include "bt_format " org 0x0000 0x0 000039 bmark1 mark_ext_patch ,patch_ext 0x1 000040 beq patch00_0 ,p_soft_reset 0x2 000041 beq patch00_2 ,p_soft_reset_2 0x3 000042 beq patch00_3 ,p_main_loop 0x4 000043 beq patch00_5 ,p_main_loop_end 0x5 000046 beq patch12_0 ,p_shutdown_radio 0x6 000047 beq patch12_2 ,p_set_freq_rx 0x7 000048 beq patch12_4 ,p_set_freq_tx 0x8 000049 beq patch12_5 ,p_initialize_radio_cont 0x9 000050 beq patch16_0 ,p_lpm_sleep 0xa 000051 beq patch16_1 ,p_lpm_recover_clk 0xb 000052 beq patch16_2 ,p_lpm_dispatch 0xc 000053 beq patch16_3 ,p_lpm_dispatch_next 0xd 000054 beq patch16_6 ,p_lpm_dispatch_unconn 0xe 000055 beq patch17_1 ,p_lpm_cal_xtal_startup 0xf 000056 branch assert : 000058 patch_ext: 0x10 000059 beq patch26_2 ,p_le_init_conn 0x11 000060 beq patch27_3 ,le_slave_unsync + 3 0x12 000061 beq patch27_6 ,p_le_enable 0x13 000062 beq patch27_7 ,p_le_disable 0x14 000063 beq patch29_2 ,p_lerx_nopayload 0x15 000064 beq patch29_3 ,p_le_transmit_receive_sifs 0x16 000065 beq patch29_4 ,p_le_transmit 0x17 000066 beq patch29_6 ,p_le_send_adv_ind 0x18 000067 beq patch2a_6 ,p_le_update_param 0x19 000068 beq patch2b_2 ,p_le_check_wak 0x1a 000069 beq patch2c_1 ,p_le_prepare_tx 0x1b 000070 beq patch2c_3 ,p_le_prepare_tx_cmd 0x1c 000071 beq patch2c_4 ,p_le_prepare_smp 0x1d 000072 beq patch2c_5 ,p_le_prepare_att 0x1e 000073 beq patch2d_1 ,p_le_send_non_l2cap 0x1f 000074 beq patch2d_2 ,p_le_parse 0x20 000075 beq patch2d_3 ,p_le_parse_ll 0x21 000076 beq patch2d_6 ,p_le_parse_smp 0x22 000077 beq patch2d_7 ,p_le_parse_att 0x23 000078 beq patch30_7 ,p_ui_timer_check 0x24 000079 beq patch31_5 ,p_check_51cmd_once 0x25 000080 beq patch31_6 ,p_check_51cmd_once_continue 0x26 000081 beq patch31_7 ,p_check_enter_hibernate 0x27 000082 beq patch37_5 ,p_fifo_in 0x28 000083 beq patch39_5 ,p_kb_init 0x29 000084 beq patch39_7 ,p_app_process_bb_event 0x2a 000085 beq patch3a_0 ,p_kb_bb_event_timer 0x2b 000086 branch assert : 000089 p_soft_reset: 0x2c 000090 hfetch 1 ,0x813b 0x2d 000091 store 1 ,mem_wakup_from_power_flag 0x2e 000092 hjam lock_otp ,core_misc_ctrl 0x2f 000093 branch soft_reset + 2 : 000095 p_soft_reset_2: 0x30 000096 call sp_initialize 0x31 000097 call lpm_recover_clk ,wake : 000098 p_sp_cal_loop: 0x32 000099 call sp_calc_sequence 0x33 000100 fetch 1 ,mem_ssp_enable 0x34 000101 branch main_loop ,blank 0x35 000102 fetch 1 ,mem_sp_local_key_invalid 0x36 000103 branch p_sp_cal_loop ,blank 0x37 000104 branch main_loop : 000108 p_main_loop: 0x38 000109 call p_ipc_timer_check 0x39 000110 call p_ui_check_timer_setup 0x3a 000111 call p_ipc_rx 0x3b 000112 call p_bt_status_handle 0x3c 000113 branch main_loop + 2 : 000115 p_bt_status_handle: 0x3d 000116 fetcht 2 ,mem_ui_state_map 0x3e 000117 fetch 1 ,mem_le_adv_enable 0x3f 000118 nsetflag blank ,ui_state_ble_adv ,temp 0x40 000119 storet 2 ,mem_ui_state_map 0x41 000120 rtn : 000122 p_main_loop_end: 0x42 000123 call inquiry_scan_dispatch 0x43 000124 call page_scan_dispatch 0x44 000125 call connection_dispatch 0x45 000126 call p_g24_dispatch 0x46 000127 branch main_loop + 15 : 000130 p_ipc_rx: 0x47 000131 fetch 1 ,mem_ssp_enable 0x48 000132 branch p_ipc_rx0 ,blank 0x49 000133 fetch 1 ,mem_sp_local_key_invalid 0x4a 000134 rtn blank : 000135 p_ipc_rx0: 0x4b 000136 call p_check_ipc_2bt 0x4c 000137 rtn user 0x4d 000138 byteswap pdata ,pdata 0x4e 000139 copy pdata ,contr 0x4f 000140 call p_ipc_rx_byte 0x50 000141 store 1 ,mem_ipc_rx_type 0x51 000142 beq ipc_type_cmd ,p_ipc_rx_cmd 0x52 000143 beq ipc_type_24g ,p_ipc_rx_24g 0x53 000144 copy pdata ,temp 0x54 000145 copy contr ,rega 0x55 000146 fetch 1 ,mem_context 0x56 000147 bbit0 state_inconn ,p_ipc_abondon_rx_data 0x57 000148 copy rega ,contr 0x58 000149 rtnmark0 mark_context 0x59 000150 copy temp ,pdata 0x5a 000151 beq ipc_type_ble ,p_ipc_rx_ble 0x5b 000152 branch assert : 000154 p_ipc_abondon_rx_data: 0x5c 000155 copy rega ,contr 0x5d 000156 arg mem_tst_pktcnt_sync ,contw 0x5e 000157 branch p_ipc_rx_cpy : 000159 p_ipc_rx_cmd: 0x5f 000160 call p_ipc_rx_byte 0x60 000161 call p_ipc_rx_byte 0x61 000162 store 1 ,mem_fifo_temp 0x62 000163 call p_ipc_next_rx 0x63 000164 branch ui_ipc_send_cmd : 000165 p_ipc_next_rx: 0x64 000166 call p_ipc_rx_updata_contr 0x65 000167 copy contr ,temp 0x66 000168 byteswap temp ,temp 0x67 000169 storet 2 ,mem_ipc_2bt_read_index 0x68 000170 rtn : 000172 p_ipc_rx_24g: 0x69 000173 arg mem_24g_txbuf_new ,contw 0x6a 000174 branch p_ipc_rx_cpy : 000176 p_ipc_rx_ble: 0x6b 000177 copy contr ,rega : 000178 p_ipc_rx_ble_read_fifo: 0x6c 000179 fetch 1 ,mem_queue_write 0x6d 000180 add pdata ,1 ,temp 0x6e 000181 and temp ,0x03 ,temp 0x6f 000182 storet 1 ,mem_queue_write 0x70 000183 mul32 pdata ,7 ,pdata 0x71 000184 arg mem_uart_packet ,contw 0x72 000185 iadd contw ,contw 0x73 000187 copy rega ,contr 0x74 000188 call p_ipc_rx_byte 0x75 000189 copy contr ,rega 0x76 000190 increase -1 ,pdata 0x77 000191 copy pdata ,loopcnt 0x78 000192 increase 7 ,pdata 0x79 000193 store 1 ,mem_le51_tx_length 0x7a 000194 copy rega ,contr 0x7b 000195 call p_ipc_rx_byte 0x7c 000196 copy contr ,rega 0x7d 000197 beq 01 ,p_report1 0x7e 000198 beq 02 ,p_report2 0x7f 000199 beq 03 ,p_report3 0x80 000200 beq 04 ,p_report4 : 000201 p_report1: 0x81 000202 fetch 2 ,mem_att_report1 : 000203 p_set_report: 0x82 000204 call p_ipc_copy_2byte 0x83 000205 call le_xtype_fifo_is_near_full 0x84 000206 nrtn blank 0x85 000207 jam attop_handle_value_notification ,mem_fifo_temp 0x86 000208 branch le_xtype_fifo_in : 000210 p_report2: 0x87 000211 fetch 2 ,mem_att_report2 0x88 000212 branch p_set_report : 000213 p_report3: 0x89 000214 fetch 2 ,mem_att_report3 0x8a 000215 branch p_set_report : 000216 p_report4: 0x8b 000217 fetch 2 ,mem_att_report_battery 0x8c 000218 call p_ipc_copy_2byte 0x8d 000219 fetch 1 ,mem_le_battery_level_display_enable 0x8e 000220 rtn blank 0x8f 000221 branch p_set_report + 1 : 000223 p_ipc_copy_2byte: 0x90 000224 istore 2 ,contw 0x91 000225 copy rega ,contr 0x92 000226 branch p_ipc_copy : 000231 p_ui_check_timer_setup: 0x93 000232 fetcht 4 ,mem_ui_check_timer_setup 0x94 000233 copy clkn_bt ,pdata 0x95 000234 isub temp ,pdata 0x96 000235 fetcht 2 ,mem_customize_timer_setup 0x97 000236 idiv temp 0x98 000237 call wait_div_end 0x99 000238 quotient pdata 0x9a 000239 rtn blank 0x9b 000240 copy clkn_bt ,temp 0x9c 000241 storet 4 ,mem_ui_check_timer_setup 0x9d 000242 fetch 1 ,mem_customize_timer 0x9e 000243 increase 1 ,pdata 0x9f 000244 store 1 ,mem_customize_timer 0xa0 000245 rtn : 000250 p_ipc_timer_check: 0xa1 000251 fetcht 4 ,mem_ipc_last_check_timer 0xa2 000252 copy clkn_bt ,pdata 0xa3 000253 isub temp ,pdata 0xa4 000255 arg 1600 ,temp 0xa5 000256 idiv temp 0xa6 000257 call wait_div_end 0xa7 000258 quotient pdata 0xa8 000259 rtn blank 0xa9 000260 copy clkn_bt ,temp 0xaa 000261 storet 4 ,mem_ipc_last_check_timer 0xab 000262 fetcht 2 ,mem_ipc_bt_timer 0xac 000263 byteswap temp ,temp 0xad 000264 iadd temp ,pdata 0xae 000265 byteswap pdata ,pdata 0xaf 000266 store 2 ,mem_ipc_bt_timer 0xb0 000267 byteswap pdata ,pdata 0xb1 000268 and pdata ,0x3 ,pdata 0xb2 000269 rtnne 0 0xb3 000270 fetch 1 ,mem_adc_config_flag 0xb4 000271 bbit1 adc_config_vinlpm ,p_adc_check_vinlpm 0xb5 000272 bbit1 adc_config_hvin ,p_adc_check_hvin : 000273 p_adc_check_gpio: 0xb6 000274 arg 0 ,rega 0xb7 000275 call p_setup_adc_gpio_pu_setup 0xb8 000276 hjam 0x8f ,rf_adc_mode 0xb9 000277 fetch 1 ,mem_adc_channel 0xba 000278 hstore 1 ,rf_adc_ch 0xbb 000279 call p_read_adc 0xbc 000280 arg 1 ,rega 0xbd 000281 branch p_setup_adc_gpio_pu_setup : 000284 p_adc_check_vinlpm: 0xbe 000285 hjam 0xbf ,rf_adc_mode 0xbf 000286 branch p_read_adc : 000288 p_adc_check_hvin: 0xc0 000289 hjam 0xaf ,rf_adc_mode : 000290 p_read_adc: 0xc1 000291 hfetch 1 ,core_uart_baud + 1 0xc2 000292 set1 7 ,pdata 0xc3 000293 hstore 1 ,core_uart_baud + 1 0xc4 000294 hfetch 1 ,rf_adc_ch 0xc5 000295 or_into 0x30 ,pdata 0xc6 000296 hstore 1 ,rf_adc_ch 0xc7 000297 hjam 0x74 ,rfen_adc 0xc8 000298 hjam 0x7c ,rfen_adc 0xc9 000299 hjam 0xaa ,rf_adc_gc 0xca 000300 nop 5000 0xcb 000301 hfetcht 2 ,core_adc_sum 0xcc 000302 hfetch 1 ,core_uart_baud + 1 0xcd 000303 set0 7 ,pdata 0xce 000304 hstore 1 ,core_uart_baud + 1 0xcf 000305 byteswap temp ,temp 0xd0 000306 storet 2 ,mem_adc_current_value 0xd1 000307 rtn : 000310 p_setup_adc_gpio_pu_setup: 0xd2 000311 arg 0x21 ,temp 0xd3 000312 fetch 1 ,mem_adc_channel 0xd4 000313 isub temp ,temp 0xd5 000314 copy rega ,pdata 0xd6 000315 set1 gpio_active_bit ,temp 0xd7 000316 nbranch p_setup_adc_gpio_pu_setup_exit ,blank 0xd8 000317 set0 gpio_active_bit ,temp : 000318 p_setup_adc_gpio_pu_setup_exit: 0xd9 000319 arg core_gpio_pu0 ,contw 0xda 000320 branch gpio_set_bit : 000324 p_ipc_rx_cpy: 0xdb 000325 call p_ipc_rx_byte 0xdc 000326 copy pdata ,loopcnt : 000327 p_ipc_copy: 0xdd 000328 call p_ipc_cpy_loop 0xde 000329 branch p_ipc_next_rx : 000331 p_ipc_cpy_loop: 0xdf 000332 call p_ipc_rx_byte 0xe0 000333 istore 1 ,contw 0xe1 000334 loop p_ipc_cpy_loop 0xe2 000335 rtn : 000337 p_ipc_rx_byte: 0xe3 000338 call p_ipc_rx_updata_contr 0xe4 000339 ifetch 1 ,contr 0xe5 000340 rtn : 000342 p_ipc_rx_updata_contr: 0xe6 000343 setarg mem_ipc_2bt_fifo_end 0xe7 000344 isub contr ,null 0xe8 000345 nrtn zero 0xe9 000346 arg mem_ipc_2bt_fifo_head ,contr 0xea 000347 rtn : 000349 p_ipc_tx_evt: 0xeb 000350 arg 3 ,loopcnt 0xec 000351 arg mem_ipc_tx_evt_buff ,contr : 000352 p_ipc_tx_cpy: 0xed 000353 copy contr ,rega 0xee 000354 fetch 2 ,mem_ipc_2c51_write_index 0xef 000355 byteswap pdata ,pdata 0xf0 000356 copy pdata ,contw 0xf1 000357 copy rega ,contr : 000358 p_ipc_tx_loop: 0xf2 000359 ifetch 1 ,contr 0xf3 000360 istore 1 ,contw 0xf4 000361 call p_ipc_tx_updata_contw 0xf5 000362 loop p_ipc_tx_loop 0xf6 000363 copy contw ,pdata 0xf7 000364 byteswap pdata ,pdata 0xf8 000365 store 2 ,mem_ipc_2c51_write_index 0xf9 000366 rtn : 000367 p_ipc_tx_updata_contw: 0xfa 000368 setarg mem_ipc_2c51_fifo_end 0xfb 000369 isub contw ,null 0xfc 000370 nrtn zero 0xfd 000371 arg mem_ipc_2c51_fifo_head ,contw 0xfe 000372 rtn : 000375 p_check_ipc_2c51: 0xff 000376 fetch 2 ,mem_ipc_2c51_read_index 0x100 000377 fetcht 2 ,mem_ipc_2c51_write_index 0x101 000378 branch p_check_ipc_common : 000379 p_check_ipc_2bt: 0x102 000380 fetch 2 ,mem_ipc_2bt_read_index 0x103 000381 fetcht 2 ,mem_ipc_2bt_write_index : 000382 p_check_ipc_common: 0x104 000383 isub temp ,null 0x105 000384 branch enable_usr ,zero 0x106 000385 branch disable_usr : 000388 p_ui_timer_check: 0x107 000389 copy clkn_bt ,pdata 0x108 000390 store 4 ,mem_ui_timer_last_btclk_temp 0x109 000391 fetcht 1 ,mem_ui_timer_last_btclk + 3 0x10a 000392 fetch 1 ,mem_ui_timer_last_btclk_temp + 3 0x10b 000393 isub temp ,null 0x10c 000394 ncall p_ui_timer_reinit ,positive 0x10d 000395 branch ui_timer_check + 2 : 000397 p_ui_timer_reinit: 0x10e 000398 fetcht 4 ,mem_ui_timer_last_btclk_temp 0x10f 000399 storet 4 ,mem_ui_timer_last_btclk 0x110 000400 storet 4 ,mem_ipc_last_check_timer 0x111 000401 storet 4 ,mem_ui_check_timer_setup 0x112 000402 rtn : 000405 p_app_process_bb_event: 0x113 000406 arg mem_ipc_fifo_bt2c51 ,rega 0x114 000407 call fifo_out 0x115 000408 rtn blank 0x116 000410 copy pdata ,regc 0x117 000411 call p_app_event_normal_process 0x118 000412 branch app_process_bb_event_priority : 000413 p_app_event_normal_process: 0x119 000414 rtneq bt_evt_linkkey_generate 0x11a 000415 beq bt_evt_le_connected ,scale_process_le_conn 0x11b 000416 beq bt_evt_le_start_enc ,p_mouse_le_ll_start_encryt 0x11c 000417 beq bt_evt_le_disconnected ,p_scale_process_le_discon 0x11d 000418 branch app_event_normal_process : 000420 p_mouse_le_ll_start_encryt: 0x11e 000421 jam 5 ,mem_le_start_auto_reco_timer 0x11f 000422 rtn : 000426 p_kb_bb_event_timer: 0x120 000427 storet 1 ,mem_app_evt_timer_count 0x121 000428 fetch 1 ,mem_ipc_bt_100ms_timer 0x122 000429 increase 1 ,pdata 0x123 000430 store 1 ,mem_ipc_bt_100ms_timer : 000431 p_kb_bb_event_100ms_loop: 0x124 000432 fetch 1 ,mem_app_evt_timer_count 0x125 000433 rtn blank 0x126 000434 increase -1 ,pdata 0x127 000435 store 1 ,mem_app_evt_timer_count 0x128 000437 call p_kb_long_sleep_timer 0x129 000438 branch p_kb_bb_event_100ms_loop : 000441 p_kb_long_sleep_timer: 0x12a 000442 fetch 1 ,mem_24g_enter_lpm_timer 0x12b 000443 rtn blank 0x12c 000444 increase -1 ,pdata 0x12d 000445 store 1 ,mem_24g_enter_lpm_timer 0x12e 000446 rtn : 000449 p_c51_user_event: 0x12f 000450 copy regc ,pdata 0x130 000451 and_into bt_evt_timer_mask ,pdata 0x131 000452 rtneq bt_evt_timer_init 0x132 000453 copy regc ,pdata 0x133 000454 rtn blank 0x134 000455 store 1 ,mem_ipc_tx_evt 0x135 000456 branch p_ipc_tx_evt : 000465 p_lpm_recover_clk: 0x136 000466 jam 0x7f ,mem_seqi 0x137 000467 call lpm_recover_clk + 2 0x138 000468 fetch 1 ,mem_hibernate_flag 0x139 000469 rtn blank 0x13a 000470 jam 0 ,mem_hibernate_flag 0x13b 000471 copy clkn_bt ,pdata 0x13c 000472 store 4 ,mem_ipc_last_check_timer 0x13d 000473 rtn : 000477 p_lpm_cal_xtal_startup: 0x13e 000478 fetch 1 ,mem_lpm_xtalcnt 0x13f 000479 nrtn blank 0x140 000480 hjam clksel_rc ,core_clksel 0x141 000481 setarg 0xf0c 0x142 000482 call lpm_write_config 0x143 000483 setarg 200000 0x144 000484 call sleep 0x145 000485 until null ,lpo_edge 0x146 000486 copy lpo_time ,alarm 0x147 000487 call xtal_fast_wake 0x148 000488 nop 5000 0x149 000489 branch lpm_cal_xtal_startup + 12 : 000492 p_lpm_dispatch: 0x14a 000493 rtnmark1 mark_24g 0x14b 000494 fetch 2 ,mem_ui_state_map 0x14c 000495 bbit1 ui_state_ble_connected ,lpm_dispatch + 2 0x14d 000496 call lpo_calibration 0x14e 000497 fetch 3 ,mem_clks_per_lpo 0x14f 000498 rtn blank 0x150 000501 fetch 1 ,mem_lpm_mode 0x151 000502 rtn blank 0x152 000504 call l2cap_malloc_is_fifo_empty 0x153 000505 nrtn blank 0x154 000506 call lpm_check_wake_lock 0x155 000507 nrtn blank 0x156 000508 call xtal_fast_wake 0x157 000509 fetch 1 ,mem_ssp_enable 0x158 000510 branch lpm_dispatch0 ,blank 0x159 000511 fetch 1 ,mem_sp_local_key_invalid 0x15a 000512 rtn blank 0x15b 000513 branch lpm_dispatch0 : 000515 p_check_ipc_for_lpm: 0x15c 000516 call p_check_ipc_2bt 0x15d 000517 nrtn user 0x15e 000518 call p_check_ipc_2c51 0x15f 000519 nrtn user 0x160 000520 jam 1 ,mem_c51_lpm_lock 0x161 000521 jam syc_task_lpm ,mem_c51_flag 0x162 000522 call p_c51_wait 0x163 000523 branch p_check_ipc_2bt : 000525 p_lpm_dispatch_next: 0x164 000526 call p_check_ipc_for_lpm 0x165 000527 nrtn user 0x166 000528 fetch 1 ,mem_c51_lpm_lock 0x167 000529 nrtn blank 0x168 000530 branch lpm_dispatch1 : 000532 p_c51_wait: 0x169 000533 fetch 1 ,mem_c51_flag 0x16a 000534 nop 10 0x16b 000535 bne 0 ,p_c51_wait 0x16c 000536 rtn : 000539 p_lpm_dispatch_unconn: 0x16d 000540 call p_check_ipc_for_lpm 0x16e 000541 nrtn user 0x16f 000542 fetch 1 ,mem_c51_lpm_lock 0x170 000543 nrtn blank 0x171 000544 branch lpm_dispatch_unconn + 2 : 000548 p_initialize_radio_cont: 0x172 000549 call p_switchto_dpllclk 0x173 000550 branch initialize_radio_cont + 4 : 000551 p_switchto_dpllclk: 0x174 000552 fetch 1 ,mem_lpm_xtalcnt 0x175 000553 nbranch p_switchdpll_nocal ,blank 0x176 000554 call lpm_cal_xtal_startup 0x177 000555 nop 30000 0x178 000556 nop 30000 0x179 000557 nop 30000 : 000558 p_switchdpll_nocal: 0x17a 000559 call switchto_dpllclk 0x17b 000560 hjam clksel_xtal ,core_clksel 0x17c 000561 hfetch 1 ,rf_clkpll_frac + 2 0x17d 000562 and_into 0xcf ,pdata 0x17e 000563 hstore 1 ,rf_clkpll_frac + 2 0x17f 000564 or_into 0x30 ,pdata 0x180 000565 hstore 1 ,rf_clkpll_frac + 2 0x181 000566 rtn : 000570 p_set_freq_rx: 0x182 000571 storet 1 ,mem_last_freq 0x183 000572 add temp ,rx_freq_offset ,rega 0x184 000573 branch set_freq_rx + 4 : 000575 p_set_freq_tx_common: 0x185 000576 storet 1 ,mem_last_freq 0x186 000577 add temp ,0 ,rega 0x187 000578 branch rf_write_freq : 000580 p_set_freq_tx: 0x188 000581 call p_set_freq_tx_common 0x189 000582 setarg param_pll_setup 0x18a 000583 call sleep : 000584 p_txon: 0x18b 000585 hjam 0x1 ,rfen_adc 0x18c 000586 hjam 0x3c ,rfen_rx 0x18d 000587 hjam 0xe0 ,rfen_tx 0x18e 000588 hjam 0x12 ,0x96d 0x18f 000589 nop 10 0x190 000590 hjam 0x01 ,rfen_mdm 0x191 000591 hjam 0x3d ,rfen_mdm 0x192 000592 nop 10 0x193 000593 hjam 0xb7 ,rfen_sn 0x194 000594 nop 10 0x195 000595 hjam 0x7d ,rfen_mdm 0x196 000596 fetch 1 ,mem_24g_pairing_sm 0x197 000597 bne state_24g_pairing_success ,p_txpower_0dbm 0x198 000598 fetch 5 ,mem_5db_tx_power_param 0x199 000599 istore 5 ,contw 0x19a 000600 ifetch 5 ,contr 0x19b 000601 istore 5 ,contw 0x19c 000602 hjam 0xdf ,0x956 0x19d 000603 call p_set_tx_step_power 0x19e 000604 hjam 0xdf ,0x955 0x19f 000605 rtn : 000607 p_txpower_0dbm: 0x1a0 000608 fetch 5 ,mem_24g_paring_tx_power_param 0x1a1 000609 istore 5 ,contw 0x1a2 000610 ifetch 5 ,contr 0x1a3 000611 istore 5 ,contw 0x1a4 000612 fetch 1 ,mem_pair_state 0x1a5 000613 call p_txpower_0dbm_default_set ,blank 0x1a6 000614 hstore 1 ,0x8956 0x1a7 000616 hjam 0xd0 ,0x955 0x1a8 000617 rtn : 000619 p_txpower_0dbm_default_set: 0x1a9 000620 setarg 0xc2 0x1aa 000621 rtn : 000626 p_set_tx_step_power: 0x1ab 000628 nop 4 0x1ac 000629 hjam 0xd1 ,0x955 0x1ad 000630 nop 4 0x1ae 000631 hjam 0xd2 ,0x955 0x1af 000632 nop 4 0x1b0 000633 hjam 0xd4 ,0x955 0x1b1 000634 nop 4 0x1b2 000637 rtn : 000639 p_tx_ramp_down_common: 0x1b3 000640 hjam 0xd4 ,0x955 0x1b4 000641 nop 4 0x1b5 000642 hjam 0xd2 ,0x955 0x1b6 000643 nop 4 0x1b7 000644 hjam 0xd1 ,0x955 0x1b8 000645 nop 4 0x1b9 000646 hjam 0xd0 ,0x955 0x1ba 000647 hjam 0xc0 ,0x956 0x1bb 000648 rtn : 000650 p_shutdown_radio: 0x1bc 000651 branch shutdown_radio + 2 ,is_rx 0x1bd 000652 call p_tx_ramp_down_common 0x1be 000653 branch shutdown_radio + 2 : 000656 p_kb_before_hibernate: 0x1bf 000657 enable user 0x1c0 000658 hfetch 4 ,0x8138 0x1c1 000659 setflag user ,26 ,pdata 0x1c2 000660 hstore 4 ,core_lpm_reg 0x1c3 000661 call lpm_write_ctrl 0x1c4 000662 jam 1 ,mem_lpm_current_mult : 000663 p_kb_bt_lpm_before: 0x1c5 000664 rtn : 000666 p_kb_init: 0x1c6 000667 fetch 1 ,mem_le_name_len 0x1c7 000668 increase 2 ,pdata 0x1c8 000669 store 1 ,mem_le_scan_data_len 0x1c9 000670 jam 0 ,mem_c51_flag 0x1ca 000671 jam 6 ,mem_connection_options 0x1cb 000672 call app_lpm_mult_enable 0x1cc 000673 setarg p_kb_bt_lpm_before 0x1cd 000674 store 2 ,mem_cb_before_lpm 0x1ce 000675 setarg p_c51_user_event 0x1cf 000676 store 2 ,mem_cb_bb_event_process 0x1d0 000677 setarg p_mouse_idle 0x1d1 000678 store 2 ,mem_cb_idle_process 0x1d2 000679 setarg p_ipc_rx 0x1d3 000680 store 2 ,mem_cb_le_process 0x1d4 000681 setarg p_kb_before_hibernate 0x1d5 000682 store 2 ,mem_cb_before_hibernate 0x1d6 000683 setarg mem_ipc_2bt_fifo_head 0x1d7 000684 byteswap pdata ,pdata 0x1d8 000685 store 2 ,mem_ipc_2bt_read_index 0x1d9 000686 store 2 ,mem_ipc_2bt_write_index 0x1da 000687 call lpm_disable_exen_output 0x1db 000688 setarg mem_ipc_2c51_fifo_head 0x1dc 000689 byteswap pdata ,pdata 0x1dd 000690 store 2 ,mem_ipc_2c51_read_index 0x1de 000691 store 2 ,mem_ipc_2c51_write_index 0x1df 000692 fetch 1 ,mem_hibernate_flag 0x1e0 000693 beq 0x5a ,p_device_init_init_hibwake 0x1e1 000694 branch p_deveice_init_wake ,wake 0x1e2 000695 fetch 2 ,mem_adc_0v 0x1e3 000696 byteswap pdata ,pdata 0x1e4 000697 store 2 ,mem_adc_0v 0x1e5 000698 fetch 2 ,mem_adc_3v 0x1e6 000699 byteswap pdata ,pdata 0x1e7 000700 store 2 ,mem_adc_3v 0x1e8 000701 call p_init_adc_from_otp 0x1e9 000702 fetch 8 ,mem_temp 0x1ea 000703 nbranch p_deveice_init_reset ,blank 0x1eb 000704 fetch 2 ,0x4ad4 0x1ec 000705 byteswap pdata ,pdata 0x1ed 000706 branch p_deveice_init_reset ,blank 0x1ee 000707 store 2 ,mem_adc_3v : 000708 p_deveice_init_reset: 0x1ef 000709 call p_le_queue_init 0x1f0 000710 jam bt_evt_reset ,mem_ipc_tx_evt : 000711 p_device_init_common: 0x1f1 000712 call p_ipc_tx_evt 0x1f2 000713 jam 0 ,mem_hibernate_flag 0x1f3 000714 hjam start_c51_core ,core_docd_ctrl 0x1f4 000715 rtn : 000716 p_deveice_init_wake: 0x1f5 000717 jam bt_evt_wakeup ,mem_ipc_tx_evt 0x1f6 000718 branch p_device_init_common : 000719 p_device_init_init_hibwake: 0x1f7 000720 copy auxcnt ,pdata 0x1f8 000721 branch p_enter_hibernate_continue ,blank 0x1f9 000722 call init_lmp_work 0x1fa 000723 call l2cap_init_work 0x1fb 000724 setarg 0 0x1fc 000725 store 8 ,mem_context 0x1fd 000726 store 2 ,mem_ui_state_map 0x1fe 000727 copy clkn_bt ,pdata 0x1ff 000728 store 4 ,mem_ipc_last_check_timer 0x200 000729 jam bt_evt_hibernate_wake ,mem_ipc_tx_evt 0x201 000730 branch p_device_init_common : 000732 p_init_adc_from_otp: 0x202 000733 call otp_enable_chgpump 0x203 000734 setarg 0x7e0 0x204 000735 arg mem_temp ,rega 0x205 000736 arg 14 ,temp 0x206 000737 call otpd_read_data 0x207 000738 call otp_disable_chgpump 0x208 000739 fetch 1 ,mem_temp 0x209 000740 bbit1 1 ,assert 0x20a 000741 fetch 8 ,mem_temp + 2 0x20b 000742 rtn blank 0x20c 000743 fetch 1 ,mem_adc_config_flag 0x20d 000744 bbit1 adc_config_vinlpm ,p_calc_adc_base_vinlpm 0x20e 000745 bbit1 adc_config_hvin ,p_calc_adc_base_hvin : 000746 p_calc_adc_check_gpio: 0x20f 000747 fetch 2 ,mem_temp + 2 0x210 000748 byteswap pdata ,pdata 0x211 000749 store 2 ,mem_adc_0v 0x212 000750 fetch 2 ,mem_temp + 8 0x213 000751 byteswap pdata ,pdata 0x214 000752 store 2 ,mem_adc_3v 0x215 000753 rtn : 000754 p_calc_adc_base_vinlpm: 0x216 000755 fetcht 2 ,mem_temp + 6 0x217 000756 fetch 2 ,mem_temp + 12 0x218 000757 copy temp ,regb 0x219 000758 copy pdata ,rega 0x21a 000759 byteswap pdata ,pdata 0x21b 000760 store 2 ,mem_adc_3v 0x21c 000761 copy rega ,pdata 0x21d 000762 isub temp ,regc 0x21e 000763 lshift regc ,regc 0x21f 000764 copy regb ,pdata 0x220 000765 isub regc ,pdata 0x221 000766 byteswap pdata ,pdata 0x222 000767 store 2 ,mem_adc_0v 0x223 000768 rtn : 000770 p_calc_adc_base_hvin: 0x224 000771 fetcht 2 ,mem_temp + 4 0x225 000772 fetch 2 ,mem_temp + 10 0x226 000773 copy temp ,regb 0x227 000774 copy pdata ,rega 0x228 000775 isub temp ,regc 0x229 000776 rshift2 regc ,regc 0x22a 000777 copy regb ,pdata 0x22b 000778 isub regc ,pdata 0x22c 000779 byteswap pdata ,pdata 0x22d 000780 store 2 ,mem_adc_0v 0x22e 000781 lshift regc ,regc 0x22f 000782 copy rega ,pdata 0x230 000783 isub regc ,pdata 0x231 000784 byteswap pdata ,pdata 0x232 000785 store 2 ,mem_adc_3v 0x233 000786 rtn : 000789 p_le_enable: 0x234 000790 jam 39 ,mem_le_ch_mapped 0x235 000791 hjam 0x36 ,0x90f 0x236 000792 hjam 0x5f ,0x90b 0x237 000793 branch le_enable + 2 : 000794 p_le_disable: 0x238 000795 hjam 0x2e ,0x90f 0x239 000796 hjam 0xff ,0x90b 0x23a 000797 branch le_disable + 2 : 000800 p_mouse_idle: 0x23b 000801 rtn : 000802 p_check_enter_hibernate: 0x23c 000803 fetch 2 ,mem_ipc_2c51_write_index 0x23d 000804 store 2 ,mem_ipc_2c51_read_index 0x23e 000805 fetch 2 ,mem_ipc_2bt_write_index 0x23f 000806 store 2 ,mem_ipc_2bt_read_index 0x240 000807 jam syc_task_hibernate ,mem_c51_flag 0x241 000808 call p_c51_wait : 000809 p_enter_hibernate_continue: 0x242 000812 jam 0x5a ,mem_hibernate_flag 0x243 000813 call lpm_write_gpio_wakeup 0x244 000814 hfetch 4 ,core_lpm_ctrl 0x245 000815 set0 15 ,pdata 0x246 000816 hstore 4 ,core_lpm_reg 0x247 000817 call lpm_write_ctrl 0x248 000818 arg param_hibernate_clks ,temp 0x249 000819 branch lpm_sleep : 000821 p_fifo_in: 0x24a 000822 ifetcht util_fifo_len ,rega 0x24b 000823 and temp ,0xff ,pdata 0x24c 000824 nbranch p_fifo_in_push ,blank 0x24d 000825 rshift8 temp ,pdata 0x24e 000826 istore util_fifo_len ,rega : 000827 p_fifo_in_push: 0x24f 000828 increase util_fifo_len + util_fifo_offset ,rega 0x250 000829 ifetch 1 ,rega 0x251 000830 nrtn ,blank 0x252 000831 branch fifo_in_push + 3 : 000836 p_check_51cmd_once: 0x253 000837 call ui_ipc_get_lock 0x254 000838 arg mem_ipc_fifo_c512bt ,rega 0x255 000839 call fifo_out 0x256 000840 copy pdata ,temp 0x257 000841 call ui_ipc_put_lock 0x258 000842 copy temp ,pdata 0x259 000843 rtn blank 0x25a 000844 beq bt_cmd_start_24g ,p_check_51cmd_start24g 0x25b 000845 beq bt_cmd_stop_24g ,p_check_51cmd_stop24g 0x25c 000846 beq bt_cmd_pair_24g ,p_g24_start_pairing_sm1 0x25d 000848 beq bt_cmd_start_adv ,p_check_51cmd_start_adv 0x25e 000849 beq bt_cmd_start_adv_discovery ,p_check_51cmd_start_adv 0x25f 000850 beq bt_cmd_start_adv_rec ,p_handle_adv_1 0x260 000851 beq bt_cmd_set_reconnect_init ,p_disconnect_connected_device 0x261 000852 beq bt_cmd_le_update_conn ,bt_cmd_le_update_conn_1 0x262 000853 beq bt_cmd_ancs_delay_timer ,p_le_send_att_find_by_type_value_request_fifo_in 0x263 000854 branch check_51cmd_once + 9 : 000855 p_check_51cmd_start24g: 0x264 000856 jam state_24g_pairing_success ,mem_24g_pairing_sm 0x265 000857 branch p_g24_start_24g_mode : 000858 p_check_51cmd_stop24g: 0x266 000859 set0 mark_24g ,mark 0x267 000860 jam state_24g_pairing_success ,mem_24g_pairing_sm 0x268 000861 branch p_g24_stop_g24_mode : 000864 p_slave_ble_disconnect: 0x269 000865 jam xt_ll_terminate_ind ,mem_fifo_temp 0x26a 000866 branch le_xtype_fifo_in : 000868 p_check_51cmd_once_continue: 0x26b 000869 fetch 1 ,mem_lmo_opcode2 0x26c 000870 branch p_check_51cmd_once_continue0 ,blank 0x26d 000871 call lmo_fifo_process 0x26e 000872 fetch 1 ,mem_lmo_opcode2 0x26f 000873 nbranch check_51cmd_restore ,blank : 000874 p_check_51cmd_once_continue0: 0x270 000875 fetch 1 ,mem_fifo_temp 0x271 000876 bmark0 mark_context ,check_51cmd_check_idle 0x272 000878 beq bt_cmd_le_disconnect ,p_slave_ble_disconnect 0x273 000880 branch check_51cmd_once_continue0 : 000881 p_check_51cmd_start_adv: 0x274 000882 call app_clear_reconnect_flag 0x275 000883 call check_51cmd_bb_reconn_cancel 0x276 000884 jam 0 ,mem_lpm_mode 0x277 000885 random pdata 0x278 000886 store 1 ,mem_le_lap : 000887 p_handle_adv_0: 0x279 000888 jam 5 ,mem_le_adv_data + 2 0x27a 000889 setarg 0x181203 0x27b 000890 store 3 ,mem_le_adv_data + 8 0x27c 000892 arg 7 ,temp 0x27d 000893 call p_le_adv_data_update 0x27e 000894 branch check_51cmd_adv : 000896 p_handle_adv_1: 0x27f 000897 jam 4 ,mem_le_adv_data + 2 0x280 000898 setarg 0x0000ff 0x281 000899 store 3 ,mem_le_adv_data + 8 0x282 000901 arg 0 ,temp 0x283 000902 call p_le_adv_data_update 0x284 000903 branch check_51cmd_adv : 000905 p_le_adv_data_update: 0x285 000906 fetch 1 ,mem_le_scan_data_len 0x286 000907 iadd temp ,pdata 0x287 000908 add pdata ,11 ,pdata 0x288 000909 sub pdata ,0x1f ,null 0x289 000910 nbranch p_le_adv_data_overflow ,positive 0x28a 000911 store 1 ,mem_le_adv_data_len 0x28b 000913 arg mem_le_adv_data + 11 ,contw 0x28c 000914 copy temp ,pdata 0x28d 000915 ncall p_handle_adv_swift_pair ,blank 0x28e 000917 fetch 1 ,mem_le_scan_data_len 0x28f 000918 copy pdata ,loopcnt 0x290 000919 arg mem_le_scan_data ,contr 0x291 000920 branch memcpy : 000923 p_handle_adv_swift_pair: 0x292 000924 copy pdata ,loopcnt 0x293 000925 arg mem_le_adv_swift_pair ,contr 0x294 000926 branch memcpy : 000928 p_le_adv_data_overflow: 0x295 000929 fetch 1 ,mem_le_scan_data_len 0x296 000930 add pdata ,11 ,pdata 0x297 000931 store 1 ,mem_le_adv_data_len 0x298 000932 rtn : 000934 p_disconnect_connected_device: 0x299 000936 fetch 2 ,mem_ui_state_map 0x29a 000937 bbit1 ui_state_ble_connected ,app_ble_disconnect 0x29b 000938 bbit1 ui_state_bt_reconnect ,check_51cmd_bb_reconn_cancel 0x29c 000939 bmark1 mark_24g ,p_g24_stop_g24_mode 0x29d 000940 jam off ,mem_le_adv_enable 0x29e 000941 call app_bt_stop_discovery 0x29f 000943 jam bt_evt_reconnect_standy ,mem_fifo_temp 0x2a0 000944 branch ui_ipc_send_event : 000948 p_lpm_sleep: 0x2a1 000949 call xtal_fast_wake 0x2a2 000950 branch lpm_sleep + 2 : 000961 p_hid_rx_process_data_hid_kb: 0x2a3 000962 ifetch 1 ,contr 0x2a4 000963 store 1 ,mem_caps_num_lock 0x2a5 000964 rtn : 000969 p_scale_process_le_discon: 0x2a6 000970 jam 0 ,mem_le_pause_enc_flag 0x2a7 000971 branch scale_process_le_discon : 000974 p_le_transmit_receive_sifs: 0x2a8 000975 call le_transmit 0x2a9 000976 fetcht 1 ,mem_last_freq 0x2aa 000977 call set_freq_rx 0x2ab 000978 call rf_rx_enable 0x2ac 000979 enable swfine 0x2ad 000980 arg 5500 ,timeup 0x2ae 000982 branch le_receive_rxon : 000984 p_le_init_conn: 0x2af 000985 jam 0x01 ,mem_le_txheader 0x2b0 000986 jam 0 ,mem_le_txlen 0x2b1 000987 branch le_init_conn + 2 : 000989 p_le_transmit: 0x2b2 000990 call le_prep 0x2b3 000991 call p_letx_setfreq 0x2b4 000992 branch le_transmit + 4 : 000994 p_letx_setfreq: 0x2b5 000995 branch p_txon ,match 0x2b6 000996 call le_setfreq 0x2b7 000997 branch set_freq_tx : 000999 p_le_send_adv_ind: 0x2b8 001000 fetch 1 ,mem_le_rx_window 0x2b9 001001 store 4 ,mem_le_transmit_window 0x2ba 001002 fetch 1 ,mem_le_adv_type 0x2bb 001003 beq adv_direct_ind ,p_le_send_adv_direct_ind 0x2bc 001004 branch le_send_adv_ind + 2 : 001005 p_le_send_adv_direct_ind: 0x2bd 001006 jam 0 ,mem_le_adv_type 0x2be 001007 branch le_send_adv_direct_ind : 001009 p_le_update_param: 0x2bf 001010 fetch 1 ,mem_le_state 0x2c0 001011 rtnbit0 lestate_update_param 0x2c1 001012 fetch 2 ,mem_le_event_count 0x2c2 001013 fetcht 2 ,mem_le_instant 0x2c3 001014 isub temp ,pdata 0x2c4 001015 nrtn positive 0x2c5 001016 branch le_update_param + 8 : 001019 p_le_prepare_tx: 0x2c6 001020 fetch 1 ,mem_le_arq 0x2c7 001021 rtnbit1 wak 0x2c8 001023 fetch 1 ,mem_le_rxbuf + 1 0x2c9 001024 branch le_prepare_tx + 4 ,blank 0x2ca 001025 branch le_send_empty : 001028 p_le_check_wak: 0x2cb 001029 fetcht 1 ,mem_le_arq 0x2cc 001030 isolate0 wak ,temp 0x2cd 001031 rtn true 0x2ce 001032 fetch 1 ,mem_le_rxbuf 0x2cf 001033 lshift pdata ,pdata 0x2d0 001034 ixor temp ,pdata 0x2d1 001035 rtnbit0 sn 0x2d2 001036 set0 wak ,temp 0x2d3 001037 setflip sn ,temp 0x2d4 001038 storet 1 ,mem_le_arq 0x2d5 001039 compare 3 ,temp ,3 0x2d6 001040 nrtn true 0x2d7 001041 fetch 1 ,mem_le_txpayload 0x2d8 001042 beq ll_start_enc_req ,p_le_set_enc 0x2d9 001043 fetch 1 ,mem_le_pause_enc_flag 0x2da 001044 beq 1 ,p_le_clear_enc 0x2db 001045 rtn : 001047 p_le_set_enc: 0x2dc 001048 fetch 1 ,mem_le_state 0x2dd 001049 set1 lestate_encryption ,pdata 0x2de 001050 store 1 ,mem_le_state 0x2df 001051 rtn : 001053 p_le_clear_enc: 0x2e0 001054 jam 0 ,mem_le_pause_enc_flag 0x2e1 001055 arg 0 ,pdata 0x2e2 001056 store 4 ,mem_le_last_mic 0x2e3 001057 store 1 ,mem_ltk_exists 0x2e4 001058 store 5 ,mem_le_pcnt_tx 0x2e5 001059 set1 39 ,pdata 0x2e6 001060 store 5 ,mem_le_pcnt_rx 0x2e7 001061 fetch 1 ,mem_le_state 0x2e8 001062 set0 lestate_encryption ,pdata 0x2e9 001063 store 1 ,mem_le_state 0x2ea 001064 rtn : 001068 p_le_prepare_tx_cmd: 0x2eb 001069 fetch 1 ,mem_le_txpayload 0x2ec 001070 beq ll_unknown_rsp ,p_le_send_unknown_rsp 0x2ed 001071 beq ll_connection_param_req ,p_le_send_conn_param_req 0x2ee 001072 beq ll_start_enc_rsp ,p_le_send_start_enc_rsp 0x2ef 001074 beq ll_enc_rsp ,p_le_send_enc_rsp 0x2f0 001075 beq ll_terminate_ind ,p_le_send_terminate_ind 0x2f1 001076 beq ll_ping_rsp ,p_le_send_ping_rsp 0x2f2 001077 beq ll_pause_enc_rsp ,p_le_send_pause_enc_rsp 0x2f3 001078 branch le_prepare_tx_cmd + 10 : 001080 p_le_send_pause_enc_rsp: : 001081 p_le_send_ping_rsp: 0x2f4 001082 force 1 ,temp 0x2f5 001083 branch le_send_packet : 001085 p_le_send_terminate_ind: 0x2f6 001086 setarg 10 0x2f7 001087 store 2 ,mem_le_superto 0x2f8 001088 branch le_send_terminate_ind : 001090 p_le_send_start_enc_rsp: 0x2f9 001091 jam bt_cmd_le_update_conn ,mem_fifo_temp 0x2fa 001092 call ui_ipc_send_cmd 0x2fb 001093 force 1 ,temp 0x2fc 001094 branch le_send_packet ,master 0x2fd 001095 jam bt_evt_le_protocol_connected ,mem_fifo_temp 0x2fe 001096 call ui_ipc_send_event 0x2ff 001097 fetch 1 ,mem_le_pairing_state 0x300 001098 beq flag_le_pairing_after_auth ,p_le_send_start_enc_rsp0 0x301 001099 branch p_le_send_start_enc_rsp_end : 001100 p_le_send_start_enc_rsp0: 0x302 001101 jam xt_smp_encryption_information ,mem_fifo_temp 0x303 001102 call le_xtype_fifo_in : 001103 p_le_send_start_enc_rsp_end: 0x304 001104 force 1 ,temp 0x305 001105 branch le_send_packet : 001108 p_le_send_enc_rsp: 0x306 001109 copy contw ,temp 0x307 001110 arg mem_le_skds ,contw 0x308 001111 force 8 ,loopcnt 0x309 001112 call generate_random_loop 0x30a 001113 fetch 8 ,mem_le_skds 0x30b 001114 istore 8 ,temp 0x30c 001115 copy contw ,temp 0x30d 001116 arg mem_le_ivs ,contw 0x30e 001117 force 4 ,loopcnt 0x30f 001118 call generate_random_loop 0x310 001119 fetch 4 ,mem_le_ivs 0x311 001120 istore 4 ,temp 0x312 001122 fetch 8 ,mem_le_skdm_temp 0x313 001123 store 8 ,mem_le_skdm 0x314 001125 call generate_sk 0x315 001126 fetch 1 ,mem_ltk_exists 0x316 001127 beq 0 ,p_le_ltk_lost 0x317 001128 branch le_send_enc_rsp + 13 : 001129 p_le_ltk_lost: 0x318 001130 jam xt_ll_reject_ind ,mem_fifo_temp 0x319 001131 call le_xtype_fifo_in 0x31a 001132 branch le_send_enc_rsp + 15 : 001135 p_le_send_unknown_rsp: 0x31b 001136 fetch 1 ,mem_le_ll_unknown_type 0x31c 001137 istore 1 ,contw 0x31d 001138 force 2 ,temp 0x31e 001139 branch le_send_packet : 001141 p_le_send_conn_param_req: 0x31f 001142 increase -1 ,contw 0x320 001143 fetch 8 ,mem_le_connection_updata_param 0x321 001144 istore 8 ,contw 0x322 001145 ifetch 8 ,contr 0x323 001146 istore 8 ,contw 0x324 001147 force 2 ,type 0x325 001148 branch le_send_autolen : 001150 p_le_ltk_reset: 0x326 001151 setarg 0x112233 0x327 001152 store 3 ,mem_le_ltk 0x328 001153 setarg 0x445566 0x329 001154 istore 3 ,contw 0x32a 001155 setarg 0x778899 0x32b 001156 istore 3 ,contw 0x32c 001157 setarg 0x001122 0x32d 001158 istore 3 ,contw 0x32e 001159 setarg 0x334455 0x32f 001160 istore 3 ,contw 0x330 001161 setarg 0x66 0x331 001162 istore 1 ,contw 0x332 001163 rtn : 001167 p_le_prepare_smp: 0x333 001168 fetch 1 ,mem_le_l2cap 0x334 001169 beq smp_identity_address_information ,le_send_smp_identity_address_information + 2 0x335 001170 beq smp_pairing_response ,p_le_send_smp_pairing_response 0x336 001171 beq smp_master_identification ,le_send_smp_master_identification + 2 0x337 001172 beq smp_encryption_information ,p_le_send_smp_encryption_information 0x338 001173 branch le_prepare_smp0 : 001176 p_le_send_smp_encryption_information: 0x339 001177 jam bt_evt_le_enc_info ,mem_fifo_temp 0x33a 001178 call ui_ipc_send_event 0x33b 001179 jam xt_smp_master_identification ,mem_fifo_temp 0x33c 001180 call le_xtype_fifo_in 0x33d 001184 call p_le_ltk_reset 0x33e 001185 fetch 8 ,mem_le_ltk 0x33f 001186 call le_send_smp_128 0x340 001187 branch le_send_packet : 001190 p_le_send_smp_pairing_response: 0x341 001191 setarg param_smp_paring_response 0x342 001192 store 3 ,mem_le_pres 0x343 001193 setarg 0x01 0x344 001194 istore 1 ,contw 0x345 001195 setarg param_smp_key_dist0 0x346 001196 branch le_send_smp_pairing_response + 3 : 001200 p_generate_confirm: 0x347 001201 arg mem_le_mrand ,rega 0x348 001202 branch p_generate_mrand ,master 0x349 001203 arg mem_le_srand ,rega : 001204 p_generate_mrand: 0x34a 001205 copy rega ,contw 0x34b 001206 call generate_random 0x34c 001207 branch p_function_c1 : 001209 p_function_c1: 0x34d 001210 fetch 6 ,mem_le_lap 0x34e 001211 fetcht 6 ,mem_le_plap 0x34f 001212 branch p_function_c1_master ,master 0x350 001213 fetch 6 ,mem_le_plap 0x351 001214 fetcht 6 ,mem_le_lap : 001215 p_function_c1_master: 0x352 001216 force regidx_xor ,regext_index 0x353 001217 copy temp ,regext 0x354 001218 increase 1 ,regext_index 0x355 001219 rshift32 temp ,regext 0x356 001220 lshift16 pdata ,pdata 0x357 001221 ior regext ,regext 0x358 001222 increase 1 ,regext_index 0x359 001223 rshift32 pdata ,regext 0x35a 001224 increase 1 ,regext_index 0x35b 001225 force 0 ,regext 0x35c 001226 force 0 ,pdata 0x35d 001227 fetch 1 ,mem_le_conn_peer_addr_type 0x35e 001228 fetcht 1 ,mem_le_adv_own_addr_type 0x35f 001229 nbranch p_function_c1_irat ,master 0x360 001231 fetch 1 ,mem_le_conn_own_addr_type 0x361 001232 fetcht 1 ,mem_le_conn_peer_addr_type : 001233 p_function_c1_irat: 0x362 001234 store 1 ,mem_le_iat 0x363 001235 storet 1 ,mem_le_rat 0x364 001236 force regidx_data ,regext_index 0x365 001237 arg mem_le_iat ,regb 0x366 001238 force 4 ,loopcnt : 001239 p_function_c1_loop1: 0x367 001240 ifetch 4 ,rega 0x368 001241 ifetcht 4 ,regb 0x369 001242 ixor temp ,regext 0x36a 001243 increase 1 ,regext_index 0x36b 001244 increase 4 ,rega 0x36c 001245 increase 4 ,regb 0x36d 001246 loop p_function_c1_loop1 0x36e 001248 call aes_clear 0x36f 001250 increase -4 ,regext_index 0x370 001251 fetch 4 ,mem_le_pin_code 0x371 001252 copy pdata ,regext 0x372 001253 increase 4 ,regext_index 0x373 001254 branch function_c1_loop1 + 8 : 001259 p_lerx_nopayload: 0x374 001260 parse 3 ,0 ,24 0x375 001261 enable swfine 0x376 001262 arg param_sifs ,27 0x377 001263 rshift32 pdata ,pdata 0x378 001264 rshift16 pdata ,pdata 0x379 001265 istore 3 ,contw 0x37a 001266 branch end_of_packet ,6 0x37b 001267 enable match 0x37c 001268 fetch 1 ,mem_last_freq 0x37d 001269 add pdata ,0 ,rega 0x37e 001270 branch lerx_nopayload + 12 : 001272 p_le_parse_att: 0x37f 001273 ifetch 3 ,contr 0x380 001274 store 3 ,mem_le_att_opcode 0x381 001276 beq attop_write_command ,p_le_parse_att_write_command 0x382 001279 beq attop_exchange_mtu_request ,p_le_parse_att_exchange_mtu_request 0x383 001280 beq attop_write_request ,p_le_parse_att_write_request 0x384 001281 beq attop_find_by_type_value_response ,p_le_parse_att_find_by_type_value_response 0x385 001282 beq attop_read_by_type_response ,p_le_parse_att_read_by_type_rsp_mac 0x386 001283 beq attop_error_response ,p_le_send_att_find_by_type_value_response_ios 0x387 001284 beq attop_read_response ,p_le_parse_att_manu_resp 0x388 001285 branch le_parse_att_p : 001289 p_le_parse_att_find_by_type_value_response: 0x389 001290 fetch 1 ,mem_le_connect_ios_mac_flag 0x38a 001291 beq 2 ,p_le_parse_att_find_by_type_value_rsp_mac : 001292 p_le_parse_att_find_ios_report: 0x38b 001293 jam osmode_ios ,mem_le_system_4type 0x38c 001294 jam ipc_evt_ancs_auto_system ,mem_fifo_temp 0x38d 001295 branch ui_ipc_send_event : 001296 p_le_parse_att_not_find_mac_report: 0x38e 001297 fetch 1 ,mem_le_conn_peer_addr_type 0x38f 001298 beq le_addr_type_public ,p_keyboard_system_is_windows 0x390 001299 jam osmode_android ,mem_le_system_4type 0x391 001300 jam ipc_evt_ancs_auto_system ,mem_fifo_temp 0x392 001301 branch ui_ipc_send_event : 001302 p_keyboard_system_is_windows: 0x393 001303 jam osmode_windows ,mem_le_system_4type 0x394 001304 jam ipc_evt_ancs_auto_system ,mem_fifo_temp 0x395 001305 branch ui_ipc_send_event : 001307 p_le_send_att_find_by_type_value_response_ios: 0x396 001308 fetch 1 ,mem_le_connect_ios_mac_flag 0x397 001309 beq 2 ,p_le_parse_att_not_find_mac_report 0x398 001310 jam 2 ,mem_le_connect_ios_mac_flag 0x399 001311 branch p_le_send_att_find_by_type_value_request_fifo_in + 1 : 001313 p_le_parse_att_find_by_type_value_rsp_mac: 0x39a 001314 fetch 4 ,mem_le_rxbuf + 7 0x39b 001315 store 4 ,mem_le_mac_handle_number 0x39c 001316 jam attop_read_by_type_request ,mem_fifo_temp 0x39d 001317 branch le_xtype_fifo_in : 001319 p_le_parse_att_read_by_type_rsp_mac: 0x39e 001320 fetch 2 ,mem_le_rxbuf + 2 0x39f 001321 increase -2 ,pdata 0x3a0 001322 div pdata ,7 0x3a1 001323 call wait_div_end 0x3a2 001324 quotient loopcnt 0x3a3 001325 arg mem_le_rxbuf + 8 ,contr : 001326 p_le_check_att_read_type_manu_loop: 0x3a4 001327 increase 3 ,contr 0x3a5 001328 ifetch 2 ,contr 0x3a6 001329 copy pdata ,regc 0x3a7 001330 ifetch 2 ,contr 0x3a8 001331 arg 0x2a29 ,temp 0x3a9 001332 isub temp ,null 0x3aa 001333 branch p_le_send_att_read_by_type_rsp_manufactory ,zero 0x3ab 001334 loop p_le_check_att_read_type_manu_loop 0x3ac 001335 branch p_le_parse_att_not_find_mac_report : 001336 p_le_send_att_read_by_type_rsp_manufactory: 0x3ad 001337 copy regc ,pdata 0x3ae 001338 store 2 ,mem_le_mac_handle_number 0x3af 001339 jam attop_read_request ,mem_fifo_temp 0x3b0 001340 branch le_xtype_fifo_in : 001342 p_le_parse_att_manu_resp: 0x3b1 001343 arg 9 ,loopcnt 0x3b2 001344 arg mem_le_rxbuf + 7 ,rega 0x3b3 001345 arg mem_le_search_mac_manu_name ,regb 0x3b4 001346 call string_compare 0x3b5 001347 branch p_le_parse_att_find_mac_report ,zero 0x3b6 001348 branch p_le_parse_att_not_find_mac_report : 001350 p_le_parse_att_find_mac_report: 0x3b7 001351 jam osmode_mac ,mem_le_system_4type 0x3b8 001352 jam ipc_evt_ancs_auto_system ,mem_fifo_temp 0x3b9 001353 branch ui_ipc_send_event : 001354 p_le_parse_att_write_command: 0x3ba 001355 jam 1 ,mem_reconnect_continue 0x3bb 001356 fetch 2 ,mem_le_att_handle 0x3bc 001357 beq handle_uuid_chrctr_report_id1_output ,p_handle_num 0x3bd 001358 branch le_parse_att_write_command : 001359 p_handle_num: 0x3be 001361 arg mem_le_rxbuf + 9 ,contr 0x3bf 001362 branch p_hid_rx_process_data_hid_kb : 001364 p_le_parse_att_write_request: 0x3c0 001365 fetch 2 ,mem_le_att_handle 0x3c1 001366 sub pdata ,handle_uuid_chrctr_report_id1_output ,null 0x3c2 001367 call p_handle_num ,zero 0x3c3 001368 fetch 2 ,mem_le_att_handle 0x3c4 001369 sub pdata ,handle_uuid_end ,null 0x3c5 001370 call p_set_lpm_mode ,zero 0x3c6 001371 fetch 2 ,mem_le_att_handle 0x3c7 001372 fetcht 2 ,mem_att_report3 0x3c8 001373 increase 1 ,temp 0x3c9 001374 isub temp ,null 0x3ca 001375 branch p_key_data_send ,zero 0x3cb 001376 branch le_parse_att_write_request : 001377 p_key_data_send: 0x3cc 001378 jam bt_evt_le_protocol_connected ,mem_fifo_temp 0x3cd 001379 call ui_ipc_send_event 0x3ce 001380 branch le_parse_att_write_request : 001383 p_set_lpm_mode: 0x3cf 001384 jam 1 ,mem_lpm_mode 0x3d0 001385 rtn : 001388 p_le_parse_att_exchange_mtu_request: 0x3d1 001389 jam attop_exchange_mtu_response ,mem_fifo_temp 0x3d2 001390 branch le_xtype_fifo_in : 001392 p_le_prepare_att: 0x3d3 001393 fetch 1 ,mem_le_l2cap 0x3d4 001394 beq attop_handle_value_notification ,p_le_send_att_handle_value_notification 0x3d5 001395 beq attop_handle_value_indication ,p_le_send_att_handle_value_indication 0x3d6 001396 beq attop_read_by_group_type_response ,p_le_send_att_read_by_group_type_response 0x3d7 001397 beq attop_read_by_type_response ,p_le_send_att_read_by_type_response 0x3d8 001398 beq attop_find_information_response ,p_le_send_att_find_information_response 0x3d9 001399 beq attop_find_by_type_value_response ,p_le_send_att_find_by_type_value_response 0x3da 001400 beq attop_write_response ,le_send_att_write_response_go 0x3db 001401 beq attop_exchange_mtu_response ,p_le_send_att_exchange_mtu_rsp 0x3dc 001402 beq attop_read_response ,p_le_send_att_read_response 0x3dd 001403 beq attop_read_blob_response ,p_le_send_att_read_blob_response 0x3de 001404 beq attop_find_by_type_value_request ,p_le_send_att_find_by_type_value_request_ancs 0x3df 001405 beq attop_read_by_type_request ,p_le_send_att_find_by_type_value_requset_mac 0x3e0 001406 beq attop_read_request ,p_le_send_att_read_type_manu_loop 0x3e1 001407 branch le_prepare_att0 : 001409 p_le_send_att_find_by_type_value_request_fifo_in: 0x3e2 001410 jam 1 ,mem_le_connect_ios_mac_flag 0x3e3 001411 jam attop_find_by_type_value_request ,mem_fifo_temp 0x3e4 001412 branch le_xtype_fifo_in : 001414 p_le_send_att_find_by_type_value_request_ancs: 0x3e5 001415 fetch 1 ,mem_le_connect_ios_mac_flag 0x3e6 001416 beq 2 ,p_le_send_att_find_by_type_value_request_mac_uuid : 001417 p_le_send_att_find_by_type_value_request_ios_uuid: 0x3e7 001418 arg mem_le_l2cap + 1 ,contw 0x3e8 001419 setarg 0x0001 0x3e9 001420 istore 2 ,contw 0x3ea 001421 setarg 0xffff 0x3eb 001422 istore 2 ,contw 0x3ec 001423 setarg 0x2800 0x3ed 001424 istore 2 ,contw 0x3ee 001425 arg mem_le_search_service_uuid ,contr 0x3ef 001426 call memcpy16 0x3f0 001427 arg 27 ,temp 0x3f1 001428 branch le_send_packet : 001429 p_le_send_att_find_by_type_value_request_mac_uuid: 0x3f2 001430 arg mem_le_l2cap + 1 ,contw 0x3f3 001431 setarg 0x0001 0x3f4 001432 istore 2 ,contw 0x3f5 001433 setarg 0xffff 0x3f6 001434 istore 2 ,contw 0x3f7 001435 setarg 0x2800 0x3f8 001436 istore 2 ,contw 0x3f9 001437 fetch 2 ,mem_le_search_mac_uuid 0x3fa 001438 istore 2 ,contw 0x3fb 001439 arg 13 ,temp 0x3fc 001440 branch le_send_packet : 001442 p_le_send_att_find_by_type_value_requset_mac: 0x3fd 001443 fetch 4 ,mem_le_mac_handle_number 0x3fe 001444 arg mem_le_l2cap + 1 ,contw 0x3ff 001445 istore 4 ,contw 0x400 001446 setarg 0x2803 0x401 001447 istore 2 ,contw 0x402 001448 force 11 ,temp 0x403 001449 branch le_send_packet : 001451 p_le_send_att_read_type_manu_loop: 0x404 001452 fetch 2 ,mem_le_mac_handle_number 0x405 001453 store 2 ,mem_le_l2cap + 1 0x406 001454 force 7 ,temp 0x407 001455 branch le_send_packet : 001456 p_le_send_att_read_blob_response: 0x408 001457 fetch 2 ,mem_le_att_handle 0x409 001458 beq handle_uuid_chrctr_device_name ,p_le_send_att_read_blob_response_error 0x40a 001459 branch le_send_att_read_blob_response : 001461 p_le_send_att_read_blob_response_error: 0x40b 001462 jam att_err_invalid_offset ,mem_le_err_code 0x40c 001463 branch le_send_att_error_response : 001465 p_le_send_att_exchange_mtu_rsp: : 001468 p_le_send_att_exchange_mtu_req: 0x40d 001469 fetch 2 ,mem_le_local_mtu 0x40e 001470 istore 2 ,contw 0x40f 001471 branch le_send_autolen : 001473 p_le_send_att_read_response: 0x410 001474 fetch 2 ,mem_le_att_handle 0x411 001476 beq handle_uuid_battery_level ,p_le_send_att_battery_level 0x412 001477 beq handle_uuid_chrctr_manufacturer_name ,p_le_send_att_read_response_error 0x413 001479 branch le_send_att_read_response : 001481 p_le_send_att_battery_level: 0x414 001482 fetch 1 ,mem_le_battery_level_display_enable 0x415 001483 branch le_send_att_error_response_notfound ,blank 0x416 001484 branch le_send_att_read_response : 001486 p_le_send_att_read_response_error: 0x417 001487 fetch 1 ,mem_le_pairing_state 0x418 001488 bne flag_le_pairing_null ,le_send_att_read_response 0x419 001489 fetch 1 ,mem_ltk_states 0x41a 001490 beq ltk_not_lost ,le_send_att_read_response 0x41b 001493 copy contw ,temp 0x41c 001494 jam flag_le_pairing_start ,mem_le_pairing_state 0x41d 001495 copy temp ,contw 0x41e 001496 jam att_err_insufficient_authentication ,mem_le_err_code 0x41f 001497 branch le_send_att_error_response : 001499 p_le_send_att_find_by_type_value_response: 0x420 001500 call le_start_end_handle_check_1 0x421 001501 rtn user 0x422 001502 fetcht 2 ,mem_le_search_att_type 0x423 001503 setarg uuid_service_hids 0x424 001504 isub temp ,null 0x425 001505 branch p_le_send_att_find_value_by_type_hid ,zero 0x426 001506 setarg uuid_service_battery 0x427 001507 isub temp ,null 0x428 001508 branch p_le_send_att_find_value_by_type_battery ,zero 0x429 001509 setarg uuid_service_device_info 0x42a 001510 isub temp ,null 0x42b 001511 branch p_le_send_att_find_value_by_type_device_info ,zero 0x42c 001512 setarg uuid_service_generic_att 0x42d 001513 isub temp ,null 0x42e 001514 branch p_le_send_att_find_value_by_type_gatt ,zero 0x42f 001515 branch le_send_att_find_by_type_value_response + 2 : 001517 p_le_send_find_value_by_type: 0x430 001518 fetch 1 ,mem_shutter_find_type_value_flag 0x431 001519 arg 0 ,temp 0x432 001520 qset1 temp 0x433 001521 iand temp ,pdata 0x434 001522 bne 0 ,le_send_att_error_response_notfound 0x435 001523 fetch 1 ,mem_shutter_find_type_value_flag 0x436 001524 qset1 pdata 0x437 001525 store 1 ,mem_shutter_find_type_value_flag 0x438 001526 branch p_le_send_att_find_value_by_type_command : 001528 p_le_send_att_find_value_by_type_hid: 0x439 001529 arg le_find_type_value_hid_bit ,queue 0x43a 001530 branch p_le_send_find_value_by_type : 001532 p_le_send_att_find_value_by_type_battery: 0x43b 001533 arg le_find_type_value_battery_bit ,queue 0x43c 001534 branch p_le_send_find_value_by_type : 001536 p_le_send_att_find_value_by_type_gatt: 0x43d 001537 arg le_find_type_value_gatt_bit ,queue 0x43e 001538 branch p_le_send_find_value_by_type : 001539 p_le_send_att_find_value_by_type_device_info: 0x43f 001540 arg le_find_type_value_device_info_bit ,queue 0x440 001541 branch p_le_send_find_value_by_type : 001542 p_le_send_att_find_value_by_type_command: 0x441 001543 fetch 2 ,mem_le_search_att_type 0x442 001544 copy pdata ,rega 0x443 001545 fetcht 2 ,mem_le_uuid 0x444 001546 copy temp ,regb 0x445 001547 call p_find_type_value_start_handle 0x446 001548 branch p_le_save_find_value_handle ,zero 0x447 001549 branch le_send_att_error_response_notfound : 001551 p_find_type_value_start_handle: 0x448 001552 arg mem_le_att_list ,contr : 001553 p_find_type_value_start_handle_loop: 0x449 001554 ifetch 2 ,contr 0x44a 001555 rtn blank 0x44b 001556 ifetch 3 ,contr 0x44c 001557 ifetch 2 ,contr 0x44d 001558 isub rega ,null 0x44e 001559 rtn zero 0x44f 001560 increase -3 ,contr 0x450 001561 ifetch 1 ,contr 0x451 001562 iadd contr ,contr 0x452 001563 branch p_find_type_value_start_handle_loop : 001565 p_le_save_find_value_handle: 0x453 001566 increase -7 ,contr 0x454 001567 ifetch 2 ,contr 0x455 001568 store 2 ,mem_le_find_type_value_start_handle 0x456 001569 call p_find_type_value_end_handle 0x457 001570 branch le_send_att_error_response_notfound ,blank 0x458 001571 increase -4 ,contr 0x459 001572 ifetch 2 ,contr 0x45a 001573 increase -1 ,pdata 0x45b 001574 store 2 ,mem_le_find_type_value_end_handle 0x45c 001575 jam attop_find_by_type_value_response ,mem_le_l2cap 0x45d 001576 fetch 4 ,mem_le_find_type_value_start_handle 0x45e 001577 store 4 ,mem_le_l2cap_response 0x45f 001580 force 9 ,temp 0x460 001581 branch le_send_packet : 001583 p_find_type_value_end_handle: 0x461 001584 ifetch 2 ,contr 0x462 001585 ifetch 1 ,contr 0x463 001586 iadd contr ,contr : 001587 p_find_type_value_end_handle_loop: 0x464 001588 ifetch 2 ,contr 0x465 001589 rtn blank 0x466 001590 ifetch 2 ,contr 0x467 001591 isub regb ,null 0x468 001592 rtn zero 0x469 001593 ifetch 1 ,contr 0x46a 001594 iadd contr ,contr 0x46b 001595 branch p_find_type_value_end_handle_loop : 001597 p_le_send_att_find_information_response: 0x46c 001598 arg 3 ,timeup 0x46d 001599 force 1 ,pdata 0x46e 001600 store 1 ,mem_le_l2cap_response 0x46f 001601 call le_init_attlist_search : 001602 p_le_send_att_find_information_res_loop: 0x470 001603 call le_att_handle_inrange 0x471 001604 branch le_send_att_find_information_res_end ,blank 0x472 001605 nbranch p_le_send_att_find_information_res_next ,positive 0x473 001606 disable user 0x474 001607 istore 2 ,contw 0x475 001608 ifetch 2 ,contr 0x476 001609 istore 2 ,contw 0x477 001610 increase -1 ,timeup 0x478 001611 branch le_send_att_find_information_res_end ,zero : 001612 p_le_send_att_find_information_res_cont: 0x479 001613 ifetch 1 ,contr 0x47a 001614 iadd contr ,contr 0x47b 001615 branch p_le_send_att_find_information_res_loop : 001616 p_le_send_att_find_information_res_next: 0x47c 001617 increase 2 ,contr 0x47d 001618 branch p_le_send_att_find_information_res_cont : 001622 p_le_send_att_read_by_type_response: 0x47e 001623 fetcht 2 ,mem_le_search_att_type 0x47f 001624 setarg uuid_chrctr_device_name 0x480 001625 isub temp ,null 0x481 001626 branch p_le_send_att_read_by_type_res_device_name ,zero 0x482 001627 setarg uuid_pnp_id 0x483 001628 isub temp ,null 0x484 001629 branch p_le_send_att_read_by_type_res_pnp_id ,zero 0x485 001630 setarg uuid_gatt_characteristic 0x486 001631 isub temp ,null 0x487 001632 nbranch le_send_att_error_response_notfound ,zero 0x488 001633 fetch 2 ,mem_le_search_handle_start 0x489 001634 store 2 ,mem_temp 0x48a 001635 enable user : 001636 p_le_send_att_read_by_type_response_loop: 0x48b 001637 call p_le_att_handle_inrange 0x48c 001638 nbranch p_le_send_att_read_by_type_response_end ,positive 0x48d 001639 fetcht 2 ,mem_temp 0x48e 001640 call p_le_att_get_handle_info 0x48f 001641 beq 1 ,p_le_send_att_read_by_type_response_end 0x490 001642 call p_le_att_same_type 0x491 001643 nbranch p_le_send_att_read_by_type_response_next_handle ,zero 0x492 001644 disable user 0x493 001645 call p_le_send_att_read_by_type_write_properties 0x494 001646 call p_le_att_next_handle 0x495 001647 call p_le_att_get_handle_info 0x496 001648 call p_le_send_att_read_by_type_write_uuid 0x497 001649 branch p_le_send_att_read_by_type_response_end : 001650 p_le_send_att_read_by_type_response_next_handle: 0x498 001651 call p_le_att_next_handle 0x499 001652 branch p_le_send_att_read_by_type_response_loop : 001653 p_le_send_att_read_by_type_response_end: 0x49a 001654 branch le_send_att_error_response_notfound ,user 0x49b 001655 branch p_le_send_auto_len_by_mem : 001656 p_le_send_att_read_by_type_write_properties: 0x49c 001657 fetch 2 ,mem_temp 0x49d 001658 store 2 ,mem_le_l2cap_response + 1 0x49e 001659 fetch 1 ,mem_le_search_len 0x49f 001660 copy pdata ,loopcnt 0x4a0 001661 call p_get_contr 0x4a1 001662 arg mem_le_l2cap_response + 3 ,contw 0x4a2 001663 call memcpy 0x4a3 001664 branch p_store_contw : 001665 p_le_send_att_read_by_type_write_uuid: 0x4a4 001666 fetcht 2 ,mem_le_cur_att_type 0x4a5 001667 rshift8 temp ,pdata 0x4a6 001668 bne 0x05 ,p_le_send_att_read_by_type_write_short_uuid 0x4a7 001669 call p_get_contw 0x4a8 001670 fetch 2 ,mem_temp 0x4a9 001671 istore 2 ,contw 0x4aa 001672 call p_store_contw 0x4ab 001673 setarg mem_le_att_list 0x4ac 001674 iadd temp ,contr 0x4ad 001675 ifetch 1 ,contr 0x4ae 001676 copy contr ,temp 0x4af 001677 copy pdata ,loopcnt 0x4b0 001678 increase 5 ,pdata 0x4b1 001679 store 1 ,mem_le_l2cap_response 0x4b2 001680 call p_get_contw 0x4b3 001681 copy temp ,contr 0x4b4 001682 call memcpy 0x4b5 001683 branch p_store_contw : 001684 p_le_send_att_read_by_type_write_short_uuid: 0x4b6 001685 call p_get_contw 0x4b7 001686 fetch 2 ,mem_temp 0x4b8 001687 istore 2 ,contw 0x4b9 001688 fetch 2 ,mem_le_cur_att_type 0x4ba 001689 istore 2 ,contw 0x4bb 001690 call p_store_contw 0x4bc 001691 jam 7 ,mem_le_l2cap_response 0x4bd 001692 rtn : 001693 p_le_send_att_read_by_type_res_device_name: 0x4be 001694 call le_get_device_name : 001695 p_le_send_att_read_by_type_res_packet: 0x4bf 001696 ifetch 1 ,contr 0x4c0 001697 copy pdata ,loopcnt 0x4c1 001698 increase 2 ,pdata 0x4c2 001699 store 1 ,mem_le_l2cap_response 0x4c3 001700 increase -5 ,contr 0x4c4 001701 ifetch 2 ,contr 0x4c5 001702 istore 2 ,contw 0x4c6 001703 increase 3 ,contr 0x4c7 001704 call memcpy 0x4c8 001705 branch le_send_autolen : 001707 p_le_send_att_read_by_type_res_pnp_id: 0x4c9 001708 arg uuid_pnp_id ,temp 0x4ca 001709 call le_att_get_uuid_ptr 0x4cb 001710 branch p_le_send_att_read_by_type_res_packet : 001712 p_le_send_att_read_by_group_type_response: 0x4cc 001714 arg 2 ,timeup 0x4cd 001715 fetch 2 ,mem_le_search_handle_start 0x4ce 001716 store 2 ,mem_temp 0x4cf 001717 jam 0 ,mem_le_search_res 0x4d0 001718 enable user : 001719 p_le_send_att_read_by_group_type_response_loop: 0x4d1 001720 call p_le_att_handle_inrange 0x4d2 001721 nbranch p_le_send_att_read_by_group_type_end0 ,positive 0x4d3 001722 fetcht 2 ,mem_temp 0x4d4 001723 call p_le_att_get_handle_info 0x4d5 001724 beq 1 ,p_le_send_att_read_by_group_type_end1 0x4d6 001725 call p_le_att_same_type 0x4d7 001726 nbranch p_le_send_att_read_by_group_type_next_handle ,zero 0x4d8 001727 fetch 1 ,mem_le_search_res 0x4d9 001728 beq 1 ,p_le_send_att_read_by_group_type_end1 0x4da 001729 nbranch p_le_send_att_read_by_group_type_store_write_record ,user 0x4db 001730 disable user 0x4dc 001731 fetch 1 ,mem_le_search_len 0x4dd 001732 increase 4 ,pdata 0x4de 001733 store 1 ,mem_le_l2cap_response 0x4df 001734 call p_store_contw 0x4e0 001735 branch p_le_send_att_read_by_group_type_store_record : 001736 p_le_send_att_read_by_group_type_store_write_record: 0x4e1 001737 fetch 1 ,mem_le_search_len 0x4e2 001738 sub pdata ,0x10 ,null 0x4e3 001739 branch p_le_send_att_read_by_group_type_end1 ,zero 0x4e4 001740 fetch 1 ,mem_le_l2cap_response 0x4e5 001741 sub pdata ,0x10 ,null 0x4e6 001742 branch p_le_send_att_read_by_group_type_end1 ,zero 0x4e7 001743 fetch 2 ,mem_temp 0x4e8 001744 increase -1 ,pdata 0x4e9 001745 store 2 ,mem_le_cur_handle_end 0x4ea 001746 call p_le_write_att_record : 001747 p_le_send_att_read_by_group_type_store_record: 0x4eb 001748 fetch 2 ,mem_temp 0x4ec 001749 store 2 ,mem_le_cur_handle_start 0x4ed 001750 call p_le_store_att_record 0x4ee 001751 increase -1 ,timeup 0x4ef 001752 branch p_le_send_att_read_by_group_type_last_find ,zero : 001753 p_le_send_att_read_by_group_type_next_handle: 0x4f0 001754 call p_le_att_next_handle 0x4f1 001755 branch p_le_send_att_read_by_group_type_response_loop : 001756 p_le_send_att_read_by_group_type_last_find: 0x4f2 001757 jam 1 ,mem_le_search_res 0x4f3 001758 branch p_le_send_att_read_by_group_type_next_handle : 001759 p_le_send_att_read_by_group_type_end0: 0x4f4 001760 fetch 2 ,mem_temp 0x4f5 001761 store 2 ,mem_le_cur_handle_end 0x4f6 001762 branch p_le_send_att_read_by_group_type_end_common : 001763 p_le_send_att_read_by_group_type_end1: 0x4f7 001764 fetch 2 ,mem_temp 0x4f8 001765 increase -1 ,pdata 0x4f9 001766 store 2 ,mem_le_cur_handle_end 0x4fa 001767 branch p_le_send_att_read_by_group_type_end_common : 001768 p_le_send_att_read_by_group_type_end_common: 0x4fb 001769 branch le_send_att_error_response_notfound ,user 0x4fc 001770 call p_le_write_att_record 0x4fd 001771 branch p_le_send_auto_len_by_mem : 001773 p_le_att_next_handle: 0x4fe 001774 fetcht 2 ,mem_temp 0x4ff 001775 increase 1 ,temp 0x500 001776 storet 2 ,mem_temp 0x501 001777 rtn : 001779 p_le_store_att_record: 0x502 001780 fetch 1 ,mem_le_search_len 0x503 001781 store 1 ,mem_tmp_buffer 0x504 001782 copy pdata ,loopcnt 0x505 001783 call p_get_contr 0x506 001784 branch memcpy : 001786 p_le_write_att_record: 0x507 001787 call p_get_contw 0x508 001788 fetch 2 ,mem_le_cur_handle_start 0x509 001789 istore 2 ,contw 0x50a 001790 fetch 2 ,mem_le_cur_handle_end 0x50b 001791 istore 2 ,contw 0x50c 001792 fetch 1 ,mem_tmp_buffer 0x50d 001793 copy pdata ,loopcnt 0x50e 001794 call memcpy 0x50f 001795 branch p_store_contw : 001798 p_le_att_handle_inrange: 0x510 001799 fetcht 2 ,mem_temp 0x511 001800 fetch 2 ,mem_le_search_handle_end 0x512 001801 isub temp ,null 0x513 001802 rtn : 001804 p_le_att_same_type: 0x514 001805 fetch 2 ,mem_le_search_att_type 0x515 001806 fetcht 2 ,mem_le_cur_att_type 0x516 001807 isub temp ,null 0x517 001808 rtn : 001810 p_le_att_get_handle_info: 0x518 001811 arg mem_le_att_list ,contr 0x519 001812 copy temp ,rega : 001813 p_le_att_get_handle_loop: 0x51a 001814 ifetch 2 ,contr 0x51b 001815 branch p_le_att_unfind_handle ,blank 0x51c 001816 ifetcht 2 ,contr 0x51d 001817 storet 2 ,mem_le_cur_att_type 0x51e 001818 isub rega ,null 0x51f 001819 branch p_le_att_finded_handle ,zero 0x520 001820 ifetch 1 ,contr 0x521 001821 iadd contr ,contr 0x522 001822 branch p_le_att_get_handle_loop : 001823 p_le_att_unfind_handle: 0x523 001824 setarg 1 0x524 001825 rtn : 001826 p_le_att_finded_handle: 0x525 001827 ifetch 1 ,contr 0x526 001828 store 1 ,mem_le_search_len 0x527 001829 copy contr ,pdata 0x528 001830 store 2 ,mem_contr 0x529 001831 setarg 0 0x52a 001832 rtn : 001833 p_get_contw: 0x52b 001834 fetch 2 ,mem_contw 0x52c 001835 copy pdata ,contw 0x52d 001836 rtn : 001837 p_get_contr: 0x52e 001838 fetch 2 ,mem_contr 0x52f 001839 copy pdata ,contr 0x530 001840 rtn : 001841 p_store_contw: 0x531 001842 copy contw ,pdata 0x532 001843 store 2 ,mem_contw 0x533 001844 rtn : 001846 p_le_send_auto_len_by_mem: 0x534 001847 call p_get_contw 0x535 001848 branch le_send_autolen : 001850 p_le_send_att_handle_value_indication: : 001851 p_le_send_att_handle_value_notification: 0x536 001852 fetch 1 ,mem_queue_read 0x537 001853 add pdata ,1 ,temp 0x538 001854 and temp ,0x03 ,temp 0x539 001855 storet 1 ,mem_queue_read 0x53a 001856 mul32 pdata ,7 ,pdata 0x53b 001857 arg mem_uart_packet ,contr 0x53c 001858 iadd contr ,contr 0x53d 001859 fetch 1 ,mem_le51_tx_length 0x53e 001860 increase -5 ,pdata 0x53f 001861 copy pdata ,loopcnt 0x540 001862 arg mem_le_l2cap + 1 ,contw 0x541 001863 call memcpy 0x542 001864 fetcht 1 ,mem_le51_tx_length 0x543 001865 branch le_send_packet : 001867 p_le_parse: 0x544 001868 call le_xtype_fifo_is_full 0x545 001869 branch le_parse + 4 : 001872 p_le_parse_ll: 0x546 001873 copy regc ,pdata 0x547 001874 beq ll_enc_req ,p_le_parse_enc_req 0x548 001875 beq ll_pause_enc_req ,p_le_parse_pause_enc_rsq 0x549 001876 beq ll_connection_update_req ,p_le_parse_connection_update_req 0x54a 001877 beq ll_ping_req ,p_le_parse_ping_req 0x54b 001878 beq ll_terminate_ind ,p_le_parse_terminate_ind 0x54c 001879 beq ll_start_enc_rsp ,p_le_parse_start_enc_rsp 0x54d 001880 sub pdata ,0x0d ,null 0x54e 001881 branch le_parse + 20 ,positive 0x54f 001882 store 1 ,mem_le_ll_unknown_type 0x550 001883 jam xt_ll_unknown_rsp ,mem_fifo_temp 0x551 001884 branch le_xtype_fifo_in : 001885 p_le_parse_start_enc_rsp: 0x552 001886 rtn master 0x553 001887 jam bt_evt_le_start_enc ,mem_fifo_temp 0x554 001888 call ui_ipc_send_event 0x555 001889 branch le_parse_start_enc_rsp + 1 : 001891 p_le_parse_connection_update_req: 0x556 001893 call le_parse_connection_update_req 0x557 001894 fetch 2 ,mem_le_new_param + 3 0x558 001895 mul32 pdata ,4 ,temp 0x559 001896 storet 2 ,mem_customize_timer_setup 0x55a 001897 rtn : 001899 p_le_parse_enc_req: 0x55b 001900 ifetch 8 ,contr 0x55c 001901 store 4 ,mem_le_evidm + 2 0x55d 001902 ifetch 2 ,contr 0x55e 001903 store 2 ,mem_le_evidm 0x55f 001904 call le_parse_enc_req + 1 0x560 001905 fetch 1 ,mem_le_pairing_state 0x561 001906 beq flag_le_pairing_after_auth ,p_le_parse_enc_req_store_skdm 0x562 001907 call p_load_device_list_mode_4 : 001908 p_le_parse_enc_req_store_skdm: 0x563 001909 fetch 8 ,mem_le_skdm 0x564 001910 store 8 ,mem_le_skdm_temp 0x565 001911 rtn : 001913 p_load_device_list_mode_4: 0x566 001914 fetch 6 ,mem_le_evidm 0x567 001915 branch p_clear_ltk_exists_iphone_lost_ltk ,blank 0x568 001916 jam ltk_not_lost ,mem_ltk_states 0x569 001917 call p_le_ltk_reset 0x56a 001918 jam 1 ,mem_ltk_exists 0x56b 001919 rtn : 001921 p_clear_ltk_exists_iphone_lost_ltk: 0x56c 001922 jam iphone_lost_ltk ,mem_ltk_states : 001923 p_clear_ltk_exists: 0x56d 001924 jam 0 ,mem_ltk_exists 0x56e 001925 rtn : 001928 p_le_parse_ping_req: 0x56f 001929 jam xt_ll_ping_rsp ,mem_fifo_temp 0x570 001930 branch le_xtype_fifo_in : 001932 p_le_parse_pause_enc_rsq: 0x571 001933 jam 1 ,mem_le_pause_enc_flag 0x572 001934 jam xt_ll_pause_enc_rsp ,mem_fifo_temp 0x573 001935 branch le_xtype_fifo_in : 001937 p_le_parse_terminate_ind: 0x574 001938 setarg 20 0x575 001939 store 2 ,mem_le_superto 0x576 001940 rtn : 001942 p_le_send_non_l2cap: 0x577 001943 fetch 1 ,mem_le_txheader 0x578 001944 compare 1 ,type ,3 0x579 001945 branch p_le_send_non_l2cap1 ,true 0x57a 001946 branch le_send_non_l2cap + 14 : 001947 p_le_send_non_l2cap1: 0x57b 001948 fetch 1 ,mem_le_txlen 0x57c 001949 branch p_le_send_empty_clear_md ,blank 0x57d 001950 branch le_send_non_l2cap + 14 : 001952 p_le_send_empty_clear_md: 0x57e 001953 fetch 1 ,mem_le_txheader 0x57f 001954 set0 md ,pdata 0x580 001955 store 1 ,mem_le_txheader 0x581 001956 rtn : 001958 p_le_parse_smp: 0x582 001959 ifetch 1 ,contr 0x583 001960 beq smp_pairing_request ,p_le_parse_smp_pairing_request 0x584 001961 beq smp_pairing_random ,p_le_parse_smp_pairing_random 0x585 001962 beq smp_identity_address_information ,p_le_parse_smp_identity_address_information 0x586 001963 branch le_parse_smp + 4 : 001966 p_le_parse_smp_identity_address_information: 0x587 001967 jam flag_le_pairing_end ,mem_le_pairing_state 0x588 001968 branch le_parse_smp_identity_address_information : 001970 p_le_parse_smp_pairing_request: 0x589 001971 jam 1 ,mem_le_send_security_request_flag 0x58a 001972 store 1 ,mem_le_preq 0x58b 001973 ifetch 6 ,contr 0x58c 001974 istore 6 ,contw 0x58d 001975 jam xt_smp_pairing_response ,mem_fifo_temp 0x58e 001976 branch le_xtype_fifo_in : 001978 p_le_parse_smp_pairing_random: 0x58f 001979 call p_authenticate_rconfirm 0x590 001980 branch p_le_parse_smp_pairing_random_success ,zero 0x591 001981 branch le_parse_smp_pairing_random + 2 : 001982 p_le_parse_smp_pairing_random_success: 0x592 001983 jam flag_le_pairing_after_auth ,mem_le_pairing_state 0x593 001984 call p_generate_stk 0x594 001985 jam 1 ,mem_ltk_exists 0x595 001986 branch le_parse_smp_pairing_random_success + 1 : 001989 p_authenticate_rconfirm: 0x596 001990 arg mem_le_srand ,contw 0x597 001991 branch p_authenticate_mconfirm ,master 0x598 001992 arg mem_le_mrand ,contw : 001993 p_authenticate_mconfirm: 0x599 001994 copy contr ,rega 0x59a 001995 call memcpy16 0x59b 001996 call p_function_c1 0x59c 001997 arg mem_le_rconfirm ,contr 0x59d 001998 branch compare_res : 002000 p_generate_stk: 0x59e 002001 call p_function_s1 0x59f 002002 arg mem_le_ltk ,contw 0x5a0 002003 branch store_aes_result : 002005 p_function_s1: 0x5a1 002006 force regidx_data ,regext_index 0x5a2 002007 fetch 4 ,mem_le_mrand 0x5a3 002008 iforce regext 0x5a4 002009 increase 1 ,regext_index 0x5a5 002010 ifetch 4 ,contr 0x5a6 002011 iforce regext 0x5a7 002012 increase 1 ,regext_index 0x5a8 002013 fetch 4 ,mem_le_srand 0x5a9 002014 iforce regext 0x5aa 002015 increase 1 ,regext_index 0x5ab 002016 ifetch 4 ,contr 0x5ac 002017 iforce regext 0x5ad 002018 increase 1 ,regext_index 0x5ae 002019 call aes_clear 0x5af 002022 increase -4 ,regext_index 0x5b0 002023 fetch 4 ,mem_le_pin_code 0x5b1 002024 copy pdata ,regext 0x5b2 002025 increase 4 ,regext_index 0x5b3 002026 force 0x38 ,aes_ctrl 0x5b4 002027 force 0x8 ,aes_ctrl 0x5b5 002028 branch wait_aes : 002032 scale_process_le_conn: 0x5b6 002033 call app_ble_stop_adv 0x5b7 002034 call app_bt_stop_discovery 0x5b8 002035 call app_lpm_mult_enable 0x5b9 002036 branch app_le_event_bb_connected : 002039 scale_process_le_discon: 0x5ba 002040 jam 0 ,mem_lpm_mult 0x5bb 002041 jam 0 ,mem_ltk_exists 0x5bc 002042 jam default_states ,mem_ltk_states 0x5bd 002043 jam flag_le_pairing_null ,mem_le_pairing_state 0x5be 002044 jam 0 ,mem_shutter_find_type_value_flag 0x5bf 002045 branch app_le_event_bb_disconn : 002048 p_le_queue_init: 0x5c0 002049 setarg 0 0x5c1 002050 store 4 ,mem_queue_write 0x5c2 002051 rtn : 002054 p_g24_dispatch: 0x5c3 002055 rtnmark0 mark_24g 0x5c4 002056 fetch 4 ,mem_24g_enter_hibernate 0x5c5 002057 store 4 ,mem_24g_enter_hibernate_setup 0x5c6 002058 call p_g24_txdata_prep 0x5c7 002059 nbranch p_g24_long_sleep ,user 0x5c8 002060 jam 10 ,mem_24g_enter_lpm_timer 0x5c9 002061 call p_g24_transmit_packet 0x5ca 002062 fetch 1 ,mem_24g_pairing_sm 0x5cb 002063 rtnne state_24g_pairing_success 0x5cc 002064 jam tx_power_5db ,mem_tx_power : 002065 p_g24_short_sleep: 0x5cd 002066 fetch 1 ,mem_mouse_retry_flag 0x5ce 002067 nrtn blank 0x5cf 002068 call p_check_ipc_for_lpm 0x5d0 002069 nrtn user 0x5d1 002070 fetch 1 ,mem_c51_lpm_lock 0x5d2 002071 nrtn blank 0x5d3 002072 call lpo_calibration 0x5d4 002073 fetch 3 ,mem_clks_per_lpo 0x5d5 002074 rtn blank 0x5d6 002075 fetch 1 ,mem_lpm_mode 0x5d7 002076 rtn blank : 002077 p_g24_short_sleep_1: 0x5d8 002080 fetch 3 ,mem_24g_short_sleep_counter : 002081 p_g24_short_sleep_2: 0x5d9 002082 call clk2lpo 0x5da 002083 storet 4 ,mem_sleep_counter 0x5db 002084 branch lpm_sleep : 002086 p_g24_long_sleep: 0x5dc 002087 call p_check_ipc_for_lpm 0x5dd 002088 nrtn user 0x5de 002089 fetch 1 ,mem_c51_lpm_lock 0x5df 002090 nrtn blank 0x5e0 002091 call lpo_calibration 0x5e1 002092 fetch 3 ,mem_clks_per_lpo 0x5e2 002093 rtn blank 0x5e3 002094 fetch 1 ,mem_lpm_mode 0x5e4 002095 rtn blank 0x5e5 002096 fetch 1 ,mem_24g_enter_lpm_timer 0x5e6 002097 nbranch p_g24_short_sleep_1 ,blank 0x5e7 002098 fetch 4 ,mem_24g_enter_hibernate_setup 0x5e8 002099 branch p_g24_short_sleep_2 : 002101 p_g24_txdata_prep: 0x5e9 002102 fetch 1 ,mem_24g_pairing_sm 0x5ea 002103 bne state_24g_pairing_success ,p_g24_pairing_sm 0x5eb 002104 call p_g24_package_data 0x5ec 002105 call p_g24_get_package_data ,user 0x5ed 002106 call p_g24_transmit_prep ,user : 002107 p_g24_txdata_enable_tx: 0x5ee 002108 jam ensure_on_24g ,mem_24g_ensure 0x5ef 002109 rtn : 002111 p_g24_package_data: 0x5f0 002112 disable user 0x5f1 002113 jam 2 ,mem_24g_data_type 0x5f2 002114 fetch 1 ,mem_24g_txbuf_new 0x5f3 002115 beq 0x04 ,p_g24_dataready 0x5f4 002116 beq 0x05 ,p_g24_dataready_mk 0x5f5 002117 beq 0x07 ,p_g24_dataready_ms 0x5f6 002118 beq 0x06 ,p_g24_dataready_sys 0x5f7 002119 fetch 1 ,mem_mouse_retry_flag 0x5f8 002120 ncall enable_user ,blank 0x5f9 002121 rtn : 002122 p_g24_dataready: 0x5fa 002123 jam 0x00 ,mem_24g_txbuf_new 0x5fb 002124 jam 10 ,mem_24g_datalen 0x5fc 002125 branch p_g24_package_data_rtn : 002126 p_g24_dataready_mk: 0x5fd 002127 jam 0x03 ,mem_24g_txbuf_new 0x5fe 002128 jam 4 ,mem_24g_datalen 0x5ff 002129 branch p_g24_package_data_rtn : 002130 p_g24_dataready_sys: 0x600 002131 jam 0x02 ,mem_24g_txbuf_new 0x601 002132 jam 3 ,mem_24g_datalen 0x602 002133 branch p_g24_package_data_rtn : 002134 p_g24_dataready_ms: 0x603 002135 jam 1 ,mem_24g_data_type 0x604 002136 jam 8 ,mem_24g_datalen : 002137 p_g24_package_data_rtn: 0x605 002138 jam 0 ,mem_24g_get_ack_fail 0x606 002139 branch enable_user : 002142 p_g24_get_package_data: 0x607 002143 arg 9 ,loopcnt 0x608 002144 arg mem_24g_txbuf_new ,contr 0x609 002145 arg mem_24g_txbuf ,contw 0x60a 002146 branch memcpy : 002149 p_g24_transmit_packet: 0x60b 002150 jam 0 ,mem_24g_retry : 002151 p_g24_transmit_loop: 0x60c 002154 call p_g24_transmit_receive_ack 0x60d 002155 nbranch p_g24_retransmit ,user3 0x60e 002156 call p_g24_ackpayload_parse 0x60f 002157 fetch 1 ,mem_24g_pid 0x610 002158 increase 1 ,pdata 0x611 002159 store 1 ,mem_24g_pid 0x612 002160 jam 0 ,mem_mouse_retry_flag 0x613 002161 fetch 1 ,mem_24g_pairing_sm 0x614 002162 bne state_24g_pairing_success ,p_g24_paring_mode_start : 002163 p_g24_transmit_abandon: 0x615 002164 call p_g24_clear_txbuf 0x616 002165 jam 0 ,mem_24g_get_ack_fail 0x617 002166 jam ensure_off_24g ,mem_24g_ensure 0x618 002167 rtn : 002170 p_g24_retransmit: 0x619 002171 jam 1 ,mem_mouse_retry_flag 0x61a 002172 fetch 1 ,mem_24g_get_ack_fail 0x61b 002173 increase 1 ,pdata 0x61c 002174 store 1 ,mem_24g_get_ack_fail 0x61d 002175 fetch 1 ,mem_24g_pairing_sm 0x61e 002176 bne state_24g_pairing_success ,p_g24_tx_paring_retry 0x61f 002177 fetch 1 ,mem_24g_get_ack_fail 0x620 002178 beq 0xff ,p_g24_stop_g24_mode 0x621 002179 fetch 1 ,mem_24g_get_ack_fail 0x622 002180 arg 16 ,temp 0x623 002181 isub temp ,null 0x624 002182 branch p_g24_ch ,positive 0x625 002183 fetch 1 ,mem_24g_retry 0x626 002184 increase 1 ,pdata 0x627 002185 store 1 ,mem_24g_retry 0x628 002186 nop 10 0x629 002187 bne retry_24g ,p_g24_transmit_loop 0x62a 002188 branch p_g24_ch : 002191 p_g24_clear_txbuf: 0x62b 002192 setarg 0 0x62c 002193 store 9 ,mem_24g_txbuf 0x62d 002194 store 9 ,mem_24g_txbuf_new 0x62e 002195 rtn : 002207 p_g24_paring_mode_start: 0x62f 002208 branch p_g24_paring_mode : 002210 p_g24_transmit_receive_ack: 0x630 002211 disable user3 0x631 002212 call p_g24_transmit 0x632 002213 nop 1200 0x633 002216 force 0 ,radio_ctrl 0x634 002217 fetch 4 ,mem_24g_addr 0x635 002218 iforce access 0x636 002219 fetcht 1 ,mem_last_freq 0x637 002220 call set_freq_rx 0x638 002221 call rf_rx_enable 0x639 002222 call p_g24_receive_rxon 0x63a 002223 call p_g24_end_of_packet ,user3 0x63b 002224 rtn : 002231 p_g24_tx_paring_retry: 0x63c 002232 jam 0 ,mem_mouse_retry_flag 0x63d 002233 rtn : 002237 p_g24_stop_g24_mode: 0x63e 002238 jam 0 ,mem_mouse_retry_flag 0x63f 002239 jam bt_evt_24g_attempt_fail ,mem_fifo_temp 0x640 002240 branch ui_ipc_send_event : 002243 p_g24_ackpayload_parse: 0x641 002244 call p_g24_read_len_pid_crc 0x642 002245 fetch 1 ,mem_24g_rxbuf 0x643 002246 rtnne 0x02 0x644 002247 fetch 1 ,mem_24g_rxdata_length 0x645 002248 rtn blank 0x646 002249 iforce loopcnt 0x647 002250 arg mem_24g_rxbuf + 2 ,contr 0x648 002251 arg mem_24g_rxpayload ,contw 0x649 002252 call memcpy 0x64a 002253 fetch 1 ,mem_24g_rxbuf + 1 0x64b 002254 compare 0x08 ,pdata ,0xf8 0x64c 002255 nrtn true 0x64d 002256 fetch 1 ,mem_24g_rxbuf + 2 0x64e 002257 beq 0xff ,p_pc_sleep_mode 0x64f 002258 store 1 ,mem_caps_num_lock 0x650 002260 rtn : 002262 p_pc_sleep_mode: 0x651 002263 jam 1 ,mem_pc_sleep_flag 0x652 002264 rtn : 002268 p_g24_start_pairing_sm1: 0x653 002269 set1 mark_24g ,mark 0x654 002270 call p_g24_pair_init 0x655 002271 call p_g24_transmit_abandon 0x656 002272 jam state_24g_pairing_1 ,mem_24g_pairing_sm 0x657 002273 rtn : 002275 p_g24_pair_init: 0x658 002276 jam 0 ,mem_24g_pid 0x659 002277 jam g24_pair_ch ,mem_24g_ch 0x65a 002278 fetch 4 ,mem_24g_paring_addr 0x65b 002279 branch p_g24_update_addr_and_synccrc8 : 002281 p_g24_pairing_sm: 0x65c 002282 call p_g24_pair_init 0x65d 002283 fetch 1 ,mem_24g_ensure 0x65e 002284 beq ensure_on_24g ,enable_user 0x65f 002285 fetch 1 ,mem_24g_pairing_sm 0x660 002286 beq state_24g_pairing_1 ,p_g24_pairing_sm_1 0x661 002287 beq state_24g_pairing_2 ,p_g24_pairing_sm_2 0x662 002288 beq state_24g_pairing_3 ,p_g24_pairing_sm_3 0x663 002289 branch assert : 002291 p_g24_pairing_sm_1: 0x664 002292 jam state_24g_pairing_1_waiting_ack ,mem_24g_pairing_sm 0x665 002293 jam 0xaa ,mem_24g_common_temp 0x666 002294 branch p_g24_pairing_sm_common : 002295 p_g24_pairing_sm_2: 0x667 002296 jam state_24g_pairing_2_waiting_ack ,mem_24g_pairing_sm 0x668 002297 jam 0x55 ,mem_24g_common_temp 0x669 002298 branch p_g24_pairing_sm_common : 002299 p_g24_pairing_sm_3: 0x66a 002300 jam state_24g_pairing_3_waiting_ack ,mem_24g_pairing_sm 0x66b 002301 jam 0x22 ,mem_24g_common_temp : 002302 p_g24_pairing_sm_common: 0x66c 002306 jam 0x02 ,mem_24g_common_temp + 1 0x66d 002307 fetch 4 ,mem_24g_device_addr 0x66e 002308 store 4 ,mem_24g_common_temp + 2 0x66f 002309 jam 0 ,mem_24g_common_temp + 6 0x670 002310 arg mem_24g_common_temp ,rega 0x671 002311 arg 7 ,temp 0x672 002312 call p_g24_put_data_in_buff 0x673 002313 call p_g24_transmit_prep 0x674 002314 call p_g24_txdata_enable_tx 0x675 002315 branch enable_user : 002317 p_g24_paring_mode: 0x676 002318 fetch 1 ,mem_24g_pairing_sm 0x677 002319 rtneq state_24g_pairing_success 0x678 002320 beq state_24g_pairing_1_waiting_ack ,p_g24_pairing_sm_1_waiting_ack 0x679 002321 beq state_24g_pairing_2_waiting_ack ,p_g24_pairing_sm_2_waiting_ack 0x67a 002322 beq state_24g_pairing_3_waiting_ack ,p_g24_pairing_sm_3_waiting_ack 0x67b 002323 rtn : 002326 p_g24_pairing_sm_1_waiting_ack: 0x67c 002327 jam state_24g_pairing_2 ,mem_24g_pairing_sm 0x67d 002328 branch p_g24_transmit_abandon : 002329 p_g24_pairing_sm_2_waiting_ack: 0x67e 002330 jam state_24g_pairing_3 ,mem_24g_pairing_sm 0x67f 002331 branch p_g24_transmit_abandon : 002332 p_g24_pairing_sm_3_waiting_ack: 0x680 002333 jam state_24g_pairing_success ,mem_24g_pairing_sm 0x681 002334 jam bt_evt_24g_pairing_complete ,mem_fifo_temp 0x682 002335 call ui_ipc_send_event 0x683 002336 fetch 4 ,mem_24g_rxpayload + 2 0x684 002337 call p_g24_update_addr_and_synccrc8 0x685 002338 branch p_g24_transmit_abandon : 002340 p_g24_start_24g_mode: 0x686 002342 set1 mark_24g ,mark 0x687 002343 call p_g24_syncword_crc8 0x688 002344 call p_g24_ch 0x689 002345 fetch 1 ,mem_24g_pairing_sm 0x68a 002346 rtnne state_24g_pairing_success 0x68b 002347 call p_g24_tx_attemp_data_prep 0x68c 002348 setarg 0 0x68d 002349 store 2 ,mem_24g_check_dongle_times : 002350 p_g24_tx_attemp_dongle_loop: 0x68e 002351 call lpo_calibration 0x68f 002352 nop 2000 0x690 002353 fetch 1 ,mem_24g_check_dongle_times 0x691 002354 beq 0xff ,p_g24_stop_g24_mode 0x692 002355 call p_g24_transmit_receive_ack 0x693 002356 nbranch p_g24_attemp_txdata_retry ,user3 : 002357 p_g24_tx_attemp_dongle_succ: 0x694 002358 call p_g24_clear_txbuf 0x695 002359 set1 mark_24g ,mark 0x696 002360 jam bt_evt_24g_attempt_success ,mem_fifo_temp 0x697 002361 branch ui_ipc_send_event : 002364 p_g24_tx_attemp_data_prep: 0x698 002365 jam 0xff ,mem_24g_common_temp 0x699 002366 fetch 1 ,mem_24g_data_type 0x69a 002367 store 1 ,mem_24g_common_temp + 1 0x69b 002368 fetch 4 ,mem_24g_device_addr 0x69c 002369 store 4 ,mem_24g_common_temp + 2 0x69d 002370 arg 6 ,temp 0x69e 002371 arg mem_24g_common_temp ,rega 0x69f 002372 call p_g24_put_data_in_buff 0x6a0 002373 branch p_g24_transmit_prep : 002375 p_g24_attemp_txdata_retry: 0x6a1 002376 fetch 2 ,mem_24g_check_dongle_times 0x6a2 002377 increase 1 ,pdata 0x6a3 002378 store 2 ,mem_24g_check_dongle_times 0x6a4 002379 call p_g24_ch 0x6a5 002380 branch p_g24_tx_attemp_dongle_loop : 002383 p_g24_put_data_in_buff: 0x6a6 002384 storet 1 ,mem_24g_datalen 0x6a7 002385 copy temp ,loopcnt 0x6a8 002386 arg mem_24g_txbuf ,contw 0x6a9 002387 copy rega ,contr 0x6aa 002388 branch memcpy : 002390 p_g24_read_len_pid_crc: 0x6ab 002392 fetch 1 ,mem_24g_rxbuf + 1 0x6ac 002393 rshift3 pdata ,pdata 0x6ad 002394 store 1 ,mem_24g_rxdata_length 0x6ae 002396 increase 1 ,pdata 0x6af 002397 arg mem_24g_rxbuf + 1 ,contr 0x6b0 002398 iadd contr ,contr 0x6b1 002399 ifetch 3 ,contr 0x6b2 002400 store 3 ,mem_24g_sta_crc 0x6b3 002401 rtn : 002403 p_rssi_signal: 0x6b4 002404 fetcht 1 ,mem_rssi_signal_index 0x6b5 002405 setarg mem_rssi_signal_buf 0x6b6 002406 iadd temp ,contw 0x6b7 002407 copy rega ,pdata 0x6b8 002408 istore 1 ,contw 0x6b9 002409 increase 1 ,temp 0x6ba 002410 and_into rssi_buf_len_signal ,temp 0x6bb 002411 storet 1 ,mem_rssi_signal_index 0x6bc 002412 rtn : 002432 p_g24_update_addr_and_synccrc8: 0x6bd 002433 store 4 ,mem_24g_addr : 002436 p_g24_syncword_crc8: 0x6be 002437 arg 0 ,rega 0x6bf 002438 arg 4 ,loopcnt 0x6c0 002439 arg mem_24g_addr ,contr : 002440 p_g24_syncword_crc8_loop: 0x6c1 002441 ifetch 1 ,contr 0x6c2 002442 iadd rega ,rega 0x6c3 002443 loop p_g24_syncword_crc8_loop 0x6c4 002444 copy rega ,pdata 0x6c5 002445 store 2 ,mem_24g_syncword 0x6c6 002446 fetch 1 ,mem_24g_syncword 0x6c7 002447 fetcht 1 ,mem_24g_syncword + 1 0x6c8 002448 iadd temp ,pdata 0x6c9 002449 store 1 ,mem_24g_syncword_crc8 0x6ca 002450 rtn : 002453 p_g24_transmit_prep: 0x6cb 002455 fetch 1 ,mem_24g_datalen 0x6cc 002456 increase 2 ,pdata 0x6cd 002457 store 1 ,mem_24g_txlen 0x6ce 002459 fetch 1 ,mem_24g_data_type 0x6cf 002460 store 1 ,mem_24g_txpayload 0x6d0 002462 fetch 1 ,mem_24g_datalen 0x6d1 002463 lshift3 pdata ,pdata 0x6d2 002464 fetcht 1 ,mem_24g_pid 0x6d3 002465 and temp ,0x03 ,temp 0x6d4 002466 lshift temp ,temp 0x6d5 002467 ior temp ,pdata 0x6d6 002468 fetcht 1 ,mem_24g_no_ack 0x6d7 002469 iadd temp ,pdata 0x6d8 002470 istore 1 ,contw 0x6d9 002472 fetch 1 ,mem_24g_pairing_sm 0x6da 002473 bne state_24g_pairing_success ,p_g24_transmit_prep_pair 0x6db 002474 fetch 1 ,mem_24g_data_type 0x6dc 002475 istore 1 ,contw : 002476 p_g24_transmit_prep_pair: 0x6dd 002477 fetch 1 ,mem_24g_datalen 0x6de 002478 iforce loopcnt 0x6df 002479 fetch 1 ,mem_24g_data_type 0x6e0 002480 beq 1 ,p_g24_transmit_prep_mouse 0x6e1 002481 arg mem_24g_txbuf ,contr 0x6e2 002482 call memcpy 0x6e3 002486 fetch 1 ,mem_24g_txbuf 0x6e4 002487 beq 0x03 ,p_g24_multi_key_setup 0x6e5 002488 rtn : 002489 p_g24_multi_key_setup: 0x6e6 002490 jam 0x02 ,mem_24g_txbuf 0x6e7 002491 rtn : 002494 p_g24_transmit_prep_mouse: 0x6e8 002495 arg mem_24g_txbuf + 1 ,contr 0x6e9 002496 branch memcpy : 002498 p_g24_ch: 0x6ea 002499 fetcht 1 ,mem_24g_current_ch_number 0x6eb 002500 call p_g24_ch_calc 0x6ec 002501 increase 1 ,temp 0x6ed 002502 and_into 3 ,temp 0x6ee 002503 storet 1 ,mem_24g_current_ch_number 0x6ef 002504 rtn : 002506 p_g24_ch_calc: 0x6f0 002507 fetch 1 ,mem_24g_addr 0x6f1 002508 and_into 0x03 ,pdata 0x6f2 002509 mul32 pdata ,4 ,rega 0x6f3 002510 setarg mem_24g_ch_map1 0x6f4 002511 iadd rega ,pdata 0x6f5 002512 iadd temp ,contr 0x6f6 002513 ifetch 1 ,contr 0x6f7 002514 store 1 ,mem_24g_ch 0x6f8 002515 rtn : 002517 p_g24_prep: 0x6f9 002518 disable enable_crc 0x6fa 002519 disable enable_white 0x6fb 002520 setarg 0x555555 0x6fc 002521 iforce crc24_init 0x6fd 002522 fetch 1 ,mem_24g_ch 0x6fe 002523 reverse pdata ,temp 0x6ff 002524 set1 1 ,temp 0x700 002525 rshift temp ,white_init 0x701 002526 rtn : 002528 p_g24_receive_rxon: 0x702 002529 call p_g24_prep 0x703 002530 enable decode_fec0 0x704 002531 enable is_rx 0x705 002532 disable is_tx 0x706 002533 enable swfine 0x707 002534 fetch 2 ,mem_24g_rx_window 0x708 002535 iforce stop_watch 0x709 002536 correlate null ,timeout 0x70a 002537 nbranch p_g24_sync_timeout ,sync 0x70b 002538 disable decode_fec0 0x70c 002539 enable decode_fec1 0x70d 002540 enable enable_white 0x70e 002541 enable enable_crc 0x70f 002542 parse demod ,bucket ,8 0x710 002543 rshift3 pwindow ,pdata 0x711 002544 store 1 ,mem_24g_get_syncword_crc8 0x712 002545 fetcht 1 ,mem_24g_syncword_crc8 0x713 002546 isub temp ,null 0x714 002547 nbranch p_g24_end_of_packet ,zero 0x715 002548 parse demod ,bucket ,8 0x716 002549 rshift3 pwindow ,pdata 0x717 002550 store 1 ,mem_24g_rxbuf 0x718 002554 fetch 1 ,mem_24g_rxbuf 0x719 002555 fetcht 1 ,mem_24g_data_type 0x71a 002556 icompare bits_data ,temp 0x71b 002557 nbranch p_g24_end_of_packet ,true : 002558 p_g24_receive_skip: 0x71c 002559 parse demod ,bucket ,8 0x71d 002560 rshift3 pwindow ,pdata 0x71e 002561 istore 1 ,contw 0x71f 002562 rshift3 pdata ,pdata 0x720 002563 and pdata ,0x1f ,loopcnt 0x721 002564 branch p_g24rx_nopayload ,zero : 002565 p_g24rx_loop: 0x722 002566 parse demod ,bucket ,8 0x723 002567 rshift3 pwindow ,pdata 0x724 002568 istore 1 ,contw 0x725 002569 loop p_g24rx_loop : 002570 p_g24rx_nopayload: 0x726 002572 copy contw ,rega 0x727 002573 parse demod ,bucket ,8 0x728 002574 rshift3 pwindow ,pdata 0x729 002575 store 1 ,mem_rssi_hex_received 0x72a 002576 copy rega ,contw 0x72b 002577 parse demod ,bucket ,24 0x72c 002578 enable swfine 0x72d 002579 arg param_sifs ,stop_watch 0x72e 002580 rshift32 pdata ,pdata 0x72f 002581 rshift16 pdata ,pdata 0x730 002582 istore 3 ,contw 0x731 002583 disable decode_fec1 0x732 002584 branch p_g24_end_of_packet ,crc_failed 0x733 002585 enable user3 0x734 002586 fetch 1 ,mem_last_freq 0x735 002587 add pdata ,0 ,rega 0x736 002588 call rf_write_freq 0x737 002589 disable decode_fec0 0x738 002590 call set_sync_on 0x739 002591 fetch 1 ,mem_rssi_hex_received 0x73a 002592 copy pdata ,rega 0x73b 002593 branch p_rssi_signal : 002596 p_g24_sync_timeout: : 002599 p_g24_end_of_packet: 0x73c 002600 disable encode_fec1 0x73d 002601 disable decode_fec1 0x73e 002602 branch end_of_packet : 002604 p_g24_set_freq_tx: 0x73f 002605 call set_sync_on 0x740 002606 fetcht 1 ,mem_24g_ch 0x741 002607 branch set_freq_tx : 002609 p_g24_transmit: 0x742 002610 call le_enable 0x743 002611 fetch 4 ,mem_24g_addr 0x744 002612 iforce access 0x745 002613 call p_g24_prep 0x746 002614 call p_g24_set_freq_tx 0x747 002615 set1 txgfsk ,radio_ctrl 0x748 002616 enable encode_fec0 0x749 002617 enable is_tx 0x74a 002618 disable is_rx 0x74b 002619 rshift16 access ,pdata 0x74c 002620 rshift8 pdata ,pdata 0x74d 002621 rshift4 pdata ,pdata 0x74e 002622 inject mod ,40 0x74f 002623 disable encode_fec0 0x750 002624 enable encode_fec1 0x751 002625 enable enable_white 0x752 002626 enable enable_crc 0x753 002627 fetch 1 ,mem_24g_syncword_crc8 0x754 002628 inject mod ,8 0x755 002629 fetch 1 ,mem_24g_txlen 0x756 002630 iforce loopcnt 0x757 002631 arg mem_24g_txpayload ,contr : 002632 p_g24tr_loop: 0x758 002633 ifetch 1 ,contr 0x759 002634 inject mod ,8 0x75a 002635 loop p_g24tr_loop 0x75b 002636 enable enable_parity 0x75c 002637 inject mod ,24 0x75d 002638 disable enable_parity 0x75e 002639 until null ,tx_clear 0x75f 002640 nop 100 0x760 002641 disable encode_fec0 0x761 002642 disable encode_fec1 0x762 002643 branch set_sync_on org 0x3000 : 002654 start: 0x3000 002655 call lpmstate : 002658 soft_reset: 0x3001 002659 set0 mark_ext_patch ,mark 0x3002 002660 bpatch patch00_0 ,mem_patch00 0x3003 002661 clear_stack 0x3004 002662 call initialize_radio 0x3005 002663 call iicd_init_12m 0x3006 002664 call init_param 0x3007 002665 call l2cap_init 0x3008 002666 set0 mark_ext_patch ,mark 0x3009 002667 bpatch patch00_1 ,mem_patch00 0x300a 002668 call rfcomm_init 0x300b 002669 call init_lmp 0x300c 002670 call ui_init 0x300d 002671 call app_init 0x300e 002672 set0 mark_ext_patch ,mark 0x300f 002673 bpatch patch00_2 ,mem_patch00 0x3010 002674 call app_lpm_init ,wake 0x3011 002675 call sp_initialize 0x3012 002676 call lpm_recover_clk ,wake : 002677 main_loop: 0x3013 002678 set0 mark_ext_patch ,mark 0x3014 002679 bpatch patch00_3 ,mem_patch00 0x3015 002680 call sp_calc_sequence 0x3016 002681 call le_dispatch 0x3017 002682 call hci_dispatch 0x3018 002683 set0 mark_ext_patch ,mark 0x3019 002684 bpatch patch00_4 ,mem_patch00 0x301a 002685 call idle_dispatch 0x301b 002686 call app_process_idle 0x301c 002687 call inquiry_dispatch 0x301d 002688 set0 mark_ext_patch ,mark 0x301e 002689 bpatch patch00_5 ,mem_patch00 0x301f 002690 call inquiry_scan_dispatch 0x3020 002691 call page_scan_dispatch 0x3021 002692 call connection_dispatch 0x3022 002693 call lpm_dispatch 0x3023 002694 branch main_loop : 002696 connection_dispatch: 0x3024 002697 call connection_incontext 0x3025 002698 rtnmark0 mark_context 0x3026 002699 set0 mark_context ,mark 0x3027 002700 call context_save 0x3028 002701 branch le_disable : 002703 connection_incontext: 0x3029 002704 set0 mark_ext_patch ,mark 0x302a 002705 bpatch patch00_6 ,mem_patch00 0x302b 002706 call context_search_insniff 0x302c 002707 nbranch connection_nosniff ,zero 0x302d 002708 call context_load 0x302e 002709 add rega ,coffset_mode ,contr 0x302f 002710 ifetch 1 ,contr 0x3030 002711 bbit1 mode_le ,le_conn_dispatch 0x3031 002712 bbit1 mode_master ,master_dispatch 0x3032 002713 branch slave_dispatch : 002714 connection_nosniff: 0x3033 002715 set0 mark_ext_patch ,mark 0x3034 002716 bpatch patch00_7 ,mem_patch00 0x3035 002717 call context_get_next 0x3036 002718 copy loopcnt ,null 0x3037 002719 rtn zero 0x3038 002720 call context_load 0x3039 002721 fetch 1 ,mem_state 0x303a 002722 bbit1 state_inpage ,master_page 0x303b 002723 fetch 1 ,mem_mode 0x303c 002724 bbit1 mode_master ,master_dispatch 0x303d 002725 branch slave_dispatch : 002733 idle_dispatch: 0x303e 002734 fetch 1 ,mem_hci_cmd 0x303f 002735 rtn blank 0x3040 002736 beq hci_cmd_inquiry ,idle_inquiry 0x3041 002737 beq hci_cmd_inquiry_cancel ,idle_inquiry_cancel 0x3042 002738 beq hci_cmd_remote_name_req ,idle_remote_name_req 0x3043 002739 beq hci_cmd_create_conn ,idle_create_conn 0x3044 002740 beq hci_cmd_le_create_conn ,idle_le_create_conn 0x3045 002741 call context_search_conn_handle 0x3046 002742 rtn zero 0x3047 002743 call context_search_plap 0x3048 002744 rtn zero : 002745 idle_exit: 0x3049 002746 jam 0 ,mem_hci_cmd 0x304a 002747 rtn : 002749 idle_le_create_conn: 0x304b 002750 jam hci_cmd_le_create_conn ,mem_cmd_le_create_conn 0x304c 002751 jam 0 ,mem_hci_cmd 0x304d 002752 rtn : 002754 idle_inquiry: 0x304e 002755 set1 mark_inquiry_on ,mark 0x304f 002756 set0 mark_inquiry_trainb ,mark 0x3050 002757 jam param_ninquiry ,mem_ninqy_index 0x3051 002758 jam 31 ,mem_nfreq_index_inq 0x3052 002759 branch idle_exit : 002761 idle_inquiry_cancel: 0x3053 002762 set0 mark_inquiry_on ,mark 0x3054 002763 force 0 ,stop_watch 0x3055 002764 branch idle_exit : 002766 idle_remote_name_req: 0x3056 002767 call context_search_plap 0x3057 002768 rtn zero 0x3058 002769 force lmp_name_req ,temp 0x3059 002770 jam 5 ,mem_nameres_cnt 0x305a 002771 branch idle_start_page : 002773 idle_create_conn: 0x305b 002774 set0 mark_ext_patch ,mark 0x305c 002775 bpatch patch01_0 ,mem_patch01 0x305d 002776 fetch 1 ,mem_device_option 0x305e 002777 beq dvc_op_hci ,idle_create_conn_hci : 002778 idle_create_conn_device: 0x305f 002779 fetch 6 ,mem_hci_plap 0x3060 002780 branch idle_exit ,blank 0x3061 002781 jam reconnect_hid ,memui_reconnect_mode 0x3062 002783 jam conn_sm_wait_features_res ,mem_conn_sm 0x3063 002784 branch idle_create_conn_cont : 002786 idle_create_conn_hci: 0x3064 002787 fetch 6 ,mem_hci_plap 0x3065 002788 branch idle_exit ,blank 0x3066 002789 store 6 ,mem_plap : 002790 idle_create_conn_cont: 0x3067 002791 force lmp_version_req ,temp : 002792 idle_start_page: 0x3068 002793 set0 mark_ext_patch ,mark 0x3069 002794 bpatch patch01_1 ,mem_patch01 0x306a 002795 fetch 1 ,mem_page_mode 0x306b 002796 branch idle_page_mode_r0 ,blank 0x306c 002797 lshift3 pdata ,pdata 0x306d 002798 lshift4 pdata ,pdata 0x306e 002799 increase -1 ,pdata : 002800 idle_page_mode_r0: 0x306f 002801 store 1 ,mem_npage 0x3070 002802 store 1 ,mem_npage_index 0x3071 002803 jam 31 ,mem_nfreq_index_page 0x3072 002804 set0 mark_page_trainb ,mark 0x3073 002805 call context_new 0x3074 002806 nbranch idle_page_fail ,zero 0x3075 002807 call get_free_amaddr 0x3076 002808 store 1 ,mem_amaddr 0x3077 002809 storet 1 ,mem_lmo_opcode2 0x3078 002810 fetch 6 ,mem_hci_plap 0x3079 002811 store 6 ,mem_plap 0x307a 002812 set0 mark_ext_patch ,mark 0x307b 002813 bpatch patch01_2 ,mem_patch01 0x307c 002814 force 0 ,pdata 0x307d 002815 compare lmp_name_req ,temp ,0xff 0x307e 002816 nsetflag true ,state_init_seq ,pdata 0x307f 002817 set1 state_inpage ,pdata 0x3080 002818 store 1 ,mem_state 0x3081 002819 jam bt_evt_reconn_started ,mem_fifo_temp 0x3082 002820 call ui_ipc_send_event 0x3083 002821 force 0 ,pdata 0x3084 002822 setflag true ,smap_name_req ,pdata 0x3085 002823 store 1 ,mem_state_map 0x3086 002824 setarg 0 0x3087 002825 set1 mode_master ,pdata 0x3088 002826 store 1 ,mem_mode 0x3089 002827 enable master 0x308a 002828 call context_save 0x308b 002829 disable master 0x308c 002830 force page_length_timer ,queue 0x308d 002831 fetch 2 ,mem_page_to 0x308e 002832 call timer_init 0x308f 002833 branch idle_exit : 002834 idle_page_fail: 0x3090 002835 set0 mark_ext_patch ,mark 0x3091 002836 bpatch patch01_3 ,mem_patch01 0x3092 002837 fetch 6 ,mem_hci_plap 0x3093 002838 store 6 ,mem_plap 0x3094 002839 compare lmp_name_req ,temp ,0xff 0x3095 002840 branch idle_name_fail ,true 0x3096 002841 force hci_error_memory_full ,temp 0x3097 002842 call hci_send_connection_error 0x3098 002843 branch idle_exit : 002844 idle_name_fail: 0x3099 002845 arg mem_tmp_buffer ,contw 0x309a 002846 arg 8 ,loopcnt 0x309b 002847 call memset0 0x309c 002848 force hci_error_memory_full ,queue 0x309d 002849 call hci_send_name 0x309e 002850 jam bt_evt_reconn_failed ,mem_fifo_temp 0x309f 002851 call ui_ipc_send_event 0x30a0 002852 branch idle_exit : 002859 inquiry_dispatch: 0x30a1 002860 rtnmark0 mark_inquiry_on 0x30a2 002861 force inquiry_length_timer ,queue 0x30a3 002862 call timer_check 0x30a4 002863 nsetflag blank ,mark_inquiry_on ,mark 0x30a5 002864 nbranch inquiry_start ,blank 0x30a6 002865 rtn : 002869 inquiry_start: 0x30a7 002870 set0 mark_ext_patch ,mark 0x30a8 002871 bpatch patch01_4 ,mem_patch01 0x30a9 002872 fetcht 2 ,mem_inq_window 0x30aa 002873 force 4 ,queue 0x30ab 002874 call sniff_check_window 0x30ac 002875 rtn user 0x30ad 002876 call afh_clear 0x30ae 002877 force 0 ,freq_mode : 002878 inquiry_restart: 0x30af 002879 rtn timeout 0x30b0 002880 set0 mark_fhs_already_good ,mark 0x30b1 002881 set0 mark_fhs_eir ,mark : 002882 inquiry_rx_restart: 0x30b2 002883 add clkn_bt ,1 ,bt_clk 0x30b3 002884 isolate1 mark_inquiry_trainb ,mark 0x30b4 002885 setflag true ,2 ,freq_mode 0x30b5 002886 compare 0x00 ,bt_clk ,0x02 0x30b6 002887 nbranch inquiry_receive ,true : 002889 inquiry_transmit: 0x30b7 002890 set0 mark_ext_patch ,mark 0x30b8 002891 bpatch patch01_5 ,mem_patch01 0x30b9 002892 fetch 1 ,mem_inquiry_transmit 0x30ba 002893 increase 1 ,pdata 0x30bb 002894 store 1 ,mem_inquiry_transmit 0x30bc 002895 call fetch_giac 0x30bd 002896 call tx_radio_freq 0x30be 002897 call fetch_diac 0x30bf 002898 call start_transmitter 0x30c0 002899 call start_tx_native 0x30c1 002900 call send_access_word 0x30c2 002901 call end_of_packet 0x30c3 002902 call inquiry_check_train 0x30c4 002903 branch inquiry_restart : 002905 inquiry_check_train: 0x30c5 002906 set0 mark_ext_patch ,mark 0x30c6 002907 bpatch patch01_6 ,mem_patch01 0x30c7 002908 fetch 1 ,mem_nfreq_index_inq 0x30c8 002909 increase -1 ,pdata 0x30c9 002910 store 1 ,mem_nfreq_index_inq 0x30ca 002911 rtn positive 0x30cb 002912 jam 31 ,mem_nfreq_index_inq 0x30cc 002913 fetch 1 ,mem_ninqy_index 0x30cd 002914 increase -1 ,pdata 0x30ce 002915 store 1 ,mem_ninqy_index 0x30cf 002916 rtn positive 0x30d0 002917 setflip mark_inquiry_trainb ,mark 0x30d1 002918 jam param_ninquiry ,mem_ninqy_index 0x30d2 002919 rtn : 002921 inquiry_receive: 0x30d3 002922 set0 mark_ext_patch ,mark 0x30d4 002923 bpatch patch01_7 ,mem_patch01 0x30d5 002924 call fetch_giac 0x30d6 002925 call rx_radio_freq 0x30d7 002926 call fetch_diac 0x30d8 002927 call start_rx_native 0x30d9 002928 call start_receiver 0x30da 002929 call wait_access_clkn_rt 0x30db 002930 branch inquiry_sync ,sync 0x30dc 002931 call inquiry_check_train 0x30dd 002932 branch inquiry_rx_restart : 002933 inquiry_sync: 0x30de 002934 set0 mark_ext_patch ,mark 0x30df 002935 bpatch patch02_0 ,mem_patch02 0x30e0 002936 call save_rssi 0x30e1 002937 call scan_mode_whiten 0x30e2 002938 call receive_packet_whitened 0x30e3 002939 set0 mark_rxbuf_inuse ,mark 0x30e4 002940 rtnmark0 mark_fhs_already_good : 002941 inquiry_receive_rtn: 0x30e5 002942 set0 mark_ext_patch ,mark 0x30e6 002943 bpatch patch02_1 ,mem_patch02 0x30e7 002944 fetch 1 ,mem_at_using_flag 0x30e8 002945 bbit1 at_flag_inq ,at_inquiry_reply 0x30e9 002946 call hci_inquiry_reply : 002947 inquiry_receive_eir_rtn: 0x30ea 002948 fetch 1 ,mem_inquiry_rcv 0x30eb 002949 increase 1 ,pdata 0x30ec 002950 store 1 ,mem_inquiry_rcv 0x30ed 002951 rtn : 002952 inquiry_receive_eir: 0x30ee 002953 set0 mark_fhs_already_good ,mark 0x30ef 002954 call rf_setup_time_slave_slot_eir 0x30f0 002955 call fetch_giac 0x30f1 002956 call rx_radio_freq 0x30f2 002957 call init_rx_packet_flags 0x30f3 002958 call start_rx_native 0x30f4 002959 call start_receiver 0x30f5 002960 call wait_access_clkn_rt 0x30f6 002961 branch inquiry_receive_eir_packet ,sync 0x30f7 002962 rtn : 002963 inquiry_receive_eir_packet: 0x30f8 002964 call scan_mode_whiten 0x30f9 002965 call receive_packet_whitened 0x30fa 002966 set0 mark_rxbuf_inuse ,mark 0x30fb 002967 branch inquiry_receive_rtn ,crc_failed 0x30fc 002968 call hci_inquiry_reply_eir 0x30fd 002969 branch inquiry_receive_eir_rtn : 002971 rf_setup_time_slave_slot_eir: 0x30fe 002972 arg param_rf_setup ,timeup : 002973 rf_setup_time_eir: 0x30ff 002974 until clkn_rt ,meet 0x3100 002975 and clkn_bt ,3 ,pdata 0x3101 002976 bne 1 ,rf_setup_time_eir 0x3102 002977 rtn : 002986 master_page: 0x3103 002987 set0 mark_ext_patch ,mark 0x3104 002988 bpatch patch02_2 ,mem_patch02 0x3105 002989 enable master 0x3106 002990 enable clknt 0x3107 002991 fetch 2 ,mem_page_interval 0x3108 002992 branch master_page_no_interval ,blank 0x3109 002993 force page_interval_timer ,queue 0x310a 002994 call timer_check 0x310b 002995 nrtn blank : 002996 master_page_no_interval: 0x310c 002997 set0 mark_ext_patch ,mark 0x310d 002998 bpatch patch02_3 ,mem_patch02 0x310e 002999 fetcht 2 ,mem_page_window 0x310f 003000 force 40 ,queue 0x3110 003001 call sniff_check_window 0x3111 003002 branch page_exit ,user 0x3112 003003 force page_length_timer ,queue 0x3113 003004 call timer_check 0x3114 003005 nbranch page_start ,blank 0x3115 003006 fetch 1 ,mem_state_map 0x3116 003007 bbit1 smap_name_req ,master_npage_timeout 0x3117 003008 force hci_error_page_timeout ,temp 0x3118 003009 call hci_send_connection_error 0x3119 003010 branch master_page_timeout : 003011 master_npage_timeout: 0x311a 003012 arg mem_tmp_buffer ,contw 0x311b 003013 arg 8 ,loopcnt 0x311c 003014 call memset0 0x311d 003015 force hci_error_page_timeout ,queue 0x311e 003016 call hci_send_name : 003017 master_page_timeout: 0x311f 003018 set0 mark_ext_patch ,mark 0x3120 003019 bpatch patch02_4 ,mem_patch02 0x3121 003020 jam 0 ,mem_state 0x3122 003021 call init_lmp_work 0x3123 003022 jam 0 ,memui_reconnect_mode 0x3124 003023 jam bt_evt_reconn_page_timeout ,mem_fifo_temp 0x3125 003024 call ui_ipc_send_event 0x3126 003025 branch page_exit : 003027 page_start: 0x3127 003028 set0 mark_ext_patch ,mark 0x3128 003029 bpatch patch02_5 ,mem_patch02 0x3129 003030 force 0 ,timeup 0x312a 003031 until clkn_rt ,meet 0x312b 003032 fetch 1 ,mem_page_clk 0x312c 003033 increase -1 ,pdata 0x312d 003034 ixor clkn_bt ,pdata 0x312e 003035 compare 0 ,pdata ,3 0x312f 003036 nbranch page_start ,true 0x3130 003037 deposit am_addr 0x3131 003038 store 1 ,mem_fhs_am_addr 0x3132 003039 force 0 ,n_tx_slot 0x3133 003040 force 0 ,freq_mode : 003042 page_restart: 0x3134 003043 set0 mark_ext_patch ,mark 0x3135 003044 bpatch patch02_6 ,mem_patch02 0x3136 003045 branch page_exit ,timeout 0x3137 003046 call fetch_page_bt_adr 0x3138 003047 arg param_rf_setup ,timeup 0x3139 003048 until clkn_rt ,meet : 003049 page_rx_restart: 0x313a 003050 set0 mark_ext_patch ,mark 0x313b 003051 bpatch patch02_7 ,mem_patch02 0x313c 003052 fetch 4 ,mem_page_clk 0x313d 003053 iforce bt_clk 0x313e 003054 increase 1 ,pdata 0x313f 003055 store 4 ,mem_page_clk 0x3140 003056 isolate1 mark_page_trainb ,mark 0x3141 003057 setflag true ,2 ,freq_mode 0x3142 003058 compare 0x00 ,bt_clk ,0x02 0x3143 003059 nbranch page_receive ,true 0x3144 003060 fetch 1 ,mem_page_transmit 0x3145 003061 increase 1 ,pdata 0x3146 003062 store 1 ,mem_page_transmit 0x3147 003063 call tx_radio_freq 0x3148 003064 call start_transmitter 0x3149 003065 call start_tx_native 0x314a 003066 call send_access_word 0x314b 003067 call end_of_packet 0x314c 003068 call page_check_train 0x314d 003069 branch page_restart : 003070 master_dispatch_exit: : 003071 page_exit: 0x314e 003072 set0 mark_ext_patch ,mark 0x314f 003073 bpatch patch03_0 ,mem_patch03 0x3150 003074 disable master 0x3151 003075 fetch 2 ,mem_page_interval 0x3152 003076 rtn blank 0x3153 003077 force page_interval_timer ,queue 0x3154 003078 branch timer_init : 003080 page_check_train: 0x3155 003081 set0 mark_ext_patch ,mark 0x3156 003082 bpatch patch03_1 ,mem_patch03 0x3157 003083 fetch 1 ,mem_nfreq_index_page 0x3158 003084 increase -1 ,pdata 0x3159 003085 store 1 ,mem_nfreq_index_page 0x315a 003086 rtn positive 0x315b 003087 jam 31 ,mem_nfreq_index_page 0x315c 003088 fetch 1 ,mem_npage_index 0x315d 003089 increase -1 ,pdata 0x315e 003090 store 1 ,mem_npage_index 0x315f 003091 rtn positive 0x3160 003092 setflip mark_page_trainb ,mark 0x3161 003093 fetch 1 ,mem_npage 0x3162 003094 store 1 ,mem_npage_index 0x3163 003095 rtn : 003097 page_receive: 0x3164 003098 set0 mark_ext_patch ,mark 0x3165 003099 bpatch patch03_2 ,mem_patch03 0x3166 003100 call rx_radio_freq 0x3167 003101 call start_rx_native 0x3168 003102 call start_receiver 0x3169 003103 call wait_access_clkn_rt 0x316a 003104 branch page_sync ,sync 0x316b 003105 call page_check_train 0x316c 003106 branch page_rx_restart : 003107 page_sync: 0x316d 003108 call end_of_packet 0x316e 003109 fetch 1 ,mem_page_rcv 0x316f 003110 increase 1 ,pdata 0x3170 003111 store 1 ,mem_page_rcv 0x3171 003112 force 0 ,stop_watch 0x3172 003113 fetch 4 ,mem_page_clk : 003114 page_send_fhs: 0x3173 003115 set0 mark_ext_patch ,mark 0x3174 003116 bpatch patch03_3 ,mem_patch03 0x3175 003117 call rf_setup_time_master_slot 0x3176 003118 call fetch_page_bt_adr 0x3177 003119 increase 1 ,n_tx_slot : 003120 page_send_fhs_continue: 0x3178 003121 and_into 0x1fd ,bt_clk 0x3179 003122 and_into 0x1fc ,freq_mode 0x317a 003123 call tx_radio_freq 0x317b 003124 call start_transmitter 0x317c 003125 call start_tx_native 0x317d 003126 call send_access_word 0x317e 003127 deposit clkn_bt 0x317f 003128 store 4 ,mem_clkn_bt 0x3180 003129 force 0 ,am_addr 0x3181 003130 force type_fhs ,type 0x3182 003131 call scan_mode_whiten 0x3183 003132 call transmit_packet_whitened : 003133 page_wait_fhs_reply: 0x3184 003134 set0 mark_ext_patch ,mark 0x3185 003135 bpatch patch03_4 ,mem_patch03 0x3186 003136 call rf_setup_time_slave_slot 0x3187 003137 or_into 0x02 ,bt_clk 0x3188 003138 and_into 0x1fc ,freq_mode 0x3189 003139 call rx_radio_freq 0x318a 003140 call start_rx_native 0x318b 003141 call start_receiver 0x318c 003142 call wait_access_clkn_rt 0x318d 003143 call end_of_packet ,sync 0x318e 003144 branch page_wait_fhs_reply_ok ,sync 0x318f 003145 fetch 1 ,mem_fhs_wait_counter 0x3190 003146 branch page_restart ,blank 0x3191 003147 increase -1 ,pdata 0x3192 003148 store 1 ,mem_fhs_wait_counter 0x3193 003149 branch page_send_fhs : 003151 page_wait_fhs_reply_ok: 0x3194 003152 set0 mark_ext_patch ,mark 0x3195 003153 bpatch patch03_5 ,mem_patch03 0x3196 003154 fetch 1 ,mem_page_rcv_fhs 0x3197 003155 increase 1 ,pdata 0x3198 003156 store 1 ,mem_page_rcv_fhs 0x3199 003157 call prepare_newconn : 003158 master_newconn_loop: 0x319a 003159 call master_newconn_once 0x319b 003160 branch newconn_poll_responded ,sync 0x319c 003161 call new_conn_timeout 0x319d 003162 nbranch master_newconn_loop ,blank 0x319e 003163 branch page_restart : 003165 newconn_poll_responded: 0x319f 003166 set0 mark_ext_patch ,mark 0x31a0 003167 bpatch patch03_6 ,mem_patch03 0x31a1 003168 fetch 1 ,mem_state 0x31a2 003169 set0 state_inpage ,pdata 0x31a3 003170 store 1 ,mem_state 0x31a4 003171 call newconn_init 0x31a5 003172 disable master 0x31a6 003173 rtn : 003176 master_dispatch: 0x31a7 003177 set0 mark_ext_patch ,mark 0x31a8 003178 bpatch patch03_7 ,mem_patch03 0x31a9 003179 enable master 0x31aa 003180 enable clknt 0x31ab 003181 call role_switch_master 0x31ac 003182 rtn user 0x31ad 003183 call check_bt_disabled 0x31ae 003184 call rf_setup_time_master_slot 0x31af 003185 add clkn_bt ,1 ,bt_clk 0x31b0 003186 call fetch_self_bt_adr 0x31b1 003187 force 0x03 ,freq_mode 0x31b2 003188 call load_esco 0x31b3 003189 call get_sco_data 0x31b4 003190 call scheduler_tx_l2cap_pkt 0x31b5 003191 call prepare_tx 0x31b6 003192 call tx_radio_freq 0x31b7 003193 call start_transmitter 0x31b8 003194 call start_tx_native 0x31b9 003195 call send_access_word 0x31ba 003196 call transmit_packet : 003197 master_loop: 0x31bb 003198 set0 mark_ext_patch ,mark 0x31bc 003199 bpatch patch04_0 ,mem_patch04 0x31bd 003200 call parse_lmp 0x31be 003201 call process_cmd 0x31bf 003202 call hci_send_num_complete_packets 0x31c0 003203 call master_conn_recv_packet 0x31c1 003204 nbranch master_notmatch ,match 0x31c2 003205 call supervision_flush 0x31c3 003206 call parse_l2cap 0x31c4 003207 fetch 1 ,mem_master_rcvcnt 0x31c5 003208 increase 1 ,pdata 0x31c6 003209 store 1 ,mem_master_rcvcnt : 003210 master_notmatch: 0x31c7 003211 set0 mark_ext_patch ,mark 0x31c8 003212 bpatch patch04_1 ,mem_patch04 0x31c9 003213 call scheduler_process 0x31ca 003214 call check_master_disconnect 0x31cb 003215 nrtn master 0x31cc 003216 call check_attempt 0x31cd 003217 nbranch master_attempt ,blank : 003218 master_exit: 0x31ce 003219 call process_sco_data 0x31cf 003220 call restore_esco 0x31d0 003221 disable master 0x31d1 003222 rtn : 003224 master_attempt: 0x31d2 003225 call prepare_tx 0x31d3 003226 call master_conn_send_packet 0x31d4 003227 branch master_loop : 003230 check_master_disconnect: 0x31d5 003231 branch check_master_match ,match 0x31d6 003232 call supervision_update 0x31d7 003233 branch master_disconnect ,positive : 003234 check_master_match: 0x31d8 003235 call check_disconnect_timeout 0x31d9 003236 nbranch master_disconnect ,user 0x31da 003237 fetch 1 ,mem_state_map 0x31db 003238 rtnbit0 smap_name_req 0x31dc 003239 rtnbit1 smap_name_res 0x31dd 003240 fetch 1 ,mem_op 0x31de 003241 rtnbit1 op_disconn 0x31df 003242 call conn_timer_expired 0x31e0 003243 nrtn blank 0x31e1 003244 fetch 1 ,mem_nameres_cnt 0x31e2 003245 increase -1 ,pdata 0x31e3 003246 store 1 ,mem_nameres_cnt 0x31e4 003247 nrtn blank 0x31e5 003248 branch lmp_disconnect : 003250 master_disconnect: 0x31e6 003251 set0 mark_ext_patch ,mark 0x31e7 003252 bpatch patch04_2 ,mem_patch04 0x31e8 003253 call quit_connection 0x31e9 003254 disable master 0x31ea 003255 fetch 1 ,mem_state_map 0x31eb 003256 bbit1 smap_name_req ,master_name_disconnect 0x31ec 003257 fetch 1 ,mem_state 0x31ed 003258 bbit0 state_conn_comp ,master_disconnect_quiet 0x31ee 003259 fetcht 1 ,mem_conn_handle 0x31ef 003260 branch hci_send_disconn_complete : 003261 master_disconnect_quiet: 0x31f0 003262 force hci_error_connection_timeout ,temp 0x31f1 003263 branch hci_send_connection_error : 003264 master_name_disconnect: 0x31f2 003265 force hci_success ,queue 0x31f3 003266 fetch 1 ,mem_state_map 0x31f4 003267 bbit1 smap_name_res ,hci_send_name : 003268 master_name_error: 0x31f5 003269 force hci_error_page_timeout ,queue 0x31f6 003270 arg mem_tmp_buffer ,contw 0x31f7 003271 arg 8 ,loopcnt 0x31f8 003272 call memset0 0x31f9 003273 branch hci_send_name : 003275 disconnect_stop_sco: 0x31fa 003276 set0 mark_ext_patch ,mark 0x31fb 003277 bpatch patch04_3 ,mem_patch04 0x31fc 003278 fetch 1 ,mem_state 0x31fd 003279 rtnbit0 state_insco 0x31fe 003280 fetcht 1 ,mem_conn_handle 0x31ff 003281 fetch 1 ,mem_sco_asso_handle 0x3200 003282 isub temp ,null 0x3201 003283 nrtn zero 0x3202 003284 call stop_esco 0x3203 003285 branch restore_esco_check_no_mark : 003287 check_disconnect_timeout: 0x3204 003288 set0 mark_ext_patch ,mark 0x3205 003289 bpatch patch04_4 ,mem_patch04 0x3206 003290 enable user 0x3207 003291 fetch 1 ,mem_op 0x3208 003292 rtnbit0 op_disconn 0x3209 003293 call conn_timer_expired 0x320a 003294 nrtn blank : 003295 disable_usr: 0x320b 003296 disable user 0x320c 003297 rtn : 003299 conn_timer_expired: 0x320d 003300 fetch 1 ,mem_conn_timer 0x320e 003301 increase -1 ,pdata 0x320f 003302 store 1 ,mem_conn_timer 0x3210 003303 rtn : 003305 linkkey_ready: 0x3211 003306 set0 mark_ext_patch ,mark 0x3212 003307 bpatch patch04_5 ,mem_patch04 0x3213 003308 fetch 1 ,mem_state 0x3214 003309 bbit1 state_linkkey ,linkkey_set 0x3215 003310 fetch 1 ,mem_device_option 0x3216 003311 beq dvc_op_hci ,linkkey_send_hci 0x3217 003312 fetch 1 ,mem_pairing_auth 0x3218 003313 branch linkkey_set ,blank 0x3219 003314 jam defalt_pairing_auth ,mem_pairing_auth 0x321a 003315 jam bt_evt_linkkey_generate ,mem_fifo_temp 0x321b 003316 call ui_ipc_send_event 0x321c 003317 branch linkkey_set : 003318 linkkey_send_hci: 0x321d 003319 call check_localsm 0x321e 003320 ncall hci_send_linkkey_notification ,true : 003321 linkkey_set: 0x321f 003322 set0 mark_ext_patch ,mark 0x3220 003323 bpatch patch04_6 ,mem_patch04 0x3221 003324 call context_traverse_linkkey 0x3222 003325 fetch 1 ,mem_state 0x3223 003326 set1 state_linkkey ,pdata 0x3224 003327 store 1 ,mem_state 0x3225 003328 jam 1 ,mem_link_key_exists 0x3226 003329 fetch 1 ,mem_conn_sm 0x3227 003330 bne conn_sm_pairing ,linkkey_set_continue : 003331 linkkey_set_continue: 0x3228 003332 rtn : 003334 generate_linkkey_continue: 0x3229 003335 jam pairing_auth ,mem_pairing_auth : 003336 clear_linkstate: 0x322a 003337 fetch 1 ,mem_state 0x322b 003338 set0 state_linkkey ,pdata 0x322c 003339 store 1 ,mem_state 0x322d 003340 rtn : 003344 role_switch_check: 0x322e 003345 set0 mark_ext_patch ,mark 0x322f 003346 bpatch patch04_7 ,mem_patch04 0x3230 003347 disable user 0x3231 003348 fetch 1 ,mem_state 0x3232 003349 rtnbit0 state_insniff 0x3233 003350 fetch 2 ,mem_tsniff 0x3234 003351 nrtn blank 0x3235 003352 fetch 4 ,mem_sniff_anchor 0x3236 003353 branch role_switch_clkn ,clknt 0x3237 003354 isub clke_bt ,pdata 0x3238 003355 branch role_switch_clke : 003356 role_switch_clkn: 0x3239 003357 isub clkn_bt ,pdata : 003358 role_switch_clke: 0x323a 003359 sub pdata ,4 ,null 0x323b 003360 nrtn positive 0x323c 003361 fetch 1 ,mem_state 0x323d 003362 set0 state_insniff ,pdata 0x323e 003363 store 1 ,mem_state 0x323f 003364 enable user 0x3240 003365 rtn : 003368 role_switch_prepare: 0x3241 003369 copy pdata ,temp 0x3242 003370 set0 mark_ext_patch ,mark 0x3243 003371 bpatch patch05_0 ,mem_patch05 0x3244 003372 store 4 ,mem_sniff_anchor : 003373 role_switch_prepare0: 0x3245 003374 jam switch_flag_accept ,mem_switch_flag 0x3246 003375 fetch 1 ,mem_state 0x3247 003376 set1 state_insniff ,pdata 0x3248 003377 store 1 ,mem_state 0x3249 003378 force 0 ,pdata 0x324a 003379 store 2 ,mem_tsniff 0x324b 003380 jam 10 ,mem_current_sniff_attempt 0x324c 003381 jam 1 ,mem_sniff_attempt 0x324d 003382 rtn : 003385 role_switch_master: 0x324e 003386 set0 mark_ext_patch ,mark 0x324f 003387 bpatch patch05_1 ,mem_patch05 0x3250 003388 call role_switch_check 0x3251 003389 nrtn user 0x3252 003390 disable user 0x3253 003391 jam param_newconnto ,mem_newconnto_counter 0x3254 003392 set0 mark_fhs_already_good ,mark : 003393 roles_waitfhs_loop: 0x3255 003394 call rf_setup_time_master_slot 0x3256 003395 call master_recv_packet 0x3257 003396 bmark1 mark_fhs_already_good ,roles_replyto_fhs 0x3258 003397 call new_conn_timeout 0x3259 003398 nbranch roles_waitfhs_loop ,blank : 003399 role_switch_fail_master: 0x325a 003400 set0 mark_ext_patch ,mark 0x325b 003401 bpatch patch05_2 ,mem_patch05 0x325c 003402 disable user 0x325d 003403 deposit clkn_bt 0x325e 003404 store 4 ,mem_next_btclk 0x325f 003405 enable clknt 0x3260 003406 enable master 0x3261 003407 jam bt_evt_switch_fail_master ,mem_fifo_temp 0x3262 003408 branch ui_ipc_send_event : 003410 roles_replyto_fhs: 0x3263 003411 set0 mark_ext_patch ,mark 0x3264 003412 bpatch patch05_3 ,mem_patch05 0x3265 003413 call rf_setup_time_slave_slot 0x3266 003414 call master_send_packet 0x3267 003415 disable clknt 0x3268 003416 disable master 0x3269 003417 call apply_switch_clke 0x326a 003418 call prepare_newconn : 003419 roles_newconns_loop: 0x326b 003420 set0 mark_ext_patch ,mark 0x326c 003421 bpatch patch05_4 ,mem_patch05 0x326d 003422 call slave_newconn_once 0x326e 003423 branch roles_newconns_responded ,match 0x326f 003424 call new_conn_timeout 0x3270 003425 nbranch roles_newconns_loop ,blank 0x3271 003426 branch role_switch_fail_master : 003427 roles_newconns_responded: 0x3272 003428 force 1 ,temp 0x3273 003429 call hci_send_role_change 0x3274 003430 fetch 1 ,mem_mode 0x3275 003431 set0 mode_master ,pdata 0x3276 003432 store 1 ,mem_mode 0x3277 003433 call supervision_flush 0x3278 003434 call calc_clke_offset 0x3279 003435 enable user 0x327a 003436 jam bt_evt_switch_success_master ,mem_fifo_temp 0x327b 003437 branch ui_ipc_send_event : 003440 load_esco: 0x327c 003441 set0 mark_ext_patch ,mark 0x327d 003442 bpatch patch05_5 ,mem_patch05 0x327e 003443 rtnmark0 mark_esco 0x327f 003444 fetch 1 ,mem_state 0x3280 003445 rtnbit0 state_insco : 003446 load_esco_do: 0x3281 003447 call init_esco_ibuff 0x3282 003448 fetch 1 ,mem_esco_arq 0x3283 003449 fetcht 1 ,mem_arq 0x3284 003450 storet 1 ,mem_esco_saved_arq 0x3285 003451 store 1 ,mem_arq 0x3286 003452 deposit am_addr 0x3287 003453 store 1 ,mem_saved_amaddr 0x3288 003454 fetch 1 ,mem_esco_addr 0x3289 003455 iforce am_addr 0x328a 003456 set0 mark_esco_rxok ,mark 0x328b 003457 fetch 1 ,mem_last_type 0x328c 003458 store 1 ,mem_last_type_saved 0x328d 003459 fetch 1 ,mem_last_type_esco 0x328e 003460 store 1 ,mem_last_type 0x328f 003461 rtn : 003463 restore_esco: 0x3290 003464 set0 mark_ext_patch ,mark 0x3291 003465 bpatch patch05_6 ,mem_patch05 0x3292 003466 rtnmark0 mark_esco : 003467 restore_esco_check_no_mark: 0x3293 003468 call check_esco_amaddr 0x3294 003469 nrtn true : 003470 restore_esco_do: 0x3295 003471 call clear_got_tx 0x3296 003472 fetch 1 ,mem_esco_saved_arq 0x3297 003473 fetcht 1 ,mem_arq 0x3298 003474 store 1 ,mem_arq 0x3299 003475 storet 1 ,mem_esco_arq 0x329a 003476 fetch 1 ,mem_saved_amaddr 0x329b 003477 iforce am_addr 0x329c 003478 fetch 1 ,mem_last_type 0x329d 003479 store 1 ,mem_last_type_esco 0x329e 003480 fetch 1 ,mem_last_type_saved 0x329f 003481 store 1 ,mem_last_type 0x32a0 003482 setarg 0xffff 0x32a1 003483 store 2 ,mem_retransmission_cnt 0x32a2 003484 rtn : 003489 context_load: 0x32a3 003490 set0 mark_ext_patch ,mark 0x32a4 003491 bpatch patch05_7 ,mem_patch05 0x32a5 003492 set1 mark_context ,mark 0x32a6 003493 deposit rega 0x32a7 003494 store 2 ,mem_context_ptr 0x32a8 003495 force context_size ,loopcnt 0x32a9 003496 arg mem_le_state ,contw 0x32aa 003497 add rega ,coffset_mode ,contr 0x32ab 003498 ifetch 1 ,contr 0x32ac 003499 copy rega ,contr 0x32ad 003500 bbit1 mode_le ,memcpy 0x32ae 003501 arg mem_state ,contw 0x32af 003502 call memcpy 0x32b0 003503 disable attempt 0x32b1 003504 fetch 1 ,mem_amaddr 0x32b2 003505 iforce am_addr 0x32b3 003506 jam 1 ,mem_current_sniff_attempt 0x32b4 003507 branch context_load_master ,master 0x32b5 003508 jam 1 ,mem_current_sniff_attempt : 003509 context_load_master: 0x32b6 003510 fetch 1 ,mem_state 0x32b7 003511 rtnbit0 state_insniff 0x32b8 003512 fetch 1 ,mem_sniff_attempt 0x32b9 003513 store 1 ,mem_current_sniff_attempt 0x32ba 003514 fetch 1 ,mem_sniff_timeout 0x32bb 003515 store 1 ,mem_current_sniff_timeout 0x32bc 003516 rtn : 003518 context_save: 0x32bd 003519 set0 mark_ext_patch ,mark 0x32be 003520 bpatch patch06_0 ,mem_patch06 0x32bf 003521 fetch 2 ,mem_context_ptr 0x32c0 003522 iforce contw 0x32c1 003523 force context_size ,loopcnt 0x32c2 003524 arg mem_le_state ,contr 0x32c3 003525 branch memcpy ,le 0x32c4 003526 arg mem_state ,contr 0x32c5 003527 branch memcpy : 003531 context_get_next: 0x32c6 003532 fetcht 1 ,mem_current_context 0x32c7 003533 arg context_num ,loopcnt : 003534 context_get_next_loop: 0x32c8 003535 increase 1 ,temp 0x32c9 003536 compare context_num ,temp ,0xff 0x32ca 003537 nbranch context_get_next_cont ,true 0x32cb 003538 arg 0 ,temp : 003539 context_get_next_cont: 0x32cc 003540 storet 1 ,mem_current_context 0x32cd 003541 mul32 temp ,context_size ,pdata 0x32ce 003542 arg mem_context ,rega 0x32cf 003543 iadd rega ,rega 0x32d0 003544 ifetch 1 ,rega 0x32d1 003545 bbit1 state_insniff ,context_get_next_sniff 0x32d2 003546 rtnbit1 state_inconn 0x32d3 003547 rtnbit1 state_inpage : 003548 context_get_next_sniff: 0x32d4 003549 loop context_get_next_loop 0x32d5 003550 rtn : 003552 context_new: 0x32d6 003553 set0 mark_ext_patch ,mark 0x32d7 003554 bpatch patch06_1 ,mem_patch06 0x32d8 003555 arg context_search_empty ,regc 0x32d9 003556 call context_search 0x32da 003557 nrtn zero 0x32db 003558 deposit rega 0x32dc 003559 store 2 ,mem_context_ptr 0x32dd 003560 force 0 ,null 0x32de 003561 rtn : 003565 context_check_all_wack: 0x32df 003566 call check_esco_amaddr 0x32e0 003567 branch context_check_esco_wack ,true 0x32e1 003568 fetch 2 ,mem_context_ptr 0x32e2 003569 add pdata ,coffset_arq ,contw 0x32e3 003570 fetch 1 ,mem_arq 0x32e4 003571 istore 1 ,contw 0x32e5 003572 arg context_check_a_wack ,regc 0x32e6 003573 branch context_search : 003575 context_check_esco_wack: 0x32e7 003576 fetch 1 ,mem_arq 0x32e8 003577 isolate1 wack ,pdata 0x32e9 003578 branch context_esco_wack ,true 0x32ea 003579 force 1 ,null 0x32eb 003580 rtn : 003581 context_esco_wack: 0x32ec 003582 force 0 ,null 0x32ed 003583 rtn : 003586 context_check_idle: 0x32ee 003587 arg context_check_inconn ,regc 0x32ef 003588 branch context_search : 003590 context_traverse_linkkey: 0x32f0 003591 fetcht 2 ,mem_context_ptr 0x32f1 003592 arg context_traverse_clearkey ,regc 0x32f2 003593 branch context_search : 003595 context_traverse_max_slot: 0x32f3 003596 fetcht 2 ,mem_context_ptr 0x32f4 003597 arg context_traverse_mslot ,regc 0x32f5 003598 branch context_search : 003601 context_search_conn_handle: 0x32f6 003602 fetcht 1 ,mem_hci_conn_handle : 003603 context_search_conn_handle2: 0x32f7 003604 arg context_search_handle ,regc 0x32f8 003605 branch context_search : 003607 context_search_plap: 0x32f9 003608 set0 mark_ext_patch ,mark 0x32fa 003609 bpatch patch06_2 ,mem_patch06 0x32fb 003610 fetcht 6 ,mem_hci_plap : 003611 context_search_plap2: 0x32fc 003612 arg context_search_lap ,regc 0x32fd 003613 branch context_search : 003615 context_search_insniff: 0x32fe 003616 arg context_search_sniff ,regc 0x32ff 003617 branch context_search : 003619 context_search_sniff_window: 0x3300 003620 arg context_search_window ,regc : 003621 context_search: 0x3301 003622 set0 mark_ext_patch ,mark 0x3302 003623 bpatch patch06_3 ,mem_patch06 0x3303 003624 arg mem_context ,rega 0x3304 003625 force context_num ,loopcnt : 003626 context_search_loop: 0x3305 003627 ifetch 1 ,rega 0x3306 003628 copy regc ,pc : 003629 context_search_next: 0x3307 003630 increase context_size ,rega 0x3308 003631 loop context_search_loop 0x3309 003632 force 1 ,null 0x330a 003633 rtn : 003635 context_search_empty: 0x330b 003636 bbit1 state_inconn ,context_search_next 0x330c 003637 bbit1 state_inpage ,context_search_next 0x330d 003638 force 0 ,null 0x330e 003639 rtn : 003641 context_search_lap: 0x330f 003642 bbit1 state_inpage ,context_search_lap_cont 0x3310 003643 bbit0 state_inconn ,context_search_next : 003644 context_search_lap_cont: 0x3311 003645 add rega ,coffset_plap ,contr 0x3312 003646 ifetch 6 ,contr 0x3313 003647 isub temp ,null 0x3314 003648 rtn zero 0x3315 003649 branch context_search_next : 003651 context_search_handle: 0x3316 003652 bbit0 state_inconn ,context_search_next 0x3317 003653 add rega ,coffset_conn_handle ,contr 0x3318 003654 ifetch 1 ,contr 0x3319 003655 isub temp ,null 0x331a 003656 rtn zero 0x331b 003657 branch context_search_next : 003659 context_search_sniff: 0x331c 003660 bbit0 state_insniff ,context_search_next : 003661 context_search_sniff_loop: 0x331d 003662 call context_get_anchor 0x331e 003663 bbit1 27 ,context_search_sniff_cont 0x331f 003664 isolate0 27 ,temp 0x3320 003665 branch context_search_sniff_cont ,true 0x3321 003666 set1 28 ,pdata : 003667 context_search_sniff_cont: 0x3322 003668 isub temp ,pdata 0x3323 003669 increase 1 ,pdata 0x3324 003670 branch context_search_sniff_miss ,positive 0x3325 003671 increase 5 ,pdata 0x3326 003672 nbranch context_search_next ,positive : 003673 context_search_meet: 0x3327 003674 copy temp ,bt_clk 0x3328 003675 call context_next_anchor 0x3329 003676 force 0 ,null 0x332a 003677 rtn : 003679 context_search_sniff_miss: 0x332b 003680 iforce regb 0x332c 003681 add rega ,coffset_tsniff ,contr 0x332d 003682 ifetch 2 ,contr 0x332e 003683 branch context_search_meet ,blank 0x332f 003684 call context_next_anchor 0x3330 003685 branch context_search_sniff_loop : 003687 context_check_inconn: 0x3331 003688 bbit0 state_inconn ,context_search_next 0x3332 003689 force 0 ,null 0x3333 003690 rtn : 003692 context_check_a_wack: 0x3334 003693 bbit0 state_inconn ,context_search_next 0x3335 003694 add rega ,coffset_mode ,contr 0x3336 003695 ifetch 1 ,contr 0x3337 003696 bbit1 mode_le ,context_search_next 0x3338 003697 add rega ,coffset_arq ,contr 0x3339 003698 ifetch 1 ,contr 0x333a 003699 bbit0 wack ,context_search_next 0x333b 003700 force 0 ,null 0x333c 003701 rtn : 003703 context_get_anchor: 0x333d 003704 add rega ,coffset_mode ,contr 0x333e 003705 ifetcht 1 ,contr 0x333f 003706 deposit clkn_bt 0x3340 003707 isolate1 mode_master ,temp 0x3341 003708 add rega ,coffset_sniff_anchor ,contr 0x3342 003709 ifetcht 4 ,contr 0x3343 003710 rtn true 0x3344 003711 add rega ,coffset_clk_offset ,contr 0x3345 003712 ifetch 6 ,contr 0x3346 003713 call calc_clke2 0x3347 003714 deposit clke_bt 0x3348 003715 rtn : 003717 context_next_anchor: 0x3349 003718 add rega ,coffset_tsniff ,contr 0x334a 003719 add rega ,coffset_sniff_anchor ,contw 0x334b 003720 ifetch 2 ,contr 0x334c 003721 iadd temp ,timeup 0x334d 003722 deposit timeup 0x334e 003723 istore 4 ,contw 0x334f 003724 branch le_context_nexthop : 003727 context_search_window: 0x3350 003728 bbit0 state_insniff ,context_search_next 0x3351 003729 call context_get_anchor 0x3352 