 ,mem_devicedesc +: 018381 dsc_info_set_data_len: +0x49ba 018382 store 2 ,mem_dsc_info_data_pointer +0x49bb 018383 storet 1 ,mem_dsc_info_len +0x49bc 018384 fetch 1 ,mem_usb_setup_blength +0x49bd 018385 isub temp ,null +0x49be 018386 nbranch dsc_info_set_current_data_len ,positive +: 018387 dsc_info_set_initial_data_len: +0x49bf 018388 fetch 1 ,mem_dsc_info_len +: 018389 dsc_info_set_data_size_completed: +0x49c0 018390 iforce regb +0x49c1 018391 fetch 2 ,mem_dsc_info_data_pointer +0x49c2 018392 add pdata ,1 ,pdata +0x49c3 018393 iforce rega +0x49c4 018394 branch usb0_respond +: 018395 dsc_info_set_current_data_len: +0x49c5 018396 fetch 1 ,mem_usb_setup_blength +0x49c6 018397 branch dsc_info_set_data_size_completed +: 018399 usb_set_high_addr: +0x49c7 018400 hfetch 1 ,core_usb_addr +0x49c8 018401 ncall usb0_set_addr ,blank +0x49c9 018402 jam 0 ,mem_usb_set_high_addr_flag +0x49ca 018403 rtn +: 018404 usb0_set_addr: +0x49cb 018405 hfetch 1 ,core_usb_addr +0x49cc 018406 set1 7 ,pdata +0x49cd 018407 hstore 1 ,core_usb_addr +0x49ce 018408 rtn +: 018410 dsc_config_info: +0x49cf 018411 setarg mem_confdesc +0x49d0 018412 fetcht 1 ,mem_confdesc +0x49d1 018413 branch dsc_info_set_data_len +: 018415 dsc_string_info: +0x49d2 018416 fetch 1 ,mem_usb_setup_bvalue +0x49d3 018417 sub pdata ,3 ,null +0x49d4 018418 nbranch usb0_force_stall ,positive +0x49d5 018419 fetch 1 ,mem_usb_setup_bvalue +0x49d6 018420 arg mem_string0 ,rega +0x49d7 018421 beq 0 ,usb0_respond_length +0x49d8 018422 set1 mark_isstr ,mark +0x49d9 018423 arg mem_string1 ,rega +0x49da 018424 beq 1 ,usb0_respond_length +0x49db 018425 arg mem_string2 ,rega +0x49dc 018426 beq 2 ,usb0_respond_length +0x49dd 018427 arg mem_string3 ,rega +0x49de 018428 beq 3 ,usb0_respond_length +0x49df 018429 rtn +: 018431 dsc_hid_report_info: +0x49e0 018432 fetch 2 ,mem_usb_setup_windex +0x49e1 018433 beq 1 ,dsc_hid_report_info0 +0x49e2 018434 fetch 2 ,mem_hidreportdesc_kb +0x49e3 018435 copy pdata ,rega +0x49e4 018437 branch usb0_respond_length +: 018438 dsc_hid_report_info0: +0x49e5 018439 jam 1 ,mem_usb_device_enumeration_endflag +0x49e6 018440 jam usb_got_report_req ,mem_usb_state +0x49e7 018441 fetch 2 ,mem_hidreportdesc_m +0x49e8 018442 copy pdata ,rega +0x49e9 018444 branch usb0_respond_length +: 018447 usb0_request_get_interface: +0x49ea 018448 fetch 1 ,mem_usb0_state +0x49eb 018449 bne dev_configured ,usb0_force_stall +0x49ec 018450 fetch 1 ,mem_usb_setup_bmrequesttype +0x49ed 018451 bne in_interface ,usb0_force_stall +0x49ee 018452 fetch 1 ,mem_usb_setup_bvalue +0x49ef 018453 bne 0 ,usb0_force_stall +0x49f0 018454 fetch 1 ,mem_usb_setup_bvalueh +0x49f1 018455 bne 0 ,usb0_force_stall +0x49f2 018456 fetch 1 ,mem_usb_setup_blength +0x49f3 018457 bne 1 ,usb0_force_stall +0x49f4 018458 fetch 1 ,mem_usb_setup_blengthh +0x49f5 018459 bne 0 ,usb0_force_stall +0x49f6 018460 fetch 1 ,mem_usb_setup_windex +0x49f7 018461 bne 0 ,usb0_force_stall +0x49f8 018462 fetch 1 ,mem_usb_setup_windex + 1 +0x49f9 018463 bne 0 ,usb0_force_stall +0x49fa 018464 arg 1 ,regb +0x49fb 018465 branch usb_send_zero_packet +: 018468 usb0_request_get_status: +0x49fc 018469 fetch 1 ,mem_usb0_state +0x49fd 018470 beq dev_default ,usb0_force_stall +0x49fe 018471 fetch 1 ,mem_usb_setup_bvalue +0x49ff 018472 bne 0 ,usb0_force_stall +0x4a00 018473 fetch 1 ,mem_usb_setup_bvalueh +0x4a01 018474 bne 0 ,usb0_force_stall +0x4a02 018475 fetch 1 ,mem_usb_setup_blength +0x4a03 018476 bne 2 ,usb0_force_stall +0x4a04 018477 fetch 1 ,mem_usb_setup_blengthh +0x4a05 018478 bne 0 ,usb0_force_stall +0x4a06 018479 fetch 1 ,mem_usb_setup_windex + 1 +0x4a07 018480 bne 0 ,usb0_force_stall +0x4a08 018481 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a09 018482 beq in_device ,usb0_get_status_in_device +0x4a0a 018483 beq in_interface ,usb0_get_status_in_interface +0x4a0b 018484 beq in_endpoint ,usb0_get_status_in_endpoint +0x4a0c 018485 branch usb0_force_stall +: 018487 usb0_get_status_in_device: +0x4a0d 018488 fetch 1 ,mem_usb_setup_windex +0x4a0e 018489 bne 0 ,usb0_force_stall +0x4a0f 018490 arg 2 ,regb +0x4a10 018491 fetch 1 ,mem_usb_remote_wakeup +0x4a11 018492 beq 0x01 ,usb_send_two_packet +: 018494 usb_send_zero_packet: +0x4a12 018495 arg mem_usb_zero_packet ,rega +0x4a13 018496 branch usb0_respond +: 018497 usb_send_ones_packet: +0x4a14 018498 arg mem_usb_ones_packet ,rega +0x4a15 018499 branch usb0_respond +: 018500 usb_send_two_packet: +0x4a16 018501 arg mem_usb_two_packet ,rega +0x4a17 018502 branch usb0_respond +: 018504 usb0_get_status_in_interface: +0x4a18 018505 fetch 1 ,mem_usb0_state +0x4a19 018506 bne dev_configured ,usb0_force_stall +0x4a1a 018507 arg 2 ,regb +0x4a1b 018508 branch usb_send_zero_packet +: 018510 usb0_get_status_in_endpoint: +0x4a1c 018511 fetch 1 ,mem_usb0_state +0x4a1d 018512 bne dev_configured ,usb0_force_stall +0x4a1e 018513 fetch 1 ,mem_usb_setup_windex +0x4a1f 018514 beq in_ep1 ,usb0_get_status_in_ep_in_ep1 +0x4a20 018515 beq in_ep2 ,usb0_get_status_in_ep_in_ep2 +0x4a21 018516 beq in_ep3 ,usb0_get_status_in_ep_in_ep3 +0x4a22 018517 and_into 0x7f ,pdata +0x4a23 018518 beq 0x00 ,usb0_get_status_in_ep_in_ep0 +0x4a24 018519 branch usb0_force_stall +: 018521 usb0_get_status_in_ep_in_ep0: +0x4a25 018522 fetch 1 ,mem_usb_ep0_stall_status +: 018523 usb0_get_status_in_ep_in_ack: +0x4a26 018524 arg 2 ,regb +0x4a27 018525 beq 1 ,usb_send_ones_packet +0x4a28 018526 branch usb_send_zero_packet +: 018527 usb0_get_status_in_ep_in_ep1: +0x4a29 018528 fetch 1 ,mem_usb_ep1_stall_status +0x4a2a 018529 branch usb0_get_status_in_ep_in_ack +: 018530 usb0_get_status_in_ep_in_ep2: +0x4a2b 018531 fetch 1 ,mem_usb_ep2_stall_status +0x4a2c 018532 branch usb0_get_status_in_ep_in_ack +: 018533 usb0_get_status_in_ep_in_ep3: +0x4a2d 018534 fetch 1 ,mem_usb_ep3_stall_status +0x4a2e 018535 branch usb0_get_status_in_ep_in_ack +: 018537 usb_get_idle: +0x4a2f 018538 jam 1 ,mem_usb_idle_flag +0x4a30 018539 arg mem_usb_idle_rate ,rega +0x4a31 018540 arg 1 ,regb +0x4a32 018541 branch usb0_respond +: 018543 usb_get_report: +0x4a33 018544 fetch 2 ,mem_usb_setup_bvalue +0x4a34 018545 arg pc_get_report ,temp +0x4a35 018546 isub temp ,null +0x4a36 018547 nbranch usb0_force_stall ,zero +0x4a37 018548 set0 mark_isstr ,mark +: 018549 usb_get_report_dispose: +0x4a38 018550 fetch 1 ,mem_usb0_data_ready_report +0x4a39 018551 nbranch usb_get_report_data_success ,blank +0x4a3a 018552 jam pc_get_nondata ,mem_usb0_get_report_data +: 018553 usb_get_report_send_data: +0x4a3b 018554 fetch 1 ,mem_usb_setup_blength +0x4a3c 018555 iforce regb +0x4a3d 018556 arg mem_usb0_get_report_data ,rega +0x4a3e 018557 call usb0_respond +: 018558 usb_get_report_data_release: +0x4a3f 018559 arg mem_usb0_get_report_data ,contw +0x4a40 018560 arg 8 ,loopcnt +0x4a41 018561 branch memset0 +: 018562 usb_get_report_data_success: +0x4a42 018563 jam 0 ,mem_usb0_data_ready_report +0x4a43 018564 jam pc_get_data ,mem_usb0_get_report_data +0x4a44 018565 branch usb_get_report_send_data +: 018567 usb_get_protocol_req: +0x4a45 018568 fetch 1 ,mem_usb_setup_blength +0x4a46 018569 bne 1 ,usb0_force_stall +0x4a47 018570 jam 1 ,mem_usb_get_protocol_flag +0x4a48 018571 arg 1 ,regb +0x4a49 018572 fetch 1 ,mem_usb_set_protocol_value +0x4a4a 018573 beq 0 ,usb_get_report_protocol +0x4a4b 018574 beq 1 ,usb_get_boot_protocol +0x4a4c 018575 branch usb_send_zero_packet +: 018576 usb_get_report_protocol: +0x4a4d 018577 branch usb_send_ones_packet +: 018578 usb_get_boot_protocol: +0x4a4e 018579 branch usb_send_zero_packet +: 018584 usb0_request_clear_feature: +0x4a4f 018585 fetch 1 ,mem_usb0_state +0x4a50 018586 bne dev_configured ,usb0_force_stall +0x4a51 018587 fetch 1 ,mem_usb_setup_blength +0x4a52 018588 bne 0 ,usb0_force_stall +0x4a53 018589 fetch 1 ,mem_usb_setup_blengthh +0x4a54 018590 bne 0 ,usb0_force_stall +0x4a55 018591 fetch 1 ,mem_usb_setup_bvalueh +0x4a56 018592 bne 0 ,usb0_force_stall +0x4a57 018593 fetch 1 ,mem_usb_setup_windex + 1 +0x4a58 018594 bne 0 ,usb0_force_stall +0x4a59 018595 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a5a 018596 beq out_device ,usb0_request_clear_feature_out_device +0x4a5b 018597 beq out_interface ,usb0_request_clear_feature_out_interface +0x4a5c 018598 beq out_endpoint ,usb0_request_clear_feature_out_endpoint +0x4a5d 018599 branch usb0_force_stall +: 018601 usb0_request_clear_feature_out_device: +0x4a5e 018602 fetch 1 ,mem_usb_setup_bvalue +0x4a5f 018603 bne device_remote_wakeup ,usb0_force_stall +0x4a60 018604 hfetch 1 ,core_usb_config +0x4a61 018605 set0 7 ,pdata +0x4a62 018606 hstore 1 ,core_usb_config +0x4a63 018607 jam 0 ,mem_usb_remote_wakeup +0x4a64 018608 jam 1 ,mem_usb_clear_remote_wakeup +0x4a65 018609 branch usb0_reply_zerolen +: 018611 usb0_request_clear_feature_out_interface: +0x4a66 018612 branch usb0_force_stall +: 018614 usb0_request_clear_feature_out_endpoint: +0x4a67 018615 fetch 1 ,mem_usb_setup_bvalue +0x4a68 018616 bne endpoint_halt ,usb0_force_stall +0x4a69 018617 fetch 1 ,mem_usb_setup_windex +0x4a6a 018618 beq in_ep1 ,usb0_force_stall_ep1_in_off +0x4a6b 018619 beq in_ep2 ,usb0_force_stall_ep2_in_off +0x4a6c 018620 beq in_ep3 ,usb0_force_stall_ep3_in_off +0x4a6d 018621 and_into 0x7f ,pdata +0x4a6e 018622 beq 0x00 ,usb0_force_stall_ep0_in_off +0x4a6f 018623 branch usb0_force_stall +: 018625 usb0_force_stall_ep0_in_off: +0x4a70 018626 jam 0 ,mem_usb_ep0_stall_status +0x4a71 018627 branch usb0_reply_zerolen +: 018628 usb0_force_stall_ep1_in_off: +0x4a72 018629 jam 0 ,mem_usb_ep1_stall_status +: 018630 usb0_force_stall_ep1_in_off_reply: +0x4a73 018631 jam 1 ,mem_usb_clear_halt +0x4a74 018632 branch usb0_reply_zerolen +: 018633 usb0_force_stall_ep2_in_off: +0x4a75 018634 jam 0 ,mem_usb_ep2_stall_status +0x4a76 018635 branch usb0_force_stall_ep1_in_off_reply +: 018636 usb0_force_stall_ep3_in_off: +0x4a77 018637 jam 0 ,mem_usb_ep3_stall_status +0x4a78 018638 branch usb0_force_stall_ep1_in_off_reply +: 018641 usb0_request_set_feature: +0x4a79 018642 fetch 1 ,mem_usb_setup_blength +0x4a7a 018643 bne 0 ,usb0_force_stall +0x4a7b 018644 fetch 1 ,mem_usb_setup_blengthh +0x4a7c 018645 bne 0 ,usb0_force_stall +0x4a7d 018646 fetch 1 ,mem_usb_setup_bmrequesttype +0x4a7e 018647 beq out_device ,usb0_request_set_feature_out_device +0x4a7f 018648 beq out_interface ,usb0_request_set_feature_out_interface +0x4a80 018649 beq out_endpoint ,usb0_request_set_feature_out_endpoint +0x4a81 018650 branch usb0_force_stall +: 018652 usb0_request_set_feature_out_device: +0x4a82 018653 fetch 1 ,mem_usb_setup_bvalue +0x4a83 018654 bne device_remote_wakeup ,usb0_force_stall +0x4a84 018655 hfetch 1 ,core_usb_config +0x4a85 018656 set1 7 ,pdata +0x4a86 018657 hstore 1 ,core_usb_config +0x4a87 018658 jam 1 ,mem_usb_remote_wakeup +0x4a88 018659 jam usb_sleep ,mem_usb_state +0x4a89 018660 jam 0 ,mem_usb_tx_win_enable +0x4a8a 018661 call usb0_reply_zerolen +: 018662 usb_wakeup_timer_reinit: +0x4a8b 018663 call timer_reinit +0x4a8c 018664 setarg timer_wakeup_delay +0x4a8d 018665 arg timer_wakeup ,queue +0x4a8e 018666 branch timer_init +: 018668 usb0_request_set_feature_out_interface: +0x4a8f 018669 branch usb0_force_stall +: 018671 usb0_request_set_feature_out_endpoint: +0x4a90 018672 fetch 1 ,mem_usb_setup_bvalue +0x4a91 018673 bne endpoint_halt ,usb0_force_stall +0x4a92 018674 fetch 1 ,mem_usb_setup_bvalueh +0x4a93 018675 bne 0 ,usb0_force_stall +0x4a94 018676 fetch 1 ,mem_usb_setup_windex +0x4a95 018677 beq in_ep1 ,usb0_force_stall_ep1_in_on +0x4a96 018678 beq in_ep2 ,usb0_force_stall_ep2_in_on +0x4a97 018679 beq in_ep3 ,usb0_force_stall_ep3_in_on +0x4a98 018680 and_into 0x7f ,pdata +0x4a99 018681 beq 0x00 ,usb0_force_stall_ep0_in_on +0x4a9a 018682 branch usb0_force_stall +: 018684 usb0_force_stall_ep0_in_on: +0x4a9b 018685 jam 1 ,mem_usb_ep0_stall_status +0x4a9c 018686 branch usb0_reply_zerolen +: 018687 usb0_force_stall_ep1_in_on: +0x4a9d 018688 jam 1 ,mem_usb_ep1_stall_status +0x4a9e 018689 branch usb0_reply_zerolen +: 018690 usb0_force_stall_ep2_in_on: +0x4a9f 018691 jam 1 ,mem_usb_ep2_stall_status +0x4aa0 018692 branch usb0_reply_zerolen +: 018693 usb0_force_stall_ep3_in_on: +0x4aa1 018694 jam 1 ,mem_usb_ep3_stall_status +0x4aa2 018695 branch usb0_reply_zerolen +: 018698 usb0_request_set_address: +0x4aa3 018699 fetch 1 ,mem_usb_setup_bmrequesttype +0x4aa4 018700 bne out_device ,usb0_force_stall +0x4aa5 018701 fetch 1 ,mem_usb_setup_windex +0x4aa6 018702 bne 0 ,usb0_force_stall +0x4aa7 018703 fetch 1 ,mem_usb_setup_windex + 1 +0x4aa8 018704 bne 0 ,usb0_force_stall +0x4aa9 018705 fetch 1 ,mem_usb_setup_blength +0x4aaa 018706 bne 0 ,usb0_force_stall +0x4aab 018707 fetch 1 ,mem_usb_setup_blengthh +0x4aac 018708 bne 0 ,usb0_force_stall +0x4aad 018709 fetch 1 ,mem_usb_setup_bvalueh +0x4aae 018710 bne 0 ,usb0_force_stall +0x4aaf 018711 fetch 1 ,mem_usb_setup_bvalue +0x4ab0 018712 and_into 0x80 ,pdata +0x4ab1 018713 bne 0 ,usb0_force_stall +0x4ab2 018714 fetch 1 ,mem_usb_setup_bvalue +0x4ab3 018715 bne 0 ,usb_usb0_state_set_dev_addr +: 018716 usb_usb0_state_set_dev_default: +0x4ab4 018717 jam dev_default ,mem_usb0_state +: 018718 usb0_request_set_wait_address: +0x4ab5 018719 fetch 1 ,mem_usb_setup_bvalue +0x4ab6 018720 hstore 1 ,core_usb_addr +0x4ab7 018721 call usb0_reply_zerolen +0x4ab8 018722 jam 1 ,mem_usb_set_high_addr_flag +0x4ab9 018723 rtn +: 018724 usb_usb0_state_set_dev_addr: +0x4aba 018725 jam dev_address ,mem_usb0_state +0x4abb 018726 branch usb0_request_set_wait_address +: 018729 usb0_request_set_configuration: +0x4abc 018730 fetch 1 ,mem_usb0_state +0x4abd 018731 beq dev_default ,usb0_force_stall +0x4abe 018732 fetch 1 ,mem_usb_setup_bmrequesttype +0x4abf 018733 bne out_device ,usb0_force_stall +0x4ac0 018734 fetch 1 ,mem_usb_setup_windex +0x4ac1 018735 bne 0 ,usb0_force_stall +0x4ac2 018736 fetch 1 ,mem_usb_setup_windex + 1 +0x4ac3 018737 bne 0 ,usb0_force_stall +0x4ac4 018738 fetch 1 ,mem_usb_setup_blength +0x4ac5 018739 bne 0 ,usb0_force_stall +0x4ac6 018740 fetch 1 ,mem_usb_setup_blengthh +0x4ac7 018741 bne 0 ,usb0_force_stall +0x4ac8 018742 fetch 1 ,mem_usb_setup_bvalue + 1 +0x4ac9 018743 bne 0 ,usb0_force_stall +0x4aca 018744 fetch 1 ,mem_usb_setup_bvalue +0x4acb 018745 sub pdata ,usb_max_num_cfg ,null +0x4acc 018746 nbranch usb0_force_stall ,positive +0x4acd 018747 fetch 1 ,mem_usb0_state +0x4ace 018748 beq dev_address ,usb0_request_set_cfg_addr_state +0x4acf 018749 beq dev_configured ,usb0_request_set_cfg_cfg_state +0x4ad0 018750 branch usb0_force_stall +: 018752 usb0_request_set_cfg_addr_state: +: 018753 usb0_request_set_cfg_cfg_state: +0x4ad1 018754 fetch 1 ,mem_usb_setup_bvalue +0x4ad2 018755 beq 0 ,usb0_request_set_cfg_stay_addr_state +0x4ad3 018756 jam dev_configured ,mem_usb0_state +0x4ad4 018757 branch usb0_reply_zerolen +: 018758 usb0_request_set_cfg_stay_addr_state: +0x4ad5 018759 jam dev_address ,mem_usb0_state +0x4ad6 018760 branch usb0_reply_zerolen +: 018763 usb0_request_set_interface: +0x4ad7 018764 fetch 1 ,mem_usb0_state +0x4ad8 018765 bne dev_configured ,usb0_force_stall +0x4ad9 018766 fetch 1 ,mem_usb_setup_bmrequesttype +0x4ada 018767 bne out_interface ,usb0_force_stall +0x4adb 018768 fetch 1 ,mem_usb_setup_bvalue +0x4adc 018769 bne 0 ,usb0_force_stall +0x4add 018770 fetch 1 ,mem_usb_setup_bvalueh +0x4ade 018771 bne 0 ,usb0_force_stall +0x4adf 018772 fetch 1 ,mem_usb_setup_blength +0x4ae0 018773 bne 0 ,usb0_force_stall +0x4ae1 018774 fetch 1 ,mem_usb_setup_blengthh +0x4ae2 018775 bne 0 ,usb0_force_stall +0x4ae3 018776 fetch 1 ,mem_usb_setup_windex +0x4ae4 018777 bne 0 ,usb0_force_stall +0x4ae5 018778 fetch 1 ,mem_usb_setup_windex + 1 +0x4ae6 018779 bne 0 ,usb0_force_stall +0x4ae7 018780 branch usb0_reply_zerolen +: 018783 usb_set_idle: +0x4ae8 018784 jam 1 ,mem_usb_idle_flag +0x4ae9 018785 fetch 1 ,mem_usb_setup_bvalueh +0x4aea 018786 store 1 ,mem_usb_idle_rate +0x4aeb 018787 fetch 1 ,mem_usb_setup_windex +0x4aec 018788 sub pdata ,1 ,null +0x4aed 018789 call usb_clear_remote_wakeup_set0 ,zero +0x4aee 018790 fetch 1 ,mem_usb_state +0x4aef 018791 bne usb_resume ,usb0_reply_zerolen +0x4af0 018792 jam usb_connected ,mem_usb_state +0x4af1 018793 call usb0_reply_zerolen +0x4af2 018794 nop 30000 +0x4af3 018795 nop 30000 +0x4af4 018796 rtn +: 018797 usb_clear_remote_wakeup_set0: +0x4af5 018798 jam 1 ,mem_usb_device_enumeration_endflag +0x4af6 018799 jam 0 ,mem_usb_clear_remote_wakeup +0x4af7 018800 jam usb_resume ,mem_usb_state +0x4af8 018801 rtn +: 018804 usb_set_report: +0x4af9 018805 jam 1 ,mem_usb0_get_set_report +0x4afa 018806 call usb_set_report_resume_judge +0x4afb 018807 fetch 2 ,mem_usb_setup_bvalue +0x4afc 018808 store 2 ,mem_usb_setup_bvalue_temp +0x4afd 018809 fetch 1 ,mem_usb_setup_blength +0x4afe 018810 iforce loopcnt +0x4aff 018811 arg mem_usb0_setup ,contr +0x4b00 018812 arg mem_usb0_set_report_data ,contw +0x4b01 018813 call memcpy +0x4b02 018814 branch usb0_reply_zerolen +: 018816 usb_set_report_resume_judge: +0x4b03 018817 fetch 2 ,mem_usb_setup_bvalue +0x4b04 018818 arg pc_set_report_bvalue ,temp +0x4b05 018819 isub temp ,null +0x4b06 018820 nrtn zero +0x4b07 018821 fetch 2 ,mem_usb_setup_windex +0x4b08 018822 arg pc_set_report_windex ,temp +0x4b09 018823 isub temp ,null +0x4b0a 018824 nrtn zero +0x4b0b 018825 fetch 2 ,mem_usb_setup_blength +0x4b0c 018826 arg pc_set_report_blength ,temp +0x4b0d 018827 isub temp ,null +0x4b0e 018828 nrtn zero +0x4b0f 018829 jam 1 ,mem_usb_tx_win_enable +0x4b10 018830 rtn +: 018833 usb_set_protocol_req: +0x4b11 018834 fetch 1 ,mem_usb_setup_blength +0x4b12 018835 bne 0 ,usb0_force_stall +0x4b13 018836 fetch 1 ,mem_usb_setup_bvalue +0x4b14 018837 beq boot_protocol ,usb_set_boot_protocol +0x4b15 018838 beq report_protocol ,usb_set_report_protocol +0x4b16 018839 branch usb0_force_stall +: 018840 usb_set_boot_protocol: +0x4b17 018841 jam 0 ,mem_usb_set_protocol_status +0x4b18 018842 jam 1 ,mem_usb_set_protocol_value +0x4b19 018843 branch usb0_reply_zerolen +: 018844 usb_set_report_protocol: +0x4b1a 018845 jam 1 ,mem_usb_tx_mac_enable +0x4b1b 018846 jam 1 ,mem_usb_set_protocol_status +0x4b1c 018847 jam 0 ,mem_usb_set_protocol_value +0x4b1d 018848 branch usb0_reply_zerolen +: 018851 usb0_respond_length: +0x4b1e 018852 ifetch 1 ,rega +0x4b1f 018853 iforce regb +0x4b20 018854 increase 1 ,rega +: 018856 usb0_respond: +0x4b21 018857 bpatch patch1f_2 ,mem_patch1f +0x4b22 018858 bmark0 mark_isstr ,usb0_respond0 +0x4b23 018859 add regb ,1 ,pdata +0x4b24 018860 lshift pdata ,pdata +0x4b25 018861 hstore 1 ,core_usb_dfifo0 +0x4b26 018862 jam 3 ,core_usb_dfifo0 +0x4b27 018863 fetch 1 ,mem_usb_setup_blength +0x4b28 018864 increase -2 ,pdata +0x4b29 018865 rshift pdata ,pdata +0x4b2a 018866 store 1 ,mem_usb_setup_blength +0x4b2b 018867 beq 0 ,usb_no_respond_data +: 018868 usb0_respond0: +0x4b2c 018869 fetch 2 ,mem_usb_setup_blength +0x4b2d 018870 isub regb ,null +0x4b2e 018871 branch usb0_respond1 ,positive +0x4b2f 018872 copy pdata ,regb +: 018873 usb0_respond1: +0x4b30 018874 deposit rega +0x4b31 018875 store 2 ,mem_bufptr +0x4b32 018876 deposit regb +0x4b33 018877 store 1 ,mem_remain +0x4b34 018878 branch usb0_tx +: 018880 usb_no_respond_data: +0x4b35 018881 arg 0 ,queue +0x4b36 018882 branch usb_trig +: 018885 usb0_tx: +0x4b37 018886 bpatch patch1f_3 ,mem_patch1f +0x4b38 018887 fetch 1 ,mem_remain +0x4b39 018888 rtn blank +0x4b3a 018889 copy pdata ,loopcnt +0x4b3b 018890 sub pdata ,ep0_packet_size ,null +0x4b3c 018891 branch usb0_tx_info ,positive +0x4b3d 018892 arg ep0_packet_size ,loopcnt +: 018893 usb0_tx_info: +0x4b3e 018894 fetch 1 ,mem_remain +0x4b3f 018895 isub loopcnt ,pdata +0x4b40 018896 store 1 ,mem_remain +0x4b41 018897 fetch 2 ,mem_bufptr +0x4b42 018898 copy pdata ,contr +: 018899 usb0_tx0: +0x4b43 018900 ifetch 1 ,contr +0x4b44 018901 hstore 1 ,core_usb_dfifo0 +0x4b45 018902 bmark0 mark_isstr ,usb0_tx1 +0x4b46 018903 jam 0 ,core_usb_dfifo0 +: 018904 usb0_tx1: +0x4b47 018905 loop usb0_tx0 +0x4b48 018906 copy contr ,pdata +0x4b49 018907 store 2 ,mem_bufptr +0x4b4a 018908 arg 0 ,queue +0x4b4b 018909 call usb_trig +0x4b4c 018910 fetch 1 ,mem_remain +0x4b4d 018911 nrtn blank +0x4b4e 018912 fetch 1 ,mem_usb_state +0x4b4f 018913 rtnne usb_got_report_req +0x4b50 018914 jam usb_connected ,mem_usb_state +0x4b51 018915 rtn +: 018918 usb_tx_ep1: +0x4b52 018919 arg core_usb_dfifo1 ,rega +0x4b53 018920 arg 1 ,queue +: 018921 usb_tx_loop: +0x4b54 018922 ifetch 1 ,contr +0x4b55 018923 istore 1 ,rega +0x4b56 018924 loop usb_tx_loop +: 018925 usb_trig: +0x4b57 018926 setarg 0 +0x4b58 018927 qset1 pdata +0x4b59 018928 hstore 1 ,core_usb_trig +0x4b5a 018929 fetcht 1 ,mem_usb_tx_wait +0x4b5b 018930 ior temp ,pdata +0x4b5c 018931 store 1 ,mem_usb_tx_wait +0x4b5d 018932 rtn +: 018934 usb_tx_ep2: +0x4b5e 018935 arg 2 ,queue +0x4b5f 018936 arg core_usb_dfifo2 ,rega +0x4b60 018937 branch usb_tx_loop +: 018939 usb_tx: +0x4b61 018940 bpatch patch1f_4 ,mem_patch1f +0x4b62 018941 fetch 1 ,mem_usb_tx_enable +0x4b63 018942 rtn blank +0x4b64 018943 fetch 1 ,mem_usb_tx_wait +0x4b65 018944 nbranch usb_inwake_state_tx_dispose ,blank +0x4b66 018945 fetch 1 ,mem_usb_device_enumeration_endflag +0x4b67 018946 branch usb_tx_fifo_release ,blank +0x4b68 018947 fetch 1 ,mem_usb_state +0x4b69 018948 beq usb_sleep ,usb_windows_wakeup +0x4b6a 018949 bne usb_connected ,usb_tx_fifo_release +0x4b6b 018950 fetch 1 ,mem_usb_clear_remote_wakeup +0x4b6c 018951 nbranch usb_tx_fifo_release ,blank +0x4b6d 018952 call usb_tx_data_ep1 +0x4b6e 018953 branch usb_tx_data_ep2 +: 018955 usb_tx_data_ep1: +0x4b6f 018956 fetch 1 ,mem_usb_tx_enable +0x4b70 018957 rtnbit0 1 +0x4b71 018958 fetch 1 ,mem_usb_tx_wait +0x4b72 018959 rtnbit1 1 +0x4b73 018960 fetch 1 ,mem_usb_tx_enable +0x4b74 018961 set0 1 ,pdata +0x4b75 018962 store 1 ,mem_usb_tx_enable +0x4b76 018963 fetch 1 ,mem_usb_ep1_data +0x4b77 018964 rtn blank +0x4b78 018965 beq usb_ep1_kb ,usb_tx_kb_normal_data +0x4b79 018966 branch assert +: 018968 usb_tx_data_ep2: +0x4b7a 018969 fetch 1 ,mem_usb_tx_enable +0x4b7b 018970 rtnbit0 2 +0x4b7c 018971 fetch 1 ,mem_usb_tx_wait +0x4b7d 018972 rtnbit1 2 +0x4b7e 018973 fetch 1 ,mem_usb_tx_enable +0x4b7f 018974 set0 2 ,pdata +0x4b80 018975 store 1 ,mem_usb_tx_enable +0x4b81 018976 fetch 1 ,mem_usb_ep2_data +0x4b82 018977 rtn blank +0x4b83 018978 beq usb_ep2_ms ,usb_tx_ms_data +0x4b84 018979 beq usb_ep2_multikey ,usb_tx_kb_multikey_data +0x4b85 018980 branch assert +: 018982 usb_tx_fifo_release: +0x4b86 018984 arg mem_usb_mouse_data ,contw +0x4b87 018985 arg 6 ,loopcnt +0x4b88 018986 branch memset0 +: 018988 usb_tx_ms_data: +0x4b89 018989 fetch 1 ,mem_usb_idle_flag +0x4b8a 018990 fetcht 1 ,mem_usb_get_protocol_flag +0x4b8b 018991 iand temp ,pdata +0x4b8c 018992 branch usb_tx_ms_data_normal_mode ,blank +0x4b8d 018993 fetcht 1 ,mem_usb_set_protocol_status +0x4b8e 018994 iadd temp ,pdata +0x4b8f 018995 beq mac_boot_mode ,usb_tx_ms_data_mac_boot_mode +0x4b90 018996 branch usb_tx_ms_data_normal_mode +: 018998 usb_tx_ms_data_mac_boot_mode: +0x4b91 018999 jam 0 ,mem_usb_ep2_data +: 019000 usb_tx_ms_data_mac_boot_regroup: +0x4b92 019001 fetch 1 ,mem_usb_mouse_data + 1 +0x4b93 019002 beq r_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +0x4b94 019003 beq lr_key ,usb_tx_mac_boot_ms_regroup_r_or_lrkey +0x4b95 019004 fetch 1 ,mem_usb_mouse_data + 1 +0x4b96 019005 store 1 ,mem_usb_mouse_data +0x4b97 019006 fetch 1 ,mem_usb_mouse_data + 2 +0x4b98 019007 istore 1 ,contw +0x4b99 019008 fetch 1 ,mem_usb_mouse_data + 4 +0x4b9a 019009 istore 1 ,contw +0x4b9b 019010 fetch 1 ,mem_usb_mouse_data + 6 +0x4b9c 019011 istore 1 ,contw +0x4b9d 019012 arg 4 ,loopcnt +0x4b9e 019013 arg mem_usb_mouse_data ,contr +0x4b9f 019014 branch usb_tx_ep2 +: 019016 usb_tx_ms_data_normal_mode: +0x4ba0 019017 jam 0 ,mem_usb_ep2_data +: 019018 usb_tx_mac_boot_ms_regroup_r_or_lrkey: +0x4ba1 019019 arg 8 ,loopcnt +0x4ba2 019020 arg mem_usb_mouse_data ,contr +0x4ba3 019021 branch usb_tx_ep2 +: 019023 usb_tx_kb_multikey_data: +0x4ba4 019024 jam 0 ,mem_usb_ep2_data +0x4ba5 019025 arg 3 ,loopcnt +0x4ba6 019026 arg mem_usb_kb_multikey ,contr +0x4ba7 019027 branch usb_tx_ep2 +: 019029 usb_tx_kb_normal_data: +0x4ba8 019030 jam 0 ,mem_usb_ep1_data +0x4ba9 019031 arg 8 ,loopcnt +0x4baa 019032 arg mem_usb_kb_data ,contr +0x4bab 019033 branch usb_tx_ep1 +: 019035 usb_inwake_state_tx_dispose: +0x4bac 019036 fetch 1 ,mem_usb_state +0x4bad 019037 beq usb_sleep ,usb_clear_tx_wait +0x4bae 019038 beq usb_connected ,usb_mac_wakeup_trig +0x4baf 019039 rtn +: 019040 usb_clear_tx_wait: +0x4bb0 019041 jam 0 ,mem_usb_tx_wait +0x4bb1 019042 rtn +: 019043 usb_mac_wakeup_trig: +0x4bb2 019044 hfetch 1 ,core_usb_config +0x4bb3 019045 set1 7 ,pdata +0x4bb4 019046 hstore 1 ,core_usb_config +0x4bb5 019047 jam 1 ,mem_usb_mac_wakeup_trig +0x4bb6 019048 rtn +: 019050 usb_mac_wakeup_judge: +0x4bb7 019051 fetch 1 ,mem_usb_state +0x4bb8 019052 rtneq usb_sleep +0x4bb9 019053 beq usb_connected ,usb_mac_wakeup +0x4bba 019054 rtn +: 019055 usb_mac_wakeup: +0x4bbb 019056 fetch 1 ,mem_usb_mac_wakeup_trig +0x4bbc 019057 rtn blank +0x4bbd 019058 jam 1 ,mem_usb_wakestate_onetime_flag +0x4bbe 019059 branch usb_wakeup +: 019061 usb_windows_wakeup: +0x4bbf 019062 arg timer_wakeup ,queue +0x4bc0 019063 call timer_check +0x4bc1 019064 nrtn blank +: 019065 usb_wakeup: +0x4bc2 019066 hfetch 1 ,core_usb_config +0x4bc3 019067 rtnbit0 7 +0x4bc4 019068 jam 0xfc ,core_usb_config +0x4bc5 019069 nop 30000 +0x4bc6 019070 jam 0x3c ,core_usb_config +0x4bc7 019071 rtn +: 019078 hci_rx_h4: +0x4bc8 019079 bpatch patch1f_5 ,mem_patch1f +0x4bc9 019080 fetch 1 ,mem_hci_cmd +0x4bca 019081 nrtn blank +: 019082 hci_rx_h4_1: +0x4bcb 019083 call hci_h4_parse_packet +0x4bcc 019084 ncall h4_rx_discard_packet ,user +0x4bcd 019085 rtn +: 019087 hci_h4_parse_packet: +0x4bce 019088 bpatch patch1f_6 ,mem_patch1f +0x4bcf 019089 copy contru ,rega +0x4bd0 019090 arg 4 ,temp +0x4bd1 019091 ifetch 1 ,contru +0x4bd2 019092 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len +0x4bd3 019093 increase 1 ,temp +0x4bd4 019094 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len +0x4bd5 019095 copy contru ,pdata +0x4bd6 019096 hstore 2 ,core_uart_rrptr +0x4bd7 019097 rtn +: 019098 hci_h4_parse_packet_wait_len: +0x4bd8 019099 hfetch 2 ,core_uart_rxitems +0x4bd9 019100 isub temp ,null +0x4bda 019101 nbranch hci_h4_parse_packet_wait_len ,positive +0x4bdb 019103 disable user +0x4bdc 019104 copy rega ,contru +0x4bdd 019105 call h4_get_rx_payload_len +0x4bde 019106 iadd temp ,temp +: 019107 hci_h4_parse_packet_wait: +0x4bdf 019108 hfetch 2 ,core_uart_rxitems +0x4be0 019109 isub temp ,null +0x4be1 019110 nbranch hci_h4_parse_packet_wait ,positive +0x4be2 019111 copy rega ,contru +0x4be3 019112 ifetch 1 ,contru +0x4be4 019113 beq hci_h4_type_cmd ,process_hci_cmd +0x4be5 019114 branch assert +: 019116 h4_rx_discard_packet: +0x4be6 019117 bpatch patch1f_7 ,mem_patch1f +0x4be7 019118 hfetch 2 ,core_uart_rrptr +0x4be8 019119 iforce contru +0x4be9 019120 call h4_get_rx_payload_len +0x4bea 019121 iadd contru ,contru +0x4beb 019122 deposit contru +0x4bec 019123 hstore 2 ,core_uart_rrptr +0x4bed 019124 rtn +: 019129 h4_get_rx_payload_len: +0x4bee 019130 ifetch 1 ,contru +0x4bef 019131 increase 2 ,contru +0x4bf0 019132 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl +0x4bf1 019133 ifetch 1 ,contru +0x4bf2 019134 rtn +: 019135 h4_get_rx_payload_len_acl: +0x4bf3 019136 ifetch 2 ,contru +0x4bf4 019137 rtn +: 019139 h4_get_tx_ptr: +0x4bf5 019140 hfetch 2 ,core_uart_twptr +0x4bf6 019141 increase -5 ,contwu +0x4bf7 019142 iadd contwu ,contwu +0x4bf8 019143 rtn +: 019145 h4_send_packet_event: +0x4bf9 019146 arg hci_h4_type_event ,temp +0x4bfa 019147 branch h4_send_packet +: 019148 h4_send_packet_acl: +0x4bfb 019149 arg hci_h4_type_acl ,temp +: 019150 h4_send_packet: +0x4bfc 019151 bpatchx patch20_0 ,mem_patch20 +0x4bfd 019152 increase 1 ,loopcnt +0x4bfe 019153 hfetch 2 ,core_uart_twptr +0x4bff 019154 copy pdata ,contwu +0x4c00 019155 copy loopcnt ,pdata +0x4c01 019156 istoret 1 ,contwu +0x4c02 019157 increase -1 ,pdata +0x4c03 019158 iadd contwu ,contwu +0x4c04 019159 copy contwu ,pdata +0x4c05 019160 store 2 ,mem_hci_acl_tx_trigger_wptr +0x4c06 019161 copy temp ,pdata +0x4c07 019162 rtneq hci_h4_type_acl +0x4c08 019163 fetch 2 ,mem_hci_acl_tx_trigger_wptr +0x4c09 019164 hstore 2 ,core_uart_twptr +0x4c0a 019165 branch h4_send_acl_trigger_clear +: 019168 h4_send_acl_trigger_clear: +0x4c0b 019169 setarg 0 +0x4c0c 019170 store 2 ,mem_hci_acl_tx_trigger_wptr +0x4c0d 019171 rtn +: 019178 hci_init: +0x4c0e 019179 rtn wake +0x4c0f 019180 setarg hci_idle_dispatch +0x4c10 019181 store 2 ,mem_cb_idle_process +0x4c11 019183 setarg uart_baud_115200 +0x4c12 019184 store uart_baud_len ,mem_baud +: 019185 hci_lpm_init: +0x4c13 019186 setarg mem_h5rx_buf +0x4c14 019187 hstore 2 ,core_uart_rsaddr +0x4c15 019188 setarg mem_h5rx_buf_end +0x4c16 019189 hstore 2 ,core_uart_readdr +0x4c17 019190 setarg mem_h5tx_buf +0x4c18 019191 hstore 2 ,core_uart_tsaddr +0x4c19 019192 call hci_sel_init +: 019193 hci_reinit: +0x4c1a 019194 jam 0x0 ,core_uart_ctrl +0x4c1b 019195 setarg mem_h5tx_buf +0x4c1c 019196 hstore 2 ,core_uart_twptr +0x4c1d 019197 hstore 2 ,core_uart_trptrp +0x4c1e 019198 setarg mem_h5rx_buf +0x4c1f 019199 hstore 2 ,core_uart_rrptr +0x4c20 019200 store 2 ,mem_h5rx_rptr +: 019201 hci_init_common: +0x4c21 019202 hfetch 2 ,core_clkoff +0x4c22 019203 set0 clock_off_uart ,pdata +0x4c23 019204 hstore 2 ,core_clkoff +0x4c24 019205 call uart_set_baud_by_mem +0x4c25 019206 jam uartclk_dpll ,core_uart_clksel +0x4c26 019207 jam uart_ctrl_h4 ,core_uart_ctrl +0x4c27 019208 rtn +: 019210 hci_sel_init: +0x4c28 019211 setarg mem_h5tx_buf_end +0x4c29 019212 hstore 2 ,core_uart_teaddr +0x4c2a 019213 hfetch 1 ,core_gpio_sel1 +0x4c2b 019214 or_into 0x07 ,pdata +0x4c2c 019215 hstore 1 ,core_gpio_sel1 +0x4c2d 019216 rtn +: 019219 hci_rx_packet: +0x4c2e 019220 bpatchx patch20_1 ,mem_patch20 +0x4c2f 019221 hfetch 1 ,core_uart_status +0x4c30 019222 iforce regb +0x4c31 019223 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont +0x4c32 019224 hfetch 2 ,core_uart_rxitems +0x4c33 019225 iforce regc +0x4c34 019226 arg 0x44f ,temp +0x4c35 019227 isub temp ,null +0x4c36 019228 nrtn zero +: 019229 hci_rx_packet_cont: +0x4c37 019230 hfetch 2 ,core_uart_rrptr +0x4c38 019231 iforce contru +0x4c39 019232 branch hci_rx_h4 +: 019234 uart_send_byte: +0x4c3a 019235 hfetcht 1 ,core_uart_status +0x4c3b 019236 isolate1 6 ,temp +0x4c3c 019237 branch uart_send_byte ,true +0x4c3d 019238 hstore 1 ,core_uart_txd +0x4c3e 019239 rtn +: 019241 process_hci_cmd: +0x4c3f 019242 bpatchx patch20_2 ,mem_patch20 +0x4c40 019243 fetch 1 ,mem_hci_cmd +0x4c41 019244 branch process_hci_cmd_cont ,blank +0x4c42 019245 enable user +0x4c43 019246 rtn +: 019247 process_hci_cmd_cont: +0x4c44 019248 ifetch 2 ,contru +0x4c45 019249 iforce alarm +0x4c46 019250 iforce queue +0x4c47 019251 ifetch 1 ,contru +0x4c48 019252 iforce temp +0x4c49 019253 rshift2 alarm ,pdata +0x4c4a 019254 rshift8 pdata ,pdata +0x4c4b 019255 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific +0x4c4c 019256 rtn +: 019259 phci_grp_vendor_specific: +0x4c4d 019260 bpatchx patch20_3 ,mem_patch20 +0x4c4e 019261 deposit queue +0x4c4f 019262 beq hci_vendor_cmd_reset ,hci_normal_reply +0x4c50 019263 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid +0x4c51 019264 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud +0x4c52 019265 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch +0x4c53 019266 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done +0x4c54 019267 beq hci_vendor_cmd_echo ,hci_normal_reply +0x4c55 019268 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr +0x4c56 019269 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm +0x4c57 019271 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem +0x4c58 019272 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep +0x4c59 019273 beq hci_vendor_cmd_patch_sec_init ,phci_grp_vendor_patch_sec_init +0x4c5a 019274 beq hci_vendor_cmd_patch_sec ,phci_grp_vendor_patch_sec +0x4c5b 019275 branch hci_normal_reply +: 019277 phci_grp_vendor_enter_lpm: +0x4c5c 019278 call hci_normal_reply +0x4c5d 019279 call wait_uarttx +0x4c5e 019280 call gpio_pu_uart_tx +: 019281 hci_enter_lpm: +0x4c5f 019282 call app_put_lpm_wake_lock +0x4c60 019283 call app_l2cap_flow_control_enable +0x4c61 019284 branch gpio_rx_config_input_with_pu +: 019286 hci_exit_lpm: +0x4c62 019287 jam hci_rx_ready ,mem_hci_lt_rx_state +0x4c63 019288 call app_get_lpm_wake_lock +0x4c64 019289 call hci_lpm_init +0x4c65 019290 branch app_l2cap_flow_control_disable +: 019292 phci_grp_vendor_chipid: +0x4c66 019293 call hci_get_cmd_complete_ptr +0x4c67 019294 hfetch 2 ,core_chipid +0x4c68 019295 istore 2 ,contwu +0x4c69 019296 force 6 ,loopcnt +0x4c6a 019297 branch hci_command_complete +: 019299 phci_grp_vendor_baud: +0x4c6b 019300 ifetch 2 ,contru +0x4c6c 019301 store 2 ,mem_baud +0x4c6d 019302 hstore 2 ,core_uart_baud +0x4c6e 019303 rtn +: 019306 phci_grp_vendor_patch_common: +0x4c6f 019308 ifetch 1 ,contru +0x4c70 019309 copy pdata ,temp +0x4c71 019310 hstore 1 ,core_ucode_low +0x4c72 019311 ifetch 1 ,contru +0x4c73 019312 iadd temp ,temp +0x4c74 019313 set1 7 ,pdata +0x4c75 019314 hstore 1 ,core_ucode_ctrl +0x4c76 019315 ifetch 1 ,contru +0x4c77 019316 iadd temp ,temp +0x4c78 019317 copy pdata ,loopcnt +0x4c79 019318 rtn +: 019320 phci_grp_vendor_patch: +0x4c7a 019321 bmark1 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4c7b 019322 call phci_grp_vendor_patch_common +: 019323 phci_grp_vendor_patch_loop: +0x4c7c 019324 ifetch 1 ,contru +0x4c7d 019325 hstore 1 ,core_ucode_data +0x4c7e 019326 iadd temp ,temp +0x4c7f 019327 loop phci_grp_vendor_patch_loop +: 019328 phci_grp_vendor_patch_check_sum: +0x4c80 019329 and temp ,0xff ,temp +0x4c81 019330 ifetch 1 ,contru +0x4c82 019331 isub temp ,null +0x4c83 019332 nbranch phci_grp_vendor_patch_bad ,zero +0x4c84 019333 branch hci_normal_reply +: 019336 phci_grp_vendor_patch_sec: +0x4c85 019337 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4c86 019338 call phci_grp_vendor_patch_common +0x4c87 019339 store 8 ,mem_pdatatemp +: 019340 phci_grp_vendor_patch_sec_loop: +0x4c88 019341 call do_aes_cbc +0x4c89 019342 arg 16 ,loopcnt +0x4c8a 019343 arg mem_temp_block0 ,contw +0x4c8b 019344 call load_uart_sum_loop +0x4c8c 019345 storet 8 ,mem_temp +0x4c8d 019346 arg mem_temp_block2 ,contw +0x4c8e 019347 call store_aes_result +0x4c8f 019348 arg mem_temp_block2 ,rega +0x4c90 019349 arg mem_temp_block0 ,regb +0x4c91 019350 arg mem_temp_block3 ,contw +0x4c92 019351 call xor16 +0x4c93 019352 arg 16 ,loopcnt +0x4c94 019353 arg mem_temp_block3 ,contr +0x4c95 019354 call load_ucode_only_loop +0x4c96 019355 fetcht 8 ,mem_temp +0x4c97 019356 fetch 8 ,mem_pdatatemp +0x4c98 019357 increase -16 ,pdata +0x4c99 019358 store 8 ,mem_pdatatemp +0x4c9a 019359 nbranch phci_grp_vendor_patch_sec_loop ,blank +0x4c9b 019360 branch phci_grp_vendor_patch_check_sum +: 019362 load_ucode_only_loop: +0x4c9c 019363 ifetch 1 ,contr +0x4c9d 019364 hstore 1 ,core_ucode_data +0x4c9e 019365 loop load_ucode_only_loop +0x4c9f 019366 rtn +: 019368 load_uart_sum_loop: +0x4ca0 019369 ifetch 1 ,contru +0x4ca1 019370 istore 1 ,contw +0x4ca2 019371 iadd temp ,temp +0x4ca3 019372 loop load_uart_sum_loop +0x4ca4 019373 rtn +: 019375 phci_grp_vendor_patch_sec_init: +0x4ca5 019376 bmark0 mark_otp_encrypt ,phci_grp_vendor_patch_bad +0x4ca6 019377 arg 0 ,temp +0x4ca7 019378 arg 16 ,loopcnt +0x4ca8 019379 arg mem_temp_block0 ,contw +0x4ca9 019380 call load_uart_sum_loop +0x4caa 019381 hfetch 1 ,core_gpio_key2 +0x4cab 019382 and_into 0xfd ,pdata +0x4cac 019383 hstore 1 ,core_gpio_key2 +0x4cad 019384 arg mem_temp_block0 ,contr +0x4cae 019385 arg 16 ,loopcnt +0x4caf 019386 call aes_load_data +0x4cb0 019387 call aes_init +0x4cb1 019388 call aes_clear_data +0x4cb2 019389 branch phci_grp_vendor_patch_check_sum +: 019392 phci_grp_vendor_done: +0x4cb3 019393 arg 0x20 ,loopcnt +0x4cb4 019394 arg mem_patch00 ,contw +0x4cb5 019395 arg 0 ,temp +: 019396 phci_grp_vendor_done_loop: +0x4cb6 019397 ifetch 1 ,contru +0x4cb7 019398 istore 1 ,contw +0x4cb8 019399 iadd temp ,temp +0x4cb9 019400 loop phci_grp_vendor_done_loop +0x4cba 019401 and temp ,0xff ,temp +0x4cbb 019402 ifetch 1 ,contru +0x4cbc 019403 isub temp ,null +0x4cbd 019404 nbranch phci_grp_vendor_patch_bad ,zero +0x4cbe 019405 jam 0 ,core_ucode_ctrl +0x4cbf 019406 call hci_normal_reply +0x4cc0 019407 call h4_rx_discard_packet +0x4cc1 019408 call clear_key_buf +0x4cc2 019409 call wait_uarttx +0x4cc3 019410 branch soft_reset +: 019412 phci_grp_vendor_patch_bad: +0x4cc4 019413 jam 0 ,core_ucode_ctrl +0x4cc5 019414 branch start +: 019416 phci_grp_vendor_bdaddr: +0x4cc6 019417 ifetch 6 ,contru +0x4cc7 019418 store 6 ,mem_lap +0x4cc8 019419 branch hci_normal_reply +: 019422 phci_grp_vendor_mem: +0x4cc9 019423 ifetch 1 ,contru +0x4cca 019424 store 1 ,mem_hci_curr_len +0x4ccb 019425 copy pdata ,loopcnt +0x4ccc 019426 ifetch 2 ,contru +0x4ccd 019427 store 2 ,mem_hci_curr_target +0x4cce 019428 copy pdata ,contw +0x4ccf 019429 call uart_copy_rx_bytes +0x4cd0 019430 branch hci_normal_reply +: 019433 phci_grp_vendor_eep: +0x4cd1 019434 ifetch 1 ,contru +0x4cd2 019435 store 1 ,mem_hci_curr_len +0x4cd3 019436 copy pdata ,loopcnt +0x4cd4 019437 ifetch 2 ,contru +0x4cd5 019438 store 2 ,mem_hci_curr_target +0x4cd6 019439 arg mem_l2cap_rxbuff1 ,contw +0x4cd7 019440 call uart_copy_rx_bytes +0x4cd8 019441 fetcht 1 ,mem_hci_curr_len +0x4cd9 019442 arg mem_l2cap_rxbuff1 ,rega +0x4cda 019443 fetch 2 ,mem_hci_curr_target +0x4cdb 019444 branch iicd_write_ota_data +: 019449 hci_normal_reply: +0x4cdc 019450 force 4 ,loopcnt +: 019451 hci_command_complete: +0x4cdd 019452 call hci_get_payload_ptr +0x4cde 019453 force 0x1 ,pdata +0x4cdf 019454 istore 1 ,contwu +0x4ce0 019455 deposit alarm +0x4ce1 019456 istore 3 ,contwu +0x4ce2 019457 force hci_event_command_complete ,queue +: 019458 hci_send_event: +0x4ce3 019459 bpatchx patch20_4 ,mem_patch20 +0x4ce4 019460 call hci_get_packet_ptr +0x4ce5 019461 deposit queue +0x4ce6 019462 istore 1 ,contwu +0x4ce7 019463 deposit loopcnt +0x4ce8 019464 istore 1 ,contwu +: 019465 hci_send_event_raw: +0x4ce9 019466 force 5 ,queue +0x4cea 019467 increase 2 ,loopcnt +: 019468 hci_send_packet: +0x4ceb 019469 branch h4_send_packet_event +: 019471 hci_send_commu_ready_event: +0x4cec 019472 force hci_event_vendor_specific ,queue +0x4ced 019473 call hci_get_payload_ptr +0x4cee 019474 setarg hci_vendor_event_commu_ready +0x4cef 019475 istore 1 ,contwu +0x4cf0 019476 force 1 ,loopcnt +0x4cf1 019477 branch hci_send_event +: 019479 hci_get_cmd_complete_ptr: +0x4cf2 019480 force 12 ,contwu +0x4cf3 019481 branch hci_get_tx_ptr +: 019483 hci_get_payload_ptr: +0x4cf4 019484 force 8 ,contwu +0x4cf5 019485 branch hci_get_tx_ptr +: 019487 hci_get_packet_ptr: +0x4cf6 019488 force 6 ,contwu +: 019489 hci_get_tx_ptr: +0x4cf7 019490 branch h4_get_tx_ptr +: 019494 calc_tx_crc16: +0x4cf8 019495 pulse crc16 +0x4cf9 019496 enable enable_crc +: 019497 crcloop: +0x4cfa 019498 ifetch 1 ,contwu +0x4cfb 019499 inject bucket ,8 +0x4cfc 019500 loop crcloop +0x4cfd 019501 enable enable_parity +0x4cfe 019502 inject bucket ,16 +0x4cff 019503 disable enable_parity +0x4d00 019504 disable enable_crc +0x4d01 019505 disable crc16 +0x4d02 019506 byteswap pdata ,pdata +0x4d03 019507 rtn +: 019511 cmd_exit: +0x4d04 019512 jam 0 ,mem_hci_cmd +0x4d05 019513 rtn +: 019514 cmd_check_plap: +0x4d06 019515 fetch 6 ,mem_hci_plap +0x4d07 019516 fetcht 6 ,mem_plap +0x4d08 019517 isub temp ,null +0x4d09 019518 rtn +: 019523 cmd_pair: +0x4d0a 019524 fetch 1 ,mem_op +0x4d0b 019525 bbit1 op_inrand_req ,cmd_pair_passive +0x4d0c 019526 call tid_initiate +0x4d0d 019527 jam lmp_in_rand ,mem_lmo_opcode2 +0x4d0e 019528 branch cmd_exit +: 019529 cmd_pair_passive: +0x4d0f 019530 set0 op_inrand_req ,pdata +0x4d10 019531 store 1 ,mem_op +0x4d11 019532 call lmp_accept_inrand +0x4d12 019533 setarg 0 +0x4d13 019534 setflag master ,smap_lmptid ,pdata +0x4d14 019535 store 1 ,mem_lmo_tid2 +0x4d15 019536 branch cmd_exit +0x4d16 019537 rtn +: 019538 cmd_in_sniff: +0x4d17 019539 jam lmp_sniff_req ,mem_lmo_opcode2 +0x4d18 019540 arg mem_sniff_payload ,contw +0x4d19 019541 setarg 0 +0x4d1a 019542 isolate1 27 ,clke_bt +0x4d1b 019543 setflag true ,1 ,pdata +0x4d1c 019544 istore 1 ,contw +0x4d1d 019545 setarg 0 +0x4d1e 019546 istore 2 ,contw +0x4d1f 019547 fetch 2 ,mem_sniff_param_interval +0x4d20 019548 istore 2 ,contw +0x4d21 019549 fetch 1 ,mem_sniff_param_attempt +0x4d22 019550 istore 2 ,contw +0x4d23 019551 fetch 1 ,mem_sniff_param_timeout +0x4d24 019552 istore 2 ,contw +0x4d25 019553 branch cmd_exit +: 019555 cmd_exit_sniff: +0x4d26 019556 jam lmp_unsniff_req ,mem_lmo_opcode2 +0x4d27 019557 branch cmd_exit +: 019559 hci_idle_dispatch: +0x4d28 019560 call gpio_check_uart_state +0x4d29 019561 rtn true +0x4d2a 019562 arg uart_wakeup_rx ,temp +0x4d2b 019563 call gpio_get_bit +0x4d2c 019564 nbranch uart_wake_up ,true +0x4d2d 019565 jam hci_rx_wake ,mem_hci_lt_rx_state +0x4d2e 019566 rtn +: 019567 uart_wake_up: +0x4d2f 019568 fetch 1 ,mem_hci_lt_rx_state +0x4d30 019569 rtnne hci_rx_wake +0x4d31 019570 call hci_exit_lpm +0x4d32 019571 branch hci_send_commu_ready_event +: 019585 hid_rx_process: +0x4d33 019586 bpatchx patch20_5 ,mem_patch20 +0x4d34 019587 fetch 2 ,mem_l2cap_payload_ptr +0x4d35 019588 copy pdata ,contr +0x4d36 019589 ifetch 1 ,contr +0x4d37 019590 and pdata ,0x0f ,temp +0x4d38 019591 rshift4 pdata ,pdata +0x4d39 019592 beq hid_type_set_idle ,hid_rx_process_handshake +0x4d3a 019593 beq hid_type_set_protocol ,hid_rx_process_handshake +0x4d3b 019594 beq hid_type_data ,hid_rx_process_data +0x4d3c 019595 beq hid_type_set_report ,hid_rx_process_set_report +0x4d3d 019596 beq hid_type_control ,hid_rx_process_hid_control +0x4d3e 019597 rtn +: 019599 hid_rx_process_hid_control: +0x4d3f 019600 copy temp ,pdata +0x4d40 019601 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug +0x4d41 019602 beq hid_control_p_suspend ,hid_rx_process_suspend +0x4d42 019603 rtn +: 019605 hid_rx_process_virtual_cable_unplug: +0x4d43 019606 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp +0x4d44 019607 call ui_ipc_send_event +0x4d45 019608 fetch 1 ,mem_device_option +0x4d46 019609 rtnbit0 dvc_op_mouse +0x4d47 019610 copy temp ,pdata +0x4d48 019611 beq hid_control_p_virtualcableunplug ,mouse_irtual_cable_unplug +0x4d49 019612 rtn +: 019613 hid_rx_process_suspend: +0x4d4a 019614 rtn +: 019616 hid_rx_process_set_report: +0x4d4b 019617 call hid_rx_process_data +0x4d4c 019618 arg 0x01 ,rega +0x4d4d 019619 call hid_malloc_tx_buff +0x4d4e 019620 fetch 2 ,mem_hid_ctrl_remote_cid +0x4d4f 019621 istore 2 ,contw +0x4d50 019622 setarg 0x00 +0x4d51 019623 istore 1 ,contw +0x4d52 019624 rtn +: 019626 hid_rx_process_handshake: +0x4d53 019627 arg 1 ,rega +0x4d54 019628 call hid_malloc_tx_buff +0x4d55 019629 fetch 2 ,mem_hid_ctrl_remote_cid +0x4d56 019630 istore 2 ,contw +0x4d57 019631 setarg 0 +0x4d58 019632 istore 1 ,contw +0x4d59 019633 jam 1 ,mem_ui_data_txbuff_length +0x4d5a 019634 fetch 1 ,mem_hid_control_state +0x4d5b 019635 set1 l2cap_channel_hid_handshake_done +0x4d5c 019636 store 1 ,mem_hid_control_state +0x4d5d 019637 jam bt_evt_hid_handshake ,mem_fifo_temp +0x4d5e 019638 branch ui_ipc_send_event +: 019640 hid_rx_process_data: +0x4d5f 019641 ifetch 1 ,contr +0x4d60 019642 beq hid_report_id_kb ,hid_rx_process_data_hid_kb +0x4d61 019643 rtn +: 019645 hid_rx_process_data_hid_kb: +0x4d62 019646 rtn +: 019649 hid_malloc_tx_buff: +0x4d63 019650 call l2cap_malloc +0x4d64 019651 copy rega ,temp +0x4d65 019652 storet 1 ,mem_ui_data_txbuff_length +0x4d66 019653 copy pdata ,contw +0x4d67 019654 copy rega ,pdata +0x4d68 019655 istore 2 ,contw +0x4d69 019656 rtn +: 019673 l2cap_init: +0x4d6a 019674 branch l2cap_init_wake ,wake +: 019675 l2cap_init_work: +0x4d6b 019676 setarg mem_l2cap_xmem_end +0x4d6c 019677 arg mem_l2cap_xmem_start ,contw +0x4d6d 019678 isub contw ,loopcnt +0x4d6e 019679 call clear_mem +: 019680 l2cap_init_wake: +0x4d6f 019681 bpatchx patch20_6 ,mem_patch20 +0x4d70 019682 setarg mem_sdp_mem_end +0x4d71 019683 arg mem_sdp_mem_start ,contw +0x4d72 019684 isub contw ,loopcnt +0x4d73 019685 call clear_mem +0x4d74 019686 setarg mem_l2cap_mem_end +0x4d75 019687 arg mem_l2cap_mem_start ,contw +0x4d76 019688 isub contw ,loopcnt +0x4d77 019689 call clear_mem +0x4d78 019690 branch l2cap_lpm_load_txbuf +: 019692 process_rx_l2cap_pkt: +0x4d79 019693 bpatchx patch20_7 ,mem_patch20 +0x4d7a 019694 copy contr ,temp +0x4d7b 019697 copy temp ,contr +0x4d7c 019698 ifetch 2 ,contr +0x4d7d 019699 store 2 ,mem_l2cap_rx_pkt_length +0x4d7e 019700 ifetch 2 ,contr +0x4d7f 019701 store 2 ,mem_l2cap_rx_cid +0x4d80 019702 deposit contr +0x4d81 019703 store 2 ,mem_l2cap_payload_ptr +0x4d82 019704 fetch 1 ,memui_reconnect_mode +0x4d83 019705 beq no_reconnection ,l2cap_rx_multiplexing +0x4d84 019706 branch ml2cap_rx_multiplexing +: 019708 l2cap_rx_multiplexing: +0x4d85 019709 fetch 2 ,mem_l2cap_rx_pkt_length +0x4d86 019710 branch l2cap_rx_reset_state ,blank +0x4d87 019711 bpatchx patch21_0 ,mem_patch21 +0x4d88 019712 fetch 1 ,mem_l2cap_rx_cid +0x4d89 019713 beq l2cap_signal_channel ,l2cap_call_proc_signal +: 019714 l2cap_rx_multiplexing0: +0x4d8a 019715 beq l2cap_sdp_channel ,l2cap_call_proc_sdp +0x4d8b 019716 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +0x4d8c 019717 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +0x4d8d 019718 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +0x4d8e 019719 branch l2cap_rx_reset_state +: 019721 l2cap_check_map: +0x4d8f 019724 bpatchx patch21_1 ,mem_patch21 +0x4d90 019725 call l2cap_malloc_get_full_map +0x4d91 019726 fetch 1 ,mem_used_map +0x4d92 019727 beq 0 ,set_pdata_0 +0x4d93 019728 beq 1 ,set_pdata_0 +0x4d94 019729 beq 2 ,set_pdata_0 +0x4d95 019730 beq 3 ,set_pdata_0 +0x4d96 019731 beq 0x81 ,set_pdata_0 +0x4d97 019732 beq 0xc0 ,set_pdata_0 +0x4d98 019733 beq 0x80 ,set_pdata_0 +0x4d99 019734 beq 0x40 ,set_pdata_0 +0x4d9a 019735 rtn +: 019737 set_pdata_0: +0x4d9b 019738 setarg 0 +0x4d9c 019739 rtn +: 019742 l2cap_call_proc_signal: +0x4d9d 019743 call l2cap_check_map +0x4d9e 019744 nrtn blank +: 019745 l2cap_call_proc_signal0: +0x4d9f 019746 call l2cap_malloc_signal_channel +0x4da0 019747 call l2cap_process_signal_pkt +0x4da1 019748 fetcht 2 ,mem_l2cap_signal_tx_length +0x4da2 019749 branch l2cap_call_proc_no_reply ,blank +0x4da3 019750 call l2cap_get_signal_tx_buff +0x4da4 019751 fetch 2 ,mem_l2cap_signal_tx_length +0x4da5 019752 istore 2 ,contw +0x4da6 019753 force l2cap_signal_channel ,pdata +0x4da7 019754 istore 2 ,contw +0x4da8 019755 branch l2cap_rx_reset_state +: 019757 l2cap_call_proc_sigal_pending: +0x4da9 019758 fetch 1 ,mem_l2cap_pending_item +0x4daa 019759 rtn blank +0x4dab 019760 copy pdata ,rega +0x4dac 019761 bpatchx patch21_2 ,mem_patch21 +0x4dad 019762 fetch 4 ,mem_l2cap_sdpres_delay_time +0x4dae 019763 arg 0x100 ,temp +0x4daf 019764 iadd temp ,temp +0x4db0 019765 copy clkn_bt ,pdata +0x4db1 019766 isub temp ,null +0x4db2 019767 nrtn positive +0x4db3 019768 jam 0 ,mem_l2cap_pending_item +0x4db4 019769 copy rega ,pdata +0x4db5 019770 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ +0x4db6 019771 branch assert +: 019772 l2cap_sdp_conn_succ: +0x4db7 019773 arg 0 ,debug +0x4db8 019774 call l2cap_malloc_signal_channel +0x4db9 019775 call restore_l2cap_req_param +0x4dba 019776 call l2cap_get_signal_tx_payload +0x4dbb 019777 call save_cont_pointers +0x4dbc 019778 call send_connection_sdp_res +0x4dbd 019779 call l2cap_get_signal_tx_buff +0x4dbe 019781 setarg 0x000c +0x4dbf 019782 istore 2 ,contw +0x4dc0 019783 force l2cap_signal_channel ,pdata +0x4dc1 019784 istore 2 ,contw +0x4dc2 019785 branch l2cap_rx_reset_state +: 019789 l2cap_reset_sdp_map: +0x4dc3 019790 bpatchx patch21_3 ,mem_patch21 +0x4dc4 019791 fetch 2 ,mem_sdp_tx_pkt_length +0x4dc5 019792 increase 4 ,pdata +0x4dc6 019793 rshift4 pdata ,pdata +0x4dc7 019794 rshift3 pdata ,pdata +0x4dc8 019795 add pdata ,1 ,temp +0x4dc9 019796 arg mem_tx_fifo3 ,contr +0x4dca 019797 ifetch 3 ,contr +0x4dcb 019798 rtn blank +0x4dcc 019799 store 3 ,mem_tx_fifo_map_temp +0x4dcd 019800 fetch 1 ,mem_tx_fifo_map_temp +0x4dce 019801 copy pdata ,rega +0x4dcf 019802 call check_l2cap_map +0x4dd0 019803 copy regb ,pdata +0x4dd1 019804 store 1 ,mem_tx_fifo3 +0x4dd2 019805 rtn +: 019807 check_l2cap_map: +0x4dd3 019808 arg 0 ,queue +0x4dd4 019809 arg 0 ,regb +: 019811 check_l2cap_map_loop: +0x4dd5 019812 sub queue ,7 ,null +0x4dd6 019813 nrtn positive +0x4dd7 019814 qisolate1 rega +0x4dd8 019815 branch check_l2cap_map_used ,true +0x4dd9 019816 branch check_l2cap_map_used2 +: 019818 check_l2cap_map_used: +0x4dda 019819 copy temp ,pdata +0x4ddb 019820 branch check_l2cap_map_used2 ,blank +0x4ddc 019821 qset1 regb +0x4ddd 019822 increase -1 ,temp +: 019824 check_l2cap_map_used2: +0x4dde 019825 increase 1 ,queue +0x4ddf 019826 branch check_l2cap_map_loop +: 019828 l2cap_call_proc_sdp: +0x4de0 019829 call l2cap_malloc_is_fifo_empty +0x4de1 019830 nrtn blank +0x4de2 019831 call l2cap_check_map +0x4de3 019832 nrtn blank +0x4de4 019833 call l2cap_malloc_sdp_channel +0x4de5 019834 call sdp_process +0x4de6 019835 call l2cap_reset_sdp_map +0x4de7 019836 branch l2cap_call_proc_sdp_common +: 019839 ml2cap_call_proc_sdp: +0x4de8 019840 call l2cap_malloc_is_fifo_empty +0x4de9 019841 nrtn blank +0x4dea 019842 call l2cap_malloc_sdp_channel +0x4deb 019843 call sdp_process +: 019844 l2cap_call_proc_sdp_common: +0x4dec 019845 call l2cap_get_sdp_tx_buff +0x4ded 019846 fetch 2 ,mem_sdp_tx_pkt_length +0x4dee 019847 branch l2cap_call_proc_no_reply ,blank +0x4def 019848 istore 2 ,contw +0x4df0 019849 fetch 2 ,mem_sdp_remote_cid +0x4df1 019850 istore 2 ,contw +0x4df2 019851 branch l2cap_rx_reset_state +: 019853 l2cap_call_proc_hid: +0x4df3 019854 call hid_rx_process +0x4df4 019855 branch l2cap_rx_reset_state +: 019857 l2cap_call_proc_rfcomm: +0x4df5 019858 bpatchx patch21_4 ,mem_patch21 +0x4df6 019859 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +0x4df7 019860 call rfcomm_rx_process +0x4df8 019861 fetch 1 ,mem_rfcomm_malloc_fail_flag +0x4df9 019862 rtneq rfcomm_malloc_fail +0x4dfa 019863 branch l2cap_rx_reset_state +: 019864 l2cap_call_proc_no_reply: +0x4dfb 019865 call l2cap_malloc_discard +: 019867 l2cap_rx_reset_state: +0x4dfc 019868 setarg 0 +0x4dfd 019869 store 2 ,mem_l2cap_rx_pkt_length +0x4dfe 019870 store 2 ,mem_l2cap_rx_cid +0x4dff 019871 jam l2cap_rx_done ,mem_l2cap_rx_done +0x4e00 019872 rtn +: 019874 l2cap_process_signal_pkt: +0x4e01 019875 bpatchx patch21_5 ,mem_patch21 +0x4e02 019876 call l2cap_get_signal_tx_payload +0x4e03 019877 force 0 ,regb +0x4e04 019878 fetch 2 ,mem_l2cap_rx_pkt_length +0x4e05 019879 copy pdata ,regc +0x4e06 019880 fetch 2 ,mem_l2cap_payload_ptr +0x4e07 019881 iforce contr +: 019882 l2cap_process_signal_pkt_loop: +0x4e08 019883 call l2cap_process_one_signal +0x4e09 019884 deposit regc +0x4e0a 019885 increase -4 ,regc +0x4e0b 019886 increase -4 ,pdata +0x4e0c 019887 nbranch l2cap_process_signal_pkt_loop ,blank +0x4e0d 019888 copy regb ,pdata +0x4e0e 019889 store 2 ,mem_l2cap_signal_tx_length +0x4e0f 019890 rtn +: 019892 l2cap_process_one_signal: +0x4e10 019893 bpatchx patch21_6 ,mem_patch21 +0x4e11 019894 ifetch 1 ,contr +0x4e12 019895 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject +0x4e13 019896 beq signal_connect_req ,l2cap_proc_signal_connect_req +0x4e14 019897 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp +0x4e15 019898 beq signal_config_req ,l2cap_proc_signal_config_req +0x4e16 019899 beq signal_config_rsp ,l2cap_proc_signal_config_rsp +0x4e17 019900 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req +0x4e18 019901 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp +0x4e19 019902 beq signal_echo_req ,l2cap_proc_signal_echo_req +0x4e1a 019903 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp +0x4e1b 019904 beq signal_info_req ,l2cap_proc_signal_info_req +0x4e1c 019905 beq signal_info_rsp ,l2cap_proc_signal_info_rsp +0x4e1d 019906 call l2cap_reject_command +: 019907 l2cap_process_one_signal_rtn: +0x4e1e 019908 rtn +: 019910 l2cap_proc_signal_info_req: +0x4e1f 019911 ifetch 1 ,contr +0x4e20 019912 copy pdata ,queue +0x4e21 019913 ifetch 2 ,contr +0x4e22 019914 copy pdata ,rega +0x4e23 019915 copy regc ,pdata +0x4e24 019916 isub rega ,regc +0x4e25 019917 setarg signal_info_rsp +0x4e26 019918 istore 1 ,contw +0x4e27 019919 copy queue ,pdata +0x4e28 019920 istore 1 ,contw +0x4e29 019921 ifetch 2 ,contr +: 019922 l2cap_proc_signal_info_req_reply: +0x4e2a 019923 beq l2cap_sig_ext_featrue ,l2cap_proc_signal_info_req_ext +0x4e2b 019924 beq l2cap_sig_fix_featrue ,l2cap_proc_signal_info_req_fix +0x4e2c 019925 rtn +: 019926 l2cap_proc_signal_info_req_ext: +0x4e2d 019927 setarg 0x020008 +0x4e2e 019928 istore 6 ,contw +0x4e2f 019929 setarg 0x0280 +0x4e30 019930 istore 4 ,contw +0x4e31 019931 force 12 ,pdata +0x4e32 019932 branch l2cap_proc_signal_info_req_common +: 019933 l2cap_proc_signal_info_req_fix: +0x4e33 019934 setarg 0x3000c +0x4e34 019935 istore 6 ,contw +0x4e35 019936 setarg 0x0006 +0x4e36 019937 istore 8 ,contw +0x4e37 019938 force 16 ,pdata +: 019939 l2cap_proc_signal_info_req_common: +0x4e38 019940 iadd regb ,regb +0x4e39 019941 branch l2cap_process_one_signal_rtn +: 019943 ml2cap_proc_signal_info_req: +0x4e3a 019944 ifetch 1 ,contr +0x4e3b 019945 copy pdata ,queue +0x4e3c 019946 ifetch 2 ,contr +0x4e3d 019947 copy pdata ,rega +0x4e3e 019948 ifetch 2 ,contr +0x4e3f 019949 store 2 ,mem_temp +0x4e40 019950 copy regc ,pdata +0x4e41 019951 isub rega ,regc +0x4e42 019952 call l2cap_get_signal_tx_payload +0x4e43 019953 setarg signal_info_rsp +0x4e44 019954 istore 1 ,contw +0x4e45 019955 copy queue ,pdata +0x4e46 019956 istore 1 ,contw +0x4e47 019957 fetch 2 ,mem_temp +0x4e48 019958 branch l2cap_proc_signal_info_req_reply +: 019962 l2cap_proc_signal_cmd_reject: +0x4e49 019963 ifetch 1 ,contr +0x4e4a 019964 copy pdata ,queue +0x4e4b 019965 ifetch 2 ,contr +0x4e4c 019966 copy pdata ,rega +0x4e4d 019967 iadd contr ,contr +0x4e4e 019968 copy regc ,pdata +0x4e4f 019969 isub rega ,regc +: 019970 l2cap_proc_signal_cmd_reject_rtn: +0x4e50 019971 branch l2cap_process_one_signal_rtn +: 019973 l2cap_proc_signal_connect_req: +0x4e51 019974 call save_cont_pointers +0x4e52 019977 call load_cont_pointers +0x4e53 019978 arg 0 ,debug +0x4e54 019979 ifetch 1 ,contr +0x4e55 019980 copy pdata ,queue +0x4e56 019981 ifetch 2 ,contr +0x4e57 019982 copy pdata ,rega +0x4e58 019983 ifetch 2 ,contr +0x4e59 019984 copy pdata ,temp +0x4e5a 019985 ifetch 2 ,contr +0x4e5b 019986 copy pdata ,timeup +0x4e5c 019987 bpatchx patch21_7 ,mem_patch21 +0x4e5d 019988 copy temp ,pdata +0x4e5e 019989 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp +0x4e5f 019990 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm +0x4e60 019991 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl +0x4e61 019992 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int +0x4e62 019993 call l2cap_reject_command +0x4e63 019994 branch l2cap_proc_signal_connect_req_rtn +: 019996 l2cap_proc_signal_connect_req_sdp: +0x4e64 019997 call save_cont_pointers +0x4e65 019998 arg l2cap_sdp_channel ,temp +0x4e66 019999 fetch 2 ,mem_sdp_remote_cid +0x4e67 020000 nbranch already_connected ,blank +0x4e68 020001 copy timeup ,pdata +0x4e69 020002 store 2 ,mem_sdp_remote_cid +0x4e6a 020003 copy clkn_bt ,pdata +0x4e6b 020004 store 4 ,mem_l2cap_sdpres_delay_time +0x4e6c 020005 call store_l2cap_req_param +0x4e6d 020006 branch send_connection_pending +: 020008 store_l2cap_req_param: +0x4e6e 020009 storet 2 ,mem_psm +0x4e6f 020010 deposit timeup +0x4e70 020011 store 2 ,mem_scid +0x4e71 020012 deposit rega +0x4e72 020013 store 2 ,mem_cmd_length +0x4e73 020014 deposit regb +0x4e74 020015 store 2 ,mem_tt2 +0x4e75 020016 deposit regc +0x4e76 020017 store 2 ,mem_tt3 +0x4e77 020018 deposit queue +0x4e78 020019 store 2 ,mem_id +0x4e79 020020 rtn +: 020022 restore_l2cap_req_param: +0x4e7a 020023 fetcht 2 ,mem_psm +0x4e7b 020024 fetch 2 ,mem_scid +0x4e7c 020025 copy pdata ,timeup +0x4e7d 020026 fetch 2 ,mem_cmd_length +0x4e7e 020027 copy pdata ,rega +0x4e7f 020028 fetch 2 ,mem_tt2 +0x4e80 020029 copy pdata ,regb +0x4e81 020030 fetch 2 ,mem_tt3 +0x4e82 020031 copy pdata ,regc +0x4e83 020032 fetch 2 ,mem_id +0x4e84 020033 copy pdata ,queue +0x4e85 020034 rtn +: 020036 l2cap_proc_signal_connect_req_rfcomm: +0x4e86 020037 call save_cont_pointers +0x4e87 020038 setarg l2cap_rfcomm_channel +0x4e88 020039 arg l2cap_rfcomm_channel ,temp +0x4e89 020040 fetch 2 ,mem_rfcomm_remote_cid +0x4e8a 020041 nbranch already_connected ,blank +0x4e8b 020042 copy timeup ,pdata +0x4e8c 020043 store 2 ,mem_rfcomm_remote_cid +0x4e8d 020044 fetch 1 ,mem_rfcomm_state +0x4e8e 020045 set1 l2cap_channel_state_conn_req ,pdata +0x4e8f 020046 set1 l2cap_channel_state_conn_res ,pdata +0x4e90 020047 store 1 ,mem_rfcomm_state +0x4e91 020048 branch send_connection_res +: 020049 l2cap_proc_signal_connect_req_hid_ctrl: +0x4e92 020050 call save_cont_pointers +0x4e93 020051 arg l2cap_hid_control_channel ,temp +0x4e94 020052 fetch 2 ,mem_hid_ctrl_remote_cid +0x4e95 020053 nbranch already_connected ,blank +0x4e96 020054 copy timeup ,pdata +0x4e97 020055 store 2 ,mem_hid_ctrl_remote_cid +0x4e98 020056 fetch 1 ,mem_hid_control_state +0x4e99 020057 set1 l2cap_channel_state_conn_req ,pdata +0x4e9a 020058 set1 l2cap_channel_state_conn_res ,pdata +0x4e9b 020059 store 1 ,mem_hid_control_state +0x4e9c 020060 branch send_connection_res +: 020061 l2cap_proc_signal_connect_req_hid_int: +0x4e9d 020062 call save_cont_pointers +0x4e9e 020063 deposit clke +0x4e9f 020064 arg l2cap_hid_interrupt_channel ,temp +0x4ea0 020065 fetch 2 ,mem_hid_int_remote_cid +0x4ea1 020066 nbranch already_connected ,blank +0x4ea2 020067 copy timeup ,pdata +0x4ea3 020068 store 2 ,mem_hid_int_remote_cid +0x4ea4 020069 fetch 1 ,mem_hid_interrupt_state +0x4ea5 020070 set1 l2cap_channel_state_conn_req ,pdata +0x4ea6 020071 set1 l2cap_channel_state_conn_res ,pdata +0x4ea7 020072 store 1 ,mem_hid_interrupt_state +0x4ea8 020073 branch send_connection_res +: 020075 send_connection_pending: +0x4ea9 020076 setarg l2cap_connect_pending +0x4eaa 020077 store 2 ,meml2cap_t1 +0x4eab 020078 jam l2cap_sdp_channel ,mem_l2cap_pending_item +0x4eac 020079 branch send_connection_res0 +: 020080 send_connection_sdp_res: +0x4ead 020081 fetch 1 ,mem_sdp_state +0x4eae 020082 set1 l2cap_channel_state_conn_req ,pdata +0x4eaf 020083 set1 l2cap_channel_state_conn_res ,pdata +0x4eb0 020084 store 1 ,mem_sdp_state +: 020085 send_connection_res: +0x4eb1 020086 setarg l2cap_connect_successful +0x4eb2 020087 store 2 ,meml2cap_t1 +: 020088 send_connection_res0: +0x4eb3 020089 bpatchx patch22_0 ,mem_patch22 +0x4eb4 020090 call load_cont_pointers +0x4eb5 020091 setarg signal_connect_rsp +0x4eb6 020092 istore 1 ,contw +0x4eb7 020093 copy queue ,pdata +0x4eb8 020094 istore 1 ,contw +0x4eb9 020095 setarg 0x0008 +0x4eba 020096 istore 2 ,contw +0x4ebb 020097 copy temp ,pdata +0x4ebc 020098 istore 2 ,contw +0x4ebd 020099 copy timeup ,pdata +0x4ebe 020100 istore 2 ,contw +0x4ebf 020101 fetch 2 ,meml2cap_t1 +0x4ec0 020102 beq l2cap_connect_pending ,connect_pending +0x4ec1 020103 isolate0 0 ,debug +0x4ec2 020104 branch connect_suc ,true +0x4ec3 020105 setarg l2cap_connect_refused_no_resources +: 020106 connect_suc: +0x4ec4 020107 istore 2 ,contw +0x4ec5 020108 force 0x0000 ,pdata +0x4ec6 020109 istore 2 ,contw +0x4ec7 020110 setarg 12 +0x4ec8 020111 branch connect_req_update_byte_counts +: 020112 connect_pending: +0x4ec9 020113 istore 2 ,contw +0x4eca 020114 force 0x0002 ,pdata +0x4ecb 020115 istore 2 ,contw +0x4ecc 020116 setarg 12 +0x4ecd 020117 branch connect_req_update_byte_counts +: 020119 already_connected: +0x4ece 020120 set1 0 ,debug +0x4ecf 020121 branch send_connection_res +: 020122 connect_req_update_byte_counts: +0x4ed0 020123 iadd regb ,regb +0x4ed1 020124 copy regc ,pdata +0x4ed2 020125 isub rega ,regc +0x4ed3 020126 branch l2cap_proc_signal_connect_req_rtn +: 020127 l2cap_proc_signal_connect_req_rtn: +0x4ed4 020128 branch l2cap_process_one_signal_rtn +: 020130 l2cap_proc_signal_connect_rsp: +0x4ed5 020131 ifetch 1 ,contr +0x4ed6 020132 copy pdata ,queue +0x4ed7 020133 ifetch 2 ,contr +0x4ed8 020134 copy pdata ,rega +0x4ed9 020135 copy regc ,pdata +0x4eda 020136 isub rega ,regc +0x4edb 020137 ifetch 2 ,contr +0x4edc 020138 copy pdata ,timeup +0x4edd 020139 ifetch 2 ,contr +0x4ede 020140 copy pdata ,temp +0x4edf 020141 bpatchx patch22_1 ,mem_patch22 +0x4ee0 020142 setarg l2cap_sdp_channel +0x4ee1 020143 isub temp ,null +0x4ee2 020144 branch l2cap_proc_signal_connect_rsp_sdp ,zero +0x4ee3 020145 setarg l2cap_rfcomm_channel +0x4ee4 020146 isub temp ,null +0x4ee5 020147 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero +0x4ee6 020148 setarg l2cap_hid_control_channel +0x4ee7 020149 isub temp ,null +0x4ee8 020150 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero +0x4ee9 020151 setarg l2cap_hid_interrupt_channel +0x4eea 020152 isub temp ,null +0x4eeb 020153 branch l2cap_proc_signal_connect_rsp_hid_int ,zero +0x4eec 020154 rtn +: 020156 l2cap_proc_signal_connect_rsp_sdp: +0x4eed 020157 copy timeup ,pdata +0x4eee 020158 store 2 ,mem_sdp_remote_cid +0x4eef 020159 fetch 1 ,mem_sdp_state +0x4ef0 020160 set1 l2cap_channel_state_conn_res ,pdata +0x4ef1 020161 store 1 ,mem_sdp_state +0x4ef2 020162 branch l2cap_process_one_signal_rtn +: 020163 l2cap_proc_signal_connect_rsp_rfcomm: +0x4ef3 020164 copy timeup ,pdata +0x4ef4 020165 store 2 ,mem_rfcomm_remote_cid +0x4ef5 020166 fetch 1 ,mem_rfcomm_state +0x4ef6 020167 set1 l2cap_channel_state_conn_res ,pdata +0x4ef7 020168 store 1 ,mem_rfcomm_state +0x4ef8 020169 rtn +: 020170 l2cap_proc_signal_connect_rsp_hid_int: +0x4ef9 020171 copy timeup ,pdata +0x4efa 020172 store 2 ,mem_hid_ctrl_remote_cid +0x4efb 020173 fetch 1 ,mem_hid_interrupt_state +0x4efc 020174 set1 l2cap_channel_state_conn_res ,pdata +0x4efd 020175 store 1 ,mem_hid_interrupt_state +0x4efe 020176 rtn +: 020177 l2cap_proc_signal_connect_rsp_hid_ctrl: +0x4eff 020178 copy timeup ,pdata +0x4f00 020179 store 2 ,mem_hid_int_remote_cid +0x4f01 020180 fetch 1 ,mem_hid_control_state +0x4f02 020181 set1 l2cap_channel_state_conn_res ,pdata +0x4f03 020182 store 1 ,mem_hid_control_state +0x4f04 020183 rtn +: 020185 l2cap_proc_signal_config_req: +0x4f05 020186 ifetch 1 ,contr +0x4f06 020187 copy pdata ,queue +0x4f07 020188 ifetch 2 ,contr +0x4f08 020189 copy pdata ,rega +0x4f09 020190 copy regc ,pdata +0x4f0a 020191 isub rega ,regc +0x4f0b 020192 ifetch 2 ,contr +0x4f0c 020193 copy pdata ,temp +0x4f0d 020194 copy temp ,rega +0x4f0e 020195 bpatchx patch22_2 ,mem_patch22 +0x4f0f 020196 setarg l2cap_sdp_channel +0x4f10 020197 isub temp ,null +0x4f11 020198 branch l2cap_proc_signal_config_req_sdp ,zero +0x4f12 020199 setarg l2cap_rfcomm_channel +0x4f13 020200 isub temp ,null +0x4f14 020201 branch l2cap_proc_signal_config_req_rfcomm ,zero +0x4f15 020202 setarg l2cap_hid_control_channel +0x4f16 020203 isub temp ,null +0x4f17 020204 branch l2cap_proc_signal_config_req_hid_ctrl ,zero +0x4f18 020205 setarg l2cap_hid_interrupt_channel +0x4f19 020206 isub temp ,null +0x4f1a 020207 branch l2cap_proc_signal_config_req_hid_int ,zero +0x4f1b 020208 branch l2cap_reject_command +: 020210 l2cap_proc_signal_config_req_sdp: +0x4f1c 020211 copy contw ,timeup +0x4f1d 020212 fetch 1 ,mem_sdp_state +0x4f1e 020213 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f1f 020214 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f20 020216 store 1 ,mem_sdp_state +0x4f21 020217 copy timeup ,contw +0x4f22 020218 arg l2cap_sdp_channel ,timeup +0x4f23 020219 fetch 2 ,mem_sdp_remote_cid +0x4f24 020220 copy pdata ,temp +0x4f25 020221 branch l2cap_send_config_rsp +: 020222 l2cap_proc_signal_config_req_hid_ctrl: +0x4f26 020223 copy contw ,timeup +0x4f27 020224 fetch 1 ,mem_hid_control_state +0x4f28 020225 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f29 020226 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f2a 020228 store 1 ,mem_hid_control_state +0x4f2b 020229 copy timeup ,contw +0x4f2c 020230 arg l2cap_hid_control_channel ,timeup +0x4f2d 020231 fetch 2 ,mem_hid_ctrl_remote_cid +0x4f2e 020232 copy pdata ,temp +0x4f2f 020233 branch l2cap_send_config_rsp +: 020234 l2cap_proc_signal_config_req_hid_int: +0x4f30 020235 copy contw ,timeup +0x4f31 020236 fetch 1 ,mem_hid_interrupt_state +0x4f32 020237 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f33 020238 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f34 020240 store 1 ,mem_hid_interrupt_state +0x4f35 020241 copy timeup ,contw +0x4f36 020242 arg l2cap_hid_interrupt_channel ,timeup +0x4f37 020243 fetch 2 ,mem_hid_int_remote_cid +0x4f38 020244 copy pdata ,temp +0x4f39 020245 branch l2cap_send_config_rsp +: 020246 l2cap_proc_signal_config_req_rfcomm: +0x4f3a 020247 copy contw ,timeup +0x4f3b 020248 fetch 1 ,mem_rfcomm_state +0x4f3c 020249 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x4f3d 020250 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x4f3e 020252 store 1 ,mem_rfcomm_state +0x4f3f 020254 copy timeup ,contw +0x4f40 020255 arg l2cap_rfcomm_channel ,timeup +0x4f41 020256 fetch 2 ,mem_rfcomm_remote_cid +0x4f42 020257 copy pdata ,temp +: 020258 l2cap_send_config_rsp: +0x4f43 020259 bpatchx patch22_3 ,mem_patch22 +0x4f44 020260 setarg signal_config_rsp +0x4f45 020261 istore 1 ,contw +0x4f46 020262 copy queue ,pdata +0x4f47 020263 istore 1 ,contw +0x4f48 020264 setarg 0x0006 +0x4f49 020265 istore 2 ,contw +0x4f4a 020266 copy temp ,pdata +0x4f4b 020267 istore 2 ,contw +0x4f4c 020268 force 0x00 ,pdata +0x4f4d 020269 istore 2 ,contw +0x4f4e 020270 force l2cap_config_success ,pdata +0x4f4f 020271 istore 2 ,contw +0x4f50 020272 force 10 ,pdata +0x4f51 020273 iadd regb ,regb +0x4f52 020275 storet 2 ,mem_config_req_dest_cid +0x4f53 020276 copy queue ,pdata +0x4f54 020277 store 1 ,mem_config_identifier +0x4f55 020278 force l2cap_sdp_channel ,pdata +0x4f56 020279 icompare 0xff ,timeup +0x4f57 020280 branch l2cap_send_config_rsp_is_sdp ,true +0x4f58 020281 increase 1 ,pdata +: 020282 l2cap_send_config_rsp_is_sdp: +0x4f59 020284 rtn +: 020285 l2cap_check_channel_state: +0x4f5a 020286 disable user +0x4f5b 020287 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata +0x4f5c 020288 rtnbit0 l2cap_channel_state_conn_req ,pdata +0x4f5d 020289 rtnbit0 l2cap_channel_state_conn_res ,pdata +0x4f5e 020290 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x4f5f 020291 copy contr ,contw +0x4f60 020292 increase -1 ,contw +0x4f61 020293 istore 1 ,contw +0x4f62 020294 enable user +0x4f63 020295 rtn +: 020296 l2cap_send_config_req: +: 020297 l2cap_send_config_req_sdp: +0x4f64 020298 fetch 1 ,mem_sdp_state +0x4f65 020299 call l2cap_check_channel_state +0x4f66 020300 nbranch l2cap_send_config_req_rfcomm ,user +0x4f67 020301 jam l2cap_sdp_channel ,mem_send_config_req +0x4f68 020302 fetch 2 ,mem_sdp_remote_cid +0x4f69 020303 store 2 ,mem_config_req_dest_cid +0x4f6a 020304 branch l2cap_generate_config_req +: 020305 l2cap_send_config_req_rfcomm: +0x4f6b 020306 fetch 1 ,mem_rfcomm_state +0x4f6c 020307 call l2cap_check_channel_state +0x4f6d 020308 nbranch l2cap_send_config_req_hid_ctrl ,user +0x4f6e 020309 jam l2cap_rfcomm_channel ,mem_send_config_req +0x4f6f 020310 fetch 2 ,mem_rfcomm_remote_cid +0x4f70 020311 store 2 ,mem_config_req_dest_cid +0x4f71 020312 branch l2cap_generate_config_req +: 020313 l2cap_send_config_req_hid_ctrl: +0x4f72 020314 fetch 1 ,mem_hid_control_state +0x4f73 020315 call l2cap_check_channel_state +0x4f74 020316 nbranch l2cap_send_config_req_hid_int ,user +0x4f75 020317 jam l2cap_hid_control_channel ,mem_send_config_req +0x4f76 020318 fetch 2 ,mem_hid_ctrl_remote_cid +0x4f77 020319 store 2 ,mem_config_req_dest_cid +0x4f78 020320 branch l2cap_generate_config_req +: 020321 l2cap_send_config_req_hid_int: +0x4f79 020322 fetch 1 ,mem_hid_interrupt_state +0x4f7a 020323 call l2cap_check_channel_state +0x4f7b 020324 nrtn user +0x4f7c 020325 jam l2cap_hid_interrupt_channel ,mem_send_config_req +0x4f7d 020326 fetch 2 ,mem_hid_int_remote_cid +0x4f7e 020327 store 2 ,mem_config_req_dest_cid +: 020330 l2cap_generate_config_req: +0x4f7f 020331 bpatchx patch22_4 ,mem_patch22 +0x4f80 020332 call l2cap_get_req_id +0x4f81 020333 call l2cap_malloc_signal_channel +0x4f82 020334 force 0 ,regb +0x4f83 020335 call l2cap_get_signal_tx_payload +0x4f84 020336 force signal_config_req ,pdata +0x4f85 020337 istore 1 ,contw +0x4f86 020338 fetch 1 ,mem_ml2cap_comm_id +0x4f87 020339 istore 1 ,contw +0x4f88 020340 setarg 0x0008 +0x4f89 020341 istore 2 ,contw +0x4f8a 020342 fetch 2 ,mem_config_req_dest_cid +0x4f8b 020343 istore 2 ,contw +0x4f8c 020344 setarg 0x0000 +0x4f8d 020345 istore 2 ,contw +0x4f8e 020346 force 1 ,pdata +0x4f8f 020347 istore 1 ,contw +0x4f90 020348 force 2 ,pdata +0x4f91 020349 istore 1 ,contw +0x4f92 020350 fetch 1 ,mem_send_config_req +0x4f93 020351 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm +0x4f94 020352 setarg l2cap_config_mtu_sdp +0x4f95 020353 istore 2 ,contw +0x4f96 020354 branch l2cap_generate_config_req_done +: 020355 l2cap_generate_config_req_rfcomm: +0x4f97 020356 setarg l2cap_config_mtu_rfcomm +0x4f98 020357 istore 2 ,contw +: 020358 l2cap_generate_config_req_done: +0x4f99 020359 arg 0x0c ,temp +0x4f9a 020360 storet 2 ,mem_l2cap_signal_tx_length +0x4f9b 020361 call l2cap_get_signal_tx_buff +0x4f9c 020362 fetch 2 ,mem_l2cap_signal_tx_length +0x4f9d 020363 istore 2 ,contw +0x4f9e 020364 force l2cap_signal_channel ,pdata +0x4f9f 020365 istore 2 ,contw +0x4fa0 020366 jam 0 ,mem_send_config_req +: 020367 l2cap_proc_signal_config_req_rtn: +0x4fa1 020368 branch l2cap_process_one_signal_rtn +: 020370 l2cap_proc_signal_config_rsp: +0x4fa2 020371 increase 1 ,contr +0x4fa3 020372 ifetch 2 ,contr +0x4fa4 020373 copy pdata ,rega +0x4fa5 020374 copy regc ,pdata +0x4fa6 020375 isub rega ,regc +0x4fa7 020376 ifetch 2 ,contr +0x4fa8 020377 copy pdata ,rega +0x4fa9 020378 bpatchx patch22_5 ,mem_patch22 +0x4faa 020379 setarg l2cap_sdp_channel +0x4fab 020380 isub rega ,null +0x4fac 020381 branch l2cap_proc_signal_config_rsp_sdp ,zero +0x4fad 020382 setarg l2cap_rfcomm_channel +0x4fae 020383 isub rega ,null +0x4faf 020384 branch l2cap_proc_signal_config_rsp_rfcomm ,zero +0x4fb0 020385 setarg l2cap_hid_control_channel +0x4fb1 020386 isub rega ,null +0x4fb2 020387 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero +0x4fb3 020388 setarg l2cap_hid_interrupt_channel +0x4fb4 020389 isub rega ,null +0x4fb5 020390 branch l2cap_proc_signal_config_rsp_hid_int ,zero +0x4fb6 020391 increase 2 ,contr +0x4fb7 020392 ifetch 2 ,contr +0x4fb8 020393 iforce null +0x4fb9 020394 branch l2cap_process_one_signal_rtn +: 020395 l2cap_proc_signal_config_rsp_sdp: +0x4fba 020396 fetch 1 ,mem_sdp_state +0x4fbb 020397 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fbc 020398 store 1 ,mem_sdp_state +0x4fbd 020399 branch l2cap_process_one_signal_rtn +: 020400 l2cap_proc_signal_config_rsp_rfcomm: +0x4fbe 020401 fetch 1 ,mem_rfcomm_state +0x4fbf 020402 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc0 020403 store 1 ,mem_rfcomm_state +0x4fc1 020404 branch l2cap_process_one_signal_rtn +: 020405 l2cap_proc_signal_config_rsp_hid_ctrl: +0x4fc2 020406 fetch 1 ,mem_hid_control_state +0x4fc3 020407 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc4 020408 store 1 ,mem_hid_control_state +0x4fc5 020409 branch l2cap_process_one_signal_rtn +: 020410 l2cap_proc_signal_config_rsp_hid_int: +0x4fc6 020411 fetch 1 ,mem_hid_interrupt_state +0x4fc7 020412 set1 l2cap_channel_state_rcv_cfg_res ,pdata +0x4fc8 020413 store 1 ,mem_hid_interrupt_state +0x4fc9 020414 jam bt_evt_hid_connected ,mem_fifo_temp +0x4fca 020415 branch ui_ipc_send_event +: 020419 l2cap_proc_signal_disconnect_req: +0x4fcb 020420 ifetch 1 ,contr +0x4fcc 020421 copy pdata ,queue +0x4fcd 020422 ifetch 2 ,contr +0x4fce 020423 copy pdata ,rega +0x4fcf 020424 copy regc ,pdata +0x4fd0 020425 isub rega ,regc +0x4fd1 020426 ifetch 2 ,contr +0x4fd2 020427 copy pdata ,rega +0x4fd3 020428 ifetch 2 ,contr +0x4fd4 020429 copy pdata ,timeup +0x4fd5 020430 copy rega ,temp +0x4fd6 020431 call save_cont_pointers +0x4fd7 020432 bpatchx patch22_6 ,mem_patch22 +0x4fd8 020433 setarg l2cap_sdp_channel +0x4fd9 020434 isub temp ,null +0x4fda 020435 branch l2cap_proc_signal_disconnect_req_sdp ,zero +0x4fdb 020436 setarg l2cap_rfcomm_channel +0x4fdc 020437 isub temp ,null +0x4fdd 020438 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero +0x4fde 020439 setarg l2cap_hid_control_channel +0x4fdf 020440 isub temp ,null +0x4fe0 020441 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero +0x4fe1 020442 setarg l2cap_hid_interrupt_channel +0x4fe2 020443 isub temp ,null +0x4fe3 020444 branch l2cap_proc_signal_disconnect_req_hid_int ,zero +0x4fe4 020445 call l2cap_reject_command +0x4fe5 020446 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020447 l2cap_proc_signal_disconnect_req_hid_ctrl: +0x4fe6 020448 copy timeup ,temp +0x4fe7 020449 fetch 2 ,mem_hid_ctrl_remote_cid +0x4fe8 020450 isub temp ,null +0x4fe9 020451 branch l2cap_disconnect_hid_control_now ,zero +0x4fea 020452 call l2cap_reject_command +0x4feb 020453 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020454 l2cap_proc_signal_disconnect_req_hid_int: +0x4fec 020455 copy timeup ,temp +0x4fed 020456 fetch 2 ,mem_hid_int_remote_cid +0x4fee 020457 isub temp ,null +0x4fef 020458 branch l2cap_disconnect_hid_interrupt_now ,zero +0x4ff0 020459 call l2cap_reject_command +0x4ff1 020460 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020462 l2cap_proc_signal_disconnect_req_sdp: +0x4ff2 020463 copy timeup ,temp +0x4ff3 020464 fetch 2 ,mem_sdp_remote_cid +0x4ff4 020465 isub temp ,null +0x4ff5 020466 branch l2cap_disconnect_sdp_now ,zero +0x4ff6 020467 call l2cap_reject_command +0x4ff7 020468 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020469 l2cap_disconnect_hid_control_now: +0x4ff8 020470 call l2cap_reset_hid_ctrl_state +0x4ff9 020471 branch l2cap_send_disconnect_rsp_pkt +: 020472 l2cap_disconnect_hid_interrupt_now: +0x4ffa 020473 call l2cap_reset_hid_int_state +0x4ffb 020474 fetch 2 ,mem_hid_ctrl_remote_cid +0x4ffc 020475 branch l2cap_send_disconnect_rsp_pkt ,blank +0x4ffd 020483 branch l2cap_send_disconnect_rsp_pkt +: 020485 l2cap_disconnect_sdp_now: +0x4ffe 020486 call l2cap_reset_sdp_channel_state +0x4fff 020487 fetch 1 ,mem_upper_sm_ss +0x5000 020488 nbranch l2cap_send_disconnect_rsp_pkt ,blank +0x5001 020491 branch l2cap_send_disconnect_rsp_pkt +: 020492 l2cap_proc_signal_disconnect_req_rfcomm: +0x5002 020493 copy timeup ,temp +0x5003 020494 fetch 2 ,mem_rfcomm_remote_cid +0x5004 020495 isub temp ,null +0x5005 020496 branch l2cap_disconnect_rfcomm_now ,zero +0x5006 020497 call l2cap_reject_command +0x5007 020498 branch l2cap_proc_signal_disconnect_req_err_rtn +: 020499 l2cap_disconnect_rfcomm_now: +0x5008 020500 call l2cap_reset_rfcomm_channel_state +0x5009 020501 branch l2cap_send_disconnect_rsp_pkt +: 020502 l2cap_send_disconnect_rsp_pkt: +0x500a 020503 call load_cont_pointers +0x500b 020504 setarg signal_disconnect_rsp +0x500c 020505 istore 1 ,contw +0x500d 020506 copy queue ,pdata +0x500e 020507 istore 1 ,contw +0x500f 020508 setarg 0x0004 +0x5010 020509 istore 2 ,contw +0x5011 020510 copy rega ,pdata +0x5012 020511 istore 2 ,contw +0x5013 020512 copy timeup ,pdata +0x5014 020513 istore 2 ,contw +0x5015 020514 force 8 ,pdata +0x5016 020515 branch l2cap_proc_signal_disconnect_req_rtn +: 020516 l2cap_proc_signal_disconnect_req_err_rtn: +0x5017 020517 call load_cont_pointers +0x5018 020518 branch l2cap_proc_signal_disconnect_req_rtn +: 020519 l2cap_proc_signal_disconnect_req_rtn: +0x5019 020520 iadd regb ,regb +0x501a 020521 branch l2cap_process_one_signal_rtn +: 020522 l2cap_proc_signal_disconnect_rsp: +0x501b 020523 ifetch 1 ,contr +0x501c 020524 copy pdata ,queue +0x501d 020525 ifetch 2 ,contr +0x501e 020526 copy pdata ,rega +0x501f 020527 copy regc ,pdata +0x5020 020528 isub rega ,regc +0x5021 020529 ifetch 2 ,contr +0x5022 020530 copy pdata ,timeup +0x5023 020531 ifetch 2 ,contr +0x5024 020532 copy pdata ,temp +0x5025 020533 call save_cont_pointers +0x5026 020534 bpatchx patch22_7 ,mem_patch22 +0x5027 020535 setarg l2cap_sdp_channel +0x5028 020536 isub temp ,null +0x5029 020537 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero +0x502a 020538 setarg l2cap_rfcomm_channel +0x502b 020539 isub temp ,null +0x502c 020540 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero +0x502d 020541 setarg l2cap_hid_control_channel +0x502e 020542 isub temp ,null +0x502f 020543 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero +0x5030 020544 setarg l2cap_hid_interrupt_channel +0x5031 020545 isub temp ,null +0x5032 020546 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero +0x5033 020547 call l2cap_reject_command +0x5034 020548 branch l2cap_proc_signal_disconnect_rsp_err_rtn +: 020549 l2cap_proc_signal_disconnect_rsp_sdp: +0x5035 020550 copy temp ,rega +0x5036 020551 copy timeup ,temp +0x5037 020552 fetch 2 ,mem_sdp_remote_cid +0x5038 020553 isub temp ,null +0x5039 020554 call l2cap_reset_sdp_channel_state ,zero +0x503a 020555 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020556 l2cap_proc_signal_disconnect_rsp_rfcomm: +0x503b 020557 copy temp ,rega +0x503c 020558 copy timeup ,temp +0x503d 020559 fetch 2 ,mem_rfcomm_remote_cid +0x503e 020560 isub temp ,null +0x503f 020561 call l2cap_reset_rfcomm_channel_state ,zero +0x5040 020562 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020563 l2cap_proc_signal_disconnect_rsp_hid_ctrl: +0x5041 020564 copy temp ,rega +0x5042 020565 copy timeup ,temp +0x5043 020566 fetch 2 ,mem_hid_ctrl_remote_cid +0x5044 020567 isub temp ,null +0x5045 020568 call l2cap_reset_hid_ctrl_state ,zero +0x5046 020569 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020570 l2cap_proc_signal_disconnect_rsp_hid_int: +0x5047 020571 copy temp ,rega +0x5048 020572 copy timeup ,temp +0x5049 020573 fetch 2 ,mem_hid_int_remote_cid +0x504a 020574 isub temp ,null +0x504b 020575 call l2cap_reset_hid_int_state ,zero +0x504c 020576 branch l2cap_proc_signal_disconnect_rsp_rtn +: 020577 l2cap_proc_signal_disconnect_rsp_rtn: +0x504d 020578 call load_cont_pointers +0x504e 020579 branch l2cap_process_one_signal_rtn +: 020580 l2cap_proc_signal_disconnect_rsp_err_rtn: +0x504f 020581 branch l2cap_process_one_signal_rtn +: 020584 l2cap_proc_signal_echo_req: +0x5050 020585 ifetch 1 ,contr +0x5051 020586 copy pdata ,queue +0x5052 020587 ifetch 2 ,contr +0x5053 020588 copy pdata ,rega +0x5054 020589 iadd contr ,contr +0x5055 020590 setarg 9 +0x5056 020591 istore 1 ,contw +0x5057 020592 copy queue ,pdata +0x5058 020593 istore 1 ,contw +0x5059 020594 force 0x0000 ,pdata +0x505a 020595 istore 2 ,contw +0x505b 020596 force 4 ,pdata +0x505c 020597 iadd regb ,regb +0x505d 020598 copy regc ,pdata +0x505e 020599 isub rega ,regc +0x505f 020600 branch l2cap_process_one_signal_rtn +: 020601 l2cap_proc_signal_echo_rsp: +0x5060 020602 branch l2cap_process_one_signal_rtn +: 020604 l2cap_proc_signal_info_rsp: +0x5061 020605 branch l2cap_process_one_signal_rtn +: 020606 l2cap_reject_command: +0x5062 020607 force 0 ,regb +0x5063 020608 call l2cap_get_signal_tx_payload +0x5064 020609 setarg signal_cmd_reject +0x5065 020610 istore 1 ,contw +0x5066 020611 copy queue ,pdata +0x5067 020612 istore 1 ,contw +0x5068 020613 setarg 2 +0x5069 020614 istore 2 ,contw +0x506a 020615 setarg cmd_not_understood +0x506b 020616 istore 2 ,contw +0x506c 020617 increase 6 ,regb +0x506d 020618 arg 4 ,regc +0x506e 020619 branch l2cap_process_one_signal_rtn +: 020623 l2cap_reset_rfcomm_channel_state: +0x506f 020624 setarg 0 +0x5070 020625 store 2 ,mem_rfcomm_tx_pkt_length +0x5071 020626 store 2 ,mem_rfcomm_remote_cid +0x5072 020627 jam 0 ,mem_rfcomm_state +0x5073 020628 rtn +: 020629 l2cap_reset_sdp_channel_state: +0x5074 020630 setarg 0 +0x5075 020631 store 2 ,mem_sdp_tx_pkt_length +0x5076 020632 store 2 ,mem_sdp_remote_cid +0x5077 020633 jam 0 ,mem_sdp_state +0x5078 020634 rtn +: 020635 l2cap_reset_hid_ctrl_state: +0x5079 020636 setarg 0 +0x507a 020637 store 2 ,mem_hid_ctrl_remote_cid +0x507b 020638 jam 0 ,mem_hid_control_state +0x507c 020639 fetch 1 ,mem_hid_interrupt_state +0x507d 020640 beq 0 ,l2cap_reset_hid_disconnected +0x507e 020641 rtn +: 020643 l2cap_reset_hid_int_state: +0x507f 020644 setarg 0 +0x5080 020645 store 2 ,mem_hid_int_remote_cid +0x5081 020646 jam 0 ,mem_hid_interrupt_state +0x5082 020647 fetch 1 ,mem_hid_control_state +0x5083 020648 beq 0 ,l2cap_reset_hid_disconnected +0x5084 020649 rtn +: 020651 l2cap_reset_hid_disconnected: +0x5085 020652 jam bt_evt_hid_disconnected ,mem_fifo_temp +0x5086 020653 branch ui_ipc_send_event +: 020655 l2cap_disconnect_interrupt_req: +0x5087 020656 fetch 1 ,mem_control_tasks +0x5088 020657 set0 l2cap_disconnect_interrupt ,pdata +0x5089 020658 store 1 ,mem_control_tasks +0x508a 020659 fetch 2 ,mem_hid_int_remote_cid +0x508b 020660 rtn blank +0x508c 020661 call l2cap_malloc_signal_channel +0x508d 020662 fetch 2 ,mem_hid_int_remote_cid +0x508e 020663 copy pdata ,rega +0x508f 020664 force l2cap_hid_interrupt_channel ,regb +0x5090 020665 branch l2cap_generate_disconnect_req +: 020666 l2cap_disconnect_control_req: +0x5091 020667 fetch 1 ,mem_control_tasks +0x5092 020668 set0 l2cap_disconnect_control ,pdata +0x5093 020669 store 1 ,mem_control_tasks +0x5094 020670 fetch 2 ,mem_hid_ctrl_remote_cid +0x5095 020671 rtn blank +0x5096 020672 call l2cap_malloc_signal_channel +0x5097 020673 fetch 2 ,mem_hid_ctrl_remote_cid +0x5098 020674 copy pdata ,rega +0x5099 020675 force l2cap_hid_control_channel ,regb +: 020676 l2cap_generate_disconnect_req: +0x509a 020677 call l2cap_get_req_id +0x509b 020678 call l2cap_get_signal_tx_payload +0x509c 020679 force signal_disconnect_req ,pdata +0x509d 020680 istore 1 ,contw +0x509e 020681 fetch 1 ,mem_ml2cap_comm_id +0x509f 020682 istore 1 ,contw +0x50a0 020683 setarg 0x0004 +0x50a1 020684 istore 2 ,contw +0x50a2 020685 copy rega ,pdata +0x50a3 020686 istore 2 ,contw +0x50a4 020687 copy regb ,pdata +0x50a5 020688 istore 2 ,contw +0x50a6 020689 force 0x08 ,temp +0x50a7 020690 branch ml2cap_send_signal +: 020692 ml2cap_send_signal_connect_req: +0x50a8 020693 bpatchx patch23_0 ,mem_patch23 +0x50a9 020694 call l2cap_get_req_id +0x50aa 020695 call l2cap_get_signal_tx_payload +0x50ab 020696 setarg signal_connect_req +0x50ac 020697 istore 1 ,contw +0x50ad 020698 fetch 1 ,mem_ml2cap_comm_id +0x50ae 020699 istore 1 ,contw +0x50af 020700 setarg 0x0004 +0x50b0 020701 istore 2 ,contw +0x50b1 020702 copy temp ,pdata +0x50b2 020703 istore 2 ,contw +0x50b3 020704 copy timeup ,pdata +0x50b4 020705 istore 2 ,contw +0x50b5 020706 arg 8 ,temp +0x50b6 020707 branch ml2cap_send_signal +: 020708 ml2cap_send_signal_config_req: +0x50b7 020709 bpatchx patch23_1 ,mem_patch23 +0x50b8 020710 call l2cap_get_req_id +0x50b9 020711 call l2cap_get_signal_tx_payload +0x50ba 020712 setarg signal_config_req +0x50bb 020713 istore 1 ,contw +0x50bc 020714 fetch 1 ,mem_ml2cap_comm_id +0x50bd 020715 istore 1 ,contw +0x50be 020716 setarg 0x0008 +0x50bf 020717 istore 2 ,contw +0x50c0 020719 copy temp ,pdata +0x50c1 020721 istore 2 ,contw +0x50c2 020722 setarg 0x0000 +0x50c3 020723 istore 2 ,contw +0x50c4 020724 setarg 0x01 +0x50c5 020725 istore 1 ,contw +0x50c6 020726 setarg 0x02 +0x50c7 020727 istore 1 ,contw +0x50c8 020728 setarg l2cap_config_mtu_rfcomm +0x50c9 020729 istore 2 ,contw +0x50ca 020730 arg 0xc ,temp +0x50cb 020731 branch ml2cap_send_signal +: 020732 ml2cap_send_signal_disconn_req: +0x50cc 020733 bpatchx patch23_2 ,mem_patch23 +0x50cd 020734 call l2cap_get_req_id +0x50ce 020735 call l2cap_get_signal_tx_payload +0x50cf 020736 setarg signal_disconnect_req +0x50d0 020737 istore 1 ,contw +0x50d1 020738 fetch 1 ,mem_ml2cap_comm_id +0x50d2 020739 increase 1 ,pdata +0x50d3 020740 copy contw ,rega +0x50d4 020741 store 1 ,mem_ml2cap_comm_id +0x50d5 020742 copy rega ,contw +0x50d6 020743 istore 1 ,contw +0x50d7 020744 setarg 0x0004 +0x50d8 020745 istore 2 ,contw +0x50d9 020746 copy temp ,pdata +0x50da 020747 istore 2 ,contw +0x50db 020748 copy timeup ,pdata +0x50dc 020749 istore 2 ,contw +0x50dd 020750 arg 0x8 ,temp +: 020753 ml2cap_send_signal: +0x50de 020754 storet 2 ,mem_l2cap_signal_tx_length +0x50df 020755 copy temp ,pdata +0x50e0 020756 branch l2cap_malloc_discard ,blank +0x50e1 020757 call l2cap_get_signal_tx_buff +0x50e2 020758 fetch 2 ,mem_l2cap_signal_tx_length +0x50e3 020759 istore 2 ,contw +0x50e4 020760 force l2cap_signal_channel ,pdata +0x50e5 020761 istore 2 ,contw +0x50e6 020762 rtn +: 020764 msdp_send_req_done: +0x50e7 020765 fetch 2 ,mem_sdp_tx_pkt_length +0x50e8 020766 branch assert ,blank +0x50e9 020767 call l2cap_get_sdp_tx_buff +0x50ea 020768 fetch 2 ,mem_sdp_tx_pkt_length +0x50eb 020769 istore 2 ,contw +0x50ec 020770 fetch 2 ,mem_sdp_remote_cid +0x50ed 020771 istore 2 ,contw +0x50ee 020772 rtn +: 020773 ml2cap_rx_multiplexing: +0x50ef 020774 fetch 2 ,mem_l2cap_rx_pkt_length +0x50f0 020775 branch l2cap_rx_reset_state ,blank +0x50f1 020776 bpatchx patch23_3 ,mem_patch23 +0x50f2 020777 fetch 1 ,mem_l2cap_rx_cid +0x50f3 020778 beq l2cap_signal_channel ,ml2cap_call_proc_signal +0x50f4 020779 beq l2cap_sdp_channel ,ml2cap_call_proc_sdp +0x50f5 020780 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm +0x50f6 020781 beq l2cap_hid_control_channel ,l2cap_call_proc_hid +0x50f7 020782 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid +0x50f8 020783 branch l2cap_rx_reset_state +: 020785 ml2cap_call_proc_signal: +0x50f9 020786 bpatchx patch23_4 ,mem_patch23 +0x50fa 020787 call l2cap_malloc_signal_channel +0x50fb 020788 force 0 ,regb +0x50fc 020789 call l2cap_get_signal_tx_payload +0x50fd 020790 copy pdata ,contw +0x50fe 020791 fetch 2 ,mem_l2cap_rx_pkt_length +0x50ff 020792 copy pdata ,regc +0x5100 020793 fetch 2 ,mem_l2cap_payload_ptr +0x5101 020794 iforce contr +: 020795 ml2cap_proc_one_comm_loop: +0x5102 020796 call ml2cap_proc_one_comm +0x5103 020797 increase -4 ,regc +0x5104 020798 nbranch ml2cap_proc_one_comm_loop ,zero +0x5105 020799 copy regb ,temp +0x5106 020800 call ml2cap_send_signal +0x5107 020801 branch l2cap_rx_reset_state +: 020803 ml2cap_proc_one_comm: +0x5108 020804 ifetch 1 ,contr +0x5109 020805 beq signal_connect_req ,ml2cap_proc_signal_connect_req +0x510a 020806 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject +0x510b 020807 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp +0x510c 020808 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp +0x510d 020809 beq signal_config_req ,ml2cap_proc_signal_config_req +0x510e 020810 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp +0x510f 020811 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req +0x5110 020812 beq signal_echo_req ,l2cap_proc_signal_echo_req +0x5111 020813 beq signal_info_req ,ml2cap_proc_signal_info_req +0x5112 020814 branch ml2cap_proc_send_reject +: 020816 ml2cap_proc_signal_connect_req: +0x5113 020817 call save_cont_pointers +0x5114 020819 call load_cont_pointers +0x5115 020820 branch l2cap_proc_signal_connect_req +: 020821 ml2cap_proc_signal_cmd_reject: +0x5116 020822 ifetch 1 ,contr +0x5117 020823 copy pdata ,queue +0x5118 020824 ifetch 2 ,contr +0x5119 020825 copy pdata ,rega +0x511a 020826 copy regc ,pdata +0x511b 020827 isub rega ,regc +: 020828 mvptr: +0x511c 020829 ifetch 1 ,contr +0x511d 020830 increase -1 ,rega +0x511e 020831 nbranch mvptr ,zero +0x511f 020832 rtn +: 020833 ml2cap_proc_signal_connect_rsp: +0x5120 020834 ifetch 1 ,contr +0x5121 020835 copy pdata ,queue +0x5122 020836 ifetch 2 ,contr +0x5123 020837 copy pdata ,rega +0x5124 020838 ifetch 2 ,contr +0x5125 020839 copy pdata ,timeup +0x5126 020840 ifetch 2 ,contr +0x5127 020841 copy pdata ,temp +0x5128 020842 ifetch 2 ,contr +0x5129 020843 sub pdata ,0 ,null +0x512a 020844 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero +0x512b 020845 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result +0x512c 020846 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result +0x512d 020847 branch ml2cap_proc_signal_connect_rsp_mnosucc +: 020848 ml2cap_proc_signal_connect_refused_result: +0x512e 020849 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp +0x512f 020850 call ui_ipc_send_event +: 020851 ml2cap_proc_signal_connect_rsp_mnosucc: +0x5130 020852 ifetch 2 ,contr +0x5131 020853 branch mnosucc +: 020854 ml2cap_proc_signal_connect_rsp_sucessful: +0x5132 020855 call save_cont_pointers +0x5133 020859 bpatchx patch23_5 ,mem_patch23 +0x5134 020860 setarg l2cap_sdp_channel +0x5135 020861 isub temp ,null +0x5136 020862 branch ml2cap_proc_signal_connect_rsp_sdp ,zero +0x5137 020863 setarg l2cap_rfcomm_channel +0x5138 020864 isub temp ,null +0x5139 020865 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero +0x513a 020866 setarg l2cap_hid_interrupt_channel +0x513b 020867 isub temp ,null +0x513c 020868 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero +0x513d 020869 setarg l2cap_hid_control_channel +0x513e 020870 isub temp ,null +0x513f 020871 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero +0x5140 020872 branch mnosucc +: 020873 ml2cap_proc_signal_connect_rsp_sdp: +0x5141 020874 copy timeup ,pdata +0x5142 020875 store 2 ,mem_sdp_remote_cid +0x5143 020876 fetch 1 ,mem_sdp_state +0x5144 020877 set1 l2cap_channel_state_conn_res +0x5145 020878 store 1 ,mem_sdp_state +0x5146 020879 branch mnosucc1 +: 020880 ml2cap_proc_signal_connect_rsp_rfcomm: +0x5147 020881 copy timeup ,pdata +0x5148 020882 store 2 ,mem_rfcomm_remote_cid +0x5149 020883 fetch 1 ,mem_rfcomm_state +0x514a 020884 set1 l2cap_channel_state_conn_res +0x514b 020885 store 1 ,mem_rfcomm_state +0x514c 020886 branch mnosucc1 +: 020887 ml2cap_proc_signal_connect_rsp_hid_ctrl: +0x514d 020888 copy timeup ,pdata +0x514e 020889 store 2 ,mem_hid_ctrl_remote_cid +0x514f 020890 fetch 1 ,mem_hid_control_state +0x5150 020891 set1 l2cap_channel_state_conn_res +0x5151 020892 store 1 ,mem_hid_control_state +0x5152 020893 branch mnosucc1 +: 020894 ml2cap_proc_signal_connect_rsp_hid_int: +0x5153 020895 copy timeup ,pdata +0x5154 020896 store 2 ,mem_hid_int_remote_cid +0x5155 020897 fetch 1 ,mem_hid_interrupt_state +0x5156 020898 set1 l2cap_channel_state_conn_res +0x5157 020899 store 1 ,mem_hid_interrupt_state +: 020902 mnosucc1: +0x5158 020903 call load_cont_pointers +: 020904 mnosucc: +0x5159 020905 copy regc ,pdata +0x515a 020906 isub rega ,regc +0x515b 020907 rtn +: 020909 ml2cap_proc_signal_config_rsp: +0x515c 020910 ifetch 1 ,contr +0x515d 020911 copy pdata ,queue +0x515e 020912 ifetch 2 ,contr +0x515f 020913 copy pdata ,rega +0x5160 020914 copy regc ,pdata +0x5161 020915 isub rega ,regc +0x5162 020916 ifetch 2 ,contr +0x5163 020917 copy pdata ,timeup +0x5164 020918 ifetch 2 ,contr +0x5165 020919 ifetch 2 ,contr +0x5166 020920 nbranch mcrsdone1 ,blank +0x5167 020921 call save_cont_pointers +0x5168 020925 copy timeup ,temp +0x5169 020926 bpatchx patch23_6 ,mem_patch23 +0x516a 020927 setarg l2cap_sdp_channel +0x516b 020928 isub temp ,null +0x516c 020929 branch ml2cap_proc_signal_config_rsp_sdp ,zero +0x516d 020930 setarg l2cap_rfcomm_channel +0x516e 020931 isub temp ,null +0x516f 020932 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero +0x5170 020933 setarg l2cap_hid_control_channel +0x5171 020934 isub temp ,null +0x5172 020935 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero +0x5173 020936 setarg l2cap_hid_interrupt_channel +0x5174 020937 isub temp ,null +0x5175 020938 branch ml2cap_proc_signal_config_rsp_hid_int ,zero +: 020939 ml2cap_proc_signal_config_rsp_sdp: +0x5176 020940 fetch 1 ,mem_sdp_state +0x5177 020941 set1 l2cap_channel_state_rcv_cfg_res +0x5178 020942 store 1 ,mem_sdp_state +0x5179 020943 rtn +: 020944 ml2cap_proc_signal_config_rsp_rfcomm: +0x517a 020945 fetch 1 ,mem_rfcomm_state +0x517b 020946 set1 l2cap_channel_state_rcv_cfg_res +0x517c 020947 store 1 ,mem_rfcomm_state +0x517d 020948 rtn +: 020949 ml2cap_proc_signal_config_rsp_hid_ctrl: +0x517e 020950 fetch 1 ,mem_hid_control_state +0x517f 020951 set1 l2cap_channel_state_rcv_cfg_res +0x5180 020952 store 1 ,mem_hid_control_state +0x5181 020953 rtn +: 020954 ml2cap_proc_signal_config_rsp_hid_int: +0x5182 020955 fetch 1 ,mem_hid_interrupt_state +0x5183 020956 set1 l2cap_channel_state_rcv_cfg_res +0x5184 020957 store 1 ,mem_hid_interrupt_state +0x5185 020958 jam bt_evt_hid_connected ,mem_fifo_temp +0x5186 020959 branch ui_ipc_send_event +: 020962 mcfrsdone: +0x5187 020963 call load_cont_pointers +: 020964 mcrsdone1: +0x5188 020965 increase -6 ,rega +: 020966 mloop2: +0x5189 020967 branch mcrsdone ,zero +0x518a 020968 increase 1 ,contr +0x518b 020969 increase -1 ,rega +0x518c 020970 branch mloop2 +: 020971 mcrsdone: +0x518d 020972 rtn +: 020973 ml2cap_proc_signal_config_req: +0x518e 020974 ifetch 1 ,contr +0x518f 020975 copy pdata ,queue +0x5190 020976 ifetch 2 ,contr +0x5191 020977 copy pdata ,rega +0x5192 020978 copy regc ,pdata +0x5193 020979 isub rega ,regc +0x5194 020980 ifetch 2 ,contr +0x5195 020981 increase 2 ,contr +0x5196 020982 copy pdata ,temp +0x5197 020983 setarg signal_config_rsp +0x5198 020984 istore 1 ,contw +0x5199 020985 copy queue ,pdata +0x519a 020986 istore 1 ,contw +0x519b 020987 increase 2 ,rega +0x519c 020988 copy rega ,pdata +0x519d 020989 istore 2 ,contw +0x519e 020990 call save_cont_pointers +0x519f 020991 bpatchx patch23_7 ,mem_patch23 +0x51a0 020992 setarg l2cap_sdp_channel +0x51a1 020993 isub temp ,null +0x51a2 020994 branch ml2cap_proc_signal_config_req_sdp ,zero +0x51a3 020995 setarg l2cap_rfcomm_channel +0x51a4 020996 isub temp ,null +0x51a5 020997 branch ml2cap_proc_signal_config_req_rfcomm ,zero +0x51a6 020998 setarg l2cap_hid_control_channel +0x51a7 020999 isub temp ,null +0x51a8 021000 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero +0x51a9 021001 setarg l2cap_hid_interrupt_channel +0x51aa 021002 isub temp ,null +0x51ab 021003 branch ml2cap_proc_signal_config_req_hid_int ,zero +0x51ac 021004 branch mcfgrq_done +: 021005 ml2cap_proc_signal_config_req_sdp: +0x51ad 021006 fetch 1 ,mem_sdp_state +0x51ae 021007 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51af 021008 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51b0 021009 store 1 ,mem_sdp_state +0x51b1 021010 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq +0x51b2 021011 fetcht 1 ,mem_control_tasks +0x51b3 021012 set1 l2cap_init_config_req ,temp +0x51b4 021013 storet 1 ,mem_control_tasks +0x51b5 021014 copy queue ,pdata +0x51b6 021015 increase 1 ,pdata +0x51b7 021016 store 1 ,mem_config_identifier +0x51b8 021017 fetch 1 ,mem_sdp_state +0x51b9 021018 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x51ba 021019 store 1 ,mem_sdp_state +: 021020 ml2cap_proc_signal_config_req_sdp_nsndreq: +0x51bb 021021 fetch 2 ,mem_sdp_remote_cid +0x51bc 021022 store 2 ,mem_config_req_dest_cid +0x51bd 021023 branch mcfgrq_done +: 021024 ml2cap_proc_signal_config_req_rfcomm: +0x51be 021025 fetch 1 ,mem_rfcomm_state +0x51bf 021026 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51c0 021027 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51c1 021028 store 1 ,mem_rfcomm_state +0x51c2 021029 fetch 2 ,mem_rfcomm_remote_cid +0x51c3 021030 branch mcfgrq_done +: 021031 ml2cap_proc_signal_config_req_hid_ctrl: +0x51c4 021032 fetch 1 ,mem_hid_control_state +0x51c5 021033 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51c6 021034 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51c7 021035 store 1 ,mem_hid_control_state +0x51c8 021036 fetch 2 ,mem_hid_ctrl_remote_cid +0x51c9 021037 branch mcfgrq_done +: 021038 ml2cap_proc_signal_config_req_hid_int: +0x51ca 021039 fetch 1 ,mem_hid_interrupt_state +0x51cb 021040 set1 l2cap_channel_state_rcv_cfg_req ,pdata +0x51cc 021041 set1 l2cap_channel_state_snd_cfg_res ,pdata +0x51cd 021042 store 1 ,mem_hid_interrupt_state +0x51ce 021043 fetch 2 ,mem_hid_int_remote_cid +: 021046 mcfgrq_done: +0x51cf 021047 copy pdata ,timeup +0x51d0 021048 call load_cont_pointers +0x51d1 021050 copy timeup ,pdata +0x51d2 021052 istore 2 ,contw +0x51d3 021053 force 0x0000 ,pdata +0x51d4 021054 istore 2 ,contw +0x51d5 021055 force 0x0000 ,pdata +0x51d6 021056 istore 2 ,contw +0x51d7 021057 force 10 ,pdata +0x51d8 021058 iadd regb ,regb +0x51d9 021059 increase -6 ,rega +: 021060 mloop1: +0x51da 021061 branch mcrqdone ,zero +0x51db 021062 ifetch 1 ,contr +0x51dc 021063 istore 1 ,contw +0x51dd 021064 increase 1 ,regb +0x51de 021065 increase -1 ,rega +0x51df 021066 branch mloop1 +: 021067 mcrqdone: +0x51e0 021068 rtn +: 021069 ml2cap_proc_signal_disconn_req: +0x51e1 021070 ifetch 1 ,contr +0x51e2 021071 copy pdata ,queue +0x51e3 021072 ifetch 2 ,contr +0x51e4 021073 copy pdata ,rega +0x51e5 021074 copy regc ,pdata +0x51e6 021075 isub rega ,regc +0x51e7 021077 ifetch 2 ,contr +0x51e8 021078 copy pdata ,rega +0x51e9 021079 ifetch 2 ,contr +0x51ea 021080 copy pdata ,timeup +0x51eb 021081 call save_cont_pointers +0x51ec 021082 bpatchx patch24_0 ,mem_patch24 +0x51ed 021083 setarg l2cap_sdp_channel +0x51ee 021084 copy rega ,temp +0x51ef 021085 isub temp ,null +0x51f0 021086 branch ml2cap_proc_signal_disconn_sdp ,zero +0x51f1 021087 setarg l2cap_hid_control_channel +0x51f2 021088 copy rega ,temp +0x51f3 021089 isub temp ,null +0x51f4 021090 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero +0x51f5 021091 setarg l2cap_hid_interrupt_channel +0x51f6 021092 copy rega ,temp +0x51f7 021093 isub temp ,null +0x51f8 021094 branch ml2cap_proc_signal_disconn_hid_int ,zero +0x51f9 021095 branch mclsrfc +: 021096 ml2cap_proc_signal_disconn_sdp: +0x51fa 021097 setarg 0x0000 +0x51fb 021098 store 2 ,mem_sdp_tx_pkt_length +0x51fc 021099 store 2 ,mem_sdp_remote_cid +0x51fd 021100 store 1 ,mem_sdp_state +0x51fe 021101 branch mclssdp +: 021102 ml2cap_proc_signal_disconn_hid_ctrl: +0x51ff 021103 call l2cap_reset_hid_ctrl_state +0x5200 021104 branch mclssdp +: 021105 ml2cap_proc_signal_disconn_hid_int: +0x5201 021106 call l2cap_reset_hid_int_state +0x5202 021112 branch mclssdp +: 021113 mclsrfc: +0x5203 021114 setarg 0x0000 +0x5204 021115 store 2 ,mem_rfcomm_tx_pkt_length +: 021116 mclssdp: +0x5205 021117 call load_cont_pointers +0x5206 021118 setarg signal_disconnect_rsp +0x5207 021119 istore 1 ,contw +0x5208 021120 copy queue ,pdata +0x5209 021121 istore 1 ,contw +0x520a 021122 setarg 0x0004 +0x520b 021123 istore 2 ,contw +0x520c 021124 copy rega ,pdata +0x520d 021125 istore 2 ,contw +0x520e 021126 copy timeup ,pdata +0x520f 021127 istore 2 ,contw +0x5210 021128 force 8 ,pdata +0x5211 021129 iadd regb ,regb +0x5212 021130 rtn +: 021132 ml2cap_proc_signal_disconn_rsp: +0x5213 021133 ifetch 1 ,contr +0x5214 021134 copy pdata ,queue +0x5215 021135 ifetch 2 ,contr +0x5216 021136 copy pdata ,rega +0x5217 021137 ifetch 2 ,contr +0x5218 021138 copy pdata ,timeup +0x5219 021139 ifetch 2 ,contr +0x521a 021140 copy pdata ,temp +0x521b 021141 call save_cont_pointers +0x521c 021142 bpatchx patch24_1 ,mem_patch24 +0x521d 021143 fetch 1 ,mem_ml2cap_comm_id +0x521e 021144 icompare 0xff ,queue +0x521f 021145 nbranch mdisdone ,true +0x5220 021146 setarg l2cap_sdp_channel +0x5221 021147 isub temp ,null +0x5222 021148 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero +0x5223 021149 setarg l2cap_rfcomm_channel +0x5224 021150 isub temp ,null +0x5225 021151 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero +0x5226 021152 branch mdisdone +: 021153 ml2cap_proc_signal_disconn_rsp_sdp: +0x5227 021154 jam 0 ,mem_sdp_remote_cid +0x5228 021155 jam 0 ,mem_sdp_state +0x5229 021156 branch mdisdone +: 021157 ml2cap_proc_signal_disconn_rsp_rfcomm: +: 021160 mdisdone: +0x522a 021161 call load_cont_pointers +0x522b 021162 copy regc ,pdata +0x522c 021163 isub rega ,regc +0x522d 021164 rtn +: 021166 ml2cap_proc_send_reject: +0x522e 021167 setarg signal_cmd_reject +0x522f 021168 istore 1 ,contw +0x5230 021169 ifetch 1 ,contr +0x5231 021170 istore 1 ,contw +0x5232 021171 setarg 0x0002 +0x5233 021172 istore 2 ,contw +0x5234 021173 setarg 0x0000 +0x5235 021174 istore 2 ,contw +0x5236 021175 setarg 0x0006 +0x5237 021176 iadd regb ,regb +0x5238 021177 force 4 ,regc +0x5239 021178 rtn +: 021181 l2cap_get_req_id: +0x523a 021182 fetch 1 ,mem_ml2cap_comm_id +0x523b 021183 increase 1 ,pdata +0x523c 021184 bne 0 ,l2cap_get_req_id_ok +0x523d 021185 increase 1 ,pdata +: 021186 l2cap_get_req_id_ok: +0x523e 021187 store 1 ,mem_ml2cap_comm_id +0x523f 021188 rtn +: 021198 l2cap_malloc: +0x5240 021199 bpatchx patch24_2 ,mem_patch24 +0x5241 021200 arg 0 ,regb +0x5242 021201 call l2cap_malloc_is_fifo_full +0x5243 021202 nbranch assert ,blank +0x5244 021203 call l2cap_malloc_get_full_map +0x5245 021204 arg mem_tx_buff0 ,regb +0x5246 021205 arg 0 ,queue +: 021206 l2cap_malloc_loop: +0x5247 021207 fetcht 1 ,mem_used_map +0x5248 021208 qisolate1 temp +0x5249 021209 branch l2cap_malloc_next ,true +0x524a 021210 call l2cap_malloc_enough +0x524b 021211 sub timeup ,0 ,null +0x524c 021212 branch l2cap_malloc_next ,positive +0x524d 021213 call l2cap_malloc_into_fifo +0x524e 021214 branch l2cap_malloc_rtn +: 021215 l2cap_malloc_next: +0x524f 021216 increase 128 ,regb +0x5250 021217 increase 1 ,queue +0x5251 021218 setarg 8 +0x5252 021219 isub queue ,null +0x5253 021220 branch l2cap_malloc_loop ,positive +0x5254 021221 arg 0 ,regb +: 021222 l2cap_malloc_rtn: +0x5255 021223 copy regb ,pdata +0x5256 021224 branch assert ,blank +0x5257 021225 rtn +: 021233 l2cap_malloc_fifo_out: +0x5258 021234 bpatchx patch24_3 ,mem_patch24 +0x5259 021235 call l2cap_malloc_fifo_get_first_ptr +0x525a 021236 increase 1 ,contr +0x525b 021237 ifetch 2 ,contr +0x525c 021238 rtn +: 021244 l2cap_malloc_free: +0x525d 021245 bpatchx patch24_4 ,mem_patch24 +0x525e 021246 call l2cap_malloc_fifo_get_first_ptr +0x525f 021247 copy contr ,contw +0x5260 021248 copy contr ,temp +0x5261 021249 setarg 0 +0x5262 021250 istore 3 ,contw +0x5263 021251 rtn +: 021256 l2cap_malloc_discard: +0x5264 021257 bpatchx patch24_5 ,mem_patch24 +0x5265 021258 call l2cap_malloc_is_fifo_empty +0x5266 021259 branch assert ,blank +0x5267 021260 fetch 3 ,mem_tx_fifo2 +0x5268 021261 store 3 ,mem_tx_fifo3 +0x5269 021262 fetch 3 ,mem_tx_fifo1 +0x526a 021263 store 3 ,mem_tx_fifo2 +0x526b 021264 fetch 3 ,mem_tx_fifo0 +0x526c 021265 store 3 ,mem_tx_fifo1 +0x526d 021266 rtn +: 021272 l2cap_malloc_is_fifo_full: +0x526e 021273 bpatchx patch24_6 ,mem_patch24 +0x526f 021274 fetch 3 ,mem_tx_fifo0 +0x5270 021275 rtn +: 021281 l2cap_malloc_is_fifo_nearly_full: +0x5271 021282 bpatchx patch24_7 ,mem_patch24 +0x5272 021283 fetch 3 ,mem_tx_fifo1 +0x5273 021284 rtn +: 021290 l2cap_malloc_is_fifo_empty: +0x5274 021291 bpatchx patch25_0 ,mem_patch25 +0x5275 021292 fetch 3 ,mem_tx_fifo3 +0x5276 021293 rtn +: 021298 l2cap_malloc_fifo_get_first_ptr: +0x5277 021299 call l2cap_malloc_is_fifo_empty +0x5278 021300 branch assert ,blank +0x5279 021301 arg mem_tx_fifo0 ,contr +: 021302 l2cap_malloc_free_loop: +0x527a 021303 ifetch 3 ,contr +0x527b 021304 branch l2cap_malloc_free_loop ,blank +0x527c 021305 increase -3 ,contr +0x527d 021306 rtn +: 021313 l2cap_malloc_get_full_map: +0x527e 021314 bpatchx patch25_1 ,mem_patch25 +0x527f 021315 arg 4 ,loopcnt +0x5280 021316 arg mem_tx_fifo0_map ,contr +0x5281 021317 arg 0 ,temp +: 021318 l2cap_malloc_get_full_map_loop: +0x5282 021319 ifetch 3 ,contr +0x5283 021320 and pdata ,0xff ,pdata +0x5284 021321 ior temp ,temp +0x5285 021322 loop l2cap_malloc_get_full_map_loop +0x5286 021323 storet 1 ,mem_used_map +0x5287 021324 rtn +: 021332 l2cap_malloc_into_fifo: +0x5288 021333 bpatchx patch25_2 ,mem_patch25 +0x5289 021334 call l2cap_malloc_is_fifo_full +0x528a 021335 nbranch assert ,blank +0x528b 021336 call l2cap_malloc_is_fifo_empty +0x528c 021337 branch l2cap_malloc_into_fifo_no_push ,blank +0x528d 021338 fetch 3 ,mem_tx_fifo1 +0x528e 021339 store 3 ,mem_tx_fifo0 +0x528f 021340 ifetch 3 ,contr +0x5290 021341 istore 3 ,contw +0x5291 021342 ifetch 3 ,contr +0x5292 021343 istore 3 ,contw +0x5293 021344 setarg 0 +0x5294 021345 istore 3 ,contw +: 021346 l2cap_malloc_into_fifo_no_push: +0x5295 021347 arg 0 ,temp +0x5296 021348 copy timeup ,pdata +0x5297 021349 iadd queue ,pdata +: 021350 l2cap_malloc_into_fifo_loop: +0x5298 021351 qset1 temp +0x5299 021352 increase 1 ,queue +0x529a 021353 isub queue ,null +0x529b 021354 nbranch l2cap_malloc_into_fifo_loop ,zero +0x529c 021356 lshift8 regb ,pdata +0x529d 021357 ior temp ,pdata +0x529e 021358 store 3 ,mem_tx_fifo3 +0x529f 021359 rtn +: 021369 l2cap_malloc_enough: +0x52a0 021370 bpatchx patch25_3 ,mem_patch25 +0x52a1 021371 call l2cap_malloc_get_full_map +0x52a2 021372 copy queue ,regc +0x52a3 021373 arg 0 ,temp +0x52a4 021374 arg 0 ,timeup +: 021376 l2cap_malloc_enough_loop: +0x52a5 021377 copy queue ,pdata +0x52a6 021378 beq 8 ,l2cap_malloc_enough_end +0x52a7 021379 fetch 1 ,mem_used_map +0x52a8 021380 qisolate1 pdata +0x52a9 021381 branch l2cap_malloc_enough_end ,true +0x52aa 021382 increase 128 ,temp +0x52ab 021383 increase 1 ,queue +0x52ac 021384 copy rega ,pdata +0x52ad 021385 isub temp ,null +0x52ae 021386 branch l2cap_malloc_enough_end ,zero +0x52af 021387 branch l2cap_malloc_enough_loop ,positive +: 021388 l2cap_malloc_enough_end: +0x52b0 021389 copy temp ,pdata +0x52b1 021390 isub rega ,null +0x52b2 021391 nbranch l2cap_malloc_enough_rtn ,positive +0x52b3 021392 copy queue ,pdata +0x52b4 021393 copy regc ,temp +0x52b5 021394 isub temp ,timeup +: 021395 l2cap_malloc_enough_rtn: +0x52b6 021396 copy regc ,queue +0x52b7 021397 rtn +: 021400 l2cap_malloc_signal_channel: +0x52b8 021401 bpatchx patch25_4 ,mem_patch25 +0x52b9 021402 arg l2cap_signal_malloc_size ,rega +0x52ba 021403 call l2cap_malloc +0x52bb 021404 store 2 ,mem_l2cap_signal_tx_buff_ptr +0x52bc 021405 increase 4 ,pdata +0x52bd 021406 store 2 ,mem_l2cap_signal_tx_payload_ptr +0x52be 021407 setarg 0 +0x52bf 021408 store 2 ,mem_l2cap_signal_tx_length +0x52c0 021409 rtn +: 021411 l2cap_get_signal_tx_buff: +0x52c1 021412 fetch 2 ,mem_l2cap_signal_tx_buff_ptr +0x52c2 021413 branch l2cap_util_pdata_to_contw +: 021415 l2cap_get_signal_tx_payload: +0x52c3 021416 fetch 2 ,mem_l2cap_signal_tx_payload_ptr +0x52c4 021417 branch l2cap_util_pdata_to_contw +: 021420 l2cap_malloc_sdp_channel: +0x52c5 021421 bpatchx patch25_5 ,mem_patch25 +0x52c6 021422 arg sdp_malloc_size ,rega +0x52c7 021423 call l2cap_malloc +0x52c8 021424 store 2 ,mem_sdp_tx_buff_ptr +0x52c9 021425 increase 4 ,pdata +0x52ca 021426 store 2 ,mem_sdp_tx_payload_ptr +0x52cb 021427 setarg 0 +0x52cc 021428 store 2 ,mem_sdp_tx_pkt_length +0x52cd 021429 rtn +: 021431 l2cap_get_sdp_tx_buff: +0x52ce 021432 fetch 2 ,mem_sdp_tx_buff_ptr +0x52cf 021433 branch l2cap_util_pdata_to_contw +: 021435 l2cap_get_sdp_tx_payload: +0x52d0 021436 fetch 2 ,mem_sdp_tx_payload_ptr +0x52d1 021437 branch l2cap_util_pdata_to_contw +: 021440 l2cap_malloc_rfcomm_channel: +0x52d2 021441 bpatchx patch25_6 ,mem_patch25 +0x52d3 021442 call push_stack +0x52d4 021443 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag +0x52d5 021444 call l2cap_malloc_is_fifo_full +0x52d6 021445 nrtn blank +0x52d7 021446 arg rfcomm_malloc_size ,rega +0x52d8 021447 call l2cap_malloc +0x52d9 021448 store 2 ,mem_rfcomm_tx_buff_ptr +0x52da 021449 increase 4 ,pdata +0x52db 021450 store 2 ,mem_rfcomm_tx_payload_ptr +0x52dc 021451 setarg 0 +0x52dd 021452 store 2 ,mem_rfcomm_tx_pkt_length +0x52de 021453 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag +0x52df 021454 branch pop_stack +: 021456 l2cap_get_rfcomm_tx_buff: +0x52e0 021457 fetch 2 ,mem_rfcomm_tx_buff_ptr +0x52e1 021458 branch l2cap_util_pdata_to_contw +: 021460 l2cap_util_pdata_to_contw: +0x52e2 021461 branch assert ,blank +0x52e3 021462 copy pdata ,contw +0x52e4 021463 rtn +: 021466 l2cap_lpm_save_calc_len: +0x52e5 021467 bpatchx patch25_7 ,mem_patch25 +0x52e6 021468 arg 0 ,regb +0x52e7 021469 arg mem_tx_fifo0_map ,rega +0x52e8 021470 increase -2 ,rega +: 021471 l2cap_lpm_save_calc_len_loop: +0x52e9 021472 increase 2 ,rega +0x52ea 021473 setarg mem_tx_fifo_end +0x52eb 021474 isub rega ,null +0x52ec 021475 branch l2cap_lpm_save_calc_len_end ,zero +0x52ed 021476 ifetch 1 ,rega +0x52ee 021477 increase 1 ,rega +0x52ef 021478 branch l2cap_lpm_save_calc_len_loop ,blank +0x52f0 021479 ifetcht 2 ,rega +0x52f1 021480 ifetch 2 ,temp +0x52f2 021481 iadd regb ,regb +0x52f3 021482 increase 4 ,regb +0x52f4 021483 branch l2cap_lpm_save_calc_len_loop +: 021484 l2cap_lpm_save_calc_len_end: +0x52f5 021485 copy regb ,pdata +0x52f6 021486 rtn +: 021489 l2cap_lpm_get_wake_lock: +0x52f7 021490 arg wake_lock_l2cap_tx ,queue +0x52f8 021491 branch lpm_get_wake_lock +: 021493 l2cap_lpm_put_wake_lock: +0x52f9 021494 arg wake_lock_l2cap_tx ,queue +0x52fa 021495 branch lpm_put_wake_lock +: 021497 l2cap_lpm_save_txbuf: +0x52fb 021498 bpatchx patch26_0 ,mem_patch26 +0x52fc 021499 call l2cap_malloc_get_full_map +0x52fd 021500 fetch 1 ,mem_used_map +0x52fe 021501 rtn blank +0x52ff 021502 call l2cap_lpm_save_calc_len +0x5300 021503 arg l2cap_lpm_txbuf_len ,temp +0x5301 021504 isub temp ,null +0x5302 021505 branch l2cap_lpm_get_wake_lock ,positive +0x5303 021506 call l2cap_lpm_put_wake_lock +0x5304 021507 arg mem_l2cap_lpm_txbuf ,contw +0x5305 021508 arg mem_tx_fifo0 ,rega +: 021509 l2cap_lpm_save_txbuf_loop: +0x5306 021510 setarg mem_tx_fifo_end +0x5307 021511 isub rega ,null +0x5308 021512 rtn zero +0x5309 021513 ifetch 1 ,rega +0x530a 021514 increase 1 ,rega +0x530b 021515 nbranch l2cap_lpm_save_txbuf_nempty ,blank +0x530c 021516 istore 2 ,contw +0x530d 021517 increase 2 ,rega +0x530e 021518 branch l2cap_lpm_save_txbuf_loop +: 021519 l2cap_lpm_save_txbuf_nempty: +0x530f 021520 ifetch 2 ,rega +0x5310 021521 increase 2 ,rega +0x5311 021522 copy pdata ,contr +0x5312 021523 ifetch 2 ,contr +0x5313 021524 istore 2 ,contw +0x5314 021525 copy pdata ,loopcnt +0x5315 021526 increase 2 ,loopcnt +0x5316 021527 call memcpy +0x5317 021528 branch l2cap_lpm_save_txbuf_loop +: 021530 l2cap_lpm_load_txbuf: +0x5318 021531 bpatchx patch26_1 ,mem_patch26 +0x5319 021532 call l2cap_malloc_get_full_map +0x531a 021533 fetch 1 ,mem_used_map +0x531b 021534 rtn blank +0x531c 021535 arg mem_tx_fifo0_ptr ,rega +0x531d 021536 increase -3 ,rega +0x531e 021537 arg mem_l2cap_lpm_txbuf ,contr +: 021538 l2cap_lpm_load_txbuf_loop: +0x531f 021539 increase 3 ,rega +0x5320 021540 setarg mem_tx_fifo_end + 1 +0x5321 021541 isub rega ,null +0x5322 021542 rtn zero +0x5323 021543 ifetch 2 ,contr +0x5324 021544 branch l2cap_lpm_load_txbuf_loop ,blank +0x5325 021545 increase 4 ,pdata +0x5326 021546 copy pdata ,loopcnt +0x5327 021547 copy contr ,regb +0x5328 021548 ifetch 2 ,rega +0x5329 021549 copy pdata ,contw +0x532a 021550 copy regb ,contr +0x532b 021551 increase -2 ,contr +0x532c 021552 call memcpy +0x532d 021553 branch l2cap_lpm_load_txbuf_loop +: 021563 le_init_conn: +0x532e 021564 bpatchx patch26_2 ,mem_patch26 +0x532f 021565 disable wake +0x5330 021566 jam 1 ,mem_le_conn_handle +0x5331 021567 jam 3 ,mem_le_state +0x5332 021568 jam 1 ,mem_le_arq +0x5333 021569 setarg -1 +0x5334 021570 store 2 ,mem_le_event_count +0x5335 021571 force 0 ,pdata +0x5336 021572 store 1 ,mem_le_ch +0x5337 021573 store 1 ,mem_le_op +0x5338 021574 store 3 ,mem_sniff_rcv +0x5339 021575 store 3 ,mem_sniff_lost +0x533a 021576 store 5 ,mem_le_pcnt_tx +0x533b 021577 set1 39 ,pdata +0x533c 021578 store 5 ,mem_le_pcnt_rx +0x533d 021579 jam 1 ,mem_le_txheader +0x533e 021580 jam 0 ,mem_le_txlen +0x533f 021581 branch le_supervision_flush +: 021583 le_init_master: +0x5340 021584 bpatchx patch26_3 ,mem_patch26 +0x5341 021585 enable master +0x5342 021586 jam lemode_master ,mem_le_mode +0x5343 021587 jam 1 ,mem_le_att_handle +0x5344 021588 jam 1 ,mem_le_search_handle_start +0x5345 021589 setarg 0xffff +0x5346 021590 store 2 ,mem_le_search_handle_end +0x5347 021591 force 0 ,pdata +0x5348 021592 store 5 ,mem_le_pcnt_rx +0x5349 021593 set1 39 ,pdata +0x534a 021594 store 5 ,mem_le_pcnt_tx +0x534b 021595 branch le_init_conn +: 021598 le_init_slave: +0x534c 021599 bpatchx patch26_4 ,mem_patch26 +0x534d 021600 disable master +0x534e 021601 setarg 0x17 +0x534f 021602 store 2 ,mem_le_remote_mtu +0x5350 021603 jam lemode_slave ,mem_le_mode +0x5351 021604 jam 0 ,mem_le_adv_enable +0x5352 021605 jam 0 ,mem_lpm_current_mult +0x5353 021606 jam flag_le_pairing_null ,mem_le_pairing_state +0x5354 021607 jam flag_le_enc_null ,mem_le_enc_state +0x5355 021608 fetch 2 ,mem_le_superto +0x5356 021609 store 2 ,mem_le_init_superto +0x5357 021610 fetch 2 ,mem_le_tsniff +0x5358 021611 mul32 pdata ,5 ,pdata +0x5359 021612 rshift4 pdata ,pdata +0x535a 021613 store 2 ,mem_le_superto +0x535b 021614 branch le_init_conn +: 021620 le_dispatch: +0x535c 021621 call le_enable +0x535d 021622 call le_scan +0x535e 021623 call le_adv +0x535f 021624 branch le_disable +: 021626 le_conn_dispatch: +0x5360 021627 bpatchx patch26_5 ,mem_patch26 +0x5361 021628 call le_enable +0x5362 021629 call app_process_ble +0x5363 021630 fetch 1 ,mem_le_mode +0x5364 021631 beq lemode_master ,le_master_dispatch +0x5365 021632 branch le_slave_dispatch +: 021638 le_master_dispatch: +0x5366 021639 bpatchx patch26_6 ,mem_patch26 +0x5367 021640 enable master +0x5368 021641 call le_supervision_update +0x5369 021642 branch le_master_disconn ,positive +0x536a 021643 call check_ble_disabled +0x536b 021644 call le_setup +0x536c 021645 call le_prepare_tx +0x536d 021646 disable match +0x536e 021647 call le_transmit_receive_sifs +0x536f 021648 nrtn match +0x5370 021649 bpatchx patch26_7 ,mem_patch26 +0x5371 021650 fetch 1 ,mem_le_conn_rcv +0x5372 021651 increase 1 ,pdata +0x5373 021652 store 1 ,mem_le_conn_rcv +0x5374 021653 call le_acknowledge +0x5375 021654 disable master +0x5376 021655 rtn +: 021657 le_master_disconn: +0x5377 021658 call le_disconnect +0x5378 021659 disable master +0x5379 021660 rtn +: 021665 le_slave_dispatch: +0x537a 021666 bpatchx patch27_0 ,mem_patch27 +0x537b 021667 jam 0 ,mem_le_md_count +0x537c 021668 call sp_calc_sequence_256 +0x537d 021669 call le_secure_connect_sm +0x537e 021670 disable attempt +0x537f 021671 call le_supervision_update +0x5380 021672 branch le_slave_disconn ,positive +0x5381 021673 call check_ble_disabled +0x5382 021674 call le_setup +0x5383 021675 call le_receive_slave +0x5384 021676 nbranch le_slave_unsync ,sync +0x5385 021677 call le_got_first_packet +0x5386 021678 branch le_slave_match ,match +0x5387 021679 branch le_slave_cont +: 021682 le_slave_match: +0x5388 021683 bpatchx patch27_1 ,mem_patch27 +0x5389 021684 fetch 1 ,mem_le_md_count +0x538a 021685 pincrease 1 +0x538b 021686 store 1 ,mem_le_md_count +0x538c 021687 beq le_md_max_count ,le_slave_cont +0x538d 021688 call le_acknowledge +0x538e 021689 call le_prepare_tx +0x538f 021690 call le_transmit_norx +0x5390 021691 call le_parse +0x5391 021692 fetch 2 ,mem_cb_ble_transmit +0x5392 021693 call callback_func +0x5393 021694 call le_check_md +0x5394 021695 branch le_slave_more_data ,user +: 021696 le_slave_cont: +0x5395 021697 bpatchx patch27_2 ,mem_patch27 +0x5396 021698 call le_pairing_sm +0x5397 021699 call le_check_paring_time +0x5398 021700 call check_51cmd +0x5399 021701 fetch 1 ,mem_le_op +0x539a 021702 bbit1 op_disconn ,le_slave_disconn +: 021703 le_slave_unsync: +0x539b 021704 bpatchx patch27_3 ,mem_patch27 +0x539c 021705 call le_lpm_set_mult +0x539d 021706 call le_update_channel_map +0x539e 021707 call le_update_param +0x539f 021708 branch calc_clke_offset +: 021711 le_check_md: +0x53a0 021712 disable user +0x53a1 021713 bmark1 mark_ble_rx_md ,enable_user +0x53a2 021714 bmark1 mark_ble_tx_md ,enable_user +0x53a3 021715 rtn +: 021718 le_slave_more_data: +0x53a4 021719 bpatchx patch27_4 ,mem_patch27 +0x53a5 021720 enable attempt +0x53a6 021721 call le_transmit_receive_sifs_notx +0x53a7 021722 branch le_slave_match ,match +0x53a8 021723 branch le_slave_cont +: 021725 le_slave_disconn: +: 021728 le_disconnect: +0x53a9 021729 bpatchx patch27_5 ,mem_patch27 +0x53aa 021730 call le_clear_connection_info +0x53ab 021731 call app_disconn_reason_collect_ble +0x53ac 021732 call sp_initialize_256 +0x53ad 021733 jam bt_evt_le_disconnected ,mem_fifo_temp +0x53ae 021734 branch ui_ipc_send_event +: 021736 le_clear_connection_info: +0x53af 021737 setarg 0 +0x53b0 021738 store 9 ,mem_le_tx_buff_used +0x53b1 021739 jam 0 ,mem_le_conn_handle +0x53b2 021740 jam lemode_idle ,mem_le_mode +0x53b3 021741 jam 0 ,mem_le_state +0x53b4 021742 jam flag_le_enc_null ,mem_le_enc_state +0x53b5 021743 jam flag_le_pairing_null ,mem_le_pairing_state +0x53b6 021744 rtn +: 021746 le_got_first_packet: +0x53b7 021747 bpatchx patch27_6 ,mem_patch27 +0x53b8 021748 fetch 1 ,mem_le_conn_rcv +0x53b9 021749 increase 1 ,pdata +0x53ba 021750 store 1 ,mem_le_conn_rcv +0x53bb 021751 fetch 1 ,mem_le_state +0x53bc 021752 rtnbit1 lestate_got_first_packet +0x53bd 021753 set1 lestate_got_first_packet +0x53be 021754 store 1 ,mem_le_state +0x53bf 021755 fetch 2 ,mem_le_init_superto +0x53c0 021756 store 2 ,mem_le_superto +0x53c1 021757 setarg 0 +0x53c2 021758 store 4 ,mem_le_transmit_window +0x53c3 021759 rtn +: 021762 le_enable: +0x53c4 021763 bpatchx patch27_7 ,mem_patch27 +0x53c5 021764 jam 0x36 ,rf_adc_goff +0x53c6 021765 jam 0x5f ,rf_agc_nsat +0x53c7 021766 enable le +0x53c8 021767 jam 7 ,rfen_ulp +0x53c9 021768 call check_ble_disabled +0x53ca 021769 fetch 1 ,mem_250k_freq_enable +0x53cb 021770 rtn blank +0x53cc 021771 jam 0xb8 ,rf_iq_gain +0x53cd 021772 rtn +: 021774 le_disable: +0x53ce 021775 bpatchx patch28_0 ,mem_patch28 +0x53cf 021776 jam 0x2e ,rf_adc_goff +0x53d0 021777 jam 0xff ,rf_agc_nsat +0x53d1 021778 disable le +0x53d2 021779 jam 3 ,rfen_ulp +0x53d3 021780 arg 0 ,stop_watch +0x53d4 021781 rtn +: 021783 le_prep: +0x53d5 021784 disable enable_crc +0x53d6 021785 disable enable_white +0x53d7 021786 fetch 3 ,mem_le_crcinit +0x53d8 021787 iforce crc24_init +0x53d9 021788 fetch 1 ,mem_le_ch_mapped +: 021789 le_prep2: +0x53da 021790 reverse pdata ,temp +0x53db 021791 set1 1 ,temp +0x53dc 021792 rshift temp ,white_init +0x53dd 021793 rtn +: 021796 lerx_setfreq: +0x53de 021797 call le_setfreq +0x53df 021798 call set_freq_rx +0x53e0 021799 setarg param_pll_setup +0x53e1 021800 call sleep +0x53e2 021801 branch rf_rx_enable +: 021803 letx_setfreq: +0x53e3 021804 branch txon ,match +: 021805 letx_setfreq0: +0x53e4 021806 call le_setfreq +0x53e5 021807 branch set_freq_tx +: 021808 le_setfreq: +0x53e6 021809 bpatchx patch28_1 ,mem_patch28 +0x53e7 021810 call set_sync_on +0x53e8 021811 fetch 1 ,mem_le_testtype +0x53e9 021812 nbranch le_ctf_test ,blank +0x53ea 021813 fetch 1 ,mem_le_ch_mapped +0x53eb 021814 sub pdata ,36 ,null +0x53ec 021815 branch le_ctf_normal ,positive +0x53ed 021816 force 0 ,temp +0x53ee 021817 rtneq 37 +0x53ef 021818 force 24 ,temp +0x53f0 021819 rtneq 38 +0x53f1 021820 force 78 ,temp +0x53f2 021821 rtn +: 021823 le_ctf_normal: +0x53f3 021824 sub pdata ,10 ,null +0x53f4 021825 branch le_ctf_low ,positive +0x53f5 021826 increase 1 ,pdata +: 021828 le_ctf_low: +0x53f6 021829 lshift pdata ,pdata +0x53f7 021830 add pdata ,2 ,temp +0x53f8 021831 rtn +: 021833 le_ctf_test: +0x53f9 021834 fetch 1 ,mem_le_ch_mapped +0x53fa 021835 lshift pdata ,temp +0x53fb 021836 rtn +: 021838 le_sca_map: +0x53fc 021839 arg 500 ,temp +0x53fd 021840 rtn blank +0x53fe 021841 arg 250 ,temp +0x53ff 021842 rtneq 1 +0x5400 021843 arg 150 ,temp +0x5401 021844 rtneq 2 +0x5402 021845 arg 100 ,temp +0x5403 021846 rtneq 3 +0x5404 021847 arg 75 ,temp +0x5405 021848 rtneq 4 +0x5406 021849 arg 50 ,temp +0x5407 021850 rtneq 5 +0x5408 021851 arg 40 ,temp +0x5409 021852 rtneq 6 +0x540a 021853 arg 20 ,temp +0x540b 021854 rtn +: 021858 le_adv_access: +0x540c 021859 setarg 0x8e89be +0x540d 021860 lshift8 pdata ,pdata +0x540e 021861 or_into 0xd6 ,pdata +0x540f 021862 iforce access +0x5410 021863 setarg 0x555555 +0x5411 021864 store 3 ,mem_le_crcinit +0x5412 021865 rtn +: 021867 le_setup: +0x5413 021868 bpatchx patch28_2 ,mem_patch28 +0x5414 021869 enable swfine +0x5415 021870 fetch 4 ,mem_le_access +0x5416 021871 iforce access +0x5417 021872 call le_map_channel +0x5418 021873 setarg 0x200 +0x5419 021874 branch le_setup_master ,master +0x541a 021875 fetch 2 ,mem_le_receive_window +0x541b 021876 rshift pdata ,pdata +: 021877 le_setup_master: +0x541c 021878 arg param_pll_setup ,temp +0x541d 021879 iadd temp ,pdata +0x541e 021880 call ahead_window +0x541f 021881 deposit clke +0x5420 021882 store 6 ,mem_le_rxon_ts +0x5421 021883 rtn +: 021885 le_next_adv_channel: +0x5422 021886 bpatchx patch28_3 ,mem_patch28 +0x5423 021887 fetch 1 ,mem_le_ch_mapped +0x5424 021888 beq 37 ,le_next_adv_channel_curr_channel_37 +0x5425 021889 beq 38 ,le_next_adv_channel_curr_channel_38 +0x5426 021890 beq 39 ,le_next_adv_channel_curr_channel_39 +0x5427 021891 branch le_next_adv_channel_curr_channel_39 +: 021893 le_next_adv_channel_curr_channel_37: +0x5428 021894 fetcht 1 ,mem_le_adv_channel_map +0x5429 021895 isolate1 bit_adv_channel_map_38 ,temp +0x542a 021896 branch set_le_next_adv_channel_38 ,true +0x542b 021897 isolate1 bit_adv_channel_map_39 ,temp +0x542c 021898 branch set_le_next_adv_channel_39 ,true +0x542d 021899 branch set_le_next_adv_channel_37 +: 021902 le_next_adv_channel_curr_channel_38: +0x542e 021903 fetcht 1 ,mem_le_adv_channel_map +0x542f 021904 isolate1 bit_adv_channel_map_39 ,temp +0x5430 021905 branch set_le_next_adv_channel_39 ,true +0x5431 021906 isolate1 bit_adv_channel_map_37 ,temp +0x5432 021907 branch set_le_next_adv_channel_37 ,true +0x5433 021908 branch set_le_next_adv_channel_38 +: 021911 le_next_adv_channel_curr_channel_39: +0x5434 021912 fetcht 1 ,mem_le_adv_channel_map +0x5435 021913 isolate1 bit_adv_channel_map_37 ,temp +0x5436 021914 branch set_le_next_adv_channel_37 ,true +0x5437 021915 isolate1 bit_adv_channel_map_38 ,temp +0x5438 021916 branch set_le_next_adv_channel_38 ,true +0x5439 021917 branch set_le_next_adv_channel_39 +: 021921 set_le_next_adv_channel_37: +0x543a 021922 jam 37 ,mem_le_ch_mapped +0x543b 021923 fetch 1 ,mem_le_adv_channel_map_temp +0x543c 021924 set1 bit_adv_channel_map_37 ,pdata +0x543d 021925 store 1 ,mem_le_adv_channel_map_temp +0x543e 021926 rtn +: 021928 set_le_next_adv_channel_38: +0x543f 021929 jam 38 ,mem_le_ch_mapped +0x5440 021930 fetch 1 ,mem_le_adv_channel_map_temp +0x5441 021931 set1 bit_adv_channel_map_38 ,pdata +0x5442 021932 store 1 ,mem_le_adv_channel_map_temp +0x5443 021933 rtn +: 021935 set_le_next_adv_channel_39: +0x5444 021936 jam 39 ,mem_le_ch_mapped +0x5445 021937 fetch 1 ,mem_le_adv_channel_map_temp +0x5446 021938 set1 bit_adv_channel_map_39 ,pdata +0x5447 021939 store 1 ,mem_le_adv_channel_map_temp +0x5448 021940 rtn +: 021944 le_context_nexthop: +0x5449 021945 bpatchx patch28_4 ,mem_patch28 +0x544a 021946 add rega ,coffset_mode ,contr +0x544b 021947 ifetch 1 ,contr +0x544c 021948 rtnbit0 mode_le +0x544d 021949 add rega ,coffset_le_event_cnt ,contw +0x544e 021950 ifetch 2 ,contw +0x544f 021951 increase 1 ,pdata +0x5450 021952 istore 2 ,contw +0x5451 021953 add rega ,coffset_le_hop ,contr +0x5452 021954 ifetch 1 ,contr +0x5453 021955 add rega ,coffset_le_ch ,contw +0x5454 021956 ifetcht 1 ,contw +0x5455 021957 iadd temp ,pdata +0x5456 021958 sub pdata ,36 ,null +0x5457 021959 branch le_nexthop_nowrap ,positive +0x5458 021960 increase -37 ,pdata +: 021961 le_nexthop_nowrap: +0x5459 021962 istore 1 ,contw +0x545a 021963 rtn +: 021966 le_calc_channel_map: +0x545b 021967 bpatchx patch28_5 ,mem_patch28 +0x545c 021968 fetch 5 ,mem_le_channel_map +0x545d 021969 force 0 ,temp +0x545e 021970 force 37 ,loopcnt +: 021971 le_count_channels_loop: +0x545f 021972 bbit0 0 ,le_count_channels_notused +0x5460 021973 increase 1 ,temp +: 021974 le_count_channels_notused: +0x5461 021975 rshift pdata ,pdata +0x5462 021976 loop le_count_channels_loop +0x5463 021977 add temp ,-1 ,pdata +0x5464 021978 store 1 ,mem_le_channels +0x5465 021979 rtn +: 021981 le_map_channel: +0x5466 021982 bpatchx patch28_6 ,mem_patch28 +0x5467 021983 fetch 1 ,mem_le_ch +0x5468 021984 iforce queue +0x5469 021985 fetcht 5 ,mem_le_channel_map +0x546a 021986 qisolate1 temp +0x546b 021987 branch le_map_channel_end ,true +: 021988 le_map_channel_next: +0x546c 021989 bpatchx patch28_7 ,mem_patch28 +0x546d 021990 fetch 1 ,mem_le_channels +0x546e 021991 isub queue ,pdata +0x546f 021992 branch le_map_channel_cont ,positive +0x5470 021993 sub pdata ,-1 ,queue +0x5471 021994 branch le_map_channel_next +: 021995 le_map_channel_cont: +0x5472 021996 copy queue ,loopcnt +0x5473 021997 force 0 ,queue +: 021998 le_map_channel_loop: +0x5474 021999 qisolate1 temp +0x5475 022000 branch le_map_channel_skip ,true +0x5476 022001 increase 1 ,loopcnt +: 022002 le_map_channel_skip: +0x5477 022003 deposit loopcnt +0x5478 022004 branch le_map_channel_end ,blank +0x5479 022005 increase 1 ,queue +0x547a 022006 increase -1 ,loopcnt +0x547b 022007 branch le_map_channel_loop +: 022008 le_map_channel_end: +0x547c 022009 deposit queue +0x547d 022010 store 1 ,mem_le_ch_mapped +0x547e 022011 rtn +: 022014 le_wait_tx: +0x547f 022015 branch le_wait_master ,master +0x5480 022016 until null ,timeout +0x5481 022017 rtn +: 022019 le_wait_master: +0x5482 022020 arg 0xea0 ,timeup +0x5483 022021 until clkn_rt ,meet +0x5484 022022 rtn +: 022024 le_receive_adv: +0x5485 022025 disable swfine +0x5486 022026 fetch 2 ,mem_le_scan_window +0x5487 022027 copy pdata ,timeup +0x5488 022028 branch le_receive_packet +: 022031 le_receive_slave: +0x5489 022032 bpatchx patch29_0 ,mem_patch29 +0x548a 022033 enable swfine +0x548b 022034 fetch 2 ,mem_le_receive_window +0x548c 022035 fetcht 4 ,mem_le_transmit_window +0x548d 022036 iadd temp ,timeup +: 022037 le_receive_packet: +0x548e 022038 call lerx_setfreq +: 022039 le_receive_rxon: +0x548f 022040 bpatchx patch29_1 ,mem_patch29 +0x5490 022041 call le_prep +0x5491 022042 disable match +0x5492 022043 enable decode_fec0 +0x5493 022044 enable is_rx +0x5494 022045 disable is_tx +0x5495 022046 copy timeup ,stop_watch +0x5496 022047 correlate null ,timeout +0x5497 022048 branch le_receive_on_attempt ,attempt +0x5498 022049 copy clke ,temp +0x5499 022050 storet 6 ,mem_sync_clke +: 022051 le_receive_on_attempt: +0x549a 022052 nbranch end_of_packet ,sync +0x549b 022053 branch le_receive_skip ,attempt +0x549c 022054 arg param_clke_cal_le ,clke_rt +0x549d 022055 copy bt_clk ,clke_bt +0x549e 022056 fetch 1 ,mem_le_state +0x549f 022057 bbit0 lestate_got_first_packet ,le_receive_skip +0x54a0 022058 call lpm_adjust_clk ,wake +: 022059 le_receive_skip: +0x54a1 022060 bpatchx patch29_2 ,mem_patch29 +0x54a2 022061 call save_rssi +0x54a3 022062 enable enable_white +0x54a4 022063 enable enable_crc +0x54a5 022064 parse demod ,bucket ,8 +0x54a6 022065 rshift3 pwindow ,pdata +0x54a7 022066 store 1 ,mem_le_rxbuf +0x54a8 022067 parse demod ,bucket ,8 +0x54a9 022068 rshift3 pwindow ,pdata +0x54aa 022069 istore 1 ,contw +0x54ab 022070 and pdata ,0x3f ,loopcnt +0x54ac 022071 branch lerx_nopayload ,zero +: 022073 lerx_loop: +0x54ad 022074 parse demod ,bucket ,8 +0x54ae 022075 rshift3 pwindow ,pdata +0x54af 022076 istore 1 ,contw +0x54b0 022077 loop lerx_loop +: 022079 lerx_nopayload: +0x54b1 022080 bpatchx patch29_3 ,mem_patch29 +0x54b2 022081 parse demod ,bucket ,24 +0x54b3 022082 enable swfine +0x54b4 022083 arg param_sifs ,stop_watch +0x54b5 022084 rshift32 pdata ,pdata +0x54b6 022085 rshift16 pdata ,pdata +0x54b7 022086 istore 3 ,contw +0x54b8 022087 branch end_of_packet ,crc_failed +0x54b9 022088 enable match +0x54ba 022089 fetch 1 ,mem_last_freq +0x54bb 022090 add pdata ,0 ,rega +0x54bc 022091 call rf_write_freq +0x54bd 022092 disable decode_fec0 +0x54be 022093 branch set_sync_on +: 022095 le_transmit_receive_sifs: +0x54bf 022096 bpatchx patch29_4 ,mem_patch29 +0x54c0 022097 call le_transmit +: 022098 le_transmit_receive_sifs_notx: +0x54c1 022099 fetcht 1 ,mem_last_freq +0x54c2 022100 call set_freq_rx +0x54c3 022101 call rf_rx_enable +0x54c4 022102 enable swfine +0x54c5 022103 arg 5500 ,timeup +0x54c6 022104 branch le_receive_rxon +: 022106 le_transmit_norx: +0x54c7 022107 call le_transmit +0x54c8 022108 branch end_of_packet +: 022110 le_transmit: +0x54c9 022111 bpatchx patch29_5 ,mem_patch29 +0x54ca 022112 call le_prep +0x54cb 022113 call letx_setfreq +0x54cc 022114 branch le_transmit0 +: 022116 le_transmit0: +0x54cd 022117 set1 txgfsk ,radio_ctrl +0x54ce 022118 enable encode_fec0 +0x54cf 022119 enable is_tx +0x54d0 022120 disable is_rx +0x54d1 022121 call le_wait_tx +0x54d2 022122 rshift16 access ,pdata +0x54d3 022123 rshift8 pdata ,pdata +0x54d4 022124 rshift4 pdata ,pdata +0x54d5 022125 inject mod ,40 +0x54d6 022126 enable enable_white +0x54d7 022127 enable enable_crc +0x54d8 022128 bpatchx patch29_6 ,mem_patch29 +0x54d9 022129 fetch 1 ,mem_le_txheader +0x54da 022130 inject mod ,8 +0x54db 022131 ifetch 1 ,contr +0x54dc 022132 and pdata ,0x3f ,loopcnt +0x54dd 022133 inject mod ,8 +0x54de 022134 branch letr_nopayload ,zero +: 022135 letr_loop: +0x54df 022136 ifetch 1 ,contr +0x54e0 022137 inject mod ,8 +0x54e1 022138 loop letr_loop +: 022140 letr_nopayload: +0x54e2 022141 enable enable_parity +0x54e3 022142 inject mod ,24 +0x54e4 022143 disable enable_parity +0x54e5 022144 until null ,tx_clear +0x54e6 022145 nop 100 +0x54e7 022146 disable encode_fec0 +0x54e8 022147 rtn +: 022149 le_send_adv_ind: +0x54e9 022150 bpatchx patch29_7 ,mem_patch29 +0x54ea 022151 fetch 1 ,mem_le_adv_type +0x54eb 022152 beq adv_direct_ind ,le_send_adv_direct_ind +0x54ec 022153 fetch 1 ,mem_le_adv_own_addr_type +0x54ed 022154 lshift4 pdata ,pdata +0x54ee 022155 lshift2 pdata ,pdata +0x54ef 022156 store 1 ,mem_le_txheader +0x54f0 022157 fetcht 1 ,mem_le_adv_data_len +0x54f1 022158 add temp ,6 ,pdata +0x54f2 022159 store 1 ,mem_le_txlen +0x54f3 022160 fetch 6 ,mem_le_lap +0x54f4 022161 store 6 ,mem_le_txpayload +0x54f5 022162 copy temp ,loopcnt +0x54f6 022163 arg mem_le_adv_data ,contr +0x54f7 022164 call memcpy_fast +0x54f8 022165 branch le_send_adv_transmit +: 022166 le_send_adv_direct_ind: +0x54f9 022167 fetch 1 ,mem_le_adv_direct_addr_type +0x54fa 022168 lshift4 pdata ,pdata +0x54fb 022169 lshift2 pdata ,pdata +0x54fc 022170 increase 1 ,pdata +0x54fd 022171 store 1 ,mem_le_txheader +0x54fe 022172 setarg 12 +0x54ff 022173 store 1 ,mem_le_txlen +0x5500 022174 fetch 6 ,mem_le_lap +0x5501 022175 store 6 ,mem_le_txpayload +0x5502 022176 fetch 6 ,mem_hci_plap +0x5503 022177 istore 6 ,contw +: 022178 le_send_adv_transmit: +0x5504 022179 bpatchx patch2a_0 ,mem_patch2a +0x5505 022180 fetch 1 ,mem_le_adv_transmit +0x5506 022181 increase 1 ,pdata +0x5507 022182 store 1 ,mem_le_adv_transmit +0x5508 022183 arg 1800 ,stop_watch +0x5509 022184 disable match +0x550a 022185 branch le_transmit_receive_sifs +: 022187 le_send_scan_request: +0x550b 022188 bpatchx patch2a_1 ,mem_patch2a +0x550c 022189 fetch 1 ,mem_le_scan_type +0x550d 022190 rtnne le_scan_type_active +0x550e 022191 fetch 1 ,mem_le_adv_transmit +0x550f 022192 increase 1 ,pdata +0x5510 022193 store 1 ,mem_le_adv_transmit +0x5511 022194 arg 0x0c03 ,temp +0x5512 022195 fetch 1 ,mem_le_scan_own_addr_type +0x5513 022196 nsetflag blank ,le_sender_addr_bit ,temp +0x5514 022197 copy rega ,pdata +0x5515 022198 nsetflag blank ,le_receiver_addr_bit ,temp +0x5516 022199 storet 2 ,mem_le_txheader +0x5517 022200 fetch 6 ,mem_le_lap +0x5518 022201 istore 6 ,contw +0x5519 022202 fetch 6 ,mem_le_plap +0x551a 022203 istore 6 ,contw +0x551b 022204 branch le_transmit_receive_sifs +: 022207 le_send_scan_response: +0x551c 022208 bpatchx patch2a_2 ,mem_patch2a +0x551d 022209 arg scan_rsp ,temp +0x551e 022210 fetch 1 ,mem_le_adv_own_addr_type +0x551f 022211 nsetflag blank ,le_sender_addr_bit ,temp +0x5520 022212 storet 1 ,mem_le_txheader +0x5521 022213 fetcht 1 ,mem_le_scan_data_len +0x5522 022214 add temp ,6 ,pdata +0x5523 022215 store 1 ,mem_le_txlen +0x5524 022216 fetch 6 ,mem_le_lap +0x5525 022217 store 6 ,mem_le_txpayload +0x5526 022218 arg mem_le_scan_data ,contr +0x5527 022219 copy temp ,loopcnt +0x5528 022220 call memcpy_fast +0x5529 022221 call le_transmit_norx +0x552a 022222 branch le_adv_not_match +: 022224 le_connect_request: +0x552b 022225 bpatchx patch2a_3 ,mem_patch2a +0x552c 022226 force -1 ,pdata +0x552d 022227 setsect 2 ,1 +0x552e 022228 store 5 ,mem_le_channel_map +0x552f 022229 call le_calc_channel_map +0x5530 022230 force 4 ,loopcnt +0x5531 022231 arg mem_le_access ,contw +0x5532 022232 call generate_random_loop +0x5533 022233 fetch 2 ,mem_le_timeout +0x5534 022234 store 2 ,mem_le_superto +: 022235 le_con_req_hop_retry: +0x5535 022236 random pdata +0x5536 022237 and_into 0xf ,pdata +0x5537 022238 sub pdata ,4 ,null +0x5538 022239 branch le_con_req_hop_retry ,positive +0x5539 022240 store 1 ,mem_le_hop +0x553a 022241 store 1 ,mem_tmp1 +0x553b 022242 bpatchx patch2a_4 ,mem_patch2a +0x553c 022243 fetcht 2 ,mem_le_conn_interval +0x553d 022244 storet 2 ,mem_le_tsniff +0x553e 022245 copy temp ,regc +0x553f 022246 add clkn_bt ,7 ,pdata +0x5540 022247 idiv regc +0x5541 022248 call wait_div_end +0x5542 022249 remainder rega +0x5543 022250 isub rega ,pdata +0x5544 022251 iadd regc ,pdata +0x5545 022252 fetcht 2 ,mem_le_dsniff +0x5546 022253 iadd temp ,pdata +0x5547 022254 store 4 ,mem_le_anchor +0x5548 022255 isub clkn_bt ,rega +0x5549 022256 increase -6 ,rega +0x554a 022257 arg 0x2205 ,regb +0x554b 022258 fetch 1 ,mem_le_conn_own_addr_type +0x554c 022259 nsetflag blank ,le_sender_addr_bit ,regb +0x554d 022260 fetch 1 ,mem_le_conn_peer_addr_type +0x554e 022261 nsetflag blank ,le_receiver_addr_bit ,regb +0x554f 022262 copy regb ,pdata +0x5550 022263 store 2 ,mem_le_txheader +0x5551 022264 fetch 6 ,mem_le_lap +0x5552 022265 istore 6 ,contw +0x5553 022266 fetch 6 ,mem_le_plap +0x5554 022267 istore 6 ,contw +0x5555 022268 fetch 4 ,mem_le_access +0x5556 022269 istore 4 ,contw +0x5557 022270 random pdata +0x5558 022271 istore 2 ,contw +0x5559 022272 random pdata +0x555a 022273 istore 1 ,contw +0x555b 022274 force 2 ,pdata +0x555c 022275 istore 1 ,contw +0x555d 022276 rshift2 rega ,pdata +0x555e 022277 istore 2 ,contw +0x555f 022278 rshift2 regc ,pdata +0x5560 022279 istore 2 ,contw +0x5561 022280 bpatchx patch2a_5 ,mem_patch2a +0x5562 022281 setarg 0 +0x5563 022282 istore 2 ,contw +0x5564 022283 fetch 2 ,mem_le_timeout +0x5565 022284 istore 2 ,contw +0x5566 022285 fetch 5 ,mem_le_channel_map +0x5567 022286 istore 5 ,contw +0x5568 022287 fetch 1 ,mem_le_hop +0x5569 022288 arg param_le_sca ,temp +0x556a 022289 ior temp ,pdata +0x556b 022290 istore 1 ,contw +0x556c 022291 call le_transmit_norx +0x556d 022292 setarg mem_le_txheader +0x556e 022293 add pdata ,18 ,contr +0x556f 022294 ifetch 3 ,contr +0x5570 022295 store 3 ,mem_le_crcinit +0x5571 022296 rtn +: 022298 le_init_adv: +0x5572 022299 bpatchx patch2a_6 ,mem_patch2a +0x5573 022300 disable master +0x5574 022301 branch le_adv_access +: 022305 le_update_param: +0x5575 022306 fetch 1 ,mem_le_state +0x5576 022307 rtnbit0 lestate_update_param +0x5577 022308 fetch 2 ,mem_le_event_count +0x5578 022309 fetcht 2 ,mem_le_instant +0x5579 022310 isub temp ,pdata +0x557a 022311 nrtn positive +0x557b 022312 store 2 ,mem_pdatatemp +0x557c 022313 bpatchx patch2a_7 ,mem_patch2a +0x557d 022314 fetch 1 ,mem_le_state +0x557e 022315 set0 lestate_update_param ,pdata +0x557f 022316 set0 lestate_got_first_packet ,pdata +0x5580 022317 store 1 ,mem_le_state +0x5581 022318 fetch 4 ,mem_le_anchor +0x5582 022319 fetcht 2 ,mem_le_tsniff +0x5583 022320 storet 2 ,mem_temp +0x5584 022321 isub temp ,rega +0x5585 022322 bpatchx patch2b_0 ,mem_patch2b +0x5586 022323 fetch 1 ,mem_le_new_param +0x5587 022324 store 1 ,mem_le_window_size +0x5588 022325 ifetcht 2 ,contr +0x5589 022326 ifetch 2 ,contr +0x558a 022327 lshift2 pdata ,pdata +0x558b 022328 store 2 ,mem_le_tsniff +0x558c 022329 lshift2 temp ,temp +0x558d 022330 iadd temp ,pdata +0x558e 022331 ifetcht 4 ,contr +0x558f 022332 storet 4 ,mem_le_slave_latency +0x5590 022333 iadd rega ,pdata +0x5591 022334 copy pdata ,regab +0x5592 022335 fetch 2 ,mem_le_tsniff +0x5593 022336 fetcht 2 ,mem_temp +0x5594 022337 isub temp ,pdata +0x5595 022338 fetcht 2 ,mem_pdatatemp +0x5596 022339 imul32 temp ,pdata +0x5597 022340 iadd regab ,pdata +0x5598 022341 store 4 ,mem_le_anchor +0x5599 022342 call le_receive_window_size +0x559a 022343 fetch 2 ,mem_le_superto +0x559b 022344 store 2 ,mem_le_init_superto +0x559c 022345 rtn +: 022348 le_update_channel_map: +0x559d 022349 bpatchx patch2b_1 ,mem_patch2b +0x559e 022350 fetch 1 ,mem_le_state +0x559f 022351 rtnbit0 lestate_update_map +0x55a0 022352 fetch 2 ,mem_le_event_count +0x55a1 022353 fetcht 2 ,mem_le_instant +0x55a2 022354 isub temp ,pdata +0x55a3 022355 nrtn positive +0x55a4 022356 fetch 1 ,mem_le_state +0x55a5 022357 set0 lestate_update_map ,pdata +0x55a6 022358 store 1 ,mem_le_state +0x55a7 022359 fetch 5 ,mem_le_new_map +0x55a8 022360 store 5 ,mem_le_channel_map +0x55a9 022361 branch le_calc_channel_map +: 022364 le_acknowledge: +0x55aa 022365 bpatchx patch2b_2 ,mem_patch2b +0x55ab 022366 call le_supervision_flush +0x55ac 022367 call le_check_wak +0x55ad 022368 fetch 1 ,mem_le_rxbuf +0x55ae 022369 isolate1 md ,pdata +0x55af 022370 setflag true ,mark_ble_rx_md ,mark +0x55b0 022371 rshift pdata ,pdata +0x55b1 022372 ixor temp ,pdata +0x55b2 022373 isolate1 nesn ,pdata +0x55b3 022374 setflag true ,mark_old_packet ,mark +0x55b4 022375 rtnmark1 mark_old_packet +0x55b5 022376 fetch 1 ,mem_le_rxbuf + 1 +0x55b6 022377 branch le_ack_unenc ,blank +0x55b7 022378 fetch 1 ,mem_le_state +0x55b8 022379 bbit0 lestate_encryption ,le_ack_unenc +0x55b9 022380 call load_sk +0x55ba 022381 call le_decrypt +0x55bb 022382 nrtn blank +: 022383 le_ack_unenc: +0x55bc 022384 fetcht 1 ,mem_le_arq +0x55bd 022385 setflip nesn ,temp +0x55be 022386 storet 1 ,mem_le_arq +0x55bf 022387 rtn +: 022390 le_check_wak: +0x55c0 022391 bpatchx patch2b_3 ,mem_patch2b +0x55c1 022392 fetcht 1 ,mem_le_arq +0x55c2 022393 isolate0 wak ,temp +0x55c3 022394 rtn true +0x55c4 022395 fetch 1 ,mem_le_rxbuf +0x55c5 022396 lshift pdata ,pdata +0x55c6 022397 ixor temp ,pdata +0x55c7 022398 rtnbit0 sn +0x55c8 022399 set0 wak ,temp +0x55c9 022400 setflip sn ,temp +0x55ca 022401 storet 1 ,mem_le_arq +0x55cb 022402 compare 3 ,temp ,3 +0x55cc 022403 nrtn true +0x55cd 022404 fetch 1 ,mem_le_txpayload +0x55ce 022405 beq ll_start_enc_req ,le_set_enc +0x55cf 022406 fetch 1 ,mem_le_enc_state +0x55d0 022407 beq flag_le_enc_pause ,le_clear_enc +0x55d1 022408 rtn +: 022411 le_set_enc: +0x55d2 022412 fetch 1 ,mem_le_state +0x55d3 022413 set1 lestate_encryption ,pdata +0x55d4 022414 store 1 ,mem_le_state +0x55d5 022415 rtn +: 022417 le_clear_enc: +0x55d6 022418 bpatchx patch2b_4 ,mem_patch2b +0x55d7 022419 jam flag_le_enc_null ,mem_le_enc_state +0x55d8 022420 arg 0 ,pdata +0x55d9 022421 store 4 ,mem_le_last_mic +0x55da 022422 store 5 ,mem_le_pcnt_tx +0x55db 022423 set1 39 ,pdata +0x55dc 022424 store 5 ,mem_le_pcnt_rx +0x55dd 022425 fetch 1 ,mem_le_state +0x55de 022426 set0 lestate_encryption ,pdata +0x55df 022427 store 1 ,mem_le_state +0x55e0 022428 rtn +: 022431 le_wait_adv: +0x55e1 022432 bpatchx patch2b_5 ,mem_patch2b +0x55e2 022433 call le_next_adv_channel +0x55e3 022434 call le_receive_adv +0x55e4 022435 fetch 1 ,mem_le_adv_waitcnt +0x55e5 022436 increase 1 ,pdata +0x55e6 022437 store 1 ,mem_le_adv_waitcnt +0x55e7 022438 rtn +: 022441 le_scan: +0x55e8 022442 bpatchx patch2b_6 ,mem_patch2b +0x55e9 022443 fetch 1 ,mem_le_scan_enable +0x55ea 022444 rtnne le_scan_enable +0x55eb 022445 arg le_scan_interval_timer ,queue +0x55ec 022446 call timer_check +0x55ed 022447 nrtn blank +0x55ee 022448 fetch 2 ,mem_le_scan_interval +0x55ef 022449 fetcht 2 ,mem_le_scan_window +0x55f0 022450 isub temp ,pdata +0x55f1 022451 arg le_scan_interval_timer ,queue +0x55f2 022452 call timer_init +0x55f3 022453 disable master +0x55f4 022454 call le_init_adv +0x55f5 022455 call le_wait_adv +0x55f6 022456 nrtn match +0x55f7 022457 bpatchx patch2b_7 ,mem_patch2b +0x55f8 022458 fetch 6 ,mem_le_rxbuf + 2 +0x55f9 022459 store 6 ,mem_le_plap +0x55fa 022462 fetch 1 ,mem_le_adv_rcv +0x55fb 022463 increase 1 ,pdata +0x55fc 022464 store 1 ,mem_le_adv_rcv +0x55fd 022465 call le_create_conn +0x55fe 022466 rtn master +0x55ff 022467 call le_send_scan_request +0x5600 022468 nrtn match +0x5601 022469 bpatchx patch2c_0 ,mem_patch2c +0x5602 022470 fetch 1 ,mem_le_scanrsp_rcv +0x5603 022471 increase 1 ,pdata +0x5604 022472 store 1 ,mem_le_scanrsp_rcv +0x5605 022473 fetch 9 ,mem_le_rxbuf + 8 +0x5606 022474 store 9 ,mem_tmp_buffer +0x5607 022475 rtn +: 022477 le_create_conn: +0x5608 022478 bpatchx patch2c_1 ,mem_patch2c +0x5609 022479 fetch 1 ,mem_cmd_le_create_conn +0x560a 022480 rtnne hci_cmd_le_create_conn +0x560b 022481 fetch 6 ,mem_le_plap +0x560c 022482 fetcht 6 ,mem_le_conn_peer_addr +0x560d 022483 isub temp ,null +0x560e 022484 nrtn zero +0x560f 022485 call context_new +0x5610 022486 nrtn zero +0x5611 022487 call le_connect_request +0x5612 022488 call le_init_master +0x5613 022489 bpatchx patch2c_2 ,mem_patch2c +0x5614 022490 jam 0 ,mem_hci_cmd +0x5615 022491 jam 0 ,mem_le_peer_sca +0x5616 022492 jam 0 ,mem_le_scan_enable +0x5617 022493 jam 0 ,mem_cmd_le_create_conn +0x5618 022494 branch context_save +: 022496 le_scan_check_sender_addr_type: +0x5619 022497 arg 1 ,rega +0x561a 022498 fetch 1 ,mem_le_rxbuf +0x561b 022499 rtnbit1 le_sender_addr_bit +0x561c 022500 arg 0 ,rega +0x561d 022501 rtn +: 022505 le_prepare_tx: +0x561e 022506 bpatchx patch2c_3 ,mem_patch2c +0x561f 022507 fetch 1 ,mem_le_arq +0x5620 022508 rtnbit1 wak +0x5621 022509 call le_check_tx_md +0x5622 022510 call le_fifo_get_first_tx_ptr +0x5623 022511 branch le_send_empty ,blank +0x5624 022512 ifetch 1 ,contr +0x5625 022513 ifetcht 1 ,contr +0x5626 022514 copy temp ,rega +0x5627 022515 isub rega ,pdata +0x5628 022516 arg le_max_paket_len ,temp +0x5629 022517 call not_greater_than +0x562a 022518 copy pdata ,temp +0x562b 022519 ifetch 1 ,contr +0x562c 022520 copy pdata ,type +0x562d 022521 copy rega ,pdata +0x562e 022522 iadd contr ,contr +0x562f 022523 arg mem_le_txpayload ,contw +0x5630 022524 copy temp ,loopcnt +0x5631 022525 call memcpy +0x5632 022526 call le_update_tx_type +0x5633 022527 call le_send_packet +0x5634 022529 call le_fifo_get_first_tx_ptr +0x5635 022530 ifetch 1 ,contr +0x5636 022531 copy pdata ,rega +0x5637 022532 copy contr ,regc +0x5638 022533 ifetcht 1 ,contr +0x5639 022534 copy temp ,regb +0x563a 022535 isub regb ,pdata +0x563b 022536 arg le_max_paket_len ,temp +0x563c 022537 call not_greater_than +0x563d 022538 iadd regb ,pdata +0x563e 022539 istore 1 ,regc +0x563f 022540 isub rega ,null +0x5640 022541 nrtn zero +0x5641 022542 branch le_fifo_release_first_node +: 022545 le_check_tx_md: +0x5642 022546 call le_check_continue +0x5643 022547 rtnmark1 mark_ble_tx_md +0x5644 022548 fetch 1 ,mem_le_configuration +0x5645 022549 bbit0 bit_ble_transmit_packet_by_md ,le_clear_md +0x5646 022550 call le_fifo_get_second_tx_ptr +0x5647 022551 branch le_clear_md ,blank +0x5648 022552 branch le_set_md +: 022555 le_check_continue: +0x5649 022556 call le_fifo_get_first_tx_ptr +0x564a 022557 branch le_clear_md ,blank +0x564b 022558 ifetch 1 ,contr +0x564c 022559 ifetcht 1 ,contr +0x564d 022560 isub temp ,pdata +0x564e 022561 sub pdata ,le_max_paket_len ,null +0x564f 022562 branch le_clear_md ,positive +: 022563 le_set_md: +0x5650 022564 set1 mark_ble_tx_md ,mark +0x5651 022565 rtn +: 022567 le_clear_md: +0x5652 022568 set0 mark_ble_tx_md ,mark +0x5653 022569 rtn +: 022571 le_update_tx_type: +0x5654 022572 copy rega ,pdata +0x5655 022573 rtn blank +0x5656 022574 arg llid_continue ,type +0x5657 022575 rtn +: 022578 le_att_check_notification_enable: +0x5658 022579 bpatchx patch2c_4 ,mem_patch2c +0x5659 022580 increase 1 ,temp +0x565a 022581 call le_att_get_handle_ptr +0x565b 022582 increase -2 ,contr +0x565c 022583 ifetch 2 ,contr +0x565d 022584 arg client_charactertic_configuration ,temp +0x565e 022585 isub temp ,null +0x565f 022586 nrtn zero +0x5660 022587 increase 1 ,contr +0x5661 022588 copy contr ,rega +0x5662 022589 ifetch 1 ,contr +0x5663 022590 rtn +: 022593 le_send_empty: +0x5664 022594 force 0 ,temp +0x5665 022595 force 1 ,type +: 022597 le_send_packet: +0x5666 022598 bpatchx patch2c_5 ,mem_patch2c +0x5667 022599 storet 1 ,mem_le_txlen +0x5668 022600 fetcht 1 ,mem_le_arq +0x5669 022601 set1 wak ,temp +0x566a 022602 and temp ,0xfc ,pdata +0x566b 022603 ior type ,pdata +0x566c 022604 store 1 ,mem_le_arq +0x566d 022605 and_into 0x1f ,pdata +0x566e 022606 isolate1 mark_ble_tx_md ,mark +0x566f 022607 setflag true ,md ,pdata +0x5670 022608 store 1 ,mem_le_txheader +0x5671 022610 fetch 1 ,mem_le_txheader +0x5672 022611 compare 1 ,type ,3 +0x5673 022612 nbranch le_send_no_txlen ,true +0x5674 022613 fetch 1 ,mem_le_txlen +0x5675 022614 rtn blank +: 022615 le_send_no_txlen: +0x5676 022616 fetch 1 ,mem_le_state +0x5677 022617 rtnbit0 lestate_encryption +0x5678 022618 call load_sk +0x5679 022619 branch le_encrypt +: 022622 get_lpm_wake_ble_rx_lock: +0x567a 022623 arg wake_lock_ble_rx ,queue +0x567b 022624 branch lpm_get_wake_lock +: 022626 put_lpm_wake_ble_rx_lock: +0x567c 022627 arg wake_lock_ble_rx ,queue +0x567d 022628 branch lpm_put_wake_lock +: 022631 le_parse: +0x567e 022632 bpatchx patch2c_6 ,mem_patch2c +0x567f 022633 rtnmark1 mark_old_packet +0x5680 022634 call le_fifo_check_full +0x5681 022635 nrtn blank +0x5682 022636 fetch 1 ,mem_le_rxbuf +0x5683 022637 and pdata ,0x3 ,pdata +0x5684 022638 store 1 ,mem_le_packet_llid +0x5685 022639 ifetch 1 ,contr +0x5686 022640 and pdata ,0x1f ,pdata +0x5687 022641 store 1 ,mem_le_packet_size +0x5688 022642 rtn blank +0x5689 022643 copy contr ,pdata +0x568a 022644 store 2 ,mem_le_payload_ptr +0x568b 022645 fetch 1 ,mem_le_packet_llid +0x568c 022646 beq llid_le_ll ,le_parse_ll +: 022647 le_parse_l2cap: +0x568d 022648 call le_check_l2cap_complete +0x568e 022649 nbranch get_lpm_wake_ble_rx_lock ,user +0x568f 022650 call put_lpm_wake_ble_rx_lock +0x5690 022651 fetch 2 ,mem_le_payload_ptr +0x5691 022652 copy pdata ,contr +0x5692 022653 ifetch 2 ,contr +0x5693 022654 store 2 ,mem_le_l2cap_size +0x5694 022655 bpatchx patch2c_7 ,mem_patch2c +0x5695 022656 ifetch 2 ,contr +0x5696 022657 beq le_l2cap_cid_att ,le_parse_att +0x5697 022658 beq le_l2cap_cid_smp ,le_parse_smp +0x5698 022659 beq le_l2cap_cid_signal ,le_parse_signaling +0x5699 022660 rtn +: 022663 le_check_l2cap_complete: +0x569a 022664 fetch 1 ,mem_le_packet_llid +0x569b 022665 beq llid_start ,le_check_l2cap_llid_start +0x569c 022666 beq llid_continue ,le_check_l2cap_llid_continue +0x569d 022667 rtn +: 022672 le_check_l2cap_cid_legal: +0x569e 022673 call enable_user +0x569f 022674 arg le_l2cap_cid_att ,temp +0x56a0 022675 isub pdata ,null +0x56a1 022676 rtn zero +0x56a2 022677 arg le_l2cap_cid_signal ,temp +0x56a3 022678 isub pdata ,null +0x56a4 022679 rtn zero +0x56a5 022680 arg le_l2cap_cid_smp ,temp +0x56a6 022681 isub pdata ,null +0x56a7 022682 rtn zero +0x56a8 022683 branch disable_user +: 022686 le_check_l2cap_llid_start: +0x56a9 022687 fetch 2 ,mem_le_payload_ptr +0x56aa 022688 copy pdata ,contr +0x56ab 022689 ifetch 2 ,contr +0x56ac 022690 store 2 ,mem_le_l2cap_size +0x56ad 022691 ifetch 2 ,contr +0x56ae 022692 call le_check_l2cap_cid_legal +0x56af 022693 nrtn user +0x56b0 022694 fetcht 1 ,mem_le_packet_size +0x56b1 022695 storet 1 ,mem_le_packet_len_recved +0x56b2 022696 fetch 2 ,mem_le_l2cap_size +0x56b3 022697 increase 4 ,pdata +0x56b4 022698 isub temp ,null +0x56b5 022699 branch enable_user ,zero +0x56b6 022700 fetch 1 ,mem_le_packet_size +0x56b7 022701 copy pdata ,loopcnt +0x56b8 022702 arg mem_le_l2capbuf ,contw +0x56b9 022703 fetch 2 ,mem_le_payload_ptr +0x56ba 022704 copy pdata ,contr +0x56bb 022705 call memcpy +0x56bc 022706 branch disable_user +: 022711 le_check_l2cap_continue_legal: +0x56bd 022712 call enable_user +0x56be 022713 fetch 1 ,mem_le_packet_len_recved +0x56bf 022714 nrtn blank +0x56c0 022715 branch disable_user +: 022717 le_check_l2cap_llid_continue: +0x56c1 022718 call le_check_l2cap_continue_legal +0x56c2 022719 nrtn user +0x56c3 022720 fetch 1 ,mem_le_packet_len_recved +0x56c4 022721 arg mem_le_l2capbuf ,contw +0x56c5 022722 iadd contw ,rega +0x56c6 022723 fetcht 1 ,mem_le_packet_size +0x56c7 022724 iadd temp ,pdata +0x56c8 022725 store 1 ,mem_le_packet_len_recved +0x56c9 022726 fetch 1 ,mem_le_packet_size +0x56ca 022727 copy pdata ,loopcnt +0x56cb 022728 copy rega ,contw +0x56cc 022729 fetch 2 ,mem_le_payload_ptr +0x56cd 022730 copy pdata ,contr +0x56ce 022731 call memcpy_fast +0x56cf 022732 setarg mem_le_l2capbuf +0x56d0 022733 store 2 ,mem_le_payload_ptr +0x56d1 022734 fetch 2 ,mem_le_l2cap_size +0x56d2 022735 increase 4 ,pdata +0x56d3 022736 fetcht 1 ,mem_le_packet_len_recved +0x56d4 022737 isub temp ,null +0x56d5 022738 branch enable_user ,zero +0x56d6 022739 branch disable_user +: 022745 le_get_search_att_type: +0x56d7 022746 call store_contr +0x56d8 022747 arg mem_le_search_att_type_length ,contw +: 022748 le_get_search_common: +0x56d9 022749 fetch 2 ,mem_le_l2cap_size +0x56da 022750 increase -5 ,pdata +: 022751 le_get_search_common2: +0x56db 022752 istore 1 ,contw +0x56dc 022753 copy pdata ,loopcnt +0x56dd 022754 call get_contr +0x56de 022755 branch memcpy_fast +: 022757 le_get_search_att_uuid: +0x56df 022758 call store_contr +0x56e0 022759 arg mem_le_search_uuid_length ,contw +0x56e1 022760 branch le_get_search_common +: 022764 le_writeatt_cb: +0x56e2 022765 fetch 2 ,mem_cb_att_write +0x56e3 022766 branch callback_func +: 022768 le_supervision_update: +0x56e4 022769 fetcht 4 ,mem_le_supervision_timer +0x56e5 022770 call get_clkbt +0x56e6 022771 isub temp ,timeup +0x56e7 022772 deposit timeup +0x56e8 022773 fetcht 2 ,mem_le_superto +0x56e9 022774 lshift4 temp ,temp +0x56ea 022775 lshift temp ,temp +0x56eb 022776 isub temp ,pdata +0x56ec 022777 rtn +: 022779 le_supervision_flush: +0x56ed 022780 call get_clkbt +0x56ee 022781 store 4 ,mem_le_supervision_timer +0x56ef 022782 rtn +: 022785 le_adv: +0x56f0 022786 jam 36 ,mem_le_ch_mapped +0x56f1 022787 jam 0 ,mem_le_adv_channel_map_temp +: 022788 le_adv_loop: +0x56f2 022789 bpatchx patch2d_0 ,mem_patch2d +0x56f3 022790 fetch 1 ,mem_le_adv_enable +0x56f4 022791 rtn blank +0x56f5 022792 arg le_adv_interval_timer ,queue +0x56f6 022793 call timer_check +0x56f7 022794 nrtn blank +0x56f8 022795 bpatchx patch2d_1 ,mem_patch2d +: 022796 le_adv_loop_tx: +0x56f9 022797 disable master +0x56fa 022798 enable swfine +0x56fb 022799 call le_init_adv +0x56fc 022800 call le_next_adv_channel +0x56fd 022801 call le_send_adv_ind +0x56fe 022802 nbranch le_adv_not_match ,match +0x56ff 022803 fetch 1 ,mem_le_req_rcv +0x5700 022804 increase 1 ,pdata +0x5701 022805 store 1 ,mem_le_req_rcv +0x5702 022806 fetch 1 ,mem_le_rxbuf +0x5703 022807 and pdata ,0x0f ,pdata +0x5704 022808 beq scan_req ,le_send_scan_response +0x5705 022809 beq connect_req ,le_parse_connect_req +: 022810 le_adv_not_match: +0x5706 022811 bpatchx patch2d_2 ,mem_patch2d +0x5707 022812 random pdata +0x5708 022813 arg 0x1ff ,temp +0x5709 022814 iand temp ,pdata +0x570a 022815 add pdata ,250 ,pdata +0x570b 022816 call delay +0x570c 022817 fetch 1 ,mem_le_adv_channel_map_temp +0x570d 022818 fetcht 1 ,mem_le_adv_channel_map +0x570e 022819 isub temp ,null +0x570f 022820 nbranch le_adv_loop ,zero +0x5710 022821 arg le_adv_interval_timer ,queue +0x5711 022822 fetch 2 ,mem_le_adv_interval +0x5712 022823 branch timer_init +: 022826 le_receive_window_size: +0x5713 022827 bpatchx patch2d_3 ,mem_patch2d +0x5714 022828 fetch 1 ,mem_le_peer_sca +0x5715 022829 call le_sca_map +0x5716 022830 fetch 2 ,mem_le_tsniff +0x5717 022831 imul32 temp ,pdata +0x5718 022832 arg 375 ,temp +0x5719 022833 imul32 temp ,pdata +0x571a 022834 arg 100000 ,temp +0x571b 022835 idiv temp +0x571c 022836 fetch 1 ,mem_le_window_size +0x571d 022837 arg 20000 ,temp +0x571e 022838 imul32 temp ,pdata +0x571f 022839 iadd temp ,pdata +0x5720 022840 store 4 ,mem_le_transmit_window +0x5721 022841 bpatchx patch2d_4 ,mem_patch2d +0x5722 022842 fetch 2 ,mem_rx_window_sniff +0x5723 022843 call wait_div_end +0x5724 022844 quotient temp +0x5725 022845 iadd temp ,pdata +0x5726 022846 store 2 ,mem_le_receive_window +0x5727 022847 rtn +: 022849 le_parse_connect_req: +0x5728 022850 bpatchx patch2d_5 ,mem_patch2d +0x5729 022851 fetch 6 ,mem_le_rxbuf + 8 +0x572a 022852 fetcht 6 ,mem_le_lap +0x572b 022853 isub temp ,null +0x572c 022854 nrtn zero +0x572d 022855 call le_scan_check_sender_addr_type +0x572e 022856 copy rega ,pdata +0x572f 022857 store 1 ,mem_le_conn_peer_addr_type +0x5730 022858 fetch 7 ,mem_le_rxbuf + 21 +0x5731 022859 store 7 ,mem_tmp_buffer +0x5732 022860 ifetch 8 ,contr +0x5733 022861 istore 8 ,contw +0x5734 022862 fetch 6 ,mem_le_rxbuf + 2 +0x5735 022863 store 6 ,mem_le_plap +0x5736 022864 increase 6 ,contr +0x5737 022865 ifetch 8 ,contr +0x5738 022866 store 8 ,mem_le_access +0x5739 022867 ifetcht 2 ,contr +0x573a 022868 bpatchx patch2d_6 ,mem_patch2d +0x573b 022869 lshift2 temp ,temp +0x573c 022870 ifetch 2 ,contr +0x573d 022871 lshift2 pdata ,pdata +0x573e 022872 store 2 ,mem_le_tsniff +0x573f 022873 store 4 ,mem_le_anchor +0x5740 022874 isub temp ,pdata +0x5741 022875 add pdata ,-2 ,clke_bt +0x5742 022876 ifetch 9 ,contr +0x5743 022877 store 9 ,mem_le_slave_latency +0x5744 022878 bpatchx patch2d_7 ,mem_patch2d +0x5745 022879 ifetch 1 ,contr +0x5746 022880 rshift4 pdata ,temp +0x5747 022881 rshift temp ,temp +0x5748 022882 storet 1 ,mem_le_peer_sca +0x5749 022883 and_into 0x1f ,pdata +0x574a 022884 store 1 ,mem_le_hop +0x574b 022885 call le_receive_window_size +0x574c 022886 call le_calc_channel_map +0x574d 022887 call le_init_slave +0x574e 022888 call context_new +0x574f 022889 nrtn zero +0x5750 022890 bpatchx patch2e_0 ,mem_patch2e +0x5751 022891 call calc_clke_offset +0x5752 022892 call le_l2cap_reset_signaling_identifier +0x5753 022893 jam bt_evt_le_connected ,mem_fifo_temp +0x5754 022894 call ui_ipc_send_event +0x5755 022895 branch context_save +: 022898 le_init_attlist_search: +0x5756 022899 bpatchx patch2e_1 ,mem_patch2e +0x5757 022900 fetch 2 ,mem_le_search_handle_start +0x5758 022901 iforce regb +0x5759 022902 fetch 2 ,mem_le_search_handle_end +0x575a 022903 iforce regc +0x575b 022904 fetch 2 ,mem_ui_le_uuid_table +0x575c 022905 iforce contr +0x575d 022906 enable user +0x575e 022907 rtn +: 022910 le_att_handle_inrange: +0x575f 022911 ifetch 2 ,contr +0x5760 022912 rtn blank +0x5761 022913 isub regb ,null +0x5762 022914 nrtn positive +0x5763 022915 isub regc ,null +0x5764 022916 rtn zero +0x5765 022917 branch le_att_handle_blank ,positive +0x5766 022918 force 1 ,null +0x5767 022919 rtn +: 022920 le_att_handle_blank: +0x5768 022921 force 0 ,pdata +0x5769 022922 rtn +: 022926 le_att_get_handle_ptr: +0x576a 022927 call le_att_get_handle_ptr2 +0x576b 022928 branch le_att_get_handle_ptr_found ,zero +0x576c 022929 rtn +: 022931 le_att_get_handle_ptr2: +0x576d 022932 bpatchx patch2e_2 ,mem_patch2e +0x576e 022933 fetch 2 ,mem_ui_le_uuid_table +0x576f 022934 iforce contr +: 022935 le_att_get_handle_loop1: +0x5770 022936 ifetch 2 ,contr +0x5771 022937 rtn blank +0x5772 022938 isub temp ,null +0x5773 022939 rtn zero +0x5774 022940 ifetch 1 ,contr +0x5775 022941 iadd contr ,contr +0x5776 022942 ifetch 1 ,contr +0x5777 022943 iadd contr ,contr +0x5778 022944 branch le_att_get_handle_loop1 +: 022945 le_att_get_handle_ptr_found: +0x5779 022946 ifetch 1 ,contr +0x577a 022947 iadd contr ,contr +0x577b 022948 rtn +: 022952 le_att_get_short_uuid_ptr: +0x577c 022953 bpatchx patch2e_3 ,mem_patch2e +0x577d 022954 fetch 2 ,mem_ui_le_uuid_table +0x577e 022955 iforce contr +: 022956 le_att_get_short_uuid_loop: +0x577f 022957 ifetch 2 ,contr +0x5780 022958 rtn blank +0x5781 022959 ifetch 1 ,contr +0x5782 022960 iadd contr ,contr +0x5783 022961 increase -2 ,contr +0x5784 022962 ifetch 2 ,contr +0x5785 022963 isub temp ,null +0x5786 022964 rtn zero +0x5787 022965 ifetch 1 ,contr +0x5788 022966 iadd contr ,contr +0x5789 022967 branch le_att_get_short_uuid_loop +: 022971 le_att_get_handle_info_from_ptr: +0x578a 022972 fetch 2 ,mem_le_cur_attlist_start_ptr +0x578b 022973 branch le_att_get_handle_info_fast +: 022975 le_att_get_handle_info: +0x578c 022976 bpatchx patch2e_4 ,mem_patch2e +0x578d 022977 fetch 2 ,mem_ui_le_uuid_table +: 022978 le_att_get_handle_info_fast: +0x578e 022979 iforce contr +0x578f 022980 copy temp ,rega +: 022981 le_att_get_handle_loop: +0x5790 022982 ifetch 2 ,contr +0x5791 022983 branch le_att_unfind_handle ,blank +0x5792 022984 isub rega ,null +0x5793 022985 branch le_att_finded_handle ,zero +0x5794 022986 ifetch 1 ,contr +0x5795 022987 iadd contr ,contr +0x5796 022988 ifetch 1 ,contr +0x5797 022989 iadd contr ,contr +0x5798 022990 branch le_att_get_handle_loop +: 022991 le_att_unfind_handle: +0x5799 022992 branch disable_blank +: 022994 le_att_finded_handle: +0x579a 022995 ifetch 1 ,contr +0x579b 022996 store 1 ,mem_le_cur_uuid_length +0x579c 022997 copy pdata ,loopcnt +0x579d 022998 arg mem_le_cur_uuid ,contw +0x579e 022999 call memcpy_fast +0x579f 023000 ifetch 1 ,contr +0x57a0 023001 store 1 ,mem_le_curr_att_len +0x57a1 023002 call store_contr +0x57a2 023003 branch enable_blank +: 023006 le_modified_name: +0x57a3 023007 bpatchx patch2e_5 ,mem_patch2e +0x57a4 023008 call le_modified_name_att_list +0x57a5 023009 branch le_modified_name_adv +: 023011 le_modified_name_att_list: +0x57a6 023012 arg uuid_chrctr_device_name ,temp +0x57a7 023013 call le_att_get_short_uuid_ptr +0x57a8 023014 rtn blank +0x57a9 023015 ifetch 1 ,contr +0x57aa 023016 copy contr ,contw +0x57ab 023017 fetcht 1 ,mem_le_name_len +0x57ac 023018 copy temp ,loopcnt +0x57ad 023019 isub temp ,null +0x57ae 023020 nbranch le_name_length_longer_than_att ,positive +0x57af 023021 isub temp ,temp +0x57b0 023022 arg mem_le_name ,contr +0x57b1 023023 call memcpy +0x57b2 023024 copy temp ,loopcnt +0x57b3 023025 ncall memcpy_empty ,zero +0x57b4 023026 rtn +: 023027 le_name_length_longer_than_att: +0x57b5 023028 copy pdata ,loopcnt +0x57b6 023029 arg mem_le_name ,contr +0x57b7 023030 branch memcpy_fast +: 023033 le_modified_name_adv: +0x57b8 023034 arg mem_le_adv_data_len + 32 ,regc +0x57b9 023035 arg mem_le_adv_data ,rega +0x57ba 023036 call le_modified_name_adv_and_scan +0x57bb 023037 setarg 0 +0x57bc 023038 setflag user ,0 ,pdata +0x57bd 023039 store 1 ,mem_pdatatemp +0x57be 023040 arg mem_le_scan_data_len + 32 ,regc +0x57bf 023041 arg mem_le_scan_data ,rega +0x57c0 023042 call le_modified_name_adv_and_scan +0x57c1 023043 rtn user +0x57c2 023044 fetch 1 ,mem_pdatatemp +0x57c3 023045 branch assert ,blank +0x57c4 023046 rtn +: 023049 le_modified_name_adv_and_scan: +0x57c5 023050 bpatchx patch2e_6 ,mem_patch2e +0x57c6 023051 call enable_user +0x57c7 023052 call clear_temp_block +0x57c8 023053 arg 0 ,regb +0x57c9 023054 arg mem_le_data_temp ,contw +0x57ca 023055 call le_modified_name_adv_loop +0x57cb 023056 fetch 1 ,mem_le_name_len +0x57cc 023057 add pdata ,1 ,temp +0x57cd 023058 iadd regb ,rega +0x57ce 023059 increase 2 ,rega +0x57cf 023060 sub rega ,0x1f ,null +0x57d0 023061 nbranch le_modified_name_adv_and_scan_name_overflow ,positive +0x57d1 023062 istoret 1 ,contw +0x57d2 023063 arg gap_adtype_local_name_complete ,temp +0x57d3 023064 istoret 1 ,contw +0x57d4 023065 iforce loopcnt +0x57d5 023066 call memcpy_fast +0x57d6 023067 copy rega ,regb +: 023068 le_modified_name_adv_and_scan_store_data: +0x57d7 023069 deposit regb +0x57d8 023070 store 1 ,mem_le_data_len_temp +0x57d9 023071 arg mem_le_data_len_temp ,contr +0x57da 023072 setarg -32 +0x57db 023073 iadd regc ,contw +0x57dc 023074 branch memcpy32 +: 023076 le_modified_name_adv_and_scan_name_overflow: +0x57dd 023077 call disable_user +0x57de 023078 branch le_modified_name_adv_and_scan_store_data +: 023080 le_modified_name_adv_loop: +0x57df 023081 ifetch 1 ,rega +0x57e0 023082 rtn blank +0x57e1 023083 pincrease 1 +0x57e2 023084 ifetcht 1 ,contr +0x57e3 023085 sub temp ,gap_adtype_local_name_complete ,null +0x57e4 023086 branch le_modified_name_adv_found_name ,zero +0x57e5 023087 iadd regb ,regb +0x57e6 023088 copy rega ,contr +0x57e7 023089 iforce loopcnt +0x57e8 023090 call memcpy_fast +0x57e9 023091 copy contr ,rega +: 023092 le_modified_name_adv_loop2: +0x57ea 023093 deposit rega +0x57eb 023094 isub regc ,null +0x57ec 023095 rtn positive +0x57ed 023096 branch le_modified_name_adv_loop +: 023098 le_modified_name_adv_found_name: +0x57ee 023099 iadd rega ,rega +0x57ef 023100 branch le_modified_name_adv_loop2 +: 023103 memcpy_empty: +0x57f0 023104 setarg space +0x57f1 023105 istore 1 ,contw +0x57f2 023106 loop memcpy_empty +0x57f3 023107 rtn +: 023110 le_lpm_set_mult: +0x57f4 023111 bpatchx patch2e_7 ,mem_patch2e +0x57f5 023112 disable wake +0x57f6 023113 branch le_lpm_set_mult_attempt ,attempt +0x57f7 023114 nbranch le_lpm_lost ,match +: 023115 le_lpm_set_mult_attempt: +0x57f8 023116 call lpm_match +0x57f9 023117 fetch 2 ,mem_rx_window_sniff +0x57fa 023118 store 2 ,mem_le_receive_window +0x57fb 023120 nbranch lpm_mult_short ,match +0x57fc 023121 bmark1 mark_old_packet ,lpm_mult_short +0x57fd 023123 fetch 1 ,mem_le_packet_size +0x57fe 023124 nbranch lpm_mult_short ,blank +0x57ff 023125 fetch 1 ,mem_le_txlen +0x5800 023126 nbranch lpm_mult_short ,blank +0x5801 023128 fetch 1 ,mem_le_configuration +0x5802 023129 bbit1 bit_ble_short_mult ,lpm_mult_short +0x5803 023131 fetch 1 ,mem_le_state +0x5804 023132 bbit1 lestate_update_param ,lpm_mult_short +0x5805 023133 branch lpm_mult_wait_timeout +: 023135 le_lpm_lost: +0x5806 023136 fetcht 2 ,mem_rx_window_sniff +0x5807 023137 rshift temp ,temp +0x5808 023138 fetch 2 ,mem_le_receive_window +0x5809 023139 iadd temp ,pdata +0x580a 023140 store 2 ,mem_le_receive_window +0x580b 023141 branch lpm_lost +: 023144 le_set_config_fixed_tk: +0x580c 023145 arg bit_ble_passkey_fixed_key ,queue +0x580d 023146 branch le_set_config +: 023148 le_clr_config_fixed_tk: +0x580e 023149 arg bit_ble_passkey_fixed_key ,queue +0x580f 023150 branch le_clr_config +: 023152 le_set_config_fixed_ltk: +0x5810 023153 arg bit_ble_pairing_fixed_ltk ,queue +0x5811 023154 branch le_set_config +: 023156 le_clr_config_fixed_ltk: +0x5812 023157 arg bit_ble_pairing_fixed_ltk ,queue +0x5813 023158 branch le_clr_config +: 023160 le_set_config_more_data: +0x5814 023161 arg bit_ble_transmit_packet_by_md ,queue +0x5815 023162 branch le_set_config +: 023164 le_clr_config_more_data: +0x5816 023165 arg bit_ble_transmit_packet_by_md ,queue +0x5817 023166 branch le_clr_config +: 023168 le_set_config_read_authentication: +0x5818 023169 arg bit_ble_read_auth ,queue +0x5819 023170 branch le_set_config +: 023172 le_clr_config_read_authentication: +0x581a 023173 arg bit_ble_read_auth ,queue +0x581b 023174 branch le_clr_config +: 023176 le_set_config_write_authentication: +0x581c 023177 arg bit_ble_write_auth ,queue +0x581d 023178 branch le_set_config +: 023180 le_clr_config_write_authentication: +0x581e 023181 arg bit_ble_write_auth ,queue +0x581f 023182 branch le_clr_config +: 023184 le_set_config_short_mult: +0x5820 023185 arg bit_ble_short_mult ,queue +0x5821 023186 branch le_set_config +: 023188 le_clr_config_short_mult: +0x5822 023189 arg bit_ble_short_mult ,queue +0x5823 023190 branch le_clr_config +: 023193 le_set_config: +0x5824 023194 fetch 1 ,mem_le_configuration +0x5825 023195 qset1 pdata +0x5826 023196 store 1 ,mem_le_configuration +0x5827 023197 rtn +: 023199 le_clr_config: +0x5828 023200 fetch 1 ,mem_le_configuration +0x5829 023201 qset0 pdata +0x582a 023202 store 1 ,mem_le_configuration +0x582b 023203 rtn +: 023205 le_set_fixed_ltk: +0x582c 023206 setarg 0x112233 +0x582d 023207 store 3 ,mem_le_fixed_ltk +0x582e 023208 setarg 0x445566 +0x582f 023209 istore 3 ,contw +0x5830 023210 setarg 0x778899 +0x5831 023211 istore 3 ,contw +0x5832 023212 setarg 0x001122 +0x5833 023213 istore 3 ,contw +0x5834 023214 setarg 0x334455 +0x5835 023215 istore 3 ,contw +0x5836 023216 setarg 0x66 +0x5837 023217 istore 1 ,contw +0x5838 023218 rtn +: 023221 le_set_justwork: +0x5839 023222 setarg 0x01000302 +0x583a 023223 store 4 ,mem_le_pres +0x583b 023224 setarg 0x010010 +0x583c 023225 store 3 ,mem_le_pres_max_keysize +0x583d 023226 jam 1 ,mem_le_pairing_mode +0x583e 023227 rtn +: 023231 le_fifo_malloc_tx_empty: +0x583f 023232 arg 0 ,rega +0x5840 023233 arg llid_empty ,type +0x5841 023234 branch le_fifo_malloc_tx +: 023238 le_fifo_malloc_tx_ll: +0x5842 023239 arg llid_le_ll ,type +0x5843 023240 call le_fifo_malloc_tx +0x5844 023241 copy regb ,pdata +0x5845 023242 istore 1 ,contw +0x5846 023243 rtn +: 023247 le_fifo_malloc_tx_l2cap: +0x5847 023248 force llid_l2cap_start ,type +0x5848 023249 increase 4 ,rega +0x5849 023250 call le_fifo_malloc_tx +0x584a 023251 increase -4 ,rega +0x584b 023252 copy rega ,pdata +0x584c 023253 istore 2 ,contw +0x584d 023254 copy regb ,pdata +0x584e 023255 istore 2 ,contw +0x584f 023256 rtn +: 023260 le_fifo_malloc_tx: +0x5850 023261 sub rega ,240 ,null +0x5851 023262 nbranch assert ,positive +0x5852 023263 fetch 1 ,mem_le_tx_buff_used +0x5853 023264 arg 1 ,temp +0x5854 023265 arg le_tx_buff_count ,loopcnt +: 023266 le_fifo_malloc_tx_loop: +0x5855 023267 iand temp ,null +0x5856 023268 branch le_fifo_malloc_tx_got_empty ,zero +0x5857 023269 lshift temp ,temp +0x5858 023270 loop le_fifo_malloc_tx_loop +0x5859 023271 branch assert +: 023272 le_fifo_malloc_tx_got_empty: +0x585a 023273 ixor temp ,pdata +0x585b 023274 store 1 ,mem_le_tx_buff_used +0x585c 023275 sub loopcnt ,le_tx_buff_count ,pdata +0x585d 023276 lshift4 pdata ,pdata +0x585e 023277 lshift4 pdata ,pdata +0x585f 023278 arg mem_le_tx_buffer0 ,temp +0x5860 023279 iadd temp ,temp +: 023280 le_fifo_tx_find_empty_ptr: +0x5861 023281 arg 0 ,loopcnt +0x5862 023282 arg mem_le_tx_ptr0 ,contr +: 023283 le_fifo_tx_find_empty_ptr_loop: +0x5863 023284 ifetch 2 ,contr +0x5864 023285 branch le_fifo_tx_found_empty_ptr ,blank +0x5865 023286 copy loopcnt ,pdata +0x5866 023287 increase 1 ,loopcnt +0x5867 023288 bne le_tx_buff_count ,le_fifo_tx_find_empty_ptr_loop +0x5868 023289 branch assert +: 023292 le_fifo_tx_found_empty_ptr: +0x5869 023293 increase -2 ,contr +0x586a 023294 istoret 2 ,contr +0x586b 023295 copy temp ,contw +0x586c 023296 copy rega ,pdata +0x586d 023297 istore 1 ,contw +0x586e 023298 setarg 0 +0x586f 023299 istore 1 ,contw +0x5870 023300 copy type ,pdata +0x5871 023301 istore 1 ,contw +0x5872 023302 rtn +: 023306 le_fifo_get_first_tx_ptr: +0x5873 023307 fetch 2 ,mem_le_tx_ptr0 +0x5874 023308 copy pdata ,contr +0x5875 023309 rtn +: 023311 le_fifo_get_second_tx_ptr: +0x5876 023312 fetch 2 ,mem_le_tx_ptr1 +0x5877 023313 copy pdata ,contr +0x5878 023314 rtn +: 023316 le_fifo_get_last_tx_ptr: +0x5879 023317 call le_fifo_get_last_tx_ptr0 +0x587a 023318 copy pdata ,contr +0x587b 023319 rtn +: 023320 le_fifo_get_last_tx_ptr0: +0x587c 023321 fetch 2 ,mem_le_tx_ptr3 +0x587d 023322 nrtn blank +0x587e 023323 fetch 2 ,mem_le_tx_ptr2 +0x587f 023324 nrtn blank +0x5880 023325 fetch 2 ,mem_le_tx_ptr1 +0x5881 023326 nrtn blank +0x5882 023327 fetch 2 ,mem_le_tx_ptr0 +0x5883 023328 rtn +: 023330 le_fifo_get_first_l2cap_ptr: +0x5884 023331 call le_fifo_get_first_tx_ptr +0x5885 023332 increase 3 ,contr +0x5886 023333 rtn +: 023335 le_fifo_get_first_att_ptr: +0x5887 023336 call le_fifo_get_first_tx_ptr +0x5888 023337 increase 7 ,contr +0x5889 023338 rtn +: 023340 le_fifo_get_last_att_ptr: +0x588a 023341 call le_fifo_get_last_tx_ptr +0x588b 023342 increase 7 ,contr +0x588c 023343 rtn +: 023345 le_fifo_get_last_l2cap_ptr: +0x588d 023346 call le_fifo_get_last_tx_ptr +0x588e 023347 increase 3 ,contr +0x588f 023348 rtn +: 023352 le_fifo_check_full: +0x5890 023353 fetch 2 ,mem_le_tx_ptr3 +0x5891 023354 rtn +: 023357 le_fifo_check_nearly_full: +0x5892 023358 fetch 2 ,mem_le_tx_ptr2 +0x5893 023359 rtn +: 023362 le_fifo_check_empty: +0x5894 023363 fetch 2 ,mem_le_tx_ptr0 +0x5895 023364 rtn +: 023367 le_fifo_release_first_node: +0x5896 023368 fetch 2 ,mem_le_tx_ptr0 +0x5897 023369 arg mem_le_tx_buffer0 ,temp +0x5898 023370 isub temp ,pdata +0x5899 023371 rshift4 pdata ,pdata +0x589a 023372 rshift4 pdata ,queue +0x589b 023373 fetch 1 ,mem_le_tx_buff_used +0x589c 023374 qset0 pdata +0x589d 023375 store 1 ,mem_le_tx_buff_used +0x589e 023376 arg 0 ,loopcnt +: 023377 le_fifo_release_first_node_loop: +0x589f 023378 lshift loopcnt ,pdata +0x58a0 023379 arg mem_le_tx_ptr1 ,temp +0x58a1 023380 iadd temp ,temp +0x58a2 023381 ifetch 2 ,temp +0x58a3 023382 increase -2 ,temp +0x58a4 023383 istore 2 ,temp +0x58a5 023384 copy loopcnt ,pdata +0x58a6 023385 increase 1 ,loopcnt +0x58a7 023386 bne le_tx_buff_update_loopcnt ,le_fifo_release_first_node_loop +0x58a8 023387 setarg 0 +0x58a9 023388 istore 2 ,temp +0x58aa 023389 rtn +: 023395 le_parse_att: +0x58ab 023396 ifetch 3 ,contr +0x58ac 023397 store 3 ,mem_le_att_opcode +0x58ad 023398 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request +0x58ae 023399 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response +0x58af 023400 beq attop_find_information_request ,le_parse_att_find_information_request +0x58b0 023401 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request +0x58b1 023402 beq attop_read_by_type_request ,le_parse_att_read_by_type_request +0x58b2 023403 beq attop_read_request ,le_parse_att_read_request +0x58b3 023404 beq attop_read_blob_request ,le_parse_att_read_blob_request +0x58b4 023405 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request +0x58b5 023406 beq attop_write_request ,le_parse_att_write_request +0x58b6 023407 beq attop_prepare_write_request ,le_parse_att_prepare_write_request +0x58b7 023408 beq attop_execute_write_request ,le_parse_att_execute_write_request +0x58b8 023409 beq attop_write_command ,le_parse_att_write_command +0x58b9 023410 rtn +: 023413 le_send_att_exchange_mtu_requset: +0x58ba 023414 force 3 ,rega +0x58bb 023415 call le_fifo_malloc_tx_l2cap_gatt +0x58bc 023416 setarg attop_exchange_mtu_request +0x58bd 023417 istore 1 ,contw +0x58be 023418 fetch 2 ,mem_le_local_mtu +0x58bf 023419 istore 2 ,contw +0x58c0 023420 rtn +: 023423 le_parse_att_exchange_mtu_request: +0x58c1 023424 call le_parse_att_exchange_mtu_response +: 023425 le_send_att_exchange_mtu_response: +0x58c2 023426 force 3 ,rega +0x58c3 023427 call le_fifo_malloc_tx_l2cap_gatt +0x58c4 023428 setarg attop_exchange_mtu_response +0x58c5 023429 istore 1 ,contw +0x58c6 023430 fetch 2 ,mem_le_local_mtu +0x58c7 023431 istore 2 ,contw +0x58c8 023432 rtn +: 023434 le_parse_att_exchange_mtu_response: +0x58c9 023435 rshift8 pdata ,pdata +0x58ca 023436 store 2 ,mem_le_remote_mtu +0x58cb 023437 rtn +: 023439 le_parse_att_find_information_request: +0x58cc 023440 call le_get_search_handle_start_end_common +0x58cd 023441 call enable_user +0x58ce 023442 branch le_send_att_find_information_response +: 023444 le_send_att_find_information_response: +0x58cf 023445 arg 3 ,timeup +0x58d0 023446 call le_init_attlist_search +: 023447 le_send_att_find_information_res_loop: +0x58d1 023448 call le_att_handle_inrange +0x58d2 023449 branch le_send_att_find_information_res_end ,blank +0x58d3 023450 nbranch le_send_att_find_information_res_next ,positive +0x58d4 023451 increase -2 ,contr +0x58d5 023452 call store_contr +0x58d6 023453 call get_contw +0x58d7 023454 nbranch le_send_att_find_information_res_store_info ,user +0x58d8 023455 call push_stack_rega_b_c +0x58d9 023456 call disable_user +0x58da 023457 force 20 ,rega +0x58db 023458 call le_fifo_malloc_tx_l2cap_gatt +0x58dc 023459 call pop_stack_rega_b_c +0x58dd 023460 setarg attop_find_information_response +0x58de 023461 istore 1 ,contw +0x58df 023462 setarg uuid_size_16bit +0x58e0 023463 istore 1 ,contw +: 023464 le_send_att_find_information_res_store_info: +0x58e1 023465 call get_contr +0x58e2 023466 ifetch 2 ,contr +0x58e3 023467 istore 2 ,contw +0x58e4 023468 ifetch 1 ,contr +0x58e5 023469 copy pdata ,loopcnt +0x58e6 023470 call memcpy +0x58e7 023471 call store_contw +0x58e8 023472 increase -1 ,timeup +0x58e9 023473 branch le_send_att_find_information_res_end ,zero +: 023474 le_send_att_find_information_res_cont: +0x58ea 023475 ifetch 1 ,contr +0x58eb 023476 iadd contr ,contr +0x58ec 023477 branch le_send_att_find_information_res_loop +: 023478 le_send_att_find_information_res_next: +0x58ed 023479 ifetch 1 ,contr +0x58ee 023480 iadd contr ,contr +0x58ef 023481 branch le_send_att_find_information_res_cont +: 023482 le_send_att_find_information_res_end: +0x58f0 023483 branch le_send_att_error_response_notfound ,user +0x58f1 023484 branch le_send_auto_len_by_mem +: 023487 le_parse_att_find_by_type_value_request: +0x58f2 023488 call le_get_search_handle_start_end_common +0x58f3 023489 ifetch 2 ,contr +0x58f4 023490 store 2 ,mem_le_search_uuid +0x58f5 023491 call store_contr +0x58f6 023492 arg mem_le_search_att_type_length ,contw +0x58f7 023493 fetch 2 ,mem_le_l2cap_size +0x58f8 023494 increase -7 ,pdata +0x58f9 023495 call le_get_search_common2 +0x58fa 023496 branch le_send_att_find_by_type_value_response +: 023499 le_start_end_handle_check_1: +0x58fb 023500 disable user +0x58fc 023501 fetcht 2 ,mem_le_search_handle_start +0x58fd 023502 fetch 2 ,mem_le_search_handle_end +0x58fe 023503 isub temp ,null +0x58ff 023504 nbranch le_start_end_handle_check_1_fail ,positive +0x5900 023505 deposit temp +0x5901 023506 rtnne 0 +: 023507 le_start_end_handle_check_1_fail: +0x5902 023508 enable user +0x5903 023509 jam att_err_invalid_handle ,mem_le_err_code +0x5904 023510 branch le_send_att_error_response +: 023513 le_send_att_find_by_type_value_response: +0x5905 023514 call le_start_end_handle_check_1 +0x5906 023515 rtn user +0x5907 023516 fetcht 2 ,mem_le_search_uuid +0x5908 023517 setarg uuid_gatt_primary_service +0x5909 023518 isub temp ,null +0x590a 023519 branch le_send_att_find_by_type_value_res_primary ,zero +0x590b 023520 branch le_send_att_error_response_notfound +: 023523 le_send_att_find_by_type_value_res_primary: +0x590c 023524 jam le_find_by_type_val_res_not_found ,mem_le_search_res +0x590d 023525 fetcht 2 ,mem_le_search_handle_start +0x590e 023526 storet 2 ,mem_temp +0x590f 023527 call le_att_get_handle_info +0x5910 023528 nbranch le_send_att_error_response_notfound ,blank +: 023529 le_send_att_find_primary_search_loop: +0x5911 023530 fetcht 2 ,mem_temp +0x5912 023531 call le_att_get_handle_info +0x5913 023532 nbranch le_send_att_error_response_notfound2 ,blank +0x5914 023533 copy contr ,rega +0x5915 023534 fetch 1 ,mem_le_curr_att_len +0x5916 023535 copy pdata ,loopcnt +0x5917 023536 fetcht 1 ,mem_le_search_att_type_length +0x5918 023537 isub temp ,null +0x5919 023538 nbranch le_send_att_find_primary_search_loop1 ,zero +0x591a 023539 arg mem_le_search_att_type ,regb +0x591b 023540 call string_compare +0x591c 023542 branch le_send_att_find_primary_search_end_start_handle_found ,zero +0x591d 023544 fetch 2 ,mem_le_cur_uuid +0x591e 023545 fetcht 2 ,mem_le_search_uuid +0x591f 023546 isub temp ,null +0x5920 023547 branch le_send_att_find_primary_search_end_ending_handle_found ,zero +: 023548 le_send_att_find_primary_search_loop1: +0x5921 023549 fetch 2 ,mem_temp +0x5922 023550 increase 1 ,pdata +0x5923 023551 store 2 ,mem_temp +0x5924 023552 branch le_send_att_find_primary_search_loop +: 023554 le_send_att_error_response_notfound2: +0x5925 023555 fetch 1 ,mem_le_search_res +0x5926 023556 beq le_find_by_type_val_res_found_starting_handle ,le_send_att_find_primary_search_end_ending_handle_found +0x5927 023557 branch le_send_att_error_response_notfound +: 023560 le_send_att_find_primary_search_end_start_handle_found: +0x5928 023561 fetch 2 ,mem_le_cur_uuid +0x5929 023562 fetcht 2 ,mem_le_search_uuid +0x592a 023563 isub temp ,null +0x592b 023564 nbranch le_send_att_find_primary_search_loop1 ,zero +0x592c 023565 jam le_find_by_type_val_res_found_starting_handle ,mem_le_search_res +0x592d 023567 fetcht 2 ,mem_temp +0x592e 023568 storet 2 ,mem_le_cur_handle_start +0x592f 023569 branch le_send_att_find_primary_search_loop1 +: 023571 le_send_att_find_primary_search_end_ending_handle_found: +0x5930 023572 fetch 1 ,mem_le_search_res +0x5931 023573 beq le_find_by_type_val_res_not_found ,le_send_att_find_primary_search_loop1 +0x5932 023574 jam le_find_by_type_val_res_found_ending_handle ,mem_le_search_res +0x5933 023575 fetcht 2 ,mem_temp +0x5934 023576 increase -1 ,temp +0x5935 023577 storet 2 ,mem_le_cur_handle_end +: 023579 le_send_att_find_primary_search_end: +0x5936 023580 arg 5 ,rega +0x5937 023581 call le_fifo_malloc_tx_l2cap_gatt +0x5938 023582 setarg attop_find_by_type_value_response +0x5939 023583 istore 1 ,contw +0x593a 023584 fetch 2 ,mem_le_cur_handle_start +0x593b 023585 istore 2 ,contw +0x593c 023586 fetch 2 ,mem_le_cur_handle_end +0x593d 023587 istore 2 ,contw +0x593e 023588 rtn +: 023592 le_parse_att_read_by_type_request: +0x593f 023593 call le_get_search_handle_start_end_common +0x5940 023594 call le_get_search_att_uuid +0x5941 023595 branch le_send_att_read_by_type_response +: 023597 le_send_att_read_by_type_response: +0x5942 023598 fetcht 2 ,mem_le_search_handle_start +0x5943 023599 storet 2 ,mem_temp +0x5944 023600 call le_init_attlist_search +0x5945 023601 call le_att_get_handle_ptr2 +0x5946 023602 increase -2 ,contr +0x5947 023603 copy contr ,pdata +0x5948 023604 store 2 ,mem_le_cur_attlist_start_ptr +0x5949 023606 fetcht 2 ,mem_le_search_uuid +0x594a 023607 setarg uuid_chrctr_device_name +0x594b 023608 isub temp ,null +0x594c 023609 branch le_send_att_read_by_type_res_device_name ,zero +0x594d 023610 setarg uuid_gatt_characteristic +0x594e 023611 isub temp ,null +0x594f 023612 nbranch le_send_att_read_by_type_res_not_characteristic ,zero +0x5950 023613 arg 2 ,timeup +: 023614 le_send_att_read_by_type_response_loop: +0x5951 023615 call le_att_check_handle_end +0x5952 023616 nbranch le_send_att_read_by_type_response_end ,positive +0x5953 023617 fetcht 2 ,mem_temp +0x5954 023618 call le_att_get_handle_info_from_ptr +0x5955 023619 beq 1 ,le_send_att_read_by_type_response_end +0x5956 023620 call le_att_same_uuid +0x5957 023621 nbranch le_send_att_read_by_type_response_next_handle ,zero +0x5958 023622 nbranch le_send_att_read_by_type_res_found_next ,user +0x5959 023623 disable user +0x595a 023624 arg 20 ,rega +0x595b 023625 call le_fifo_malloc_tx_l2cap_gatt +0x595c 023626 setarg attop_read_by_type_response +0x595d 023627 istore 1 ,contw +0x595e 023628 copy contw ,alarm +0x595f 023629 increase 1 ,contw +0x5960 023631 call le_send_att_read_by_type_write_properties +0x5961 023632 call le_att_next_handle +0x5962 023633 call le_att_get_handle_info_from_ptr +0x5963 023634 call le_send_att_read_by_type_write_uuid +0x5964 023635 fetch 1 ,mem_le_cur_uuid_length +0x5965 023636 increase 5 ,pdata +0x5966 023637 istore 1 ,alarm +0x5967 023638 fetch 1 ,mem_le_cur_uuid_length +0x5968 023639 beq 16 ,le_send_att_read_by_type_response_end +0x5969 023640 increase -1 ,timeup +0x596a 023641 branch le_send_att_read_by_type_response_end ,zero +: 023642 le_send_att_read_by_type_response_next_handle: +0x596b 023643 call le_att_next_handle +0x596c 023644 branch le_send_att_read_by_type_response_loop +: 023645 le_send_att_read_by_type_response_end: +0x596d 023646 branch le_send_att_error_response_notfound ,user +0x596e 023647 branch le_send_auto_len_by_mem +: 023649 le_send_att_read_by_type_res_found_next: +0x596f 023650 call le_store_att_record +0x5970 023651 call le_att_next_handle +0x5971 023652 call le_att_get_handle_info_from_ptr +0x5972 023653 fetch 1 ,mem_le_cur_uuid_length +0x5973 023654 beq 16 ,le_send_att_read_by_type_response_end +0x5974 023656 call get_contw +0x5975 023657 fetch 2 ,mem_temp +0x5976 023658 increase -1 ,pdata +0x5977 023659 istore 2 ,contw +0x5978 023660 call le_write_att_record_common +0x5979 023661 call le_send_att_read_by_type_write_uuid +0x597a 023662 increase -1 ,timeup +0x597b 023663 branch le_send_att_read_by_type_response_end ,zero +0x597c 023664 branch le_send_att_read_by_type_response_next_handle +: 023667 le_send_att_read_by_type_write_properties: +0x597d 023668 fetch 2 ,mem_temp +0x597e 023669 istore 2 ,contw +0x597f 023671 fetch 1 ,mem_le_curr_att_len +0x5980 023672 copy pdata ,loopcnt +0x5981 023673 call get_contr +0x5982 023674 call memcpy_fast +0x5983 023675 branch store_contw +: 023676 le_send_att_read_by_type_write_uuid: +0x5984 023677 call get_contw +0x5985 023678 fetch 2 ,mem_temp +0x5986 023679 istore 2 ,contw +0x5987 023680 call store_contw +0x5988 023681 fetch 1 ,mem_le_cur_uuid_length +0x5989 023682 copy pdata ,loopcnt +0x598a 023683 call get_contw +0x598b 023684 call get_contr +0x598c 023685 isub loopcnt ,contr +0x598d 023686 increase -1 ,contr +0x598e 023687 call memcpy_fast +0x598f 023688 branch store_contw +: 023692 le_send_att_read_by_type_res_not_characteristic: +0x5990 023693 fetcht 2 ,mem_le_search_handle_start +0x5991 023694 storet 2 ,mem_temp +: 023695 le_send_att_read_by_type_res_not_char_loop: +0x5992 023696 call le_att_check_handle_end +0x5993 023697 nbranch le_send_att_error_response_notfound ,positive +0x5994 023698 call le_att_get_handle_info_from_ptr +0x5995 023699 beq 1 ,le_send_att_error_response_notfound +0x5996 023700 call le_att_same_uuid +0x5997 023701 nbranch le_send_att_read_by_type_res_not_char_next ,zero +: 023703 le_send_att_read_by_type_res_not_char_common: +0x5998 023704 arg 20 ,rega +0x5999 023705 call le_fifo_malloc_tx_l2cap_gatt +0x599a 023706 setarg attop_read_by_type_response +0x599b 023707 istore 1 ,contw +0x599c 023708 fetch 1 ,mem_le_curr_att_len +0x599d 023709 copy pdata ,loopcnt +0x599e 023710 increase 2 ,pdata +0x599f 023711 istore 1 ,contw +0x59a0 023712 fetch 2 ,mem_temp +0x59a1 023713 istore 2 ,contw +0x59a2 023714 call get_contr +0x59a3 023715 call memcpy_fast +0x59a4 023716 call store_contw +0x59a5 023717 branch le_send_auto_len_by_mem +: 023719 le_send_att_read_by_type_res_not_char_next: +0x59a6 023720 call le_att_next_handle +0x59a7 023721 branch le_send_att_read_by_type_res_not_char_loop +: 023724 le_send_att_read_by_type_res_device_name: +0x59a8 023725 arg uuid_chrctr_device_name ,temp +0x59a9 023726 call le_att_get_short_uuid_ptr +0x59aa 023727 rtn blank +0x59ab 023728 increase -5 ,contr +0x59ac 023729 ifetch 2 ,contr +0x59ad 023730 store 2 ,mem_temp +0x59ae 023731 arg 20 ,rega +0x59af 023732 call le_fifo_malloc_tx_l2cap_gatt +0x59b0 023733 setarg attop_read_by_type_response +0x59b1 023734 istore 1 ,contw +0x59b2 023735 fetch 1 ,mem_le_name_len +0x59b3 023736 copy pdata ,loopcnt +0x59b4 023737 increase 2 ,pdata +0x59b5 023738 istore 1 ,contw +0x59b6 023739 fetch 2 ,mem_temp +0x59b7 023740 istore 2 ,contw +0x59b8 023741 arg mem_le_name ,contr +0x59b9 023742 call memcpy_fast +0x59ba 023743 call store_contw +0x59bb 023744 branch le_send_auto_len_by_mem +: 023748 le_parse_att_read_request: +0x59bc 023749 fetcht 2 ,mem_le_att_handle +0x59bd 023750 fetch 1 ,mem_le_configuration +0x59be 023751 bbit1 bit_ble_read_auth ,le_send_att_read_response_check_auth +: 023753 le_send_att_read_response: +0x59bf 023754 call le_att_get_handle_ptr +0x59c0 023755 branch le_send_att_error_response_notfound ,blank +0x59c1 023756 increase -2 ,contr +0x59c2 023757 ifetch 2 ,contr +0x59c3 023758 arg uuid_chrctr_device_name ,temp +0x59c4 023759 isub temp ,null +0x59c5 023760 branch le_send_device_name ,zero +0x59c6 023761 ifetch 1 ,contr +0x59c7 023762 sub pdata ,22 ,null +0x59c8 023763 branch le_send_att_read_response_less ,positive +0x59c9 023764 force 22 ,pdata +: 023765 le_send_att_read_response_less: +0x59ca 023766 copy pdata ,regc +0x59cb 023767 call store_contr +0x59cc 023768 add regc ,1 ,rega +0x59cd 023769 call le_fifo_malloc_tx_l2cap_gatt +0x59ce 023770 setarg attop_read_response +0x59cf 023771 istore 1 ,contw +0x59d0 023772 copy regc ,loopcnt +0x59d1 023773 call get_contr +0x59d2 023774 branch memcpy +: 023776 le_send_device_name: +0x59d3 023777 call store_contr +0x59d4 023778 fetch 1 ,mem_le_name_len +0x59d5 023779 add pdata ,1 ,rega +0x59d6 023780 call le_fifo_malloc_tx_l2cap_gatt +0x59d7 023781 setarg attop_read_response +0x59d8 023782 istore 1 ,contw +0x59d9 023783 fetch 1 ,mem_le_name_len +0x59da 023784 copy pdata ,loopcnt +0x59db 023785 arg mem_le_name ,contr +0x59dc 023786 branch memcpy +: 023789 le_send_att_read_response_check_auth: +0x59dd 023790 fetch 2 ,mem_le_pairing_handle +0x59de 023791 isub temp ,null +0x59df 023792 nbranch le_send_att_read_response ,zero +0x59e0 023794 call le_check_encrypt_state +0x59e1 023795 nbranch le_send_att_read_response ,user +0x59e2 023796 jam att_err_insufficient_authentication ,mem_le_err_code +0x59e3 023797 branch le_send_att_error_response +: 023800 le_parse_att_read_blob_request: +0x59e4 023801 ifetch 2 ,contr +0x59e5 023802 store 2 ,mem_le_att_offset +: 023803 le_send_att_read_blob_response: +0x59e6 023804 arg 20 ,rega +0x59e7 023805 call le_fifo_malloc_tx_l2cap_gatt +0x59e8 023806 setarg attop_read_blob_response +0x59e9 023807 istore 1 ,contw +0x59ea 023808 fetch 2 ,mem_le_att_offset +0x59eb 023809 iforce rega +0x59ec 023810 fetcht 2 ,mem_le_att_handle +0x59ed 023811 call le_att_get_handle_ptr +0x59ee 023812 branch le_send_att_error_response_notfound ,blank +0x59ef 023813 ifetch 1 ,contr +0x59f0 023814 isub rega ,loopcnt +0x59f1 023815 nbranch le_send_att_error_response_notfound ,positive +0x59f2 023816 sub loopcnt ,22 ,null +0x59f3 023817 branch le_send_att_read_blob_response_less ,positive +0x59f4 023818 force 22 ,loopcnt +: 023819 le_send_att_read_blob_response_less: +0x59f5 023820 deposit rega +0x59f6 023821 iadd contr ,contr +0x59f7 023822 call memcpy_fast +0x59f8 023823 call store_contw +0x59f9 023824 branch le_send_auto_len_by_mem +: 023827 le_parse_att_read_by_group_type_request: +0x59fa 023828 call le_get_search_handle_start_end_common +0x59fb 023829 call le_get_search_att_type +0x59fc 023830 branch le_send_att_read_by_group_type_response +: 023835 le_send_att_read_by_group_type_response: +0x59fd 023836 arg 2 ,timeup +0x59fe 023837 fetcht 2 ,mem_le_search_handle_start +0x59ff 023841 storet 2 ,mem_temp +0x5a00 023842 call le_init_attlist_search +0x5a01 023843 call le_att_get_handle_ptr2 +0x5a02 023844 increase -2 ,contr +0x5a03 023845 copy contr ,pdata +0x5a04 023846 store 2 ,mem_le_cur_attlist_start_ptr +: 023847 le_send_att_read_by_group_type_response_loop: +0x5a05 023848 call le_att_check_handle_end +0x5a06 023849 nbranch le_send_att_read_by_group_type_end0 ,positive +0x5a07 023850 fetcht 2 ,mem_temp +0x5a08 023851 call le_att_get_handle_info_from_ptr +0x5a09 023852 beq 1 ,le_send_att_read_by_group_type_end1 +0x5a0a 023854 call le_att_same_type +0x5a0b 023855 nbranch le_send_att_read_by_group_type_next_handle ,zero +0x5a0c 023856 copy timeup ,pdata +0x5a0d 023857 beq 0 ,le_send_att_read_by_group_type_end1 +0x5a0e 023858 nbranch le_send_att_read_by_group_type_store_write_record ,user +0x5a0f 023859 disable user +0x5a10 023861 arg 20 ,rega +0x5a11 023862 call le_fifo_malloc_tx_l2cap_gatt +0x5a12 023863 setarg attop_read_by_group_type_response +0x5a13 023864 istore 1 ,contw +0x5a14 023865 fetch 1 ,mem_le_curr_att_len +0x5a15 023866 increase 4 ,pdata +0x5a16 023867 istore 1 ,contw +0x5a17 023868 call store_contw +0x5a18 023869 branch le_send_att_read_by_group_type_store_record +: 023870 le_send_att_read_by_group_type_store_write_record: +0x5a19 023871 fetch 1 ,mem_le_curr_att_len +0x5a1a 023872 beq 16 ,le_send_att_read_by_group_type_end1 +0x5a1b 023873 fetch 2 ,mem_temp +0x5a1c 023874 increase -1 ,pdata +0x5a1d 023875 store 2 ,mem_le_cur_handle_end +0x5a1e 023876 call le_write_att_record +: 023877 le_send_att_read_by_group_type_store_record: +0x5a1f 023878 fetch 2 ,mem_temp +0x5a20 023879 store 2 ,mem_le_cur_handle_start +0x5a21 023880 call le_store_att_record +0x5a22 023881 increase -1 ,timeup +: 023883 le_send_att_read_by_group_type_next_handle: +0x5a23 023884 call le_att_next_handle +0x5a24 023885 branch le_send_att_read_by_group_type_response_loop +: 023887 le_send_att_read_by_group_type_end0: +0x5a25 023888 fetch 2 ,mem_temp +0x5a26 023889 store 2 ,mem_le_cur_handle_end +0x5a27 023890 branch le_send_att_read_by_group_type_end_common +: 023891 le_send_att_read_by_group_type_end1: +0x5a28 023892 fetch 2 ,mem_temp +0x5a29 023893 increase -1 ,pdata +0x5a2a 023894 store 2 ,mem_le_cur_handle_end +0x5a2b 023895 branch le_send_att_read_by_group_type_end_common +: 023896 le_send_att_read_by_group_type_end_common: +0x5a2c 023897 branch le_send_att_error_response_notfound ,user +0x5a2d 023898 call le_write_att_record +0x5a2e 023899 branch le_send_auto_len_by_mem +: 023904 le_parse_att_write_request: +0x5a2f 023905 copy contr ,rega +0x5a30 023906 fetch 2 ,mem_le_l2cap_size +0x5a31 023907 add pdata ,-3 ,regb +0x5a32 023908 call le_writeatt_cb +: 023909 le_send_att_write_response_check_auth: +0x5a33 023910 fetch 1 ,mem_le_configuration +0x5a34 023911 bbit0 bit_ble_write_auth ,le_send_att_write_response +0x5a35 023913 fetcht 2 ,mem_le_att_handle +0x5a36 023914 fetch 2 ,mem_le_pairing_handle +0x5a37 023915 isub temp ,null +0x5a38 023916 nbranch le_send_att_write_response ,zero +0x5a39 023917 call le_check_encrypt_state +0x5a3a 023918 nbranch le_send_att_write_response ,user +0x5a3b 023919 jam att_err_insufficient_authentication ,mem_le_err_code +0x5a3c 023920 branch le_send_att_error_response +: 023922 le_send_att_write_response: +0x5a3d 023923 force 1 ,rega +0x5a3e 023924 call le_fifo_malloc_tx_l2cap_gatt +0x5a3f 023925 setarg attop_write_response +0x5a40 023926 istore 1 ,contw +0x5a41 023927 rtn +: 023929 le_check_encrypt_state: +0x5a42 023930 call disable_user +0x5a43 023931 fetch 1 ,mem_le_pairing_mode +0x5a44 023932 rtneq le_pairing_mode_none +0x5a45 023933 fetch 1 ,mem_context +0x5a46 023934 rtnbit1 lestate_encryption +0x5a47 023935 branch enable_user +: 023938 le_parse_att_prepare_write_request: +0x5a48 023939 add contr ,2 ,rega +0x5a49 023940 fetch 2 ,mem_le_l2cap_size +0x5a4a 023941 add pdata ,-5 ,regb +0x5a4b 023942 call le_writeatt_cb +0x5a4c 023943 branch le_send_att_prepare_write_response +: 023946 le_send_att_prepare_write_response: +0x5a4d 023947 fetch 2 ,mem_le_l2cap_size +0x5a4e 023948 copy pdata ,rega +0x5a4f 023949 call le_fifo_malloc_tx_l2cap_gatt +0x5a50 023950 setarg attop_prepare_write_response +0x5a51 023951 istore 1 ,contw +0x5a52 023952 fetch 2 ,mem_le_att_handle +0x5a53 023953 istore 2 ,contw +0x5a54 023954 fetch 2 ,mem_le_l2cap_size +0x5a55 023955 add pdata ,-5 ,loopcnt +0x5a56 023956 fetch 2 ,mem_le_payload_ptr +0x5a57 023957 add pdata ,7 ,contr +0x5a58 023958 ifetch 2 ,contr +0x5a59 023959 istore 2 ,contw +0x5a5a 023960 branch memcpy_fast +: 023964 le_parse_att_execute_write_request: +: 023966 le_send_att_execute_write_response: +0x5a5b 023967 force 1 ,rega +0x5a5c 023968 call le_fifo_malloc_tx_l2cap_gatt +0x5a5d 023969 setarg attop_execute_write_response +0x5a5e 023970 istore 1 ,contw +0x5a5f 023971 rtn +: 023975 le_parse_att_write_command: +0x5a60 023976 copy contr ,rega +0x5a61 023977 fetch 2 ,mem_le_l2cap_size +0x5a62 023978 add pdata ,-3 ,regb +0x5a63 023979 branch le_writeatt_cb +: 023984 le_att_malloc_tx_notify: +0x5a64 023985 copy temp ,regc +0x5a65 023986 increase 3 ,rega +0x5a66 023987 call le_fifo_malloc_tx_l2cap_gatt +0x5a67 023988 increase -3 ,rega +0x5a68 023989 setarg attop_handle_value_notification +0x5a69 023990 istore 1 ,contw +0x5a6a 023991 copy regc ,temp +0x5a6b 023992 istoret 2 ,contw +0x5a6c 023993 rtn +: 023996 le_att_malloc_tx_indication: +0x5a6d 023997 copy temp ,regc +0x5a6e 023998 increase 3 ,rega +0x5a6f 023999 call le_fifo_malloc_tx_l2cap_gatt +0x5a70 024000 increase -3 ,rega +0x5a71 024001 setarg attop_handle_value_indication +0x5a72 024002 istore 1 ,contw +0x5a73 024003 copy regc ,temp +0x5a74 024004 istoret 2 ,contw +0x5a75 024005 rtn +: 024010 le_send_att_error_response_notfound: +0x5a76 024011 jam att_err_attribute_not_found ,mem_le_err_code +: 024012 le_send_att_error_response: +0x5a77 024013 force 5 ,rega +0x5a78 024014 call le_fifo_malloc_tx_l2cap_gatt +0x5a79 024015 setarg attop_error_response +0x5a7a 024016 istore 1 ,contw +0x5a7b 024017 fetch 1 ,mem_le_att_opcode +0x5a7c 024018 istore 1 ,contw +0x5a7d 024019 fetch 2 ,mem_le_att_handle +0x5a7e 024020 istore 2 ,contw +0x5a7f 024021 fetch 1 ,mem_le_err_code +0x5a80 024022 istore 1 ,contw +0x5a81 024023 rtn +: 024026 le_fifo_malloc_tx_l2cap_gatt: +0x5a82 024027 force le_l2cap_cid_att ,regb +0x5a83 024028 branch le_fifo_malloc_tx_l2cap +: 024031 le_att_next_handle: +0x5a84 024032 fetcht 2 ,mem_temp +0x5a85 024033 increase 1 ,temp +0x5a86 024034 storet 2 ,mem_temp +0x5a87 024035 rtn +: 024037 le_att_check_handle_end: +0x5a88 024038 fetcht 2 ,mem_temp +0x5a89 024039 fetch 2 ,mem_le_search_handle_end +0x5a8a 024040 isub temp ,null +0x5a8b 024041 rtn +: 024044 le_att_same_type: +0x5a8c 024045 fetcht 1 ,mem_le_search_att_type_length +0x5a8d 024046 arg mem_le_search_att_type ,rega +: 024047 le_att_check_same_common: +0x5a8e 024048 fetch 1 ,mem_le_cur_uuid_length +0x5a8f 024049 copy pdata ,loopcnt +0x5a90 024050 isub temp ,null +0x5a91 024051 nrtn zero +0x5a92 024052 arg mem_le_cur_uuid ,regb +0x5a93 024053 branch string_compare +: 024055 le_att_same_uuid: +0x5a94 024056 fetcht 1 ,mem_le_search_uuid_length +0x5a95 024057 arg mem_le_search_uuid ,rega +0x5a96 024058 branch le_att_check_same_common +: 024061 le_store_att_record: +0x5a97 024062 fetch 1 ,mem_le_curr_att_len +0x5a98 024063 store 1 ,mem_tmp_buffer +0x5a99 024064 copy pdata ,loopcnt +0x5a9a 024065 call get_contr +0x5a9b 024066 branch memcpy_fast +: 024069 le_write_att_record: +0x5a9c 024070 call get_contw +0x5a9d 024071 fetch 2 ,mem_le_cur_handle_start +0x5a9e 024072 istore 2 ,contw +0x5a9f 024073 fetch 2 ,mem_le_cur_handle_end +0x5aa0 024074 istore 2 ,contw +: 024075 le_write_att_record_common: +0x5aa1 024076 fetch 1 ,mem_tmp_buffer +0x5aa2 024077 copy pdata ,loopcnt +0x5aa3 024078 call memcpy_fast +0x5aa4 024079 branch store_contw +: 024083 le_send_auto_len_by_mem: +0x5aa5 024084 call get_contw +0x5aa6 024085 call le_fifo_get_last_att_ptr +0x5aa7 024086 copy contw ,pdata +0x5aa8 024087 isub contr ,rega +0x5aa9 024088 call le_fifo_get_last_l2cap_ptr +0x5aaa 024089 copy rega ,pdata +0x5aab 024090 istore 2 ,contr +0x5aac 024091 increase 4 ,rega +0x5aad 024092 call le_fifo_get_last_tx_ptr +0x5aae 024093 copy rega ,pdata +0x5aaf 024094 istore 1 ,contr +0x5ab0 024095 rtn +: 024098 le_get_search_handle_start_end_common: +0x5ab1 024099 rshift8 pdata ,pdata +0x5ab2 024100 store 2 ,mem_le_search_handle_start +0x5ab3 024101 ifetch 2 ,contr +0x5ab4 024102 store 2 ,mem_le_search_handle_end +0x5ab5 024103 rtn +: 024108 le_parse_signaling: +0x5ab6 024109 ifetch 1 ,contr +0x5ab7 024110 ifetcht 1 ,contr +0x5ab8 024111 ifetcht 2 ,contr +0x5ab9 024112 beq l2cap_connection_parameter_update_response ,le_l2cap_parse_conn_parameter_update_rsp +0x5aba 024113 rtn +: 024114 le_l2cap_parse_conn_parameter_update_rsp: +0x5abb 024115 ifetch 2 ,contr +0x5abc 024116 store 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0x5abd 024117 jam bt_evt_le_parse_conn_papa_update_rsp ,mem_fifo_temp +0x5abe 024118 branch ui_ipc_send_event +: 024124 le_l2cap_tx_update_req: +0x5abf 024125 arg 0x0c ,rega +0x5ac0 024126 arg l2cap_connection_parameter_update_request ,regc +0x5ac1 024127 call le_fifo_malloc_tx_l2cap_signaling +0x5ac2 024128 setarg 0x08 +0x5ac3 024129 istore 2 ,contw +0x5ac4 024130 fetch 8 ,mem_le_interval_min +0x5ac5 024131 istore 8 ,contw +0x5ac6 024132 rtn +: 024136 le_fifo_malloc_tx_l2cap_signaling: +0x5ac7 024137 call le_l2cap_update_signaling_identifier +0x5ac8 024138 arg le_l2cap_cid_signal ,regb +0x5ac9 024139 call le_fifo_malloc_tx_l2cap +0x5aca 024140 copy regc ,pdata +0x5acb 024141 istore 1 ,contw +0x5acc 024142 fetch 1 ,mem_le_signaling_identifier +0x5acd 024143 istore 1 ,contw +0x5ace 024144 rtn +: 024147 le_l2cap_update_signaling_identifier: +0x5acf 024148 fetch 1 ,mem_le_signaling_identifier +0x5ad0 024150 pincrease 1 +0x5ad1 024151 store 1 ,mem_le_signaling_identifier +0x5ad2 024152 rtnne 0 +: 024154 le_l2cap_reset_signaling_identifier: +0x5ad3 024155 jam 1 ,mem_le_signaling_identifier +0x5ad4 024156 rtn +: 024161 le_pairing_mode_init: +0x5ad5 024162 fetch 1 ,mem_le_pairing_mode +0x5ad6 024163 beq le_pairing_mode_none ,le_set_no_pairing +0x5ad7 024164 beq le_pairing_mode_lagacy_justwork ,le_set_pairing_mode_lagacy_just_work +0x5ad8 024165 beq le_pairing_mode_lagacy_passkey ,le_set_pairing_mode_lagacy_passkey +0x5ad9 024166 beq le_pairing_mode_secure_connect_justwork ,le_set_pairing_mode_secure_justwork +0x5ada 024167 beq le_pairing_mode_secure_connect_numeric ,le_set_pairing_mode_secure_numeric +0x5adb 024168 beq le_pairing_mode_secure_connect_passkey ,le_set_pairing_mode_secure_passkey +0x5adc 024169 rtn +: 024171 le_set_pairing_mode_secure_justwork: +0x5add 024172 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ade 024173 branch le_set_noinputnooutput +: 024174 le_set_pairing_mode_secure_numeric: +0x5adf 024175 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ae0 024176 jam flag_iocap_displayyesno ,mem_le_pres_iocap +0x5ae1 024177 rtn +: 024178 le_set_pairing_mode_secure_passkey: +0x5ae2 024179 jam flag_le_bonding_mitm_secure ,mem_le_pres_auth +0x5ae3 024180 branch le_set_displayonly +: 024181 le_set_no_pairing: +0x5ae4 024182 jam flag_le_no_bonding_no_mitm ,mem_le_pres_auth +: 024183 le_set_noinputnooutput: +0x5ae5 024184 jam flag_iocap_noinputnooutput ,mem_le_pres_iocap +0x5ae6 024185 rtn +: 024186 le_set_pairing_mode_lagacy_just_work: +0x5ae7 024187 jam flag_le_bonding_mitm ,mem_le_pres_auth +0x5ae8 024188 branch le_set_noinputnooutput +: 024189 le_set_pairing_mode_lagacy_passkey: +0x5ae9 024190 jam flag_le_bonding_mitm ,mem_le_pres_auth +: 024191 le_set_displayonly: +0x5aea 024192 jam flag_iocap_displayonly ,mem_le_pres_iocap +0x5aeb 024193 rtn +: 024196 le_secure_connection_enable: +0x5aec 024197 fetch 1 ,mem_le_pres_auth +0x5aed 024198 set1 le_auth_secure_connection_pairing_bit ,pdata +0x5aee 024199 store 1 ,mem_le_pres_auth +0x5aef 024200 rtn +: 024201 le_secure_connection_disable: +0x5af0 024202 fetch 1 ,mem_le_pres_auth +0x5af1 024203 set0 le_auth_secure_connection_pairing_bit ,pdata +0x5af2 024204 store 1 ,mem_le_pres_auth +0x5af3 024205 rtn +: 024207 le_parse_smp: +0x5af4 024208 ifetch 1 ,contr +0x5af5 024209 beq smp_pairing_request ,le_parse_smp_pairing_request +0x5af6 024211 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm +0x5af7 024212 beq smp_pairing_random ,le_parse_smp_pairing_random +0x5af8 024213 beq smp_pairing_failed ,le_parse_smp_pairing_failed +0x5af9 024214 beq smp_encryption_information ,le_parse_smp_encryption_information +0x5afa 024215 beq smp_master_identification ,le_parse_smp_master_identification +0x5afb 024216 beq smp_identity_information ,le_parse_smp_identity_information +0x5afc 024217 beq smp_identity_address_information ,le_parse_smp_identity_address_information +0x5afd 024218 beq smp_signing_information ,le_parse_smp_signing_information +0x5afe 024219 beq smp_security_request ,le_parse_smp_security_request +0x5aff 024220 beq smp_pairing_public_key ,le_parse_smp_public_key +0x5b00 024221 beq smp_pairing_dhkey_check ,le_parse_smp_dhkey_check +0x5b01 024222 rtn +: 024226 le_send_smp_security_request: +0x5b02 024227 force 2 ,rega +0x5b03 024228 call le_fifo_malloc_tx_l2cap_smp +0x5b04 024229 setarg smp_security_request +0x5b05 024230 istore 1 ,contw +0x5b06 024231 fetch 1 ,mem_le_pres_auth +0x5b07 024232 istore 1 ,contw +0x5b08 024233 rtn +: 024235 le_parse_smp_pairing_request: +0x5b09 024236 store 1 ,mem_le_preq +0x5b0a 024237 ifetch 6 ,contr +0x5b0b 024238 istore 6 ,contw +0x5b0c 024239 fetch 1 ,mem_le_pairing_mode +0x5b0d 024240 beq le_pairing_mode_none ,le_smp_pairing_fail_reason_not_support_pairing +0x5b0e 024241 call le_send_smp_pairing_response +0x5b0f 024242 call le_check_master_support_secure_connect +0x5b10 024243 jam flag_le_pairing_rcv_pairing_req ,mem_le_pairing_state +0x5b11 024244 fetch 1 ,mem_le_preq_iocap +0x5b12 024245 beq flag_iocap_displayonly ,le_set_tk_0 +0x5b13 024246 beq flag_iocap_displayyesno ,le_set_tk_0 +0x5b14 024247 beq flag_iocap_noinputnooutput ,le_set_tk_0 +0x5b15 024248 fetch 1 ,mem_le_pairing_mode +0x5b16 024249 beq le_pairing_mode_lagacy_passkey ,le_parse_smp_pairing_req_passkey +0x5b17 024250 rtneq le_pairing_mode_secure_connect_passkey +: 024251 le_set_tk_0: +0x5b18 024252 arg 0 ,pdata +0x5b19 024253 store 4 ,mem_le_tk +0x5b1a 024254 rtn +: 024256 le_parse_smp_pairing_req_passkey: +0x5b1b 024257 fetch 1 ,mem_le_configuration +0x5b1c 024258 bbit1 bit_ble_passkey_fixed_key ,le_parse_smp_pairing_req_fixed_passkey +: 024259 le_genernate_tk: +0x5b1d 024260 arg mem_le_tk ,rega +0x5b1e 024261 copy rega ,contw +0x5b1f 024262 arg 3 ,loopcnt +0x5b20 024263 call generate_random_loop +0x5b21 024264 fetch 2 ,mem_le_tk + 2 +0x5b22 024265 and_into 0x7 ,pdata +0x5b23 024266 store 2 ,mem_le_tk + 2 +: 024267 le_parse_smp_pairing_req_fixed_passkey: +0x5b24 024268 jam bt_evt_le_tk_generate ,mem_fifo_temp +0x5b25 024269 branch ui_ipc_send_event +: 024271 le_check_master_support_secure_connect: +0x5b26 024272 fetch 1 ,mem_le_preq_auth +0x5b27 024273 rtnbit1 le_auth_secure_connection_pairing_bit +0x5b28 024274 fetch 1 ,mem_le_pairing_mode +0x5b29 024275 rtnbit0 le_pairing_mode_secure_connect_bit +0x5b2a 024276 branch app_ble_disconnect +: 024278 le_send_smp_pairing_response: +0x5b2b 024279 force 7 ,rega +0x5b2c 024280 call le_fifo_malloc_tx_l2cap_smp +0x5b2d 024281 fetch 7 ,mem_le_pres +0x5b2e 024282 istore 7 ,contw +0x5b2f 024283 rtn +: 024286 le_parse_smp_pairing_confirm: +0x5b30 024287 copy contr ,rega +0x5b31 024288 fetch 1 ,mem_le_pairing_mode +0x5b32 024289 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_confirm_secure_passkey +0x5b33 024290 copy rega ,contr +0x5b34 024291 arg mem_le_rconfirm ,contw +0x5b35 024292 call memcpy16 +0x5b36 024293 branch le_send_smp_pairing_confirm +: 024294 le_parse_smp_pairing_confirm_secure_passkey: +0x5b37 024295 copy rega ,contr +0x5b38 024296 arg mem_le_rconfirm ,contw +0x5b39 024297 call memcpy16 +0x5b3a 024298 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5b3b 024299 jam le_sc_stat_passkey_wait_confirm ,mem_le_secure_connect_state +0x5b3c 024300 rtn +: 024303 le_send_smp_pairing_confirm: +0x5b3d 024304 fetch 1 ,mem_le_pairing_mode +0x5b3e 024305 bbit1 le_pairing_mode_secure_connect_bit ,le_send_smp_pairing_confirm_sc +0x5b3f 024306 call generate_confirm +0x5b40 024307 force 17 ,rega +0x5b41 024308 call le_fifo_malloc_tx_l2cap_smp +0x5b42 024309 setarg smp_pairing_confirm +0x5b43 024310 istore 1 ,contw +0x5b44 024311 branch store_aes_result +: 024314 le_send_smp_pairing_confirm_sc: +0x5b45 024315 arg mem_le_srand ,contw +0x5b46 024316 call generate_random +0x5b47 024317 call function_f4_cb +0x5b48 024318 force 17 ,rega +0x5b49 024319 call le_fifo_malloc_tx_l2cap_smp +0x5b4a 024320 setarg smp_pairing_confirm +0x5b4b 024321 istore 1 ,contw +0x5b4c 024322 branch load_inverse_result +: 024326 le_parse_smp_pairing_random: +0x5b4d 024327 copy contr ,rega +0x5b4e 024328 fetch 1 ,mem_le_pairing_mode +0x5b4f 024329 bbit1 le_pairing_mode_secure_connect_bit ,le_parse_smp_pairing_random_sc +0x5b50 024330 copy rega ,contr +0x5b51 024331 call authenticate_rconfirm +0x5b52 024332 branch le_parse_smp_pairing_random_success ,zero +: 024333 le_send_pairing_confirm_value_failed: +0x5b53 024334 jam pairing_failed_confirm_value_failed ,mem_le_ll_pairing_fail_reason +: 024335 le_send_pairing_failed: +0x5b54 024336 force 2 ,rega +0x5b55 024337 call le_fifo_malloc_tx_l2cap_smp +0x5b56 024338 setarg smp_pairing_failed +0x5b57 024339 istore 1 ,contw +0x5b58 024340 fetch 1 ,mem_le_ll_pairing_fail_reason +0x5b59 024341 istore 1 ,contw +: 024342 le_parse_smp_pairing_failed: +0x5b5a 024343 force smp_pairing_timer ,queue +0x5b5b 024344 call timer_stop +0x5b5c 024345 jam flag_le_pairing_null ,mem_le_pairing_state +0x5b5d 024346 jam bt_evt_le_pairing_fail ,mem_fifo_temp +0x5b5e 024347 branch ui_ipc_send_event +: 024349 le_smp_pairing_fail_reason_not_support_pairing: +0x5b5f 024350 jam pairing_failed_pairing_not_supported ,mem_le_ll_pairing_fail_reason +0x5b60 024351 branch le_send_pairing_failed +: 024354 le_parse_smp_pairing_random_sc: +0x5b61 024355 arg mem_le_mrand ,contw +0x5b62 024356 copy rega ,contr +0x5b63 024357 call memcpy16 +0x5b64 024358 fetch 1 ,mem_le_pairing_mode +0x5b65 024359 beq le_pairing_mode_secure_connect_passkey ,le_parse_smp_pairing_random_sc_passkey +0x5b66 024360 call function_g2 +0x5b67 024363 call le_send_smp_pairing_random +0x5b68 024364 fetch 1 ,mem_le_pairing_mode +0x5b69 024365 rtnne le_pairing_mode_secure_connect_numeric +0x5b6a 024366 jam bt_evt_le_gkey_generate ,mem_fifo_temp +0x5b6b 024367 branch ui_ipc_send_event +: 024369 le_parse_smp_pairing_random_sc_passkey: +0x5b6c 024370 call function_f4_ca +0x5b6d 024371 arg mem_aes_cmac_temp ,contw +0x5b6e 024372 call load_inverse_result +0x5b6f 024373 arg mem_aes_cmac_temp ,rega +0x5b70 024374 arg mem_le_rconfirm ,regb +0x5b71 024375 arg 16 ,loopcnt +0x5b72 024376 call string_compare +0x5b73 024377 nbranch le_send_pairing_confirm_value_failed ,zero +0x5b74 024378 branch le_send_smp_pairing_random +: 024380 le_parse_smp_pairing_random_success: +0x5b75 024381 call generate_stk +0x5b76 024382 jam bt_evt_le_pairing_success ,mem_fifo_temp +0x5b77 024383 call ui_ipc_send_event +0x5b78 024384 jam 1 ,mem_ltk_exists +0x5b79 024385 jam flag_le_pairing_after_auth ,mem_le_pairing_state +: 024387 le_send_smp_pairing_random: +0x5b7a 024388 force 17 ,rega +0x5b7b 024389 call le_fifo_malloc_tx_l2cap_smp +0x5b7c 024390 setarg smp_pairing_random +0x5b7d 024391 istore 1 ,contw +0x5b7e 024392 arg mem_le_srand ,contr +0x5b7f 024393 branch memcpy16 +: 024395 le_parse_smp_encryption_information: +0x5b80 024396 arg mem_le_peer_ltk ,contw +0x5b81 024397 branch memcpy16 +: 024399 le_send_smp_encryption_information: +0x5b82 024400 force 17 ,rega +0x5b83 024401 call le_fifo_malloc_tx_l2cap_smp +0x5b84 024402 setarg smp_encryption_information +0x5b85 024403 istore 1 ,contw +0x5b86 024404 fetch 1 ,mem_le_configuration +0x5b87 024405 bbit1 bit_ble_pairing_fixed_ltk ,le_send_fixed_ltk +0x5b88 024406 arg mem_le_ltk ,contr +0x5b89 024407 branch memcpy16 +: 024409 le_send_fixed_ltk: +0x5b8a 024410 arg mem_le_fixed_ltk ,contr +0x5b8b 024411 branch memcpy16 +: 024414 le_send_smp_master_identification: +0x5b8c 024415 arg mem_le_ediv ,contw +0x5b8d 024416 force 10 ,loopcnt +0x5b8e 024417 call generate_random_loop +0x5b8f 024418 force 11 ,rega +0x5b90 024419 call le_fifo_malloc_tx_l2cap_smp +0x5b91 024420 setarg smp_master_identification +0x5b92 024421 istore 1 ,contw +0x5b93 024422 fetch 2 ,mem_le_ediv +0x5b94 024423 istore 2 ,contw +0x5b95 024424 fetch 8 ,mem_le_rand +0x5b96 024425 istore 8 ,contw +0x5b97 024426 rtn +: 024428 le_send_smp_identity_information: +0x5b98 024429 force 17 ,rega +0x5b99 024430 call le_fifo_malloc_tx_l2cap_smp +0x5b9a 024431 setarg smp_identity_information +0x5b9b 024432 istore 1 ,contw +0x5b9c 024433 setarg 0 +0x5b9d 024434 istore 8 ,contw +0x5b9e 024435 istore 8 ,contw +0x5b9f 024436 rtn +: 024439 le_send_smp_identity_address_information: +0x5ba0 024440 force 8 ,rega +0x5ba1 024441 call le_fifo_malloc_tx_l2cap_smp +0x5ba2 024442 setarg smp_identity_address_information +0x5ba3 024443 istore 1 ,contw +0x5ba4 024444 fetch 1 ,mem_le_conn_own_addr_type +0x5ba5 024445 istore 1 ,contw +0x5ba6 024446 fetch 6 ,mem_le_lap +0x5ba7 024447 istore 6 ,contw +0x5ba8 024448 rtn +: 024451 le_send_pairing_fail_unspecified_reason: +0x5ba9 024452 jam pairing_failed_unspecified_reason ,mem_le_ll_pairing_fail_reason +0x5baa 024453 branch le_send_pairing_failed +: 024455 le_check_init_key_distribution: +0x5bab 024456 fetch 1 ,mem_le_pres_init_key_distribution +0x5bac 024457 fetcht 1 ,mem_le_pres_init_key_distribution +0x5bad 024458 iand temp ,pdata +0x5bae 024459 rtn +: 024461 le_parse_smp_identity_information: +0x5baf 024462 arg mem_le_irk ,contw +0x5bb0 024463 call memcpy16 +0x5bb1 024464 call le_check_init_key_distribution +0x5bb2 024465 isolate0 le_initator_irk_bit ,pdata +0x5bb3 024466 branch le_send_pairing_fail_unspecified_reason ,true +0x5bb4 024467 fetch 1 ,mem_device_option +0x5bb5 024468 rtnne dvc_op_module +0x5bb6 024469 call le_check_master_addr_type +0x5bb7 024470 nrtn user +0x5bb8 024471 branch app_ble_store_reconn_info +: 024474 le_check_master_addr_type: +0x5bb9 024475 call disable_user +0x5bba 024476 fetch 1 ,mem_le_conn_peer_addr_type +0x5bbb 024477 rtneq master_public_addr +0x5bbc 024478 fetch 1 ,mem_le_plap + 5 +0x5bbd 024479 compare 0xc0 ,pdata ,0xc0 +0x5bbe 024480 rtn true +0x5bbf 024481 branch enable_user +: 024483 le_parse_smp_identity_address_information: +0x5bc0 024484 call le_check_init_key_distribution +0x5bc1 024485 isolate0 le_initator_irk_bit ,pdata +0x5bc2 024486 branch le_send_pairing_fail_unspecified_reason ,true +0x5bc3 024487 rtn +: 024489 le_parse_smp_master_identification: +: 024490 le_parse_smp_signing_information: +: 024491 le_parse_smp_security_request: +0x5bc4 024492 rtn +: 024494 le_parse_smp_public_key: +0x5bc5 024495 arg mem_le_pubkey_remote_x_256 ,contw +0x5bc6 024496 call memcpy64 +0x5bc7 024497 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5bc8 024498 jam le_sc_stat_receive_public_key ,mem_le_secure_connect_state +0x5bc9 024499 rtn +: 024501 le_parse_smp_dhkey_check: +0x5bca 024502 arg mem_sp_confirm_remote ,contw +0x5bcb 024503 call memcpy16 +0x5bcc 024504 jam le_sc_stat_receive_dhkey ,mem_le_secure_connect_state +0x5bcd 024505 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5bce 024506 rtn +: 024508 le_send_smp_pairing_public_key: +0x5bcf 024509 force 65 ,rega +0x5bd0 024510 call le_fifo_malloc_tx_l2cap_smp +0x5bd1 024511 setarg smp_pairing_public_key +0x5bd2 024512 istore 1 ,contw +0x5bd3 024513 arg mem_le_pubkey_local_x_256 ,contr +0x5bd4 024514 branch memcpy64 +: 024516 le_send_smp_pairing_dhkey_check: +0x5bd5 024517 call function_f6_eb +0x5bd6 024518 force 17 ,rega +0x5bd7 024519 call le_fifo_malloc_tx_l2cap_smp +0x5bd8 024520 setarg smp_pairing_dhkey_check +0x5bd9 024521 istore 1 ,contw +0x5bda 024522 branch load_inverse_result +: 024525 le_check_paring_time: +0x5bdb 024526 fetch 1 ,mem_le_pairing_state +0x5bdc 024527 rtneq flag_le_pairing_end +0x5bdd 024528 arg flag_le_pairing_rcv_pairing_req ,temp +0x5bde 024529 isub temp ,null +0x5bdf 024530 nrtn positive +0x5be0 024531 arg smp_pairing_timer ,queue +0x5be1 024532 call timer_check +0x5be2 024533 nrtn blank +0x5be3 024534 branch le_send_pairing_fail_unspecified_reason +: 024536 le_pairing_sm: +0x5be4 024537 bpatchx patch2f_0 ,mem_patch2f +0x5be5 024538 fetch 1 ,mem_le_pairing_state +0x5be6 024539 beq flag_le_pairing_null ,le_pairing_sm_null +0x5be7 024540 beq flag_le_pairing_start ,le_pairing_sm_start +0x5be8 024541 beq flag_le_pairing_send_recurity_req ,le_pairing_sm_send_sec_req +0x5be9 024542 beq flag_le_pairing_rcv_pairing_req ,le_pairing_sm_rcv_pairing_req +0x5bea 024543 beq flag_le_pairing_after_auth ,le_pairing_sm_after_auth +0x5beb 024544 beq flag_le_paring_send_enc_information ,le_pairng_sm_send_enc_information +0x5bec 024545 beq flag_le_paring_send_master_identification ,le_pairng_sm_send_master_indentification +0x5bed 024546 beq flag_le_paring_send_indentity_information ,le_pairng_sm_send_indentity_information +0x5bee 024547 rtn +: 024549 le_pairing_sm_null: +: 024550 le_pairing_sm_send_sec_req: +0x5bef 024551 fetch 1 ,mem_le_enc_state +0x5bf0 024552 rtnne flag_le_send_start_enc_rsp +0x5bf1 024553 jam flag_le_enc_end ,mem_le_enc_state +0x5bf2 024554 jam flag_le_pairing_end ,mem_le_pairing_state +0x5bf3 024555 jam bt_evt_le_reconnect_complete ,mem_fifo_temp +0x5bf4 024556 branch ui_ipc_send_event +: 024559 le_pairing_sm_start: +0x5bf5 024560 jam flag_le_pairing_send_recurity_req ,mem_le_pairing_state +0x5bf6 024561 branch le_send_smp_security_request +: 024563 le_pairing_sm_rcv_pairing_req: +0x5bf7 024564 jam flag_le_pairing_auth ,mem_le_pairing_state +0x5bf8 024565 setarg timer_smp_pairing_timeout +0x5bf9 024566 arg smp_pairing_timer ,queue +0x5bfa 024567 branch timer_init +: 024569 le_pairing_sm_after_auth: +0x5bfb 024570 fetch 1 ,mem_le_enc_state +0x5bfc 024571 beq flag_le_send_start_enc_rsp ,le_pairing_sm_after_auth_start_enc +0x5bfd 024572 rtn +: 024574 le_pairing_sm_after_auth_start_enc: +0x5bfe 024575 jam flag_le_paring_send_enc_information ,mem_le_pairing_state +0x5bff 024576 jam bt_evt_le_enc_info ,mem_fifo_temp +0x5c00 024577 call ui_ipc_send_event +0x5c01 024578 call le_send_smp_encryption_information +0x5c02 024579 fetch 1 ,mem_device_option +0x5c03 024580 rtnne dvc_op_module +0x5c04 024581 call le_check_master_addr_type +0x5c05 024582 rtn user +0x5c06 024583 branch app_ble_store_reconn_info +: 024586 le_pairng_sm_send_enc_information: +0x5c07 024587 jam flag_le_paring_send_master_identification ,mem_le_pairing_state +0x5c08 024588 branch le_send_smp_master_identification +: 024590 le_pairng_sm_send_master_indentification: +0x5c09 024591 fetch 1 ,mem_le_preq_resp_key_distribution +0x5c0a 024592 fetcht 1 ,mem_le_pres_resp_key_distribution +0x5c0b 024593 iand temp ,pdata +0x5c0c 024594 isolate0 le_initator_irk_bit ,pdata +0x5c0d 024595 branch le_parse_start_enc_rsp_after_auth_end ,true +0x5c0e 024596 jam flag_le_paring_send_indentity_information ,mem_le_pairing_state +0x5c0f 024597 branch le_send_smp_identity_information +: 024599 le_pairng_sm_send_indentity_information: +0x5c10 024600 call le_send_smp_identity_address_information +0x5c11 024601 branch le_parse_start_enc_rsp_after_auth_end +: 024604 le_parse_start_enc_rsp_after_auth_end: +0x5c12 024605 force smp_pairing_timer ,queue +0x5c13 024606 call timer_stop +0x5c14 024607 jam flag_le_enc_end ,mem_le_enc_state +0x5c15 024608 jam flag_le_pairing_end ,mem_le_pairing_state +0x5c16 024609 jam bt_evt_le_pairing_complete ,mem_fifo_temp +0x5c17 024610 branch ui_ipc_send_event +: 024614 le_secure_connect_sm: +0x5c18 024615 bpatchx patch2f_1 ,mem_patch2f +0x5c19 024616 fetch 1 ,mem_le_pairing_mode +0x5c1a 024617 rtnbit0 le_pairing_mode_secure_connect_bit +0x5c1b 024618 fetch 1 ,mem_le_secure_connect_flag +0x5c1c 024619 rtnne le_sp_flag_commit_256 +0x5c1d 024620 jam sp_flag_standby ,mem_le_secure_connect_flag +0x5c1e 024621 fetch 1 ,mem_le_secure_connect_state +0x5c1f 024622 beq le_sc_stat_receive_public_key ,le_sc_sm_receive_public_key +0x5c20 024623 beq le_sc_stat_wait_send_public_key ,le_sc_sm_wait_send_public_key +0x5c21 024624 beq le_sc_stat_send_public_key ,le_sc_sm_send_public_key +0x5c22 024625 beq le_sc_stat_receive_dhkey ,le_sc_sm_receive_dhkey +0x5c23 024626 beq le_sc_stat_wait_confirm_gkey ,le_sc_sm_wait_confirm_gkey +0x5c24 024627 beq le_sc_stat_passkey_wait_confirm ,le_sc_sm_passkey_wait_confirm +0x5c25 024628 rtn +: 024631 le_sc_sm_passkey_wait_confirm: +0x5c26 024632 fetch 1 ,mem_authentication_passkey_times +0x5c27 024633 copy pdata ,queue +0x5c28 024634 increase 1 ,pdata +0x5c29 024635 store 1 ,mem_authentication_passkey_times +0x5c2a 024636 fetch 4 ,mem_le_tk +0x5c2b 024637 qisolate1 pdata +0x5c2c 024638 setarg 0x80 +0x5c2d 024639 setflag true ,0 ,pdata +0x5c2e 024640 store 1 ,mem_passkey_1bit +0x5c2f 024641 branch le_sc_sm_ready_send_pairing_confirm +: 024643 le_sc_sm_wait_confirm_gkey: +0x5c30 024644 fetch 1 ,mem_le_sc_confirm_gkey_flag +0x5c31 024645 jam flag_le_sc_confrim_null ,mem_le_sc_confirm_gkey_flag +0x5c32 024646 beq flag_le_sc_confrim_gkey_ok ,le_sc_confirm_gkey_ok +0x5c33 024647 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c34 024648 rtn +: 024650 le_sc_confirm_gkey_ok: +0x5c35 024651 jam bt_evt_le_pairing_success ,mem_fifo_temp +0x5c36 024652 call ui_ipc_send_event +0x5c37 024653 jam flag_le_pairing_after_auth ,mem_le_pairing_state +0x5c38 024654 branch le_send_smp_pairing_dhkey_check +: 024656 le_sc_sm_receive_dhkey: +0x5c39 024657 fetch 1 ,mem_sp_dhkey_invalid +0x5c3a 024658 beq sp_key_valid_256 ,le_dhkey_ready +0x5c3b 024659 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c3c 024660 rtn +: 024662 le_dhkey_ready: +0x5c3d 024663 call function_f5 +0x5c3e 024667 fetch 1 ,mem_le_pairing_mode +0x5c3f 024668 beq le_pairing_mode_secure_connect_passkey ,le_dhkey_ready_common +0x5c40 024669 call le_set_tk_0 +: 024670 le_dhkey_ready_common: +0x5c41 024671 call function_f6_ea +0x5c42 024672 arg mem_aes_cmac_temp ,rega +0x5c43 024673 arg mem_sp_confirm_remote ,regb +0x5c44 024674 arg 16 ,loopcnt +0x5c45 024675 call string_compare +0x5c46 024676 branch le_dhkey_check_ok ,zero +: 024677 le_dhkey_check_fail: +0x5c47 024678 jam pairing_failed_dhkey_check_failed ,mem_le_ll_pairing_fail_reason +0x5c48 024679 branch le_send_pairing_failed +: 024682 le_dhkey_check_ok: +0x5c49 024683 call sp_calc_check_publickey_256 +0x5c4a 024684 nbranch le_dhkey_check_fail ,zero +0x5c4b 024685 jam 1 ,mem_ltk_exists +0x5c4c 024686 fetch 1 ,mem_le_pairing_mode +0x5c4d 024687 beq le_pairing_mode_secure_connect_justwork ,le_sc_confirm_gkey_ok +0x5c4e 024688 beq le_pairing_mode_secure_connect_passkey ,le_sc_confirm_gkey_ok +0x5c4f 024689 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c50 024690 jam le_sc_stat_wait_confirm_gkey ,mem_le_secure_connect_state +0x5c51 024691 rtn +: 024693 le_sc_sm_send_public_key: +0x5c52 024694 fetch 1 ,mem_le_pairing_mode +0x5c53 024695 beq le_pairing_mode_secure_connect_passkey ,le_sc_sm_send_public_key_passkey +0x5c54 024696 jam 0 ,mem_passkey_1bit +: 024697 le_sc_sm_ready_send_pairing_confirm: +0x5c55 024698 branch le_send_smp_pairing_confirm +: 024700 le_sc_sm_send_public_key_passkey: +0x5c56 024704 jam 0 ,mem_authentication_passkey_times +0x5c57 024705 branch le_parse_smp_pairing_req_passkey +: 024708 le_sc_sm_receive_public_key: +0x5c58 024709 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c59 024710 fetch 1 ,mem_le_sc_local_key_invalid +0x5c5a 024711 beq sp_key_valid_256 ,le_public_key_ready +0x5c5b 024713 rtn +: 024715 le_public_key_ready: +0x5c5c 024716 jam le_sc_stat_wait_send_public_key ,mem_le_secure_connect_state +0x5c5d 024717 jam sp_key_invalid ,mem_sp_dhkey_invalid +0x5c5e 024718 branch sp_dhkey_calc_256 +: 024720 le_sc_sm_wait_send_public_key: +0x5c5f 024721 jam le_sp_flag_commit_256 ,mem_le_secure_connect_flag +0x5c60 024722 jam le_sc_stat_send_public_key ,mem_le_secure_connect_state +0x5c61 024723 branch le_send_smp_pairing_public_key +: 024727 le_fifo_malloc_tx_l2cap_smp: +0x5c62 024728 force le_l2cap_cid_smp ,regb +0x5c63 024729 branch le_fifo_malloc_tx_l2cap +: 024733 le_parse_ll: +0x5c64 024734 fetch 1 ,mem_le_rxbuf + 2 +0x5c65 024735 beq ll_connection_update_req ,le_parse_connection_update_req +0x5c66 024736 beq ll_channel_map_req ,le_parse_channel_map_req +0x5c67 024737 beq ll_terminate_ind ,le_parse_terminate_ind +0x5c68 024738 beq ll_enc_req ,le_parse_enc_req +0x5c69 024739 beq ll_enc_rsp ,le_parse_enc_rsp +0x5c6a 024740 beq ll_start_enc_req ,le_parse_start_enc_req +0x5c6b 024741 beq ll_start_enc_rsp ,le_parse_start_enc_rsp +0x5c6c 024742 beq ll_unknown_rsp ,le_parse_unknown_rsp +0x5c6d 024743 beq ll_feature_req ,le_parse_feature_req +0x5c6e 024744 beq ll_feature_rsp ,le_parse_feature_rsp +0x5c6f 024745 beq ll_pause_enc_req ,le_parse_pause_enc_req +0x5c70 024746 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp +0x5c71 024747 beq ll_version_ind ,le_parse_version_ind +0x5c72 024748 beq ll_reject_ind ,le_parse_reject_ind +0x5c73 024749 beq ll_ping_req ,le_parse_ping_req +0x5c74 024750 beq ll_ping_rsp ,le_parse_ping_rsp +0x5c75 024751 arg 2 ,rega +0x5c76 024752 arg ll_unknown_rsp ,regb +0x5c77 024753 call le_fifo_malloc_tx_ll +0x5c78 024754 fetch 1 ,mem_le_rxbuf + 2 +0x5c79 024755 istore 1 ,contw +0x5c7a 024756 rtn +: 024759 le_parse_connection_update_req: +0x5c7b 024760 ifetch 9 ,contr +0x5c7c 024761 store 9 ,mem_le_new_param +0x5c7d 024762 ifetch 2 ,contr +0x5c7e 024763 store 2 ,mem_le_instant +0x5c7f 024764 fetch 1 ,mem_le_state +0x5c80 024765 set1 lestate_update_param ,pdata +0x5c81 024766 store 1 ,mem_le_state +0x5c82 024767 rtn +: 024769 le_parse_channel_map_req: +0x5c83 024770 ifetch 5 ,contr +0x5c84 024771 store 5 ,mem_le_new_map +0x5c85 024772 ifetch 2 ,contr +0x5c86 024773 store 2 ,mem_le_instant +0x5c87 024774 fetcht 2 ,mem_le_event_count +0x5c88 024775 isub temp ,null +0x5c89 024776 nbranch le_parse_terminate_ind ,positive +0x5c8a 024777 fetch 1 ,mem_le_state +0x5c8b 024778 set1 lestate_update_map ,pdata +0x5c8c 024779 store 1 ,mem_le_state +0x5c8d 024780 rtn +: 024783 le_parse_terminate_ind: +0x5c8e 024784 setarg 20 +0x5c8f 024785 store 2 ,mem_le_superto +0x5c90 024786 store 2 ,mem_le_init_superto +0x5c91 024787 rtn +: 024789 le_send_terminate_ind_user_terminated: +0x5c92 024790 arg error_remote_user_terminated_connection ,regc +: 024793 le_send_terminate_ind: +0x5c93 024794 arg 2 ,rega +0x5c94 024795 arg ll_terminate_ind ,regb +0x5c95 024796 call le_fifo_malloc_tx_ll +0x5c96 024797 copy regc ,pdata +0x5c97 024798 istore 1 ,contw +0x5c98 024799 rtn +: 024801 le_parse_feature_req: +: 024803 le_send_feature_rsp: +0x5c99 024804 arg 9 ,rega +0x5c9a 024805 arg ll_feature_rsp ,regb +0x5c9b 024806 call le_fifo_malloc_tx_ll +0x5c9c 024807 setarg param_le_features +0x5c9d 024808 istore 8 ,contw +0x5c9e 024809 rtn +: 024812 le_parse_version_ind: +0x5c9f 024813 rtn master +: 024814 le_send_version_ind: +0x5ca0 024815 arg 6 ,rega +0x5ca1 024816 arg ll_version_ind ,regb +0x5ca2 024817 call le_fifo_malloc_tx_ll +0x5ca3 024818 fetch 5 ,mem_lmp_version +0x5ca4 024819 istore 5 ,contw +0x5ca5 024820 rtn +: 024823 le_parse_ping_req: +0x5ca6 024824 arg ll_ping_rsp ,regb +0x5ca7 024825 branch le_send_ll_one_lenth +: 024828 le_send_ll_one_lenth: +0x5ca8 024829 arg 1 ,rega +0x5ca9 024830 branch le_fifo_malloc_tx_ll +: 024833 le_parse_enc_req: +0x5caa 024834 ifetch 8 ,contr +0x5cab 024835 store 8 ,mem_le_rand +0x5cac 024836 ifetch 2 ,contr +0x5cad 024837 store 2 ,mem_le_ediv +0x5cae 024838 ifetch 8 ,contr +0x5caf 024839 store 8 ,mem_le_skdm +0x5cb0 024840 ifetch 4 ,contr +0x5cb1 024841 store 4 ,mem_le_ivm +0x5cb2 024842 call le_send_enc_rsp +0x5cb3 024843 bpatchx patch2f_2 ,mem_patch2f +0x5cb4 024844 fetch 1 ,mem_le_pairing_state +0x5cb5 024845 beq flag_le_pairing_after_auth ,le_parse_enc_req_after_auth +0x5cb6 024846 fetch 1 ,mem_le_configuration +0x5cb7 024847 bbit1 bit_ble_pairing_fixed_ltk ,le_parse_enc_req_fixed_ltk +0x5cb8 024848 fetch 1 ,mem_nv_data_number +0x5cb9 024849 ncall load_device_list_mode_4 ,blank +0x5cba 024850 fetch 1 ,mem_ltk_exists +0x5cbb 024851 beq 0 ,le_ltk_lost +: 024852 le_parse_enc_req_after_auth: +0x5cbc 024853 jam flag_le_rcv_enc_start ,mem_le_enc_state +0x5cbd 024854 call le_send_start_enc_req +0x5cbe 024855 branch generate_sk +: 024857 le_parse_enc_req_fixed_ltk: +0x5cbf 024858 jam 1 ,mem_ltk_exists +0x5cc0 024859 arg mem_le_fixed_ltk ,contr +0x5cc1 024860 arg mem_le_ltk ,contw +0x5cc2 024861 call memcpy16 +0x5cc3 024862 branch le_parse_enc_req_after_auth +: 024865 le_ltk_lost: +0x5cc4 024866 bpatchx patch2f_3 ,mem_patch2f +0x5cc5 024867 jam flag_le_enc_null ,mem_le_enc_state +0x5cc6 024868 jam flag_le_enc_null ,mem_le_pairing_state +0x5cc7 024869 jam bt_evt_le_ltk_lost ,mem_fifo_temp +0x5cc8 024870 branch ui_ipc_send_event +: 024872 le_send_reject_ind: +0x5cc9 024873 arg 2 ,rega +0x5cca 024874 arg ll_reject_ind ,regb +0x5ccb 024875 call le_fifo_malloc_tx_ll +0x5ccc 024876 setarg le_err_pin_or_key_missing +0x5ccd 024877 istore 1 ,contw +0x5cce 024878 rtn +: 024880 le_send_enc_rsp: +0x5ccf 024881 arg mem_le_skds ,contw +0x5cd0 024882 force 8 ,loopcnt +0x5cd1 024883 call generate_random_loop +0x5cd2 024884 arg mem_le_ivs ,contw +0x5cd3 024885 force 4 ,loopcnt +0x5cd4 024886 call generate_random_loop +0x5cd5 024887 arg 13 ,rega +0x5cd6 024888 arg ll_enc_rsp ,regb +0x5cd7 024889 call le_fifo_malloc_tx_ll +0x5cd8 024890 fetch 8 ,mem_le_skds +0x5cd9 024891 istore 8 ,contw +0x5cda 024892 fetch 4 ,mem_le_ivs +0x5cdb 024893 istore 4 ,contw +0x5cdc 024894 rtn +: 024896 le_send_start_enc_req: +0x5cdd 024897 arg ll_start_enc_req ,regb +0x5cde 024898 branch le_send_ll_one_lenth +: 024900 le_send_start_enc_rsp: +0x5cdf 024901 arg ll_start_enc_rsp ,regb +0x5ce0 024902 branch le_send_ll_one_lenth +: 024905 le_parse_enc_rsp: +0x5ce1 024906 ifetch 8 ,contr +0x5ce2 024907 store 8 ,mem_le_skds +0x5ce3 024908 ifetch 4 ,contr +0x5ce4 024909 store 4 ,mem_le_ivs +0x5ce5 024910 branch generate_sk +: 024912 le_parse_start_enc_req: +0x5ce6 024913 fetch 1 ,mem_le_state +0x5ce7 024914 set1 lestate_encryption ,pdata +0x5ce8 024915 store 1 ,mem_le_state +0x5ce9 024916 rtn +: 024918 le_parse_start_enc_rsp: +0x5cea 024919 rtn master +0x5ceb 024920 jam bt_evt_le_start_enc ,mem_fifo_temp +0x5cec 024921 call ui_ipc_send_event +0x5ced 024922 jam flag_le_send_start_enc_rsp ,mem_le_enc_state +0x5cee 024923 branch le_send_start_enc_rsp +: 024925 le_parse_pause_enc_req: +0x5cef 024926 jam flag_le_enc_pause ,mem_le_enc_state +0x5cf0 024927 call le_send_pause_enc_rsp +0x5cf1 024928 jam bt_evt_le_pause_enc ,mem_fifo_temp +0x5cf2 024929 branch ui_ipc_send_event +: 024931 le_send_pause_enc_rsp: +0x5cf3 024932 arg ll_pause_enc_rsp ,regb +0x5cf4 024933 branch le_send_ll_one_lenth +: 024936 le_parse_feature_rsp: +: 024937 le_parse_unknown_rsp: +: 024938 le_parse_pause_enc_rsp: +: 024939 le_parse_reject_ind: +: 024940 le_parse_ping_rsp: +0x5cf5 024941 rtn +: 024948 init_lmp: +0x5cf6 024949 rtn wake +: 024950 init_lmp_work: +0x5cf7 024951 bpatchx patch2f_4 ,mem_patch2f +0x5cf8 024952 setarg 0 +0x5cf9 024953 store 1 ,mem_lmp_to_send +0x5cfa 024954 store 1 ,mem_conn_sm +0x5cfb 024955 store 1 ,mem_lmo_opcode1 +0x5cfc 024956 store 1 ,mem_lmo_opcode2 +0x5cfd 024957 store 1 ,mem_esco_addr +0x5cfe 024958 store 1 ,mem_auth_enable +0x5cff 024959 store 1 ,mem_connection_options +0x5d00 024960 store 1 ,mem_pairing_auth +0x5d01 024961 jam switch_flag_init ,mem_switch_flag +0x5d02 024962 jam 0 ,mem_switch_fail_master_count +0x5d03 024963 jam null_encryp ,mem_wait_encryption +: 024964 init_lmp_reinit: +0x5d04 024965 jam 0 ,mem_pairing_auth +0x5d05 024966 jam 0 ,mem_sp_localsm +0x5d06 024967 jam 0 ,mem_lmp_conn_state +: 024969 parse_rx_done: +0x5d07 024970 rtn +: 024972 parse_lmp: +0x5d08 024973 bpatchx patch2f_5 ,mem_patch2f +0x5d09 024974 call setlocalsm_master ,master +0x5d0a 024975 ncall setlocalsm_slave ,master +0x5d0b 024976 call lmo_fifo_check +0x5d0c 024977 nrtn blank +0x5d0d 024978 fetch 1 ,mem_state_map +0x5d0e 024979 rtnbit0 smap_rxlmp +0x5d0f 024980 set0 smap_rxlmp ,pdata +0x5d10 024981 set0 mark_rxbuf_inuse ,mark +0x5d11 024982 store 1 ,mem_state_map +0x5d12 024983 fetch 1 ,mem_rxbuf +0x5d13 024984 fetcht 1 ,mem_state_map +0x5d14 024985 isolate1 smap_lmptidinit ,pdata +0x5d15 024986 setflag true ,smap_lmptid ,temp +0x5d16 024987 storet 1 ,mem_state_map +0x5d17 024988 and_into 0x2 ,temp +0x5d18 024989 storet 1 ,mem_lmo_tid2 +0x5d19 024990 fetcht 1 ,mem_state_map +0x5d1a 024991 rshift pdata ,pdata +0x5d1b 024992 store 1 ,mem_lmi_opcode2 +0x5d1c 024993 bpatchx patch2f_6 ,mem_patch2f +0x5d1d 024994 fetch 1 ,mem_lmi_opcode2 +0x5d1e 024995 beq lmp_escape ,parse_lmp_escape +0x5d1f 024996 beq lmp_accepted ,parse_lmp_accepted +0x5d20 024997 beq lmp_not_accepted ,parse_lmp_not_accepted +0x5d21 024998 beq lmp_set_afh ,parse_lmp_set_afh +0x5d22 024999 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req +0x5d23 025000 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req +0x5d24 025001 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key +0x5d25 025002 beq lmp_auto_rate ,parse_lmp_auto_rate +0x5d26 025003 beq lmp_test_control ,parse_lmp_test_control +0x5d27 025004 beq lmp_test_activate ,parse_lmp_test_activate +0x5d28 025005 beq lmp_setup_complete ,parse_lmp_setup_complete +0x5d29 025006 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout +0x5d2a 025007 beq lmp_features_req ,parse_lmp_features_req +0x5d2b 025008 beq lmp_host_connection_req ,parse_lmp_conn_req +0x5d2c 025009 beq lmp_version_req ,parse_lmp_version_req +0x5d2d 025010 beq lmp_version_res ,parse_lmp_version_res +0x5d2e 025011 beq lmp_detach ,parse_lmp_detach +0x5d2f 025012 beq lmp_max_slot ,parse_lmp_max_slot +0x5d30 025013 beq lmp_max_slot_req ,parse_lmp_max_slot_req +0x5d31 025014 beq lmp_name_req ,parse_lmp_name_req +0x5d32 025015 beq lmp_name_res ,parse_lmp_name_res +0x5d33 025016 beq lmp_features_res ,parse_lmp_features_res +0x5d34 025017 beq lmp_comb_key ,parse_lmp_comb_key +0x5d35 025018 beq lmp_au_rand ,parse_lmp_au_rand +0x5d36 025019 beq lmp_in_rand ,parse_lmp_in_rand +0x5d37 025020 beq lmp_sres ,parse_lmp_sres +0x5d38 025021 beq lmp_incr_power_req ,parse_lmp_incr_power +0x5d39 025022 beq lmp_decr_power_req ,parse_lmp_decr_power +0x5d3a 025023 beq lmp_max_power ,parse_lmp_max_power +0x5d3b 025024 beq lmp_min_power ,parse_lmp_min_power +0x5d3c 025025 beq lmp_page_mode_req ,parse_lmp_page_mode_req +0x5d3d 025026 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req +0x5d3e 025027 beq lmp_preferred_rate ,parse_lmp_preferred_rate +0x5d3f 025028 beq lmp_slot_offset ,parse_lmp_slot_offset +0x5d40 025029 beq lmp_sniff_req ,parse_lmp_sniff_req +0x5d41 025030 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req +0x5d42 025031 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req +0x5d43 025032 beq lmp_switch_req ,parse_lmp_switch_req +0x5d44 025033 beq lmp_temp_rand ,parse_lmp_temp_rand +0x5d45 025034 beq lmp_temp_key ,parse_lmp_temp_key +0x5d46 025035 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req +0x5d47 025036 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res +0x5d48 025037 beq lmp_unit_key ,parse_lmp_unit_key +0x5d49 025038 beq lmp_unsniff_req ,parse_lmp_unsniff_req +0x5d4a 025039 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key +0x5d4b 025040 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header +0x5d4c 025041 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload +0x5d4d 025042 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm +0x5d4e 025043 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number +0x5d4f 