003730 iadd stop_watch ,pdata 0x3353 003731 iadd stop_watch ,pdata 0x3354 003732 iadd queue ,pdata 0x3355 003733 isub temp ,null 0x3356 003734 nbranch context_search_next ,positive 0x3357 003735 force 0 ,null 0x3358 003736 rtn : 003738 context_traverse_mslot: 0x3359 003739 bbit0 state_inconn ,context_search_next 0x335a 003740 deposit temp 0x335b 003741 isub rega ,null 0x335c 003742 branch context_search_next ,null 0x335d 003743 add rega ,coffset_mode ,contr 0x335e 003744 ifetch 1 ,contr 0x335f 003745 bbit1 mode_le ,context_search_next 0x3360 003746 add rega ,coffset_lmp_to_send ,contw 0x3361 003747 ifetch 1 ,contw 0x3362 003748 nbranch context_search_next ,blank 0x3363 003749 force lmp_max_slot ,pdata 0x3364 003750 istore 1 ,contw 0x3365 003751 branch context_search_next : 003753 context_traverse_clearkey: 0x3366 003754 bbit0 state_inconn ,context_search_next 0x3367 003755 deposit temp 0x3368 003756 isub rega ,null 0x3369 003757 branch context_search_next ,null 0x336a 003758 add rega ,coffset_mode ,contr 0x336b 003759 ifetch 1 ,contr 0x336c 003760 bbit1 mode_le ,context_search_next 0x336d 003761 ifetch 1 ,rega 0x336e 003762 set0 state_linkkey ,pdata 0x336f 003763 istore 1 ,rega 0x3370 003764 branch context_search_next : 003767 master_conn_send_packet: 0x3371 003768 set0 mark_ext_patch ,mark 0x3372 003769 bpatch patch06_4 ,mem_patch06 0x3373 003770 call rf_setup_time_master_slot : 003771 master_send_packet: 0x3374 003772 add clkn_bt ,1 ,bt_clk 0x3375 003773 call fetch_self_bt_adr 0x3376 003774 force 0x03 ,freq_mode 0x3377 003775 call tx_radio_freq 0x3378 003776 call start_transmitter 0x3379 003777 call start_tx_native 0x337a 003778 call send_access_word 0x337b 003779 branch transmit_packet : 003781 master_conn_recv_packet: 0x337c 003782 set0 mark_ext_patch ,mark 0x337d 003783 bpatch patch06_5 ,mem_patch06 0x337e 003784 call rf_setup_time_slave_slot : 003785 master_recv_packet: 0x337f 003786 add clkn_bt ,1 ,bt_clk 0x3380 003787 call fetch_self_bt_adr 0x3381 003788 force 0x03 ,freq_mode 0x3382 003789 call rx_radio_freq 0x3383 003790 call init_rx_packet_flags 0x3384 003791 call prep_crypt 0x3385 003792 call start_rx_native 0x3386 003793 call start_receiver : 003794 master_rx_conn_finish_packet: 0x3387 003795 call wait_access_clkn_rt 0x3388 003796 nrtn sync 0x3389 003797 call save_rssi 0x338a 003798 branch receive_packet : 003802 master_newconn_once: 0x338b 003803 set0 mark_ext_patch ,mark 0x338c 003804 bpatch patch06_6 ,mem_patch06 0x338d 003805 fetch 1 ,mem_fhs_am_addr 0x338e 003806 iforce am_addr 0x338f 003807 force type_poll ,type 0x3390 003808 call master_conn_send_packet 0x3391 003809 branch master_conn_recv_packet : 003820 inquiry_scan_dispatch: 0x3392 003821 fetch 1 ,mem_scan_mode 0x3393 003822 rtnbit0 inq_scan_mode 0x3394 003823 force iscan_interval_timer ,queue 0x3395 003824 call timer_check 0x3396 003825 nrtn blank 0x3397 003826 fetcht 2 ,mem_iscan_window 0x3398 003827 force 4 ,queue 0x3399 003828 call sniff_check_window 0x339a 003829 rtn user 0x339b 003830 call inquiry_scan_start 0x339c 003831 force iscan_interval_timer ,queue 0x339d 003832 fetch 2 ,mem_iscan_interval 0x339e 003833 nbranch timer_init ,sync 0x339f 003834 random pdata 0x33a0 003835 iand mask3ff ,pdata 0x33a1 003836 branch timer_init : 003839 inquiry_scan_start: 0x33a2 003840 set0 mark_ext_patch ,mark 0x33a3 003841 bpatch patch06_7 ,mem_patch06 0x33a4 003842 jam 0 ,mem_fhs_am_addr 0x33a5 003843 disable clknt 0x33a6 003844 disable attempt 0x33a7 003845 call afh_clear 0x33a8 003846 and clkn_bt ,0x1fc ,bt_clk 0x33a9 003847 force 0x01 ,freq_mode 0x33aa 003848 call fetch_giac 0x33ab 003849 call rx_radio_freq 0x33ac 003850 setflip mark_inquiry_state ,mark 0x33ad 003851 fetch 1 ,mem_inquiryscan_waitcnt 0x33ae 003852 increase 1 ,pdata 0x33af 003853 store 1 ,mem_inquiryscan_waitcnt 0x33b0 003854 call fetch_diac 0x33b1 003855 call start_receiver 0x33b2 003856 call wait_access_forever 0x33b3 003857 nrtn sync 0x33b4 003858 set0 mark_ext_patch ,mark 0x33b5 003859 bpatch patch07_0 ,mem_patch07 0x33b6 003860 force 0 ,stop_watch 0x33b7 003861 call shutdown_radio 0x33b8 003862 fetch 1 ,mem_inquiryscan_rcvcnt 0x33b9 003863 increase 1 ,pdata 0x33ba 003864 store 1 ,mem_inquiryscan_rcvcnt 0x33bb 003865 call fetch_giac 0x33bc 003866 call rf_setup_time_slave_slot 0x33bd 003867 or_into 0x002 ,bt_clk 0x33be 003868 force 0x01 ,freq_mode 0x33bf 003869 call tx_radio_freq 0x33c0 003870 call fetch_diac 0x33c1 003871 call start_transmitter 0x33c2 003872 call start_tx_external 0x33c3 003873 deposit clkn_bt 0x33c4 003874 store 4 ,mem_clkn_bt 0x33c5 003875 call send_access_word 0x33c6 003876 force type_fhs ,type 0x33c7 003877 force 0 ,am_addr 0x33c8 003878 call scan_mode_whiten 0x33c9 003879 call transmit_packet_whitened 0x33ca 003880 call send_eir 0x33cb 003881 and_into 0x1fd ,bt_clk 0x33cc 003882 increase 1 ,n_tx_slot 0x33cd 003883 rtn : 003885 send_eir: 0x33ce 003886 set0 mark_ext_patch ,mark 0x33cf 003887 bpatch patch07_1 ,mem_patch07 0x33d0 003888 fetch 1 ,mem_eir_enable 0x33d1 003889 rtn blank 0x33d2 003890 arg mem_eir ,contw 0x33d3 003891 fetch 1 ,mem_local_name_length 0x33d4 003892 copy pdata ,loopcnt 0x33d5 003893 increase 1 ,pdata 0x33d6 003894 istore 1 ,contw 0x33d7 003895 copy contw ,temp 0x33d8 003896 increase 1 ,pdata 0x33d9 003897 store 2 ,mem_tx_len 0x33da 003898 copy temp ,contw 0x33db 003899 setarg 0x09 0x33dc 003900 istore 1 ,contw 0x33dd 003901 arg mem_local_name ,contr 0x33de 003902 call memcpy 0x33df 003903 arg mem_all_uuid_128bits ,regc 0x33e0 003904 arg 4 ,loopcnt 0x33e1 003905 call get_all_uuid 0x33e2 003906 arg mem_all_uuid_16bits ,regc 0x33e3 003907 arg 1 ,loopcnt 0x33e4 003908 call get_all_uuid 0x33e5 003909 force type_dm3 ,type 0x33e6 003910 jam 2 ,mem_tx_lch 0x33e7 003911 setarg mem_eir 0x33e8 003912 store 2 ,mem_txptr 0x33e9 003913 call rf_setup_time_slave_slot 0x33ea 003914 call tx_radio_freq 0x33eb 003915 call start_transmitter 0x33ec 003916 call start_tx_external 0x33ed 003917 call send_access_word 0x33ee 003918 call scan_mode_whiten 0x33ef 003919 call transmit_packet_whitened 0x33f0 003920 rtn : 003923 get_all_uuid: 0x33f1 003924 copy contw ,temp 0x33f2 003925 copy regc ,contr 0x33f3 003926 ifetch 1 ,contr 0x33f4 003927 rtn blank : 003928 lshift_loop: 0x33f5 003929 lshift pdata ,pdata 0x33f6 003930 loop lshift_loop 0x33f7 003931 copy pdata ,rega 0x33f8 003932 increase 2 ,pdata 0x33f9 003933 copy pdata ,queue 0x33fa 003934 fetch 2 ,mem_tx_len 0x33fb 003935 iadd queue ,pdata 0x33fc 003936 store 2 ,mem_tx_len 0x33fd 003937 copy temp ,contw 0x33fe 003938 copy rega ,pdata 0x33ff 003939 increase 1 ,pdata 0x3400 003940 istore 1 ,contw 0x3401 003941 copy regc ,contr 0x3402 003942 ifetch 1 ,contr 0x3403 003943 ifetch 1 ,contr 0x3404 003944 istore 1 ,contw 0x3405 003945 copy rega ,loopcnt 0x3406 003946 branch memcpy : 003952 page_scan_dispatch: 0x3407 003953 fetch 1 ,mem_scan_mode 0x3408 003954 rtnbit0 page_scan_mode 0x3409 003955 force pscan_interval_timer ,queue 0x340a 003956 call timer_check 0x340b 003957 nrtn blank 0x340c 003958 fetcht 2 ,mem_pscan_window 0x340d 003959 force 40 ,queue 0x340e 003960 call sniff_check_window 0x340f 003961 rtn user 0x3410 003962 force 0 ,am_addr 0x3411 003963 jam param_pagerespto ,mem_fhs_wait_counter 0x3412 003964 set0 mark_fhs_already_good ,mark 0x3413 003965 call page_scan_start 0x3414 003966 force pscan_interval_timer ,queue 0x3415 003967 fetch 2 ,mem_pscan_interval 0x3416 003968 branch timer_init : 003971 page_scan_start: 0x3417 003972 set0 mark_ext_patch ,mark 0x3418 003973 bpatch patch07_2 ,mem_patch07 0x3419 003974 disable clknt 0x341a 003975 call afh_clear 0x341b 003976 fetch 1 ,mem_pagescan_waitcnt 0x341c 003977 increase 1 ,pdata 0x341d 003978 store 1 ,mem_pagescan_waitcnt 0x341e 003979 force 0 ,n_tx_slot 0x341f 003980 call fetch_self_bt_adr 0x3420 003981 add clkn_bt ,1 ,bt_clk 0x3421 003982 force 0x02 ,freq_mode 0x3422 003983 set0 mark_ext_patch ,mark 0x3423 003984 bpatch patch07_3 ,mem_patch07 0x3424 003985 call rx_radio_freq 0x3425 003986 call start_receiver 0x3426 003987 call wait_access_forever 0x3427 003988 nrtn sync 0x3428 003989 call shutdown_radio 0x3429 003990 fetch 1 ,mem_pagescan_rcvcnt 0x342a 003991 increase 1 ,pdata 0x342b 003992 store 1 ,mem_pagescan_rcvcnt 0x342c 003993 force 0 ,stop_watch 0x342d 003994 call rf_setup_time_slave_slot 0x342e 003995 or_into 0x002 ,bt_clk 0x342f 003996 force 0x01 ,freq_mode 0x3430 003997 call tx_radio_freq 0x3431 003998 call start_transmitter 0x3432 003999 call start_tx_external 0x3433 004000 call send_access_word 0x3434 004001 call end_of_packet 0x3435 004002 force 0 ,am_addr 0x3436 004003 arg param_rf_setup ,timeup 0x3437 004004 until clke_rt ,meet 0x3438 004005 or_into 0x03 ,clke_bt 0x3439 004006 and_into 0x1fd ,bt_clk : 004007 page_scan_wait_fhs_restart: 0x343a 004008 set0 mark_ext_patch ,mark 0x343b 004009 bpatch patch07_4 ,mem_patch07 0x343c 004010 increase 1 ,n_tx_slot 0x343d 004011 call rx_radio_freq 0x343e 004012 call start_receiver 0x343f 004013 call wait_access_mhalfbnd 0x3440 004014 nbranch page_scan_wait_fhs_again ,sync 0x3441 004015 call scan_mode_whiten 0x3442 004016 call receive_packet_whitened 0x3443 004017 bmark1 mark_fhs_already_good ,page_scan_reply_to_fhs : 004018 page_scan_wait_fhs_again: 0x3444 004019 set0 mark_ext_patch ,mark 0x3445 004020 bpatch patch07_5 ,mem_patch07 0x3446 004021 fetch 1 ,mem_fhs_wait_counter 0x3447 004022 rtn blank 0x3448 004023 increase -1 ,pdata 0x3449 004024 store 1 ,mem_fhs_wait_counter 0x344a 004025 call rf_setup_time_master_slot 0x344b 004026 branch page_scan_wait_fhs_restart : 004029 page_scan_reply_to_fhs: 0x344c 004030 set0 mark_ext_patch ,mark 0x344d 004031 bpatch patch07_6 ,mem_patch07 0x344e 004032 set0 1 ,clke_bt 0x344f 004033 set1 0 ,clke_bt 0x3450 004034 fetch 1 ,mem_pagescan_rcvfhscnt 0x3451 004035 increase 1 ,pdata 0x3452 004036 store 1 ,mem_pagescan_rcvfhscnt 0x3453 004037 call rf_setup_time_slave_slot 0x3454 004038 or_into 0x02 ,bt_clk 0x3455 004039 call tx_radio_freq 0x3456 004040 call start_transmitter 0x3457 004041 call start_tx_external 0x3458 004042 call send_access_word 0x3459 004043 call end_of_packet : 004044 slave_apply_clke_bt: 0x345a 004045 compare 0x03 ,clke_bt ,0x03 0x345b 004046 branch slave_apply_clke_bt_now ,true 0x345c 004047 until null ,mhalfbnd 0x345d 004048 branch slave_apply_clke_bt : 004049 slave_apply_clke_bt_now: 0x345e 004050 fetch 4 ,mem_clke_bt 0x345f 004051 or_into 0x03 ,pdata 0x3460 004052 icopy clke_bt : 004054 start_slave_connection: 0x3461 004055 set0 mark_ext_patch ,mark 0x3462 004056 bpatch patch07_7 ,mem_patch07 0x3463 004057 fetch 6 ,extm_lap 0x3464 004058 store 6 ,mem_plap 0x3465 004059 call prepare_newconn : 004060 slave_newconn_loop: 0x3466 004061 call slave_newconn_once 0x3467 004062 branch sconn_successful ,match 0x3468 004063 call new_conn_timeout 0x3469 004064 nbranch slave_newconn_loop ,blank 0x346a 004065 rtn : 004068 sconn_successful: 0x346b 004069 set0 mark_ext_patch ,mark 0x346c 004070 bpatch patch08_0 ,mem_patch08 0x346d 004071 call newconn_init 0x346e 004072 call context_new 0x346f 004073 nrtn zero 0x3470 004074 jam 0 ,mem_mode 0x3471 004075 call calc_clke_offset 0x3472 004076 branch context_save : 004079 slave_dispatch: 0x3473 004080 set0 mark_ext_patch ,mark 0x3474 004081 bpatch patch08_1 ,mem_patch08 0x3475 004082 call calc_clke 0x3476 004083 call role_switch_slave 0x3477 004084 rtn user 0x3478 004085 call load_esco 0x3479 004086 call get_sco_data : 004087 slave_loop: 0x347a 004088 set0 mark_ext_patch ,mark 0x347b 004089 bpatch patch08_2 ,mem_patch08 0x347c 004090 call check_bt_disabled 0x347d 004091 call scheduler_process 0x347e 004092 call slave_conn_recv_packet 0x347f 004093 call slave_savelist 0x3480 004094 nbranch slave_notmatch ,match 0x3481 004095 call supervision_flush 0x3482 004096 call parse_l2cap 0x3483 004097 call scheduler_tx_l2cap_pkt 0x3484 004098 call prepare_tx 0x3485 004099 call slave_conn_send_packet 0x3486 004100 call parse_lmp 0x3487 004101 call process_cmd 0x3488 004102 call hci_send_num_complete_packets 0x3489 004103 fetch 1 ,mem_slave_rcvcnt 0x348a 004104 increase 1 ,pdata 0x348b 004105 store 1 ,mem_slave_rcvcnt 0x348c 004106 call calc_clke_offset : 004107 slave_notmatch: 0x348d 004108 set0 mark_ext_patch ,mark 0x348e 004109 bpatch patch08_3 ,mem_patch08 0x348f 004110 call lpm_set_mult 0x3490 004111 call supervision_update 0x3491 004112 branch slave_disconnect ,positive 0x3492 004113 call check_disconnect_timeout 0x3493 004114 nbranch slave_disconnect ,user 0x3494 004115 call check_attempt 0x3495 004116 nbranch slave_loop ,blank 0x3496 004117 call process_sco_data 0x3497 004118 branch restore_esco : 004121 slave_disconnect: 0x3498 004122 set0 mark_ext_patch ,mark 0x3499 004123 bpatch patch08_4 ,mem_patch08 0x349a 004124 jam 0 ,mem_tester_emulate 0x349b 004125 jam 0 ,mem_debug_config 0x349c 004126 call quit_connection 0x349d 004127 set0 mark_testmode ,mark 0x349e 004128 call test_enable_white 0x349f 004129 fetch 1 ,mem_state 0x34a0 004130 bbit0 state_conn_comp ,slave_connection_fail 0x34a1 004131 fetcht 1 ,mem_conn_handle 0x34a2 004132 branch hci_send_disconn_complete : 004134 slave_connection_fail: 0x34a3 004135 force hci_error_key_missing ,temp 0x34a4 004136 branch hci_send_connection_error : 004138 role_switch_slave: 0x34a5 004139 set0 mark_ext_patch ,mark 0x34a6 004140 bpatch patch08_5 ,mem_patch08 0x34a7 004141 call role_switch_check 0x34a8 004142 nrtn user 0x34a9 004143 copy am_addr ,temp 0x34aa 004144 call get_free_amaddr 0x34ab 004145 store 1 ,mem_fhs_am_addr 0x34ac 004146 copy temp ,am_addr 0x34ad 004147 jam param_newconnto ,mem_newconnto_counter : 004148 roles_sendfhs_loop: 0x34ae 004149 set0 mark_ext_patch ,mark 0x34af 004150 bpatch patch08_6 ,mem_patch08 0x34b0 004151 call rf_setup_time_master_slot 0x34b1 004152 force type_fhs ,type 0x34b2 004153 call slave_send_access 0x34b3 004154 deposit clkn_bt 0x34b4 004155 store 4 ,mem_clkn_bt 0x34b5 004156 call transmit_packet 0x34b6 004157 call rf_setup_time_slave_slot 0x34b7 004158 enable user3 0x34b8 004159 call slave_receive_access 0x34b9 004160 branch roles_got_fhs_reply ,sync 0x34ba 004161 call shutdown_radio 0x34bb 004162 call new_conn_timeout 0x34bc 004163 nbranch roles_sendfhs_loop ,blank 0x34bd 004164 rtnmark0 mark_accept_switch 0x34be 004165 jam lmp_slot_offset ,mem_lmo_opcode2 0x34bf 004166 set1 mark_switch_initiated ,mark 0x34c0 004167 rtn : 004168 roles_got_fhs_reply: 0x34c1 004169 enable clknt 0x34c2 004170 call prepare_newconn 0x34c3 004171 call afh_clear : 004172 roles_newconn_loop: 0x34c4 004173 set0 mark_ext_patch ,mark 0x34c5 004174 bpatch patch08_7 ,mem_patch08 0x34c6 004175 call master_newconn_once 0x34c7 004176 branch roles_newconn_responded ,sync 0x34c8 004177 call new_conn_timeout 0x34c9 004178 nbranch roles_newconn_loop ,blank 0x34ca 004179 disable clknt 0x34cb 004180 deposit clke_bt 0x34cc 004181 store 4 ,mem_next_btclk 0x34cd 004182 rtn : 004183 roles_newconn_responded: 0x34ce 004184 force 0 ,temp 0x34cf 004185 call hci_send_role_change 0x34d0 004186 enable master 0x34d1 004187 bmark0 mark_accept_switch ,roles_newconn_nolmp 0x34d2 004188 set0 mark_accept_switch ,mark 0x34d3 004189 jam lmp_accepted ,mem_lmo_opcode2 0x34d4 004190 jam lmp_host_connection_req ,mem_lmi_opcode2 0x34d5 004191 call tid_set_reply : 004192 roles_newconn_nolmp: 0x34d6 004193 deposit am_addr 0x34d7 004194 store 1 ,mem_amaddr 0x34d8 004195 force 0 ,pdata 0x34d9 004196 store 6 ,mem_clk_offset 0x34da 004197 fetch 1 ,mem_mode 0x34db 004198 set1 mode_master ,pdata 0x34dc 004199 store 1 ,mem_mode 0x34dd 004200 call supervision_flush 0x34de 004201 disable master : 004202 enable_user: 0x34df 004203 enable user 0x34e0 004204 rtn : 004208 init_rx_packet_flags: 0x34e1 004209 set0 mark_ext_patch ,mark 0x34e2 004210 bpatch patch09_0 ,mem_patch09 0x34e3 004211 disable match 0x34e4 004212 set0 mark_loopback ,mark 0x34e5 004213 set0 mark_am_addr_broadcast ,mark 0x34e6 004214 set0 mark_longpacket ,mark 0x34e7 004215 set0 mark_old_packet ,mark 0x34e8 004216 fetch 1 ,mem_arq 0x34e9 004217 set0 arqnx ,pdata 0x34ea 004218 set1 flowx ,pdata 0x34eb 004219 store 1 ,mem_arq 0x34ec 004220 rtn : 004222 prepare_newconn: 0x34ed 004223 set0 mark_ext_patch ,mark 0x34ee 004224 bpatch patch09_1 ,mem_patch09 0x34ef 004225 jam param_newconnto ,mem_newconnto_counter 0x34f0 004226 jam param_newconn_arq ,mem_arq 0x34f1 004227 fetch 2 ,mem_rx_window_init 0x34f2 004228 store 2 ,mem_rx_window 0x34f3 004229 deposit clkn_bt 0x34f4 004230 store 4 ,mem_next_btclk 0x34f5 004231 rtn clknt 0x34f6 004232 deposit clke_bt 0x34f7 004233 store 4 ,mem_next_btclk 0x34f8 004234 rtn : 004236 newconn_init: 0x34f9 004237 set0 mark_ext_patch ,mark 0x34fa 004238 bpatch patch09_2 ,mem_patch09 0x34fb 004239 call init_lmp_reinit 0x34fc 004240 call new_conn_handle 0x34fd 004241 store 1 ,mem_conn_handle 0x34fe 004242 setarg param_supervision_to 0x34ff 004243 store 2 ,mem_supervision_to 0x3500 004244 fetch 1 ,mem_state 0x3501 004245 set1 state_inconn ,pdata 0x3502 004246 store 1 ,mem_state 0x3503 004247 jam 0 ,mem_op 0x3504 004248 jam 0 ,mem_state_map 0x3505 004249 jam 0 ,mem_lpm_current_mult 0x3506 004250 branch supervision_flush : 004253 clear_linkkey: 0x3507 004254 set0 mark_ext_patch ,mark 0x3508 004255 bpatch patch09_3 ,mem_patch09 0x3509 004256 force 0 ,pdata 0x350a 004257 store 8 ,mem_link_key 0x350b 004258 istore 8 ,contw 0x350c 004259 call clear_linkstate 0x350d 004260 branch context_traverse_linkkey : 004262 new_conn_timeout: 0x350e 004263 fetch 1 ,mem_newconnto_counter 0x350f 004264 increase -1 ,pdata 0x3510 004265 store 1 ,mem_newconnto_counter 0x3511 004266 rtn : 004268 new_conn_handle: 0x3512 004269 fetch 1 ,mem_handle_num 0x3513 004270 increase 1 ,pdata 0x3514 004271 store 1 ,mem_handle_num 0x3515 004272 rtn : 004275 quit_connection: 0x3516 004276 set0 mark_ext_patch ,mark 0x3517 004277 bpatch patch09_4 ,mem_patch09 0x3518 004278 call disconnect_stop_sco 0x3519 004279 fetch 1 ,mem_hci_cmd 0x351a 004280 beq hci_cmd_remote_name_req ,quit_connection_name 0x351b 004281 fetch 1 ,mem_lmp_to_send 0x351c 004282 bne lmp_name_req ,quit_connection_cont : 004283 quit_connection_name: 0x351d 004284 call cmd_check_plap 0x351e 004285 nbranch quit_connection_cont ,zero 0x351f 004286 call master_name_error 0x3520 004287 jam 0 ,mem_hci_cmd : 004288 quit_connection_cont: 0x3521 004289 set0 mark_ext_patch ,mark 0x3522 004290 bpatch patch09_5 ,mem_patch09 0x3523 004291 call app_disconn_reason_collect_bt 0x3524 004292 call process_cmd 0x3525 004293 call sniff_exit 0x3526 004294 jam bt_evt_bb_disconnected ,mem_fifo_temp 0x3527 004295 call ui_ipc_send_event 0x3528 004296 call init_lmp_work 0x3529 004297 call l2cap_init_work 0x352a 004298 call sp_initialize 0x352b 004299 fetch 1 ,mem_state 0x352c 004300 set0 state_inconn 0x352d 004301 store 1 ,mem_state 0x352e 004302 jam 0 ,memui_reconnect_mode 0x352f 004304 fetch 1 ,mem_state_map 0x3530 004305 compare 0x0 ,pdata ,0xc0 0x3531 004306 branch quit_connection_not_clear_mark ,true 0x3532 004307 set0 mark_rxbuf_inuse ,mark : 004308 quit_connection_not_clear_mark: 0x3533 004309 fetch 1 ,mem_arq 0x3534 004310 bbit0 wack ,quit_connection_not_clear_tx : 004311 quit_connection_not_clear_tx: 0x3535 004312 fetch 1 ,mem_op 0x3536 004313 rtnbit0 op_txl2cap 0x3537 004314 set0 mark_tx_l2cap ,mark 0x3538 004315 rtn : 004317 slave_newconn_once: 0x3539 004318 set0 mark_ext_patch ,mark 0x353a 004319 bpatch patch09_6 ,mem_patch09 0x353b 004320 fetch 1 ,extm_newconn_am_addr 0x353c 004321 rtn blank 0x353d 004322 icopy am_addr 0x353e 004323 call slave_conn_recv_packet 0x353f 004324 nrtn match 0x3540 004325 force type_null ,type 0x3541 004326 call slave_conn_send_packet 0x3542 004327 deposit am_addr 0x3543 004328 store 1 ,mem_amaddr 0x3544 004329 force 0 ,pdata 0x3545 004330 store 1 ,extm_newconn_am_addr 0x3546 004331 rtn : 004337 prepare_tx: 0x3547 004338 set0 mark_ext_patch ,mark 0x3548 004339 bpatch patch09_7 ,mem_patch09 0x3549 004340 fetch 1 ,mem_state 0x354a 004341 bbit0 state_insco ,prepare_tx_not_sco 0x354b 004342 force type_hv3 ,type 0x354c 004343 bmark0 mark_esco ,prepare_tx_not_esco 0x354d 004344 call check_esco_amaddr 0x354e 004345 nbranch prepare_tx_not_sco ,true 0x354f 004346 branch prepare_tx_not_sco ,attempt 0x3550 004347 call set_wait_ack 0x3551 004348 setarg 2 0x3552 004349 store 2 ,mem_retransmission_cnt 0x3553 004350 rtn : 004351 prepare_tx_not_esco: 0x3554 004352 nrtn attempt : 004353 prepare_tx_not_sco: 0x3555 004354 set0 mark_ext_patch ,mark 0x3556 004355 bpatch patch0a_0 ,mem_patch0a 0x3557 004356 call context_check_all_wack 0x3558 004357 nbranch prepare_tx_no_retransmit ,zero 0x3559 004358 fetch 1 ,mem_arq 0x355a 004359 bbit0 wack ,prepare_tx_pollnull : 004360 prepare_tx_retransmit: 0x355b 004361 bmark1 mark_loopback ,prepare_tx_loopback 0x355c 004362 fetch 1 ,mem_debug_config 0x355d 004363 bbit1 debug_tx_pattern ,prepare_tx_txpat 0x355e 004364 fetch 2 ,mem_retransmission_cnt 0x355f 004365 increase -1 ,pdata 0x3560 004366 store 2 ,mem_retransmission_cnt 0x3561 004367 branch prepare_tx_nomore_retransmit ,blank 0x3562 004368 fetch 1 ,mem_last_type 0x3563 004369 iforce type 0x3564 004370 rtn : 004372 prepare_tx_nomore_retransmit: 0x3565 004373 set0 mark_ext_patch ,mark 0x3566 004374 bpatch patch0a_1 ,mem_patch0a 0x3567 004375 call clear_got_tx : 004376 prepare_tx_no_retransmit: 0x3568 004377 call check_esco_amaddr 0x3569 004378 branch prepare_tx_pollnull ,true 0x356a 004379 call send_lmp 0x356b 004380 branch prepare_tx_sendlmp ,user 0x356c 004381 fetch 1 ,mem_op 0x356d 004382 bbit1 op_txl2cap ,prepare_tx_sendl2cap 0x356e 004383 bmark1 mark_loopback ,prepare_tx_loopback 0x356f 004384 fetch 1 ,mem_debug_config 0x3570 004385 bbit1 debug_tx_pattern ,prepare_tx_txpat : 004386 prepare_tx_pollnull: 0x3571 004387 force type_poll ,type 0x3572 004388 rtn master 0x3573 004389 force type_null ,type 0x3574 004390 rtn : 004391 prepare_tx_loopback: 0x3575 004392 set0 mark_ext_patch ,mark 0x3576 004393 bpatch patch0a_2 ,mem_patch0a 0x3577 004394 fetch 1 ,mem_rx_type 0x3578 004395 iforce type 0x3579 004396 rtnne 1 0x357a 004397 force type_null ,type 0x357b 004398 rtn : 004399 prepare_tx_txpat: 0x357c 004400 fetch 1 ,test_mode_packet_type 0x357d 004401 and pdata ,0xf ,type 0x357e 004402 set1 mark_loopback ,mark 0x357f 004403 rtn : 004404 prepare_tx_sendlmp: 0x3580 004405 force type_lmp ,type 0x3581 004406 branch set_wait_ack : 004407 prepare_tx_sendl2cap: 0x3582 004408 call tx_l2cap_type : 004410 set_wait_ack: 0x3583 004411 set0 mark_ext_patch ,mark 0x3584 004412 bpatch patch0a_3 ,mem_patch0a 0x3585 004413 fetcht 1 ,mem_arq 0x3586 004414 set1 wack ,temp 0x3587 004415 storet 1 ,mem_arq 0x3588 004416 deposit type 0x3589 004417 store 1 ,mem_last_type 0x358a 004418 setarg 0xffff 0x358b 004419 store 2 ,mem_retransmission_cnt 0x358c 004420 rtn : 004422 tx_l2cap_type: 0x358d 004423 set0 mark_ext_patch ,mark 0x358e 004424 bpatch patch0a_4 ,mem_patch0a 0x358f 004425 fetch 1 ,mem_state_map 0x3590 004426 isolate1 smap_edr ,pdata 0x3591 004427 fetch 2 ,mem_tx_len 0x3592 004428 branch tx_l2cap_type_edr ,true 0x3593 004429 force type_dm1 ,type 0x3594 004430 sub pdata ,17 ,null 0x3595 004431 rtn positive 0x3596 004432 force type_dh1 ,type 0x3597 004433 sub pdata ,27 ,null 0x3598 004434 rtn positive 0x3599 004435 force type_dm3 ,type 0x359a 004436 sub pdata ,121 ,null 0x359b 004437 rtn positive 0x359c 004438 force type_dm5 ,type 0x359d 004439 sub pdata ,224 ,null 0x359e 004440 rtn positive 0x359f 004441 force type_dh5 ,type 0x35a0 004442 rtn : 004443 tx_l2cap_type_edr: 0x35a1 004444 force type_dm1 ,type 0x35a2 004445 sub pdata ,17 ,null 0x35a3 004446 rtn positive 0x35a4 004447 force type_dh1 ,type 0x35a5 004448 sub pdata ,54 ,null 0x35a6 004449 rtn positive 0x35a7 004450 force type_dm3 ,type 0x35a8 004451 arg 367 ,temp 0x35a9 004452 isub temp ,null 0x35aa 004453 nrtn positive 0x35ab 004454 force type_dm5 ,type 0x35ac 004455 arg 679 ,temp 0x35ad 004456 isub temp ,null 0x35ae 004457 nrtn positive 0x35af 004458 force type_dh5 ,type 0x35b0 004459 rtn : 004468 slave_receive_master_slot: 0x35b1 004469 fetch 1 ,mem_state 0x35b2 004470 bbit0 state_insniff ,slave_receive_notsniff 0x35b3 004471 fetch 2 ,mem_tsniff 0x35b4 004472 branch slave_receive_notsniff ,blank 0x35b5 004473 nbranch slave_receive_sniff ,attempt : 004474 slave_receive_notsniff: 0x35b6 004475 call rf_setup_time_master_slot : 004476 slave_receive_access: 0x35b7 004477 add clke_bt ,1 ,bt_clk : 004478 slave_receive_sniff: 0x35b8 004479 enable swfine 0x35b9 004480 fetch 2 ,mem_rx_window 0x35ba 004481 rshift pdata ,pdata 0x35bb 004482 arg param_pll_setup ,temp 0x35bc 004483 iadd temp ,pdata 0x35bd 004484 call ahead_window 0x35be 004485 call fetch_extm_bt_adr 0x35bf 004486 force 0x03 ,freq_mode 0x35c0 004487 call rx_radio_freq 0x35c1 004488 call init_rx_packet_flags 0x35c2 004489 call prep_crypt 0x35c3 004490 set0 mark_ext_patch ,mark 0x35c4 004491 bpatch patch0a_5 ,mem_patch0a 0x35c5 004492 fetch 2 ,mem_rx_window 0x35c6 004493 rshift pdata ,pdata 0x35c7 004494 call ahead_window 0x35c8 004495 call start_receiver 0x35c9 004496 enable decode_fec0 0x35ca 004497 fetch 2 ,mem_rx_window 0x35cb 004498 arg param_clke_cal ,temp 0x35cc 004499 iadd temp ,stop_watch 0x35cd 004500 correlate null ,timeout 0x35ce 004501 copy clke ,temp 0x35cf 004502 storet 6 ,mem_sync_clke 0x35d0 004503 disable decode_fec0 0x35d1 004504 nrtn sync 0x35d2 004505 arg param_clke_cal ,clke_rt 0x35d3 004506 copy bt_clk ,clke_bt 0x35d4 004507 branch lpm_adjust_clk ,wake 0x35d5 004508 rtn : 004511 slave_conn_recv_packet: 0x35d6 004512 set0 mark_ext_patch ,mark 0x35d7 004513 bpatch patch0a_6 ,mem_patch0a 0x35d8 004514 call slave_receive_master_slot 0x35d9 004515 nbranch shutdown_radio ,sync 0x35da 004516 call save_rssi 0x35db 004517 bmark0 mark_testmode ,receive_packet 0x35dc 004518 fetch 2 ,mem_tst_pktcnt_sync 0x35dd 004519 increase 1 ,pdata 0x35de 004520 store 2 ,mem_tst_pktcnt_sync : 004521 receive_packet: 0x35df 004522 rshift bt_clk ,temp 0x35e0 004523 or temp ,0x40 ,white_init : 004524 receive_packet_whitened: 0x35e1 004525 set0 mark_ext_patch ,mark 0x35e2 004526 bpatch patch0a_7 ,mem_patch0a 0x35e3 004527 enable enable_white 0x35e4 004528 enable enable_hec 0x35e5 004529 enable decode_fec1 0x35e6 004530 parse demod ,bucket ,3 0x35e7 004531 rshift8 pwindow ,pdata 0x35e8 004532 store 1 ,mem_temp_am_addr 0x35e9 004533 parse demod ,bucket ,4 0x35ea 004534 inject bucket ,7 0x35eb 004535 copy pwindow ,pdata 0x35ec 004536 store 1 ,mem_rx_type 0x35ed 004537 parse demod ,bucket ,3 0x35ee 004538 rshift8 pwindow ,pdata 0x35ef 004539 store 1 ,mem_temp_arq 0x35f0 004540 fetch 1 ,mem_rx_type 0x35f1 004541 sub pdata ,3 ,null 0x35f2 004542 branch receive_packet_noedr ,positive 0x35f3 004543 beq 7 ,receive_packet_noedr 0x35f4 004544 fetch 1 ,mem_state_map 0x35f5 004545 isolate1 smap_edr ,pdata 0x35f6 004546 setflag true ,psk ,radio_ctrl : 004547 receive_packet_noedr: 0x35f7 004548 set0 mark_ext_patch ,mark 0x35f8 004549 bpatch patch0b_0 ,mem_patch0b 0x35f9 004550 parse demod ,bucket ,8 0x35fa 004551 disable decode_fec1 0x35fb 004552 disable enable_hec 0x35fc 004553 branch error_header ,crc_failed 0x35fd 004554 bmark0 mark_testmode ,receive_packet_amchk 0x35fe 004555 fetch 2 ,mem_tst_pktcnt_hec 0x35ff 004556 increase 1 ,pdata 0x3600 004557 store 2 ,mem_tst_pktcnt_hec : 004558 receive_packet_amchk: 0x3601 004559 set0 mark_ext_patch ,mark 0x3602 004560 bpatch patch0b_1 ,mem_patch0b 0x3603 004561 fetch 1 ,mem_temp_am_addr 0x3604 004562 compare 0 ,pdata ,0x07 0x3605 004563 setflag true ,mark_am_addr_broadcast ,mark 0x3606 004564 branch am_addr_ok ,true 0x3607 004565 icompare 0x07 ,am_addr 0x3608 004566 branch am_addr_match ,true 0x3609 004567 bmark0 mark_esco ,end_of_packet 0x360a 004568 fetcht 1 ,mem_saved_amaddr 0x360b 004569 icompare 0x7 ,temp 0x360c 004570 nbranch end_of_packet ,true 0x360d 004571 call restore_esco 0x360e 004572 fetch 1 ,mem_arq 0x360f 004573 set0 arqnx ,pdata 0x3610 004574 set1 flowx ,pdata 0x3611 004575 store 1 ,mem_arq : 004576 am_addr_match: 0x3612 004577 enable match : 004578 am_addr_ok: 0x3613 004579 set0 mark_ext_patch ,mark 0x3614 004580 bpatch patch0b_2 ,mem_patch0b 0x3615 004581 fetch 1 ,mem_rx_type 0x3616 004582 icopy type 0x3617 004583 bmark1 mark_am_addr_broadcast ,arqn_bypass 0x3618 004584 fetcht 1 ,mem_temp_arq 0x3619 004585 fetch 1 ,mem_arq 0x361a 004586 set0 flow ,pdata 0x361b 004587 isolate1 flow ,temp 0x361c 004588 setflag true ,flow ,pdata 0x361d 004589 isolate1 arqn ,temp 0x361e 004590 setflag true ,arqn ,pdata 0x361f 004591 store 1 ,mem_arq 0x3620 004592 isolate0 arqn ,temp 0x3621 004593 branch arqn_bypass ,true 0x3622 004594 call clear_got_tx : 004595 arqn_bypass: 0x3623 004596 set0 mark_ext_patch ,mark 0x3624 004597 bpatch patch0b_3 ,mem_patch0b 0x3625 004598 arg 0 ,temp 0x3626 004599 call reserve_slot 0x3627 004600 and type ,0xf ,pdata 0x3628 004601 beq type_poll ,process_poll 0x3629 004602 beq type_null ,end_of_packet 0x362a 004603 beq type_fhs ,process_fhs 0x362b 004604 fetcht 1 ,mem_temp_arq 0x362c 004605 fetch 1 ,mem_arq 0x362d 004606 icompare 0x04 ,temp 0x362e 004607 nbranch rx_type_dispatch ,true 0x362f 004608 bmark0 mark_am_addr_broadcast ,failed_seqn 0x3630 004609 bbit0 bcast1 ,rx_type_dispatch : 004610 failed_seqn: 0x3631 004611 set1 mark_old_packet ,mark : 004612 rx_type_dispatch: 0x3632 004613 set0 mark_ext_patch ,mark 0x3633 004614 bpatch patch0b_4 ,mem_patch0b 0x3634 004615 deposit type 0x3635 004616 beq type_dm1 ,process_dm1 0x3636 004617 beq type_dh1 ,process_dh1 0x3637 004618 beq type_hv3 ,process_hev 0x3638 004619 beq type_3dh1 ,process_3dh1 0x3639 004620 arg 4 ,temp 0x363a 004621 call reserve_slot 0x363b 004622 beq type_dm3 ,process_dm3 0x363c 004623 beq type_dh3 ,process_dh3 0x363d 004624 arg 8 ,temp 0x363e 004625 call reserve_slot 0x363f 004626 beq type_dm5 ,process_dm5 0x3640 004627 beq type_dh5 ,process_dh5 0x3641 004628 rtn : 004631 process_hev: 0x3642 004632 set0 mark_ext_patch ,mark 0x3643 004633 bpatch patch0b_5 ,mem_patch0b 0x3644 004634 enable decode_fec0 0x3645 004635 enable enable_crc 0x3646 004636 enable encrypt 0x3647 004637 arg mem_sco_ibuf ,contw 0x3648 004638 force 30 ,loopcnt : 004639 process_hev_loop: 0x3649 004640 parse demod ,bucket ,8 0x364a 004641 rshift3 pwindow ,pdata 0x364b 004642 istore 1 ,contw 0x364c 004643 loop process_hev_loop 0x364d 004644 bmark0 mark_esco ,end_of_packet 0x364e 004645 parse demod ,bucket ,16 0x364f 004646 nsetflag crc_failed ,mark_esco_rxok ,mark 0x3650 004647 call test_esco ,crc_failed 0x3651 004648 branch error_payload ,crc_failed 0x3652 004649 branch ack_payload : 004651 test_esco: 0x3653 004652 deposit clke 0x3654 004653 store 6 ,mem_display 0x3655 004654 rtn : 004656 process_poll: 0x3656 004657 branch end_of_packet : 004659 process_dm3: : 004660 process_dm5: 0x3657 004661 set1 mark_longpacket ,mark : 004662 process_dm1: 0x3658 004663 enable decode_fec2 0x3659 004664 branch process_dmh : 004666 process_dh3: : 004667 process_dh5: 0x365a 004668 set1 mark_longpacket ,mark : 004669 process_3dh1: 0x365b 004670 set1 psk3m ,radio_ctrl : 004671 process_dh1: 0x365c 004672 enable decode_fec0 : 004673 process_dmh: 0x365d 004674 set0 mark_ext_patch ,mark 0x365e 004675 bpatch patch0b_6 ,mem_patch0b 0x365f 004676 bmark1 mark_rxbuf_inuse ,end_of_packet 0x3660 004677 isolate0 psk ,radio_ctrl 0x3661 004678 branch process_dmh_noedr ,true 0x3662 004679 disable enable_white 0x3663 004680 enable decode_fec0 0x3664 004681 disable decode_fec2 0x3665 004682 add clkn_bt ,2 ,timeup 0x3666 004683 correlate clkn_bt ,meet 0x3667 004684 nbranch error_payload ,sync 0x3668 004685 set1 mark_longpacket ,mark 0x3669 004686 enable enable_white : 004687 process_dmh_noedr: 0x366a 004688 set0 mark_ext_patch ,mark 0x366b 004689 bpatch patch0b_7 ,mem_patch0b 0x366c 004690 enable encrypt 0x366d 004691 enable enable_crc 0x366e 004692 parse demod ,bucket ,3 0x366f 004693 rshift8 pwindow ,pdata 0x3670 004694 store 1 ,mem_lch_code 0x3671 004695 parse demod ,bucket ,5 0x3672 004696 bmark1 mark_longpacket ,process_dmh_long 0x3673 004697 rshift3 pwindow ,loopcnt 0x3674 004698 rshift3 loopcnt ,loopcnt 0x3675 004699 branch process_dmh_common : 004700 process_dmh_long: 0x3676 004701 parse demod ,bucket ,5 0x3677 004702 rshift pwindow ,loopcnt 0x3678 004703 parse demod ,bucket ,3 : 004704 process_dmh_common: 0x3679 004705 set0 mark_ext_patch ,mark 0x367a 004706 bpatch patch0c_0 ,mem_patch0c 0x367b 004707 deposit loopcnt 0x367c 004708 store 2 ,mem_len 0x367d 004709 branch process_dmh_data_end ,blank 0x367e 004710 isub mask3ff ,null 0x367f 004711 branch error_payload ,positive 0x3680 004712 set0 mark_ext_patch ,mark 0x3681 004713 bpatch patch0c_1 ,mem_patch0c 0x3682 004714 set0 mark_fhs_eir ,mark 0x3683 004715 fetch 1 ,mem_lch_code 0x3684 004716 and_into 0x03 ,pdata 0x3685 004717 arg mem_rxbuf ,contw 0x3686 004718 beq llid_lmp ,process_lmp 0x3687 004719 bmark1 mark_testmode ,process_dmh_data 0x3688 004720 fetch 1 ,mem_device_option 0x3689 004721 beq dvc_op_hci ,process_dmh_acl 0x368a 004723 fetch 1 ,mem_lch_code 0x368b 004724 and_into 0x03 ,pdata 0x368c 004725 beq llid_l2cap_start ,process_dmh_data_l2cap_start_pkt 0x368d 004726 beq llid_l2cap_cont ,process_dmh_data_l2cap_continue_pkt 0x368e 004727 branch error_payload : 004729 process_lmp: 0x368f 004730 fetch 2 ,mem_len 0x3690 004731 sub pdata ,0x70 ,null 0x3691 004732 nbranch error_payload ,positive 0x3692 004733 bmark1 mark_old_packet ,ack_payload 0x3693 004734 branch process_dmh_data : 004736 process_dmh_acl: 0x3694 004737 set0 mark_ext_patch ,mark 0x3695 004738 bpatch patch0c_2 ,mem_patch0c 0x3696 004739 bmark1 mark_old_packet ,ack_payload 0x3697 004740 fetch 2 ,mem_len 0x3698 004741 branch error_payload ,blank 0x3699 004742 call hci_check_bcsp_protocol 0x369a 004743 nbranch process_dmh_acl_check_h4_buff ,true : 004744 process_dmh_acl_bcsp: 0x369b 004745 fetcht 2 ,mem_h5tx_free 0x369c 004746 increase 10 ,pdata 0x369d 004747 isub temp ,null 0x369e 004748 nbranch process_dmh_acl_packet ,positive 0x369f 004749 call hci_dispatch 0x36a0 004750 branch process_dmh_acl_bcsp : 004751 process_dmh_acl_check_h4_buff: 0x36a1 004752 hfetch 2 ,core_uart_txitems 0x36a2 004753 arg 300 ,temp 0x36a3 004754 isub temp ,null 0x36a4 004755 branch error_payload ,positive 0x36a5 004756 fetch 2 ,mem_acl_credits 0x36a6 004757 branch error_payload ,blank : 004758 process_dmh_acl_packet: 0x36a7 004759 set0 mark_ext_patch ,mark 0x36a8 004760 bpatch patch0c_3 ,mem_patch0c 0x36a9 004761 call hci_get_packet_ptr 0x36aa 004762 fetch 1 ,mem_conn_handle 0x36ab 004763 fetcht 1 ,mem_lch_code 0x36ac 004764 and_into 3 ,temp 0x36ad 004765 lshift8 temp ,temp 0x36ae 004766 lshift4 temp ,temp 0x36af 004767 ior temp ,pdata 0x36b0 004768 istore 2 ,contwu 0x36b1 004769 fetcht 2 ,mem_len 0x36b2 004770 copy temp ,loopcnt 0x36b3 004771 istoret 2 ,contwu : 004772 process_dmh_acl_copy: 0x36b4 004773 set0 mark_ext_patch ,mark 0x36b5 004774 bpatch patch0c_4 ,mem_patch0c 0x36b6 004775 parse demod ,bucket ,8 0x36b7 004776 rshift3 pwindow ,pdata 0x36b8 004777 istore 1 ,contwu 0x36b9 004778 loop process_dmh_acl_copy 0x36ba 004779 add temp ,4 ,loopcnt 0x36bb 004780 call hci_check_bcsp_protocol 0x36bc 004781 nbranch process_dmh_acl_send_h4 ,true 0x36bd 004782 set1 mark_h5tx_rp ,mark 0x36be 004783 force 6 ,queue 0x36bf 004784 call bcsp_send_packet 0x36c0 004785 branch process_dmh_data_end : 004786 process_dmh_acl_send_h4: 0x36c1 004787 call h4_send_packet_acl 0x36c2 004788 branch process_dmh_data_end : 004790 process_dmh_data_l2cap_start_pkt: 0x36c3 004791 set0 mark_ext_patch ,mark 0x36c4 004792 bpatch patch0c_5 ,mem_patch0c 0x36c5 004793 bmark1 mark_old_packet ,ack_payload 0x36c6 004794 fetch 2 ,mem_len 0x36c7 004795 arg 0x2e0 ,temp 0x36c8 004796 isub temp ,null 0x36c9 004797 branch error_payload ,positive 0x36ca 004798 fetch 1 ,mem_l2cap_rxbuff_inuse 0x36cb 004799 bbit0 l2cap_inuse_buff1 ,process_dmh_data_into_buff1 0x36cc 004800 bbit0 l2cap_inuse_buff2 ,process_dmh_data_into_buff2 0x36cd 004801 branch end_of_packet : 004802 process_dmh_data_into_buff1: 0x36ce 004803 jam 1 ,mem_l2cap_rxbuff_new 0x36cf 004804 fetch 2 ,mem_l2cap_rxbuff1_len 0x36d0 004805 bne 0 ,end_of_packet 0x36d1 004806 arg mem_l2cap_rxbuff1 ,contw 0x36d2 004807 branch process_dmh_data : 004808 process_dmh_data_into_buff2: 0x36d3 004809 jam 2 ,mem_l2cap_rxbuff_new 0x36d4 004810 fetch 2 ,mem_l2cap_rxbuff2_len 0x36d5 004811 bne 0 ,end_of_packet 0x36d6 004812 arg mem_l2cap_rxbuff2 ,contw 0x36d7 004813 branch process_dmh_data : 004815 process_dmh_data_l2cap_continue_pkt: 0x36d8 004816 set0 mark_ext_patch ,mark 0x36d9 004817 bpatch patch0c_6 ,mem_patch0c 0x36da 004818 bmark1 mark_old_packet ,ack_payload 0x36db 004819 fetch 2 ,mem_len 0x36dc 004820 arg 0x2e0 ,temp 0x36dd 004821 isub temp ,null 0x36de 004822 branch error_payload ,positive 0x36df 004823 fetch 1 ,mem_l2cap_rxbuff_new 0x36e0 004824 beq 1 ,process_dmh_data_l2cap_continue_pkt1 0x36e1 004825 beq 2 ,process_dmh_data_l2cap_continue_pkt2 0x36e2 004826 branch end_of_packet : 004827 process_dmh_data_l2cap_continue_pkt1: 0x36e3 004828 arg mem_l2cap_rxbuff1 ,contw 0x36e4 004829 fetch 2 ,mem_l2cap_rxbuff1_len 0x36e5 004830 iadd contw ,contw 0x36e6 004831 branch process_dmh_data : 004832 process_dmh_data_l2cap_continue_pkt2: 0x36e7 004833 arg mem_l2cap_rxbuff2 ,contw 0x36e8 004834 fetch 2 ,mem_l2cap_rxbuff2_len 0x36e9 004835 iadd contw ,contw : 004836 process_dmh_data: 0x36ea 004837 parse demod ,bucket ,8 0x36eb 004838 rshift3 pwindow ,pdata 0x36ec 004839 istore 1 ,contw 0x36ed 004840 loop process_dmh_data : 004841 process_dmh_data_end: 0x36ee 004842 set0 mark_ext_patch ,mark 0x36ef 004843 bpatch patch0c_7 ,mem_patch0c 0x36f0 004844 parse demod ,bucket ,16 0x36f1 004845 branch error_payload_crc ,crc_failed 0x36f2 004846 call lpm_hci_wake_dispatch 0x36f3 004847 fetch 1 ,mem_l2cap_flow_ctrl_flag 0x36f4 004848 beq l2cap_flow_ctrl_enable ,end_of_packet 0x36f5 004849 bmark1 mark_testmode ,process_dmh_cont 0x36f6 004850 bmark1 mark_old_packet ,redundant_payload 0x36f7 004851 fetch 1 ,mem_lch_code 0x36f8 004852 compare 3 ,pdata ,3 0x36f9 004853 branch process_dmh_cont ,true 0x36fa 004854 fetch 2 ,mem_len 0x36fb 004855 branch process_dmh_cont ,blank 0x36fc 004856 fetch 1 ,mem_device_option 0x36fd 004857 beq dvc_op_hci ,process_dmh_cont 0x36fe 004858 set0 mark_ext_patch ,mark 0x36ff 004859 bpatch patch0d_0 ,mem_patch0d 0x3700 004860 fetch 1 ,mem_l2cap_rxbuff_new 0x3701 004861 beq 1 ,process_l2cap_pass_crc_buff1 0x3702 004862 beq 2 ,process_l2cap_pass_crc_buff2 0x3703 004863 branch assert : 004864 process_l2cap_pass_crc_buff1: 0x3704 004865 fetch 2 ,mem_l2cap_rxbuff1_len 0x3705 004866 fetcht 2 ,mem_len 0x3706 004867 iadd temp ,pdata 0x3707 004868 store 2 ,mem_l2cap_rxbuff1_len 0x3708 004869 beq 0 ,assert 0x3709 004870 fetcht 2 ,mem_l2cap_rxbuff1 0x370a 004871 increase 4 ,temp 0x370b 004872 isub temp ,null 0x370c 004873 call l2cap_buff1_inuse ,zero 0x370d 004874 branch process_dmh_cont : 004875 process_l2cap_pass_crc_buff2: 0x370e 004876 fetch 2 ,mem_l2cap_rxbuff2_len 0x370f 004877 fetcht 2 ,mem_len 0x3710 004878 iadd temp ,pdata 0x3711 004879 store 2 ,mem_l2cap_rxbuff2_len 0x3712 004880 beq 0 ,assert 0x3713 004881 fetcht 2 ,mem_l2cap_rxbuff2 0x3714 004882 add temp ,4 ,temp 0x3715 004883 isub temp ,null 0x3716 004884 call l2cap_buff2_inuse ,zero 0x3717 004885 branch process_dmh_cont : 004886 process_dmh_cont: 0x3718 004887 set0 mark_ext_patch ,mark 0x3719 004888 bpatch patch0d_1 ,mem_patch0d 0x371a 004889 fetcht 1 ,mem_state_map 0x371b 004890 fetch 1 ,mem_lch_code 0x371c 004891 compare 3 ,pdata ,0x03 0x371d 004892 setflag true ,smap_rxlmp ,temp 0x371e 004893 nsetflag true ,smap_rxl2cap ,temp 0x371f 004894 storet 1 ,mem_state_map 0x3720 004895 nbranch process_dmh_cont_rxbuf_not_use ,true 0x3721 004896 set1 mark_rxbuf_inuse ,mark : 004897 process_dmh_cont_rxbuf_not_use: 0x3722 004898 bmark0 mark_testmode ,ack_payload 0x3723 004899 isolate1 smap_rxlmp ,temp 0x3724 004900 branch ack_payload ,true 0x3725 004901 fetch 2 ,mem_tst_pktcnt_crc 0x3726 004902 increase 1 ,pdata 0x3727 004903 store 2 ,mem_tst_pktcnt_crc 0x3728 004904 set1 mark_loopback ,mark 0x3729 004905 set0 smap_rxl2cap ,temp 0x372a 004906 set0 mark_rxbuf_inuse ,mark 0x372b 004907 storet 1 ,mem_state_map : 004908 ack_payload: 0x372c 004909 set0 mark_ext_patch ,mark 0x372d 004910 bpatch patch0d_2 ,mem_patch0d 0x372e 004911 fetcht 1 ,mem_temp_arq 0x372f 004912 fetch 1 ,mem_arq 0x3730 004913 set1 arqnx ,pdata 0x3731 004914 isolate1 seqn ,temp 0x3732 004915 setflag true ,seqn ,pdata 0x3733 004916 isolate1 mark_am_addr_broadcast ,mark 0x3734 004917 setflag true ,bcast1 ,pdata 0x3735 004918 store 1 ,mem_arq 0x3736 004919 fetch 2 ,mem_len 0x3737 004920 nbranch end_of_packet ,blank 0x3738 004921 fetch 1 ,mem_state_map 0x3739 004922 set0 smap_rxl2cap ,pdata 0x373a 004923 store 1 ,mem_state_map 0x373b 004924 fetch 1 ,mem_lch_code 0x373c 004925 compare 0x01 ,pdata ,0x07 0x373d 004927 branch end_of_packet : 004929 error_header: 0x373e 004930 set0 mark_ext_patch ,mark 0x373f 004931 bpatch patch0d_3 ,mem_patch0d 0x3740 004932 disable match 0x3741 004933 fetch 2 ,mem_rx_hec_err 0x3742 004934 increase 1 ,pdata 0x3743 004935 store 2 ,mem_rx_hec_err 0x3744 004936 branch end_of_packet : 004937 error_payload_crc: 0x3745 004938 fetch 2 ,mem_rx_crc_err 0x3746 004939 increase 1 ,pdata 0x3747 004940 store 2 ,mem_rx_crc_err 0x3748 004941 call discard_pkt 0x3749 004942 bmark0 mark_testmode ,error_payload 0x374a 004943 set1 mark_loopback ,mark : 004944 error_payload: 0x374b 004945 branch end_of_packet : 004947 discard_pkt: 0x374c 004948 set0 mark_ext_patch ,mark 0x374d 004949 bpatch patch0d_4 ,mem_patch0d 0x374e 004950 fetch 1 ,mem_lch_code 0x374f 004951 compare 3 ,pdata ,0x03 0x3750 004952 nbranch discard_pkt_l2cap ,true : 004953 discard_pkt_lmp: 0x3751 004954 fetcht 1 ,mem_state_map 0x3752 004955 set0 smap_rxlmp ,temp 0x3753 004956 storet 1 ,mem_state_map 0x3754 004957 rtn : 004958 discard_pkt_l2cap: 0x3755 004961 fetcht 1 ,mem_state_map 0x3756 004962 set0 smap_rxl2cap ,temp 0x3757 004963 storet 1 ,mem_state_map 0x3758 004964 branch h4_send_acl_trigger_clear : 004966 redundant_payload: 0x3759 004967 fetch 1 ,mem_arq 0x375a 004968 set1 arqnx ,pdata 0x375b 004969 store 1 ,mem_arq : 004970 end_of_packet: 0x375c 004971 set0 mark_ext_patch ,mark 0x375d 004972 bpatch patch0d_5 ,mem_patch0d 0x375e 004973 disable encode_fec0 0x375f 004974 disable encode_fec2 0x3760 004975 disable decode_fec0 0x3761 004976 disable decode_fec2 0x3762 004977 disable enable_crc 0x3763 004978 disable encrypt 0x3764 004979 disable enable_white 0x3765 004980 branch shutdown_radio ,is_rx 0x3766 004981 until null ,tx_clear 0x3767 004982 nop 100 0x3768 004983 branch shutdown_radio : 004985 process_fhs: 0x3769 004986 set0 mark_ext_patch ,mark 0x376a 004987 bpatch patch0d_6 ,mem_patch0d 0x376b 004988 enable enable_crc 0x376c 004989 enable decode_fec2 0x376d 004990 parse demod ,bucket ,72 0x376e 004991 isolate1 58 ,pdata 0x376f 004992 setflag true ,mark_fhs_eir ,mark 0x3770 004993 copy bt_adr ,temp 0x3771 004994 ialigned bt_adr 0x3772 004995 ialigned fhs0 0x3773 004996 pulse recalc 0x3774 004997 setsect 2 ,0xfffff 0x3775 004998 setsect 3 ,0x0ffff 0x3776 004999 nop 32 0x3777 005000 iverify fhs_parity 0x3778 005001 deposit lap 0x3779 005002 store 3 ,extm_lap 0x377a 005003 deposit uap 0x377b 005004 store 1 ,extm_uap 0x377c 005005 copy temp ,bt_adr 0x377d 005006 branch fhs_parity_ok ,true 0x377e 005007 branch error_payload : 005008 fhs_parity_ok: 0x377f 005009 set0 mark_ext_patch ,mark 0x3780 005010 bpatch patch0d_7 ,mem_patch0d 0x3781 005011 parse demod ,bucket ,72 0x3782 005012 ialigned fhs1 0x3783 005013 ialigned am_addr 0x3784 005014 ialigned nap 0x3785 005015 ialigned regb 0x3786 005016 force 0 ,pdata 0x3787 005017 parse demod ,bucket ,16 0x3788 005018 branch error_payload ,crc_failed 0x3789 005019 setarg 0x0ffffffc 0x378a 005020 iand regb ,pdata 0x378b 005021 store 4 ,mem_clke_bt 0x378c 005022 deposit fhs_class 0x378d 005023 store 3 ,extm_class 0x378e 005024 deposit fhs_misc 0x378f 005025 store 1 ,extm_fhs_misc 0x3790 005026 deposit am_addr 0x3791 005027 store 1 ,extm_newconn_am_addr 0x3792 005028 deposit nap 0x3793 005029 store 2 ,extm_nap 0x3794 005030 deposit bt_clk 0x3795 005031 inject rxf ,32 0x3796 005032 compare type_fhs ,type ,0x0f 0x3797 005033 setflag true ,mark_fhs_already_good ,mark 0x3798 005034 branch end_of_packet : 005036 clear_got_tx: 0x3799 005037 set0 mark_ext_patch ,mark 0x379a 005038 bpatch patch0e_0 ,mem_patch0e 0x379b 005039 fetch 1 ,mem_arq 0x379c 005040 rtnbit0 wack 0x379d 005041 set0 wack ,pdata 0x379e 005042 setflip seqnx ,pdata 0x379f 005043 store 1 ,mem_arq 0x37a0 005044 fetch 1 ,mem_last_type 0x37a1 005045 beq type_lmp ,clear_got_txlmp 0x37a2 005046 rtneq type_hv3 0x37a3 005047 fetch 1 ,mem_op 0x37a4 005048 rtnbit0 op_txl2cap ,pdata 0x37a5 005049 set0 op_txl2cap ,pdata 0x37a6 005050 set1 op_pkt_comp ,pdata 0x37a7 005051 store 1 ,mem_op 0x37a8 005052 set0 mark_tx_l2cap ,mark 0x37a9 005053 fetch 1 ,mem_device_option 0x37aa 005054 rtneq dvc_op_hci 0x37ab 005055 fetch 2 ,mem_l2cap_tx_multi_offset 0x37ac 005056 nrtn blank 0x37ad 005057 fetch 1 ,mem_op 0x37ae 005058 set0 op_pkt_comp ,pdata 0x37af 005059 store 1 ,mem_op 0x37b0 005060 branch l2cap_malloc_free : 005062 clear_got_txlmp: 0x37b1 005063 set0 mark_ext_patch ,mark 0x37b2 005064 bpatch patch0e_1 ,mem_patch0e 0x37b3 005065 fetch 1 ,mem_lmo_header_opcode 0x37b4 005066 rshift pdata ,pdata 0x37b5 005067 beq lmp_start_encryption_req ,start_encryption 0x37b6 005068 beq lmp_stop_encryption_req ,stop_encryption 0x37b7 005069 beq lmp_unsniff_req ,sniff_exit 0x37b8 005070 beq lmp_escape ,clear_lmp_escape 0x37b9 005071 beq lmp_remove_sco_link_req ,stop_sco 0x37ba 005072 rtnne lmp_accepted 0x37bb 005073 fetch 1 ,mem_lmo_payload 0x37bc 005074 beq lmp_sco_link_req ,sco_link_req_by_slave 0x37bd 005075 beq lmp_start_encryption_req ,clear_send_setup_complete 0x37be 005076 rtn : 005078 clear_lmp_escape: 0x37bf 005079 fetch 1 ,mem_lmo_payload 0x37c0 005080 set1 7 ,pdata 0x37c1 005081 beq lmp_ext_remove_esco_req ,stop_sco 0x37c2 005082 rtn : 005083 clear_send_setup_complete: 0x37c3 005084 rtn master 0x37c4 005085 fetch 1 ,mem_state 0x37c5 005086 rtnbit1 state_conn_comp 0x37c6 005087 jam lmp_setup_complete ,mem_lmo_opcode2 0x37c7 005088 rtn : 005091 sco_link_req_by_slave: 0x37c8 005092 rtn master 0x37c9 005093 fetch 1 ,mem_mode 0x37ca 005094 isolate1 send_sco_when_slave ,pdata 0x37cb 005095 branch clean_mem_mode ,true 0x37cc 005097 rtn : 005098 clean_mem_mode: 0x37cd 005099 set0 send_sco_when_slave ,pdata 0x37ce 005100 store 1 ,mem_mode 0x37cf 005101 rtn : 005103 start_encryption: 0x37d0 005104 set0 mark_ext_patch ,mark 0x37d1 005105 bpatch patch0e_2 ,mem_patch0e 0x37d2 005106 fetch 1 ,mem_state_map 0x37d3 005107 set1 smap_encryption ,pdata 0x37d4 005108 store 1 ,mem_state_map 0x37d5 005109 hjam 1 ,core_encrypt 0x37d6 005110 fetch 1 ,mem_state 0x37d7 005111 isolate1 state_conn_comp ,pdata 0x37d8 005112 branch hci_send_encryption_change ,true 0x37d9 005113 rtn : 005115 stop_encryption: 0x37da 005116 set0 mark_ext_patch ,mark 0x37db 005117 bpatch patch0e_3 ,mem_patch0e 0x37dc 005118 fetch 1 ,mem_state_map 0x37dd 005119 set0 smap_encryption ,pdata 0x37de 005120 store 1 ,mem_state_map 0x37df 005121 hjam 0 ,core_encrypt 0x37e0 005122 rtn : 005125 sniff_init: 0x37e1 005126 set0 mark_ext_patch ,mark 0x37e2 005127 bpatch patch0e_4 ,mem_patch0e 0x37e3 005128 copy clkn_bt ,pdata 0x37e4 005129 store 4 ,mem_lpm_delay_after_sniff 0x37e5 005130 add clkn_bt ,3 ,rega 0x37e6 005131 branch sniff_init_master ,master 0x37e7 005132 add clke_bt ,3 ,rega : 005133 sniff_init_master: 0x37e8 005134 fetcht 2 ,mem_tsniff 0x37e9 005135 deposit rega 0x37ea 005136 set0 27 ,pdata 0x37eb 005137 idiv temp 0x37ec 005138 fetch 2 ,mem_dsniff 0x37ed 005139 call wait_div_end 0x37ee 005140 remainder regc 0x37ef 005141 isub regc ,pdata 0x37f0 005142 branch sniff_init_nowrap ,positive 0x37f1 005143 iadd temp ,pdata : 005144 sniff_init_nowrap: 0x37f2 005145 iadd rega ,pdata 0x37f3 005146 store 4 ,mem_sniff_anchor 0x37f4 005147 jam switch_flag_init ,mem_switch_flag 0x37f5 005148 fetch 1 ,mem_state 0x37f6 005149 set1 state_insniff ,pdata 0x37f7 005150 store 1 ,mem_state 0x37f8 005151 fetch 1 ,mem_sniff_attempt 0x37f9 005152 store 1 ,mem_current_sniff_attempt 0x37fa 005153 jam 0x80 ,mem_seqi 0x37fb 005154 setarg 0 0x37fc 005155 store 3 ,mem_sniff_rcv 0x37fd 005156 store 3 ,mem_sniff_lost 0x37fe 005157 store 1 ,mem_sniff_unint_lost 0x37ff 005158 jam bt_evt_enter_sniff ,mem_fifo_temp 0x3800 005159 call ui_ipc_send_event 0x3801 005160 fetch 2 ,mem_rx_window_sniff 0x3802 005161 store 2 ,mem_rx_window 0x3803 005162 nrtn master 0x3804 005163 add am_addr ,-1 ,queue 0x3805 005164 rtn : 005166 sniff_exit: 0x3806 005167 set0 mark_ext_patch ,mark 0x3807 005168 bpatch patch0e_5 ,mem_patch0e 0x3808 005169 fetch 1 ,mem_state 0x3809 005170 rtnbit0 state_insniff 0x380a 005171 set0 state_insniff ,pdata 0x380b 005172 store 1 ,mem_state 0x380c 005173 jam 0x7f ,mem_seqi 0x380d 005174 fetch 2 ,mem_rx_window_init 0x380e 005175 store 2 ,mem_rx_window 0x380f 005176 disable wake 0x3810 005177 jam bt_evt_exit_sniff ,mem_fifo_temp 0x3811 005178 branch ui_ipc_send_event : 005181 check_attempt: 0x3812 005182 set0 mark_ext_patch ,mark 0x3813 005183 bpatch patch0e_6 ,mem_patch0e 0x3814 005184 enable attempt 0x3815 005185 fetch 1 ,mem_state 0x3816 005186 bbit1 state_insniff ,check_attempt_sniff 0x3817 005187 rtnmark1 mark_testmode 0x3818 005188 fetch 1 ,mem_arq 0x3819 005189 rtnbit1 wack 0x381a 005190 fetch 1 ,mem_lmp_to_send 0x381b 005191 nrtn blank 0x381c 005192 fetch 1 ,mem_op 0x381d 005193 rtnbit1 op_txl2cap : 005194 check_attempt_nomore: 0x381e 005195 force 0 ,pdata 0x381f 005196 rtn : 005198 check_attempt_sniff: 0x3820 005199 bbit0 state_insco ,check_attempt_not_sco 0x3821 005200 fetch 1 ,mem_current_sniff_attempt 0x3822 005201 beq 2 ,check_attempt_sniff_restore_sco 0x3823 005202 fetch 1 ,mem_arq 0x3824 005203 bbit1 wack ,check_attempt_notimeout 0x3825 005204 bmark0 mark_esco_rxok ,check_attempt_notimeout : 005205 check_attempt_sniff_restore_sco: 0x3826 005206 call restore_esco 0x3827 005207 nbranch check_attempt_notimeout ,master 0x3828 005208 fetch 1 ,mem_lmp_to_send 0x3829 005209 nbranch check_attempt_notimeout ,blank : 005210 check_attempt_sco_master: 0x382a 005211 fetch 1 ,mem_sco_poll 0x382b 005212 increase -1 ,pdata 0x382c 005213 store 1 ,mem_sco_poll 0x382d 005214 nbranch check_attempt_nomore ,blank 0x382e 005215 jam param_sco_poll ,mem_sco_poll 0x382f 005216 branch check_attempt_notimeout : 005218 check_attempt_not_sco: 0x3830 005219 fetch 1 ,mem_current_sniff_attempt 0x3831 005220 bne 1 ,check_attempt_notimeout 0x3832 005221 fetch 1 ,mem_current_sniff_timeout 0x3833 005222 branch check_attempt_notimeout ,blank 0x3834 005223 increase -1 ,pdata 0x3835 005224 store 1 ,mem_current_sniff_timeout 0x3836 005225 fetch 1 ,mem_arq 0x3837 005226 rtnbit1 wack 0x3838 005227 nrtn match : 005228 check_attempt_notimeout: 0x3839 005229 fetch 1 ,mem_current_sniff_attempt 0x383a 005230 increase -1 ,pdata 0x383b 005231 store 1 ,mem_current_sniff_attempt 0x383c 005232 rtn : 005235 sniff_check_window: 0x383d 005236 set0 mark_ext_patch ,mark 0x383e 005237 bpatch patch0e_7 ,mem_patch0e 0x383f 005238 disable swfine 0x3840 005239 copy temp ,stop_watch 0x3841 005240 call context_search_sniff_window 0x3842 005241 disable user 0x3843 005242 nrtn zero 0x3844 005243 force 0 ,stop_watch 0x3845 005244 enable user 0x3846 005245 rtn : 005248 check_esco_amaddr: 0x3847 005249 fetch 1 ,mem_esco_addr 0x3848 005250 icompare 0xff ,am_addr 0x3849 005251 rtn : 005253 play_sco: 0x384a 005254 set0 mark_ext_patch ,mark 0x384b 005255 bpatch patch0f_0 ,mem_patch0f 0x384c 005256 jam 1 ,mem_max_slot 0x384d 005258 call enable_pcm 0x384e 005259 force 12 ,pdata 0x384f 005260 store 2 ,mem_tsniff 0x3850 005261 fetch 1 ,mem_esco_desco 0x3851 005262 lshift pdata ,pdata 0x3852 005263 store 2 ,mem_dsniff 0x3853 005264 fetch 1 ,mem_state 0x3854 005265 set1 state_insco ,pdata 0x3855 005266 store 1 ,mem_state 0x3856 005267 jam 3 ,mem_sniff_attempt 0x3857 005268 jam 3 ,mem_current_sniff_attempt 0x3858 005269 call sniff_init 0x3859 005270 force 0 ,temp 0x385a 005271 call hci_send_sco_complete 0x385b 005272 jam 0x50 ,mem_esco_arq 0x385c 005273 jam param_sco_poll ,mem_sco_poll 0x385d 005274 rtn : 005276 stop_sco: 0x385e 005277 set0 mark_ext_patch ,mark 0x385f 005278 bpatch patch0f_1 ,mem_patch0f 0x3860 005279 call sniff_exit 0x3861 005280 jam 5 ,mem_max_slot 0x3862 005282 call disable_pcm 0x3863 005283 fetch 1 ,mem_state 0x3864 005284 set0 state_insco ,pdata 0x3865 005285 store 1 ,mem_state : 005286 stop_sco_hci: 0x3866 005287 arg 0xe00 ,temp 0x3867 005288 jam hci_error_remote_user_ended_connection ,mem_hci_disconn_reason 0x3868 005289 branch hci_send_disconn_complete : 005291 stop_esco: 0x3869 005292 set0 mark_ext_patch ,mark 0x386a 005293 bpatch patch0f_2 ,mem_patch0f 0x386b 005294 jam default_neogotiation_state ,mem_neogotiation_state 0x386c 005295 call stop_sco 0x386d 005296 call restore_esco 0x386e 005297 set0 mark_esco ,mark 0x386f 005298 rtn : 005300 parse_l2cap: 0x3870 005301 set0 mark_ext_patch ,mark 0x3871 005302 bpatch patch0f_3 ,mem_patch0f 0x3872 005303 fetch 1 ,mem_device_option 0x3873 005304 beq dvc_op_hci ,parse_l2cap_hci 0x3874 005305 set0 mark_rxbuf_inuse ,mark : 005306 parse_l2cap_cont: 0x3875 005307 jam l2cap_rx_clear ,mem_l2cap_rx_done 0x3876 005308 fetch 1 ,mem_l2cap_rxbuff_inuse 0x3877 005309 rtn blank 0x3878 005310 isolate1 l2cap_inuse_buff1 ,pdata 0x3879 005311 arg mem_l2cap_rxbuff1 ,contr 0x387a 005312 call process_rx_l2cap_pkt ,true 0x387b 005313 set0 mark_ext_patch ,mark 0x387c 005314 bpatch patch0f_4 ,mem_patch0f 0x387d 005315 fetch 1 ,mem_l2cap_rx_done 0x387e 005316 beq l2cap_rx_done ,parse_l2cap_release_buff1 0x387f 005318 jam l2cap_rx_clear ,mem_l2cap_rx_done 0x3880 005319 fetch 1 ,mem_l2cap_rxbuff_inuse 0x3881 005320 rtnbit0 l2cap_inuse_buff2 0x3882 005321 arg mem_l2cap_rxbuff2 ,contr 0x3883 005322 call process_rx_l2cap_pkt 0x3884 005323 fetch 1 ,mem_l2cap_rx_done 0x3885 005324 beq l2cap_rx_done ,parse_l2cap_release_buff2 0x3886 005325 rtn : 005327 parse_l2cap_exit: 0x3887 005328 fetch 1 ,mem_state_map 0x3888 005329 set0 smap_rxl2cap ,pdata 0x3889 005330 store 1 ,mem_state_map 0x388a 005331 set0 mark_rxbuf_inuse ,mark 0x388b 005332 branch h4_send_acl_trigger_clear : 005334 parse_l2cap_release_buff1: 0x388c 005335 fetch 1 ,mem_l2cap_rxbuff_inuse 0x388d 005336 set0 l2cap_inuse_buff1 ,pdata 0x388e 005337 store 1 ,mem_l2cap_rxbuff_inuse 0x388f 005338 setarg 0 0x3890 005339 store 2 ,mem_l2cap_rxbuff1_len 0x3891 005340 rtn : 005341 parse_l2cap_release_buff2: 0x3892 005342 fetch 1 ,mem_l2cap_rxbuff_inuse 0x3893 005343 set0 l2cap_inuse_buff2 ,pdata 0x3894 005344 store 1 ,mem_l2cap_rxbuff_inuse 0x3895 005345 setarg 0 0x3896 005346 store 2 ,mem_l2cap_rxbuff2_len 0x3897 005347 rtn : 005349 parse_l2cap_hci: 0x3898 005350 fetch 1 ,mem_state_map 0x3899 005351 rtnbit0 smap_rxl2cap ,pdata 0x389a 005352 call h4_send_acl_trigger 0x389b 005353 fetch 2 ,mem_acl_credits 0x389c 005354 branch assert ,blank 0x389d 005355 increase -1 ,pdata 0x389e 005356 store 2 ,mem_acl_credits 0x389f 005357 branch parse_l2cap_exit : 005359 l2cap_buff1_inuse: 0x38a0 005360 fetch 1 ,mem_l2cap_rxbuff_inuse 0x38a1 005361 set1 l2cap_inuse_buff1 ,pdata 0x38a2 005362 store 1 ,mem_l2cap_rxbuff_inuse 0x38a3 005363 rtn : 005365 l2cap_buff2_inuse: 0x38a4 005366 fetch 1 ,mem_l2cap_rxbuff_inuse 0x38a5 005367 set1 l2cap_inuse_buff2 ,pdata 0x38a6 005368 store 1 ,mem_l2cap_rxbuff_inuse 0x38a7 005369 rtn : 005375 slave_send_access: 0x38a8 005376 set0 mark_ext_patch ,mark 0x38a9 005377 bpatch patch0f_5 ,mem_patch0f 0x38aa 005378 add clke_bt ,1 ,bt_clk 0x38ab 005379 call fetch_extm_bt_adr 0x38ac 005380 force 0x03 ,freq_mode 0x38ad 005381 call tx_radio_freq 0x38ae 005382 call start_transmitter 0x38af 005383 call start_tx_external 0x38b0 005384 branch send_access_word : 005387 slave_conn_send_packet: 0x38b1 005388 set0 mark_ext_patch ,mark 0x38b2 005389 bpatch patch0f_6 ,mem_patch0f 0x38b3 005390 call rf_setup_time_slave_slot 0x38b4 005391 deposit clke_bt 0x38b5 005392 fetcht 4 ,mem_next_btclk 0x38b6 005393 isub temp ,pdata 0x38b7 005394 rtnne 1 0x38b8 005395 compare type_null ,type ,0x1f 0x38b9 005396 nbranch slave_conn_send_access ,true 0x38ba 005397 fetch 1 ,mem_rx_type 0x38bb 005398 rtn blank : 005399 slave_conn_send_access: 0x38bc 005400 call slave_send_access 0x38bd 005401 compare type_id ,type ,0x1f 0x38be 005402 branch end_of_packet ,true : 005403 transmit_packet: 0x38bf 005404 rshift bt_clk ,temp 0x38c0 005405 or temp ,0x40 ,white_init : 005406 transmit_packet_whitened: 0x38c1 005407 set0 mark_ext_patch ,mark 0x38c2 005408 bpatch patch0f_7 ,mem_patch0f 0x38c3 005409 enable enable_white 0x38c4 005410 enable enable_hec 0x38c5 005411 enable encode_fec1 0x38c6 005412 set0 mark_longpacket ,mark 0x38c7 005413 deposit am_addr 0x38c8 005414 inject mod ,3 0x38c9 005415 deposit type 0x38ca 005416 inject mod ,4 0x38cb 005417 fetch 1 ,mem_arq 0x38cc 005418 inject bucket ,4 0x38cd 005419 inject mod ,3 0x38ce 005420 enable enable_parity 0x38cf 005421 inject mod ,8 0x38d0 005422 disable encode_fec1 0x38d1 005423 disable enable_parity 0x38d2 005424 disable enable_hec 0x38d3 005425 set0 psk3m ,radio_ctrl 0x38d4 005426 arg 0 ,temp 0x38d5 005427 call reserve_slot 0x38d6 005428 set0 mark_ext_patch ,mark 0x38d7 005429 bpatch patch10_0 ,mem_patch10 0x38d8 005430 and type ,0x1f ,pdata 0x38d9 005431 beq type_lmp ,transmit_lmp 0x38da 005432 beq type_null ,end_of_packet 0x38db 005433 beq type_poll ,end_of_packet 0x38dc 005434 beq type_fhs ,transmit_fhs 0x38dd 005435 beq type_dm1 ,transmit_dm1 0x38de 005436 beq type_dh1 ,transmit_dh1 0x38df 005437 beq type_hv3 ,transmit_hev 0x38e0 005438 beq type_3dh1 ,transmit_3dh1 0x38e1 005439 arg 4 ,temp 0x38e2 005440 call reserve_slot 0x38e3 005441 beq type_dm3 ,transmit_dm3 0x38e4 005442 beq type_dh3 ,transmit_dh3 0x38e5 005443 arg 8 ,temp 0x38e6 005444 call reserve_slot 0x38e7 005445 beq type_dh5 ,transmit_dh5 0x38e8 005446 branch transmit_dm5 : 005449 transmit_hev: 0x38e9 005450 set0 mark_ext_patch ,mark 0x38ea 005451 bpatch patch10_1 ,mem_patch10 0x38eb 005452 enable encode_fec0 0x38ec 005453 enable enable_crc 0x38ed 005454 enable encrypt 0x38ee 005455 force 30 ,loopcnt 0x38ef 005456 arg mem_sco_obuf ,contr : 005457 transmit_ev_loop: 0x38f0 005458 ifetch 1 ,contr 0x38f1 005459 inject mod ,8 0x38f2 005460 loop transmit_ev_loop 0x38f3 005461 bmark1 mark_esco ,transmit_end 0x38f4 005462 branch end_of_packet : 005464 transmit_fhs: 0x38f5 005465 set0 mark_ext_patch ,mark 0x38f6 005466 bpatch patch10_2 ,mem_patch10 0x38f7 005467 fetch 1 ,mem_fhs_am_addr 0x38f8 005468 icopy am_addr 0x38f9 005469 fetch 1 ,mem_fhs_misc 0x38fa 005470 icopy fhs_misc 0x38fb 005471 fetch 3 ,mem_class 0x38fc 005472 icopy fhs_class 0x38fd 005473 fetch 2 ,mem_nap 0x38fe 005474 icopy nap 0x38ff 005475 enable enable_crc 0x3900 005476 enable encode_fec2 0x3901 005477 copy bt_adr ,rega 0x3902 005478 call fetch_self_bt_adr 0x3903 005479 pulse recalc 0x3904 005480 nop 32 0x3905 005481 copy bt_clk ,timeup 0x3906 005482 fetch 4 ,mem_clkn_bt 0x3907 005483 icopy bt_clk 0x3908 005484 preload fhs0 0x3909 005485 set1 58 ,pdata 0x390a 005486 inject mod ,72 0x390b 005487 preload fhs1 0x390c 005488 inject mod ,72 0x390d 005489 copy timeup ,bt_clk 0x390e 005490 copy rega ,bt_adr 0x390f 005491 enable enable_parity 0x3910 005492 inject mod ,16 0x3911 005493 disable enable_parity 0x3912 005494 branch end_of_packet : 005496 transmit_lmp: 0x3913 005497 set0 mark_ext_patch ,mark 0x3914 005498 bpatch patch10_3 ,mem_patch10 0x3915 005499 enable encrypt 0x3916 005500 enable enable_crc 0x3917 005501 enable encode_fec2 0x3918 005502 fetch 1 ,mem_lmo_header_length 0x3919 005503 and pdata ,0x1f8 ,temp 0x391a 005504 arg mem_lmo_header_length ,contr 0x391b 005505 increase 8 ,temp : 005506 transmit_lmp_loop: 0x391c 005507 add temp ,-72 ,regc 0x391d 005508 nbranch transmit_lmp_finish ,positive 0x391e 005509 ifetch 9 ,contr 0x391f 005510 inject mod ,72 0x3920 005511 copy regc ,temp 0x3921 005512 branch transmit_lmp_loop : 005513 transmit_lmp_finish: 0x3922 005514 ifetch 9 ,contr 0x3923 005515 iinject mod ,temp 0x3924 005516 branch transmit_end : 005518 transmit_dm1: 0x3925 005519 enable encode_fec2 0x3926 005520 branch transmit_dmh : 005521 transmit_dm3: : 005522 transmit_dm5: 0x3927 005523 enable encode_fec2 0x3928 005524 set1 mark_longpacket ,mark 0x3929 005525 branch transmit_dmh : 005527 transmit_3dh1: 0x392a 005528 set1 psk3m ,radio_ctrl : 005529 transmit_dh1: 0x392b 005530 enable encode_fec0 0x392c 005531 branch transmit_dmh : 005533 transmit_dh3: : 005534 transmit_dh5: 0x392d 005535 set1 psk3m ,radio_ctrl 0x392e 005536 enable encode_fec0 0x392f 005537 set1 mark_longpacket ,mark : 005539 transmit_dmh: 0x3930 005540 set0 mark_ext_patch ,mark 0x3931 005541 bpatch patch10_4 ,mem_patch10 0x3932 005542 fetch 1 ,mem_state_map 0x3933 005543 bbit0 smap_edr ,transmit_noedr 0x3934 005544 sub type ,3 ,null 0x3935 005545 branch transmit_noedr ,positive 0x3936 005546 disable encrypt 0x3937 005547 disable encode_fec2 0x3938 005548 enable encode_fec0 0x3939 005549 disable enable_white 0x393a 005550 set1 psk ,radio_ctrl 0x393b 005551 isolate1 psk3m ,radio_ctrl 0x393c 005552 branch transmit_edr3m ,true 0x393d 005553 setarg 0xabeee 0x393e 005554 inject mod ,20 0x393f 005555 branch transmit_edr_sync_end : 005556 transmit_edr3m: 0x3940 005557 setarg 0x5faeba 0x3941 005558 inject mod ,24 0x3942 005559 setarg 0x12 0x3943 005560 inject mod ,6 : 005561 transmit_edr_sync_end: 0x3944 005562 enable enable_white 0x3945 005563 set1 mark_longpacket ,mark : 005564 transmit_noedr: 0x3946 005565 enable encrypt 0x3947 005566 enable enable_crc 0x3948 005567 bmark1 mark_loopback ,transmit_loopback 0x3949 005568 fetch 1 ,mem_tx_lch 0x394a 005569 inject mod ,3 0x394b 005570 fetch 2 ,mem_tx_len 0x394c 005571 iforce loopcnt 0x394d 005572 bmark1 mark_longpacket ,transmit_long 0x394e 005573 inject mod ,5 0x394f 005574 branch transmit_stuff : 005575 transmit_long: 0x3950 005576 inject mod ,13 : 005577 transmit_stuff: 0x3951 005578 fetch 1 ,mem_device_option 0x3952 005579 beq dvc_op_hci ,transmit_stuff_hci 0x3953 005580 deposit loopcnt 0x3954 005581 branch transmit_end ,blank 0x3955 005582 fetch 2 ,mem_txptr 0x3956 005583 iforce contr : 005584 transmit_stuff_loop: 0x3957 005585 ifetch 1 ,contr 0x3958 005586 inject mod ,8 0x3959 005587 loop transmit_stuff_loop 0x395a 005588 branch transmit_end : 005589 transmit_stuff_hci: 0x395b 005590 fetch 2 ,mem_txptr 0x395c 005591 iforce contru : 005592 transmit_stuff_hci_loop: 0x395d 005593 ifetch 1 ,contru 0x395e 005594 inject mod ,8 0x395f 005595 loop transmit_stuff_hci_loop : 005596 transmit_end: 0x3960 005597 enable enable_parity 0x3961 005598 inject mod ,16 0x3962 005599 disable enable_parity 0x3963 005600 call set_wait_ack 0x3964 005601 fetch 1 ,mem_state_map 0x3965 005602 bbit0 smap_edr ,end_of_packet 0x3966 005603 force 0 ,pdata 0x3967 005604 inject mod ,6 0x3968 005605 branch end_of_packet : 005608 transmit_loopback: 0x3969 005609 set0 mark_ext_patch ,mark 0x396a 005610 bpatch patch10_5 ,mem_patch10 0x396b 005611 bmark1 mark_longpacket ,transmit_loopback_long : 005612 transmit_loopback_short: 0x396c 005613 fetch 1 ,mem_lch_code 0x396d 005614 inject mod ,3 0x396e 005615 fetch 1 ,mem_len 0x396f 005616 iforce regc 0x3970 005617 inject mod ,5 0x3971 005618 branch transmit_loopback_cont : 005619 transmit_loopback_long: 0x3972 005620 fetch 1 ,mem_lch_code 0x3973 005621 inject mod ,3 0x3974 005622 fetch 2 ,mem_len 0x3975 005623 iforce regc 0x3976 005624 inject mod ,13 : 005625 transmit_loopback_cont: 0x3977 005626 arg mem_rxbuf ,contr : 005627 transmit_loopback_loop: 0x3978 005628 copy regc ,null 0x3979 005629 branch transmit_loopback_end ,zero 0x397a 005630 ifetch 1 ,contr 0x397b 005631 inject mod ,8 0x397c 005632 increase -1 ,regc 0x397d 005633 branch transmit_loopback_loop : 005634 transmit_loopback_end: 0x397e 005635 fetch 2 ,mem_tst_pktcnt_dmh 0x397f 005636 increase 1 ,pdata 0x3980 005637 store 2 ,mem_tst_pktcnt_dmh 0x3981 005638 branch transmit_end : 005641 apply_switch_clke: 0x3982 005642 fetch 4 ,mem_clke_bt 0x3983 005643 add pdata ,7 ,rega 0x3984 005644 fetch 2 ,mem_slot_offset 0x3985 005645 nbranch apply_switch_nozero ,blank 0x3986 005646 increase -3 ,rega 0x3987 005647 branch apply_switch_wait_loop : 005648 apply_switch_nozero: 0x3988 005649 mul32 pdata ,12 ,pdata 0x3989 005650 hfetcht 2 ,core_halfslot 0x398a 005651 increase 1 ,temp : 005652 apply_switch_loop: 0x398b 005653 isub temp ,pdata 0x398c 005654 nbranch apply_switch_bt ,positive 0x398d 005655 increase -1 ,rega 0x398e 005656 branch apply_switch_loop : 005657 apply_switch_bt: 0x398f 005658 sub pdata ,0 ,pdata : 005659 apply_switch_wait_loop: 0x3990 005660 until null ,oneslot 0x3991 005661 compare 0 ,clkn_bt ,3 0x3992 005662 nbranch apply_switch_wait_loop ,true 0x3993 005663 iforce clke_rt 0x3994 005664 copy rega ,clke_bt 0x3995 005665 iforce clke_rt 0x3996 005666 rtn : 005669 calc_slot_offset: 0x3997 005670 set0 mark_ext_patch ,mark 0x3998 005671 bpatch patch10_6 ,mem_patch10 0x3999 005672 until null ,halfslot 0x399a 005673 deposit clke 0x399b 005674 iforce contr 0x399c 005675 rshift16 ,pdata ,pdata 0x399d 005676 isub clkn_bt ,loopcnt 0x399e 005677 and_into 3 ,loopcnt 0x399f 005678 nbranch calc_bt_portion ,zero 0x39a0 005679 force 0 ,pdata 0x39a1 005680 branch calc_skip_bt : 005681 calc_bt_portion: 0x39a2 005682 arg 3750 ,temp 0x39a3 005683 force 0 ,pdata : 005684 calc_slot_offset_loop: 0x39a4 005685 iadd temp ,pdata 0x39a5 005686 loop calc_slot_offset_loop : 005687 calc_skip_bt: 0x39a6 005688 iadd contr ,pdata 0x39a7 005689 div pdata ,12 0x39a8 005690 call wait_div_end 0x39a9 005691 quotient pdata 0x39aa 005692 store 2 ,mem_slot_offset 0x39ab 005693 rtn : 005695 calc_clke_offset: 0x39ac 005696 set0 mark_ext_patch ,mark 0x39ad 005697 bpatch patch10_7 ,mem_patch10 0x39ae 005698 deposit clke 0x39af 005699 copy clkn ,temp 0x39b0 005700 isub temp ,null 0x39b1 005701 nsetflag positive ,44 ,pdata 0x39b2 005702 isub temp ,temp 0x39b3 005703 setarg 3750 0x39b4 005704 isolate0 15 ,temp 0x39b5 005705 branch calc_clke_pos ,true 0x39b6 005706 setarg -61786 0x39b7 005707 iadd temp ,temp : 005708 calc_clke_pos: 0x39b8 005709 storet 6 ,mem_le_clk_offset 0x39b9 005710 rtn le 0x39ba 005711 storet 6 ,mem_clk_offset 0x39bb 005712 rtn : 005714 calc_clke: 0x39bc 005715 disable clknt 0x39bd 005716 fetch 6 ,mem_le_clk_offset 0x39be 005717 branch calc_clke2 ,le 0x39bf 005718 fetch 6 ,mem_clk_offset : 005719 calc_clke2: 0x39c0 005720 iadd clkn ,alarm 0x39c1 005721 increase 10 ,alarm 0x39c2 005722 setarg 3750 0x39c3 005723 isub alarm ,pdata 0x39c4 005724 isolate0 15 ,pdata 0x39c5 005725 branch calc_clke_pos_adj ,true 0x39c6 005726 setarg 0xf15a 0x39c7 005727 iadd alarm ,alarm : 005728 calc_clke_pos2: 0x39c8 005729 copy alarm ,clke 0x39c9 005730 rtn : 005731 calc_clke_pos_adj: 0x39ca 005732 force 0 ,null 0x39cb 005733 branch calc_clke_pos2 : 005740 calc_radio_freq: 0x39cc 005741 set0 mark_ext_patch ,mark 0x39cd 005742 bpatch patch11_0 ,mem_patch11 0x39ce 005743 call set_sync_on 0x39cf 005744 copy bt_clk ,pdata 0x39d0 005745 and_into 0x180 ,pdata 0x39d1 005746 compare 3 ,freq_mode ,0x07 0x39d2 005747 nbranch freq_not_connection ,true 0x39d3 005748 rshift3 pdata ,pdata 0x39d4 005749 iadd freq_index ,pdata 0x39d5 005750 branch do_hop_mod_now : 005751 freq_not_connection: 0x39d6 005752 copy freq_index ,pdata : 005753 do_hop_mod_now: 0x39d7 005754 div pdata ,79 0x39d8 005755 pulse recalc 0x39d9 005756 call wait_div_end 0x39da 005757 remainder rega 0x39db 005758 add rega ,-40 ,temp 0x39dc 005759 branch odd_half ,positive 0x39dd 005760 lshift rega ,temp 0x39de 005761 branch freq_result : 005762 odd_half: 0x39df 005763 lshift temp ,temp 0x39e0 005764 increase 1 ,temp : 005765 freq_result: 0x39e1 005766 set0 mark_ext_patch ,mark 0x39e2 005767 bpatch patch11_1 ,mem_patch11 0x39e3 005768 fetch 1 ,mem_mode 0x39e4 005769 bbit0 afh_change ,afh_process_con : 005770 afh_process_0: 0x39e5 005771 fetch 4 ,mem_afh_instant 0x39e6 005772 isub bt_clk ,null 0x39e7 005773 branch afh_process_con ,positive 0x39e8 005774 call afh_clear 0x39e9 005775 fetch 1 ,mem_afh_new_mod 0x39ea 005776 rtn blank 0x39eb 005777 fetch 1 ,mem_mode 0x39ec 005778 set1 afh_enable ,pdata 0x39ed 005779 store 1 ,mem_mode 0x39ee 005780 fetch 5 ,mem_afh_map_new 0x39ef 005781 store 5 ,mem_afh_map_lo 0x39f0 005782 ifetch 5 ,contr 0x39f1 005783 store 5 ,mem_afh_map_hi 0x39f2 005784 call afh_process_freq_map : 005785 afh_process_con: 0x39f3 005786 fetch 1 ,mem_mode 0x39f4 005787 rtnbit0 afh_enable 0x39f5 005788 isolate1 1 ,bt_clk 0x39f6 005789 branch afh_same_channel ,true 0x39f7 005790 rshift3 temp ,rega 0x39f8 005791 and temp ,7 ,queue 0x39f9 005792 setarg mem_afh_map_lo 0x39fa 005793 iadd rega ,rega 0x39fb 005794 ifetch 1 ,rega 0x39fc 005795 qisolate0 pdata 0x39fd 005796 branch afh_process_1 ,true 0x39fe 005797 deposit temp 0x39ff 005798 branch afh_process_end : 005799 afh_process_1: 0x3a00 005800 fetch 1 ,mem_afh_used 0x3a01 005801 iforce regb 0x3a02 005802 deposit bt_clk 0x3a03 005803 and_into 0x180 ,pdata 0x3a04 005804 rshift3 pdata ,pdata 0x3a05 005805 iadd freq_index ,pdata 0x3a06 005806 idiv regb 0x3a07 005807 setarg mem_afh_map 0x3a08 005808 call wait_div_end 0x3a09 005809 remainder rega 0x3a0a 005810 iadd rega ,contr 0x3a0b 005811 ifetch 1 ,contr : 005812 afh_process_end: 0x3a0c 005813 store 1 ,mem_afh_index 0x3a0d 005814 iforce temp 0x3a0e 005815 rtn : 005817 afh_same_channel: 0x3a0f 005818 fetch 1 ,mem_afh_index 0x3a10 005819 iforce temp 0x3a11 005820 rtn : 005822 afh_clear: 0x3a12 005823 fetch 1 ,mem_mode 0x3a13 005824 set0 afh_enable ,pdata 0x3a14 005825 set0 afh_change ,pdata 0x3a15 005826 store 1 ,mem_mode 0x3a16 005827 rtn : 005833 afh_process_freq_map: 0x3a17 005834 set0 mark_ext_patch ,mark 0x3a18 005835 bpatch patch11_2 ,mem_patch11 0x3a19 005836 arg mem_afh_map ,contw 0x3a1a 005837 force 10 ,loopcnt 0x3a1b 005838 call memset0 0x3a1c 005839 arg mem_afh_map ,contw 0x3a1d 005840 force 0 ,regc 0x3a1e 005841 force 2 ,queue : 005842 process_freq_3: 0x3a1f 005843 fetch 5 ,mem_afh_map_lo 0x3a20 005844 iforce temp 0x3a21 005845 compare 2 ,queue ,0xff 0x3a22 005846 branch process_freq_1 ,true 0x3a23 005847 rshift temp ,temp : 005848 process_freq_1: 0x3a24 005849 isolate0 0 ,temp 0x3a25 005850 branch process_freq_0 ,true 0x3a26 005851 deposit regc 0x3a27 005852 istore 1 ,contw : 005853 process_freq_0: 0x3a28 005854 rshift2 temp ,temp 0x3a29 005855 increase 2 ,regc 0x3a2a 005856 compare 40 ,regc ,0xfe 0x3a2b 005857 nbranch process_freq_2 ,true 0x3a2c 005858 fetch 5 ,mem_afh_map_hi 0x3a2d 005859 iforce temp 0x3a2e 005860 compare 2 ,queue ,0xff 0x3a2f 005861 branch process_freq_2 ,true 0x3a30 005862 rshift temp ,temp : 005863 process_freq_2: 0x3a31 005864 sub regc ,78 ,null 0x3a32 005865 branch process_freq_1 ,positive 0x3a33 005866 force 1 ,regc 0x3a34 005867 increase -1 ,queue 0x3a35 005868 nbranch process_freq_3 ,zero 0x3a36 005869 arg mem_afh_map ,rega 0x3a37 005870 deposit contw 0x3a38 005871 isub rega ,pdata 0x3a39 005872 store 1 ,mem_afh_used 0x3a3a 005873 rtn : 005875 rx_radio_freq: 0x3a3b 005876 set0 mark_ext_patch ,mark 0x3a3c 005877 bpatch patch11_3 ,mem_patch11 0x3a3d 005878 call calc_radio_freq 0x3a3e 005879 fetch 1 ,mem_debug_config 0x3a3f 005880 bbit0 debug_rx_fixed_freq ,rx_radio_freq_now 0x3a40 005881 fetcht 1 ,mem_rx_fixed_freq : 005882 rx_radio_freq_now: 0x3a41 005883 branch set_freq_rx : 005886 tx_radio_freq: 0x3a42 005887 set0 mark_ext_patch ,mark 0x3a43 005888 bpatch patch11_4 ,mem_patch11 0x3a44 005889 call calc_radio_freq 0x3a45 005890 fetch 1 ,mem_debug_config 0x3a46 005891 bbit0 debug_tx_fixed_freq ,tx_radio_freq_now 0x3a47 005892 fetcht 1 ,mem_tx_fixed_freq : 005893 tx_radio_freq_now: 0x3a48 005894 branch set_freq_tx : 005897 fetch_giac: 0x3a49 005898 force 0 ,uap 0x3a4a 005899 fetch 3 ,mem_glap 0x3a4b 005900 iforce lap 0x3a4c 005901 rtn : 005903 fetch_page_bt_adr: 0x3a4d 005904 set0 mark_ext_patch ,mark 0x3a4e 005905 bpatch patch11_5 ,mem_patch11 0x3a4f 005906 fetch 1 ,mem_hci_puap 0x3a50 005907 icopy uap 0x3a51 005908 fetch 3 ,mem_hci_plap 0x3a52 005909 icopy lap 0x3a53 005910 rtn : 005912 fetch_self_bt_adr: 0x3a54 005913 set0 mark_ext_patch ,mark 0x3a55 005914 bpatch patch11_6 ,mem_patch11 0x3a56 005915 fetch 2 ,mem_nap 0x3a57 005916 icopy nap 0x3a58 005917 fetch 1 ,mem_uap 0x3a59 005918 icopy uap 0x3a5a 005919 fetch 3 ,mem_lap 0x3a5b 005920 icopy lap 0x3a5c 005921 rtn : 005923 fetch_extm_bt_adr: 0x3a5d 005924 set0 mark_ext_patch ,mark 0x3a5e 005925 bpatch patch11_7 ,mem_patch11 0x3a5f 005926 fetch 2 ,mem_pnap 0x3a60 005927 icopy nap 0x3a61 005928 fetch 1 ,mem_puap 0x3a62 005929 icopy uap 0x3a63 005930 fetch 3 ,mem_plap 0x3a64 005931 icopy lap 0x3a65 005932 rtn : 005935 fetch_diac: 0x3a66 005936 bmark1 mark_all_diac ,fetch_diac_do 0x3a67 005937 rtnmark0 mark_inquiry_state 0x3a68 005938 rtnmark0 mark_periodical_diac : 005939 fetch_diac_do: 0x3a69 005940 and_into -256 ,lap 0x3a6a 005941 pulse recalc 0x3a6b 005942 nop 32 0x3a6c 005943 rtn : 005946 shutdown_radio: 0x3a6d 005947 set0 mark_ext_patch ,mark 0x3a6e 005948 bpatch patch12_0 ,mem_patch12 0x3a6f 005949 force 0 ,radio_ctrl 0x3a70 005950 disable is_rx 0x3a71 005951 disable is_tx 0x3a72 005952 pulse packet_end 0x3a73 005953 hjam 0x0 ,rfen_mdm 0x3a74 005954 hjam 0x0 ,rfen_tx 0x3a75 005955 hjam 0x0 ,rfen_rx 0x3a76 005956 hjam 0 ,rfen_sn 0x3a77 005957 hjam 0x70 ,rfen_msc 0x3a78 005958 hjam 0x0 ,rfen_adc 0x3a79 005959 rtn : 005961 set_sync_on: 0x3a7a 005962 set0 mark_ext_patch ,mark 0x3a7b 005963 bpatch patch12_1 ,mem_patch12 0x3a7c 005964 hjam 0x0 ,rfen_mdm 0x3a7d 005965 hjam 0x0 ,rfen_tx 0x3a7e 005966 hjam 0x18 ,rfen_rx 0x3a7f 005967 hjam 0xa7 ,rfen_sn 0x3a80 005968 hjam 0x7f ,rfen_msc 0x3a81 005969 rtn : 005972 set_freq_rx: 0x3a82 005973 set0 mark_ext_patch ,mark 0x3a83 005974 bpatch patch12_2 ,mem_patch12 0x3a84 005976 storet 1 ,mem_last_freq 0x3a85 005977 add temp ,rx_freq_offset ,rega 0x3a86 005978 branch rf_write_freq : 005979 rf_rx_enable: 0x3a87 005980 set0 mark_ext_patch ,mark 0x3a88 005981 bpatch patch12_3 ,mem_patch12 0x3a89 005982 hjam 0xcf ,rfen_tx 0x3a8a 005983 nop 10 0x3a8b 005984 hjam 0xff ,rfen_rx 0x3a8c 005985 hjam 0xaf ,rfen_sn 0x3a8d 005986 hjam 0xff ,rfen_msc 0x3a8e 005987 nop 10 0x3a8f 005988 hjam 0xa0 ,rfen_mdm 0x3a90 005989 rtn : 005992 set_freq_tx: 0x3a91 005993 set0 mark_ext_patch ,mark 0x3a92 005994 bpatch patch12_4 ,mem_patch12 0x3a93 005995 storet 1 ,mem_last_freq 0x3a94 005996 add temp ,tx_freq_offset ,rega 0x3a95 005997 call rf_write_freq 0x3a96 005998 setarg param_pll_setup 0x3a97 005999 call sleep : 006000 txon: 0x3a98 006001 hjam 0x1 ,rfen_adc 0x3a99 006002 hjam 0x3c ,rfen_rx 0x3a9a 006003 hjam 0xe0 ,rfen_tx 0x3a9b 006004 hjam 0xb7 ,rfen_sn 0x3a9c 006005 hjam 0x7f ,rfen_mdm 0x3a9d 006006 rtn : 006008 initialize_radio: 0x3a9e 006009 hjam clksel_rc ,core_clksel 0x3a9f 006010 call init_rf_regs 0x3aa0 006011 call init_agc_table : 006012 initialize_radio_wait: 0x3aa1 006013 fetch 2 ,mem_rf_init_ptr 0x3aa2 006014 bbit0 14 ,initialize_radio_wait 0x3aa3 006015 iforce contr 0x3aa4 006016 arg 0x8900 ,temp : 006017 initialize_radio_loop: 0x3aa5 006018 ifetch 1 ,contr 0x3aa6 006019 beq 0xff ,initialize_radio_cont 0x3aa7 006020 ior temp ,contw 0x3aa8 006021 ifetch 1 ,contr 0x3aa9 006022 istore 1 ,contw 0x3aaa 006023 branch initialize_radio_loop : 006024 initialize_radio_cont: 0x3aab 006025 set0 mark_ext_patch ,mark 0x3aac 006026 bpatch patch12_5 ,mem_patch12 0x3aad 006027 call lpm_cal_xtal_startup 0x3aae 006028 call switchto_dpllclk 0x3aaf 006030 setarg param_dpll_start_delay 0x3ab0 006031 iadd clkn_bt ,pdata 0x3ab1 006032 store 4 ,mem_dpll_clkn 0x3ab2 006033 set1 reset ,radio_ctrl 0x3ab3 006034 force 0 ,radio_ctrl 0x3ab4 006035 ncall do_rccal ,wake 0x3ab5 006036 branch set_rccal : 006039 rf_write_freq: 0x3ab6 006040 set0 mark_ext_patch ,mark 0x3ab7 006041 bpatch patch12_6 ,mem_patch12 0x3ab8 006042 setarg 2400 0x3ab9 006043 iadd rega ,temp 0x3aba 006044 fetch 1 ,mem_fcomp_mul 0x3abb 006045 hjam 0x04 ,rf_pll_rstn 0x3abc 006046 imul32 temp ,pdata 0x3abd 006047 fetcht 1 ,mem_fcomp_div 0x3abe 006048 idiv temp 0x3abf 006049 call wait_div_end 0x3ac0 006050 quotient rega 0x3ac1 006051 remainder pdata 0x3ac2 006052 lshift16 pdata ,pdata 0x3ac3 006053 lshift4 pdata ,pdata 0x3ac4 006054 idiv temp 0x3ac5 006055 call wait_div_end 0x3ac6 006056 quotient pdata 0x3ac7 006057 lshift8 pdata ,pdata 0x3ac8 006058 lshift pdata ,pdata 0x3ac9 006059 ior rega ,pdata 0x3aca 006060 hstore 4 ,rf_pll_intg 0x3acb 006061 hjam 0x44 ,rf_pll_rstn 0x3acc 006062 hjam 0xc4 ,rf_pll_rstn 0x3acd 006063 rtn : 006066 do_rccal: 0x3ace 006067 set0 mark_ext_patch ,mark 0x3acf 006068 bpatch patch12_7 ,mem_patch12 0x3ad0 006069 hjam 0x02 ,rfen_adc 0x3ad1 006070 setarg 250000 0x3ad2 006071 call sleep 0x3ad3 006072 hjam 0x7f ,rfen_rx 0x3ad4 006073 nop 130 0x3ad5 006074 hjam 0x30 ,rf_rccal_ctrl 0x3ad6 006075 hjam 0xd0 ,rfen_tx 0x3ad7 006076 hjam 0x70 ,rf_rccal_ctrl 0x3ad8 006077 hjam 0xf0 ,rf_rccal_ctrl 0x3ad9 006078 force 50 ,loopcnt : 006079 do_rccal_loop: 0x3ada 006080 hfetch 1 ,rf_rccal_result 0x3adb 006081 bbit1 5 ,do_rccal_end 0x3adc 006082 loop do_rccal_loop : 006083 do_rccal_end: 0x3add 006084 store 1 ,mem_rf_rccal 0x3ade 006085 hjam 0 ,rfen_tx 0x3adf 006086 hjam 0 ,rfen_rx 0x3ae0 006087 hjam 0x00 ,rfen_adc 0x3ae1 006088 rtn : 006090 set_rccal: 0x3ae2 006091 set0 mark_ext_patch ,mark 0x3ae3 006092 bpatch patch13_0 ,mem_patch13 0x3ae4 006093 fetch 1 ,mem_rf_rccal 0x3ae5 006094 set1 5 ,pdata 0x3ae6 006095 hstore 1 ,rf_rccal_ctrl 0x3ae7 006096 hfetcht 1 ,rf_bpf_ctrim 0x3ae8 006097 and_into 7 ,temp 0x3ae9 006098 lshift3 pdata ,pdata 0x3aea 006099 ior temp ,pdata 0x3aeb 006100 hstore 1 ,rf_bpf_ctrim 0x3aec 006101 hfetch 1 ,rf_bpf_ib 0x3aed 006102 set0 bpf_rccal ,pdata 0x3aee 006103 hstore 1 ,rf_bpf_ib 0x3aef 006104 hfetch 1 ,rf_adc_rccal 0x3af0 006105 set0 adc_rccal ,pdata 0x3af1 006106 hstore 1 ,rf_adc_rccal 0x3af2 006107 rtn : 006109 save_rssi: 0x3af3 006110 set0 mark_ext_patch ,mark 0x3af4 006111 bpatch patch13_1 ,mem_patch13 0x3af5 006112 hfetch 2 ,rf_afc_d2a 0x3af6 006113 rshift4 pdata ,pdata 0x3af7 006114 rshift3 pdata ,pdata 0x3af8 006115 sub pdata ,0 ,pdata 0x3af9 006116 and_into 0xff ,pdata 0x3afa 006117 div pdata ,10 0x3afb 006118 call wait_div_end 0x3afc 006119 quotient pdata 0x3afd 006120 lshift4 pdata ,pdata 0x3afe 006121 remainder temp 0x3aff 006122 ior temp ,pdata 0x3b00 006123 store 1 ,mem_rssi 0x3b01 006124 rtn : 006126 switchto_rcclk: 0x3b02 006127 hjam 0xa ,core_clksel 0x3b03 006128 hjam 0 ,rfen_ck 0x3b04 006129 hfetch 3 ,core_lpm_ctrl 0x3b05 006130 hstore 3 ,core_lpm_reg 0x3b06 006131 hjam 0xfc ,core_lpm_reg 0x3b07 006132 call lpm_write_ctrl 0x3b08 006133 nop 1000 0x3b09 006134 rtn : 006136 switchto_dpllclk: 0x3b0a 006137 hjam clksel_rc ,core_clksel 0x3b0b 006138 hfetch 1 ,rf_clkpll_frac + 2 0x3b0c 006139 set0 4 ,pdata 0x3b0d 006140 set0 5 ,pdata 0x3b0e 006141 hstore 1 ,rf_clkpll_frac + 2 0x3b0f 006142 hjam 0x00 ,rfen_ck 0x3b10 006143 hjam 0x00 ,rfen_msc 0x3b11 006144 hjam 0x70 ,rfen_msc 0x3b12 006145 hjam 0xff ,rfen_ck 0x3b13 006146 hfetch 1 ,rf_clkpll_frac + 2 0x3b14 006147 set1 4 ,pdata 0x3b15 006148 set1 5 ,pdata 0x3b16 006149 hstore 1 ,rf_clkpll_frac + 2 0x3b17 006150 call init_lpm_ctrl 0x3b18 006151 hfetch 1 ,rf_clkpll_int 0x3b19 006152 set1 7 ,pdata 0x3b1a 006153 hstore 1 ,rf_clkpll_int 0x3b1b 006154 set0 7 ,pdata 0x3b1c 006155 hstore 1 ,rf_clkpll_int 0x3b1d 006156 set1 7 ,pdata 0x3b1e 006157 hstore 1 ,rf_clkpll_int 0x3b1f 006158 hjam clksel_dpll ,core_clksel 0x3b20 006159 rtn : 006161 check_dpll: 0x3b21 006162 nop 1000 0x3b22 006163 hjam clksel_xtal ,core_clksel 0x3b23 006164 nop 10 0x3b24 006165 hjam 0x00 ,core_bist_ctrl 0x3b25 006166 hjam ccnt_start ,core_misc_ctrl : 006167 check_dpll_loop: 0x3b26 006168 hfetch 1 ,core_perf_status 0x3b27 006169 bbit0 1 ,check_dpll_loop 0x3b28 006170 hfetcht 3 ,core_clk_counter 0x3b29 006171 hjam clksel_dpll ,core_clksel 0x3b2a 006172 nop 10 0x3b2b 006173 hjam ccnt_start ,core_misc_ctrl : 006174 check_dpll_loop2: 0x3b2c 006175 hfetch 1 ,core_perf_status 0x3b2d 006176 bbit0 1 ,check_dpll_loop2 0x3b2e 006177 hfetch 3 ,core_clk_counter 0x3b2f 006178 isub temp ,pdata 0x3b30 006179 branch check_dpll_pos ,positive 0x3b31 006180 sub pdata ,0 ,pdata : 006181 check_dpll_pos: 0x3b32 006182 store 2 ,mem_dpll_error 0x3b33 006183 sub pdata ,70 ,null : 006184 check_dpll_assert: 0x3b34 006185 nbranch check_dpll_assert ,positive 0x3b35 006186 rtn : 006188 xtal_fast_wake: 0x3b36 006189 setarg 0xf0f 0x3b37 006190 branch lpm_write_config : 006192 init_lpm_ctrl: 0x3b38 006193 setarg 0x80f 0x3b39 006194 branch lpm_write_config : 006198 start_receiver: 0x3b3a 006199 set0 mark_ext_patch ,mark 0x3b3b 006200 bpatch patch13_2 ,mem_patch13 0x3b3c 006201 call rf_rx_enable 0x3b3d 006202 disable is_tx 0x3b3e 006203 enable is_rx 0x3b3f 006204 pulse init_encrypt 0x3b40 006205 rtn : 006207 prep_crypt: 0x3b41 006208 set0 mark_ext_patch ,mark 0x3b42 006209 bpatch patch13_3 ,mem_patch13 0x3b43 006210 fetch 1 ,mem_state_map 0x3b44 006211 isolate1 smap_encryption ,pdata 0x3b45 006212 setflag true ,0 ,pdata 0x3b46 006213 hstore 1 ,core_encrypt 0x3b47 006214 arg mem_kc ,contr 0x3b48 006215 ifetch 9 ,contr 0x3b49 006216 iforce kc_ls 0x3b4a 006217 ifetch 7 ,contr 0x3b4b 006218 iforce kc_ms 0x3b4c 006219 fetch 1 ,mem_key_size 0x3b4d 006220 add pdata ,-1 ,g1l 0x3b4e 006221 pulse kc_p_activate 0x3b4f 006222 rtn : 006224 wait_access_clke_rt: 0x3b50 006225 set0 mark_ext_patch ,mark 0x3b51 006226 bpatch patch13_4 ,mem_patch13 0x3b52 006227 enable decode_fec0 0x3b53 006228 arg param_conn_access ,timeup 0x3b54 006229 correlate clke_rt ,meet : 006230 wait_access_end: 0x3b55 006231 deposit clke 0x3b56 006232 store 6 ,mem_sync_clke 0x3b57 006233 disable decode_fec0 0x3b58 006234 nbranch shutdown_radio ,sync 0x3b59 006235 arg param_clke_cal ,clke_rt 0x3b5a 006236 increase 1 ,clke_bt 0x3b5b 006237 and_into 0x1fc ,clke_bt 0x3b5c 006238 rtn : 006242 wait_access_mhalfbnd: 0x3b5d 006243 enable decode_fec0 : 006244 wait_access_mhalfbnd_correlate: 0x3b5e 006245 correlate null ,mhalfbnd 0x3b5f 006246 branch wait_access_end ,sync 0x3b60 006247 compare 0x02 ,clke_bt ,0x02 0x3b61 006248 nbranch wait_access_mhalfbnd_correlate ,true 0x3b62 006249 branch wait_access_end : 006251 wait_access_clkn_rt: 0x3b63 006252 set0 mark_ext_patch ,mark 0x3b64 006253 bpatch patch13_5 ,mem_patch13 0x3b65 006254 arg param_conn_access ,timeup 0x3b66 006255 enable decode_fec0 0x3b67 006256 correlate clkn_rt ,meet 0x3b68 006257 disable decode_fec0 0x3b69 006258 nbranch shutdown_radio ,sync 0x3b6a 006259 rtn : 006261 wait_access_forever: 0x3b6b 006262 set0 mark_ext_patch ,mark 0x3b6c 006263 bpatch patch13_6 ,mem_patch13 0x3b6d 006264 enable decode_fec0 0x3b6e 006265 correlate null ,timeout 0x3b6f 006266 disable decode_fec0 0x3b70 006267 nbranch shutdown_radio ,sync 0x3b71 006268 arg param_clke_cal ,clke_rt 0x3b72 006269 and_into 0x1fc ,clke_bt 0x3b73 006270 rtn : 006273 reserve_slot: 0x3b74 006274 set0 mark_ext_patch ,mark 0x3b75 006275 bpatch patch13_7 ,mem_patch13 0x3b76 006276 iforce rega 0x3b77 006277 deposit bt_clk 0x3b78 006278 iadd temp ,timeup 0x3b79 006279 copy timeup ,pdata 0x3b7a 006280 store 4 ,mem_next_btclk 0x3b7b 006281 deposit rega 0x3b7c 006282 rtn : 006285 ahead_window: 0x3b7d 006286 copy pdata ,temp 0x3b7e 006287 set0 mark_ext_patch ,mark 0x3b7f 006288 bpatch patch14_0 ,mem_patch14 0x3b80 006289 copy temp ,pdata 0x3b81 006290 call clk2bt 0x3b82 006291 lshift16 bt_clk ,pdata 0x3b83 006292 set1 44 ,pdata 0x3b84 006293 call clk_diff 0x3b85 006294 set0 44 ,pdata 0x3b86 006295 call get_clk 0x3b87 006296 call clk_diff 0x3b88 006297 rtn user 0x3b89 006298 call clk2rt 0x3b8a 006299 iforce stop_watch 0x3b8b 006300 until null ,timeout 0x3b8c 006301 rtn : 006304 setup_clk: 0x3b8d 006305 set0 mark_ext_patch ,mark 0x3b8e 006306 bpatch patch14_1 ,mem_patch14 0x3b8f 006307 branch setup_clkn ,clknt 0x3b90 006308 until clke_rt ,meet : 006309 skip_setup_clke: 0x3b91 006310 copy clke_bt ,temp 0x3b92 006311 branch setup_clknbt : 006312 setup_clkn: 0x3b93 006313 branch skip_setup_clkn ,attempt 0x3b94 006314 until clkn_rt ,meet : 006315 skip_setup_clkn: 0x3b95 006316 copy clkn_bt ,temp : 006317 setup_clknbt: 0x3b96 006318 branch setup_clk11 ,user 0x3b97 006319 compare 1 ,temp ,3 0x3b98 006320 nbranch setup_clk ,true : 006321 setup_complete: 0x3b99 006322 set0 mark_ext_patch ,mark 0x3b9a 006323 bpatch patch14_2 ,mem_patch14 0x3b9b 006324 fetch 1 ,mem_state 0x3b9c 006325 rtnbit0 state_inconn 0x3b9d 006326 fetch 4 ,mem_next_btclk 0x3b9e 006327 isub temp ,pdata 0x3b9f 006328 nrtn positive 0x3ba0 006329 sub pdata ,0xff ,null 0x3ba1 006330 branch setup_clk ,positive 0x3ba2 006331 rtn : 006332 setup_clk11: 0x3ba3 006333 compare 3 ,temp ,3 0x3ba4 006334 nbranch setup_clk ,true 0x3ba5 006335 branch setup_complete : 006337 rf_setup_time: 0x3ba6 006338 set0 mark_ext_patch ,mark 0x3ba7 006339 bpatch patch14_3 ,mem_patch14 0x3ba8 006340 arg param_rf_setup ,timeup 0x3ba9 006341 branch setup_clk : 006343 rf_setup_time_slave_slot: 0x3baa 006344 disable user 0x3bab 006345 branch rf_setup_time : 006347 rf_setup_time_master_slot: 0x3bac 006348 enable user 0x3bad 006349 branch rf_setup_time : 006351 start_transmitter: 0x3bae 006352 set0 mark_ext_patch ,mark 0x3baf 006353 bpatch patch14_4 ,mem_patch14 0x3bb0 006354 call prep_crypt 0x3bb1 006355 disable is_rx 0x3bb2 006356 enable is_tx 0x3bb3 006357 rtn : 006361 start_tx_native: 0x3bb4 006362 set0 mark_ext_patch ,mark 0x3bb5 006363 bpatch patch14_5 ,mem_patch14 0x3bb6 006364 arg param_tx_setup ,timeup 0x3bb7 006365 until clkn_rt ,meet 0x3bb8 006366 pulse init_encrypt 0x3bb9 006367 rtn : 006369 start_rx_native: 0x3bba 006370 set0 mark_ext_patch ,mark 0x3bbb 006371 bpatch patch14_6 ,mem_patch14 0x3bbc 006372 arg param_rx_setup ,timeup 0x3bbd 006373 until clkn_rt ,meet 0x3bbe 006374 rtn : 006377 start_tx_external: 0x3bbf 006378 set0 mark_ext_patch ,mark 0x3bc0 006379 bpatch patch14_7 ,mem_patch14 0x3bc1 006380 arg param_tx_setup ,timeup 0x3bc2 006381 until clke_rt ,meet 0x3bc3 006382 pulse init_encrypt 0x3bc4 006383 rtn : 006385 send_access_word: 0x3bc5 006386 set0 mark_ext_patch ,mark 0x3bc6 006387 bpatch patch15_0 ,mem_patch15 0x3bc7 006388 preload access 0x3bc8 006389 enable encode_fec0 0x3bc9 006390 set1 txgfsk ,radio_ctrl 0x3bca 006391 inject mod ,72 0x3bcb 006392 disable encode_fec0 0x3bcc 006393 rtn : 006396 scan_mode_whiten: 0x3bcd 006397 copy xin ,temp 0x3bce 006398 or_into 0x60 ,temp 0x3bcf 006399 copy temp ,white_init 0x3bd0 006400 rtn : 006405 get_free_amaddr: 0x3bd1 006406 set0 mark_ext_patch ,mark 0x3bd2 006407 bpatch patch15_1 ,mem_patch15 0x3bd3 006408 fetch 1 ,mem_current_amaddr 0x3bd4 006409 increase 1 ,pdata 0x3bd5 006410 bne param_esco_addr ,get_free_amaddr_cont 0x3bd6 006411 force 1 ,pdata : 006412 get_free_amaddr_cont: 0x3bd7 006413 store 1 ,mem_current_amaddr 0x3bd8 006414 iforce am_addr 0x3bd9 006415 rtn : 006417 get_clk: 0x3bda 006418 copy clkn ,temp 0x3bdb 006419 rtn master 0x3bdc 006420 copy clke ,temp 0x3bdd 006421 rtn : 006423 get_clkbt: 0x3bde 006424 deposit clkn_bt 0x3bdf 006425 rtn master 0x3be0 006426 deposit clke_bt 0x3be1 006427 rtn : 006430 supervision_update: 0x3be2 006431 set0 mark_ext_patch ,mark 0x3be3 006432 bpatch patch15_2 ,mem_patch15 0x3be4 006433 fetcht 4 ,mem_supervision_timer 0x3be5 006434 call get_clkbt 0x3be6 006435 isub temp ,timeup 0x3be7 006436 deposit timeup 0x3be8 006437 fetcht 2 ,mem_supervision_to 0x3be9 006438 lshift temp ,temp 0x3bea 006439 isub temp ,pdata 0x3beb 006440 rtn : 006442 supervision_flush: 0x3bec 006443 set0 mark_ext_patch ,mark 0x3bed 006444 bpatch patch15_3 ,mem_patch15 0x3bee 006445 call get_clkbt 0x3bef 006446 store 4 ,mem_supervision_timer 0x3bf0 006447 rtn : 006449 assert: 0x3bf1 006450 branch assert : 006452 loop: 0x3bf2 006453 branch loop : 006455 sleep: 0x3bf3 006456 rtn blank 0x3bf4 006458 rshift pdata ,pdata 0x3bf5 006459 increase -3 ,pdata : 006460 sleep_loop: 0x3bf6 006461 increase -1 ,pdata 0x3bf7 006462 nbranch sleep_loop ,zero 0x3bf8 006463 force 0 ,pdata 0x3bf9 006464 rtn : 006468 init_param: 0x3bfa 006470 arg 0x10 ,loopcnt 0x3bfb 006471 arg 0 ,contw 0x3bfc 006472 call memset0 0x3bfd 006473 arg mem_le_state ,contw 0x3bfe 006474 arg 10 ,loopcnt 0x3bff 006475 call memset0 0x3c00 006476 jam 0 ,mem_sp_calc 0x3c01 006477 jam 0 ,mem_fifo_temp 0x3c02 006478 jam 0 ,mem_le_testtype 0x3c03 006479 jam 0 ,mem_debug_config 0x3c04 006480 jam 0 ,mem_lmp_conn_state 0x3c05 006481 set0 mark_ext_patch ,mark 0x3c06 006482 bpatch patch15_4 ,mem_patch15 0x3c07 006483 jam 0 ,mem_connection_options 0x3c08 006484 jam 0 ,mem_tester_emulate 0x3c09 006485 jam 0 ,mem_tester_cnt 0x3c0a 006486 setarg param_glap 0x3c0b 006487 store 3 ,mem_glap 0x3c0c 006488 setarg param_acl_pktlen 0x3c0d 006489 store 2 ,mem_acl_pktlen 0x3c0e 006490 jam param_sco_pktlen ,mem_sco_pktlen 0x3c0f 006491 jam param_acl_pktcnt ,mem_acl_pktcnt 0x3c10 006492 jam param_sco_pktcnt ,mem_sco_pktcnt 0x3c11 006493 setarg param_hci_version 0x3c12 006494 store 3 ,mem_hci_version 0x3c13 006495 setarg param_lmp_version 0x3c14 006496 store 3 ,mem_lmp_version 0x3c15 006497 setarg param_lmp_subversion 0x3c16 006498 store 2 ,mem_lmp_subversion 0x3c17 006499 jam 0x60 ,mem_fhs_misc 0x3c18 006500 jam param_max_slot ,mem_max_slot 0x3c19 006501 jam 0x02 ,mem_fw_ver 0x3c1a 006502 call init_memp 0x3c1b 006503 set0 mark_ext_patch ,mark 0x3c1c 006504 bpatch patch15_5 ,mem_patch15 0x3c1d 006505 rtn wake 0x3c1e 006506 setarg 0 0x3c1f 006507 store 2 ,mem_tx_len 0x3c20 006508 rshift clkn_bt ,pdata 0x3c21 006509 store 4 ,mem_last_clkn 0x3c22 006510 rtn : 006514 init_esco_ibuff: 0x3c23 006515 setarg 0xaa ,pdata 0x3c24 006516 arg mem_sco_ibuf ,contw 0x3c25 006517 force 30 ,loopcnt : 006518 init_esco_ibuff_loop: 0x3c26 006519 istore 1 ,contw 0x3c27 006520 loop init_esco_ibuff_loop 0x3c28 006521 rtn : 006523 init_rf_regs: 0x3c29 006524 hjam 0x02 ,0x907 0x3c2a 006525 hjam 0x1f ,0x908 0x3c2b 006526 hjam 0x1f ,0x909 0x3c2c 006527 hjam 0xe0 ,0x90a 0x3c2d 006528 hjam 0x4e ,0x90b 0x3c2e 006529 hjam 0x45 ,rf_agc_ctrl 0x3c2f 006530 hjam 0x00 ,0x953 0x3c30 006532 hjam 0xfb ,0x94c 0x3c31 006533 hjam 0xef ,0x94d 0x3c32 006534 hjam 0x0c ,0x94e 0x3c33 006536 hjam 0x88 ,0x96f 0x3c34 006537 hjam 0x30 ,0x973 0x3c35 006540 hjam 0x00 ,0x953 0x3c36 006541 hjam 0xc9 ,0x956 0x3c37 006542 hjam 0x6c ,0x958 0x3c38 006543 hjam 0x50 ,0x959 0x3c39 006544 rtn : 006546 init_agc_table: 0x3c3a 006548 hjam 0xa9 ,0x930 0x3c3b 006549 hjam 0xb1 ,0x92f 0x3c3c 006550 hjam 0xb9 ,0x92e 0x3c3d 006551 hjam 0xAD ,0x92d 0x3c3e 006552 hjam 0xB1 ,0x92c 0x3c3f 006553 hjam 0xB5 ,0x92b 0x3c40 006554 hjam 0xBA ,0x92a 0x3c41 006555 hjam 0xBE ,0x929 0x3c42 006556 hjam 0xC2 ,0x928 0x3c43 006557 hjam 0xC6 ,0x927 0x3c44 006558 hjam 0xCA ,0x926 0x3c45 006559 hjam 0xCE ,0x925 0x3c46 006560 hjam 0xD2 ,0x924 0x3c47 006561 hjam 0xD6 ,0x923 0x3c48 006562 hjam 0xDA ,0x922 0x3c49 006563 hjam 0xDE ,0x921 0x3c4a 006564 hjam 0xE2 ,0x920 0x3c4b 006565 hjam 0xE6 ,0x91f 0x3c4c 006566 hjam 0xEA ,0x91e 0x3c4d 006567 hjam 0xEE ,0x91d 0x3c4e 006568 hjam 0xF2 ,0x91c 0x3c4f 006569 hjam 0xF6 ,0x91b 0x3c50 006570 hjam 0xFB ,0x91a 0x3c51 006572 hjam 0xf5 ,0x947 0x3c52 006573 hjam 0xe5 ,0x946 0x3c53 006574 hjam 0xd5 ,0x945 0x3c54 006575 hjam 0xD8 ,0x944 0x3c55 006576 hjam 0xC9 ,0x943 0x3c56 006577 hjam 0xC8 ,0x942 0x3c57 006578 hjam 0x89 ,0x941 0x3c58 006579 hjam 0x88 ,0x940 0x3c59 006580 hjam 0x87 ,0x93f 0x3c5a 006581 hjam 0x48 ,0x93e 0x3c5b 006582 hjam 0x09 ,0x93d 0x3c5c 006583 hjam 0x08 ,0x93c 0x3c5d 006584 hjam 0xC9 ,0x93b 0x3c5e 006585 hjam 0xC8 ,0x93a 0x3c5f 006586 hjam 0xC7 ,0x939 0x3c60 006587 hjam 0xC6 ,0x938 0x3c61 006588 hjam 0xC5 ,0x937 0x3c62 006589 hjam 0xC4 ,0x936 0x3c63 006590 hjam 0xC3 ,0x935 0x3c64 006591 hjam 0xC2 ,0x934 0x3c65 006592 hjam 0xC1 ,0x933 0x3c66 006593 hjam 0xC0 ,0x932 0x3c67 006594 hjam 0x80 ,0x931 0x3c68 006595 rtn : 006599 init_250k: 0x3c69 006600 enable le 0x3c6a 006601 setarg 0x8e89be 0x3c6b 006602 lshift8 pdata ,pdata 0x3c6c 006603 or_into 0xd6 ,pdata 0x3c6d 006604 iforce access 0x3c6e 006605 hjam 7 ,0x914 0x3c6f 006606 hjam 0xa0 ,0x90a 0x3c70 006607 hjam 0x8f ,0x90d 0x3c71 006608 hjam 0x0f ,0x911 0x3c72 006609 hjam 0x87 ,0x912 0x3c73 006610 rtn : 006615 lpmstate: 0x3c74 006616 setarg 0xee21 0x3c75 006617 hstore 2 ,core_clkoff 0x3c76 006618 hfetch 1 ,core_lpm_ldocnt 0x3c77 006619 bbit0 gpio_latch ,loadcode 0x3c78 006620 enable wake 0x3c79 006621 bbit0 cold_wake ,lpmwake 0x3c7a 006622 disable wake 0x3c7b 006623 deposit auxcnt 0x3c7c 006624 nbranch lpmwake ,blank 0x3c7d 006625 arg param_hibernate_clks ,temp 0x3c7e 006626 branch lpm_enter_sleep : 006627 lpmwake: 0x3c7f 006628 hfetch 3 ,core_lpm_xtalcnt 0x3c80 006629 hstore 3 ,core_lpm_reg 0x3c81 006630 ifetch 1 ,contr 0x3c82 006631 or_into isogate_mask ,pdata 0x3c83 006632 istore 1 ,contw 0x3c84 006633 call lpm_write_ctrl2 0x3c85 006634 hfetch 1 ,core_lpm_isogate 0x3c86 006635 set1 enable_retmem ,pdata 0x3c87 006636 hstore 1 ,core_lpm_isogate 0x3c88 006637 call lpm_write_ctrl2 0x3c89 006638 call lpm_load_context ,wake 0x3c8a 006639 hfetch 1 ,core_lpm_reg + 2 0x3c8b 006640 set0 gpio_latch ,pdata 0x3c8c 006641 hstore 1 ,core_lpm_reg + 2 0x3c8d 006642 call lpm_write_ctrl2 0x3c8e 006643 rtn wake 0x3c8f 006644 branch loadcode : 006646 lpm_load_context: 0x3c90 006647 fetch 1 ,mem_saved_spidctrl 0x3c91 006648 hstore 1 ,core_spid_ctrl 0x3c92 006649 fetch 3 ,mem_saved_gsel 0x3c93 006650 hstore 3 ,core_gpio_sel 0x3c94 006651 fetch 4 ,mem_saved_gpio + 4 0x3c95 006652 hstore 4 ,core_gpio_out0 0x3c96 006653 fetch 4 ,mem_saved_gpio 0x3c97 006654 hstore 4 ,core_gpio_oe0 0x3c98 006655 fetch 8 ,mem_saved_gpio + 8 0x3c99 006656 hstore 8 ,core_gpio_pu0 0x3c9a 006657 fetch 8 ,mem_saved_mark 0x3c9b 006658 iforce mark 0x3c9c 006659 hfetch 8 ,core_gpio_wakeup_low 0x3c9d 006660 store 8 ,mem_gpio_wakeup_low 0x3c9e 006661 call load_ucode 0x3c9f 006662 rtn : 006664 lpm_save_context: 0x3ca0 006665 deposit mark 0x3ca1 006666 store 8 ,mem_saved_mark 0x3ca2 006667 hfetch 8 ,core_gpio_oe0 0x3ca3 006668 store 8 ,mem_saved_gpio 0x3ca4 006669 ifetch 8 ,contr 0x3ca5 006670 istore 8 ,contw 0x3ca6 006671 hfetch 3 ,core_gpio_sel 0x3ca7 006672 store 3 ,mem_saved_gsel 0x3ca8 006673 hfetch 1 ,core_spid_ctrl 0x3ca9 006674 store 1 ,mem_saved_spidctrl 0x3caa 006675 branch lpm_write_gpio_wakeup : 006677 lpo_calibration: 0x3cab 006678 hfetch 1 ,core_bist_ctrl 0x3cac 006679 nbranch lpo_cal_inited ,blank 0x3cad 006680 fetch 3 ,mem_clks_per_lpo 0x3cae 006681 nrtn blank 0x3caf 006682 hjam 0xc0 ,core_bist_ctrl 0x3cb0 006683 hjam ccnt_start ,core_misc_ctrl : 006684 lpo_cal_inited: 0x3cb1 006685 hfetch 1 ,core_perf_status 0x3cb2 006686 rtnbit0 1 0x3cb3 006687 hfetch 3 ,core_clk_counter 0x3cb4 006688 store 3 ,mem_clks_per_lpo 0x3cb5 006689 rtn : 006693 lpm_adjust_clk: 0x3cb6 006694 set0 mark_ext_patch ,mark 0x3cb7 006695 bpatch patch15_6 ,mem_patch15 0x3cb8 006696 deposit clke 0x3cb9 006697 call clk_diff_rt 0x3cba 006698 fetcht 4 ,mem_sleep_counter_all 0x3cbb 006699 sub temp ,0xff ,null 0x3cbc 006700 rtn positive 0x3cbd 006701 lshift8 pdata ,pdata 0x3cbe 006702 lshift4 pdata ,pdata 0x3cbf 006703 idiv temp 0x3cc0 006704 call wait_div_end 0x3cc1 006705 quotient pdata 0x3cc2 006706 arg param_lpm_adjmax ,temp 0x3cc3 006707 call ceiling 0x3cc4 006708 store 1 ,mem_lpm_adjust 0x3cc5 006709 nbranch lpm_adjust_positive ,user 0x3cc6 006710 sub pdata ,0 ,pdata : 006711 lpm_adjust_positive: 0x3cc7 006712 fetcht 3 ,mem_clks_per_lpo 0x3cc8 006713 iadd temp ,pdata 0x3cc9 006714 store 3 ,mem_clks_per_lpo : 006715 lpm_clear_counter: 0x3cca 006716 setarg 0 0x3ccb 006717 store 4 ,mem_sleep_counter_all 0x3ccc 006718 rtn : 006721 lpm_hibernate: 0x3ccd 006722 set0 mark_ext_patch ,mark 0x3cce 006723 bpatch patch15_7 ,mem_patch15 0x3ccf 006724 call lpm_write_gpio_wakeup 0x3cd0 006725 hfetch 4 ,core_lpm_ctrl 0x3cd1 006726 set0 15 ,pdata 0x3cd2 006727 hstore 4 ,core_lpm_reg 0x3cd3 006728 call lpm_write_ctrl : 006729 lpm_hibernate_normal: 0x3cd4 006730 arg param_hibernate_clks ,temp 0x3cd5 006731 fetch 1 ,mem_lpm_hibernate_switch 0x3cd6 006732 store 1 ,mem_lpm_xtalcnt + 4 0x3cd7 006733 fetch 1 ,mem_lpm_xtalcnt + 2 0x3cd8 006734 set1 cold_wake ,pdata 0x3cd9 006735 store 1 ,mem_lpm_xtalcnt + 2 : 006738 lpm_sleep: 0x3cda 006739 set0 mark_ext_patch ,mark 0x3cdb 006740 bpatch patch16_0 ,mem_patch16 0x3cdc 006741 fetch 4 ,mem_sleep_counter_all 0x3cdd 006742 iadd temp ,pdata 0x3cde 006743 store 4 ,mem_sleep_counter_all 0x3cdf 006744 call lpm_save_context 0x3ce0 006745 fetch 5 ,mem_lpm_xtalcnt 0x3ce1 006746 hstore 4 ,core_lpm_reg 0x3ce2 006747 rshift32 pdata ,rega 0x3ce3 006748 until null ,lpo_edge 0x3ce4 006749 deposit clkn 0x3ce5 006750 store 6 ,mem_sleep_clkn 0x3ce6 006751 hjam lpmreg_sel_ctrl2 ,core_lpm_wr 0x3ce7 006752 until null ,lpo_edge 0x3ce8 006753 until null ,lpo_edge 0x3ce9 006754 deposit rega 0x3cea 006755 hstore 1 ,core_lpm_isogate 0x3ceb 006756 hjam lpmreg_sel_ctrl2 ,core_lpm_wr : 006757 lpm_enter_sleep: 0x3cec 006758 until null ,lpo_edge 0x3ced 006759 until null ,lpo_edge 0x3cee 006760 hstoret 4 ,core_lpm_reg 0x3cef 006761 hjam lpmreg_sel_counter ,core_lpm_wr 0x3cf0 006762 until null ,never : 006767 lpm_recover_clk: 0x3cf1 006768 set0 mark_ext_patch ,mark 0x3cf2 006769 bpatch patch16_1 ,mem_patch16 0x3cf3 006770 setarg 0 0x3cf4 006771 copy auxcnt ,null 0x3cf5 006772 branch lpm_recover_timeout ,zero 0x3cf6 006773 hfetch 1 ,core_lpm_xtalcnt 0x3cf7 006774 hfetcht 1 ,core_lpm_buckcnt 0x3cf8 006775 isub temp ,null 0x3cf9 006776 branch lpm_recover_xtal ,positive 0x3cfa 006777 deposit temp : 006778 lpm_recover_xtal: 0x3cfb 006779 isub auxcnt ,pdata 0x3cfc 006780 increase 1 ,pdata : 006781 lpm_recover_timeout: 0x3cfd 006782 increase 8 ,pdata 0x3cfe 006783 until null ,lpo_edge 0x3cff 006784 iadd lpo_time ,pdata 0x3d00 006785 fetcht 4 ,mem_sleep_counter 0x3d01 006786 iadd temp ,pdata 0x3d02 006787 fetcht 3 ,mem_clks_per_lpo 0x3d03 006788 imul32 temp ,pdata 0x3d04 006789 rshift8 pdata ,pdata 0x3d05 006790 rshift4 pdata ,pdata 0x3d06 006791 increase param_lpm_fix ,pdata 0x3d07 006792 arg 3750 ,temp 0x3d08 006793 idiv temp 0x3d09 006794 call wait_div_end 0x3d0a 006795 quotient pdata 0x3d0b 006796 lshift16 pdata ,pdata 0x3d0c 006797 remainder temp 0x3d0d 006798 ior temp ,pdata 0x3d0e 006799 fetcht 6 ,mem_sleep_clkn 0x3d0f 006800 call clk_add 0x3d10 006801 copy temp ,clkn 0x3d11 006802 fetch 6 ,mem_context + coffset_clk_offset 0x3d12 006803 call calc_clke2 0x3d13 006804 deposit clke 0x3d14 006805 store 6 ,mem_pdatatemp 0x3d15 006806 deposit auxcnt 0x3d16 006807 istore 1 ,contw 0x3d17 006808 hfetch 1 ,core_gpio_in1 0x3d18 006809 or_into 0xf0 ,pdata 0x3d19 006810 istore 1 ,contw 0x3d1a 006811 call savelist_2 0x3d1b 006812 rtn : 006814 lpm_dispatch: 0x3d1c 006815 set0 mark_ext_patch ,mark 0x3d1d 006816 bpatch patch16_2 ,mem_patch16 0x3d1e 006817 call lpo_calibration 0x3d1f 006818 fetch 3 ,mem_clks_per_lpo 0x3d20 006819 rtn blank 0x3d21 006820 fetch 1 ,mem_lpm_mode 0x3d22 006821 rtn blank 0x3d23 006822 call lpm_check_wake_lock 0x3d24 006823 nrtn blank : 006824 lpm_dispatch0: 0x3d25 006825 fetch 1 ,mem_context 0x3d26 006826 compare 3 ,pdata ,0x7 0x3d27 006827 nbranch lpm_dispatch_unconn ,true 0x3d28 006828 fetch 2 ,mem_context + coffset_tsniff 0x3d29 006829 rtn blank 0x3d2a 006830 rtn wake 0x3d2b 006831 set0 mark_ext_patch ,mark 0x3d2c 006832 bpatch patch16_3 ,mem_patch16 : 006833 lpm_dispatch1: 0x3d2d 006834 fetcht 1 ,mem_lpm_current_mult 0x3d2e 006835 fetch 2 ,mem_context + coffset_tsniff 0x3d2f 006836 imul32 temp ,pdata 0x3d30 006837 rshift4 temp ,temp 0x3d31 006838 rshift2 temp ,temp 0x3d32 006839 isub temp ,pdata 0x3d33 006840 fetcht 4 ,mem_context + coffset_sniff_anchor 0x3d34 006841 iadd temp ,pdata 0x3d35 006842 fetcht 1 ,mem_lpm_overhead 0x3d36 006843 isub temp ,pdata 0x3d37 006844 lshift16 pdata ,alarm 0x3d38 006845 set0 mark_ext_patch ,mark 0x3d39 006846 bpatch patch16_4 ,mem_patch16 0x3d3a 006847 fetch 2 ,mem_context + coffset_rx_window 0x3d3b 006848 rshift pdata ,pdata 0x3d3c 006849 call clk2bt 0x3d3d 006850 deposit alarm 0x3d3e 006851 call clk_diff 0x3d3f 006852 copy clke ,temp 0x3d40 006853 call clk_diff_rt 0x3d41 006854 rtn user : 006855 lpm_dispatch_sleep: 0x3d42 006856 call clk2lpo : 006857 lpm_dispatch_lpo: 0x3d43 006858 set0 mark_ext_patch ,mark 0x3d44 006859 bpatch patch16_5 ,mem_patch16 0x3d45 006860 fetch 1 ,mem_lpm_xtalcnt 0x3d46 006861 isub temp ,null 0x3d47 006862 branch lpm_clear_counter ,positive 0x3d48 006863 storet 4 ,mem_sleep_counter 0x3d49 006864 call app_will_enter_lpm 0x3d4a 006865 call l2cap_lpm_save_txbuf 0x3d4b 006866 fetcht 4 ,mem_sleep_counter 0x3d4c 006867 branch lpm_sleep : 006869 lpm_dispatch_unconn: 0x3d4d 006870 set0 mark_ext_patch ,mark 0x3d4e 006871 bpatch patch16_6 ,mem_patch16 0x3d4f 006872 fetch 1 ,mem_context 0x3d50 006873 rtnbit1 state_inconn 0x3d51 006874 rtnbit1 state_inpage 0x3d52 006875 fetch 1 ,mem_ssp_enable 0x3d53 006876 branch lpm_unconn_nossp ,blank 0x3d54 006877 fetch 1 ,mem_sp_local_key_invalid 0x3d55 006878 rtn blank : 006879 lpm_unconn_nossp: 0x3d56 006880 fetch 1 ,mem_le_adv_enable 0x3d57 006881 nbranch lpm_unconn_cont ,blank 0x3d58 006882 fetch 1 ,mem_scan_mode 0x3d59 006883 rtn blank : 006884 lpm_unconn_cont: 0x3d5a 006885 fetch 2 ,mem_lpm_interval 0x3d5b 006886 rtn blank : 006887 lpm_sleep_btclk: 0x3d5c 006888 fetcht 1 ,mem_lpm_overhead 0x3d5d 006889 isub temp ,pdata 0x3d5e 006890 arg 7500 ,temp 0x3d5f 006891 imul32 temp ,pdata 0x3d60 006892 branch lpm_dispatch_sleep : 006894 lpm_set_mult: 0x3d61 006895 set0 mark_ext_patch ,mark 0x3d62 006896 bpatch patch16_7 ,mem_patch16 0x3d63 006897 disable wake 0x3d64 006898 fetch 1 ,mem_state 0x3d65 006899 rtnbit0 state_insniff 0x3d66 006900 nbranch lpm_not_match ,match 0x3d67 006901 call lpm_match 0x3d68 006902 fetch 2 ,mem_rx_window_sniff 0x3d69 006903 store 2 ,mem_rx_window 0x3d6a 006904 fetch 1 ,mem_arq 0x3d6b 006905 bbit1 wack ,lpm_mult_short 0x3d6c 006906 bmark0 mark_lpm_mult_enable ,lpm_mult_short 0x3d6d 006907 call l2cap_malloc_is_fifo_empty 0x3d6e 006908 nbranch lpm_mult_short ,blank : 006909 lpm_mult_wait_timeout: 0x3d6f 006910 jam 0 ,mem_lpm_current_mult 0x3d70 006911 bmark0 mark_lpm_mult_enable ,lpm_mult_short 0x3d71 006912 fetch 1 ,mem_lpm_mult_cnt 0x3d72 006913 branch lpm_mult_long ,blank 0x3d73 006914 increase -1 ,pdata 0x3d74 006915 store 1 ,mem_lpm_mult_cnt 0x3d75 006916 rtn : 006918 lpm_match: 0x3d76 006919 jam 0 ,mem_sniff_unint_lost 0x3d77 006920 fetch 3 ,mem_sniff_rcv 0x3d78 006921 increase 1 ,pdata 0x3d79 006922 store 3 ,mem_sniff_rcv 0x3d7a 006923 rtn : 006925 lpm_not_match: 0x3d7b 006926 set0 mark_ext_patch ,mark 0x3d7c 006927 bpatch patch17_0 ,mem_patch17 0x3d7d 006928 fetcht 2 ,mem_rx_window_sniff 0x3d7e 006929 rshift temp ,temp 0x3d7f 006930 fetch 2 ,mem_rx_window 0x3d80 006931 iadd temp ,pdata 0x3d81 006932 store 2 ,mem_rx_window : 006933 lpm_lost: 0x3d82 006934 jam 0 ,mem_lpm_current_mult 0x3d83 006935 fetch 3 ,mem_sniff_lost 0x3d84 006936 increase 1 ,pdata 0x3d85 006937 store 3 ,mem_sniff_lost 0x3d86 006938 fetch 1 ,mem_sniff_unint_lost 0x3d87 006939 increase 1 ,pdata 0x3d88 006940 store 1 ,mem_sniff_unint_lost 0x3d89 006941 rtn : 006943 lpm_mult_short: 0x3d8a 006944 jam 0 ,mem_lpm_current_mult 0x3d8b 006945 fetch 1 ,mem_lpm_mult_timeout 0x3d8c 006946 store 1 ,mem_lpm_mult_cnt 0x3d8d 006947 rtn : 006949 lpm_mult_long: 0x3d8e 006950 fetcht 1 ,mem_lpm_mult 0x3d8f 006951 storet 1 ,mem_lpm_current_mult 0x3d90 006952 rtn : 006954 lpm_cal_xtal_startup: 0x3d91 006955 set0 mark_ext_patch ,mark 0x3d92 006956 bpatch patch17_1 ,mem_patch17 0x3d93 006957 fetch 1 ,mem_lpm_xtalcnt 0x3d94 006958 nrtn blank 0x3d95 006959 hjam clksel_rc ,core_clksel 0x3d96 006960 setarg 0xf0c 0x3d97 006961 call lpm_write_config 0x3d98 006962 setarg 200000 0x3d99 006963 call sleep 0x3d9a 006964 until null ,lpo_edge 0x3d9b 006965 copy lpo_time ,alarm 0x3d9c 006966 call xtal_fast_wake 0x3d9d 006967 hjam clksel_xtal ,core_clksel 0x3d9e 006968 nop 10 0x3d9f 006969 until null ,lpo_edge 0x3da0 006970 deposit lpo_time 0x3da1 006971 isub alarm ,pdata 0x3da2 006972 increase 0x30 ,pdata 0x3da3 006973 arg 0xff ,temp 0x3da4 006974 call ceiling 0x3da5 006975 store 1 ,mem_lpm_xtalcnt 0x3da6 006976 rtn : 006981 lpm_write_config: 0x3da7 006982 arg 0xfff ,contw 0x3da8 006983 iand contw ,contw 0x3da9 006984 fetch 1 ,mem_lpm_config 0x3daa 006985 and_into 0xf0 ,pdata 0x3dab 006986 lshift8 pdata ,pdata 0x3dac 006987 ior contw ,pdata 0x3dad 006988 hstore 2 ,core_lpm_reg 0x3dae 006989 ifetch 2 ,contr 0x3daf 006990 istore 2 ,contw : 006992 lpm_write_ctrl: 0x3db0 006993 setarg lpmreg_sel_ctrl 0x3db1 006994 branch lpm_write : 006996 lpm_write_ctrl2: 0x3db2 006997 setarg lpmreg_sel_ctrl2 : 006998 lpm_write: 0x3db3 006999 until null ,lpo_edge 0x3db4 007000 hstore 1 ,core_lpm_wr 0x3db5 007001 until null ,lpo_edge 0x3db6 007002 until null ,lpo_edge 0x3db7 007003 rtn : 007006 lpm_write_gpio_wakeup: 0x3db8 007007 set0 mark_ext_patch ,mark 0x3db9 007008 bpatch patch17_2 ,mem_patch17 0x3dba 007009 fetch 4 ,mem_gpio_wakeup_low 0x3dbb 007010 hstore 4 ,core_lpm_reg 0x3dbc 007011 setarg lpmreg_sel_gpiolow 0x3dbd 007012 call lpm_write 0x3dbe 007013 fetch 4 ,mem_gpio_wakeup_high 0x3dbf 007014 hstore 4 ,core_lpm_reg 0x3dc0 007015 setarg lpmreg_sel_gpiohigh 0x3dc1 007016 branch lpm_write : 007018 lpm_get_wake_lock: 0x3dc2 007019 fetch 2 ,mem_lpm_wake_lock 0x3dc3 007020 qset1 pdata 0x3dc4 007021 store 2 ,mem_lpm_wake_lock 0x3dc5 007022 rtn : 007024 lpm_put_wake_lock: 0x3dc6 007025 fetch 2 ,mem_lpm_wake_lock 0x3dc7 007026 qset0 pdata 0x3dc8 007027 store 2 ,mem_lpm_wake_lock 0x3dc9 007028 rtn : 007032 lpm_check_wake_lock: 0x3dca 007033 set0 mark_ext_patch ,mark 0x3dcb 007034 bpatch patch17_3 ,mem_patch17 0x3dcc 007035 call app_check_wake_lock 0x3dcd 007036 fetch 2 ,mem_lpm_wake_lock 0x3dce 007037 copy pdata ,rega 0x3dcf 007038 fetch 1 ,mem_state_map 0x3dd0 007039 isolate1 smap_rxlmp ,pdata 0x3dd1 007040 setflag true ,wake_lock_lmp_rx ,rega 0x3dd2 007041 fetch 1 ,mem_lmo_opcode1 0x3dd3 007042 fetcht 1 ,mem_lmo_opcode2 0x3dd4 007043 iadd temp ,pdata 0x3dd5 007044 fetcht 1 ,mem_lmp_to_send 0x3dd6 007045 iadd temp ,pdata 0x3dd7 007046 nsetflag blank ,wake_lock_lmp_tx ,rega 0x3dd8 007047 set0 mark_ext_patch ,mark 0x3dd9 007048 bpatch patch17_4 ,mem_patch17 0x3dda 007049 fetch 2 ,mem_l2cap_rxbuff1_len 0x3ddb 007050 fetcht 2 ,mem_l2cap_rxbuff2_len 0x3ddc 007051 iadd temp ,pdata 0x3ddd 007052 nsetflag blank ,wake_lock_l2cap_rx ,rega 0x3dde 007053 fetch 5 ,mem_ipc_fifo_bt2c51 0x3ddf 007054 nsetflag blank ,wake_lock_ipc_bt2c51 ,rega 0x3de0 007055 fetch 5 ,mem_ipc_fifo_c512bt 0x3de1 007056 nsetflag blank ,wake_lock_ipc_c512bt ,rega 0x3de2 007057 fetch 1 ,mem_hci_cmd 0x3de3 007058 nsetflag blank ,wake_lock_cmd ,rega 0x3de4 007059 fetch 1 ,mem_device_option 0x3de5 007060 compare dvc_op_module ,pdata ,0xff 0x3de6 007061 call lpm_uart_wake_lock ,true 0x3de7 007062 set0 mark_ext_patch ,mark 0x3de8 007063 bpatch patch17_5 ,mem_patch17 0x3de9 007064 fetch 1 ,mem_device_option 0x3dea 007065 bne dvc_op_hci ,lpm_check_wake_lock_nothci 0x3deb 007066 call lpm_uart_wake_lock 0x3dec 007067 fetch 1 ,mem_link_key_exists 0x3ded 007068 setflag blank ,wake_link_key_exists ,rega 0x3dee 007069 fetch 4 ,mem_lpm_delay_after_sniff 0x3def 007070 arg 0x1710 ,temp 0x3df0 007071 iadd temp ,temp 0x3df1 007072 copy clkn_bt ,pdata 0x3df2 007073 isub temp ,null 0x3df3 007074 nsetflag positive ,wake_lock_delay ,rega 0x3df4 007075 branch lpm_check_wake_lock_end : 007077 lpm_uart_wake_lock: 0x3df5 007078 hfetch 2 ,core_uart_rxitems 0x3df6 007079 nsetflag blank ,wake_lock_uart_rx ,rega 0x3df7 007080 hfetch 2 ,core_uart_txitems 0x3df8 007081 nsetflag blank ,wake_lock_uart_tx ,rega 0x3df9 007082 rtn : 007084 lpm_check_wake_lock_nothci: 0x3dfa 007085 setarg -8 0x3dfb 007086 iand rega ,rega : 007087 lpm_check_wake_lock_end: 0x3dfc 007088 copy rega ,pdata 0x3dfd 007089 store 2 ,mem_lpm_wake_lock 0x3dfe 007090 rtn blank 0x3dff 007091 rtn match 0x3e00 007092 enable wake 0x3e01 007093 rtn : 007095 lpm_shut_down: 0x3e02 007096 hfetch 4 ,core_lpm_ctrl 0x3e03 007097 set0 27 ,pdata 0x3e04 007098 hstore 4 ,core_lpm_reg 0x3e05 007099 call lpm_write_ctrl 0x3e06 007100 branch assert : 007102 lpm_enable_exen_output: 0x3e07 007103 hfetch 4 ,core_lpm_xtalcnt 0x3e08 007104 set1 20 ,pdata 0x3e09 007105 hstore 4 ,core_lpm_reg 0x3e0a 007106 branch lpm_write_ctrl2 : 007108 lpm_disable_exen_output: 0x3e0b 007109 hfetch 4 ,core_lpm_xtalcnt 0x3e0c 007110 set0 20 ,pdata 0x3e0d 007111 hstore 4 ,core_lpm_reg 0x3e0e 007112 branch lpm_write_ctrl2 : 007114 lpm_hci_wake_dispatch: 0x3e0f 007115 set0 mark_ext_patch ,mark 0x3e10 007116 bpatch patch17_6 ,mem_patch17 0x3e11 007117 fetch 1 ,mem_device_option 0x3e12 007118 rtnne dvc_op_hci 0x3e13 007119 call gpio_check_uart_state 0x3e14 007120 rtn true 0x3e15 007121 fetch 4 ,mem_hci_wake_clk 0x3e16 007122 nbranch lpm_hci_check_wake_time ,blank 0x3e17 007123 copy clkn_bt ,pdata 0x3e18 007124 store 4 ,mem_hci_wake_clk 0x3e19 007125 branch gpio_pd_uart_tx : 007126 lpm_hci_check_wake_time: 0x3e1a 007127 set0 mark_ext_patch ,mark 0x3e1b 007128 bpatch patch17_7 ,mem_patch17 0x3e1c 007129 copy clkn_bt ,pdata 0x3e1d 007130 fetcht 4 ,mem_hci_wake_clk 0x3e1e 007131 isub temp ,pdata 0x3e1f 007132 arg host_wake_time ,temp 0x3e20 007133 isub temp ,null 0x3e21 007134 nrtn positive 0x3e22 007135 setarg 0 0x3e23 007136 store 4 ,mem_hci_wake_clk 0x3e24 007137 branch hci_exit_lpm : 007139 check_bt_disabled: 0x3e25 007140 fetch 2 ,mem_chip_functions 0x3e26 007141 bbit1 bt_disabled ,assert 0x3e27 007142 rtn : 007143 check_ble_disabled: 0x3e28 007144 fetch 2 ,mem_chip_functions 0x3e29 007145 bbit1 ble_disabled ,assert 0x3e2a 007146 rtn : 007147 check_module_disabled: 0x3e2b 007148 fetch 2 ,mem_chip_functions 0x3e2c 007149 bbit1 module_disable ,assert 0x3e2d 007150 rtn : 007152 test_init: 0x3e2e 007153 setarg test_proc 0x3e2f 007154 store 2 ,mem_cb_bt_process 0x3e30 007155 setarg test_sleep 0x3e31 007156 store 2 ,mem_cb_bb_event_process 0x3e32 007157 setarg test_proc 0x3e33 007158 store 2 ,mem_cb_idle_process 0x3e34 007159 rtn wake 0x3e35 007160 jam ui_led_start ,mem_led_switch 0x3e36 007161 rtn : 007163 test_proc: 0x3e37 007164 fetch 1 ,mem_state 0x3e38 007165 bbit0 state_insniff ,check_test_cond 0x3e39 007166 set1 mark_lpm_mult_enable ,mark 0x3e3a 007167 fetch 6 ,mem_sniff_rcv 0x3e3b 007168 store 6 ,mem_local_name 0x3e3c 007169 branch ui_led_blink_stop : 007172 test_sleep: 0x3e3d 007173 deposit regc 0x3e3e 007174 rtnne bt_evt_button_long_pressed : 007175 test_sleep_loop: 0x3e3f 007176 call ui_button_polling 0x3e40 007177 fetch 1 ,mem_ui_button_last_state 0x3e41 007178 beq 1 ,test_sleep_loop 0x3e42 007179 call ui_led_off 0x3e43 007180 branch lpm_hibernate : 007183 test_tx: 0x3e44 007184 force 2 ,temp 0x3e45 007185 increase -2 ,temp 0x3e46 007186 call set_sync_on 0x3e47 007187 call set_freq_tx 0x3e48 007188 disable enable_white 0x3e49 007189 enable encode_fec0 0x3e4a 007190 set1 txgfsk ,radio_ctrl 0x3e4b 007191 call start_transmitter : 007192 test_tx_loop: 0x3e4c 007193 fetch 1 ,0 0x3e4d 007194 inject mod ,8 0x3e4e 007195 branch test_tx_loop : 007201 app_init: 0x3e4f 007202 set1 mark_ext_patch ,mark 0x3e50 007203 bpatch patch39_5 ,mem_patch39 0x3e51 007204 fetch 1 ,mem_device_option 0x3e52 007205 branch app_init ,blank 0x3e53 007206 beq dvc_op_ukey ,le_ukey_init 0x3e54 007207 beq dvc_op_ir ,le_ir_init 0x3e55 007208 beq dvc_op_dongle ,le_dongle_init 0x3e56 007209 beq dvc_op_kb ,kb_init 0x3e57 007210 beq dvc_op_hci ,hci_init 0x3e58 007211 beq dvc_op_shutter ,shutter_init 0x3e59 007212 beq dvc_op_module ,module_init 0x3e5a 007213 beq dvc_op_ble_kb ,le_kb_init 0x3e5b 007214 beq dvc_op_ble_prcp ,prcp_init 0x3e5c 007215 beq dvc_op_test ,test_init 0x3e5d 007216 bbit1 dvc_op_mouse ,mouse_init 0x3e5e 007217 rtn : 007219 app_lpm_init: 0x3e5f 007220 set1 mark_ext_patch ,mark 0x3e60 007221 bpatch patch39_6 ,mem_patch39 0x3e61 007222 jam 0 ,mem_tester_emulate 0x3e62 007223 jam 0 ,mem_debug_config 0x3e63 007224 jam 0 ,mem_lch_code 0x3e64 007225 setarg 0 0x3e65 007226 store 5 ,mem_sp_state_start 0x3e66 007227 fetch 1 ,mem_device_option 0x3e67 007228 branch app_lpm_init ,blank 0x3e68 007229 beq dvc_op_module ,module_lpm_init 0x3e69 007230 rtn : 007233 app_process_idle: 0x3e6a 007234 call ui_dispatch 0x3e6b 007235 call check_51cmd 0x3e6c 007236 call app_process_bb_event 0x3e6d 007237 fetch 2 ,mem_cb_idle_process 0x3e6e 007238 branch callback_func : 007240 app_process_bt: 0x3e6f 007241 fetch 2 ,mem_cb_bt_process 0x3e70 007242 branch callback_func : 007244 app_process_ble: 0x3e71 007245 fetch 2 ,mem_cb_le_process 0x3e72 007246 branch callback_func : 007248 app_process_bb_event: 0x3e73 007249 set1 mark_ext_patch ,mark 0x3e74 007250 bpatch patch39_7 ,mem_patch39 0x3e75 007252 arg mem_ipc_fifo_bt2c51 ,rega 0x3e76 007253 call fifo_out 0x3e77 007254 rtn blank 0x3e78 007256 copy pdata ,regc 0x3e79 007257 call app_event_normal_process 0x3e7a 007258 branch app_process_bb_event_priority : 007260 app_discard_event: 0x3e7b 007261 arg 0 ,regc 0x3e7c 007262 rtn : 007267 app_event_normal_process: 0x3e7d 007268 beq bt_evt_bb_connected ,app_evt_bt_conn 0x3e7e 007269 beq bt_evt_button_long_pressed ,app_evt_button_long_pressed 0x3e7f 007270 beq bt_evt_setup_complete ,app_evt_setup_complete 0x3e80 007271 beq bt_evt_hid_handshake ,app_evt_hid_handshake 0x3e81 007272 beq bt_evt_hid_connected ,app_bb_event_hid_connected 0x3e82 007273 beq bt_evt_reconn_failed ,app_bb_event_reconn_failed 0x3e83 007274 beq bt_evt_bb_disconnected ,app_bb_event_bb_disconn 0x3e84 007275 beq bt_evt_reconn_page_timeout ,app_bb_event_reconn_failed 0x3e85 007276 beq bt_evt_le_connected ,app_le_event_bb_connected 0x3e86 007277 beq bt_evt_le_disconnected ,app_le_event_bb_disconn 0x3e87 007278 beq bt_evt_reconn_started ,app_event_reconn_start 0x3e88 007279 beq bt_evt_enter_sniff ,app_event_enter_sniff 0x3e89 007280 beq bt_evt_exit_sniff ,app_event_exit_sniff 0x3e8a 007282 beq bt_evt_ml2cap_conn_refused ,app_event_ml2cap_conn_refused 0x3e8b 007283 beq bt_evt_linkkey_generate ,app_event_linkkey_generate 0x3e8c 007284 beq bt_evt_switch_fail_master ,app_event_switch_fail_master 0x3e8d 007285 beq bt_evt_switch_success_master ,app_event_switch_success 0x3e8e 007287 and pdata ,0x0f ,temp 0x3e8f 007288 and_into bt_evt_timer_mask ,pdata 0x3e90 007289 beq bt_evt_timer_init ,app_evt_timer 0x3e91 007290 rtn : 007292 app_evt_bt_conn: 0x3e92 007293 fetch 2 ,mem_ui_state_map 0x3e93 007294 set1 ui_state_bt_connected ,pdata 0x3e94 007295 store 2 ,mem_ui_state_map 0x3e95 007296 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3e96 007297 set0 app_disc_by_button ,pdata 0x3e97 007298 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3e98 007299 rtn : 007300 app_event_switch_success: 0x3e99 007301 jam 0 ,mem_switch_fail_master_count 0x3e9a 007302 rtn : 007304 app_event_switch_fail_master: 0x3e9b 007305 fetch 1 ,mem_switch_fail_master_count 0x3e9c 007306 increase 1 ,pdata 0x3e9d 007307 store 1 ,mem_switch_fail_master_count 0x3e9e 007308 sub pdata ,1 ,null 0x3e9f 007309 branch app_bt_role_switch ,positive 0x3ea0 007310 jam 0 ,mem_switch_fail_master_count 0x3ea1 007311 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3ea2 007312 set1 app_disc_switch_fail ,pdata 0x3ea3 007313 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3ea4 007314 branch app_bt_disconnect : 007316 app_process_bb_event_priority: 0x3ea5 007317 fetch 2 ,mem_cb_bb_event_process 0x3ea6 007318 branch callback_func : 007320 app_check_wake_lock: 0x3ea7 007321 fetch 2 ,mem_cb_check_wakelock 0x3ea8 007322 branch callback_func : 007324 app_will_enter_lpm: 0x3ea9 007325 fetch 2 ,mem_cb_before_lpm 0x3eaa 007326 branch callback_func : 007328 app_event_linkkey_generate: 0x3eab 007329 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3eac 007330 set1 app_disc_after_pairing ,pdata 0x3ead 007331 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3eae 007332 branch app_bt_store_reconn_info : 007334 app_event_reconn_start: 0x3eaf 007335 fetch 2 ,mem_ui_state_map 0x3eb0 007336 set1 ui_state_bt_reconnect ,pdata 0x3eb1 007337 store 2 ,mem_ui_state_map 0x3eb2 007338 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3eb3 007339 set1 app_disc_after_reconn ,pdata 0x3eb4 007340 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3eb5 007341 rtn : 007343 app_evt_setup_complete: 0x3eb6 007344 fetch 2 ,mem_ui_state_map 0x3eb7 007345 set1 ui_state_bt_setup_complete ,pdata 0x3eb8 007346 store 2 ,mem_ui_state_map 0x3eb9 007347 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3eba 007348 set1 app_disc_after_setup_done ,pdata 0x3ebb 007349 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3ebc 007350 rtn : 007352 app_evt_hid_handshake: 0x3ebd 007353 fetch 2 ,mem_ui_state_map 0x3ebe 007354 set1 ui_state_bt_hid_handshake ,pdata 0x3ebf 007355 store 2 ,mem_ui_state_map 0x3ec0 007356 rtn : 007358 app_event_enter_sniff: 0x3ec1 007359 fetch 2 ,mem_ui_state_map 0x3ec2 007360 set1 ui_state_bt_sniff ,pdata 0x3ec3 007361 store 2 ,mem_ui_state_map 0x3ec4 007362 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3ec5 007363 set1 app_disc_after_sniff ,pdata 0x3ec6 007364 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3ec7 007365 rtn : 007367 app_event_exit_sniff: 0x3ec8 007368 fetch 2 ,mem_ui_state_map 0x3ec9 007369 set0 ui_state_bt_sniff ,pdata 0x3eca 007370 store 2 ,mem_ui_state_map 0x3ecb 007371 rtn : 007373 app_le_event_bb_connected: 0x3ecc 007374 fetch 2 ,mem_ui_state_map 0x3ecd 007375 set1 ui_state_ble_connected ,pdata 0x3ece 007376 store 2 ,mem_ui_state_map 0x3ecf 007377 rtn : 007379 app_le_event_bb_disconn: 0x3ed0 007380 fetch 2 ,mem_ui_state_map 0x3ed1 007381 set0 ui_state_ble_connected ,pdata 0x3ed2 007382 store 2 ,mem_ui_state_map 0x3ed3 007383 jam 0 ,mem_le_switch_send_data 0x3ed4 007384 branch app_lpm_mult_disable : 007386 app_bb_event_hid_connected: 0x3ed5 007387 fetch 2 ,mem_ui_state_map 0x3ed6 007388 set1 ui_state_bt_hid_conn ,pdata 0x3ed7 007389 store 2 ,mem_ui_state_map 0x3ed8 007390 rtn : 007392 app_evt_button_long_pressed: 0x3ed9 007393 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3eda 007394 set1 app_disc_by_button ,pdata 0x3edb 007395 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3edc 007396 rtn : 007398 app_event_ml2cap_conn_refused: 0x3edd 007399 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3ede 007400 set1 app_disc_l2cap_refused ,pdata 0x3edf 007401 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3ee0 007402 branch app_bt_disconnect : 007405 app_evt_timer: 0x3ee1 007406 set1 mark_ext_patch ,mark 0x3ee2 007407 bpatch patch3a_0 ,mem_patch3a 0x3ee3 007408 storet 1 ,mem_app_evt_timer_count : 007409 app_evt_100ms_loop: 0x3ee4 007410 fetch 1 ,mem_app_evt_timer_count 0x3ee5 007411 rtn blank 0x3ee6 007412 increase -1 ,pdata 0x3ee7 007413 store 1 ,mem_app_evt_timer_count 0x3ee8 007414 call ui_button_polling 0x3ee9 007415 call app_lpm_wake_auto_lock_timer 0x3eea 007416 call app_unsniff_delay_timer 0x3eeb 007417 call app_discovery_timer 0x3eec 007418 branch app_evt_100ms_loop : 007420 app_unsniff_delay_timer: 0x3eed 007421 fetch 1 ,mem_unsniff2sniff_timer_count 0x3eee 007422 rtn blank 0x3eef 007423 increase -1 ,pdata 0x3ef0 007424 store 1 ,mem_unsniff2sniff_timer_count 0x3ef1 007425 nrtn blank 0x3ef2 007426 call context_check_idle 0x3ef3 007427 branch app_bt_enter_sniff ,zero 0x3ef4 007428 rtn : 007429 app_discovery_timer: 0x3ef5 007430 fetch 2 ,mem_discovery_timeout_timer_count 0x3ef6 007431 rtn blank 0x3ef7 007432 increase -1 ,pdata 0x3ef8 007433 store 2 ,mem_discovery_timeout_timer_count 0x3ef9 007434 nrtn blank 0x3efa 007435 call app_bt_stop_discovery 0x3efb 007436 call app_led_off 0x3efc 007437 fetch 2 ,mem_cb_discovry_timeout 0x3efd 007438 branch callback_func : 007440 app_bb_event_reconn_failed: 0x3efe 007441 call app_disconn_reason_flag_clear : 007442 app_clear_reconnect_flag: 0x3eff 007443 fetch 2 ,mem_ui_state_map 0x3f00 007444 set0 ui_state_bt_reconnect ,pdata 0x3f01 007445 store 2 ,mem_ui_state_map 0x3f02 007446 rtn : 007448 app_bb_event_bb_disconn: 0x3f03 007449 jam 0 ,mem_unsniff2sniff_timer_count 0x3f04 007450 fetch 2 ,mem_ui_state_map 0x3f05 007451 bbit1 ui_state_bt_reconnect ,app_bb_event_bb_reconn_disconn 0x3f06 007452 isolate0 ui_state_bt_setup_complete ,pdata 0x3f07 007453 call app_discard_event ,true : 007454 app_bb_event_bb_reconn_disconn: 0x3f08 007455 fetch 2 ,mem_ui_state_map 0x3f09 007456 set0 ui_state_bt_connected ,pdata 0x3f0a 007457 set0 ui_state_bt_setup_complete ,pdata 0x3f0b 007458 set0 ui_state_bt_hid_conn ,pdata 0x3f0c 007459 set0 ui_state_bt_hid_handshake ,pdata 0x3f0d 007460 set0 ui_state_bt_spp_conn ,pdata 0x3f0e 007461 store 2 ,mem_ui_state_map 0x3f0f 007462 branch app_lpm_mult_disable : 007464 app_bb_hibernate: 0x3f10 007465 call app_disconn_reason_clear 0x3f11 007466 branch app_enter_hibernate : 007469 app_event_do_nothing: : 007470 app_disconn_reason_clear: 0x3f12 007471 setarg 0 0x3f13 007472 store app_disc_rsn_size ,mem_app_disconn_reason 0x3f14 007473 rtn : 007474 app_disconn_reason_flag_clear: 0x3f15 007475 setarg 0 0x3f16 007476 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3f17 007477 rtn : 007480 app_disconn_reason_collect_bt: 0x3f18 007481 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3f19 007482 store app_disc_rsn_size ,mem_app_disconn_reason 0x3f1a 007483 setarg 0 0x3f1b 007484 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3f1c 007485 rtn : 007487 app_disconn_reason_collect_ble: 0x3f1d 007488 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3f1e 007489 set1 app_disc_ble ,pdata 0x3f1f 007490 store app_disc_rsn_size ,mem_app_disconn_reason 0x3f20 007491 setarg 0 0x3f21 007492 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x3f22 007493 rtn : 007499 app_check_reconn_target: 0x3f23 007500 call eeprom_load_reconn_info 0x3f24 007501 fetch 6 ,mem_hci_plap 0x3f25 007502 rtn : 007504 app_le_check_reconn_target: 0x3f26 007505 fetch 1 ,mem_ltk_exists 0x3f27 007506 branch app_le_check_reconn_target_none ,blank 0x3f28 007507 call app_led_on 0x3f29 007508 branch app_ble_start_direct_adv : 007509 app_le_check_reconn_target_none: 0x3f2a 007510 call app_led_start_blink 0x3f2b 007511 branch app_ble_start_adv : 007513 app_check_plap: 0x3f2c 007514 set1 mark_ext_patch ,mark 0x3f2d 007515 bpatch patch3a_1 ,mem_patch3a 0x3f2e 007516 arg mem_check_plap_temp ,regb 0x3f2f 007517 arg app_check_one_plap ,regc 0x3f30 007518 branch context_search : 007520 app_check_one_plap: 0x3f31 007521 arg 0 ,temp 0x3f32 007522 bbit0 state_inconn ,app_check_one_plap_next 0x3f33 007523 add rega ,coffset_plap ,contr 0x3f34 007524 ifetcht 6 ,contr : 007525 app_check_one_plap_next: 0x3f35 007526 copy temp ,pdata 0x3f36 007527 ncall app_check_one_plap_device_exist ,blank 0x3f37 007528 istoret 6 ,regb 0x3f38 007529 increase 6 ,regb 0x3f39 007530 branch context_search_next : 007531 app_check_one_plap_device_exist: 0x3f3a 007532 fetch 1 ,mem_device_nums 0x3f3b 007533 increase 1 ,pdata 0x3f3c 007534 store 1 ,mem_device_nums 0x3f3d 007535 rtn : 007537 app_check_conn_device_nums_addr: 0x3f3e 007538 jam 0 ,mem_device_nums 0x3f3f 007539 branch app_check_plap : 007541 app_check_sniff: 0x3f40 007542 fetch 1 ,mem_ui_state_map 0x3f41 007543 isolate1 ui_state_bt_sniff ,pdata 0x3f42 007544 rtn : 007549 app_clearflag_store: 0x3f43 007550 setarg 0 0x3f44 007551 branch app_flag_store : 007552 app_initflag_store: 0x3f45 007553 setarg eeprom_init_flag : 007554 app_flag_store: 0x3f46 007555 store 2 ,mem_timeup 0x3f47 007556 set1 mark_ext_patch ,mark 0x3f48 007557 bpatch patch3a_2 ,mem_patch3a 0x3f49 007558 arg 2 ,temp 0x3f4a 007559 arg mem_timeup ,rega 0x3f4b 007560 arg eeprom_module_init_flag ,regb 0x3f4c 007561 branch iicd_write_eep_data : 007564 app_initflag_check: 0x3f4d 007565 set1 mark_ext_patch ,mark 0x3f4e 007566 bpatch patch3a_3 ,mem_patch3a 0x3f4f 007567 arg 2 ,temp 0x3f50 007568 arg mem_pdatatemp ,rega 0x3f51 007569 arg eeprom_module_init_flag ,regb 0x3f52 007570 call iicd_read_eep_data 0x3f53 007571 fetch 2 ,mem_pdatatemp 0x3f54 007572 arg eeprom_init_flag ,temp 0x3f55 007573 isub temp ,null 0x3f56 007574 rtn : 007577 app_start_auto_sniff: 0x3f57 007578 fetch 1 ,mem_unsniff2sniff_timer 0x3f58 007579 store 1 ,mem_unsniff2sniff_timer_count 0x3f59 007580 rtn : 007582 app_get_lpm_wake_lock: 0x3f5a 007583 arg wake_lock_app ,queue 0x3f5b 007584 branch lpm_get_wake_lock : 007586 app_put_lpm_wake_lock: 0x3f5c 007587 arg wake_lock_app ,queue 0x3f5d 007588 branch lpm_put_wake_lock : 007590 app_lpm_wake_auto_lock: 0x3f5e 007591 jam lpm_wake_up_delay_timer ,mem_wake_up_delay_timer 0x3f5f 007592 branch app_get_lpm_wake_lock : 007593 app_lpm_wake_auto_lock_timer: 0x3f60 007594 fetch 1 ,mem_wake_up_delay_timer 0x3f61 007595 rtn blank 0x3f62 007596 increase -1 ,pdata 0x3f63 007597 store 1 ,mem_wake_up_delay_timer 0x3f64 007598 nrtn blank 0x3f65 007599 branch app_put_lpm_wake_lock : 007601 app_l2cap_flow_control_enable: 0x3f66 007602 jam l2cap_flow_ctrl_enable ,mem_l2cap_flow_ctrl_flag 0x3f67 007603 rtn : 007605 app_l2cap_flow_control_disable: 0x3f68 007606 jam l2cap_flow_ctrl_disable ,mem_l2cap_flow_ctrl_flag 0x3f69 007607 rtn : 007609 app_bt_set_pincode: 0x3f6a 007610 jam bt_cmd_set_pin_code ,mem_fifo_temp 0x3f6b 007611 branch ui_ipc_send_cmd : 007613 app_bt_role_switch: 0x3f6c 007614 jam bt_cmd_role_switch ,mem_fifo_temp 0x3f6d 007615 branch ui_ipc_send_cmd : 007617 app_bt_start_reconnect: 0x3f6e 007618 set1 mark_ext_patch ,mark 0x3f6f 007619 bpatch patch3a_4 ,mem_patch3a 0x3f70 007620 fetch 1 ,mem_app_connection_options 0x3f71 007621 store 1 ,mem_connection_options 0x3f72 007622 jam app_flag_reconnect ,mem_reconnect_flag 0x3f73 007623 jam bt_cmd_reconnect ,mem_fifo_temp 0x3f74 007624 branch ui_ipc_send_cmd : 007626 app_bt_reconnect_cancel: 0x3f75 007627 jam bt_cmd_bb_reconn_cancel ,mem_fifo_temp 0x3f76 007628 branch ui_ipc_send_cmd : 007630 app_bt_disconnect: 0x3f77 007631 jam bt_cmd_disconnect ,mem_fifo_temp 0x3f78 007632 branch ui_ipc_send_cmd : 007634 app_bt_start_discovery_short: 0x3f79 007635 fetch 2 ,mem_discovery_timeout 0x3f7a 007636 store 2 ,mem_discovery_timeout_timer_count : 007637 app_bt_start_discovery_led_blink: 0x3f7b 007638 call app_led_start_blink : 007639 app_bt_start_discovery: 0x3f7c 007640 jam bt_cmd_start_discovery ,mem_fifo_temp 0x3f7d 007641 branch ui_ipc_send_cmd : 007643 app_bt_stop_discovery: 0x3f7e 007644 setarg 0 0x3f7f 007645 store 2 ,mem_discovery_timeout_timer_count 0x3f80 007646 jam bt_cmd_stop_discovery ,mem_fifo_temp 0x3f81 007647 branch ui_ipc_send_cmd : 007649 app_ble_start_direct_adv: 0x3f82 007650 jam bt_cmd_start_direct_adv ,mem_fifo_temp 0x3f83 007651 branch ui_ipc_send_cmd : 007653 app_ble_stop_direct_adv: 0x3f84 007654 jam bt_cmd_stop_direct_adv ,mem_fifo_temp 0x3f85 007655 branch ui_ipc_send_cmd : 007657 app_ble_stop_adv: 0x3f86 007658 jam bt_cmd_stop_adv ,mem_fifo_temp 0x3f87 007659 branch ui_ipc_send_cmd : 007661 app_ble_start_adv: 0x3f88 007662 jam bt_cmd_start_adv ,mem_fifo_temp 0x3f89 007663 branch ui_ipc_send_cmd : 007665 app_ble_start_scan: 0x3f8a 007666 jam bt_cmd_le_start_scan ,mem_fifo_temp 0x3f8b 007667 branch ui_ipc_send_cmd : 007669 app_ble_stop_scan: 0x3f8c 007670 jam bt_cmd_le_stop_scan ,mem_fifo_temp 0x3f8d 007671 branch ui_ipc_send_cmd : 007673 app_ble_start_conn: 0x3f8e 007674 jam bt_cmd_le_start_conn ,mem_fifo_temp 0x3f8f 007675 branch ui_ipc_send_cmd : 007677 app_ble_disconnect: 0x3f90 007678 jam bt_cmd_le_disconnect ,mem_fifo_temp 0x3f91 007679 branch ui_ipc_send_cmd : 007681 app_ble_start_write: 0x3f92 007682 jam bt_cmd_le_start_write ,mem_fifo_temp 0x3f93 007683 branch ui_ipc_send_cmd : 007685 app_led_start_blink: 0x3f94 007686 jam bt_cmd_led_blink ,mem_fifo_temp 0x3f95 007687 branch ui_ipc_send_cmd : 007689 app_led_on: 0x3f96 007690 jam bt_cmd_led_on ,mem_fifo_temp 0x3f97 007691 branch ui_ipc_send_cmd : 007693 app_led_stop_blink: : 007694 app_led_off: 0x3f98 007695 jam bt_cmd_led_off ,mem_fifo_temp 0x3f99 007696 branch ui_ipc_send_cmd : 007698 app_enter_hibernate: 0x3f9a 007699 jam bt_cmd_enter_hibernate ,mem_fifo_temp 0x3f9b 007700 branch ui_ipc_send_cmd : 007702 app_bt_sniff_exit: 0x3f9c 007703 jam bt_cmd_exit_sniff ,mem_fifo_temp 0x3f9d 007704 branch ui_ipc_send_cmd : 007706 app_bt_enter_sniff: 0x3f9e 007707 jam bt_cmd_enter_sniff ,mem_fifo_temp 0x3f9f 007708 branch ui_ipc_send_cmd : 007710 app_ble_store_reconn_info: 0x3fa0 007711 jam bt_cmd_store_reconn_info_le ,mem_fifo_temp 0x3fa1 007712 branch ui_ipc_send_cmd : 007714 app_bt_store_reconn_info: 0x3fa2 007715 jam bt_cmd_store_reconn_info_bt ,mem_fifo_temp 0x3fa3 007716 branch ui_ipc_send_cmd : 007718 app_lpm_mult_enable: 0x3fa4 007719 set1 mark_lpm_mult_enable ,mark 0x3fa5 007720 rtn : 007722 app_lpm_mult_disable: 0x3fa6 007723 set0 mark_lpm_mult_enable ,mark 0x3fa7 007724 rtn : 007728 at_restore_param: 0x3fa8 007729 set1 mark_ext_patch ,mark 0x3fa9 007730 bpatch patch32_0 ,mem_patch32 0x3faa 007731 arg 32 ,temp 0x3fab 007732 arg mem_le_name_len ,rega 0x3fac 007733 arg eeprom_module_ble_name_length ,regb 0x3fad 007734 call iicd_read_eep_data 0x3fae 007737 arg 32 ,temp 0x3faf 007738 arg mem_local_name_length ,rega 0x3fb0 007739 arg eeprom_module_bt_name_length ,regb 0x3fb1 007740 call iicd_read_eep_data 0x3fb2 007742 arg 6 ,temp 0x3fb3 007743 arg mem_lap ,rega 0x3fb4 007744 arg eeprom_module_bt_adss ,regb 0x3fb5 007745 call iicd_read_eep_data 0x3fb6 007747 arg 6 ,temp 0x3fb7 007748 arg mem_le_lap ,rega 0x3fb8 007749 arg eeprom_module_le_adss ,regb 0x3fb9 007750 call iicd_read_eep_data 0x3fba 007751 call le_modified_name 0x3fbb 007753 arg 2 ,temp 0x3fbc 007754 arg mem_baud ,rega 0x3fbd 007755 arg eeprom_module_trans_baud ,regb 0x3fbe 007756 call iicd_read_eep_data 0x3fbf 007757 call uart_set_baud_by_mem 0x3fc0 007759 branch at_restore_pin_code : 007761 at_restore_pin_code: 0x3fc1 007762 arg 14 ,temp 0x3fc2 007763 arg mem_pin_length ,rega 0x3fc3 007764 arg eeprom_module_pincode_length ,regb 0x3fc4 007765 branch iicd_read_eep_data : 007767 init_module_environment: 0x3fc5 007768 set1 mark_ext_patch ,mark 0x3fc6 007769 bpatch patch32_1 ,mem_patch32 0x3fc7 007770 call app_initflag_check 0x3fc8 007771 branch at_restore_param ,zero : 007772 init_module_eeprom: 0x3fc9 007773 call at_store_bt_name 0x3fca 007774 call at_store_le_name 0x3fcb 007775 call le_modified_name 0x3fcc 007776 call at_store_le_adss 0x3fcd 007777 call at_store_bt_adss 0x3fce 007778 call pincode_reinit 0x3fcf 007779 call at_store_bt_pincode 0x3fd0 007780 call at_store_throughput_uart_baud115200 0x3fd1 007781 branch app_initflag_store : 007783 at_store_bt_name: 0x3fd2 007784 fetcht 1 ,mem_local_name_length 0x3fd3 007785 increase 1 ,temp 0x3fd4 007786 arg mem_local_name_length ,rega 0x3fd5 007787 arg eeprom_module_bt_name_length ,regb 0x3fd6 007788 branch iicd_write_eep_data : 007790 at_store_le_name: 0x3fd7 007791 fetcht 1 ,mem_le_name_len 0x3fd8 007792 increase 1 ,temp 0x3fd9 007793 arg mem_le_name_len ,rega 0x3fda 007794 arg eeprom_module_ble_name_length ,regb 0x3fdb 007795 branch iicd_write_eep_data : 007797 at_store_le_adss: 0x3fdc 007798 arg 6 ,temp 0x3fdd 007799 arg mem_le_lap ,rega 0x3fde 007800 arg eeprom_module_le_adss ,regb 0x3fdf 007801 branch iicd_write_eep_data : 007803 at_store_bt_adss: 0x3fe0 007804 arg 6 ,temp 0x3fe1 007805 arg mem_lap ,rega 0x3fe2 007806 arg eeprom_module_bt_adss ,regb 0x3fe3 007807 branch iicd_write_eep_data : 007809 at_store_bt_pincode: 0x3fe4 007810 fetcht 1 ,mem_pin_length 0x3fe5 007811 increase 1 ,temp 0x3fe6 007812 arg mem_pin_length ,rega 0x3fe7 007813 arg eeprom_module_pincode_length ,regb 0x3fe8 007814 branch iicd_write_eep_data : 007816 at_store_throughput_uart_baud115200: 0x3fe9 007817 setarg at_baud_115200 0x3fea 007818 store 2 ,mem_timeup : 007819 at_store_throughput_uart_baud: 0x3feb 007820 arg 2 ,temp 0x3fec 007821 arg mem_timeup ,rega 0x3fed 007822 arg eeprom_module_trans_baud ,regb 0x3fee 007823 branch iicd_write_eep_data : 007826 at_process: 0x3fef 007827 set1 mark_ext_patch ,mark 0x3ff0 007828 bpatch patch32_2 ,mem_patch32 0x3ff1 007829 fetch 2 ,mem_current_packet_length 0x3ff2 007830 arg 300 ,temp 0x3ff3 007831 isub temp ,null 0x3ff4 007832 branch at_error_rev_end ,positive 0x3ff5 007833 call check_module_disabled 0x3ff6 007834 call get_uart_rrptr 0x3ff7 007835 copy contru ,rega 0x3ff8 007836 fetch 2 ,mem_current_packet_length 0x3ff9 007837 increase -2 ,pdata 0x3ffa 007838 iadd contru ,contru 0x3ffb 007839 ifetch 2 ,contru 0x3ffc 007840 arg at_cmd_end ,temp 0x3ffd 007841 isub temp ,null 0x3ffe 007842 nrtn zero 0x3fff 007843 copy rega ,contru 0x4000 007844 arg mem_prarm_atp ,regb 0x4001 007845 arg 3 ,loopcnt 0x4002 007846 call string_compare_uart_follow 0x4003 007847 nbranch at_error_rev_end ,true 0x4004 007848 branch at_dispatch : 007850 at_dispatch: 0x4005 007851 set1 mark_ext_patch ,mark 0x4006 007852 bpatch patch32_3 ,mem_patch32 0x4007 007854 copy contru ,rega 0x4008 007855 arg mem_prarm_name ,regb 0x4009 007856 force 4 ,loopcnt 0x400a 007857 call string_compare_uart_follow 0x400b 007858 branch at_rev_name ,true 0x400c 007860 arg mem_prarm_blename ,regb 0x400d 007861 force 7 ,loopcnt 0x400e 007862 call string_compare_uart_follow 0x400f 007863 branch at_rev_le_name ,true 0x4010 007865 arg mem_prarm_adss ,regb 0x4011 007866 force 4 ,loopcnt 0x4012 007867 call string_compare_uart_follow 0x4013 007868 branch at_rev_adss ,true 0x4014 007870 arg mem_prarm_bleadss ,regb 0x4015 007871 force 7 ,loopcnt 0x4016 007872 call string_compare_uart_follow 0x4017 007873 branch at_rev_leadss ,true 0x4018 007875 arg mem_prarm_vers ,regb 0x4019 007876 force 4 ,loopcnt 0x401a 007877 call string_compare_uart_follow 0x401b 007878 branch at_rev_vers ,true 0x401c 007880 arg mem_prarm_uart ,regb 0x401d 007881 force 4 ,loopcnt 0x401e 007882 call string_compare_uart_follow 0x401f 007883 branch at_rev_uart ,true 0x4020 007885 arg mem_prarm_pswd ,regb 0x4021 007886 force 4 ,loopcnt 0x4022 007887 call string_compare_uart_follow 0x4023 007888 branch at_rev_pswd ,true 0x4024 007890 arg mem_prarm_class ,regb 0x4025 007891 force 5 ,loopcnt 0x4026 007892 call string_compare_uart_follow 0x4027 007893 branch at_rev_class ,true 0x4028 007895 arg mem_prarm_list ,regb 0x4029 007896 force 4 ,loopcnt 0x402a 007897 call string_compare_uart_follow 0x402b 007898 branch at_rev_list ,true 0x402c 007900 arg mem_prarm_role ,regb 0x402d 007901 force 4 ,loopcnt 0x402e 007902 call string_compare_uart_follow 0x402f 007903 branch at_rev_role ,true 0x4030 007905 arg mem_prarm_sniff ,regb 0x4031 007906 force 5 ,loopcnt 0x4032 007907 call string_compare_uart_follow 0x4033 007908 branch at_rev_sniff ,true 0x4034 007910 arg mem_prarm_ldev ,regb 0x4035 007911 force 4 ,loopcnt 0x4036 007912 call string_compare_uart_follow 0x4037 007913 branch at_rev_ldev ,true 0x4038 007915 arg mem_prarm_rssi ,regb 0x4039 007916 force 4 ,loopcnt 0x403a 007917 call string_compare_uart_follow 0x403b 007918 branch at_rev_rssi ,true 0x403c 007920 arg mem_prarm_cdev ,regb 0x403d 007921 force 4 ,loopcnt 0x403e 007922 call string_compare_uart_follow 0x403f 007923 branch at_rev_cdev ,true 0x4040 007925 arg mem_prarm_inqr ,regb 0x4041 007926 force 4 ,loopcnt 0x4042 007927 call string_compare_uart_follow 0x4043 007928 branch at_rev_inqr ,true 0x4044 007930 arg mem_prarm_bleinqr ,regb 0x4045 007931 force 7 ,loopcnt 0x4046 007932 call string_compare_uart_follow 0x4047 007933 branch at_rev_leinqr ,true 0x4048 007935 arg mem_prarm_cmode ,regb 0x4049 007936 force 5 ,loopcnt 0x404a 007937 call string_compare_uart_follow 0x404b 007938 branch at_rev_cmode ,true 0x404c 007940 arg mem_prarm_mode ,regb 0x404d 007941 force 4 ,loopcnt 0x404e 007942 call string_compare_uart_follow 0x404f 007943 branch at_rev_mode ,true 0x4050 007945 arg mem_prarm_dmstate ,regb 0x4051 007946 force 7 ,loopcnt 0x4052 007947 call string_compare_uart_follow 0x4053 007948 branch at_rev_dmstate ,true 0x4054 007950 arg mem_prarm_reconn ,regb 0x4055 007951 force 6 ,loopcnt 0x4056 007952 call string_compare_uart_follow 0x4057 007953 branch at_rev_reconn ,true 0x4058 007955 arg mem_prarm_discov ,regb 0x4059 007956 force 6 ,loopcnt 0x405a 007957 call string_compare_uart_follow 0x405b 007958 branch at_rev_discov ,true 0x405c 007960 arg mem_prarm_dis ,regb 0x405d 007961 force 3 ,loopcnt 0x405e 007962 call string_compare_uart_follow 0x405f 007963 branch at_rev_dis ,true 0x4060 007965 arg mem_prarm_stsn ,regb 0x4061 007966 force 4 ,loopcnt 0x4062 007967 call string_compare_uart_follow 0x4063 007968 branch at_rev_stsn ,true 0x4064 007970 arg mem_prarm_clrflg ,regb 0x4065 007971 force 6 ,loopcnt 0x4066 007972 call string_compare_uart_follow 0x4067 007973 branch at_rev_clrflg ,true 0x4068 007975 arg mem_prarm_ota ,regb 0x4069 007976 force 3 ,loopcnt 0x406a 007977 call string_compare_uart_follow 0x406b 007978 branch at_rev_ota ,true 0x406c 007979 branch at_error_rev_end : 007982 at_rev_name: 0x406d 007983 ifetch 1 ,contru 0x406e 007984 beq at_ques ,at_rev_name_inquiry 0x406f 007985 beq at_equ ,at_rev_name_set 0x4070 007986 branch at_error_rev_end : 007987 at_rev_name_inquiry: 0x4071 007988 call get_uart_twptr 0x4072 007989 call at_group_name_inquiry 0x4073 007990 branch at_nomal_rev_end : 007993 at_rev_le_name: 0x4074 007994 ifetch 1 ,contru 0x4075 007995 beq at_ques ,at_rev_le_name_inquiry 0x4076 007996 beq at_equ ,at_rev_le_name_set 0x4077 007997 branch at_error_rev_end : 007998 at_rev_le_name_inquiry: 0x4078 007999 call get_uart_twptr 0x4079 008000 call at_group_le_name_inquiry 0x407a 008001 branch at_nomal_rev_end : 008003 at_rev_adss: 0x407b 008004 ifetch 1 ,contru 0x407c 008005 beq at_ques ,at_rev_adss_inquiry 0x407d 008006 beq at_equ ,at_rev_adss_set 0x407e 008007 branch at_error_rev_end : 008008 at_rev_adss_inquiry: 0x407f 008009 call at_group_adss_inquiry 0x4080 008010 branch at_nomal_rev_end : 008012 at_rev_leadss: 0x4081 008013 ifetch 1 ,contru 0x4082 008014 beq at_ques ,at_rev_leadss_inquiry 0x4083 008015 beq at_equ ,at_rev_leadss_set 0x4084 008016 branch at_error_rev_end : 008017 at_rev_leadss_inquiry: 0x4085 008019 call at_group_leadss_inquiry 0x4086 008020 branch at_nomal_rev_end : 008022 at_rev_vers: 0x4087 008023 ifetch 1 ,contru 0x4088 008024 beq at_ques ,at_rev_vers_inquiry 0x4089 008025 branch at_error_rev_end : 008026 at_rev_vers_inquiry: 0x408a 008027 call at_group_version_inquiry 0x408b 008028 branch at_nomal_rev_end : 008031 at_rev_uart: 0x408c 008032 ifetch 1 ,contru 0x408d 008033 beq at_equ ,at_rev_uart_set 0x408e 008034 branch at_error_rev_end : 008037 at_rev_pswd: 0x408f 008038 ifetch 1 ,contru 0x4090 008039 beq at_ques ,at_rev_pswd_inquiry 0x4091 008040 beq at_equ ,at_rev_pswd_set 0x4092 008041 branch at_error_rev_end : 008042 at_rev_pswd_inquiry: 0x4093 008043 call at_group_pswd_inquiry 0x4094 008044 branch at_nomal_rev_end : 008046 at_rev_class: 0x4095 008047 ifetch 1 ,contru 0x4096 008048 beq at_ques ,at_rev_class_inquiry 0x4097 008049 beq at_equ ,at_rev_class_set 0x4098 008050 branch at_error_rev_end : 008051 at_rev_class_inquiry: 0x4099 008052 call at_group_class_inquiry 0x409a 008053 branch at_nomal_rev_end : 008055 at_rev_list: 0x409b 008056 ifetch 1 ,contru 0x409c 008057 beq at_ques ,at_rev_list_inquiry 0x409d 008058 beq at_equ ,at_rev_list_set 0x409e 008059 branch at_error_rev_end : 008060 at_rev_list_inquiry: 0x409f 008061 call at_group_list_inquiry 0x40a0 008062 branch at_nomal_rev_end : 008064 at_rev_role: 0x40a1 008065 ifetch 1 ,contru 0x40a2 008066 beq at_ques ,at_rev_role_inquiry 0x40a3 008067 beq at_equ ,at_rev_role_set 0x40a4 008068 branch at_error_rev_end : 008071 at_rev_sniff: 0x40a5 008072 ifetch 1 ,contru 0x40a6 008073 beq at_ques ,at_rev_sniff_inquiry 0x40a7 008074 beq at_equ ,at_rev_sniff_set 0x40a8 008075 branch at_error_rev_end : 008076 at_rev_sniff_inquiry: 0x40a9 008077 call at_group_sniff_inquiry 0x40aa 008078 branch at_nomal_rev_end : 008080 at_rev_ldev: 0x40ab 008081 ifetch 1 ,contru 0x40ac 008082 beq at_ques ,at_rev_ldev_inquiry 0x40ad 008083 branch at_error_rev_end : 008084 at_rev_ldev_inquiry: 0x40ae 008085 call at_group_ldev_inquiry 0x40af 008086 branch at_nomal_rev_end : 008088 at_rev_rssi: 0x40b0 008089 ifetch 1 ,contru 0x40b1 008090 beq at_ques ,at_rev_rssi_inquiry 0x40b2 008091 branch at_nomal_rev_end : 008092 at_rev_rssi_inquiry: 0x40b3 008093 call context_check_idle 0x40b4 008094 nbranch at_error_rev_end ,zero 0x40b5 008095 call at_group_rssi_inquiry 0x40b6 008096 branch at_nomal_rev_end : 008098 at_rev_cdev: 0x40b7 008099 ifetch 1 ,contru 0x40b8 008100 beq at_ques ,at_rev_cdev_inquiry 0x40b9 008101 branch at_error_rev_end : 008102 at_rev_cdev_inquiry: 0x40ba 008103 fetch 1 ,mem_context 0x40bb 008104 bbit0 state_inconn ,at_error_rev_end 0x40bc 008105 call get_uart_twptr 0x40bd 008106 fetch 1 ,mem_context + coffset_mode 0x40be 008107 bbit1 mode_le ,le_cdev_inquiry 0x40bf 008108 branch at_cdev_unle_inq : 008109 le_cdev_inquiry: 0x40c0 008110 arg mem_prarm_cdev ,rega 0x40c1 008111 arg 4 ,loopcnt 0x40c2 008112 call at_group_inquiryhead_common 0x40c3 008113 call at_rev_uart_write_62 0x40c4 008114 setarg 0x34 0x40c5 008115 istore 1 ,contwu 0x40c6 008116 call at_rev_uart_write_44 0x40c7 008117 arg mem_le_plap ,rega 0x40c8 008118 call adss_hex2string_to_uart 0x40c9 008119 call uartd_send 0x40ca 008120 branch at_nomal_rev_end : 008121 at_cdev_unle_inq: 0x40cb 008122 arg mem_prarm_cdev ,rega 0x40cc 008123 arg 4 ,loopcnt 0x40cd 008124 call at_group_inquiryhead_common 0x40ce 008125 call at_rev_uart_write_62 0x40cf 008126 setarg 0x33 0x40d0 008127 istore 1 ,contwu 0x40d1 008128 call at_rev_uart_write_44 0x40d2 008129 arg mem_plap ,rega 0x40d3 008130 call adss_hex2string_to_uart 0x40d4 008131 call uartd_send 0x40d5 008132 branch at_nomal_rev_end : 008135 at_rev_inqr: 0x40d6 008136 set1 mark_ext_patch ,mark 0x40d7 008137 bpatch patch32_4 ,mem_patch32 0x40d8 008138 call app_check_conn_device_nums_addr 0x40d9 008139 fetch 1 ,mem_device_nums 0x40da 008140 bne 0 ,at_error_rev_end 0x40db 008141 call do_at_inquiry 0x40dc 008142 branch at_nomal_rev_end : 008144 at_rev_leinqr: 0x40dd 008145 set1 mark_ext_patch ,mark 0x40de 008146 bpatch patch32_5 ,mem_patch32 0x40df 008147 call do_at_leinquiry 0x40e0 008148 branch at_nomal_rev_end : 008150 at_rev_role_inquiry: 0x40e1 008151 arg mem_prarm_role ,rega 0x40e2 008152 arg 4 ,loopcnt 0x40e3 008153 call at_group_inquiryhead_common 0x40e4 008154 call context_check_idle 0x40e5 008155 nbranch at_rev_uart_write_n ,zero 0x40e6 008156 fetch 1 ,mem_context + coffset_mode 0x40e7 008157 bbit1 mode_master ,at_rev_uart_write_m 0x40e8 008158 call at_rev_uart_write_s 0x40e9 008159 call uartd_send 0x40ea 008160 branch at_nomal_rev_end : 008161 at_rev_uart_write_m: 0x40eb 008162 setarg 0x4d 0x40ec 008163 istore 1 ,contwu 0x40ed 008164 call uartd_send 0x40ee 008165 branch at_nomal_rev_end : 008166 at_rev_uart_write_s: 0x40ef 008167 setarg 0x53 0x40f0 008168 istore 1 ,contwu 0x40f1 008169 rtn : 008171 at_rev_cmode: 0x40f2 008172 ifetch 1 ,contru 0x40f3 008173 beq at_ques ,at_rev_cmode_inquiry 0x40f4 008174 beq at_equ ,at_rev_cmode_set 0x40f5 008175 branch at_error_rev_end : 008176 at_rev_cmode_inquiry: 0x40f6 008177 call at_group_cmode_inquiry 0x40f7 008178 branch at_nomal_rev_end : 008180 at_rev_mode: 0x40f8 008181 ifetch 1 ,contru 0x40f9 008182 beq at_equ ,at_rev_mode_set 0x40fa 008183 branch at_error_rev_end : 008185 at_rev_dmstate: 0x40fb 008186 ifetch 1 ,contru 0x40fc 008187 beq at_ques ,at_rev_dmstate_inquiry 0x40fd 008188 branch at_error_rev_end : 008189 at_rev_dmstate_inquiry: 0x40fe 008190 call at_group_dmstate_inquiry 0x40ff 008191 branch at_nomal_rev_end : 008193 at_rev_reconn: 0x4100 008194 fetch 1 ,mem_app_connection_options 0x4101 008195 store 1 ,mem_connection_options 0x4102 008196 call eeprom_load_reconn_info 0x4103 008197 call app_check_conn_device_nums_addr 0x4104 008198 fetch 1 ,mem_device_nums 0x4105 008199 bne 0 ,at_error_rev_end 0x4106 008200 fetch 1 ,mem_xrecord_mode 0x4107 008201 beq rec_3_mode ,at_rev_unle_reconn 0x4108 008202 beq rec_4_mode ,at_rev_lereconn 0x4109 008203 branch at_error_rev_end : 008205 at_rev_lereconn: 0x410a 008206 call app_ble_start_direct_adv 0x410b 008207 branch at_nomal_rev_end : 008208 at_rev_unle_reconn: 0x410c 008209 call app_bt_start_reconnect 0x410d 008210 branch at_nomal_rev_end : 008212 at_rev_dis: 0x410e 008213 call app_check_conn_device_nums_addr 0x410f 008214 fetch 1 ,mem_device_nums 0x4110 008215 bne 1 ,at_error_rev_end 0x4111 008216 fetch 1 ,mem_context + coffset_mode 0x4112 008217 bbit1 mode_le ,at_rev_ledis 0x4113 008218 call app_bt_disconnect 0x4114 008219 branch at_nomal_rev_end : 008222 at_rev_ledis: 0x4115 008223 call app_ble_disconnect 0x4116 008224 branch at_nomal_rev_end : 008227 at_rev_stsn: 0x4117 008228 ifetch 1 ,contru 0x4118 008229 beq at_equ ,at_rev_stsn_set 0x4119 008230 branch at_error_rev_end : 008231 at_rev_stsn_set: 0x411a 008232 ifetch 1 ,contru 0x411b 008233 beq 0x31 ,at_exit_sniff 0x411c 008234 beq 0x30 ,at_enter_sniff 0x411d 008235 branch at_error_rev_end : 008236 at_enter_sniff: 0x411e 008237 call app_check_sniff 0x411f 008238 branch at_nomal_rev_end ,true 0x4120 008239 call app_bt_enter_sniff 0x4121 008240 branch at_nomal_rev_end : 008241 at_exit_sniff: 0x4122 008242 call app_check_sniff 0x4123 008243 nbranch at_nomal_rev_end ,true 0x4124 008244 call module_exit_sniff 0x4125 008245 call at_set_cmd_task_flag 0x4126 008246 branch at_nomal_rev_end : 008249 at_rev_clrflg: 0x4127 008250 call app_clearflag_store 0x4128 008251 branch at_nomal_rev_end : 008253 at_rev_ota: 0x4129 008254 ifetch 1 ,contru 0x412a 008255 beq at_equ ,at_rev_ota_process 0x412b 008256 branch at_error_rev_end : 008258 at_rev_discov: 0x412c 008259 call app_check_conn_device_nums_addr 0x412d 008260 fetch 1 ,mem_device_nums 0x412e 008261 bne 0 ,at_error_rev_end 0x412f 008262 call module_disconn_start 0x4130 008263 branch at_nomal_rev_end : 008269 at_rev_name_set: 0x4131 008270 arg mem_local_name ,rega 0x4132 008271 call at_set_common 0x4133 008272 storet 1 ,mem_local_name_length 0x4134 008273 call at_store_bt_name 0x4135 008274 branch at_nomal_rev_end : 008276 at_rev_le_name_set: 0x4136 008277 arg mem_le_name ,rega 0x4137 008278 call at_set_common 0x4138 008279 storet 1 ,mem_le_name_len 0x4139 008280 call at_store_le_name 0x413a 008281 call le_modified_name 0x413b 008282 branch at_nomal_rev_end : 008284 at_rev_adss_set: 0x413c 008285 arg mem_lap ,contw 0x413d 008286 call adss_string2hex_from_uart 0x413e 008287 call at_store_bt_adss 0x413f 008288 branch at_nomal_rev_end : 008290 at_rev_leadss_set: 0x4140 008291 arg mem_le_lap ,contw 0x4141 008292 call adss_string2hex_from_uart 0x4142 008293 call at_store_le_adss 0x4143 008294 branch at_nomal_rev_end : 008296 at_rev_pswd_set: 0x4144 008297 arg mem_pin ,rega 0x4145 008298 call at_set_common 0x4146 008299 storet 1 ,mem_pin_length 0x4147 008300 call at_store_bt_pincode 0x4148 008301 branch at_nomal_rev_end : 008303 at_rev_uart_set: 0x4149 008304 call string2dec_from_uart 0x414a 008305 setarg uart_clk 0x414b 008306 idiv temp 0x414c 008307 call wait_div_end 0x414d 008308 quotient pdata 0x414e 008309 store 2 ,mem_timeup 0x414f 008310 call at_store_throughput_uart_baud 0x4150 008311 branch at_nomal_rev_end : 008313 at_rev_mode_set: 0x4151 008314 ifetch 1 ,contru 0x4152 008315 sub pdata ,0x33 ,null 0x4153 008316 nbranch at_error_rev_end ,positive 0x4154 008317 and pdata ,0x3 ,pdata 0x4155 008318 store 1 ,mem_module_state 0x4156 008319 branch at_nomal_rev_end : 008321 at_rev_class_set: 0x4157 008322 ifetch 3 ,contru 0x4158 008323 store 3 ,mem_class 0x4159 008324 branch at_nomal_rev_end : 008326 at_rev_role_set: 0x415a 008327 call context_check_idle 0x415b 008328 nbranch at_error_rev_end ,zero 0x415c 008329 ifetch 1 ,contru 0x415d 008330 beq 0x53 ,at_role_slave 0x415e 008331 beq 0x4D ,at_role_master 0x415f 008332 branch at_error_rev_end : 008334 at_role_slave: 0x4160 008335 fetch 1 ,mem_context + coffset_mode 0x4161 008336 bbit1 mode_master ,at_switch_role 0x4162 008337 branch at_error_rev_end : 008339 at_role_master: 0x4163 008340 fetch 1 ,mem_context + coffset_mode 0x4164 008341 bbit0 mode_master ,at_switch_role 0x4165 008342 branch at_error_rev_end : 008344 at_switch_role: 0x4166 008345 fetch 1 ,mem_module_task 0x4167 008346 set1 at_task_switch ,pdata 0x4168 008347 store 1 ,mem_module_task 0x4169 008348 jam hci_cmd_role_switch ,mem_hci_cmd 0x416a 008349 branch at_rev_end : 008351 at_rev_sniff_set: 0x416b 008352 arg mem_sniff_param_interval ,contw 0x416c 008353 call mem2_string2hex_from_uart 0x416d 008354 arg mem_sniff_param_attempt ,contw 0x416e 008355 call mem2_string2hex_from_uart 0x416f 008356 arg mem_sniff_param_timeout ,contw 0x4170 008357 call mem2_string2hex_from_uart 0x4171 008358 branch at_nomal_rev_end : 008360 at_rev_list_set: 0x4172 008361 ifetch 1 ,contru 0x4173 008362 beq 0x31 ,at_rev_list_set_1 0x4174 008363 beq 0x32 ,at_rev_list_set_2 0x4175 008364 branch at_error_rev_end : 008365 at_rev_list_set_1: 0x4176 008366 ifetch 1 ,contru 0x4177 008367 arg mem_temp_lap ,contw 0x4178 008368 call adss_string2hex_from_uart 0x4179 008369 call eeprom_clear_bd_reconn_info 0x417a 008370 nrtn user 0x417b 008371 branch at_nomal_rev_end : 008372 at_rev_list_set_2: 0x417c 008373 call eeprom_clear_all_reconn_info 0x417d 008374 branch at_nomal_rev_end : 008376 at_rev_cmode_set: 0x417e 008377 ifetch 1 ,contru 0x417f 008378 fetcht 1 ,mem_module_state 0x4180 008379 nsetflag blank ,at_state_cmode ,temp 0x4181 008380 storet 1 ,mem_module_state 0x4182 008381 branch at_nomal_rev_end ,blank 0x4183 008382 ifetch 1 ,contru 0x4184 008383 arg mem_cmode_addr ,contw 0x4185 008384 call adss_string2hex_from_uart 0x4186 008385 branch at_nomal_rev_end : 008387 at_rev_ota_process: 0x4187 008388 set1 mark_ext_patch ,mark 0x4188 008389 bpatch patch32_6 ,mem_patch32 0x4189 008390 arg 20 ,loopcnt 0x418a 008391 arg mem_l2cap_rxbuff1 ,contw 0x418b 008392 call uart_copy_rx_bytes 0x418c 008393 arg mem_l2cap_rxbuff1 ,rega 0x418d 008394 fetch 1 ,mem_l2cap_rxbuff1 0x418e 008395 compare ota_write_req ,pdata ,0xff 0x418f 008396 call prcp_parse_ota_write_req ,true 0x4190 008397 fetch 1 ,mem_l2cap_rxbuff1 0x4191 008398 compare ota_end_cmd ,pdata ,0xff 0x4192 008399 call prcp_parse_ota_end_cmd ,true 0x4193 008400 branch at_nomal_rev_end : 008405 at_group_name_inquiry: 0x4194 008406 arg mem_prarm_name ,rega 0x4195 008407 arg 4 ,loopcnt 0x4196 008408 call at_group_inquiryhead_common 0x4197 008409 fetch 1 ,mem_local_name_length 0x4198 008410 copy pdata ,loopcnt 0x4199 008411 arg mem_local_name ,contr 0x419a 008412 branch send_mem_to_uart0 : 008413 at_group_le_name_inquiry: 0x419b 008414 arg mem_prarm_blename ,rega 0x419c 008415 force 7 ,loopcnt 0x419d 008416 call at_group_inquiryhead_common 0x419e 008417 call le_get_device_name 0x419f 008418 ifetch 1 ,contr 0x41a0 008419 copy pdata ,loopcnt 0x41a1 008420 branch send_mem_to_uart0 : 008423 at_group_adss_inquiry: 0x41a2 008424 arg mem_prarm_adss ,rega 0x41a3 008425 arg 4 ,loopcnt 0x41a4 008426 call at_group_inquiryhead_common 0x41a5 008427 arg mem_lap ,rega 0x41a6 008428 call adss_hex2string_to_uart 0x41a7 008429 branch uartd_send : 008430 at_group_leadss_inquiry: 0x41a8 008431 arg mem_prarm_bleadss ,rega 0x41a9 008432 arg 7 ,loopcnt 0x41aa 008433 call at_group_inquiryhead_common 0x41ab 008434 arg mem_le_lap ,rega 0x41ac 008435 call adss_hex2string_to_uart 0x41ad 008436 branch uartd_send : 008439 at_group_version_inquiry: 0x41ae 008440 arg mem_prarm_vers ,rega 0x41af 008441 arg 4 ,loopcnt 0x41b0 008442 call at_group_inquiryhead_common 0x41b1 008443 arg 6 ,loopcnt 0x41b2 008444 arg mem_module_version ,contr 0x41b3 008445 branch send_mem_to_uart0 : 008447 at_group_class_inquiry: 0x41b4 008448 arg mem_prarm_class ,rega 0x41b5 008449 arg 5 ,loopcnt 0x41b6 008450 call at_group_inquiryhead_common 0x41b7 008451 arg 3 ,loopcnt 0x41b8 008452 arg mem_class ,contr 0x41b9 008453 branch send_mem_to_uart0 : 008455 at_group_list_inquiry: 0x41ba 008456 arg mem_prarm_list ,rega 0x41bb 008457 arg 4 ,loopcnt 0x41bc 008458 call at_group_inquiryhead_common 0x41bd 008459 call eeprom_load_bdaddr_list 0x41be 008460 call at_group_list_reply 0x41bf 008461 branch uartd_send : 008464 at_group_ldev_inquiry: 0x41c0 008465 call eeprom_load_reconn_bdaddr 0x41c1 008466 arg mem_prarm_ldev ,rega 0x41c2 008467 arg 4 ,loopcnt 0x41c3 008468 call at_group_inquiryhead_common 0x41c4 008469 fetch 1 ,mem_record_bt_mode 0x41c5 008470 beq rec_3_mode ,at_group_ldev_inquiry0 0x41c6 008471 beq rec_4_mode ,at_group_ldev_inquiry0 0x41c7 008472 branch uartd_send : 008473 at_group_ldev_inquiry0: 0x41c8 008474 istore 1 ,contwu 0x41c9 008475 call at_rev_uart_write_44 0x41ca 008476 arg mem_temp_lap ,rega 0x41cb 008477 call adss_hex2string_to_uart 0x41cc 008478 branch uartd_send : 008480 at_group_rssi_inquiry: 0x41cd 008481 set1 mark_ext_patch ,mark 0x41ce 008482 bpatch patch32_7 ,mem_patch32 0x41cf 008483 arg mem_prarm_rssi ,rega 0x41d0 008484 arg 4 ,loopcnt 0x41d1 008485 call at_group_inquiryhead_common 0x41d2 008486 call at_rssi_result 0x41d3 008487 branch uartd_send : 008488 at_rssi_result: 0x41d4 008489 arg mem_rssi ,rega 0x41d5 008490 arg 1 ,loopcnt 0x41d6 008491 branch hex2string_to_uart0 : 008493 at_group_cdev_inquiry: 0x41d7 008494 rtn : 008497 at_group_cmode_inquiry: 0x41d8 008498 arg mem_prarm_cmode ,rega 0x41d9 008499 arg 5 ,loopcnt 0x41da 008500 call at_group_inquiryhead_common 0x41db 008501 arg mem_cmode_addr ,rega 0x41dc 008502 call adss_hex2string_to_uart 0x41dd 008503 branch uartd_send : 008506 at_group_dmstate_inquiry: 0x41de 008507 arg mem_prarm_dmstate ,rega 0x41df 008508 arg 7 ,loopcnt 0x41e0 008509 call at_group_inquiryhead_common 0x41e1 008510 fetch 1 ,mem_module_state 0x41e2 008511 copy pdata ,rega 0x41e3 008512 fetch 1 ,mem_context 0x41e4 008513 isolate1 state_inconn ,pdata 0x41e5 008514 setflag true ,at_state_isconn ,rega 0x41e6 008515 isolate1 state_insniff ,pdata 0x41e7 008516 setflag true ,at_state_sniff ,rega 0x41e8 008517 fetch 1 ,mem_context + coffset_mode 0x41e9 008518 isolate1 mode_master ,pdata 0x41ea 008519 setflag true ,at_state_role ,rega 0x41eb 008520 isolate1 mode_le ,pdata 0x41ec 008521 setflag true ,at_state_le ,rega 0x41ed 008522 copy rega ,pdata 0x41ee 008523 istore 1 ,contwu 0x41ef 008524 branch uartd_send : 008526 do_at_inquiry: 0x41f0 008527 setarg param_glap 0x41f1 008528 store 3 ,mem_glap 0x41f2 008529 fetch 1 ,mem_at_using_flag 0x41f3 008530 set1 at_flag_inq ,pdata 0x41f4 008531 store 1 ,mem_at_using_flag 0x41f5 008532 branch do_at_inquiry0 : 008534 do_at_leinquiry: 0x41f6 008535 call app_check_conn_device_nums_addr 0x41f7 008536 fetch 1 ,mem_device_nums 0x41f8 008537 bne 0 ,at_error_rev_end 0x41f9 008538 call app_ble_start_scan 0x41fa 008539 fetch 1 ,mem_at_using_flag 0x41fb 008540 set1 at_flag_leinq ,pdata 0x41fc 008541 store 1 ,mem_at_using_flag 0x41fd 008542 setarg 0x200 0x41fe 008543 store 2 ,mem_at_scan_time 0x41ff 008544 arg mem_prarm_bleinqr ,rega 0x4200 008545 arg 6 ,loopcnt 0x4201 008546 call at_group_inquiryhead_common 0x4202 008547 call send_mem_to_uart0 0x4203 008548 branch at_rev_end : 008552 at_group_pswd_inquiry: 0x4204 008553 arg mem_prarm_pswd ,rega 0x4205 008554 arg 4 ,loopcnt 0x4206 008555 call at_group_inquiryhead_common 0x4207 008556 fetch 1 ,mem_pin_length 0x4208 008557 copy pdata ,loopcnt 0x4209 008558 arg mem_pin ,contr 0x420a 008559 branch send_mem_to_uart0 : 008563 at_group_sniff_inquiry: 0x420b 008564 arg mem_prarm_sniff ,rega 0x420c 008565 arg 5 ,loopcnt 0x420d 008566 call at_group_inquiryhead_common 0x420e 008567 call at_rev_uart_write_62 0x420f 008568 setarg 84 0x4210 008569 istore 1 ,contwu 0x4211 008570 call at_rev_uart_write_colon 0x4212 008571 arg mem_sniff_param_interval ,rega 0x4213 008572 call mem2_hex2string_to_uart 0x4214 008573 call at_rev_uart_write_62 0x4215 008574 setarg 65 0x4216 008575 istore 1 ,contwu 0x4217 008576 call at_rev_uart_write_colon 0x4218 008577 arg mem_sniff_param_attempt ,rega 0x4219 008578 call mem2_hex2string_to_uart 0x421a 008579 call at_rev_uart_write_62 0x421b 008580 setarg 79 0x421c 008581 istore 1 ,contwu 0x421d 008582 call at_rev_uart_write_colon 0x421e 008583 arg mem_sniff_param_timeout ,rega 0x421f 008584 call mem2_hex2string_to_uart 0x4220 008585 branch send_mem_to_uart0 : 008586 at_inquiry_reply: 0x4221 008587 call get_uart_twptr 0x4222 008588 call at_rev_uart_write_62 0x4223 008589 arg extm_lap ,rega 0x4224 008590 call adss_hex2string_to_uart 0x4225 008591 call at_rev_uart_write_44 0x4226 008592 arg extm_class ,rega 0x4227 008593 call mem3_hex2string_to_uart 0x4228 008594 call at_rev_uart_write_44 0x4229 008595 call at_rssi_result 0x422a 008596 branch uartd_send : 008607 at_set_common: 0x422b 008608 call at_set_setprarm 0x422c 008609 branch uart_copy_rx_bytes : 008610 at_set_setprarm: 0x422d 008611 call uart_get_remain_length 0x422e 008612 copy pdata ,temp 0x422f 008613 copy pdata ,loopcnt 0x4230 008614 copy rega ,contw 0x4231 008615 rtn : 008618 at_group_inquiryhead_common: 0x4232 008619 call get_uart_twptr 0x4233 008620 call at_rev_uart_write_plus : 008621 at_group_inquiryhead_common0: 0x4234 008622 copy rega ,contr 0x4235 008623 call uart_copy_tx_bytes 0x4236 008624 branch at_rev_uart_write_colon : 008627 string_compare_uart_follow: 0x4237 008628 ifetch 1 ,contru 0x4238 008629 ifetcht 1 ,regb 0x4239 008630 isub temp ,null 0x423a 008631 disable true 0x423b 008632 nbranch string_compare_uart_follow_diff ,zero 0x423c 008633 increase 1 ,regb 0x423d 008634 loop string_compare_uart_follow 0x423e 008635 enable true 0x423f 008636 rtn : 008637 string_compare_uart_follow_diff: 0x4240 008638 branch restore_contru : 008641 at_rev_uart_write_plus: 0x4241 008642 setarg ui_plus 0x4242 008643 istore 1 ,contwu 0x4243 008644 rtn : 008646 at_rev_uart_write_colon: 0x4244 008647 setarg ui_colon 0x4245 008648 istore 1 ,contwu 0x4246 008649 rtn : 008652 at_rev_uart_write_62: 0x4247 008653 setarg 62 0x4248 008654 istore 1 ,contwu 0x4249 008655 rtn : 008656 at_rev_uart_write_n: 0x424a 008657 setarg 78 0x424b 008658 istore 1 ,contwu 0x424c 008659 call uartd_send 0x424d 008660 branch at_nomal_rev_end : 008664 at_rev_uart_write_44: 0x424e 008665 setarg at_comma 0x424f 008666 istore 1 ,contwu 0x4250 008667 rtn : 008669 restore_contru: 0x4251 008670 copy rega ,contru 0x4252 008671 rtn : 008673 at_group_list_reply: 0x4253 008674 arg mem_bdaddr_list_buff + 7 ,regc 0x4254 008675 arg 4 ,loopcnt : 008676 at_group_list_reply_loop: 0x4255 008677 copy loopcnt ,pdata 0x4256 008678 store 1 ,mem_pdatatemp 0x4257 008679 ifetch 1 ,regc 0x4258 008680 beq rec_3_mode ,at_group_list_isrecord 0x4259 008681 beq rec_4_mode ,at_group_list_isrecord 0x425a 008682 branch at_group_list_notrecord : 008683 at_group_list_isrecord: 0x425b 008684 call at_rev_uart_write_62 0x425c 008685 ifetch 1 ,regc 0x425d 008686 istore 1 ,contwu 0x425e 008687 increase 1 ,regc 0x425f 008688 call at_rev_uart_write_44 0x4260 008689 copy regc ,rega 0x4261 008690 call adss_hex2string_to_uart : 008691 at_group_list_notrecord0: 0x4262 008692 increase 6 ,regc 0x4263 008693 fetch 1 ,mem_pdatatemp 0x4264 008694 copy pdata ,loopcnt 0x4265 008695 loop at_group_list_reply_loop 0x4266 008696 rtn : 008697 at_group_list_notrecord: 0x4267 008698 increase 1 ,regc 0x4268 008699 branch at_group_list_notrecord0 : 008703 uart_get_remain_length: 0x4269 008704 set1 mark_ext_patch ,mark 0x426a 008705 bpatch patch33_0 ,mem_patch33 0x426b 008706 hfetch 2 ,core_uart_rrptr 0x426c 008707 isub contru ,pdata 0x426d 008708 rtn zero 0x426e 008709 branch uart_get_remain_length0 ,positive : 008710 uart_get_remain_length_common: 0x426f 008711 fetcht 2 ,mem_current_packet_length 0x4270 008712 iadd temp ,pdata 0x4271 008713 increase -2 ,pdata 0x4272 008714 rtn : 008715 uart_get_remain_length0: 0x4273 008716 call uart_get_rx_buff_length 0x4274 008717 iadd contru ,temp 0x4275 008718 hfetch 2 ,core_uart_rrptr 0x4276 008719 isub temp ,pdata 0x4277 008720 branch uart_get_remain_length_common : 008722 uart_get_rx_buff_length: 0x4278 008723 arg mem_module_rx_buf_end ,pdata 0x4279 008724 increase 1 ,pdata 0x427a 008725 arg mem_module_rx_buf ,temp 0x427b 008726 isub temp ,pdata 0x427c 008727 rtn : 008729 release_packet: 0x427d 008730 fetcht 2 ,mem_current_packet_length 0x427e 008731 branch uartd_rxdone_by_len : 008736 at_error_rev_end: 0x427f 008737 set1 mark_ext_patch ,mark 0x4280 008738 bpatch patch33_1 ,mem_patch33 0x4281 008739 call get_uart_twptr 0x4282 008740 setarg 0x525245 0x4283 008741 istore 3 ,contwu 0x4284 008742 call uartd_send 0x4285 008743 branch at_rev_end : 008745 at_nomal_rev_end: 0x4286 008746 set1 mark_ext_patch ,mark 0x4287 008747 bpatch patch33_2 ,mem_patch33 0x4288 008748 call get_uart_twptr 0x4289 008749 setarg 0x4b4f 0x428a 008750 istore 2 ,contwu 0x428b 008751 call uartd_send : 008752 spp_send_end: : 008753 at_rev_end: 0x428c 008754 set1 mark_ext_patch ,mark 0x428d 008755 bpatch patch33_3 ,mem_patch33 0x428e 008756 call release_packet : 008757 spp_ipc_end: 0x428f 008758 setarg 0 0x4290 008759 store 2 ,mem_current_packet_length 0x4291 008760 store 4 ,mem_last_uart_clock 0x4292 008761 rtn : 008764 le_dongle_init: 0x4293 008765 call usb_init 0x4294 008766 call app_led_start_blink 0x4295 008767 setarg le_dongle 0x4296 008768 store 2 ,mem_cb_le_process 0x4297 008769 setarg dongle_process_bb_event 0x4298 008770 store 2 ,mem_cb_bb_event_process 0x4299 008771 setarg usb_isr 0x429a 008772 store 2 ,mem_cb_idle_process 0x429b 008773 jam 5 ,mem_dongle_count 0x429c 008774 jam 0 ,mem_dongle_peers 0x429d 008775 jam hci_cmd_le_create_conn ,mem_hci_cmd 0x429e 008776 rtn : 008779 le_dongle: 0x429f 008780 disable true 0x42a0 008781 call app_check_conn_device_nums_addr 0x42a1 008783 jam 0x1b ,mem_cmd_le_create_conn 0x42a2 008784 fetch 1 ,mem_device_nums 0x42a3 008785 compare 2 ,pdata ,0x3 0x42a4 008786 nrtn true 0x42a5 008787 jam 0 ,mem_le_scan_enable 0x42a6 008788 rtn : 008790 le_scan_dongle: 0x42a7 008791 fetch 1 ,mem_le_rxbuf 0x42a8 008792 bbit0 0 ,dongle_add_peer 0x42a9 008793 fetch 6 ,mem_le_rxbuf + 2 0x42aa 008794 fetcht 6 ,mem_le_plap 0x42ab 008795 isub temp ,null 0x42ac 008796 nrtn zero : 008797 dongle_peer_paired: 0x42ad 008798 fetch 6 ,mem_le_plap 0x42ae 008799 store 6 ,mem_le_conn_peer_addr 0x42af 008800 rtn : 008802 dongle_add_peer: 0x42b0 008803 arg 0xff ,rega 0x42b1 008804 call le_search_adtype 0x42b2 008805 nrtn zero 0x42b3 008806 ifetch 2 ,contr 0x42b4 008807 fetcht 2 ,mem_dongle_signature 0x42b5 008808 isub temp ,null 0x42b6 008809 nrtn zero 0x42b7 008810 fetch 1 ,mem_dongle_peers 0x42b8 008811 increase 1 ,pdata 0x42b9 008812 store 1 ,mem_dongle_peers 0x42ba 008813 fetcht 1 ,mem_dongle_pairing_cnt 0x42bb 008814 isub temp ,null 0x42bc 008815 branch dongle_peer_paired ,positive 0x42bd 008816 rtn : 008818 dongle_process_bb_event: 0x42be 008819 copy regc ,pdata 0x42bf 008820 beq bt_evt_le_disconnected ,dongle_le_event_bb_disconnected 0x42c0 008821 beq bt_evt_le_connected ,dongle_bb_event_connected 0x42c1 008822 and pdata ,0x0f ,temp 0x42c2 008823 and_into bt_evt_timer_mask ,pdata 0x42c3 008824 beq bt_evt_timer_init ,dongle_bb_event_100ms 0x42c4 008825 rtn : 008827 dongle_le_event_bb_disconnected: 0x42c5 008828 setarg 0 0x42c6 008829 store 6 ,mem_le_conn_peer_addr 0x42c7 008830 jam 0 ,mem_dongle_peers 0x42c8 008831 setarg 0 0x42c9 008832 store 5 ,mem_mouse_data 0x42ca 008833 jam send_mouse_data_cmd ,mem_mcmd 0x42cb 008834 call usb_isr 0x42cc 008835 branch app_ble_start_scan : 008837 dongle_bb_event_100ms: 0x42cd 008838 rtn 0x42ce 008839 fetch 1 ,mem_le_scan_enable 0x42cf 008840 rtn blank 0x42d0 008841 fetch 1 ,mem_dongle_count 0x42d1 008842 rtn blank 0x42d2 008843 increase -1 ,pdata 0x42d3 008844 store 1 ,mem_dongle_count 0x42d4 008845 nrtn blank 0x42d5 008846 call le_change_peer_addr 0x42d6 008847 branch app_ble_start_conn : 008850 dongle_bb_event_connected: 0x42d7 008851 branch app_ble_stop_scan : 008853 le_change_peer_addr: 0x42d8 008855 jam 5 ,mem_dongle_count 0x42d9 008856 fetch 1 ,mem_le_peer_state 0x42da 008857 beq le_context_state_kb ,addr_slave2 0x42db 008858 beq le_context_state_mouse ,addr_slave1 0x42dc 008859 rtn : 008860 addr_slave1: 0x42dd 008861 fetch 6 ,mem_le_addr_slave1 0x42de 008862 store 6 ,mem_app_peer_addr 0x42df 008863 jam le_context_state_kb ,mem_le_peer_state 0x42e0 008864 rtn : 008865 addr_slave2: 0x42e1 008866 fetch 6 ,mem_le_addr_slave2 0x42e2 008867 store 6 ,mem_app_peer_addr 0x42e3 008868 jam le_context_state_mouse ,mem_le_peer_state 0x42e4 008869 rtn : 008872 hci_rx_bcsp: 0x42e5 008873 ifetch 2 ,contru 0x42e6 008874 branch hci_reset_uart ,blank 0x42e7 008875 iforce regc 0x42e8 008876 ifetch 1 ,contru 0x42e9 008877 store 1 ,mem_h5rx_tmp 0x42ea 008878 iforce rega 0x42eb 008879 bbit0 6 ,hci_rx_bcsp_nocrc 0x42ec 008880 increase -2 ,regc : 008881 hci_rx_bcsp_nocrc: 0x42ed 008882 ifetch 2 ,contru 0x42ee 008883 rshift4 pdata ,loopcnt 0x42ef 008884 and pdata ,0xf ,debug 0x42f0 008885 iadd rega ,rega 0x42f1 008886 rshift8 pdata ,pdata 0x42f2 008887 iadd rega ,rega 0x42f3 008888 ifetch 1 ,contru 0x42f4 008889 iadd rega ,pdata 0x42f5 008890 bne 0xff ,hci_rx_bcsp_discard_packet 0x42f6 008891 add regc ,-4 ,pdata 0x42f7 008892 isub loopcnt ,null 0x42f8 008893 nbranch hci_rx_bcsp_discard_packet_err ,zero 0x42f9 008894 fetch 1 ,mem_h5rx_tmp 0x42fa 008895 isolate0 7 ,pdata 0x42fb 008896 branch hci_rx_bcsp_check_ack_skip ,true 0x42fc 008897 set0 mark_h5_reset ,mark 0x42fd 008898 bmark1 mark_h5_reset ,hci_rx_bcsp_check_ack_skip 0x42fe 008899 and_into 7 ,pdata 0x42ff 008900 fetcht 1 ,mem_h5tx_ack 0x4300 008901 isub temp ,null 0x4301 008902 nbranch hci_rx_bcsp_discard_packet_err ,zero : 008903 hci_rx_bcsp_check_ack_skip: 0x4302 008904 setarg 1600 0x4303 008905 force lpo_delay_timer ,queue 0x4304 008906 call timer_init 0x4305 008907 deposit debug 0x4306 008908 call hci_bcsp_parse_packet 0x4307 008909 rtn user 0x4308 008910 fetch 1 ,mem_h5rx_tmp 0x4309 008911 iforce rega 0x430a 008912 rshift3 pdata ,temp 0x430b 008913 and_into 7 ,temp 0x430c 008914 fetch 1 ,mem_h5rx_ack 0x430d 008915 isub temp ,pdata 0x430e 008916 sub pdata ,0 ,pdata 0x430f 008917 and_into 7 ,pdata 0x4310 008918 bne 1 ,hci_rx_bcsp_discard_packet_err 0x4311 008919 storet 1 ,mem_h5rx_ack 0x4312 008920 fetch 1 ,mem_h5rx_ackcnt 0x4313 008921 increase 1 ,pdata 0x4314 008922 store 1 ,mem_h5rx_ackcnt 0x4315 008923 branch hci_rx_bcsp_discard_packet : 008925 hci_rx_bcsp_discard_packet_err: 0x4316 008926 fetch 1 ,mem_check_err_acl_cont 0x4317 008927 increase 1 ,pdata 0x4318 008928 store 1 ,mem_check_err_acl_cont : 008929 hci_rx_bcsp_discard_packet: 0x4319 008930 hfetch 2 ,core_uart_rrptr 0x431a 008931 iforce contru 0x431b 008932 ifetch 2 ,contru 0x431c 008933 iadd contru ,contru 0x431d 008934 deposit contru 0x431e 008935 hstore 2 ,core_uart_rrptr 0x431f 008936 rtn : 008938 hci_bcsp_parse_packet: 0x4320 008939 disable user 0x4321 008940 rtn blank 0x4322 008941 beq 1 ,parse_bcsp_link_establish 0x4323 008942 beq 2 ,parse_bcsp_bccmd 0x4324 008943 beq 5 ,process_hci_cmd 0x4325 008944 beq 6 ,process_acl 0x4326 008945 beq 8 ,process_hci_patch 0x4327 008946 rtn : 008948 parse_bcsp_link_establish: 0x4328 008949 set0 mark_h5_reinit ,mark 0x4329 008950 ifetch 1 ,contru 0x432a 008951 beq 0xda ,parse_bcsp_link_establish_sync 0x432b 008952 beq 0xac ,parse_bcsp_link_establish_syncrsp 0x432c 008953 beq 0xad ,parse_bcsp_link_establish_conf 0x432d 008954 beq 0xde ,parse_bcsp_link_establish_confrsp 0x432e 008955 rtn : 008956 parse_bcsp_link_establish_sync: 0x432f 008957 bmark1 mark_h5_sync ,parse_bcsp_link_establish_send_syncrsp 0x4330 008958 force 0xda ,temp 0x4331 008959 setarg 0xededdc 0x4332 008960 call parse_bcsp_link_establish_send : 008961 parse_bcsp_link_establish_send_syncrsp: 0x4333 008962 force 0xac ,temp 0x4334 008963 setarg 0xeeefaf 0x4335 008964 branch parse_bcsp_link_establish_send : 008965 parse_bcsp_link_establish_syncrsp: 0x4336 008966 set1 mark_h5_sync ,mark 0x4337 008967 force 0xad ,temp 0x4338 008968 setarg 0xedacef 0x4339 008969 branch parse_bcsp_link_establish_send : 008970 parse_bcsp_link_establish_conf: 0x433a 008971 force 0xde ,temp 0x433b 008972 setarg 0xd0d0ad : 008973 parse_bcsp_link_establish_send: 0x433c 008974 lshift8 pdata ,pdata 0x433d 008975 ior temp ,temp 0x433e 008976 call hci_get_packet_ptr 0x433f 008977 istoret 4 ,contwu 0x4340 008978 force 1 ,queue 0x4341 008979 force 4 ,loopcnt 0x4342 008980 set0 mark_h5tx_rp ,mark 0x4343 008981 branch bcsp_send_packet : 008982 parse_bcsp_link_establish_confrsp: 0x4344 008983 force 0 ,alarm 0x4345 008984 branch hci_command_status : 008986 parse_bcsp_bccmd: 0x4346 008987 copy loopcnt ,alarm 0x4347 008988 call bcsp_send_ack 0x4348 008989 force 0 ,regb 0x4349 008990 call hci_get_packet_ptr 0x434a 008991 copy alarm ,loopcnt 0x434b 008992 ifetch 1 ,contru 0x434c 008993 setarg 1 0x434d 008994 istore 1 ,contwu 0x434e 008995 set0 mark_temp ,mark : 008996 parse_bcsp_bccmd_loop: 0x434f 008997 ifetch 1 ,contru 0x4350 008998 increase 1 ,regb 0x4351 008999 beq 0x1c ,parse_bcsp_bccmd_sco_link 0x4352 009000 compare 4 ,regb ,0xff 0x4353 009001 nbranch parse_bcsp_bccmd_next ,true 0x4354 009002 setflag blank ,mark_temp ,mark 0x4355 009003 bne 0x3a ,parse_bcsp_bccmd_next 0x4356 009004 setarg 2000 0x4357 009005 force h5_reinit_timer ,queue 0x4358 009006 call timer_init 0x4359 009007 set1 mark_h5_reinit ,mark 0x435a 009008 rtn : 009010 parse_bcsp_bccmd_sco_link: 0x435b 009011 compare 6 ,regb ,0xff 0x435c 009012 branch parse_bcsp_bccmd_next_ok ,true : 009013 parse_bcsp_bccmd_next: 0x435d 009014 isolate1 mark_temp ,mark 0x435e 009015 call parse_bcsp_bccmd_replace ,true 0x435f 009016 istore 1 ,contwu 0x4360 009017 loop parse_bcsp_bccmd_loop 0x4361 009018 set0 mark_bccmd_patch ,mark 0x4362 009019 copy alarm ,loopcnt 0x4363 009020 set1 mark_h5tx_rp ,mark 0x4364 009021 force 2 ,queue 0x4365 009022 branch bcsp_send_packet : 009023 parse_bcsp_bccmd_next_ok: 0x4366 009024 set1 mark_bccmd_patch ,mark 0x4367 009025 branch parse_bcsp_bccmd_next : 009027 parse_bcsp_bccmd_replace: 0x4368 009028 rtnmark1 mark_bccmd_patch 0x4369 009029 compare 10 ,regb ,0xff 0x436a 009030 branch parse_bcsp_bccmd_replace1 ,true 0x436b 009031 compare 11 ,regb ,0xff 0x436c 009032 nrtn true 0x436d 009033 setarg 0x12 0x436e 009034 rtn : 009035 parse_bcsp_bccmd_replace1: 0x436f 009036 setarg 0xe9 0x4370 009037 rtn : 009039 bcsp_send_ack: 0x4371 009040 fetch 1 ,mem_h5rx_tmp 0x4372 009041 increase 1 ,pdata 0x4373 009042 and_into 7 ,pdata 0x4374 009043 store 1 ,mem_h5tx_ack 0x4375 009044 force 0 ,loopcnt 0x4376 009045 force 0 ,queue 0x4377 009046 set0 mark_h5tx_rp ,mark : 009047 bcsp_send_packet: 0x4378 009049 add loopcnt ,4 ,regb 0x4379 009050 fetch 1 ,mem_h5tx_ack 0x437a 009051 lshift3 pdata ,regc 0x437b 009052 isolate0 mark_h5tx_crc ,mark 0x437c 009053 nsetflag true ,6 ,regc 0x437d 009054 branch bcsp_send_packet_nocrc ,true 0x437e 009055 increase 2 ,regb : 009056 bcsp_send_packet_nocrc: 0x437f 009057 bmark0 mark_h5tx_rp ,bcsp_send_packet_form_nonrp 0x4380 009058 set1 7 ,regc 0x4381 009059 fetch 1 ,mem_h5tx_seq 0x4382 009060 ior regc ,regc 0x4383 009061 increase 1 ,pdata 0x4384 009062 and_into 7 ,pdata 0x4385 009063 store 1 ,mem_h5tx_seq 0x4386 009064 fetch 1 ,mem_rp_packets 0x4387 009065 increase 1 ,pdata 0x4388 009066 store 1 ,mem_rp_packets : 009067 bcsp_send_packet_form_nonrp: 0x4389 009068 fetch 2 ,mem_h5tx_wptr 0x438a 009069 iforce contwu 0x438b 009070 deposit regb 0x438c 009071 isolate1 mark_h5tx_rp ,mark 0x438d 009072 setflag true ,hci_flag_rp ,pdata 0x438e 009073 istore 2 ,contwu 0x438f 009074 copy contwu ,rega 0x4390 009075 deposit regc 0x4391 009076 istore 1 ,contwu 0x4392 009077 lshift4 loopcnt ,pdata 0x4393 009078 ior queue ,pdata 0x4394 009079 iadd regc ,regc 0x4395 009080 istore 2 ,contwu 0x4396 009081 rshift8 pdata ,pdata 0x4397 009082 iadd regc ,pdata 0x4398 009083 sub pdata ,0xff ,pdata 0x4399 009084 istore 1 ,contwu 0x439a 009085 bmark0 mark_h5tx_crc ,bcsp_send_packet_form_nocrc 0x439b 009086 increase 4 ,loopcnt 0x439c 009087 copy rega ,contwu 0x439d 009088 call calc_tx_crc16 0x439e 009089 istore 2 ,contwu : 009090 bcsp_send_packet_form_nocrc: 0x439f 009091 fetch 2 ,mem_h5tx_wptr 0x43a0 009092 iadd regb ,contwu 0x43a1 009093 increase 2 ,contwu 0x43a2 009094 deposit contwu 0x43a3 009095 store 2 ,mem_h5tx_wptr 0x43a4 009096 hstore 2 ,core_uart_twptr 0x43a5 009097 fetcht 2 ,mem_h5tx_rptr 0x43a6 009098 call bcsp_update_free 0x43a7 009099 call bcsp_init_retransmit 0x43a8 009100 setarg 1600 0x43a9 009101 force lpo_delay_timer ,queue 0x43aa 009102 branch timer_init : 009104 bcsp_init_retransmit: 0x43ab 009105 setarg 400 0x43ac 009106 force hci_retransmit_timer ,queue 0x43ad 009107 call timer_init 0x43ae 009108 set1 mark_h5tx_retransmit ,mark 0x43af 009109 rtn : 009111 bcsp_retransmit: 0x43b0 009112 rtnmark0 mark_h5tx_retransmit 0x43b1 009113 force hci_retransmit_timer ,queue 0x43b2 009114 call timer_check 0x43b3 009115 nrtn blank 0x43b4 009116 fetch 2 ,mem_h5tx_rptr 0x43b5 009117 hstore 2 ,core_uart_trptrp 0x43b6 009118 branch bcsp_init_retransmit : 009120 bcsp_freepacket: 0x43b7 009121 fetch 2 ,mem_h5tx_wptr 0x43b8 009122 fetcht 2 ,mem_h5tx_rptr 0x43b9 009123 isub temp ,null 0x43ba 009124 branch bcsp_noretransmit ,zero 0x43bb 009125 copy temp ,contwu 0x43bc 009126 ifetch 2 ,contwu 0x43bd 009127 iforce rega 0x43be 009128 iand mask3ff ,pdata 0x43bf 009129 iadd contwu ,contwu 0x43c0 009130 hfetch 2 ,core_uart_trptr 0x43c1 009131 isub contwu ,pdata 0x43c2 009132 iand mask3ff ,regb 0x43c3 009133 fetch 2 ,mem_h5tx_wptr 0x43c4 009134 isub contwu ,pdata 0x43c5 009135 iand mask3ff ,pdata 0x43c6 009136 isub regb ,pdata 0x43c7 009137 nrtn positive 0x43c8 009138 isolate0 hci_flag_rp ,rega 0x43c9 009139 branch bcsp_discardnrp ,true 0x43ca 009140 fetch 1 ,mem_h5rx_ackcnt 0x43cb 009141 rtn blank 0x43cc 009142 increase -1 ,pdata 0x43cd 009143 store 1 ,mem_h5rx_ackcnt 0x43ce 009144 fetch 1 ,mem_rp_packets 0x43cf 009145 increase -1 ,pdata 0x43d0 009146 store 1 ,mem_rp_packets : 009147 bcsp_discardnrp: 0x43d1 009148 copy contwu ,temp 0x43d2 009149 storet 2 ,mem_h5tx_rptr 0x43d3 009150 fetch 2 ,mem_h5tx_wptr 0x43d4 009151 call bcsp_update_free 0x43d5 009152 branch bcsp_freepacket : 009153 bcsp_noretransmit: 0x43d6 009154 set0 mark_h5tx_retransmit ,mark 0x43d7 009155 rtn : 009157 bcsp_update_free: 0x43d8 009158 isub temp ,pdata 0x43d9 009159 iand mask3ff ,pdata 0x43da 009160 isub mask3ff ,pdata 0x43db 009161 sub pdata ,0 ,pdata 0x43dc 009162 store 2 ,mem_h5tx_free 0x43dd 009163 rtn : 009165 bcsp_get_tx_ptr: 0x43de 009166 fetch 2 ,mem_h5tx_wptr 0x43df 009167 iadd contwu ,contwu 0x43e0 009168 rtn : 009172 hci_log: 0x43e1 009173 rtn : 009175 hci_rx_h4: 0x43e2 009176 set1 mark_ext_patch ,mark 0x43e3 009177 bpatch patch3d_4 ,mem_patch3d 0x43e4 009178 fetch 1 ,mem_hci_cmd 0x43e5 009179 nrtn blank : 009180 hci_rx_h4_1: 0x43e6 009181 call hci_h4_parse_packet 0x43e7 009182 ncall h4_rx_discard_packet ,user 0x43e8 009183 rtn : 009185 hci_h4_parse_packet: 0x43e9 009186 set1 mark_ext_patch ,mark 0x43ea 009187 bpatch patch3d_5 ,mem_patch3d 0x43eb 009188 copy contru ,rega 0x43ec 009189 arg 4 ,temp 0x43ed 009190 ifetch 1 ,contru 0x43ee 009191 beq hci_h4_type_cmd ,hci_h4_parse_packet_wait_len 0x43ef 009192 increase 1 ,temp 0x43f0 009193 beq hci_h4_type_acl ,hci_h4_parse_packet_wait_len 0x43f1 009194 copy contru ,pdata 0x43f2 009195 hstore 2 ,core_uart_rrptr 0x43f3 009196 rtn : 009197 hci_h4_parse_packet_wait_len: 0x43f4 009198 hfetch 2 ,core_uart_rxitems 0x43f5 009199 isub temp ,null 0x43f6 009200 nbranch hci_h4_parse_packet_wait_len ,positive 0x43f7 009202 disable user 0x43f8 009203 copy rega ,contru 0x43f9 009204 call h4_get_rx_payload_len 0x43fa 009205 iadd temp ,temp : 009206 hci_h4_parse_packet_wait: 0x43fb 009207 hfetch 2 ,core_uart_rxitems 0x43fc 009208 isub temp ,null 0x43fd 009209 nbranch hci_h4_parse_packet_wait ,positive 0x43fe 009210 copy rega ,contru 0x43ff 009211 ifetch 1 ,contru 0x4400 009212 beq hci_h4_type_cmd ,process_hci_cmd 0x4401 009213 beq hci_h4_type_acl ,hci_h4_parse_packet_acl 0x4402 009214 branch assert : 009215 hci_h4_parse_packet_acl: 0x4403 009216 set1 mark_ext_patch ,mark 0x4404 009217 bpatch patch3d_6 ,mem_patch3d 0x4405 009218 copy contru ,rega 0x4406 009219 ifetch 2 ,contru 0x4407 009220 copy rega ,contru 0x4408 009221 fetcht 1 ,mem_conn_handle 0x4409 009222 icompare 0xff ,temp 0x440a 009223 branch process_acl ,true 0x440b 009224 branch le_acl_downgoing ,le 0x440c 009225 enable user 0x440d 009226 rtn : 009227 h4_rx_discard_packet: 0x440e 009228 set1 mark_ext_patch ,mark 0x440f 009229 bpatch patch3d_7 ,mem_patch3d 0x4410 009230 hfetch 2 ,core_uart_rrptr 0x4411 009231 iforce contru 0x4412 009232 call h4_get_rx_payload_len 0x4413 009233 iadd contru ,contru 0x4414 009234 deposit contru 0x4415 009235 hstore 2 ,core_uart_rrptr 0x4416 009236 rtn : 009241 h4_get_rx_payload_len: 0x4417 009242 ifetch 1 ,contru 0x4418 009243 increase 2 ,contru 0x4419 009244 beq hci_h4_type_acl ,h4_get_rx_payload_len_acl 0x441a 009245 ifetch 1 ,contru 0x441b 009246 rtn : 009247 h4_get_rx_payload_len_acl: 0x441c 009248 ifetch 2 ,contru 0x441d 009249 rtn : 009251 h4_get_tx_ptr: 0x441e 009252 hfetch 2 ,core_uart_twptr 0x441f 009253 increase -5 ,contwu 0x4420 009254 iadd contwu ,contwu 0x4421 009255 rtn : 009257 h4_send_packet_event: 0x4422 009258 arg hci_h4_type_event ,temp 0x4423 009259 branch h4_send_packet : 009260 h4_send_packet_acl: 0x4424 009261 arg hci_h4_type_acl ,temp : 009262 h4_send_packet: 0x4425 009263 set1 mark_ext_patch ,mark 0x4426 009264 bpatch patch3e_0 ,mem_patch3e 0x4427 009265 increase 1 ,loopcnt 0x4428 009266 hfetch 2 ,core_uart_twptr 0x4429 009267 copy pdata ,contwu 0x442a 009268 copy loopcnt ,pdata 0x442b 009269 istoret 1 ,contwu 0x442c 009270 increase -1 ,pdata 0x442d 009271 iadd contwu ,contwu 0x442e 009272 copy contwu ,pdata 0x442f 009273 store 2 ,mem_hci_acl_tx_trigger_wptr 0x4430 009274 copy temp ,pdata 0x4431 009275 rtneq hci_h4_type_acl 0x4432 009276 fetch 2 ,mem_hci_acl_tx_trigger_wptr 0x4433 009277 hstore 2 ,core_uart_twptr 0x4434 009278 branch h4_send_acl_trigger_clear : 009280 h4_send_acl_trigger: 0x4435 009281 set1 mark_ext_patch ,mark 0x4436 009282 bpatch patch3e_1 ,mem_patch3e 0x4437 009283 fetch 2 ,mem_hci_acl_tx_trigger_wptr 0x4438 009284 branch assert ,blank 0x4439 009285 hstore 2 ,core_uart_twptr 0x443a 009286 branch h4_send_acl_trigger_clear : 009288 h4_send_acl_trigger_clear: 0x443b 009289 setarg 0 0x443c 009290 store 2 ,mem_hci_acl_tx_trigger_wptr 0x443d 009291 rtn : 009293 h4_tx_buffer_remain: 0x443e 009294 hfetcht 2 ,core_uart_trptr 0x443f 009295 hfetch 2 ,core_uart_twptr 0x4440 009296 isub temp ,rega 0x4441 009297 nbranch h4_tx_buffer_remain_negative ,positive 0x4442 009298 hfetcht 2 ,core_uart_tsaddr 0x4443 009299 hfetch 2 ,core_uart_teaddr 0x4444 009300 isub temp ,pdata 0x4445 009301 isub rega ,temp 0x4446 009302 rtn : 009303 h4_tx_buffer_remain_negative: 0x4447 009304 sub rega ,-1 ,temp 0x4448 009305 rtn : 009310 hci_dispatch: 0x4449 009311 set0 mark_ext_patch ,mark 0x444a 009312 bpatch patch19_5 ,mem_patch19 0x444b 009313 fetch 1 ,mem_device_option 0x444c 009314 rtnne dvc_op_hci 0x444d 009315 call hci_rx_packet 0x444e 009316 call hci_check_bcsp_protocol 0x444f 009317 call bcsp_retransmit ,true 0x4450 009318 call hci_check_bcsp_protocol 0x4451 009319 call bcsp_freepacket ,true 0x4452 009320 branch process_send_acl 0x4453 009321 rtnmark0 mark_h5_reinit 0x4454 009322 force h5_reinit_timer ,queue 0x4455 009323 call timer_check 0x4456 009324 nrtn blank 0x4457 009325 call hci_reinit 0x4458 009326 call hci_check_bcsp_protocol 0x4459 009327 nrtn true 0x445a 009328 set0 mark_h5_sync ,mark 0x445b 009329 force 0xda ,temp 0x445c 009330 setarg 0xededdc 0x445d 009331 call parse_bcsp_link_establish_send 0x445e 009332 setarg 2000 0x445f 009333 force h5_reinit_timer ,queue 0x4460 009334 branch timer_init : 009337 hci_init: 0x4461 009338 set0 mark_ext_patch ,mark 0x4462 009339 bpatch patch19_6 ,mem_patch19 0x4463 009340 rtn wake 0x4464 009341 setarg hci_idle_dispatch 0x4465 009342 store 2 ,mem_cb_idle_process 0x4466 009344 setarg uart_baud_115200 0x4467 009345 store uart_baud_len ,mem_baud : 009346 hci_lpm_init: 0x4468 009347 set0 mark_ext_patch ,mark 0x4469 009348 bpatch patch19_7 ,mem_patch19 0x446a 009349 call init_filter_ram 0x446b 009350 setarg mem_h5rx_buf 0x446c 009351 hstore 2 ,core_uart_rsaddr 0x446d 009352 setarg mem_h5rx_buf_end 0x446e 009353 hstore 2 ,core_uart_readdr 0x446f 009354 setarg mem_h5tx_buf 0x4470 009355 hstore 2 ,core_uart_tsaddr 0x4471 009356 call hci_sel_init : 009357 hci_reinit: 0x4472 009358 set0 mark_ext_patch ,mark 0x4473 009359 bpatch patch1a_0 ,mem_patch1a 0x4474 009360 hjam 0x0 ,core_uart_ctrl 0x4475 009361 jam 0 ,mem_h5rx_ack 0x4476 009362 jam 0 ,mem_h5tx_ack 0x4477 009363 jam 0 ,mem_h5tx_seq 0x4478 009364 setarg mem_h5tx_buf 0x4479 009365 store 2 ,mem_h5tx_wptr 0x447a 009366 store 2 ,mem_h5tx_rptr 0x447b 009367 hstore 2 ,core_uart_twptr 0x447c 009368 hstore 2 ,core_uart_trptrp 0x447d 009369 setarg mem_h5rx_buf 0x447e 009370 hstore 2 ,core_uart_rrptr 0x447f 009371 store 2 ,mem_h5rx_rptr : 009372 hci_init_common: 0x4480 009373 set0 mark_ext_patch ,mark 0x4481 009374 bpatch patch1a_1 ,mem_patch1a 0x4482 009375 hfetch 2 ,core_clkoff 0x4483 009376 set0 clock_off_uart ,pdata 0x4484 009377 hstore 2 ,core_clkoff 0x4485 009378 call uart_set_baud_by_mem 0x4486 009379 hjam uartclk_dpll ,core_uart_clksel 0x4487 009380 hjam uart_ctrl_h4 ,core_uart_ctrl 0x4488 009381 branch hci_init_queue_ack : 009383 hci_sel_init: 0x4489 009384 setarg mem_h5tx_buf_end 0x448a 009385 hstore 2 ,core_uart_teaddr 0x448b 009386 hfetch 1 ,core_gpio_sel1 0x448c 009387 or_into 0x07 ,pdata 0x448d 009388 hstore 1 ,core_gpio_sel1 0x448e 009389 jam 0xff ,mem_ucode_id_local 0x448f 009390 rtn : 009392 hci_reset_uart: 0x4490 009393 hfetch 2 ,core_uart_rwptr 0x4491 009394 hstore 2 ,core_uart_rrptr 0x4492 009395 set1 mark_h5_reset ,mark 0x4493 009396 rtn : 009399 hci_check_bcsp_protocol: 0x4494 009400 hfetch 1 ,core_uart_ctrl 0x4495 009401 isolate1 uart_ctrl_bit_slip_protocol ,pdata 0x4496 009402 rtn : 009404 hci_init_queue_ack: 0x4497 009405 setarg mem_hci_acl_queue_start 0x4498 009406 store 2 ,mem_hci_acl_queue_wptr 0x4499 009407 store 2 ,mem_hci_acl_queue_rptr 0x449a 009408 force param_acl_pktcnt ,temp 0x449b 009409 iadd temp ,pdata 0x449c 009410 iadd temp ,pdata 0x449d 009411 increase 2 ,pdata 0x449e 009412 store 2 ,mem_hci_acl_queue_end 0x449f 009413 setarg 0x00 0x44a0 009414 store 1 ,mem_hci_acl_cnt 0x44a1 009415 store 1 ,mem_hci_acl_queue_wcnt 0x44a2 009416 rtn : 009418 hci_rx_packet: 0x44a3 009419 set0 mark_ext_patch ,mark 0x44a4 009420 bpatch patch1a_2 ,mem_patch1a 0x44a5 009421 hfetch 1 ,core_uart_status 0x44a6 009422 iforce regb 0x44a7 009423 bbit0 uart_status_rx_fifo_empty ,hci_rx_packet_cont 0x44a8 009424 hfetch 2 ,core_uart_rxitems 0x44a9 009425 iforce regc 0x44aa 009426 arg 0x44f ,temp 0x44ab 009427 isub temp ,null 0x44ac 009428 nrtn zero : 009429 hci_rx_packet_cont: 0x44ad 009430 hfetch 2 ,core_uart_rrptr 0x44ae 009431 iforce contru 0x44af 009432 call hci_check_bcsp_protocol 0x44b0 009433 branch hci_rx_bcsp ,true 0x44b1 009434 branch hci_rx_h4 : 009436 hci_send_ack: 0x44b2 009437 call hci_check_bcsp_protocol 0x44b3 009438 branch bcsp_send_ack ,true 0x44b4 009439 rtn : 009441 uart_send_byte: 0x44b5 009442 hfetcht 1 ,core_uart_status 0x44b6 009443 isolate1 6 ,temp 0x44b7 009444 branch uart_send_byte ,true 0x44b8 009445 hstore 1 ,core_uart_txd 0x44b9 009446 rtn : 009449 process_acl_into_queue: 0x44ba 009450 fetcht 2 ,mem_hci_acl_queue_end 0x44bb 009451 fetch 2 ,mem_hci_acl_queue_wptr 0x44bc 009452 iforce contw 0x44bd 009453 deposit contru 0x44be 009454 istore 2 ,contw 0x44bf 009455 deposit contw 0x44c0 009456 store 2 ,mem_hci_acl_queue_wptr 0x44c1 009457 icompare 0xff ,temp 0x44c2 009458 call process_acl_into_queue_loop ,true 0x44c3 009459 fetch 1 ,mem_hci_acl_queue_wcnt 0x44c4 009460 increase 1 ,pdata 0x44c5 009461 store 1 ,mem_hci_acl_queue_wcnt 0x44c6 009462 rtn : 009463 process_acl_into_queue_loop: 0x44c7 009464 setarg mem_hci_acl_queue_start 0x44c8 009465 store 2 ,mem_hci_acl_queue_wptr 0x44c9 009466 rtn : 009469 process_acl_dequeue: 0x44ca 009470 fetch 1 ,mem_hci_acl_queue_wcnt 0x44cb 009471 rtn blank 0x44cc 009472 fetcht 2 ,mem_hci_acl_queue_end 0x44cd 009473 fetch 2 ,mem_hci_acl_queue_rptr 0x44ce 009474 iforce contr 0x44cf 009475 ifetch 2 ,contr 0x44d0 009476 iforce contru 0x44d1 009477 deposit contr 0x44d2 009478 store 2 ,mem_hci_acl_queue_rptr 0x44d3 009479 icompare 0xff ,temp 0x44d4 009480 call process_acl_dequeue_loop ,true 0x44d5 009481 fetch 1 ,mem_hci_acl_queue_wcnt 0x44d6 009482 increase -1 ,pdata 0x44d7 009483 store 1 ,mem_hci_acl_queue_wcnt 0x44d8 009484 force 1 ,pdata 0x44d9 009485 rtn : 009486 process_acl_dequeue_loop: 0x44da 009487 setarg mem_hci_acl_queue_start 0x44db 009488 store 2 ,mem_hci_acl_queue_rptr 0x44dc 009489 rtn : 009491 process_acl: 0x44dd 009492 set0 mark_ext_patch ,mark 0x44de 009493 bpatch patch1a_3 ,mem_patch1a 0x44df 009494 fetch 1 ,mem_hci_acl_queue_wcnt 0x44e0 009495 sub pdata ,2 ,null 0x44e1 009496 branch process_acl_queue_check_ok ,positive 0x44e2 009497 enable user 0x44e3 009498 branch process_send_acl : 009499 process_acl_queue_check_ok: 0x44e4 009500 call hci_send_ack 0x44e5 009501 call process_acl_into_queue : 009502 process_send_acl: 0x44e6 009503 set0 mark_ext_patch ,mark 0x44e7 009504 bpatch patch1a_4 ,mem_patch1a 0x44e8 009505 rtnmark1 mark_tx_l2cap 0x44e9 009506 call process_acl_dequeue 0x44ea 009507 rtn blank 0x44eb 009508 ifetcht 1 ,contru 0x44ec 009509 call context_search_conn_handle2 0x44ed 009510 nrtn zero 0x44ee 009511 ifetch 1 ,contru 0x44ef 009512 rshift4 pdata ,pdata 0x44f0 009513 and pdata ,0x3 ,pdata 0x44f1 009514 nbranch process_send_acl_good_lch ,blank 0x44f2 009515 set1 1 ,pdata : 009516 process_send_acl_good_lch: 0x44f3 009517 set1 2 ,pdata 0x44f4 009518 store 1 ,mem_tx_lch 0x44f5 009519 ifetch 2 ,contru 0x44f6 009520 store 2 ,mem_tx_len 0x44f7 009521 deposit contru 0x44f8 009522 store 2 ,mem_txptr 0x44f9 009523 set1 mark_tx_l2cap ,mark 0x44fa 009524 bmark0 mark_context ,process_acl_ncontext 0x44fb 009525 fetch 1 ,mem_conn_handle 0x44fc 009526 isub temp ,null 0x44fd 009527 nbranch process_acl_ncontext ,zero 0x44fe 009528 fetch 1 ,mem_op 0x44ff 009529 set1 op_txl2cap ,pdata 0x4500 009530 store 1 ,mem_op 0x4501 009531 rtn : 009533 process_acl_ncontext: 0x4502 009534 increase coffset_op ,rega 0x4503 009535 ifetch 1 ,rega 0x4504 009536 set1 op_txl2cap ,pdata 0x4505 009537 istore 1 ,rega 0x4506 009538 rtn : 009543 process_hci_cmd: 0x4507 009544 set0 mark_ext_patch ,mark 0x4508 009545 bpatch patch1a_5 ,mem_patch1a 0x4509 009546 fetch 1 ,mem_hci_cmd 0x450a 009547 branch process_hci_cmd_cont ,blank 0x450b 009548 enable user 0x450c 009549 rtn : 009550 process_hci_cmd_cont: 0x450d 009551 call hci_send_ack 0x450e 009552 ifetch 2 ,contru 0x450f 009553 iforce alarm 0x4510 009554 iforce queue 0x4511 009555 ifetch 1 ,contru 0x4512 009556 iforce temp 0x4513 009557 rshift2 alarm ,pdata 0x4514 009558 rshift8 pdata ,pdata 0x4515 009559 beq hci_ogf_link_control ,phci_grp_link_control 0x4516 009560 beq hci_ogf_link_policy ,phci_grp_link_policy 0x4517 009561 beq hci_ogf_baseband ,phci_grp_baseband 0x4518 009562 beq hci_ogf_info ,phci_grp_info 0x4519 009563 beq hci_ogf_status ,phci_grp_status 0x451a 009564 beq hci_ogf_test ,phci_grp_test 0x451b 009565 beq hci_ogf_vendor_specific ,phci_grp_vendor_specific 0x451c 009566 beq hci_ogf_low_energy ,phci_grp_low_energy 0x451d 009567 rtn : 009570 phci_grp_link_control: 0x451e 009571 set0 mark_ext_patch ,mark 0x451f 009572 bpatch patch1a_6 ,mem_patch1a 0x4520 009573 deposit queue 0x4521 009574 beq hci_inquiry ,phci_inquiry 0x4522 009575 beq hci_inquiry_cancel ,phci_inquiry_cancel 0x4523 009576 beq hci_periodic_inquiry_mode ,hci_normal_reply 0x4524 009577 beq hci_exit_periodic_inquiry_mode ,hci_normal_reply 0x4525 009578 beq hci_create_connection ,phci_create_connection 0x4526 009579 beq hci_disconnect ,phci_disconnect 0x4527 009580 beq hci_add_sco_connection ,hci_normal_reply 0x4528 009581 beq hci_create_connection_cancel ,phci_create_connection_cancel 0x4529 009582 beq hci_accept_connection ,phci_accept_connection 0x452a 009583 beq hci_reject_connection ,phci_reject_connection 0x452b 009584 beq hci_link_key_request_reply ,phci_link_key_request_reply 0x452c 009585 beq hci_link_key_request_negative_reply ,phci_link_key_request_negative_reply 0x452d 009586 beq hci_pin_code_request_reply ,phci_pin_code_request_reply 0x452e 009587 beq hci_pin_code_request_negative_reply ,phci_pin_code_request_negative_reply 0x452f 009588 beq hci_change_connection_packet_type ,phci_change_connection_packet_type 0x4530 009589 beq hci_authentication_requested ,phci_authentication_requested 0x4531 009590 beq hci_set_connection_encryption ,phci_set_connection_encryption 0x4532 009591 beq hci_change_connection_link_key ,hci_normal_reply 0x4533 009592 beq hci_master_link_key ,hci_normal_reply 0x4534 009593 beq hci_remote_name_request ,phci_remote_name_request 0x4535 009594 beq hci_read_remote_supported_features ,phci_read_remote_supported_features 0x4536 009595 beq hci_read_remote_ext_features ,phci_read_remote_ext_features 0x4537 009596 beq hci_read_remote_version_information ,phci_read_remote_version_information 0x4538 009597 beq hci_read_clock_offset ,phci_read_clock_offset 0x4539 009598 beq hci_setup_sco_connection ,phci_setup_sco_connection 0x453a 009599 beq hci_accept_sco_connection ,phci_accept_sco_connection 0x453b 009600 beq hci_io_cap_request_reply ,phci_io_cap_request_reply 0x453c 009601 branch phci_unknown_command : 009604 phci_grp_link_policy: 0x453d 009605 set0 mark_ext_patch ,mark 0x453e 009606 bpatch patch1a_7 ,mem_patch1a 0x453f 009607 deposit queue 0x4540 009608 beq hci_role_discovery ,phci_role_discovery 0x4541 009609 beq hci_write_link_policy_settings ,phci_write_link_policy_settings 0x4542 009610 beq hci_hold_mode ,hci_normal_reply 0x4543 009611 beq hci_sniff_mode ,phci_sniff_mode 0x4544 009612 beq hci_exit_sniff_mode ,phci_exit_sniff_mode 0x4545 009613 beq hci_park_mode ,hci_normal_reply 0x4546 009614 beq hci_exit_park_mode ,hci_normal_reply 0x4547 009615 beq hci_qos_setup ,hci_normal_reply 0x4548 009616 beq hci_switch_role ,phci_switch_role 0x4549 009617 beq hci_read_link_policy_settings ,hci_normal_reply 0x454a 009618 beq hci_read_default_link_policy_settings ,hci_normal_reply 0x454b 009619 beq hci_write_default_link_policy_settings ,hci_normal_reply 0x454c 009620 beq hci_flow_specification ,hci_normal_reply 0x454d 009621 beq hci_sniff_subrating ,phci_sniff_subrating 0x454e 009622 branch phci_unknown_command : 009624 phci_grp_baseband: 0x454f 009625 set0 mark_ext_patch ,mark 0x4550 009626 bpatch patch1b_0 ,mem_patch1b 0x4551 009627 deposit queue 0x4552 009628 beq hci_set_event_mask ,phci_set_event_mask 0x4553 009629 beq hci_reset ,hci_normal_reply 0x4554 009630 beq hci_delete_stored_link_key ,phci_delete_stored_link_key 0x4555 009631 beq hci_write_local_name ,phci_change_local_name 0x4556 009632 beq hci_read_local_name ,phci_read_local_name 0x4557 009633 beq hci_write_page_timeout ,phci_write_page_timeout 0x4558 009634 beq hci_read_scan_enable ,phci_read_scan_enable 0x4559 009635 beq hci_write_scan_enable ,phci_write_scan_enable 0x455a 009636 beq hci_write_page_scan_activity ,phci_write_page_scan_activity 0x455b 009637 beq hci_write_inquiry_scan_activity ,phci_write_inquiry_scan_activity 0x455c 009638 beq hci_write_authentication_enable ,phci_write_authentication_enable 0x455d 009639 beq hci_write_encryption_mode ,phci_write_encryption_mode 0x455e 009640 beq hci_write_class_of_device ,phci_write_class_of_device 0x455f 009641 beq hci_write_voice_setting ,hci_normal_reply 0x4560 009642 beq hci_set_controller_to_host_flow_control ,hci_normal_reply 0x4561 009643 beq hci_host_buffer_size ,hci_normal_reply 0x4562 009644 beq hci_host_num_completed_packets ,phci_host_num_completed 0x4563 009645 beq hci_write_inquiry_scan_type ,hci_normal_reply 0x4564 009646 beq hci_write_inquiry_mode ,hci_normal_reply 0x4565 009647 beq hci_write_page_scan_type ,hci_normal_reply 0x4566 009648 beq hci_read_extended_inquiry_response ,phci_read_ext_inquiry_response 0x4567 009649 beq hci_write_simple_pairing_mode ,phci_write_ssp_mode 0x4568 009650 branch phci_unknown_command : 009652 phci_grp_info: 0x4569 009653 set0 mark_ext_patch ,mark 0x456a 009654 bpatch patch1b_1 ,mem_patch1b 0x456b 009655 deposit queue 0x456c 009656 beq hci_read_local_version_information ,phci_read_local_version_information 0x456d 009657 beq hci_read_local_supported_features ,phci_read_local_supported_features 0x456e 009658 beq hci_read_local_ext_features ,phci_read_local_ext_features 0x456f 009659 beq hci_read_buffer_size ,phci_read_buffer_size 0x4570 009660 beq hci_read_bd_addr ,phci_read_bd_addr 0x4571 009661 branch phci_unknown_command : 009663 phci_grp_status: 0x4572 009664 set0 mark_ext_patch ,mark 0x4573 009665 bpatch patch1b_2 ,mem_patch1b 0x4574 009666 deposit queue 0x4575 009667 beq hci_read_failed_contact_counter ,hci_normal_reply 0x4576 009668 beq hci_reset_failed_contact_counter ,phci_reset_failed_contact_counter 0x4577 009669 beq hci_get_link_quality ,phci_get_link_quality 0x4578 009670 beq hci_read_rssi ,phci_read_rssi 0x4579 009671 beq hci_read_afh_channel_map ,phci_read_afh_channel_map 0x457a 009672 beq hci_read_bd_clock ,phci_read_bd_clock 0x457b 009673 branch phci_unknown_command : 009675 phci_grp_test: 0x457c 009676 set0 mark_ext_patch ,mark 0x457d 009677 bpatch patch1b_3 ,mem_patch1b 0x457e 009678 deposit queue 0x457f 009679 beq hci_read_loopback_mode ,hci_normal_reply 0x4580 009680 beq hci_write_loopback_mode ,hci_normal_reply 0x4581 009681 beq hci_enable_device_under_test_mode ,hci_normal_reply 0x4582 009682 beq hci_write_simple_pairing_debug_mode ,hci_normal_reply 0x4583 009683 branch phci_unknown_command 0x4584 009684 rtn : 009686 phci_grp_vendor_specific: 0x4585 009687 set0 mark_ext_patch ,mark 0x4586 009688 bpatch patch1b_4 ,mem_patch1b 0x4587 009689 deposit queue 0x4588 009690 beq hci_vendor_cmd_reset ,hci_normal_reply 0x4589 009691 beq hci_vendor_cmd_chipid ,phci_grp_vendor_chipid 0x458a 009692 beq hci_vendor_cmd_baud ,phci_grp_vendor_baud 0x458b 009693 beq hci_vendor_cmd_patch ,phci_grp_vendor_patch 0x458c 009694 beq hci_vendor_cmd_patch_done ,phci_grp_vendor_done 0x458d 009695 beq hci_vendor_cmd_echo ,hci_normal_reply 0x458e 009696 beq hci_vendor_cmd_bdaddr ,phci_grp_vendor_bdaddr 0x458f 009697 beq hci_vendor_cmd_enter_lpm ,phci_grp_vendor_enter_lpm 0x4590 009699 beq hci_vendor_cmd_mem ,phci_grp_vendor_mem 0x4591 009700 beq hci_vendor_cmd_eep ,phci_grp_vendor_eep 0x4592 009701 branch hci_normal_reply : 009703 phci_grp_vendor_enter_lpm: 0x4593 009704 call hci_normal_reply 0x4594 009705 call wait_uarttx 0x4595 009706 call gpio_pu_uart_tx : 009707 hci_enter_lpm: 0x4596 009708 call app_put_lpm_wake_lock 0x4597 009709 call app_l2cap_flow_control_enable 0x4598 009710 branch gpio_rx_config_input_with_pu : 009712 hci_exit_lpm: 0x4599 009713 jam hci_rx_ready ,mem_hci_lt_rx_state 0x459a 009714 call app_get_lpm_wake_lock 0x459b 009715 call hci_lpm_init 0x459c 009716 branch app_l2cap_flow_control_disable : 009718 phci_grp_vendor_chipid: 0x459d 009719 call hci_get_cmd_complete_ptr 0x459e 009720 hfetch 2 ,core_chipid 0x459f 009721 istore 2 ,contwu 0x45a0 009722 force 6 ,loopcnt 0x45a1 009723 branch hci_command_complete : 009725 phci_grp_vendor_baud: 0x45a2 009726 ifetch 2 ,contru 0x45a3 009727 store 2 ,mem_baud 0x45a4 009728 hstore 2 ,core_uart_baud 0x45a5 009729 rtn : 009731 phci_grp_vendor_patch: 0x45a6 009733 ifetch 1 ,contru 0x45a7 009734 copy pdata ,temp 0x45a8 009735 hstore 1 ,core_ucode_low 0x45a9 009736 ifetch 1 ,contru 0x45aa 009737 iadd temp ,temp 0x45ab 009738 set1 7 ,pdata 0x45ac 009739 hstore 1 ,core_ucode_ctrl 0x45ad 009740 ifetch 1 ,contru 0x45ae 009741 iadd temp ,temp 0x45af 009742 copy pdata ,loopcnt : 009743 phci_grp_vendor_patch_loop: 0x45b0 009744 ifetch 1 ,contru 0x45b1 009745 hstore 1 ,core_ucode_data 0x45b2 009746 iadd temp ,temp 0x45b3 009747 loop phci_grp_vendor_patch_loop 0x45b4 009748 and temp ,0xff ,temp 0x45b5 009749 ifetch 1 ,contru 0x45b6 009750 isub temp ,null 0x45b7 009751 nbranch phci_grp_vendor_patch_bad ,zero 0x45b8 009752 branch hci_normal_reply : 009754 phci_grp_vendor_done: 0x45b9 009755 arg 0x20 ,loopcnt 0x45ba 009756 arg mem_patch00 ,contw 0x45bb 009757 arg 0 ,temp : 009758 phci_grp_vendor_done_loop: 0x45bc 009759 ifetch 1 ,contru 0x45bd 009760 istore 1 ,contw 0x45be 009761 iadd temp ,temp 0x45bf 009762 loop phci_grp_vendor_done_loop 0x45c0 009763 and temp ,0xff ,temp 0x45c1 009764 ifetch 1 ,contru 0x45c2 009765 isub temp ,null 0x45c3 009766 nbranch phci_grp_vendor_patch_bad ,zero 0x45c4 009767 hjam 0 ,core_ucode_ctrl 0x45c5 009768 call hci_normal_reply 0x45c6 009769 call h4_rx_discard_packet 0x45c7 009770 branch soft_reset : 009772 phci_grp_vendor_patch_bad: 0x45c8 009773 hjam 0 ,core_ucode_ctrl 0x45c9 009774 branch start : 009776 phci_grp_vendor_bdaddr: 0x45ca 009777 ifetch 6 ,contru 0x45cb 009778 store 6 ,mem_lap 0x45cc 009779 branch hci_normal_reply : 009782 phci_grp_vendor_mem: 0x45cd 009783 ifetch 1 ,contru 0x45ce 009784 store 1 ,mem_hci_curr_len 0x45cf 009785 copy pdata ,loopcnt 0x45d0 009786 ifetch 2 ,contru 0x45d1 009787 store 2 ,mem_hci_curr_target 0x45d2 009788 copy pdata ,contw 0x45d3 009789 call uart_copy_rx_bytes 0x45d4 009790 branch hci_normal_reply : 009793 phci_grp_vendor_eep: 0x45d5 009794 ifetch 1 ,contru 0x45d6 009795 store 1 ,mem_hci_curr_len 0x45d7 009796 copy pdata ,loopcnt 0x45d8 009797 ifetch 2 ,contru 0x45d9 009798 store 2 ,mem_hci_curr_target 0x45da 009799 arg mem_l2cap_rxbuff1 ,contw 0x45db 009800 call uart_copy_rx_bytes 0x45dc 009801 fetcht 1 ,mem_hci_curr_len 0x45dd 009802 arg mem_l2cap_rxbuff1 ,rega 0x45de 009803 fetch 2 ,mem_hci_curr_target 0x45df 009804 branch iicd_write_ota_data : 009810 phci_grp_low_energy: 0x45e0 009811 set0 mark_ext_patch ,mark 0x45e1 009812 bpatch patch1b_5 ,mem_patch1b 0x45e2 009813 deposit queue 0x45e3 009814 beq hci_le_set_event_mask ,hci_normal_reply 0x45e4 009815 beq hci_le_read_buffer_size ,phci_le_read_buffer_size 0x45e5 009816 beq hci_le_read_local_supported_features ,phci_le_read_local_supported_features 0x45e6 009817 beq hci_le_set_advertising_parameters ,phci_le_set_adv_param 0x45e7 009818 beq hci_le_set_advertising_data ,phci_le_set_adv_data 0x45e8 009819 beq hci_le_set_scan_response_data ,phci_le_set_scan_response_data 0x45e9 009820 beq hci_le_set_advertise_enable ,phci_le_set_adv_enable 0x45ea 009821 beq hci_le_set_scan_parameters ,phci_le_set_scan_param 0x45eb 009822 beq hci_le_set_scan_enable ,phci_le_set_scan_enable 0x45ec 009823 beq hci_le_create_connection ,phci_le_create_conn 0x45ed 009824 beq hci_le_create_connection_cancel ,phci_le_create_conn_cancel 0x45ee 009825 beq hci_le_read_channel_map ,phci_le_read_channel_map 0x45ef 009826 beq hci_le_read_remote_used_features ,hci_command_status 0x45f0 009827 beq hci_le_connection_update ,hci_normal_reply 0x45f1 009828 branch phci_unknown_command 0x45f2 009829 rtn : 009830 phci_le_read_buffer_size: 0x45f3 009831 call hci_get_cmd_complete_ptr 0x45f4 009832 setarg 0 0x45f5 009833 istore 3 ,contwu 0x45f6 009834 force 0x07 ,loopcnt 0x45f7 009835 branch hci_command_complete : 009837 phci_le_read_local_supported_features: 0x45f8 009838 call hci_get_cmd_complete_ptr 0x45f9 009839 setarg 1 0x45fa 009840 istore 2 ,contwu 0x45fb 009841 setarg 0 0x45fc 009842 istore 6 ,contwu 0x45fd 009843 force 0x0c ,loopcnt 0x45fe 009844 branch hci_command_complete : 009846 phci_le_set_adv_param: 0x45ff 009847 arg 15 ,loopcnt 0x4600 009848 arg mem_le_adv_param ,contw 0x4601 009849 call uart_copy_rx_bytes 0x4602 009850 branch hci_normal_reply : 009852 phci_le_set_adv_data: 0x4603 009853 arg 32 ,loopcnt 0x4604 009854 arg mem_le_adv_data_len ,contw 0x4605 009855 call uart_copy_rx_bytes 0x4606 009856 branch hci_normal_reply : 009858 phci_le_set_scan_response_data: 0x4607 009859 arg 32 ,loopcnt 0x4608 009860 arg mem_le_scan_data_len ,contw 0x4609 009861 call uart_copy_rx_bytes 0x460a 009862 branch hci_normal_reply : 009864 phci_le_set_adv_enable: 0x460b 009865 ifetch 1 ,contru 0x460c 009866 store 1 ,mem_le_adv_enable 0x460d 009867 branch hci_normal_reply : 009869 phci_le_set_scan_param: 0x460e 009870 ifetch 7 ,contru 0x460f 009871 store 7 ,mem_le_scan_params 0x4610 009872 branch hci_normal_reply : 009874 phci_le_set_scan_enable: 0x4611 009875 ifetch 1 ,contru 0x4612 009876 store 1 ,mem_le_scan_enable 0x4613 009877 branch hci_normal_reply : 009879 phci_le_create_conn: 0x4614 009880 ifetch 4 ,contru 0x4615 009881 store 4 ,mem_le_scan_interval 0x4616 009882 ifetch 1 ,contru 0x4617 009883 store 1 ,mem_le_scan_filter_policy 0x4618 009884 arg 20 ,loopcnt 0x4619 009885 arg mem_le_conn_param ,contw 0x461a 009886 call uart_copy_rx_bytes 0x461b 009887 jam 1 ,mem_le_scan_enable 0x461c 009888 fetch 1 ,mem_le_conn_own_addr_type 0x461d 009889 store 1 ,mem_le_scan_own_addr_type 0x461e 009890 fetch 2 ,mem_le_conn_interval_max 0x461f 009891 store 2 ,mem_le_conn_interval 0x4620 009892 fetch 2 ,mem_le_conn_latency 0x4621 009893 store 2 ,mem_le_slave_latency 0x4622 009894 fetch 2 ,mem_le_conn_superto 0x4623 009895 store 2 ,mem_le_superto 0x4624 009896 jam hci_cmd_le_create_conn ,mem_hci_cmd 0x4625 009897 branch hci_command_status : 009899 phci_le_create_conn_cancel: 0x4626 009901 branch hci_normal_reply : 009903 phci_le_read_channel_map: 0x4627 009904 call hci_get_cmd_complete_ptr 0x4628 009905 ifetch 2 ,contru 0x4629 009906 istore 2 ,contwu 0x462a 009907 setarg 0x1fffff 0x462b 009908 istore 5 ,contwu 0x462c 009909 force 0x0b ,loopcnt 0x462d 009910 branch hci_command_complete : 009915 phci_host_num_completed: 0x462e 009916 ifetch 3 ,contru 0x462f 009917 ifetcht 3 ,contru 0x4630 009918 fetch 2 ,mem_acl_credits 0x4631 009919 iadd temp ,pdata 0x4632 009920 store 2 ,mem_acl_credits 0x4633 009921 rtn : 009923 phci_inquiry: 0x4634 009924 ifetch 3 ,contru 0x4635 009925 store 3 ,mem_glap : 009926 do_at_inquiry0: 0x4636 009927 jam hci_cmd_inquiry ,mem_hci_cmd 0x4637 009928 ifetch 1 ,contru 0x4638 009929 arg 1600 ,temp 0x4639 009930 imul32 temp ,pdata 0x463a 009931 arg 0xffff ,temp 0x463b 009932 isub temp ,null 0x463c 009933 nbranch phci_inquiry_nowrap ,positive 0x463d 009934 deposit temp : 009935 phci_inquiry_nowrap: 0x463e 009936 force inquiry_length_timer ,queue 0x463f 009937 call timer_init 0x4640 009938 fetch 1 ,mem_at_using_flag 0x4641 009939 bbit1 at_flag_inq ,at_rev_end 0x4642 009940 branch hci_command_status : 009943 phci_inquiry_cancel: 0x4643 009944 jam hci_cmd_inquiry_cancel ,mem_hci_cmd 0x4644 009945 branch hci_normal_reply : 009947 phci_create_connection: 0x4645 009948 call phci_read_plap 0x4646 009949 ifetch 2 ,contru 0x4647 009950 store 2 ,mem_packet_type 0x4648 009951 ifetch 2 ,contru 0x4649 009952 store 1 ,mem_page_mode 0x464a 009953 call phci_read_clock 0x464b 009954 ifetch 1 ,contru 0x464c 009955 store 1 ,mem_allow_switch 0x464d 009956 jam hci_cmd_create_conn ,mem_hci_cmd 0x464e 009957 branch hci_command_status : 009960 phci_disconnect: 0x464f 009961 jam hci_cmd_disconn ,mem_hci_cmd 0x4650 009962 ifetch 2 ,contru 0x4651 009963 store 1 ,mem_hci_conn_handle 0x4652 009964 ifetch 1 ,contru 0x4653 009965 store 1 ,mem_disconn_reason_send 0x4654 009966 jam hci_error_connection_terminated_by_local_host ,mem_hci_disconn_reason 0x4655 009967 fetch 1 ,mem_hci_conn_handle 0x4656 009968 fetcht 1 ,mem_sco_handle 0x4657 009969 isub temp ,null 0x4658 009970 nbranch hci_command_status ,zero 0x4659 009971 jam hci_cmd_disconn_sco ,mem_hci_cmd 0x465a 009972 fetch 1 ,mem_sco_asso_handle 0x465b 009973 store 1 ,mem_hci_conn_handle 0x465c 009974 branch hci_command_status : 009976 phci_create_connection_cancel: 0x465d 009977 call hci_get_cmd_complete_ptr 0x465e 009978 call hci_write_plap 0x465f 009979 force 10 ,loopcnt 0x4660 009980 call hci_command_complete 0x4661 009982 jam hci_cmd_detach ,mem_hci_cmd 0x4662 009983 force hci_error_no_connection ,temp 0x4663 009984 branch hci_send_connection_error : 009986 phci_link_key_request_reply: 0x4664 009987 call phci_read_plap 0x4665 009988 arg mem_link_key ,contw 0x4666 009989 force 16 ,loopcnt 0x4667 009990 call uart_copy_rx_bytes 0x4668 009991 jam hci_cmd_linkkey ,mem_hci_cmd 0x4669 009992 branch phci_pin_code_reply : 009994 phci_link_key_request_negative_reply: 0x466a 009995 call phci_read_plap 0x466b 009996 jam hci_cmd_nokey ,mem_hci_cmd 0x466c 009997 branch phci_pin_code_reply : 009999 phci_pin_code_request_reply: 0x466d 010000 call phci_read_plap 0x466e 010001 ifetch 1 ,contru 0x466f 010002 store 1 ,mem_pin_length 0x4670 010003 iforce loopcnt 0x4671 010004 arg mem_pin ,contw 0x4672 010005 call uart_copy_rx_bytes 0x4673 010006 jam hci_cmd_pair ,mem_hci_cmd 0x4674 010007 branch phci_pin_code_reply : 010009 phci_pin_code_request_negative_reply: 0x4675 010010 call phci_read_plap 0x4676 010011 jam hci_cmd_nopair ,mem_hci_cmd : 010012 phci_pin_code_reply: 0x4677 010013 call hci_get_cmd_complete_ptr 0x4678 010014 call hci_write_plap 0x4679 010015 force 10 ,loopcnt 0x467a 010016 branch hci_command_complete : 010018 phci_io_cap_request_reply: 0x467b 010020 increase 6 ,contru 0x467c 010021 ifetch 3 ,contru 0x467d 010022 store 3 ,mem_sp_iocap_local 0x467e 010023 fetch 1 ,mem_master_sp_state 0x467f 010024 beq sp_master_stat_start_done ,phci_io_cap_request_reply_master 0x4680 010025 beq sp_stat_key_send ,phci_io_cap_request_reply_master 0x4681 010026 jam hci_cmd_io_cap ,mem_hci_cmd 0x4682 010027 branch phci_io_cap_request_reply_commom : 010028 phci_io_cap_request_reply_master: 0x4683 010029 jam sp_flag_commit ,mem_master_sp_flag : 010030 phci_io_cap_request_reply_commom: 0x4684 010031 call hci_get_cmd_complete_ptr 0x4685 010032 call hci_write_plap 0x4686 010033 force 10 ,loopcnt 0x4687 010034 branch hci_command_complete : 010037 phci_authentication_requested: 0x4688 010038 call phci_read_handle 0x4689 010039 jam hci_cmd_auth ,mem_hci_cmd 0x468a 010040 branch hci_command_status : 010042 phci_set_connection_encryption: 0x468b 010043 call phci_read_handle 0x468c 010044 ifetch 1 ,contru 0x468d 010045 increase hci_cmd_stopencrypt ,pdata 0x468e 010046 store 1 ,mem_hci_cmd 0x468f 010047 branch hci_command_status : 010049 phci_remote_name_request: 0x4690 010050 call phci_read_plap 0x4691 010051 ifetch 2 ,contru 0x4692 010052 store 1 ,mem_page_mode 0x4693 010053 call phci_read_clock 0x4694 010054 jam hci_cmd_remote_name_req ,mem_hci_cmd 0x4695 010055 branch hci_command_status : 010057 phci_read_remote_ext_features: 0x4696 010058 ifetch 2 ,contru 0x4697 010059 ifetch 1 ,contru 0x4698 010060 store 1 ,mem_ext_features_page 0x4699 010061 jam hci_cmd_remote_ext_features_req ,mem_hci_cmd 0x469a 010062 branch hci_command_status : 010064 phci_read_remote_supported_features: 0x469b 010066 fetch 1 ,mem_conn_handle 0x469c 010067 force hci_error_no_connection ,rega 0x469d 010068 branch hci_command_status_err ,blank 0x469e 010069 call phci_read_handle 0x469f 010070 jam hci_cmd_remote_feature_req ,mem_hci_cmd 0x46a0 010071 branch hci_command_status : 010074 phci_read_remote_version_information: 0x46a1 010076 fetch 1 ,mem_conn_handle 0x46a2 010077 force hci_error_no_connection ,rega 0x46a3 010078 branch hci_command_status_err ,blank 0x46a4 010079 call phci_read_handle 0x46a5 010080 jam hci_cmd_remote_version_req ,mem_hci_cmd 0x46a6 010081 branch hci_command_status : 010084 phci_read_clock_offset: 0x46a7 010085 call phci_status_reply_temp 0x46a8 010086 force hci_event_read_clock_offset_complete ,queue 0x46a9 010087 force 5 ,loopcnt 0x46aa 010088 branch hci_send_event : 010090 phci_setup_sco_connection: 0x46ab 010091 call phci_read_handle 0x46ac 010092 increase 10 ,contru 0x46ad 010093 ifetch 2 ,contru 0x46ae 010094 store 2 ,mem_voice_setting 0x46af 010095 ifetch 1 ,contru 0x46b0 010096 store 1 ,mem_retransmission_effort 0x46b1 010097 ifetch 2 ,contru 0x46b2 010098 store 2 ,mem_sco_ptype 0x46b3 010099 jam 2 ,mem_air_mode 0x46b4 010100 jam hci_cmd_setup_sco ,mem_hci_cmd 0x46b5 010101 branch hci_command_status : 010103 phci_accept_sco_connection: 0x46b6 010104 jam hci_cmd_accept_sco_conn ,mem_hci_cmd 0x46b7 010105 branch hci_command_status : 010109 phci_read_local_name: 0x46b8 010110 call hci_get_cmd_complete_ptr 0x46b9 010111 arg mem_local_name ,contr 0x46ba 010112 sub contr ,0xff ,loopcnt 0x46bb 010113 call uart_copy_tx_bytes 0x46bc 010114 force 0 ,pdata 0x46bd 010115 sub contr ,mem_local_name ,loopcnt 0x46be 010116 increase 0xf8 ,loopcnt 0x46bf 010117 call uart_write_bytes 0x46c0 010118 force 0xfc ,loopcnt 0x46c1 010119 branch hci_command_complete : 010121 phci_change_local_name: 0x46c2 010122 arg mem_local_name ,contw 0x46c3 010123 sub contw ,0xff ,loopcnt : 010124 phci_change_local_name_loop: 0x46c4 010125 ifetch 1 ,contru 0x46c5 010126 istore 1 ,contw 0x46c6 010127 branch phci_write_local_name_end ,blank 0x46c7 010128 loop phci_change_local_name_loop : 010129 phci_write_local_name_end: 0x46c8 010130 sub contw ,mem_local_name ,pdata 0x46c9 010131 sub pdata ,0 ,pdata 0x46ca 010132 store 1 ,mem_local_name_length 0x46cb 010133 branch hci_normal_reply : 010135 phci_role_discovery: 0x46cc 010136 call hci_get_cmd_complete_ptr 0x46cd 010137 call hci_write_handle 0x46ce 010138 force 0 ,pdata 0x46cf 010139 nsetflag master ,0 ,pdata 0x46d0 010140 istore 1 ,contwu 0x46d1 010141 force 7 ,loopcnt 0x46d2 010142 arg 0x809 ,alarm 0x46d3 010143 call hci_command_complete 0x46d4 010144 branch cmd_exit 0x46d5 010145 jam hci_cmd_role_discovery ,mem_hci_cmd 0x46d6 010146 rtn : 010149 phci_write_link_policy_settings: 0x46d7 010150 call phci_copy_handle 0x46d8 010151 force 6 ,loopcnt 0x46d9 010152 branch hci_command_complete : 010155 phci_delete_stored_link_key: 0x46da 010156 branch hci_normal_reply : 010158 phci_write_page_timeout: 0x46db 010159 ifetch 2 ,contru 0x46dc 010160 store 2 ,mem_page_to 0x46dd 010161 branch hci_normal_reply : 010164 phci_write_scan_enable: 0x46de 010165 ifetch 1 ,contru 0x46df 010166 store 1 ,mem_scan_mode 0x46e0 010167 branch hci_normal_reply : 010169 phci_write_page_scan_activity: 0x46e1 010170 ifetch 2 ,contru 0x46e2 010171 store 2 ,mem_pscan_interval 0x46e3 010172 ifetch 2 ,contru 0x46e4 010173 store 2 ,mem_pscan_window 0x46e5 010174 branch hci_normal_reply : 010176 phci_write_inquiry_scan_activity: 0x46e6 010177 ifetch 2 ,contru 0x46e7 010178 store 2 ,mem_iscan_interval 0x46e8 010179 ifetch 2 ,contru 0x46e9 010180 store 2 ,mem_iscan_window 0x46ea 010181 branch hci_normal_reply : 010183 phci_write_encryption_mode: 0x46eb 010184 branch hci_normal_reply : 010187 phci_write_authentication_enable: 0x46ec 010188 ifetch 1 ,contru 0x46ed 010189 store 1 ,mem_auth_enable 0x46ee 010190 branch hci_normal_reply : 010192 phci_write_class_of_device: 0x46ef 010193 ifetch 3 ,contru 0x46f0 010194 store 3 ,mem_class 0x46f1 010195 branch hci_normal_reply : 010200 phci_read_ext_inquiry_response: 0x46f2 010201 deposit temp 0x46f3 010202 branch hci_normal_reply ,blank 0x46f4 010203 call hci_get_payload_ptr 0x46f5 010204 force 0x1 ,pdata 0x46f6 010205 istore 1 ,contwu 0x46f7 010206 deposit alarm 0x46f8 010207 istore 2 ,contwu 0x46f9 010208 force hci_error_invalid_hci_command_parameters ,pdata 0x46fa 010209 istore 1 ,contwu 0x46fb 010210 setarg 0 0x46fc 010211 increase 0xf1 ,loopcnt 0x46fd 010212 call uart_write_bytes 0x46fe 010214 force hci_event_command_complete ,queue 0x46ff 010215 force 0xf5 ,loopcnt 0x4700 010216 branch hci_send_event : 010220 phci_write_ssp_mode: 0x4701 010221 ifetch 1 ,contru 0x4702 010222 ncall ssp_enable ,blank 0x4703 010223 call ssp_disable ,blank 0x4704 010224 branch hci_normal_reply : 010226 phci_read_scan_enable: 0x4705 010227 call hci_get_cmd_complete_ptr 0x4706 010228 fetch 1 ,mem_scan_mode 0x4707 010229 istore 1 ,contwu 0x4708 010230 force 5 ,loopcnt 0x4709 010231 branch hci_command_complete : 010233 phci_read_local_version_information: 0x470a 010234 call hci_get_cmd_complete_ptr 0x470b 010235 fetch 8 ,mem_hci_version 0x470c 010236 istore 8 ,contwu 0x470d 010237 force 12 ,loopcnt 0x470e 010238 branch hci_command_complete : 010240 phci_read_local_supported_features: 0x470f 010241 call hci_get_cmd_complete_ptr 0x4710 010242 fetch 8 ,mem_features 0x4711 010243 istore 8 ,contwu 0x4712 010244 force 12 ,loopcnt 0x4713 010245 branch hci_command_complete : 010247 phci_read_local_ext_features: 0x4714 010248 call hci_get_cmd_complete_ptr 0x4715 010249 setarg 0x0101 0x4716 010250 istore 2 ,contwu 0x4717 010251 setarg 0x01 0x4718 010252 istore 8 ,contwu 0x4719 010253 force 14 ,loopcnt 0x471a 010254 branch hci_command_complete : 010256 phci_read_buffer_size: 0x471b 010257 call hci_get_cmd_complete_ptr 0x471c 010258 fetch 7 ,mem_acl_pktlen 0x471d 010259 istore 7 ,contwu 0x471e 010260 force 11 ,loopcnt 0x471f 010261 branch hci_command_complete : 010263 phci_read_bd_addr: 0x4720 010264 call hci_get_cmd_complete_ptr 0x4721 010265 fetch 6 ,mem_lap 0x4722 010266 istore 6 ,contwu 0x4723 010267 force 10 ,loopcnt 0x4724 010268 branch hci_command_complete : 010270 phci_set_event_mask: 0x4725 010271 branch hci_normal_reply : 010274 phci_reset_failed_contact_counter: 0x4726 010275 branch hci_normal_reply : 010276 phci_get_link_quality: 0x4727 010277 call hci_get_cmd_complete_ptr 0x4728 010278 call hci_write_handle 0x4729 010279 setarg 0xff 0x472a 010280 istore 1 ,contwu 0x472b 010281 force 7 ,loopcnt 0x472c 010282 branch hci_command_complete : 010284 phci_read_rssi: 0x472d 010285 call hci_get_cmd_complete_ptr 0x472e 010286 call hci_write_handle 0x472f 010287 setarg 0x00 0x4730 010288 istore 1 ,contwu 0x4731 010289 force 7 ,loopcnt 0x4732 010290 branch hci_command_complete : 010292 phci_read_afh_channel_map: 0x4733 010293 set0 mark_ext_patch ,mark 0x4734 010294 bpatch patch1b_6 ,mem_patch1b 0x4735 010295 branch hci_normal_reply : 010296 phci_read_bd_clock: 0x4736 010297 set0 mark_ext_patch ,mark 0x4737 010298 bpatch patch1b_7 ,mem_patch1b 0x4738 010299 branch hci_normal_reply : 010304 phci_accept_connection: 0x4739 010305 call phci_read_plap 0x473a 010306 jam hci_cmd_accept_conn ,mem_hci_cmd 0x473b 010307 ifetch 1 ,contru 0x473c 010308 beq 1 ,hci_command_status 0x473d 010309 jam hci_cmd_accept_with_switch ,mem_hci_cmd 0x473e 010310 branch hci_command_status : 010312 phci_reject_connection: 0x473f 010313 branch phci_accept_connection 0x4740 010314 call phci_read_plap 0x4741 010315 jam hci_cmd_reject_conn ,mem_hci_cmd 0x4742 010316 branch hci_normal_reply : 010318 phci_change_connection_packet_type: 0x4743 010319 call hci_command_status 0x4744 010320 call hci_get_payload_ptr 0x4745 010321 setarg 0 0x4746 010322 istore 1 ,contwu 0x4747 010323 ifetch 4 ,contru 0x4748 010324 istore 4 ,contwu 0x4749 010325 force 8 ,loopcnt 0x474a 010326 arg hci_event_connection_packet_type_changed ,queue 0x474b 010327 arg 5 ,loopcnt 0x474c 010328 branch hci_send_event : 010330 phci_unknown_command: 0x474d 010331 force hci_error_unknown_hci_command ,rega 0x474e 010332 branch hci_command_status_err : 010334 phci_sniff_mode: 0x474f 010337 call phci_read_handle 0x4750 010338 ifetch 2 ,contru 0x4751 010339 store 2 ,mem_sniff_param_interval 0x4752 010340 ifetch 2 ,contru 0x4753 010341 store 2 ,mem_hci_sniff_min_interval 0x4754 010342 ifetch 2 ,contru 0x4755 010343 store 2 ,mem_sniff_param_attempt 0x4756 010344 ifetch 2 ,contru 0x4757 010345 store 2 ,mem_sniff_param_timeout 0x4758 010346 jam hci_cmd_in_sniff ,mem_hci_cmd 0x4759 010347 branch hci_command_status : 010349 phci_exit_sniff_mode: 0x475a 010350 call phci_read_handle 0x475b 010351 call exit_sniff 0x475c 010352 branch hci_command_status : 010354 exit_sniff: 0x475d 010355 jam hci_cmd_exit_sniff ,mem_hci_cmd 0x475e 010356 rtn : 010358 phci_sniff_subrating: 0x475f 010359 branch hci_normal_reply : 010361 phci_switch_role: 0x4760 010362 call phci_read_plap 0x4761 010363 jam hci_cmd_role_switch ,mem_hci_cmd 0x4762 010364 branch hci_command_status : 010366 phci_read_plap: 0x4763 010367 ifetch 6 ,contru 0x4764 010368 store 6 ,mem_hci_plap 0x4765 010369 rtn : 010371 phci_read_handle: 0x4766 010372 ifetch 2 ,contru 0x4767 010373 store 1 ,mem_hci_conn_handle 0x4768 010374 rtn : 010376 phci_copy_handle: 0x4769 010377 call phci_read_handle 0x476a 010378 call hci_get_cmd_complete_ptr 0x476b 010379 fetch 1 ,mem_hci_conn_handle 0x476c 010380 istore 2 ,contwu 0x476d 010381 rtn : 010385 phci_status_reply_temp: 0x476e 010386 call phci_read_handle 0x476f 010387 call hci_command_status 0x4770 010388 call hci_get_payload_ptr 0x4771 010389 force 0 ,pdata 0x4772 010390 istore 1 ,contwu 0x4773 010391 fetch 1 ,mem_hci_conn_handle 0x4774 010392 istore 2 ,contwu 0x4775 010393 rtn : 010395 phci_read_clock: 0x4776 010396 ifetch 2 ,contru 0x4777 010397 iadd clkn_bt ,pdata 0x4778 010398 and_into 0x1fc ,pdata 0x4779 010399 store 4 ,mem_page_clk 0x477a 010400 rtn : 010402 hci_inquiry_reply: 0x477b 010403 set0 mark_ext_patch ,mark 0x477c 010404 bpatch patch1c_0 ,mem_patch1c 0x477d 010405 fetch 1 ,mem_rp_packets 0x477e 010406 sub pdata ,2 ,null 0x477f 010407 nrtn positive 0x4780 010408 fetcht 6 ,extm_lap 0x4781 010409 call context_search_plap2 0x4782 010410 rtn zero 0x4783 010411 call hci_get_packet_ptr 0x4784 010412 setarg 0x10f22 0x4785 010413 istore 3 ,contwu 0x4786 010414 fetch 6 ,extm_lap 0x4787 010415 istore 6 ,contwu 0x4788 010416 fetch 1 ,extm_fhs_misc 0x4789 010417 copy pdata ,temp 0x478a 010418 rshift3 pdata ,pdata 0x478b 010419 rshift3 pdata ,pdata 0x478c 010420 istore 1 ,contwu 0x478d 010421 copy temp ,pdata 0x478e 010422 and pdata ,0x30 ,pdata 0x478f 010423 rshift3 pdata ,pdata 0x4790 010424 rshift pdata ,pdata 0x4791 010425 istore 1 ,contwu 0x4792 010426 fetch 3 ,extm_class 0x4793 010427 istore 3 ,contwu 0x4794 010428 fetch 4 ,mem_clke_bt 0x4795 010429 isub clkn_bt ,pdata 0x4796 010430 istore 2 ,contwu 0x4797 010431 setarg 0xc8 0x4798 010432 istore 1 ,contwu 0x4799 010433 force 15 ,loopcnt 0x479a 010434 branch hci_send_event_raw : 010436 hci_inquiry_reply_eir: 0x479b 010437 set0 mark_ext_patch ,mark 0x479c 010438 bpatch patch1c_1 ,mem_patch1c 0x479d 010439 force 540 ,temp 0x479e 010440 fetch 2 ,mem_h5tx_free 0x479f 010441 isub temp ,null 0x47a0 010442 nrtn positive 0x47a1 010443 fetcht 3 ,mem_extm_uap_restore 0x47a2 010444 fetch 3 ,extm_uap 0x47a3 010445 isub temp ,null 0x47a4 010446 rtn zero 0x47a5 010447 rtn blank 0x47a6 010448 store 3 ,mem_extm_uap_restore 0x47a7 010449 fetch 1 ,mem_rp_packets 0x47a8 010450 sub pdata ,2 ,null 0x47a9 010451 nrtn positive 0x47aa 010452 fetcht 6 ,extm_lap 0x47ab 010453 call context_search_plap2 0x47ac 010454 rtn zero 0x47ad 010455 call hci_eir_reply 0x47ae 010456 force 15 ,temp 0x47af 010457 fetch 1 ,mem_rxbuf + 1 0x47b0 010458 bne 0x09 ,hci_inquiry_reply_eir_end 0x47b1 010459 fetch 1 ,mem_rxbuf 0x47b2 010460 branch hci_inquiry_reply_eir_end ,blank 0x47b3 010461 iforce loopcnt 0x47b4 010462 istore 1 ,contwu 0x47b5 010463 iadd temp ,temp 0x47b6 010464 increase 1 ,temp 0x47b7 010465 arg mem_rxbuf + 1 ,contr : 010467 hci_inquiry_name_loop: 0x47b8 010468 ifetch 1 ,contr 0x47b9 010469 istore 1 ,contwu 0x47ba 010470 loop hci_inquiry_name_loop : 010471 hci_inquiry_other_rtn_loop: 0x47bb 010472 ifetch 1 ,contr 0x47bc 010473 branch hci_inquiry_reply_eir_end ,blank 0x47bd 010474 iforce loopcnt 0x47be 010475 istore 1 ,contwu 0x47bf 010476 iadd temp ,temp 0x47c0 010477 increase 1 ,temp : 010478 hci_inquiry_other_loop: 0x47c1 010479 ifetch 1 ,contr 0x47c2 010480 istore 1 ,contwu 0x47c3 010481 loop hci_inquiry_other_loop 0x47c4 010482 branch hci_inquiry_other_rtn_loop : 010483 hci_inquiry_reply_eir_end: 0x47c5 010484 sub temp ,0xff ,pdata 0x47c6 010485 iforce loopcnt : 010486 hci_inquiry_fill_zero: 0x47c7 010487 setarg 0x00 0x47c8 010488 istore 1 ,contwu 0x47c9 010489 loop hci_inquiry_fill_zero 0x47ca 010490 force 0xff ,loopcnt 0x47cb 010491 branch hci_send_event_raw : 010493 hci_eir_reply: 0x47cc 010494 set0 mark_ext_patch ,mark 0x47cd 010495 bpatch patch1c_2 ,mem_patch1c 0x47ce 010496 call hci_get_packet_ptr 0x47cf 010497 setarg 0x1ff2f 0x47d0 010498 istore 3 ,contwu 0x47d1 010499 fetch 6 ,extm_lap 0x47d2 010500 istore 6 ,contwu 0x47d3 010501 fetch 1 ,extm_fhs_misc 0x47d4 010502 copy pdata ,temp 0x47d5 010503 rshift3 pdata ,pdata 0x47d6 010504 rshift3 pdata ,pdata 0x47d7 010505 istore 1 ,contwu 0x47d8 010506 copy temp ,pdata 0x47d9 010507 and pdata ,0x30 ,pdata 0x47da 010508 rshift3 pdata ,pdata 0x47db 010509 rshift pdata ,pdata 0x47dc 010510 istore 1 ,contwu 0x47dd 010511 fetch 3 ,extm_class 0x47de 010512 istore 3 ,contwu 0x47df 010513 fetch 4 ,mem_clke_bt 0x47e0 010514 isub clkn_bt ,pdata 0x47e1 010515 istore 2 ,contwu 0x47e2 010516 setarg 0xc8 0x47e3 010517 istore 1 ,contwu 0x47e4 010518 rtn : 010520 hci_send_remote_features: 0x47e5 010521 set0 mark_ext_patch ,mark 0x47e6 010522 bpatch patch1c_3 ,mem_patch1c 0x47e7 010523 fetch 1 ,mem_device_option 0x47e8 010524 rtnne dvc_op_hci 0x47e9 010525 call hci_write_handle3 0x47ea 010526 istoret 8 ,contwu 0x47eb 010527 force 11 ,loopcnt 0x47ec 010528 force hci_event_read_remote_features_complete ,queue 0x47ed 010529 branch hci_send_event : 010531 hci_send_remote_ext_features_notification: 0x47ee 010532 set0 mark_ext_patch ,mark 0x47ef 010533 bpatch patch1c_4 ,mem_patch1c 0x47f0 010534 fetch 1 ,mem_device_option 0x47f1 010535 rtnne dvc_op_hci 0x47f2 010537 call hci_get_payload_ptr 0x47f3 010538 fetch 6 ,mem_plap 0x47f4 010539 istore 6 ,contwu 0x47f5 010540 istoret 8 ,contwu 0x47f6 010541 force 14 ,loopcnt 0x47f7 010542 force hci_event_remote_host_supported_features_notification ,queue 0x47f8 010543 branch hci_send_event : 010545 hci_send_remote_ext_features_event: 0x47f9 010546 set0 mark_ext_patch ,mark 0x47fa 010547 bpatch patch1c_5 ,mem_patch1c 0x47fb 010548 fetch 1 ,mem_device_option 0x47fc 010549 rtnne dvc_op_hci 0x47fd 010551 call hci_write_handle3 0x47fe 010552 fetch 1 ,mem_ext_features_page 0x47ff 010553 istore 1 ,contwu 0x4800 010554 setarg 1 0x4801 010555 istore 1 ,contwu 0x4802 010556 istoret 8 ,contwu 0x4803 010557 force 13 ,loopcnt 0x4804 010558 force hci_event_read_remote_ext_features_complete ,queue 0x4805 010559 branch hci_send_event : 010562 hci_send_version_information: 0x4806 010563 set0 mark_ext_patch ,mark 0x4807 010564 bpatch patch1c_6 ,mem_patch1c 0x4808 010565 fetch 1 ,mem_device_option 0x4809 010566 rtnne dvc_op_hci 0x480a 010567 call hci_write_handle3 0x480b 010568 istoret 5 ,contwu 0x480c 010569 force 8 ,loopcnt 0x480d 010570 force hci_event_read_remote_version_information_complete ,queue 0x480e 010571 branch hci_send_event : 010573 hci_send_io_cap_response_event: 0x480f 010574 set0 mark_ext_patch ,mark 0x4810 010575 bpatch patch1c_7 ,mem_patch1c 0x4811 010576 fetch 1 ,mem_device_option 0x4812 010577 rtnne dvc_op_hci 0x4813 010579 call hci_get_payload_ptr 0x4814 010580 fetch 6 ,mem_plap 0x4815 010581 istore 6 ,contwu 0x4816 010582 fetch 3 ,mem_sp_iocap_remote 0x4817 010583 istore 3 ,contwu 0x4818 010584 force 9 ,loopcnt 0x4819 010585 force hci_event_io_cap_response ,queue 0x481a 010586 branch hci_send_event : 010588 hci_send_io_cap_req_event: 0x481b 010589 set0 mark_ext_patch ,mark 0x481c 010590 bpatch patch1d_0 ,mem_patch1d 0x481d 010591 fetch 1 ,mem_device_option 0x481e 010592 rtnne dvc_op_hci 0x481f 010594 call hci_get_payload_ptr 0x4820 010595 fetch 6 ,mem_plap 0x4821 010596 istore 6 ,contwu 0x4822 010597 force 6 ,loopcnt 0x4823 010598 force hci_event_io_cap_req ,queue 0x4824 010599 branch hci_send_event : 010602 hci_send_connection_complete: 0x4825 010603 force 0 ,temp : 010604 hci_send_connection_error: 0x4826 010605 set0 mark_ext_patch ,mark 0x4827 010606 bpatch patch1d_1 ,mem_patch1d 0x4828 010607 fetch 1 ,mem_device_option 0x4829 010608 rtnne dvc_op_hci 0x482a 010609 force hci_event_connection_complete ,queue 0x482b 010610 jam 5 ,mem_acl_credits 0x482c 010611 call hci_get_payload_ptr 0x482d 010612 istoret 1 ,contwu 0x482e 010613 call hci_write_handle 0x482f 010614 call hci_write_plap 0x4830 010615 force 1 ,pdata 0x4831 010616 istore 1 ,contwu 0x4832 010617 force 0 ,pdata 0x4833 010618 fetcht 1 ,mem_state_map 0x4834 010619 isolate1 smap_encryption ,temp 0x4835 010620 setflag true ,0 ,pdata 0x4836 010621 istore 1 ,contwu 0x4837 010622 force 11 ,loopcnt 0x4838 010623 branch hci_send_event : 010626 hci_send_conn_req_event: 0x4839 010627 set0 mark_ext_patch ,mark 0x483a 010628 bpatch patch1d_2 ,mem_patch1d 0x483b 010629 fetch 1 ,mem_device_option 0x483c 010630 rtnne dvc_op_hci 0x483d 010631 force hci_event_connection_request ,queue 0x483e 010632 call hci_get_payload_ptr 0x483f 010633 call hci_write_plap 0x4840 010635 fetch 3 ,extm_class 0x4841 010636 istore 3 ,contwu 0x4842 010637 istoret 1 ,contwu 0x4843 010638 force 10 ,loopcnt 0x4844 010639 branch hci_send_event : 010641 hci_send_encryption_change: 0x4845 010642 set0 mark_ext_patch ,mark 0x4846 010643 bpatch patch1d_3 ,mem_patch1d 0x4847 010644 fetch 1 ,mem_device_option 0x4848 010645 rtnne dvc_op_hci 0x4849 010646 call hci_write_handle3 0x484a 010647 force 0 ,pdata 0x484b 010648 fetcht 1 ,mem_state_map 0x484c 010649 isolate1 smap_encryption ,temp 0x484d 010650 setflag true ,0 ,pdata 0x484e 010651 istore 1 ,contwu 0x484f 010652 force hci_event_encryption_change_complete ,queue 0x4850 010653 force 4 ,loopcnt 0x4851 010654 branch hci_send_event : 010657 hci_send_linkkey_notification: 0x4852 010658 set0 mark_ext_patch ,mark 0x4853 010659 bpatch patch1d_4 ,mem_patch1d 0x4854 010660 fetch 1 ,mem_device_option 0x4855 010661 rtnne dvc_op_hci 0x4856 010662 force hci_event_link_key_notification ,queue 0x4857 010663 call hci_get_payload_ptr 0x4858 010664 call hci_write_plap 0x4859 010665 arg mem_link_key ,contr 0x485a 010666 force 16 ,loopcnt 0x485b 010667 call uart_copy_tx_bytes 0x485c 010668 force 0x05 ,pdata 0x485d 010669 istore 1 ,contwu 0x485e 010670 force 0x17 ,loopcnt 0x485f 010671 branch hci_send_event : 010673 hci_send_user_confirmation_req: 0x4860 010674 fetch 1 ,mem_device_option 0x4861 010675 rtnne dvc_op_hci 0x4862 010676 force hci_event_user_confirmation_request ,queue 0x4863 010677 call hci_get_payload_ptr 0x4864 010678 call hci_write_plap 0x4865 010679 fetch 4 ,mem_sp_gkey 0x4866 010680 istore 4 ,contwu 0x4867 010681 force 0xa ,loopcnt 0x4868 010682 branch hci_send_event : 010684 hci_send_ssp_complete: 0x4869 010685 fetch 1 ,mem_device_option 0x486a 010686 rtnne dvc_op_hci 0x486b 010687 force hci_event_simple_pairing_complete ,queue 0x486c 010688 call hci_get_payload_ptr 0x486d 010689 setarg 0 0x486e 010690 istore 1 ,contwu 0x486f 010691 call hci_write_plap 0x4870 010692 force 0x7 ,loopcnt 0x4871 010693 branch hci_send_event : 010696 hci_send_linkkey_req: 0x4872 010697 set0 mark_ext_patch ,mark 0x4873 010698 bpatch patch1d_5 ,mem_patch1d 0x4874 010699 force hci_event_link_key_request ,queue : 010700 hci_send_sec_req: 0x4875 010701 fetch 1 ,mem_device_option 0x4876 010702 rtnne dvc_op_hci 0x4877 010703 call hci_get_payload_ptr 0x4878 010704 call hci_write_plap 0x4879 010705 force 6 ,loopcnt 0x487a 010706 branch hci_send_event : 010708 hci_send_pincode_req: 0x487b 010709 fetch 1 ,mem_device_option 0x487c 010710 rtnne dvc_op_hci 0x487d 010711 force hci_event_pin_code_request ,queue 0x487e 010712 branch hci_send_sec_req : 010715 hci_send_role_change: 0x487f 010716 fetch 1 ,mem_device_option 0x4880 010717 rtnne dvc_op_hci 0x4881 010718 force hci_event_role_change ,queue 0x4882 010719 call hci_get_payload_ptr 0x4883 010720 force 0 ,pdata 0x4884 010721 istore 1 ,contwu 0x4885 010722 call hci_write_plap 0x4886 010723 istoret 1 ,contwu 0x4887 010724 force 8 ,loopcnt 0x4888 010725 branch hci_send_event : 010727 hci_send_role_change_err: 0x4889 010728 fetch 1 ,mem_device_option 0x488a 010729 rtnne dvc_op_hci 0x488b 010730 force 0 ,temp 0x488c 010731 nbranch hci_send_role_change_err_slave ,master 0x488d 010732 force 1 ,temp : 010733 hci_send_role_change_err_slave: 0x488e 010734 fetch 1 ,mem_device_option 0x488f 010735 rtnne dvc_op_hci 0x4890 010736 force hci_event_role_change ,queue 0x4891 010737 call hci_get_payload_ptr 0x4892 010738 force 0x35 ,pdata 0x4893 010739 istore 1 ,contwu 0x4894 010740 call hci_write_plap 0x4895 010741 istoret 1 ,contwu 0x4896 010742 force 8 ,loopcnt 0x4897 010743 branch hci_send_event : 010745 hci_send_name: 0x4898 010746 set0 mark_ext_patch ,mark 0x4899 010747 bpatch patch1d_6 ,mem_patch1d 0x489a 010748 fetch 1 ,mem_device_option 0x489b 010749 rtnne dvc_op_hci 0x489c 010750 call hci_get_packet_ptr 0x489d 010751 setarg 0xff07 0x489e 010752 istore 2 ,contwu 0x489f 010753 deposit queue 0x48a0 010754 istore 1 ,contwu 0x48a1 010755 call hci_write_plap 0x48a2 010756 arg mem_tmp_buffer ,contr 0x48a3 010757 force 248 ,loopcnt : 010758 hci_read_remote_name_loop: 0x48a4 010759 ifetch 1 ,contr 0x48a5 010760 istore 1 ,contwu 0x48a6 010761 loop hci_read_remote_name_loop 0x48a7 010762 force 0xff ,loopcnt 0x48a8 010763 branch hci_send_event_raw : 010765 hci_send_num_complete_packets: 0x48a9 010766 set0 mark_ext_patch ,mark 0x48aa 010767 bpatch patch1d_7 ,mem_patch1d 0x48ab 010768 fetch 1 ,mem_device_option 0x48ac 010769 rtnne dvc_op_hci 0x48ad 010770 hfetch 1 ,core_uart_txitems 0x48ae 010771 nrtn blank 0x48af 010772 fetch 1 ,mem_op 0x48b0 010773 rtnbit0 op_pkt_comp 0x48b1 010774 set0 op_pkt_comp ,pdata 0x48b2 010775 store 1 ,mem_op 0x48b3 010776 call hci_get_payload_ptr 0x48b4 010777 force 1 ,pdata 0x48b5 010778 istore 1 ,contwu 0x48b6 010779 call hci_write_handle 0x48b7 010780 force 1 ,pdata 0x48b8 010781 istore 2 ,contwu 0x48b9 010782 force hci_event_num_completed_packets ,queue 0x48ba 010783 force 5 ,loopcnt 0x48bb 010784 branch hci_send_event : 010788 hci_send_auth_complete: 0x48bc 010789 set0 mark_ext_patch ,mark 0x48bd 010790 bpatch patch1e_0 ,mem_patch1e 0x48be 010791 fetch 1 ,mem_device_option 0x48bf 010792 rtnne dvc_op_hci 0x48c0 010793 call hci_write_handle3 0x48c1 010794 force hci_event_authentication_complete ,queue 0x48c2 010795 force 3 ,loopcnt 0x48c3 010796 branch hci_send_event : 010800 hci_send_disconn_complete: 0x48c4 010801 set0 mark_ext_patch ,mark 0x48c5 010802 bpatch patch1e_1 ,mem_patch1e 0x48c6 010803 fetch 1 ,mem_device_option 0x48c7 010804 rtnne dvc_op_hci 0x48c8 010805 call hci_get_payload_ptr 0x48c9 010806 force 0 ,pdata 0x48ca 010807 istore 1 ,contwu 0x48cb 010808 istoret 2 ,contwu 0x48cc 010809 fetch 1 ,mem_hci_disconn_reason 0x48cd 010810 istore 1 ,contwu 0x48ce 010811 force hci_event_disconnection_complete ,queue 0x48cf 010812 force 4 ,loopcnt 0x48d0 010813 branch hci_send_event : 010816 hci_send_le_adv_report_event: 0x48d1 010817 set0 mark_ext_patch ,mark 0x48d2 010818 bpatch patch1e_2 ,mem_patch1e 0x48d3 010819 fetch 1 ,mem_device_option 0x48d4 010820 rtnne dvc_op_hci ,pdata 0x48d5 010821 call hci_get_payload_ptr 0x48d6 010822 setarg 0x0102 0x48d7 010823 istore 2 ,contwu 0x48d8 010824 fetcht 1 ,mem_le_rxbuf 0x48d9 010825 and temp ,0xf ,pdata 0x48da 010826 istore 1 ,contwu 0x48db 010827 copy rega ,pdata 0x48dc 010828 istore 1 ,contwu 0x48dd 010829 fetcht 1 ,mem_le_rxbuf + 1 0x48de 010830 increase -6 ,temp 0x48df 010831 fetch 6 ,mem_le_rxbuf + 2 0x48e0 010832 istore 6 ,contwu 0x48e1 010833 istoret 1 ,contwu 0x48e2 010834 copy temp ,loopcnt 0x48e3 010835 call uart_copy_tx_bytes 0x48e4 010836 setarg 127 0x48e5 010837 istore 1 ,contwu 0x48e6 010838 copy temp ,loopcnt 0x48e7 010839 add loopcnt ,12 ,loopcnt 0x48e8 010840 force hci_event_le_meta_event ,queue 0x48e9 010841 branch hci_send_event : 010843 hci_send_le_conn_complete: 0x48ea 010844 set0 mark_ext_patch ,mark 0x48eb 010845 bpatch patch1e_3 ,mem_patch1e 0x48ec 010846 fetch 1 ,mem_device_option 0x48ed 010847 rtnne dvc_op_hci ,pdata 0x48ee 010848 call hci_get_payload_ptr 0x48ef 010849 setarg hci_le_subevent_conn_complete 0x48f0 010850 istore 1 ,contwu 0x48f1 010851 istoret 1 ,contwu 0x48f2 010852 fetch 1 ,mem_le_conn_handle 0x48f3 010853 istore 2 ,contwu 0x48f4 010854 fetch 1 ,mem_le_mode 0x48f5 010855 rshift pdata ,pdata 0x48f6 010856 setflip 0 ,pdata 0x48f7 010857 istore 1 ,contwu 0x48f8 010858 fetch 1 ,mem_le_conn_peer_addr_type 0x48f9 010859 istore 1 ,contwu 0x48fa 010860 fetch 6 ,mem_le_plap 0x48fb 010861 istore 6 ,contwu 0x48fc 010862 fetch 2 ,mem_le_conn_interval 0x48fd 010863 istore 2 ,contwu 0x48fe 010864 fetch 2 ,mem_le_slave_latency 0x48ff 010865 istore 2 ,contwu 0x4900 010866 fetch 2 ,mem_le_superto 0x4901 010867 istore 2 ,contwu 0x4902 010868 fetch 1 ,mem_le_peer_sca 0x4903 010869 istore 1 ,contwu 0x4904 010870 force hci_event_le_meta_event ,queue 0x4905 010871 arg 19 ,loopcnt 0x4906 010872 branch hci_send_event : 010876 hci_send_mode_change: 0x4907 010877 set0 mark_ext_patch ,mark 0x4908 010878 bpatch patch1e_4 ,mem_patch1e 0x4909 010879 fetch 1 ,mem_device_option 0x490a 010880 rtnne dvc_op_hci 0x490b 010882 call hci_get_payload_ptr 0x490c 010883 call hci_write_handle3 0x490d 010884 istoret 1 ,contwu 0x490e 010885 fetch 2 ,mem_tsniff 0x490f 010886 rshift pdata ,pdata 0x4910 010887 istore 2 ,contwu 0x4911 010888 force 6 ,loopcnt 0x4912 010889 force hci_event_mode_change ,queue 0x4913 010890 branch hci_send_event : 010893 hci_send_sco_complete: 0x4914 010894 set0 mark_ext_patch ,mark 0x4915 010895 bpatch patch1e_5 ,mem_patch1e 0x4916 010896 fetch 1 ,mem_device_option 0x4917 010897 rtnne dvc_op_hci 0x4918 010898 set0 mark_ext_patch ,mark 0x4919 010899 bpatch patch1e_6 ,mem_patch1e 0x491a 010900 call hci_get_payload_ptr 0x491b 010901 istoret 1 ,contwu 0x491c 010902 setarg 0xe00 0x491d 010903 istore 2 ,contwu 0x491e 010904 call hci_write_plap 0x491f 010905 force 0 ,pdata 0x4920 010906 bmark1 mark_esco ,hci_send_esco 0x4921 010907 force 0 ,pdata 0x4922 010908 istore 7 ,contwu 0x4923 010909 branch hci_send_sco_cont : 010910 hci_send_esco: 0x4924 010911 fetch 1 ,mem_device_option 0x4925 010912 rtnne dvc_op_hci 0x4926 010913 setarg 0x020602 0x4927 010914 istore 3 ,contwu 0x4928 010915 setarg 30 0x4929 010916 istore 2 ,contwu 0x492a 010917 setarg 30 0x492b 010918 istore 2 ,contwu : 010919 hci_send_sco_cont: 0x492c 010920 fetch 1 ,mem_device_option 0x492d 010921 rtnne dvc_op_hci 0x492e 010922 fetch 1 ,mem_air_mode 0x492f 010923 istore 1 ,contwu 0x4930 010924 force hci_event_sco_connection_complete ,queue 0x4931 010925 force 17 ,loopcnt 0x4932 010926 branch hci_send_event : 010929 hci_command_status: 0x4933 010930 set0 mark_ext_patch ,mark 0x4934 010931 bpatch patch1e_7 ,mem_patch1e 0x4935 010932 call hci_get_payload_ptr 0x4936 010933 setarg 0x100 0x4937 010934 istore 2 ,contwu 0x4938 010935 deposit alarm 0x4939 010936 istore 2 ,contwu 0x493a 010937 force 4 ,loopcnt 0x493b 010938 force hci_event_command_status ,queue 0x493c 010939 branch hci_send_event : 010941 hci_command_status_err: 0x493d 010942 set0 mark_ext_patch ,mark 0x493e 010943 bpatch patch1f_0 ,mem_patch1f 0x493f 010944 call hci_get_payload_ptr 0x4940 010945 deposit rega 0x4941 010946 istore 1 ,contwu 0x4942 010947 setarg 0x01 0x4943 010948 istore 1 ,contwu 0x4944 010949 deposit alarm 0x4945 010950 istore 2 ,contwu 0x4946 010951 force 4 ,loopcnt 0x4947 010952 force hci_event_command_status ,queue 0x4948 010953 branch hci_send_event : 010955 hci_normal_reply: 0x4949 010956 set0 mark_ext_patch ,mark 0x494a 010957 bpatch patch1f_1 ,mem_patch1f 0x494b 010958 force 4 ,loopcnt : 010959 hci_command_complete: 0x494c 010960 call hci_get_payload_ptr 0x494d 010961 force 0x1 ,pdata 0x494e 010962 istore 1 ,contwu 0x494f 010963 deposit alarm 0x4950 010964 istore 3 ,contwu 0x4951 010965 force hci_event_command_complete ,queue : 010966 hci_send_event: 0x4952 010967 set0 mark_ext_patch ,mark 0x4953 010968 bpatch patch1f_2 ,mem_patch1f 0x4954 010969 call hci_get_packet_ptr 0x4955 010970 deposit queue 0x4956 010971 istore 1 ,contwu 0x4957 010972 deposit loopcnt 0x4958 010973 istore 1 ,contwu : 010974 hci_send_event_raw: 0x4959 010975 set1 mark_h5tx_rp ,mark 0x495a 010976 force 5 ,queue 0x495b 010977 increase 2 ,loopcnt : 010978 hci_send_packet: 0x495c 010979 call hci_check_bcsp_protocol 0x495d 010980 branch bcsp_send_packet ,true 0x495e 010981 branch h4_send_packet_event : 010983 hci_send_commu_ready_event: 0x495f 010984 force hci_event_vendor_specific ,queue 0x4960 010985 call hci_get_payload_ptr 0x4961 010986 setarg hci_vendor_event_commu_ready 0x4962 