025044 beq lmp_dhkey_check ,parse_dhkey_check +0x5d50 025045 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res +0x5d51 025046 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req +: 025049 reject_unknown_packet: +0x5d52 025050 jam unknown_lmp_pdu ,mem_lmo_reason2 +: 025051 reject_lmp_packet: +0x5d53 025052 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5d54 025053 rtn +: 025055 parse_lmp_clkoffset_req: +0x5d55 025056 jam lmp_clkoffset_res ,mem_lmo_opcode2 +0x5d56 025057 rtn +: 025059 parse_enc_key_size_mask_req: +0x5d57 025060 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 +0x5d58 025061 rtn +: 025063 parse_lmp_set_afh: +0x5d59 025064 fetch 4 ,mem_rxbuf + 1 +0x5d5a 025065 lshift pdata ,pdata +0x5d5b 025066 store 4 ,mem_afh_instant +0x5d5c 025067 fetch 1 ,mem_rxbuf + 5 +0x5d5d 025068 store 1 ,mem_afh_new_mod +0x5d5e 025069 fetch 5 ,mem_rxbuf + 6 +0x5d5f 025070 store 5 ,mem_afh_map_new +0x5d60 025071 fetch 5 ,mem_rxbuf + 11 +0x5d61 025072 istore 5 ,contw +0x5d62 025073 fetch 1 ,mem_mode +0x5d63 025074 set1 afh_change ,pdata +0x5d64 025075 store 1 ,mem_mode +0x5d65 025076 rtn +: 025077 parse_lmp_escape: +0x5d66 025078 bpatchx patch2f_7 ,mem_patch2f +0x5d67 025079 fetch 1 ,mem_rxbuf + 1 +0x5d68 025080 set1 7 ,pdata +0x5d69 025081 store 1 ,mem_lmi_opcode2 +0x5d6a 025082 beq lmp_ext_accepted ,parse_lmpext_accepted +0x5d6b 025083 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted +0x5d6c 025084 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req +0x5d6d 025085 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res +0x5d6e 025086 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req +0x5d6f 025087 beq lmp_ext_features_req ,parse_lmpext_features_req +0x5d70 025088 beq lmp_ext_features_res ,parse_lmpext_features_res +0x5d71 025089 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req +0x5d72 025090 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt +0x5d73 025091 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt +0x5d74 025092 beq lmp_io_cap_req ,parse_lmpext_iocap_req +0x5d75 025093 beq lmp_io_cap_res ,parse_lmpext_iocap_res +0x5d76 025094 rtneq lmp_ext_features_res +: 025097 reject_unknown_ext_packet: +0x5d77 025098 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +0x5d78 025099 jam unknown_lmp_pdu ,mem_lmo_reason2 +0x5d79 025101 rtn +: 025102 parse_lmpext_chn_classification_req: +0x5d7a 025103 jam lmp_not_accepted_ext ,mem_lmo_opcode2 +0x5d7b 025104 jam not_support_chn_classification ,mem_lmo_reason2 +0x5d7c 025105 rtn +: 025107 parse_lmpext_iocap_req: +0x5d7d 025108 call iocap_lmpext_load +0x5d7e 025109 jam lmp_io_cap_res ,mem_lmo_opcode2 +0x5d7f 025110 rtn +: 025112 parse_lmpext_iocap_res: +0x5d80 025113 call iocap_lmpext_load +0x5d81 025114 branch iocap_lmpext_common +: 025116 iocap_lmpext_load: +0x5d82 025117 arg mem_sp_iocap_remote ,contw +0x5d83 025118 fetch 3 ,mem_rxbuf + 2 +0x5d84 025119 istore 3 ,contw +0x5d85 025120 rtn +: 025122 iocap_lmpext_common: +0x5d86 025123 branch master_set_mem_master_sp_flag ,true +0x5d87 025124 rtn +: 025125 parse_lmpext_accepted: +0x5d88 025126 fetch 1 ,mem_rxbuf + 3 +0x5d89 025127 set1 7 ,pdata +0x5d8a 025128 store 1 ,mem_lmi_accepted_opcode +0x5d8b 025129 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt +0x5d8c 025130 rtn +: 025133 parse_lmpext_not_accepted: +0x5d8d 025134 fetch 1 ,mem_rxbuf + 3 +0x5d8e 025135 set1 7 ,pdata +0x5d8f 025136 store 1 ,mem_lmi_accepted_opcode +0x5d90 025137 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt +0x5d91 025138 rtn +: 025140 parse_lmpext_accepted_ptt: +0x5d92 025141 fetch 1 ,mem_ptt +0x5d93 025142 fetcht 1 ,mem_state_map +0x5d94 025143 nsetflag blank ,smap_edr ,temp +0x5d95 025144 storet 1 ,mem_state_map +: 025145 parse_lmpext_not_accepted_ptt: +0x5d96 025146 fetch 1 ,mem_state +0x5d97 025147 rtnbit0 state_init_seq +0x5d98 025148 set0 state_init_seq ,pdata +0x5d99 025149 store 1 ,mem_state +0x5d9a 025150 fetch 1 ,mem_auth_enable +0x5d9b 025151 nrtn blank +0x5d9c 025152 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5d9d 025153 rtn +: 025155 parse_lmpext_pause_encrypt: +0x5d9e 025156 nbranch parse_lmpext_pause_encrypt_slave ,master +0x5d9f 025157 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x5da0 025158 branch tid_reply +: 025160 parse_lmpext_pause_encrypt_slave: +0x5da1 025161 jam lmp_pause_encryption_req ,mem_lmo_opcode2 +0x5da2 025162 rtn +: 025164 parse_lmpext_resume_encrypt: +0x5da3 025167 call tid_reply +0x5da4 025168 branch lmp_start_encryption +: 025170 parse_lmpext_features_req: +0x5da5 025171 jam lmp_ext_features_res ,mem_lmo_opcode2 +0x5da6 025172 rtn +: 025174 parse_lmpext_features_res: +0x5da7 025175 fetcht 1 ,mem_rxbuf + 4 +0x5da8 025176 and temp ,0x1 ,temp +0x5da9 025177 storet 1 ,mem_remote_sppcap +0x5daa 025178 fetch 1 ,mem_hci_cmd +0x5dab 025179 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci +0x5dac 025180 jam 0 ,mem_hci_cmd +: 025181 parse_lmpext_features_res_not_hci: +0x5dad 025182 fetch 1 ,mem_conn_sm +0x5dae 025183 rtnne conn_sm_wait_features_ext +0x5daf 025184 jam conn_sm_send_conn_req ,mem_conn_sm +0x5db0 025185 branch process_conn_sm +: 025187 parse_lmp_accepted: +0x5db1 025188 bpatchx patch30_0 ,mem_patch30 +0x5db2 025189 fetch 1 ,mem_rxbuf + 1 +0x5db3 025190 store 1 ,mem_lmi_accepted_opcode +0x5db4 025191 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn +0x5db5 025192 beq lmp_in_rand ,parse_lmp_accepted_inrand +0x5db6 025193 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode +0x5db7 025194 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize +0x5db8 025195 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc +0x5db9 025196 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc +0x5dba 025197 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req +0x5dbb 025198 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req +0x5dbc 025199 beq lmp_switch_req ,parse_lmp_accepted_switch +0x5dbd 025201 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header +0x5dbe 025202 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload +0x5dbf 025203 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number +0x5dc0 025204 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check +0x5dc1 025205 rtn +: 025207 parse_lmp_not_accepted: +0x5dc2 025208 bpatchx patch30_1 ,mem_patch30 +0x5dc3 025209 fetch 1 ,mem_rxbuf + 1 +0x5dc4 025210 store 1 ,mem_lmi_accepted_opcode +0x5dc5 025211 beq lmp_name_req ,parse_lmp_not_accepted_name_req +0x5dc6 025212 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn +0x5dc7 025213 beq lmp_au_rand ,parse_lmp_not_accepted_aurand +0x5dc8 025214 beq lmp_in_rand ,parse_lmp_not_accepted_inrand +0x5dc9 025215 beq lmp_switch_req ,parse_lmp_not_accepted_switch +0x5dca 025217 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number +0x5dcb 025218 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check +0x5dcc 025219 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req +0x5dcd 025220 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req +0x5dce 025221 rtn +: 025223 parse_lmp_accepted_switch: +0x5dcf 025224 jam bt_evt_switch_accept ,mem_fifo_temp +0x5dd0 025225 call ui_ipc_send_event +0x5dd1 025226 branch role_switch_prepare0 +: 025227 parse_lmp_not_accepted_switch: +0x5dd2 025228 jam bt_evt_switch_not_accept ,mem_fifo_temp +0x5dd3 025229 call ui_ipc_send_event +0x5dd4 025230 jam switch_flag_not_accept ,mem_switch_flag +0x5dd5 025231 setarg timer_switch_waite +0x5dd6 025232 arg switch_wait_timer ,queue +0x5dd7 025233 branch timer_init +: 025236 parse_lmp_accepted_hostconn: +0x5dd8 025239 fetch 1 ,mem_lmp_conn_state +0x5dd9 025240 set1 received_conn_req ,pdata +0x5dda 025241 store 1 ,mem_lmp_conn_state +0x5ddb 025242 jam bt_evt_bb_connected ,mem_fifo_temp +0x5ddc 025243 call ui_ipc_send_event +0x5ddd 025244 jam lmp_packet_type_table_req ,mem_lmo_opcode2 +: 025246 parse_lmp_accepted_hostconn_ctn: +0x5dde 025248 fetch 1 ,mem_conn_sm +0x5ddf 025249 bne conn_sm_wait_conn_accept ,parse_rx_done +0x5de0 025252 jam conn_sm_auth_pair ,mem_conn_sm +0x5de1 025253 rtn +: 025261 parse_lmp_not_accepted_hostconn: +0x5de2 025262 jam acl_connection_already_exists ,mem_disconn_reason_send +0x5de3 025263 jam lmp_detach ,mem_lmo_opcode2 +0x5de4 025265 jam conn_sm_standby ,mem_conn_sm +0x5de5 025267 branch parse_rx_done ,true +0x5de6 025268 rtn +: 025270 parse_lmp_accepted_inrand: +0x5de7 025271 fetch 1 ,mem_link_key_exists +0x5de8 025272 nrtn blank +0x5de9 025273 call clear_linkkey +0x5dea 025274 call lmp_generate_key +0x5deb 025275 rtn master +0x5dec 025276 set1 mark_slave_in_rand_accepted ,mark +0x5ded 025277 rtn +: 025279 parse_lmp_accepted_enc_mode: +0x5dee 025280 nrtn master +0x5def 025281 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +0x5df0 025282 fetch 1 ,mem_state_map +0x5df1 025283 rtnbit0 smap_encryption +0x5df2 025284 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x5df3 025285 rtn +: 025287 parse_lmp_accepted_enc_keysize: +0x5df4 025288 branch lmp_start_encryption +: 025290 parse_lmp_accepted_start_enc: +0x5df5 025291 call send_create_conn_start_l2cap_timer_sm +0x5df6 025292 fetch 1 ,mem_state +0x5df7 025293 rtnbit1 state_conn_comp +0x5df8 025294 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5df9 025295 fetch 1 ,mem_conn_sm +0x5dfa 025296 rtnne conn_sm_encrypt_wait +0x5dfb 025297 jam conn_sm_encrypt_wait_clear ,mem_conn_sm +0x5dfc 025298 rtn +: 025300 parse_lmp_accepted_stop_enc: +0x5dfd 025308 rtn +: 025310 parse_lmp_not_accepted_aurand: +: 025311 parse_lmp_not_accepted_aurand_send_detach: +0x5dfe 025312 jam lmp_detach ,mem_lmo_opcode2 +0x5dff 025313 jam other_end_terminated ,mem_disconn_reason_send +0x5e00 025314 rtn +: 025316 parse_lmp_not_accepted_inrand: +0x5e01 025317 fetch 1 ,mem_rxbuf + 2 +0x5e02 025318 beq key_missing ,parse_lmp_inrand_key_missing +0x5e03 025319 rtnne pairing_not_allowed +0x5e04 025320 jam pairing_not_allowed ,mem_disconn_reason_send +0x5e05 025321 jam lmp_detach ,mem_lmo_opcode2 +0x5e06 025322 rtn +: 025323 parse_lmp_inrand_key_missing: +0x5e07 025324 jam key_missing ,mem_disconn_reason_send +0x5e08 025325 jam lmp_detach ,mem_lmo_opcode2 +0x5e09 025326 rtn +: 025328 parse_lmp_not_accepted_name_req: +0x5e0a 025329 rtn +: 025331 parse_lmp_not_accepted_simple_pairing_number: +0x5e0b 025332 jam sp_stat_null ,mem_sp_state +0x5e0c 025333 jam lmp_detach ,mem_lmo_opcode2 +0x5e0d 025334 branch parse_rx_done +: 025336 parse_lmp_not_accepted_dhkey_check: +0x5e0e 025337 jam sp_stat_null ,mem_sp_state +0x5e0f 025338 jam lmp_detach ,mem_lmo_opcode2 +0x5e10 025339 branch parse_rx_done +: 025340 parse_lmp_not_accepted_unsniff_req: +0x5e11 025341 jam bt_evt_unsniff_not_accept ,mem_fifo_temp +0x5e12 025342 branch ui_ipc_send_event +: 025344 parse_lmp_accepted_unsniff_req: +0x5e13 025345 jam bt_evt_unsniff_accept ,mem_fifo_temp +0x5e14 025346 call ui_ipc_send_event +0x5e15 025347 branch sniff_exit +: 025349 parse_lmp_accepted_sniff_req: +0x5e16 025350 jam bt_evt_sniff_accept ,mem_fifo_temp +0x5e17 025351 call ui_ipc_send_event +0x5e18 025352 setarg 0 +0x5e19 025353 store 2 ,mem_dsniff +0x5e1a 025354 fetch 2 ,mem_sniff_param_interval +0x5e1b 025355 lshift pdata ,pdata +0x5e1c 025356 store 2 ,mem_tsniff +0x5e1d 025357 fetch 1 ,mem_sniff_param_attempt +0x5e1e 025358 store 1 ,mem_sniff_attempt +0x5e1f 025359 fetch 1 ,mem_sniff_param_timeout +0x5e20 025360 store 1 ,mem_sniff_timeout +0x5e21 025361 branch sniff_init +: 025363 parse_lmp_not_acdcept_sniff_req: +0x5e22 025364 jam bt_evt_sniff_not_accept ,mem_fifo_temp +0x5e23 025365 branch ui_ipc_send_event +: 025367 parse_lmp_crypt_key: +0x5e24 025368 fetcht 1 ,mem_rxbuf + 1 +0x5e25 025369 storet 1 ,mem_key_size +0x5e26 025370 branch accept_lmp_msg +: 025372 parse_lmp_setup_complete: +0x5e27 025373 fetch 1 ,mem_lmp_conn_state +0x5e28 025374 set1 received_setup_complete ,pdata +0x5e29 025375 store 1 ,mem_lmp_conn_state +0x5e2a 025376 rtnbit1 sent_setup_complete +0x5e2b 025377 jam lmp_setup_complete ,mem_lmo_opcode2 +0x5e2c 025378 branch parse_rx_done +: 025380 parse_lmp_max_slot: +0x5e2d 025383 rtn +: 025385 parse_lmp_max_slot_req: +0x5e2e 025386 fetch 1 ,mem_max_slot +0x5e2f 025387 fetcht 1 ,mem_rxbuf + 1 +0x5e30 025388 isub temp ,null +0x5e31 025390 branch accept_lmp_msg ,positive +0x5e32 025391 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5e33 025392 jam unspecified_error ,mem_lmo_reason2 +0x5e34 025393 jam lmp_max_slot_req ,mem_lmi_opcode2 +0x5e35 025394 rtn +: 025396 parse_lmp_detach: +0x5e36 025397 call prepare_disconnect +0x5e37 025398 branch accept_lmp_msg +: 025400 accept_lmp_msg: +0x5e38 025401 jam lmp_accepted ,mem_lmo_opcode2 +0x5e39 025402 rtn +: 025404 parse_lmp_incr_power: +0x5e3a 025405 jam lmp_max_power ,mem_lmo_opcode2 +0x5e3b 025406 rtn +: 025408 parse_lmp_decr_power: +0x5e3c 025409 jam lmp_min_power ,mem_lmo_opcode2 +0x5e3d 025410 rtn +: 025412 parse_lmp_version_res: +0x5e3e 025413 fetch 1 ,mem_conn_sm +0x5e3f 025414 rtneq conn_sm_wait_version +0x5e40 025416 jam conn_sm_send_features ,mem_conn_sm +0x5e41 025418 rtn +: 025421 parse_lmp_auto_rate: +0x5e42 025422 rtn +: 025424 parse_lmp_in_rand: +0x5e43 025425 call lmp_copy_rand +0x5e44 025426 jam pincode_state_wait_pincode ,mem_pincode_state +0x5e45 025427 jam bt_evt_pincode_req ,mem_fifo_temp +0x5e46 025428 call ui_ipc_send_event +0x5e47 025430 call tid_check +0x5e48 025431 nbranch lmp_accept_inrand ,true +0x5e49 025433 nbranch parse_lmp_inrand_res ,master +0x5e4a 025434 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5e4b 025435 jam lmp_in_rand ,mem_lmi_opcode2 +0x5e4c 025436 jam transaction_collision ,mem_lmo_reason2 +0x5e4d 025437 rtn +: 025438 parse_lmp_inrand_res: +0x5e4e 025439 fetch 1 ,mem_op +0x5e4f 025440 set1 op_inrand_req ,pdata +0x5e50 025441 store 1 ,mem_op +0x5e51 025442 rtn +: 025445 pop_tid_follow: +0x5e52 025446 fetcht 1 ,mem_state_map +0x5e53 025447 nsetflag blank ,smap_lmptid ,temp +0x5e54 025448 storet 1 ,mem_state_map +0x5e55 025449 rtn +: 025452 push_tid_follow: +0x5e56 025453 fetch 1 ,mem_lmo_tid2 +0x5e57 025454 rshift pdata ,pdata +0x5e58 025455 and_into 1 ,pdata +0x5e59 025456 rtn +: 025458 parse_lmp_au_rand_moudle: +0x5e5a 025459 fetch 1 ,mem_nv_data_number +0x5e5b 025460 rtn blank +0x5e5c 025461 fetch 1 ,mem_pairing_auth +0x5e5d 025462 call load_device_list ,blank +0x5e5e 025463 rtn +: 025465 parse_lmp_au_rand: +0x5e5f 025466 call parse_lmp_au_rand_moudle +0x5e60 025467 call push_tid_follow +0x5e61 025468 store 1 ,mem_sres_tid +0x5e62 025469 call lmp_copy_rand +0x5e63 025470 jam lmp_sres ,mem_lmo_opcode2 +0x5e64 025471 fetch 1 ,mem_link_key_exists +0x5e65 025472 nrtn blank +0x5e66 025473 fetch 1 ,mem_state +0x5e67 025474 rtnbit1 state_combkey +0x5e68 025475 jam key_missing ,mem_lmo_reason2 +0x5e69 025476 branch reject_lmp_packet +: 025478 parse_lmp_sres: +0x5e6a 025479 arg mem_plap ,rega +0x5e6b 025480 call function_e1 +0x5e6c 025481 fetch 4 ,mem_rxbuf + 1 +0x5e6d 025482 fetcht 4 ,mem_input_store +0x5e6e 025483 isub temp ,null +0x5e6f 025484 branch authentication_ok ,zero +0x5e70 025485 jam lmp_detach ,mem_lmo_opcode2 +0x5e71 025486 jam authentication_failure_error ,mem_disconn_reason_send +0x5e72 025487 rtn +: 025488 authentication_ok: +0x5e73 025489 call authentication_ok_common +0x5e74 025490 fetch 1 ,mem_ssp_enable +0x5e75 025491 branch pairing_success ,blank +0x5e76 025492 rtn +: 025495 authentication_ok_common: +0x5e77 025496 call copy_aco +0x5e78 025497 call linkkey_ready +0x5e79 025498 fetch 1 ,mem_op +0x5e7a 025499 isolate1 op_auth_req ,pdata +0x5e7b 025500 set0 op_auth_req ,pdata +0x5e7c 025501 store 1 ,mem_op +0x5e7d 025502 fetch 1 ,mem_conn_sm +0x5e7e 025503 beq conn_sm_auth_wait ,authentication_ok_conn_sm +0x5e7f 025504 beq conn_sm_pairing_wait ,authentication_ok_conn_sm +0x5e80 025505 rtn +: 025506 authentication_ok_conn_sm: +0x5e81 025507 fetch 1 ,mem_pairing_auth +0x5e82 025508 rtnne defalt_pairing_auth +0x5e83 025509 fetch 1 ,mem_state_map +0x5e84 025510 rtnbit1 smap_encryption +0x5e85 025511 branch host_create_conn_encrypt +: 025513 parse_lmp_comb_key: +0x5e86 025514 arg mem_rxbuf + 1 ,rega +0x5e87 025515 arg mem_kinit ,regb +0x5e88 025516 arg mem_random_number ,contw +0x5e89 025517 call xor16 +0x5e8a 025518 arg mem_plap ,rega +0x5e8b 025519 call generate_linkkey +0x5e8c 025520 jam lmp_au_rand ,mem_lmo_opcode2 +0x5e8d 025521 fetch 1 ,mem_state +0x5e8e 025522 bbit0 state_combkey ,lmp_generate_key +0x5e8f 025523 rtn +: 025525 parse_lmp_name_res: +0x5e90 025526 fetch 2 ,mem_len +0x5e91 025527 add pdata ,-3 ,loopcnt +0x5e92 025528 fetcht 1 ,mem_rxbuf + 1 +0x5e93 025529 setarg mem_tmp_buffer +0x5e94 025530 iadd temp ,contw +0x5e95 025531 arg mem_rxbuf + 3 ,contr +0x5e96 025532 call memcpy +0x5e97 025533 fetcht 1 ,mem_name_offset +0x5e98 025534 fetch 1 ,mem_rxbuf + 2 +0x5e99 025535 isub temp ,pdata +0x5e9a 025536 sub pdata ,14 ,null +0x5e9b 025537 branch parse_lmp_name_res_end ,positive +0x5e9c 025538 add temp ,14 ,pdata +0x5e9d 025539 store 1 ,mem_name_offset +0x5e9e 025540 jam lmp_name_req ,mem_lmo_opcode2 +0x5e9f 025541 rtn +: 025542 parse_lmp_name_res_end: +0x5ea0 025543 fetch 1 ,mem_state_map +0x5ea1 025544 set1 smap_name_res ,pdata +0x5ea2 025545 store 1 ,mem_state_map +0x5ea3 025546 bbit1 smap_name_req ,lmp_disconnect +0x5ea4 025547 rtn +: 025548 parse_lmp_name_req: +0x5ea5 025549 fetch 1 ,mem_rxbuf + 1 +0x5ea6 025550 store 1 ,mem_lmi_opcode2 +0x5ea7 025551 jam lmp_name_res ,mem_lmo_opcode2 +0x5ea8 025552 rtn +: 025554 parse_lmp_conn_req: +0x5ea9 025555 branch accept_lmp_msg +: 025557 parse_lmp_timing_accuracy_req: +0x5eaa 025558 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 +0x5eab 025559 rtn +: 025561 parse_lmp_features_req: +0x5eac 025562 jam lmp_features_res ,mem_lmo_opcode2 +0x5ead 025563 rtn +: 025565 parse_lmp_version_req: +0x5eae 025566 jam lmp_version_res ,mem_lmo_opcode2 +0x5eaf 025567 rtn +: 025569 parse_lmp_supervision_timeout: +0x5eb0 025572 rtn +: 025576 parse_lmp_sniff_subrating_req: +0x5eb1 025577 fetch 2 ,mem_tsniff +0x5eb2 025578 iforce temp +0x5eb3 025579 fetch 1 ,mem_rxbuf + 2 +0x5eb4 025580 store 1 ,mem_subsniff_rate +0x5eb5 025581 imul32 temp ,temp +0x5eb6 025582 fetch 2 ,mem_rxbuf + 3 +0x5eb7 025583 lshift pdata ,pdata +0x5eb8 025584 store 2 ,mem_subsniff_tcmax +0x5eb9 025585 fetch 4 ,mem_rxbuf + 5 +0x5eba 025586 lshift pdata ,pdata +0x5ebb 025587 store 4 ,mem_subsniff_instant +0x5ebc 025589 deposit temp +0x5ebd 025590 store 2 ,mem_subsniff_tsniff +0x5ebe 025591 rtn +: 025592 parse_lmpext_packet_type_table_req: +0x5ebf 025593 fetcht 1 ,mem_ptt +0x5ec0 025594 fetch 1 ,mem_rxbuf + 2 +0x5ec1 025595 ixor temp ,null +0x5ec2 025596 nbranch reject_unknown_ext_packet ,zero +0x5ec3 025597 isolate1 0 ,pdata +0x5ec4 025598 fetch 1 ,mem_state_map +0x5ec5 025599 setflag true ,smap_edr ,pdata +0x5ec6 025600 store 1 ,mem_state_map +0x5ec7 025601 jam lmp_ext_accepted ,mem_lmo_opcode2 +0x5ec8 025602 jam lmp_packet_type_table_req ,mem_lmi_opcode2 +0x5ec9 025603 rtn +: 025606 parse_lmp_sniff_subrating_res: +: 025607 parse_lmp_preferred_rate: +: 025608 parse_lmp_max_power: +: 025609 parse_lmp_min_power: +0x5eca 025610 rtn +: 025611 parse_lmp_page_mode_req: +0x5ecb 025613 branch accept_lmp_msg +: 025614 parse_lmp_page_scan_mode_req: +0x5ecc 025617 branch accept_lmp_msg +: 025621 parse_lmp_slot_offset: +0x5ecd 025622 fetch 2 ,mem_rxbuf + 1 +0x5ece 025623 store 2 ,mem_slot_offset +0x5ecf 025624 rtn +: 025626 parse_lmp_sniff_req_check_sniff_para: +0x5ed0 025627 fetch 2 ,mem_rxbuf + 4 +0x5ed1 025628 fetcht 1 ,mem_lpm_mult +0x5ed2 025629 imul32 temp ,pdata +0x5ed3 025630 arg 0x640 ,temp +0x5ed4 025631 isub temp ,null +0x5ed5 025633 rtn +: 025635 parse_lmp_sniff_req: +0x5ed6 025636 fetch 2 ,mem_rxbuf + 6 +0x5ed7 025637 branch lmp_reject_sniff ,blank +0x5ed8 025638 call parse_lmp_sniff_req_check_sniff_para +0x5ed9 025639 branch lmp_reject_sniff ,positive +0x5eda 025640 fetch 1 ,mem_device_option +0x5edb 025641 sub pdata ,dvc_op_module ,null +0x5edc 025642 call module_set_lpm_mult_2 ,zero +0x5edd 025643 fetch 1 ,mem_state +0x5ede 025644 bbit1 state_insniff ,lmp_reject_sniff +0x5edf 025645 fetch 2 ,mem_rxbuf + 2 +0x5ee0 025646 lshift pdata ,pdata +0x5ee1 025647 store 2 ,mem_dsniff +0x5ee2 025648 fetch 2 ,mem_rxbuf + 4 +0x5ee3 025649 lshift pdata ,pdata +0x5ee4 025650 store 2 ,mem_tsniff +0x5ee5 025651 fetch 2 ,mem_rxbuf + 6 +0x5ee6 025652 store 1 ,mem_sniff_attempt +0x5ee7 025653 iforce temp +0x5ee8 025654 fetch 2 ,mem_rxbuf + 8 +0x5ee9 025655 store 1 ,mem_sniff_timeout +0x5eea 025656 isub temp ,null +0x5eeb 025657 nbranch set_big_value_to_attempt ,positive +0x5eec 025658 store 1 ,mem_sniff_attempt +: 025659 set_big_value_to_attempt: +0x5eed 025661 jam lmp_accepted ,mem_lmo_opcode2 +0x5eee 025662 jam lmp_sniff_req ,mem_lmi_opcode2 +0x5eef 025663 rtn +: 025665 lmp_reject_sniff: +0x5ef0 025666 jam pdu_not_allowed ,mem_lmo_reason2 +0x5ef1 025667 branch reject_lmp_packet +: 025669 parse_lmp_start_encryption_req: +0x5ef2 025670 call accept_lmp_msg +0x5ef3 025671 call lmp_copy_rand +0x5ef4 025672 call function_e3 +0x5ef5 025673 branch start_encryption +: 025675 parse_lmp_stop_encryption_req: +0x5ef6 025676 call accept_lmp_msg +0x5ef7 025677 branch stop_encryption +: 025680 parse_lmp_switch_req: +0x5ef8 025681 fetch 4 ,mem_rxbuf + 1 +0x5ef9 025682 lshift pdata ,pdata +0x5efa 025684 branch parse_lmp_switch_accept ,master +0x5efb 025685 fetcht 1 ,mem_link_key_exists +0x5efc 025686 nbranch parse_lmp_switch_req_clear_mark ,blank +: 025687 parse_lmp_switch_req_not_accept: +0x5efd 025688 jam lmp_not_accepted ,mem_lmo_opcode2 +0x5efe 025689 jam lmp_switch_req ,mem_lmi_opcode2 +0x5eff 025690 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f00 025691 rtn +: 025692 parse_lmp_switch_req_clear_mark: +0x5f01 025693 jam lmp_slot_offset ,mem_lmo_opcode2 +0x5f02 025694 jam 0 ,mem_conn_sm +0x5f03 025695 branch role_switch_prepare +: 025697 parse_lmp_switch_accept: +0x5f04 025698 call role_switch_prepare +0x5f05 025699 set1 mark_reconn_recieve_switch ,mark +0x5f06 025700 fetch 1 ,mem_connection_options +0x5f07 025701 set0 connection_switch ,pdata +0x5f08 025702 store 1 ,mem_connection_options +0x5f09 025703 branch accept_lmp_msg +: 025707 parse_lmp_temp_rand: +: 025708 parse_lmp_temp_key: +: 025709 parse_lmp_timing_accuracy_res: +: 025710 parse_lmp_unit_key: +: 025711 parse_lmp_use_semi_permanend_key: +0x5f0a 025712 rtn +: 025715 parse_lmp_unsniff_req: +0x5f0b 025716 jam lmp_accepted ,mem_lmo_opcode2 +0x5f0c 025717 jam lmp_unsniff_req ,mem_lmi_opcode2 +0x5f0d 025718 jam bt_evt_remote_unsniff ,mem_fifo_temp +0x5f0e 025719 call ui_ipc_send_event +0x5f0f 025720 branch sniff_exit +: 025722 parse_lmp_encapsulated_header: +0x5f10 025723 fetch 1 ,mem_rxbuf + 1 +0x5f11 025724 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject +0x5f12 025725 fetch 1 ,mem_rxbuf + 2 +0x5f13 025726 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject +0x5f14 025727 fetch 1 ,mem_rxbuf + 3 +0x5f15 025728 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject +0x5f16 025729 call check_localsm +0x5f17 025730 branch parse_lmp_encapsulated_header_master ,true +0x5f18 025731 jam sp_stat_key_recv ,mem_sp_state +: 025732 parse_lmp_encapsulated_header_master: +0x5f19 025733 jam lmp_accepted ,mem_lmo_opcode2 +0x5f1a 025734 jam lmp_encapsulated_header ,mem_lmi_opcode2 +0x5f1b 025735 branch parse_rx_done +: 025737 parse_lmp_encapsulated_header_reject: +0x5f1c 025738 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f1d 025739 branch reject_lmp_packet +: 025741 parse_lmp_accepted_encapsulated_header: +0x5f1e 025744 jam lmp_encapsulated_payload ,mem_lmo_opcode2 +0x5f1f 025746 rtn +: 025747 parse_lmp_accepted_simple_pairing_number: +0x5f20 025748 fetch 1 ,mem_ssp_mode_flag +0x5f21 025749 beq ssp_mode_ssp_pin_flag ,parse_lmp_accepted_simple_pairing_number_ssp_pin +0x5f22 025750 beq ssp_mode_passkey_entry_flag ,parse_lmp_accepted_simple_pairing_number_passkey +: 025751 parse_lmp_accepted_simple_pairing_number_common: +0x5f23 025752 call check_localsm +0x5f24 025753 rtn true +0x5f25 025754 jam sp_stat_confirm_recv ,mem_sp_state +0x5f26 025755 rtn +: 025757 parse_lmp_accepted_simple_pairing_number_ssp_pin: +0x5f27 025758 call g_noninit_number_confirm +0x5f28 025759 jam bt_evt_bt_gkey_generate ,mem_fifo_temp +0x5f29 025760 call ui_ipc_send_event +0x5f2a 025761 branch parse_lmp_accepted_simple_pairing_number_common +: 025764 parse_lmp_accepted_simple_pairing_number_passkey: +0x5f2b 025765 call check_localsm +0x5f2c 025766 rtn true +0x5f2d 025767 fetch 1 ,mem_authentication_passkey_times +0x5f2e 025768 beq 19 ,authentication_passkey_end +0x5f2f 025769 increase 1 ,pdata +0x5f30 025770 store 1 ,mem_authentication_passkey_times +: 025773 authentication_passkey: +0x5f31 025774 jam sp_flag_commit ,mem_sp_flag +0x5f32 025775 jam sp_stat_commit_calc ,mem_sp_state +0x5f33 025776 fetch 1 ,mem_authentication_passkey_times +0x5f34 025777 copy pdata ,queue +0x5f35 025778 fetch 6 ,mem_pin +0x5f36 025779 qisolate1 pdata +0x5f37 025780 setarg 0x80 +0x5f38 025781 setflag true ,0 ,pdata +0x5f39 025782 store 1 ,mem_passkey_1bit +0x5f3a 025783 rtn +: 025785 authentication_passkey_end: +0x5f3b 025786 jam sp_stat_confirm_recv ,mem_sp_state +0x5f3c 025787 rtn +: 025789 parse_lmp_accepted_dhkey_check: +0x5f3d 025790 call parse_lmp_accepted_dhkey_check_common +: 025791 pairing_success: +0x5f3e 025792 fetch 1 ,mem_flag_pairing_state +0x5f3f 025793 rtn blank +0x5f40 025794 jam flag_pairing_state_not_pairing ,mem_flag_pairing_state +0x5f41 025795 jam bt_evt_bt_pairing_success ,mem_fifo_temp +0x5f42 025796 branch ui_ipc_send_event +: 025799 parse_lmp_accepted_dhkey_check_common: +0x5f43 025801 call check_localsm +0x5f44 025802 ncall g_noninit ,true +0x5f45 025803 call g_init ,true +0x5f46 025804 call check_localsm +0x5f47 025805 rtn true +0x5f48 025806 jam sp_stat_link_key_calc ,mem_sp_state +0x5f49 025807 jam sp_flag_commit ,mem_sp_flag +0x5f4a 025808 rtn +: 025810 parse_simple_pairing_confirm: +0x5f4b 025811 arg mem_sp_confirm_remote ,contw +0x5f4c 025812 arg mem_rxbuf + 1 ,contr +0x5f4d 025813 call memcpy16 +0x5f4e 025814 fetch 1 ,mem_ssp_mode_flag +0x5f4f 025815 rtneq ssp_mode_passkey_entry_flag +0x5f50 025816 branch master_set_mem_master_sp_flag +: 025818 parse_lmp_encapsulated_payload: +0x5f51 025819 fetch 1 ,mem_master_sp_state +0x5f52 025820 beq sp_stat_random_send ,parse_encapsulated_payload_master +0x5f53 025821 fetch 1 ,mem_sp_state +0x5f54 025822 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject +: 025823 parse_encapsulated_payload_master: +0x5f55 025824 fetch 1 ,mem_sp_remote_key_recv_count +0x5f56 025825 sub pdata ,0x20 ,contw +0x5f57 025826 nbranch parse_lmp_encapsulated_payload_reject ,positive +0x5f58 025827 arg mem_sp_pubkey_remote ,contw +0x5f59 025828 iadd contw ,contw +0x5f5a 025829 fetch 8 ,mem_rxbuf + 1 +0x5f5b 025830 istore 8 ,contw +0x5f5c 025831 fetch 8 ,mem_rxbuf + 9 +0x5f5d 025832 istore 8 ,contw +0x5f5e 025833 fetch 1 ,mem_sp_remote_key_recv_count +0x5f5f 025834 increase 16 ,pdata +0x5f60 025835 store 1 ,mem_sp_remote_key_recv_count +0x5f61 025836 bne encapsulated_len_p192 ,accept_lmp_msg +: 025837 parse_lmp_encapsulated_payload_completed: +0x5f62 025838 call check_localsm +0x5f63 025839 branch accept_lmp_msg ,true +0x5f64 025840 jam sp_key_valid ,mem_sp_remote_key_invalid +0x5f65 025841 jam sp_stat_key_generate ,mem_sp_state +0x5f66 025842 jam sp_flag_commit ,mem_sp_flag +0x5f67 025843 branch accept_lmp_msg +: 025844 parse_lmp_encapsulated_payload_reject: +0x5f68 025845 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f69 025846 branch reject_lmp_packet +: 025847 parse_lmp_accepted_encapsulated_payload: +0x5f6a 025848 fetch 1 ,mem_sp_local_key_send_count +0x5f6b 025849 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted +0x5f6c 025850 jam lmp_encapsulated_payload ,mem_lmo_opcode2 +0x5f6d 025851 branch parse_rx_done +: 025853 parse_lmp_encapsulated_payload_all_accepted: +0x5f6e 025854 call check_localsm +0x5f6f 025855 branch parse_lmp_encapsulated_payload_all_accepted_master ,true +0x5f70 025856 fetch 1 ,mem_ssp_mode_flag +0x5f71 025857 beq ssp_mode_passkey_entry_flag ,parse_lmp_encapsulated_payload_all_accepted_get_passkey +0x5f72 025858 jam sp_flag_commit ,mem_sp_flag +0x5f73 025859 jam sp_stat_commit_calc ,mem_sp_state +0x5f74 025860 branch parse_rx_done +: 025862 parse_lmp_encapsulated_payload_all_accepted_get_passkey: +0x5f75 025863 jam bt_evt_bt_get_passkey ,mem_fifo_temp +0x5f76 025864 branch ui_ipc_send_event +: 025867 parse_lmp_encapsulated_payload_all_accepted_master: +0x5f77 025869 branch parse_rx_done +: 025871 parse_lmp_simple_pairing_number: +0x5f78 025872 fetch 1 ,mem_master_sp_state +0x5f79 025873 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master +0x5f7a 025874 fetch 1 ,mem_sp_state +0x5f7b 025875 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject +: 025876 parse_lmp_simple_pairing_number_master: +0x5f7c 025877 arg mem_sp_random_remote ,contw +0x5f7d 025878 fetch 8 ,mem_rxbuf + 1 +0x5f7e 025879 istore 8 ,contw +0x5f7f 025880 fetch 8 ,mem_rxbuf + 9 +0x5f80 025881 istore 8 ,contw +0x5f81 025882 call check_localsm +0x5f82 025883 branch parse_lmp_simple_pairing_number_master0 ,true +0x5f83 025884 jam sp_stat_random_send ,mem_sp_state +0x5f84 025885 jam sp_flag_commit ,mem_sp_flag +0x5f85 025886 branch accept_lmp_msg +: 025887 parse_lmp_simple_pairing_number_master0: +0x5f86 025888 jam sp_stat_commit_calc ,mem_master_sp_state +0x5f87 025889 branch master_set_mem_master_sp_flag +: 025892 parse_lmp_simple_pairing_number_reject: +0x5f88 025893 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f89 025894 branch reject_lmp_packet +: 025896 parse_dhkey_check: +0x5f8a 025897 fetch 1 ,mem_master_sp_state +0x5f8b 025898 beq sp_stat_confirm_send ,parse_dhkey_check_master +0x5f8c 025899 fetch 1 ,mem_sp_state +0x5f8d 025900 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject +: 025901 parse_dhkey_check_master: +0x5f8e 025902 arg mem_sp_check_result ,contw +0x5f8f 025903 arg mem_rxbuf + 1 ,contr +0x5f90 025904 call memcpy16 +0x5f91 025905 call check_localsm +0x5f92 025906 branch parse_dhkey_check_master0 ,true +0x5f93 025907 fetch 1 ,mem_ssp_mode_flag +0x5f94 025908 beq ssp_mode_ssp_pin_flag ,number_comparison_mode +: 025909 number_comparison_successed: +0x5f95 025910 jam 0 ,mem_flag_mode_ssp_pin +0x5f96 025911 jam sp_stat_confirm_check ,mem_sp_state +0x5f97 025912 jam sp_flag_commit ,mem_sp_flag +0x5f98 025913 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x5f99 025914 branch parse_rx_done +: 025916 parse_dhkey_check_master0: +0x5f9a 025917 jam sp_stat_confirm_check ,mem_master_sp_state +0x5f9b 025918 jam sp_flag_commit ,mem_master_sp_flag +0x5f9c 025919 branch parse_rx_done +: 025920 parse_lmp_dhkey_check_reject: +0x5f9d 025921 jam pdu_not_allowed ,mem_lmo_reason2 +0x5f9e 025922 branch reject_lmp_packet +: 025924 number_comparison_mode: +0x5f9f 025925 fetch 1 ,mem_flag_mode_ssp_pin +0x5fa0 025926 bbit1 flag_mode_ssp_pin_reviceve_comparison_bit ,comparison_result +0x5fa1 025927 set1 flag_mode_ssp_pin_recieve_dhkey_bit ,pdata +0x5fa2 025928 store 1 ,mem_flag_mode_ssp_pin +0x5fa3 025929 rtn +: 025931 comparison_result: +0x5fa4 025932 bbit1 flag_mode_ssp_pin_comparison_result_bit ,number_comparison_successed +0x5fa5 025933 jam 0 ,mem_flag_mode_ssp_pin +0x5fa6 025934 branch parse_lmp_dhkey_check_reject +: 025937 parse_lmp_clkoffset_res: +0x5fa7 025938 branch parse_rx_done +: 025940 parse_lmp_encryption_mode_req: +0x5fa8 025941 fetch 1 ,mem_connection_options +0x5fa9 025942 set0 connection_encrypt +0x5faa 025943 store 1 ,mem_connection_options +0x5fab 025944 call accept_lmp_msg +0x5fac 025945 nrtn master +0x5fad 025946 fetch 1 ,mem_rxbuf + 1 +0x5fae 025947 fetcht 1 ,mem_op +0x5faf 025948 setflag blank ,op_stop_enc ,temp +0x5fb0 025949 nsetflag blank ,op_start_enc ,temp +0x5fb1 025950 storet 1 ,mem_op +0x5fb2 025951 rtn +: 025953 parse_lmp_features_res: +0x5fb3 025954 fetcht 8 ,mem_rxbuf + 1 +: 025955 parse_lmp_features_res_not_hci: +0x5fb4 025956 fetch 1 ,mem_conn_sm +0x5fb5 025957 rtnne conn_sm_wait_features_res +0x5fb6 025959 fetch 1 ,mem_connection_options +0x5fb7 025960 bbit0 connection_feature_ext ,parse_lmp_send_conn +0x5fb8 025962 jam conn_sm_send_features_ext ,mem_conn_sm +0x5fb9 025963 rtn +: 025964 parse_lmp_send_conn: +0x5fba 025965 jam conn_sm_send_conn_req ,mem_conn_sm +0x5fbb 025966 rtn +: 025967 parse_lmp_test_activate: +0x5fbc 025968 fetch 1 ,mem_debug_config +0x5fbd 025969 store 1 ,mem_test_mode_old_debug_config +0x5fbe 025970 jam lmp_accepted ,mem_lmo_opcode2 +0x5fbf 025971 jam lmp_test_activate ,mem_lmi_opcode2 +0x5fc0 025972 rtn +: 025973 parse_lmp_test_control: +0x5fc1 025976 jam lmp_accepted ,mem_lmo_opcode2 +0x5fc2 025977 jam lmp_test_control ,mem_lmi_opcode2 +0x5fc3 025978 force 9 ,loopcnt +0x5fc4 025979 arg mem_rxbuf + 1 ,contr +0x5fc5 025980 arg mem_temp_payload ,contw +: 025981 parse_lmp_test_xor: +0x5fc6 025982 ifetch 1 ,contr +0x5fc7 025983 xor_into 0x55 ,pdata +0x5fc8 025984 istore 1 ,contw +0x5fc9 025985 loop parse_lmp_test_xor +0x5fca 025986 fetch 1 ,test_mode_scenario +0x5fcb 025987 fetcht 1 ,mem_tester_emulate +0x5fcc 025988 set0 tester_no_whitening ,temp +0x5fcd 025989 set0 tester_pattern_test ,temp +0x5fce 025990 beq exit_test_mode ,parse_lmp_test_control_exit +0x5fcf 025991 beq pause_test_mode ,parse_lmp_test_control_pause +0x5fd0 025992 beq closed_loop_back_acl ,parse_lmp_test_control_loopback +0x5fd1 025993 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite +0x5fd2 025994 beq closed_loop_back_sco ,parse_lmp_test_control_loopback +0x5fd3 025995 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite +0x5fd4 025996 beq zero_pattern ,parse_lmp_test_control_pattern +0x5fd5 025997 beq one_pattern ,parse_lmp_test_control_pattern +0x5fd6 025998 beq alt_pattern ,parse_lmp_test_control_pattern +0x5fd7 025999 beq alt2_pattern ,parse_lmp_test_control_pattern +0x5fd8 026000 beq pseudorandom ,parse_lmp_test_control_pattern +0x5fd9 026001 rtn +: 026002 parse_lmp_test_control_exit: +0x5fda 026004 fetch 1 ,mem_tester_emulate +0x5fdb 026005 set1 tester_exit ,pdata +0x5fdc 026006 set1 tester_change ,pdata +0x5fdd 026007 store 1 ,mem_tester_emulate +0x5fde 026008 rtn +: 026009 parse_lmp_test_control_pattern: +0x5fdf 026010 set1 tester_pattern_test ,temp +0x5fe0 026011 jam 5 ,mem_lch_code +0x5fe1 026012 fetch 2 ,test_mode_data_length +0x5fe2 026013 iforce loopcnt +0x5fe3 026014 store 2 ,mem_len +0x5fe4 026015 arg mem_rxbuf ,contw +0x5fe5 026016 call pn9 +: 026017 parse_lmp_test_control_loopback_nowhite: +0x5fe6 026018 set1 tester_no_whitening ,temp +: 026019 parse_lmp_test_control_loopback: +0x5fe7 026020 set1 tester_change ,temp +0x5fe8 026021 force 0 ,pdata +0x5fe9 026022 store 1 ,mem_slave_rcvcnt +0x5fea 026023 store 2 ,mem_tst_pktcnt_crc +0x5feb 026024 store 2 ,mem_tst_pktcnt_dmh +0x5fec 026025 store 2 ,mem_tst_pktcnt_hec +0x5fed 026026 store 2 ,mem_tst_pktcnt_sync +0x5fee 026027 fetch 1 ,test_mode_hopping_mode +0x5fef 026028 compare fixed_freq ,pdata ,0xff +0x5ff0 026029 setflag true ,tester_fixed_freq ,temp +0x5ff1 026030 storet 1 ,mem_tester_emulate +0x5ff2 026031 rtn +: 026033 parse_lmp_test_control_pause: +0x5ff3 026034 set0 mark_testmode ,mark +0x5ff4 026035 jam 0 ,mem_tester_emulate +0x5ff5 026036 fetch 1 ,mem_debug_config +0x5ff6 026037 set0 debug_tx_pattern ,pdata +0x5ff7 026038 store 1 ,mem_debug_config +0x5ff8 026039 rtn +: 026045 lmp_copy_rand: +0x5ff9 026046 arg mem_rxbuf + 1 ,contr +0x5ffa 026047 arg mem_random_number ,contw +0x5ffb 026048 branch memcpy16 +: 026050 lmp_generate_key: +0x5ffc 026051 jam lmp_comb_key ,mem_lmo_opcode2 +0x5ffd 026052 rtn +: 026054 lmp_start_encryption: +0x5ffe 026055 nrtn master +0x5fff 026056 jam lmp_start_encryption_req ,mem_lmo_opcode2 +0x6000 026057 rtn +: 026059 lmp_accept_inrand: +0x6001 026060 arg mem_lap ,rega +0x6002 026061 call generate_kinit +0x6003 026062 jam lmp_accepted ,mem_lmo_opcode2 +0x6004 026063 jam lmp_in_rand ,mem_lmi_opcode2 +0x6005 026064 rtn +: 026066 lmp_disconnect: +0x6006 026067 jam 10 ,mem_conn_timer +0x6007 026068 jam lmp_detach ,mem_lmo_opcode2 +0x6008 026069 jam local_host ,mem_disconn_reason_send +0x6009 026070 rtn +: 026076 send_lmp: +0x600a 026077 bpatchx patch30_2 ,mem_patch30 +0x600b 026078 disable user +0x600c 026079 call lmo_fifo_process +0x600d 026080 fetch 1 ,mem_lmp_to_send +0x600e 026081 rtn blank +0x600f 026086 bbit1 7 ,send_lmp_escape +: 026087 send_lmp0: +0x6010 026088 beq lmp_name_req ,send_lmp_name_req +0x6011 026089 beq lmp_name_res ,send_lmp_name_res +0x6012 026090 beq lmp_accepted ,send_lmp_accepted +0x6013 026091 beq lmp_not_accepted ,send_lmp_not_accepted +0x6014 026092 beq lmp_features_req ,send_lmp_features_req +0x6015 026093 beq lmp_features_res ,send_lmp_features_res +0x6016 026094 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res +0x6017 026095 beq lmp_version_req ,send_lmp_version_req +0x6018 026096 beq lmp_version_res ,send_lmp_version_res +0x6019 026097 beq lmp_setup_complete ,send_lmp_setup_complete +0x601a 026098 beq lmp_supervision_timeout ,send_lmp_superto +0x601b 026099 beq lmp_host_connection_req ,send_lmp_no_payload +0x601c 026100 beq lmp_in_rand ,send_lmp_inrand +0x601d 026101 beq lmp_comb_key ,send_lmp_comb_key +0x601e 026102 beq lmp_au_rand ,send_lmp_aurand +0x601f 026103 beq lmp_sres ,send_lmp_sres +0x6020 026104 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req +0x6021 026105 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req +0x6022 026106 beq lmp_start_encryption_req ,send_lmp_start_encryption +0x6023 026107 beq lmp_detach ,send_lmp_detach +0x6024 026108 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req +0x6025 026109 beq lmp_unit_key ,send_lmp_unit_key +0x6026 026111 beq lmp_incr_power_req ,send_lmp_inc_power +0x6027 026112 beq lmp_clkoffset_res ,send_lmp_clkoffset_res +0x6028 026113 beq lmp_max_power ,send_lmp_nopayload_reply +0x6029 026114 beq lmp_max_slot ,send_lmp_max_slot +0x602a 026115 beq lmp_max_slot_req ,send_lmp_max_slot_req +0x602b 026116 beq lmp_min_power ,send_lmp_nopayload_reply +0x602c 026117 beq lmp_slot_offset ,send_lmp_slot_offset +0x602d 026118 beq lmp_switch_req ,send_lmp_switch_req +0x602e 026119 beq lmp_sniff_req ,send_lmp_sniff_req +0x602f 026120 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req +0x6030 026121 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req +0x6031 026122 beq lmp_unsniff_req ,send_lmp_unsniff_req +0x6032 026123 beq lmp_encapsulated_header ,send_lmp_encapsulated_header +0x6033 026124 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload +0x6034 026125 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm +0x6035 026126 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number +0x6036 026127 beq lmp_dhkey_check ,send_lmp_dhkey_check +0x6037 026128 beq lmp_auto_rate ,send_lmp_auto_rate +0x6038 026129 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res +0x6039 026131 beq lmp_clkoffset_req ,send_lmp_clkoffset_req +0x603a 026132 beq lmp_quality_of_service ,send_lmp_quality_of_service +0x603b 026133 beq lmp_test_activate ,send_lmp_test_activate +0x603c 026134 beq lmp_test_control ,send_lmp_test_control +: 026135 send_lmp_error: +0x603d 026136 branch assert +0x603e 026137 rtn +: 026138 send_lmp_escape: +0x603f 026139 beq lmp_ext_accepted ,send_lmpext_accepted +0x6040 026140 beq lmp_ext_features_res ,send_lmpext_features_res +0x6041 026141 beq lmp_not_accepted_ext ,send_lmpext_not_accepted +0x6042 026142 beq lmp_ext_features_req ,send_lmpext_features_req +0x6043 026143 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req +0x6044 026144 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req +0x6045 026145 beq lmp_io_cap_req ,send_lmp_io_cap_req +0x6046 026146 beq lmp_io_cap_res ,send_lmpext_io_cap_res +0x6047 026147 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req +0x6048 026148 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res +0x6049 026149 branch assert +: 026155 send_lmp_accepted: +0x604a 026156 force 2 ,pdata +0x604b 026157 call msg_send_lmp +0x604c 026158 fetch 1 ,mem_lmi_opcode +0x604d 026159 istore 1 ,contw +0x604e 026160 call send_lmp_follow +0x604f 026161 bpatchx patch30_3 ,mem_patch30 +0x6050 026162 fetch 1 ,mem_lmi_opcode +0x6051 026163 beq lmp_in_rand ,send_lmp_accepted_inrand +0x6052 026164 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode +0x6053 026165 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key +0x6054 026166 beq lmp_sniff_req ,send_lmp_accept_sniff_req +0x6055 026167 beq lmp_host_connection_req ,send_lmp_accepted_connection +0x6056 026168 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check +0x6057 026169 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm +0x6058 026170 rtn +: 026172 send_create_conn_start_l2cap_timer_sm: +0x6059 026173 fetch 1 ,mem_conn_sm +0x605a 026174 rtn blank +0x605b 026175 jam conn_sm_wait_done ,mem_conn_sm +0x605c 026176 setarg timer_enpt_waite +0x605d 026177 arg enpt_delay_timer ,queue +0x605e 026178 branch timer_init +: 026180 send_lmp_accept_sniff_req: +0x605f 026181 branch sniff_init +: 026182 send_lmp_not_accepted: +0x6060 026183 force 3 ,pdata +0x6061 026184 call msg_send_lmp +0x6062 026185 fetch 1 ,mem_lmi_opcode +0x6063 026186 beq lmp_au_rand ,send_not_accept_aurand +0x6064 026187 istore 1 ,contw +0x6065 026188 fetch 1 ,mem_lmo_reason +0x6066 026189 istore 1 ,contw +0x6067 026190 branch send_lmp_follow +: 026192 send_not_accept_aurand: +0x6068 026193 istore 1 ,contw +0x6069 026194 fetch 1 ,mem_lmo_reason +0x606a 026195 istore 1 ,contw +0x606b 026196 arg mem_sres_tid ,temp +0x606c 026197 branch special_tid_store +: 026199 send_lmpext_accepted: +0x606d 026200 force 4 ,queue +0x606e 026201 call send_lmpext +0x606f 026202 setarg lmp_escape +0x6070 026203 istore 1 ,contw +0x6071 026204 fetch 1 ,mem_lmi_opcode +0x6072 026205 set0 7 ,pdata +0x6073 026206 istore 1 ,contw +0x6074 026207 fetch 1 ,mem_lmi_opcode +0x6075 026208 branch send_lmp_follow +: 026210 send_lmpext_not_accepted: +0x6076 026211 force 5 ,queue +0x6077 026212 call send_lmpext +0x6078 026213 setarg lmp_escape +0x6079 026214 istore 1 ,contw +0x607a 026215 fetch 1 ,mem_lmi_opcode +0x607b 026216 set0 7 ,pdata +0x607c 026217 istore 1 ,contw +0x607d 026218 fetch 1 ,mem_lmo_reason +0x607e 026219 istore 1 ,contw +0x607f 026220 branch send_lmp_follow +: 026223 send_lmp_accepted_inrand: +0x6080 026224 call clear_linkkey +0x6081 026225 call tid_check +0x6082 026226 rtn true +0x6083 026227 branch lmp_generate_key +: 026229 send_lmp_accepted_enc_mode: +0x6084 026230 fetch 1 ,mem_op +0x6085 026231 bbit1 op_start_enc ,send_lmp_accepted_enc_start +0x6086 026232 rtnbit0 op_stop_enc +0x6087 026233 jam lmp_stop_encryption_req ,mem_lmo_opcode2 +0x6088 026234 set0 op_stop_enc ,pdata +0x6089 026235 call tid_reply +0x608a 026236 branch send_lmp_accepted_enc_exit +: 026237 send_lmp_accepted_enc_start: +0x608b 026238 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 +0x608c 026239 set0 op_start_enc ,pdata +: 026240 send_lmp_accepted_enc_exit: +0x608d 026241 store 1 ,mem_op +0x608e 026242 rtn +: 026244 send_lmp_accepted_enc_key: +0x608f 026245 call check_localsm +0x6090 026246 branch lmp_start_encryption ,true +0x6091 026247 rtn +: 026249 send_lmp_accepted_connection: +0x6092 026250 jam lmp_packet_type_table_req ,mem_lmo_opcode2 +0x6093 026252 fetch 1 ,mem_lmp_conn_state +0x6094 026253 set1 received_conn_req ,pdata +0x6095 026254 store 1 ,mem_lmp_conn_state +0x6096 026255 jam bt_evt_bb_connected ,mem_fifo_temp +0x6097 026256 branch ui_ipc_send_event +: 026259 send_lmp_accept_dhkey_check: +0x6098 026260 rtn +: 026264 send_lmpext_features_res: +0x6099 026265 force 12 ,queue +0x609a 026266 call send_lmpext +0x609b 026267 setarg 0x01 +0x609c 026268 istore 1 ,contw +0x609d 026269 fetch 2 ,mem_lmpext_ssp_enable +0x609e 026270 istore 2 ,contw +0x609f 026271 setarg 0 +0x60a0 026272 istore 3 ,contw +0x60a1 026273 setarg 0x00 +0x60a2 026274 istore 4 ,contw +0x60a3 026275 branch send_lmp_reply +: 026276 send_lmpext_io_cap_res: +0x60a4 026277 force 5 ,queue +0x60a5 026278 call send_lmpext +0x60a6 026279 fetch 3 ,mem_sp_iocap_local +0x60a7 026280 istore 3 ,contw +0x60a8 026281 call send_lmp_reply +0x60a9 026282 jam flag_pairing_state_pairing ,mem_flag_pairing_state +0x60aa 026283 fetch 1 ,mem_sp_iocap_local +0x60ab 026284 beq display_yesno ,responder_iocap_display_yesno +0x60ac 026285 beq keyboard_only ,responder_iocap_keyboard_only +0x60ad 026286 beq no_input_no_output ,responder_iocap_no_input_no_output +0x60ae 026287 rtn +: 026289 responder_iocap_keyboard_only: +0x60af 026290 fetch 1 ,mem_sp_iocap_remote +0x60b0 026291 beq display_only ,responder_iocap_keyboard_only_initiator_iocap_display_only +0x60b1 026292 beq display_yesno ,responder_iocap_keyboard_only_initiator_iocap_display_yesno +0x60b2 026293 beq keyboard_only ,responder_iocap_keyboard_only_initiator_iocap_keyboard_only +0x60b3 026294 beq no_input_no_output ,responder_iocap_keyboard_only_initiator_iocap_no_input_no_output +0x60b4 026295 rtn +: 026298 responder_iocap_display_yesno: +0x60b5 026299 fetch 1 ,mem_sp_iocap_remote +0x60b6 026300 beq display_only ,responder_iocap_display_yesno_initiator_iocap_display_only +0x60b7 026301 beq display_yesno ,responder_iocap_display_yesno_initiator_iocap_display_yesno +0x60b8 026302 beq keyboard_only ,responder_iocap_display_yesno_initiator_iocap_keyboard_only +0x60b9 026303 beq no_input_no_output ,responder_iocap_display_yesno_initiator_iocap_no_input_no_output +0x60ba 026304 rtn +: 026307 responder_iocap_no_input_no_output: +0x60bb 026308 fetch 1 ,mem_sp_iocap_remote +0x60bc 026309 beq display_only ,responder_iocap_no_input_no_output_initiator_iocap_display_only +0x60bd 026310 beq display_yesno ,responder_iocap_no_input_no_output_initiator_iocap_display_yesno +0x60be 026311 beq keyboard_only ,responder_iocap_no_input_no_output_initiator_iocap_keyboard_only +0x60bf 026312 beq no_input_no_output ,responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output +0x60c0 026313 rtn +: 026315 responder_iocap_keyboard_only_initiator_iocap_no_input_no_output: +: 026316 responder_iocap_display_yesno_initiator_iocap_no_input_no_output: +: 026317 responder_iocap_display_yesno_initiator_iocap_display_only: +: 026318 responder_iocap_no_input_no_output_initiator_iocap_display_only: +: 026319 responder_iocap_no_input_no_output_initiator_iocap_display_yesno: +: 026320 responder_iocap_no_input_no_output_initiator_iocap_keyboard_only: +: 026321 responder_iocap_no_input_no_output_initiator_iocap_no_input_no_output: +: 026322 set_ssp_mode_justwork: +0x60c1 026323 jam ssp_mode_just_work_flag ,mem_ssp_mode_flag +0x60c2 026324 fetch 1 ,mem_classic_bt_flag +0x60c3 026325 bbit1 flag_ssp_reject_justwork ,app_bt_disconnect +0x60c4 026326 rtn +: 026328 responder_iocap_display_yesno_initiator_iocap_display_yesno: +: 026329 set_ssp_mode_numeric_comparison: +0x60c5 026330 jam ssp_mode_ssp_pin_flag ,mem_ssp_mode_flag +0x60c6 026331 rtn +: 026333 responder_iocap_keyboard_only_initiator_iocap_display_yesno: +: 026334 responder_iocap_keyboard_only_initiator_iocap_keyboard_only: +: 026335 responder_iocap_keyboard_only_initiator_iocap_display_only: +: 026336 responder_iocap_display_yesno_initiator_iocap_keyboard_only: +: 026337 set_ssp_mode_passkey: +0x60c7 026338 jam ssp_mode_passkey_entry_flag ,mem_ssp_mode_flag +0x60c8 026339 rtn +: 026342 classic_bt_set_reject_justwork_flag: +0x60c9 026343 arg flag_ssp_reject_justwork ,queue +0x60ca 026344 branch classic_bluetooth_set_flag +: 026346 classic_bt_clr_reject_justwork_flag: +0x60cb 026347 arg flag_ssp_reject_justwork ,queue +0x60cc 026348 branch classic_bluetooth_clr_flag +: 026350 classic_bluetooth_set_flag: +0x60cd 026351 fetch 1 ,mem_classic_bt_flag +0x60ce 026352 qset1 pdata +0x60cf 026353 store 1 ,mem_classic_bt_flag +0x60d0 026354 rtn +: 026356 classic_bluetooth_clr_flag: +0x60d1 026357 fetch 1 ,mem_classic_bt_flag +0x60d2 026358 qset0 pdata +0x60d3 026359 store 1 ,mem_classic_bt_flag +0x60d4 026360 rtn +: 026363 send_lmp_io_cap_req: +0x60d5 026364 force 5 ,queue +0x60d6 026365 call send_lmpext +0x60d7 026366 fetch 3 ,mem_sp_iocap_local +0x60d8 026367 istore 3 ,contw +0x60d9 026368 branch send_lmp_request +: 026371 send_lmpext_sniff_subrating_req: +0x60da 026373 rtn +: 026374 send_lmpext_sniff_subrating_res: +0x60db 026375 force 9 ,queue +0x60dc 026376 call send_lmpext +0x60dd 026377 fetch 1 ,mem_subsniff_rate +0x60de 026378 istore 1 ,contw +0x60df 026379 fetch 2 ,mem_subsniff_tcmax +0x60e0 026380 istore 2 ,contw +0x60e1 026381 fetch 4 ,mem_subsniff_instant +0x60e2 026382 istore 4 ,contw +0x60e3 026383 branch send_lmp_reply +: 026385 send_lmp_name_res: +0x60e4 026386 force 17 ,pdata +0x60e5 026387 call msg_send_lmp +0x60e6 026388 fetch 1 ,mem_lmi_opcode +0x60e7 026389 copy pdata ,temp +0x60e8 026390 beq 0x00 ,send_lmp_name_res_offset_ok +0x60e9 026391 beq 0x0e ,send_lmp_name_res_offset_ok +0x60ea 026392 beq 0x1c ,send_lmp_name_res_offset_ok +0x60eb 026393 rtn +: 026394 send_lmp_name_res_offset_ok: +0x60ec 026395 istore 1 ,contw +0x60ed 026396 fetch 1 ,mem_local_name_length +0x60ee 026397 istore 1 ,contw +0x60ef 026398 arg 14 ,loopcnt +0x60f0 026399 setarg mem_local_name +0x60f1 026400 iadd temp ,contr +0x60f2 026401 call memcpy +0x60f3 026402 branch send_lmp_reply +: 026405 send_lmp_timing_accuracy_res: +0x60f4 026406 force 3 ,pdata +0x60f5 026407 call msg_send_lmp +0x60f6 026408 setarg 0x0114 +0x60f7 026409 istore 2 ,contw +0x60f8 026410 branch send_lmp_reply +: 026412 send_lmp_clkoffset_res: +0x60f9 026414 force 3 ,pdata +0x60fa 026415 call msg_send_lmp +0x60fb 026416 fetch 4 ,mem_clke_bt +0x60fc 026417 isub clkn_bt ,pdata +0x60fd 026418 branch send_lmp_clkoffset_res_master ,master +0x60fe 026419 sub pdata ,0 ,pdata +: 026420 send_lmp_clkoffset_res_master: +0x60ff 026422 rshift2 pdata ,pdata +0x6100 026423 set0 15 ,pdata +0x6101 026424 istore 2 ,contw +0x6102 026425 branch send_lmp_reply +: 026427 send_lmp_version_res: +0x6103 026428 force 6 ,pdata +0x6104 026429 call msg_send_lmp +0x6105 026430 fetch 5 ,mem_lmp_version +0x6106 026431 istore 5 ,contw +0x6107 026432 branch send_lmp_reply +: 026434 send_lmp_features_res: +0x6108 026435 force 9 ,pdata +0x6109 026436 call msg_send_lmp +0x610a 026437 fetch 8 ,mem_features +0x610b 026438 istore 8 ,contw +0x610c 026439 branch send_lmp_reply +: 026446 send_lmpext_features_req: +0x610d 026447 force 12 ,queue +0x610e 026448 call send_lmpext +0x610f 026449 setarg 0x01 +0x6110 026450 istore 1 ,contw +0x6111 026451 fetch 2 ,mem_lmpext_ssp_enable +0x6112 026452 istore 2 ,contw +0x6113 026453 setarg 0 +0x6114 026454 istore 3 ,contw +0x6115 026455 setarg 0x00 +0x6116 026456 istore 4 ,contw +0x6117 026457 branch send_lmp_request +: 026459 send_lmpext_packet_type_table_req: +0x6118 026460 force 3 ,queue +0x6119 026461 call send_lmpext +0x611a 026462 fetch 1 ,mem_ptt +0x611b 026463 istore 1 ,contw +0x611c 026464 disable user +0x611d 026465 call send_lmp_request +0x611e 026466 nrtn user +0x611f 026467 nrtn master +0x6120 026468 fetch 1 ,mem_afh_cfg +0x6121 026469 rtnbit0 afh_cfg_on +0x6122 026470 call afh_init +0x6123 026471 branch afh_open_all_channels +: 026474 ssp_enable: +0x6124 026475 bpatchx patch30_4 ,mem_patch30 +0x6125 026476 fetch 1 ,mem_features + 6 +0x6126 026477 set1 param_featrue_ssp ,pdata +0x6127 026478 store 1 ,mem_features + 6 +0x6128 026479 setarg param_lmpext_ssp_enable +0x6129 026480 store 2 ,mem_lmpext_ssp_enable +0x612a 026481 rtn +: 026483 ssp_disable: +0x612b 026484 bpatchx patch30_5 ,mem_patch30 +0x612c 026485 fetch 1 ,mem_features + 6 +0x612d 026486 set0 param_featrue_ssp ,pdata +0x612e 026487 store 1 ,mem_features + 6 +0x612f 026488 setarg 0 +0x6130 026489 store 2 ,mem_lmpext_ssp_enable +0x6131 026490 rtn +: 026492 afh_init: +0x6132 026493 jam 0x3 ,mem_afh_cfg +0x6133 026494 setarg 0 +0x6134 026495 store 4 ,mem_afh_timer +0x6135 026496 arg mem_afh_map_lo ,contw +0x6136 026497 call afh_reset_map +0x6137 026498 arg mem_afh_map_new ,contw +0x6138 026499 call afh_reset_map +0x6139 026500 arg mem_afh_classify_channel_map ,contw +0x613a 026501 call afh_reset_map +0x613b 026502 branch afh_clear_error_counter +: 026503 afh_open_all_channels: +0x613c 026504 arg mem_afh_map_new ,contw +0x613d 026505 call afh_reset_map +0x613e 026506 call afh_clear_error_counter +0x613f 026507 branch afh_set_send_flag +: 026510 afh_reset_map: +0x6140 026511 setarg 0xffffff +0x6141 026512 istore 3 ,contw +0x6142 026513 istore 3 ,contw +0x6143 026514 istore 3 ,contw +0x6144 026515 setarg 0x7f +0x6145 026516 istore 1 ,contw +0x6146 026517 rtn +: 026518 afh_clear_error_counter: +0x6147 026519 setarg 0 +0x6148 026520 store 2 ,mem_afh_error_total +0x6149 026521 rtn +: 026522 afh_set_send_flag: +0x614a 026523 fetch 1 ,mem_afh_cfg +0x614b 026524 set1 send_lmp_set_afh ,pdata +0x614c 026525 store 1 ,mem_afh_cfg +0x614d 026526 rtn +: 026529 send_lmpext_pause_encryption_req: +0x614e 026530 force 2 ,queue +0x614f 026531 call send_lmpext +0x6150 026532 nbranch send_lmp_reply ,master +0x6151 026534 branch send_lmp_request +: 026538 send_lmp_detach: +0x6152 026539 force 2 ,pdata +0x6153 026540 call msg_send_lmp +0x6154 026541 fetch 1 ,mem_disconn_reason_send +0x6155 026542 istore 1 ,contw +0x6156 026543 call send_lmp_request +: 026544 prepare_disconnect: +0x6157 026545 fetch 1 ,mem_op +0x6158 026546 set1 op_disconn ,pdata +0x6159 026547 store 1 ,mem_op +0x615a 026548 jam 50 ,mem_conn_timer +0x615b 026549 rtn +: 026552 send_lmp_no_payload: +0x615c 026553 force 1 ,pdata +0x615d 026554 call msg_send_lmp +0x615e 026555 branch send_lmp_request +: 026556 send_lmp_nopayload_reply: +0x615f 026557 force 1 ,pdata +0x6160 026558 call msg_send_lmp +0x6161 026559 branch send_lmp_reply +: 026562 send_lmp_encryption_mode_req: +0x6162 026563 force 2 ,pdata +0x6163 026564 call msg_send_lmp +0x6164 026565 fetch 1 ,mem_state_map +0x6165 026566 isolate0 smap_encryption ,pdata +0x6166 026567 setflag true ,0 ,pdata +0x6167 026568 and_into 1 ,pdata +0x6168 026569 istore 1 ,contw +0x6169 026570 branch send_lmp_request +: 026573 send_lmp_superto: +0x616a 026574 force 3 ,pdata +0x616b 026575 call msg_send_lmp +0x616c 026576 fetch 2 ,mem_supervision_to +0x616d 026577 istore 2 ,contw +0x616e 026578 branch send_lmp_request +: 026580 send_lmp_name_req: +0x616f 026581 jam 250 ,mem_conn_timer +0x6170 026582 force 2 ,pdata +0x6171 026583 call msg_send_lmp +0x6172 026584 fetch 1 ,mem_name_offset +0x6173 026585 istore 1 ,contw +0x6174 026586 branch send_lmp_request +: 026588 send_lmp_test_control: +0x6175 026589 force 10 ,pdata +0x6176 026590 call msg_send_lmp +0x6177 026591 arg mem_temp_payload ,contr +0x6178 026592 force 9 ,loopcnt +: 026593 send_lmp_test_control_loop: +0x6179 026594 ifetch 1 ,contr +0x617a 026595 xor_into 0x55 ,pdata +0x617b 026596 istore 1 ,contw +0x617c 026597 loop send_lmp_test_control_loop +0x617d 026598 branch send_lmp_request +: 026600 send_lmp_quality_of_service_req: +0x617e 026601 branch send_lmp_request +: 026602 send_lmp_unit_key: +0x617f 026603 branch send_lmp_request +: 026605 send_lmp_slot_offset: +0x6180 026606 rtn master +0x6181 026607 call calc_slot_offset +0x6182 026608 force 9 ,pdata +0x6183 026609 call msg_send_lmp +0x6184 026610 fetch 2 ,mem_slot_offset +0x6185 026611 istore 2 ,contw +0x6186 026612 fetch 3 ,mem_lap +0x6187 026613 istore 3 ,contw +0x6188 026614 fetch 1 ,mem_uap +0x6189 026615 istore 1 ,contw +0x618a 026616 fetch 2 ,mem_nap +0x618b 026617 istore 2 ,contw +0x618c 026618 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply +0x618d 026619 set0 mark_switch_initiated ,mark +0x618e 026620 call send_lmp_request +0x618f 026621 jam lmp_switch_req ,mem_lmo_opcode2 +0x6190 026622 rtn +: 026623 send_lmp_slot_offset_reply: +0x6191 026624 call send_lmp_reply +0x6192 026625 jam lmp_accepted ,mem_lmo_opcode2 +0x6193 026626 jam lmp_switch_req ,mem_lmi_opcode2 +0x6194 026627 rtn +: 026629 send_lmp_switch_req: +0x6195 026630 arg 0x200 ,temp +0x6196 026631 branch switch_on_native ,master +0x6197 026632 deposit clke_bt +0x6198 026633 branch switch_slack +: 026634 switch_on_native: +0x6199 026635 deposit clkn_bt +: 026636 switch_slack: +0x619a 026637 deposit bt_clk +0x619b 026638 iadd temp ,pdata +0x619c 026639 and_into 0x1fc ,pdata +0x619d 026640 store 4 ,mem_sniff_anchor +0x619e 026641 force 5 ,pdata +0x619f 026642 call msg_send_lmp +0x61a0 026643 fetch 4 ,mem_sniff_anchor +0x61a1 026644 rshift pdata ,pdata +0x61a2 026645 istore 4 ,contw +0x61a3 026646 branch send_lmp_request +: 026648 send_lmp_sniff_req: +0x61a4 026649 force 10 ,pdata +0x61a5 026650 call msg_send_lmp +0x61a6 026651 arg mem_sniff_payload ,contr +0x61a7 026652 ifetch 9 ,contr +0x61a8 026653 istore 9 ,contw +0x61a9 026654 branch send_lmp_request +: 026657 send_lmp_timing_accuracy_req: +0x61aa 026659 force 3 ,pdata +0x61ab 026660 call msg_send_lmp +0x61ac 026661 setarg 0x0114 +0x61ad 026662 istore 2 ,contw +0x61ae 026663 branch send_lmp_request +: 026665 send_lmp_unsniff_req: +0x61af 026667 force 1 ,pdata +0x61b0 026668 call msg_send_lmp +0x61b1 026677 branch send_lmp_request +: 026680 send_lmp_max_slot: +0x61b2 026681 force 2 ,pdata +0x61b3 026682 call msg_send_lmp +0x61b4 026683 fetch 1 ,mem_max_slot +0x61b5 026684 istore 1 ,contw +0x61b6 026685 branch send_lmp_request +: 026688 send_lmp_max_slot_req: +0x61b7 026689 force 2 ,pdata +0x61b8 026690 call msg_send_lmp +0x61b9 026691 setarg 0x05 +0x61ba 026692 istore 1 ,contw +0x61bb 026693 branch send_lmp_request +: 026696 send_lmp_inc_power: +0x61bc 026697 force 2 ,pdata +0x61bd 026698 call msg_send_lmp +0x61be 026699 setarg 0x00 +0x61bf 026700 istore 1 ,contw +0x61c0 026701 branch send_lmp_request +: 026704 send_lmp_setup_complete_by_module: +0x61c1 026705 jam lmp_max_slot_req ,mem_lmo_opcode2 +0x61c2 026706 rtn +: 026707 send_lmp_setup_complete: +0x61c3 026708 fetch 1 ,mem_device_option +0x61c4 026709 sub pdata ,dvc_op_module ,null +0x61c5 026710 call send_lmp_setup_complete_by_module ,zero +0x61c6 026711 fetch 1 ,mem_state +0x61c7 026712 set1 state_conn_comp ,pdata +0x61c8 026713 store 1 ,mem_state +0x61c9 026714 copy clkn_bt ,pdata +0x61ca 026715 store 4 ,mem_aurand_send_delay_time +0x61cb 026716 fetch 1 ,mem_lmp_conn_state +0x61cc 026717 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent +0x61cd 026718 set1 sent_setup_complete ,pdata +0x61ce 026719 store 1 ,mem_lmp_conn_state +0x61cf 026720 jam bt_evt_setup_complete ,mem_fifo_temp +0x61d0 026721 call ui_ipc_send_event +0x61d1 026722 force 1 ,pdata +0x61d2 026723 call msg_send_lmp +0x61d3 026724 branch send_lmp_request +: 026725 send_lmp_setup_complete_has_sent: +0x61d4 026726 jam 0 ,mem_lmp_to_send +0x61d5 026727 rtn +: 026729 send_lmp_version_req: +0x61d6 026730 force 6 ,pdata +0x61d7 026731 call msg_send_lmp +0x61d8 026732 fetch 5 ,mem_lmp_version +0x61d9 026733 istore 5 ,contw +0x61da 026734 branch send_lmp_request +: 026736 send_lmp_features_req: +0x61db 026737 force 9 ,pdata +0x61dc 026738 call msg_send_lmp +0x61dd 026739 fetch 8 ,mem_features +0x61de 026740 istore 8 ,contw +0x61df 026741 branch send_lmp_request +: 026743 sp_master_send_io_cap_get: +0x61e0 026744 jam sp_flag_commit ,mem_master_sp_flag +0x61e1 026745 fetch 1 ,mem_sp_local_key_invalid +0x61e2 026746 rtnne sp_key_valid +0x61e3 026747 jam sp_master_stat_start_done ,mem_master_sp_state +0x61e4 026748 rtn +: 026750 sp_master_send_io_cap_send: +0x61e5 026751 call tid_initiate +0x61e6 026752 jam lmp_io_cap_req ,mem_lmo_opcode2 +0x61e7 026753 jam sp_stat_key_send ,mem_master_sp_state +0x61e8 026754 rtn +: 026757 sp_master_send_lmp_encapsulated_header: +0x61e9 026758 call tid_initiate +0x61ea 026759 jam lmp_encapsulated_header ,mem_lmo_opcode2 +0x61eb 026760 jam sp_stat_random_send ,mem_master_sp_state +0x61ec 026761 rtn +: 026763 sp_master_commitment_compare: +0x61ed 026764 arg mem_sp_calc_result_high ,rega +0x61ee 026765 arg mem_sp_confirm_remote ,regb +0x61ef 026766 arg 16 ,loopcnt +0x61f0 026767 call string_compare +0x61f1 026768 branch sp_master_commitment_compare_success ,zero +0x61f2 026769 jam sp_stat_null ,mem_master_sp_state +0x61f3 026770 call master_clear_mem_master_sp_flag +0x61f4 026771 jam pdu_not_allowed ,mem_lmo_reason2 +0x61f5 026772 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +0x61f6 026773 branch reject_lmp_packet +: 026774 sp_master_commitment_compare_success: +0x61f7 026775 jam sp_stat_confirm_calc ,mem_master_sp_state +0x61f8 026776 call master_set_mem_master_sp_flag +0x61f9 026777 jam lmp_simple_pairing_number ,mem_lmi_opcode2 +0x61fa 026778 branch accept_lmp_msg +: 026782 sp_master_send_lmp_simple_pairing_number: +0x61fb 026783 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +0x61fc 026784 rtn +: 026788 sp_send_lmp_encapsulated_header: +0x61fd 026791 jam lmp_encapsulated_header ,mem_lmo_opcode2 +0x61fe 026793 rtn +: 026799 send_lmp_encapsulated_header: +0x61ff 026800 jam 0 ,mem_sp_local_key_send_count +0x6200 026801 force 4 ,pdata +0x6201 026802 call msg_send_lmp +0x6202 026803 force encapsulated_major_type_p192 ,pdata +0x6203 026804 istore 1 ,contw +0x6204 026805 force encapsulated_minor_type_p192 ,pdata +0x6205 026806 istore 1 ,contw +0x6206 026807 force encapsulated_len_p192 ,pdata +0x6207 026808 istore 1 ,contw +0x6208 026809 call check_localsm +0x6209 026810 branch send_lmp_request ,true +0x620a 026811 branch send_lmp_reply +: 026813 send_lmp_encapsulated_payload: +0x620b 026815 force 17 ,pdata +0x620c 026816 call msg_send_lmp +0x620d 026817 fetch 1 ,mem_sp_local_key_send_count +0x620e 026818 arg mem_sp_pubkey_local ,contr +0x620f 026819 iadd contr ,contr +0x6210 026820 ifetch 8 ,contr +0x6211 026821 istore 8 ,contw +0x6212 026822 ifetch 8 ,contr +0x6213 026823 istore 8 ,contw +0x6214 026824 fetch 1 ,mem_sp_local_key_send_count +0x6215 026825 increase 16 ,pdata +0x6216 026826 store 1 ,mem_sp_local_key_send_count +0x6217 026827 call check_localsm +0x6218 026828 branch send_lmp_request ,true +0x6219 026829 branch send_lmp_reply +: 026832 sp_send_lmp_simple_pairing_comfirm: +0x621a 026833 jam sp_stat_random_recv ,mem_sp_state +0x621b 026834 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 +0x621c 026835 rtn +: 026836 send_lmp_simple_pairing_comfirm: +0x621d 026839 force 17 ,pdata +0x621e 026840 call msg_send_lmp +0x621f 026841 arg mem_sp_calc_result_high ,contr +0x6220 026842 ifetch 8 ,contr +0x6221 026843 istore 8 ,contw +0x6222 026844 ifetch 8 ,contr +0x6223 026845 istore 8 ,contw +0x6224 026846 branch send_lmp_reply +: 026848 sp_send_lmp_simple_pairing_number: +0x6225 026849 jam lmp_simple_pairing_number ,mem_lmo_opcode2 +0x6226 026850 rtn +: 026852 send_lmp_simple_pairing_number: +0x6227 026854 call check_localsm +0x6228 026855 call sp_local_random_key_generator ,true +0x6229 026856 force 17 ,pdata +0x622a 026857 call msg_send_lmp +0x622b 026858 arg mem_sp_random_local ,contr +0x622c 026859 ifetch 8 ,contr +0x622d 026860 istore 8 ,contw +0x622e 026861 ifetch 8 ,contr +0x622f 026862 istore 8 ,contw +0x6230 026863 call check_localsm +0x6231 026864 nbranch send_lmp_reply ,true +0x6232 026865 branch send_lmp_request ,true +: 026867 master_sp_sm_end: +0x6233 026869 jam sp_stat_done ,mem_master_sp_state +: 026870 sp_aurand_send: +0x6234 026871 call tid_initiate +0x6235 026872 jam lmp_au_rand ,mem_lmo_opcode2 +0x6236 026873 call check_localsm_master +0x6237 026874 branch sp_master_key_prarm_push ,true +0x6238 026875 branch sp_link_key_prarm_push +: 026876 master_sp_send_lmp_dhkey_check: +0x6239 026877 call tid_reply +: 026878 sp_send_lmp_dhkey_check: +0x623a 026879 jam lmp_dhkey_check ,mem_lmo_opcode2 +0x623b 026880 rtn +: 026881 send_lmp_dhkey_check: +0x623c 026883 force 17 ,pdata +0x623d 026884 call msg_send_lmp +0x623e 026885 arg mem_sp_calc_result_high ,contr +0x623f 026886 ifetch 8 ,contr +0x6240 026887 istore 8 ,contw +0x6241 026888 ifetch 8 ,contr +0x6242 026889 istore 8 ,contw +0x6243 026890 call check_localsm +0x6244 026891 nbranch send_lmp_reply ,true +0x6245 026892 branch send_lmp_request ,true +: 026894 send_lmp_enc_key_size_mask_res: +0x6246 026895 force 3 ,pdata +0x6247 026896 call msg_send_lmp +0x6248 026897 setarg 0xfffe +0x6249 026898 istore 2 ,contw +0x624a 026899 branch send_lmp_reply +: 026901 send_lmp_auto_rate: +0x624b 026902 branch send_lmp_request +: 026903 send_lmp_clkoffset_req: +0x624c 026904 branch send_lmp_request +: 026905 send_lmp_quality_of_service: +0x624d 026906 branch send_lmp_request +: 026907 send_lmp_test_activate: +0x624e 026908 branch send_lmp_request +: 026913 send_lmp_comb_key: +0x624f 026914 call generate_random_number +0x6250 026915 arg mem_lap ,rega +0x6251 026916 call generate_linkkey +0x6252 026917 force 17 ,pdata +0x6253 026918 call msg_send_lmp +0x6254 026919 arg mem_kinit ,rega +0x6255 026920 arg mem_random_number ,regb +0x6256 026921 call xor16 +0x6257 026922 nbranch send_lmp_follow ,master +0x6258 026923 branch send_lmp_tid +: 026925 send_lmp_inrand: +0x6259 026926 call generate_random_number +0x625a 026927 arg mem_plap ,rega +0x625b 026928 call generate_kinit +: 026929 send_lmp_rand: +0x625c 026930 force 17 ,pdata +0x625d 026931 call msg_send_lmp +0x625e 026932 arg mem_random_number ,contr +0x625f 026933 call memcpy16 +0x6260 026934 fetch 1 ,mem_conn_sm +0x6261 026935 beq conn_sm_auth_wait ,send_lmp_request +0x6262 026936 beq conn_sm_pairing_wait ,send_lmp_request +0x6263 026937 branch send_lmp_tid +: 026939 send_lmp_aurand: +0x6264 026940 fetch 1 ,mem_pairing_auth +0x6265 026941 branch send_lmp_aurand_notpairing ,blank +0x6266 026942 call check_localsm +0x6267 026943 call tid_initiate ,true +0x6268 026944 ncall tid_reply ,true +0x6269 026945 branch send_lmp_aurand_common +: 026946 send_lmp_aurand_notpairing: +0x626a 026947 call tid_initiate +: 026948 send_lmp_aurand_common: +0x626b 026949 call generate_random_number +0x626c 026950 branch send_lmp_rand +: 026952 send_lmp_sres: +0x626d 026953 arg mem_lap ,rega +0x626e 026954 call function_e1 +0x626f 026955 force 5 ,pdata +0x6270 026956 call msg_send_lmp +0x6271 026957 fetch 4 ,mem_input_store +0x6272 026958 istore 4 ,contw +0x6273 026959 arg mem_sres_tid ,temp +0x6274 026960 call special_tid_store +0x6275 026961 call copy_aco +0x6276 026962 call check_localsm +0x6277 026963 branch send_lmp_sres_master ,true +0x6278 026964 jam done_encryp ,mem_wait_encryption +0x6279 026965 fetch 1 ,mem_pairing_auth +0x627a 026966 rtn blank +0x627b 026967 jam lmp_au_rand ,mem_lmo_opcode2 +: 026968 send_lmp_sres_master: +0x627c 026969 fetch 1 ,mem_link_key_exists +0x627d 026970 rtn blank +: 026971 send_lmp_sres_startenc: +0x627e 026972 call check_localsm +0x627f 026973 nbranch send_lmp_sres_startenc_slave ,true +0x6280 026974 fetch 1 ,mem_auth_enable +0x6281 026975 rtn blank +0x6282 026976 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x6283 026977 rtn +: 026978 send_lmp_sres_startenc_slave: +0x6284 026979 rtnmark0 mark_slave_in_rand_accepted +0x6285 026980 set0 mark_slave_in_rand_accepted ,mark +0x6286 026981 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x6287 026982 rtn +: 026986 send_lmp_start_encryption: +0x6288 026987 call generate_random_number +0x6289 026988 call function_e3 +0x628a 026989 force 17 ,pdata +0x628b 026990 call msg_send_lmp +0x628c 026991 arg mem_random_number ,contr +0x628d 026992 call memcpy16 +0x628e 026993 branch send_lmp_tid +: 026995 send_lmp_stop_encryption_req: +0x628f 026996 force 1 ,pdata +0x6290 026997 call msg_send_lmp +0x6291 026998 branch send_lmp_tid +: 027000 send_lmp_encryption_key_size_req: +0x6292 027001 force 2 ,pdata +0x6293 027002 call msg_send_lmp +0x6294 027003 force 16 ,pdata +0x6295 027004 istore 1 ,contw +0x6296 027005 store 1 ,mem_key_size +0x6297 027006 branch send_lmp_tid +: 027008 msg_send_lmp: +0x6298 027010 lshift3 pdata ,pdata +0x6299 027011 or_into 0x07 ,pdata +0x629a 027012 store 1 ,mem_lmo_header_length +0x629b 027013 arg 17 ,loopcnt +0x629c 027014 arg mem_lmo_payload ,contw +0x629d 027015 call clear_mem +0x629e 027016 arg mem_lmo_payload ,contw +0x629f 027017 rtn +: 027019 send_lmpext: +0x62a0 027020 and pdata ,0x7f ,rega +0x62a1 027021 jam lmp_escape ,mem_lmp_to_send +0x62a2 027022 deposit queue +0x62a3 027023 call msg_send_lmp +0x62a4 027024 deposit rega +0x62a5 027025 istore 1 ,contw +0x62a6 027026 rtn +: 027028 send_lmp_follow: +0x62a7 027029 fetch 1 ,mem_lmp_to_send +0x62a8 027030 lshift pdata ,pdata +0x62a9 027031 fetcht 1 ,mem_state_map +0x62aa 027032 isolate1 smap_lmptid ,temp +0x62ab 027033 setflag true ,0 ,pdata +0x62ac 027034 branch send_lmp_exit +: 027037 send_lmp_tid: +0x62ad 027038 fetcht 1 ,mem_state_map +0x62ae 027039 and_into 1 ,temp +0x62af 027040 branch send_lmp_end +: 027042 send_lmp_reply: +0x62b0 027043 force 0 ,temp +0x62b1 027044 branch send_lmp_end +: 027046 send_lmp_request: +0x62b2 027047 force 1 ,temp +: 027048 send_lmp_end: +0x62b3 027049 fetch 1 ,mem_lmp_to_send +0x62b4 027050 lshift pdata ,pdata +0x62b5 027051 setflag master ,0 ,pdata +0x62b6 027052 ixor temp ,pdata +: 027053 send_lmp_exit: +0x62b7 027054 store 1 ,mem_lmo_header_opcode +0x62b8 027055 jam 0 ,mem_lmp_to_send +0x62b9 027056 call lmo_fifo_process_lmo0empty +0x62ba 027057 enable user +0x62bb 027058 rtn +: 027061 lmo_fifo_check: +0x62bc 027062 fetch 1 ,mem_lmo_opcode2 +0x62bd 027063 rtn blank +0x62be 027064 call lmo_fifo_process +0x62bf 027065 fetch 1 ,mem_lmo_opcode2 +0x62c0 027066 rtn +: 027068 lmo_fifo_process: +0x62c1 027069 bpatchx patch30_6 ,mem_patch30 +0x62c2 027070 fetch 1 ,mem_lmp_to_send +0x62c3 027071 branch lmo_fifo_process_lmo0empty ,blank +0x62c4 027072 fetch 1 ,mem_lmo_opcode1 +0x62c5 027073 nrtn blank +0x62c6 027074 branch lmo_fifo_process_lmo2to1 +: 027075 lmo_fifo_process_lmo0empty: +0x62c7 027076 fetch 1 ,mem_lmo_opcode1 +0x62c8 027077 branch lmo_fifo_process_lmo1_empty ,blank +0x62c9 027078 fetch 3 ,mem_lmo_opcode1 +0x62ca 027079 store 3 ,mem_lmp_to_send +0x62cb 027080 fetcht 1 ,mem_lmo_tid1 +0x62cc 027081 fetch 1 ,mem_state_map +0x62cd 027082 set0 smap_lmptid ,pdata +0x62ce 027083 ior temp ,pdata +0x62cf 027084 store 1 ,mem_state_map +0x62d0 027085 jam 0 ,mem_lmo_opcode1 +: 027086 lmo_fifo_process_lmo2to1: +0x62d1 027087 fetch 1 ,mem_lmo_opcode2 +0x62d2 027088 rtn blank +0x62d3 027089 fetch 4 ,mem_lmo_opcode2 +0x62d4 027090 store 4 ,mem_lmo_opcode1 +0x62d5 027091 jam 0 ,mem_lmo_opcode2 +0x62d6 027092 rtn +: 027093 lmo_fifo_process_lmo1_empty: +0x62d7 027094 fetch 1 ,mem_lmo_opcode2 +0x62d8 027095 rtn blank +0x62d9 027096 fetch 3 ,mem_lmo_opcode2 +0x62da 027097 store 3 ,mem_lmp_to_send +0x62db 027098 fetcht 1 ,mem_lmo_tid2 +0x62dc 027099 fetch 1 ,mem_state_map +0x62dd 027100 set0 smap_lmptid ,pdata +0x62de 027101 ior temp ,pdata +0x62df 027102 store 1 ,mem_state_map +0x62e0 027103 jam 0 ,mem_lmo_opcode2 +0x62e1 027104 rtn +: 027107 special_tid_store: +0x62e2 027108 bpatchx patch30_7 ,mem_patch30 +0x62e3 027109 fetch 1 ,mem_state_map +0x62e4 027110 copy pdata ,regc +0x62e5 027111 ifetch 1 ,temp +0x62e6 027112 call pop_tid_follow +0x62e7 027113 call send_lmp_follow +0x62e8 027114 copy regc ,pdata +0x62e9 027115 store 1 ,mem_state_map +0x62ea 027116 rtn +: 027118 tid_reply: +0x62eb 027119 fetcht 1 ,mem_state_map +0x62ec 027120 set0 smap_lmptidinit ,temp +0x62ed 027121 storet 1 ,mem_state_map +0x62ee 027122 rtn +: 027124 tid_initiate: +0x62ef 027125 fetcht 1 ,mem_state_map +0x62f0 027126 set1 smap_lmptidinit ,temp +0x62f1 027127 storet 1 ,mem_state_map +0x62f2 027128 rtn +: 027131 tid_check: +0x62f3 027132 nsetflag master ,smap_lmptid ,pdata +0x62f4 027133 fetcht 1 ,mem_state_map +0x62f5 027134 ixor temp ,pdata +0x62f6 027135 isolate1 smap_lmptid ,pdata +0x62f7 027136 rtn +: 027139 tid_set_reply: +0x62f8 027140 fetch 1 ,mem_state_map +0x62f9 027141 setflag master ,smap_lmptid ,pdata +0x62fa 027142 store 1 ,mem_state_map +0x62fb 027143 rtn +: 027146 check_localsm: +0x62fc 027147 fetch 1 ,mem_sp_localsm +0x62fd 027148 compare local_statemachine ,pdata ,0x7f +0x62fe 027149 rtn +: 027150 setlocalsm_master: +0x62ff 027151 fetch 1 ,mem_sp_localsm +0x6300 027152 set1 7 ,pdata +0x6301 027153 store 1 ,mem_sp_localsm +0x6302 027154 rtn +: 027155 setlocalsm_slave: +0x6303 027156 fetch 1 ,mem_sp_localsm +0x6304 027157 set0 7 ,pdata +0x6305 027158 store 1 ,mem_sp_localsm +0x6306 027159 rtn +: 027160 check_localsm_master: +0x6307 027161 fetch 1 ,mem_sp_localsm +0x6308 027162 isolate1 7 ,pdata +0x6309 027163 store 1 ,mem_sp_localsm +0x630a 027164 rtn +: 027166 generate_random_number: +0x630b 027168 arg mem_random_number ,contw +: 027169 generate_random: +0x630c 027170 force 16 ,loopcnt +: 027171 generate_random_another: +: 027172 generate_random_loop: +0x630d 027173 random pdata +0x630e 027174 istore 1 ,contw +0x630f 027175 loop generate_random_another +0x6310 027176 rtn +: 027178 generate_linkkey: +0x6311 027179 call function_e21 +0x6312 027180 arg mem_link_key ,rega +0x6313 027181 arg mem_input_store ,regb +0x6314 027182 ifetch 8 ,rega +0x6315 027183 fetcht 1 ,mem_state +0x6316 027184 nsetflag blank ,state_combkey ,temp +0x6317 027185 storet 1 ,mem_state +0x6318 027186 copy rega ,contw +0x6319 027187 call xor16 +0x631a 027188 branch generate_linkkey_continue +: 027194 process_conn_sm: +0x631b 027196 bpatchx patch31_0 ,mem_patch31 +0x631c 027198 call lmo_fifo_check +0x631d 027199 nrtn blank +: 027200 process_conn_sm_continue: +0x631e 027201 fetch 1 ,mem_conn_sm +0x631f 027202 rtn blank +0x6320 027206 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req +0x6321 027207 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept +0x6322 027208 beq conn_sm_send_features ,host_create_conn_send_features +0x6323 027209 beq conn_sm_wait_features_res ,host_create_conn_waiting +0x6324 027210 beq conn_sm_send_switch ,host_create_conn_send_switch +0x6325 027211 beq conn_sm_auth_pair ,host_create_conn_auth_pair +0x6326 027212 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait +0x6327 027213 beq conn_sm_encrypt ,host_create_conn_encrypt +0x6328 027214 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait +0x6329 027215 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear +0x632a 027216 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete +0x632b 027217 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete +0x632c 027218 beq conn_sm_detach_delay ,host_create_conn_master_detach +0x632d 027219 beq conn_sm_send_version ,host_create_conn_send_version +0x632e 027220 beq conn_sm_wait_version ,host_create_conn_waiting +0x632f 027221 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch +0x6330 027222 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext +0x6331 027223 beq conn_sm_wait_features_ext ,host_create_conn_waiting +0x6332 027224 beq conn_sm_pairing ,host_create_conn_pairing +0x6333 027225 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait +0x6334 027226 beq conn_sm_auth ,host_create_conn_auth +0x6335 027227 beq conn_sm_auth_wait ,host_create_conn_auth_wait +0x6336 027228 beq conn_sm_done ,host_create_conn_done +0x6337 027229 beq conn_sm_wait_done ,host_create_conn_done_wait +0x6338 027230 jam conn_sm_standby ,mem_conn_sm +0x6339 027232 rtn +: 027233 host_create_conn_done: +0x633a 027234 fetch 1 ,mem_lmp_conn_state +0x633b 027235 rtnbit0 received_setup_complete +0x633c 027236 rtnbit0 sent_setup_complete +0x633d 027237 jam conn_sm_standby ,mem_conn_sm +0x633e 027238 call host_conn_judge_encrypt +0x633f 027239 branch scheduler_start_upper_sm +: 027241 host_conn_judge_encrypt: +0x6340 027242 fetch 1 ,mem_connection_options +0x6341 027243 rtnbit0 connection_encrypt +0x6342 027244 jam conn_sm_encrypt_wait ,mem_conn_sm +0x6343 027245 rtn +: 027247 host_create_conn_done_wait: +0x6344 027248 arg enpt_delay_timer ,queue +0x6345 027249 call timer_check +0x6346 027250 nrtn blank +0x6347 027251 jam conn_sm_done ,mem_conn_sm +0x6348 027252 rtn +: 027254 host_create_conn_auth: +0x6349 027255 fetch 1 ,mem_connection_options +0x634a 027256 set0 connection_auth ,pdata +0x634b 027257 store 1 ,mem_connection_options +0x634c 027258 jam conn_sm_auth_wait ,mem_conn_sm +0x634d 027259 jam lmp_au_rand ,mem_lmo_opcode2 +0x634e 027260 rtn +: 027261 host_create_conn_auth_wait: +0x634f 027262 rtn +: 027263 host_create_conn_pairing: +0x6350 027264 fetch 1 ,mem_pincode_state +0x6351 027265 rtnne pincode_state_pincode_ready +0x6352 027266 call host_auth +0x6353 027267 jam conn_sm_pairing_wait ,mem_conn_sm +0x6354 027268 rtn +: 027270 host_create_conn_pairing_wait: +0x6355 027271 rtn +: 027272 host_creat_conn_send_feat_ext: +0x6356 027273 jam conn_sm_wait_features_ext ,mem_conn_sm +0x6357 027274 jam lmp_ext_features_req ,mem_lmo_opcode2 +0x6358 027275 rtn +: 027276 host_create_conn_send_version: +0x6359 027277 jam conn_sm_wait_version ,mem_conn_sm +0x635a 027278 jam lmp_version_req ,mem_lmo_opcode2 +0x635b 027279 rtn +: 027281 host_creat_conn_wait_switch: +0x635c 027282 fetch 1 ,mem_switch_flag +0x635d 027283 rtneq switch_flag_init +0x635e 027284 beq switch_flag_accept ,host_create_conn_switch_accept +0x635f 027285 arg switch_wait_timer ,queue +0x6360 027286 call timer_check +0x6361 027287 nrtn blank +0x6362 027288 jam switch_flag_init ,mem_switch_flag +0x6363 027289 branch host_create_conn_switch +: 027290 host_create_conn_switch_accept: +0x6364 027291 rtn master +0x6365 027292 branch host_create_conn_auth_pair +: 027294 host_create_conn_send_features: +0x6366 027295 jam conn_sm_wait_features_res ,mem_conn_sm +0x6367 027296 jam lmp_features_req ,mem_lmo_opcode2 +0x6368 027297 rtn +: 027298 host_create_conn_send_switch: +0x6369 027299 jam lmp_switch_req ,mem_lmo_opcode2 +0x636a 027300 set1 mark_switch_initiated ,mark +0x636b 027301 jam conn_sm_wait_conn_accept ,mem_conn_sm +0x636c 027302 setarg 0x1ff +0x636d 027303 store 2 ,mem_soft_timer +0x636e 027304 rtn +: 027305 host_create_conn_send_conn_req: +0x636f 027306 jam conn_sm_wait_conn_accept ,mem_conn_sm +0x6370 027307 jam 0xff ,mem_soft_timer +0x6371 027308 set0 mark_reconn_recieve_switch ,mark +0x6372 027309 jam lmp_host_connection_req ,mem_lmo_opcode2 +0x6373 027310 branch init_lmp_reinit +: 027311 host_create_conn_wait_accept: +0x6374 027312 rtnmark1 mark_reconn_recieve_switch +0x6375 027313 fetch 2 ,mem_soft_timer +0x6376 027314 sub pdata ,1 ,pdata +0x6377 027315 branch host_create_conn_resend ,zero +0x6378 027316 store 2 ,mem_soft_timer +0x6379 027317 rtn +: 027318 host_create_conn_resend: +0x637a 027319 jam conn_sm_send_switch ,mem_conn_sm +0x637b 027320 rtn +: 027321 host_create_conn_waiting: +0x637c 027323 rtn +: 027325 host_create_conn_switch: +0x637d 027326 fetch 1 ,mem_lmp_conn_state +0x637e 027327 rtnbit0 sent_setup_complete +0x637f 027328 rtnbit0 received_setup_complete +0x6380 027329 fetch 1 ,mem_connection_options +0x6381 027330 set0 connection_switch ,pdata +0x6382 027331 store 1 ,mem_connection_options +0x6383 027332 jam lmp_switch_req ,mem_lmo_opcode2 +0x6384 027333 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm +0x6385 027334 rtn +: 027336 host_create_conn_send_setup_complete: +0x6386 027337 jam conn_sm_wait_setup_complete ,mem_conn_sm +0x6387 027338 jam lmp_setup_complete ,mem_lmo_opcode2 +0x6388 027339 rtn +: 027341 host_create_conn_wait_setup_complete: +0x6389 027342 fetch 1 ,mem_lmp_conn_state +0x638a 027343 rtnbit0 received_setup_complete +0x638b 027344 jam conn_sm_standby ,mem_conn_sm +0x638c 027346 rtn +: 027347 host_create_conn_wait_setup_complete_rtn: +0x638d 027348 jam conn_sm_auth_pair ,mem_conn_sm +0x638e 027349 rtn +: 027351 host_create_conn_master_detach: +0x638f 027352 fetch 1 ,mem_soft_timer +0x6390 027353 increase -1 ,pdata +0x6391 027354 branch host_create_conn_send_detach ,blank +0x6392 027355 store 1 ,mem_soft_timer +0x6393 027356 rtn +: 027357 host_create_conn_send_detach: +0x6394 027358 jam lmp_detach ,mem_lmo_opcode2 +0x6395 027359 jam local_host ,mem_disconn_reason_send +0x6396 027360 jam 0 ,mem_conn_sm +0x6397 027361 rtn +: 027362 host_create_conn_auth_pair: +0x6398 027364 fetch 1 ,mem_connection_options +0x6399 027365 bbit1 connection_switch ,host_create_conn_switch +0x639a 027366 bbit1 connection_auth ,host_create_conn_auth_pair_true +: 027367 host_create_conn_sm_done: +0x639b 027368 jam conn_sm_done ,mem_conn_sm +0x639c 027369 rtn +: 027370 host_create_conn_auth_pair_true: +0x639d 027371 fetch 1 ,mem_link_key_exists +0x639e 027372 branch host_create_conn_auth_pair_nokey ,blank +0x639f 027373 fetch 1 ,mem_lmp_conn_state +0x63a0 027374 rtnbit0 sent_setup_complete +0x63a1 027375 rtnbit0 received_setup_complete +0x63a2 027376 fetch 4 ,mem_aurand_send_delay_time +0x63a3 027377 arg 100 ,temp +0x63a4 027378 iadd temp ,temp +0x63a5 027379 copy clkn_bt ,pdata +0x63a6 027380 isub temp ,null +0x63a7 027381 nrtn positive +0x63a8 027382 branch host_create_conn_auth +: 027386 host_create_conn_auth_pair_nokey: +0x63a9 027387 jam conn_sm_pairing ,mem_conn_sm +0x63aa 027388 jam 4 ,mem_pin_length +0x63ab 027389 setarg 0x3030 +0x63ac 027390 store 2 ,mem_pin +0x63ad 027391 istore 2 ,contw +0x63ae 027392 jam pincode_state_pincode_ready ,mem_pincode_state +0x63af 027393 branch host_create_conn_pairing +: 027395 host_create_conn_auth_pair_wait: +0x63b0 027396 rtn +: 027397 host_create_conn_encrypt: +0x63b1 027398 fetch 1 ,mem_connection_options +0x63b2 027399 bbit1 connection_encrypt ,host_create_conn_encrypt_start +0x63b3 027400 jam conn_sm_done ,mem_conn_sm +0x63b4 027401 rtn +: 027403 host_create_conn_encrypt_start: +0x63b5 027404 fetch 1 ,mem_connection_options +0x63b6 027405 set0 connection_encrypt ,pdata +0x63b7 027406 store 1 ,mem_connection_options +0x63b8 027407 jam lmp_encryption_mode_req ,mem_lmo_opcode2 +0x63b9 027408 rtn +: 027410 host_create_conn_encrypt_wait: +0x63ba 027411 fetch 1 ,mem_wait_encryption +0x63bb 027412 rtn blank +0x63bc 027413 jam conn_sm_standby ,mem_conn_sm +0x63bd 027414 branch host_create_conn_encrypt_start +: 027416 host_create_conn_encrypt_wait_clear: +0x63be 027417 jam conn_sm_send_setup_complete ,mem_conn_sm +0x63bf 027418 rtn +: 027420 host_auth: +0x63c0 027421 fetch 1 ,mem_op +0x63c1 027422 bbit1 op_inrand_req ,remote_auth +0x63c2 027423 call tid_initiate +0x63c3 027424 jam lmp_in_rand ,mem_lmo_opcode2 +0x63c4 027425 branch cmd_exit +: 027426 remote_auth: +0x63c5 027427 fetch 1 ,mem_op +0x63c6 027428 set0 op_inrand_req ,pdata +0x63c7 027429 store 1 ,mem_op +0x63c8 027430 call lmp_accept_inrand +0x63c9 027431 call tid_set_reply +0x63ca 027432 branch cmd_exit +: 027434 pincode_reinit: +0x63cb 027435 setarg 4 +0x63cc 027436 store 1 ,mem_pin_length +0x63cd 027437 setarg 0x3030 +0x63ce 027438 istore 2 ,contw +0x63cf 027439 istore 2 ,contw +0x63d0 027440 rtn +: 027446 twspi_reset: +0x63d1 027447 bpatchx patch31_4 ,mem_patch31 +0x63d2 027448 hfetch 1 ,core_gpio_oe3 +0x63d3 027449 arg 0x06 ,temp +0x63d4 027450 ior temp ,pdata +0x63d5 027451 hstore 1 ,core_gpio_oe3 +0x63d6 027452 hfetch 1 ,core_gpio_out3 +0x63d7 027453 ior temp ,pdata +0x63d8 027454 hstore 1 ,core_gpio_out3 +0x63d9 027455 call twspi_disable +0x63da 027456 hfetch 1 ,core_gpio_out3 +0x63db 027457 set0 1 ,pdata +0x63dc 027458 set0 2 ,pdata +0x63dd 027459 hstore 1 ,core_gpio_out3 +0x63de 027460 nop 30 +0x63df 027461 branch twspi_enable +: 027463 twspi_reset2: +0x63e0 027464 hfetch 1 ,core_gpio_oe3 +0x63e1 027465 arg 0xc0 ,temp +0x63e2 027466 ior temp ,pdata +0x63e3 027467 hstore 1 ,core_gpio_oe3 +0x63e4 027468 hfetch 1 ,core_gpio_out3 +0x63e5 027469 ior temp ,pdata +0x63e6 027470 hstore 1 ,core_gpio_out3 +0x63e7 027471 call twspi_disable +0x63e8 027472 hfetch 1 ,core_gpio_out3 +0x63e9 027473 set0 6 ,pdata +0x63ea 027474 set0 7 ,pdata +0x63eb 027475 hstore 1 ,core_gpio_out3 +0x63ec 027476 nop 30 +0x63ed 027477 branch twspi_enable2 +: 027479 twspi_disable: +0x63ee 027480 hfetch 1 ,core_gpio_sel1 +0x63ef 027481 and pdata ,0xfc ,pdata +0x63f0 027482 hstore 1 ,core_gpio_sel1 +0x63f1 027483 rtn +: 027484 twspi_enable: +0x63f2 027485 hfetch 1 ,core_gpio_sel1 +0x63f3 027486 or pdata ,0x01 ,pdata +0x63f4 027487 hstore 1 ,core_gpio_sel1 +0x63f5 027488 rtn +: 027489 twspi_enable2: +0x63f6 027490 hfetch 1 ,core_gpio_sel1 +0x63f7 027491 or pdata ,0x03 ,pdata +0x63f8 027492 set0 4 ,pdata +0x63f9 027493 hstore 1 ,core_gpio_sel1 +0x63fa 027494 rtn +: 027498 sensor_read: +0x63fb 027499 copy pdata ,regb +0x63fc 027500 call spi_ncs_enable +0x63fd 027501 nop 100 +0x63fe 027502 copy regb ,pdata +0x63ff 027503 call twspi_read +0x6400 027504 copy pdata ,regb +0x6401 027505 call spi_ncs_disable +0x6402 027506 nop 100 +0x6403 027507 copy regb ,pdata +0x6404 027508 rtn +: 027510 sensor_write: +0x6405 027511 copy pdata ,regb +0x6406 027512 call spi_ncs_enable +0x6407 027513 nop 100 +0x6408 027514 copy regb ,pdata +0x6409 027515 call twspi_write +0x640a 027516 call spi_ncs_disable +0x640b 027517 nop 100 +0x640c 027518 rtn +: 027521 spi_ncs_gpio_init: +0x640d 027522 fetcht 1 ,mem_spi_ncs_gpio +0x640e 027523 branch gpio_config_output +: 027526 spi_ncs_enable: +0x640f 027527 fetcht 1 ,mem_spi_ncs_gpio +0x6410 027528 branch gpio_out_active +: 027531 spi_ncs_disable: +0x6411 027532 fetcht 1 ,mem_spi_ncs_gpio +0x6412 027533 branch gpio_out_inactive +: 027536 twspi_write: +0x6413 027537 branch spid_write_reg +: 027539 twspi_read: +0x6414 027540 branch spid_read_reg +: 027547 read_function_aes: +0x6415 027548 nbranch read_function ,user +0x6416 027549 hfetch 1 ,core_gpio_key2 +0x6417 027550 or_into 0x2 ,pdata +0x6418 027551 hstore 1 ,core_gpio_key2 +: 027552 read_function: +0x6419 027553 copy temp ,null +0x641a 027554 branch read_fuction_zero ,zero +0x641b 027555 copy regc ,pc +: 027556 read_fuction_zero: +0x641c 027557 isolate0 0 ,null +0x641d 027558 branch set_ucode_status +: 027561 get_block_header: +0x641e 027562 force 4 ,temp +: 027563 get_block_header0: +0x641f 027564 arg mem_ucode_buf ,rega +0x6420 027565 hfetch 1 ,core_gpio_key2 +0x6421 027566 and_into 0xfd ,pdata +0x6422 027567 hstore 1 ,core_gpio_key2 +0x6423 027568 call read_function +0x6424 027569 arg 0x55aa ,rega +0x6425 027570 fetch 2 ,mem_ucode_buf +0x6426 027571 ifetcht 2 ,contr +0x6427 027572 isub rega ,null +0x6428 027573 rtn +: 027575 read_first_block: +0x6429 027576 arg 2 ,temp +0x642a 027577 arg mem_ucode_ptr ,rega +0x642b 027578 call read_function +0x642c 027579 fetch 2 ,mem_ucode_ptr +0x642d 027580 store 2 ,mem_addr_mi +0x642e 027581 call get_iv ,user +0x642f 027582 rtn +: 027584 get_iv: +0x6430 027585 arg 16 ,temp +0x6431 027586 arg mem_ucode_keybuf ,rega +0x6432 027587 hfetch 1 ,core_gpio_key2 +0x6433 027588 and_into 0xfd ,pdata +0x6434 027589 hstore 1 ,core_gpio_key2 +0x6435 027590 call read_function +0x6436 027591 arg mem_ucode_keybuf ,contr +0x6437 027592 arg 16 ,loopcnt +0x6438 027593 call aes_load_data +0x6439 027594 call aes_init +0x643a 027595 call aes_clear_data +0x643b 027596 branch do_aes_cbc +: 027598 load_storage: +0x643c 027599 disable match +0x643d 027600 call get_block_header +0x643e 027601 nrtn zero +0x643f 027602 enable match +0x6440 027603 jam 0x80 ,core_ucode_ctrl +0x6441 027604 jam 0 ,core_ucode_hi +0x6442 027605 jam 0 ,core_ucode_low +0x6443 027606 arg core_ucode_data ,rega +0x6444 027607 call read_function_aes +0x6445 027608 jam 0x0 ,core_ucode_ctrl +: 027609 load_storage_loop: +0x6446 027610 arg 6 ,temp +0x6447 027611 call get_block_header0 +0x6448 027612 nrtn zero +0x6449 027613 ifetch 2 ,contr +0x644a 027614 iforce rega +0x644b 027615 call read_function +0x644c 027616 branch load_storage_loop +: 027620 reload_eeprom: +0x644d 027621 call clean_mem +0x644e 027622 setarg 0x1000 +0x644f 027623 store 2 ,mem_addr_mi +0x6450 027624 arg iicd_read_eep ,regc +0x6451 027625 arg 2 ,loopcnt +: 027626 reload_eeprom_loop: +0x6452 027627 call get_block_header +0x6453 027628 nrtn zero +0x6454 027629 fetch 2 ,mem_addr_mi +0x6455 027630 byteswap pdata ,pdata +0x6456 027631 iadd temp ,pdata +0x6457 027632 byteswap pdata ,pdata +0x6458 027633 store 2 ,mem_addr_mi +0x6459 027634 loop reload_eeprom_loop +0x645a 027635 branch load_storage_loop +: 027637 loadcode: +0x645b 027638 call clean_mem +0x645c 027639 disable user +0x645d 027640 call otp_enable_chgpump +0x645e 027641 setarg otp_ucode_flag +0x645f 027642 arg mem_otp_ucode_flag ,rega +0x6460 027643 arg 2 ,temp +0x6461 027644 call otpd_read_data +0x6462 027645 fetch 2 ,mem_otp_ucode_flag +0x6463 027646 bbit0 otp_uflag_aes ,loadcode_otp +0x6464 027647 jam 0x25 ,core_clkoff +0x6465 027648 setarg otp_ucode_aeskey +0x6466 027649 arg mem_ucode_keybuf ,rega +0x6467 027650 arg 16 ,temp +0x6468 027651 call otpd_read_data +0x6469 027652 jam lock_otp ,core_misc_ctrl +0x646a 027653 set1 mark_otp_encrypt ,mark +0x646b 027654 arg mem_ucode_keybuf ,contr +0x646c 027655 call load_key +0x646d 027656 enable user +: 027657 loadcode_otp: +0x646e 027658 jam 0 ,mem_loadcode_times +: 027659 loadcode_otp_2: +0x646f 027660 call loadcode_check_times +0x6470 027661 fetch 2 ,mem_otp_ucode_flag +0x6471 027662 byteswap pdata ,pdata +0x6472 027663 arg 0x7ff ,temp +0x6473 027664 iand temp ,pdata +0x6474 027665 branch loadcode_iic ,zero +0x6475 027666 call otp_set_addr +0x6476 027667 arg otpd_read_code ,regc +0x6477 027668 call get_iv ,user +0x6478 027669 call load_storage +0x6479 027670 fetch 1 ,mem_ucode_status +0x647a 027671 bbit0 0 ,loadcode_otp_2 +: 027673 loadcode_iic: +0x647b 027674 call otp_disable_chgpump +0x647c 027675 jam 0 ,mem_loadcode_times +: 027676 loadcode_iic_2: +0x647d 027677 call loadcode_check_times +0x647e 027678 call clear_eeprom_size_2k +0x647f 027679 fetch 1 ,mem_otp_ucode_flag +0x6480 027680 bbit1 otp_uflag_skip_eep ,loadcode_spi +0x6481 027681 call loadcode_iic_by_eeprom +0x6482 027682 nbranch loadcode_iic_eeprom_2k ,match +0x6483 027683 fetch 1 ,mem_ucode_status +0x6484 027684 bbit0 0 ,loadcode_iic_2 +0x6485 027685 branch loadcode_hci +: 027686 loadcode_iic_eeprom_2k: +0x6486 027687 call set_eeprom_size_2k +0x6487 027688 fetch 1 ,mem_otp_ucode_flag +0x6488 027689 bbit1 otp_uflag_skip_eep ,loadcode_spi +0x6489 027690 call loadcode_iic_by_eeprom +0x648a 027691 nbranch loadcode_spi ,match +0x648b 027692 fetch 1 ,mem_ucode_status +0x648c 027693 bbit0 0 ,loadcode_iic_2 +0x648d 027694 branch loadcode_hci +: 027696 loadcode_spi: +0x648e 027697 jam 0 ,mem_loadcode_times +: 027698 loadcode_spi_2: +0x648f 027699 call loadcode_check_times +0x6490 027700 fetch 1 ,mem_otp_ucode_flag +0x6491 027701 bbit1 otp_uflag_skip_flash ,loadcode_hci +0x6492 027702 setarg 0x0 +0x6493 027703 store 3 ,mem_addr_hi +0x6494 027704 call spid_init_flash +0x6495 027705 arg spid_load_flash ,regc +0x6496 027706 call read_first_block +0x6497 027707 call load_storage +0x6498 027708 nbranch loadcode_hci ,match +0x6499 027709 fetch 1 ,mem_ucode_status +0x649a 027710 bbit0 0 ,loadcode_spi_2 +: 027712 loadcode_hci: +0x649b 027713 bmark1 mark_otp_encrypt ,loadcode_hci_enc +0x649c 027714 call clear_key_buf +: 027715 loadcode_hci_enc: +0x649d 027716 fetch 1 ,mem_otp_ucode_flag +0x649e 027717 bbit0 otp_uflag_hci ,clear_key_buf +0x649f 027718 jam 0x21 ,core_clkoff +0x64a0 027719 call hci_init +: 027720 loadcode_hci_loop: +0x64a1 027721 call hci_rx_packet +0x64a2 027722 branch loadcode_hci_loop +: 027724 clear_key_buf: +0x64a3 027725 setarg 0 +0x64a4 027726 store 8 ,mem_ucode_keybuf +0x64a5 027727 store 8 ,mem_ucode_keybuf + 8 +0x64a6 027728 force regidx_key ,regext_index +0x64a7 027729 call aes_clear +0x64a8 027730 jam 0x21 ,core_clkoff +0x64a9 027731 rtn +: 027734 loadcode_iic_by_eeprom: +0x64aa 027735 setarg 0x0 +0x64ab 027736 store 2 ,mem_addr_mi +0x64ac 027737 arg iicd_read_eep ,regc +0x64ad 027738 call iicd_init_12m +0x64ae 027739 call read_first_block +0x64af 027740 branch load_storage +: 027743 loadcode_check_times: +0x64b0 027744 fetch 1 ,mem_loadcode_times +0x64b1 027745 increase 1 ,pdata +0x64b2 027746 sub pdata ,3 ,null +0x64b3 027747 nbranch loadcode_error ,positive +0x64b4 027748 store 1 ,mem_loadcode_times +0x64b5 027749 rtn +: 027751 loadcode_error: +0x64b6 027752 call clear_key_buf +0x64b7 027753 call ice_break +0x64b8 027754 rtn +: 027758 set_ucode_status: +0x64b9 027759 fetch 1 ,mem_ucode_status +0x64ba 027760 lshift pdata ,pdata +0x64bb 027761 setflag true ,0 ,pdata +0x64bc 027762 isolate0 15 ,rega +0x64bd 027763 rtn true +0x64be 027764 store 1 ,mem_ucode_status +0x64bf 027765 rtn +: 027768 decrypt_code: +0x64c0 027769 hfetch 1 ,core_gpio_key2 +0x64c1 027770 rtnbit0 1 +0x64c2 027771 branch decrypt_code_skip +: 027772 decrypt_code_loop: +0x64c3 027773 hfetch 1 ,core_dma_status +0x64c4 027774 qisolate1 pdata +0x64c5 027775 rtn true +: 027776 decrypt_code_skip: +0x64c6 027777 hfetch 1 ,core_misc_status +0x64c7 027778 bbit0 1 ,decrypt_code_loop +0x64c8 027779 call do_aes_cbc +0x64c9 027780 branch decrypt_code_loop +: 027784 load_ucode: +0x64ca 027785 fetch 2 ,mem_patch_ptr +0x64cb 027786 rtn blank +0x64cc 027787 jam 0x80 ,core_ucode_ctrl +0x64cd 027788 jam 0 ,core_ucode_hi +0x64ce 027789 jam 0 ,core_ucode_low +0x64cf 027790 fetcht 2 ,mem_patch_len +0x64d0 027791 lshift2 temp ,loopcnt +0x64d1 027792 iforce contr +: 027793 load_ucode_loop: +0x64d2 027794 ifetch 1 ,contr +0x64d3 027795 hstore 1 ,core_ucode_data +0x64d4 027796 loop load_ucode_loop +0x64d5 027797 jam 0x0 ,core_ucode_ctrl +0x64d6 027798 rtn +: 027803 spid_init: +0x64d7 027804 bpatchx patch31_5 ,mem_patch31 +0x64d8 027805 call spid_init_common +0x64d9 027806 branch twspi_enable +: 027808 spid_init2: +0x64da 027809 call spid_init_common +0x64db 027810 call twspi_disable +0x64dc 027811 branch twspi_enable2 +: 027813 spid_init_common: +0x64dd 027814 fetch 1 ,mem_spi_init_clk +0x64de 027815 hstore 1 ,core_spid_ctrl +0x64df 027816 fetch 1 ,mem_spi_init_delay_time +0x64e0 027817 hstore 1 ,core_spid_delay +0x64e1 027818 setarg mem_spid_tbuf +0x64e2 027819 hstore 2 ,core_spid_txaddr +0x64e3 027820 setarg mem_spid_rbuf +0x64e4 027821 hstore 2 ,core_spid_rxaddr +0x64e5 027822 branch twspi_disable +: 027824 spid_reset: +0x64e6 027825 hfetch 1 ,core_spid_ctrl +0x64e7 027826 set1 7 ,pdata +0x64e8 027827 hstore 1 ,core_spid_ctrl +0x64e9 027828 set0 7 ,pdata +0x64ea 027829 hstore 1 ,core_spid_ctrl +0x64eb 027830 rtn +: 027834 spid_write_reg: +0x64ec 027835 set1 7 ,pdata +0x64ed 027836 store 2 ,mem_spid_tbuf +0x64ee 027837 bpatchx patch31_6 ,mem_patch31 +0x64ef 027838 jam 2 ,core_spid_txlen +0x64f0 027839 jam 0 ,core_spid_rxlen +0x64f1 027840 jam spid_start ,core_misc_ctrl +0x64f2 027841 branch wait_spid_done +: 027844 spid_read_reg: +0x64f3 027845 force 1 ,temp +: 027847 spid_read_regs: +0x64f4 027849 store 1 ,mem_spid_tbuf +0x64f5 027850 bpatchx patch31_7 ,mem_patch31 +0x64f6 027851 jam 1 ,core_spid_txlen +0x64f7 027852 hstoret 2 ,core_spid_rxlen +0x64f8 027853 jam spid_start ,core_misc_ctrl +0x64f9 027854 call wait_spid_done +0x64fa 027855 fetch 1 ,mem_spid_rbuf +0x64fb 027856 rtn +: 027858 wait_spid_done: +0x64fc 027859 fetch 2 ,mem_afh_error_total +0x64fd 027860 increase 1 ,pdata +0x64fe 027861 store 2 ,mem_afh_error_total +0x64ff 027862 hfetch 1 ,core_dma_status +0x6500 027863 bbit0 spid_done ,wait_spid_done +0x6501 027864 rtn +: 027866 spid_init_flash: +0x6502 027867 jam 0x40 ,core_spid_ctrl +0x6503 027868 jam 0x0 ,core_spid_delay +0x6504 027869 hfetch 1 ,core_gpio_sel1 +0x6505 027870 set0 0 ,pdata +0x6506 027871 set1 1 ,pdata +0x6507 027872 hstore 1 ,core_gpio_sel1 +0x6508 027873 setarg 0 +0x6509 027874 store 4 ,mem_spid_tbuf +0x650a 027875 rtn +: 027878 spid_unlock_flash: +0x650b 027879 setarg 0 +0x650c 027880 hstore 2 ,core_spid_rxlen +0x650d 027881 setarg 1 +0x650e 027882 hstore 2 ,core_spid_txlen +0x650f 027883 setarg mem_spid_tbuf +0x6510 027884 hstore 2 ,core_spid_txaddr +0x6511 027885 jam 6 ,mem_spid_tbuf +0x6512 027886 jam spid_start ,core_misc_ctrl +0x6513 027887 branch wait_spid_done +: 027902 flash_write: +0x6514 027903 disable user +0x6515 027904 copy pdata ,regb +0x6516 027905 fetch 1 ,mem_spi_write_flash_sm +0x6517 027906 rtnne flash_sm_no_buys +0x6518 027907 enable user +0x6519 027908 copy regb ,pdata +0x651a 027909 branch flash_write_start +: 027912 flash_write_spi_sm_timer: +0x651b 027913 fetch 1 ,mem_spi_write_flash_sm +0x651c 027914 beq flash_sm_start ,flash_write_start +0x651d 027915 beq flash_sm_erase_sector ,flash_erase_sector +0x651e 027916 beq flash_sm_wait_erase_sector ,flash_wait_erase_sector +0x651f 027917 beq flash_sm_write_data ,flash_write_data +0x6520 027918 beq flash_sm_wait_write_data ,flash_wait_write_data +0x6521 027919 rtn +: 027921 flash_write_start: +0x6522 027922 store 3 ,mem_spi_write_addr +0x6523 027923 copy rega ,pdata +0x6524 027924 store 2 ,mem_spi_write_ptr +0x6525 027925 storet 2 ,mem_spi_write_len +0x6526 027926 jam flash_sm_erase_sector ,mem_spi_write_flash_sm +0x6527 027927 branch spid_init_flash +: 027928 flash_erase_sector: +0x6528 027929 call spid_init_flash +0x6529 027930 jam flash_sm_wait_erase_sector ,mem_spi_write_flash_sm +0x652a 027931 call spid_unlock_flash +0x652b 027932 arg mem_spid_tbuf ,rega +0x652c 027933 fetch 3 ,mem_spi_write_addr +0x652d 027934 jam 4 ,core_spid_txlen +0x652e 027935 arg flash_command_sector_erase ,temp +0x652f 027936 branch spid_write_flash_common +: 027938 flash_wait_erase_sector: +0x6530 027939 call spid_init_flash +0x6531 027940 call spid_unlock_flash +0x6532 027941 setarg flash_read_satus +0x6533 027942 call spid_read_reg +0x6534 027943 rtnbit1 flash_status_wip +0x6535 027944 jam flash_sm_write_data ,mem_spi_write_flash_sm +0x6536 027945 rtn +: 027946 flash_write_data: +0x6537 027947 call spid_init_flash +0x6538 027948 jam flash_sm_wait_write_data ,mem_spi_write_flash_sm +0x6539 027949 call spid_unlock_flash +0x653a 027950 call flash_data_preserve +0x653b 027951 call spid_write_flash +0x653c 027952 branch flash_data_recover +: 027953 flash_wait_write_data: +0x653d 027954 call spid_init_flash +0x653e 027955 call spid_unlock_flash +0x653f 027956 setarg flash_read_satus +0x6540 027957 call spid_read_reg +0x6541 027958 rtnbit1 flash_status_wip +0x6542 027959 jam flash_sm_no_buys ,mem_spi_write_flash_sm +0x6543 027960 fetch 2 ,mem_cb_spi_flash_write_complate +0x6544 027961 branch callback_func +: 027962 flash_data_recover: +0x6545 027963 fetch 4 ,mem_temp +0x6546 027964 fetcht 2 ,mem_spi_write_ptr +0x6547 027965 increase -4 ,temp +0x6548 027966 istore 4 ,temp +0x6549 027967 rtn +: 027968 flash_data_preserve: +0x654a 027969 fetcht 2 ,mem_spi_write_ptr +0x654b 027970 copy temp ,rega +0x654c 027971 increase -4 ,temp +0x654d 027972 ifetch 4 ,temp +0x654e 027973 store 4 ,mem_temp +0x654f 027974 fetcht 2 ,mem_spi_write_len +0x6550 027975 fetch 3 ,mem_spi_write_addr +0x6551 027976 rtn +: 027980 spid_write_flash: +0x6552 027981 increase 4 ,temp +0x6553 027982 hstoret 2 ,core_spid_txlen +0x6554 027983 arg flash_command_write_data ,temp +0x6555 027984 increase -4 ,rega +: 027985 spid_write_flash_common: +0x6556 027987 istoret 1 ,rega +0x6557 027988 rshift16 pdata ,temp +0x6558 027989 istoret 1 ,contw +0x6559 027990 rshift8 pdata ,temp +0x655a 027991 istoret 1 ,contw +0x655b 027992 istore 1 ,contw +0x655c 027993 deposit rega +0x655d 027994 hstore 2 ,core_spid_txaddr +0x655e 027995 setarg 0 +0x655f 027996 hstore 2 ,core_spid_rxlen +0x6560 027997 jam spid_start ,core_misc_ctrl +0x6561 027998 branch wait_spid_done +: 028002 spid_read_flash: +0x6562 028003 hstoret 2 ,core_spid_rxlen +0x6563 028004 rshift16 pdata ,temp +0x6564 028005 storet 1 ,mem_addr_hi +0x6565 028006 rshift8 pdata ,temp +0x6566 028007 storet 1 ,mem_addr_mi +0x6567 028008 store 1 ,mem_addr_lo +0x6568 028009 setarg 4 +0x6569 028010 hstore 2 ,core_spid_txlen +0x656a 028011 jam flash_command_read_data ,mem_spid_tbuf +0x656b 028012 setarg mem_spid_tbuf +0x656c 028013 hstore 2 ,core_spid_txaddr +0x656d 028014 deposit rega +0x656e 028015 hstore 2 ,core_spid_rxaddr +0x656f 028016 hfetch 1 ,core_spid_ctrl +0x6570 028017 isolate0 15 ,rega +0x6571 028018 setflag true ,6 ,pdata +0x6572 028019 hstore 1 ,core_spid_ctrl +0x6573 028020 jam spid_start ,core_misc_ctrl +: 028021 spi_read_flash_wait: +0x6574 028022 hfetch 1 ,core_dma_status +0x6575 028023 bbit1 7 ,spi_read_flash_wait +0x6576 028024 arg spid_done ,queue +0x6577 028025 branch wait_spid_done +: 028029 spid_load_flash: +0x6578 028030 hstoret 2 ,core_spid_rxlen +0x6579 028031 setarg 4 +0x657a 028032 hstore 2 ,core_spid_txlen +0x657b 028033 jam 3 ,mem_spid_tbuf +0x657c 028034 setarg mem_spid_tbuf +0x657d 028035 hstore 2 ,core_spid_txaddr +0x657e 028036 deposit rega +0x657f 028037 hstore 2 ,core_spid_rxaddr +0x6580 028038 hfetch 1 ,core_spid_ctrl +0x6581 028039 isolate0 15 ,rega +0x6582 028040 setflag true ,6 ,pdata +0x6583 028041 hstore 1 ,core_spid_ctrl +0x6584 028042 jam spid_start ,core_misc_ctrl +: 028043 spi_load_flash_wait: +0x6585 028044 hfetch 1 ,core_dma_status +0x6586 028045 bbit1 7 ,spi_load_flash_wait +0x6587 028046 arg spid_done ,queue +0x6588 028047 call decrypt_code +0x6589 028048 call wait_spid_done +0x658a 028049 isolate1 spid_crcok ,pdata +0x658b 028050 call set_ucode_status +0x658c 028051 fetch 1 ,mem_addr_hi +0x658d 028052 lshift16 pdata ,regb +0x658e 028053 fetch 1 ,mem_addr_mi +0x658f 028054 lshift8 pdata ,pdata +0x6590 028055 ior regb ,regb +0x6591 028056 fetch 1 ,mem_addr_lo +0x6592 028057 ior regb ,pdata +0x6593 028058 iadd temp ,pdata +0x6594 028059 store 1 ,mem_addr_lo +0x6595 028060 rshift8 pdata ,pdata +0x6596 028061 store 1 ,mem_addr_mi +0x6597 028062 rshift8 pdata ,pdata +0x6598 028063 store 1 ,mem_addr_hi +0x6599 028064 rtn +: 028069 soft_reset_chip: +0x659a 028070 jam 1 ,core_reset +0x659b 028071 rtn +: 028077 iic_init_390k: +0x659c 028078 jam 12 ,core_iicd_scl_low +0x659d 028079 jam 13 ,core_iicd_scl_high +0x659e 028080 jam 13 ,core_iicd_start_setup +0x659f 028081 jam 13 ,core_iicd_start_hold +0x65a0 028082 jam 13 ,core_iicd_stop_setup +0x65a1 028083 jam 12 ,core_iicd_data_setup +0x65a2 028084 branch iicd_init_gpio +: 028087 iicd_init_12m: +0x65a3 028088 jam 5 ,core_iicd_scl_low +0x65a4 028089 jam 7 ,core_iicd_scl_high +0x65a5 028090 jam 7 ,core_iicd_start_setup +0x65a6 028091 jam 7 ,core_iicd_start_hold +0x65a7 028092 jam 7 ,core_iicd_stop_setup +0x65a8 028093 jam 5 ,core_iicd_data_setup +: 028094 iicd_init_gpio: +0x65a9 028095 hfetch 1 ,core_gpio_pu3 +0x65aa 028096 or_into 0xc0 ,pdata +0x65ab 028097 hstore 1 ,core_gpio_pu3 +0x65ac 028098 hfetch 1 ,core_gpio_sel1 +0x65ad 028099 or_into 0x10 ,pdata +0x65ae 028100 hstore 1 ,core_gpio_sel1 +0x65af 028101 rtn +: 028105 wait_iicd_done: +0x65b0 028106 hfetch 1 ,core_dma_status +0x65b1 028107 bbit0 iicd_done ,wait_iicd_done +0x65b2 028108 rtn +: 028116 iicd_read_data: +0x65b3 028117 hstore 2 ,core_iicd_txlen +0x65b4 028118 deposit rega +0x65b5 028119 hstore 2 ,core_iicd_txaddr +0x65b6 028120 deposit regb +0x65b7 028121 hstore 2 ,core_iicd_rxaddr +0x65b8 028122 deposit temp +0x65b9 028123 hstore 2 ,core_iicd_rxlen +0x65ba 028124 arg 1 ,temp +0x65bb 028125 nsetflag blank ,1 ,temp +0x65bc 028126 hstore 1 ,core_iicd_ctrl +0x65bd 028127 jam iicd_start ,core_misc_ctrl +0x65be 028128 branch wait_iicd_done +: 028131 set_eeprom_size_2k: +0x65bf 028132 set1 mark_eeprom_size ,mark +0x65c0 028133 jam 0x08 ,mem_eeprom_block_size +0x65c1 028134 rtn +: 028136 clear_eeprom_size_2k: +0x65c2 028137 set0 mark_eeprom_size ,mark +0x65c3 028138 jam 0x20 ,mem_eeprom_block_size +0x65c4 028139 rtn +: 028142 iicd_read_eep_data_size_2k: +0x65c5 028143 fetch 1 ,mem_eeprom_base +0x65c6 028144 iadd regb ,pdata +0x65c7 028145 store 1 ,mem_addr_mi +0x65c8 028146 branch iicd_read_eep_size_2k +: 028148 iicd_read_eep_size_2k_lcadcode: +0x65c9 028149 fetch 2 ,mem_addr_mi +0x65ca 028150 byteswap pdata ,pdata +0x65cb 028151 store 1 ,mem_addr_mi +: 028156 iicd_read_eep_size_2k: +0x65cc 028157 setarg 3 +0x65cd 028158 hstore 2 ,core_iicd_txlen +0x65ce 028159 jam 0xa0 ,mem_iicd_tbuf +0x65cf 028160 jam 0xa1 ,mem_iicd_tbuf + 2 +0x65d0 028161 branch iicd_read_eep_common +: 028167 iicd_write_protect_eep_data: +0x65d1 028168 storet 2 ,mem_temp +0x65d2 028169 call iicd_eeprom_write_enable +0x65d3 028170 fetcht 2 ,mem_temp +0x65d4 028171 call iicd_write_eep_data +0x65d5 028172 branch iicd_eeprom_write_disable +: 028174 iicd_eeprom_write_enable: +0x65d6 028175 fetch 1 ,mem_eeprom_wp_gpio +0x65d7 028176 rtneq gpio_disable +0x65d8 028177 bbit0 6 ,iicd_wp_gpio_output_low +0x65d9 028178 setarg 150000 +0x65da 028179 call sleep +: 028180 iicd_wp_gpio_output_low: +0x65db 028181 fetcht 1 ,mem_eeprom_wp_gpio +0x65dc 028182 branch gpio_out_active +: 028184 iicd_eeprom_write_disable: +0x65dd 028185 fetcht 1 ,mem_eeprom_wp_gpio +0x65de 028186 branch gpio_out_inactive +: 028191 iicd_read_eep_data: +0x65df 028192 bpatchx patch32_0 ,mem_patch32 +0x65e0 028193 bmark1 mark_eeprom_size ,iicd_read_eep_data_size_2k +0x65e1 028194 fetch 2 ,mem_eeprom_base +0x65e2 028195 iadd regb ,pdata +0x65e3 028196 byteswap pdata ,pdata +0x65e4 028197 store 2 ,mem_addr_mi +: 028200 iicd_read_eep: +0x65e5 028201 bpatchx patch32_1 ,mem_patch32 +0x65e6 028202 bmark1 mark_eeprom_size ,iicd_read_eep_size_2k_lcadcode +0x65e7 028203 setarg 4 +0x65e8 028204 hstore 2 ,core_iicd_txlen +0x65e9 028205 jam 0xa0 ,mem_iicd_tbuf +0x65ea 028206 jam 0xa1 ,mem_iicd_tbuf + 3 +: 028207 iicd_read_eep_common: +0x65eb 028208 setarg mem_iicd_tbuf +0x65ec 028209 hstore 2 ,core_iicd_txaddr +0x65ed 028210 hstoret 2 ,core_iicd_rxlen +0x65ee 028211 deposit rega +0x65ef 028212 hstore 2 ,core_iicd_rxaddr +0x65f0 028213 setarg 2 +0x65f1 028214 isolate0 15 ,rega +0x65f2 028215 setflag true ,0 ,pdata +0x65f3 028216 hstore 1 ,core_iicd_ctrl +0x65f4 028217 jam iicd_start ,core_misc_ctrl +0x65f5 028218 arg iicd_done ,queue +0x65f6 028219 call decrypt_code +0x65f7 028220 call wait_iicd_done +0x65f8 028221 isolate1 iicd_crcok ,pdata +0x65f9 028222 call set_ucode_status +0x65fa 028223 bmark1 mark_eeprom_size ,iicd_read_eep_load_code_size_2k +0x65fb 028224 fetch 2 ,mem_addr_mi +0x65fc 028225 byteswap pdata ,pdata +0x65fd 028226 iadd temp ,pdata +0x65fe 028227 byteswap pdata ,pdata +0x65ff 028228 store 2 ,mem_addr_mi +0x6600 028229 rtn +: 028231 iicd_read_eep_load_code_size_2k: +0x6601 028232 fetch 1 ,mem_addr_mi +0x6602 028233 iadd temp ,pdata +0x6603 028234 byteswap pdata ,pdata +0x6604 028235 store 2 ,mem_addr_mi +0x6605 028236 rtn +: 028242 iicd_write_eep_data: +0x6606 028243 fetch 2 ,mem_eeprom_base +0x6607 028244 iadd regb ,pdata +: 028247 iicd_write_ota_data: +0x6608 028248 store 2 ,mem_pdatatemp +0x6609 028249 bpatchx patch32_2 ,mem_patch32 +0x660a 028250 storet 2 ,mem_temp +0x660b 028251 copy rega ,pdata +0x660c 028252 store 2 ,mem_contr +: 028253 iicd_write_eep_loop: +0x660d 028254 call iicd_eep_transparency +0x660e 028256 fetcht 2 ,mem_regb +0x660f 028257 fetch 2 ,mem_contr +0x6610 028258 copy pdata ,rega +0x6611 028259 fetch 2 ,mem_pdatatemp +0x6612 028261 call iicd_write_eep +0x6613 028263 fetch 2 ,mem_regb +0x6614 028264 fetcht 2 ,mem_contr +0x6615 028265 iadd temp ,temp +0x6616 028266 storet 2 ,mem_contr +0x6617 028267 fetcht 2 ,mem_pdatatemp +0x6618 028268 iadd temp ,temp +0x6619 028269 storet 2 ,mem_pdatatemp +0x661a 028270 fetch 2 ,mem_temp +0x661b 028271 nbranch iicd_write_eep_loop ,blank +0x661c 028272 rtn +: 028280 iicd_eep_transparency: +0x661d 028281 bpatchx patch32_3 ,mem_patch32 +0x661e 028282 fetch 1 ,mem_eeprom_block_size +0x661f 028283 increase -1 ,pdata +0x6620 028284 fetcht 2 ,mem_pdatatemp +0x6621 028285 ior temp ,pdata +0x6622 028286 increase 1 ,pdata +0x6623 028287 store 3 ,mem_regc +0x6624 028289 fetch 2 ,mem_temp +0x6625 028290 iadd temp ,pdata +0x6626 028292 fetcht 3 ,mem_regc +0x6627 028293 isub temp ,pdata +0x6628 028294 nbranch iicd_eep_deal_short_packet ,positive +0x6629 028295 store 2 ,mem_temp +0x662a 028296 fetch 3 ,mem_regc +0x662b 028297 fetcht 2 ,mem_pdatatemp +0x662c 028298 isub temp ,pdata +0x662d 028299 store 2 ,mem_regb +0x662e 028300 rtn +: 028301 iicd_eep_deal_short_packet: +0x662f 028302 fetch 2 ,mem_temp +0x6630 028303 store 2 ,mem_regb +0x6631 028304 setarg 0 +0x6632 028305 store 2 ,mem_temp +0x6633 028306 rtn +: 028308 iicd_write_eep_size_2k: +0x6634 028309 increase 2 ,temp +0x6635 028310 hstoret 2 ,core_iicd_txlen +0x6636 028311 increase -2 ,rega +0x6637 028312 ifetcht 3 ,rega +0x6638 028313 copy temp ,regb +0x6639 028314 arg 0xa0 ,temp +0x663a 028315 istoret 1 ,rega +0x663b 028317 istore 1 ,contw +0x663c 028318 branch iicd_write_eep_common +: 028321 iicd_write_eep: +0x663d 028322 copy pdata ,regb +0x663e 028323 bpatchx patch32_4 ,mem_patch32 +0x663f 028324 bmark1 mark_eeprom_size ,iicd_write_eep_size_2k +0x6640 028325 copy regb ,pdata +0x6641 028326 increase 3 ,temp +0x6642 028327 hstoret 2 ,core_iicd_txlen +0x6643 028328 increase -3 ,rega +0x6644 028329 ifetcht 3 ,rega +0x6645 028330 copy temp ,regb +0x6646 028331 arg 0xa0 ,temp +0x6647 028332 istoret 1 ,rega +0x6648 028333 byteswap pdata ,pdata +0x6649 028334 istore 2 ,contw +: 028335 iicd_write_eep_common: +0x664a 028336 deposit rega +0x664b 028337 hstore 2 ,core_iicd_txaddr +0x664c 028338 setarg 0 +0x664d 028339 hstore 2 ,core_iicd_rxlen +0x664e 028340 jam 1 ,core_iicd_ctrl +0x664f 028341 jam iicd_start ,core_misc_ctrl +0x6650 028342 call wait_iicd_done +0x6651 028343 copy regb ,pdata +0x6652 028344 istore 3 ,rega +: 028346 iic_check_eeprom_standby: +0x6653 028347 bpatchx patch32_5 ,mem_patch32 +0x6654 028348 jam 0 ,mem_iicd_tbuf + 3 +: 028349 iic_check_eeprom_standby_wait: +0x6655 028350 setarg 1 +0x6656 028351 hstore 2 ,core_iicd_txlen +0x6657 028352 jam 0xa0 ,mem_iicd_tbuf +0x6658 028353 setarg mem_iicd_tbuf +0x6659 028354 hstore 2 ,core_iicd_txaddr +0x665a 028355 setarg 0 +0x665b 028356 hstore 2 ,core_iicd_rxlen +0x665c 028357 hstore 2 ,core_iicd_rxaddr +0x665d 028358 setarg 3 +0x665e 028359 hstore 1 ,core_iicd_ctrl +0x665f 028360 jam iicd_start ,core_misc_ctrl +0x6660 028361 call wait_iicd_done +0x6661 028362 hfetch 1 ,core_dma_status +0x6662 028363 rtnbit0 iicd_ack +0x6663 028364 nop 1500 +0x6664 028365 fetch 1 ,mem_iicd_tbuf + 3 +0x6665 028366 increase 1 ,pdata +0x6666 028367 store 1 ,mem_iicd_tbuf + 3 +0x6667 028368 sub pdata ,40 ,null +0x6668 028369 nrtn positive +0x6669 028370 branch iic_check_eeprom_standby_wait +: 028374 otp_enable_chgpump: +0x666a 028375 jam 0x70 ,rfen_chgpump +0x666b 028376 nop param_chgpump_delay +0x666c 028377 rtn +: 028379 otp_disable_chgpump: +0x666d 028380 jam 0x30 ,rfen_chgpump +0x666e 028381 rtn +: 028383 otp_set_addr: +0x666f 028384 lshift3 pdata ,pdata +0x6670 028385 hstore 2 ,core_otp_addr +0x6671 028386 jam 0 ,core_otpd_ctrl +0x6672 028387 rtn +: 028390 otp_write: +0x6673 028391 call otp_set_addr +0x6674 028392 call otp_ce +: 028393 otp_program: +0x6675 028394 ifetcht 1 ,rega +0x6676 028395 increase 1 ,rega +0x6677 028396 force 0 ,queue +: 028397 otp_program_bit: +0x6678 028398 qisolate0 temp +0x6679 028399 branch otp_skip_0 ,true +0x667a 028400 hfetch 1 ,core_otp_din +0x667b 028401 set1 6 ,pdata +0x667c 028402 set1 7 ,pdata +0x667d 028403 hstore 1 ,core_otp_din +0x667e 028404 jam 0x02 ,core_otp_ctrl +0x667f 028405 jam 0x82 ,core_otp_ctrl +0x6680 028406 set0 7 ,pdata +0x6681 028407 hstore 1 ,core_otp_din +0x6682 028408 jam 0x8a ,core_otp_ctrl +0x6683 028409 nop 11 +0x6684 028410 jam 0xca ,core_otp_ctrl +0x6685 028411 nop 33 +0x6686 028412 jam 0x4a ,core_otp_ctrl +0x6687 028413 nop 44 +0x6688 028414 jam 0xca ,core_otp_ctrl +0x6689 028415 nop 22 +0x668a 028416 jam 0x8a ,core_otp_ctrl +0x668b 028417 nop 33 +0x668c 028418 jam 0x82 ,core_otp_ctrl +0x668d 028419 nop 1 +0x668e 028420 jam 0x92 ,core_otp_ctrl +0x668f 028421 nop 10 +0x6690 028422 jam 0xb2 ,core_otp_ctrl +0x6691 028423 hfetch 1 ,core_otp_rdata +0x6692 028424 jam 0x92 ,core_otp_ctrl +0x6693 028425 nop 1 +0x6694 028426 jam 0x82 ,core_otp_ctrl +0x6695 028427 qisolate0 pdata +0x6696 028428 branch otp_program_bit ,true +: 028429 otp_skip_0: +0x6697 028430 hfetch 2 ,core_otp_addr +0x6698 028431 increase 1 ,pdata +0x6699 028432 hstore 2 ,core_otp_addr +0x669a 028433 increase 1 ,queue +0x669b 028434 compare 8 ,queue ,0xf +0x669c 028435 nbranch otp_program_bit ,true +0x669d 028436 loop otp_program +0x669e 028437 jam 0x83 ,core_otp_ctrl +0x669f 028438 rtn +: 028440 otp_ce: +0x66a0 028441 jam 0x82 ,core_otp_ctrl +0x66a1 028442 nop 12 +0x66a2 028443 jam 0x80 ,core_otp_ctrl +0x66a3 028444 jam 0x82 ,core_otp_ctrl +0x66a4 028445 nop 150 +0x66a5 028446 rtn +: 028449 otpd_read_init: +0x66a6 028450 call otp_ce +0x66a7 028451 jam 0xa2 ,core_otp_ctrl +0x66a8 028452 deposit rega +0x66a9 028453 hstore 2 ,core_otpd_addr +0x66aa 028454 set1 11 ,temp +0x66ab 028455 isolate0 15 ,pdata +0x66ac 028456 setflag true ,15 ,temp +0x66ad 028457 hstoret 2 ,core_otpd_len +0x66ae 028458 jam otpd_start ,core_misc_ctrl +0x66af 028459 rtn +: 028461 otpd_wait_end: +0x66b0 028462 hfetch 1 ,core_dma_status +0x66b1 028463 bbit0 otpd_done ,otpd_wait_end +0x66b2 028464 rtn +: 028467 otpd_read_data: +0x66b3 028468 call otp_set_addr +0x66b4 028469 call otpd_read_init +0x66b5 028470 call otpd_wait_end +0x66b6 028471 jam 0x83 ,core_otp_ctrl +0x66b7 028472 rtn +: 028477 otpd_read_code: +0x66b8 028478 hfetch 2 ,core_current_otp_addr +0x66b9 028479 hstore 2 ,core_otp_addr +0x66ba 028480 call otpd_read_init +0x66bb 028481 arg otpd_done ,queue +0x66bc 028482 call decrypt_code +0x66bd 028483 call otpd_wait_end +0x66be 028484 isolate1 otpd_crcok ,pdata +0x66bf 028485 call set_ucode_status +0x66c0 028486 jam 0x83 ,core_otp_ctrl +0x66c1 028487 rtn +: 028490 uartd_prepare_tx: +0x66c2 028491 hfetch 2 ,core_uart_twptr +0x66c3 028492 iforce contwu +0x66c4 028493 rtn +: 028495 uartd_send: +0x66c5 028496 deposit contwu +0x66c6 028497 hstore 2 ,core_uart_twptr +0x66c7 028498 rtn +: 028500 uartd_rxdone: +0x66c8 028501 deposit contru +0x66c9 028502 hstore 2 ,core_uart_rrptr +0x66ca 028503 rtn +: 028505 uartd_prepare_rx: +0x66cb 028506 hfetch 2 ,core_uart_rrptr +0x66cc 028507 copy pdata ,contru +0x66cd 028508 rtn +: 028510 uart_set_baud_by_mem: +0x66ce 028511 fetch uart_baud_len ,mem_baud +0x66cf 028512 hstore uart_baud_len ,core_uart_baud +0x66d0 028513 rtn +: 028515 uart_copy_tx_bytes_fast: +0x66d1 028516 deposit loopcnt +0x66d2 028517 rtn blank +: 028518 uart_copy_tx_bytes_fast_loop: +0x66d3 028519 increase -8 ,loopcnt +0x66d4 028520 call uart_tx_8_bytes ,positive +0x66d5 028521 rtn zero +0x66d6 028522 branch uart_copy_tx_bytes_fast_loop ,positive +0x66d7 028523 increase 8 ,loopcnt +: 028524 uart_copy_tx_bytes_fast_loop_four: +0x66d8 028525 increase -4 ,loopcnt +0x66d9 028526 call uart_tx_4_bytes ,positive +0x66da 028527 rtn zero +0x66db 028528 branch uart_copy_tx_bytes_fast_loop_four ,positive +0x66dc 028529 increase 4 ,loopcnt +0x66dd 028530 branch uart_copy_tx_bytes +: 028532 uart_tx_8_bytes: +0x66de 028533 ifetch 8 ,contr +0x66df 028534 istore 8 ,contwu +0x66e0 028535 rtn +: 028537 uart_tx_4_bytes: +0x66e1 028538 ifetch 4 ,contr +0x66e2 028539 istore 4 ,contwu +0x66e3 028540 rtn +: 028542 uart_copy_tx_bytes: +0x66e4 028543 deposit loopcnt +0x66e5 028544 rtn blank +: 028545 uart_copy_tx_bytes_loop: +0x66e6 028546 ifetch 1 ,contr +0x66e7 028547 istore 1 ,contwu +0x66e8 028548 loop uart_copy_tx_bytes_loop +0x66e9 028549 rtn +: 028551 uart_copy_rx_bytes_fast: +0x66ea 028552 deposit loopcnt +0x66eb 028553 rtn blank +: 028554 uart_copy_rx_bytes_fast_loop: +0x66ec 028555 increase -8 ,loopcnt +0x66ed 028556 call uart_rx_8_bytes ,positive +0x66ee 028557 rtn