010987 istore 1 ,contwu 0x4963 010988 force 1 ,loopcnt 0x4964 010989 branch hci_send_event : 010992 hci_write_plap: 0x4965 010993 fetch 6 ,mem_plap 0x4966 010994 istore 6 ,contwu 0x4967 010995 rtn : 010997 hci_write_handle3: 0x4968 010998 call hci_get_payload_ptr 0x4969 010999 force 0 ,pdata 0x496a 011000 istore 1 ,contwu : 011001 hci_write_handle: 0x496b 011002 fetch 1 ,mem_conn_handle 0x496c 011003 istore 2 ,contwu 0x496d 011004 rtn : 011006 hci_get_cmd_complete_ptr: 0x496e 011007 force 12 ,contwu 0x496f 011008 branch hci_get_tx_ptr : 011010 hci_get_payload_ptr: 0x4970 011011 force 8 ,contwu 0x4971 011012 branch hci_get_tx_ptr : 011014 hci_get_packet_ptr: 0x4972 011015 force 6 ,contwu : 011016 hci_get_tx_ptr: 0x4973 011017 call hci_check_bcsp_protocol 0x4974 011018 branch bcsp_get_tx_ptr ,true 0x4975 011019 branch h4_get_tx_ptr : 011021 uart_copy_tx_bytes: 0x4976 011022 deposit loopcnt 0x4977 011023 rtn blank : 011024 uart_copy_tx_bytes_loop: 0x4978 011025 ifetch 1 ,contr 0x4979 011026 istore 1 ,contwu 0x497a 011027 loop uart_copy_tx_bytes_loop 0x497b 011028 rtn : 011030 uart_copy_rx_bytes: 0x497c 011031 deposit loopcnt 0x497d 011032 rtn blank : 011033 uart_copy_rx_bytes_loop: 0x497e 011034 ifetch 1 ,contru 0x497f 011035 istore 1 ,contw 0x4980 011036 loop uart_copy_rx_bytes_loop 0x4981 011037 rtn : 011039 uart_write_bytes: 0x4982 011040 istore 1 ,contwu 0x4983 011041 rshift8 pdata ,pdata 0x4984 011042 loop uart_write_bytes 0x4985 011043 rtn : 011046 calc_tx_crc16: 0x4986 011047 pulse crc16 0x4987 011048 enable enable_crc : 011049 crcloop: 0x4988 011050 ifetch 1 ,contwu 0x4989 011051 inject bucket ,8 0x498a 011052 loop crcloop 0x498b 011053 enable enable_parity 0x498c 011054 inject bucket ,16 0x498d 011055 disable enable_parity 0x498e 011056 disable enable_crc 0x498f 011057 disable crc16 0x4990 011058 byteswap pdata ,pdata 0x4991 011059 rtn : 011061 stop_loop: 0x4992 011062 nop 1 0x4993 011063 hjam 1 ,0x8203 0x4994 011064 branch stop_loop : 011068 process_cmd: 0x4995 011069 set0 mark_ext_patch ,mark 0x4996 011070 bpatch patch1f_3 ,mem_patch1f 0x4997 011071 fetch 1 ,mem_hci_cmd 0x4998 011072 rtn blank 0x4999 011073 fetch 1 ,mem_lmo_opcode2 0x499a 011074 nrtn blank 0x499b 011075 call cmd_check_plap 0x499c 011076 nbranch process_cmd_conn_handle ,zero 0x499d 011077 fetch 1 ,mem_hci_cmd 0x499e 011078 beq hci_cmd_remote_name_req ,cmd_namereq 0x499f 011079 beq hci_cmd_pair ,cmd_pair 0x49a0 011080 beq hci_cmd_nopair ,cmd_nopair 0x49a1 011081 beq hci_cmd_linkkey ,cmd_has_key 0x49a2 011082 beq hci_cmd_nokey ,cmd_no_key 0x49a3 011083 beq hci_cmd_reject_conn ,cmd_disconn 0x49a4 011084 beq hci_cmd_role_switch ,cmd_role_switch 0x49a5 011085 beq hci_cmd_accept_conn ,cmd_accept_conn 0x49a6 011086 beq hci_cmd_accept_with_switch ,cmd_accept_with_switch 0x49a7 011087 beq hci_cmd_detach ,cmd_detach 0x49a8 011088 beq hci_cmd_in_sniff ,cmd_in_sniff 0x49a9 011089 beq hci_cmd_exit_sniff ,cmd_exit_sniff : 011090 process_cmd_conn_handle: 0x49aa 011091 set0 mark_ext_patch ,mark 0x49ab 011092 bpatch patch1f_4 ,mem_patch1f 0x49ac 011093 call cmd_check_handle 0x49ad 011094 nrtn blank 0x49ae 011095 fetch 1 ,mem_hci_cmd 0x49af 011096 beq hci_cmd_auth ,cmd_auth 0x49b0 011097 beq hci_cmd_startencrypt ,cmd_start_encrypt 0x49b1 011098 beq hci_cmd_stopencrypt ,cmd_stop_encrypt 0x49b2 011099 beq hci_cmd_setup_sco ,cmd_setup_sco 0x49b3 011100 beq hci_cmd_disconn_sco ,cmd_disconn_sco 0x49b4 011101 beq hci_cmd_accept_sco_conn ,cmd_accept_sco_conn 0x49b5 011102 beq hci_cmd_remote_feature_req ,cmd_feature_req 0x49b6 011103 beq hci_cmd_remote_ext_features_req ,cmd_ext_feature_req 0x49b7 011104 beq hci_cmd_remote_version_req ,cmd_version_req 0x49b8 011105 beq hci_cmd_role_discovery ,cmd_role_discovery 0x49b9 011106 beq hci_cmd_io_cap ,cmd_io_cap 0x49ba 011107 rtnne hci_cmd_disconn 0x49bb 011108 call lmp_disconnect : 011109 cmd_exit: 0x49bc 011110 jam 0 ,mem_hci_cmd 0x49bd 011111 rtn : 011113 cmd_check_plap: 0x49be 011114 fetch 6 ,mem_hci_plap 0x49bf 011115 fetcht 6 ,mem_plap 0x49c0 011116 isub temp ,null 0x49c1 011117 rtn : 011120 cmd_check_handle: 0x49c2 011121 fetch 1 ,mem_hci_conn_handle 0x49c3 011122 fetcht 1 ,mem_conn_handle 0x49c4 011123 isub temp ,pdata 0x49c5 011124 rtn : 011126 cmd_accept_conn: 0x49c6 011127 jam lmp_accepted ,mem_lmo_opcode2 0x49c7 011128 jam lmp_host_connection_req ,mem_lmi_opcode2 0x49c8 011129 call tid_set_reply 0x49c9 011130 branch cmd_exit : 011132 cmd_accept_with_switch: 0x49ca 011133 branch cmd_accept_sco_conn ,master 0x49cb 011134 set1 mark_accept_switch ,mark : 011135 cmd_role_switch: 0x49cc 011136 jam lmp_slot_offset ,mem_lmo_opcode2 0x49cd 011137 set1 mark_switch_initiated ,mark 0x49ce 011138 nbranch cmd_exit ,master 0x49cf 011139 jam lmp_switch_req ,mem_lmo_opcode2 0x49d0 011140 fetch 1 ,mem_connection_options 0x49d1 011141 set0 connection_switch ,pdata 0x49d2 011142 store 1 ,mem_connection_options 0x49d3 011143 branch cmd_exit : 011146 cmd_namereq: 0x49d4 011147 jam lmp_name_req ,mem_lmo_opcode2 0x49d5 011148 jam 0 ,mem_name_offset 0x49d6 011149 branch cmd_exit : 011152 cmd_ssp: 0x49d7 011153 jam sp_flag_commit ,mem_master_sp_flag 0x49d8 011154 jam sp_master_stat_start_skip ,mem_master_sp_state 0x49d9 011155 branch cmd_exit : 011157 cmd_pair: 0x49da 011158 fetch 1 ,mem_op 0x49db 011159 bbit1 op_inrand_req ,cmd_pair_passive 0x49dc 011160 call tid_initiate 0x49dd 011161 jam lmp_in_rand ,mem_lmo_opcode2 0x49de 011162 branch cmd_exit : 011163 cmd_pair_passive: 0x49df 011164 set0 op_inrand_req ,pdata 0x49e0 011165 store 1 ,mem_op 0x49e1 011166 call lmp_accept_inrand 0x49e2 011167 setarg 0 0x49e3 011168 setflag master ,smap_lmptid ,pdata 0x49e4 011169 store 1 ,mem_lmo_tid2 0x49e5 011170 branch cmd_exit : 011172 cmd_nopair: 0x49e6 011173 jam pairing_not_allowed ,mem_disconn_reason_send 0x49e7 011174 jam lmp_detach ,mem_lmo_opcode2 0x49e8 011175 fetch 1 ,mem_state 0x49e9 011176 bbit1 state_inconn ,cmd_exit 0x49ea 011177 force hci_error_pairing_not_allowed ,temp 0x49eb 011178 call hci_send_connection_error 0x49ec 011179 branch cmd_exit : 011182 cmd_has_key: 0x49ed 011183 call linkkey_set 0x49ee 011184 fetch 1 ,mem_op 0x49ef 011185 bbit1 op_auth_req ,cmd_send_aurand 0x49f0 011186 bbit1 op_send_sres ,cmd_send_sres 0x49f1 011187 bbit1 op_inrand_req ,cmd_pair_passive 0x49f2 011188 branch cmd_exit : 011189 cmd_send_sres: 0x49f3 011190 set0 op_send_sres ,pdata 0x49f4 011191 store 1 ,mem_op 0x49f5 011192 jam lmp_sres ,mem_lmo_opcode2 0x49f6 011193 branch cmd_exit : 011195 cmd_no_key: 0x49f7 011196 fetch 1 ,mem_op 0x49f8 011197 bbit1 op_send_sres ,cmd_no_key_reject 0x49f9 011198 call hci_send_pincode_req 0x49fa 011199 branch cmd_exit : 011200 cmd_no_key_reject: 0x49fb 011201 set0 op_send_sres ,pdata 0x49fc 011202 store 1 ,mem_op 0x49fd 011203 jam lmp_not_accepted ,mem_lmo_opcode2 0x49fe 011204 jam lmp_au_rand ,mem_lmi_opcode2 0x49ff 011205 jam key_missing ,mem_lmo_reason2 0x4a00 011206 branch cmd_exit : 011209 cmd_auth: 0x4a01 011210 fetch 1 ,mem_op 0x4a02 011211 set1 op_auth_req ,pdata 0x4a03 011212 store 1 ,mem_op 0x4a04 011213 fetch 1 ,mem_state 0x4a05 011214 bbit1 state_linkkey ,cmd_auth_sendaurand 0x4a06 011215 call hci_send_linkkey_req 0x4a07 011216 branch cmd_exit : 011218 cmd_send_aurand: : 011219 cmd_auth_sendaurand: 0x4a08 011220 call tid_initiate 0x4a09 011221 jam lmp_au_rand ,mem_lmo_opcode2 0x4a0a 011222 branch cmd_exit : 011224 cmd_start_encrypt: 0x4a0b 011225 jam lmp_encryption_mode_req ,mem_lmo_opcode2 0x4a0c 011226 branch cmd_exit : 011228 cmd_stop_encrypt: 0x4a0d 011229 jam lmp_encryption_mode_req ,mem_lmo_opcode2 0x4a0e 011230 branch cmd_exit : 011232 cmd_feature_req: 0x4a0f 011233 set0 mark_ext_patch ,mark 0x4a10 011234 bpatch patch1f_5 ,mem_patch1f 0x4a11 011235 jam lmp_features_req ,mem_lmo_opcode2 0x4a12 011236 jam hci_cmd_wait_remote_feature ,mem_hci_cmd 0x4a13 011237 rtn : 011239 cmd_ext_feature_req: 0x4a14 011240 jam lmp_ext_features_req ,mem_lmo_opcode2 0x4a15 011241 jam hci_cmd_wait_remote_ext_feature ,mem_hci_cmd 0x4a16 011242 rtn : 011244 cmd_version_req: 0x4a17 011245 jam lmp_version_req ,mem_lmo_opcode2 0x4a18 011246 branch cmd_exit : 011248 cmd_in_sniff: 0x4a19 011249 jam lmp_sniff_req ,mem_lmo_opcode2 0x4a1a 011250 arg mem_sniff_payload ,contw 0x4a1b 011251 setarg 0 0x4a1c 011252 isolate1 27 ,clke_bt 0x4a1d 011253 setflag true ,1 ,pdata 0x4a1e 011254 istore 1 ,contw 0x4a1f 011255 setarg 0 0x4a20 011256 istore 2 ,contw 0x4a21 011257 fetch 2 ,mem_sniff_param_interval 0x4a22 011258 istore 2 ,contw 0x4a23 011259 fetch 1 ,mem_sniff_param_attempt 0x4a24 011260 istore 2 ,contw 0x4a25 011261 fetch 1 ,mem_sniff_param_timeout 0x4a26 011262 istore 2 ,contw 0x4a27 011263 branch cmd_exit : 011265 cmd_exit_sniff: 0x4a28 011266 jam lmp_unsniff_req ,mem_lmo_opcode2 0x4a29 011267 branch cmd_exit : 011269 cmd_setup_sco: 0x4a2a 011270 call new_conn_handle 0x4a2b 011271 store 1 ,mem_sco_handle 0x4a2c 011272 fetch 1 ,mem_conn_handle 0x4a2d 011273 store 1 ,mem_sco_asso_handle 0x4a2e 011274 jam lmp_sco_link_req ,mem_lmo_opcode2 0x4a2f 011275 set1 mark_esco ,mark 0x4a30 011276 jam lmp_ext_esco_link_req ,mem_lmo_opcode2 0x4a31 011277 branch cmd_exit : 011279 cmd_disconn: 0x4a32 011280 call lmp_disconnect 0x4a33 011281 branch cmd_exit : 011283 cmd_disconn_sco: 0x4a34 011284 jam lmp_remove_sco_link_req ,mem_lmo_opcode2 0x4a35 011285 bmark0 mark_esco ,cmd_exit 0x4a36 011286 jam lmp_ext_remove_esco_req ,mem_lmo_opcode2 0x4a37 011287 branch cmd_exit : 011289 cmd_accept_sco_conn: 0x4a38 011290 branch cmd_accept_sco_conn_master ,master 0x4a39 011291 jam lmp_accepted ,mem_lmo_opcode2 0x4a3a 011292 jam lmp_sco_link_req ,mem_lmi_opcode2 0x4a3b 011293 bmark0 mark_esco ,cmd_exit 0x4a3c 011294 fetch 1 ,mem_esco_type 0x4a3d 011295 bne type_hv3 ,parse_lmpext_esco_link_req_change_param 0x4a3e 011296 jam lmp_ext_accepted ,mem_lmo_opcode2 0x4a3f 011297 jam lmp_ext_esco_link_req ,mem_lmi_opcode2 0x4a40 011298 branch cmd_exit : 011299 cmd_accept_sco_conn_master: 0x4a41 011300 call new_conn_handle 0x4a42 011301 store 1 ,mem_sco_handle 0x4a43 011302 fetch 1 ,mem_conn_handle 0x4a44 011303 store 1 ,mem_sco_asso_handle 0x4a45 011304 jam lmp_sco_link_req ,mem_lmo_opcode2 0x4a46 011305 bmark0 mark_esco ,cmd_exit 0x4a47 011306 branch parse_lmpext_esco_link_req_change_param : 011309 cmd_role_discovery: 0x4a48 011310 call hci_get_cmd_complete_ptr 0x4a49 011311 call hci_write_handle 0x4a4a 011312 force 0 ,pdata 0x4a4b 011313 nsetflag master ,0 ,pdata 0x4a4c 011314 istore 1 ,contwu 0x4a4d 011315 force 7 ,loopcnt 0x4a4e 011316 arg 0x809 ,alarm 0x4a4f 011317 call hci_command_complete 0x4a50 011318 branch cmd_exit : 011320 cmd_io_cap: 0x4a51 011321 jam lmp_io_cap_res ,mem_lmo_opcode2 0x4a52 011322 branch cmd_exit : 011324 cmd_detach: 0x4a53 011325 jam lmp_detach ,mem_lmo_opcode2 0x4a54 011326 jam other_end_terminated ,mem_disconn_reason_send 0x4a55 011327 branch cmd_exit : 011332 process_hci_patch: 0x4a56 011333 jam 0 ,mem_check_sum 0x4a57 011336 ifetch 1 ,contru 0x4a58 011337 store 1 ,mem_ucode_id_remote 0x4a59 011338 call hci_ucode_checksum_add 0x4a5a 011340 call push_stack 0x4a5b 011341 fetch 1 ,mem_ucode_id_remote 0x4a5c 011342 copy pdata ,temp 0x4a5d 011343 fetch 1 ,mem_ucode_id_local 0x4a5e 011344 increase 1 ,pdata 0x4a5f 011345 icompare 0xff ,temp 0x4a60 011346 nbranch hci_nak_ucode_with_stack ,true 0x4a61 011347 store 1 ,mem_ucode_id_local 0x4a62 011348 call pop_stack 0x4a63 011350 ifetch 1 ,contru 0x4a64 011351 beq 0x01 ,hci_enable_ucode_load 0x4a65 011352 beq 0x02 ,process_hci_ucode 0x4a66 011353 beq 0x03 ,hci_disable_ucode_load 0x4a67 011354 beq 0x05 ,process_hci_n_sched_data 0x4a68 011355 beq 0x06 ,hci_write_register 0x4a69 011356 beq 0x07 ,hci_read_register 0x4a6a 011357 beq 0x08 ,hci_enable_ucode 0x4a6b 011358 beq 0x09 ,hci_soft_branch 0x4a6c 011359 rtn : 011360 hci_ucode_checksum_add: 0x4a6d 011361 copy pdata ,temp 0x4a6e 011362 call push_stack 0x4a6f 011363 fetch 1 ,mem_check_sum 0x4a70 011364 iadd temp ,pdata 0x4a71 011365 store 1 ,mem_check_sum 0x4a72 011366 branch pop_stack : 011369 hci_ack_ucode: 0x4a73 011370 force 1 ,pdata 0x4a74 011371 call uart_send_byte 0x4a75 011372 fetch 1 ,mem_ucode_id_local 0x4a76 011373 branch uart_send_byte : 011375 hci_nak_ucode_with_stack: 0x4a77 011376 call pop_stack 0x4a78 011377 branch hci_nak_ucode_ucode_id : 011378 hci_nak_ucode: 0x4a79 011379 fetch 1 ,mem_ucode_id_local 0x4a7a 011380 increase -1 ,pdata 0x4a7b 011381 store 1 ,mem_ucode_id_local : 011382 hci_nak_ucode_ucode_id: 0x4a7c 011383 force 0 ,pdata 0x4a7d 011384 call uart_send_byte 0x4a7e 011385 fetch 1 ,mem_ucode_id_local 0x4a7f 011386 branch uart_send_byte : 011388 hci_write_register: 0x4a80 011389 call hci_ucode_checksum_add 0x4a81 011390 ifetch 1 ,contru 0x4a82 011391 store 1 ,mem_ucode_temp 0x4a83 011392 call hci_ucode_checksum_add 0x4a84 011393 ifetch 1 ,contru 0x4a85 011394 lshift8 pdata ,contw 0x4a86 011395 call hci_ucode_checksum_add 0x4a87 011396 fetch 1 ,mem_ucode_temp 0x4a88 011397 iadd contw ,contw 0x4a89 011398 ifetch 1 ,contru 0x4a8a 011399 istore 1 ,contw 0x4a8b 011400 call hci_ucode_checksum_add 0x4a8c 011401 ifetch 1 ,contru 0x4a8d 011402 call hci_ucode_checksum_add 0x4a8e 011403 fetch 1 ,mem_check_sum 0x4a8f 011404 bne 0xff ,hci_nak_ucode 0x4a90 011405 branch hci_ack_ucode : 011407 hci_read_register: 0x4a91 011408 call hci_ucode_checksum_add 0x4a92 011409 ifetch 1 ,contru 0x4a93 011410 store 1 ,mem_ucode_temp 0x4a94 011411 call hci_ucode_checksum_add 0x4a95 011412 ifetch 1 ,contru 0x4a96 011413 store 1 ,mem_ucode_temp1 0x4a97 011414 call hci_ucode_checksum_add 0x4a98 011415 ifetch 1 ,contru 0x4a99 011416 call hci_ucode_checksum_add 0x4a9a 011417 fetch 1 ,mem_check_sum 0x4a9b 011418 bne 0xff ,hci_nak_ucode 0x4a9c 011420 fetch 1 ,mem_ucode_temp1 0x4a9d 011421 lshift8 pdata ,temp 0x4a9e 011422 fetch 1 ,mem_ucode_temp 0x4a9f 011423 iadd temp ,contru 0x4aa0 011424 ifetch 1 ,contru 0x4aa1 011425 store 1 ,mem_ucode_temp : 011426 hci_read_register_ack: 0x4aa2 011427 force 1 ,pdata 0x4aa3 011428 call uart_send_byte 0x4aa4 011429 fetch 1 ,mem_ucode_temp 0x4aa5 011430 call uart_send_byte 0x4aa6 011431 jam 0xff ,mem_ucode_id_local 0x4aa7 011432 rtn : 011434 hci_enable_ucode: 0x4aa8 011435 call hci_ucode_checksum_add 0x4aa9 011436 ifetch 1 ,contru 0x4aaa 011437 call hci_ucode_checksum_add 0x4aab 011438 fetch 1 ,mem_check_sum 0x4aac 011439 bne 0xff ,hci_nak_ucode 0x4aad 011440 branch hci_ack_ucode : 011442 process_hci_ucode: 0x4aae 011443 call hci_ucode_checksum_add 0x4aaf 011444 ifetch 1 ,contru 0x4ab0 011445 hstore 1 ,core_ucode_low 0x4ab1 011446 call hci_ucode_checksum_add 0x4ab2 011447 ifetch 1 ,contru 0x4ab3 011448 set1 7 ,pdata 0x4ab4 011449 hstore 1 ,core_ucode_ctrl 0x4ab5 011450 set0 7 ,pdata 0x4ab6 011451 call hci_ucode_checksum_add 0x4ab7 011452 ifetch 1 ,contru 0x4ab8 011453 copy pdata ,loopcnt 0x4ab9 011454 call hci_ucode_checksum_add : 011455 write_ucode_loop: 0x4aba 011456 ifetch 1 ,contru 0x4abb 011457 hstore 1 ,core_ucode_data 0x4abc 011458 call hci_ucode_checksum_add 0x4abd 011459 loop write_ucode_loop 0x4abe 011460 ifetch 1 ,contru 0x4abf 011461 call hci_ucode_checksum_add 0x4ac0 011462 fetch 1 ,mem_check_sum 0x4ac1 011463 bne 0xff ,hci_nak_ucode 0x4ac2 011464 branch hci_ack_ucode : 011466 process_hci_n_sched_data: 0x4ac3 011467 call hci_ucode_checksum_add 0x4ac4 011468 ifetch 1 ,contru 0x4ac5 011469 store 1 ,mem_ucode_temp 0x4ac6 011470 call hci_ucode_checksum_add 0x4ac7 011471 ifetch 1 ,contru 0x4ac8 011472 lshift8 pdata ,contw 0x4ac9 011473 call hci_ucode_checksum_add 0x4aca 011474 fetch 1 ,mem_ucode_temp 0x4acb 011475 iadd contw ,contw 0x4acc 011476 ifetch 1 ,contru 0x4acd 011477 iforce loopcnt 0x4ace 011478 call hci_ucode_checksum_add : 011479 process_hci_n_sched_loop: 0x4acf 011480 ifetch 1 ,contru 0x4ad0 011481 istore 1 ,contw 0x4ad1 011482 call hci_ucode_checksum_add 0x4ad2 011483 loop process_hci_n_sched_loop 0x4ad3 011484 ifetch 1 ,contru 0x4ad4 011485 call hci_ucode_checksum_add 0x4ad5 011486 fetch 1 ,mem_check_sum 0x4ad6 011487 bne 0xff ,hci_nak_ucode 0x4ad7 011488 branch hci_ack_ucode : 011492 hci_enable_ucode_load: 0x4ad8 011493 call hci_ucode_checksum_add 0x4ad9 011494 ifetch 1 ,contru 0x4ada 011495 call hci_ucode_checksum_add 0x4adb 011496 fetch 1 ,mem_check_sum 0x4adc 011497 bne 0xff ,hci_nak_ucode 0x4add 011498 hjam 0x80 ,core_ucode_ctrl 0x4ade 011499 branch hci_ack_ucode : 011501 hci_disable_ucode_load: 0x4adf 011502 call hci_ucode_checksum_add 0x4ae0 011503 ifetch 1 ,contru 0x4ae1 011504 call hci_ucode_checksum_add 0x4ae2 011505 fetch 1 ,mem_check_sum 0x4ae3 011506 bne 0xff ,hci_nak_ucode 0x4ae4 011507 hjam 0 ,core_ucode_ctrl 0x4ae5 011508 branch hci_ack_ucode : 011510 hci_soft_branch: 0x4ae6 011511 call hci_ucode_checksum_add 0x4ae7 011512 ifetch 1 ,contru 0x4ae8 011513 call hci_ucode_checksum_add 0x4ae9 011514 fetch 1 ,mem_check_sum 0x4aea 011515 bne 0xff ,hci_nak_ucode 0x4aeb 011516 call hci_ack_ucode 0x4aec 011517 branch soft_reset : 011520 hci_idle_dispatch: 0x4aed 011521 call gpio_check_uart_state 0x4aee 011522 rtn true 0x4aef 011523 arg uart_wakeup_rx ,temp 0x4af0 011524 call gpio_get_bit 0x4af1 011525 nbranch uart_wake_up ,true 0x4af2 011526 jam hci_rx_wake ,mem_hci_lt_rx_state 0x4af3 011527 rtn : 011528 uart_wake_up: 0x4af4 011529 fetch 1 ,mem_hci_lt_rx_state 0x4af5 011530 rtnne hci_rx_wake 0x4af6 011531 call hci_exit_lpm 0x4af7 011532 branch hci_send_commu_ready_event : 011546 hid_rx_process: 0x4af8 011547 set1 mark_ext_patch ,mark 0x4af9 011548 bpatch patch33_4 ,mem_patch33 0x4afa 011549 fetch 2 ,mem_l2cap_payload_ptr 0x4afb 011550 copy pdata ,contr 0x4afc 011551 ifetch 1 ,contr 0x4afd 011552 and pdata ,0x0f ,temp 0x4afe 011553 rshift4 pdata ,pdata 0x4aff 011554 beq hid_type_set_idle ,hid_rx_process_handshake 0x4b00 011555 beq hid_type_set_protocol ,hid_rx_process_handshake 0x4b01 011556 beq hid_type_data ,hid_rx_process_data 0x4b02 011557 beq hid_type_set_report ,hid_rx_process_set_report 0x4b03 011558 beq hid_type_control ,hid_rx_process_hid_control 0x4b04 011559 rtn : 011561 hid_rx_process_hid_control: 0x4b05 011562 copy temp ,pdata 0x4b06 011563 beq hid_control_p_virtualcableunplug ,hid_rx_process_virtual_cable_unplug 0x4b07 011564 beq hid_control_p_suspend ,hid_rx_process_suspend 0x4b08 011565 rtn : 011567 hid_rx_process_virtual_cable_unplug: 0x4b09 011568 jam bt_evt_virtual_cable_unplug ,mem_fifo_temp 0x4b0a 011569 call ui_ipc_send_event 0x4b0b 011570 fetch 1 ,mem_device_option 0x4b0c 011571 rtnne dvc_op_mouse ,pdata 0x4b0d 011572 copy temp ,pdata 0x4b0e 011573 beq hid_control_p_virtualcableunplug ,eeprom_erase_reconn_info 0x4b0f 011574 rtn : 011575 hid_rx_process_suspend: 0x4b10 011576 rtn : 011578 hid_rx_process_set_report: 0x4b11 011579 arg 0x01 ,rega 0x4b12 011580 call hid_malloc_tx_buff 0x4b13 011581 fetch 2 ,mem_hid_ctrl_remote_cid 0x4b14 011582 istore 2 ,contw 0x4b15 011583 setarg 0x00 0x4b16 011584 istore 1 ,contw 0x4b17 011585 rtn : 011587 hid_rx_process_handshake: 0x4b18 011588 arg 1 ,rega 0x4b19 011589 call hid_malloc_tx_buff 0x4b1a 011590 fetch 2 ,mem_hid_ctrl_remote_cid 0x4b1b 011591 istore 2 ,contw 0x4b1c 011592 setarg 0 0x4b1d 011593 istore 1 ,contw 0x4b1e 011594 jam 1 ,mem_ui_data_txbuff_length 0x4b1f 011595 fetch 1 ,mem_hid_control_state 0x4b20 011596 set1 l2cap_channel_hid_handshake_done 0x4b21 011597 store 1 ,mem_hid_control_state : 011598 hid_handshake_event: 0x4b22 011599 jam bt_evt_hid_handshake ,mem_fifo_temp 0x4b23 011600 branch ui_ipc_send_event : 011602 hid_rx_process_data: 0x4b24 011603 ifetch 1 ,contr 0x4b25 011604 beq hid_report_id_kb ,hid_rx_process_data_hid_kb 0x4b26 011605 rtn : 011607 hid_rx_process_data_hid_kb: 0x4b27 011608 copy contr ,rega 0x4b28 011609 fetch 1 ,mem_device_option 0x4b29 011610 rtnne dvc_op_kb ,pdata 0x4b2a 011611 copy rega ,contr 0x4b2b 011612 branch kb_process_kb_report : 011614 hid_malloc_tx_buff: 0x4b2c 011615 call l2cap_malloc 0x4b2d 011616 copy rega ,temp 0x4b2e 011617 storet 1 ,mem_ui_data_txbuff_length 0x4b2f 011618 copy pdata ,contw 0x4b30 011619 copy rega ,pdata 0x4b31 011620 istore 2 ,contw 0x4b32 011621 rtn : 011624 le_ir_init: 0x4b33 011625 setarg le_ir 0x4b34 011626 store 2 ,mem_cb_le_process 0x4b35 011627 setarg le_ir_wcb 0x4b36 011628 store 2 ,mem_cb_att_write 0x4b37 011629 call eeprom_load_reconn_info 0x4b38 011630 call le_init_att 0x4b39 011631 hjam 158 ,core_pwm_ncnt0 0x4b3a 011632 hjam 8 ,core_gpio_sel1 0x4b3b 011633 hjam 5 ,core_gpio_out1 0x4b3c 011634 setarg -1 0x4b3d 011635 set0 1 ,pdata 0x4b3e 011636 set0 21 ,pdata 0x4b3f 011637 hstore 4 ,core_gpio_oe0 0x4b40 011638 hjam 2 ,core_gpio_pu0 0x4b41 011639 rtn wake 0x4b42 011640 jam 1 ,mem_le_adv_enable 0x4b43 011641 rtn : 011644 le_ir_wcb: 0x4b44 011645 ifetch 1 ,rega 0x4b45 011646 store 1 ,mem_ir_cmd 0x4b46 011647 beq ircmd_write_pulse ,le_ir_write_pulse 0x4b47 011648 beq ircmd_write_seq ,le_ir_write_seq 0x4b48 011649 beq ircmd_write_next ,le_ir_write_next 0x4b49 011650 beq ircmd_screen_on ,le_ir_screen_on 0x4b4a 011651 beq ircmd_screen_off ,le_ir_screen_off 0x4b4b 011652 rtnne ircmd_play 0x4b4c 011653 ifetch 1 ,contr 0x4b4d 011654 store 1 ,mem_ir_play_count 0x4b4e 011655 rtn : 011657 le_ir_write_pulse: 0x4b4f 011658 arg mem_ir_pulse_zero ,contw 0x4b50 011659 branch le_ir_write : 011661 le_ir_write_seq: 0x4b51 011662 arg mem_ir_sequence_len ,contw 0x4b52 011663 branch le_ir_write : 011665 le_ir_write_next: 0x4b53 011666 fetch 2 ,mem_ir_ptr 0x4b54 011667 iforce contw : 011669 le_ir_write: 0x4b55 011670 arg 19 ,loopcnt 0x4b56 011671 call memcpy 0x4b57 011672 deposit contw 0x4b58 011673 store 2 ,mem_ir_ptr 0x4b59 011674 jam 0 ,mem_ir_cmd 0x4b5a 011675 rtn : 011679 le_ir: 0x4b5b 011680 fetch 1 ,mem_ir_cmd 0x4b5c 011681 beq ircmd_record ,le_ir_start_record 0x4b5d 011682 beq ircmd_play ,le_ir_play 0x4b5e 011683 beq ircmd_report_pulse ,le_ir_report 0x4b5f 011684 beq ircmd_report_seq ,le_ir_report 0x4b60 011685 beq ircmd_report_raw ,le_ir_report 0x4b61 011686 beq ircmd_test_play ,le_ir_play 0x4b62 011687 beq ircmd_test_rec ,le_ir_rec 0x4b63 011688 rtn : 011690 le_ir_screen_on: 0x4b64 011691 jam 0 ,mem_lpm_mult 0x4b65 011692 jam 0 ,mem_ir_cmd 0x4b66 011693 rtn : 011694 le_ir_screen_off: 0x4b67 011695 jam 30 ,mem_lpm_mult 0x4b68 011696 jam 0 ,mem_ir_cmd 0x4b69 011697 rtn : 011701 le_ir_rec: 0x4b6a 011702 jam 0 ,mem_ir_cmd 0x4b6b 011703 arg 0xfffff ,stop_watch 0x4b6c 011704 call ir_record 0x4b6d 011705 rtn : 011707 le_ir_next_anchor: 0x4b6e 011708 fetcht 2 ,mem_le_tsniff 0x4b6f 011709 iadd temp ,pdata 0x4b70 011710 store 4 ,mem_le_anchor : 011711 le_ir_start_record: 0x4b71 011712 fetch 4 ,mem_le_anchor 0x4b72 011713 isub clke_bt ,pdata 0x4b73 011714 nbranch le_ir_next_anchor ,positive 0x4b74 011715 rshift pdata ,stop_watch 0x4b75 011716 call ir_record 0x4b76 011717 rtn blank 0x4b77 011718 jam ircmd_report_raw ,mem_ir_cmd 0x4b78 011719 arg mem_ir_record ,temp 0x4b79 011720 storet 2 ,mem_ir_ptr : 011722 le_ir_report: 0x4b7a 011723 call le_xtype_fifo_is_full 0x4b7b 011724 nrtn blank 0x4b7c 011725 jam notify_handle ,mem_le_notify_handle 0x4b7d 011726 jam attop_handle_value_notification ,mem_fifo_temp 0x4b7e 011727 call le_xtype_fifo_in 0x4b7f 011728 fetch 2 ,mem_le_notify_attr_start 0x4b80 011729 iforce contw 0x4b81 011730 fetch 2 ,mem_ir_ptr 0x4b82 011731 iforce contr 0x4b83 011732 arg 20 ,loopcnt 0x4b84 011733 call memcpy 0x4b85 011734 deposit contr 0x4b86 011735 store 2 ,mem_ir_ptr 0x4b87 011736 fetch 2 ,mem_ir_report_len 0x4b88 011737 increase -20 ,pdata 0x4b89 011738 store 2 ,mem_ir_report_len 0x4b8a 011739 rtn positive 0x4b8b 011740 jam 0 ,mem_ir_cmd 0x4b8c 011741 rtn : 011744 le_ir_play: 0x4b8d 011745 fetch 1 ,mem_ir_play_count 0x4b8e 011746 call ir_play 0x4b8f 011747 jam 0 ,mem_ir_cmd 0x4b90 011748 rtn : 011751 ir_record: 0x4b91 011752 call ir_receive 0x4b92 011753 setarg mem_ir_record 0x4b93 011754 isub contw ,pdata 0x4b94 011755 sub pdata ,0 ,pdata 0x4b95 011756 store 2 ,mem_ir_report_len 0x4b96 011757 rtn : 011761 ir_receive: 0x4b97 011762 disable swfine 0x4b98 011763 arg mem_ir_record ,contw : 011764 ir_receive_waitsync: 0x4b99 011765 rtn timeout 0x4b9a 011766 hfetch 1 ,core_gpio_in + 2 0x4b9b 011767 bbit0 5 ,ir_receive_waitsync 0x4b9c 011768 copy clkn ,temp 0x4b9d 011769 arg 0x80 ,loopcnt 0x4b9e 011770 call memset0 0x4b9f 011771 arg mem_ir_record ,contw 0x4ba0 011772 arg 0x0 ,regc : 011773 ir_receive_loop: 0x4ba1 011774 arg 180 ,stop_watch : 011775 ir_receive_waitedge: 0x4ba2 011776 rtn timeout 0x4ba3 011777 hfetch 1 ,core_gpio_in + 2 0x4ba4 011778 ixor regc ,pdata 0x4ba5 011779 bbit1 5 ,ir_receive_waitedge 0x4ba6 011780 copy clkn ,pdata 0x4ba7 011781 iforce alarm 0x4ba8 011782 call clk_diff_rt 0x4ba9 011783 sub pdata ,0xff ,null 0x4baa 011784 branch ir_receive_waitedge ,positive 0x4bab 011785 isolate0 5 ,regc 0x4bac 011786 setflag true ,23 ,pdata 0x4bad 011787 istore 3 ,contw 0x4bae 011788 rshift8 contw ,pdata 0x4baf 011789 rtneq mem_ir_record_max 0x4bb0 011790 copy alarm ,temp 0x4bb1 011791 xor_into 0x20 ,regc 0x4bb2 011792 branch ir_receive_loop : 011796 ir_get_next_seq: 0x4bb3 011797 branch ir_get_next_seq_saved ,user 0x4bb4 011798 branch ir_get_next_encoded ,user2 : 011799 ir_get_next_seq_fetch: 0x4bb5 011800 arg mem_ir_sequence ,temp 0x4bb6 011801 fetch 1 ,mem_ir_sequence_len 0x4bb7 011802 iadd temp ,pdata 0x4bb8 011803 isub rega ,null 0x4bb9 011804 branch ir_get_next_seq_exit ,zero 0x4bba 011805 ifetch 1 ,rega 0x4bbb 011806 copy contr ,rega 0x4bbc 011807 bbit0 7 ,ir_get_next_cont 0x4bbd 011808 enable user2 0x4bbe 011809 and pdata ,0x7f ,regb 0x4bbf 011810 lshift3 rega ,rega 0x4bc0 011811 branch ir_get_next_encoded : 011812 ir_get_next_cont: 0x4bc1 011813 rshift4 pdata ,debug 0x4bc2 011814 and_into 0xf ,pdata 0x4bc3 011815 isub debug ,null 0x4bc4 011816 rtn zero 0x4bc5 011817 enable user 0x4bc6 011818 rtn : 011819 ir_get_next_seq_saved: 0x4bc7 011820 deposit debug 0x4bc8 011821 disable user 0x4bc9 011822 rtn : 011823 ir_get_next_encoded: 0x4bca 011824 deposit regb 0x4bcb 011825 branch ir_get_next_encoded_end ,blank 0x4bcc 011826 and rega ,0x7 ,queue 0x4bcd 011827 rshift3 rega ,contr 0x4bce 011828 ifetch 1 ,contr 0x4bcf 011829 increase 1 ,rega 0x4bd0 011830 increase -1 ,regb 0x4bd1 011831 qisolate0 pdata 0x4bd2 011832 fetch 1 ,mem_ir_pulse_zero 0x4bd3 011833 branch ir_get_next_cont ,true 0x4bd4 011834 fetch 1 ,mem_ir_pulse_one 0x4bd5 011835 branch ir_get_next_cont : 011836 ir_get_next_encoded_end: 0x4bd6 011837 disable user2 0x4bd7 011838 increase 7 ,rega 0x4bd8 011839 rshift3 rega ,rega 0x4bd9 011840 branch ir_get_next_seq_fetch : 011841 ir_get_next_seq_exit: 0x4bda 011842 setarg 0xff 0x4bdb 011843 rtn : 011846 ir_get_pulse: 0x4bdc 011847 lshift pdata ,contr 0x4bdd 011848 iadd contr ,pdata 0x4bde 011849 arg mem_ir_pulses ,contr 0x4bdf 011850 iadd contr ,contr 0x4be0 011851 ifetch 3 ,contr 0x4be1 011852 rtn : 011855 ir_play: 0x4be2 011856 enable swfine 0x4be3 011857 iforce loopcnt : 011858 ir_play_nloop: 0x4be4 011859 disable user 0x4be5 011860 disable user2 0x4be6 011861 arg mem_ir_sequence ,rega : 011862 ir_play_loop: 0x4be7 011863 call ir_get_next_seq 0x4be8 011864 beq 0xff ,ir_play_end 0x4be9 011865 call ir_get_pulse 0x4bea 011866 bbit0 23 ,ir_play_silence 0x4beb 011867 set0 23 ,pdata 0x4bec 011868 hjam 158 ,core_pwm_pcnt0 : 011869 ir_play_silence: 0x4bed 011870 iforce stop_watch 0x4bee 011871 until null ,timeout 0x4bef 011872 hjam 0 ,core_pwm_pcnt0 0x4bf0 011873 branch ir_play_loop : 011874 ir_play_end: 0x4bf1 011875 loop ir_play_nloop 0x4bf2 011876 rtn : 011882 le_kb_init: 0x4bf3 011883 call kb_init_common 0x4bf4 011884 setarg kb_process_idle 0x4bf5 011885 store 2 ,mem_cb_idle_process 0x4bf6 011886 setarg kb_send_process 0x4bf7 011887 store 2 ,mem_cb_bt_process 0x4bf8 011888 setarg kb_process_bb_event 0x4bf9 011889 store 2 ,mem_cb_bb_event_process 0x4bfa 011890 setarg kb_process_lpm_before 0x4bfb 011891 store 2 ,mem_cb_before_lpm 0x4bfc 011892 setarg kb_discovery_timeout_sleep 0x4bfd 011893 store 2 ,mem_cb_discovry_timeout 0x4bfe 011894 setarg kb_before_hibernate 0x4bff 011895 store 2 ,mem_cb_before_hibernate 0x4c00 011896 setarg kb_wakeup_check 0x4c01 011897 store 2 ,mem_cb_check_wakelock 0x4c02 011898 rtn wake 0x4c03 011900 fetch 2 ,mem_ui_state_map 0x4c04 011901 bbit1 ui_state_btn_down ,app_bt_start_discovery_short 0x4c05 011902 call app_check_reconn_target 0x4c06 011903 branch kb_start_discovery ,blank 0x4c07 011904 call app_bt_stop_discovery 0x4c08 011905 branch app_bt_start_reconnect : 011908 kb_init: 0x4c09 011909 call kb_init_common 0x4c0a 011910 setarg kb_process_idle 0x4c0b 011911 store 2 ,mem_cb_idle_process 0x4c0c 011912 setarg kb_send_process 0x4c0d 011913 store 2 ,mem_cb_bt_process 0x4c0e 011914 setarg kb_process_bb_event 0x4c0f 011915 store 2 ,mem_cb_bb_event_process 0x4c10 011916 setarg kb_process_lpm_before 0x4c11 011917 store 2 ,mem_cb_before_lpm 0x4c12 011918 setarg kb_discovery_timeout_sleep 0x4c13 011919 store 2 ,mem_cb_discovry_timeout 0x4c14 011920 setarg kb_before_hibernate 0x4c15 011921 store 2 ,mem_cb_before_hibernate 0x4c16 011922 setarg kb_wakeup_check 0x4c17 011923 store 2 ,mem_cb_check_wakelock 0x4c18 011924 rtn wake 0x4c19 011926 jam 0 ,mem_sp_flag 0x4c1a 011927 jam 0 ,mem_master_sp_flag 0x4c1b 011929 fetch 2 ,mem_ui_state_map 0x4c1c 011930 bbit1 ui_state_btn_down ,app_bt_start_discovery_short 0x4c1d 011931 call app_check_reconn_target 0x4c1e 011932 branch kb_start_discovery ,blank 0x4c1f 011933 call app_bt_stop_discovery 0x4c20 011934 branch app_bt_start_reconnect : 011938 kb_init_common: 0x4c21 011939 set1 mark_ext_patch ,mark 0x4c22 011940 bpatch patch36_6 ,mem_patch36 0x4c23 011942 fetch 1 ,0x8140 0x4c24 011943 branch assert ,blank 0x4c25 011944 hjam 0 ,core_gpio_oe0 0x4c26 011945 hjam 0xff ,core_gpio_pu0 0x4c27 011947 hjam 0xff ,core_gpio_oe1 0x4c28 011948 hjam 0xff ,core_gpio_oe2 0x4c29 011949 hfetch 1 ,core_gpio_oe3 0x4c2a 011950 or_into 0x0f ,pdata 0x4c2b 011951 hstore 1 ,core_gpio_oe3 0x4c2c 011953 hjam 0x00 ,core_gpio_sel 0x4c2d 011954 hjam 0x00 ,core_gpio_sel1 0x4c2e 011955 hjam 0xff ,core_gpio_key0 0x4c2f 011956 hjam 0xFf ,core_gpio_key1 0x4c30 011957 hfetch 1 ,core_gpio_key2 0x4c31 011958 or_into 0x03 ,pdata 0x4c32 011959 hstore 1 ,core_gpio_key2 0x4c33 011960 hjam 0x00 ,core_kscn_rowmask 0x4c34 011961 setarg kb_kscan_col_1 0x4c35 011962 lshift3 pdata ,pdata 0x4c36 011963 add pdata ,kb_kscan_row_1 ,pdata 0x4c37 011964 hstore 1 ,core_kscn_rctc 0x4c38 011966 hfetch 1 ,core_config 0x4c39 011967 set1 2 ,pdata 0x4c3a 011968 hstore 1 ,core_config 0x4c3b 011969 hfetch 1 ,core_clkoff + 1 0x4c3c 011970 set0 1 ,pdata 0x4c3d 011971 hstore 1 ,core_clkoff + 1 0x4c3e 011972 hjam 0xd ,core_kscn_ksctrl 0x4c3f 011973 hjam 0xd3 ,core_kscn_m_debounce 0x4c40 011974 hjam 0 ,core_kscn_scancycle_timer_l 0x4c41 011975 hjam 0x31 ,core_kscn_scancycle_timer_h 0x4c42 011976 call lpm_disable_exen_output 0x4c43 011977 fetcht 1 ,mem_led_cap_gpio 0x4c44 011978 call gpio_config_output 0x4c45 011979 fetcht 1 ,mem_led_num_gpio 0x4c46 011980 call gpio_config_output 0x4c47 011981 fetcht 1 ,mem_led_scl_gpio 0x4c48 011982 call gpio_config_output 0x4c49 011983 rtn : 011985 kb_process_kb_report: 0x4c4a 011986 set1 mark_ext_patch ,mark 0x4c4b 011987 bpatch patch36_7 ,mem_patch36 0x4c4c 011988 ifetch 1 ,contr 0x4c4d 011989 copy pdata ,rega 0x4c4e 011990 fetcht 1 ,mem_led_num_gpio 0x4c4f 011991 isolate1 kb_num_lock_selected ,rega 0x4c50 011992 call gpio_out_flag 0x4c51 011993 fetcht 1 ,mem_led_cap_gpio 0x4c52 011994 isolate1 kb_caps_lock_selected ,rega 0x4c53 011995 call gpio_out_flag 0x4c54 011996 fetcht 1 ,mem_led_scl_gpio 0x4c55 011997 isolate1 kb_scroll_lock_selected ,rega 0x4c56 011998 call gpio_out_flag 0x4c57 011999 jam 1 ,mem_kb_rcv_led_data 0x4c58 012000 rtn : 012003 kb_send_process: 0x4c59 012005 call kb_kscan_check_if_empty 0x4c5a 012006 nrtn user 0x4c5b 012007 nrtn user2 0x4c5c 012009 fetch 1 ,mem_pincode_state 0x4c5d 012010 beq pincode_state_wait_pincode ,kb_pincode 0x4c5e 012011 fetch 1 ,mem_hid_interrupt_state 0x4c5f 012012 rtnne 0x3f 0x4c60 012014 arg 10 ,rega 0x4c61 012015 call hid_malloc_tx_buff 0x4c62 012016 fetch 2 ,mem_hid_int_remote_cid 0x4c63 012017 istore 2 ,contw 0x4c64 012018 setarg 0x01a1 0x4c65 012019 istore 2 ,contw 0x4c66 012020 fetch 8 ,mem_kb_state 0x4c67 012021 istore 8 ,contw 0x4c68 012022 rtn : 012024 kb_pincode: 0x4c69 012025 fetcht 1 ,mem_pin_length 0x4c6a 012026 setarg mem_pin 0x4c6b 012027 iadd temp ,contw 0x4c6c 012028 fetch 1 ,mem_kb_report_data 0x4c6d 012029 branch kb_pincode_rtn ,blank 0x4c6e 012030 beq kb_kcode_bksp ,kb_pincode_bksp 0x4c6f 012031 bne kb_kcode_enter ,kb_pincode_data 0x4c70 012032 storet 1 ,mem_pin_length 0x4c71 012033 branch app_bt_set_pincode : 012035 kb_pincode_rtn: 0x4c72 012036 storet 1 ,mem_pin_length 0x4c73 012037 rtn : 012038 kb_pincode_bksp: 0x4c74 012039 fetch 1 ,mem_pin_length 0x4c75 012040 rtn blank 0x4c76 012041 increase -1 ,pdata 0x4c77 012042 store 1 ,mem_pin_length 0x4c78 012043 arg mem_pin ,contw 0x4c79 012044 iadd contw ,contw 0x4c7a 012045 setarg 0 0x4c7b 012046 istore 1 ,contw 0x4c7c 012047 enable user2 0x4c7d 012048 branch kb_send_pin : 012049 kb_pincode_data: 0x4c7e 012050 sub pdata ,kb_kcode_1_m1 ,null 0x4c7f 012051 rtn positive 0x4c80 012052 arg 0x30 ,temp 0x4c81 012053 sub pdata ,kb_kcode_0 ,null 0x4c82 012054 nrtn positive 0x4c83 012055 branch kb_pincode_0 ,zero 0x4c84 012056 arg kb_kcode_1_m1 ,temp 0x4c85 012057 isub temp ,temp 0x4c86 012058 or_into 0x30 ,temp : 012059 kb_pincode_0: 0x4c87 012060 istoret 1 ,contw 0x4c88 012061 fetch 1 ,mem_pin_length 0x4c89 012062 increase 1 ,pdata 0x4c8a 012063 store 1 ,mem_pin_length 0x4c8b 012064 disable user2 0x4c8c 012065 branch kb_send_pin : 012067 kb_send_pin: 0x4c8d 012068 fetch 2 ,mem_hid_int_remote_cid 0x4c8e 012069 rtn blank 0x4c8f 012070 arg 3 ,rega 0x4c90 012071 call hid_malloc_tx_buff 0x4c91 012072 fetch 2 ,mem_hid_int_remote_cid 0x4c92 012073 istore 2 ,contw 0x4c93 012074 setarg 0xffa1 0x4c94 012075 istore 2 ,contw 0x4c95 012076 setarg 0 0x4c96 012077 setflag user2 ,0 ,pdata 0x4c97 012078 istore 1 ,contw 0x4c98 012079 rtn : 012083 kb_kscan_check_if_empty: 0x4c99 012084 disable user 0x4c9a 012085 disable user2 0x4c9b 012086 hfetch 1 ,core_kscn_kstat 0x4c9c 012087 rtnbit1 kb_kscan_stat_empty : 012089 kb_kscan_check_ghost: 0x4c9d 012090 hfetch 1 ,core_kscn_event_num 0x4c9e 012091 bbit1 kb_kscan_key_event_stat ,kb_kscan_process_event 0x4c9f 012092 hfetch 1 ,core_kscn_kstat 0x4ca0 012093 bbit0 kb_kscan_stat_ghost ,kb_kscan_process_event 0x4ca1 012094 hfetch 1 ,core_kscn_event 0x4ca2 012095 branch kb_kscan_check_if_empty : 012097 kb_kscan_process_event: 0x4ca3 012098 enable user 0x4ca4 012099 enable user2 0x4ca5 012100 hfetch 1 ,core_kscn_event_num 0x4ca6 012101 isolate0 kb_kscan_key_event_stat ,pdata 0x4ca7 012102 hfetch 1 ,core_kscn_event 0x4ca8 012103 arg mem_kb_map ,contr 0x4ca9 012104 iadd contr ,contr 0x4caa 012105 ifetch 1 ,contr 0x4cab 012106 bbit1 7 ,kb_kscan_read_statekey 0x4cac 012107 nbranch kb_kscan_release_a_key_data ,true 0x4cad 012108 disable user2 0x4cae 012109 iforce temp 0x4caf 012110 fetch 1 ,mem_kb_keys 0x4cb0 012111 sub pdata ,4 ,null 0x4cb1 012112 nrtn positive 0x4cb2 012113 copy pdata ,rega 0x4cb3 012114 arg 3 ,loopcnt 0x4cb4 012115 arg mem_kb_report_data ,contr : 012116 kb_kscan_check_report_data: 0x4cb5 012117 ifetch 1 ,contr 0x4cb6 012118 isub temp ,null 0x4cb7 012119 branch kb_kscan_check_if_empty ,zero 0x4cb8 012120 loop kb_kscan_check_report_data : 012121 kb_kscan_store_a_key_data: 0x4cb9 012122 copy rega ,pdata 0x4cba 012123 arg mem_kb_report_data ,contw 0x4cbb 012124 iadd contw ,contw 0x4cbc 012125 istoret 1 ,contw 0x4cbd 012126 increase 1 ,pdata 0x4cbe 012127 store 1 ,mem_kb_keys 0x4cbf 012128 hfetch 1 ,core_kscn_event_num 0x4cc0 012129 rshift3 pdata ,pdata 0x4cc1 012130 nbranch kb_kscan_check_nextevent ,blank 0x4cc2 012131 branch kb_kscan_prepare_send : 012133 kb_kscan_check_nextevent: 0x4cc3 012134 increase -1 ,pdata 0x4cc4 012135 branch kb_kscan_prepare_send ,zero 0x4cc5 012136 hfetch 1 ,core_kscn_event_num 0x4cc6 012137 and_into 0x01 ,pdata 0x4cc7 012138 beq kb_kscan_key_press ,kb_kscan_check_if_empty 0x4cc8 012139 beq kb_kscan_key_release ,kb_kscan_prepare_send 0x4cc9 012140 rtn : 012141 kb_kscan_prepare_send: 0x4cca 012142 enable user2 0x4ccb 012143 rtn : 012145 kb_kscan_release_a_key_data: 0x4ccc 012146 and pdata ,0xff ,temp 0x4ccd 012147 fetch 1 ,mem_kb_keys 0x4cce 012148 rtn blank 0x4ccf 012149 iforce loopcnt 0x4cd0 012150 arg mem_kb_report_data ,contr : 012151 kb_kscan_find_same_key_data: 0x4cd1 012152 ifetch 1 ,contr 0x4cd2 012153 isub temp ,null 0x4cd3 012154 branch kb_kscan_release_foundkey ,zero 0x4cd4 012155 loop kb_kscan_find_same_key_data 0x4cd5 012156 rtn : 012157 kb_kscan_release_foundkey: 0x4cd6 012158 add contr ,-1 ,contw 0x4cd7 012159 call memcpy 0x4cd8 012160 fetch 1 ,mem_kb_keys 0x4cd9 012161 increase -1 ,pdata 0x4cda 012162 store 1 ,mem_kb_keys 0x4cdb 012163 hfetch 1 ,core_kscn_event_num 0x4cdc 012164 rshift3 pdata ,pdata 0x4cdd 012165 nbranch kb_kscan_check_nextevent2 ,blank 0x4cde 012166 rtn : 012168 kb_kscan_check_nextevent2: 0x4cdf 012169 hfetch 1 ,core_kscn_event_num 0x4ce0 012170 and_into 0x01 ,pdata 0x4ce1 012171 beq kb_kscan_key_press ,kb_kscan_prepare_send 0x4ce2 012172 beq kb_kscan_key_release ,kb_kscan_check_if_empty 0x4ce3 012173 rtn : 012175 kb_kscan_read_statekey: 0x4ce4 012176 and pdata ,7 ,queue 0x4ce5 012177 fetch 1 ,mem_kb_state 0x4ce6 012178 qsetflag true ,pdata 0x4ce7 012179 store 1 ,mem_kb_state 0x4ce8 012180 rtn : 012182 kb_clear_keys: 0x4ce9 012183 setarg 0 0x4cea 012184 store 8 ,mem_kb_state 0x4ceb 012185 store 1 ,mem_kb_keys 0x4cec 012186 rtn : 012188 kb_clean_kscan_fifo: 0x4ced 012189 hfetch 1 ,core_kscn_event_num 0x4cee 012190 hfetch 1 ,core_kscn_event 0x4cef 012191 hfetch 1 ,core_kscn_kstat 0x4cf0 012192 bbit0 kb_kscan_stat_empty ,kb_clean_kscan_fifo 0x4cf1 012193 setarg 0xff 0x4cf2 012194 enable user 0x4cf3 012195 rtn : 012197 le_keyboard: 0x4cf4 012198 fetcht 2 ,mem_le_notify_handle 0x4cf5 012199 call le_att_check_notification_enable 0x4cf6 012200 rtnbit0 0 0x4cf7 012201 fetch 1 ,mem_le_switch_send_data 0x4cf8 012202 rtnbit0 0 0x4cf9 012203 call le_xtype_fifo_is_full 0x4cfa 012204 nrtn blank 0x4cfb 012205 call kb_kscan_check_if_empty 0x4cfc 012206 nrtn user 0x4cfd 012207 nrtn user2 : 012208 le_slave_keyboard_send_data: 0x4cfe 012209 call app_lpm_wake_auto_lock 0x4cff 012210 jam 2 ,mem_lpm_mult 0x4d00 012211 fetcht 2 ,mem_le_notify_handle 0x4d01 012212 call le_att_get_handle_ptr 0x4d02 012213 add contr ,1 ,contw 0x4d03 012214 fetch 8 ,mem_kb_state 0x4d04 012215 istore 8 ,contw 0x4d05 012216 jam attop_handle_value_notification ,mem_fifo_temp 0x4d06 012217 call le_xtype_fifo_in 0x4d07 012218 fetch 1 ,mem_le_op 0x4d08 012219 bbit1 op_disconn ,loop 0x4d09 012220 rtn : 012221 le_keyboard_process_bb_event: 0x4d0a 012222 copy regc ,pdata 0x4d0b 012223 beq bt_evt_button_long_pressed ,le_keyboard_bb_event_discovery_btn 0x4d0c 012225 beq bt_evt_le_connected ,le_kb_connected 0x4d0d 012226 beq bt_evt_le_write_request ,le_kb_bb_event_write_request 0x4d0e 012227 beq bt_evt_le_enc_info ,le_kb_bb_event_enc_info 0x4d0f 012228 beq bt_evt_remote_unsniff ,app_start_auto_sniff 0x4d10 012229 rtn : 012230 le_kb_bb_event_enc_info: : 012231 le_kb_bb_event_write_request: 0x4d11 012232 call app_lpm_mult_enable 0x4d12 012233 branch app_ble_start_write : 012234 le_kb_connected: 0x4d13 012235 call kb_clean_kscan_fifo 0x4d14 012236 branch kb_clear_keys : 012238 le_keyboard_bb_event_discovery_btn: 0x4d15 012239 call le_clean_att_list_handle_enable 0x4d16 012240 call app_ble_disconnect 0x4d17 012241 call app_ble_start_adv 0x4d18 012242 branch app_led_start_blink : 012244 le_keyboard_bb_event_hud_ms: 0x4d19 012245 fetch 1 ,mem_le_led_on_time 0x4d1a 012246 rtn blank 0x4d1b 012247 increase -1 ,pdata 0x4d1c 012248 store 1 ,mem_le_led_on_time 0x4d1d 012249 nrtn blank 0x4d1e 012250 fetch 1 ,mem_le_adv_type 0x4d1f 012251 rtn blank 0x4d20 012252 branch app_led_off : 012255 kb_process_idle: 0x4d21 012256 branch kb_pairing_button_check : 012259 kb_wakeup_check: 0x4d22 012260 hfetch 3 ,core_gpio_in 0x4d23 012261 copy pdata ,regb 0x4d24 012262 hfetch 1 ,core_gpio_in + 3 0x4d25 012263 and_into 0x0f ,pdata 0x4d26 012264 lshift16 pdata ,pdata 0x4d27 012265 lshift8 pdata ,pdata 0x4d28 012266 ior regb ,pdata 0x4d29 012267 fetcht 4 ,mem_kb_fast_wake_last 0x4d2a 012268 isub temp ,pdata 0x4d2b 012269 rtn blank 0x4d2c 012270 arg 0xbb ,regb 0x4d2d 012271 branch app_lpm_wake_auto_lock : 012274 kb_pairing_button_check: 0x4d2e 012275 fetch 1 ,mem_scan_mode 0x4d2f 012276 nrtn blank 0x4d30 012277 fetch 1 ,mem_app_handshake_flag 0x4d31 012278 nrtn blank 0x4d32 012279 fetch 1 ,mem_ui_button_timer 0x4d33 012280 rtn blank 0x4d34 012281 fetch 1 ,mem_ui_button_last_state 0x4d35 012282 nrtn blank 0x4d36 012283 branch app_enter_hibernate : 012285 kb_process_bb_event: 0x4d37 012286 copy regc ,pdata 0x4d38 012287 beq bt_evt_hid_connected ,kb_hid_connected 0x4d39 012288 beq bt_evt_pincode_req ,kb_process_pincode 0x4d3a 012289 beq bt_evt_hid_connected ,kb_bt_hid_handshake 0x4d3b 012290 beq bt_evt_button_long_pressed ,kb_bb_event_discovery_btn 0x4d3c 012291 beq bt_evt_remote_unsniff ,app_start_auto_sniff 0x4d3d 012292 beq bt_evt_bb_connected ,kb_stop_discovery 0x4d3e 012293 beq bt_evt_bb_disconnected ,kb_bb_disconnected 0x4d3f 012295 beq bt_evt_reconn_failed ,kb_bb_event_reconn_failed 0x4d40 012296 beq bt_evt_reconn_page_timeout ,kb_bb_event_reconn_failed 0x4d41 012297 and pdata ,0x0f ,temp 0x4d42 012298 and_into bt_evt_timer_mask ,pdata 0x4d43 012299 beq bt_evt_timer_init ,kb_bb_event_timer 0x4d44 012300 rtn : 012302 kb_bb_event_timer: 0x4d45 012303 set1 mark_ext_patch ,mark 0x4d46 012304 bpatch patch37_0 ,mem_patch37 0x4d47 012305 storet 1 ,mem_app_evt_timer_count : 012306 kb_bb_event_100ms_loop: 0x4d48 012307 fetch 1 ,mem_app_evt_timer_count 0x4d49 012308 rtn blank 0x4d4a 012309 increase -1 ,pdata 0x4d4b 012310 store 1 ,mem_app_evt_timer_count 0x4d4c 012312 call kb_check_hid_handshake_timer 0x4d4d 012313 branch kb_bb_event_100ms_loop : 012315 kb_bb_event_reconn_failed: 0x4d4e 012316 fetch 2 ,mem_ui_state_map 0x4d4f 012317 bbit1 ui_state_btn_down ,kb_start_discovery 0x4d50 012318 branch app_bb_hibernate : 012321 kb_bb_disconnected: 0x4d51 012322 set1 mark_ext_patch ,mark 0x4d52 012323 bpatch patch37_1 ,mem_patch37 0x4d53 012324 call kb_bb_discon_clear_stack 0x4d54 012325 fetch app_disc_rsn_size ,mem_app_disconn_reason 0x4d55 012327 bbit1 app_disc_by_button ,app_disconn_reason_clear 0x4d56 012328 bbit1 app_disc_after_pairing ,kb_event_light_state_pairing 0x4d57 012329 bbit1 app_disc_after_reconn ,kb_event_light_state_reconn 0x4d58 012330 branch kb_start_discovery : 012331 kb_bb_discon_clear_stack: 0x4d59 012332 jam 0 ,mem_link_key_exists 0x4d5a 012333 jam 0 ,mem_ltk_exists 0x4d5b 012334 rtn : 012336 kb_event_light_state_pairing: 0x4d5c 012337 bbit1 app_disc_after_handshake ,app_bb_hibernate 0x4d5d 012338 bbit1 app_disc_after_sniff ,app_bb_hibernate 0x4d5e 012339 branch kb_start_discovery : 012340 kb_event_light_state_reconn: 0x4d5f 012341 fetch 2 ,mem_ui_state_map 0x4d60 012342 bbit1 ui_state_btn_down ,kb_start_discovery 0x4d61 012343 branch app_bb_hibernate : 012347 kb_check_hid_handshake_timer: 0x4d62 012348 fetch 1 ,mem_hid_handshake_timer_count 0x4d63 012349 rtn blank 0x4d64 012350 increase -1 ,pdata 0x4d65 012351 store 1 ,mem_hid_handshake_timer_count 0x4d66 012352 nrtn blank 0x4d67 012353 branch kb_bt_hid_handshake : 012356 kb_bb_event_discovery_btn: 0x4d68 012357 call kb_3_0_bb_event_discovery_btn 0x4d69 012358 branch kb_start_discovery : 012360 kb_3_0_bb_event_discovery_btn: 0x4d6a 012361 set1 mark_ext_patch ,mark 0x4d6b 012362 bpatch patch37_2 ,mem_patch37 0x4d6c 012363 fetch 2 ,mem_ui_state_map 0x4d6d 012364 isolate1 ui_state_bt_reconnect ,pdata 0x4d6e 012365 call app_bt_reconnect_cancel ,true 0x4d6f 012366 fetch 2 ,mem_discovery_timeout 0x4d70 012367 store 2 ,mem_discovery_timeout_timer_count 0x4d71 012368 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x4d72 012369 set1 app_disc_by_button ,pdata 0x4d73 012370 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x4d74 012371 fetch 2 ,mem_ui_state_map 0x4d75 012372 bbit1 ui_state_bt_connected ,app_bt_disconnect 0x4d76 012373 rtn : 012376 kb_stop_discovery: 0x4d77 012377 call app_bt_stop_discovery 0x4d78 012378 branch app_led_stop_blink : 012380 kb_start_discovery: 0x4d79 012381 call app_bt_start_discovery 0x4d7a 012382 branch app_led_start_blink : 012384 kb_discovery_timeout_sleep: 0x4d7b 012385 branch app_enter_hibernate : 012387 kb_process_pincode: 0x4d7c 012388 jam 0 ,mem_pin_length 0x4d7d 012389 rtn : 012392 kb_before_hibernate: : 012394 kb_process_lpm_before: 0x4d7e 012395 hjam 0x00 ,core_gpio_key0 0x4d7f 012396 hjam 0x00 ,core_gpio_key1 0x4d80 012397 hfetch 1 ,core_gpio_key2 0x4d81 012398 and_into 0xf0 ,pdata 0x4d82 012399 hstore 1 ,core_gpio_key2 0x4d83 012400 setarg 0x00 0x4d84 012401 store 4 ,mem_gpio_wakeup_high 0x4d85 012402 setarg 0xff 0x4d86 012403 fetcht 1 ,mem_ui_button_gpio 0x4d87 012404 copy temp ,queue 0x4d88 012405 qset1 pdata 0x4d89 012406 store 4 ,mem_gpio_wakeup_low 0x4d8a 012407 rtn : 012409 kb_hid_connected: 0x4d8b 012410 setarg hid_handshake_timeout 0x4d8c 012411 store 1 ,mem_hid_handshake_timer_count 0x4d8d 012412 call kb_clean_kscan_fifo 0x4d8e 012416 branch kb_clear_keys : 012417 kb_bt_hid_handshake: 0x4d8f 012418 set1 mark_ext_patch ,mark 0x4d90 012419 bpatch patch37_3 ,mem_patch37 0x4d91 012420 jam app_handshake_done ,mem_app_handshake_flag 0x4d92 012421 call app_lpm_mult_enable 0x4d93 012422 call app_bt_store_reconn_info 0x4d94 012424 setarg 0 0x4d95 012425 store 2 ,mem_discovery_timeout_timer_count 0x4d96 012426 store 1 ,mem_hid_handshake_timer_count 0x4d97 012427 branch app_bt_enter_sniff : 012434 l2cap_init: 0x4d98 012435 branch l2cap_init_wake ,wake : 012436 l2cap_init_work: 0x4d99 012437 setarg mem_l2cap_xmem_end 0x4d9a 012438 arg mem_l2cap_xmem_start ,contw 0x4d9b 012439 isub contw ,loopcnt 0x4d9c 012440 call clear_mem : 012441 l2cap_init_wake: 0x4d9d 012442 set1 mark_ext_patch ,mark 0x4d9e 012443 bpatch patch22_6 ,mem_patch22 0x4d9f 012444 setarg mem_sdp_mem_end 0x4da0 012445 arg mem_sdp_mem_start ,contw 0x4da1 012446 isub contw ,loopcnt 0x4da2 012447 call clear_mem 0x4da3 012448 setarg mem_l2cap_mem_end 0x4da4 012449 arg mem_l2cap_mem_start ,contw 0x4da5 012450 isub contw ,loopcnt 0x4da6 012451 call clear_mem 0x4da7 012452 branch l2cap_lpm_load_txbuf : 012454 process_rx_l2cap_pkt: 0x4da8 012455 set1 mark_ext_patch ,mark 0x4da9 012456 bpatch patch22_7 ,mem_patch22 0x4daa 012457 copy contr ,temp 0x4dab 012460 copy temp ,contr 0x4dac 012461 ifetch 2 ,contr 0x4dad 012462 store 2 ,mem_l2cap_rx_pkt_length 0x4dae 012463 ifetch 2 ,contr 0x4daf 012464 store 2 ,mem_l2cap_rx_cid 0x4db0 012465 deposit contr 0x4db1 012466 store 2 ,mem_l2cap_payload_ptr 0x4db2 012467 fetch 1 ,memui_reconnect_mode 0x4db3 012468 beq no_reconnection ,l2cap_rx_multiplexing 0x4db4 012469 branch ml2cap_rx_multiplexing : 012471 l2cap_rx_multiplexing: 0x4db5 012472 set1 mark_ext_patch ,mark 0x4db6 012473 bpatch patch23_0 ,mem_patch23 0x4db7 012474 fetch 2 ,mem_l2cap_rx_pkt_length 0x4db8 012475 branch l2cap_rx_reset_state ,blank 0x4db9 012476 fetch 1 ,mem_l2cap_rx_cid 0x4dba 012477 beq l2cap_signal_channel ,l2cap_call_proc_signal : 012478 l2cap_rx_multiplexing0: 0x4dbb 012479 beq l2cap_sdp_channel ,l2cap_call_proc_sdp 0x4dbc 012480 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 0x4dbd 012481 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 0x4dbe 012482 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 0x4dbf 012483 branch l2cap_rx_reset_state : 012485 l2cap_call_proc_signal: 0x4dc0 012486 call l2cap_malloc_is_fifo_full 0x4dc1 012487 nrtn blank 0x4dc2 012488 jam 0 ,mem_l2cap_pending_item : 012489 l2cap_call_proc_signal0: 0x4dc3 012490 call l2cap_malloc_signal_channel 0x4dc4 012491 call l2cap_process_signal_pkt 0x4dc5 012492 fetcht 2 ,mem_l2cap_signal_tx_length 0x4dc6 012493 branch l2cap_call_proc_no_reply ,blank 0x4dc7 012494 call l2cap_get_signal_tx_buff 0x4dc8 012495 fetch 2 ,mem_l2cap_signal_tx_length 0x4dc9 012496 istore 2 ,contw 0x4dca 012497 force l2cap_signal_channel ,pdata 0x4dcb 012498 istore 2 ,contw 0x4dcc 012499 branch l2cap_rx_reset_state : 012501 l2cap_call_proc_sigal_pending: 0x4dcd 012502 fetch 1 ,mem_device_option 0x4dce 012503 rtneq dvc_op_hci 0x4dcf 012504 fetch 1 ,mem_l2cap_pending_item 0x4dd0 012505 rtn blank 0x4dd1 012506 copy pdata ,rega 0x4dd2 012507 fetch 4 ,mem_l2cap_sdpres_delay_time 0x4dd3 012508 arg 0x100 ,temp 0x4dd4 012509 iadd temp ,temp 0x4dd5 012510 copy clkn_bt ,pdata 0x4dd6 012511 isub temp ,null 0x4dd7 012512 nrtn positive 0x4dd8 012513 jam 0 ,mem_l2cap_pending_item 0x4dd9 012514 copy rega ,pdata 0x4dda 012515 beq l2cap_sdp_channel ,l2cap_sdp_conn_succ 0x4ddb 012516 branch assert : 012517 l2cap_sdp_conn_succ: 0x4ddc 012518 call l2cap_malloc_signal_channel 0x4ddd 012519 call restore_l2cap_req_param 0x4dde 012520 call l2cap_get_signal_tx_payload 0x4ddf 012521 call save_cont_pointers 0x4de0 012522 call send_connection_sdp_res 0x4de1 012523 call l2cap_get_signal_tx_buff 0x4de2 012525 setarg 0x000c 0x4de3 012526 istore 2 ,contw 0x4de4 012527 force l2cap_signal_channel ,pdata 0x4de5 012528 istore 2 ,contw 0x4de6 012529 branch l2cap_rx_reset_state : 012531 l2cap_call_proc_sdp: 0x4de7 012532 call l2cap_malloc_is_fifo_empty 0x4de8 012533 nrtn blank 0x4de9 012534 call l2cap_malloc_sdp_channel 0x4dea 012535 call sdp_process 0x4deb 012536 call l2cap_get_sdp_tx_buff 0x4dec 012537 fetch 2 ,mem_sdp_tx_pkt_length 0x4ded 012538 branch l2cap_call_proc_no_reply ,blank 0x4dee 012539 istore 2 ,contw 0x4def 012540 fetch 2 ,mem_sdp_remote_cid 0x4df0 012541 istore 2 ,contw 0x4df1 012542 branch l2cap_rx_reset_state : 012544 l2cap_call_proc_hid: 0x4df2 012545 call hid_rx_process 0x4df3 012546 branch l2cap_rx_reset_state : 012548 l2cap_call_proc_rfcomm: 0x4df4 012549 set1 mark_ext_patch ,mark 0x4df5 012550 bpatch patch23_1 ,mem_patch23 0x4df6 012551 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 0x4df7 012552 call rfcomm_rx_process 0x4df8 012553 fetch 1 ,mem_rfcomm_malloc_fail_flag 0x4df9 012554 rtneq rfcomm_malloc_fail 0x4dfa 012555 branch l2cap_rx_reset_state : 012556 l2cap_call_proc_no_reply: 0x4dfb 012557 call l2cap_malloc_discard : 012559 l2cap_rx_reset_state: 0x4dfc 012560 setarg 0 0x4dfd 012561 store 2 ,mem_l2cap_rx_pkt_length 0x4dfe 012562 store 2 ,mem_l2cap_rx_cid 0x4dff 012563 jam l2cap_rx_done ,mem_l2cap_rx_done 0x4e00 012564 rtn : 012566 l2cap_process_signal_pkt: 0x4e01 012567 set1 mark_ext_patch ,mark 0x4e02 012568 bpatch patch23_2 ,mem_patch23 0x4e03 012569 call l2cap_get_signal_tx_payload 0x4e04 012570 force 0 ,regb 0x4e05 012571 fetch 2 ,mem_l2cap_rx_pkt_length 0x4e06 012572 copy pdata ,regc 0x4e07 012573 fetch 2 ,mem_l2cap_payload_ptr 0x4e08 012574 iforce contr : 012575 l2cap_process_signal_pkt_loop: 0x4e09 012576 call l2cap_process_one_signal 0x4e0a 012577 deposit regc 0x4e0b 012578 increase -4 ,regc 0x4e0c 012579 increase -4 ,pdata 0x4e0d 012580 nbranch l2cap_process_signal_pkt_loop ,blank 0x4e0e 012581 copy regb ,pdata 0x4e0f 012582 store 2 ,mem_l2cap_signal_tx_length 0x4e10 012583 rtn : 012585 l2cap_process_one_signal: 0x4e11 012586 set1 mark_ext_patch ,mark 0x4e12 012587 bpatch patch23_3 ,mem_patch23 0x4e13 012588 ifetch 1 ,contr 0x4e14 012589 beq signal_cmd_reject ,l2cap_proc_signal_cmd_reject 0x4e15 012590 beq signal_connect_req ,l2cap_proc_signal_connect_req 0x4e16 012591 beq signal_connect_rsp ,l2cap_proc_signal_connect_rsp 0x4e17 012592 beq signal_config_req ,l2cap_proc_signal_config_req 0x4e18 012593 beq signal_config_rsp ,l2cap_proc_signal_config_rsp 0x4e19 012594 beq signal_disconnect_req ,l2cap_proc_signal_disconnect_req 0x4e1a 012595 beq signal_disconnect_rsp ,l2cap_proc_signal_disconnect_rsp 0x4e1b 012596 beq signal_echo_req ,l2cap_proc_signal_echo_req 0x4e1c 012597 beq signal_echo_rsp ,l2cap_proc_signal_echo_rsp 0x4e1d 012598 beq signal_info_req ,l2cap_proc_signal_info_req 0x4e1e 012599 beq signal_info_rsp ,l2cap_proc_signal_info_rsp 0x4e1f 012600 call l2cap_reject_command : 012601 l2cap_process_one_signal_rtn: 0x4e20 012602 rtn : 012604 l2cap_proc_signal_info_req: 0x4e21 012605 ifetch 1 ,contr 0x4e22 012606 copy pdata ,queue 0x4e23 012607 ifetch 2 ,contr 0x4e24 012608 copy pdata ,rega 0x4e25 012609 copy regc ,pdata 0x4e26 012610 isub rega ,regc 0x4e27 012611 copy rega ,pdata 0x4e28 012612 iadd contr ,contr 0x4e29 012613 setarg 0x0b 0x4e2a 012614 istore 1 ,contw 0x4e2b 012615 copy queue ,pdata 0x4e2c 012616 istore 1 ,contw 0x4e2d 012617 force 0x0008 ,pdata 0x4e2e 012618 istore 2 ,contw 0x4e2f 012619 force 0x0002 ,pdata 0x4e30 012620 istore 2 ,contw 0x4e31 012621 force 0x0000 ,pdata 0x4e32 012622 istore 2 ,contw 0x4e33 012623 force 0x0400 ,pdata 0x4e34 012624 istore 2 ,contw 0x4e35 012625 force 0x0000 ,pdata 0x4e36 012626 istore 2 ,contw 0x4e37 012627 force 12 ,pdata 0x4e38 012628 iadd regb ,regb 0x4e39 012629 branch l2cap_process_one_signal_rtn : 012631 ml2cap_proc_signal_info_req: 0x4e3a 012632 ifetch 1 ,contr 0x4e3b 012633 copy pdata ,queue 0x4e3c 012634 ifetch 2 ,contr 0x4e3d 012635 copy pdata ,rega 0x4e3e 012636 copy regc ,pdata 0x4e3f 012637 isub rega ,regc 0x4e40 012638 copy rega ,pdata 0x4e41 012639 iadd contr ,contr 0x4e42 012640 call l2cap_get_signal_tx_payload 0x4e43 012641 setarg 0x0b 0x4e44 012642 istore 1 ,contw 0x4e45 012643 copy queue ,pdata 0x4e46 012644 istore 1 ,contw 0x4e47 012645 force 0x0008 ,pdata 0x4e48 012646 istore 2 ,contw 0x4e49 012647 force 0x0002 ,pdata 0x4e4a 012648 istore 2 ,contw 0x4e4b 012649 force 0x0000 ,pdata 0x4e4c 012650 istore 2 ,contw 0x4e4d 012651 force 0x0400 ,pdata 0x4e4e 012652 istore 2 ,contw 0x4e4f 012653 force 0x0000 ,pdata 0x4e50 012654 istore 2 ,contw 0x4e51 012655 force 12 ,pdata 0x4e52 012656 iadd regb ,regb 0x4e53 012658 branch l2cap_process_one_signal_rtn : 012662 l2cap_proc_signal_cmd_reject: 0x4e54 012663 ifetch 1 ,contr 0x4e55 012664 copy pdata ,queue 0x4e56 012665 ifetch 2 ,contr 0x4e57 012666 copy pdata ,rega 0x4e58 012667 iadd contr ,contr 0x4e59 012668 copy regc ,pdata 0x4e5a 012669 isub rega ,regc : 012670 l2cap_proc_signal_cmd_reject_rtn: 0x4e5b 012671 branch l2cap_process_one_signal_rtn : 012673 l2cap_proc_signal_connect_req: 0x4e5c 012674 call save_cont_pointers 0x4e5d 012677 call load_cont_pointers 0x4e5e 012678 arg 0 ,debug 0x4e5f 012679 ifetch 1 ,contr 0x4e60 012680 copy pdata ,queue 0x4e61 012681 ifetch 2 ,contr 0x4e62 012682 copy pdata ,rega 0x4e63 012683 ifetch 2 ,contr 0x4e64 012684 copy pdata ,temp 0x4e65 012685 ifetch 2 ,contr 0x4e66 012686 copy pdata ,timeup 0x4e67 012687 copy temp ,pdata 0x4e68 012688 beq psm_sdp ,l2cap_proc_signal_connect_req_sdp 0x4e69 012689 beq psm_rfcomm ,l2cap_proc_signal_connect_req_rfcomm 0x4e6a 012690 beq psm_hid_control ,l2cap_proc_signal_connect_req_hid_ctrl 0x4e6b 012691 beq psm_hid_interrupt ,l2cap_proc_signal_connect_req_hid_int 0x4e6c 012692 call l2cap_reject_command 0x4e6d 012693 branch l2cap_proc_signal_connect_req_rtn : 012695 l2cap_proc_signal_connect_req_sdp: 0x4e6e 012696 call save_cont_pointers 0x4e6f 012697 arg l2cap_sdp_channel ,temp 0x4e70 012698 fetch 2 ,mem_sdp_remote_cid 0x4e71 012699 nbranch already_connected ,blank 0x4e72 012700 copy timeup ,pdata 0x4e73 012701 store 2 ,mem_sdp_remote_cid 0x4e74 012702 copy clkn_bt ,pdata 0x4e75 012703 store 4 ,mem_l2cap_sdpres_delay_time 0x4e76 012704 call store_l2cap_req_param 0x4e77 012705 branch send_connection_pending : 012707 store_l2cap_req_param: 0x4e78 012708 storet 2 ,mem_psm 0x4e79 012709 deposit timeup 0x4e7a 012710 store 2 ,mem_scid 0x4e7b 012711 deposit rega 0x4e7c 012712 store 2 ,mem_cmd_length 0x4e7d 012713 deposit regb 0x4e7e 012714 store 2 ,mem_tt2 0x4e7f 012715 deposit regc 0x4e80 012716 store 2 ,mem_tt3 0x4e81 012717 deposit queue 0x4e82 012718 store 2 ,mem_id 0x4e83 012719 rtn : 012721 restore_l2cap_req_param: 0x4e84 012722 fetcht 2 ,mem_psm 0x4e85 012723 fetch 2 ,mem_scid 0x4e86 012724 copy pdata ,timeup 0x4e87 012725 fetch 2 ,mem_cmd_length 0x4e88 012726 copy pdata ,rega 0x4e89 012727 fetch 2 ,mem_tt2 0x4e8a 012728 copy pdata ,regb 0x4e8b 012729 fetch 2 ,mem_tt3 0x4e8c 012730 copy pdata ,regc 0x4e8d 012731 fetch 2 ,mem_id 0x4e8e 012732 copy pdata ,queue 0x4e8f 012733 rtn : 012735 l2cap_proc_signal_connect_req_rfcomm: 0x4e90 012736 call save_cont_pointers 0x4e91 012737 setarg l2cap_rfcomm_channel 0x4e92 012738 arg l2cap_rfcomm_channel ,temp 0x4e93 012739 fetch 2 ,mem_rfcomm_remote_cid 0x4e94 012740 nbranch already_connected ,blank 0x4e95 012741 copy timeup ,pdata 0x4e96 012742 store 2 ,mem_rfcomm_remote_cid 0x4e97 012743 fetch 1 ,mem_rfcomm_state 0x4e98 012744 set1 l2cap_channel_state_conn_req ,pdata 0x4e99 012745 set1 l2cap_channel_state_conn_res ,pdata 0x4e9a 012746 store 1 ,mem_rfcomm_state 0x4e9b 012747 branch send_connection_res : 012748 l2cap_proc_signal_connect_req_hid_ctrl: 0x4e9c 012749 call save_cont_pointers 0x4e9d 012750 arg l2cap_hid_control_channel ,temp 0x4e9e 012751 fetch 2 ,mem_hid_ctrl_remote_cid 0x4e9f 012752 nbranch already_connected ,blank 0x4ea0 012753 copy timeup ,pdata 0x4ea1 012754 store 2 ,mem_hid_ctrl_remote_cid 0x4ea2 012755 fetch 1 ,mem_hid_control_state 0x4ea3 012756 set1 l2cap_channel_state_conn_req ,pdata 0x4ea4 012757 set1 l2cap_channel_state_conn_res ,pdata 0x4ea5 012758 store 1 ,mem_hid_control_state 0x4ea6 012759 branch send_connection_res : 012760 l2cap_proc_signal_connect_req_hid_int: 0x4ea7 012761 call save_cont_pointers 0x4ea8 012762 deposit clke 0x4ea9 012763 arg l2cap_hid_interrupt_channel ,temp 0x4eaa 012764 fetch 2 ,mem_hid_int_remote_cid 0x4eab 012765 nbranch already_connected ,blank 0x4eac 012766 copy timeup ,pdata 0x4ead 012767 store 2 ,mem_hid_int_remote_cid 0x4eae 012768 fetch 1 ,mem_hid_interrupt_state 0x4eaf 012769 set1 l2cap_channel_state_conn_req ,pdata 0x4eb0 012770 set1 l2cap_channel_state_conn_res ,pdata 0x4eb1 012771 store 1 ,mem_hid_interrupt_state 0x4eb2 012772 branch send_connection_res : 012774 send_connection_pending: 0x4eb3 012775 setarg l2cap_connect_pending 0x4eb4 012776 store 2 ,meml2cap_t1 0x4eb5 012777 jam l2cap_sdp_channel ,mem_l2cap_pending_item 0x4eb6 012778 branch send_connection_res0 : 012779 send_connection_sdp_res: 0x4eb7 012780 fetch 1 ,mem_sdp_state 0x4eb8 012781 set1 l2cap_channel_state_conn_req ,pdata 0x4eb9 012782 set1 l2cap_channel_state_conn_res ,pdata 0x4eba 012783 store 1 ,mem_sdp_state : 012784 send_connection_res: 0x4ebb 012785 setarg l2cap_connect_successful 0x4ebc 012786 store 2 ,meml2cap_t1 : 012787 send_connection_res0: 0x4ebd 012788 set1 mark_ext_patch ,mark 0x4ebe 012789 bpatch patch23_4 ,mem_patch23 0x4ebf 012790 call load_cont_pointers 0x4ec0 012791 setarg signal_connect_rsp 0x4ec1 012792 istore 1 ,contw 0x4ec2 012793 copy queue ,pdata 0x4ec3 012794 istore 1 ,contw 0x4ec4 012795 setarg 0x0008 0x4ec5 012796 istore 2 ,contw 0x4ec6 012797 copy temp ,pdata 0x4ec7 012798 istore 2 ,contw 0x4ec8 012799 copy timeup ,pdata 0x4ec9 012800 istore 2 ,contw 0x4eca 012801 fetch 2 ,meml2cap_t1 0x4ecb 012802 beq l2cap_connect_pending ,connect_pending 0x4ecc 012803 isolate0 0 ,debug 0x4ecd 012804 branch connect_suc ,true 0x4ece 012805 setarg l2cap_connect_refused_no_resources : 012806 connect_suc: 0x4ecf 012807 istore 2 ,contw 0x4ed0 012808 force 0x0000 ,pdata 0x4ed1 012809 istore 2 ,contw 0x4ed2 012810 setarg 12 0x4ed3 012811 branch connect_req_update_byte_counts : 012812 connect_pending: 0x4ed4 012813 istore 2 ,contw 0x4ed5 012814 force 0x0002 ,pdata 0x4ed6 012815 istore 2 ,contw 0x4ed7 012816 setarg 12 0x4ed8 012817 branch connect_req_update_byte_counts : 012819 already_connected: 0x4ed9 012820 set1 0 ,debug 0x4eda 012821 branch send_connection_res : 012822 connect_req_update_byte_counts: 0x4edb 012823 iadd regb ,regb 0x4edc 012824 copy regc ,pdata 0x4edd 012825 isub rega ,regc 0x4ede 012826 branch l2cap_proc_signal_connect_req_rtn : 012827 l2cap_proc_signal_connect_req_rtn: 0x4edf 012828 branch l2cap_process_one_signal_rtn : 012830 l2cap_proc_signal_connect_rsp: 0x4ee0 012831 ifetch 1 ,contr 0x4ee1 012832 copy pdata ,queue 0x4ee2 012833 ifetch 2 ,contr 0x4ee3 012834 copy pdata ,rega 0x4ee4 012835 copy regc ,pdata 0x4ee5 012836 isub rega ,regc 0x4ee6 012837 ifetch 2 ,contr 0x4ee7 012838 copy pdata ,timeup 0x4ee8 012839 ifetch 2 ,contr 0x4ee9 012840 copy pdata ,temp 0x4eea 012841 setarg l2cap_sdp_channel 0x4eeb 012842 isub temp ,null 0x4eec 012843 branch l2cap_proc_signal_connect_rsp_sdp ,zero 0x4eed 012844 setarg l2cap_rfcomm_channel 0x4eee 012845 isub temp ,null 0x4eef 012846 branch l2cap_proc_signal_connect_rsp_rfcomm ,zero 0x4ef0 012847 setarg l2cap_hid_control_channel 0x4ef1 012848 isub temp ,null 0x4ef2 012849 branch l2cap_proc_signal_connect_rsp_hid_ctrl ,zero 0x4ef3 012850 setarg l2cap_hid_interrupt_channel 0x4ef4 012851 isub temp ,null 0x4ef5 012852 branch l2cap_proc_signal_connect_rsp_hid_int ,zero 0x4ef6 012853 rtn : 012855 l2cap_proc_signal_connect_rsp_sdp: 0x4ef7 012856 copy timeup ,pdata 0x4ef8 012857 store 2 ,mem_sdp_remote_cid 0x4ef9 012858 fetch 1 ,mem_sdp_state 0x4efa 012859 set1 l2cap_channel_state_conn_res ,pdata 0x4efb 012860 store 1 ,mem_sdp_state 0x4efc 012861 branch l2cap_process_one_signal_rtn : 012862 l2cap_proc_signal_connect_rsp_rfcomm: 0x4efd 012863 copy timeup ,pdata 0x4efe 012864 store 2 ,mem_rfcomm_remote_cid 0x4eff 012865 fetch 1 ,mem_rfcomm_state 0x4f00 012866 set1 l2cap_channel_state_conn_res ,pdata 0x4f01 012867 store 1 ,mem_rfcomm_state 0x4f02 012868 rtn : 012869 l2cap_proc_signal_connect_rsp_hid_int: 0x4f03 012870 copy timeup ,pdata 0x4f04 012871 store 2 ,mem_hid_ctrl_remote_cid 0x4f05 012872 fetch 1 ,mem_hid_interrupt_state 0x4f06 012873 set1 l2cap_channel_state_conn_res ,pdata 0x4f07 012874 store 1 ,mem_hid_interrupt_state 0x4f08 012875 rtn : 012876 l2cap_proc_signal_connect_rsp_hid_ctrl: 0x4f09 012877 copy timeup ,pdata 0x4f0a 012878 store 2 ,mem_hid_int_remote_cid 0x4f0b 012879 fetch 1 ,mem_hid_control_state 0x4f0c 012880 set1 l2cap_channel_state_conn_res ,pdata 0x4f0d 012881 store 1 ,mem_hid_control_state 0x4f0e 012882 rtn : 012884 l2cap_proc_signal_config_req: 0x4f0f 012885 ifetch 1 ,contr 0x4f10 012886 copy pdata ,queue 0x4f11 012887 ifetch 2 ,contr 0x4f12 012888 copy pdata ,rega 0x4f13 012889 copy regc ,pdata 0x4f14 012890 isub rega ,regc 0x4f15 012891 ifetch 2 ,contr 0x4f16 012892 copy pdata ,temp 0x4f17 012893 copy temp ,rega 0x4f18 012894 setarg l2cap_sdp_channel 0x4f19 012895 isub temp ,null 0x4f1a 012896 branch l2cap_proc_signal_config_req_sdp ,zero 0x4f1b 012897 setarg l2cap_rfcomm_channel 0x4f1c 012898 isub temp ,null 0x4f1d 012899 branch l2cap_proc_signal_config_req_rfcomm ,zero 0x4f1e 012900 setarg l2cap_hid_control_channel 0x4f1f 012901 isub temp ,null 0x4f20 012902 branch l2cap_proc_signal_config_req_hid_ctrl ,zero 0x4f21 012903 setarg l2cap_hid_interrupt_channel 0x4f22 012904 isub temp ,null 0x4f23 012905 branch l2cap_proc_signal_config_req_hid_int ,zero 0x4f24 012906 branch l2cap_reject_command : 012908 l2cap_proc_signal_config_req_sdp: 0x4f25 012909 copy contw ,timeup 0x4f26 012910 fetch 1 ,mem_sdp_state 0x4f27 012911 set1 l2cap_channel_state_rcv_cfg_req ,pdata 0x4f28 012912 set1 l2cap_channel_state_snd_cfg_res ,pdata 0x4f29 012914 store 1 ,mem_sdp_state 0x4f2a 012915 copy timeup ,contw 0x4f2b 012916 arg l2cap_sdp_channel ,timeup 0x4f2c 012917 fetch 2 ,mem_sdp_remote_cid 0x4f2d 012918 copy pdata ,temp 0x4f2e 012919 branch l2cap_send_config_rsp : 012920 l2cap_proc_signal_config_req_hid_ctrl: 0x4f2f 012921 copy contw ,timeup 0x4f30 012922 fetch 1 ,mem_hid_control_state 0x4f31 012923 set1 l2cap_channel_state_rcv_cfg_req ,pdata 0x4f32 012924 set1 l2cap_channel_state_snd_cfg_res ,pdata 0x4f33 012926 store 1 ,mem_hid_control_state 0x4f34 012927 copy timeup ,contw 0x4f35 012928 arg l2cap_hid_control_channel ,timeup 0x4f36 012929 fetch 2 ,mem_hid_ctrl_remote_cid 0x4f37 012930 copy pdata ,temp 0x4f38 012931 branch l2cap_send_config_rsp : 012932 l2cap_proc_signal_config_req_hid_int: 0x4f39 012933 copy contw ,timeup 0x4f3a 012934 fetch 1 ,mem_hid_interrupt_state 0x4f3b 012935 set1 l2cap_channel_state_rcv_cfg_req ,pdata 0x4f3c 012936 set1 l2cap_channel_state_snd_cfg_res ,pdata 0x4f3d 012938 store 1 ,mem_hid_interrupt_state 0x4f3e 012939 copy timeup ,contw 0x4f3f 012940 arg l2cap_hid_interrupt_channel ,timeup 0x4f40 012941 fetch 2 ,mem_hid_int_remote_cid 0x4f41 012942 copy pdata ,temp 0x4f42 012943 branch l2cap_send_config_rsp : 012944 l2cap_proc_signal_config_req_rfcomm: 0x4f43 012945 copy contw ,timeup 0x4f44 012946 fetch 1 ,mem_rfcomm_state 0x4f45 012947 set1 l2cap_channel_state_rcv_cfg_req ,pdata 0x4f46 012948 set1 l2cap_channel_state_snd_cfg_res ,pdata 0x4f47 012950 store 1 ,mem_rfcomm_state 0x4f48 012952 copy timeup ,contw 0x4f49 012953 arg l2cap_rfcomm_channel ,timeup 0x4f4a 012954 fetch 2 ,mem_rfcomm_remote_cid 0x4f4b 012955 copy pdata ,temp : 012956 l2cap_send_config_rsp: 0x4f4c 012957 set1 mark_ext_patch ,mark 0x4f4d 012958 bpatch patch23_5 ,mem_patch23 0x4f4e 012959 setarg signal_config_rsp 0x4f4f 012960 istore 1 ,contw 0x4f50 012961 copy queue ,pdata 0x4f51 012962 istore 1 ,contw 0x4f52 012963 setarg 0x0006 0x4f53 012964 istore 2 ,contw 0x4f54 012965 copy temp ,pdata 0x4f55 012966 istore 2 ,contw 0x4f56 012967 force 0x00 ,pdata 0x4f57 012968 istore 2 ,contw 0x4f58 012969 force l2cap_config_success ,pdata 0x4f59 012970 istore 2 ,contw 0x4f5a 012971 force 10 ,pdata 0x4f5b 012972 iadd regb ,regb 0x4f5c 012974 storet 2 ,mem_config_req_dest_cid 0x4f5d 012975 copy queue ,pdata 0x4f5e 012976 store 1 ,mem_config_identifier 0x4f5f 012977 force l2cap_sdp_channel ,pdata 0x4f60 012978 icompare 0xff ,timeup 0x4f61 012979 branch l2cap_send_config_rsp_is_sdp ,true 0x4f62 012980 increase 1 ,pdata : 012981 l2cap_send_config_rsp_is_sdp: 0x4f63 012983 rtn : 012984 l2cap_check_channel_state: 0x4f64 012985 disable user 0x4f65 012986 rtnbit1 l2cap_channel_state_snd_cfg_req ,pdata 0x4f66 012987 rtnbit0 l2cap_channel_state_conn_req ,pdata 0x4f67 012988 rtnbit0 l2cap_channel_state_conn_res ,pdata 0x4f68 012989 set1 l2cap_channel_state_snd_cfg_req ,pdata 0x4f69 012990 copy contr ,contw 0x4f6a 012991 increase -1 ,contw 0x4f6b 012992 istore 1 ,contw 0x4f6c 012993 enable user 0x4f6d 012994 rtn : 012995 l2cap_send_config_req: : 012996 l2cap_send_config_req_sdp: 0x4f6e 012997 fetch 1 ,mem_sdp_state 0x4f6f 012998 call l2cap_check_channel_state 0x4f70 012999 nbranch l2cap_send_config_req_rfcomm ,user 0x4f71 013000 jam l2cap_sdp_channel ,mem_send_config_req 0x4f72 013001 fetch 2 ,mem_sdp_remote_cid 0x4f73 013002 store 2 ,mem_config_req_dest_cid 0x4f74 013003 branch l2cap_generate_config_req : 013004 l2cap_send_config_req_rfcomm: 0x4f75 013005 fetch 1 ,mem_rfcomm_state 0x4f76 013006 call l2cap_check_channel_state 0x4f77 013007 nbranch l2cap_send_config_req_hid_ctrl ,user 0x4f78 013008 jam l2cap_rfcomm_channel ,mem_send_config_req 0x4f79 013009 fetch 2 ,mem_rfcomm_remote_cid 0x4f7a 013010 store 2 ,mem_config_req_dest_cid 0x4f7b 013011 branch l2cap_generate_config_req : 013012 l2cap_send_config_req_hid_ctrl: 0x4f7c 013013 fetch 1 ,mem_hid_control_state 0x4f7d 013014 call l2cap_check_channel_state 0x4f7e 013015 nbranch l2cap_send_config_req_hid_int ,user 0x4f7f 013016 jam l2cap_hid_control_channel ,mem_send_config_req 0x4f80 013017 fetch 2 ,mem_hid_ctrl_remote_cid 0x4f81 013018 store 2 ,mem_config_req_dest_cid 0x4f82 013019 branch l2cap_generate_config_req : 013020 l2cap_send_config_req_hid_int: 0x4f83 013021 fetch 1 ,mem_hid_interrupt_state 0x4f84 013022 call l2cap_check_channel_state 0x4f85 013023 nrtn user 0x4f86 013024 jam l2cap_hid_interrupt_channel ,mem_send_config_req 0x4f87 013025 fetch 2 ,mem_hid_int_remote_cid 0x4f88 013026 store 2 ,mem_config_req_dest_cid : 013029 l2cap_generate_config_req: 0x4f89 013030 set1 mark_ext_patch ,mark 0x4f8a 013031 bpatch patch23_6 ,mem_patch23 0x4f8b 013032 call l2cap_get_req_id 0x4f8c 013033 call l2cap_malloc_signal_channel 0x4f8d 013034 force 0 ,regb 0x4f8e 013035 call l2cap_get_signal_tx_payload 0x4f8f 013036 force signal_config_req ,pdata 0x4f90 013037 istore 1 ,contw 0x4f91 013038 fetch 1 ,mem_ml2cap_comm_id 0x4f92 013039 istore 1 ,contw 0x4f93 013040 setarg 0x0008 0x4f94 013041 istore 2 ,contw 0x4f95 013042 fetch 2 ,mem_config_req_dest_cid 0x4f96 013043 istore 2 ,contw 0x4f97 013044 setarg 0x0000 0x4f98 013045 istore 2 ,contw 0x4f99 013046 force 1 ,pdata 0x4f9a 013047 istore 1 ,contw 0x4f9b 013048 force 2 ,pdata 0x4f9c 013049 istore 1 ,contw 0x4f9d 013050 fetch 1 ,mem_send_config_req 0x4f9e 013051 beq l2cap_rfcomm_channel ,l2cap_generate_config_req_rfcomm 0x4f9f 013052 setarg l2cap_config_mtu_sdp 0x4fa0 013053 istore 2 ,contw 0x4fa1 013054 branch l2cap_generate_config_req_done : 013055 l2cap_generate_config_req_rfcomm: 0x4fa2 013056 setarg l2cap_config_mtu_rfcomm 0x4fa3 013057 istore 2 ,contw : 013058 l2cap_generate_config_req_done: 0x4fa4 013059 arg 0x0c ,temp 0x4fa5 013060 storet 2 ,mem_l2cap_signal_tx_length 0x4fa6 013061 call l2cap_get_signal_tx_buff 0x4fa7 013062 fetch 2 ,mem_l2cap_signal_tx_length 0x4fa8 013063 istore 2 ,contw 0x4fa9 013064 force l2cap_signal_channel ,pdata 0x4faa 013065 istore 2 ,contw 0x4fab 013066 jam 0 ,mem_send_config_req : 013067 l2cap_proc_signal_config_req_rtn: 0x4fac 013068 branch l2cap_process_one_signal_rtn : 013070 l2cap_proc_signal_config_rsp: 0x4fad 013071 increase 1 ,contr 0x4fae 013072 ifetch 2 ,contr 0x4faf 013073 copy pdata ,rega 0x4fb0 013074 copy regc ,pdata 0x4fb1 013075 isub rega ,regc 0x4fb2 013076 ifetch 2 ,contr 0x4fb3 013077 copy pdata ,rega 0x4fb4 013078 setarg l2cap_sdp_channel 0x4fb5 013079 isub rega ,null 0x4fb6 013080 branch l2cap_proc_signal_config_rsp_sdp ,zero 0x4fb7 013081 setarg l2cap_rfcomm_channel 0x4fb8 013082 isub rega ,null 0x4fb9 013083 branch l2cap_proc_signal_config_rsp_rfcomm ,zero 0x4fba 013084 setarg l2cap_hid_control_channel 0x4fbb 013085 isub rega ,null 0x4fbc 013086 branch l2cap_proc_signal_config_rsp_hid_ctrl ,zero 0x4fbd 013087 setarg l2cap_hid_interrupt_channel 0x4fbe 013088 isub rega ,null 0x4fbf 013089 branch l2cap_proc_signal_config_rsp_hid_int ,zero 0x4fc0 013090 increase 2 ,contr 0x4fc1 013091 ifetch 2 ,contr 0x4fc2 013092 iforce null 0x4fc3 013093 branch l2cap_process_one_signal_rtn : 013094 l2cap_proc_signal_config_rsp_sdp: 0x4fc4 013095 fetch 1 ,mem_sdp_state 0x4fc5 013096 set1 l2cap_channel_state_rcv_cfg_res ,pdata 0x4fc6 013097 store 1 ,mem_sdp_state 0x4fc7 013098 branch l2cap_process_one_signal_rtn : 013099 l2cap_proc_signal_config_rsp_rfcomm: 0x4fc8 013100 fetch 1 ,mem_rfcomm_state 0x4fc9 013101 set1 l2cap_channel_state_rcv_cfg_res ,pdata 0x4fca 013102 store 1 ,mem_rfcomm_state 0x4fcb 013103 branch l2cap_process_one_signal_rtn : 013104 l2cap_proc_signal_config_rsp_hid_ctrl: 0x4fcc 013105 fetch 1 ,mem_hid_control_state 0x4fcd 013106 set1 l2cap_channel_state_rcv_cfg_res ,pdata 0x4fce 013107 store 1 ,mem_hid_control_state 0x4fcf 013108 branch l2cap_process_one_signal_rtn : 013109 l2cap_proc_signal_config_rsp_hid_int: 0x4fd0 013110 fetch 1 ,mem_hid_interrupt_state 0x4fd1 013111 set1 l2cap_channel_state_rcv_cfg_res ,pdata 0x4fd2 013112 store 1 ,mem_hid_interrupt_state 0x4fd3 013113 jam bt_evt_hid_connected ,mem_fifo_temp 0x4fd4 013114 branch ui_ipc_send_event : 013118 l2cap_proc_signal_disconnect_req: 0x4fd5 013119 ifetch 1 ,contr 0x4fd6 013120 copy pdata ,queue 0x4fd7 013121 ifetch 2 ,contr 0x4fd8 013122 copy pdata ,rega 0x4fd9 013123 copy regc ,pdata 0x4fda 013124 isub rega ,regc 0x4fdb 013125 ifetch 2 ,contr 0x4fdc 013126 copy pdata ,rega 0x4fdd 013127 ifetch 2 ,contr 0x4fde 013128 copy pdata ,timeup 0x4fdf 013129 copy rega ,temp 0x4fe0 013130 call save_cont_pointers 0x4fe1 013131 setarg l2cap_sdp_channel 0x4fe2 013132 isub temp ,null 0x4fe3 013133 branch l2cap_proc_signal_disconnect_req_sdp ,zero 0x4fe4 013134 setarg l2cap_rfcomm_channel 0x4fe5 013135 isub temp ,null 0x4fe6 013136 branch l2cap_proc_signal_disconnect_req_rfcomm ,zero 0x4fe7 013137 setarg l2cap_hid_control_channel 0x4fe8 013138 isub temp ,null 0x4fe9 013139 branch l2cap_proc_signal_disconnect_req_hid_ctrl ,zero 0x4fea 013140 setarg l2cap_hid_interrupt_channel 0x4feb 013141 isub temp ,null 0x4fec 013142 branch l2cap_proc_signal_disconnect_req_hid_int ,zero 0x4fed 013143 call l2cap_reject_command 0x4fee 013144 branch l2cap_proc_signal_disconnect_req_err_rtn : 013145 l2cap_proc_signal_disconnect_req_hid_ctrl: 0x4fef 013146 copy timeup ,temp 0x4ff0 013147 fetch 2 ,mem_hid_ctrl_remote_cid 0x4ff1 013148 isub temp ,null 0x4ff2 013149 branch l2cap_disconnect_hid_control_now ,zero 0x4ff3 013150 call l2cap_reject_command 0x4ff4 013151 branch l2cap_proc_signal_disconnect_req_err_rtn : 013152 l2cap_proc_signal_disconnect_req_hid_int: 0x4ff5 013153 copy timeup ,temp 0x4ff6 013154 fetch 2 ,mem_hid_int_remote_cid 0x4ff7 013155 isub temp ,null 0x4ff8 013156 branch l2cap_disconnect_hid_interrupt_now ,zero 0x4ff9 013157 call l2cap_reject_command 0x4ffa 013158 branch l2cap_proc_signal_disconnect_req_err_rtn : 013160 l2cap_proc_signal_disconnect_req_sdp: 0x4ffb 013161 copy timeup ,temp 0x4ffc 013162 fetch 2 ,mem_sdp_remote_cid 0x4ffd 013163 isub temp ,null 0x4ffe 013164 branch l2cap_disconnect_sdp_now ,zero 0x4fff 013165 call l2cap_reject_command 0x5000 013166 branch l2cap_proc_signal_disconnect_req_err_rtn : 013167 l2cap_disconnect_hid_control_now: 0x5001 013168 call l2cap_reset_hid_ctrl_state 0x5002 013169 branch l2cap_send_disconnect_rsp_pkt : 013170 l2cap_disconnect_hid_interrupt_now: 0x5003 013171 call l2cap_reset_hid_int_state 0x5004 013172 fetch 2 ,mem_hid_ctrl_remote_cid 0x5005 013173 branch l2cap_send_disconnect_rsp_pkt ,blank 0x5006 013181 branch l2cap_send_disconnect_rsp_pkt : 013183 l2cap_disconnect_sdp_now: 0x5007 013184 call l2cap_reset_sdp_channel_state 0x5008 013185 fetch 1 ,mem_upper_sm_ss 0x5009 013186 nbranch l2cap_send_disconnect_rsp_pkt ,blank 0x500a 013189 branch l2cap_send_disconnect_rsp_pkt : 013190 l2cap_proc_signal_disconnect_req_rfcomm: 0x500b 013191 copy timeup ,temp 0x500c 013192 fetch 2 ,mem_rfcomm_remote_cid 0x500d 013193 isub temp ,null 0x500e 013194 branch l2cap_disconnect_rfcomm_now ,zero 0x500f 013195 call l2cap_reject_command 0x5010 013196 branch l2cap_proc_signal_disconnect_req_err_rtn : 013197 l2cap_disconnect_rfcomm_now: 0x5011 013198 call l2cap_reset_rfcomm_channel_state 0x5012 013199 branch l2cap_send_disconnect_rsp_pkt : 013200 l2cap_send_disconnect_rsp_pkt: 0x5013 013201 call load_cont_pointers 0x5014 013202 setarg signal_disconnect_rsp 0x5015 013203 istore 1 ,contw 0x5016 013204 copy queue ,pdata 0x5017 013205 istore 1 ,contw 0x5018 013206 setarg 0x0004 0x5019 013207 istore 2 ,contw 0x501a 013208 copy rega ,pdata 0x501b 013209 istore 2 ,contw 0x501c 013210 copy timeup ,pdata 0x501d 013211 istore 2 ,contw 0x501e 013212 force 8 ,pdata 0x501f 013213 branch l2cap_proc_signal_disconnect_req_rtn : 013214 l2cap_proc_signal_disconnect_req_err_rtn: 0x5020 013215 call load_cont_pointers 0x5021 013216 branch l2cap_proc_signal_disconnect_req_rtn : 013217 l2cap_proc_signal_disconnect_req_rtn: 0x5022 013218 iadd regb ,regb 0x5023 013219 branch l2cap_process_one_signal_rtn : 013220 l2cap_proc_signal_disconnect_rsp: 0x5024 013221 ifetch 1 ,contr 0x5025 013222 copy pdata ,queue 0x5026 013223 ifetch 2 ,contr 0x5027 013224 copy pdata ,rega 0x5028 013225 copy regc ,pdata 0x5029 013226 isub rega ,regc 0x502a 013227 ifetch 2 ,contr 0x502b 013228 copy pdata ,timeup 0x502c 013229 ifetch 2 ,contr 0x502d 013230 copy pdata ,temp 0x502e 013231 call save_cont_pointers 0x502f 013232 setarg l2cap_sdp_channel 0x5030 013233 isub temp ,null 0x5031 013234 branch l2cap_proc_signal_disconnect_rsp_sdp ,zero 0x5032 013235 setarg l2cap_rfcomm_channel 0x5033 013236 isub temp ,null 0x5034 013237 branch l2cap_proc_signal_disconnect_rsp_rfcomm ,zero 0x5035 013238 setarg l2cap_hid_control_channel 0x5036 013239 isub temp ,null 0x5037 013240 branch l2cap_proc_signal_disconnect_rsp_hid_ctrl ,zero 0x5038 013241 setarg l2cap_hid_interrupt_channel 0x5039 013242 isub temp ,null 0x503a 013243 branch l2cap_proc_signal_disconnect_rsp_hid_int ,zero 0x503b 013244 call l2cap_reject_command 0x503c 013245 branch l2cap_proc_signal_disconnect_rsp_err_rtn : 013246 l2cap_proc_signal_disconnect_rsp_sdp: 0x503d 013247 copy temp ,rega 0x503e 013248 copy timeup ,temp 0x503f 013249 fetch 2 ,mem_sdp_remote_cid 0x5040 013250 isub temp ,null 0x5041 013251 call l2cap_reset_sdp_channel_state ,zero 0x5042 013252 branch l2cap_proc_signal_disconnect_rsp_rtn : 013253 l2cap_proc_signal_disconnect_rsp_rfcomm: 0x5043 013254 copy temp ,rega 0x5044 013255 copy timeup ,temp 0x5045 013256 fetch 2 ,mem_rfcomm_remote_cid 0x5046 013257 isub temp ,null 0x5047 013258 call l2cap_reset_rfcomm_channel_state ,zero 0x5048 013259 branch l2cap_proc_signal_disconnect_rsp_rtn : 013260 l2cap_proc_signal_disconnect_rsp_hid_ctrl: 0x5049 013261 copy temp ,rega 0x504a 013262 copy timeup ,temp 0x504b 013263 fetch 2 ,mem_hid_ctrl_remote_cid 0x504c 013264 isub temp ,null 0x504d 013265 call l2cap_reset_hid_ctrl_state ,zero 0x504e 013266 branch l2cap_proc_signal_disconnect_rsp_rtn : 013267 l2cap_proc_signal_disconnect_rsp_hid_int: 0x504f 013268 copy temp ,rega 0x5050 013269 copy timeup ,temp 0x5051 013270 fetch 2 ,mem_hid_int_remote_cid 0x5052 013271 isub temp ,null 0x5053 013272 call l2cap_reset_hid_int_state ,zero 0x5054 013273 branch l2cap_proc_signal_disconnect_rsp_rtn : 013274 l2cap_proc_signal_disconnect_rsp_rtn: 0x5055 013275 call load_cont_pointers 0x5056 013276 branch l2cap_process_one_signal_rtn : 013277 l2cap_proc_signal_disconnect_rsp_err_rtn: 0x5057 013278 branch l2cap_process_one_signal_rtn : 013281 l2cap_proc_signal_echo_req: 0x5058 013282 ifetch 1 ,contr 0x5059 013283 copy pdata ,queue 0x505a 013284 ifetch 2 ,contr 0x505b 013285 copy pdata ,rega 0x505c 013286 iadd contr ,contr 0x505d 013287 setarg 9 0x505e 013288 istore 1 ,contw 0x505f 013289 copy queue ,pdata 0x5060 013290 istore 1 ,contw 0x5061 013291 force 0x0000 ,pdata 0x5062 013292 istore 2 ,contw 0x5063 013293 force 4 ,pdata 0x5064 013294 iadd regb ,regb 0x5065 013295 copy regc ,pdata 0x5066 013296 isub rega ,regc 0x5067 013297 branch l2cap_process_one_signal_rtn : 013298 l2cap_proc_signal_echo_rsp: 0x5068 013299 branch l2cap_process_one_signal_rtn : 013301 l2cap_proc_signal_info_rsp: 0x5069 013302 branch l2cap_process_one_signal_rtn : 013303 l2cap_reject_command: 0x506a 013304 force 0 ,regb 0x506b 013305 call l2cap_get_signal_tx_payload 0x506c 013306 setarg signal_cmd_reject 0x506d 013307 istore 1 ,contw 0x506e 013308 copy queue ,pdata 0x506f 013309 istore 1 ,contw 0x5070 013310 setarg 2 0x5071 013311 istore 2 ,contw 0x5072 013312 setarg cmd_not_understood 0x5073 013313 istore 2 ,contw 0x5074 013314 increase 6 ,regb 0x5075 013315 arg 4 ,regc 0x5076 013316 branch l2cap_process_one_signal_rtn : 013320 l2cap_reset_rfcomm_channel_state: 0x5077 013321 setarg 0 0x5078 013322 store 2 ,mem_rfcomm_tx_pkt_length 0x5079 013323 store 2 ,mem_rfcomm_remote_cid 0x507a 013324 jam 0 ,mem_rfcomm_state 0x507b 013325 rtn : 013326 l2cap_reset_sdp_channel_state: 0x507c 013327 setarg 0 0x507d 013328 store 2 ,mem_sdp_tx_pkt_length 0x507e 013329 store 2 ,mem_sdp_remote_cid 0x507f 013330 jam 0 ,mem_sdp_state 0x5080 013331 rtn : 013332 l2cap_reset_hid_ctrl_state: 0x5081 013333 setarg 0 0x5082 013334 store 2 ,mem_hid_ctrl_remote_cid 0x5083 013335 jam 0 ,mem_hid_control_state 0x5084 013336 fetch 1 ,mem_hid_interrupt_state 0x5085 013337 beq 0 ,l2cap_reset_hid_disconnected 0x5086 013338 rtn : 013340 l2cap_reset_hid_int_state: 0x5087 013341 setarg 0 0x5088 013342 store 2 ,mem_hid_int_remote_cid 0x5089 013343 jam 0 ,mem_hid_interrupt_state 0x508a 013344 fetch 1 ,mem_hid_control_state 0x508b 013345 beq 0 ,l2cap_reset_hid_disconnected 0x508c 013346 rtn : 013348 l2cap_reset_hid_disconnected: 0x508d 013349 jam bt_evt_hid_disconnected ,mem_fifo_temp 0x508e 013350 branch ui_ipc_send_event : 013352 l2cap_disconnect_interrupt_req: 0x508f 013353 fetch 1 ,mem_control_tasks 0x5090 013354 set0 l2cap_disconnect_interrupt ,pdata 0x5091 013355 store 1 ,mem_control_tasks 0x5092 013356 fetch 2 ,mem_hid_int_remote_cid 0x5093 013357 rtn blank 0x5094 013358 call l2cap_malloc_signal_channel 0x5095 013359 fetch 2 ,mem_hid_int_remote_cid 0x5096 013360 copy pdata ,rega 0x5097 013361 force l2cap_hid_interrupt_channel ,regb 0x5098 013362 branch l2cap_generate_disconnect_req : 013363 l2cap_disconnect_control_req: 0x5099 013364 fetch 1 ,mem_control_tasks 0x509a 013365 set0 l2cap_disconnect_control ,pdata 0x509b 013366 store 1 ,mem_control_tasks 0x509c 013367 fetch 2 ,mem_hid_ctrl_remote_cid 0x509d 013368 rtn blank 0x509e 013369 call l2cap_malloc_signal_channel 0x509f 013370 fetch 2 ,mem_hid_ctrl_remote_cid 0x50a0 013371 copy pdata ,rega 0x50a1 013372 force l2cap_hid_control_channel ,regb : 013373 l2cap_generate_disconnect_req: 0x50a2 013374 call l2cap_get_req_id 0x50a3 013375 call l2cap_get_signal_tx_payload 0x50a4 013376 force signal_disconnect_req ,pdata 0x50a5 013377 istore 1 ,contw 0x50a6 013378 fetch 1 ,mem_ml2cap_comm_id 0x50a7 013379 istore 1 ,contw 0x50a8 013380 setarg 0x0004 0x50a9 013381 istore 2 ,contw 0x50aa 013382 copy rega ,pdata 0x50ab 013383 istore 2 ,contw 0x50ac 013384 copy regb ,pdata 0x50ad 013385 istore 2 ,contw 0x50ae 013386 force 0x08 ,temp 0x50af 013387 branch ml2cap_send_signal : 013389 ml2cap_send_signal_connect_req: 0x50b0 013390 set1 mark_ext_patch ,mark 0x50b1 013391 bpatch patch23_7 ,mem_patch23 0x50b2 013392 call l2cap_get_req_id 0x50b3 013393 call l2cap_get_signal_tx_payload 0x50b4 013394 setarg signal_connect_req 0x50b5 013395 istore 1 ,contw 0x50b6 013396 fetch 1 ,mem_ml2cap_comm_id 0x50b7 013397 istore 1 ,contw 0x50b8 013398 setarg 0x0004 0x50b9 013399 istore 2 ,contw 0x50ba 013400 copy temp ,pdata 0x50bb 013401 istore 2 ,contw 0x50bc 013402 copy timeup ,pdata 0x50bd 013403 istore 2 ,contw 0x50be 013404 arg 8 ,temp 0x50bf 013405 branch ml2cap_send_signal : 013406 ml2cap_send_signal_config_req: 0x50c0 013407 set1 mark_ext_patch ,mark 0x50c1 013408 bpatch patch24_0 ,mem_patch24 0x50c2 013409 call l2cap_get_req_id 0x50c3 013410 call l2cap_get_signal_tx_payload 0x50c4 013411 setarg signal_config_req 0x50c5 013412 istore 1 ,contw 0x50c6 013413 fetch 1 ,mem_ml2cap_comm_id 0x50c7 013414 istore 1 ,contw 0x50c8 013415 setarg 0x0008 0x50c9 013416 istore 2 ,contw 0x50ca 013418 copy temp ,pdata 0x50cb 013420 istore 2 ,contw 0x50cc 013421 setarg 0x0000 0x50cd 013422 istore 2 ,contw 0x50ce 013423 setarg 0x01 0x50cf 013424 istore 1 ,contw 0x50d0 013425 setarg 0x02 0x50d1 013426 istore 1 ,contw 0x50d2 013427 setarg l2cap_config_mtu_rfcomm 0x50d3 013428 istore 2 ,contw 0x50d4 013429 arg 0xc ,temp 0x50d5 013430 branch ml2cap_send_signal : 013431 ml2cap_send_signal_disconn_req: 0x50d6 013432 set1 mark_ext_patch ,mark 0x50d7 013433 bpatch patch24_1 ,mem_patch24 0x50d8 013434 call l2cap_get_req_id 0x50d9 013435 call l2cap_get_signal_tx_payload 0x50da 013436 setarg signal_disconnect_req 0x50db 013437 istore 1 ,contw 0x50dc 013438 fetch 1 ,mem_ml2cap_comm_id 0x50dd 013439 increase 1 ,pdata 0x50de 013440 copy contw ,rega 0x50df 013441 store 1 ,mem_ml2cap_comm_id 0x50e0 013442 copy rega ,contw 0x50e1 013443 istore 1 ,contw 0x50e2 013444 setarg 0x0004 0x50e3 013445 istore 2 ,contw 0x50e4 013446 copy temp ,pdata 0x50e5 013447 istore 2 ,contw 0x50e6 013448 copy timeup ,pdata 0x50e7 013449 istore 2 ,contw 0x50e8 013450 arg 0x8 ,temp : 013453 ml2cap_send_signal: 0x50e9 013454 storet 2 ,mem_l2cap_signal_tx_length 0x50ea 013455 copy temp ,pdata 0x50eb 013456 branch l2cap_malloc_discard ,blank 0x50ec 013457 call l2cap_get_signal_tx_buff 0x50ed 013458 fetch 2 ,mem_l2cap_signal_tx_length 0x50ee 013459 istore 2 ,contw 0x50ef 013460 force l2cap_signal_channel ,pdata 0x50f0 013461 istore 2 ,contw 0x50f1 013462 rtn : 013464 msdp_send_req_done: 0x50f2 013465 fetch 2 ,mem_sdp_tx_pkt_length 0x50f3 013466 branch assert ,blank 0x50f4 013467 call l2cap_get_sdp_tx_buff 0x50f5 013468 fetch 2 ,mem_sdp_tx_pkt_length 0x50f6 013469 istore 2 ,contw 0x50f7 013470 fetch 2 ,mem_sdp_remote_cid 0x50f8 013471 istore 2 ,contw 0x50f9 013472 rtn : 013473 ml2cap_rx_multiplexing: 0x50fa 013474 set1 mark_ext_patch ,mark 0x50fb 013475 bpatch patch24_2 ,mem_patch24 0x50fc 013476 fetch 2 ,mem_l2cap_rx_pkt_length 0x50fd 013477 branch l2cap_rx_reset_state ,blank 0x50fe 013478 fetch 1 ,mem_l2cap_rx_cid 0x50ff 013479 beq l2cap_signal_channel ,ml2cap_call_proc_signal 0x5100 013480 beq l2cap_sdp_channel ,l2cap_call_proc_sdp 0x5101 013481 beq l2cap_rfcomm_channel ,l2cap_call_proc_rfcomm 0x5102 013482 beq l2cap_hid_control_channel ,l2cap_call_proc_hid 0x5103 013483 beq l2cap_hid_interrupt_channel ,l2cap_call_proc_hid 0x5104 013484 branch l2cap_rx_reset_state : 013486 ml2cap_call_proc_signal: 0x5105 013487 set1 mark_ext_patch ,mark 0x5106 013488 bpatch patch24_3 ,mem_patch24 0x5107 013489 call l2cap_malloc_signal_channel 0x5108 013490 force 0 ,regb 0x5109 013491 call l2cap_get_signal_tx_payload 0x510a 013492 copy pdata ,contw 0x510b 013493 fetch 2 ,mem_l2cap_rx_pkt_length 0x510c 013494 copy pdata ,regc 0x510d 013495 fetch 2 ,mem_l2cap_payload_ptr 0x510e 013496 iforce contr : 013497 ml2cap_proc_one_comm_loop: 0x510f 013498 call ml2cap_proc_one_comm 0x5110 013499 increase -4 ,regc 0x5111 013500 nbranch ml2cap_proc_one_comm_loop ,zero 0x5112 013501 copy regb ,temp 0x5113 013502 call ml2cap_send_signal 0x5114 013503 branch l2cap_rx_reset_state : 013505 ml2cap_proc_one_comm: 0x5115 013506 ifetch 1 ,contr 0x5116 013507 beq signal_connect_req ,ml2cap_proc_signal_connect_req 0x5117 013508 beq signal_cmd_reject ,ml2cap_proc_signal_cmd_reject 0x5118 013509 beq signal_connect_rsp ,ml2cap_proc_signal_connect_rsp 0x5119 013510 beq signal_config_rsp ,ml2cap_proc_signal_config_rsp 0x511a 013511 beq signal_config_req ,ml2cap_proc_signal_config_req 0x511b 013512 beq signal_disconnect_rsp ,ml2cap_proc_signal_disconn_rsp 0x511c 013513 beq signal_disconnect_req ,ml2cap_proc_signal_disconn_req 0x511d 013514 beq signal_echo_req ,l2cap_proc_signal_echo_req 0x511e 013515 beq signal_info_req ,ml2cap_proc_signal_info_req 0x511f 013516 branch ml2cap_proc_send_reject : 013518 ml2cap_proc_signal_connect_req: 0x5120 013519 call save_cont_pointers 0x5121 013521 call load_cont_pointers 0x5122 013522 branch l2cap_proc_signal_connect_req : 013523 ml2cap_proc_signal_cmd_reject: 0x5123 013524 ifetch 1 ,contr 0x5124 013525 copy pdata ,queue 0x5125 013526 ifetch 2 ,contr 0x5126 013527 copy pdata ,rega 0x5127 013528 copy regc ,pdata 0x5128 013529 isub rega ,regc : 013530 mvptr: 0x5129 013531 ifetch 1 ,contr 0x512a 013532 increase -1 ,rega 0x512b 013533 nbranch mvptr ,zero 0x512c 013534 rtn : 013535 ml2cap_proc_signal_connect_rsp: 0x512d 013536 ifetch 1 ,contr 0x512e 013537 copy pdata ,queue 0x512f 013538 ifetch 2 ,contr 0x5130 013539 copy pdata ,rega 0x5131 013540 ifetch 2 ,contr 0x5132 013541 copy pdata ,timeup 0x5133 013542 ifetch 2 ,contr 0x5134 013543 copy pdata ,temp 0x5135 013544 ifetch 2 ,contr 0x5136 013545 sub pdata ,0 ,null 0x5137 013546 branch ml2cap_proc_signal_connect_rsp_sucessful ,zero 0x5138 013547 beq l2cap_connect_refused_psm_unsupported ,ml2cap_proc_signal_connect_refused_result 0x5139 013548 beq l2cap_connect_refused_no_resources ,ml2cap_proc_signal_connect_refused_result 0x513a 013549 branch ml2cap_proc_signal_connect_rsp_mnosucc : 013550 ml2cap_proc_signal_connect_refused_result: 0x513b 013551 jam bt_evt_ml2cap_conn_refused ,mem_fifo_temp 0x513c 013552 call ui_ipc_send_event : 013553 ml2cap_proc_signal_connect_rsp_mnosucc: 0x513d 013554 ifetch 2 ,contr 0x513e 013555 branch mnosucc : 013556 ml2cap_proc_signal_connect_rsp_sucessful: 0x513f 013557 call save_cont_pointers 0x5140 013561 setarg l2cap_sdp_channel 0x5141 013562 isub temp ,null 0x5142 013563 branch ml2cap_proc_signal_connect_rsp_sdp ,zero 0x5143 013564 setarg l2cap_rfcomm_channel 0x5144 013565 isub temp ,null 0x5145 013566 branch ml2cap_proc_signal_connect_rsp_rfcomm ,zero 0x5146 013567 setarg l2cap_hid_interrupt_channel 0x5147 013568 isub temp ,null 0x5148 013569 branch ml2cap_proc_signal_connect_rsp_hid_int ,zero 0x5149 013570 setarg l2cap_hid_control_channel 0x514a 013571 isub temp ,null 0x514b 013572 branch ml2cap_proc_signal_connect_rsp_hid_ctrl ,zero 0x514c 013573 branch mnosucc : 013574 ml2cap_proc_signal_connect_rsp_sdp: 0x514d 013575 copy timeup ,pdata 0x514e 013576 store 2 ,mem_sdp_remote_cid 0x514f 013577 fetch 1 ,mem_sdp_state 0x5150 013578 set1 l2cap_channel_state_conn_res 0x5151 013579 store 1 ,mem_sdp_state 0x5152 013580 branch mnosucc1 : 013581 ml2cap_proc_signal_connect_rsp_rfcomm: 0x5153 013582 copy timeup ,pdata 0x5154 013583 store 2 ,mem_rfcomm_remote_cid 0x5155 013584 fetch 1 ,mem_rfcomm_state 0x5156 013585 set1 l2cap_channel_state_conn_res 0x5157 013586 store 1 ,mem_rfcomm_state 0x5158 013587 branch mnosucc1 : 013588 ml2cap_proc_signal_connect_rsp_hid_ctrl: 0x5159 013589 copy timeup ,pdata 0x515a 013590 store 2 ,mem_hid_ctrl_remote_cid 0x515b 013591 fetch 1 ,mem_hid_control_state 0x515c 013592 set1 l2cap_channel_state_conn_res 0x515d 013593 store 1 ,mem_hid_control_state 0x515e 013594 branch mnosucc1 : 013595 ml2cap_proc_signal_connect_rsp_hid_int: 0x515f 013596 copy timeup ,pdata 0x5160 013597 store 2 ,mem_hid_int_remote_cid 0x5161 013598 fetch 1 ,mem_hid_interrupt_state 0x5162 013599 set1 l2cap_channel_state_conn_res 0x5163 013600 store 1 ,mem_hid_interrupt_state : 013603 mnosucc1: 0x5164 013604 call load_cont_pointers : 013605 mnosucc: 0x5165 013606 copy regc ,pdata 0x5166 013607 isub rega ,regc 0x5167 013608 rtn : 013610 ml2cap_proc_signal_config_rsp: 0x5168 013611 ifetch 1 ,contr 0x5169 013612 copy pdata ,queue 0x516a 013613 ifetch 2 ,contr 0x516b 013614 copy pdata ,rega 0x516c 013615 copy regc ,pdata 0x516d 013616 isub rega ,regc 0x516e 013617 ifetch 2 ,contr 0x516f 013618 copy pdata ,timeup 0x5170 013619 ifetch 2 ,contr 0x5171 013620 ifetch 2 ,contr 0x5172 013621 nbranch mcrsdone1 ,blank 0x5173 013622 call save_cont_pointers 0x5174 013626 copy timeup ,temp 0x5175 013627 setarg l2cap_sdp_channel 0x5176 013628 isub temp ,null 0x5177 013629 branch ml2cap_proc_signal_config_rsp_sdp ,zero 0x5178 013630 setarg l2cap_rfcomm_channel 0x5179 013631 isub temp ,null 0x517a 013632 branch ml2cap_proc_signal_config_rsp_rfcomm ,zero 0x517b 013633 setarg l2cap_hid_control_channel 0x517c 013634 isub temp ,null 0x517d 013635 branch ml2cap_proc_signal_config_rsp_hid_ctrl ,zero 0x517e 013636 setarg l2cap_hid_interrupt_channel 0x517f 013637 isub temp ,null 0x5180 013638 branch ml2cap_proc_signal_config_rsp_hid_int ,zero : 013639 ml2cap_proc_signal_config_rsp_sdp: 0x5181 013640 fetch 1 ,mem_sdp_state 0x5182 013641 set1 l2cap_channel_state_rcv_cfg_res 0x5183 013642 store 1 ,mem_sdp_state 0x5184 013643 rtn : 013644 ml2cap_proc_signal_config_rsp_rfcomm: 0x5185 013645 fetch 1 ,mem_rfcomm_state 0x5186 013646 set1 l2cap_channel_state_rcv_cfg_res 0x5187 013647 store 1 ,mem_rfcomm_state 0x5188 013648 rtn : 013649 ml2cap_proc_signal_config_rsp_hid_ctrl: 0x5189 013650 fetch 1 ,mem_hid_control_state 0x518a 013651 set1 l2cap_channel_state_rcv_cfg_res 0x518b 013652 store 1 ,mem_hid_control_state 0x518c 013653 rtn : 013654 ml2cap_proc_signal_config_rsp_hid_int: 0x518d 013655 fetch 1 ,mem_hid_interrupt_state 0x518e 013656 set1 l2cap_channel_state_rcv_cfg_res 0x518f 013657 store 1 ,mem_hid_interrupt_state 0x5190 013658 jam bt_evt_hid_connected ,mem_fifo_temp 0x5191 013659 branch ui_ipc_send_event : 013662 mcfrsdone: 0x5192 013663 call load_cont_pointers : 013664 mcrsdone1: 0x5193 013665 increase -6 ,rega : 013666 mloop2: 0x5194 013667 branch mcrsdone ,zero 0x5195 013668 increase 1 ,contr 0x5196 013669 increase -1 ,rega 0x5197 013670 branch mloop2 : 013671 mcrsdone: 0x5198 013672 rtn : 013673 ml2cap_proc_signal_config_req: 0x5199 013674 ifetch 1 ,contr 0x519a 013675 copy pdata ,queue 0x519b 013676 ifetch 2 ,contr 0x519c 013677 copy pdata ,rega 0x519d 013678 copy regc ,pdata 0x519e 013679 isub rega ,regc 0x519f 013680 ifetch 2 ,contr 0x51a0 013681 increase 2 ,contr 0x51a1 013682 copy pdata ,temp 0x51a2 013683 setarg signal_config_rsp 0x51a3 013684 istore 1 ,contw 0x51a4 013685 copy queue ,pdata 0x51a5 013686 istore 1 ,contw 0x51a6 013687 increase 2 ,rega 0x51a7 013688 copy rega ,pdata 0x51a8 013689 istore 2 ,contw 0x51a9 013690 call save_cont_pointers 0x51aa 013691 setarg l2cap_sdp_channel 0x51ab 013692 isub temp ,null 0x51ac 013693 branch ml2cap_proc_signal_config_req_sdp ,zero 0x51ad 013694 setarg l2cap_rfcomm_channel 0x51ae 013695 isub temp ,null 0x51af 013696 branch ml2cap_proc_signal_config_req_rfcomm ,zero 0x51b0 013697 setarg l2cap_hid_control_channel 0x51b1 013698 isub temp ,null 0x51b2 013699 branch ml2cap_proc_signal_config_req_hid_ctrl ,zero 0x51b3 013700 setarg l2cap_hid_interrupt_channel 0x51b4 013701 isub temp ,null 0x51b5 013702 branch ml2cap_proc_signal_config_req_hid_int ,zero 0x51b6 013703 branch mcfgrq_done : 013704 ml2cap_proc_signal_config_req_sdp: 0x51b7 013705 fetch 1 ,mem_sdp_state 0x51b8 013706 set1 l2cap_channel_state_rcv_cfg_req ,pdata 0x51b9 013707 set1 l2cap_channel_state_snd_cfg_res ,pdata 0x51ba 013708 store 1 ,mem_sdp_state 0x51bb 013709 bbit1 l2cap_channel_state_snd_cfg_req ,ml2cap_proc_signal_config_req_sdp_nsndreq 0x51bc 013710 fetcht 1 ,mem_control_tasks 0x51bd 013711 set1 l2cap_init_config_req ,temp 0x51be 013712 storet 1 ,mem_control_tasks 0x51bf 013713 copy queue ,pdata 0x51c0 013714 increase 1 ,pdata 0x51c1 013715 store 1 ,mem_config_identifier 0x51c2 013716 fetch 1 ,mem_sdp_state 0x51c3 013717 set1 l2cap_channel_state_snd_cfg_req ,pdata 0x51c4 013718 store 1 ,mem_sdp_state : 013719 ml2cap_proc_signal_config_req_sdp_nsndreq: 0x51c5 013720 fetch 2 ,mem_sdp_remote_cid 0x51c6 013721 store 2 ,mem_config_req_dest_cid 0x51c7 013722 branch mcfgrq_done : 013723 ml2cap_proc_signal_config_req_rfcomm: 0x51c8 013724 fetch 1 ,mem_rfcomm_state 0x51c9 013725 set1 l2cap_channel_state_rcv_cfg_req ,pdata 0x51ca 013726 set1 l2cap_channel_state_snd_cfg_res ,pdata 0x51cb 013727 store 1 ,mem_rfcomm_state 0x51cc 013728 fetch 2 ,mem_rfcomm_remote_cid 0x51cd 013729 branch mcfgrq_done : 013730 ml2cap_proc_signal_config_req_hid_ctrl: 0x51ce 013731 fetch 1 ,mem_hid_control_state 0x51cf 013732 set1 l2cap_channel_state_rcv_cfg_req ,pdata 0x51d0 013733 set1 l2cap_channel_state_snd_cfg_res ,pdata 0x51d1 013734 store 1 ,mem_hid_control_state 0x51d2 013735 fetch 2 ,mem_hid_ctrl_remote_cid 0x51d3 013736 branch mcfgrq_done : 013737 ml2cap_proc_signal_config_req_hid_int: 0x51d4 013738 fetch 1 ,mem_hid_interrupt_state 0x51d5 013739 set1 l2cap_channel_state_rcv_cfg_req ,pdata 0x51d6 013740 set1 l2cap_channel_state_snd_cfg_res ,pdata 0x51d7 013741 store 1 ,mem_hid_interrupt_state 0x51d8 013742 fetch 2 ,mem_hid_int_remote_cid : 013745 mcfgrq_done: 0x51d9 013746 copy pdata ,timeup 0x51da 013747 call load_cont_pointers 0x51db 013749 copy timeup ,pdata 0x51dc 013751 istore 2 ,contw 0x51dd 013752 force 0x0000 ,pdata 0x51de 013753 istore 2 ,contw 0x51df 013754 force 0x0000 ,pdata 0x51e0 013755 istore 2 ,contw 0x51e1 013756 force 10 ,pdata 0x51e2 013757 iadd regb ,regb 0x51e3 013758 increase -6 ,rega : 013759 mloop1: 0x51e4 013760 branch mcrqdone ,zero 0x51e5 013761 ifetch 1 ,contr 0x51e6 013762 istore 1 ,contw 0x51e7 013763 increase 1 ,regb 0x51e8 013764 increase -1 ,rega 0x51e9 013765 branch mloop1 : 013766 mcrqdone: 0x51ea 013767 rtn : 013768 ml2cap_proc_signal_disconn_req: 0x51eb 013769 ifetch 1 ,contr 0x51ec 013770 copy pdata ,queue 0x51ed 013771 ifetch 2 ,contr 0x51ee 013772 copy pdata ,rega 0x51ef 013773 copy regc ,pdata 0x51f0 013774 isub rega ,regc 0x51f1 013776 ifetch 2 ,contr 0x51f2 013777 copy pdata ,rega 0x51f3 013778 ifetch 2 ,contr 0x51f4 013779 copy pdata ,timeup 0x51f5 013780 call save_cont_pointers 0x51f6 013781 setarg l2cap_sdp_channel 0x51f7 013782 copy rega ,temp 0x51f8 013783 isub temp ,null 0x51f9 013784 branch ml2cap_proc_signal_disconn_sdp ,zero 0x51fa 013785 setarg l2cap_hid_control_channel 0x51fb 013786 copy rega ,temp 0x51fc 013787 isub temp ,null 0x51fd 013788 branch ml2cap_proc_signal_disconn_hid_ctrl ,zero 0x51fe 013789 setarg l2cap_hid_interrupt_channel 0x51ff 013790 copy rega ,temp 0x5200 013791 isub temp ,null 0x5201 013792 branch ml2cap_proc_signal_disconn_hid_int ,zero 0x5202 013793 branch mclsrfc : 013794 ml2cap_proc_signal_disconn_sdp: 0x5203 013795 setarg 0x0000 0x5204 013796 store 2 ,mem_sdp_tx_pkt_length 0x5205 013797 store 2 ,mem_sdp_remote_cid 0x5206 013798 store 1 ,mem_sdp_state 0x5207 013799 branch mclssdp : 013800 ml2cap_proc_signal_disconn_hid_ctrl: 0x5208 013801 call l2cap_reset_hid_ctrl_state 0x5209 013802 branch mclssdp : 013803 ml2cap_proc_signal_disconn_hid_int: 0x520a 013804 call l2cap_reset_hid_int_state 0x520b 013810 branch mclssdp : 013811 mclsrfc: 0x520c 013812 setarg 0x0000 0x520d 013813 store 2 ,mem_rfcomm_tx_pkt_length : 013814 mclssdp: 0x520e 013815 call load_cont_pointers 0x520f 013816 setarg signal_disconnect_rsp 0x5210 013817 istore 1 ,contw 0x5211 013818 copy queue ,pdata 0x5212 013819 istore 1 ,contw 0x5213 013820 setarg 0x0004 0x5214 013821 istore 2 ,contw 0x5215 013822 copy rega ,pdata 0x5216 013823 istore 2 ,contw 0x5217 013824 copy timeup ,pdata 0x5218 013825 istore 2 ,contw 0x5219 013826 force 8 ,pdata 0x521a 013827 iadd regb ,regb 0x521b 013828 rtn : 013830 ml2cap_proc_signal_disconn_rsp: 0x521c 013831 ifetch 1 ,contr 0x521d 013832 copy pdata ,queue 0x521e 013833 ifetch 2 ,contr 0x521f 013834 copy pdata ,rega 0x5220 013835 ifetch 2 ,contr 0x5221 013836 copy pdata ,timeup 0x5222 013837 ifetch 2 ,contr 0x5223 013838 copy pdata ,temp 0x5224 013839 call save_cont_pointers 0x5225 013840 fetch 1 ,mem_ml2cap_comm_id 0x5226 013841 icompare 0xff ,queue 0x5227 013842 nbranch mdisdone ,true 0x5228 013843 setarg l2cap_sdp_channel 0x5229 013844 isub temp ,null 0x522a 013845 branch ml2cap_proc_signal_disconn_rsp_sdp ,zero 0x522b 013846 setarg l2cap_rfcomm_channel 0x522c 013847 isub temp ,null 0x522d 013848 branch ml2cap_proc_signal_disconn_rsp_rfcomm ,zero 0x522e 013849 branch mdisdone : 013850 ml2cap_proc_signal_disconn_rsp_sdp: 0x522f 013851 jam 0 ,mem_sdp_remote_cid 0x5230 013852 jam 0 ,mem_sdp_state 0x5231 013853 branch mdisdone : 013854 ml2cap_proc_signal_disconn_rsp_rfcomm: : 013857 mdisdone: 0x5232 013858 call load_cont_pointers 0x5233 013859 copy regc ,pdata 0x5234 013860 isub rega ,regc 0x5235 013861 rtn : 013863 ml2cap_proc_send_reject: 0x5236 013864 setarg signal_cmd_reject 0x5237 013865 istore 1 ,contw 0x5238 013866 ifetch 1 ,contr 0x5239 013867 istore 1 ,contw 0x523a 013868 setarg 0x0002 0x523b 013869 istore 2 ,contw 0x523c 013870 setarg 0x0000 0x523d 013871 istore 2 ,contw 0x523e 013872 setarg 0x0006 0x523f 013873 iadd regb ,regb 0x5240 013874 force 4 ,regc 0x5241 013875 rtn : 013878 l2cap_get_req_id: 0x5242 013879 fetch 1 ,mem_ml2cap_comm_id 0x5243 013880 increase 1 ,pdata 0x5244 013881 bne 0 ,l2cap_get_req_id_ok 0x5245 013882 increase 1 ,pdata : 013883 l2cap_get_req_id_ok: 0x5246 013884 store 1 ,mem_ml2cap_comm_id 0x5247 013885 rtn : 013895 l2cap_malloc: 0x5248 013896 set1 mark_ext_patch ,mark 0x5249 013897 bpatch patch24_4 ,mem_patch24 0x524a 013898 arg 0 ,regb 0x524b 013899 call l2cap_malloc_is_fifo_full 0x524c 013900 nbranch assert ,blank 0x524d 013901 call l2cap_malloc_get_full_map 0x524e 013902 arg mem_tx_buff0 ,regb 0x524f 013903 arg 0 ,queue : 013904 l2cap_malloc_loop: 0x5250 013905 fetcht 1 ,mem_used_map 0x5251 013906 qisolate1 temp 0x5252 013907 branch l2cap_malloc_next ,true 0x5253 013908 call l2cap_malloc_enough 0x5254 013909 sub timeup ,0 ,null 0x5255 013910 branch l2cap_malloc_next ,positive 0x5256 013911 call l2cap_malloc_into_fifo 0x5257 013912 branch l2cap_malloc_rtn : 013913 l2cap_malloc_next: 0x5258 013914 increase 128 ,regb 0x5259 013915 increase 1 ,queue 0x525a 013916 setarg 8 0x525b 013917 isub queue ,null 0x525c 013918 branch l2cap_malloc_loop ,positive 0x525d 013919 arg 0 ,regb : 013920 l2cap_malloc_rtn: 0x525e 013921 copy regb ,pdata 0x525f 013922 branch assert ,blank 0x5260 013923 rtn : 013931 l2cap_malloc_fifo_out: 0x5261 013932 set1 mark_ext_patch ,mark 0x5262 013933 bpatch patch24_5 ,mem_patch24 0x5263 013934 call l2cap_malloc_fifo_get_first_ptr 0x5264 013935 increase 1 ,contr 0x5265 013936 ifetch 2 ,contr 0x5266 013937 rtn : 013943 l2cap_malloc_free: 0x5267 013944 set1 mark_ext_patch ,mark 0x5268 013945 bpatch patch24_6 ,mem_patch24 0x5269 013946 call l2cap_malloc_fifo_get_first_ptr 0x526a 013947 copy contr ,contw 0x526b 013948 copy contr ,temp 0x526c 013949 setarg 0 0x526d 013950 istore 3 ,contw 0x526e 013951 rtn : 013956 l2cap_malloc_discard: 0x526f 013957 set1 mark_ext_patch ,mark 0x5270 013958 bpatch patch24_7 ,mem_patch24 0x5271 013959 call l2cap_malloc_is_fifo_empty 0x5272 013960 branch assert ,blank 0x5273 013961 fetch 3 ,mem_tx_fifo2 0x5274 013962 store 3 ,mem_tx_fifo3 0x5275 013963 fetch 3 ,mem_tx_fifo1 0x5276 013964 store 3 ,mem_tx_fifo2 0x5277 013965 fetch 3 ,mem_tx_fifo0 0x5278 013966 store 3 ,mem_tx_fifo1 0x5279 013967 rtn : 013973 l2cap_malloc_is_fifo_full: 0x527a 013974 fetch 3 ,mem_tx_fifo0 0x527b 013975 rtn : 013981 l2cap_malloc_is_fifo_nearly_full: 0x527c 013982 fetch 3 ,mem_tx_fifo1 0x527d 013983 rtn : 013989 l2cap_malloc_is_fifo_empty: 0x527e 013990 fetch 3 ,mem_tx_fifo3 0x527f 013991 rtn : 013996 l2cap_malloc_fifo_get_first_ptr: 0x5280 013997 call l2cap_malloc_is_fifo_empty 0x5281 013998 branch assert ,blank 0x5282 013999 arg mem_tx_fifo0 ,contr : 014000 l2cap_malloc_free_loop: 0x5283 014001 ifetch 3 ,contr 0x5284 014002 branch l2cap_malloc_free_loop ,blank 0x5285 014003 increase -3 ,contr 0x5286 014004 rtn : 014011 l2cap_malloc_get_full_map: 0x5287 014012 set1 mark_ext_patch ,mark 0x5288 014013 bpatch patch25_0 ,mem_patch25 0x5289 014014 arg 4 ,loopcnt 0x528a 014015 arg mem_tx_fifo0_map ,contr 0x528b 014016 arg 0 ,temp : 014017 l2cap_malloc_get_full_map_loop: 0x528c 014018 ifetch 3 ,contr 0x528d 014019 and pdata ,0xff ,pdata 0x528e 014020 ior temp ,temp 0x528f 014021 loop l2cap_malloc_get_full_map_loop 0x5290 014022 storet 1 ,mem_used_map 0x5291 014023 rtn : 014031 l2cap_malloc_into_fifo: 0x5292 014032 set1 mark_ext_patch ,mark 0x5293 014033 bpatch patch25_1 ,mem_patch25 0x5294 014034 call l2cap_malloc_is_fifo_full 0x5295 014035 nbranch assert ,blank 0x5296 014036 call l2cap_malloc_is_fifo_empty 0x5297 014037 branch l2cap_malloc_into_fifo_no_push ,blank 0x5298 014038 fetch 3 ,mem_tx_fifo1 0x5299 014039 store 3 ,mem_tx_fifo0 0x529a 014040 ifetch 3 ,contr 0x529b 014041 istore 3 ,contw 0x529c 014042 ifetch 3 ,contr 0x529d 014043 istore 3 ,contw 0x529e 014044 setarg 0 0x529f 014045 istore 3 ,contw : 014046 l2cap_malloc_into_fifo_no_push: 0x52a0 014047 arg 0 ,temp 0x52a1 014048 copy timeup ,pdata 0x52a2 014049 iadd queue ,pdata : 014050 l2cap_malloc_into_fifo_loop: 0x52a3 014051 qset1 temp 0x52a4 014052 increase 1 ,queue 0x52a5 014053 isub queue ,null 0x52a6 014054 nbranch l2cap_malloc_into_fifo_loop ,zero 0x52a7 014056 lshift8 regb ,pdata 0x52a8 014057 ior temp ,pdata 0x52a9 014058 store 3 ,mem_tx_fifo3 0x52aa 014059 rtn : 014069 l2cap_malloc_enough: 0x52ab 014070 set1 mark_ext_patch ,mark 0x52ac 014071 bpatch patch25_2 ,mem_patch25 0x52ad 014072 call l2cap_malloc_get_full_map 0x52ae 014073 copy queue ,regc 0x52af 014074 arg 0 ,temp 0x52b0 014075 arg 0 ,timeup : 014077 l2cap_malloc_enough_loop: 0x52b1 014078 copy queue ,pdata 0x52b2 014079 beq 8 ,l2cap_malloc_enough_end 0x52b3 014080 fetch 1 ,mem_used_map 0x52b4 014081 qisolate1 pdata 0x52b5 014082 branch l2cap_malloc_enough_end ,true 0x52b6 014083 increase 128 ,temp 0x52b7 014084 increase 1 ,queue 0x52b8 014085 copy rega ,pdata 0x52b9 014086 isub temp ,null 0x52ba 014087 branch l2cap_malloc_enough_end ,zero 0x52bb 014088 branch l2cap_malloc_enough_loop ,positive : 014089 l2cap_malloc_enough_end: 0x52bc 014090 copy temp ,pdata 0x52bd 014091 isub rega ,null 0x52be 014092 nbranch l2cap_malloc_enough_rtn ,positive 0x52bf 014093 copy queue ,pdata 0x52c0 014094 copy regc ,temp 0x52c1 014095 isub temp ,timeup : 014096 l2cap_malloc_enough_rtn: 0x52c2 014097 copy regc ,queue 0x52c3 014098 rtn : 014101 l2cap_malloc_signal_channel: 0x52c4 014102 set1 mark_ext_patch ,mark 0x52c5 014103 bpatch patch25_3 ,mem_patch25 0x52c6 014104 arg l2cap_signal_malloc_size ,rega 0x52c7 014105 call l2cap_malloc 0x52c8 014106 store 2 ,mem_l2cap_signal_tx_buff_ptr 0x52c9 014107 increase 4 ,pdata 0x52ca 014108 store 2 ,mem_l2cap_signal_tx_payload_ptr 0x52cb 014109 setarg 0 0x52cc 014110 store 2 ,mem_l2cap_signal_tx_length 0x52cd 014111 rtn : 014113 l2cap_get_signal_tx_buff: 0x52ce 014114 fetch 2 ,mem_l2cap_signal_tx_buff_ptr 0x52cf 014115 branch l2cap_util_pdata_to_contw : 014117 l2cap_get_signal_tx_payload: 0x52d0 014118 fetch 2 ,mem_l2cap_signal_tx_payload_ptr 0x52d1 014119 branch l2cap_util_pdata_to_contw : 014122 l2cap_malloc_sdp_channel: 0x52d2 014123 set1 mark_ext_patch ,mark 0x52d3 014124 bpatch patch25_4 ,mem_patch25 0x52d4 014125 arg sdp_malloc_size ,rega 0x52d5 014126 call l2cap_malloc 0x52d6 014127 store 2 ,mem_sdp_tx_buff_ptr 0x52d7 014128 increase 4 ,pdata 0x52d8 014129 store 2 ,mem_sdp_tx_payload_ptr 0x52d9 014130 setarg 0 0x52da 014131 store 2 ,mem_sdp_tx_pkt_length 0x52db 014132 rtn : 014134 l2cap_get_sdp_tx_buff: 0x52dc 014135 fetch 2 ,mem_sdp_tx_buff_ptr 0x52dd 014136 branch l2cap_util_pdata_to_contw : 014138 l2cap_get_sdp_tx_payload: 0x52de 014139 fetch 2 ,mem_sdp_tx_payload_ptr 0x52df 014140 branch l2cap_util_pdata_to_contw : 014143 l2cap_malloc_rfcomm_channel: 0x52e0 014144 set1 mark_ext_patch ,mark 0x52e1 014145 bpatch patch25_5 ,mem_patch25 0x52e2 014146 call push_stack 0x52e3 014147 jam rfcomm_malloc_fail ,mem_rfcomm_malloc_fail_flag 0x52e4 014148 call l2cap_malloc_is_fifo_full 0x52e5 014149 nrtn blank 0x52e6 014150 arg rfcomm_malloc_size ,rega 0x52e7 014151 call l2cap_malloc 0x52e8 014152 store 2 ,mem_rfcomm_tx_buff_ptr 0x52e9 014153 increase 4 ,pdata 0x52ea 014154 store 2 ,mem_rfcomm_tx_payload_ptr 0x52eb 014155 setarg 0 0x52ec 014156 store 2 ,mem_rfcomm_tx_pkt_length 0x52ed 014157 jam rfcomm_malloc_succeed ,mem_rfcomm_malloc_fail_flag 0x52ee 014158 branch pop_stack : 014160 l2cap_get_rfcomm_tx_buff: 0x52ef 014161 fetch 2 ,mem_rfcomm_tx_buff_ptr 0x52f0 014162 branch l2cap_util_pdata_to_contw : 014164 l2cap_get_rfcomm_tx_payload: 0x52f1 014165 fetch 2 ,mem_rfcomm_tx_payload_ptr : 014167 l2cap_util_pdata_to_contw: 0x52f2 014168 branch assert ,blank 0x52f3 014169 copy pdata ,contw 0x52f4 014170 rtn : 014173 l2cap_lpm_save_calc_len: 0x52f5 014174 set1 mark_ext_patch ,mark 0x52f6 014175 bpatch patch25_6 ,mem_patch25 0x52f7 014176 arg 0 ,regb 0x52f8 014177 arg mem_tx_fifo0_map ,rega 0x52f9 014178 increase -2 ,rega : 014179 l2cap_lpm_save_calc_len_loop: 0x52fa 014180 increase 2 ,rega 0x52fb 014181 setarg mem_tx_fifo_end 0x52fc 014182 isub rega ,null 0x52fd 014183 branch l2cap_lpm_save_calc_len_end ,zero 0x52fe 014184 ifetch 1 ,rega 0x52ff 014185 increase 1 ,rega 0x5300 014186 branch l2cap_lpm_save_calc_len_loop ,blank 0x5301 014187 ifetcht 2 ,rega 0x5302 014188 ifetch 2 ,temp 0x5303 014189 iadd regb ,regb 0x5304 014190 increase 4 ,regb 0x5305 014191 branch l2cap_lpm_save_calc_len_loop : 014192 l2cap_lpm_save_calc_len_end: 0x5306 014193 copy regb ,pdata 0x5307 014194 rtn : 014197 l2cap_lpm_get_wake_lock: 0x5308 014198 arg wake_lock_l2cap_tx ,queue 0x5309 014199 branch lpm_get_wake_lock : 014201 l2cap_lpm_put_wake_lock: 0x530a 014202 arg wake_lock_l2cap_tx ,queue 0x530b 014203 branch lpm_put_wake_lock : 014205 l2cap_lpm_save_txbuf: 0x530c 014206 set1 mark_ext_patch ,mark 0x530d 014207 bpatch patch25_7 ,mem_patch25 0x530e 014208 call l2cap_malloc_get_full_map 0x530f 014209 fetch 1 ,mem_used_map 0x5310 014210 rtn blank 0x5311 014211 call l2cap_lpm_save_calc_len 0x5312 014212 arg l2cap_lpm_txbuf_len ,temp 0x5313 014213 isub temp ,null 0x5314 014214 branch l2cap_lpm_get_wake_lock ,positive 0x5315 014215 call l2cap_lpm_put_wake_lock 0x5316 014216 arg mem_l2cap_lpm_txbuf ,contw 0x5317 014217 arg mem_tx_fifo0 ,rega : 014218 l2cap_lpm_save_txbuf_loop: 0x5318 014219 setarg mem_tx_fifo_end 0x5319 014220 isub rega ,null 0x531a 014221 rtn zero 0x531b 014222 ifetch 1 ,rega 0x531c 014223 increase 1 ,rega 0x531d 014224 nbranch l2cap_lpm_save_txbuf_nempty ,blank 0x531e 014225 istore 2 ,contw 0x531f 014226 increase 2 ,rega 0x5320 014227 branch l2cap_lpm_save_txbuf_loop : 014228 l2cap_lpm_save_txbuf_nempty: 0x5321 014229 ifetch 2 ,rega 0x5322 014230 increase 2 ,rega 0x5323 014231 copy pdata ,contr 0x5324 014232 ifetch 2 ,contr 0x5325 014233 istore 2 ,contw 0x5326 014234 copy pdata ,loopcnt 0x5327 014235 increase 2 ,loopcnt 0x5328 014236 call memcpy 0x5329 014237 branch l2cap_lpm_save_txbuf_loop : 014239 l2cap_lpm_load_txbuf: 0x532a 014240 set1 mark_ext_patch ,mark 0x532b 014241 bpatch patch26_0 ,mem_patch26 0x532c 014242 call l2cap_malloc_get_full_map 0x532d 014243 fetch 1 ,mem_used_map 0x532e 014244 rtn blank 0x532f 014245 arg mem_tx_fifo0_ptr ,rega 0x5330 014246 increase -3 ,rega 0x5331 014247 arg mem_l2cap_lpm_txbuf ,contr : 014248 l2cap_lpm_load_txbuf_loop: 0x5332 014249 increase 3 ,rega 0x5333 014250 setarg mem_tx_fifo_end + 1 0x5334 014251 isub rega ,null 0x5335 014252 rtn zero 0x5336 014253 ifetch 2 ,contr 0x5337 014254 branch l2cap_lpm_load_txbuf_loop ,blank 0x5338 014255 increase 4 ,pdata 0x5339 014256 copy pdata ,loopcnt 0x533a 014257 copy contr ,regb 0x533b 014258 ifetch 2 ,rega 0x533c 014259 copy pdata ,contw 0x533d 014260 copy regb ,contr 0x533e 014261 increase -2 ,contr 0x533f 014262 call memcpy 0x5340 014263 branch l2cap_lpm_load_txbuf_loop : 014271 le_init_param: 0x5341 014272 rtn wake 0x5342 014273 setarg param_le_scan_interval 0x5343 014274 store 2 ,mem_le_scan_interval 0x5344 014275 setarg param_le_scan_window 0x5345 014276 store 2 ,mem_le_scan_window 0x5346 014277 rtn : 014279 le_init_att: 0x5347 014280 arg notify_handle ,temp 0x5348 014281 call le_att_get_handle_ptr 0x5349 014282 add contr ,1 ,pdata 0x534a 014283 store 2 ,mem_le_notify_attr_start 0x534b 014284 rtn : 014286 le_init_conn: 0x534c 014287 set1 mark_ext_patch ,mark 0x534d 014288 bpatch patch26_2 ,mem_patch26 0x534e 014289 disable wake 0x534f 014290 jam 1 ,mem_app_state 0x5350 014291 jam 1 ,mem_le_conn_handle 0x5351 014292 jam 3 ,mem_le_state 0x5352 014293 jam 1 ,mem_le_arq 0x5353 014294 setarg -1 0x5354 014295 store 2 ,mem_le_event_count 0x5355 014296 force 0 ,pdata 0x5356 014297 store 1 ,mem_le_conn_sm 0x5357 014298 store 1 ,mem_le_ch 0x5358 014299 store 1 ,mem_le_op 0x5359 014300 store 3 ,mem_sniff_rcv 0x535a 014301 store 3 ,mem_sniff_lost 0x535b 014302 store 5 ,mem_le_pcnt_tx 0x535c 014303 set1 39 ,pdata 0x535d 014304 store 5 ,mem_le_pcnt_rx 0x535e 014305 branch le_supervision_flush : 014307 le_init_master: 0x535f 014308 set1 mark_ext_patch ,mark 0x5360 014309 bpatch patch26_3 ,mem_patch26 0x5361 014310 enable master 0x5362 014311 jam lemode_master ,mem_le_mode 0x5363 014312 jam 1 ,mem_le_att_handle 0x5364 014313 jam 1 ,mem_le_search_handle_start 0x5365 014314 setarg 0xffff 0x5366 014315 store 2 ,mem_le_search_handle_end 0x5367 014316 force 0 ,pdata 0x5368 014317 store 5 ,mem_le_pcnt_rx 0x5369 014318 set1 39 ,pdata 0x536a 014319 store 5 ,mem_le_pcnt_tx 0x536b 014320 branch le_init_conn : 014323 le_init_slave: 0x536c 014324 set1 mark_ext_patch ,mark 0x536d 014325 bpatch patch26_4 ,mem_patch26 0x536e 014326 disable master 0x536f 014327 jam lemode_slave ,mem_le_mode 0x5370 014328 jam 0 ,mem_le_adv_enable 0x5371 014329 jam 0 ,mem_lpm_current_mult 0x5372 014330 branch le_init_conn : 014336 le_dispatch: 0x5373 014337 call le_enable 0x5374 014338 call le_scan 0x5375 014339 call le_adv 0x5376 014340 branch le_disable : 014342 le_conn_dispatch: 0x5377 014343 set1 mark_ext_patch ,mark 0x5378 014344 bpatch patch26_5 ,mem_patch26 0x5379 014345 call le_enable 0x537a 014346 call app_process_ble 0x537b 014347 fetch 1 ,mem_le_mode 0x537c 014348 beq lemode_master ,le_master_dispatch 0x537d 014349 branch le_slave_dispatch : 014355 le_master_dispatch: 0x537e 014356 set1 mark_ext_patch ,mark 0x537f 014357 bpatch patch26_6 ,mem_patch26 0x5380 014358 enable master 0x5381 014359 call le_supervision_update 0x5382 014360 branch le_master_disconn ,positive 0x5383 014361 call check_ble_disabled 0x5384 014362 call le_setup 0x5385 014363 call le_prepare_tx 0x5386 014364 disable match 0x5387 014365 call le_transmit_receive_sifs 0x5388 014366 nrtn match 0x5389 014367 set1 mark_ext_patch ,mark 0x538a 014368 bpatch patch26_7 ,mem_patch26 0x538b 014369 fetch 1 ,mem_le_conn_rcv 0x538c 014370 increase 1 ,pdata 0x538d 014371 store 1 ,mem_le_conn_rcv 0x538e 014372 call le_acknowledge 0x538f 014373 call le_conn_sm_master 0x5390 014374 disable master 0x5391 014375 rtn : 014377 le_master_disconn: 0x5392 014378 call le_disconnect 0x5393 014379 disable master 0x5394 014380 rtn : 014385 le_slave_dispatch: 0x5395 014386 set1 mark_ext_patch ,mark 0x5396 014387 bpatch patch27_0 ,mem_patch27 0x5397 014388 disable attempt 0x5398 014389 call le_supervision_update 0x5399 014390 branch le_slave_disconn ,positive 0x539a 014391 call check_ble_disabled 0x539b 014392 call le_setup 0x539c 014393 call le_receive_slave 0x539d 014394 nbranch le_slave_unsync ,match : 014395 le_slave_match: 0x539e 014396 set1 mark_ext_patch ,mark 0x539f 014397 bpatch patch27_1 ,mem_patch27 0x53a0 014398 call le_got_first_packet 0x53a1 014399 call le_acknowledge 0x53a2 014400 call le_prepare_tx 0x53a3 014401 fetch 1 ,mem_le_rxbuf 0x53a4 014402 bbit1 md ,le_slave_more_data 0x53a5 014403 call le_xtype_fifo_is_empty 0x53a6 014404 nbranch le_slave_more_data ,blank : 014405 le_slave_transmit_last: 0x53a7 014406 set1 mark_ext_patch ,mark 0x53a8 014407 bpatch patch27_2 ,mem_patch27 0x53a9 014408 call le_transmit_norx : 014409 le_slave_cont: 0x53aa 014410 call check_51cmd 0x53ab 014411 fetch 1 ,mem_le_op 0x53ac 014412 bbit1 op_disconn ,le_slave_disconn : 014413 le_slave_unsync: 0x53ad 014414 set1 mark_ext_patch ,mark 0x53ae 014415 bpatch patch27_3 ,mem_patch27 0x53af 014416 call le_savelist 0x53b0 014417 call le_lpm_set_mult 0x53b1 014418 call le_update_channel_map 0x53b2 014419 call le_update_param 0x53b3 014420 branch calc_clke_offset : 014422 le_slave_more_data: 0x53b4 014423 set1 mark_ext_patch ,mark 0x53b5 014424 bpatch patch27_4 ,mem_patch27 0x53b6 014425 enable attempt 0x53b7 014426 call le_transmit_receive_sifs 0x53b8 014427 branch le_slave_match ,match 0x53b9 014428 branch le_slave_cont : 014430 le_slave_disconn: : 014433 le_disconnect: 0x53ba 014434 set1 mark_ext_patch ,mark 0x53bb 014435 bpatch patch27_5 ,mem_patch27 0x53bc 014436 call le_clear_connection_info 0x53bd 014437 call app_disconn_reason_collect_ble 0x53be 014438 jam bt_evt_le_disconnected ,mem_fifo_temp 0x53bf 014439 branch ui_ipc_send_event : 014441 le_clear_connection_info: 0x53c0 014442 fetcht 1 ,mem_le_conn_handle 0x53c1 014443 jam hci_error_connection_timeout ,mem_hci_disconn_reason 0x53c2 014444 call hci_send_disconn_complete 0x53c3 014445 jam 0 ,mem_le_conn_handle 0x53c4 014446 jam lemode_idle ,mem_le_mode 0x53c5 014447 jam 0 ,mem_le_state 0x53c6 014448 jam 0 ,mem_app_state 0x53c7 014449 rtn : 014451 le_got_first_packet: 0x53c8 014452 fetch 1 ,mem_le_conn_rcv 0x53c9 014453 increase 1 ,pdata 0x53ca 014454 store 1 ,mem_le_conn_rcv 0x53cb 014455 fetch 1 ,mem_le_state 0x53cc 014456 rtnbit1 lestate_got_first_packet 0x53cd 014457 set1 lestate_got_first_packet 0x53ce 014458 store 1 ,mem_le_state 0x53cf 014459 setarg 0 0x53d0 014460 store 4 ,mem_le_transmit_window 0x53d1 014461 rtn : 014466 le_enable: 0x53d2 014467 set1 mark_ext_patch ,mark 0x53d3 014468 bpatch patch27_6 ,mem_patch27 0x53d4 014469 enable le 0x53d5 014470 hjam 7 ,rfen_ulp 0x53d6 014471 branch check_ble_disabled : 014473 le_disable: 0x53d7 014474 set1 mark_ext_patch ,mark 0x53d8 014475 bpatch patch27_7 ,mem_patch27 0x53d9 014476 disable le 0x53da 014477 hjam 3 ,rfen_ulp 0x53db 014478 arg 0 ,stop_watch 0x53dc 014479 rtn : 014481 le_prep: 0x53dd 014482 disable enable_crc 0x53de 014483 disable enable_white 0x53df 014484 fetch 3 ,mem_le_crcinit 0x53e0 014485 iforce crc24_init 0x53e1 014486 fetch 1 ,mem_le_ch_mapped 0x53e2 014487 reverse pdata ,temp 0x53e3 014488 set1 1 ,temp 0x53e4 014489 rshift temp ,white_init 0x53e5 014490 rtn : 014493 lerx_setfreq: 0x53e6 014494 call le_setfreq 0x53e7 014495 call set_freq_rx 0x53e8 014496 setarg param_pll_setup 0x53e9 014497 call sleep 0x53ea 014498 branch rf_rx_enable : 014500 letx_setfreq: 0x53eb 014501 branch txon ,match 0x53ec 014502 call le_setfreq 0x53ed 014503 branch set_freq_tx : 014504 le_setfreq: 0x53ee 014505 set1 mark_ext_patch ,mark 0x53ef 014506 bpatch patch28_0 ,mem_patch28 0x53f0 014507 call set_sync_on 0x53f1 014508 fetch 1 ,mem_le_testtype 0x53f2 014509 nbranch le_ctf_test ,blank 0x53f3 014510 fetch 1 ,mem_le_ch_mapped 0x53f4 014511 sub pdata ,36 ,null 0x53f5 014512 branch le_ctf_normal ,positive 0x53f6 014513 force 0 ,temp 0x53f7 014514 rtneq 37 0x53f8 014515 force 24 ,temp 0x53f9 014516 rtneq 38 0x53fa 014517 force 78 ,temp 0x53fb 014518 rtn : 014520 le_ctf_normal: 0x53fc 014521 sub pdata ,10 ,null 0x53fd 014522 branch le_ctf_low ,positive 0x53fe 014523 increase 1 ,pdata : 014525 le_ctf_low: 0x53ff 014526 lshift pdata ,pdata 0x5400 014527 add pdata ,2 ,temp 0x5401 014528 rtn : 014530 le_ctf_test: 0x5402 014531 fetch 1 ,mem_le_ch_mapped 0x5403 014532 lshift pdata ,temp 0x5404 014533 rtn : 014535 le_sca_map: 0x5405 014536 arg 500 ,temp 0x5406 014537 rtn blank 0x5407 014538 arg 250 ,temp 0x5408 014539 rtneq 1 0x5409 014540 arg 150 ,temp 0x540a 014541 rtneq 2 0x540b 014542 arg 100 ,temp 0x540c 014543 rtneq 3 0x540d 014544 arg 75 ,temp 0x540e 014545 rtneq 4 0x540f 014546 arg 50 ,temp 0x5410 014547 rtneq 5 0x5411 014548 arg 40 ,temp 0x5412 014549 rtneq 6 0x5413 014550 arg 20 ,temp 0x5414 014551 rtn : 014555 le_adv_access: 0x5415 014556 setarg 0x8e89be 0x5416 014557 lshift8 pdata ,pdata 0x5417 014558 or_into 0xd6 ,pdata 0x5418 014559 iforce access 0x5419 014560 setarg 0x555555 0x541a 014561 store 3 ,mem_le_crcinit 0x541b 014562 rtn : 014564 le_setup: 0x541c 014565 set1 mark_ext_patch ,mark 0x541d 014566 bpatch patch28_1 ,mem_patch28 0x541e 014567 enable swfine 0x541f 014568 fetch 4 ,mem_le_access 0x5420 014569 iforce access 0x5421 014570 call le_map_channel 0x5422 014571 setarg 0x200 0x5423 014572 branch le_setup_master ,master 0x5424 014573 fetch 2 ,mem_le_receive_window 0x5425 014574 rshift pdata ,pdata : 014575 le_setup_master: 0x5426 014576 arg param_pll_setup ,temp 0x5427 014577 iadd temp ,pdata 0x5428 014578 call ahead_window 0x5429 014579 deposit clke 0x542a 014580 store 6 ,mem_le_rxon_ts 0x542b 014581 rtn : 014583 le_next_adv_channel: 0x542c 014584 set1 mark_ext_patch ,mark 0x542d 014585 bpatch patch28_2 ,mem_patch28 0x542e 014586 fetch 1 ,mem_le_ch_mapped 0x542f 014587 increase 1 ,pdata 0x5430 014588 store 1 ,mem_le_ch_mapped 0x5431 014589 rtnne 40 0x5432 014590 jam 37 ,mem_le_ch_mapped 0x5433 014591 rtn : 014593 le_context_nexthop: 0x5434 014594 set1 mark_ext_patch ,mark 0x5435 014595 bpatch patch28_3 ,mem_patch28 0x5436 014596 add rega ,coffset_mode ,contr 0x5437 014597 ifetch 1 ,contr 0x5438 014598 rtnbit0 mode_le 0x5439 014599 add rega ,coffset_le_event_cnt ,contw 0x543a 014600 ifetch 2 ,contw 0x543b 014601 increase 1 ,pdata 0x543c 014602 istore 2 ,contw 0x543d 014603 add rega ,coffset_le_hop ,contr 0x543e 014604 ifetch 1 ,contr 0x543f 014605 add rega ,coffset_le_ch ,contw 0x5440 014606 ifetcht 1 ,contw 0x5441 014607 iadd temp ,pdata 0x5442 014608 sub pdata ,36 ,null 0x5443 014609 branch le_nexthop_nowrap ,positive 0x5444 014610 increase -37 ,pdata : 014611 le_nexthop_nowrap: 0x5445 014612 istore 1 ,contw 0x5446 014613 rtn : 014616 le_calc_channel_map: 0x5447 014617 set1 mark_ext_patch ,mark 0x5448 014618 bpatch patch28_4 ,mem_patch28 0x5449 014619 fetch 5 ,mem_le_channel_map 0x544a 014620 force 0 ,temp 0x544b 014621 force 37 ,loopcnt : 014622 le_count_channels_loop: 0x544c 014623 bbit0 0 ,le_count_channels_notused 0x544d 014624 increase 1 ,temp : 014625 le_count_channels_notused: 0x544e 014626 rshift pdata ,pdata 0x544f 014627 loop le_count_channels_loop 0x5450 014628 add temp ,-1 ,pdata 0x5451 014629 store 1 ,mem_le_channels 0x5452 014630 rtn : 014632 le_map_channel: 0x5453 014633 set1 mark_ext_patch ,mark 0x5454 014634 bpatch patch28_5 ,mem_patch28 0x5455 014635 fetch 1 ,mem_le_ch 0x5456 014636 iforce queue 0x5457 014637 fetcht 5 ,mem_le_channel_map 0x5458 014638 qisolate1 temp 0x5459 014639 branch le_map_channel_end ,true : 014640 le_map_channel_next: 0x545a 014641 set1 mark_ext_patch ,mark 0x545b 014642 bpatch patch28_6 ,mem_patch28 0x545c 014643 fetch 1 ,mem_le_channels 0x545d 014644 isub queue ,pdata 0x545e 014645 branch le_map_channel_cont ,positive 0x545f 014646 sub pdata ,-1 ,queue 0x5460 014647 branch le_map_channel_next : 014648 le_map_channel_cont: 0x5461 014649 copy queue ,loopcnt 0x5462 014650 force 0 ,queue : 014651 le_map_channel_loop: 0x5463 014652 qisolate1 temp 0x5464 014653 branch le_map_channel_skip ,true 0x5465 014654 increase 1 ,loopcnt : 014655 le_map_channel_skip: 0x5466 014656 deposit loopcnt 0x5467 014657 branch le_map_channel_end ,blank 0x5468 014658 increase 1 ,queue 0x5469 014659 increase -1 ,loopcnt 0x546a 014660 branch le_map_channel_loop : 014661 le_map_channel_end: 0x546b 014662 deposit queue 0x546c 014663 store 1 ,mem_le_ch_mapped 0x546d 014664 rtn : 014667 le_wait_tx: 0x546e 014668 branch le_wait_master ,master 0x546f 014669 until null ,timeout 0x5470 014670 rtn : 014672 le_wait_master: 0x5471 014673 arg 0xea0 ,timeup 0x5472 014674 until clkn_rt ,meet 0x5473 014675 rtn : 014677 le_receive_adv: 0x5474 014678 disable swfine 0x5475 014679 fetch 2 ,mem_le_scan_window 0x5476 014680 copy pdata ,timeup 0x5477 014681 branch le_receive_packet : 014684 le_receive_slave: 0x5478 014685 set1 mark_ext_patch ,mark 0x5479 014686 bpatch patch28_7 ,mem_patch28 0x547a 014687 enable swfine 0x547b 014688 fetch 2 ,mem_le_receive_window 0x547c 014689 fetcht 4 ,mem_le_transmit_window 0x547d 014690 iadd temp ,timeup : 014691 le_receive_packet: 0x547e 014692 call lerx_setfreq : 014693 le_receive_rxon: 0x547f 014694 set1 mark_ext_patch ,mark 0x5480 014695 bpatch patch29_0 ,mem_patch29 0x5481 014696 call le_prep 0x5482 014697 disable match 0x5483 014698 enable decode_fec0 0x5484 014699 enable is_rx 0x5485 014700 disable is_tx 0x5486 014701 copy timeup ,stop_watch 0x5487 014702 correlate null ,timeout 0x5488 014703 branch le_receive_on_attempt ,attempt 0x5489 014704 copy clke ,temp 0x548a 014705 storet 6 ,mem_sync_clke : 014706 le_receive_on_attempt: 0x548b 014707 nbranch end_of_packet ,sync 0x548c 014708 branch le_receive_skip ,attempt 0x548d 014709 arg param_clke_cal_le ,clke_rt 0x548e 014710 copy bt_clk ,clke_bt 0x548f 014711 fetch 1 ,mem_le_state 0x5490 014712 bbit0 lestate_got_first_packet ,le_receive_skip 0x5491 014713 call lpm_adjust_clk ,wake : 014714 le_receive_skip: 0x5492 014715 set1 mark_ext_patch ,mark 0x5493 014716 bpatch patch29_1 ,mem_patch29 0x5494 014717 call save_rssi 0x5495 014718 enable enable_white 0x5496 014719 enable enable_crc 0x5497 014720 parse demod ,bucket ,8 0x5498 014721 rshift3 pwindow ,pdata 0x5499 014722 store 1 ,mem_le_rxbuf 0x549a 014723 parse demod ,bucket ,8 0x549b 014724 rshift3 pwindow ,pdata 0x549c 014725 istore 1 ,contw 0x549d 014726 and pdata ,0x3f ,loopcnt 0x549e 014727 branch lerx_nopayload ,zero : 014729 lerx_loop: 0x549f 014730 parse demod ,bucket ,8 0x54a0 014731 rshift3 pwindow ,pdata 0x54a1 014732 istore 1 ,contw 0x54a2 014733 loop lerx_loop : 014735 lerx_nopayload: 0x54a3 014736 set1 mark_ext_patch ,mark 0x54a4 014737 bpatch patch29_2 ,mem_patch29 0x54a5 014738 parse demod ,bucket ,24 0x54a6 014739 enable swfine 0x54a7 014740 arg param_sifs ,stop_watch 0x54a8 014741 rshift32 pdata ,pdata 0x54a9 014742 rshift16 pdata ,pdata 0x54aa 014743 istore 3 ,contw 0x54ab 014744 branch end_of_packet ,crc_failed 0x54ac 014745 enable match 0x54ad 014746 fetch 1 ,mem_last_freq 0x54ae 014747 add pdata ,2 ,rega 0x54af 014748 call rf_write_freq 0x54b0 014749 disable decode_fec0 0x54b1 014750 branch set_sync_on : 014752 le_transmit_receive_sifs: 0x54b2 014753 set1 mark_ext_patch ,mark 0x54b3 014754 bpatch patch29_3 ,mem_patch29 0x54b4 014755 call le_transmit 0x54b5 014756 fetcht 1 ,mem_last_freq 0x54b6 014757 call set_freq_rx 0x54b7 014758 call rf_rx_enable 0x54b8 014759 enable swfine 0x54b9 014760 arg 5000 ,timeup 0x54ba 014761 branch le_receive_rxon : 014763 le_transmit_norx: 0x54bb 014764 call le_transmit 0x54bc 014765 branch end_of_packet : 014767 le_transmit: 0x54bd 014768 set1 mark_ext_patch ,mark 0x54be 014769 bpatch patch29_4 ,mem_patch29 0x54bf 014770 call le_prep 0x54c0 014771 call letx_setfreq 0x54c1 014772 set1 txgfsk ,radio_ctrl 0x54c2 014773 enable encode_fec0 0x54c3 014774 enable is_tx 0x54c4 014775 disable is_rx 0x54c5 014776 call le_wait_tx 0x54c6 014777 rshift16 access ,pdata 0x54c7 014778 rshift8 pdata ,pdata 0x54c8 014779 rshift4 pdata ,pdata 0x54c9 014780 inject mod ,40 0x54ca 014781 enable enable_white 0x54cb 014782 enable enable_crc 0x54cc 014783 set1 mark_ext_patch ,mark 0x54cd 014784 bpatch patch29_5 ,mem_patch29 0x54ce 014785 fetch 1 ,mem_le_txheader 0x54cf 014786 inject mod ,8 0x54d0 014787 ifetch 1 ,contr 0x54d1 014788 and pdata ,0x3f ,loopcnt 0x54d2 014789 inject mod ,8 0x54d3 014790 branch letr_nopayload ,zero : 014791 letr_loop: 0x54d4 014792 ifetch 1 ,contr 0x54d5 014793 inject mod ,8 0x54d6 014794 loop letr_loop : 014796 letr_nopayload: 0x54d7 014797 enable enable_parity 0x54d8 014798 inject mod ,24 0x54d9 014799 disable enable_parity 0x54da 014800 until null ,tx_clear 0x54db 014801 nop 100 0x54dc 014802 disable encode_fec0 0x54dd 014803 rtn : 014805 le_send_adv_ind: 0x54de 014806 set1 mark_ext_patch ,mark 0x54df 014807 bpatch patch29_6 ,mem_patch29 0x54e0 014808 fetch 1 ,mem_le_adv_type 0x54e1 014809 beq adv_direct_ind ,le_send_adv_direct_ind 0x54e2 014810 fetch 1 ,mem_le_adv_own_addr_type 0x54e3 014811 lshift4 pdata ,pdata 0x54e4 014812 lshift2 pdata ,pdata 0x54e5 014813 store 1 ,mem_le_txheader 0x54e6 014814 fetcht 1 ,mem_le_adv_data_len 0x54e7 014815 add temp ,6 ,pdata 0x54e8 014816 store 1 ,mem_le_txlen 0x54e9 014817 fetch 6 ,mem_le_lap 0x54ea 014818 store 6 ,mem_le_txpayload 0x54eb 014819 copy temp ,loopcnt 0x54ec 014820 arg mem_le_adv_data ,contr 0x54ed 014821 call memcpy 0x54ee 014822 branch le_send_adv_transmit : 014823 le_send_adv_direct_ind: 0x54ef 014824 fetcht 2 ,mem_le_notify_handle 0x54f0 014825 call le_att_check_notification_enable 0x54f1 014826 copy rega ,contw 0x54f2 014827 setarg 1 0x54f3 014828 istore 1 ,contw 0x54f4 014829 fetch 1 ,mem_le_adv_direct_addr_type 0x54f5 014830 lshift4 pdata ,pdata 0x54f6 014831 lshift2 pdata ,pdata 0x54f7 014832 increase 1 ,pdata 0x54f8 014833 store 1 ,mem_le_txheader 0x54f9 014834 setarg 12 0x54fa 014835 store 1 ,mem_le_txlen 0x54fb 014836 fetch 6 ,mem_le_lap 0x54fc 014837 store 6 ,mem_le_txpayload 0x54fd 014838 fetch 6 ,mem_hci_plap 0x54fe 014839 istore 6 ,contw : 014840 le_send_adv_transmit: 0x54ff 014841 set1 mark_ext_patch ,mark 0x5500 014842 bpatch patch29_7 ,mem_patch29 0x5501 014843 fetch 1 ,mem_le_adv_transmit 0x5502 014844 increase 1 ,pdata 0x5503 014845 store 1 ,mem_le_adv_transmit 0x5504 014846 arg 1800 ,stop_watch 0x5505 014847 disable match 0x5506 014848 branch le_transmit_receive_sifs : 014850 le_send_scan_request: 0x5507 014851 set1 mark_ext_patch ,mark 0x5508 014852 bpatch patch2a_0 ,mem_patch2a 0x5509 014853 fetch 1 ,mem_le_scan_type 0x550a 014854 rtnne le_scan_type_active ,pdata 0x550b 014855 fetch 1 ,mem_le_adv_transmit 0x550c 014856 increase 1 ,pdata 0x550d 014857 store 1 ,mem_le_adv_transmit 0x550e 014858 arg 0x0c03 ,temp 0x550f 014859 fetch 1 ,mem_le_scan_own_addr_type 0x5510 014860 nsetflag blank ,le_sender_addr_bit ,temp 0x5511 014861 copy rega ,pdata 0x5512 014862 nsetflag blank ,le_receiver_addr_bit ,temp 0x5513 014863 storet 2 ,mem_le_txheader 0x5514 014864 fetch 6 ,mem_le_lap 0x5515 014865 istore 6 ,contw 0x5516 014866 fetch 6 ,mem_le_plap 0x5517 014867 istore 6 ,contw 0x5518 014868 branch le_transmit_receive_sifs : 014871 le_send_scan_response: 0x5519 014872 set1 mark_ext_patch ,mark 0x551a 014873 bpatch patch2a_1 ,mem_patch2a 0x551b 014874 arg scan_rsp ,temp 0x551c 014875 fetch 1 ,mem_le_adv_own_addr_type 0x551d 014876 nsetflag blank ,le_sender_addr_bit ,temp 0x551e 014877 storet 1 ,mem_le_txheader 0x551f 014878 fetcht 1 ,mem_le_scan_data_len 0x5520 014879 add temp ,6 ,pdata 0x5521 014880 store 1 ,mem_le_txlen 0x5522 014881 fetch 6 ,mem_le_lap 0x5523 014882 store 6 ,mem_le_txpayload 0x5524 014883 arg mem_le_scan_data ,contr 0x5525 014884 copy temp ,loopcnt 0x5526 014885 call memcpy 0x5527 014886 branch le_transmit_norx : 014889 le_connect_request: 0x5528 014890 set1 mark_ext_patch ,mark 0x5529 014891 bpatch patch2a_2 ,mem_patch2a 0x552a 014892 force -1 ,pdata 0x552b 014893 setsect 2 ,1 0x552c 014894 store 5 ,mem_le_channel_map 0x552d 014895 call le_calc_channel_map 0x552e 014896 force 4 ,loopcnt 0x552f 014897 arg mem_le_access ,contw 0x5530 014898 call generate_random_loop 0x5531 014899 fetch 2 ,mem_le_conn_superto 0x5532 014900 store 2 ,mem_le_superto : 014901 le_con_req_hop_retry: 0x5533 014902 random pdata 0x5534 014903 and_into 0xf ,pdata 0x5535 014904 sub pdata ,4 ,null 0x5536 014905 branch le_con_req_hop_retry ,positive 0x5537 014906 store 1 ,mem_le_hop 0x5538 014907 store 1 ,mem_tmp1 0x5539 014908 set1 mark_ext_patch ,mark 0x553a 014909 bpatch patch2a_3 ,mem_patch2a 0x553b 014910 fetcht 2 ,mem_le_conn_interval 0x553c 014911 storet 2 ,mem_le_tsniff 0x553d 014912 copy temp ,regc 0x553e 014913 add clkn_bt ,7 ,pdata 0x553f 014914 idiv regc 0x5540 014915 call wait_div_end 0x5541 014916 remainder rega 0x5542 014917 isub rega ,pdata 0x5543 014918 iadd regc ,pdata 0x5544 014919 fetcht 2 ,mem_le_dsniff 0x5545 014920 iadd temp ,pdata 0x5546 014921 store 4 ,mem_le_anchor 0x5547 014922 isub clkn_bt ,rega 0x5548 014923 increase -6 ,rega 0x5549 014924 arg 0x2205 ,regb 0x554a 014925 fetch 1 ,mem_le_conn_own_addr_type 0x554b 014926 nsetflag blank ,le_sender_addr_bit ,regb 0x554c 014927 fetch 1 ,mem_le_conn_peer_addr_type 0x554d 014928 nsetflag blank ,le_receiver_addr_bit ,regb 0x554e 014929 copy regb ,pdata 0x554f 014930 store 2 ,mem_le_txheader 0x5550 014931 fetch 6 ,mem_le_lap 0x5551 014932 istore 6 ,contw 0x5552 014933 fetch 6 ,mem_le_plap 0x5553 014934 istore 6 ,contw 0x5554 014935 fetch 4 ,mem_le_access 0x5555 014936 istore 4 ,contw 0x5556 014937 random pdata 0x5557 014938 istore 2 ,contw 0x5558 014939 random pdata 0x5559 014940 istore 1 ,contw 0x555a 014941 force 2 ,pdata 0x555b 014942 istore 1 ,contw 0x555c 014943 rshift2 rega ,pdata 0x555d 014944 istore 2 ,contw 0x555e 014945 rshift2 regc ,pdata 0x555f 014946 istore 2 ,contw 0x5560 014947 set1 mark_ext_patch ,mark 0x5561 014948 bpatch patch2a_4 ,mem_patch2a 0x5562 014949 fetch 2 ,mem_le_conn_latency 0x5563 014950 istore 2 ,contw 0x5564 014951 fetch 2 ,mem_le_conn_superto 0x5565 014952 istore 2 ,contw 0x5566 014953 fetch 5 ,mem_le_channel_map 0x5567 014954 istore 5 ,contw 0x5568 014955 fetch 1 ,mem_le_hop 0x5569 014956 arg param_le_sca ,temp 0x556a 014957 ior temp ,pdata 0x556b 014958 istore 1 ,contw 0x556c 014959 call le_transmit_norx 0x556d 014960 setarg mem_le_txheader 0x556e 014961 add pdata ,18 ,contr 0x556f 014962 ifetch 3 ,contr 0x5570 014963 store 3 ,mem_le_crcinit 0x5571 014964 rtn : 014966 le_init_adv: 0x5572 014967 set1 mark_ext_patch ,mark 0x5573 014968 bpatch patch2a_5 ,mem_patch2a 0x5574 014969 disable master 0x5575 014970 branch le_adv_access : 014974 le_update_param: 0x5576 014975 set1 mark_ext_patch ,mark 0x5577 014976 bpatch patch2a_6 ,mem_patch2a 0x5578 014977 fetch 1 ,mem_le_state 0x5579 014978 rtnbit0 lestate_update_param 0x557a 014979 fetch 2 ,mem_le_event_count 0x557b 014980 fetcht 2 ,mem_le_instant 0x557c 014981 isub temp ,pdata 0x557d 014982 nrtn positive 0x557e 014983 fetch 1 ,mem_le_state 0x557f 014984 set0 lestate_update_param ,pdata 0x5580 014985 set0 lestate_got_first_packet ,pdata 0x5581 014986 store 1 ,mem_le_state 0x5582 014987 fetch 4 ,mem_le_anchor 0x5583 014988 fetcht 2 ,mem_le_tsniff 0x5584 014989 isub temp ,rega 0x5585 014990 set1 mark_ext_patch ,mark 0x5586 014991 bpatch patch2a_7 ,mem_patch2a 0x5587 014992 fetch 1 ,mem_le_new_param 0x5588 014993 store 1 ,mem_le_window_size 0x5589 014994 ifetcht 2 ,contr 0x558a 014995 ifetch 2 ,contr 0x558b 014996 lshift2 pdata ,pdata 0x558c 014997 store 2 ,mem_le_tsniff 0x558d 014998 lshift2 temp ,temp 0x558e 014999 iadd temp ,pdata 0x558f 015000 ifetcht 4 ,contr 0x5590 015001 storet 4 ,mem_le_slave_latency 0x5591 015002 iadd rega ,pdata 0x5592 015003 store 4 ,mem_le_anchor 0x5593 015004 branch le_receive_window_size : 015006 le_update_channel_map: 0x5594 015007 set1 mark_ext_patch ,mark 0x5595 015008 bpatch patch2b_0 ,mem_patch2b 0x5596 015009 fetch 1 ,mem_le_state 0x5597 015010 rtnbit0 lestate_update_map 0x5598 015011 fetch 2 ,mem_le_event_count 0x5599 015012 fetcht 2 ,mem_le_instant 0x559a 015013 isub temp ,pdata 0x559b 015014 nrtn positive 0x559c 015015 fetch 1 ,mem_le_state 0x559d 015016 set0 lestate_update_map ,pdata 0x559e 015017 store 1 ,mem_le_state 0x559f 015018 fetch 5 ,mem_le_new_map 0x55a0 015019 store 5 ,mem_le_channel_map 0x55a1 015020 branch le_calc_channel_map : 015023 le_acknowledge: 0x55a2 015024 set1 mark_ext_patch ,mark 0x55a3 015025 bpatch patch2b_1 ,mem_patch2b 0x55a4 015026 call le_supervision_flush 0x55a5 015027 call le_check_wak 0x55a6 015028 fetch 1 ,mem_le_rxbuf 0x55a7 015029 rshift pdata ,pdata 0x55a8 015030 ixor temp ,pdata 0x55a9 015031 isolate1 nesn ,pdata 0x55aa 015032 setflag true ,mark_old_packet ,mark 0x55ab 015033 fetch 1 ,mem_le_rxbuf + 1 0x55ac 015034 branch le_ack_unenc ,blank 0x55ad 015035 fetch 1 ,mem_le_state 0x55ae 015036 bbit0 lestate_encryption ,le_ack_unenc 0x55af 015037 call load_sk 0x55b0 015038 call le_decrypt 0x55b1 015039 nrtn blank : 015040 le_ack_unenc: 0x55b2 015041 rtnmark1 mark_old_packet 0x55b3 015042 fetcht 1 ,mem_le_arq 0x55b4 015043 setflip nesn ,temp 0x55b5 015044 storet 1 ,mem_le_arq 0x55b6 015045 branch le_parse : 015047 le_check_wak: 0x55b7 015048 set1 mark_ext_patch ,mark 0x55b8 015049 bpatch patch2b_2 ,mem_patch2b 0x55b9 015050 fetcht 1 ,mem_le_arq 0x55ba 015051 isolate0 wak ,temp 0x55bb 015052 rtn true 0x55bc 015053 fetch 1 ,mem_le_rxbuf 0x55bd 015054 lshift pdata ,pdata 0x55be 015055 ixor temp ,pdata 0x55bf 015056 rtnbit0 sn 0x55c0 015057 set0 wak ,temp 0x55c1 015058 setflip sn ,temp 0x55c2 015059 storet 1 ,mem_le_arq 0x55c3 015060 compare 3 ,temp ,3 0x55c4 015061 nrtn true 0x55c5 015062 fetch 1 ,mem_le_txpayload 0x55c6 015063 rtnne ll_start_enc_req 0x55c7 015064 fetch 1 ,mem_le_state 0x55c8 015065 set1 lestate_encryption ,pdata 0x55c9 015066 store 1 ,mem_le_state 0x55ca 015067 rtn : 015069 le_wait_adv: 0x55cb 015070 set1 mark_ext_patch ,mark 0x55cc 015071 bpatch patch2b_3 ,mem_patch2b 0x55cd 015072 call le_next_adv_channel 0x55ce 015073 call le_receive_adv 0x55cf 015074 fetch 1 ,mem_le_adv_waitcnt 0x55d0 015075 increase 1 ,pdata 0x55d1 015076 store 1 ,mem_le_adv_waitcnt 0x55d2 015077 rtn : 015079 le_scan: 0x55d3 015080 set1 mark_ext_patch ,mark 0x55d4 015081 bpatch patch2b_4 ,mem_patch2b 0x55d5 015082 fetch 1 ,mem_le_scan_enable 0x55d6 015083 rtnne le_scan_enable 0x55d7 015084 arg le_scan_interval_timer ,queue 0x55d8 015085 call timer_check 0x55d9 015086 nrtn blank 0x55da 015087 fetch 2 ,mem_le_scan_interval 0x55db 015088 fetcht 2 ,mem_le_scan_window 0x55dc 015089 isub temp ,pdata 0x55dd 015090 arg le_scan_interval_timer ,queue 0x55de 015091 call timer_init 0x55df 015092 disable master 0x55e0 015093 call le_init_adv 0x55e1 015094 call le_wait_adv 0x55e2 015095 nrtn match 0x55e3 015096 set1 mark_ext_patch ,mark 0x55e4 015097 bpatch patch2b_5 ,mem_patch2b 0x55e5 015098 fetch 6 ,mem_le_rxbuf + 2 0x55e6 015099 store 6 ,mem_le_plap 0x55e7 015100 call le_scan_dongle 0x55e8 015101 call le_scan_addr_to_uart 0x55e9 015103 fetch 1 ,mem_le_adv_rcv 0x55ea 015104 increase 1 ,pdata 0x55eb 015105 store 1 ,mem_le_adv_rcv 0x55ec 015106 call le_create_conn 0x55ed 015107 rtn master 0x55ee 015108 call hci_send_le_adv_report_event 0x55ef 015109 call le_send_scan_request 0x55f0 015110 nrtn match 0x55f1 015111 set1 mark_ext_patch ,mark 0x55f2 015112 bpatch patch2b_6 ,mem_patch2b 0x55f3 015113 fetch 1 ,mem_le_scanrsp_rcv 0x55f4 015114 increase 1 ,pdata 0x55f5 015115 store 1 ,mem_le_scanrsp_rcv 0x55f6 015116 fetch 9 ,mem_le_rxbuf + 8 0x55f7 015117 store 9 ,mem_tmp_buffer 0x55f8 015118 branch hci_send_le_adv_report_event : 015120 le_create_conn: 0x55f9 015121 set1 mark_ext_patch ,mark 0x55fa 015122 bpatch patch2b_7 ,mem_patch2b 0x55fb 015123 fetch 1 ,mem_cmd_le_create_conn 0x55fc 015124 rtnne hci_cmd_le_create_conn ,pdata 0x55fd 015125 fetch 6 ,mem_le_plap 0x55fe 015126 fetcht 6 ,mem_le_conn_peer_addr 0x55ff 015127 isub temp ,null 0x5600 015128 nrtn zero 0x5601 015129 call context_new 0x5602 015130 nrtn zero 0x5603 015131 call le_connect_request 0x5604 015132 call le_init_master 0x5605 015133 set1 mark_ext_patch ,mark 0x5606 015134 bpatch patch2c_0 ,mem_patch2c 0x5607 015135 jam 0 ,mem_hci_cmd 0x5608 015136 jam 0 ,mem_le_peer_sca 0x5609 015137 fetch 1 ,mem_device_option 0x560a 015138 bne dvc_op_dongle ,le_create_conn_ndongle 0x560b 015139 jam conn_sm_send_write_req ,mem_le_conn_sm : 015140 le_create_conn_ndongle: 0x560c 015141 arg 0 ,temp 0x560d 015142 call hci_send_le_conn_complete 0x560e 015143 jam 0 ,mem_le_scan_enable 0x560f 015144 jam 0 ,mem_cmd_le_create_conn 0x5610 015145 jam xt_ll_version_ind ,mem_fifo_temp 0x5611 015146 call le_xtype_fifo_in 0x5612 015147 branch context_save : 015149 le_scan_check_sender_addr_type: 0x5613 015150 arg 1 ,rega 0x5614 015151 fetch 1 ,mem_le_rxbuf 0x5615 015152 rtnbit1 le_sender_addr_bit 0x5616 015153 arg 0 ,rega 0x5617 015154 rtn : 015156 le_xtype_fifo_count: 0x5618 015157 arg mem_le_xtype_fifo ,contr 0x5619 015158 branch fifo_content_count : 015160 le_xtype_fifo_is_empty: 0x561a 015161 arg mem_le_xtype_fifo ,rega 0x561b 015162 branch fifo_is_empty : 015164 le_xtype_fifo_is_full: 0x561c 015165 arg mem_le_xtype_fifo ,rega 0x561d 015166 branch fifo_is_full : 015168 le_xtype_fifo_is_near_full: 0x561e 015169 arg mem_le_xtype_fifo ,rega 0x561f 015170 branch fifo_is_near_full : 015172 le_xtype_fifo_in: 0x5620 015173 arg mem_le_xtype_fifo ,rega 0x5621 015174 branch fifo_in : 015176 le_prepare_tx: 0x5622 015177 set1 mark_ext_patch ,mark 0x5623 015178 bpatch patch2c_1 ,mem_patch2c 0x5624 015179 fetch 1 ,mem_le_arq 0x5625 015180 rtnbit1 wak 0x5626 015181 arg mem_le_xtype_fifo ,rega 0x5627 015182 call fifo_out 0x5628 015183 nbranch le_prepare_tx_cmd ,blank 0x5629 015184 fetch 1 ,mem_device_option 0x562a 015185 bne dvc_op_hci ,le_send_empty 0x562b 015186 arg 0 ,type 0x562c 015187 call hci_rx_packet 0x562d 015188 copy type ,pdata 0x562e 015189 nrtn blank 0x562f 015190 branch le_send_empty : 015191 le_prepare_tx_cmd: 0x5630 015192 copy pdata ,temp 0x5631 015193 set1 mark_ext_patch ,mark 0x5632 015194 bpatch patch2c_2 ,mem_patch2c 0x5633 015195 copy temp ,pdata 0x5634 015196 bbit0 5 ,le_prepare_l2cap 0x5635 015197 force 3 ,type 0x5636 015198 set0 5 ,pdata 0x5637 015199 store 1 ,mem_le_txpayload 0x5638 015200 set1 mark_ext_patch ,mark 0x5639 015201 bpatch patch2c_3 ,mem_patch2c 0x563a 015202 fetch 1 ,mem_le_txpayload 0x563b 015203 beq ll_connection_update_req ,le_send_connection_update_req 0x563c 015204 beq ll_channel_map_req ,le_send_channel_map_req 0x563d 015205 beq ll_terminate_ind ,le_send_terminate_ind 0x563e 015206 beq ll_enc_req ,le_send_enc_req 0x563f 015207 beq ll_enc_rsp ,le_send_enc_rsp 0x5640 015208 beq ll_start_enc_req ,le_send_start_enc_req 0x5641 015209 beq ll_start_enc_rsp ,le_send_start_enc_rsp 0x5642 015210 beq ll_unknown_rsp ,le_send_unknown_rsp 0x5643 015211 beq ll_feature_req ,le_send_feature 0x5644 015212 beq ll_feature_rsp ,le_send_feature 0x5645 015213 beq ll_pause_enc_req ,le_send_pause_enc_req 0x5646 015214 beq ll_pause_enc_rsp ,le_send_pause_enc_rsp 0x5647 015215 beq ll_version_ind ,le_send_version_ind 0x5648 015216 beq ll_reject_ind ,le_send_reject_ind 0x5649 015217 beq ll_connection_param_req ,le_send_conn_param_req 0x564a 015218 branch assert : 015220 le_prepare_l2cap: 0x564b 015221 jam 0 ,mem_le_txcid + 1 0x564c 015222 force 2 ,type 0x564d 015223 bbit0 6 ,le_prepare_att 0x564e 015224 beq attop_write_command ,le_prepare_att 0x564f 015225 beq attop_signed_write_command ,le_prepare_att 0x5650 015226 jam le_l2cap_cid_smp ,mem_le_txcid 0x5651 015227 set0 6 ,pdata 0x5652 015228 store 1 ,mem_le_l2cap : 015229 le_prepare_smp: 0x5653 015230 set1 mark_ext_patch ,mark 0x5654 015231 bpatch patch2c_4 ,mem_patch2c 0x5655 015232 fetch 1 ,mem_le_l2cap : 015233 le_prepare_smp0: 0x5656 015234 beq smp_pairing_request ,le_send_smp_pairing_request 0x5657 015235 beq smp_pairing_response ,le_send_smp_pairing_response 0x5658 015236 beq smp_pairing_confirm ,le_send_smp_pairing_confirm 0x5659 015237 beq smp_pairing_random ,le_send_smp_pairing_random 0x565a 015238 beq smp_pairing_failed ,le_send_smp_pairing_failed 0x565b 015239 beq smp_encryption_information ,le_send_smp_encryption_information 0x565c 015240 beq smp_master_identification ,le_send_smp_master_identification 0x565d 015241 beq smp_identity_information ,le_send_smp_identity_information 0x565e 015242 beq smp_identity_address_information ,le_send_smp_identity_address_information 0x565f 015243 beq smp_signing_information ,le_send_smp_signing_information 0x5660 015244 beq smp_security_request ,le_send_smp_security_request 0x5661 015245 branch assert : 015247 le_prepare_att: 0x5662 015248 jam le_l2cap_cid_att ,mem_le_txcid 0x5663 015249 store 1 ,mem_le_l2cap 0x5664 015250 set1 mark_ext_patch ,mark 0x5665 015251 bpatch patch2c_5 ,mem_patch2c : 015252 le_prepare_att0: 0x5666 015253 fetch 1 ,mem_le_l2cap 0x5667 015254 beq attop_error_response ,le_send_att_error_response 0x5668 015255 beq attop_exchange_mtu_request ,le_send_att_exchange_mtu 0x5669 015256 beq attop_exchange_mtu_response ,le_send_att_exchange_mtu 0x566a 015257 beq attop_find_information_request ,le_send_att_find_information_request 0x566b 015258 beq attop_find_information_response ,le_send_att_find_information_response 0x566c 015259 beq attop_find_by_type_value_request ,le_send_att_find_by_type_value_request 0x566d 015260 beq attop_find_by_type_value_response ,le_send_att_find_by_type_value_response 0x566e 015261 beq attop_read_by_type_request ,le_send_att_read_by_type_request 0x566f 015262 beq attop_read_by_type_response ,le_send_att_read_by_type_response 0x5670 015263 beq attop_read_request ,le_send_att_read_request 0x5671 015264 beq attop_read_response ,le_send_att_read_response 0x5672 015265 beq attop_read_blob_request ,le_send_att_read_blob_request 0x5673 015266 beq attop_read_blob_response ,le_send_att_read_blob_response 0x5674 015267 beq attop_read_multiple_request ,le_send_att_read_multiple_request 0x5675 015268 beq attop_read_multiple_response ,le_send_att_read_multiple_response 0x5676 015269 beq attop_read_by_group_type_request ,le_send_att_read_by_group_type_request 0x5677 015270 beq attop_read_by_group_type_response ,le_send_att_read_by_group_type_response 0x5678 015271 beq attop_write_request ,le_send_att_write_request 0x5679 015272 beq attop_write_response ,le_send_att_write_response 0x567a 015273 beq attop_prepare_write_request ,le_send_att_prepare_write_request 0x567b 015274 beq attop_prepare_write_response ,le_send_att_prepare_write_response 0x567c 015275 beq attop_execute_write_request ,le_send_att_execute_write_request 0x567d 015276 beq attop_execute_write_response ,le_send_att_execute_write_response 0x567e 015277 beq attop_handle_value_notification ,le_send_att_handle_value_notification 0x567f 015278 beq attop_handle_value_indication ,le_send_att_handle_value_indication 0x5680 015279 beq attop_handle_value_confirmation ,le_send_att_handle_value_confirmation 0x5681 015280 beq attop_write_command ,le_send_att_write_command 0x5682 015281 beq attop_signed_write_command ,le_send_att_signed_write_command 0x5683 015282 beq empty_le_data_pre ,le_send_empty_le_data_pre 0x5684 015283 beq empty_le_data ,le_send_empty_le_data 0x5685 015284 branch assert : 015286 le_send_empty_le_data_pre: 0x5686 015287 jam attop_read_by_group_type_request ,mem_fifo_temp 0x5687 015288 call le_xtype_fifo_in : 015290 le_send_empty_le_data: 0x5688 015291 setarg 0x0011 0x5689 015292 store 2 ,mem_le_txheader 0x568a 015293 fetch 1 ,mem_le_arq 0x568b 015294 set1 wak ,pdata 0x568c 015295 store 1 ,mem_le_arq 0x568d 015296 jam attop_write_request ,mem_fifo_temp 0x568e 015297 branch le_xtype_fifo_in : 015299 le_send_connection_update_req: 0x568f 015300 force 12 ,temp 0x5690 015301 branch le_send_packet : 015303 le_send_channel_map_req: 0x5691 015304 force 8 ,temp 0x5692 015305 branch le_send_packet : 015307 le_send_terminate_ind: 0x5693 015308 force 2 ,temp 0x5694 015309 branch le_send_packet : 015311 le_send_enc_req: 0x5695 015312 force 0 ,pdata 0x5696 015313 istore 8 ,contw 0x5697 015314 istore 2 ,contw 0x5698 015315 copy contw ,temp 0x5699 015316 arg mem_le_skdm ,contw 0x569a 015317 force 8 ,loopcnt 0x569b 015318 call generate_random_loop 0x569c 015319 fetch 8 ,mem_le_skdm 0x569d 015320 istore 8 ,temp 0x569e 015321 copy contw ,temp 0x569f 015322 arg mem_le_ivm ,contw 0x56a0 015323 force 4 ,loopcnt 0x56a1 015324 call generate_random_loop 0x56a2 015325 fetch 4 ,mem_le_ivm 0x56a3 015326 istore 4 ,temp 0x56a4 015327 force 23 ,temp 0x56a5 015328 branch le_send_packet : 015330 le_send_enc_rsp: 0x56a6 015331 copy contw ,temp 0x56a7 015332 arg mem_le_skds ,contw 0x56a8 015333 force 8 ,loopcnt 0x56a9 015334 call generate_random_loop 0x56aa 015335 fetch 8 ,mem_le_skds 0x56ab 015336 istore 8 ,temp 0x56ac 015337 copy contw ,temp 0x56ad 015338 arg mem_le_ivs ,contw 0x56ae 015339 force 4 ,loopcnt 0x56af 015340 call generate_random_loop 0x56b0 015341 fetch 4 ,mem_le_ivs 0x56b1 015342 istore 4 ,temp 0x56b2 015343 call generate_sk 0x56b3 015344 jam xt_ll_start_enc_req ,mem_fifo_temp 0x56b4 015345 call le_xtype_fifo_in 0x56b5 015346 force 13 ,temp 0x56b6 015347 branch le_send_packet : 015349 le_send_start_enc_req: 0x56b7 015350 force 1 ,temp 0x56b8 015351 branch le_send_packet : 015353 le_send_start_enc_rsp: 0x56b9 015354 force 1 ,temp 0x56ba 015355 branch le_send_packet ,master 0x56bb 015356 jam xt_smp_encryption_information ,mem_fifo_temp 0x56bc 015357 call le_xtype_fifo_in 0x56bd 015358 force 1 ,temp 0x56be 015359 branch le_send_packet : 015361 le_send_unknown_rsp: 0x56bf 015362 force 2 ,temp 0x56c0 015363 branch le_send_packet : 015365 le_send_feature: 0x56c1 015366 setarg param_le_features 0x56c2 015367 istore 8 ,contw 0x56c3 015368 force 9 ,temp 0x56c4 015369 branch le_send_packet : 015371 le_send_pause_enc_req: 0x56c5 015372 force 6 ,temp 0x56c6 015373 branch le_send_packet : 015375 le_send_pause_enc_rsp: 0x56c7 015376 force 6 ,temp 0x56c8 015377 branch le_send_packet : 015379 le_send_version_ind: 0x56c9 015380 setarg param_le_version 0x56ca 015381 istore 3 ,contw 0x56cb 015382 setarg param_le_subversion 0x56cc 015383 istore 2 ,contw 0x56cd 015384 force 6 ,temp 0x56ce 015385 branch le_send_packet : 015387 le_send_reject_ind: 0x56cf 015388 force 2 ,temp 0x56d0 015389 branch le_send_packet : 015391 le_send_conn_param_req: 0x56d1 015392 increase -1 ,contw 0x56d2 015393 setarg 0x000c 0x56d3 015394 istore 2 ,contw 0x56d4 015395 setarg 0x0005 0x56d5 015396 istore 2 ,contw 0x56d6 015397 setarg 0xb412 0x56d7 015398 istore 2 ,contw 0x56d8 015399 setarg 0x0008 0x56d9 015400 istore 2 ,contw 0x56da 015401 setarg 0x0008 0x56db 015402 istore 2 ,contw 0x56dc 015403 setarg 0x0010 0x56dd 015404 istore 2 ,contw 0x56de 015405 setarg 0 0x56df 015406 istore 2 ,contw 0x56e0 015407 setarg 0x012c 0x56e1 015408 istore 2 ,contw 0x56e2 015409 call le_send_autolen 0x56e3 015410 force 2 ,type 0x56e4 015411 branch le_send_packet : 015413 le_send_smp_pairing_request: 0x56e5 015414 setarg 0x1000401 0x56e6 015415 store 4 ,mem_le_preq 0x56e7 015416 setarg 0x070710 0x56e8 015417 istore 3 ,contw 0x56e9 015418 fetch 6 ,mem_le_preq + 1 0x56ea 015419 store 6 ,mem_le_l2cap_response 0x56eb 015420 force 11 ,temp 0x56ec 015421 branch le_send_packet : 015423 le_send_smp_pairing_response: 0x56ed 015424 setarg param_smp_paring_response 0x56ee 015425 store 4 ,mem_le_pres 0x56ef 015426 setarg param_smp_key_dist 0x56f0 015427 istore 3 ,contw 0x56f1 015428 fetch 6 ,mem_le_pres + 1 0x56f2 015429 store 6 ,mem_le_l2cap_response 0x56f3 015430 force 11 ,temp 0x56f4 015431 branch le_send_packet : 015433 le_send_smp_pairing_confirm: 0x56f5 015434 call generate_confirm 0x56f6 015435 arg mem_le_l2cap_response ,contw 0x56f7 015436 call store_aes_result 0x56f8 015437 force 21 ,temp 0x56f9 015438 branch le_send_packet : 015440 le_send_smp_pairing_random: 0x56fa 015441 fetch 8 ,mem_le_mrand 0x56fb 015442 branch le_send_smp_mrandom ,master 0x56fc 015443 fetch 8 ,mem_le_srand : 015445 le_send_smp_mrandom: 0x56fd 015446 call le_send_smp_128 0x56fe 015447 branch le_send_packet : 015449 le_send_smp_pairing_failed: 0x56ff 015450 force 6 ,temp 0x5700 015451 branch le_send_packet : 015453 le_send_smp_encryption_information: 0x5701 015454 jam bt_evt_le_enc_info ,mem_fifo_temp 0x5702 015455 call ui_ipc_send_event 0x5703 015456 jam xt_smp_master_identification ,mem_fifo_temp 0x5704 015457 call le_xtype_fifo_in 0x5705 015458 arg mem_le_my_ltk ,contw 0x5706 015459 call generate_random 0x5707 015460 fetch 8 ,mem_le_my_ltk 0x5708 015461 fetch 8 ,mem_le_ltk 0x5709 015462 call le_send_smp_128 0x570a 015463 branch le_send_packet : 015465 le_send_smp_master_identification: 0x570b 015466 jam xt_smp_identity_information ,mem_fifo_temp 0x570c 015467 call le_xtype_fifo_in 0x570d 015468 arg mem_le_l2cap_response ,contw 0x570e 015469 force 8 ,loopcnt 0x570f 015470 call generate_random_loop 0x5710 015471 force 15 ,temp 0x5711 015472 branch le_send_packet : 015474 le_send_smp_identity_information: 0x5712 015475 jam xt_smp_identity_address_information ,mem_fifo_temp 0x5713 015476 call le_xtype_fifo_in 0x5714 015477 arg mem_le_l2cap_response ,contw 0x5715 015478 call generate_random 0x5716 015479 branch le_send_autolen : 015481 le_send_smp_identity_address_information: 0x5717 015482 jam xt_smp_signing_information ,mem_fifo_temp 0x5718 015483 call le_xtype_fifo_in 0x5719 015484 force 0 ,pdata 0x571a 015485 store 1 ,mem_le_l2cap_response 0x571b 015486 fetch 6 ,mem_le_lap 0x571c 015487 istore 6 ,contw 0x571d 015488 branch le_send_autolen : 015490 le_send_smp_signing_information: 0x571e 015491 arg mem_le_l2cap_response ,contw 0x571f 015492 call generate_random 0x5720 015493 branch le_send_autolen : 015495 le_send_smp_security_request: 0x5721 015496 force 6 ,temp 0x5722 015497 branch le_send_packet : 015499 le_send_smp_128: 0x5723 015500 store 8 ,mem_le_l2cap_response 0x5724 015501 ifetch 8 ,contr 0x5725 015502 istore 8 ,contw 0x5726 015503 force 21 ,temp 0x5727 015504 rtn : 015506 le_send_att_error_response_notfound: 0x5728 015507 jam att_err_attribute_not_found ,mem_le_err_code : 015508 le_send_att_error_response: 0x5729 015509 jam attop_error_response ,mem_le_l2cap 0x572a 015510 fetch 3 ,mem_le_att_opcode 0x572b 015511 store 3 ,mem_le_l2cap_response 0x572c 015512 fetch 1 ,mem_le_err_code 0x572d 015513 istore 1 ,contw 0x572e 015514 branch le_send_autolen : 015516 le_send_att_exchange_mtu: 0x572f 015517 setarg param_le_mtu 0x5730 015518 istore 2 ,contw 0x5731 015519 branch le_send_autolen : 015521 le_send_att_find_information_request: 0x5732 015522 fetch 2 ,mem_le_search_handle_start 0x5733 015523 store 2 ,mem_le_l2cap_response 0x5734 015524 fetch 2 ,mem_le_search_handle_end 0x5735 015525 istore 2 ,contw 0x5736 015526 branch le_send_autolen : 015530 le_send_att_find_information_response: 0x5737 015531 force 1 ,pdata 0x5738 015532 store 1 ,mem_le_l2cap_response 0x5739 015533 call le_init_attlist_search : 015534 le_send_att_find_information_res_loop: 0x573a 015535 call le_att_handle_inrange 0x573b 015536 branch le_send_att_find_information_res_end ,blank 0x573c 015537 nbranch le_send_att_find_information_res_next ,positive 0x573d 015538 disable user 0x573e 015539 istore 2 ,contw 0x573f 015540 ifetch 2 ,contr 0x5740 015541 istore 2 ,contw : 015542 le_send_att_find_information_res_cont: 0x5741 015543 ifetch 1 ,contr 0x5742 015544 iadd contr ,contr 0x5743 015545 branch le_send_att_find_information_res_loop : 015546 le_send_att_find_information_res_next: 0x5744 015547 increase 2 ,contr 0x5745 015548 branch le_send_att_find_information_res_cont : 015549 le_send_att_find_information_res_end: 0x5746 015550 branch le_send_att_error_response_notfound ,user 0x5747 015551 branch le_send_autolen : 015554 le_send_att_find_by_type_value_request: 0x5748 015555 fetch 2 ,mem_le_search_handle_start 0x5749 015556 branch le_send_empty_le_data ,blank 0x574a 015557 store 2 ,mem_le_l2cap_response 0x574b 015558 fetch 2 ,mem_le_search_handle_end 0x574c 015560 istore 2 ,contw 0x574d 015561 fetch 2 ,mem_le_uuid 0x574e 015563 istore 2 ,contw 0x574f 015564 fetch 2 ,mem_le_search_att_type 0x5750 015566 istore 2 ,contw 0x5751 015567 branch le_send_autolen : 015570 le_send_att_find_by_type_value_response: 0x5752 015571 call le_start_end_handle_check_1 0x5753 015572 rtn user 0x5754 015573 fetcht 2 ,mem_le_uuid 0x5755 015574 setarg uuid_gatt_primary_service 0x5756 015575 isub temp ,null 0x5757 015576 branch le_send_att_find_by_type_value_res_primary ,zero 0x5758 015577 setarg uuid_gatt_secondary_service 0x5759 015578 isub temp ,null 0x575a 015579 branch le_send_att_error_response_notfound ,zero 0x575b 015580 setarg uuid_gatt_include 0x575c 015581 isub temp ,null 0x575d 015582 branch le_send_att_error_response_notfound ,zero 0x575e 015583 setarg uuid_gatt_characteristic 0x575f 015584 isub temp ,null 0x5760 015585 branch le_send_att_error_response_notfound ,zero 0x5761 015586 branch le_send_att_error_response_notfound : 015588 le_send_att_find_by_type_value_res_primary: 0x5762 015589 fetcht 2 ,mem_le_search_att_type 0x5763 015590 increase 2 ,contr 0x5764 015591 ifetch 1 ,contr 0x5765 015592 icopy regc 0x5766 015593 increase 1 ,regc : 015595 le_send_att_find_by_type_value_res_primary_search_loop: 0x5767 015596 increase -1 ,regc 0x5768 015597 branch le_send_att_error_response_notfound ,zero 0x5769 015598 ifetch 2 ,contr 0x576a 015599 isub temp ,null 0x576b 015600 branch le_send_att_find_by_type_value_res_primary_search_end ,zero 0x576c 015601 increase 4 ,contr 0x576d 015602 branch le_send_att_find_by_type_value_res_primary_search_loop : 015604 le_send_att_find_by_type_value_res_primary_search_end: 0x576e 015605 ifetch 2 ,contr 0x576f 015606 icopy rega 0x5770 015607 ifetch 2 ,contr 0x5771 015608 icopy regb 0x5772 015609 call le_start_end_handle_check_2 0x5773 015610 rtn user 0x5774 015611 jam attop_find_by_type_value_response ,mem_le_l2cap 0x5775 015612 deposit rega 0x5776 015613 store 2 ,mem_le_l2cap_response 0x5777 015614 deposit regb 0x5778 015615 istore 2 ,contw 0x5779 015616 force 9 ,temp 0x577a 015617 branch le_send_packet : 015622 le_start_end_handle_check_1: 0x577b 015623 disable user 0x577c 015624 fetcht 2 ,mem_le_search_handle_start 0x577d 015625 fetch 2 ,mem_le_search_handle_end 0x577e 015626 isub temp ,null 0x577f 015627 nbranch le_start_end_handle_check_1_fail ,positive 0x5780 015628 deposit temp 0x5781 015629 rtnne 0 : 015631 le_start_end_handle_check_1_fail: 0x5782 015632 enable user : 015633 le_send_att_invalid_handle: 0x5783 015634 jam att_err_invalid_handle ,mem_le_err_code 0x5784 015635 branch le_send_att_error_response : 015637 le_start_end_handle_check_2: 0x5785 015638 disable user 0x5786 015639 fetcht 2 ,mem_le_search_handle_start 0x5787 015640 deposit rega 0x5788 015641 isub temp ,null 0x5789 015642 nbranch le_start_end_handle_check_2_fail ,positive 0x578a 015643 fetch 2 ,mem_le_search_handle_end 0x578b 015644 isub regb ,null 0x578c 015645 nbranch le_start_end_handle_check_2_fail ,positive 0x578d 015646 deposit regb 0x578e 015647 isub rega ,null 0x578f 015648 nbranch le_start_end_handle_check_2_fail ,positive 0x5790 015649 rtn : 015651 le_start_end_handle_check_2_fail: 0x5791 015652 enable user 0x5792 015653 branch le_send_att_error_response_notfound : 015656 le_send_att_read_by_type_request: 0x5793 015657 fetch 2 ,mem_le_search_handle_start 0x5794 015659 istore 2 ,contw 0x5795 015660 fetch 2 ,mem_le_search_handle_end 0x5796 015662 istore 2 ,contw 0x5797 015663 fetch 2 ,mem_le_search_att_type 0x5798 015664 istore 2 ,contw 0x5799 015665 force 11 ,temp 0x579a 015666 branch le_send_packet : 015669 le_send_att_read_by_type_response: 0x579b 015670 fetcht 2 ,mem_le_search_att_type 0x579c 015671 setarg uuid_gatt_characteristic 0x579d 015672 isub temp ,null 0x579e 015673 setarg 7 0x579f 015674 branch le_send_att_read_by_type_res_cont ,zero 0x57a0 015675 setarg uuid_gatt_primary_service 0x57a1 015676 isub temp ,null 0x57a2 015677 setarg 6 0x57a3 015678 branch le_send_att_read_by_type_res_cont ,zero 0x57a4 015679 branch le_send_att_error_response_notfound : 015680 le_send_att_read_by_type_res_cont: 0x57a5 015681 store 1 ,mem_le_l2cap_response 0x57a6 015682 call le_init_attlist_search 0x57a7 015683 force 3 ,alarm : 015684 le_send_att_read_by_type_res_loop: 0x57a8 015685 call le_att_handle_inrange 0x57a9 015686 branch le_send_att_read_by_type_res_end ,blank 0x57aa 015687 nbranch le_send_att_read_by_type_res_next ,positive 0x57ab 015688 iforce rega 0x57ac 015689 ifetch 2 ,contr 0x57ad 015690 isub temp ,null 0x57ae 015691 nbranch le_send_att_read_by_type_res_next2 ,zero 0x57af 015692 disable user 0x57b0 015693 deposit rega 0x57b1 015694 istore 2 ,contw 0x57b2 015695 ifetch 1 ,contr 0x57b3 015696 add pdata ,4 ,loopcnt 0x57b4 015697 call memcpy 0x57b5 015698 increase -1 ,alarm 0x57b6 015699 branch le_send_att_read_by_type_res_end ,zero 0x57b7 015700 branch le_send_att_read_by_type_res_next2 : 015701 le_send_att_read_by_type_res_next: 0x57b8 015702 increase 2 ,contr : 015703 le_send_att_read_by_type_res_next2: 0x57b9 015704 ifetch 1 ,contr 0x57ba 015705 iadd contr ,contr 0x57bb 015706 branch le_send_att_read_by_type_res_loop : 015707 le_send_att_read_by_type_res_end: 0x57bc 015708 branch le_send_att_error_response_notfound ,user 0x57bd 015709 branch le_send_autolen : 015712 le_send_att_read_request: 0x57be 015713 fetch 1 ,mem_le_temp 0x57bf 015715 increase -1 ,pdata 0x57c0 015716 store 1 ,mem_le_temp 0x57c1 015717 lshift pdata ,pdata 0x57c2 015719 iadd contr ,contr 0x57c3 015720 ifetcht 2 ,contr 0x57c4 015721 storet 2 ,mem_le_l2cap_response 0x57c5 015722 branch le_send_autolen : 015724 le_send_att_read_response: 0x57c6 015725 fetcht 2 ,mem_le_att_handle 0x57c7 015726 call le_att_get_handle_ptr 0x57c8 015727 branch le_send_att_error_response_notfound ,blank 0x57c9 015728 ifetch 1 ,contr 0x57ca 015729 branch le_send_autolen ,blank 0x57cb 015730 sub pdata ,22 ,null 0x57cc 015731 branch le_send_att_read_response_less ,positive 0x57cd 015732 force 22 ,pdata : 015733 le_send_att_read_response_less: 0x57ce 015734 icopy loopcnt 0x57cf 015735 call memcpy 0x57d0 015736 branch le_send_autolen : 015739 le_send_att_read_blob_request: 0x57d1 015740 setarg 0x0003 0x57d2 015741 store 2 ,mem_le_l2cap_response 0x57d3 015742 setarg 0x0008 0x57d4 015743 istore 2 ,contw 0x57d5 015744 branch le_send_autolen : 015746 le_send_att_read_blob_response: 0x57d6 015747 fetch 2 ,mem_le_att_offset 0x57d7 015748 iforce rega 0x57d8 015749 fetcht 2 ,mem_le_att_handle 0x57d9 015750 call le_att_get_handle_ptr 0x57da 015751 branch le_send_att_error_response_notfound ,blank 0x57db 015752 ifetch 1 ,contr 0x57dc 015753 isub rega ,loopcnt 0x57dd 015754 nbranch le_send_att_error_response_notfound ,positive 0x57de 015755 sub loopcnt ,22 ,null 0x57df 015756 branch le_send_att_read_blob_response_less ,positive 0x57e0 015757 force 22 ,loopcnt : 015758 le_send_att_read_blob_response_less: 0x57e1 015759 deposit rega 0x57e2 015760 iadd contr ,contr 0x57e3 015761 call memcpy 0x57e4 015762 branch le_send_autolen : 015764 le_send_att_read_multiple_request: 0x57e5 015765 setarg 0x0003 0x57e6 015766 istore 2 ,contw 0x57e7 015767 setarg 0x0007 0x57e8 015768 istore 2 ,contw 0x57e9 015769 setarg 0x0009 0x57ea 015770 istore 2 ,contw 0x57eb 015771 branch le_send_autolen : 015773 le_send_att_read_multiple_response: 0x57ec 015774 fetch 1 ,mem_le_temp 0x57ed 015775 icopy regc 0x57ee 015776 arg mem_le_rxbuf + 7 ,rega 0x57ef 015777 arg mem_le_l2cap_response ,regb 0x57f0 015778 arg 0 ,timeup 0x57f1 015779 disable user7 : 015781 le_send_att_read_multiple_response_loop: 0x57f2 015782 copy rega ,contr 0x57f3 015783 ifetcht 2 ,contr 0x57f4 015784 copy contr ,rega 0x57f5 015785 call le_att_get_handle_ptr 0x57f6 015786 branch le_send_att_read_multiple_response_end ,blank 0x57f7 015787 ifetch 1 ,contr 0x57f8 015788 icopy loopcnt 0x57f9 015789 iadd timeup ,timeup 0x57fa 015793 sub timeup ,24 ,null 0x57fb 015794 nbranch le_send_att_read_multiple_response_end_1 ,positive 0x57fc 015795 copy regb ,contw : 015797 le_copy_att_value_loop_3: 0x57fd 015798 ifetch 1 ,contr 0x57fe 015799 istore 1 ,contw 0x57ff 015800 loop le_copy_att_value_loop_3 0x5800 015801 copy contw ,regb 0x5801 015802 enable user7 0x5802 015803 increase -1 ,regc 0x5803 015804 branch le_send_att_read_multiple_response_end ,zero 0x5804 015805 branch le_send_att_read_multiple_response_loop : 015807 le_send_att_read_multiple_response_end: 0x5805 015808 nbranch le_send_att_read_multiple_response_fail ,user7 0x5806 015809 disable user7 0x5807 015810 copy timeup ,temp 0x5808 015811 increase 5 ,temp 0x5809 015812 branch le_send_packet : 015814 le_send_att_read_multiple_response_end_1: 0x580a 015815 nbranch le_send_att_read_multiple_response_fail ,user7 0x580b 015816 disable user7 0x580c 015817 deposit timeup 0x580d 015818 isub loopcnt ,temp 0x580e 015819 increase 5 ,temp 0x580f 015820 branch le_send_packet : 015822 le_send_att_read_multiple_response_fail: 0x5810 015823 jam att_err_unsupported_group_type ,mem_le_err_code 0x5811 015824 branch le_send_att_error_response : 015827 le_send_att_read_by_group_type_request: 0x5812 015828 fetch 2 ,mem_le_att_handle 0x5813 015829 branch le_send_empty_le_data ,blank 0x5814 015830 istore 2 ,contw 0x5815 015831 setarg 0xffff 0x5816 015832 istore 2 ,contw 0x5817 015833 setarg 0x2800 0x5818 015834 istore 2 ,contw 0x5819 015835 branch le_send_autolen : 015838 le_send_att_read_by_group_type_response: 0x581a 015839 setarg 0x06 0x581b 015840 store 1 ,mem_le_l2cap_response 0x581c 015841 fetch 2 ,mem_le_search_att_type 0x581d 015842 iforce rega 0x581e 015843 call le_init_attlist_search 0x581f 015844 force 3 ,loopcnt : 015845 le_send_att_read_by_group_type_response_loop: 0x5820 015846 call le_att_handle_inrange 0x5821 015847 branch le_send_att_read_by_group_type_response_last ,blank 0x5822 015848 nbranch le_send_att_read_by_group_type_response_next ,positive 0x5823 015849 iforce alarm 0x5824 015850 ifetch 2 ,contr 0x5825 015851 isub rega ,null 0x5826 015852 nbranch le_send_att_read_by_group_type_response_cont ,zero 0x5827 015853 deposit alarm 0x5828 015854 branch le_send_att_read_by_group_type_response_first ,user 0x5829 015855 increase -1 ,pdata 0x582a 015856 istore 2 ,contw 0x582b 015857 istoret 2 ,contw 0x582c 015858 increase 1 ,pdata 0x582d 015859 increase -1 ,loopcnt 0x582e 015860 branch le_send_autolen ,zero : 015861 le_send_att_read_by_group_type_response_first: 0x582f 015862 disable user 0x5830 015863 istore 2 ,contw 0x5831 015864 increase 1 ,contr 0x5832 015865 ifetcht 2 ,contr 0x5833 015866 increase -3 ,contr 0x5834 015867 branch le_send_att_read_by_group_type_response_cont : 015868 le_send_att_read_by_group_type_response_last: 0x5835 015869 branch le_send_att_error_response_notfound ,user 0x5836 015870 force -1 ,pdata 0x5837 015871 istore 2 ,contw 0x5838 015872 istoret 2 ,contw 0x5839 015873 branch le_send_autolen : 015874 le_send_att_read_by_group_type_response_next: 0x583a 015875 increase 2 ,contr : 015876 le_send_att_read_by_group_type_response_cont: 0x583b 015877 ifetch 1 ,contr 0x583c 015878 iadd contr ,contr 0x583d 015879 branch le_send_att_read_by_group_type_response_loop : 015883 le_send_att_write_request: 0x583e 015884 fetch 2 ,mem_le_notify_handle 0x583f 015885 store 2 ,mem_le_l2cap_response 0x5840 015886 fetch 1 ,mem_le_handle_data_len 0x5841 015887 copy pdata ,loopcnt 0x5842 015888 arg mem_le_handle_data ,contr 0x5843 015889 call memcpy 0x5844 015890 branch le_send_autolen : 015892 le_send_att_write_response: 0x5845 015893 fetcht 2 ,mem_le_att_handle 0x5846 015894 call le_att_get_handle_ptr 0x5847 015895 branch le_send_att_write_response_go ,blank 0x5848 015896 increase -2 ,contr 0x5849 015897 ifetcht 2 ,contr 0x584a 015898 setarg uuid_client_characteristic 0x584b 015899 isub temp ,null 0x584c 015900 nbranch le_send_att_write_response_go ,zero 0x584d 015901 increase 1 ,contr 0x584e 015902 ifetcht 2 ,contr 0x584f 015903 setarg 0x0001 0x5850 015904 isub temp ,null 0x5851 015905 branch le_send_att_write_response_notify ,zero 0x5852 015906 setarg 0x0000 0x5853 015907 isub temp ,null 0x5854 015908 nbranch le_send_att_write_response_go ,zero 0x5855 015909 branch le_send_att_write_response_go : 015911 le_send_att_write_response_notify: 0x5856 015912 increase -7 ,contr 0x5857 015913 ifetch 2 ,contr 0x5858 015914 increase -1 ,pdata 0x5859 015915 store 2 ,mem_le_notify_handle 0x585a 015916 jam attop_handle_value_notification ,mem_fifo_temp 0x585b 015917 call le_xtype_fifo_in : 015920 le_send_att_write_response_go: 0x585c 015921 force 5 ,temp 0x585d 015922 branch le_send_packet : 015924 le_send_att_prepare_write_request: 0x585e 015925 force 6 ,temp 0x585f 015926 branch le_send_packet : 015928 le_send_att_prepare_write_response: 0x5860 015929 force 6 ,temp 0x5861 015930 branch le_send_packet : 015932 le_send_att_execute_write_request: 0x5862 015933 force 6 ,temp 0x5863 015934 branch le_send_packet : 015936 le_send_att_execute_write_response: 0x5864 015937 force 6 ,temp 0x5865 015938 branch le_send_packet : 015940 le_att_check_notification_enable: 0x5866 015941 set1 mark_ext_patch ,mark 0x5867 015942 bpatch patch2c_6 ,mem_patch2c 0x5868 015943 increase 1 ,temp 0x5869 015944 call le_att_get_handle_ptr 0x586a 015945 increase -2 ,contr 0x586b 015946 ifetch 2 ,contr 0x586c 015947 arg client_charactertic_configuration ,temp 0x586d 015948 isub temp ,null 0x586e 015949 nrtn zero 0x586f 015950 increase 1 ,contr 0x5870 015951 copy contr ,rega 0x5871 015952 ifetch 1 ,contr 0x5872 015953 rtn : 015955 le_send_att_handle_value_notification: 0x5873 015956 jam 0 ,mem_le_notify_len 0x5874 015957 fetch 2 ,mem_cb_update_notify_value 0x5875 015958 call callback_func 0x5876 015959 arg mem_le_l2cap ,contw 0x5877 015960 increase 1 ,contw 0x5878 015961 fetcht 2 ,mem_le_notify_handle 0x5879 015962 istoret 2 ,contw 0x587a 015963 call le_att_get_handle_ptr 0x587b 015964 ifetch 1 ,contr 0x587c 015965 icopy loopcnt 0x587d 015966 call memcpy 0x587e 015967 fetcht 1 ,mem_le_notify_len 0x587f 015968 increase 7 ,temp 0x5880 015969 call le_send_packet 0x5881 015970 branch le_clear_notify_att : 015972 le_send_att_handle_value_indication: 0x5882 015973 force 6 ,temp 0x5883 015974 branch le_send_packet : 015976 le_send_att_handle_value_confirmation: 0x5884 015977 force 6 ,temp 0x5885 015978 branch le_send_packet : 015980 le_send_att_write_command: 0x5886 015981 force 6 ,temp 0x5887 015982 branch le_send_packet : 015984 le_send_att_signed_write_command: 0x5888 015985 force 6 ,temp 0x5889 015986 branch le_send_packet : 015989 le_send_autolen: 0x588a 015990 set1 mark_ext_patch ,mark 0x588b 015991 bpatch patch2c_7 ,mem_patch2c 0x588c 015992 setarg mem_le_txpayload 0x588d 015993 isub contw ,pdata 0x588e 015994 sub pdata ,0 ,temp 0x588f 015995 branch le_send_packet : 015998 le_send_empty: 0x5890 015999 force 0 ,temp 0x5891 016000 force 1 ,type : 016002 le_send_packet: 0x5892 016003 set1 mark_ext_patch ,mark 0x5893 016004 bpatch patch2d_0 ,mem_patch2d 0x5894 016005 storet 1 ,mem_le_txlen 0x5895 016006 compare 2 ,type ,3 0x5896 016007 nbranch le_send_non_l2cap ,true 0x5897 016008 add temp ,-4 ,pdata 0x5898 016009 store 2 ,mem_le_txpayload : 016011 le_send_non_l2cap: 0x5899 016012 fetcht 1 ,mem_le_arq 0x589a 016013 call le_xtype_fifo_is_empty 0x589b 016014 nsetflag blank ,md ,temp 0x589c 016015 set1 wak ,temp 0x589d 016016 and temp ,0xfc ,pdata 0x589e 016017 ior type ,pdata 0x589f 016018 store 1 ,mem_le_arq 0x58a0 016019 and_into 0x1f ,pdata 0x58a1 016020 store 1 ,mem_le_txheader 0x58a2 016021 set1 mark_ext_patch ,mark 0x58a3 016022 bpatch patch2d_1 ,mem_patch2d 0x58a4 016023 fetch 1 ,mem_le_txheader 0x58a5 016024 compare 1 ,type ,3 0x58a6 016025 rtn true 0x58a7 016026 fetch 7 ,mem_le_txheader + 1 0x58a8 016027 fetch 1 ,mem_le_state 0x58a9 016028 rtnbit0 lestate_encryption 0x58aa 016029 call load_sk 0x58ab 016030 branch le_encrypt : 016032 le_parse: 0x58ac 016033 set1 mark_ext_patch ,mark 0x58ad 016034 bpatch patch2d_2 ,mem_patch2d 0x58ae 016035 call le_xtype_fifo_is_full 0x58af 016036 nbranch assert ,blank 0x58b0 016037 nrtn blank 0x58b1 016038 fetch 1 ,mem_le_rxbuf + 1 0x58b2 016039 rtn blank 0x58b3 016040 fetch 1 ,mem_le_rxbuf 0x58b4 016041 compare 1 ,pdata ,3 0x58b5 016042 branch le_parse_l2cap ,true 0x58b6 016043 fetch 7 ,mem_le_rxbuf + 1 0x58b7 016044 fetch 1 ,mem_le_rxbuf 0x58b8 016045 compare 2 ,pdata ,3 0x58b9 016046 branch le_parse_l2cap ,true 0x58ba 016047 fetch 1 ,mem_le_rxbuf + 2 0x58bb 016048 store 1 ,mem_le_rx_ll_opcode 0x58bc 016049 copy pdata ,regc 0x58bd 016050 set1 mark_ext_patch ,mark 0x58be 016051 bpatch patch2d_3 ,mem_patch2d 0x58bf 016052 copy regc ,pdata 0x58c0 016053 beq ll_connection_update_req ,le_parse_connection_update_req 0x58c1 016054 beq ll_channel_map_req ,le_parse_channel_map_req 0x58c2 016055 beq ll_terminate_ind ,le_parse_terminate_ind 0x58c3 016056 beq ll_enc_req ,le_parse_enc_req 0x58c4 016057 beq ll_enc_rsp ,le_parse_enc_rsp 0x58c5 016058 beq ll_start_enc_req ,le_parse_start_enc_req 0x58c6 016059 beq ll_start_enc_rsp ,le_parse_start_enc_rsp 0x58c7 016060 beq ll_unknown_rsp ,le_parse_unknown_rsp 0x58c8 016061 beq ll_feature_req ,le_parse_feature_req 0x58c9 016062 beq ll_feature_rsp ,le_parse_feature_rsp 0x58ca 016063 beq ll_pause_enc_req ,le_parse_pause_enc_req 0x58cb 016064 beq ll_pause_enc_rsp ,le_parse_pause_enc_rsp 0x58cc 016065 beq ll_version_ind ,le_parse_version_ind 0x58cd 016066 beq ll_reject_ind ,le_parse_reject_ind 0x58ce 016067 branch assert : 016069 le_parse_l2cap: 0x58cf 016070 fetch 1 ,mem_le_rxbuf + 1 0x58d0 016071 and pdata ,0x1f ,pdata 0x58d1 016072 rtn blank 0x58d2 016073 fetch 1 ,mem_device_option 0x58d3 016074 beq dvc_op_hci ,le_acl_upgoing 0x58d4 016075 fetch 2 ,mem_le_rxbuf + 4 0x58d5 016076 beq le_l2cap_cid_att ,le_parse_att 0x58d6 016077 beq le_l2cap_cid_smp ,le_parse_smp 0x58d7 016078 rtn : 016080 le_acl_upgoing: 0x58d8 016081 set1 mark_ext_patch ,mark 0x58d9 016082 bpatch patch2d_4 ,mem_patch2d 0x58da 016083 call hci_get_packet_ptr 0x58db 016084 fetch 1 ,mem_le_conn_handle 0x58dc 016085 fetcht 1 ,mem_le_rxbuf 0x58dd 016086 and_into 3 ,temp 0x58de 016087 lshift8 temp ,temp 0x58df 016088 lshift4 temp ,temp 0x58e0 016089 ior temp ,pdata 0x58e1 016090 istore 2 ,contwu 0x58e2 016091 fetcht 1 ,mem_le_rxbuf + 1 0x58e3 016092 and temp ,0x1f ,temp 0x58e4 016093 istoret 2 ,contwu 0x58e5 016094 copy temp ,loopcnt 0x58e6 016095 call uart_copy_tx_bytes 0x58e7 016096 add temp ,4 ,loopcnt 0x58e8 016097 call h4_send_packet_acl 0x58e9 016098 branch h4_send_acl_trigger : 016100 le_acl_downgoing: 0x58ea 016101 set1 mark_ext_patch ,mark 0x58eb 016102 bpatch patch2d_5 ,mem_patch2d 0x58ec 016103 arg 0x2 ,type 0x58ed 016104 ifetch 2 ,contru 0x58ee 016105 ifetch 2 ,contru 0x58ef 016106 branch assert ,blank 0x58f0 016107 copy pdata ,loopcnt 0x58f1 016108 arg mem_le_txpayload ,contw 0x58f2 016109 call uart_copy_rx_bytes 0x58f3 016110 branch le_send_autolen : 016112 le_parse_smp: 0x58f4 016113 set1 mark_ext_patch ,mark 0x58f5 016114 bpatch patch2d_6 ,mem_patch2d 0x58f6 016115 ifetch 1 ,contr 0x58f7 016116 beq smp_pairing_request ,le_parse_smp_pairing_request 0x58f8 016117 beq smp_pairing_response ,le_parse_smp_pairing_response 0x58f9 016118 beq smp_pairing_confirm ,le_parse_smp_pairing_confirm 0x58fa 016119 beq smp_pairing_random ,le_parse_smp_pairing_random 0x58fb 016120 beq smp_pairing_failed ,le_parse_smp_pairing_failed 0x58fc 016121 beq smp_encryption_information ,le_parse_smp_encryption_information 0x58fd 016122 beq smp_master_identification ,le_parse_smp_master_identification 0x58fe 016123 beq smp_identity_information ,le_parse_smp_identity_information 0x58ff 016124 beq smp_identity_address_information ,le_parse_smp_identity_address_information 0x5900 016125 beq smp_signing_information ,le_parse_smp_signing_information 0x5901 016126 beq smp_security_request ,le_parse_smp_security_request 0x5902 016127 branch assert : 016129 le_parse_att: 0x5903 016130 set1 mark_ext_patch ,mark 0x5904 016131 bpatch patch2d_7 ,mem_patch2d 0x5905 016132 ifetch 3 ,contr 0x5906 016133 store 3 ,mem_le_att_opcode : 016134 le_parse_att_p: 0x5907 016135 beq attop_error_response ,le_parse_att_error_response 0x5908 016136 beq attop_exchange_mtu_request ,le_parse_att_exchange_mtu_request 0x5909 016137 beq attop_exchange_mtu_response ,le_parse_att_exchange_mtu_response 0x590a 016138 beq attop_find_information_request ,le_parse_att_find_information_request 0x590b 016139 beq attop_find_information_response ,le_parse_att_find_information_response 0x590c 016140 beq attop_find_by_type_value_request ,le_parse_att_find_by_type_value_request 0x590d 016141 beq attop_find_by_type_value_response ,le_parse_att_find_by_type_value_response 0x590e 016142 beq attop_read_by_type_request ,le_parse_att_read_by_type_request 0x590f 016143 beq attop_read_by_type_response ,le_parse_att_read_by_type_response 0x5910 016144 beq attop_read_request ,le_parse_att_read_request 0x5911 016145 beq attop_read_response ,le_parse_att_read_response 0x5912 016146 beq attop_read_blob_request ,le_parse_att_read_blob_request 0x5913 016147 beq attop_read_blob_response ,le_parse_att_read_blob_response 0x5914 016148 beq attop_read_multiple_request ,le_parse_att_read_multiple_request 0x5915 016149 beq attop_read_multiple_response ,le_parse_att_read_multiple_response 0x5916 016150 beq attop_read_by_group_type_request ,le_parse_att_read_by_group_type_request 0x5917 016151 beq attop_read_by_group_type_response ,le_parse_att_read_by_group_type_response 0x5918 016152 beq attop_write_request ,le_parse_att_write_request 0x5919 016153 beq attop_write_response ,le_parse_att_write_response 0x591a 016154 beq attop_prepare_write_request ,le_parse_att_prepare_write_request 0x591b 016155 beq attop_prepare_write_response ,le_parse_att_prepare_write_response 0x591c 016156 beq attop_execute_write_request ,le_parse_att_execute_write_request 0x591d 016157 beq attop_execute_write_response ,le_parse_att_execute_write_response 0x591e 016158 beq attop_handle_value_notification ,le_parse_att_handle_value_notification 0x591f 016159 beq attop_handle_value_indication ,le_parse_att_handle_value_indication 0x5920 016160 beq attop_handle_value_confirmation ,le_parse_att_handle_value_confirmation 0x5921 016161 beq attop_write_command ,le_parse_att_write_command 0x5922 016162 beq attop_signed_write_command ,le_parse_att_signed_write_command 0x5923 016163 branch assert : 016166 le_parse_connection_update_req: 0x5924 016167 ifetch 9 ,contr 0x5925 016168 store 9 ,mem_le_new_param 0x5926 016169 ifetch 2 ,contr 0x5927 016170 store 2 ,mem_le_instant 0x5928 016171 fetch 1 ,mem_le_state 0x5929 016172 set1 lestate_update_param ,pdata 0x592a 016173 store 1 ,mem_le_state 0x592b 016174 rtn : 016176 le_parse_channel_map_req: 0x592c 016177 ifetch 5 ,contr 0x592d 016178 store 5 ,mem_le_new_map 0x592e 016179 ifetch 2 ,contr 0x592f 016180 store 2 ,mem_le_instant 0x5930 016181 fetch 1 ,mem_le_state 0x5931 016182 set1 lestate_update_map ,pdata 0x5932 016183 store 1 ,mem_le_state 0x5933 016184 rtn : 016186 le_parse_terminate_ind: 0x5934 016187 fetch 1 ,mem_le_op 0x5935 016188 set1 op_disconn ,pdata 0x5936 016189 store 1 ,mem_le_op 0x5937 016190 rtn : 016192 le_parse_enc_req: 0x5938 016193 increase 10 ,contr 0x5939 016194 ifetch 8 ,contr 0x593a 016195 store 8 ,mem_le_skdm 0x593b 016196 ifetch 4 ,contr 0x593c 016197 store 4 ,mem_le_ivm 0x593d 016198 jam xt_ll_enc_rsp ,mem_fifo_temp 0x593e 016199 branch le_xtype_fifo_in : 016201 le_parse_enc_rsp: 0x593f 016202 ifetch 8 ,contr 0x5940 016203 store 8 ,mem_le_skds 0x5941 016204 ifetch 4 ,contr 0x5942 016205 store 4 ,mem_le_ivs 0x5943 016206 branch generate_sk : 016208 le_parse_start_enc_req: 0x5944 016209 fetch 1 ,mem_le_state 0x5945 016210 set1 lestate_encryption ,pdata 0x5946 016211 store 1 ,mem_le_state 0x5947 016212 jam xt_ll_start_enc_rsp ,mem_fifo_temp 0x5948 016213 branch le_xtype_fifo_in : 016215 le_parse_start_enc_rsp: 0x5949 016216 rtn master 0x594a 016217 jam xt_ll_start_enc_rsp ,mem_fifo_temp 0x594b 016218 branch le_xtype_fifo_in : 016220 le_parse_unknown_rsp: 0x594c 016221 rtn : 016223 le_parse_feature_req: 0x594d 016224 jam xt_ll_feature_rsp ,mem_fifo_temp 0x594e 016225 branch le_xtype_fifo_in : 016227 le_parse_feature_rsp: 0x594f 016228 rtn : 016230 le_parse_pause_enc_req: 0x5950 016231 rtn : 016233 le_parse_pause_enc_rsp: 0x5951 016234 rtn : 016236 le_parse_version_ind: 0x5952 016237 rtn master 0x5953 016238 jam xt_ll_version_ind ,mem_fifo_temp 0x5954 016239 branch le_xtype_fifo_in : 016241 le_parse_reject_ind: 0x5955 016242 rtn : 016245 le_parse_smp_pairing_request: 0x5956 016246 store 1 ,mem_le_preq 0x5957 016247 ifetch 6 ,contr 0x5958 016248 istore 6 ,contw 0x5959 016249 jam xt_smp_pairing_response ,mem_fifo_temp 0x595a 016250 branch le_xtype_fifo_in : 016252 le_parse_smp_pairing_response: 0x595b 016253 store 1 ,mem_le_pres 0x595c 016254 ifetch 6 ,contr 0x595d 016255 istore 6 ,contw 0x595e 016256 jam xt_smp_pairing_confirm ,mem_fifo_temp 0x595f 016257 branch le_xtype_fifo_in : 016259 le_parse_smp_pairing_confirm: 0x5960 016260 arg mem_le_rconfirm ,contw 0x5961 016261 call memcpy16 0x5962 016262 jam xt_smp_pairing_random ,mem_fifo_temp 0x5963 016263 branch le_xtype_fifo_in ,master 0x5964 016264 jam xt_smp_pairing_confirm ,mem_fifo_temp 0x5965 016265 branch le_xtype_fifo_in : 016267 le_parse_smp_pairing_random: 0x5966 016268 call authenticate_rconfirm 0x5967 016269 branch le_parse_smp_pairing_random_success ,zero 0x5968 016270 jam xt_smp_pairing_failed ,mem_fifo_temp 0x5969 016271 branch le_xtype_fifo_in : 016273 le_parse_smp_pairing_random_success: 0x596a 016274 call generate_stk 0x596b 016275 jam xt_ll_enc_req ,mem_fifo_temp 0x596c 016276 branch le_xtype_fifo_in ,master 0x596d 016277 jam xt_smp_pairing_random ,mem_fifo_temp 0x596e 016278 branch le_xtype_fifo_in : 016280 le_parse_smp_pairing_failed: 0x596f 016281 rtn : 016283 le_parse_smp_encryption_information: 0x5970 016284 arg mem_le_peer_ltk ,contw 0x5971 016285 branch memcpy16 : 016287 le_parse_smp_master_identification: 0x5972 016288 rtn : 016290 le_parse_smp_identity_information: 0x5973 016291 rtn : 016293 le_parse_smp_identity_address_information: 0x5974 016294 rtn : 016296 le_parse_smp_signing_information: 0x5975 016297 rtn : 016299 le_parse_smp_security_request: 0x5976 016300 rtn : 016302 le_parse_att_error_response: 0x5977 016303 increase -2 ,contr 0x5978 016304 ifetcht 1 ,contr 0x5979 016305 setarg attop_find_by_type_value_request 0x597a 016306 isub temp ,null 0x597b 016307 branch le_parse_att_error_res_find_by_type_value ,zero 0x597c 016308 setarg attop_find_information_request 0x597d 016309 isub temp ,null 0x597e 016310 branch le_parse_att_error_res_find_info ,zero 0x597f 016311 setarg attop_read_by_type_request 0x5980 016312 isub temp ,null 0x5981 016313 branch le_parse_att_error_res_read_by_type ,zero 0x5982 016314 setarg attop_read_blob_request 0x5983 016315 isub temp ,null 0x5984 016316 branch le_parse_att_error_res_read_blob ,zero 0x5985 016317 setarg attop_read_multiple_request 0x5986 016318 isub temp ,null 0x5987 016319 branch le_parse_att_error_res_read_multiple ,zero 0x5988 016320 rtn : 016322 le_parse_att_error_res_find_by_type_value: 0x5989 016323 rtn : 016325 le_parse_att_error_res_find_info: 0x598a 016326 rtn : 016328 le_parse_att_error_res_read_by_type: 0x598b 016329 rtn : 016331 le_parse_att_error_res_read_blob: 0x598c 016332 rtn : 016334 le_parse_att_error_res_read_multiple: 0x598d 016335 rtn : 016338 le_parse_att_exchange_mtu_request: 0x598e 016339 jam attop_exchange_mtu_response ,mem_fifo_temp 0x598f 016340 branch le_xtype_fifo_in : 016342 le_parse_att_exchange_mtu_response: 0x5990 016343 rtn : 016345 le_parse_att_find_information_request: 0x5991 016346 rshift8 pdata ,pdata 0x5992 016347 store 2 ,mem_le_search_handle_start 0x5993 016348 ifetch 2 ,contr 0x5994 016349 store 2 ,mem_le_search_handle_end 0x5995 016350 jam attop_find_information_response ,mem_fifo_temp 0x5996 016351 branch le_xtype_fifo_in : 016353 le_parse_att_find_information_response: 0x5997 016354 rtn : 016356 le_parse_att_find_info_res_multi: 0x5998 016357 rtn : 016359 le_parse_att_find_info_res_error: 0x5999 016360 rtn : 016362 le_parse_att_find_by_type_value_request: 0x599a 016363 rshift8 pdata ,pdata 0x599b 016364 store 2 ,mem_le_search_handle_start 0x599c 016365 ifetch 2 ,contr 0x599d 016366 store 2 ,mem_le_search_handle_end 0x599e 016367 ifetch 2 ,contr 0x599f 016368 store 2 ,mem_le_uuid 0x59a0 016369 ifetch 2 ,contr 0x59a1 016370 store 2 ,mem_le_search_att_type 0x59a2 016371 jam attop_find_by_type_value_response ,mem_fifo_temp 0x59a3 016372 branch le_xtype_fifo_in : 016375 le_parse_att_find_by_type_value_response: 0x59a4 016376 rtn : 016378 le_parse_att_read_by_type_request: 0x59a5 016379 rshift8 pdata ,pdata 0x59a6 016380 store 2 ,mem_le_search_handle_start 0x59a7 016381 ifetch 2 ,contr 0x59a8 016382 store 2 ,mem_le_search_handle_end 0x59a9 016383 ifetch 2 ,contr 0x59aa 016384 store 2 ,mem_le_search_att_type 0x59ab 016385 jam attop_read_by_type_response ,mem_fifo_temp 0x59ac 016386 branch le_xtype_fifo_in : 016388 le_parse_att_read_by_type_response: 0x59ad 016389 rtn : 016391 le_parse_att_read_request: 0x59ae 016392 fetch 2 ,mem_le_rxbuf + 7 0x59af 016393 store 2 ,mem_le_att_handle 0x59b0 016394 jam attop_read_response ,mem_fifo_temp 0x59b1 016395 branch le_xtype_fifo_in : 016397 le_parse_att_read_response: 0x59b2 016398 rtn : 016400 le_send_att_read_res_end: 0x59b3 016401 rtn : 016403 le_prepare_descriptor: 0x59b4 016404 rtn : 016407 le_parse_att_read_blob_request: 0x59b5 016408 ifetch 2 ,contr 0x59b6 016409 store 2 ,mem_le_att_offset 0x59b7 016410 jam attop_read_blob_response ,mem_fifo_temp 0x59b8 016411 branch le_xtype_fifo_in : 016413 le_parse_att_read_blob_response: 0x59b9 016414 rtn : 016416 le_parse_att_read_multiple_request: 0x59ba 016417 fetch 1 ,mem_le_rxbuf + 1 0x59bb 016418 increase -5 ,pdata 0x59bc 016419 rshift pdata ,pdata 0x59bd 016420 store 1 ,mem_le_temp 0x59be 016421 jam attop_read_multiple_response ,mem_fifo_temp 0x59bf 016422 branch le_xtype_fifo_in : 016424 le_parse_att_read_multiple_response: 0x59c0 016425 rtn : 016427 le_parse_att_read_by_group_type_request: 0x59c1 016428 rshift8 pdata ,pdata 0x59c2 016429 store 2 ,mem_le_search_handle_start 0x59c3 016430 ifetch 2 ,contr 0x59c4 016431 store 2 ,mem_le_search_handle_end 0x59c5 016432 ifetch 2 ,contr 0x59c6 016433 store 2 ,mem_le_search_att_type 0x59c7 016434 jam attop_read_by_group_type_response ,mem_fifo_temp 0x59c8 016435 branch le_xtype_fifo_in : 016437 le_parse_att_read_by_group_type_response: 0x59c9 016438 rtn : 016440 le_parse_att_write_request: 0x59ca 016441 fetch 1 ,mem_le_rxbuf + 1 0x59cb 016442 increase -7 ,pdata 0x59cc 016443 icopy loopcnt 0x59cd 016444 fetcht 2 ,mem_le_att_handle 0x59ce 016445 call le_att_get_handle_ptr 0x59cf 016446 branch le_parse_att_write_request_fail ,blank 0x59d0 016447 ifetch 1 ,contr 0x59d1 016448 isub loopcnt ,null 0x59d2 016449 nbranch le_parse_att_write_request_fail ,positive 0x59d3 016450 copy contr ,contw 0x59d4 016452 arg mem_le_rxbuf + 9 ,contr 0x59d5 016453 call memcpy 0x59d6 016454 jam bt_evt_le_write_request ,mem_fifo_temp 0x59d7 016455 call ui_ipc_send_event : 016456 le_parse_att_write_request_fail: 0x59d8 016457 jam attop_write_response ,mem_fifo_temp 0x59d9 016458 branch le_xtype_fifo_in : 016460 le_parse_att_write_response: 0x59da 016461 fetch 1 ,mem_le_conn_sm 0x59db 016462 rtn : 016464 le_parse_att_prepare_write_request: 0x59dc 016465 rtn : 016467 le_parse_att_prepare_write_response: 0x59dd 016468 rtn : 016470 le_parse_att_execute_write_request: 0x59de 016471 rtn : 016473 le_parse_att_execute_write_response: 0x59df 016474 rtn : 016476 le_parse_att_handle_value_notification: 0x59e0 016483 ifetch 5 ,contr 0x59e1 016484 store 5 ,mem_mouse_data 0x59e2 016485 jam send_mouse_data_cmd ,mem_mcmd 0x59e3 016487 call usb_isr 0x59e4 016488 rtn : 016489 le_kb_handle_value_notification: 0x59e5 016490 copy rega ,contr 0x59e6 016491 ifetch 8 ,contr 0x59e7 016492 store 8 ,mem_mouse_data 0x59e8 016493 jam send_kb_data_cmd ,mem_mcmd 0x59e9 016494 call usb_isr 0x59ea 016495 rtn : 016497 le_parse_att_handle_value_indication: 0x59eb 016498 rtn : 016500 le_parse_att_handle_value_confirmation: 0x59ec 016501 rtn : 016503 le_parse_att_write_command: 0x59ed 016504 fetch 1 ,mem_le_rxbuf + 1 0x59ee 016505 increase -7 ,pdata 0x59ef 016506 icopy loopcnt 0x59f0 016507 fetcht 2 ,mem_le_att_handle 0x59f1 016508 call le_att_get_handle_ptr 0x59f2 016509 branch le_parse_att_write_command_fail ,blank 0x59f3 016510 ifetch 1 ,contr 0x59f4 016511 isub loopcnt ,null 0x59f5 016512 nbranch le_parse_att_write_command_fail ,positive 0x59f6 016513 copy contr ,contw 0x59f7 016514 copy contr ,rega 0x59f8 016515 copy loopcnt ,regb 0x59f9 016516 arg mem_le_rxbuf + 9 ,contr 0x59fa 016517 call memcpy 0x59fb 016518 jam prcp_le ,mem_prcp 0x59fc 016519 call le_writeatt_cb : 016520 le_parse_att_write_command_fail: 0x59fd 016521 rtn : 016524 le_writeatt_cb: 0x59fe 016525 fetch 2 ,mem_cb_att_write 0x59ff 016526 rtn blank 0x5a00 016527 iforce pc : 016530 le_parse_att_signed_write_command: 0x5a01 016531 rtn : 016533 le_supervision_update: 0x5a02 016534 fetcht 4 ,mem_le_supervision_timer 0x5a03 016535 call get_clkbt 0x5a04 016536 isub temp ,timeup 0x5a05 016537 deposit timeup 0x5a06 016538 fetcht 2 ,mem_le_superto 0x5a07 016539 lshift4 temp ,temp 0x5a08 016540 lshift temp ,temp 0x5a09 016541 isub temp ,pdata 0x5a0a 016542 rtn : 016544 le_supervision_flush: 0x5a0b 016545 call get_clkbt 0x5a0c 016546 store 4 ,mem_le_supervision_timer 0x5a0d 016547 rtn : 016551 le_adv: 0x5a0e 016552 set1 mark_ext_patch ,mark 0x5a0f 016553 bpatch patch2e_0 ,mem_patch2e 0x5a10 016554 fetch 1 ,mem_le_adv_enable 0x5a11 016555 rtn blank 0x5a12 016556 arg le_adv_interval_timer ,queue 0x5a13 016557 call timer_check 0x5a14 016558 nrtn blank 0x5a15 016559 disable master 0x5a16 016560 enable swfine 0x5a17 016561 call le_init_adv 0x5a18 016562 call le_next_adv_channel 0x5a19 016563 call le_send_adv_ind 0x5a1a 016564 nbranch le_adv_not_match ,match 0x5a1b 016565 set1 mark_ext_patch ,mark 0x5a1c 016566 bpatch patch2e_1 ,mem_patch2e 0x5a1d 016567 fetch 1 ,mem_le_req_rcv 0x5a1e 016568 increase 1 ,pdata 0x5a1f 016569 store 1 ,mem_le_req_rcv 0x5a20 016570 fetch 1 ,mem_le_rxbuf 0x5a21 016571 and pdata ,0x0f ,pdata 0x5a22 016572 beq scan_req ,le_send_scan_response 0x5a23 016573 beq connect_req ,parse_connect_req : 016574 le_adv_not_match: 0x5a24 016575 nop 10000 0x5a25 016576 fetch 1 ,mem_le_ch_mapped 0x5a26 016577 bne 39 ,le_adv 0x5a27 016578 call le_ledoff 0x5a28 016579 arg le_adv_interval_timer ,queue 0x5a29 016580 fetch 2 ,mem_le_adv_interval_max 0x5a2a 016581 branch timer_init : 016584 le_receive_window_size: 0x5a2b 016585 set1 mark_ext_patch ,mark 0x5a2c 016586 bpatch patch2e_2 ,mem_patch2e 0x5a2d 016587 fetch 1 ,mem_le_peer_sca 0x5a2e 016588 call le_sca_map 0x5a2f 016589 fetch 2 ,mem_le_tsniff 0x5a30 016590 imul32 temp ,pdata 0x5a31 016591 arg 375 ,temp 0x5a32 016592 imul32 temp ,pdata 0x5a33 016593 arg 100000 ,temp 0x5a34 016594 idiv temp 0x5a35 016595 fetch 1 ,mem_le_window_size 0x5a36 016596 arg 20000 ,temp 0x5a37 016597 imul32 temp ,pdata 0x5a38 016598 store 4 ,mem_le_transmit_window 0x5a39 016599 set1 mark_ext_patch ,mark 0x5a3a 016600 bpatch patch2e_3 ,mem_patch2e 0x5a3b 016601 fetch 2 ,mem_rx_window_sniff 0x5a3c 016602 call wait_div_end 0x5a3d 016603 quotient temp 0x5a3e 016604 iadd temp ,pdata 0x5a3f 016605 store 2 ,mem_le_receive_window 0x5a40 016606 rtn : 016608 parse_connect_req: 0x5a41 016609 set1 mark_ext_patch ,mark 0x5a42 016610 bpatch patch2e_4 ,mem_patch2e 0x5a43 016611 fetch 6 ,mem_le_rxbuf + 8 0x5a44 016612 fetcht 6 ,mem_le_lap 0x5a45 016613 isub temp ,null 0x5a46 016614 nrtn zero 0x5a47 016615 call le_scan_check_sender_addr_type 0x5a48 016616 copy rega ,pdata 0x5a49 016617 store 1 ,mem_le_conn_peer_addr_type 0x5a4a 016618 fetch 7 ,mem_le_rxbuf + 21 0x5a4b 016619 store 7 ,mem_tmp_buffer 0x5a4c 016620 ifetch 8 ,contr 0x5a4d 016621 istore 8 ,contw 0x5a4e 016622 fetch 6 ,mem_le_rxbuf + 2 0x5a4f 016623 store 6 ,mem_le_plap 0x5a50 016624 set1 mark_ext_patch ,mark 0x5a51 016625 bpatch patch2e_5 ,mem_patch2e 0x5a52 016626 increase 6 ,contr 0x5a53 016627 ifetch 8 ,contr 0x5a54 016628 store 8 ,mem_le_access 0x5a55 016629 ifetcht 2 ,contr 0x5a56 016630 lshift2 temp ,temp 0x5a57 016631 ifetch 2 ,contr 0x5a58 016632 lshift2 pdata ,pdata 0x5a59 016633 store 2 ,mem_le_tsniff 0x5a5a 016634 store 4 ,mem_le_anchor 0x5a5b 016635 isub temp ,pdata 0x5a5c 016636 add pdata ,-2 ,clke_bt 0x5a5d 016637 ifetch 9 ,contr 0x5a5e 016638 store 9 ,mem_le_slave_latency 0x5a5f 016639 set1 mark_ext_patch ,mark 0x5a60 016640 bpatch patch2e_6 ,mem_patch2e 0x5a61 016641 ifetch 1 ,contr 0x5a62 016642 rshift4 pdata ,temp 0x5a63 016643 rshift temp ,temp 0x5a64 016644 storet 1 ,mem_le_peer_sca 0x5a65 016645 and_into 0x1f ,pdata 0x5a66 016646 store 1 ,mem_le_hop 0x5a67 016647 call le_receive_window_size 0x5a68 016648 call le_calc_channel_map 0x5a69 016649 call le_init_slave 0x5a6a 016650 call context_new 0x5a6b 016651 nrtn zero 0x5a6c 016652 set1 mark_ext_patch ,mark 0x5a6d 016653 bpatch patch2e_7 ,mem_patch2e 0x5a6e 016654 arg 0 ,temp 0x5a6f 016655 call hci_send_le_conn_complete 0x5a70 016656 call calc_clke_offset 0x5a71 016657 jam bt_evt_le_connected ,mem_fifo_temp 0x5a72 016658 call ui_ipc_send_event 0x5a73 016660 branch context_save : 016663 le_init_attlist_search: 0x5a74 016664 set1 mark_ext_patch ,mark 0x5a75 016665 bpatch patch2f_0 ,mem_patch2f 0x5a76 016666 fetch 2 ,mem_le_search_handle_start 0x5a77 016667 iforce regb 0x5a78 016668 fetch 2 ,mem_le_search_handle_end 0x5a79 016669 iforce regc 0x5a7a 016670 arg mem_le_att_list ,contr 0x5a7b 016671 enable user 0x5a7c 016672 rtn : 016675 le_att_handle_inrange: 0x5a7d 016676 ifetch 2 ,contr 0x5a7e 016677 rtn blank 0x5a7f 016678 isub regb ,null 0x5a80 016679 nrtn positive 0x5a81 016680 isub regc ,null 0x5a82 016681 rtn zero 0x5a83 016682 branch le_att_handle_blank ,positive 0x5a84 016683 force 1 ,null 0x5a85 016684 rtn : 016685 le_att_handle_blank: 0x5a86 016686 force 0 ,pdata 0x5a87 016687 rtn : 016690 le_att_get_handle_ptr: 0x5a88 016691 arg mem_le_att_list ,contr : 016692 le_att_get_handle_loop: 0x5a89 016693 ifetch 2 ,contr 0x5a8a 016694 rtn blank 0x5a8b 016695 increase 2 ,contr 0x5a8c 016696 isub temp ,null 0x5a8d 016697 rtn zero 0x5a8e 016698 ifetch 1 ,contr 0x5a8f 016699 iadd contr ,contr 0x5a90 016700 branch le_att_get_handle_loop : 016702 le_data_send_write_req: 0x5a91 016703 jam 0x2 ,mem_le_handle_data_len 0x5a92 016704 setarg 0x0001 0x5a93 016705 store 2 ,mem_le_handle_data 0x5a94 016706 jam conn_sm_wait_write_res ,mem_le_conn_sm 0x5a95 016707 jam attop_write_request ,mem_fifo_temp 0x5a96 016708 branch le_xtype_fifo_in : 016710 le_data_wait_write_res: 0x5a97 016711 rtn : 016712 le_data_wait_write_res1: 0x5a98 016713 rtn : 016714 le_conn_sm_master: 0x5a99 016715 set1 mark_ext_patch ,mark 0x5a9a 016716 bpatch patch2f_1 ,mem_patch2f 0x5a9b 016717 fetch 1 ,mem_device_option 0x5a9c 016718 rtnne dvc_op_dongle 0x5a9d 016719 fetch 1 ,mem_le_conn_sm 0x5a9e 016720 beq conn_sm_send_write_req ,le_data_send_write_req 0x5a9f 016721 beq conn_sm_wait_write_res ,le_data_wait_write_res 0x5aa0 016722 beq conn_sm_wait_write_res1 ,le_data_wait_write_res1 0x5aa1 016723 rtn : 016725 le_ukey_init: 0x5aa2 016726 setarg le_ukey 0x5aa3 016727 store 2 ,mem_cb_le_process 0x5aa4 016728 hjam uart_ctrl_normal ,core_uart_ctrl 0x5aa5 016729 setarg uart_baud_115200 0x5aa6 016730 hstore uart_baud_len ,core_uart_baud 0x5aa7 016731 hjam uartclk_dpll ,core_uart_clksel 0x5aa8 016732 hjam 0x4 ,core_gpio_sel1 0x5aa9 016733 setarg le_ukey_wcb 0x5aaa 016734 store 2 ,mem_cb_att_write 0x5aab 016735 call le_init_att 0x5aac 016736 rtn wake 0x5aad 016737 branch eeprom_load_reconn_info : 016740 le_ukey: 0x5aae 016741 fetch 1 ,mem_le_mode 0x5aaf 016742 compare lemode_slave ,pdata ,0xff 0x5ab0 016743 setarg 5 0x5ab1 016744 call set_pwm_steadyon ,true 0x5ab2 016745 ncall set_pwm_blink ,true 0x5ab3 016746 call uartd_prepare_rx 0x5ab4 016747 branch le_ukey_senddata ,blank 0x5ab5 016748 fetch 2 ,mem_le_notify_attr_start 0x5ab6 016749 iforce contw 0x5ab7 016750 sub loopcnt ,20 ,null 0x5ab8 016751 branch le_ukey_loop ,positive 0x5ab9 016752 force 20 ,loopcnt : 016753 le_ukey_loop: 0x5aba 016754 ifetch 1 ,contru 0x5abb 016755 istore 1 ,contw 0x5abc 016756 loop le_ukey_loop 0x5abd 016757 call uartd_rxdone : 016758 le_ukey_senddata: 0x5abe 016759 jam notify_handle ,mem_le_notify_handle 0x5abf 016760 fetcht 2 ,mem_le_notify_attr_start 0x5ac0 016761 ifetch 1 ,temp 0x5ac1 016762 rtn blank 0x5ac2 016763 call le_xtype_fifo_is_full 0x5ac3 016764 nrtn blank 0x5ac4 016765 jam attop_handle_value_notification ,mem_fifo_temp 0x5ac5 016766 branch le_xtype_fifo_in : 016768 le_ukey_wcb: 0x5ac6 016769 copy regb ,temp 0x5ac7 016770 call uartd_prepare_tx 0x5ac8 016771 copy rega ,contr 0x5ac9 016772 copy regb ,loopcnt : 016773 le_writeatt_cb_loop: 0x5aca 016774 ifetch 1 ,contr 0x5acb 016775 istore 1 ,contwu 0x5acc 016776 loop le_writeatt_cb_loop 0x5acd 016777 branch uartd_send : 016779 le_clear_notify_att: 0x5ace 016780 fetch 1 ,mem_device_option 0x5acf 016781 rtnne dvc_op_ukey 0x5ad0 016782 fetch 2 ,mem_le_notify_handle 0x5ad1 016783 rtnne notify_handle 0x5ad2 016784 fetcht 2 ,mem_le_notify_attr_start 0x5ad3 016785 setarg 0 0x5ad4 016786 istore 9 ,temp 0x5ad5 016787 istore 9 ,contw 0x5ad6 016788 istore 2 ,contw 0x5ad7 016789 rtn : 016792 le_ledoff: 0x5ad8 016793 fetcht 1 ,mem_le_adv_led 0x5ad9 016794 setflip gpio_active_bit ,temp 0x5ada 016795 branch gpio_out : 016798 le_modified_name: 0x5adb 016799 set1 mark_ext_patch ,mark 0x5adc 016800 bpatch patch2f_2 ,mem_patch2f 0x5add 016801 call le_modified_name_att_list 0x5ade 016802 branch le_modified_name_adv : 016804 le_modified_name_att_list: 0x5adf 016805 fetch 1 ,mem_le_name_len 0x5ae0 016806 copy pdata ,loopcnt 0x5ae1 016807 arg uuid_chrctr_device_name ,temp 0x5ae2 016808 call le_att_get_uuid_ptr 0x5ae3 016809 increase 1 ,contr 0x5ae4 016810 copy contr ,contw 0x5ae5 016811 arg mem_le_name ,contr 0x5ae6 016812 call memcpy 0x5ae7 016813 fetch 1 ,mem_le_name_len 0x5ae8 016814 sub pdata ,max_name_len ,loopcnt 0x5ae9 016815 copy loopcnt ,temp 0x5aea 016816 copy loopcnt ,pdata 0x5aeb 016817 ncall memcpy_empty ,blank 0x5aec 016818 rtn : 016820 le_modified_name_adv: 0x5aed 016821 fetch 1 ,mem_le_adv_data_len 0x5aee 016822 fetcht 1 ,mem_le_adv_data 0x5aef 016823 isub temp ,pdata 0x5af0 016824 copy pdata ,loopcnt 0x5af1 016825 copy pdata ,rega 0x5af2 016826 fetch 1 ,mem_le_adv_data 0x5af3 016827 increase 1 ,pdata 0x5af4 016828 arg mem_le_adv_data ,contr 0x5af5 016829 iadd contr ,contr 0x5af6 016830 arg mem_le_adv_temp ,contw 0x5af7 016831 call memcpy 0x5af8 016832 set1 mark_ext_patch ,mark 0x5af9 016833 bpatch patch2f_3 ,mem_patch2f 0x5afa 016834 fetch 1 ,mem_le_name_len 0x5afb 016835 copy pdata ,loopcnt 0x5afc 016836 increase 1 ,pdata 0x5afd 016837 store 1 ,mem_le_adv_data 0x5afe 016838 arg mem_le_adv_data + 2 ,contw 0x5aff 016839 arg mem_le_name ,contr 0x5b00 016840 call memcpy 0x5b01 016841 copy rega ,loopcnt 0x5b02 016842 arg mem_le_adv_temp ,contr 0x5b03 016843 call memcpy 0x5b04 016844 fetch 1 ,mem_le_adv_data 0x5b05 016845 iadd rega ,pdata 0x5b06 016846 store 1 ,mem_le_adv_data_len 0x5b07 016847 rtn : 016850 le_get_device_name: 0x5b08 016851 set1 mark_ext_patch ,mark 0x5b09 016852 bpatch patch2f_4 ,mem_patch2f 0x5b0a 016853 arg uuid_chrctr_device_name ,temp 0x5b0b 016854 branch le_att_get_uuid_ptr : 016857 le_att_get_uuid_ptr: 0x5b0c 016858 arg mem_le_att_list ,contr : 016859 le_att_get_uuid_loop: 0x5b0d 016860 ifetch 2 ,contr 0x5b0e 016861 branch assert ,blank 0x5b0f 016862 ifetch 2 ,contr 0x5b10 016863 isub temp ,null 0x5b11 016864 rtn zero 0x5b12 016865 ifetch 1 ,contr 0x5b13 016866 iadd contr ,contr 0x5b14 016867 branch le_att_get_uuid_loop : 016870 memcpy_empty: 0x5b15 016871 setarg space 0x5b16 016872 istore 1 ,contw 0x5b17 016873 loop memcpy_empty 0x5b18 016874 rtn : 016877 le_lpm_set_mult: 0x5b19 016878 set1 mark_ext_patch ,mark 0x5b1a 016879 bpatch patch2f_5 ,mem_patch2f 0x5b1b 016880 disable wake 0x5b1c 016881 branch le_lpm_set_mult_attempt ,attempt 0x5b1d 016882 nbranch le_lpm_lost ,match : 016883 le_lpm_set_mult_attempt: 0x5b1e 016884 call lpm_match 0x5b1f 016885 fetch 2 ,mem_rx_window_sniff 0x5b20 016886 store 2 ,mem_le_receive_window 0x5b21 016887 fetch 1 ,mem_le_rxbuf 0x5b22 016888 compare 1 ,pdata ,3 0x5b23 016889 nbranch lpm_mult_short ,true 0x5b24 016890 fetch 1 ,mem_le_txheader 0x5b25 016891 compare 1 ,pdata ,3 0x5b26 016892 nbranch lpm_mult_short ,true 0x5b27 016893 fetch 1 ,mem_le_state 0x5b28 016894 bbit1 lestate_update_param ,lpm_mult_short 0x5b29 016895 branch lpm_mult_wait_timeout : 016897 le_lpm_lost: 0x5b2a 016898 fetcht 2 ,mem_rx_window_sniff 0x5b2b 016899 rshift temp ,temp 0x5b2c 016900 fetch 2 ,mem_le_receive_window 0x5b2d 016901 iadd temp ,pdata 0x5b2e 016902 store 2 ,mem_le_receive_window 0x5b2f 016903 branch lpm_lost : 016905 le_clean_att_list_handle_enable: 0x5b30 016906 set1 mark_ext_patch ,mark 0x5b31 016907 bpatch patch2f_6 ,mem_patch2f 0x5b32 016908 jam 0 ,mem_le_switch_send_data 0x5b33 016909 fetcht 2 ,mem_le_notify_handle 0x5b34 016910 call le_att_check_notification_enable 0x5b35 016911 copy rega ,contw 0x5b36 016912 setarg 0 0x5b37 016913 istore 1 ,contw 0x5b38 016914 rtn : 016915 le_scan_addr_to_uart: 0x5b39 016916 fetch 1 ,mem_device_option 0x5b3a 016917 rtnne dvc_op_module 0x5b3b 016918 call get_uart_twptr 0x5b3c 016919 arg mem_le_plap ,rega 0x5b3d 016920 call adss_hex2string_to_uart 0x5b3e 016921 setarg 0x2c 0x5b3f 016922 istore 1 ,contwu 0x5b40 016923 call at_rssi_result 0x5b41 016924 branch uartd_send : 016927 prcp_le_tx: 0x5b42 016928 arg prcp_tx_le ,temp 0x5b43 016929 call le_att_check_notification_enable 0x5b44 016930 rtnbit0 0 0x5b45 016931 call le_xtype_fifo_is_full 0x5b46 016932 nrtn blank 0x5b47 016933 arg prcp_tx_le ,temp 0x5b48 016934 storet 2 ,mem_le_notify_handle 0x5b49 016935 call le_att_get_handle_ptr 0x5b4a 016936 branch assert ,blank 0x5b4b 016937 add contr ,1 ,contw 0x5b4c 016938 arg prcp_tx_data_len ,loopcnt 0x5b4d 016939 arg mem_prcp_data ,contr 0x5b4e 016940 call memcpy 0x5b4f 016941 jam attop_handle_value_notification ,mem_fifo_temp 0x5b50 016942 branch le_xtype_fifo_in : 016943 prcp_tx: 0x5b51 016944 rtn : 016947 le_search_adtype: 0x5b52 016948 set1 mark_ext_patch ,mark 0x5b53 016949 bpatch patch2f_7 ,mem_patch2f 0x5b54 016950 fetch 1 ,mem_le_rxbuf + 1 0x5b55 016951 arg mem_le_rxbuf + 8 ,contr 0x5b56 016952 iadd contr ,loopcnt : 016953 le_search_adtype_loop: 0x5b57 016954 ifetcht 1 ,contr 0x5b58 016955 ifetch 1 ,contr 0x5b59 016956 isub rega ,null 0x5b5a 016957 rtn zero 0x5b5b 016958 add temp ,-1 ,pdata 0x5b5c 016959 iadd contr ,contr 0x5b5d 016960 deposit loopcnt 0x5b5e 016961 isub contr ,null 0x5b5f 016962 branch le_search_adtype_loop ,positive 0x5b60 016963 force 1 ,null 0x5b61 016964 rtn : 016971 init_lmp: 0x5b62 016972 rtn wake : 016973 init_lmp_work: 0x5b63 016974 setarg 0 0x5b64 016975 store 1 ,mem_lmp_to_send 0x5b65 016976 store 1 ,mem_conn_sm 0x5b66 016977 store 1 ,mem_lmo_opcode1 0x5b67 016978 store 1 ,mem_lmo_opcode2 0x5b68 016979 store 1 ,mem_esco_addr 0x5b69 016980 store 1 ,mem_auth_enable 0x5b6a 016981 store 1 ,mem_connection_options 0x5b6b 016982 store 1 ,mem_pairing_auth 0x5b6c 016983 jam switch_flag_init ,mem_switch_flag 0x5b6d 016984 jam 0 ,mem_switch_fail_master_count 0x5b6e 016985 jam null_encryp ,mem_wait_encryption : 016986 init_lmp_reinit: 0x5b6f 016987 set1 mark_ext_patch ,mark 0x5b70 016988 bpatch patch3c_0 ,mem_patch3c 0x5b71 016989 jam 0 ,mem_pairing_auth 0x5b72 016990 jam 0 ,mem_sp_localsm 0x5b73 016991 jam 0 ,mem_lmp_conn_state 0x5b74 016992 fetch 1 ,mem_device_option 0x5b75 016993 rtnne dvc_op_hci ,pdata 0x5b76 016994 jam 0 ,mem_link_key_exists : 016996 parse_rx_done: 0x5b77 016997 rtn : 016999 parse_lmp: 0x5b78 017000 set1 mark_ext_patch ,mark 0x5b79 017001 bpatch patch3c_1 ,mem_patch3c 0x5b7a 017002 call setlocalsm_master ,master 0x5b7b 017003 ncall setlocalsm_slave ,master 0x5b7c 017004 fetch 1 ,mem_lmo_opcode2 0x5b7d 017005 ncall lmo_fifo_process ,blank 0x5b7e 017006 fetch 1 ,mem_lmo_opcode2 0x5b7f 017007 nrtn blank 0x5b80 017008 fetch 1 ,mem_state_map 0x5b81 017009 rtnbit0 smap_rxlmp 0x5b82 017010 set0 smap_rxlmp ,pdata 0x5b83 017011 set0 mark_rxbuf_inuse ,mark 0x5b84 017012 store 1 ,mem_state_map 0x5b85 017013 fetch 1 ,mem_rxbuf 0x5b86 017014 fetcht 1 ,mem_state_map 0x5b87 017015 isolate1 smap_lmptidinit ,pdata 0x5b88 017016 setflag true ,smap_lmptid ,temp 0x5b89 017017 storet 1 ,mem_state_map 0x5b8a 017018 and_into 0x2 ,temp 0x5b8b 017019 storet 1 ,mem_lmo_tid2 0x5b8c 017020 fetcht 1 ,mem_state_map 0x5b8d 017021 rshift pdata ,pdata 0x5b8e 017022 store 1 ,mem_lmi_opcode2 0x5b8f 017023 set1 mark_ext_patch ,mark 0x5b90 017024 bpatch patch3c_2 ,mem_patch3c 0x5b91 017025 fetch 1 ,mem_lmi_opcode2 0x5b92 017026 beq lmp_escape ,parse_lmp_escape 0x5b93 017027 beq lmp_accepted ,parse_lmp_accepted 0x5b94 017028 beq lmp_not_accepted ,parse_lmp_not_accepted 0x5b95 017029 beq lmp_set_afh ,parse_lmp_set_afh 0x5b96 017030 beq lmp_clkoffset_req ,parse_lmp_clkoffset_req 0x5b97 017031 beq lmp_encryption_mode_req ,parse_lmp_encryption_mode_req 0x5b98 017032 beq lmp_encryption_key_size_req ,parse_lmp_crypt_key 0x5b99 017033 beq lmp_auto_rate ,parse_lmp_auto_rate 0x5b9a 017034 beq lmp_test_control ,parse_lmp_test_control 0x5b9b 017035 beq lmp_test_activate ,parse_lmp_test_activate 0x5b9c 017036 beq lmp_setup_complete ,parse_lmp_setup_complete 0x5b9d 017037 beq lmp_supervision_timeout ,parse_lmp_supervision_timeout 0x5b9e 017038 beq lmp_features_req ,parse_lmp_features_req 0x5b9f 017039 beq lmp_host_connection_req ,parse_lmp_conn_req 0x5ba0 017040 beq lmp_version_req ,parse_lmp_version_req 0x5ba1 017041 beq lmp_version_res ,parse_lmp_version_res 0x5ba2 017042 beq lmp_detach ,parse_lmp_detach 0x5ba3 017043 beq lmp_max_slot ,parse_lmp_max_slot 0x5ba4 017044 beq lmp_max_slot_req ,parse_lmp_max_slot_req 0x5ba5 017045 beq lmp_name_req ,parse_lmp_name_req 0x5ba6 017046 beq lmp_name_res ,parse_lmp_name_res 0x5ba7 017047 beq lmp_features_res ,parse_lmp_features_res 0x5ba8 017048 beq lmp_comb_key ,parse_lmp_comb_key 0x5ba9 017049 beq lmp_au_rand ,parse_lmp_au_rand 0x5baa 017050 beq lmp_in_rand ,parse_lmp_in_rand 0x5bab 017051 beq lmp_sres ,parse_lmp_sres 0x5bac 017052 beq lmp_incr_power_req ,parse_lmp_incr_power 0x5bad 017053 beq lmp_decr_power_req ,parse_lmp_decr_power 0x5bae 017054 beq lmp_max_power ,parse_lmp_max_power 0x5baf 017055 beq lmp_min_power ,parse_lmp_min_power 0x5bb0 017056 beq lmp_page_mode_req ,parse_lmp_page_mode_req 0x5bb1 017057 beq lmp_page_scan_mode_req ,parse_lmp_page_scan_mode_req 0x5bb2 017058 beq lmp_preferred_rate ,parse_lmp_preferred_rate 0x5bb3 017059 beq lmp_remove_sco_link_req ,parse_lmp_remove_sco_link_req 0x5bb4 017060 beq lmp_sco_link_req ,parse_lmp_sco_link_req 0x5bb5 017061 beq lmp_slot_offset ,parse_lmp_slot_offset 0x5bb6 017062 beq lmp_sniff_req ,parse_lmp_sniff_req 0x5bb7 017063 beq lmp_start_encryption_req ,parse_lmp_start_encryption_req 0x5bb8 017064 beq lmp_stop_encryption_req ,parse_lmp_stop_encryption_req 0x5bb9 017065 beq lmp_switch_req ,parse_lmp_switch_req 0x5bba 017066 beq lmp_temp_rand ,parse_lmp_temp_rand 0x5bbb 017067 beq lmp_temp_key ,parse_lmp_temp_key 0x5bbc 017068 beq lmp_timing_accuracy_req ,parse_lmp_timing_accuracy_req 0x5bbd 017069 beq lmp_timing_accuracy_res ,parse_lmp_timing_accuracy_res 0x5bbe 017070 beq lmp_unit_key ,parse_lmp_unit_key 0x5bbf 017071 beq lmp_unsniff_req ,parse_lmp_unsniff_req 0x5bc0 017072 beq lmp_use_semi_permanent_key ,parse_lmp_use_semi_permanend_key 0x5bc1 017073 beq lmp_encapsulated_header ,parse_lmp_encapsulated_header 0x5bc2 017074 beq lmp_encapsulated_payload ,parse_lmp_encapsulated_payload 0x5bc3 017075 beq lmp_simple_pairing_confirm ,parse_simple_pairing_confirm 0x5bc4 017076 beq lmp_simple_pairing_number ,parse_lmp_simple_pairing_number 0x5bc5 017077 beq lmp_dhkey_check ,parse_dhkey_check 0x5bc6 017078 beq lmp_clkoffset_res ,parse_lmp_clkoffset_res 0x5bc7 017079 beq lmp_enc_key_size_mask_req ,parse_enc_key_size_mask_req : 017082 reject_unknown_packet: 0x5bc8 017083 jam unknown_lmp_pdu ,mem_lmo_reason2 : 017084 reject_lmp_packet: 0x5bc9 017085 jam lmp_not_accepted ,mem_lmo_opcode2 0x5bca 017086 rtn : 017088 parse_lmp_clkoffset_req: 0x5bcb 017089 jam lmp_clkoffset_res ,mem_lmo_opcode2 0x5bcc 017090 rtn : 017092 parse_enc_key_size_mask_req: 0x5bcd 017093 jam lmp_enc_key_size_mask_res ,mem_lmo_opcode2 0x5bce 017094 rtn : 017096 parse_lmp_set_afh: 0x5bcf 017097 fetch 4 ,mem_rxbuf + 1 0x5bd0 017098 lshift pdata ,pdata 0x5bd1 017099 store 4 ,mem_afh_instant 0x5bd2 017100 fetch 1 ,mem_rxbuf + 5 0x5bd3 017101 store 1 ,mem_afh_new_mod 0x5bd4 017102 fetch 5 ,mem_rxbuf + 6 0x5bd5 017103 store 5 ,mem_afh_map_new 0x5bd6 017104 fetch 5 ,mem_rxbuf + 11 0x5bd7 017105 istore 5 ,contw 0x5bd8 017106 fetch 1 ,mem_mode 0x5bd9 017107 set1 afh_change ,pdata 0x5bda 017108 store 1 ,mem_mode 0x5bdb 017109 rtn : 017110 parse_lmp_escape: 0x5bdc 017111 fetch 1 ,mem_rxbuf + 1 0x5bdd 017112 set1 7 ,pdata 0x5bde 017113 store 1 ,mem_lmi_opcode2 0x5bdf 017114 beq lmp_ext_accepted ,parse_lmpext_accepted 0x5be0 017115 beq lmp_not_accepted_ext ,parse_lmpext_not_accepted 0x5be1 017116 beq lmp_sniff_subrating_req ,parse_lmp_sniff_subrating_req 0x5be2 017117 beq lmp_sniff_subrating_res ,parse_lmp_sniff_subrating_res 0x5be3 017118 beq lmp_packet_type_table_req ,parse_lmpext_packet_type_table_req 0x5be4 017119 beq lmp_ext_features_req ,parse_lmpext_features_req 0x5be5 017120 beq lmp_ext_features_res ,parse_lmpext_features_res 0x5be6 017121 beq lmp_ext_chn_classification_req ,parse_lmpext_chn_classification_req 0x5be7 017122 beq lmp_pause_encryption_req ,parse_lmpext_pause_encrypt 0x5be8 017123 beq lmp_resume_encryption_req ,parse_lmpext_resume_encrypt 0x5be9 017124 beq lmp_io_cap_req ,parse_lmpext_iocap_req 0x5bea 017125 beq lmp_io_cap_res ,parse_lmpext_iocap_res 0x5beb 017126 beq lmp_ext_remove_esco_req ,parse_lmpext_remove_esco_req 0x5bec 017127 beq lmp_ext_esco_link_req ,parse_lmpext_esco_link_req 0x5bed 017128 rtneq lmp_ext_features_res : 017131 reject_unknown_ext_packet: 0x5bee 017132 jam lmp_not_accepted_ext ,mem_lmo_opcode2 0x5bef 017133 jam unknown_lmp_pdu ,mem_lmo_reason2 0x5bf0 017135 rtn : 017136 parse_lmpext_chn_classification_req: 0x5bf1 017137 jam lmp_not_accepted_ext ,mem_lmo_opcode2 0x5bf2 017138 jam not_support_chn_classification ,mem_lmo_reason2 0x5bf3 017139 rtn : 017141 parse_lmpext_esco_link_req: 0x5bf4 017142 fetch 1 ,mem_rxbuf + 2 0x5bf5 017143 store 1 ,mem_sco_handle 0x5bf6 017144 fetch 1 ,mem_rxbuf + 3 0x5bf7 017145 store 1 ,mem_esco_addr 0x5bf8 017146 fetch 1 ,mem_rxbuf + 5 0x5bf9 017147 store 1 ,mem_esco_desco 0x5bfa 017148 fetch 1 ,mem_rxbuf + 9 0x5bfb 017149 store 1 ,mem_esco_type 0x5bfc 017150 fetch 1 ,mem_rxbuf + 14 0x5bfd 017151 store 1 ,mem_air_mode 0x5bfe 017152 bmark1 mark_esco ,check_esco_prarm 0x5bff 017153 set1 mark_esco ,mark 0x5c00 017154 call push_tid_follow 0x5c01 017155 store 1 ,mem_accptsco_tid 0x5c02 017156 force 0 ,temp 0x5c03 017157 branch hci_send_conn_req_event : 017159 parse_lmpext_esco_link_req_change_param: 0x5c04 017160 jam lmp_ext_esco_link_req ,mem_lmo_opcode2 0x5c05 017161 jam prarm_neogotiation ,mem_neogotiation_state 0x5c06 017162 branch cmd_exit : 017164 check_esco_prarm: 0x5c07 017165 fetch 1 ,mem_esco_type 0x5c08 017166 bne type_hv3 ,reject_esco_prarm 0x5c09 017167 jam lmp_ext_accepted ,mem_lmo_opcode2 0x5c0a 017168 branch esco_prarm_common : 017169 reject_esco_prarm: 0x5c0b 017170 set0 mark_esco ,mark 0x5c0c 017171 jam lmp_not_accepted_ext ,mem_lmo_opcode2 0x5c0d 017172 force hci_error_unknown_hci_command ,temp 0x5c0e 017173 call hci_send_sco_complete : 017174 esco_prarm_common: 0x5c0f 017175 jam lmp_ext_esco_link_req ,mem_lmi_opcode2 0x5c10 017176 rtn : 017179 parse_lmpext_remove_esco_req: 0x5c11 017180 jam lmp_ext_accepted ,mem_lmo_opcode2 0x5c12 017181 jam lmp_ext_remove_esco_req ,mem_lmi_opcode2 0x5c13 017182 branch stop_esco : 017184 parse_lmpext_iocap_req: 0x5c14 017185 call iocap_lmpext_load 0x5c15 017186 fetch 1 ,mem_device_option 0x5c16 017187 beq dvc_op_hci ,iocap_lmpext_hci 0x5c17 017188 jam lmp_io_cap_res ,mem_lmo_opcode2 0x5c18 017189 rtn : 017191 parse_lmpext_iocap_res: 0x5c19 017192 call iocap_lmpext_load 0x5c1a 017193 fetch 1 ,mem_device_option 0x5c1b 017194 beq dvc_op_hci ,iocap_lmpext_hci 0x5c1c 017195 branch iocap_lmpext_common : 017197 iocap_lmpext_load: 0x5c1d 017198 arg mem_sp_iocap_remote ,contw 0x5c1e 017199 fetch 3 ,mem_rxbuf + 2 0x5c1f 017200 istore 3 ,contw 0x5c20 017201 rtn : 017203 iocap_lmpext_hci: 0x5c21 017204 call hci_send_io_cap_response_event : 017205 iocap_lmpext_common: 0x5c22 017206 call check_localsm 0x5c23 017207 ncall hci_send_io_cap_req_event ,true 0x5c24 017208 branch master_set_mem_master_sp_flag ,true 0x5c25 017209 rtn : 017210 parse_lmpext_accepted: 0x5c26 017211 fetch 1 ,mem_rxbuf + 3 0x5c27 017212 set1 7 ,pdata 0x5c28 017213 store 1 ,mem_lmi_accepted_opcode 0x5c29 017214 beq lmp_packet_type_table_req ,parse_lmpext_accepted_ptt 0x5c2a 017215 beq lmp_ext_esco_link_req ,play_sco 0x5c2b 017216 beq lmp_ext_remove_esco_req ,parse_lmpext_stop_esco 0x5c2c 017217 rtn : 017219 parse_lmpext_stop_esco: 0x5c2d 017220 branch stop_esco : 017222 parse_lmpext_not_accepted: 0x5c2e 017223 fetch 1 ,mem_rxbuf + 3 0x5c2f 017224 set1 7 ,pdata 0x5c30 017225 store 1 ,mem_lmi_accepted_opcode 0x5c31 017226 beq lmp_packet_type_table_req ,parse_lmpext_not_accepted_ptt 0x5c32 017227 beq lmp_ext_esco_link_req ,parse_lmpext_not_accepted_esco 0x5c33 017228 rtn : 017230 parse_lmpext_not_accepted_esco: 0x5c34 017231 set0 mark_esco ,mark 0x5c35 017232 rtn : 017234 parse_lmpext_accepted_ptt: 0x5c36 017235 fetch 1 ,mem_ptt 0x5c37 017236 fetcht 1 ,mem_state_map 0x5c38 017237 nsetflag blank ,smap_edr ,temp 0x5c39 017238 storet 1 ,mem_state_map : 017239 parse_lmpext_not_accepted_ptt: 0x5c3a 017240 fetch 1 ,mem_state 0x5c3b 017241 rtnbit0 state_init_seq 0x5c3c 017242 set0 state_init_seq ,pdata 0x5c3d 017243 store 1 ,mem_state 0x5c3e 017244 fetch 1 ,mem_auth_enable 0x5c3f 017245 nbranch hci_send_linkkey_req ,blank 0x5c40 017246 jam lmp_setup_complete ,mem_lmo_opcode2 0x5c41 017247 rtn : 017249 parse_lmpext_pause_encrypt: 0x5c42 017250 nbranch parse_lmpext_pause_encrypt_slave ,master 0x5c43 017251 jam lmp_stop_encryption_req ,mem_lmo_opcode2 0x5c44 017252 branch tid_reply : 017254 parse_lmpext_pause_encrypt_slave: 0x5c45 017255 jam lmp_pause_encryption_req ,mem_lmo_opcode2 0x5c46 017256 rtn : 017258 parse_lmpext_resume_encrypt: 0x5c47 017261 call tid_reply 0x5c48 017262 branch lmp_start_encryption : 017264 parse_lmpext_features_req: 0x5c49 017265 jam lmp_ext_features_res ,mem_lmo_opcode2 0x5c4a 017266 rtn : 017268 parse_lmpext_features_res: 0x5c4b 017269 fetcht 1 ,mem_rxbuf + 4 0x5c4c 017270 and temp ,0x1 ,temp 0x5c4d 017271 storet 1 ,mem_remote_sppcap 0x5c4e 017272 fetch 1 ,mem_hci_cmd 0x5c4f 017273 bne hci_cmd_wait_remote_ext_feature ,parse_lmpext_features_res_not_hci 0x5c50 017274 jam 0 ,mem_hci_cmd 0x5c51 017275 call hci_send_remote_ext_features_event : 017276 parse_lmpext_features_res_not_hci: 0x5c52 017277 fetch 1 ,mem_conn_sm 0x5c53 017278 rtnne conn_sm_wait_features_ext 0x5c54 017279 jam conn_sm_send_conn_req ,mem_conn_sm 0x5c55 017280 branch process_conn_sm : 017282 parse_lmp_accepted: 0x5c56 017283 fetch 1 ,mem_rxbuf + 1 0x5c57 017284 store 1 ,mem_lmi_accepted_opcode 0x5c58 017285 beq lmp_host_connection_req ,parse_lmp_accepted_hostconn 0x5c59 017286 beq lmp_in_rand ,parse_lmp_accepted_inrand 0x5c5a 017287 beq lmp_encryption_mode_req ,parse_lmp_accepted_enc_mode 0x5c5b 017288 beq lmp_encryption_key_size_req ,parse_lmp_accepted_enc_keysize 0x5c5c 017289 beq lmp_start_encryption_req ,parse_lmp_accepted_start_enc 0x5c5d 017290 beq lmp_stop_encryption_req ,parse_lmp_accepted_stop_enc 0x5c5e 017291 beq lmp_unsniff_req ,parse_lmp_accepted_unsniff_req 0x5c5f 017292 beq lmp_sniff_req ,parse_lmp_accepted_sniff_req 0x5c60 017293 beq lmp_sco_link_req ,play_sco 0x5c61 017295 beq lmp_switch_req ,parse_lmp_accepted_switch 0x5c62 017297 beq lmp_encapsulated_header ,parse_lmp_accepted_encapsulated_header 0x5c63 017298 beq lmp_encapsulated_payload ,parse_lmp_accepted_encapsulated_payload 0x5c64 017299 beq lmp_simple_pairing_number ,parse_lmp_accepted_simple_pairing_number 0x5c65 017300 beq lmp_dhkey_check ,parse_lmp_accepted_dhkey_check 0x5c66 017301 rtn : 017303 parse_lmp_not_accepted: 0x5c67 017304 fetch 1 ,mem_rxbuf + 1 0x5c68 017305 store 1 ,mem_lmi_accepted_opcode 0x5c69 017306 beq lmp_name_req ,parse_lmp_not_accepted_name_req 0x5c6a 017307 beq lmp_host_connection_req ,parse_lmp_not_accepted_hostconn 0x5c6b 017308 beq lmp_au_rand ,parse_lmp_not_accepted_aurand 0x5c6c 017309 beq lmp_sco_link_req ,parse_lmp_not_accepted_sco_link_req 0x5c6d 017310 beq lmp_in_rand ,parse_lmp_not_accepted_inrand 0x5c6e 017311 beq lmp_switch_req ,parse_lmp_not_accepted_switch 0x5c6f 017313 beq lmp_simple_pairing_number ,parse_lmp_not_accepted_simple_pairing_number 0x5c70 017314 beq lmp_dhkey_check ,parse_lmp_not_accepted_dhkey_check 0x5c71 017315 beq lmp_unsniff_req ,parse_lmp_not_accepted_unsniff_req 0x5c72 017316 beq lmp_sniff_req ,parse_lmp_not_acdcept_sniff_req 0x5c73 017317 rtn : 017319 parse_lmp_accepted_switch: 0x5c74 017320 jam bt_evt_switch_accept ,mem_fifo_temp 0x5c75 017321 call ui_ipc_send_event 0x5c76 017322 branch role_switch_prepare0 : 017323 parse_lmp_not_accepted_switch: 0x5c77 017324 jam bt_evt_switch_not_accept ,mem_fifo_temp 0x5c78 017325 call ui_ipc_send_event 0x5c79 017326 jam switch_flag_not_accept ,mem_switch_flag 0x5c7a 017327 setarg timer_switch_waite 0x5c7b 017328 arg switch_wait_timer ,queue 0x5c7c 017329 branch timer_init : 017332 parse_lmp_accepted_hostconn: 0x5c7d 017335 fetch 1 ,mem_lmp_conn_state 0x5c7e 017336 set1 received_conn_req ,pdata 0x5c7f 017337 store 1 ,mem_lmp_conn_state 0x5c80 017338 jam bt_evt_bb_connected ,mem_fifo_temp 0x5c81 017339 call ui_ipc_send_event 0x5c82 017340 jam lmp_packet_type_table_req ,mem_lmo_opcode2 : 017342 parse_lmp_accepted_hostconn_ctn: 0x5c83 017344 fetch 1 ,mem_conn_sm 0x5c84 017345 bne conn_sm_wait_conn_accept ,parse_rx_done 0x5c85 017348 jam conn_sm_auth_pair ,mem_conn_sm 0x5c86 017349 rtn : 017357 parse_lmp_not_accepted_hostconn: 0x5c87 017358 jam acl_connection_already_exists ,mem_disconn_reason_send 0x5c88 017359 jam lmp_detach ,mem_lmo_opcode2 0x5c89 017360 force hci_error_host_timeout ,temp 0x5c8a 017361 call hci_send_connection_error 0x5c8b 017363 jam conn_sm_standby ,mem_conn_sm 0x5c8c 017365 branch parse_rx_done ,true 0x5c8d 017366 rtn : 017368 parse_lmp_not_accepted_sco_link_req: 0x5c8e 017369 jam lmp_sco_link_req ,mem_lmo_opcode2 0x5c8f 017370 rtn : 017373 parse_lmp_accepted_inrand: 0x5c90 017374 fetch 1 ,mem_link_key_exists 0x5c91 017375 nrtn blank 0x5c92 017376 call clear_linkkey 0x5c93 017377 call lmp_generate_key 0x5c94 017378 rtn master 0x5c95 017379 set1 mark_slave_in_rand_accepted ,mark 0x5c96 017380 rtn : 017382 parse_lmp_accepted_enc_mode: 0x5c97 017383 nrtn master 0x5c98 017384 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 0x5c99 017385 fetch 1 ,mem_state_map 0x5c9a 017386 rtnbit0 smap_encryption 0x5c9b 017387 jam lmp_stop_encryption_req ,mem_lmo_opcode2 0x5c9c 017388 rtn : 017390 parse_lmp_accepted_enc_keysize: 0x5c9d 017391 branch lmp_start_encryption : 017393 parse_lmp_accepted_start_enc: 0x5c9e 017394 call send_create_conn_start_l2cap_timer_sm 0x5c9f 017395 fetch 1 ,mem_state 0x5ca0 017396 rtnbit1 state_conn_comp 0x5ca1 017397 jam lmp_setup_complete ,mem_lmo_opcode2 0x5ca2 017398 fetch 1 ,mem_conn_sm 0x5ca3 017399 rtnne conn_sm_encrypt_wait 0x5ca4 017400 jam conn_sm_encrypt_wait_clear ,mem_conn_sm 0x5ca5 017401 rtn : 017403 parse_lmp_accepted_stop_enc: 0x5ca6 017411 rtn : 017413 parse_lmp_not_accepted_aurand: 0x5ca7 017414 fetch 1 ,mem_device_option 0x5ca8 017415 bne dvc_op_hci ,parse_lmp_not_accepted_aurand_send_detach 0x5ca9 017416 fetch 1 ,mem_link_key_exists 0x5caa 017417 rtn blank 0x5cab 017418 fetcht 1 ,mem_conn_sm 0x5cac 017419 jam 0 ,mem_conn_sm 0x5cad 017420 jam 0 ,mem_link_key_exists 0x5cae 017421 fetch 1 ,mem_rxbuf + 2 0x5caf 017422 rtnne key_missing 0x5cb0 017423 storet 1 ,mem_conn_sm 0x5cb1 017424 jam local_statemachine ,mem_sp_localsm 0x5cb2 017425 fetch 2 ,mem_lmpext_ssp_enable 0x5cb3 017426 fetcht 1 ,mem_remote_sppcap 0x5cb4 017427 iand temp ,pdata 0x5cb5 017428 branch cmd_pair ,blank 0x5cb6 017429 branch cmd_ssp : 017431 parse_lmp_not_accepted_aurand_send_detach: 0x5cb7 017432 jam lmp_detach ,mem_lmo_opcode2 0x5cb8 017433 jam other_end_terminated ,mem_disconn_reason_send 0x5cb9 017434 rtn : 017436 parse_lmp_not_accepted_inrand: 0x5cba 017437 fetch 1 ,mem_rxbuf + 2 0x5cbb 017438 beq key_missing ,parse_lmp_inrand_key_missing 0x5cbc 017439 rtnne pairing_not_allowed 0x5cbd 017440 jam pairing_not_allowed ,mem_disconn_reason_send 0x5cbe 017441 jam lmp_detach ,mem_lmo_opcode2 0x5cbf 017442 rtn : 017443 parse_lmp_inrand_key_missing: 0x5cc0 017444 jam key_missing ,mem_disconn_reason_send 0x5cc1 017445 jam lmp_detach ,mem_lmo_opcode2 0x5cc2 017446 rtn : 017448 parse_lmp_not_accepted_name_req: 0x5cc3 017449 rtn : 017451 parse_lmp_not_accepted_simple_pairing_number: 0x5cc4 017452 jam sp_stat_null ,mem_sp_state 0x5cc5 017453 jam lmp_detach ,mem_lmo_opcode2 0x5cc6 017454 branch parse_rx_done : 017456 parse_lmp_not_accepted_dhkey_check: 0x5cc7 017457 jam sp_stat_null ,mem_sp_state 0x5cc8 017458 jam lmp_detach ,mem_lmo_opcode2 0x5cc9 017459 branch parse_rx_done : 017460 parse_lmp_not_accepted_unsniff_req: 0x5cca 017461 jam bt_evt_unsniff_not_accept ,mem_fifo_temp 0x5ccb 017462 branch ui_ipc_send_event : 017464 parse_lmp_accepted_unsniff_req: 0x5ccc 017465 jam bt_evt_unsniff_accept ,mem_fifo_temp 0x5ccd 017466 call ui_ipc_send_event 0x5cce 017467 call sniff_exit 0x5ccf 017468 force 0 ,temp 0x5cd0 017469 branch hci_send_mode_change : 017471 parse_lmp_accepted_sniff_req: 0x5cd1 017472 jam bt_evt_sniff_accept ,mem_fifo_temp 0x5cd2 017473 call ui_ipc_send_event 0x5cd3 017474 force 0x02 ,temp 0x5cd4 017475 call hci_send_mode_change 0x5cd5 017476 setarg 0 0x5cd6 017477 store 2 ,mem_dsniff 0x5cd7 017478 fetch 2 ,mem_sniff_param_interval 0x5cd8 017479 lshift pdata ,pdata 0x5cd9 017480 store 2 ,mem_tsniff 0x5cda 017481 fetch 1 ,mem_sniff_param_attempt 0x5cdb 017482 store 1 ,mem_sniff_attempt 0x5cdc 017483 fetch 1 ,mem_sniff_param_timeout 0x5cdd 017484 store 1 ,mem_sniff_timeout 0x5cde 017485 branch sniff_init : 017487 parse_lmp_not_acdcept_sniff_req: 0x5cdf 017488 jam bt_evt_sniff_not_accept ,mem_fifo_temp 0x5ce0 017489 branch ui_ipc_send_event : 017491 parse_lmp_crypt_key: 0x5ce1 017492 fetcht 1 ,mem_rxbuf + 1 0x5ce2 017493 storet 1 ,mem_key_size 0x5ce3 017494 branch accept_lmp_msg : 017496 parse_lmp_setup_complete: 0x5ce4 017497 fetch 1 ,mem_lmp_conn_state 0x5ce5 017498 set1 received_setup_complete ,pdata 0x5ce6 017499 store 1 ,mem_lmp_conn_state 0x5ce7 017500 rtnbit1 sent_setup_complete 0x5ce8 017501 jam lmp_setup_complete ,mem_lmo_opcode2 0x5ce9 017502 branch parse_rx_done : 017504 parse_lmp_max_slot: 0x5cea 017507 rtn : 017509 parse_lmp_max_slot_req: 0x5ceb 017510 fetch 1 ,mem_max_slot 0x5cec 017511 fetcht 1 ,mem_rxbuf + 1 0x5ced 017512 isub temp ,null 0x5cee 017514 branch accept_lmp_msg ,positive 0x5cef 017515 jam lmp_not_accepted ,mem_lmo_opcode2 0x5cf0 017516 jam unspecified_error ,mem_lmo_reason2 0x5cf1 017517 jam lmp_max_slot_req ,mem_lmi_opcode2 0x5cf2 017518 rtn : 017520 parse_lmp_detach: 0x5cf3 017521 call prepare_disconnect 0x5cf4 017522 branch accept_lmp_msg : 017524 accept_lmp_msg: 0x5cf5 017525 jam lmp_accepted ,mem_lmo_opcode2 0x5cf6 017526 rtn : 017528 parse_lmp_incr_power: 0x5cf7 017529 jam lmp_max_power ,mem_lmo_opcode2 0x5cf8 017530 rtn : 017532 parse_lmp_decr_power: 0x5cf9 017533 jam lmp_min_power ,mem_lmo_opcode2 0x5cfa 017534 rtn : 017536 parse_lmp_version_res: 0x5cfb 017537 fetch 1 ,mem_conn_sm 0x5cfc 017538 rtneq conn_sm_wait_version 0x5cfd 017540 jam conn_sm_send_features ,mem_conn_sm 0x5cfe 017542 rtn : 017545 parse_lmp_auto_rate: 0x5cff 017546 rtn : 017548 parse_lmp_in_rand: 0x5d00 017549 call lmp_copy_rand 0x5d01 017550 jam pincode_state_wait_pincode ,mem_pincode_state 0x5d02 017551 fetch 1 ,mem_device_option 0x5d03 017552 beq dvc_op_hci ,parse_lmp_in_rand_hci 0x5d04 017553 jam bt_evt_pincode_req ,mem_fifo_temp 0x5d05 017554 call ui_ipc_send_event : 017555 parse_lmp_in_rand_hci: 0x5d06 017556 call hci_send_pincode_req 0x5d07 017557 call tid_check 0x5d08 017558 nbranch lmp_accept_inrand ,true 0x5d09 017559 nbranch parse_lmp_inrand_res ,master 0x5d0a 017560 jam lmp_not_accepted ,mem_lmo_opcode2 0x5d0b 017561 jam lmp_in_rand ,mem_lmi_opcode2 0x5d0c 017562 jam transaction_collision ,mem_lmo_reason2 0x5d0d 017563 rtn : 017564 parse_lmp_inrand_res: 0x5d0e 017565 fetch 1 ,mem_op 0x5d0f 017566 set1 op_inrand_req ,pdata 0x5d10 017567 store 1 ,mem_op 0x5d11 017568 rtn : 017571 pop_tid_follow: 0x5d12 017572 fetcht 1 ,mem_state_map 0x5d13 017573 nsetflag blank ,smap_lmptid ,temp 0x5d14 017574 storet 1 ,mem_state_map 0x5d15 017575 rtn : 017578 push_tid_follow: 0x5d16 017579 fetch 1 ,mem_lmo_tid2 0x5d17 017580 rshift pdata ,pdata 0x5d18 017581 and_into 1 ,pdata 0x5d19 017582 rtn : 017584 parse_lmp_au_rand: 0x5d1a 017585 call push_tid_follow 0x5d1b 017586 store 1 ,mem_sres_tid 0x5d1c 017587 call lmp_copy_rand 0x5d1d 017588 jam lmp_sres ,mem_lmo_opcode2 0x5d1e 017589 fetch 1 ,mem_link_key_exists 0x5d1f 017590 nrtn blank 0x5d20 017591 fetch 1 ,mem_state 0x5d21 017592 rtnbit1 state_combkey 0x5d22 017593 jam key_missing ,mem_lmo_reason2 0x5d23 017594 fetch 1 ,mem_device_option 0x5d24 017595 bne dvc_op_hci ,reject_lmp_packet 0x5d25 017596 fetch 1 ,mem_auth_enable 0x5d26 017597 nbranch reject_lmp_packet ,blank 0x5d27 017598 jam 0 ,mem_lmo_opcode2 : 017599 parse_lmp_inrand_sres: 0x5d28 017600 fetch 1 ,mem_op 0x5d29 017601 set1 op_send_sres ,pdata 0x5d2a 017602 store 1 ,mem_op 0x5d2b 017603 branch hci_send_linkkey_req : 017605 parse_lmp_sres: 0x5d2c 017606 arg mem_plap ,rega 0x5d2d 017607 call function_e1 0x5d2e 017608 fetch 4 ,mem_rxbuf + 1 0x5d2f 017609 fetcht 4 ,mem_input_store 0x5d30 017610 isub temp ,null 0x5d31 017611 branch authentication_ok ,zero 0x5d32 017612 jam lmp_detach ,mem_lmo_opcode2 0x5d33 017613 jam authentication_failure_error ,mem_disconn_reason_send 0x5d34 017614 rtn : 017615 authentication_ok: 0x5d35 017616 call copy_aco 0x5d36 017617 call linkkey_ready 0x5d37 017618 fetch 1 ,mem_op 0x5d38 017619 isolate1 op_auth_req ,pdata 0x5d39 017620 set0 op_auth_req ,pdata 0x5d3a 017621 store 1 ,mem_op 0x5d3b 017622 call hci_send_auth_complete ,true 0x5d3c 017623 fetch 1 ,mem_conn_sm 0x5d3d 017624 beq conn_sm_auth_wait ,authentication_ok_conn_sm 0x5d3e 017625 beq conn_sm_pairing_wait ,authentication_ok_conn_sm 0x5d3f 017626 rtn : 017627 authentication_ok_conn_sm: 0x5d40 017628 fetch 1 ,mem_pairing_auth 0x5d41 017629 rtnne defalt_pairing_auth 0x5d42 017630 fetch 1 ,mem_state_map 0x5d43 017631 rtnbit1 smap_encryption 0x5d44 017632 branch host_create_conn_encrypt : 017634 parse_lmp_comb_key: 0x5d45 017635 arg mem_rxbuf + 1 ,rega 0x5d46 017636 arg mem_kinit ,regb 0x5d47 017637 arg mem_random_number ,contw 0x5d48 017638 call xor16 0x5d49 017639 arg mem_plap ,rega 0x5d4a 017640 call generate_linkkey 0x5d4b 017641 jam lmp_au_rand ,mem_lmo_opcode2 0x5d4c 017642 fetch 1 ,mem_state 0x5d4d 017643 bbit0 state_combkey ,lmp_generate_key 0x5d4e 017644 rtn : 017646 parse_lmp_name_res: 0x5d4f 017647 fetch 2 ,mem_len 0x5d50 017648 add pdata ,-3 ,loopcnt 0x5d51 017649 fetcht 1 ,mem_rxbuf + 1 0x5d52 017650 setarg mem_tmp_buffer 0x5d53 017651 iadd temp ,contw 0x5d54 017652 arg mem_rxbuf + 3 ,contr 0x5d55 017653 call memcpy 0x5d56 017654 fetcht 1 ,mem_name_offset 0x5d57 017655 fetch 1 ,mem_rxbuf + 2 0x5d58 017656 isub temp ,pdata 0x5d59 017657 sub pdata ,14 ,null 0x5d5a 017658 branch parse_lmp_name_res_end ,positive 0x5d5b 017659 add temp ,14 ,pdata 0x5d5c 017660 store 1 ,mem_name_offset 0x5d5d 017661 jam lmp_name_req ,mem_lmo_opcode2 0x5d5e 017662 rtn : 017663 parse_lmp_name_res_end: 0x5d5f 017664 fetch 1 ,mem_state_map 0x5d60 017665 set1 smap_name_res ,pdata 0x5d61 017666 store 1 ,mem_state_map 0x5d62 017667 bbit1 smap_name_req ,lmp_disconnect 0x5d63 017670 rtn : 017671 parse_lmp_name_req: 0x5d64 017672 fetch 1 ,mem_rxbuf + 1 0x5d65 017673 store 1 ,mem_lmi_opcode2 0x5d66 017674 jam lmp_name_res ,mem_lmo_opcode2 0x5d67 017675 rtn : 017677 parse_lmp_conn_req: 0x5d68 017678 fetch 1 ,mem_device_option 0x5d69 017679 bne dvc_op_hci ,accept_lmp_msg 0x5d6a 017680 force 1 ,temp 0x5d6b 017681 branch hci_send_conn_req_event : 017683 parse_lmp_timing_accuracy_req: 0x5d6c 017684 jam lmp_timing_accuracy_res ,mem_lmo_opcode2 0x5d6d 017685 rtn : 017687 parse_lmp_features_req: 0x5d6e 017688 jam lmp_features_res ,mem_lmo_opcode2 0x5d6f 017689 rtn : 017691 parse_lmp_version_req: 0x5d70 017692 jam lmp_version_res ,mem_lmo_opcode2 0x5d71 017693 rtn : 017695 parse_lmp_supervision_timeout: 0x5d72 017698 rtn : 017702 parse_lmp_sniff_subrating_req: 0x5d73 017703 fetch 2 ,mem_tsniff 0x5d74 017704 iforce temp 0x5d75 017705 fetch 1 ,mem_rxbuf + 2 0x5d76 017706 store 1 ,mem_subsniff_rate 0x5d77 017707 imul32 temp ,temp 0x5d78 017708 fetch 2 ,mem_rxbuf + 3 0x5d79 017709 lshift pdata ,pdata 0x5d7a 017710 store 2 ,mem_subsniff_tcmax 0x5d7b 017711 fetch 4 ,mem_rxbuf + 5 0x5d7c 017712 lshift pdata ,pdata 0x5d7d 017713 store 4 ,mem_subsniff_instant 0x5d7e 017715 deposit temp 0x5d7f 017716 store 2 ,mem_subsniff_tsniff 0x5d80 017717 rtn : 017718 parse_lmpext_packet_type_table_req: 0x5d81 017719 fetcht 1 ,mem_ptt 0x5d82 017720 fetch 1 ,mem_rxbuf + 2 0x5d83 017721 ixor temp ,null 0x5d84 017722 nbranch reject_unknown_ext_packet ,zero 0x5d85 017723 isolate1 0 ,pdata 0x5d86 017724 fetch 1 ,mem_state_map 0x5d87 017725 setflag true ,smap_edr ,pdata 0x5d88 017726 store 1 ,mem_state_map 0x5d89 017727 jam lmp_ext_accepted ,mem_lmo_opcode2 0x5d8a 017728 jam lmp_packet_type_table_req ,mem_lmi_opcode2 0x5d8b 017729 rtn : 017732 parse_lmp_sniff_subrating_res: 0x5d8c 017733 rtn : 017735 parse_lmp_max_power: 0x5d8d 017736 rtn : 017737 parse_lmp_min_power: 0x5d8e 017738 rtn : 017739 parse_lmp_page_mode_req: 0x5d8f 017741 branch accept_lmp_msg : 017742 parse_lmp_page_scan_mode_req: 0x5d90 017745 branch accept_lmp_msg : 017746 parse_lmp_preferred_rate: 0x5d91 017747 rtn : 017748 parse_lmp_remove_sco_link_req: 0x5d92 017749 call stop_sco 0x5d93 017750 jam lmp_remove_sco_link_req ,mem_lmi_opcode2 0x5d94 017751 branch accept_lmp_msg : 017754 parse_lmp_sco_link_req: 0x5d95 017755 fetch 1 ,mem_rxbuf + 1 0x5d96 017756 store 1 ,mem_sco_handle 0x5d97 017757 fetch 1 ,mem_rxbuf + 3 0x5d98 017758 store 1 ,mem_esco_desco 0x5d99 017759 fetch 1 ,mem_rxbuf + 6 0x5d9a 017760 store 1 ,mem_air_mode 0x5d9b 017761 call push_tid_follow 0x5d9c 017762 store 1 ,mem_accptsco_tid 0x5d9d 017763 force 0 ,temp 0x5d9e 017764 branch hci_send_conn_req_event : 017766 parse_lmp_slot_offset: 0x5d9f 017767 fetch 2 ,mem_rxbuf + 1 0x5da0 017768 store 2 ,mem_slot_offset 0x5da1 017769 rtn : 017771 parse_lmp_sniff_req: 0x5da2 017772 fetch 1 ,mem_state 0x5da3 017773 bbit1 state_insniff ,lmp_reject_sniff 0x5da4 017774 fetch 2 ,mem_rxbuf + 2 0x5da5 017775 lshift pdata ,pdata 0x5da6 017776 store 2 ,mem_dsniff 0x5da7 017777 fetch 2 ,mem_rxbuf + 4 0x5da8 017778 lshift pdata ,pdata 0x5da9 017779 store 2 ,mem_tsniff 0x5daa 017780 fetch 2 ,mem_rxbuf + 6 0x5dab 017781 store 1 ,mem_sniff_attempt 0x5dac 017782 iforce temp 0x5dad 017783 fetch 2 ,mem_rxbuf + 8 0x5dae 017784 store 1 ,mem_sniff_timeout 0x5daf 017785 isub temp ,null 0x5db0 017786 nbranch set_big_value_to_attempt ,positive 0x5db1 017787 store 1 ,mem_sniff_attempt : 017788 set_big_value_to_attempt: 0x5db2 017790 jam lmp_accepted ,mem_lmo_opcode2 0x5db3 017791 jam lmp_sniff_req ,mem_lmi_opcode2 0x5db4 017792 rtn : 017794 lmp_reject_sniff: 0x5db5 017795 jam pdu_not_allowed ,mem_lmo_reason2 0x5db6 017796 branch reject_lmp_packet : 017798 parse_lmp_start_encryption_req: 0x5db7 017799 call accept_lmp_msg 0x5db8 017800 call lmp_copy_rand 0x5db9 017801 call function_e3 0x5dba 017802 branch start_encryption : 017804 parse_lmp_stop_encryption_req: 0x5dbb 017805 call accept_lmp_msg 0x5dbc 017806 branch stop_encryption : 017809 parse_lmp_switch_req: 0x5dbd 017810 fetch 4 ,mem_rxbuf + 1 0x5dbe 017811 lshift pdata ,pdata 0x5dbf 017813 branch parse_lmp_switch_accept ,master 0x5dc0 017814 fetcht 1 ,mem_link_key_exists 0x5dc1 017815 nbranch parse_lmp_switch_req_clear_mark ,blank : 017816 parse_lmp_switch_req_not_accept: 0x5dc2 017817 jam lmp_not_accepted ,mem_lmo_opcode2 0x5dc3 017818 jam lmp_switch_req ,mem_lmi_opcode2 0x5dc4 017819 jam pdu_not_allowed ,mem_lmo_reason2 0x5dc5 017820 rtn : 017821 parse_lmp_switch_req_clear_mark: 0x5dc6 017822 jam lmp_slot_offset ,mem_lmo_opcode2 0x5dc7 017823 jam 0 ,mem_conn_sm 0x5dc8 017824 branch role_switch_prepare : 017826 parse_lmp_switch_accept: 0x5dc9 017827 call role_switch_prepare 0x5dca 017828 set1 mark_reconn_recieve_switch ,mark 0x5dcb 017829 fetch 1 ,mem_connection_options 0x5dcc 017830 set0 connection_switch ,pdata 0x5dcd 017831 store 1 ,mem_connection_options 0x5dce 017832 branch accept_lmp_msg : 017836 parse_lmp_temp_rand: 0x5dcf 017837 rtn : 017838 parse_lmp_temp_key: 0x5dd0 017839 rtn : 017840 parse_lmp_timing_accuracy_res: 0x5dd1 017841 rtn : 017843 parse_lmp_unit_key: 0x5dd2 017845 rtn : 017848 parse_lmp_unsniff_req: 0x5dd3 017849 jam lmp_accepted ,mem_lmo_opcode2 0x5dd4 017850 jam lmp_unsniff_req ,mem_lmi_opcode2 0x5dd5 017851 jam bt_evt_remote_unsniff ,mem_fifo_temp 0x5dd6 017852 call ui_ipc_send_event 0x5dd7 017853 force 0 ,temp 0x5dd8 017854 call hci_send_mode_change 0x5dd9 017855 branch sniff_exit : 017856 parse_lmp_use_semi_permanend_key: 0x5dda 017857 rtn : 017859 parse_lmp_encapsulated_header: 0x5ddb 017860 fetch 1 ,mem_rxbuf + 1 0x5ddc 017861 bne encapsulated_major_type_p192 ,parse_lmp_encapsulated_header_reject 0x5ddd 017862 fetch 1 ,mem_rxbuf + 2 0x5dde 017863 bne encapsulated_minor_type_p192 ,parse_lmp_encapsulated_header_reject 0x5ddf 017864 fetch 1 ,mem_rxbuf + 3 0x5de0 017865 bne encapsulated_len_p192 ,parse_lmp_encapsulated_header_reject 0x5de1 017866 call check_localsm 0x5de2 017867 branch parse_lmp_encapsulated_header_master ,true 0x5de3 017868 jam sp_stat_key_recv ,mem_sp_state : 017869 parse_lmp_encapsulated_header_master: 0x5de4 017870 jam lmp_accepted ,mem_lmo_opcode2 0x5de5 017871 jam lmp_encapsulated_header ,mem_lmi_opcode2 0x5de6 017872 branch parse_rx_done : 017874 parse_lmp_encapsulated_header_reject: 0x5de7 017875 jam pdu_not_allowed ,mem_lmo_reason2 0x5de8 017876 branch reject_lmp_packet : 017878 parse_lmp_accepted_encapsulated_header: 0x5de9 017881 jam lmp_encapsulated_payload ,mem_lmo_opcode2 0x5dea 017883 rtn : 017884 parse_lmp_accepted_simple_pairing_number: 0x5deb 017885 call check_localsm 0x5dec 017886 rtn true 0x5ded 017887 jam sp_stat_confirm_recv ,mem_sp_state 0x5dee 017888 rtn : 017890 parse_lmp_accepted_dhkey_check: 0x5def 017892 call check_localsm 0x5df0 017893 ncall g_noninit ,true 0x5df1 017894 call g_init ,true 0x5df2 017895 call hci_send_user_confirmation_req 0x5df3 017896 call hci_send_ssp_complete 0x5df4 017897 call check_localsm 0x5df5 017898 rtn true 0x5df6 017899 jam sp_stat_link_key_calc ,mem_sp_state 0x5df7 017900 jam sp_flag_commit ,mem_sp_flag 0x5df8 017901 rtn : 017903 parse_simple_pairing_confirm: 0x5df9 017904 arg mem_sp_confirm_remote ,contw 0x5dfa 017905 fetch 8 ,mem_rxbuf + 1 0x5dfb 017906 istore 8 ,contw 0x5dfc 017907 fetch 8 ,mem_rxbuf + 9 0x5dfd 017908 istore 8 ,contw 0x5dfe 017909 branch master_set_mem_master_sp_flag : 017911 parse_lmp_encapsulated_payload: 0x5dff 017912 fetch 1 ,mem_master_sp_state 0x5e00 017913 beq sp_stat_random_send ,parse_encapsulated_payload_master 0x5e01 017914 fetch 1 ,mem_sp_state 0x5e02 017915 bne sp_stat_key_recv ,parse_lmp_encapsulated_payload_reject : 017916 parse_encapsulated_payload_master: 0x5e03 017917 fetch 1 ,mem_sp_remote_key_recv_count 0x5e04 017918 sub pdata ,0x20 ,contw 0x5e05 017919 nbranch parse_lmp_encapsulated_payload_reject ,positive 0x5e06 017920 arg mem_sp_pubkey_remote ,contw 0x5e07 017921 iadd contw ,contw 0x5e08 017922 fetch 8 ,mem_rxbuf + 1 0x5e09 017923 istore 8 ,contw 0x5e0a 017924 fetch 8 ,mem_rxbuf + 9 0x5e0b 017925 istore 8 ,contw 0x5e0c 017926 fetch 1 ,mem_sp_remote_key_recv_count 0x5e0d 017927 increase 16 ,pdata 0x5e0e 017928 store 1 ,mem_sp_remote_key_recv_count 0x5e0f 017929 bne encapsulated_len_p192 ,accept_lmp_msg : 017930 parse_lmp_encapsulated_payload_completed: 0x5e10 017931 call check_localsm 0x5e11 017932 branch accept_lmp_msg ,true 0x5e12 017933 jam sp_key_valid ,mem_sp_remote_key_invalid 0x5e13 017934 jam sp_stat_key_generate ,mem_sp_state 0x5e14 017935 jam sp_flag_commit ,mem_sp_flag 0x5e15 017936 branch accept_lmp_msg : 017937 parse_lmp_encapsulated_payload_reject: 0x5e16 017938 jam pdu_not_allowed ,mem_lmo_reason2 0x5e17 017939 branch reject_lmp_packet : 017940 parse_lmp_accepted_encapsulated_payload: 0x5e18 017941 fetch 1 ,mem_sp_local_key_send_count 0x5e19 017942 beq encapsulated_len_p192 ,parse_lmp_encapsulated_payload_all_accepted 0x5e1a 017943 jam lmp_encapsulated_payload ,mem_lmo_opcode2 0x5e1b 017944 branch parse_rx_done : 017945 parse_lmp_encapsulated_payload_all_accepted: 0x5e1c 017946 call check_localsm 0x5e1d 017947 branch parse_lmp_encapsulated_payload_all_accepted_master ,true 0x5e1e 017948 jam sp_flag_commit ,mem_sp_flag 0x5e1f 017949 jam sp_stat_commit_calc ,mem_sp_state 0x5e20 017950 branch parse_rx_done : 017951 parse_lmp_encapsulated_payload_all_accepted_master: 0x5e21 017953 branch parse_rx_done : 017955 parse_lmp_simple_pairing_number: 0x5e22 017956 fetch 1 ,mem_master_sp_state 0x5e23 017957 beq sp_stat_random_send ,parse_lmp_simple_pairing_number_master 0x5e24 017958 fetch 1 ,mem_sp_state 0x5e25 017959 bne sp_stat_random_recv ,parse_lmp_simple_pairing_number_reject : 017960 parse_lmp_simple_pairing_number_master: 0x5e26 017961 arg mem_sp_random_remote ,contw 0x5e27 017962 fetch 8 ,mem_rxbuf + 1 0x5e28 017963 istore 8 ,contw 0x5e29 017964 fetch 8 ,mem_rxbuf + 9 0x5e2a 017965 istore 8 ,contw 0x5e2b 017966 call check_localsm 0x5e2c 017967 branch parse_lmp_simple_pairing_number_master0 ,true 0x5e2d 017968 jam sp_stat_random_send ,mem_sp_state 0x5e2e 017969 jam sp_flag_commit ,mem_sp_flag 0x5e2f 017970 branch accept_lmp_msg : 017971 parse_lmp_simple_pairing_number_master0: 0x5e30 017972 jam sp_stat_commit_calc ,mem_master_sp_state 0x5e31 017973 branch master_set_mem_master_sp_flag : 017976 parse_lmp_simple_pairing_number_reject: 0x5e32 017977 jam pdu_not_allowed ,mem_lmo_reason2 0x5e33 017978 branch reject_lmp_packet : 017980 parse_dhkey_check: 0x5e34 017981 fetch 1 ,mem_master_sp_state 0x5e35 017982 beq sp_stat_confirm_send ,parse_dhkey_check_master 0x5e36 017983 fetch 1 ,mem_sp_state 0x5e37 017984 bne sp_stat_confirm_recv ,parse_lmp_dhkey_check_reject : 017985 parse_dhkey_check_master: 0x5e38 017986 arg mem_sp_check_result ,contw 0x5e39 017987 fetch 8 ,mem_rxbuf + 1 0x5e3a 017988 istore 8 ,contw 0x5e3b 017989 fetch 8 ,mem_rxbuf + 9 0x5e3c 017990 istore 8 ,contw 0x5e3d 017991 call check_localsm 0x5e3e 017992 branch parse_dhkey_check_master0 ,true 0x5e3f 017993 jam sp_stat_confirm_check ,mem_sp_state 0x5e40 017994 jam sp_flag_commit ,mem_sp_flag 0x5e41 017995 branch parse_rx_done : 017996 parse_dhkey_check_master0: 0x5e42 017997 jam sp_stat_confirm_check ,mem_master_sp_state 0x5e43 017998 jam sp_flag_commit ,mem_master_sp_flag 0x5e44 017999 branch parse_rx_done : 018000 parse_lmp_dhkey_check_reject: 0x5e45 018001 jam pdu_not_allowed ,mem_lmo_reason2 0x5e46 018002 branch reject_lmp_packet : 018004 parse_lmp_clkoffset_res: 0x5e47 018005 branch parse_rx_done : 018007 parse_lmp_encryption_mode_req: 0x5e48 018008 fetch 1 ,mem_connection_options 0x5e49 018009 set0 connection_encrypt 0x5e4a 018010 store 1 ,mem_connection_options 0x5e4b 018011 call accept_lmp_msg 0x5e4c 018012 nrtn master 0x5e4d 018013 fetch 1 ,mem_rxbuf + 1 0x5e4e 018014 fetcht 1 ,mem_op 0x5e4f 018015 setflag blank ,op_stop_enc ,temp 0x5e50 018016 nsetflag blank ,op_start_enc ,temp 0x5e51 018017 storet 1 ,mem_op 0x5e52 018018 rtn : 018020 parse_lmp_features_res: 0x5e53 018021 fetcht 8 ,mem_rxbuf + 1 0x5e54 018022 fetch 1 ,mem_hci_cmd 0x5e55 018023 bne hci_cmd_wait_remote_feature ,parse_lmp_features_res_not_hci 0x5e56 018024 jam 0 ,mem_hci_cmd 0x5e57 018025 call hci_send_remote_features : 018026 parse_lmp_features_res_not_hci: 0x5e58 018027 fetch 1 ,mem_conn_sm 0x5e59 018028 rtnne conn_sm_wait_features_res 0x5e5a 018029 fetch 1 ,mem_device_option 0x5e5b 018030 beq dvc_op_hci ,parse_lmp_feature_ext_sm 0x5e5c 018031 fetch 1 ,mem_connection_options 0x5e5d 018032 bbit0 connection_feature_ext ,parse_lmp_send_conn : 018033 parse_lmp_feature_ext_sm: 0x5e5e 018034 jam conn_sm_send_features_ext ,mem_conn_sm 0x5e5f 018035 rtn : 018036 parse_lmp_send_conn: 0x5e60 018037 jam conn_sm_send_conn_req ,mem_conn_sm 0x5e61 018038 rtn : 018039 parse_lmp_test_activate: 0x5e62 018040 fetch 1 ,mem_debug_config 0x5e63 018041 store 1 ,mem_test_mode_old_debug_config 0x5e64 018042 jam lmp_accepted ,mem_lmo_opcode2 0x5e65 018043 jam lmp_test_activate ,mem_lmi_opcode2 0x5e66 018044 rtn : 018045 parse_lmp_test_control: 0x5e67 018048 jam lmp_accepted ,mem_lmo_opcode2 0x5e68 018049 jam lmp_test_control ,mem_lmi_opcode2 0x5e69 018050 force 9 ,loopcnt 0x5e6a 018051 arg mem_rxbuf + 1 ,contr 0x5e6b 018052 arg mem_temp_payload ,contw : 018053 parse_lmp_test_xor: 0x5e6c 018054 ifetch 1 ,contr 0x5e6d 018055 xor_into 0x55 ,pdata 0x5e6e 018056 istore 1 ,contw 0x5e6f 018057 loop parse_lmp_test_xor 0x5e70 018058 fetch 1 ,test_mode_scenario 0x5e71 018059 fetcht 1 ,mem_tester_emulate 0x5e72 018060 set0 tester_no_whitening ,temp 0x5e73 018061 set0 tester_pattern_test ,temp 0x5e74 018062 beq exit_test_mode ,parse_lmp_test_control_exit 0x5e75 018063 beq pause_test_mode ,parse_lmp_test_control_pause 0x5e76 018064 beq closed_loop_back_acl ,parse_lmp_test_control_loopback 0x5e77 018065 beq acl_without_whitening ,parse_lmp_test_control_loopback_nowhite 0x5e78 018066 beq closed_loop_back_sco ,parse_lmp_test_control_loopback 0x5e79 018067 beq sco_without_whitening ,parse_lmp_test_control_loopback_nowhite 0x5e7a 018068 beq zero_pattern ,parse_lmp_test_control_pattern 0x5e7b 018069 beq one_pattern ,parse_lmp_test_control_pattern 0x5e7c 018070 beq alt_pattern ,parse_lmp_test_control_pattern 0x5e7d 018071 beq alt2_pattern ,parse_lmp_test_control_pattern 0x5e7e 018072 beq pseudorandom ,parse_lmp_test_control_pattern 0x5e7f 018073 rtn : 018074 parse_lmp_test_control_exit: 0x5e80 018076 fetch 1 ,mem_tester_emulate 0x5e81 018077 set1 tester_exit ,pdata 0x5e82 018078 set1 tester_change ,pdata 0x5e83 018079 store 1 ,mem_tester_emulate 0x5e84 018080 rtn : 018081 parse_lmp_test_control_pattern: 0x5e85 018082 set1 tester_pattern_test ,temp 0x5e86 018083 jam 5 ,mem_lch_code 0x5e87 018084 fetch 2 ,test_mode_data_length 0x5e88 018085 iforce loopcnt 0x5e89 018086 store 2 ,mem_len 0x5e8a 018087 arg mem_rxbuf ,contw 0x5e8b 018088 call pn9 : 018089 parse_lmp_test_control_loopback_nowhite: 0x5e8c 018090 set1 tester_no_whitening ,temp : 018091 parse_lmp_test_control_loopback: 0x5e8d 018092 set1 tester_change ,temp 0x5e8e 018093 force 0 ,pdata 0x5e8f 018094 store 1 ,mem_slave_rcvcnt 0x5e90 018095 store 2 ,mem_tst_pktcnt_crc 0x5e91 018096 store 2 ,mem_tst_pktcnt_dmh 0x5e92 018097 store 2 ,mem_tst_pktcnt_hec 0x5e93 018098 store 2 ,mem_tst_pktcnt_sync 0x5e94 018099 fetch 1 ,test_mode_hopping_mode 0x5e95 018100 compare fixed_freq ,pdata ,0xff 0x5e96 018101 setflag true ,tester_fixed_freq ,temp 0x5e97 018102 storet 1 ,mem_tester_emulate 0x5e98 018103 rtn : 018105 parse_lmp_test_control_pause: 0x5e99 018106 set0 mark_testmode ,mark 0x5e9a 018107 jam 0 ,mem_tester_emulate 0x5e9b 018108 fetch 1 ,mem_debug_config 0x5e9c 018109 set0 debug_tx_pattern ,pdata 0x5e9d 018110 store 1 ,mem_debug_config 0x5e9e 018111 rtn : 018113 check_test_cond: 0x5e9f 018114 fetch 1 ,mem_tester_emulate 0x5ea0 018115 rtnbit0 tester_change 0x5ea1 018116 fetch 1 ,mem_tester_cnt 0x5ea2 018117 increase 1 ,pdata 0x5ea3 018118 store 1 ,mem_tester_cnt 0x5ea4 018119 rtnne 5 0x5ea5 018120 jam 0 ,mem_tester_cnt 0x5ea6 018121 fetch 1 ,mem_tester_emulate 0x5ea7 018122 set0 tester_change ,pdata 0x5ea8 018123 store 1 ,mem_tester_emulate 0x5ea9 018124 bbit1 tester_exit ,check_test_exit 0x5eaa 018125 isolate1 tester_no_whitening ,pdata 0x5eab 018126 call test_no_white ,true 0x5eac 018127 ncall test_enable_white ,true 0x5ead 018128 fetch 1 ,test_mode_packet_type 0x5eae 018129 compare 0x20 ,pdata ,0x30 0x5eaf 018130 fetch 1 ,mem_state_map 0x5eb0 018131 setflag true ,smap_edr ,pdata 0x5eb1 018132 store 1 ,mem_state_map 0x5eb2 018133 fetch 1 ,mem_tester_emulate 0x5eb3 018134 fetcht 1 ,mem_debug_config 0x5eb4 018135 isolate1 tester_pattern_test ,pdata 0x5eb5 018136 setflag true ,debug_tx_pattern ,temp 0x5eb6 018137 isolate1 tester_fixed_freq ,pdata 0x5eb7 018138 setflag true ,debug_tx_fixed_freq ,temp 0x5eb8 018139 setflag true ,debug_rx_fixed_freq ,temp 0x5eb9 018140 storet 1 ,mem_debug_config 0x5eba 018141 fetch 1 ,test_mode_tx_freq 0x5ebb 018142 store 1 ,mem_tx_fixed_freq 0x5ebc 018143 fetch 1 ,test_mode_rx_freq 0x5ebd 018144 store 1 ,mem_rx_fixed_freq 0x5ebe 018145 set1 mark_testmode ,mark 0x5ebf 018146 rtn : 018148 check_test_exit: 0x5ec0 018149 set0 mark_testmode ,mark 0x5ec1 018150 jam 0 ,mem_tester_emulate 0x5ec2 018151 fetch 1 ,mem_test_mode_old_debug_config 0x5ec3 018152 store 1 ,mem_debug_config 0x5ec4 018153 hfetch 1 ,core_config 0x5ec5 018154 and_into 0xfb ,pdata 0x5ec6 018155 hstore 1 ,core_config 0x5ec7 018156 rtn : 018159 lmp_copy_rand: 0x5ec8 018160 arg mem_rxbuf + 1 ,contr 0x5ec9 018161 arg mem_random_number ,contw 0x5eca 018162 branch memcpy16 : 018164 lmp_generate_key: 0x5ecb 018165 jam lmp_comb_key ,mem_lmo_opcode2 0x5ecc 018166 rtn : 018168 lmp_start_encryption: 0x5ecd 018169 nrtn master 0x5ece 018170 jam lmp_start_encryption_req ,mem_lmo_opcode2 0x5ecf 018171 rtn : 018173 lmp_accept_inrand: 0x5ed0 018174 arg mem_lap ,rega 0x5ed1 018175 call generate_kinit 0x5ed2 018176 jam lmp_accepted ,mem_lmo_opcode2 0x5ed3 018177 jam lmp_in_rand ,mem_lmi_opcode2 0x5ed4 018178 rtn : 018180 lmp_disconnect: 0x5ed5 018181 jam 10 ,mem_conn_timer 0x5ed6 018182 jam lmp_detach ,mem_lmo_opcode2 0x5ed7 018183 jam local_host ,mem_disconn_reason_send 0x5ed8 018184 rtn : 018190 send_lmp: 0x5ed9 018191 set1 mark_ext_patch ,mark 0x5eda 018192 bpatch patch3c_3 ,mem_patch3c 0x5edb 018193 disable user 0x5edc 018194 call lmo_fifo_process 0x5edd 018195 fetch 1 ,mem_lmp_to_send 0x5ede 018196 rtn blank 0x5edf 018201 bbit1 7 ,send_lmp_escape 0x5ee0 018202 beq lmp_name_req ,send_lmp_name_req 0x5ee1 018203 beq lmp_name_res ,send_lmp_name_res 0x5ee2 018204 beq lmp_accepted ,send_lmp_accepted 0x5ee3 018205 beq lmp_not_accepted ,send_lmp_not_accepted 0x5ee4 018206 beq lmp_features_req ,send_lmp_features_req 0x5ee5 018207 beq lmp_features_res ,send_lmp_features_res 0x5ee6 018208 beq lmp_timing_accuracy_res ,send_lmp_timing_accuracy_res 0x5ee7 018209 beq lmp_version_req ,send_lmp_version_req 0x5ee8 018210 beq lmp_version_res ,send_lmp_version_res 0x5ee9 018211 beq lmp_setup_complete ,send_lmp_setup_complete 0x5eea 018212 beq lmp_supervision_timeout ,send_lmp_superto 0x5eeb 018213 beq lmp_host_connection_req ,send_lmp_no_payload 0x5eec 018214 beq lmp_in_rand ,send_lmp_inrand 0x5eed 018215 beq lmp_comb_key ,send_lmp_comb_key 0x5eee 018216 beq lmp_au_rand ,send_lmp_aurand 0x5eef 018217 beq lmp_sres ,send_lmp_sres 0x5ef0 018218 beq lmp_encryption_mode_req ,send_lmp_encryption_mode_req 0x5ef1 018219 beq lmp_encryption_key_size_req ,send_lmp_encryption_key_size_req 0x5ef2 018220 beq lmp_start_encryption_req ,send_lmp_start_encryption 0x5ef3 018221 beq lmp_detach ,send_lmp_detach 0x5ef4 018222 beq lmp_quality_of_service_req ,send_lmp_quality_of_service_req 0x5ef5 018223 beq lmp_unit_key ,send_lmp_unit_key 0x5ef6 018225 beq lmp_sco_link_req ,send_lmp_sco_link_req 0x5ef7 018226 beq lmp_clkoffset_res ,send_lmp_clkoffset_res 0x5ef8 018227 beq lmp_max_power ,send_lmp_nopayload_reply 0x5ef9 018228 beq lmp_max_slot ,send_lmp_max_slot 0x5efa 018229 beq lmp_max_slot_req ,send_lmp_max_slot_req 0x5efb 018230 beq lmp_min_power ,send_lmp_nopayload_reply 0x5efc 018231 beq lmp_remove_sco_link_req ,send_lmp_remove_sco_link_req 0x5efd 018232 beq lmp_slot_offset ,send_lmp_slot_offset 0x5efe 018233 beq lmp_switch_req ,send_lmp_switch_req 0x5eff 018234 beq lmp_sniff_req ,send_lmp_sniff_req 0x5f00 018235 beq lmp_stop_encryption_req ,send_lmp_stop_encryption_req 0x5f01 018236 beq lmp_timing_accuracy_req ,send_lmp_timing_accuracy_req 0x5f02 018237 beq lmp_unsniff_req ,send_lmp_unsniff_req 0x5f03 018238 beq lmp_encapsulated_header ,send_lmp_encapsulated_header 0x5f04 018239 beq lmp_encapsulated_payload ,send_lmp_encapsulated_payload 0x5f05 018240 beq lmp_simple_pairing_confirm ,send_lmp_simple_pairing_comfirm 0x5f06 018241 beq lmp_simple_pairing_number ,send_lmp_simple_pairing_number 0x5f07 018242 beq lmp_dhkey_check ,send_lmp_dhkey_check 0x5f08 018243 beq lmp_auto_rate ,send_lmp_auto_rate 0x5f09 018244 beq lmp_enc_key_size_mask_res ,send_lmp_enc_key_size_mask_res 0x5f0a 018246 beq lmp_clkoffset_req ,send_lmp_clkoffset_req 0x5f0b 018247 beq lmp_quality_of_service ,send_lmp_quality_of_service 0x5f0c 018248 beq lmp_test_activate ,send_lmp_test_activate 0x5f0d 018249 beq lmp_test_control ,send_lmp_test_control : 018250 send_lmp_error: 0x5f0e 018251 branch assert 0x5f0f 018252 rtn : 018253 send_lmp_escape: 0x5f10 018254 beq lmp_ext_esco_link_req ,send_lmpext_esco_req 0x5f11 018255 beq lmp_ext_remove_esco_req ,send_lmpext_remove_esco 0x5f12 018256 beq lmp_ext_accepted ,send_lmpext_accepted 0x5f13 018257 beq lmp_ext_features_res ,send_lmpext_features_res 0x5f14 018258 beq lmp_not_accepted_ext ,send_lmpext_not_accepted 0x5f15 018259 beq lmp_ext_features_req ,send_lmpext_features_req 0x5f16 018260 beq lmp_packet_type_table_req ,send_lmpext_packet_type_table_req 0x5f17 018261 beq lmp_pause_encryption_req ,send_lmpext_pause_encryption_req 0x5f18 018262 beq lmp_io_cap_req ,send_lmp_io_cap_req 0x5f19 018263 beq lmp_io_cap_res ,send_lmpext_io_cap_res 0x5f1a 018264 beq lmp_sniff_subrating_req ,send_lmpext_sniff_subrating_req 0x5f1b 018265 beq lmp_sniff_subrating_res ,send_lmpext_sniff_subrating_res 0x5f1c 018266 branch assert : 018272 send_lmp_accepted: 0x5f1d 018273 force 2 ,pdata 0x5f1e 018274 call msg_send_lmp 0x5f1f 018275 fetch 1 ,mem_lmi_opcode 0x5f20 018276 istore 1 ,contw 0x5f21 018277 beq lmp_sco_link_req ,send_lmp_accptsco 0x5f22 018278 call send_lmp_follow 0x5f23 018279 fetch 1 ,mem_lmi_opcode 0x5f24 018280 beq lmp_in_rand ,send_lmp_accepted_inrand 0x5f25 018281 beq lmp_encryption_mode_req ,send_lmp_accepted_enc_mode 0x5f26 018282 beq lmp_encryption_key_size_req ,send_lmp_accepted_enc_key 0x5f27 018283 beq lmp_sniff_req ,send_lmp_accept_sniff_req 0x5f28 018284 beq lmp_host_connection_req ,send_lmp_accepted_connection 0x5f29 018285 beq lmp_remove_sco_link_req ,send_lmp_accept_remove_sco_link_req 0x5f2a 018286 beq lmp_dhkey_check ,send_lmp_accept_dhkey_check 0x5f2b 018287 beq lmp_start_encryption_req ,send_create_conn_start_l2cap_timer_sm 0x5f2c 018288 rtn : 018290 send_create_conn_start_l2cap_timer_sm: 0x5f2d 018291 fetch 1 ,mem_conn_sm 0x5f2e 018292 rtn blank 0x5f2f 018293 jam conn_sm_wait_done ,mem_conn_sm 0x5f30 018294 setarg timer_enpt_waite 0x5f31 018295 arg enpt_delay_timer ,queue 0x5f32 018296 branch timer_init : 018298 send_lmp_accept_sniff_req: 0x5f33 018299 force 0x02 ,temp 0x5f34 018300 call hci_send_mode_change 0x5f35 018301 branch sniff_init : 018302 send_lmp_not_accepted: 0x5f36 018303 force 3 ,pdata 0x5f37 018304 call msg_send_lmp 0x5f38 018305 fetch 1 ,mem_lmi_opcode 0x5f39 018306 beq lmp_au_rand ,send_not_accept_aurand 0x5f3a 018307 istore 1 ,contw 0x5f3b 018308 fetch 1 ,mem_lmo_reason 0x5f3c 018309 istore 1 ,contw 0x5f3d 018310 branch send_lmp_follow : 018312 send_not_accept_aurand: 0x5f3e 018313 istore 1 ,contw 0x5f3f 018314 fetch 1 ,mem_lmo_reason 0x5f40 018315 istore 1 ,contw 0x5f41 018316 arg mem_sres_tid ,temp 0x5f42 018317 branch special_tid_store : 018319 send_lmpext_accepted: 0x5f43 018320 force 4 ,queue 0x5f44 018321 call send_lmpext 0x5f45 018322 setarg lmp_escape 0x5f46 018323 istore 1 ,contw 0x5f47 018324 fetch 1 ,mem_lmi_opcode 0x5f48 018325 set0 7 ,pdata 0x5f49 018326 istore 1 ,contw 0x5f4a 018327 fetch 1 ,mem_lmi_opcode 0x5f4b 018328 beq lmp_ext_esco_link_req ,send_lmp_accptsco 0x5f4c 018329 call send_lmp_follow 0x5f4d 018330 fetch 1 ,mem_lmi_opcode 0x5f4e 018331 beq lmp_ext_remove_esco_req ,send_lmp_accept_remove_sco_link_req 0x5f4f 018332 rtn : 018334 send_lmpext_not_accepted: 0x5f50 018335 force 5 ,queue 0x5f51 018336 call send_lmpext 0x5f52 018337 setarg lmp_escape 0x5f53 018338 istore 1 ,contw 0x5f54 018339 fetch 1 ,mem_lmi_opcode 0x5f55 018340 set0 7 ,pdata 0x5f56 018341 istore 1 ,contw 0x5f57 018342 fetch 1 ,mem_lmo_reason 0x5f58 018343 istore 1 ,contw 0x5f59 018344 branch send_lmp_follow : 018346 send_lmp_accptsco: 0x5f5a 018347 call play_sco 0x5f5b 018348 arg mem_accptsco_tid ,temp 0x5f5c 018349 branch special_tid_store : 018352 send_lmp_accepted_inrand: 0x5f5d 018353 call clear_linkkey 0x5f5e 018354 call tid_check 0x5f5f 018355 rtn true 0x5f60 018356 branch lmp_generate_key : 018358 send_lmp_accepted_enc_mode: 0x5f61 018359 fetch 1 ,mem_op 0x5f62 018360 bbit1 op_start_enc ,send_lmp_accepted_enc_start 0x5f63 018361 rtnbit0 op_stop_enc 0x5f64 018362 jam lmp_stop_encryption_req ,mem_lmo_opcode2 0x5f65 018363 set0 op_stop_enc ,pdata 0x5f66 018364 call tid_reply 0x5f67 018365 branch send_lmp_accepted_enc_exit : 018366 send_lmp_accepted_enc_start: 0x5f68 018367 jam lmp_encryption_key_size_req ,mem_lmo_opcode2 0x5f69 018368 set0 op_start_enc ,pdata : 018369 send_lmp_accepted_enc_exit: 0x5f6a 018370 store 1 ,mem_op 0x5f6b 018371 rtn : 018373 send_lmp_accepted_enc_key: 0x5f6c 018374 call check_localsm 0x5f6d 018375 branch lmp_start_encryption ,true 0x5f6e 018376 rtn : 018378 send_lmp_accepted_connection: 0x5f6f 018380 fetch 1 ,mem_lmp_conn_state 0x5f70 018381 set1 received_conn_req ,pdata 0x5f71 018382 store 1 ,mem_lmp_conn_state 0x5f72 018383 jam bt_evt_bb_connected ,mem_fifo_temp 0x5f73 018384 branch ui_ipc_send_event : 018387 send_lmp_accept_remove_sco_link_req: 0x5f74 018388 rtn : 018390 send_lmp_accept_dhkey_check: 0x5f75 018391 rtn : 018395 send_lmpext_features_res: 0x5f76 018396 force 12 ,queue 0x5f77 018397 call send_lmpext 0x5f78 018398 setarg 0x01 0x5f79 018399 istore 1 ,contw 0x5f7a 018400 fetch 2 ,mem_lmpext_ssp_enable 0x5f7b 018401 istore 2 ,contw 0x5f7c 018402 setarg 0 0x5f7d 018403 istore 3 ,contw 0x5f7e 018404 setarg 0x00 0x5f7f 018405 istore 4 ,contw 0x5f80 018406 branch send_lmp_reply : 018407 send_lmpext_io_cap_res: 0x5f81 018409 force 5 ,queue 0x5f82 018410 call send_lmpext 0x5f83 018411 fetch 1 ,mem_device_option 0x5f84 018412 beq dvc_op_hci ,send_lmpext_io_cap_res_hci 0x5f85 018413 setarg 0x040003 0x5f86 018414 istore 3 ,contw 0x5f87 018415 store 3 ,mem_sp_iocap_local 0x5f88 018416 branch send_lmp_reply : 018417 send_lmpext_io_cap_res_hci: 0x5f89 018418 fetch 3 ,mem_sp_iocap_local 0x5f8a 018419 istore 3 ,contw 0x5f8b 018420 branch send_lmp_reply : 018422 send_lmp_io_cap_req: 0x5f8c 018423 force 5 ,queue 0x5f8d 018424 call send_lmpext 0x5f8e 018425 fetch 3 ,mem_sp_iocap_local 0x5f8f 018426 istore 3 ,contw 0x5f90 018427 branch send_lmp_request : 018430 send_lmpext_sniff_subrating_req: 0x5f91 018432 rtn : 018433 send_lmpext_sniff_subrating_res: 0x5f92 018434 force 9 ,queue 0x5f93 018435 call send_lmpext 0x5f94 018436 fetch 1 ,mem_subsniff_rate 0x5f95 018437 istore 1 ,contw 0x5f96 018438 fetch 2 ,mem_subsniff_tcmax 0x5f97 018439 istore 2 ,contw 0x5f98 018440 fetch 4 ,mem_subsniff_instant 0x5f99 018441 istore 4 ,contw 0x5f9a 018442 branch send_lmp_reply : 018444 send_lmp_name_res: 0x5f9b 018445 force 17 ,pdata 0x5f9c 018446 call msg_send_lmp 0x5f9d 018447 fetch 1 ,mem_lmi_opcode 0x5f9e 018448 copy pdata ,temp 0x5f9f 018449 beq 0x00 ,send_lmp_name_res_offset_ok 0x5fa0 018450 beq 0x0e ,send_lmp_name_res_offset_ok 0x5fa1 018451 beq 0x1c ,send_lmp_name_res_offset_ok 0x5fa2 018452 rtn : 018453 send_lmp_name_res_offset_ok: 0x5fa3 018454 istore 1 ,contw 0x5fa4 018455 fetch 1 ,mem_local_name_length 0x5fa5 018456 istore 1 ,contw 0x5fa6 018457 copy pdata ,loopcnt 0x5fa7 018458 setarg mem_local_name 0x5fa8 018459 iadd temp ,contr 0x5fa9 018460 call memcpy 0x5faa 018461 branch send_lmp_reply : 018464 send_lmp_timing_accuracy_res: 0x5fab 018465 force 3 ,pdata 0x5fac 018466 call msg_send_lmp 0x5fad 018467 setarg 0x0114 0x5fae 018468 istore 2 ,contw 0x5faf 018469 branch send_lmp_reply : 018471 send_lmp_clkoffset_res: 0x5fb0 018473 force 3 ,pdata 0x5fb1 018474 call msg_send_lmp 0x5fb2 018475 fetch 4 ,mem_clke_bt 0x5fb3 018476 isub clkn_bt ,pdata 0x5fb4 018477 branch send_lmp_clkoffset_res_master ,master 0x5fb5 018478 sub pdata ,0 ,pdata : 018479 send_lmp_clkoffset_res_master: 0x5fb6 018481 rshift2 pdata ,pdata 0x5fb7 018482 set0 15 ,pdata 0x5fb8 018483 istore 2 ,contw 0x5fb9 018484 branch send_lmp_reply : 018486 send_lmp_version_res: 0x5fba 018487 force 6 ,pdata 0x5fbb 018488 call msg_send_lmp 0x5fbc 018489 fetch 5 ,mem_lmp_version 0x5fbd 018490 istore 5 ,contw 0x5fbe 018491 branch send_lmp_reply : 018493 send_lmp_features_res: 0x5fbf 018494 force 9 ,pdata 0x5fc0 018495 call msg_send_lmp 0x5fc1 018496 fetch 8 ,mem_features 0x5fc2 018497 istore 8 ,contw 0x5fc3 018498 branch send_lmp_reply : 018504 send_lmpext_esco_req: 0x5fc4 018505 branch send_lmpext_esco_req_master ,master 0x5fc5 018508 branch send_lmpext_esco_req_slave : 018509 send_lmpext_esco_req_master: 0x5fc6 018510 jam 0x07 ,mem_esco_addr : 018511 send_lmpext_esco_req_slave: 0x5fc7 018512 jam 0 ,mem_esco_desco 0x5fc8 018513 force 16 ,queue 0x5fc9 018514 call send_lmpext 0x5fca 018515 fetch 1 ,mem_sco_handle 0x5fcb 018516 istore 1 ,contw 0x5fcc 018517 fetch 1 ,mem_esco_addr 0x5fcd 018518 istore 1 ,contw 0x5fce 018519 setarg 0 0x5fcf 018520 istore 1 ,contw 0x5fd0 018521 fetch 1 ,mem_esco_desco 0x5fd1 018522 istore 1 ,contw 0x5fd2 018523 setarg 6 0x5fd3 018524 istore 1 ,contw 0x5fd4 018525 setarg 2 0x5fd5 018526 istore 1 ,contw 0x5fd6 018527 setarg 7 0x5fd7 018528 istore 1 ,contw 0x5fd8 018529 istore 1 ,contw 0x5fd9 018530 setarg 30 0x5fda 018531 istore 2 ,contw 0x5fdb 018532 istore 2 ,contw 0x5fdc 018533 fetch 1 ,mem_air_mode 0x5fdd 018534 istore 1 ,contw 0x5fde 018535 fetch 1 ,mem_neogotiation_state 0x5fdf 018536 istore 1 ,contw 0x5fe0 018537 nbranch send_lmp_reply ,blank 0x5fe1 018538 branch send_lmp_reply ,master 0x5fe2 018539 branch send_lmp_request : 018541 send_lmpext_remove_esco: 0x5fe3 018542 force 4 ,queue 0x5fe4 018543 call send_lmpext 0x5fe5 018544 fetch 1 ,mem_sco_handle 0x5fe6 018545 istore 1 ,contw 0x5fe7 018546 fetch 1 ,mem_disconn_reason_send 0x5fe8 018547 istore 1 ,contw 0x5fe9 018548 fetch 1 ,mem_esco_saved_arq 0x5fea 018549 store 1 ,mem_arq 0x5feb 018550 branch send_lmp_request : 018553 send_lmpext_features_req: 0x5fec 018554 force 12 ,queue 0x5fed 018555 call send_lmpext 0x5fee 018556 setarg 0x01 0x5fef 018557 istore 1 ,contw 0x5ff0 018558 fetch 2 ,mem_lmpext_ssp_enable 0x5ff1 018559 istore 2 ,contw 0x5ff2 018560 setarg 0 0x5ff3 018561 istore 3 ,contw 0x5ff4 018562 setarg 0x00 0x5ff5 018563 istore 4 ,contw 0x5ff6 018564 branch send_lmp_request : 018566 send_lmpext_packet_type_table_req: 0x5ff7 018567 force 3 ,queue 0x5ff8 018568 call send_lmpext 0x5ff9 018569 fetch 1 ,mem_ptt 0x5ffa 018570 istore 1 ,contw 0x5ffb 018571 disable user 0x5ffc 018572 call send_lmp_request 0x5ffd 018573 nrtn user 0x5ffe 018574 nrtn master 0x5fff 018575 fetch 1 ,mem_afh_cfg 0x6000 018576 rtnbit0 afh_cfg_on 0x6001 018577 call afh_init 0x6002 018578 branch afh_open_all_channels : 018581 ssp_enable: 0x6003 018582 fetch 1 ,mem_features + 6 0x6004 018583 set1 param_featrue_ssp ,pdata 0x6005 018584 store 1 ,mem_features + 6 0x6006 018585 setarg param_lmpext_ssp_enable 0x6007 018586 store 2 ,mem_lmpext_ssp_enable 0x6008 018587 rtn : 018589 ssp_disable: 0x6009 018590 fetch 1 ,mem_features + 6 0x600a 018591 set0 param_featrue_ssp ,pdata 0x600b 018592 store 1 ,mem_features + 6 0x600c 018593 setarg 0 0x600d 018594 store 2 ,mem_lmpext_ssp_enable 0x600e 018595 rtn : 018597 afh_init: 0x600f 018598 jam 0x3 ,mem_afh_cfg 0x6010 018599 setarg 0 0x6011 018600 store 4 ,mem_afh_timer 0x6012 018601 arg mem_afh_map_lo ,contw 0x6013 018602 call afh_reset_map 0x6014 018603 arg mem_afh_map_new ,contw 0x6015 018604 call afh_reset_map 0x6016 018605 arg mem_afh_classify_channel_map ,contw 0x6017 018606 call afh_reset_map 0x6018 018607 branch afh_clear_error_counter : 018608 afh_open_all_channels: 0x6019 018609 arg mem_afh_map_new ,contw 0x601a 018610 call afh_reset_map 0x601b 018611 call afh_clear_error_counter 0x601c 018612 branch afh_set_send_flag : 018615 afh_open_classify_map: 0x601d 018616 fetch 5 ,mem_afh_classify_channel_map 0x601e 018617 store 5 ,mem_afh_map_new 0x601f 018618 ifetch 5 ,contr 0x6020 018619 istore 5 ,contw 0x6021 018620 call afh_clear_error_counter 0x6022 018621 branch afh_set_send_flag : 018623 afh_reset_map: 0x6023 018624 setarg 0xffffff 0x6024 018625 istore 3 ,contw 0x6025 018626 istore 3 ,contw 0x6026 018627 istore 3 ,contw 0x6027 018628 setarg 0x7f 0x6028 018629 istore 1 ,contw 0x6029 018630 rtn : 018631 afh_clear_error_counter: 0x602a 018632 setarg 0 0x602b 018633 store 2 ,mem_afh_error_total 0x602c 018634 rtn : 018635 afh_set_send_flag: 0x602d 018636 fetch 1 ,mem_afh_cfg 0x602e 018637 set1 send_lmp_set_afh ,pdata 0x602f 018638 store 1 ,mem_afh_cfg 0x6030 018639 rtn : 018640 send_set_afh: 0x6031 018641 nrtn master 0x6032 018642 force 16 ,pdata 0x6033 018643 call msg_send_lmp 0x6034 018644 deposit clkn_bt 0x6035 018645 arg 476 ,temp 0x6036 018646 iadd temp ,pdata 0x6037 018647 rshift pdata ,pdata 0x6038 018648 increase 1 ,pdata 0x6039 018649 set0 0 ,pdata 0x603a 018650 istore 4 ,contw 0x603b 018651 copy pdata ,temp 0x603c 018652 setarg 1 0x603d 018653 istore 1 ,contw 0x603e 018654 fetch 5 ,mem_afh_map_new 0x603f 018655 istore 5 ,contw 0x6040 018656 ifetch 5 ,contr 0x6041 018657 istore 5 ,contw 0x6042 018658 lshift temp ,temp 0x6043 018659 storet 4 ,mem_afh_instant 0x6044 018660 call send_lmp_request 0x6045 018661 fetch 1 ,mem_mode 0x6046 018662 set1 afh_change ,pdata 0x6047 018663 store 1 ,mem_mode 0x6048 018664 jam 1 ,mem_afh_new_mod 0x6049 018665 fetch 4 ,mem_afh_instant 0x604a 018666 arg timer_one_minute ,temp 0x604b 018667 iadd temp ,pdata 0x604c 018668 store 4 ,mem_afh_timer 0x604d 018669 fetch 1 ,mem_afh_cfg 0x604e 018670 rtnbit1 afh_cfg_master_sent_req 0x604f 018671 jam lmp_ext_chn_classification_req ,mem_lmo_opcode2 0x6050 018672 rtn : 018675 send_lmpext_pause_encryption_req: 0x6051 018676 force 2 ,queue 0x6052 018677 call send_lmpext 0x6053 018678 nbranch send_lmp_reply ,master 0x6054 018680 branch send_lmp_request : 018684 send_lmp_detach: 0x6055 018685 force 2 ,pdata 0x6056 018686 call msg_send_lmp 0x6057 018687 fetch 1 ,mem_disconn_reason_send 0x6058 018688 istore 1 ,contw 0x6059 018689 call send_lmp_request : 018690 prepare_disconnect: 0x605a 018691 fetch 1 ,mem_op 0x605b 018692 set1 op_disconn ,pdata 0x605c 018693 store 1 ,mem_op 0x605d 018694 jam 50 ,mem_conn_timer 0x605e 018695 rtn : 018698 send_lmp_no_payload: 0x605f 018699 force 1 ,pdata 0x6060 018700 call msg_send_lmp 0x6061 018701 branch send_lmp_request : 018702 send_lmp_nopayload_reply: 0x6062 018703 force 1 ,pdata 0x6063 018704 call msg_send_lmp 0x6064 018705 branch send_lmp_reply : 018708 send_lmp_encryption_mode_req: 0x6065 018709 force 2 ,pdata 0x6066 018710 call msg_send_lmp 0x6067 018711 fetch 1 ,mem_state_map 0x6068 018712 isolate0 smap_encryption ,pdata 0x6069 018713 setflag true ,0 ,pdata 0x606a 018714 and_into 1 ,pdata 0x606b 018715 istore 1 ,contw 0x606c 018716 branch send_lmp_request : 018719 send_lmp_superto: 0x606d 018720 force 3 ,pdata 0x606e 018721 call msg_send_lmp 0x606f 018722 fetch 2 ,mem_supervision_to 0x6070 018723 istore 2 ,contw 0x6071 018724 branch send_lmp_request : 018726 send_lmp_name_req: 0x6072 018727 jam 250 ,mem_conn_timer 0x6073 018728 force 2 ,pdata 0x6074 018729 call msg_send_lmp 0x6075 018730 fetch 1 ,mem_name_offset 0x6076 018731 istore 1 ,contw 0x6077 018732 branch send_lmp_request : 018734 send_lmp_test_control: 0x6078 018735 force 10 ,pdata 0x6079 018736 call msg_send_lmp 0x607a 018737 arg mem_temp_payload ,contr 0x607b 018738 force 9 ,loopcnt : 018739 send_lmp_test_control_loop: 0x607c 018740 ifetch 1 ,contr 0x607d 018741 xor_into 0x55 ,pdata 0x607e 018742 istore 1 ,contw 0x607f 018743 loop send_lmp_test_control_loop 0x6080 018744 branch send_lmp_request : 018746 send_lmp_quality_of_service_req: 0x6081 018747 branch send_lmp_request : 018748 send_lmp_unit_key: 0x6082 018749 branch send_lmp_request : 018751 send_lmp_slot_offset: 0x6083 018752 rtn master 0x6084 018753 call calc_slot_offset 0x6085 018754 force 9 ,pdata 0x6086 018755 call msg_send_lmp 0x6087 018756 fetch 2 ,mem_slot_offset 0x6088 018757 istore 2 ,contw 0x6089 018758 fetch 3 ,mem_lap 0x608a 018759 istore 3 ,contw 0x608b 018760 fetch 1 ,mem_uap 0x608c 018761 istore 1 ,contw 0x608d 018762 fetch 2 ,mem_nap 0x608e 018763 istore 2 ,contw 0x608f 018764 bmark0 mark_switch_initiated ,send_lmp_slot_offset_reply 0x6090 018765 set0 mark_switch_initiated ,mark 0x6091 018766 call send_lmp_request 0x6092 018767 jam lmp_switch_req ,mem_lmo_opcode2 0x6093 018768 rtn : 018769 send_lmp_slot_offset_reply: 0x6094 018770 call send_lmp_reply 0x6095 018771 jam lmp_accepted ,mem_lmo_opcode2 0x6096 018772 jam lmp_switch_req ,mem_lmi_opcode2 0x6097 018773 rtn : 018775 send_lmp_switch_req: 0x6098 018776 arg 0x200 ,temp 0x6099 018777 branch switch_on_native ,master 0x609a 018778 deposit clke_bt 0x609b 018779 branch switch_slack : 018780 switch_on_native: 0x609c 018781 deposit clkn_bt : 018782 switch_slack: 0x609d 018783 deposit bt_clk 0x609e 018784 iadd temp ,pdata 0x609f 018785 and_into 0x1fc ,pdata 0x60a0 018786 store 4 ,mem_sniff_anchor 0x60a1 018787 force 5 ,pdata 0x60a2 018788 call msg_send_lmp 0x60a3 018789 fetch 4 ,mem_sniff_anchor 0x60a4 018790 rshift pdata ,pdata 0x60a5 018791 istore 4 ,contw 0x60a6 018792 branch send_lmp_request : 018794 send_lmp_sniff_req: 0x60a7 018795 force 10 ,pdata 0x60a8 018796 call msg_send_lmp 0x60a9 018797 arg mem_sniff_payload ,contr 0x60aa 018798 ifetch 9 ,contr 0x60ab 018799 istore 9 ,contw 0x60ac 018800 branch send_lmp_request : 018803 send_lmp_timing_accuracy_req: 0x60ad 018805 force 3 ,pdata 0x60ae 018806 call msg_send_lmp 0x60af 018807 setarg 0x0114 0x60b0 018808 istore 2 ,contw 0x60b1 018809 branch send_lmp_request : 018811 send_lmp_unsniff_req: 0x60b2 018813 force 1 ,pdata 0x60b3 018814 call msg_send_lmp 0x60b4 018823 branch send_lmp_request : 018825 send_lmp_sco_link_req: 0x60b5 018826 branch send_lmp_sco_link_master ,master 0x60b6 018827 jam 0x00 ,mem_sco_handle 0x60b7 018828 fetch 1 ,mem_mode 0x60b8 018829 set1 send_sco_when_slave ,pdata 0x60b9 018830 store 1 ,mem_mode : 018831 send_lmp_sco_link_master: 0x60ba 018832 jam 0 ,mem_esco_desco 0x60bb 018833 force 7 ,pdata 0x60bc 018834 call msg_send_lmp 0x60bd 018835 fetch 1 ,mem_sco_handle 0x60be 018836 istore 1 ,contw 0x60bf 018837 setarg 0x00 0x60c0 018838 istore 1 ,contw 0x60c1 018839 fetch 1 ,mem_esco_desco 0x60c2 018840 istore 1 ,contw 0x60c3 018841 setarg 0x06 0x60c4 018842 istore 1 ,contw 0x60c5 018843 setarg 0x02 0x60c6 018844 istore 1 ,contw 0x60c7 018845 fetch 1 ,mem_air_mode 0x60c8 018846 istore 1 ,contw 0x60c9 018847 branch send_lmp_reply ,master 0x60ca 018848 branch send_lmp_tid : 018850 send_lmp_remove_sco_link_req: 0x60cb 018852 force 3 ,pdata 0x60cc 018853 call msg_send_lmp 0x60cd 018854 fetch 1 ,mem_sco_handle 0x60ce 018855 istore 1 ,contw 0x60cf 018856 force other_end_terminated ,pdata 0x60d0 018857 istore 1 ,contw 0x60d1 018858 branch send_lmp_request : 018860 send_lmp_max_slot: 0x60d2 018861 force 2 ,pdata 0x60d3 018862 call msg_send_lmp 0x60d4 018863 fetch 1 ,mem_max_slot 0x60d5 018864 istore 1 ,contw 0x60d6 018865 branch send_lmp_request : 018868 send_lmp_max_slot_req: 0x60d7 018869 force 2 ,pdata 0x60d8 018870 call msg_send_lmp 0x60d9 018871 setarg 0x05 0x60da 018872 istore 1 ,contw 0x60db 018873 branch send_lmp_request : 018875 send_lmp_setup_complete: 0x60dc 018876 fetch 1 ,mem_state 0x60dd 018877 set1 state_conn_comp ,pdata 0x60de 018878 store 1 ,mem_state 0x60df 018879 copy clkn_bt ,pdata 0x60e0 018880 store 4 ,mem_aurand_send_delay_time 0x60e1 018881 fetch 1 ,mem_lmp_conn_state 0x60e2 018882 bbit1 sent_setup_complete ,send_lmp_setup_complete_has_sent 0x60e3 018883 set1 sent_setup_complete ,pdata 0x60e4 018884 store 1 ,mem_lmp_conn_state 0x60e5 018885 jam bt_evt_setup_complete ,mem_fifo_temp 0x60e6 018886 call ui_ipc_send_event 0x60e7 018887 call hci_send_connection_complete 0x60e8 018888 force 1 ,pdata 0x60e9 018889 call msg_send_lmp 0x60ea 018890 branch send_lmp_request : 018891 send_lmp_setup_complete_has_sent: 0x60eb 018892 jam 0 ,mem_lmp_to_send 0x60ec 018893 rtn : 018895 send_lmp_version_req: 0x60ed 018896 force 6 ,pdata 0x60ee 018897 call msg_send_lmp 0x60ef 018898 fetch 5 ,mem_lmp_version 0x60f0 018899 istore 5 ,contw 0x60f1 018900 branch send_lmp_request : 018902 send_lmp_features_req: 0x60f2 018903 force 9 ,pdata 0x60f3 018904 call msg_send_lmp 0x60f4 018905 fetch 8 ,mem_features 0x60f5 018906 istore 8 ,contw 0x60f6 018907 branch send_lmp_request : 018909 sp_master_send_io_cap_get: 0x60f7 018910 call hci_send_io_cap_req_event 0x60f8 018911 fetch 1 ,mem_device_option 0x60f9 018912 beq dvc_op_hci ,sp_master_send_io_cap_get_hci 0x60fa 018913 jam sp_flag_commit ,mem_master_sp_flag 0x60fb 018914 fetch 1 ,mem_sp_local_key_invalid 0x60fc 018915 rtnne sp_key_valid : 018916 sp_master_send_io_cap_get_hci: 0x60fd 018917 jam sp_master_stat_start_done ,mem_master_sp_state 0x60fe 018918 rtn : 018920 sp_master_send_io_cap_send: 0x60ff 018921 call tid_initiate 0x6100 018922 jam lmp_io_cap_req ,mem_lmo_opcode2 0x6101 018923 jam sp_stat_key_send ,mem_master_sp_state 0x6102 018924 rtn : 018927 sp_master_send_lmp_encapsulated_header: 0x6103 018928 call tid_initiate 0x6104 018929 jam lmp_encapsulated_header ,mem_lmo_opcode2 0x6105 018930 jam sp_stat_random_send ,mem_master_sp_state 0x6106 018931 rtn : 018933 sp_master_commitment_compare: 0x6107 018934 arg mem_sp_calc_result_high ,rega 0x6108 018935 arg mem_sp_confirm_remote ,regb 0x6109 018936 arg 16 ,loopcnt 0x610a 018937 call string_compare 0x610b 018938 branch sp_master_commitment_compare_success ,zero 0x610c 018939 jam sp_stat_null ,mem_master_sp_state 0x610d 018940 call master_clear_mem_master_sp_flag 0x610e 018941 jam pdu_not_allowed ,mem_lmo_reason2 0x610f 018942 jam lmp_simple_pairing_number ,mem_lmi_opcode2 0x6110 018943 branch reject_lmp_packet : 018944 sp_master_commitment_compare_success: 0x6111 018945 jam sp_stat_confirm_calc ,mem_master_sp_state 0x6112 018946 call master_set_mem_master_sp_flag 0x6113 018947 jam lmp_simple_pairing_number ,mem_lmi_opcode2 0x6114 018948 branch accept_lmp_msg : 018952 sp_master_send_lmp_simple_pairing_number: 0x6115 018953 jam lmp_simple_pairing_number ,mem_lmo_opcode2 0x6116 018954 rtn : 018958 sp_send_lmp_encapsulated_header: 0x6117 018961 jam lmp_encapsulated_header ,mem_lmo_opcode2 0x6118 018963 rtn : 018969 send_lmp_encapsulated_header: 0x6119 018970 jam 0 ,mem_sp_local_key_send_count 0x611a 018971 force 4 ,pdata 0x611b 018972 call msg_send_lmp 0x611c 018973 force encapsulated_major_type_p192 ,pdata 0x611d 018974 istore 1 ,contw 0x611e 018975 force encapsulated_minor_type_p192 ,pdata 0x611f 018976 istore 1 ,contw 0x6120 018977 force encapsulated_len_p192 ,pdata 0x6121 018978 istore 1 ,contw 0x6122 018979 call check_localsm 0x6123 018980 branch send_lmp_request ,true 0x6124 018981 branch send_lmp_reply : 018983 send_lmp_encapsulated_payload: 0x6125 018985 force 17 ,pdata 0x6126 018986 call msg_send_lmp 0x6127 018987 fetch 1 ,mem_sp_local_key_send_count 0x6128 018988 arg mem_sp_pubkey_local ,contr 0x6129 018989 iadd contr ,contr 0x612a 018990 ifetch 8 ,contr 0x612b 018991 istore 8 ,contw 0x612c 018992 ifetch 8 ,contr 0x612d 018993 istore 8 ,contw 0x612e 018994 fetch 1 ,mem_sp_local_key_send_count 0x612f 018995 increase 16 ,pdata 0x6130 018996 store 1 ,mem_sp_local_key_send_count 0x6131 018997 call check_localsm 0x6132 018998 branch send_lmp_request ,true 0x6133 018999 branch send_lmp_reply : 019002 sp_send_lmp_simple_pairing_comfirm: 0x6134 019003 jam sp_stat_random_recv ,mem_sp_state 0x6135 019004 jam lmp_simple_pairing_confirm ,mem_lmo_opcode2 0x6136 019005 rtn : 019006 send_lmp_simple_pairing_comfirm: 0x6137 019009 force 17 ,pdata 0x6138 019010 call msg_send_lmp 0x6139 019011 arg mem_sp_calc_result_high ,contr 0x613a 019012 ifetch 8 ,contr 0x613b 019013 istore 8 ,contw 0x613c 019014 ifetch 8 ,contr 0x613d 019015 istore 8 ,contw 0x613e 019016 branch send_lmp_reply : 019018 sp_send_lmp_simple_pairing_number: 0x613f 019019 call lmo_fifo_process 0x6140 019021 jam lmp_simple_pairing_number ,mem_lmo_opcode2 0x6141 019022 rtn : 019024 send_lmp_simple_pairing_number: 0x6142 019026 call check_localsm 0x6143 019027 call sp_local_random_key_generator ,true 0x6144 019028 force 17 ,pdata 0x6145 019029 call msg_send_lmp 0x6146 019030 arg mem_sp_random_local ,contr 0x6147 019031 ifetch 8 ,contr 0x6148 019032 istore 8 ,contw 0x6149 019033 ifetch 8 ,contr 0x614a 019034 istore 8 ,contw 0x614b 019035 call check_localsm 0x614c 019036 nbranch send_lmp_reply ,true 0x614d 019037 branch send_lmp_request ,true : 019039 master_sp_sm_end: 0x614e 019041 jam sp_stat_done ,mem_master_sp_state : 019042 sp_aurand_send: 0x614f 019043 call tid_initiate 0x6150 019044 jam lmp_au_rand ,mem_lmo_opcode2 0x6151 019045 call check_localsm_master 0x6152 019046 branch sp_master_key_prarm_push ,true 0x6153 019047 branch sp_link_key_prarm_push : 019048 master_sp_send_lmp_dhkey_check: 0x6154 019049 call tid_reply : 019050 sp_send_lmp_dhkey_check: 0x6155 019051 jam lmp_dhkey_check ,mem_lmo_opcode2 0x6156 019052 rtn : 019053 send_lmp_dhkey_check: 0x6157 019055 force 17 ,pdata 0x6158 019056 call msg_send_lmp 0x6159 019057 arg mem_sp_calc_result_high ,contr 0x615a 019058 ifetch 8 ,contr 0x615b 019059 istore 8 ,contw 0x615c 019060 ifetch 8 ,contr 0x615d 019061 istore 8 ,contw 0x615e 019062 call check_localsm 0x615f 019063 nbranch send_lmp_reply ,true 0x6160 019064 branch send_lmp_request ,true : 019066 send_lmp_enc_key_size_mask_res: 0x6161 019067 force 3 ,pdata 0x6162 019068 call msg_send_lmp 0x6163 019069 setarg 0xfffe 0x6164 019070 istore 2 ,contw 0x6165 019071 branch send_lmp_reply : 019073 send_lmp_auto_rate: 0x6166 019074 branch send_lmp_request : 019075 send_lmp_clkoffset_req: 0x6167 019076 branch send_lmp_request : 019077 send_lmp_quality_of_service: 0x6168 019078 branch send_lmp_request : 019079 send_lmp_test_activate: 0x6169 019080 branch send_lmp_request : 019085 send_lmp_comb_key: 0x616a 019086 call generate_random_number 0x616b 019087 arg mem_lap ,rega 0x616c 019088 call generate_linkkey 0x616d 019089 force 17 ,pdata 0x616e 019090 call msg_send_lmp 0x616f 019091 arg mem_kinit ,rega 0x6170 019092 arg mem_random_number ,regb 0x6171 019093 call xor16 0x6172 019094 nbranch send_lmp_follow ,master 0x6173 019095 branch send_lmp_tid : 019097 send_lmp_inrand: 0x6174 019098 call generate_random_number 0x6175 019099 arg mem_plap ,rega 0x6176 019100 call generate_kinit : 019101 send_lmp_rand: 0x6177 019102 force 17 ,pdata 0x6178 019103 call msg_send_lmp 0x6179 019104 arg mem_random_number ,contr 0x617a 019105 call memcpy16 0x617b 019106 fetch 1 ,mem_conn_sm 0x617c 019107 beq conn_sm_auth_wait ,send_lmp_request 0x617d 019108 beq conn_sm_pairing_wait ,send_lmp_request 0x617e 019109 branch send_lmp_tid : 019111 send_lmp_aurand: 0x617f 019112 fetch 1 ,mem_pairing_auth 0x6180 019113 branch send_lmp_aurand_notpairing ,blank 0x6181 019114 call check_localsm 0x6182 019115 call tid_initiate ,true 0x6183 019116 ncall tid_reply ,true 0x6184 019117 branch send_lmp_aurand_common : 019118 send_lmp_aurand_notpairing: 0x6185 019119 call tid_initiate : 019120 send_lmp_aurand_common: 0x6186 019121 call generate_random_number 0x6187 019122 branch send_lmp_rand : 019124 send_lmp_sres: 0x6188 019125 arg mem_lap ,rega 0x6189 019126 call function_e1 0x618a 019127 force 5 ,pdata 0x618b 019128 call msg_send_lmp 0x618c 019129 fetch 4 ,mem_input_store 0x618d 019130 istore 4 ,contw 0x618e 019131 arg mem_sres_tid ,temp 0x618f 019132 call special_tid_store 0x6190 019133 call copy_aco 0x6191 019134 call check_localsm 0x6192 019135 branch send_lmp_sres_master ,true 0x6193 019136 jam done_encryp ,mem_wait_encryption 0x6194 019137 fetch 1 ,mem_pairing_auth 0x6195 019138 rtn blank 0x6196 019139 jam lmp_au_rand ,mem_lmo_opcode2 : 019140 send_lmp_sres_master: 0x6197 019141 fetch 1 ,mem_link_key_exists 0x6198 019142 rtn blank 0x6199 019143 call check_localsm 0x619a 019144 call hci_send_linkkey_notification ,true : 019145 send_lmp_sres_startenc: 0x619b 019146 call check_localsm 0x619c 019147 nbranch send_lmp_sres_startenc_slave ,true 0x619d 019148 fetch 1 ,mem_auth_enable 0x619e 019149 rtn blank 0x619f 019150 jam lmp_encryption_mode_req ,mem_lmo_opcode2 0x61a0 019151 rtn : 019152 send_lmp_sres_startenc_slave: 0x61a1 019153 rtnmark0 mark_slave_in_rand_accepted 0x61a2 019154 set0 mark_slave_in_rand_accepted ,mark 0x61a3 019155 jam lmp_encryption_mode_req ,mem_lmo_opcode2 0x61a4 019156 rtn : 019160 send_lmp_start_encryption: 0x61a5 019161 call generate_random_number 0x61a6 019162 call function_e3 0x61a7 019163 force 17 ,pdata 0x61a8 019164 call msg_send_lmp 0x61a9 019165 arg mem_random_number ,contr 0x61aa 019166 call memcpy16 0x61ab 019167 branch send_lmp_tid : 019169 send_lmp_stop_encryption_req: 0x61ac 019170 force 1 ,pdata 0x61ad 019171 call msg_send_lmp 0x61ae 019172 branch send_lmp_tid : 019174 send_lmp_encryption_key_size_req: 0x61af 019175 force 2 ,pdata 0x61b0 019176 call msg_send_lmp 0x61b1 019177 force 16 ,pdata 0x61b2 019178 istore 1 ,contw 0x61b3 019179 store 1 ,mem_key_size 0x61b4 019180 branch send_lmp_tid : 019182 msg_send_lmp: 0x61b5 019184 lshift3 pdata ,pdata 0x61b6 019185 or_into 0x07 ,pdata 0x61b7 019186 store 1 ,mem_lmo_header_length 0x61b8 019187 arg 17 ,loopcnt 0x61b9 019188 arg mem_lmo_payload ,contw 0x61ba 019189 call clear_mem 0x61bb 019190 arg mem_lmo_payload ,contw 0x61bc 019191 rtn : 019193 send_lmpext: 0x61bd 019194 and pdata ,0x7f ,rega 0x61be 019195 jam lmp_escape ,mem_lmp_to_send 0x61bf 019196 deposit queue 0x61c0 019197 call msg_send_lmp 0x61c1 019198 deposit rega 0x61c2 019199 istore 1 ,contw 0x61c3 019200 rtn : 019202 send_lmp_follow: 0x61c4 019203 fetch 1 ,mem_lmp_to_send 0x61c5 019204 lshift pdata ,pdata 0x61c6 019205 fetcht 1 ,mem_state_map 0x61c7 019206 isolate1 smap_lmptid ,temp 0x61c8 019207 setflag true ,0 ,pdata 0x61c9 019208 branch send_lmp_exit : 019211 send_lmp_tid: 0x61ca 019212 fetcht 1 ,mem_state_map 0x61cb 019213 and_into 1 ,temp 0x61cc 019214 branch send_lmp_end : 019216 send_lmp_reply: 0x61cd 019217 force 0 ,temp 0x61ce 019218 branch send_lmp_end : 019220 send_lmp_request: 0x61cf 019221 force 1 ,temp : 019222 send_lmp_end: 0x61d0 019223 fetch 1 ,mem_lmp_to_send 0x61d1 019224 lshift pdata ,pdata 0x61d2 019225 setflag master ,0 ,pdata 0x61d3 019226 ixor temp ,pdata : 019227 send_lmp_exit: 0x61d4 019228 store 1 ,mem_lmo_header_opcode 0x61d5 019229 jam 0 ,mem_lmp_to_send 0x61d6 019230 call lmo_fifo_process_lmo0empty 0x61d7 019231 enable user 0x61d8 019232 rtn : 019234 lmo_fifo_process: 0x61d9 019235 set1 mark_ext_patch ,mark 0x61da 019236 bpatch patch3c_4 ,mem_patch3c 0x61db 019237 fetch 1 ,mem_lmp_to_send 0x61dc 019238 branch lmo_fifo_process_lmo0empty ,blank 0x61dd 019239 fetch 1 ,mem_lmo_opcode1 0x61de 019240 nrtn blank 0x61df 019241 branch lmo_fifo_process_lmo2to1 : 019242 lmo_fifo_process_lmo0empty: 0x61e0 019243 fetch 1 ,mem_lmo_opcode1 0x61e1 019244 branch lmo_fifo_process_lmo1_empty ,blank 0x61e2 019245 fetch 3 ,mem_lmo_opcode1 0x61e3 019246 store 3 ,mem_lmp_to_send 0x61e4 019247 fetcht 1 ,mem_lmo_tid1 0x61e5 019248 fetch 1 ,mem_state_map 0x61e6 019249 set0 smap_lmptid ,pdata 0x61e7 019250 ior temp ,pdata 0x61e8 019251 store 1 ,mem_state_map 0x61e9 019252 jam 0 ,mem_lmo_opcode1 : 019253 lmo_fifo_process_lmo2to1: 0x61ea 019254 fetch 1 ,mem_lmo_opcode2 0x61eb 019255 rtn blank 0x61ec 019256 fetch 4 ,mem_lmo_opcode2 0x61ed 019257 store 4 ,mem_lmo_opcode1 0x61ee 019258 jam 0 ,mem_lmo_opcode2 0x61ef 019259 rtn : 019260 lmo_fifo_process_lmo1_empty: 0x61f0 019261 fetch 1 ,mem_lmo_opcode2 0x61f1 019262 rtn blank 0x61f2 019263 fetch 3 ,mem_lmo_opcode2 0x61f3 019264 store 3 ,mem_lmp_to_send 0x61f4 019265 fetcht 1 ,mem_lmo_tid2 0x61f5 019266 fetch 1 ,mem_state_map 0x61f6 019267 set0 smap_lmptid ,pdata 0x61f7 019268 ior temp ,pdata 0x61f8 019269 store 1 ,mem_state_map 0x61f9 019270 jam 0 ,mem_lmo_opcode2 0x61fa 019271 rtn : 019274 special_tid_store: 0x61fb 019275 set1 mark_ext_patch ,mark 0x61fc 019276 bpatch patch3c_5 ,mem_patch3c 0x61fd 019277 fetch 1 ,mem_state_map 0x61fe 019278 copy pdata ,regc 0x61ff 019279 ifetch 1 ,temp 0x6200 019280 call pop_tid_follow 0x6201 019281 call send_lmp_follow 0x6202 019282 copy regc ,pdata 0x6203 019283 store 1 ,mem_state_map 0x6204 019284 rtn : 019286 tid_reply: 0x6205 019287 fetcht 1 ,mem_state_map 0x6206 019288 set0 smap_lmptidinit ,temp 0x6207 019289 storet 1 ,mem_state_map 0x6208 019290 rtn : 019292 tid_initiate: 0x6209 019293 fetcht 1 ,mem_state_map 0x620a 019294 set1 smap_lmptidinit ,temp 0x620b 019295 storet 1 ,mem_state_map 0x620c 019296 rtn : 019299 tid_check: 0x620d 019300 nsetflag master ,smap_lmptid ,pdata 0x620e 019301 fetcht 1 ,mem_state_map 0x620f 019302 ixor temp ,pdata 0x6210 019303 isolate1 smap_lmptid ,pdata 0x6211 019304 rtn : 019307 tid_set_reply: 0x6212 019308 fetch 1 ,mem_state_map 0x6213 019309 setflag master ,smap_lmptid ,pdata 0x6214 019310 store 1 ,mem_state_map 0x6215 019311 rtn : 019314 check_localsm: 0x6216 019315 fetch 1 ,mem_sp_localsm 0x6217 019316 compare local_statemachine ,pdata ,0x7f 0x6218 019317 rtn : 019318 setlocalsm_master: 0x6219 019319 fetch 1 ,mem_sp_localsm 0x621a 019320 set1 7 ,pdata 0x621b 019321 store 1 ,mem_sp_localsm 0x621c 019322 rtn : 019323 setlocalsm_slave: 0x621d 019324 fetch 1 ,mem_sp_localsm 0x621e 019325 set0 7 ,pdata 0x621f 019326 store 1 ,mem_sp_localsm 0x6220 019327 rtn : 019328 check_localsm_master: 0x6221 019329 fetch 1 ,mem_sp_localsm 0x6222 019330 isolate1 7 ,pdata 0x6223 019331 store 1 ,mem_sp_localsm 0x6224 019332 rtn : 019334 generate_random_number: 0x6225 019336 arg mem_random_number ,contw : 019337 generate_random: 0x6226 019338 force 16 ,loopcnt : 019339 generate_random_another: : 019340 generate_random_loop: 0x6227 019341 random pdata 0x6228 019342 istore 1 ,contw 0x6229 019343 loop generate_random_another 0x622a 019344 rtn : 019346 generate_linkkey: 0x622b 019347 call function_e21 0x622c 019348 arg mem_link_key ,rega 0x622d 019349 arg mem_input_store ,regb 0x622e 019350 ifetch 8 ,rega 0x622f 019351 fetcht 1 ,mem_state 0x6230 019352 nsetflag blank ,state_combkey ,temp 0x6231 019353 storet 1 ,mem_state 0x6232 019354 copy rega ,contw 0x6233 019355 call xor16 0x6234 019356 branch generate_linkkey_continue : 019362 process_conn_sm: 0x6235 019364 set1 mark_ext_patch ,mark 0x6236 019365 bpatch patch3c_6 ,mem_patch3c 0x6237 019366 fetch 1 ,mem_lmo_opcode2 0x6238 019367 branch process_conn_sm_continue ,blank 0x6239 019368 call lmo_fifo_process 0x623a 019369 fetch 1 ,mem_lmo_opcode2 0x623b 019370 nrtn blank : 019371 process_conn_sm_continue: 0x623c 019372 fetch 1 ,mem_conn_sm 0x623d 019373 rtn blank 0x623e 019377 beq conn_sm_send_conn_req ,host_create_conn_send_conn_req 0x623f 019378 beq conn_sm_wait_conn_accept ,host_create_conn_wait_accept 0x6240 019379 beq conn_sm_send_features ,host_create_conn_send_features 0x6241 019380 beq conn_sm_wait_features_res ,host_create_conn_waiting 0x6242 019381 beq conn_sm_send_switch ,host_create_conn_send_switch 0x6243 019382 beq conn_sm_auth_pair ,host_create_conn_auth_pair 0x6244 019383 beq conn_sm_auth_pair_wait ,host_create_conn_auth_pair_wait 0x6245 019384 beq conn_sm_encrypt ,host_create_conn_encrypt 0x6246 019385 beq conn_sm_encrypt_wait ,host_create_conn_encrypt_wait 0x6247 019386 beq conn_sm_encrypt_wait_clear ,host_create_conn_encrypt_wait_clear 0x6248 019387 beq conn_sm_send_setup_complete ,host_create_conn_send_setup_complete 0x6249 019388 beq conn_sm_wait_setup_complete ,host_create_conn_wait_setup_complete 0x624a 019389 beq conn_sm_detach_delay ,host_create_conn_master_detach 0x624b 019390 beq conn_sm_send_version ,host_create_conn_send_version 0x624c 019391 beq conn_sm_wait_version ,host_create_conn_waiting 0x624d 019392 beq conn_sm_wait_switch_after_host_connection ,host_creat_conn_wait_switch 0x624e 019393 beq conn_sm_send_features_ext ,host_creat_conn_send_feat_ext 0x624f 019394 beq conn_sm_wait_features_ext ,host_create_conn_waiting 0x6250 019395 beq conn_sm_pairing ,host_create_conn_pairing 0x6251 019396 beq conn_sm_pairing_wait ,host_create_conn_pairing_wait 0x6252 019397 beq conn_sm_auth ,host_create_conn_auth 0x6253 019398 beq conn_sm_auth_wait ,host_create_conn_auth_wait 0x6254 019399 beq conn_sm_done ,host_create_conn_done 0x6255 019400 beq conn_sm_wait_done ,host_create_conn_done_wait 0x6256 019401 jam conn_sm_standby ,mem_conn_sm 0x6257 019403 rtn : 019404 host_create_conn_done: 0x6258 019405 fetch 1 ,mem_lmp_conn_state 0x6259 019406 rtnbit0 received_setup_complete 0x625a 019407 rtnbit0 sent_setup_complete 0x625b 019408 jam conn_sm_standby ,mem_conn_sm 0x625c 019409 call host_conn_judge_encrypt 0x625d 019410 branch scheduler_start_upper_sm : 019412 host_conn_judge_encrypt: 0x625e 019413 fetch 1 ,mem_connection_options 0x625f 019414 rtnbit0 connection_encrypt 0x6260 019415 jam conn_sm_encrypt_wait ,mem_conn_sm 0x6261 019416 rtn : 019418 host_create_conn_done_wait: 0x6262 019419 arg enpt_delay_timer ,queue 0x6263 019420 call timer_check 0x6264 019421 nrtn blank 0x6265 019422 jam conn_sm_done ,mem_conn_sm 0x6266 019423 rtn : 019425 host_create_conn_auth: 0x6267 019426 fetch 1 ,mem_connection_options 0x6268 019427 set0 connection_auth ,pdata 0x6269 019428 store 1 ,mem_connection_options 0x626a 019429 jam conn_sm_auth_wait ,mem_conn_sm 0x626b 019430 jam lmp_au_rand ,mem_lmo_opcode2 0x626c 019431 rtn : 019432 host_create_conn_auth_wait: 0x626d 019433 rtn : 019434 host_create_conn_pairing: 0x626e 019435 fetch 1 ,mem_pincode_state 0x626f 019436 rtnne pincode_state_pincode_ready 0x6270 019437 call host_auth 0x6271 019438 jam conn_sm_pairing_wait ,mem_conn_sm 0x6272 019439 rtn : 019441 host_create_conn_pairing_wait: 0x6273 019442 rtn : 019443 host_creat_conn_send_feat_ext: 0x6274 019444 jam conn_sm_wait_features_ext ,mem_conn_sm 0x6275 019445 jam lmp_ext_features_req ,mem_lmo_opcode2 0x6276 019446 rtn : 019447 host_create_conn_send_version: 0x6277 019448 jam conn_sm_wait_version ,mem_conn_sm 0x6278 019449 jam lmp_version_req ,mem_lmo_opcode2 0x6279 019450 rtn : 019452 host_creat_conn_wait_switch: 0x627a 019453 fetch 1 ,mem_switch_flag 0x627b 019454 rtneq switch_flag_init 0x627c 019455 beq switch_flag_accept ,host_create_conn_switch_accept 0x627d 019456 arg switch_wait_timer ,queue 0x627e 019457 call timer_check 0x627f 019458 nrtn blank 0x6280 019459 jam switch_flag_init ,mem_switch_flag 0x6281 019460 branch host_create_conn_switch : 019461 host_create_conn_switch_accept: 0x6282 019462 rtn master 0x6283 019463 branch host_create_conn_auth_pair : 019465 host_create_conn_send_features: 0x6284 019466 jam conn_sm_wait_features_res ,mem_conn_sm 0x6285 019467 jam lmp_features_req ,mem_lmo_opcode2 0x6286 019468 rtn : 019469 host_create_conn_send_switch: 0x6287 019470 jam lmp_switch_req ,mem_lmo_opcode2 0x6288 019471 set1 mark_switch_initiated ,mark 0x6289 019472 jam conn_sm_wait_conn_accept ,mem_conn_sm 0x628a 019473 setarg 0x1ff 0x628b 019474 store 2 ,mem_soft_timer 0x628c 019475 rtn : 019476 host_create_conn_send_conn_req: 0x628d 019477 jam conn_sm_wait_conn_accept ,mem_conn_sm 0x628e 019478 jam 0xff ,mem_soft_timer 0x628f 019479 set0 mark_reconn_recieve_switch ,mark 0x6290 019480 jam lmp_host_connection_req ,mem_lmo_opcode2 0x6291 019481 branch init_lmp_reinit : 019482 host_create_conn_wait_accept: 0x6292 019483 rtnmark1 mark_reconn_recieve_switch 0x6293 019484 fetch 2 ,mem_soft_timer 0x6294 019485 sub pdata ,1 ,pdata 0x6295 019486 branch host_create_conn_resend ,zero 0x6296 019487 store 2 ,mem_soft_timer 0x6297 019488 rtn : 019489 host_create_conn_resend: 0x6298 019490 jam conn_sm_send_switch ,mem_conn_sm 0x6299 019491 rtn : 019492 host_create_conn_waiting: 0x629a 019494 rtn : 019496 host_create_conn_switch: 0x629b 019497 fetch 1 ,mem_lmp_conn_state 0x629c 019498 rtnbit0 sent_setup_complete 0x629d 019499 rtnbit0 received_setup_complete 0x629e 019500 fetch 1 ,mem_connection_options 0x629f 019501 set0 connection_switch ,pdata 0x62a0 019502 store 1 ,mem_connection_options 0x62a1 019503 jam lmp_switch_req ,mem_lmo_opcode2 0x62a2 019504 jam conn_sm_wait_switch_after_host_connection ,mem_conn_sm 0x62a3 019505 rtn : 019507 host_create_conn_send_setup_complete: 0x62a4 019508 jam conn_sm_wait_setup_complete ,mem_conn_sm 0x62a5 019509 jam lmp_setup_complete ,mem_lmo_opcode2 0x62a6 019510 rtn : 019512 host_create_conn_wait_setup_complete: 0x62a7 019513 fetch 1 ,mem_lmp_conn_state 0x62a8 019514 rtnbit0 received_setup_complete 0x62a9 019515 jam conn_sm_standby ,mem_conn_sm 0x62aa 019517 rtn : 019518 host_create_conn_wait_setup_complete_rtn: 0x62ab 019519 jam conn_sm_auth_pair ,mem_conn_sm 0x62ac 019520 rtn : 019522 host_create_conn_master_detach: 0x62ad 019523 fetch 1 ,mem_soft_timer 0x62ae 019524 increase -1 ,pdata 0x62af 019525 branch host_create_conn_send_detach ,blank 0x62b0 019526 store 1 ,mem_soft_timer 0x62b1 019527 rtn : 019528 host_create_conn_send_detach: 0x62b2 019529 jam lmp_detach ,mem_lmo_opcode2 0x62b3 019530 jam local_host ,mem_disconn_reason_send 0x62b4 019531 jam 0 ,mem_conn_sm 0x62b5 019532 rtn : 019533 host_create_conn_auth_pair: 0x62b6 019535 fetch 1 ,mem_connection_options 0x62b7 019536 bbit1 connection_switch ,host_create_conn_switch 0x62b8 019537 bbit1 connection_auth ,host_create_conn_auth_pair_true : 019538 host_create_conn_sm_done: 0x62b9 019539 jam conn_sm_done ,mem_conn_sm 0x62ba 019540 rtn : 019541 host_create_conn_auth_pair_true: 0x62bb 019542 fetch 1 ,mem_link_key_exists 0x62bc 019543 branch host_create_conn_auth_pair_nokey ,blank 0x62bd 019544 fetch 1 ,mem_lmp_conn_state 0x62be 019545 rtnbit0 sent_setup_complete 0x62bf 019546 rtnbit0 received_setup_complete 0x62c0 019547 fetch 4 ,mem_aurand_send_delay_time 0x62c1 019548 arg 100 ,temp 0x62c2 019549 iadd temp ,temp 0x62c3 019550 copy clkn_bt ,pdata 0x62c4 019551 isub temp ,null 0x62c5 019552 nrtn positive 0x62c6 019553 branch host_create_conn_auth : 019557 host_create_conn_auth_pair_nokey: 0x62c7 019558 jam conn_sm_pairing ,mem_conn_sm 0x62c8 019559 jam 4 ,mem_pin_length 0x62c9 019560 setarg 0x3030 0x62ca 019561 store 2 ,mem_pin 0x62cb 019562 istore 2 ,contw 0x62cc 019563 jam pincode_state_pincode_ready ,mem_pincode_state 0x62cd 019564 branch host_create_conn_pairing : 019566 host_create_conn_auth_pair_wait: 0x62ce 019567 rtn : 019568 host_create_conn_encrypt: 0x62cf 019569 fetch 1 ,mem_connection_options 0x62d0 019570 bbit1 connection_encrypt ,host_create_conn_encrypt_start 0x62d1 019571 jam conn_sm_done ,mem_conn_sm 0x62d2 019572 rtn : 019574 host_create_conn_encrypt_start: 0x62d3 019575 fetch 1 ,mem_connection_options 0x62d4 019576 set0 connection_encrypt ,pdata 0x62d5 019577 store 1 ,mem_connection_options 0x62d6 019578 jam lmp_encryption_mode_req ,mem_lmo_opcode2 0x62d7 019579 rtn : 019581 host_create_conn_encrypt_wait: 0x62d8 019582 fetch 1 ,mem_wait_encryption 0x62d9 019583 rtn blank 0x62da 019584 jam conn_sm_standby ,mem_conn_sm 0x62db 019585 branch host_create_conn_encrypt_start : 019587 host_create_conn_encrypt_wait_clear: 0x62dc 019588 jam conn_sm_send_setup_complete ,mem_conn_sm 0x62dd 019589 rtn : 019591 host_auth: 0x62de 019592 fetch 1 ,mem_op 0x62df 019593 bbit1 op_inrand_req ,remote_auth 0x62e0 019594 call tid_initiate 0x62e1 019595 jam lmp_in_rand ,mem_lmo_opcode2 0x62e2 019596 branch cmd_exit : 019597 remote_auth: 0x62e3 019598 fetch 1 ,mem_op 0x62e4 019599 set0 op_inrand_req ,pdata 0x62e5 019600 store 1 ,mem_op 0x62e6 019601 call lmp_accept_inrand 0x62e7 019602 call tid_set_reply 0x62e8 019603 branch cmd_exit : 019605 pincode_reinit: 0x62e9 019606 setarg 4 0x62ea 019607 store 1 ,mem_pin_length 0x62eb 019608 setarg 0x3030 0x62ec 019609 istore 2 ,contw 0x62ed 019610 istore 2 ,contw 0x62ee 019611 rtn : 019619 module_init: 0x62ef 019620 rtn wake 0x62f0 019621 jam 0 ,mem_module_task 0x62f1 019622 call module_gpio_init 0x62f2 019623 call module_init_static_string 0x62f3 019624 setarg module_process_idle 0x62f4 019625 store 2 ,mem_cb_idle_process 0x62f5 019626 setarg module_conn_process 0x62f6 019627 store 2 ,mem_cb_bt_process 0x62f7 019628 setarg module_process_bb_event 0x62f8 019629 store 2 ,mem_cb_bb_event_process 0x62f9 019630 setarg module_le_rx 0x62fa 019631 store 2 ,mem_cb_att_write 0x62fb 019632 setarg module_conn_process 0x62fc 019633 store 2 ,mem_cb_le_process 0x62fd 019634 set1 mark_ext_patch ,mark 0x62fe 019635 bpatch patch30_0 ,mem_patch30 0x62ff 019636 setarg module_lpm_lock 0x6300 019637 store 2 ,mem_cb_check_wakelock 0x6301 019638 setarg module_le_tx_update_data 0x6302 019639 store 2 ,mem_cb_update_notify_value 0x6303 019640 setarg 0 0x6304 019641 store 4 ,mem_last_uart_clock 0x6305 019642 store 2 ,mem_module_prepare_tx_len 0x6306 019643 call module_hardware_init 0x6307 019644 call init_module_environment 0x6308 019645 call check_module_disabled 0x6309 019646 branch eeprom_load_reconn_info : 019648 module_hardware_init: 0x630a 019649 rtn wake 0x630b 019650 setarg uart_baud_115200 0x630c 019651 store uart_baud_len ,mem_baud : 019652 module_lpm_uart_init: 0x630d 019653 call init_filter_ram 0x630e 019654 setarg mem_module_rx_buf 0x630f 019655 hstore 2 ,core_uart_rsaddr 0x6310 019656 setarg mem_module_rx_buf_end 0x6311 019657 hstore 2 ,core_uart_readdr 0x6312 019658 setarg mem_module_tx_buf 0x6313 019659 hstore 2 ,core_uart_tsaddr 0x6314 019660 setarg mem_module_tx_buf_end 0x6315 019661 hstore 2 ,core_uart_teaddr 0x6316 019662 hjam 0x4 ,core_gpio_sel1 0x6317 019663 jam 0xff ,mem_ucode_id_local 0x6318 019664 hjam 0x0 ,core_uart_ctrl 0x6319 019665 setarg mem_module_tx_buf 0x631a 019666 hstore 2 ,core_uart_twptr 0x631b 019667 hstore 2 ,core_uart_trptrp 0x631c 019668 setarg mem_module_rx_buf 0x631d 019669 hstore 2 ,core_uart_rrptr 0x631e 019670 branch hci_init_common : 019673 module_lpm_init: 0x631f 019674 call module_lpm_uart_init 0x6320 019675 branch module_gpio_init : 019677 module_gpio_init: 0x6321 019679 call ui_led_init 0x6322 019680 call app_led_start_blink 0x6323 019682 fetcht 1 ,mem_module_connect_state_gpio 0x6324 019683 call gpio_config_output 0x6325 019684 call module_set_conn_pin_low 0x6326 019686 fetcht 1 ,mem_module_wake_up_gpio 0x6327 019687 call gpio_config_input 0x6328 019688 fetcht 1 ,mem_at_gpio 0x6329 019689 branch gpio_config_input_without_wake : 019691 module_lpm_lock: 0x632a 019692 fetcht 1 ,mem_module_wake_up_gpio 0x632b 019693 call gpio_get_bit 0x632c 019694 nbranch app_put_lpm_wake_lock ,true 0x632d 019695 branch app_get_lpm_wake_lock : 019699 module_process_idle: 0x632e 019700 branch module_app_dispatch : 019701 module_conn_process: 0x632f 019702 branch module_app_dispatch : 019703 module_app_dispatch: 0x6330 019704 set1 mark_ext_patch ,mark 0x6331 019705 bpatch patch30_1 ,mem_patch30 0x6332 019706 call module_control_air_flow 0x6333 019707 call module_uart_set 0x6334 019708 call l2cap_malloc_is_fifo_full 0x6335 019709 nrtn blank 0x6336 019710 branch module_process : 019711 module_process_bb_event: 0x6337 019712 copy regc ,pdata 0x6338 019713 beq bt_evt_pincode_req ,module_process_evt_pincode_req 0x6339 019714 beq bt_evt_reconn_failed ,module_reconn_fail 0x633a 019715 beq bt_evt_reconn_page_timeout ,module_page_time_out 0x633b 019716 beq bt_evt_bb_disconnected ,module_process_bb_event_disconned 0x633c 019717 beq bt_evt_switch_not_accept ,module_process_switch_not_accept 0x633d 019718 beq bt_evt_switch_accept ,module_process_switch_accept 0x633e 019719 beq bt_evt_sniff_accept ,module_process_sniff_accept 0x633f 019720 beq bt_evt_sniff_not_accept ,module_process_sniff_not_accept 0x6340 019721 beq bt_evt_unsniff_accept ,module_process_unsniff_accept 0x6341 019722 beq bt_evt_unsniff_not_accept ,module_process_unsniff_not_accept 0x6342 019723 beq bt_evt_le_connected ,module_process_le_conn 0x6343 019724 beq bt_evt_bb_connected ,module_process_bb_conn 0x6344 019725 beq bt_evt_le_disconnected ,module_process_bb_even_le_disconn 0x6345 019726 beq bt_evt_setup_complete ,module_process_setup_complete 0x6346 019727 beq bt_evt_enter_sniff ,module_sniff_param_check 0x6347 019728 beq bt_evt_exit_sniff ,app_lpm_mult_disable 0x6348 019729 and pdata ,0x0f ,temp 0x6349 019730 and_into bt_evt_timer_mask ,pdata 0x634a 019731 beq bt_evt_timer_init ,module_bb_event_timer 0x634b 019732 rtn : 019734 module_process_bb_event_disconned: 0x634c 019735 call module_disconn_start 0x634d 019736 fetch app_disc_rsn_size ,mem_app_disconn_reason 0x634e 019737 rtnbit0 app_disc_after_setup_done 0x634f 019738 arg 3 ,loopcnt 0x6350 019739 arg mem_prarm_dis ,contr 0x6351 019740 branch send_mem_to_uart : 019742 module_sniff_param_check: 0x6352 019745 fetch 2 ,mem_context + coffset_tsniff 0x6353 019746 rshift pdata ,pdata 0x6354 019747 fetcht 2 ,mem_sniff_param_interval 0x6355 019748 isub temp ,null 0x6356 019749 nbranch module_sniff_param_check_unsniff ,zero 0x6357 019750 branch app_lpm_mult_enable : 019751 module_sniff_param_check_unsniff: 0x6358 019752 fetch 1 ,mem_module_task 0x6359 019753 rtnbit1 at_task_unsinff 0x635a 019754 hfetch 2 ,core_uart_rxitems 0x635b 019755 ncall at_set_unsniff_task_flag ,blank 0x635c 019756 branch app_bt_sniff_exit : 019758 module_process_setup_complete: 0x635d 019759 call module_conn_start 0x635e 019760 call module_check_cmode 0x635f 019761 branch module_uart_send_conn ,zero 0x6360 019762 branch app_bt_disconnect : 019763 module_uart_send_conn: 0x6361 019764 arg 4 ,loopcnt 0x6362 019765 arg mem_prarm_conn ,contr 0x6363 019766 branch send_mem_to_uart : 019768 module_process_bb_even_le_disconn: 0x6364 019769 call module_disconn_start 0x6365 019770 arg 5 ,loopcnt 0x6366 019771 arg mem_prarm_bledis ,contr 0x6367 019772 branch send_mem_to_uart : 019774 module_process_evt_pincode_req: 0x6368 019775 call at_restore_pin_code 0x6369 019776 branch app_bt_set_pincode : 019777 module_process_switch_not_accept: 0x636a 019778 fetch 1 ,mem_module_task 0x636b 019779 rtnbit0 at_task_switch 0x636c 019780 set0 at_task_switch ,pdata 0x636d 019781 store 1 ,mem_module_task 0x636e 019782 branch at_error_rev_end : 019784 module_process_switch_accept: 0x636f 019785 fetch 1 ,mem_module_task 0x6370 019786 rtnbit0 at_task_switch 0x6371 019787 set0 at_task_switch ,pdata 0x6372 019788 store 1 ,mem_module_task 0x6373 019789 branch at_nomal_rev_end : 019791 module_process_sniff_accept: 0x6374 019792 rtn : 019794 module_process_sniff_not_accept: 0x6375 019795 rtn : 019797 module_process_unsniff_accept: 0x6376 019798 fetch 1 ,mem_module_task 0x6377 019799 bbit0 at_task_unsinff ,app_bt_enter_sniff 0x6378 019800 branch at_clear_unsniff_task_flag : 019802 module_process_unsniff_not_accept: 0x6379 019803 rtn : 019805 module_process_le_conn: 0x637a 019806 call module_conn_start 0x637b 019807 arg mem_le_plap ,regb 0x637c 019808 call module_check_cmode 0x637d 019809 branch module_uart_send_leconn ,zero 0x637e 019810 branch app_ble_disconnect : 019811 module_uart_send_leconn: 0x637f 019812 arg 6 ,loopcnt 0x6380 019813 arg mem_prarm_bleconn ,contr 0x6381 019814 branch send_mem_to_uart : 019816 module_process_bb_conn: 0x6382 019817 rtn : 019820 module_reconn_fail: 0x6383 019821 arg 7 ,loopcnt 0x6384 019822 arg mem_prarm_recfail ,contr 0x6385 019823 call send_mem_to_uart 0x6386 019824 branch module_disconn_start : 019825 module_page_time_out: 0x6387 019826 arg 7 ,loopcnt 0x6388 019827 arg mem_prarm_pageout ,contr 0x6389 019828 call send_mem_to_uart : 019829 module_disconn_start: 0x638a 019830 call module_start_adv_discovery 0x638b 019831 branch module_set_conn_pin_high : 019833 module_start_adv_discovery: 0x638c 019834 fetch 1 ,mem_module_state 0x638d 019835 isolate1 at_state_set30 ,pdata 0x638e 019836 call app_bt_start_discovery ,true 0x638f 019837 fetch 1 ,mem_module_state 0x6390 019838 isolate1 at_state_set40 ,pdata 0x6391 019839 call app_ble_start_adv ,true 0x6392 019840 rtn : 019841 module_set_conn_pin_high: 0x6393 019842 fetcht 1 ,mem_module_connect_state_gpio 0x6394 019843 branch gpio_out_active : 019845 module_conn_start: 0x6395 019846 call module_stop_adv_discovery 0x6396 019847 branch module_set_conn_pin_low : 019849 module_stop_adv_discovery: 0x6397 019850 fetch 1 ,mem_module_state 0x6398 019851 isolate1 at_state_set30 ,pdata 0x6399 019852 call app_bt_stop_discovery ,true 0x639a 019853 fetch 1 ,mem_module_state 0x639b 019854 isolate1 at_state_set40 ,pdata 0x639c 019855 call app_ble_stop_adv ,true 0x639d 019856 rtn : 019857 module_set_conn_pin_low: 0x639e 019858 fetcht 1 ,mem_module_connect_state_gpio 0x639f 019859 branch gpio_out_inactive : 019864 module_process: 0x63a0 019865 fetch 1 ,mem_device_option 0x63a1 019866 rtnne dvc_op_module 0x63a2 019867 hfetch 2 ,core_uart_rxitems 0x63a3 019868 rtn blank 0x63a4 019869 store 2 ,mem_current_packet_length 0x63a5 019871 call spp_mode 0x63a6 019872 branch at_process ,true 0x63a7 019873 call at_ckeck_send_buff 0x63a8 019874 branch module_tx_packet : 019877 spp_mode: 0x63a9 019878 fetcht 1 ,mem_at_gpio 0x63aa 019879 branch gpio_get_bit : 019882 module_exit_sniff: 0x63ab 019883 fetch 1 ,mem_module_task 0x63ac 019884 rtnbit1 at_task_unsinff 0x63ad 019885 call at_set_unsniff_task_flag 0x63ae 019886 branch app_bt_sniff_exit : 019888 module_tx_packet: 0x63af 019889 fetch 1 ,mem_context 0x63b0 019890 bbit0 state_inconn ,spp_send_end 0x63b1 019891 fetch 1 ,mem_context + coffset_mode 0x63b2 019892 bbit1 mode_le ,modle_le_tx 0x63b3 019893 call app_check_sniff 0x63b4 019894 branch module_exit_sniff ,true 0x63b5 019895 branch spp_tx_rfcomm_packet : 019897 module_le_rx: 0x63b6 019898 call le_att_get_handle_ptr 0x63b7 019899 ifetch 1 ,contr 0x63b8 019900 copy contr ,rega 0x63b9 019901 call get_uart_twptr 0x63ba 019902 copy regb ,loopcnt 0x63bb 019903 copy rega ,contr 0x63bc 019904 call uart_copy_tx_bytes 0x63bd 019905 branch uartd_send : 019908 module_le_tx_update_data: 0x63be 019910 fetch 2 ,mem_module_prepare_tx_len 0x63bf 019911 rtn blank 0x63c0 019912 arg dm_le_buff_len ,temp 0x63c1 019913 call not_greater_than 0x63c2 019914 store 2 ,mem_module_temp_len 0x63c3 019916 copy pdata ,temp 0x63c4 019917 fetch 2 ,mem_module_prepare_tx_len 0x63c5 019918 isub temp ,pdata 0x63c6 019919 store 2 ,mem_module_prepare_tx_len 0x63c7 019920 nbranch assert ,positive 0x63c8 019922 arg prcp_tx_le ,temp 0x63c9 019923 storet 2 ,mem_le_notify_handle 0x63ca 019924 call le_att_get_handle_ptr 0x63cb 019925 branch assert ,blank 0x63cc 019926 add contr ,1 ,contw 0x63cd 019928 fetch 2 ,mem_module_temp_len 0x63ce 019929 copy pdata ,loopcnt 0x63cf 019931 call get_uart_rrptr 0x63d0 019933 call uart_copy_rx_bytes 0x63d1 019935 fetch 2 ,mem_module_temp_len 0x63d2 019936 store 2 ,mem_current_packet_length 0x63d3 019937 store 2 ,mem_le_notify_len 0x63d4 019938 branch spp_send_end : 019941 modle_le_tx: 0x63d5 019942 rtnmark0 mark_context 0x63d6 019943 call modle_le_tx_once 0x63d7 019944 call modle_le_tx_once : 019945 modle_le_tx_once: 0x63d8 019946 call le_xtype_fifo_is_near_full 0x63d9 019947 nrtn blank 0x63da 019948 hfetch 2 ,core_uart_rxitems 0x63db 019949 rtn blank 0x63dc 019950 fetcht 2 ,mem_module_prepare_tx_len 0x63dd 019951 isub temp ,pdata 0x63de 019952 nbranch assert ,positive 0x63df 019953 store 2 ,mem_current_packet_length 0x63e0 019954 rtn blank 0x63e1 019955 call at_ckeck_send_buff_le 0x63e2 019956 fetch 2 ,mem_module_prepare_tx_len 0x63e3 019957 fetcht 2 ,mem_current_packet_length 0x63e4 019958 iadd temp ,pdata 0x63e5 019959 store 2 ,mem_module_prepare_tx_len 0x63e6 019960 fetcht 2 ,mem_module_prepare_tx_len 0x63e7 019961 hfetch 2 ,core_uart_rxitems 0x63e8 019962 isub temp ,rega 0x63e9 019963 nbranch assert ,positive 0x63ea 019964 jam attop_handle_value_notification ,mem_fifo_temp 0x63eb 019965 branch le_xtype_fifo_in : 019967 module_bb_event_timer: 0x63ec 019968 storet 1 ,mem_app_evt_timer_count : 019969 module_bb_event_100ms_loop: 0x63ed 019970 fetch 1 ,mem_app_evt_timer_count 0x63ee 019971 rtn blank 0x63ef 019972 increase -1 ,pdata 0x63f0 019973 store 1 ,mem_app_evt_timer_count 0x63f1 019974 call module_bb_event_hud_ms 0x63f2 019975 branch module_bb_event_100ms_loop : 019977 module_bb_event_hud_ms: 0x63f3 019978 fetch 2 ,mem_at_scan_time 0x63f4 019979 rtn blank 0x63f5 019980 increase -1 ,pdata 0x63f6 019981 store 2 ,mem_at_scan_time 0x63f7 019982 nrtn blank 0x63f8 019983 fetch 1 ,mem_at_using_flag 0x63f9 019984 jam 0 ,mem_at_using_flag 0x63fa 019985 bbit1 at_flag_leinq ,modue_le_inq 0x63fb 019986 bbit1 at_flag_inq ,module_inq 0x63fc 019987 branch assert : 019988 modue_le_inq: 0x63fd 019989 branch app_ble_stop_scan : 019990 module_inq: 0x63fe 019991 jam hci_cmd_inquiry_cancel ,mem_hci_cmd 0x63ff 019992 rtn : 019994 at_ckeck_send_buff: 0x6400 019995 fetch 1 ,mem_context + coffset_mode 0x6401 019996 bbit1 mode_le ,at_ckeck_send_buff_le 0x6402 019997 fetch 2 ,mem_current_packet_length 0x6403 019998 arg dm_refcom_buff_len ,temp 0x6404 020000 call not_greater_than 0x6405 020001 store 2 ,mem_current_packet_length 0x6406 020002 rtn : 020003 at_ckeck_send_buff_le: 0x6407 020004 fetch 2 ,mem_current_packet_length 0x6408 020005 arg dm_le_buff_len ,temp 0x6409 020006 call not_greater_than 0x640a 020007 store 2 ,mem_current_packet_length 0x640b 020008 rtn : 020010 at_set_unsniff_task_flag: 0x640c 020011 fetch 1 ,mem_module_task 0x640d 020012 set1 at_task_unsinff ,pdata 0x640e 020013 store 1 ,mem_module_task 0x640f 020014 rtn : 020016 at_clear_unsniff_task_flag: 0x6410 020017 fetch 1 ,mem_module_task 0x6411 020018 set0 at_task_unsinff ,pdata 0x6412 020019 store 1 ,mem_module_task 0x6413 020020 rtn : 020022 at_set_cmd_task_flag: 0x6414 020023 fetch 1 ,mem_module_task 0x6415 020024 set1 at_task_cmd_flag ,pdata 0x6416 020025 store 1 ,mem_module_task 0x6417 020026 rtn : 020028 at_clear_cmd_task_flag: 0x6418 020029 fetch 1 ,mem_module_task 0x6419 020030 set0 at_task_cmd_flag ,pdata 0x641a 020031 store 1 ,mem_module_task 0x641b 020032 rtn : 020034 module_control_air_flow: 0x641c 020035 set1 mark_ext_patch ,mark 0x641d 020036 bpatch patch30_2 ,mem_patch30 0x641e 020037 call check_uart_tx_buff 0x641f 020038 branch app_l2cap_flow_control_enable ,positive 0x6420 020039 branch app_l2cap_flow_control_disable : 020041 module_uart_set: 0x6421 020042 call spp_mode 0x6422 020043 branch module_set_baud_115200 ,true 0x6423 020044 hfetcht uart_baud_len ,core_uart_baud 0x6424 020045 fetch 2 ,mem_baud 0x6425 020046 isub temp ,null 0x6426 020047 rtn zero 0x6427 020048 branch uart_set_baud_by_mem : 020051 module_set_baud_115200: 0x6428 020052 hfetcht uart_baud_len ,core_uart_baud 0x6429 020053 setarg at_baud_115200 0x642a 020054 isub temp ,null 0x642b 020055 rtn zero 0x642c 020056 hstore uart_baud_len ,core_uart_baud 0x642d 020057 rtn : 020059 module_check_cmode: 0x642e 020060 set1 mark_ext_patch ,mark 0x642f 020061 bpatch patch30_3 ,mem_patch30 0x6430 020062 fetch 1 ,mem_module_state 0x6431 020063 isolate0 at_state_cmode ,pdata 0x6432 020064 branch module_check_cmode_close ,true 0x6433 020065 arg mem_cmode_addr ,rega 0x6434 020066 arg 6 ,loopcnt 0x6435 020067 branch string_compare : 020068 module_check_cmode_close: 0x6436 020069 force 0 ,null 0x6437 020070 rtn : 020072 module_init_static_string: 0x6438 020073 set1 mark_ext_patch ,mark 0x6439 020074 bpatch patch30_4 ,mem_patch30 0x643a 020075 arg mem_prarm_pswd ,contw 0x643b 020076 setsect 0 ,0x35350 0x643c 020077 setsect 1 ,0x15115 0x643d 020078 setsect 2 ,0x12415 0x643e 020079 setsect 3 ,0x10951 0x643f 020080 istore 9 ,contw 0x6440 020081 setsect 0 ,0x2454c 0x6441 020082 setsect 1 ,0x35053 0x6442 020083 setsect 2 ,0x2454 0x6443 020084 setsect 3 ,0x11531 0x6444 020085 istore 9 ,contw 0x6445 020086 setsect 0 ,0x34441 0x6446 020087 setsect 1 ,0x194d4 0x6447 020088 setsect 2 ,0x12455 0x6448 020089 setsect 3 ,0x10d4d 0x6449 020090 istore 9 ,contw 0x644a 020091 setsect 0 ,0x3414c 0x644b 020092 setsect 1 ,0xd4d4 0x644c 020093 setsect 2 ,0x124c4 0x644d 020094 setsect 3 ,0x13119 0x644e 020095 istore 9 ,contw 0x644f 020096 setsect 0 ,0x15247 0x6450 020097 setsect 1 ,0x3d0d1 0x6451 020098 setsect 2 ,0xe4e4 0x6452 020099 setsect 3 ,0x11531 0x6453 020100 istore 9 ,contw 0x6454 020101 setsect 0 ,0x34944 0x6455 020102 setsect 1 ,0x114d4 0x6456 020103 setsect 2 ,0xe535 0x6457 020104 setsect 3 ,0x15105 0x6458 020105 istore 9 ,contw 0x6459 020106 setsect 0 ,0x14c2b 0x645a 020107 setsect 1 ,0x114d2 0x645b 020108 setsect 2 ,0xf525 0x645c 020109 setsect 3 ,0x11531 0x645d 020110 istore 9 ,contw 0x645e 020111 setsect 0 ,0x14e53 0x645f 020112 setsect 1 ,0x19192 0x6460 020113 setsect 2 ,0x44c4 0x6461 020114 setsect 3 ,0x15915 0x6462 020115 istore 9 ,contw 0x6463 020116 setsect 0 ,0x35352 0x6464 020117 setsect 1 ,0xd254 0x6465 020118 setsect 2 ,0x5444 0x6466 020119 setsect 3 ,0x10959 0x6467 020120 istore 9 ,contw 0x6468 020121 setsect 0 ,0x1454c 0x6469 020122 setsect 1 ,0x5392 0x646a 020123 setsect 2 ,0x3525 0x646b 020124 setsect 3 ,0x13d35 0x646c 020125 istore 9 ,contw 0x646d 020126 setsect 0 ,0x14544 0x646e 020127 setsect 1 ,0x113d3 0x646f 020128 setsect 2 ,0x4454 0x6470 020129 setsect 3 ,0x14d35 0x6471 020130 istore 9 ,contw 0x6472 020131 setsect 0 ,0x4154 0x6473 020132 setsect 1 ,0x11155 0x6474 020133 setsect 2 ,0x13494 0x6475 020134 setsect 3 ,0x13d0d 0x6476 020135 istore 9 ,contw 0x6477 020136 setsect 0 ,0x4f56 0x6478 020137 setsect 1 ,0x31055 0x6479 020138 setsect 2 ,0x3454 0x647a 020139 setsect 3 ,0x1393d 0x647b 020140 istore 9 ,contw 0x647c 020141 setsect 0 ,0x1504e 0x647d 020142 setsect 1 ,0x151d0 0x647e 020143 setsect 2 ,0x154f4 0x647f 020144 setsect 3 ,0x14951 0x6480 020145 istore 9 ,contw 0x6481 020146 setsect 0 ,0x24345 0x6482 020147 setsect 1 ,0x25051 0x6483 020148 setsect 2 ,0x4c4 0x6484 020149 istore 6 ,contw 0x6485 020150 rtn : 020154 mouse_init: 0x6486 020155 setarg le_mouse 0x6487 020156 store 2 ,mem_cb_le_process 0x6488 020157 setarg mouse_send_process 0x6489 020158 store 2 ,mem_cb_bt_process 0x648a 020159 setarg mouse_process_lpm_before 0x648b 020160 store 2 ,mem_cb_before_lpm 0x648c 020161 setarg mouse_priority_bb_event 0x648d 020162 store 2 ,mem_cb_bb_event_process 0x648e 020163 setarg mouse_idle 0x648f 020164 store 2 ,mem_cb_idle_process 0x6490 020165 setarg mouse_le_notify_update_data 0x6491 020166 store 2 ,mem_cb_update_notify_value 0x6492 020167 jam 0 ,mem_sp_flag 0x6493 020168 jam 0 ,mem_master_sp_flag 0x6494 020169 set0 mark_ext_patch ,mark 0x6495 020170 bpatch patch18_0 ,mem_patch18 0x6496 020171 call mouse_init_common 0x6497 020172 rtn wake 0x6498 020173 call mouse_init_environment 0x6499 020174 call mouse_dpi_init 0x649a 020175 setarg mouse_before_hibernate 0x649b 020176 store 2 ,mem_cb_before_hibernate 0x649c 020177 fetch 2 ,mem_ui_state_map 0x649d 020178 bbit1 ui_state_btn_down ,mouse_start_discovery 0x649e 020179 branch mouse_check_reconn_target : 020181 mouse_init_environment: 0x649f 020182 call app_initflag_check 0x64a0 020183 branch mouse_load_eeprom_param ,zero 0x64a1 020184 call eeprom_store_le_local_addr 0x64a2 020185 call eeprom_store_mouse_dpi 0x64a3 020186 branch app_initflag_store : 020187 mouse_load_eeprom_param: 0x64a4 020188 call eeprom_load_reconn_info 0x64a5 020189 call eeprom_load_le_loacal_addr 0x64a6 020190 branch eeprom_load_mouse_dpi : 020192 mouse_dpi_init: 0x64a7 020193 jam dpi_button_state_up ,mem_mouse_dpi_button_state 0x64a8 020194 branch mouse_modified_dpi : 020196 mouse_idle: 0x64a9 020197 call ui_check_paring_button 0x64aa 020198 call mouse_check_dpi 0x64ab 020199 branch mouse_wheel_check : 020201 mouse_check_dpi: 0x64ac 020202 fetcht 1 ,mem_dpi_button_gpio 0x64ad 020203 call gpio_get_bit 0x64ae 020204 nbranch mouse_dpi_up ,true : 020205 mouse_dpi_down: 0x64af 020206 fetch 1 ,mem_mouse_dpi_button_state 0x64b0 020207 rtneq dpi_button_state_down 0x64b1 020208 jam dpi_button_state_down ,mem_mouse_dpi_button_state 0x64b2 020209 rtn : 020210 mouse_dpi_up: 0x64b3 020211 fetch 1 ,mem_mouse_dpi_button_state 0x64b4 020212 rtneq dpi_button_state_up 0x64b5 020213 jam dpi_button_state_up ,mem_mouse_dpi_button_state 0x64b6 020214 fetch 1 ,mem_mouse_dpi 0x64b7 020215 increase 1 ,pdata 0x64b8 020216 and pdata ,0x03 ,pdata 0x64b9 020217 store 1 ,mem_mouse_dpi 0x64ba 020218 branch mouse_modified_dpi : 020219 mouse_modified_dpi: 0x64bb 020220 setarg mouse_dpi_address 0x64bc 020221 call twspi_read 0x64bd 020222 and pdata ,0xfc ,temp 0x64be 020223 fetch 1 ,mem_mouse_dpi 0x64bf 020224 iadd temp ,pdata 0x64c0 020225 lshift8 pdata ,pdata 0x64c1 020226 add pdata ,mouse_dpi_address ,pdata 0x64c2 020227 call twspi_write 0x64c3 020228 branch eeprom_store_mouse_dpi : 020230 mouse_init_common: 0x64c4 020231 call mouse_init_sunt 0x64c5 020232 call mouse_gpio_init 0x64c6 020233 hfetch 2 ,core_clkoff 0x64c7 020234 set0 clock_off_qdecoder ,pdata 0x64c8 020235 hstore 2 ,core_clkoff 0x64c9 020236 rtn : 020238 mouse_gpio_init: 0x64ca 020239 call lpm_disable_exen_output 0x64cb 020240 fetcht 1 ,mem_whee_a_data_gpio 0x64cc 020241 call gpio_config_input 0x64cd 020242 fetcht 1 ,mem_whee_b_data_gpio 0x64ce 020243 call gpio_config_input 0x64cf 020244 fetcht 1 ,mem_lbutton_gpio 0x64d0 020245 call gpio_config_input 0x64d1 020246 fetcht 1 ,mem_rbutton_gpio 0x64d2 020247 call gpio_config_input 0x64d3 020248 fetcht 1 ,mem_mbutton_gpio 0x64d4 020249 call gpio_config_input 0x64d5 020250 fetcht 1 ,mem_sensor_data_gpio 0x64d6 020251 call gpio_config_input 0x64d7 020252 fetcht 1 ,mem_dpi_button_gpio 0x64d8 020253 call gpio_config_input 0x64d9 020254 hfetch 1 ,core_gpio_pu3 0x64da 020255 or_into 0x18 ,pdata 0x64db 020256 hstore 1 ,core_gpio_pu3 0x64dc 020257 hfetch 1 ,core_gpio_pd2 + 1 0x64dd 020258 and_into 0xe7 ,pdata 0x64de 020259 hstore 1 ,core_gpio_pd2 + 1 0x64df 020260 rtn : 020263 mouse_before_hibernate: 0x64e0 020264 setarg 0xbc05 0x64e1 020265 call twspi_write 0x64e2 020266 jam 1 ,mem_lpm_current_mult : 020268 mouse_process_lpm_before: 0x64e3 020269 call mouse_wheel_check 0x64e4 020270 arg 25 ,temp 0x64e5 020271 call gpio_config_output 0x64e6 020272 hjam 0 ,core_gpio_sel1 0x64e7 020273 fetcht 1 ,mem_whee_a_data_gpio 0x64e8 020274 call gpio_set_wake_by_current_state 0x64e9 020275 fetcht 1 ,mem_whee_b_data_gpio 0x64ea 020276 call gpio_set_wake_by_current_state 0x64eb 020277 fetcht 1 ,mem_lbutton_gpio 0x64ec 020278 call gpio_set_wake_by_current_state 0x64ed 020279 fetcht 1 ,mem_rbutton_gpio 0x64ee 020280 call gpio_set_wake_by_current_state 0x64ef 020281 fetcht 1 ,mem_mbutton_gpio 0x64f0 020282 call gpio_set_wake_by_current_state 0x64f1 020283 fetcht 1 ,mem_sensor_data_gpio 0x64f2 020284 call gpio_set_wake 0x64f3 020285 fetch 1 ,mem_lpm_current_mult 0x64f4 020286 nrtn blank 0x64f5 020287 branch gpio_clr_wake : 020289 mouse_wheel_check: 0x64f6 020290 set0 mark_ext_patch ,mark 0x64f7 020291 bpatch patch18_1 ,mem_patch18 0x64f8 020292 arg 0 ,rega 0x64f9 020293 fetcht 1 ,mem_whee_a_data_gpio 0x64fa 020294 call gpio_get_bit 0x64fb 020295 setflag true ,0 ,rega 0x64fc 020296 fetcht 1 ,mem_whee_b_data_gpio 0x64fd 020297 call gpio_get_bit 0x64fe 020298 setflag true ,1 ,rega 0x64ff 020299 copy rega ,pdata 0x6500 020301 and_into 0x3 ,pdata 0x6501 020302 fetcht 1 ,mem_mouse_z_now 0x6502 020303 store 1 ,mem_mouse_z_now 0x6503 020304 isub temp ,null 0x6504 020305 branch mouse_wheel_clear ,zero 0x6505 020306 fetch 1 ,mem_mouse_z_before 0x6506 020307 store 1 ,mem_mouse_z_last 0x6507 020308 storet 1 ,mem_mouse_z_before 0x6508 020309 fetch 1 ,mem_mouse_z_now 0x6509 020310 lshift4 pdata ,pdata 0x650a 020311 fetcht 1 ,mem_mouse_z_before 0x650b 020312 lshift2 temp ,temp 0x650c 020313 iadd temp ,pdata 0x650d 020314 fetcht 1 ,mem_mouse_z_last 0x650e 020315 iadd temp ,pdata 0x650f 020316 beq 0x38 ,mouse_wheel_forward 0x6510 020317 beq 0x34 ,mouse_wheel_back 0x6511 020318 beq 0x0b ,mouse_wheel_back 0x6512 020319 beq 0x07 ,mouse_wheel_forward 0x6513 020320 rtn : 020322 mouse_wheel_clear: 0x6514 020323 rtn : 020325 mouse_wheel_forward: 0x6515 020326 fetch 1 ,mem_mouse_z_data 0x6516 020327 increase 1 ,pdata 0x6517 020328 store 1 ,mem_mouse_z_data 0x6518 020329 rtn : 020331 mouse_wheel_back: 0x6519 020332 fetch 1 ,mem_mouse_z_data 0x651a 020333 increase -1 ,pdata 0x651b 020334 store 1 ,mem_mouse_z_data 0x651c 020335 rtn : 020337 mouse_process_ble: 0x651d 020339 rtn : 020340 mouse_sleep_sensor: 0x651e 020341 setarg 0xB805 0x651f 020342 branch twspi_write : 020344 mouse_bb_connected: 0x6520 020345 rtn : 020347 le_mouse_bb_event_write_request: 0x6521 020348 call app_ble_store_reconn_info 0x6522 020349 jam mouse_mode_state_ble ,mem_mouse_mode_state 0x6523 020350 call app_lpm_mult_enable : 020351 le_mouse_bb_event_enc_info: 0x6524 020352 branch app_ble_start_write : 020354 le_hibernate_timer: 0x6525 020355 fetch 2 ,mem_le_hibernate_timer 0x6526 020356 rtn blank 0x6527 020357 increase -1 ,pdata 0x6528 020358 store 2 ,mem_le_hibernate_timer 0x6529 020359 nrtn blank 0x652a 020360 branch app_enter_hibernate : 020362 mouse_hid_connected: 0x652b 020363 setarg hid_handshake_timeout 0x652c 020364 store 1 ,mem_hid_handshake_timer_count 0x652d 020365 rtn : 020367 mouse_send_process: 0x652e 020368 fetch 1 ,mem_app_handshake_flag 0x652f 020369 rtn blank 0x6530 020370 call l2cap_malloc_is_fifo_nearly_full 0x6531 020371 nrtn blank 0x6532 020372 call mouse_motion 0x6533 020373 nrtn user 0x6534 020374 call mouse_no_data_timer_init 0x6535 020375 call mouse_send_blank_packet_timer_init : 020376 mouse_send_data: 0x6536 020377 arg 8 ,rega 0x6537 020378 call hid_malloc_tx_buff 0x6538 020379 fetch 2 ,mem_hid_int_remote_cid 0x6539 020380 istore 2 ,contw 0x653a 020381 setarg 0x02a1 0x653b 020382 istore 2 ,contw 0x653c 020383 fetch 1 ,mem_mouse_key 0x653d 020384 istore 1 ,contw 0x653e 020385 fetch 2 ,mem_mouse_x 0x653f 020386 arg 0xfff ,temp 0x6540 020387 iand temp ,pdata 0x6541 020388 fetcht 2 ,mem_mouse_y 0x6542 020389 lshift4 temp ,temp 0x6543 020390 lshift8 temp ,temp 0x6544 020391 ior temp ,pdata 0x6545 020392 istore 3 ,contw 0x6546 020393 fetch 1 ,mem_mouse_z 0x6547 020394 istore 1 ,contw 0x6548 020395 setarg 0 0x6549 020396 istore 1 ,contw 0x654a 020397 jam 8 ,mem_ui_data_txbuff_length 0x654b 020398 rtn : 020401 mouse_send_blank_packet_timer: 0x654c 020402 set0 mark_ext_patch ,mark 0x654d 020403 bpatch patch18_2 ,mem_patch18 0x654e 020404 fetch 1 ,mem_mouse_send_blank_timer 0x654f 020405 rtn blank 0x6550 020406 increase -1 ,pdata 0x6551 020407 store 1 ,mem_mouse_send_blank_timer 0x6552 020408 nrtn blank 0x6553 020409 call l2cap_malloc_is_fifo_empty 0x6554 020410 nrtn blank 0x6555 020411 setarg 0 0x6556 020412 store 5 ,mem_mouse_x 0x6557 020413 call mouse_send_data 0x6558 020414 jam mouse_send_blank_timer ,mem_mouse_send_blank_timer 0x6559 020415 rtn : 020416 mouse_send_blank_packet_timer_init: 0x655a 020417 fetch 2 ,mem_mouse_blank_data_timeout 0x655b 020418 store 2 ,mem_mouse_blank_data_timer 0x655c 020419 jam mouse_send_blank_timer ,mem_mouse_send_blank_timer 0x655d 020420 rtn : 020422 mouse_no_data_timer_init: 0x655e 020423 fetch 2 ,mem_mouse_no_data_timeout 0x655f 020424 store 2 ,mem_mouse_no_data_timer 0x6560 020425 rtn : 020428 mouse_le_notify_update_data: 0x6561 020429 fetcht 2 ,mem_le_notify_handle 0x6562 020430 call le_att_get_handle_ptr 0x6563 020431 ifetch 1 ,contr 0x6564 020432 store 1 ,mem_le_notify_len 0x6565 020433 rtn : 020436 mouse_fill_data_le: 0x6566 020437 set0 mark_ext_patch ,mark 0x6567 020438 bpatch patch18_3 ,mem_patch18 0x6568 020439 fetcht 2 ,mem_le_notify_handle 0x6569 020440 call le_att_get_handle_ptr 0x656a 020441 add contr ,1 ,contw : 020442 mouse_fill_data: 0x656b 020443 fetch 1 ,mem_mouse_key 0x656c 020444 istore 1 ,contw 0x656d 020445 fetch 2 ,mem_mouse_x 0x656e 020446 arg 0xfff ,temp 0x656f 020447 iand temp ,pdata 0x6570 020448 fetcht 2 ,mem_mouse_y 0x6571 020449 lshift4 temp ,temp 0x6572 020450 lshift8 temp ,temp 0x6573 020451 ior temp ,pdata 0x6574 020452 istore 3 ,contw 0x6575 020453 fetch 1 ,mem_mouse_z 0x6576 020454 istore 1 ,contw 0x6577 020455 rtn : 020457 mouse_motion: 0x6578 020458 set0 mark_ext_patch ,mark 0x6579 020459 bpatch patch18_4 ,mem_patch18 0x657a 020460 disable user 0x657b 020461 setarg 0 0x657c 020462 store 5 ,mem_mouse_x 0x657d 020463 call p3204_motion 0x657e 020464 call p3204_sdio_low 0x657f 020465 call mouse_zwheel 0x6580 020466 branch mouse_key : 020468 p3204_motion: 0x6581 020469 fetch 1 ,mem_sensor_type 0x6582 020470 rtnne sensor_type_p3204 0x6583 020471 fetch 1 ,mem_mouse_move_flag 0x6584 020472 call p3204_clear_data ,blank 0x6585 020473 jam 1 ,mem_mouse_move_flag 0x6586 020474 disable user 0x6587 020475 fetcht 1 ,mem_sensor_data_gpio 0x6588 020476 call gpio_get_bit 0x6589 020477 nrtn true 0x658a 020478 setarg 0 0x658b 020479 call twspi_read 0x658c 020480 bne p3204_id ,twspi_reset 0x658d 020481 setarg 2 0x658e 020482 call twspi_read 0x658f 020483 rtnbit0 7 0x6590 020484 setarg 3 0x6591 020485 call twspi_read 0x6592 020486 call extsign 0x6593 020487 store 2 ,mem_mouse_x 0x6594 020488 setarg 4 0x6595 020489 call twspi_read 0x6596 020490 call extsign 0x6597 020491 sub pdata ,0 ,pdata 0x6598 020492 store 2 ,mem_mouse_y 0x6599 020493 fetch 4 ,mem_mouse_x 0x659a 020494 enable user 0x659b 020495 rtn : 020496 mouse_zwheel: 0x659c 020497 fetch 1 ,mem_mouse_z_data 0x659d 020498 rtn blank 0x659e 020499 store 1 ,mem_mouse_z 0x659f 020500 jam 0 ,mem_mouse_z_data 0x65a0 020501 enable user 0x65a1 020502 rtn : 020503 mouse_key: 0x65a2 020504 arg 0 ,rega 0x65a3 020505 fetcht 1 ,mem_lbutton_gpio 0x65a4 020506 call gpio_get_bit 0x65a5 020507 setflag true ,0 ,rega 0x65a6 020508 fetcht 1 ,mem_rbutton_gpio 0x65a7 020509 call gpio_get_bit 0x65a8 020510 setflag true ,1 ,rega 0x65a9 020511 fetcht 1 ,mem_mbutton_gpio 0x65aa 020512 call gpio_get_bit 0x65ab 020513 setflag true ,2 ,rega 0x65ac 020514 deposit rega 0x65ad 020515 fetcht 1 ,mem_mouse_key 0x65ae 020516 store 1 ,mem_mouse_key 0x65af 020517 ixor temp ,pdata 0x65b0 020518 sub pdata ,0 ,null 0x65b1 020519 rtn zero 0x65b2 020520 enable user 0x65b3 020521 rtn : 020526 p3204_sdio_low: 0x65b4 020527 arg 26 ,temp 0x65b5 020528 call gpio_get_bit 0x65b6 020529 rtn true 0x65b7 020530 setarg 0 0x65b8 020531 call twspi_read 0x65b9 020532 branch p3204_sdio_low : 020534 p3204_clear_data: 0x65ba 020535 arg 0 ,loopcnt : 020536 p3204_clear_data_loop: 0x65bb 020537 setarg 2 0x65bc 020538 call twspi_read 0x65bd 020539 nop 100 0x65be 020540 increase 1 ,loopcnt 0x65bf 020541 fetcht 1 ,mem_sensor_data_gpio 0x65c0 020542 call gpio_get_bit 0x65c1 020543 branch p3204_clear_data_loop ,true 0x65c2 020544 deposit loopcnt 0x65c3 020545 store 2 ,mem_init_cnt 0x65c4 020546 rtn : 020547 mouse_init_sunt: 0x65c5 020548 call spid_init 0x65c6 020549 rtn wake : 020551 mouse_init_p3204: 0x65c7 020552 setarg 0 0x65c8 020553 call twspi_read 0x65c9 020554 store 1 ,mem_sensor_id 0x65ca 020555 beq p3204_id ,mouse_init_p3204_cont 0x65cb 020556 call twspi_reset 0x65cc 020557 nop 10000 0x65cd 020558 branch mouse_init_p3204 : 020559 mouse_init_p3204_cont: 0x65ce 020560 setarg 0x8006 0x65cf 020561 call twspi_write 0x65d0 020562 nop 1000 0x65d1 020563 jam sensor_type_p3204 ,mem_sensor_type 0x65d2 020564 rtn : 020568 extsign: 0x65d3 020569 rtnbit0 7 0x65d4 020570 arg 0xff00 ,temp 0x65d5 020571 ior temp ,pdata 0x65d6 020572 rtn : 020576 le_mouse: 0x65d7 020577 call le_xtype_fifo_is_near_full 0x65d8 020578 nrtn blank 0x65d9 020579 fetcht 2 ,mem_le_notify_handle 0x65da 020580 call le_att_check_notification_enable 0x65db 020581 rtnbit0 0 0x65dc 020582 fetch 1 ,mem_le_switch_send_data 0x65dd 020583 rtnbit0 0 0x65de 020584 call mouse_motion 0x65df 020586 nrtn user 0x65e0 020587 call mouse_no_data_timer_init 0x65e1 020589 jam attop_handle_value_notification ,mem_fifo_temp 0x65e2 020590 call le_xtype_fifo_in 0x65e3 020591 branch mouse_fill_data_le : 020593 mouse_test: 0x65e4 020594 rtn user 0x65e5 020595 fetch 1 ,mem_mouse_test_cnt 0x65e6 020596 increase 1 ,pdata 0x65e7 020597 store 1 ,mem_mouse_test_cnt 0x65e8 020598 arg 1 ,temp 0x65e9 020599 bbit0 7 ,mouse_test_pos 0x65ea 020600 arg 0xffff ,temp : 020601 mouse_test_pos: 0x65eb 020602 storet 5 ,mem_mouse_x 0x65ec 020603 enable user 0x65ed 020604 rtn : 020606 mouse_check_mode_state: 0x65ee 020607 disable user 0x65ef 020608 fetch 1 ,mem_mouse_mode_state 0x65f0 020609 rtneq mouse_mode_state_ble 0x65f1 020610 enable user 0x65f2 020611 rtn : 020613 mouse_priority_bb_event: 0x65f3 020614 copy regc ,pdata 0x65f4 020615 beq bt_evt_le_connected ,le_mouse_bb_event_connected 0x65f5 020616 beq bt_evt_bb_connected ,mouse_stop_discovery 0x65f6 020617 beq bt_evt_le_disconnected ,mouse_bb_disconnected 0x65f7 020618 beq bt_evt_bb_disconnected ,mouse_bb_disconnected 0x65f8 020619 beq bt_evt_setup_complete ,mouse_bt_event_setup_complete 0x65f9 020620 beq bt_evt_button_long_pressed ,mouse_bb_event_discovery_btn 0x65fa 020621 beq bt_evt_hid_handshake ,mouse_bt_hid_handshake 0x65fb 020622 beq bt_evt_hid_connected ,mouse_bt_hid_connected 0x65fc 020623 beq bt_evt_le_write_request ,le_mouse_bb_event_write_request 0x65fd 020624 beq bt_evt_le_enc_info ,le_mouse_bb_event_enc_info 0x65fe 020625 beq bt_evt_reconn_failed ,mouse_bb_event_reconn_failed 0x65ff 020626 beq bt_evt_reconn_page_timeout ,mouse_bb_event_reconn_failed 0x6600 020627 beq bt_evt_pincode_req ,mouse_bb_event_pincode 0x6601 020628 beq bt_evt_remote_unsniff ,app_start_auto_sniff 0x6602 020629 and pdata ,0x0f ,temp 0x6603 020630 and_into bt_evt_timer_mask ,pdata 0x6604 020631 beq bt_evt_timer_init ,mouse_bb_event_timer 0x6605 020632 rtn : 020634 le_mouse_bb_event_connected: 0x6606 020635 fetch app_disc_rsn_size ,mem_app_disconn_reason_flag 0x6607 020636 set0 app_disc_by_button ,pdata 0x6608 020637 store app_disc_rsn_size ,mem_app_disconn_reason_flag 0x6609 020638 setarg 0 0x660a 020639 store 2 ,mem_mouse_direct_timer 0x660b 020640 fetch 1 ,mem_conn_cnt 0x660c 020641 increase 1 ,pdata 0x660d 020642 store 1 ,mem_conn_cnt 0x660e 020643 branch mouse_stop_discovery : 020645 mouse_bb_event_pincode: 0x660f 020646 call pincode_reinit 0x6610 020647 branch app_bt_set_pincode : 020649 mouse_bb_event_reconn_failed: 0x6611 020650 fetch 2 ,mem_ui_state_map 0x6612 020651 bbit1 ui_state_btn_down ,mouse_start_discovery 0x6613 020652 branch app_bb_hibernate : 020655 mouse_bt_hid_connected: 0x6614 020656 call mouse_hid_connected 0x6615 020657 rtn : 020658 mouse_bt_event_setup_complete: 0x6616 020659 rtn : 020661 mouse_bb_disconnected: 0x6617 020662 set0 mark_ext_patch ,mark 0x6618 020663 bpatch patch18_5 ,mem_patch18 0x6619 020664 call mouse_bb_discon_clear_stack 0x661a 020665 fetch app_disc_rsn_size ,mem_app_disconn_reason 0x661b 020666 bbit1 app_disc_ble ,mouse4_0_event_bb_disconn 0x661c 020667 bbit1 app_disc_by_button ,app_disconn_reason_clear 0x661d 020668 bbit1 app_disc_after_pairing ,mouse_event_light_state_pairing 0x661e 020669 bbit1 app_disc_after_reconn ,mouse_event_light_state_hibernate 0x661f 020670 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 0x6620 020671 branch mouse_start_discovery : 020672 mouse_bb_discon_clear_stack: 0x6621 020673 setarg 0 0x6622 020674 store 4 ,mem_mouse_z_last 0x6623 020675 jam 0 ,mem_mouse_send_blank_timer 0x6624 020676 jam 0 ,mem_mouse_move_flag 0x6625 020677 jam app_handshake_null ,mem_app_handshake_flag 0x6626 020678 jam 0 ,mem_ltk_exists 0x6627 020679 jam 0 ,mem_mouse_mode_state 0x6628 020680 jam 0 ,mem_reconnect_timeout 0x6629 020681 rtn : 020683 mouse_event_light_state_pairing: 0x662a 020684 bbit1 app_disc_after_handshake ,mouse_event_light_state_hibernate 0x662b 020685 bbit1 app_disc_after_sniff ,mouse_event_light_state_hibernate 0x662c 020686 branch mouse_start_discovery : 020687 mouse_event_light_state_hibernate: 0x662d 020688 fetch 2 ,mem_ui_state_map 0x662e 020689 bbit1 ui_state_btn_down ,mouse_start_discovery 0x662f 020690 branch app_bb_hibernate : 020692 mouse4_0_event_bb_disconn: 0x6630 020693 call le_clean_att_list_handle_enable 0x6631 020694 fetch app_disc_rsn_size ,mem_app_disconn_reason 0x6632 020695 bbit1 app_disc_by_button ,app_disconn_reason_clear 0x6633 020696 branch app_bb_hibernate : 020698 mouse_bb_event_timer: 0x6634 020699 set0 mark_ext_patch ,mark 0x6635 020700 bpatch patch18_6 ,mem_patch18 0x6636 020701 storet 1 ,mem_app_evt_timer_count : 020702 mouse_bb_event_100ms_loop: 0x6637 020703 fetch 1 ,mem_app_evt_timer_count 0x6638 020704 rtn blank 0x6639 020705 increase -1 ,pdata 0x663a 020706 store 1 ,mem_app_evt_timer_count 0x663b 020709 call mouse_check_hid_handshake_timer 0x663c 020710 call mouse_check_discovery_timeout_timer 0x663d 020711 call mouse_check_direct_timeout_timer 0x663e 020712 call mouse_check_no_data_timeout_timer 0x663f 020714 fetch 1 ,mem_mouse_mode_state 0x6640 020715 compare mouse_mode_state_ble ,pdata ,0xff 0x6641 020716 call mouse4_0_bb_event_100ms ,true 0x6642 020717 fetch 1 ,mem_mouse_mode_state 0x6643 020718 compare mouse_mode_state_bt ,pdata ,0xff 0x6644 020719 call mouse3_0_bb_event_100ms ,true 0x6645 020720 branch mouse_bb_event_100ms_loop : 020722 mouse3_0_bb_event_100ms: 0x6646 020724 call mouse_check_blank_data_timeout_timer 0x6647 020725 branch mouse_send_blank_packet_timer : 020727 mouse4_0_bb_event_100ms: 0x6648 020729 rtn : 020731 mouse_check_hid_handshake_timer: 0x6649 020732 fetch 1 ,mem_hid_handshake_timer_count 0x664a 020733 rtn blank 0x664b 020734 increase -1 ,pdata 0x664c 020735 store 1 ,mem_hid_handshake_timer_count 0x664d 020736 nrtn blank 0x664e 020737 branch mouse_bt_hid_handshake : 020739 mouse_check_discovery_timeout_timer: 0x664f 020740 fetch 2 ,mem_mouse_discovery_timer 0x6650 020741 rtn blank 0x6651 020742 increase -1 ,pdata 0x6652 020743 store 2 ,mem_mouse_discovery_timer 0x6653 020744 nrtn blank 0x6654 020745 call mouse_stop_discovery 0x6655 020746 branch app_enter_hibernate : 020748 mouse_check_direct_timeout_timer: 0x6656 020749 fetch 2 ,mem_mouse_direct_timer 0x6657 020750 rtn blank 0x6658 020751 increase -1 ,pdata 0x6659 020752 store 2 ,mem_mouse_direct_timer 0x665a 020753 nrtn blank 0x665b 020754 call app_ble_stop_direct_adv 0x665c 020755 branch app_enter_hibernate : 020757 mouse_check_blank_data_timeout_timer: 0x665d 020758 fetch 2 ,mem_mouse_blank_data_timer 0x665e 020759 rtn blank 0x665f 020760 increase -1 ,pdata 0x6660 020761 store 2 ,mem_mouse_blank_data_timer 0x6661 020762 nrtn blank 0x6662 020763 jam 0 ,mem_mouse_send_blank_timer 0x6663 020764 rtn : 020766 mouse_check_no_data_timeout_timer: 0x6664 020767 fetch 2 ,mem_mouse_no_data_timer 0x6665 020768 rtn blank 0x6666 020769 increase -1 ,pdata 0x6667 020770 store 2 ,mem_mouse_no_data_timer 0x6668 020771 nrtn blank 0x6669 020772 branch mouse_disconnect : 020774 mouse_bb_event_discovery_btn: 0x666a 020775 set0 mark_ext_patch ,mark 0x666b 020776 bpatch patch18_7 ,mem_patch18 0x666c 020777 jam 0 ,mem_mouse_send_blank_timer 0x666d 020778 jam 1 ,mem_reconnect_timeout 0x666e 020779 setarg 0 0x666f 020780 store 2 ,mem_mouse_direct_timer 0x6670 020781 call mouse_disconnect 0x6671 020782 fetch 1 ,mem_device_option 0x6672 020783 isolate1 mode_4_mouse ,pdata 0x6673 020784 call mouse4_0_bb_event_discovery_btn ,true 0x6674 020785 fetch 1 ,mem_device_option 0x6675 020786 isolate1 mode_3_mouse ,pdata 0x6676 020787 call mouse3_0_bb_event_discovery_btn ,true 0x6677 020788 call app_lpm_mult_disable 0x6678 020789 branch mouse_start_discovery : 020793 mouse3_0_check_reconn_target: 0x6679 020794 fetch 6 ,mem_hci_plap 0x667a 020795 branch app_bt_start_discovery_short ,blank 0x667b 020796 branch app_bt_start_reconnect : 020798 mouse4_0_check_reconn_target: 0x667c 020799 fetch 6 ,mem_hci_plap 0x667d 020800 branch mouse4_0_no_reconn_target ,blank 0x667e 020801 fetch 2 ,mem_mouse_direct_timeout 0x667f 020802 store 2 ,mem_mouse_direct_timer 0x6680 020803 call app_lpm_mult_enable 0x6681 020804 branch app_ble_start_direct_adv : 020805 mouse4_0_no_reconn_target: 0x6682 020806 call app_led_start_blink 0x6683 020807 branch app_ble_start_adv : 020809 mouse3_0_bb_event_discovery_btn: 0x6684 020810 fetch 2 ,mem_ui_state_map 0x6685 020811 isolate1 ui_state_bt_reconnect ,pdata 0x6686 020812 call app_bt_reconnect_cancel ,true 0x6687 020813 rtn : 020814 mouse4_0_bb_event_discovery_btn: 0x6688 020815 call le_clean_att_list_handle_enable 0x6689 020816 rtn : 020818 mouse_bt_hid_handshake: 0x668a 020819 jam app_handshake_done ,mem_app_handshake_flag 0x668b 020820 call app_lpm_mult_enable 0x668c 020821 call app_bt_store_reconn_info 0x668d 020822 jam mouse_mode_state_bt ,mem_mouse_mode_state 0x668e 020823 setarg 0 0x668f 020824 store 2 ,mem_discovery_timeout_timer_count 0x6690 020825 store 1 ,mem_hid_handshake_timer_count 0x6691 020826 call app_bt_enter_sniff 0x6692 020827 branch mouse_send_blank_packet_timer_init : 020829 mouse_check_reconn_target: 0x6693 020830 fetch 1 ,mem_xrecord_mode 0x6694 020831 beq rec_3_mode ,mouse3_0_check_reconn_target 0x6695 020832 beq rec_4_mode ,mouse4_0_check_reconn_target 0x6696 020833 branch mouse_start_discovery : 020835 mouse_start_discovery: 0x6697 020836 set0 mark_ext_patch ,mark 0x6698 020837 bpatch patch19_0 ,mem_patch19 0x6699 020838 fetch 1 ,mem_le_lap 0x669a 020839 increase 1 ,pdata 0x669b 020840 store 1 ,mem_le_lap 0x669c 020841 call app_lpm_mult_disable 0x669d 020842 fetch 2 ,mem_discovery_timeout 0x669e 020843 store 2 ,mem_mouse_discovery_timer 0x669f 020844 fetch 1 ,mem_device_option 0x66a0 020845 isolate1 mode_4_mouse ,pdata 0x66a1 020846 call app_ble_start_adv ,true 0x66a2 020847 fetch 1 ,mem_device_option 0x66a3 020848 isolate1 mode_3_mouse ,pdata 0x66a4 020849 call app_bt_start_discovery ,true 0x66a5 020850 branch app_led_start_blink : 020852 mouse_stop_discovery: 0x66a6 020853 set0 mark_ext_patch ,mark 0x66a7 020854 bpatch patch19_1 ,mem_patch19 0x66a8 020855 setarg 0 0x66a9 020856 store 2 ,mem_mouse_discovery_timer 0x66aa 020857 fetch 1 ,mem_device_option 0x66ab 020858 isolate1 mode_4_mouse ,pdata 0x66ac 020859 call app_ble_stop_adv ,true 0x66ad 020860 fetch 1 ,mem_device_option 0x66ae 020861 isolate1 mode_3_mouse ,pdata 0x66af 020862 call app_bt_stop_discovery ,true 0x66b0 020863 branch app_led_stop_blink : 020865 mouse_disconnect: 0x66b1 020866 set0 mark_ext_patch ,mark 0x66b2 020867 bpatch patch19_2 ,mem_patch19 0x66b3 020868 setarg 0 0x66b4 020869 store 2 ,mem_mouse_no_data_timer 0x66b5 020870 fetch 2 ,mem_ui_state_map 0x66b6 020871 bbit1 ui_state_ble_connected ,app_ble_disconnect 0x66b7 020872 fetch 2 ,mem_ui_state_map 0x66b8 020873 bbit1 ui_state_bt_connected ,app_bt_disconnect 0x66b9 020874 rtn : 020876 eeprom_store_mouse_dpi: 0x66ba 020877 set0 mark_ext_patch ,mark 0x66bb 020878 bpatch patch19_3 ,mem_patch19 0x66bc 020879 arg 1 ,temp 0x66bd 020880 arg mem_mouse_dpi ,rega 0x66be 020881 arg mouse_dpi_eeprom_addr ,regb 0x66bf 020882 branch iicd_write_eep_data : 020884 eeprom_load_mouse_dpi: 0x66c0 020885 set0 mark_ext_patch ,mark 0x66c1 020886 bpatch patch19_4 ,mem_patch19 0x66c2 020887 arg 1 ,temp 0x66c3 020888 arg mem_mouse_dpi ,rega 0x66c4 020889 arg mouse_dpi_eeprom_addr ,regb 0x66c5 020890 branch iicd_read_eep_data : 020898 twspi_reset: 0x66c6 020899 set0 mark_ext_patch ,mark 0x66c7 020900 bpatch patch1f_6 ,mem_patch1f 0x66c8 020901 hfetch 1 ,core_gpio_oe3 0x66c9 020902 arg 0x06 ,temp 0x66ca 020903 ior temp ,pdata 0x66cb 020904 hstore 1 ,core_gpio_oe3 0x66cc 020905 hfetch 1 ,core_gpio_out3 0x66cd 020906 ior temp ,pdata 0x66ce 020907 hstore 1 ,core_gpio_out3 0x66cf 020908 hjam 0 ,core_gpio_sel1 0x66d0 020909 hfetch 1 ,core_gpio_out3 0x66d1 020910 set0 1 ,pdata 0x66d2 020911 set0 2 ,pdata 0x66d3 020912 hstore 1 ,core_gpio_out3 0x66d4 020913 nop 30 0x66d5 020914 hjam 1 ,core_gpio_sel1 0x66d6 020915 rtn : 020916 twspi_write: 0x66d7 020917 branch spid_write_reg : 020919 twspi_read: 0x66d8 020920 branch spid_read_reg : 020927 read_function_aes: 0x66d9 020928 nbranch read_function ,user 0x66da 020929 hfetch 1 ,core_gpio_key2 0x66db 020930 or_into 0x20 ,pdata 0x66dc 020931 hstore 1 ,core_gpio_key2 : 020932 read_function: 0x66dd 020933 copy temp ,null 0x66de 020934 branch read_fuction_zero ,zero 0x66df 020935 copy regc ,pc : 020936 read_fuction_zero: 0x66e0 020937 isolate0 0 ,null 0x66e1 020938 branch set_ucode_status : 020941 get_block_header: 0x66e2 020942 force 4 ,temp : 020943 get_block_header0: 0x66e3 020944 arg mem_ucode_buf ,rega 0x66e4 020945 hfetch 1 ,core_gpio_key2 0x66e5 020946 and_into 0xdf ,pdata 0x66e6 020947 hstore 1 ,core_gpio_key2 0x66e7 020948 call read_function 0x66e8 020949 arg 0x55aa ,rega 0x66e9 020950 fetch 2 ,mem_ucode_buf 0x66ea 020951 ifetcht 2 ,contr 0x66eb 020952 isub rega ,null 0x66ec 020953 rtn : 020955 read_first_block: 0x66ed 020956 arg 2 ,temp 0x66ee 020957 arg mem_ucode_ptr ,rega 0x66ef 020958 call read_function 0x66f0 020959 fetch 2 ,mem_ucode_ptr 0x66f1 020960 store 2 ,mem_addr_mi 0x66f2 020961 call get_iv ,user 0x66f3 020962 rtn : 020964 get_iv: 0x66f4 020965 arg 16 ,temp 0x66f5 020966 arg mem_ucode_keybuf ,rega 0x66f6 020967 hfetch 1 ,core_gpio_key2 0x66f7 020968 and_into 0xdf ,pdata 0x66f8 020969 hstore 1 ,core_gpio_key2 0x66f9 020970 call read_function 0x66fa 020971 arg mem_ucode_keybuf ,contr 0x66fb 020972 arg 16 ,loopcnt 0x66fc 020973 call aes_load_data 0x66fd 020974 call aes_init 0x66fe 020975 call aes_clear_data 0x66ff 020976 branch do_aes_cbc : 020978 load_storage: 0x6700 020979 disable match 0x6701 020980 call get_block_header 0x6702 020981 nrtn zero 0x6703 020982 enable match 0x6704 020983 hjam 0x80 ,core_ucode_ctrl 0x6705 020984 hjam 0 ,core_ucode_hi 0x6706 020985 hjam 0 ,core_ucode_low 0x6707 020986 arg core_ucode_data ,rega 0x6708 020987 call read_function_aes 0x6709 020988 hjam 0x0 ,core_ucode_ctrl 0x670a 020989 call get_block_header 0x670b 020990 nrtn zero 0x670c 020991 force 0 ,pdata 0x670d 020992 hstore 2 ,core_docd_paddr 0x670e 020993 arg core_docd_pdata ,rega 0x670f 020994 call read_function_aes : 020995 load_storage_loop: 0x6710 020996 arg 6 ,temp 0x6711 020997 call get_block_header0 0x6712 020998 nrtn zero 0x6713 020999 ifetch 2 ,contr 0x6714 021000 iforce rega 0x6715 021001 call read_function 0x6716 021002 branch load_storage_loop : 021008 reload_eeprom: 0x6717 021009 call clean_mem 0x6718 021010 setarg 0x1000 0x6719 021011 store 2 ,mem_addr_mi 0x671a 021012 arg iicd_read_eep ,regc 0x671b 021013 arg 2 ,loopcnt : 021014 reload_eeprom_loop: 0x671c 021015 call get_block_header 0x671d 021016 nrtn zero 0x671e 021017 fetch 2 ,mem_addr_mi 0x671f 021018 byteswap pdata ,pdata 0x6720 021019 iadd temp ,pdata 0x6721 021020 byteswap pdata ,pdata 0x6722 021021 store 2 ,mem_addr_mi 0x6723 021022 loop reload_eeprom_loop 0x6724 021023 branch load_storage_loop : 021025 loadcode: 0x6725 021026 hjam 0x25 ,core_clkoff 0x6726 021027 hjam 5 ,core_docd_ctrl 0x6727 021028 call clean_mem : 021029 loadcode_lpm: 0x6728 021030 disable user 0x6729 021031 call otp_enable_chgpump 0x672a 021032 setarg otp_ucode_flag 0x672b 021033 arg mem_otp_ucode_flag ,rega 0x672c 021034 arg 2 ,temp 0x672d 021035 call otpd_read_data 0x672e 021036 fetch 2 ,mem_otp_ucode_flag 0x672f 021037 bbit0 otp_uflag_aes ,loadcode_otp 0x6730 021038 setarg otp_ucode_aeskey 0x6731 021039 arg mem_ucode_keybuf ,rega 0x6732 021040 arg 16 ,temp 0x6733 021041 call otpd_read_data 0x6734 021042 hjam lock_otp ,core_misc_ctrl 0x6735 021043 arg mem_ucode_keybuf ,contr 0x6736 021044 call load_key 0x6737 021045 enable user : 021046 loadcode_otp: 0x6738 021047 fetch 2 ,mem_otp_ucode_flag 0x6739 021048 byteswap pdata ,pdata 0x673a 021049 arg 0x7ff ,temp 0x673b 021050 iand temp ,pdata 0x673c 021051 branch loadcode_spi ,zero 0x673d 021052 call otp_set_addr 0x673e 021053 arg otpd_read_code ,regc 0x673f 021054 call get_iv ,user 0x6740 021055 call load_storage 0x6741 021056 fetch 1 ,mem_ucode_status 0x6742 021057 compare 3 ,pdata ,3 0x6743 021058 nbranch loadcode_otp ,true : 021059 loadcode_spi: 0x6744 021060 call otp_disable_chgpump 0x6745 021061 fetch 1 ,mem_otp_ucode_flag 0x6746 021062 bbit1 otp_uflag_skip_flash ,loadcode_iic 0x6747 021063 setarg 0x0 0x6748 021064 store 3 ,mem_addr_hi 0x6749 021065 call spid_init_flash 0x674a 021066 arg spid_read_flash ,regc 0x674b 021067 call read_first_block 0x674c 021068 call load_storage 0x674d 021069 nbranch loadcode_iic ,match 0x674e 021070 fetch 1 ,mem_ucode_status 0x674f 021071 compare 3 ,pdata ,3 0x6750 021072 nbranch loadcode_spi ,true : 021073 loadcode_iic: 0x6751 021074 fetch 1 ,mem_otp_ucode_flag 0x6752 021075 bbit1 otp_uflag_skip_eep ,loadcode_hci 0x6753 021076 setarg 0x0 0x6754 021077 store 2 ,mem_addr_mi 0x6755 021078 arg iicd_read_eep ,regc 0x6756 021079 call iicd_init_12m 0x6757 021080 call read_first_block 0x6758 021081 call load_storage 0x6759 021082 nbranch loadcode_hci ,match 0x675a 021083 fetch 1 ,mem_ucode_status 0x675b 021084 compare 3 ,pdata ,3 0x675c 021085 nbranch loadcode_iic ,true : 021086 loadcode_hci: 0x675d 021087 hjam 0x21 ,core_clkoff 0x675e 021088 fetch 1 ,mem_otp_ucode_flag 0x675f 021089 rtnbit0 otp_uflag_hci 0x6760 021090 call hci_init : 021091 loadcode_hci_loop: 0x6761 021092 call hci_rx_packet 0x6762 021093 branch loadcode_hci_loop : 021096 set_ucode_status: 0x6763 021097 fetch 1 ,mem_ucode_status 0x6764 021098 lshift pdata ,pdata 0x6765 021099 setflag true ,0 ,pdata 0x6766 021100 isolate0 15 ,rega 0x6767 021101 rtn true 0x6768 021102 store 1 ,mem_ucode_status 0x6769 021103 rtn : 021106 decrypt_code: 0x676a 021107 hfetch 1 ,core_gpio_key2 0x676b 021108 rtnbit0 5 0x676c 021109 branch decrypt_code_skip : 021110 decrypt_code_loop: 0x676d 021111 hfetch 1 ,core_dma_status 0x676e 021112 qisolate1 pdata 0x676f 021113 rtn true : 021114 decrypt_code_skip: 0x6770 021115 hfetch 1 ,core_misc_status 0x6771 021116 bbit0 1 ,decrypt_code_loop 0x6772 021117 call do_aes_cbc 0x6773 021118 branch decrypt_code_loop : 021122 save_ucode: 0x6774 021123 copy loopcnt ,temp 0x6775 021124 storet 2 ,mem_patch_len 0x6776 021125 hjam 0x80 ,core_ucode_ctrl 0x6777 021126 hjam 0 ,core_ucode_hi 0x6778 021127 hjam 0 ,core_ucode_low 0x6779 021128 store 2 ,mem_patch_ptr 0x677a 021129 iforce contw 0x677b 021130 lshift2 loopcnt ,loopcnt : 021131 save_ucode_loop: 0x677c 021132 hfetch 1 ,core_ucode_data 0x677d 021133 istore 1 ,contw 0x677e 021134 loop save_ucode_loop 0x677f 021135 hjam 0x0 ,core_ucode_ctrl 0x6780 021136 rtn : 021138 load_ucode: 0x6781 021139 fetch 2 ,mem_patch_ptr 0x6782 021140 rtn blank 0x6783 021141 hjam 0x80 ,core_ucode_ctrl 0x6784 021142 hjam 0 ,core_ucode_hi 0x6785 021143 hjam 0 ,core_ucode_low 0x6786 021144 fetcht 2 ,mem_patch_len 0x6787 021145 lshift2 temp ,loopcnt 0x6788 021146 iforce contr : 021147 load_ucode_loop: 0x6789 021148 ifetch 1 ,contr 0x678a 021149 hstore 1 ,core_ucode_data 0x678b 021150 loop load_ucode_loop 0x678c 021151 hjam 0x0 ,core_ucode_ctrl 0x678d 021152 rtn : 021157 spid_init: 0x678e 021158 set0 mark_ext_patch ,mark 0x678f 021159 bpatch patch1f_7 ,mem_patch1f 0x6790 021160 hjam 0x75 ,core_spid_ctrl 0x6791 021161 hjam 10 ,core_spid_delay 0x6792 021162 setarg mem_spid_tbuf 0x6793 021163 hstore 2 ,core_spid_txaddr 0x6794 021164 setarg mem_spid_rbuf 0x6795 021165 hstore 2 ,core_spid_rxaddr 0x6796 021166 hfetch 1 ,core_gpio_sel1 0x6797 021167 set1 0 ,pdata 0x6798 021168 set0 1 ,pdata 0x6799 021169 hstore 1 ,core_gpio_sel1 0x679a 021170 rtn : 021172 spid_reset: 0x679b 021173 hfetch 1 ,core_spid_ctrl 0x679c 021174 set1 7 ,pdata 0x679d 021175 hstore 1 ,core_spid_ctrl 0x679e 021176 set0 7 ,pdata 0x679f 021177 hstore 1 ,core_spid_ctrl 0x67a0 021178 rtn : 021182 spid_write_reg: 0x67a1 021183 set1 7 ,pdata 0x67a2 021184 store 2 ,mem_spid_tbuf 0x67a3 021185 set1 mark_ext_patch ,mark 0x67a4 021186 bpatch patch20_0 ,mem_patch20 0x67a5 021187 hjam 2 ,core_spid_txlen 0x67a6 021188 hjam 0 ,core_spid_rxlen 0x67a7 021189 hjam spid_start ,core_misc_ctrl 0x67a8 021190 branch wait_spid_done : 021193 spid_read_reg: 0x67a9 021194 force 1 ,temp : 021196 spid_read_regs: 0x67aa 021198 store 1 ,mem_spid_tbuf 0x67ab 021199 set1 mark_ext_patch ,mark 0x67ac 021200 bpatch patch20_1 ,mem_patch20 0x67ad 021201 hjam 1 ,core_spid_txlen 0x67ae 021202 hstoret 2 ,core_spid_rxlen 0x67af 021203 hjam spid_start ,core_misc_ctrl 0x67b0 021204 call wait_spid_done 0x67b1 021205 fetch 1 ,mem_spid_rbuf 0x67b2 021206 rtn : 021208 wait_spid_done: 0x67b3 021209 fetch 2 ,mem_afh_error_total 0x67b4 021210 increase 1 ,pdata 0x67b5 021211 store 2 ,mem_afh_error_total 0x67b6 021212 hfetch 1 ,core_dma_status 0x67b7 021213 bbit0 spid_done ,wait_spid_done 0x67b8 021214 rtn : 021216 spid_init_flash: 0x67b9 021217 hjam 0x40 ,core_spid_ctrl 0x67ba 021218 hjam 0x0 ,core_spid_delay 0x67bb 021219 hfetch 1 ,core_gpio_sel1 0x67bc 021220 set0 0 ,pdata 0x67bd 021221 set1 1 ,pdata 0x67be 021222 hstore 1 ,core_gpio_sel1 0x67bf 021223 setarg 0 0x67c0 021224 store 4 ,mem_spid_tbuf 0x67c1 021225 rtn : 021227 spid_unlock_flash: 0x67c2 021228 setarg 0 0x67c3 021229 hstore 2 ,core_spid_rxlen 0x67c4 021230 setarg 1 0x67c5 021231 hstore 1 ,core_spid_txlen 0x67c6 021232 setarg mem_spid_tbuf 0x67c7 021233 hstore 2 ,core_spid_txaddr 0x67c8 021234 jam 6 ,mem_spid_tbuf 0x67c9 021235 hjam spid_start ,core_misc_ctrl 0x67ca 021236 branch wait_spid_done : 021240 spid_write_flash: 0x67cb 021241 increase 4 ,temp 0x67cc 021242 hstoret 2 ,core_spid_txlen 0x67cd 021243 increase -4 ,rega 0x67ce 021244 arg 2 ,temp 0x67cf 021245 istoret 1 ,rega 0x67d0 021246 rshift16 pdata ,temp 0x67d1 021247 istoret 1 ,contw 0x67d2 021248 rshift8 pdata ,temp 0x67d3 021249 istoret 1 ,contw 0x67d4 021250 istore 1 ,contw 0x67d5 021251 deposit rega 0x67d6 021252 hstore 2 ,core_spid_txaddr 0x67d7 021253 setarg 0 0x67d8 021254 hstore 2 ,core_spid_rxlen 0x67d9 021255 hjam spid_start ,core_misc_ctrl 0x67da 021256 branch wait_spid_done : 021260 spid_read_flash: 0x67db 021261 hstoret 2 ,core_spid_rxlen 0x67dc 021262 setarg 4 0x67dd 021263 hstore 2 ,core_spid_txlen 0x67de 021264 jam 3 ,mem_spid_tbuf 0x67df 021265 setarg mem_spid_tbuf 0x67e0 021266 hstore 2 ,core_spid_txaddr 0x67e1 021267 deposit rega 0x67e2 021268 hstore 2 ,core_spid_rxaddr 0x67e3 021269 hfetch 1 ,core_spid_ctrl 0x67e4 021270 isolate0 15 ,rega 0x67e5 021271 setflag true ,6 ,pdata 0x67e6 021272 hstore 1 ,core_spid_ctrl 0x67e7 021273 hjam spid_start ,core_misc_ctrl : 021274 spi_read_flash_wait: 0x67e8 021275 hfetch 1 ,core_dma_status 0x67e9 021276 bbit1 7 ,spi_read_flash_wait 0x67ea 021277 arg spid_done ,queue 0x67eb 021278 call decrypt_code 0x67ec 021279 call wait_spid_done 0x67ed 021280 isolate1 spid_crcok ,pdata 0x67ee 021281 call set_ucode_status 0x67ef 021282 fetch 1 ,mem_addr_hi 0x67f0 021283 lshift16 pdata ,regb 0x67f1 021284 fetch 1 ,mem_addr_mi 0x67f2 021285 lshift8 pdata ,pdata 0x67f3 021286 ior regb ,regb 0x67f4 021287 fetch 1 ,mem_addr_lo 0x67f5 021288 ior regb ,pdata 0x67f6 021289 iadd temp ,pdata 0x67f7 021290 store 1 ,mem_addr_lo 0x67f8 021291 rshift8 pdata ,pdata 0x67f9 021292 store 1 ,mem_addr_mi 0x67fa 021293 rshift8 pdata ,pdata 0x67fb 021294 store 1 ,mem_addr_hi 0x67fc 021295 rtn : 021299 iicd_init_5m: 0x67fd 021300 hjam 0xa ,core_clksel 0x67fe 021301 hjam 2 ,core_iicd_scl_low 0x67ff 021302 hjam 3 ,core_iicd_scl_high 0x6800 021303 hjam 3 ,core_iicd_start_setup 0x6801 021304 hjam 3 ,core_iicd_start_hold 0x6802 021305 hjam 3 ,core_iicd_stop_setup 0x6803 021306 hjam 2 ,core_iicd_data_setup 0x6804 021307 rtn : 021309 iicd_init_12m: 0x6805 021310 hjam 5 ,core_iicd_scl_low 0x6806 021311 hjam 7 ,core_iicd_scl_high 0x6807 021312 hjam 7 ,core_iicd_start_setup 0x6808 021313 hjam 7 ,core_iicd_start_hold 0x6809 021314 hjam 7 ,core_iicd_stop_setup 0x680a 021315 hjam 5 ,core_iicd_data_setup 0x680b 021316 rtn : 021320 wait_iicd_done: 0x680c 021321 hfetch 1 ,core_dma_status 0x680d 021322 bbit0 iicd_done ,wait_iicd_done 0x680e 021323 rtn : 021326 iicd_read_data: 0x680f 021327 store 1 ,mem_iicd_tbuf 0x6810 021328 setarg mem_iicd_tbuf 0x6811 021329 hstore 2 ,core_iicd_txaddr 0x6812 021330 setarg 1 0x6813 021331 hstore 2 ,core_iicd_txlen 0x6814 021332 hstoret 2 ,core_iicd_rxlen 0x6815 021333 deposit rega 0x6816 021334 hstore 2 ,core_iicd_rxaddr 0x6817 021335 hjam 1 ,core_iicd_ctrl 0x6818 021336 hjam iicd_start ,core_misc_ctrl 0x6819 021337 branch wait_iicd_done : 021339 byteswap_addr_mi: 0x681a 021340 byteswap pdata ,pdata 0x681b 021341 store 2 ,mem_addr_mi 0x681c 021342 rtn : 021348 iicd_read_eep_data: 0x681d 021349 set1 mark_ext_patch ,mark 0x681e 021350 bpatch patch20_2 ,mem_patch20 0x681f 021351 fetch 2 ,mem_eeprom_base 0x6820 021352 iadd regb ,pdata : 021355 iicd_read_eep_adr: 0x6821 021356 byteswap pdata ,pdata 0x6822 021357 store 2 ,mem_addr_mi : 021360 iicd_read_eep: 0x6823 021361 set1 mark_ext_patch ,mark 0x6824 021362 bpatch patch20_3 ,mem_patch20 0x6825 021363 setarg 4 0x6826 021364 hstore 2 ,core_iicd_txlen 0x6827 021365 jam 0xa0 ,mem_iicd_tbuf 0x6828 021366 jam 0xa1 ,mem_iicd_tbuf + 3 0x6829 021367 setarg mem_iicd_tbuf 0x682a 021368 hstore 2 ,core_iicd_txaddr 0x682b 021369 hstoret 2 ,core_iicd_rxlen 0x682c 021370 deposit rega 0x682d 021371 hstore 2 ,core_iicd_rxaddr 0x682e 021372 setarg 2 0x682f 021373 isolate0 15 ,rega 0x6830 021374 setflag true ,0 ,pdata 0x6831 021375 hstore 1 ,core_iicd_ctrl 0x6832 021376 hjam iicd_start ,core_misc_ctrl 0x6833 021377 arg iicd_done ,queue 0x6834 021378 call decrypt_code 0x6835 021379 call wait_iicd_done 0x6836 021380 isolate1 iicd_crcok ,pdata 0x6837 021381 call set_ucode_status 0x6838 021382 fetch 2 ,mem_addr_mi 0x6839 021383 byteswap pdata ,pdata 0x683a 021384 iadd temp ,pdata 0x683b 021385 byteswap pdata ,pdata 0x683c 021386 store 2 ,mem_addr_mi 0x683d 021387 rtn : 021393 iicd_write_eep_data: 0x683e 021394 set1 mark_ext_patch ,mark 0x683f 021395 bpatch patch20_4 ,mem_patch20 0x6840 021396 fetch 2 ,mem_eeprom_base 0x6841 021397 iadd regb ,pdata : 021400 iicd_write_ota_data: 0x6842 021401 store 2 ,mem_pdatatemp 0x6843 021402 set1 mark_ext_patch ,mark 0x6844 021403 bpatch patch20_5 ,mem_patch20 0x6845 021404 storet 2 ,mem_temp 0x6846 021405 copy rega ,pdata 0x6847 021406 store 2 ,mem_contr : 021407 iicd_write_eep_loop: 0x6848 021408 call iicd_eep_transparency 0x6849 021410 fetcht 2 ,mem_regb 0x684a 021411 fetch 2 ,mem_contr 0x684b 021412 copy pdata ,rega 0x684c 021413 fetch 2 ,mem_pdatatemp 0x684d 021415 call iicd_write_eep 0x684e 021417 fetch 2 ,mem_regb 0x684f 021418 fetcht 2 ,mem_contr 0x6850 021419 iadd temp ,temp 0x6851 021420 storet 2 ,mem_contr 0x6852 021421 fetcht 2 ,mem_pdatatemp 0x6853 021422 iadd temp ,temp 0x6854 021423 storet 2 ,mem_pdatatemp 0x6855 021424 fetch 2 ,mem_temp 0x6856 021425 nbranch iicd_write_eep_loop ,blank 0x6857 021426 rtn : 021434 iicd_eep_transparency: 0x6858 021435 set1 mark_ext_patch ,mark 0x6859 021436 bpatch patch20_6 ,mem_patch20 0x685a 021437 fetch 2 ,mem_eeprom_block_size 0x685b 021438 increase -1 ,pdata 0x685c 021439 fetcht 2 ,mem_pdatatemp 0x685d 021440 ior temp ,pdata 0x685e 021441 increase 1 ,pdata 0x685f 021442 store 3 ,mem_regc 0x6860 021444 fetch 2 ,mem_temp 0x6861 021445 iadd temp ,pdata 0x6862 021447 fetcht 3 ,mem_regc 0x6863 021448 isub temp ,pdata 0x6864 021449 nbranch iicd_eep_deal_short_packet ,positive 0x6865 021450 store 2 ,mem_temp 0x6866 021451 fetch 3 ,mem_regc 0x6867 021452 fetcht 2 ,mem_pdatatemp 0x6868 021453 isub temp ,pdata 0x6869 021454 store 2 ,mem_regb 0x686a 021455 rtn : 021456 iicd_eep_deal_short_packet: 0x686b 021457 fetch 2 ,mem_temp 0x686c 021458 store 2 ,mem_regb 0x686d 021459 setarg 0 0x686e 021460 store 2 ,mem_temp 0x686f 021461 rtn : 021466 iicd_write_eep: 0x6870 021467 copy pdata ,regb 0x6871 021468 set1 mark_ext_patch ,mark 0x6872 021469 bpatch patch20_7 ,mem_patch20 0x6873 021470 copy regb ,pdata 0x6874 021471 increase 3 ,temp 0x6875 021472 hstoret 2 ,core_iicd_txlen 0x6876 021473 increase -3 ,rega 0x6877 021474 ifetcht 3 ,rega 0x6878 021475 copy temp ,regb 0x6879 021476 arg 0xa0 ,temp 0x687a 021477 istoret 1 ,rega 0x687b 021478 byteswap pdata ,pdata 0x687c 021479 istore 2 ,contw 0x687d 021480 deposit rega 0x687e 021481 hstore 2 ,core_iicd_txaddr 0x687f 021482 setarg 0 0x6880 021483 hstore 2 ,core_iicd_rxlen 0x6881 021484 hjam 1 ,core_iicd_ctrl 0x6882 021485 hjam iicd_start ,core_misc_ctrl 0x6883 021486 call wait_iicd_done 0x6884 021487 copy regb ,pdata 0x6885 021488 istore 3 ,rega 0x6886 021489 nop 10000 0x6887 021490 nop 10000 0x6888 021491 nop 10000 0x6889 021492 rtn : 021496 otp_enable_chgpump: 0x688a 021497 hjam 0x70 ,rfen_chgpump 0x688b 021498 nop param_chgpump_delay 0x688c 021499 rtn : 021501 otp_disable_chgpump: 0x688d 021502 hjam 0x30 ,rfen_chgpump 0x688e 021503 rtn : 021505 otp_set_addr: 0x688f 021506 lshift3 pdata ,pdata 0x6890 021507 hstore 2 ,core_otp_addr 0x6891 021508 hjam 0 ,core_otpd_ctrl 0x6892 021509 rtn : 021512 otp_write: 0x6893 021513 call otp_set_addr 0x6894 021514 call otp_ce : 021515 otp_program: 0x6895 021516 ifetcht 1 ,rega 0x6896 021517 increase 1 ,rega 0x6897 021518 force 0 ,queue : 021519 otp_program_bit: 0x6898 021520 qisolate0 temp 0x6899 021521 branch otp_skip_0 ,true 0x689a 021522 hfetch 1 ,core_otp_din 0x689b 021523 set1 6 ,pdata 0x689c 021524 set1 7 ,pdata 0x689d 021525 hstore 1 ,core_otp_din 0x689e 021526 hjam 0x02 ,core_otp_ctrl 0x689f 021527 hjam 0x82 ,core_otp_ctrl 0x68a0 021528 set0 7 ,pdata 0x68a1 021529 hstore 1 ,core_otp_din 0x68a2 021530 hjam 0x8a ,core_otp_ctrl 0x68a3 021531 nop 11 0x68a4 021532 hjam 0xca ,core_otp_ctrl 0x68a5 021533 nop 33 0x68a6 021534 hjam 0x4a ,core_otp_ctrl 0x68a7 021535 nop 44 0x68a8 021536 hjam 0xca ,core_otp_ctrl 0x68a9 021537 nop 22 0x68aa 021538 hjam 0x8a ,core_otp_ctrl 0x68ab 021539 nop 33 0x68ac 021540 hjam 0x82 ,core_otp_ctrl 0x68ad 021541 nop 1 0x68ae 021542 hjam 0x92 ,core_otp_ctrl 0x68af 021543 nop 10 0x68b0 021544 hjam 0xb2 ,core_otp_ctrl 0x68b1 021545 hfetch 1 ,core_otp_rdata 0x68b2 021546 hjam 0x92 ,core_otp_ctrl 0x68b3 021547 nop 1 0x68b4 021548 hjam 0x82 ,core_otp_ctrl 0x68b5 021549 qisolate0 pdata 0x68b6 021550 branch otp_program_bit ,true : 021551 otp_skip_0: 0x68b7 021552 hfetch 2 ,core_otp_addr 0x68b8 021553 increase 1 ,pdata 0x68b9 021554 hstore 2 ,core_otp_addr 0x68ba 021555 increase 1 ,queue 0x68bb 021556 compare 8 ,queue ,0xf 0x68bc 021557 nbranch otp_program_bit ,true 0x68bd 021558 loop otp_program 0x68be 021559 hjam 0x83 ,core_otp_ctrl 0x68bf 021560 rtn : 021562 otp_ce: 0x68c0 021563 hjam 0x82 ,core_otp_ctrl 0x68c1 021564 nop 12 0x68c2 021565 hjam 0x80 ,core_otp_ctrl 0x68c3 021566 hjam 0x82 ,core_otp_ctrl 0x68c4 021567 nop 150 0x68c5 021568 rtn : 021571 otpd_read_init: 0x68c6 021572 call otp_ce : 021573 otpd_read_special: 0x68c7 021574 hjam 0xa2 ,core_otp_ctrl 0x68c8 021575 deposit rega 0x68c9 021576 hstore 2 ,core_otpd_addr 0x68ca 021577 set1 11 ,temp 0x68cb 021578 isolate0 15 ,pdata 0x68cc 021579 setflag true ,15 ,temp 0x68cd 021580 hstoret 2 ,core_otpd_len 0x68ce 021581 hjam otpd_start ,core_misc_ctrl 0x68cf 021582 rtn : 021584 otpd_wait_end: 0x68d0 021585 hfetch 1 ,core_dma_status 0x68d1 021586 bbit0 otpd_done ,otpd_wait_end 0x68d2 021587 rtn : 021590 otpd_read_data: 0x68d3 021591 call otp_set_addr 0x68d4 021592 call otpd_read_init 0x68d5 021593 call otpd_wait_end 0x68d6 021594 hjam 0x83 ,core_otp_ctrl 0x68d7 021595 rtn : 021600 otpd_read_code: 0x68d8 021601 hfetch 2 ,core_current_otp_addr 0x68d9 021602 hstore 2 ,core_otp_addr 0x68da 021603 call otpd_read_init 0x68db 021604 arg otpd_done ,queue 0x68dc 021605 call decrypt_code 0x68dd 021606 call otpd_wait_end 0x68de 021607 isolate1 otpd_crcok ,pdata 0x68df 021608 call set_ucode_status 0x68e0 021609 hjam 0x83 ,core_otp_ctrl 0x68e1 021610 rtn : 021613 uartd_rx_cnt_got_first_byte: 0x68e2 021614 jam 1 ,mem_uartd_rxitems_got_data 0x68e3 021615 force uart_rx_timer ,queue 0x68e4 021616 fetch 2 ,mem_uartd_rx_timeout 0x68e5 021617 branch timer_init : 021618 uartd_rx_cnt_with_threshold: 0x68e6 021619 hfetch 2 ,core_uart_rxitems 0x68e7 021620 rtn blank 0x68e8 021621 fetcht 1 ,mem_uartd_rxitems_threshold 0x68e9 021622 isub temp ,null 0x68ea 021623 branch uartd_rx_cnt_rtn_value ,positive 0x68eb 021624 fetch 1 ,mem_uartd_rxitems_got_data 0x68ec 021625 branch uartd_rx_cnt_got_first_byte ,blank 0x68ed 021626 arg uart_rx_timer ,queue 0x68ee 021627 call timer_check 0x68ef 021628 branch uartd_rx_cnt_rtn_value ,blank 0x68f0 021629 setarg 0 0x68f1 021630 rtn : 021631 uartd_rx_cnt_rtn_value: 0x68f2 021632 force uart_rx_timer ,queue 0x68f3 021633 call timer_stop 0x68f4 021634 jam 0 ,mem_uartd_rxitems_got_data 0x68f5 021635 hfetch 2 ,core_uart_rxitems 0x68f6 021636 rtn : 021643 uartd_prepare_tx: 0x68f7 021644 hfetch 2 ,core_uart_twptr 0x68f8 021645 iforce contwu 0x68f9 021646 rtn : 021648 uartd_send: 0x68fa 021649 deposit contwu 0x68fb 021650 hstore 2 ,core_uart_twptr 0x68fc 021651 rtn : 021653 uartd_prepare_rx: 0x68fd 021654 hfetch 2 ,core_uart_rxitems 0x68fe 021655 rtn blank 0x68ff 021656 iforce loopcnt 0x6900 021657 hfetch 2 ,core_uart_rrptr 0x6901 021658 iforce contru 0x6902 021659 rtn : 021662 uartd_rxdone_by_len: 0x6903 021663 hfetch 2 ,core_uart_rrptr 0x6904 021664 iadd temp ,pdata 0x6905 021665 copy pdata ,contru : 021666 uartd_rxdone: 0x6906 021667 deposit contru 0x6907 021668 hstore 2 ,core_uart_rrptr 0x6908 021669 rtn : 021671 uart_set_baud_by_mem: 0x6909 021672 fetch uart_baud_len ,mem_baud 0x690a 021673 hstore uart_baud_len ,core_uart_baud 0x690b 021674 rtn : 021678 eeprom_store_le_reconn_info: 0x690c 021679 fetch 6 ,mem_le_plap 0x690d 021680 store 6 ,mem_temp_lap 0x690e 021681 jam rec_4_mode ,mem_record_bt_mode 0x690f 021682 branch eeprom_store_reconn_info : 021683 eeprom_store_bd_reconn_info: 0x6910 021684 fetch 6 ,mem_plap 0x6911 021685 store 6 ,mem_temp_lap 0x6912 021686 jam rec_3_mode ,mem_record_bt_mode : 021687 eeprom_store_reconn_info: 0x6913 021688 set1 mark_ext_patch ,mark 0x6914 021689 bpatch patch21_0 ,mem_patch21 0x6915 021690 call eeprom_store_remote_bdaddr 0x6916 021691 call eeprom_store_last_record_index 0x6917 021692 fetch 1 ,mem_record_bt_mode 0x6918 021693 beq rec_4_mode ,eeprom_store_rec_4_mode 0x6919 021694 beq rec_3_mode ,eeprom_store_link_key 0x691a 021695 rtn : 021696 eeprom_store_rec_4_mode: 0x691b 021697 call eeprom_store_le_ltl 0x691c 021698 branch eeprom_store_le_local_addr : 021701 eeprom_load_reconn_info: 0x691d 021702 set1 mark_ext_patch ,mark 0x691e 021703 bpatch patch21_1 ,mem_patch21 0x691f 021704 call eeprom_load_reconn_bdaddr 0x6920 021705 fetch 1 ,mem_select_list_item 0x6921 021706 rtneq 0xff 0x6922 021707 fetch 6 ,mem_temp_lap 0x6923 021708 store 6 ,mem_hci_plap 0x6924 021709 fetch 1 ,mem_record_bt_mode 0x6925 021710 store 1 ,mem_xrecord_mode 0x6926 021711 beq rec_3_mode ,eeprom_load_rec_3_mode 0x6927 021712 beq rec_4_mode ,eeprom_load_rec_4_mode 0x6928 021713 rtn : 021714 eeprom_load_reconn_bdaddr: 0x6929 021715 call eeprom_load_last_record_index 0x692a 021716 fetch 1 ,mem_select_list_item 0x692b 021717 rtneq 0xff 0x692c 021718 branch eeprom_load_remote_bdaddr : 021719 eeprom_load_rec_3_mode: 0x692d 021720 call eeprom_load_link_key 0x692e 021721 branch check_link_key_load : 021722 eeprom_load_rec_4_mode: 0x692f 021723 call eeprom_load_ltk_key 0x6930 021724 branch check_ltk_load : 021725 eeprom_clear_bd_reconn_info: 0x6931 021726 call eeprom_load_bdaddr_list 0x6932 021727 disable user 0x6933 021728 call find_addr_from_bd_list 0x6934 021729 nbranch at_error_rev_end ,user : 021730 eeprom_clear_reconn_info_common: 0x6935 021731 fetcht 2 ,mem_list_item_ptr 0x6936 021732 increase -1 ,temp 0x6937 021733 setarg 0 0x6938 021734 istore 7 ,temp 0x6939 021735 arg 28 ,temp 0x693a 021736 arg mem_bdaddr_list_buff + 7 ,rega 0x693b 021737 arg eeprom_bdaddr_list ,regb 0x693c 021738 branch iicd_write_eep_data : 021740 eeprom_clear_all_reconn_info: 0x693d 021741 set1 mark_ext_patch ,mark 0x693e 021742 bpatch patch21_2 ,mem_patch21 0x693f 021743 arg mem_bdaddr_list_buff ,contw 0x6940 021744 force 4 ,loopcnt 0x6941 021745 call memset0 0x6942 021746 arg 28 ,temp 0x6943 021747 arg mem_bdaddr_list_buff ,rega 0x6944 021748 arg eeprom_bdaddr_list ,regb 0x6945 021749 branch iicd_write_eep_data : 021751 eeprom_erase_reconn_info: 0x6946 021752 set1 mark_ext_patch ,mark 0x6947 021753 bpatch patch21_3 ,mem_patch21 0x6948 021754 setarg 0x0 0x6949 021755 store 3 ,mem_plap 0x694a 021756 istore 3 ,contw 0x694b 021757 branch eeprom_store_remote_bdaddr : 021759 eeprom_load_last_record_index: 0x694c 021760 arg 1 ,temp 0x694d 021761 arg mem_select_list_item ,rega 0x694e 021762 arg eeprom_last_record ,regb 0x694f 021763 branch iicd_read_eep_data : 021765 eeprom_store_last_record_index: 0x6950 021766 arg 1 ,temp 0x6951 021767 arg mem_select_list_item ,rega 0x6952 021768 arg eeprom_last_record ,regb 0x6953 021769 branch iicd_write_eep_data : 021772 eeprom_store_remote_bdaddr: 0x6954 021773 set1 mark_ext_patch ,mark 0x6955 021774 bpatch patch21_4 ,mem_patch21 0x6956 021775 call eeprom_load_bdaddr_list 0x6957 021776 disable user 0x6958 021777 call find_addr_from_bd_list 0x6959 021778 rtn user : 021779 eeprom_store_remote_addr_unfind: 0x695a 021780 jam 0 ,mem_select_list_item 0x695b 021781 fetch 6 ,mem_temp_lap 0x695c 021782 store 6 ,mem_bdaddr_list_buff + 1 0x695d 021783 fetch 1 ,mem_record_bt_mode 0x695e 021784 store 1 ,mem_bdaddr_list_buff 0x695f 021785 arg 28 ,temp 0x6960 021786 arg mem_bdaddr_list_buff ,rega 0x6961 021787 arg eeprom_bdaddr_list ,regb 0x6962 021788 branch iicd_write_eep_data : 021791 eeprom_store_le_local_addr: 0x6963 021792 arg 6 ,temp 0x6964 021793 arg mem_le_lap ,rega 0x6965 021794 arg eeprom_le_reconn_local_addr ,regb 0x6966 021795 branch iicd_write_eep_data : 021797 eeprom_load_le_loacal_addr: 0x6967 021798 arg 6 ,temp 0x6968 021799 arg mem_le_lap ,rega 0x6969 021800 arg eeprom_le_reconn_local_addr ,regb 0x696a 021801 branch iicd_read_eep_data : 021804 eeprom_load_remote_bdaddr: 0x696b 021805 set1 mark_ext_patch ,mark 0x696c 021806 bpatch patch21_5 ,mem_patch21 0x696d 021807 arg 7 ,temp 0x696e 021808 arg mem_temp_reconn_record ,rega 0x696f 021809 arg eeprom_bdaddr_list ,regb 0x6970 021810 fetch 1 ,mem_select_list_item 0x6971 021811 mul32 pdata ,7 ,pdata 0x6972 021812 iadd regb ,regb 0x6973 021813 branch iicd_read_eep_data : 021815 eeprom_linkkey_addr: 0x6974 021816 arg 0x10 ,temp 0x6975 021817 arg eeprom_linkkey_list ,regb 0x6976 021818 fetch 1 ,mem_select_list_item 0x6977 021819 lshift4 pdata ,pdata 0x6978 021820 iadd regb ,regb 0x6979 021821 rtn : 021823 eeprom_store_le_ltl: 0x697a 021824 arg mem_le_ltk ,rega 0x697b 021825 branch eeprom_store_link_key_common : 021826 eeprom_store_link_key: 0x697c 021827 arg mem_link_key ,rega : 021828 eeprom_store_link_key_common: 0x697d 021829 set1 mark_ext_patch ,mark 0x697e 021830 bpatch patch21_6 ,mem_patch21 0x697f 021831 call eeprom_linkkey_addr 0x6980 021832 branch iicd_write_eep_data : 021834 eeprom_load_ltk_key: 0x6981 021835 arg mem_le_ltk ,rega 0x6982 021836 branch eeprom_load_link_key_common : 021837 eeprom_load_link_key: 0x6983 021838 arg mem_link_key ,rega : 021839 eeprom_load_link_key_common: 0x6984 021840 set1 mark_ext_patch ,mark 0x6985 021841 bpatch patch21_7 ,mem_patch21 0x6986 021842 call eeprom_linkkey_addr 0x6987 021843 branch iicd_read_eep_data : 021847 eeprom_load_bdaddr_list: 0x6988 021848 arg 28 ,temp 0x6989 021849 arg mem_bdaddr_list_buff + 7 ,rega 0x698a 021850 arg eeprom_bdaddr_list ,regb 0x698b 021851 branch iicd_read_eep_data : 021853 find_addr_from_bd_list: 0x698c 021854 set1 mark_ext_patch ,mark 0x698d 021855 bpatch patch22_0 ,mem_patch22 0x698e 021856 setarg mem_bdaddr_list_buff + 7 0x698f 021857 store 2 ,mem_list_item_ptr 0x6990 021858 jam 0 ,mem_select_list_item 0x6991 021859 arg 4 ,loopcnt : 021860 find_addr_from_list: 0x6992 021861 copy loopcnt ,pdata 0x6993 021862 store 1 ,mem_pdatatemp 0x6994 021863 fetch 2 ,mem_list_item_ptr 0x6995 021864 copy pdata ,rega 0x6996 021865 call find_addr_from_list_compare 0x6997 021866 rtn user 0x6998 021867 fetch 2 ,mem_list_item_ptr 0x6999 021868 increase 7 ,pdata 0x699a 021869 store 2 ,mem_list_item_ptr 0x699b 021870 fetch 1 ,mem_select_list_item 0x699c 021871 increase 1 ,pdata 0x699d 021872 store 1 ,mem_select_list_item 0x699e 021873 fetch 1 ,mem_pdatatemp 0x699f 021874 copy pdata ,loopcnt 0x69a0 021875 loop find_addr_from_list 0x69a1 021876 rtn : 021878 check_link_key_load: 0x69a2 021879 fetch 8 ,mem_link_key 0x69a3 021880 fetcht 8 ,mem_link_key + 8 0x69a4 021881 ior temp ,pdata 0x69a5 021882 rtn blank 0x69a6 021883 jam 1 ,mem_link_key_exists 0x69a7 021884 rtn : 021885 check_ltk_load: 0x69a8 021886 fetch 6 ,mem_hci_plap 0x69a9 021887 rtn blank 0x69aa 021888 jam 1 ,mem_ltk_exists 0x69ab 021889 rtn : 021891 find_addr_from_list_compare: 0x69ac 021892 arg mem_temp_reconn_record ,regb 0x69ad 021893 arg 7 ,loopcnt 0x69ae 021894 call string_compare 0x69af 021895 branch enable_usr ,zero 0x69b0 021896 rtn : 021897 enable_usr: 0x69b1 021898 enable user 0x69b2 021899 rtn : 021900 le_eeprom_load_reconn_info: 0x69b3 021901 branch assert : 021908 gpio_set_wake_by_current_state: 0x69b4 021909 set1 mark_ext_patch ,mark 0x69b5 021910 bpatch patch22_1 ,mem_patch22 0x69b6 021911 set1 7 ,temp 0x69b7 021912 call gpio_get_bit 0x69b8 021913 nsetflag true ,7 ,temp : 021918 gpio_set_wake: 0x69b9 021919 set1 mark_ext_patch ,mark 0x69ba 021920 bpatch patch22_2 ,mem_patch22 0x69bb 021921 isolate0 7 ,temp 0x69bc 021922 and temp ,0x1f ,queue 0x69bd 021923 fetch 4 ,mem_gpio_wakeup_low 0x69be 021924 qsetflag true ,pdata 0x69bf 021925 store 4 ,mem_gpio_wakeup_low 0x69c0 021926 fetch 4 ,mem_gpio_wakeup_high 0x69c1 021927 nqsetflag true ,pdata 0x69c2 021928 store 4 ,mem_gpio_wakeup_high 0x69c3 021929 rtn : 021932 gpio_clr_wake: 0x69c4 021933 set1 mark_ext_patch ,mark 0x69c5 021934 bpatch patch22_3 ,mem_patch22 0x69c6 021935 isolate0 7 ,temp 0x69c7 021936 and temp ,0x1f ,queue 0x69c8 021937 fetch 4 ,mem_gpio_wakeup_low 0x69c9 021938 qset0 pdata 0x69ca 021939 store 4 ,mem_gpio_wakeup_low 0x69cb 021940 fetch 4 ,mem_gpio_wakeup_high 0x69cc 021941 qset0 pdata 0x69cd 021942 store 4 ,mem_gpio_wakeup_high 0x69ce 021943 rtn : 021946 gpio_config_input_nowake: 0x69cf 021947 call gpio_clr_wake 0x69d0 021948 branch gpio_config_input_without_wake : 021951 gpio_config_input: 0x69d1 021952 ncall gpio_set_wake ,wake : 021954 gpio_config_input_without_wake: 0x69d2 021955 arg core_gpio_pd0 ,contw 0x69d3 021956 call gpio_set_bit 0x69d4 021957 setflip gpio_active_bit ,temp 0x69d5 021958 arg core_gpio_pu0 ,contw 0x69d6 021959 call gpio_set_bit 0x69d7 021960 set0 gpio_active_bit ,temp 0x69d8 021961 arg core_gpio_oe0 ,contw 0x69d9 021962 branch gpio_set_bit : 021965 gpio_config_output: 0x69da 021966 setflip gpio_active_bit ,temp 0x69db 021967 call gpio_out 0x69dc 021968 set1 gpio_active_bit ,temp 0x69dd 021969 arg core_gpio_oe0 ,contw 0x69de 021970 branch gpio_set_bit : 021972 gpio_common: 0x69df 021973 and temp ,0x07 ,queue 0x69e0 021974 rshift3 temp ,pdata 0x69e1 021975 and_into 3 ,pdata 0x69e2 021976 iadd contw ,contw 0x69e3 021977 ifetch 1 ,contw 0x69e4 021978 rtn : 021982 gpio_get_bit: 0x69e5 021983 arg core_gpio_in ,contw 0x69e6 021984 call gpio_common 0x69e7 021985 isolate1 gpio_active_bit ,temp 0x69e8 021986 branch gpio_get_bit_reverse ,true 0x69e9 021987 qisolate0 pdata 0x69ea 021988 rtn : 021989 gpio_get_bit_reverse: 0x69eb 021990 qisolate1 pdata 0x69ec 021991 rtn : 021993 gpio_out_inactive: 0x69ed 021994 isolate1 7 ,null 0x69ee 021995 branch gpio_out_flag : 021997 gpio_out_active: 0x69ef 021998 isolate0 7 ,null : 022001 gpio_out_flag: 0x69f0 022002 setarg 0 0x69f1 022003 nsetflag true ,gpio_active_bit ,pdata 0x69f2 022004 ixor temp ,temp : 022007 gpio_out: 0x69f3 022008 arg core_gpio_out0 ,contw : 022011 gpio_set_bit: 0x69f4 022012 call gpio_common 0x69f5 022013 isolate1 gpio_active_bit ,temp 0x69f6 022014 qsetflag true ,pdata 0x69f7 022015 istore 1 ,contw 0x69f8 022016 rtn : 022018 gpio_test: 0x69f9 022019 fetch 1 ,mem_seqi 0x69fa 022020 rtneq 0x7f 0x69fb 022021 hjam 0 ,core_gpio_out3 0x69fc 022022 nop 30 0x69fd 022023 hjam 8 ,core_gpio_out3 0x69fe 022024 rtn : 022029 set_pwm_blink: 0x69ff 022030 lshift8 pdata ,pdata 0x6a00 022031 lshift4 pdata ,pdata 0x6a01 022032 hstore 2 ,core_pwm_ncnt0 0x6a02 022033 hstore 2 ,core_pwm_pcnt0 0x6a03 022034 rtn : 022036 set_pwm_steadyon: 0x6a04 022037 setarg 0 0x6a05 022038 hstore 2 ,core_pwm_ncnt0 0x6a06 022039 setarg 1 0x6a07 022040 hstore 2 ,core_pwm_pcnt0 0x6a08 022041 rtn : 022043 set_pwm_off: 0x6a09 022044 setarg 0 0x6a0a 022045 hstore 2 ,core_pwm_ncnt0 0x6a0b 022046 hstore 2 ,core_pwm_pcnt0 0x6a0c 022047 rtn : 022052 init_filter_ram: 0x6a0d 022053 arg 0x8800 ,contw 0x6a0e 022054 arg 0x20 ,loopcnt 0x6a0f 022055 call memset0 0x6a10 022056 setarg 0x4f9 0x6a11 022057 hstore 2 ,0x8848 0x6a12 022058 hstore 2 ,0x884a 0x6a13 022059 hstore 2 ,0x884c 0x6a14 022060 hstore 2 ,0x886c 0x6a15 022061 hstore 2 ,0x888c 0x6a16 022062 hstore 2 ,0x88ac 0x6a17 022063 setarg 0x204 0x6a18 022064 hstore 2 ,0x88ae 0x6a19 022065 setarg 0x0506 0x6a1a 022066 hstore 2 ,0x88b0 0x6a1b 022067 setarg 0x0504 0x6a1c 022068 hstore 2 ,0x88b2 0x6a1d 022069 setarg 0x0200 0x6a1e 022070 hstore 2 ,0x88b4 0x6a1f 022071 setarg 0xFEFB 0x6a20 022072 hstore 2 ,0x88b6 0x6a21 022073 setarg 0xFAF9 0x6a22 022074 hstore 2 ,0x88b8 0x6a23 022075 setarg 0xFAFB 0x6a24 022076 hstore 2 ,0x88ba 0x6a25 022077 setarg 0xFD00 0x6a26 022078 hstore 2 ,0x88bc 0x6a27 022079 setarg 0x0408 0x6a28 022080 hstore 2 ,0x88be 0x6a29 022081 setarg 0x0A0C 0x6a2a 022082 hstore 2 ,0x88c0 0x6a2b 022083 setarg 0x0B09 0x6a2c 022084 hstore 2 ,0x88c2 0x6a2d 022085 setarg 0x0500 0x6a2e 022086 hstore 2 ,0x88c4 0x6a2f 022087 setarg 0xF8F1 0x6a30 022088 hstore 2 ,0x88c6 0x6a31 022089 setarg 0xECE8 0x6a32 022090 hstore 2 ,0x88c8 0x6a33 022091 setarg 0xE9EB 0x6a34 022092 hstore 2 ,0x88ca 0x6a35 022093 setarg 0xF500 0x6a36 022094 hstore 2 ,0x88cc 0x6a37 022095 setarg 0x1223 0x6a38 022096 hstore 2 ,0x88ce 0x6a39 022097 setarg 0x374B 0x6a3a 022098 hstore 2 ,0x88d0 0x6a3b 022099 setarg 0x5E71 0x6a3c 022100 hstore 2 ,0x88d2 0x6a3d 022101 setarg 0x787F 0x6a3e 022102 hstore 2 ,0x88d4 0x6a3f 022103 rtn : 022105 enable_pcm: 0x6a40 022106 set1 mark_ext_patch ,mark 0x6a41 022107 bpatch patch22_4 ,mem_patch22 0x6a42 022108 hfetch 2 ,core_clkoff 0x6a43 022109 set0 clock_off_codec ,pdata 0x6a44 022110 hstore 2 ,core_clkoff 0x6a45 022111 hjam 0x11 ,core_enc_ctrl 0x6a46 022112 hjam 0x1 ,core_cvsd_ctrl 0x6a47 022113 hjam 0x1 ,core_codec_ctrl 0x6a48 022114 hjam 0x11 ,core_dec_ctrl 0x6a49 022115 rtn : 022117 disable_pcm: 0x6a4a 022118 set1 mark_ext_patch ,mark 0x6a4b 022119 bpatch patch22_5 ,mem_patch22 0x6a4c 022120 hfetch 2 ,core_clkoff 0x6a4d 022121 set1 clock_off_codec ,pdata 0x6a4e 022122 hstore 2 ,core_clkoff 0x6a4f 022123 hjam 0x4 ,core_enc_ctrl 0x6a50 022124 hjam 0x4 ,core_dec_ctrl 0x6a51 022125 hjam 0x0 ,core_cvsd_ctrl 0x6a52 022126 hjam 0x0 ,core_codec_ctrl 0x6a53 022127 rtn : 022131 get_sco_data: 0x6a54 022132 fetch 1 ,mem_state 0x6a55 022133 rtnbit0 state_insco 0x6a56 022134 arg mem_sco_obuf ,contw 0x6a57 022135 arg 30 ,loopcnt : 022136 get_sco_data_loop: 0x6a58 022137 hfetch 1 ,core_pcminfifo 0x6a59 022138 istore 1 ,contw 0x6a5a 022139 loop get_sco_data_loop 0x6a5b 022140 rtn : 022143 process_sco_data: 0x6a5c 022144 fetch 1 ,mem_state 0x6a5d 022145 rtnbit0 state_insco 0x6a5e 022146 arg mem_sco_ibuf ,contr 0x6a5f 022147 force 30 ,loopcnt : 022148 process_sco_loop: 0x6a60 022149 ifetch 1 ,contr 0x6a61 022150 hstore 1 ,core_pcmoutfifo 0x6a62 022151 loop process_sco_loop 0x6a63 022152 rtn : 022154 init_sched: 0x6a64 022155 rtn : 022160 gpio_cfg_uart_tx_output: 0x6a65 022161 call gpio_uart2gpio 0x6a66 022162 arg uart_wakeup_tx ,temp 0x6a67 022163 branch gpio_config_output : 022165 gpio_pu_uart_tx: 0x6a68 022166 call gpio_cfg_uart_tx_output 0x6a69 022167 arg uart_wakeup_tx ,temp 0x6a6a 022168 branch gpio_out_inactive : 022170 gpio_pd_uart_tx: 0x6a6b 022171 call gpio_cfg_uart_tx_output 0x6a6c 022172 arg uart_wakeup_tx ,temp 0x6a6d 022173 branch gpio_out_active : 022175 gpio_cfg_uart_rx_output: 0x6a6e 022176 call gpio_uart2gpio 0x6a6f 022177 arg uart_wakeup_rx ,temp 0x6a70 022178 branch gpio_config_output : 022180 gpio_pu_uart_rx: 0x6a71 022181 call gpio_cfg_uart_rx_output 0x6a72 022182 arg uart_wakeup_rx ,temp 0x6a73 022183 branch gpio_out_inactive : 022185 gpio_pd_uart_rx: 0x6a74 022186 call gpio_cfg_uart_rx_output 0x6a75 022187 arg uart_wakeup_rx ,temp 0x6a76 022188 branch gpio_out_active : 022190 gpio_tx_config_input_with_pu: 0x6a77 022191 call gpio_uart2gpio 0x6a78 022192 hfetch 1 ,core_gpio_pu0 0x6a79 022193 set1 uart_wakeup_tx ,pdata 0x6a7a 022194 hstore 1 ,core_gpio_pu0 0x6a7b 022195 arg uart_wakeup_tx ,temp 0x6a7c 022196 branch gpio_config_input : 022198 gpio_rx_config_input_with_pu: 0x6a7d 022199 call gpio_uart2gpio 0x6a7e 022200 hfetch 1 ,core_gpio_pu0 0x6a7f 022201 set1 uart_wakeup_rx ,pdata 0x6a80 022202 hstore 1 ,core_gpio_pu0 0x6a81 022203 arg uart_wakeup_rx ,temp 0x6a82 022204 branch gpio_config_input : 022206 gpio_gpio2uart: 0x6a83 022207 hfetch 1 ,core_gpio_sel1 0x6a84 022208 or_into 0x04 ,pdata 0x6a85 022209 hstore 1 ,core_gpio_sel1 0x6a86 022210 rtn : 022212 gpio_uart2gpio: 0x6a87 022213 hfetch 1 ,core_gpio_sel1 0x6a88 022214 and_into 0xfb ,pdata 0x6a89 022215 hstore 1 ,core_gpio_sel1 0x6a8a 022216 rtn : 022218 gpio_check_uart_state: 0x6a8b 022219 hfetch 1 ,core_gpio_sel1 0x6a8c 022220 isolate1 2 ,pdata 0x6a8d 022221 rtn : 022224 prcp_init: 0x6a8e 022225 setarg prcp_process 0x6a8f 022226 store 2 ,mem_cb_att_write 0x6a90 022227 rtn : 022228 prcp_process: 0x6a91 022229 call clear_prcp_sendbuff 0x6a92 022230 fetch 1 ,mem_prcp 0x6a93 022231 beq prcp_le ,le_prcp 0x6a94 022232 beq prcp_ssp ,prcp 0x6a95 022233 branch assert : 022234 le_prcp: 0x6a96 022235 arg prcp_rx_le ,temp 0x6a97 022236 storet 2 ,mem_le_notify_handle 0x6a98 022237 call le_att_get_handle_ptr 0x6a99 022238 ifetch 1 ,contr 0x6a9a 022239 call prcp_parse 0x6a9b 022240 branch prcp_le_tx : 022241 prcp: 0x6a9c 022242 call prcp_parse 0x6a9d 022243 branch prcp_tx : 022244 prcp_parse: 0x6a9e 022245 copy contr ,rega 0x6a9f 022246 set1 mark_ext_patch ,mark 0x6aa0 022247 bpatch patch26_1 ,mem_patch26 0x6aa1 022248 ifetch 1 ,contr 0x6aa2 022249 beq common_res ,prcp_parse_common_res 0x6aa3 022250 beq read_registers_req ,prcp_parse_read_registers_req 0x6aa4 022251 beq read_registers_res ,prcp_parse_read_registers_res 0x6aa5 022252 beq write_registers_req ,prcp_parse_write_registers_req 0x6aa6 022253 beq i2c_config_req ,prcp_parse_i2c_config_req 0x6aa7 022254 beq i2c_read_req ,prcp_parse_i2c_read_req 0x6aa8 022255 beq i2c_read_res ,prcp_parse_i2c_read_res 0x6aa9 022256 beq i2c_write_req ,prcp_parse_i2c_write_req 0x6aaa 022257 beq spi_config_req ,prcp_parse_spi_config_req 0x6aab 022258 beq spi_read_req ,prcp_parse_spi_read_req 0x6aac 022259 beq spi_read_res ,prcp_parse_spi_read_res 0x6aad 022260 beq spi_write_req ,prcp_parse_spi_write_req 0x6aae 022261 beq pwm_config_req ,prcp_parse_pwm_config_req 0x6aaf 022262 beq pwm_write_req ,prcp_parse_pwm_write_req 0x6ab0 022263 beq gpio_config_req ,prcp_parse_gpio_config_req 0x6ab1 022264 beq gpio_read_req ,prcp_parse_gpio_read_req 0x6ab2 022265 beq gpio_read_res ,prcp_parse_gpio_read_res 0x6ab3 022266 beq gpio_write_req ,prcp_parse_gpio_write_req 0x6ab4 022267 beq ota_write_req ,prcp_parse_ota_write_req 0x6ab5 022268 beq ota_end_cmd ,prcp_parse_ota_end_cmd 0x6ab6 022269 rtn : 022272 prcp_parse_common_res: 0x6ab7 022273 copy rega ,contr 0x6ab8 022274 ifetch 1 ,contr 0x6ab9 022275 lshift8 pdata ,pdata 0x6aba 022276 store 3 ,mem_prcp_data 0x6abb 022277 rtn : 022278 prcp_parse_read_registers_req: 0x6abc 022279 rtn : 022280 prcp_parse_read_registers_res: 0x6abd 022281 rtn : 022282 prcp_parse_write_registers_req: 0x6abe 022283 rtn : 022287 prcp_parse_spi_config_req: 0x6abf 022288 rtn : 022289 prcp_parse_spi_read_req: 0x6ac0 022290 rtn : 022291 prcp_parse_spi_read_res: 0x6ac1 022292 rtn : 022293 prcp_parse_spi_write_req: 0x6ac2 022294 rtn : 022298 prcp_parse_pwm_config_req: 0x6ac3 022299 ifetch 4 ,contr 0x6ac4 022300 hstore 1 ,core_gpio_sel2 0x6ac5 022301 rshift8 pdata ,pdata 0x6ac6 022302 hfetcht 1 ,core_gpio_sel1 0x6ac7 022303 and_into 0x7f ,temp 0x6ac8 022304 ior temp ,temp 0x6ac9 022305 hstoret 1 ,core_gpio_sel1 0x6aca 022306 rshift8 pdata ,pdata 0x6acb 022307 hfetcht 1 ,core_clkoff + 1 0x6acc 022308 and_into 0xdf ,temp 0x6acd 022309 ior temp ,temp 0x6ace 022310 hstoret 1 ,core_clkoff + 1 0x6acf 022311 rshift8 pdata ,pdata 0x6ad0 022312 hfetcht 1 ,core_clksel 0x6ad1 022313 and_into 0x3f ,temp 0x6ad2 022314 ior temp ,temp 0x6ad3 022315 hstoret 1 ,core_clksel 0x6ad4 022316 branch prcp_parse_common_res : 022317 prcp_parse_pwm_write_req: 0x6ad5 022318 ifetch 9 ,contr 0x6ad6 022319 hfetcht 1 ,core_gpio_key2 0x6ad7 022320 and_into 0x3f ,temp 0x6ad8 022321 ior temp ,temp 0x6ad9 022322 hstoret 1 ,core_gpio_key2 0x6ada 022323 rshift8 pdata ,pdata 0x6adb 022324 hstore 2 ,core_pwm_pcnt0 0x6adc 022325 rshift16 pdata ,pdata 0x6add 022326 hstore 2 ,core_pwm_ncnt0 0x6ade 022327 rshift16 pdata ,pdata 0x6adf 022328 hstore 2 ,core_pwm_pcnt1 0x6ae0 022329 rshift16 pdata ,pdata 0x6ae1 022330 hstore 2 ,core_pwm_ncnt1 0x6ae2 022331 branch prcp_parse_common_res : 022335 prcp_parse_gpio_config_req: 0x6ae3 022336 ifetch 4 ,contr 0x6ae4 022337 hstore 4 ,core_gpio_oe0 0x6ae5 022338 ifetch 4 ,contr 0x6ae6 022339 hstore 4 ,core_gpio_pu0 0x6ae7 022340 ifetch 4 ,contr 0x6ae8 022341 hstore 4 ,core_gpio_pd0 0x6ae9 022342 ifetch 1 ,contr 0x6aea 022343 hstore 1 ,core_gpio_sel 0x6aeb 022344 ifetch 1 ,contr 0x6aec 022345 hstore 1 ,core_gpio_sel1 0x6aed 022346 ifetch 1 ,contr 0x6aee 022347 hstore 1 ,core_gpio_sel2 0x6aef 022348 branch prcp_parse_common_res : 022349 prcp_parse_gpio_read_req: 0x6af0 022350 branch prcp_parse_gpio_read_res : 022351 prcp_parse_gpio_read_res: 0x6af1 022352 jam 0x10 ,mem_prcp_data 0x6af2 022353 arg mem_prcp_data + 1 ,contw 0x6af3 022354 hfetch 4 ,core_gpio_out0 0x6af4 022355 istore 4 ,contw 0x6af5 022356 hfetch 4 ,core_gpio_in 0x6af6 022357 istore 4 ,contw 0x6af7 022358 rtn : 022359 prcp_parse_gpio_write_req: 0x6af8 022360 ifetcht 1 ,contr 0x6af9 022361 ifetch 1 ,contr 0x6afa 022362 lshift3 pdata ,pdata 0x6afb 022363 lshift4 pdata ,pdata 0x6afc 022364 ior temp ,temp 0x6afd 022365 call gpio_out 0x6afe 022366 branch prcp_parse_common_res : 022371 prcp_parse_i2c_read_req: 0x6aff 022372 ifetcht 1 ,contr 0x6b00 022373 hstoret 1 ,iic_slave_addr 0x6b01 022374 ifetch 1 ,contr 0x6b02 022375 compare 1 ,pdata ,0xff 0x6b03 022376 ifetch 1 ,contr 0x6b04 022377 hstore 1 ,iic_fifo 0x6b05 022378 branch iic_read_data_len ,true 0x6b06 022379 ifetch 1 ,contr 0x6b07 022380 hstore 1 ,iic_fifo : 022381 iic_read_data_len: 0x6b08 022382 ifetch 1 ,contr 0x6b09 022383 copy pdata ,loopcnt 0x6b0a 022384 increase -1 ,pdata 0x6b0b 022385 or_into 0x90 ,pdata 0x6b0c 022386 hstore 1 ,iic_ctr 0x6b0d 022387 hjam 2 ,iic_cr 0x6b0e 022388 nop 1 0x6b0f 022390 arg mem_prcp_data ,contw : 022391 iic_read_loop: 0x6b10 022392 hfetch 1 ,iic_fifo 0x6b11 022393 istore 1 ,contw 0x6b12 022394 loop iic_read_loop 0x6b13 022395 rtn : 022397 clear_prcp_sendbuff: 0x6b14 022398 setarg 0 0x6b15 022399 store 4 ,mem_prcp_data 0x6b16 022400 istore 8 ,contw 0x6b17 022401 istore 8 ,contw 0x6b18 022402 rtn : 022408 prcp_parse_ota_write_req: 0x6b19 022409 copy rega ,pdata 0x6b1a 022410 increase 1 ,pdata 0x6b1b 022411 store 2 ,rx_buf_data_ptr 0x6b1c 022412 fetch 2 ,mem_eeprom_ota_base_addr 0x6b1d 022413 beq 0x0000 ,prcp_parse_ota_start1 : 022414 prcp_parse_ota_load: 0x6b1e 022415 fetch 2 ,mem_eeprom_ota_base_addr 0x6b1f 022416 fetcht 2 ,rx_buf_data_ptr 0x6b20 022417 ifetcht 2 ,temp 0x6b21 022418 iadd temp ,pdata 0x6b22 022419 fetcht 2 ,rx_buf_data_ptr 0x6b23 022420 increase 2 ,temp 0x6b24 022421 copy temp ,contr 0x6b25 022422 ifetcht 1 ,contr 0x6b26 022423 copy contr ,rega 0x6b27 022424 branch iicd_write_ota_data : 022426 prcp_parse_ota_start1: 0x6b28 022427 setarg 0x0002 0x6b29 022428 byteswap pdata ,pdata 0x6b2a 022429 store 2 ,mem_addr_mi 0x6b2b 022430 arg iicd_read_eep ,regc 0x6b2c 022431 arg 0x2 ,loopcnt : 022432 prcp_parse_ota_loop1: 0x6b2d 022433 call get_block_header 0x6b2e 022434 nbranch prcp_parse_ota_start2 ,zero 0x6b2f 022435 fetch 2 ,mem_addr_mi 0x6b30 022436 byteswap pdata ,pdata 0x6b31 022437 iadd temp ,pdata 0x6b32 022438 store 2 ,mem_eeprom_ota_base_addr 0x6b33 022439 byteswap pdata ,pdata 0x6b34 022440 store 2 ,mem_addr_mi 0x6b35 022441 loop prcp_parse_ota_loop1 : 022442 prcp_parse_ota_start2: 0x6b36 022443 fetch 2 ,mem_eeprom_ota_base_addr 0x6b37 022444 byteswap pdata ,pdata 0x6b38 022445 store 2 ,mem_addr_mi 0x6b39 022446 arg iicd_read_eep ,regc 0x6b3a 022447 arg 0xffff ,loopcnt : 022448 prcp_parse_ota_loop2: 0x6b3b 022449 call get_block_header 0x6b3c 022450 nbranch prcp_parse_ota_load ,zero 0x6b3d 022451 fetch 2 ,mem_addr_mi 0x6b3e 022452 byteswap pdata ,pdata 0x6b3f 022453 iadd temp ,pdata 0x6b40 022454 increase 2 ,pdata 0x6b41 022455 store 2 ,mem_eeprom_ota_base_addr 0x6b42 022456 byteswap pdata ,pdata 0x6b43 022457 store 2 ,mem_addr_mi 0x6b44 022458 loop prcp_parse_ota_loop2 : 022460 prcp_parse_ota_end_cmd: 0x6b45 022461 fetch 2 ,mem_eeprom_ota_base_addr 0x6b46 022462 increase 2 ,pdata 0x6b47 022463 byteswap pdata ,pdata 0x6b48 022464 store 2 ,mem_eeprom_ota_base_addr 0x6b49 022465 arg mem_eeprom_ota_base_addr ,rega 0x6b4a 022466 arg 0x02 ,temp 0x6b4b 022467 arg 0x0000 ,pdata 0x6b4c 022468 call iicd_write_ota_data 0x6b4d 022469 setarg 0x0000 0x6b4e 022470 store 2 ,mem_eeprom_ota_base_addr 0x6b4f 022471 rtn : 022473 prcp_parse_i2c_config_req: 0x6b50 022474 rtn : 022475 prcp_parse_i2c_read_res: 0x6b51 022476 rtn : 022477 prcp_parse_i2c_write_req: 0x6b52 022478 rtn : 022483 rfcomm_init: 0x6b53 022484 rtn wake 0x6b54 022485 jam 0 ,mem_rfcomm_send_more_pkt 0x6b55 022486 jam bits9600 ,memremoterpnbitrate 0x6b56 022487 jam databits8 ,memremoteprndatabits 0x6b57 022488 jam 0x11 ,memremoteprnxon 0x6b58 022489 jam 0x13 ,memremoteprnxoff 0x6b59 022490 setarg 0 0x6b5a 022491 store 3 ,memremoteprnstopbit 0x6b5b 022492 store 1 ,mem_spp_state 0x6b5c 022493 jam 0 ,memui_reconnect_mode : 022495 rfcomm_init_spp: 0x6b5d 022496 set1 mark_ext_patch ,mark 0x6b5e 022497 bpatch patch37_7 ,mem_patch37 0x6b5f 022498 setarg 0 0x6b60 022499 store 1 ,mem_spp_state 0x6b61 022500 store 1 ,mem_remote_spp_channel 0x6b62 022501 store 1 ,mem_pn_dlci 0x6b63 022502 jam 0x50 ,mem_credit_given 0x6b64 022503 rtn : 022505 set_cr_bit: 0x6b65 022506 or_into 0x02 ,temp 0x6b66 022507 rtn : 022519 rfcomm_calculate_fcs_sabm: 0x6b67 022520 copy temp ,pdata 0x6b68 022521 reverse pdata ,pdata 0x6b69 022522 store 1 ,memfcstemp3 0x6b6a 022523 force ini_tx_sabm ,pdata 0x6b6b 022524 reverse pdata ,pdata 0x6b6c 022525 store 1 ,memfcstemp2 0x6b6d 022526 force 0x01 ,pdata 0x6b6e 022527 reverse pdata ,pdata 0x6b6f 022528 store 1 ,memfcstemp1 0x6b70 022529 call caculate_fcs 0x6b71 022530 copy temp ,pdata 0x6b72 022531 rtn : 022532 rfcomm_calculate_fcs_ua: 0x6b73 022533 reverse pdata ,pdata 0x6b74 022534 store 1 ,memfcstemp3 0x6b75 022535 force rsp_tx_ua ,pdata 0x6b76 022536 reverse pdata ,pdata 0x6b77 022537 store 1 ,memfcstemp2 0x6b78 022538 force 0x01 ,pdata 0x6b79 022539 reverse pdata ,pdata 0x6b7a 022540 store 1 ,memfcstemp1 0x6b7b 022541 branch caculate_fcs : 022543 rfcomm_calculate_fcs_dlci0: 0x6b7c 022544 fetch 1 ,mem_rfcomm_initiator 0x6b7d 022545 branch rfcomm_calculate_fcs_dlci0_res ,blank 0x6b7e 022546 setarg 0x70 0x6b7f 022547 rtn : 022548 rfcomm_calculate_fcs_dlci0_res: 0x6b80 022549 setarg 0xaa 0x6b81 022550 rtn : 022552 rfcomm_save_fcs_uih: 0x6b82 022553 reverse pdata ,pdata 0x6b83 022554 store 1 ,memfcstemp3 0x6b84 022555 force rsp_rx_uih ,pdata 0x6b85 022556 call caculate_uihdata_fcs 0x6b86 022557 fetcht 2 ,mem_contw_temp 0x6b87 022558 copy temp ,contw 0x6b88 022559 istore 1 ,contw 0x6b89 022560 copy contw ,temp 0x6b8a 022561 storet 2 ,mem_contw_temp 0x6b8b 022562 force rsp_rx_uih_wdata ,pdata 0x6b8c 022563 call caculate_uihdata_fcs 0x6b8d 022564 fetcht 2 ,mem_contw_temp 0x6b8e 022565 copy temp ,contw 0x6b8f 022566 istore 1 ,contw 0x6b90 022567 rtn : 022576 caculate_uihdata_fcs: 0x6b91 022577 reverse pdata ,pdata 0x6b92 022578 store 1 ,memfcstemp2 0x6b93 022579 fetch 2 ,memfcstemp2 0x6b94 022580 lshift8 pdata ,pdata 0x6b95 022581 store 3 ,mem_mod2div_temp 0x6b96 022582 arg 0x107 ,rega 0x6b97 022583 arg 0xf ,regb 0x6b98 022584 call mod2div 0x6b99 022585 xor_into 0xd7 ,pdata 0x6b9a 022586 invert pdata ,pdata 0x6b9b 022587 reverse pdata ,pdata 0x6b9c 022588 rtn : 022598 caculate_fcs: 0x6b9d 022599 fetch 3 ,memfcstemp1 0x6b9e 022600 store 3 ,mem_mod2div_temp 0x6b9f 022601 arg 0x107 ,rega 0x6ba0 022602 arg 0xf ,regb 0x6ba1 022603 call mod2div 0x6ba2 022604 lshift8 pdata ,pdata 0x6ba3 022605 arg 0x7 ,regb 0x6ba4 022606 call mod2div 0x6ba5 022607 xor_into 0x2b ,pdata 0x6ba6 022608 invert pdata ,pdata 0x6ba7 022609 reverse pdata ,pdata 0x6ba8 022610 copy pdata ,temp 0x6ba9 022611 rtn : 022613 mod2div: 0x6baa 022614 arg 0 ,regc 0x6bab 022615 copy regb ,loopcnt 0x6bac 022616 call right_shift_n 0x6bad 022617 icopy temp : 022618 mod2div_loop: 0x6bae 022623 copy temp ,pdata 0x6baf 022624 lshift regc ,regc 0x6bb0 022625 bbit0 8 ,mod2div_not_enough_reduction 0x6bb1 022626 ixor rega ,temp 0x6bb2 022627 increase 1 ,regc : 022628 mod2div_not_enough_reduction: 0x6bb3 022629 lshift temp ,temp 0x6bb4 022630 fetch 3 ,mem_mod2div_temp 0x6bb5 022631 increase -1 ,regb 0x6bb6 022632 compare 0xff ,regb ,0xff 0x6bb7 022633 branch mod2div_end ,true 0x6bb8 022634 copy regb ,loopcnt 0x6bb9 022635 call right_shift_n 0x6bba 022636 isolate1 0 ,pdata 0x6bbb 022637 setflag true ,0 ,temp 0x6bbc 022638 branch mod2div_loop : 022639 mod2div_end: 0x6bbd 022641 rshift temp ,pdata 0x6bbe 022642 rtn : 022644 get_rfcomm_snd_adss: 0x6bbf 022645 fetcht 1 ,mem_pn_dlci : 022646 dlci_to_address_cmd: 0x6bc0 022648 lshift2 temp ,temp 0x6bc1 022649 set1 rfcomm_address_ext_len ,temp 0x6bc2 022650 fetch 1 ,mem_rfcomm_initiator 0x6bc3 022651 ncall set_cr_bit ,blank 0x6bc4 022652 storet 1 ,mem_rfcomm_send_adss 0x6bc5 022653 rtn : 022655 dlci_to_address_res: 0x6bc6 022657 lshift2 temp ,temp 0x6bc7 022658 set1 rfcomm_address_ext_len ,temp 0x6bc8 022659 fetch 1 ,mem_rfcomm_initiator 0x6bc9 022660 call set_cr_bit ,blank 0x6bca 022661 rtn : 022662 channel_to_dlci: 0x6bcb 022664 lshift temp ,temp 0x6bcc 022665 fetch 1 ,mem_rfcomm_initiator 0x6bcd 022666 setflag blank ,0 ,temp 0x6bce 022668 rtn : 022669 rfcomm_rx_process_dlci0_sabm: 0x6bcf 022670 fetcht 1 ,mem_current_channel 0x6bd0 022671 jam 0xd7 ,mem_current_fcs 0x6bd1 022672 call rfcomm_send_ua 0x6bd2 022673 fetch 1 ,mem_rfcomm_state 0x6bd3 022674 set1 l2cap_channel_rfcomm_only_sabm ,pdata 0x6bd4 022675 set1 l2cap_channel_rfcomm_only_ua ,pdata 0x6bd5 022676 store 1 ,mem_rfcomm_state 0x6bd6 022677 jam 0 ,mem_rfcomm_initiator 0x6bd7 022678 branch rfcomm_rx_process_end : 022679 rfcomm_rx_process_dlci0_ua: 0x6bd8 022680 fetch 1 ,mem_rfcomm_state 0x6bd9 022681 set1 l2cap_channel_rfcomm_only_ua ,pdata 0x6bda 022682 store 1 ,mem_rfcomm_state 0x6bdb 022683 branch rfcomm_rx_process_end : 022686 rfcomm_rx_process: 0x6bdc 022687 set1 mark_ext_patch ,mark 0x6bdd 022688 bpatch patch38_0 ,mem_patch38 0x6bde 022689 fetch 1 ,memui_reconnect_mode 0x6bdf 022690 beq no_reconnection ,rfcomm_rx_process_remote_page 0x6be0 022691 branch rfcomm_rx_process_reconn : 022693 rfcomm_rx_process_remote_page: 0x6be1 022694 fetch 2 ,mem_l2cap_payload_ptr 0x6be2 022695 copy pdata ,contr 0x6be3 022696 call get_rfcomm_head_struct 0x6be4 022697 fetch 1 ,mem_current_channel 0x6be5 022698 beq 0 ,parse_dlci0_rp 0x6be6 022699 branch parse_uih_rp : 022700 parse_dlci0_rp: 0x6be7 022701 set1 mark_ext_patch ,mark 0x6be8 022702 bpatch patch38_1 ,mem_patch38 0x6be9 022703 fetch 1 ,mem_current_frame_type 0x6bea 022704 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 0x6beb 022705 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 0x6bec 022706 beq rfcomm_frame_type_uih ,parse_dlci0_rp_uih 0x6bed 022707 rtneq rfcomm_frame_type_disconn 0x6bee 022708 branch assert : 022711 parse_dlci0_rp_uih: 0x6bef 022712 fetch 2 ,mem_rfcomm_uih_payload_ptr 0x6bf0 022713 copy pdata ,contr 0x6bf1 022714 call get_rfcomm_uih_head_struct 0x6bf2 022715 fetch 1 ,mem_uih_cmd_type 0x6bf3 022716 beq uih_param_neg_cmd ,parse_dlci0_rp_uih_pn_cmd 0x6bf4 022717 beq uih_param_neg_res ,parse_dlci0_rp_uih_pn_res 0x6bf5 022718 beq uih_modem_status_cmd ,parse_dlci0_rp_uih_ms_cmd 0x6bf6 022719 beq uih_modem_status_res ,parse_dlci0_rp_uih_ms_res 0x6bf7 022720 branch rfcomm_rx_process_end : 022722 parse_dlci0_rp_uih_pn_cmd: 0x6bf8 022723 call parse_dlci0_rp_uih_pn_res_common 0x6bf9 022724 fetch 1 ,mem_pn_dlci 0x6bfa 022725 rshift pdata ,pdata 0x6bfb 022726 sub pdata ,spp_slave_channel ,null 0x6bfc 022727 branch parse_dlci0_rp_uih_pn_cmd_spp ,zero 0x6bfd 022728 branch assert : 022729 parse_dlci0_rp_uih_pn_cmd_spp: 0x6bfe 022730 fetch 1 ,mem_spp_state 0x6bff 022731 set1 rfcomm_channel_state_pn_cmd ,pdata 0x6c00 022732 set1 rfcomm_channel_state_pn_res ,pdata 0x6c01 022733 store 1 ,mem_spp_state 0x6c02 022734 call rfcomm_send_param_neg_res 0x6c03 022735 branch rfcomm_rx_process_end : 022737 parse_dlci0_rp_uih_pn_res: 0x6c04 022738 call parse_dlci0_rp_uih_pn_res_common 0x6c05 022739 branch rfcomm_rx_process_end : 022741 parse_dlci0_rp_uih_pn_res_common: 0x6c06 022742 call get_param_payload_ptr 0x6c07 022743 branch get_rfcomm_prarmer_negotiation : 022745 get_rfcomm_param_modem_status: 0x6c08 022746 call get_param_payload_ptr 0x6c09 022747 ifetch 1 ,contr 0x6c0a 022748 rshift3 pdata ,pdata 0x6c0b 022749 store 1 ,mem_ms_channel 0x6c0c 022750 ifetch 1 ,contr 0x6c0d 022751 store 1 ,mem_ms_param 0x6c0e 022752 rtn : 022755 get_rfcomm_head_struct: 0x6c0f 022756 ifetch 1 ,contr 0x6c10 022757 store 1 ,mem_current_adss 0x6c11 022758 rshift3 pdata ,pdata 0x6c12 022759 store 1 ,mem_current_channel 0x6c13 022760 ifetch 1 ,contr 0x6c14 022761 store 1 ,mem_current_frame_type : 022762 get_rfcomm_current_length: 0x6c15 022763 call get_rfcomm_length_common 0x6c16 022764 storet 2 ,mem_current_length 0x6c17 022765 copy contr ,pdata 0x6c18 022766 store 2 ,mem_rfcomm_uih_payload_ptr 0x6c19 022767 rtn : 022769 get_rfcomm_uih_head_struct: 0x6c1a 022770 ifetch 1 ,contr 0x6c1b 022771 rshift pdata ,pdata 0x6c1c 022772 store 1 ,mem_uih_cmd_type 0x6c1d 022773 call get_rfcomm_length_common 0x6c1e 022774 storet 2 ,mem_uih_length 0x6c1f 022775 copy contr ,pdata 0x6c20 022776 store 2 ,mem_param_payload_ptr 0x6c21 022777 rtn : 022780 get_param_payload_ptr: 0x6c22 022781 fetch 2 ,mem_param_payload_ptr 0x6c23 022782 copy pdata ,contr 0x6c24 022783 rtn : 022785 get_rfcomm_param_length_common: 0x6c25 022786 fetch 2 ,mem_param_payload_ptr 0x6c26 022787 copy pdata ,contr : 022788 get_rfcomm_length_common: 0x6c27 022789 ifetch 1 ,contr 0x6c28 022790 copy pdata ,temp 0x6c29 022791 rshift temp ,temp 0x6c2a 022792 rtnbit1 0 0x6c2b 022793 ifetch 1 ,contr 0x6c2c 022794 lshift3 pdata ,pdata 0x6c2d 022795 lshift4 pdata ,pdata 0x6c2e 022796 iadd temp ,temp 0x6c2f 022797 rtn : 022799 get_rfcomm_prarmer_negotiation: 0x6c30 022800 ifetch 1 ,contr 0x6c31 022801 store 1 ,mem_pn_dlci 0x6c32 022802 ifetch 1 ,contr 0x6c33 022803 store 1 ,mem_pn_credit_flow_type_info 0x6c34 022804 ifetch 1 ,contr 0x6c35 022805 store 1 ,mem_pn_priority 0x6c36 022806 ifetch 1 ,contr 0x6c37 022807 store 1 ,mem_pn_acknowledg_timer 0x6c38 022808 ifetch 2 ,contr 0x6c39 022809 store 2 ,mem_pn_max_frame_size 0x6c3a 022810 ifetch 1 ,contr 0x6c3b 022811 store 1 ,mem_pn_max_retrans 0x6c3c 022812 ifetch 1 ,contr 0x6c3d 022813 store 1 ,mem_remote_credits 0x6c3e 022814 rtn : 022817 parse_dlci0_rp_uih_ms_cmd: 0x6c3f 022818 call get_rfcomm_param_modem_status 0x6c40 022819 fetch 1 ,mem_ms_channel 0x6c41 022820 sub pdata ,1 ,null 0x6c42 022821 branch parse_dlci0_rp_uih_ms_cmd_spp ,zero 0x6c43 022822 branch assert : 022823 parse_dlci0_rp_uih_ms_cmd_spp: 0x6c44 022824 fetch 1 ,mem_spp_state 0x6c45 022825 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 0x6c46 022826 set1 rfcomm_channel_state_snd_ms_res ,pdata 0x6c47 022827 store 1 ,mem_spp_state 0x6c48 022828 fetcht 1 ,mem_pn_dlci 0x6c49 022829 lshift2 temp ,temp 0x6c4a 022830 or_into 3 ,temp 0x6c4b 022831 call rfcomm_send_modem_status_res 0x6c4c 022832 jam more_pkt_msc_cmd_spp ,mem_rfcomm_send_more_pkt 0x6c4d 022833 branch rfcomm_rx_process_end : 022835 parse_dlci0_rp_uih_ms_res: 0x6c4e 022836 call get_rfcomm_param_modem_status 0x6c4f 022837 fetch 1 ,mem_ms_channel 0x6c50 022838 sub pdata ,1 ,null 0x6c51 022839 branch parse_dlci0_rp_uih_ms_res_spp ,zero 0x6c52 022840 branch assert : 022841 parse_dlci0_rp_uih_ms_res_spp: 0x6c53 022842 fetch 1 ,mem_spp_state 0x6c54 022843 set1 rfcomm_channel_state_rcv_ms_res ,pdata 0x6c55 022844 store 1 ,mem_spp_state 0x6c56 022845 branch rfcomm_rx_process_end : 022847 parse_uih_rp: 0x6c57 022848 fetch 1 ,mem_current_channel 0x6c58 022849 sub pdata ,spp_slave_channel ,null 0x6c59 022850 branch parse_uih_rp_spp ,zero 0x6c5a 022851 branch assert : 022852 parse_uih_rp_spp: 0x6c5b 022853 fetch 1 ,mem_current_frame_type 0x6c5c 022854 beq rfcomm_frame_type_ua ,parse_uih_rp_spp_ua 0x6c5d 022855 beq rfcomm_frame_type_sabm ,parse_uih_rp_spp_sabm 0x6c5e 022856 beq rfcomm_frame_type_uih ,parse_uih_spp_uih 0x6c5f 022857 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 0x6c60 022858 beq rfcomm_frame_type_disconn ,parse_uih_rp_spp_disconn 0x6c61 022859 branch assert : 022860 parse_uih_rp_spp_ua: 0x6c62 022861 fetch 1 ,mem_spp_state 0x6c63 022862 set1 rfcomm_channel_state_ua ,pdata 0x6c64 022863 store 1 ,mem_spp_state 0x6c65 022864 branch rfcomm_rx_process_end : 022865 parse_uih_rp_spp_sabm: 0x6c66 022866 fetch 1 ,mem_spp_state 0x6c67 022867 set1 rfcomm_channel_state_ua ,pdata 0x6c68 022868 set1 rfcomm_channel_state_sabm ,pdata 0x6c69 022869 store 1 ,mem_spp_state 0x6c6a 022870 fetch 1 ,mem_current_adss 0x6c6b 022871 call rfcomm_calculate_fcs_ua 0x6c6c 022872 store 1 ,mem_current_fcs 0x6c6d 022873 call rfcomm_send_ua 0x6c6e 022874 fetch 1 ,mem_current_adss 0x6c6f 022875 rshift2 pdata ,pdata 0x6c70 022876 store 1 ,mem_pn_dlci 0x6c71 022877 lshift2 pdata ,pdata 0x6c72 022878 set0 rfcomm_address_cr ,pdata 0x6c73 022879 set1 rfcomm_address_ext_len ,pdata 0x6c74 022880 arg mem_hiufcs_spp ,temp 0x6c75 022881 storet 2 ,mem_contw_temp 0x6c76 022882 call rfcomm_save_fcs_uih 0x6c77 022883 branch rfcomm_rx_process_end : 022885 parse_uih_spp_uih_credits: 0x6c78 022886 fetch 2 ,mem_rfcomm_uih_payload_ptr 0x6c79 022887 copy pdata ,contr 0x6c7a 022888 increase 1 ,pdata 0x6c7b 022889 store 2 ,mem_rfcomm_uih_payload_ptr 0x6c7c 022890 ifetch 1 ,contr 0x6c7d 022891 fetcht 1 ,mem_remote_credits 0x6c7e 022892 iadd temp ,pdata 0x6c7f 022893 store 1 ,mem_remote_credits : 022894 parse_uih_spp_uih: 0x6c80 022895 call rfcomm_increase_credit_given : 022896 parse_uih_spp_uih_cont: 0x6c81 022897 call get_rfcomm_snd_adss 0x6c82 022898 call rfcomm_send_uih_without_payload 0x6c83 022899 call spp_process_rx_data 0x6c84 022900 branch rfcomm_rx_process_end : 022902 parse_uih_rp_spp_disconn: 0x6c85 022903 call rfcomm_init_spp 0x6c86 022904 fetch 1 ,mem_current_adss 0x6c87 022905 call rfcomm_calculate_fcs_ua 0x6c88 022906 store 1 ,mem_current_fcs 0x6c89 022907 call rfcomm_send_ua 0x6c8a 022908 branch rfcomm_rx_process_end : 022913 rfcomm_rx_process_reconn: 0x6c8b 022914 fetch 2 ,mem_l2cap_payload_ptr 0x6c8c 022915 copy pdata ,contr 0x6c8d 022916 call get_rfcomm_head_struct 0x6c8e 022917 fetch 1 ,mem_current_channel 0x6c8f 022918 beq 0 ,parse_dlci0_reconn 0x6c90 022919 branch parse_uih_reconn : 022921 parse_dlci0_reconn: 0x6c91 022922 set1 mark_ext_patch ,mark 0x6c92 022923 bpatch patch38_2 ,mem_patch38 0x6c93 022924 fetch 1 ,mem_current_frame_type 0x6c94 022925 beq rfcomm_frame_type_sabm ,rfcomm_rx_process_dlci0_sabm 0x6c95 022926 beq rfcomm_frame_type_ua ,rfcomm_rx_process_dlci0_ua 0x6c96 022927 beq rfcomm_frame_type_uih ,parse_dlci0_reconn_uih 0x6c97 022928 branch rfcomm_rx_process_end : 022929 parse_dlci0_reconn_uih: 0x6c98 022930 fetch 2 ,mem_rfcomm_uih_payload_ptr 0x6c99 022931 copy pdata ,contr 0x6c9a 022932 call get_rfcomm_uih_head_struct 0x6c9b 022933 fetch 1 ,mem_uih_cmd_type 0x6c9c 022934 beq uih_param_neg_cmd ,parse_dlci0_reconn_uih_pn_cmd 0x6c9d 022935 beq uih_param_neg_res ,parse_dlci0_reconn_uih_pn_cmd 0x6c9e 022936 beq uih_modem_status_cmd ,parse_dlci0_reconn_uih_ms_cmd 0x6c9f 022937 beq uih_modem_status_res ,parse_dlci0_reconn_uih_ms_res 0x6ca0 022938 branch rfcomm_rx_process_end : 022940 parse_dlci0_reconn_uih_pn_cmd: 0x6ca1 022941 call parse_dlci0_rp_uih_pn_res_common 0x6ca2 022942 fetch 1 ,mem_pn_dlci 0x6ca3 022943 rshift pdata ,pdata 0x6ca4 022944 fetcht 1 ,mem_remote_spp_channel 0x6ca5 022945 isub temp ,null 0x6ca6 022946 branch parse_dlci0_reconn_uih_pn_cmd_spp ,zero 0x6ca7 022947 branch assert : 022948 parse_dlci0_reconn_uih_pn_cmd_spp: 0x6ca8 022949 fetch 1 ,mem_spp_state 0x6ca9 022950 set1 rfcomm_channel_state_pn_res ,pdata 0x6caa 022951 store 1 ,mem_spp_state 0x6cab 022952 branch rfcomm_rx_process_end : 022954 parse_dlci0_reconn_uih_ms_cmd: 0x6cac 022955 call get_rfcomm_param_modem_status 0x6cad 022956 fetch 1 ,mem_ms_channel 0x6cae 022957 fetcht 1 ,mem_remote_spp_channel 0x6caf 022958 isub temp ,null 0x6cb0 022959 branch parse_dlci0_reconn_uih_ms_cmd_spp ,zero 0x6cb1 022960 branch assert 0x6cb2 022961 branch rfcomm_rx_process_end : 022962 parse_dlci0_reconn_uih_ms_cmd_spp: 0x6cb3 022963 fetch 1 ,mem_spp_state 0x6cb4 022964 set1 rfcomm_channel_state_rcv_ms_cmd ,pdata 0x6cb5 022965 set1 rfcomm_channel_state_snd_ms_res ,pdata 0x6cb6 022966 store 1 ,mem_spp_state 0x6cb7 022967 fetcht 1 ,mem_pn_dlci 0x6cb8 022968 lshift2 temp ,temp 0x6cb9 022969 or_into 3 ,temp 0x6cba 022970 call rfcomm_send_modem_status_res 0x6cbb 022971 branch rfcomm_rx_process_end : 022973 parse_dlci0_reconn_uih_ms_res: 0x6cbc 022974 call get_rfcomm_param_modem_status 0x6cbd 022975 fetch 1 ,mem_ms_channel 0x6cbe 022976 fetcht 1 ,mem_remote_spp_channel 0x6cbf 022977 isub temp ,null 0x6cc0 022978 branch parse_dlci0_reconn_uih_ms_res_spp ,zero 0x6cc1 022979 branch assert : 022980 parse_dlci0_reconn_uih_ms_res_spp: 0x6cc2 022981 fetch 1 ,mem_spp_state 0x6cc3 022982 set1 rfcomm_channel_state_rcv_ms_res ,pdata 0x6cc4 022983 store 1 ,mem_spp_state 0x6cc5 022984 branch rfcomm_rx_process_end : 022986 parse_uih_reconn: 0x6cc6 022987 fetch 1 ,mem_current_channel 0x6cc7 022988 fetcht 1 ,mem_remote_spp_channel 0x6cc8 022989 isub temp ,null 0x6cc9 022990 branch parse_uih_reconn_spp ,zero 0x6cca 022991 branch assert 0x6ccb 022992 branch rfcomm_rx_process_end : 022994 parse_uih_reconn_spp: 0x6ccc 022995 fetch 1 ,mem_current_frame_type 0x6ccd 022996 beq rfcomm_frame_type_ua ,parse_uih_reconn_spp_ua 0x6cce 022997 beq rfcomm_frame_type_uih ,parse_uih_spp_uih 0x6ccf 022998 beq rfcomm_frame_type_uih_credits ,parse_uih_spp_uih_credits 0x6cd0 022999 beq rfcomm_frame_type_disconn ,parse_uih_reconn_spp_disconn : 023000 parse_uih_reconn_spp_ua: 0x6cd1 023001 fetch 1 ,mem_spp_state 0x6cd2 023002 set1 rfcomm_channel_state_ua ,pdata 0x6cd3 023003 store 1 ,mem_spp_state 0x6cd4 023004 branch rfcomm_rx_process_end : 023005 parse_uih_reconn_spp_sabm: 0x6cd5 023006 branch parse_uih_reconn_spp_sabm : 023007 parse_uih_reconn_spp_disconn: 0x6cd6 023008 branch parse_uih_rp_spp_disconn : 023009 rfcomm_rx_process_end: 0x6cd7 023010 rtn : 023012 rfcomm_send_more_pkt: 0x6cd8 023013 fetch 1 ,mem_rfcomm_send_more_pkt 0x6cd9 023014 rtn blank 0x6cda 023015 beq more_pkt_msc_cmd_spp ,rfcomm_send_more_pkt_msc_cmd_spp 0x6cdb 023016 branch assert : 023018 rfcomm_send_more_pkt_msc_cmd_spp: 0x6cdc 023019 jam 0 ,mem_rfcomm_send_more_pkt 0x6cdd 023020 call l2cap_malloc_rfcomm_channel 0x6cde 023021 arg spp_slave_channel ,temp 0x6cdf 023022 lshift3 temp ,temp : 023023 rfcomm_send_more_pkt_msc_cmd_spp0: 0x6ce0 023024 or_into 0x03 ,temp 0x6ce1 023025 arg 0xaa ,rega 0x6ce2 023026 call rfcomm_send_modem_status_cmd 0x6ce3 023027 call l2cap_get_rfcomm_tx_buff 0x6ce4 023028 copy contw ,contr 0x6ce5 023029 ifetch 2 ,contr 0x6ce6 023030 branch assert ,blank 0x6ce7 023031 rtn : 023033 rfcomm_send_sabm: 0x6ce8 023034 set1 mark_ext_patch ,mark 0x6ce9 023035 bpatch patch38_3 ,mem_patch38 0x6cea 023036 call l2cap_get_rfcomm_tx_buff 0x6ceb 023037 setarg 0x0004 0x6cec 023038 istore 2 ,contw 0x6ced 023039 fetch 2 ,mem_rfcomm_remote_cid 0x6cee 023040 istore 2 ,contw 0x6cef 023041 fetch 1 ,mem_current_adss 0x6cf0 023042 istore 1 ,contw 0x6cf1 023043 setarg 0x013f 0x6cf2 023044 istore 2 ,contw 0x6cf3 023045 fetch 1 ,mem_current_fcs 0x6cf4 023046 istore 1 ,contw 0x6cf5 023047 rtn : 023048 rfcomm_send_ua: 0x6cf6 023049 set1 mark_ext_patch ,mark 0x6cf7 023050 bpatch patch38_4 ,mem_patch38 0x6cf8 023051 call l2cap_malloc_rfcomm_channel 0x6cf9 023052 call l2cap_get_rfcomm_tx_buff 0x6cfa 023053 setarg 0x0004 0x6cfb 023054 istore 2 ,contw 0x6cfc 023055 fetch 2 ,mem_rfcomm_remote_cid 0x6cfd 023056 istore 2 ,contw 0x6cfe 023057 fetch 1 ,mem_current_adss 0x6cff 023058 istore 1 ,contw 0x6d00 023059 setarg 0x0173 0x6d01 023060 istore 2 ,contw 0x6d02 023061 fetch 1 ,mem_current_fcs 0x6d03 023062 istore 1 ,contw 0x6d04 023063 rtn : 023064 rfcomm_send_param_neg_cmd: 0x6d05 023065 set1 mark_ext_patch ,mark 0x6d06 023066 bpatch patch38_5 ,mem_patch38 0x6d07 023067 call l2cap_get_rfcomm_tx_buff 0x6d08 023068 setarg 0x000e 0x6d09 023069 istore 2 ,contw 0x6d0a 023070 fetch 2 ,mem_rfcomm_remote_cid 0x6d0b 023071 istore 2 ,contw 0x6d0c 023072 fetch 1 ,mem_rfcomm_initiator 0x6d0d 023073 lshift pdata ,pdata 0x6d0e 023074 set1 0 ,pdata 0x6d0f 023075 istore 1 ,contw 0x6d10 023076 setarg 0x15ef 0x6d11 023077 istore 2 ,contw 0x6d12 023078 setarg 0x1183 0x6d13 023079 istore 2 ,contw 0x6d14 023080 copy temp ,pdata 0x6d15 023081 istore 1 ,contw 0x6d16 023082 setarg 0x0000f0 0x6d17 023083 istore 3 ,contw 0x6d18 023084 setarg rfcomm_max_frame_size 0x6d19 023085 istore 2 ,contw 0x6d1a 023086 setarg 0 0x6d1b 023087 istore 1 ,contw 0x6d1c 023088 setarg 0x01 0x6d1d 023089 istore 1 ,contw 0x6d1e 023090 call rfcomm_calculate_fcs_dlci0 0x6d1f 023091 istore 1 ,contw 0x6d20 023092 jam 0x10 ,mem_credit_given 0x6d21 023093 rtn : 023094 rfcomm_send_param_neg_res: 0x6d22 023095 set1 mark_ext_patch ,mark 0x6d23 023096 bpatch patch38_6 ,mem_patch38 0x6d24 023097 call l2cap_malloc_rfcomm_channel 0x6d25 023098 call l2cap_get_rfcomm_tx_buff 0x6d26 023099 setarg 0x000e 0x6d27 023100 istore 2 ,contw 0x6d28 023101 fetch 2 ,mem_rfcomm_remote_cid 0x6d29 023102 istore 2 ,contw 0x6d2a 023103 fetch 1 ,mem_rfcomm_initiator 0x6d2b 023104 lshift pdata ,pdata 0x6d2c 023105 set1 0 ,pdata 0x6d2d 023106 istore 1 ,contw 0x6d2e 023107 setarg 0x15ef 0x6d2f 023108 istore 2 ,contw 0x6d30 023109 setarg 0x1181 0x6d31 023110 istore 2 ,contw 0x6d32 023111 fetch 1 ,mem_pn_dlci 0x6d33 023112 istore 1 ,contw 0x6d34 023113 setarg 0x0000e0 0x6d35 023114 istore 3 ,contw 0x6d36 023115 setarg rfcomm_max_frame_size 0x6d37 023116 istore 2 ,contw 0x6d38 023117 setarg 0x00 0x6d39 023118 istore 1 ,contw 0x6d3a 023119 setarg 0x07 0x6d3b 023120 istore 1 ,contw 0x6d3c 023121 call rfcomm_calculate_fcs_dlci0 0x6d3d 023122 istore 1 ,contw 0x6d3e 023123 rtn : 023124 rfcomm_send_modem_status_cmd: 0x6d3f 023125 set1 mark_ext_patch ,mark 0x6d40 023126 bpatch patch38_7 ,mem_patch38 0x6d41 023127 call l2cap_get_rfcomm_tx_buff 0x6d42 023128 setarg 0x0008 0x6d43 023129 istore 2 ,contw 0x6d44 023130 fetch 2 ,mem_rfcomm_remote_cid 0x6d45 023131 istore 2 ,contw 0x6d46 023132 fetch 1 ,mem_rfcomm_initiator 0x6d47 023133 lshift pdata ,pdata 0x6d48 023134 set1 0 ,pdata 0x6d49 023135 istore 1 ,contw 0x6d4a 023136 setarg 0x09ef 0x6d4b 023137 istore 2 ,contw 0x6d4c 023138 setarg 0x05e3 0x6d4d 023139 istore 2 ,contw 0x6d4e 023140 copy temp ,pdata 0x6d4f 023141 istore 1 ,contw 0x6d50 023142 setarg 0x8d 0x6d51 023143 istore 1 ,contw 0x6d52 023144 call rfcomm_calculate_fcs_dlci0 0x6d53 023145 istore 1 ,contw 0x6d54 023146 rtn : 023148 rfcomm_send_modem_status_res: 0x6d55 023149 set1 mark_ext_patch ,mark 0x6d56 023150 bpatch patch39_0 ,mem_patch39 0x6d57 023151 call l2cap_malloc_rfcomm_channel 0x6d58 023152 call l2cap_get_rfcomm_tx_buff 0x6d59 023153 setarg 0x0008 0x6d5a 023154 istore 2 ,contw 0x6d5b 023155 fetch 2 ,mem_rfcomm_remote_cid 0x6d5c 023156 istore 2 ,contw 0x6d5d 023157 copy temp ,timeup 0x6d5e 023158 fetch 1 ,mem_rfcomm_initiator 0x6d5f 023159 lshift pdata ,pdata 0x6d60 023160 set1 0 ,pdata 0x6d61 023161 istore 1 ,contw 0x6d62 023162 setarg 0x09ef 0x6d63 023163 istore 2 ,contw 0x6d64 023164 setarg 0x05e1 0x6d65 023165 istore 2 ,contw 0x6d66 023166 copy timeup ,pdata 0x6d67 023167 istore 1 ,contw 0x6d68 023168 setarg 0x8d 0x6d69 023169 istore 1 ,contw 0x6d6a 023170 call rfcomm_calculate_fcs_dlci0 0x6d6b 023171 istore 1 ,contw 0x6d6c 023172 rtn : 023174 rfcomm_send_uih_without_payload: 0x6d6d 023175 set1 mark_ext_patch ,mark 0x6d6e 023176 bpatch patch39_1 ,mem_patch39 0x6d6f 023177 fetch 1 ,mem_credit_given 0x6d70 023178 rtn blank 0x6d71 023179 hfetch 2 ,core_uart_rxitems 0x6d72 023180 nrtn blank 0x6d73 023181 copy rega ,pdata 0x6d74 023182 store 1 ,mem_pdatatemp + 1 0x6d75 023183 storet 1 ,mem_pdatatemp 0x6d76 023184 call l2cap_malloc_is_fifo_full 0x6d77 023185 nrtn blank 0x6d78 023186 call l2cap_malloc_rfcomm_channel 0x6d79 023187 call l2cap_get_rfcomm_tx_buff 0x6d7a 023188 setarg 0x05 0x6d7b 023189 istore 2 ,contw 0x6d7c 023190 fetch 2 ,mem_rfcomm_remote_cid 0x6d7d 023191 istore 2 ,contw 0x6d7e 023192 fetch 1 ,mem_rfcomm_send_adss 0x6d7f 023193 istore 1 ,contw 0x6d80 023194 setarg 0x01ff 0x6d81 023195 istore 2 ,contw 0x6d82 023196 fetch 1 ,mem_credit_given 0x6d83 023197 istore 1 ,contw 0x6d84 023198 fetch 1 ,mem_hiufcs_spp_wcredits 0x6d85 023199 istore 1 ,contw 0x6d86 023200 jam 0 ,mem_credit_given 0x6d87 023201 rtn : 023203 rfcomm_increase_credit_given: 0x6d88 023204 fetch 2 ,mem_current_length 0x6d89 023205 rtn blank 0x6d8a 023206 fetch 1 ,mem_credit_given 0x6d8b 023207 increase 1 ,pdata 0x6d8c 023208 store 1 ,mem_credit_given 0x6d8d 023209 rtn : 023211 spp_process_rx_data: 0x6d8e 023212 set1 mark_ext_patch ,mark 0x6d8f 023213 bpatch patch39_2 ,mem_patch39 0x6d90 023214 fetch 2 ,mem_current_length 0x6d91 023215 copy pdata ,loopcnt 0x6d92 023216 call uartd_prepare_tx 0x6d93 023217 fetch 2 ,mem_rfcomm_uih_payload_ptr 0x6d94 023218 copy pdata ,contr 0x6d95 023219 call uart_copy_tx_bytes 0x6d96 023220 branch uartd_send : 023222 spp_tx_rfcomm_packet: 0x6d97 023223 set1 mark_ext_patch ,mark 0x6d98 023224 bpatch patch39_3 ,mem_patch39 0x6d99 023226 fetch 1 ,mem_remote_credits 0x6d9a 023227 rtn blank 0x6d9b 023228 increase -1 ,pdata 0x6d9c 023229 store 1 ,mem_remote_credits 0x6d9d 023230 fetch 2 ,mem_pn_max_frame_size 0x6d9e 023231 fetcht 2 ,mem_current_packet_length 0x6d9f 023232 isub temp ,null 0x6da0 023233 branch spp_tx_rfcomm_from_uart ,positive 0x6da1 023234 store 2 ,mem_current_packet_length : 023235 spp_tx_rfcomm_from_uart: 0x6da2 023236 fetch 1 ,mem_credit_given 0x6da3 023237 branch spp_tx_rfcomm_from_uart_without_credit ,blank 0x6da4 023238 jam 1 ,mem_rfcomm_send_offset 0x6da5 023239 fetch 1 ,mem_hiufcs_spp_wcredits 0x6da6 023240 store 1 ,mem_rfcomm_send_fcs 0x6da7 023241 setarg rsp_rx_uih_wdata 0x6da8 023242 store 1 ,mem_rfcomm_send_frame_type 0x6da9 023243 branch spp_tx_rfcomm_from_uart_common : 023244 spp_tx_rfcomm_from_uart_without_credit: 0x6daa 023245 jam 0 ,mem_rfcomm_send_offset 0x6dab 023246 fetch 1 ,mem_hiufcs_spp 0x6dac 023247 store 1 ,mem_rfcomm_send_fcs 0x6dad 023248 setarg rsp_tx_uih 0x6dae 023249 store 1 ,mem_rfcomm_send_frame_type : 023250 spp_tx_rfcomm_from_uart_common: 0x6daf 023251 set1 mark_ext_patch ,mark 0x6db0 023252 bpatch patch39_4 ,mem_patch39 0x6db1 023253 fetch 1 ,mem_current_packet_length 0x6db2 023254 sub pdata ,127 ,null 0x6db3 023255 branch spp_tx_rfcomm_from_uart_common0 ,positive 0x6db4 023256 fetch 1 ,mem_rfcomm_send_offset 0x6db5 023257 increase 1 ,pdata 0x6db6 023258 store 1 ,mem_rfcomm_send_offset : 023259 spp_tx_rfcomm_from_uart_common0: 0x6db7 023260 call get_rfcomm_snd_adss 0x6db8 023261 fetch 2 ,mem_current_packet_length 0x6db9 023262 increase 8 ,pdata 0x6dba 023263 fetcht 1 ,mem_rfcomm_send_offset 0x6dbb 023264 iadd temp ,rega 0x6dbc 023266 call l2cap_malloc 0x6dbd 023267 store 2 ,mem_rfcomm_tx_buff_ptr 0x6dbe 023268 increase 4 ,pdata 0x6dbf 023269 store 2 ,mem_rfcomm_tx_payload_ptr 0x6dc0 023270 copy pdata ,contw 0x6dc1 023271 fetch 1 ,mem_rfcomm_send_adss 0x6dc2 023272 istore 1 ,contw 0x6dc3 023273 fetch 1 ,mem_rfcomm_send_frame_type 0x6dc4 023274 istore 1 ,contw 0x6dc5 023275 call spp_tx_write_length 0x6dc6 023276 call spp_tx_write_given_credit 0x6dc7 023277 call get_uart_rrptr 0x6dc8 023278 fetch 1 ,mem_current_packet_length 0x6dc9 023279 copy pdata ,loopcnt 0x6dca 023280 call uart_copy_rx_bytes 0x6dcb 023281 fetch 1 ,mem_rfcomm_send_fcs 0x6dcc 023282 istore 1 ,contw 0x6dcd 023283 fetch 2 ,mem_rfcomm_tx_buff_ptr 0x6dce 023284 copy pdata ,contw 0x6dcf 023285 fetch 2 ,mem_current_packet_length 0x6dd0 023286 fetcht 1 ,mem_rfcomm_send_offset 0x6dd1 023287 iadd temp ,pdata 0x6dd2 023288 increase 4 ,pdata 0x6dd3 023289 istore 2 ,contw 0x6dd4 023290 fetch 2 ,mem_rfcomm_remote_cid 0x6dd5 023291 istore 2 ,contw 0x6dd6 023292 jam 0 ,mem_credit_given 0x6dd7 023293 branch spp_send_end : 023295 spp_tx_write_length: 0x6dd8 023296 fetch 2 ,mem_current_packet_length 0x6dd9 023297 sub pdata ,0x7f ,null 0x6dda 023298 nbranch spp_tx_write_long_packet ,positive 0x6ddb 023299 lshift pdata ,pdata 0x6ddc 023300 set1 0 ,pdata 0x6ddd 023301 istore 1 ,contw 0x6dde 023302 rtn : 023303 spp_tx_write_long_packet: 0x6ddf 023304 fetch 2 ,mem_current_packet_length 0x6de0 023305 rshift3 pdata ,pdata 0x6de1 023306 rshift4 pdata ,temp 0x6de2 023307 and_into 0x7f ,pdata 0x6de3 023308 lshift pdata ,pdata 0x6de4 023309 set0 0 ,pdata 0x6de5 023310 istore 1 ,contw 0x6de6 023311 istoret 1 ,contw 0x6de7 023312 rtn : 023313 spp_tx_write_given_credit: 0x6de8 023314 fetch 1 ,mem_credit_given 0x6de9 023315 rtn blank 0x6dea 023316 istore 1 ,contw 0x6deb 023317 rtn : 023322 scheduler_process: 0x6dec 023323 set1 mark_ext_patch ,mark 0x6ded 023324 bpatch patch33_5 ,mem_patch33 0x6dee 023325 call check_51cmd 0x6def 023326 call app_process_bb_event 0x6df0 023327 call process_conn_sm 0x6df1 023329 set1 mark_ext_patch ,mark 0x6df2 023330 bpatch patch33_6 ,mem_patch33 0x6df3 023331 call sp_calc_sequence 0x6df4 023332 call simple_pairing_sequence 0x6df5 023333 call master_simple_paring_sequence 0x6df6 023335 set1 mark_ext_patch ,mark 0x6df7 023336 bpatch patch33_7 ,mem_patch33 0x6df8 023337 fetch 1 ,mem_device_option 0x6df9 023338 rtneq dvc_op_hci 0x6dfa 023340 call l2cap_malloc_is_fifo_full 0x6dfb 023341 nrtn blank 0x6dfc 023343 call l2cap_call_proc_sigal_pending : 023344 scheduler_process1: 0x6dfd 023345 call l2cap_malloc_is_fifo_full 0x6dfe 023346 nrtn blank 0x6dff 023347 set1 mark_ext_patch ,mark 0x6e00 023348 bpatch patch34_0 ,mem_patch34 0x6e01 023350 call process_upper_sm 0x6e02 023351 call l2cap_send_config_req 0x6e03 023352 call rfcomm_send_more_pkt : 023353 scheduler_process0: 0x6e04 023354 call scheduler_tx_disconnect_hid 0x6e05 023355 set1 mark_ext_patch ,mark 0x6e06 023356 bpatch patch34_1 ,mem_patch34 0x6e07 023357 call l2cap_malloc_is_fifo_full 0x6e08 023358 nrtn blank 0x6e09 023359 branch app_process_bt : 023361 scheduler_tx_disconnect_hid: 0x6e0a 023362 set1 mark_ext_patch ,mark 0x6e0b 023363 bpatch patch34_2 ,mem_patch34 0x6e0c 023364 fetch 1 ,mem_control_tasks 0x6e0d 023365 bbit1 l2cap_disconnect_interrupt ,l2cap_disconnect_interrupt_req 0x6e0e 023366 bbit1 l2cap_disconnect_control ,l2cap_disconnect_control_req 0x6e0f 023367 rtn : 023369 scheduler_tx_l2cap_pkt: 0x6e10 023370 set1 mark_ext_patch ,mark 0x6e11 023371 bpatch patch34_3 ,mem_patch34 0x6e12 023372 call l2cap_malloc_is_fifo_empty 0x6e13 023373 rtn blank 0x6e14 023374 fetch 1 ,mem_op 0x6e15 023375 rtnbit1 op_txl2cap 0x6e16 023376 call l2cap_malloc_fifo_out 0x6e17 023377 store 2 ,mem_txptr 0x6e18 023378 copy pdata ,contr 0x6e19 023379 ifetch 2 ,contr 0x6e1a 023380 increase 4 ,pdata 0x6e1b 023381 store 2 ,mem_tx_len 0x6e1c 023382 jam 6 ,mem_tx_lch 0x6e1d 023383 set1 mark_ext_patch ,mark 0x6e1e 023384 bpatch patch34_4 ,mem_patch34 0x6e1f 023385 fetch 2 ,mem_l2cap_tx_multi_offset 0x6e20 023386 branch scheduler_tx_l2cap_start_pkt ,blank 0x6e21 023387 fetch 1 ,mem_op 0x6e22 023388 rtnbit0 op_pkt_comp 0x6e23 023389 set0 op_pkt_comp ,pdata 0x6e24 023390 store 1 ,mem_op 0x6e25 023391 jam 5 ,mem_tx_lch 0x6e26 023392 fetcht 2 ,mem_l2cap_tx_multi_offset 0x6e27 023393 fetch 2 ,mem_txptr 0x6e28 023394 iadd temp ,pdata 0x6e29 023395 store 2 ,mem_txptr 0x6e2a 023396 fetch 2 ,mem_tx_len 0x6e2b 023397 isub temp ,pdata 0x6e2c 023398 store 2 ,mem_tx_len : 023399 scheduler_tx_l2cap_start_pkt: 0x6e2d 023400 set1 mark_ext_patch ,mark 0x6e2e 023401 bpatch patch34_5 ,mem_patch34 0x6e2f 023402 fetch 2 ,mem_tx_len 0x6e30 023403 branch assert ,blank 0x6e31 023404 arg l2cap_max_pkt_len ,temp 0x6e32 023405 isub temp ,pdata 0x6e33 023406 nbranch scheduler_tx_l2cap_last_pkt ,positive 0x6e34 023407 set1 mark_ext_patch ,mark 0x6e35 023408 bpatch patch34_6 ,mem_patch34 0x6e36 023409 storet 2 ,mem_tx_len 0x6e37 023410 fetch 2 ,mem_l2cap_tx_multi_offset 0x6e38 023411 iadd temp ,pdata 0x6e39 023412 store 2 ,mem_l2cap_tx_multi_offset 0x6e3a 023413 branch scheduler_tx_l2cap_pkt_end : 023414 scheduler_tx_l2cap_last_pkt: 0x6e3b 023415 setarg 0 0x6e3c 023416 store 2 ,mem_l2cap_tx_multi_offset : 023417 scheduler_tx_l2cap_pkt_end: 0x6e3d 023418 fetch 1 ,mem_op 0x6e3e 023419 set1 op_txl2cap ,pdata 0x6e3f 023420 store 1 ,mem_op 0x6e40 023421 rtn : 023423 scheduler_start_upper_sm: 0x6e41 023424 fetch 1 ,mem_ui_profile_supported 0x6e42 023425 bbit1 support_hid ,scheduler_start_upper_sm_hid 0x6e43 023426 jam uppersm_reconn_sdp_conn ,mem_upper_sm_reconn 0x6e44 023427 rtn : 023428 scheduler_start_upper_sm_hid: 0x6e45 023429 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 0x6e46 023430 rtn : 023432 process_upper_sm: 0x6e47 023433 fetch 1 ,memui_reconnect_mode 0x6e48 023434 nbranch process_upper_sm_reconn ,blank : 023435 process_upper_sm_remote_page: 0x6e49 023436 fetch 1 ,mem_upper_sm_remote_page 0x6e4a 023438 rtn blank 0x6e4b 023440 jam 0 ,mem_upper_sm_remote_page : 023441 process_upper_sm_rp_wait: 0x6e4c 023442 rtn : 023445 process_upper_sm_reconn: 0x6e4d 023446 set1 mark_ext_patch ,mark 0x6e4e 023447 bpatch patch34_7 ,mem_patch34 0x6e4f 023448 fetch 1 ,mem_upper_sm_reconn 0x6e50 023449 rtn blank 0x6e51 023450 beq uppersm_reconn_sdp_conn ,process_upper_sm_reconn_sdp_conn 0x6e52 023451 beq uppersm_reconn_sdp_conn_wait ,process_upper_sm_reconn_sdp_conn_wait 0x6e53 023452 beq uppersm_reconn_sdp_cfg ,process_upper_sm_reconn_sdp_cfg 0x6e54 023453 beq uppersm_reconn_sdp_cfg_wait ,process_upper_sm_reconn_sdp_cfg_wait 0x6e55 023454 beq uppersm_reconn_ss_spp ,process_upper_sm_reconn_ss_spp 0x6e56 023455 beq uppersm_reconn_ss_spp_wait ,process_upper_sm_reconn_ss_spp_wait 0x6e57 023456 beq uppersm_reconn_sdp_disconn ,process_upper_sm_reconn_sdp_disconn 0x6e58 023457 beq uppersm_reconn_sdp_disconn_wait ,process_upper_sm_reconn_sdp_disconn_wait 0x6e59 023458 beq uppersm_reconn_hid_ctrl_conn ,process_upper_sm_reconn_hid_ctrl_conn 0x6e5a 023459 beq uppersm_reconn_hid_ctrl_conn_wait ,process_upper_sm_reconn_hid_ctrl_conn_wait 0x6e5b 023460 beq uppersm_reconn_hid_ctrl_cfg ,process_upper_sm_reconn_hid_ctrl_cfg 0x6e5c 023461 beq uppersm_reconn_hid_ctrl_cfg_wait ,process_upper_sm_reconn_hid_ctrl_cfg_wait 0x6e5d 023462 beq uppersm_reconn_hid_int_conn ,process_upper_sm_reconn_hid_int_conn 0x6e5e 023463 beq uppersm_reconn_hid_int_conn_wait ,process_upper_sm_reconn_hid_int_conn_wait 0x6e5f 023464 beq uppersm_reconn_hid_int_cfg ,process_upper_sm_reconn_hid_int_cfg 0x6e60 023465 beq uppersm_reconn_hid_int_cfg_wait ,process_upper_sm_reconn_hid_int_cfg_wait 0x6e61 023466 beq uppersm_reconn_rfcomm_conn ,process_upper_sm_reconn_rfcomm_conn 0x6e62 023467 beq uppersm_reconn_rfcomm_conn_wait ,process_upper_sm_reconn_rfcomm_conn_wait 0x6e63 023468 beq uppersm_reconn_rfcomm_cfg ,process_upper_sm_reconn_rfcomm_cfg 0x6e64 023469 beq uppersm_reconn_rfcomm_cfg_wait ,process_upper_sm_reconn_rfcomm_cfg_wait 0x6e65 023470 beq uppersm_reconn_rfcomm_sabm ,process_upper_sm_reconn_rfcomm_sabm 0x6e66 023471 beq uppersm_reconn_rfcomm_sabm_wait ,process_upper_sm_reconn_rfcomm_sabm_wait 0x6e67 023472 beq uppersm_reconn_spp_cmd_pn ,process_upper_sm_reconn_spp_cmd_pn 0x6e68 023473 beq uppersm_reconn_spp_cmd_pn_wait ,process_upper_sm_reconn_spp_cmd_pn_wait 0x6e69 023474 beq uppersm_reconn_spp_sabm ,process_upper_sm_reconn_spp_sabm 0x6e6a 023475 beq uppersm_reconn_spp_sabm_wait ,process_upper_sm_reconn_spp_sabm_wait 0x6e6b 023476 beq uppersm_reconn_spp_cmd_ms ,process_upper_sm_reconn_spp_cmd_ms 0x6e6c 023477 beq uppersm_reconn_spp_cmd_ms_wait ,process_upper_sm_reconn_spp_cmd_ms_wait : 023478 process_upper_sm_reconn_wait: 0x6e6d 023479 rtn : 023480 process_upper_sm_reconn_sdp_conn: 0x6e6e 023481 call upper_sm_send_sdp_conn 0x6e6f 023482 jam uppersm_reconn_sdp_conn_wait ,mem_upper_sm_reconn 0x6e70 023483 fetch 1 ,mem_sdp_state 0x6e71 023484 set1 l2cap_channel_state_conn_req ,pdata 0x6e72 023485 store 1 ,mem_sdp_state 0x6e73 023486 rtn : 023487 process_upper_sm_reconn_sdp_cfg: 0x6e74 023488 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 0x6e75 023489 fetch 1 ,mem_sdp_state 0x6e76 023490 rtnbit1 l2cap_channel_state_snd_cfg_req 0x6e77 023491 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 0x6e78 023492 call upper_sm_send_sdp_cfg 0x6e79 023493 jam uppersm_reconn_sdp_cfg_wait ,mem_upper_sm_reconn 0x6e7a 023494 fetch 1 ,mem_sdp_state 0x6e7b 023495 set1 l2cap_channel_state_snd_cfg_req ,pdata 0x6e7c 023496 store 1 ,mem_sdp_state 0x6e7d 023497 rtn : 023498 process_upper_sm_reconn_ss_spp: 0x6e7e 023499 call l2cap_malloc_is_fifo_empty 0x6e7f 023500 nrtn blank 0x6e80 023501 call upper_sm_send_ss_spp 0x6e81 023502 jam uppersm_reconn_ss_spp_wait ,mem_upper_sm_reconn 0x6e82 023503 rtn : 023504 process_upper_sm_reconn_sdp_disconn: 0x6e83 023505 call upper_sm_send_sdp_disconn 0x6e84 023506 jam uppersm_reconn_sdp_disconn_wait ,mem_upper_sm_reconn 0x6e85 023507 rtn : 023508 process_upper_sm_reconn_hid_ctrl_conn: 0x6e86 023509 call upper_sm_send_hid_ctrl_conn 0x6e87 023510 jam uppersm_reconn_hid_ctrl_conn_wait ,mem_upper_sm_reconn 0x6e88 023511 fetch 1 ,mem_hid_control_state 0x6e89 023512 set1 l2cap_channel_state_conn_req ,pdata 0x6e8a 023513 store 1 ,mem_hid_control_state 0x6e8b 023514 rtn : 023515 process_upper_sm_reconn_hid_ctrl_cfg: 0x6e8c 023516 call upper_sm_send_hid_ctrl_cfg 0x6e8d 023517 jam uppersm_reconn_hid_ctrl_cfg_wait ,mem_upper_sm_reconn 0x6e8e 023518 fetch 1 ,mem_hid_control_state 0x6e8f 023519 set1 l2cap_channel_state_snd_cfg_req ,pdata 0x6e90 023520 store 1 ,mem_hid_control_state 0x6e91 023521 rtn : 023522 process_upper_sm_reconn_hid_int_conn: 0x6e92 023523 call upper_sm_send_hid_int_conn 0x6e93 023524 jam uppersm_reconn_hid_int_conn_wait ,mem_upper_sm_reconn 0x6e94 023525 fetch 1 ,mem_hid_interrupt_state 0x6e95 023526 set1 l2cap_channel_state_conn_req ,pdata 0x6e96 023527 store 1 ,mem_hid_interrupt_state 0x6e97 023528 rtn : 023529 process_upper_sm_reconn_hid_int_cfg: 0x6e98 023530 call upper_sm_send_hid_int_cfg 0x6e99 023531 jam uppersm_reconn_hid_int_cfg_wait ,mem_upper_sm_reconn 0x6e9a 023532 fetch 1 ,mem_hid_interrupt_state 0x6e9b 023533 set1 l2cap_channel_state_snd_cfg_req ,pdata 0x6e9c 023534 store 1 ,mem_hid_interrupt_state 0x6e9d 023535 rtn : 023536 process_upper_sm_reconn_rfcomm_conn: 0x6e9e 023537 call upper_sm_send_rfcomm_conn 0x6e9f 023538 jam uppersm_reconn_rfcomm_conn_wait ,mem_upper_sm_reconn 0x6ea0 023539 fetch 1 ,mem_rfcomm_state 0x6ea1 023540 set1 l2cap_channel_state_conn_req ,pdata 0x6ea2 023541 store 1 ,mem_rfcomm_state 0x6ea3 023542 rtn : 023543 process_upper_sm_reconn_rfcomm_cfg: 0x6ea4 023544 call upper_sm_send_rfcomm_cfg 0x6ea5 023545 jam uppersm_reconn_rfcomm_cfg_wait ,mem_upper_sm_reconn 0x6ea6 023546 fetch 1 ,mem_rfcomm_state 0x6ea7 023547 set1 l2cap_channel_state_snd_cfg_req ,pdata 0x6ea8 023548 store 1 ,mem_rfcomm_state 0x6ea9 023549 rtn : 023550 process_upper_sm_reconn_rfcomm_sabm: 0x6eaa 023551 call upper_sm_send_rfcomm_sabm 0x6eab 023552 jam uppersm_reconn_rfcomm_sabm_wait ,mem_upper_sm_reconn 0x6eac 023553 fetch 1 ,mem_rfcomm_state 0x6ead 023554 set1 l2cap_channel_rfcomm_only_sabm ,pdata 0x6eae 023555 store 1 ,mem_rfcomm_state 0x6eaf 023556 rtn : 023557 process_upper_sm_reconn_spp_cmd_pn: 0x6eb0 023558 call upper_sm_send_spp_cmd_pn 0x6eb1 023559 fetch 1 ,mem_spp_state 0x6eb2 023560 set1 rfcomm_channel_state_pn_cmd 0x6eb3 023561 store 1 ,mem_spp_state 0x6eb4 023562 jam uppersm_reconn_spp_cmd_pn_wait ,mem_upper_sm_reconn 0x6eb5 023563 rtn : 023564 process_upper_sm_reconn_spp_sabm: 0x6eb6 023565 call upper_sm_send_spp_sabm 0x6eb7 023566 fetch 1 ,mem_spp_state 0x6eb8 023567 set1 rfcomm_channel_state_sabm 0x6eb9 023568 store 1 ,mem_spp_state 0x6eba 023569 jam uppersm_reconn_spp_sabm_wait ,mem_upper_sm_reconn 0x6ebb 023570 fetch 1 ,mem_remote_spp_channel 0x6ebc 023571 lshift3 pdata ,pdata 0x6ebd 023572 or_into 3 ,pdata 0x6ebe 023573 arg mem_hiufcs_spp ,temp 0x6ebf 023574 storet 2 ,mem_contw_temp 0x6ec0 023575 branch rfcomm_save_fcs_uih : 023576 process_upper_sm_reconn_spp_cmd_ms: 0x6ec1 023577 call upper_sm_send_spp_cmd_ms 0x6ec2 023578 fetch 1 ,mem_spp_state 0x6ec3 023579 set1 rfcomm_channel_state_snd_ms_cmd 0x6ec4 023580 store 1 ,mem_spp_state 0x6ec5 023581 jam uppersm_reconn_spp_cmd_ms_wait ,mem_upper_sm_reconn 0x6ec6 023582 rtn : 023584 process_upper_sm_reconn_sdp_conn_wait: 0x6ec7 023585 fetch 1 ,mem_sdp_state 0x6ec8 023586 rtnbit0 l2cap_channel_state_conn_res 0x6ec9 023587 jam uppersm_reconn_sdp_cfg ,mem_upper_sm_reconn 0x6eca 023588 branch process_upper_sm_reconn : 023589 process_upper_sm_reconn_sdp_cfg_wait: 0x6ecb 023590 fetch 1 ,mem_sdp_state 0x6ecc 023591 rtnne l2cap_channel_setup_complete 0x6ecd 023592 jam uppersm_reconn_ss_spp ,mem_upper_sm_reconn : 023593 process_upper_sm_reconn_ss_spp_wait: 0x6ece 023594 fetch 1 ,mem_message_to_uppersm 0x6ecf 023595 rtnne recieve_ss_reasult_hf 0x6ed0 023596 jam 0 ,mem_message_to_uppersm 0x6ed1 023597 jam uppersm_reconn_sdp_disconn ,mem_upper_sm_reconn 0x6ed2 023598 branch process_upper_sm_reconn : 023599 process_upper_sm_reconn_sdp_disconn_wait: 0x6ed3 023600 fetch 1 ,mem_sdp_state 0x6ed4 023601 nrtn blank 0x6ed5 023602 fetch 1 ,mem_ui_profile_supported 0x6ed6 023603 bbit1 support_hid ,process_upper_sm_reconn_setup_hid 0x6ed7 023604 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 0x6ed8 023605 branch process_upper_sm_reconn_termination : 023606 process_upper_sm_reconn_hid_ctrl_conn_wait: 0x6ed9 023607 fetch 1 ,mem_hid_control_state 0x6eda 023608 rtnbit0 l2cap_channel_state_conn_res 0x6edb 023609 jam uppersm_reconn_hid_ctrl_cfg ,mem_upper_sm_reconn 0x6edc 023610 branch process_upper_sm_reconn : 023611 process_upper_sm_reconn_hid_ctrl_cfg_wait: 0x6edd 023612 fetch 1 ,mem_hid_control_state 0x6ede 023613 rtnne l2cap_channel_setup_complete 0x6edf 023614 jam uppersm_reconn_hid_int_conn ,mem_upper_sm_reconn 0x6ee0 023615 branch process_upper_sm_reconn : 023616 process_upper_sm_reconn_hid_int_conn_wait: 0x6ee1 023617 fetch 1 ,mem_hid_interrupt_state 0x6ee2 023618 rtnbit0 l2cap_channel_state_conn_res 0x6ee3 023619 jam uppersm_reconn_hid_int_cfg ,mem_upper_sm_reconn 0x6ee4 023620 branch process_upper_sm_reconn : 023621 process_upper_sm_reconn_hid_int_cfg_wait: 0x6ee5 023622 fetch 1 ,mem_hid_interrupt_state 0x6ee6 023623 rtnne l2cap_channel_setup_complete 0x6ee7 023624 fetch 1 ,mem_ui_profile_supported 0x6ee8 023625 bbit1 support_spp ,process_upper_sm_reconn_setup_rfcomm 0x6ee9 023626 branch process_upper_sm_reconn_termination : 023627 process_upper_sm_reconn_rfcomm_conn_wait: 0x6eea 023628 fetch 1 ,mem_rfcomm_state 0x6eeb 023629 rtnbit0 l2cap_channel_state_conn_res 0x6eec 023630 jam uppersm_reconn_rfcomm_cfg ,mem_upper_sm_reconn 0x6eed 023631 branch process_upper_sm_reconn : 023632 process_upper_sm_reconn_rfcomm_cfg_wait: 0x6eee 023633 fetch 1 ,mem_rfcomm_state 0x6eef 023634 rtnne l2cap_channel_setup_complete 0x6ef0 023635 jam uppersm_reconn_rfcomm_sabm ,mem_upper_sm_reconn 0x6ef1 023636 branch process_upper_sm_reconn : 023637 process_upper_sm_reconn_rfcomm_sabm_wait: 0x6ef2 023638 fetch 1 ,mem_rfcomm_state 0x6ef3 023639 rtnne l2cap_channel_rfcomm_dlci0_opened 0x6ef4 023640 fetch 1 ,mem_ui_profile_supported 0x6ef5 023641 bbit1 support_spp ,process_upper_sm_reconn_setup_spp 0x6ef6 023642 branch process_upper_sm_reconn_termination : 023643 process_upper_sm_reconn_spp_cmd_pn_wait: 0x6ef7 023644 fetch 1 ,mem_spp_state 0x6ef8 023645 rtnbit0 rfcomm_channel_state_pn_res 0x6ef9 023646 jam uppersm_reconn_spp_sabm ,mem_upper_sm_reconn 0x6efa 023647 branch process_upper_sm_reconn : 023648 process_upper_sm_reconn_spp_sabm_wait: 0x6efb 023649 fetch 1 ,mem_spp_state 0x6efc 023650 rtnbit0 rfcomm_channel_state_ua 0x6efd 023651 jam uppersm_reconn_spp_cmd_ms ,mem_upper_sm_reconn 0x6efe 023652 branch process_upper_sm_reconn : 023653 process_upper_sm_reconn_spp_cmd_ms_wait: 0x6eff 023654 fetch 1 ,mem_spp_state 0x6f00 023655 rtnne rfcomm_channel_setup_complete 0x6f01 023656 branch process_upper_sm_reconn_termination : 023658 process_upper_sm_reconn_setup_hid: 0x6f02 023659 jam uppersm_reconn_hid_ctrl_conn ,mem_upper_sm_reconn 0x6f03 023660 branch process_upper_sm_reconn : 023662 process_upper_sm_reconn_setup_rfcomm: 0x6f04 023663 jam uppersm_reconn_rfcomm_conn ,mem_upper_sm_reconn 0x6f05 023664 branch process_upper_sm_reconn : 023665 process_upper_sm_reconn_setup_spp: 0x6f06 023666 jam uppersm_reconn_spp_cmd_pn ,mem_upper_sm_reconn 0x6f07 023667 branch process_upper_sm_reconn : 023671 process_upper_sm_reconn_termination: 0x6f08 023672 jam 0 ,mem_upper_sm_reconn 0x6f09 023673 rtn : 023674 upper_sm_send_sdp_conn: 0x6f0a 023675 set1 mark_ext_patch ,mark 0x6f0b 023676 bpatch patch35_0 ,mem_patch35 0x6f0c 023677 call l2cap_malloc_signal_channel 0x6f0d 023678 setarg psm_sdp 0x6f0e 023679 copy pdata ,temp 0x6f0f 023680 setarg l2cap_sdp_channel 0x6f10 023681 copy pdata ,timeup 0x6f11 023682 branch ml2cap_send_signal_connect_req : 023684 upper_sm_send_sdp_cfg: 0x6f12 023685 set1 mark_ext_patch ,mark 0x6f13 023686 bpatch patch35_1 ,mem_patch35 0x6f14 023687 call l2cap_malloc_signal_channel 0x6f15 023688 fetch 2 ,mem_sdp_remote_cid 0x6f16 023689 copy pdata ,temp 0x6f17 023690 branch ml2cap_send_signal_config_req : 023692 upper_sm_send_sdp_disconn: 0x6f18 023693 set1 mark_ext_patch ,mark 0x6f19 023694 bpatch patch35_2 ,mem_patch35 0x6f1a 023695 call l2cap_malloc_signal_channel 0x6f1b 023696 fetch 2 ,mem_sdp_remote_cid 0x6f1c 023697 copy pdata ,temp 0x6f1d 023698 arg l2cap_sdp_channel ,timeup 0x6f1e 023699 call ml2cap_send_signal_disconn_req 0x6f1f 023700 fetch 1 ,mem_sdp_state 0x6f20 023701 set0 l2cap_channel_state_rcv_cfg_res ,pdata 0x6f21 023702 store 1 ,mem_sdp_state 0x6f22 023703 rtn : 023705 upper_sm_send_ss_spp: 0x6f23 023706 set1 mark_ext_patch ,mark 0x6f24 023707 bpatch patch35_3 ,mem_patch35 0x6f25 023708 call l2cap_malloc_sdp_channel 0x6f26 023709 call sdp_send_spp_request 0x6f27 023710 branch msdp_send_req_done : 023712 upper_sm_send_rfcomm_conn: 0x6f28 023713 set1 mark_ext_patch ,mark 0x6f29 023714 bpatch patch35_4 ,mem_patch35 0x6f2a 023715 call l2cap_malloc_signal_channel 0x6f2b 023716 setarg psm_rfcomm 0x6f2c 023717 copy pdata ,temp 0x6f2d 023718 setarg l2cap_rfcomm_channel 0x6f2e 023719 copy pdata ,timeup 0x6f2f 023720 branch ml2cap_send_signal_connect_req : 023722 upper_sm_send_rfcomm_cfg: 0x6f30 023723 set1 mark_ext_patch ,mark 0x6f31 023724 bpatch patch35_5 ,mem_patch35 0x6f32 023725 call l2cap_malloc_signal_channel 0x6f33 023726 fetch 2 ,mem_rfcomm_remote_cid 0x6f34 023727 copy pdata ,temp 0x6f35 023728 branch ml2cap_send_signal_config_req : 023730 upper_sm_send_hid_ctrl_conn: 0x6f36 023731 set1 mark_ext_patch ,mark 0x6f37 023732 bpatch patch35_6 ,mem_patch35 0x6f38 023733 call l2cap_malloc_signal_channel 0x6f39 023734 setarg psm_hid_control 0x6f3a 023735 copy pdata ,temp 0x6f3b 023736 setarg l2cap_hid_control_channel 0x6f3c 023737 copy pdata ,timeup 0x6f3d 023738 branch ml2cap_send_signal_connect_req : 023740 upper_sm_send_hid_ctrl_cfg: 0x6f3e 023741 set1 mark_ext_patch ,mark 0x6f3f 023742 bpatch patch35_7 ,mem_patch35 0x6f40 023743 call l2cap_malloc_signal_channel 0x6f41 023744 fetch 2 ,mem_hid_ctrl_remote_cid 0x6f42 023745 copy pdata ,temp 0x6f43 023746 branch ml2cap_send_signal_config_req : 023748 upper_sm_send_hid_int_conn: 0x6f44 023749 set1 mark_ext_patch ,mark 0x6f45 023750 bpatch patch36_0 ,mem_patch36 0x6f46 023751 call l2cap_malloc_signal_channel 0x6f47 023752 setarg psm_hid_interrupt 0x6f48 023753 copy pdata ,temp 0x6f49 023754 setarg l2cap_hid_interrupt_channel 0x6f4a 023755 copy pdata ,timeup 0x6f4b 023756 branch ml2cap_send_signal_connect_req : 023758 upper_sm_send_hid_int_cfg: 0x6f4c 023759 set1 mark_ext_patch ,mark 0x6f4d 023760 bpatch patch36_1 ,mem_patch36 0x6f4e 023761 call l2cap_malloc_signal_channel 0x6f4f 023762 fetch 2 ,mem_hid_int_remote_cid 0x6f50 023763 copy pdata ,temp 0x6f51 023764 branch ml2cap_send_signal_config_req : 023766 upper_sm_send_rfcomm_sabm: 0x6f52 023767 set1 mark_ext_patch ,mark 0x6f53 023768 bpatch patch36_2 ,mem_patch36 0x6f54 023769 call l2cap_malloc_rfcomm_channel 0x6f55 023771 jam 3 ,mem_current_adss 0x6f56 023772 jam 0x1c ,mem_current_fcs 0x6f57 023773 call rfcomm_send_sabm 0x6f58 023774 jam 1 ,mem_rfcomm_initiator 0x6f59 023775 rtn : 023777 upper_sm_send_spp_cmd_pn: 0x6f5a 023778 set1 mark_ext_patch ,mark 0x6f5b 023779 bpatch patch36_3 ,mem_patch36 0x6f5c 023780 call l2cap_malloc_rfcomm_channel 0x6f5d 023781 fetcht 1 ,mem_remote_spp_channel 0x6f5e 023782 call channel_to_dlci 0x6f5f 023783 storet 1 ,mem_pn_dlci 0x6f60 023784 branch rfcomm_send_param_neg_cmd : 023786 upper_sm_send_spp_sabm: 0x6f61 023787 set1 mark_ext_patch ,mark 0x6f62 023788 bpatch patch36_4 ,mem_patch36 0x6f63 023789 call l2cap_malloc_rfcomm_channel 0x6f64 023790 fetcht 1 ,mem_pn_dlci 0x6f65 023791 call dlci_to_address_cmd 0x6f66 023792 call rfcomm_calculate_fcs_sabm 0x6f67 023793 store 1 ,mem_current_fcs 0x6f68 023794 fetcht 1 ,mem_pn_dlci 0x6f69 023795 call dlci_to_address_cmd 0x6f6a 023796 storet 1 ,mem_current_adss 0x6f6b 023797 branch rfcomm_send_sabm : 023799 upper_sm_send_spp_cmd_ms: 0x6f6c 023800 set1 mark_ext_patch ,mark 0x6f6d 023801 bpatch patch36_5 ,mem_patch36 0x6f6e 023802 call l2cap_malloc_rfcomm_channel 0x6f6f 023803 fetcht 1 ,mem_pn_dlci 0x6f70 023804 call dlci_to_address_cmd 0x6f71 023805 branch rfcomm_send_modem_status_cmd : 023818 sdp_process: 0x6f72 023819 set1 mark_ext_patch ,mark 0x6f73 023820 bpatch patch3c_7 ,mem_patch3c 0x6f74 023821 fetch 2 ,mem_l2cap_payload_ptr 0x6f75 023822 iforce contr 0x6f76 023823 ifetch 1 ,contr 0x6f77 023824 copy pdata ,regb 0x6f78 023825 store 1 ,mem_sdp_pduid 0x6f79 023826 ifetch 2 ,contr 0x6f7a 023827 store 2 ,mem_sdp_transactionid 0x6f7b 023828 ifetch 1 ,contr 0x6f7c 023829 lshift8 pdata ,timeup 0x6f7d 023830 ifetch 1 ,contr 0x6f7e 023831 iadd timeup ,timeup 0x6f7f 023832 set1 mark_ext_patch ,mark 0x6f80 023833 bpatch patch3d_0 ,mem_patch3d 0x6f81 023834 deposit regb 0x6f82 023835 beq sdp_service_search_request ,servicesearch_req 0x6f83 023836 beq sdp_service_attribute_request ,serviceattribute_req 0x6f84 023837 beq sdp_service_search_attribute_request ,servicesearchattribute_req 0x6f85 023838 beq sdp_service_search_attribute_response ,servicesearchattribute_res 0x6f86 023839 branch sdp_insufficient_resource : 023850 servicesearch_req: 0x6f87 023851 call ask_serviceclassid 0x6f88 023852 compare 1 ,temp ,0xff 0x6f89 023853 branch empth_sa_rsp ,true 0x6f8a 023854 compare 0xff ,temp ,0xff 0x6f8b 023855 branch sdp_invalid_reqest_syntax ,true 0x6f8c 023857 ifetch 2 ,contr 0x6f8d 023858 store 2 ,mem_sdp_record_maxcnt 0x6f8e 023859 increase -2 ,timeup 0x6f8f 023861 increase -1 ,timeup 0x6f90 023862 nbranch sdp_invalid_pdu_size ,zero 0x6f91 023863 arg mem_uuid_search_pat ,timeup 0x6f92 023864 ifetch 2 ,timeup 0x6f93 023865 rtn blank 0x6f94 023866 increase 2 ,timeup 0x6f95 023867 call search_uuid 0x6f96 023868 call l2cap_get_sdp_tx_payload 0x6f97 023869 force 3 ,pdata 0x6f98 023870 istore 1 ,contw 0x6f99 023871 fetch 2 ,mem_sdp_transactionid 0x6f9a 023872 istore 2 ,contw 0x6f9b 023873 lshift2 queue ,pdata 0x6f9c 023874 add pdata ,5 ,pdata 0x6f9d 023875 add pdata ,5 ,regc 0x6f9e 023876 byteswap pdata ,pdata 0x6f9f 023877 istore 2 ,contw 0x6fa0 023878 deposit queue 0x6fa1 023879 byteswap pdata ,pdata 0x6fa2 023880 istore 2 ,contw 0x6fa3 023881 istore 2 ,contw 0x6fa4 023882 arg mem_handle_list ,contr 0x6fa5 023883 copy queue ,loopcnt 0x6fa6 023884 branch servicesearch_req_blank ,zero : 023885 servicesearch_req_loop: 0x6fa7 023886 ifetch 4 ,contr 0x6fa8 023887 istore 4 ,contw 0x6fa9 023888 loop servicesearch_req_loop : 023889 servicesearch_req_blank: 0x6faa 023890 force 0 ,pdata 0x6fab 023891 istore 1 ,contw 0x6fac 023892 deposit regc 0x6fad 023893 store 1 ,mem_sdp_tx_pkt_length 0x6fae 023894 branch assert ,blank 0x6faf 023895 rtn : 023906 serviceattribute_req: 0x6fb0 023907 ifetch 4 ,contr 0x6fb1 023908 store 4 ,mem_sdp_record_handle 0x6fb2 023909 increase -4 ,timeup 0x6fb3 023910 iforce temp 0x6fb4 023911 ifetch 2 ,contr 0x6fb5 023912 byteswap pdata ,pdata 0x6fb6 023913 increase -18 ,pdata 0x6fb7 023914 store 2 ,mem_sdp_attribute_maxbyte 0x6fb8 023915 increase -2 ,timeup 0x6fb9 023916 call dataelementtype6 0x6fba 023917 branch sdp_invalid_reqest_syntax ,zero 0x6fbb 023918 compare 5 ,rega ,0xff 0x6fbc 023920 branch serviceattribute_judge_wholerangle ,true : 023921 serviceattribute_isnot_wholerangle: 0x6fbd 023922 arg mem_attrib_list ,contw 0x6fbe 023923 force 0 ,queue 0x6fbf 023924 branch serviceattribute_req_loop : 023925 serviceattribute_judge_wholerangle: 0x6fc0 023926 ifetch 1 ,contr 0x6fc1 023927 bne 0xa ,sdp_invalid_reqest_syntax 0x6fc2 023928 ifetch 2 ,contr 0x6fc3 023929 nbranch serviceattribute_judge_wholerangle_false1 ,blank 0x6fc4 023930 ifetch 1 ,contr 0x6fc5 023931 bne 0xff ,serviceattribute_judge_wholerangle_false2 0x6fc6 023932 ifetch 1 ,contr 0x6fc7 023933 bne 0xff ,serviceattribute_judge_wholerangle_false3 0x6fc8 023934 increase -5 ,contr 0x6fc9 023935 branch serviceattribute_req_all : 023936 serviceattribute_judge_wholerangle_false3: 0x6fca 023937 increase -5 ,contr 0x6fcb 023938 branch serviceattribute_isnot_wholerangle : 023939 serviceattribute_judge_wholerangle_false2: 0x6fcc 023940 increase -4 ,contr 0x6fcd 023941 branch serviceattribute_isnot_wholerangle : 023942 serviceattribute_judge_wholerangle_false1: 0x6fce 023943 increase -3 ,contr 0x6fcf 023944 branch serviceattribute_isnot_wholerangle : 023945 serviceattribute_req_loop: 0x6fd0 023946 ifetch 1 ,contr 0x6fd1 023947 beq 0x09 ,serviceattribute_req_one_id 0x6fd2 023948 beq 0x0a ,serviceattribute_req_range_id : 023949 serviceattribute_req_range_id: 0x6fd3 023950 ifetch 2 ,contr 0x6fd4 023951 istore 2 ,contw 0x6fd5 023952 increase 1 ,queue 0x6fd6 023953 byteswap pdata ,regb 0x6fd7 023954 ifetch 2 ,contr 0x6fd8 023955 byteswap pdata ,pdata : 023956 serviceattribute_req_range_id_increase: 0x6fd9 023957 increase 1 ,regb 0x6fda 023958 isub regb ,null 0x6fdb 023959 nbranch serviceattribute_req_range_id_finish ,positive 0x6fdc 023960 copy pdata ,regc 0x6fdd 023961 byteswap regb ,pdata 0x6fde 023962 istore 2 ,contw 0x6fdf 023963 increase 1 ,queue 0x6fe0 023964 copy regc ,pdata 0x6fe1 023965 branch serviceattribute_req_range_id_increase : 023966 serviceattribute_req_range_id_finish: 0x6fe2 023967 increase -5 ,timeup 0x6fe3 023968 increase -5 ,rega 0x6fe4 023969 branch serviceattribute_req_check_next_id : 023970 serviceattribute_req_one_id: 0x6fe5 023971 ifetch 2 ,contr 0x6fe6 023972 istore 2 ,contw 0x6fe7 023973 increase 1 ,queue 0x6fe8 023974 increase -3 ,timeup 0x6fe9 023975 increase -3 ,rega : 023976 serviceattribute_req_check_next_id: 0x6fea 023977 nbranch sdp_invalid_reqest_syntax ,positive 0x6feb 023978 nbranch serviceattribute_req_loop ,zero 0x6fec 023979 increase -1 ,timeup 0x6fed 023980 nbranch sdp_invalid_reqest_syntax ,zero 0x6fee 023982 call l2cap_get_sdp_tx_payload 0x6fef 023983 increase 10 ,contw 0x6ff0 023984 arg mem_attrib_list ,rega : 023985 answer_handle_attributelist_next: 0x6ff1 023986 copy queue ,pdata 0x6ff2 023987 branch answer_handle_attributelist_end ,blank 0x6ff3 023988 ifetch 2 ,rega 0x6ff4 023989 branch answer_handle_attributelist_end ,blank 0x6ff5 023990 iforce regb 0x6ff6 023991 fetch 4 ,mem_sdp_record_handle 0x6ff7 023992 iforce temp 0x6ff8 023993 call search_handle_attrib 0x6ff9 023994 branch answer_handle_attributelist_notfound ,blank 0x6ffa 023995 increase -3 ,contr 0x6ffb 023996 ifetch 3 ,contr 0x6ffc 023997 istore 3 ,contw 0x6ffd 023998 call sdp_data_len_obs 0x6ffe 023999 branch answer_handle_attributelist_notfound ,blank 0x6fff 024000 iforce loopcnt 0x7000 024001 call memcpy : 024002 answer_handle_attributelist_notfound: 0x7001 024003 increase 2 ,rega 0x7002 024004 increase -1 ,queue 0x7003 024005 branch answer_handle_attributelist_next : 024007 answer_handle_attributelist_end: 0x7004 024008 force 0 ,pdata 0x7005 024009 istore 1 ,contw 0x7006 024010 increase -1 ,contw 0x7007 024011 fetcht 2 ,mem_sdp_tx_payload_ptr 0x7008 024012 add temp ,10 ,pdata 0x7009 024013 isub contw ,pdata 0x700a 024014 sub pdata ,0 ,rega 0x700b 024015 byteswap rega ,pdata 0x700c 024016 add temp ,8 ,regb 0x700d 024017 istore 2 ,regb 0x700e 024018 increase 3 ,rega 0x700f 024019 byteswap rega ,pdata 0x7010 024020 add temp ,5 ,regb 0x7011 024021 istore 2 ,regb 0x7012 024022 increase 3 ,rega 0x7013 024023 byteswap rega ,pdata 0x7014 024024 add temp ,3 ,regb 0x7015 024025 istore 2 ,regb 0x7016 024026 increase 5 ,rega 0x7017 024027 copy rega ,pdata 0x7018 024028 store 2 ,mem_sdp_tx_pkt_length 0x7019 024029 setarg 0x36 0x701a 024030 add temp ,7 ,regb 0x701b 024031 istore 1 ,regb 0x701c 024032 setarg 5 0x701d 024033 istore 1 ,temp 0x701e 024034 fetch 2 ,mem_sdp_transactionid 0x701f 024035 add temp ,1 ,regb 0x7020 024036 istore 2 ,regb 0x7021 024037 rtn : 024038 serviceattribute_req_all: 0x7022 024039 ifetch 1 ,contr 0x7023 024040 bne 0xa ,sdp_invalid_reqest_syntax 0x7024 024041 ifetch 2 ,contr 0x7025 024042 nbranch sdp_invalid_reqest_syntax ,blank 0x7026 024043 ifetch 1 ,contr 0x7027 024044 bne 0xff ,sdp_invalid_reqest_syntax 0x7028 024045 ifetch 1 ,contr 0x7029 024046 bne 0xff ,sdp_invalid_reqest_syntax 0x702a 024047 increase -5 ,timeup 0x702b 024048 ifetch 1 ,contr 0x702c 024049 beq 0 ,continue_zero 0x702d 024050 beq 1 ,continue_one_byte 0x702e 024051 beq 2 ,continue_two_byte : 024052 continue_zero: 0x702f 024053 store 2 ,mem_sdp_continue_byte 0x7030 024054 increase -1 ,timeup 0x7031 024055 branch continue_end : 024056 continue_one_byte: 0x7032 024057 ifetch 1 ,contr 0x7033 024058 store 2 ,mem_sdp_continue_byte 0x7034 024059 increase -2 ,timeup 0x7035 024060 branch continue_end : 024061 continue_two_byte: 0x7036 024062 ifetch 2 ,contr 0x7037 024063 byteswap pdata ,pdata 0x7038 024064 store 2 ,mem_sdp_continue_byte 0x7039 024065 increase -3 ,timeup : 024066 continue_end: 0x703a 024067 nbranch sdp_invalid_pdu_size ,zero 0x703b 024068 call search_handle 0x703c 024069 nbranch sdp_invalid_service_record_handle ,zero 0x703d 024070 copy contr ,rega 0x703e 024071 call l2cap_get_sdp_tx_payload 0x703f 024072 copy rega ,contr 0x7040 024073 increase 3 ,contw 0x7041 024074 copy contr ,timeup 0x7042 024075 call sdp_get_data 0x7043 024076 copy pdata ,rega 0x7044 024077 fetch 2 ,mem_sdp_continue_byte 0x7045 024078 copy pdata ,regb 0x7046 024079 copy rega ,pdata 0x7047 024080 isub regb ,regb 0x7048 024081 fetch 2 ,mem_sdp_attribute_maxbyte 0x7049 024082 isub regb ,null 0x704a 024083 nbranch fragment_sdp ,positive 0x704b 024085 disable user 0x704c 024086 fetch 2 ,mem_sdp_continue_byte 0x704d 024087 branch fisrt_fragment ,blank 0x704e 024088 iadd timeup ,contr 0x704f 024089 increase 3 ,regb 0x7050 024090 copy regb ,loopcnt 0x7051 024091 copy loopcnt ,pdata 0x7052 024092 increase 3 ,pdata 0x7053 024093 byteswap pdata ,pdata 0x7054 024094 istore 2 ,contw 0x7055 024095 copy loopcnt ,pdata 0x7056 024096 byteswap pdata ,pdata 0x7057 024097 istore 2 ,contw 0x7058 024098 branch answer_attributelist_full_loop : 024099 fisrt_fragment: 0x7059 024100 add rega ,6 ,loopcnt 0x705a 024101 branch parlength_continue_byte ,user 0x705b 024102 byteswap loopcnt ,pdata 0x705c 024103 branch parlength_continue_byte_end : 024104 parlength_continue_byte: 0x705d 024105 copy loopcnt ,pdata 0x705e 024106 increase 2 ,pdata 0x705f 024107 byteswap pdata ,pdata : 024108 parlength_continue_byte_end: 0x7060 024109 istore 2 ,contw 0x7061 024110 increase -3 ,loopcnt 0x7062 024111 byteswap loopcnt ,pdata 0x7063 024112 istore 2 ,contw 0x7064 024113 copy timeup ,contr 0x7065 024114 branch answer_attributelist_full_loop : 024115 fragment_sdp: 0x7066 024116 enable user 0x7067 024117 fetch 2 ,mem_sdp_attribute_maxbyte 0x7068 024118 copy pdata ,rega 0x7069 024119 copy pdata ,loopcnt 0x706a 024120 fetch 2 ,mem_sdp_continue_byte 0x706b 024121 branch fisrt_fragment ,blank 0x706c 024122 iadd timeup ,contr 0x706d 024123 copy rega ,pdata 0x706e 024124 increase 5 ,pdata 0x706f 024125 byteswap pdata ,pdata 0x7070 024126 istore 2 ,contw 0x7071 024127 copy rega ,pdata 0x7072 024128 byteswap pdata ,pdata 0x7073 024129 istore 2 ,contw : 024130 answer_attributelist_full_loop: 0x7074 024131 ifetch 1 ,contr 0x7075 024132 istore 1 ,contw 0x7076 024133 loop answer_attributelist_full_loop 0x7077 024134 nbranch last_frag_continue ,user 0x7078 024135 force 2 ,pdata 0x7079 024136 istore 1 ,contw 0x707a 024137 copy contr ,pdata 0x707b 024138 isub timeup ,pdata 0x707c 024139 byteswap pdata ,pdata 0x707d 024140 istore 2 ,contw 0x707e 024141 branch sdp_frag_end : 024142 last_frag_continue: 0x707f 024143 force 0 ,pdata 0x7080 024144 istore 1 ,contw : 024145 sdp_frag_end: 0x7081 024146 fetch 2 ,mem_sdp_tx_payload_ptr 0x7082 024147 isub contw ,pdata 0x7083 024148 sub pdata ,0 ,pdata 0x7084 024149 store 2 ,mem_sdp_tx_pkt_length 0x7085 024150 call l2cap_get_sdp_tx_payload 0x7086 024151 setarg 5 0x7087 024152 istore 1 ,contw 0x7088 024153 fetch 2 ,mem_sdp_transactionid 0x7089 024154 istore 2 ,contw 0x708a 024155 rtn : 024165 servicesearchattribute_req: 0x708b 024168 call ask_serviceclassid 0x708c 024169 compare 0xff ,temp ,0xff 0x708d 024170 branch servicesearchattribute_req_all ,true 0x708e 024171 ifetch 2 ,contr 0x708f 024172 store 2 ,mem_sdp_attribute_maxbyte 0x7090 024173 increase -2 ,timeup 0x7091 024174 call dataelementtype6 0x7092 024175 arg mem_attrib_list ,contw 0x7093 024176 force 0 ,queue : 024177 servicesearchattribute_req_loop: 0x7094 024178 ifetch 3 ,contr 0x7095 024179 bne 0x09 ,servicesearchattribute_req_all : 024180 servicesearchattribute_req_uuid: 0x7096 024181 rshift8 pdata ,pdata 0x7097 024182 istore 2 ,contw 0x7098 024183 increase 1 ,queue 0x7099 024184 increase -3 ,timeup 0x709a 024185 increase -3 ,rega 0x709b 024186 nbranch sdp_invalid_reqest_syntax ,positive 0x709c 024187 nbranch servicesearchattribute_req_loop ,zero 0x709d 024188 increase -1 ,timeup 0x709e 024189 nbranch sdp_invalid_reqest_syntax ,zero : 024190 servicesearchattribute_req_search: 0x709f 024191 call l2cap_get_sdp_tx_payload 0x70a0 024192 increase 13 ,contw 0x70a1 024193 fetch 2 ,mem_uuid_search_pat 0x70a2 024194 iforce regc 0x70a3 024195 arg mem_attrib_list ,rega : 024196 answer_attributelist_next: 0x70a4 024197 ifetch 4 ,rega 0x70a5 024198 branch answer_attributelist_end ,blank 0x70a6 024199 ifetch 2 ,rega 0x70a7 024200 iforce regb 0x70a8 024201 call search_attrib 0x70a9 024202 branch answer_attributelist_notfound ,blank 0x70aa 024203 increase -3 ,contr 0x70ab 024204 ifetch 3 ,contr 0x70ac 024205 istore 3 ,contw 0x70ad 024206 call sdp_data_len_obs 0x70ae 024207 iforce loopcnt : 024208 answer_attributelist_attrib_loop: 0x70af 024209 ifetch 1 ,contr 0x70b0 024210 istore 1 ,contw 0x70b1 024211 loop answer_attributelist_attrib_loop : 024212 answer_attributelist_notfound: 0x70b2 024213 increase 2 ,rega 0x70b3 024214 branch answer_attributelist_next : 024215 servicesearchattribute_req_all: 0x70b4 024219 ifetch 1 ,contr 0x70b5 024221 ifetch 1 ,contr 0x70b6 024223 increase -5 ,timeup 0x70b7 024224 increase -5 ,rega 0x70b8 024225 nbranch sdp_invalid_reqest_syntax ,positive 0x70b9 024226 arg mem_uuid_search_pat ,timeup 0x70ba 024227 ifetch 2 ,timeup 0x70bb 024229 increase 2 ,timeup 0x70bc 024230 call search_uuid 0x70bd 024231 deposit queue 0x70be 024232 store 1 ,mem_handle_humber 0x70bf 024233 branch empty_ssa_rsp ,blank 0x70c0 024234 arg 0 ,queue 0x70c1 024235 call l2cap_get_sdp_tx_payload 0x70c2 024236 increase 10 ,contw 0x70c3 024237 branch servicesearchattribute_req_next_handle : 024238 answer_attributelist_end: 0x70c4 024239 force 0 ,pdata 0x70c5 024240 istore 1 ,contw 0x70c6 024241 increase -1 ,contw 0x70c7 024242 fetcht 2 ,mem_sdp_tx_payload_ptr 0x70c8 024243 add temp ,13 ,pdata 0x70c9 024244 isub contw ,pdata 0x70ca 024245 branch no_attribute_return ,zero 0x70cb 024246 sub pdata ,0 ,pdata 0x70cc 024247 add temp ,12 ,regb 0x70cd 024248 istore 1 ,regb 0x70ce 024249 increase 3 ,pdata 0x70cf 024250 add temp ,9 ,regb 0x70d0 024251 istore 1 ,regb 0x70d1 024252 increase 3 ,pdata 0x70d2 024253 byteswap pdata ,pdata 0x70d3 024254 add temp ,5 ,regb 0x70d4 024255 istore 2 ,regb 0x70d5 024256 rshift8 pdata ,pdata 0x70d6 024257 increase 3 ,pdata 0x70d7 024258 byteswap pdata ,pdata 0x70d8 024259 add temp ,3 ,regb 0x70d9 024260 istore 2 ,regb 0x70da 024261 rshift8 pdata ,pdata 0x70db 024262 increase 5 ,pdata 0x70dc 024263 store 1 ,mem_sdp_tx_pkt_length 0x70dd 024265 fetch 2 ,mem_sdp_transactionid 0x70de 024266 add temp ,1 ,regb 0x70df 024267 istore 2 ,regb 0x70e0 024268 setarg 7 0x70e1 024269 istore 1 ,temp 0x70e2 024274 setarg 0x0036 0x70e3 024275 add temp ,7 ,regb 0x70e4 024276 istore 2 ,regb 0x70e5 024277 add temp ,10 ,regb 0x70e6 024278 istore 2 ,regb 0x70e7 024279 rtn : 024280 no_attribute_return: 0x70e8 024281 jam 10 ,mem_sdp_tx_pkt_length 0x70e9 024282 call l2cap_get_sdp_tx_payload 0x70ea 024284 setarg 7 0x70eb 024285 istore 1 ,contw 0x70ec 024286 fetch 2 ,mem_sdp_transactionid 0x70ed 024287 istore 2 ,contw 0x70ee 024291 setarg 0x0500 0x70ef 024292 istore 2 ,contw 0x70f0 024295 setarg 0x0200 0x70f1 024296 istore 2 ,contw 0x70f2 024300 setarg 0x000035 0x70f3 024301 istore 3 ,contw 0x70f4 024302 rtn : 024304 servicesearchattribute_req_attributelist_loop: 0x70f5 024305 ifetch 1 ,contr 0x70f6 024306 istore 1 ,contw 0x70f7 024307 increase 1 ,regb 0x70f8 024308 increase -1 ,rega 0x70f9 024309 branch servicesearchattribute_req_check_next_ctn ,zero 0x70fa 024310 loop servicesearchattribute_req_attributelist_loop : 024311 servicesearchattribute_req_check_next_ctn: 0x70fb 024312 copy contw ,timeup 0x70fc 024313 copy regb ,pdata 0x70fd 024314 store 2 ,mem_sdp_continue_byte 0x70fe 024315 copy rega ,pdata 0x70ff 024316 store 2 ,mem_sdp_attribute_maxbyte 0x7100 024317 branch answer_attributelist_with_ctn_bytes ,blank 0x7101 024318 branch answer_attributelist_with_ctn_end ,user 0x7102 024319 copy timeup ,contw : 024320 servicesearchattribute_req_check_handle: 0x7103 024321 increase 1 ,queue 0x7104 024322 fetch 1 ,mem_handle_humber 0x7105 024323 isub queue ,null 0x7106 024324 nbranch servicesearchattribute_req_next_handle ,zero 0x7107 024325 branch answer_attributelist_end_long : 024326 servicesearchattribute_req_next_handle: 0x7108 024327 arg mem_handle_list ,contr 0x7109 024328 lshift2 queue ,pdata 0x710a 024329 iadd contr ,contr 0x710b 024330 ifetch 4 ,contr 0x710c 024331 iforce temp 0x710d 024332 call search_handle 0x710e 024333 copy contr ,timeup 0x710f 024334 call sdp_get_data 0x7110 024335 add pdata ,3 ,loopcnt 0x7111 024336 fetch 2 ,mem_sdp_attribute_maxbyte 0x7112 024337 copy pdata ,rega 0x7113 024338 fetch 2 ,mem_sdp_continue_byte 0x7114 024339 copy pdata ,regb 0x7115 024340 copy timeup ,contr 0x7116 024341 branch servicesearchattribute_req_attributelist_loop : 024342 answer_attributelist_with_ctn_bytes: 0x7117 024343 arg 0 ,queue 0x7118 024344 arg 0 ,regb : 024345 answer_attributelist_calc_attribute_length: 0x7119 024346 arg mem_handle_list ,contr 0x711a 024347 lshift2 queue ,pdata 0x711b 024348 iadd contr ,contr 0x711c 024349 ifetch 4 ,contr 0x711d 024350 iforce temp 0x711e 024351 call search_handle 0x711f 024352 call sdp_get_data 0x7120 024353 add pdata ,3 ,pdata 0x7121 024354 iadd regb ,regb 0x7122 024355 increase 1 ,queue 0x7123 024356 fetch 1 ,mem_handle_humber 0x7124 024357 isub queue ,null 0x7125 024358 nbranch answer_attributelist_calc_attribute_length ,zero 0x7126 024360 copy timeup ,contw 0x7127 024361 force 2 ,pdata 0x7128 024362 istore 1 ,contw 0x7129 024363 fetch 2 ,mem_sdp_continue_byte 0x712a 024364 byteswap pdata ,pdata 0x712b 024365 istore 2 ,contw 0x712c 024366 increase -3 ,contw 0x712d 024367 fetcht 2 ,mem_sdp_tx_payload_ptr 0x712e 024368 add temp ,10 ,pdata 0x712f 024369 isub contw ,pdata 0x7130 024370 sub pdata ,0 ,pdata 0x7131 024371 iforce rega 0x7132 024373 deposit regb 0x7133 024374 add temp ,9 ,regb 0x7134 024375 istore 1 ,regb 0x7135 024376 rshift8 pdata ,pdata 0x7136 024377 add temp ,8 ,regb 0x7137 024378 istore 1 ,regb 0x7138 024379 increase 3 ,rega 0x7139 024380 deposit rega 0x713a 024381 add temp ,6 ,regb 0x713b 024382 istore 1 ,regb 0x713c 024383 rshift8 pdata ,pdata 0x713d 024384 add temp ,5 ,regb 0x713e 024385 istore 1 ,regb 0x713f 024386 increase 5 ,rega 0x7140 024387 deposit rega 0x7141 024388 add temp ,4 ,regb 0x7142 024389 istore 1 ,regb 0x7143 024390 rshift8 pdata ,pdata 0x7144 024391 add temp ,3 ,regb 0x7145 024392 istore 1 ,regb 0x7146 024393 increase 5 ,rega 0x7147 024394 deposit rega 0x7148 024395 store 2 ,mem_sdp_tx_pkt_length 0x7149 024396 setarg 7 0x714a 024397 istore 1 ,temp 0x714b 024398 setarg 0x36 0x714c 024399 add temp ,7 ,regb 0x714d 024400 istore 1 ,regb 0x714e 024401 add temp ,1 ,regb 0x714f 024402 fetch 2 ,mem_sdp_transactionid 0x7150 024403 istore 2 ,regb 0x7151 024404 rtn : 024405 answer_attributelist_with_ctn_end: 0x7152 024406 copy timeup ,contw 0x7153 024407 force 0 ,pdata 0x7154 024408 istore 1 ,contw 0x7155 024409 increase -1 ,contw 0x7156 024410 fetcht 2 ,mem_sdp_tx_payload_ptr 0x7157 024411 add temp ,7 ,pdata 0x7158 024412 isub contw ,pdata 0x7159 024413 sub pdata ,0 ,pdata 0x715a 024414 iforce rega 0x715b 024416 deposit rega 0x715c 024417 add temp ,6 ,regb 0x715d 024418 istore 1 ,regb 0x715e 024419 rshift8 pdata ,pdata 0x715f 024420 add temp ,5 ,regb 0x7160 024421 istore 1 ,regb 0x7161 024422 increase 3 ,rega 0x7162 024423 deposit rega 0x7163 024424 add temp ,4 ,regb 0x7164 024425 istore 1 ,regb 0x7165 024426 rshift8 pdata ,pdata 0x7166 024427 add temp ,3 ,regb 0x7167 024428 istore 1 ,regb 0x7168 024429 increase 5 ,rega 0x7169 024430 deposit rega 0x716a 024431 store 2 ,mem_sdp_tx_pkt_length 0x716b 024433 setarg 7 0x716c 024434 istore 1 ,temp 0x716d 024436 fetch 2 ,mem_sdp_transactionid 0x716e 024437 add temp ,1 ,regb 0x716f 024438 istore 2 ,regb 0x7170 024439 rtn : 024441 answer_attributelist_end_long: 0x7171 024442 force 0 ,pdata 0x7172 024443 istore 1 ,contw 0x7173 024444 increase -1 ,contw 0x7174 024445 fetcht 2 ,mem_sdp_tx_payload_ptr 0x7175 024446 add temp ,10 ,pdata 0x7176 024447 isub contw ,pdata 0x7177 024448 sub pdata ,0 ,pdata 0x7178 024449 iforce rega 0x7179 024451 deposit rega 0x717a 024452 add temp ,9 ,regb 0x717b 024453 istore 1 ,regb 0x717c 024454 rshift8 pdata ,pdata 0x717d 024455 add temp ,8 ,regb 0x717e 024456 istore 1 ,regb 0x717f 024458 increase 3 ,rega 0x7180 024459 deposit rega 0x7181 024460 add temp ,6 ,regb 0x7182 024461 istore 1 ,regb 0x7183 024462 rshift8 pdata ,pdata 0x7184 024463 add temp ,5 ,regb 0x7185 024464 istore 1 ,regb 0x7186 024465 increase 3 ,rega 0x7187 024466 deposit rega 0x7188 024467 add temp ,4 ,regb 0x7189 024468 istore 1 ,regb 0x718a 024469 rshift8 pdata ,pdata 0x718b 024470 add temp ,3 ,regb 0x718c 024471 istore 1 ,regb 0x718d 024472 increase 5 ,rega 0x718e 024473 deposit rega 0x718f 024474 store 2 ,mem_sdp_tx_pkt_length 0x7190 024475 setarg 0x36 0x7191 024476 add temp ,7 ,regb 0x7192 024477 istore 1 ,regb 0x7193 024478 setarg 7 0x7194 024479 istore 1 ,temp 0x7195 024480 fetch 2 ,mem_sdp_transactionid 0x7196 024481 add temp ,1 ,regb 0x7197 024482 istore 2 ,regb 0x7198 024483 rtn : 024484 sdp_data_len_obs: 0x7199 024485 copy contr ,timeup 0x719a 024486 ifetch 1 ,contr 0x719b 024487 and pdata ,0x07 ,loopcnt 0x719c 024488 rshift3 pdata ,pdata 0x719d 024489 beq 6 ,sdp_data_len_6_obs 0x719e 024490 beq 1 ,sdp_data_len_1 0x719f 024491 beq 4 ,sdp_data_len_6 0x71a0 024492 beq 5 ,sdp_data_len_5 0x71a1 024493 branch sdp_data_len_rtn : 024494 sdp_data_len_6_obs: 0x71a2 024495 call sdp_get_data_6_obs 0x71a3 024496 branch sdp_data_len_rtn : 024497 sdp_get_data_6_obs: 0x71a4 024498 deposit loopcnt 0x71a5 024499 beq 5 ,sdp_get_data_6_8bit_obs 0x71a6 024500 beq 6 ,sdp_get_data_6_16bit_obs 0x71a7 024501 force 3 ,loopcnt 0x71a8 024502 branch sdp_get_data_1 : 024503 sdp_get_data_6_8bit_obs: 0x71a9 024504 ifetch 1 ,contr 0x71aa 024505 increase 2 ,pdata 0x71ab 024506 rtn : 024507 sdp_get_data_6_16bit_obs: 0x71ac 024508 ifetch 2 ,contr 0x71ad 024509 byteswap pdata ,pdata 0x71ae 024510 increase 3 ,pdata 0x71af 024511 rtn : 024513 sdp_send_spp_request: 0x71b0 024514 call l2cap_get_sdp_tx_payload 0x71b1 024515 copy pdata ,contw 0x71b2 024516 setarg 6 0x71b3 024517 istore 1 ,contw 0x71b4 024518 setarg sdp_tid_spp 0x71b5 024519 istore 2 ,contw 0x71b6 024520 setarg 0x0f00 0x71b7 024521 istore 2 ,contw 0x71b8 024522 setarg 0x1a0535 0x71b9 024523 istore 3 ,contw 0x71ba 024524 setarg 0x0111 0x71bb 024525 lshift16 pdata ,pdata 0x71bc 024526 istore 4 ,contw 0x71bd 024527 setarg 0x2600 0x71be 024528 istore 2 ,contw 0x71bf 024529 setarg 0x0335 0x71c0 024530 istore 2 ,contw 0x71c1 024531 setarg 0x0009 0x71c2 024532 istore 2 ,contw 0x71c3 024533 setarg 0x0004 0x71c4 024534 istore 2 ,contw 0x71c5 024535 jam 0x14 ,mem_sdp_tx_pkt_length 0x71c6 024536 rtn : 024546 servicesearchattribute_res: 0x71c7 024547 copy contr ,temp 0x71c8 024548 fetch 2 ,mem_sdp_transactionid 0x71c9 024549 beq sdp_tid_spp ,servicesearchattribute_res_spp 0x71ca 024552 branch srchfail : 024554 servicesearchattribute_res_spp: 0x71cb 024555 copy temp ,contr 0x71cc 024556 increase -3 ,timeup 0x71cd 024557 copy timeup ,pdata 0x71ce 024558 beq 2 ,srchfail 0x71cf 024559 call find_rfcomm_channel_number 0x71d0 024560 rtn user 0x71d1 024561 store 1 ,mem_remote_spp_channel 0x71d2 024562 jam recieve_ss_reasult_hf ,mem_message_to_uppersm 0x71d3 024563 rtn : 024565 srchfail: 0x71d4 024566 rtn : 024572 find_rfcomm_channel_number: 0x71d5 024573 enable user 0x71d6 024574 copy pdata ,loopcnt 0x71d7 024575 arg 0x0400 ,temp : 024576 find_rfcomm_channel_number_loop: 0x71d8 024577 ifetch 2 ,contr 0x71d9 024578 isub temp ,null 0x71da 024579 branch find_rfcomm_channel_number_find_adl ,zero 0x71db 024580 increase -1 ,contr 0x71dc 024581 loop find_rfcomm_channel_number_loop 0x71dd 024582 rtn : 024583 find_rfcomm_channel_number_find_adl: 0x71de 024584 arg 0x0300 ,temp : 024585 find_rfcomm_channel_number_loop2: 0x71df 024586 ifetch 2 ,contr 0x71e0 024587 isub temp ,null 0x71e1 024588 branch find_rfcomm_channel_number_find_rfcomm ,zero 0x71e2 024589 increase -1 ,contr 0x71e3 024590 loop find_rfcomm_channel_number_loop2 0x71e4 024591 rtn : 024592 find_rfcomm_channel_number_find_rfcomm: 0x71e5 024593 ifetch 1 ,contr 0x71e6 024594 ifetch 1 ,contr 0x71e7 024595 disable user 0x71e8 024596 rtn : 024607 attribute_reading: 0x71e9 024608 call dataelementtype6 0x71ea 024609 branch rdnortn ,zero 0x71eb 024610 force 0 ,regb 0x71ec 024611 ifetch 1 ,contr 0x71ed 024612 increase -1 ,rega 0x71ee 024613 increase -1 ,timeup 0x71ef 024614 compare 0x18 ,pdata ,0xf8 0x71f0 024615 nbranch rduuid3 ,true 0x71f1 024616 compare 0x04 ,pdata ,0x07 0x71f2 024617 nbranch is032 ,true 0x71f3 024618 force 1 ,regb : 024619 skp2bytes: 0x71f4 024620 increase 2 ,contr 0x71f5 024621 increase -2 ,rega 0x71f6 024622 increase -2 ,timeup 0x71f7 024623 branch rduuid1 : 024624 is032: 0x71f8 024625 compare 0x02 ,pdata ,0x07 0x71f9 024626 nbranch is016 ,true 0x71fa 024627 branch skp2bytes : 024628 is016: 0x71fb 024629 compare 0x01 ,pdata ,0x07 0x71fc 024630 nbranch rduuid3 ,true : 024631 rduuid1: 0x71fd 024632 ifetch 1 ,contr 0x71fe 024633 increase -1 ,rega 0x71ff 024634 increase -1 ,timeup 0x7200 024635 bne 0x01 ,rduuid2 0x7201 024636 ifetch 1 ,contr 0x7202 024637 increase -1 ,rega 0x7203 024638 increase -1 ,timeup 0x7204 024639 bne 0x00 ,rduuid3 0x7205 024640 jam 0xff ,mem_sdp_lacap_found 0x7206 024641 branch rduuid3 : 024642 rduuid2: 0x7207 024643 bne 0x00 ,rduuid3 0x7208 024644 ifetch 1 ,contr 0x7209 024645 increase -1 ,rega 0x720a 024646 increase -1 ,timeup 0x720b 024647 bne 0x03 ,rduuid3 0x720c 024648 copy regb ,null 0x720d 024649 branch not16by ,zero 0x720e 024650 increase -12 ,contr 0x720f 024651 increase -12 ,timeup : 024652 not16by: 0x7210 024653 force 0xff ,pdata 0x7211 024654 store 1 ,mem_sdp_rfcomm_found 0x7212 024655 ifetch 1 ,contr 0x7213 024656 increase -1 ,rega 0x7214 024657 increase -1 ,timeup 0x7215 024658 compare 0x08 ,pdata ,0xf8 0x7216 024659 nbranch rduuid3 ,true 0x7217 024660 compare 0x00 ,pdata ,0x07 0x7218 024661 branch unsign1 ,true 0x7219 024662 compare 0x01 ,pdata ,0x07 0x721a 024663 branch unsign2 ,true 0x721b 024664 compare 0x02 ,pdata ,0x07 0x721c 024665 branch unsign4 ,true 0x721d 024666 compare 0x03 ,pdata ,0x07 0x721e 024667 branch unsign8 ,true 0x721f 024668 compare 0x04 ,pdata ,0x07 0x7220 024669 nbranch rduuid3 ,true 0x7221 024670 increase 8 ,contr 0x7222 024671 increase -8 ,rega 0x7223 024672 increase -8 ,timeup : 024673 unsign8: 0x7224 024674 increase 4 ,contr 0x7225 024675 increase -4 ,rega 0x7226 024676 increase -4 ,timeup : 024677 unsign4: 0x7227 024678 increase 2 ,contr 0x7228 024679 increase -2 ,rega 0x7229 024680 increase -2 ,timeup : 024681 unsign2: 0x722a 024682 increase 1 ,contr 0x722b 024683 increase -1 ,rega 0x722c 024684 increase -1 ,timeup : 024685 unsign1: 0x722d 024686 ifetch 1 ,contr 0x722e 024687 increase -1 ,rega 0x722f 024688 increase -1 ,timeup : 024689 rduuid3: 0x7230 024690 increase -1 ,timeup 0x7231 024691 increase -1 ,rega 0x7232 024692 branch rduuid3 ,positive 0x7233 024693 increase 1 ,timeup 0x7234 024694 force 0x01 ,pdata 0x7235 024695 rtn , : 024696 rdnortn: 0x7236 024697 force 0x00 ,pdata 0x7237 024698 rtn , : 024700 sdp_invalid_service_record_handle: 0x7238 024701 setarg 0x0200 0x7239 024702 store 2 ,mem_sdp_error_code 0x723a 024703 branch sdp_error_rsp : 024704 sdp_invalid_pdu_size: 0x723b 024705 setarg 0x0400 0x723c 024706 store 2 ,mem_sdp_error_code 0x723d 024707 branch sdp_error_rsp : 024708 sdp_insufficient_resource: 0x723e 024709 setarg 0x0600 0x723f 024710 store 2 ,mem_sdp_error_code 0x7240 024711 branch sdp_error_rsp : 024712 sdp_invalid_reqest_syntax: 0x7241 024713 setarg 0x0300 0x7242 024714 store 2 ,mem_sdp_error_code : 024715 sdp_error_rsp: 0x7243 024716 call l2cap_get_sdp_tx_payload 0x7244 024717 istore 1 ,contw 0x7245 024718 fetch 2 ,mem_sdp_transactionid 0x7246 024719 istore 2 ,contw 0x7247 024720 setarg 0x0200 0x7248 024721 istore 2 ,contw 0x7249 024722 fetch 2 ,mem_sdp_error_code 0x724a 024723 istore 2 ,contw 0x724b 024724 jam 7 ,mem_sdp_tx_pkt_length 0x724c 024725 rtn : 024727 ask_serviceclassid: 0x724d 024728 force 0 ,temp 0x724e 024729 arg mem_uuid_search_pat ,contw 0x724f 024730 call dataelementtype6 0x7250 024731 branch asksrv_error ,zero : 024732 classidloop: 0x7251 024733 ifetch 1 ,contr 0x7252 024734 increase -1 ,rega 0x7253 024735 increase -1 ,timeup 0x7254 024736 compare 0x18 ,pdata ,0xf8 0x7255 024737 nbranch asksrv_error ,true 0x7256 024738 compare 0x04 ,pdata ,0x07 0x7257 024739 nbranch cmp032 ,true 0x7258 024740 force 1 ,temp : 024741 skip2bytes: 0x7259 024742 ifetch 1 ,contr 0x725a 024743 increase -1 ,rega 0x725b 024744 increase -1 ,timeup 0x725c 024745 bne 0x00 ,frstbwrong 0x725d 024746 ifetch 1 ,contr 0x725e 024747 increase -1 ,rega 0x725f 024748 increase -1 ,timeup 0x7260 024749 beq 0x00 ,cmpuuid 0x7261 024750 branch scndbwrong : 024751 frstbwrong: 0x7262 024752 increase 1 ,contr 0x7263 024753 increase -1 ,rega 0x7264 024754 increase -1 ,timeup : 024755 scndbwrong: 0x7265 024756 increase 2 ,contr 0x7266 024757 increase -2 ,rega 0x7267 024758 increase -2 ,timeup 0x7268 024759 compare 0x00 ,temp ,0xff 0x7269 024760 branch loopornot ,true 0x726a 024761 increase 12 ,contr 0x726b 024762 increase -12 ,rega 0x726c 024763 increase -12 ,timeup 0x726d 024764 branch loopornot : 024765 cmp032: 0x726e 024766 compare 0x02 ,pdata ,0x07 0x726f 024767 nbranch cmp016 ,true 0x7270 024768 branch skip2bytes : 024769 cmp016: 0x7271 024770 compare 0x01 ,pdata ,0x07 0x7272 024771 nbranch asksrv_error ,true : 024772 cmpuuid: 0x7273 024773 ifetch 2 ,contr 0x7274 024774 increase -2 ,rega 0x7275 024775 increase -2 ,timeup 0x7276 024776 istore 2 ,contw : 024777 uuidsize: 0x7277 024778 compare 0x00 ,temp ,0xff 0x7278 024779 branch loopornot ,true 0x7279 024780 copy contr ,temp 0x727a 024781 ifetch 1 ,contr 0x727b 024782 bne 0x00 ,wrong12b 0x727c 024783 ifetch 1 ,contr 0x727d 024784 bne 0x00 ,wrong12b 0x727e 024785 ifetch 1 ,contr 0x727f 024786 bne 0x10 ,wrong12b 0x7280 024787 ifetch 1 ,contr 0x7281 024788 bne 0x00 ,wrong12b 0x7282 024789 ifetch 1 ,contr 0x7283 024790 bne 0x80 ,wrong12b 0x7284 024791 ifetch 1 ,contr 0x7285 024792 bne 0x00 ,wrong12b 0x7286 024793 ifetch 1 ,contr 0x7287 024794 bne 0x00 ,wrong12b 0x7288 024795 ifetch 1 ,contr 0x7289 024796 bne 0x80 ,wrong12b 0x728a 024797 ifetch 1 ,contr 0x728b 024798 bne 0x5f ,wrong12b 0x728c 024799 ifetch 1 ,contr 0x728d 024800 bne 0x9b ,wrong12b 0x728e 024801 ifetch 1 ,contr 0x728f 024802 bne 0x34 ,wrong12b 0x7290 024803 ifetch 1 ,contr 0x7291 024804 beq 0xfb ,chck12dn : 024805 wrong12b: 0x7292 024806 copy temp ,contr : 024807 wrong12b1: 0x7293 024808 increase 12 ,contr 0x7294 024809 force 0x00 ,queue 0x7295 024810 force 0x00 ,temp 0x7296 024811 branch chck12dn : 024812 noclass: 0x7297 024813 ifetch 1 ,contr 0x7298 024814 increase -1 ,rega 0x7299 024815 increase -1 ,timeup 0x729a 024816 branch uuidsize : 024817 chck12dn: 0x729b 024818 increase -12 ,timeup 0x729c 024819 increase -12 ,rega : 024820 loopornot: 0x729d 024821 compare 0x00 ,rega ,0xff 0x729e 024822 nbranch classidloop ,true 0x729f 024823 force 0 ,pdata 0x72a0 024824 istore 2 ,contw 0x72a1 024825 rtn , : 024826 asksrv_error: 0x72a2 024827 arg 0xff ,temp 0x72a3 024828 rtn : 024838 dataelementtype6: 0x72a4 024839 ifetch 1 ,contr 0x72a5 024840 increase -1 ,timeup 0x72a6 024841 compare 0x30 ,pdata ,0xf8 0x72a7 024842 nbranch dsize_error ,true 0x72a8 024843 compare 0x07 ,pdata ,0x07 0x72a9 024844 branch dsize32 ,true 0x72aa 024845 compare 0x06 ,pdata ,0x07 0x72ab 024846 branch dsize16 ,true 0x72ac 024847 compare 0x05 ,pdata ,0x07 0x72ad 024848 nbranch dsize_error ,true 0x72ae 024849 ifetch 1 ,contr 0x72af 024850 copy pdata ,rega 0x72b0 024851 increase -1 ,timeup 0x72b1 024852 branch dsize : 024853 dsize32: 0x72b2 024854 increase 2 ,contr 0x72b3 024855 increase -2 ,timeup : 024856 dsize16: 0x72b4 024857 ifetch 2 ,contr 0x72b5 024858 byteswap pdata ,rega 0x72b6 024859 increase -2 ,timeup : 024860 set_nblank: : 024861 dsize: 0x72b7 024862 force 0x01 ,pdata 0x72b8 024863 rtn : 024864 set_blank: : 024865 dsize_error: 0x72b9 024866 force 0x00 ,pdata 0x72ba 024867 rtn : 024877 empth_sa_rsp: 0x72bb 024878 setarg 0x03 0x72bc 024879 store 1 ,mem_sdp_pduid 0x72bd 024880 branch empty_response : 024881 empty_ssa_rsp: 0x72be 024882 setarg 0x07 0x72bf 024883 store 1 ,mem_sdp_pduid : 024884 empty_response: 0x72c0 024885 call l2cap_get_sdp_tx_payload 0x72c1 024886 fetch 1 ,mem_sdp_pduid 0x72c2 024887 istore 1 ,contw 0x72c3 024888 copy pdata ,regb 0x72c4 024889 fetch 2 ,mem_sdp_transactionid 0x72c5 024890 istore 2 ,contw 0x72c6 024892 setarg 0x0500 0x72c7 024893 istore 2 ,contw 0x72c8 024894 compare 0x05 ,regb ,0xff 0x72c9 024895 branch fullsearch ,true 0x72ca 024896 compare 0x07 ,regb ,0xff 0x72cb 024897 branch fullsearch ,true 0x72cc 024898 setarg 0x000000 0x72cd 024899 istore 3 ,contw 0x72ce 024900 istore 2 ,contw 0x72cf 024901 branch outempty : 024903 fullsearch: 0x72d0 024910 setarg 0x350200 0x72d1 024911 istore 3 ,contw 0x72d2 024916 setarg 0 0x72d3 024917 istore 2 ,contw : 024918 outempty: 0x72d4 024919 jam 10 ,mem_sdp_tx_pkt_length 0x72d5 024920 rtn : 024922 sdp_data_len: 0x72d6 024923 copy contr ,timeup 0x72d7 024924 ifetch 1 ,contr 0x72d8 024925 and pdata ,0x7 ,loopcnt 0x72d9 024926 rshift3 pdata ,pdata 0x72da 024927 beq 6 ,sdp_data_len_6 0x72db 024928 beq 1 ,sdp_data_len_1 0x72dc 024929 beq 4 ,sdp_data_len_6 0x72dd 024930 beq 5 ,sdp_data_len_5 : 024931 sdp_data_len_rtn: 0x72de 024932 copy timeup ,contr 0x72df 024933 rtn : 024934 sdp_data_len_1: 0x72e0 024935 call sdp_data_size 0x72e1 024936 increase 1 ,pdata 0x72e2 024937 branch sdp_data_len_rtn : 024938 sdp_data_len_5: 0x72e3 024939 force 2 ,pdata 0x72e4 024940 branch sdp_data_len_rtn : 024941 sdp_data_len_6: 0x72e5 024942 call sdp_get_data_6 0x72e6 024943 increase 2 ,pdata 0x72e7 024944 branch sdp_data_len_rtn : 024946 sdp_get_data: 0x72e8 024947 ifetch 1 ,contr 0x72e9 024948 and pdata ,0x7 ,loopcnt 0x72ea 024949 rshift3 pdata ,pdata 0x72eb 024950 beq 6 ,sdp_get_data_6 0x72ec 024951 beq 1 ,sdp_get_data_1 0x72ed 024952 beq 5 ,sdp_get_data_6_8bit 0x72ee 024953 rtn : 024954 sdp_get_data_1: 0x72ef 024955 call sdp_data_size 0x72f0 024956 iforce loopcnt 0x72f1 024957 force 0 ,temp : 024958 sdp_get_data_1_loop: 0x72f2 024959 lshift8 temp ,temp 0x72f3 024960 ifetch 1 ,contr 0x72f4 024961 ior temp ,temp 0x72f5 024962 loop sdp_get_data_1_loop 0x72f6 024963 rtn : 024964 sdp_get_data_6: 0x72f7 024965 deposit loopcnt 0x72f8 024966 beq 5 ,sdp_get_data_6_8bit 0x72f9 024967 beq 6 ,sdp_get_data_6_16bit 0x72fa 024968 force 3 ,loopcnt 0x72fb 024969 branch sdp_get_data_1 : 024970 sdp_get_data_6_8bit: 0x72fc 024971 ifetch 1 ,contr 0x72fd 024972 rtn : 024973 sdp_get_data_6_16bit: 0x72fe 024974 ifetch 2 ,contr 0x72ff 024975 byteswap pdata ,pdata 0x7300 024976 rtn : 024979 sdp_data_size: 0x7301 024980 force 1 ,pdata 0x7302 024981 copy loopcnt ,null 0x7303 024982 rtn zero : 024983 sdp_data_size_loop: 0x7304 024984 lshift pdata ,pdata 0x7305 024985 loop sdp_data_size_loop 0x7306 024986 rtn : 024991 search_uuid: 0x7307 024992 iforce regc 0x7308 024993 set1 mark_ext_patch ,mark 0x7309 024994 bpatch patch3d_1 ,mem_patch3d 0x730a 024995 force 0 ,queue 0x730b 024996 fetch 2 ,memui_uuid_table 0x730c 024997 iforce contr 0x730d 024998 arg mem_handle_list ,contw : 024999 search_uuid_next: 0x730e 025000 disable user 0x730f 025001 ifetch 1 ,contr 0x7310 025002 rtn blank 0x7311 025003 iforce loopcnt : 025004 search_uuid_loop: 0x7312 025005 ifetch 2 ,contr 0x7313 025006 isub regc ,null 0x7314 025007 nbranch search_uuid_not_found ,zero 0x7315 025008 enable user : 025009 search_uuid_not_found: 0x7316 025010 loop search_uuid_loop 0x7317 025011 ifetch 4 ,contr 0x7318 025012 nbranch search_uuid_nomatch ,user 0x7319 025013 istore 4 ,contw 0x731a 025014 increase 1 ,queue : 025015 search_uuid_nomatch: 0x731b 025016 call sdp_get_data 0x731c 025017 iadd contr ,contr 0x731d 025018 branch search_uuid_next : 025021 search_handle: 0x731e 025022 fetch 2 ,memui_uuid_table 0x731f 025023 iforce contr : 025024 search_handle_loop: 0x7320 025025 ifetch 1 ,contr 0x7321 025026 rtn blank 0x7322 025027 lshift pdata ,pdata 0x7323 025028 iadd contr ,contr 0x7324 025029 ifetch 4 ,contr 0x7325 025030 isub temp ,null 0x7326 025031 rtn zero 0x7327 025032 call sdp_get_data 0x7328 025033 iadd contr ,contr 0x7329 025034 branch search_handle_loop : 025041 search_attrib: 0x732a 025042 set1 mark_ext_patch ,mark 0x732b 025043 bpatch patch3d_2 ,mem_patch3d 0x732c 025044 fetch 2 ,memui_uuid_table 0x732d 025045 iforce contr : 025046 search_attrib_next: 0x732e 025047 ifetch 1 ,contr 0x732f 025048 branch search_attrib_end ,blank 0x7330 025049 iforce loopcnt : 025050 search_attrib_loop: 0x7331 025051 ifetch 2 ,contr 0x7332 025052 isub regc ,null 0x7333 025053 branch search_attrib_found_uuid ,zero 0x7334 025054 loop search_attrib_loop 0x7335 025055 increase 4 ,contr 0x7336 025056 call sdp_get_data 0x7337 025057 iadd contr ,contr 0x7338 025058 branch search_attrib_next : 025059 search_attrib_found_uuid: 0x7339 025060 increase -1 ,loopcnt 0x733a 025061 lshift loopcnt ,pdata 0x733b 025062 iadd contr ,contr 0x733c 025063 increase 4 ,contr 0x733d 025064 call sdp_get_data 0x733e 025065 iadd contr ,temp : 025066 search_attrib_loop_attribs: 0x733f 025067 increase 1 ,contr 0x7340 025068 ifetch 2 ,contr 0x7341 025069 isub regb ,timeup 0x7342 025071 setflag zero ,0 ,pdata 0x7343 025072 copy timeup ,timeup 0x7344 025073 rtn zero 0x7345 025074 call sdp_data_len 0x7346 025075 iadd contr ,contr 0x7347 025076 deposit temp 0x7348 025077 isub contr ,null 0x7349 025078 branch search_attrib_end ,zero 0x734a 025079 branch search_attrib_loop_attribs : 025080 search_attrib_end: 0x734b 025081 force 0 ,contr 0x734c 025082 force 0 ,pdata 0x734d 025083 rtn : 025089 search_handle_attrib: 0x734e 025090 set1 mark_ext_patch ,mark 0x734f 025091 bpatch patch3d_3 ,mem_patch3d 0x7350 025092 fetch 2 ,memui_uuid_table 0x7351 025093 iforce contr : 025094 search_handle_attrib_next: 0x7352 025095 ifetch 1 ,contr 0x7353 025096 branch search_handle_attrib_end ,blank 0x7354 025097 lshift pdata ,pdata 0x7355 025098 iadd contr ,contr 0x7356 025099 ifetch 4 ,contr 0x7357 025100 isub temp ,null 0x7358 025101 branch search_handl_attrib_found_handle ,zero 0x7359 025102 call sdp_get_data 0x735a 025103 iadd contr ,contr 0x735b 025104 branch search_handle_attrib_next : 025105 search_handl_attrib_found_handle: 0x735c 025106 call sdp_get_data 0x735d 025107 iadd contr ,temp : 025108 search_handle_attrib_loop_attribs: 0x735e 025109 increase 1 ,contr 0x735f 025110 ifetch 2 ,contr 0x7360 025111 isub regb ,null 0x7361 025112 rtn zero 0x7362 025113 call sdp_data_len 0x7363 025114 iadd contr ,contr 0x7364 025115 deposit temp 0x7365 025116 isub contr ,null 0x7366 025117 branch search_handle_attrib_end ,zero 0x7367 025118 branch search_handle_attrib_loop_attribs : 025119 search_handle_attrib_end: 0x7368 025120 force 0 ,contr 0x7369 025121 rtn : 025124 generate_kinit: 0x736a 025125 call function_e22 0x736b 025126 arg mem_input_store ,contr 0x736c 025127 arg mem_kinit ,contw 0x736d 025128 branch memcpy16 : 025131 function_e21: 0x736e 025132 disable user 0x736f 025133 call function_expand 0x7370 025134 arg mem_random_number ,contr 0x7371 025135 arg mem_x ,contw 0x7372 025136 force 15 ,loopcnt 0x7373 025137 call memcpy 0x7374 025138 ifetch 1 ,contr 0x7375 025139 xor_into 6 ,pdata 0x7376 025140 istore 1 ,contw 0x7377 025141 setarg mem_y 0x7378 025142 store 2 ,memp_ar_input 0x7379 025143 setarg mem_x 0x737a 025144 store 2 ,memp_ar_key 0x737b 025145 set1 mark_ar2 ,mark 0x737c 025146 branch function_ar : 025150 function_e22: 0x737d 025151 fetcht 1 ,mem_pin_length 0x737e 025152 force 16 ,regb 0x737f 025153 add temp ,6 ,regc 0x7380 025154 sub regc ,16 ,null 0x7381 025155 branch function_e22_pin_init ,positive 0x7382 025156 force 16 ,regc : 025157 function_e22_pin_init: 0x7383 025158 arg mem_x ,contw : 025159 function_e22_genx_pin: 0x7384 025160 arg mem_pin ,contr 0x7385 025161 copy temp ,loopcnt 0x7386 025162 disable user : 025163 function_e22_genx_loop: 0x7387 025164 ifetch 1 ,contr 0x7388 025165 istore 1 ,contw 0x7389 025166 increase -1 ,regb 0x738a 025167 branch function_e22_genx_end ,zero 0x738b 025168 loop function_e22_genx_loop 0x738c 025169 branch function_e22_genx_pin ,user 0x738d 025170 enable user 0x738e 025171 force 6 ,loopcnt 0x738f 025172 copy rega ,contr 0x7390 025173 branch function_e22_genx_loop : 025174 function_e22_genx_end: 0x7391 025175 arg mem_random_number ,contr 0x7392 025176 arg mem_y ,contw 0x7393 025177 call memcpy16 0x7394 025178 fetch 1 ,mem_y15 0x7395 025179 ixor regc ,pdata 0x7396 025180 store 1 ,mem_y15 0x7397 025181 setarg mem_y 0x7398 025182 store 2 ,memp_ar_input 0x7399 025183 setarg mem_x 0x739a 025184 store 2 ,memp_ar_key 0x739b 025185 set1 mark_ar2 ,mark 0x739c 025186 branch function_ar : 025191 function_e1: 0x739d 025192 disable user 0x739e 025193 call function_expand 0x739f 025194 branch function_hash : 025196 function_e3: 0x73a0 025197 arg mem_aco ,rega 0x73a1 025198 enable user 0x73a2 025199 call function_expand 0x73a3 025200 call function_hash 0x73a4 025201 arg mem_input_store ,contr 0x73a5 025202 arg mem_kc ,contw 0x73a6 025203 branch memcpy16 : 025206 function_hash: 0x73a7 025207 setarg mem_random_number 0x73a8 025208 store 2 ,memp_ar_input 0x73a9 025209 setarg mem_link_key 0x73aa 025210 store 2 ,memp_ar_key 0x73ab 025211 set0 mark_ar2 ,mark 0x73ac 025212 call function_ar 0x73ad 025213 arg mem_input_store ,rega 0x73ae 025214 arg mem_random_number ,regb 0x73af 025215 arg mem_x ,contw 0x73b0 025216 call xor16 0x73b1 025217 arg mem_x ,rega 0x73b2 025218 arg mem_y ,regb 0x73b3 025219 copy regb ,contw 0x73b4 025220 enable user 0x73b5 025221 call add16 0x73b6 025222 call key_offset 0x73b7 025223 setarg mem_y 0x73b8 025224 store 2 ,memp_ar_input 0x73b9 025225 setarg mem_x 0x73ba 025226 store 2 ,memp_ar_key 0x73bb 025227 set1 mark_ar2 ,mark 0x73bc 025228 branch function_ar : 025232 function_ar: 0x73bd 025233 jam 0 ,mem_ar_hround 0x73be 025234 fetch 2 ,memp_ar_key 0x73bf 025235 iforce contr 0x73c0 025236 arg mem_key_store ,contw 0x73c1 025237 call memcpy16 0x73c2 025238 fetch 2 ,memp_ar_input 0x73c3 025239 iforce contr 0x73c4 025240 arg mem_input_store ,contw 0x73c5 025241 call memcpy16 : 025243 function_ar_loop: 0x73c6 025244 call key_scheduling 0x73c7 025245 disable user 0x73c8 025246 bmark0 mark_ar2 ,function_ar_original 0x73c9 025247 fetch 1 ,mem_ar_hround 0x73ca 025248 bne 4 ,function_ar_original 0x73cb 025249 fetch 2 ,memp_ar_input 0x73cc 025250 iforce regb 0x73cd 025251 call xor_mod32_ar2 : 025252 function_ar_original: 0x73ce 025253 call xor_mod32 0x73cf 025254 call el_boxes 0x73d0 025255 fetch 1 ,mem_ar_hround 0x73d1 025256 increase 1 ,pdata 0x73d2 025257 store 1 ,mem_ar_hround 0x73d3 025259 call key_scheduling 0x73d4 025260 enable user 0x73d5 025261 call xor_mod32 0x73d6 025262 call pht 0x73d7 025263 call permute 0x73d8 025264 call pht 0x73d9 025265 call permute 0x73da 025266 call pht 0x73db 025267 call permute 0x73dc 025268 call pht 0x73dd 025269 fetch 1 ,mem_ar_hround 0x73de 025270 increase 1 ,pdata 0x73df 025271 store 1 ,mem_ar_hround 0x73e0 025272 bne 16 ,function_ar_loop 0x73e1 025273 call key_scheduling 0x73e2 025274 disable user 0x73e3 025275 branch xor_mod32 : 025279 key_scheduling: 0x73e4 025280 fetch 1 ,mem_ar_hround 0x73e5 025281 arg mem_key_store ,contr 0x73e6 025282 branch key_sched_zero ,blank 0x73e7 025283 iforce regb 0x73e8 025284 force 17 ,loopcnt 0x73e9 025285 copy contr ,contw : 025286 key_rotateloop: 0x73ea 025287 ifetch 1 ,contr 0x73eb 025288 lshift3 pdata ,temp 0x73ec 025289 rshift2 pdata ,pdata 0x73ed 025290 rshift3 pdata ,pdata 0x73ee 025291 ior temp ,pdata 0x73ef 025292 istore 1 ,contw 0x73f0 025293 loop key_rotateloop 0x73f1 025294 setarg mem_key_store 0x73f2 025295 iadd regb ,contr 0x73f3 025296 force 16 ,loopcnt 0x73f4 025297 arg mem_round_key ,contw : 025298 key_select_octet_loop: 0x73f5 025299 ifetch 1 ,contr 0x73f6 025300 istore 1 ,contw 0x73f7 025301 compare mem_key_store_end ,contr ,0xff 0x73f8 025302 nbranch key_select_octet_nwrap ,true 0x73f9 025303 