zero +0x66ef 028558 branch uart_copy_rx_bytes_fast_loop ,positive +0x66f0 028559 increase 8 ,loopcnt +: 028560 uart_copy_rx_bytes_fast_loop_four: +0x66f1 028561 increase -4 ,loopcnt +0x66f2 028562 call uart_rx_4_bytes ,positive +0x66f3 028563 rtn zero +0x66f4 028564 branch uart_copy_rx_bytes_fast_loop_four ,positive +0x66f5 028565 increase 4 ,loopcnt +0x66f6 028566 branch uart_copy_rx_bytes +: 028568 uart_rx_8_bytes: +0x66f7 028569 ifetch 8 ,contru +0x66f8 028570 istore 8 ,contw +0x66f9 028571 rtn +: 028573 uart_rx_4_bytes: +0x66fa 028574 ifetch 4 ,contru +0x66fb 028575 istore 4 ,contw +0x66fc 028576 rtn +: 028579 uart_copy_rx_bytes: +0x66fd 028580 deposit loopcnt +0x66fe 028581 rtn blank +: 028582 uart_copy_rx_bytes_loop: +0x66ff 028583 ifetch 1 ,contru +0x6700 028584 istore 1 ,contw +0x6701 028585 loop uart_copy_rx_bytes_loop +0x6702 028586 rtn +: 028589 uart_copy_rx2tx: +0x6703 028590 deposit loopcnt +0x6704 028591 rtn blank +: 028592 uart_copy_rx2tx_loop: +0x6705 028593 ifetch 1 ,contru +0x6706 028594 istore 1 ,contwu +0x6707 028595 loop uart_copy_rx2tx_loop +0x6708 028596 rtn +: 028601 app_store_nvram_event: +0x6709 028602 jam bt_evt_store_nvram ,mem_fifo_temp +0x670a 028603 branch ui_ipc_send_event +: 028605 check_51cmd_store_reconn_info: +: 028606 check_51cmd_update_device_record: +0x670b 028607 bpatchx patch32_6 ,mem_patch32 +0x670c 028608 fetch 1 ,mem_nv_data_number +0x670d 028609 rtn blank +0x670e 028610 call check_nvram +0x670f 028611 call init_device_list ,zero +0x6710 028612 call nvram_find_addr_from_bd_list +: 028613 write_device_record: +0x6711 028614 fetch 1 ,mem_nv_data_number +0x6712 028615 icopy regc +0x6713 028616 fetcht 2 ,mem_nv_data_ptr +0x6714 028617 storet 2 ,mem_list_item_ptr +: 028618 write_device_loop_find: +0x6715 028619 copy regc ,pdata +0x6716 028620 branch app_store_nvram_event ,blank +0x6717 028621 increase -1 ,regc +0x6718 028622 copy temp ,rega +0x6719 028623 ifetch 1 ,rega +0x671a 028624 fetcht 1 ,mem_select_list_item +0x671b 028625 isub temp ,null +0x671c 028626 call set_index_finded_device ,zero +0x671d 028627 branch write_device_loop_find0 ,positive +0x671e 028628 ifetch 1 ,rega +0x671f 028629 increase 1 ,pdata +0x6720 028630 istore 1 ,rega +: 028631 write_device_loop_find0: +0x6721 028632 fetcht 2 ,mem_list_item_ptr +0x6722 028633 increase nv_data_len ,temp +0x6723 028634 storet 2 ,mem_list_item_ptr +0x6724 028635 branch write_device_loop_find +: 028637 set_index_finded_device: +0x6725 028638 setarg 0 +0x6726 028639 istore 1 ,rega +0x6727 028640 fetch 1 ,mem_temp_reconn_record +0x6728 028641 istore 1 ,contw +0x6729 028642 bne rec_3_mode ,set_index_finded_device_ble_mode +0x672a 028643 arg mem_link_key ,regb +: 028644 set_index_find_device_master_addr: +0x672b 028645 ifetch 6 ,contr +0x672c 028646 istore 8 ,contw +0x672d 028647 setarg 0 +0x672e 028648 istore 8 ,contw +0x672f 028649 copy regb ,contr +: 028650 store_rec_data_common: +0x6730 028651 call memcpy16 +0x6731 028652 force 1 ,null +0x6732 028653 rtn +: 028655 set_index_finded_device_ble_mode: +0x6733 028656 beq rec_4_mode_random_resolvable_private_address ,set_index_finded_device_irk +0x6734 028657 beq rec_4_mode_random_non_resolvable_private_address ,set_index_finded_device_ediv +0x6735 028658 arg mem_le_ltk ,regb +0x6736 028659 branch set_index_find_device_master_addr +: 028661 set_index_finded_device_irk: +0x6737 028662 arg mem_le_irk ,contr +0x6738 028663 call memcpy16 +: 028664 store_ble_rec_data_common: +0x6739 028665 arg mem_le_ltk ,contr +0x673a 028666 branch store_rec_data_common +: 028668 set_index_finded_device_ediv: +0x673b 028669 arg mem_le_rand ,contr +0x673c 028670 call memcpy16 +0x673d 028671 branch store_ble_rec_data_common +: 028674 nvram_find_addr_from_bd_list: +0x673e 028675 call disable_user +0x673f 028676 fetch 1 ,mem_nv_data_number +0x6740 028677 rtn blank +0x6741 028678 fetch 2 ,mem_ui_state_map +0x6742 028679 bbit1 ui_state_bt_connected ,find_addr_from_bd_list_spp_mode +: 028680 find_addr_from_bd_list_ble_mode: +0x6743 028681 bpatchx patch32_7 ,mem_patch32 +0x6744 028682 fetch 1 ,mem_le_conn_peer_addr_type +0x6745 028683 beq master_public_addr ,find_addr_from_bd_list_static_addr +0x6746 028684 fetch 1 ,mem_le_plap + 5 +0x6747 028685 compare 0xc0 ,pdata ,0xc0 +0x6748 028686 branch find_addr_from_bd_list_static_addr ,true +0x6749 028687 compare 0x40 ,pdata ,0xc0 +0x674a 028688 branch find_addr_from_bd_list_random_addr ,true +0x674b 028689 compare 0x00 ,pdata ,0xc0 +0x674c 028690 branch find_addr_from_bd_list_random_non_resolvable_private_address ,true +: 028691 find_addr_from_bd_list_static_addr: +0x674d 028692 jam rec_4_mode_static_address ,mem_temp_reconn_record +0x674e 028693 fetch 6 ,mem_le_plap +0x674f 028694 branch find_addr_from_bd_list_common +: 028696 find_addr_from_bd_list_random_non_resolvable_private_address: +0x6750 028697 jam rec_4_mode_random_non_resolvable_private_address ,mem_temp_reconn_record +0x6751 028698 branch find_addr_from_bd_list_common +: 028701 find_addr_from_bd_list_random_addr: +0x6752 028702 jam rec_4_mode_random_resolvable_private_address ,mem_temp_reconn_record +0x6753 028703 branch find_addr_from_bd_list_common +: 028706 find_addr_from_bd_list_spp_mode: +0x6754 028707 bpatchx patch33_0 ,mem_patch33 +0x6755 028708 jam rec_3_mode ,mem_temp_reconn_record +0x6756 028709 fetch 6 ,mem_plap +: 028710 find_addr_from_bd_list_common: +0x6757 028711 store 6 ,mem_temp_reconn_record + 1 +0x6758 028712 fetch 2 ,mem_nv_data_ptr +0x6759 028713 ifetcht 1 ,pdata +0x675a 028714 pincrease 1 +0x675b 028715 store 2 ,mem_list_item_ptr +0x675c 028716 storet 1 ,mem_select_list_item +0x675d 028717 fetch 1 ,mem_nv_data_number +0x675e 028718 icopy regc +: 028719 nvram_find_addr_from_list: +0x675f 028720 fetch 2 ,mem_list_item_ptr +0x6760 028721 copy pdata ,rega +0x6761 028722 call nvram_find_addr_from_list_compare +0x6762 028723 rtn user +0x6763 028724 fetcht 2 ,mem_list_item_ptr +0x6764 028725 increase nv_data_len ,temp +0x6765 028726 storet 2 ,mem_list_item_ptr +0x6766 028727 increase -1 ,temp +0x6767 028728 ifetch 1 ,temp +0x6768 028729 store 1 ,mem_select_list_item +0x6769 028730 increase -1 ,regc +0x676a 028731 nbranch nvram_find_addr_from_list ,zero +0x676b 028732 fetch 1 ,mem_nv_data_number +0x676c 028733 pincrease decreased_one +0x676d 028734 store 1 ,mem_select_list_item +0x676e 028735 rtn +: 028736 nvram_find_addr_from_list_compare: +0x676f 028737 fetch 1 ,mem_temp_reconn_record +0x6770 028738 bne rec_3_mode ,find_addr_from_list_compare_ble_mode +: 028739 find_master_addr_from_list_compare: +0x6771 028740 arg mem_temp_reconn_record ,regb +0x6772 028741 arg 7 ,loopcnt +0x6773 028742 call string_compare +0x6774 028743 branch enable_user ,zero +0x6775 028744 rtn +: 028746 find_addr_from_list_compare_ble_mode: +0x6776 028747 beq rec_4_mode_random_resolvable_private_address ,find_irk_form_list_compare +0x6777 028748 beq rec_4_mode_random_non_resolvable_private_address ,find_ediv_form_list_compare +0x6778 028749 branch find_master_addr_from_list_compare +: 028751 find_irk_form_list_compare: +0x6779 028752 ifetcht 1 ,rega +0x677a 028753 isub temp ,null +0x677b 028754 nrtn zero +0x677c 028755 arg mem_le_prand ,contw +0x677d 028756 arg 16 ,loopcnt +0x677e 028757 call clear_mem +0x677f 028758 fetch 3 ,mem_le_plap + 3 +0x6780 028759 store 3 ,mem_le_prand +0x6781 028760 call genernate_master_macaddress +0x6782 028761 fetch 2 ,mem_le_aes_128 + 13 +0x6783 028762 byteswap pdata ,pdata +0x6784 028763 lshift8 pdata ,temp +0x6785 028764 ifetch 1 ,contr +0x6786 028765 iadd temp ,pdata +0x6787 028766 fetcht 3 ,mem_le_plap +0x6788 028767 isub temp ,null +0x6789 028768 branch enable_user ,zero +0x678a 028769 rtn +: 028772 genernate_master_macaddress: +0x678b 028773 arg mem_le_prand ,contr +0x678c 028774 call load_data128 +0x678d 028776 ifetch 1 ,rega +0x678e 028777 call load_regext +0x678f 028778 force 0x38 ,aes_ctrl +0x6790 028779 force 0x0 ,aes_ctrl +0x6791 028780 call wait_aes +0x6792 028781 arg mem_le_aes_128 ,contw +0x6793 028782 branch store_aes_result +: 028784 find_ediv_form_list_compare: +0x6794 028785 ifetcht 1 ,rega +0x6795 028786 isub temp ,null +0x6796 028787 nrtn zero +0x6797 028788 copy contr ,rega +0x6798 028789 add contr ,8 ,regc +0x6799 028790 arg mem_le_rand ,regb +0x679a 028791 arg 8 ,loopcnt +0x679b 028792 call string_compare +0x679c 028793 branch enable_user ,zero +0x679d 028794 copy regc ,rega +0x679e 028795 arg mem_le_irk ,regb +0x679f 028796 arg 8 ,loopcnt +0x67a0 028797 call string_compare +0x67a1 028798 branch enable_user ,zero +0x67a2 028799 rtn +: 028801 check_nvram: +0x67a3 028802 fetch 2 ,mem_nv_data_ptr +0x67a4 028803 ifetcht 1 ,pdata +0x67a5 028804 pincrease nv_data_len +0x67a6 028805 ifetch 1 ,pdata +0x67a7 028806 isub temp ,null +0x67a8 028807 rtn +: 028809 init_device_list: +0x67a9 028810 fetch 1 ,mem_nv_data_number +0x67aa 028811 icopy loopcnt +0x67ab 028812 fetcht 2 ,mem_nv_data_ptr +0x67ac 028813 setarg 0 +: 028814 init_device_list_loop: +0x67ad 028815 istore 1 ,temp +0x67ae 028816 increase nv_data_len ,temp +0x67af 028817 pincrease 1 +0x67b0 028818 loop init_device_list_loop +0x67b1 028819 rtn +: 028821 load_device_list: +0x67b2 028822 bpatchx patch33_1 ,mem_patch33 +0x67b3 028823 call nvram_find_addr_from_bd_list +0x67b4 028824 fetch 1 ,mem_state +0x67b5 028825 setflag user ,state_combkey ,pdata +0x67b6 028826 store 1 ,mem_state +0x67b7 028827 nbranch clear_key_exists ,user +0x67b8 028828 add rega ,10 ,contr +0x67b9 028830 arg mem_link_key ,contw +0x67ba 028831 call memcpy16 +0x67bb 028832 branch check_link_key_load +: 028833 clear_key_exists: +0x67bc 028834 jam 0 ,mem_link_key_exists +0x67bd 028835 rtn +: 028837 load_device_list_mode_4: +0x67be 028838 fetch 9 ,mem_le_ediv +0x67bf 028839 branch clear_ltk_exists ,blank +0x67c0 028840 call nvram_find_addr_from_bd_list +0x67c1 028841 nbranch clear_ltk_exists ,user +0x67c2 028842 fetch 2 ,mem_list_item_ptr +0x67c3 028843 add pdata ,1 ,contr +0x67c4 028844 arg mem_le_irk ,contw +0x67c5 028845 call memcpy16 +0x67c6 028846 arg mem_le_ltk ,contw +0x67c7 028847 call memcpy16 +0x67c8 028848 jam 1 ,mem_ltk_exists +0x67c9 028849 rtn +: 028851 clear_ltk_exists: +0x67ca 028852 jam 0 ,mem_ltk_exists +0x67cb 028853 rtn +: 028856 eeprom_store_le_reconn_info: +0x67cc 028857 fetch 6 ,mem_le_plap +0x67cd 028858 store 6 ,mem_temp_lap +0x67ce 028859 jam rec_4_mode ,mem_record_bt_mode +0x67cf 028860 branch eeprom_store_reconn_info +: 028861 eeprom_store_bd_reconn_info: +0x67d0 028862 fetch 6 ,mem_plap +0x67d1 028863 store 6 ,mem_temp_lap +0x67d2 028864 jam rec_3_mode ,mem_record_bt_mode +: 028865 eeprom_store_reconn_info: +0x67d3 028866 fetch 1 ,mem_device_option +0x67d4 028867 beq dvc_op_module ,check_51cmd_update_device_record +0x67d5 028868 bbit1 dvc_op_mouse ,mouse_store_remote_bdaddr +0x67d6 028869 rtn +: 028872 check_link_key_load: +0x67d7 028873 fetch 8 ,mem_link_key +0x67d8 028874 fetcht 8 ,mem_link_key + 8 +0x67d9 028875 ior temp ,pdata +0x67da 028876 rtn blank +0x67db 028877 jam 1 ,mem_link_key_exists +0x67dc 028878 rtn +: 028885 gpio_set_wake_by_current_state: +0x67dd 028886 bpatchx patch33_2 ,mem_patch33 +0x67de 028887 set1 7 ,temp +0x67df 028888 call gpio_get_bit +0x67e0 028889 nsetflag true ,7 ,temp +: 028894 gpio_set_wake: +0x67e1 028895 bpatchx patch33_3 ,mem_patch33 +0x67e2 028896 sub temp ,ui_button_gpio_disable ,null +0x67e3 028897 rtn zero +0x67e4 028898 isolate0 7 ,temp +0x67e5 028899 and temp ,0x1f ,queue +0x67e6 028900 fetch 4 ,mem_gpio_wakeup_low +0x67e7 028901 qsetflag true ,pdata +0x67e8 028902 store 4 ,mem_gpio_wakeup_low +0x67e9 028903 fetch 4 ,mem_gpio_wakeup_high +0x67ea 028904 nqsetflag true ,pdata +0x67eb 028905 store 4 ,mem_gpio_wakeup_high +0x67ec 028906 rtn +: 028909 gpio_clr_wake: +0x67ed 028910 bpatchx patch33_4 ,mem_patch33 +0x67ee 028911 sub temp ,ui_button_gpio_disable ,null +0x67ef 028912 rtn zero +0x67f0 028913 isolate0 7 ,temp +0x67f1 028914 and temp ,0x1f ,queue +0x67f2 028915 fetch 4 ,mem_gpio_wakeup_low +0x67f3 028916 qset0 pdata +0x67f4 028917 store 4 ,mem_gpio_wakeup_low +0x67f5 028918 fetch 4 ,mem_gpio_wakeup_high +0x67f6 028919 qset0 pdata +0x67f7 028920 store 4 ,mem_gpio_wakeup_high +0x67f8 028921 rtn +: 028924 gpio_config_input_nowake: +0x67f9 028925 call gpio_clr_wake +0x67fa 028926 branch gpio_config_input_without_wake +: 028929 gpio_config_input: +0x67fb 028930 sub temp ,ui_button_gpio_disable ,null +0x67fc 028931 rtn zero +0x67fd 028932 ncall gpio_set_wake ,wake +: 028934 gpio_config_input_without_wake: +0x67fe 028935 arg core_gpio_pd0 ,contw +0x67ff 028936 call gpio_set_bit +0x6800 028937 setflip gpio_active_bit ,temp +0x6801 028938 arg core_gpio_pu0 ,contw +0x6802 028939 call gpio_set_bit +0x6803 028940 set0 gpio_active_bit ,temp +0x6804 028941 arg core_gpio_oe0 ,contw +0x6805 028942 branch gpio_set_bit +: 028945 gpio_set_high_impedance: +0x6806 028946 arg core_gpio_pd0 ,contw +0x6807 028947 call gpio_set_bit +0x6808 028948 set0 gpio_active_bit ,temp +0x6809 028949 arg core_gpio_pu0 ,contw +0x680a 028950 call gpio_set_bit +0x680b 028951 set0 gpio_active_bit ,temp +0x680c 028952 arg core_gpio_oe0 ,contw +0x680d 028953 branch gpio_set_bit +: 028957 gpio_config_output: +0x680e 028958 sub temp ,ui_button_gpio_disable ,null +0x680f 028959 rtn zero +0x6810 028960 setflip gpio_active_bit ,temp +0x6811 028961 call gpio_out +: 028962 gpio_config_output0: +0x6812 028963 set1 gpio_active_bit ,temp +0x6813 028964 arg core_gpio_oe0 ,contw +0x6814 028965 branch gpio_set_bit +: 028967 gpio_common: +0x6815 028968 and temp ,0x07 ,queue +0x6816 028969 rshift3 temp ,pdata +0x6817 028970 and_into 3 ,pdata +0x6818 028971 iadd contw ,contw +0x6819 028972 ifetch 1 ,contw +0x681a 028973 rtn +: 028975 gpio_check_active: +0x681b 028976 arg core_gpio_out0 ,contw +0x681c 028977 branch get_bit_common +: 028981 gpio_get_bit: +0x681d 028982 arg core_gpio_in ,contw +: 028983 get_bit_common: +0x681e 028984 call gpio_common +0x681f 028985 isolate1 gpio_active_bit ,temp +0x6820 028986 branch gpio_get_bit_reverse ,true +0x6821 028987 qisolate0 pdata +0x6822 028988 rtn +: 028989 gpio_get_bit_reverse: +0x6823 028990 qisolate1 pdata +0x6824 028991 rtn +: 028993 gpio_out_inactive: +0x6825 028994 sub temp ,ui_button_gpio_disable ,null +0x6826 028995 rtn zero +0x6827 028996 isolate1 7 ,null +0x6828 028997 branch gpio_out_flag +: 028999 gpio_out_active: +0x6829 029000 sub temp ,ui_button_gpio_disable ,null +0x682a 029001 rtn zero +0x682b 029002 isolate0 7 ,null +: 029005 gpio_out_flag: +0x682c 029006 setarg 0 +0x682d 029007 nsetflag true ,gpio_active_bit ,pdata +0x682e 029008 ixor temp ,temp +: 029011 gpio_out: +0x682f 029012 arg core_gpio_out0 ,contw +: 029015 gpio_set_bit: +0x6830 029016 call gpio_common +0x6831 029017 isolate1 gpio_active_bit ,temp +0x6832 029018 qsetflag true ,pdata +0x6833 029019 istore 1 ,contw +0x6834 029020 rtn +: 029022 gpio_set_before_lpm_common: +0x6835 029023 arg -1 ,rega +0x6836 029024 hfetch 1 ,core_gpio_sel1 +0x6837 029025 compare 0x02 ,pdata ,0x03 +0x6838 029026 call neglact4_from_23_pin ,true +0x6839 029028 compare 0x01 ,pdata ,0x03 +0x683a 029029 call neglact2_form_25_pin ,true +0x683b 029031 compare 0x03 ,pdata ,0x03 +0x683c 029032 call neglact2_form_25_pin ,true +0x683d 029034 isolate1 2 ,pdata +0x683e 029035 call neglect2_from_6_pin ,true +0x683f 029037 isolate1 3 ,pdata +0x6840 029038 call neglect4_from_9_pin ,true +0x6841 029040 isolate1 4 ,pdata +0x6842 029041 call neglact2_form_30_pin ,true +0x6843 029043 isolate1 6 ,pdata +0x6844 029044 nsetflag true ,04 ,rega +0x6845 029046 isolate1 7 ,pdata +0x6846 029047 nsetflag true ,05 ,rega +0x6847 029049 hfetch 1 ,core_gpio_sel2 +0x6848 029050 isolate1 0 ,pdata +0x6849 029051 nsetflag true ,27 ,rega +0x684a 029052 isolate1 1 ,pdata +0x684b 029053 nsetflag true ,28 ,rega +0x684c 029054 isolate1 2 ,pdata +0x684d 029055 nsetflag true ,03 ,rega +0x684e 029056 isolate1 3 ,pdata +0x684f 029057 nsetflag true ,08 ,rega +0x6850 029058 isolate1 4 ,pdata +0x6851 029059 nsetflag true ,20 ,rega +0x6852 029060 isolate1 5 ,pdata +0x6853 029061 nsetflag true ,21 ,rega +0x6854 029062 isolate1 6 ,pdata +0x6855 029063 nsetflag true ,22 ,rega +0x6856 029064 isolate1 7 ,pdata +0x6857 029065 nsetflag true ,23 ,rega +0x6858 029067 hfetch 1 ,core_gpio_sel +0x6859 029068 isolate1 0 ,pdata +0x685a 029069 nsetflag true ,05 ,rega +0x685b 029070 isolate1 1 ,pdata +0x685c 029071 nsetflag true ,06 ,rega +0x685d 029072 isolate1 2 ,pdata +0x685e 029073 nsetflag true ,07 ,rega +0x685f 029074 isolate1 3 ,pdata +0x6860 029075 nsetflag true ,18 ,rega +0x6861 029076 isolate1 4 ,pdata +0x6862 029077 nsetflag true ,19 ,rega +0x6863 029078 isolate1 5 ,pdata +0x6864 029079 nsetflag true ,20 ,rega +0x6865 029080 isolate1 6 ,pdata +0x6866 029081 nsetflag true ,21 ,rega +0x6867 029082 isolate1 7 ,pdata +0x6868 029083 nsetflag true ,22 ,rega +0x6869 029085 hfetch 1 ,core_uart_ctrl +0x686a 029086 isolate1 4 ,pdata +0x686b 029087 call neglact2_form_2_pin ,true +0x686c 029088 bpatchx patch33_5 ,mem_patch33 +0x686d 029090 hfetch 4 ,core_gpio_pu0 +0x686e 029091 hfetcht 4 ,core_gpio_pd0 +0x686f 029092 ior temp ,pdata +0x6870 029093 invert pdata ,pdata +0x6871 029094 iand rega ,pdata +0x6872 029096 hstore 4 ,core_gpio_oe0 +0x6873 029097 rtn +: 029100 neglect2_from_6_pin: +0x6874 029101 arg 6 ,queue +0x6875 029102 branch neglect_2_pin +: 029103 neglect4_from_9_pin: +0x6876 029104 arg 9 ,queue +0x6877 029105 branch neglact_4_pin +: 029106 neglact4_from_23_pin: +0x6878 029107 arg 23 ,queue +0x6879 029108 branch neglact_4_pin +: 029109 neglact2_form_25_pin: +0x687a 029110 arg 25 ,queue +0x687b 029111 branch neglect_2_pin +: 029112 neglact2_form_30_pin: +0x687c 029113 arg 30 ,queue +0x687d 029114 branch neglect_2_pin +: 029115 neglact2_form_2_pin: +0x687e 029116 arg 2 ,queue +0x687f 029117 branch neglect_2_pin +: 029118 neglact_1_pin: +0x6880 029119 arg 1 ,loopcnt +0x6881 029120 branch neglect_pin_loop +: 029121 neglact_4_pin: +0x6882 029122 arg 4 ,loopcnt +0x6883 029123 branch neglect_pin_loop +: 029124 neglect_2_pin: +0x6884 029125 arg 2 ,loopcnt +: 029126 neglect_pin_loop: +0x6885 029127 qset0 rega +0x6886 029128 increase 1 ,queue +0x6887 029129 loop neglect_pin_loop +0x6888 029130 rtn +: 029138 gpio_cfg_uart_tx_output: +0x6889 029139 call gpio_uart2gpio +0x688a 029140 arg uart_wakeup_tx ,temp +0x688b 029141 branch gpio_config_output +: 029143 gpio_pu_uart_tx: +0x688c 029144 call gpio_cfg_uart_tx_output +0x688d 029145 arg uart_wakeup_tx ,temp +0x688e 029146 branch gpio_out_inactive +: 029150 gpio_rx_config_input_with_pu: +0x688f 029151 call gpio_uart2gpio +0x6890 029152 hfetch 1 ,core_gpio_pu0 +0x6891 029153 set1 uart_wakeup_rx ,pdata +0x6892 029154 hstore 1 ,core_gpio_pu0 +0x6893 029155 arg uart_wakeup_rx ,temp +0x6894 029156 branch gpio_config_input +: 029158 gpio_uart2gpio: +0x6895 029159 hfetch 1 ,core_gpio_sel1 +0x6896 029160 and_into 0xfb ,pdata +0x6897 029161 hstore 1 ,core_gpio_sel1 +0x6898 029162 rtn +: 029164 gpio_check_uart_state: +0x6899 029165 hfetch 1 ,core_gpio_sel1 +0x689a 029166 isolate1 2 ,pdata +0x689b 029167 rtn +: 029169 load_chip_option: +0x689c 029170 call otp_enable_chgpump +0x689d 029171 setarg otp_chip_functions +0x689e 029172 arg mem_chip_functions ,rega +0x689f 029173 arg 0x02 ,temp +0x68a0 029174 call otpd_read_data +0x68a1 029175 branch otp_disable_chgpump +: 029178 load_adc_init: +0x68a2 029179 call otp_enable_chgpump +0x68a3 029180 setarg otp_adc_io_0_5v_addr +0x68a4 029181 arg mem_0_5_adc_io_data ,rega +0x68a5 029182 arg 14 ,temp +0x68a6 029183 call otpd_read_data +0x68a7 029184 branch otp_disable_chgpump +: 029188 adc_init_data: +0x68a8 029189 bpatchx patch33_6 ,mem_patch33 +0x68a9 029191 call load_adc_init +0x68aa 029193 fetch 1 ,mem_adc_config_flag +0x68ab 029194 beq adc_config_vinlpm ,adc_init_data_vinlpm +0x68ac 029195 beq adc_config_hvin ,adc_init_data_hvin +0x68ad 029196 beq adc_config_gpio ,adc_init_data_io +0x68ae 029197 rtn +: 029199 adc_init_data_vinlpm: +0x68af 029200 fetcht 2 ,mem_otp_adc_flag +0x68b0 029201 setarg otp_adc_flag +0x68b1 029202 isub temp ,null +0x68b2 029203 branch adc_check_data_vinlpm ,zero +0x68b3 029204 setarg 0x4dfa +0x68b4 029205 store 2 ,mem_3v_adc_vinlpm_data +0x68b5 029206 setarg 0x4894 +0x68b6 029207 store 2 ,mem_2v_adc_vinlpm_data +0x68b7 029208 branch set_vdd_reference_voltage_1v +: 029210 adc_check_data_vinlpm: +0x68b8 029211 fetch 2 ,mem_3v_adc_vinlpm_data +0x68b9 029212 nbranch adc_check_2v_vinlpm ,blank +0x68ba 029213 setarg 0x4dfa +0x68bb 029214 store 2 ,mem_3v_adc_vinlpm_data +: 029215 adc_check_2v_vinlpm: +0x68bc 029216 fetch 2 ,mem_2v_adc_vinlpm_data +0x68bd 029217 nbranch set_vdd_reference_voltage_1v ,blank +0x68be 029218 setarg 0x4894 +0x68bf 029219 store 2 ,mem_2v_adc_vinlpm_data +: 029220 set_vdd_reference_voltage_1v: +0x68c0 029221 setarg 100 +0x68c1 029222 store 2 ,mem_reference_voltage +0x68c2 029223 rtn +: 029225 adc_init_data_hvin: +0x68c3 029226 fetcht 2 ,mem_otp_adc_flag +0x68c4 029227 setarg otp_adc_flag +0x68c5 029228 isub temp ,null +0x68c6 029229 branch adc_check_data_hvin ,zero +0x68c7 029230 setarg 0x5932 +0x68c8 029231 store 2 ,mem_5v_adc_hvin_data +0x68c9 029232 setarg 0x4323 +0x68ca 029233 store 2 ,mem_1v_adc_hvin_data +0x68cb 029234 branch set_vdd_reference_voltage_4v +: 029236 adc_check_data_hvin: +0x68cc 029237 fetch 2 ,mem_5v_adc_hvin_data +0x68cd 029238 nbranch adc_check_1v_hvin ,blank +0x68ce 029239 setarg 0x5932 +0x68cf 029240 store 2 ,mem_5v_adc_hvin_data +: 029241 adc_check_1v_hvin: +0x68d0 029242 fetch 2 ,mem_1v_adc_hvin_data +0x68d1 029243 nbranch set_vdd_reference_voltage_4v ,blank +0x68d2 029244 setarg 0x4323 +0x68d3 029245 store 2 ,mem_1v_adc_hvin_data +: 029246 set_vdd_reference_voltage_4v: +0x68d4 029247 setarg 400 +0x68d5 029248 store 2 ,mem_reference_voltage +0x68d6 029249 rtn +: 029251 adc_init_data_io: +0x68d7 029252 fetcht 2 ,mem_otp_adc_flag +0x68d8 029253 setarg otp_adc_flag +0x68d9 029254 isub temp ,null +0x68da 029255 branch adc_check_data_io ,zero +0x68db 029256 setarg 0x6946 +0x68dc 029257 store 2 ,mem_1v_adc_io_data +0x68dd 029258 setarg 0x5377 +0x68de 029259 store 2 ,mem_0_5_adc_io_data +0x68df 029260 branch set_vdd_reference_voltage_0_5v +: 029262 adc_check_data_io: +0x68e0 029263 fetch 2 ,mem_1v_adc_io_data +0x68e1 029264 nbranch adc_check_0_5v_io ,blank +0x68e2 029265 setarg 0x6946 +0x68e3 029266 store 2 ,mem_1v_adc_io_data +: 029267 adc_check_0_5v_io: +0x68e4 029268 fetch 2 ,mem_0_5_adc_io_data +0x68e5 029269 nbranch set_vdd_reference_voltage_0_5v ,blank +0x68e6 029270 setarg 0x5377 +0x68e7 029271 store 2 ,mem_0_5_adc_io_data +: 029272 set_vdd_reference_voltage_0_5v: +0x68e8 029273 setarg 50 +0x68e9 029274 store 2 ,mem_reference_voltage +0x68ea 029275 rtn +: 029278 adc_set_mode: +0x68eb 029279 fetch 1 ,mem_adc_config_flag +0x68ec 029280 beq adc_config_vinlpm ,adc_check_vinlpm +0x68ed 029281 beq adc_config_hvin ,adc_check_hvin +0x68ee 029282 beq adc_config_gpio ,adc_check_gpio +0x68ef 029283 rtn +: 029284 adc_check_vinlpm: +0x68f0 029285 jam 0xbf ,rf_adc_mode +0x68f1 029286 branch read_adc +: 029287 adc_check_hvin: +0x68f2 029288 jam 0xaf ,rf_adc_mode +0x68f3 029289 branch read_adc +: 029290 adc_check_gpio: +0x68f4 029291 jam 0x8f ,rf_adc_mode +0x68f5 029292 fetch 1 ,mem_adc_channel +0x68f6 029293 hstore 1 ,rf_adc_ch +0x68f7 029294 branch read_adc +: 029295 read_adc: +0x68f8 029296 bpatchx patch33_7 ,mem_patch33 +0x68f9 029297 hfetch 1 ,core_uart_baud + 1 +0x68fa 029298 set1 7 ,pdata +0x68fb 029299 hstore 1 ,core_uart_baud + 1 +0x68fc 029300 hfetch 1 ,rf_adc_ch +0x68fd 029301 or_into 0x30 ,pdata +0x68fe 029302 hstore 1 ,rf_adc_ch +0x68ff 029303 jam 0x7c ,rfen_adc +0x6900 029304 jam 0xaa ,rf_adc_gc +0x6901 029305 nop 5000 +0x6902 029306 hfetcht 2 ,core_adc_sum +0x6903 029307 hfetch 1 ,core_uart_baud + 1 +0x6904 029308 set0 7 ,pdata +0x6905 029309 hstore 1 ,core_uart_baud + 1 +0x6906 029310 storet 2 ,mem_adc_current_value +0x6907 029311 rtn +: 029313 vdd_calculate_by_mode: +0x6908 029314 bpatchx patch34_0 ,mem_patch34 +0x6909 029315 fetch 1 ,mem_adc_config_flag +0x690a 029316 beq adc_config_vinlpm ,vdd_calculate_vinlpm +0x690b 029317 beq adc_config_hvin ,vdd_calculate_hvin +0x690c 029318 beq adc_config_gpio ,vdd_calculate_io +0x690d 029319 rtn +: 029321 vdd_calculate_vinlpm: +0x690e 029322 fetch 2 ,mem_3v_adc_vinlpm_data +0x690f 029323 fetcht 2 ,mem_2v_adc_vinlpm_data +0x6910 029324 arg 200 ,regc +0x6911 029325 branch vdd_calculate +: 029327 vdd_calculate_hvin: +0x6912 029328 fetch 2 ,mem_5v_adc_hvin_data +0x6913 029329 fetcht 2 ,mem_1v_adc_hvin_data +0x6914 029330 arg 100 ,regc +0x6915 029331 branch vdd_calculate +: 029333 vdd_calculate_io: +0x6916 029334 fetch 2 ,mem_1v_adc_io_data +0x6917 029335 fetcht 2 ,mem_0_5_adc_io_data +0x6918 029336 arg 50 ,regc +0x6919 029337 branch vdd_calculate +: 029339 vdd_calculate: +0x691a 029340 isub temp ,rega +0x691b 029341 fetch 2 ,mem_adc_current_value +0x691c 029342 isub temp ,pdata +0x691d 029343 nbranch vdd_calculate1 ,positive +0x691e 029344 fetcht 2 ,mem_reference_voltage +0x691f 029345 imul32 temp ,regb +0x6920 029346 copy regc ,pdata +0x6921 029347 imul32 rega ,pdata +0x6922 029348 iadd regb ,pdata +: 029349 vdd_calculate2: +0x6923 029350 idiv rega +0x6924 029351 call wait_div_end +0x6925 029352 quotient pdata +0x6926 029353 rtn +: 029355 vdd_calculate1: +0x6927 029356 copy temp ,pdata +0x6928 029357 fetcht 2 ,mem_adc_current_value +0x6929 029358 isub temp ,pdata +0x692a 029359 fetcht 2 ,mem_reference_voltage +0x692b 029360 imul32 temp ,regb +0x692c 029361 copy regc ,pdata +0x692d 029362 imul32 rega ,pdata +0x692e 029363 isub regb ,pdata +0x692f 029364 branch vdd_calculate2 +: 029375 adc_bat_percent_lowpower_out: +0x6930 029376 ifetch 8 ,rega +0x6931 029377 store 8 ,mem_pdatatemp +0x6932 029378 fetch 2 ,mem_pdatatemp +0x6933 029379 fetcht 2 ,mem_pdatatemp + 2 +0x6934 029380 isub temp ,rega +0x6935 029381 fetch 2 ,mem_pdatatemp + 6 +0x6936 029382 isub temp ,regb +0x6937 029383 fetcht 2 ,mem_pdatatemp + 4 +0x6938 029384 isub temp ,null +0x6939 029385 ncall adc_set_low_power_flag ,positive +0x693a 029386 mul32 regb ,100 ,pdata +0x693b 029387 idiv rega +0x693c 029388 call wait_div_end +0x693d 029389 quotient pdata +0x693e 029390 call adc_set_no_power_flag ,blank +0x693f 029391 rtn +: 029392 adc_set_low_power_flag: +0x6940 029393 fetch 1 ,mem_adc_power_flag +0x6941 029394 set1 0 ,pdata +0x6942 029395 store 1 ,mem_adc_power_flag +0x6943 029396 rtn +: 029397 adc_set_no_power_flag: +0x6944 029398 fetcht 1 ,mem_adc_power_flag +0x6945 029399 set1 1 ,temp +0x6946 029400 storet 1 ,mem_adc_power_flag +0x6947 029401 rtn +: 029406 keyscan_key_init: +0x6948 029407 fetch 2 ,mem_key_num_ptr +0x6949 029408 ifetch 1 ,pdata +: 029409 keyscan_key_init_next: +0x694a 029410 rtn blank +0x694b 029411 copy pdata ,loopcnt +0x694c 029413 fetch 2 ,mem_keyscan_ptr +0x694d 029414 increase 3 ,pdata +0x694e 029415 copy pdata ,rega +: 029416 keyscan_key_init_lp1: +0x694f 029417 ifetcht 1 ,rega +0x6950 029418 call gpio_config_input +0x6951 029419 increase key_conf_struct_len ,rega +0x6952 029420 loop keyscan_key_init_lp1 +: 029421 keyscan_key_init_end: +0x6953 029422 rtn +: 029424 keyscan_scan_key: +0x6954 029425 fetch 2 ,mem_keyscan_ptr +0x6955 029426 increase 3 ,pdata +0x6956 029427 copy pdata ,rega +0x6957 029429 force 0 ,regb +0x6958 029430 jam 0 ,mem_key_value_temp +: 029431 keyscan_scan_key_lp1: +0x6959 029432 ifetcht 1 ,rega +0x695a 029433 call gpio_get_bit +0x695b 029434 bpatchx patch34_1 ,mem_patch34 +0x695c 029435 fetch 2 ,mem_key_value_temp +0x695d 029436 copy regb ,queue +0x695e 029437 qsetflag true ,pdata +0x695f 029438 store 2 ,mem_key_value_temp +0x6960 029439 increase key_conf_struct_len ,rega +0x6961 029440 increase 1 ,regb +0x6962 029441 fetch 2 ,mem_key_num_ptr +0x6963 029442 ifetch 1 ,pdata +: 029443 keyscan_scan_key_lp1_next: +0x6964 029444 ixor regb ,null +0x6965 029445 nbranch keyscan_scan_key_lp1 ,zero +0x6966 029446 fetch 2 ,mem_key_value_temp +0x6967 029447 fetcht 2 ,mem_key_value +0x6968 029448 ixor temp ,null +0x6969 029449 rtn zero +0x696a 029450 enable user +0x696b 029451 rtn +: 029453 keyscan_process_lpm_before: +0x696c 029454 fetch 2 ,mem_key_num_ptr +0x696d 029455 ifetch 1 ,pdata +: 029456 keyscan_process_lpm_before_next: +0x696e 029457 rtn blank +0x696f 029458 copy pdata ,loopcnt +0x6970 029459 fetch 2 ,mem_keyscan_ptr +0x6971 029460 increase 3 ,pdata +0x6972 029461 copy pdata ,rega +: 029462 keyscan_process_lpm_before_lp1: +0x6973 029463 ifetcht 1 ,rega +0x6974 029464 call gpio_set_wake_by_current_state +0x6975 029465 increase key_conf_struct_len ,rega +0x6976 029466 loop keyscan_process_lpm_before_lp1 +: 029467 keyscan_process_lpm_before_end: +0x6977 029468 rtn +: 029470 keyscan_key_process: +0x6978 029471 arg key_scan_timer ,queue +0x6979 029472 call timer_check +0x697a 029473 nrtn blank +0x697b 029474 setarg 0x20 +0x697c 029475 arg key_scan_timer ,queue +0x697d 029476 call timer_init +0x697e 029477 disable user +0x697f 029478 call keyscan_process_lpm_before +0x6980 029479 bpatchx patch34_2 ,mem_patch34 +0x6981 029480 fetch 2 ,mem_key_num_ptr +0x6982 029481 ifetch 1 ,pdata +: 029482 keyscan_key_process_next: +0x6983 029483 rtn blank +0x6984 029484 call keyscan_scan_key +0x6985 029485 nbranch lpm_button_clean_wake_lock ,user +0x6986 029486 call lpm_button_get_wake_lock +0x6987 029487 disable user +0x6988 029488 fetch 2 ,mem_key_value_temp +0x6989 029489 store 2 ,mem_key_value_temp4 +0x698a 029490 jam 0 ,mem_key_value_temp6 +0x698b 029491 force 0 ,queue +: 029492 keyscan_key_lp1: +0x698c 029493 fetch 2 ,mem_key_value +0x698d 029494 rshift pdata ,temp +0x698e 029495 storet 2 ,mem_key_value +0x698f 029496 and pdata ,0x01 ,pdata +0x6990 029497 fetcht 2 ,mem_key_value_temp4 +0x6991 029498 and temp ,0x01 ,rega +0x6992 029499 rshift temp ,temp +0x6993 029500 storet 2 ,mem_key_value_temp4 +0x6994 029501 ixor rega ,null +0x6995 029502 ncall keyscan_send_key_data ,zero +0x6996 029503 fetch 2 ,mem_key_num_ptr +0x6997 029504 ifetch 1 ,pdata +: 029505 keyscan_key_lp1_next: +0x6998 029506 fetcht 1 ,mem_key_value_temp6 +0x6999 029507 increase 1 ,temp +0x699a 029508 storet 1 ,mem_key_value_temp6 +0x699b 029509 copy temp ,queue +0x699c 029510 ixor queue ,null +0x699d 029511 nbranch keyscan_key_lp1 ,zero +0x699e 029512 fetch 2 ,mem_key_value_temp +0x699f 029513 store 2 ,mem_key_value +0x69a0 029514 rtn +: 029515 keyscan_send_key_data: +0x69a1 029516 bpatchx patch34_3 ,mem_patch34 +0x69a2 029517 fetch 2 ,mem_keyscan_ptr +0x69a3 029518 increase 1 ,pdata +0x69a4 029519 ifetch 2 ,pdata +0x69a5 029520 branch callback_func +: 029531 pwm_init: +0x69a6 029532 hfetch 1 ,core_clksel +0x69a7 029533 ior rega ,pdata +0x69a8 029534 hstore 1 ,core_clksel +0x69a9 029535 hfetch 2 ,core_clkoff +0x69aa 029536 set0 clock_off_pwm ,pdata +0x69ab 029537 hstore 2 ,core_clkoff +: 029538 delay_nop100: +0x69ac 029539 nop 100 +0x69ad 029540 rtn +: 029551 pwm_out_set: +0x69ae 029552 fetcht 3 ,mem_pdatatemp + 2 +0x69af 029553 setarg pwm_12mhz +0x69b0 029554 idiv temp +0x69b1 029555 call wait_div_end +0x69b2 029556 quotient temp +0x69b3 029557 fetch 1 ,mem_pdatatemp + 5 +0x69b4 029558 imul32 temp ,pdata +0x69b5 029559 div pdata ,100 +0x69b6 029560 call wait_div_end +0x69b7 029561 quotient rega +0x69b8 029562 copy temp ,pdata +0x69b9 029563 isub rega ,regb +0x69ba 029564 fetch 1 ,mem_pdatatemp + 1 +0x69bb 029565 call pwm_duty_cycle_set +0x69bc 029566 fetch 1 ,mem_pdatatemp +0x69bd 029567 branch pwm_enable +: 029570 pwm_duty_cycle_set: +0x69be 029571 beq 0 ,pwm_pwm0_duty_set +0x69bf 029572 beq 1 ,pwm_pwm1_duty_set +0x69c0 029573 beq 2 ,pwm_pwm2_duty_set +0x69c1 029574 beq 3 ,pwm_pwm3_duty_set +0x69c2 029575 beq 4 ,pwm_pwm4_duty_set +0x69c3 029576 beq 5 ,pwm_pwm5_duty_set +: 029577 pwm_pwm0_duty_set: +0x69c4 029578 arg core_pwm_pcnt0 ,contw +0x69c5 029579 branch pwm_set_pncnt +: 029580 pwm_pwm1_duty_set: +0x69c6 029581 arg core_pwm_pcnt1 ,contw +0x69c7 029582 branch pwm_set_pncnt +: 029583 pwm_pwm2_duty_set: +0x69c8 029584 arg core_pwm_pcnt2 ,contw +0x69c9 029585 branch pwm_set_pncnt +: 029586 pwm_pwm3_duty_set: +0x69ca 029587 arg core_pwm_pcnt3 ,contw +0x69cb 029588 branch pwm_set_pncnt +: 029589 pwm_pwm4_duty_set: +0x69cc 029590 arg core_pwm_pcnt4 ,contw +0x69cd 029591 branch pwm_set_pncnt +: 029592 pwm_pwm5_duty_set: +0x69ce 029593 arg core_pwm_pcnt5 ,contw +0x69cf 029594 branch pwm_set_pncnt +: 029595 pwm_set_pncnt: +0x69d0 029596 copy rega ,pdata +0x69d1 029597 istore 2 ,contw +0x69d2 029598 copy regb ,pdata +0x69d3 029599 istore 2 ,contw +0x69d4 029600 rtn +: 029604 pwm_enable: +0x69d5 029605 enable user +0x69d6 029606 branch pwm_gpio_set +: 029607 pwm_disable: +0x69d7 029608 disable user +: 029609 pwm_gpio_set: +0x69d8 029610 beq 4 ,pwm_gpio4_set +0x69d9 029611 beq 5 ,pwm_gpio5_set +0x69da 029612 beq 27 ,pwm_gpio27_set +0x69db 029613 beq 28 ,pwm_gpio28_set +0x69dc 029614 beq 3 ,pwm_gpio3_set +0x69dd 029615 beq 8 ,pwm_gpio8_set +0x69de 029616 beq 20 ,pwm_gpio20_set +0x69df 029617 beq 21 ,pwm_gpio21_set +0x69e0 029618 beq 22 ,pwm_gpio22_set +0x69e1 029619 beq 23 ,pwm_gpio23_set +0x69e2 029620 rtn +: 029623 pwm_gpio4_set: +0x69e3 029624 arg 6 ,queue +0x69e4 029625 branch pwm_one_set_select +: 029626 pwm_gpio5_set: +0x69e5 029627 arg 7 ,queue +0x69e6 029628 branch pwm_one_set_select +: 029629 pwm_gpio27_set: +0x69e7 029630 arg 8 ,queue +0x69e8 029631 branch pwm_one_set_select +: 029632 pwm_gpio28_set: +0x69e9 029633 arg 9 ,queue +0x69ea 029634 branch pwm_one_set_select +: 029635 pwm_gpio3_set: +0x69eb 029636 arg 10 ,queue +0x69ec 029637 branch pwm_one_set_select +: 029638 pwm_gpio8_set: +0x69ed 029639 arg 11 ,queue +0x69ee 029640 branch pwm_one_set_select +: 029641 pwm_gpio20_set: +0x69ef 029642 arg 12 ,queue +0x69f0 029643 branch pwm_tw0_set_select +: 029644 pwm_gpio21_set: +0x69f1 029645 arg 13 ,queue +0x69f2 029646 branch pwm_tw0_set_select +: 029647 pwm_gpio22_set: +0x69f3 029648 arg 14 ,queue +0x69f4 029649 branch pwm_tw0_set_select +: 029650 pwm_gpio23_set: +0x69f5 029651 arg 15 ,queue +0x69f6 029652 branch pwm_tw0_set_select +: 029654 pwm_set_select: +0x69f7 029655 hfetch 2 ,core_gpio_sel1 +0x69f8 029656 qsetflag user ,pdata +0x69f9 029657 hstore 2 ,core_gpio_sel1 +0x69fa 029658 copy rega ,queue +0x69fb 029659 hfetch 1 ,core_gpio_key2 +0x69fc 029660 qsetflag user ,pdata +0x69fd 029661 hstore 1 ,core_gpio_key2 +0x69fe 029662 rtn +: 029664 pwm_one_set_select: +0x69ff 029665 add queue ,-4 ,rega +0x6a00 029666 branch pwm_set_select +: 029668 pwm_tw0_set_select: +0x6a01 029669 add queue ,-10 ,rega +0x6a02 029670 branch pwm_set_select +: 029675 rfcomm_init: +0x6a03 029676 rtn wake +0x6a04 029677 jam 0 ,mem_rfcomm_send_more_pkt +0x6a05 029678 jam bits9600 ,memremoterpnbitrate +0x6a06 029679 jam databits8 ,memremoteprndatabits +0x6a07 029680 jam 0x11 ,memremoteprnxon +0x6a08 029681 jam 0x13 ,memremoteprnxoff +0x6a09 029682 setarg 0 +0x6a0a 029683 store 3 ,memremoteprnstopbit +0x6a0b 029684 store 1 ,mem_spp_state +0x6a0c 029685 jam 0 ,memui_reconnect_mode +: 029687 rfcomm_init_spp: +0x6a0d 029688 bpatchx patch34_4 ,mem_patch34 +0x6a0e 029689 setarg 0 +0x6a0f 029690 store 1 ,mem_spp_state +0x6a10 029691 store 1 ,mem_remote_spp_channel +0x6a11 029692 store 1 ,mem_pn_dlci +0x6a12 029693 fetch 1 ,mem_credit_flag +0x6a13 029694 beq credit_enable ,rfcomm_init_spp_with_credit +0x6a14 029695 jam 0x50 ,mem_credit_given +0x6a15 029696 rtn +: 029698 rfcomm_init_spp_with_credit: +0x6a16 029699 jam 0x00 ,mem_credit_given +0x6a17 029700 rtn +: 029702 set_cr_bit: +0x6a18 029703 or_into 0x02 ,temp +0x6a19 029704 rtn +: 029716 rfcomm_calculate_fcs_sabm: +0x6a1a 029717 copy temp ,pdata +0x6a1b 029718 reverse pdata ,pdata +0x6a1c 029719 store 1 ,memfcstemp3 +0x6a1d 029720 force ini_tx_sabm ,pdata +0x6a1e 029721 reverse pdata ,pdata +0x6a1f 029722 store 1 ,memfcstemp2 +0x6a20 029723 force 0x01 ,pdata +0x6a21 029724 reverse pdata ,pdata +0x6a22 029725 store 1 ,memfcstemp1 +0x6a23 029726 call caculate_fcs +0x6a24 029727 copy temp ,pdata +0x6a25 029728 rtn +: 029729 rfcomm_calculate_fcs_ua: +0x6a26 029730 reverse pdata ,pdata +0x6a27 029731 store 1 ,memfcstemp3 +0x6a28 029732 force rsp_tx_ua ,pdata +0x6a29 029733 reverse pdata ,pdata +0x6a2a 029734 store 1 ,memfcstemp2 +0x6a2b 029735 force 0x01 ,pdata +0x6a2c 029736 reverse pdata ,pdata +0x6a2d 029737 store 1 ,memfcstemp1 +0x6a2e 029738 branch caculate_fcs +: 029740 rfcomm_calculate_fcs_dlci0: +0x6a2f 029741 fetch 1 ,mem_rfcomm_initiator +0x6a30 029742 branch rfcomm_calculate_fcs_dlci0_res ,blank +0x6a31 029743 setarg 0x70 +0x6a32 029744 rtn +: 029745 rfcomm_calculate_fcs_dlci0_res: +0x6a33 029746 setarg 0xaa +0x6a34 029747 rtn +: 029749 rfcomm_save_fcs_uih: +0x6a35 029750 reverse pdata ,pdata +0x6a36 029751 store 1 ,memfcstemp3 +0x6a37 029752 force rsp_rx_uih ,pdata +0x6a38 029753 call caculate_uihdata_fcs +0x6a39 029754 fetcht 2 ,mem_contw_temp +0x6a3a 029755 copy temp ,contw +0x6a3b 029756 istore 1 ,contw +0x6a3c 029757 copy contw ,temp +0x6a3d 029758 storet 2 ,mem_contw_temp +0x6a3e 029759 force rsp_rx_uih_wdata ,pdata +0x6a3f 029760 call caculate_uihdata_fcs +0x6a40 029761 fetcht 2 ,mem_contw_temp +0x6a41 029762 copy temp ,contw +0x6a42 029763 istore 1 ,contw +0x6a43 029764 rtn +: 029773 caculate_uihdata_fcs: +0x6a44 029774 reverse pdata ,pdata +0x6a45 029775 store 1 ,memfcstemp2 +0x6a46 029776 fetch 2 ,memfcstemp2 +0x6a47 029777 lshift8 pdata ,pdata +0x6a48 029778 store 3 ,mem_mod2div_temp +0x6a49 029779 arg 0x107 ,rega +0x6a4a 029780 arg 0xf ,regb +0x6a4b 029781 call mod2div +0x6a4c 029782 xor_into 0xd7 ,pdata +0x6a4d 029783 invert pdata ,pdata +0x6a4e 029784 reverse pdata ,pdata +0x6a4f 029785 rtn +: 029795 caculate_fcs: +0x6a50 029796 fetch 3 ,memfcstemp1 +0x6a51 029797 store 3 ,mem_mod2div_temp +0x6a52 029798 arg 0x107 ,rega +0x6a53 029799 arg 0xf ,regb +0x6a54 029800 call mod2div +0x6a55 029801 lshift8 pdata ,pdata +0x6a56 029802 arg 0x7 ,regb +0x6a57 029803 call mod2div +0x6a58 029804 xor_into 0x2b ,pdata +0x6a59 029805 invert pdata ,pdata +0x6a5a 029806 reverse pdata ,pdata +0x6a5b 029807 copy pdata ,temp +0x6a5c 029808 rtn +: 029810 mod2div: +0x6a5d 029811 arg 0 ,regc +0x6a5e 029812 copy regb ,loopcnt +0x6a5f 029813 call right_shift_n +0x6a60 029814 icopy temp +: 029815 mod2div_loop: +0x6a61 029820 copy temp ,pdata +0x6a62 029821 lshift regc ,regc +0x6a63 029822 bbit0 8 ,mod2div_not_enough_reduction +0x6a64 029823 ixor rega ,temp +0x6a65 029824 increase 1 ,regc +: 029825 mod2div_not_enough_reduction: +0x6a66 029826 lshift temp ,temp +0x6a67 029827 fetch 3 ,mem_mod2div_temp +0x6a68 029828 increase -1 ,regb +0x6a69 029829 compare 0xff ,regb ,0xff +0x6a6a 029830 branch mod2div_end ,true +0x6a6b 029831 copy regb ,loopcnt +0x6a6c 029832 call right_shift_n +0x6a6d 029833 isolate1 0 ,pdata +0x6a6e 029834 setflag true ,0 ,temp +0x6a6f 029835 branch mod2div_loop +: 029836 mod2div_end: +0x6a70 029838 rshift temp ,pdata +0x6a71 029839 rtn +: 029841 get_rfcomm_snd_adss: +0x6a72 029842 fetcht 1 ,mem_pn_dlci +: 029843 dlci_to_address_cmd: +0x6a73 029845 lshift2 temp ,temp +0x6a74 029846 set1 rfcomm_address_ext_len ,temp +0x6a75 029847 fetch 1 ,mem_rfcomm_initiator +0x6a76 029848 ncall set_cr_bit ,blank +0x6a77 029849 storet 1 ,mem_rfcomm_send_adss +0x6a78 029850 rtn +: 029852 channel_to_dlci: +0x6a79 029854 lshift temp ,temp +0x6a7a 029855 fetch 1 ,mem_rfcomm_initiator +0x6a7b 029856 setflag blank ,0 ,temp +0x6a7c 029858 rtn +: 029859 rfcomm_rx_process_dlci0_sabm: +0x6a7d 029860 fetcht 1 ,mem_current_channel +0x6a7e 029861 jam 0xd7 ,mem_current_fcs +0x6a7f 029862 call rfcomm_send_ua +0x6a80 029863 fetch 1 ,mem_rfcomm_state +0x6a81 029864 set1 l2cap_channel_rfcomm_only_sabm ,pdata +0x6a82 029865 set1 l2cap_channel_rfcomm_only_ua ,pdata +0x6a83 029866 store 1 ,mem_rfcomm_state +0x6a84 029867 jam 0 ,mem_rfcomm_initiator +0x6a85 029868 branch rfcomm_rx_process_end +: 029869 rfcomm_rx_process_dlci0_ua: +0x6a86 029870 fetch 1 ,mem_rfcomm_state +0x6a87 029871 set1 l2cap_channel_rfcomm_only_ua ,pdata +0x6a88 029872 store 1 ,mem_rfcomm_state +0x6a89 029873 branch rfcomm_rx_process_end +: 029876 rfcomm_rx_process: +0x6a8a 029877 bpatchx patch34_5 ,mem_patch34 +0x6a8b 029878 fetch 1 ,memui_reconnect_mode +0x6a8c 029879 beq no_reconnection ,rfcomm_rx_process_remote_page +0x6a8d 029880 branch rfcomm_rx_process_reconn +: 029882 rfcomm_rx_process_remote_page: +0x6a8e 029883 fetch 2 ,mem_l2cap_payload_ptr +0x6a8f 029884 copy pdata ,contr +0x6a90 029885 call get_rfcomm_head_struct +0x6a91 029886 fetch 1 ,mem_current_channel +0x6a92 029887 beq 0 ,parse_dlci0_rp +0x6a93 029888 branch parse_uih_rp +: 029889 parse_dlci0_rp: +0x6a94 029890 bpatchx patch34_6 ,mem_patch34 +0x6a95 029891 fetch 1 ,mem_current_frame_type +0x6a96 029892 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +0x6a97 029893 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +0x6a98 029894 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih +0x6a99 029895 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn_send_event +0x6a9a 029896 rtn +: 029899 parse_dlci0_rp_uih: +0x6a9b 029900 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6a9c 029901 copy pdata ,contr +0x6a9d 029902 call get_rfcomm_uih_head_struct +0x6a9e 029903 fetch 1 ,mem_uih_cmd_type +0x6a9f 029904 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd +0x6aa0 029905 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res +0x6aa1 029906 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd +0x6aa2 029907 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res +0x6aa3 029908 beq uih_param_cmd_remove_port ,parse_dlci0_rp_uih_cmd_port +0x6aa4 029909 branch rfcomm_rx_process_end +: 029911 parse_dlci0_rp_uih_pn_cmd: +0x6aa5 029912 call parse_dlci0_rp_uih_pn_res_common +0x6aa6 029914 branch parse_dlci0_rp_uih_pn_cmd_spp +: 029916 parse_dlci0_rp_uih_pn_cmd_spp: +0x6aa7 029917 fetch 1 ,mem_spp_state +0x6aa8 029918 set1 rfcomm_channel_state_pn_cmd ,pdata +0x6aa9 029919 set1 rfcomm_channel_state_pn_res ,pdata +0x6aaa 029920 store 1 ,mem_spp_state +0x6aab 029921 call rfcomm_send_param_neg_res +0x6aac 029922 branch rfcomm_rx_process_end +: 029924 parse_dlci0_rp_uih_pn_res: +0x6aad 029925 call parse_dlci0_rp_uih_pn_res_common +0x6aae 029926 branch rfcomm_rx_process_end +: 029928 parse_dlci0_rp_uih_pn_res_common: +0x6aaf 029929 call get_param_payload_ptr +0x6ab0 029930 branch get_rfcomm_prarmer_negotiation +: 029932 get_rfcomm_param_modem_status: +0x6ab1 029933 call get_param_payload_ptr +0x6ab2 029934 ifetch 1 ,contr +0x6ab3 029935 rshift3 pdata ,pdata +0x6ab4 029936 store 1 ,mem_ms_channel +0x6ab5 029937 ifetch 1 ,contr +0x6ab6 029938 store 1 ,mem_ms_param +0x6ab7 029939 rtn +: 029942 get_rfcomm_head_struct: +0x6ab8 029943 ifetch 1 ,contr +0x6ab9 029944 store 1 ,mem_current_adss +0x6aba 029945 rshift3 pdata ,pdata +0x6abb 029946 store 1 ,mem_current_channel +0x6abc 029947 ifetch 1 ,contr +0x6abd 029948 store 1 ,mem_current_frame_type +: 029949 get_rfcomm_current_length: +0x6abe 029950 call get_rfcomm_length_common +0x6abf 029951 storet 2 ,mem_current_length +0x6ac0 029952 copy contr ,pdata +0x6ac1 029953 store 2 ,mem_rfcomm_uih_payload_ptr +0x6ac2 029954 rtn +: 029956 get_rfcomm_uih_head_struct: +0x6ac3 029957 ifetch 1 ,contr +0x6ac4 029958 rshift pdata ,pdata +0x6ac5 029959 store 1 ,mem_uih_cmd_type +0x6ac6 029960 call get_rfcomm_length_common +0x6ac7 029961 storet 2 ,mem_uih_length +0x6ac8 029962 copy contr ,pdata +0x6ac9 029963 store 2 ,mem_param_payload_ptr +0x6aca 029964 rtn +: 029967 get_param_payload_ptr: +0x6acb 029968 fetch 2 ,mem_param_payload_ptr +0x6acc 029969 copy pdata ,contr +0x6acd 029970 rtn +: 029972 get_rfcomm_length_common: +0x6ace 029973 ifetch 1 ,contr +0x6acf 029974 copy pdata ,temp +0x6ad0 029975 rshift temp ,temp +0x6ad1 029976 rtnbit1 0 +0x6ad2 029977 ifetch 1 ,contr +0x6ad3 029978 lshift3 pdata ,pdata +0x6ad4 029979 lshift4 pdata ,pdata +0x6ad5 029980 iadd temp ,temp +0x6ad6 029981 rtn +: 029983 get_rfcomm_prarmer_negotiation: +0x6ad7 029984 ifetch 1 ,contr +0x6ad8 029985 store 1 ,mem_pn_dlci +0x6ad9 029986 ifetch 1 ,contr +0x6ada 029987 store 1 ,mem_pn_credit_flow_type_info +0x6adb 029988 ifetch 1 ,contr +0x6adc 029989 store 1 ,mem_pn_priority +0x6add 029990 ifetch 1 ,contr +0x6ade 029991 store 1 ,mem_pn_acknowledg_timer +0x6adf 029992 ifetch 2 ,contr +0x6ae0 029993 store 2 ,mem_pn_max_frame_size +0x6ae1 029994 ifetch 1 ,contr +0x6ae2 029995 store 1 ,mem_pn_max_retrans +0x6ae3 029996 ifetch 1 ,contr +0x6ae4 029997 store 1 ,mem_remote_credits +0x6ae5 029998 rtn +: 030001 parse_dlci0_rp_uih_ms_cmd: +0x6ae6 030002 call get_rfcomm_param_modem_status +0x6ae7 030004 branch parse_dlci0_rp_uih_ms_cmd_spp +: 030006 parse_dlci0_rp_uih_ms_cmd_spp: +0x6ae8 030007 fetch 1 ,mem_spp_state +0x6ae9 030008 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +0x6aea 030009 set1 rfcomm_channel_state_snd_ms_res ,pdata +0x6aeb 030010 store 1 ,mem_spp_state +0x6aec 030011 fetcht 1 ,mem_pn_dlci +0x6aed 030012 lshift2 temp ,temp +0x6aee 030013 or_into 3 ,temp +0x6aef 030014 call rfcomm_send_modem_status_res +0x6af0 030015 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt +0x6af1 030016 branch rfcomm_rx_process_end +: 030018 parse_dlci0_rp_uih_ms_res: +0x6af2 030019 jam bt_evt_spp_connected ,mem_fifo_temp +0x6af3 030020 call ui_ipc_send_event +0x6af4 030021 call get_rfcomm_param_modem_status +0x6af5 030022 fetch 1 ,mem_ms_channel +0x6af6 030023 sub pdata ,1 ,null +0x6af7 030024 branch parse_dlci0_rp_uih_ms_res_spp ,zero +0x6af8 030025 branch assert +: 030026 parse_dlci0_rp_uih_ms_res_spp: +0x6af9 030027 fetch 1 ,mem_spp_state +0x6afa 030028 set1 rfcomm_channel_state_rcv_ms_res ,pdata +0x6afb 030029 store 1 ,mem_spp_state +0x6afc 030030 branch rfcomm_rx_process_end +: 030032 parse_dlci0_rp_uih_cmd_port: +0x6afd 030033 call get_param_payload_ptr +0x6afe 030034 ifetch 1 ,contr +0x6aff 030035 store 1 ,mem_rpn_dlci +0x6b00 030036 call l2cap_malloc_rfcomm_channel +0x6b01 030037 call l2cap_get_rfcomm_tx_buff +0x6b02 030038 setarg 0x000e +0x6b03 030039 istore 2 ,contw +0x6b04 030040 fetch 2 ,mem_rfcomm_remote_cid +0x6b05 030041 istore 2 ,contw +0x6b06 030042 fetch 1 ,mem_rfcomm_initiator +0x6b07 030044 lshift pdata ,pdata +0x6b08 030045 set1 0 ,pdata +0x6b09 030046 istore 1 ,contw +0x6b0a 030047 bpatchx patch34_7 ,mem_patch34 +0x6b0b 030048 setarg 0x15ef +0x6b0c 030049 istore 2 ,contw +0x6b0d 030050 setarg 0x1191 +0x6b0e 030051 istore 2 ,contw +0x6b0f 030054 fetch 1 ,mem_rpn_dlci +0x6b10 030055 istore 1 ,contw +0x6b11 030056 setarg 0x000007 +0x6b12 030057 istore 5 ,contw +0x6b13 030060 setarg 0x01 +0x6b14 030061 istore 2 ,contw +0x6b15 030064 call rfcomm_calculate_fcs_dlci0 +0x6b16 030065 istore 1 ,contw +0x6b17 030066 rtn +: 030070 parse_uih_rp: +0x6b18 030071 branch parse_uih_rp_spp +: 030073 parse_uih_rp_spp: +0x6b19 030074 bpatchx patch35_0 ,mem_patch35 +0x6b1a 030075 fetch 1 ,mem_current_frame_type +0x6b1b 030076 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua +0x6b1c 030077 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm +0x6b1d 030078 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +0x6b1e 030079 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +0x6b1f 030080 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn +0x6b20 030081 rtn +: 030082 parse_uih_rp_spp_ua: +0x6b21 030083 fetch 1 ,mem_spp_state +0x6b22 030084 set1 rfcomm_channel_state_ua ,pdata +0x6b23 030085 store 1 ,mem_spp_state +0x6b24 030086 branch rfcomm_rx_process_end +: 030087 parse_uih_rp_spp_sabm: +0x6b25 030088 fetch 1 ,mem_spp_state +0x6b26 030089 set1 rfcomm_channel_state_ua ,pdata +0x6b27 030090 set1 rfcomm_channel_state_sabm ,pdata +0x6b28 030091 store 1 ,mem_spp_state +0x6b29 030092 fetch 1 ,mem_current_adss +0x6b2a 030093 call rfcomm_calculate_fcs_ua +0x6b2b 030094 store 1 ,mem_current_fcs +0x6b2c 030095 call rfcomm_send_ua +0x6b2d 030096 fetch 1 ,mem_current_adss +0x6b2e 030097 rshift2 pdata ,pdata +0x6b2f 030098 store 1 ,mem_pn_dlci +0x6b30 030099 lshift2 pdata ,pdata +0x6b31 030100 set0 rfcomm_address_cr ,pdata +0x6b32 030101 set1 rfcomm_address_ext_len ,pdata +0x6b33 030102 arg mem_hiufcs_spp ,temp +0x6b34 030103 storet 2 ,mem_contw_temp +0x6b35 030104 call rfcomm_save_fcs_uih +0x6b36 030105 branch rfcomm_rx_process_end +: 030107 parse_uih_spp_uih_credits: +0x6b37 030108 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6b38 030109 copy pdata ,contr +0x6b39 030110 increase 1 ,pdata +0x6b3a 030111 store 2 ,mem_rfcomm_uih_payload_ptr +0x6b3b 030112 ifetch 1 ,contr +0x6b3c 030113 fetcht 1 ,mem_remote_credits +0x6b3d 030114 iadd temp ,pdata +0x6b3e 030115 store 1 ,mem_remote_credits +: 030116 parse_uih_spp_uih: +0x6b3f 030117 call rfcomm_increase_credit_given +: 030118 parse_uih_spp_uih_cont: +0x6b40 030119 call get_rfcomm_snd_adss +0x6b41 030120 call rfcomm_send_uih_without_payload +0x6b42 030121 call spp_process_rx_data +0x6b43 030122 branch rfcomm_rx_process_end +: 030124 parse_uih_rp_spp_disconn_send_event: +0x6b44 030125 jam bt_evt_spp_disconnected ,mem_fifo_temp +0x6b45 030126 call ui_ipc_send_event +: 030127 parse_uih_rp_spp_disconn: +0x6b46 030128 call rfcomm_init_spp +0x6b47 030129 fetch 1 ,mem_current_adss +0x6b48 030130 call rfcomm_calculate_fcs_ua +0x6b49 030131 store 1 ,mem_current_fcs +0x6b4a 030132 call rfcomm_send_ua +0x6b4b 030133 branch rfcomm_rx_process_end +: 030138 rfcomm_rx_process_reconn: +0x6b4c 030139 fetch 2 ,mem_l2cap_payload_ptr +0x6b4d 030140 copy pdata ,contr +0x6b4e 030141 call get_rfcomm_head_struct +0x6b4f 030142 fetch 1 ,mem_current_channel +0x6b50 030143 beq 0 ,parse_dlci0_reconn +0x6b51 030144 branch parse_uih_reconn +: 030146 parse_dlci0_reconn: +0x6b52 030147 bpatchx patch35_1 ,mem_patch35 +0x6b53 030148 fetch 1 ,mem_current_frame_type +0x6b54 030149 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm +0x6b55 030150 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua +0x6b56 030151 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih +0x6b57 030152 branch rfcomm_rx_process_end +: 030153 parse_dlci0_reconn_uih: +0x6b58 030154 fetch 2 ,mem_rfcomm_uih_payload_ptr +0x6b59 030155 copy pdata ,contr +0x6b5a 030156 call get_rfcomm_uih_head_struct +0x6b5b 030157 fetch 1 ,mem_uih_cmd_type +0x6b5c 030158 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd +0x6b5d 030159 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd +0x6b5e 030160 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd +0x6b5f 030161 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res +0x6b60 030162 branch rfcomm_rx_process_end +: 030164 parse_dlci0_reconn_uih_pn_cmd: +0x6b61 030165 call parse_dlci0_rp_uih_pn_res_common +0x6b62 030166 fetch 1 ,mem_pn_dlci +0x6b63 030167 rshift pdata ,pdata +0x6b64 030168 fetcht 1 ,mem_remote_spp_channel +0x6b65 030169 isub temp ,null +0x6b66 030170 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero +0x6b67 030171 branch assert +: 030172 parse_dlci0_reconn_uih_pn_cmd_spp: +0x6b68 030173 fetch 1 ,mem_spp_state +0x6b69 030174 set1 rfcomm_channel_state_pn_res ,pdata +0x6b6a 030175 store 1 ,mem_spp_state +0x6b6b 030176 branch rfcomm_rx_process_end +: 030178 parse_dlci0_reconn_uih_ms_cmd: +0x6b6c 030179 call get_rfcomm_param_modem_status +0x6b6d 030180 fetch 1 ,mem_ms_channel +0x6b6e 030181 fetcht 1 ,mem_remote_spp_channel +0x6b6f 030182 isub temp ,null +0x6b70 030183 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero +0x6b71 030184 branch assert +0x6b72 030185 branch rfcomm_rx_process_end +: 030186 parse_dlci0_reconn_uih_ms_cmd_spp: +0x6b73 030187 fetch 1 ,mem_spp_state +0x6b74 030188 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata +0x6b75 030189 set1 rfcomm_channel_state_snd_ms_res ,pdata +0x6b76 030190 store 1 ,mem_spp_state +0x6b77 030191 fetcht 1 ,mem_pn_dlci +0x6b78 030192 lshift2 temp ,temp +0x6b79 030193 or_into 3 ,temp +0x6b7a 030194 call rfcomm_send_modem_status_res +0x6b7b 030195 branch rfcomm_rx_process_end +: 030197 parse_dlci0_reconn_uih_ms_res: +0x6b7c 030198 call get_rfcomm_param_modem_status +0x6b7d 030199 fetch 1 ,mem_ms_channel +0x6b7e 030200 fetcht 1 ,mem_remote_spp_channel +0x6b7f 030201 isub temp ,null +0x6b80 030202 branch parse_dlci0_reconn_uih_ms_res_spp ,zero +0x6b81 030203 branch assert +: 030204 parse_dlci0_reconn_uih_ms_res_spp: +0x6b82 030205 fetch 1 ,mem_spp_state +0x6b83 030206 set1 rfcomm_channel_state_rcv_ms_res ,pdata +0x6b84 030207 store 1 ,mem_spp_state +0x6b85 030208 branch rfcomm_rx_process_end +: 030210 parse_uih_reconn: +0x6b86 030211 fetch 1 ,mem_current_channel +0x6b87 030212 fetcht 1 ,mem_remote_spp_channel +0x6b88 030213 isub temp ,null +0x6b89 030214 branch parse_uih_reconn_spp ,zero +0x6b8a 030215 branch assert +0x6b8b 030216 branch rfcomm_rx_process_end +: 030218 parse_uih_reconn_spp: +0x6b8c 030219 fetch 1 ,mem_current_frame_type +0x6b8d 030220 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua +0x6b8e 030221 beq rfcomm_frame_type_uih ,parse_uih_spp_uih +0x6b8f 030222 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits +0x6b90 030223 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn +: 030224 parse_uih_reconn_spp_ua: +0x6b91 030225 fetch 1 ,mem_spp_state +0x6b92 030226 set1 rfcomm_channel_state_ua ,pdata +0x6b93 030227 store 1 ,mem_spp_state +0x6b94 030228 branch rfcomm_rx_process_end +: 030229 parse_uih_reconn_spp_sabm: +0x6b95 030230 branch parse_uih_reconn_spp_sabm +: 030231 parse_uih_reconn_spp_disconn: +0x6b96 030232 branch parse_uih_rp_spp_disconn +: 030233 rfcomm_rx_process_end: +0x6b97 030234 rtn +: 030236 rfcomm_send_more_pkt: +0x6b98 030237 fetch 1 ,mem_rfcomm_send_more_pkt +0x6b99 030238 rtn blank +0x6b9a 030239 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp +0x6b9b 030240 branch assert +: 030242 rfcomm_send_more_pkt_msc_cmd_spp: +0x6b9c 030243 jam 0 ,mem_rfcomm_send_more_pkt +0x6b9d 030244 call l2cap_malloc_rfcomm_channel +0x6b9e 030245 arg spp_slave_channel ,temp +0x6b9f 030246 fetcht 1 ,mem_pn_dlci +0x6ba0 030247 lshift2 temp ,temp +: 030248 rfcomm_send_more_pkt_msc_cmd_spp0: +0x6ba1 030249 or_into 0x03 ,temp +0x6ba2 030250 arg 0xaa ,rega +0x6ba3 030251 call rfcomm_send_modem_status_cmd +0x6ba4 030252 call l2cap_get_rfcomm_tx_buff +0x6ba5 030253 copy contw ,contr +0x6ba6 030254 ifetch 2 ,contr +0x6ba7 030255 branch assert ,blank +0x6ba8 030256 rtn +: 030258 rfcomm_send_sabm: +0x6ba9 030259 call l2cap_get_rfcomm_tx_buff +0x6baa 030260 setarg 0x0004 +0x6bab 030261 istore 2 ,contw +0x6bac 030262 fetch 2 ,mem_rfcomm_remote_cid +0x6bad 030263 istore 2 ,contw +0x6bae 030264 fetch 1 ,mem_current_adss +0x6baf 030265 istore 1 ,contw +0x6bb0 030266 bpatchx patch35_2 ,mem_patch35 +0x6bb1 030267 setarg 0x013f +0x6bb2 030268 istore 2 ,contw +0x6bb3 030269 fetch 1 ,mem_current_fcs +0x6bb4 030270 istore 1 ,contw +0x6bb5 030271 rtn +: 030272 rfcomm_send_ua: +0x6bb6 030273 call l2cap_malloc_rfcomm_channel +0x6bb7 030274 call l2cap_get_rfcomm_tx_buff +0x6bb8 030275 setarg 0x0004 +0x6bb9 030276 istore 2 ,contw +0x6bba 030277 fetch 2 ,mem_rfcomm_remote_cid +0x6bbb 030278 istore 2 ,contw +0x6bbc 030279 fetch 1 ,mem_current_adss +0x6bbd 030280 istore 1 ,contw +0x6bbe 030281 bpatchx patch35_3 ,mem_patch35 +0x6bbf 030282 setarg 0x0173 +0x6bc0 030283 istore 2 ,contw +0x6bc1 030284 fetch 1 ,mem_current_fcs +0x6bc2 030285 istore 1 ,contw +0x6bc3 030286 rtn +: 030287 rfcomm_send_param_neg_cmd: +0x6bc4 030288 call l2cap_get_rfcomm_tx_buff +0x6bc5 030289 setarg 0x000e +0x6bc6 030290 istore 2 ,contw +0x6bc7 030291 fetch 2 ,mem_rfcomm_remote_cid +0x6bc8 030292 istore 2 ,contw +0x6bc9 030293 fetch 1 ,mem_rfcomm_initiator +0x6bca 030294 lshift pdata ,pdata +0x6bcb 030295 set1 0 ,pdata +0x6bcc 030296 istore 1 ,contw +0x6bcd 030297 bpatchx patch35_4 ,mem_patch35 +0x6bce 030298 setarg 0x15ef +0x6bcf 030299 istore 2 ,contw +0x6bd0 030300 setarg 0x1183 +0x6bd1 030301 istore 2 ,contw +0x6bd2 030302 copy temp ,pdata +0x6bd3 030303 istore 1 ,contw +0x6bd4 030304 setarg 0x0000f0 +0x6bd5 030305 istore 3 ,contw +0x6bd6 030306 setarg rfcomm_max_frame_size +0x6bd7 030307 istore 2 ,contw +0x6bd8 030308 setarg 0 +0x6bd9 030309 istore 1 ,contw +0x6bda 030310 setarg 0x01 +0x6bdb 030311 istore 1 ,contw +0x6bdc 030312 call rfcomm_calculate_fcs_dlci0 +0x6bdd 030313 istore 1 ,contw +0x6bde 030314 jam 0x10 ,mem_credit_given +0x6bdf 030315 rtn +: 030316 rfcomm_send_param_neg_res: +0x6be0 030317 call l2cap_malloc_rfcomm_channel +0x6be1 030318 call l2cap_get_rfcomm_tx_buff +0x6be2 030319 setarg 0x000e +0x6be3 030320 istore 2 ,contw +0x6be4 030321 fetch 2 ,mem_rfcomm_remote_cid +0x6be5 030322 istore 2 ,contw +0x6be6 030323 fetch 1 ,mem_rfcomm_initiator +0x6be7 030324 lshift pdata ,pdata +0x6be8 030325 set1 0 ,pdata +0x6be9 030326 istore 1 ,contw +0x6bea 030327 bpatchx patch35_5 ,mem_patch35 +0x6beb 030328 setarg 0x15ef +0x6bec 030329 istore 2 ,contw +0x6bed 030330 setarg 0x1181 +0x6bee 030331 istore 2 ,contw +0x6bef 030332 fetch 1 ,mem_pn_dlci +0x6bf0 030333 istore 1 ,contw +0x6bf1 030334 setarg 0x0000e0 +0x6bf2 030335 istore 3 ,contw +0x6bf3 030336 fetch 2 ,mem_rfcomm_max_frame_size +0x6bf4 030337 istore 2 ,contw +0x6bf5 030338 setarg 0x00 +0x6bf6 030339 istore 1 ,contw +0x6bf7 030340 fetch 1 ,mem_rfcomm_credit_init_data +0x6bf8 030341 istore 1 ,contw +0x6bf9 030342 call rfcomm_calculate_fcs_dlci0 +0x6bfa 030343 istore 1 ,contw +0x6bfb 030344 rtn +: 030345 rfcomm_send_modem_status_cmd: +0x6bfc 030346 call l2cap_get_rfcomm_tx_buff +0x6bfd 030347 setarg 0x0008 +0x6bfe 030348 istore 2 ,contw +0x6bff 030349 fetch 2 ,mem_rfcomm_remote_cid +0x6c00 030350 istore 2 ,contw +0x6c01 030351 fetch 1 ,mem_rfcomm_initiator +0x6c02 030352 lshift pdata ,pdata +0x6c03 030353 set1 0 ,pdata +0x6c04 030354 istore 1 ,contw +0x6c05 030355 bpatchx patch35_6 ,mem_patch35 +0x6c06 030356 setarg 0x09ef +0x6c07 030357 istore 2 ,contw +0x6c08 030358 setarg 0x05e3 +0x6c09 030359 istore 2 ,contw +0x6c0a 030360 copy temp ,pdata +0x6c0b 030361 istore 1 ,contw +0x6c0c 030362 setarg 0x8d +0x6c0d 030363 istore 1 ,contw +0x6c0e 030364 call rfcomm_calculate_fcs_dlci0 +0x6c0f 030365 istore 1 ,contw +0x6c10 030366 rtn +: 030368 rfcomm_send_modem_status_res: +0x6c11 030369 call l2cap_malloc_rfcomm_channel +0x6c12 030370 call l2cap_get_rfcomm_tx_buff +0x6c13 030371 setarg 0x0008 +0x6c14 030372 istore 2 ,contw +0x6c15 030373 fetch 2 ,mem_rfcomm_remote_cid +0x6c16 030374 istore 2 ,contw +0x6c17 030375 copy temp ,timeup +0x6c18 030376 fetch 1 ,mem_rfcomm_initiator +0x6c19 030377 lshift pdata ,pdata +0x6c1a 030378 set1 0 ,pdata +0x6c1b 030379 istore 1 ,contw +0x6c1c 030380 bpatchx patch35_7 ,mem_patch35 +0x6c1d 030381 setarg 0x09ef +0x6c1e 030382 istore 2 ,contw +0x6c1f 030383 setarg 0x05e1 +0x6c20 030384 istore 2 ,contw +0x6c21 030385 copy timeup ,pdata +0x6c22 030386 istore 1 ,contw +0x6c23 030387 setarg 0x8d +0x6c24 030388 istore 1 ,contw +0x6c25 030389 call rfcomm_calculate_fcs_dlci0 +0x6c26 030390 istore 1 ,contw +0x6c27 030391 rtn +: 030393 rfcomm_send_uih_without_payload: +0x6c28 030394 bpatchx patch36_0 ,mem_patch36 +0x6c29 030395 fetch 1 ,mem_credit_given +0x6c2a 030396 rtn blank +0x6c2b 030397 hfetch 2 ,core_uart_rxitems +0x6c2c 030398 nrtn blank +0x6c2d 030399 copy rega ,pdata +0x6c2e 030400 store 1 ,mem_pdatatemp + 1 +0x6c2f 030401 storet 1 ,mem_pdatatemp +0x6c30 030402 call l2cap_malloc_is_fifo_full +0x6c31 030403 nrtn blank +0x6c32 030404 call l2cap_malloc_rfcomm_channel +0x6c33 030405 call l2cap_get_rfcomm_tx_buff +0x6c34 030406 setarg 0x05 +0x6c35 030407 istore 2 ,contw +0x6c36 030408 fetch 2 ,mem_rfcomm_remote_cid +0x6c37 030409 istore 2 ,contw +0x6c38 030410 fetch 1 ,mem_rfcomm_send_adss +0x6c39 030411 istore 1 ,contw +0x6c3a 030412 setarg 0x01ff +0x6c3b 030413 istore 2 ,contw +0x6c3c 030414 fetch 1 ,mem_credit_given +0x6c3d 030415 istore 1 ,contw +0x6c3e 030416 fetch 1 ,mem_hiufcs_spp_wcredits +0x6c3f 030417 istore 1 ,contw +0x6c40 030418 jam 0 ,mem_credit_given +0x6c41 030419 rtn +: 030421 rfcomm_increase_credit_given: +0x6c42 030422 bpatchx patch36_1 ,mem_patch36 +0x6c43 030423 fetch 1 ,mem_credit_flag +0x6c44 030424 rtneq credit_enable +0x6c45 030425 fetch 2 ,mem_current_length +0x6c46 030426 rtn blank +0x6c47 030427 fetch 1 ,mem_credit_given +0x6c48 030428 increase 1 ,pdata +0x6c49 030429 store 1 ,mem_credit_given +0x6c4a 030430 rtn +: 030432 spp_process_rx_data: +0x6c4b 030433 fetch 2 ,mem_cb_receive_spp_data +0x6c4c 030434 branch callback_func +: 030436 spp_tx_rfcomm_packet: +0x6c4d 030437 bpatchx patch36_2 ,mem_patch36 +0x6c4e 030439 fetch 1 ,mem_remote_credits +0x6c4f 030440 rtn blank +0x6c50 030441 increase -1 ,pdata +0x6c51 030442 store 1 ,mem_remote_credits +0x6c52 030443 fetch 2 ,mem_pn_max_frame_size +0x6c53 030444 fetcht 2 ,mem_current_packet_length +0x6c54 030445 isub temp ,null +0x6c55 030446 branch ssp_tx_rfcomm_from_uart ,positive +0x6c56 030447 store 2 ,mem_current_packet_length +: 030448 ssp_tx_rfcomm_from_uart: +0x6c57 030449 fetch 1 ,mem_credit_given +0x6c58 030450 branch ssp_tx_rfcomm_from_uart_without_credit ,blank +0x6c59 030451 jam 1 ,mem_rfcomm_send_offset +0x6c5a 030452 fetch 1 ,mem_hiufcs_spp_wcredits +0x6c5b 030453 store 1 ,mem_rfcomm_send_fcs +0x6c5c 030454 setarg rsp_rx_uih_wdata +0x6c5d 030455 store 1 ,mem_rfcomm_send_frame_type +0x6c5e 030456 branch ssp_tx_rfcomm_from_uart_common +: 030457 ssp_tx_rfcomm_from_uart_without_credit: +0x6c5f 030458 jam 0 ,mem_rfcomm_send_offset +0x6c60 030459 fetch 1 ,mem_hiufcs_spp +0x6c61 030460 store 1 ,mem_rfcomm_send_fcs +0x6c62 030461 setarg rsp_tx_uih +0x6c63 030462 store 1 ,mem_rfcomm_send_frame_type +: 030463 ssp_tx_rfcomm_from_uart_common: +0x6c64 030464 bpatchx patch36_3 ,mem_patch36 +0x6c65 030465 fetch 2 ,mem_current_packet_length +0x6c66 030466 sub pdata ,127 ,null +0x6c67 030467 branch ssp_tx_rfcomm_from_uart_common0 ,positive +0x6c68 030468 fetch 1 ,mem_rfcomm_send_offset +0x6c69 030469 increase 1 ,pdata +0x6c6a 030470 store 1 ,mem_rfcomm_send_offset +: 030471 ssp_tx_rfcomm_from_uart_common0: +0x6c6b 030472 call get_rfcomm_snd_adss +0x6c6c 030473 fetch 2 ,mem_current_packet_length +0x6c6d 030474 increase 8 ,pdata +0x6c6e 030475 fetcht 1 ,mem_rfcomm_send_offset +0x6c6f 030476 iadd temp ,rega +0x6c70 030478 call l2cap_malloc +0x6c71 030479 store 2 ,mem_rfcomm_tx_buff_ptr +0x6c72 030480 increase 4 ,pdata +0x6c73 030481 store 2 ,mem_rfcomm_tx_payload_ptr +0x6c74 030482 copy pdata ,contw +0x6c75 030483 fetch 1 ,mem_rfcomm_send_adss +0x6c76 030484 istore 1 ,contw +0x6c77 030485 fetch 1 ,mem_rfcomm_send_frame_type +0x6c78 030486 istore 1 ,contw +0x6c79 030487 call ssp_tx_write_length +0x6c7a 030488 call ssp_tx_write_given_credit +0x6c7b 030489 bpatchx patch36_4 ,mem_patch36 +0x6c7c 030490 fetch 2 ,mem_nl_rx_data_src +0x6c7d 030491 copy pdata ,contru +0x6c7e 030492 fetch 2 ,mem_current_packet_length +0x6c7f 030493 copy pdata ,loopcnt +0x6c80 030494 call uart_copy_rx_bytes_fast +0x6c81 030495 copy contw ,temp +0x6c82 030496 copy contru ,pdata +0x6c83 030497 store 2 ,mem_nl_rx_data_src +0x6c84 030498 copy temp ,contw +0x6c85 030499 fetch 1 ,mem_rfcomm_send_fcs +0x6c86 030500 istore 1 ,contw +0x6c87 030501 fetch 2 ,mem_rfcomm_tx_buff_ptr +0x6c88 030502 copy pdata ,contw +0x6c89 030503 fetch 2 ,mem_current_packet_length +0x6c8a 030504 fetcht 1 ,mem_rfcomm_send_offset +0x6c8b 030505 iadd temp ,pdata +0x6c8c 030506 increase 4 ,pdata +0x6c8d 030507 istore 2 ,contw +0x6c8e 030508 fetch 2 ,mem_rfcomm_remote_cid +0x6c8f 030509 istore 2 ,contw +0x6c90 030510 jam 0 ,mem_credit_given +0x6c91 030511 fetch 2 ,mem_nl_rx_len_all +0x6c92 030512 beq 0 ,module_hci_command_tx_spp_tx_complete +0x6c93 030513 jam hci_not_discard_packet ,mem_module_temp_nl_discard_packet +0x6c94 030514 rtn +: 030516 ssp_tx_write_length: +0x6c95 030517 bpatchx patch36_5 ,mem_patch36 +0x6c96 030518 fetch 2 ,mem_current_packet_length +0x6c97 030519 sub pdata ,0x7f ,null +0x6c98 030520 nbranch ssp_tx_write_long_packet ,positive +0x6c99 030521 lshift pdata ,pdata +0x6c9a 030522 set1 0 ,pdata +0x6c9b 030523 istore 1 ,contw +0x6c9c 030524 rtn +: 030525 ssp_tx_write_long_packet: +0x6c9d 030526 fetch 2 ,mem_current_packet_length +0x6c9e 030527 rshift3 pdata ,pdata +0x6c9f 030528 rshift4 pdata ,temp +0x6ca0 030529 and_into 0x7f ,pdata +0x6ca1 030530 lshift pdata ,pdata +0x6ca2 030531 set0 0 ,pdata +0x6ca3 030532 istore 1 ,contw +0x6ca4 030533 istoret 1 ,contw +0x6ca5 030534 rtn +: 030535 ssp_tx_write_given_credit: +0x6ca6 030536 fetch 1 ,mem_credit_given +0x6ca7 030537 rtn blank +0x6ca8 030538 istore 1 ,contw +0x6ca9 030539 rtn +: 030544 scheduler_process: +0x6caa 030545 bpatchx patch36_6 ,mem_patch36 +0x6cab 030546 call check_51cmd +0x6cac 030547 call app_process_bb_event +0x6cad 030548 call process_conn_sm +0x6cae 030550 bpatchx patch36_7 ,mem_patch36 +0x6caf 030551 call sp_calc_sequence +0x6cb0 030552 call simple_pairing_sequence +0x6cb1 030553 call master_simple_paring_sequence +0x6cb2 030556 call l2cap_malloc_is_fifo_full +0x6cb3 030557 nrtn blank +0x6cb4 030559 call l2cap_call_proc_sigal_pending +0x6cb5 030560 call l2cap_malloc_is_fifo_full +0x6cb6 030561 nrtn blank +0x6cb7 030562 bpatchx patch37_0 ,mem_patch37 +0x6cb8 030564 call process_upper_sm +0x6cb9 030565 call l2cap_send_config_req +0x6cba 030566 call rfcomm_send_more_pkt +: 030567 scheduler_process0: +0x6cbb 030568 call scheduler_tx_disconnect_hid +0x6cbc 030569 bpatchx patch37_1 ,mem_patch37 +0x6cbd 030572 branch app_process_bt +: 030574 scheduler_tx_disconnect_hid: +0x6cbe 030575 fetch 1 ,mem_control_tasks +0x6cbf 030576 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req +0x6cc0 030577 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req +0x6cc1 030578 rtn +: 030580 scheduler_tx_l2cap_pkt: +0x6cc2 030581 bpatchx patch37_2 ,mem_patch37 +0x6cc3 030582 call l2cap_malloc_is_fifo_empty +0x6cc4 030583 rtn blank +0x6cc5 030584 fetch 1 ,mem_op +0x6cc6 030585 rtnbit1 op_txl2cap +0x6cc7 030586 call l2cap_malloc_fifo_out +0x6cc8 030587 store 2 ,mem_txptr +0x6cc9 030588 copy pdata ,contr +0x6cca 030589 ifetch 2 ,contr +0x6ccb 030590 increase 4 ,pdata +0x6ccc 030591 store 2 ,mem_tx_len +0x6ccd 030592 jam 6 ,mem_tx_lch +0x6cce 030593 bpatchx patch37_3 ,mem_patch37 +0x6ccf 030594 fetch 2 ,mem_l2cap_tx_multi_offset +0x6cd0 030595 branch scheduler_tx_l2cap_start_pkt ,blank +0x6cd1 030596 fetch 1 ,mem_op +0x6cd2 030597 rtnbit0 op_pkt_comp +0x6cd3 030598 set0 op_pkt_comp ,pdata +0x6cd4 030599 store 1 ,mem_op +0x6cd5 030600 jam 5 ,mem_tx_lch +0x6cd6 030601 fetcht 2 ,mem_l2cap_tx_multi_offset +0x6cd7 030602 fetch 2 ,mem_txptr +0x6cd8 030603 iadd temp ,pdata +0x6cd9 030604 store 2 ,mem_txptr +0x6cda 030605 fetch 2 ,mem_tx_len +0x6cdb 030606 isub temp ,pdata +0x6cdc 030607 store 2 ,mem_tx_len +: 030608 scheduler_tx_l2cap_start_pkt: +0x6cdd 030609 bpatchx patch37_4 ,mem_patch37 +0x6cde 030610 fetch 2 ,mem_tx_len +0x6cdf 030611 branch assert ,blank +0x6ce0 030612 arg l2cap_max_pkt_len ,temp +0x6ce1 030613 isub temp ,pdata +0x6ce2 030614 nbranch scheduler_tx_l2cap_last_pkt ,positive +0x6ce3 030615 bpatchx patch37_5 ,mem_patch37 +0x6ce4 030616 storet 2 ,mem_tx_len +0x6ce5 030617 fetch 2 ,mem_l2cap_tx_multi_offset +0x6ce6 030618 iadd temp ,pdata +0x6ce7 030619 store 2 ,mem_l2cap_tx_multi_offset +0x6ce8 030620 branch scheduler_tx_l2cap_pkt_end +: 030621 scheduler_tx_l2cap_last_pkt: +0x6ce9 030622 setarg 0 +0x6cea 030623 store 2 ,mem_l2cap_tx_multi_offset +: 030624 scheduler_tx_l2cap_pkt_end: +0x6ceb 030625 fetch 1 ,mem_op +0x6cec 030626 set1 op_txl2cap ,pdata +0x6ced 030627 store 1 ,mem_op +0x6cee 030628 rtn +: 030630 scheduler_start_upper_sm: +0x6cef 030631 fetch 1 ,mem_ui_profile_supported +0x6cf0 030632 bbit1 support_hid ,scheduler_start_upper_sm_hid +0x6cf1 030633 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn +0x6cf2 030634 rtn +: 030635 scheduler_start_upper_sm_hid: +0x6cf3 030636 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +0x6cf4 030637 rtn +: 030639 process_upper_sm: +0x6cf5 030640 fetch 1 ,memui_reconnect_mode +0x6cf6 030641 nbranch process_upper_sm_reconn ,blank +: 030642 process_upper_sm_remote_page: +0x6cf7 030643 fetch 1 ,mem_upper_sm_remote_page +0x6cf8 030645 rtn blank +0x6cf9 030647 jam 0 ,mem_upper_sm_remote_page +: 030648 process_upper_sm_rp_wait: +0x6cfa 030649 rtn +: 030652 process_upper_sm_reconn: +0x6cfb 030653 bpatchx patch37_6 ,mem_patch37 +0x6cfc 030654 fetch 1 ,mem_upper_sm_reconn +0x6cfd 030655 rtn blank +0x6cfe 030656 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn +0x6cff 030657 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait +0x6d00 030658 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg +0x6d01 030659 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait +0x6d02 030660 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp +0x6d03 030661 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait +0x6d04 030662 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn +0x6d05 030663 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait +0x6d06 030664 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn +0x6d07 030665 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait +0x6d08 030666 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg +0x6d09 030667 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait +0x6d0a 030668 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn +0x6d0b 030669 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait +0x6d0c 030670 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg +0x6d0d 030671 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait +0x6d0e 030672 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn +0x6d0f 030673 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait +0x6d10 030674 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg +0x6d11 030675 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait +0x6d12 030676 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm +0x6d13 030677 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait +0x6d14 030678 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn +0x6d15 030679 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait +0x6d16 030680 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm +0x6d17 030681 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait +0x6d18 030682 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms +0x6d19 030683 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait +: 030684 process_upper_sm_reconn_wait: +0x6d1a 030685 rtn +: 030686 process_upper_sm_reconn_sdp_conn: +0x6d1b 030687 call upper_sm_send_sdp_conn +0x6d1c 030688 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn +0x6d1d 030689 fetch 1 ,mem_sdp_state +0x6d1e 030690 set1 l2cap_channel_state_conn_req ,pdata +0x6d1f 030691 store 1 ,mem_sdp_state +0x6d20 030692 rtn +: 030693 process_upper_sm_reconn_sdp_cfg: +0x6d21 030694 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +0x6d22 030695 fetch 1 ,mem_sdp_state +0x6d23 030696 rtnbit1 l2cap_channel_state_snd_cfg_req +0x6d24 030697 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +0x6d25 030698 call upper_sm_send_sdp_cfg +0x6d26 030699 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn +0x6d27 030700 fetch 1 ,mem_sdp_state +0x6d28 030701 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d29 030702 store 1 ,mem_sdp_state +0x6d2a 030703 rtn +: 030704 process_upper_sm_reconn_ss_spp: +0x6d2b 030705 call l2cap_malloc_is_fifo_empty +0x6d2c 030706 nrtn blank +0x6d2d 030707 call upper_sm_send_ss_spp +0x6d2e 030708 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn +0x6d2f 030709 rtn +: 030710 process_upper_sm_reconn_sdp_disconn: +0x6d30 030711 call upper_sm_send_sdp_disconn +0x6d31 030712 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn +0x6d32 030713 rtn +: 030714 process_upper_sm_reconn_hid_ctrl_conn: +0x6d33 030715 call upper_sm_send_hid_ctrl_conn +0x6d34 030716 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn +0x6d35 030717 fetch 1 ,mem_hid_control_state +0x6d36 030718 set1 l2cap_channel_state_conn_req ,pdata +0x6d37 030719 store 1 ,mem_hid_control_state +0x6d38 030720 rtn +: 030721 process_upper_sm_reconn_hid_ctrl_cfg: +0x6d39 030722 call upper_sm_send_hid_ctrl_cfg +0x6d3a 030723 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn +0x6d3b 030724 fetch 1 ,mem_hid_control_state +0x6d3c 030725 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d3d 030726 store 1 ,mem_hid_control_state +0x6d3e 030727 rtn +: 030728 process_upper_sm_reconn_hid_int_conn: +0x6d3f 030729 call upper_sm_send_hid_int_conn +0x6d40 030730 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn +0x6d41 030731 fetch 1 ,mem_hid_interrupt_state +0x6d42 030732 set1 l2cap_channel_state_conn_req ,pdata +0x6d43 030733 store 1 ,mem_hid_interrupt_state +0x6d44 030734 rtn +: 030735 process_upper_sm_reconn_hid_int_cfg: +0x6d45 030736 call upper_sm_send_hid_int_cfg +0x6d46 030737 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn +0x6d47 030738 fetch 1 ,mem_hid_interrupt_state +0x6d48 030739 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d49 030740 store 1 ,mem_hid_interrupt_state +0x6d4a 030741 rtn +: 030742 process_upper_sm_reconn_rfcomm_conn: +0x6d4b 030743 call upper_sm_send_rfcomm_conn +0x6d4c 030744 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn +0x6d4d 030745 fetch 1 ,mem_rfcomm_state +0x6d4e 030746 set1 l2cap_channel_state_conn_req ,pdata +0x6d4f 030747 store 1 ,mem_rfcomm_state +0x6d50 030748 rtn +: 030749 process_upper_sm_reconn_rfcomm_cfg: +0x6d51 030750 call upper_sm_send_rfcomm_cfg +0x6d52 030751 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn +0x6d53 030752 fetch 1 ,mem_rfcomm_state +0x6d54 030753 set1 l2cap_channel_state_snd_cfg_req ,pdata +0x6d55 030754 store 1 ,mem_rfcomm_state +0x6d56 030755 rtn +: 030756 process_upper_sm_reconn_rfcomm_sabm: +0x6d57 030757 call upper_sm_send_rfcomm_sabm +0x6d58 030758 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn +0x6d59 030759 fetch 1 ,mem_rfcomm_state +0x6d5a 030760 set1 l2cap_channel_rfcomm_only_sabm ,pdata +0x6d5b 030761 store 1 ,mem_rfcomm_state +0x6d5c 030762 rtn +: 030763 process_upper_sm_reconn_spp_cmd_pn: +0x6d5d 030764 call upper_sm_send_spp_cmd_pn +0x6d5e 030765 fetch 1 ,mem_spp_state +0x6d5f 030766 set1 rfcomm_channel_state_pn_cmd +0x6d60 030767 store 1 ,mem_spp_state +0x6d61 030768 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn +0x6d62 030769 rtn +: 030770 process_upper_sm_reconn_spp_sabm: +0x6d63 030771 call upper_sm_send_spp_sabm +0x6d64 030772 fetch 1 ,mem_spp_state +0x6d65 030773 set1 rfcomm_channel_state_sabm +0x6d66 030774 store 1 ,mem_spp_state +0x6d67 030775 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn +0x6d68 030776 fetch 1 ,mem_remote_spp_channel +0x6d69 030777 lshift3 pdata ,pdata +0x6d6a 030778 or_into 3 ,pdata +0x6d6b 030779 arg mem_hiufcs_spp ,temp +0x6d6c 030780 storet 2 ,mem_contw_temp +0x6d6d 030781 branch rfcomm_save_fcs_uih +: 030782 process_upper_sm_reconn_spp_cmd_ms: +0x6d6e 030783 call upper_sm_send_spp_cmd_ms +0x6d6f 030784 fetch 1 ,mem_spp_state +0x6d70 030785 set1 rfcomm_channel_state_snd_ms_cmd +0x6d71 030786 store 1 ,mem_spp_state +0x6d72 030787 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn +0x6d73 030788 rtn +: 030790 process_upper_sm_reconn_sdp_conn_wait: +0x6d74 030791 fetch 1 ,mem_sdp_state +0x6d75 030792 rtnbit0 l2cap_channel_state_conn_res +0x6d76 030793 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn +0x6d77 030794 branch process_upper_sm_reconn +: 030795 process_upper_sm_reconn_sdp_cfg_wait: +0x6d78 030796 fetch 1 ,mem_sdp_state +0x6d79 030797 rtnne l2cap_channel_setup_complete +0x6d7a 030798 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn +: 030799 process_upper_sm_reconn_ss_spp_wait: +0x6d7b 030800 fetch 1 ,mem_message_to_uppersm +0x6d7c 030801 rtnne recieve_ss_reasult_hf +0x6d7d 030802 jam 0 ,mem_message_to_uppersm +0x6d7e 030803 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn +0x6d7f 030804 branch process_upper_sm_reconn +: 030805 process_upper_sm_reconn_sdp_disconn_wait: +0x6d80 030806 fetch 1 ,mem_sdp_state +0x6d81 030807 nrtn blank +0x6d82 030808 fetch 1 ,mem_ui_profile_supported +0x6d83 030809 bbit1 support_hid ,process_upper_sm_reconn_setup_hid +0x6d84 030810 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +0x6d85 030811 branch process_upper_sm_reconn_termination +: 030812 process_upper_sm_reconn_hid_ctrl_conn_wait: +0x6d86 030813 fetch 1 ,mem_hid_control_state +0x6d87 030814 rtnbit0 l2cap_channel_state_conn_res +0x6d88 030815 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn +0x6d89 030816 branch process_upper_sm_reconn +: 030817 process_upper_sm_reconn_hid_ctrl_cfg_wait: +0x6d8a 030818 fetch 1 ,mem_hid_control_state +0x6d8b 030819 rtnne l2cap_channel_setup_complete +0x6d8c 030820 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn +0x6d8d 030821 branch process_upper_sm_reconn +: 030822 process_upper_sm_reconn_hid_int_conn_wait: +0x6d8e 030823 fetch 1 ,mem_hid_interrupt_state +0x6d8f 030824 rtnbit0 l2cap_channel_state_conn_res +0x6d90 030825 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn +0x6d91 030826 branch process_upper_sm_reconn +: 030827 process_upper_sm_reconn_hid_int_cfg_wait: +0x6d92 030828 fetch 1 ,mem_hid_interrupt_state +0x6d93 030829 rtnne l2cap_channel_setup_complete +0x6d94 030830 fetch 1 ,mem_ui_profile_supported +0x6d95 030831 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm +0x6d96 030832 branch process_upper_sm_reconn_termination +: 030833 process_upper_sm_reconn_rfcomm_conn_wait: +0x6d97 030834 fetch 1 ,mem_rfcomm_state +0x6d98 030835 rtnbit0 l2cap_channel_state_conn_res +0x6d99 030836 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn +0x6d9a 030837 branch process_upper_sm_reconn +: 030838 process_upper_sm_reconn_rfcomm_cfg_wait: +0x6d9b 030839 fetch 1 ,mem_rfcomm_state +0x6d9c 030840 rtnne l2cap_channel_setup_complete +0x6d9d 030841 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn +0x6d9e 030842 branch process_upper_sm_reconn +: 030843 process_upper_sm_reconn_rfcomm_sabm_wait: +0x6d9f 030844 fetch 1 ,mem_rfcomm_state +0x6da0 030845 rtnne l2cap_channel_rfcomm_dlci0_opened +0x6da1 030846 fetch 1 ,mem_ui_profile_supported +0x6da2 030847 bbit1 support_spp ,process_upper_sm_reconn_setup_spp +0x6da3 030848 branch process_upper_sm_reconn_termination +: 030849 process_upper_sm_reconn_spp_cmd_pn_wait: +0x6da4 030850 fetch 1 ,mem_spp_state +0x6da5 030851 rtnbit0 rfcomm_channel_state_pn_res +0x6da6 030852 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn +0x6da7 030853 branch process_upper_sm_reconn +: 030854 process_upper_sm_reconn_spp_sabm_wait: +0x6da8 030855 fetch 1 ,mem_spp_state +0x6da9 030856 rtnbit0 rfcomm_channel_state_ua +0x6daa 030857 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn +0x6dab 030858 branch process_upper_sm_reconn +: 030859 process_upper_sm_reconn_spp_cmd_ms_wait: +0x6dac 030860 fetch 1 ,mem_spp_state +0x6dad 030861 rtnne rfcomm_channel_setup_complete +0x6dae 030862 branch process_upper_sm_reconn_termination +: 030864 process_upper_sm_reconn_setup_hid: +0x6daf 030865 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn +0x6db0 030866 branch process_upper_sm_reconn +: 030868 process_upper_sm_reconn_setup_rfcomm: +0x6db1 030869 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn +0x6db2 030870 branch process_upper_sm_reconn +: 030871 process_upper_sm_reconn_setup_spp: +0x6db3 030872 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn +0x6db4 030873 branch process_upper_sm_reconn +: 030877 process_upper_sm_reconn_termination: +0x6db5 030878 jam 0 ,mem_upper_sm_reconn +0x6db6 030879 rtn +: 030880 upper_sm_send_sdp_conn: +0x6db7 030881 bpatchx patch37_7 ,mem_patch37 +0x6db8 030882 call l2cap_malloc_signal_channel +0x6db9 030883 setarg psm_sdp +0x6dba 030884 copy pdata ,temp +0x6dbb 030885 setarg l2cap_sdp_channel +0x6dbc 030886 copy pdata ,timeup +0x6dbd 030887 branch ml2cap_send_signal_connect_req +: 030889 upper_sm_send_sdp_cfg: +0x6dbe 030890 bpatchx patch38_0 ,mem_patch38 +0x6dbf 030891 call l2cap_malloc_signal_channel +0x6dc0 030892 fetch 2 ,mem_sdp_remote_cid +0x6dc1 030893 copy pdata ,temp +0x6dc2 030894 branch ml2cap_send_signal_config_req +: 030896 upper_sm_send_sdp_disconn: +0x6dc3 030897 bpatchx patch38_1 ,mem_patch38 +0x6dc4 030898 call l2cap_malloc_signal_channel +0x6dc5 030899 fetch 2 ,mem_sdp_remote_cid +0x6dc6 030900 copy pdata ,temp +0x6dc7 030901 arg l2cap_sdp_channel ,timeup +0x6dc8 030902 call ml2cap_send_signal_disconn_req +0x6dc9 030903 fetch 1 ,mem_sdp_state +0x6dca 030904 set0 l2cap_channel_state_rcv_cfg_res ,pdata +0x6dcb 030905 store 1 ,mem_sdp_state +0x6dcc 030906 rtn +: 030908 upper_sm_send_ss_spp: +0x6dcd 030909 bpatchx patch38_2 ,mem_patch38 +0x6dce 030910 call l2cap_malloc_sdp_channel +0x6dcf 030911 call sdp_send_spp_request +0x6dd0 030912 branch msdp_send_req_done +: 030914 upper_sm_send_rfcomm_conn: +0x6dd1 030915 bpatchx patch38_3 ,mem_patch38 +0x6dd2 030916 call l2cap_malloc_signal_channel +0x6dd3 030917 setarg psm_rfcomm +0x6dd4 030918 copy pdata ,temp +0x6dd5 030919 setarg l2cap_rfcomm_channel +0x6dd6 030920 copy pdata ,timeup +0x6dd7 030921 branch ml2cap_send_signal_connect_req +: 030923 upper_sm_send_rfcomm_cfg: +0x6dd8 030924 bpatchx patch38_4 ,mem_patch38 +0x6dd9 030925 call l2cap_malloc_signal_channel +0x6dda 030926 fetch 2 ,mem_rfcomm_remote_cid +0x6ddb 030927 copy pdata ,temp +0x6ddc 030928 branch ml2cap_send_signal_config_req +: 030930 upper_sm_send_hid_ctrl_conn: +0x6ddd 030931 bpatchx patch38_5 ,mem_patch38 +0x6dde 030932 call l2cap_malloc_signal_channel +0x6ddf 030933 setarg psm_hid_control +0x6de0 030934 copy pdata ,temp +0x6de1 030935 setarg l2cap_hid_control_channel +0x6de2 030936 copy pdata ,timeup +0x6de3 030937 branch ml2cap_send_signal_connect_req +: 030939 upper_sm_send_hid_ctrl_cfg: +0x6de4 030940 bpatchx patch38_6 ,mem_patch38 +0x6de5 030941 call l2cap_malloc_signal_channel +0x6de6 030942 fetch 2 ,mem_hid_ctrl_remote_cid +0x6de7 030943 copy pdata ,temp +0x6de8 030944 branch ml2cap_send_signal_config_req +: 030946 upper_sm_send_hid_int_conn: +0x6de9 030947 bpatchx patch38_7 ,mem_patch38 +0x6dea 030948 call l2cap_malloc_signal_channel +0x6deb 030949 setarg psm_hid_interrupt +0x6dec 030950 copy pdata ,temp +0x6ded 030951 setarg l2cap_hid_interrupt_channel +0x6dee 030952 copy pdata ,timeup +0x6def 030953 branch ml2cap_send_signal_connect_req +: 030955 upper_sm_send_hid_int_cfg: +0x6df0 030956 bpatchx patch39_0 ,mem_patch39 +0x6df1 030957 call l2cap_malloc_signal_channel +0x6df2 030958 fetch 2 ,mem_hid_int_remote_cid +0x6df3 030959 copy pdata ,temp +0x6df4 030960 branch ml2cap_send_signal_config_req +: 030962 upper_sm_send_rfcomm_sabm: +0x6df5 030963 bpatchx patch39_1 ,mem_patch39 +0x6df6 030964 call l2cap_malloc_rfcomm_channel +0x6df7 030966 jam 3 ,mem_current_adss +0x6df8 030967 jam 0x1c ,mem_current_fcs +0x6df9 030968 call rfcomm_send_sabm +0x6dfa 030969 jam 1 ,mem_rfcomm_initiator +0x6dfb 030970 rtn +: 030972 upper_sm_send_spp_cmd_pn: +0x6dfc 030973 bpatchx patch39_2 ,mem_patch39 +0x6dfd 030974 call l2cap_malloc_rfcomm_channel +0x6dfe 030975 fetcht 1 ,mem_remote_spp_channel +0x6dff 030976 call channel_to_dlci +0x6e00 030977 storet 1 ,mem_pn_dlci +0x6e01 030978 branch rfcomm_send_param_neg_cmd +: 030980 upper_sm_send_spp_sabm: +0x6e02 030981 bpatchx patch39_3 ,mem_patch39 +0x6e03 030982 call l2cap_malloc_rfcomm_channel +0x6e04 030983 fetcht 1 ,mem_pn_dlci +0x6e05 030984 call dlci_to_address_cmd +0x6e06 030985 call rfcomm_calculate_fcs_sabm +0x6e07 030986 store 1 ,mem_current_fcs +0x6e08 030987 fetcht 1 ,mem_pn_dlci +0x6e09 030988 call dlci_to_address_cmd +0x6e0a 030989 storet 1 ,mem_current_adss +0x6e0b 030990 branch rfcomm_send_sabm +: 030992 upper_sm_send_spp_cmd_ms: +0x6e0c 030993 bpatchx patch39_4 ,mem_patch39 +0x6e0d 030994 call l2cap_malloc_rfcomm_channel +0x6e0e 030995 fetcht 1 ,mem_pn_dlci +0x6e0f 030996 call dlci_to_address_cmd +0x6e10 030997 branch rfcomm_send_modem_status_cmd +: 031010 sdp_process: +0x6e11 031011 bpatchx patch39_5 ,mem_patch39 +0x6e12 031012 fetch 2 ,mem_l2cap_payload_ptr +0x6e13 031013 iforce contr +0x6e14 031016 ifetch 1 ,contr +0x6e15 031017 copy pdata ,regb +0x6e16 031018 store 1 ,mem_sdp_pduid +0x6e17 031019 ifetch 2 ,contr +0x6e18 031020 store 2 ,mem_sdp_transactionid +0x6e19 031021 ifetch 1 ,contr +0x6e1a 031022 lshift8 pdata ,timeup +0x6e1b 031023 ifetch 1 ,contr +0x6e1c 031024 iadd timeup ,timeup +0x6e1d 031025 bpatchx patch39_6 ,mem_patch39 +0x6e1e 031026 copy contr ,temp +0x6e1f 031027 arg 4 ,loopcnt +0x6e20 031028 arg mem_sdp_handle_list ,contw +0x6e21 031029 call memset0 +0x6e22 031030 copy temp ,contr +0x6e23 031031 deposit regb +0x6e24 031032 beq sdp_error_res ,sdp_process_error_res +0x6e25 031033 beq sdp_search_req ,sdp_process_ss_req +0x6e26 031034 beq sdp_search_res ,sdp_process_ss_res +0x6e27 031035 beq sdp_attribute_req ,sdp_process_sa_req +0x6e28 031036 beq sdp_attribute_res ,sdp_process_sa_res +0x6e29 031037 beq sdp_searchattrib_req ,sdp_process_ssa_req +0x6e2a 031038 beq sdp_searchattrib_res ,sdp_process_ssa_res +0x6e2b 031039 branch sdp_insufficient_resource +: 031050 sdp_process_ss_req: +0x6e2c 031051 bpatchx patch39_7 ,mem_patch39 +0x6e2d 031052 call ask_serviceclassid +0x6e2e 031053 compare 1 ,temp ,0xff +0x6e2f 031054 branch ss_empty_rsp ,true +0x6e30 031055 compare 0xff ,temp ,0xff +0x6e31 031056 branch sdp_invalid_request_syntax ,true +0x6e32 031058 ifetch 2 ,contr +0x6e33 031059 store 2 ,mem_sdp_record_maxcnt +0x6e34 031060 increase -2 ,timeup +0x6e35 031062 increase -1 ,timeup +0x6e36 031063 nbranch sdp_invalid_pdu_size ,zero +0x6e37 031064 arg mem_sdp_uuid_search_ptr ,timeup +0x6e38 031065 ifetch 2 ,timeup +0x6e39 031066 rtn blank +0x6e3a 031067 call search_all_uuid +0x6e3b 031068 call l2cap_get_sdp_tx_payload +0x6e3c 031069 force 3 ,pdata +0x6e3d 031070 istore 1 ,contw +0x6e3e 031071 fetch 2 ,mem_sdp_transactionid +0x6e3f 031072 istore 2 ,contw +0x6e40 031073 lshift2 queue ,pdata +0x6e41 031074 add pdata ,5 ,pdata +0x6e42 031075 add pdata ,5 ,regc +0x6e43 031076 byteswap pdata ,pdata +0x6e44 031077 istore 2 ,contw +0x6e45 031078 deposit queue +0x6e46 031079 byteswap pdata ,pdata +0x6e47 031080 istore 2 ,contw +0x6e48 031081 istore 2 ,contw +0x6e49 031082 arg mem_sdp_handle_list ,contr +0x6e4a 031083 copy queue ,loopcnt +0x6e4b 031084 branch ss_req_blank ,zero +: 031085 ss_req_loop: +0x6e4c 031086 ifetch 4 ,contr +0x6e4d 031087 istore 4 ,contw +0x6e4e 031088 loop ss_req_loop +: 031089 ss_req_blank: +0x6e4f 031090 force 0 ,pdata +0x6e50 031091 istore 1 ,contw +0x6e51 031092 deposit regc +0x6e52 031093 store 2 ,mem_sdp_tx_pkt_length +0x6e53 031095 rtn +: 031106 sdp_process_sa_req: +0x6e54 031107 bpatchx patch3a_0 ,mem_patch3a +0x6e55 031108 ifetch 4 ,contr +0x6e56 031109 store 4 ,mem_sdp_record_handle +0x6e57 031110 increase -4 ,timeup +0x6e58 031111 call sdp_store_maxbyte +0x6e59 031112 store 2 ,mem_sdp_attribute_maxbyte +0x6e5a 031113 increase -2 ,timeup +0x6e5b 031114 call dataelementtype6 +0x6e5c 031115 branch sdp_invalid_request_syntax ,zero +0x6e5d 031116 compare 5 ,rega ,0xff +0x6e5e 031118 branch sa_judge_wholerange ,true +: 031119 sa_isnot_wholerange: +0x6e5f 031120 arg mem_sdp_attrib_list ,contw +0x6e60 031121 force 0 ,queue +0x6e61 031122 branch sa_req_loop +: 031123 sa_judge_wholerange: +0x6e62 031124 ifetch 1 ,contr +0x6e63 031125 bne sdp_attribute_range ,sdp_invalid_request_syntax +0x6e64 031126 ifetch 2 ,contr +0x6e65 031127 nbranch sa_judge_wholerange_false1 ,blank +0x6e66 031128 ifetch 1 ,contr +0x6e67 031129 bne 0xff ,sa_judge_wholerange_false2 +0x6e68 031130 ifetch 1 ,contr +0x6e69 031131 bne 0xff ,sa_judge_wholerange_false3 +0x6e6a 031132 branch sa_req_all +: 031133 sa_judge_wholerange_false3: +0x6e6b 031134 increase -5 ,contr +0x6e6c 031135 branch sa_isnot_wholerange +: 031136 sa_judge_wholerange_false2: +0x6e6d 031137 increase -4 ,contr +0x6e6e 031138 branch sa_isnot_wholerange +: 031139 sa_judge_wholerange_false1: +0x6e6f 031140 increase -3 ,contr +0x6e70 031141 branch sa_isnot_wholerange +: 031142 sa_req_loop: +0x6e71 031143 ifetch 1 ,contr +0x6e72 031144 beq sdp_attribute_id ,sa_req_one_id +0x6e73 031145 beq sdp_attribute_range ,sa_req_range +: 031146 sa_req_range: +0x6e74 031147 ifetch 2 ,contr +0x6e75 031148 istore 2 ,contw +0x6e76 031149 increase 1 ,queue +0x6e77 031150 byteswap pdata ,regb +0x6e78 031151 ifetch 2 ,contr +0x6e79 031152 byteswap pdata ,pdata +: 031153 sa_req_range_id_increase: +0x6e7a 031154 increase 1 ,regb +0x6e7b 031155 isub regb ,null +0x6e7c 031156 nbranch sa_req_range_id_finish ,positive +0x6e7d 031157 copy pdata ,regc +0x6e7e 031158 byteswap regb ,pdata +0x6e7f 031159 istore 2 ,contw +0x6e80 031160 increase 1 ,queue +0x6e81 031161 copy regc ,pdata +0x6e82 031162 branch sa_req_range_id_increase +: 031163 sa_req_range_id_finish: +0x6e83 031164 increase -5 ,timeup +0x6e84 031165 increase -5 ,rega +0x6e85 031166 branch sa_req_check_next_id +: 031167 sa_req_one_id: +0x6e86 031168 ifetch 2 ,contr +0x6e87 031169 istore 2 ,contw +0x6e88 031170 increase 1 ,queue +0x6e89 031171 increase -3 ,timeup +0x6e8a 031172 increase -3 ,rega +: 031173 sa_req_check_next_id: +0x6e8b 031174 nbranch sdp_invalid_request_syntax ,positive +0x6e8c 031175 nbranch sa_req_loop ,zero +0x6e8d 031176 increase -1 ,timeup +0x6e8e 031177 nbranch sdp_invalid_request_syntax ,zero +0x6e8f 031179 call l2cap_get_sdp_tx_payload +0x6e90 031180 increase 10 ,contw +0x6e91 031181 arg mem_sdp_attrib_list ,rega +: 031182 sa_req_handle_attributelist_next: +0x6e92 031183 copy queue ,pdata +0x6e93 031184 branch sa_req_handle_attributelist_end ,blank +0x6e94 031185 ifetch 2 ,rega +0x6e95 031186 branch sa_req_handle_attributelist_end ,blank +0x6e96 031187 iforce regb +0x6e97 031188 fetch 4 ,mem_sdp_record_handle +0x6e98 031189 iforce temp +0x6e99 031190 call search_handle_attrib +0x6e9a 031191 copy contr ,pdata +0x6e9b 031192 branch sa_req_handle_attributelist_notfound ,blank +0x6e9c 031193 increase -3 ,contr +0x6e9d 031194 ifetch 3 ,contr +0x6e9e 031195 istore 3 ,contw +0x6e9f 031196 call sdp_data_len +0x6ea0 031197 iforce loopcnt +0x6ea1 031198 call memcpy +: 031199 sa_req_handle_attributelist_notfound: +0x6ea2 031200 increase 2 ,rega +0x6ea3 031201 increase -1 ,queue +0x6ea4 031202 branch sa_req_handle_attributelist_next +: 031204 sa_req_handle_attributelist_end: +0x6ea5 031205 arg sdp_attribute_res ,rega +0x6ea6 031206 call ssa_req_range_lastfreg_common +0x6ea7 031207 fetch 2 ,mem_sdp_tx_pkt_length +0x6ea8 031208 beq 11 ,sa_empty_rsp +0x6ea9 031209 branch ssa_req_range_attrbutes_length_no_continue +: 031212 sdp_store_continue_common: +0x6eaa 031213 ifetch 1 ,contr +0x6eab 031214 beq 0 ,sdp_store_continue_0byte +0x6eac 031215 beq 1 ,sdp_store_continue_1byte +0x6ead 031216 beq 2 ,sdp_store_continue_2byte +: 031217 sdp_store_continue_0byte: +0x6eae 031218 increase -1 ,timeup +0x6eaf 031219 branch sdp_store_continue_end +: 031220 sdp_store_continue_1byte: +0x6eb0 031221 ifetch 1 ,contr +0x6eb1 031222 increase -2 ,timeup +0x6eb2 031223 branch sdp_store_continue_end +: 031224 sdp_store_continue_2byte: +0x6eb3 031225 ifetch 2 ,contr +0x6eb4 031226 byteswap pdata ,pdata +0x6eb5 031227 increase -3 ,timeup +: 031228 sdp_store_continue_end: +0x6eb6 031229 store 2 ,mem_sdp_continue_byte +0x6eb7 031230 rtn +: 031232 sa_req_all: +0x6eb8 031233 increase -5 ,timeup +0x6eb9 031234 call sdp_store_continue_common +0x6eba 031235 nbranch sdp_invalid_pdu_size ,zero +0x6ebb 031236 fetcht 4 ,mem_sdp_record_handle +0x6ebc 031237 call search_handle +0x6ebd 031238 nbranch sdp_invalid_service_record_handle ,zero +0x6ebe 031239 copy contr ,rega +0x6ebf 031240 call l2cap_get_sdp_tx_payload +0x6ec0 031241 copy rega ,contr +0x6ec1 031242 increase 3 ,contw +0x6ec2 031243 copy contr ,timeup +0x6ec3 031244 call sdp_get_data +0x6ec4 031245 copy pdata ,rega +0x6ec5 031247 fetch 2 ,mem_sdp_continue_byte +0x6ec6 031248 copy pdata ,regb +0x6ec7 031249 copy rega ,pdata +0x6ec8 031250 isub regb ,regb +0x6ec9 031251 fetch 2 ,mem_sdp_attribute_maxbyte +0x6eca 031252 isub regb ,null +0x6ecb 031253 nbranch sa_req_all_fragment_sdp ,positive +0x6ecc 031255 disable user +0x6ecd 031256 fetch 2 ,mem_sdp_continue_byte +0x6ece 031257 branch sa_req_all_fisrt_fragment ,blank +0x6ecf 031258 iadd timeup ,contr +0x6ed0 031259 increase 3 ,regb +0x6ed1 031260 copy regb ,loopcnt +0x6ed2 031261 copy loopcnt ,pdata +0x6ed3 031262 increase 3 ,pdata +0x6ed4 031263 byteswap pdata ,pdata +0x6ed5 031264 istore 2 ,contw +0x6ed6 031265 copy loopcnt ,pdata +0x6ed7 031266 byteswap pdata ,pdata +0x6ed8 031267 istore 2 ,contw +0x6ed9 031268 branch sa_req_all_answer_attributelist_full_loop +: 031269 sa_req_all_fisrt_fragment: +0x6eda 031270 add rega ,6 ,loopcnt +0x6edb 031271 branch sa_req_all_parlength_continue_byte ,user +0x6edc 031272 byteswap loopcnt ,pdata +0x6edd 031273 branch sa_req_all_parlength_continue_byte_end +: 031274 sa_req_all_parlength_continue_byte: +0x6ede 031275 copy loopcnt ,pdata +0x6edf 031276 increase 2 ,pdata +0x6ee0 031277 byteswap pdata ,pdata +: 031278 sa_req_all_parlength_continue_byte_end: +0x6ee1 031279 istore 2 ,contw +0x6ee2 031280 increase -3 ,loopcnt +0x6ee3 031281 byteswap loopcnt ,pdata +0x6ee4 031282 istore 2 ,contw +0x6ee5 031283 copy timeup ,contr +0x6ee6 031284 branch sa_req_all_answer_attributelist_full_loop +: 031285 sa_req_all_fragment_sdp: +0x6ee7 031286 enable user +0x6ee8 031288 fetch 2 ,mem_sdp_attribute_maxbyte +0x6ee9 031289 copy pdata ,rega +0x6eea 031290 copy rega ,loopcnt +0x6eeb 031291 fetch 2 ,mem_sdp_continue_byte +0x6eec 031292 branch sa_req_all_fisrt_fragment ,blank +0x6eed 031293 iadd timeup ,contr +0x6eee 031294 copy rega ,pdata +0x6eef 031295 increase 5 ,pdata +0x6ef0 031296 byteswap pdata ,pdata +0x6ef1 031297 istore 2 ,contw +0x6ef2 031298 copy rega ,pdata +0x6ef3 031299 byteswap pdata ,pdata +0x6ef4 031300 istore 2 ,contw +: 031301 sa_req_all_answer_attributelist_full_loop: +0x6ef5 031302 call memcpy +0x6ef6 031303 nbranch sa_req_all_last_frag_continue ,user +0x6ef7 031304 force 2 ,pdata +0x6ef8 031305 istore 1 ,contw +0x6ef9 031306 copy contr ,pdata +0x6efa 031307 isub timeup ,pdata +0x6efb 031308 byteswap pdata ,pdata +0x6efc 031309 istore 2 ,contw +0x6efd 031310 branch sa_req_all_frag_end +: 031311 sa_req_all_last_frag_continue: +0x6efe 031312 force 0 ,pdata +0x6eff 031313 istore 1 ,contw +: 031314 sa_req_all_frag_end: +0x6f00 031315 arg sdp_attribute_res ,rega +0x6f01 031316 branch ssa_req_range_common +: 031327 sdp_process_ssa_req: +0x6f02 031328 bpatchx patch3a_1 ,mem_patch3a +0x6f03 031329 call ask_serviceclassid +0x6f04 031330 compare 0xff ,temp ,0xff +0x6f05 031331 branch sdp_invalid_request_syntax ,true +0x6f06 031332 call sdp_store_maxbyte +0x6f07 031333 store 2 ,mem_sdp_attribute_maxbyte +0x6f08 031334 increase -2 ,timeup +0x6f09 031335 call dataelementtype6 +0x6f0a 031336 arg mem_sdp_attrib_list ,contw +0x6f0b 031337 force 0 ,queue +: 031338 ssa_req_loop: +0x6f0c 031339 ifetch 1 ,contr +0x6f0d 031340 beq sdp_attribute_range ,ssa_req_range +0x6f0e 031341 ifetch 2 ,contr +0x6f0f 031342 istore 2 ,contw +0x6f10 031343 increase 1 ,queue +0x6f11 031344 increase -3 ,timeup +0x6f12 031345 increase -3 ,rega +0x6f13 031346 nbranch sdp_invalid_request_syntax ,positive +0x6f14 031347 nbranch ssa_req_loop ,zero +0x6f15 031348 increase -1 ,timeup +0x6f16 031349 nbranch sdp_invalid_request_syntax ,zero +0x6f17 031350 call l2cap_get_sdp_tx_payload +0x6f18 031351 increase 13 ,contw +0x6f19 031352 fetch 2 ,mem_sdp_uuid_search_ptr +0x6f1a 031353 iforce regc +0x6f1b 031354 arg mem_sdp_attrib_list ,rega +: 031355 ssa_req_attributelist_next: +0x6f1c 031356 ifetch 2 ,rega +0x6f1d 031357 branch ssa_req_attributelist_end ,blank +0x6f1e 031358 iforce regb +0x6f1f 031359 call search_attrib +0x6f20 031360 branch ssa_req_attributelist_notfound ,blank +0x6f21 031361 increase -3 ,contr +0x6f22 031362 ifetch 3 ,contr +0x6f23 031363 istore 3 ,contw +0x6f24 031364 call sdp_data_len +0x6f25 031365 iforce loopcnt +0x6f26 031366 call memcpy +: 031367 ssa_req_attributelist_notfound: +0x6f27 031368 increase 2 ,rega +0x6f28 031369 branch ssa_req_attributelist_next +: 031371 ssa_req_attributelist_end: +0x6f29 031372 call ssa_req_range_lastfreg +0x6f2a 031373 fetch 2 ,mem_sdp_tx_pkt_length +0x6f2b 031374 beq 14 ,ssa_empty_rsp +0x6f2c 031375 call ssa_req_range_attrbutes_length_no_continue +0x6f2d 031376 branch ssa_req_range_attrbutes_length_no_continue +: 031379 sdp_store_maxbyte: +0x6f2e 031380 ifetch 2 ,contr +0x6f2f 031381 byteswap pdata ,pdata +0x6f30 031382 increase -3 ,pdata +0x6f31 031383 arg 200 ,temp +0x6f32 031384 isub temp ,null +0x6f33 031385 nrtn positive +0x6f34 031386 setarg 200 +0x6f35 031387 rtn +: 031390 ssa_req_range: +0x6f36 031391 increase 4 ,contr +0x6f37 031392 increase -5 ,timeup +0x6f38 031393 increase -5 ,rega +0x6f39 031394 nbranch sdp_invalid_request_syntax ,zero +0x6f3a 031395 call sdp_store_continue_common +0x6f3b 031396 nbranch sdp_invalid_pdu_size ,zero +0x6f3c 031397 arg mem_sdp_uuid_search_ptr ,timeup +0x6f3d 031398 call search_all_uuid +0x6f3e 031399 deposit queue +0x6f3f 031400 branch ssa_empty_rsp ,blank +0x6f40 031401 store 1 ,mem_handle_humber +0x6f41 031403 copy regb ,pdata +0x6f42 031404 store 2 ,mem_sdp_all_length +0x6f43 031405 arg 0 ,queue +0x6f44 031406 arg 0 ,rega +0x6f45 031407 call l2cap_get_sdp_tx_payload +0x6f46 031408 increase 10 ,contw +: 031409 ssa_req_range_find_handle: +0x6f47 031410 call ssa_req_range_get_length +0x6f48 031411 nbranch assert ,user +0x6f49 031412 copy contr ,timeup +0x6f4a 031413 copy pdata ,regc +0x6f4b 031414 iadd rega ,rega +0x6f4c 031417 fetch 2 ,mem_sdp_continue_byte +0x6f4d 031418 copy pdata ,regb +0x6f4e 031419 branch ssa_req_range_first_freg ,blank +: 031420 ssa_req_range_later_freg_with_continue: +0x6f4f 031421 copy rega ,pdata +0x6f50 031422 isub regb ,regb +0x6f51 031423 branch ssa_req_range_next_handle ,zero +0x6f52 031424 nbranch ssa_req_range_next_handle ,positive +0x6f53 031425 fetch 2 ,mem_sdp_attribute_maxbyte +0x6f54 031426 isub regb ,null +0x6f55 031427 branch ssa_req_range_maxbyte_with_continue ,zero +0x6f56 031428 nbranch ssa_req_range_maxbyte_with_continue ,positive +: 031431 ssa_req_range_send_not_maxbyte: +0x6f57 031432 copy regb ,loopcnt +0x6f58 031433 call ssa_req_range_maxbyte_with_continue_cpy +0x6f59 031434 fetch 1 ,mem_handle_humber +0x6f5a 031435 increase 1 ,queue +0x6f5b 031436 isub queue ,null +0x6f5c 031437 branch ssa_req_range_lastfreg ,zero +0x6f5d 031438 branch ssa_req_range_freg_with_continue +: 031440 ssa_req_range_maxbyte_with_continue: +0x6f5e 031441 copy pdata ,loopcnt +0x6f5f 031442 call ssa_req_range_maxbyte_with_continue_cpy +0x6f60 031443 branch ssa_req_range_freg_with_continue +: 031445 ssa_req_range_maxbyte_with_continue_cpy: +0x6f61 031446 increase -3 ,contw +0x6f62 031447 copy loopcnt ,temp +0x6f63 031448 copy regc ,pdata +0x6f64 031449 isub regb ,pdata +0x6f65 031450 iadd timeup ,contr +0x6f66 031451 branch memcpy +: 031453 ssa_req_range_next_handle: +0x6f67 031454 fetch 1 ,mem_handle_humber +0x6f68 031455 increase 1 ,queue +0x6f69 031456 isub queue ,null +0x6f6a 031457 rtn zero +0x6f6b 031458 branch ssa_req_range_find_handle +: 031460 ssa_req_range_get_length: +0x6f6c 031461 call disable_user +0x6f6d 031462 arg mem_sdp_handle_list ,contr +0x6f6e 031463 lshift2 queue ,pdata +0x6f6f 031464 iadd contr ,contr +0x6f70 031465 ifetcht 4 ,contr +0x6f71 031466 call search_handle +0x6f72 031467 nrtn zero +0x6f73 031468 call sdp_data_len +0x6f74 031469 branch enable_user +: 031471 ssa_req_range_first_freg: +0x6f75 031472 fetch 2 ,mem_sdp_attribute_maxbyte +0x6f76 031473 isub rega ,null +0x6f77 031474 nbranch ssa_req_range_firstfreg_maxbyte_with_continue ,positive +0x6f78 031475 copy rega ,loopcnt +0x6f79 031476 copy loopcnt ,temp +0x6f7a 031477 copy timeup ,contr +0x6f7b 031478 call memcpy +0x6f7c 031479 fetch 2 ,mem_sdp_all_length +0x6f7d 031480 isub rega ,null +0x6f7e 031481 branch ssa_req_range_freg_no_continue ,zero +: 031482 ssa_req_range_firstfreg_not_maxbyte_with_continue: +0x6f7f 031483 call ssa_req_range_freg_with_continue +0x6f80 031484 branch ssa_req_range_attrbutes_length +: 031486 ssa_req_range_freg_no_continue: +0x6f81 031487 call ssa_req_range_lastfreg +0x6f82 031488 branch ssa_req_range_attrbutes_length +: 031490 ssa_req_range_lastfreg: +0x6f83 031491 arg sdp_searchattrib_res ,rega +: 031492 ssa_req_range_lastfreg_common: +0x6f84 031493 force 0 ,pdata +0x6f85 031494 istore 1 ,contw +0x6f86 031495 call ssa_req_range_common +0x6f87 031496 fetcht 2 ,mem_sdp_tx_pkt_length +0x6f88 031497 increase -5 ,temp +0x6f89 031498 byteswap temp ,pdata +0x6f8a 031499 istore 2 ,contw +0x6f8b 031500 increase -3 ,temp +0x6f8c 031501 byteswap temp ,pdata +0x6f8d 031502 istore 2 ,contw +0x6f8e 031503 rtn +: 031505 ssa_req_range_firstfreg_maxbyte_with_continue: +0x6f8f 031506 copy pdata ,loopcnt +0x6f90 031507 copy loopcnt ,temp +0x6f91 031508 copy timeup ,contr +0x6f92 031509 call memcpy +0x6f93 031510 call ssa_req_range_freg_with_continue +: 031511 ssa_req_range_attrbutes_length: +0x6f94 031512 setarg 0x36 +0x6f95 031513 istore 1 ,contw +0x6f96 031514 fetch 2 ,mem_sdp_all_length +0x6f97 031515 byteswap pdata ,pdata +0x6f98 031516 istore 2 ,contw +0x6f99 031517 rtn +: 031519 ssa_req_range_attrbutes_length_no_continue: +0x6f9a 031520 setarg 0x36 +0x6f9b 031521 istore 1 ,contw +0x6f9c 031522 increase -3 ,temp +0x6f9d 031523 byteswap temp ,pdata +0x6f9e 031524 istore 2 ,contw +0x6f9f 031525 rtn +: 031527 ssa_req_range_freg_with_continue: +0x6fa0 031528 arg sdp_searchattrib_res ,rega +0x6fa1 031529 setarg 2 +0x6fa2 031530 istore 1 ,contw +0x6fa3 031531 fetch 2 ,mem_sdp_continue_byte +0x6fa4 031532 iadd temp ,temp +0x6fa5 031533 byteswap temp ,pdata +0x6fa6 031534 istore 2 ,contw +0x6fa7 031535 call ssa_req_range_common +0x6fa8 031536 fetcht 2 ,mem_sdp_tx_pkt_length +0x6fa9 031537 increase -5 ,temp +0x6faa 031538 byteswap temp ,pdata +0x6fab 031539 istore 2 ,contw +0x6fac 031540 increase -5 ,temp +0x6fad 031541 byteswap temp ,pdata +0x6fae 031542 istore 2 ,contw +0x6faf 031543 rtn +: 031545 ssa_req_range_common: +0x6fb0 031546 fetch 2 ,mem_sdp_tx_payload_ptr +0x6fb1 031547 isub contw ,pdata +0x6fb2 031548 sub pdata ,0 ,pdata +0x6fb3 031549 store 2 ,mem_sdp_tx_pkt_length +0x6fb4 031550 call l2cap_get_sdp_tx_payload +0x6fb5 031551 copy rega ,pdata +0x6fb6 031552 istore 1 ,contw +0x6fb7 031553 fetch 2 ,mem_sdp_transactionid +0x6fb8 031554 istore 2 ,contw +0x6fb9 031555 rtn +: 031568 sdp_process_ssa_res: +: 031569 sdp_process_ss_res: +: 031570 sdp_process_sa_res: +: 031571 sdp_process_error_res: +0x6fba 031572 rtn +: 031605 sdp_invalid_service_record_handle: +0x6fbb 031606 setarg 0x0200 +0x6fbc 031607 store 2 ,mem_sdp_error_code +0x6fbd 031608 branch sdp_error_response +: 031609 sdp_invalid_pdu_size: +0x6fbe 031610 setarg 0x0400 +0x6fbf 031611 store 2 ,mem_sdp_error_code +0x6fc0 031612 branch sdp_error_response +: 031613 sdp_insufficient_resource: +0x6fc1 031614 setarg 0x0600 +0x6fc2 031615 store 2 ,mem_sdp_error_code +0x6fc3 031616 branch sdp_error_response +: 031617 sdp_invalid_request_syntax: +0x6fc4 031618 setarg 0x0300 +0x6fc5 031619 store 2 ,mem_sdp_error_code +: 031620 sdp_error_response: +0x6fc6 031621 call l2cap_get_sdp_tx_payload +0x6fc7 031622 istore 1 ,contw +0x6fc8 031623 fetch 2 ,mem_sdp_transactionid +0x6fc9 031624 istore 2 ,contw +0x6fca 031625 setarg 0x0200 +0x6fcb 031626 istore 2 ,contw +0x6fcc 031627 fetch 2 ,mem_sdp_error_code +0x6fcd 031628 istore 2 ,contw +0x6fce 031629 jam 7 ,mem_sdp_tx_pkt_length +0x6fcf 031630 rtn +: 031635 ask_serviceclassid: +0x6fd0 031636 arg 0 ,regb +0x6fd1 031637 force 0 ,temp +0x6fd2 031638 arg mem_sdp_uuid_search_ptr ,contw +0x6fd3 031639 call dataelementtype6 +0x6fd4 031640 branch asksrv_error ,zero +: 031641 classidloop: +0x6fd5 031642 increase 1 ,regb +0x6fd6 031643 ifetch 1 ,contr +0x6fd7 031644 increase -1 ,rega +0x6fd8 031645 increase -1 ,timeup +0x6fd9 031646 compare 0x18 ,pdata ,0xf8 +0x6fda 031647 nbranch asksrv_error ,true +0x6fdb 031648 compare 0x04 ,pdata ,0x07 +0x6fdc 031649 nbranch cmp032 ,true +0x6fdd 031650 force 1 ,temp +: 031651 skip2bytes: +0x6fde 031652 ifetch 1 ,contr +0x6fdf 031653 increase -1 ,rega +0x6fe0 031654 increase -1 ,timeup +0x6fe1 031655 bne 0x00 ,frstbwrong +0x6fe2 031656 ifetch 1 ,contr +0x6fe3 031657 increase -1 ,rega +0x6fe4 031658 increase -1 ,timeup +0x6fe5 031659 beq 0x00 ,cmpuuid +0x6fe6 031660 branch scndbwrong +: 031661 frstbwrong: +0x6fe7 031662 increase 1 ,contr +0x6fe8 031663 increase -1 ,rega +0x6fe9 031664 increase -1 ,timeup +: 031665 scndbwrong: +0x6fea 031666 increase 2 ,contr +0x6feb 031667 increase -2 ,rega +0x6fec 031668 increase -2 ,timeup +0x6fed 031669 compare 0x00 ,temp ,0xff +0x6fee 031670 branch loopornot ,true +0x6fef 031671 increase 12 ,contr +0x6ff0 031672 increase -12 ,rega +0x6ff1 031673 increase -12 ,timeup +0x6ff2 031674 branch loopornot +: 031675 cmp032: +0x6ff3 031676 compare 0x02 ,pdata ,0x07 +0x6ff4 031677 nbranch cmp016 ,true +0x6ff5 031678 branch skip2bytes +: 031679 cmp016: +0x6ff6 031680 compare 0x01 ,pdata ,0x07 +0x6ff7 031681 nbranch asksrv_error ,true +: 031682 cmpuuid: +0x6ff8 031683 increase -2 ,rega +0x6ff9 031684 increase -2 ,timeup +0x6ffa 031685 ifetch 2 ,contr +0x6ffb 031686 sub regb ,4 ,null +0x6ffc 031687 branch uuidsize ,zero +0x6ffd 031688 istore 2 ,contw +: 031689 uuidsize: +0x6ffe 031690 compare 0x00 ,temp ,0xff +0x6fff 031691 branch loopornot ,true +0x7000 031692 copy contr ,temp +0x7001 031693 ifetch 1 ,contr +0x7002 031694 bne 0x00 ,wrong12b +0x7003 031695 ifetch 1 ,contr +0x7004 031696 bne 0x00 ,wrong12b +0x7005 031697 ifetch 1 ,contr +0x7006 031698 bne 0x10 ,wrong12b +0x7007 031699 ifetch 1 ,contr +0x7008 031700 bne 0x00 ,wrong12b +0x7009 031701 ifetch 1 ,contr +0x700a 031702 bne 0x80 ,wrong12b +0x700b 031703 ifetch 1 ,contr +0x700c 031704 bne 0x00 ,wrong12b +0x700d 031705 ifetch 1 ,contr +0x700e 031706 bne 0x00 ,wrong12b +0x700f 031707 ifetch 1 ,contr +0x7010 031708 bne 0x80 ,wrong12b +0x7011 031709 ifetch 1 ,contr +0x7012 031710 bne 0x5f ,wrong12b +0x7013 031711 ifetch 1 ,contr +0x7014 031712 bne 0x9b ,wrong12b +0x7015 031713 ifetch 1 ,contr +0x7016 031714 bne 0x34 ,wrong12b +0x7017 031715 ifetch 1 ,contr +0x7018 031716 beq 0xfb ,chck12dn +: 031717 wrong12b: +0x7019 031718 copy temp ,contr +: 031719 wrong12b1: +0x701a 031720 increase 12 ,contr +0x701b 031721 force 0x00 ,queue +0x701c 031722 force 0x00 ,temp +0x701d 031723 branch chck12dn +: 031725 chck12dn: +0x701e 031726 increase -12 ,timeup +0x701f 031727 increase -12 ,rega +: 031728 loopornot: +0x7020 031729 force 0x00 ,temp +0x7021 031730 compare 0x00 ,rega ,0xff +0x7022 031731 nbranch classidloop ,true +0x7023 031732 force 0 ,pdata +0x7024 031733 istore 2 ,contw +0x7025 031734 rtn +: 031735 asksrv_error: +0x7026 031736 arg 0xff ,temp +0x7027 031737 rtn +: 031747 dataelementtype6: +0x7028 031748 bpatchx patch3a_4 ,mem_patch3a +0x7029 031749 ifetch 1 ,contr +0x702a 031750 increase -1 ,timeup +0x702b 031751 compare 0x30 ,pdata ,0xf8 +0x702c 031752 nbranch dsize_error ,true +0x702d 031753 compare 0x07 ,pdata ,0x07 +0x702e 031754 branch dsize32 ,true +0x702f 031755 compare 0x06 ,pdata ,0x07 +0x7030 031756 branch dsize16 ,true +0x7031 031757 compare 0x05 ,pdata ,0x07 +0x7032 031758 nbranch dsize_error ,true +0x7033 031760 ifetch 1 ,contr +0x7034 031761 copy pdata ,rega +0x7035 031762 increase -1 ,timeup +0x7036 031763 branch dsize +: 031764 dsize32: +0x7037 031765 increase 2 ,contr +0x7038 031766 increase -2 ,timeup +: 031767 dsize16: +0x7039 031768 ifetch 2 ,contr +0x703a 031769 byteswap pdata ,rega +0x703b 031770 increase -2 ,timeup +: 031771 dsize: +0x703c 031772 force 0x01 ,pdata +0x703d 031773 rtn +: 031774 dsize_error: +0x703e 031775 force 0x00 ,pdata +0x703f 031776 rtn +: 031786 ss_empty_rsp: +0x7040 031787 setarg sdp_search_res +0x7041 031788 store 1 ,mem_sdp_pduid +0x7042 031789 branch empty_response +: 031790 sa_empty_rsp: +0x7043 031791 setarg sdp_attribute_res +0x7044 031792 store 1 ,mem_sdp_pduid +0x7045 031793 branch empty_response +: 031794 ssa_empty_rsp: +0x7046 031795 setarg sdp_searchattrib_res +0x7047 031796 store 1 ,mem_sdp_pduid +: 031797 empty_response: +0x7048 031798 call l2cap_get_sdp_tx_payload +0x7049 031801 fetch 1 ,mem_sdp_pduid +0x704a 031802 copy pdata ,regb +0x704b 031803 istore 1 ,contw +0x704c 031804 fetch 2 ,mem_sdp_transactionid +0x704d 031805 istore 2 ,contw +0x704e 031806 setarg 0x0500 +0x704f 031807 istore 2 ,contw +0x7050 031808 compare sdp_attribute_res ,regb ,0xff +0x7051 031809 branch fullsearch ,true +0x7052 031810 compare sdp_searchattrib_res ,regb ,0xff +0x7053 031811 branch fullsearch ,true +0x7054 031812 setarg 0x000000 +0x7055 031813 istore 5 ,contw +0x7056 031814 branch outempty +: 031816 fullsearch: +0x7057 031817 setarg 0x350200 +0x7058 031818 istore 5 ,contw +: 031819 outempty: +0x7059 031820 jam 10 ,mem_sdp_tx_pkt_length +0x705a 031821 rtn +: 031824 sdp_data_len: +0x705b 031825 call store_contw +0x705c 031826 call store_contr +0x705d 031827 call sdp_get_data +0x705e 031828 call get_contw +0x705f 031829 call get_contr +0x7060 031830 copy temp ,pdata +0x7061 031831 rtn +: 031834 sdp_get_data: +0x7062 031835 ifetch 1 ,contr +0x7063 031836 and pdata ,0x7 ,loopcnt +0x7064 031837 rshift3 pdata ,pdata +0x7065 031838 bne 0 ,sdp_get_data_type_not0 +: 031839 sdp_get_data_type0: +0x7066 031840 force 1 ,pdata +0x7067 031841 force 1 ,temp +0x7068 031842 rtn +: 031844 sdp_get_data_type_not0_sizeindex01234: +0x7069 031845 call left_shift_n +0x706a 031846 add pdata ,1 ,temp +0x706b 031847 rtn +: 031848 sdp_get_data_type_not0: +0x706c 031849 deposit loopcnt +0x706d 031850 sub pdata ,4 ,null +0x706e 031851 branch sdp_get_data_type_not0_sizeindex01234 ,positive +0x706f 031852 beq 5 ,sdp_get_data_type_not0_sizeindex5 +0x7070 031853 beq 6 ,sdp_get_data_type_not0_sizeindex6 +0x7071 031854 beq 7 ,sdp_get_data_type_not0_sizeindex7 +0x7072 031855 rtn +: 031857 sdp_get_data_type_not0_sizeindex5: +0x7073 031858 ifetch 1 ,contr +0x7074 031859 add pdata ,2 ,temp +0x7075 031860 rtn +: 031861 sdp_get_data_type_not0_sizeindex6: +0x7076 031862 ifetch 2 ,contr +0x7077 031863 byteswap pdata ,pdata +0x7078 031864 add pdata ,3 ,temp +0x7079 031865 rtn +: 031866 sdp_get_data_type_not0_sizeindex7: +0x707a 031867 ifetch 2 ,contr +0x707b 031868 byteswap pdata ,pdata +0x707c 031869 ifetcht 2 ,contr +0x707d 031870 byteswap temp ,temp +0x707e 031871 lshift16 temp ,temp +0x707f 031872 iadd temp ,pdata +0x7080 031873 add pdata ,5 ,temp +0x7081 031874 rtn +: 031880 search_all_uuid: +0x7082 031881 bpatchx patch3a_5 ,mem_patch3a +0x7083 031882 force 0 ,queue +0x7084 031883 arg 0 ,regb +0x7085 031884 arg mem_sdp_handle_list ,contw +: 031885 search_all_uuid_llop: +0x7086 031886 ifetch 2 ,timeup +0x7087 031887 rtn blank +0x7088 031888 call search_uuid +0x7089 031889 copy queue ,pdata +0x708a 031890 rtneq sdp_max_handle_number +0x708b 031891 increase 2 ,timeup +0x708c 031892 branch search_all_uuid_llop +: 031894 search_uuid: +0x708d 031896 iforce regc +0x708e 031898 fetch 2 ,mem_ui_uuid_table +0x708f 031899 iforce contr +: 031900 search_uuid_next: +0x7090 031901 copy queue ,pdata +0x7091 031902 rtneq sdp_max_handle_number +0x7092 031903 disable user +0x7093 031904 ifetch 1 ,contr +0x7094 031905 rtn blank +0x7095 031906 iforce loopcnt +: 031907 search_uuid_loop: +0x7096 031908 ifetch 2 ,contr +0x7097 031909 isub regc ,null +0x7098 031910 nbranch search_uuid_not_found ,zero +0x7099 031911 enable user +: 031912 search_uuid_not_found: +0x709a 031913 loop search_uuid_loop +0x709b 031914 ifetcht 4 ,contr +0x709c 031915 copy contr ,rega +0x709d 031916 nbranch search_uuid_nomatch ,user +0x709e 031917 arg mem_sdp_handle_list ,contr +0x709f 031918 arg sdp_max_handle_number ,loopcnt +: 031919 search_uuid_check_same_handle: +0x70a0 031920 ifetch 4 ,contr +0x70a1 031921 branch search_uuid_store_handle ,blank +0x70a2 031922 isub temp ,null +0x70a3 031923 branch search_uuid_nomatch ,zero +0x70a4 031924 loop search_uuid_check_same_handle +0x70a5 031925 rtn +: 031926 search_uuid_store_handle: +0x70a6 031927 istoret 4 ,contw +0x70a7 031928 increase 1 ,queue +0x70a8 031929 copy rega ,contr +0x70a9 031930 call sdp_data_len +0x70aa 031931 iadd regb ,regb +0x70ab 031932 iadd contr ,contr +0x70ac 031933 branch search_uuid_next +: 031934 search_uuid_nomatch: +0x70ad 031935 copy rega ,contr +0x70ae 031936 call sdp_get_data +0x70af 031937 iadd contr ,contr +0x70b0 031938 branch search_uuid_next +: 031944 search_handle: +0x70b1 031945 bpatchx patch3a_6 ,mem_patch3a +0x70b2 031946 fetch 2 ,mem_ui_uuid_table +0x70b3 031947 iforce contr +: 031948 search_handle_loop: +0x70b4 031949 ifetch 1 ,contr +0x70b5 031950 branch disable_zero ,blank +0x70b6 031951 lshift pdata ,pdata +0x70b7 031952 iadd contr ,contr +0x70b8 031953 ifetch 4 ,contr +0x70b9 031954 isub temp ,null +0x70ba 031955 rtn zero +0x70bb 031956 deposit contw +0x70bc 031957 store 2 ,mem_contw +0x70bd 031958 storet 8 ,mem_temp +0x70be 031959 call sdp_get_data +0x70bf 031960 iadd contr ,contr +0x70c0 031961 copy contr ,pdata +0x70c1 031962 fetcht 2 ,mem_contw +0x70c2 031963 copy temp ,contw +0x70c3 031964 fetcht 8 ,mem_temp +0x70c4 031965 copy pdata ,contr +0x70c5 031966 branch search_handle_loop +: 031972 search_attrib: +0x70c6 031973 bpatchx patch3a_7 ,mem_patch3a +0x70c7 031974 fetch 2 ,mem_ui_uuid_table +0x70c8 031975 iforce contr +: 031976 search_attrib_next: +0x70c9 031977 ifetch 1 ,contr +0x70ca 031978 branch search_attrib_end ,blank +0x70cb 031979 iforce loopcnt +: 031980 search_attrib_loop: +0x70cc 031981 ifetch 2 ,contr +0x70cd 031982 isub regc ,null +0x70ce 031983 branch search_attrib_found_uuid ,zero +0x70cf 031984 loop search_attrib_loop +0x70d0 031985 increase 4 ,contr +0x70d1 031986 call sdp_get_data +0x70d2 031987 iadd contr ,contr +0x70d3 031988 branch search_attrib_next +: 031989 search_attrib_found_uuid: +0x70d4 031990 increase -1 ,loopcnt +0x70d5 031991 lshift loopcnt ,pdata +0x70d6 031992 iadd contr ,contr +0x70d7 031993 increase 4 ,contr +0x70d8 031994 call sdp_get_data +0x70d9 031995 iadd contr ,timeup +: 031996 search_attrib_loop_attribs: +0x70da 031997 increase 1 ,contr +0x70db 031998 ifetch 2 ,contr +0x70dc 031999 isub regb ,null +0x70dd 032003 branch disable_blank ,zero +0x70de 032004 call sdp_data_len +0x70df 032005 iadd contr ,contr +0x70e0 032006 deposit timeup +0x70e1 032007 isub contr ,null +0x70e2 032008 branch search_attrib_end ,zero +0x70e3 032009 branch search_attrib_loop_attribs +: 032010 search_attrib_end: +0x70e4 032011 force 0 ,contr +0x70e5 032012 force 0 ,pdata +0x70e6 032013 rtn +: 032019 search_handle_attrib: +0x70e7 032020 bpatchx patch3b_0 ,mem_patch3b +0x70e8 032021 fetch 2 ,mem_ui_uuid_table +0x70e9 032022 iforce contr +: 032023 search_handle_attrib_next: +0x70ea 032024 ifetch 1 ,contr +0x70eb 032025 branch search_handle_attrib_end ,blank +0x70ec 032026 lshift pdata ,pdata +0x70ed 032027 iadd contr ,contr +0x70ee 032028 ifetch 4 ,contr +0x70ef 032029 isub temp ,null +0x70f0 032030 branch search_handl_attrib_found_handle ,zero +0x70f1 032031 call sdp_get_data +0x70f2 032032 iadd contr ,contr +0x70f3 032033 branch search_handle_attrib_next +: 032034 search_handl_attrib_found_handle: +0x70f4 032035 call sdp_get_data +0x70f5 032036 iadd contr ,timeup +: 032037 search_handle_attrib_loop_attribs: +0x70f6 032038 increase 1 ,contr +0x70f7 032039 ifetch 2 ,contr +0x70f8 032040 isub regb ,null +0x70f9 032041 rtn zero +0x70fa 032042 call sdp_data_len +0x70fb 032043 iadd contr ,contr +0x70fc 032044 deposit timeup +0x70fd 032045 isub contr ,null +0x70fe 032046 branch search_handle_attrib_end ,zero +0x70ff 032047 branch search_handle_attrib_loop_attribs +: 032048 search_handle_attrib_end: +0x7100 032049 force 0 ,contr +0x7101 032050 rtn +: 032054 search_rfcomm_cn: +0x7102 032055 arg 0x0400 ,regb +0x7103 032056 call search_handl_attrib_found_handle +0x7104 032057 arg 0x0300 ,regb +0x7105 032058 call search_uuid_in_data +0x7106 032059 nrtn user +0x7107 032060 sub rega ,3 ,null +0x7108 032061 branch disable_user ,positive +0x7109 032062 ifetch 1 ,contr +0x710a 032063 bne 0x08 ,disable_user +0x710b 032064 ifetch 1 ,contr +0x710c 032065 rtn +: 032070 search_uuid_in_data: +0x710d 032071 bpatchx patch3b_1 ,mem_patch3b +0x710e 032072 call sdp_get_data +0x710f 032073 copy pdata ,rega +: 032074 search_uuid_in_data_loop: +0x7110 032075 ifetch 1 ,contr +0x7111 032076 and pdata ,0x7 ,loopcnt +0x7112 032077 rshift3 pdata ,pdata +0x7113 032078 sub pdata ,3 ,null +0x7114 032079 branch search_uuid_in_data_found_uuid ,zero +0x7115 032080 copy loopcnt ,pdata +0x7116 032081 beq 5 ,search_uuid_in_data_found_element_index5 +0x7117 032082 beq 6 ,search_uuid_in_data_found_element_index6 +0x7118 032083 beq 7 ,search_uuid_in_data_found_element_index7 +0x7119 032084 increase -1 ,contr +0x711a 032085 call sdp_get_data +0x711b 032086 iadd contr ,contr +0x711c 032087 copy rega ,pdata +0x711d 032088 isub temp ,rega +0x711e 032089 branch disable_user ,zero +0x711f 032090 branch search_uuid_in_data_loop +: 032092 search_uuid_in_data_found_element_index5: +0x7120 032093 increase -2 ,rega +0x7121 032094 increase 1 ,contr +0x7122 032095 branch search_uuid_in_data_loop +: 032096 search_uuid_in_data_found_element_index6: +0x7123 032097 increase -3 ,rega +0x7124 032098 increase 2 ,contr +0x7125 032099 branch search_uuid_in_data_loop +: 032100 search_uuid_in_data_found_element_index7: +0x7126 032101 increase -5 ,rega +0x7127 032102 increase 4 ,contr +0x7128 032103 branch search_uuid_in_data_loop +: 032105 search_uuid_in_data_found_uuid: +0x7129 032106 increase -1 ,rega +0x712a 032107 copy loopcnt ,pdata +0x712b 032108 beq 1 ,search_uuid_in_data_type_uuid_16 +0x712c 032109 beq 2 ,search_uuid_in_data_type_uuid_32 +0x712d 032110 beq 4 ,search_uuid_in_data_type_uuid_128 +0x712e 032111 branch disable_user +: 032112 search_uuid_in_data_type_uuid_128: +0x712f 032113 increase -12 ,rega +: 032114 search_uuid_in_data_type_uuid_32: +0x7130 032115 ifetch 2 ,contr +0x7131 032116 increase -2 ,rega +: 032117 search_uuid_in_data_type_uuid_16: +0x7132 032118 ifetch 2 ,contr +0x7133 032119 isub regb ,null +0x7134 032120 branch enable_user ,zero +0x7135 032121 increase -2 ,rega +0x7136 032122 branch disable_user ,zero +0x7137 032123 branch search_uuid_in_data_loop +: 032182 sdp_send_spp_request: +0x7138 032183 call l2cap_get_sdp_tx_payload +0x7139 032184 copy pdata ,contw +0x713a 032185 setarg 6 +0x713b 032186 istore 1 ,contw +0x713c 032187 setarg sdp_tid_spp +0x713d 032188 istore 2 ,contw +0x713e 032189 setarg 0x0f00 +0x713f 032190 istore 2 ,contw +0x7140 032191 setarg 0x1a0535 +0x7141 032192 istore 3 ,contw +0x7142 032193 setarg 0x0111 +0x7143 032194 lshift16 pdata ,pdata +0x7144 032195 istore 4 ,contw +0x7145 032196 setarg 0x2600 +0x7146 032197 istore 2 ,contw +0x7147 032198 setarg 0x0335 +0x7148 032199 istore 2 ,contw +0x7149 032200 setarg 0x0009 +0x714a 032201 istore 2 ,contw +0x714b 032202 setarg 0x0004 +0x714c 032203 istore 2 ,contw +0x714d 032204 jam 0x14 ,mem_sdp_tx_pkt_length +0x714e 032205 rtn +: 032209 function_g2: +0x714f 032210 bpatchx patch3b_2 ,mem_patch3b +0x7150 032211 jam 80 ,mem_aes_cmac_data_length +0x7151 032212 arg memdat ,contw +0x7152 032213 arg mem_le_srand ,contr +0x7153 032214 call memcpy16 +0x7154 032215 arg mem_le_pubkey_local_x_256 ,contr +0x7155 032216 call memcpy32 +0x7156 032217 arg mem_le_pubkey_remote_x_256 ,contr +0x7157 032218 call memcpy32 +0x7158 032219 call inverse_memdat +0x7159 032220 arg mem_le_mrand ,contr +0x715a 032221 call store_inverse_k +0x715b 032222 call function_aes_cmac +0x715c 032224 arg mem_aes_cmac_temp ,contw +0x715d 032225 call load_inverse_result +0x715e 032226 setarg 1000000 +0x715f 032227 copy pdata ,rega +0x7160 032228 fetch 4 ,mem_aes_cmac_temp +0x7161 032229 idiv rega +0x7162 032230 call wait_div_end +0x7163 032231 remainder pdata +0x7164 032232 store 4 ,mem_gkey +0x7165 032234 rtn +: 032236 function_f6_eb: +0x7166 032237 jam 65 ,mem_aes_cmac_data_length +0x7167 032238 arg memdat ,contw +0x7168 032239 call store_addr_common_a +0x7169 032240 call store_addr_common_b +0x716a 032241 fetch 3 ,mem_le_pres + 1 +0x716b 032242 istore 3 ,contw +0x716c 032245 call get_r +0x716d 032247 arg mem_le_mrand ,contr +0x716e 032248 call memcpy16 +0x716f 032249 arg mem_le_srand ,contr +0x7170 032250 call memcpy16 +0x7171 032251 call inverse_memdat +0x7172 032252 arg mem_le_mackey ,contr +0x7173 032253 arg mem_aes_cmac_k ,contw +0x7174 032254 call memcpy16 +0x7175 032256 branch function_aes_cmac +: 032260 get_r: +0x7176 032261 fetch 4 ,mem_le_tk +0x7177 032262 istore 4 ,contw +0x7178 032263 call memset0_4 +0x7179 032264 branch memset0_8 +: 032266 function_f6_ea: +0x717a 032267 bpatchx patch3b_3 ,mem_patch3b +0x717b 032268 jam 65 ,mem_aes_cmac_data_length +0x717c 032269 arg memdat ,contw +0x717d 032270 call store_addr_common_b +0x717e 032271 call store_addr_common_a +0x717f 032272 fetch 3 ,mem_le_preq + 1 +0x7180 032273 istore 3 ,contw +0x7181 032276 call get_r +0x7182 032277 arg mem_le_srand ,contr +0x7183 032278 call memcpy16 +0x7184 032279 arg mem_le_mrand ,contr +0x7185 032280 call memcpy16 +0x7186 032281 call inverse_memdat +0x7187 032282 arg mem_le_mackey ,contr +0x7188 032283 arg mem_aes_cmac_k ,contw +0x7189 032284 call memcpy16 +0x718a 032286 call function_aes_cmac +0x718b 032287 arg mem_aes_cmac_temp ,contw +0x718c 032288 branch load_inverse_result +: 032290 function_f5: +0x718d 032291 jam 32 ,mem_aes_cmac_data_length +0x718e 032292 arg mem_le_dhkey_256 ,contr +0x718f 032293 arg memdat ,contw +0x7190 032294 call memcpy32 +0x7191 032295 call inverse_memdat +0x7192 032296 arg mem_le_slat ,contr +0x7193 032297 call store_inverse_k +0x7194 032298 call function_aes_cmac +0x7195 032299 arg mem_aes_cmac_k ,contw +0x7196 032300 call store_aes_result +0x7197 032301 arg 1 ,temp +0x7198 032302 call function_f5_common +0x7199 032303 arg mem_le_ltk ,contw +0x719a 032304 call load_inverse_result +0x719b 032305 arg 0 ,temp +0x719c 032306 call function_f5_common +0x719d 032307 arg mem_le_mackey ,contw +0x719e 032309 branch store_aes_result +: 032312 function_f5_common: +0x719f 032313 bpatchx patch3b_4 ,mem_patch3b +0x71a0 032314 jam 53 ,mem_aes_cmac_data_length +0x71a1 032315 setarg 0x100 +0x71a2 032316 store 2 ,memdat +0x71a3 032317 call store_addr_common_b +0x71a4 032318 call store_addr_common_a +0x71a5 032319 arg mem_le_srand ,contr +0x71a6 032320 call memcpy16 +0x71a7 032321 arg mem_le_mrand ,contr +0x71a8 032322 call memcpy16 +0x71a9 032324 setarg 0x6c65 +0x71aa 032325 istore 2 ,contw +0x71ab 032326 setarg 0x6274 +0x71ac 032327 istore 2 ,contw +0x71ad 032328 istoret 1 ,contw +0x71ae 032329 call inverse_memdat +0x71af 032330 branch function_aes_cmac +: 032332 store_addr_common_b: +0x71b0 032333 fetch 6 ,mem_le_lap +0x71b1 032334 istore 6 ,contw +0x71b2 032335 fetch 1 ,mem_le_conn_own_addr_type +0x71b3 032336 istore 1 ,contw +0x71b4 032337 rtn +: 032339 store_addr_common_a: +0x71b5 032340 fetch 6 ,mem_le_plap +0x71b6 032341 istore 6 ,contw +0x71b7 032346 fetch 1 ,mem_le_conn_peer_addr_type +0x71b8 032347 istore 1 ,contw +0x71b9 032348 rtn +: 032350 function_f4_ca: +0x71ba 032351 jam 65 ,mem_aes_cmac_data_length +0x71bb 032352 fetch 1 ,mem_passkey_1bit +0x71bc 032353 store 1 ,memdat +0x71bd 032354 arg mem_le_pubkey_local_x_256 ,contr +0x71be 032355 call memcpy32 +0x71bf 032356 arg mem_le_pubkey_remote_x_256 ,contr +0x71c0 032357 call memcpy32 +0x71c1 032358 call inverse_memdat +0x71c2 032359 arg mem_le_mrand ,contr +0x71c3 032360 call store_inverse_k +0x71c4 032361 branch function_aes_cmac +: 032364 function_f4_cb: +0x71c5 032365 jam 65 ,mem_aes_cmac_data_length +0x71c6 032366 fetch 1 ,mem_passkey_1bit +0x71c7 032367 store 1 ,memdat +0x71c8 032368 arg mem_le_pubkey_remote_x_256 ,contr +0x71c9 032369 call memcpy32 +0x71ca 032370 arg mem_le_pubkey_local_x_256 ,contr +0x71cb 032371 call memcpy32 +0x71cc 032372 call inverse_memdat +0x71cd 032373 arg mem_le_srand ,contr +0x71ce 032374 call store_inverse_k +0x71cf 032375 branch function_aes_cmac +: 032377 function_aes_cmac: +0x71d0 032378 bpatchx patch3b_5 ,mem_patch3b +0x71d1 032379 call function_aes_cmac_generate_subkey +0x71d2 032383 fetch 1 ,mem_aes_cmac_data_length +0x71d3 032384 copy pdata ,temp +: 032385 function_ceil16: +0x71d4 032386 increase 15 ,pdata +0x71d5 032387 rshift4 pdata ,pdata +0x71d6 032388 copy pdata ,regb +0x71d7 032389 branch function_aes_cmac_set_flag_0_balnk ,blank +0x71d8 032390 and temp ,0x0f ,pdata +0x71d9 032391 nbranch function_aes_cmac_set_flag_0 ,blank +0x71da 032393 arg mem_aes_cmac_k1 ,regc +0x71db 032394 arg memdat ,pdata +0x71dc 032395 increase -16 ,pdata +0x71dd 032398 iadd temp ,rega +0x71de 032399 arg mem_aes_cmac_m_last ,contw +0x71df 032400 arg 4 ,loopcnt +0x71e0 032401 call xor_loop +0x71e1 032405 branch function_aes_cmac_aes +: 032407 function_aes_cmac_set_flag_0_balnk: +0x71e2 032408 arg 1 ,regb +0x71e3 032409 arg 0 ,rega +0x71e4 032411 branch function_aes_cmac_set_flag_0_common +: 032414 function_aes_cmac_set_flag_0: +0x71e5 032416 and temp ,0x0f ,rega +: 032417 function_aes_cmac_set_flag_0_common: +0x71e6 032418 arg memdat ,pdata +0x71e7 032419 iadd temp ,pdata +0x71e8 032420 isub rega ,contr +0x71e9 032422 arg mem_aes_cmac_temp ,contw +0x71ea 032423 call function_aes_cmac_padding +0x71eb 032425 arg mem_aes_cmac_k2 ,regc +0x71ec 032426 arg mem_aes_cmac_temp ,rega +0x71ed 032427 arg mem_aes_cmac_m_last ,contw +0x71ee 032428 arg 4 ,loopcnt +0x71ef 032429 call xor_loop +: 032436 function_aes_cmac_aes: +0x71f0 032441 call aes_clear_data +0x71f1 032442 call aes_init +0x71f2 032445 arg memdat ,contr +: 032446 function_aes_cmac_aes_loop: +0x71f3 032448 increase -1 ,regb +0x71f4 032449 deposit regb +0x71f5 032450 branch function_aes_cmac_aes_loop_end ,blank +0x71f6 032451 call load_data128 +0x71f7 032452 call do_aes_cbc +0x71f8 032453 branch function_aes_cmac_aes_loop +: 032455 function_aes_cmac_aes_loop_end: +0x71f9 032456 arg mem_aes_cmac_temp ,contw +0x71fa 032457 call store_aes_result +0x71fb 032458 arg mem_aes_cmac_m_last ,contr +0x71fc 032459 call load_data128 +0x71fd 032460 call aes_init +0x71fe 032461 arg mem_aes_cmac_temp ,contr +0x71ff 032462 call load_data128 +0x7200 032463 branch do_aes_cbc +: 032467 load_inverse_result: +0x7201 032469 copy contw ,rega +0x7202 032470 call store_aes_result +0x7203 032472 arg 16 ,loopcnt +0x7204 032473 branch inverse_data +: 032475 store_inverse_k: +0x7205 032476 arg mem_aes_cmac_k ,contw +0x7206 032477 call memcpy16 +: 032478 inverse_k: +0x7207 032479 arg 16 ,loopcnt +0x7208 032480 arg mem_aes_cmac_k ,rega +0x7209 032481 branch inverse_data +: 032483 inverse_memdat: +0x720a 032484 fetch 1 ,mem_aes_cmac_data_length +0x720b 032485 copy pdata ,loopcnt +0x720c 032486 arg memdat ,rega +0x720d 032487 branch inverse_data +: 032489 bn_lshift_0_inverse: +0x720e 032490 ifetch 1 ,rega +0x720f 032491 lshift pdata ,pdata +0x7210 032492 isolate1 0 ,regc +0x7211 032493 setflag true ,0 ,pdata +0x7212 032494 isolate1 8 ,pdata +0x7213 032495 setflag true ,0 ,regc +0x7214 032496 istore 1 ,rega +0x7215 032497 increase -1 ,rega +0x7216 032498 loop bn_lshift_0_inverse +0x7217 032499 rtn +: 032501 function_aes_cmac_k1_inverse: +0x7218 032502 arg mem_aes_cmac_k1 ,rega +: 032503 function_aes_cmac_inverse_common: +0x7219 032504 increase 15 ,rega +0x721a 032505 force 16 ,loopcnt +0x721b 032506 force 0 ,regc +0x721c 032507 branch bn_lshift_0_inverse +: 032509 function_aes_cmac_k2_inverse: +0x721d 032510 arg mem_aes_cmac_k2 ,rega +0x721e 032511 branch function_aes_cmac_inverse_common +: 032514 function_aes_cmac_generate_subkey: +0x721f 032515 arg mem_aes_cmac_k ,contr +0x7220 032516 call load_key +0x7221 032519 force regidx_xor ,regext_index +0x7222 032520 call aes_clear +0x7223 032521 call aes_clear_data +0x7224 032522 call do_aes_ocb +0x7225 032527 arg mem_aes_cmac_k1 ,contw +0x7226 032528 call store_aes_result +: 032529 function_aes_cmac_k1: +0x7227 032530 bpatchx patch3b_6 ,mem_patch3b +0x7228 032531 fetch 1 ,mem_aes_cmac_k1 +0x7229 032532 isolate1 7 ,pdata +0x722a 032533 nbranch function_aes_cmac_k1_0 ,true +0x722b 032534 call function_aes_cmac_k1_inverse +0x722c 032537 arg mem_aes_cmac_k1 ,regc +0x722d 032539 arg mem_aes_cmac_k1 ,contw +0x722e 032542 call function_aes_cmac_xor_rb +0x722f 032543 branch function_aes_cmac_k2 +: 032544 function_aes_cmac_k1_0: +0x7230 032545 call function_aes_cmac_k1_inverse +: 032546 function_aes_cmac_k2: +0x7231 032548 arg mem_aes_cmac_k1 ,contr +0x7232 032549 arg mem_aes_cmac_k2 ,contw +0x7233 032550 call memcpy16 +0x7234 032551 fetch 1 ,mem_aes_cmac_k2 +0x7235 032552 isolate1 7 ,pdata +0x7236 032553 nbranch function_aes_cmac_k2_inverse ,true +0x7237 032554 call function_aes_cmac_k2_inverse +0x7238 032556 arg mem_aes_cmac_k2 ,regc +0x7239 032558 arg mem_aes_cmac_k2 ,contw +: 032564 function_aes_cmac_xor_rb: +0x723a 032565 arg 3 ,loopcnt +: 032566 function_aes_cmac_xor_rb_loop: +0x723b 032567 arg 0 ,temp +0x723c 032568 call function_aes_cmac_xor_loop_common +0x723d 032569 increase 4 ,regc +0x723e 032570 loop function_aes_cmac_xor_rb_loop +0x723f 032571 arg 0x8700 ,temp +0x7240 032572 lshift16 temp ,temp +: 032573 function_aes_cmac_xor_loop_common: +0x7241 032574 ifetch 4 ,regc +0x7242 032575 ixor temp ,pdata +0x7243 032576 istore 4 ,contw +0x7244 032577 rtn +: 032583 function_aes_cmac_padding: +0x7245 032584 bpatchx patch3b_7 ,mem_patch3b +0x7246 032585 arg 16 ,loopcnt +0x7247 032586 arg 0 ,pdata +: 032587 function_aes_cmac_padding_loop: +0x7248 032588 isub rega ,null +0x7249 032589 branch function_aes_cmac_padding_beq_length ,zero +0x724a 032590 branch function_aes_cmac_padding_big_length ,positive +0x724b 032591 ifetcht 1 ,contr +0x724c 032592 istoret 1 ,contw +: 032593 function_aes_cmac_padding_loop2: +0x724d 032594 increase 1 ,pdata +0x724e 032595 loop function_aes_cmac_padding_loop +0x724f 032596 rtn +: 032597 function_aes_cmac_padding_beq_length: +0x7250 032598 arg 0x80 ,temp +: 032599 function_aes_cmac_padding_common: +0x7251 032600 istoret 1 ,contw +0x7252 032601 branch function_aes_cmac_padding_loop2 +: 032603 function_aes_cmac_padding_big_length: +0x7253 032604 arg 0 ,temp +0x7254 032605 branch function_aes_cmac_padding_common +: 032608 generate_kinit: +0x7255 032609 call function_e22 +0x7256 032610 arg mem_input_store ,contr +0x7257 032611 arg mem_kinit ,contw +0x7258 032612 branch memcpy16 +: 032615 function_e21: +0x7259 032616 disable user +0x725a 032617 call function_expand +0x725b 032618 arg mem_random_number ,contr +0x725c 032619 arg mem_x ,contw +0x725d 032620 force 15 ,loopcnt +0x725e 032621 call memcpy +0x725f 032622 ifetch 1 ,contr +0x7260 032623 xor_into 6 ,pdata +0x7261 032624 istore 1 ,contw +0x7262 032625 setarg mem_y +0x7263 032626 store 2 ,memp_ar_input +0x7264 032627 setarg mem_x +0x7265 032628 store 2 ,memp_ar_key +0x7266 032629 set1 mark_ar2 ,mark +0x7267 032630 branch function_ar +: 032634 function_e22: +0x7268 032635 fetcht 1 ,mem_pin_length +0x7269 032636 force 16 ,regb +0x726a 032637 add temp ,6 ,regc +0x726b 032638 sub regc ,16 ,null +0x726c 032639 branch function_e22_pin_init ,positive +0x726d 032640 force 16 ,regc +: 032641 function_e22_pin_init: +0x726e 032642 arg mem_x ,contw +: 032643 function_e22_genx_pin: +0x726f 032644 arg mem_pin ,contr +0x7270 032645 copy temp ,loopcnt +0x7271 032646 disable user +: 032647 function_e22_genx_loop: +0x7272 032648 ifetch 1 ,contr +0x7273 032649 istore 1 ,contw +0x7274 032650 increase -1 ,regb +0x7275 032651 branch function_e22_genx_end ,zero +0x7276 032652 loop function_e22_genx_loop +0x7277 032653 branch function_e22_genx_pin ,user +0x7278 032654 enable user +0x7279 032655 force 6 ,loopcnt +0x727a 032656 copy rega ,contr +0x727b 032657 branch function_e22_genx_loop +: 032658 function_e22_genx_end: +0x727c 032659 arg mem_random_number ,contr +0x727d 032660 arg mem_y ,contw +0x727e 032661 call memcpy16 +0x727f 032662 fetch 1 ,mem_y15 +0x7280 032663 ixor regc ,pdata +0x7281 032664 store 1 ,mem_y15 +0x7282 032665 setarg mem_y +0x7283 032666 store 2 ,memp_ar_input +0x7284 032667 setarg mem_x +0x7285 032668 store 2 ,memp_ar_key +0x7286 032669 set1 mark_ar2 ,mark +0x7287 032670 branch function_ar +: 032675 function_e1: +0x7288 032676 disable user +0x7289 032677 call function_expand +0x728a 032678 branch function_hash +: 032680 function_e3: +0x728b 032681 arg mem_aco ,rega +0x728c 032682 enable user +0x728d 032683 call function_expand +0x728e 032684 call function_hash +0x728f 032685 arg mem_input_store ,contr +0x7290 032686 arg mem_kc ,contw +0x7291 032687 branch memcpy16 +: 032690 function_hash: +0x7292 032691 setarg mem_random_number +0x7293 032692 store 2 ,memp_ar_input +0x7294 032693 setarg mem_link_key +0x7295 032694 store 2 ,memp_ar_key +0x7296 032695 set0 mark_ar2 ,mark +0x7297 032696 call function_ar +0x7298 032697 arg mem_input_store ,rega +0x7299 032698 arg mem_random_number ,regb +0x729a 032699 arg mem_x ,contw +0x729b 032700 call xor16 +0x729c 032701 arg mem_x ,rega +0x729d 032702 arg mem_y ,regb +0x729e 032703 copy regb ,contw +0x729f 032704 enable user +0x72a0 032705 call add16 +0x72a1 032706 call key_offset +0x72a2 032707 setarg mem_y +0x72a3 032708 store 2 ,memp_ar_input +0x72a4 032709 setarg mem_x +0x72a5 032710 store 2 ,memp_ar_key +0x72a6 032711 set1 mark_ar2 ,mark +0x72a7 032712 branch function_ar +: 032716 function_ar: +0x72a8 032717 jam 0 ,mem_ar_hround +0x72a9 032718 fetch 2 ,memp_ar_key +0x72aa 032719 iforce contr +0x72ab 032720 arg mem_key_store ,contw +0x72ac 032721 call memcpy16 +0x72ad 032722 fetch 2 ,memp_ar_input +0x72ae 032723 iforce contr +0x72af 032724 arg mem_input_store ,contw +0x72b0 032725 call memcpy16 +: 032727 function_ar_loop: +0x72b1 032728 call key_scheduling +0x72b2 032729 disable user +0x72b3 032730 bmark0 mark_ar2 ,function_ar_original +0x72b4 032731 fetch 1 ,mem_ar_hround +0x72b5 032732 bne 4 ,function_ar_original +0x72b6 032733 fetch 2 ,memp_ar_input +0x72b7 032734 iforce regb +0x72b8 032735 call xor_mod32_ar2 +: 032736 function_ar_original: +0x72b9 032737 call xor_mod32 +0x72ba 032738 call el_boxes +0x72bb 032739 fetch 1 ,mem_ar_hround +0x72bc 032740 increase 1 ,pdata +0x72bd 032741 store 1 ,mem_ar_hround +0x72be 032743 call key_scheduling +0x72bf 032744 enable user +0x72c0 032745 call xor_mod32 +0x72c1 032746 call pht +0x72c2 032747 call permute +0x72c3 032748 call pht +0x72c4 032749 call permute +0x72c5 032750 call pht +0x72c6 032751 call permute +0x72c7 032752 call pht +0x72c8 032753 fetch 1 ,mem_ar_hround +0x72c9 032754 increase 1 ,pdata +0x72ca 032755 store 1 ,mem_ar_hround +0x72cb 032756 bne 16 ,function_ar_loop +0x72cc 032757 call key_scheduling +0x72cd 032758 disable user +0x72ce 032759 branch xor_mod32 +: 032763 key_scheduling: +0x72cf 032764 fetch 1 ,mem_ar_hround +0x72d0 032765 arg mem_key_store ,contr +0x72d1 032766 branch key_sched_zero ,blank +0x72d2 032767 iforce regb +0x72d3 032768 force 17 ,loopcnt +0x72d4 032769 copy contr ,contw +: 032770 key_rotateloop: +0x72d5 032771 ifetch 1 ,contr +0x72d6 032772 lshift3 pdata ,temp +0x72d7 032773 rshift2 pdata ,pdata +0x72d8 032774 rshift3 pdata ,pdata +0x72d9 032775 ior temp ,pdata +0x72da 032776 istore 1 ,contw +0x72db 032777 loop key_rotateloop +0x72dc 032778 setarg mem_key_store +0x72dd 032779 iadd regb ,contr +0x72de 032780 force 16 ,loopcnt +0x72df 032781 arg mem_round_key ,contw +: 032782 key_select_octet_loop: +0x72e0 032783 ifetch 1 ,contr +0x72e1 032784 istore 1 ,contw +0x72e2 032785 compare mem_key_store_end ,contr ,0xff +0x72e3 032786 nbranch key_select_octet_nwrap ,true +0x72e4 032787 increase -17 ,contr +: 032788 key_select_octet_nwrap: +0x72e5 032789 loop key_select_octet_loop +0x72e6 032790 force 0 ,rega +0x72e7 032791 add regb ,-1 ,regc +0x72e8 032792 lshift2 regc ,regc +0x72e9 032793 lshift2 regc ,regc +0x72ea 032794 call enable_authrom +0x72eb 032795 setarg mem_b_box +0x72ec 032796 iadd regc ,regc +0x72ed 032797 arg mem_round_key ,contw +0x72ee 032798 force 16 ,loopcnt +: 032799 bias_round_key_loop: +0x72ef 032800 ifetcht 1 ,regc +0x72f0 032801 ifetch 1 ,contw +0x72f1 032802 iadd temp ,pdata +0x72f2 032803 istore 1 ,contw +0x72f3 032804 increase 1 ,regc +0x72f4 032805 loop bias_round_key_loop +0x72f5 032806 branch disable_authrom +: 032808 key_sched_zero: +0x72f6 032809 force 16 ,loopcnt +0x72f7 032810 force 0 ,temp +: 032811 create_byte_16_loop: +0x72f8 032812 ifetch 1 ,contr +0x72f9 032813 ixor temp ,temp +0x72fa 032814 loop create_byte_16_loop +0x72fb 032815 deposit temp +0x72fc 032816 istore 1 ,contr +0x72fd 032817 arg mem_key_store ,contr +0x72fe 032818 arg mem_round_key ,contw +0x72ff 032819 branch memcpy16 +: 032821 xor_mod32: +0x7300 032822 arg mem_round_key ,regb +: 032823 xor_mod32_ar2: +0x7301 032824 force 16 ,loopcnt +0x7302 032825 arg mem_input_store ,rega +0x7303 032826 copy rega ,contw +: 032827 xor_mod32_loop: +0x7304 032828 ifetcht 1 ,rega +0x7305 032829 ifetch 1 ,regb +0x7306 032830 ixor temp ,alarm +0x7307 032831 and loopcnt ,3 ,regc +0x7308 032832 nbranch xor_mod32_invert ,user +0x7309 032833 xor_into 3 ,regc +: 032834 xor_mod32_invert: +0x730a 032835 sub regc ,1 ,regc +0x730b 032836 branch xor_even ,positive +0x730c 032837 iadd temp ,alarm +: 032838 xor_even: +0x730d 032839 deposit alarm +0x730e 032840 istore 1 ,contw +0x730f 032841 increase 1 ,rega +0x7310 032842 increase 1 ,regb +0x7311 032843 loop xor_mod32_loop +0x7312 032844 rtn +: 032846 el_boxes: +0x7313 032847 call enable_authrom +0x7314 032848 force 16 ,loopcnt +0x7315 032849 arg mem_input_store ,rega +: 032850 el_box_loop: +0x7316 032851 ifetch 1 ,rega +0x7317 032852 arg mem_e_box ,contr +0x7318 032853 and loopcnt ,3 ,regc +0x7319 032854 sub regc ,1 ,null +0x731a 032855 branch e_boxes ,positive +0x731b 032856 arg mem_l_box ,contr +: 032857 e_boxes: +0x731c 032858 iadd contr ,contr +0x731d 032859 ifetch 1 ,contr +0x731e 032860 istore 1 ,rega +0x731f 032861 increase 1 ,rega +0x7320 032862 loop el_box_loop +0x7321 032863 branch disable_authrom +: 032865 pht: +0x7322 032866 force 8 ,loopcnt +0x7323 032867 arg mem_input_store ,contr +0x7324 032868 copy contr ,contw +: 032869 pht_loop: +0x7325 032870 ifetch 1 ,contr +0x7326 032871 iforce rega +0x7327 032872 ifetch 1 ,contr +0x7328 032873 iforce regb +0x7329 032874 lshift rega ,pdata +0x732a 032875 iadd regb ,pdata +0x732b 032876 istore 1 ,contw +0x732c 032877 deposit rega +0x732d 032878 iadd regb ,pdata +0x732e 032879 istore 1 ,contw +0x732f 032880 loop pht_loop +0x7330 032881 rtn +: 032884 permute: +0x7331 032885 setarg 0x8ae42c +0x7332 032886 iforce temp +0x7333 032887 force 7 ,loopcnt +0x7334 032888 call permute_exchange +0x7335 032889 setarg 0xd751b +0x7336 032890 iforce temp +0x7337 032891 force 5 ,loopcnt +0x7338 032892 call permute_exchange +0x7339 032893 fetch 1 ,mem_input_store + 15 +0x733a 032894 iforce rega +0x733b 032895 fetch 1 ,mem_input_store + 3 +0x733c 032896 store 1 ,mem_input_store + 15 +0x733d 032897 deposit rega +0x733e 032898 store 1 ,mem_input_store + 3 +0x733f 032899 rtn +: 032901 permute_exchange: +0x7340 032902 and temp ,0xf ,regb +: 032903 permute_loop: +0x7341 032904 and temp ,0xf ,pdata +0x7342 032905 arg mem_input_store ,contw +0x7343 032906 iadd contw ,contw +0x7344 032907 ifetch 1 ,contw +0x7345 032908 iforce regc +0x7346 032909 deposit rega +0x7347 032910 istore 1 ,contw +0x7348 032911 copy regc ,rega +0x7349 032912 rshift4 temp ,temp +0x734a 032913 loop permute_loop +0x734b 032914 setarg mem_input_store +0x734c 032915 iadd regb ,contw +0x734d 032916 deposit rega +0x734e 032917 istore 1 ,contw +0x734f 032918 rtn +: 032920 add16: +0x7350 032921 enable user +0x7351 032922 branch xor_add16 +: 032924 xor16: +0x7352 032925 disable user +: 032926 xor_add16: +0x7353 032927 force 16 ,loopcnt +: 032928 xoradd_loop: +0x7354 032929 ifetcht 1 ,rega +0x7355 032930 ifetch 1 ,regb +0x7356 032931 branch xoradd_add ,user +0x7357 032932 ixor temp ,pdata +0x7358 032933 branch xoradd_store +: 032934 xoradd_add: +0x7359 032935 iadd temp ,pdata +: 032936 xoradd_store: +0x735a 032937 istore 1 ,contw +0x735b 032938 increase 1 ,rega +0x735c 032939 increase 1 ,regb +0x735d 032940 loop xoradd_loop +0x735e 032941 rtn +: 032944 function_expand: +0x735f 032945 arg mem_y ,contw +0x7360 032946 ifetch 6 ,rega +0x7361 032947 istore 6 ,contw +0x7362 032948 branch expand_12 ,user +0x7363 032949 ifetch 6 ,rega +0x7364 032950 branch expand_cont +: 032951 expand_12: +0x7365 032952 ifetch 6 ,contr +: 032953 expand_cont: +0x7366 032954 istore 6 ,contw +0x7367 032955 ifetch 4 ,rega +0x7368 032956 istore 4 ,contw +0x7369 032957 rtn +: 032959 key_offset: +0x736a 032960 arg mem_link_key ,contr +0x736b 032961 arg mem_x ,contw +0x736c 032962 arg 0 ,temp +0x736d 032963 setarg 0x8395a7 +0x736e 032964 call concatenate_temp24 +0x736f 032965 setarg 0xb3c1df +0x7370 032966 call concatenate_temp24 +0x7371 032967 setarg 0xe5e9 +0x7372 032968 call concatenate_temp16 +0x7373 032969 copy temp ,regab +0x7374 032970 disable user +0x7375 032971 call key_addxor +0x7376 032972 copy regab ,temp +0x7377 032973 enable user +0x7378 032974 branch key_addxor +: 032976 key_addxor: +0x7379 032977 force 8 ,loopcnt +: 032978 key_addxor_loop: +0x737a 032979 ifetch 1 ,contr +0x737b 032980 compare 1 ,loopcnt ,1 +0x737c 032981 branch key_high ,user +0x737d 032982 branch key_xor ,true +: 032983 key_add: +0x737e 032984 iadd temp ,pdata +0x737f 032985 branch key_store +: 032986 key_high: +0x7380 032987 branch key_add ,true +: 032988 key_xor: +0x7381 032989 ixor temp ,pdata +: 032990 key_store: +0x7382 032991 istore 1 ,contw +0x7383 032992 rshift8 temp ,temp +0x7384 032993 loop key_addxor_loop +0x7385 032994 rtn +: 032996 copy_aco: +0x7386 032997 fetch 6 ,mem_input_store + 4 +0x7387 032998 store 6 ,mem_aco +0x7388 032999 ifetch 6 ,contr +0x7389 033000 istore 6 ,contw +0x738a 033001 rtn +: 033003 concatenate_temp24: +0x738b 033004 lshift8 temp ,temp +: 033005 concatenate_temp16: +0x738c 033006 lshift16 temp ,temp +0x738d 033007 ior temp ,temp +0x738e 033008 rtn +: 033012 loop1: +0x738f 033013 branch loop1 +: 033017 generate_stk: +0x7390 033018 bpatchx patch3c_0 ,mem_patch3c +0x7391 033019 call function_s1 +0x7392 033020 arg mem_le_ltk ,contw +0x7393 033021 branch store_aes_result +: 033024 authenticate_rconfirm: +0x7394 033025 arg mem_le_srand ,contw +0x7395 033026 branch authenticate_mconfirm ,master +0x7396 033027 arg mem_le_mrand ,contw +: 033028 authenticate_mconfirm: +0x7397 033029 copy contr ,rega +0x7398 033030 call memcpy16 +0x7399 033031 call function_c1 +0x739a 033032 arg mem_le_rconfirm ,contr +0x739b 033033 branch compare_res +: 033035 generate_confirm: +0x739c 033036 arg mem_le_mrand ,rega +0x739d 033037 branch generate_mrand ,master +0x739e 033038 arg mem_le_srand ,rega +: 033039 generate_mrand: +0x739f 033040 copy rega ,contw +0x73a0 033041 call generate_random +0x73a1 033042 branch function_c1 +: 033044 generate_sk: +0x73a2 033045 arg mem_le_skdm ,contr +0x73a3 033046 call load_data128 +0x73a4 033047 arg mem_le_ltk ,contr +0x73a5 033048 call load_regext +0x73a6 033049 force 0x38 ,aes_ctrl +0x73a7 033050 force 0x0 ,aes_ctrl +0x73a8 033051 call wait_aes +0x73a9 033052 arg mem_le_sk ,contw +0x73aa 033053 branch store_aes_result +: 033056 first_block_counter: +0x73ab 033057 force 0x49 ,pdata +0x73ac 033058 branch first_block +: 033059 first_block_data: +0x73ad 033060 force 1 ,pdata +: 033061 first_block: +0x73ae 033062 force regidx_data ,regext_index +0x73af 033063 lshift8 temp ,regext +0x73b0 033064 ior regext ,regext +0x73b1 033065 increase 1 ,regext_index +0x73b2 033066 rshift8 temp ,regext +0x73b3 033067 rshift16 regext ,regext +0x73b4 033068 fetch 2 ,mem_le_ivm +0x73b5 033069 lshift16 ,pdata ,pdata +0x73b6 033070 ior regext ,regext +0x73b7 033071 increase 1 ,regext_index +0x73b8 033072 ifetch 4 ,contr +0x73b9 033073 iforce regext +0x73ba 033074 increase 1 ,regext_index +0x73bb 033075 ifetch 2 ,contr +0x73bc 033076 byteswap rega ,regext +0x73bd 033077 lshift16 regext ,regext +0x73be 033078 ior regext ,regext +0x73bf 033079 increase 1 ,regext_index +0x73c0 033080 rtn +: 033084 generate_mic: +0x73c1 033085 add regc ,1 ,contr +0x73c2 033086 ifetch 1 ,contr +0x73c3 033087 iforce rega +0x73c4 033088 call first_block_counter +0x73c5 033089 call do_aes_ocb +0x73c6 033091 force regidx_data ,regext_index +0x73c7 033092 ifetch 1 ,regc +0x73c8 033093 and_into 0x3 ,pdata +0x73c9 033094 lshift16 pdata ,regext +0x73ca 033095 set1 8 ,regext +0x73cb 033096 call clear_hidata +0x73cc 033097 call do_aes_cbc +0x73cd 033099 copy rega ,loopcnt +0x73ce 033100 add regc ,2 ,contr +0x73cf 033101 call padding_data +: 033102 generate_mic_loop: +0x73d0 033103 call aes_load_data +0x73d1 033104 call do_aes_cbc +0x73d2 033105 deposit loopcnt +0x73d3 033106 branch generate_mic_end ,blank +0x73d4 033107 branch generate_mic_loop +: 033108 generate_mic_end: +0x73d5 033109 force regidx_result ,regext_index +0x73d6 033110 deposit regext +0x73d7 033111 store 4 ,mem_le_mic +0x73d8 033112 rtn +: 033114 aes_crypt_data: +0x73d9 033115 increase 1 ,rega +0x73da 033116 call first_block_data +0x73db 033117 copy regc ,contr +0x73dc 033118 call aes_load_xor +0x73dd 033119 call do_aes_ctr +0x73de 033120 call store_enc_data +0x73df 033121 increase 16 ,regc +0x73e0 033122 increase -16 ,regb +0x73e1 033123 branch aes_crypt_data ,positive +0x73e2 033124 rtn +: 033126 le_encrypt: +0x73e3 033127 bpatchx patch3c_1 ,mem_patch3c +0x73e4 033128 arg mem_le_txheader ,regc +0x73e5 033129 fetcht 5 ,mem_le_pcnt_tx +0x73e6 033130 call generate_mic +0x73e7 033131 force regidx_xor ,regext_index +0x73e8 033132 iforce regext +0x73e9 033133 force 0 ,rega +0x73ea 033134 call first_block_data +0x73eb 033135 call do_aes_ctr +0x73ec 033136 arg mem_le_txpayload ,regc +0x73ed 033137 fetch 1 ,mem_le_txlen +0x73ee 033138 add pdata ,-1 ,regb +0x73ef 033139 iadd regc ,contw +0x73f0 033140 force regidx_result ,regext_index +0x73f1 033141 deposit regext +0x73f2 033142 istore 4 ,contw +0x73f3 033143 call aes_crypt_data +0x73f4 033144 fetch 1 ,mem_le_txlen +0x73f5 033145 increase 4 ,pdata +0x73f6 033146 store 1 ,mem_le_txlen +0x73f7 033147 fetcht 5 ,mem_le_pcnt_tx +0x73f8 033148 increase 1 ,temp +0x73f9 033149 storet 5 ,mem_le_pcnt_tx +0x73fa 033150 rtn +: 033152 le_decrypt: +0x73fb 033153 bpatchx patch3c_2 ,mem_patch3c +0x73fc 033154 fetch 1 ,mem_le_rxbuf + 1 +0x73fd 033155 sub pdata ,20 ,null +0x73fe 033156 branch le_dec_cont ,positive +: 033157 le_dec_cont: +0x73ff 033158 arg mem_le_rxbuf + 2 ,regc +0x7400 033159 add pdata ,-1 ,regb +0x7401 033160 increase -4 ,pdata +0x7402 033161 store 1 ,mem_le_rxbuf + 1 +0x7403 033162 iadd regc ,contr +0x7404 033163 ifetch 4 ,contr +0x7405 033164 force regidx_xor ,regext_index +0x7406 033165 iforce regext +0x7407 033166 force 0 ,rega +0x7408 033167 fetcht 5 ,mem_le_pcnt_rx +0x7409 033168 call first_block_data +0x740a 033169 call do_aes_ctr +0x740b 033170 force regidx_result ,regext_index +0x740c 033171 deposit regext +0x740d 033172 store 4 ,mem_le_peer_mic +0x740e 033173 call aes_crypt_data +0x740f 033174 arg mem_le_rxbuf ,regc +0x7410 033175 call generate_mic +0x7411 033176 fetcht 4 ,mem_le_peer_mic +0x7412 033177 isub temp ,pdata +0x7413 033178 nrtn blank +0x7414 033179 fetch 4 ,mem_le_last_mic +0x7415 033180 isub temp ,pdata +0x7416 033181 rtn blank +0x7417 033182 storet 4 ,mem_le_last_mic +0x7418 033183 fetch 5 ,mem_le_pcnt_rx +0x7419 033184 increase 1 ,pdata +0x741a 033185 store 5 ,mem_le_pcnt_rx +0x741b 033186 force 0 ,pdata +0x741c 033187 rtn +: 033189 wait_aes: +0x741d 033190 nbranch wait_aes ,aes_ready +0x741e 033191 rtn +: 033193 do_aes_ocb: +0x741f 033194 force 0x30 ,aes_ctrl +0x7420 033195 force 0x0 ,aes_ctrl +0x7421 033196 branch wait_aes +: 033198 do_aes_cbc: +0x7422 033199 force 0x32 ,aes_ctrl +0x7423 033200 force 0x2 ,aes_ctrl +0x7424 033201 branch wait_aes +: 033203 do_aes_ctr: +0x7425 033204 force 0x34 ,aes_ctrl +0x7426 033205 force 0x4 ,aes_ctrl +0x7427 033206 branch wait_aes +: 033209 aes_init: +0x7428 033210 force 1 ,aes_ctrl +0x7429 033211 force 0 ,aes_ctrl +0x742a 033212 rtn +: 033213 function_s1: +0x742b 033214 force regidx_data ,regext_index +0x742c 033215 fetch 4 ,mem_le_mrand +0x742d 033216 iforce regext +0x742e 033217 increase 1 ,regext_index +0x742f 033218 ifetch 4 ,contr +0x7430 033219 iforce regext +0x7431 033220 increase 1 ,regext_index +0x7432 033221 fetch 4 ,mem_le_srand +0x7433 033222 iforce regext +0x7434 033223 increase 1 ,regext_index +0x7435 033224 ifetch 4 ,contr +0x7436 033225 iforce regext +0x7437 033226 increase 1 ,regext_index +0x7438 033227 call aes_clear +0x7439 033228 increase -4 ,regext_index +0x743a 033229 fetch 4 ,mem_le_tk +0x743b 033230 copy pdata ,regext +0x743c 033231 increase 4 ,regext_index +0x743d 033232 force 0x38 ,aes_ctrl +0x743e 033233 force 0x8 ,aes_ctrl +0x743f 033234 branch wait_aes +: 033237 function_c1: +0x7440 033238 bpatchx patch3c_3 ,mem_patch3c +0x7441 033239 fetch 6 ,mem_le_lap +0x7442 033240 fetcht 6 ,mem_le_plap +0x7443 033241 branch function_c1_master ,master +0x7444 033242 fetch 6 ,mem_le_plap +0x7445 033243 fetcht 6 ,mem_le_lap +: 033244 function_c1_master: +0x7446 033245 force regidx_xor ,regext_index +0x7447 033246 copy temp ,regext +0x7448 033247 increase 1 ,regext_index +0x7449 033248 rshift32 temp ,regext +0x744a 033249 lshift16 pdata ,pdata +0x744b 033250 ior regext ,regext +0x744c 033251 increase 1 ,regext_index +0x744d 033252 rshift32 pdata ,regext +0x744e 033253 increase 1 ,regext_index +0x744f 033254 force 0 ,regext +0x7450 033255 force 0 ,pdata +0x7451 033256 fetch 1 ,mem_le_conn_peer_addr_type +0x7452 033257 fetcht 1 ,mem_le_adv_own_addr_type +0x7453 033258 nbranch function_c1_irat ,master +0x7454 033260 fetch 1 ,mem_le_conn_own_addr_type +0x7455 033261 fetcht 1 ,mem_le_conn_peer_addr_type +: 033262 function_c1_irat: +0x7456 033263 store 1 ,mem_le_iat +0x7457 033264 storet 1 ,mem_le_rat +0x7458 033265 force regidx_data ,regext_index +0x7459 033266 arg mem_le_iat ,regb +0x745a 033267 force 4 ,loopcnt +: 033268 function_c1_loop1: +0x745b 033269 ifetch 4 ,rega +0x745c 033270 ifetcht 4 ,regb +0x745d 033271 ixor temp ,regext +0x745e 033272 increase 1 ,regext_index +0x745f 033273 increase 4 ,rega +0x7460 033274 increase 4 ,regb +0x7461 033275 loop function_c1_loop1 +0x7462 033276 call aes_clear +0x7463 033277 increase -4 ,regext_index +0x7464 033278 fetch 4 ,mem_le_tk +0x7465 033279 copy pdata ,regext +0x7466 033280 increase 4 ,regext_index +0x7467 033281 force 0x38 ,aes_ctrl +0x7468 033282 force 0xc ,aes_ctrl +0x7469 033283 call wait_aes +0x746a 033285 call aes_clear_data +0x746b 033286 force 0x3a ,aes_ctrl +0x746c 033287 force 0x8 ,aes_ctrl +0x746d 033288 branch wait_aes +: 033290 padding_data: +0x746e 033291 compare 0 ,loopcnt ,3 +0x746f 033292 rtn true +0x7470 033293 deposit contr +0x7471 033294 iadd loopcnt ,contw +0x7472 033295 force 0 ,pdata +: 033296 padding_loop: +0x7473 033297 istore 1 ,contw +0x7474 033298 increase 1 ,loopcnt +0x7475 033299 compare 0 ,loopcnt ,3 +0x7476 033300 rtn true +0x7477 033301 branch padding_loop +: 033303 aes_load_data: +0x7478 033304 force regidx_data ,regext_index +: 033305 load_data_loop: +0x7479 033306 deposit loopcnt +0x747a 033307 branch load_data_padding ,blank +0x747b 033308 ifetch 4 ,contr +0x747c 033309 increase -4 ,loopcnt +: 033310 load_data_padding: +0x747d 033311 iforce regext +0x747e 033312 increase 1 ,regext_index +0x747f 033313 compare regidx_key ,regext_index ,0xf +0x7480 033314 rtn true +0x7481 033315 branch load_data_loop +: 033317 aes_load_xor: +0x7482 033318 force regidx_xor ,regext_index +0x7483 033319 branch load_regext +: 033320 load_key: +0x7484 033321 force regidx_key ,regext_index +0x7485 033322 branch load_regext +: 033323 load_data128: +0x7486 033324 force regidx_data ,regext_index +: 033325 load_regext: +0x7487 033326 force 4 ,loopcnt +: 033327 load_regext_loop: +0x7488 033328 ifetch 4 ,contr +0x7489 033329 iforce regext +0x748a 033330 increase 1 ,regext_index +0x748b 033331 loop load_regext_loop +0x748c 033332 rtn +: 033334 load_sk: +0x748d 033335 arg mem_le_sk ,contr +0x748e 033336 branch load_key +: 033338 clear_hidata: +0x748f 033339 force 4 ,loopcnt +0x7490 033340 branch clear_data_rest +: 033342 aes_clear_data: +0x7491 033343 force regidx_data ,regext_index +: 033344 aes_clear: +0x7492 033345 force 4 ,loopcnt +: 033346 clear_loop: +0x7493 033347 force 0 ,regext +: 033348 clear_data_rest: +0x7494 033349 increase 1 ,regext_index +0x7495 033350 loop clear_loop +0x7496 033351 rtn +: 033353 store_aes_result: +0x7497 033354 force regidx_result ,regext_index +0x7498 033355 force 4 ,loopcnt +: 033356 send_aes_result_loop: +0x7499 033357 deposit regext +0x749a 033358 istore 4 ,contw +0x749b 033359 increase 1 ,regext_index +0x749c 033360 loop send_aes_result_loop +0x749d 033361 rtn +: 033363 store_enc_data: +0x749e 033364 force regidx_result ,regext_index +0x749f 033365 copy regc ,contw +0x74a0 033366 add regb ,1 ,loopcnt +0x74a1 033367 sub loopcnt ,15 ,null +0x74a2 033368 branch store_enc_loop ,positive +0x74a3 033369 force 16 ,loopcnt +: 033370 store_enc_loop: +0x74a4 033371 deposit regext +0x74a5 033372 sub loopcnt ,3 ,null +0x74a6 033373 branch store_enc_byte ,positive +0x74a7 033374 istore 4 ,contw +0x74a8 033375 increase -4 ,loopcnt +0x74a9 033376 rtn zero +0x74aa 033377 increase 1 ,regext_index +0x74ab 033378 branch store_enc_loop +: 033379 store_enc_byte: +0x74ac 033380 istore 1 ,contw +0x74ad 033381 rshift8 pdata ,pdata +0x74ae 033382 loop store_enc_byte +0x74af 033383 rtn +: 033386 compare_res: +0x74b0 033387 force regidx_result ,regext_index +0x74b1 033388 force 4 ,loopcnt +: 033389 compare_res_loop: +0x74b2 033390 ifetch 4 ,contr +0x74b3 033391 isub regext ,null +0x74b4 033392 nrtn zero +0x74b5 033393 increase 1 ,regext_index +0x74b6 033394 loop compare_res_loop +0x74b7 033395 force 0 ,null +0x74b8 033396 rtn +: 033398 enable_authrom: +0x74b9 033399 hfetch 1 ,core_clkoff +0x74ba 033400 set0 clock_off_auth_rom ,pdata +0x74bb 033401 hstore 1 ,core_clkoff +0x74bc 033402 rtn +: 033404 disable_authrom: +0x74bd 033405 hfetch 1 ,core_clkoff +0x74be 033406 set1 clock_off_auth_rom ,pdata +0x74bf 033407 hstore 1 ,core_clkoff +0x74c0 033408 rtn +: 033410 init_memp: +0x74c1 033411 arg mem_p ,contw +0x74c2 033412 setsect 0 ,0x3ffff +0x74c3 033413 setsect 1 ,0x3ffff +0x74c4 033414 setsect 2 ,0x3ffff +0x74c5 033415 setsect 3 ,0x3fbff +0x74c6 033416 istore 9 ,contw +0x74c7 033417 setsect 0 ,0x3ffff +0x74c8 033418 setsect 1 ,0x3ffff +0x74c9 033419 setsect 2 ,0x3ffff +0x74ca 033420 setsect 3 ,0x3ffff +0x74cb 033421 istore 9 ,contw +0x74cc 033422 setsect 0 ,0x3ffff +0x74cd 033423 setsect 1 ,0x3ffff +0x74ce 033424 setsect 2 ,0x3cfff +0x74cf 033425 setsect 3 ,0x3ffff +0x74d0 033426 istore 9 ,contw +0x74d1 033427 setsect 0 ,0x3ffff +0x74d2 033428 setsect 1 ,0x3ffff +0x74d3 033429 setsect 2 ,0x3ffef +0x74d4 033430 setsect 3 ,0x3ffff +0x74d5 033431 istore 9 ,contw +0x74d6 033432 setsect 0 ,0x3ffff +0x74d7 033433 setsect 1 ,0x3ffff +0x74d8 033434 setsect 2 ,0x3ffff +0x74d9 033435 setsect 3 ,0x3ffff +0x74da 033436 istore 9 ,contw +0x74db 033437 setsect 0 ,0x3ffff +0x74dc 033438 setsect 1 ,0x26c7f +0x74dd 033439 setsect 2 ,0x146b +0x74de 033440 setsect 3 ,0x37bb3 +0x74df 033441 istore 9 ,contw +0x74e0 033442 setsect 0 ,0x1feb8 +0x74e1 033443 setsect 1 ,0x10c12 +0x74e2 033444 setsect 2 ,0x2b722 +0x74e3 033445 setsect 3 ,0x29fa6 +0x74e4 033446 istore 9 ,contw +0x74e5 033447 setsect 0 ,0xe70f +0x74e6 033448 setsect 1 ,0x16720 +0x74e7 033449 setsect 2 ,0x519e +0x74e8 033450 setsect 3 ,0x19084 +0x74e9 033451 istore 9 ,contw +0x74ea 033452 setsect 0 ,0x31012 +0x74eb 033453 setsect 1 ,0x360bf +0x74ec 033454 setsect 2 ,0x3f0af +0x74ed 033455 setsect 3 ,0x3d3 +0x74ee 033456 istore 9 ,contw +0x74ef 033457 setsect 0 ,0x3a188 +0x74f0 033458 setsect 1 ,0x3ad0 +0x74f1 033459 setsect 2 ,0x3cbf2 +0x74f2 033460 setsect 3 ,0x243d9 +0x74f3 033461 istore 9 ,contw +0x74f4 033462 setsect 0 ,0x2b030 +0x74f5 033463 setsect 1 ,0x36a03 +0x74f6 033464 setsect 2 ,0x11188 +0x74f7 033465 setsect 3 ,0x1e520 +0x74f8 033466 istore 9 ,contw +0x74f9 033467 setsect 0 ,0x3a11e +0x74fa 033468 setsect 1 ,0xfe5d +0x74fb 033469 setsect 2 ,0xdd57 +0x74fc 033470 setsect 3 ,0x1ac93 +0x74fd 033471 istore 9 ,contw +0x74fe 033472 setsect 0 ,0x11ed +0x74ff 033473 setsect 1 ,0x218c4 +0x7500 033474 setsect 2 ,0x8da7 +0x7501 033475 setsect 3 ,0x257ff +0x7502 033476 istore 9 ,contw +0x7503 033477 setsect 0 ,0x3192b +0x7504 033478 setsect 1 ,0x34641 +0x7505 033479 setsect 2 ,0x1be0c +0x7506 033480 setsect 3 ,0x366ad +0x7507 033481 istore 9 ,contw +0x7508 033482 setsect 0 ,0x1f83 +0x7509 033483 setsect 1 ,0x15a23 +0x750a 033484 setsect 2 ,0x3f9b0 +0x750b 033485 setsect 3 ,0x3949 +0x750c 033486 istore 9 ,contw +0x750d 033487 setsect 0 ,0x13a51 +0x750e 033488 setsect 1 ,0x153fd +0x750f 033489 setsect 2 ,0x3372a +0x7510 033490 setsect 3 ,0xf1bb +0x7511 033491 istore 9 ,contw +0x7512 033492 setsect 0 ,0x3ae85 +0x7513 033493 setsect 1 ,0x1eed9 +0x7514 033494 setsect 2 ,0x9e66 +0x7515 033495 setsect 3 ,0x1a8 +0x7516 033496 istore 8 ,contw +0x7517 033497 rtn +: 033501 init_memp_256: +0x7518 033502 arg mem_p_256 ,contw +0x7519 033503 setsect 0 ,0x3ffff +0x751a 033504 setsect 1 ,0x3ffff +0x751b 033505 setsect 2 ,0x3ffff +0x751c 033506 setsect 3 ,0x3ffff +0x751d 033507 istore 9 ,contw +0x751e 033508 setsect 0 ,0x3ffff +0x751f 033509 setsect 1 ,0x3f +0x7520 033510 setsect 2 ,0x0 +0x7521 033511 setsect 3 ,0x0 +0x7522 033512 istore 9 ,contw +0x7523 033513 setsect 0 ,0x0 +0x7524 033514 setsect 1 ,0x0 +0x7525 033515 setsect 2 ,0x1000 +0x7526 033516 setsect 3 ,0x0 +0x7527 033517 istore 9 ,contw +0x7528 033518 setsect 0 ,0x3ff00 +0x7529 033519 setsect 1 ,0x3ffff +0x752a 033520 setsect 2 ,0x3ffcf +0x752b 033521 setsect 3 ,0x3ffff +0x752c 033522 istore 9 ,contw +0x752d 033523 setsect 0 ,0x3ffff +0x752e 033524 setsect 1 ,0x3ffff +0x752f 033525 setsect 2 ,0x3ffff +0x7530 033526 setsect 3 ,0x3ff +0x7531 033527 istore 9 ,contw +0x7532 033528 setsect 0 ,0x0 +0x7533 033529 setsect 1 ,0x0 +0x7534 033530 setsect 2 ,0x0 +0x7535 033531 setsect 3 ,0x0 +0x7536 033532 istore 9 ,contw +0x7537 033533 setsect 0 ,0x10000 +0x7538 033534 setsect 1 ,0x0 +0x7539 033535 setsect 2 ,0x3f000 +0x753a 033536 setsect 3 ,0x3ffff +0x753b 033537 istore 9 ,contw +0x753c 033538 setsect 0 ,0x296ff +0x753d 033539 setsect 1 ,0x22630 +0x753e 033540 setsect 2 ,0x3945d +0x753f 033541 setsect 3 ,0x3d284 +0x7540 033542 istore 9 ,contw +0x7541 033543 setsect 0 ,0x333a0 +0x7542 033544 setsect 1 ,0x4b7a +0x7543 033545 setsect 2 ,0x37d8 +0x7544 033546 setsect 3 ,0x3c9dc +0x7545 033547 istore 9 ,contw +0x7546 033548 setsect 0 ,0x3a440 +0x7547 033549 setsect 1 ,0x1b958 +0x7548 033550 setsect 2 ,0x38bce +0x7549 033551 setsect 3 ,0x1091f +0x754a 033552 istore 9 ,contw +0x754b 033553 setsect 0 ,0x2e12c +0x754c 033554 setsect 1 ,0x1f47c +0x754d 033555 setsect 2 ,0x356b1 +0x754e 033556 setsect 3 ,0x2fd47 +0x754f 033557 istore 9 ,contw +0x7550 033558 setsect 0 ,0x6837 +0x7551 033559 setsect 1 ,0x2ed90 +0x7552 033560 setsect 2 ,0x1ecec +0x7553 033561 setsect 3 ,0x1acc5 +0x7554 033562 istore 9 ,contw +0x7555 033563 setsect 0 ,0x23357 +0x7556 033564 setsect 1 ,0x18af3 +0x7557 033565 setsect 2 ,0xf9e1 +0x7558 033566 setsect 3 ,0x129f0 +0x7559 033567 istore 9 ,contw +0x755a 033568 setsect 0 ,0x2e7eb +0x755b 033569 setsect 1 ,0x3e6e3 +0x755c 033570 setsect 2 ,0x3e1a7 +0x755d 033571 setsect 3 ,0x10b8b +0x755e 033572 istore 9 ,contw +0x755f 033573 setsect 0 ,0x24fe3 +0x7560 033574 setsect 1 ,0x20ef +0x7561 033575 setsect 2 ,0x1b5a6 +0x7562 033576 setsect 3 ,0xdc2f +0x7563 033577 istore 9 ,contw +0x7564 033578 setsect 0 ,0x13860 +0x7565 033579 setsect 1 ,0x2bd69 +0x7566 033580 setsect 2 ,0x391a +0x7567 033581 setsect 3 ,0x1b222 +0x7568 033582 istore 9 ,contw +0x7569 033583 rtn +: 033586 publickey_init: +0x756a 033587 fetch 1 ,mem_ssp_enable +0x756b 033588 nbranch sp_initialize ,blank +0x756c 033589 branch sp_initialize_256 +: 033591 sp_calc_sequence_256_check: +0x756d 033592 bpatchx patch3c_4 ,mem_patch3c +0x756e 033593 fetch 1 ,mem_ssp_enable +0x756f 033594 rtn blank +0x7570 033595 fetch 1 ,mem_sp_local_key_invalid +0x7571 033596 rtnne sp_key_valid +0x7572 033597 fetch 1 ,mem_le_secure_connect_enable +0x7573 033598 rtn blank +0x7574 033599 fetch 1 ,mem_le_sc_local_key_invalid +0x7575 033600 rtneq sp_key_valid_256 +0x7576 033601 fetch 2 ,mem_ui_state_map +0x7577 033602 bbit1 ui_state_bt_connected ,stop_publickey_calc_256 +0x7578 033603 fetch 1 ,mem_le_sc_calc +0x7579 033604 beq sp_calc_standby ,sp_initialize_256 +0x757a 033605 rtn +: 033606 stop_publickey_calc_256: +0x757b 033607 jam sp_calc_standby ,mem_le_sc_calc +0x757c 033608 rtn +: 033611 sp_initialize: +0x757d 033612 bpatchx patch3c_5 ,mem_patch3c +0x757e 033613 fetch 1 ,mem_ssp_enable +0x757f 033614 branch ssp_disable ,blank +0x7580 033615 call ssp_enable +0x7581 033616 call sp_clear_flags +0x7582 033617 branch sp_pubkey_calc +: 033619 sp_clear_flags: +0x7583 033620 setarg 0 +0x7584 033621 store 8 ,mem_sp_state_start +0x7585 033622 store 4 ,mem_sp_flag_start +0x7586 033623 store 7 ,mem_sp_iocap_remote +0x7587 033624 rtn +: 033626 sp_generate_local_key: +0x7588 033627 jam sp_flag_commit ,mem_sp_flag +0x7589 033628 branch sp_generate_local_key0 +: 033629 sp_master_generate_local_key: +0x758a 033630 fetch 1 ,mem_sp_local_key_invalid +0x758b 033631 beq sp_key_valid ,sp_dhkey_calc +0x758c 033632 branch assert +: 033633 sp_generate_local_key0: +0x758d 033634 fetch 1 ,mem_sp_local_key_invalid +0x758e 033635 beq sp_key_valid ,sp_start_send_pubkey +0x758f 033636 branch sp_pubkey_calc +: 033638 sp_start_send_pubkey: +0x7590 033639 call sp_dhkey_calc +0x7591 033640 fetch 1 ,mem_master_sp_state +0x7592 033641 nrtn blank +0x7593 033642 jam sp_stat_key_send ,mem_sp_state +0x7594 033643 rtn +: 033646 sp_calc_check_publickey_256: +0x7595 033647 call sp_calc_b256 +0x7596 033648 arg mem_le_pubkey_remote_y_256 ,rega +0x7597 033649 arg mem_t7_256 ,contw +0x7598 033650 call bn_sqrmod_256 +0x7599 033651 arg mem_le_pubkey_remote_x_256 ,rega +0x759a 033652 arg mem_t2_256 ,contw +0x759b 033653 call bn_sqrmod_256 +0x759c 033654 arg mem_t2_256 ,rega +0x759d 033655 arg mem_le_pubkey_remote_x_256 ,regb +0x759e 033656 arg mem_t2_256 ,contw +0x759f 033657 call bn_mulmod_256 +0x75a0 033658 arg mem_a_256 ,rega +0x75a1 033659 arg mem_le_pubkey_remote_x_256 ,regb +0x75a2 033660 arg mem_t3_256 ,contw +0x75a3 033661 call bn_mulmod_256 +0x75a4 033662 arg mem_t3_256 ,rega +0x75a5 033663 arg mem_t2_256 ,regb +0x75a6 033664 arg mem_t2_256 ,contw +0x75a7 033665 call bn_addmod_256 +0x75a8 033666 arg mem_t0_256 ,rega +0x75a9 033667 arg mem_t2_256 ,regb +0x75aa 033668 arg mem_t0_256 ,contw +0x75ab 033669 call bn_addmod_256 +0x75ac 033670 arg 32 ,loopcnt +0x75ad 033671 arg mem_t7_256 ,rega +0x75ae 033672 arg mem_t0_256 ,regb +0x75af 033673 branch string_compare +: 033675 sp_calc_b256: +0x75b0 033676 arg mem_gy_256 ,rega +0x75b1 033677 arg mem_t0_256 ,contw +0x75b2 033678 call bn_sqrmod_256 +0x75b3 033679 arg mem_gx_256 ,rega +0x75b4 033680 arg mem_t2_256 ,contw +0x75b5 033681 call bn_sqrmod_256 +0x75b6 033682 arg mem_t2_256 ,rega +0x75b7 033683 arg mem_gx_256 ,regb +0x75b8 033684 arg mem_t2_256 ,contw +0x75b9 033685 call bn_mulmod_256 +0x75ba 033686 arg mem_a_256 ,rega +0x75bb 033687 arg mem_gx_256 ,regb +0x75bc 033688 arg mem_t3_256 ,contw +0x75bd 033689 call bn_mulmod_256 +0x75be 033690 arg mem_t3_256 ,rega +0x75bf 033691 arg mem_t2_256 ,regb +0x75c0 033692 arg mem_t2_256 ,contw +0x75c1 033693 call bn_addmod_256 +0x75c2 033694 arg mem_t0_256 ,rega +0x75c3 033695 arg mem_t2_256 ,regb +0x75c4 033696 arg mem_t0_256 ,contw +0x75c5 033697 branch bn_submod_256 +: 033699 sp_calc_check_publickey: +0x75c6 033700 call sp_calc_b +0x75c7 033701 arg mem_sp_pubkey_remote_y ,rega +0x75c8 033702 arg mem_t7_256 ,contw +0x75c9 033703 call bn_sqrmod +0x75ca 033704 arg mem_sp_pubkey_remote_x ,rega +0x75cb 033705 arg mem_t2_256 ,contw +0x75cc 033706 call bn_sqrmod +0x75cd 033707 arg mem_t2_256 ,rega +0x75ce 033708 arg mem_sp_pubkey_remote_x ,regb +0x75cf 033709 arg mem_t2_256 ,contw +0x75d0 033710 call bn_mulmod +0x75d1 033711 arg mem_a ,rega +0x75d2 033712 arg mem_sp_pubkey_remote_x ,regb +0x75d3 033713 arg mem_t3_256 ,contw +0x75d4 033714 call bn_mulmod +0x75d5 033715 arg mem_t3_256 ,rega +0x75d6 033716 arg mem_t2_256 ,regb +0x75d7 033717 arg mem_t2_256 ,contw +0x75d8 033718 call bn_addmod +0x75d9 033719 arg mem_t0_256 ,rega +0x75da 033720 arg mem_t2_256 ,regb +0x75db 033721 arg mem_t0_256 ,contw +0x75dc 033722 call bn_addmod +0x75dd 033723 arg 24 ,loopcnt +0x75de 033724 arg mem_t7_256 ,rega +0x75df 033725 arg mem_t0_256 ,regb +0x75e0 033726 branch string_compare +: 033728 sp_calc_b: +0x75e1 033729 arg mem_gy ,rega +0x75e2 033730 arg mem_t0_256 ,contw +0x75e3 033731 call bn_sqrmod +0x75e4 033732 arg mem_gx ,rega +0x75e5 033733 arg mem_t2_256 ,contw +0x75e6 033734 call bn_sqrmod +0x75e7 033735 arg mem_t2_256 ,rega +0x75e8 033736 arg mem_gx ,regb +0x75e9 033737 arg mem_t2_256 ,contw +0x75ea 033738 call bn_mulmod +0x75eb 033739 arg mem_a ,rega +0x75ec 033740 arg mem_gx ,regb +0x75ed 033741 arg mem_t3_256 ,contw +0x75ee 033742 call bn_mulmod +0x75ef 033743 arg mem_t3_256 ,rega +0x75f0 033744 arg mem_t2_256 ,regb +0x75f1 033745 arg mem_t2_256 ,contw +0x75f2 033746 call bn_addmod +0x75f3 033747 arg mem_t0_256 ,rega +0x75f4 033748 arg mem_t2_256 ,regb +0x75f5 033749 arg mem_t0_256 ,contw +0x75f6 033750 branch bn_submod +: 033753 sp_calculate_commitment: +0x75f7 033754 fetch 1 ,mem_sp_calc +0x75f8 033755 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc +0x75f9 033756 call sp_local_random_key_generator +0x75fa 033757 arg mem_sp_prarm_stack ,contw +0x75fb 033758 setarg mem_sp_random_local_end +0x75fc 033759 istore 2 ,contw +0x75fd 033760 setarg mem_sp_pubkey_local_x_end +0x75fe 033761 istore 2 ,contw +0x75ff 033762 setarg mem_sp_pubkey_remote_x_end +0x7600 033763 istore 2 ,contw +0x7601 033764 branch sp_calculate_commitment0 +: 033765 master_sp_calculate_commitment: +0x7602 033766 arg mem_sp_prarm_stack ,contw +0x7603 033767 setarg mem_sp_random_remote_end +0x7604 033768 istore 2 ,contw +0x7605 033769 setarg mem_sp_pubkey_remote_x_end +0x7606 033770 istore 2 ,contw +0x7607 033771 setarg mem_sp_pubkey_local_x_end +0x7608 033772 istore 2 ,contw +: 033773 sp_calculate_commitment0: +0x7609 033774 call function_f1 +0x760a 033775 fetch 1 ,mem_master_sp_state +0x760b 033776 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 +0x760c 033777 jam sp_flag_commit ,mem_sp_flag +0x760d 033778 jam sp_stat_commit_send ,mem_sp_state +0x760e 033779 rtn +: 033780 master_sp_calculate_commitment0: +0x760f 033781 jam sp_stat_commitment_compare ,mem_master_sp_state +0x7610 033782 call sp_master_generate_local_key +0x7611 033783 branch master_set_mem_master_sp_flag +: 033785 sp_local_random_key_generator: +0x7612 033786 arg mem_sp_random_local ,contw +0x7613 033787 force 8 ,queue +0x7614 033788 branch random_generator +: 033790 sp_calculate_commitment_wait_dhkey_calc: +0x7615 033791 jam sp_flag_commit ,mem_sp_flag +0x7616 033792 rtn +: 033794 sp_confirm_check: +0x7617 033796 bpatchx patch3c_6 ,mem_patch3c +0x7618 033797 arg mem_addr_value ,contw +0x7619 033798 fetch 6 ,mem_lap +0x761a 033799 istore 6 ,contw +0x761b 033800 fetch 6 ,mem_plap +0x761c 033801 istore 6 ,contw +0x761d 033802 fetch 3 ,mem_sp_iocap_remote +0x761e 033803 istore 3 ,contw +0x761f 033805 call function_f3a +0x7620 033807 arg mem_sp_calc_result_high ,rega +0x7621 033808 arg mem_sp_check_result ,regb +0x7622 033809 force 4 ,queue +0x7623 033810 call compare4 +0x7624 033811 nbranch sp_confirm_check_failed ,true +0x7625 033813 call sp_confirm_check_success +0x7626 033814 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x7627 033815 branch tid_set_reply +: 033817 sp_confirm_check_success: +0x7628 033818 fetch 1 ,mem_master_sp_state +0x7629 033819 beq sp_stat_confirm_check ,sp_confirm_check_success_master +0x762a 033820 jam sp_stat_confirm_calc ,mem_sp_state +0x762b 033821 jam sp_flag_commit ,mem_sp_flag +0x762c 033822 jam lmp_accepted ,mem_lmo_opcode2 +0x762d 033823 rtn +: 033824 sp_confirm_check_success_master: +0x762e 033825 jam lmp_accepted ,mem_lmo_opcode2 +0x762f 033826 jam sp_state_end ,mem_master_sp_state +0x7630 033827 branch master_set_mem_master_sp_flag +: 033830 sp_confirm_check_failed: +0x7631 033831 fetch 1 ,mem_master_sp_state +0x7632 033832 beq sp_stat_confirm_check ,sp_confirm_check_failed_master +0x7633 033833 jam sp_stat_null ,mem_sp_state +0x7634 033834 jam lmp_not_accepted ,mem_lmo_opcode2 +0x7635 033836 jam authentication_failure_error ,mem_lmo_reason2 +0x7636 033837 rtn +: 033838 sp_confirm_check_failed_master: +0x7637 033839 jam lmp_not_accepted ,mem_lmo_opcode2 +0x7638 033840 jam sp_stat_null ,mem_master_sp_state +0x7639 033841 rtn +: 033843 sp_confirm_calc: +0x763a 033844 fetch 1 ,mem_sp_dh_ready +0x763b 033845 beq sp_flag_commit ,sp_confirm_calc_ready +0x763c 033846 jam sp_stat_confirm_calc ,mem_master_sp_state +0x763d 033847 branch master_set_mem_master_sp_flag +: 033848 sp_confirm_calc_ready: +0x763e 033849 arg mem_addr_value ,contw +0x763f 033850 fetch 6 ,mem_plap +0x7640 033851 istore 6 ,contw +0x7641 033852 fetch 6 ,mem_lap +0x7642 033853 istore 6 ,contw +0x7643 033854 fetch 3 ,mem_sp_iocap_local +0x7644 033855 istore 3 ,contw +0x7645 033857 call function_f3b +0x7646 033858 fetch 1 ,mem_master_sp_state +0x7647 033859 beq sp_stat_confirm_calc ,sp_confirm_calc_master +0x7648 033860 jam sp_stat_confirm_send ,mem_sp_state +0x7649 033861 jam sp_flag_commit ,mem_sp_flag +0x764a 033862 rtn +: 033863 sp_confirm_calc_master: +0x764b 033864 jam sp_stat_confirm_send ,mem_master_sp_state +0x764c 033865 jam sp_flag_commit ,mem_master_sp_flag +0x764d 033866 rtn +: 033868 sp_master_key_prarm_push: +0x764e 033869 arg mem_sp_prarm_stack ,contw +0x764f 033870 fetch 6 ,mem_plap +0x7650 033871 istore 6 ,contw +0x7651 033872 fetch 6 ,mem_lap +0x7652 033873 istore 6 ,contw +0x7653 033874 setarg mem_sp_random_local_end +0x7654 033875 istore 2 ,contw +0x7655 033876 setarg mem_sp_random_remote_end +0x7656 033877 istore 2 ,contw +0x7657 033878 branch sp_link_key_calc +: 033879 sp_link_key_prarm_push: +0x7658 033880 jam sp_stat_done ,mem_sp_state +0x7659 033881 arg mem_sp_prarm_stack ,contw +0x765a 033882 fetch 6 ,mem_lap +0x765b 033883 istore 6 ,contw +0x765c 033884 fetch 6 ,mem_plap +0x765d 033885 istore 6 ,contw +0x765e 033886 setarg mem_sp_random_remote_end +0x765f 033887 istore 2 ,contw +0x7660 033888 setarg mem_sp_random_local_end +0x7661 033889 istore 2 ,contw +: 033890 sp_link_key_calc: +0x7662 033892 arg mem_addr_value ,contw +0x7663 033893 fetch 6 ,mem_sp_prarm_stack +0x7664 033894 istore 6 ,contw +0x7665 033895 fetch 6 ,mem_sp_prarm_stack + 6 +0x7666 033896 istore 6 ,contw +0x7667 033898 call function_f2 +0x7668 033901 jam 1 ,mem_link_key_exists +0x7669 033902 arg mem_link_key ,contw +0x766a 033903 arg mem_sp_calc_result_high ,contr +0x766b 033904 call memcpy16 +0x766c 033905 branch generate_linkkey_continue +: 033908 sp_pubkey_calc: +0x766d 033909 bpatchx patch3c_7 ,mem_patch3c +0x766e 033910 fetch 1 ,mem_sp_local_key_invalid +0x766f 033911 rtnne sp_key_invalid +0x7670 033912 fetch 1 ,mem_sp_calc +0x7671 033913 rtnne sp_calc_standby +0x7672 033914 arg mem_sp_private_key ,contw +0x7673 033915 force 11 ,queue +0x7674 033916 call random_generator +0x7675 033917 random pdata +0x7676 033918 rshift pdata ,pdata +0x7677 033919 istore 2 ,contw +0x7678 033921 arg mem_k ,contw +0x7679 033922 arg mem_sp_private_key ,contr +0x767a 033923 call memcpy24 +0x767b 033925 arg mem_ax ,contw +0x767c 033926 arg mem_gx ,contr +0x767d 033927 call memcpy48 +0x767e 033929 arg mem_az ,contw +0x767f 033930 call bn_zero +0x7680 033931 jam 1 ,mem_az +0x7681 033933 call eckp_calc_init +0x7682 033934 jam sp_calc_pubkey ,mem_sp_calc +0x7683 033935 rtn +: 033937 sp_pubkey_generated: +0x7684 033938 arg mem_sp_pubkey_local ,contw +0x7685 033939 arg mem_bx ,contr +0x7686 033940 call memcpy48 +0x7687 033941 jam sp_key_valid ,mem_sp_local_key_invalid +0x7688 033942 jam sp_calc_standby ,mem_sp_calc +0x7689 033943 rtn +: 033945 sp_dhkey_calc: +0x768a 033946 bpatchx patch3d_0 ,mem_patch3d +0x768b 033947 fetch 1 ,mem_sp_dhkey_invalid +0x768c 033948 rtnne sp_key_invalid +0x768d 033949 fetch 1 ,mem_sp_calc +0x768e 033950 rtnne sp_calc_standby +0x768f 033952 arg mem_k ,contw +0x7690 033953 arg mem_sp_private_key ,contr +0x7691 033954 call memcpy24 +0x7692 033956 arg mem_ax ,contw +0x7693 033957 arg mem_sp_pubkey_remote ,contr +0x7694 033958 call memcpy48 +0x7695 033960 arg mem_az ,contw +0x7696 033961 call bn_zero +0x7697 033962 jam 1 ,mem_az +0x7698 033964 call eckp_calc_init +0x7699 033965 jam sp_calc_dhkey ,mem_sp_calc +0x769a 033966 rtn +: 033968 sp_dhkey_generated: +0x769b 033969 jam sp_flag_commit ,mem_sp_dh_ready +0x769c 033970 arg mem_sp_dhkey ,contw +0x769d 033971 arg mem_bx ,contr +0x769e 033972 call memcpy24 +0x769f 033973 jam sp_key_valid ,mem_sp_dhkey_invalid +0x76a0 033974 jam sp_calc_standby ,mem_sp_calc +0x76a1 033975 rtn +: 033977 random_generator: +0x76a2 033978 increase -1 ,queue +0x76a3 033979 nrtn positive +0x76a4 033980 random pdata +0x76a5 033981 istore 2 ,contw +0x76a6 033982 branch random_generator +: 033983 compare4: +0x76a7 033984 increase -1 ,queue +0x76a8 033985 nbranch compare4_success ,positive +0x76a9 033986 ifetch 4 ,rega +0x76aa 033987 copy pdata ,temp +0x76ab 033988 ifetch 4 ,regb +0x76ac 033989 iflip temp ,pdata +0x76ad 033990 nbranch compare4_failed ,zero +0x76ae 033991 increase 4 ,rega +0x76af 033992 increase 4 ,regb +0x76b0 033993 branch compare4 +: 033994 compare4_failed: +0x76b1 033995 disable true +0x76b2 033996 rtn +: 033997 compare4_success: +0x76b3 033998 enable true +0x76b4 033999 rtn +: 034006 simple_pairing_sequence: +0x76b5 034007 bpatchx patch3d_1 ,mem_patch3d +0x76b6 034008 fetch 1 ,mem_sp_flag +0x76b7 034009 rtn blank +0x76b8 034010 call lmo_fifo_check +0x76b9 034011 nrtn blank +0x76ba 034012 jam sp_flag_standby ,mem_sp_flag +0x76bb 034013 fetch 1 ,mem_sp_state +0x76bc 034014 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header +0x76bd 034015 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm +0x76be 034016 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number +0x76bf 034017 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check +0x76c0 034018 beq sp_stat_key_generate ,sp_generate_local_key +0x76c1 034019 beq sp_stat_commit_calc ,sp_calculate_commitment +0x76c2 034020 beq sp_stat_confirm_check ,sp_confirm_check +0x76c3 034021 beq sp_stat_confirm_calc ,sp_confirm_calc +0x76c4 034022 beq sp_stat_link_key_calc ,sp_link_key_prarm_push +0x76c5 034024 rtn +: 034026 master_simple_paring_sequence: +0x76c6 034027 bpatchx patch3d_2 ,mem_patch3d +0x76c7 034028 fetch 1 ,mem_master_sp_flag +0x76c8 034029 rtn blank +0x76c9 034030 call lmo_fifo_check +0x76ca 034031 nrtn blank +0x76cb 034032 jam sp_flag_standby ,mem_master_sp_flag +0x76cc 034033 fetch 1 ,mem_master_sp_state +0x76cd 034034 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get +0x76ce 034035 beq sp_master_stat_start_done ,sp_master_send_io_cap_send +0x76cf 034036 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header +0x76d0 034037 beq sp_stat_commit_calc ,master_sp_calculate_commitment +0x76d1 034038 beq sp_stat_commitment_compare ,sp_master_commitment_compare +0x76d2 034039 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number +0x76d3 034040 beq sp_stat_confirm_calc ,sp_confirm_calc +0x76d4 034041 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check +0x76d5 034042 beq sp_stat_confirm_check ,sp_confirm_check +0x76d6 034043 beq sp_state_end ,master_sp_sm_end +0x76d7 034044 rtn +: 034046 master_set_mem_master_sp_flag: +0x76d8 034047 jam sp_flag_commit ,mem_master_sp_flag +0x76d9 034048 rtn +: 034050 master_clear_mem_master_sp_flag: +0x76da 034051 jam sp_flag_standby ,mem_master_sp_flag +0x76db 034052 rtn +: 034053 sp_calc_sequence: +0x76dc 034054 bpatchx patch3d_3 ,mem_patch3d +0x76dd 034055 fetch 1 ,mem_ssp_enable +0x76de 034056 rtn blank +0x76df 034057 fetch 1 ,mem_sp_calc +0x76e0 034058 rtn blank +0x76e1 034059 increase 0x80 ,pdata +0x76e2 034060 store 1 ,mem_sp_calc +0x76e3 034061 rtnbit1 7 +0x76e4 034062 fetch 1 ,mem_ec_loopc +0x76e5 034063 branch sp_calc_sequence_done ,blank +0x76e6 034064 branch eckp_calc +: 034066 sp_calc_sequence_done: +0x76e7 034067 call ecunmapz +0x76e8 034068 fetch 1 ,mem_sp_calc +0x76e9 034069 beq sp_calc_pubkey ,sp_pubkey_generated +0x76ea 034070 beq sp_calc_dhkey ,sp_dhkey_generated +0x76eb 034071 rtn +: 034074 bn_testbit: +0x76ec 034075 and pdata ,7 ,queue +0x76ed 034076 rshift3 pdata ,pdata +0x76ee 034077 iadd contr ,contr +0x76ef 034078 ifetch 1 ,contr +0x76f0 034079 qisolate0 pdata +0x76f1 034080 rtn +: 034083 ec_copy: +0x76f2 034084 call memcpy24 +0x76f3 034085 call memcpy24 +0x76f4 034086 branch memcpy24 +: 034089 bn_eq_zero: +0x76f5 034090 ifetch 8 ,contr +0x76f6 034091 nrtn blank +0x76f7 034092 ifetch 8 ,contr +0x76f8 034093 nrtn blank +0x76f9 034094 ifetch 8 ,contr +0x76fa 034095 rtn +: 034100 bn_eq_0: +0x76fb 034101 ifetch 4 ,rega +0x76fc 034102 iforce temp +0x76fd 034103 ifetch 4 ,regb +0x76fe 034104 isub temp ,null +0x76ff 034105 nrtn zero +0x7700 034106 increase 4 ,rega +0x7701 034107 increase 4 ,regb +0x7702 034108 loop bn_eq_0 +0x7703 034109 rtn +: 034112 bn_bigeq: +0x7704 034113 force 6 ,loopcnt +0x7705 034114 increase 20 ,rega +0x7706 034115 increase 20 ,regb +: 034116 bn_bigeq_0: +0x7707 034117 ifetch 4 ,regb +0x7708 034118 iforce temp +0x7709 034119 ifetch 4 ,rega +0x770a 034120 isub temp ,pdata +0x770b 034121 nrtn positive +0x770c 034122 nrtn blank +0x770d 034123 increase -4 ,rega +0x770e 034124 increase -4 ,regb +0x770f 034125 loop bn_bigeq_0 +0x7710 034126 rtn +: 034128 bn_add: +0x7711 034129 force 6 ,loopcnt +0x7712 034130 force 0 ,regc +: 034131 bn_add_0: +0x7713 034132 ifetch 4 ,rega +0x7714 034133 iforce temp +0x7715 034134 ifetch 4 ,regb +0x7716 034135 iadd temp ,pdata +0x7717 034136 iadd regc ,pdata +0x7718 034137 istore 4 ,contw +0x7719 034138 isolate1 32 ,pdata +0x771a 034139 setflag true ,0 ,regc +0x771b 034140 increase 4 ,rega +0x771c 034141 increase 4 ,regb +0x771d 034142 loop bn_add_0 +0x771e 034143 rtn +: 034145 bn_sub: +0x771f 034146 force 6 ,loopcnt +0x7720 034147 force 0 ,regc +: 034148 bn_sub_0: +0x7721 034149 ifetch 4 ,regb +0x7722 034150 iforce temp +0x7723 034151 ifetch 4 ,rega +0x7724 034152 isub temp ,pdata +0x7725 034153 isub regc ,pdata +0x7726 034154 istore 4 ,contw +0x7727 034155 isolate1 32 ,pdata +0x7728 034156 setflag true ,0 ,regc +0x7729 034157 increase 4 ,rega +0x772a 034158 increase 4 ,regb +0x772b 034159 loop bn_sub_0 +0x772c 034160 rtn +: 034162 bn_rshift6: +0x772d 034163 force 6 ,loopcnt +0x772e 034164 increase 20 ,rega +: 034165 bn_rshift: +0x772f 034166 force 0 ,regc +: 034167 bn_rshift_0: +0x7730 034168 ifetch 4 ,rega +0x7731 034169 isolate1 0 ,pdata +0x7732 034170 setflag true ,1 ,regc +0x7733 034171 rshift pdata ,pdata +0x7734 034172 isolate1 0 ,regc +0x7735 034173 setflag true ,31 ,pdata +0x7736 034174 istore 4 ,rega +0x7737 034175 increase -4 ,rega +0x7738 034176 rshift regc ,regc +0x7739 034177 loop bn_rshift_0 +0x773a 034178 rtn +: 034180 bn_lshift: +0x773b 034181 force 6 ,loopcnt +0x773c 034182 force 0 ,regc +: 034183 bn_lshift_0: +0x773d 034184 ifetch 4 ,rega +0x773e 034185 isolate1 31 ,pdata +0x773f 034186 setflag true ,1 ,regc +0x7740 034187 lshift pdata ,pdata +0x7741 034188 isolate1 0 ,regc +0x7742 034189 setflag true ,0 ,pdata +0x7743 034190 istore 4 ,rega +0x7744 034191 increase 4 ,rega +0x7745 034192 rshift regc ,regc +0x7746 034193 loop bn_lshift_0 +0x7747 034194 rtn +: 034196 bn_lshiftmod: +0x7748 034197 call bn_lshift +: 034198 bn_lshiftmod_ismod: +0x7749 034199 isolate1 0 ,regc +0x774a 034200 branch bn_lshiftmod_0 ,true +0x774b 034201 arg mem_p ,regb +0x774c 034202 copy rega ,regc +0x774d 034203 increase -24 ,rega +0x774e 034204 call bn_bigeq +0x774f 034205 nrtn positive +0x7750 034206 copy regc ,rega +: 034207 bn_lshiftmod_0: +0x7751 034208 increase -24 ,rega +0x7752 034209 arg mem_p ,regb +0x7753 034210 copy rega ,contw +0x7754 034211 branch bn_sub +: 034214 bn_addmod: +0x7755 034215 call bn_add +0x7756 034216 copy contw ,rega +0x7757 034217 branch bn_lshiftmod_ismod +: 034219 bn_submod: +0x7758 034220 call bn_sub +0x7759 034221 isolate0 0 ,regc +0x775a 034222 rtn true +0x775b 034223 arg mem_p ,regb +0x775c 034224 add contw ,-24 ,rega +0x775d 034225 copy rega ,contw +0x775e 034226 branch bn_add +: 034229 bn_p192mod: +0x775f 034230 copy contw ,timeup +0x7760 034231 copy rega ,alarm +0x7761 034232 arg mem_tmp2 ,regb +0x7762 034233 copy regb ,contw +0x7763 034234 add rega ,24 ,contr +0x7764 034235 ifetch 8 ,contr +0x7765 034236 istore 8 ,contw +0x7766 034237 istore 8 ,contw +0x7767 034238 force 0 ,pdata +0x7768 034239 istore 8 ,contw +0x7769 034240 copy timeup ,contw +0x776a 034241 call bn_addmod +0x776b 034242 arg mem_tmp2 ,regb +0x776c 034243 copy regb ,contw +0x776d 034244 force 0 ,pdata +0x776e 034245 istore 8 ,contw +0x776f 034246 add alarm ,32 ,contr +0x7770 034247 ifetch 8 ,contr +0x7771 034248 istore 8 ,contw +0x7772 034249 istore 8 ,contw +0x7773 034250 copy timeup ,rega +0x7774 034251 copy rega ,contw +0x7775 034252 call bn_addmod +0x7776 034253 arg mem_tmp2 ,regb +0x7777 034254 copy regb ,contw +0x7778 034255 add alarm ,40 ,contr +0x7779 034256 ifetch 8 ,contr +0x777a 034257 istore 8 ,contw +0x777b 034258 istore 8 ,contw +0x777c 034259 istore 8 ,contw +0x777d 034260 copy timeup ,rega +0x777e 034261 copy rega ,contw +0x777f 034262 branch bn_addmod +: 034265 bn_load: +0x7780 034266 force 6 ,loopcnt +: 034267 bn_load_0: +0x7781 034268 ifetch 4 ,contr +0x7782 034269 iforce regext +0x7783 034270 increase 1 ,regext_index +0x7784 034271 loop bn_load_0 +0x7785 034272 rtn +: 034276 bn_mulmod: +0x7786 034277 copy contw ,timeup +0x7787 034278 arg mem_tmp1 ,contw +0x7788 034279 call bn_zero +0x7789 034280 arg mem_tmp1 ,contw +0x778a 034281 copy rega ,contr +0x778b 034282 force 0 ,regext_index +0x778c 034283 call bn_load +0x778d 034284 copy regb ,contr +0x778e 034285 call bn_load +0x778f 034286 force 0 ,regb +: 034287 bn_mulmod_1: +0x7790 034288 force 0 ,temp +0x7791 034289 force 6 ,regc +: 034290 bn_mulmod_0: +0x7792 034291 ifetch 4 ,contw +0x7793 034292 iforce rega +0x7794 034293 copy regb ,regext_index +0x7795 034294 deposit regext +0x7796 034295 copy regc ,regext_index +0x7797 034296 imul32 regext ,pdata +0x7798 034297 iadd rega ,pdata +0x7799 034298 iadd temp ,pdata +0x779a 034299 istore 4 ,contw +0x779b 034300 rshift32 pdata ,temp +0x779c 034301 increase 1 ,regc +0x779d 034302 compare 12 ,regc ,0xff +0x779e 034303 nbranch bn_mulmod_0 ,true +0x779f 034304 deposit temp +0x77a0 034305 istore 4 ,contw +0x77a1 034306 increase -24 ,contw +0x77a2 034307 increase 1 ,regb +0x77a3 034308 compare 6 ,regb ,0xff +0x77a4 034309 nbranch bn_mulmod_1 ,true +0x77a5 034310 arg mem_tmp1 ,rega +0x77a6 034311 copy timeup ,contw +0x77a7 034312 branch bn_p192mod +: 034315 bn_sqrmod: +0x77a8 034316 copy rega ,regb +0x77a9 034317 branch bn_mulmod +: 034319 bn_rshifteven: +0x77aa 034320 copy rega ,alarm +: 034321 bn_rshifteven_1: +0x77ab 034322 copy alarm ,rega +0x77ac 034323 ifetch 1 ,rega +0x77ad 034324 isolate1 0 ,pdata +0x77ae 034325 rtn true +0x77af 034326 call bn_rshift6 +0x77b0 034327 ifetch 1 ,regb +0x77b1 034328 isolate0 0 ,pdata +0x77b2 034329 branch bn_rshifteven_0 ,true +0x77b3 034330 arg mem_p ,rega +0x77b4 034331 copy regb ,contw +0x77b5 034332 call bn_add +0x77b6 034333 ifetch 1 ,regb +0x77b7 034334 iadd regc ,pdata +0x77b8 034335 istore 1 ,regb +0x77b9 034336 increase -24 ,regb +: 034337 bn_rshifteven_0: +0x77ba 034338 add regb ,24 ,rega +0x77bb 034339 force 7 ,loopcnt +0x77bc 034340 call bn_rshift +0x77bd 034341 branch bn_rshifteven_1 +: 034344 bn_invmod: +0x77be 034345 copy contw ,timeup +0x77bf 034346 arg mem_tmp0 ,contw +0x77c0 034347 call bn_zero +0x77c1 034348 force 0 ,pdata +0x77c2 034349 store 4 ,mem_tmp5 +0x77c3 034350 store 4 ,mem_t2 +0x77c4 034351 jam 1 ,mem_tmp0 +0x77c5 034352 arg mem_tmp1 ,contw +0x77c6 034353 call bn_zero +0x77c7 034354 arg mem_p ,contr +0x77c8 034355 arg mem_tmp2 ,contw +0x77c9 034356 call memcpy24 +0x77ca 034357 copy rega ,contr +0x77cb 034358 arg mem_tmp3 ,contw +0x77cc 034359 call memcpy24 +: 034360 bn_invmod_2: +0x77cd 034361 arg mem_tmp3 ,contr +0x77ce 034362 call bn_eq_zero +0x77cf 034363 branch bn_invmod_0 ,blank +0x77d0 034364 arg mem_tmp3 ,rega +0x77d1 034365 arg mem_tmp0 ,regb +0x77d2 034366 call bn_rshifteven +0x77d3 034368 arg mem_tmp2 ,rega +0x77d4 034369 arg mem_tmp1 ,regb +0x77d5 034370 call bn_rshifteven +0x77d6 034371 arg mem_tmp3 ,rega +0x77d7 034372 arg mem_tmp2 ,regb +0x77d8 034373 call bn_bigeq +0x77d9 034374 branch bn_invmod_1 ,positive +0x77da 034375 arg mem_tmp2 ,rega +0x77db 034376 arg mem_tmp3 ,regb +0x77dc 034377 copy rega ,contw +0x77dd 034378 call bn_sub +0x77de 034379 arg mem_tmp0 ,rega +0x77df 034380 arg mem_tmp1 ,regb +0x77e0 034381 copy regb ,contw +0x77e1 034382 call bn_add +0x77e2 034383 ifetch 1 ,rega +0x77e3 034384 iadd regc ,regc +0x77e4 034385 ifetch 1 ,regb +0x77e5 034386 iadd regc ,pdata +0x77e6 034387 istore 1 ,regb +0x77e7 034388 branch bn_invmod_2 +: 034389 bn_invmod_1: +0x77e8 034390 arg mem_tmp3 ,rega +0x77e9 034391 arg mem_tmp2 ,regb +0x77ea 034392 copy rega ,contw +0x77eb 034393 call bn_sub +0x77ec 034394 arg mem_tmp1 ,rega +0x77ed 034395 arg mem_tmp0 ,regb +0x77ee 034396 copy regb ,contw +0x77ef 034397 call bn_add +0x77f0 034398 ifetch 1 ,rega +0x77f1 034399 iadd regc ,regc +0x77f2 034400 ifetch 1 ,regb +0x77f3 034401 iadd regc ,pdata +0x77f4 034402 istore 1 ,regb +0x77f5 034403 branch bn_invmod_2 +: 034404 bn_invmod_0: +0x77f6 034405 arg mem_tmp0 ,contw +0x77f7 034406 call bn_zero +0x77f8 034407 fetch 1 ,mem_tmp5 +0x77f9 034408 store 1 ,mem_tmp0 +0x77fa 034409 store 1 ,mem_tmp0a +0x77fb 034410 arg mem_tmp0 ,rega +0x77fc 034411 arg mem_tmp1 ,regb +0x77fd 034412 copy regb ,contw +0x77fe 034413 call bn_addmod +0x77ff 034414 arg mem_p ,rega +0x7800 034415 arg mem_tmp1 ,regb +0x7801 034416 copy timeup ,contw +0x7802 034417 branch bn_submod +: 034422 ecdbl: +0x7803 034423 arg mem_cz ,rega +0x7804 034424 arg mem_t2 ,contw +0x7805 034425 call bn_sqrmod +0x7806 034426 arg mem_t2 ,rega +0x7807 034427 arg mem_t3 ,contw +0x7808 034428 call bn_sqrmod +0x7809 034429 arg mem_a ,rega +0x780a 034430 arg mem_t3 ,regb +0x780b 034431 arg mem_t3 ,contw +0x780c 034432 call bn_mulmod +0x780d 034433 arg mem_cx ,rega +0x780e 034434 arg mem_t2 ,contw +0x780f 034435 call bn_sqrmod +0x7810 034436 arg mem_t2 ,contr +0x7811 034437 arg mem_t1 ,contw +0x7812 034438 call memcpy24 +0x7813 034439 arg mem_t1 ,rega +0x7814 034440 call bn_lshiftmod +0x7815 034441 arg mem_t2 ,rega +0x7816 034442 arg mem_t1 ,regb +0x7817 034443 arg mem_t2 ,contw +0x7818 034444 call bn_addmod +0x7819 034445 arg mem_t2 ,rega +0x781a 034446 arg mem_t3 ,regb +0x781b 034447 arg mem_t2 ,contw +0x781c 034448 call bn_addmod +0x781d 034449 arg mem_cx ,contr +0x781e 034450 arg mem_t1 ,contw +0x781f 034451 call memcpy24 +0x7820 034452 arg mem_cy ,rega +0x7821 034453 arg mem_t3 ,contw +0x7822 034454 call bn_sqrmod +0x7823 034455 arg mem_t1 ,rega +0x7824 034456 call bn_lshiftmod +0x7825 034457 arg mem_t1 ,rega +0x7826 034458 call bn_lshiftmod +0x7827 034459 arg mem_t1 ,rega +0x7828 034460 arg mem_t3 ,regb +0x7829 034461 arg mem_t1 ,contw +0x782a 034462 call bn_mulmod +0x782b 034463 arg mem_t3 ,rega +0x782c 034464 arg mem_t0 ,contw +0x782d 034465 call bn_sqrmod +0x782e 034466 arg mem_t0 ,rega +0x782f 034467 call bn_lshiftmod +0x7830 034468 arg mem_t0 ,rega +0x7831 034469 call bn_lshiftmod +0x7832 034470 arg mem_t0 ,rega +0x7833 034471 call bn_lshiftmod +0x7834 034472 arg mem_cy ,contr +0x7835 034473 arg mem_t3 ,contw +0x7836 034474 call memcpy24 +0x7837 034475 arg mem_t3 ,rega +0x7838 034476 call bn_lshiftmod +0x7839 034477 arg mem_t3 ,rega +0x783a 034478 arg mem_cz ,regb +0x783b 034479 arg mem_cz ,contw +0x783c 034480 call bn_mulmod +0x783d 034481 arg mem_t2 ,rega +0x783e 034482 arg mem_t3 ,contw +0x783f 034483 call bn_sqrmod +0x7840 034484 arg mem_t3 ,rega +0x7841 034485 arg mem_t1 ,regb +0x7842 034486 arg mem_t3 ,contw +0x7843 034487 call bn_submod +0x7844 034488 arg mem_t3 ,rega +0x7845 034489 arg mem_t1 ,regb +0x7846 034490 arg mem_cx ,contw +0x7847 034491 call bn_submod +0x7848 034492 arg mem_t1 ,rega +0x7849 034493 arg mem_cx ,regb +0x784a 034494 arg mem_t3 ,contw +0x784b 034495 call bn_submod +0x784c 034496 arg mem_t3 ,rega +0x784d 034497 arg mem_t2 ,regb +0x784e 034498 arg mem_t3 ,contw +0x784f 034499 call bn_mulmod +0x7850 034500 arg mem_t3 ,rega +0x7851 034501 arg mem_t0 ,regb +0x7852 034502 arg mem_cy ,contw +0x7853 034503 branch bn_submod +: 034507 ecadd: +0x7854 034508 arg mem_az ,rega +0x7855 034509 arg mem_t7 ,contw +0x7856 034510 call bn_sqrmod +0x7857 034511 arg mem_cx ,rega +0x7858 034512 arg mem_t7 ,regb +0x7859 034513 arg mem_t0 ,contw +0x785a 034514 call bn_mulmod +0x785b 034515 arg mem_az ,rega +0x785c 034516 arg mem_t7 ,regb +0x785d 034517 arg mem_t7 ,contw +0x785e 034518 call bn_mulmod +0x785f 034519 arg mem_cy ,rega +0x7860 034520 arg mem_t7 ,regb +0x7861 034521 arg mem_t1 ,contw +0x7862 034522 call bn_mulmod +0x7863 034523 arg mem_cz ,rega +0x7864 034524 arg mem_t7 ,contw +0x7865 034525 call bn_sqrmod +0x7866 034526 arg mem_ax ,rega +0x7867 034527 arg mem_t7 ,regb +0x7868 034528 arg mem_t2 ,contw +0x7869 034529 call bn_mulmod +0x786a 034530 arg mem_cz ,rega +0x786b 034531 arg mem_t7 ,regb +0x786c 034532 arg mem_t7 ,contw +0x786d 034533 call bn_mulmod +0x786e 034534 arg mem_ay ,rega +0x786f 034535 arg mem_t7 ,regb +0x7870 034536 arg mem_t3 ,contw +0x7871 034537 call bn_mulmod +0x7872 034538 arg mem_t0 ,rega +0x7873 034539 arg mem_t2 ,regb +0x7874 034540 arg mem_t7 ,contw +0x7875 034541 call bn_submod +0x7876 034542 arg mem_t0 ,rega +0x7877 034543 arg mem_t2 ,regb +0x7878 034544 arg mem_t0 ,contw +0x7879 034545 call bn_addmod +0x787a 034546 arg mem_t1 ,rega +0x787b 034547 arg mem_t3 ,regb +0x787c 034548 arg mem_t2 ,contw +0x787d 034549 call bn_submod +0x787e 034550 arg mem_t1 ,rega +0x787f 034551 arg mem_t3 ,regb +0x7880 034552 arg mem_t1 ,contw +0x7881 034553 call bn_addmod +0x7882 034554 arg mem_t1 ,rega +0x7883 034555 arg mem_t7 ,regb +0x7884 034556 arg mem_t1 ,contw +0x7885 034557 call bn_mulmod +0x7886 034558 arg mem_cz ,rega +0x7887 034559 arg mem_az ,regb +0x7888 034560 arg mem_t3 ,contw +0x7889 034561 call bn_mulmod +0x788a 034562 arg mem_t3 ,rega +0x788b 034563 arg mem_t7 ,regb +0x788c 034564 arg mem_cz ,contw +0x788d 034565 call bn_mulmod +0x788e 034566 arg mem_t7 ,rega +0x788f 034567 arg mem_t7 ,contw +0x7890 034568 call bn_sqrmod +0x7891 034569 arg mem_t7 ,rega +0x7892 034570 arg mem_t0 ,regb +0x7893 034571 arg mem_t3 ,contw +0x7894 034572 call bn_mulmod +0x7895 034573 arg mem_t7 ,rega +0x7896 034574 arg mem_t1 ,regb +0x7897 034575 arg mem_t1 ,contw +0x7898 034576 call bn_mulmod +0x7899 034577 arg mem_t2 ,rega +0x789a 034578 arg mem_cx ,contw +0x789b 034579 call bn_sqrmod +0x789c 034580 arg mem_cx ,rega +0x789d 034581 arg mem_t3 ,regb +0x789e 034582 arg mem_cx ,contw +0x789f 034583 call bn_submod +0x78a0 034584 arg mem_cx ,contr +0x78a1 034585 arg mem_t7 ,contw +0x78a2 034586 call memcpy24 +0x78a3 034587 arg mem_t7 ,rega +0x78a4 034588 call bn_lshiftmod +0x78a5 034589 arg mem_t3 ,rega +0x78a6 034590 arg mem_t7 ,regb +0x78a7 034591 arg mem_t3 ,contw +0x78a8 034592 call bn_submod +0x78a9 034593 arg mem_t3 ,rega +0x78aa 034594 arg mem_t2 ,regb +0x78ab 034595 arg mem_t2 ,contw +0x78ac 034596 call bn_mulmod +0x78ad 034597 arg mem_t2 ,rega +0x78ae 034598 arg mem_t1 ,regb +0x78af 034599 arg mem_cy ,contw +0x78b0 034600 call bn_submod +0x78b1 034601 arg mem_cy ,rega +0x78b2 034602 arg mem_p ,regb +0x78b3 034603 arg mem_cy ,contw +0x78b4 034604 force 0 ,regc +0x78b5 034605 fetch 1 ,mem_cy +0x78b6 034606 isolate1 0 ,pdata +0x78b7 034607 call bn_add ,true +0x78b8 034608 copy regc ,alarm +0x78b9 034609 arg mem_cy ,rega +0x78ba 034610 call bn_rshift6 +0x78bb 034611 fetch 1 ,mem_cy5 +0x78bc 034612 isolate1 0 ,alarm +0x78bd 034613 setflag true ,7 ,pdata +0x78be 034614 store 1 ,mem_cy5 +0x78bf 034615 rtn +: 034619 eckp_0: +0x78c0 034620 fetch 1 ,mem_ec_loopc +0x78c1 034621 increase -1 ,pdata +0x78c2 034622 nrtn positive +0x78c3 034623 store 1 ,mem_ec_loopc +0x78c4 034624 fetch 1 ,mem_ec_infinite +0x78c5 034625 call ecdbl ,blank +0x78c6 034626 fetch 1 ,mem_ec_loopc +0x78c7 034627 arg mem_k ,contr +0x78c8 034628 call bn_testbit +0x78c9 034629 branch eckp_0 ,true +0x78ca 034630 fetch 1 ,mem_ec_infinite +0x78cb 034631 nbranch eckp_1 ,blank +0x78cc 034632 call ecadd +0x78cd 034633 branch eckp_0 +: 034634 eckp_1: +0x78ce 034635 jam 0 ,mem_ec_infinite +0x78cf 034636 arg mem_ax ,contr +0x78d0 034637 arg mem_cx ,contw +0x78d1 034638 call ec_copy +0x78d2 034639 branch eckp_0 +: 034642 ecunmapz: +0x78d3 034643 arg mem_cz ,rega +0x78d4 034644 arg mem_t3 ,contw +0x78d5 034645 call bn_invmod +0x78d6 034646 arg mem_t3 ,rega +0x78d7 034647 arg mem_t1 ,contw +0x78d8 034648 call bn_sqrmod +0x78d9 034649 arg mem_cx ,rega +0x78da 034650 arg mem_t1 ,regb +0x78db 034651 arg mem_bx ,contw +0x78dc 034652 call bn_mulmod +0x78dd 034653 arg mem_t3 ,rega +0x78de 034654 arg mem_t1 ,regb +0x78df 034655 arg mem_t2 ,contw +0x78e0 034656 call bn_mulmod +0x78e1 034657 arg mem_cy ,rega +0x78e2 034658 arg mem_t2 ,regb +0x78e3 034659 arg mem_by ,contw +0x78e4 034660 branch bn_mulmod +: 034664 sha_endian_swap2: +0x78e5 034665 ifetch 4 ,contr +0x78e6 034666 force 4 ,rega +0x78e7 034667 increase 3 ,contw +: 034668 sha_endian_loop: +0x78e8 034669 istore 1 ,contw +0x78e9 034670 rshift8 pdata ,pdata +0x78ea 034671 increase -2 ,contw +0x78eb 034672 increase -1 ,rega +0x78ec 034673 nbranch sha_endian_loop ,zero +0x78ed 034674 increase 5 ,contw +0x78ee 034675 loop sha_endian_swap2 +0x78ef 034676 rtn +: 034679 sha_getw: +0x78f0 034680 lshift2 queue ,pdata +0x78f1 034681 iadd timeup ,contr +0x78f2 034682 ifetch 4 ,contr +0x78f3 034683 rtn +: 034685 sha_r: +0x78f4 034686 force 16 ,alarm +0x78f5 034687 arg memdat ,timeup +: 034688 sha_r_loop: +0x78f6 034689 add alarm ,-7 ,queue +0x78f7 034690 call sha_getw +0x78f8 034691 iforce temp +0x78f9 034692 add alarm ,-16 ,queue +0x78fa 034693 call sha_getw +0x78fb 034694 iadd temp ,temp +0x78fc 034695 add alarm ,-2 ,queue +0x78fd 034696 call sha_getw +0x78fe 034697 shasx pdata ,1 ,pdata +0x78ff 034698 iadd temp ,temp +0x7900 034699 add alarm ,-15 ,queue +0x7901 034700 call sha_getw +0x7902 034701 shasx pdata ,0 ,pdata +0x7903 034702 iadd temp ,temp +0x7904 034703 lshift2 alarm ,pdata +0x7905 034704 iadd timeup ,contw +0x7906 034705 istoret 4 ,contw +0x7907 034706 increase 1 ,alarm +0x7908 034707 compare 64 ,alarm ,0xff +0x7909 034708 nbranch sha_r_loop ,true +0x790a 034709 rtn +: 034712 sha_init: +0x790b 034713 arg memh0 ,contr +0x790c 034714 force 7 ,regext_index +: 034715 sha_init_0: +0x790d 034716 ifetch 4 ,contr +0x790e 034717 iforce regext +0x790f 034718 increase -1 ,regext_index +0x7910 034719 branch sha_init_0 ,positive +0x7911 034720 rtn +: 034722 sha: +0x7912 034723 bpatchx patch3d_4 ,mem_patch3d +0x7913 034724 call sha_r +0x7914 034725 arg memahbak ,contw +0x7915 034726 force 0 ,regext_index +: 034727 sha_0: +0x7916 034728 deposit regext +0x7917 034729 istore 4 ,contw +0x7918 034730 increase 1 ,regext_index +0x7919 034731 compare 8 ,regext_index ,0xff +0x791a 034732 nbranch sha_0 ,true +0x791b 034733 call enable_authrom +0x791c 034734 arg memk ,timeup +0x791d 034735 arg memdat ,alarm +0x791e 034736 force 64 ,loopcnt +: 034737 sha_loop: +0x791f 034738 ifetcht 4 ,alarm +0x7920 034739 ifetch 4 ,timeup +0x7921 034740 increase 4 ,timeup +0x7922 034741 increase 4 ,alarm +0x7923 034742 iadd temp ,pdata +0x7924 034743 force 7 ,regext_index +0x7925 034744 iadd regext ,temp +0x7926 034745 force 4 ,regext_index +0x7927 034746 shasx regext ,3 ,pdata +0x7928 034747 iadd temp ,temp +0x7929 034748 force 5 ,regext_index +0x792a 034749 deposit regext +0x792b 034750 force 6 ,regext_index +0x792c 034751 ixor regext ,pdata +0x792d 034752 force 4 ,regext_index +0x792e 034753 iand regext ,pdata +0x792f 034754 force 6 ,regext_index +0x7930 034755 ixor regext ,pdata +0x7931 034756 iadd temp ,temp +0x7932 034757 force 7 ,regext_index +0x7933 034758 copy temp ,regext +0x7934 034759 force 3 ,regext_index +0x7935 034760 deposit regext +0x7936 034761 iadd temp ,regext +0x7937 034762 force 0 ,regext_index +0x7938 034763 deposit regext +0x7939 034764 force 1 ,regext_index +0x793a 034765 iand regext ,temp +0x793b 034766 ior regext ,pdata +0x793c 034767 force 2 ,regext_index +0x793d 034768 iand regext ,pdata +0x793e 034769 ior temp ,temp +0x793f 034770 force 0 ,regext_index +0x7940 034771 shasx regext ,2 ,pdata +0x7941 034772 iadd temp ,pdata +0x7942 034773 force 7 ,regext_index +0x7943 034774 iadd regext ,regext +0x7944 034775 regexrot +0x7945 034776 loop sha_loop +0x7946 034777 arg memahbak ,contr +0x7947 034778 force 0 ,regext_index +: 034779 sha_1: +0x7948 034780 ifetch 4 ,contr +0x7949 034781 iadd regext ,regext +0x794a 034782 increase 1 ,regext_index +0x794b 034783 compare 8 ,regext_index ,0xff +0x794c 034784 nbranch sha_1 ,true +0x794d 034785 branch disable_authrom +: 034788 sha_result: +0x794e 034789 arg memresult ,contw +0x794f 034790 force 7 ,regext_index +: 034791 sha_regext_save: +0x7950 034792 deposit regext +0x7951 034793 istore 4 ,contw +0x7952 034794 increase -1 ,regext_index +0x7953 034795 branch sha_regext_save ,positive +0x7954 034796 rtn +: 034798 pad_xor: +0x7955 034800 arg memdat ,contw +0x7956 034801 increase -4 ,contr +0x7957 034802 sub loopcnt ,16 ,rega +: 034803 pad_xor_0: +0x7958 034804 ifetch 4 ,contr +0x7959 034805 ixor temp ,pdata +0x795a 034806 istore 4 ,contw +0x795b 034807 increase -8 ,contr +0x795c 034808 loop pad_xor_0 +0x795d 034809 copy rega ,loopcnt +0x795e 034810 deposit temp +: 034811 pad_xor_1: +0x795f 034812 istore 4 ,contw +0x7960 034813 loop pad_xor_1 +0x7961 034814 rtn +: 034816 g_noninit_number_confirm: +0x7962 034817 call g_noninit0 +0x7963 034818 call sha_result +0x7964 034819 branch g_common0 +: 034821 g_noninit: +0x7965 034822 call g_noninit0 +0x7966 034823 branch g_common0 +: 034825 g_noninit0: +0x7967 034826 arg mem_sp_pubkey_remote_x_end ,contr +0x7968 034827 arg memdat ,contw +0x7969 034828 force 6 ,loopcnt +0x796a 034829 call memcpy_dword_swap +0x796b 034830 arg mem_sp_pubkey_local_x_end ,contr +0x796c 034831 force 6 ,loopcnt +0x796d 034832 call memcpy_dword_swap +0x796e 034833 arg mem_sp_random_remote_end ,contr +0x796f 034834 call memcpy_dword_swap4 +0x7970 034835 call sha_init +0x7971 034836 call sha +0x7972 034837 arg mem_sp_random_local_end ,contr +0x7973 034838 arg memdat ,contw +0x7974 034839 branch g_common +: 034841 g_init: +0x7975 034842 arg mem_sp_pubkey_local_x_end ,contr +0x7976 034843 arg memdat ,contw +0x7977 034844 force 6 ,loopcnt +0x7978 034845 call memcpy_dword_swap +0x7979 034846 arg mem_sp_pubkey_remote_x_end ,contr +0x797a 034847 force 6 ,loopcnt +0x797b 034848 call memcpy_dword_swap +0x797c 034849 arg mem_sp_random_local_end ,contr +0x797d 034850 call memcpy_dword_swap4 +0x797e 034851 call sha_init +0x797f 034852 call sha +0x7980 034853 arg mem_sp_random_remote_end ,contr +0x7981 034854 arg memdat ,contw +0x7982 034855 call g_common +0x7983 034856 branch g_common0 +: 034858 g_common: +0x7984 034859 call memcpy_dword_swap4 +0x7985 034860 setarg 0x800000 +0x7986 034861 lshift8 pdata ,pdata +0x7987 034862 istore 4 ,contw +0x7988 034863 force 5 ,loopcnt +0x7989 034864 call memset0 +0x798a 034865 setarg 640 +0x798b 034866 istore 4 ,contw +0x798c 034867 branch sha +: 034868 g_common0: +0x798d 034869 fetch 4 ,memresult +0x798e 034871 arg 1000 ,rega +0x798f 034872 idiv rega +0x7990 034873 call wait_div_end +0x7991 034874 remainder pdata +0x7992 034875 store 4 ,mem_gkey +0x7993 034876 quotient pdata +0x7994 034877 arg 1000 ,rega +0x7995 034878 idiv rega +0x7996 034879 call wait_div_end +0x7997 034880 remainder pdata +0x7998 034881 arg 1000 ,rega +0x7999 034882 imul32 rega ,pdata +0x799a 034883 fetcht 4 ,mem_gkey +0x799b 034884 iadd temp ,pdata +0x799c 034885 store 4 ,mem_gkey +0x799d 034886 rtn +: 034888 function_f1_no_key: +0x799e 034889 jam 0 ,mem_passkey_1bit +0x799f 034890 branch function_f1_common +: 034892 function_f1: +0x79a0 034893 fetch 1 ,mem_ssp_mode_flag +0x79a1 034894 bne ssp_mode_passkey_entry_flag ,function_f1_no_key +: 034895 function_f1_common: +0x79a2 034896 bpatchx patch3d_5 ,mem_patch3d +0x79a3 034897 setarg 0x363636 +0x79a4 034898 lshift8 pdata ,temp +0x79a5 034899 or_into 0x36 ,temp +0x79a6 034900 fetch 2 ,mem_sp_prarm_stack +0x79a7 034901 copy pdata ,contr +0x79a8 034902 force 4 ,loopcnt +0x79a9 034903 call pad_xor +0x79aa 034904 call sha_init +0x79ab 034905 call sha +0x79ac 034906 fetch 2 ,mem_sp_prarm_stack + 2 +0x79ad 034907 copy pdata ,contr +0x79ae 034908 arg memdat ,contw +0x79af 034909 force 6 ,loopcnt +0x79b0 034910 call memcpy_dword_swap +0x79b1 034911 fetch 2 ,mem_sp_prarm_stack + 4 +0x79b2 034912 copy pdata ,contr +0x79b3 034913 force 6 ,loopcnt +0x79b4 034914 call memcpy_dword_swap +0x79b5 034915 setarg 0x800000 +0x79b6 034916 istore 3 ,contw +0x79b7 034918 fetch 1 ,mem_passkey_1bit +0x79b8 034920 istore 1 ,contw +0x79b9 034921 force 0 ,pdata +0x79ba 034922 istore 8 ,contw +0x79bb 034923 setarg 0x0388 +0x79bc 034924 istore 4 ,contw +0x79bd 034925 call sha +0x79be 034926 call sha_result +0x79bf 034927 arg memresult ,contr +0x79c0 034928 arg memahsave ,contw +0x79c1 034929 call memcpy32 +0x79c2 034931 setarg 0x5c5c5c +0x79c3 034932 lshift8 pdata ,temp +0x79c4 034933 or_into 0x5c ,temp +0x79c5 034934 fetch 2 ,mem_sp_prarm_stack +0x79c6 034935 copy pdata ,contr +0x79c7 034936 force 4 ,loopcnt +0x79c8 034937 call pad_xor +0x79c9 034938 call sha_init +0x79ca 034939 call sha +0x79cb 034940 arg memahsave_end ,contr +0x79cc 034941 arg memdat ,contw +0x79cd 034942 force 8 ,loopcnt +0x79ce 034943 call memcpy_dword_swap +0x79cf 034944 setarg 0x800000 +0x79d0 034945 lshift8 pdata ,pdata +0x79d1 034946 istore 4 ,contw +0x79d2 034947 call bn_zero +0x79d3 034948 setarg 0x0300 +0x79d4 034949 istore 4 ,contw +0x79d5 034950 call sha +0x79d6 034951 branch sha_result +: 034954 function_f2: +0x79d7 034955 setarg 0x363636 +0x79d8 034956 lshift8 pdata ,temp +0x79d9 034957 or_into 0x36 ,temp +0x79da 034958 arg mem_sp_dhkey_end ,contr +0x79db 034959 force 6 ,loopcnt +0x79dc 034960 call pad_xor +0x79dd 034961 call sha_init +0x79de 034962 call sha +0x79df 034963 fetch 2 ,mem_sp_prarm_stack + 12 +0x79e0 034964 copy pdata ,contr +0x79e1 034965 arg memdat ,contw +0x79e2 034966 call memcpy_dword_swap4 +0x79e3 034967 fetch 2 ,mem_sp_prarm_stack + 14 +0x79e4 034968 copy pdata ,contr +0x79e5 034969 call memcpy_dword_swap4 +0x79e6 034971 setarg 0x62746c +0x79e7 034972 lshift8 pdata ,pdata +0x79e8 034973 or_into 0x6b ,pdata +0x79e9 034974 istore 4 ,contw +0x79ea 034975 arg mem_addr_value_end ,contr +0x79eb 034976 force 3 ,loopcnt +0x79ec 034977 call memcpy_dword_swap +0x79ed 034979 setarg 0x800000 +0x79ee 034980 lshift8 pdata ,pdata +0x79ef 034981 istore 4 ,contw +0x79f0 034982 force 0 ,pdata +0x79f1 034983 istore 8 ,contw +0x79f2 034984 setarg 0x0380 +0x79f3 034985 istore 4 ,contw +0x79f4 034986 call sha +0x79f5 034988 call sha_result +0x79f6 034989 arg memresult ,contr +0x79f7 034990 arg memahsave ,contw +0x79f8 034991 call memcpy32 +0x79f9 034993 setarg 0x5c5c5c +0x79fa 034994 lshift8 pdata ,temp +0x79fb 034995 or_into 0x5c ,temp +0x79fc 034996 arg mem_sp_dhkey_end ,contr +0x79fd 034997 force 6 ,loopcnt +0x79fe 034998 call pad_xor +0x79ff 034999 call sha_init +0x7a00 035000 call sha +0x7a01 035001 arg memahsave_end ,contr +0x7a02 035002 arg memdat ,contw +0x7a03 035003 force 8 ,loopcnt +0x7a04 035004 call memcpy_dword_swap +0x7a05 035005 setarg 0x800000 +0x7a06 035006 lshift8 pdata ,pdata +0x7a07 035007 istore 4 ,contw +0x7a08 035008 call bn_zero +0x7a09 035009 setarg 0x0300 +0x7a0a 035010 istore 4 ,contw +0x7a0b 035011 call sha +0x7a0c 035012 branch sha_result +: 035015 function_f3a: +0x7a0d 035016 fetch 1 ,mem_ssp_mode_flag +0x7a0e 035017 bne ssp_mode_passkey_entry_flag ,function_f3a_no_pin +: 035018 function_f3a_common: +0x7a0f 035019 bpatchx patch3d_6 ,mem_patch3d +0x7a10 035020 setarg 0x363636 +0x7a11 035021 lshift8 pdata ,temp +0x7a12 035022 or_into 0x36 ,temp +0x7a13 035023 arg mem_sp_dhkey_end ,contr +0x7a14 035024 force 6 ,loopcnt +0x7a15 035025 call pad_xor +0x7a16 035026 call sha_init +0x7a17 035027 call sha +0x7a18 035028 arg mem_sp_random_remote_end ,contr +0x7a19 035029 arg memdat ,contw +0x7a1a 035030 call memcpy_dword_swap4 +0x7a1b 035031 arg mem_sp_random_local_end ,contr +0x7a1c 035032 call memcpy_dword_swap4 +0x7a1d 035033 branch function_f3_common +: 035035 function_f3a_no_pin: +0x7a1e 035036 setarg 0 +0x7a1f 035037 store 4 ,mem_pin +0x7a20 035038 branch function_f3a_common +: 035040 function_f3b_no_pin: +0x7a21 035041 setarg 0 +0x7a22 035042 store 4 ,mem_pin +0x7a23 035043 branch function_f3b_common +: 035046 function_f3b: +0x7a24 035047 fetch 1 ,mem_ssp_mode_flag +0x7a25 035048 bne ssp_mode_passkey_entry_flag ,function_f3b_no_pin +: 035049 function_f3b_common: +0x7a26 035050 setarg 0x363636 +0x7a27 035051 lshift8 pdata ,temp +0x7a28 035052 or_into 0x36 ,temp +0x7a29 035053 arg mem_sp_dhkey_end ,contr +0x7a2a 035054 force 6 ,loopcnt +0x7a2b 035055 call pad_xor +0x7a2c 035056 call sha_init +0x7a2d 035057 call sha +0x7a2e 035059 arg mem_sp_random_local_end ,contr +0x7a2f 035060 arg memdat ,contw +0x7a30 035061 call memcpy_dword_swap4 +0x7a31 035062 arg mem_sp_random_remote_end ,contr +0x7a32 035063 call memcpy_dword_swap4 +: 035064 function_f3_common: +0x7a33 035065 setarg 0x0 +0x7a34 035066 istore 8 ,contw +0x7a35 035067 istore 4 ,contw +0x7a36 035068 fetch 4 ,mem_pin +0x7a37 035069 istore 4 ,contw +0x7a38 035071 copy contw ,temp +0x7a39 035072 jam 0x80 ,mem_addr_padding +0x7a3a 035073 copy temp ,contw +0x7a3b 035074 arg mem_addr_iocap_end ,contr +0x7a3c 035075 call memcpy_dword_swap4 +0x7a3d 035077 call sha +0x7a3e 035079 arg memdat ,contw +0x7a3f 035080 force 7 ,loopcnt +0x7a40 035081 call memset0 +0x7a41 035082 istore 4 ,contw +0x7a42 035083 setarg 0x03F8 +0x7a43 035084 istore 4 ,contw +0x7a44 035085 call sha +0x7a45 035086 call sha_result +0x7a46 035088 arg memresult ,contr +0x7a47 035089 arg memahsave ,contw +0x7a48 035090 call memcpy32 +0x7a49 035092 setarg 0x5c5c5c +0x7a4a 035093 lshift8 pdata ,temp +0x7a4b 035094 or_into 0x5c ,temp +0x7a4c 035095 arg mem_sp_dhkey_end ,contr +0x7a4d 035096 force 6 ,loopcnt +0x7a4e 035097 call pad_xor +0x7a4f 035098 call sha_init +0x7a50 035099 call sha +0x7a51 035100 arg memahsave_end ,contr +0x7a52 035101 arg memdat ,contw +0x7a53 035102 force 8 ,loopcnt +0x7a54 035103 call memcpy_dword_swap +0x7a55 035104 setarg 0x800000 +0x7a56 035105 lshift8 pdata ,pdata +0x7a57 035106 istore 4 ,contw +0x7a58 035107 call bn_zero +0x7a59 035108 setarg 0x0300 +0x7a5a 035109 istore 4 ,contw +0x7a5b 035110 call sha +0x7a5c 035111 branch sha_result +: 035118 eckp_calc_init: +0x7a5d 035119 jam 192 ,mem_ec_loopc +: 035120 eckp_calc_init_1: +0x7a5e 035121 fetch 1 ,mem_ec_loopc +0x7a5f 035122 rtn blank +0x7a60 035123 increase -1 ,pdata +0x7a61 035124 store 1 ,mem_ec_loopc +0x7a62 035125 arg mem_k ,contr +0x7a63 035126 call bn_testbit +0x7a64 035127 branch eckp_calc_init_1 ,true +0x7a65 035128 arg mem_ax ,contr +0x7a66 035129 arg mem_cx ,contw +0x7a67 035130 branch ec_copy +: 035132 eckp_calc: +0x7a68 035133 call ecdbl +0x7a69 035134 fetch 1 ,mem_ec_loopc +0x7a6a 035135 increase -1 ,pdata +0x7a6b 035136 store 1 ,mem_ec_loopc +0x7a6c 035137 arg mem_k ,contr +0x7a6d 035138 call bn_testbit +0x7a6e 035139 rtn true +0x7a6f 035140 branch ecadd +: 035142 memcpy_dword_swap4: +0x7a70 035143 force 4 ,loopcnt +: 035144 memcpy_dword_swap: +0x7a71 035145 increase -4 ,contr +: 035146 memcpy_dword_swap_loop: +0x7a72 035147 ifetch 4 ,contr +0x7a73 035148 istore 4 ,contw +0x7a74 035149 increase -8 ,contr +0x7a75 035150 loop memcpy_dword_swap_loop +0x7a76 035151 rtn +: 035156 sp_initialize_256: +0x7a77 035157 bpatchx patch3d_7 ,mem_patch3d +0x7a78 035158 fetch 1 ,mem_le_secure_connect_enable +0x7a79 035159 branch le_secure_connection_disable ,blank +0x7a7a 035160 call le_secure_connection_enable +0x7a7b 035161 call sp_clear_flags +0x7a7c 035163 branch sp_pubkey_calc_256 +: 035168 sp_pubkey_calc_256: +0x7a7d 035169 fetch 1 ,mem_le_sc_local_key_invalid +0x7a7e 035170 rtnne sp_key_invalid +0x7a7f 035171 fetch 1 ,mem_le_sc_calc +0x7a80 035172 rtnne sp_calc_standby +0x7a81 035174 arg mem_le_private_key_256 ,contw +0x7a82 035175 force 15 ,queue +0x7a83 035176 call random_generator +0x7a84 035177 random pdata +0x7a85 035178 rshift pdata ,pdata +0x7a86 035179 istore 2 ,contw +0x7a87 035181 arg mem_k_256 ,contw +0x7a88 035182 arg mem_le_private_key_256 ,contr +0x7a89 035183 call memcpy32 +0x7a8a 035185 arg mem_ax_256 ,contw +0x7a8b 035186 arg mem_gx_256 ,contr +0x7a8c 035187 call memcpy64 +0x7a8d 035189 arg mem_az_256 ,contw +0x7a8e 035190 call clear_mem_256 +0x7a8f 035191 jam 1 ,mem_az_256 +0x7a90 035193 call eckp_calc_init_256 +0x7a91 035194 jam sp_calc_pubkey_256 ,mem_le_sc_calc +0x7a92 035195 rtn +: 035197 sp_pubkey_generated_256: +0x7a93 035198 arg mem_le_pubkey_local_x_256 ,contw +0x7a94 035199 arg mem_bx_256 ,contr +0x7a95 035200 call memcpy64 +0x7a96 035201 jam sp_key_valid_256 ,mem_le_sc_local_key_invalid +0x7a97 035202 jam sp_calc_standby ,mem_le_sc_calc +0x7a98 035203 rtn +: 035207 sp_dhkey_calc_256: +0x7a99 035208 fetch 1 ,mem_sp_dhkey_invalid +0x7a9a 035209 rtnne sp_key_invalid +0x7a9b 035210 fetch 1 ,mem_le_sc_calc +0x7a9c 035211 rtnne sp_calc_standby +0x7a9d 035213 arg mem_k_256 ,contw +0x7a9e 035214 arg mem_le_private_key_256 ,contr +0x7a9f 035215 call memcpy32 +0x7aa0 035217 arg mem_ax_256 ,contw +0x7aa1 035218 arg mem_le_pubkey_remote_x_256 ,contr +0x7aa2 035219 call memcpy64 +0x7aa3 035221 arg mem_az_256 ,contw +0x7aa4 035222 call clear_mem_256 +0x7aa5 035223 jam 1 ,mem_az_256 +0x7aa6 035225 call eckp_calc_init_256 +0x7aa7 035226 jam sp_calc_dhkey_256 ,mem_le_sc_calc +0x7aa8 035227 rtn +: 035230 sp_dhkey_generated_256: +0x7aa9 035232 arg mem_le_dhkey_256 ,contw +0x7aaa 035233 arg mem_bx_256 ,contr +0x7aab 035234 call memcpy32 +0x7aac 035235 jam sp_key_valid_256 ,mem_sp_dhkey_invalid +0x7aad 035236 jam sp_calc_standby ,mem_le_sc_calc +0x7aae 035237 rtn +: 035241 sp_calc_sequence_256: +0x7aaf 035242 fetch 1 ,mem_le_secure_connect_enable +0x7ab0 035243 rtn blank +0x7ab1 035244 fetch 1 ,mem_le_sc_calc +0x7ab2 035245 rtn blank +0x7ab3 035246 increase 0x80 ,pdata +0x7ab4 035247 store 1 ,mem_le_sc_calc +0x7ab5 035248 rtnbit1 7 +0x7ab6 035249 fetch 2 ,mem_ec_loopc +0x7ab7 035250 branch sp_calc_sequence_done_256 ,blank +0x7ab8 035251 branch eckp_calc_256 +: 035253 sp_calc_sequence_done_256: +0x7ab9 035254 bpatchx patch3e_0 ,mem_patch3e +0x7aba 035255 call ecunmapz_256 +0x7abb 035256 fetch 1 ,mem_le_sc_calc +0x7abc 035257 beq sp_calc_pubkey_256 ,sp_pubkey_generated_256 +0x7abd 035258 beq sp_calc_dhkey_256 ,sp_dhkey_generated_256 +0x7abe 035259 rtn +: 035262 eckp_calc_256: +0x7abf 035263 call ecdbl_256 +0x7ac0 035264 fetch 2 ,mem_ec_loopc +0x7ac1 035265 increase -1 ,pdata +0x7ac2 035266 store 2 ,mem_ec_loopc +0x7ac3 035267 arg mem_k_256 ,contr +0x7ac4 035268 call bn_testbit +0x7ac5 035269 rtn true +0x7ac6 035270 branch ecadd_256 +: 035272 eckp_calc_init_256: +0x7ac7 035273 bpatchx patch3e_1 ,mem_patch3e +0x7ac8 035274 setarg 256 ,pdata +0x7ac9 035275 store 2 ,mem_ec_loopc +: 035276 eckp_calc_init_256_1: +0x7aca 035277 fetch 2 ,mem_ec_loopc +0x7acb 035278 rtn blank +0x7acc 035279 increase -1 ,pdata +0x7acd 035280 store 2 ,mem_ec_loopc +0x7ace 035281 arg mem_k_256 ,contr +0x7acf 035282 call bn_testbit +0x7ad0 035283 branch eckp_calc_init_256_1 ,true +0x7ad1 035284 arg mem_ax_256 ,contr +0x7ad2 035285 arg mem_cx_256 ,contw +0x7ad3 035286 branch memcpy96 +: 035289 ecunmapz_256: +0x7ad4 035290 arg mem_cz_256 ,rega +0x7ad5 035291 arg mem_t3_256 ,contw +0x7ad6 035292 call bn_invmod_256 +0x7ad7 035293 arg mem_t3_256 ,rega +0x7ad8 035294 arg mem_t1_256 ,contw +0x7ad9 035295 call bn_sqrmod_256 +0x7ada 035296 arg mem_cx_256 ,rega +0x7adb 035297 arg mem_t1_256 ,regb +0x7adc 035298 arg mem_bx_256 ,contw +0x7add 035299 call bn_mulmod_256 +0x7ade 035300 arg mem_t3_256 ,rega +0x7adf 035301 arg mem_t1_256 ,regb +0x7ae0 035302 arg mem_t2_256 ,contw +0x7ae1 035303 call bn_mulmod_256 +0x7ae2 035304 arg mem_cy_256 ,rega +0x7ae3 035305 arg mem_t2_256 ,regb +0x7ae4 035306 arg mem_by_256 ,contw +0x7ae5 035307 branch bn_mulmod_256 +: 035309 ecdbl_256: +0x7ae6 035310 arg mem_cz_256 ,rega +0x7ae7 035311 arg mem_t2_256 ,contw +0x7ae8 035312 call bn_sqrmod_256 +0x7ae9 035313 arg mem_t2_256 ,rega +0x7aea 035314 arg mem_t3_256 ,contw +0x7aeb 035315 call bn_sqrmod_256 +0x7aec 035317 arg mem_a_256 ,rega +0x7aed 035318 arg mem_t3_256 ,regb +0x7aee 035319 arg mem_t3_256 ,contw +0x7aef 035320 call bn_mulmod_256 +0x7af0 035321 arg mem_cx_256 ,rega +0x7af1 035322 arg mem_t2_256 ,contw +0x7af2 035323 call bn_sqrmod_256 +0x7af3 035325 arg mem_t2_256 ,contr +0x7af4 035326 arg mem_t1_256 ,contw +0x7af5 035327 call memcpy32 +0x7af6 035328 arg mem_t1_256 ,rega +0x7af7 035329 call bn_lshiftmod_256 +0x7af8 035330 arg mem_t2_256 ,rega +0x7af9 035331 arg mem_t1_256 ,regb +0x7afa 035332 arg mem_t2_256 ,contw +0x7afb 035333 call bn_addmod_256 +0x7afc 035335 arg mem_t2_256 ,rega +0x7afd 035336 arg mem_t3_256 ,regb +0x7afe 035337 arg mem_t2_256 ,contw +0x7aff 035338 call bn_addmod_256 +0x7b00 035340 arg mem_cx_256 ,contr +0x7b01 035341 arg mem_t1_256 ,contw +0x7b02 035342 call memcpy32 +0x7b03 035343 arg mem_cy_256 ,rega +0x7b04 035344 arg mem_t3_256 ,contw +0x7b05 035345 call bn_sqrmod_256 +0x7b06 035346 arg mem_t1_256 ,rega +0x7b07 035347 call bn_lshiftmod_256 +0x7b08 035348 arg mem_t1_256 ,rega +0x7b09 035349 call bn_lshiftmod_256 +0x7b0a 035350 arg mem_t1_256 ,rega +0x7b0b 035351 arg mem_t3_256 ,regb +0x7b0c 035352 arg mem_t1_256 ,contw +0x7b0d 035353 call bn_mulmod_256 +0x7b0e 035354 arg mem_t3_256 ,rega +0x7b0f 035355 arg mem_t0_256 ,contw +0x7b10 035356 call bn_sqrmod_256 +0x7b11 035357 arg mem_t0_256 ,rega +0x7b12 035358 call bn_lshiftmod_256 +0x7b13 035359 arg mem_t0_256 ,rega +0x7b14 035360 call bn_lshiftmod_256 +0x7b15 035361 arg mem_t0_256 ,rega +0x7b16 035362 call bn_lshiftmod_256 +0x7b17 035363 arg mem_cy_256 ,contr +0x7b18 035364 arg mem_t3_256 ,contw +0x7b19 035365 call memcpy32 +0x7b1a 035366 arg mem_t3_256 ,rega +0x7b1b 035367 call bn_lshiftmod_256 +0x7b1c 035368 arg mem_t3_256 ,rega +0x7b1d 035369 arg mem_cz_256 ,regb +0x7b1e 035370 arg mem_cz_256 ,contw +0x7b1f 035371 call bn_mulmod_256 +0x7b20 035374 arg mem_t2_256 ,rega +0x7b21 035375 arg mem_t3_256 ,contw +0x7b22 035376 call bn_sqrmod_256 +0x7b23 035378 arg mem_t3_256 ,rega +0x7b24 035379 arg mem_t1_256 ,regb +0x7b25 035380 arg mem_t3_256 ,contw +0x7b26 035381 call bn_submod_256 +0x7b27 035382 arg mem_t3_256 ,rega +0x7b28 035383 arg mem_t1_256 ,regb +0x7b29 035384 arg mem_cx_256 ,contw +0x7b2a 035385 call bn_submod_256 +0x7b2b 035386 arg mem_t1_256 ,rega +0x7b2c 035387 arg mem_cx_256 ,regb +0x7b2d 035388 arg mem_t3_256 ,contw +0x7b2e 035389 call bn_submod_256 +0x7b2f 035390 arg mem_t3_256 ,rega +0x7b30 035391 arg mem_t2_256 ,regb +0x7b31 035392 arg mem_t3_256 ,contw +0x7b32 035393 call bn_mulmod_256 +0x7b33 035394 arg mem_t3_256 ,rega +0x7b34 035395 arg mem_t0_256 ,regb +0x7b35 035396 arg mem_cy_256 ,contw +0x7b36 035397 branch bn_submod_256 +: 035399 ecadd_256: +0x7b37 035401 arg mem_az_256 ,rega +0x7b38 035402 arg mem_t7_256 ,contw +0x7b39 035403 call bn_sqrmod_256 +0x7b3a 035404 arg mem_cx_256 ,rega +0x7b3b 035405 arg mem_t7_256 ,regb +0x7b3c 035406 arg mem_t0_256 ,contw +0x7b3d 035407 call bn_mulmod_256 +0x7b3e 035410 arg mem_az_256 ,rega +0x7b3f 035411 arg mem_t7_256 ,regb +0x7b40 035412 arg mem_t7_256 ,contw +0x7b41 035413 call bn_mulmod_256 +0x7b42 035414 arg mem_cy_256 ,rega +0x7b43 035415 arg mem_t7_256 ,regb +0x7b44 035416 arg mem_t1_256 ,contw +0x7b45 035417 call bn_mulmod_256 +0x7b46 035420 arg mem_cz_256 ,rega +0x7b47 035421 arg mem_t7_256 ,contw +0x7b48 035422 call bn_sqrmod_256 +0x7b49 035423 arg mem_ax_256 ,rega +0x7b4a 035424 arg mem_t7_256 ,regb +0x7b4b 035425 arg mem_t2_256 ,contw +0x7b4c 035426 call bn_mulmod_256 +0x7b4d 035428 arg mem_cz_256 ,rega +0x7b4e 035429 arg mem_t7_256 ,regb +0x7b4f 035430 arg mem_t7_256 ,contw +0x7b50 035431 call bn_mulmod_256 +0x7b51 035432 arg mem_ay_256 ,rega +0x7b52 035433 arg mem_t7_256 ,regb +0x7b53 035434 arg mem_t3_256 ,contw +0x7b54 035435 call bn_mulmod_256 +0x7b55 035440 arg mem_t0_256 ,regb +0x7b56 035441 arg mem_t2_256 ,rega +0x7b57 035442 arg mem_t7_256 ,contw +0x7b58 035443 call bn_submod_256 +0x7b59 035444 arg mem_t0_256 ,rega +0x7b5a 035445 arg mem_t2_256 ,regb +0x7b5b 035446 arg mem_t0_256 ,contw +0x7b5c 035447 call bn_addmod_256 +0x7b5d 035450 arg mem_t1_256 ,regb +0x7b5e 035451 arg mem_t3_256 ,rega +0x7b5f 035452 arg mem_t2_256 ,contw +0x7b60 035453 call bn_submod_256 +0x7b61 035454 arg mem_t1_256 ,rega +0x7b62 035455 arg mem_t3_256 ,regb +0x7b63 035456 arg mem_t1_256 ,contw +0x7b64 035457 call bn_addmod_256 +0x7b65 035458 arg mem_t1_256 ,rega +0x7b66 035459 arg mem_t7_256 ,regb +0x7b67 035460 arg mem_t1_256 ,contw +0x7b68 035461 call bn_mulmod_256 +0x7b69 035462 arg mem_cz_256 ,rega +0x7b6a 035463 arg mem_az_256 ,regb +0x7b6b 035464 arg mem_t3_256 ,contw +0x7b6c 035465 call bn_mulmod_256 +0x7b6d 035466 arg mem_t3_256 ,rega +0x7b6e 035467 arg mem_t7_256 ,regb +0x7b6f 035468 arg mem_cz_256 ,contw +0x7b70 035469 call bn_mulmod_256 +0x7b71 035471 arg mem_t7_256 ,rega +0x7b72 035472 arg mem_t7_256 ,contw +0x7b73 035473 call bn_sqrmod_256 +0x7b74 035474 arg mem_t7_256 ,rega +0x7b75 035475 arg mem_t0_256 ,regb +0x7b76 035476 arg mem_t3_256 ,contw +0x7b77 035477 call bn_mulmod_256 +0x7b78 035478 arg mem_t7_256 ,rega +0x7b79 035479 arg mem_t1_256 ,regb +0x7b7a 035480 arg mem_t1_256 ,contw +0x7b7b 035481 call bn_mulmod_256 +0x7b7c 035482 arg mem_t2_256 ,rega +0x7b7d 035483 arg mem_cx_256 ,contw +0x7b7e 035484 call bn_sqrmod_256 +0x7b7f 035485 arg mem_cx_256 ,rega +0x7b80 035486 arg mem_t3_256 ,regb +0x7b81 035487 arg mem_cx_256 ,contw +0x7b82 035488 call bn_submod_256 +0x7b83 035489 arg mem_cx_256 ,contr +0x7b84 035490 arg mem_t7_256 ,contw +0x7b85 035491 call memcpy32 +0x7b86 035492 arg mem_t7_256 ,rega +0x7b87 035493 call bn_lshiftmod_256 +0x7b88 035494 arg mem_t3_256 ,rega +0x7b89 035495 arg mem_t7_256 ,regb +0x7b8a 035496 arg mem_t3_256 ,contw +0x7b8b 035497 call bn_submod_256 +0x7b8c 035498 arg mem_t3_256 ,rega +0x7b8d 035499 arg mem_t2_256 ,regb +0x7b8e 035500 arg mem_t2_256 ,contw +0x7b8f 035501 call bn_mulmod_256 +0x7b90 035502 arg mem_t2_256 ,rega +0x7b91 035503 arg mem_t1_256 ,regb +0x7b92 035504 arg mem_cy_256 ,contw +0x7b93 035505 call bn_submod_256 +0x7b94 035506 arg mem_cy_256 ,rega +0x7b95 035507 arg mem_p_256 ,regb +0x7b96 035508 arg mem_cy_256 ,contw +0x7b97 035509 force 0 ,regc +0x7b98 035510 fetch 1 ,mem_cy_256 +0x7b99 035511 isolate1 0 ,pdata +0x7b9a 035512 call bn_add_256 ,true +0x7b9b 035513 copy regc ,alarm +0x7b9c 035514 arg mem_cy_256 ,rega +0x7b9d 035515 call bn_rshift_256 +0x7b9e 035516 fetch 1 ,mem_cy5_256 +0x7b9f 035517 isolate1 0 ,alarm +0x7ba0 035518 setflag true ,7 ,pdata +0x7ba1 035519 store 1 ,mem_cy5_256 +0x7ba2 035520 rtn +: 035522 bn_invmod_256: +0x7ba3 035523 copy contw ,timeup +0x7ba4 035524 arg mem_tmp0_256 ,contw +0x7ba5 035525 call clear_mem_256 +0x7ba6 035526 force 0 ,pdata +0x7ba7 035528 store 4 ,mem_t2_256 +0x7ba8 035529 jam 1 ,mem_tmp0_256 +0x7ba9 035530 arg mem_tmp1_256 ,contw +0x7baa 035531 call clear_mem_512 +0x7bab 035532 arg mem_p_256 ,contr +0x7bac 035533 arg mem_tmp2_256 ,contw +0x7bad 035534 call memcpy32 +0x7bae 035535 copy rega ,contr +0x7baf 035536 arg mem_tmp3_256 ,contw +0x7bb0 035537 call memcpy32 +: 035543 bn_invmod_256_2: +0x7bb1 035544 arg mem_tmp3_256 ,contr +0x7bb2 035545 call bn_eq_zero_256 +0x7bb3 035546 branch bn_invmod_256_0 ,blank +0x7bb4 035551 arg mem_tmp3_256 ,rega +0x7bb5 035552 arg mem_tmp0_256 ,regb +0x7bb6 035553 call bn_rshifteven_256 +0x7bb7 035554 arg mem_tmp2_256 ,rega +0x7bb8 035555 arg mem_tmp1_256 ,regb +0x7bb9 035556 call bn_rshifteven_256 +0x7bba 035558 arg mem_tmp3_256 ,rega +0x7bbb 035559 arg mem_tmp2_256 ,regb +0x7bbc 035560 call bn_bigeq_256 +0x7bbd 035561 branch bn_invmod_256_1 ,positive +0x7bbe 035562 arg mem_tmp2_256 ,rega +0x7bbf 035563 arg mem_tmp3_256 ,regb +0x7bc0 035564 copy rega ,contw +0x7bc1 035565 call bn_sub_256 +0x7bc2 035566 arg mem_tmp0_256 ,rega +0x7bc3 035567 arg mem_tmp1_256 ,regb +0x7bc4 035568 copy regb ,contw +0x7bc5 035569 call bn_add_256 +0x7bc6 035570 ifetch 1 ,rega +0x7bc7 035571 iadd regc ,regc +0x7bc8 035572 ifetch 1 ,regb +0x7bc9 035573 iadd regc ,pdata +0x7bca 035574 istore 1 ,regb +0x7bcb 035575 branch bn_invmod_256_2 +: 035576 bn_invmod_256_1: +0x7bcc 035577 arg mem_tmp3_256 ,rega +0x7bcd 035578 arg mem_tmp2_256 ,regb +0x7bce 035579 copy rega ,contw +0x7bcf 035580 call bn_sub_256 +0x7bd0 035581 arg mem_tmp1_256 ,rega +0x7bd1 035582 arg mem_tmp0_256 ,regb +0x7bd2 035583 copy regb ,contw +0x7bd3 035584 call bn_add_256 +0x7bd4 035585 ifetch 1 ,rega +0x7bd5 035586 iadd regc ,regc +0x7bd6 035587 ifetch 1 ,regb +0x7bd7 035588 iadd regc ,pdata +0x7bd8 035589 istore 1 ,regb +0x7bd9 035590 branch bn_invmod_256_2 +: 035591 bn_invmod_256_0: +0x7bda 035593 arg mem_tmp1_256 ,rega +0x7bdb 035594 copy timeup ,contw +0x7bdc 035595 call bn_p256mod +0x7bdd 035597 arg mem_p_256 ,rega +0x7bde 035598 copy timeup ,regb +0x7bdf 035599 copy timeup ,contw +0x7be0 035600 branch bn_submod_256 +: 035603 bn_mulmod_256: +0x7be1 035604 copy contw ,timeup +0x7be2 035606 force 0 ,regext_index +0x7be3 035608 arg mem_tmp1_256 ,contw +0x7be4 035609 call clear_mem_512 +0x7be5 035610 arg mem_regext ,contw +0x7be6 035611 call clear_mem_512 +0x7be7 035615 copy rega ,contr +0x7be8 035617 jam 0 ,mem_regext +0x7be9 035618 setarg 0 +0x7bea 035619 call bn_load_mem +0x7beb 035620 copy regb ,contr +0x7bec 035621 call bn_load_256 +0x7bed 035624 force 0 ,queue +0x7bee 035625 arg mem_tmp1_256 ,contw +: 035626 bn_mulmod_256_1: +0x7bef 035629 arg mem_regext ,temp +0x7bf0 035630 copy queue ,regb +0x7bf1 035631 lshift2 regb ,pdata +0x7bf2 035633 iadd temp ,regb +0x7bf3 035634 force 0 ,temp +0x7bf4 035635 force 0 ,regc +: 035636 bn_mulmod_256_0: +0x7bf5 035641 ifetch 4 ,contw +0x7bf6 035642 iforce rega +0x7bf7 035645 ifetch 4 ,regb +0x7bf8 035646 copy regc ,regext_index +0x7bf9 035647 imul32 regext ,pdata +0x7bfa 035648 iadd rega ,pdata +0x7bfb 035649 iadd temp ,pdata +0x7bfc 035650 istore 4 ,contw +0x7bfd 035651 rshift32 pdata ,temp +0x7bfe 035652 increase 1 ,regc +0x7bff 035653 compare 8 ,regc ,0xff +0x7c00 035654 nbranch bn_mulmod_256_0 ,true +0x7c01 035656 deposit temp +0x7c02 035657 istore 4 ,contw +0x7c03 035658 increase -32 ,contw +0x7c04 035661 increase 1 ,queue +0x7c05 035662 compare 8 ,queue ,0xff +0x7c06 035663 nbranch bn_mulmod_256_1 ,true +0x7c07 035664 arg mem_tmp1_256 ,rega +0x7c08 035665 copy timeup ,contw +0x7c09 035666 branch bn_p256mod +: 035668 bn_p256mod: +0x7c0a 035669 bpatchx patch3e_2 ,mem_patch3e +0x7c0b 035670 copy contw ,timeup +0x7c0c 035671 copy rega ,alarm +0x7c0d 035672 arg mem_tmp2_256 ,regb +0x7c0e 035673 copy regb ,contw +0x7c0f 035674 call memset0_4 +0x7c10 035675 istore 8 ,contw +0x7c11 035676 add rega ,44 ,contr +0x7c12 035677 call memcpy8 +0x7c13 035678 call memcpy12 +0x7c14 035679 copy regb ,rega +0x7c15 035680 call bn_lshiftmod_256 +0x7c16 035681 arg mem_tmp2_256 ,regb +0x7c17 035682 copy alarm ,rega +0x7c18 035683 copy timeup ,contw +0x7c19 035684 call bn_addmod_256 +0x7c1a 035686 arg mem_tmp2_256 ,regb +0x7c1b 035687 copy regb ,contw +0x7c1c 035688 call memset0_4 +0x7c1d 035689 istore 8 ,contw +0x7c1e 035690 add alarm ,48 ,contr +0x7c1f 035691 call memcpy16 +0x7c20 035692 call memset0_4 +0x7c21 035693 copy regb ,rega +0x7c22 035694 call bn_lshiftmod_256 +0x7c23 035698 arg mem_tmp2_256 ,regb +0x7c24 035699 copy timeup ,rega +0x7c25 035700 copy rega ,contw +0x7c26 035701 call bn_addmod_256 +0x7c27 035705 arg mem_tmp2_256 ,regb +0x7c28 035706 copy regb ,contw +0x7c29 035707 add alarm ,32 ,contr +0x7c2a 035708 call memcpy12 +0x7c2b 035709 call memset0_4 +0x7c2c 035710 istore 8 ,contw +0x7c2d 035711 add alarm ,56 ,contr +0x7c2e 035712 call memcpy8 +0x7c2f 035713 copy timeup ,rega +0x7c30 035714 copy rega ,contw +0x7c31 035715 call bn_addmod_256 +0x7c32 035719 arg mem_tmp2_256 ,regb +0x7c33 035720 copy regb ,contw +0x7c34 035721 add alarm ,36 ,contr +0x7c35 035722 call memcpy12 +0x7c36 035723 add alarm ,52 ,contr +0x7c37 035724 call memcpy12 +0x7c38 035725 add alarm ,52 ,contr +0x7c39 035726 call memcpy4 +0x7c3a 035727 add alarm ,32 ,contr +0x7c3b 035728 call memcpy4 +0x7c3c 035729 copy timeup ,rega +0x7c3d 035730 copy rega ,contw +0x7c3e 035731 call bn_addmod_256 +0x7c3f 035734 arg mem_tmp2_256 ,regb +0x7c40 035735 copy regb ,contw +0x7c41 035736 add alarm ,44 ,contr +0x7c42 035737 call memcpy12 +0x7c43 035738 call memset0_4 +0x7c44 035739 istore 8 ,contw +0x7c45 035740 add alarm ,32 ,contr +0x7c46 035741 call memcpy4 +0x7c47 035742 add alarm ,40 ,contr +0x7c48 035743 call memcpy4 +0x7c49 035744 copy timeup ,rega +0x7c4a 035745 copy rega ,contw +0x7c4b 035746 call bn_submod_256 +0x7c4c 035749 arg mem_tmp2_256 ,regb +0x7c4d 035750 copy regb ,contw +0x7c4e 035751 add alarm ,48 ,contr +0x7c4f 035752 call memcpy8 +0x7c50 035753 call memcpy8 +0x7c51 035754 force 0 ,pdata +0x7c52 035755 istore 8 ,contw +0x7c53 035756 add alarm ,36 ,contr +0x7c54 035757 call memcpy4 +0x7c55 035758 add alarm ,44 ,contr +0x7c56 035759 call memcpy4 +0x7c57 035760 copy timeup ,rega +0x7c58 035761 copy rega ,contw +0x7c59 035762 call bn_submod_256 +0x7c5a 035765 arg mem_tmp2_256 ,regb +0x7c5b 035766 copy regb ,contw +0x7c5c 035767 add alarm ,52 ,contr +0x7c5d 035768 call memcpy12 +0x7c5e 035769 add alarm ,32 ,contr +0x7c5f 035770 call memcpy12 +0x7c60 035771 call memset0_4 +0x7c61 035772 add alarm ,48 ,contr +0x7c62 035773 call memcpy4 +0x7c63 035774 copy timeup ,rega +0x7c64 035775 copy rega ,contw +0x7c65 035776 call bn_submod_256 +0x7c66 035779 arg mem_tmp2_256 ,regb +0x7c67 035780 copy regb ,contw +0x7c68 035781 add alarm ,56 ,contr +0x7c69 035782 call memcpy8 +0x7c6a 035783 call memset0_4 +0x7c6b 035784 add alarm ,36 ,contr +0x7c6c 035785 call memcpy12 +0x7c6d 035786 call memset0_4 +0x7c6e 035787 add alarm ,52 ,contr +0x7c6f 035788 call memcpy4 +0x7c70 035789 copy timeup ,rega +0x7c71 035790 copy rega ,contw +0x7c72 035791 branch bn_submod_256 +: 035794 bn_load_mem: +0x7c73 035795 force 32 ,loopcnt +0x7c74 035796 arg mem_regext ,contw +0x7c75 035797 iadd contw ,contw +0x7c76 035798 branch memcpy +: 035800 bn_load_256: +0x7c77 035801 force 8 ,loopcnt +0x7c78 035802 branch bn_load_0 +: 035804 bn_sqrmod_256: +0x7c79 035805 copy rega ,regb +0x7c7a 035806 branch bn_mulmod_256 +: 035808 bn_add_256: +0x7c7b 035809 force 8 ,loopcnt +0x7c7c 035810 branch bn_add + 1 +: 035812 bn_addmod_256: +0x7c7d 035813 call bn_add_256 +0x7c7e 035814 copy contw ,rega +0x7c7f 035815 branch bn_lshiftmod_ismod_256 +: 035817 bn_lshiftmod_256: +0x7c80 035818 call bn_lshift_256 +: 035819 bn_lshiftmod_ismod_256: +0x7c81 035820 isolate1 0 ,regc +0x7c82 035821 branch bn_lshiftmod_p_256 ,true +0x7c83 035822 arg mem_p_256 ,regb +0x7c84 035823 copy rega ,regc +0x7c85 035824 increase -32 ,rega +0x7c86 035825 call bn_bigeq_256 +0x7c87 035826 nrtn positive +0x7c88 035827 copy regc ,rega +0x7c89 035828 branch sub_p2_256 +: 035830 bn_lshiftmod_p_256: +0x7c8a 035831 call sub_p2_256 +0x7c8b 035833 copy rega ,regc +0x7c8c 035834 increase -32 ,rega +0x7c8d 035835 arg mem_p_256 ,regb +0x7c8e 035836 call bn_bigeq_256 +0x7c8f 035837 nrtn positive +0x7c90 035838 copy regc ,rega +0x7c91 035839 branch sub_p2_256 +: 035842 sub_p2_256: +0x7c92 035843 increase -32 ,rega +0x7c93 035844 arg mem_p_256 ,regb +0x7c94 035845 copy rega ,contw +0x7c95 035846 branch bn_sub_256 +: 035851 bn_submod_256: +0x7c96 035852 call bn_sub_256 +0x7c97 035854 branch bn_submod_256_np ,true +0x7c98 035857 add contw ,-32 ,rega +0x7c99 035858 arg mem_p_256 ,regb +0x7c9a 035859 call bn_bigeq_256 +0x7c9b 035860 nrtn positive +0x7c9c 035861 arg mem_p_256 ,regb +0x7c9d 035862 add contw ,-32 ,rega +0x7c9e 035864 copy rega ,contw +0x7c9f 035865 branch bn_sub_256 +: 035866 bn_submod_256_np: +0x7ca0 035867 add contw ,-32 ,rega +0x7ca1 035868 arg mem_p_256 ,regb +0x7ca2 035869 copy rega ,contw +0x7ca3 035870 call bn_add_256 +0x7ca4 035872 rtn true +0x7ca5 035873 add contw ,-32 ,rega +0x7ca6 035874 arg mem_p_256 ,regb +0x7ca7 035875 copy rega ,contw +0x7ca8 035876 branch bn_add_256 +: 035880 bn_sub_256: +0x7ca9 035881 force 8 ,loopcnt +0x7caa 035882 branch bn_sub + 1 +: 035884 bn_rshift_256: +0x7cab 035885 force 8 ,loopcnt +0x7cac 035886 increase 28 ,rega +0x7cad 035887 branch bn_rshift +: 035889 bn_lshift_256: +0x7cae 035890 force 8 ,loopcnt +0x7caf 035891 force 0 ,regc +0x7cb0 035892 branch bn_lshift_0 +: 035894 bn_bigeq_256: +0x7cb1 035895 force 8 ,loopcnt +0x7cb2 035896 increase 28 ,rega +0x7cb3 035897 increase 28 ,regb +0x7cb4 035898 branch bn_bigeq_0 +: 035901 bn_eq_zero_256: +0x7cb5 035902 ifetch 8 ,contr +0x7cb6 035903 nrtn blank +0x7cb7 035904 branch bn_eq_zero +: 035909 bn_rshifteven_256: +0x7cb8 035910 copy rega ,alarm +: 035911 bn_rshifteven_256_1: +0x7cb9 035912 copy alarm ,rega +0x7cba 035913 ifetch 1 ,rega +0x7cbb 035914 isolate1 0 ,pdata +0x7cbc 035915 rtn true +0x7cbd 035916 call bn_rshift_256 +0x7cbe 035917 ifetch 1 ,regb +0x7cbf 035918 isolate0 0 ,pdata +0x7cc0 035919 branch bn_rshifteven_256_0 ,true +0x7cc1 035920 arg mem_p_256 ,rega +0x7cc2 035921 copy regb ,contw +0x7cc3 035922 call bn_add_256 +0x7cc4 035923 ifetch 1 ,regb +0x7cc5 035924 iadd regc ,pdata +0x7cc6 035925 istore 1 ,regb +0x7cc7 035926 increase -32 ,regb +: 035927 bn_rshifteven_256_0: +0x7cc8 035928 add regb ,32 ,rega +0x7cc9 035929 force 9 ,loopcnt +0x7cca 035930 call bn_rshift +0x7ccb 035931 branch bn_rshifteven_256_1 +: 035935 ui_init: +0x7ccc 035936 call lpm_disable_exen_output +0x7ccd 035937 rtn wake +0x7cce 035938 call ui_button_init +0x7ccf 035939 call ui_timer_init +0x7cd0 035940 branch ui_led_init_global +: 035942 ui_dispatch: +0x7cd1 035943 call ui_led_dispatch +0x7cd2 035945 branch ui_timer_check +: 035947 ui_button_init: +0x7cd3 035948 fetch 1 ,mem_ui_button_gpio +0x7cd4 035949 rtneq ui_button_gpio_disable +0x7cd5 035950 iforce temp +0x7cd6 035951 call gpio_config_output +0x7cd7 035952 fetcht 1 ,mem_ui_button_gpio +0x7cd8 035953 call gpio_out_inactive +0x7cd9 035954 nop 100 +0x7cda 035955 fetcht 1 ,mem_ui_button_gpio +0x7cdb 035956 call gpio_config_input +0x7cdc 035957 branch ui_button_polling +: 035961 ui_button_polling: +0x7cdd 035962 bpatchx patch3e_3 ,mem_patch3e +0x7cde 035963 fetch 1 ,mem_ui_button_gpio +0x7cdf 035964 rtneq ui_button_gpio_disable +0x7ce0 035965 copy pdata ,temp +0x7ce1 035966 call gpio_get_bit +0x7ce2 035967 nbranch ui_button_up ,true +: 035969 ui_button_down: +0x7ce3 035970 call ui_button_check_long_press +0x7ce4 035971 fetch 2 ,mem_ui_state_map +0x7ce5 035972 set1 ui_state_btn_down +0x7ce6 035973 store 2 ,mem_ui_state_map +0x7ce7 035974 fetch 1 ,mem_ui_button_last_state +0x7ce8 035975 rtneq ui_button_state_down +0x7ce9 035976 jam ui_button_state_down ,mem_ui_button_last_state +0x7cea 035978 fetch 1 ,mem_ui_button_timeout +0x7ceb 035979 store 1 ,mem_ui_button_timer +0x7cec 035980 call lpm_button_get_wake_lock +0x7ced 035981 jam bt_evt_button_down ,mem_fifo_temp +0x7cee 035982 branch ui_ipc_send_event +: 035983 ui_button_up: +0x7cef 035984 fetch 2 ,mem_ui_state_map +0x7cf0 035985 set0 ui_state_btn_down +0x7cf1 035986 store 2 ,mem_ui_state_map +0x7cf2 035987 fetch 1 ,mem_ui_button_last_state +0x7cf3 035988 rtneq ui_button_state_up +0x7cf4 035989 jam ui_button_state_up ,mem_ui_button_last_state +0x7cf5 035991 jam 0 ,mem_ui_button_timer +0x7cf6 035992 call lpm_button_clean_wake_lock +0x7cf7 035993 jam bt_evt_button_up ,mem_fifo_temp +0x7cf8 035994 branch ui_ipc_send_event +: 035996 ui_button_check_long_press: +0x7cf9 035997 fetch 1 ,mem_ui_button_timer +0x7cfa 035998 rtn blank +0x7cfb 035999 increase -1 ,pdata +0x7cfc 036000 store 1 ,mem_ui_button_timer +0x7cfd 036001 nrtn blank +0x7cfe 036003 jam bt_evt_button_long_pressed ,mem_fifo_temp +0x7cff 036004 branch ui_ipc_send_event +: 036006 lpm_button_get_wake_lock: +0x7d00 036007 arg wake_lock_button ,queue +0x7d01 036008 branch lpm_get_wake_lock +: 036010 lpm_button_clean_wake_lock: +0x7d02 036011 arg wake_lock_button ,queue +0x7d03 036012 branch lpm_put_wake_lock +: 036034 calc_curr_struct_prt: +0x7d04 036035 fetch 2 ,mem_ui_led_struct_ptr +0x7d05 036036 mul32 rega ,led_offset_length ,regb +0x7d06 036037 iadd regb ,regb +0x7d07 036038 rtn +: 036041 ui_led_init_global: +0x7d08 036042 fetch 1 ,mem_ui_led_struct_num +0x7d09 036043 rtn blank +0x7d0a 036044 copy pdata ,loopcnt +0x7d0b 036045 fetch 2 ,mem_ui_led_struct_ptr +0x7d0c 036046 copy pdata ,regb +: 036047 ui_led_init_loop: +0x7d0d 036048 add regb ,led_offset_led_gpio ,regc +0x7d0e 036049 ifetcht 1 ,regc +0x7d0f 036050 call gpio_config_output +0x7d10 036051 call ui_led_off_static +0x7d11 036052 increase led_offset_length ,regb +0x7d12 036053 loop ui_led_init_loop +0x7d13 036054 rtn +: 036058 ui_led_on_global: +0x7d14 036059 call calc_curr_struct_prt +0x7d15 036060 setarg ui_led_state_lighting +0x7d16 036061 istore 1 ,regb +0x7d17 036062 call ui_led_stop_timer +0x7d18 036063 branch ui_led_on_static +: 036067 ui_led_blink_stop_global: +: 036068 ui_led_off_global: +0x7d19 036069 call calc_curr_struct_prt +0x7d1a 036070 setarg ui_led_state_darking +0x7d1b 036071 istore 1 ,regb +0x7d1c 036072 call ui_led_stop_timer +0x7d1d 036073 branch ui_led_off_static +: 036077 ui_led_blink_start_global: +0x7d1e 036078 call calc_curr_struct_prt +0x7d1f 036079 setarg ui_led_state_blink_start +0x7d20 036080 istore 1 ,regb +0x7d21 036081 setarg led_infinite_flash_num +0x7d22 036082 istore 1 ,contw +0x7d23 036083 branch ui_led_off_static +: 036088 ui_led_set_style_global: +0x7d24 036089 call calc_curr_struct_prt +0x7d25 036090 arg led_offset_length ,loopcnt +0x7d26 036091 copy regc ,contr +0x7d27 036092 copy regb ,contw +0x7d28 036093 branch memcpy_fast +: 036097 ui_led_dispatch: +0x7d29 036098 fetch 1 ,mem_ui_led_struct_num +0x7d2a 036099 rtn blank +0x7d2b 036100 arg 0 ,rega +: 036101 ui_led_blink_polling: +0x7d2c 036102 call ui_led_change_style_by_type +0x7d2d 036103 increase 1 ,rega +0x7d2e 036104 fetch 1 ,mem_ui_led_struct_num +0x7d2f 036105 isub rega ,null +0x7d30 036106 rtn zero +0x7d31 036107 branch ui_led_blink_polling +: 036110 ui_led_off_static: +0x7d32 036111 add regb ,led_offset_led_gpio ,regc +0x7d33 036112 ifetcht 1 ,regc +0x7d34 036113 branch gpio_out_inactive +: 036116 ui_led_on_static: +0x7d35 036117 add regb ,led_offset_led_gpio ,regc +0x7d36 036118 ifetcht 1 ,regc +0x7d37 036119 branch gpio_out_active +: 036123 ui_led_change_style_by_type: +0x7d38 036124 add rega ,ui_led_blink ,queue +0x7d39 036125 call timer_check +0x7d3a 036126 nrtn blank +0x7d3b 036128 call calc_curr_struct_prt +0x7d3c 036130 ifetch 1 ,regb +0x7d3d 036132 beq ui_led_state_lighting ,ui_led_on_static +0x7d3e 036133 beq ui_led_state_darking ,ui_led_off_static +0x7d3f 036134 beq ui_led_state_blink_stop ,ui_led_off_static +0x7d40 036135 beq ui_led_state_blink_darking ,ui_led_blink_state_darking +: 036136 ui_led_blink_state_lighting: +0x7d41 036137 call ui_led_on_static +0x7d42 036138 add regb ,led_offset_cb_ledon ,regc +0x7d43 036139 call push_stack +0x7d44 036140 ifetch 2 ,regc +0x7d45 036141 call callback_func +0x7d46 036142 call pop_stack +0x7d47 036143 setarg ui_led_state_blink_darking +0x7d48 036144 istore 1 ,regb +0x7d49 036145 add regb ,led_offset_on_time ,regc +0x7d4a 036146 ifetch 2 ,regc +0x7d4b 036147 branch ui_led_blink_timer_start +: 036150 ui_led_blink_state_darking: +0x7d4c 036151 call ui_led_off_static +0x7d4d 036152 add regb ,led_offset_cb_ledoff ,regc +0x7d4e 036153 call push_stack +0x7d4f 036154 ifetch 2 ,regc +0x7d50 036155 call callback_func +0x7d51 036156 call pop_stack +0x7d52 036158 add regb ,led_offset_blink_count ,regc +0x7d53 036159 ifetch 1 ,regc +0x7d54 036160 beq led_infinite_flash_num ,ui_led_blink_infinite +0x7d55 036161 increase -1 ,pdata +0x7d56 036162 istore 1 ,regc +0x7d57 036163 branch ui_led_blink_stop_global ,blank +: 036164 ui_led_blink_infinite: +0x7d58 036165 setarg ui_led_state_blink_lighting +0x7d59 036166 istore 1 ,regb +0x7d5a 036167 add regb ,led_offset_off_time ,regc +0x7d5b 036168 ifetch 2 ,regc +: 036169 ui_led_blink_timer_start: +0x7d5c 036170 add rega ,ui_led_blink ,queue +0x7d5d 036171 branch timer_init +: 036173 ui_led_stop_timer: +0x7d5e 036174 setarg 0 +0x7d5f 036175 branch ui_led_blink_timer_start +: 036181 ui_timer_timeout: +0x7d60 036182 setarg 0x1000 +0x7d61 036183 lshift16 pdata ,pdata +0x7d62 036184 iadd regb ,regb +0x7d63 036185 rtn +: 036187 ui_timer_check: +0x7d64 036188 bpatchx patch3e_4 ,mem_patch3e +0x7d65 036189 arg 0 ,rega +0x7d66 036190 fetcht 4 ,mem_ui_timer_last_btclk +0x7d67 036191 copy clkn_bt ,regb +0x7d68 036192 copy regb ,pdata +0x7d69 036193 isub temp ,null +0x7d6a 036194 ncall ui_timer_timeout ,positive +: 036196 ui_timer_check_loop: +0x7d6b 036197 copy regb ,pdata +0x7d6c 036198 increase 160 ,temp +0x7d6d 036199 increase 160 ,temp +0x7d6e 036200 isub temp ,null +0x7d6f 036201 nbranch ui_timer_check_end ,positive +0x7d70 036202 increase 1 ,rega +0x7d71 036203 and rega ,0x0f ,pdata +0x7d72 036204 nbranch ui_timer_check_loop ,blank +0x7d73 036205 arg 0 ,rega +0x7d74 036206 call ui_timer_check_send_evt +: 036207 ui_timer_init: +0x7d75 036208 copy clkn_bt ,pdata +0x7d76 036209 store 4 ,mem_ui_timer_last_btclk +0x7d77 036210 rtn +: 036211 ui_timer_check_end: +0x7d78 036212 bpatchx patch3e_5 ,mem_patch3e +0x7d79 036213 copy rega ,pdata +0x7d7a 036214 rtn blank +0x7d7b 036215 increase -160 ,temp +0x7d7c 036216 increase -160 ,temp +0x7d7d 036217 set0 28 ,temp +0x7d7e 036218 storet 4 ,mem_ui_timer_last_btclk +: 036219 ui_timer_check_send_evt: +0x7d7f 036220 branch app_evt_timer +: 036227 ui_ipc_get_lock: +0x7d80 036228 jam 1 ,mem_ipc_lock_bt +: 036229 ui_ipc_get_lock_wait: +0x7d81 036230 fetch 1 ,mem_ipc_lock_c51 +0x7d82 036231 nbranch ui_ipc_get_lock_wait ,blank +0x7d83 036232 rtn +: 036234 ui_ipc_put_lock: +0x7d84 036235 jam 0 ,mem_ipc_lock_bt +0x7d85 036236 rtn +: 036240 ui_ipc_send_event: +0x7d86 036241 bpatchx patch3e_6 ,mem_patch3e +0x7d87 036242 call ui_ipc_get_lock +0x7d88 036243 copy rega ,pdata +0x7d89 036244 store 4 ,mem_ipc_rega_temp +0x7d8a 036245 arg mem_ipc_fifo_bt2c51 ,rega +0x7d8b 036246 call fifo_in +0x7d8c 036247 fetch 4 ,mem_ipc_rega_temp +0x7d8d 036248 copy pdata ,rega +0x7d8e 036249 branch ui_ipc_put_lock +: 036251 ui_ipc_send_cmd: +0x7d8f 036252 bpatchx patch3e_7 ,mem_patch3e +0x7d90 036253 call ui_ipc_get_lock +0x7d91 036254 copy rega ,pdata +0x7d92 036255 store 4 ,mem_ipc_rega_temp +0x7d93 036256 arg mem_ipc_fifo_c512bt ,rega +0x7d94 036257 call fifo_in +0x7d95 036258 fetch 4 ,mem_ipc_rega_temp +0x7d96 036259 copy pdata ,rega +0x7d97 036260 branch ui_ipc_put_lock +: 036262 ui_ipc_clean_all_fifo: +0x7d98 036263 setarg 0 +0x7d99 036264 store util_fifo_len ,mem_ipc_fifo_c512bt +0x7d9a 036265 store util_fifo_len ,mem_ipc_fifo_bt2c51 +0x7d9b 036266 rtn +: 036268 check_51cmd: +0x7d9c 036269 bpatchx patch3f_0 ,mem_patch3f +0x7d9d 036270 fetch 1 ,mem_hci_cmd +0x7d9e 036271 nrtn blank +0x7d9f 036272 arg mem_ipc_fifo_c512bt ,rega +0x7da0 036273 call fifo_is_empty +0x7da1 036274 rtn blank +0x7da2 036275 jam ipc_continue_process ,mem_ipc_skip_continue_proc +0x7da3 036276 call check_51cmd_once +0x7da4 036277 fetch 1 ,mem_ipc_skip_continue_proc +0x7da5 036278 branch check_51cmd ,blank +0x7da6 036279 rtn +: 036281 check_51cmd_once: +0x7da7 036282 call ui_ipc_get_lock +0x7da8 036283 arg mem_ipc_fifo_c512bt ,rega +0x7da9 036284 call fifo_out +0x7daa 036285 copy pdata ,temp +0x7dab 036286 call ui_ipc_put_lock +0x7dac 036287 bpatchx patch3f_1 ,mem_patch3f +0x7dad 036288 copy temp ,pdata +0x7dae 036289 rtn blank +0x7daf 036290 beq bt_cmd_start_discovery ,check_51cmd_start_discovery +0x7db0 036291 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery +0x7db1 036292 beq bt_cmd_reconnect ,check_51cmd_reconnect +0x7db2 036293 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating +0x7db3 036294 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating +0x7db4 036295 beq bt_cmd_sniff_test ,check_51cmd_sniff_test +0x7db5 036296 beq bt_cmd_start_inquiry ,check_51cmd_inq +0x7db6 036297 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq +0x7db7 036298 beq bt_cmd_start_adv ,check_51cmd_adv +0x7db8 036299 beq bt_cmd_stop_adv ,check_51cmd_stop_adv +0x7db9 036300 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv +0x7dba 036301 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv +0x7dbb 036302 beq bt_cmd_led_off ,check_51cmd_led_off +0x7dbc 036303 beq bt_cmd_led_on ,check_51cmd_led_on +0x7dbd 036304 beq bt_cmd_led_blink ,check_51cmd_led_start_blink +0x7dbe 036305 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con +0x7dbf 036306 beq bt_cmd_le_start_scan ,check_51cmd_start_scan +0x7dc0 036307 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan +0x7dc1 036308 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate +0x7dc2 036309 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req +0x7dc3 036310 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel +0x7dc4 036312 store 1 ,mem_fifo_temp +0x7dc5 036313 bpatchx patch3f_2 ,mem_patch3f +0x7dc6 036314 call lmo_fifo_check +0x7dc7 036315 nbranch check_51cmd_restore ,blank +: 036316 check_51cmd_once_continue: +0x7dc8 036317 fetch 1 ,mem_fifo_temp +0x7dc9 036318 bmark0 mark_context ,check_51cmd_check_idle +0x7dca 036319 beq bt_cmd_disconnect ,check_51cmd_disconnect +0x7dcb 036320 beq bt_cmd_enter_sniff ,cmd_in_sniff +0x7dcc 036321 beq bt_cmd_exit_sniff ,cmd_exit_sniff +0x7dcd 036322 beq bt_cmd_set_pin_code ,check_51cmd_pincode +0x7dce 036323 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect +0x7dcf 036324 beq bt_cmd_le_update_conn ,check_51cmd_ble_update_connect_param +0x7dd0 036325 beq bt_cmd_role_switch ,check_51cmd_role_switch +0x7dd1 036326 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info +0x7dd2 036327 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info +0x7dd3 036328 beq bt_cmd_dhkey_not_accept ,check_51cmd_dhkey_not_accept +0x7dd4 036329 beq bt_cmd_store_reconn_info ,check_51cmd_store_reconn_info +0x7dd5 036330 rtn +: 036332 check_51cmd_check_idle: +0x7dd6 036333 store 1 ,mem_fifo_temp +0x7dd7 036334 call context_check_idle +0x7dd8 036335 branch check_51cmd_restore ,zero +0x7dd9 036336 call context_search_plap +0x7dda 036337 nrtn zero +: 036338 check_51cmd_restore: +0x7ddb 036339 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc +0x7ddc 036340 branch ui_ipc_send_cmd +: 036345 check_51cmd_start_discovery: +0x7ddd 036346 fetch 2 ,mem_ui_state_map +0x7dde 036347 set1 ui_state_bt_discovery +0x7ddf 036348 store 2 ,mem_ui_state_map +0x7de0 036349 jam 3 ,mem_scan_mode +0x7de1 036350 rtn +: 036354 check_51cmd_stop_discovery: +0x7de2 036355 jam 0 ,mem_hid_handshake_timer_count +0x7de3 036356 jam 0 ,mem_scan_mode +0x7de4 036357 fetch 2 ,mem_ui_state_map +0x7de5 036358 set0 ui_state_bt_discovery +0x7de6 036359 store 2 ,mem_ui_state_map +0x7de7 036360 rtn +: 036364 check_51cmd_reconnect: +0x7de8 036365 jam hci_cmd_create_conn ,mem_hci_cmd +0x7de9 036366 rtn +: 036370 check_51cmd_disconnect: +0x7dea 036371 jam lmp_detach ,mem_lmo_opcode2 +0x7deb 036372 jam other_end_terminated ,mem_disconn_reason_send +0x7dec 036373 rtn +: 036377 check_51cmd_enter_sniff_subrating: +0x7ded 036378 rtn +: 036382 check_51cmd_exit_sniff_subrating: +0x7dee 036383 rtn +: 036387 check_51cmd_sniff_test: +0x7def 036388 rtn +: 036392 check_51cmd_pincode: +0x7df0 036393 jam pincode_state_pincode_ready ,mem_pincode_state +0x7df1 036394 branch cmd_pair +: 036398 check_51cmd_inq: +0x7df2 036399 rtn +: 036403 check_51cmd_stop_inq: +0x7df3 036404 rtn +: 036408 check_51cmd_adv: +0x7df4 036409 jam on ,mem_le_adv_enable +0x7df5 036410 jam adv_ind ,mem_le_adv_type +0x7df6 036411 fetch 2 ,mem_ui_state_map +0x7df7 036412 set1 ui_state_ble_adv ,pdata +0x7df8 036413 store 2 ,mem_ui_state_map +0x7df9 036414 rtn +: 036418 check_51cmd_stop_adv: +0x7dfa 036419 fetch 2 ,mem_ui_state_map +0x7dfb 036420 set0 ui_state_ble_adv ,pdata +0x7dfc 036421 store 2 ,mem_ui_state_map +0x7dfd 036422 jam off ,mem_le_adv_enable +0x7dfe 036423 rtn +: 036427 check_51cmd_direct_adv: +0x7dff 036428 jam on ,mem_le_adv_enable +0x7e00 036429 jam adv_direct_ind ,mem_le_adv_type +0x7e01 036430 fetch 2 ,mem_ui_state_map +0x7e02 036431 set1 ui_state_ble_adv ,pdata +0x7e03 036432 store 2 ,mem_ui_state_map +0x7e04 036433 rtn +: 036437 check_51cmd_stop_direct_adv: +0x7e05 036438 fetch 2 ,mem_ui_state_map +0x7e06 036439 set0 ui_state_ble_adv ,pdata +0x7e07 036440 store 2 ,mem_ui_state_map +0x7e08 036441 jam off ,mem_le_adv_enable +0x7e09 036442 rtn +: 036446 check_51cmd_le_disconnect: +0x7e0a 036447 setarg 20 +0x7e0b 036448 store 2 ,mem_le_superto +0x7e0c 036449 store 2 ,mem_le_init_superto +0x7e0d 036450 branch le_send_terminate_ind_user_terminated +: 036454 check_51cmd_ble_update_connect_param: +0x7e0e 036455 branch le_l2cap_tx_update_req +: 036459 check_51cmd_led_off: +0x7e0f 036460 arg 0 ,rega +0x7e10 036461 branch ui_led_off_global +: 036465 check_51cmd_led_on: +0x7e11 036466 arg 0 ,rega +0x7e12 036467 branch ui_led_on_global +: 036471 check_51cmd_led_start_blink: +0x7e13 036472 arg 0 ,rega +0x7e14 036473 branch ui_led_blink_start_global +: 036477 check_51cmd_le_start_con: +0x7e15 036478 jam on ,mem_le_scan_enable +0x7e16 036479 jam hci_cmd_le_create_conn ,mem_hci_cmd +0x7e17 036482 rtn +: 036486 check_51cmd_start_scan: +0x7e18 036487 jam on ,mem_le_scan_enable +0x7e19 036488 rtn +: 036492 check_51cmd_stop_scan: +0x7e1a 036493 jam off ,mem_le_scan_enable +0x7e1b 036494 jam 0 ,mem_hci_cmd +0x7e1c 036495 rtn +: 036499 check_51cmd_hibernate: +0x7e1d 036500 fetch 2 ,mem_cb_before_hibernate +0x7e1e 036501 call callback_func +0x7e1f 036502 fetch 1 ,mem_ui_button_gpio +0x7e20 036503 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled +0x7e21 036504 copy pdata ,temp +0x7e22 036505 call gpio_config_input +: 036506 check_51cmd_hibernate_btn_disabled: +0x7e23 036507 call ui_ipc_clean_all_fifo +0x7e24 036508 branch lpm_hibernate +: 036512 check_51cmd_le_smp_sec_req: +0x7e25 036513 branch le_send_smp_security_request +: 036517 check_51cmd_role_switch: +0x7e26 036518 jam lmp_slot_offset ,mem_lmo_opcode2 +0x7e27 036519 set1 mark_switch_initiated ,mark +0x7e28 036520 nrtn master +0x7e29 036521 jam switch_flag_init ,mem_switch_flag +0x7e2a 036522 jam lmp_switch_req ,mem_lmo_opcode2 +0x7e2b 036523 fetch 1 ,mem_connection_options +0x7e2c 036524 set0 connection_switch ,pdata +0x7e2d 036525 store 1 ,mem_connection_options +0x7e2e 036526 rtn +: 036530 check_51cmd_bb_reconn_cancel: +0x7e2f 036531 force page_length_timer ,queue +0x7e30 036532 branch timer_stop +: 036536 check_51cmd_dhkey_not_accept: +0x7e31 036537 call tid_set_reply +0x7e32 036538 jam lmp_dhkey_check ,mem_lmi_opcode2 +0x7e33 036539 branch parse_lmp_dhkey_check_reject +: 036542 ui_check_paring_button: +0x7e34 036543 fetch 1 ,mem_ui_state_map +0x7e35 036544 rtnbit0 ui_state_btn_down +0x7e36 036545 rtnbit0 ui_state_bt_reconnect +0x7e37 036546 branch check_51cmd_bb_reconn_cancel +: 036551 queue_init: +0x7e38 036552 fetch 2 ,mem_queue_ptr +0x7e39 036553 add pdata ,queue_offset_curr_num ,contw +0x7e3a 036554 setarg 0 +0x7e3b 036555 istore 3 ,contw +0x7e3c 036556 rtn +: 036560 queue_push: +0x7e3d 036561 call disable_user +0x7e3e 036562 call queue_full +0x7e3f 036563 rtn blank +0x7e40 036564 fetch 2 ,mem_queue_ptr +0x7e41 036565 add pdata ,queue_offset_curr_num ,regb +0x7e42 036566 ifetcht 1 ,regb +0x7e43 036567 increase 1 ,temp +0x7e44 036568 istoret 1 ,regb +0x7e45 036570 ifetcht 1 ,pdata +0x7e46 036571 copy temp ,loopcnt +0x7e47 036572 add pdata ,queue_offset_write_ptr ,regb +0x7e48 036573 ifetch 1 ,regb +0x7e49 036574 imul32 temp ,pdata +0x7e4a 036575 iadd contr ,contw +0x7e4b 036576 copy rega ,contr +: 036577 calc_queue_next_ptr: +0x7e4c 036578 call memcpy +0x7e4d 036579 call queue_get_size +0x7e4e 036580 pincrease -1 +0x7e4f 036581 ifetcht 1 ,regb +0x7e50 036582 increase 1 ,temp +0x7e51 036583 iand temp ,temp +0x7e52 036584 istoret 1 ,regb +0x7e53 036585 branch enable_user +: 036590 queue_pop: +0x7e54 036591 call disable_user +0x7e55 036592 call queue_empty +0x7e56 036593 rtn blank +0x7e57 036594 fetch 2 ,mem_queue_ptr +0x7e58 036595 add pdata ,queue_offset_curr_num ,regb +0x7e59 036596 ifetcht 1 ,regb +0x7e5a 036597 increase -1 ,temp +0x7e5b 036598 istoret 1 ,regb +0x7e5c 036599 ifetcht 1 ,pdata +0x7e5d 036600 copy temp ,loopcnt +0x7e5e 036601 add pdata ,queue_offset_read_ptr ,regb +0x7e5f 036602 ifetch 1 ,regb +0x7e60 036603 imul32 temp ,pdata +0x7e61 036604 iadd contr ,contr +0x7e62 036605 increase 1 ,contr +0x7e63 036606 copy rega ,contw +0x7e64 036607 branch calc_queue_next_ptr +: 036611 queue_empty: +0x7e65 036612 fetch 2 ,mem_queue_ptr +0x7e66 036613 add pdata ,queue_offset_curr_num ,contr +0x7e67 036614 ifetch 1 ,contr +0x7e68 036615 rtn +: 036618 queue_full: +0x7e69 036619 call queue_get_size +0x7e6a 036620 ifetcht 1 ,contr +0x7e6b 036621 isub temp ,pdata +0x7e6c 036622 rtn +: 036625 queue_get_size: +0x7e6d 036626 fetch 2 ,mem_queue_ptr +0x7e6e 036627 add pdata ,queue_offset_length ,contr +0x7e6f 036628 ifetch 1 ,contr +0x7e70 036629 rtn +: 036637 right_shift_n: +0x7e71 036638 sub loopcnt ,0 ,null +0x7e72 036639 rtn zero +: 036640 right_shift_n_loop: +0x7e73 036641 rshift pdata ,pdata +0x7e74 036642 loop right_shift_n_loop +0x7e75 036643 rtn +: 036646 left_shift_n: +0x7e76 036647 force 1 ,pdata +0x7e77 036648 sub loopcnt ,0 ,null +0x7e78 036649 rtn zero +: 036650 left_shift_n_loop: +0x7e79 036651 lshift pdata ,pdata +0x7e7a 036652 loop left_shift_n_loop +0x7e7b 036653 rtn +: 036654 push_stack: +0x7e7c 036655 deposit contw +0x7e7d 036656 store 2 ,mem_contw +0x7e7e 036657 storet 8 ,mem_temp +0x7e7f 036658 deposit timeup +0x7e80 036659 store 4 ,mem_timeup +0x7e81 036660 call push_stack_rega_b_c +0x7e82 036661 deposit contr +0x7e83 036662 store 2 ,mem_contr +0x7e84 036663 rtn +: 036665 push_stack_rega_b_c: +0x7e85 036666 deposit rega +0x7e86 036667 store 4 ,mem_rega +0x7e87 036668 deposit regb +0x7e88 036669 store 4 ,mem_regb +0x7e89 036670 deposit regc +0x7e8a 036671 store 3 ,mem_regc +0x7e8b 036672 rtn +: 036674 pop_stack: +0x7e8c 036675 fetcht 8 ,mem_temp +0x7e8d 036676 fetch 4 ,mem_timeup +0x7e8e 036677 iforce timeup +0x7e8f 036678 call pop_stack_rega_b_c +0x7e90 036679 fetch 2 ,mem_contw +0x7e91 036680 iforce contw +0x7e92 036681 fetch 2 ,mem_contr +0x7e93 036682 iforce contr +0x7e94 036683 rtn +: 036685 pop_stack_rega_b_c: +0x7e95 036686 fetch 4 ,mem_rega +0x7e96 036687 iforce rega +0x7e97 036688 fetch 4 ,mem_regb +0x7e98 036689 iforce regb +0x7e99 036690 fetch 3 ,mem_regc +0x7e9a 036691 iforce regc +0x7e9b 036692 rtn +: 036694 get_contw: +0x7e9c 036695 fetch 2 ,mem_contw +0x7e9d 036696 copy pdata ,contw +0x7e9e 036697 rtn +: 036698 get_contr: +0x7e9f 036699 fetch 2 ,mem_contr +0x7ea0 036700 copy pdata ,contr +0x7ea1 036701 rtn +: 036702 store_contw: +0x7ea2 036703 copy contw ,pdata +0x7ea3 036704 store 2 ,mem_contw +0x7ea4 036705 rtn +: 036706 store_contr: +0x7ea5 036707 copy contr ,pdata +0x7ea6 036708 store 2 ,mem_contr +0x7ea7 036709 rtn +: 036713 save_cont_pointers: +0x7ea8 036714 copy contw ,pdata +0x7ea9 036715 store 2 ,mem_hold_contw +0x7eaa 036716 copy contr ,pdata +0x7eab 036717 store 2 ,mem_hold_contr +0x7eac 036718 rtn +: 036719 load_cont_pointers: +0x7ead 036720 fetch 2 ,mem_hold_contw +0x7eae 036721 copy pdata ,contw +0x7eaf 036722 fetch 2 ,mem_hold_contr +0x7eb0 036723 copy pdata ,contr +0x7eb1 036724 rtn +: 036726 memcpy96: +0x7eb2 036727 call memcpy32 +: 036728 memcpy64: +0x7eb3 036729 call memcpy32 +0x7eb4 036730 branch memcpy32 +: 036731 memcpy12: +0x7eb5 036732 call memcpy8 +: 036733 memcpy4: +0x7eb6 036734 ifetch 4 ,contr +0x7eb7 036735 istore 4 ,contw +0x7eb8 036736 rtn +: 036737 memcpy8: +0x7eb9 036738 ifetch 8 ,contr +0x7eba 036739 istore 8 ,contw +0x7ebb 036740 rtn +: 036742 memcpy48: +0x7ebc 036743 call memcpy16 +: 036744 memcpy32: +0x7ebd 036745 call memcpy8 +: 036746 memcpy24: +0x7ebe 036747 call memcpy8 +: 036748 memcpy16: +0x7ebf 036749 call memcpy8 +0x7ec0 036750 branch memcpy8 +: 036754 delay_10ms: +0x7ec1 036755 arg 10 ,loopcnt +: 036756 delay_ms_wait: +0x7ec2 036757 nop 12000 +0x7ec3 036758 loop delay_ms_wait +0x7ec4 036759 rtn +: 036761 bn_zero: +0x7ec5 036762 force 3 ,loopcnt +: 036763 memset0: +0x7ec6 036764 force 0 ,pdata +: 036765 memset8: +0x7ec7 036766 istore 8 ,contw +0x7ec8 036767 loop memset8 +0x7ec9 036768 rtn +: 036770 memset0_8: +0x7eca 036771 force 0 ,pdata +0x7ecb 036772 istore 8 ,contw +0x7ecc 036773 rtn +: 036774 memset0_4: +0x7ecd 036775 force 0 ,pdata +0x7ece 036776 istore 4 ,contw +0x7ecf 036777 rtn +: 036779 clear_mem_256: +0x7ed0 036780 force 4 ,loopcnt +0x7ed1 036781 branch memset0 +: 036782 clear_mem_512: +0x7ed2 036783 force 8 ,loopcnt +0x7ed3 036784 branch memset0 +: 036786 clear_mem: +0x7ed4 036787 deposit loopcnt +0x7ed5 036788 rtn blank +0x7ed6 036789 setarg 0 +: 036790 clear_mem_loop: +0x7ed7 036791 istore 1 ,contw +0x7ed8 036792 loop clear_mem_loop +0x7ed9 036793 rtn +: 036796 clear_temp_block: +0x7eda 036797 arg 32 ,loopcnt +0x7edb 036798 arg mem_temp_block0 ,contw +0x7edc 036799 branch clear_mem +: 036801 xor_loop: +0x7edd 036802 ifetch 4 ,regc +0x7ede 036803 ifetcht 4 ,rega +0x7edf 036804 ixor temp ,pdata +0x7ee0 036805 istore 4 ,contw +0x7ee1 036806 increase 4 ,rega +0x7ee2 036807 increase 4 ,regc +0x7ee3 036808 loop xor_loop +0x7ee4 036809 rtn +: 036813 inverse_data: +0x7ee5 036814 bpatchx patch3f_3 ,mem_patch3f +0x7ee6 036815 copy loopcnt ,pdata +0x7ee7 036816 sub pdata ,1 ,null +0x7ee8 036817 rtn positive +0x7ee9 036818 iadd rega ,regb +0x7eea 036819 increase -1 ,regb +0x7eeb 036820 rshift loopcnt ,loopcnt +: 036821 inverse_loop: +0x7eec 036822 ifetcht 1 ,rega +0x7eed 036823 ifetch 1 ,regb +0x7eee 036824 istore 1 ,rega +0x7eef 036825 istoret 1 ,regb +0x7ef0 036826 increase -1 ,regb +0x7ef1 036827 increase 1 ,rega +0x7ef2 036828 loop inverse_loop +0x7ef3 036829 rtn +: 036832 memcpy_fast: +0x7ef4 036833 deposit loopcnt +0x7ef5 036834 rtn blank +: 036835 memcpy_fast_loop: +0x7ef6 036836 increase -8 ,loopcnt +0x7ef7 036837 call memcpy8 ,positive +0x7ef8 036838 rtn zero +0x7ef9 036839 branch memcpy_fast_loop ,positive +0x7efa 036840 increase 8 ,loopcnt +: 036841 memcpy_fast_loop_four: +0x7efb 036842 increase -4 ,loopcnt +0x7efc 036843 call memcpy4 ,positive +0x7efd 036844 rtn zero +0x7efe 036845 branch memcpy_fast_loop_four ,positive +0x7eff 036846 increase 4 ,loopcnt +0x7f00 036847 branch memcpy +: 036849 memcpy: +0x7f01 036850 deposit loopcnt +0x7f02 036851 rtn blank +: 036852 memcpy_loop: +0x7f03 036853 ifetch 1 ,contr +0x7f04 036854 istore 1 ,contw +0x7f05 036855 loop memcpy_loop +0x7f06 036856 rtn +: 036858 timer_stop: +0x7f07 036859 setarg 0 +: 036860 timer_init: +0x7f08 036861 rshift clkn_bt ,temp +0x7f09 036862 storet 4 ,mem_last_clkn +0x7f0a 036863 arg mem_timers ,contw +0x7f0b 036864 iforce temp +0x7f0c 036865 lshift queue ,pdata +0x7f0d 036866 iadd contw ,contw +0x7f0e 036867 istoret 2 ,contw +0x7f0f 036868 bpatchx patch3f_4 ,mem_patch3f +0x7f10 036869 rtn +: 036871 timer_check_timeout: +0x7f11 036872 arg 0x800 ,timeup +0x7f12 036873 lshift16 timeup ,timeup +0x7f13 036874 iadd timeup ,pdata +0x7f14 036875 rtn +: 036878 timer_reinit: +0x7f15 036879 arg 0 ,queue +: 036880 timer_check: +0x7f16 036881 bpatchx patch3f_5 ,mem_patch3f +0x7f17 036882 fetcht 4 ,mem_last_clkn +0x7f18 036883 rshift clkn_bt ,pdata +0x7f19 036884 store 4 ,mem_last_clkn +0x7f1a 036885 isub temp ,null +0x7f1b 036886 ncall timer_check_timeout ,positive +0x7f1c 036887 isub temp ,timeup +0x7f1d 036888 copy timeup ,temp +0x7f1e 036889 arg mem_timers ,contr +0x7f1f 036890 copy contr ,contw +0x7f20 036891 arg 16 ,loopcnt +: 036892 timer_loop: +0x7f21 036893 ifetch 2 ,contr +0x7f22 036894 isub temp ,pdata +0x7f23 036895 branch timer_counting ,positive +0x7f24 036896 force 0 ,pdata +: 036897 timer_counting: +0x7f25 036898 istore 2 ,contw +0x7f26 036899 loop timer_loop +0x7f27 036900 arg mem_timers ,contr +0x7f28 036901 lshift queue ,pdata +0x7f29 036902 iadd contr ,contr +0x7f2a 036903 ifetch 2 ,contr +0x7f2b 036904 rtn +: 036909 clk_add: +0x7f2c 036910 iadd temp ,temp +0x7f2d 036911 copy temp ,loopcnt +0x7f2e 036912 setarg 3750 +0x7f2f 036913 isub loopcnt ,pdata +0x7f30 036914 rtn positive +0x7f31 036915 sub pdata ,0 ,pdata +0x7f32 036916 rshift16 temp ,temp +0x7f33 036917 increase 1 ,temp +0x7f34 036918 lshift16 temp ,temp +0x7f35 036919 ior temp ,temp +0x7f36 036920 rtn +: 036922 clk_diff_rt: +0x7f37 036923 call clk_diff +0x7f38 036924 branch clk2rt +: 036927 clk_diff: +0x7f39 036928 disable user +0x7f3a 036929 isub temp ,pdata +0x7f3b 036930 branch clk_diff_pos ,positive +0x7f3c 036931 enable user +0x7f3d 036932 sub pdata ,0 ,pdata +: 036933 clk_diff_pos: +0x7f3e 036934 rtnbit0 15 +0x7f3f 036935 arg -61786 ,temp +0x7f40 036936 iadd temp ,pdata +0x7f41 036937 set0 64 ,pdata +0x7f42 036938 rtn +: 036940 clk2rt: +0x7f43 036941 iforce contr +0x7f44 036942 rshift16 pdata ,pdata +0x7f45 036943 arg 3750 ,temp +0x7f46 036944 imul32 temp ,pdata +0x7f47 036945 iadd contr ,pdata +0x7f48 036946 rtn +: 036949 clk2lpo: +0x7f49 036950 lshift8 pdata ,pdata +0x7f4a 036951 lshift4 pdata ,pdata +0x7f4b 036952 fetcht 3 ,mem_clks_per_lpo +0x7f4c 036953 idiv temp +0x7f4d 036954 call wait_div_end +0x7f4e 036955 quotient temp +0x7f4f 036956 rtn +: 036959 clk2bt: +0x7f50 036960 arg 3750 ,temp +0x7f51 036961 idiv temp +0x7f52 036962 call wait_div_end +0x7f53 036963 quotient pdata +0x7f54 036964 lshift16 pdata ,pdata +: 036965 clk2bt_next: +0x7f55 036966 remainder temp +0x7f56 036967 ior temp ,temp +0x7f57 036968 rtn +: 036975 string2dec_from_uart: +0x7f58 036976 arg 0 ,temp +: 036977 string2dec_from_uart_done: +0x7f59 036978 copy temp ,regc +0x7f5a 036979 ifetch 1 ,contru +0x7f5b 036980 call uchar2dialog +0x7f5c 036981 copy regc ,temp +0x7f5d 036982 call swap +0x7f5e 036983 arg 10 ,regb +0x7f5f 036984 imul32 regb ,pdata +0x7f60 036985 iadd temp ,pdata +0x7f61 036986 copy pdata ,temp +0x7f62 036987 loop string2dec_from_uart_done +0x7f63 036988 rtn +: 036992 uchar2dialog: +0x7f64 036993 arg 0x3a ,temp +0x7f65 036994 isub temp ,null +0x7f66 036995 nbranch uchar2dialog_number ,positive +0x7f67 036996 arg 0x61 ,temp +0x7f68 036997 isub temp ,null +0x7f69 036998 branch uchar2dialog_a2f ,positive +0x7f6a 036999 arg 0x37 ,temp +0x7f6b 037000 isub temp ,pdata +0x7f6c 037001 rtn +: 037002 uchar2dialog_number: +0x7f6d 037003 arg 0x30 ,temp +0x7f6e 037004 isub temp ,pdata +0x7f6f 037005 rtn +: 037006 uchar2dialog_a2f: +0x7f70 037007 arg 0x57 ,temp +0x7f71 037008 isub temp ,pdata +0x7f72 037009 rtn +: 037011 pn9: +0x7f73 037012 copy temp ,alarm +0x7f74 037013 setarg 0x1ff +0x7f75 037014 force 0 ,regb +: 037015 pn9_loop: +0x7f76 037016 rshift3 pdata ,rega +0x7f77 037017 rshift rega ,rega +0x7f78 037018 ixor rega ,rega +0x7f79 037019 isolate1 0 ,rega +0x7f7a 037020 setflag true ,9 ,pdata +0x7f7b 037021 rshift temp ,temp +0x7f7c 037022 isolate1 0 ,pdata +0x7f7d 037023 setflag true ,7 ,temp +0x7f7e 037024 rshift pdata ,pdata +0x7f7f 037025 increase 1 ,regb +0x7f80 037026 compare 0 ,regb ,0x7 +0x7f81 037027 nbranch pn9_loop ,true +0x7f82 037028 istoret 1 ,contw +0x7f83 037029 loop pn9_loop +0x7f84 037030 copy alarm ,temp +0x7f85 037031 rtn +: 037034 wait_div_end: +0x7f86 037035 rtn modone +0x7f87 037036 branch wait_div_end +: 037046 compare_loop: +: 037047 string_compare: +0x7f88 037048 ifetch 1 ,rega +0x7f89 037049 ifetcht 1 ,regb +0x7f8a 037050 isub temp ,null +0x7f8b 037051 nrtn zero +0x7f8c 037052 increase 1 ,rega +0x7f8d 037053 increase 1 ,regb +0x7f8e 037054 loop string_compare +0x7f8f 037055 force 0 ,null +0x7f90 037056 rtn +: 037059 ceiling: +0x7f91 037060 isub temp ,null +0x7f92 037061 nrtn positive +0x7f93 037062 deposit temp +0x7f94 037063 rtn +: 037065 swap: +0x7f95 037066 iadd temp ,pdata +0x7f96 037067 isub temp ,temp +0x7f97 037068 isub temp ,pdata +0x7f98 037069 rtn +: 037071 clean_mem: +0x7f99 037072 arg 0x200 ,loopcnt +0x7f9a 037073 arg 0x4000 ,contw +0x7f9b 037074 branch memset0 +: 037077 callback_func: +0x7f9c 037078 rtn blank +0x7f9d 037079 copy pdata ,pc +: 037082 wait_uarttx: +0x7f9e 037083 hfetch 2 ,core_uart_txitems +0x7f9f 037084 nbranch wait_uarttx ,blank +0x7fa0 037085 rtn +: 037087 ice_break: +0x7fa1 037088 jam 0x1 ,core_ice_ctrl +0x7fa2 037089 rtn +: 037091 ice_setbp: +0x7fa3 037092 hstore 2 ,core_ice_break0 +0x7fa4 037093 hfetch 1 ,core_ice_ctrl +0x7fa5 037094 set1 4 ,pdata +0x7fa6 037095 hstore 1 ,core_ice_ctrl +0x7fa7 037096 rtn +: 037097 ice_setbp2: +0x7fa8 037098 hstore 2 ,core_ice_break1 +0x7fa9 037099 hfetch 1 ,core_ice_ctrl +0x7faa 037100 set1 6 ,pdata +0x7fab 037101 hstore 1 ,core_ice_ctrl +0x7fac 037102 rtn +: 037104 ice_set_write_bp: +0x7fad 037105 hstore 2 ,core_ice_break0 +0x7fae 037106 jam 0x30 ,core_ice_ctrl +0x7faf 037107 rtn +: 037111 test_enable_white: +0x7fb0 037112 hfetch 1 ,core_config +0x7fb1 037113 set0 whiteoff_bit ,pdata +0x7fb2 037114 hstore 1 ,core_config +0x7fb3 037115 rtn +: 037117 check_uart_tx_buff: +0x7fb4 037118 hfetch 2 ,core_uart_txitems +0x7fb5 037119 arg uart_air_control_threshold ,temp +: 037120 pdata_sub_temp: +0x7fb6 037121 isub temp ,null +0x7fb7 037122 rtn +: 037128 fifo_in: +0x7fb8 037129 bpatchx patch3f_6 ,mem_patch3f +0x7fb9 037130 ifetcht util_fifo_len ,rega +0x7fba 037131 and temp ,0xff ,pdata +0x7fbb 037132 nbranch fifo_in_push ,blank +0x7fbc 037133 rshift8 temp ,pdata +0x7fbd 037134 istore util_fifo_len ,rega +: 037135 fifo_in_push: +0x7fbe 037136 increase util_fifo_len + util_fifo_offset ,rega +0x7fbf 037137 ifetch 1 ,rega +0x7fc0 037138 nbranch assert ,blank +0x7fc1 037139 fetch 1 ,mem_fifo_temp +0x7fc2 037140 istore 1 ,rega +0x7fc3 037141 rtn +: 037146 fifo_out: +0x7fc4 037147 bpatchx patch3f_7 ,mem_patch3f +0x7fc5 037148 arg util_fifo_len ,loopcnt +0x7fc6 037149 ifetch util_fifo_len ,rega +0x7fc7 037150 rtn blank +: 037151 fifo_out_loop: +0x7fc8 037152 ifetch 1 ,rega +0x7fc9 037153 nbranch fifo_out_end ,blank +0x7fca 037154 increase 1 ,rega +0x7fcb 037155 loop fifo_out_loop +0x7fcc 037156 branch assert +: 037157 fifo_out_end: +0x7fcd 037158 arg 0 ,temp +0x7fce 037159 istoret 1 ,rega +0x7fcf 037160 rtn +: 037165 fifo_is_empty: +0x7fd0 037166 ifetch util_fifo_len ,rega +0x7fd1 037167 rtn +: 037172 fifo_is_full: +0x7fd2 037173 ifetch 1 ,rega +0x7fd3 037174 rtn +: 037177 fifo_is_near_full: +0x7fd4 037178 ifetch 2 ,rega +0x7fd5 037179 rtn +: 037183 fifo_content_count: +0x7fd6 037184 arg 0 ,temp +: 037185 fifo_content_count_loop: +0x7fd7 037186 fetch 1 ,contr +0x7fd8 037187 loop fifo_content_count_loop ,blank +0x7fd9 037188 increase 1 ,temp +0x7fda 037189 loop fifo_content_count_loop +0x7fdb 037190 copy temp ,pdata +0x7fdc 037191 rtn +: 037193 not_greater_than: +0x7fdd 037194 isub temp ,null +0x7fde 037195 nrtn positive +0x7fdf 037196 copy temp ,pdata +0x7fe0 037197 rtn +: 037200 disable_positive: +0x7fe1 037201 force -1 ,null +0x7fe2 037202 rtn +: 037203 enable_positive: +: 037204 disable_zero: +0x7fe3 037205 force 1 ,null +0x7fe4 037206 rtn +: 037207 enable_zero: +0x7fe5 037208 force 0 ,null +0x7fe6 037209 rtn +: 037211 enable_user: +0x7fe7 037212 enable user +0x7fe8 037213 rtn +: 037215 disable_user: +0x7fe9 037216 disable user +0x7fea 037217 rtn +: 037219 enable_user2: +0x7feb 037220 enable user2 +0x7fec 037221 rtn +: 037223 disable_user2: +0x7fed 037224 disable user2 +0x7fee 037225 rtn +: 037227 disable_blank: +0x7fef 037228 setarg 1 +0x7ff0 037229 rtn +: 037231 enable_blank: +0x7ff1 037232 setarg 0 +0x7ff2 037233 rtn +: 037236 reverse_byte: +0x7ff3 037237 copy loopcnt ,pdata +0x7ff4 037238 rtn blank +0x7ff5 037239 copy contr ,pdata +0x7ff6 037240 iadd loopcnt ,pdata +0x7ff7 037241 increase -1 ,pdata +0x7ff8 037242 copy pdata ,contr +: 037243 reverse_loop: +0x7ff9 037244 ifetch 1 ,contr +0x7ffa 037245 increase -2 ,contr +0x7ffb 037246 istore 1 ,contw +0x7ffc 037247 loop reverse_loop +0x7ffd 037248 rtn org 0x10001 -: 037223 z_entrance0: -0x10001 037224 beq zcode_00 ,z_page_wait_fhs_reply_ok -0x10002 037225 rtn -: 037227 z_page_wait_fhs_reply_ok: -0x10003 037228 fetch 1 ,mem_page_rcv_fhs -0x10004 037229 increase 1 ,pdata -0x10005 037230 store 1 ,mem_page_rcv_fhs -0x10006 037231 call prepare_newconn -: 037232 z_master_newconn_loop: -0x10007 037233 set1 mark_first_packet ,mark -0x10008 037234 call master_newconn_once -0x10009 037235 branch z_newconn_poll_responded ,sync -0x1000a 037236 set0 mark_first_packet ,mark -0x1000b 037237 call new_conn_timeout -0x1000c 037238 nbranch z_master_newconn_loop ,blank -0x1000d 037239 branch page_restart -: 037240 z_newconn_poll_responded: -0x1000e 037241 set0 mark_first_packet ,mark -0x1000f 037242 branch newconn_poll_responded +: 037253 z_entrance0: +0x10001 037254 beq zcode_00 ,z_page_wait_fhs_reply_ok +0x10002 037255 rtn +: 037257 z_page_wait_fhs_reply_ok: +0x10003 037258 fetch 1 ,mem_page_rcv_fhs +0x10004 037259 increase 1 ,pdata +0x10005 037260 store 1 ,mem_page_rcv_fhs +0x10006 037261 call prepare_newconn +: 037262 z_master_newconn_loop: +0x10007 037263 set1 mark_first_packet ,mark +0x10008 037264 call master_newconn_once +0x10009 037265 branch z_newconn_poll_responded ,sync +0x1000a 037266 set0 mark_first_packet ,mark +0x1000b 037267 call new_conn_timeout +0x1000c 037268 nbranch z_master_newconn_loop ,blank +0x1000d 037269 branch page_restart +: 037270 z_newconn_poll_responded: +0x1000e 037271 set0 mark_first_packet ,mark +0x1000f 037272 branch newconn_poll_responded org 0x20001 -: 037249 z_entrance1: -0x20001 037250 beq zcode_10 ,z_mouse_bb_disconnected -0x20002 037251 beq zcode_11 ,z_hid_rx_process -0x20003 037252 rtn -: 037254 z_mouse_bb_disconnected: -0x20004 037255 jam 0 ,mem_mouse_enter_sniff_count -0x20005 037256 jam 0x0e ,mem_sniff_param_interval -0x20006 037257 call mouse_bb_discon_clear_stack -0x20007 037258 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x20008 037259 bbit1 app_disc_ble ,z_mouse4_0_event_bb_disconn -0x20009 037260 bbit1 app_disc_by_button ,app_disconn_reason_clear -0x2000a 037261 bbit1 app_disc_after_pairing ,z_mouse_event_light_state_pairing -0x2000b 037262 bbit1 app_disc_after_reconn ,z_mouse_event_light_state_hibernate -0x2000c 037263 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate -0x2000d 037264 branch mouse_start_discovery -: 037266 z_mouse4_0_event_bb_disconn: -0x2000e 037267 call mouse_le_clean_connect_flag -0x2000f 037268 fetch app_disc_rsn_size ,mem_app_disconn_reason -0x20010 037269 bbit1 app_disc_pb_button ,p_mouse_select_device_button_up -0x20011 037270 branch mouse4_0_event_bb_disconn + 2 -: 037272 z_mouse_event_light_state_pairing: -0x20012 037273 bbit1 app_disc_after_handshake ,z_mouse_event_light_state_hibernate -0x20013 037274 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate -0x20014 037275 branch mouse_start_discovery -: 037276 z_mouse_event_light_state_hibernate: -0x20015 037277 fetch 2 ,mem_ui_state_map -0x20016 037278 bbit1 ui_state_btn_down ,mouse_start_discovery -0x20017 037279 call app_disconn_reason_clear -0x20018 037280 call p_mouse_check_key_gpio -0x20019 037281 rtn true -0x2001a 037282 branch app_bb_hibernate -: 037285 z_hid_rx_process: -0x2001b 037286 fetch 2 ,mem_l2cap_payload_ptr -0x2001c 037287 copy pdata ,contr -0x2001d 037288 ifetch 1 ,contr -0x2001e 037289 store 1 ,mem_l2cap_rcv -0x2001f 037290 and pdata ,0x0f ,temp -0x20020 037291 rshift4 pdata ,pdata -0x20021 037292 beq hid_type_set_protocol ,z_hid_rx_set_protocol -0x20022 037293 beq hid_type_control ,z_hid_rx_process_hid_control -0x20023 037294 branch hid_rx_process + 6 -: 037295 z_hid_rx_set_protocol: -0x20024 037296 call hid_rx_process_handshake -0x20025 037297 jam 0 ,mem_mouse_bt_boot_mode -0x20026 037298 fetch 1 ,mem_l2cap_rcv -0x20027 037299 isolate1 0 ,pdata -0x20028 037300 rtn true -0x20029 037301 jam 1 ,mem_mouse_bt_boot_mode -0x2002a 037302 rtn -: 037304 z_hid_rx_process_hid_control: -0x2002b 037305 copy temp ,pdata -0x2002c 037306 beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug -0x2002d 037307 branch hid_rx_process_hid_control + 2 +: 037279 z_entrance1: +0x20001 037280 beq zcode_10 ,z_mouse_bb_disconnected +0x20002 037281 beq zcode_11 ,z_hid_rx_process +0x20003 037282 rtn +: 037284 z_mouse_bb_disconnected: +0x20004 037285 jam 0 ,mem_mouse_enter_sniff_count +0x20005 037286 jam 0x0e ,mem_sniff_param_interval +0x20006 037287 call mouse_bb_discon_clear_stack +0x20007 037288 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x20008 037289 bbit1 app_disc_ble ,z_mouse4_0_event_bb_disconn +0x20009 037290 bbit1 app_disc_by_button ,app_disconn_reason_clear +0x2000a 037291 bbit1 app_disc_after_pairing ,z_mouse_event_light_state_pairing +0x2000b 037292 bbit1 app_disc_after_reconn ,z_mouse_event_light_state_hibernate +0x2000c 037293 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate +0x2000d 037294 branch mouse_start_discovery +: 037296 z_mouse4_0_event_bb_disconn: +0x2000e 037297 call mouse_le_clean_connect_flag +0x2000f 037298 fetch app_disc_rsn_size ,mem_app_disconn_reason +0x20010 037299 bbit1 app_disc_pb_button ,p_mouse_select_device_button_up +0x20011 037300 branch mouse4_0_event_bb_disconn + 2 +: 037302 z_mouse_event_light_state_pairing: +0x20012 037303 bbit1 app_disc_after_handshake ,z_mouse_event_light_state_hibernate +0x20013 037304 bbit1 app_disc_after_sniff ,z_mouse_event_light_state_hibernate +0x20014 037305 branch mouse_start_discovery +: 037306 z_mouse_event_light_state_hibernate: +0x20015 037307 fetch 2 ,mem_ui_state_map +0x20016 037308 bbit1 ui_state_btn_down ,mouse_start_discovery +0x20017 037309 call app_disconn_reason_clear +0x20018 037310 call p_mouse_check_key_gpio +0x20019 037311 rtn true +0x2001a 037312 branch app_bb_hibernate +: 037315 z_hid_rx_process: +0x2001b 037316 fetch 2 ,mem_l2cap_payload_ptr +0x2001c 037317 copy pdata ,contr +0x2001d 037318 ifetch 1 ,contr +0x2001e 037319 store 1 ,mem_l2cap_rcv +0x2001f 037320 and pdata ,0x0f ,temp +0x20020 037321 rshift4 pdata ,pdata +0x20021 037322 beq hid_type_set_protocol ,z_hid_rx_set_protocol +0x20022 037323 beq hid_type_control ,z_hid_rx_process_hid_control +0x20023 037324 branch hid_rx_process + 6 +: 037325 z_hid_rx_set_protocol: +0x20024 037326 call hid_rx_process_handshake +0x20025 037327 jam 0 ,mem_mouse_bt_boot_mode +0x20026 037328 fetch 1 ,mem_l2cap_rcv +0x20027 037329 isolate1 0 ,pdata +0x20028 037330 rtn true +0x20029 037331 jam 1 ,mem_mouse_bt_boot_mode +0x2002a 037332 rtn +: 037334 z_hid_rx_process_hid_control: +0x2002b 037335 copy temp ,pdata +0x2002c 037336 beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug +0x2002d 037337 branch hid_rx_process_hid_control + 2 org 0x30001 -: 037311 z_entrance2: -0x30001 037312 beq zcode_20 ,z_send_lmp_escape -0x30002 037313 beq zcode_21 ,z_send_lmp_accepted -0x30003 037314 beq zcode_22 ,z_send_lmp_detach -0x30004 037315 beq zcode_23 ,z_mouse4_0_check_reconn_target -0x30005 037316 rtn -: 037318 z_mouse4_0_check_reconn_target: -0x30006 037319 jam 1 ,mem_le_send_security_request_flag -0x30007 037320 call p_mouse_mode_bt_device_multi_led_on -0x30008 037321 jam 1 ,mem_mouse_le_reconnect_flag -0x30009 037322 fetch 2 ,mem_mouse_direct_timeout -0x3000a 037323 fetcht 1 ,mem_mouse_fast_conn_flag -0x3000b 037324 sub temp ,0xff ,null -0x3000c 037325 nbranch z_mouse4_0_check_reconn_target_next ,zero -0x3000d 037326 setarg 0x0258 -: 037327 z_mouse4_0_check_reconn_target_next: -0x3000e 037328 store 2 ,mem_mouse_direct_timer -0x3000f 037329 call app_lpm_mult_disable -0x30010 037330 call p_le_check_adv_flag -0x30011 037331 setarg adv_flag_bredr_not_supported -0x30012 037332 istore 1 ,contr -0x30013 037333 arg mem_le_scan_data ,contr -0x30014 037334 call p_le_adv_data_update -0x30015 037335 branch check_51cmd_adv -: 037337 z_send_lmp_escape: -0x30016 037338 fetch 1 ,mem_lmp_to_send -0x30017 037339 beq lmp_ext_features_res ,z_send_lmpext_features_res -0x30018 037340 beq lmp_ext_features_req ,z_send_lmpext_features_req -0x30019 037341 branch send_lmp_escape -: 037342 z_send_lmpext_features_res: -0x3001a 037343 call z_check_ssp_enable -0x3001b 037344 fetch 1 ,mem_lmp_to_send -0x3001c 037345 branch send_lmpext_features_res -: 037346 z_send_lmpext_features_req: -0x3001d 037347 call z_check_ssp_enable -0x3001e 037348 fetch 1 ,mem_lmp_to_send -0x3001f 037349 branch send_lmpext_features_req -: 037350 z_check_ssp_enable: -0x30020 037351 fetch 1 ,mem_ssp_enable -0x30021 037352 branch ssp_disable ,blank -0x30022 037353 branch ssp_enable -: 037355 z_send_lmp_detach: -0x30023 037356 call send_lmp_detach -0x30024 037357 fetch 1 ,mem_mouse_bt_reconnect_flag -0x30025 037358 rtn blank -0x30026 037359 fetch 1 ,mem_op -0x30027 037360 set0 op_disconn ,pdata -0x30028 037361 store 1 ,mem_op -0x30029 037362 branch p_mouse_sensor_powerdown -: 037364 z_send_lmp_accepted: -0x3002a 037365 force 2 ,pdata -0x3002b 037366 call msg_send_lmp -0x3002c 037367 fetch 1 ,mem_lmi_opcode -0x3002d 037368 istore 1 ,contw -0x3002e 037369 store 1 ,mem_lmi_opcode_temp -0x3002f 037370 call send_lmp_follow -0x30030 037371 fetch 1 ,mem_lmi_opcode_temp -0x30031 037372 beq lmp_max_slot_req ,z_send_lmp_accepted_max_slot_req -0x30032 037373 branch send_lmp_accepted + 7 -: 037375 z_send_lmp_accepted_max_slot_req: -0x30033 037376 fetch 1 ,mem_bt_rcvd_switch_req_accept -0x30034 037377 rtn blank -0x30035 037378 jam 0 ,mem_bt_rcvd_switch_req_accept -0x30036 037379 fetch 1 ,mem_bt_send_lmp_setup_complete -0x30037 037380 rtnne 2 -0x30038 037381 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch -0x30039 037382 copy clkn_bt ,pdata -0x3003a 037383 store 4 ,mem_aurand_send_delay_time -0x3003b 037384 rtn +: 037341 z_entrance2: +0x30001 037342 beq zcode_20 ,z_send_lmp_escape +0x30002 037343 beq zcode_21 ,z_send_lmp_accepted +0x30003 037344 beq zcode_22 ,z_send_lmp_detach +0x30004 037345 beq zcode_23 ,z_mouse4_0_check_reconn_target +0x30005 037346 rtn +: 037348 z_mouse4_0_check_reconn_target: +0x30006 037349 jam 1 ,mem_le_send_security_request_flag +0x30007 037350 call p_mouse_mode_bt_device_multi_led_on +0x30008 037351 jam 1 ,mem_mouse_le_reconnect_flag +0x30009 037352 fetch 2 ,mem_mouse_direct_timeout +0x3000a 037353 fetcht 1 ,mem_mouse_fast_conn_flag +0x3000b 037354 sub temp ,0xff ,null +0x3000c 037355 nbranch z_mouse4_0_check_reconn_target_next ,zero +0x3000d 037356 setarg 0x0258 +: 037357 z_mouse4_0_check_reconn_target_next: +0x3000e 037358 store 2 ,mem_mouse_direct_timer +0x3000f 037359 call app_lpm_mult_disable +0x30010 037360 call p_le_check_adv_flag +0x30011 037361 setarg adv_flag_bredr_not_supported +0x30012 037362 istore 1 ,contr +0x30013 037363 arg mem_le_scan_data ,contr +0x30014 037364 call p_le_adv_data_update +0x30015 037365 branch check_51cmd_adv +: 037367 z_send_lmp_escape: +0x30016 037368 fetch 1 ,mem_lmp_to_send +0x30017 037369 beq lmp_ext_features_res ,z_send_lmpext_features_res +0x30018 037370 beq lmp_ext_features_req ,z_send_lmpext_features_req +0x30019 037371 branch send_lmp_escape +: 037372 z_send_lmpext_features_res: +0x3001a 037373 call z_check_ssp_enable +0x3001b 037374 fetch 1 ,mem_lmp_to_send +0x3001c 037375 branch send_lmpext_features_res +: 037376 z_send_lmpext_features_req: +0x3001d 037377 call z_check_ssp_enable +0x3001e 037378 fetch 1 ,mem_lmp_to_send +0x3001f 037379 branch send_lmpext_features_req +: 037380 z_check_ssp_enable: +0x30020 037381 fetch 1 ,mem_ssp_enable +0x30021 037382 branch ssp_disable ,blank +0x30022 037383 branch ssp_enable +: 037385 z_send_lmp_detach: +0x30023 037386 call send_lmp_detach +0x30024 037387 fetch 1 ,mem_mouse_bt_reconnect_flag +0x30025 037388 rtn blank +0x30026 037389 fetch 1 ,mem_op +0x30027 037390 set0 op_disconn ,pdata +0x30028 037391 store 1 ,mem_op +0x30029 037392 branch p_mouse_sensor_powerdown +: 037394 z_send_lmp_accepted: +0x3002a 037395 force 2 ,pdata +0x3002b 037396 call msg_send_lmp +0x3002c 037397 fetch 1 ,mem_lmi_opcode +0x3002d 037398 istore 1 ,contw +0x3002e 037399 store 1 ,mem_lmi_opcode_temp +0x3002f 037400 call send_lmp_follow +0x30030 037401 fetch 1 ,mem_lmi_opcode_temp +0x30031 037402 beq lmp_max_slot_req ,z_send_lmp_accepted_max_slot_req +0x30032 037403 branch send_lmp_accepted + 7 +: 037405 z_send_lmp_accepted_max_slot_req: +0x30033 037406 fetch 1 ,mem_bt_rcvd_switch_req_accept +0x30034 037407 rtn blank +0x30035 037408 jam 0 ,mem_bt_rcvd_switch_req_accept +0x30036 037409 fetch 1 ,mem_bt_send_lmp_setup_complete +0x30037 037410 rtnne 2 +0x30038 037411 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch +0x30039 037412 copy clkn_bt ,pdata +0x3003a 037413 store 4 ,mem_aurand_send_delay_time +0x3003b 037414 rtn org 0x40001 -: 037389 z_entrance3: -0x40001 037390 beq zcode_30 ,z_process_conn_sm -0x40002 037391 rtn -: 037393 z_process_conn_sm: -0x40003 037394 call lmo_fifo_check -0x40004 037395 nrtn blank -: 037396 z_process_conn_sm_continue: -0x40005 037397 fetch 1 ,mem_conn_sm -0x40006 037398 rtn blank -0x40007 037399 beq conn_sm_send_conn_req ,z_host_create_conn_send_conn_req -0x40008 037400 beq conn_sm_wait_switch_after_host_connection ,z_host_creat_conn_wait_switch -0x40009 037401 branch process_conn_sm_continue + 2 -: 037404 z_host_creat_conn_wait_switch: -0x4000a 037405 fetch 1 ,mem_switch_flag -0x4000b 037406 rtneq switch_flag_init -0x4000c 037407 beq switch_flag_accept ,z_host_create_conn_switch_accept -0x4000d 037408 branch host_creat_conn_wait_switch + 3 -: 037409 z_host_create_conn_switch_accept: -0x4000e 037410 rtn master -: 037411 z_host_create_conn_auth_pair: -0x4000f 037413 fetch 1 ,mem_connection_options -0x40010 037414 bbit1 connection_auth ,z_host_create_conn_auth_pair_true -0x40011 037415 branch host_create_conn_auth_pair + 1 -: 037416 z_host_create_conn_auth_pair_true: -0x40012 037417 fetch 1 ,mem_bt_send_lmp_setup_complete -0x40013 037418 beq 1 ,host_create_conn_auth_pair_true -0x40014 037420 fetch 1 ,mem_link_key_exists -0x40015 037421 branch host_create_conn_auth_pair_nokey ,blank -0x40016 037422 fetch 1 ,mem_lmp_conn_state -0x40017 037423 rtnbit0 sent_setup_complete -0x40018 037424 rtnbit0 received_setup_complete -0x40019 037425 fetch 1 ,mem_bt_send_max_slot_req_accept_after_switch -0x4001a 037426 rtn blank -0x4001b 037427 jam 0 ,mem_bt_send_max_slot_req_accept_after_switch -0x4001c 037428 fetch 4 ,mem_aurand_send_delay_time -0x4001d 037429 arg 20 ,temp -0x4001e 037430 iadd temp ,temp -0x4001f 037431 copy clkn_bt ,pdata -0x40020 037432 isub temp ,null -0x40021 037433 nbranch z_bt_send_max_slot_req_accept_after_switch_wait ,positive -0x40022 037434 branch host_create_conn_auth -: 037436 z_bt_send_max_slot_req_accept_after_switch_wait: -0x40023 037437 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch -0x40024 037438 rtn -: 037440 z_host_create_conn_send_conn_req: -0x40025 037441 jam 20 ,mem_mouse_send_switch_req_timer -0x40026 037442 branch host_create_conn_send_conn_req +: 037419 z_entrance3: +0x40001 037420 beq zcode_30 ,z_process_conn_sm +0x40002 037421 rtn +: 037423 z_process_conn_sm: +0x40003 037424 call lmo_fifo_check +0x40004 037425 nrtn blank +: 037426 z_process_conn_sm_continue: +0x40005 037427 fetch 1 ,mem_conn_sm +0x40006 037428 rtn blank +0x40007 037429 beq conn_sm_send_conn_req ,z_host_create_conn_send_conn_req +0x40008 037430 beq conn_sm_wait_switch_after_host_connection ,z_host_creat_conn_wait_switch +0x40009 037431 branch process_conn_sm_continue + 2 +: 037434 z_host_creat_conn_wait_switch: +0x4000a 037435 fetch 1 ,mem_switch_flag +0x4000b 037436 rtneq switch_flag_init +0x4000c 037437 beq switch_flag_accept ,z_host_create_conn_switch_accept +0x4000d 037438 branch host_creat_conn_wait_switch + 3 +: 037439 z_host_create_conn_switch_accept: +0x4000e 037440 rtn master +: 037441 z_host_create_conn_auth_pair: +0x4000f 037443 fetch 1 ,mem_connection_options +0x40010 037444 bbit1 connection_auth ,z_host_create_conn_auth_pair_true +0x40011 037445 branch host_create_conn_auth_pair + 1 +: 037446 z_host_create_conn_auth_pair_true: +0x40012 037447 fetch 1 ,mem_bt_send_lmp_setup_complete +0x40013 037448 beq 1 ,host_create_conn_auth_pair_true +0x40014 037450 fetch 1 ,mem_link_key_exists +0x40015 037451 branch host_create_conn_auth_pair_nokey ,blank +0x40016 037452 fetch 1 ,mem_lmp_conn_state +0x40017 037453 rtnbit0 sent_setup_complete +0x40018 037454 rtnbit0 received_setup_complete +0x40019 037455 fetch 1 ,mem_bt_send_max_slot_req_accept_after_switch +0x4001a 037456 rtn blank +0x4001b 037457 jam 0 ,mem_bt_send_max_slot_req_accept_after_switch +0x4001c 037458 fetch 4 ,mem_aurand_send_delay_time +0x4001d 037459 arg 20 ,temp +0x4001e 037460 iadd temp ,temp +0x4001f 037461 copy clkn_bt ,pdata +0x40020 037462 isub temp ,null +0x40021 037463 nbranch z_bt_send_max_slot_req_accept_after_switch_wait ,positive +0x40022 037464 branch host_create_conn_auth +: 037466 z_bt_send_max_slot_req_accept_after_switch_wait: +0x40023 037467 jam 1 ,mem_bt_send_max_slot_req_accept_after_switch +0x40024 037468 rtn +: 037470 z_host_create_conn_send_conn_req: +0x40025 037471 jam 20 ,mem_mouse_send_switch_req_timer +0x40026 037472 branch host_create_conn_send_conn_req org 0x50001 -: 037450 z_entrance4: -0x50001 037451 beq zcode_40 ,z_le_update_param -0x50002 037452 beq zcode_41 ,z_le_update_channel_map -0x50003 037453 beq zcode_42 ,z_le_mouse_bb_event_connect_complete -0x50004 037455 rtn -: 037457 z_le_update_param: -0x50005 037458 call z_mouse_le_conn_param_check -0x50006 037459 branch le_update_param + 8 -: 037460 z_mouse_le_lpm_mult_reinit: -0x50007 037461 fetch 1 ,mem_lpm_mult_init -0x50008 037462 store 1 ,mem_lpm_mult -: 037463 z_mouse_le_conn_param_lpm_enable: -0x50009 037464 jam le_lpm_enable ,mem_mouse_le_conn_param_reject -0x5000a 037465 rtn -: 037466 z_mouse_le_conn_param_lpm_disable: -0x5000b 037467 jam le_lpm_disable ,mem_mouse_le_conn_param_reject -0x5000c 037468 rtn -: 037469 z_mouse_le_conn_param_check: -0x5000d 037470 fetch 1 ,mem_le_new_conninterval -0x5000e 037471 sub pdata ,le_interval_15ms ,null -0x5000f 037472 nbranch z_mouse_le_conn_param_lpm_disable ,positive -0x50010 037473 store 2 ,mem_le_interval_min -0x50011 037474 store 2 ,mem_le_interval_min + 2 -0x50012 037475 fetch 1 ,mem_le_new_connslavelatency -0x50013 037476 branch z_mouse_le_lpm_mult_reinit ,blank -0x50014 037477 fetcht 1 ,mem_lpm_mult_init -0x50015 037478 isub temp ,null -0x50016 037479 branch z_mouse_le_lpm_mult_reinit ,positive -0x50017 037480 fetch 1 ,mem_le_new_connslavelatency -0x50018 037481 store 1 ,mem_lpm_mult_init -0x50019 037482 branch z_mouse_le_conn_param_lpm_enable -: 037484 z_le_update_channel_map: -0x5001a 037485 fetch 1 ,mem_le_state -0x5001b 037486 rtnbit0 lestate_update_map -0x5001c 037487 call z_le_channel_map_overflow_check -0x5001d 037488 nrtn user -0x5001e 037489 branch le_update_channel_map + 3 -: 037490 z_le_channel_map_overflow_check: -0x5001f 037491 enable user -0x50020 037492 fetch 1 ,mem_le_event_count + 1 -0x50021 037493 rshift4 pdata ,pdata -0x50022 037494 rtnne 0x0f -0x50023 037495 fetch 1 ,mem_le_instant + 1 -0x50024 037496 rshift4 pdata ,pdata -0x50025 037497 rtnne 0x00 -0x50026 037498 branch disable_user -: 037500 z_le_mouse_bb_event_connect_complete: -0x50027 037501 fetch 1 ,mem_mouse_le_reconnect_flag -0x50028 037502 nrtn blank -0x50029 037503 fetch 1 ,mem_le_att_handle -0x5002a 037504 sub pdata ,26 ,pdata -0x5002b 037505 nrtn zero -0x5002c 037506 jam 0 ,mem_le_start_encrypt_timer -0x5002d 037507 branch mouse_le_write_enable -: 037509 z_quit_connection_cont: -0x5002e 037510 call app_disconn_reason_collect_bt -0x5002f 037511 call sniff_exit -0x50030 037512 jam bt_evt_bb_disconnected ,mem_fifo_temp -0x50031 037513 call ui_ipc_send_event -0x50032 037514 call init_lmp_work -0x50033 037515 call l2cap_init_work -0x50034 037516 branch quit_connection_cont + 8 +: 037480 z_entrance4: +0x50001 037481 beq zcode_40 ,z_le_update_param +0x50002 037482 beq zcode_41 ,z_le_update_channel_map +0x50003 037483 beq zcode_42 ,z_le_mouse_bb_event_connect_complete +0x50004 037485 rtn +: 037487 z_le_update_param: +0x50005 037488 call z_mouse_le_conn_param_check +0x50006 037489 branch le_update_param + 8 +: 037490 z_mouse_le_lpm_mult_reinit: +0x50007 037491 fetch 1 ,mem_lpm_mult_init +0x50008 037492 store 1 ,mem_lpm_mult +: 037493 z_mouse_le_conn_param_lpm_enable: +0x50009 037494 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +0x5000a 037495 rtn +: 037496 z_mouse_le_conn_param_lpm_disable: +0x5000b 037497 jam le_lpm_disable ,mem_mouse_le_conn_param_reject +0x5000c 037498 rtn +: 037499 z_mouse_le_conn_param_check: +0x5000d 037500 fetch 1 ,mem_le_new_conninterval +0x5000e 037501 sub pdata ,le_interval_15ms ,null +0x5000f 037502 nbranch z_mouse_le_conn_param_lpm_disable ,positive +0x50010 037503 store 2 ,mem_le_interval_min +0x50011 037504 store 2 ,mem_le_interval_min + 2 +0x50012 037505 fetch 1 ,mem_le_new_connslavelatency +0x50013 037506 branch z_mouse_le_lpm_mult_reinit ,blank +0x50014 037507 fetcht 1 ,mem_lpm_mult_init +0x50015 037508 isub temp ,null +0x50016 037509 branch z_mouse_le_lpm_mult_reinit ,positive +0x50017 037510 fetch 1 ,mem_le_new_connslavelatency +0x50018 037511 store 1 ,mem_lpm_mult_init +0x50019 037512 branch z_mouse_le_conn_param_lpm_enable +: 037514 z_le_update_channel_map: +0x5001a 037515 fetch 1 ,mem_le_state +0x5001b 037516 rtnbit0 lestate_update_map +0x5001c 037517 call z_le_channel_map_overflow_check +0x5001d 037518 nrtn user +0x5001e 037519 branch le_update_channel_map + 3 +: 037520 z_le_channel_map_overflow_check: +0x5001f 037521 enable user +0x50020 037522 fetch 1 ,mem_le_event_count + 1 +0x50021 037523 rshift4 pdata ,pdata +0x50022 037524 rtnne 0x0f +0x50023 037525 fetch 1 ,mem_le_instant + 1 +0x50024 037526 rshift4 pdata ,pdata +0x50025 037527 rtnne 0x00 +0x50026 037528 branch disable_user +: 037530 z_le_mouse_bb_event_connect_complete: +0x50027 037531 fetch 1 ,mem_mouse_le_reconnect_flag +0x50028 037532 nrtn blank +0x50029 037533 fetch 1 ,mem_le_att_handle +0x5002a 037534 sub pdata ,26 ,pdata +0x5002b 037535 nrtn zero +0x5002c 037536 jam 0 ,mem_le_start_encrypt_timer +0x5002d 037537 branch mouse_le_write_enable +: 037539 z_quit_connection_cont: +0x5002e 037540 call app_disconn_reason_collect_bt +0x5002f 037541 call sniff_exit +0x50030 037542 jam bt_evt_bb_disconnected ,mem_fifo_temp +0x50031 037543 call ui_ipc_send_event +0x50032 037544 call init_lmp_work +0x50033 037545 call l2cap_init_work +0x50034 037546 branch quit_connection_cont + 8 org 0x60001 -: 037520 z_entrance5: -0x60001 037521 beq zcode_50 ,z_mouse_start_discovery -0x60002 037522 rtn -: 037525 z_mouse_start_discovery: -0x60003 037526 jam 0 ,mem_le_send_security_request_flag -0x60004 037527 call p_mouse_tx_power_init -0x60005 037528 jam 0 ,mem_mouse_clear_sensor_data_flag -0x60006 037529 fetch 2 ,mem_ui_state_map -0x60007 037530 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom -0x60008 037533 call p_mouse_load_random_addr_increase_count -0x60009 037534 fetcht 2 ,mem_random_addr_increase_count -0x6000a 037535 increase 1 ,temp -0x6000b 037536 storet 2 ,mem_random_addr_increase_count -0x6000c 037537 storet 2 ,mem_le_lap + 1 -0x6000d 037538 call p_mouse_store_random_addr_increase_count -0x6000e 037539 random pdata -0x6000f 037540 store 1 ,mem_le_lap -: 037541 z_mouse_start_discovery_norandom: -0x60010 037542 fetch 3 ,mem_le_lap_high_3b -0x60011 037543 store 3 ,mem_le_lap + 3 -0x60012 037544 call p_mouse_le_fast_conn_disable -0x60013 037545 call app_lpm_mult_disable -0x60014 037546 fetch 2 ,mem_discovery_timeout -0x60015 037547 store 2 ,mem_mouse_discovery_timer -0x60016 037548 jam 6 ,mem_connection_options -0x60017 037549 setarg 0 -0x60018 037550 store 2 ,mem_mouse_no_data_timer -0x60019 037551 store 2 ,mem_mouse_direct_timer -0x6001a 037552 arg mouse_store_eeprom_flag ,queue -0x6001b 037553 call mouse_enable_function_flag -0x6001c 037554 call mouse_bt_discovery_button_down_disable -0x6001d 037555 fetch 1 ,mem_device_option -0x6001e 037556 isolate1 mode_4_mouse ,pdata -0x6001f 037557 call z_check_51cmd_adv ,true -0x60020 037558 fetch 1 ,mem_device_option -0x60021 037559 isolate1 mode_3_mouse ,pdata -0x60022 037560 call check_51cmd_start_discovery ,true -0x60023 037563 jam 0 ,mem_mouse_bt_reconnect_flag -0x60024 037564 call mouse_start_discovery_norandom + 13 -0x60025 037565 branch p_mouse_discovery_multi_led_blink -: 037567 z_check_51cmd_adv: -0x60026 037568 jam 0 ,mem_mouse_le_reconnect_flag -0x60027 037569 call p_le_check_adv_flag -0x60028 037570 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable -0x60029 037571 istore 1 ,contr -0x6002a 037572 arg mem_le_adv_swift_pair ,contr -0x6002b 037573 call p_le_adv_data_update -0x6002c 037574 branch check_51cmd_adv +: 037550 z_entrance5: +0x60001 037551 beq zcode_50 ,z_mouse_start_discovery +0x60002 037552 rtn +: 037555 z_mouse_start_discovery: +0x60003 037556 jam 0 ,mem_le_send_security_request_flag +0x60004 037557 call p_mouse_tx_power_init +0x60005 037558 jam 0 ,mem_mouse_clear_sensor_data_flag +0x60006 037559 fetch 2 ,mem_ui_state_map +0x60007 037560 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom +0x60008 037563 call p_mouse_load_random_addr_increase_count +0x60009 037564 fetcht 2 ,mem_random_addr_increase_count +0x6000a 037565 increase 1 ,temp +0x6000b 037566 storet 2 ,mem_random_addr_increase_count +0x6000c 037567 storet 2 ,mem_le_lap + 1 +0x6000d 037568 call p_mouse_store_random_addr_increase_count +0x6000e 037569 random pdata +0x6000f 037570 store 1 ,mem_le_lap +: 037571 z_mouse_start_discovery_norandom: +0x60010 037572 fetch 3 ,mem_le_lap_high_3b +0x60011 037573 store 3 ,mem_le_lap + 3 +0x60012 037574 call p_mouse_le_fast_conn_disable +0x60013 037575 call app_lpm_mult_disable +0x60014 037576 fetch 2 ,mem_discovery_timeout +0x60015 037577 store 2 ,mem_mouse_discovery_timer +0x60016 037578 jam 6 ,mem_connection_options +0x60017 037579 setarg 0 +0x60018 037580 store 2 ,mem_mouse_no_data_timer +0x60019 037581 store 2 ,mem_mouse_direct_timer +0x6001a 037582 arg mouse_store_eeprom_flag ,queue +0x6001b 037583 call mouse_enable_function_flag +0x6001c 037584 call mouse_bt_discovery_button_down_disable +0x6001d 037585 fetch 1 ,mem_device_option +0x6001e 037586 isolate1 mode_4_mouse ,pdata +0x6001f 037587 call z_check_51cmd_adv ,true +0x60020 037588 fetch 1 ,mem_device_option +0x60021 037589 isolate1 mode_3_mouse ,pdata +0x60022 037590 call check_51cmd_start_discovery ,true +0x60023 037593 jam 0 ,mem_mouse_bt_reconnect_flag +0x60024 037594 call mouse_start_discovery_norandom + 13 +0x60025 037595 branch p_mouse_discovery_multi_led_blink +: 037597 z_check_51cmd_adv: +0x60026 037598 jam 0 ,mem_mouse_le_reconnect_flag +0x60027 037599 call p_le_check_adv_flag +0x60028 037600 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable +0x60029 037601 istore 1 ,contr +0x6002a 037602 arg mem_le_adv_swift_pair ,contr +0x6002b 037603 call p_le_adv_data_update +0x6002c 037604 branch check_51cmd_adv org 0x70001 -: 037578 z_entrance6: -0x70001 037579 beq zcode_60 ,z_g24_start_24g_mode -0x70002 037580 beq zcode_61 ,z_g24_auto_pair_start -0x70003 037581 beq zcode_62 ,z_mouse_24g_pairing_button -0x70004 037582 rtn -: 037584 z_g24_start_24g_mode: -0x70005 037585 call z_g24_factory_check -0x70006 037586 branch p_g24_auto_pair_start ,user -0x70007 037587 set1 mark_24g ,mark -0x70008 037588 fetch 1 ,mem_24g_conn_sm -0x70009 037589 set1 state_24g_reconn ,pdata -0x7000a 037590 store 1 ,mem_24g_conn_sm -0x7000b 037591 call p_g24_syncword_crc8 -0x7000c 037592 call p_g24_ch -0x7000d 037593 branch z_g24_auto_pair_timeout_init -: 037595 z_g24_factory_check: -0x7000e 037596 arg 2 ,loopcnt -0x7000f 037597 arg mem_24g_addr ,contr -0x70010 037598 call enable_user -0x70011 037599 setarg 0xffff -: 037600 z4_pdata_0xff_check_loop: -0x70012 037601 ifetcht 2 ,contr -0x70013 037602 isub temp ,null -0x70014 037603 ncall disable_user ,zero -0x70015 037604 loop z4_pdata_0xff_check_loop -0x70016 037605 rtn -: 037607 z_g24_auto_pair_start: -0x70017 037608 set1 mark_24g ,mark -0x70018 037609 fetch 1 ,mem_24g_conn_sm -0x70019 037610 set1 state_24g_pair ,pdata -0x7001a 037611 store 1 ,mem_24g_conn_sm -: 037612 z_g24_auto_pair_timeout_init: -0x7001b 037613 setarg g24_first_disconn_nodata_timer -0x7001c 037614 store 2 ,mem_24g_stop_g24_mode_timeout -0x7001d 037615 jam 0 ,mem_24g_stop_g24_mode -0x7001e 037616 rtn -: 037618 z_mouse_24g_pairing_button: -0x7001f 037619 fetch mouse_flag_len ,mem_mouse_flag -0x70020 037620 rtnbit0 mouse_enable_24g -0x70021 037621 rtnbit1 mosue_24g_pairing_flag -0x70022 037622 rtnmark1 mark_24g -0x70023 037623 call mouse_devce_led_off -0x70024 037624 arg mosue_24g_pairing_flag ,queue -0x70025 037625 call mouse_enable_function_flag -0x70026 037626 setarg 0 -0x70027 037627 store 2 ,mem_mouse_direct_timer -0x70028 037628 store 1 ,mem_mouse_send_blank_timer -0x70029 037629 store 2 ,mem_24g_check_dongle_times -0x7002a 037630 call mouse_stop_discovery -0x7002b 037631 branch p_g24_auto_pair_start +: 037608 z_entrance6: +0x70001 037609 beq zcode_60 ,z_g24_start_24g_mode +0x70002 037610 beq zcode_61 ,z_g24_auto_pair_start +0x70003 037611 beq zcode_62 ,z_mouse_24g_pairing_button +0x70004 037612 rtn +: 037614 z_g24_start_24g_mode: +0x70005 037615 call z_g24_factory_check +0x70006 037616 branch p_g24_auto_pair_start ,user +0x70007 037617 set1 mark_24g ,mark +0x70008 037618 fetch 1 ,mem_24g_conn_sm +0x70009 037619 set1 state_24g_reconn ,pdata +0x7000a 037620 store 1 ,mem_24g_conn_sm +0x7000b 037621 call p_g24_syncword_crc8 +0x7000c 037622 call p_g24_ch +0x7000d 037623 branch z_g24_auto_pair_timeout_init +: 037625 z_g24_factory_check: +0x7000e 037626 arg 2 ,loopcnt +0x7000f 037627 arg mem_24g_addr ,contr +0x70010 037628 call enable_user +0x70011 037629 setarg 0xffff +: 037630 z4_pdata_0xff_check_loop: +0x70012 037631 ifetcht 2 ,contr +0x70013 037632 isub temp ,null +0x70014 037633 ncall disable_user ,zero +0x70015 037634 loop z4_pdata_0xff_check_loop +0x70016 037635 rtn +: 037637 z_g24_auto_pair_start: +0x70017 037638 set1 mark_24g ,mark +0x70018 037639 fetch 1 ,mem_24g_conn_sm +0x70019 037640 set1 state_24g_pair ,pdata +0x7001a 037641 store 1 ,mem_24g_conn_sm +: 037642 z_g24_auto_pair_timeout_init: +0x7001b 037643 setarg g24_first_disconn_nodata_timer +0x7001c 037644 store 2 ,mem_24g_stop_g24_mode_timeout +0x7001d 037645 jam 0 ,mem_24g_stop_g24_mode +0x7001e 037646 rtn +: 037648 z_mouse_24g_pairing_button: +0x7001f 037649 fetch mouse_flag_len ,mem_mouse_flag +0x70020 037650 rtnbit0 mouse_enable_24g +0x70021 037651 rtnbit1 mosue_24g_pairing_flag +0x70022 037652 rtnmark1 mark_24g +0x70023 037653 call mouse_devce_led_off +0x70024 037654 arg mosue_24g_pairing_flag ,queue +0x70025 037655 call mouse_enable_function_flag +0x70026 037656 setarg 0 +0x70027 037657 store 2 ,mem_mouse_direct_timer +0x70028 037658 store 1 ,mem_mouse_send_blank_timer +0x70029 037659 store 2 ,mem_24g_check_dongle_times +0x7002a 037660 call mouse_stop_discovery +0x7002b 037661 branch p_g24_auto_pair_start org 0x80001 -: 037636 z_entrance7: -0x80001 037637 beq zcode_70 ,z_g24_reconn_dispatch -0x80002 037638 beq zcode_71 ,z_mouse_irtual_cable_unplug -0x80003 037639 rtn -: 037641 z_g24_reconn_dispatch: -0x80004 037642 fetch 1 ,mem_24g_stop_g24_mode -0x80005 037643 beq 1 ,g24_stop_24g_mode -0x80006 037644 call z_g24_tx_attemp_data_prep -0x80007 037645 call p_g24_transmit_receive_ack -0x80008 037646 nbranch p_g24_ch ,sync -0x80009 037647 nbranch p_g24_ch ,user3 -0x8000a 037648 fetch 1 ,mem_24g_conn_sm -0x8000b 037649 set0 state_24g_reconn ,pdata -0x8000c 037650 store 1 ,mem_24g_conn_sm -: 037651 z_g24_tx_attemp_dongle_succ: -0x8000d 037652 jam 0 ,mem_mouse_long_mult_flag -0x8000e 037653 call g24_app_tx_attempt_success -0x8000f 037654 call p_g24_txbuf_clear -0x80010 037655 branch p_g24_transmit_by_interrupt_enable -: 037657 z_g24_tx_attemp_data_prep: -0x80011 037658 jam 0xff ,mem_24g_common_temp -0x80012 037659 fetch 1 ,mem_24g_data_type -0x80013 037660 store 1 ,mem_24g_common_temp + 1 -0x80014 037661 fetch 4 ,mem_24g_device_addr -0x80015 037662 store 4 ,mem_24g_common_temp + 2 -0x80016 037663 arg 6 ,temp -0x80017 037664 arg mem_24g_common_temp ,rega -0x80018 037665 call p_g24_put_data_in_buff -0x80019 037666 branch p_g24_transmit_prep -: 037668 z_mouse_irtual_cable_unplug: -0x8001a 037669 setarg -1 -0x8001b 037670 store 6 ,mem_plap -0x8001c 037671 jam rec_3_mode ,mem_record_bt_mode -0x8001d 037672 jam 0xff ,mem_mouse_fast_conn_flag -0x8001e 037673 call mouse_before_store_reconn_info -0x8001f 037674 jam 0xff ,mem_device1_type -0x80020 037675 branch p_mouse_store_flash_device_info +: 037666 z_entrance7: +0x80001 037667 beq zcode_70 ,z_g24_reconn_dispatch +0x80002 037668 beq zcode_71 ,z_mouse_irtual_cable_unplug +0x80003 037669 rtn +: 037671 z_g24_reconn_dispatch: +0x80004 037672 fetch 1 ,mem_24g_stop_g24_mode +0x80005 037673 beq 1 ,g24_stop_24g_mode +0x80006 037674 call z_g24_tx_attemp_data_prep +0x80007 037675 call p_g24_transmit_receive_ack +0x80008 037676 nbranch p_g24_ch ,sync +0x80009 037677 nbranch p_g24_ch ,user3 +0x8000a 037678 fetch 1 ,mem_24g_conn_sm +0x8000b 037679 set0 state_24g_reconn ,pdata +0x8000c 037680 store 1 ,mem_24g_conn_sm +: 037681 z_g24_tx_attemp_dongle_succ: +0x8000d 037682 jam 0 ,mem_mouse_long_mult_flag +0x8000e 037683 call g24_app_tx_attempt_success +0x8000f 037684 call p_g24_txbuf_clear +0x80010 037685 branch p_g24_transmit_by_interrupt_enable +: 037687 z_g24_tx_attemp_data_prep: +0x80011 037688 jam 0xff ,mem_24g_common_temp +0x80012 037689 fetch 1 ,mem_24g_data_type +0x80013 037690 store 1 ,mem_24g_common_temp + 1 +0x80014 037691 fetch 4 ,mem_24g_device_addr +0x80015 037692 store 4 ,mem_24g_common_temp + 2 +0x80016 037693 arg 6 ,temp +0x80017 037694 arg mem_24g_common_temp ,rega +0x80018 037695 call p_g24_put_data_in_buff +0x80019 037696 branch p_g24_transmit_prep +: 037698 z_mouse_irtual_cable_unplug: +0x8001a 037699 setarg -1 +0x8001b 037700 store 6 ,mem_plap +0x8001c 037701 jam rec_3_mode ,mem_record_bt_mode +0x8001d 037702 jam 0xff ,mem_mouse_fast_conn_flag +0x8001e 037703 call mouse_before_store_reconn_info +0x8001f 037704 jam 0xff ,mem_device1_type +0x80020 037705 branch p_mouse_store_flash_device_info org 0x90001 -: 037680 z_entrance8: -0x90001 037681 beq zcode_80 ,z_mouse_setting_config -0x90002 037682 beq zcode_81 ,z_le_addr_random_config -0x90003 037684 rtn -: 037693 z_le_addr_random_config: -0x90004 037694 call load_adc_init -0x90005 037695 fetch 2 ,mem_0_5_adc_io_data -0x90006 037696 nbranch z_le_otp_adc_empty ,blank -0x90007 037697 setarg 0x1122 -: 037698 z_le_otp_adc_empty: -0x90008 037699 store 2 ,mem_random_addr_increase_count -0x90009 037700 rtn -: 037703 z_mouse_setting_config: -0x9000a 037704 fetch 4 ,mem_lap -0x9000b 037705 store 4 ,mem_24g_device_addr -0x9000c 037710 call mouse_gpio_init -0x9000d 037712 fetcht 1 ,mem_flash_ncs_gpio -0x9000e 037713 call gpio_config_output -0x9000f 037715 call mouse_param_init -0x90010 037720 call z_mouse_bt_sdp_update -0x90011 037721 setarg 0 -0x90012 037722 store 2 ,mem_lpm_interval -0x90013 037723 call load_adc_init -0x90014 037724 call mouse_adc_init -0x90015 037725 call le_set_config_fixed_ltk -0x90016 037726 call le_set_justwork -0x90017 037727 call le_set_fixed_ltk -0x90018 037728 call le_set_config_read_authentication -0x90019 037729 call p_le_addr_random_config -0x9001a 037730 call p_mouse_load_flash_info_check -0x9001b 037731 arg 3 ,loopcnt -0x9001c 037732 arg mem_device2_addr ,contr -0x9001d 037733 call p_pdata_0xff_check -0x9001e 037734 nbranch p_mouse_le_fast_conn_disable ,user -0x9001f 037735 arg 3 ,loopcnt -0x90020 037736 arg mem_device3_addr ,contr -0x90021 037737 call p_pdata_0xff_check -0x90022 037738 nbranch p_mouse_le_fast_conn_disable ,user -0x90023 037739 call p_mouse_fast_conn_init -0x90024 037740 rtn -: 037742 z_mouse_bt_sdp_update: -0x90025 037743 call enable_authrom -0x90026 037744 arg 0x8c00 ,contr -0x90027 037745 arg mem_mouse_uuid_list ,contw -0x90028 037746 arg 369 ,loopcnt -0x90029 037747 call memcpy -0x9002a 037749 setarg 0x0f0209 -0x9002b 037750 istore 3 ,contw -0x9002c 037751 setarg 0x120009 -0x9002d 037752 istore 3 ,contw -0x9002e 037754 setarg 0x100209 -0x9002f 037755 istore 3 ,contw -0x90030 037756 setarg 0x000009 -0x90031 037757 istore 3 ,contw -0x90032 037758 arg 0x8d71 ,contr -0x90033 037759 arg 265 ,loopcnt -0x90034 037760 call memcpy -0x90035 037762 jam 0 ,mem_mouse_uuid_list + 23 -0x90036 037763 jam 0x6d ,mem_mouse_uuid_list + 15 -0x90037 037764 setarg 0x401f -0x90038 037765 store 2 ,mem_mouse_uuid_list + 357 -0x90039 037766 setarg 0x6d04 -0x9003a 037767 store 2 ,mem_mouse_uuid_list + 462 -0x9003b 037768 setarg 0x16b0 -0x9003c 037769 store 2 ,mem_mouse_uuid_list + 468 -0x9003d 037771 setarg mem_mouse_uuid_list -0x9003e 037772 store 2 ,mem_ui_uuid_table -0x9003f 037773 rtn +: 037710 z_entrance8: +0x90001 037711 beq zcode_80 ,z_mouse_setting_config +0x90002 037712 beq zcode_81 ,z_le_addr_random_config +0x90003 037714 rtn +: 037723 z_le_addr_random_config: +0x90004 037724 call load_adc_init +0x90005 037725 fetch 2 ,mem_0_5_adc_io_data +0x90006 037726 nbranch z_le_otp_adc_empty ,blank +0x90007 037727 setarg 0x1122 +: 037728 z_le_otp_adc_empty: +0x90008 037729 store 2 ,mem_random_addr_increase_count +0x90009 037730 rtn +: 037733 z_mouse_setting_config: +0x9000a 037734 fetch 4 ,mem_lap +0x9000b 037735 store 4 ,mem_24g_device_addr +0x9000c 037740 call mouse_gpio_init +0x9000d 037742 fetcht 1 ,mem_flash_ncs_gpio +0x9000e 037743 call gpio_config_output +0x9000f 037745 call mouse_param_init +0x90010 037750 call z_mouse_bt_sdp_update +0x90011 037751 setarg 0 +0x90012 037752 store 2 ,mem_lpm_interval +0x90013 037753 call load_adc_init +0x90014 037754 call mouse_adc_init +0x90015 037755 call le_set_config_fixed_ltk +0x90016 037756 call le_set_justwork +0x90017 037757 call le_set_fixed_ltk +0x90018 037758 call le_set_config_read_authentication +0x90019 037759 call p_le_addr_random_config +0x9001a 037760 call p_mouse_load_flash_info_check +0x9001b 037761 arg 3 ,loopcnt +0x9001c 037762 arg mem_device2_addr ,contr +0x9001d 037763 call p_pdata_0xff_check +0x9001e 037764 nbranch p_mouse_le_fast_conn_disable ,user +0x9001f 037765 arg 3 ,loopcnt +0x90020 037766 arg mem_device3_addr ,contr +0x90021 037767 call p_pdata_0xff_check +0x90022 037768 nbranch p_mouse_le_fast_conn_disable ,user +0x90023 037769 call p_mouse_fast_conn_init +0x90024 037770 rtn +: 037772 z_mouse_bt_sdp_update: +0x90025 037773 call enable_authrom +0x90026 037774 arg 0x8c00 ,contr +0x90027 037775 arg mem_mouse_uuid_list ,contw +0x90028 037776 arg 369 ,loopcnt +0x90029 037777 call memcpy +0x9002a 037779 setarg 0x0f0209 +0x9002b 037780 istore 3 ,contw +0x9002c 037781 setarg 0x120009 +0x9002d 037782 istore 3 ,contw +0x9002e 037784 setarg 0x100209 +0x9002f 037785 istore 3 ,contw +0x90030 037786 setarg 0x000009 +0x90031 037787 istore 3 ,contw +0x90032 037788 arg 0x8d71 ,contr +0x90033 037789 arg 265 ,loopcnt +0x90034 037790 call memcpy +0x90035 037792 jam 0 ,mem_mouse_uuid_list + 23 +0x90036 037793 jam 0x6d ,mem_mouse_uuid_list + 15 +0x90037 037794 setarg 0x401f +0x90038 037795 store 2 ,mem_mouse_uuid_list + 357 +0x90039 037796 setarg 0x6d04 +0x9003a 037797 store 2 ,mem_mouse_uuid_list + 462 +0x9003b 037798 setarg 0x16b0 +0x9003c 037799 store 2 ,mem_mouse_uuid_list + 468 +0x9003d 037801 setarg mem_mouse_uuid_list +0x9003e 037802 store 2 ,mem_ui_uuid_table +0x9003f 037803 rtn org 0xa0001 -: 037779 z_entrance9: -0xa0001 037780 beq zcode_90 ,z_g24_pairing_sm -0xa0002 037781 beq zcode_91 ,z_g24_paring_mode -0xa0003 037782 beq zcode_92 ,z_mouse_24g_pairing_complete -0xa0004 037783 rtn -: 037785 z_g24_pairing_sm: -0xa0005 037786 fetch 1 ,mem_24g_ensure -0xa0006 037787 beq ensure_on_24g ,enable_user -0xa0007 037788 fetch 1 ,mem_24g_pairing_sm -0xa0008 037789 beq state_24g_pairing_1 ,z_g24_pairing_sm_1 -0xa0009 037790 beq state_24g_pairing_2 ,z_g24_pairing_sm_2 -0xa000a 037791 beq state_24g_pairing_3 ,z_g24_pairing_sm_3 -0xa000b 037792 branch assert -: 037794 z_g24_pairing_sm_1: -0xa000c 037795 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm -0xa000d 037796 jam 0xaa ,mem_24g_common_temp -0xa000e 037797 branch z_g24_pairing_sm_common -: 037798 z_g24_pairing_sm_2: -0xa000f 037799 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm -0xa0010 037800 jam 0x55 ,mem_24g_common_temp -0xa0011 037801 branch z_g24_pairing_sm_common -: 037802 z_g24_pairing_sm_3: -0xa0012 037803 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm -0xa0013 037804 jam 0x22 ,mem_24g_common_temp -: 037805 z_g24_pairing_sm_common: -0xa0014 037806 fetch 1 ,mem_24g_data_type -0xa0015 037807 and_into bits_data ,pdata -0xa0016 037808 store 1 ,mem_24g_common_temp + 1 -0xa0017 037809 fetch 4 ,mem_24g_device_addr -0xa0018 037810 store 4 ,mem_24g_common_temp + 2 -: 037811 z_g24_put_pairing_data_in_buff: -0xa0019 037812 jam 0 ,mem_24g_common_temp + 6 -0xa001a 037813 arg mem_24g_common_temp ,rega -0xa001b 037814 arg 7 ,temp -0xa001c 037815 call p_g24_put_data_in_buff -0xa001d 037816 call p_g24_txdata_enable_tx -0xa001e 037817 branch enable_user -: 037819 z_g24_paring_mode: -0xa001f 037820 fetch 1 ,mem_24g_pairing_sm -0xa0020 037821 rtneq state_24g_pairing_success -0xa0021 037822 beq state_24g_pairing_1_waiting_ack ,z_g24_pairing_sm_1_waiting_ack -0xa0022 037823 beq state_24g_pairing_2_waiting_ack ,z_g24_pairing_sm_2_waiting_ack -0xa0023 037824 beq state_24g_pairing_3_waiting_ack ,z_g24_pairing_sm_3_waiting_ack -0xa0024 037825 rtn -: 037827 z_g24_pairing_sm_1_waiting_ack: -0xa0025 037828 jam state_24g_pairing_2 ,mem_24g_pairing_sm -0xa0026 037829 branch p_g24_transmit_abandon -: 037830 z_g24_pairing_sm_2_waiting_ack: -0xa0027 037831 jam state_24g_pairing_3 ,mem_24g_pairing_sm -0xa0028 037832 branch p_g24_transmit_abandon -: 037833 z_g24_pairing_sm_3_waiting_ack: -0xa0029 037834 jam state_24g_pairing_success ,mem_24g_pairing_sm -0xa002a 037835 jam bt_evt_24g_pairing_complete ,mem_fifo_temp -0xa002b 037836 call ui_ipc_send_event -0xa002c 037837 fetch 4 ,mem_24g_rxpayload + 2 -0xa002d 037838 call p_g24_update_addr_and_synccrc8 -0xa002e 037839 branch p_g24_transmit_abandon -: 037842 z_mouse_24g_pairing_complete: -0xa002f 037843 call p_mouse_24g_no_data_timer_init -0xa0030 037844 jam 1 ,mem_mouse_24g_enter_lpm_enable -0xa0031 037845 arg mosue_24g_pairing_flag ,queue -0xa0032 037846 call mouse_disable_function_flag -0xa0033 037847 setarg 0 -0xa0034 037848 store 2 ,mem_24g_pairing_timer_count -0xa0035 037849 jam 0 ,mem_mouse_move_flag -0xa0036 037851 call mouse_read_sensor_common -0xa0037 037853 call p_mouse_tx_power_init -0xa0038 037855 fetch 4 ,mem_24g_addr -0xa0039 037856 store 4 ,mem_mouse_24g_addr -0xa003a 037858 branch p_mouse_store_flash_device_info +: 037809 z_entrance9: +0xa0001 037810 beq zcode_90 ,z_g24_pairing_sm +0xa0002 037811 beq zcode_91 ,z_g24_paring_mode +0xa0003 037812 beq zcode_92 ,z_mouse_24g_pairing_complete +0xa0004 037813 rtn +: 037815 z_g24_pairing_sm: +0xa0005 037816 fetch 1 ,mem_24g_ensure +0xa0006 037817 beq ensure_on_24g ,enable_user +0xa0007 037818 fetch 1 ,mem_24g_pairing_sm +0xa0008 037819 beq state_24g_pairing_1 ,z_g24_pairing_sm_1 +0xa0009 037820 beq state_24g_pairing_2 ,z_g24_pairing_sm_2 +0xa000a 037821 beq state_24g_pairing_3 ,z_g24_pairing_sm_3 +0xa000b 037822 branch assert +: 037824 z_g24_pairing_sm_1: +0xa000c 037825 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm +0xa000d 037826 jam 0xaa ,mem_24g_common_temp +0xa000e 037827 branch z_g24_pairing_sm_common +: 037828 z_g24_pairing_sm_2: +0xa000f 037829 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm +0xa0010 037830 jam 0x55 ,mem_24g_common_temp +0xa0011 037831 branch z_g24_pairing_sm_common +: 037832 z_g24_pairing_sm_3: +0xa0012 037833 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm +0xa0013 037834 jam 0x22 ,mem_24g_common_temp +: 037835 z_g24_pairing_sm_common: +0xa0014 037836 fetch 1 ,mem_24g_data_type +0xa0015 037837 and_into bits_data ,pdata +0xa0016 037838 store 1 ,mem_24g_common_temp + 1 +0xa0017 037839 fetch 4 ,mem_24g_device_addr +0xa0018 037840 store 4 ,mem_24g_common_temp + 2 +: 037841 z_g24_put_pairing_data_in_buff: +0xa0019 037842 jam 0 ,mem_24g_common_temp + 6 +0xa001a 037843 arg mem_24g_common_temp ,rega +0xa001b 037844 arg 7 ,temp +0xa001c 037845 call p_g24_put_data_in_buff +0xa001d 037846 call p_g24_txdata_enable_tx +0xa001e 037847 branch enable_user +: 037849 z_g24_paring_mode: +0xa001f 037850 fetch 1 ,mem_24g_pairing_sm +0xa0020 037851 rtneq state_24g_pairing_success +0xa0021 037852 beq state_24g_pairing_1_waiting_ack ,z_g24_pairing_sm_1_waiting_ack +0xa0022 037853 beq state_24g_pairing_2_waiting_ack ,z_g24_pairing_sm_2_waiting_ack +0xa0023 037854 beq state_24g_pairing_3_waiting_ack ,z_g24_pairing_sm_3_waiting_ack +0xa0024 037855 rtn +: 037857 z_g24_pairing_sm_1_waiting_ack: +0xa0025 037858 jam state_24g_pairing_2 ,mem_24g_pairing_sm +0xa0026 037859 branch p_g24_transmit_abandon +: 037860 z_g24_pairing_sm_2_waiting_ack: +0xa0027 037861 jam state_24g_pairing_3 ,mem_24g_pairing_sm +0xa0028 037862 branch p_g24_transmit_abandon +: 037863 z_g24_pairing_sm_3_waiting_ack: +0xa0029 037864 jam state_24g_pairing_success ,mem_24g_pairing_sm +0xa002a 037865 jam bt_evt_24g_pairing_complete ,mem_fifo_temp +0xa002b 037866 call ui_ipc_send_event +0xa002c 037867 fetch 4 ,mem_24g_rxpayload + 2 +0xa002d 037868 call p_g24_update_addr_and_synccrc8 +0xa002e 037869 branch p_g24_transmit_abandon +: 037872 z_mouse_24g_pairing_complete: +0xa002f 037873 call p_mouse_24g_no_data_timer_init +0xa0030 037874 jam 1 ,mem_mouse_24g_enter_lpm_enable +0xa0031 037875 arg mosue_24g_pairing_flag ,queue +0xa0032 037876 call mouse_disable_function_flag +0xa0033 037877 setarg 0 +0xa0034 037878 store 2 ,mem_24g_pairing_timer_count +0xa0035 037879 jam 0 ,mem_mouse_move_flag +0xa0036 037881 call mouse_read_sensor_common +0xa0037 037883 call p_mouse_tx_power_init +0xa0038 037885 fetch 4 ,mem_24g_addr +0xa0039 037886 store 4 ,mem_mouse_24g_addr +0xa003a 037888 branch p_mouse_store_flash_device_info org 0xb0001 -: 037863 z_entrancea: -0xb0001 037864 beq zcode_a0 ,z_mouse_24g_attempt_fail -0xb0002 037865 beq zcode_a1 ,z_mouse_le_conn_param_update_rsp_recieved -0xb0003 037866 beq zcode_a2 ,z_mouse_le_bb_disconnected -0xb0004 037867 beq zcode_a3 ,z_mouse_bb_event_reconn_timeout -0xb0005 037868 beq zcode_a4 ,z_mouse_before_hibernate -0xb0006 037869 rtn -: 037871 z_mouse_24g_attempt_fail: -0xb0007 037872 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -0xb0008 037873 call p_mouse_tx_power_init -0xb0009 037874 call p_g24_check_51cmd_stop_24g -0xb000a 037875 jam 0 ,mem_link_key_exists -0xb000b 037877 fetch 1 ,mem_mouse_multi_led_blink_count -0xb000c 037878 nrtn blank -0xb000d 037880 call p_mouse_setgpio_hibernate -0xb000e 037881 branch app_enter_hibernate -: 037883 z_mouse_le_conn_param_update_rsp_recieved: -0xb000f 037884 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result -0xb0010 037885 rtneq ble_signaling_connect_parameter_update_accepted -0xb0011 037886 fetch 1 ,mem_le_tsniff -0xb0012 037887 rshift2 pdata ,pdata -0xb0013 037888 sub pdata ,le_interval_15ms ,null -0xb0014 037889 rtn positive -0xb0015 037890 setarg le_interval_11_25ms -0xb0016 037891 store 2 ,mem_le_interval_min -0xb0017 037892 store 2 ,mem_le_interval_min + 2 -0xb0018 037893 call p_app_updata_le_param -0xb0019 037894 jam le_lpm_disable ,mem_mouse_le_conn_param_reject -0xb001a 037895 rtn -: 037898 z_mouse_bb_event_reconn_timeout: -: 037899 z_mouse_bb_event_reconn_failed: -0xb001b 037900 fetch 2 ,mem_ui_state_map -0xb001c 037901 rtnbit1 ui_state_btn_down -0xb001d 037902 rtnbit1 ui_state_bt_discovery -0xb001e 037903 rtnbit1 ui_state_ble_adv -0xb001f 037904 fetch mouse_flag_len ,mem_mouse_flag -0xb0020 037905 rtnbit1 mouse_bt_discovery_button_down_flag -0xb0021 037906 branch app_bb_hibernate -: 037908 z_mouse_le_bb_disconnected: -0xb0022 037909 fetch 1 ,mem_select_device_button_statue_bt_discovery -0xb0023 037910 call p_mouse_le_bb_disconnected_led_blink_set ,blank -0xb0024 037911 jam off ,mem_select_device_button_statue_bt_discovery -0xb0025 037912 jam 0 ,mem_mouse_le_bb_connected_flag -0xb0026 037913 setarg le_interval_8_75ms -0xb0027 037914 store 2 ,mem_le_interval_min -0xb0028 037915 store 2 ,mem_le_interval_min + 2 -0xb0029 037916 jam le_lpm_enable ,mem_mouse_le_conn_param_reject -0xb002a 037917 jam 0 ,mem_mouse_clear_sensor_data_flag -0xb002b 037918 call p_mouse_data_init -0xb002c 037919 call le_clr_config_more_data -0xb002d 037920 call p_mouse_store_flash_device_info -0xb002e 037921 branch mouse_bb_disconnected -: 037924 z_mouse_before_hibernate: -0xb002f 037925 hfetch 4 ,core_lpm_ctrl -0xb0030 037926 set1 26 ,pdata -0xb0031 037927 hstore 4 ,core_lpm_reg -0xb0032 037928 call lpm_write_ctrl -0xb0033 037929 call disable_authrom -0xb0034 037930 call p_mouse_multi_led_blink_off -0xb0035 037931 call p_mouse_store_flash_device_info -0xb0036 037932 call mouse_before_hibernate_wheel_gpio_set -0xb0037 037933 call p_mouse_setgpio_hibernate -0xb0038 037936 call p_flash_deep_power_down -0xb0039 037937 hfetch 1 ,core_gpio_sel1 -0xb003a 037938 and pdata ,0xf7 ,pdata -0xb003b 037939 hstore 1 ,core_gpio_sel1 -0xb003c 037943 branch p_mouse_t_wheel_clear_wake +: 037893 z_entrancea: +0xb0001 037894 beq zcode_a0 ,z_mouse_24g_attempt_fail +0xb0002 037895 beq zcode_a1 ,z_mouse_le_conn_param_update_rsp_recieved +0xb0003 037896 beq zcode_a2 ,z_mouse_le_bb_disconnected +0xb0004 037897 beq zcode_a3 ,z_mouse_bb_event_reconn_timeout +0xb0005 037898 beq zcode_a4 ,z_mouse_before_hibernate +0xb0006 037899 rtn +: 037901 z_mouse_24g_attempt_fail: +0xb0007 037902 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +0xb0008 037903 call p_mouse_tx_power_init +0xb0009 037904 call p_g24_check_51cmd_stop_24g +0xb000a 037905 jam 0 ,mem_link_key_exists +0xb000b 037907 fetch 1 ,mem_mouse_multi_led_blink_count +0xb000c 037908 nrtn blank +0xb000d 037910 call p_mouse_setgpio_hibernate +0xb000e 037911 branch app_enter_hibernate +: 037913 z_mouse_le_conn_param_update_rsp_recieved: +0xb000f 037914 fetch 2 ,mem_le_l2cap_signaling_conn_param_update_rsp_result +0xb0010 037915 rtneq ble_signaling_connect_parameter_update_accepted +0xb0011 037916 fetch 1 ,mem_le_tsniff +0xb0012 037917 rshift2 pdata ,pdata +0xb0013 037918 sub pdata ,le_interval_15ms ,null +0xb0014 037919 rtn positive +0xb0015 037920 setarg le_interval_11_25ms +0xb0016 037921 store 2 ,mem_le_interval_min +0xb0017 037922 store 2 ,mem_le_interval_min + 2 +0xb0018 037923 call p_app_updata_le_param +0xb0019 037924 jam le_lpm_disable ,mem_mouse_le_conn_param_reject +0xb001a 037925 rtn +: 037928 z_mouse_bb_event_reconn_timeout: +: 037929 z_mouse_bb_event_reconn_failed: +0xb001b 037930 fetch 2 ,mem_ui_state_map +0xb001c 037931 rtnbit1 ui_state_btn_down +0xb001d 037932 rtnbit1 ui_state_bt_discovery +0xb001e 037933 rtnbit1 ui_state_ble_adv +0xb001f 037934 fetch mouse_flag_len ,mem_mouse_flag +0xb0020 037935 rtnbit1 mouse_bt_discovery_button_down_flag +0xb0021 037936 branch app_bb_hibernate +: 037938 z_mouse_le_bb_disconnected: +0xb0022 037939 fetch 1 ,mem_select_device_button_statue_bt_discovery +0xb0023 037940 call p_mouse_le_bb_disconnected_led_blink_set ,blank +0xb0024 037941 jam off ,mem_select_device_button_statue_bt_discovery +0xb0025 037942 jam 0 ,mem_mouse_le_bb_connected_flag +0xb0026 037943 setarg le_interval_8_75ms +0xb0027 037944 store 2 ,mem_le_interval_min +0xb0028 037945 store 2 ,mem_le_interval_min + 2 +0xb0029 037946 jam le_lpm_enable ,mem_mouse_le_conn_param_reject +0xb002a 037947 jam 0 ,mem_mouse_clear_sensor_data_flag +0xb002b 037948 call p_mouse_data_init +0xb002c 037949 call le_clr_config_more_data +0xb002d 037950 call p_mouse_store_flash_device_info +0xb002e 037951 branch mouse_bb_disconnected +: 037954 z_mouse_before_hibernate: +0xb002f 037955 hfetch 4 ,core_lpm_ctrl +0xb0030 037956 set1 26 ,pdata +0xb0031 037957 hstore 4 ,core_lpm_reg +0xb0032 037958 call lpm_write_ctrl +0xb0033 037959 call disable_authrom +0xb0034 037960 call p_mouse_multi_led_blink_off +0xb0035 037961 call p_mouse_store_flash_device_info +0xb0036 037962 call mouse_before_hibernate_wheel_gpio_set +0xb0037 037963 call p_mouse_setgpio_hibernate +0xb0038 037966 call p_flash_deep_power_down +0xb0039 037967 hfetch 1 ,core_gpio_sel1 +0xb003a 037968 and pdata ,0xf7 ,pdata +0xb003b 037969 hstore 1 ,core_gpio_sel1 +0xb003c 037973 branch p_mouse_t_wheel_clear_wake org 0xc0001 -: 037948 z_entranceb: -0xc0001 037949 beq zcode_b1 ,z_mouse_sniff_not_accept -0xc0002 037950 beq zcode_b2 ,z_mouse_enter_sniff_check -0xc0003 037951 beq zcode_b3 ,z_mouse_le_ll_start_encryt -0xc0004 037952 beq zcode_b4 ,z_mouse_bb_event_disconnected -0xc0005 037953 rtn -: 037955 z_mouse_sniff_not_accept: -0xc0006 037956 fetch 1 ,mem_mouse_enter_sniff_count -0xc0007 037957 rtneq 2 -0xc0008 037958 increase 1 ,pdata -0xc0009 037959 store 1 ,mem_mouse_enter_sniff_count -0xc000a 037960 jam 0x12 ,mem_sniff_param_interval -0xc000b 037961 branch app_bt_enter_sniff -: 037963 z_mouse_enter_sniff_check: -0xc000c 037964 fetch 1 ,mem_mouse_enter_sniff_count -0xc000d 037965 rtnne 2 -0xc000e 037966 jam 0 ,mem_mouse_enter_sniff_count -0xc000f 037967 jam 0x0e ,mem_sniff_param_interval -0xc0010 037968 branch app_bt_enter_sniff -: 037970 z_mouse_le_ll_start_encryt: -0xc0011 037971 fetch 1 ,mem_mouse_le_reconnect_flag -0xc0012 037972 beq 1 ,z_mouse_le_ll_reconn_start_encryt -0xc0013 037973 branch z_mouse_le_ll_enable_start_enc_flag -: 037974 z_mouse_le_ll_reconn_start_encryt: -0xc0014 037975 call p_app_updata_le_param -0xc0015 037976 jam 10 ,mem_le_start_encrypt_timer -: 037977 z_mouse_le_ll_enable_start_enc_flag: -0xc0016 037978 arg ll_start_enc_flag ,queue -0xc0017 037979 branch mouse_le_enable_connect_flag -: 037981 z_mouse_bb_event_disconnected: -0xc0018 037982 jam 1 ,mem_mouse_connected_state -0xc0019 037983 jam 10 ,mem_mouse_multi_led_blink_count -0xc001a 037984 call p_mouse_dpi_multi_led_blink -0xc001b 037985 jam 0 ,mem_bt_rcvd_switch_req_accept -0xc001c 037986 jam 0 ,mem_bt_send_lmp_setup_complete -0xc001d 037987 jam 0 ,mem_mouse_bt_send_first_package_flag -0xc001e 037988 call p_mouse_store_flash_device_info -0xc001f 037989 branch mouse_bb_disconnected +: 037978 z_entranceb: +0xc0001 037979 beq zcode_b1 ,z_mouse_sniff_not_accept +0xc0002 037980 beq zcode_b2 ,z_mouse_enter_sniff_check +0xc0003 037981 beq zcode_b3 ,z_mouse_le_ll_start_encryt +0xc0004 037982 beq zcode_b4 ,z_mouse_bb_event_disconnected +0xc0005 037983 rtn +: 037985 z_mouse_sniff_not_accept: +0xc0006 037986 fetch 1 ,mem_mouse_enter_sniff_count +0xc0007 037987 rtneq 2 +0xc0008 037988 increase 1 ,pdata +0xc0009 037989 store 1 ,mem_mouse_enter_sniff_count +0xc000a 037990 jam 0x12 ,mem_sniff_param_interval +0xc000b 037991 branch app_bt_enter_sniff +: 037993 z_mouse_enter_sniff_check: +0xc000c 037994 fetch 1 ,mem_mouse_enter_sniff_count +0xc000d 037995 rtnne 2 +0xc000e 037996 jam 0 ,mem_mouse_enter_sniff_count +0xc000f 037997 jam 0x0e ,mem_sniff_param_interval +0xc0010 037998 branch app_bt_enter_sniff +: 038000 z_mouse_le_ll_start_encryt: +0xc0011 038001 fetch 1 ,mem_mouse_le_reconnect_flag +0xc0012 038002 beq 1 ,z_mouse_le_ll_reconn_start_encryt +0xc0013 038003 branch z_mouse_le_ll_enable_start_enc_flag +: 038004 z_mouse_le_ll_reconn_start_encryt: +0xc0014 038005 call p_app_updata_le_param +0xc0015 038006 jam 10 ,mem_le_start_encrypt_timer +: 038007 z_mouse_le_ll_enable_start_enc_flag: +0xc0016 038008 arg ll_start_enc_flag ,queue +0xc0017 038009 branch mouse_le_enable_connect_flag +: 038011 z_mouse_bb_event_disconnected: +0xc0018 038012 jam 1 ,mem_mouse_connected_state +0xc0019 038013 jam 10 ,mem_mouse_multi_led_blink_count +0xc001a 038014 call p_mouse_dpi_multi_led_blink +0xc001b 038015 jam 0 ,mem_bt_rcvd_switch_req_accept +0xc001c 038016 jam 0 ,mem_bt_send_lmp_setup_complete +0xc001d 038017 jam 0 ,mem_mouse_bt_send_first_package_flag +0xc001e 038018 call p_mouse_store_flash_device_info +0xc001f 038019 branch mouse_bb_disconnected org 0xd0001 -: 037993 z_entrancec: -: 037996 z_g24_pair_dispatch: -0xd0001 037997 fetch 1 ,mem_24g_stop_g24_mode -0xd0002 037998 beq 1 ,g24_stop_24g_mode -0xd0003 037999 jam 0xff ,mem_24g_common_temp -0xd0004 038000 fetch 1 ,mem_24g_data_type -0xd0005 038001 store 1 ,mem_24g_common_temp + 1 -0xd0006 038002 fetch 4 ,mem_24g_device_addr -0xd0007 038003 store 4 ,mem_24g_common_temp + 2 -0xd0008 038004 arg 6 ,temp -0xd0009 038005 arg mem_24g_common_temp ,rega -0xd000a 038006 call p_g24_put_data_in_buff -0xd000b 038007 call p_g24_transmit_prep -0xd000c 038008 call p_g24_transmit_receive_ack -0xd000d 038009 nbranch z_g24_pair_txdata_retry ,sync -0xd000e 038010 nbranch z_g24_pair_txdata_retry ,user3 -0xd000f 038011 call p_g24_ackpayload_parse -0xd0010 038012 fetch 4 ,mem_24g_addr -0xd0011 038013 fetcht 4 ,mem_24g_allpowerful_addr -0xd0012 038014 isub temp ,null -0xd0013 038015 branch z_g24_auto_pair_skip_rx_length ,zero -0xd0014 038016 fetch 1 ,mem_24g_rxdata_length -0xd0015 038017 rtnne bind_ackpayload_length -: 038018 z_g24_auto_pair_skip_rx_length: -0xd0016 038022 jam 0 ,mem_24g_conn_sm -0xd0017 038023 call p_mouse_tx_power_init -0xd0018 038024 fetch 4 ,mem_24g_addr -0xd0019 038025 fetcht 4 ,mem_24g_paring_addr -0xd001a 038026 isub temp ,null -0xd001b 038027 branch p_g24_start_pairing_sm1 ,zero -0xd001c 038028 fetch 4 ,mem_24g_addr -0xd001d 038029 fetcht 4 ,mem_24g_device_addr -0xd001e 038030 isub temp ,null -0xd001f 038031 call z7_g24_store_dongle_addr ,zero -0xd0020 038032 jam 0 ,mem_mouse_long_mult_flag -0xd0021 038033 call g24_app_tx_attempt_success -0xd0022 038034 call p_g24_txbuf_clear -0xd0023 038035 branch p_g24_transmit_by_interrupt_enable -: 038037 z7_g24_store_dongle_addr: -0xd0024 038038 fetch 4 ,mem_24g_rxpayload + 2 -0xd0025 038039 branch p_g24_update_addr_and_synccrc8 -: 038041 z_g24_pair_txdata_retry: -: 038042 z_g24_pair_txdata_switch: -0xd0026 038043 fetch 1 ,mem_24g_auto_paring_switch -0xd0027 038044 increase 1 ,pdata -0xd0028 038045 and_into 3 ,pdata -0xd0029 038046 store 1 ,mem_24g_auto_paring_switch -0xd002a 038047 beq 0 ,z_g24_auto_pair_first_attemp -0xd002b 038048 beq 2 ,z_g24_auto_pair_all_powerful -0xd002c 038049 branch p_g24_pair_init -: 038051 z_g24_auto_pair_first_attemp: -0xd002d 038052 call p_mouse_tx_power_init -0xd002e 038053 fetch 4 ,mem_24g_device_addr -0xd002f 038054 store 4 ,mem_24g_addr -0xd0030 038055 fetch 1 ,mem_24g_pair_current_ch_num -0xd0031 038056 store 1 ,mem_24g_current_ch_number -0xd0032 038057 call z_g24_ch_syncword_crc8_init -0xd0033 038058 storet 1 ,mem_24g_pair_current_ch_num -0xd0034 038059 rtn -: 038061 z_g24_ch_syncword_crc8_init: -0xd0035 038062 call p_g24_syncword_crc8 -0xd0036 038063 branch p_g24_ch -: 038065 z_g24_auto_pair_all_powerful: -0xd0037 038066 jam tx_power_pair ,mem_tx_power -0xd0038 038067 fetch 4 ,mem_24g_allpowerful_addr -0xd0039 038068 store 4 ,mem_24g_addr -0xd003a 038069 fetch 1 ,mem_24g_powerful_current_ch_num -0xd003b 038070 store 1 ,mem_24g_current_ch_number -0xd003c 038071 call z_g24_ch_syncword_crc8_init -0xd003d 038072 storet 1 ,mem_24g_powerful_current_ch_num -0xd003e 038073 rtn +: 038023 z_entrancec: +: 038026 z_g24_pair_dispatch: +0xd0001 038027 fetch 1 ,mem_24g_stop_g24_mode +0xd0002 038028 beq 1 ,g24_stop_24g_mode +0xd0003 038029 jam 0xff ,mem_24g_common_temp +0xd0004 038030 fetch 1 ,mem_24g_data_type +0xd0005 038031 store 1 ,mem_24g_common_temp + 1 +0xd0006 038032 fetch 4 ,mem_24g_device_addr +0xd0007 038033 store 4 ,mem_24g_common_temp + 2 +0xd0008 038034 arg 6 ,temp +0xd0009 038035 arg mem_24g_common_temp ,rega +0xd000a 038036 call p_g24_put_data_in_buff +0xd000b 038037 call p_g24_transmit_prep +0xd000c 038038 call p_g24_transmit_receive_ack +0xd000d 038039 nbranch z_g24_pair_txdata_retry ,sync +0xd000e 038040 nbranch z_g24_pair_txdata_retry ,user3 +0xd000f 038041 call p_g24_ackpayload_parse +0xd0010 038042 fetch 4 ,mem_24g_addr +0xd0011 038043 fetcht 4 ,mem_24g_allpowerful_addr +0xd0012 038044 isub temp ,null +0xd0013 038045 branch z_g24_auto_pair_skip_rx_length ,zero +0xd0014 038046 fetch 1 ,mem_24g_rxdata_length +0xd0015 038047 rtnne bind_ackpayload_length +: 038048 z_g24_auto_pair_skip_rx_length: +0xd0016 038052 jam 0 ,mem_24g_conn_sm +0xd0017 038053 call p_mouse_tx_power_init +0xd0018 038054 fetch 4 ,mem_24g_addr +0xd0019 038055 fetcht 4 ,mem_24g_paring_addr +0xd001a 038056 isub temp ,null +0xd001b 038057 branch p_g24_start_pairing_sm1 ,zero +0xd001c 038058 fetch 4 ,mem_24g_addr +0xd001d 038059 fetcht 4 ,mem_24g_device_addr +0xd001e 038060 isub temp ,null +0xd001f 038061 call z7_g24_store_dongle_addr ,zero +0xd0020 038062 jam 0 ,mem_mouse_long_mult_flag +0xd0021 038063 call g24_app_tx_attempt_success +0xd0022 038064 call p_g24_txbuf_clear +0xd0023 038065 branch p_g24_transmit_by_interrupt_enable +: 038067 z7_g24_store_dongle_addr: +0xd0024 038068 fetch 4 ,mem_24g_rxpayload + 2 +0xd0025 038069 branch p_g24_update_addr_and_synccrc8 +: 038071 z_g24_pair_txdata_retry: +: 038072 z_g24_pair_txdata_switch: +0xd0026 038073 fetch 1 ,mem_24g_auto_paring_switch +0xd0027 038074 increase 1 ,pdata +0xd0028 038075 and_into 3 ,pdata +0xd0029 038076 store 1 ,mem_24g_auto_paring_switch +0xd002a 038077 beq 0 ,z_g24_auto_pair_first_attemp +0xd002b 038078 beq 2 ,z_g24_auto_pair_all_powerful +0xd002c 038079 branch p_g24_pair_init +: 038081 z_g24_auto_pair_first_attemp: +0xd002d 038082 call p_mouse_tx_power_init +0xd002e 038083 fetch 4 ,mem_24g_device_addr +0xd002f 038084 store 4 ,mem_24g_addr +0xd0030 038085 fetch 1 ,mem_24g_pair_current_ch_num +0xd0031 038086 store 1 ,mem_24g_current_ch_number +0xd0032 038087 call z_g24_ch_syncword_crc8_init +0xd0033 038088 storet 1 ,mem_24g_pair_current_ch_num +0xd0034 038089 rtn +: 038091 z_g24_ch_syncword_crc8_init: +0xd0035 038092 call p_g24_syncword_crc8 +0xd0036 038093 branch p_g24_ch +: 038095 z_g24_auto_pair_all_powerful: +0xd0037 038096 jam tx_power_pair ,mem_tx_power +0xd0038 038097 fetch 4 ,mem_24g_allpowerful_addr +0xd0039 038098 store 4 ,mem_24g_addr +0xd003a 038099 fetch 1 ,mem_24g_powerful_current_ch_num +0xd003b 038100 store 1 ,mem_24g_current_ch_number +0xd003c 038101 call z_g24_ch_syncword_crc8_init +0xd003d 038102 storet 1 ,mem_24g_powerful_current_ch_num +0xd003e 038103 rtn org 0xe0001 -: 038077 z_entranced: -0xe0001 038078 beq zcode_d0 ,z_mouse_le_bb_event_connected -0xe0002 038079 beq zcode_d1 ,z_g24_transmit_by_interrupt -0xe0003 038080 rtn -: 038082 z_mouse_le_bb_event_connected: -0xe0004 038083 jam 0 ,mem_mouse_connected_state -0xe0005 038084 call p_mouse_init_sensor_reset -0xe0006 038085 call app_ble_store_reconn_info -0xe0007 038086 jam 1 ,mem_mouse_le_bb_connected_flag -0xe0008 038087 fetch 1 ,mem_mouse_le_reconnect_flag -0xe0009 038088 nbranch z_mouse_le_bb_event_connected_next ,blank -0xe000a 038089 jam 0x14 ,mem_mouse_send_secutiry_request_timer -: 038090 z_mouse_le_bb_event_connected_next: -0xe000b 038091 call p_mouse_data_init -0xe000c 038092 branch mouse_le_bb_event_connected -: 038094 z_g24_transmit_by_interrupt: -0xe000d 038095 call p_g24_timer_check -0xe000e 038096 nrtn user -0xe000f 038097 call p_g24_interval_calibrate -0xe0010 038098 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count -0xe0011 038099 increase 1 ,pdata -0xe0012 038100 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0xe0013 038101 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init -0xe0014 038102 isub temp ,null -0xe0015 038103 call p_g24_transmit_by_interrupt_exit ,zero -0xe0016 038104 branch p_g24_transmit_process -: 038105 p_g24_transmit_by_interrupt_exit: -0xe0017 038106 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -0xe0018 038107 setarg 0 -0xe0019 038108 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0xe001a 038109 setarg 25 -0xe001b 038110 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init -: 038111 p_g24_interval_min: -0xe001c 038112 jam 0 ,mem_24g_pac_index -0xe001d 038113 fetch 1 ,mem_24g_interval_min -: 038114 p_g24_current_interval_store: -0xe001e 038115 store 1 ,mem_24g_interval -0xe001f 038116 rtn -: 038117 p_g24_interval_max: -0xe0020 038118 fetch 1 ,mem_24g_interval_max -0xe0021 038119 branch p_g24_current_interval_store -: 038120 p_g24_interval_calibrate: -0xe0022 038121 fetch 1 ,mem_24g_pac_index -0xe0023 038122 increase 1 ,pdata -0xe0024 038123 store 1 ,mem_24g_pac_index -0xe0025 038124 beq 4 ,p_g24_interval_max -0xe0026 038125 beq 5 ,p_g24_interval_min -0xe0027 038126 rtn +: 038107 z_entranced: +0xe0001 038108 beq zcode_d0 ,z_mouse_le_bb_event_connected +0xe0002 038109 beq zcode_d1 ,z_g24_transmit_by_interrupt +0xe0003 038110 rtn +: 038112 z_mouse_le_bb_event_connected: +0xe0004 038113 jam 0 ,mem_mouse_connected_state +0xe0005 038114 call p_mouse_init_sensor_reset +0xe0006 038115 call app_ble_store_reconn_info +0xe0007 038116 jam 1 ,mem_mouse_le_bb_connected_flag +0xe0008 038117 fetch 1 ,mem_mouse_le_reconnect_flag +0xe0009 038118 nbranch z_mouse_le_bb_event_connected_next ,blank +0xe000a 038119 jam 0x14 ,mem_mouse_send_secutiry_request_timer +: 038120 z_mouse_le_bb_event_connected_next: +0xe000b 038121 call p_mouse_data_init +0xe000c 038122 branch mouse_le_bb_event_connected +: 038124 z_g24_transmit_by_interrupt: +0xe000d 038125 call p_g24_timer_check +0xe000e 038126 nrtn user +0xe000f 038127 call p_g24_interval_calibrate +0xe0010 038128 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count +0xe0011 038129 increase 1 ,pdata +0xe0012 038130 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0xe0013 038131 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init +0xe0014 038132 isub temp ,null +0xe0015 038133 call p_g24_transmit_by_interrupt_exit ,zero +0xe0016 038134 branch p_g24_transmit_process +: 038135 p_g24_transmit_by_interrupt_exit: +0xe0017 038136 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt +0xe0018 038137 setarg 0 +0xe0019 038138 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0xe001a 038139 setarg 25 +0xe001b 038140 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init +: 038141 p_g24_interval_min: +0xe001c 038142 jam 0 ,mem_24g_pac_index +0xe001d 038143 fetch 1 ,mem_24g_interval_min +: 038144 p_g24_current_interval_store: +0xe001e 038145 store 1 ,mem_24g_interval +0xe001f 038146 rtn +: 038147 p_g24_interval_max: +0xe0020 038148 fetch 1 ,mem_24g_interval_max +0xe0021 038149 branch p_g24_current_interval_store +: 038150 p_g24_interval_calibrate: +0xe0022 038151 fetch 1 ,mem_24g_pac_index +0xe0023 038152 increase 1 ,pdata +0xe0024 038153 store 1 ,mem_24g_pac_index +0xe0025 038154 beq 4 ,p_g24_interval_max +0xe0026 038155 beq 5 ,p_g24_interval_min +0xe0027 038156 rtn Index: output/bt_program23.meta =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.meta (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/bt_program23.meta (working copy) @@ -181,6 +181,7 @@ beq patch29_2,p_le_receive_skip beq patch2a_7,p_le_update_param beq patch2b_1,p_le_update_channel_map + beq patch2b_2,p_le_acknowledge beq patch2c_3,p_le_prepare_tx beq patch2c_6,p_le_parse beq patch2c_7,p_le_parse_l2cap @@ -345,13 +346,13 @@ store 1,mem_24g_data_type rtn -p_g24_hop_ch_enable: - fetch 1,mem_24g_data_type - set1 bit_hop,pdata - store 1,mem_24g_data_type - //update txpayload - store 1,mem_24g_txpayload - rtn +//p_g24_hop_ch_enable: +// fetch 1,mem_24g_data_type +// set1 bit_hop,pdata +// store 1,mem_24g_data_type +// //update txpayload +// store 1,mem_24g_txpayload +// rtn p_g24_hop_enable_packet: fetch 1,mem_24g_data_type @@ -1595,7 +1596,7 @@ fetcht 1,mem_config_sensor_type sub temp,P3212,null call p_mouse_P3212_dpi_led_set,zero - increase 1,pdata + increase 2,pdata store 1,mem_mouse_multi_led_blink_count call p_mouse_dpi_multi_led_blink branch mouse_seting_dpi @@ -1605,6 +1606,7 @@ p_mouse_P3212_dpi_led_set: mul32 pdata,2,pdata + increase -1,pdata rtn @@ -2322,6 +2324,7 @@ store 1,mem_le_md_count beq LE_MD_MAX_COUNT,le_slave_cont call le_acknowledge + bmark1 mark_le_decrypt_fail,le_slave_cont call le_prepare_tx call power_ctrl_start branch le_slave_match+7 @@ -2347,6 +2350,35 @@ jam ZCODE_41,mem_zcode_temp_param0 branch p_zcode_entrance + +p_le_acknowledge: + set0 mark_le_decrypt_fail,mark + call le_supervision_flush + call le_check_wak + fetch 1,mem_le_rxbuf + isolate1 md,pdata + setflag true,mark_ble_rx_md,mark + rshift pdata,pdata + ixor temp,pdata + isolate1 nesn,pdata + setflag true,mark_old_packet,mark /* retransmit */ + rtnmark1 mark_old_packet + fetch 1,mem_le_rxbuf+1 + branch le_ack_unenc,blank /* empty packet, no decryption */ + fetch 1,mem_le_state + bbit0 lestate_encryption,le_ack_unenc + call load_sk + call le_decrypt + nbranch p_le_decrypt_fail,blank + branch le_ack_unenc + +p_le_decrypt_fail: + set1 mark_le_decrypt_fail,mark + fetcht 1,mem_le_arq + setflip sn,temp + storet 1,mem_le_arq + rtn + p_le_prepare_tx: fetch 1,mem_le_arq bbit1 wak,p_le_prepare_tx_wak @@ -2546,9 +2578,7 @@ iand temp,pdata add pdata,250,pdata call delay - arg le_adv_interval_timer,queue - fetch 2,mem_le_adv_interval - branch timer_init + branch le_adv_not_match+10 //p_le_adv_random_delay: // random pdata // arg 0x1ff,temp Index: output/flash.dat =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/flash.dat (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/flash.dat (working copy) @@ -2,7 +2,7 @@ 02 aa 55 -9e +ee 1f 20 20 @@ -11,7 +11,7 @@ 20 40 03 -a7 +a3 68 00 c1 @@ -23,7 +23,7 @@ 20 40 07 -74 +88 68 00 c6 @@ -47,7 +47,7 @@ 20 40 03 -13 +0f 20 40 00 @@ -59,7 +59,7 @@ 20 40 00 -63 +64 70 11 c5 @@ -67,11 +67,11 @@ 20 20 07 -c6 +da 58 00 03 -6e +6a 60 01 4d @@ -79,7 +79,7 @@ 58 00 03 -88 +84 60 01 41 @@ -87,7 +87,7 @@ 58 00 06 -aa +be 60 01 41 @@ -95,7 +95,7 @@ 58 00 03 -c2 +be 60 01 41 @@ -103,7 +103,7 @@ 58 00 02 -4f +4b 60 01 41 @@ -111,7 +111,7 @@ 58 00 04 -4e +4b 60 01 41 @@ -119,7 +119,7 @@ 58 00 03 -ea +e6 60 01 41 @@ -127,7 +127,7 @@ 58 00 04 -89 +86 60 01 41 @@ -135,7 +135,7 @@ 58 00 04 -92 +8f 60 01 41 @@ -159,11 +159,11 @@ 20 40 02 -ca +c6 20 40 04 -8f +8c 68 00 c7 @@ -183,7 +183,7 @@ 20 20 05 -60 +5d 58 00 01 @@ -267,31 +267,31 @@ c0 00 80 -6f +70 c0 01 00 -7f +80 c0 42 87 -c4 +d8 c0 44 87 -97 +ab c0 28 86 -e0 +f4 c0 53 86 -e5 +f9 c0 56 -86 -fd +87 +11 c0 65 b3 @@ -299,47 +299,47 @@ c0 74 87 -0e +22 c0 50 80 -88 +89 c0 58 80 -8d +8e c0 59 00 -97 +98 c0 62 02 -90 +8c c0 71 85 -62 +5f c0 72 03 -ed +e9 c0 73 05 -7f +7c c0 75 05 -e0 +dd c0 75 85 -e5 +e2 c0 76 05 -eb +e8 20 20 2a @@ -347,55 +347,59 @@ c0 1c 85 -f1 +ee c0 21 85 -f9 +f7 c0 25 05 -ff +fd c0 2b 86 -02 +00 c0 2c 86 +02 +c0 +2d +06 04 c0 31 86 -06 +1c c0 33 06 -35 +4b c0 33 86 -4c +62 c0 35 06 -96 +ac c0 3b 86 -a0 +b4 c0 46 06 -ac +c0 c0 46 86 -b8 +cc c0 7d 07 -12 +26 20 20 2a @@ -407,7 +411,7 @@ 20 40 04 -e1 +de 24 60 80 @@ -419,7 +423,7 @@ 20 40 04 -e1 +de 24 60 80 @@ -442,12 +446,12 @@ 00 20 40 -05 -01 +04 +fe 20 20 -03 -00 +02 +fc d8 a0 09 @@ -463,7 +467,7 @@ 20 40 03 -7f +7b 68 10 80 @@ -543,7 +547,7 @@ 20 3a 00 -82 +83 20 20 20 @@ -619,11 +623,11 @@ c2 80 80 -ac +ad c2 81 00 -ae +af 68 00 cd @@ -631,23 +635,23 @@ c0 00 80 -b4 +b5 20 40 01 -2f +2b 24 34 00 -b6 +b7 20 40 01 -0a +06 20 40 00 -e5 +e1 68 00 cc @@ -659,11 +663,11 @@ 20 40 06 -ce +e2 20 40 00 -b0 +b1 68 00 cb @@ -671,11 +675,11 @@ c0 00 83 -71 +6d 20 40 02 -59 +55 24 74 00 @@ -683,7 +687,7 @@ 20 40 02 -56 +52 58 00 d2 @@ -699,7 +703,7 @@ 20 20 07 -c6 +da 70 11 c5 @@ -707,7 +711,7 @@ 20 20 07 -c6 +da 58 01 77 @@ -731,7 +735,7 @@ 20 20 07 -c6 +da 68 00 cc @@ -739,11 +743,11 @@ 20 5a 00 -bc +bd 20 40 02 -59 +55 24 74 00 @@ -767,7 +771,7 @@ 20 40 00 -cc +cd 60 00 cb @@ -807,11 +811,11 @@ 20 40 01 -32 +2e 20 20 00 -a0 +a1 70 4d 79 @@ -840,26 +844,6 @@ 00 cc 44 -79 -20 -7e -04 -60 -00 -cc -44 -60 -00 -cb -ff -20 -60 -00 -00 -68 -00 -cc -44 c4 02 00 @@ -883,11 +867,11 @@ 20 40 06 -26 +3c 20 20 01 -1d +19 68 00 cd @@ -895,7 +879,7 @@ c0 80 80 -cc +cd 68 00 cd @@ -911,11 +895,11 @@ c0 02 00 -fa +f6 20 40 01 -1d +19 70 4c 88 @@ -935,27 +919,27 @@ 20 40 01 -55 +51 24 2c 01 -60 +5c 24 37 81 -60 +5c 20 40 01 -52 +4e 20 40 01 -7b +77 20 40 07 -77 +8b 70 4b 52 @@ -975,7 +959,7 @@ 20 40 00 -d5 +d1 68 00 cc @@ -983,11 +967,11 @@ c0 ff 81 -99 +95 20 40 -01 -01 +00 +fd 58 00 00 @@ -1007,7 +991,7 @@ 20 40 06 -26 +3c 70 4d 76 @@ -1015,7 +999,7 @@ 20 20 00 -cc +cd 70 4d 7b @@ -1031,7 +1015,7 @@ 20 20 00 -cc +cd 68 00 cd @@ -1039,7 +1023,7 @@ c0 01 80 -fe +fa 68 00 cc @@ -1051,7 +1035,7 @@ 20 20 80 -ca +cb 68 00 cd @@ -1059,11 +1043,11 @@ c0 00 80 -fd +f9 c0 01 00 -fe +fa 20 60 00 @@ -1079,11 +1063,11 @@ 20 40 01 -0f +0b 24 56 01 -17 +13 20 60 00 @@ -1127,7 +1111,7 @@ 20 3a 01 -2a +26 1f e0 ff @@ -1207,7 +1191,7 @@ 24 3a 00 -dd +d9 70 4c 88 @@ -1215,7 +1199,7 @@ 20 20 01 -1d +19 68 00 cc @@ -1223,15 +1207,15 @@ c0 ff 81 -97 +93 20 40 01 -35 +31 20 40 01 -b3 +af 70 4c 48 @@ -1251,7 +1235,7 @@ 20 34 01 -3b +37 68 03 cb @@ -1267,7 +1251,7 @@ 20 40 03 -9f +9b 70 4c 6f @@ -1283,7 +1267,7 @@ 20 40 00 -cc +cd 60 00 cb @@ -1351,7 +1335,7 @@ c2 00 01 -4b +47 20 60 00 @@ -1375,7 +1359,7 @@ 20 40 02 -0f +0b 18 00 2a @@ -1403,11 +1387,11 @@ 20 40 01 -cb +c7 20 57 82 -0c +08 20 60 00 @@ -1447,15 +1431,15 @@ c0 ff 81 -6b +67 20 40 01 -73 +6f 20 20 00 -e6 +e2 68 00 cc @@ -1479,15 +1463,15 @@ 20 40 07 -8e +a2 20 40 06 -26 +3c 20 20 01 -1d +19 68 00 cc @@ -1499,7 +1483,7 @@ 24 21 01 -70 +6c 1f e0 fe @@ -1511,11 +1495,11 @@ c0 03 00 -d7 +d3 c0 06 00 -d7 +d3 20 60 00 @@ -1523,7 +1507,7 @@ 20 40 01 -a6 +a2 68 00 cc @@ -1591,7 +1575,7 @@ c2 00 01 -8a +86 1a 22 7e @@ -1623,7 +1607,7 @@ 20 40 01 -82 +7e 70 4c 53 @@ -1639,11 +1623,11 @@ 20 20 07 -c6 +da 20 40 07 -74 +88 70 11 c5 @@ -1651,7 +1635,7 @@ 20 20 07 -c6 +da 79 3f 80 @@ -1843,7 +1827,7 @@ 20 40 01 -c5 +c1 78 57 fc @@ -1879,7 +1863,7 @@ 24 2c 02 -0c +08 78 46 fc @@ -1899,7 +1883,7 @@ 20 40 02 -09 +05 60 00 cc @@ -1915,11 +1899,11 @@ 24 22 82 -0c +08 20 40 02 -09 +05 60 00 cb @@ -1939,11 +1923,11 @@ 24 20 82 -0c +08 20 40 02 -09 +05 e0 a0 80 @@ -1959,11 +1943,11 @@ 20 22 81 -ec +e8 20 40 02 -09 +05 e0 a0 80 @@ -1971,7 +1955,7 @@ c2 00 01 -e9 +e5 18 a2 22 @@ -1979,7 +1963,7 @@ 20 40 02 -09 +05 60 00 cd @@ -2019,7 +2003,7 @@ 20 23 02 -0c +08 78 37 fc @@ -2127,7 +2111,7 @@ 20 40 01 -c5 +c1 20 40 29 @@ -2219,7 +2203,7 @@ c2 00 02 -27 +23 78 24 7c @@ -2335,7 +2319,7 @@ c2 00 02 -44 +40 18 49 7e @@ -2375,11 +2359,11 @@ 20 40 03 -75 +71 20 40 02 -61 +5d 68 00 c0 @@ -2387,7 +2371,7 @@ c3 00 02 -56 +52 68 00 80 @@ -2443,11 +2427,11 @@ 20 40 02 -8d +89 20 40 02 -56 +52 20 40 3e @@ -2551,7 +2535,7 @@ 20 40 05 -da +d7 68 08 c6 @@ -2559,7 +2543,7 @@ 20 40 05 -da +d7 68 08 c6 @@ -2567,7 +2551,7 @@ 20 40 05 -da +d7 68 08 c6 @@ -2575,7 +2559,7 @@ 20 40 05 -da +d7 68 00 80 @@ -2627,7 +2611,7 @@ 20 20 05 -62 +5f 70 89 5b @@ -2651,7 +2635,7 @@ 20 35 83 -13 +0f 68 01 c4 @@ -2667,7 +2651,7 @@ 20 40 00 -6b +6c 68 08 c7 @@ -2683,7 +2667,7 @@ 24 42 82 -b5 +b1 68 00 c7 @@ -2691,7 +2675,7 @@ c0 7f 82 -a2 +9e 1f e6 7c @@ -2699,23 +2683,23 @@ 24 22 82 -a4 +a0 20 40 05 -b6 +b3 c0 02 82 -c8 +c4 20 40 02 -b2 +ae 20 40 04 -e5 +e2 da 20 47 @@ -2735,7 +2719,7 @@ 20 22 83 -60 +5c 1f e0 ff @@ -2759,7 +2743,7 @@ c0 1a 02 -b8 +b4 20 60 00 @@ -2795,7 +2779,7 @@ 20 20 07 -c6 +da da 20 43 @@ -2823,7 +2807,7 @@ 20 20 02 -bb +b7 70 4b b3 @@ -2859,11 +2843,11 @@ 20 20 07 -c6 +da 20 40 03 -13 +0f 20 40 40 @@ -2875,11 +2859,11 @@ c0 18 02 -d6 +d2 c0 18 82 -e5 +e1 20 40 40 @@ -2891,7 +2875,7 @@ 20 20 02 -cc +c8 70 4b 00 @@ -2903,7 +2887,7 @@ 20 40 02 -ca +c6 20 20 64 @@ -2911,7 +2895,7 @@ 20 40 05 -58 +55 68 00 c6 @@ -2919,7 +2903,7 @@ c0 2d 02 -da +d6 20 20 40 @@ -2935,11 +2919,11 @@ 20 40 02 -de +da 20 20 05 -5e +5b ea 61 00 @@ -2967,11 +2951,11 @@ 20 20 02 -de +da 20 40 05 -58 +55 20 20 40 @@ -3035,7 +3019,7 @@ 20 40 03 -52 +4e 20 40 44 @@ -3055,7 +3039,7 @@ 20 22 83 -42 +3e 60 09 47 @@ -3079,15 +3063,15 @@ 20 40 05 -18 +15 68 01 47 0f 20 3a -03 -00 +02 +fc 68 00 c2 @@ -3099,39 +3083,39 @@ 20 40 03 -52 +4e 20 40 03 -1e +1a 20 40 03 -2d +29 20 40 03 -3c +38 20 40 03 -31 +2d 20 40 03 -22 +1e 20 40 03 -15 +11 20 40 02 -e7 +e3 20 40 03 -2d +29 d8 40 00 @@ -3147,11 +3131,11 @@ 20 40 03 -1a +16 20 40 03 -4b +47 70 42 12 @@ -3163,11 +3147,11 @@ 20 40 02 -e7 +e3 20 40 03 -2d +29 d8 40 00 @@ -3191,11 +3175,11 @@ 20 40 03 -31 +2d 20 20 03 -22 +1e 68 01 c7 @@ -3207,7 +3191,7 @@ 20 40 03 -2d +29 20 40 65 @@ -3215,11 +3199,11 @@ 20 40 03 -25 +21 c2 80 03 -22 +1e 20 60 00 @@ -3263,11 +3247,11 @@ 20 40 03 -25 +21 c3 00 83 -2e +2a 20 60 00 @@ -3343,11 +3327,11 @@ 20 40 03 -52 +4e 20 40 03 -3c +38 20 40 65 @@ -3355,11 +3339,11 @@ 20 40 03 -54 +50 20 40 03 -5b +57 20 40 43 @@ -3383,7 +3367,7 @@ 20 40 02 -e7 +e3 20 40 69 @@ -3411,11 +3395,11 @@ 20 20 03 -4c +48 20 40 03 -52 +4e d8 40 00 @@ -3443,7 +3427,7 @@ 20 40 03 -52 +4e d8 40 00 @@ -3459,7 +3443,7 @@ 20 20 03 -58 +54 70 47 20 @@ -3467,7 +3451,7 @@ 20 40 07 -67 +7b 70 11 c5 @@ -3475,11 +3459,11 @@ 20 20 07 -c6 +da 20 40 07 -6c +80 70 11 c5 @@ -3487,7 +3471,7 @@ 20 20 07 -c6 +da 20 40 7f @@ -3511,7 +3495,7 @@ c2 00 03 -69 +65 20 60 00 @@ -3555,7 +3539,7 @@ 20 40 03 -7d +79 d8 c0 19 @@ -3563,7 +3547,7 @@ 20 40 03 -7d +79 d8 c0 1a @@ -3571,7 +3555,7 @@ 20 40 03 -7d +79 d8 c0 1b @@ -3595,7 +3579,7 @@ 20 40 03 -7d +79 d8 a0 19 @@ -3603,7 +3587,7 @@ 20 40 03 -7d +79 d8 a0 1a @@ -3611,7 +3595,7 @@ 20 40 03 -7d +79 d8 a0 1b @@ -3619,7 +3603,7 @@ 20 20 03 -7d +79 20 40 58 @@ -3635,7 +3619,7 @@ c0 7f 83 -8f +8b 68 00 c6 @@ -3655,7 +3639,7 @@ 20 5a 03 -e7 +e3 68 02 46 @@ -3675,15 +3659,15 @@ 20 40 03 -9c +98 20 40 03 -9f +9b 20 40 03 -bd +b9 da 20 46 @@ -3695,7 +3679,7 @@ 20 54 03 -ac +a8 20 60 00 @@ -3743,7 +3727,7 @@ 20 20 02 -d2 +ce 70 47 a2 @@ -3791,7 +3775,7 @@ 20 34 03 -b4 +b0 20 60 00 @@ -3879,7 +3863,7 @@ 20 5a 03 -e7 +e3 68 02 46 @@ -3903,15 +3887,15 @@ 20 40 03 -9c +98 20 40 03 -9f +9b 20 40 03 -bd +b9 68 00 cb @@ -3919,7 +3903,7 @@ c0 00 83 -d6 +d2 68 00 cb @@ -4011,7 +3995,7 @@ 20 20 02 -d2 +ce 20 40 7e @@ -4019,15 +4003,15 @@ 20 40 04 -35 +31 20 20 03 -ed +e9 20 40 03 -f0 +ec 20 40 3f @@ -4099,11 +4083,11 @@ c0 00 84 -04 +00 c0 01 04 -08 +04 68 00 c6 @@ -4111,7 +4095,7 @@ c2 83 84 -14 +10 20 60 00 @@ -4123,11 +4107,11 @@ c0 00 04 -0c +08 c0 01 84 -0e +0a 20 60 00 @@ -4139,11 +4123,11 @@ c0 00 04 -10 +0c c0 01 84 -12 +0e 20 60 00 @@ -4195,19 +4179,19 @@ c0 00 04 -1c +18 c0 00 84 -1f +1b c0 01 04 -22 +1e c0 01 84 -25 +21 20 60 00 @@ -4219,7 +4203,7 @@ c0 01 84 -28 +24 20 60 00 @@ -4231,7 +4215,7 @@ c0 00 04 -28 +24 20 60 00 @@ -4243,7 +4227,7 @@ c0 01 84 -2d +29 20 60 00 @@ -4255,7 +4239,7 @@ c0 00 04 -2d +29 20 60 00 @@ -4311,11 +4295,11 @@ 20 20 05 -d5 +d2 20 40 04 -32 +2e 68 08 c6 @@ -4323,7 +4307,7 @@ 20 40 05 -da +d7 68 08 c6 @@ -4335,11 +4319,11 @@ 20 20 84 -4a +46 20 40 05 -d5 +d2 68 00 c6 @@ -4379,11 +4363,11 @@ 20 42 84 -4c +48 1f e0 fe -01 +02 60 00 cb @@ -4391,7 +4375,7 @@ 20 40 07 -64 +78 20 20 3d @@ -4399,7 +4383,7 @@ 20 40 05 -d5 +d2 20 20 3d @@ -4408,6 +4392,10 @@ ef fe 02 +1f +e0 +ff +ff 20 60 00 @@ -4419,31 +4407,31 @@ c0 0a 04 -5f +5c c0 0a 84 -61 +5e c0 14 84 -64 +61 c0 19 04 -66 +63 c0 20 04 -68 +65 c0 02 04 -6a +67 c0 09 84 -6a +67 c0 0c b3 @@ -4451,31 +4439,31 @@ c0 10 84 -6e +6b c0 00 84 -70 +6d c0 01 04 -74 +71 c0 15 84 -77 +74 c0 1c 84 -79 +76 c0 1d 04 -7e +7b c0 1e 04 -84 +81 20 20 41 @@ -4487,11 +4475,11 @@ 20 20 07 -c6 +da 20 40 04 -8c +89 70 11 c5 @@ -4499,7 +4487,7 @@ 20 20 07 -c6 +da 70 0a 99 @@ -4515,7 +4503,7 @@ 20 20 07 -c6 +da 70 11 c5 @@ -4523,7 +4511,7 @@ 20 20 07 -c6 +da 70 11 c5 @@ -4531,7 +4519,7 @@ 20 20 07 -c6 +da 70 11 c5 @@ -4539,7 +4527,7 @@ 20 20 07 -c6 +da 70 11 c5 @@ -4547,7 +4535,7 @@ 20 20 07 -c6 +da 70 4b b9 @@ -4559,7 +4547,7 @@ 20 40 02 -d2 +ce 20 20 42 @@ -4567,7 +4555,7 @@ 20 40 04 -8c +89 70 11 c5 @@ -4575,7 +4563,7 @@ 20 20 07 -c6 +da 70 11 c5 @@ -4583,11 +4571,11 @@ 20 20 07 -c6 +da 20 40 07 -52 +66 70 4b b9 @@ -4595,7 +4583,7 @@ 20 40 02 -d2 +ce 70 11 c5 @@ -4603,7 +4591,7 @@ 20 20 07 -c6 +da 70 4b b9 @@ -4615,11 +4603,11 @@ 20 40 07 -64 +78 20 40 04 -8c +89 70 11 c5 @@ -4627,15 +4615,15 @@ 20 20 07 -c6 +da 20 40 07 -56 +6a 20 40 07 -67 +7b 70 4b b9 @@ -4643,7 +4631,7 @@ 20 40 02 -d2 +ce 20 20 3f @@ -4651,7 +4639,7 @@ 20 40 04 -8c +89 70 11 c5 @@ -4659,7 +4647,7 @@ 20 20 07 -c6 +da 68 00 cb @@ -4675,7 +4663,7 @@ 20 40 02 -ca +c6 58 00 08 @@ -4687,19 +4675,19 @@ 20 40 05 -0f +0c 20 40 05 -47 +44 20 40 04 -c1 +be 20 40 04 -e5 +e2 20 40 42 @@ -4711,31 +4699,31 @@ 20 40 04 -c6 +c3 20 40 04 -cd +ca 20 40 04 -ad +aa 20 40 04 -aa +a7 20 40 04 -b3 +b0 20 40 04 -b9 +b6 20 40 04 -a2 +9f 20 40 42 @@ -4743,11 +4731,11 @@ 20 40 04 -a5 +a2 20 20 07 -2a +3e da 60 48 @@ -4767,7 +4755,7 @@ da 40 04 -a8 +a5 20 20 33 @@ -4799,7 +4787,7 @@ da 40 04 -b0 +ad 20 20 33 @@ -4823,7 +4811,7 @@ da 40 04 -b6 +b3 20 20 33 @@ -4839,7 +4827,7 @@ 20 20 04 -cb +c8 68 00 cb @@ -4855,7 +4843,7 @@ da 40 04 -be +bb 20 20 33 @@ -4879,7 +4867,7 @@ da 40 04 -c4 +c1 20 20 33 @@ -4899,7 +4887,7 @@ da 40 04 -c9 +c6 20 20 33 @@ -4927,7 +4915,7 @@ da 40 04 -d0 +cd 20 20 33 @@ -4947,7 +4935,7 @@ da 40 04 -d5 +d2 20 20 33 @@ -5007,7 +4995,7 @@ 20 40 05 -d5 +d2 68 08 c6 @@ -5019,15 +5007,15 @@ 20 40 04 -e1 +de 24 20 84 -f0 +ed 20 40 04 -d2 +cf 68 00 c6 @@ -5067,7 +5055,7 @@ 24 3a 05 -08 +05 68 00 c6 @@ -5087,7 +5075,7 @@ 24 41 04 -fb +f8 68 00 c6 @@ -5106,16 +5094,16 @@ 00 20 40 -05 -01 +04 +fe 70 41 bd 00 20 40 -03 -00 +02 +fc 68 02 46 @@ -5183,7 +5171,7 @@ 20 20 07 -64 +78 68 01 4b @@ -5231,7 +5219,7 @@ 20 40 05 -32 +2f 20 40 69 @@ -5255,7 +5243,7 @@ 20 41 05 -2f +2c 60 01 47 @@ -5267,11 +5255,11 @@ 20 20 05 -24 +21 20 40 05 -3a +37 68 00 c2 @@ -5283,7 +5271,7 @@ c3 00 05 -2a +27 70 4a ff @@ -5311,7 +5299,7 @@ 20 20 07 -58 +6c d8 40 00 @@ -5455,7 +5443,7 @@ 24 41 05 -56 +53 1f e6 7c @@ -5463,11 +5451,11 @@ 20 21 07 -4a +5e 20 20 07 -58 +6c 70 46 cf @@ -5479,7 +5467,7 @@ 20 40 03 -13 +0f 58 00 80 @@ -5499,7 +5487,7 @@ 20 40 02 -de +da 68 00 c7 @@ -5507,7 +5495,7 @@ c0 ff 85 -62 +5f 68 00 c6 @@ -5527,11 +5515,11 @@ c0 03 05 -72 +6f c0 03 85 -72 +6f 68 00 c7 @@ -5543,7 +5531,7 @@ 20 42 85 -6d +6a 68 00 c7 @@ -5551,7 +5539,7 @@ c0 00 05 -6f +6c c0 01 bd @@ -5591,7 +5579,7 @@ 20 42 85 -6d +6a 68 00 c7 @@ -5599,11 +5587,11 @@ c0 00 05 -7b +78 c0 01 85 -7d +7a 68 00 cb @@ -5623,7 +5611,7 @@ 20 20 05 -79 +76 68 00 cb @@ -5631,7 +5619,7 @@ 20 20 05 -79 +76 78 54 7c @@ -5647,11 +5635,11 @@ 20 40 05 -8a +87 20 40 02 -8d +89 20 40 40 @@ -5663,11 +5651,11 @@ 20 40 05 -b4 +b1 20 40 05 -97 +94 24 74 00 @@ -5691,15 +5679,15 @@ c0 02 05 -90 +8d c0 02 85 -92 +8f 20 20 05 -94 +91 20 40 3f @@ -5751,7 +5739,7 @@ 20 40 05 -a2 +9f 60 01 46 @@ -5763,7 +5751,7 @@ 20 40 05 -a2 +9f 60 01 46 @@ -5775,11 +5763,11 @@ c2 85 85 -a5 +a2 c3 05 85 -a9 +a6 20 60 00 @@ -5791,7 +5779,7 @@ 20 40 05 -a9 +a6 1f e6 7e @@ -5807,7 +5795,7 @@ 20 20 05 -ab +a8 60 01 4b @@ -5823,7 +5811,7 @@ 24 41 05 -b1 +ae 68 01 4b @@ -5847,7 +5835,7 @@ 20 40 05 -b6 +b3 20 20 40 @@ -5859,7 +5847,7 @@ 20 40 05 -b9 +b6 20 20 40 @@ -5871,7 +5859,7 @@ 20 40 05 -d5 +d2 68 08 c6 @@ -5891,7 +5879,7 @@ 20 40 05 -d5 +d2 68 08 c6 @@ -5911,7 +5899,7 @@ 20 40 05 -d5 +d2 68 08 c6 @@ -5927,7 +5915,7 @@ 20 40 04 -32 +2e 68 08 c6 @@ -5935,7 +5923,7 @@ 20 40 05 -da +d7 68 08 c6 @@ -5951,11 +5939,11 @@ 20 40 05 -d5 +d2 20 40 04 -32 +2e 68 08 c6 @@ -5963,7 +5951,7 @@ 20 40 05 -da +d7 68 08 c6 @@ -5995,7 +5983,7 @@ 20 20 05 -de +db 79 3f 84 @@ -6027,7 +6015,7 @@ 20 40 81 -9c +98 20 20 42 @@ -6039,7 +6027,7 @@ 20 20 07 -c6 +da 70 11 c5 @@ -6047,7 +6035,7 @@ 20 20 07 -c6 +da d8 a0 43 @@ -6067,7 +6055,7 @@ 20 40 07 -52 +66 58 00 00 @@ -6083,7 +6071,7 @@ 20 40 02 -d2 +ce 20 20 42 @@ -6108,6 +6096,10 @@ 40 55 aa +c5 +17 +53 +95 20 40 56 @@ -6115,7 +6107,7 @@ 20 40 06 -ce +e2 20 20 53 @@ -6151,7 +6143,7 @@ 20 40 01 -ff +fb 20 20 54 @@ -6163,7 +6155,7 @@ 20 20 07 -c6 +da 70 11 c5 @@ -6171,7 +6163,103 @@ 20 20 07 +da +79 +3f +80 +2e +20 +40 +56 +ed +20 +40 +55 +c0 +68 +00 +82 +d9 +2f +ef +fe +04 +79 +20 +80 +2a +1f +e3 +7e +00 +98 +42 +fe +00 +2f +ef +fe +02 +79 +20 +80 +0f c6 +07 +80 +00 +68 +00 +82 +da +20 +3a +55 +bc +68 +00 +84 +3f +c3 +02 +55 +bc +20 +40 +74 +8d +20 +40 +73 +fb +24 +3a +06 +17 +20 +20 +55 +bc +79 +20 +00 +2e +68 +08 +84 +56 +79 +40 +04 +03 +60 +08 +84 +56 +20 +60 +00 +00 68 00 84 @@ -6179,11 +6267,11 @@ c2 82 86 -25 +3b 20 40 07 -77 +8b 68 00 c7 @@ -6191,7 +6279,7 @@ 24 3a 06 -10 +26 68 00 84 @@ -6199,7 +6287,7 @@ c3 02 06 -14 +2a 68 00 82 @@ -6207,7 +6295,7 @@ 20 3a 06 -14 +2a 20 20 56 @@ -6235,7 +6323,7 @@ c0 82 86 -17 +2d 70 47 8e @@ -6247,7 +6335,7 @@ 20 5a 03 -b0 +ac 20 20 56 @@ -6299,7 +6387,7 @@ 20 40 06 -1a +30 68 00 cd @@ -6311,7 +6399,7 @@ 24 41 07 -7b +8f 68 00 cd @@ -6415,7 +6503,7 @@ c0 01 86 -44 +5a 20 20 56 @@ -6427,7 +6515,7 @@ c0 00 86 -47 +5d 20 20 5c @@ -6459,11 +6547,11 @@ c0 02 06 -50 +66 c0 03 06 -8e +a4 20 20 56 @@ -6475,7 +6563,7 @@ 20 40 06 -2e +44 20 40 7e @@ -6491,7 +6579,7 @@ c0 08 06 -5f +75 1f ec 84 @@ -6503,7 +6591,7 @@ 20 21 06 -6d +83 d8 40 47 @@ -6587,11 +6675,11 @@ c0 05 06 -70 +86 c0 09 06 -7e +94 20 20 58 @@ -6607,7 +6695,7 @@ c2 81 86 -77 +8d 68 01 04 @@ -6635,7 +6723,7 @@ 24 22 86 -73 +89 20 40 5a @@ -6643,7 +6731,7 @@ 24 34 06 -73 +89 70 04 7a @@ -6723,11 +6811,11 @@ c0 00 86 -92 +a8 c0 02 86 -94 +aa 20 20 5a @@ -6747,7 +6835,7 @@ 20 20 07 -c6 +da 68 00 80 @@ -6776,18 +6864,10 @@ 40 3c be -d8 -e0 -00 -00 -68 -01 -44 -82 20 20 -7f -08 +57 +10 78 55 fc @@ -6795,7 +6875,7 @@ 20 37 06 -a3 +b7 24 36 d8 @@ -6835,7 +6915,7 @@ 20 20 07 -c6 +da 68 10 80 @@ -6875,7 +6955,7 @@ 20 40 06 -b9 +cd 60 18 80 @@ -6951,7 +7031,7 @@ 20 40 86 -ca +de 20 20 24 @@ -6967,11 +7047,11 @@ 20 40 86 -26 +3c 24 40 87 -77 +8b 68 01 46 @@ -6995,7 +7075,7 @@ 20 40 02 -41 +3d 60 08 cd @@ -7007,7 +7087,7 @@ c5 13 06 -d8 +ec 58 00 00 @@ -7019,7 +7099,7 @@ 24 21 07 -8d +a1 68 00 cd @@ -7031,7 +7111,7 @@ 24 21 07 -7d +91 68 00 cd @@ -7039,7 +7119,7 @@ c0 00 07 -8e +a2 20 60 00 @@ -7059,7 +7139,7 @@ 20 40 01 -ff +fb 20 20 25 @@ -7102,8 +7182,8 @@ 5a 20 3a -06 -f1 +07 +05 68 00 c5 @@ -7211,7 +7291,7 @@ 20 5a 07 -0b +1f 20 20 2b @@ -7243,7 +7323,7 @@ 20 20 07 -c6 +da 20 40 62 @@ -7263,15 +7343,15 @@ c0 0f 87 -1d +31 c0 10 07 -20 +34 c0 09 07 -1a +2e 20 20 7d @@ -7299,7 +7379,7 @@ 20 20 07 -22 +36 70 01 85 @@ -7338,8 +7418,8 @@ fb 20 20 -03 -00 +02 +fc 68 00 cb @@ -7355,11 +7435,11 @@ c0 00 07 -30 +44 c0 00 87 -3a +4e 20 60 00 @@ -7367,7 +7447,7 @@ 20 40 07 -4a +5e 68 00 cb @@ -7391,7 +7471,7 @@ 20 42 87 -38 +4c 20 60 00 @@ -7403,7 +7483,7 @@ 20 20 07 -58 +6c 68 00 cb @@ -7435,7 +7515,7 @@ 20 3a 07 -46 +5a 68 00 cb @@ -7443,7 +7523,7 @@ 20 3a 07 -56 +6a 1f e0 ff @@ -7459,11 +7539,11 @@ c0 00 87 -58 +6c c0 00 07 -4a +5e 20 60 00 @@ -7479,15 +7559,15 @@ c0 00 87 -50 +64 c0 01 07 -4f +63 20 20 07 -51 +65 20 20 44 @@ -7531,7 +7611,7 @@ 24 3a 07 -5c +70 70 4b 27 @@ -7583,7 +7663,7 @@ 20 20 07 -70 +84 70 4b 31 @@ -7695,7 +7775,7 @@ c5 13 07 -84 +98 58 00 00 @@ -7715,7 +7795,7 @@ c0 00 07 -95 +a9 1f e0 ff @@ -7727,7 +7807,7 @@ c0 00 07 -95 +a9 70 41 de @@ -7747,7 +7827,7 @@ c0 01 07 -93 +a7 1f e0 fe @@ -7759,7 +7839,7 @@ c0 00 87 -8b +9f 70 41 de @@ -7843,19 +7923,19 @@ c0 01 07 -af +c3 c0 02 07 -b7 +cb c0 10 07 -c1 +d5 20 40 07 -bc +d0 70 89 55 @@ -7907,7 +7987,7 @@ 20 40 07 -bc +d0 70 89 55 @@ -7983,7 +8063,7 @@ 20 22 87 -e5 +f9 60 08 cb @@ -8027,7 +8107,7 @@ 20 40 03 -52 +4e 68 01 cb @@ -8059,11 +8139,11 @@ 24 22 87 -d6 +ea 20 40 03 -13 +0f 58 00 1f @@ -8096,8 +8176,8 @@ 20 00 01 -26 -b7 +dd +12 aa 55 08 @@ -8273,7 +8353,7 @@ 08 04 80 -02 +06 c8 04 80 @@ -9175,14 +9255,14 @@ 00 57 4b -e8 -31 +38 +32 00 55 aa aa 55 -04 +08 1c ff 20 @@ -9208,7 +9288,7 @@ 20 40 02 -d2 +ce 20 40 34 @@ -9232,7 +9312,7 @@ 20 40 03 -a7 +a3 20 20 41 @@ -9240,7 +9320,7 @@ 20 40 02 -32 +2e 24 74 00 @@ -9276,7 +9356,7 @@ 20 20 00 -9d +9e 70 4d 83 @@ -9484,15 +9564,15 @@ 20 40 01 -a1 +9d 20 40 01 -b3 +af 20 40 01 -55 +51 24 2c 00 @@ -9504,7 +9584,7 @@ 20 40 01 -7b +77 68 02 4c @@ -9536,7 +9616,7 @@ 20 40 02 -b2 +ae 68 02 4c @@ -9552,7 +9632,7 @@ 20 22 81 -94 +90 68 02 4c @@ -9580,11 +9660,11 @@ 20 40 01 -52 +4e 20 20 03 -71 +6d 68 02 4c @@ -9592,7 +9672,7 @@ 20 20 01 -86 +82 68 00 cd @@ -9620,11 +9700,11 @@ 20 20 01 -82 +7e 20 40 02 -b2 +ae 68 02 4c @@ -9656,11 +9736,11 @@ 20 40 01 -87 +83 20 20 01 -1d +19 70 41 de @@ -9780,7 +9860,7 @@ 20 40 04 -64 +61 70 46 c6 @@ -9804,7 +9884,7 @@ 20 40 07 -64 +78 70 4b 01 @@ -9819,8 +9899,8 @@ 00 20 40 -03 -00 +02 +fc 20 20 41 @@ -9988,11 +10068,11 @@ 20 40 02 -b2 +ae 20 40 01 -9c +98 70 41 bd @@ -10008,7 +10088,7 @@ 20 40 02 -63 +5f 20 20 34 @@ -10052,7 +10132,7 @@ 20 40 04 -64 +61 70 47 c6 @@ -10096,7 +10176,7 @@ 20 5a 05 -0c +09 70 4b ba @@ -10128,15 +10208,15 @@ 20 40 03 -a7 +a3 20 40 58 16 20 40 -03 -00 +02 +fc 20 20 41 @@ -10164,11 +10244,11 @@ 20 40 07 -56 +6a 20 40 -03 -00 +02 +fc 20 40 3e @@ -10176,11 +10256,11 @@ 20 40 02 -63 +5f 20 40 03 -4b +47 68 10 80 @@ -10196,7 +10276,7 @@ 20 20 02 -7b +77 00 00 00 @@ -10324,11 +10404,11 @@ 20 40 01 -a1 +9d 20 40 01 -32 +2e 20 20 7f @@ -10364,7 +10444,7 @@ 20 20 00 -f6 +f2 70 4c 53 @@ -10372,7 +10452,7 @@ 20 20 00 -f6 +f2 70 4c 53 @@ -10392,15 +10472,15 @@ 20 40 01 -86 +82 20 20 00 -f6 +f2 20 40 04 -88 +85 70 47 8b @@ -10432,7 +10512,7 @@ 20 40 02 -b2 +ae 68 02 4c @@ -10443,8 +10523,8 @@ 7b 20 20 -03 -00 +02 +fc 00 00 00 @@ -10568,11 +10648,11 @@ 20 40 05 -e3 +e0 20 40 02 -f5 +f1 df 20 00 @@ -10584,11 +10664,11 @@ 20 40 03 -67 +63 24 34 02 -c1 +bd df 20 00 @@ -10600,15 +10680,15 @@ 20 40 03 -67 +63 24 34 02 -c1 +bd 20 40 02 -c3 +bf 20 60 00 @@ -10752,15 +10832,15 @@ 20 40 01 -55 +51 24 2c 01 -1d +19 24 37 81 -1d +19 68 00 cd @@ -10784,11 +10864,11 @@ 20 40 01 -52 +4e 20 20 03 -71 +6d 70 11 9e @@ -10820,11 +10900,11 @@ 20 40 01 -a1 +9d 20 20 01 -b3 +af 5f ff ff @@ -10851,8 +10931,8 @@ ff 20 20 -03 -00 +02 +fc 00 00 00 @@ -11004,7 +11084,7 @@ 20 34 03 -64 +60 79 20 00 @@ -11024,11 +11104,11 @@ 20 40 01 -87 +83 20 40 01 -1d +19 20 20 00 @@ -11152,7 +11232,7 @@ 20 20 03 -64 +60 00 00 00 @@ -11252,7 +11332,7 @@ 20 40 02 -b2 +ae 70 47 9e @@ -11268,7 +11348,7 @@ 20 40 03 -54 +50 68 09 47 @@ -11288,7 +11368,7 @@ 20 40 03 -0c +08 18 0a 7e @@ -11308,7 +11388,7 @@ 20 40 02 -c1 +bd 20 40 34 @@ -11384,7 +11464,7 @@ 20 20 07 -6c +80 70 47 a1 @@ -11392,7 +11472,7 @@ 20 40 02 -ba +b6 58 00 00 @@ -11408,7 +11488,7 @@ 20 40 05 -e7 +e4 20 20 7d @@ -12032,7 +12112,7 @@ 20 40 07 -67 +7b 70 47 a1 @@ -12068,7 +12148,7 @@ 20 40 02 -ba +b6 58 00 00 @@ -12084,7 +12164,7 @@ 20 40 05 -e7 +e4 20 20 7d @@ -12168,7 +12248,7 @@ 20 20 04 -8f +8c 18 00 7e @@ -12324,7 +12404,7 @@ c2 85 04 -f0 +ed 20 20 41 @@ -12356,7 +12436,7 @@ 20 40 05 -b6 +b3 20 60 80 @@ -12436,7 +12516,7 @@ c0 02 84 -6c +69 20 20 4d @@ -12773,5 +12853,5 @@ 55 00 00 -c0 -60 +c3 +e4 Index: output/program.lis =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/program.lis (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/program.lis (working copy) @@ -7,42 +7,42 @@ p_zcode: p_wake_from_power: -0001 204003a7 call p_mouse_data_init +0001 204003a3 call p_mouse_data_init 0002 6800c1de fetch 1 ,mem_tx_power 0003 6000ccfa store 1 ,mem_tx_power_temp -0004 20400774 call power_ctrl_pac_succ_cnt_init +0004 20400788 call power_ctrl_pac_succ_cnt_init 0005 6800c685 fetch 1 ,mem_ui_button_timeout 0006 6000cb47 store 1 ,mem_select_ui_button_count 0007 6800cb33 fetch 1 ,mem_bt_ui_button_timeout 0008 6000cb34 store 1 ,mem_bt_ui_button_count 0009 204043ca call mouse_bt_discovery_button_down_disable -000a 20400313 call p_mouse_spi_init +000a 2040030f call p_mouse_spi_init 000b 20400010 call p_mouse_cb_fuction 000c 20400023 call p_mouse_wakeup_from_power -000d 20400063 call p_mouse_select_device_button_wakeup_check +000d 20400064 call p_mouse_select_device_button_wakeup_check p_mouse_setting_config: 000e 7011c580 jam zcode_80 ,mem_zcode_temp_param0 -000f 202007c6 branch p_zcode_entrance +000f 202007da branch p_zcode_entrance p_mouse_cb_fuction: -0010 5800036e setarg p_mouse_g24_package_data +0010 5800036a setarg p_mouse_g24_package_data 0011 60014d74 store 2 ,mem_cb_24g_data -0012 58000388 setarg p_mouse_le +0012 58000384 setarg p_mouse_le 0013 600141ef store 2 ,mem_cb_le_process -0014 580006aa setarg p_le_mouse_bb_event_connect_complete +0014 580006be setarg p_le_mouse_bb_event_connect_complete 0015 600141f9 store 2 ,mem_cb_att_write -0016 580003c2 setarg p_mouse_bt +0016 580003be setarg p_mouse_bt 0017 600141f1 store 2 ,mem_cb_bt_process -0018 5800024f setarg p_mouse_before_lpm +0018 5800024b setarg p_mouse_before_lpm 0019 600141ed store 2 ,mem_cb_before_lpm -001a 5800044e setarg p_mouse_priority_bb_event +001a 5800044b setarg p_mouse_priority_bb_event 001b 600141f5 store 2 ,mem_cb_bb_event_process -001c 580003ea setarg p_mouse_idle +001c 580003e6 setarg p_mouse_idle 001d 600141f3 store 2 ,mem_cb_idle_process -001e 58000489 setarg p_mouse_before_hibernate +001e 58000486 setarg p_mouse_before_hibernate 001f 600141eb store 2 ,mem_cb_before_hibernate -0020 58000492 setarg p_mouse_bb_event_timer +0020 5800048f setarg p_mouse_bb_event_timer 0021 600141fd store 2 ,mem_cb_event_timer 0022 20600000 rtn @@ -50,15 +50,15 @@ 0023 58000019 setarg 25 0024 60014d86 store 2 ,mem_24g_transmit_by_interrupt_exit_count_init 0025 2455802d ncall p_mouse_24g_transmit_by_interrupt_exit_count_max ,wake -0026 204002ca call p_mouse_init_sunt -0027 2040048f call p_mouse_sensor_powerdown +0026 204002c6 call p_mouse_init_sunt +0027 2040048c call p_mouse_sensor_powerdown p_mouse_wakeup_no_from_power: 0028 6800c71f fetch 1 ,mem_reconn_times_init 0029 6000c71e store 1 ,mem_reconn_times 002a 6800c241 fetch 1 ,mem_power_on_flag 002b c3810000 rtnbit1 2 -002c 20200560 branch p_mouse_dpi_config_default +002c 2020055d branch p_mouse_dpi_config_default p_mouse_24g_transmit_by_interrupt_exit_count_max: 002d 58000177 setarg 375 @@ -83,2696 +83,2718 @@ p_patch_array: 0040 c2840055 bbit1 8 ,pf_patch_ext -0041 c000806f beq patch00_1 ,p_soft_reset_1 -0042 c001007f beq patch00_2 ,p_soft_reset_2 -0043 c04287c4 beq patch10_5 ,p_shutdown_radio -0044 c0448797 beq patch11_1 ,p_set_freq_tx -0045 c02886e0 beq patch0a_1 ,p_slave_conn_recv_packet -0046 c05386e5 beq patch14_7 ,p_lpm_dispatch -0047 c05686fd beq patch15_5 ,p_lpm_set_mult +0041 c0008070 beq patch00_1 ,p_soft_reset_1 +0042 c0010080 beq patch00_2 ,p_soft_reset_2 +0043 c04287d8 beq patch10_5 ,p_shutdown_radio +0044 c04487ab beq patch11_1 ,p_set_freq_tx +0045 c02886f4 beq patch0a_1 ,p_slave_conn_recv_packet +0046 c05386f9 beq patch14_7 ,p_lpm_dispatch +0047 c0568711 beq patch15_5 ,p_lpm_set_mult 0048 c065b3e4 beq patch19_3 ,app_bt_start_reconnect + 3 -0049 c074870e beq patch1d_1 ,p_mouse_bb_disconnected -004a c0508088 beq patch14_1 ,p_init_param -004b c058808d beq patch16_1 ,p_lpm_check_wake_lock -004c c0590097 beq patch16_2 ,p_g24_dispatch -004d c0620290 beq patch18_4 ,p_device_init -004e c0718562 beq patch1c_3 ,p_mouse_seting_dpi -004f c07203ed beq patch1c_4 ,p_mouse_wheel_check -0050 c073057f beq patch1c_6 ,p_mouse_motion -0051 c07505e0 beq patch1d_2 ,p_mouse_bb_event_discovery_btn -0052 c07585e5 beq patch1d_3 ,p_mouse_start_discovery -0053 c07605eb beq patch1d_4 ,p_mouse_stop_discovery +0049 c0748722 beq patch1d_1 ,p_mouse_bb_disconnected +004a c0508089 beq patch14_1 ,p_init_param +004b c058808e beq patch16_1 ,p_lpm_check_wake_lock +004c c0590098 beq patch16_2 ,p_g24_dispatch +004d c062028c beq patch18_4 ,p_device_init +004e c071855f beq patch1c_3 ,p_mouse_seting_dpi +004f c07203e9 beq patch1c_4 ,p_mouse_wheel_check +0050 c073057c beq patch1c_6 ,p_mouse_motion +0051 c07505dd beq patch1d_2 ,p_mouse_bb_event_discovery_btn +0052 c07585e2 beq patch1d_3 ,p_mouse_start_discovery +0053 c07605e8 beq patch1d_4 ,p_mouse_stop_discovery 0054 20202a8e branch loop pf_patch_ext: -0055 c01c85f1 beq patch27_1 ,p_le_slave_match -0056 c02185f9 beq patch28_3 ,p_le_next_adv_channel -0057 c02505ff beq patch29_2 ,p_le_receive_skip -0058 c02b8602 beq patch2a_7 ,p_le_update_param -0059 c02c8604 beq patch2b_1 ,p_le_update_channel_map -005a c0318606 beq patch2c_3 ,p_le_prepare_tx -005b c0330635 beq patch2c_6 ,p_le_parse -005c c033864c beq patch2c_7 ,p_le_parse_l2cap -005d c0350696 beq patch2d_2 ,p_le_adv_not_match -005e c03b86a0 beq patch2e_7 ,p_le_lpm_setmult -005f c04606ac beq patch31_4 ,p_twspi_reset -0060 c04686b8 beq patch31_5 ,p_spid_init -0061 c07d0712 beq patch3f_2 ,p_check_51cmd_once_continue -0062 20202a8e branch loop +0055 c01c85ee beq patch27_1 ,p_le_slave_match +0056 c02185f7 beq patch28_3 ,p_le_next_adv_channel +0057 c02505fd beq patch29_2 ,p_le_receive_skip +0058 c02b8600 beq patch2a_7 ,p_le_update_param +0059 c02c8602 beq patch2b_1 ,p_le_update_channel_map +005a c02d0604 beq patch2b_2 ,p_le_acknowledge +005b c031861c beq patch2c_3 ,p_le_prepare_tx +005c c033064b beq patch2c_6 ,p_le_parse +005d c0338662 beq patch2c_7 ,p_le_parse_l2cap +005e c03506ac beq patch2d_2 ,p_le_adv_not_match +005f c03b86b4 beq patch2e_7 ,p_le_lpm_setmult +0060 c04606c0 beq patch31_4 ,p_twspi_reset +0061 c04686cc beq patch31_5 ,p_spid_init +0062 c07d0726 beq patch3f_2 ,p_check_51cmd_once_continue +0063 20202a8e branch loop p_mouse_select_device_button_wakeup_check: -0063 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0064 204004e1 call p_mouse_get_select_state -0065 24608000 nrtn true -0066 20407ec1 call delay_10ms -0067 204004e1 call p_mouse_get_select_state -0068 24608000 nrtn true -0069 704b6d01 jam 1 ,mem_mouse_select_device_button_wakeup_flag -006a 20600000 rtn +0064 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag +0065 204004de call p_mouse_get_select_state +0066 24608000 nrtn true +0067 20407ec1 call delay_10ms +0068 204004de call p_mouse_get_select_state +0069 24608000 nrtn true +006a 704b6d01 jam 1 ,mem_mouse_select_device_button_wakeup_flag +006b 20600000 rtn p_mouse_switch_hwakeup_bypb: -006b 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag -006c 207a0000 rtn blank -006d 20400501 call p_mouse_switch_device_flag -006e 20200300 branch p_mouse_store_flash_device_info +006c 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag +006d 207a0000 rtn blank +006e 204004fe call p_mouse_switch_device_flag +006f 202002fc branch p_mouse_store_flash_device_info p_soft_reset_1: -006f d8a009ae arg mem_sp_state ,contw -0070 df20000c arg 12 ,loopcnt -0071 20407ed4 call clear_mem -0072 2040037f call p_mouse_le_txbuff_load -0073 6810807b hfetch 1 ,core_gpio_pu3 -0074 1fe17e3f and_into 0x3f ,pdata -0075 6010807b hstore 1 ,core_gpio_pu3 -0076 68108081 hfetch 1 ,core_gpio_sel1 -0077 793ffe04 set0 4 ,pdata -0078 60108081 hstore 1 ,core_gpio_sel1 -0079 204074c1 call init_memp -007a 20406a03 call rfcomm_init -007b 20405cf6 call init_lmp -007c 2455ac65 ncall lpm_disable_exen_output ,wake -007d 20407ccd call ui_init + 1 -007e 2020200c branch soft_reset + 11 +0070 d8a009ae arg mem_sp_state ,contw +0071 df20000c arg 12 ,loopcnt +0072 20407ed4 call clear_mem +0073 2040037b call p_mouse_le_txbuff_load +0074 6810807b hfetch 1 ,core_gpio_pu3 +0075 1fe17e3f and_into 0x3f ,pdata +0076 6010807b hstore 1 ,core_gpio_pu3 +0077 68108081 hfetch 1 ,core_gpio_sel1 +0078 793ffe04 set0 4 ,pdata +0079 60108081 hstore 1 ,core_gpio_sel1 +007a 204074c1 call init_memp +007b 20406a03 call rfcomm_init +007c 20405cf6 call init_lmp +007d 2455ac65 ncall lpm_disable_exen_output ,wake +007e 20407ccd call ui_init + 1 +007f 2020200c branch soft_reset + 11 p_soft_reset_2: -007f 2055b2e3 call app_lpm_init ,wake -0080 2040756a call publickey_init -0081 2055ab41 call lpm_recover_clk ,wake +0080 2055b2e3 call app_lpm_init ,wake +0081 2040756a call publickey_init +0082 2055ab41 call lpm_recover_clk ,wake p_sp_cal_loop: -0082 204076dc call sp_calc_sequence -0083 6800c65a fetch 1 ,mem_ssp_enable -0084 203a2012 branch main_loop ,blank -0085 6800c5b1 fetch 1 ,mem_sp_local_key_invalid -0086 203a0082 branch p_sp_cal_loop ,blank -0087 20202012 branch main_loop +0083 204076dc call sp_calc_sequence +0084 6800c65a fetch 1 ,mem_ssp_enable +0085 203a2012 branch main_loop ,blank +0086 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +0087 203a0083 branch p_sp_cal_loop ,blank +0088 20202012 branch main_loop p_init_param: -0088 58000a06 setarg param_le_version -0089 6001c510 store 3 ,mem_lmp_version -008a 58001d87 setarg param_le_subversion -008b 60014513 store 2 ,mem_lmp_version + 3 -008c 20202aa2 branch init_param + 12 +0089 58000a06 setarg param_le_version +008a 6001c510 store 3 ,mem_lmp_version +008b 58001d87 setarg param_le_subversion +008c 60014513 store 2 ,mem_lmp_version + 3 +008d 20202aa2 branch init_param + 12 p_lpm_check_wake_lock: -008d c6130000 rtnmark1 mark_24g -008e 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag -008f c0007fef beq 0 ,disable_blank -0090 6800c7c6 fetch 1 ,mem_mouse_le_conn_param_reject -0091 c000ffef beq le_lpm_disable ,disable_blank -0092 68014248 fetch 2 ,mem_sdp_remote_cid -0093 243a7fef nbranch disable_blank ,blank -0094 6800c808 fetch 1 ,mem_mouse_wheel_trigger -0095 243a7fef nbranch disable_blank ,blank -0096 20207ff1 branch enable_blank +008e c6130000 rtnmark1 mark_24g +008f 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag +0090 c0007fef beq 0 ,disable_blank +0091 6800c7c6 fetch 1 ,mem_mouse_le_conn_param_reject +0092 c000ffef beq le_lpm_disable ,disable_blank +0093 68014248 fetch 2 ,mem_sdp_remote_cid +0094 243a7fef nbranch disable_blank ,blank +0095 6800c808 fetch 1 ,mem_mouse_wheel_trigger +0096 243a7fef nbranch disable_blank ,blank +0097 20207ff1 branch enable_blank p_g24_dispatch: -0097 c6930000 rtnmark0 mark_24g -0098 6800cd93 fetch 1 ,mem_24g_conn_sm -0099 c28080ac bbit1 state_24g_pair ,p_g24_pair_dispatch -009a c28100ae bbit1 state_24g_reconn ,p_g24_reconn_dispatch -009b 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt -009c c00080b4 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt +0098 c6930000 rtnmark0 mark_24g +0099 6800cd93 fetch 1 ,mem_24g_conn_sm +009a c28080ad bbit1 state_24g_pair ,p_g24_pair_dispatch +009b c28100af bbit1 state_24g_reconn ,p_g24_reconn_dispatch +009c 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt +009d c00080b5 beq g24_tx_timer_int_enable ,p_g24_transmit_by_interrupt p_g24_transmit_process: -009d 2040012f call p_g24_txdata_prep -009e 243400b6 nbranch p_g24_nodata_transmit ,user -009f 2040010a call p_g24_rf_sta_check +009e 2040012b call p_g24_txdata_prep +009f 243400b7 nbranch p_g24_nodata_transmit ,user +00a0 20400106 call p_g24_rf_sta_check p_g24_transmit_start: -00a0 204000e5 call p_g24_transmit_packet -00a1 6800cc53 fetch 1 ,mem_24g_pairing_sm -00a2 c1ff8000 rtnne state_24g_pairing_success -00a3 204006ce call power_ctrl_start -00a4 204000b0 call p_g24_long_sleep_shorter_param_update -00a5 6800cb29 fetch 1 ,mem_mouse_multi_led_state -00a6 c0008371 beq on ,p_g24_transmit_by_interrupt_enable +00a1 204000e1 call p_g24_transmit_packet +00a2 6800cc53 fetch 1 ,mem_24g_pairing_sm +00a3 c1ff8000 rtnne state_24g_pairing_success +00a4 204006e2 call power_ctrl_start +00a5 204000b1 call p_g24_long_sleep_shorter_param_update +00a6 6800cb29 fetch 1 ,mem_mouse_multi_led_state +00a7 c000836d beq on ,p_g24_transmit_by_interrupt_enable p_g24_short_sleep: -00a7 20400259 call p_g24_lpm_wait -00a8 24740000 nrtn user -00a9 20400256 call p_clear_wake -00aa 5800d2f0 setarg 54000 +00a8 20400255 call p_g24_lpm_wait +00a9 24740000 nrtn user +00aa 20400252 call p_clear_wake +00ab 5800d2f0 setarg 54000 p_g24_enter_sleep: -00ab 20202d8c branch g24_lpm_long_sleep2 +00ac 20202d8c branch g24_lpm_long_sleep2 p_g24_pair_dispatch: -00ac 7011c5c0 jam zcode_c0 ,mem_zcode_temp_param0 -00ad 202007c6 branch p_zcode_entrance +00ad 7011c5c0 jam zcode_c0 ,mem_zcode_temp_param0 +00ae 202007da branch p_zcode_entrance p_g24_reconn_dispatch: -00ae 7011c570 jam zcode_70 ,mem_zcode_temp_param0 -00af 202007c6 branch p_zcode_entrance +00af 7011c570 jam zcode_70 ,mem_zcode_temp_param0 +00b0 202007da branch p_zcode_entrance p_g24_long_sleep_shorter_param_update: -00b0 58017700 setarg g24_long_sleep_step1 -00b1 6001cc72 store 3 ,mem_24g_enter_hibernate -00b2 704b691e jam 30 ,mem_24g_long_sleep_param_update_timer -00b3 20600000 rtn +00b1 58017700 setarg g24_long_sleep_step1 +00b2 6001cc72 store 3 ,mem_24g_enter_hibernate +00b3 704b691e jam 30 ,mem_24g_long_sleep_param_update_timer +00b4 20600000 rtn p_g24_transmit_by_interrupt: -00b4 7011c5d1 jam zcode_d1 ,mem_zcode_temp_param0 -00b5 202007c6 branch p_zcode_entrance +00b5 7011c5d1 jam zcode_d1 ,mem_zcode_temp_param0 +00b6 202007da branch p_zcode_entrance p_g24_nodata_transmit: -00b6 6800cc6f fetch 1 ,mem_24g_abort_pac -00b7 205a00bc call p_g24_send_abort_packet ,blank +00b7 6800cc6f fetch 1 ,mem_24g_abort_pac +00b8 205a00bd call p_g24_send_abort_packet ,blank p_g24_long_sleep: -00b8 20400259 call p_g24_lpm_wait -00b9 24740000 nrtn user -00ba 6801cc72 fetch 3 ,mem_24g_enter_hibernate -00bb 20202d8c branch g24_lpm_long_sleep2 +00b9 20400255 call p_g24_lpm_wait +00ba 24740000 nrtn user +00bb 6801cc72 fetch 3 ,mem_24g_enter_hibernate +00bc 20202d8c branch g24_lpm_long_sleep2 p_g24_send_abort_packet: -00bc 704c6f01 jam 1 ,mem_24g_abort_pac -00bd 704d7800 jam 0 ,mem_24g_rf_hop_ch -00be 204000cc call p_g24_transmit_rf_ctrl_clear -00bf 6000cbdf store 1 ,mem_24g_txbuf -00c0 58000000 setarg 0 -00c1 6003cbe0 store 7 ,mem_24g_txbuf + 1 -00c2 68024c7a fetch 4 ,mem_24g_device_addr -00c3 60024be7 store 4 ,mem_24g_txbuf + 8 -00c4 704c430c jam 12 ,mem_24g_datalen -00c5 6800cc44 fetch 1 ,mem_24g_data_type -00c6 79207e03 set1 bit_abort ,pdata -00c7 6000cc44 store 1 ,mem_24g_data_type -00c8 20400132 call p_g24_txdata_enable_tx -00c9 202000a0 branch p_g24_transmit_start +00bd 704c6f01 jam 1 ,mem_24g_abort_pac +00be 704d7800 jam 0 ,mem_24g_rf_hop_ch +00bf 204000cd call p_g24_transmit_rf_ctrl_clear +00c0 6000cbdf store 1 ,mem_24g_txbuf +00c1 58000000 setarg 0 +00c2 6003cbe0 store 7 ,mem_24g_txbuf + 1 +00c3 68024c7a fetch 4 ,mem_24g_device_addr +00c4 60024be7 store 4 ,mem_24g_txbuf + 8 +00c5 704c430c jam 12 ,mem_24g_datalen +00c6 6800cc44 fetch 1 ,mem_24g_data_type +00c7 79207e03 set1 bit_abort ,pdata +00c8 6000cc44 store 1 ,mem_24g_data_type +00c9 2040012e call p_g24_txdata_enable_tx +00ca 202000a1 branch p_g24_transmit_start p_g24_transmit_rf_sta_init: -00ca 704d7901 jam 1 ,mem_24g_rf_last_sta -00cb 704d7b00 jam 0 ,mem_24g_sync_cnt +00cb 704d7901 jam 1 ,mem_24g_rf_last_sta +00cc 704d7b00 jam 0 ,mem_24g_sync_cnt p_g24_transmit_rf_ctrl_clear: -00cc 6800cc44 fetch 1 ,mem_24g_data_type -00cd 1fe17e07 and_into bits_data ,pdata -00ce 6000cc44 store 1 ,mem_24g_data_type -00cf 20600000 rtn - -p_g24_hop_ch_enable: -00d0 6800cc44 fetch 1 ,mem_24g_data_type -00d1 79207e04 set1 bit_hop ,pdata -00d2 6000cc44 store 1 ,mem_24g_data_type -00d3 6000cbff store 1 ,mem_24g_txpayload -00d4 20600000 rtn +00cd 6800cc44 fetch 1 ,mem_24g_data_type +00ce 1fe17e07 and_into bits_data ,pdata +00cf 6000cc44 store 1 ,mem_24g_data_type +00d0 20600000 rtn p_g24_hop_enable_packet: -00d5 6800cc44 fetch 1 ,mem_24g_data_type -00d6 c4020000 rtnbit0 bit_hop +00d1 6800cc44 fetch 1 ,mem_24g_data_type +00d2 c4020000 rtnbit0 bit_hop p_g24_hop_ch_disable: -00d7 6800cc44 fetch 1 ,mem_24g_data_type -00d8 793ffe04 set0 bit_hop ,pdata -00d9 6000cc44 store 1 ,mem_24g_data_type -00da 6000cbff store 1 ,mem_24g_txpayload -00db 20400626 call power_ctrl_pac_succ_decrs -00dc 2020011d branch p_g24_ch +00d3 6800cc44 fetch 1 ,mem_24g_data_type +00d4 793ffe04 set0 bit_hop ,pdata +00d5 6000cc44 store 1 ,mem_24g_data_type +00d6 6000cbff store 1 ,mem_24g_txpayload +00d7 2040063c call power_ctrl_pac_succ_decrs +00d8 20200119 branch p_g24_ch p_g24_rf_hop_attemp_again: -00dd 6800cd78 fetch 1 ,mem_24g_rf_hop_ch -00de c08080cc bne 1 ,p_g24_transmit_rf_ctrl_clear +00d9 6800cd78 fetch 1 ,mem_24g_rf_hop_ch +00da c08080cd bne 1 ,p_g24_transmit_rf_ctrl_clear p_g24_rf_hop_fastly: -00df 6800cd76 fetch 1 ,mem_24g_hop_fastly_cnt -00e0 1fe0fe01 increase 1 ,pdata -00e1 6000cd76 store 1 ,mem_24g_hop_fastly_cnt -00e2 c00200fa beq 4 ,p_g24_rf_hop_fastly_exit -00e3 2040011d call p_g24_ch -00e4 704c8802 jam 2 ,mem_24g_max_retry +00db 6800cd76 fetch 1 ,mem_24g_hop_fastly_cnt +00dc 1fe0fe01 increase 1 ,pdata +00dd 6000cd76 store 1 ,mem_24g_hop_fastly_cnt +00de c00200f6 beq 4 ,p_g24_rf_hop_fastly_exit +00df 20400119 call p_g24_ch +00e0 704c8802 jam 2 ,mem_24g_max_retry p_g24_transmit_packet: -00e5 704c4c00 jam 0 ,mem_24g_retry +00e1 704c4c00 jam 0 ,mem_24g_retry p_g24_transmit_loop: -00e6 d9600d00 arg param_rx_setup ,timeup -00e7 34730200 until clkn_rt ,meet -00e8 20400155 call p_g24_transmit_receive_ack -00e9 242c0160 nbranch p_g24_retransmit ,sync -00ea 24378160 nbranch p_g24_retransmit ,user3 -00eb 20400152 call p_g24_txbuf_clear -00ec 2040017b call p_g24_ackpayload_parse -00ed 20400777 call power_ctrl_pac_succ_incrs +00e2 d9600d00 arg param_rx_setup ,timeup +00e3 34730200 until clkn_rt ,meet +00e4 20400151 call p_g24_transmit_receive_ack +00e5 242c015c nbranch p_g24_retransmit ,sync +00e6 2437815c nbranch p_g24_retransmit ,user3 +00e7 2040014e call p_g24_txbuf_clear +00e8 20400177 call p_g24_ackpayload_parse +00e9 2040078b call power_ctrl_pac_succ_incrs p_g24_transmit_next_packet: -00ee 704b5200 jam 0 ,mem_retry_count -00ef 6800cc42 fetch 1 ,mem_24g_pid -00f0 1fe0fe01 increase 1 ,pdata -00f1 6000cc42 store 1 ,mem_24g_pid -00f2 204000d5 call p_g24_hop_enable_packet -00f3 6800cc53 fetch 1 ,mem_24g_pairing_sm -00f4 c0ff8199 bne state_24g_pairing_success ,p_g24_paring_mode_start -00f5 20400101 call p_g24_transmit_succ_rf_config +00ea 704b5200 jam 0 ,mem_retry_count +00eb 6800cc42 fetch 1 ,mem_24g_pid +00ec 1fe0fe01 increase 1 ,pdata +00ed 6000cc42 store 1 ,mem_24g_pid +00ee 204000d1 call p_g24_hop_enable_packet +00ef 6800cc53 fetch 1 ,mem_24g_pairing_sm +00f0 c0ff8195 bne state_24g_pairing_success ,p_g24_paring_mode_start +00f1 204000fd call p_g24_transmit_succ_rf_config p_g24_transmit_abandon: -00f6 58000000 setarg 0 -00f7 60024c48 store 4 ,mem_24g_ensure -00f8 6000cd77 store 1 ,mem_24g_hop_pac_retry -00f9 20600000 rtn +00f2 58000000 setarg 0 +00f3 60024c48 store 4 ,mem_24g_ensure +00f4 6000cd77 store 1 ,mem_24g_hop_pac_retry +00f5 20600000 rtn p_g24_rf_hop_fastly_exit: -00fa 20400626 call power_ctrl_pac_succ_decrs -00fb 704d7600 jam 0 ,mem_24g_hop_fastly_cnt -00fc 202000cc branch p_g24_transmit_rf_ctrl_clear +00f6 2040063c call power_ctrl_pac_succ_decrs +00f7 704d7600 jam 0 ,mem_24g_hop_fastly_cnt +00f8 202000cd branch p_g24_transmit_rf_ctrl_clear p_g24_transmit_hop_pac_succ_wo_hop: -00fd 704d7b02 jam 2 ,mem_24g_sync_cnt +00f9 704d7b02 jam 2 ,mem_24g_sync_cnt p_g24_transmit_hop_pac_succ: -00fe 704d7901 jam 1 ,mem_24g_rf_last_sta -00ff 704d7800 jam 0 ,mem_24g_rf_hop_ch -0100 202000cc branch p_g24_transmit_rf_ctrl_clear +00fa 704d7901 jam 1 ,mem_24g_rf_last_sta +00fb 704d7800 jam 0 ,mem_24g_rf_hop_ch +00fc 202000cd branch p_g24_transmit_rf_ctrl_clear p_g24_transmit_succ_rf_config: -0101 6800cd7a fetch 1 ,mem_24g_rf_work_stage -0102 c00180fe beq 3 ,p_g24_transmit_hop_pac_succ -0103 6800cc44 fetch 1 ,mem_24g_data_type -0104 2fec0004 isolate0 bit_hop ,pdata -0105 202080ca branch p_g24_transmit_rf_sta_init ,true -0106 6800cd7a fetch 1 ,mem_24g_rf_work_stage -0107 c00080fd beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop -0108 c00100fe beq 2 ,p_g24_transmit_hop_pac_succ -0109 20600000 rtn +00fd 6800cd7a fetch 1 ,mem_24g_rf_work_stage +00fe c00180fa beq 3 ,p_g24_transmit_hop_pac_succ +00ff 6800cc44 fetch 1 ,mem_24g_data_type +0100 2fec0004 isolate0 bit_hop ,pdata +0101 202080cb branch p_g24_transmit_rf_sta_init ,true +0102 6800cd7a fetch 1 ,mem_24g_rf_work_stage +0103 c00080f9 beq 1 ,p_g24_transmit_hop_pac_succ_wo_hop +0104 c00100fa beq 2 ,p_g24_transmit_hop_pac_succ +0105 20600000 rtn p_g24_rf_sta_check: -010a 6800cc53 fetch 1 ,mem_24g_pairing_sm -010b c1ff8000 rtnne state_24g_pairing_success -010c 2040010f call p_g24_rf_laststa_synccnt_check -010d 24560117 ncall p_g24_rf_sync_cnt_check ,user2 -010e 20600000 rtn +0106 6800cc53 fetch 1 ,mem_24g_pairing_sm +0107 c1ff8000 rtnne state_24g_pairing_success +0108 2040010b call p_g24_rf_laststa_synccnt_check +0109 24560113 ncall p_g24_rf_sync_cnt_check ,user2 +010a 20600000 rtn p_g24_rf_laststa_synccnt_check: -010f 78567c00 disable user2 -0110 6800cd79 fetch 1 ,mem_24g_rf_last_sta -0111 c1808000 rtnne 1 -0112 6800cd7b fetch 1 ,mem_24g_sync_cnt -0113 c1800000 rtnne 0 -0114 704d7a01 jam 1 ,mem_24g_rf_work_stage -0115 704c8804 jam 4 ,mem_24g_max_retry -0116 20207feb branch enable_user2 +010b 78567c00 disable user2 +010c 6800cd79 fetch 1 ,mem_24g_rf_last_sta +010d c1808000 rtnne 1 +010e 6800cd7b fetch 1 ,mem_24g_sync_cnt +010f c1800000 rtnne 0 +0110 704d7a01 jam 1 ,mem_24g_rf_work_stage +0111 704c8804 jam 4 ,mem_24g_max_retry +0112 20207feb branch enable_user2 p_g24_rf_sync_cnt_check: -0117 6800cd7b fetch 1 ,mem_24g_sync_cnt -0118 203a012a branch p_g24_rf_hop_attemp ,blank -0119 1fe0ffff increase -1 ,pdata -011a 6000cd7b store 1 ,mem_24g_sync_cnt -011b 704d7a02 jam 2 ,mem_24g_rf_work_stage -011c 704c8804 jam 4 ,mem_24g_max_retry +0113 6800cd7b fetch 1 ,mem_24g_sync_cnt +0114 203a0126 branch p_g24_rf_hop_attemp ,blank +0115 1fe0ffff increase -1 ,pdata +0116 6000cd7b store 1 ,mem_24g_sync_cnt +0117 704d7a02 jam 2 ,mem_24g_rf_work_stage +0118 704c8804 jam 4 ,mem_24g_max_retry p_g24_ch: -011d 6808cc4e fetcht 1 ,mem_24g_current_ch_number -011e 6800cc6b fetch 1 ,mem_24g_addr -011f 1fe17e03 and_into 0x03 ,pdata -0120 1fefa204 mul32 pdata ,4 ,rega -0121 58004c54 setarg mem_24g_ch_map1 -0122 9a20fe00 iadd rega ,pdata -0123 98408c00 iadd temp ,contr -0124 e8c08000 ifetch 1 ,contr -0125 6000cc4d store 1 ,mem_24g_ch -0126 18408401 increase 1 ,temp -0127 18410403 and_into 3 ,temp -0128 6008cc4e storet 1 ,mem_24g_current_ch_number -0129 20600000 rtn +0119 6808cc4e fetcht 1 ,mem_24g_current_ch_number +011a 6800cc6b fetch 1 ,mem_24g_addr +011b 1fe17e03 and_into 0x03 ,pdata +011c 1fefa204 mul32 pdata ,4 ,rega +011d 58004c54 setarg mem_24g_ch_map1 +011e 9a20fe00 iadd rega ,pdata +011f 98408c00 iadd temp ,contr +0120 e8c08000 ifetch 1 ,contr +0121 6000cc4d store 1 ,mem_24g_ch +0122 18408401 increase 1 ,temp +0123 18410403 and_into 3 ,temp +0124 6008cc4e storet 1 ,mem_24g_current_ch_number +0125 20600000 rtn p_g24_rf_hop_attemp: -012a 704d7a03 jam 3 ,mem_24g_rf_work_stage -012b 6800cd78 fetch 1 ,mem_24g_rf_hop_ch -012c 243a00dd nbranch p_g24_rf_hop_attemp_again ,blank -012d 704c8802 jam 2 ,mem_24g_max_retry -012e 2020011d branch p_g24_ch +0126 704d7a03 jam 3 ,mem_24g_rf_work_stage +0127 6800cd78 fetch 1 ,mem_24g_rf_hop_ch +0128 243a00d9 nbranch p_g24_rf_hop_attemp_again ,blank +0129 704c8802 jam 2 ,mem_24g_max_retry +012a 20200119 branch p_g24_ch p_g24_txdata_prep: -012f 6800cc53 fetch 1 ,mem_24g_pairing_sm -0130 c0ff8197 bne state_24g_pairing_success ,p_g24_pairing_sm +012b 6800cc53 fetch 1 ,mem_24g_pairing_sm +012c c0ff8193 bne state_24g_pairing_success ,p_g24_pairing_sm p_g24_txdata_prep_packeage_data: -0131 20400135 call p_g24_package_data +012d 20400131 call p_g24_package_data p_g24_txdata_enable_tx: -0132 204001b3 call p_g24_transmit_prep -0133 704c4801 jam ensure_on_24g ,mem_24g_ensure -0134 20600000 rtn +012e 204001af call p_g24_transmit_prep +012f 704c4801 jam ensure_on_24g ,mem_24g_ensure +0130 20600000 rtn p_g24_package_data: -0135 68014d74 fetch 2 ,mem_cb_24g_data -0136 20407f9c call callback_func -0137 2034013b branch p_g24_accumulate_mouse_data ,user -0138 6803cbe0 fetch 7 ,mem_24g_txbuf + 1 -0139 207a0000 rtn blank -013a 20207fe7 branch enable_user +0131 68014d74 fetch 2 ,mem_cb_24g_data +0132 20407f9c call callback_func +0133 20340137 branch p_g24_accumulate_mouse_data ,user +0134 6803cbe0 fetch 7 ,mem_24g_txbuf + 1 +0135 207a0000 rtn blank +0136 20207fe7 branch enable_user p_g24_accumulate_mouse_data: -013b 2040039f call p_mouse_data_xy_release -013c 704c6f00 jam 0 ,mem_24g_abort_pac -013d 1a20fe01 add rega ,1 ,pdata -013e 6000cc43 store 1 ,mem_24g_datalen -013f 204000cc call p_g24_transmit_rf_ctrl_clear -0140 6000cbdf store 1 ,mem_24g_txbuf -0141 e8a88000 ifetcht 1 ,contw -0142 ea408000 ifetch 1 ,regb -0143 9841fe00 ior temp ,pdata -0144 e0a08000 istore 1 ,contw -0145 1a40a401 increase 1 ,regb -0146 ea420000 ifetch 4 ,regb -0147 e0a20000 istore 4 ,contw -0148 1a40a404 increase 4 ,regb -0149 d8a04be5 arg mem_24g_txbuf + 6 ,contw -014a df200002 arg 2 ,loopcnt +0137 2040039b call p_mouse_data_xy_release +0138 704c6f00 jam 0 ,mem_24g_abort_pac +0139 1a20fe01 add rega ,1 ,pdata +013a 6000cc43 store 1 ,mem_24g_datalen +013b 204000cd call p_g24_transmit_rf_ctrl_clear +013c 6000cbdf store 1 ,mem_24g_txbuf +013d e8a88000 ifetcht 1 ,contw +013e ea408000 ifetch 1 ,regb +013f 9841fe00 ior temp ,pdata +0140 e0a08000 istore 1 ,contw +0141 1a40a401 increase 1 ,regb +0142 ea420000 ifetch 4 ,regb +0143 e0a20000 istore 4 ,contw +0144 1a40a404 increase 4 ,regb +0145 d8a04be5 arg mem_24g_txbuf + 6 ,contw +0146 df200002 arg 2 ,loopcnt p_g24_accumulation_loop: -014b ea408000 ifetch 1 ,regb -014c e8a88000 ifetcht 1 ,contw -014d 9840fe00 iadd temp ,pdata -014e e0a08000 istore 1 ,contw -014f 1a40a401 increase 1 ,regb -0150 c200014b loop p_g24_accumulation_loop -0151 20600000 rtn +0147 ea408000 ifetch 1 ,regb +0148 e8a88000 ifetcht 1 ,contw +0149 9840fe00 iadd temp ,pdata +014a e0a08000 istore 1 ,contw +014b 1a40a401 increase 1 ,regb +014c c2000147 loop p_g24_accumulation_loop +014d 20600000 rtn p_g24_txbuf_clear: -0152 df200004 arg 4 ,loopcnt -0153 d8a04bdf arg mem_24g_txbuf ,contw -0154 20207ec6 branch memset0 +014e df200004 arg 4 ,loopcnt +014f d8a04bdf arg mem_24g_txbuf ,contw +0150 20207ec6 branch memset0 p_g24_transmit_receive_ack: -0155 7857fc00 disable user3 -0156 2040020f call p_g24_transmit -0157 18002a00 force 0 ,radio_ctrl -0158 68024c6b fetch 4 ,mem_24g_addr -0159 98001200 iforce access -015a 68088017 fetcht 1 ,mem_last_freq -015b 2040291f call set_freq_rx -015c 20402924 call rf_rx_enable -015d 204001cb call p_g24_receive_rxon -015e 2057820c call p_g24_end_of_packet ,user3 -015f 20600000 rtn +0151 7857fc00 disable user3 +0152 2040020b call p_g24_transmit +0153 18002a00 force 0 ,radio_ctrl +0154 68024c6b fetch 4 ,mem_24g_addr +0155 98001200 iforce access +0156 68088017 fetcht 1 ,mem_last_freq +0157 2040291f call set_freq_rx +0158 20402924 call rf_rx_enable +0159 204001c7 call p_g24_receive_rxon +015a 20578208 call p_g24_end_of_packet ,user3 +015b 20600000 rtn p_g24_retransmit: -0160 6800cc6f fetch 1 ,mem_24g_abort_pac -0161 247a0000 nrtn blank -0162 68014c49 fetch 2 ,mem_24g_txfail_cnt -0163 1fe0fe01 increase 1 ,pdata -0164 60014c49 store 2 ,mem_24g_txfail_cnt -0165 6800cc4a fetch 1 ,mem_24g_txfail_cnt + 1 -0166 c2822dd4 bbit1 4 ,g24_stop_24g_mode -0167 6800cc53 fetch 1 ,mem_24g_pairing_sm -0168 c0ff816b bne state_24g_pairing_success ,p_g24_tx_paring_retry -0169 20400173 call p_g24_tx_hop_ch_process -016a 202000e6 branch p_g24_transmit_loop +015c 6800cc6f fetch 1 ,mem_24g_abort_pac +015d 247a0000 nrtn blank +015e 68014c49 fetch 2 ,mem_24g_txfail_cnt +015f 1fe0fe01 increase 1 ,pdata +0160 60014c49 store 2 ,mem_24g_txfail_cnt +0161 6800cc4a fetch 1 ,mem_24g_txfail_cnt + 1 +0162 c2822dd4 bbit1 4 ,g24_stop_24g_mode +0163 6800cc53 fetch 1 ,mem_24g_pairing_sm +0164 c0ff8167 bne state_24g_pairing_success ,p_g24_tx_paring_retry +0165 2040016f call p_g24_tx_hop_ch_process +0166 202000e2 branch p_g24_transmit_loop p_g24_tx_paring_retry: -016b 6800cc49 fetch 1 ,mem_24g_txfail_cnt -016c c1ff8000 rtnne 0xff +0167 6800cc49 fetch 1 ,mem_24g_txfail_cnt +0168 c1ff8000 rtnne 0xff p_g24_tx_attempt_fail: -016d 58000000 setarg 0 -016e 60014c49 store 2 ,mem_24g_txfail_cnt -016f 20202dd4 branch g24_stop_24g_mode +0169 58000000 setarg 0 +016a 60014c49 store 2 ,mem_24g_txfail_cnt +016b 20202dd4 branch g24_stop_24g_mode p_g24_tx_fast_hop: -0170 2040078e call power_ctrl_txpower_incrs -0171 20400626 call power_ctrl_pac_succ_decrs -0172 2020011d branch p_g24_ch +016c 204007a2 call power_ctrl_txpower_incrs +016d 2040063c call power_ctrl_pac_succ_decrs +016e 20200119 branch p_g24_ch p_g24_tx_hop_ch_process: -0173 6800cc4c fetch 1 ,mem_24g_retry -0174 1fe67c0b sub pdata ,11 ,null -0175 24210170 nbranch p_g24_tx_fast_hop ,positive -0176 1fe0fe01 increase 1 ,pdata -0177 6000cc4c store 1 ,mem_24g_retry -0178 c00300d7 beq 6 ,p_g24_hop_ch_disable -0179 c00600d7 beq 12 ,p_g24_hop_ch_disable -017a 20600000 rtn +016f 6800cc4c fetch 1 ,mem_24g_retry +0170 1fe67c0b sub pdata ,11 ,null +0171 2421016c nbranch p_g24_tx_fast_hop ,positive +0172 1fe0fe01 increase 1 ,pdata +0173 6000cc4c store 1 ,mem_24g_retry +0174 c00300d3 beq 6 ,p_g24_hop_ch_disable +0175 c00600d3 beq 12 ,p_g24_hop_ch_disable +0176 20600000 rtn p_g24_ackpayload_parse: -017b 204001a6 call p_g24_read_len_pid_crc -017c 6800cc41 fetch 1 ,mem_24g_rxdata_length -017d 207a0000 rtn blank -017e 98007200 iforce loopcnt -017f d8c04bbf arg mem_24g_rxbuf + 2 ,contr -0180 d8a04c21 arg mem_24g_rxpayload ,contw -0181 20207f01 branch memcpy +0177 204001a2 call p_g24_read_len_pid_crc +0178 6800cc41 fetch 1 ,mem_24g_rxdata_length +0179 207a0000 rtn blank +017a 98007200 iforce loopcnt +017b d8c04bbf arg mem_24g_rxbuf + 2 ,contr +017c d8a04c21 arg mem_24g_rxpayload ,contw +017d 20207f01 branch memcpy p_g24_pair_init: -0182 7041de20 jam tx_power_pair ,mem_tx_power -0183 704c4200 jam 0 ,mem_24g_pid -0184 704c4d4e jam g24_pair_ch ,mem_24g_ch -0185 68024c4f fetch 4 ,mem_24g_paring_addr +017e 7041de20 jam tx_power_pair ,mem_tx_power +017f 704c4200 jam 0 ,mem_24g_pid +0180 704c4d4e jam g24_pair_ch ,mem_24g_ch +0181 68024c4f fetch 4 ,mem_24g_paring_addr p_g24_update_addr_and_synccrc8: -0186 60024c6b store 4 ,mem_24g_addr +0182 60024c6b store 4 ,mem_24g_addr p_g24_syncword_crc8: -0187 da200000 arg 0 ,rega -0188 df200004 arg 4 ,loopcnt -0189 d8c04c6b arg mem_24g_addr ,contr +0183 da200000 arg 0 ,rega +0184 df200004 arg 4 ,loopcnt +0185 d8c04c6b arg mem_24g_addr ,contr p_g24_syncword_crc8_loop: -018a e8c08000 ifetch 1 ,contr -018b 9a20a200 iadd rega ,rega -018c c200018a loop p_g24_syncword_crc8_loop -018d 1a227e00 copy rega ,pdata -018e 60014cf4 store 2 ,mem_24g_syncword -018f 6800ccf4 fetch 1 ,mem_24g_syncword -0190 6808ccf5 fetcht 1 ,mem_24g_syncword + 1 -0191 9840fe00 iadd temp ,pdata -0192 6000ccf6 store 1 ,mem_24g_syncword_crc8 -0193 20600000 rtn +0186 e8c08000 ifetch 1 ,contr +0187 9a20a200 iadd rega ,rega +0188 c2000186 loop p_g24_syncword_crc8_loop +0189 1a227e00 copy rega ,pdata +018a 60014cf4 store 2 ,mem_24g_syncword +018b 6800ccf4 fetch 1 ,mem_24g_syncword +018c 6808ccf5 fetcht 1 ,mem_24g_syncword + 1 +018d 9840fe00 iadd temp ,pdata +018e 6000ccf6 store 1 ,mem_24g_syncword_crc8 +018f 20600000 rtn p_g24_start_pairing_sm1: -0194 20400182 call p_g24_pair_init +0190 2040017e call p_g24_pair_init p_g24_set_pairing_sm_1: -0195 704c5301 jam state_24g_pairing_1 ,mem_24g_pairing_sm -0196 20600000 rtn +0191 704c5301 jam state_24g_pairing_1 ,mem_24g_pairing_sm +0192 20600000 rtn p_g24_pairing_sm: -0197 7011c590 jam zcode_90 ,mem_zcode_temp_param0 -0198 202007c6 branch p_zcode_entrance +0193 7011c590 jam zcode_90 ,mem_zcode_temp_param0 +0194 202007da branch p_zcode_entrance p_g24_paring_mode_start: -0199 20400774 call power_ctrl_pac_succ_cnt_init +0195 20400788 call power_ctrl_pac_succ_cnt_init p_g24_paring_mode: -019a 7011c591 jam zcode_91 ,mem_zcode_temp_param0 -019b 202007c6 branch p_zcode_entrance +0196 7011c591 jam zcode_91 ,mem_zcode_temp_param0 +0197 202007da branch p_zcode_entrance p_g24_check_51cmd_stop_24g: -019c 793f8026 set0 mark_24g ,mark -019d 704d9300 jam state_24g_stop ,mem_24g_conn_sm -019e 204053ce call le_disable +0198 793f8026 set0 mark_24g ,mark +0199 704d9300 jam state_24g_stop ,mem_24g_conn_sm +019a 204053ce call le_disable p_mouse_disable_g24_pairing_flag: -019f d8e00003 arg mosue_24g_pairing_flag ,queue -01a0 202043d2 branch mouse_disable_function_flag +019b d8e00003 arg mosue_24g_pairing_flag ,queue +019c 202043d2 branch mouse_disable_function_flag p_g24_put_data_in_buff: -01a1 6008cc43 storet 1 ,mem_24g_datalen -01a2 18427200 copy temp ,loopcnt -01a3 d8a04bdf arg mem_24g_txbuf ,contw -01a4 1a220c00 copy rega ,contr -01a5 20207f01 branch memcpy +019d 6008cc43 storet 1 ,mem_24g_datalen +019e 18427200 copy temp ,loopcnt +019f d8a04bdf arg mem_24g_txbuf ,contw +01a0 1a220c00 copy rega ,contr +01a1 20207f01 branch memcpy p_g24_read_len_pid_crc: -01a6 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 -01a7 1fe97e00 rshift3 pdata ,pdata -01a8 6000cc41 store 1 ,mem_24g_rxdata_length -01a9 1fe0fe01 increase 1 ,pdata -01aa d8c04bbe arg mem_24g_rxbuf + 1 ,contr -01ab 98c08c00 iadd contr ,contr -01ac e8c18000 ifetch 3 ,contr -01ad 6001cc80 store 3 ,mem_24g_sta_crc -01ae 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 -01af 1fe37e00 rshift pdata ,pdata -01b0 1fe17e03 and pdata ,0x03 ,pdata -01b1 6000cc86 store 1 ,mem_24g_sta_pid -01b2 20600000 rtn +01a2 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 +01a3 1fe97e00 rshift3 pdata ,pdata +01a4 6000cc41 store 1 ,mem_24g_rxdata_length +01a5 1fe0fe01 increase 1 ,pdata +01a6 d8c04bbe arg mem_24g_rxbuf + 1 ,contr +01a7 98c08c00 iadd contr ,contr +01a8 e8c18000 ifetch 3 ,contr +01a9 6001cc80 store 3 ,mem_24g_sta_crc +01aa 6800cbbe fetch 1 ,mem_24g_rxbuf + 1 +01ab 1fe37e00 rshift pdata ,pdata +01ac 1fe17e03 and pdata ,0x03 ,pdata +01ad 6000cc86 store 1 ,mem_24g_sta_pid +01ae 20600000 rtn p_g24_transmit_prep: -01b3 6800cc43 fetch 1 ,mem_24g_datalen -01b4 1fe0fe02 increase 2 ,pdata -01b5 6000cc45 store 1 ,mem_24g_txlen -01b6 6800cc44 fetch 1 ,mem_24g_data_type -01b7 6000cbff store 1 ,mem_24g_txpayload -01b8 6800cc43 fetch 1 ,mem_24g_datalen -01b9 1fe9fe00 lshift3 pdata ,pdata -01ba 6808cc42 fetcht 1 ,mem_24g_pid -01bb 18410403 and temp ,0x03 ,temp -01bc 18438400 lshift temp ,temp -01bd 9841fe00 ior temp ,pdata -01be 6808cc7f fetcht 1 ,mem_24g_no_ack -01bf 9840fe00 iadd temp ,pdata -01c0 e0a08000 istore 1 ,contw -01c1 6800cc43 fetch 1 ,mem_24g_datalen -01c2 98007200 iforce loopcnt -01c3 d8c04bdf arg mem_24g_txbuf ,contr -01c4 20207f01 branch memcpy +01af 6800cc43 fetch 1 ,mem_24g_datalen +01b0 1fe0fe02 increase 2 ,pdata +01b1 6000cc45 store 1 ,mem_24g_txlen +01b2 6800cc44 fetch 1 ,mem_24g_data_type +01b3 6000cbff store 1 ,mem_24g_txpayload +01b4 6800cc43 fetch 1 ,mem_24g_datalen +01b5 1fe9fe00 lshift3 pdata ,pdata +01b6 6808cc42 fetcht 1 ,mem_24g_pid +01b7 18410403 and temp ,0x03 ,temp +01b8 18438400 lshift temp ,temp +01b9 9841fe00 ior temp ,pdata +01ba 6808cc7f fetcht 1 ,mem_24g_no_ack +01bb 9840fe00 iadd temp ,pdata +01bc e0a08000 istore 1 ,contw +01bd 6800cc43 fetch 1 ,mem_24g_datalen +01be 98007200 iforce loopcnt +01bf d8c04bdf arg mem_24g_txbuf ,contr +01c0 20207f01 branch memcpy p_g24_prep: -01c5 7844fc00 disable enable_crc -01c6 7843fc00 disable enable_white -01c7 58555555 setarg 0x555555 -01c8 98001e00 iforce crc24_init -01c9 6800cc4d fetch 1 ,mem_24g_ch -01ca 202053da branch le_prep2 +01c1 7844fc00 disable enable_crc +01c2 7843fc00 disable enable_white +01c3 58555555 setarg 0x555555 +01c4 98001e00 iforce crc24_init +01c5 6800cc4d fetch 1 ,mem_24g_ch +01c6 202053da branch le_prep2 p_g24_receive_rxon: -01cb 204001c5 call p_g24_prep -01cc 7857fc00 disable user3 -01cd 7826fc00 enable decode_fec0 -01ce 7830fc00 enable is_rx -01cf 78507c00 disable is_tx -01d0 78287c00 enable swfine -01d1 68014c46 fetch 2 ,mem_24g_rx_window -01d2 98003600 iforce stop_watch -01d3 37c18400 correlate null ,timeout -01d4 242c020c nbranch p_g24_sync_timeout ,sync -01d5 7846fc00 disable decode_fec0 -01d6 7825fc00 enable decode_fec1 -01d7 7823fc00 enable enable_white -01d8 7824fc00 enable enable_crc -01d9 20400209 call p_g24_receive_byte -01da 6000ccf7 store 1 ,mem_24g_get_syncword_crc8 -01db 6808ccf6 fetcht 1 ,mem_24g_syncword_crc8 -01dc 98467c00 isub temp ,null -01dd 2422820c nbranch p_g24_end_of_packet ,zero -01de 20400209 call p_g24_receive_byte -01df 6000cbbd store 1 ,mem_24g_rxbuf -01e0 6800cbbd fetch 1 ,mem_24g_rxbuf -01e1 6808cc44 fetcht 1 ,mem_24g_data_type -01e2 a8400e00 icompare bits_data ,temp -01e3 2420820c nbranch p_g24_end_of_packet ,true +01c7 204001c1 call p_g24_prep +01c8 7857fc00 disable user3 +01c9 7826fc00 enable decode_fec0 +01ca 7830fc00 enable is_rx +01cb 78507c00 disable is_tx +01cc 78287c00 enable swfine +01cd 68014c46 fetch 2 ,mem_24g_rx_window +01ce 98003600 iforce stop_watch +01cf 37c18400 correlate null ,timeout +01d0 242c0208 nbranch p_g24_sync_timeout ,sync +01d1 7846fc00 disable decode_fec0 +01d2 7825fc00 enable decode_fec1 +01d3 7823fc00 enable enable_white +01d4 7824fc00 enable enable_crc +01d5 20400205 call p_g24_receive_byte +01d6 6000ccf7 store 1 ,mem_24g_get_syncword_crc8 +01d7 6808ccf6 fetcht 1 ,mem_24g_syncword_crc8 +01d8 98467c00 isub temp ,null +01d9 24228208 nbranch p_g24_end_of_packet ,zero +01da 20400205 call p_g24_receive_byte +01db 6000cbbd store 1 ,mem_24g_rxbuf +01dc 6800cbbd fetch 1 ,mem_24g_rxbuf +01dd 6808cc44 fetcht 1 ,mem_24g_data_type +01de a8400e00 icompare bits_data ,temp +01df 24208208 nbranch p_g24_end_of_packet ,true p_g24_receive_skip: -01e4 20400209 call p_g24_receive_byte -01e5 e0a08000 istore 1 ,contw -01e6 1fe97e00 rshift3 pdata ,pdata -01e7 1fe1721f and pdata ,0x1f ,loopcnt -01e8 202281ec branch p_g24rx_nopayload ,zero +01e0 20400205 call p_g24_receive_byte +01e1 e0a08000 istore 1 ,contw +01e2 1fe97e00 rshift3 pdata ,pdata +01e3 1fe1721f and pdata ,0x1f ,loopcnt +01e4 202281e8 branch p_g24rx_nopayload ,zero p_g24rx_loop: -01e9 20400209 call p_g24_receive_byte -01ea e0a08000 istore 1 ,contw -01eb c20001e9 loop p_g24rx_loop +01e5 20400205 call p_g24_receive_byte +01e6 e0a08000 istore 1 ,contw +01e7 c20001e5 loop p_g24rx_loop p_g24rx_nopayload: -01ec 18a22200 copy contw ,rega -01ed 20400209 call p_g24_receive_byte -01ee 6000cd7e store 1 ,mem_rssi_hex_received -01ef 1a220a00 copy rega ,contw -01f0 09800018 parse demod ,bucket ,24 -01f1 78287c00 enable swfine -01f2 db600664 arg param_sifs ,stop_watch -01f3 1fef7e00 rshift32 pdata ,pdata -01f4 1ff17e00 rshift16 pdata ,pdata -01f5 e0a18000 istore 3 ,contw -01f6 7845fc00 disable decode_fec1 -01f7 2023020c branch p_g24_end_of_packet ,crc_failed -01f8 7837fc00 enable user3 -01f9 68008017 fetch 1 ,mem_last_freq -01fa 1fe0a200 add pdata ,0 ,rega -01fb 20402981 call rf_write_freq -01fc 7846fc00 disable decode_fec0 -01fd 20402918 call set_sync_on -01fe 6800cd7e fetch 1 ,mem_rssi_hex_received +01e8 18a22200 copy contw ,rega +01e9 20400205 call p_g24_receive_byte +01ea 6000cd7e store 1 ,mem_rssi_hex_received +01eb 1a220a00 copy rega ,contw +01ec 09800018 parse demod ,bucket ,24 +01ed 78287c00 enable swfine +01ee db600664 arg param_sifs ,stop_watch +01ef 1fef7e00 rshift32 pdata ,pdata +01f0 1ff17e00 rshift16 pdata ,pdata +01f1 e0a18000 istore 3 ,contw +01f2 7845fc00 disable decode_fec1 +01f3 20230208 branch p_g24_end_of_packet ,crc_failed +01f4 7837fc00 enable user3 +01f5 68008017 fetch 1 ,mem_last_freq +01f6 1fe0a200 add pdata ,0 ,rega +01f7 20402981 call rf_write_freq +01f8 7846fc00 disable decode_fec0 +01f9 20402918 call set_sync_on +01fa 6800cd7e fetch 1 ,mem_rssi_hex_received p_rssi_signal: -01ff 1fe22200 copy pdata ,rega -0200 6808ccfe fetcht 1 ,mem_rssi_signal_index -0201 58004d05 setarg mem_rssi_signal_buf -0202 98408a00 iadd temp ,contw -0203 1a227e00 copy rega ,pdata -0204 e0a08000 istore 1 ,contw -0205 18408401 increase 1 ,temp -0206 18410407 and_into rssi_buf_len_signal ,temp -0207 6008ccfe storet 1 ,mem_rssi_signal_index -0208 20600000 rtn +01fb 1fe22200 copy pdata ,rega +01fc 6808ccfe fetcht 1 ,mem_rssi_signal_index +01fd 58004d05 setarg mem_rssi_signal_buf +01fe 98408a00 iadd temp ,contw +01ff 1a227e00 copy rega ,pdata +0200 e0a08000 istore 1 ,contw +0201 18408401 increase 1 ,temp +0202 18410407 and_into rssi_buf_len_signal ,temp +0203 6008ccfe storet 1 ,mem_rssi_signal_index +0204 20600000 rtn p_g24_receive_byte: -0209 09800008 parse demod ,bucket ,8 -020a 19897e00 rshift3 pwindow ,pdata -020b 20600000 rtn +0205 09800008 parse demod ,bucket ,8 +0206 19897e00 rshift3 pwindow ,pdata +0207 20600000 rtn p_g24_sync_timeout: p_g24_end_of_packet: -020c 784dfc00 disable encode_fec1 -020d 7845fc00 disable decode_fec1 -020e 2020264d branch end_of_packet +0208 784dfc00 disable encode_fec1 +0209 7845fc00 disable decode_fec1 +020a 2020264d branch end_of_packet p_g24_transmit: -020f 204053c4 call le_enable -0210 68024c6b fetch 4 ,mem_24g_addr -0211 98001200 iforce access -0212 204001c5 call p_g24_prep -0213 20402918 call set_sync_on -0214 6808cc4d fetcht 1 ,mem_24g_ch -0215 20402933 call set_freq_tx -0216 79202a00 set1 txgfsk ,radio_ctrl -0217 782efc00 enable encode_fec0 -0218 78307c00 enable is_tx -0219 7850fc00 disable is_rx -021a 19317e00 rshift16 access ,pdata -021b 1fecfe00 rshift8 pdata ,pdata -021c 1ff1fe00 rshift4 pdata ,pdata -021d 08008628 inject mod ,40 -021e 784efc00 disable encode_fec0 -021f 782dfc00 enable encode_fec1 -0220 7823fc00 enable enable_white -0221 7824fc00 enable enable_crc -0222 6800ccf6 fetch 1 ,mem_24g_syncword_crc8 -0223 08008608 inject mod ,8 -0224 6800cc45 fetch 1 ,mem_24g_txlen -0225 98007200 iforce loopcnt -0226 d8c04bff arg mem_24g_txpayload ,contr +020b 204053c4 call le_enable +020c 68024c6b fetch 4 ,mem_24g_addr +020d 98001200 iforce access +020e 204001c1 call p_g24_prep +020f 20402918 call set_sync_on +0210 6808cc4d fetcht 1 ,mem_24g_ch +0211 20402933 call set_freq_tx +0212 79202a00 set1 txgfsk ,radio_ctrl +0213 782efc00 enable encode_fec0 +0214 78307c00 enable is_tx +0215 7850fc00 disable is_rx +0216 19317e00 rshift16 access ,pdata +0217 1fecfe00 rshift8 pdata ,pdata +0218 1ff1fe00 rshift4 pdata ,pdata +0219 08008628 inject mod ,40 +021a 784efc00 disable encode_fec0 +021b 782dfc00 enable encode_fec1 +021c 7823fc00 enable enable_white +021d 7824fc00 enable enable_crc +021e 6800ccf6 fetch 1 ,mem_24g_syncword_crc8 +021f 08008608 inject mod ,8 +0220 6800cc45 fetch 1 ,mem_24g_txlen +0221 98007200 iforce loopcnt +0222 d8c04bff arg mem_24g_txpayload ,contr p_g24tr_loop: -0227 e8c08000 ifetch 1 ,contr -0228 08008608 inject mod ,8 -0229 c2000227 loop p_g24tr_loop -022a 78247c00 enable enable_parity -022b 08008618 inject mod ,24 -022c 78447c00 disable enable_parity -022d 37d38200 until null ,tx_clear -022e 20000064 nop 100 -022f 784efc00 disable encode_fec0 -0230 784dfc00 disable encode_fec1 -0231 20600000 rtn +0223 e8c08000 ifetch 1 ,contr +0224 08008608 inject mod ,8 +0225 c2000223 loop p_g24tr_loop +0226 78247c00 enable enable_parity +0227 08008618 inject mod ,24 +0228 78447c00 disable enable_parity +0229 37d38200 until null ,tx_clear +022a 20000064 nop 100 +022b 784efc00 disable encode_fec0 +022c 784dfc00 disable encode_fec1 +022d 20600000 rtn p_g24_timer_check: -0232 20407fe9 call disable_user -0233 680a4c64 fetcht 4 ,mem_24g_tx_btclk -0234 1c427e00 copy clkn_bt ,pdata -0235 98467c00 isub temp ,null -0236 24412d18 ncall g24_timer_timeout ,positive -0237 1fe22400 copy pdata ,regb -0238 68024c64 fetch 4 ,mem_24g_tx_btclk -0239 6808cc68 fetcht 1 ,mem_24g_interval -023a 98408400 iadd temp ,temp -023b 1a427e00 copy regb ,pdata -023c 98467c00 isub temp ,null -023d 24610000 nrtn positive -023e 793ffe1c set0 28 ,pdata -023f 60024c64 store 4 ,mem_24g_tx_btclk -0240 20207fe7 branch enable_user +022e 20407fe9 call disable_user +022f 680a4c64 fetcht 4 ,mem_24g_tx_btclk +0230 1c427e00 copy clkn_bt ,pdata +0231 98467c00 isub temp ,null +0232 24412d18 ncall g24_timer_timeout ,positive +0233 1fe22400 copy pdata ,regb +0234 68024c64 fetch 4 ,mem_24g_tx_btclk +0235 6808cc68 fetcht 1 ,mem_24g_interval +0236 98408400 iadd temp ,temp +0237 1a427e00 copy regb ,pdata +0238 98467c00 isub temp ,null +0239 24610000 nrtn positive +023a 793ffe1c set0 28 ,pdata +023b 60024c64 store 4 ,mem_24g_tx_btclk +023c 20207fe7 branch enable_user p_rssi_average: -0241 d8400000 arg 0 ,temp -0242 df200008 arg rssi_buf_len_signal + 1 ,loopcnt -0243 1a220c00 copy rega ,contr +023d d8400000 arg 0 ,temp +023e df200008 arg rssi_buf_len_signal + 1 ,loopcnt +023f 1a220c00 copy rega ,contr p_rssi_average_loop: -0244 e8c08000 ifetch 1 ,contr -0245 98408400 iadd temp ,temp -0246 c2000244 loop p_rssi_average_loop -0247 18497e00 rshift3 temp ,pdata -0248 1fe20400 copy pdata ,temp -0249 c6930000 rtnmark0 mark_24g -024a 1fe6fc0a div pdata ,10 -024b 20407f86 call wait_div_end -024c 1807fe00 quotient pdata -024d 1ff27e00 lshift4 pdata ,pdata -024e 20207f55 branch clk2bt_next +0240 e8c08000 ifetch 1 ,contr +0241 98408400 iadd temp ,temp +0242 c2000240 loop p_rssi_average_loop +0243 18497e00 rshift3 temp ,pdata +0244 1fe20400 copy pdata ,temp +0245 c6930000 rtnmark0 mark_24g +0246 1fe6fc0a div pdata ,10 +0247 20407f86 call wait_div_end +0248 1807fe00 quotient pdata +0249 1ff27e00 lshift4 pdata ,pdata +024a 20207f55 branch clk2bt_next p_mouse_before_lpm: -024f c6130000 rtnmark1 mark_24g -0250 20400375 call p_mouse_le_txbuff_save -0251 20400261 call p_mouse_setgpio_lpm -0252 6800c040 fetch 1 ,mem_context -0253 c3000256 bbit0 state_inconn ,p_clear_wake -0254 680080a0 fetch 1 ,mem_lpm_current_mult -0255 247a0000 nrtn blank +024b c6130000 rtnmark1 mark_24g +024c 20400371 call p_mouse_le_txbuff_save +024d 2040025d call p_mouse_setgpio_lpm +024e 6800c040 fetch 1 ,mem_context +024f c3000252 bbit0 state_inconn ,p_clear_wake +0250 680080a0 fetch 1 ,mem_lpm_current_mult +0251 247a0000 nrtn blank p_clear_wake: -0256 58000000 setarg 0 -0257 600400a1 store 8 ,mem_gpio_wakeup_low -0258 20600000 rtn +0252 58000000 setarg 0 +0253 600400a1 store 8 ,mem_gpio_wakeup_low +0254 20600000 rtn p_g24_lpm_wait: -0259 78347c00 enable user -025a 20402afa call lpo_calibration -025b 6801c16f fetch 3 ,mem_clks_per_lpo -025c 203a7fe9 branch disable_user ,blank -025d 6800c091 fetch 1 ,mem_lpm_mode -025e 203a7fe9 branch disable_user ,blank -025f 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt -0260 c000ffe9 beq g24_tx_timer_int_enable ,disable_user +0255 78347c00 enable user +0256 20402afa call lpo_calibration +0257 6801c16f fetch 3 ,mem_clks_per_lpo +0258 203a7fe9 branch disable_user ,blank +0259 6800c091 fetch 1 ,mem_lpm_mode +025a 203a7fe9 branch disable_user ,blank +025b 6800cd83 fetch 1 ,mem_24g_transmit_by_interrupt +025c c000ffe9 beq g24_tx_timer_int_enable ,disable_user p_mouse_setgpio_lpm: -0261 2040028d call p_mouse_set_sdio_high -0262 20400256 call p_clear_wake +025d 20400289 call p_mouse_set_sdio_high +025e 20400252 call p_clear_wake p_mouse_setgpio_hibernate: -0263 20403ebf call mouse_lpm_before_common -0264 6808cb46 fetcht 1 ,mem_flash_ncs_gpio -0265 20406825 call gpio_out_inactive -0266 68120070 hfetch 4 ,core_gpio_oe0 -0267 681a0078 hfetcht 4 ,core_gpio_pu0 -0268 98418400 ior temp ,temp -0269 18440400 invert temp ,temp -026a 601a007c hstoret 4 ,core_gpio_pd0 -026b 6810807d hfetch 1 ,core_gpio_pd1 -026c 793ffe02 set0 2 ,pdata -026d 6010807d hstore 1 ,core_gpio_pd1 -026e 6810807e hfetch 1 ,core_gpio_pd2 -026f 793ffe06 set0 6 ,pdata -0270 6010807e hstore 1 ,core_gpio_pd2 -0271 6810807f hfetch 1 ,core_gpio_pd3 -0272 79207e00 set1 0 ,pdata -0273 6010807f hstore 1 ,core_gpio_pd3 -0274 6810807a hfetch 1 ,core_gpio_pu2 -0275 1fe1fec0 or pdata ,0xc0 ,pdata -0276 6010807a hstore 1 ,core_gpio_pu2 -0277 6810807f hfetch 1 ,core_gpio_pd3 -0278 1fe17e7f and pdata ,0x7f ,pdata -0279 6010807f hstore 1 ,core_gpio_pd3 -027a 20600000 rtn +025f 20403ebf call mouse_lpm_before_common +0260 6808cb46 fetcht 1 ,mem_flash_ncs_gpio +0261 20406825 call gpio_out_inactive +0262 68120070 hfetch 4 ,core_gpio_oe0 +0263 681a0078 hfetcht 4 ,core_gpio_pu0 +0264 98418400 ior temp ,temp +0265 18440400 invert temp ,temp +0266 601a007c hstoret 4 ,core_gpio_pd0 +0267 6810807d hfetch 1 ,core_gpio_pd1 +0268 793ffe02 set0 2 ,pdata +0269 6010807d hstore 1 ,core_gpio_pd1 +026a 6810807e hfetch 1 ,core_gpio_pd2 +026b 793ffe06 set0 6 ,pdata +026c 6010807e hstore 1 ,core_gpio_pd2 +026d 6810807f hfetch 1 ,core_gpio_pd3 +026e 79207e00 set1 0 ,pdata +026f 6010807f hstore 1 ,core_gpio_pd3 +0270 6810807a hfetch 1 ,core_gpio_pu2 +0271 1fe1fec0 or pdata ,0xc0 ,pdata +0272 6010807a hstore 1 ,core_gpio_pu2 +0273 6810807f hfetch 1 ,core_gpio_pd3 +0274 1fe17e7f and pdata ,0x7f ,pdata +0275 6010807f hstore 1 ,core_gpio_pd3 +0276 20600000 rtn p_mouse_t_wheel_clear_wake: -027b 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio -027c 204005da call p_gpio_set_input_pd -027d 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio -027e 204005da call p_gpio_set_input_pd -027f 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio -0280 204005da call p_gpio_set_input_pd -0281 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio -0282 204005da call p_gpio_set_input_pd -0283 680080a1 fetch 1 ,mem_gpio_wakeup_low -0284 1fe17ebf and pdata ,0xbf ,pdata -0285 600080a1 store 1 ,mem_gpio_wakeup_low -0286 680080a3 fetch 1 ,mem_gpio_wakeup_low + 2 -0287 1fe17e7f and pdata ,0x7f ,pdata -0288 600080a3 store 1 ,mem_gpio_wakeup_low + 2 -0289 680080a4 fetch 1 ,mem_gpio_wakeup_low + 3 -028a 1fe17ee7 and pdata ,0xe7 ,pdata -028b 600080a4 store 1 ,mem_gpio_wakeup_low + 3 -028c 20600000 rtn +0277 6808c6e8 fetcht 1 ,mem_whee_a_data_gpio +0278 204005d7 call p_gpio_set_input_pd +0279 6808c6e9 fetcht 1 ,mem_whee_b_data_gpio +027a 204005d7 call p_gpio_set_input_pd +027b 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +027c 204005d7 call p_gpio_set_input_pd +027d 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +027e 204005d7 call p_gpio_set_input_pd +027f 680080a1 fetch 1 ,mem_gpio_wakeup_low +0280 1fe17ebf and pdata ,0xbf ,pdata +0281 600080a1 store 1 ,mem_gpio_wakeup_low +0282 680080a3 fetch 1 ,mem_gpio_wakeup_low + 2 +0283 1fe17e7f and pdata ,0x7f ,pdata +0284 600080a3 store 1 ,mem_gpio_wakeup_low + 2 +0285 680080a4 fetch 1 ,mem_gpio_wakeup_low + 3 +0286 1fe17ee7 and pdata ,0xe7 ,pdata +0287 600080a4 store 1 ,mem_gpio_wakeup_low + 3 +0288 20600000 rtn p_mouse_set_sdio_high: -028d 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag -028e 207a0000 rtn blank -028f 20200562 branch p_mouse_seting_sensor_type +0289 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag +028a 207a0000 rtn blank +028b 2020055f branch p_mouse_seting_sensor_type p_device_init: -0290 70895b86 jam 0x86 ,0x895b -0291 70895ca0 jam 0xa0 ,0x895c -0292 2040296c call initialize_radio -0293 20403416 call app_lpm_mult_enable -0294 204074b9 call enable_authrom -0295 20358313 branch p_mouse_spi_init ,wake +028c 70895b86 jam 0x86 ,0x895b +028d 70895ca0 jam 0xa0 ,0x895c +028e 2040296c call initialize_radio +028f 20403416 call app_lpm_mult_enable +0290 204074b9 call enable_authrom +0291 2035830f branch p_mouse_spi_init ,wake p_device_wake_from_power: -0296 6801c4a3 fetch 3 ,mem_le_lap + 3 -0297 6001cbb0 store 3 ,mem_le_lap_high_3b -0298 20400001 call p_wake_from_power -0299 2040006b call p_mouse_switch_hwakeup_bypb -029a 6808c720 fetcht 1 ,mem_device_flag -029b 6800c703 fetch 1 ,mem_24g_device_number -029c 98467c00 isub temp ,null -029d 244282b5 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero -029e 6800c720 fetch 1 ,mem_device_flag -029f c07f82a2 beq 0xff ,p_mouse_24g_pair_check -02a0 1fe67c01 sub pdata ,1 ,null -02a1 242282a4 nbranch p_mouse_check_reconn_target ,zero +0292 6801c4a3 fetch 3 ,mem_le_lap + 3 +0293 6001cbb0 store 3 ,mem_le_lap_high_3b +0294 20400001 call p_wake_from_power +0295 2040006c call p_mouse_switch_hwakeup_bypb +0296 6808c720 fetcht 1 ,mem_device_flag +0297 6800c703 fetch 1 ,mem_24g_device_number +0298 98467c00 isub temp ,null +0299 244282b1 ncall p_mouse_bt_deepsleep_timerout_adjust ,zero +029a 6800c720 fetch 1 ,mem_device_flag +029b c07f829e beq 0xff ,p_mouse_24g_pair_check +029c 1fe67c01 sub pdata ,1 ,null +029d 242282a0 nbranch p_mouse_check_reconn_target ,zero p_mouse_24g_pair_check: -02a2 204005b6 call p_mouse_check_key_gpio -02a3 c00282c8 beq mouse_lm_button ,p_mouse_24g_pairing_button +029e 204005b3 call p_mouse_check_key_gpio +029f c00282c4 beq mouse_lm_button ,p_mouse_24g_pairing_button p_mouse_check_reconn_target: -02a4 204002b2 call p_mouse_tx_power_init -02a5 204004e5 call p_mouse_select_device_by_button -02a6 da204721 arg mem_device1_type ,rega -02a7 6800c720 fetch 1 ,mem_device_flag -02a8 6808c703 fetcht 1 ,mem_24g_device_number -02a9 98467c00 isub temp ,null -02aa 20228360 branch p_mouse_start_24g_mode ,zero -02ab 1fe0ffff increase -1 ,pdata -02ac 1feffe1d mul32 pdata ,29 ,pdata -02ad 9a20a200 iadd rega ,rega -02ae ea208000 ifetch 1 ,rega -02af 6000c210 store 1 ,mem_xrecord_mode -02b0 c01a02b8 beq rec_4_mode ,p_mouse4_0_check_reconn_target -02b1 20600000 rtn +02a0 204002ae call p_mouse_tx_power_init +02a1 204004e2 call p_mouse_select_device_by_button +02a2 da204721 arg mem_device1_type ,rega +02a3 6800c720 fetch 1 ,mem_device_flag +02a4 6808c703 fetcht 1 ,mem_24g_device_number +02a5 98467c00 isub temp ,null +02a6 2022835c branch p_mouse_start_24g_mode ,zero +02a7 1fe0ffff increase -1 ,pdata +02a8 1feffe1d mul32 pdata ,29 ,pdata +02a9 9a20a200 iadd rega ,rega +02aa ea208000 ifetch 1 ,rega +02ab 6000c210 store 1 ,mem_xrecord_mode +02ac c01a02b4 beq rec_4_mode ,p_mouse4_0_check_reconn_target +02ad 20600000 rtn p_mouse_tx_power_init: -02b2 6800ccfa fetch 1 ,mem_tx_power_temp -02b3 6000c1de store 1 ,mem_tx_power -02b4 20600000 rtn +02ae 6800ccfa fetch 1 ,mem_tx_power_temp +02af 6000c1de store 1 ,mem_tx_power +02b0 20600000 rtn p_mouse_bt_deepsleep_timerout_adjust: -02b5 58004650 setarg 0x4650 -02b6 600146aa store 2 ,mem_mouse_no_data_timeout -02b7 20600000 rtn +02b1 58004650 setarg 0x4650 +02b2 600146aa store 2 ,mem_mouse_no_data_timeout +02b3 20600000 rtn p_mouse4_0_check_reconn_target: -02b8 7011c523 jam zcode_23 ,mem_zcode_temp_param0 -02b9 202007c6 branch p_zcode_entrance +02b4 7011c523 jam zcode_23 ,mem_zcode_temp_param0 +02b5 202007da branch p_zcode_entrance p_le_check_adv_flag: -02ba da204370 arg mem_le_adv_data ,rega +02b6 da204370 arg mem_le_adv_data ,rega p_le_check_adv_flag_loop: -02bb ea208000 ifetch 1 ,rega -02bc 207a0000 rtn blank -02bd 98c0a200 iadd contr ,rega -02be e8c08000 ifetch 1 ,contr -02bf c1008000 rtneq 0x01 -02c0 202002bb branch p_le_check_adv_flag_loop +02b7 ea208000 ifetch 1 ,rega +02b8 207a0000 rtn blank +02b9 98c0a200 iadd contr ,rega +02ba e8c08000 ifetch 1 ,contr +02bb c1008000 rtneq 0x01 +02bc 202002b7 branch p_le_check_adv_flag_loop p_mouse_le_fast_conn_disable: -02c1 704bb35a jam 0x5a ,mem_mouse_fast_conn_flag -02c2 20600000 rtn +02bd 704bb35a jam 0x5a ,mem_mouse_fast_conn_flag +02be 20600000 rtn p_mouse_fast_conn_init: -02c3 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag -02c4 70421034 jam 0x34 ,mem_xrecord_mode -02c5 68034d88 fetch 6 ,mem_24g_allpowerful_addr -02c6 600344a0 store 6 ,mem_le_lap -02c7 20600000 rtn +02bf 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag +02c0 70421034 jam 0x34 ,mem_xrecord_mode +02c1 68034d88 fetch 6 ,mem_24g_allpowerful_addr +02c2 600344a0 store 6 ,mem_le_lap +02c3 20600000 rtn p_mouse_24g_pairing_button: -02c8 7011c562 jam zcode_62 ,mem_zcode_temp_param0 -02c9 202007c6 branch p_zcode_entrance +02c4 7011c562 jam zcode_62 ,mem_zcode_temp_param0 +02c5 202007da branch p_zcode_entrance p_mouse_init_sunt: -02ca 20400313 call p_mouse_spi_init -02cb 204040c0 call mouse_spi_sdio_gpio_pollup +02c6 2040030f call p_mouse_spi_init +02c7 204040c0 call mouse_spi_sdio_gpio_pollup p_mouse_init_sensor: -02cc 204040d9 call mouse_read_sensor_id -02cd c01802d6 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge -02ce c01882e5 beq p3065_id1 ,p_mouse_p3065_init_param -02cf 204040d1 call mouse_twspi_reset -02d0 200003e8 nop 1000 -02d1 202002cc branch p_mouse_init_sensor +02c8 204040d9 call mouse_read_sensor_id +02c9 c01802d2 beq p32xx_id1 ,p_mouse_init_p32xx_id2_judge +02ca c01882e1 beq p3065_id1 ,p_mouse_p3065_init_param +02cb 204040d1 call mouse_twspi_reset +02cc 200003e8 nop 1000 +02cd 202002c8 branch p_mouse_init_sensor p_mouse_init_sensor_reset: -02d2 704b0001 jam 1 ,mem_mouse_init_sensor_reset_flag -02d3 2040640f call spi_ncs_enable -02d4 204002ca call p_mouse_init_sunt -02d5 20206411 branch spi_ncs_disable +02ce 704b0001 jam 1 ,mem_mouse_init_sensor_reset_flag +02cf 2040640f call spi_ncs_enable +02d0 204002c6 call p_mouse_init_sunt +02d1 20206411 branch spi_ncs_disable p_mouse_init_p32xx_id2_judge: -02d6 20400558 call p_mouse_sensor_poweron -02d7 6800c6de fetch 1 ,mem_sensor_id2 -02d8 c02d02da beq p_mx8650 ,p_mouse_mx8650_init_param -02d9 202040e1 branch mouse_init_p32xx_id2_judge + 1 +02d2 20400555 call p_mouse_sensor_poweron +02d3 6800c6de fetch 1 ,mem_sensor_id2 +02d4 c02d02d6 beq p_mx8650 ,p_mouse_mx8650_init_param +02d5 202040e1 branch mouse_init_p32xx_id2_judge + 1 p_mouse_mx8650_init_param: -02da 7046e007 jam mx8650 ,mem_config_sensor_type -02db da604b6e arg mem_sensor_8650_init ,regc -02dc 204002de call p_sensor_wr_seq -02dd 2020055e branch p_mouse_dpi_config +02d6 7046e007 jam mx8650 ,mem_config_sensor_type +02d7 da604b6e arg mem_sensor_8650_init ,regc +02d8 204002da call p_sensor_wr_seq +02d9 2020055b branch p_mouse_dpi_config p_sensor_wr_seq: -02de ea610000 ifetch 2 ,regc -02df d840ffff arg 0xffff ,temp -02e0 98467c00 isub temp ,null -02e1 20628000 rtn zero -02e2 20406413 call twspi_write -02e3 1a60a602 increase 2 ,regc -02e4 202002de branch p_sensor_wr_seq +02da ea610000 ifetch 2 ,regc +02db d840ffff arg 0xffff ,temp +02dc 98467c00 isub temp ,null +02dd 20628000 rtn zero +02de 20406413 call twspi_write +02df 1a60a602 increase 2 ,regc +02e0 202002da branch p_sensor_wr_seq p_mouse_p3065_init_param: -02e5 20400558 call p_mouse_sensor_poweron -02e6 202040ea branch mouse_p3065_init_param +02e1 20400555 call p_mouse_sensor_poweron +02e2 202040ea branch mouse_p3065_init_param p_spid_init_flash: -02e7 70808640 jam 0x40 ,core_spid_ctrl -02e8 70808700 jam 0x0 ,core_spid_delay -02e9 68108081 hfetch 1 ,core_gpio_sel1 -02ea 793ffe00 set0 0 ,pdata -02eb 793ffe01 set0 1 ,pdata -02ec 79207e03 set1 3 ,pdata -02ed 793ffe04 set0 4 ,pdata -02ee 60108081 hstore 1 ,core_gpio_sel1 -02ef 58000000 setarg 0 -02f0 600201f5 store 4 ,mem_spid_tbuf -02f1 6810807f hfetch 1 ,core_gpio_pd3 -02f2 793ffe00 set0 0 ,pdata -02f3 6010807f hstore 1 ,core_gpio_pd3 -02f4 20600000 rtn +02e3 70808640 jam 0x40 ,core_spid_ctrl +02e4 70808700 jam 0x0 ,core_spid_delay +02e5 68108081 hfetch 1 ,core_gpio_sel1 +02e6 793ffe00 set0 0 ,pdata +02e7 793ffe01 set0 1 ,pdata +02e8 79207e03 set1 3 ,pdata +02e9 793ffe04 set0 4 ,pdata +02ea 60108081 hstore 1 ,core_gpio_sel1 +02eb 58000000 setarg 0 +02ec 600201f5 store 4 ,mem_spid_tbuf +02ed 6810807f hfetch 1 ,core_gpio_pd3 +02ee 793ffe00 set0 0 ,pdata +02ef 6010807f hstore 1 ,core_gpio_pd3 +02f0 20600000 rtn p_mouse_load_flash_info_check: -02f5 20400352 call p_flash_release_deep_power_down -02f6 20404423 call mouse_load_flash_flag -02f7 68014778 fetch 2 ,mem_store_flag -02f8 d840aa55 arg eeprom_init_flag ,temp -02f9 98467c00 isub temp ,null -02fa 20228342 branch p_mouse_load_flash_device_info ,zero -02fb 60094778 storet 2 ,mem_store_flag -02fc 2040441c call mouse_ble_init_address -02fd 68024b4d fetch 4 ,mem_mouse_24g_addr_init -02fe 6002477b store 4 ,mem_mouse_24g_addr -02ff 60024c6b store 4 ,mem_24g_addr +02f1 2040034e call p_flash_release_deep_power_down +02f2 20404423 call mouse_load_flash_flag +02f3 68014778 fetch 2 ,mem_store_flag +02f4 d840aa55 arg eeprom_init_flag ,temp +02f5 98467c00 isub temp ,null +02f6 2022833e branch p_mouse_load_flash_device_info ,zero +02f7 60094778 storet 2 ,mem_store_flag +02f8 2040441c call mouse_ble_init_address +02f9 68024b4d fetch 4 ,mem_mouse_24g_addr_init +02fa 6002477b store 4 ,mem_mouse_24g_addr +02fb 60024c6b store 4 ,mem_24g_addr p_mouse_store_flash_device_info: -0300 20400518 call p_mouse_adc_read_timeout -0301 6801470f fetch 2 ,mem_mouse_vdd_now_vol -0302 203a0300 branch p_mouse_store_flash_device_info ,blank -0303 6800c231 fetch 1 ,mem_adc_power_flag -0304 c280b40a bbit1 1 ,app_enter_hibernate -0305 20400352 call p_flash_release_deep_power_down -0306 2040031e call p_flash_erase_sector -0307 2040032d call p_flash_write_enable -0308 2040033c call p_mouse_information_flash_parameters -0309 20400331 call p_spid_write_flash -030a 20400322 call p_wait_flash_done -030b 20400315 call p_mouse_store_flash_dpi +02fc 20400515 call p_mouse_adc_read_timeout +02fd 6801470f fetch 2 ,mem_mouse_vdd_now_vol +02fe 203a02fc branch p_mouse_store_flash_device_info ,blank +02ff 6800c231 fetch 1 ,mem_adc_power_flag +0300 c280b40a bbit1 1 ,app_enter_hibernate +0301 2040034e call p_flash_release_deep_power_down +0302 2040031a call p_flash_erase_sector +0303 20400329 call p_flash_write_enable +0304 20400338 call p_mouse_information_flash_parameters +0305 2040032d call p_spid_write_flash +0306 2040031e call p_wait_flash_done +0307 20400311 call p_mouse_store_flash_dpi p_mouse_store_random_addr_increase_count: -030c 204002e7 call p_spid_init_flash -030d 2040032d call p_flash_write_enable -030e d8400002 arg 2 ,temp -030f da2047c4 arg mem_random_addr_increase_count ,rega -0310 da40005f arg mouse_random_addr_count_eeprom_offset ,regb -0311 2040031a call p_mouse_store_flash_comm -0312 2040034b call p_flash_deep_power_down +0308 204002e3 call p_spid_init_flash +0309 20400329 call p_flash_write_enable +030a d8400002 arg 2 ,temp +030b da2047c4 arg mem_random_addr_increase_count ,rega +030c da40005f arg mouse_random_addr_count_eeprom_offset ,regb +030d 20400316 call p_mouse_store_flash_comm +030e 20400347 call p_flash_deep_power_down p_mouse_spi_init: -0313 70421276 jam 0x76 ,mem_spi_init_clk -0314 20203d36 branch mouse_spi_init +030f 70421276 jam 0x76 ,mem_spi_init_clk +0310 20203d36 branch mouse_spi_init p_mouse_store_flash_dpi: -0315 204002e7 call p_spid_init_flash -0316 2040032d call p_flash_write_enable -0317 d8400001 arg 1 ,temp -0318 da20477a arg mem_mouse_dpi ,rega -0319 da40005a arg mouse_dpi_eeprom_offect ,regb +0311 204002e3 call p_spid_init_flash +0312 20400329 call p_flash_write_enable +0313 d8400001 arg 1 ,temp +0314 da20477a arg mem_mouse_dpi ,rega +0315 da40005a arg mouse_dpi_eeprom_offect ,regb p_mouse_store_flash_comm: -031a 6801c700 fetch 3 ,mem_flash_base -031b 9a40fe00 iadd regb ,pdata -031c 20400331 call p_spid_write_flash -031d 20200322 branch p_wait_flash_done +0316 6801c700 fetch 3 ,mem_flash_base +0317 9a40fe00 iadd regb ,pdata +0318 2040032d call p_spid_write_flash +0319 2020031e branch p_wait_flash_done p_flash_erase_sector: -031e 6801c700 fetch 3 ,mem_flash_base -031f 6001c232 store 3 ,mem_spi_write_addr -0320 2040032d call p_flash_write_enable -0321 2040652b call flash_erase_sector + 3 +031a 6801c700 fetch 3 ,mem_flash_base +031b 6001c232 store 3 ,mem_spi_write_addr +031c 20400329 call p_flash_write_enable +031d 2040652b call flash_erase_sector + 3 p_wait_flash_done: -0322 20400325 call p_flash_read_status -0323 c2800322 bbit1 flash_status_wip ,p_wait_flash_done -0324 20600000 rtn +031e 20400321 call p_flash_read_status +031f c280031e bbit1 flash_status_wip ,p_wait_flash_done +0320 20600000 rtn p_flash_read_status: -0325 580001fa setarg mem_spid_rbuf -0326 6011008c hstore 2 ,core_spid_rxaddr -0327 58000005 setarg flash_read_satus -0328 18000401 force 1 ,temp -0329 600081f5 store 1 ,mem_spid_tbuf -032a 580001f5 setarg mem_spid_tbuf -032b 6011008a hstore 2 ,core_spid_txaddr -032c 202064f6 branch spid_read_regs + 2 +0321 580001fa setarg mem_spid_rbuf +0322 6011008c hstore 2 ,core_spid_rxaddr +0323 58000005 setarg flash_read_satus +0324 18000401 force 1 ,temp +0325 600081f5 store 1 ,mem_spid_tbuf +0326 580001f5 setarg mem_spid_tbuf +0327 6011008a hstore 2 ,core_spid_txaddr +0328 202064f6 branch spid_read_regs + 2 p_flash_write_enable: -032d 2040650b call spid_unlock_flash -032e 20400325 call p_flash_read_status -032f c300832e bbit0 flash_status_wel ,p_flash_write_enable + 1 -0330 20600000 rtn +0329 2040650b call spid_unlock_flash +032a 20400321 call p_flash_read_status +032b c300832a bbit0 flash_status_wel ,p_flash_write_enable + 1 +032c 20600000 rtn p_spid_write_flash: -0331 1fe22600 copy pdata ,regc -0332 1a227e00 copy rega ,pdata -0333 1fe0fffc increase -4 ,pdata -0334 1fe22400 copy pdata ,regb -0335 ea420000 ifetch 4 ,regb -0336 60024b48 store 4 ,mem_write_flash_head_temp -0337 1a627e00 copy regc ,pdata -0338 20406552 call spid_write_flash -0339 68024b48 fetch 4 ,mem_write_flash_head_temp -033a e2420000 istore 4 ,regb -033b 20600000 rtn +032d 1fe22600 copy pdata ,regc +032e 1a227e00 copy rega ,pdata +032f 1fe0fffc increase -4 ,pdata +0330 1fe22400 copy pdata ,regb +0331 ea420000 ifetch 4 ,regb +0332 60024b48 store 4 ,mem_write_flash_head_temp +0333 1a627e00 copy regc ,pdata +0334 20406552 call spid_write_flash +0335 68024b48 fetch 4 ,mem_write_flash_head_temp +0336 e2420000 istore 4 ,regb +0337 20600000 rtn p_mouse_information_flash_parameters: -033c 5800477f setarg mem_mouse_information_end -033d d8404720 arg mem_mouse_information_start ,temp -033e 98460400 isub temp ,temp -033f 6801c700 fetch 3 ,mem_flash_base -0340 da204720 arg mem_mouse_information_start ,rega -0341 20600000 rtn +0338 5800477f setarg mem_mouse_information_end +0339 d8404720 arg mem_mouse_information_start ,temp +033a 98460400 isub temp ,temp +033b 6801c700 fetch 3 ,mem_flash_base +033c da204720 arg mem_mouse_information_start ,rega +033d 20600000 rtn p_mouse_load_flash_device_info: -0342 20400352 call p_flash_release_deep_power_down -0343 2040033c call p_mouse_information_flash_parameters -0344 20406562 call spid_read_flash -0345 20400354 call p_mouse_load_random_addr_increase_count -0346 2040035b call p_mouse_load_dpi_from_flash -0347 2040431a call mouse_select_reconn_device -0348 6802477b fetch 4 ,mem_mouse_24g_addr -0349 60024c6b store 4 ,mem_24g_addr -034a 20600000 rtn +033e 2040034e call p_flash_release_deep_power_down +033f 20400338 call p_mouse_information_flash_parameters +0340 20406562 call spid_read_flash +0341 20400350 call p_mouse_load_random_addr_increase_count +0342 20400357 call p_mouse_load_dpi_from_flash +0343 2040431a call mouse_select_reconn_device +0344 6802477b fetch 4 ,mem_mouse_24g_addr +0345 60024c6b store 4 ,mem_24g_addr +0346 20600000 rtn p_flash_deep_power_down: -034b 700aa2b9 jam flash_command_deep_power_down ,mem_temp +0347 700aa2b9 jam flash_command_deep_power_down ,mem_temp p_spid_write_flash_cmd: -034c 204002e7 call p_spid_init_flash -034d 204069ac call delay_nop100 -034e da204b48 arg mem_write_flash_head_temp ,rega -034f 68088aa2 fetcht 1 ,mem_temp -0350 20406556 call spid_write_flash_common -0351 202069ac branch delay_nop100 +0348 204002e3 call p_spid_init_flash +0349 204069ac call delay_nop100 +034a da204b48 arg mem_write_flash_head_temp ,rega +034b 68088aa2 fetcht 1 ,mem_temp +034c 20406556 call spid_write_flash_common +034d 202069ac branch delay_nop100 p_flash_release_deep_power_down: -0352 700aa2ab jam flash_command_release_deep_power_down ,mem_temp -0353 2020034c branch p_spid_write_flash_cmd +034e 700aa2ab jam flash_command_release_deep_power_down ,mem_temp +034f 20200348 branch p_spid_write_flash_cmd p_mouse_load_random_addr_increase_count: -0354 20400352 call p_flash_release_deep_power_down -0355 d8400002 arg 2 ,temp -0356 da2047c4 arg mem_random_addr_increase_count ,rega -0357 da40005f arg mouse_random_addr_count_eeprom_offset ,regb +0350 2040034e call p_flash_release_deep_power_down +0351 d8400002 arg 2 ,temp +0352 da2047c4 arg mem_random_addr_increase_count ,rega +0353 da40005f arg mouse_random_addr_count_eeprom_offset ,regb p_mouse_load_flash_comm: -0358 6801c700 fetch 3 ,mem_flash_base -0359 9a40fe00 iadd regb ,pdata -035a 20206562 branch spid_read_flash +0354 6801c700 fetch 3 ,mem_flash_base +0355 9a40fe00 iadd regb ,pdata +0356 20206562 branch spid_read_flash p_mouse_load_dpi_from_flash: -035b 20400352 call p_flash_release_deep_power_down -035c d8400001 arg 1 ,temp -035d da20477a arg mem_mouse_dpi ,rega -035e da40005a arg mouse_dpi_eeprom_offect ,regb -035f 20200358 branch p_mouse_load_flash_comm +0357 2040034e call p_flash_release_deep_power_down +0358 d8400001 arg 1 ,temp +0359 da20477a arg mem_mouse_dpi ,rega +035a da40005a arg mouse_dpi_eeprom_offect ,regb +035b 20200354 branch p_mouse_load_flash_comm p_mouse_start_24g_mode: -0360 70472001 jam 1 ,mem_device_flag -0361 20400767 call p_mouse_mode_24g_device_multi_led_on +035c 70472001 jam 1 ,mem_device_flag +035d 2040077b call p_mouse_mode_24g_device_multi_led_on p_g24_start_24g_mode: -0362 7011c560 jam zcode_60 ,mem_zcode_temp_param0 -0363 202007c6 branch p_zcode_entrance +035e 7011c560 jam zcode_60 ,mem_zcode_temp_param0 +035f 202007da branch p_zcode_entrance p_g24_auto_pair_start: -0364 2040076c call p_mouse_discovery_multi_led_blink -0365 7011c561 jam zcode_61 ,mem_zcode_temp_param0 -0366 202007c6 branch p_zcode_entrance +0360 20400780 call p_mouse_discovery_multi_led_blink +0361 7011c561 jam zcode_61 ,mem_zcode_temp_param0 +0362 202007da branch p_zcode_entrance p_pdata_0xff_check: -0367 20407fe7 call enable_user -0368 5800ffff setarg 0xffff +0363 20407fe7 call enable_user +0364 5800ffff setarg 0xffff p_pdata_0xff_check_loop: -0369 e8c90000 ifetcht 2 ,contr -036a 98467c00 isub temp ,null -036b 2442ffe9 ncall disable_user ,zero -036c c2000369 loop p_pdata_0xff_check_loop -036d 20600000 rtn +0365 e8c90000 ifetcht 2 ,contr +0366 98467c00 isub temp ,null +0367 2442ffe9 ncall disable_user ,zero +0368 c2000365 loop p_pdata_0xff_check_loop +0369 20600000 rtn p_mouse_g24_package_data: -036e 20404401 call mouse_g24_package_data -036f 6801469f fetch 2 ,mem_mouse_z -0370 207a0000 rtn blank +036a 20404401 call mouse_g24_package_data +036b 6801469f fetch 2 ,mem_mouse_z +036c 207a0000 rtn blank p_g24_transmit_by_interrupt_enable: -0371 704d8301 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt -0372 58000000 setarg 0 -0373 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count -0374 20600000 rtn +036d 704d8301 jam g24_tx_timer_int_enable ,mem_24g_transmit_by_interrupt +036e 58000000 setarg 0 +036f 60014d84 store 2 ,mem_24g_transmit_by_interrupt_exit_count +0370 20600000 rtn p_mouse_le_txbuff_save: -0375 d8c01800 arg mem_le_tx_buffer0 ,contr -0376 d8a0480c arg mem_le_tx_buffer0_omemalloc ,contw -0377 2040037d call p_mouse_le_txbuff_copy -0378 d8c01900 arg mem_le_tx_buffer1 ,contr -0379 2040037d call p_mouse_le_txbuff_copy -037a d8c01a00 arg mem_le_tx_buffer2 ,contr -037b 2040037d call p_mouse_le_txbuff_copy -037c d8c01b00 arg mem_le_tx_buffer3 ,contr +0371 d8c01800 arg mem_le_tx_buffer0 ,contr +0372 d8a0480c arg mem_le_tx_buffer0_omemalloc ,contw +0373 20400379 call p_mouse_le_txbuff_copy +0374 d8c01900 arg mem_le_tx_buffer1 ,contr +0375 20400379 call p_mouse_le_txbuff_copy +0376 d8c01a00 arg mem_le_tx_buffer2 ,contr +0377 20400379 call p_mouse_le_txbuff_copy +0378 d8c01b00 arg mem_le_tx_buffer3 ,contr p_mouse_le_txbuff_copy: -037d df20001b arg 27 ,loopcnt -037e 20207f01 branch memcpy +0379 df20001b arg 27 ,loopcnt +037a 20207f01 branch memcpy p_mouse_le_txbuff_load: -037f d8c0480c arg mem_le_tx_buffer0_omemalloc ,contr -0380 d8a01800 arg mem_le_tx_buffer0 ,contw -0381 2040037d call p_mouse_le_txbuff_copy -0382 d8a01900 arg mem_le_tx_buffer1 ,contw -0383 2040037d call p_mouse_le_txbuff_copy -0384 d8a01a00 arg mem_le_tx_buffer2 ,contw -0385 2040037d call p_mouse_le_txbuff_copy -0386 d8a01b00 arg mem_le_tx_buffer3 ,contw -0387 2020037d branch p_mouse_le_txbuff_copy +037b d8c0480c arg mem_le_tx_buffer0_omemalloc ,contr +037c d8a01800 arg mem_le_tx_buffer0 ,contw +037d 20400379 call p_mouse_le_txbuff_copy +037e d8a01900 arg mem_le_tx_buffer1 ,contw +037f 20400379 call p_mouse_le_txbuff_copy +0380 d8a01a00 arg mem_le_tx_buffer2 ,contw +0381 20400379 call p_mouse_le_txbuff_copy +0382 d8a01b00 arg mem_le_tx_buffer3 ,contw +0383 20200379 branch p_mouse_le_txbuff_copy p_mouse_le: -0388 20405892 call le_fifo_check_nearly_full -0389 247a0000 nrtn blank -038a 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag -038b c07f838f beq 0xff ,p_mouse_le_next -038c 6800c6c5 fetch 1 ,mem_le_connect_status_flag -038d 1fe17e03 and pdata ,0x03 ,pdata -038e c1818000 rtnne 0x03 +0384 20405892 call le_fifo_check_nearly_full +0385 247a0000 nrtn blank +0386 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag +0387 c07f838b beq 0xff ,p_mouse_le_next +0388 6800c6c5 fetch 1 ,mem_le_connect_status_flag +0389 1fe17e03 and pdata ,0x03 ,pdata +038a c1818000 rtnne 0x03 p_mouse_le_next: -038f 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag -0390 205a03e7 call p_mouse_clear_sensor_data ,blank -0391 680246d3 fetch mouse_flag_len ,mem_mouse_flag -0392 c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet -0393 20403f97 call mouse_motion -0394 24740000 nrtn user -0395 2040039c call p_mouse_le_current_mult_update -0396 2040039f call p_mouse_data_xy_release -0397 204003bd call p_mouse_wheel_trigger +038b 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag +038c 205a03e3 call p_mouse_clear_sensor_data ,blank +038d 680246d3 fetch mouse_flag_len ,mem_mouse_flag +038e c282c179 bbit1 mouse_bt_discovery_button_down_flag ,mouse_le_send_empty_packet +038f 20403f97 call mouse_motion +0390 24740000 nrtn user +0391 20400398 call p_mouse_le_current_mult_update +0392 2040039b call p_mouse_data_xy_release +0393 204003b9 call p_mouse_wheel_trigger p_mouse_data_push: -0398 da20469a arg mem_mouse_key ,rega -0399 20407e3d call queue_push -039a 205403ac call p_mouse_queue_increase ,user -039b 20600000 rtn +0394 da20469a arg mem_mouse_key ,rega +0395 20407e3d call queue_push +0396 205403a8 call p_mouse_queue_increase ,user +0397 20600000 rtn p_mouse_le_current_mult_update: -039c 70417200 jam 0 ,mem_lpm_mult -039d 704b681e jam 30 ,mem_mouse_le_current_mult_timer -039e 20600000 rtn +0398 70417200 jam 0 ,mem_lpm_mult +0399 704b681e jam 30 ,mem_mouse_le_current_mult_timer +039a 20600000 rtn p_mouse_data_xy_release: -039f 6800c6f5 fetch 1 ,mem_config_function_enable -03a0 c3838000 rtnbit1 enable_sensor_motion_pin -03a1 6800cb67 fetch 1 ,mem_mouse_long_mult_flag -03a2 c1808000 rtnne 1 -03a3 58000000 setarg 0 -03a4 6000cb67 store 1 ,mem_mouse_long_mult_flag -03a5 6002469b store 4 ,mem_mouse_x -03a6 202002d2 branch p_mouse_init_sensor_reset +039b 6800c6f5 fetch 1 ,mem_config_function_enable +039c c3838000 rtnbit1 enable_sensor_motion_pin +039d 6800cb67 fetch 1 ,mem_mouse_long_mult_flag +039e c1808000 rtnne 1 +039f 58000000 setarg 0 +03a0 6000cb67 store 1 ,mem_mouse_long_mult_flag +03a1 6002469b store 4 ,mem_mouse_x +03a2 202002ce branch p_mouse_init_sensor_reset p_mouse_data_init: -03a7 7047a207 jam 7 ,mem_mouse_data_queue -03a8 7047a304 jam 4 ,mem_mouse_data_queue + 1 -03a9 580047a2 setarg mem_mouse_data_queue -03aa 60014218 store 2 ,mem_queue_ptr -03ab 20207e38 branch queue_init +03a3 7047a207 jam 7 ,mem_mouse_data_queue +03a4 7047a304 jam 4 ,mem_mouse_data_queue + 1 +03a5 580047a2 setarg mem_mouse_data_queue +03a6 60014218 store 2 ,mem_queue_ptr +03a7 20207e38 branch queue_init p_mouse_queue_increase: -03ac 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -03ad 1fe0fe01 increase 1 ,pdata -03ae 6000c7c3 store 1 ,mem_mouse_data_queue_num -03af 20600000 rtn +03a8 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +03a9 1fe0fe01 increase 1 ,pdata +03aa 6000c7c3 store 1 ,mem_mouse_data_queue_num +03ab 20600000 rtn p_mouse_data_pull: -03b0 da20469a arg mem_mouse_key ,rega -03b1 20407e54 call queue_pop -03b2 203403b4 branch p_mouse_fill_data_le ,user -03b3 20600000 rtn +03ac da20469a arg mem_mouse_key ,rega +03ad 20407e54 call queue_pop +03ae 203403b0 branch p_mouse_fill_data_le ,user +03af 20600000 rtn p_mouse_fill_data_le: -03b4 20405652 call le_clear_md -03b5 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -03b6 1fe67c01 sub pdata ,1 ,null -03b7 24415650 ncall le_set_md ,positive -03b8 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -03b9 207a0000 rtn blank -03ba 1fe0ffff increase -1 ,pdata -03bb 6000c7c3 store 1 ,mem_mouse_data_queue_num -03bc 20203f90 branch mouse_fill_data_le +03b0 20405652 call le_clear_md +03b1 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +03b2 1fe67c01 sub pdata ,1 ,null +03b3 24415650 ncall le_set_md ,positive +03b4 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +03b5 207a0000 rtn blank +03b6 1fe0ffff increase -1 ,pdata +03b7 6000c7c3 store 1 ,mem_mouse_data_queue_num +03b8 20203f90 branch mouse_fill_data_le p_mouse_wheel_trigger: -03bd 6801469f fetch 2 ,mem_mouse_z -03be 207a0000 rtn blank -03bf 70480801 jam 1 ,mem_mouse_wheel_trigger -03c0 7048090a jam 10 ,mem_mouse_wheel_trigger_timer -03c1 20600000 rtn +03b9 6801469f fetch 2 ,mem_mouse_z +03ba 207a0000 rtn blank +03bb 70480801 jam 1 ,mem_mouse_wheel_trigger +03bc 7048090a jam 10 ,mem_mouse_wheel_trigger_timer +03bd 20600000 rtn p_mouse_bt: -03c2 20770000 rtn attempt -03c3 6800c1e2 fetch 1 ,mem_app_handshake_flag -03c4 207a0000 rtn blank -03c5 20405271 call l2cap_malloc_is_fifo_nearly_full -03c6 247a0000 nrtn blank -03c7 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag -03c8 205a03e7 call p_mouse_clear_sensor_data ,blank -03c9 680246d3 fetch mouse_flag_len ,mem_mouse_flag -03ca c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data -03cb c284bf8a bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data -03cc 20403f97 call mouse_motion -03cd 24740000 nrtn user -03ce 2040039c call p_mouse_le_current_mult_update -03cf 2040039f call p_mouse_data_xy_release -03d0 204003bd call p_mouse_wheel_trigger -03d1 6800cb05 fetch 1 ,mem_mouse_bt_boot_mode -03d2 c00083d6 beq 1 ,p_mouse_send_data_boot_mode -03d3 6800cb0c fetch 1 ,mem_mouse_bt_send_first_package_flag -03d4 207a0000 rtn blank -03d5 20203f81 branch mouse_send_data +03be 20770000 rtn attempt +03bf 6800c1e2 fetch 1 ,mem_app_handshake_flag +03c0 207a0000 rtn blank +03c1 20405271 call l2cap_malloc_is_fifo_nearly_full +03c2 247a0000 nrtn blank +03c3 6800c79e fetch 1 ,mem_mouse_clear_sensor_data_flag +03c4 205a03e3 call p_mouse_clear_sensor_data ,blank +03c5 680246d3 fetch mouse_flag_len ,mem_mouse_flag +03c6 c282bf8a bbit1 mouse_bt_discovery_button_down_flag ,mouse_send_empty_data +03c7 c284bf8a bbit1 mouse_bt_discovery_button_long_down_flag ,mouse_send_empty_data +03c8 20403f97 call mouse_motion +03c9 24740000 nrtn user +03ca 20400398 call p_mouse_le_current_mult_update +03cb 2040039b call p_mouse_data_xy_release +03cc 204003b9 call p_mouse_wheel_trigger +03cd 6800cb05 fetch 1 ,mem_mouse_bt_boot_mode +03ce c00083d2 beq 1 ,p_mouse_send_data_boot_mode +03cf 6800cb0c fetch 1 ,mem_mouse_bt_send_first_package_flag +03d0 207a0000 rtn blank +03d1 20203f81 branch mouse_send_data p_mouse_send_data_boot_mode: -03d6 6800c69a fetch 1 ,mem_mouse_key -03d7 6000cb06 store 1 ,mem_mouse_bt_boot_data -03d8 6800c69b fetch 1 ,mem_mouse_x -03d9 e0a08000 istore 1 ,contw -03da 6800c69d fetch 1 ,mem_mouse_y -03db e0a08000 istore 1 ,contw -03dc 6801469f fetch 2 ,mem_mouse_z +03d2 6800c69a fetch 1 ,mem_mouse_key +03d3 6000cb06 store 1 ,mem_mouse_bt_boot_data +03d4 6800c69b fetch 1 ,mem_mouse_x +03d5 e0a08000 istore 1 ,contw +03d6 6800c69d fetch 1 ,mem_mouse_y +03d7 e0a08000 istore 1 ,contw +03d8 6801469f fetch 2 ,mem_mouse_z +03d9 e0a10000 istore 2 ,contw +03da da200007 arg 7 ,rega +03db 20404d63 call hid_malloc_tx_buff +03dc 6801424e fetch 2 ,mem_hid_int_remote_cid 03dd e0a10000 istore 2 ,contw -03de da200007 arg 7 ,rega -03df 20404d63 call hid_malloc_tx_buff -03e0 6801424e fetch 2 ,mem_hid_int_remote_cid -03e1 e0a10000 istore 2 ,contw -03e2 580002a1 setarg 0x02a1 -03e3 e0a10000 istore 2 ,contw -03e4 6802cb06 fetch 5 ,mem_mouse_bt_boot_data -03e5 e0a28000 istore 5 ,contw -03e6 20600000 rtn +03de 580002a1 setarg 0x02a1 +03df e0a10000 istore 2 ,contw +03e0 6802cb06 fetch 5 ,mem_mouse_bt_boot_data +03e1 e0a28000 istore 5 ,contw +03e2 20600000 rtn p_mouse_clear_sensor_data: -03e7 70479e01 jam 1 ,mem_mouse_clear_sensor_data_flag -03e8 20405814 call le_set_config_more_data -03e9 202002d2 branch p_mouse_init_sensor_reset +03e3 70479e01 jam 1 ,mem_mouse_clear_sensor_data_flag +03e4 20405814 call le_set_config_more_data +03e5 202002ce branch p_mouse_init_sensor_reset p_mouse_idle: -03ea 20407e34 call ui_check_paring_button -03eb 20400435 call p_mouse_dpi_check -03ec 202003ed branch p_mouse_wheel_check +03e6 20407e34 call ui_check_paring_button +03e7 20400431 call p_mouse_dpi_check +03e8 202003e9 branch p_mouse_wheel_check p_mouse_wheel_check: -03ed 204003f0 call p_mouse_t_wheel_scan -03ee 20403f36 call mouse_wheel_scan -03ef 20203ee3 branch mouse_wheel_check + 3 +03e9 204003ec call p_mouse_t_wheel_scan +03ea 20403f36 call mouse_wheel_scan +03eb 20203ee3 branch mouse_wheel_check + 3 p_mouse_t_wheel_scan: -03f0 6810807a hfetch 1 ,core_gpio_pu2 -03f1 79207e07 set1 7 ,pdata -03f2 6010807a hstore 1 ,core_gpio_pu2 -03f3 68108078 hfetch 1 ,core_gpio_pu0 -03f4 79207e06 set1 6 ,pdata -03f5 60108078 hstore 1 ,core_gpio_pu0 -03f6 da200000 arg 0 ,rega -03f7 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio -03f8 2040681d call gpio_get_bit -03f9 7920a200 setflag true ,0 ,rega -03fa 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio -03fb 2040681d call gpio_get_bit -03fc 7920a201 setflag true ,1 ,rega -03fd 1a227e00 copy rega ,pdata -03fe 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel -03ff c0008404 beq 0x01 ,p_mouse_t_wheel_scan_judge1 -0400 c0010408 beq 0x02 ,p_mouse_t_wheel_scan_judge2 -0401 6800c6b9 fetch 1 ,mem_wheel_tog -0402 c2838414 bbit1 7 ,p_mouse_t_wheel_scan_judge3 -0403 20600000 rtn +03ec 6810807a hfetch 1 ,core_gpio_pu2 +03ed 79207e07 set1 7 ,pdata +03ee 6010807a hstore 1 ,core_gpio_pu2 +03ef 68108078 hfetch 1 ,core_gpio_pu0 +03f0 79207e06 set1 6 ,pdata +03f1 60108078 hstore 1 ,core_gpio_pu0 +03f2 da200000 arg 0 ,rega +03f3 6808c6ea fetcht 1 ,mem_whee_ta_data_gpio +03f4 2040681d call gpio_get_bit +03f5 7920a200 setflag true ,0 ,rega +03f6 6808c6eb fetcht 1 ,mem_whee_tb_data_gpio +03f7 2040681d call gpio_get_bit +03f8 7920a201 setflag true ,1 ,rega +03f9 1a227e00 copy rega ,pdata +03fa 6000c6b8 store 1 ,mem_wheel_tb_new_pinlevel +03fb c0008400 beq 0x01 ,p_mouse_t_wheel_scan_judge1 +03fc c0010404 beq 0x02 ,p_mouse_t_wheel_scan_judge2 +03fd 6800c6b9 fetch 1 ,mem_wheel_tog +03fe c2838410 bbit1 7 ,p_mouse_t_wheel_scan_judge3 +03ff 20600000 rtn p_mouse_t_wheel_scan_judge1: -0404 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel -0405 c000040c beq 0 ,p_mouse_t_wheel_scan_judge11 -0406 c001840e beq 3 ,p_mouse_t_wheel_scan_judge12 -0407 20600000 rtn +0400 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +0401 c0000408 beq 0 ,p_mouse_t_wheel_scan_judge11 +0402 c001840a beq 3 ,p_mouse_t_wheel_scan_judge12 +0403 20600000 rtn p_mouse_t_wheel_scan_judge2: -0408 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel -0409 c0000410 beq 0 ,p_mouse_t_wheel_scan_judge21 -040a c0018412 beq 3 ,p_mouse_t_wheel_scan_judge22 -040b 20600000 rtn +0404 6800c6b7 fetch 1 ,mem_wheel_tb_old_pinlevel +0405 c000040c beq 0 ,p_mouse_t_wheel_scan_judge21 +0406 c001840e beq 3 ,p_mouse_t_wheel_scan_judge22 +0407 20600000 rtn p_mouse_t_wheel_scan_judge11: -040c 7046b982 jam 0x82 ,mem_wheel_tog -040d 20600000 rtn +0408 7046b982 jam 0x82 ,mem_wheel_tog +0409 20600000 rtn p_mouse_t_wheel_scan_judge12: -040e 7046b981 jam 0x81 ,mem_wheel_tog -040f 20600000 rtn +040a 7046b981 jam 0x81 ,mem_wheel_tog +040b 20600000 rtn p_mouse_t_wheel_scan_judge21: -0410 7046b980 jam 0x80 ,mem_wheel_tog -0411 20600000 rtn +040c 7046b980 jam 0x80 ,mem_wheel_tog +040d 20600000 rtn p_mouse_t_wheel_scan_judge22: -0412 7046b983 jam 0x83 ,mem_wheel_tog -0413 20600000 rtn +040e 7046b983 jam 0x83 ,mem_wheel_tog +040f 20600000 rtn p_mouse_t_wheel_scan_judge3: -0414 6800c6b9 fetch 1 ,mem_wheel_tog -0415 793ffe07 set0 7 ,pdata -0416 6000c6b9 store 1 ,mem_wheel_tog -0417 c000041c beq 0 ,p_mouse_t_wheel_scan_judge30 -0418 c000841f beq 1 ,p_mouse_t_wheel_scan_judge31 -0419 c0010422 beq 2 ,p_mouse_t_wheel_scan_judge32 -041a c0018425 beq 3 ,p_mouse_t_wheel_scan_judge33 -041b 20600000 rtn +0410 6800c6b9 fetch 1 ,mem_wheel_tog +0411 793ffe07 set0 7 ,pdata +0412 6000c6b9 store 1 ,mem_wheel_tog +0413 c0000418 beq 0 ,p_mouse_t_wheel_scan_judge30 +0414 c000841b beq 1 ,p_mouse_t_wheel_scan_judge31 +0415 c001041e beq 2 ,p_mouse_t_wheel_scan_judge32 +0416 c0018421 beq 3 ,p_mouse_t_wheel_scan_judge33 +0417 20600000 rtn p_mouse_t_wheel_scan_judge30: -041c 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -041d c0018428 beq 3 ,p_mouse_wheel_t_forward -041e 20600000 rtn +0418 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +0419 c0018424 beq 3 ,p_mouse_wheel_t_forward +041a 20600000 rtn p_mouse_t_wheel_scan_judge31: -041f 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -0420 c0000428 beq 0 ,p_mouse_wheel_t_forward -0421 20600000 rtn +041b 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +041c c0000424 beq 0 ,p_mouse_wheel_t_forward +041d 20600000 rtn p_mouse_t_wheel_scan_judge32: -0422 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -0423 c001842d beq 3 ,p_mouse_wheel_t_back -0424 20600000 rtn +041e 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +041f c0018429 beq 3 ,p_mouse_wheel_t_back +0420 20600000 rtn p_mouse_t_wheel_scan_judge33: -0425 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel -0426 c000042d beq 0 ,p_mouse_wheel_t_back -0427 20600000 rtn +0421 6800c6b8 fetch 1 ,mem_wheel_tb_new_pinlevel +0422 c0000429 beq 0 ,p_mouse_wheel_t_back +0423 20600000 rtn p_mouse_wheel_t_forward: -0428 7046bc00 jam 0 ,mem_mouse_tz_data_count1 -0429 6800c6ba fetch 1 ,mem_mouse_tz_data -042a 1fe0fe01 increase 1 ,pdata -042b 6000c6ba store 1 ,mem_mouse_tz_data -042c 20600000 rtn +0424 7046bc00 jam 0 ,mem_mouse_tz_data_count1 +0425 6800c6ba fetch 1 ,mem_mouse_tz_data +0426 1fe0fe01 increase 1 ,pdata +0427 6000c6ba store 1 ,mem_mouse_tz_data +0428 20600000 rtn p_mouse_wheel_t_back: -042d 7046bb00 jam 0 ,mem_mouse_tz_data_count -042e 6800c6ba fetch 1 ,mem_mouse_tz_data -042f 1fe0ffff increase -1 ,pdata -0430 6000c6ba store 1 ,mem_mouse_tz_data -0431 20600000 rtn +0429 7046bb00 jam 0 ,mem_mouse_tz_data_count +042a 6800c6ba fetch 1 ,mem_mouse_tz_data +042b 1fe0ffff increase -1 ,pdata +042c 6000c6ba store 1 ,mem_mouse_tz_data +042d 20600000 rtn p_mouse_comm_gpio_config: -0432 6808cbb8 fetcht 1 ,mem_mouse_comm_gpio -0433 c17f8000 rtneq 0xff -0434 202005d5 branch p_gpio_set_input_pu +042e 6808cbb8 fetcht 1 ,mem_mouse_comm_gpio +042f c17f8000 rtneq 0xff +0430 202005d2 branch p_gpio_set_input_pu p_mouse_dpi_check: -0435 20400432 call p_mouse_comm_gpio_config -0436 6808c6e7 fetcht 1 ,mem_dpi_button_gpio -0437 204005da call p_gpio_set_input_pd -0438 6808c6e7 fetcht 1 ,mem_dpi_button_gpio -0439 2040681d call gpio_get_bit -043a 2020844a branch p_mouse_dpi_up ,true -043b 204005d5 call p_gpio_set_input_pu +0431 2040042e call p_mouse_comm_gpio_config +0432 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +0433 204005d7 call p_gpio_set_input_pd +0434 6808c6e7 fetcht 1 ,mem_dpi_button_gpio +0435 2040681d call gpio_get_bit +0436 20208446 branch p_mouse_dpi_up ,true +0437 204005d2 call p_gpio_set_input_pu p_mouse_dpi_down: -043c 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state -043d c1000000 rtneq dpi_button_state_down -043e 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state -043f 6800c77a fetch 1 ,mem_mouse_dpi -0440 1fe0fe01 increase 1 ,pdata -0441 1fe17e03 and pdata ,0x03 ,pdata -0442 6000c77a store 1 ,mem_mouse_dpi -0443 6808c6e0 fetcht 1 ,mem_config_sensor_type -0444 18467c04 sub temp ,p3212 ,null -0445 2042844c call p_mouse_p3212_dpi_led_set ,zero -0446 1fe0fe01 increase 1 ,pdata -0447 6000cb2e store 1 ,mem_mouse_multi_led_blink_count -0448 20400764 call p_mouse_dpi_multi_led_blink -0449 20203d7e branch mouse_seting_dpi +0438 6800c6b6 fetch 1 ,mem_mouse_dpi_button_state +0439 c1000000 rtneq dpi_button_state_down +043a 7046b600 jam dpi_button_state_down ,mem_mouse_dpi_button_state +043b 6800c77a fetch 1 ,mem_mouse_dpi +043c 1fe0fe01 increase 1 ,pdata +043d 1fe17e03 and pdata ,0x03 ,pdata +043e 6000c77a store 1 ,mem_mouse_dpi +043f 6808c6e0 fetcht 1 ,mem_config_sensor_type +0440 18467c04 sub temp ,p3212 ,null +0441 20428448 call p_mouse_p3212_dpi_led_set ,zero +0442 1fe0fe02 increase 2 ,pdata +0443 6000cb2e store 1 ,mem_mouse_multi_led_blink_count +0444 20400778 call p_mouse_dpi_multi_led_blink +0445 20203d7e branch mouse_seting_dpi p_mouse_dpi_up: -044a 204005d5 call p_gpio_set_input_pu -044b 20203d62 branch mouse_dpi_up +0446 204005d2 call p_gpio_set_input_pu +0447 20203d62 branch mouse_dpi_up p_mouse_p3212_dpi_led_set: -044c 1feffe02 mul32 pdata ,2 ,pdata -044d 20600000 rtn +0448 1feffe02 mul32 pdata ,2 ,pdata +0449 1fe0ffff increase -1 ,pdata +044a 20600000 rtn p_mouse_priority_bb_event: -044e 1a627e00 copy regc ,pdata -044f c00a045f beq bt_evt_le_connected ,p_mouse_le_bb_event_connected -0450 c00a8461 beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected -0451 c0148464 beq bt_evt_le_enc_info ,p_mouse_le_enc_info -0452 c0190466 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt -0453 c0200468 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved -0454 c002046a beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed -0455 c009846a beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout -0456 c00cb3df beq bt_evt_switch_not_accept ,app_bt_role_switch -0457 c010846e beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept -0458 c0008470 beq bt_evt_bb_connected ,p_mouse_bb_event_connected -0459 c0010474 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected -045a c0158477 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check -045b c01c8479 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete -045c c01d047e beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail -045d c01e0484 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success -045e 2020417d branch mouse_priority_bb_event + 1 +044b 1a627e00 copy regc ,pdata +044c c00a045c beq bt_evt_le_connected ,p_mouse_le_bb_event_connected +044d c00a845e beq bt_evt_le_disconnected ,p_mouse_le_bb_disconnected +044e c0148461 beq bt_evt_le_enc_info ,p_mouse_le_enc_info +044f c0190463 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt +0450 c0200465 beq bt_evt_le_parse_conn_papa_update_rsp ,p_mouse_le_conn_param_update_rsp_recieved +0451 c0020467 beq bt_evt_reconn_failed ,p_mouse_bb_event_reconn_failed +0452 c0098467 beq bt_evt_reconn_page_timeout ,p_mouse_bb_event_reconn_timeout +0453 c00cb3df beq bt_evt_switch_not_accept ,app_bt_role_switch +0454 c010846b beq bt_evt_sniff_not_accept ,p_mouse_sniff_not_accept +0455 c000846d beq bt_evt_bb_connected ,p_mouse_bb_event_connected +0456 c0010471 beq bt_evt_bb_disconnected ,p_mouse_bb_event_disconnected +0457 c0158474 beq bt_evt_switch_success_master ,p_mouse_enter_sniff_check +0458 c01c8476 beq bt_evt_24g_pairing_complete ,p_mouse_24g_pairing_complete +0459 c01d047b beq bt_evt_24g_attempt_fail ,p_mouse_24g_attempt_fail +045a c01e0481 beq bt_evt_24g_attempt_success ,p_mouse_24g_attempt_success +045b 2020417d branch mouse_priority_bb_event + 1 p_mouse_le_bb_event_connected: -045f 7011c5d0 jam zcode_d0 ,mem_zcode_temp_param0 -0460 202007c6 branch p_zcode_entrance +045c 7011c5d0 jam zcode_d0 ,mem_zcode_temp_param0 +045d 202007da branch p_zcode_entrance p_mouse_le_bb_disconnected: -0461 2040048c call p_mouse_sensor_powerdown_check -0462 7011c5a2 jam zcode_a2 ,mem_zcode_temp_param0 -0463 202007c6 branch p_zcode_entrance +045e 20400489 call p_mouse_sensor_powerdown_check +045f 7011c5a2 jam zcode_a2 ,mem_zcode_temp_param0 +0460 202007da branch p_zcode_entrance p_mouse_le_enc_info: p_app_updata_le_param: -0464 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp -0465 20207d8f branch ui_ipc_send_cmd +0461 700a9912 jam bt_cmd_le_update_conn ,mem_fifo_temp +0462 20207d8f branch ui_ipc_send_cmd p_mouse_le_ll_start_encryt: -0466 7011c5b3 jam zcode_b3 ,mem_zcode_temp_param0 -0467 202007c6 branch p_zcode_entrance +0463 7011c5b3 jam zcode_b3 ,mem_zcode_temp_param0 +0464 202007da branch p_zcode_entrance p_mouse_le_conn_param_update_rsp_recieved: -0468 7011c5a1 jam zcode_a1 ,mem_zcode_temp_param0 -0469 202007c6 branch p_zcode_entrance +0465 7011c5a1 jam zcode_a1 ,mem_zcode_temp_param0 +0466 202007da branch p_zcode_entrance p_mouse_bb_event_reconn_timeout: p_mouse_bb_event_reconn_failed: -046a 7011c5a3 jam zcode_a3 ,mem_zcode_temp_param0 -046b 202007c6 branch p_zcode_entrance +0467 7011c5a3 jam zcode_a3 ,mem_zcode_temp_param0 +0468 202007da branch p_zcode_entrance p_mouse_irtual_cable_unplug: -046c 7011c571 jam zcode_71 ,mem_zcode_temp_param0 -046d 202007c6 branch p_zcode_entrance +0469 7011c571 jam zcode_71 ,mem_zcode_temp_param0 +046a 202007da branch p_zcode_entrance p_mouse_sniff_not_accept: -046e 7011c5b1 jam zcode_b1 ,mem_zcode_temp_param0 -046f 202007c6 branch p_zcode_entrance +046b 7011c5b1 jam zcode_b1 ,mem_zcode_temp_param0 +046c 202007da branch p_zcode_entrance p_mouse_bb_event_connected: -0470 704bb900 jam 0 ,mem_mouse_connected_state -0471 70480b00 jam 0 ,mem_mouse_send_switch_req_timer -0472 204002d2 call p_mouse_init_sensor_reset -0473 202042ca branch mouse_stop_discovery +046d 704bb900 jam 0 ,mem_mouse_connected_state +046e 70480b00 jam 0 ,mem_mouse_send_switch_req_timer +046f 204002ce call p_mouse_init_sensor_reset +0470 202042ca branch mouse_stop_discovery p_mouse_bb_event_disconnected: -0474 2040048c call p_mouse_sensor_powerdown_check -0475 7011c5b4 jam zcode_b4 ,mem_zcode_temp_param0 -0476 202007c6 branch p_zcode_entrance +0471 20400489 call p_mouse_sensor_powerdown_check +0472 7011c5b4 jam zcode_b4 ,mem_zcode_temp_param0 +0473 202007da branch p_zcode_entrance p_mouse_enter_sniff_check: -0477 7011c5b2 jam zcode_b2 ,mem_zcode_temp_param0 -0478 202007c6 branch p_zcode_entrance +0474 7011c5b2 jam zcode_b2 ,mem_zcode_temp_param0 +0475 202007da branch p_zcode_entrance p_mouse_24g_pairing_complete: -0479 20400752 call p_mouse_discovey_led_blink_off -047a 704bb900 jam 0 ,mem_mouse_connected_state -047b 204002d2 call p_mouse_init_sensor_reset -047c 7011c592 jam zcode_92 ,mem_zcode_temp_param0 -047d 202007c6 branch p_zcode_entrance +0476 20400766 call p_mouse_discovey_led_blink_off +0477 704bb900 jam 0 ,mem_mouse_connected_state +0478 204002ce call p_mouse_init_sensor_reset +0479 7011c592 jam zcode_92 ,mem_zcode_temp_param0 +047a 202007da branch p_zcode_entrance p_mouse_24g_attempt_fail: -047e 704bb901 jam 1 ,mem_mouse_connected_state -047f 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count -0480 20400764 call p_mouse_dpi_multi_led_blink -0481 2040048c call p_mouse_sensor_powerdown_check -0482 7011c5a0 jam zcode_a0 ,mem_zcode_temp_param0 -0483 202007c6 branch p_zcode_entrance +047b 704bb901 jam 1 ,mem_mouse_connected_state +047c 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count +047d 20400778 call p_mouse_dpi_multi_led_blink +047e 20400489 call p_mouse_sensor_powerdown_check +047f 7011c5a0 jam zcode_a0 ,mem_zcode_temp_param0 +0480 202007da branch p_zcode_entrance p_mouse_24g_attempt_success: -0484 20400756 call p_mouse_multi_led_blink_off -0485 20400767 call p_mouse_mode_24g_device_multi_led_on -0486 704bb900 jam 0 ,mem_mouse_connected_state -0487 204002d2 call p_mouse_init_sensor_reset +0481 2040076a call p_mouse_multi_led_blink_off +0482 2040077b call p_mouse_mode_24g_device_multi_led_on +0483 704bb900 jam 0 ,mem_mouse_connected_state +0484 204002ce call p_mouse_init_sensor_reset p_mouse_24g_no_data_timer_init: -0488 20203f8d branch mouse_no_data_timer_init +0485 20203f8d branch mouse_no_data_timer_init p_mouse_before_hibernate: -0489 2040048c call p_mouse_sensor_powerdown_check -048a 7011c5a4 jam zcode_a4 ,mem_zcode_temp_param0 -048b 202007c6 branch p_zcode_entrance +0486 20400489 call p_mouse_sensor_powerdown_check +0487 7011c5a4 jam zcode_a4 ,mem_zcode_temp_param0 +0488 202007da branch p_zcode_entrance p_mouse_sensor_powerdown_check: -048c 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag -048d 207a0000 rtn blank -048e 704b0000 jam 0 ,mem_mouse_init_sensor_reset_flag +0489 6800cb00 fetch 1 ,mem_mouse_init_sensor_reset_flag +048a 207a0000 rtn blank +048b 704b0000 jam 0 ,mem_mouse_init_sensor_reset_flag p_mouse_sensor_powerdown: -048f 204002ca call p_mouse_init_sunt -0490 58000806 setarg 0x0806 -0491 20206413 branch twspi_write +048c 204002c6 call p_mouse_init_sunt +048d 58000806 setarg 0x0806 +048e 20206413 branch twspi_write p_mouse_bb_event_timer: -0492 2040050f call p_mouse_adc_read -0493 20400547 call p_mouse_low_voltage_led_timer -0494 204004c1 call p_mouse_wheel_trigger_timer -0495 204004e5 call p_mouse_select_device_by_button -0496 20404234 call mouse_check_discovery_timeout_timer -0497 2040423a call mouse_check_no_data_timeout_timer -0498 204004c6 call p_mouse_g24_long_sleep_param_update_timer -0499 204004cd call p_mouse_g24_stop_mode_timeout_timer -049a 204004ad call p_mouse_check_direct_timeout_timer -049b 204004aa call p_mouse_le_enable_att_list_timer -049c 204004b3 call p_mouse_le_current_mult_update_timer -049d 204004b9 call p_le_send_smp_security_request_timer -049e 204004a2 call p_mouse_send_switch_req_timer -049f 20404231 call mouse_check_hid_handshake_timer -04a0 204004a5 call p_mouse_bt_check_sniff_req_timeout_timer -04a1 2020072a branch p_mouse_multi_led_blink_timer +048f 2040050c call p_mouse_adc_read +0490 20400544 call p_mouse_low_voltage_led_timer +0491 204004be call p_mouse_wheel_trigger_timer +0492 204004e2 call p_mouse_select_device_by_button +0493 20404234 call mouse_check_discovery_timeout_timer +0494 2040423a call mouse_check_no_data_timeout_timer +0495 204004c3 call p_mouse_g24_long_sleep_param_update_timer +0496 204004ca call p_mouse_g24_stop_mode_timeout_timer +0497 204004aa call p_mouse_check_direct_timeout_timer +0498 204004a7 call p_mouse_le_enable_att_list_timer +0499 204004b0 call p_mouse_le_current_mult_update_timer +049a 204004b6 call p_le_send_smp_security_request_timer +049b 2040049f call p_mouse_send_switch_req_timer +049c 20404231 call mouse_check_hid_handshake_timer +049d 204004a2 call p_mouse_bt_check_sniff_req_timeout_timer +049e 2020073e branch p_mouse_multi_led_blink_timer p_mouse_send_switch_req_timer: -04a2 da60480b arg mem_mouse_send_switch_req_timer ,regc -04a3 da40637a arg host_create_conn_resend ,regb -04a4 2020336d branch timer_single_step +049f da60480b arg mem_mouse_send_switch_req_timer ,regc +04a0 da40637a arg host_create_conn_resend ,regb +04a1 2020336d branch timer_single_step p_mouse_bt_check_sniff_req_timeout_timer: -04a5 da604b0b arg mem_mouse_bt_send_first_package_timer ,regc -04a6 da4004a8 arg p_mouse_bt_send_first_package ,regb -04a7 2020336d branch timer_single_step +04a2 da604b0b arg mem_mouse_bt_send_first_package_timer ,regc +04a3 da4004a5 arg p_mouse_bt_send_first_package ,regb +04a4 2020336d branch timer_single_step p_mouse_bt_send_first_package: -04a8 704b0c01 jam 1 ,mem_mouse_bt_send_first_package_flag -04a9 20600000 rtn +04a5 704b0c01 jam 1 ,mem_mouse_bt_send_first_package_flag +04a6 20600000 rtn p_mouse_le_enable_att_list_timer: -04aa da6046c6 arg mem_le_start_encrypt_timer ,regc -04ab da403d60 arg mouse_le_write_enable ,regb -04ac 2020336d branch timer_single_step +04a7 da6046c6 arg mem_le_start_encrypt_timer ,regc +04a8 da403d60 arg mouse_le_write_enable ,regb +04a9 2020336d branch timer_single_step p_mouse_check_direct_timeout_timer: -04ad da6046ae arg mem_mouse_direct_timer ,regc -04ae da4004b0 arg p_mouse_check_direct_timeout ,regb -04af 20203374 branch timer_single_step_2b +04aa da6046ae arg mem_mouse_direct_timer ,regc +04ab da4004ad arg p_mouse_check_direct_timeout ,regb +04ac 20203374 branch timer_single_step_2b p_mouse_check_direct_timeout: -04b0 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -04b1 247a0000 nrtn blank -04b2 20204266 branch mouse_check_direct_timeout +04ad 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +04ae 247a0000 nrtn blank +04af 20204266 branch mouse_check_direct_timeout p_mouse_le_current_mult_update_timer: -04b3 da604b68 arg mem_mouse_le_current_mult_timer ,regc -04b4 da4004b6 arg p_mouse_le_current_mult_reinit ,regb -04b5 2020336d branch timer_single_step +04b0 da604b68 arg mem_mouse_le_current_mult_timer ,regc +04b1 da4004b3 arg p_mouse_le_current_mult_reinit ,regb +04b2 2020336d branch timer_single_step p_mouse_le_current_mult_reinit: -04b6 6800c7c7 fetch 1 ,mem_lpm_mult_init -04b7 6000c172 store 1 ,mem_lpm_mult -04b8 202004cb branch p_mouse_long_mult_flag_enable +04b3 6800c7c7 fetch 1 ,mem_lpm_mult_init +04b4 6000c172 store 1 ,mem_lpm_mult +04b5 202004c8 branch p_mouse_long_mult_flag_enable p_le_send_smp_security_request_timer: -04b9 6800cb6a fetch 1 ,mem_mouse_le_bb_connected_flag -04ba 207a0000 rtn blank -04bb da604b6b arg mem_mouse_send_secutiry_request_timer ,regc -04bc da4004be arg p_le_pairing_sm_start_check ,regb -04bd 2020336d branch timer_single_step +04b6 6800cb6a fetch 1 ,mem_mouse_le_bb_connected_flag +04b7 207a0000 rtn blank +04b8 da604b6b arg mem_mouse_send_secutiry_request_timer ,regc +04b9 da4004bb arg p_le_pairing_sm_start_check ,regb +04ba 2020336d branch timer_single_step p_le_pairing_sm_start_check: -04be 6800cb6c fetch 1 ,mem_le_send_security_request_flag -04bf 247a0000 nrtn blank -04c0 20205bf5 branch le_pairing_sm_start +04bb 6800cb6c fetch 1 ,mem_le_send_security_request_flag +04bc 247a0000 nrtn blank +04bd 20205bf5 branch le_pairing_sm_start p_mouse_wheel_trigger_timer: -04c1 da604809 arg mem_mouse_wheel_trigger_timer ,regc -04c2 da4004c4 arg p_mouse_wheel_trigger_disable ,regb -04c3 2020336d branch timer_single_step +04be da604809 arg mem_mouse_wheel_trigger_timer ,regc +04bf da4004c1 arg p_mouse_wheel_trigger_disable ,regb +04c0 2020336d branch timer_single_step p_mouse_wheel_trigger_disable: -04c4 70480800 jam 0 ,mem_mouse_wheel_trigger -04c5 20600000 rtn +04c1 70480800 jam 0 ,mem_mouse_wheel_trigger +04c2 20600000 rtn p_mouse_g24_long_sleep_param_update_timer: -04c6 da604b69 arg mem_24g_long_sleep_param_update_timer ,regc -04c7 da4004c9 arg p_mouse_g24_long_sleep_normal_param ,regb -04c8 2020336d branch timer_single_step +04c3 da604b69 arg mem_24g_long_sleep_param_update_timer ,regc +04c4 da4004c6 arg p_mouse_g24_long_sleep_normal_param ,regb +04c5 2020336d branch timer_single_step p_mouse_g24_long_sleep_normal_param: -04c9 58124f80 setarg g24_long_sleep_step3 -04ca 6001cc72 store 3 ,mem_24g_enter_hibernate +04c6 58124f80 setarg g24_long_sleep_step3 +04c7 6001cc72 store 3 ,mem_24g_enter_hibernate p_mouse_long_mult_flag_enable: -04cb 704b6701 jam 1 ,mem_mouse_long_mult_flag -04cc 20600000 rtn +04c8 704b6701 jam 1 ,mem_mouse_long_mult_flag +04c9 20600000 rtn p_mouse_g24_stop_mode_timeout_timer: -04cd da604d8f arg mem_24g_stop_g24_mode_timeout ,regc -04ce da4004d0 arg p_mouse_g24_stop_mode_timeout ,regb -04cf 20203374 branch timer_single_step_2b +04ca da604d8f arg mem_24g_stop_g24_mode_timeout ,regc +04cb da4004cd arg p_mouse_g24_stop_mode_timeout ,regb +04cc 20203374 branch timer_single_step_2b p_mouse_g24_stop_mode_timeout: -04d0 704d8e01 jam 1 ,mem_24g_stop_g24_mode -04d1 20600000 rtn +04cd 704d8e01 jam 1 ,mem_24g_stop_g24_mode +04ce 20600000 rtn p_mouse_bt_discovery_timer: -04d2 da604b47 arg mem_select_ui_button_count ,regc -04d3 da4004d5 arg p_mouse_long_button_bt_discovery ,regb -04d4 2020336d branch timer_single_step +04cf da604b47 arg mem_select_ui_button_count ,regc +04d0 da4004d2 arg p_mouse_long_button_bt_discovery ,regb +04d1 2020336d branch timer_single_step p_mouse_long_button_bt_discovery: -04d5 704bba01 jam on ,mem_select_device_button_statue_bt_discovery -04d6 6808c720 fetcht 1 ,mem_device_flag -04d7 6800c703 fetch 1 ,mem_24g_device_number -04d8 98467c00 isub temp ,null -04d9 20628000 rtn zero +04d2 704bba01 jam on ,mem_select_device_button_statue_bt_discovery +04d3 6808c720 fetcht 1 ,mem_device_flag +04d4 6800c703 fetch 1 ,mem_24g_device_number +04d5 98467c00 isub temp ,null +04d6 20628000 rtn zero +04d7 68014682 fetch 2 ,mem_ui_state_map +04d8 2feffe0b isolate1 ui_state_ble_adv ,pdata +04d9 2040c2d4 call mouse_stop_le_adv ,true 04da 68014682 fetch 2 ,mem_ui_state_map -04db 2feffe0b isolate1 ui_state_ble_adv ,pdata -04dc 2040c2d4 call mouse_stop_le_adv ,true -04dd 68014682 fetch 2 ,mem_ui_state_map -04de 2feffe07 isolate1 ui_state_bt_reconnect ,pdata -04df 2040c392 call mouse_cancel_reconnect ,true -04e0 202043b8 branch mouse_long_button_bt_discovry +04db 2feffe07 isolate1 ui_state_bt_reconnect ,pdata +04dc 2040c392 call mouse_cancel_reconnect ,true +04dd 202043b8 branch mouse_long_button_bt_discovry p_mouse_get_select_state: -04e1 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio -04e2 204005d5 call p_gpio_set_input_pu -04e3 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio -04e4 2020681d branch gpio_get_bit +04de 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +04df 204005d2 call p_gpio_set_input_pu +04e0 6808c6ed fetcht 1 ,mem_config_select_device_button_gpio +04e1 2020681d branch gpio_get_bit p_mouse_select_device_by_button: -04e5 204004e1 call p_mouse_get_select_state -04e6 242084f0 nbranch p_mouse_select_device_button_up ,true +04e2 204004de call p_mouse_get_select_state +04e3 242084ed nbranch p_mouse_select_device_button_up ,true p_mouse_select_device_button_down: -04e7 204004d2 call p_mouse_bt_discovery_timer -04e8 6800c6d9 fetch 1 ,mem_select_device_button_statue -04e9 c1000000 rtneq pb_button_state_down -04ea 7046d900 jam pb_button_state_down ,mem_select_device_button_statue -04eb 680146a8 fetch 2 ,mem_mouse_direct_timeout -04ec 600146ae store 2 ,mem_mouse_direct_timer -04ed 18000e03 force page_length_timer ,queue -04ee 680140b9 fetch 2 ,mem_page_to -04ef 20207f08 branch timer_init +04e4 204004cf call p_mouse_bt_discovery_timer +04e5 6800c6d9 fetch 1 ,mem_select_device_button_statue +04e6 c1000000 rtneq pb_button_state_down +04e7 7046d900 jam pb_button_state_down ,mem_select_device_button_statue +04e8 680146a8 fetch 2 ,mem_mouse_direct_timeout +04e9 600146ae store 2 ,mem_mouse_direct_timer +04ea 18000e03 force page_length_timer ,queue +04eb 680140b9 fetch 2 ,mem_page_to +04ec 20207f08 branch timer_init p_mouse_select_device_button_up: -04f0 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag -04f1 243a0508 nbranch p_mouse_select_button_wakeup_firstup ,blank -04f2 6800c6d9 fetch 1 ,mem_select_device_button_statue -04f3 c1008000 rtneq pb_button_state_up -04f4 6800cb47 fetch 1 ,mem_select_ui_button_count -04f5 1fe67c14 sub pdata ,20 ,null -04f6 244104fb ncall p_mouse_ready_reconnection_by_button ,positive -04f7 6800c685 fetch 1 ,mem_ui_button_timeout -04f8 6000cb47 store 1 ,mem_select_ui_button_count -04f9 7046d901 jam pb_button_state_up ,mem_select_device_button_statue -04fa 20600000 rtn +04ed 6800cb6d fetch 1 ,mem_mouse_select_device_button_wakeup_flag +04ee 243a0505 nbranch p_mouse_select_button_wakeup_firstup ,blank +04ef 6800c6d9 fetch 1 ,mem_select_device_button_statue +04f0 c1008000 rtneq pb_button_state_up +04f1 6800cb47 fetch 1 ,mem_select_ui_button_count +04f2 1fe67c14 sub pdata ,20 ,null +04f3 244104f8 ncall p_mouse_ready_reconnection_by_button ,positive +04f4 6800c685 fetch 1 ,mem_ui_button_timeout +04f5 6000cb47 store 1 ,mem_select_ui_button_count +04f6 7046d901 jam pb_button_state_up ,mem_select_device_button_statue +04f7 20600000 rtn p_mouse_ready_reconnection_by_button: -04fb 20400501 call p_mouse_switch_device_flag -04fc 7041bd00 jam 0 ,mem_link_key_exists -04fd 20400300 call p_mouse_store_flash_device_info -04fe 680246d3 fetch mouse_flag_len ,mem_mouse_flag -04ff c1048000 rtneq mouse_bt_discovery_button_long_down_flag -0500 2020437e branch mouse_set_reconnection +04f8 204004fe call p_mouse_switch_device_flag +04f9 7041bd00 jam 0 ,mem_link_key_exists +04fa 204002fc call p_mouse_store_flash_device_info +04fb 680246d3 fetch mouse_flag_len ,mem_mouse_flag +04fc c1048000 rtneq mouse_bt_discovery_button_long_down_flag +04fd 2020437e branch mouse_set_reconnection p_mouse_switch_device_flag: -0501 6808c720 fetcht 1 ,mem_device_flag -0502 18408401 increase 1 ,temp -0503 6800c6d2 fetch 1 ,mem_device_number -0504 98467c00 isub temp ,null -0505 244143cc ncall mouse_select_device_count_clean ,positive -0506 6008c720 storet 1 ,mem_device_flag -0507 20600000 rtn +04fe 6808c720 fetcht 1 ,mem_device_flag +04ff 18408401 increase 1 ,temp +0500 6800c6d2 fetch 1 ,mem_device_number +0501 98467c00 isub temp ,null +0502 244143cc ncall mouse_select_device_count_clean ,positive +0503 6008c720 storet 1 ,mem_device_flag +0504 20600000 rtn p_mouse_select_button_wakeup_firstup: -0508 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag -0509 7046d901 jam pb_button_state_up ,mem_select_device_button_statue -050a 704b2701 jam on ,mem_mouse_multi_led_blink_enable -050b 20600000 rtn +0505 704b6d00 jam 0 ,mem_mouse_select_device_button_wakeup_flag +0506 7046d901 jam pb_button_state_up ,mem_select_device_button_statue +0507 704b2701 jam on ,mem_mouse_multi_led_blink_enable +0508 20600000 rtn p_mouse_le_bb_disconnected_led_blink_set: -050c 704bb901 jam 1 ,mem_mouse_connected_state -050d 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count -050e 20200764 branch p_mouse_dpi_multi_led_blink +0509 704bb901 jam 1 ,mem_mouse_connected_state +050a 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count +050b 20200778 branch p_mouse_dpi_multi_led_blink p_mouse_adc_read: -050f 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count -0510 247a0000 nrtn blank -0511 6800c808 fetch 1 ,mem_mouse_wheel_trigger -0512 247a0000 nrtn blank -0513 6800c6ce fetch 1 ,mem_adc_read_timer -0514 1fe0fe01 increase 1 ,pdata -0515 6000c6ce store 1 ,mem_adc_read_timer -0516 1fe67c0a sub pdata ,10 ,null -0517 20610000 rtn positive +050c 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count +050d 247a0000 nrtn blank +050e 6800c808 fetch 1 ,mem_mouse_wheel_trigger +050f 247a0000 nrtn blank +0510 6800c6ce fetch 1 ,mem_adc_read_timer +0511 1fe0fe01 increase 1 ,pdata +0512 6000c6ce store 1 ,mem_adc_read_timer +0513 1fe67c0a sub pdata ,10 ,null +0514 20610000 rtn positive p_mouse_adc_read_timeout: -0518 204068a8 call adc_init_data -0519 7046ce00 jam 0 ,mem_adc_read_timer -051a 20400532 call p_adc_set_mode -051b 20406908 call vdd_calculate_by_mode -051c 1feffe03 mul32 pdata ,3 ,pdata -051d d840000f arg 0x0f ,temp -051e 98467e00 isub temp ,pdata -051f 1fe67c64 sub pdata ,0x64 ,null -0520 2041052f call p_mouse_vdd_decrease ,positive -0521 6001470f store 2 ,mem_mouse_vdd_now_vol -0522 da204709 arg mem_mouse_vdd_calculate_set ,rega -0523 20200524 branch p_mouse_adc_read_next +0515 204068a8 call adc_init_data +0516 7046ce00 jam 0 ,mem_adc_read_timer +0517 2040052f call p_adc_set_mode +0518 20406908 call vdd_calculate_by_mode +0519 1feffe03 mul32 pdata ,3 ,pdata +051a d840000f arg 0x0f ,temp +051b 98467e00 isub temp ,pdata +051c 1fe67c64 sub pdata ,0x64 ,null +051d 2041052c call p_mouse_vdd_decrease ,positive +051e 6001470f store 2 ,mem_mouse_vdd_now_vol +051f da204709 arg mem_mouse_vdd_calculate_set ,rega +0520 20200521 branch p_mouse_adc_read_next p_mouse_adc_read_next: -0524 2040053a call p_adc_bat_percent_lowpower_out -0525 6800c231 fetch 1 ,mem_adc_power_flag -0526 c280b40a bbit1 1 ,app_enter_hibernate -0527 c300052a bbit0 0 ,p_mouse_adc_no_low_voltage -0528 704aff01 jam 1 ,mem_mouse_adc_last_low_voltage_flag -0529 202043e7 branch mouse_adc_low_voltage +0521 20400537 call p_adc_bat_percent_lowpower_out +0522 6800c231 fetch 1 ,mem_adc_power_flag +0523 c280b40a bbit1 1 ,app_enter_hibernate +0524 c3000527 bbit0 0 ,p_mouse_adc_no_low_voltage +0525 704aff01 jam 1 ,mem_mouse_adc_last_low_voltage_flag +0526 202043e7 branch mouse_adc_low_voltage p_mouse_adc_no_low_voltage: -052a 204043e9 call mouse_adc_no_low_voltage -052b 6800caff fetch 1 ,mem_mouse_adc_last_low_voltage_flag -052c 207a0000 rtn blank -052d 704aff00 jam 0 ,mem_mouse_adc_last_low_voltage_flag -052e 20200758 branch p_mouse_multi_led_off +0527 204043e9 call mouse_adc_no_low_voltage +0528 6800caff fetch 1 ,mem_mouse_adc_last_low_voltage_flag +0529 207a0000 rtn blank +052a 704aff00 jam 0 ,mem_mouse_adc_last_low_voltage_flag +052b 2020076c branch p_mouse_multi_led_off p_mouse_vdd_decrease: -052f d8400005 arg 0x05 ,temp -0530 98467e00 isub temp ,pdata -0531 20600000 rtn +052c d8400005 arg 0x05 ,temp +052d 98467e00 isub temp ,pdata +052e 20600000 rtn p_adc_set_mode: p_adc_check_gpio: -0532 68108078 hfetch 1 ,core_gpio_pu0 -0533 793ffe05 set0 5 ,pdata -0534 60108078 hstore 1 ,core_gpio_pu0 -0535 204068f4 call adc_check_gpio -0536 68108078 hfetch 1 ,core_gpio_pu0 -0537 79207e05 set1 5 ,pdata -0538 60108078 hstore 1 ,core_gpio_pu0 -0539 20600000 rtn +052f 68108078 hfetch 1 ,core_gpio_pu0 +0530 793ffe05 set0 5 ,pdata +0531 60108078 hstore 1 ,core_gpio_pu0 +0532 204068f4 call adc_check_gpio +0533 68108078 hfetch 1 ,core_gpio_pu0 +0534 79207e05 set1 5 ,pdata +0535 60108078 hstore 1 ,core_gpio_pu0 +0536 20600000 rtn p_adc_bat_percent_lowpower_out: -053a ea240000 ifetch 8 ,rega -053b 60040a9a store 8 ,mem_pdatatemp -053c 68090a9c fetcht 2 ,mem_pdatatemp + 2 -053d 68010aa0 fetch 2 ,mem_pdatatemp + 6 +0537 ea240000 ifetch 8 ,rega +0538 60040a9a store 8 ,mem_pdatatemp +0539 68090a9c fetcht 2 ,mem_pdatatemp + 2 +053a 68010aa0 fetch 2 ,mem_pdatatemp + 6 +053b 98467c00 isub temp ,null +053c 24216944 nbranch adc_set_no_power_flag ,positive +053d 68090a9e fetcht 2 ,mem_pdatatemp + 4 053e 98467c00 isub temp ,null -053f 24216944 nbranch adc_set_no_power_flag ,positive -0540 68090a9e fetcht 2 ,mem_pdatatemp + 4 -0541 98467c00 isub temp ,null -0542 24216940 nbranch adc_set_low_power_flag ,positive +053f 24216940 nbranch adc_set_low_power_flag ,positive p_adc_clear_low_power_flag: -0543 6800c231 fetch 1 ,mem_adc_power_flag -0544 793ffe00 set0 0 ,pdata -0545 6000c231 store 1 ,mem_adc_power_flag -0546 20600000 rtn +0540 6800c231 fetch 1 ,mem_adc_power_flag +0541 793ffe00 set0 0 ,pdata +0542 6000c231 store 1 ,mem_adc_power_flag +0543 20600000 rtn p_mouse_low_voltage_led_timer: -0547 680246d3 fetch mouse_flag_len ,mem_mouse_flag -0548 c4020000 rtnbit0 mouse_low_voltage_flag -0549 68014682 fetch 2 ,mem_ui_state_map -054a c3858000 rtnbit1 ui_state_ble_adv -054b c3830000 rtnbit1 ui_state_bt_discovery -054c 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count -054d 247a0000 nrtn blank -054e 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count -054f 1fe0fe01 pincrease 1 -0550 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count -0551 1fe67c1e sub pdata ,30 ,null -0552 24410556 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive -0553 1fe67c0a sub pdata ,10 ,null -0554 2021074a branch p_mouse_multi_led_on ,positive -0555 20200758 branch p_mouse_multi_led_off +0544 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0545 c4020000 rtnbit0 mouse_low_voltage_flag +0546 68014682 fetch 2 ,mem_ui_state_map +0547 c3858000 rtnbit1 ui_state_ble_adv +0548 c3830000 rtnbit1 ui_state_bt_discovery +0549 68014b2e fetch 2 ,mem_mouse_multi_led_blink_count +054a 247a0000 nrtn blank +054b 6800c6cf fetch 1 ,mem_adc_low_volatage_led_timer_count +054c 1fe0fe01 pincrease 1 +054d 6000c6cf store 1 ,mem_adc_low_volatage_led_timer_count +054e 1fe67c1e sub pdata ,30 ,null +054f 24410553 ncall p_mouse_adc_low_volatage_led_timer_count_clean ,positive +0550 1fe67c0a sub pdata ,10 ,null +0551 2021075e branch p_mouse_multi_led_on ,positive +0552 2020076c branch p_mouse_multi_led_off p_mouse_adc_low_volatage_led_timer_count_clean: -0556 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count -0557 20600000 rtn +0553 7046cf01 jam 1 ,mem_adc_low_volatage_led_timer_count +0554 20600000 rtn p_mouse_sensor_poweron: -0558 20400313 call p_mouse_spi_init -0559 58008006 setarg 0x8006 -055a 20406413 call twspi_write -055b 20002ee0 nop 12000 -055c da604b96 arg mem_sensor_poweron_init ,regc -055d 204002de call p_sensor_wr_seq +0555 2040030f call p_mouse_spi_init +0556 58008006 setarg 0x8006 +0557 20406413 call twspi_write +0558 20002ee0 nop 12000 +0559 da604b96 arg mem_sensor_poweron_init ,regc +055a 204002da call p_sensor_wr_seq p_mouse_dpi_config: -055e 6800c77a fetch 1 ,mem_mouse_dpi -055f c0ff8562 bne 0xff ,p_mouse_seting_dpi +055b 6800c77a fetch 1 ,mem_mouse_dpi +055c c0ff855f bne 0xff ,p_mouse_seting_dpi p_mouse_dpi_config_default: -0560 6800c6e1 fetch 1 ,mem_config_sensor_motion -0561 6000c77a store 1 ,mem_mouse_dpi +055d 6800c6e1 fetch 1 ,mem_config_sensor_motion +055e 6000c77a store 1 ,mem_mouse_dpi p_mouse_seting_dpi: p_mouse_seting_sensor_type: -0562 6800c6e0 fetch 1 ,mem_config_sensor_type -0563 c0023d96 beq p3212 ,mouse_seting_3212_dpi -0564 c0030572 beq p3065_xy ,p_mouse_seting_3065xy_dpi -0565 c0038572 beq mx8650 ,p_mouse_seting_3065xy_dpi +055f 6800c6e0 fetch 1 ,mem_config_sensor_type +0560 c0023d96 beq p3212 ,mouse_seting_3212_dpi +0561 c003056f beq p3065_xy ,p_mouse_seting_3065xy_dpi +0562 c003856f beq mx8650 ,p_mouse_seting_3065xy_dpi p_mouse_seting_3205_dpi: +0563 6800c77a fetch 1 ,mem_mouse_dpi +0564 1fe67c01 sub pdata ,mouse_dpi_level2 ,null +0565 2042856a call p_mouse_3205_dpi_recount ,zero 0566 6800c77a fetch 1 ,mem_mouse_dpi -0567 1fe67c01 sub pdata ,mouse_dpi_level2 ,null -0568 2042856d call p_mouse_3205_dpi_recount ,zero -0569 6800c77a fetch 1 ,mem_mouse_dpi -056a c000056f beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 -056b c001bd8c beq mouse_dpi_level4 ,mouse_set_cpi3 -056c 20203d88 branch mouse_set_cpi2 +0567 c000056c beq mouse_dpi_level1 ,p_mouse_3205_set_cpi1 +0568 c001bd8c beq mouse_dpi_level4 ,mouse_set_cpi3 +0569 20203d88 branch mouse_set_cpi2 p_mouse_3205_dpi_recount: -056d 70477a02 jam mouse_dpi_level3 ,mem_mouse_dpi -056e 20600000 rtn +056a 70477a02 jam mouse_dpi_level3 ,mem_mouse_dpi +056b 20600000 rtn p_mouse_3205_set_cpi1: -056f 6800c77f fetch 1 ,mem_320x_dpi_1 -0570 1fe0ffff increase -1 ,pdata -0571 20203dbe branch mouse_p3205_dpi +056c 6800c77f fetch 1 ,mem_320x_dpi_1 +056d 1fe0ffff increase -1 ,pdata +056e 20203dbe branch mouse_p3205_dpi p_mouse_seting_3065xy_dpi: +056f 6800c77a fetch 1 ,mem_mouse_dpi +0570 1fe67c01 sub pdata ,mouse_dpi_level2 ,null +0571 2042856a call p_mouse_3205_dpi_recount ,zero 0572 6800c77a fetch 1 ,mem_mouse_dpi -0573 1fe67c01 sub pdata ,mouse_dpi_level2 ,null -0574 2042856d call p_mouse_3205_dpi_recount ,zero -0575 6800c77a fetch 1 ,mem_mouse_dpi -0576 c000057b beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 -0577 c001857d beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 +0573 c0000578 beq mouse_dpi_level1 ,p_mouse_3065xy_set_cpi1 +0574 c001857a beq mouse_dpi_level4 ,p_mouse_3065xy_set_cpi4 p_mouse_3065xy_set_cpi3: -0578 6800cb3c fetch 1 ,mem_3065xy_dpi_3 +0575 6800cb3c fetch 1 ,mem_3065xy_dpi_3 p_mouse_dpi_store: -0579 6000c6b5 store 1 ,mem_mouse_cpi_count -057a 20203dc1 branch mouse_p3205_dpi + 3 +0576 6000c6b5 store 1 ,mem_mouse_cpi_count +0577 20203dc1 branch mouse_p3205_dpi + 3 p_mouse_3065xy_set_cpi1: -057b 6800cb3a fetch 1 ,mem_3065xy_dpi_1 -057c 20200579 branch p_mouse_dpi_store +0578 6800cb3a fetch 1 ,mem_3065xy_dpi_1 +0579 20200576 branch p_mouse_dpi_store p_mouse_3065xy_set_cpi4: -057d 6800cb3d fetch 1 ,mem_3065xy_dpi_4 -057e 20200579 branch p_mouse_dpi_store +057a 6800cb3d fetch 1 ,mem_3065xy_dpi_4 +057b 20200576 branch p_mouse_dpi_store p_mouse_motion: -057f 78547c00 disable user -0580 58000000 setarg 0 -0581 6003469b store 6 ,mem_mouse_x -0582 2040058a call p_mouse_cheak_sensor_data -0583 2040028d call p_mouse_set_sdio_high -0584 20404079 call mouse_zwheel -0585 2040407e call mouse_t_zwheel -0586 204005b4 call p_mouse_key -0587 20400597 call p_mouse_data_zoom -0588 24740000 nrtn user -0589 20203fa0 branch mouse_motion + 9 +057c 78547c00 disable user +057d 58000000 setarg 0 +057e 6003469b store 6 ,mem_mouse_x +057f 20400587 call p_mouse_cheak_sensor_data +0580 20400289 call p_mouse_set_sdio_high +0581 20404079 call mouse_zwheel +0582 2040407e call mouse_t_zwheel +0583 204005b1 call p_mouse_key +0584 20400594 call p_mouse_data_zoom +0585 24740000 nrtn user +0586 20203fa0 branch mouse_motion + 9 p_mouse_cheak_sensor_data: -058a 6800c239 fetch 1 ,mem_spi_write_flash_sm -058b c1800000 rtnne flash_sm_no_buys -058c 6800c6e0 fetch 1 ,mem_config_sensor_type -058d c0020590 beq p3212 ,p_mouse_p3212_sensor_motion -058e c0028592 beq p3610 ,p_mouse_p3610_sensor_motion -058f 20200594 branch p_mouse_p32xx_sensor_motion +0587 6800c239 fetch 1 ,mem_spi_write_flash_sm +0588 c1800000 rtnne flash_sm_no_buys +0589 6800c6e0 fetch 1 ,mem_config_sensor_type +058a c002058d beq p3212 ,p_mouse_p3212_sensor_motion +058b c002858f beq p3610 ,p_mouse_p3610_sensor_motion +058c 20200591 branch p_mouse_p32xx_sensor_motion p_mouse_p3212_sensor_motion: -0590 20403fc0 call mouse_clear_sensor_data -0591 20203fc8 branch mouse_p3212_sensor_motion_next +058d 20403fc0 call mouse_clear_sensor_data +058e 20203fc8 branch mouse_p3212_sensor_motion_next p_mouse_p3610_sensor_motion: -0592 78547c00 disable user -0593 20204014 branch mouse_p3610_sensor_motion + 4 +058f 78547c00 disable user +0590 20204014 branch mouse_p3610_sensor_motion + 4 p_mouse_p32xx_sensor_motion: -0594 20403fc0 call mouse_clear_sensor_data -0595 78547c00 disable user -0596 20203fe7 branch mouse_p32xx_sensor_motion_2 +0591 20403fc0 call mouse_clear_sensor_data +0592 78547c00 disable user +0593 20203fe7 branch mouse_p32xx_sensor_motion_2 p_mouse_data_zoom: -0597 6800c6e0 fetch 1 ,mem_config_sensor_type -0598 c1820000 rtnne p3212 -0599 6800c77a fetch 1 ,mem_mouse_dpi -059a c1818000 rtnne mouse_dpi_level4 -059b 6801469b fetch 2 ,mem_mouse_x -059c 204005a2 call p_mouse_1600_zoom -059d 6001469b store 2 ,mem_mouse_x -059e 6801469d fetch 2 ,mem_mouse_y -059f 204005a2 call p_mouse_1600_zoom -05a0 6001469d store 2 ,mem_mouse_y -05a1 20600000 rtn +0594 6800c6e0 fetch 1 ,mem_config_sensor_type +0595 c1820000 rtnne p3212 +0596 6800c77a fetch 1 ,mem_mouse_dpi +0597 c1818000 rtnne mouse_dpi_level4 +0598 6801469b fetch 2 ,mem_mouse_x +0599 2040059f call p_mouse_1600_zoom +059a 6001469b store 2 ,mem_mouse_x +059b 6801469d fetch 2 ,mem_mouse_y +059c 2040059f call p_mouse_1600_zoom +059d 6001469d store 2 ,mem_mouse_y +059e 20600000 rtn p_mouse_1600_zoom: -05a2 c28585a5 bbit1 11 ,p_mouse_xy_inverse -05a3 c30585a9 bbit0 11 ,p_mouse_xy_zoom_3200 -05a4 20600000 rtn +059f c28585a2 bbit1 11 ,p_mouse_xy_inverse +05a0 c30585a6 bbit0 11 ,p_mouse_xy_zoom_3200 +05a1 20600000 rtn p_mouse_xy_inverse: -05a5 1fe67e00 sub pdata ,0 ,pdata -05a6 204005a9 call p_mouse_xy_zoom_3200 -05a7 1fe67e00 sub pdata ,0 ,pdata -05a8 20600000 rtn +05a2 1fe67e00 sub pdata ,0 ,pdata +05a3 204005a6 call p_mouse_xy_zoom_3200 +05a4 1fe67e00 sub pdata ,0 ,pdata +05a5 20600000 rtn p_mouse_xy_zoom_3200: -05a9 9fe0fe00 iadd pdata ,pdata -05aa 202005ab branch p_mouse_xy_zoom_store +05a6 9fe0fe00 iadd pdata ,pdata +05a7 202005a8 branch p_mouse_xy_zoom_store p_mouse_xy_zoom_store: -05ab 60014bbb store 2 ,mem_mouse_temp_data -05ac 6800cbbc fetch 1 ,mem_mouse_temp_data + 1 -05ad 1fe67c07 sub pdata ,0x7 ,null -05ae 244105b1 ncall p_mouse_xy_forward_overflow ,positive -05af 68014bbb fetch 2 ,mem_mouse_temp_data -05b0 20600000 rtn +05a8 60014bbb store 2 ,mem_mouse_temp_data +05a9 6800cbbc fetch 1 ,mem_mouse_temp_data + 1 +05aa 1fe67c07 sub pdata ,0x7 ,null +05ab 244105ae ncall p_mouse_xy_forward_overflow ,positive +05ac 68014bbb fetch 2 ,mem_mouse_temp_data +05ad 20600000 rtn p_mouse_xy_forward_overflow: -05b1 580007ff setarg 0x7ff -05b2 60014bbb store 2 ,mem_mouse_temp_data -05b3 20600000 rtn +05ae 580007ff setarg 0x7ff +05af 60014bbb store 2 ,mem_mouse_temp_data +05b0 20600000 rtn p_mouse_key: -05b4 204005b6 call p_mouse_check_key_gpio -05b5 2020409a branch mouse_key + 1 +05b1 204005b3 call p_mouse_check_key_gpio +05b2 2020409a branch mouse_key + 1 p_mouse_check_key_gpio: -05b6 da200000 arg 0 ,rega -05b7 204005b9 call p_mouse_check_lkey_gpio -05b8 2020408e branch mouse_check_key_gpio_output +05b3 da200000 arg 0 ,rega +05b4 204005b6 call p_mouse_check_lkey_gpio +05b5 2020408e branch mouse_check_key_gpio_output p_mouse_check_lkey_gpio: -05b9 6808c6e2 fetcht 1 ,mem_lbutton_gpio -05ba 204005d5 call p_gpio_set_input_pu -05bb 6808c6e2 fetcht 1 ,mem_lbutton_gpio -05bc 2040681d call gpio_get_bit -05bd 7920a200 setflag true ,0 ,rega +05b6 6808c6e2 fetcht 1 ,mem_lbutton_gpio +05b7 204005d2 call p_gpio_set_input_pu +05b8 6808c6e2 fetcht 1 ,mem_lbutton_gpio +05b9 2040681d call gpio_get_bit +05ba 7920a200 setflag true ,0 ,rega p_mouse_check_rkey_gpio: -05be 6808c6e3 fetcht 1 ,mem_rbutton_gpio -05bf 204005d5 call p_gpio_set_input_pu -05c0 6808c6e3 fetcht 1 ,mem_rbutton_gpio -05c1 2040681d call gpio_get_bit -05c2 7920a201 setflag true ,1 ,rega +05bb 6808c6e3 fetcht 1 ,mem_rbutton_gpio +05bc 204005d2 call p_gpio_set_input_pu +05bd 6808c6e3 fetcht 1 ,mem_rbutton_gpio +05be 2040681d call gpio_get_bit +05bf 7920a201 setflag true ,1 ,rega p_mouse_check_mkey_gpio: -05c3 6808c6e4 fetcht 1 ,mem_mbutton_gpio -05c4 204005d5 call p_gpio_set_input_pu -05c5 6808c6e4 fetcht 1 ,mem_mbutton_gpio -05c6 2040681d call gpio_get_bit -05c7 7920a202 setflag true ,2 ,rega +05c0 6808c6e4 fetcht 1 ,mem_mbutton_gpio +05c1 204005d2 call p_gpio_set_input_pu +05c2 6808c6e4 fetcht 1 ,mem_mbutton_gpio +05c3 2040681d call gpio_get_bit +05c4 7920a202 setflag true ,2 ,rega p_mouse_check_bk_key_gpio: -05c8 20400432 call p_mouse_comm_gpio_config -05c9 6808c6e5 fetcht 1 ,mem_bk_button_gpio -05ca 204005da call p_gpio_set_input_pd -05cb 6808c6e5 fetcht 1 ,mem_bk_button_gpio -05cc 2040681d call gpio_get_bit -05cd 7d20a203 nsetflag true ,3 ,rega -05ce 204005d5 call p_gpio_set_input_pu +05c5 2040042e call p_mouse_comm_gpio_config +05c6 6808c6e5 fetcht 1 ,mem_bk_button_gpio +05c7 204005d7 call p_gpio_set_input_pd +05c8 6808c6e5 fetcht 1 ,mem_bk_button_gpio +05c9 2040681d call gpio_get_bit +05ca 7d20a203 nsetflag true ,3 ,rega +05cb 204005d2 call p_gpio_set_input_pu p_mouse_check_fw_key_gpio: -05cf 20400432 call p_mouse_comm_gpio_config -05d0 6808c6e6 fetcht 1 ,mem_fw_button_gpio -05d1 204005da call p_gpio_set_input_pd -05d2 6808c6e6 fetcht 1 ,mem_fw_button_gpio -05d3 2040681d call gpio_get_bit -05d4 7d20a204 nsetflag true ,4 ,rega +05cc 2040042e call p_mouse_comm_gpio_config +05cd 6808c6e6 fetcht 1 ,mem_fw_button_gpio +05ce 204005d7 call p_gpio_set_input_pd +05cf 6808c6e6 fetcht 1 ,mem_fw_button_gpio +05d0 2040681d call gpio_get_bit +05d1 7d20a204 nsetflag true ,4 ,rega p_gpio_set_input_pu: -05d5 79200407 set1 gpio_active_bit ,temp +05d2 79200407 set1 gpio_active_bit ,temp p_gpio_set_input_pu1: -05d6 d8a08078 arg core_gpio_pu0 ,contw -05d7 20406830 call gpio_set_bit -05d8 793f8407 set0 gpio_active_bit ,temp -05d9 202005de branch p_gpio_set_input_pd4 +05d3 d8a08078 arg core_gpio_pu0 ,contw +05d4 20406830 call gpio_set_bit +05d5 793f8407 set0 gpio_active_bit ,temp +05d6 202005db branch p_gpio_set_input_pd4 p_gpio_set_input_pd: -05da 793f8407 set0 gpio_active_bit ,temp -05db d8a08078 arg core_gpio_pu0 ,contw -05dc 20406830 call gpio_set_bit -05dd 79200407 set1 gpio_active_bit ,temp +05d7 793f8407 set0 gpio_active_bit ,temp +05d8 d8a08078 arg core_gpio_pu0 ,contw +05d9 20406830 call gpio_set_bit +05da 79200407 set1 gpio_active_bit ,temp p_gpio_set_input_pd4: -05de d8a0807c arg core_gpio_pd0 ,contw -05df 2020680a branch gpio_set_high_impedance + 4 +05db d8a0807c arg core_gpio_pd0 ,contw +05dc 2020680a branch gpio_set_high_impedance + 4 p_mouse_bb_event_discovery_btn: -05e0 280ffe26 isolate1 mark_24g ,mark -05e1 2040819c call p_g24_check_51cmd_stop_24g ,true -05e2 2020426d branch mouse_bb_event_discovery_btn + 1 +05dd 280ffe26 isolate1 mark_24g ,mark +05de 20408198 call p_g24_check_51cmd_stop_24g ,true +05df 2020426d branch mouse_bb_event_discovery_btn + 1 p_le_addr_random_config: -05e3 7011c581 jam zcode_81 ,mem_zcode_temp_param0 -05e4 202007c6 branch p_zcode_entrance +05e0 7011c581 jam zcode_81 ,mem_zcode_temp_param0 +05e1 202007da branch p_zcode_entrance p_mouse_start_discovery: -05e5 7011c550 jam zcode_50 ,mem_zcode_temp_param0 -05e6 202007c6 branch p_zcode_entrance +05e2 7011c550 jam zcode_50 ,mem_zcode_temp_param0 +05e3 202007da branch p_zcode_entrance p_le_adv_data_update: -05e7 d8a0437b arg mem_le_adv_data + 11 ,contw -05e8 df200013 arg 19 ,loopcnt -05e9 20407f01 call memcpy -05ea 202057b8 branch le_modified_name_adv +05e4 d8a0437b arg mem_le_adv_data + 11 ,contw +05e5 df200013 arg 19 ,loopcnt +05e6 20407f01 call memcpy +05e7 202057b8 branch le_modified_name_adv p_mouse_stop_discovery: -05eb 20400752 call p_mouse_discovey_led_blink_off -05ec 58000000 setarg 0 -05ed 600146ac store 2 ,mem_mouse_discovery_timer -05ee 6000c714 store 1 ,mem_mouse_blink_count -05ef 204002d2 call p_mouse_init_sensor_reset -05f0 202042cb branch mouse_stop_discovery + 1 +05e8 20400766 call p_mouse_discovey_led_blink_off +05e9 58000000 setarg 0 +05ea 600146ac store 2 ,mem_mouse_discovery_timer +05eb 6000c714 store 1 ,mem_mouse_blink_count +05ec 204002ce call p_mouse_init_sensor_reset +05ed 202042cb branch mouse_stop_discovery + 1 p_le_slave_match: -05f1 6800c50f fetch 1 ,mem_le_md_count -05f2 1fe0fe01 pincrease 1 -05f3 6000c50f store 1 ,mem_le_md_count -05f4 c0065395 beq le_md_max_count ,le_slave_cont -05f5 204055aa call le_acknowledge -05f6 2040561e call le_prepare_tx -05f7 204006ce call power_ctrl_start -05f8 2020538f branch le_slave_match + 7 +05ee 6800c50f fetch 1 ,mem_le_md_count +05ef 1fe0fe01 pincrease 1 +05f0 6000c50f store 1 ,mem_le_md_count +05f1 c0065395 beq le_md_max_count ,le_slave_cont +05f2 204055aa call le_acknowledge +05f3 c5175395 bmark1 mark_le_decrypt_fail ,le_slave_cont +05f4 2040561e call le_prepare_tx +05f5 204006e2 call power_ctrl_start +05f6 2020538f branch le_slave_match + 7 p_le_next_adv_channel: -05f9 68008016 fetch 1 ,mem_le_ch_mapped -05fa 1fe0fe01 increase 1 ,pdata -05fb 60008016 store 1 ,mem_le_ch_mapped -05fc c1940000 rtnne 40 -05fd 70001625 jam 37 ,mem_le_ch_mapped -05fe 20600000 rtn +05f7 68008016 fetch 1 ,mem_le_ch_mapped +05f8 1fe0fe01 increase 1 ,pdata +05f9 60008016 store 1 ,mem_le_ch_mapped +05fa c1940000 rtnne 40 +05fb 70001625 jam 37 ,mem_le_ch_mapped +05fc 20600000 rtn p_le_receive_skip: -05ff 204029bb call save_rssi -0600 204001ff call p_rssi_signal -0601 202054a3 branch le_receive_skip + 2 +05fd 204029bb call save_rssi +05fe 204001fb call p_rssi_signal +05ff 202054a3 branch le_receive_skip + 2 p_le_update_param: -0602 7011c540 jam zcode_40 ,mem_zcode_temp_param0 -0603 202007c6 branch p_zcode_entrance +0600 7011c540 jam zcode_40 ,mem_zcode_temp_param0 +0601 202007da branch p_zcode_entrance p_le_update_channel_map: -0604 7011c541 jam zcode_41 ,mem_zcode_temp_param0 -0605 202007c6 branch p_zcode_entrance +0602 7011c541 jam zcode_41 ,mem_zcode_temp_param0 +0603 202007da branch p_zcode_entrance + +p_le_acknowledge: +0604 793f802e set0 mark_le_decrypt_fail ,mark +0605 204056ed call le_supervision_flush +0606 204055c0 call le_check_wak +0607 680082d9 fetch 1 ,mem_le_rxbuf +0608 2feffe04 isolate1 md ,pdata +0609 7920802a setflag true ,mark_ble_rx_md ,mark +060a 1fe37e00 rshift pdata ,pdata +060b 9842fe00 ixor temp ,pdata +060c 2feffe02 isolate1 nesn ,pdata +060d 7920800f setflag true ,mark_old_packet ,mark +060e c6078000 rtnmark1 mark_old_packet +060f 680082da fetch 1 ,mem_le_rxbuf + 1 +0610 203a55bc branch le_ack_unenc ,blank +0611 6800843f fetch 1 ,mem_le_state +0612 c30255bc bbit0 lestate_encryption ,le_ack_unenc +0613 2040748d call load_sk +0614 204073fb call le_decrypt +0615 243a0617 nbranch p_le_decrypt_fail ,blank +0616 202055bc branch le_ack_unenc + +p_le_decrypt_fail: +0617 7920002e set1 mark_le_decrypt_fail ,mark +0618 68088456 fetcht 1 ,mem_le_arq +0619 79400403 setflip sn ,temp +061a 60088456 storet 1 ,mem_le_arq +061b 20600000 rtn p_le_prepare_tx: -0606 68008456 fetch 1 ,mem_le_arq -0607 c2828625 bbit1 wak ,p_le_prepare_tx_wak -0608 20400777 call power_ctrl_pac_succ_incrs -0609 6800c78e fetch 1 ,mem_empty_count -060a 243a0610 nbranch p_le_send_empyt ,blank -060b 6800843f fetch 1 ,mem_le_state -060c c3020614 bbit0 lestate_encryption ,p_le_tx_4 -060d 680082da fetch 1 ,mem_le_rxbuf + 1 -060e 203a0614 branch p_le_tx_4 ,blank -060f 20205664 branch le_send_empty +061c 68008456 fetch 1 ,mem_le_arq +061d c282863b bbit1 wak ,p_le_prepare_tx_wak +061e 2040078b call power_ctrl_pac_succ_incrs +061f 6800c78e fetch 1 ,mem_empty_count +0620 243a0626 nbranch p_le_send_empyt ,blank +0621 6800843f fetch 1 ,mem_le_state +0622 c302062a bbit0 lestate_encryption ,p_le_tx_4 +0623 680082da fetch 1 ,mem_le_rxbuf + 1 +0624 203a062a branch p_le_tx_4 ,blank +0625 20205664 branch le_send_empty p_le_send_empyt: -0610 6800c78e fetch 1 ,mem_empty_count -0611 1fe0ffff increase -1 ,pdata -0612 6000c78e store 1 ,mem_empty_count -0613 20205664 branch le_send_empty +0626 6800c78e fetch 1 ,mem_empty_count +0627 1fe0ffff increase -1 ,pdata +0628 6000c78e store 1 ,mem_empty_count +0629 20205664 branch le_send_empty p_le_tx_4: -0614 6800c4c4 fetch 1 ,mem_le_pairing_state -0615 c0828617 bne flag_le_pairing_after_auth ,p_in_le_tx_4 -0616 70478e03 jam 3 ,mem_empty_count +062a 6800c4c4 fetch 1 ,mem_le_pairing_state +062b c082862d bne flag_le_pairing_after_auth ,p_in_le_tx_4 +062c 70478e03 jam 3 ,mem_empty_count p_in_le_tx_4: -0617 20405892 call le_fifo_check_nearly_full -0618 205a03b0 call p_mouse_data_pull ,blank -0619 20205622 branch le_prepare_tx + 4 +062d 20405892 call le_fifo_check_nearly_full +062e 205a03ac call p_mouse_data_pull ,blank +062f 20205622 branch le_prepare_tx + 4 p_le_check_tx_retransmit_setmd: -061a 6800c6c5 fetch 1 ,mem_le_connect_status_flag -061b 1fe17e03 and pdata ,0x03 ,pdata -061c c1818000 rtnne 0x03 -061d 6800c7c3 fetch 1 ,mem_mouse_data_queue_num -061e 207a0000 rtn blank -061f 6800c3dd fetch 1 ,mem_le_txlen -0620 207a0000 rtn blank -0621 6800c3dc fetch 1 ,mem_le_txheader -0622 79207e04 set1 md ,pdata -0623 6000c3dc store 1 ,mem_le_txheader -0624 20205650 branch le_set_md +0630 6800c6c5 fetch 1 ,mem_le_connect_status_flag +0631 1fe17e03 and pdata ,0x03 ,pdata +0632 c1818000 rtnne 0x03 +0633 6800c7c3 fetch 1 ,mem_mouse_data_queue_num +0634 207a0000 rtn blank +0635 6800c3dd fetch 1 ,mem_le_txlen +0636 207a0000 rtn blank +0637 6800c3dc fetch 1 ,mem_le_txheader +0638 79207e04 set1 md ,pdata +0639 6000c3dc store 1 ,mem_le_txheader +063a 20205650 branch le_set_md p_le_prepare_tx_wak: -0625 2040061a call p_le_check_tx_retransmit_setmd +063b 20400630 call p_le_check_tx_retransmit_setmd p_le_power_ctrl_pac_succ_decrs: power_ctrl_pac_succ_decrs: -0626 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -0627 1fe67c02 sub pdata ,2 ,null -0628 2441077b ncall power_ctrl_pac_succ_cnt_reinit ,positive -0629 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -062a c1000000 rtneq 0 -062b 1fe0ffff increase -1 ,pdata -062c 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt -062d 20600000 rtn +063c 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +063d 1fe67c02 sub pdata ,2 ,null +063e 2441078f ncall power_ctrl_pac_succ_cnt_reinit ,positive +063f 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +0640 c1000000 rtneq 0 +0641 1fe0ffff increase -1 ,pdata +0642 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt +0643 20600000 rtn p_mouse_le_reconn_write_enable_timer_reinit: -062e 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag -062f 207a0000 rtn blank -0630 6800c6c5 fetch 1 ,mem_le_connect_status_flag -0631 1fe17e03 and pdata ,0x03 ,pdata -0632 c1018000 rtneq 0x03 -0633 7046c60a jam 10 ,mem_le_start_encrypt_timer -0634 20600000 rtn +0644 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag +0645 207a0000 rtn blank +0646 6800c6c5 fetch 1 ,mem_le_connect_status_flag +0647 1fe17e03 and pdata ,0x03 ,pdata +0648 c1018000 rtneq 0x03 +0649 7046c60a jam 10 ,mem_le_start_encrypt_timer +064a 20600000 rtn p_le_parse: -0635 c6078000 rtnmark1 mark_old_packet -0636 20405890 call le_fifo_check_full -0637 247a0000 nrtn blank -0638 680082d9 fetch 1 ,mem_le_rxbuf -0639 1fe17e03 and pdata ,0x3 ,pdata -063a 6000c50c store 1 ,mem_le_packet_llid -063b e8c08000 ifetch 1 ,contr -063c 1fe17e1f and pdata ,0x1f ,pdata -063d 6000c50b store 1 ,mem_le_packet_size -063e 207a0000 rtn blank -063f 18c27e00 copy contr ,pdata -0640 6001450d store 2 ,mem_le_payload_ptr -0641 6800c50c fetch 1 ,mem_le_packet_llid -0642 c0018644 beq llid_le_ll ,p_le_parse_ll -0643 2020568d branch le_parse_l2cap +064b c6078000 rtnmark1 mark_old_packet +064c 20405890 call le_fifo_check_full +064d 247a0000 nrtn blank +064e 680082d9 fetch 1 ,mem_le_rxbuf +064f 1fe17e03 and pdata ,0x3 ,pdata +0650 6000c50c store 1 ,mem_le_packet_llid +0651 e8c08000 ifetch 1 ,contr +0652 1fe17e1f and pdata ,0x1f ,pdata +0653 6000c50b store 1 ,mem_le_packet_size +0654 207a0000 rtn blank +0655 18c27e00 copy contr ,pdata +0656 6001450d store 2 ,mem_le_payload_ptr +0657 6800c50c fetch 1 ,mem_le_packet_llid +0658 c001865a beq llid_le_ll ,p_le_parse_ll +0659 2020568d branch le_parse_l2cap p_le_parse_ll: -0644 680082db fetch 1 ,mem_le_rxbuf + 2 -0645 c0008647 beq ll_channel_map_req ,p_le_parse_channel_map_req -0646 20205c65 branch le_parse_ll + 1 +065a 680082db fetch 1 ,mem_le_rxbuf + 2 +065b c000865d beq ll_channel_map_req ,p_le_parse_channel_map_req +065c 20205c65 branch le_parse_ll + 1 p_le_parse_channel_map_req: -0647 e8c28000 ifetch 5 ,contr -0648 6002c3ce store 5 ,mem_le_new_map -0649 e8c10000 ifetch 2 ,contr -064a 6001045f store 2 ,mem_le_instant -064b 20205c8a branch le_parse_channel_map_req + 7 +065d e8c28000 ifetch 5 ,contr +065e 6002c3ce store 5 ,mem_le_new_map +065f e8c10000 ifetch 2 ,contr +0660 6001045f store 2 ,mem_le_instant +0661 20205c8a branch le_parse_channel_map_req + 7 p_le_parse_l2cap: -064c e8c10000 ifetch 2 ,contr -064d c0020650 beq le_l2cap_cid_att ,p_le_parse_att -064e c003068e beq le_l2cap_cid_smp ,p_le_parse_smp -064f 20205698 branch le_parse_l2cap + 11 +0662 e8c10000 ifetch 2 ,contr +0663 c0020666 beq le_l2cap_cid_att ,p_le_parse_att +0664 c00306a4 beq le_l2cap_cid_smp ,p_le_parse_smp +0665 20205698 branch le_parse_l2cap + 11 p_le_parse_att: -0650 20407ea5 call store_contr -0651 2040062e call p_mouse_le_reconn_write_enable_timer_reinit -0652 20407e9f call get_contr -0653 e8c18000 ifetch 3 ,contr -0654 60018477 store 3 ,mem_le_att_opcode -0655 c008065f beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request -0656 1fec8400 rshift8 pdata ,temp -0657 18467c24 sub temp ,0x24 ,null -0658 2021066d branch p_le_parse_att1 ,positive -0659 d84047c8 arg mem_mouse_le_uuid_sup ,temp -065a 600944bc storet 2 ,mem_ui_le_uuid_table -065b 204058ad call le_parse_att + 2 -065c 58008e7a setarg 0x8e7a -065d 600144bc store 2 ,mem_ui_le_uuid_table -065e 20600000 rtn +0666 20407ea5 call store_contr +0667 20400644 call p_mouse_le_reconn_write_enable_timer_reinit +0668 20407e9f call get_contr +0669 e8c18000 ifetch 3 ,contr +066a 60018477 store 3 ,mem_le_att_opcode +066b c0080675 beq attop_read_by_group_type_request ,p_le_parse_att_read_by_group_type_request +066c 1fec8400 rshift8 pdata ,temp +066d 18467c24 sub temp ,0x24 ,null +066e 20210683 branch p_le_parse_att1 ,positive +066f d84047c8 arg mem_mouse_le_uuid_sup ,temp +0670 600944bc storet 2 ,mem_ui_le_uuid_table +0671 204058ad call le_parse_att + 2 +0672 58008e7a setarg 0x8e7a +0673 600144bc store 2 ,mem_ui_le_uuid_table +0674 20600000 rtn p_le_parse_att_read_by_group_type_request: -065f 204059fa call le_parse_att_read_by_group_type_request -0660 20405879 call le_fifo_get_last_tx_ptr -0661 18c08c07 increase 7 ,contr -0662 e8c08000 ifetch 1 ,contr -0663 c1888000 rtnne attop_read_by_group_type_response -0664 18c08c05 increase 5 ,contr -0665 e8c10000 ifetch 2 ,contr -0666 d8401812 arg uuid_service_hids ,temp -0667 98467c00 isub temp ,null -0668 24628000 nrtn zero -0669 18c08dfc increase -4 ,contr -066a 5800002b setarg 0x2b -066b e0c10000 istore 2 ,contr -066c 20600000 rtn +0675 204059fa call le_parse_att_read_by_group_type_request +0676 20405879 call le_fifo_get_last_tx_ptr +0677 18c08c07 increase 7 ,contr +0678 e8c08000 ifetch 1 ,contr +0679 c1888000 rtnne attop_read_by_group_type_response +067a 18c08c05 increase 5 ,contr +067b e8c10000 ifetch 2 ,contr +067c d8401812 arg uuid_service_hids ,temp +067d 98467c00 isub temp ,null +067e 24628000 nrtn zero +067f 18c08dfc increase -4 ,contr +0680 5800002b setarg 0x2b +0681 e0c10000 istore 2 ,contr +0682 20600000 rtn p_le_parse_att1: -066d c0050670 beq attop_read_request ,p_le_parse_att_read_request -066e c009067e beq attop_write_request ,p_le_parse_att_write_request -066f 202058ad branch le_parse_att + 2 +0683 c0050686 beq attop_read_request ,p_le_parse_att_read_request +0684 c0090694 beq attop_write_request ,p_le_parse_att_write_request +0685 202058ad branch le_parse_att + 2 p_le_parse_att_read_request: -0670 68090478 fetcht 2 ,mem_le_att_handle -0671 6800c4e9 fetch 1 ,mem_le_configuration -0672 c2818677 bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth +0686 68090478 fetcht 2 ,mem_le_att_handle +0687 6800c4e9 fetch 1 ,mem_le_configuration +0688 c281868d bbit1 bit_ble_read_auth ,p_le_send_att_read_response_check_auth p_le_send_att_read_response: -0673 68010478 fetch 2 ,mem_le_att_handle -0674 c009da76 beq 0x13 ,le_send_att_error_response_notfound -0675 68090478 fetcht 2 ,mem_le_att_handle -0676 202059bf branch le_send_att_read_response +0689 68010478 fetch 2 ,mem_le_att_handle +068a c009da76 beq 0x13 ,le_send_att_error_response_notfound +068b 68090478 fetcht 2 ,mem_le_att_handle +068c 202059bf branch le_send_att_read_response p_le_send_att_read_response_check_auth: -0677 680144fa fetch 2 ,mem_le_pairing_handle -0678 98467c00 isub temp ,null -0679 24228673 nbranch p_le_send_att_read_response ,zero -067a 20405a42 call le_check_encrypt_state -067b 24340673 nbranch p_le_send_att_read_response ,user -067c 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code -067d 20205a77 branch le_send_att_error_response +068d 680144fa fetch 2 ,mem_le_pairing_handle +068e 98467c00 isub temp ,null +068f 24228689 nbranch p_le_send_att_read_response ,zero +0690 20405a42 call le_check_encrypt_state +0691 24340689 nbranch p_le_send_att_read_response ,user +0692 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +0693 20205a77 branch le_send_att_error_response p_le_parse_att_write_request: -067e 18c22200 copy contr ,rega -067f 680144fc fetch 2 ,mem_le_l2cap_size -0680 1fe0a5fd add pdata ,-3 ,regb -0681 204056e2 call le_writeatt_cb -0682 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag -0683 c07fda33 beq 0xff ,le_send_att_write_response_check_auth -0684 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag -0685 203a5a33 branch le_send_att_write_response_check_auth ,blank -0686 6800c6c5 fetch 1 ,mem_le_connect_status_flag -0687 c280da33 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth -0688 5800001a setarg 0x001a -0689 68090478 fetcht 2 ,mem_le_att_handle -068a 98467c00 isub temp ,null -068b 2422da33 nbranch le_send_att_write_response_check_auth ,zero -068c 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code -068d 20205a77 branch le_send_att_error_response +0694 18c22200 copy contr ,rega +0695 680144fc fetch 2 ,mem_le_l2cap_size +0696 1fe0a5fd add pdata ,-3 ,regb +0697 204056e2 call le_writeatt_cb +0698 6800cbb3 fetch 1 ,mem_mouse_fast_conn_flag +0699 c07fda33 beq 0xff ,le_send_att_write_response_check_auth +069a 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag +069b 203a5a33 branch le_send_att_write_response_check_auth ,blank +069c 6800c6c5 fetch 1 ,mem_le_connect_status_flag +069d c280da33 bbit1 ll_start_enc_flag ,le_send_att_write_response_check_auth +069e 5800001a setarg 0x001a +069f 68090478 fetcht 2 ,mem_le_att_handle +06a0 98467c00 isub temp ,null +06a1 2422da33 nbranch le_send_att_write_response_check_auth ,zero +06a2 70047a05 jam att_err_insufficient_authentication ,mem_le_err_code +06a3 20205a77 branch le_send_att_error_response p_le_parse_smp: -068e e8c08000 ifetch 1 ,contr -068f c0008692 beq smp_pairing_request ,p_le_parse_smp_pairing_request -0690 c0028694 beq smp_pairing_failed ,p_le_parse_smp_pairing_failed -0691 20205af6 branch le_parse_smp + 2 +06a4 e8c08000 ifetch 1 ,contr +06a5 c00086a8 beq smp_pairing_request ,p_le_parse_smp_pairing_request +06a6 c00286aa beq smp_pairing_failed ,p_le_parse_smp_pairing_failed +06a7 20205af6 branch le_parse_smp + 2 p_le_parse_smp_pairing_request: -0692 704b6c01 jam 1 ,mem_le_send_security_request_flag -0693 20205b09 branch le_parse_smp_pairing_request +06a8 704b6c01 jam 1 ,mem_le_send_security_request_flag +06a9 20205b09 branch le_parse_smp_pairing_request p_le_parse_smp_pairing_failed: -0694 7011c582 jam zcode_82 ,mem_zcode_temp_param0 -0695 202007c6 branch p_zcode_entrance +06aa 7011c582 jam zcode_82 ,mem_zcode_temp_param0 +06ab 202007da branch p_zcode_entrance p_le_adv_not_match: -0696 68008016 fetch 1 ,mem_le_ch_mapped -0697 c093d6f2 bne 39 ,le_adv_loop -0698 180a7e00 random pdata -0699 d84001ff arg 0x1ff ,temp -069a 98417e00 iand temp ,pdata -069b 1fe0fefa add pdata ,250 ,pdata -069c 20403cbe call delay -069d d8e00000 arg le_adv_interval_timer ,queue -069e 68014482 fetch 2 ,mem_le_adv_interval -069f 20207f08 branch timer_init +06ac 68008016 fetch 1 ,mem_le_ch_mapped +06ad c093d6f2 bne 39 ,le_adv_loop +06ae 180a7e00 random pdata +06af d84001ff arg 0x1ff ,temp +06b0 98417e00 iand temp ,pdata +06b1 1fe0fefa add pdata ,250 ,pdata +06b2 20403cbe call delay +06b3 20205710 branch le_adv_not_match + 10 p_le_lpm_setmult: -06a0 7855fc00 disable wake -06a1 203706a3 branch p_le_lpm_set_mult_attempt ,attempt -06a2 2436d806 nbranch le_lpm_lost ,match +06b4 7855fc00 disable wake +06b5 203706b7 branch p_le_lpm_set_mult_attempt ,attempt +06b6 2436d806 nbranch le_lpm_lost ,match p_le_lpm_set_mult_attempt: -06a3 20402bcb call lpm_match -06a4 680140c1 fetch 2 ,mem_rx_window_sniff -06a5 6001044d store 2 ,mem_le_receive_window -06a6 6800c6c5 fetch 1 ,mem_le_connect_status_flag -06a7 2fe00603 compare 3 ,pdata ,3 -06a8 2420abde nbranch lpm_mult_short ,true -06a9 202057fb branch le_lpm_set_mult_attempt + 3 +06b7 20402bcb call lpm_match +06b8 680140c1 fetch 2 ,mem_rx_window_sniff +06b9 6001044d store 2 ,mem_le_receive_window +06ba 6800c6c5 fetch 1 ,mem_le_connect_status_flag +06bb 2fe00603 compare 3 ,pdata ,3 +06bc 2420abde nbranch lpm_mult_short ,true +06bd 202057fb branch le_lpm_set_mult_attempt + 3 p_le_mouse_bb_event_connect_complete: -06aa 7011c542 jam zcode_42 ,mem_zcode_temp_param0 -06ab 202007c6 branch p_zcode_entrance +06be 7011c542 jam zcode_42 ,mem_zcode_temp_param0 +06bf 202007da branch p_zcode_entrance p_twspi_reset: -06ac 68108077 hfetch 1 ,core_gpio_out3 -06ad 1fe17efd and_into 0xfd ,pdata -06ae 60108077 hstore 1 ,core_gpio_out3 -06af 68188073 hfetcht 1 ,core_gpio_oe3 -06b0 18418402 or_into 0x2 ,temp -06b1 60188073 hstoret 1 ,core_gpio_oe3 -06b2 204063ee call twspi_disable -06b3 184104fd and_into 0xfd ,temp -06b4 2000000d nop 13 -06b5 204006b9 call p_twspi_enable -06b6 60188073 hstoret 1 ,core_gpio_oe3 -06b7 20600000 rtn +06c0 68108077 hfetch 1 ,core_gpio_out3 +06c1 1fe17efd and_into 0xfd ,pdata +06c2 60108077 hstore 1 ,core_gpio_out3 +06c3 68188073 hfetcht 1 ,core_gpio_oe3 +06c4 18418402 or_into 0x2 ,temp +06c5 60188073 hstoret 1 ,core_gpio_oe3 +06c6 204063ee call twspi_disable +06c7 184104fd and_into 0xfd ,temp +06c8 2000000d nop 13 +06c9 204006cd call p_twspi_enable +06ca 60188073 hstoret 1 ,core_gpio_oe3 +06cb 20600000 rtn p_spid_init: -06b8 204064dd call spid_init_common +06cc 204064dd call spid_init_common p_twspi_enable: -06b9 68108081 hfetch 1 ,core_gpio_sel1 -06ba 79207e00 set1 0 ,pdata -06bb 793ffe01 set0 1 ,pdata -06bc 793ffe03 set0 3 ,pdata -06bd 60108081 hstore 1 ,core_gpio_sel1 -06be 20600000 rtn +06cd 68108081 hfetch 1 ,core_gpio_sel1 +06ce 79207e00 set1 0 ,pdata +06cf 793ffe01 set0 1 ,pdata +06d0 793ffe03 set0 3 ,pdata +06d1 60108081 hstore 1 ,core_gpio_sel1 +06d2 20600000 rtn p_quit_connection_cont: -06bf 204033af call app_disconn_reason_collect_bt -06c0 204026e9 call sniff_exit -06c1 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp -06c2 20407d86 call ui_ipc_send_event -06c3 20405cf7 call init_lmp_work -06c4 20404d6b call l2cap_init_work -06c5 2020246e branch quit_connection_cont + 8 +06d3 204033af call app_disconn_reason_collect_bt +06d4 204026e9 call sniff_exit +06d5 700a9902 jam bt_evt_bb_disconnected ,mem_fifo_temp +06d6 20407d86 call ui_ipc_send_event +06d7 20405cf7 call init_lmp_work +06d8 20404d6b call l2cap_init_work +06d9 2020246e branch quit_connection_cont + 8 p_prepare_tx: -06c6 68008030 fetch 1 ,mem_state -06c7 2feffe00 isolate1 state_inconn ,pdata -06c8 204086ca call p_bt_power_ctrl ,true -06c9 2020248a branch prepare_tx + 1 +06da 68008030 fetch 1 ,mem_state +06db 2feffe00 isolate1 state_inconn ,pdata +06dc 204086de call p_bt_power_ctrl ,true +06dd 2020248a branch prepare_tx + 1 p_bt_power_ctrl: -06ca 68008047 fetch 1 ,mem_arq -06cb 2feffe03 isolate1 wack ,pdata -06cc 20408626 call power_ctrl_pac_succ_decrs ,true -06cd 24408777 ncall power_ctrl_pac_succ_incrs ,true +06de 68008047 fetch 1 ,mem_arq +06df 2feffe03 isolate1 wack ,pdata +06e0 2040863c call power_ctrl_pac_succ_decrs ,true +06e1 2440878b ncall power_ctrl_pac_succ_incrs ,true power_ctrl_start: -06ce 68014682 fetch 2 ,mem_ui_state_map -06cf c3858000 rtnbit1 ui_state_ble_adv -06d0 c3838000 rtnbit1 ui_state_bt_reconnect -06d1 c3830000 rtnbit1 ui_state_bt_discovery -06d2 da204d05 arg mem_rssi_signal_buf ,rega -06d3 20400241 call p_rssi_average -06d4 6008cd7d storet 1 ,mem_rssi_avg_received -06d5 58000082 setarg rssi_dis_max_24g -06d6 c51306d8 bmark1 mark_24g ,power_ctrl_start_next -06d7 58000080 setarg rssi_dis_max_ble +06e2 68014682 fetch 2 ,mem_ui_state_map +06e3 c3858000 rtnbit1 ui_state_ble_adv +06e4 c3838000 rtnbit1 ui_state_bt_reconnect +06e5 c3830000 rtnbit1 ui_state_bt_discovery +06e6 da204d05 arg mem_rssi_signal_buf ,rega +06e7 2040023d call p_rssi_average +06e8 6008cd7d storet 1 ,mem_rssi_avg_received +06e9 58000082 setarg rssi_dis_max_24g +06ea c51306ec bmark1 mark_24g ,power_ctrl_start_next +06eb 58000080 setarg rssi_dis_max_ble power_ctrl_start_next: -06d8 98467c00 isub temp ,null -06d9 2421078d nbranch power_ctrl_txpower_incrs_force ,positive -06da 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -06db 1fe67c02 sub pdata ,2 ,null -06dc 2421077d nbranch power_ctrl_txpower_decrs_check ,positive -06dd 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -06de c000078e beq 0 ,power_ctrl_txpower_incrs -06df 20600000 rtn +06ec 98467c00 isub temp ,null +06ed 242107a1 nbranch power_ctrl_txpower_incrs_force ,positive +06ee 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +06ef 1fe67c02 sub pdata ,2 ,null +06f0 24210791 nbranch power_ctrl_txpower_decrs_check ,positive +06f1 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +06f2 c00007a2 beq 0 ,power_ctrl_txpower_incrs +06f3 20600000 rtn p_slave_conn_recv_packet: -06e0 204024f0 call slave_receive_master_slot -06e1 242c28f9 nbranch shutdown_radio ,sync -06e2 204029bb call save_rssi -06e3 204001ff call p_rssi_signal -06e4 20202518 branch slave_conn_recv_packet + 4 +06f4 204024f0 call slave_receive_master_slot +06f5 242c28f9 nbranch shutdown_radio ,sync +06f6 204029bb call save_rssi +06f7 204001fb call p_rssi_signal +06f8 20202518 branch slave_conn_recv_packet + 4 p_lpm_dispatch: -06e5 c6130000 rtnmark1 mark_24g -06e6 20402afa call lpo_calibration -06e7 6801c16f fetch 3 ,mem_clks_per_lpo -06e8 207a0000 rtn blank -06e9 6800c091 fetch 1 ,mem_lpm_mode -06ea 207a0000 rtn blank -06eb 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer -06ec 247a0000 nrtn blank -06ed 6800c65a fetch 1 ,mem_ssp_enable -06ee 203a06f1 branch p_lpm_dispatch_next ,blank -06ef 6800c5b1 fetch 1 ,mem_sp_local_key_invalid -06f0 207a0000 rtn blank +06f9 c6130000 rtnmark1 mark_24g +06fa 20402afa call lpo_calibration +06fb 6801c16f fetch 3 ,mem_clks_per_lpo +06fc 207a0000 rtn blank +06fd 6800c091 fetch 1 ,mem_lpm_mode +06fe 207a0000 rtn blank +06ff 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +0700 247a0000 nrtn blank +0701 6800c65a fetch 1 ,mem_ssp_enable +0702 203a0705 branch p_lpm_dispatch_next ,blank +0703 6800c5b1 fetch 1 ,mem_sp_local_key_invalid +0704 207a0000 rtn blank p_lpm_dispatch_next: -06f1 6800c4c0 fetch 1 ,mem_le_sc_calc -06f2 247a0000 nrtn blank -06f3 20402c3a call lpm_check_wake_lock -06f4 247a0000 nrtn blank -06f5 6800c040 fetch 1 ,mem_context -06f6 2fe00e03 compare 3 ,pdata ,0x7 -06f7 2420ab9d nbranch lpm_dispatch_unconn ,true -06f8 68014042 fetch 2 ,mem_context + coffset_tsniff -06f9 d840ffff arg 0xffff ,temp -06fa 98467c00 isub temp ,null -06fb 20628000 rtn zero -06fc 20202b7d branch lpm_dispatch_next + 9 +0705 6800c4c0 fetch 1 ,mem_le_sc_calc +0706 247a0000 nrtn blank +0707 20402c3a call lpm_check_wake_lock +0708 247a0000 nrtn blank +0709 6800c040 fetch 1 ,mem_context +070a 2fe00e03 compare 3 ,pdata ,0x7 +070b 2420ab9d nbranch lpm_dispatch_unconn ,true +070c 68014042 fetch 2 ,mem_context + coffset_tsniff +070d d840ffff arg 0xffff ,temp +070e 98467c00 isub temp ,null +070f 20628000 rtn zero +0710 20202b7d branch lpm_dispatch_next + 9 p_lpm_set_mult: -06fd 7855fc00 disable wake -06fe 68008030 fetch 1 ,mem_state -06ff c4008000 rtnbit0 state_insniff -0700 2436abd0 nbranch lpm_not_match ,match -0701 20402bcb call lpm_match -0702 680140c1 fetch 2 ,mem_rx_window_sniff -0703 6001003e store 2 ,mem_rx_window -0704 68008047 fetch 1 ,mem_arq -0705 c281abde bbit1 wack ,lpm_mult_short -0706 c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short -0707 20405274 call l2cap_malloc_is_fifo_empty -0708 243a2bde nbranch lpm_mult_short ,blank -0709 205a070b call p_lpm_set_attemp_timeout ,blank -070a 20202bbe branch lpm_set_mult + 13 +0711 7855fc00 disable wake +0712 68008030 fetch 1 ,mem_state +0713 c4008000 rtnbit0 state_insniff +0714 2436abd0 nbranch lpm_not_match ,match +0715 20402bcb call lpm_match +0716 680140c1 fetch 2 ,mem_rx_window_sniff +0717 6001003e store 2 ,mem_rx_window +0718 68008047 fetch 1 ,mem_arq +0719 c281abde bbit1 wack ,lpm_mult_short +071a c586abde bmark0 mark_lpm_mult_enable ,lpm_mult_short +071b 20405274 call l2cap_malloc_is_fifo_empty +071c 243a2bde nbranch lpm_mult_short ,blank +071d 205a071f call p_lpm_set_attemp_timeout ,blank +071e 20202bbe branch lpm_set_mult + 13 p_lpm_set_attemp_timeout: -070b 70008a01 jam 1 ,mem_current_sniff_attempt -070c 70008b00 jam 0 ,mem_current_sniff_timeout -070d 20600000 rtn +071f 70008a01 jam 1 ,mem_current_sniff_attempt +0720 70008b00 jam 0 ,mem_current_sniff_timeout +0721 20600000 rtn p_mouse_bb_disconnected: -070e 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -070f 247a0000 nrtn blank -0710 7011c510 jam zcode_10 ,mem_zcode_temp_param0 -0711 202007c6 branch p_zcode_entrance +0722 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +0723 247a0000 nrtn blank +0724 7011c510 jam zcode_10 ,mem_zcode_temp_param0 +0725 202007da branch p_zcode_entrance p_check_51cmd_once_continue: -0712 204062bc call lmo_fifo_check -0713 243a7ddb nbranch check_51cmd_restore ,blank -0714 68008a99 fetch 1 ,mem_fifo_temp -0715 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle -0716 c00f871d beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info -0717 c0100720 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info -0718 c009071a beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param -0719 20207dca branch check_51cmd_once_continue + 2 +0726 204062bc call lmo_fifo_check +0727 243a7ddb nbranch check_51cmd_restore ,blank +0728 68008a99 fetch 1 ,mem_fifo_temp +0729 c584fdd6 bmark0 mark_context ,check_51cmd_check_idle +072a c00f8731 beq bt_cmd_store_reconn_info_le ,p_flash_store_le_reconn_info +072b c0100734 beq bt_cmd_store_reconn_info_bt ,p_flash_store_bd_reconn_info +072c c009072e beq bt_cmd_le_update_conn ,p_check_51cmd_ble_update_connect_param +072d 20207dca branch check_51cmd_once_continue + 2 p_check_51cmd_ble_update_connect_param: -071a 20405890 call le_fifo_check_full -071b 247a0000 nrtn blank -071c 20205abf branch le_l2cap_tx_update_req +072e 20405890 call le_fifo_check_full +072f 247a0000 nrtn blank +0730 20205abf branch le_l2cap_tx_update_req p_flash_store_le_reconn_info: -071d 70018534 jam rec_4_mode ,mem_record_bt_mode -071e 6803044f fetch 6 ,mem_le_plap -071f 20200722 branch p_flash_store_reconn_info +0731 70018534 jam rec_4_mode ,mem_record_bt_mode +0732 6803044f fetch 6 ,mem_le_plap +0733 20200736 branch p_flash_store_reconn_info p_flash_store_bd_reconn_info: -0720 70018533 jam rec_3_mode ,mem_record_bt_mode -0721 68030040 fetch 6 ,mem_plap +0734 70018533 jam rec_3_mode ,mem_record_bt_mode +0735 68030040 fetch 6 ,mem_plap p_flash_store_reconn_info: -0722 60030186 store 6 ,mem_temp_lap +0736 60030186 store 6 ,mem_temp_lap p_mouse_store_remote_bdaddr: -0723 680246d3 fetch mouse_flag_len ,mem_mouse_flag -0724 c4038000 rtnbit0 mouse_store_eeprom_flag -0725 d8e00007 arg mouse_store_eeprom_flag ,queue -0726 204043d2 call mouse_disable_function_flag -0727 204042e8 call mouse_check_device_addr +0737 680246d3 fetch mouse_flag_len ,mem_mouse_flag +0738 c4038000 rtnbit0 mouse_store_eeprom_flag +0739 d8e00007 arg mouse_store_eeprom_flag ,queue +073a 204043d2 call mouse_disable_function_flag +073b 204042e8 call mouse_check_device_addr p_mouse_unplug_clean_bdaddr: -0728 204042fb call mouse_before_store_reconn_info -0729 20200300 branch p_mouse_store_flash_device_info +073c 204042fb call mouse_before_store_reconn_info +073d 202002fc branch p_mouse_store_flash_device_info p_mouse_multi_led_blink_timer: -072a 6800cb27 fetch 1 ,mem_mouse_multi_led_blink_enable -072b 207a0000 rtn blank -072c 6800cb2a fetch 1 ,mem_mouse_multi_led_type -072d c0000730 beq multi_led_on ,p_mouse_multi_led_type_on -072e c000873a beq multi_led_blink ,p_mouse_multi_led_type_blink -072f 20600000 rtn +073e 6800cb27 fetch 1 ,mem_mouse_multi_led_blink_enable +073f 207a0000 rtn blank +0740 6800cb2a fetch 1 ,mem_mouse_multi_led_type +0741 c0000744 beq multi_led_on ,p_mouse_multi_led_type_on +0742 c000874e beq multi_led_blink ,p_mouse_multi_led_type_blink +0743 20600000 rtn p_mouse_multi_led_type_on: -0730 2040074a call p_mouse_multi_led_on -0731 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer -0732 1fe0fe01 increase 1 ,pdata -0733 6000cb2f store 1 ,mem_mouse_multi_led_on_timer -0734 6808cb2b fetcht 1 ,mem_mouse_multi_led_on_timer_init -0735 98467c00 isub temp ,null -0736 20428738 call p_mouse_multi_led_off_poweron2s ,zero -0737 20600000 rtn +0744 2040075e call p_mouse_multi_led_on +0745 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +0746 1fe0fe01 increase 1 ,pdata +0747 6000cb2f store 1 ,mem_mouse_multi_led_on_timer +0748 6808cb2b fetcht 1 ,mem_mouse_multi_led_on_timer_init +0749 98467c00 isub temp ,null +074a 2042874c call p_mouse_multi_led_off_poweron2s ,zero +074b 20600000 rtn p_mouse_multi_led_off_poweron2s: -0738 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -0739 20200758 branch p_mouse_multi_led_off +074c 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +074d 2020076c branch p_mouse_multi_led_off p_mouse_multi_led_type_blink: -073a 6800cb2d fetch 1 ,mem_mouse_multi_led_blink_timer -073b 1fe0ffff increase -1 ,pdata -073c 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer -073d 247a0000 nrtn blank -073e 6800cb2c fetch 1 ,mem_mouse_multi_led_blink_timer_init -073f 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer -0740 6800cb30 fetch 1 ,mem_mouse_multi_led_blink_count_limited -0741 203a0746 branch p_mouse_multi_led_blink_count_no_limited ,blank -0742 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -0743 203a0756 branch p_mouse_multi_led_blink_off ,blank -0744 1fe0ffff increase -1 ,pdata -0745 6000cb2e store 1 ,mem_mouse_multi_led_blink_count +074e 6800cb2d fetch 1 ,mem_mouse_multi_led_blink_timer +074f 1fe0ffff increase -1 ,pdata +0750 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer +0751 247a0000 nrtn blank +0752 6800cb2c fetch 1 ,mem_mouse_multi_led_blink_timer_init +0753 6000cb2d store 1 ,mem_mouse_multi_led_blink_timer +0754 6800cb30 fetch 1 ,mem_mouse_multi_led_blink_count_limited +0755 203a075a branch p_mouse_multi_led_blink_count_no_limited ,blank +0756 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +0757 203a076a branch p_mouse_multi_led_blink_off ,blank +0758 1fe0ffff increase -1 ,pdata +0759 6000cb2e store 1 ,mem_mouse_multi_led_blink_count p_mouse_multi_led_blink_count_no_limited: -0746 6800cb29 fetch 1 ,mem_mouse_multi_led_state -0747 c0008758 beq on ,p_mouse_multi_led_off -0748 c000074a beq off ,p_mouse_multi_led_on -0749 20600000 rtn +075a 6800cb29 fetch 1 ,mem_mouse_multi_led_state +075b c000876c beq on ,p_mouse_multi_led_off +075c c000075e beq off ,p_mouse_multi_led_on +075d 20600000 rtn p_mouse_multi_led_on: -074a 704b2901 jam on ,mem_mouse_multi_led_state -074b 6800c720 fetch 1 ,mem_device_flag -074c c0008750 beq 1 ,p_mouse_multi_24g_led_on -074d c001074f beq 2 ,p_mouse_multi_bt_led_on -074e 20200751 branch p_mouse_multi_ble_led_on +075e 704b2901 jam on ,mem_mouse_multi_led_state +075f 6800c720 fetch 1 ,mem_device_flag +0760 c0008764 beq 1 ,p_mouse_multi_24g_led_on +0761 c0010763 beq 2 ,p_mouse_multi_bt_led_on +0762 20200765 branch p_mouse_multi_ble_led_on p_mouse_multi_bt_led_on: -074f 2020448c branch mouse_device2_led_on +0763 2020448c branch mouse_device2_led_on p_mouse_multi_24g_led_on: -0750 20204489 branch mouse_device1_led_on +0764 20204489 branch mouse_device1_led_on p_mouse_multi_ble_led_on: -0751 2020448f branch mouse_device3_led_on +0765 2020448f branch mouse_device3_led_on p_mouse_discovey_led_blink_off: -0752 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer -0753 247a0000 nrtn blank -0754 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag -0755 247a0000 nrtn blank +0766 6800cb2f fetch 1 ,mem_mouse_multi_led_on_timer +0767 247a0000 nrtn blank +0768 6800cb31 fetch 1 ,mem_mouse_multi_led_on_poweron2s_flag +0769 247a0000 nrtn blank p_mouse_multi_led_blink_off: -0756 58000000 setarg 0 -0757 6001cb2d store 3 ,mem_mouse_multi_led_blink_timer +076a 58000000 setarg 0 +076b 6001cb2d store 3 ,mem_mouse_multi_led_blink_timer p_mouse_multi_led_off: -0758 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -0759 243a075c nbranch p_mouse_multi_led_off_wait_blink_over ,blank -075a 704b2700 jam 0 ,mem_mouse_multi_led_blink_enable -075b 704b2a00 jam 0 ,mem_mouse_multi_led_type +076c 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +076d 243a0770 nbranch p_mouse_multi_led_off_wait_blink_over ,blank +076e 704b2700 jam 0 ,mem_mouse_multi_led_blink_enable +076f 704b2a00 jam 0 ,mem_mouse_multi_led_type p_mouse_multi_led_off_wait_blink_over: -075c 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer -075d 704b2900 jam off ,mem_mouse_multi_led_state -075e 20404483 call mouse_devce_led_off + 1 -075f 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count -0760 247a0000 nrtn blank -0761 6800cbb9 fetch 1 ,mem_mouse_connected_state -0762 243a340a nbranch app_enter_hibernate ,blank -0763 20600000 rtn +0770 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer +0771 704b2900 jam off ,mem_mouse_multi_led_state +0772 20404483 call mouse_devce_led_off + 1 +0773 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count +0774 247a0000 nrtn blank +0775 6800cbb9 fetch 1 ,mem_mouse_connected_state +0776 243a340a nbranch app_enter_hibernate ,blank +0777 20600000 rtn p_mouse_dpi_multi_led_blink: -0764 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init -0765 704b3001 jam 1 ,mem_mouse_multi_led_blink_count_limited -0766 20200770 branch p_mouse_multi_led_blink_enable +0778 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init +0779 704b3001 jam 1 ,mem_mouse_multi_led_blink_count_limited +077a 20200784 branch p_mouse_multi_led_blink_enable p_mouse_mode_bt_device_multi_led_on: p_mouse_mode_24g_device_multi_led_on: -0767 704b3101 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag -0768 704b2701 jam on ,mem_mouse_multi_led_blink_enable -0769 704b2a00 jam multi_led_on ,mem_mouse_multi_led_type -076a 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer -076b 20600000 rtn +077b 704b3101 jam 1 ,mem_mouse_multi_led_on_poweron2s_flag +077c 704b2701 jam on ,mem_mouse_multi_led_blink_enable +077d 704b2a00 jam multi_led_on ,mem_mouse_multi_led_type +077e 704b2f00 jam 0 ,mem_mouse_multi_led_on_timer +077f 20600000 rtn p_mouse_discovery_multi_led_blink: -076c 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag -076d 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init -076e 704b3000 jam 0 ,mem_mouse_multi_led_blink_count_limited -076f 704b2e01 jam 1 ,mem_mouse_multi_led_blink_count +0780 704b3100 jam 0 ,mem_mouse_multi_led_on_poweron2s_flag +0781 704b2c03 jam 3 ,mem_mouse_multi_led_blink_timer_init +0782 704b3000 jam 0 ,mem_mouse_multi_led_blink_count_limited +0783 704b2e01 jam 1 ,mem_mouse_multi_led_blink_count p_mouse_multi_led_blink_enable: -0770 704b2d05 jam 5 ,mem_mouse_multi_led_blink_timer -0771 704b2701 jam on ,mem_mouse_multi_led_blink_enable -0772 704b2a01 jam multi_led_blink ,mem_mouse_multi_led_type -0773 20600000 rtn +0784 704b2d05 jam 5 ,mem_mouse_multi_led_blink_timer +0785 704b2701 jam on ,mem_mouse_multi_led_blink_enable +0786 704b2a01 jam multi_led_blink ,mem_mouse_multi_led_type +0787 20600000 rtn power_ctrl_pac_succ_cnt_init: -0774 704d7f01 jam 1 ,mem_power_ctrl_level -0775 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt -0776 20600000 rtn +0788 704d7f01 jam 1 ,mem_power_ctrl_level +0789 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt +078a 20600000 rtn power_ctrl_pac_succ_incrs: -0777 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -0778 1fe0fe01 increase 1 ,pdata -0779 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt -077a 20600000 rtn +078b 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +078c 1fe0fe01 increase 1 ,pdata +078d 6000cd7c store 1 ,mem_power_ctrl_pac_succ_cnt +078e 20600000 rtn power_ctrl_pac_succ_cnt_reinit: -077b 704d7c03 jam 3 ,mem_power_ctrl_pac_succ_cnt -077c 20600000 rtn +078f 704d7c03 jam 3 ,mem_power_ctrl_pac_succ_cnt +0790 20600000 rtn power_ctrl_txpower_decrs_check: -077d 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt -077e c1900000 rtnne 32 -077f 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt +0791 6800cd7c fetch 1 ,mem_power_ctrl_pac_succ_cnt +0792 c1900000 rtnne 32 +0793 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt power_ctrl_txpower_decrs: -0780 6808cd7d fetcht 1 ,mem_rssi_avg_received -0781 58000077 setarg rssi_dis_min_24g -0782 c5130784 bmark1 mark_24g ,power_ctrl_txpower_decrs_next -0783 58000075 setarg rssi_dis_min_ble +0794 6808cd7d fetcht 1 ,mem_rssi_avg_received +0795 58000077 setarg rssi_dis_min_24g +0796 c5130798 bmark1 mark_24g ,power_ctrl_txpower_decrs_next +0797 58000075 setarg rssi_dis_min_ble power_ctrl_txpower_decrs_next: -0784 98467c00 isub temp ,null -0785 24610000 nrtn positive -0786 6800cd7f fetch 1 ,mem_power_ctrl_level -0787 c0000795 beq 0 ,power_ctrl_decrs_level0 -0788 1fe0ffff increase -1 ,pdata -0789 6000cd7f store 1 ,mem_power_ctrl_level -078a c0000795 beq 0 ,power_ctrl_decrs_level0 +0798 98467c00 isub temp ,null +0799 24610000 nrtn positive +079a 6800cd7f fetch 1 ,mem_power_ctrl_level +079b c00007a9 beq 0 ,power_ctrl_decrs_level0 +079c 1fe0ffff increase -1 ,pdata +079d 6000cd7f store 1 ,mem_power_ctrl_level +079e c00007a9 beq 0 ,power_ctrl_decrs_level0 power_ctrl_decrs_level1: power_ctrl_incrs_level1: -078b 7041de00 jam tx_power_0db ,mem_tx_power -078c 20600000 rtn +079f 7041de00 jam tx_power_0db ,mem_tx_power +07a0 20600000 rtn power_ctrl_txpower_incrs_force: -078d 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt +07a1 704d7c00 jam 0 ,mem_power_ctrl_pac_succ_cnt power_ctrl_txpower_incrs: -078e 6800cd7f fetch 1 ,mem_power_ctrl_level -078f c0010793 beq 2 ,power_ctrl_incrs_level2 -0790 1fe0fe01 increase 1 ,pdata -0791 6000cd7f store 1 ,mem_power_ctrl_level -0792 c000878b beq 1 ,power_ctrl_incrs_level1 +07a2 6800cd7f fetch 1 ,mem_power_ctrl_level +07a3 c00107a7 beq 2 ,power_ctrl_incrs_level2 +07a4 1fe0fe01 increase 1 ,pdata +07a5 6000cd7f store 1 ,mem_power_ctrl_level +07a6 c000879f beq 1 ,power_ctrl_incrs_level1 power_ctrl_incrs_level2: -0793 7041de02 jam tx_power_5db ,mem_tx_power -0794 20600000 rtn +07a7 7041de02 jam tx_power_5db ,mem_tx_power +07a8 20600000 rtn power_ctrl_decrs_level0: -0795 7041de04 jam tx_power_f5db ,mem_tx_power -0796 20600000 rtn +07a9 7041de04 jam tx_power_f5db ,mem_tx_power +07aa 20600000 rtn p_set_freq_tx: -0797 60088017 storet 1 ,mem_last_freq -0798 1840a200 add temp ,0 ,rega -0799 20402981 call rf_write_freq -079a 58000500 setarg param_pll_setup -079b 20402a8f call sleep +07ab 60088017 storet 1 ,mem_last_freq +07ac 1840a200 add temp ,0 ,rega +07ad 20402981 call rf_write_freq +07ae 58000500 setarg param_pll_setup +07af 20402a8f call sleep p_rf_tx_enable: -079c 70890601 jam 0x1 ,rfen_adc -079d 7089003c jam 0x3c ,rfen_rx -079e 708901e0 jam 0xe0 ,rfen_tx -079f 2000000a nop 10 -07a0 70890201 jam 0x01 ,rfen_mdm -07a1 7089023d jam 0x3d ,rfen_mdm -07a2 2000000a nop 10 -07a3 708903b7 jam 0xb7 ,rfen_sn -07a4 2000000a nop 10 -07a5 7089027d jam 0x7d ,rfen_mdm -07a6 6800c1de fetch 1 ,mem_tx_power -07a7 c00107af beq tx_power_5db ,p_set_tx_power_5db -07a8 c00207b7 beq tx_power_f5db ,p_set_tx_power_f5db -07a9 c01007c1 beq tx_power_pair ,p_set_tx_power_pair +07b0 70890601 jam 0x1 ,rfen_adc +07b1 7089003c jam 0x3c ,rfen_rx +07b2 708901e0 jam 0xe0 ,rfen_tx +07b3 2000000a nop 10 +07b4 70890201 jam 0x01 ,rfen_mdm +07b5 7089023d jam 0x3d ,rfen_mdm +07b6 2000000a nop 10 +07b7 708903b7 jam 0xb7 ,rfen_sn +07b8 2000000a nop 10 +07b9 7089027d jam 0x7d ,rfen_mdm +07ba 6800c1de fetch 1 ,mem_tx_power +07bb c00107c3 beq tx_power_5db ,p_set_tx_power_5db +07bc c00207cb beq tx_power_f5db ,p_set_tx_power_f5db +07bd c01007d5 beq tx_power_pair ,p_set_tx_power_pair p_set_tx_power_0db: -07aa 204007bc call p_rx_low_sens -07ab 708955d0 jam 0xd0 ,0x8955 -07ac 708956e0 jam 0xe0 ,0x8956 -07ad 7089586c jam 0x6c ,0x8958 -07ae 2020294b branch set_tx_power_0db +07be 204007d0 call p_rx_low_sens +07bf 708955d0 jam 0xd0 ,0x8955 +07c0 708956e0 jam 0xe0 ,0x8956 +07c1 7089586c jam 0x6c ,0x8958 +07c2 2020294b branch set_tx_power_0db p_set_tx_power_5db: -07af 70894cfb jam 0xfb ,0x894c -07b0 70894def jam 0xef ,0x894d -07b1 70894eec jam 0xec ,0x894e -07b2 70894f5e jam 0x5e ,0x894f -07b3 708955d0 jam 0xd0 ,0x8955 -07b4 708956e0 jam 0xe0 ,0x8956 -07b5 7089583c jam 0x3c ,0x8958 -07b6 20202953 branch set_tx_power_5db +07c3 70894cfb jam 0xfb ,0x894c +07c4 70894def jam 0xef ,0x894d +07c5 70894eec jam 0xec ,0x894e +07c6 70894f5e jam 0x5e ,0x894f +07c7 708955d0 jam 0xd0 ,0x8955 +07c8 708956e0 jam 0xe0 ,0x8956 +07c9 7089583c jam 0x3c ,0x8958 +07ca 20202953 branch set_tx_power_5db p_set_tx_power_f5db: -07b7 204007bc call p_rx_low_sens -07b8 708955d0 jam 0xd0 ,0x8955 -07b9 708956c0 jam 0xc0 ,0x8956 -07ba 7089586c jam 0x6c ,0x8958 -07bb 2020295b branch set_tx_power_f5db +07cb 204007d0 call p_rx_low_sens +07cc 708955d0 jam 0xd0 ,0x8955 +07cd 708956c0 jam 0xc0 ,0x8956 +07ce 7089586c jam 0x6c ,0x8958 +07cf 2020295b branch set_tx_power_f5db p_rx_low_sens: -07bc 70894c5b jam 0x5b ,0x894c -07bd 70894d96 jam 0x96 ,0x894d -07be 70894e2c jam 0x2c ,0x894e -07bf 70894f46 jam 0x46 ,0x894f -07c0 20600000 rtn +07d0 70894c5b jam 0x5b ,0x894c +07d1 70894d96 jam 0x96 ,0x894d +07d2 70894e2c jam 0x2c ,0x894e +07d3 70894f46 jam 0x46 ,0x894f +07d4 20600000 rtn p_set_tx_power_pair: -07c1 708956c0 jam 0xc0 ,0x8956 -07c2 708955d0 jam 0xd0 ,0x8955 -07c3 20600000 rtn +07d5 708956c0 jam 0xc0 ,0x8956 +07d6 708955d0 jam 0xd0 ,0x8955 +07d7 20600000 rtn p_shutdown_radio: -07c4 18002a08 force 8 ,radio_ctrl -07c5 202028fa branch shutdown_radio + 1 +07d8 18002a08 force 8 ,radio_ctrl +07d9 202028fa branch shutdown_radio + 1 p_zcode_entrance: -07c6 680891c5 fetcht 1 ,mem_zcode_temp_param0 -07c7 18518400 rshift4 temp ,temp -07c8 6800cb56 fetch 1 ,mem_zcode_current_number -07c9 98467c00 isub temp ,null -07ca 202287e5 branch p_zcode_run ,zero -07cb 6008cb56 storet 1 ,mem_zcode_current_number -07cc 18408401 increase 1 ,temp -07cd 58000100 setarg zcode_buff_size -07ce 984f8400 imul32 temp ,temp -07cf 6801cb57 fetch 3 ,mem_xip_flash_offset -07d0 98467e00 isub temp ,pdata -07d1 6809cb5a fetcht 3 ,mem_flash_start_addr -07d2 9840fe00 iadd temp ,pdata -07d3 1fe0fffb increase -5 ,pdata -07d4 6001cb5d store 3 ,mem_flash_address -07d5 20400352 call p_flash_release_deep_power_down +07da 680891c5 fetcht 1 ,mem_zcode_temp_param0 +07db 18518400 rshift4 temp ,temp +07dc 6800cb56 fetch 1 ,mem_zcode_current_number +07dd 98467c00 isub temp ,null +07de 202287f9 branch p_zcode_run ,zero +07df 6008cb56 storet 1 ,mem_zcode_current_number +07e0 18408401 increase 1 ,temp +07e1 58000100 setarg zcode_buff_size +07e2 984f8400 imul32 temp ,temp +07e3 6801cb57 fetch 3 ,mem_xip_flash_offset +07e4 98467e00 isub temp ,pdata +07e5 6809cb5a fetcht 3 ,mem_flash_start_addr +07e6 9840fe00 iadd temp ,pdata +07e7 1fe0fffb increase -5 ,pdata +07e8 6001cb5d store 3 ,mem_flash_address +07e9 2040034e call p_flash_release_deep_power_down p_zcode_read_loop: -07d6 6801cb5d fetch 3 ,mem_flash_address -07d7 d8400100 arg zcode_buff_size ,temp -07d8 da201f00 arg mem_zcode_buff ,rega -07d9 20406562 call spid_read_flash -07da 68021f00 fetch 4 ,mem_zcode_buff -07db 680a4b60 fetcht 4 ,mem_zcode_head -07dc 98467c00 isub temp ,null -07dd 242287d6 nbranch p_zcode_read_loop ,zero -07de 20400313 call p_mouse_spi_init -07df 58001f00 setarg mem_zcode_buff -07e0 60014199 store 2 ,mem_patch_ptr -07e1 70419b40 jam zcode_code_size ,mem_patch_len -07e2 204064ca call load_ucode -07e3 58000000 setarg 0 -07e4 60024199 store 4 ,mem_patch_ptr +07ea 6801cb5d fetch 3 ,mem_flash_address +07eb d8400100 arg zcode_buff_size ,temp +07ec da201f00 arg mem_zcode_buff ,rega +07ed 20406562 call spid_read_flash +07ee 68021f00 fetch 4 ,mem_zcode_buff +07ef 680a4b60 fetcht 4 ,mem_zcode_head +07f0 98467c00 isub temp ,null +07f1 242287ea nbranch p_zcode_read_loop ,zero +07f2 2040030f call p_mouse_spi_init +07f3 58001f00 setarg mem_zcode_buff +07f4 60014199 store 2 ,mem_patch_ptr +07f5 70419b40 jam zcode_code_size ,mem_patch_len +07f6 204064ca call load_ucode +07f7 58000000 setarg 0 +07f8 60024199 store 4 ,mem_patch_ptr p_zcode_run: -07e5 680091c5 fetch 1 ,mem_zcode_temp_param0 -07e6 20200001 branch p_zcode +07f9 680091c5 fetch 1 ,mem_zcode_temp_param0 +07fa 20200001 branch p_zcode org 0x2000 start: @@ -35438,7 +35460,7 @@ z_mouse4_0_event_bb_disconn: 2000e 204041c1 call mouse_le_clean_connect_flag 2000f 68014208 fetch app_disc_rsn_size ,mem_app_disconn_reason -20010 c28504f0 bbit1 app_disc_pb_button ,p_mouse_select_device_button_up +20010 c28504ed bbit1 app_disc_pb_button ,p_mouse_select_device_button_up 20011 202041f7 branch mouse4_0_event_bb_disconn + 2 z_mouse_event_light_state_pairing: @@ -35450,7 +35472,7 @@ 20015 68014682 fetch 2 ,mem_ui_state_map 20016 c28642b0 bbit1 ui_state_btn_down ,mouse_start_discovery 20017 204033a9 call app_disconn_reason_clear -20018 204005b6 call p_mouse_check_key_gpio +20018 204005b3 call p_mouse_check_key_gpio 20019 20608000 rtn true 2001a 202033a7 branch app_bb_hibernate @@ -35476,7 +35498,7 @@ z_hid_rx_process_hid_control: 2002b 18427e00 copy temp ,pdata -2002c c002846c beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug +2002c c0028469 beq hid_control_p_virtualcableunplug ,p_mouse_irtual_cable_unplug 2002d 20204d41 branch hid_rx_process_hid_control + 2 org 0x30001 @@ -35489,7 +35511,7 @@ z_mouse4_0_check_reconn_target: 30006 704b6c01 jam 1 ,mem_le_send_security_request_flag -30007 20400767 call p_mouse_mode_bt_device_multi_led_on +30007 2040077b call p_mouse_mode_bt_device_multi_led_on 30008 7047a101 jam 1 ,mem_mouse_le_reconnect_flag 30009 680146a8 fetch 2 ,mem_mouse_direct_timeout 3000a 6808cbb3 fetcht 1 ,mem_mouse_fast_conn_flag @@ -35500,11 +35522,11 @@ z_mouse4_0_check_reconn_target_next: 3000e 600146ae store 2 ,mem_mouse_direct_timer 3000f 20403418 call app_lpm_mult_disable -30010 204002ba call p_le_check_adv_flag +30010 204002b6 call p_le_check_adv_flag 30011 58000004 setarg adv_flag_bredr_not_supported 30012 e0c08000 istore 1 ,contr 30013 d8c04390 arg mem_le_scan_data ,contr -30014 204005e7 call p_le_adv_data_update +30014 204005e4 call p_le_adv_data_update 30015 20207df4 branch check_51cmd_adv z_send_lmp_escape: @@ -35535,7 +35557,7 @@ 30026 6800804b fetch 1 ,mem_op 30027 793ffe03 set0 op_disconn ,pdata 30028 6000804b store 1 ,mem_op -30029 2020048f branch p_mouse_sensor_powerdown +30029 2020048c branch p_mouse_sensor_powerdown z_send_lmp_accepted: 3002a 18007e02 force 2 ,pdata @@ -35696,23 +35718,23 @@ z_mouse_start_discovery: 60003 704b6c00 jam 0 ,mem_le_send_security_request_flag -60004 204002b2 call p_mouse_tx_power_init +60004 204002ae call p_mouse_tx_power_init 60005 70479e00 jam 0 ,mem_mouse_clear_sensor_data_flag 60006 68014682 fetch 2 ,mem_ui_state_map 60007 c2858010 bbit1 ui_state_ble_adv ,z_mouse_start_discovery_norandom -60008 20400354 call p_mouse_load_random_addr_increase_count +60008 20400350 call p_mouse_load_random_addr_increase_count 60009 680947c4 fetcht 2 ,mem_random_addr_increase_count 6000a 18408401 increase 1 ,temp 6000b 600947c4 storet 2 ,mem_random_addr_increase_count 6000c 600944a1 storet 2 ,mem_le_lap + 1 -6000d 2040030c call p_mouse_store_random_addr_increase_count +6000d 20400308 call p_mouse_store_random_addr_increase_count 6000e 180a7e00 random pdata 6000f 6000c4a0 store 1 ,mem_le_lap z_mouse_start_discovery_norandom: 60010 6801cbb0 fetch 3 ,mem_le_lap_high_3b 60011 6001c4a3 store 3 ,mem_le_lap + 3 -60012 204002c1 call p_mouse_le_fast_conn_disable +60012 204002bd call p_mouse_le_fast_conn_disable 60013 20403418 call app_lpm_mult_disable 60014 68014687 fetch 2 ,mem_discovery_timeout 60015 600146ac store 2 ,mem_mouse_discovery_timer @@ -35731,15 +35753,15 @@ 60022 2040fddd call check_51cmd_start_discovery ,true 60023 704b5100 jam 0 ,mem_mouse_bt_reconnect_flag 60024 204042c4 call mouse_start_discovery_norandom + 13 -60025 2020076c branch p_mouse_discovery_multi_led_blink +60025 20200780 branch p_mouse_discovery_multi_led_blink z_check_51cmd_adv: 60026 7047a100 jam 0 ,mem_mouse_le_reconnect_flag -60027 204002ba call p_le_check_adv_flag +60027 204002b6 call p_le_check_adv_flag 60028 58000005 setarg adv_flag_bredr_not_supported | adv_flag_limited_discoverable 60029 e0c08000 istore 1 ,contr 6002a d8c04b12 arg mem_le_adv_swift_pair ,contr -6002b 204005e7 call p_le_adv_data_update +6002b 204005e4 call p_le_adv_data_update 6002c 20207df4 branch check_51cmd_adv org 0x70001 @@ -35751,13 +35773,13 @@ z_g24_start_24g_mode: 70005 2040000e call z_g24_factory_check -70006 20340364 branch p_g24_auto_pair_start ,user +70006 20340360 branch p_g24_auto_pair_start ,user 70007 79200026 set1 mark_24g ,mark 70008 6800cd93 fetch 1 ,mem_24g_conn_sm 70009 79207e02 set1 state_24g_reconn ,pdata 7000a 6000cd93 store 1 ,mem_24g_conn_sm -7000b 20400187 call p_g24_syncword_crc8 -7000c 2040011d call p_g24_ch +7000b 20400183 call p_g24_syncword_crc8 +7000c 20400119 call p_g24_ch 7000d 2020001b branch z_g24_auto_pair_timeout_init z_g24_factory_check: @@ -35798,7 +35820,7 @@ 70028 6000c6b4 store 1 ,mem_mouse_send_blank_timer 70029 60014c70 store 2 ,mem_24g_check_dongle_times 7002a 204042ca call mouse_stop_discovery -7002b 20200364 branch p_g24_auto_pair_start +7002b 20200360 branch p_g24_auto_pair_start org 0x80001 z_entrance7: @@ -35810,9 +35832,9 @@ 80004 6800cd8e fetch 1 ,mem_24g_stop_g24_mode 80005 c000add4 beq 1 ,g24_stop_24g_mode 80006 20400011 call z_g24_tx_attemp_data_prep -80007 20400155 call p_g24_transmit_receive_ack -80008 242c011d nbranch p_g24_ch ,sync -80009 2437811d nbranch p_g24_ch ,user3 +80007 20400151 call p_g24_transmit_receive_ack +80008 242c0119 nbranch p_g24_ch ,sync +80009 24378119 nbranch p_g24_ch ,user3 8000a 6800cd93 fetch 1 ,mem_24g_conn_sm 8000b 793ffe02 set0 state_24g_reconn ,pdata 8000c 6000cd93 store 1 ,mem_24g_conn_sm @@ -35820,8 +35842,8 @@ z_g24_tx_attemp_dongle_succ: 8000d 704b6700 jam 0 ,mem_mouse_long_mult_flag 8000e 20402f20 call g24_app_tx_attempt_success -8000f 20400152 call p_g24_txbuf_clear -80010 20200371 branch p_g24_transmit_by_interrupt_enable +8000f 2040014e call p_g24_txbuf_clear +80010 2020036d branch p_g24_transmit_by_interrupt_enable z_g24_tx_attemp_data_prep: 80011 70119eff jam 0xff ,mem_24g_common_temp @@ -35831,8 +35853,8 @@ 80015 600211a0 store 4 ,mem_24g_common_temp + 2 80016 d8400006 arg 6 ,temp 80017 da20119e arg mem_24g_common_temp ,rega -80018 204001a1 call p_g24_put_data_in_buff -80019 202001b3 branch p_g24_transmit_prep +80018 2040019d call p_g24_put_data_in_buff +80019 202001af branch p_g24_transmit_prep z_mouse_irtual_cable_unplug: 8001a 5fffffff setarg -1 @@ -35841,7 +35863,7 @@ 8001d 704bb3ff jam 0xff ,mem_mouse_fast_conn_flag 8001e 204042fb call mouse_before_store_reconn_info 8001f 704721ff jam 0xff ,mem_device1_type -80020 20200300 branch p_mouse_store_flash_device_info +80020 202002fc branch p_mouse_store_flash_device_info org 0x90001 z_entrance8: @@ -35875,17 +35897,17 @@ 90016 20405839 call le_set_justwork 90017 2040582c call le_set_fixed_ltk 90018 20405818 call le_set_config_read_authentication -90019 204005e3 call p_le_addr_random_config -9001a 204002f5 call p_mouse_load_flash_info_check +90019 204005e0 call p_le_addr_random_config +9001a 204002f1 call p_mouse_load_flash_info_check 9001b df200003 arg 3 ,loopcnt 9001c d8c0473f arg mem_device2_addr ,contr -9001d 20400367 call p_pdata_0xff_check -9001e 243402c1 nbranch p_mouse_le_fast_conn_disable ,user +9001d 20400363 call p_pdata_0xff_check +9001e 243402bd nbranch p_mouse_le_fast_conn_disable ,user 9001f df200003 arg 3 ,loopcnt 90020 d8c0475c arg mem_device3_addr ,contr -90021 20400367 call p_pdata_0xff_check -90022 243402c1 nbranch p_mouse_le_fast_conn_disable ,user -90023 204002c3 call p_mouse_fast_conn_init +90021 20400363 call p_pdata_0xff_check +90022 243402bd nbranch p_mouse_le_fast_conn_disable ,user +90023 204002bf call p_mouse_fast_conn_init 90024 20600000 rtn z_mouse_bt_sdp_update: @@ -35958,8 +35980,8 @@ a0019 7011a400 jam 0 ,mem_24g_common_temp + 6 a001a da20119e arg mem_24g_common_temp ,rega a001b d8400007 arg 7 ,temp -a001c 204001a1 call p_g24_put_data_in_buff -a001d 20400132 call p_g24_txdata_enable_tx +a001c 2040019d call p_g24_put_data_in_buff +a001d 2040012e call p_g24_txdata_enable_tx a001e 20207fe7 branch enable_user z_g24_paring_mode: @@ -35972,22 +35994,22 @@ z_g24_pairing_sm_1_waiting_ack: a0025 704c5302 jam state_24g_pairing_2 ,mem_24g_pairing_sm -a0026 202000f6 branch p_g24_transmit_abandon +a0026 202000f2 branch p_g24_transmit_abandon z_g24_pairing_sm_2_waiting_ack: a0027 704c5303 jam state_24g_pairing_3 ,mem_24g_pairing_sm -a0028 202000f6 branch p_g24_transmit_abandon +a0028 202000f2 branch p_g24_transmit_abandon z_g24_pairing_sm_3_waiting_ack: a0029 704c53ff jam state_24g_pairing_success ,mem_24g_pairing_sm a002a 700a9939 jam bt_evt_24g_pairing_complete ,mem_fifo_temp a002b 20407d86 call ui_ipc_send_event a002c 68024c23 fetch 4 ,mem_24g_rxpayload + 2 -a002d 20400186 call p_g24_update_addr_and_synccrc8 -a002e 202000f6 branch p_g24_transmit_abandon +a002d 20400182 call p_g24_update_addr_and_synccrc8 +a002e 202000f2 branch p_g24_transmit_abandon z_mouse_24g_pairing_complete: -a002f 20400488 call p_mouse_24g_no_data_timer_init +a002f 20400485 call p_mouse_24g_no_data_timer_init a0030 70478b01 jam 1 ,mem_mouse_24g_enter_lpm_enable a0031 d8e00003 arg mosue_24g_pairing_flag ,queue a0032 204043d2 call mouse_disable_function_flag @@ -35995,10 +36017,10 @@ a0034 60014707 store 2 ,mem_24g_pairing_timer_count a0035 7046a700 jam 0 ,mem_mouse_move_flag a0036 2040405d call mouse_read_sensor_common -a0037 204002b2 call p_mouse_tx_power_init +a0037 204002ae call p_mouse_tx_power_init a0038 68024c6b fetch 4 ,mem_24g_addr a0039 6002477b store 4 ,mem_mouse_24g_addr -a003a 20200300 branch p_mouse_store_flash_device_info +a003a 202002fc branch p_mouse_store_flash_device_info org 0xb0001 z_entrancea: @@ -36011,12 +36033,12 @@ z_mouse_24g_attempt_fail: b0007 704d8300 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt -b0008 204002b2 call p_mouse_tx_power_init -b0009 2040019c call p_g24_check_51cmd_stop_24g +b0008 204002ae call p_mouse_tx_power_init +b0009 20400198 call p_g24_check_51cmd_stop_24g b000a 7041bd00 jam 0 ,mem_link_key_exists b000b 6800cb2e fetch 1 ,mem_mouse_multi_led_blink_count b000c 247a0000 nrtn blank -b000d 20400263 call p_mouse_setgpio_hibernate +b000d 2040025f call p_mouse_setgpio_hibernate b000e 2020340a branch app_enter_hibernate z_mouse_le_conn_param_update_rsp_recieved: @@ -36029,7 +36051,7 @@ b0015 58000009 setarg le_interval_11_25ms b0016 60014496 store 2 ,mem_le_interval_min b0017 60014498 store 2 ,mem_le_interval_min + 2 -b0018 20400464 call p_app_updata_le_param +b0018 20400461 call p_app_updata_le_param b0019 7047c601 jam le_lpm_disable ,mem_mouse_le_conn_param_reject b001a 20600000 rtn @@ -36046,7 +36068,7 @@ z_mouse_le_bb_disconnected: b0022 6800cbba fetch 1 ,mem_select_device_button_statue_bt_discovery -b0023 205a050c call p_mouse_le_bb_disconnected_led_blink_set ,blank +b0023 205a0509 call p_mouse_le_bb_disconnected_led_blink_set ,blank b0024 704bba00 jam off ,mem_select_device_button_statue_bt_discovery b0025 704b6a00 jam 0 ,mem_mouse_le_bb_connected_flag b0026 58000007 setarg le_interval_8_75ms @@ -36054,9 +36076,9 @@ b0028 60014498 store 2 ,mem_le_interval_min + 2 b0029 7047c600 jam le_lpm_enable ,mem_mouse_le_conn_param_reject b002a 70479e00 jam 0 ,mem_mouse_clear_sensor_data_flag -b002b 204003a7 call p_mouse_data_init +b002b 204003a3 call p_mouse_data_init b002c 20405816 call le_clr_config_more_data -b002d 20400300 call p_mouse_store_flash_device_info +b002d 204002fc call p_mouse_store_flash_device_info b002e 202041d9 branch mouse_bb_disconnected z_mouse_before_hibernate: @@ -36065,15 +36087,15 @@ b0031 6012004c hstore 4 ,core_lpm_reg b0032 20402c21 call lpm_write_ctrl b0033 204074bd call disable_authrom -b0034 20400756 call p_mouse_multi_led_blink_off -b0035 20400300 call p_mouse_store_flash_device_info +b0034 2040076a call p_mouse_multi_led_blink_off +b0035 204002fc call p_mouse_store_flash_device_info b0036 20403e9f call mouse_before_hibernate_wheel_gpio_set -b0037 20400263 call p_mouse_setgpio_hibernate -b0038 2040034b call p_flash_deep_power_down +b0037 2040025f call p_mouse_setgpio_hibernate +b0038 20400347 call p_flash_deep_power_down b0039 68108081 hfetch 1 ,core_gpio_sel1 b003a 1fe17ef7 and pdata ,0xf7 ,pdata b003b 60108081 hstore 1 ,core_gpio_sel1 -b003c 2020027b branch p_mouse_t_wheel_clear_wake +b003c 20200277 branch p_mouse_t_wheel_clear_wake org 0xc0001 z_entranceb: @@ -36104,7 +36126,7 @@ c0013 20200016 branch z_mouse_le_ll_enable_start_enc_flag z_mouse_le_ll_reconn_start_encryt: -c0014 20400464 call p_app_updata_le_param +c0014 20400461 call p_app_updata_le_param c0015 7046c60a jam 10 ,mem_le_start_encrypt_timer z_mouse_le_ll_enable_start_enc_flag: @@ -36114,11 +36136,11 @@ z_mouse_bb_event_disconnected: c0018 704bb901 jam 1 ,mem_mouse_connected_state c0019 704b2e0a jam 10 ,mem_mouse_multi_led_blink_count -c001a 20400764 call p_mouse_dpi_multi_led_blink +c001a 20400778 call p_mouse_dpi_multi_led_blink c001b 704b0100 jam 0 ,mem_bt_rcvd_switch_req_accept c001c 704b0300 jam 0 ,mem_bt_send_lmp_setup_complete c001d 704b0c00 jam 0 ,mem_mouse_bt_send_first_package_flag -c001e 20400300 call p_mouse_store_flash_device_info +c001e 204002fc call p_mouse_store_flash_device_info c001f 202041d9 branch mouse_bb_disconnected org 0xd0001 @@ -36134,12 +36156,12 @@ d0007 600211a0 store 4 ,mem_24g_common_temp + 2 d0008 d8400006 arg 6 ,temp d0009 da20119e arg mem_24g_common_temp ,rega -d000a 204001a1 call p_g24_put_data_in_buff -d000b 204001b3 call p_g24_transmit_prep -d000c 20400155 call p_g24_transmit_receive_ack +d000a 2040019d call p_g24_put_data_in_buff +d000b 204001af call p_g24_transmit_prep +d000c 20400151 call p_g24_transmit_receive_ack d000d 242c0026 nbranch z_g24_pair_txdata_retry ,sync d000e 24378026 nbranch z_g24_pair_txdata_retry ,user3 -d000f 2040017b call p_g24_ackpayload_parse +d000f 20400177 call p_g24_ackpayload_parse d0010 68024c6b fetch 4 ,mem_24g_addr d0011 680a4d88 fetcht 4 ,mem_24g_allpowerful_addr d0012 98467c00 isub temp ,null @@ -36149,23 +36171,23 @@ z_g24_auto_pair_skip_rx_length: d0016 704d9300 jam 0 ,mem_24g_conn_sm -d0017 204002b2 call p_mouse_tx_power_init +d0017 204002ae call p_mouse_tx_power_init d0018 68024c6b fetch 4 ,mem_24g_addr d0019 680a4c4f fetcht 4 ,mem_24g_paring_addr d001a 98467c00 isub temp ,null -d001b 20228194 branch p_g24_start_pairing_sm1 ,zero +d001b 20228190 branch p_g24_start_pairing_sm1 ,zero d001c 68024c6b fetch 4 ,mem_24g_addr d001d 680a4c7a fetcht 4 ,mem_24g_device_addr d001e 98467c00 isub temp ,null d001f 20428024 call z7_g24_store_dongle_addr ,zero d0020 704b6700 jam 0 ,mem_mouse_long_mult_flag d0021 20402f20 call g24_app_tx_attempt_success -d0022 20400152 call p_g24_txbuf_clear -d0023 20200371 branch p_g24_transmit_by_interrupt_enable +d0022 2040014e call p_g24_txbuf_clear +d0023 2020036d branch p_g24_transmit_by_interrupt_enable z7_g24_store_dongle_addr: d0024 68024c23 fetch 4 ,mem_24g_rxpayload + 2 -d0025 20200186 branch p_g24_update_addr_and_synccrc8 +d0025 20200182 branch p_g24_update_addr_and_synccrc8 z_g24_pair_txdata_retry: @@ -36176,10 +36198,10 @@ d0029 6000cd81 store 1 ,mem_24g_auto_paring_switch d002a c000002d beq 0 ,z_g24_auto_pair_first_attemp d002b c0010037 beq 2 ,z_g24_auto_pair_all_powerful -d002c 20200182 branch p_g24_pair_init +d002c 2020017e branch p_g24_pair_init z_g24_auto_pair_first_attemp: -d002d 204002b2 call p_mouse_tx_power_init +d002d 204002ae call p_mouse_tx_power_init d002e 68024c7a fetch 4 ,mem_24g_device_addr d002f 60024c6b store 4 ,mem_24g_addr d0030 6800cd91 fetch 1 ,mem_24g_pair_current_ch_num @@ -36189,8 +36211,8 @@ d0034 20600000 rtn z_g24_ch_syncword_crc8_init: -d0035 20400187 call p_g24_syncword_crc8 -d0036 2020011d branch p_g24_ch +d0035 20400183 call p_g24_syncword_crc8 +d0036 20200119 branch p_g24_ch z_g24_auto_pair_all_powerful: d0037 7041de20 jam tx_power_pair ,mem_tx_power @@ -36210,7 +36232,7 @@ z_mouse_le_bb_event_connected: e0004 704bb900 jam 0 ,mem_mouse_connected_state -e0005 204002d2 call p_mouse_init_sensor_reset +e0005 204002ce call p_mouse_init_sensor_reset e0006 20403410 call app_ble_store_reconn_info e0007 704b6a01 jam 1 ,mem_mouse_le_bb_connected_flag e0008 6800c7a1 fetch 1 ,mem_mouse_le_reconnect_flag @@ -36218,11 +36240,11 @@ e000a 704b6b14 jam 0x14 ,mem_mouse_send_secutiry_request_timer z_mouse_le_bb_event_connected_next: -e000b 204003a7 call p_mouse_data_init +e000b 204003a3 call p_mouse_data_init e000c 202041c3 branch mouse_le_bb_event_connected z_g24_transmit_by_interrupt: -e000d 20400232 call p_g24_timer_check +e000d 2040022e call p_g24_timer_check e000e 24740000 nrtn user e000f 20400022 call p_g24_interval_calibrate e0010 68014d84 fetch 2 ,mem_24g_transmit_by_interrupt_exit_count @@ -36231,7 +36253,7 @@ e0013 68094d86 fetcht 2 ,mem_24g_transmit_by_interrupt_exit_count_init e0014 98467c00 isub temp ,null e0015 20428017 call p_g24_transmit_by_interrupt_exit ,zero -e0016 2020009d branch p_g24_transmit_process +e0016 2020009e branch p_g24_transmit_process p_g24_transmit_by_interrupt_exit: e0017 704d8300 jam g24_tx_timer_int_disable ,mem_24g_transmit_by_interrupt Index: output/ramcode.rom =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/ramcode.rom (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/ramcode.rom (working copy) @@ -1,48 +1,48 @@ 20200040 -204003a7 +204003a3 6800c1de 6000ccfa -20400774 +20400788 6800c685 6000cb47 6800cb33 6000cb34 204043ca -20400313 +2040030f 20400010 20400023 -20400063 +20400064 7011c580 -202007c6 -5800036e +202007da +5800036a 60014d74 -58000388 +58000384 600141ef -580006aa +580006be 600141f9 -580003c2 +580003be 600141f1 -5800024f +5800024b 600141ed -5800044e +5800044b 600141f5 -580003ea +580003e6 600141f3 -58000489 +58000486 600141eb -58000492 +5800048f 600141fd 20600000 58000019 60014d86 2455802d -204002ca -2040048f +204002c6 +2040048c 6800c71f 6000c71e 6800c241 c3810000 -20200560 +2020055d 58000177 60014d86 20600000 @@ -63,56 +63,57 @@ 20000001 20000001 c2840055 -c000806f -c001007f -c04287c4 -c0448797 -c02886e0 -c05386e5 -c05686fd +c0008070 +c0010080 +c04287d8 +c04487ab +c02886f4 +c05386f9 +c0568711 c065b3e4 -c074870e -c0508088 -c058808d -c0590097 -c0620290 -c0718562 -c07203ed -c073057f -c07505e0 -c07585e5 -c07605eb +c0748722 +c0508089 +c058808e +c0590098 +c062028c +c071855f +c07203e9 +c073057c +c07505dd +c07585e2 +c07605e8 20202a8e -c01c85f1 -c02185f9 -c02505ff -c02b8602 -c02c8604 -c0318606 -c0330635 -c033864c -c0350696 -c03b86a0 -c04606ac -c04686b8 -c07d0712 +c01c85ee +c02185f7 +c02505fd +c02b8600 +c02c8602 +c02d0604 +c031861c +c033064b +c0338662 +c03506ac +c03b86b4 +c04606c0 +c04686cc +c07d0726 20202a8e 704b6d00 -204004e1 +204004de 24608000 20407ec1 -204004e1 +204004de 24608000 704b6d01 20600000 6800cb6d 207a0000 -20400501 -20200300 +204004fe +202002fc d8a009ae df20000c 20407ed4 -2040037f +2040037b 6810807b 1fe17e3f 6010807b @@ -132,7 +133,7 @@ 6800c65a 203a2012 6800c5b1 -203a0082 +203a0083 20202012 58000a06 6001c510 @@ -151,44 +152,44 @@ 20207ff1 c6930000 6800cd93 -c28080ac -c28100ae +c28080ad +c28100af 6800cd83 -c00080b4 -2040012f -243400b6 -2040010a -204000e5 +c00080b5 +2040012b +243400b7 +20400106 +204000e1 6800cc53 c1ff8000 -204006ce -204000b0 +204006e2 +204000b1 6800cb29 -c0008371 -20400259 +c000836d +20400255 24740000 -20400256 +20400252 5800d2f0 20202d8c 7011c5c0 -202007c6 +202007da 7011c570 -202007c6 +202007da 58017700 6001cc72 704b691e 20600000 7011c5d1 -202007c6 +202007da 6800cc6f -205a00bc -20400259 +205a00bd +20400255 24740000 6801cc72 20202d8c 704c6f01 704d7800 -204000cc +204000cd 6000cbdf 58000000 6003cbe0 @@ -198,8 +199,8 @@ 6800cc44 79207e03 6000cc44 -20400132 -202000a0 +2040012e +202000a1 704d7901 704d7b00 6800cc44 @@ -207,67 +208,62 @@ 6000cc44 20600000 6800cc44 -79207e04 -6000cc44 -6000cbff -20600000 -6800cc44 c4020000 6800cc44 793ffe04 6000cc44 6000cbff -20400626 -2020011d +2040063c +20200119 6800cd78 -c08080cc +c08080cd 6800cd76 1fe0fe01 6000cd76 -c00200fa -2040011d +c00200f6 +20400119 704c8802 704c4c00 d9600d00 34730200 -20400155 -242c0160 -24378160 -20400152 -2040017b -20400777 +20400151 +242c015c +2437815c +2040014e +20400177 +2040078b 704b5200 6800cc42 1fe0fe01 6000cc42 -204000d5 +204000d1 6800cc53 -c0ff8199 -20400101 +c0ff8195 +204000fd 58000000 60024c48 6000cd77 20600000 -20400626 +2040063c 704d7600 -202000cc +202000cd 704d7b02 704d7901 704d7800 -202000cc +202000cd 6800cd7a -c00180fe +c00180fa 6800cc44 2fec0004 -202080ca +202080cb 6800cd7a -c00080fd -c00100fe +c00080f9 +c00100fa 20600000 6800cc53 c1ff8000 -2040010f -24560117 +2040010b +24560113 20600000 78567c00 6800cd79 @@ -278,7 +274,7 @@ 704c8804 20207feb 6800cd7b -203a012a +203a0126 1fe0ffff 6000cd7b 704d7a02 @@ -298,26 +294,26 @@ 20600000 704d7a03 6800cd78 -243a00dd +243a00d9 704c8802 -2020011d +20200119 6800cc53 -c0ff8197 -20400135 -204001b3 +c0ff8193 +20400131 +204001af 704c4801 20600000 68014d74 20407f9c -2034013b +20340137 6803cbe0 207a0000 20207fe7 -2040039f +2040039b 704c6f00 1a20fe01 6000cc43 -204000cc +204000cd 6000cbdf e8a88000 ea408000 @@ -334,21 +330,21 @@ 9840fe00 e0a08000 1a40a401 -c200014b +c2000147 20600000 df200004 d8a04bdf 20207ec6 7857fc00 -2040020f +2040020b 18002a00 68024c6b 98001200 68088017 2040291f 20402924 -204001cb -2057820c +204001c7 +20578208 20600000 6800cc6f 247a0000 @@ -358,26 +354,26 @@ 6800cc4a c2822dd4 6800cc53 -c0ff816b -20400173 -202000e6 +c0ff8167 +2040016f +202000e2 6800cc49 c1ff8000 58000000 60014c49 20202dd4 -2040078e -20400626 -2020011d +204007a2 +2040063c +20200119 6800cc4c 1fe67c0b -24210170 +2421016c 1fe0fe01 6000cc4c -c00300d7 -c00600d7 +c00300d3 +c00600d3 20600000 -204001a6 +204001a2 6800cc41 207a0000 98007200 @@ -394,7 +390,7 @@ d8c04c6b e8c08000 9a20a200 -c200018a +c2000186 1a227e00 60014cf4 6800ccf4 @@ -402,14 +398,14 @@ 9840fe00 6000ccf6 20600000 -20400182 +2040017e 704c5301 20600000 7011c590 -202007c6 -20400774 +202007da +20400788 7011c591 -202007c6 +202007da 793f8026 704d9300 204053ce @@ -457,7 +453,7 @@ 98001e00 6800cc4d 202053da -204001c5 +204001c1 7857fc00 7826fc00 7830fc00 @@ -466,32 +462,32 @@ 68014c46 98003600 37c18400 -242c020c +242c0208 7846fc00 7825fc00 7823fc00 7824fc00 -20400209 +20400205 6000ccf7 6808ccf6 98467c00 -2422820c -20400209 +24228208 +20400205 6000cbbd 6800cbbd 6808cc44 a8400e00 -2420820c -20400209 +24208208 +20400205 e0a08000 1fe97e00 1fe1721f -202281ec -20400209 +202281e8 +20400205 e0a08000 -c20001e9 +c20001e5 18a22200 -20400209 +20400205 6000cd7e 1a220a00 09800018 @@ -501,7 +497,7 @@ 1ff17e00 e0a18000 7845fc00 -2023020c +20230208 7837fc00 68008017 1fe0a200 @@ -528,7 +524,7 @@ 204053c4 68024c6b 98001200 -204001c5 +204001c1 20402918 6808cc4d 20402933 @@ -551,7 +547,7 @@ d8c04bff e8c08000 08008608 -c2000227 +c2000223 78247c00 08008618 78447c00 @@ -580,7 +576,7 @@ 1a220c00 e8c08000 98408400 -c2000244 +c2000240 18497e00 1fe20400 c6930000 @@ -590,10 +586,10 @@ 1ff27e00 20207f55 c6130000 -20400375 -20400261 +20400371 +2040025d 6800c040 -c3000256 +c3000252 680080a0 247a0000 58000000 @@ -607,8 +603,8 @@ 203a7fe9 6800cd83 c000ffe9 -2040028d -20400256 +20400289 +20400252 20403ebf 6808cb46 20406825 @@ -634,13 +630,13 @@ 6010807f 20600000 6808c6e8 -204005da +204005d7 6808c6e9 -204005da +204005d7 6808c6ea -204005da +204005d7 6808c6eb -204005da +204005d7 680080a1 1fe17ebf 600080a1 @@ -653,40 +649,40 @@ 20600000 6800cb00 207a0000 -20200562 +2020055f 70895b86 70895ca0 2040296c 20403416 204074b9 -20358313 +2035830f 6801c4a3 6001cbb0 20400001 -2040006b +2040006c 6808c720 6800c703 98467c00 -244282b5 +244282b1 6800c720 -c07f82a2 +c07f829e 1fe67c01 -242282a4 -204005b6 -c00282c8 -204002b2 -204004e5 +242282a0 +204005b3 +c00282c4 +204002ae +204004e2 da204721 6800c720 6808c703 98467c00 -20228360 +2022835c 1fe0ffff 1feffe1d 9a20a200 ea208000 6000c210 -c01a02b8 +c01a02b4 20600000 6800ccfa 6000c1de @@ -695,14 +691,14 @@ 600146aa 20600000 7011c523 -202007c6 +202007da da204370 ea208000 207a0000 98c0a200 e8c08000 c1008000 -202002bb +202002b7 704bb35a 20600000 704bb3ff @@ -711,35 +707,35 @@ 600344a0 20600000 7011c562 -202007c6 -20400313 +202007da +2040030f 204040c0 204040d9 -c01802d6 -c01882e5 +c01802d2 +c01882e1 204040d1 200003e8 -202002cc +202002c8 704b0001 2040640f -204002ca +204002c6 20206411 -20400558 +20400555 6800c6de -c02d02da +c02d02d6 202040e1 7046e007 da604b6e -204002de -2020055e +204002da +2020055b ea610000 d840ffff 98467c00 20628000 20406413 1a60a602 -202002de -20400558 +202002da +20400555 202040ea 70808640 70808700 @@ -755,53 +751,53 @@ 793ffe00 6010807f 20600000 -20400352 +2040034e 20404423 68014778 d840aa55 98467c00 -20228342 +2022833e 60094778 2040441c 68024b4d 6002477b 60024c6b -20400518 +20400515 6801470f -203a0300 +203a02fc 6800c231 c280b40a -20400352 -2040031e -2040032d -2040033c -20400331 -20400322 -20400315 -204002e7 +2040034e +2040031a +20400329 +20400338 2040032d +2040031e +20400311 +204002e3 +20400329 d8400002 da2047c4 da40005f -2040031a -2040034b +20400316 +20400347 70421276 20203d36 -204002e7 -2040032d +204002e3 +20400329 d8400001 da20477a da40005a 6801c700 9a40fe00 -20400331 -20200322 +2040032d +2020031e 6801c700 6001c232 -2040032d +20400329 2040652b -20400325 -c2800322 +20400321 +c280031e 20600000 580001fa 6011008c @@ -812,8 +808,8 @@ 6011008a 202064f6 2040650b -20400325 -c300832e +20400321 +c300832a 20600000 1fe22600 1a227e00 @@ -832,49 +828,49 @@ 6801c700 da204720 20600000 -20400352 -2040033c +2040034e +20400338 20406562 -20400354 -2040035b +20400350 +20400357 2040431a 6802477b 60024c6b 20600000 700aa2b9 -204002e7 +204002e3 204069ac da204b48 68088aa2 20406556 202069ac 700aa2ab -2020034c -20400352 +20200348 +2040034e d8400002 da2047c4 da40005f 6801c700 9a40fe00 20206562 -20400352 +2040034e d8400001 da20477a da40005a -20200358 +20200354 70472001 -20400767 +2040077b 7011c560 -202007c6 -2040076c +202007da +20400780 7011c561 -202007c6 +202007da 20407fe7 5800ffff e8c90000 98467c00 2442ffe9 -c2000369 +c2000365 20600000 20404401 6801469f @@ -885,42 +881,42 @@ 20600000 d8c01800 d8a0480c -2040037d +20400379 d8c01900 -2040037d +20400379 d8c01a00 -2040037d +20400379 d8c01b00 df20001b 20207f01 d8c0480c d8a01800 -2040037d +20400379 d8a01900 -2040037d +20400379 d8a01a00 -2040037d +20400379 d8a01b00 -2020037d +20200379 20405892 247a0000 6800cbb3 -c07f838f +c07f838b 6800c6c5 1fe17e03 c1818000 6800c79e -205a03e7 +205a03e3 680246d3 c282c179 20403f97 24740000 -2040039c -2040039f -204003bd +20400398 +2040039b +204003b9 da20469a 20407e3d -205403ac +205403a8 20600000 70417200 704b681e @@ -932,7 +928,7 @@ 58000000 6000cb67 6002469b -202002d2 +202002ce 7047a207 7047a304 580047a2 @@ -944,7 +940,7 @@ 20600000 da20469a 20407e54 -203403b4 +203403b0 20600000 20405652 6800c7c3 @@ -966,17 +962,17 @@ 20405271 247a0000 6800c79e -205a03e7 +205a03e3 680246d3 c282bf8a c284bf8a 20403f97 24740000 -2040039c -2040039f -204003bd +20400398 +2040039b +204003b9 6800cb05 -c00083d6 +c00083d2 6800cb0c 207a0000 20203f81 @@ -999,11 +995,11 @@ 20600000 70479e01 20405814 -202002d2 +202002ce 20407e34 -20400435 -202003ed -204003f0 +20400431 +202003e9 +204003ec 20403f36 20203ee3 6810807a @@ -1021,18 +1017,18 @@ 7920a201 1a227e00 6000c6b8 -c0008404 -c0010408 +c0008400 +c0010404 6800c6b9 -c2838414 +c2838410 20600000 6800c6b7 -c000040c -c001840e +c0000408 +c001840a 20600000 6800c6b7 -c0000410 -c0018412 +c000040c +c001840e 20600000 7046b982 20600000 @@ -1045,22 +1041,22 @@ 6800c6b9 793ffe07 6000c6b9 -c000041c -c000841f -c0010422 -c0018425 +c0000418 +c000841b +c001041e +c0018421 20600000 6800c6b8 -c0018428 +c0018424 20600000 6800c6b8 -c0000428 +c0000424 20600000 6800c6b8 -c001842d +c0018429 20600000 6800c6b8 -c000042d +c0000429 20600000 7046bc00 6800c6ba @@ -1074,14 +1070,14 @@ 20600000 6808cbb8 c17f8000 -202005d5 -20400432 +202005d2 +2040042e 6808c6e7 -204005da +204005d7 6808c6e7 2040681d -2020844a -204005d5 +20208446 +204005d2 6800c6b6 c1000000 7046b600 @@ -1091,104 +1087,105 @@ 6000c77a 6808c6e0 18467c04 -2042844c -1fe0fe01 +20428448 +1fe0fe02 6000cb2e -20400764 +20400778 20203d7e -204005d5 +204005d2 20203d62 1feffe02 +1fe0ffff 20600000 1a627e00 -c00a045f -c00a8461 -c0148464 -c0190466 -c0200468 -c002046a -c009846a +c00a045c +c00a845e +c0148461 +c0190463 +c0200465 +c0020467 +c0098467 c00cb3df -c010846e -c0008470 -c0010474 -c0158477 -c01c8479 -c01d047e -c01e0484 +c010846b +c000846d +c0010471 +c0158474 +c01c8476 +c01d047b +c01e0481 2020417d 7011c5d0 -202007c6 -2040048c +202007da +20400489 7011c5a2 -202007c6 +202007da 700a9912 20207d8f 7011c5b3 -202007c6 +202007da 7011c5a1 -202007c6 +202007da 7011c5a3 -202007c6 +202007da 7011c571 -202007c6 +202007da 7011c5b1 -202007c6 +202007da 704bb900 70480b00 -204002d2 +204002ce 202042ca -2040048c +20400489 7011c5b4 -202007c6 +202007da 7011c5b2 -202007c6 -20400752 +202007da +20400766 704bb900 -204002d2 +204002ce 7011c592 -202007c6 +202007da 704bb901 704b2e0a -20400764 -2040048c +20400778 +20400489 7011c5a0 -202007c6 -20400756 -20400767 +202007da +2040076a +2040077b 704bb900 -204002d2 +204002ce 20203f8d -2040048c +20400489 7011c5a4 -202007c6 +202007da 6800cb00 207a0000 704b0000 -204002ca +204002c6 58000806 20206413 -2040050f -20400547 -204004c1 -204004e5 +2040050c +20400544 +204004be +204004e2 20404234 2040423a -204004c6 -204004cd -204004ad +204004c3 +204004ca 204004aa -204004b3 -204004b9 -204004a2 +204004a7 +204004b0 +204004b6 +2040049f 20404231 -204004a5 -2020072a +204004a2 +2020073e da60480b da40637a 2020336d da604b0b -da4004a8 +da4004a5 2020336d 704b0c01 20600000 @@ -1196,44 +1193,44 @@ da403d60 2020336d da6046ae -da4004b0 +da4004ad 20203374 6800cb31 247a0000 20204266 da604b68 -da4004b6 +da4004b3 2020336d 6800c7c7 6000c172 -202004cb +202004c8 6800cb6a 207a0000 da604b6b -da4004be +da4004bb 2020336d 6800cb6c 247a0000 20205bf5 da604809 -da4004c4 +da4004c1 2020336d 70480800 20600000 da604b69 -da4004c9 +da4004c6 2020336d 58124f80 6001cc72 704b6701 20600000 da604d8f -da4004d0 +da4004cd 20203374 704d8e01 20600000 da604b47 -da4004d5 +da4004d2 2020336d 704bba01 6808c720 @@ -1248,12 +1245,12 @@ 2040c392 202043b8 6808c6ed -204005d5 +204005d2 6808c6ed 2020681d -204004e1 -242084f0 -204004d2 +204004de +242084ed +204004cf 6800c6d9 c1000000 7046d900 @@ -1263,19 +1260,19 @@ 680140b9 20207f08 6800cb6d -243a0508 +243a0505 6800c6d9 c1008000 6800cb47 1fe67c14 -244104fb +244104f8 6800c685 6000cb47 7046d901 20600000 -20400501 +204004fe 7041bd00 -20400300 +204002fc 680246d3 c1048000 2020437e @@ -1292,7 +1289,7 @@ 20600000 704bb901 704b2e0a -20200764 +20200778 68014b2e 247a0000 6800c808 @@ -1304,27 +1301,27 @@ 20610000 204068a8 7046ce00 -20400532 +2040052f 20406908 1feffe03 d840000f 98467e00 1fe67c64 -2041052f +2041052c 6001470f da204709 -20200524 -2040053a +20200521 +20400537 6800c231 c280b40a -c300052a +c3000527 704aff01 202043e7 204043e9 6800caff 207a0000 704aff00 -20200758 +2020076c d8400005 98467e00 20600000 @@ -1360,31 +1357,31 @@ 1fe0fe01 6000c6cf 1fe67c1e -24410556 +24410553 1fe67c0a -2021074a -20200758 +2021075e +2020076c 7046cf01 20600000 -20400313 +2040030f 58008006 20406413 20002ee0 da604b96 -204002de +204002da 6800c77a -c0ff8562 +c0ff855f 6800c6e1 6000c77a 6800c6e0 c0023d96 -c0030572 -c0038572 +c003056f +c003856f 6800c77a 1fe67c01 -2042856d +2042856a 6800c77a -c000056f +c000056c c001bd8c 20203d88 70477a02 @@ -1394,34 +1391,34 @@ 20203dbe 6800c77a 1fe67c01 -2042856d +2042856a 6800c77a -c000057b -c001857d +c0000578 +c001857a 6800cb3c 6000c6b5 20203dc1 6800cb3a -20200579 +20200576 6800cb3d -20200579 +20200576 78547c00 58000000 6003469b -2040058a -2040028d +20400587 +20400289 20404079 2040407e -204005b4 -20400597 +204005b1 +20400594 24740000 20203fa0 6800c239 c1800000 6800c6e0 -c0020590 -c0028592 -20200594 +c002058d +c002858f +20200591 20403fc0 20203fc8 78547c00 @@ -1434,60 +1431,60 @@ 6800c77a c1818000 6801469b -204005a2 +2040059f 6001469b 6801469d -204005a2 +2040059f 6001469d 20600000 -c28585a5 -c30585a9 +c28585a2 +c30585a6 20600000 1fe67e00 -204005a9 +204005a6 1fe67e00 20600000 9fe0fe00 -202005ab +202005a8 60014bbb 6800cbbc 1fe67c07 -244105b1 +244105ae 68014bbb 20600000 580007ff 60014bbb 20600000 -204005b6 +204005b3 2020409a da200000 -204005b9 +204005b6 2020408e 6808c6e2 -204005d5 +204005d2 6808c6e2 2040681d 7920a200 6808c6e3 -204005d5 +204005d2 6808c6e3 2040681d 7920a201 6808c6e4 -204005d5 +204005d2 6808c6e4 2040681d 7920a202 -20400432 +2040042e 6808c6e5 -204005da +204005d7 6808c6e5 2040681d 7d20a203 -204005d5 -20400432 +204005d2 +2040042e 6808c6e6 -204005da +204005d7 6808c6e6 2040681d 7d20a204 @@ -1495,7 +1492,7 @@ d8a08078 20406830 793f8407 -202005de +202005db 793f8407 d8a08078 20406830 @@ -1503,29 +1500,30 @@ d8a0807c 2020680a 280ffe26 -2040819c +20408198 2020426d 7011c581 -202007c6 +202007da 7011c550 -202007c6 +202007da d8a0437b df200013 20407f01 202057b8 -20400752 +20400766 58000000 600146ac 6000c714 -204002d2 +204002ce 202042cb 6800c50f 1fe0fe01 6000c50f c0065395 204055aa +c5175395 2040561e -204006ce +204006e2 2020538f 68008016 1fe0fe01 @@ -1534,31 +1532,55 @@ 70001625 20600000 204029bb -204001ff +204001fb 202054a3 7011c540 -202007c6 +202007da 7011c541 -202007c6 +202007da +793f802e +204056ed +204055c0 +680082d9 +2feffe04 +7920802a +1fe37e00 +9842fe00 +2feffe02 +7920800f +c6078000 +680082da +203a55bc +6800843f +c30255bc +2040748d +204073fb +243a0617 +202055bc +7920002e +68088456 +79400403 +60088456 +20600000 68008456 -c2828625 -20400777 +c282863b +2040078b 6800c78e -243a0610 +243a0626 6800843f -c3020614 +c302062a 680082da -203a0614 +203a062a 20205664 6800c78e 1fe0ffff 6000c78e 20205664 6800c4c4 -c0828617 +c082862d 70478e03 20405892 -205a03b0 +205a03ac 20205622 6800c6c5 1fe17e03 @@ -1571,10 +1593,10 @@ 79207e04 6000c3dc 20205650 -2040061a +20400630 6800cd7c 1fe67c02 -2441077b +2441078f 6800cd7c c1000000 1fe0ffff @@ -1600,10 +1622,10 @@ 18c27e00 6001450d 6800c50c -c0018644 +c001865a 2020568d 680082db -c0008647 +c000865d 20205c65 e8c28000 6002c3ce @@ -1611,18 +1633,18 @@ 6001045f 20205c8a e8c10000 -c0020650 -c003068e +c0020666 +c00306a4 20205698 20407ea5 -2040062e +20400644 20407e9f e8c18000 60018477 -c008065f +c0080675 1fec8400 18467c24 -2021066d +20210683 d84047c8 600944bc 204058ad @@ -1643,21 +1665,21 @@ 5800002b e0c10000 20600000 -c0050670 -c009067e +c0050686 +c0090694 202058ad 68090478 6800c4e9 -c2818677 +c281868d 68010478 c009da76 68090478 202059bf 680144fa 98467c00 -24228673 +24228689 20405a42 -24340673 +24340689 70047a05 20205a77 18c22200 @@ -1677,13 +1699,13 @@ 70047a05 20205a77 e8c08000 -c0008692 -c0028694 +c00086a8 +c00286aa 20205af6 704b6c01 20205b09 7011c582 -202007c6 +202007da 68008016 c093d6f2 180a7e00 @@ -1691,11 +1713,9 @@ 98417e00 1fe0fefa 20403cbe -d8e00000 -68014482 -20207f08 +20205710 7855fc00 -203706a3 +203706b7 2436d806 20402bcb 680140c1 @@ -1705,7 +1725,7 @@ 2420abde 202057fb 7011c542 -202007c6 +202007da 68108077 1fe17efd 60108077 @@ -1715,7 +1735,7 @@ 204063ee 184104fd 2000000d -204006b9 +204006cd 60188073 20600000 204064dd @@ -1734,34 +1754,34 @@ 2020246e 68008030 2feffe00 -204086ca +204086de 2020248a 68008047 2feffe03 -20408626 -24408777 +2040863c +2440878b 68014682 c3858000 c3838000 c3830000 da204d05 -20400241 +2040023d 6008cd7d 58000082 -c51306d8 +c51306ec 58000080 98467c00 -2421078d +242107a1 6800cd7c 1fe67c02 -2421077d +24210791 6800cd7c -c000078e +c00007a2 20600000 204024f0 242c28f9 204029bb -204001ff +204001fb 20202518 c6130000 20402afa @@ -1772,7 +1792,7 @@ 6800cb2f 247a0000 6800c65a -203a06f1 +203a0705 6800c5b1 207a0000 6800c4c0 @@ -1799,7 +1819,7 @@ c586abde 20405274 243a2bde -205a070b +205a071f 20202bbe 70008a01 70008b00 @@ -1807,21 +1827,21 @@ 6800cb2e 247a0000 7011c510 -202007c6 +202007da 204062bc 243a7ddb 68008a99 c584fdd6 -c00f871d -c0100720 -c009071a +c00f8731 +c0100734 +c009072e 20207dca 20405890 247a0000 20205abf 70018534 6803044f -20200722 +20200736 70018533 68030040 60030186 @@ -1831,23 +1851,23 @@ 204043d2 204042e8 204042fb -20200300 +202002fc 6800cb27 207a0000 6800cb2a -c0000730 -c000873a +c0000744 +c000874e 20600000 -2040074a +2040075e 6800cb2f 1fe0fe01 6000cb2f 6808cb2b 98467c00 -20428738 +2042874c 20600000 704b3100 -20200758 +2020076c 6800cb2d 1fe0ffff 6000cb2d @@ -1855,20 +1875,20 @@ 6800cb2c 6000cb2d 6800cb30 -203a0746 +203a075a 6800cb2e -203a0756 +203a076a 1fe0ffff 6000cb2e 6800cb29 -c0008758 -c000074a +c000876c +c000075e 20600000 704b2901 6800c720 -c0008750 -c001074f -20200751 +c0008764 +c0010763 +20200765 2020448c 20204489 2020448f @@ -1879,7 +1899,7 @@ 58000000 6001cb2d 6800cb2e -243a075c +243a0770 704b2700 704b2a00 704b2f00 @@ -1892,7 +1912,7 @@ 20600000 704b2c03 704b3001 -20200770 +20200784 704b3101 704b2701 704b2a00 @@ -1920,23 +1940,23 @@ 704d7c00 6808cd7d 58000077 -c5130784 +c5130798 58000075 98467c00 24610000 6800cd7f -c0000795 +c00007a9 1fe0ffff 6000cd7f -c0000795 +c00007a9 7041de00 20600000 704d7c00 6800cd7f -c0010793 +c00107a7 1fe0fe01 6000cd7f -c000878b +c000879f 7041de02 20600000 7041de04 @@ -1957,10 +1977,10 @@ 2000000a 7089027d 6800c1de -c00107af -c00207b7 -c01007c1 -204007bc +c00107c3 +c00207cb +c01007d5 +204007d0 708955d0 708956e0 7089586c @@ -1973,7 +1993,7 @@ 708956e0 7089583c 20202953 -204007bc +204007d0 708955d0 708956c0 7089586c @@ -1992,7 +2012,7 @@ 18518400 6800cb56 98467c00 -202287e5 +202287f9 6008cb56 18408401 58000100 @@ -2003,7 +2023,7 @@ 9840fe00 1fe0fffb 6001cb5d -20400352 +2040034e 6801cb5d d8400100 da201f00 @@ -2011,8 +2031,8 @@ 68021f00 680a4b60 98467c00 -242287d6 -20400313 +242287ea +2040030f 58001f00 60014199 70419b40 Index: output/romcode.rom =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/romcode.rom (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/romcode.rom (working copy) @@ -24602,7 +24602,7 @@ 202042b0 204041c1 68014208 -c28504f0 +c28504ed 202041f7 c2828015 c2818015 @@ -24610,7 +24610,7 @@ 68014682 c28642b0 204033a9 -204005b6 +204005b3 20608000 202033a7 68010264 @@ -24630,7 +24630,7 @@ 704b0501 20600000 18427e00 -c002846c +c0028469 20204d41 c0100016 c010802a @@ -24638,7 +24638,7 @@ c0118006 20600000 704b6c01 -20400767 +2040077b 7047a101 680146a8 6808cbb3 @@ -24647,11 +24647,11 @@ 58000258 600146ae 20403418 -204002ba +204002b6 58000004 e0c08000 d8c04390 -204005e7 +204005e4 20207df4 68008048 c042001a @@ -24672,7 +24672,7 @@ 6800804b 793ffe03 6000804b -2020048f +2020048c 18007e02 20406298 68008049 @@ -24784,21 +24784,21 @@ c0280003 20600000 704b6c00 -204002b2 +204002ae 70479e00 68014682 c2858010 -20400354 +20400350 680947c4 18408401 600947c4 600944a1 -2040030c +20400308 180a7e00 6000c4a0 6801cbb0 6001c4a3 -204002c1 +204002bd 20403418 68014687 600146ac @@ -24817,26 +24817,26 @@ 2040fddd 704b5100 204042c4 -2020076c +20200780 7047a100 -204002ba +204002b6 58000005 e0c08000 d8c04b12 -204005e7 +204005e4 20207df4 c0300005 c0308017 c031001f 20600000 2040000e -20340364 +20340360 79200026 6800cd93 79207e02 6000cd93 -20400187 -2040011d +20400183 +20400119 2020001b df200002 d8c04c6b @@ -24867,23 +24867,23 @@ 6000c6b4 60014c70 204042ca -20200364 +20200360 c0380004 c038801a 20600000 6800cd8e c000add4 20400011 -20400155 -242c011d -2437811d +20400151 +242c0119 +24378119 6800cd93 793ffe02 6000cd93 704b6700 20402f20 -20400152 -20200371 +2040014e +2020036d 70119eff 6800cc44 6000919f @@ -24891,15 +24891,15 @@ 600211a0 d8400006 da20119e -204001a1 -202001b3 +2040019d +202001af 5fffffff 60030040 70018533 704bb3ff 204042fb 704721ff -20200300 +202002fc c040000a c0408004 20600000 @@ -24924,17 +24924,17 @@ 20405839 2040582c 20405818 -204005e3 -204002f5 +204005e0 +204002f1 df200003 d8c0473f -20400367 -243402c1 +20400363 +243402bd df200003 d8c0475c -20400367 -243402c1 -204002c3 +20400363 +243402bd +204002bf 20600000 204074b9 d8c08c00 @@ -24990,8 +24990,8 @@ 7011a400 da20119e d8400007 -204001a1 -20400132 +2040019d +2040012e 20207fe7 6800cc53 c17f8000 @@ -25000,16 +25000,16 @@ c0098029 20600000 704c5302 -202000f6 +202000f2 704c5303 -202000f6 +202000f2 704c53ff 700a9939 20407d86 68024c23 -20400186 -202000f6 -20400488 +20400182 +202000f2 +20400485 70478b01 d8e00003 204043d2 @@ -25017,10 +25017,10 @@ 60014707 7046a700 2040405d -204002b2 +204002ae 68024c6b 6002477b -20200300 +202002fc c0500007 c050800f c0510022 @@ -25028,12 +25028,12 @@ c052002f 20600000 704d8300 -204002b2 -2040019c +204002ae +20400198 7041bd00 6800cb2e 247a0000 -20400263 +2040025f 2020340a 68014509 c1000000 @@ -25044,7 +25044,7 @@ 58000009 60014496 60014498 -20400464 +20400461 7047c601 20600000 68014682 @@ -25055,7 +25055,7 @@ c3828000 202033a7 6800cbba -205a050c +205a0509 704bba00 704b6a00 58000007 @@ -25063,24 +25063,24 @@ 60014498 7047c600 70479e00 -204003a7 +204003a3 20405816 -20400300 +204002fc 202041d9 68120138 79207e1a 6012004c 20402c21 204074bd -20400756 -20400300 +2040076a +204002fc 20403e9f -20400263 -2040034b +2040025f +20400347 68108081 1fe17ef7 60108081 -2020027b +20200277 c0588006 c059000c c0598011 @@ -25100,17 +25100,17 @@ 6800c7a1 c0008014 20200016 -20400464 +20400461 7046c60a d8e00001 202041b9 704bb901 704b2e0a -20400764 +20400778 704b0100 704b0300 704b0c00 -20400300 +204002fc 202041d9 6800cd8e c000add4 @@ -25121,12 +25121,12 @@ 600211a0 d8400006 da20119e -204001a1 -204001b3 -20400155 +2040019d +204001af +20400151 242c0026 24378026 -2040017b +20400177 68024c6b 680a4d88 98467c00 @@ -25134,29 +25134,29 @@ 6800cc41 c1840000 704d9300 -204002b2 +204002ae 68024c6b 680a4c4f 98467c00 -20228194 +20228190 68024c6b 680a4c7a 98467c00 20428024 704b6700 20402f20 -20400152 -20200371 +2040014e +2020036d 68024c23 -20200186 +20200182 6800cd81 1fe0fe01 1fe17e03 6000cd81 c000002d c0010037 -20200182 -204002b2 +2020017e +204002ae 68024c7a 60024c6b 6800cd91 @@ -25164,8 +25164,8 @@ 20400035 6008cd91 20600000 -20400187 -2020011d +20400183 +20200119 7041de20 68024d88 60024c6b @@ -25178,15 +25178,15 @@ c068800d 20600000 704bb900 -204002d2 +204002ce 20403410 704b6a01 6800c7a1 243a000b 704b6b14 -204003a7 +204003a3 202041c3 -20400232 +2040022e 24740000 20400022 68014d84 @@ -25195,7 +25195,7 @@ 68094d86 98467c00 20428017 -2020009d +2020009e 704d8300 58000000 60014d84 @@ -25213,4 +25213,4 @@ c0020020 c002801c 20600000 -00004ea7 +0000ec79 Index: output/sched.rom =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/sched.rom (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/output/sched.rom (working copy) @@ -55,7 +55,7 @@ mem_patch28:08 mem_patch29:04 mem_patch2a:80 -mem_patch2b:02 +mem_patch2b:06 mem_patch2c:c8 mem_patch2d:04 mem_patch2e:80 Index: program/patch.prog =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/program/patch.prog (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/program/patch.prog (working copy) @@ -153,6 +153,7 @@ beq patch29_2,p_le_receive_skip beq patch2a_7,p_le_update_param beq patch2b_1,p_le_update_channel_map + beq patch2b_2,p_le_acknowledge beq patch2c_3,p_le_prepare_tx beq patch2c_6,p_le_parse beq patch2c_7,p_le_parse_l2cap @@ -342,13 +343,13 @@ store 1,mem_24g_data_type rtn -p_g24_hop_ch_enable: - fetch 1,mem_24g_data_type - set1 bit_hop,pdata - store 1,mem_24g_data_type - //update txpayload - store 1,mem_24g_txpayload - rtn +//p_g24_hop_ch_enable: +// fetch 1,mem_24g_data_type +// set1 bit_hop,pdata +// store 1,mem_24g_data_type +// //update txpayload +// store 1,mem_24g_txpayload +// rtn p_g24_hop_enable_packet: fetch 1,mem_24g_data_type @@ -1741,7 +1742,7 @@ fetcht 1,mem_config_sensor_type sub temp,P3212,null call p_mouse_P3212_dpi_led_set,zero - increase 1,pdata + increase 2,pdata store 1,mem_mouse_multi_led_blink_count call p_mouse_dpi_multi_led_blink branch mouse_seting_dpi @@ -1751,6 +1752,7 @@ p_mouse_P3212_dpi_led_set: mul32 pdata,2,pdata + increase -1,pdata rtn @@ -2505,6 +2507,7 @@ store 1,mem_le_md_count beq LE_MD_MAX_COUNT,le_slave_cont call le_acknowledge + bmark1 mark_le_decrypt_fail,le_slave_cont call le_prepare_tx call power_ctrl_start branch le_slave_match+7 @@ -2530,6 +2533,35 @@ jam ZCODE_41,mem_zcode_temp_param0 branch p_zcode_entrance + +p_le_acknowledge: + set0 mark_le_decrypt_fail,mark + call le_supervision_flush + call le_check_wak + fetch 1,mem_le_rxbuf + isolate1 md,pdata + setflag true,mark_ble_rx_md,mark + rshift pdata,pdata + ixor temp,pdata + isolate1 nesn,pdata + setflag true,mark_old_packet,mark /* retransmit */ + rtnmark1 mark_old_packet + fetch 1,mem_le_rxbuf+1 + branch le_ack_unenc,blank /* empty packet, no decryption */ + fetch 1,mem_le_state + bbit0 lestate_encryption,le_ack_unenc + call load_sk + call le_decrypt + nbranch p_le_decrypt_fail,blank + branch le_ack_unenc + +p_le_decrypt_fail: + set1 mark_le_decrypt_fail,mark + fetcht 1,mem_le_arq + setflip sn,temp + storet 1,mem_le_arq + rtn + p_le_prepare_tx: fetch 1,mem_le_arq bbit1 wak,p_le_prepare_tx_wak @@ -2740,9 +2772,7 @@ iand temp,pdata add pdata,250,pdata call delay - arg le_adv_interval_timer,queue - fetch 2,mem_le_adv_interval - branch timer_init + branch le_adv_not_match+10 //p_le_adv_random_delay: // random pdata // arg 0x1ff,temp Index: sched/mouse.dat =================================================================== --- /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/sched/mouse.dat (revision 5566) +++ /branch/mouse_project/LeXiang/1066_Project/PBSwitch_2mode_3ch_D1050E7/sched/mouse.dat (working copy) @@ -18,7 +18,7 @@ mem_patch28:08 mem_patch29:04 mem_patch2a:80 -mem_patch2b:02 +mem_patch2b:06 mem_patch2c:c8 mem_patch2d:04 mem_patch2e:80