increase -17 ,contr : 025304 key_select_octet_nwrap: 0x73fa 025305 loop key_select_octet_loop 0x73fb 025306 force 0 ,rega 0x73fc 025307 add regb ,-1 ,regc 0x73fd 025308 lshift2 regc ,regc 0x73fe 025309 lshift2 regc ,regc 0x73ff 025310 call enable_authrom 0x7400 025311 setarg mem_b_box 0x7401 025312 iadd regc ,regc 0x7402 025313 arg mem_round_key ,contw 0x7403 025314 force 16 ,loopcnt : 025315 bias_round_key_loop: 0x7404 025316 ifetcht 1 ,regc 0x7405 025317 ifetch 1 ,contw 0x7406 025318 iadd temp ,pdata 0x7407 025319 istore 1 ,contw 0x7408 025320 increase 1 ,regc 0x7409 025321 loop bias_round_key_loop 0x740a 025322 branch disable_authrom : 025324 key_sched_zero: 0x740b 025325 force 16 ,loopcnt 0x740c 025326 force 0 ,temp : 025327 create_byte_16_loop: 0x740d 025328 ifetch 1 ,contr 0x740e 025329 ixor temp ,temp 0x740f 025330 loop create_byte_16_loop 0x7410 025331 deposit temp 0x7411 025332 istore 1 ,contr 0x7412 025333 arg mem_key_store ,contr 0x7413 025334 arg mem_round_key ,contw 0x7414 025335 branch memcpy16 : 025337 xor_mod32: 0x7415 025338 arg mem_round_key ,regb : 025339 xor_mod32_ar2: 0x7416 025340 force 16 ,loopcnt 0x7417 025341 arg mem_input_store ,rega 0x7418 025342 copy rega ,contw : 025343 xor_mod32_loop: 0x7419 025344 ifetcht 1 ,rega 0x741a 025345 ifetch 1 ,regb 0x741b 025346 ixor temp ,alarm 0x741c 025347 and loopcnt ,3 ,regc 0x741d 025348 nbranch xor_mod32_invert ,user 0x741e 025349 xor_into 3 ,regc : 025350 xor_mod32_invert: 0x741f 025351 sub regc ,1 ,regc 0x7420 025352 branch xor_even ,positive 0x7421 025353 iadd temp ,alarm : 025354 xor_even: 0x7422 025355 deposit alarm 0x7423 025356 istore 1 ,contw 0x7424 025357 increase 1 ,rega 0x7425 025358 increase 1 ,regb 0x7426 025359 loop xor_mod32_loop 0x7427 025360 rtn : 025362 el_boxes: 0x7428 025363 call enable_authrom 0x7429 025364 force 16 ,loopcnt 0x742a 025365 arg mem_input_store ,rega : 025366 el_box_loop: 0x742b 025367 ifetch 1 ,rega 0x742c 025368 arg mem_e_box ,contr 0x742d 025369 and loopcnt ,3 ,regc 0x742e 025370 sub regc ,1 ,null 0x742f 025371 branch e_boxes ,positive 0x7430 025372 arg mem_l_box ,contr : 025373 e_boxes: 0x7431 025374 iadd contr ,contr 0x7432 025375 ifetch 1 ,contr 0x7433 025376 istore 1 ,rega 0x7434 025377 increase 1 ,rega 0x7435 025378 loop el_box_loop 0x7436 025379 branch disable_authrom : 025381 pht: 0x7437 025382 force 8 ,loopcnt 0x7438 025383 arg mem_input_store ,contr 0x7439 025384 copy contr ,contw : 025385 pht_loop: 0x743a 025386 ifetch 1 ,contr 0x743b 025387 iforce rega 0x743c 025388 ifetch 1 ,contr 0x743d 025389 iforce regb 0x743e 025390 lshift rega ,pdata 0x743f 025391 iadd regb ,pdata 0x7440 025392 istore 1 ,contw 0x7441 025393 deposit rega 0x7442 025394 iadd regb ,pdata 0x7443 025395 istore 1 ,contw 0x7444 025396 loop pht_loop 0x7445 025397 rtn : 025400 permute: 0x7446 025401 setarg 0x8ae42c 0x7447 025402 iforce temp 0x7448 025403 force 7 ,loopcnt 0x7449 025404 call permute_exchange 0x744a 025405 setarg 0xd751b 0x744b 025406 iforce temp 0x744c 025407 force 5 ,loopcnt 0x744d 025408 call permute_exchange 0x744e 025409 fetch 1 ,mem_input_store + 15 0x744f 025410 iforce rega 0x7450 025411 fetch 1 ,mem_input_store + 3 0x7451 025412 store 1 ,mem_input_store + 15 0x7452 025413 deposit rega 0x7453 025414 store 1 ,mem_input_store + 3 0x7454 025415 rtn : 025417 permute_exchange: 0x7455 025418 and temp ,0xf ,regb : 025419 permute_loop: 0x7456 025420 and temp ,0xf ,pdata 0x7457 025421 arg mem_input_store ,contw 0x7458 025422 iadd contw ,contw 0x7459 025423 ifetch 1 ,contw 0x745a 025424 iforce regc 0x745b 025425 deposit rega 0x745c 025426 istore 1 ,contw 0x745d 025427 copy regc ,rega 0x745e 025428 rshift4 temp ,temp 0x745f 025429 loop permute_loop 0x7460 025430 setarg mem_input_store 0x7461 025431 iadd regb ,contw 0x7462 025432 deposit rega 0x7463 025433 istore 1 ,contw 0x7464 025434 rtn : 025436 add16: 0x7465 025437 enable user 0x7466 025438 branch xor_add16 : 025440 xor16: 0x7467 025441 disable user : 025442 xor_add16: 0x7468 025443 force 16 ,loopcnt : 025444 xoradd_loop: 0x7469 025445 ifetcht 1 ,rega 0x746a 025446 ifetch 1 ,regb 0x746b 025447 branch xoradd_add ,user 0x746c 025448 ixor temp ,pdata 0x746d 025449 branch xoradd_store : 025450 xoradd_add: 0x746e 025451 iadd temp ,pdata : 025452 xoradd_store: 0x746f 025453 istore 1 ,contw 0x7470 025454 increase 1 ,rega 0x7471 025455 increase 1 ,regb 0x7472 025456 loop xoradd_loop 0x7473 025457 rtn : 025460 function_expand: 0x7474 025461 arg mem_y ,contw 0x7475 025462 ifetch 6 ,rega 0x7476 025463 istore 6 ,contw 0x7477 025464 branch expand_12 ,user 0x7478 025465 ifetch 6 ,rega 0x7479 025466 branch expand_cont : 025467 expand_12: 0x747a 025468 ifetch 6 ,contr : 025469 expand_cont: 0x747b 025470 istore 6 ,contw 0x747c 025471 ifetch 4 ,rega 0x747d 025472 istore 4 ,contw 0x747e 025473 rtn : 025475 key_offset: 0x747f 025476 arg mem_link_key ,contr 0x7480 025477 arg mem_x ,contw 0x7481 025478 arg 0 ,temp 0x7482 025479 setarg 0x8395a7 0x7483 025480 call concatenate_temp24 0x7484 025481 setarg 0xb3c1df 0x7485 025482 call concatenate_temp24 0x7486 025483 setarg 0xe5e9 0x7487 025484 call concatenate_temp16 0x7488 025485 copy temp ,regab 0x7489 025486 disable user 0x748a 025487 call key_addxor 0x748b 025488 copy regab ,temp 0x748c 025489 enable user 0x748d 025490 branch key_addxor : 025492 key_addxor: 0x748e 025493 force 8 ,loopcnt : 025494 key_addxor_loop: 0x748f 025495 ifetch 1 ,contr 0x7490 025496 compare 1 ,loopcnt ,1 0x7491 025497 branch key_high ,user 0x7492 025498 branch key_xor ,true : 025499 key_add: 0x7493 025500 iadd temp ,pdata 0x7494 025501 branch key_store : 025502 key_high: 0x7495 025503 branch key_add ,true : 025504 key_xor: 0x7496 025505 ixor temp ,pdata : 025506 key_store: 0x7497 025507 istore 1 ,contw 0x7498 025508 rshift8 temp ,temp 0x7499 025509 loop key_addxor_loop 0x749a 025510 rtn : 025512 copy_aco: 0x749b 025513 fetch 6 ,mem_input_store + 4 0x749c 025514 store 6 ,mem_aco 0x749d 025515 ifetch 6 ,contr 0x749e 025516 istore 6 ,contw 0x749f 025517 rtn : 025519 concatenate_temp24: 0x74a0 025520 lshift8 temp ,temp : 025521 concatenate_temp16: 0x74a1 025522 lshift16 temp ,temp 0x74a2 025523 ior temp ,temp 0x74a3 025524 rtn : 025527 loop1: 0x74a4 025528 branch loop1 : 025532 generate_stk: 0x74a5 025533 call function_s1 0x74a6 025534 arg mem_le_ltk ,contw 0x74a7 025535 branch store_aes_result : 025538 authenticate_rconfirm: 0x74a8 025539 arg mem_le_srand ,contw 0x74a9 025540 branch authenticate_mconfirm ,master 0x74aa 025541 arg mem_le_mrand ,contw : 025542 authenticate_mconfirm: 0x74ab 025543 copy contr ,rega 0x74ac 025544 call memcpy16 0x74ad 025545 call function_c1 0x74ae 025546 arg mem_le_rconfirm ,contr 0x74af 025547 branch compare_res : 025549 generate_confirm: 0x74b0 025550 arg mem_le_mrand ,rega 0x74b1 025551 branch generate_mrand ,master 0x74b2 025552 arg mem_le_srand ,rega : 025553 generate_mrand: 0x74b3 025554 copy rega ,contw 0x74b4 025555 call generate_random 0x74b5 025556 branch function_c1 : 025558 generate_sk: 0x74b6 025559 arg mem_le_skdm ,contr 0x74b7 025560 call load_data128 0x74b8 025561 arg mem_le_ltk ,contr 0x74b9 025562 call load_regext 0x74ba 025563 force 0x38 ,aes_ctrl 0x74bb 025564 force 0x0 ,aes_ctrl 0x74bc 025565 call wait_aes 0x74bd 025566 arg mem_le_sk ,contw 0x74be 025567 branch store_aes_result : 025570 first_block_counter: 0x74bf 025571 force 0x49 ,pdata 0x74c0 025572 branch first_block : 025573 first_block_data: 0x74c1 025574 force 1 ,pdata : 025575 first_block: 0x74c2 025576 force regidx_data ,regext_index 0x74c3 025577 lshift8 temp ,regext 0x74c4 025578 ior regext ,regext 0x74c5 025579 increase 1 ,regext_index 0x74c6 025580 rshift8 temp ,regext 0x74c7 025581 rshift16 regext ,regext 0x74c8 025582 fetch 2 ,mem_le_ivm 0x74c9 025583 lshift16 ,pdata ,pdata 0x74ca 025584 ior regext ,regext 0x74cb 025585 increase 1 ,regext_index 0x74cc 025586 ifetch 4 ,contr 0x74cd 025587 iforce regext 0x74ce 025588 increase 1 ,regext_index 0x74cf 025589 ifetch 2 ,contr 0x74d0 025590 byteswap rega ,regext 0x74d1 025591 lshift16 regext ,regext 0x74d2 025592 ior regext ,regext 0x74d3 025593 increase 1 ,regext_index 0x74d4 025594 rtn : 025598 generate_mic: 0x74d5 025599 add regc ,1 ,contr 0x74d6 025600 ifetch 1 ,contr 0x74d7 025601 iforce rega 0x74d8 025602 call first_block_counter 0x74d9 025603 call do_aes_ocb 0x74da 025605 force regidx_data ,regext_index 0x74db 025606 ifetch 1 ,regc 0x74dc 025607 and_into 0x3 ,pdata 0x74dd 025608 lshift16 pdata ,regext 0x74de 025609 set1 8 ,regext 0x74df 025610 call clear_hidata 0x74e0 025611 call do_aes_cbc 0x74e1 025613 copy rega ,loopcnt 0x74e2 025614 add regc ,2 ,contr 0x74e3 025615 call padding_data : 025616 generate_mic_loop: 0x74e4 025617 call aes_load_data 0x74e5 025618 call do_aes_cbc 0x74e6 025619 deposit loopcnt 0x74e7 025620 branch generate_mic_end ,blank 0x74e8 025621 branch generate_mic_loop : 025622 generate_mic_end: 0x74e9 025623 force regidx_result ,regext_index 0x74ea 025624 deposit regext 0x74eb 025625 store 4 ,mem_le_mic 0x74ec 025626 rtn : 025628 aes_crypt_data: 0x74ed 025629 increase 1 ,rega 0x74ee 025630 call first_block_data 0x74ef 025631 copy regc ,contr 0x74f0 025632 call aes_load_xor 0x74f1 025633 call do_aes_ctr 0x74f2 025634 call store_enc_data 0x74f3 025635 increase 16 ,regc 0x74f4 025636 increase -16 ,regb 0x74f5 025637 branch aes_crypt_data ,positive 0x74f6 025638 rtn : 025640 le_encrypt: 0x74f7 025641 arg mem_le_txheader ,regc 0x74f8 025642 fetcht 5 ,mem_le_pcnt_tx 0x74f9 025643 call generate_mic 0x74fa 025644 force regidx_xor ,regext_index 0x74fb 025645 iforce regext 0x74fc 025646 force 0 ,rega 0x74fd 025647 call first_block_data 0x74fe 025648 call do_aes_ctr 0x74ff 025649 arg mem_le_txpayload ,regc 0x7500 025650 fetch 1 ,mem_le_txlen 0x7501 025651 add pdata ,-1 ,regb 0x7502 025652 iadd regc ,contw 0x7503 025653 force regidx_result ,regext_index 0x7504 025654 deposit regext 0x7505 025655 istore 4 ,contw 0x7506 025656 call aes_crypt_data 0x7507 025657 fetch 1 ,mem_le_txlen 0x7508 025658 increase 4 ,pdata 0x7509 025659 store 1 ,mem_le_txlen 0x750a 025660 fetcht 5 ,mem_le_pcnt_tx 0x750b 025661 increase 1 ,temp 0x750c 025662 storet 5 ,mem_le_pcnt_tx 0x750d 025663 rtn : 025665 le_decrypt: 0x750e 025666 fetch 1 ,mem_le_rxbuf + 1 0x750f 025667 sub pdata ,20 ,null 0x7510 025668 branch le_dec_cont ,positive : 025669 le_dec_cont: 0x7511 025670 arg mem_le_rxbuf + 2 ,regc 0x7512 025671 add pdata ,-1 ,regb 0x7513 025672 increase -4 ,pdata 0x7514 025673 store 1 ,mem_le_rxbuf + 1 0x7515 025674 iadd regc ,contr 0x7516 025675 ifetch 4 ,contr 0x7517 025676 force regidx_xor ,regext_index 0x7518 025677 iforce regext 0x7519 025678 force 0 ,rega 0x751a 025679 fetcht 5 ,mem_le_pcnt_rx 0x751b 025680 call first_block_data 0x751c 025681 call do_aes_ctr 0x751d 025682 force regidx_result ,regext_index 0x751e 025683 deposit regext 0x751f 025684 store 4 ,mem_le_peer_mic 0x7520 025685 call aes_crypt_data 0x7521 025686 arg mem_le_rxbuf ,regc 0x7522 025687 call generate_mic 0x7523 025688 fetcht 4 ,mem_le_peer_mic 0x7524 025689 isub temp ,pdata 0x7525 025690 nrtn blank 0x7526 025691 fetch 4 ,mem_le_last_mic 0x7527 025692 isub temp ,pdata 0x7528 025693 rtn blank 0x7529 025694 storet 4 ,mem_le_last_mic 0x752a 025695 fetch 5 ,mem_le_pcnt_rx 0x752b 025696 increase 1 ,pdata 0x752c 025697 store 5 ,mem_le_pcnt_rx 0x752d 025698 force 0 ,pdata 0x752e 025699 rtn : 025701 wait_aes: 0x752f 025702 nbranch wait_aes ,aes_ready 0x7530 025703 rtn : 025705 do_aes_ocb: 0x7531 025706 force 0x30 ,aes_ctrl 0x7532 025707 force 0x0 ,aes_ctrl 0x7533 025708 branch wait_aes : 025710 do_aes_cbc: 0x7534 025711 force 0x32 ,aes_ctrl 0x7535 025712 force 0x2 ,aes_ctrl 0x7536 025713 branch wait_aes : 025715 do_aes_ctr: 0x7537 025716 force 0x34 ,aes_ctrl 0x7538 025717 force 0x4 ,aes_ctrl 0x7539 025718 branch wait_aes : 025720 do_aes_cfb: 0x753a 025721 force 0x36 ,aes_ctrl 0x753b 025722 force 0x6 ,aes_ctrl 0x753c 025723 branch wait_aes : 025725 aes_init: 0x753d 025726 force 1 ,aes_ctrl 0x753e 025727 force 0 ,aes_ctrl 0x753f 025728 rtn : 025729 function_s1: 0x7540 025730 force regidx_data ,regext_index 0x7541 025731 fetch 4 ,mem_le_mrand 0x7542 025732 iforce regext 0x7543 025733 increase 1 ,regext_index 0x7544 025734 ifetch 4 ,contr 0x7545 025735 iforce regext 0x7546 025736 increase 1 ,regext_index 0x7547 025737 fetch 4 ,mem_le_srand 0x7548 025738 iforce regext 0x7549 025739 increase 1 ,regext_index 0x754a 025740 ifetch 4 ,contr 0x754b 025741 iforce regext 0x754c 025742 increase 1 ,regext_index 0x754d 025743 call aes_clear 0x754e 025744 force 0x38 ,aes_ctrl 0x754f 025745 force 0x8 ,aes_ctrl 0x7550 025746 branch wait_aes : 025749 function_c1: 0x7551 025750 fetch 6 ,mem_le_lap 0x7552 025751 fetcht 6 ,mem_le_plap 0x7553 025752 branch function_c1_master ,master 0x7554 025753 fetch 6 ,mem_le_plap 0x7555 025754 fetcht 6 ,mem_le_lap : 025755 function_c1_master: 0x7556 025756 force regidx_xor ,regext_index 0x7557 025757 copy temp ,regext 0x7558 025758 increase 1 ,regext_index 0x7559 025759 rshift32 temp ,regext 0x755a 025760 lshift16 pdata ,pdata 0x755b 025761 ior regext ,regext 0x755c 025762 increase 1 ,regext_index 0x755d 025763 rshift32 pdata ,regext 0x755e 025764 increase 1 ,regext_index 0x755f 025765 force 0 ,regext 0x7560 025766 force 0 ,pdata 0x7561 025767 fetch 1 ,mem_le_conn_peer_addr_type 0x7562 025768 fetcht 1 ,mem_le_adv_own_addr_type 0x7563 025769 nbranch function_c1_irat ,master 0x7564 025771 fetch 1 ,mem_le_conn_own_addr_type 0x7565 025772 fetcht 1 ,mem_le_conn_peer_addr_type : 025773 function_c1_irat: 0x7566 025774 store 1 ,mem_le_iat 0x7567 025775 storet 1 ,mem_le_rat 0x7568 025776 force regidx_data ,regext_index 0x7569 025777 arg mem_le_iat ,regb 0x756a 025778 force 4 ,loopcnt : 025779 function_c1_loop1: 0x756b 025780 ifetch 4 ,rega 0x756c 025781 ifetcht 4 ,regb 0x756d 025782 ixor temp ,regext 0x756e 025783 increase 1 ,regext_index 0x756f 025784 increase 4 ,rega 0x7570 025785 increase 4 ,regb 0x7571 025786 loop function_c1_loop1 0x7572 025787 call aes_clear 0x7573 025788 force 0x38 ,aes_ctrl 0x7574 025789 force 0xc ,aes_ctrl 0x7575 025790 call wait_aes 0x7576 025792 call aes_clear_data 0x7577 025793 force 0x3a ,aes_ctrl 0x7578 025794 force 0x8 ,aes_ctrl 0x7579 025795 branch wait_aes : 025797 padding_data: 0x757a 025798 compare 0 ,loopcnt ,3 0x757b 025799 rtn true 0x757c 025800 deposit contr 0x757d 025801 iadd loopcnt ,contw 0x757e 025802 force 0 ,pdata : 025803 padding_loop: 0x757f 025804 istore 1 ,contw 0x7580 025805 increase 1 ,loopcnt 0x7581 025806 compare 0 ,loopcnt ,3 0x7582 025807 rtn true 0x7583 025808 branch padding_loop : 025810 aes_load_data: 0x7584 025811 force regidx_data ,regext_index : 025812 load_data_loop: 0x7585 025813 deposit loopcnt 0x7586 025814 branch load_data_padding ,blank 0x7587 025815 ifetch 4 ,contr 0x7588 025816 increase -4 ,loopcnt : 025817 load_data_padding: 0x7589 025818 iforce regext 0x758a 025819 increase 1 ,regext_index 0x758b 025820 compare regidx_key ,regext_index ,0xf 0x758c 025821 rtn true 0x758d 025822 branch load_data_loop : 025824 aes_load_xor: 0x758e 025825 force regidx_xor ,regext_index 0x758f 025826 branch load_regext : 025827 load_key: 0x7590 025828 force regidx_key ,regext_index 0x7591 025829 branch load_regext : 025830 load_data128: 0x7592 025831 force regidx_data ,regext_index : 025832 load_regext: 0x7593 025833 force 4 ,loopcnt : 025834 load_regext_loop: 0x7594 025835 ifetch 4 ,contr 0x7595 025836 iforce regext 0x7596 025837 increase 1 ,regext_index 0x7597 025838 loop load_regext_loop 0x7598 025839 rtn : 025841 load_sk: 0x7599 025842 arg mem_le_sk ,contr 0x759a 025843 branch load_key : 025845 clear_hidata: 0x759b 025846 force 4 ,loopcnt 0x759c 025847 branch clear_data_rest : 025849 aes_clear_data: 0x759d 025850 force regidx_data ,regext_index : 025851 aes_clear: 0x759e 025852 force 4 ,loopcnt : 025853 clear_loop: 0x759f 025854 force 0 ,regext : 025855 clear_data_rest: 0x75a0 025856 increase 1 ,regext_index 0x75a1 025857 loop clear_loop 0x75a2 025858 rtn : 025860 store_aes_result: 0x75a3 025861 force regidx_result ,regext_index 0x75a4 025862 force 4 ,loopcnt : 025863 send_aes_result_loop: 0x75a5 025864 deposit regext 0x75a6 025865 istore 4 ,contw 0x75a7 025866 increase 1 ,regext_index 0x75a8 025867 loop send_aes_result_loop 0x75a9 025868 rtn : 025870 store_enc_data: 0x75aa 025871 force regidx_result ,regext_index 0x75ab 025872 copy regc ,contw 0x75ac 025873 add regb ,1 ,loopcnt 0x75ad 025874 sub loopcnt ,15 ,null 0x75ae 025875 branch store_enc_loop ,positive 0x75af 025876 force 16 ,loopcnt : 025877 store_enc_loop: 0x75b0 025878 deposit regext 0x75b1 025879 sub loopcnt ,3 ,null 0x75b2 025880 branch store_enc_byte ,positive 0x75b3 025881 istore 4 ,contw 0x75b4 025882 increase -4 ,loopcnt 0x75b5 025883 rtn zero 0x75b6 025884 increase 1 ,regext_index 0x75b7 025885 branch store_enc_loop : 025886 store_enc_byte: 0x75b8 025887 istore 1 ,contw 0x75b9 025888 rshift8 pdata ,pdata 0x75ba 025889 loop store_enc_byte 0x75bb 025890 rtn : 025893 compare_res: 0x75bc 025894 force regidx_result ,regext_index 0x75bd 025895 force 4 ,loopcnt : 025896 compare_res_loop: 0x75be 025897 ifetch 4 ,contr 0x75bf 025898 isub regext ,null 0x75c0 025899 nrtn zero 0x75c1 025900 increase 1 ,regext_index 0x75c2 025901 loop compare_res_loop 0x75c3 025902 force 0 ,null 0x75c4 025903 rtn : 025905 enable_authrom: 0x75c5 025906 hfetch 1 ,core_clkoff 0x75c6 025907 set0 clock_off_auth_rom ,pdata 0x75c7 025908 hstore 1 ,core_clkoff 0x75c8 025909 rtn : 025911 disable_authrom: 0x75c9 025912 hfetch 1 ,core_clkoff 0x75ca 025913 set1 clock_off_auth_rom ,pdata 0x75cb 025914 hstore 1 ,core_clkoff 0x75cc 025915 rtn : 025917 init_memp: 0x75cd 025918 arg mem_p ,contw 0x75ce 025919 setsect 0 ,0x3ffff 0x75cf 025920 setsect 1 ,0x3ffff 0x75d0 025921 setsect 2 ,0x3ffff 0x75d1 025922 setsect 3 ,0x3fbff 0x75d2 025923 istore 9 ,contw 0x75d3 025924 setsect 0 ,0x3ffff 0x75d4 025925 setsect 1 ,0x3ffff 0x75d5 025926 setsect 2 ,0x3ffff 0x75d6 025927 setsect 3 ,0x3ffff 0x75d7 025928 istore 9 ,contw 0x75d8 025929 setsect 0 ,0x3ffff 0x75d9 025930 setsect 1 ,0x3ffff 0x75da 025931 setsect 2 ,0x3cfff 0x75db 025932 setsect 3 ,0x3ffff 0x75dc 025933 istore 9 ,contw 0x75dd 025934 setsect 0 ,0x3ffff 0x75de 025935 setsect 1 ,0x3ffff 0x75df 025936 setsect 2 ,0x3ffef 0x75e0 025937 setsect 3 ,0x3ffff 0x75e1 025938 istore 9 ,contw 0x75e2 025939 setsect 0 ,0x3ffff 0x75e3 025940 setsect 1 ,0x3ffff 0x75e4 025941 setsect 2 ,0x3ffff 0x75e5 025942 setsect 3 ,0x3ffff 0x75e6 025943 istore 9 ,contw 0x75e7 025944 setsect 0 ,0x3ffff 0x75e8 025945 setsect 1 ,0x26c7f 0x75e9 025946 setsect 2 ,0x146b 0x75ea 025947 setsect 3 ,0x37bb3 0x75eb 025948 istore 9 ,contw 0x75ec 025949 setsect 0 ,0x1feb8 0x75ed 025950 setsect 1 ,0x10c12 0x75ee 025951 setsect 2 ,0x2b722 0x75ef 025952 setsect 3 ,0x29fa6 0x75f0 025953 istore 9 ,contw 0x75f1 025954 setsect 0 ,0xe70f 0x75f2 025955 setsect 1 ,0x16720 0x75f3 025956 setsect 2 ,0x519e 0x75f4 025957 setsect 3 ,0x19084 0x75f5 025958 istore 9 ,contw 0x75f6 025959 setsect 0 ,0x31012 0x75f7 025960 setsect 1 ,0x360bf 0x75f8 025961 setsect 2 ,0x3f0af 0x75f9 025962 setsect 3 ,0x3d3 0x75fa 025963 istore 9 ,contw 0x75fb 025964 setsect 0 ,0x3a188 0x75fc 025965 setsect 1 ,0x3ad0 0x75fd 025966 setsect 2 ,0x3cbf2 0x75fe 025967 setsect 3 ,0x243d9 0x75ff 025968 istore 9 ,contw 0x7600 025969 setsect 0 ,0x2b030 0x7601 025970 setsect 1 ,0x36a03 0x7602 025971 setsect 2 ,0x11188 0x7603 025972 setsect 3 ,0x1e520 0x7604 025973 istore 9 ,contw 0x7605 025974 setsect 0 ,0x3a11e 0x7606 025975 setsect 1 ,0xfe5d 0x7607 025976 setsect 2 ,0xdd57 0x7608 025977 setsect 3 ,0x1ac93 0x7609 025978 istore 9 ,contw 0x760a 025979 setsect 0 ,0x11ed 0x760b 025980 setsect 1 ,0x218c4 0x760c 025981 setsect 2 ,0x8da7 0x760d 025982 setsect 3 ,0x257ff 0x760e 025983 istore 9 ,contw 0x760f 025984 setsect 0 ,0x3192b 0x7610 025985 setsect 1 ,0x34641 0x7611 025986 setsect 2 ,0x1be0c 0x7612 025987 setsect 3 ,0x366ad 0x7613 025988 istore 9 ,contw 0x7614 025989 setsect 0 ,0x1f83 0x7615 025990 setsect 1 ,0x15a23 0x7616 025991 setsect 2 ,0x3f9b0 0x7617 025992 setsect 3 ,0x3949 0x7618 025993 istore 9 ,contw 0x7619 025994 setsect 0 ,0x13a51 0x761a 025995 setsect 1 ,0x153fd 0x761b 025996 setsect 2 ,0x3372a 0x761c 025997 setsect 3 ,0xf1bb 0x761d 025998 istore 9 ,contw 0x761e 025999 setsect 0 ,0x3ae85 0x761f 026000 setsect 1 ,0x1eed9 0x7620 026001 setsect 2 ,0x9e66 0x7621 026002 setsect 3 ,0x1a8 0x7622 026003 istore 8 ,contw 0x7623 026004 rtn : 026008 shutter_init: 0x7624 026009 setarg shutter_send_process 0x7625 026010 store 2 ,mem_cb_bt_process 0x7626 026011 setarg shutter_process_idle 0x7627 026012 store 2 ,mem_cb_idle_process 0x7628 026013 setarg shutter_process_bb_event 0x7629 026014 store 2 ,mem_cb_bb_event_process 0x762a 026015 setarg shutter_process_lpm_before 0x762b 026016 store 2 ,mem_cb_before_lpm 0x762c 026017 setarg shutter_discovery_timeout_sleep 0x762d 026018 store 2 ,mem_cb_discovry_timeout 0x762e 026019 set1 mark_ext_patch ,mark 0x762f 026020 bpatch patch3f_1 ,mem_patch3f 0x7630 026021 rtn wake 0x7631 026023 hjam 0x00 ,core_gpio_sel1 0x7632 026024 call shutter_key_and_wake_gpio_setup 0x7633 026026 setarg shutter_before_hibernate 0x7634 026027 store 2 ,mem_cb_before_hibernate 0x7635 026029 jam flag_shutter_1key_send_null ,mem_shutter_1key_send_sm 0x7636 026030 jam 0 ,mem_shutter_key 0x7637 026031 jam flag_shutter_default ,mem_shutter_flag 0x7638 026032 setarg 0 0x7639 026033 store 4 ,mem_shutter_send_data 0x763a 026034 call app_check_reconn_target 0x763b 026035 branch app_bt_start_discovery_short ,blank 0x763c 026036 call app_led_on 0x763d 026037 call app_bt_stop_discovery 0x763e 026038 branch app_bt_start_reconnect : 026040 shutter_key_and_wake_gpio_setup: 0x763f 026041 fetcht 1 ,mem_shutter_iphonekey_gpio 0x7640 026042 call gpio_config_input 0x7641 026043 fetcht 1 ,mem_shutter_androidkey_gpio 0x7642 026044 branch gpio_config_input : 026046 shutter_cancel_key_shake: 0x7643 026047 set1 mark_ext_patch ,mark 0x7644 026048 bpatch patch3f_2 ,mem_patch3f 0x7645 026049 fetcht 4 ,mem_shutter_clkn_bt_last 0x7646 026050 deposit clkn_bt 0x7647 026051 store 4 ,mem_shutter_clkn_bt_last 0x7648 026052 isub temp ,pdata 0x7649 026053 nrtn positive 0x764a 026054 sub pdata ,200 ,pdata 0x764b 026055 rtn : 026057 shutter_send_process: 0x764c 026058 fetch 1 ,mem_hid_interrupt_state 0x764d 026059 rtnne 0x3f : 026060 shutter_scan_key_start: 0x764e 026061 set1 mark_ext_patch ,mark 0x764f 026062 bpatch patch3f_3 ,mem_patch3f 0x7650 026063 fetch 1 ,mem_device_option 0x7651 026064 rtnne dvc_op_shutter 0x7652 026065 disable user 0x7653 026066 call shutter_scan_key 0x7654 026067 nrtn user 0x7655 026068 disable user 0x7656 026069 fetch 1 ,mem_scan_mode 0x7657 026070 beq 0x03 ,shutter_reconnect_scan_2 0x7658 026072 fetch 1 ,mem_shutter_flag 0x7659 026073 beq flag_shutter_iphonekey_send ,shutter_iphonekey_release 0x765a 026074 beq flag_shutter_androidkey_send ,shutter_androidkey_release 0x765b 026075 call shutter_cancel_key_shake 0x765c 026076 branch shutter_send_process_end ,positive 0x765d 026078 fetch 1 ,mem_shutter_key 0x765e 026079 bbit1 flag_shutter_iphonekey_press ,shutter_iphonekey_press 0x765f 026080 bbit1 flag_shutter_androidkey_press ,shutter_androidkey_press : 026082 shutter_send_process_end: 0x7660 026083 jam 0 ,mem_shutter_key 0x7661 026084 jam flag_shutter_default ,mem_shutter_flag 0x7662 026085 rtn : 026088 shutter_iphonekey_release: 0x7663 026089 jam flag_shutter_default ,mem_shutter_flag 0x7664 026090 call ui_led_blink_stop 0x7665 026091 fetch 1 ,mem_shutter_key_number 0x7666 026092 beq flag_shutter_1key ,shutter_1key_iphonekey_release : 026093 shutter_2key_iphonekey_release: : 026094 shutter_iphonekey_release_package: 0x7667 026095 jam 0x05 ,mem_shutter_send_length 0x7668 026096 jam 0x03 ,mem_shutter_send_data 0x7669 026097 branch shutter_send_keydata : 026098 shutter_1key_iphonekey_release: 0x766a 026099 jam flag_shutter_1key_send_null ,mem_shutter_1key_send_sm 0x766b 026100 branch shutter_1key_send_step1 : 026102 shutter_1key_send_step1: 0x766c 026103 jam flag_shutter_1key_send_step2 ,mem_shutter_1key_send_sm 0x766d 026104 branch shutter_androidkey_press_package : 026105 shutter_1key_send_step2: 0x766e 026106 jam flag_shutter_1key_send_step3 ,mem_shutter_1key_send_sm 0x766f 026107 branch shutter_androidkey_release_package : 026108 shutter_1key_send_step3: 0x7670 026109 jam flag_shutter_1key_send_step4 ,mem_shutter_1key_send_sm 0x7671 026110 branch shutter_iphonekey_press_package : 026111 shutter_1key_send_step4: 0x7672 026112 jam flag_shutter_1key_send_null ,mem_shutter_1key_send_sm 0x7673 026113 branch shutter_iphonekey_release_package : 026115 shutter_iphonekey_press: 0x7674 026116 jam flag_shutter_iphonekey_send ,mem_shutter_flag 0x7675 026117 call ui_led_on 0x7676 026118 fetch 1 ,mem_shutter_key_number 0x7677 026119 beq flag_shutter_1key ,shutter_1key_iphonekey_press : 026120 shutter_2key_iphonekey_press: : 026121 shutter_iphonekey_press_package: 0x7678 026122 jam 0x05 ,mem_shutter_send_length 0x7679 026123 setarg 0x20003 0x767a 026124 store 3 ,mem_shutter_send_data 0x767b 026125 branch shutter_send_keydata : 026126 shutter_1key_iphonekey_press: 0x767c 026127 rtn : 026129 shutter_androidkey_release: 0x767d 026130 jam flag_shutter_default ,mem_shutter_flag 0x767e 026131 call ui_led_blink_stop : 026132 shutter_androidkey_release_package: 0x767f 026133 jam 0x0a ,mem_shutter_send_length 0x7680 026134 jam 0x01 ,mem_shutter_send_data 0x7681 026135 branch shutter_send_keydata : 026136 shutter_androidkey_press: 0x7682 026137 jam flag_shutter_androidkey_send ,mem_shutter_flag 0x7683 026138 call ui_led_on : 026139 shutter_androidkey_press_package: 0x7684 026140 jam 0x0a ,mem_shutter_send_length 0x7685 026141 jam 0x01 ,mem_shutter_send_data 0x7686 026142 setarg 0x280000 0x7687 026143 store 3 ,mem_shutter_send_data + 1 : 026145 shutter_send_keydata: 0x7688 026146 set1 mark_ext_patch ,mark 0x7689 026147 bpatch patch3f_4 ,mem_patch3f 0x768a 026148 fetch 1 ,mem_shutter_send_length 0x768b 026149 copy pdata ,rega 0x768c 026150 call hid_malloc_tx_buff 0x768d 026151 fetch 2 ,mem_hid_int_remote_cid 0x768e 026152 istore 2 ,contw 0x768f 026153 setarg 0xa1 0x7690 026154 istore 1 ,contw 0x7691 026155 fetcht 4 ,mem_shutter_send_data 0x7692 026156 istoret 8 ,contw 0x7693 026157 setarg 0 0x7694 026158 istore 1 ,contw 0x7695 026159 store 4 ,mem_shutter_send_data 0x7696 026161 fetch 1 ,mem_shutter_1key_send_sm 0x7697 026162 beq flag_shutter_1key_send_step2 ,shutter_1key_send_step2 0x7698 026163 beq flag_shutter_1key_send_step3 ,shutter_1key_send_step3 0x7699 026164 beq flag_shutter_1key_send_step4 ,shutter_1key_send_step4 0x769a 026165 rtn : 026167 shutter_scan_key: 0x769b 026168 fetcht 1 ,mem_shutter_iphonekey_gpio 0x769c 026169 call gpio_get_bit 0x769d 026170 setarg 0 0x769e 026171 setflag true ,flag_shutter_iphonekey_press ,pdata 0x769f 026172 store 1 ,mem_shutter_key_temp 0x76a0 026173 fetcht 1 ,mem_shutter_androidkey_gpio 0x76a1 026174 call gpio_get_bit 0x76a2 026175 setarg 0 0x76a3 026176 setflag true ,flag_shutter_androidkey_press ,pdata 0x76a4 026177 fetcht 1 ,mem_shutter_key_temp 0x76a5 026178 ior temp ,pdata 0x76a6 026179 fetcht 1 ,mem_shutter_key 0x76a7 026180 store 1 ,mem_shutter_key 0x76a8 026181 ixor temp ,null 0x76a9 026182 rtn zero 0x76aa 026183 enable user 0x76ab 026184 rtn : 026186 shutter_process_bb_event: 0x76ac 026187 copy regc ,pdata 0x76ad 026188 beq bt_evt_setup_complete ,shutter_bb_event_setup_complete 0x76ae 026189 beq bt_evt_hid_connected ,shutter_bb_event_hid_connected 0x76af 026190 beq bt_evt_hid_disconnected ,shutter_bb_event_hid_disconn 0x76b0 026191 beq bt_evt_virtual_cable_unplug ,shutter_bb_event_unplug 0x76b1 026192 beq bt_evt_bb_disconnected ,shutter_bb_event_bb_disconn 0x76b2 026193 beq bt_evt_reconn_failed ,shutter_bb_event_reconn_failed 0x76b3 026194 beq bt_evt_reconn_page_timeout ,shutter_bb_event_reconn_failed 0x76b4 026195 beq bt_evt_bb_connected ,shutter_process_bb_conn 0x76b5 026196 beq bt_evt_hid_handshake ,shutter_event_hid_handshake 0x76b6 026197 beq bt_evt_remote_unsniff ,app_start_auto_sniff 0x76b7 026198 and pdata ,0x0f ,temp 0x76b8 026199 and_into bt_evt_timer_mask ,pdata 0x76b9 026200 beq bt_evt_timer_init ,shutter_bb_event_timer 0x76ba 026201 rtn : 026203 shutter_hid_handshake_timer: 0x76bb 026204 fetch 1 ,mem_hid_handshake_timer_count 0x76bc 026205 rtn blank 0x76bd 026206 increase -1 ,pdata 0x76be 026207 store 1 ,mem_hid_handshake_timer_count 0x76bf 026208 nrtn blank : 026209 shutter_event_hid_handshake: 0x76c0 026210 jam app_handshake_done ,mem_app_handshake_flag 0x76c1 026211 call app_lpm_mult_enable 0x76c2 026212 call app_bt_store_reconn_info 0x76c3 026213 call app_bt_stop_discovery 0x76c4 026214 call app_led_off 0x76c5 026215 branch app_bt_enter_sniff : 026218 shutter_process_bb_conn: 0x76c6 026219 jam 0 ,mem_shutter_hid_disconn_count 0x76c7 026220 jam 0 ,mem_shutter_cable_unplug_conut 0x76c8 026221 rtn : 026223 shutter_bb_event_bb_disconn: 0x76c9 026224 set1 mark_ext_patch ,mark 0x76ca 026225 bpatch patch3f_5 ,mem_patch3f 0x76cb 026226 jam 0 ,mem_unsniff2sniff_timer_count 0x76cc 026227 jam 0 ,mem_shutter_cable_unplug_conut 0x76cd 026228 jam 0 ,mem_shutter_hid_disconn_count 0x76ce 026229 fetch app_disc_rsn_size ,mem_app_disconn_reason 0x76cf 026230 bbit0 app_disc_after_sniff ,shutter_check_pairing : 026231 shutter_bb_event_reconn_failed: 0x76d0 026233 fetch 2 ,mem_discovery_timeout 0x76d1 026234 store 2 ,mem_discovery_timeout_timer_count : 026235 shutter_discovery_on_not_renew_timer: 0x76d2 026236 call app_disconn_reason_clear 0x76d3 026237 branch app_bt_start_discovery_led_blink : 026239 shutter_check_pairing: 0x76d4 026240 bbit0 app_disc_after_pairing ,shutter_check_reconn 0x76d5 026241 branch shutter_bb_event_reconn_failed : 026243 shutter_check_reconn: 0x76d6 026244 bbit0 app_disc_after_reconn ,shutter_discovery_on_not_renew_timer 0x76d7 026245 branch shutter_bb_event_reconn_failed : 026248 shutter_bb_event_setup_complete: 0x76d8 026249 call app_bt_stop_discovery 0x76d9 026250 branch app_led_stop_blink : 026252 shutter_bb_event_hid_connected: 0x76da 026253 setarg hid_handshake_timeout 0x76db 026254 store 1 ,mem_hid_handshake_timer_count 0x76dc 026255 rtn : 026257 shutter_bb_event_hid_disconn: 0x76dd 026258 jam 0 ,mem_shutter_cable_unplug_conut 0x76de 026259 setarg flag_shutter_hid_disconn_timeout 0x76df 026260 store 1 ,mem_shutter_hid_disconn_count 0x76e0 026261 rtn : 026263 shutter_bb_event_unplug: 0x76e1 026264 setarg flag_shutter_cable_unplug_timeout 0x76e2 026265 store 1 ,mem_shutter_cable_unplug_conut 0x76e3 026266 rtn : 026268 shutter_bb_event_timer: 0x76e4 026269 set1 mark_ext_patch ,mark 0x76e5 026270 bpatch patch3f_6 ,mem_patch3f 0x76e6 026271 storet 1 ,mem_app_evt_timer_count : 026272 shutter_bb_event_100ms_loop: 0x76e7 026273 fetch 1 ,mem_app_evt_timer_count 0x76e8 026274 rtn blank 0x76e9 026275 increase -1 ,pdata 0x76ea 026276 store 1 ,mem_app_evt_timer_count 0x76eb 026277 call shutter_check_unplug_timer 0x76ec 026278 call shutter_hid_handshake_timer 0x76ed 026279 call shutter_check_hid_disconn_timer 0x76ee 026280 branch shutter_bb_event_100ms_loop : 026282 shutter_check_unplug_timer: 0x76ef 026283 fetch 1 ,mem_shutter_cable_unplug_conut 0x76f0 026284 rtn blank 0x76f1 026285 fetch 1 ,mem_shutter_cable_unplug_conut 0x76f2 026286 increase -1 ,pdata 0x76f3 026287 store 1 ,mem_shutter_cable_unplug_conut 0x76f4 026288 nrtn blank 0x76f5 026289 fetch 1 ,mem_control_tasks 0x76f6 026290 set1 l2cap_disconnect_interrupt ,pdata 0x76f7 026291 set1 l2cap_disconnect_control ,pdata 0x76f8 026292 store 1 ,mem_control_tasks 0x76f9 026293 rtn : 026295 shutter_check_hid_disconn_timer: 0x76fa 026296 fetch 1 ,mem_shutter_hid_disconn_count 0x76fb 026297 rtn blank 0x76fc 026298 fetch 1 ,mem_shutter_hid_disconn_count 0x76fd 026299 increase -1 ,pdata 0x76fe 026300 store 1 ,mem_shutter_hid_disconn_count 0x76ff 026301 nrtn blank 0x7700 026302 branch app_bt_disconnect : 026304 shutter_reconnect_scan: 0x7701 026305 set1 mark_ext_patch ,mark 0x7702 026306 bpatch patch3f_7 ,mem_patch3f 0x7703 026307 fetch 1 ,mem_scan_mode 0x7704 026308 rtnne 0x03 0x7705 026309 branch shutter_scan_key_start : 026310 shutter_reconnect_scan_2: 0x7706 026311 call shutter_cancel_key_shake 0x7707 026312 rtn positive 0x7708 026313 fetch 1 ,mem_shutter_key 0x7709 026314 rtn blank 0x770a 026315 call app_check_reconn_target 0x770b 026316 branch app_bt_start_discovery_short ,blank 0x770c 026317 call app_led_on 0x770d 026318 call app_bt_stop_discovery 0x770e 026319 branch app_bt_start_reconnect : 026322 shutter_process_idle: 0x770f 026323 branch shutter_reconnect_scan : 026326 shutter_process_lpm_before: 0x7710 026327 fetcht 1 ,mem_shutter_iphonekey_gpio 0x7711 026328 call gpio_set_wake_by_current_state 0x7712 026329 fetch 1 ,mem_shutter_key_number 0x7713 026330 bne flag_shutter_1key ,shutter_process_lpm_before_key2 0x7714 026331 rtn : 026332 shutter_process_lpm_before_key2: 0x7715 026333 fetcht 1 ,mem_shutter_androidkey_gpio 0x7716 026334 branch gpio_set_wake_by_current_state : 026336 shutter_before_hibernate: 0x7717 026337 branch shutter_key_and_wake_gpio_setup : 026340 shutter_discovery_timeout_sleep: 0x7718 026341 branch app_enter_hibernate : 026345 sp_initialize: 0x7719 026346 set1 mark_ext_patch ,mark 0x771a 026347 bpatch patch3e_2 ,mem_patch3e 0x771b 026348 fetch 1 ,mem_ssp_enable 0x771c 026349 branch ssp_disable ,blank 0x771d 026350 call ssp_enable 0x771e 026351 setarg 0 0x771f 026352 store 8 ,mem_sp_state_start 0x7720 026353 store 4 ,mem_sp_flag_start 0x7721 026355 arg mem_sp_iocap_remote ,contw 0x7722 026356 istore 7 ,contw 0x7723 026357 jam default_statemachine ,mem_sp_localsm 0x7724 026358 branch sp_pubkey_calc : 026360 sp_generate_local_key: 0x7725 026361 jam sp_flag_commit ,mem_sp_flag 0x7726 026362 branch sp_generate_local_key0 : 026363 sp_master_generate_local_key: 0x7727 026364 fetch 1 ,mem_sp_local_key_invalid 0x7728 026365 beq sp_key_valid ,sp_dhkey_calc 0x7729 026366 branch assert : 026367 sp_generate_local_key0: 0x772a 026368 fetch 1 ,mem_sp_local_key_invalid 0x772b 026369 beq sp_key_valid ,sp_start_send_pubkey 0x772c 026370 branch sp_pubkey_calc : 026372 sp_start_send_pubkey: 0x772d 026373 call sp_dhkey_calc 0x772e 026374 fetch 1 ,mem_master_sp_state 0x772f 026375 nrtn blank 0x7730 026376 jam sp_stat_key_send ,mem_sp_state 0x7731 026377 rtn : 026379 sp_calculate_commitment: 0x7732 026380 fetch 1 ,mem_sp_calc 0x7733 026381 bne sp_calc_standby ,sp_calculate_commitment_wait_dhkey_calc 0x7734 026382 call sp_local_random_key_generator 0x7735 026383 arg mem_sp_prarm_stack ,contw 0x7736 026384 setarg mem_sp_random_local_end 0x7737 026385 istore 2 ,contw 0x7738 026386 setarg mem_sp_pubkey_local_x_end 0x7739 026387 istore 2 ,contw 0x773a 026388 setarg mem_sp_pubkey_remote_x_end 0x773b 026389 istore 2 ,contw 0x773c 026390 branch sp_calculate_commitment0 : 026391 master_sp_calculate_commitment: 0x773d 026392 arg mem_sp_prarm_stack ,contw 0x773e 026393 setarg mem_sp_random_remote_end 0x773f 026394 istore 2 ,contw 0x7740 026395 setarg mem_sp_pubkey_remote_x_end 0x7741 026396 istore 2 ,contw 0x7742 026397 setarg mem_sp_pubkey_local_x_end 0x7743 026398 istore 2 ,contw : 026399 sp_calculate_commitment0: 0x7744 026400 call function_f1 0x7745 026401 fetch 1 ,mem_master_sp_state 0x7746 026402 beq sp_stat_commit_calc ,master_sp_calculate_commitment0 0x7747 026403 jam sp_flag_commit ,mem_sp_flag 0x7748 026404 jam sp_stat_commit_send ,mem_sp_state 0x7749 026405 rtn : 026406 master_sp_calculate_commitment0: 0x774a 026407 jam sp_stat_commitment_compare ,mem_master_sp_state 0x774b 026408 call sp_master_generate_local_key 0x774c 026409 branch master_set_mem_master_sp_flag : 026411 sp_local_random_key_generator: 0x774d 026412 arg mem_sp_random_local ,contw 0x774e 026413 force 8 ,queue 0x774f 026414 branch random_generator : 026416 sp_calculate_commitment_wait_dhkey_calc: 0x7750 026417 jam sp_flag_commit ,mem_sp_flag 0x7751 026418 rtn : 026420 sp_confirm_check: 0x7752 026422 arg mem_addr_value ,contw 0x7753 026423 fetch 6 ,mem_lap 0x7754 026424 istore 6 ,contw 0x7755 026425 fetch 6 ,mem_plap 0x7756 026426 istore 6 ,contw 0x7757 026427 fetch 3 ,mem_sp_iocap_remote 0x7758 026428 istore 3 ,contw 0x7759 026430 call function_f3a 0x775a 026432 arg mem_sp_calc_result_high ,rega 0x775b 026433 arg mem_sp_check_result ,regb 0x775c 026434 force 4 ,queue 0x775d 026435 call compare4 0x775e 026436 nbranch sp_confirm_check_failed ,true : 026438 sp_confirm_check_success: 0x775f 026439 fetch 1 ,mem_master_sp_state 0x7760 026440 beq sp_stat_confirm_check ,sp_confirm_check_success_master 0x7761 026441 jam sp_stat_confirm_calc ,mem_sp_state 0x7762 026442 jam sp_flag_commit ,mem_sp_flag 0x7763 026443 jam lmp_accepted ,mem_lmo_opcode2 0x7764 026444 rtn : 026445 sp_confirm_check_success_master: 0x7765 026446 jam lmp_accepted ,mem_lmo_opcode2 0x7766 026447 jam sp_state_end ,mem_master_sp_state 0x7767 026448 branch master_set_mem_master_sp_flag : 026451 sp_confirm_check_failed: 0x7768 026452 fetch 1 ,mem_master_sp_state 0x7769 026453 beq sp_stat_confirm_check ,sp_confirm_check_failed_master 0x776a 026454 jam sp_stat_null ,mem_sp_state 0x776b 026455 jam lmp_not_accepted ,mem_lmo_opcode2 0x776c 026457 jam authentication_failure_error ,mem_lmo_reason2 0x776d 026458 rtn : 026459 sp_confirm_check_failed_master: 0x776e 026460 jam lmp_not_accepted ,mem_lmo_opcode2 0x776f 026461 jam sp_stat_null ,mem_master_sp_state 0x7770 026462 rtn : 026464 sp_confirm_calc: 0x7771 026465 fetch 1 ,mem_sp_dh_ready 0x7772 026466 beq sp_flag_commit ,sp_confirm_calc_ready 0x7773 026467 jam sp_stat_confirm_calc ,mem_master_sp_state 0x7774 026468 branch master_set_mem_master_sp_flag : 026469 sp_confirm_calc_ready: 0x7775 026470 arg mem_addr_value ,contw 0x7776 026471 fetch 6 ,mem_plap 0x7777 026472 istore 6 ,contw 0x7778 026473 fetch 6 ,mem_lap 0x7779 026474 istore 6 ,contw 0x777a 026475 fetch 3 ,mem_sp_iocap_local 0x777b 026476 istore 3 ,contw 0x777c 026478 call function_f3b 0x777d 026479 fetch 1 ,mem_master_sp_state 0x777e 026480 beq sp_stat_confirm_calc ,sp_confirm_calc_master 0x777f 026481 jam sp_stat_confirm_send ,mem_sp_state 0x7780 026482 jam sp_flag_commit ,mem_sp_flag 0x7781 026483 rtn : 026484 sp_confirm_calc_master: 0x7782 026485 jam sp_stat_confirm_send ,mem_master_sp_state 0x7783 026486 jam sp_flag_commit ,mem_master_sp_flag 0x7784 026487 rtn : 026489 sp_master_key_prarm_push: 0x7785 026490 arg mem_sp_prarm_stack ,contw 0x7786 026491 fetch 6 ,mem_plap 0x7787 026492 istore 6 ,contw 0x7788 026493 fetch 6 ,mem_lap 0x7789 026494 istore 6 ,contw 0x778a 026495 setarg mem_sp_random_local_end 0x778b 026496 istore 2 ,contw 0x778c 026497 setarg mem_sp_random_remote_end 0x778d 026498 istore 2 ,contw 0x778e 026499 branch sp_link_key_calc : 026500 sp_link_key_prarm_push: 0x778f 026501 jam sp_stat_done ,mem_sp_state 0x7790 026502 arg mem_sp_prarm_stack ,contw 0x7791 026503 fetch 6 ,mem_lap 0x7792 026504 istore 6 ,contw 0x7793 026505 fetch 6 ,mem_plap 0x7794 026506 istore 6 ,contw 0x7795 026507 setarg mem_sp_random_remote_end 0x7796 026508 istore 2 ,contw 0x7797 026509 setarg mem_sp_random_local_end 0x7798 026510 istore 2 ,contw : 026511 sp_link_key_calc: 0x7799 026513 arg mem_addr_value ,contw 0x779a 026514 fetch 6 ,mem_sp_prarm_stack 0x779b 026515 istore 6 ,contw 0x779c 026516 fetch 6 ,mem_sp_prarm_stack + 6 0x779d 026517 istore 6 ,contw 0x779e 026519 call function_f2 0x779f 026522 jam 1 ,mem_link_key_exists 0x77a0 026523 arg mem_link_key ,contw 0x77a1 026524 arg mem_sp_calc_result_high ,contr 0x77a2 026525 call memcpy16 0x77a3 026526 branch generate_linkkey_continue : 026529 sp_pubkey_calc: 0x77a4 026530 set1 mark_ext_patch ,mark 0x77a5 026531 bpatch patch3e_3 ,mem_patch3e 0x77a6 026532 fetch 1 ,mem_sp_local_key_invalid 0x77a7 026533 rtnne sp_key_invalid 0x77a8 026534 fetch 1 ,mem_sp_calc 0x77a9 026535 rtnne sp_calc_standby 0x77aa 026536 arg mem_sp_private_key ,contw 0x77ab 026537 force 11 ,queue 0x77ac 026538 call random_generator 0x77ad 026539 random pdata 0x77ae 026540 rshift pdata ,pdata 0x77af 026541 istore 2 ,contw 0x77b0 026543 arg mem_k ,contw 0x77b1 026544 arg mem_sp_private_key ,contr 0x77b2 026545 call memcpy24 0x77b3 026547 arg mem_ax ,contw 0x77b4 026548 arg mem_gx ,contr 0x77b5 026549 call memcpy48 0x77b6 026551 arg mem_az ,contw 0x77b7 026552 call bn_zero 0x77b8 026553 jam 1 ,mem_az 0x77b9 026555 call eckp_calc_init 0x77ba 026556 jam sp_calc_pubkey ,mem_sp_calc 0x77bb 026557 rtn : 026559 sp_pubkey_generated: 0x77bc 026560 arg mem_sp_pubkey_local ,contw 0x77bd 026561 arg mem_bx ,contr 0x77be 026562 call memcpy48 0x77bf 026563 jam sp_key_valid ,mem_sp_local_key_invalid 0x77c0 026564 jam sp_calc_standby ,mem_sp_calc 0x77c1 026565 rtn : 026567 sp_dhkey_calc: 0x77c2 026568 set1 mark_ext_patch ,mark 0x77c3 026569 bpatch patch3e_4 ,mem_patch3e 0x77c4 026570 fetch 1 ,mem_sp_dhkey_invalid 0x77c5 026571 rtnne sp_key_invalid 0x77c6 026572 fetch 1 ,mem_sp_calc 0x77c7 026573 rtnne sp_calc_standby 0x77c8 026575 arg mem_k ,contw 0x77c9 026576 arg mem_sp_private_key ,contr 0x77ca 026577 call memcpy24 0x77cb 026579 arg mem_ax ,contw 0x77cc 026580 arg mem_sp_pubkey_remote ,contr 0x77cd 026581 call memcpy48 0x77ce 026583 arg mem_az ,contw 0x77cf 026584 call bn_zero 0x77d0 026585 jam 1 ,mem_az 0x77d1 026587 call eckp_calc_init 0x77d2 026588 jam sp_calc_dhkey ,mem_sp_calc 0x77d3 026589 rtn : 026591 sp_dhkey_generated: 0x77d4 026592 jam sp_flag_commit ,mem_sp_dh_ready 0x77d5 026593 arg mem_sp_dhkey ,contw 0x77d6 026594 arg mem_bx ,contr 0x77d7 026595 call memcpy24 0x77d8 026596 jam sp_key_valid ,mem_sp_dhkey_invalid 0x77d9 026597 jam sp_calc_standby ,mem_sp_calc 0x77da 026598 rtn : 026600 random_generator: 0x77db 026601 increase -1 ,queue 0x77dc 026602 nrtn positive 0x77dd 026603 random pdata 0x77de 026604 istore 2 ,contw 0x77df 026605 branch random_generator : 026606 compare4: 0x77e0 026607 increase -1 ,queue 0x77e1 026608 nbranch compare4_success ,positive 0x77e2 026609 ifetch 4 ,rega 0x77e3 026610 copy pdata ,temp 0x77e4 026611 ifetch 4 ,regb 0x77e5 026612 iflip temp ,pdata 0x77e6 026613 nbranch compare4_failed ,zero 0x77e7 026614 increase 4 ,rega 0x77e8 026615 increase 4 ,regb 0x77e9 026616 branch compare4 : 026617 compare4_failed: 0x77ea 026618 disable true 0x77eb 026619 rtn : 026620 compare4_success: 0x77ec 026621 enable true 0x77ed 026622 rtn : 026629 simple_pairing_sequence: 0x77ee 026630 set1 mark_ext_patch ,mark 0x77ef 026631 bpatch patch3e_5 ,mem_patch3e 0x77f0 026632 fetch 1 ,mem_sp_flag 0x77f1 026633 rtn blank 0x77f2 026634 jam sp_flag_standby ,mem_sp_flag 0x77f3 026635 fetch 1 ,mem_sp_state 0x77f4 026636 beq sp_stat_key_send ,sp_send_lmp_encapsulated_header 0x77f5 026637 beq sp_stat_commit_send ,sp_send_lmp_simple_pairing_comfirm 0x77f6 026638 beq sp_stat_random_send ,sp_send_lmp_simple_pairing_number 0x77f7 026639 beq sp_stat_confirm_send ,sp_send_lmp_dhkey_check 0x77f8 026640 beq sp_stat_key_generate ,sp_generate_local_key 0x77f9 026641 beq sp_stat_commit_calc ,sp_calculate_commitment 0x77fa 026642 beq sp_stat_confirm_check ,sp_confirm_check 0x77fb 026643 beq sp_stat_confirm_calc ,sp_confirm_calc 0x77fc 026644 beq sp_stat_link_key_calc ,sp_link_key_prarm_push 0x77fd 026646 rtn : 026648 master_simple_paring_sequence: 0x77fe 026649 set1 mark_ext_patch ,mark 0x77ff 026650 bpatch patch3e_6 ,mem_patch3e 0x7800 026651 fetch 1 ,mem_master_sp_flag 0x7801 026652 rtn blank 0x7802 026653 jam sp_flag_standby ,mem_master_sp_flag 0x7803 026654 fetch 1 ,mem_master_sp_state 0x7804 026655 beq sp_master_stat_start_skip ,sp_master_send_io_cap_get 0x7805 026656 beq sp_master_stat_start_done ,sp_master_send_io_cap_send 0x7806 026657 beq sp_stat_key_send ,sp_master_send_lmp_encapsulated_header 0x7807 026658 beq sp_stat_commit_calc ,master_sp_calculate_commitment 0x7808 026659 beq sp_stat_commitment_compare ,sp_master_commitment_compare 0x7809 026660 beq sp_stat_random_send ,sp_master_send_lmp_simple_pairing_number 0x780a 026661 beq sp_stat_confirm_calc ,sp_confirm_calc 0x780b 026662 beq sp_stat_confirm_send ,master_sp_send_lmp_dhkey_check 0x780c 026663 beq sp_stat_confirm_check ,sp_confirm_check 0x780d 026664 beq sp_state_end ,master_sp_sm_end 0x780e 026665 rtn : 026667 master_set_mem_master_sp_flag: 0x780f 026668 jam sp_flag_commit ,mem_master_sp_flag 0x7810 026669 rtn : 026671 master_clear_mem_master_sp_flag: 0x7811 026672 jam sp_flag_standby ,mem_master_sp_flag 0x7812 026673 rtn : 026674 sp_calc_sequence: 0x7813 026675 set1 mark_ext_patch ,mark 0x7814 026676 bpatch patch3e_7 ,mem_patch3e 0x7815 026677 fetch 1 ,mem_sp_calc 0x7816 026678 rtn blank 0x7817 026679 increase 0x80 ,pdata 0x7818 026680 store 1 ,mem_sp_calc 0x7819 026681 rtnbit1 7 0x781a 026682 fetch 1 ,mem_ec_loopc 0x781b 026683 branch sp_calc_sequence_done ,blank 0x781c 026684 branch eckp_calc : 026686 sp_calc_sequence_done: 0x781d 026687 call ecunmapz 0x781e 026688 fetch 1 ,mem_sp_calc 0x781f 026689 beq sp_calc_pubkey ,sp_pubkey_generated 0x7820 026690 beq sp_calc_dhkey ,sp_dhkey_generated 0x7821 026691 rtn : 026694 bn_testbit: 0x7822 026695 and pdata ,7 ,queue 0x7823 026696 rshift3 pdata ,pdata 0x7824 026697 iadd contr ,contr 0x7825 026698 ifetch 1 ,contr 0x7826 026699 qisolate0 pdata 0x7827 026700 rtn : 026703 ec_copy: 0x7828 026704 call memcpy24 0x7829 026705 call memcpy24 0x782a 026706 branch memcpy24 : 026709 bn_eq_zero: 0x782b 026710 ifetch 8 ,contr 0x782c 026711 nrtn blank 0x782d 026712 ifetch 8 ,contr 0x782e 026713 nrtn blank 0x782f 026714 ifetch 8 ,contr 0x7830 026715 rtn : 026719 bn_eq: 0x7831 026720 force 6 ,loopcnt : 026721 bn_eq_0: 0x7832 026722 ifetch 4 ,rega 0x7833 026723 iforce temp 0x7834 026724 ifetch 4 ,regb 0x7835 026725 isub temp ,null 0x7836 026726 nrtn zero 0x7837 026727 increase 4 ,rega 0x7838 026728 increase 4 ,regb 0x7839 026729 loop bn_eq_0 0x783a 026730 rtn : 026733 bn_bigeq: 0x783b 026734 force 6 ,loopcnt 0x783c 026735 increase 20 ,rega 0x783d 026736 increase 20 ,regb : 026737 bn_bigeq_0: 0x783e 026738 ifetch 4 ,regb 0x783f 026739 iforce temp 0x7840 026740 ifetch 4 ,rega 0x7841 026741 isub temp ,pdata 0x7842 026742 nrtn positive 0x7843 026743 nrtn blank 0x7844 026744 increase -4 ,rega 0x7845 026745 increase -4 ,regb 0x7846 026746 loop bn_bigeq_0 0x7847 026747 rtn : 026749 bn_add: 0x7848 026750 force 6 ,loopcnt 0x7849 026751 force 0 ,regc : 026752 bn_add_0: 0x784a 026753 ifetch 4 ,rega 0x784b 026754 iforce temp 0x784c 026755 ifetch 4 ,regb 0x784d 026756 iadd temp ,pdata 0x784e 026757 iadd regc ,pdata 0x784f 026758 istore 4 ,contw 0x7850 026759 isolate1 32 ,pdata 0x7851 026760 setflag true ,0 ,regc 0x7852 026761 increase 4 ,rega 0x7853 026762 increase 4 ,regb 0x7854 026763 loop bn_add_0 0x7855 026764 rtn : 026766 bn_sub: 0x7856 026767 force 6 ,loopcnt 0x7857 026768 force 0 ,regc : 026769 bn_sub_0: 0x7858 026770 ifetch 4 ,regb 0x7859 026771 iforce temp 0x785a 026772 ifetch 4 ,rega 0x785b 026773 isub temp ,pdata 0x785c 026774 isub regc ,pdata 0x785d 026775 istore 4 ,contw 0x785e 026776 isolate1 32 ,pdata 0x785f 026777 setflag true ,0 ,regc 0x7860 026778 increase 4 ,rega 0x7861 026779 increase 4 ,regb 0x7862 026780 loop bn_sub_0 0x7863 026781 rtn : 026783 bn_rshift6: 0x7864 026784 force 6 ,loopcnt 0x7865 026785 increase 20 ,rega : 026786 bn_rshift: 0x7866 026787 force 0 ,regc : 026788 bn_rshift_0: 0x7867 026789 ifetch 4 ,rega 0x7868 026790 isolate1 0 ,pdata 0x7869 026791 setflag true ,1 ,regc 0x786a 026792 rshift pdata ,pdata 0x786b 026793 isolate1 0 ,regc 0x786c 026794 setflag true ,31 ,pdata 0x786d 026795 istore 4 ,rega 0x786e 026796 increase -4 ,rega 0x786f 026797 rshift regc ,regc 0x7870 026798 loop bn_rshift_0 0x7871 026799 rtn : 026801 bn_lshift: 0x7872 026802 force 6 ,loopcnt 0x7873 026803 force 0 ,regc : 026804 bn_lshift_0: 0x7874 026805 ifetch 4 ,rega 0x7875 026806 isolate1 31 ,pdata 0x7876 026807 setflag true ,1 ,regc 0x7877 026808 lshift pdata ,pdata 0x7878 026809 isolate1 0 ,regc 0x7879 026810 setflag true ,0 ,pdata 0x787a 026811 istore 4 ,rega 0x787b 026812 increase 4 ,rega 0x787c 026813 rshift regc ,regc 0x787d 026814 loop bn_lshift_0 0x787e 026815 rtn : 026817 bn_lshiftmod: 0x787f 026818 call bn_lshift : 026819 bn_lshiftmod_ismod: 0x7880 026820 isolate1 0 ,regc 0x7881 026821 branch bn_lshiftmod_0 ,true 0x7882 026822 arg mem_p ,regb 0x7883 026823 copy rega ,regc 0x7884 026824 increase -24 ,rega 0x7885 026825 call bn_bigeq 0x7886 026826 nrtn positive 0x7887 026827 copy regc ,rega : 026828 bn_lshiftmod_0: 0x7888 026829 increase -24 ,rega 0x7889 026830 arg mem_p ,regb 0x788a 026831 copy rega ,contw 0x788b 026832 branch bn_sub : 026835 bn_addmod: 0x788c 026836 call bn_add 0x788d 026837 copy contw ,rega 0x788e 026838 branch bn_lshiftmod_ismod : 026840 bn_submod: 0x788f 026841 call bn_sub 0x7890 026842 isolate0 0 ,regc 0x7891 026843 rtn true 0x7892 026844 arg mem_p ,regb 0x7893 026845 add contw ,-24 ,rega 0x7894 026846 copy rega ,contw 0x7895 026847 branch bn_add : 026850 bn_p192mod: 0x7896 026851 copy contw ,timeup 0x7897 026852 copy rega ,alarm 0x7898 026853 arg mem_tmp2 ,regb 0x7899 026854 copy regb ,contw 0x789a 026855 add rega ,24 ,contr 0x789b 026856 ifetch 8 ,contr 0x789c 026857 istore 8 ,contw 0x789d 026858 istore 8 ,contw 0x789e 026859 force 0 ,pdata 0x789f 026860 istore 8 ,contw 0x78a0 026861 copy timeup ,contw 0x78a1 026862 call bn_addmod 0x78a2 026863 arg mem_tmp2 ,regb 0x78a3 026864 copy regb ,contw 0x78a4 026865 force 0 ,pdata 0x78a5 026866 istore 8 ,contw 0x78a6 026867 add alarm ,32 ,contr 0x78a7 026868 ifetch 8 ,contr 0x78a8 026869 istore 8 ,contw 0x78a9 026870 istore 8 ,contw 0x78aa 026871 copy timeup ,rega 0x78ab 026872 copy rega ,contw 0x78ac 026873 call bn_addmod 0x78ad 026874 arg mem_tmp2 ,regb 0x78ae 026875 copy regb ,contw 0x78af 026876 add alarm ,40 ,contr 0x78b0 026877 ifetch 8 ,contr 0x78b1 026878 istore 8 ,contw 0x78b2 026879 istore 8 ,contw 0x78b3 026880 istore 8 ,contw 0x78b4 026881 copy timeup ,rega 0x78b5 026882 copy rega ,contw 0x78b6 026883 branch bn_addmod : 026886 bn_load: 0x78b7 026887 force 6 ,loopcnt : 026888 bn_load_0: 0x78b8 026889 ifetch 4 ,contr 0x78b9 026890 iforce regext 0x78ba 026891 increase 1 ,regext_index 0x78bb 026892 loop bn_load_0 0x78bc 026893 rtn : 026897 bn_mulmod: 0x78bd 026898 copy contw ,timeup 0x78be 026899 arg mem_tmp1 ,contw 0x78bf 026900 call bn_zero 0x78c0 026901 arg mem_tmp1 ,contw 0x78c1 026902 copy rega ,contr 0x78c2 026903 force 0 ,regext_index 0x78c3 026904 call bn_load 0x78c4 026905 copy regb ,contr 0x78c5 026906 call bn_load 0x78c6 026907 force 0 ,regb : 026908 bn_mulmod_1: 0x78c7 026909 force 0 ,temp 0x78c8 026910 force 6 ,regc : 026911 bn_mulmod_0: 0x78c9 026912 ifetch 4 ,contw 0x78ca 026913 iforce rega 0x78cb 026914 copy regb ,regext_index 0x78cc 026915 deposit regext 0x78cd 026916 copy regc ,regext_index 0x78ce 026917 imul32 regext ,pdata 0x78cf 026918 iadd rega ,pdata 0x78d0 026919 iadd temp ,pdata 0x78d1 026920 istore 4 ,contw 0x78d2 026921 rshift32 pdata ,temp 0x78d3 026922 increase 1 ,regc 0x78d4 026923 compare 12 ,regc ,0xff 0x78d5 026924 nbranch bn_mulmod_0 ,true 0x78d6 026925 deposit temp 0x78d7 026926 istore 4 ,contw 0x78d8 026927 increase -24 ,contw 0x78d9 026928 increase 1 ,regb 0x78da 026929 compare 6 ,regb ,0xff 0x78db 026930 nbranch bn_mulmod_1 ,true 0x78dc 026931 arg mem_tmp1 ,rega 0x78dd 026932 copy timeup ,contw 0x78de 026933 branch bn_p192mod : 026936 bn_sqrmod: 0x78df 026937 copy rega ,regb 0x78e0 026938 branch bn_mulmod : 026940 bn_rshifteven: 0x78e1 026941 copy rega ,alarm : 026942 bn_rshifteven_1: 0x78e2 026943 copy alarm ,rega 0x78e3 026944 ifetch 1 ,rega 0x78e4 026945 isolate1 0 ,pdata 0x78e5 026946 rtn true 0x78e6 026947 call bn_rshift6 0x78e7 026948 ifetch 1 ,regb 0x78e8 026949 isolate0 0 ,pdata 0x78e9 026950 branch bn_rshifteven_0 ,true 0x78ea 026951 arg mem_p ,rega 0x78eb 026952 copy regb ,contw 0x78ec 026953 call bn_add 0x78ed 026954 ifetch 1 ,regb 0x78ee 026955 iadd regc ,pdata 0x78ef 026956 istore 1 ,regb 0x78f0 026957 increase -24 ,regb : 026958 bn_rshifteven_0: 0x78f1 026959 add regb ,24 ,rega 0x78f2 026960 force 7 ,loopcnt 0x78f3 026961 call bn_rshift 0x78f4 026962 branch bn_rshifteven_1 : 026965 bn_invmod: 0x78f5 026966 copy contw ,timeup 0x78f6 026967 arg mem_tmp0 ,contw 0x78f7 026968 call bn_zero 0x78f8 026969 force 0 ,pdata 0x78f9 026970 store 4 ,mem_tmp5 0x78fa 026971 store 4 ,mem_t2 0x78fb 026972 jam 1 ,mem_tmp0 0x78fc 026973 arg mem_tmp1 ,contw 0x78fd 026974 call bn_zero 0x78fe 026975 arg mem_p ,contr 0x78ff 026976 arg mem_tmp2 ,contw 0x7900 026977 call memcpy24 0x7901 026978 copy rega ,contr 0x7902 026979 arg mem_tmp3 ,contw 0x7903 026980 call memcpy24 : 026981 bn_invmod_2: 0x7904 026982 arg mem_tmp3 ,contr 0x7905 026983 call bn_eq_zero 0x7906 026984 branch bn_invmod_0 ,blank 0x7907 026985 arg mem_tmp3 ,rega 0x7908 026986 arg mem_tmp0 ,regb 0x7909 026987 call bn_rshifteven 0x790a 026989 arg mem_tmp2 ,rega 0x790b 026990 arg mem_tmp1 ,regb 0x790c 026991 call bn_rshifteven 0x790d 026992 arg mem_tmp3 ,rega 0x790e 026993 arg mem_tmp2 ,regb 0x790f 026994 call bn_bigeq 0x7910 026995 branch bn_invmod_1 ,positive 0x7911 026996 arg mem_tmp2 ,rega 0x7912 026997 arg mem_tmp3 ,regb 0x7913 026998 copy rega ,contw 0x7914 026999 call bn_sub 0x7915 027000 arg mem_tmp0 ,rega 0x7916 027001 arg mem_tmp1 ,regb 0x7917 027002 copy regb ,contw 0x7918 027003 call bn_add 0x7919 027004 ifetch 1 ,rega 0x791a 027005 iadd regc ,regc 0x791b 027006 ifetch 1 ,regb 0x791c 027007 iadd regc ,pdata 0x791d 027008 istore 1 ,regb 0x791e 027009 branch bn_invmod_2 : 027010 bn_invmod_1: 0x791f 027011 arg mem_tmp3 ,rega 0x7920 027012 arg mem_tmp2 ,regb 0x7921 027013 copy rega ,contw 0x7922 027014 call bn_sub 0x7923 027015 arg mem_tmp1 ,rega 0x7924 027016 arg mem_tmp0 ,regb 0x7925 027017 copy regb ,contw 0x7926 027018 call bn_add 0x7927 027019 ifetch 1 ,rega 0x7928 027020 iadd regc ,regc 0x7929 027021 ifetch 1 ,regb 0x792a 027022 iadd regc ,pdata 0x792b 027023 istore 1 ,regb 0x792c 027024 branch bn_invmod_2 : 027025 bn_invmod_0: 0x792d 027026 arg mem_tmp0 ,contw 0x792e 027027 call bn_zero 0x792f 027028 fetch 1 ,mem_tmp5 0x7930 027029 store 1 ,mem_tmp0 0x7931 027030 store 1 ,mem_tmp0a 0x7932 027031 arg mem_tmp0 ,rega 0x7933 027032 arg mem_tmp1 ,regb 0x7934 027033 copy regb ,contw 0x7935 027034 call bn_addmod 0x7936 027035 arg mem_p ,rega 0x7937 027036 arg mem_tmp1 ,regb 0x7938 027037 copy timeup ,contw 0x7939 027038 branch bn_submod : 027043 ecdbl: 0x793a 027044 arg mem_cz ,rega 0x793b 027045 arg mem_t2 ,contw 0x793c 027046 call bn_sqrmod 0x793d 027047 arg mem_t2 ,rega 0x793e 027048 arg mem_t3 ,contw 0x793f 027049 call bn_sqrmod 0x7940 027050 arg mem_a ,rega 0x7941 027051 arg mem_t3 ,regb 0x7942 027052 arg mem_t3 ,contw 0x7943 027053 call bn_mulmod 0x7944 027054 arg mem_cx ,rega 0x7945 027055 arg mem_t2 ,contw 0x7946 027056 call bn_sqrmod 0x7947 027057 arg mem_t2 ,contr 0x7948 027058 arg mem_t1 ,contw 0x7949 027059 call memcpy24 0x794a 027060 arg mem_t1 ,rega 0x794b 027061 call bn_lshiftmod 0x794c 027062 arg mem_t2 ,rega 0x794d 027063 arg mem_t1 ,regb 0x794e 027064 arg mem_t2 ,contw 0x794f 027065 call bn_addmod 0x7950 027066 arg mem_t2 ,rega 0x7951 027067 arg mem_t3 ,regb 0x7952 027068 arg mem_t2 ,contw 0x7953 027069 call bn_addmod 0x7954 027070 arg mem_cx ,contr 0x7955 027071 arg mem_t1 ,contw 0x7956 027072 call memcpy24 0x7957 027073 arg mem_cy ,rega 0x7958 027074 arg mem_t3 ,contw 0x7959 027075 call bn_sqrmod 0x795a 027076 arg mem_t1 ,rega 0x795b 027077 call bn_lshiftmod 0x795c 027078 arg mem_t1 ,rega 0x795d 027079 call bn_lshiftmod 0x795e 027080 arg mem_t1 ,rega 0x795f 027081 arg mem_t3 ,regb 0x7960 027082 arg mem_t1 ,contw 0x7961 027083 call bn_mulmod 0x7962 027084 arg mem_t3 ,rega 0x7963 027085 arg mem_t0 ,contw 0x7964 027086 call bn_sqrmod 0x7965 027087 arg mem_t0 ,rega 0x7966 027088 call bn_lshiftmod 0x7967 027089 arg mem_t0 ,rega 0x7968 027090 call bn_lshiftmod 0x7969 027091 arg mem_t0 ,rega 0x796a 027092 call bn_lshiftmod 0x796b 027093 arg mem_cy ,contr 0x796c 027094 arg mem_t3 ,contw 0x796d 027095 call memcpy24 0x796e 027096 arg mem_t3 ,rega 0x796f 027097 call bn_lshiftmod 0x7970 027098 arg mem_t3 ,rega 0x7971 027099 arg mem_cz ,regb 0x7972 027100 arg mem_cz ,contw 0x7973 027101 call bn_mulmod 0x7974 027102 arg mem_t2 ,rega 0x7975 027103 arg mem_t3 ,contw 0x7976 027104 call bn_sqrmod 0x7977 027105 arg mem_t3 ,rega 0x7978 027106 arg mem_t1 ,regb 0x7979 027107 arg mem_t3 ,contw 0x797a 027108 call bn_submod 0x797b 027109 arg mem_t3 ,rega 0x797c 027110 arg mem_t1 ,regb 0x797d 027111 arg mem_cx ,contw 0x797e 027112 call bn_submod 0x797f 027113 arg mem_t1 ,rega 0x7980 027114 arg mem_cx ,regb 0x7981 027115 arg mem_t3 ,contw 0x7982 027116 call bn_submod 0x7983 027117 arg mem_t3 ,rega 0x7984 027118 arg mem_t2 ,regb 0x7985 027119 arg mem_t3 ,contw 0x7986 027120 call bn_mulmod 0x7987 027121 arg mem_t3 ,rega 0x7988 027122 arg mem_t0 ,regb 0x7989 027123 arg mem_cy ,contw 0x798a 027124 branch bn_submod : 027128 ecadd: 0x798b 027129 arg mem_az ,rega 0x798c 027130 arg mem_t7 ,contw 0x798d 027131 call bn_sqrmod 0x798e 027132 arg mem_cx ,rega 0x798f 027133 arg mem_t7 ,regb 0x7990 027134 arg mem_t0 ,contw 0x7991 027135 call bn_mulmod 0x7992 027136 arg mem_az ,rega 0x7993 027137 arg mem_t7 ,regb 0x7994 027138 arg mem_t7 ,contw 0x7995 027139 call bn_mulmod 0x7996 027140 arg mem_cy ,rega 0x7997 027141 arg mem_t7 ,regb 0x7998 027142 arg mem_t1 ,contw 0x7999 027143 call bn_mulmod 0x799a 027144 arg mem_cz ,rega 0x799b 027145 arg mem_t7 ,contw 0x799c 027146 call bn_sqrmod 0x799d 027147 arg mem_ax ,rega 0x799e 027148 arg mem_t7 ,regb 0x799f 027149 arg mem_t2 ,contw 0x79a0 027150 call bn_mulmod 0x79a1 027151 arg mem_cz ,rega 0x79a2 027152 arg mem_t7 ,regb 0x79a3 027153 arg mem_t7 ,contw 0x79a4 027154 call bn_mulmod 0x79a5 027155 arg mem_ay ,rega 0x79a6 027156 arg mem_t7 ,regb 0x79a7 027157 arg mem_t3 ,contw 0x79a8 027158 call bn_mulmod 0x79a9 027159 arg mem_t0 ,rega 0x79aa 027160 arg mem_t2 ,regb 0x79ab 027161 arg mem_t7 ,contw 0x79ac 027162 call bn_submod 0x79ad 027163 arg mem_t0 ,rega 0x79ae 027164 arg mem_t2 ,regb 0x79af 027165 arg mem_t0 ,contw 0x79b0 027166 call bn_addmod 0x79b1 027167 arg mem_t1 ,rega 0x79b2 027168 arg mem_t3 ,regb 0x79b3 027169 arg mem_t2 ,contw 0x79b4 027170 call bn_submod 0x79b5 027171 arg mem_t1 ,rega 0x79b6 027172 arg mem_t3 ,regb 0x79b7 027173 arg mem_t1 ,contw 0x79b8 027174 call bn_addmod 0x79b9 027175 arg mem_t1 ,rega 0x79ba 027176 arg mem_t7 ,regb 0x79bb 027177 arg mem_t1 ,contw 0x79bc 027178 call bn_mulmod 0x79bd 027179 arg mem_cz ,rega 0x79be 027180 arg mem_az ,regb 0x79bf 027181 arg mem_t3 ,contw 0x79c0 027182 call bn_mulmod 0x79c1 027183 arg mem_t3 ,rega 0x79c2 027184 arg mem_t7 ,regb 0x79c3 027185 arg mem_cz ,contw 0x79c4 027186 call bn_mulmod 0x79c5 027187 arg mem_t7 ,rega 0x79c6 027188 arg mem_t7 ,contw 0x79c7 027189 call bn_sqrmod 0x79c8 027190 arg mem_t7 ,rega 0x79c9 027191 arg mem_t0 ,regb 0x79ca 027192 arg mem_t3 ,contw 0x79cb 027193 call bn_mulmod 0x79cc 027194 arg mem_t7 ,rega 0x79cd 027195 arg mem_t1 ,regb 0x79ce 027196 arg mem_t1 ,contw 0x79cf 027197 call bn_mulmod 0x79d0 027198 arg mem_t2 ,rega 0x79d1 027199 arg mem_cx ,contw 0x79d2 027200 call bn_sqrmod 0x79d3 027201 arg mem_cx ,rega 0x79d4 027202 arg mem_t3 ,regb 0x79d5 027203 arg mem_cx ,contw 0x79d6 027204 call bn_submod 0x79d7 027205 arg mem_cx ,contr 0x79d8 027206 arg mem_t7 ,contw 0x79d9 027207 call memcpy24 0x79da 027208 arg mem_t7 ,rega 0x79db 027209 call bn_lshiftmod 0x79dc 027210 arg mem_t3 ,rega 0x79dd 027211 arg mem_t7 ,regb 0x79de 027212 arg mem_t3 ,contw 0x79df 027213 call bn_submod 0x79e0 027214 arg mem_t3 ,rega 0x79e1 027215 arg mem_t2 ,regb 0x79e2 027216 arg mem_t2 ,contw 0x79e3 027217 call bn_mulmod 0x79e4 027218 arg mem_t2 ,rega 0x79e5 027219 arg mem_t1 ,regb 0x79e6 027220 arg mem_cy ,contw 0x79e7 027221 call bn_submod 0x79e8 027222 arg mem_cy ,rega 0x79e9 027223 arg mem_p ,regb 0x79ea 027224 arg mem_cy ,contw 0x79eb 027225 force 0 ,regc 0x79ec 027226 fetch 1 ,mem_cy 0x79ed 027227 isolate1 0 ,pdata 0x79ee 027228 call bn_add ,true 0x79ef 027229 copy regc ,alarm 0x79f0 027230 arg mem_cy ,rega 0x79f1 027231 call bn_rshift6 0x79f2 027232 fetch 1 ,mem_cy5 0x79f3 027233 isolate1 0 ,alarm 0x79f4 027234 setflag true ,7 ,pdata 0x79f5 027235 store 1 ,mem_cy5 0x79f6 027236 rtn : 027239 eckp: 0x79f7 027240 jam 192 ,mem_ec_loopc 0x79f8 027241 jam 1 ,mem_ec_infinite : 027242 eckp_0: 0x79f9 027243 fetch 1 ,mem_ec_loopc 0x79fa 027244 increase -1 ,pdata 0x79fb 027245 nrtn positive 0x79fc 027246 store 1 ,mem_ec_loopc 0x79fd 027247 fetch 1 ,mem_ec_infinite 0x79fe 027248 call ecdbl ,blank 0x79ff 027249 fetch 1 ,mem_ec_loopc 0x7a00 027250 arg mem_k ,contr 0x7a01 027251 call bn_testbit 0x7a02 027252 branch eckp_0 ,true 0x7a03 027253 fetch 1 ,mem_ec_infinite 0x7a04 027254 nbranch eckp_1 ,blank 0x7a05 027255 call ecadd 0x7a06 027256 branch eckp_0 : 027257 eckp_1: 0x7a07 027258 jam 0 ,mem_ec_infinite 0x7a08 027259 arg mem_ax ,contr 0x7a09 027260 arg mem_cx ,contw 0x7a0a 027261 call ec_copy 0x7a0b 027262 branch eckp_0 : 027265 ecunmapz: 0x7a0c 027266 arg mem_cz ,rega 0x7a0d 027267 arg mem_t3 ,contw 0x7a0e 027268 call bn_invmod 0x7a0f 027269 arg mem_t3 ,rega 0x7a10 027270 arg mem_t1 ,contw 0x7a11 027271 call bn_sqrmod 0x7a12 027272 arg mem_cx ,rega 0x7a13 027273 arg mem_t1 ,regb 0x7a14 027274 arg mem_bx ,contw 0x7a15 027275 call bn_mulmod 0x7a16 027276 arg mem_t3 ,rega 0x7a17 027277 arg mem_t1 ,regb 0x7a18 027278 arg mem_t2 ,contw 0x7a19 027279 call bn_mulmod 0x7a1a 027280 arg mem_cy ,rega 0x7a1b 027281 arg mem_t2 ,regb 0x7a1c 027282 arg mem_by ,contw 0x7a1d 027283 branch bn_mulmod : 027286 sha_endian_swap: 0x7a1e 027287 force 16 ,loopcnt : 027288 sha_endian_swap2: 0x7a1f 027289 ifetch 4 ,contr 0x7a20 027290 force 4 ,rega 0x7a21 027291 increase 3 ,contw : 027292 sha_endian_loop: 0x7a22 027293 istore 1 ,contw 0x7a23 027294 rshift8 pdata ,pdata 0x7a24 027295 increase -2 ,contw 0x7a25 027296 increase -1 ,rega 0x7a26 027297 nbranch sha_endian_loop ,zero 0x7a27 027298 increase 5 ,contw 0x7a28 027299 loop sha_endian_swap2 0x7a29 027300 rtn : 027303 sha_getw: 0x7a2a 027304 lshift2 queue ,pdata 0x7a2b 027305 iadd timeup ,contr 0x7a2c 027306 ifetch 4 ,contr 0x7a2d 027307 rtn : 027309 sha_r: 0x7a2e 027310 force 16 ,alarm 0x7a2f 027311 arg memdat ,timeup : 027312 sha_r_loop: 0x7a30 027313 add alarm ,-7 ,queue 0x7a31 027314 call sha_getw 0x7a32 027315 iforce temp 0x7a33 027316 add alarm ,-16 ,queue 0x7a34 027317 call sha_getw 0x7a35 027318 iadd temp ,temp 0x7a36 027319 add alarm ,-2 ,queue 0x7a37 027320 call sha_getw 0x7a38 027321 shasx pdata ,1 ,pdata 0x7a39 027322 iadd temp ,temp 0x7a3a 027323 add alarm ,-15 ,queue 0x7a3b 027324 call sha_getw 0x7a3c 027325 shasx pdata ,0 ,pdata 0x7a3d 027326 iadd temp ,temp 0x7a3e 027327 lshift2 alarm ,pdata 0x7a3f 027328 iadd timeup ,contw 0x7a40 027329 istoret 4 ,contw 0x7a41 027330 increase 1 ,alarm 0x7a42 027331 compare 64 ,alarm ,0xff 0x7a43 027332 nbranch sha_r_loop ,true 0x7a44 027333 rtn : 027336 sha_init: 0x7a45 027337 arg memh0 ,contr 0x7a46 027338 force 7 ,regext_index : 027339 sha_init_0: 0x7a47 027340 ifetch 4 ,contr 0x7a48 027341 iforce regext 0x7a49 027342 increase -1 ,regext_index 0x7a4a 027343 branch sha_init_0 ,positive 0x7a4b 027344 rtn : 027346 sha: 0x7a4c 027347 set1 mark_ext_patch ,mark 0x7a4d 027348 bpatch patch3f_0 ,mem_patch3f 0x7a4e 027349 call sha_r 0x7a4f 027350 arg memahbak ,contw 0x7a50 027351 force 0 ,regext_index : 027352 sha_0: 0x7a51 027353 deposit regext 0x7a52 027354 istore 4 ,contw 0x7a53 027355 increase 1 ,regext_index 0x7a54 027356 compare 8 ,regext_index ,0xff 0x7a55 027357 nbranch sha_0 ,true 0x7a56 027358 call enable_authrom 0x7a57 027359 arg memk ,timeup 0x7a58 027360 arg memdat ,alarm 0x7a59 027361 force 64 ,loopcnt : 027362 sha_loop: 0x7a5a 027363 ifetcht 4 ,alarm 0x7a5b 027364 ifetch 4 ,timeup 0x7a5c 027365 increase 4 ,timeup 0x7a5d 027366 increase 4 ,alarm 0x7a5e 027367 iadd temp ,pdata 0x7a5f 027368 force 7 ,regext_index 0x7a60 027369 iadd regext ,temp 0x7a61 027370 force 4 ,regext_index 0x7a62 027371 shasx regext ,3 ,pdata 0x7a63 027372 iadd temp ,temp 0x7a64 027373 force 5 ,regext_index 0x7a65 027374 deposit regext 0x7a66 027375 force 6 ,regext_index 0x7a67 027376 ixor regext ,pdata 0x7a68 027377 force 4 ,regext_index 0x7a69 027378 iand regext ,pdata 0x7a6a 027379 force 6 ,regext_index 0x7a6b 027380 ixor regext ,pdata 0x7a6c 027381 iadd temp ,temp 0x7a6d 027382 force 7 ,regext_index 0x7a6e 027383 copy temp ,regext 0x7a6f 027384 force 3 ,regext_index 0x7a70 027385 deposit regext 0x7a71 027386 iadd temp ,regext 0x7a72 027387 force 0 ,regext_index 0x7a73 027388 deposit regext 0x7a74 027389 force 1 ,regext_index 0x7a75 027390 iand regext ,temp 0x7a76 027391 ior regext ,pdata 0x7a77 027392 force 2 ,regext_index 0x7a78 027393 iand regext ,pdata 0x7a79 027394 ior temp ,temp 0x7a7a 027395 force 0 ,regext_index 0x7a7b 027396 shasx regext ,2 ,pdata 0x7a7c 027397 iadd temp ,pdata 0x7a7d 027398 force 7 ,regext_index 0x7a7e 027399 iadd regext ,regext 0x7a7f 027400 regexrot 0x7a80 027401 loop sha_loop 0x7a81 027402 arg memahbak ,contr 0x7a82 027403 force 0 ,regext_index : 027404 sha_1: 0x7a83 027405 ifetch 4 ,contr 0x7a84 027406 iadd regext ,regext 0x7a85 027407 increase 1 ,regext_index 0x7a86 027408 compare 8 ,regext_index ,0xff 0x7a87 027409 nbranch sha_1 ,true 0x7a88 027410 branch disable_authrom : 027413 sha_result: 0x7a89 027414 arg memresult ,contw 0x7a8a 027415 force 7 ,regext_index : 027416 sha_regext_save: 0x7a8b 027417 deposit regext 0x7a8c 027418 istore 4 ,contw 0x7a8d 027419 increase -1 ,regext_index 0x7a8e 027420 branch sha_regext_save ,positive 0x7a8f 027421 rtn : 027423 pad_xor: 0x7a90 027425 arg memdat ,contw 0x7a91 027426 increase -4 ,contr 0x7a92 027427 sub loopcnt ,16 ,rega : 027428 pad_xor_0: 0x7a93 027429 ifetch 4 ,contr 0x7a94 027430 ixor temp ,pdata 0x7a95 027431 istore 4 ,contw 0x7a96 027432 increase -8 ,contr 0x7a97 027433 loop pad_xor_0 0x7a98 027434 copy rega ,loopcnt 0x7a99 027435 deposit temp : 027436 pad_xor_1: 0x7a9a 027437 istore 4 ,contw 0x7a9b 027438 loop pad_xor_1 0x7a9c 027439 rtn : 027441 g_noninit: 0x7a9d 027442 arg mem_sp_pubkey_remote_x_end ,contr 0x7a9e 027443 arg memdat ,contw 0x7a9f 027444 force 6 ,loopcnt 0x7aa0 027445 call memcpy_dword_swap 0x7aa1 027446 arg mem_sp_pubkey_local_x_end ,contr 0x7aa2 027447 force 6 ,loopcnt 0x7aa3 027448 call memcpy_dword_swap 0x7aa4 027449 arg mem_sp_random_remote_end ,contr 0x7aa5 027450 call memcpy_dword_swap4 0x7aa6 027451 call sha_init 0x7aa7 027452 call sha 0x7aa8 027453 arg mem_sp_random_local_end ,contr 0x7aa9 027454 arg memdat ,contw 0x7aaa 027455 branch g_common : 027457 g_init: 0x7aab 027458 arg mem_sp_pubkey_local_x_end ,contr 0x7aac 027459 arg memdat ,contw 0x7aad 027460 force 6 ,loopcnt 0x7aae 027461 call memcpy_dword_swap 0x7aaf 027462 arg mem_sp_pubkey_remote_x_end ,contr 0x7ab0 027463 force 6 ,loopcnt 0x7ab1 027464 call memcpy_dword_swap 0x7ab2 027465 arg mem_sp_random_local_end ,contr 0x7ab3 027466 call memcpy_dword_swap4 0x7ab4 027467 call sha_init 0x7ab5 027468 call sha 0x7ab6 027469 arg mem_sp_random_remote_end ,contr 0x7ab7 027470 arg memdat ,contw : 027471 g_common: 0x7ab8 027472 call memcpy_dword_swap4 0x7ab9 027473 setarg 0x800000 0x7aba 027474 lshift8 pdata ,pdata 0x7abb 027475 istore 4 ,contw 0x7abc 027476 force 5 ,loopcnt 0x7abd 027477 call memset0 0x7abe 027478 setarg 640 0x7abf 027479 istore 4 ,contw 0x7ac0 027480 call sha 0x7ac1 027482 fetch 4 ,memresult 0x7ac2 027484 arg 1000 ,rega 0x7ac3 027485 idiv rega 0x7ac4 027486 call wait_div_end 0x7ac5 027487 remainder pdata 0x7ac6 027488 store 4 ,mem_sp_gkey 0x7ac7 027489 quotient pdata 0x7ac8 027490 arg 1000 ,rega 0x7ac9 027491 idiv rega 0x7aca 027492 call wait_div_end 0x7acb 027493 remainder pdata 0x7acc 027494 arg 1000 ,rega 0x7acd 027495 imul32 rega ,pdata 0x7ace 027496 fetcht 4 ,mem_sp_gkey 0x7acf 027497 iadd temp ,pdata 0x7ad0 027498 store 4 ,mem_sp_gkey 0x7ad1 027499 rtn : 027501 function_f1: 0x7ad2 027502 setarg 0x363636 0x7ad3 027503 lshift8 pdata ,temp 0x7ad4 027504 or_into 0x36 ,temp 0x7ad5 027505 fetch 2 ,mem_sp_prarm_stack 0x7ad6 027506 copy pdata ,contr 0x7ad7 027507 force 4 ,loopcnt 0x7ad8 027508 call pad_xor 0x7ad9 027509 call sha_init 0x7ada 027510 call sha 0x7adb 027511 fetch 2 ,mem_sp_prarm_stack + 2 0x7adc 027512 copy pdata ,contr 0x7add 027513 arg memdat ,contw 0x7ade 027514 force 6 ,loopcnt 0x7adf 027515 call memcpy_dword_swap 0x7ae0 027516 fetch 2 ,mem_sp_prarm_stack + 4 0x7ae1 027517 copy pdata ,contr 0x7ae2 027518 force 6 ,loopcnt 0x7ae3 027519 call memcpy_dword_swap 0x7ae4 027520 setarg 0x800000 0x7ae5 027521 istore 3 ,contw 0x7ae6 027522 force 0 ,pdata 0x7ae7 027523 istore 1 ,contw 0x7ae8 027524 force 0 ,pdata 0x7ae9 027525 istore 8 ,contw 0x7aea 027526 setarg 0x0388 0x7aeb 027527 istore 4 ,contw 0x7aec 027528 call sha 0x7aed 027529 call sha_result 0x7aee 027530 arg memresult ,contr 0x7aef 027531 arg memahsave ,contw 0x7af0 027532 call memcpy32 0x7af1 027534 setarg 0x5c5c5c 0x7af2 027535 lshift8 pdata ,temp 0x7af3 027536 or_into 0x5c ,temp 0x7af4 027537 fetch 2 ,mem_sp_prarm_stack 0x7af5 027538 copy pdata ,contr 0x7af6 027539 force 4 ,loopcnt 0x7af7 027540 call pad_xor 0x7af8 027541 call sha_init 0x7af9 027542 call sha 0x7afa 027543 arg memahsave_end ,contr 0x7afb 027544 arg memdat ,contw 0x7afc 027545 force 8 ,loopcnt 0x7afd 027546 call memcpy_dword_swap 0x7afe 027547 setarg 0x800000 0x7aff 027548 lshift8 pdata ,pdata 0x7b00 027549 istore 4 ,contw 0x7b01 027550 call bn_zero 0x7b02 027551 setarg 0x0300 0x7b03 027552 istore 4 ,contw 0x7b04 027553 call sha 0x7b05 027554 branch sha_result : 027557 function_f2: 0x7b06 027558 setarg 0x363636 0x7b07 027559 lshift8 pdata ,temp 0x7b08 027560 or_into 0x36 ,temp 0x7b09 027561 arg mem_sp_dhkey_end ,contr 0x7b0a 027562 force 6 ,loopcnt 0x7b0b 027563 call pad_xor 0x7b0c 027564 call sha_init 0x7b0d 027565 call sha 0x7b0e 027566 fetch 2 ,mem_sp_prarm_stack + 12 0x7b0f 027567 copy pdata ,contr 0x7b10 027568 arg memdat ,contw 0x7b11 027569 call memcpy_dword_swap4 0x7b12 027570 fetch 2 ,mem_sp_prarm_stack + 14 0x7b13 027571 copy pdata ,contr 0x7b14 027572 call memcpy_dword_swap4 0x7b15 027574 setarg 0x62746c 0x7b16 027575 lshift8 pdata ,pdata 0x7b17 027576 or_into 0x6b ,pdata 0x7b18 027577 istore 4 ,contw 0x7b19 027578 arg mem_addr_value_end ,contr 0x7b1a 027579 force 3 ,loopcnt 0x7b1b 027580 call memcpy_dword_swap 0x7b1c 027582 setarg 0x800000 0x7b1d 027583 lshift8 pdata ,pdata 0x7b1e 027584 istore 4 ,contw 0x7b1f 027585 force 0 ,pdata 0x7b20 027586 istore 8 ,contw 0x7b21 027587 setarg 0x0380 0x7b22 027588 istore 4 ,contw 0x7b23 027589 call sha 0x7b24 027591 call sha_result 0x7b25 027592 arg memresult ,contr 0x7b26 027593 arg memahsave ,contw 0x7b27 027594 call memcpy32 0x7b28 027596 setarg 0x5c5c5c 0x7b29 027597 lshift8 pdata ,temp 0x7b2a 027598 or_into 0x5c ,temp 0x7b2b 027599 arg mem_sp_dhkey_end ,contr 0x7b2c 027600 force 6 ,loopcnt 0x7b2d 027601 call pad_xor 0x7b2e 027602 call sha_init 0x7b2f 027603 call sha 0x7b30 027604 arg memahsave_end ,contr 0x7b31 027605 arg memdat ,contw 0x7b32 027606 force 8 ,loopcnt 0x7b33 027607 call memcpy_dword_swap 0x7b34 027608 setarg 0x800000 0x7b35 027609 lshift8 pdata ,pdata 0x7b36 027610 istore 4 ,contw 0x7b37 027611 call bn_zero 0x7b38 027612 setarg 0x0300 0x7b39 027613 istore 4 ,contw 0x7b3a 027614 call sha 0x7b3b 027615 branch sha_result : 027618 function_f3a: 0x7b3c 027619 setarg 0x363636 0x7b3d 027620 lshift8 pdata ,temp 0x7b3e 027621 or_into 0x36 ,temp 0x7b3f 027622 arg mem_sp_dhkey_end ,contr 0x7b40 027623 force 6 ,loopcnt 0x7b41 027624 call pad_xor 0x7b42 027625 call sha_init 0x7b43 027626 call sha 0x7b44 027627 arg mem_sp_random_remote_end ,contr 0x7b45 027628 arg memdat ,contw 0x7b46 027629 call memcpy_dword_swap4 0x7b47 027630 arg mem_sp_random_local_end ,contr 0x7b48 027631 call memcpy_dword_swap4 0x7b49 027632 branch function_f3b_common : 027634 function_f3b: 0x7b4a 027635 setarg 0x363636 0x7b4b 027636 lshift8 pdata ,temp 0x7b4c 027637 or_into 0x36 ,temp 0x7b4d 027638 arg mem_sp_dhkey_end ,contr 0x7b4e 027639 force 6 ,loopcnt 0x7b4f 027640 call pad_xor 0x7b50 027641 call sha_init 0x7b51 027642 call sha 0x7b52 027644 arg mem_sp_random_local_end ,contr 0x7b53 027645 arg memdat ,contw 0x7b54 027646 call memcpy_dword_swap4 0x7b55 027647 arg mem_sp_random_remote_end ,contr 0x7b56 027648 call memcpy_dword_swap4 : 027649 function_f3b_common: 0x7b57 027650 setarg 0x0 0x7b58 027651 istore 8 ,contw 0x7b59 027652 istore 8 ,contw 0x7b5a 027654 copy contw ,temp 0x7b5b 027655 jam 0x80 ,mem_addr_padding 0x7b5c 027656 copy temp ,contw 0x7b5d 027657 arg mem_addr_iocap_end ,contr 0x7b5e 027658 call memcpy_dword_swap4 0x7b5f 027660 call sha 0x7b60 027662 arg memdat ,contw 0x7b61 027663 force 7 ,loopcnt 0x7b62 027664 call memset0 0x7b63 027665 istore 4 ,contw 0x7b64 027666 setarg 0x03F8 0x7b65 027667 istore 4 ,contw 0x7b66 027668 call sha 0x7b67 027669 call sha_result 0x7b68 027671 arg memresult ,contr 0x7b69 027672 arg memahsave ,contw 0x7b6a 027673 call memcpy32 0x7b6b 027675 setarg 0x5c5c5c 0x7b6c 027676 lshift8 pdata ,temp 0x7b6d 027677 or_into 0x5c ,temp 0x7b6e 027678 arg mem_sp_dhkey_end ,contr 0x7b6f 027679 force 6 ,loopcnt 0x7b70 027680 call pad_xor 0x7b71 027681 call sha_init 0x7b72 027682 call sha 0x7b73 027683 arg memahsave_end ,contr 0x7b74 027684 arg memdat ,contw 0x7b75 027685 force 8 ,loopcnt 0x7b76 027686 call memcpy_dword_swap 0x7b77 027687 setarg 0x800000 0x7b78 027688 lshift8 pdata ,pdata 0x7b79 027689 istore 4 ,contw 0x7b7a 027690 call bn_zero 0x7b7b 027691 setarg 0x0300 0x7b7c 027692 istore 4 ,contw 0x7b7d 027693 call sha 0x7b7e 027694 branch sha_result : 027701 eckp_calc_init: 0x7b7f 027702 jam 192 ,mem_ec_loopc : 027703 eckp_calc_init_1: 0x7b80 027704 fetch 1 ,mem_ec_loopc 0x7b81 027705 rtn blank 0x7b82 027706 increase -1 ,pdata 0x7b83 027707 store 1 ,mem_ec_loopc 0x7b84 027708 arg mem_k ,contr 0x7b85 027709 call bn_testbit 0x7b86 027710 branch eckp_calc_init_1 ,true 0x7b87 027711 arg mem_ax ,contr 0x7b88 027712 arg mem_cx ,contw 0x7b89 027713 branch ec_copy : 027715 eckp_calc: 0x7b8a 027716 call ecdbl 0x7b8b 027717 fetch 1 ,mem_ec_loopc 0x7b8c 027718 increase -1 ,pdata 0x7b8d 027719 store 1 ,mem_ec_loopc 0x7b8e 027720 arg mem_k ,contr 0x7b8f 027721 call bn_testbit 0x7b90 027722 rtn true 0x7b91 027723 branch ecadd : 027725 eckp_cp_1: 0x7b92 027726 jam 0 ,mem_ec_infinite 0x7b93 027727 arg mem_ax ,contr 0x7b94 027728 arg mem_cx ,contw 0x7b95 027729 branch ec_copy : 027731 memcpy_dword_swap4: 0x7b96 027732 force 4 ,loopcnt : 027733 memcpy_dword_swap: 0x7b97 027734 increase -4 ,contr : 027735 memcpy_dword_swap_loop: 0x7b98 027736 ifetch 4 ,contr 0x7b99 027737 istore 4 ,contw 0x7b9a 027738 increase -8 ,contr 0x7b9b 027739 loop memcpy_dword_swap_loop 0x7b9c 027740 rtn : 027743 ui_init: 0x7b9d 027744 rtn wake 0x7b9e 027745 call ui_button_init 0x7b9f 027746 call ui_timer_init 0x7ba0 027747 branch ui_led_init : 027749 ui_dispatch: 0x7ba1 027750 fetch 1 ,mem_device_option 0x7ba2 027751 rtneq dvc_op_hci 0x7ba3 027752 call ui_led_blink_polling 0x7ba4 027754 branch ui_timer_check : 027756 ui_button_init: 0x7ba5 027757 fetch 1 ,mem_ui_button_gpio 0x7ba6 027758 rtneq ui_button_gpio_disable 0x7ba7 027759 iforce temp 0x7ba8 027760 call gpio_config_output 0x7ba9 027761 fetcht 1 ,mem_ui_button_gpio 0x7baa 027762 call gpio_out_inactive 0x7bab 027763 nop 100 0x7bac 027764 fetcht 1 ,mem_ui_button_gpio 0x7bad 027765 call gpio_config_input 0x7bae 027766 branch ui_button_polling : 027768 ui_button_disable: 0x7baf 027769 jam ui_button_gpio_disable ,mem_ui_button_gpio 0x7bb0 027770 rtn : 027772 ui_button_polling: 0x7bb1 027773 set1 mark_ext_patch ,mark 0x7bb2 027774 bpatch patch30_5 ,mem_patch30 0x7bb3 027775 fetch 1 ,mem_ui_button_gpio 0x7bb4 027776 rtneq ui_button_gpio_disable 0x7bb5 027777 copy pdata ,temp 0x7bb6 027778 call gpio_get_bit 0x7bb7 027779 nbranch ui_button_up ,true : 027781 ui_button_down: 0x7bb8 027782 call ui_button_check_long_press 0x7bb9 027783 fetch 2 ,mem_ui_state_map 0x7bba 027784 set1 ui_state_btn_down 0x7bbb 027785 store 2 ,mem_ui_state_map 0x7bbc 027786 fetch 1 ,mem_ui_button_last_state 0x7bbd 027787 rtneq ui_button_state_down 0x7bbe 027788 jam ui_button_state_down ,mem_ui_button_last_state 0x7bbf 027790 fetch 1 ,mem_ui_button_timeout 0x7bc0 027791 store 1 ,mem_ui_button_timer 0x7bc1 027792 call lpm_button_get_wake_lock 0x7bc2 027793 jam bt_evt_button_down ,mem_fifo_temp 0x7bc3 027794 branch ui_ipc_send_event : 027795 ui_button_up: 0x7bc4 027796 fetch 2 ,mem_ui_state_map 0x7bc5 027797 set0 ui_state_btn_down 0x7bc6 027798 store 2 ,mem_ui_state_map 0x7bc7 027799 fetch 1 ,mem_ui_button_last_state 0x7bc8 027800 rtneq ui_button_state_up 0x7bc9 027801 jam ui_button_state_up ,mem_ui_button_last_state 0x7bca 027803 jam 0 ,mem_ui_button_timer 0x7bcb 027804 call lpm_button_clean_wake_lock 0x7bcc 027805 jam bt_evt_button_up ,mem_fifo_temp 0x7bcd 027806 branch ui_ipc_send_event : 027808 ui_button_check_long_press: 0x7bce 027809 fetch 1 ,mem_ui_button_timer 0x7bcf 027810 rtn blank 0x7bd0 027811 increase -1 ,pdata 0x7bd1 027812 store 1 ,mem_ui_button_timer 0x7bd2 027813 nrtn blank 0x7bd3 027815 jam bt_evt_button_long_pressed ,mem_fifo_temp 0x7bd4 027816 branch ui_ipc_send_event : 027818 lpm_button_get_wake_lock: 0x7bd5 027819 arg wake_lock_button ,queue 0x7bd6 027820 branch lpm_get_wake_lock : 027822 lpm_button_clean_wake_lock: 0x7bd7 027823 arg wake_lock_button ,queue 0x7bd8 027824 branch lpm_put_wake_lock : 027826 ui_led_init: 0x7bd9 027827 fetch 1 ,mem_led_gpio 0x7bda 027828 rtneq ui_button_gpio_disable 0x7bdb 027829 iforce temp 0x7bdc 027830 call gpio_config_output 0x7bdd 027831 branch ui_led_off : 027833 ui_led_blink_stop: 0x7bde 027834 fetch 2 ,mem_ui_state_map 0x7bdf 027835 set0 ui_state_led_blink 0x7be0 027836 store 2 ,mem_ui_state_map 0x7be1 027837 jam ui_led_stop ,mem_led_switch : 027838 ui_led_off: 0x7be2 027839 fetch 2 ,mem_ui_state_map 0x7be3 027840 set0 ui_state_led_on 0x7be4 027841 store 2 ,mem_ui_state_map 0x7be5 027842 fetcht 1 ,mem_led_gpio 0x7be6 027843 branch gpio_out_inactive : 027845 ui_led_on: 0x7be7 027846 fetch 2 ,mem_ui_state_map 0x7be8 027847 set1 ui_state_led_on 0x7be9 027848 store 2 ,mem_ui_state_map 0x7bea 027849 jam ui_led_stop ,mem_led_switch 0x7beb 027850 fetcht 1 ,mem_led_gpio 0x7bec 027851 branch gpio_out_active : 027853 ui_led_blink_start: 0x7bed 027854 fetch 2 ,mem_ui_state_map 0x7bee 027855 set1 ui_state_led_blink 0x7bef 027856 store 2 ,mem_ui_state_map 0x7bf0 027857 jam ui_led_start ,mem_led_switch 0x7bf1 027858 rtn : 027860 ui_led_blink_polling: 0x7bf2 027861 set1 mark_ext_patch ,mark 0x7bf3 027862 bpatch patch30_6 ,mem_patch30 0x7bf4 027863 fetch 1 ,mem_led_switch 0x7bf5 027864 rtneq ui_led_stop 0x7bf6 027865 arg ui_led_blink ,queue 0x7bf7 027866 call timer_check 0x7bf8 027867 nrtn blank 0x7bf9 027868 fetch 1 ,mem_led_switch 0x7bfa 027869 beq ui_led_dark_time ,ui_led_blink_polling_dark 0x7bfb 027870 call ui_led_on 0x7bfc 027871 jam ui_led_dark_time ,mem_led_switch 0x7bfd 027872 fetch 2 ,mem_led_light_time 0x7bfe 027873 branch ui_led_blink_timer_start : 027874 ui_led_blink_polling_dark: 0x7bff 027875 call ui_led_off 0x7c00 027876 jam ui_led_light_time ,mem_led_switch 0x7c01 027877 fetch 2 ,mem_led_dark_time : 027878 ui_led_blink_timer_start: 0x7c02 027879 arg ui_led_blink ,queue 0x7c03 027880 branch timer_init : 027883 ui_timer_check: 0x7c04 027884 set1 mark_ext_patch ,mark 0x7c05 027885 bpatch patch30_7 ,mem_patch30 0x7c06 027886 arg 0 ,rega 0x7c07 027887 fetcht 4 ,mem_ui_timer_last_btclk 0x7c08 027888 copy clkn_bt ,regb : 027890 ui_timer_check_loop: 0x7c09 027891 copy regb ,pdata 0x7c0a 027892 increase 160 ,temp 0x7c0b 027893 increase 160 ,temp 0x7c0c 027894 isub temp ,null 0x7c0d 027895 nbranch ui_timer_check_end ,positive 0x7c0e 027896 increase 1 ,rega 0x7c0f 027897 and rega ,0x0f ,pdata 0x7c10 027898 nbranch ui_timer_check_loop ,blank 0x7c11 027899 arg 0 ,rega 0x7c12 027900 call ui_timer_check_send_evt : 027901 ui_timer_init: 0x7c13 027902 copy clkn_bt ,pdata 0x7c14 027903 store 4 ,mem_ui_timer_last_btclk 0x7c15 027904 rtn : 027905 ui_timer_check_end: 0x7c16 027906 set1 mark_ext_patch ,mark 0x7c17 027907 bpatch patch31_0 ,mem_patch31 0x7c18 027908 copy rega ,pdata 0x7c19 027909 rtn blank 0x7c1a 027910 increase -160 ,temp 0x7c1b 027911 increase -160 ,temp 0x7c1c 027912 storet 4 ,mem_ui_timer_last_btclk : 027913 ui_timer_check_send_evt: 0x7c1d 027914 increase bt_evt_timer_init ,pdata 0x7c1e 027915 store 1 ,mem_fifo_temp 0x7c1f 027916 branch ui_ipc_send_event : 027922 ui_ipc_get_lock: 0x7c20 027923 jam 1 ,mem_ipc_lock_bt : 027924 ui_ipc_get_lock_wait: 0x7c21 027925 fetch 1 ,mem_ipc_lock_c51 0x7c22 027926 nbranch ui_ipc_get_lock_wait ,blank 0x7c23 027927 rtn : 027929 ui_ipc_put_lock: 0x7c24 027930 jam 0 ,mem_ipc_lock_bt 0x7c25 027931 rtn : 027933 ui_ipc_fifo_out: 0x7c26 027934 branch fifo_out : 027938 ui_ipc_send_event: 0x7c27 027939 set1 mark_ext_patch ,mark 0x7c28 027940 bpatch patch31_1 ,mem_patch31 0x7c29 027941 fetch 1 ,mem_device_option 0x7c2a 027942 rtneq dvc_op_hci 0x7c2b 027943 call ui_ipc_get_lock 0x7c2c 027944 copy rega ,pdata 0x7c2d 027945 store 4 ,mem_ipc_rega_temp 0x7c2e 027946 arg mem_ipc_fifo_bt2c51 ,rega 0x7c2f 027947 call fifo_in 0x7c30 027948 fetch 4 ,mem_ipc_rega_temp 0x7c31 027949 copy pdata ,rega 0x7c32 027950 branch ui_ipc_put_lock : 027952 ui_ipc_send_cmd: 0x7c33 027953 set1 mark_ext_patch ,mark 0x7c34 027954 bpatch patch31_2 ,mem_patch31 0x7c35 027955 fetch 1 ,mem_device_option 0x7c36 027956 rtneq dvc_op_hci 0x7c37 027957 call ui_ipc_get_lock 0x7c38 027958 copy rega ,pdata 0x7c39 027959 store 4 ,mem_ipc_rega_temp 0x7c3a 027960 arg mem_ipc_fifo_c512bt ,rega 0x7c3b 027961 call fifo_in 0x7c3c 027962 fetch 4 ,mem_ipc_rega_temp 0x7c3d 027963 copy pdata ,rega 0x7c3e 027964 branch ui_ipc_put_lock : 027966 ui_ipc_clean_all_fifo: 0x7c3f 027967 set1 mark_ext_patch ,mark 0x7c40 027968 bpatch patch31_3 ,mem_patch31 0x7c41 027969 setarg 0 0x7c42 027970 store util_fifo_len ,mem_ipc_fifo_c512bt 0x7c43 027971 store util_fifo_len ,mem_ipc_fifo_bt2c51 0x7c44 027972 rtn : 027974 check_51cmd: 0x7c45 027975 set1 mark_ext_patch ,mark 0x7c46 027976 bpatch patch31_4 ,mem_patch31 0x7c47 027977 fetch 1 ,mem_hci_cmd 0x7c48 027978 nrtn blank 0x7c49 027979 arg mem_ipc_fifo_c512bt ,rega 0x7c4a 027980 call fifo_is_empty 0x7c4b 027981 rtn blank 0x7c4c 027982 jam ipc_continue_process ,mem_ipc_skip_continue_proc 0x7c4d 027983 call check_51cmd_once 0x7c4e 027984 fetch 1 ,mem_ipc_skip_continue_proc 0x7c4f 027985 branch check_51cmd ,blank 0x7c50 027986 rtn : 027988 check_51cmd_once: 0x7c51 027989 set1 mark_ext_patch ,mark 0x7c52 027990 bpatch patch31_5 ,mem_patch31 0x7c53 027991 call ui_ipc_get_lock 0x7c54 027992 arg mem_ipc_fifo_c512bt ,rega 0x7c55 027993 call fifo_out 0x7c56 027994 copy pdata ,temp 0x7c57 027995 call ui_ipc_put_lock 0x7c58 027996 copy temp ,pdata 0x7c59 027997 rtn blank 0x7c5a 027998 beq bt_cmd_start_discovery ,check_51cmd_start_discovery 0x7c5b 027999 beq bt_cmd_stop_discovery ,check_51cmd_stop_discovery 0x7c5c 028000 beq bt_cmd_reconnect ,check_51cmd_reconnect 0x7c5d 028001 beq bt_cmd_enter_sniff_subrating ,check_51cmd_enter_sniff_subrating 0x7c5e 028002 beq bt_cmd_exit_sniff_subrating ,check_51cmd_exit_sniff_subrating 0x7c5f 028003 beq bt_cmd_sniff_test ,check_51cmd_sniff_test 0x7c60 028004 beq bt_cmd_start_inquiry ,check_51cmd_inq 0x7c61 028005 beq bt_cmd_stop_inquiry ,check_51cmd_stop_inq 0x7c62 028006 beq bt_cmd_start_adv ,check_51cmd_adv 0x7c63 028007 beq bt_cmd_stop_adv ,check_51cmd_stop_adv 0x7c64 028008 beq bt_cmd_start_direct_adv ,check_51cmd_direct_adv 0x7c65 028009 beq bt_cmd_stop_direct_adv ,check_51cmd_stop_direct_adv 0x7c66 028010 beq bt_cmd_le_update_conn ,check_51cmd_le_update_conn 0x7c67 028011 beq bt_cmd_led_blink ,ui_led_blink_start 0x7c68 028012 beq bt_cmd_led_on ,ui_led_on 0x7c69 028013 beq bt_cmd_led_off ,ui_led_blink_stop 0x7c6a 028014 beq bt_cmd_le_start_conn ,check_51cmd_le_start_con 0x7c6b 028015 beq bt_cmd_le_start_scan ,check_51cmd_start_scan 0x7c6c 028016 beq bt_cmd_le_stop_scan ,check_51cmd_stop_scan 0x7c6d 028017 beq bt_cmd_enter_hibernate ,check_51cmd_hibernate 0x7c6e 028018 beq bt_cmd_le_smp_security_request ,check_51cmd_le_smp_sec_req 0x7c6f 028019 beq bt_cmd_le_start_write ,check_51cmd_le_start_write 0x7c70 028020 beq bt_cmd_bb_reconn_cancel ,check_51cmd_bb_reconn_cancel 0x7c71 028022 store 1 ,mem_fifo_temp 0x7c72 028023 set1 mark_ext_patch ,mark 0x7c73 028024 bpatch patch31_6 ,mem_patch31 0x7c74 028025 fetch 1 ,mem_lmo_opcode2 0x7c75 028026 branch check_51cmd_once_continue ,blank 0x7c76 028027 call lmo_fifo_process 0x7c77 028028 fetch 1 ,mem_lmo_opcode2 0x7c78 028029 nbranch check_51cmd_restore ,blank : 028030 check_51cmd_once_continue: 0x7c79 028031 fetch 1 ,mem_fifo_temp 0x7c7a 028032 bmark0 mark_context ,check_51cmd_check_idle : 028033 check_51cmd_once_continue0: 0x7c7b 028034 beq bt_cmd_enter_sniff ,cmd_in_sniff 0x7c7c 028035 beq bt_cmd_exit_sniff ,cmd_exit_sniff 0x7c7d 028036 beq bt_cmd_set_pin_code ,check_51cmd_pincode 0x7c7e 028037 beq bt_cmd_disconnect ,check_51cmd_disconnect 0x7c7f 028038 beq bt_cmd_le_disconnect ,check_51cmd_le_disconnect 0x7c80 028039 beq bt_cmd_role_switch ,check_51cmd_role_switch 0x7c81 028040 beq bt_cmd_store_reconn_info_le ,eeprom_store_le_reconn_info 0x7c82 028041 beq bt_cmd_store_reconn_info_bt ,eeprom_store_bd_reconn_info 0x7c83 028042 beq bt_cmd_le_update_conn ,bt_cmd_le_update_conn_1 0x7c84 028043 rtn : 028046 bt_cmd_le_update_conn_1: 0x7c85 028047 jam xt_ll_connection_param_req ,mem_fifo_temp 0x7c86 028048 branch le_xtype_fifo_in : 028049 check_51cmd_check_idle: 0x7c87 028050 store 1 ,mem_fifo_temp 0x7c88 028051 call context_check_idle 0x7c89 028052 branch check_51cmd_restore ,zero 0x7c8a 028053 call context_search_plap 0x7c8b 028054 nrtn zero : 028055 check_51cmd_restore: 0x7c8c 028056 jam ipc_skip_continue_process ,mem_ipc_skip_continue_proc 0x7c8d 028057 branch ui_ipc_send_cmd : 028060 check_51cmd_role_switch: 0x7c8e 028061 jam lmp_slot_offset ,mem_lmo_opcode2 0x7c8f 028062 set1 mark_switch_initiated ,mark 0x7c90 028063 nrtn master 0x7c91 028064 jam switch_flag_init ,mem_switch_flag 0x7c92 028065 jam lmp_switch_req ,mem_lmo_opcode2 0x7c93 028066 fetch 1 ,mem_connection_options 0x7c94 028067 set0 connection_switch ,pdata 0x7c95 028068 store 1 ,mem_connection_options 0x7c96 028069 rtn : 028071 check_51cmd_start_discovery: 0x7c97 028072 fetch 2 ,mem_ui_state_map 0x7c98 028073 set1 ui_state_bt_discovery 0x7c99 028074 store 2 ,mem_ui_state_map 0x7c9a 028075 jam 3 ,mem_scan_mode 0x7c9b 028076 rtn : 028078 check_51cmd_stop_discovery: 0x7c9c 028079 jam 0 ,mem_hid_handshake_timer_count 0x7c9d 028080 jam 0 ,mem_scan_mode 0x7c9e 028081 fetch 2 ,mem_ui_state_map 0x7c9f 028082 set0 ui_state_bt_discovery 0x7ca0 028083 store 2 ,mem_ui_state_map 0x7ca1 028084 rtn : 028086 check_51cmd_reconnect: 0x7ca2 028087 jam hci_cmd_create_conn ,mem_hci_cmd 0x7ca3 028088 rtn : 028090 check_51cmd_disconnect: 0x7ca4 028091 jam lmp_detach ,mem_lmo_opcode2 0x7ca5 028092 jam other_end_terminated ,mem_disconn_reason_send 0x7ca6 028093 rtn : 028096 check_51cmd_enter_sniff_subrating: 0x7ca7 028097 rtn : 028099 check_51cmd_exit_sniff_subrating: 0x7ca8 028100 rtn : 028102 check_51cmd_sniff_test: 0x7ca9 028103 rtn : 028105 check_51cmd_pincode: 0x7caa 028106 jam pincode_state_pincode_ready ,mem_pincode_state 0x7cab 028107 branch cmd_pair : 028109 check_51cmd_inq: 0x7cac 028110 rtn : 028111 check_51cmd_stop_inq: 0x7cad 028112 rtn : 028113 check_51cmd_adv: 0x7cae 028114 jam on ,mem_le_adv_enable 0x7caf 028115 jam adv_ind ,mem_le_adv_type 0x7cb0 028116 rtn : 028117 check_51cmd_stop_adv: 0x7cb1 028118 jam off ,mem_le_adv_enable 0x7cb2 028119 rtn : 028120 check_51cmd_direct_adv: 0x7cb3 028121 jam on ,mem_le_adv_enable 0x7cb4 028122 jam adv_direct_ind ,mem_le_adv_type 0x7cb5 028123 rtn : 028124 check_51cmd_stop_direct_adv: 0x7cb6 028125 jam off ,mem_le_adv_enable 0x7cb7 028126 rtn : 028127 check_51cmd_le_disconnect: 0x7cb8 028128 setarg 1 0x7cb9 028129 store 2 ,mem_le_superto 0x7cba 028130 rtn : 028131 check_51cmd_le_update_conn: 0x7cbb 028132 rtn : 028133 check_51cmd_le_start_con: 0x7cbc 028134 jam on ,mem_le_scan_enable 0x7cbd 028135 jam hci_cmd_le_create_conn ,mem_hci_cmd 0x7cbe 028136 fetch 6 ,mem_app_peer_addr 0x7cbf 028137 store 6 ,mem_le_conn_peer_addr 0x7cc0 028138 rtn : 028139 check_51cmd_start_scan: 0x7cc1 028140 jam on ,mem_le_scan_enable 0x7cc2 028141 rtn : 028142 check_51cmd_stop_scan: 0x7cc3 028143 jam off ,mem_le_scan_enable 0x7cc4 028144 jam 0 ,mem_hci_cmd 0x7cc5 028145 rtn : 028146 check_51cmd_le_smp_sec_req: 0x7cc6 028147 jam xt_smp_security_request ,mem_fifo_temp 0x7cc7 028148 branch le_xtype_fifo_in : 028149 check_51cmd_hibernate: 0x7cc8 028150 set1 mark_ext_patch ,mark 0x7cc9 028151 bpatch patch31_7 ,mem_patch31 0x7cca 028152 fetch 2 ,mem_cb_before_hibernate 0x7ccb 028153 call callback_func 0x7ccc 028154 fetch 1 ,mem_ui_button_gpio 0x7ccd 028155 beq ui_button_gpio_disable ,check_51cmd_hibernate_btn_disabled 0x7cce 028156 copy pdata ,temp 0x7ccf 028157 call gpio_config_input : 028158 check_51cmd_hibernate_btn_disabled: 0x7cd0 028159 call ui_led_off 0x7cd1 028160 call ui_ipc_clean_all_fifo 0x7cd2 028161 branch lpm_hibernate : 028163 check_51cmd_le_start_write: 0x7cd3 028164 jam 1 ,mem_le_switch_send_data 0x7cd4 028165 rtn : 028167 check_51cmd_bb_reconn_cancel: 0x7cd5 028168 force page_length_timer ,queue 0x7cd6 028169 branch timer_stop : 028171 ui_check_paring_button: 0x7cd7 028172 fetch 1 ,mem_ui_state_map 0x7cd8 028173 rtnbit0 ui_state_btn_down 0x7cd9 028174 rtnbit0 ui_state_bt_reconnect 0x7cda 028175 branch check_51cmd_bb_reconn_cancel : 028179 usb_isr: 0x7cdb 028180 set1 mark_ext_patch ,mark 0x7cdc 028181 bpatch patch3a_5 ,mem_patch3a 0x7cdd 028182 call usb_tx_test 0x7cde 028183 hfetch 1 ,core_usb_status 0x7cdf 028184 store 1 ,mem_usb_status 0x7ce0 028185 hfetch 1 ,core_usb_fifo_empty 0x7ce1 028186 store 1 ,mem_usb_fifo_empty 0x7ce2 028187 hjam 0xe0 ,core_usb_status 0x7ce3 028188 fetch 1 ,mem_usb_fifo_empty 0x7ce4 028189 compare 0x1 ,pdata ,0x1 0x7ce5 028190 call usb0_fifo_empty ,true 0x7ce6 028191 set1 mark_ext_patch ,mark 0x7ce7 028192 bpatch patch3a_6 ,mem_patch3a 0x7ce8 028193 fetch 1 ,mem_usb_status 0x7ce9 028194 compare 0x1 ,pdata ,0x1 0x7cea 028195 call usb_status1 ,true 0x7ceb 028196 fetch 1 ,mem_usb_state 0x7cec 028197 bne usb_connected ,usb_tx 0x7ced 028198 fetch 2 ,mem_usb_idle_cnt 0x7cee 028199 increase 1 ,pdata 0x7cef 028200 store 2 ,mem_usb_idle_cnt 0x7cf0 028201 fetcht 2 ,mem_usb_idle_timeout 0x7cf1 028202 isub temp ,null 0x7cf2 028203 branch usb_init ,positive 0x7cf3 028204 fetch 1 ,mem_usb_status 0x7cf4 028205 bbit0 usb_status_nak ,usb_tx 0x7cf5 028206 setarg 0 0x7cf6 028207 store 2 ,mem_usb_idle_cnt 0x7cf7 028208 branch usb_tx : 028211 usb_status1: 0x7cf8 028212 set1 mark_ext_patch ,mark 0x7cf9 028213 bpatch patch3a_7 ,mem_patch3a 0x7cfa 028214 hjam 0x11 ,core_usb_status 0x7cfb 028215 hfetch 1 ,core_usb_ep_len 0x7cfc 028216 store 1 ,mem_usb_read_len 0x7cfd 028217 copy pdata ,loopcnt 0x7cfe 028218 branch usb_rx_no_data ,blank 0x7cff 028219 arg mem_usb_setup ,contw 0x7d00 028220 call usb_rx_read 0x7d01 028221 fetch 1 ,mem_usb_read_len 0x7d02 028222 sub pdata ,7 ,null 0x7d03 028223 rtn positive : 028224 usb_class_type: 0x7d04 028225 set1 mark_ext_patch ,mark 0x7d05 028226 bpatch patch3b_0 ,mem_patch3b 0x7d06 028227 fetch 1 ,mem_usb_setup_bmrequesttype 0x7d07 028228 beq hci_class_request_type ,usb_hci_class_req_type 0x7d08 028229 beq hid_class_request_type ,usb_hid_class_req_type 0x7d09 028230 beq zero_class_request_type ,usb_zero_class_req_type 0x7d0a 028231 fetch 1 ,mem_usb_setup_brequest 0x7d0b 028232 beq set_address ,usb0_request_set_address 0x7d0c 028233 beq get_descriptor ,usb0_request_get_descriptor 0x7d0d 028234 beq set_configuration ,usb0_request_set_configuration 0x7d0e 028235 beq set_interface ,usb0_request_set_interface 0x7d0f 028236 branch usb0_force_stall : 028238 usb_zero_class_req_type: 0x7d10 028239 fetch 1 ,mem_usb_setup_brequest 0x7d11 028240 beq clear_feature ,usb0_request_clear_feature 0x7d12 028241 beq set_feature ,usb0_request_set_feature 0x7d13 028242 beq set_configuration ,usb0_reply_zerolen 0x7d14 028243 beq set_address ,usb0_request_set_address 0x7d15 028244 branch usb0_force_stall : 028245 usb_hci_class_req_type: 0x7d16 028246 call usb0_reply_zerolen 0x7d17 028247 rtn : 028249 usb_rx_no_data: 0x7d18 028250 fetch 1 ,mem_usb_status 0x7d19 028251 bbit1 usb_status_setup ,usb_class_type 0x7d1a 028252 rtn : 028253 usb_set_protocol_req: 0x7d1b 028254 fetch 1 ,mem_usb_set_protocol_count 0x7d1c 028255 increase 1 ,pdata 0x7d1d 028256 store 1 ,mem_usb_set_protocol_count 0x7d1e 028257 compare 2 ,pdata ,0xff 0x7d1f 028258 nbranch usb0_reply_zerolen ,true 0x7d20 028259 jam 1 ,mem_usb_desc 0x7d21 028260 branch usb0_reply_zerolen : 028261 usb_hid_class_req_type: 0x7d22 028262 fetch 1 ,mem_usb_setup_brequest 0x7d23 028263 beq set_idle ,usb_set_idle 0x7d24 028264 beq set_report ,usb_set_report 0x7d25 028265 beq set_protocol ,usb_set_protocol_req 0x7d26 028266 branch usb0_force_stall : 028267 usb_set_idle: 0x7d27 028268 fetch 1 ,mem_usb_state 0x7d28 028269 beq usb_setidle_1 ,usb_set_idle_connected 0x7d29 028270 bne usb_resume ,usb0_reply_zerolen 0x7d2a 028271 jam usb_setidle_1 ,mem_usb_state 0x7d2b 028272 branch usb0_reply_zerolen : 028273 usb_set_idle_connected: 0x7d2c 028274 jam usb_connected ,mem_usb_state 0x7d2d 028275 branch usb0_reply_zerolen : 028277 usb_set_report: 0x7d2e 028278 jam 1 ,mem_usb_desc 0x7d2f 028279 arg mem_usb_desc ,rega 0x7d30 028280 arg 1 ,regb 0x7d31 028281 branch usb0_respond : 028282 usb0_force_stall: 0x7d32 028283 hjam 1 ,core_usb_stall 0x7d33 028284 rtn : 028285 usb0_reply_zerolen: 0x7d34 028286 hjam 0x40 ,core_usb_clear 0x7d35 028287 rtn : 028289 usb_rx_read: 0x7d36 028290 hfetch 1 ,core_usb_ep 0x7d37 028291 istore 1 ,contw 0x7d38 028292 loop usb_rx_read 0x7d39 028293 rtn : 028295 usb0_fifo_empty: 0x7d3a 028296 hjam 0x1 ,core_usb_fifo_empty 0x7d3b 028297 call usb0_tx 0x7d3c 028298 rtn : 028300 usb0_request_get_descriptor: 0x7d3d 028301 set1 mark_ext_patch ,mark 0x7d3e 028302 bpatch patch3b_1 ,mem_patch3b 0x7d3f 028303 set0 mark_isstr ,mark 0x7d40 028304 fetch 1 ,mem_usb_setup_bvalueh 0x7d41 028305 beq dsc_device ,dsc_device_info 0x7d42 028306 beq dsc_config ,dsc_config_info 0x7d43 028307 beq dsc_string ,dsc_string_info 0x7d44 028308 beq dsc_hid ,dsc_hid_info 0x7d45 028309 beq dsc_hid_report ,dsc_hid_report_info 0x7d46 028310 rtn : 028312 dsc_device_info: 0x7d47 028313 arg mem_devicedesc ,rega 0x7d48 028314 branch usb0_respond_length : 028315 dsc_config_info: 0x7d49 028316 arg mem_confdesc ,rega 0x7d4a 028317 branch usb0_respond_length : 028318 dsc_string_info: 0x7d4b 028319 fetch 1 ,mem_usb_setup_bvalue 0x7d4c 028320 and_into 3 ,pdata 0x7d4d 028321 arg mem_string0 ,rega 0x7d4e 028322 beq 0 ,usb0_respond_length 0x7d4f 028323 set1 mark_isstr ,mark 0x7d50 028324 arg mem_string1 ,rega 0x7d51 028325 beq 1 ,usb0_respond_length 0x7d52 028326 arg mem_string2 ,rega 0x7d53 028327 beq 2 ,usb0_respond_length 0x7d54 028328 arg mem_string3 ,rega 0x7d55 028329 beq 3 ,usb0_respond_length 0x7d56 028330 branch assert : 028331 dsc_hid_info: 0x7d57 028332 arg mem_confdesc + 18 ,rega 0x7d58 028333 fetch 1 ,mem_confdesc + 18 0x7d59 028334 copy pdata ,regb 0x7d5a 028335 branch usb0_respond : 028336 dsc_hid_report_info: 0x7d5b 028337 fetch 2 ,mem_usb_setup_windex 0x7d5c 028338 beq 1 ,dsc_hid_report_info0 0x7d5d 028339 arg mem_hidreportdesc_kb ,rega 0x7d5e 028340 branch usb0_respond_length : 028341 dsc_hid_report_info0: 0x7d5f 028342 jam usb_got_report_req ,mem_usb_state 0x7d60 028343 arg mem_hidreportdesc_m ,rega 0x7d61 028344 branch usb0_respond_length : 028346 usb0_respond_length: 0x7d62 028347 ifetch 1 ,rega 0x7d63 028348 iforce regb 0x7d64 028349 increase 1 ,rega : 028352 usb0_respond: 0x7d65 028353 set1 mark_ext_patch ,mark 0x7d66 028354 bpatch patch3b_2 ,mem_patch3b 0x7d67 028355 bmark0 mark_isstr ,usb0_respond0 0x7d68 028356 add regb ,1 ,pdata 0x7d69 028357 lshift pdata ,pdata 0x7d6a 028358 hstore 1 ,core_usb_dfifo0 0x7d6b 028359 hjam 3 ,core_usb_dfifo0 0x7d6c 028360 fetch 1 ,mem_usb_setup_blength 0x7d6d 028361 increase -2 ,pdata 0x7d6e 028362 rshift pdata ,pdata 0x7d6f 028363 store 1 ,mem_usb_setup_blength 0x7d70 028364 beq 0 ,usb_no_respond_data : 028365 usb0_respond0: 0x7d71 028366 fetch 1 ,mem_usb_setup_blength 0x7d72 028367 isub regb ,null 0x7d73 028368 branch usb0_respond1 ,positive 0x7d74 028369 copy pdata ,regb : 028370 usb0_respond1: 0x7d75 028371 copy rega ,pdata 0x7d76 028372 store 2 ,mem_bufptr 0x7d77 028373 copy regb ,pdata 0x7d78 028374 store 1 ,mem_remain 0x7d79 028375 branch usb0_tx : 028377 usb_no_respond_data: 0x7d7a 028378 arg 0 ,queue 0x7d7b 028379 branch usb_trig : 028383 usb0_tx: 0x7d7c 028384 set1 mark_ext_patch ,mark 0x7d7d 028385 bpatch patch3b_3 ,mem_patch3b 0x7d7e 028386 fetch 1 ,mem_remain 0x7d7f 028387 rtn blank 0x7d80 028388 copy pdata ,loopcnt 0x7d81 028389 sub pdata ,ep0_packet_size ,null 0x7d82 028390 branch usb0_tx_info ,positive 0x7d83 028391 arg ep0_packet_size ,loopcnt : 028392 usb0_tx_info: 0x7d84 028393 fetch 1 ,mem_remain 0x7d85 028394 isub loopcnt ,pdata 0x7d86 028395 store 1 ,mem_remain 0x7d87 028396 fetch 2 ,mem_bufptr 0x7d88 028397 copy pdata ,contr : 028398 usb0_tx0: 0x7d89 028399 ifetch 1 ,contr 0x7d8a 028400 hstore 1 ,core_usb_dfifo0 0x7d8b 028401 bmark0 mark_isstr ,usb0_tx1 0x7d8c 028402 hjam 0 ,core_usb_dfifo0 : 028403 usb0_tx1: 0x7d8d 028404 loop usb0_tx0 0x7d8e 028405 copy contr ,pdata 0x7d8f 028406 store 2 ,mem_bufptr 0x7d90 028407 arg 0 ,queue 0x7d91 028408 call usb_trig 0x7d92 028409 fetch 1 ,mem_remain 0x7d93 028410 nrtn blank 0x7d94 028411 fetch 1 ,mem_usb_state 0x7d95 028412 rtnne usb_got_report_req 0x7d96 028413 jam usb_connected ,mem_usb_state 0x7d97 028414 rtn : 028417 usb0_request_set_configuration: 0x7d98 028418 fetch 1 ,mem_usb_setup_bvalue 0x7d99 028419 sub pdata ,1 ,null 0x7d9a 028420 nbranch usb0_force_stall ,positive : 028421 usb0_request_set_address: 0x7d9b 028422 fetch 1 ,mem_usb_setup_bmrequesttype 0x7d9c 028423 bne in_device ,usb0_force_stall 0x7d9d 028424 fetch 2 ,mem_usb_setup_windex 0x7d9e 028425 bne 0 ,usb0_force_stall 0x7d9f 028426 fetch 1 ,mem_usb_setup_blength 0x7da0 028427 bne 0 ,usb0_force_stall 0x7da1 028428 branch usb0_reply_zerolen : 028430 usb0_request_set_interface: 0x7da2 028431 fetch 1 ,mem_usb_setup_bmrequesttype 0x7da3 028432 bne in_interface ,usb0_force_stall 0x7da4 028433 fetch 1 ,mem_usb_setup_bvalue 0x7da5 028434 bne 0 ,usb0_force_stall 0x7da6 028435 fetch 1 ,mem_usb_setup_bvalueh 0x7da7 028436 bne 0 ,usb0_force_stall 0x7da8 028437 fetch 1 ,mem_usb_setup_blength 0x7da9 028438 bne 0 ,usb0_force_stall 0x7daa 028439 branch usb0_reply_zerolen : 028441 usb0_request_set_feature: 0x7dab 028442 fetch 1 ,mem_usb_setup_bvalue 0x7dac 028443 bne 1 ,usb0_force_stall 0x7dad 028444 jam usb_sleep ,mem_usb_state 0x7dae 028445 branch usb0_reply_zerolen : 028447 usb0_request_clear_feature: 0x7daf 028448 fetch 1 ,mem_usb_setup_bvalue 0x7db0 028449 bne 1 ,usb0_force_stall 0x7db1 028450 branch usb0_reply_zerolen : 028452 usb_init: 0x7db2 028453 set1 mark_ext_patch ,mark 0x7db3 028454 bpatch patch3b_4 ,mem_patch3b 0x7db4 028455 hjam 0x00 ,core_usb_config 0x7db5 028456 nop 10000 0x7db6 028457 hjam 0xc0 ,core_usb_trig 0x7db7 028458 hfetch 2 ,core_clkoff 0x7db8 028459 set0 clock_off_usb ,pdata 0x7db9 028460 hstore 2 ,core_clkoff 0x7dba 028461 hjam 0x3c ,core_usb_config 0x7dbb 028462 hjam 0xff ,core_usb_status 0x7dbc 028463 hjam 0xff ,core_usb_fifo_empty 0x7dbd 028464 jam 0 ,mem_mcmd 0x7dbe 028465 jam 0 ,mem_usb_state 0x7dbf 028466 setarg 0 0x7dc0 028467 store 2 ,mem_usb_idle_cnt 0x7dc1 028468 rtn : 028471 usb_tx: 0x7dc2 028472 set1 mark_ext_patch ,mark 0x7dc3 028473 bpatch patch3b_5 ,mem_patch3b 0x7dc4 028474 fetch 1 ,mem_mcmd 0x7dc5 028475 rtn blank 0x7dc6 028476 fetch 1 ,mem_usb_state 0x7dc7 028477 beq usb_sleep ,usb_wakeup 0x7dc8 028478 rtnne usb_connected 0x7dc9 028479 fetch 1 ,mem_mcmd 0x7dca 028480 jam 0 ,mem_mcmd 0x7dcb 028481 arg 6 ,loopcnt 0x7dcc 028482 arg mem_mouse_data ,contr 0x7dcd 028483 beq send_kb_data_cmd ,usb_tx_ep1 0x7dce 028484 beq send_mouse_data_cmd ,usb_tx_ep2 0x7dcf 028485 branch assert : 028487 usb_tx_ep1: 0x7dd0 028488 arg core_usb_dfifo1 ,rega 0x7dd1 028489 arg 1 ,queue : 028490 usb_tx_loop: 0x7dd2 028491 ifetch 1 ,contr 0x7dd3 028492 istore 1 ,rega 0x7dd4 028493 loop usb_tx_loop : 028494 usb_trig: 0x7dd5 028495 set1 mark_ext_patch ,mark 0x7dd6 028496 bpatch patch3b_6 ,mem_patch3b 0x7dd7 028497 disable swfine 0x7dd8 028498 fetch 2 ,mem_usb_trig_timeout 0x7dd9 028499 iforce stop_watch 0x7dda 028500 hjam 0x40 ,core_usb_status : 028501 usb_trig_waitnak_loop: 0x7ddb 028502 hfetch 1 ,core_usb_status 0x7ddc 028503 branch usb_init ,timeout 0x7ddd 028504 bbit0 usb_status_nak ,usb_trig_waitnak_loop 0x7dde 028505 fetch 2 ,mem_usb_trig_timeout 0x7ddf 028506 iforce stop_watch 0x7de0 028507 arg 0 ,temp 0x7de1 028508 qset1 temp 0x7de2 028509 hstoret 1 ,core_usb_fifo_empty : 028510 usb_trig_loop: 0x7de3 028511 branch usb_init ,timeout 0x7de4 028512 hstoret 1 ,core_usb_trig 0x7de5 028513 hfetch 1 ,core_usb_fifo_empty 0x7de6 028514 qisolate0 pdata 0x7de7 028515 branch usb_trig_loop ,true 0x7de8 028516 rtn : 028519 usb_tx_ep2: 0x7de9 028520 arg 2 ,queue 0x7dea 028521 arg core_usb_dfifo2 ,rega 0x7deb 028522 branch usb_tx_loop : 028525 usb_wakeup: 0x7dec 028526 set1 mark_ext_patch ,mark 0x7ded 028527 bpatch patch3b_7 ,mem_patch3b 0x7dee 028528 hjam 0xfc ,core_usb_config 0x7def 028529 nop 10000 0x7df0 028530 hjam 0x3c ,core_usb_config 0x7df1 028531 jam usb_resume ,mem_usb_state 0x7df2 028532 rtn : 028534 usb_tx_test: 0x7df3 028535 fetch 1 ,mem_mcmd 0x7df4 028536 nrtn blank 0x7df5 028537 fetch 2 ,mem_usb_cnt 0x7df6 028538 rtn blank 0x7df7 028539 increase -1 ,pdata 0x7df8 028540 store 2 ,mem_usb_cnt 0x7df9 028541 jam send_mouse_data_cmd ,mem_mcmd 0x7dfa 028542 rtn : 028545 right_shift_n: 0x7dfb 028546 sub loopcnt ,0 ,null 0x7dfc 028547 rtn zero : 028548 right_shift_n_loop: 0x7dfd 028549 rshift pdata ,pdata 0x7dfe 028550 loop right_shift_n_loop 0x7dff 028551 rtn : 028553 push_stack: 0x7e00 028554 deposit contw 0x7e01 028555 store 2 ,mem_contw 0x7e02 028556 storet 8 ,mem_temp 0x7e03 028557 deposit timeup 0x7e04 028558 store 4 ,mem_timeup 0x7e05 028559 deposit rega 0x7e06 028560 store 4 ,mem_rega 0x7e07 028561 deposit regb 0x7e08 028562 store 4 ,mem_regb 0x7e09 028563 deposit regc 0x7e0a 028564 store 3 ,mem_regc 0x7e0b 028565 deposit contr 0x7e0c 028566 store 2 ,mem_contr 0x7e0d 028567 rtn : 028568 pop_stack: 0x7e0e 028569 fetcht 8 ,mem_temp 0x7e0f 028570 fetch 4 ,mem_timeup 0x7e10 028571 iforce timeup 0x7e11 028572 fetch 4 ,mem_rega 0x7e12 028573 iforce rega 0x7e13 028574 fetch 4 ,mem_regb 0x7e14 028575 iforce regb 0x7e15 028576 fetch 3 ,mem_regc 0x7e16 028577 iforce regc 0x7e17 028578 fetch 2 ,mem_contw 0x7e18 028579 iforce contw 0x7e19 028580 fetch 2 ,mem_contr 0x7e1a 028581 iforce contr 0x7e1b 028582 rtn : 028588 save_cont_pointers: 0x7e1c 028589 copy contw ,pdata 0x7e1d 028590 store 2 ,mem_hold_contw 0x7e1e 028591 copy contr ,pdata 0x7e1f 028592 store 2 ,mem_hold_contr 0x7e20 028593 rtn : 028594 load_cont_pointers: 0x7e21 028595 fetch 2 ,mem_hold_contw 0x7e22 028596 copy pdata ,contw 0x7e23 028597 fetch 2 ,mem_hold_contr 0x7e24 028598 copy pdata ,contr 0x7e25 028599 rtn : 028603 delay_10ms: 0x7e26 028604 copy clkn_bt ,pdata 0x7e27 028605 increase 16 ,pdata 0x7e28 028606 increase 16 ,pdata : 028607 delay_ms_wait: 0x7e29 028608 copy clkn_bt ,temp 0x7e2a 028609 isub temp ,null 0x7e2b 028610 branch delay_ms_wait ,positive 0x7e2c 028611 rtn : 028613 memcpy48: 0x7e2d 028614 ifetch 8 ,contr 0x7e2e 028615 istore 8 ,contw 0x7e2f 028616 ifetch 8 ,contr 0x7e30 028617 istore 8 ,contw : 028618 memcpy32: 0x7e31 028619 ifetch 8 ,contr 0x7e32 028620 istore 8 ,contw : 028621 memcpy24: 0x7e33 028622 ifetch 8 ,contr 0x7e34 028623 istore 8 ,contw : 028624 memcpy16: 0x7e35 028625 ifetch 8 ,contr 0x7e36 028626 istore 8 ,contw 0x7e37 028627 ifetch 8 ,contr 0x7e38 028628 istore 8 ,contw 0x7e39 028629 rtn : 028631 bn_zero: 0x7e3a 028632 force 3 ,loopcnt : 028633 memset0: 0x7e3b 028634 force 0 ,pdata : 028635 memset8: 0x7e3c 028636 istore 8 ,contw 0x7e3d 028637 loop memset8 0x7e3e 028638 rtn : 028641 clear_mem: 0x7e3f 028642 deposit loopcnt 0x7e40 028643 rtn blank 0x7e41 028644 setarg 0 : 028645 clear_mem_loop: 0x7e42 028646 istore 1 ,contw 0x7e43 028647 loop clear_mem_loop 0x7e44 028648 rtn : 028652 memcpy: 0x7e45 028653 deposit loopcnt 0x7e46 028654 rtn blank : 028655 memcpy_loop: 0x7e47 028656 ifetch 1 ,contr 0x7e48 028657 istore 1 ,contw 0x7e49 028658 loop memcpy_loop 0x7e4a 028659 rtn : 028661 timer_stop: 0x7e4b 028662 setarg 0 : 028663 timer_init: 0x7e4c 028664 arg mem_timers ,contw 0x7e4d 028665 iforce temp 0x7e4e 028666 lshift queue ,pdata 0x7e4f 028667 iadd contw ,contw 0x7e50 028668 istoret 2 ,contw 0x7e51 028669 rtn : 028671 timer_reinit: 0x7e52 028672 arg 0 ,queue : 028673 timer_check: 0x7e53 028674 set1 mark_ext_patch ,mark 0x7e54 028675 bpatch patch37_4 ,mem_patch37 0x7e55 028676 fetcht 4 ,mem_last_clkn 0x7e56 028677 rshift clkn_bt ,pdata 0x7e57 028678 store 4 ,mem_last_clkn 0x7e58 028679 isub temp ,timeup 0x7e59 028680 copy timeup ,temp 0x7e5a 028681 arg mem_timers ,contr 0x7e5b 028682 copy contr ,contw 0x7e5c 028683 arg 16 ,loopcnt : 028684 timer_loop: 0x7e5d 028685 ifetch 2 ,contr 0x7e5e 028686 isub temp ,pdata 0x7e5f 028687 branch timer_counting ,positive 0x7e60 028688 force 0 ,pdata : 028689 timer_counting: 0x7e61 028690 istore 2 ,contw 0x7e62 028691 loop timer_loop 0x7e63 028692 arg mem_timers ,contr 0x7e64 028693 lshift queue ,pdata 0x7e65 028694 iadd contr ,contr 0x7e66 028695 ifetch 2 ,contr 0x7e67 028696 rtn : 028699 lshift8_queue: 0x7e68 028700 increase 1 ,queue : 028701 lshift8_queue_loop: 0x7e69 028702 increase -1 ,queue 0x7e6a 028703 rtn zero 0x7e6b 028704 lshift8 pdata ,pdata 0x7e6c 028705 branch lshift8_queue_loop : 028709 clk_add: 0x7e6d 028710 iadd temp ,temp 0x7e6e 028711 copy temp ,loopcnt 0x7e6f 028712 setarg 3750 0x7e70 028713 isub loopcnt ,pdata 0x7e71 028714 rtn positive 0x7e72 028715 sub pdata ,0 ,pdata 0x7e73 028716 rshift16 temp ,temp 0x7e74 028717 increase 1 ,temp 0x7e75 028718 lshift16 temp ,temp 0x7e76 028719 ior temp ,temp 0x7e77 028720 rtn : 028722 clk_diff_rt: 0x7e78 028723 call clk_diff 0x7e79 028724 branch clk2rt : 028727 clk_diff: 0x7e7a 028728 disable user 0x7e7b 028729 isub temp ,pdata 0x7e7c 028730 branch clk_diff_pos ,positive 0x7e7d 028731 enable user 0x7e7e 028732 sub pdata ,0 ,pdata : 028733 clk_diff_pos: 0x7e7f 028734 rtnbit0 15 0x7e80 028735 arg -61786 ,temp 0x7e81 028736 iadd temp ,pdata 0x7e82 028737 set0 64 ,pdata 0x7e83 028738 rtn : 028740 clk2rt: 0x7e84 028741 iforce contr 0x7e85 028742 rshift16 pdata ,pdata 0x7e86 028743 arg 3750 ,temp 0x7e87 028744 imul32 temp ,pdata 0x7e88 028745 iadd contr ,pdata 0x7e89 028746 rtn : 028749 clk2lpo: 0x7e8a 028750 lshift8 pdata ,pdata 0x7e8b 028751 lshift4 pdata ,pdata 0x7e8c 028752 fetcht 3 ,mem_clks_per_lpo 0x7e8d 028753 idiv temp 0x7e8e 028754 call wait_div_end 0x7e8f 028755 quotient temp 0x7e90 028756 rtn : 028759 clk2bt: 0x7e91 028760 arg 3750 ,temp 0x7e92 028761 idiv temp 0x7e93 028762 call wait_div_end 0x7e94 028763 quotient pdata 0x7e95 028764 lshift16 pdata ,pdata 0x7e96 028765 remainder temp 0x7e97 028766 ior temp ,temp 0x7e98 028767 rtn : 028770 mem3_hex2string_to_uart: 0x7e99 028771 arg 3 ,loopcnt 0x7e9a 028772 branch hex2string_to_uart0 : 028773 mem2_hex2string_to_uart: 0x7e9b 028774 arg 2 ,loopcnt 0x7e9c 028775 branch hex2string_to_uart0 : 028779 adss_hex2string_to_uart: 0x7e9d 028780 arg 6 ,loopcnt : 028781 hex2string_to_uart0: 0x7e9e 028782 ifetch 1 ,rega 0x7e9f 028783 copy pdata ,temp 0x7ea0 028784 rshift4 pdata ,pdata 0x7ea1 028785 call dialog2uchar 0x7ea2 028786 istore 1 ,contwu 0x7ea3 028787 copy temp ,pdata 0x7ea4 028788 and pdata ,0xf ,pdata 0x7ea5 028789 call dialog2uchar 0x7ea6 028790 istore 1 ,contwu 0x7ea7 028791 increase 1 ,rega 0x7ea8 028792 loop hex2string_to_uart0 0x7ea9 028793 rtn : 028794 dialog2uchar: 0x7eaa 028795 sub pdata ,9 ,null 0x7eab 028796 branch dialog2uchar0to9 ,positive 0x7eac 028797 increase 87 ,pdata 0x7ead 028798 rtn : 028799 dialog2uchar0to9: 0x7eae 028800 add pdata ,0x30 ,pdata 0x7eaf 028801 rtn : 028807 string2dec_from_uart: 0x7eb0 028808 arg 0 ,temp : 028809 string2dec_from_uart_done: 0x7eb1 028810 copy temp ,regc 0x7eb2 028811 ifetch 1 ,contru 0x7eb3 028812 sub pdata ,at_comma ,null 0x7eb4 028813 rtn zero 0x7eb5 028814 call uchar2dialog 0x7eb6 028815 copy regc ,temp 0x7eb7 028816 call swap 0x7eb8 028817 arg 10 ,regb 0x7eb9 028818 imul32 regb ,pdata 0x7eba 028819 iadd temp ,pdata 0x7ebb 028820 copy pdata ,temp 0x7ebc 028821 branch string2dec_from_uart_done : 028824 mem2_string2hex_from_uart: 0x7ebd 028825 arg 2 ,loopcnt 0x7ebe 028826 branch string2hex_from_uart : 028827 adss_string2hex_from_uart: 0x7ebf 028828 arg 6 ,loopcnt : 028832 string2hex_from_uart: 0x7ec0 028833 ifetch 1 ,contru 0x7ec1 028834 call uchar2dialog 0x7ec2 028835 lshift4 pdata ,regc 0x7ec3 028836 ifetch 1 ,contru 0x7ec4 028837 call uchar2dialog 0x7ec5 028838 iadd regc ,pdata 0x7ec6 028839 istore 1 ,contw 0x7ec7 028840 loop string2hex_from_uart 0x7ec8 028841 rtn : 028843 uchar2dialog: 0x7ec9 028844 arg 0x3a ,temp 0x7eca 028845 isub temp ,null 0x7ecb 028846 nbranch uchar2dialog_number ,positive 0x7ecc 028847 arg 0x61 ,temp 0x7ecd 028848 isub temp ,null 0x7ece 028849 branch uchar2dialog_a2f ,positive 0x7ecf 028850 arg 0x37 ,temp 0x7ed0 028851 isub temp ,pdata 0x7ed1 028852 rtn : 028853 uchar2dialog_number: 0x7ed2 028854 arg 0x30 ,temp 0x7ed3 028855 isub temp ,pdata 0x7ed4 028856 rtn : 028857 uchar2dialog_a2f: 0x7ed5 028858 arg 0x57 ,temp 0x7ed6 028859 isub temp ,pdata 0x7ed7 028860 rtn : 028862 pn9: 0x7ed8 028863 copy temp ,alarm 0x7ed9 028864 setarg 0x1ff 0x7eda 028865 force 0 ,regb : 028866 pn9_loop: 0x7edb 028867 rshift3 pdata ,rega 0x7edc 028868 rshift rega ,rega 0x7edd 028869 ixor rega ,rega 0x7ede 028870 isolate1 0 ,rega 0x7edf 028871 setflag true ,9 ,pdata 0x7ee0 028872 rshift temp ,temp 0x7ee1 028873 isolate1 0 ,pdata 0x7ee2 028874 setflag true ,7 ,temp 0x7ee3 028875 rshift pdata ,pdata 0x7ee4 028876 increase 1 ,regb 0x7ee5 028877 compare 0 ,regb ,0x7 0x7ee6 028878 nbranch pn9_loop ,true 0x7ee7 028879 istoret 1 ,contw 0x7ee8 028880 loop pn9_loop 0x7ee9 028881 copy alarm ,temp 0x7eea 028882 rtn : 028884 bcd_byte: 0x7eeb 028885 div pdata ,10 0x7eec 028886 call wait_div_end 0x7eed 028887 quotient pdata 0x7eee 028888 lshift2 pdata ,rega 0x7eef 028889 lshift2 rega ,rega 0x7ef0 028890 remainder pdata 0x7ef1 028891 ior rega ,pdata 0x7ef2 028892 rtn : 028894 bcd_pack: 0x7ef3 028895 isolate1 0 ,rega 0x7ef4 028896 branch bcd_pack_hi ,true 0x7ef5 028897 iforce regb 0x7ef6 028898 rtn : 028899 bcd_pack_hi: 0x7ef7 028900 lshift2 pdata ,pdata 0x7ef8 028901 lshift2 pdata ,pdata 0x7ef9 028902 ior regb ,pdata 0x7efa 028903 istore 1 ,contw 0x7efb 028904 increase -2 ,contw 0x7efc 028905 rtn : 028907 wait_div_end: 0x7efd 028908 rtn modone 0x7efe 028909 branch wait_div_end : 028912 bcd2: 0x7eff 028913 store 8 ,mem_pdatatemp 0x7f00 028914 force 0x20 ,pdata 0x7f01 028915 force 8 ,loopcnt 0x7f02 028916 arg mem_bcd ,contw : 028917 lpo_clear: 0x7f03 028918 istore 1 ,contw 0x7f04 028919 loop lpo_clear 0x7f05 028920 arg mem_bcd ,contw 0x7f06 028921 increase 7 ,contw 0x7f07 028922 fetch 8 ,mem_pdatatemp : 028923 bcd_loop: 0x7f08 028924 div pdata ,10 0x7f09 028925 call wait_div_end 0x7f0a 028926 remainder pdata 0x7f0b 028927 or_into 0x30 ,pdata 0x7f0c 028928 istore 1 ,contw 0x7f0d 028929 increase -2 ,contw 0x7f0e 028930 quotient pdata 0x7f0f 028931 rtn blank 0x7f10 028932 branch bcd_loop : 028937 bcd: 0x7f11 028938 store 8 ,mem_pdatatemp 0x7f12 028939 force 0 ,pdata 0x7f13 028940 store 8 ,mem_bcd 0x7f14 028941 arg mem_bcd ,contw 0x7f15 028942 increase 7 ,contw 0x7f16 028943 fetch 8 ,mem_pdatatemp 0x7f17 028944 force 0 ,rega : 028945 bcd_pack_loop: 0x7f18 028946 div pdata ,10 0x7f19 028947 call wait_div_end 0x7f1a 028948 remainder pdata 0x7f1b 028949 call bcd_pack 0x7f1c 028950 increase 1 ,rega 0x7f1d 028951 quotient pdata 0x7f1e 028952 sub pdata ,9 ,null 0x7f1f 028953 nbranch bcd_pack_loop ,positive 0x7f20 028954 call bcd_pack 0x7f21 028955 isolate1 0 ,rega 0x7f22 028956 rtn true 0x7f23 028957 istore 1 ,contw 0x7f24 028958 rtn : 028966 string_compare: 0x7f25 028967 ifetch 1 ,rega 0x7f26 028968 ifetcht 1 ,regb 0x7f27 028969 isub temp ,null 0x7f28 028970 nrtn zero 0x7f29 028971 increase 1 ,rega 0x7f2a 028972 increase 1 ,regb 0x7f2b 028973 loop string_compare 0x7f2c 028974 force 0 ,null 0x7f2d 028975 rtn : 028978 ceiling: 0x7f2e 028979 isub temp ,null 0x7f2f 028980 nrtn positive 0x7f30 028981 deposit temp 0x7f31 028982 rtn : 028984 swap: 0x7f32 028985 iadd temp ,pdata 0x7f33 028986 isub temp ,temp 0x7f34 028987 isub temp ,pdata 0x7f35 028988 rtn : 028990 clean_mem: 0x7f36 028991 arg 0x200 ,loopcnt 0x7f37 028992 arg 0x4000 ,contw 0x7f38 028993 branch memset0 : 028995 slave_savelist: 0x7f39 028996 fetch 5 ,mem_sync_clke 0x7f3a 028997 store 5 ,mem_pdatatemp 0x7f3b 028998 fetch 2 ,mem_clks_per_lpo 0x7f3c 028999 istore 2 ,contw 0x7f3d 029000 setarg 0 0x7f3e 029001 setflag match ,7 ,pdata 0x7f3f 029002 setflag wake ,6 ,pdata 0x7f40 029003 setflag sync ,5 ,pdata 0x7f41 029004 setflag attempt ,4 ,pdata 0x7f42 029005 istore 1 ,contw 0x7f43 029006 branch savelist_2 : 029009 le_savelist: 0x7f44 029010 fetch 5 ,mem_sync_clke 0x7f45 029011 store 5 ,mem_pdatatemp 0x7f46 029012 fetch 1 ,mem_le_ch_mapped 0x7f47 029013 istore 1 ,contw 0x7f48 029014 fetch 2 ,mem_le_event_count 0x7f49 029015 arg 0x0fff ,contr 0x7f4a 029016 iand contr ,pdata 0x7f4b 029017 setflag match ,15 ,pdata 0x7f4c 029018 setflag wake ,14 ,pdata 0x7f4d 029019 setflag sync ,13 ,pdata 0x7f4e 029020 setflag attempt ,12 ,pdata 0x7f4f 029021 istore 2 ,contw 0x7f50 029022 branch savelist_2 : 029023 savelist: 0x7f51 029024 store 8 ,mem_pdatatemp : 029025 savelist_2: 0x7f52 029026 fetch 1 ,mem_seqi 0x7f53 029027 rtneq 0x7f 0x7f54 029028 and_into 0x7f ,pdata 0x7f55 029029 lshift3 pdata ,pdata 0x7f56 029030 arg mem_savelist ,contw 0x7f57 029031 iadd contw ,contw 0x7f58 029032 fetch 8 ,mem_pdatatemp 0x7f59 029033 istore 8 ,contw 0x7f5a 029034 fetch 1 ,mem_seqi 0x7f5b 029035 isolate1 7 ,pdata 0x7f5c 029036 increase 1 ,pdata 0x7f5d 029037 and_into 0x7f ,pdata 0x7f5e 029038 setflag true ,7 ,pdata 0x7f5f 029039 store 1 ,mem_seqi 0x7f60 029040 fetch 8 ,mem_pdatatemp 0x7f61 029041 rtn : 029043 dirty_mem: 0x7f62 029044 arg 0x800 ,loopcnt 0x7f63 029045 arg 0 ,contw 0x7f64 029046 setarg 0x01010101 0x7f65 029047 branch memset8 : 029050 callback_func: 0x7f66 029051 rtn blank 0x7f67 029052 copy pdata ,pc : 029055 wait_uarttx: 0x7f68 029056 hfetch 2 ,core_uart_txitems 0x7f69 029057 nbranch wait_uarttx ,blank 0x7f6a 029058 rtn : 029060 get_uart_rrptr: 0x7f6b 029061 hfetch 2 ,core_uart_rrptr 0x7f6c 029062 copy pdata ,contru 0x7f6d 029063 rtn : 029065 get_uart_twptr: 0x7f6e 029066 hfetch 2 ,core_uart_twptr 0x7f6f 029067 copy pdata ,contwu 0x7f70 029068 rtn : 029070 send_mem_to_uart: 0x7f71 029071 copy contr ,rega 0x7f72 029072 call get_uart_twptr 0x7f73 029073 copy rega ,contr : 029074 send_mem_to_uart0: 0x7f74 029075 call uart_copy_tx_bytes 0x7f75 029076 call uartd_send 0x7f76 029077 branch wait_uarttx : 029079 ice_break: 0x7f77 029080 hjam 0x1 ,core_ice_ctrl 0x7f78 029081 rtn : 029083 ice_setbp: 0x7f79 029084 hstore 2 ,core_ice_break0 0x7f7a 029085 hfetch 1 ,core_ice_ctrl 0x7f7b 029086 set1 4 ,pdata 0x7f7c 029087 hstore 1 ,core_ice_ctrl 0x7f7d 029088 rtn : 029089 ice_setbp2: 0x7f7e 029090 hstore 2 ,core_ice_break1 0x7f7f 029091 hfetch 1 ,core_ice_ctrl 0x7f80 029092 set1 6 ,pdata 0x7f81 029093 hstore 1 ,core_ice_ctrl 0x7f82 029094 rtn : 029096 ice_set_write_bp: 0x7f83 029097 hstore 2 ,core_ice_break0 0x7f84 029098 hjam 0x30 ,core_ice_ctrl 0x7f85 029099 rtn : 029101 test_no_white: 0x7f86 029102 hfetch 1 ,core_config 0x7f87 029103 set1 whiteoff_bit ,pdata 0x7f88 029104 hstore 1 ,core_config 0x7f89 029105 rtn : 029107 test_enable_white: 0x7f8a 029108 hfetch 1 ,core_config 0x7f8b 029109 set0 whiteoff_bit ,pdata 0x7f8c 029110 hstore 1 ,core_config 0x7f8d 029111 rtn : 029113 check_uart_tx_buff: 0x7f8e 029114 hfetch 2 ,core_uart_txitems 0x7f8f 029115 arg uart_air_control_threshold ,temp : 029116 pdata_sub_temp: 0x7f90 029117 isub temp ,null 0x7f91 029118 rtn : 029124 fifo_in: 0x7f92 029125 set1 mark_ext_patch ,mark 0x7f93 029126 bpatch patch37_5 ,mem_patch37 0x7f94 029127 ifetcht util_fifo_len ,rega 0x7f95 029128 and temp ,0xff ,pdata 0x7f96 029129 nbranch fifo_in_push ,blank 0x7f97 029130 rshift8 temp ,pdata 0x7f98 029131 istore util_fifo_len ,rega : 029132 fifo_in_push: 0x7f99 029133 increase util_fifo_len + util_fifo_offset ,rega 0x7f9a 029134 ifetch 1 ,rega 0x7f9b 029135 nbranch assert ,blank 0x7f9c 029136 fetch 1 ,mem_fifo_temp 0x7f9d 029137 istore 1 ,rega 0x7f9e 029138 rtn : 029143 fifo_out: 0x7f9f 029144 set1 mark_ext_patch ,mark 0x7fa0 029145 bpatch patch37_6 ,mem_patch37 0x7fa1 029146 arg util_fifo_len ,loopcnt 0x7fa2 029147 ifetch util_fifo_len ,rega 0x7fa3 029148 rtn blank : 029149 fifo_out_loop: 0x7fa4 029150 ifetch 1 ,rega 0x7fa5 029151 nbranch fifo_out_end ,blank 0x7fa6 029152 increase 1 ,rega 0x7fa7 029153 loop fifo_out_loop 0x7fa8 029154 branch assert : 029155 fifo_out_end: 0x7fa9 029156 arg 0 ,temp 0x7faa 029157 istoret 1 ,rega 0x7fab 029158 rtn : 029163 fifo_is_empty: 0x7fac 029164 ifetch util_fifo_len ,rega 0x7fad 029165 rtn : 029170 fifo_is_full: 0x7fae 029171 ifetch 1 ,rega 0x7faf 029172 rtn : 029175 fifo_is_near_full: 0x7fb0 029176 ifetch 2 ,rega 0x7fb1 029177 rtn : 029181 fifo_content_count: 0x7fb2 029182 arg 0 ,temp : 029183 fifo_content_count_loop: 0x7fb3 029184 fetch 1 ,contr 0x7fb4 029185 loop fifo_content_count_loop ,blank 0x7fb5 029186 increase 1 ,temp 0x7fb6 029187 loop fifo_content_count_loop 0x7fb7 029188 copy temp ,pdata 0x7fb8 029189 rtn : 029191 not_greater_than: 0x7fb9 029192 isub temp ,null 0x7fba 029193 nrtn positive 0x7fbb 029194 copy temp ,pdata 0x7fbc 029195 rtn